Re: IP Filter on FreeBSD 5.2.1

2004-09-08 Thread Wayne Pascoe
On Tue, Sep 07, 2004 at 05:50:59PM -0400, Paul Mather wrote:
 20030925:
   Configuring a system to use IPFILTER now requires that PFIL_HOOKS
   also be explicitly configured.  Previously this dependency was
   magically handled through some cruft in net/pfil.h; but that has
   been removed.  Building a kernel with IPFILTER but not PFIL_HOOKS
   will fail with obtuse errors in ip_fil.c.
 
 
 (It's a good idea to look in /usr/src/UPDATING before updating your
 system.)

Fair enough - to a point. I only look for things that apply to my
system when reading UPDATING... things that have changed since my last
update. In september 2003, I wouldn't have read the ipfilter related
stuff, because I wasn't using ipfilter at that time.

When I do the update now, I just look for changes since my last update,
which won't go back to 2003, so again I won't see that ipfilter entry.
Then I go looking on the web for a HOWTO to install ipfilter on FreeBSD
5.2.1 - which I found, but it didn't mention this.

I'm sure someone won't mind including a single line in a howto because
that then turns it into a definitive reference, that doesn't require
referencing twoo locations.

Regards,

-- 
Wayne Pascoe(gpg --keyserver www.co.uk.pgp.net --recv-keys 79A7C870)
It could be dangerous... A lot of killing...
and violence. You wanna come?
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IP Filter on FreeBSD 5.2.1

2004-09-08 Thread Paul Mather
On Wed, 2004-09-08 at 02:12, Wayne Pascoe wrote:
 On Tue, Sep 07, 2004 at 05:50:59PM -0400, Paul Mather wrote:
  20030925:
  Configuring a system to use IPFILTER now requires that PFIL_HOOKS
  also be explicitly configured.  Previously this dependency was
  magically handled through some cruft in net/pfil.h; but that has
  been removed.  Building a kernel with IPFILTER but not PFIL_HOOKS
  will fail with obtuse errors in ip_fil.c.
  
  
  (It's a good idea to look in /usr/src/UPDATING before updating your
  system.)
 
 Fair enough - to a point. I only look for things that apply to my
 system when reading UPDATING... things that have changed since my last
 update. In september 2003, I wouldn't have read the ipfilter related
 stuff, because I wasn't using ipfilter at that time.

But it's always a good rule of thumb that when faced with a kernel/world
build failure to go back and take a closer look through UPDATING for
something you might have missed.  It could be argued that this would
also apply if you were enabling a feature (or adding a piece of
hardware) not previously used before.

 I'm sure someone won't mind including a single line in a howto because
 that then turns it into a definitive reference, that doesn't require
 referencing twoo locations.

I believe I misunderstood your original posting.  I'd thought you were
going to apprise the FreeBSD developer responsible for ipfilter that
people should be told they needed the PFIL_HOOKS option.  From the
above, it appears it's the howto author that is the intended recipient. 
Mea culpa!

The unfortunate thing about definitive references, though, is that
when push comes to shove, UPDATING will take precedence.  In the case of
PFIL_HOOKS, it has vanished as an option under 6.0-CURRENT (though it
was present for a while, IIRC)...

Cheers,

Paul.
-- 
e-mail: [EMAIL PROTECTED]

Without music to decorate it, time is just a bunch of boring production
 deadlines or dates by which bills must be paid.
--- Frank Vincent Zappa

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: amd64

2004-09-08 Thread Toni Schmidbauer
On Tue, Sep 07, 2004 at 12:50:55PM -0700, ann kok wrote:
 I can't install cvsup-without-gui and said it doesn't
 support amd64

http://people.freebsd.org/~peter/cvsup-without-gui-16.1h.tbz

a simple google query would have revealed that link

hth,
toni
-- 
Wer es einmal so weit gebracht hat, dass er nicht | toni at stderror dot at
mehr irrt, der hat auch zu arbeiten aufgehoert| Toni Schmidbauer
-- Max Planck |


pgpW4dT7x9fb2.pgp
Description: PGP signature


RE: Tar pitting automated attacks

2004-09-08 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Mike Galvez
 Sent: Tuesday, September 07, 2004 6:42 AM
 To: [EMAIL PROTECTED]
 Subject: Tar pitting automated attacks
 
 
 Is there a method to make this more expensive to the attacker, 
 such as tar-pitting?
 

No.  These days attackers use distributed networks of cracked PCs
to launch attacks.  The vast bulk of these attacks is automated.
The cracker merely feeds in a job and pushes it to his network to
work away at.  Most of the time the cracker spends is in adding new
machines that have vulnerabilities into his distributed network of
cracked PCs

If you successfully erect a network block, the cracker's software
will just go to the next IP in the sequence to attack.  Your actually
doing more damage to the cracker's distributed network by your SSH
server patiently saying no, no, no, no, no, no, etc. for 20-50 thousand
times, because that ties the cracked PC up for a lot longer just working
away at your system.  I presume of course that you aren't using guessible
passwords and you have everything patched to current levels.

if you want to do damage to the attacker, you need to
make a good effort at reporting the source IP numbers to the netblock
managers the IP is part of.  Granted, 3/4 of the time the netblock
managers won't do anything about it.  But whenever they do, it usually
takes that cracked PC out of the distributed network.  That is what
costs the cracker because then the cracker has to expend 
work replacing it with another cracked PC.

But, it is a lot like trying to pick up spilled spaghetti with tweezers.
There's so many cracked PC's out there that as soon as you get one
taken down, there's plenty more where that came from.

Now, if you REALLY want to damage the attacker, you throw the works at
the IP numbers that are scanning you, and find the back door that the
cracker is using on those hosts, then go in and hard-code the homepage
on their web broswer to something like http://www.fuckyou.com, making sure
to use one of those cracker programs that makes it impossible for them
to change it back.  That is usually sufficient to get the owner of the
cracked PC off their lazy ass to get their machine cleaned up.

Ted
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: MP3 Audio CD Burning

2004-09-08 Thread Miles Keaton
On Tue, 7 Sep 2004 22:25:02 -0500, Brian Finniff
[EMAIL PROTECTED] wrote:
 Is it possible to burn a CD from an .MP3 file? If so, how would I do that?


You need to install sox:
cd /usr/ports/audio/sox ; make install clean

Then I wrote this little PHP script that seems to work well:

# go through each file in directory
$d = dir($directory);
while($file = $d-read())
{
# switch file extention (mp3, wav, flac)
$ext = substr(strrchr($file, '.'), 1);
$file = shellescape($file);
switch($ext)
{
# lame + sox  to decode mp3
case 'mp3':
$cmd = 'lame --decode ' . $directory . $file .
' ' . $directory . $file . '.wav';
exec($cmd);
$cmd = 'sox ' . $directory . $file . '.wav -t
raw -s -w -c 2 ' . $directory . $file . '.raw';
exec($cmd);
$cmd = 'rm ' . $directory . $file . '.wav';
exec($cmd);
break;
# flac + sox to decode flac
case 'flac':
$cmd = 'flac --decode ' . $directory . $file .
' -o ' . $directory . $file . '.wav';
exec($cmd);
$cmd = 'sox ' . $directory . $file . '.wav -t
raw -s -w -c 2 ' . $directory . $file . '.raw';
exec($cmd);
$cmd = 'rm ' . $directory . $file . '.wav';
exec($cmd);
break;
# wav is ready to sox
case 'wav':
$cmd = 'sox ' . $directory . $file . ' -t raw
-s -w -c 2 ' . $directory . $file . '.raw';
exec($cmd);
break;
}
}
$d-close();

# list them in order, to make burncd command-line
$rawfiles = shell_exec('ls -l1 ' . $directory . '*.raw');
$filenames = explode(\n, trim($rawfiles));
# escape 'em all
foreach($filenames as $key=$value)
{
$filenames[$key] = shellescape($value);
}
print_r($filenames);

# burn (and eject)
$cmd = 'burncd -dne -f /dev/acd0c -s max audio ' . join(' ', $filenames);
exec($cmd);
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BSD display

2004-09-08 Thread Subhro
Harald,

Well I don't want to get into any courtsy controversies or licensing
gimmicks. But what the steve said has a good point. Lets think it that
way that just a casual onlooker cant make out what OS and version is
running on the box. It makes the life of a cracker just a little more
difficult. However more promising guyz and galz can find it out
anyway.

Regards
S.


On Wed, 8 Sep 2004 05:52:30 +0200, Harald Schmalzbauer
[EMAIL PROTECTED] wrote:
 Am Mittwoch, 8. September 2004 05:41 schrieb steveb99:
 
  I don't like the OS name and version displayed with logging to ssh or
 
 Best would be to use anythig else which you like.
 And after that you could read your offending mail again and sitting ashamed in
 the corner for a loong loong time
 
  other areas. Where to I eliminate or change the text of the message
  being displayed?
 
 Nowhere! That's one of the things you have to keep if you're using
 BSD-Licensed code :)
 
 Alternatively you're welcome to contribute youre code!
 
 -Harry
 
 
 
 
  Steve Barnette
 
  ___
  [EMAIL PROTECTED] mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to
  [EMAIL PROTECTED]
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 



-- 
Subhro Sankha Kar
School of Information Technology
Block AQ-13/1 Sector V
ZIP 700091
India
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Retrieving audio from memory

2004-09-08 Thread Nikos Vassiliadis
The file's data will be intact 'till kaboodle close(2)s the file. So
check which files kaboodle has opened with fstat -p pid_of_kaboodle.
The field SZ (size) will help you identify the file, and what you actually
need is the INUM (inode number) field. I guess then you can use fsdb
to try to recover the file, but bad things may happen...

from fsdb(8)
WARNING
 Use this tool with extreme caution--you can damage an FFS file system
 beyond what fsck(8) can repair.

Of course you should first experiment with fsdb on a new just_for_testing 
filesystem.

Hope this helps, NikV

On Monday 06 September 2004 04:05, clayton rollins wrote:
 OK, funny one.

 I accidentally deleted a media file... However, I did have the file
 opened in kaboodle.

 The file appears to be intact in memory; I can listen to it from
 start to finish. Kaboodle, unfortunately, doesn't have any save
 feature, so that's out.

 I'm wondering if there is some way I could hack in and read
 the file out of memory. (I have root access, and am comfortable
 with reading directly from memory.)

 Lacking that, is there any tool that could capture the audio
 as it plays out the card?

 Though I worry about loss of audio quality, looping the
 sound card output back to an input might be a possibility.
 Anyone have ideas on that?

 TIA,
 Clayton

 PS. please CC...

 _
 On the road to retirement? Check out MSN Life Events for advice on how to
 get there! http://lifeevents.msn.com/category.aspx?cid=Retirement

 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Retrieving audio from memory

2004-09-08 Thread Nikos Vassiliadis
Perhaps i should 've checked your mail's date before posting

On Monday 06 September 2004 04:05, clayton rollins wrote:
 OK, funny one.

 I accidentally deleted a media file... However, I did have the file
 opened in kaboodle.

 The file appears to be intact in memory; I can listen to it from
 start to finish. Kaboodle, unfortunately, doesn't have any save
 feature, so that's out.

 I'm wondering if there is some way I could hack in and read
 the file out of memory. (I have root access, and am comfortable
 with reading directly from memory.)

 Lacking that, is there any tool that could capture the audio
 as it plays out the card?

 Though I worry about loss of audio quality, looping the
 sound card output back to an input might be a possibility.
 Anyone have ideas on that?

 TIA,
 Clayton

 PS. please CC...

 _
 On the road to retirement? Check out MSN Life Events for advice on how to
 get there! http://lifeevents.msn.com/category.aspx?cid=Retirement

 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Vinum Concat Data Recovery

2004-09-08 Thread Thomas Spreng
Hi,

I have made concat drive using 3 hard disks using vimum vm. Some weeks
ago one of those 3 disks crashed completely (bios can't even detect it
anymore). My question now is: is there any chance to recover the data
that resides on the 2 (working) remaining disks?

I cant provide more info than the config file since the disks are not in
my server anymore atm.


Thanks

---
vinum.conf:

drive a device /dev/ad6s1e
drive b device /dev/ad4s1e
drive c device /dev/ad5s1e
volume storage
 plex org concat
   sd length 78528m drive a
   sd length 58643m drive b
   sd length 58643m drive c


PS: I've searched the archives but I didnt find a satisfactory answer.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pam_mail

2004-09-08 Thread Matthew Seaman
On Tue, Sep 07, 2004 at 06:04:05PM -0500, Matthew Rench wrote:

 I would like an ssh login to produce the same check for new mail that 
 /usr/bin/login does. (That is, You have new mail. or similar printed out
 after login, unless ~/.hushlogin exists.) On my linux box, this is achieved
 using the pam_mail module. If I run locate pam_mail on my FreeBSD 4.10 box, I
 get the following:
 
   % locate pam_mail
   /usr/src/contrib/libpam/modules/pam_mail
   /usr/src/contrib/libpam/modules/pam_mail/README
 
 Have I forgotten to install part of the source tree that I don't have any
 source for this module? Is there an easier way to get this module installed
 (e.g. one of the ports)? Or should I be going about this an altogether
 different way?

4.x uses the Linux libpam sources, but in 5.x that's been replaced by
OpenPAM -- in theory you can read all about OpenPAM at
http://www.openpam.org/, (but that seems to be denying access at the
moment) or http://sourceforge.net/projects/openpam/

Anyhow, for various reasons, not least easing the transition between
Linux libpam and OpenPAM, not all the facilities from libpam were
implemented under FreeBSD.  One of those missing parts is pam_mail.
So you're not going mad: that's the way it's supposed to work.

Unfortunately what's missing is a port of the missing bits of Linux
libpam.

One way of getting the 'new mail' notification for your ssh(1)
sessions would be to set 'UseLogin' in /etc/ssh/sshd_config -- see
sshd_config(5).

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgpWtlxsLshzb.pgp
Description: PGP signature


Re[2]: Intel PRO/1000 and Intel 865 PE, FreeBSD 5.2.1

2004-09-08 Thread Ighor
*This message was transferred with a trial version of CommuniGate(tm) Pro*
Good day, Andras.

18 aug 2004 , 20:44:42:


AK -Original Message-
AK From: [EMAIL PROTECTED]
AK [mailto:[EMAIL PROTECTED] On Behalf Of Ighor
AK Sent: Wednesday, August 18, 2004 4:18 AM
AK To: [EMAIL PROTECTED]
AK Subject: Intel PRO/1000 and Intel 865 PE, FreeBSD 5.2.1

AK Good day!

AK Sorry about my stupid questions, but i can't resolve my problem by
AK myself. I've read a lot of pages and FAQs but can't do this:

AK I have Intel PRO/1000 Network Card on Albatron motherb PX865PE ProII
AK oard with Inter 82865PE chipset.

AK After boot network card doesn't work. I think it's something with
AK interrupts. It only works when I disable ACPI in device.hints. The the
AK card uses IRQ18 and all is ok.

AK I've shitched resources in BIOS in thousands combinations - it's all
AK the same.

AK I need ACPI for HT pseudo-dual processing.

AK There are two logs attached - with ACPI and without

AK Thank you if you can help me.

AK  Hello Ighor,

AK I had an Intel 865PERL Board + P4 3.0 800 HTT CPU
AK 5.2.1 always crashed because some ACPI compatibility problem...

AK I upgraded to a 5.2 Current which solved the ACPI issues.

AK Replaced that board to a ASUS p4c800-e deluxe which never had any problem
AK since..

AK Try firmware upgrade on the motherboard or try test with Current

AK Best regards,

AK Andras Kende
AK http://www.kende.com


I've changed motherboard to Albatron on i865PE and 3Com NIC (xl
driver).
Now it says:
===
...
Sep  7 18:49:23  kernel: pci0: serial bus, USB at device 29.7 (no driver attached)
Sep  7 18:49:23  kernel: pcib2: ACPI PCI-PCI bridge at device 30.0 on pci0
Sep  7 18:49:23  kernel: pci2: ACPI PCI bus on pcib2
Sep  7 18:49:23  kernel: xl0: 3Com 3c905C-TX Fast Etherlink XL port 0xa000-0xa07f 
mem 0xfb00-0xfb7f irq 20 at device 0.0 on pci2
Sep  7 18:49:23  kernel: xl0: Ethernet address: 00:0a:48:0c:89:a3
Sep  7 18:49:23  kernel: xl0: no PHY found!
Sep  7 18:49:23  kernel: device_probe_and_attach: xl0 attach returned 6
...
===

And still does not work.

Hardware is 100% ok.

I'm panic.

-- 
Best regards,

 Ighor Poterakhin
 ICQ UIN 65975280, phone +7-916-7219187

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Version Macro

2004-09-08 Thread Mmaist
Hi,
I\'ve looked for a macro showing FreeBSD version in sys/* but I\'ve not met
something interesting. Somebody knows where I could find something of this
genre?

thanks

Markus 
 --
 Email.it, the professional e-mail, gratis per te: http://www.email.it/f
 
 Sponsor:
 Telefonare all'estero risparmiando fino all'80%? Con Email.it Phone Card
puoi, clicca e scopri tutti i vantaggi
 Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=2683d=20040907

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


xl driver for 3Com NIC

2004-09-08 Thread Ighor Poteryakhin
Good day!

A have troubles to set up my 3Com EtherLink (xl) Network Card.

Driver says 'no PHY found'. Hardware is 100% ok.

'messages' file is attahced.


-- 
With best regards,
 Ighor  mailto:[EMAIL PROTECTED]

messages
Description: Binary data
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


5.21 failed insstall cause ffs_allocation error - dup ........

2004-09-08 Thread Kangaroo
Hello,

Installing 5.21 failed during fetching data from cdrom to
/usr with error ffs_allocation error -dup...
system reboot after 30 sec ...
I dont know what 's wrong with it 

CHeers.



___
Do You Yahoo!?
Get your free @yahoo.com.hk address at http://mail.english.yahoo.com.hk
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


initial install and kernel configuration menu

2004-09-08 Thread Ara Avvali
Sometimes when I want to install 4.10 I get a menu right after boot that
tells me if I want to configure kernel or not. But the problem is it doesn't
show up on some machines. Does anybody know why?

 

 

*   The information transmitted in this e-mail is for the exclusive use
of the intended addressee and may contain confidential and/or privileged
material. Any review, re-transmission, dissemination or other use of it, or
the taking of any action in reliance upon this information by persons and/or
entities other than the intended recipient is prohibited. If you received
this in error, please inform the sender and/or addressee immediately and
delete the material. 

*   E-mails may not be secure, may contain computer viruses and may be
corrupted in transmission. Please carefully check this e-mail (and any
attachment) accordingly. No warranties are given and no liability is
accepted for any loss or damage caused by such matters. 

 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tar pitting automated attacks

2004-09-08 Thread John Mills
Ahh -

Exactly the scenario here, except the names were different (but similar) 
and the source IP was: 64.124.210.23

Thanks.

On Wed, 8 Sep 2004, Jonathan Chen wrote:

 On Tue, Sep 07, 2004 at 09:42:16AM -0400, Mike Galvez wrote:
  I am seeing a lot of automated attacks lately against sshd such as:
  
 [...]
   Sep  6 12:16:39 www sshd[29901]: Failed password for illegal user 
server from 159.134.244.189 port 4044 ssh2
   Sep  6 12:16:41 www sshd[29902]: Failed password for illegal user 
adam from 159.134.244.189 port 4072 ssh2
 ... etc

  Is there a method to make this more expensive to the attacker, such as
  tar-pitting?

 Put in a ipfw block on the netblock/country. At the very least it will
 make it pretty slow for the initial TCP handshake.

 - John Mills
   [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


cvsup, SetAttrs, I've read the FAQ

2004-09-08 Thread Karel J. Bosschaart
Hi,

I would like to get rid of the 'SetAttrs' lines in the cvsup logs.
Of course I found the FAQ at http://www.cvsup.org/faq.html#setattrs ;
I have umask=2 defined in my supfile, always run as root and after removing 
the checkout files, these files are rebuilt and all is fine. Only for one 
time though: running cvsup a second time will show 'SetAttrs' on the files 
that were updated in the previous run. See example of two cvsup runs:

First run:

kayjay# cvsup cvs-supfile
Connected to cvsup2.nl.FreeBSD.org
Updating collection src-all/cvs
 Edit src/sys/fs/msdosfs/msdosfs_fat.c,v
 Edit src/sys/fs/msdosfs/msdosfs_lookup.c,v
Updating collection cvsroot-all/cvs
 Append to CVSROOT-doc/commitlogs/doc
 SetAttrs CVSROOT-src/commitlogs/lib
 SetAttrs CVSROOT-src/commitlogs/sbin
 SetAttrs CVSROOT-src/commitlogs/share
 Append to CVSROOT-src/commitlogs/sys
Updating collection ports-all/cvs
Updating collection doc-all/cvs
 Edit doc/en_US.ISO8859-1/books/handbook/mirrors/chapter.sgml,v
 SetAttrs doc/en_US.ISO8859-1/slides/common/freebsd-users.xml,v
 Edit doc/ru_RU.KOI8-R/books/handbook/printing/chapter.sgml,v
Finished successfully

Second run:

kayjay# cvsup cvs-supfile
Connected to cvsup2.nl.FreeBSD.org
Updating collection src-all/cvs
 SetAttrs src/sys/fs/msdosfs/msdosfs_fat.c,v
 SetAttrs src/sys/fs/msdosfs/msdosfs_lookup.c,v
Updating collection cvsroot-all/cvs
 SetAttrs CVSROOT-doc/commitlogs/doc
 SetAttrs CVSROOT-src/commitlogs/lib
 SetAttrs CVSROOT-src/commitlogs/sbin
 SetAttrs CVSROOT-src/commitlogs/share
 SetAttrs CVSROOT-src/commitlogs/sys
Updating collection ports-all/cvs
Updating collection doc-all/cvs
 SetAttrs doc/en_US.ISO8859-1/books/handbook/mirrors/chapter.sgml,v
 SetAttrs doc/en_US.ISO8859-1/slides/common/freebsd-users.xml,v
 SetAttrs doc/ru_RU.KOI8-R/books/handbook/printing/chapter.sgml,v
Finished successfully



Over time, the lines with 'SetAttrs' will grow in number. I'm thinking 
about removing the checkout files every time I run cvsup but that's not a 
very nice solution. I'm facing this problem for quite some time and after 
months of going through logs filled up with 'SetAttrs' I would like to solve 
it properly.

My supfile can be found at http://kayjay.nl/cvs-supfile if that's useful. 

Thanks for any advice,
Karel.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tar pitting automated attacks

2004-09-08 Thread Chris
John Mills wrote:
Ahh -
Exactly the scenario here, except the names were different (but similar) 
and the source IP was: 64.124.210.23

Thanks.
On Wed, 8 Sep 2004, Jonathan Chen wrote:

On Tue, Sep 07, 2004 at 09:42:16AM -0400, Mike Galvez wrote:
I am seeing a lot of automated attacks lately against sshd such as:
[...]
   Sep  6 12:16:39 www sshd[29901]: Failed password for illegal user 
server from 159.134.244.189 port 4044 ssh2
   Sep  6 12:16:41 www sshd[29902]: Failed password for illegal user 
adam from 159.134.244.189 port 4072 ssh2
 ... etc


Is there a method to make this more expensive to the attacker, such as
tar-pitting?

Put in a ipfw block on the netblock/country. At the very least it will
make it pretty slow for the initial TCP handshake.

 - John Mills
   [EMAIL PROTECTED]
I really wish people would stop top posting.
--
Best regards,
Chris
Flynn is dead
Tron is dead
long live the MCP.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Version Macro

2004-09-08 Thread Giorgos Keramidas
On 2004-09-07 15:50, Mmaist [EMAIL PROTECTED] wrote:
 Hi,
 I\'ve looked for a macro showing FreeBSD version in sys/* but I\'ve not met
 something interesting. Somebody knows where I could find something of this
 genre?

This should print an important version number.

#include osreldate.h
#include stdio.h

int
main(void)
{
printf(%lu\n, (unsigned long) __FreeBSD_version);
return 0;
}

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: new card, still can't get X11 working

2004-09-08 Thread Lucas Holt
What does your xorg config look like for the video card?
Also, the 9200 radeon is on the border of supported and non supported 
cards.  Almost every card with a higher number is not supported for 3d 
acceleration.  I had a radeon 9000 card that worked perfect on 5.2.1 
freebsd, but my new AIW 9600 XT only supports 2d acceleration and only 
in Xorg.. plus i had to manually get the card's id for that to work.   
The problem lies in the fact that ati now has binary drivers for linux. 
  Most open source video card driver users run linux and so they don't 
need to write a driver when ati provides them with one.  Of course 
ati could always write a freebsd driver, but i won't hold my breath.


Lucas Holt
[EMAIL PROTECTED]

FoolishGames.com  (Jewel Fan Site)
JustJournal.com (Free blogging)
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


VPN via mpd

2004-09-08 Thread JG
Hello,

I'm having some issues with mpd. I've configured it properly so all VPN
clients receive an internal private ip and are given the internal DNS
ip after connecting, this works perfect. The problem is I cannot access
any internal resource after connecting. The setup is as follows:

WinXP Client - Internet - EXT_INT of VPN - INTERNAL_INT of VPN -
Internal Network

I've added gateway_enable=YES to the rc.conf after reading a
newsgroup saying this might be the problem, it didn't change any
behavior.

Thanks very much,
Joel




__
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: BSD display

2004-09-08 Thread steveb99
Thank you that was my motivation is security.  Same as you don't
display the last name that logged on, it gives a hacker half the info
they need to crack an account.  Displaying the OS helps a hacker know
which  approach cracking into a box.

Thanks,
Steve Barnette 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Subhro
 Sent: Wednesday, September 08, 2004 2:58 AM
 To: Harald Schmalzbauer
 Cc: [EMAIL PROTECTED]
 Subject: Re: BSD display
 
 Harald,
 
 Well I don't want to get into any courtsy controversies or 
 licensing gimmicks. But what the steve said has a good point. 
 Lets think it that way that just a casual onlooker cant make 
 out what OS and version is running on the box. It makes the 
 life of a cracker just a little more difficult. However more 
 promising guyz and galz can find it out anyway.
 
 Regards
 S.
 
 
 On Wed, 8 Sep 2004 05:52:30 +0200, Harald Schmalzbauer 
 [EMAIL PROTECTED] wrote:
  Am Mittwoch, 8. September 2004 05:41 schrieb steveb99:
  
   I don't like the OS name and version displayed with 
 logging to ssh 
   or
  
  Best would be to use anythig else which you like.
  And after that you could read your offending mail again and
sitting 
  ashamed in the corner for a loong loong time
  
   other areas. Where to I eliminate or change the text of 
 the message 
   being displayed?
  
  Nowhere! That's one of the things you have to keep if you're using

  BSD-Licensed code :)
  
  Alternatively you're welcome to contribute youre code!
  
  -Harry
  
  
  
  
   Steve Barnette
  
   ___
   [EMAIL PROTECTED] mailing list 
   http://lists.freebsd.org/mailman/listinfo/freebsd-questions
   To unsubscribe, send any mail to
   [EMAIL PROTECTED]
  ___
  [EMAIL PROTECTED] mailing list 
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
  
 
 
 
 --
 Subhro Sankha Kar
 School of Information Technology
 Block AQ-13/1 Sector V
 ZIP 700091
 India
 ___
 [EMAIL PROTECTED] mailing list 
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
 
 ---
 Incoming mail is certified Virus Free.
 Checked by AVG anti-virus system (http://www.grisoft.com).
 Version: 6.0.752 / Virus Database: 503 - Release Date: 9/3/2004
  
 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Testimonial - Thanks to FreeBSD

2004-09-08 Thread Jerry McAllister
Hi,

 
 Hi,
 
 starting on mainframe in the middle 80's,
 i met a dilemn in the later 90's : if you want a job,
 you must run on Microsoft.
 Well, i started a new learn of computing on this
 OS, un-learning all about i knew on computing,
 a very difficult task when you're coming from IBM...
 All my friends repeated to me :
 you should work on Unix like system, you should ..
 2 month's ago, i would like to setup my own server,
 at home, with web, ftp and mail services.
 I want him robust, efficient, safe and so one.
 i dreamed to get an old 3090 for 500$ !, but
 there's no place at home for him :o)
 Thus, i have started to install my first FreeBSD
 (on a very special computer) ... 2 weeks later,
 without any knowledge about Unix like systems,
 my httpd, ftpd ran (very ?!) well. This mean that
 your system is well designed and documented.
 Monitoring access, it's incredible to see that BSD
 is faster by 2 to 3 than other tested system.
 and i discovered that computing is absolutely what
 i learned on IBM ..
 
 Great thanks to the community, and your effort to
 document FreeBSD, even in French (we are so bad with
 others languages ..!), i hope to help the FreeBSD users
 by writing some drivers and other things,

Welcome to FreeBSD.
It is a good community and a good system.
Nothing is perfect, of course, but this community comes
as close as it can and keeps on working.

Enjoy,

jerry  

 
 K. Regards, take care,
 
 --
 Valery aka v/
 www.vslash.com - opened today.
 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


freebsd subversion server

2004-09-08 Thread dave
Hello,
I'm looking for a freebsd-specific howto or doc on setting up a
subversion server. I can find via google several good ones on cvs, none
freebsd-specific for subversion.
Thanks.
Dave.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: freebsd subversion server

2004-09-08 Thread Jeremias Reith
This one is FreeBSD specific:
http://www.bsdguides.org/guides/freebsd/misc/subversion.php
But IMHO important stuff is left out.
The SVNBook is much more verbose (but not BSD centric):
http://svnbook.red-bean.com/svnbook/book.html
hth
/jr
dave wrote:
Hello,
I'm looking for a freebsd-specific howto or doc on setting up a
subversion server. I can find via google several good ones on cvs, none
freebsd-specific for subversion.
Thanks.
Dave.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Your mail to simple-times-request@listserv.cs.utwente.nl

2004-09-08 Thread simple-times-request
This pre-recorded message is being sent in response to your recent
email to [EMAIL PROTECTED]

All routine administrative requests (including subscriptions and
unsubscriptions) concerning this mailing list are handled by an
automated server.  Please read this message carefully to find the
information relevant to you.

SUBSCRIBING
===

To subscribe to simple-times, send the following in the body (not
the subject line) of an email message to [EMAIL PROTECTED]:

subscribe simple-times

This will subscribe the account from which you send the message to
the simple-times list.

If you wish to subscribe another address instead (such as a local
redistribution list), you can use a command of the form:

subscribe simple-times [EMAIL PROTECTED]

UNSUBSCRIBING
=

To unsubscribe from simple-times, send the following in the body (not
the subject line) of an email message to [EMAIL PROTECTED]:

unsubscribe simple-times

This will unsubscribe the account from which you send the message.
If you are subscribed with some other address, you'll have to send
a command of the following form instead:

unsubscribe simple-times [EMAIL PROTECTED]

If you don't know what address you are subscribed with, you can send
the following command to see who else is on the list (assuming that
information isn't designated private by the owner of the list):

who simple-times

If you want to search non-private lists at this server, you can do that
by sending a command like:

which string

This will return a list of all entries on all lists that contain string.

HELP


To find out more about the automated server and the commands it
understands, send the following command to [EMAIL PROTECTED]:

help

If you feel you need to reach a human, send email to:

[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tar pitting automated attacks

2004-09-08 Thread Mike Galvez
On Wed, Sep 08, 2004 at 01:19:15AM -0700, Ted Mittelstaedt wrote:
 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of Mike Galvez
  Sent: Tuesday, September 07, 2004 6:42 AM
  To: [EMAIL PROTECTED]
  Subject: Tar pitting automated attacks
  
  
  Is there a method to make this more expensive to the attacker, 
  such as tar-pitting?
  
 
 No.  These days attackers use distributed networks of cracked PCs
 to launch attacks.  The vast bulk of these attacks is automated.
 The cracker merely feeds in a job and pushes it to his network to
 work away at.  Most of the time the cracker spends is in adding new
 machines that have vulnerabilities into his distributed network of
 cracked PCs
 
 If you successfully erect a network block, the cracker's software
 will just go to the next IP in the sequence to attack.  Your actually
 doing more damage to the cracker's distributed network by your SSH
 server patiently saying no, no, no, no, no, no, etc. for 20-50 thousand
 times, because that ties the cracked PC up for a lot longer just working
 away at your system.

This is why I was curious about tar-pitting. The attacker is banging away
at common user accounts every 3 to 5 seconds sometimes more than a thousand
times. A tar pit or something like it could slow the attack to maybe four
attempts in an hour as opposed to a thousand.

I am still looking for my passive-aggressive solution.

  I presume of course that you aren't using guessible
 passwords and you have everything patched to current levels.
 
 if you want to do damage to the attacker, you need to
 make a good effort at reporting the source IP numbers to the netblock
 managers the IP is part of.  Granted, 3/4 of the time the netblock
 managers won't do anything about it.

Reporting these to ISPs is like shouting at the ocean. They are most likely
overwhelmed, indifferent or both.

  But whenever they do, it usually
 takes that cracked PC out of the distributed network.  That is what
 costs the cracker because then the cracker has to expend 
 work replacing it with another cracked PC.
 
 But, it is a lot like trying to pick up spilled spaghetti with tweezers.
 There's so many cracked PC's out there that as soon as you get one
 taken down, there's plenty more where that came from.
 
 Now, if you REALLY want to damage the attacker, you throw the works at
 the IP numbers that are scanning you, and find the back door that the
 cracker is using on those hosts, then go in and hard-code the homepage
 on their web broswer to something like http://www.fuckyou.com, making sure
 to use one of those cracker programs that makes it impossible for them
 to change it back.  That is usually sufficient to get the owner of the
 cracked PC off their lazy ass to get their machine cleaned up.
 
 Ted
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
Michael Galvez
Information Technology Specialist University of Virginia
USENIX Member
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BSD display

2004-09-08 Thread Ruben de Groot
On Wed, Sep 08, 2004 at 06:33:03AM -0700, steveb99 typed:
 Thank you that was my motivation is security.  Same as you don't
 display the last name that logged on, it gives a hacker half the info
 they need to crack an account.  Displaying the OS helps a hacker know
 which  approach cracking into a box.

Edit /etc/ssh/sshd_config and change the line:

#VersionAddendum FreeBSD-20030924

to something like:

VersionAddendum GO-AWAY!

than restart sshd.

cheers,
Ruben

 Thanks,
 Steve Barnette 
 
  -Original Message-
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Subhro
  Sent: Wednesday, September 08, 2004 2:58 AM
  To: Harald Schmalzbauer
  Cc: [EMAIL PROTECTED]
  Subject: Re: BSD display
  
  Harald,
  
  Well I don't want to get into any courtsy controversies or 
  licensing gimmicks. But what the steve said has a good point. 
  Lets think it that way that just a casual onlooker cant make 
  out what OS and version is running on the box. It makes the 
  life of a cracker just a little more difficult. However more 
  promising guyz and galz can find it out anyway.
  
  Regards
  S.
  
  
  On Wed, 8 Sep 2004 05:52:30 +0200, Harald Schmalzbauer 
  [EMAIL PROTECTED] wrote:
   Am Mittwoch, 8. September 2004 05:41 schrieb steveb99:
   
I don't like the OS name and version displayed with 
  logging to ssh 
or
   
   Best would be to use anythig else which you like.
   And after that you could read your offending mail again and
 sitting 
   ashamed in the corner for a loong loong time
   
other areas. Where to I eliminate or change the text of 
  the message 
being displayed?
   
   Nowhere! That's one of the things you have to keep if you're using
 
   BSD-Licensed code :)
   
   Alternatively you're welcome to contribute youre code!
   
   -Harry
   
   
   
   
Steve Barnette
   
___
[EMAIL PROTECTED] mailing list 
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]
   ___
   [EMAIL PROTECTED] mailing list 
   http://lists.freebsd.org/mailman/listinfo/freebsd-questions
   To unsubscribe, send any mail to 
  [EMAIL PROTECTED]
   
  
  
  
  --
  Subhro Sankha Kar
  School of Information Technology
  Block AQ-13/1 Sector V
  ZIP 700091
  India
  ___
  [EMAIL PROTECTED] mailing list 
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to 
  [EMAIL PROTECTED]
  
  ---
  Incoming mail is certified Virus Free.
  Checked by AVG anti-virus system (http://www.grisoft.com).
  Version: 6.0.752 / Virus Database: 503 - Release Date: 9/3/2004
   
  
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Portaudit question

2004-09-08 Thread Chris
While running portaudit, I get the complaint;
Affected package: FreeBSD-502010
Type of problem: multiple vulnerabilities in the cvs server code.
Reference: 
http://www.FreeBSD.org/ports/portaudit/d2102505-f03d-11d8-81b0-000347a4fa7d.html
Note: To disable this check add the uuid to `portaudit_fixed' in 
/usr/local/etc/portaudit.conf

Am I to assume this is only if you run a cvs server? OR -
does this relate to the SA's put out earlier this year about the src.
--
Best regards,
Chris
Multiple-function gadgets will not perform any
function adequately.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


default directory for certs

2004-09-08 Thread Dan Mahoney, System Admin
Hey all,
I recently upgraded my mail server using sendmail to use full 
StartTLS/SSL, using a real (geotrust) certificate.

However, pine complains loudly at me that it cannot verify the 
certificate.

A quick google search on the error yielded this page:
https://email.mtu.edu/docs/public/pine_ssl/
Now, the directions are straightforward enough, but I can't find the certs 
directory.  A quick locate yields a bunch in 
/usr/src/crypto/openssl/certs, but nothing in a production directory. 
Are the standard root certs not installed by default?  Should they be?

*IF SO* What directory should I be using?
The FAQ file in /usr/src/crypto/openssl has this to say:
* Why does SSL program fail with a certificate verify error?
This problem is usually indicated by log messages saying something like 
unable to get local issuer certificate or self signed certificate. 
When a certificate is verified its root CA must be trusted by OpenSSL 
this typically means that the CA certificate must be placed in a directory 
or file and the relevant program configured to read it. The OpenSSL 
program 'verify' behaves in a similar way and issues similar error 
messages: check the verify(1) program manual page for more information.

However, the verify man page isn't in the default manpath, either.
--
this is too stupid even for irc
-mtreal, EFnet #macintosh, 09/15/2K, 12:33 AM
Dan Mahoney
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


/usr/ports/net/net-snmp Only contains Readme.html

2004-09-08 Thread Danny
My ports-supfile is setup to update the /net directory, so I am not
sure why this directory only contains the readme.html. This is a brand
new install of FreeBSD 5.2.1, and I am 98% sure that I said yes to
installing the ports during the intial installation.

cd /usr/ports/net/net-snmp
make install clean
make: don't know how to make install. Stop

On a side note, I am hoping that this port will allow me to collect
SNMP data from this FreeBSD server?

Thank you,

...D
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Tar pitting automated attacks

2004-09-08 Thread JJB

If you have no need for remote users to ssh into your system them
remove the ssh enable statement from rc.conf. If you do need ssh
then change its default port to some thing else and have all
authorized remote ssh users add the new port number to the remote
ssh login command. This will stop all your bad ssh login attempts.
Then you can have your ipfilter firewall log all the ssh attempts to
the ssh default port number and then run the log through this abuse
reporting application.
http://freebsd.a1poweruser.com:6088/99.20-abuse_rpts_download.htm
This application has been made into a FreeBSD port but it has not
been officially accepted yet.


This is my passive-aggressive solution to putting a stop to port
scanning.







___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Tar pitting automated attacks

2004-09-08 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Mike Galvez
 Sent: Wednesday, September 08, 2004 7:55 AM
 To: Ted Mittelstaedt
 
  If you successfully erect a network block, the cracker's software
  will just go to the next IP in the sequence to attack.  Your actually
  doing more damage to the cracker's distributed network by your SSH
  server patiently saying no, no, no, no, no, no, etc. for 20-50 thousand
  times, because that ties the cracked PC up for a lot longer just working
  away at your system.

 This is why I was curious about tar-pitting. The attacker is banging away
 at common user accounts every 3 to 5 seconds sometimes more than
 a thousand
 times. A tar pit or something like it could slow the attack to maybe four
 attempts in an hour as opposed to a thousand.


No it won't because the attackers know they are unloved, and they use
scanning
software that will abandon the attempt after a settable timeout.

Try running Nessus sometime against a tarpitted IP.  Tarpits were fine
against
extremely unsophisticated software but the war has moved on.

Ted

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Can't send to mailing list from server

2004-09-08 Thread Gene Bomgardner
When attempting to post to this list, my sendmail records the following 
message in maillog:

Sep  8 10:31:12 brightstar sm-mta[30272]: i88F7EQV030166: 
to=[EMAIL PROTECTED], ctladdr=[EMAIL PROTECTED] 
(1003/1003), delay=00:23:57, xdelay=00:00:06, mailer=esmtp, pri=120807, 
relay=mx1.freebsd.org. [216.136.204.125], dsn=4.2.0, stat=Deferred: 450 
Client host rejected: cannot find your hostname, [209.x.y.z]

209.x.y.z is a static address with a DNS entry courtesy of my ISP.
Any idea what the list's mta is looking for and how I can provide it?
Thanks
_
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BSD display

2004-09-08 Thread Nico Meijer
Hi Steve,
 Displaying the OS helps a hacker know
which  approach cracking into a box.
This may be true. OTOH, not displaying the version of [insert software 
package of the day here] may invite a 'hacker' to pull a full-scale 
all-out number on you, trying every possible exploit he can get his 
hands on. Or simply DDoS you out of this universe. Or launch whatever 
OS-agnostic attack can be performed.

I'm sure there have been long discussions over this 'security by 
obscurity' thing *somewhere*... ;-)

Buhbye... Nico
P.S. I guess nothing beats common sense coupled with regular upgrading.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Portaudit question

2004-09-08 Thread Matthew Seaman
On Wed, Sep 08, 2004 at 10:01:23AM -0500, Chris wrote:
 While running portaudit, I get the complaint;
 
 Affected package: FreeBSD-502010
 Type of problem: multiple vulnerabilities in the cvs server code.
 Reference: 
 http://www.FreeBSD.org/ports/portaudit/d2102505-f03d-11d8-81b0-000347a4fa7d.html
 Note: To disable this check add the uuid to `portaudit_fixed' in 
 /usr/local/etc/portaudit.conf
 
 Am I to assume this is only if you run a cvs server? OR -
 does this relate to the SA's put out earlier this year about the src.

Did you read the referenced portaudit page or any of the links
supplied by it?  There are several vulnerabilities, most of which
affect the CVS server, but one fairly minor that affects the CVS
client.

The FreeBSD advisory SA-O4:07.cvs refers to a different problem:

http://www.vuxml.org/freebsd/0792e7a7-8e37-11d8-90d1-0020ed76ef5a.html
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc

As you can see, the VuXML entry you're getting warnings about is dated
a month after the security advisory:

http://www.vuxml.org/freebsd/d2102505-f03d-11d8-81b0-000347a4fa7d.html

However, the update given in the security advisory is to a version of
CVS unaffected by either vulnerability.  Update your system to the
latest patchlevel and the problem will be fixed.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgpJcaR5lCWPz.pgp
Description: PGP signature


sysinstall problem

2004-09-08 Thread Gene Bomgardner
I've been trying to get the XFree86 distribution installed on my 5.2 box 
using sysinstall over FTP from several sites. Each time I get the message

Add of package (various packages) aborted, Error code 1.
Please check the debug screen for more details.
My questions are:
1) What is error code 1?
2) What debug screen? Where is it?
I've found no help in the handbook or elsewhere on the web though I may 
simply be looking in the wrong place.

Ideas?
Thanks
_
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /usr/ports/net/net-snmp Only contains Readme.html

2004-09-08 Thread Matthew Seaman
On Wed, Sep 08, 2004 at 11:40:44AM -0400, Danny wrote:
 My ports-supfile is setup to update the /net directory, so I am not
 sure why this directory only contains the readme.html. This is a brand
 new install of FreeBSD 5.2.1, and I am 98% sure that I said yes to
 installing the ports during the intial installation.

Using cvsup to only update part of the ports tree is not recommended:
don't even think about grabbing anything other than 'ports-all'
(unless you enjoy pain, that is)
 
 cd /usr/ports/net/net-snmp
 make install clean
 make: don't know how to make install. Stop

The port has moved to net-mgmt/net-snmp

The old directory still exists only because there's a readme.html file
in it -- if you delete that and re-run cvsup, the old net/net-snmp
directory will be deleted completely.

 On a side note, I am hoping that this port will allow me to collect
 SNMP data from this FreeBSD server?

Works for me.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgpeZJGCOiBmf.pgp
Description: PGP signature


Multiple IP addresses in a Jail

2004-09-08 Thread Frederick N. Brier
Perhaps there is another way to do this, but I am trying to layout as 
fault tolerant a network architecture as possible.  Most rack mounted 
boxes come with at least 2 Ethernet ports for what one would assume is 
to have each go to a separate switch (or to act as a firewall).  If 
either switch goes Tango Uniform, the network is still up.  But if my 
processes are running in Jails and I create an IP alias for each network 
interface for the jail, I need to specify 2 IP addresses for the Jail, 
not one.  I had heard there was a patch to do this and that it had been 
added to FreeBSD 5.3.  Is this not the case?  Is there a patch?  Is 
there another way to do this?  Thank you.

Frederick N. Brier
Multideck Corporation
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tar pitting automated attacks

2004-09-08 Thread Mike Hauber
On Wednesday 08 September 2004 10:54 am, Mike Galvez 
proclaimed:
 On Wed, Sep 08, 2004 at 01:19:15AM -0700, Ted Mittelstaedt 
wrote:
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] Behalf
   Of Mike Galvez Sent: Tuesday, September 07, 2004 6:42
   AM
   To: [EMAIL PROTECTED]
   Subject: Tar pitting automated attacks
  
  
   Is there a method to make this more expensive to the
   attacker, such as tar-pitting?
 
  No.  These days attackers use distributed networks of
  cracked PCs to launch attacks.  The vast bulk of these
  attacks is automated. The cracker merely feeds in a job
  and pushes it to his network to work away at.  Most of
  the time the cracker spends is in adding new machines
  that have vulnerabilities into his distributed network
  of cracked PCs
 
  If you successfully erect a network block, the
  cracker's software will just go to the next IP in the
  sequence to attack.  Your actually doing more damage to
  the cracker's distributed network by your SSH server
  patiently saying no, no, no, no, no, no, etc. for 20-50
  thousand times, because that ties the cracked PC up for
  a lot longer just working away at your system.

 This is why I was curious about tar-pitting. The attacker
 is banging away at common user accounts every 3 to 5
 seconds sometimes more than a thousand times. A tar pit
 or something like it could slow the attack to maybe four
 attempts in an hour as opposed to a thousand.

 I am still looking for my passive-aggressive solution.

   I presume of course that you aren't using guessible

  passwords and you have everything patched to current
  levels.
 
  if you want to do damage to the attacker, you need to
  make a good effort at reporting the source IP numbers
  to the netblock managers the IP is part of.  Granted,
  3/4 of the time the netblock managers won't do anything
  about it.

 Reporting these to ISPs is like shouting at the ocean.
 They are most likely overwhelmed, indifferent or both.

   But whenever they do, it usually

  takes that cracked PC out of the distributed network. 
  That is what costs the cracker because then the cracker
  has to expend work replacing it with another cracked
  PC.
 
  But, it is a lot like trying to pick up spilled
  spaghetti with tweezers. There's so many cracked PC's
  out there that as soon as you get one taken down,
  there's plenty more where that came from.
 
  Now, if you REALLY want to damage the attacker, you
  throw the works at the IP numbers that are scanning
  you, and find the back door that the cracker is using
  on those hosts, then go in and hard-code the homepage
  on their web broswer to something like
  http://www.fuckyou.com, making sure to use one of those
  cracker programs that makes it impossible for them to
  change it back.  That is usually sufficient to get the
  owner of the cracked PC off their lazy ass to get their
  machine cleaned up.
 
  Ted
  ___
  [EMAIL PROTECTED] mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-quest
 ions To unsubscribe, send any mail to
  [EMAIL PROTECTED]

I realize this is probably a dumb question (I quietly drop 
everything incoming unless it's keep-state, and I only 
allow ssh internally)...

If you're needing to ssh to your machine from a limited 
range of IPs, then why not tell your PF to drop incoming 
unless it's within that range?  I know it puts a limit on 
your options for connecting, but on the other hand it also 
makes an attack not worth the time and resources.  (That is 
is the way I'm understanding it, but I'm still learning)

On the other hand.  I would imagine that it wouldn't be too 
difficult to write some code that would detect repeated, 
failed attempts and then quietly drop incoming for a 
predetermined amount of time (could be reset by dialing in, 
too).  I wouldn't have a clue as to how to do it, but it 
_seems_ logical.  :)
 
Just curious,

Mike
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /usr/ports/net/net-snmp Only contains Readme.html

2004-09-08 Thread Tillman Hodgson
On Wed, Sep 08, 2004 at 05:06:25PM +0100, Matthew Seaman wrote:
 The old directory still exists only because there's a readme.html file
 in it -- if you delete that and re-run cvsup, the old net/net-snmp
 directory will be deleted completely.

Is there a handy way to automate the deletion of abandoned readme.html
files in the ports tree?

-T


-- 
When you do something, you should burn yourself completely, like a good
bonfire, leaving no trace of yourself.
Shunryu Suzuki


pgpk1IpvtkoCq.pgp
Description: PGP signature


Re: Can't send to mailing list from server

2004-09-08 Thread Karl Swartz
 Client host rejected: cannot find your hostname, [209.x.y.z]
 
 209.x.y.z is a static address with a DNS entry courtesy of my ISP.
 
 Any idea what the list's mta is looking for and how I can provide it?

By obfuscating the last three octets you destroyed the evidence needed
to fully help you.  The error text (cannot find your hostname) suggests
you don't have reverse DNS -- mail admins increasingly won't accept mail
from such hosts because that's often a sign of a mismanaged network
which also happens to be spewing spam.

However, your message includes a full 209 address in the headers:

   Received: from 209.240.79.79 by by1fd.bay1.hotmail.msn.com with HTTP;
Wed, 08 Sep 2004 15:51:01 GMT
   X-Originating-IP: [209.240.79.79]

209.240.79.79 does have reverse DNS, so if that's the address that was
not being accepted by the freebsd mail server it's a bit more puzzling.
Perhaps reverse DNS was temporarily unavailble.

--
Karl Swartz |Home   [EMAIL PROTECTED]   http://www.kls2.com/~karl/
The average dog is a nicer person than the average person.
  - Andrew A. Rooney
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can't send to mailing list from server

2004-09-08 Thread Remko Lodder
Gene Bomgardner wrote:
209.x.y.z is a static address with a DNS entry courtesy of my ISP.
Any idea what the list's mta is looking for and how I can provide it?
Yes i have, i have the same issue, i have a static ip on my colocated 
machine, but there is no reverse dns lookup configured yet. When FreeBSD 
mailingservers cannot find a reversed lookup, it rejects your email 
until it can (the mail gets killed after your timeout trigger has been 
reached).

So please check whether your 209.?.?.? adres has a reversed lookup since 
that might be the problem :)

Cheers
p.s i read that you have DNS entry courtesy of your ISP, still i think 
it's reverse issues.

Thanks

--
Kind regards,
Remko Lodder   |[EMAIL PROTECTED]
Reporter DSINet|[EMAIL PROTECTED]
Projectleader Mostly-Harmless  |[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Multiple IP addresses in a Jail

2004-09-08 Thread Andy Smith
On Wed, Sep 08, 2004 at 12:16:28PM -0400, Frederick N. Brier wrote:
 I need to specify 2 IP addresses for the Jail, not one.  I had
 heard there was a patch to do this and that it had been added to
 FreeBSD 5.3.  Is this not the case?  Is there a patch?  Is there
 another way to do this?  Thank you.

There's this, not sure how current the patch it though..

http://freebsdwiki.org/Using_multiple_IPs_in_a_jail

-- 
http://freebsdwiki.org/ - Encrypted mail welcome - keyid 0xBF15490B

Reinventing the wheel is bad not only because it wastes time, but because
 reinvented wheels are often square.
 -- Henry Spencer


pgpIB1vSB4MR0.pgp
Description: PGP signature


advantage/disadvatage of freebsd 5.2.1 over other OS in the market???

2004-09-08 Thread icecool_ace
hello freebsd developers!:) im aceron a student from the philippines.i would like to 
know the advantages and disadvantages of freebsd 5.2.1 over other OS in the 
market.mainly because we can't compare it to other OS one by one...to tell u frankly 
here in the philippines the only OS widely being used is windows and mac.so we would 
like to discuss an operating system other than windows and mac to our classmates and 
friends.and we chose freebsd...thank you for helping us.God bless!:)


-
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter now.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: hi

2004-09-08 Thread Nagilum
Hi A W
Your computer shouldn't reboot after reading from the mfsroot, try 
booting the kernel with ACPI disabled.

Have fun!
Alex.
A W wrote:
Hello FreeBsd
  I have this problem with the boot floppies, everytime i boot 
the kern.flp then it asks me to push in mfsroot.flp. I follow the 
instructions then it would reboot my computer but after it does reboot 
it doesn't enter the installation and gives me a message 
FreeBsd/i368 Boot Default: 0:fd (0,a) /kernel boot: no /kernel Why 
is this? What caused it? and how can i fix it?

  thank u
_
Scan and help eliminate destructive viruses from your inbound and 
outbound e-mail and attachments. 
http://join.msn.com/?pgmarket=en-capage=byoa/premxAPID=1994DI=1034SU=http://hotmail.com/encaHL=Market_MSNIS_Taglines 
 Start enjoying all the benefits of MSN® Premium right now and get the 
first two months FREE*.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


http://www.arc.itb.ac.id/freebsd/design-44bsd/need support

2004-09-08 Thread fendi
I'm sorry for asking something weird, actually I want to mastering free bsd, but I 
don't
know the way can I use to start learn the free bsd. would you like to give me some 
adtvise
what I have learn to start learn free bsd
thank you.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvsup, SetAttrs, I've read the FAQ

2004-09-08 Thread Nagilum
How about a grep -v SetAttr ?
Karel J. Bosschaart wrote:
Hi,
I would like to get rid of the 'SetAttrs' lines in the cvsup logs.
Of course I found the FAQ at http://www.cvsup.org/faq.html#setattrs ;
I have umask=2 defined in my supfile, always run as root and after removing 
the checkout files, these files are rebuilt and all is fine. Only for one 
time though: running cvsup a second time will show 'SetAttrs' on the files 
that were updated in the previous run. See example of two cvsup runs:

First run:
kayjay# cvsup cvs-supfile
Connected to cvsup2.nl.FreeBSD.org
Updating collection src-all/cvs
Edit src/sys/fs/msdosfs/msdosfs_fat.c,v
Edit src/sys/fs/msdosfs/msdosfs_lookup.c,v
Updating collection cvsroot-all/cvs
Append to CVSROOT-doc/commitlogs/doc
SetAttrs CVSROOT-src/commitlogs/lib
SetAttrs CVSROOT-src/commitlogs/sbin
SetAttrs CVSROOT-src/commitlogs/share
Append to CVSROOT-src/commitlogs/sys
Updating collection ports-all/cvs
Updating collection doc-all/cvs
Edit doc/en_US.ISO8859-1/books/handbook/mirrors/chapter.sgml,v
SetAttrs doc/en_US.ISO8859-1/slides/common/freebsd-users.xml,v
Edit doc/ru_RU.KOI8-R/books/handbook/printing/chapter.sgml,v
Finished successfully
Second run:
kayjay# cvsup cvs-supfile
Connected to cvsup2.nl.FreeBSD.org
Updating collection src-all/cvs
SetAttrs src/sys/fs/msdosfs/msdosfs_fat.c,v
SetAttrs src/sys/fs/msdosfs/msdosfs_lookup.c,v
Updating collection cvsroot-all/cvs
SetAttrs CVSROOT-doc/commitlogs/doc
SetAttrs CVSROOT-src/commitlogs/lib
SetAttrs CVSROOT-src/commitlogs/sbin
SetAttrs CVSROOT-src/commitlogs/share
SetAttrs CVSROOT-src/commitlogs/sys
Updating collection ports-all/cvs
Updating collection doc-all/cvs
SetAttrs doc/en_US.ISO8859-1/books/handbook/mirrors/chapter.sgml,v
SetAttrs doc/en_US.ISO8859-1/slides/common/freebsd-users.xml,v
SetAttrs doc/ru_RU.KOI8-R/books/handbook/printing/chapter.sgml,v
Finished successfully

Over time, the lines with 'SetAttrs' will grow in number. I'm thinking 
about removing the checkout files every time I run cvsup but that's not a 
very nice solution. I'm facing this problem for quite some time and after 
months of going through logs filled up with 'SetAttrs' I would like to solve 
it properly.

My supfile can be found at http://kayjay.nl/cvs-supfile if that's useful. 

Thanks for any advice,
Karel.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /usr/ports/net/net-snmp Only contains Readme.html (Resolved)

2004-09-08 Thread Danny
On Wed, 8 Sep 2004 17:06:25 +0100, Matthew Seaman
[EMAIL PROTECTED] wrote:
 On Wed, Sep 08, 2004 at 11:40:44AM -0400, Danny wrote:
  My ports-supfile is setup to update the /net directory, so I am not
  sure why this directory only contains the readme.html. This is a brand
  new install of FreeBSD 5.2.1, and I am 98% sure that I said yes to
  installing the ports during the intial installation.
 
 Using cvsup to only update part of the ports tree is not recommended:
 don't even think about grabbing anything other than 'ports-all'
 (unless you enjoy pain, that is)

I don't typically enjoy pain, but rather enjoy a good challenge. In
this case though, I will follow your solid advice and run ports-all.
 
  cd /usr/ports/net/net-snmp
  make install clean
  make: don't know how to make install. Stop
 
 The port has moved to net-mgmt/net-snmp

Subsequent to following your advice, this neat new directory called
net-mgmt appeared; all is well.  (- ;
 
 The old directory still exists only because there's a readme.html file
 in it -- if you delete that and re-run cvsup, the old net/net-snmp
 directory will be deleted completely.
 
  On a side note, I am hoping that this port will allow me to collect
  SNMP data from this FreeBSD server?
 
 Works for me.

Thank you,

...D
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sysinstall problem

2004-09-08 Thread David Syphers
On Wednesday 08 September 2004 08:44 am, Gene Bomgardner wrote:
 I've been trying to get the XFree86 distribution installed on my 5.2 box
 using sysinstall over FTP from several sites. Each time I get the message

Do you already have 5.2 installed and are going back into sysinstall, or are 
you installing 5.2 and trying to add the package at the same time? Also, is 
this really 5.2 or is it 5.2.1? In any case, it may be looking for a version 
of the package which no longer exists. You can add the latest packages (after 
installation) using pkg_add (and fetch them remotely using pkg_add -r. See 
'man pkg_add').

 My questions are:

 1) What is error code 1?

It really means nothing by itself; we need the real error to see what the 
problem is. error code 1 is just a generic fatal error message.

 2) What debug screen? Where is it?

If you're installing, you can see more info by looking at the second virtual 
terminal (alt-F2).

-David

-- 
+++ Divide By Cucumber Error. Please
Reinstall Universe And Reboot. +++
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Portaudit question

2004-09-08 Thread Chris
Matthew Seaman wrote:
On Wed, Sep 08, 2004 at 10:01:23AM -0500, Chris wrote:
While running portaudit, I get the complaint;
Affected package: FreeBSD-502010
Type of problem: multiple vulnerabilities in the cvs server code.
Reference: 
http://www.FreeBSD.org/ports/portaudit/d2102505-f03d-11d8-81b0-000347a4fa7d.html
Note: To disable this check add the uuid to `portaudit_fixed' in 
/usr/local/etc/portaudit.conf

Am I to assume this is only if you run a cvs server? OR -
does this relate to the SA's put out earlier this year about the src.

Did you read the referenced portaudit page or any of the links
supplied by it?  There are several vulnerabilities, most of which
affect the CVS server, but one fairly minor that affects the CVS
client.
The FreeBSD advisory SA-O4:07.cvs refers to a different problem:
http://www.vuxml.org/freebsd/0792e7a7-8e37-11d8-90d1-0020ed76ef5a.html
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc
As you can see, the VuXML entry you're getting warnings about is dated
a month after the security advisory:
http://www.vuxml.org/freebsd/d2102505-f03d-11d8-81b0-000347a4fa7d.html
However, the update given in the security advisory is to a version of
CVS unaffected by either vulnerability.  Update your system to the
latest patchlevel and the problem will be fixed.
This has been done, 5.2.1-RELEASE-p9
--
Best regards,
Chris
Working capital doesn't.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvsup, SetAttrs, I've read the FAQ

2004-09-08 Thread Lowell Gilbert
Karel J. Bosschaart [EMAIL PROTECTED] writes:

 I would like to get rid of the 'SetAttrs' lines in the cvsup logs.
 Of course I found the FAQ at http://www.cvsup.org/faq.html#setattrs ;
 I have umask=2 defined in my supfile, always run as root and after removing 
 the checkout files, these files are rebuilt and all is fine. Only for one 
 time though: running cvsup a second time will show 'SetAttrs' on the files 
 that were updated in the previous run. See example of two cvsup runs:

Until you solve the problem, the '-s' option may help you.

Are the permissions on /usr/sup at all strange?  They will typically
be 655 root:wheel...
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sysinstall problem

2004-09-08 Thread Karl Swartz
 Do you already have 5.2 installed and are going back into sysinstall,
 or are you installing 5.2 and trying to add the package at the same
 time? Also, is this really 5.2 or is it 5.2.1?

I've experienced this same thing with 4.10.

  2) What debug screen? Where is it?
 
 If you're installing, you can see more info by looking at the second
 virtual terminal (alt-F2).

It works in that case, but if you're doing post-install additions that
doesn't work.  I've never figured out where the info goes in that case,
though I usually use pkg_add or other non-user-friendly techniques to
solve the problem.

--
Karl Swartz |Home   [EMAIL PROTECTED]   http://www.kls2.com/~karl/
The average dog is a nicer person than the average person.
  - Andrew A. Rooney
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


VESA_800x600 (age old question)

2004-09-08 Thread Lewis Thompson
Hi,

This question has been rehashed many times, so I apologise.  I've got
VESA and SC_PIXEL_MODE in my kernel and I want to be able to do:
vidcontrol VESA_800x600.

  However, when I do this I receive the following message:

vidcontrol: cannot set videomode: Operation not supported by device

  The general answer to this seems to be make sure SC_PIXEL_MODE is in
your kernel.  It is.  This is an Intel 855GM/GME Montara (I use i810 for
x.org).  I don't know if it means anything but in the Xorg.log file I am
told that a VESA BIOS is detected:

(II) I810(0): VESA BIOS detected

  Can somebody please tell me what this means?  Somebody seemed to think
that the error means that the card doesn't have a VESA BIOS but this
doesn't seem to be the case.  Is VESA_800x600 just not supported on the
855GM?

  Thanks and apologies... this topic is getting boring now ;)

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgpjbJ7Jkzt1t.pgp
Description: PGP signature


1024x768 console

2004-09-08 Thread Osmany Guirola Cruz
Hi people how can i set my consoles resolution with a resolution greater than 
normal for example 1024x768 ..

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


headless install frozen.

2004-09-08 Thread oscar wicks
hello:
using  a 4.10 release on my main machine, i was trying to make a FBSD  
headless install on a toshiba  T4600c, because it has  a minimalistic HD 
(200mb) and there is not any CDROM drive, just floppy drive,  20Mb ram, no 
LAN, no modem.

if i try  regular kern.flp and mfsroot.flp (no serial booting -h), toshiba  
loads fine sysinstall but without CDROM i can`t do  any more, unless serial 
communication.

and i can`t use keybord to send enter key pressed  to my laptop.
this  is  what im doing:
1.-made Boot Floppies using, to Boot into a Serial Console (both floppies 
made with dd command)
using this on kern.flp:

# echo /boot/loader -h  boot.config
2.-Connect Null Modem Cable between  first serial ports on both machines.
You now need to connect a null modem cable Just connect the cable to the 
serial ports of the 2 machines. A normal serial cable will not work here, 
you need a null modem cable because it has some of the wires inside crossed 
over.

3.-Booting Up for the Install,
kern.flp floppy in the floppy drive of the machine  im doing the headless 
install on, and power on the machine.

4.-Connecting to my Headless Machine, using this command on my FBSD machine:
# cu -l /dev/cuaa0
That's it! i can see booting kern.flp on monitorYou  through my cu session. 
It ask me to put in the mfsroot.flp, and then...
...HERE IS  THE PROBLEM...
It supose to be like this:

 it will come up with a selection of what kind of terminal to use. Select 
the FreeBSD color console and proceed with your install!
  ...BUT...

-even not can press enter key for start reading second flppy (mfsroot.flp).
-keyboard not works as  expects, (not take  care of regular typing or arrow 
keys, space bar, etc.)
-cu session continues as  usual no takes  care about booting  process.
- and  of course there isn`t any selection of any kind of terminal to use.

i know almost nothing about cu program, but  FreeBSD Handbook (2.12 Advanced 
Installation Guide)
explain very well howto.
What am  missing?
or,  what is maybe misconfigured on my cu program machine?

any clues, you guys?
please RE:  to  this  address:
[EMAIL PROTECTED]
thnks for  your  help,
oscar wicks
_
T1msn Hotmail Plus. Más espacio, más funcional 
http://join.msn.com/?page=features/espgmarket=es-mxxAPID=1817DI=233SU=http://www.t1msn.com.mx

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can't send to mailing list from server

2004-09-08 Thread Gene Bomgardner


From: Remko Lodder [EMAIL PROTECTED]
To: Gene Bomgardner [EMAIL PROTECTED]
CC: [EMAIL PROTECTED]
Subject: Re: Can't send to mailing list from server
Date: Wed, 08 Sep 2004 19:02:33 +0200
Gene Bomgardner wrote:
209.x.y.z is a static address with a DNS entry courtesy of my ISP.
Any idea what the list's mta is looking for and how I can provide it?
Yes i have, i have the same issue, i have a static ip on my colocated 
machine, but there is no reverse dns lookup configured yet. When FreeBSD 
mailingservers cannot find a reversed lookup, it rejects your email until 
it can (the mail gets killed after your timeout trigger has been reached).

So please check whether your 209.?.?.? adres has a reversed lookup since 
that might be the problem :)
Actually, the IPS's DNS entry is for reverse lookup. I suspect that the 
problem might be that a forward lookup returns a different IP address. That 
is:

domain.net -- 172.1.1.1   While
209.1.1.1 -- domain.net
Because the domain is redirected normally to domaindirect servers. I 
probably need to change the primary DNS entries, but I'm not certain yet.

GOD I hate the hoops we need to go through to avoid filthy spammers
Gene
_
Get ready for school! Find articles, homework help and more in the Back to 
School Guide! http://special.msn.com/network/04backtoschool.armx

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can't send to mailing list from server

2004-09-08 Thread Gene Bomgardner


From: Karl Swartz [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: Can't send to mailing list from server
Date: Wed, 8 Sep 2004 09:53:32 -0700
 Client host rejected: cannot find your hostname, [209.x.y.z]

 209.x.y.z is a static address with a DNS entry courtesy of my ISP.

 Any idea what the list's mta is looking for and how I can provide it?
By obfuscating the last three octets you destroyed the evidence needed
to fully help you.  The error text (cannot find your hostname) suggests
you don't have reverse DNS -- mail admins increasingly won't accept mail
from such hosts because that's often a sign of a mismanaged network
which also happens to be spewing spam.
However, your message includes a full 209 address in the headers:
   Received: from 209.240.79.79 by by1fd.bay1.hotmail.msn.com with HTTP;
Wed, 08 Sep 2004 15:51:01 GMT
   X-Originating-IP: [209.240.79.79]
209.240.79.79 does have reverse DNS, so if that's the address that was
not being accepted by the freebsd mail server it's a bit more puzzling.
Perhaps reverse DNS was temporarily unavailble.
Correct - the IP is indeed 209.240.79.79 and does have a reverse DNS. 
However, forward lookup for the same domain will yield a completely seperate 
address since I'm still tied to domaindirect's name servers and using some 
of their redirection. I'm beginning to suspect that that's where the problem 
is coming from.

Gene
_
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
hthttp://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sysinstall problem

2004-09-08 Thread Gene Bomgardner


From: Karl Swartz [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: sysinstall problem
Date: Wed, 8 Sep 2004 11:34:21 -0700
 Do you already have 5.2 installed and are going back into sysinstall,
 or are you installing 5.2 and trying to add the package at the same
 time? Also, is this really 5.2 or is it 5.2.1?
It's 5.2.1 and I'm using sysinstall's post install to reinstall the XFree86 
distribution.


I've experienced this same thing with 4.10.
  2) What debug screen? Where is it?

 If you're installing, you can see more info by looking at the second
 virtual terminal (alt-F2).
Nope - nothing there.
Gene
_
Is your PC infected? Get a FREE online computer virus scan from McAfee® 
Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: advantage/disadvatage of freebsd 5.2.1 over other OS in the market???

2004-09-08 Thread Daniel Bye
On Wed, Sep 08, 2004 at 05:51:32AM -0700, icecool_ace wrote:
 hello freebsd developers!:) im aceron a student from the philippines.i would like to 
 know the advantages and disadvantages of freebsd 5.2.1 over other OS in the 
 market.mainly because we can't compare it to other OS one by one...to tell u frankly 
 here in the philippines the only OS widely being used is windows and mac.so we would 
 like to discuss an operating system other than windows and mac to our classmates and 
 friends.and we chose freebsd...thank you for helping us.God bless!:)
 

Well, as no-one else has said anything, I will.

The best way to find out about the strengths and limitations of an
operating system is to use it - FreeBSD is available for you to download
free of charge, so why not give it a go?

Start by looking at http://www.freebsd.org.

You will learn a lot more by doing it yourself than by us telling you
why we use FreeBSD!

Good luck, and happy computing!

Dan

-- 
Daniel Bye

PGP Key: ftp://ftp.slightlystrange.org/pgpkey/dan.asc
PGP Key fingerprint: 3B9D 8BBB EB03 BA83 5DB4 3B88 86FC F03A 90A1 BE8F
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpkEfIprPajk.pgp
Description: PGP signature


Re: sysinstall problem

2004-09-08 Thread Gene Bomgardner


From: David Syphers [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
CC: Gene Bomgardner [EMAIL PROTECTED]
Subject: Re: sysinstall problem
Date: Wed, 8 Sep 2004 10:59:52 -0700
On Wednesday 08 September 2004 08:44 am, Gene Bomgardner wrote:
 I've been trying to get the XFree86 distribution installed on my 5.2 box
 using sysinstall over FTP from several sites. Each time I get the 
message

Do you already have 5.2 installed and are going back into sysinstall, or 
are
you installing 5.2 and trying to add the package at the same time? Also, is
this really 5.2 or is it 5.2.1? In any case, it may be looking for a 
version
of the package which no longer exists. You can add the latest packages 
(after
installation) using pkg_add (and fetch them remotely using pkg_add -r. See
'man pkg_add').
Running 5.2.1. The package is found and downloaded before the error occurrs. 
In this particular case, it's fonts for XFree86, but the same occurrs for 
each package it tries to add. I wonder if I might be running up against 
permissions when pkg_add actually tries to add the package?

 My questions are:

 1) What is error code 1?
It really means nothing by itself; we need the real error to see what the
problem is. error code 1 is just a generic fatal error message.
That's what I figured.
 2) What debug screen? Where is it?
If you're installing, you can see more info by looking at the second 
virtual
terminal (alt-F2).
Unfoirtunately not installing.
-David
--
+++ Divide By Cucumber Error. Please
Reinstall Universe And Reboot. +++
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]
_
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Abnormally high CPU usage on BETA3

2004-09-08 Thread Aaron Glenn
All,

I don't recall having this issue with 5.3-BETA2, but to be honest I
can't be entirely sure. I just put a fresh install of BETA3 on a P4
2.8GHz machine and while untaring ports.tgz I get bsdtar hovering
around 80% CPU usage. The machine becomes noticably sluggish, where
neither previous BETA did before. I find the pcib1: could not get PCI
interrupt routing table for \\_SB_.PCI0.P0P2 - AE_NOT_FOUND line in
my dmesg curious, but I'm not sure what, if anything, I can/should do
about that.

Should I recompile my kernel disabling WITNESS and the like? Below is
a complete dmesg; the motherboard is an Intel SE7210TP1-E. Please cc
me as I'm not subscribed to -questions.

Regards,
aaron.glenn

FreeBSD 5.3-BETA3
uniball# dmesg
Copyright (c) 1992-2004 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 5.3-BETA3 #0: Sat Sep  4 12:07:48 UTC 2004
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter i8254 frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) 4 CPU 2.80GHz (2793.01-MHz 686-class CPU)
  Origin = GenuineIntel  Id = 0xf33  Stepping = 3
  
Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE
  Hyperthreading: 2 logical CPUs
real memory  = 1073676288 (1023 MB)
avail memory = 1041121280 (992 MB)
ACPI APIC Table: A M I  OEMAPIC 
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
ioapic0 Version 2.0 irqs 0-23 on motherboard
ioapic1 Version 2.0 irqs 24-47 on motherboard
npx0: [FAST]
npx0: math processor on motherboard
npx0: INT 16 interface
acpi0: A M I OEMRSDT on motherboard
acpi0: Power Button (fixed)
Timecounter ACPI-fast frequency 3579545 Hz quality 1000
acpi_timer0: 24-bit timer at 3.579545MHz port 0x808-0x80b on acpi0
cpu0: ACPI CPU on acpi0
cpu1: ACPI CPU on acpi0
pcib0: ACPI Host-PCI bridge port 0xcf8-0xcff on acpi0
pci0: ACPI PCI bus on pcib0
pcib1: ACPI PCI-PCI bridge at device 3.0 on pci0
pcib1: could not get PCI interrupt routing table for \\_SB_.PCI0.P0P2
- AE_NOT_FOUND
pci1: ACPI PCI bus on pcib1
em0: Intel(R) PRO/1000 Network Connection, Version - 1.7.25 port
0xbc00-0xbc1f mem 0xfc5e-0xfc5f irq 18 at device 1.0 on pci1
em0: Ethernet address: 00:02:b3:e9:b6:1c
em0:  Speed:N/A  Duplex:N/A
pcib2: ACPI PCI-PCI bridge at device 28.0 on pci0
pci2: ACPI PCI bus on pcib2
uhci0: UHCI (generic) USB controller port 0xe800-0xe81f irq 16 at
device 29.0 on pci0
uhci0: [GIANT-LOCKED]
usb0: UHCI (generic) USB controller on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: UHCI (generic) USB controller port 0xec00-0xec1f irq 19 at
device 29.1 on pci0
uhci1: [GIANT-LOCKED]
usb1: UHCI (generic) USB controller on uhci1
usb1: USB revision 1.0
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
pci0: base peripheral at device 29.4 (no driver attached)
pci0: base peripheral, interrupt controller at device 29.5 (no
driver attached)
pci0: serial bus, USB at device 29.7 (no driver attached)
pcib3: ACPI PCI-PCI bridge at device 30.0 on pci0
pci3: ACPI PCI bus on pcib3
pci3: display, VGA at device 0.0 (no driver attached)
fxp0: Intel 82551 Pro/100 Ethernet port 0xcc00-0xcc3f mem
0xfe6a-0xfe6b,0xfe6fe000-0xfe6fefff irq 17 at device 1.0 on
pci3
miibus0: MII bus on fxp0
inphy0: i82555 10/100 media interface on miibus0
inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp0: Ethernet address: 00:02:b3:e9:b6:1d
isab0: PCI-ISA bridge at device 31.0 on pci0
isa0: ISA bus on isab0
atapci0: Intel 6300ESB UDMA100 controller port
0xfc00-0xfc0f,0x376,0x170-0x177,0x3f6,0x1f0-0x1f7 at device 31.1 on
pci0
ata0: channel #0 on atapci0
ata1: channel #1 on atapci0
atapci1: Intel 6300ESB SATA150 controller port
0xd400-0xd40f,0xd800-0xd803,0xdc00-0xdc07,0xe000-0xe003,0xe400-0xe407
irq 18 at device 31.2 on pci0
ata2: channel #0 on atapci1
ata3: channel #1 on atapci1
pci0: serial bus, SMBus at device 31.3 (no driver attached)
acpi_button0: Power Button on acpi0
acpi_button1: Sleep Button on acpi0
atkbdc0: Keyboard controller (i8042) port 0x64,0x60 irq 1 on acpi0
atkbd0: AT Keyboard irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0 port 0x3f8-0x3ff irq 4 on acpi0
sio0: type 16550A
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
sio1 port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
fdc0: floppy drive controller (FDE) port 0x3f7,0x3f0-0x3f5 irq 6 drq
2 on acpi0
orm0: ISA Option ROMs at iomem 0xe-0xe3fff,0xc-0xc7fff on isa0
pmtimer0 on isa0
ppc0: parallel port not found.
sc0: System console at flags 0x100 on 

Re: Moving MySQL database

2004-09-08 Thread Bart Silverstrim
On Sep 3, 2004, at 10:46 AM, Jerry McAllister wrote:
I have a server that is rapidly filling the var partition with a MySQL
database.  I'd like to move it to a subdirectory somewhere under /usr.
snip
If you don't want to move all the stuff in /var/db, then you will
have to be more selective and make the link from within /var/db
rather than just the whole db directory from within /var.
For example, the MySQL stuff is likely to all be in a directory
called /var/db/mysql.   So:
Stop MySQL or reboot to single user.
Then
 cd /var/db/mysql
 tar cf /usr/mysql.tar *
 cd /usr
 mkdir var.db.mysql
 cd var.db.mysql
 tar xf ../../mysql.tar
 cd /var/db
 mv mysql mysql.old
 ln -s /usr/var.db.mysql mysql
Now, reboot and let MySQL start and make sure it all is happy and
works just fine.
Then clean up.
 cd /usr
 rm mysql.tar
 cd /var/db
 rm -rf mysql.old
jerry
Thank you to everyone who replied.  I followed the above steps and the 
SQL server seems to be happy and running on the /usr partition instead 
of /var for now.  We'll be watching it, and if all seems to be working 
well, we'll delete the old data off /var.

Thanks again! (especially for the specific directions on moving the 
data over, Jerry...)

-Bart
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 1024x768 console

2004-09-08 Thread Giorgos Keramidas
On 2004-09-08 10:18, Osmany Guirola Cruz [EMAIL PROTECTED] wrote:
 Hi people how can i set my consoles resolution with a resolution
 greater than normal for example 1024x768 ..

Support for video modes other than VESA_800x600 is under development for
the CURRENT branch of FreeBSD.  Someone has already posted a patch to
the freebsd-current mailing list and a lot of people are testing it, but
don't hold your breath.  Testing might take a while.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Testimonial - Thanks to FreeBSD

2004-09-08 Thread Herbert Wolverson
On Wed, 08 Sep 2004 00:27:24 +0200, Valéry [EMAIL PROTECTED] wrote:
 Hi,
 
 starting on mainframe in the middle 80's,
 i met a dilemn in the later 90's : if you want a job,
 you must run on Microsoft.
 Well, i started a new learn of computing on this
 OS, un-learning all about i knew on computing,
 a very difficult task when you're coming from IBM...
 All my friends repeated to me :
 you should work on Unix like system, you should ..
 2 month's ago, i would like to setup my own server,
 at home, with web, ftp and mail services.
 I want him robust, efficient, safe and so one.
 i dreamed to get an old 3090 for 500$ !, but
 there's no place at home for him :o)
 Thus, i have started to install my first FreeBSD
 (on a very special computer) ... 2 weeks later,
 without any knowledge about Unix like systems,
 my httpd, ftpd ran (very ?!) well. This mean that
 your system is well designed and documented.
 Monitoring access, it's incredible to see that BSD
 is faster by 2 to 3 than other tested system.
 and i discovered that computing is absolutely what
 i learned on IBM ..
 
 Great thanks to the community, and your effort to
 document FreeBSD, even in French (we are so bad with
 others languages ..!), i hope to help the FreeBSD users
 by writing some drivers and other things,

Welcome to the community!

My testimonial to FreeBSD would be that three years ago I was asked to
get a mailserver for 1,200 users setup quickly, using Qmail, with a
web interface and virus scanning of each and every message. A few days
later, I had FreeBSD+Qmail-ldap+Qmailscanner running - and it's still
running. In three years, it's had two outages, both hardware related.
You really can't beat that.

Since then, I've used FreeBSD for fileservers, firewalls,
printservers, webservers, database servers, and my desktop at home.
I've played with Linux, but the BSD documentation is always more
complete, FreeBSD systems seem to consistently take a kicking and come
back for more. That, and lists such as this offer really great
support.

I love FreeBSD. :-)

-- Herbert
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sysinstall problem

2004-09-08 Thread David Syphers
On Wednesday 08 September 2004 12:05 pm, Gene Bomgardner wrote:
 Running 5.2.1. The package is found and downloaded before the error
 occurrs. In this particular case, it's fonts for XFree86, but the same
 occurrs for each package it tries to add. I wonder if I might be running up
 against permissions when pkg_add actually tries to add the package?

If you're running sysinstall as root, which is how you have to do it (it gives 
an error if you try to run it as a user), then it's not a permissions 
problem. What happens when you try pkg_add directly?

 If you're installing, you can see more info by looking at the second
 virtual
 terminal (alt-F2).

 Unfoirtunately not installing.

There may be a way to turn it on post-install, but I couldn't figure it out. 
(Sysinstall, under 'options', has 'debugging' turned off by default in 
post-install. Turning it on didn't seem to change anything, however, even 
when I turned off getty on the alt-f2 ttyv.) There's a reason sysinstall is 
rarely or never used post-install...

-David

-- 
+++ Divide By Cucumber Error. Please
Reinstall Universe And Reboot. +++
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sysinstall problem

2004-09-08 Thread Gene Bomgardner


From: David Syphers [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
CC: Gene Bomgardner [EMAIL PROTECTED]
Subject: Re: sysinstall problem
Date: Wed, 8 Sep 2004 12:29:35 -0700
If you're running sysinstall as root, which is how you have to do it (it 
gives
an error if you try to run it as a user), then it's not a permissions
problem. What happens when you try pkg_add directly?
I'm not sure how to use pkg_add directly to install the entire XFree86 
distribution. I suspect it's not a single package. Is there a list 
somewhere?

Gene
_
On the road to retirement? Check out MSN Life Events for advice on how to 
get there! http://lifeevents.msn.com/category.aspx?cid=Retirement

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


CLI tool for motherboard/CPU temp monitoring.

2004-09-08 Thread Kenji M
Does anyone know if there are any tools in ports that allows me to
monitor the CPU and motherboard temperatures?  I am running 4.10 and 5.2.1
with assorted Intel and AMD x86 based mobos.

Thanks in advance.

-Kenji

+
kenji morishige
[EMAIL PROTECTED]
http://www.kenjim.com
+
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: CLI tool for motherboard/CPU temp monitoring.

2004-09-08 Thread Stijn Hoop
On Wed, Sep 08, 2004 at 01:23:36PM -0700, Kenji M wrote:
 Does anyone know if there are any tools in ports that allows me to
 monitor the CPU and motherboard temperatures?  I am running 4.10 and 5.2.1
 with assorted Intel and AMD x86 based mobos.

For some mobo's, /usr/ports/sysutils/xmbmon will work; you can instruct
it to run without X and install only the CLI binary 'mbmon' by installing
WITHOUT_X11=yes.

HTH,

--Stijn

-- 
Man had always assumed that he was more intelligent than dolphins because
he had achieved so much... the wheel, New York, wars, and so on, whilst
all the dolphins had ever done was muck about in the water having a good
time. But conversely the dolphins believed themselves to be more intelligent
than man for precisely the same reasons.
-- Douglas Adams, The Hitchhikers Guide To The Galaxy


pgpYZBBZeas4V.pgp
Description: PGP signature


Re: Moving MySQL database

2004-09-08 Thread Jerry McAllister
Hi,

 On Sep 3, 2004, at 10:46 AM, Jerry McAllister wrote:
  I have a server that is rapidly filling the var partition with a MySQL
  database.  I'd like to move it to a subdirectory somewhere under /usr.
 snip
  If you don't want to move all the stuff in /var/db, then you will
  have to be more selective and make the link from within /var/db
  rather than just the whole db directory from within /var.
 
  For example, the MySQL stuff is likely to all be in a directory
  called /var/db/mysql.   So:
 
  Stop MySQL or reboot to single user.
  Then
   cd /var/db/mysql
   tar cf /usr/mysql.tar *
   cd /usr
   mkdir var.db.mysql
   cd var.db.mysql
   tar xf ../../mysql.tar
   cd /var/db
   mv mysql mysql.old
   ln -s /usr/var.db.mysql mysql
  Now, reboot and let MySQL start and make sure it all is happy and
  works just fine.
  Then clean up.
   cd /usr
   rm mysql.tar
   cd /var/db
   rm -rf mysql.old
 
  jerry
 
 Thank you to everyone who replied.  I followed the above steps and the 
 SQL server seems to be happy and running on the /usr partition instead 
 of /var for now.  We'll be watching it, and if all seems to be working 
 well, we'll delete the old data off /var.
 
 Thanks again! (especially for the specific directions on moving the 
 data over, Jerry...)

Good.  I am glad it works for you.
It seemed to be shorter and more clear to just make an example than
to try and write out an explaination for it. 

jerry

 
 -Bart
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: CLI tool for motherboard/CPU temp monitoring.

2004-09-08 Thread Sheets, Jason (OZ CEEDR)


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:owner-freebsd-
 [EMAIL PROTECTED] On Behalf Of Stijn Hoop
 Sent: Wednesday, September 08, 2004 2:40 PM
 To: Kenji M
 Cc: FreeBSD - Questions
 Subject: Re: CLI tool for motherboard/CPU temp monitoring.
 
 On Wed, Sep 08, 2004 at 01:23:36PM -0700, Kenji M wrote:
  Does anyone know if there are any tools in ports that allows me to
  monitor the CPU and motherboard temperatures?  I am running 4.10 and
 5.2.1
  with assorted Intel and AMD x86 based mobos.
 
 For some mobo's, /usr/ports/sysutils/xmbmon will work; you can
instruct
 it to run without X and install only the CLI binary 'mbmon' by
installing
 WITHOUT_X11=yes.
 


Also look at /usr/ports/sysutils/healthd

 HTH,
 
 --Stijn
 
 --
 Man had always assumed that he was more intelligent than dolphins
because
 he had achieved so much... the wheel, New York, wars, and so on,
whilst
 all the dolphins had ever done was muck about in the water having a
good
 time. But conversely the dolphins believed themselves to be more
 intelligent
 than man for precisely the same reasons.
   -- Douglas Adams, The Hitchhikers Guide To The Galaxy
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: http://www.arc.itb.ac.id/freebsd/design-44bsd/need support

2004-09-08 Thread Jerry McAllister
 
 I'm sorry for asking something weird, actually I want to mastering free bsd, but I 
 don't
 know the way can I use to start learn the free bsd. would you like to give me some 
 adtvise
 what I have learn to start learn free bsd

Start by reading the handbook that is available free to read or download
at the FreeBSD web site:  http://www.freebsd.org/
Then download an install ISO or buy a set from one of the packaging vendors
that are listed and install it and practice.  Learn to search FAQs and
online publications for additional information.  There are also several
good books on FreeBSD that you can buy and study.  They parallel the 
FreeBSD handbook and supliment it is different wordings. 
Some are 'The Complete FreeBSD', 'FreeBSD Unleashed', 'Absolute FreeBSD' and
others.

jerry

 thank you.
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 
 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: advantage/disadvatage of freebsd 5.2.1 over other OS in the market???

2004-09-08 Thread Vulpes Velox
On Wed, 8 Sep 2004 05:51:32 -0700 (PDT)
icecool_ace [EMAIL PROTECTED] wrote:

 hello freebsd developers!:) im aceron a student from the
 philippines.i would like to know the advantages and disadvantages of
 freebsd 5.2.1 over other OS in the market.mainly because we can't
 compare it to other OS one by one...to tell u frankly here in the
 philippines the only OS widely being used is windows and mac.so we
 would like to discuss an operating system other than windows and mac
 to our classmates and friends.and we chose freebsd...thank you for
 helping us.God bless!:)

Nice pkg/ports system. Easy  to learn(was my first introduction to
unix). Easy to configure. Nicely documented.

Basically, like the other guy said... starting poking around
freebsd.org and see what you think and if you have any questions ask.
:)

BTW I would suggest holding on 5x till it hits stable in about a
month.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: VESA_800x600 (age old question)

2004-09-08 Thread Parv
in message [EMAIL PROTECTED],
wrote Lewis Thompson thusly...

 I've got VESA and SC_PIXEL_MODE in my kernel and I want to be able
 to do: vidcontrol VESA_800x600.
 
   However, when I do this I receive the following message:
 
 vidcontrol: cannot set videomode: Operation not supported by device

Won't i love to have the same on Dell i5ke w/ ATI Rage 128 Mobility
M3 LF (AGP) card.


 This is an Intel 855GM/GME Montara (I use i810 for x.org).  I
 don't know if it means anything but in the Xorg.log file I am told
 that a VESA BIOS is detected:
 
 (II) I810(0): VESA BIOS detected

Same i get for R128. (using r128 from XFree86)


 Can somebody please tell me what this means?

All that means is the card does not have proper/complete VESA
implementation.  IOW, get a card w/ proper/complete VESA
implementation?


  - Parv

-- 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: VESA_800x600 (age old question)

2004-09-08 Thread Lewis Thompson
On Wed, Sep 08, 2004 at 04:59:23PM -0400, Parv wrote:
 in message [EMAIL PROTECTED], wrote Lewis Thompson
 thusly...
  vidcontrol: cannot set videomode: Operation not supported by device
 
  Can somebody please tell me what this means?
 
 All that means is the card does not have proper/complete VESA
 implementation.  IOW, get a card w/ proper/complete VESA
 implementation?

Aha!  So while it does have a VESA BIOS it's just not complete.
Presumably the vesa code uses some of the less common features to
achieve what it does?  In a word, it's doesn't work and it's not going
to without some really radical changes to the vesa code?  Can you
confirm/refute this?

  I'd love to switch the card... unfortunately this is a laptop and I
really don't fancy soldering it; might void my Sony warranty ;)

-lewiz.

-- 
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.

-| msn:[EMAIL PROTECTED] | jabber:[EMAIL PROTECTED] | url:www.lewiz.org |-


pgpm7lxCyIGuA.pgp
Description: PGP signature


Re: sysinstall problem

2004-09-08 Thread David Syphers
On Wednesday 08 September 2004 12:57 pm, Gene Bomgardner wrote:
 I'm not sure how to use pkg_add directly to install the entire XFree86
 distribution. I suspect it's not a single package. Is there a list
 somewhere?

XFree86 is in 
ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-5.2.1-release/x11/. There is 
in fact just one file to install if you want everything, XFree86-4.3.0,1.tbz.

You may also consider using Xorg, which is now the default windowing system 
for FreeBSD, and whose packages you can find in 
ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-5-current/Latest/. Also, I 
personally only use the ports collection, which is always more up-to-date and 
(I think) easier to use. If you're impatient or have a slow computer, 
however, packages are better.

-David

-- 
+++ Divide By Cucumber Error. Please
Reinstall Universe And Reboot. +++
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


portupgrade broken?

2004-09-08 Thread Mark Rowlands
Updating the ports index ... Generating INDEX.tmp - please
wait..Warning: Duplicate INDEX entry: freeciv-gtk2-1.14.1

Warning: Duplicate INDEX entry: mod_jk2-apache2-2.0.2

Warning: Duplicate INDEX entry: mod_rpaf-ap2-0.5

 Done.

done

[Updating the portsdb format:bdb1_btree in /usr/ports ... - 11733 port
entries found
.1000.2000.3000.4000.5000...
..6000.7000.8000/usr/local/lib/ruby/site_ruby/1.8/po
rtsdb.rb:587: [BUG] Bus Error

ruby 1.8.2 (2004-07-29) [i386-freebsd4]

 

got the above on 4-10  with portsdb -uU

 

recvsupped ports ...got same

reinstalled portupgrade . got same

removed /usr/ports/

removed refuse files, cvsupped , got same

 

 

any thoughts?

 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portupgrade broken?

2004-09-08 Thread Derrick Ryalls
 [Updating the portsdb format:bdb1_btree in /usr/ports ... - 11733 port
 entries found
 .1000.2000.3000.4000.5000...
 ..6000.7000.8000/usr/local/lib/ruby/site_ruby/1.8/po
 rtsdb.rb:587: [BUG] Bus Error
 

I could be wrong, but it could be a hardware issue.  How long since
you backed up last?
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portupgrade broken?

2004-09-08 Thread kstewart
On Wednesday 08 September 2004 02:28 pm, Mark Rowlands wrote:
 Updating the ports index ... Generating INDEX.tmp - please
 wait..Warning: Duplicate INDEX entry: freeciv-gtk2-1.14.1

 Warning: Duplicate INDEX entry: mod_jk2-apache2-2.0.2

 Warning: Duplicate INDEX entry: mod_rpaf-ap2-0.5

  Done.

 done

 [Updating the portsdb format:bdb1_btree in /usr/ports ... - 11733 port
 entries found
 .1000.2000.3000.4000.5000...
 ..6000.7000.8000/usr/local/lib/ruby/site_ruby/1.8/po
 rtsdb.rb:587: [BUG] Bus Error

 ruby 1.8.2 (2004-07-29) [i386-freebsd4]



 got the above on 4-10  with portsdb -uU



 recvsupped ports ...got same

 reinstalled portupgrade . got same

 removed /usr/ports/

 removed refuse files, cvsupped , got same





 any thoughts?


Visit an archive of ports@ and do a search on PORTS_DBDRIVER. Then choose your 
way of solving the problem. I set the environmental PORTS_DBDRIVER=bdb1_hash 
and it seems to work just fine.

Kent

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html
Support the Bison at http://www.buffalofieldcampaign.org/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: named[353]: sysquery: no addrs found for root NS ..........

2004-09-08 Thread Ion-Mihai Tetcu
On Wed, 8 Sep 2004 07:28:11 +0900
horio shoichi [EMAIL PROTECTED] wrote:

 On Tue, 7 Sep 2004 14:24:37 +0300
 Toomas Aas [EMAIL PROTECTED] wrote:
  Hi!
  
   From time to time I get this:
   
   Sep  7 12:57:44 it named[353]: sysquery: no addrs found for root NS 
   (d.root-servers.net)
   Sep  7 12:57:44 it named[353]: sysquery: no addrs found for root NS 
   (a.root-servers.net)
   Sep  7 12:57:44 it named[353]: sysquery: no addrs found for root NS 
   (c.root-servers.net)
   Sep  7 12:57:45 it named[353]: sysquery: no addrs found for root NS 
   (h.root-servers.net)
   Sep  7 12:57:45 it named[353]: sysquery: no addrs found for root NS 
   (f.root-servers.net)
   Sep  7 12:57:45 it named[353]: sysquery: no addrs found for root NS 
   (b.root-servers.net)
   
  
  This problem plagued me for a long time on several FreeBSD 4 servers 
  running BIND 8 from the base system. Google finds numerous discussions 
  on this problem in various lists/newsgroups but a solution is rarely 
  offered.
  
  Finally, I found someone's theory in a NetBSD (or was it OpenBSD) 
  forum. I can't tell whether it is true or not, but it makes sense 
  to me.
  
  If your BIND is configured to use a forwarder and this forwarder is 
  really good then BIND (almost) never needs to contact the root servers. 
  The root zone times out in memory and it is not reloaded from disk. It 
  is only loaded when BIND is started. Thus, if your BIND finally needs 
  to contact a root name server after a long time of getting all 
  responses from forwarder, it turns out that the data for root zone is 
  not available...
  
  Now, as I said, I cannot tell whether this theory is true or not. What 
  I can say is that on all 4 machines where I run BIND I configured 
  one of two workarounds:
  - use forward only so you *never* need to check the root zone
  - do not use forwarders at all so you check the root zone fairly 
frequently.
  
  I did this almost a year ago, and after that I never have had this 
  problem again. HTH.
 
 Hmm, then the easiest cure against OP's would be
 periodically (say, per week) requesting purposely
 wrong request (e.g., nslookup example.heh) ? 

Actually the uptime was 3 days (I've upgraded to 5.3B3) and I'm _sure_
to have entered some non-existent addresses in my web browser.
 


-- 
IOnut
Unregistered ;) FreeBSD user
5.3-BETA3 - try `sysctl debug.witness_watch=0`
and prepare to fly :-)


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Vinum Concat Data Recovery

2004-09-08 Thread Greg 'groggy' Lehey
On Wednesday,  8 September 2004 at 13:13:22 +0200, Thomas Spreng wrote:
 Hi,

 I have made concat drive using 3 hard disks using vimum vm. Some weeks
 ago one of those 3 disks crashed completely (bios can't even detect it
 anymore). My question now is: is there any chance to recover the data
 that resides on the 2 (working) remaining disks?

Not from the volume.  This is a non-resilient configuration.  You'll
have use the backup.

 drive a device /dev/ad6s1e
 drive b device /dev/ad4s1e
 drive c device /dev/ad5s1e
 volume storage
  plex org concat
sd length 78528m drive a
sd length 58643m drive b
sd length 58643m drive c

Greg
--
When replying to this message, please copy the original recipients.
If you don't, I may ignore the reply or reply to the original recipients.
For more information, see http://www.lemis.com/questions.html
Note: I discard all HTML mail unseen.
Finger [EMAIL PROTECTED] for PGP public key.
See complete headers for address and phone numbers.


pgpaB54XUjR9n.pgp
Description: PGP signature


Re: CLI tool for motherboard/CPU temp monitoring.

2004-09-08 Thread Kenji M
Thanks a lot guys. I'm gonna try these out.
I have 7 boxes in my house without A/C hosting various sites... the room
is approaching 90+ degree with fans blowing full bore... and my house is 100
degree... Silicon Valley weather is super hot this year!

-Kenji

On Wed, Sep 08, 2004 at 02:48:18PM -0600, Sheets, Jason (OZ CEEDR) wrote:
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:owner-freebsd-
  [EMAIL PROTECTED] On Behalf Of Stijn Hoop
  Sent: Wednesday, September 08, 2004 2:40 PM
  To: Kenji M
  Cc: FreeBSD - Questions
  Subject: Re: CLI tool for motherboard/CPU temp monitoring.
  
  On Wed, Sep 08, 2004 at 01:23:36PM -0700, Kenji M wrote:
   Does anyone know if there are any tools in ports that allows me to
   monitor the CPU and motherboard temperatures?  I am running 4.10 and
  5.2.1
   with assorted Intel and AMD x86 based mobos.
  
  For some mobo's, /usr/ports/sysutils/xmbmon will work; you can
 instruct
  it to run without X and install only the CLI binary 'mbmon' by
 installing
  WITHOUT_X11=yes.
  
 
 
 Also look at /usr/ports/sysutils/healthd
 
  HTH,
  
  --Stijn
  
  --
  Man had always assumed that he was more intelligent than dolphins
 because
  he had achieved so much... the wheel, New York, wars, and so on,
 whilst
  all the dolphins had ever done was muck about in the water having a
 good
  time. But conversely the dolphins believed themselves to be more
  intelligent
  than man for precisely the same reasons.
  -- Douglas Adams, The Hitchhikers Guide To The Galaxy

-- 
+
kenji morishige
[EMAIL PROTECTED]
http://www.kenjim.com
+
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: 5.3 and USB keyboard

2004-09-08 Thread Ara Avvali
Hi
Yes I tried that too. Even enabled, disable, automatic USB detection I bios
and no luck, it just locks up and I can't navigate through sysinstall


*   The information transmitted in this e-mail is for the exclusive use
of the intended addressee and may contain confidential and/or privileged
material. Any review, re-transmission, dissemination or other use of it, or
the taking of any action in reliance upon this information by persons and/or
entities other than the intended recipient is prohibited. If you received
this in error, please inform the sender and/or addressee immediately and
delete the material. 
*E-mails may not be secure, may contain computer viruses and may be
corrupted in transmission. Please carefully check this e-mail (and any
attachment) accordingly. No warranties are given and no liability is
accepted for any loss or damage caused by such matters.
 
-Original Message-
From: Tomaz Borstnar [mailto:[EMAIL PROTECTED] 
Sent: September 8, 2004 5:52 PM
To: [EMAIL PROTECTED]
Subject: Re: 5.3 and USB keyboard

At 05:29 7.9.2004, you wrote:
Hello. Is anyone else facing this problem too?

I have tried all 3 betas so far for 5.3 and in all of them after booting
the
cd and entering sysinstall, keyboard becomes dead. Actually it is no hung
since it lets you use num and caps lock and you can see light go on-off but
won't let you navigate to menus. It is a USB keyboard but no problem at all
with 4.10 and 5.2.1

tried unplugging it and plug it back?

Sometimes it helps. But yes, I have also seen things like this on i386 
betas of 5.3, but not on amd64.

Tomaz 



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


PPPOE using PPP IPCP problem

2004-09-08 Thread Kris
Hi

 

I am trying to connect to a DSL provider in Australia called OPTUS. I have
configured many other DSL providers with no hassle previously but this
particular ISP I keep running into the following problems which I hope
*someone* can shed some light on. 

 

I have tried the box that I will be using and the same ppp configuration on
my ADSL provider at home with no problems at all, just for piece of mind
that the box itself and everything is working.

 

Here is the ppp.conf and then the resulting log file. I seem to be getting
Authenticated and then being sent an IPCP request to configure my local and
remote IP's etc.. but it seems it is being ignored because ppp is still in
the Authenticate state. A seen in the log towards the end..

 

 tun0: Phase: Pap Input: SUCCESS ()

 tun0: IPCP: deflink: Error: Unexpected IPCP in phase Authenticate (ignored)

 last message repeated 6 times

 last message repeated 2 times

 

 

Does anyone have any ideas as to what is going on and how I may fix it ?

 

Kris

 

 

---start ppp.conf--

default:

 

 set log Chat Connect command tun Phase Warning LCP IPCP CCP

 enable dns

 set redial 0 0

 set timeout 0

 disable lqr

 disable ipv6cp

 

optus:

 

 set device PPPoE:dc0

 set authname [EMAIL PROTECTED]

 set authkey xxx

 set dial

 set login

 set speed sync

 set mtu 1492

 set mru 1492

 set ctsrts off

 enable dns

 set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0

 add 0 0 HISADDR

 

- end ppp.conf-

 

--- start ppp.log

 

Phase: Using interface: tun0

 Phase: deflink: Created in closed state

 tun0: Command: default: enable dns

 tun0: Command: default: set redial 0 0

 tun0: Command: default: set timeout 0

 tun0: Command: default: disable lqr

 tun0: Command: default: disable ipv6cp

 tun0: Command: optus: set device PPPoE:dc0

 tun0: Command: optus: set authname [EMAIL PROTECTED]

 tun0: Command: optus: set authkey 

 tun0: Command: optus: set dial

 tun0: Command: optus: set login

 tun0: Command: optus: set speed sync

 tun0: Command: optus: set mtu 1492

 tun0: Command: optus: set mru 1492

 tun0: Command: optus: set ctsrts off

 tun0: Command: optus: enable dns

 tun0: Command: optus: set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0
0.0.0.0

 tun0: Command: optus: add 0 0 HISADDR

 tun0: Warning: Add route failed: 0.0.0.0/0 already exists

 tun0: Phase: PPP Started (ddial mode).

 tun0: Phase: bundle: Establish

 tun0: Phase: deflink: closed - opening

 tun0: Phase: deflink: Connected!

 tun0: Phase: deflink: opening - dial

 tun0: Phase: deflink: dial - carrier

 tun0: Phase: Received NGM_PPPOE_ACNAME (hook qcb1-charlotte)

 tun0: Phase: Received NGM_PPPOE_SESSIONID

 tun0: Phase: Received NGM_PPPOE_SUCCESS

 tun0: Phase: deflink: carrier - login

 tun0: Phase: deflink: login - lcp

 tun0: LCP: FSM: Using deflink as a transport

 tun0: LCP: deflink: State change Initial -- Closed

 tun0: LCP: deflink: State change Closed -- Stopped

 tun0: LCP: deflink: RecvConfigReq(12) state = Stopped

 tun0: LCP:  MRU[4] 1492

 tun0: LCP:  AUTHPROTO[5] 0xc223 (CHAP 0x05)

 tun0: LCP:  MAGICNUM[6] 0x12402c2b

 tun0: LCP: deflink: SendConfigReq(1) state = Stopped

 tun0: LCP:  MRU[4] 1492

 tun0: LCP:  MAGICNUM[6] 0xd914771a

 tun0: LCP: deflink: SendConfigAck(12) state = Stopped

 tun0: LCP:  MRU[4] 1492

 tun0: LCP:  AUTHPROTO[5] 0xc223 (CHAP 0x05)

 tun0: LCP:  MAGICNUM[6] 0x12402c2b

 tun0: LCP: deflink: LayerStart

 tun0: LCP: deflink: State change Stopped -- Ack-Sent

 tun0: LCP: deflink: RecvConfigAck(1) state = Ack-Sent

 tun0: LCP:  MRU[4] 1492

 tun0: LCP:  MAGICNUM[6] 0xd914771a

 tun0: LCP: deflink: State change Ack-Sent -- Opened

 tun0: LCP: deflink: LayerUp

 tun0: Phase: bundle: Authenticate

 tun0: Phase: deflink: his = CHAP 0x05, mine = none

 tun0: Phase: Chap Input: CHALLENGE (16 bytes from qcb1-charlotte)

 tun0: Phase: Chap Output: RESPONSE ([EMAIL PROTECTED])

 tun0: LCP: deflink: RecvConfigReq(128) state = Opened

 tun0: LCP: deflink: LayerDown

 tun0: LCP:  AUTHPROTO[4] 0xc023 (PAP)

 tun0: LCP: deflink: SendConfigReq(2) state = Opened

 tun0: LCP:  MRU[4] 1492

 tun0: LCP:  MAGICNUM[6] 0xb3531398

 tun0: LCP: deflink: SendConfigNak(128) state = Opened

 tun0: LCP:  MRU[4] 1492

 tun0: LCP: deflink: State change Opened -- Req-Sent

 tun0: LCP: deflink: RecvConfigAck(2) state = Req-Sent

 tun0: LCP:  MRU[4] 1492

 tun0: LCP:  MAGICNUM[6] 0xb3531398

 tun0: LCP: deflink: State change Req-Sent -- Ack-Rcvd

 tun0: LCP: deflink: RecvConfigReq(128) state = Ack-Rcvd

 tun0: LCP:  AUTHPROTO[4] 0xc023 (PAP)

 tun0: LCP: deflink: SendConfigAck(128) state = Ack-Rcvd

 tun0: LCP:  AUTHPROTO[4] 0xc023 (PAP)

 tun0: LCP: deflink: State change Ack-Rcvd -- Opened

 tun0: LCP: deflink: LayerUp

 tun0: Phase: deflink: his = PAP, mine = none

 tun0: Phase: Pap Output: [EMAIL PROTECTED] 

 tun0: LCP: deflink: RecvConfigReq(128) state = Opened

 tun0: LCP: deflink: LayerDown

 tun0: LCP:  AUTHPROTO[4] 0xc023 

Re: Moving MySQL database

2004-09-08 Thread Alan, Cheng-Lung Sung
Hi, 
 Why not just use mysqldump --alldatabases ?
 Export all, then import all.
 It can make sure all your DB data consistency.

Regards,

On Wed, 8 Sep 2004 16:40:01 -0400 (EDT), Jerry McAllister
[EMAIL PROTECTED] wrote:
 Hi,
 
  On Sep 3, 2004, at 10:46 AM, Jerry McAllister wrote:
   I have a server that is rapidly filling the var partition with a MySQL
   database.  I'd like to move it to a subdirectory somewhere under /usr.
  snip
   If you don't want to move all the stuff in /var/db, then you will
   have to be more selective and make the link from within /var/db
   rather than just the whole db directory from within /var.
  
   For example, the MySQL stuff is likely to all be in a directory
   called /var/db/mysql.   So:
  
   Stop MySQL or reboot to single user.
   Then
cd /var/db/mysql
tar cf /usr/mysql.tar *
cd /usr
mkdir var.db.mysql
cd var.db.mysql
tar xf ../../mysql.tar
cd /var/db
mv mysql mysql.old
ln -s /usr/var.db.mysql mysql
   Now, reboot and let MySQL start and make sure it all is happy and
   works just fine.
   Then clean up.
cd /usr
rm mysql.tar
cd /var/db
rm -rf mysql.old
  
   jerry
 
  Thank you to everyone who replied.  I followed the above steps and the
  SQL server seems to be happy and running on the /usr partition instead
  of /var for now.  We'll be watching it, and if all seems to be working
  well, we'll delete the old data off /var.
 
  Thanks again! (especially for the specific directions on moving the
  data over, Jerry...)
 
 Good.  I am glad it works for you.
 It seemed to be shorter and more clear to just make an example than
 to try and write out an explaination for it.
 
 jerry
 
 
 
 
  -Bart
 
  ___
  [EMAIL PROTECTED] mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED]
 
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 



-- 
COBRA Lab in NTU EE
IAS Lab in SINICA IIS
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: new card, still can't get X11 working

2004-09-08 Thread jason
Dustin wrote:
Hmm, I can't find DRM anywhere in the xorg.conf file??
Any more tips?
 

I have a 8500 with xorg.  I can't use drm, also called dri, right now.
If you can use it make sure you have this turned on.
Section DRI
Mode 0666
EndSection
This is what he meant by drm:
# This loads the GLX module
   Load   glx
# This loads the DRI module
#Load   dri
This is how I am running now.  DRI carshes my system.  Hopefully its not
in the drivers, am am troubleshooting it now.  DRI if off in the default
conf, I think?
Also try some of this:
Section Device
   Identifier  8500LE
   Driver  radeon
   #VideoRam65536
   # Insert Clocks lines here if appropriate
   BusID PCI:2:0:0
   Option BusType AGP
   Option AGPMode 4
   Option AGPFastWrite True
   Option AGPSize 128
   Option EnableDepthMoves True
   Option EnablePageFlip On
   Option backingstore On
   Option dpms
   Screen 0
EndSection
You should post you Xorg.conf on a web site for us to check if you can't
get it working, or email it to us.  I would say not to freebsd because
it makes some people annoyed whole are subscribed and I guese on dailup.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: BSD display

2004-09-08 Thread steveb99
 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Nico
Meijer
 Sent: Wednesday, September 08, 2004 8:59 AM
 To: [EMAIL PROTECTED]
 Subject: Re: BSD display
 
 Hi Steve,
 
   Displaying the OS helps a hacker know which  approach 
 cracking into a 
  box.
 
 This may be true. OTOH, not displaying the version of [insert 
 software package of the day here] may invite a 'hacker' to 
 pull a full-scale all-out number on you, trying every 
 possible exploit he can get his hands on. Or simply DDoS you 
 out of this universe. Or launch whatever OS-agnostic attack 
 can be performed.
 
 I'm sure there have been long discussions over this 'security 
 by obscurity' thing *somewhere*... ;-)
 
Nothing can stop a hacker who really wants your box, but most of the
annoyances are script kiddies. Script kiddies when things get tough
tend to move on to another system.  So whatever I can to not help
script kiddies is to my advantage.  

Steve B.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: problem

2004-09-08 Thread Subhro
Is this is a GENERIC kernel? If not then include the system console
driver in the kernel config. As far I remember its sc.

Regards
S.


On Wed, 8 Sep 2004 11:04:24 -0700 (PDT), Denis Dunauskas
[EMAIL PROTECTED] wrote:
 hi i have this problem when I do startx
 
 XFree86 Version 4.3.0
 Release Date: 27 February 2003
 X Protocol Version 11, Revision 0, Release 6.6
 Build Operating System: FreeBSD 5.2.1 sparc64 [ELF]
 Build Date: 14 February 2004
Before reporting problems, check
 http://www.XFree86.Org/
to make sure that you have the latest version.
 Module Loader present
 Markers: (--) probed, (**) from config file, (==)
 default setting,
 (++) from command line, (!!) notice, (II)
 informational,
 (WW) warning, (EE) error, (NI) not
 implemented, (??) unknown.
 (==) Log file: /var/log/XFree86.0.log, Time: Tue Feb
 24 12:27:00 2004
 (==) Using config file: /etc/X11/XF86Config
 (==) ServerLayout Simple Layout
 (**) |--Screen Screen 1 (0)
 (**) |   |--Monitor My Monitor
 (**) |   |--Device * Generic VGA compatible
 (**) |--Input Device Mouse1
 (**) |--Input Device Keyboard1
 (**) Option AutoRepeat 500 30
 (**) Option XkbRules xfree86
 (**) XKB: rules: xfree86
 (**) Option XkbModel pc104
 (**) XKB: model: pc104
 (**) Option XkbLayout en_US
 (**) XKB: layout: en_US
 (**) Option XkbOptions ctrl:ctrl_ac,caps:internal
 (**) XKB: options: ctrl:ctrl_ac,caps:internal
 (==) Keyboard: CustomKeycode disabled
 (WW) `fonts.dir' not found (or not valid) in
 /usr/X11R6/lib/X11/fonts/local/.
Entry deleted from font path.
(Run 'mkfontdir' on
 /usr/X11R6/lib/X11/fonts/local/).
 (**) FontPath set to
 /usr/X11R6/lib/X11/fonts/misc/,/usr/X11R6/lib/X11/fonts/75dpi/:unscaled,/usr/X11R6/lib/X11/fonts/100dpi/:unscaled,/usr/X11R6/lib/X11/fonts/Speedo/,/usr/X11R6/lib/X11/fonts/Type1/,/usr/X11R6/lib/X11/fonts/75dpi/,/usr/X11R6/lib/X11/fonts/100dpi/
 (**) RgbPath set to /usr/X11R6/lib/X11/rgb
 (==) ModulePath set to /usr/X11R6/lib/modules
 
 Fatal server error:
 xf86OpenConsole: No console driver found
Supported drivers: syscons
Check your kernel's console driver
 configuration and /dev entries
 
 thank you
 
 ___
 Do you Yahoo!?
 Win 1 of 4,000 free domain names from Yahoo! Enter now.
 http://promotions.yahoo.com/goldrush
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 



-- 
Subhro Sankha Kar
School of Information Technology
Block AQ-13/1 Sector V
ZIP 700091
India
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Trouble with NICs

2004-09-08 Thread Blake Meike
Hi,
  I'm trying to switch to FreeBSD, from years of Linux.  I have a  5k 
with an Adaptec RAID card that has run Linux fine, in the past.  I'm 
still having some trouble getting it to run FreeBSD.  After having 
difficulty with a couple of 5.x kernels, and getting advice here to 
back off to 4.10, I've got most things working.  I'm booting a custom 
kernel, but the problem is the same with GENERIC.

  ... ant the problem is that neither of the two E'net interfaces (one 
on the motherboard, one a separate card) comes up.  I can get either, 
sometimes both, to come up if I fiddle around with ifconfig for a 
while, but I'm sorry to say that I don't have a reproducable sequence 
that always works: perhaps something to do with the media argument.  
I've tried fiddling with rc.config, trying to bring up one interface 
and not the other, include the media argument, and a couple things like 
that.  Basically, I'm floundering.

  At some point, looking through the various documentation I noticed 
that several of my IRQs overlap.  Looking at the kernel config file, 
though, I see that some devices specify an IRQ and some don't.  Booting 
/kernel -c tells me that there are no network devices of any kind, 
enabled or disabled, so I can't experiment with re-assigning IRQs, to 
find out if this whole thing is a red herring.

rc.config and dmesg enclosed, fwiw.
Any help would be greatly appreciated.
Thanks,
  Blake Meike
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Trouble with NICs (w/ enclosures)

2004-09-08 Thread Blake Meike
Hi,
  I'm trying to switch to FreeBSD, from years of Linux.  I have a  5k 
with an Adaptec RAID card that has run Linux fine, in the past.  I'm 
still having some trouble getting it to run FreeBSD.  After having 
difficulty with a couple of 5.x kernels, and getting advice here to 
back off to 4.10, I've got most things working.  I'm booting a custom 
kernel, but the problem is the same with GENERIC.

  ... ant the problem is that neither of the two E'net interfaces (one 
on the motherboard, one a separate card) comes up.  I can get either, 
sometimes both, to come up if I fiddle around with ifconfig for a 
while, but I'm sorry to say that I don't have a reproducable sequence 
that always works: perhaps something to do with the media argument.  
I've tried fiddling with rc.config, trying to bring up one interface 
and not the other, include the media argument, and a couple things like 
that.  Basically, I'm floundering.

  At some point, looking through the various documentation I noticed 
that several of my IRQs overlap.  Looking at the kernel config file, 
though, I see that some devices specify an IRQ and some don't.  Booting 
/kernel -c tells me that there are no network devices of any kind, 
enabled or disabled, so I can't experiment with re-assigning IRQs, to 
find out if this whole thing is a red herring.

rc.config and dmesg enclosed, fwiw.
Any help would be greatly appreciated.
Thanks,
  Blake Meike


dmesg
Description: Binary data
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: new card, still can't get X11 working

2004-09-08 Thread Dustin
I'm pretty sure DRM/DRI is disabled by default.

I haven't manually edited the xorg.conf file, instead I run
'xorgconfig'.

Update:  I was able to find an ATI Rage Pro 8MB AGP card.  I installed
it in the system, ran xorgconfig, then ran startx, and guess what.  I
got into, and out of X w/ out crashing.. Once.  So I tried it again,
this time the system crashed.  - Very strange.

The problems seem to be intermittent.  Sometimes I can get in, but when
I try to get out, it hangs.

Attached are the files.

BTW, when I come back up after a crash, is there something special I
should do?

Thanks much,

Dustin

http://marsik.org/bsd/xorg.conf
http://marsik.org/bsd/Xorg.0.log 

-Original Message-
From: jason [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 08, 2004 8:30 PM
To: Dustin
Cc: [EMAIL PROTECTED]
Subject: Re: new card, still can't get X11 working

Dustin wrote:

Hmm, I can't find DRM anywhere in the xorg.conf file??

Any more tips?

  

I have a 8500 with xorg.  I can't use drm, also called dri, right now.
If you can use it make sure you have this turned on.

Section DRI
Mode 0666
EndSection

This is what he meant by drm:

# This loads the GLX module
Load   glx
# This loads the DRI module
#Load   dri

This is how I am running now.  DRI carshes my system.  Hopefully its not
in the drivers, am am troubleshooting it now.  DRI if off in the default
conf, I think?

Also try some of this:

Section Device
Identifier  8500LE
Driver  radeon
#VideoRam65536
# Insert Clocks lines here if appropriate


BusID PCI:2:0:0
Option BusType AGP
Option AGPMode 4
Option AGPFastWrite True
Option AGPSize 128
Option EnableDepthMoves True
Option EnablePageFlip On
Option backingstore On
Option dpms
Screen 0


EndSection

You should post you Xorg.conf on a web site for us to check if you can't
get it working, or email it to us.  I would say not to freebsd because
it makes some people annoyed whole are subscribed and I guese on dailup.




___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]