Re: I did something stupid ?

2004-08-08 Thread Peter
/usr/src/UPDATING. To be short:
make buildworld
make buildkernel KERNCONF=you_kernel
make installkernel KERNCONF=you_kernel
reboot -- I reached that point
and the server simply did not come back to me after the reboot

 I still could not give me info since I still could not login to that
machine :(((

Peter

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Hacker Scans - Advice requested

2004-08-08 Thread Morten Liebach
On 2004-08-08 06:16:19 +0100, Mike Bruce wrote:
 Please can you help me?
  
 I am getting increasingly plagued by this message in my security log on
 my V4 installations of FreeBSD
  
 06:48:53 mail sshd[18617]: Failed password for illegal user admin from
 210.3.4.71 port 39741 ssh2 Aug  7

You're far from alone.  Eg. see:
http://www.securityfocus.com/archive/75/371086/2004-08-05/2004-08-11/1

 Is there any way that this can be prevented without impairing the
 services provided by the operating system.

I only allow publickey/skey logins, so I felt pretty safe, but got tired
of looking at the logs, so I moved the sshd to a random high port.  Then
you can append something like this to ~/.ssh/config:

Host short
Hostname short.verylongdomainname-or-impossibletorememberIP.tld
Port 43462
User your-mom

Now you can just do 'ssh short' and it'll use the right portnumber and
username and dnsname (it could bbe an IP address too).

Or, as another poster said, just firewall it away, or even use a
combination.

Have a nice day
 Morten

-- 
http://m.mongers.org/ -- http://gallery.zentience.org/
__END__
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: burning mp3's

2004-08-08 Thread Olaf Hoyer
On Sat, 7 Aug 2004, dave wrote:

 Hello,
 Simple question probably, i want to burn about 690 mb of mp3's to disk.
 To date i've only used cdrecord to make either audio .wav disks or data
 disks, make an iso, then burn that iso to disk. I'm wondering if there's a
 howto on mp3 burning?

Do you want to burn them as .mp3, so that any application like xmms or
winamp can play them? Then its simply mkisofs/cdrecord, as you already
know. When you want to listen to them in an ordinary CD-Player, well,
you need to convert the mp3 to .wav format first, then burn an audio CD.

I use xmms to write mp3 -wav , simply hit the button on top left, then
choose options, audio i/o-plugins, theres a disk writer plugin similar
to that in winamp.

then: cdrecord -dao -pad ~/BURN/*wav

or similar...

But: be aware that 1 MB of mp3 roughly equaly 10 MB of .wav


HTH
Olaf



-- 
Olaf Hoyer[EMAIL PROTECTED]
Fuerchterliche Erlebniss geben zu raten,
ob der, welcher sie erlebt, nicht etwas Fuerchterliches ist.
(Nietzsche, Jenseits von Gut und Boese)
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


vim 6.3 pthread errors?

2004-08-08 Thread Andreas Ntaflos
Hello, 

quick question: trying to install vim 6.3.15 from the ports with 
support for GTK2 on a FreeBSD 5.2.1-p9 machine by doing a 
portinstall -m WITH_GTK2=YES vim.

Somewhere in the compilation process it borks with these error 
messages (last few lines of output):

 cc  -lXt -L/usr/X11R6/lib -L/usr/local/lib  -o vim objects/buffer.o  
objects/charset.o  objects/diff.o  objects/digraph.o  objects/edit.o  objects/eval.o  
objects/ex_cmds.o  objects/ex_cmds2.o  objects/ex_docmd.o  objects/ex_eval.o  
objects/ex_getln.o  objects/fileio.o  objects/fold.o  objects/getchar.o
objects/if_cscope.o  objects/if_xcmdsrv.o  objects/main.o  objects/mark.o  
objects/memfile.o  objects/memline.o  objects/menu.o  objects/message.o  
objects/misc1.o  objects/misc2.o  objects/move.o  objects/mbyte.o  objects/normal.o  
objects/ops.o  objects/option.o  objects/os_unix.o  objects/pathdef.o  
objects/quickfix.o  objects/regexp.o  objects/screen.o  objects/search.o  
objects/syntax.oobjects/tag.o  objects/term.o  objects/ui.o  objects/undo.o  
objects/window.o  objects/gui.o objects/gui_gtk.o objects/gui_gtk_x11.o  objects/pty.o 
objects/gui_gtk_f.o  objects/gui_beval.o  objects/netbeans.o   
objects/version.o   -Wl,--export-dynamic -L/usr/local/lib -L/usr/X11R6/lib 
-lgtk-x11-2.0 -lgdk-x11-2.0 -lXrandr -lXi -lXinerama -lXcursor -latk-1.0 
-lgdk_pixbuf-2.0 -lm -lpangoxft-1.0 -lXft -lfreetype -lz -lXrender -lXext -lfontconfig 
-lpangox-1.0 -lX11 -lpango-1.0 -lgobject-2.0 -lgmodule-2.0 -lglib-2.0 -liconv -lSM 
-lICE -lXpm -lXt -lX11 -lXdmcp -lSM -lICE -ltermlib -liconv
objects/os_unix.o: In function `get_stack_limit':
objects/os_unix.o(.text+0x3d2): undefined reference to `pthread_attr_init'
objects/os_unix.o(.text+0x3e6): undefined reference to `pthread_attr_get_np'
objects/os_unix.o(.text+0x3fc): undefined reference to `pthread_attr_getstacksize'
objects/os_unix.o(.text+0x40f): undefined reference to `pthread_attr_destroy'
*** Error code 1

What's that? What's missing? Why with all the pthread_ problems? 
What should I do? :-)

I know it worked under 4.10-STABLE with GTK2, why would it break under 5.2?

TIA
-- 
Andreas daff Ntaflos | A cynic is a man who knows the price of
daff AT dword DOT org  | everything, and the value of nothing.
Vienna, AUSTRIA|  Oscar Wilde
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


perl 5.8 on 5.2.1

2004-08-08 Thread dave
Hello,
Is anyone using perl 5.8 on 5.2.1? I do a fresh install, cvsup my ports
and source, install a new world and kernel, get all that working fine, then
do the perl 5.8 install. This goes fine. I then do:
use.perl port
reboot and at the boot menu where i have to select an option 1 for
normal startup etc. my system freezes. Any clues?
Thanks.
Dave.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: perl 5.8 on 5.2.1

2004-08-08 Thread Matthew Seaman
On Sun, Aug 08, 2004 at 06:52:31AM -0400, dave wrote:

 Is anyone using perl 5.8 on 5.2.1? I do a fresh install, cvsup my ports
 and source, install a new world and kernel, get all that working fine, then
 do the perl 5.8 install. This goes fine. I then do:
 use.perl port
 reboot and at the boot menu where i have to select an option 1 for
 normal startup etc. my system freezes. Any clues?

I think that blaming perl for the failure of your system to start up
is probably not correct.  Perl has nothing to do with the early stages
of booting, and your system should certainly be able to get to at
least single-user mode, and I'd be very surprised indeed if you could
use perl to freeze the whole boot process unless you deliberately set
out to do something like that.  You might freeze a single process, but
you can usually just hit Ctrl-C to kill it and carry on booting the
rest of the system.

You don't actually need to reboot after installing perl and running
'use.perl port' -- once you've done that all you need do is restart
any long running perl processes (if any) and you're home and dry.

Without much more detail, like how far through the boot process you
can get and exactly what you see on the screen when the system
freezes, it's going to be impossible to say for certain what the
problem is.  However, at a guess, for problems experienced during boot
I'd be far more suspicious of things like ACPI or APIC.  If something
like that is the problem, you should be able to boot in 'safe mode',
and then look into setting some sysctl(8)s from loader.conf to turn
that functionality on or off during the default boot sequence.  Search
the FreeBSD mailing list archives for examples -- there's been plenty
of discussion on this sort of topic on the freebsd-current list for
example.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgpJ35EKF5r35.pgp
Description: PGP signature


Problems with Sun Java

2004-08-08 Thread liz
Hello!
I'm new user FreeBSD.
I use linux 2 years and know this system very well.
But with FreeDSD i have some problem with Java (
I use j2sdk-1_4_2_05-linux-i586.bin with linux emulator on FreeBSD-4.10.
And my Java not work!!!
How i can work with Sun Java on FreeBSD-4.10???
Accross earlier thanks.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems with Sun Java

2004-08-08 Thread jqdkf
On Sun, Aug 08, 2004 at 07:12:20PM +0700, liz wrote:
 Hello!
 I'm new user FreeBSD.
 I use linux 2 years and know this system very well.
 But with FreeDSD i have some problem with Java (
 I use j2sdk-1_4_2_05-linux-i586.bin with linux emulator on FreeBSD-4.10.
 And my Java not work!!!
 How i can work with Sun Java on FreeBSD-4.10???
 Accross earlier thanks.

You can install it from port:

# cd /usr/ports/java/jdk14
# make install clean

Follow the instructions if you have any problems during the installation.
-- 
Zeng Nan

Simple is Beautiful.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems with Sun Java

2004-08-08 Thread Bill Moran
liz [EMAIL PROTECTED] wrote:

 Hello!
 I'm new user FreeBSD.
 I use linux 2 years and know this system very well.
 But with FreeDSD i have some problem with Java (
 I use j2sdk-1_4_2_05-linux-i586.bin with linux emulator on FreeBSD-4.10.
 And my Java not work!!!
 How i can work with Sun Java on FreeBSD-4.10???

You're likely to get more assistance if you provide detail:
What exact steps did you perform to install Java?
What, exactly, are you trying to do to _use_ java?
What exact error messages do you get when it not work?

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: vim 6.3 pthread errors?

2004-08-08 Thread Uwe Laverenz
On Sun, Aug 08, 2004 at 12:58:34PM +0200, Andreas Ntaflos wrote:

 objects/os_unix.o: In function `get_stack_limit':
 objects/os_unix.o(.text+0x3d2): undefined reference to `pthread_attr_init'
 objects/os_unix.o(.text+0x3e6): undefined reference to `pthread_attr_get_np'
 objects/os_unix.o(.text+0x3fc): undefined reference to `pthread_attr_getstacksize'
 objects/os_unix.o(.text+0x40f): undefined reference to `pthread_attr_destroy'
 *** Error code 1

Yes, same error here on several 5.2.1p9-machines. The build works fine
without GTK2.

cu,
Uwe

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help Debugging Kshell Script???

2004-08-08 Thread David Fleck
Unfortunately, I think the script you attached has been mangled in some 
way or other; it appears to be missing the end of the 'paging_mon' 
function, as well as whatever code invokes that function (and the swap_mon 
function as well).  If I try to run it, I get:

dcf$ ./swap_mon.ksh
\nSwap Space Report for grond.sourballs.org\n
Sun Aug  8 07:31:26 CDT 2004
./swap_mon.ksh: line 85: funtion: command not found
./swap_mon.ksh: line 135: syntax error: unexpected end of file
if I fix the typo (funtion - function) I just get the 'unexpected EOF' 
error.

Both my 4.9 and 5.2.1 systems have /usr/bin/bc, so I assume it is part 
of the base install.  However, neither system has 'lsps', which appears 
to be an AIX command.

--
David Fleck
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: vim 6.3 pthread errors?

2004-08-08 Thread Herbert J. Skuhra
Uwe Laverenz [EMAIL PROTECTED] wrote:
 On Sun, Aug 08, 2004 at 12:58:34PM +0200, Andreas Ntaflos wrote:

 objects/os_unix.o: In function `get_stack_limit':
 objects/os_unix.o(.text+0x3d2): undefined reference to `pthread_attr_init'
 objects/os_unix.o(.text+0x3e6): undefined reference to `pthread_attr_get_np'
 objects/os_unix.o(.text+0x3fc): undefined reference to `pthread_attr_getstacksize'
 objects/os_unix.o(.text+0x40f): undefined reference to `pthread_attr_destroy'
 *** Error code 1

 Yes, same error here on several 5.2.1p9-machines. The build works fine
 without GTK2.

 cu,
 Uwe

The build works fine here if I run:
portinstall -m 'WITH_GTK2=yes WITH_PYTHON=yes' vim

This adds the missing -pthread.

- Herbert
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


piespy on freebsd 4.10-release.

2004-08-08 Thread christian astrup bakke // chasm
hi!

has anyone here successfully installed piespy (link further down) in a
4.10(-release) enviroment? it needs java, and a paragraph on the piespy page
says:

If you run PieSpy in a non-graphical environment (e.g. a Unix console that
does not have access to an X server) you will need to pass the following
command line parameter to java: -Djava.awt.headless=true. Note that PieSpy
may not function properly on FreeBSD. This is because Java on FreeBSD
handles floating point calculations incorrectly.

i indeed plan to use it from the console on my server. neither piespy og
java has been installed at this point, because i'd like some feedback on it
first.

so, what do you guys and girls think? is this floating point calculations
thing still a problem?

++
link til piespy: http://www.jibble.org/piespy/
++

thanks in advance for any input.

--
with regards,
christian astrup bakke // chasm.
http://chasm.nu/ - chasm at chasm dot nu

pgp key id: 0xF0FB7BB7
pgp fp: 9EB1 AA42 1142 2A7C CD24 65CA 584E 537C F0FB 7BB7

(scanned with norton antivirus 2004)


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Security Log Question

2004-08-08 Thread James A. Coulter
Checked /var/log/security this morning and found these entries:

Aug  4 09:00:45 sara /kernel: ipfw: limit 10 reached on entry 500
Aug  5 07:45:38 sara /kernel: drop session, too many entries
Aug  5 17:54:32 sara /kernel: drop session, too many entries
Aug  5 17:55:55 sara last message repeated 9 times
Aug  6 01:56:44 sara /kernel: drop session, too many entries
Aug  6 16:40:05 sara /kernel: drop session, too many entries
Aug  7 13:25:23 sara /kernel: drop session, too many entries
Aug  7 15:32:00 sara /kernel: drop session, too many entries
Aug  7 15:32:03 sara last message repeated 3 times

Can someone please tell this newbie if this something to be concerned about?

Many thanks in advance!

Jim C.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Re[2]: Problems with Sun Java

2004-08-08 Thread Bill Moran
[Keep the mailing list CCed.  I can not answer all your questions, but I'll
help where I can.]

liz [EMAIL PROTECTED] wrote:

 Hello Bill,
 
 Sunday, August 8, 2004, 7:39:07 PM, you wrote:
 
 BM Return-Path: [EMAIL PROTECTED]
 BM Delivered-To: [EMAIL PROTECTED]
 BM Received: from internet.potentialtech.com
 BM (h-66-167-251-6.phlapafg.covad.net [66.167.251.6])
 BM by vega.kvartet.ru (Postfix) with ESMTP id 82A1D1DB129
 BM for [EMAIL PROTECTED]; Sun,  8 Aug 2004 19:37:19 +0700 (NOVST)
 BM Received: from working.potentialtech.com
 BM (pa-plum-cmts1e-68-68-113-64.pittpa.adelphia.net [68.68.113.64])
 BM by internet.potentialtech.com (Postfix) with ESMTP id 5AA9A69A87;
 BM Sun,  8 Aug 2004 08:39:08 -0400 (EDT)
 BM Date: Sun, 8 Aug 2004 08:39:07 -0400
 BM From: Bill Moran [EMAIL PROTECTED]
 BM To: liz [EMAIL PROTECTED]
 BM Cc: [EMAIL PROTECTED]
 BM Subject: Re: Problems with Sun Java
 BM Message-Id: [EMAIL PROTECTED]
 BM In-Reply-To: [EMAIL PROTECTED]
 BM References: [EMAIL PROTECTED]
 BM Organization: Potential Technologies
 BM X-Mailer: Sylpheed version 0.9.12 (GTK+ 1.2.10; i386-portbld-freebsd4.9)
 BM Mime-Version: 1.0
 BM Content-Type: text/plain; charset=US-ASCII
 BM Content-Transfer-Encoding: 7bit
 
 BM liz [EMAIL PROTECTED] wrote:
 
  Hello!
  I'm new user FreeBSD.
  I use linux 2 years and know this system very well.
  But with FreeDSD i have some problem with Java (
  I use j2sdk-1_4_2_05-linux-i586.bin with linux emulator on FreeBSD-4.10.
  And my Java not work!!!
  How i can work with Sun Java on FreeBSD-4.10???
 
 BM You're likely to get more assistance if you provide detail:
 BM What exact steps did you perform to install Java?
 BM What, exactly, are you trying to do to _use_ java?
 BM What exact error messages do you get when it not work?
 
 My install step is
 1) copy j2sdk-1_4_2_05-linux-i586.bin from sun site
 2)#chmod +x j2sdk-1_4_2_05-linux-i586.bin
 3)#./j2sdk-1_4_2_05-linux-i586.bin
 4)set PAHT=/PATH_TO_JAVA_HOME
 5)#java
 Java HotSpot(TM) Client VM warning: Can't detect initial thread stack location
 Usage: java [-options] class [args...]
(to execute a class)
or  java [-options] -jar jarfile [args...]
(to execute a jar file)
 ... and others ...
 
 Can't detect initial thread stack location - what is't???
 
 Still I commin in /usr/ports/java/linux-sun-jdk14
 execute
 #make install clean ...
 ===  linux-sun-jdk-1.4.2.04 You must manually fetch the J2SE SDK self-extracting 
 file for the Linux platform (j2sdk-1_4_2_04-linux-i586.bin) from http://javas
 hoplm.sun.com/ECom/docs/Welcome.jsp?StoreId=22PartDetailId=j2sdk-1.4.2_04-oth-JPRSiteId=JSCTransactionId=noreg,
  place it in /usr/ports/distfiles and then ru
 n make again.

You need to download these files manually, because Sun's licensing requires
that you click on the I agree button on their website prior to downloading
the files.  There are about 4 or so that you have to get like this.  It's
a royal pain, but it's Sun's decision, not FreeBSD's.

 ===  Cleaning for linux_base-7.1_7
 ===  Cleaning for javavmwrapper-1.5
 ===  Cleaning for linux-sun-jdk-1.4.2.04
 But j2sdk-1_4_2_04-linux-i586.bin vulnerable version java and Sun not
 distribute this version!!!

Where did you get that information?  I installed the entire Java platform
for FreeBSD just two days ago and was able to get all the files I needed.
I've not heard/seen any information about vulnerabilites in jdk14.

 I create simple Java Class Hello.java
 public class Hello {
 public static void main(String[] args) {
 System.out.println(FreeBSD do you like Java???);
 }
 }
 Compile this
 #javac Hello.java
 And Java Compiler say this:
 Java HotSpot(TM) Client VM warning: Can't detect initial thread stack location
 All right interpretive this simple class
 #java Hello
 Java HotSpot(TM) Client VM warning: Can't detect initial thread stack location
 FreeBSD do you like Java???
 
 Well starting Tomcat-5.0.27
 #startup.sh
 Using CATALINA_BASE:   /usr/local/java/jakarta-tomcat-5.0.27
 Using CATALINA_HOME:   /usr/local/java/jakarta-tomcat-5.0.27
 Using CATALINA_TMPDIR: /usr/local/java/jakarta-tomcat-5.0.27/temp
 Using JAVA_HOME:   /usr/local/java/j2sdk1.4.2_05
 #nmap localhost
 Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2004-08-08 20:14 NOVST
 Interesting ports on localhost (127.0.0.1):
 (The 1656 ports scanned but not shown below are in state: closed)
 PORT STATE SERVICE
 22/tcp   open  ssh
 53/tcp   open  domain
 8080/tcp open  http-proxy --- apparently default tomcat ;)
 Then load / webserver page
 #lynx http://localhost:8080
 HTTP request sent; waiting for response.
 A ;) hereabout heard of it tomcat...
 View tomcat logs
 #vim /usr/local/java/jakarta-tomcat-5.0.27/logs/catalina.out
 Java HotSpot(TM) Client VM warning: Can't detect initial thread stack location
 Aug 8, 2004 8:14:01 PM org.apache.coyote.http11.Http11Protocol init
 INFO: Initializing Coyote HTTP/1.1 on 

make command to fetch a new index

2004-08-08 Thread Gerard Seibert
I thought I saw a tip in this newsgroup awhile ago about using 'make'
to fetch a fresh copy of the index file. I cannot remember what the
exact syntax was for the command. I thought it was 'make fetch_index',
however that does not work correctly. Would someone be so kind as to
refresh my memory on this?

Thanks!

Gerard E. Seibert
[EMAIL PROTECTED]

I never make mistakes. I thought I did once, but I was wrong.

Anonymous


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blackberry Sendmail

2004-08-08 Thread Jim Durham
On Tuesday 03 August 2004 02:50 pm, Mike Hogsett wrote:
 This is not entirely on-topic for the FreeBSD list (except my
 mail server is FreeBSD).

 Does anyone know of a solution to allow secure mail forwarding to a
 blackberry similar to the enterprise solutions for MS exchange,
 and Lotus Notes?

Sorry I'm late in replying, but I don't read this list much any more due to 
time constraints...8-) .

I guess I don't quite understand the question, not having any experience with 
either system's secure mail forwarding. We have several executives with 
Blackberrys and no complaints.

What I do is use procmail and put in a rule that delivers to the person's 
blackberry address and then continues to deliver to the default mailbox 
in /var/mail.

In ~/.procmailrc

:0 c
! [EMAIL PROTECTED]

:0
${default}



To do this, you set up procmail from ports and then rewrite the sendmail.mc 
file to use procmail as the local deliver agent.

Since the mail is plain text anyway, I don't understand the 'secure' 
question..

Hope this helps..

-JIm
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: make command to fetch a new index

2004-08-08 Thread Matthew Seaman
On Sun, Aug 08, 2004 at 10:23:29AM -0400, Gerard Seibert wrote:
 I thought I saw a tip in this newsgroup awhile ago about using 'make'
 to fetch a fresh copy of the index file. I cannot remember what the
 exact syntax was for the command. I thought it was 'make fetch_index',
 however that does not work correctly. Would someone be so kind as to
 refresh my memory on this?

# make fetchindex

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgp1Wnim7qO9I.pgp
Description: PGP signature


Re: Help Debugging Kshell Script???

2004-08-08 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
David,
I appologize you are correct the script I sent you is a version of the
same script that I am working on for an AIX machine.  Attached is an
unencrypted version of the script for System V: BSD/Linux machines.
This is the error it is giving me and I'm not sure why I am getting this
error?

[EMAIL PROTECTED] sys_admin]$ ./swap_mon.ksh~
\nSwap Space Report for redgate.ath.cx\n
Sun Aug  8 00:03:48 EDT 2004
(standard_in) 3: illegal character: O
(standard_in) 3: parse error
(standard_in) 3: illegal character: O
(standard_in) 3: parse error
\nTotal Amount of Swap Space:\t494MB
Total KB of Swap Space Used:\t23MB
Total KB of Swap Space Free:\t471MB
\nPercent of Swap Space Used:\t4.6500%
\nPercent of Swap Space Free:\t95.3400%
\n
#
I need some help figuring out why bc is giving me such a hard time. I'm
almost positive my syntax is correct. This is where I think the problem
begins (and possibly ends) in the script:
#
do
# Use the bc utility in a here document to calculate the percentage of
# free and used swap space
PERCENT_USED=$(bc EOF
scale=4
($SW_USED / $SW_TOTAL) * 100
EOF
)
PERCENT_FREE=$(bc EOF
scale=4
($SW_FREE / $SW_TOTAL) * 100
EOF
)
##
Thanks for your help in advance.
HZS
David Fleck wrote:
| Unfortunately, I think the script you attached has been mangled in some
| way or other; it appears to be missing the end of the 'paging_mon'
| function, as well as whatever code invokes that function (and the
| swap_mon function as well).  If I try to run it, I get:
|
| dcf$ ./swap_mon.ksh
| \nSwap Space Report for grond.sourballs.org\n
| Sun Aug  8 07:31:26 CDT 2004
| ./swap_mon.ksh: line 85: funtion: command not found
| ./swap_mon.ksh: line 135: syntax error: unexpected end of file
|
| if I fix the typo (funtion - function) I just get the 'unexpected EOF'
| error.
|
| Both my 4.9 and 5.2.1 systems have /usr/bin/bc, so I assume it is part
| of the base install.  However, neither system has 'lsps', which appears
| to be an AIX command.
|
|
| --
| David Fleck
| [EMAIL PROTECTED]
|
| ___
| [EMAIL PROTECTED] mailing list
| http://lists.freebsd.org/mailman/listinfo/freebsd-questions
| To unsubscribe, send any mail to
| [EMAIL PROTECTED]
|
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBFkiclT9WV6TztkoRAngzAJ4jtRcnE5ZkANyZOM9ORxb+scnMNACeJFVf
JzNrpFMIjSw0NfpxOgyT13U=
=sXLe
-END PGP SIGNATURE-
##
#! /usr/bin/ksh   
###
#  CREATED_BY: Hakim Z. Singhji
###
#  SCRIPT:  swap_mon.zsh  
###
#  DATE:  8/4/04  
###
#  VERSION: 0.1   
###
#  PLATFORM: Linux Only   
###
#  PURPOSE:  This shell script is used to produce a report of the system's swap 
#space statistics including: Total paging space in MB, MB of free 
#paging space, MB of used pagine space, % of paging space used and 
#% of paging space free
###
#  REV LIST:

#  set -x  # Uncomment to debug this shell script
#  set -n  # Uncomment to check command syntax without any execution

###
# DEFINE VARIABLES HERE ###

THISHOST=$(hostname)# Host name of this machine
PC_LIMIT=65 # Upper limit of Swap space percentage before 
# notification 

###
# INITIALIZE THE REPORT ###

echo \nSwap Space Report for $THISHOST\n
date

###
# CAPTURE AND PROCESS DATE 

free -m | grep -i swap | while read junk 

Re: vim 6.3 pthread errors?

2004-08-08 Thread Andreas Ntaflos
On Sun, Aug 08, 2004 at 03:21:23PM +0200, Herbert J. Skuhra wrote:
 Uwe Laverenz [EMAIL PROTECTED] wrote:
  On Sun, Aug 08, 2004 at 12:58:34PM +0200, Andreas Ntaflos wrote:
 
  objects/os_unix.o: In function `get_stack_limit':
  objects/os_unix.o(.text+0x3d2): undefined reference to `pthread_attr_init'
  objects/os_unix.o(.text+0x3e6): undefined reference to `pthread_attr_get_np'
  objects/os_unix.o(.text+0x3fc): undefined reference to `pthread_attr_getstacksize'
  objects/os_unix.o(.text+0x40f): undefined reference to `pthread_attr_destroy'
  *** Error code 1
 
  Yes, same error here on several 5.2.1p9-machines. The build works fine
  without GTK2.

It does indeed, but I don't like gvim+GTK1 very much (looks ugly if
you ask me).

 The build works fine here if I run:
 portinstall -m 'WITH_GTK2=yes WITH_PYTHON=yes' vim
 
 This adds the missing -pthread.

Great, WITH_PYTHON did the trick, now it built fine and uses
GTK2.

Very nice, thanks!
-- 
Andreas daff Ntaflos | A cynic is a man who knows the price of
daff AT dword DOT org  | everything, and the value of nothing.
Vienna, AUSTRIA|  Oscar Wilde
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Hacker Scans - Advice requested

2004-08-08 Thread Eric Crist
 -Original Message-
 From: Mike Bruce [mailto:[EMAIL PROTECTED]
 Sent: Sunday, August 08, 2004 7:32 AM
 To: 'Eric Crist'
 Subject: RE: Hacker Scans - Advice requested


 Many thanks Eric

 I've looked through the documentation and it is not entirely
 clear how to do this, but at least I have a starting point.

 Mike

Mike,

If you checkout the user manual on the FreeBSD website, you should find
an entire section on setting up a firewall.  From there, you just need
to create a coule of rules to block/accept the ip blocks that you want.
Pretty simple process.  Start with the user documentation on the site,
and we can help you from there.

Eric F Crist


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


4.10-STABLE

2004-08-08 Thread Ryan
Needing some help here,

I'm experincing compatibility issues with Perl and trying
to reinstall ports/src but Sysinstall has tryed alot of ftp mirrors even the main one 
and it says Warning: Can't find the `4.0-STABLE` distribution on this FTP server.

I cant download anything under Distribtutions in Sysinstall. Is this a unrelated issue 
or is there more to this then i know of.. I went to 4.0-Stable, cause its the latest 
4.X branch distro.

Perl: What ever i do, perl5.8/perl5 always builds as a incomplete broken distro with 
one test failing with Taint.. No idea what it is, but planing on reading it source 
code.


Anways any and all help is greatly needed..
Thanks
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Hacker Scans - Advice requested

2004-08-08 Thread Wojciech Puchar

 Is there any way that this can be prevented without impairing the
 services provided by the operating system.

they check passwords from dictionary etc.

my advice (i did the same, while i've got scans for guest and test):

make such account with very simple one word password home /nonexistent and
shell script as shell saying smile, hidden camera is watching you.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help Debugging Kshell Script???

2004-08-08 Thread David Fleck
On Sun, 8 Aug 2004, Hakim Z. Singhji wrote:
I appologize you are correct the script I sent you is a version of the
same script that I am working on for an AIX machine.  Attached is an
unencrypted version of the script for System V: BSD/Linux machines.
Now I get this error:
Swap Space Report for grond.sourballs.org
Sun Aug  8 13:25:18 CDT 2004
new.ksh[79]: free: not found
and indeed, I can't find a 'free' command on 4.9, 5.2.1, or in ports - 
just the 'free' (3) system call.  What are you using here?

--
David Fleck
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Perl5

2004-08-08 Thread Ryan
t/op/substr...ok
t/op/sysiook
t/op/taintFAILED at test 150
t/op/tie..ok
t/op/tiearray.ok

Any idea's?
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: NAT trouble

2004-08-08 Thread Björn Lindström
JJB [EMAIL PROTECTED] writes:

 A new rewrite of the FreeBSD handbook firewall section is currently
 being made ready for update to the handbook. You can get an
 in-process copy from  www.a1poweruser.com/FBSD_firewall/

 For more help post complete contents of your rc.conf, ppp.conf, ipfw
 rules, dmesg.boot, ppp.log, files along with description of how you
 are connected to the public internet.

Thanks you. Thanks to that page, I'm a bit closer to a solution, I
think.

I have arrived at the following ipfw.rules, based on the last example on
that page:



ipfw.rules
Description: Binary data

Here are the resulting output of 'ipfw list', for good measure:



ipfw.list
Description: Binary data

The only significant changes I've made are to how DNS is allowed. It
would be nice to hear if those rules look ok.

Now, what that is missing is examples on how to get NAT port forwarding
working. I've been playing around with that, based on what I can figure
out from the natd man page, with no success.

Here are the rest of the relevant configuration/log files:



rc.conf
Description: Binary data


ppp.conf
Description: Binary data


ppp.log
Description: Binary data

And here's the natd.conf file. Hopefully you can give me some pointers
on what's wrong with my port forwarding attempts from there.



natd.conf
Description: Binary data

(I couldn't locate any dmesg.boot file.)


Thanks for all your help, 

Björn
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Dynalink tablet (AceCad) pointer initialization problem

2004-08-08 Thread Hans Lambermont
Hi,

I have a serial Dynalink pen tablet (which in fact is an AceCad tablet),
with initialization problems. I must change my XFree86-4 XF86Config to

Option ProtocolAuto

then start X, try the pen and wait for /var/log/XFree86.0.log to report

(II) Mouse autoprobe: selecting MMSeries protocol

Then I can exit X, switch the protocol Auto in XF86Config back into

Option ProtocolMMSeries

start X again and all is fine. Until the next reboot that is.

If I do not use this trick to get things right the pointer immediately
goes to the upper left corner and stays there. The buttons all work OK.

This is on 5.2.1-RELEASE, with XFree86-4.3.0,1 (and
XFree86-Server-4.3.0_14 , XFree86-clients-4.3.0_8 ,
XFree86-libraries-4.3.0_7)

The relevant XF86Config sections are:

Section InputDevice
Identifier  Pen1
Driver  mouse
Option ProtocolMMSeries
#Option ProtocolAuto
Option Device /dev/cuaa1
Option BaudRate   9600
Option FlowControl None
EndSection

and

Section ServerLayout
...
InputDevice Pen1  AlwaysCore
...
EndSection

Adding things like
Option Vmin 1
Option Vtime 0
Option Parity Odd
Option DataBits 8
Option StopBits 1
or
Option Parity None
Option DataBits 8
Option StopBits 2
to the InputDevice section does not help in initializing the tablet.

I also modified rc.d/serial to set cuaia1 and cuala1 to 9600 baud
(copying the mouse example of 1200 baud) but this does not help.

I have no idea what to try next. Anyone ?

regards,
   Hans Lambermont
-- 
http://lambermont.webhop.org/ () ASCII-ribbon campaign against vCards,
  /\ HTML-mail and proprietary formats.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: make command to fetch a new index

2004-08-08 Thread Julian D. Seifert
On Sun, 08 Aug 2004 10:23:29 -0400
Gerard Seibert [EMAIL PROTECTED] wrote:

 I thought I saw a tip in this newsgroup awhile ago about using 'make'
 to fetch a fresh copy of the index file. I cannot remember what the
 exact syntax was for the command. I thought it was 'make fetch_index',
 however that does not work correctly. Would someone be so kind as to
 refresh my memory on this?
 
 Thanks!
 
 Gerard E. Seibert
 [EMAIL PROTECTED]
 
 I never make mistakes. I thought I did once, but I was wrong.
 
   Anonymous
 
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

sometimes grep is very helpfull ;)

cd /usr/ports/  grep -ie fetch Makefile

-- 
Every rule has an exception, except the rule of exceptions.
gpg fingerprint: 
9C05 DC4C EB33 627F 13F9  98FF D651 8413 1279 7C75



pgpBjgTrAYmvJ.pgp
Description: PGP signature


RE: IPFW/NATD Transparent Proxy

2004-08-08 Thread JJB
A new rewrite of the FreeBSD handbook firewall section is currently
being made ready for update to the handbook. You can get an
in-process copy from  www.a1poweruser.com/FBSD_firewall/




From what you posted looks like you want public internet users to
access web server on one of your LAN machines. Both ipfw and
ipfilter does this normally with port redirect. You need to post
more info about your system config.
Post the full contents of your rc.conf and  firewall rules files.

The limit you write about ipfilter is not true.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
[EMAIL PROTECTED]
Sent: Sunday, August 08, 2004 2:11 PM
To: [EMAIL PROTECTED]
Subject: IPFW/NATD Transparent Proxy


Anyone up for a challenge?

I've come to the conclusion that IPFW/NATD cannot support
transparent
proxying with ONLY stateful rules.  I'd like to hear from anyone who
has
been successful doing so in case I'm missing something.

Configuration is:
FreeBSD 5.2.1
3 - NICS (de0, de1, de2)
de1 = Public IP = 1.2.3.4
de2 = LAN1 = 192.168.1.0
de3 = LAN2 = 192.168.2.0

The challenge:
1) TCP request from 192.168.1.247 to 1.2.3.4:80
2) Redirect 1.2.3.4:80 to 192.168.2.250:80
3) Use stateful rules

On another note, I read somewhere on the Internet that IPFILTER has
a
limitation in that it cannot redirect a public destination to a
private
destination if the source machine is on the same subnet as the
redirected
destination.  In other words, the following supposedly will not
work:
1) A tcp request from 192.168.1.247 to 1.2.3.4:80
2) Redirect 1.2.3.4:80 to 192.168.1.100:80

Is this an accurate limitation of IPFILTER?



J

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: burning mp3's

2004-08-08 Thread Miguel Cardenas
  Simple question probably, i want to burn about 690 mb of mp3's to
  disk. To date i've only used cdrecord to make either audio .wav disks or
  data disks, make an iso, then burn that iso to disk. I'm wondering if
  there's a howto on mp3 burning?

 Do you want to burn them as .mp3, so that any application like xmms or
 winamp can play them? Then its simply mkisofs/cdrecord, as you already
 know. When you want to listen to them in an ordinary CD-Player, well,
 you need to convert the mp3 to .wav format first, then burn an audio CD.

There are some mp3 players like a 'discman' that are able to play mp3 music 
(plus normal CDs and VCDs)... I guess it was the question, not to burn an ISO 
with mp3 files or convert mp3 music to wav/44100:16:stereo format... I've 
never tried one of those players of CDs with mp3... but anyway, I'd like to 
ask...

Is there a format specific to burn CDs with mp3 that are playable by such 
devices? or it is a normal and simple ISO with mp3 files together maybe in a 
single root directory?

Thanks and sorry for the question instead an answer :D

Regards.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help Debugging Kshell Script???

2004-08-08 Thread horio shoichi
On Sun, 08 Aug 2004 11:37:01 -0400
Hakim Z. Singhji [EMAIL PROTECTED] wrote:

 do
 # Use the bc utility in a here document to calculate the percentage of
 # free and used swap space
 
 PERCENT_USED=$(bc EOF
 scale=4
 ($SW_USED / $SW_TOTAL) * 100
 EOF
 )
 
 PERCENT_FREE=$(bc EOF
 scale=4
 ($SW_FREE / $SW_TOTAL) * 100
 EOF
 )
 ##

Which ksh are you running (/usr/local/bin/ksh{,93)) ?

If you are really new to this sort of things, test them interactively
with 'set -ux' options.


horio shoichi

BTW., it gave me a thing like this on 4.9-STABLE with /usr/local/bin/ksh.


% ksh
$ SW_USED=1
$ SW_TOTAL=3
$ PERCENT_USED=$(bc EOF
 scale=4
 ($SW_USED / $SW_TOTAL) * 100
 EOF
 )
$ echo $PERCENT_USED
33.3300
$ ^D
%

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IPFW/NATD Transparent Proxy

2004-08-08 Thread mailist

On Sunday 08 August 2004 04:38 pm, JJB wrote:
 A new rewrite of the FreeBSD handbook firewall section is currently
 being made ready for update to the handbook. You can get an
 in-process copy from  www.a1poweruser.com/FBSD_firewall/

The firewall rewrite only deals with a single public nic and a single
internal nic and does not have the information I require.  

 From what you posted looks like you want public internet users to
 access web server on one of your LAN machines. Both ipfw and
 ipfilter does this normally with port redirect.

No, I want a user on 192.168.1.247 to be redirected to 192.168.2.250:80 when 
they request 1.2.3.4:80, where 1.2.3.4 is a PUBLIC ip number on the FreeBSD 
internet gateway.  Again, the configuration is
de0 = PUBLIC IP = 1.2.3.4
de1 = 192.168.1.1
de2 = 192.168.2.1

I don't have a problem with incoming requests for 1.2.3.4:80 from the Internet 
being redirected to 192.168.2.250.  That works fine.  But I want someone on 
192.168.1.247 to ALSO be redirected to 192.168.2.250:80 when they request the 
public address 1.2.3.4:80.

Put another way, I have a FreeBSD server acting as a Router/Firewall.  It has 
a public interface with an IP number of 1.2.3.4 and is assigned the DNS name 
www.ishouldhaveusedipfilter.com.  It also has a second NIC that supports a 
private address space of 192.168.1.0/255.255.255.0 and a third NIC that 
supports a private address space of 192.168.2.0/255.255.255.0

When someone from the Internet tries to reach www.ishouldhaveusedipfilter.com 
they get redirected to 192.168.2.250 because I've included a redirect_port 
rule for NATD.  This works fine.  But, users on all private networks (I have 
two, but there could be 20) also need to be redirected to 192.168.2.250 when 
they try to go to www.ishouldhaveusedipfilter.com   So the user sitting at 
192.168.1.247 shouldn't have to worry about putting in the IP number of the 
company web server, they should just be able to put in the company domain 
name (www.ishouldhaveusedipfilter.com) and be redirected to 192.168.2.250 
just like anyone coming from the outside.

 You need to post
 more info about your system config.
 Post the full contents of your rc.conf and  firewall rules files.

My rc.conf file is properly configured and has no bearing on my question.  My 
gateway works fine from public to private IP space and private to public IP 
space.  I've tried so many combination of rules and NATD options that I 
wouldn't know what to post.  What I need is someone who has completed a 
similar configuration to send me their configuration (change the IP numbers
if you like).  From what I can see, I don't believe this is possible with 
stateful rules.  Let me add that I've been successful with stateless rules, 
but I'd like to use 100% stateful if possible.


 The limit you write about ipfilter is not true.




 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of
 [EMAIL PROTECTED]
 Sent: Sunday, August 08, 2004 2:11 PM
 To: [EMAIL PROTECTED]
 Subject: IPFW/NATD Transparent Proxy


 Anyone up for a challenge?

 I've come to the conclusion that IPFW/NATD cannot support
 transparent
 proxying with ONLY stateful rules.  I'd like to hear from anyone who
 has
 been successful doing so in case I'm missing something.

 Configuration is:
 FreeBSD 5.2.1
 3 - NICS (de0, de1, de2)
 de1 = Public IP = 1.2.3.4
 de2 = LAN1 = 192.168.1.0
 de3 = LAN2 = 192.168.2.0

 The challenge:
 1) TCP request from 192.168.1.247 to 1.2.3.4:80
 2) Redirect 1.2.3.4:80 to 192.168.2.250:80
 3) Use stateful rules

 On another note, I read somewhere on the Internet that IPFILTER has
 a
 limitation in that it cannot redirect a public destination to a
 private
 destination if the source machine is on the same subnet as the
 redirected
 destination.  In other words, the following supposedly will not
 work:
 1) A tcp request from 192.168.1.247 to 1.2.3.4:80
 2) Redirect 1.2.3.4:80 to 192.168.1.100:80

 Is this an accurate limitation of IPFILTER?



 J

 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Hacker Scans - Advice requested

2004-08-08 Thread Chris
Eric Crist wrote:
-Original Message-
From: Mike Bruce [mailto:[EMAIL PROTECTED]
Sent: Sunday, August 08, 2004 7:32 AM
To: 'Eric Crist'
Subject: RE: Hacker Scans - Advice requested
Many thanks Eric
I've looked through the documentation and it is not entirely
clear how to do this, but at least I have a starting point.
Mike

Mike,
If you checkout the user manual on the FreeBSD website, you should find
an entire section on setting up a firewall.  From there, you just need
to create a coule of rules to block/accept the ip blocks that you want.
Pretty simple process.  Start with the user documentation on the site,
and we can help you from there.
Eric F Crist
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Something like this:
# Allow in SFTP, SSH, and SCP from Internet
${fwcmd} add 090 pass log tcp from 123.123.123.123/xx to ${ip} 22 setup 
limit src-addr 4

--
Best regards,
Chris
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: IPFW/NATD Transparent Proxy

2004-08-08 Thread Eric Crist
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of
 [EMAIL PROTECTED]
 Sent: Sunday, August 08, 2004 5:43 PM
 To: [EMAIL PROTECTED]
 Subject: Re: IPFW/NATD Transparent Proxy



 On Sunday 08 August 2004 04:38 pm, JJB wrote:
  A new rewrite of the FreeBSD handbook firewall section is currently
  being made ready for update to the handbook. You can get an
 in-process
  copy from  www.a1poweruser.com/FBSD_firewall/

 The firewall rewrite only deals with a single public nic and
 a single internal nic and does not have the information I require.

  From what you posted looks like you want public internet users to
  access web server on one of your LAN machines. Both ipfw
 and ipfilter
  does this normally with port redirect.

 No, I want a user on 192.168.1.247 to be redirected to
 192.168.2.250:80 when
 they request 1.2.3.4:80, where 1.2.3.4 is a PUBLIC ip number
 on the FreeBSD
 internet gateway.  Again, the configuration is
   de0 = PUBLIC IP = 1.2.3.4
   de1 = 192.168.1.1
   de2 = 192.168.2.1

 I don't have a problem with incoming requests for 1.2.3.4:80
 from the Internet
 being redirected to 192.168.2.250.  That works fine.  But I
 want someone on
 192.168.1.247 to ALSO be redirected to 192.168.2.250:80 when
 they request the
 public address 1.2.3.4:80.


Could you send us (or me, peronally) your firewall script, and the
address you want to use?

Thanks.

Eric F Crist


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


DHCP help

2004-08-08 Thread Peter Barton
Hello -
I have been struggling with my DHCP connection for quite some time and even 
though my interent search yielded some information that I used, the whole 
thing still won't work. My problem is that my dhclient never finds any DHCP 
servers on the Comcast network. The default dhclient that came with the 
installation simply times out, the other one that I 'make installed' 
according to the info posted at 
http://networking.ringofsaturn.com.Unix/ipnatdfirewall.php keeps complaining 
about my subnet(s). I would greatly appreciate any help, I have spent a lot 
of time on this without any luck.

Thanks,
Peter
Here's my rc.conf
# -- sysinstall generated deltas -- # Sat Jul 17 06:31:46 2004
# Created: Sat Jul 17 06:31:46 2004
# Enable network daemons for user convenience.
# Please make all changes to this file, not to /etc/defaults/rc.conf.
# This file now contains just the overrides from /etc/defaults/rc.conf.
linux_enable=YES
moused_enable=YES
usbd_enable=YES
natd_enable=YES
natd_flags=-s -u -m
firewall_enable=YES
firewall_quiet=NO
firewall_logging_enable=YES
firewal_type=open
gateway_enable=YES
ifconfig_rl0=inet 192.168.254.1 up netmask 255.255.255.0
ifconfig_rl1=DHCP
#defaultrouter=192.168.1.1
hostname=bsd.peterbohm.com

Here's my dmesg.boot
Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 5.1-RELEASE #0: Sun Aug  8 13:47:14 MDT 2004
   [EMAIL PROTECTED]:/usr/src/sys/i386/compile/RIPPER
Preloaded elf kernel /boot/kernel/kernel at 0xc068f000.
Timecounter i8254  frequency 1193182 Hz
Timecounter TSC  frequency 448054907 Hz
CPU: Pentium III/Pentium III Xeon/Celeron (448.05-MHz 686-class CPU)
 Origin = GenuineIntel  Id = 0x673  Stepping = 3
 
Features=0x383f9ffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real memory  = 134217728 (128 MB)
avail memory = 123297792 (117 MB)
Pentium Pro MTRR support enabled
npx0: math processor on motherboard
npx0: INT 16 interface
pcibios: BIOS version 2.10
Using $PIR table, 9 entries at 0xc00edd10
pcib0: Intel 82443BX (440 BX) host to PCI bridge at pcibus 0 on 
motherboard
pci0: PCI bus on pcib0
agp0: Intel 82443BX (440 BX) host to PCI bridge mem 0x4400-0x47ff 
at device 0.0 on pci0
pcib1: PCIBIOS PCI-PCI bridge at device 1.0 on pci0
pci1: PCI bus on pcib1
pci1: display, VGA at device 0.0 (no driver attached)
rl0: RealTek 8139 10/100BaseTX port 0x2400-0x24ff mem 
0x4110-0x411000ff irq 11 at device 15.0 on pci0
rl0: Realtek 8139B detected. Warning, this may be unstable in autoselect 
mode
rl0: Ethernet address: 00:50:22:e3:b5:9d
miibus0: MII bus on rl0
rlphy0: RealTek internal media interface on miibus0
rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
rl1: RealTek 8139 10/100BaseTX port 0x2800-0x28ff mem 
0x4120-0x412000ff irq 11 at device 16.0 on pci0
rl1: Realtek 8139B detected. Warning, this may be unstable in autoselect 
mode
rl1: Ethernet address: 00:50:22:e3:b4:76
miibus1: MII bus on rl1
rlphy1: RealTek internal media interface on miibus1
rlphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
isab0: PCI-ISA bridge at device 20.0 on pci0
isa0: ISA bus on isab0
atapci0: Intel PIIX4 UDMA33 controller port 0x2020-0x202f at device 20.1 
on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
uhci0: Intel 82371AB/EB (PIIX4) USB controller port 0x2000-0x201f irq 11 
at device 20.2 on pci0
usb0: Intel 82371AB/EB (PIIX4) USB controller on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
pci0: bridge, PCI-unknown at device 20.3 (no driver attached)
orm0: Option ROMs at iomem 0xe-0xe7fff,0xc-0xc7fff on isa0
pmtimer0 on isa0
atkbdc0: Keyboard controller (i8042) at port 0x64,0x60 on isa0
atkbd0: AT Keyboard flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
psm0: PS/2 Mouse irq 12 on atkbdc0
psm0: model IntelliMouse, device ID 3
fdc0: Enhanced floppy controller (i82077, NE72065 or clone) at port 
0x3f7,0x3f0-0x3f5 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: 1440-KB 3.5 drive on fdc0 drive 0
ppc0: Parallel port at port 0x378-0x37f irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
ppbus0: Parallel port bus on ppc0
plip0: PLIP network interface on ppbus0
lpt0: Printer on ppbus0
lpt0: Interrupt-driven port
ppi0: Parallel I/O on ppbus0
sc0: System console at flags 0x100 on isa0
sc0: VGA 16 virtual consoles, flags=0x300
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
vga0: Generic ISA VGA at port 0x3c0-0x3df iomem 0xa-0xb on isa0
unknown: PNP0401 can't assign resources (port)
unknown: PNP0501 can't assign resources (port)
unknown: PNP0501 

Re: DHCP help

2004-08-08 Thread Josh Paetzel
On Sunday 08 August 2004 18:10, Peter Barton wrote:
 Hello -

 I have been struggling with my DHCP connection for quite some time
 and even though my interent search yielded some information that I
 used, the whole thing still won't work. My problem is that my
 dhclient never finds any DHCP servers on the Comcast network. The
 default dhclient that came with the installation simply times out,
 the other one that I 'make installed' according to the info posted
 at
 http://networking.ringofsaturn.com.Unix/ipnatdfirewall.php keeps
 complaining about my subnet(s). I would greatly appreciate any
 help, I have spent a lot of time on this without any luck.

 Thanks,
 Peter


 Here's my rc.conf

 # -- sysinstall generated deltas -- # Sat Jul 17 06:31:46 2004
 # Created: Sat Jul 17 06:31:46 2004
 # Enable network daemons for user convenience.
 # Please make all changes to this file, not to
 /etc/defaults/rc.conf. # This file now contains just the overrides
 from /etc/defaults/rc.conf.

 linux_enable=YES
 moused_enable=YES
 usbd_enable=YES
 natd_enable=YES
 natd_flags=-s -u -m
 firewall_enable=YES
 firewall_quiet=NO
 firewall_logging_enable=YES
 firewal_type=open
 gateway_enable=YES

 ifconfig_rl0=inet 192.168.254.1 up netmask 255.255.255.0
 ifconfig_rl1=DHCP

 #defaultrouter=192.168.1.1
 hostname=bsd.peterbohm.com


Perhaps you have the cables for rl0 and rl1 reversed?

Thanks, 

Josh Paetzel
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DHCP help

2004-08-08 Thread Thomas
On Monday 09 August 2004 01:10, Peter Barton wrote:
 Hello -

 I have been struggling with my DHCP connection for quite some time and even
 though my interent search yielded some information that I used, the whole
 thing still won't work. My problem is that my dhclient never finds any DHCP
 servers on the Comcast network. The default dhclient that came with the
 installation simply times out, the other one that I 'make installed'
 according to the info posted at
 http://networking.ringofsaturn.com.Unix/ipnatdfirewall.php keeps
 complaining about my subnet(s). I would greatly appreciate any help, I have
 spent a lot of time on this without any luck.

 Thanks,
 Peter

snip

Peter,

What exactly do you mean, complaining about your subnet(s)? Try starting 
dhclient with the -v option, and post the output please.

I recently had similar problems with FreeBSD 5.2.1. My network card was 
working fine, dhclient kept sending out DHCPDISCOVER packets, but no offers 
were received. The problem was caused by my cable modem: it cached the MAC 
address of the NIC of my regular computer, and when I plugged in my FreeBSD 
box things went wrong because it had another NIC. The problem was solved by 
clearing the cache of my cable modem. On most cable modems this can be 
accomplished by yanking out the power supply, waiting 10 seconds, and 
plugging it back in ;) .

I hope this helps,
Thomas
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


backup via dump to remote machine(5.2.1)

2004-08-08 Thread Brian Driscoll
Not sure if you've got an answer on this yet ... but better late than 
never ... as I just had to figure this out today.

This answer applies if you executing your dump command as root.
dumping to a remote tape drive involves using rmt.  rmt is executed via 
rsh on the remote.  By default many systems don't allow root access via 
rsh out of the box.  On Red Hat Linux you can enable it by adding the 
line rsh (without the quotes) to /etc/securetty.  This file contains 
the devices that root is allowed to logon.

Note enabling root access via rsh could open a security hole on your 
machine unless its well protected.  So understand the ramifications of 
this change before applying it.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IPFW/NATD Transparent Proxy

2004-08-08 Thread Pat Lashley
--On Sunday, August 08, 2004 18:43:21 -0400 [EMAIL PROTECTED] wrote:
No, I want a user on 192.168.1.247 to be redirected to 192.168.2.250:80 when
they request 1.2.3.4:80, where 1.2.3.4 is a PUBLIC ip number on the FreeBSD
internet gateway.  Again, the configuration is
de0 = PUBLIC IP = 1.2.3.4
de1 = 192.168.1.1
de2 = 192.168.2.1
I don't have a problem with incoming requests for 1.2.3.4:80 from the Internet
being redirected to 192.168.2.250.  That works fine.  But I want someone on
192.168.1.247 to ALSO be redirected to 192.168.2.250:80 when they request the
public address 1.2.3.4:80.
Put another way, I have a FreeBSD server acting as a Router/Firewall.  It has
a public interface with an IP number of 1.2.3.4 and is assigned the DNS name
www.ishouldhaveusedipfilter.com.  It also has a second NIC that supports a
private address space of 192.168.1.0/255.255.255.0 and a third NIC that
supports a private address space of 192.168.2.0/255.255.255.0
When someone from the Internet tries to reach www.ishouldhaveusedipfilter.com
they get redirected to 192.168.2.250 because I've included a redirect_port
rule for NATD.  This works fine.  But, users on all private networks (I have
two, but there could be 20) also need to be redirected to 192.168.2.250 when
they try to go to www.ishouldhaveusedipfilter.com   So the user sitting at
192.168.1.247 shouldn't have to worry about putting in the IP number of the
company web server, they should just be able to put in the company domain
name (www.ishouldhaveusedipfilter.com) and be redirected to 192.168.2.250
just like anyone coming from the outside.
It seems to me that the best way to handle this is through DNS.  Hosts
within your LAN should find www.ishouldhaveusedipfilter.com to 192.168.2.250
instead of 1.2.3.4.
Typically, you would have an externally visible DNS server which is authorititave
for your domain; and which lists only the publicly visible machines and IP addresses.
(It should -NOT- handle referrals at all.)  Somewhere within your LAN you would have
another DNS server that is authoritative for your internal domain and IP range.  It
may handle referrals; but it is safer to have a completely separate DNS server which
just handles referrals (and possibly caches results) - it should be explicitly told
to use your LAN's authoritative server for your domain and IP range.
With this setup, outside machines see the public address, which is redirected
via your firewall/NAT rules; but internal machines see the internal address and
access it directly.
-Pat
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: file system setup for new system - recommendations?

2004-08-08 Thread stheg olloydson
it was said:

snip
Today I sent an order
 to Newegg for 
 a second Seagate 120GB drive ($101.05 including tax
  shipping). 

snip

 Now to learn more about grofs(8); I wasn't aware of
 that 
 capability at all. I was one of the first users of
 CP/M and 
 begrudgingly went to DOS; I was a power user of
 DOS for years. 

snip

Hello,

If you are going to use multiple drives, look into
vinum(8). It is can effectively do what growfs(8)
does, but in a much more powerful way and gives you a
plethora of additional features.

HTH,

Stheg

P.S. I loved CP/M! MS-DOS is derived from it, a
rather sordid story there



__
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


re: DHCP help

2004-08-08 Thread stheg olloydson
it was said: 

snip

My problem is that my dhclient never finds any DHCP 
servers on the Comcast network. The default dhclient
that came with the 
installation simply times out, the other one that I
'make installed' 


snip


Mounting root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
WARNING: /tmp was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
/var: mount pending error: blocks 4 files 1
/var: superblock summary recomputed

snip

Hello,

I don't know if Comcast still requires users to
register their mac address(es) in order to connect,
but I know they used to.
BTW, I infer from your dmesg output that you're not
cleanly shutting down. Naughty, naughty! Remember, 
shutdown(8) is your friend.

HTH,

Stheg



__
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: file system setup for new system - recommendations?

2004-08-08 Thread Darren Crotchett
I'm not as experienced as many others on this list, some of whom have already 
given you their advice.  But, I have used FreeBSD for many years and will 
gladly share what I think I have figured out about these topics with you.

Your planned usage sounds alot like the way I use FreeBSD.  I use it as a mail 
server, Mailman list server, Samba file server and a web server for my 
personal use.  All I can say about a 120GB is, that's a ton of space.  I 
have been using somewhere around 10G with about 40% free for years.  I 
recently upgraded my failing SCSI drive with a 20G IDE.  And, I have plenty 
of space for doing what I want to do (and what it sounds like you want to 
do).  The only thing that I wish I had was more room to do backups.  But, as 
someone else mentioned, you really don't have to backup anything other your 
config files and your personal data (unless you want to backup other boxes to 
it).

Now, about dividing it up.  I can speak from experience that you want /var on 
its own partition.  It is where alot of log files and public ftp space goes.  
If it fills up, you can easily recover from it.  And, mine has done it.  
Don't worry too much about monitoring that.  You will get a nice email from 
your box telling you if /var filled up.

The other directory that tends to grow is /usr.  This is where all of 
your /home, /www and /ports directories are.  In other words, you put alot of 
stuff in /usr.  I never put anything in /root.  So, once the system is built 
it is nearly 100% static.

I hardly have to touch my FreeBSD box.  It pretty much just runs and runs.  
So, whenever I do something like add a drive or replace a drive or something 
like that, I always have to go back and re-read up on how to do it.  So, I 
would recommend that whenever you use programs that you don't tend to use 
very often like disklabel to partition or newfs, make good notes to yourself 
and keep them somewhere like /usr/local/www/HOWTO.

One more suggestion.  Make learning portupgrade one of your first tasks.  It's 
a little awkward at first.  But, keeping your box up to date and adding new 
programs is easier that way.

Finally, back to what you really wanted to know, since you have plenty of 
space, I would do something like what I have (see below) but with a 
larger /usr and an additional /backup partition that was large enough to do 
your backups (roughly the size of /usr + cushion).  Notice that my / is only 
52M,  /tmp is 3.8M and /var is 81M.  My /hd2 is a small scsi drive that I do 
backups on.  And, /usr is where I use all of my space.  So, if you doubled my 
/, /tmp and /var and split the remainder between /backup and /usr, I 
think you would be in good shape.  Oh, and BTW, my /usr wouldn't be so big if 
it just contained FreeBSD stuff.  But, I copied all of my mp3's from my 
Windows box there for backup reasons.  I think that accounts for close to 4G 
of the 5.5G it is using.

scsibox# df -h
FilesystemSize   Used  Avail Capacity  Mounted on
/dev/ad0s1a   190M52M   123M30%/
/dev/da0s1e   3.5G   339M   2.9G10%/hd2
/dev/ad0s1e   139M   3.8M   124M 3%/tmp
/dev/ad0s1g18G11G   5.5G67%/usr
/dev/ad0s1f   242M81M   142M36%/var

Good luck.

Darren



On Friday 06 August 2004 07:29 pm, Jay O'Brien wrote:
 I'm confused, and I ask for your collective help.

 I successfully built a FreeBSD system using defaults. It works fine,
 so far. I will start over and rebuild the system now, carefully
 documenting each step. I will make some changes the second time. What
 I have right now is not mission critical, I'm just using it to learn.

 I've learned that I need another partition to which I can write tar
 backups and then ftp them to one of my windows machines on my LAN. So,
 I've tried to identify the optimum configuration for the rebuild of my
 machine to accommodate that need. I have a 120GB IDE HD, so I don't have
 space problems. I presently have 128MB of RAM, but it looks like I
 should plan to accommodate an increase to 1024GB in the future.

 I plan to host a few web pages, and hope to be able to ultimately run
 a MTA and mail lists using majordomo or mailman in the future. I have
 static IPs and permission to run a server on my internet access.

 I've tried to absorb input from the FreeBSD on-line handbook, from Greg
 Lehey's The Complete FreeBSD, and from Michael Lucases' Absolute BSD.
 What I read either conflicts or I just can't comprehend. Maybe I shouldn't
 have tried to compare these sources?

 A Reference says keep the root section small, another says include /usr and
 /var in root, there's a discussion of the relative speed of the outside of
 a spinning HD to the middle of the HD, there's not an agreement on the
 size of the swap space, and, as I said, I'm confused.

 Here's where I am, and I would appreciate your collective comments. I'm
 persuaded to use 1026MB for swap, 8GB for root (/), 30GB for /backup tars,
 and the remainder for /home.  The 

Wait 15 seconds for SCSI to settle

2004-08-08 Thread ashadul hoque
Hello everyone,

I have installed FreeBSD5.2.1-RELEASE on Vmware.

When booting I am seeing the message Wait 15 seconds for SCSI to settle.

The problem is I am not using any SCSI device on my virtual machine. I 
tried sysctl kern.cam.scsi_delay=100 but no improvement.

Can anyone give me pointer on how to reduce boot time by reducing the 
delay. 
I want to squeeze maximum performance out of this setting. So, any pointer 
to the right direction will be appreciated.


regards
Ashadul
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: gutted

2004-08-08 Thread Minimalist Manager
ERROR:
Bad syntax or unknown instruction.

SOLUTION:

This is the Minimalist Mailing List Manager.

Commands may be either in subject of message (one command per message)
or in body (one or more commands, one per line). Batched processing starts
when subject either empty or contains command 'body' (without quotes) and
stops when either arrives command 'stop' or 'exit' (without quotes) or
gets 10 incorrect commands.

Supported commands are:

subscribe list [email] :
Subscribe user to list. If list contains suffix '-writers', user
will be able to write to this list, but will not receive messages
from it.

unsubscribe list [email] :
Unsubscribe user from list. Can be used with suffix '-writers' (see
above description for subscribe)

auth code :
Confirm command, used in response to subscription requests in some cases.
This command isn't standalone, it must be used only in response to a
request by Minimalist.

mode list email mode :
Set mode for specified user on specified list. Allowed only for
administrator. Mode can be (without quotes):
  * 'reader' - read-only access to the list for the user;
  * 'writer' - user can post messages to the list regardless of list's
   status
  * 'usual' -  clear any two above mentioned modes
  * 'suspend' - suspend user subscription
  * 'resume' - resume previously suspended permission
  * 'maxsize size' - set maximum size (in bytes) of messages, which
   user wants to receive
  * 'reset' - clear all modes for specified user

suspend list :
Stop receiving of messages from specified mailing list

resume list :
Restore receiving of messages from specified mailing list

maxsize list size :
Set maximum size (in bytes) of messages, which user wants to receive

which [email] :
Return list of lists to which user is subscribed

info [list] :
Request information about all existing lists or about list

who list :
Return the list of users subscribed to list

help :
This message

Note, that commands with email, 'who' and 'mode' can only be used by
administrators (users identified in the 'mailfrom' authentication scheme or
who used a correct password - either global or local). Otherwise command will
be ignored. Password must be supplied in the first line of the message body
in the following format:

*password: list_password

followed by any number of empty rows. This line, of course, will be removed
from the message before sending message to subscribers.

-- 
Sincerely, the Minimalist

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Wait 15 seconds for SCSI to settle

2004-08-08 Thread Sean Countryman
The bad news:  Recompile your kernel
The good news:  Just change this line:
options SCSI_DELAY=5000  #Delay (in ms) before 
probing SCSI

You really just need to eliminate anything (the DEVICE lines) that is 
not needed across the whole config file.  Read the LINT file for a full 
list of all available options

If you don't know how to recompile your kernel, it's actually pretty 
straightforward, just repost to the list and I (and probably many 
others) will be willing to help you out.

- Sean

ashadul hoque wrote:
Hello everyone,
I have installed FreeBSD5.2.1-RELEASE on Vmware.
When booting I am seeing the message Wait 15 seconds for SCSI to settle.
The problem is I am not using any SCSI device on my virtual machine. I 
tried sysctl kern.cam.scsi_delay=100 but no improvement.

Can anyone give me pointer on how to reduce boot time by reducing the 
delay. 
I want to squeeze maximum performance out of this setting. So, any pointer 
to the right direction will be appreciated.

regards
Ashadul
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IPFW/NATD Transparent Proxy

2004-08-08 Thread mailist

de0 = 1.2.3.4 (make up any valid public ip) (mydomain.com)
de1 = 192.168.1.1
de2 = 192.168.2.1

When 192.168.1.247 requests a web page from MYDOMAIN.COM
the request needs to be forwarded to 192.168.2.250:80

In the ruleset below, 15100 is required for this to work.  If I pull out
15100 I get no response from the web page because there is no rule to allow 
1.2.3.4 back out to 192.168.1.247.  I can't find a solution that does not 
require an explicit rule to allow 1.2.3.4 back out to 192.168.1.247.  In 
other words, I can't find a set of rules that allows dynamic setup of
192.168.1.247: - 1.2.3.4:80
192.168.1.247: - 192.168.2.250:80

I hope this information helps.  Thanks in advance for pointing me in the right 
direction.

IPFW RULES
==
00100 divert 9000 log ip from any to any
00200 allow log ip from any to any out via de0 keep-state
00300 skipto 15000 log ip from any to any via de1
00400 skipto 2 log ip from any to any via de2
00500 deny log ip from any to any
15000 allow log ip from any to any in via de1 keep-state
15100 allow log ip from any to any out via de1
15200 deny log ip from any to any
2 allow log ip from any to any in via de2 keep-state
20100 allow log ip from any to any dst-port 80 out via de2 keep-state
20200 deny log ip from any to any
20300 deny log ip from any to any


NATD Config File (/etc/natd.conf)
redirect_port tcp 192.168.2.250:80 1.2.3.4:80

NATD Command
/sbin/natd -dynamic -n de0 -p 9000 -f /etc/natd.conf



On Sunday 08 August 2004 06:30 pm, Eric Crist wrote:
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of
  [EMAIL PROTECTED]
  Sent: Sunday, August 08, 2004 5:43 PM
  To: [EMAIL PROTECTED]
  Subject: Re: IPFW/NATD Transparent Proxy
 
  On Sunday 08 August 2004 04:38 pm, JJB wrote:
   A new rewrite of the FreeBSD handbook firewall section is currently
   being made ready for update to the handbook. You can get an
 
  in-process
 
   copy from  www.a1poweruser.com/FBSD_firewall/
 
  The firewall rewrite only deals with a single public nic and
  a single internal nic and does not have the information I require.
 
   From what you posted looks like you want public internet users to
   access web server on one of your LAN machines. Both ipfw
 
  and ipfilter
 
   does this normally with port redirect.
 
  No, I want a user on 192.168.1.247 to be redirected to
  192.168.2.250:80 when
  they request 1.2.3.4:80, where 1.2.3.4 is a PUBLIC ip number
  on the FreeBSD
  internet gateway.  Again, the configuration is
  de0 = PUBLIC IP = 1.2.3.4
  de1 = 192.168.1.1
  de2 = 192.168.2.1
 
  I don't have a problem with incoming requests for 1.2.3.4:80
  from the Internet
  being redirected to 192.168.2.250.  That works fine.  But I
  want someone on
  192.168.1.247 to ALSO be redirected to 192.168.2.250:80 when
  they request the
  public address 1.2.3.4:80.

 Could you send us (or me, peronally) your firewall script, and the
 address you want to use?

 Thanks.

 Eric F Crist

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Wait 15 seconds for SCSI to settle

2004-08-08 Thread uidzero
ashadul hoque wrote:
Hello everyone,
I have installed FreeBSD5.2.1-RELEASE on Vmware.
When booting I am seeing the message Wait 15 seconds for SCSI to settle.
The problem is I am not using any SCSI device on my virtual machine. I 
tried sysctl kern.cam.scsi_delay=100 but no improvement.

Can anyone give me pointer on how to reduce boot time by reducing the 
delay. 
I want to squeeze maximum performance out of this setting. So, any pointer 
to the right direction will be appreciated.

regards
Ashadul
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
 

Look in your kernel config fiile for this line:
options SCSI_DELAY=15000#Delay (in ms) before probing SCSI
and comment it out.
Michael
--
Michael D. Whities
[EMAIL PROTECTED]
http://www.one-arm.com
--
There are four colors of hats to watch for: 
Black, White, Grey, and Red.

The meanings are: 
Cracker, Hacker, Guru, and Victim.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: file system setup for new system - recommendations?

2004-08-08 Thread David Kelly
On Aug 8, 2004, at 9:04 PM, Darren Crotchett wrote:
The other directory that tends to grow is /usr.  This is where all of
your /home, /www and /ports directories are.  In other words, you put 
alot of
stuff in /usr.  I never put anything in /root.  So, once the system is 
built
it is nearly 100% static.
What I have suggested is that one move /home to its own filesystem out 
of /usr so that user data is not intermingled with OS and utilities.

Uh, you know /root/ is the superuser's home directory and not the same 
thing as the root directory '/', right?  :-)

/root/ is not a bad place to put a few little things such as a list of 
critical files to feed to tar -cI to backup one's specific 
configuration. /root/ *is* on the / partition so you don't want to put 
much there.

--
David Kelly N4HHE, [EMAIL PROTECTED]

Whom computers would destroy, they must first drive mad.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Wait 15 seconds for SCSI to settle

2004-08-08 Thread David Kelly
On Aug 8, 2004, at 10:12 PM, ashadul hoque wrote:
Hello everyone,
I have installed FreeBSD5.2.1-RELEASE on Vmware.
When booting I am seeing the message Wait 15 seconds for SCSI to 
settle.

The problem is I am not using any SCSI device on my virtual machine. I
tried sysctl kern.cam.scsi_delay=100 but no improvement.
Can anyone give me pointer on how to reduce boot time by reducing the
delay.
*Something* looks to the kernel like a SCSI interface else this 
wouldn't happen.

sysctl kern.cam.scsi_delay=100 isn't going to do any good because its 
applied after the kernel has loaded and the SCSI delay is long past. 
Maybe it would work (without the sysctl prefix) if placed in 
/boot/loader.conf but the foolproof brute force fix is to create a new 
kernel configuration and change this line, then build/install a new 
kernel. (example out of GENERIC):

optionsSCSI_DELAY=15000#Delay (in ms) before probing SCSI
If one is really sweating for maximum performance then one would 
already be building custom kernels stripped of the devices one does not 
have.

--
David Kelly N4HHE, [EMAIL PROTECTED]

Whom computers would destroy, they must first drive mad.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: file system setup for new system - recommendations?

2004-08-08 Thread Darren Crotchett
On Sunday 08 August 2004 10:36 pm, David Kelly wrote:


 Uh, you know /root/ is the superuser's home directory and not the same
 thing as the root directory '/', right?  :-)

Yeah.  When I got to the end of my email and had to type / again, I thought 
I had accidentally written /root when I meant / earlier.  I looked for the 
mistake and didn't see it.  So, yeah.  I know the difference.  My bad.

My apologies if I confused Jay.


 /root/ is not a bad place to put a few little things such as a list of
 critical files to feed to tar -cI to backup one's specific
 configuration. /root/ *is* on the / partition so you don't want to put
 much there.

 --
 David Kelly N4HHE, [EMAIL PROTECTED]
 
 Whom computers would destroy, they must first drive mad.

 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


bootinst

2004-08-08 Thread Dmitri Voronenko
Hello,
I'm having difficulty with installing boot loader. I'm getting message 
error 204 updating boot record when i run bootinst from msdos. could 
you pleas help me to interpret that error and point me in the right 
direction on how to solve it.

kind regards
Dmitri
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


kernel preemption in 5.2.x

2004-08-08 Thread Marc Cabanatuan
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
Just curious about kernel preemption on a single CPU x86
machine...Wondering if it's usable/worth it and how to enable it
at the kernel config level. Is it included in as part of SMP?
Thanks,
marc
- --
Marc Cabanatuan [EMAIL PROTECTED]
Network and Systems Administrator
A+, Net+, Linux+, CCNA, MCP
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBFwR3QXmDWC9ByjIRAoXSAJ9XKQ/55p7dunhb5B/RCWwyHNWzDQCfbDxs
PI986oY8ftvvDNt9+trlv0Q=
=6q7H
-END PGP SIGNATURE-
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: file system setup for new system - recommendations?

2004-08-08 Thread Jay O'Brien
Darren Crotchett wrote:

 On Sunday 08 August 2004 10:36 pm, David Kelly wrote:
 
 
Uh, you know /root/ is the superuser's home directory and not the same
thing as the root directory '/', right?  :-)
 
 
 Yeah.  When I got to the end of my email and had to type / again, I thought 
 I had accidentally written /root when I meant / earlier.  I looked for the 
 mistake and didn't see it.  So, yeah.  I know the difference.  My bad.
 
 My apologies if I confused Jay.
 

I wasn't confused, because I didn't know about /root/ until David called 
my attention to it. So not confused, and now better educated.

And Darren, thanks for your take on how to allocate my storage. I haven't 
put the final figures on it yet, I'm waiting for my backup HD.

Jay

 
/root/ is not a bad place to put a few little things such as a list of
critical files to feed to tar -cI to backup one's specific
configuration. /root/ *is* on the / partition so you don't want to put
much there.

--
David Kelly N4HHE, [EMAIL PROTECTED]



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Swappable Hard drives?

2004-08-08 Thread Jay O'Brien
Soon I will have two identical 120GB IDE HDs in my FBSD 4.10 
system. One is to be basically a backup drive. Can I write a 
MBR to the second HD and then swap cables when I want to 
boot/run the system from the backup HD, assuming I've used pax 
or dump to make the file systems identical? The normal 
configuration will be both drives installed, but I would like 
to be able to swap the cables (or change the boot sequence in 
the BIOS) and boot off of the second HD.

Both drives will be masters on different IDE controllers.

There will be no other operating system on the computer, but 
in the future I hope to use samba to copy files in and out to 
Windows XP Pro computers on my LAN.

Jay O'Brien


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]