FreeBSD 5.4 release firewall/router and PF not loading rule sets
Hello list...
I have a few questions I would like to ask. Some may sound stupid, but
please bear with me since I'm new to FreeBSD and networking for that
matter...
So, I'm trying to build this router/firewall thingy for our local
network. The box has 3 NIC's, one for the Internet and two for the
local subnets. I have to build it so that the two subnets can not
comunicate with each other. I would also like to implement NAT for the
both subnets so that only the routers IP is visible on the net. The
subnet hosts all have C-class adresses and not private network
addresses. I would also like to disable any connections from the
outside to the host and only allow the basic net services to be passed
out on the Internet, like web, smtp, etc...
The problem is I can not seem to get the firewall (PF) to work. The
computers IP's are all seen from the internet, NAT is not working...
if I type pfctl -s rules I only get two lines saying ALTQ support not
compiled in the kernel. Disabling ALTQ support. Do I need ALTQ
support for what I'm trying to do.
Any ideas on what should I check on my system? I read the man for
pfctl but couldn't find the command for just checking the pf.conf file
for syntax errors. I was using pf -f /etc/pf.conf for that, and it's
not outputting any errors only the ALTQ thingy and the ssh session
disconnects so than I have to reconnect.
I have pf enabled in rc.conf and as far as I can tell it's loading
fine and the pflogd is also running. It's just not working... guess
I'm measing something or am just plain stupid...
Maybe I didn't understend how this is supposed to be so here is my
first attempt at PF rule set building... ;) Here is my pf.conf
--
ext_if=rl0
ped_if=xl0
adm_if=xl1
priv_nets={ 127.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }
porti={ 20 21 25 80 443 }
set loginterface $ext_if
scrub in all
nat on $ext_if from $ped_if:network to any - ($ext_if)
nat on $ext_if from $adm_if:network to any - ($ext_if)
block all
pass quick on lo0 all
antispoof quick for $ped_if inet
antispoof quick for $adm_if inet
block drop in quick on $ext_if from $priv_nets to any
block drop out quick on $ext_if from any to $priv_nets
block drop in quick on $ped_if from $ped_if:network to $adm_if
block drop in quick on $adm_if from $adm_if:network to $ped_if
pass in on $ped_if proto {tcp, udp } from $ped_if:network to $ext_if
port $porti keep state
pass out on $ped_if proto {tcp, udp } from $ped_if:network to $ext_if
port $porti keep state
pass in on $adm_if proto {tcp, udp } from $adm_if:network to $ext_if
port $porti keep state
pass out on $adm_if proto {tcp, udp} from $adm_if:network to $ext_if
port $porti keep state
pass in on $ext_if proto {tcp, udp} from any port { 22 } keep state
pass out on $ext_if proto tcp all modulate state flags S/SA
pass out on $ext_if proto { udp, icmp } all keep state
-
I you have any ideas please help. Thanks for your time and answers...
best regards,
Uros
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
dhcpd.conf problem
Hi,
We configured a dhcpd.conf as following.
-
ddns-update-style interim;
ignore client-updates;
option space PXE;
option PXE.mtftp-ip code 1 = ip-address;
option PXE.mtftp-cport code 2 = unsigned integer 16;
option PXE.mtftp-sport code 3 = unsigned integer 16;
option PXE.mtftp-tmout code 4 = unsigned integer 8;
option PXE.mtftp-delay code 5 = unsigned integer 8;
option PXE.discovery-controlcode 6 = unsigned integer 8;
option PXE.discovery-mcast-addr code 7 = ip-address;
subnet 172.29.140.0 netmask 255.255.255.0 {
option routers 172.29.140.1;
option subnet-mask 255.255.255.0;
option nis-domain rvc.renesas.com;
option domain-name rvc.renesas.com;
option domain-name-servers 172.29.138.20;
host rvc-wstest {
next-server 172.29.140.162;
hardware ethernet 00:50:8b:fb:ea:5e;
fixed-address 172.29.140.163;
}
host rvc-wstest1 {
next-server 172.29.140.162;
hardware ethernet 00:11:25:37:1B:CD;
fixed-address 172.29.140.163;
}
host rvc-ws034 {
next-server 172.29.140.162;
hardware ethernet 00:11:25:4B:06:B0;
fixed-address 172.29.140.163;
}
host rvc-wsIBM {
next-server 172.29.141.10;
hardware ethernet 00:11:25:4D:95:26;
fixed-address 172.29.141.100;
}
}
host rvc-wscompaq {
next-server 172.29.141.10;
hardware ethernet 00:02:A5:02:D3:48;
fixed-address 172.29.141.154;
}
allow booting;
allow bootp;
class pxeclients {
match if substring (option vendor-class-identifier, 0, 9) =
PXEClient;
next-server 172.29.141.10;
filename linux-install/pxelinux.0;
-
The service dhcpd runs but the client is not received the ip add.
So what is the problem? Could you pls reply me as soon as possible.
Thank so much.
Thai
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: dhcpd.conf problem
At 01:16 AM 7/8/2005, thai nguyen wrote:
Hi,
We configured a dhcpd.conf as following.
-
ddns-update-style interim;
ignore client-updates;
option space PXE;
option PXE.mtftp-ip code 1 = ip-address;
option PXE.mtftp-cport code 2 = unsigned integer 16;
option PXE.mtftp-sport code 3 = unsigned integer 16;
option PXE.mtftp-tmout code 4 = unsigned integer 8;
option PXE.mtftp-delay code 5 = unsigned integer 8;
option PXE.discovery-controlcode 6 = unsigned integer 8;
option PXE.discovery-mcast-addr code 7 = ip-address;
subnet 172.29.140.0 netmask 255.255.255.0 {
option routers 172.29.140.1;
option subnet-mask 255.255.255.0;
option nis-domain rvc.renesas.com;
option domain-name rvc.renesas.com;
option domain-name-servers 172.29.138.20;
host rvc-wstest {
next-server 172.29.140.162;
hardware ethernet 00:50:8b:fb:ea:5e;
fixed-address 172.29.140.163;
}
host rvc-wstest1 {
next-server 172.29.140.162;
hardware ethernet 00:11:25:37:1B:CD;
fixed-address 172.29.140.163;
}
host rvc-ws034 {
next-server 172.29.140.162;
hardware ethernet 00:11:25:4B:06:B0;
fixed-address 172.29.140.163;
}
host rvc-wsIBM {
next-server 172.29.141.10;
hardware ethernet 00:11:25:4D:95:26;
fixed-address 172.29.141.100;
}
}
host rvc-wscompaq {
next-server 172.29.141.10;
hardware ethernet 00:02:A5:02:D3:48;
fixed-address 172.29.141.154;
}
allow booting;
allow bootp;
class pxeclients {
match if substring (option vendor-class-identifier, 0, 9) =
PXEClient;
next-server 172.29.141.10;
filename linux-install/pxelinux.0;
-
The service dhcpd runs but the client is not received the ip add.
So what is the problem? Could you pls reply me as soon as possible.
Unless part of the config file wasn't sent properly, it looks like you have
one extra right brace just before host rvc-wscompaq, and there's one
missing after the section for pxeclients.
-Glenn
Thank so much.
Thai
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
FreeBSD Training
Hi there, Does anyone know of a company in Johannesburg, South Africa that provides FreeBSD training courses? There is a fortune of FreeBSD documentation and books available on the web and could probably learn all there is to know in that manner. However, my Boss is keen to throw some fundage into a commercial training course that will enhance my knowledge and skills in areas relevent to our business model. So is there anything out there that caters for FreeBSD training in South Africa? Thanks, Gavin ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: tar Syntax Help
On 2005-07-07 20:20, Drew Tomlinson [EMAIL PROTECTED] wrote: I'm trying to copy an entire file system while using an exclude file to avoid copying things such as /dev, /proc, etc. I've read the man page and found the -X or --exclude-from tar option. I've create a file called /exclude.list. It contains lines such as: /exclude.list /dev /proc But I can't figure out how to form the correct command line. I basically want to do this: tar -cvf - --exclude-from /exclude.list -C / . | tar xpf - -C . Perhaps not what you're looking for, but you can perform a similar exclude operation on the output of find(1), using one or more grep(1) patterns and then feed the rest to cpio(1) in 'pass-through' mode: # cd / # find / | \ grep -v '^/dev/.*' | grep -v '^/proc/.*' | \ grep -v '^/mnt/.*' | \ cpio -p -dmvu /mnt The most important detail above is that the childen of /dev, /proc and /mnt are excluded, but not the directories themselves. This is why I trim from the output of find '^/dev/.*' but not '^/dev', '^/proc/.*' but not '^/proc', etc. - Giorgos ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
You [EMAIL PROTECTED] are not member (usagi-users ML)
You are not a member of this mailing list [EMAIL PROTECTED]. If you know the general guide of this list, please send mail with the mail body guide to the address [EMAIL PROTECTED] where guide is equal to GUIDE for case insensitive. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD Training
On 7/8/05, Gavin McDougall [EMAIL PROTECTED] wrote: Hi there, Does anyone know of a company in Johannesburg, South Africa that provides FreeBSD training courses? There is a fortune of FreeBSD documentation and books available on the web and could probably learn all there is to know in that manner. However, my Boss is keen to throw some fundage into a commercial training course that will enhance my knowledge and skills in areas relevent to our business model. So is there anything out there that caters for FreeBSD training in South Africa? I found only one consulting company at http://www.freebsd.org/commercial/consult.html located in Africa, but maybe I did not look closely enough. -- Dmitry We live less by imagination than despite it - Rockwell Kent, N by E ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
suitability of freebsd 5.3 for 486 dx2 66?
I plan on running a 486 I found laying around as a freebsd box. It only has a floppy, and yes, it's a 486. It does have 500 meg hard disk and 20 megs of ram though. Any ideas as to what is realistic to expect out of this machine? I plan to run it as a CLI box only to learn perl, python, C++ and some other stuff on. Xeys Sell on Yahoo! Auctions no fees. Bid on great items. http://auctions.yahoo.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
dual boot
i have on my hard disk two OS. freebsd and win2k i reinstalled the win2k and upon booting i made the partition with the freebsd active. but now i can only have access to freebsd. my win2k which i know is still there doesn't get to load since freebsd boot0 doesn't register it. i have tried to ways of getting it up 1. boot0cfg -m 0x3 ad0 error msg:- boot0cf: /dev/ad0: unknown or incompatible boot code 2. fdisk -B -b /boot/boot0 ad0 error msg:- fdisk: can't write fdisk partition table: Operation not permitted Obviously, I am a newbi ... so further illustration with the solution would be appreciated Thankz __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: PF firewall log problems
I guess I'm failing to see the point of writing to the log faster. If you need real time stats, use tcpdump -n -e -ttt -i pflog0. If you want to get say the last 1000 entries in the log and then go to realtime, use: sudo tcpdump -n -e -tt -c 1000 -r /var/log/pflog sudo tcpdump -n -e -ttt -i pflog0 On 7/7/05, fbsd_user [EMAIL PROTECTED] wrote: I am viewing pf log this way tcpdump -n -e -ttt -r /var/log/pflog Your reference to pflog man page is useless. Been there already. That gives some field names but not what is in them One of the pf mane pages says there is way to shorten buffer write cycle time. How do tell PF in rc.conf these over ride options?? -Original Message- From: Hornet [mailto:[EMAIL PROTECTED] Sent: Thursday, July 07, 2005 8:54 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] ORG Subject: Re: PF firewall log problems On 7/7/05, fbsd_user [EMAIL PROTECTED] wrote: How can I change the default wait time for PF buffer writes to the log file? The log records are being held in the buffers for a long time before being written out. I want to change this to a shorter time. How are you viewing the data? Realtime tcpdump tcpdump -n -e -ttt -i pflog0 or Viewing pflog tcpdump -n -e -ttt -r /var/log/pflog Anything written to the tty is going to be a bit slower, of course if you can jack into your brain all would be solved. Are there any tools or ports for use on the PF log file to create better standardized reports? I think there is one called hatchet. Of course you can't beat good old fashion grep,awk, and maybe sed Where can I find a description of the PF log record fields? http://www.freebsd.org/cgi/man.cgi?query=pflogsektion=4 Thanks ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Erik ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: suitability of freebsd 5.3 for 486 dx2 66?
On 7/8/05, Cecil [EMAIL PROTECTED] wrote: I plan on running a 486 I found laying around as a freebsd box. It only has a floppy, and yes, it's a 486. It does have 500 meg hard disk and 20 megs of ram though. Any ideas as to what is realistic to expect out of this machine? I plan to run it as a CLI box only to learn perl, python, C++ and some other stuff on. Well, one thought comes to my mind, it probably will take forever (perhaps a week?) to make kernel and world on this CPU, and 500 mb HDD does not look big enough to accomodate temporary and object files during this process. -- Dmitry We live less by imagination than despite it - Rockwell Kent, N by E ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: tar Syntax Help
On 7/7/05, Drew Tomlinson [EMAIL PROTECTED] wrote: I'm trying to copy an entire file system while using an exclude file to avoid copying things such as /dev, /proc, etc. I've read the man page and found the -X or --exclude-from tar option. I've create a file called /exclude.list. It contains lines such as: /exclude.list /dev /proc But I can't figure out how to form the correct command line. I basically want to do this: tar -cvf - --exclude-from /exclude.list -C / . | tar xpf - -C . I've search the web and found examples that look similar to the above but this does not work for me. tar attempts to copy /dev and I get all the associated errors. I've tried other placements of either -X, X, and --exclude from on the command line various things happen from it just being ignored to tar thinking I want to create and archive named -X, etc., to tar trying to add a file named -X, etc. to the current archive. I'm at a loss. I'm using 4.11 and trying to make a good backup before upgrading to 5.4. Can anyone tell me the secret incantation to make this work? Thanks, Drew -- Visit The Alchemist's Warehouse Magic Tricks, DVDs, Videos, Books, More! http://www.alchemistswarehouse.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] I wrote this years ago, http://www.justlinux.com/forum/showpost.php?p=294384postcount=1 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
FreeBSD and MSI K8MNEO-V mainboard problem
To all gurus out there, Please help me. I am installing FreeBSD 5.4 RELEASE for AMD64 using socket 754 MSI K8MNE0-V mainboard and AMD 64 3000+ CPU and encountered this error during the base installation. It says write failure transfer! (wrote -1 bytes of 1425408 bytes). It always happens during the base installation. Here are the full specs of my hardware. Mainboard - MSI K8MNEO-V ver. 1 CPU - AMD64 3000+ Memory - 2 pcs. Kingston (512 x MB each) Hard disk - 2 SATA hard disk configured to use the RAID1 feature of the mainboard and 1 IDE (all Seagate) There's no problem when I use the i386 version. Thank you very much in advance, -- Ceasar V. Navato, Jr. Infodyne, Inc. - PhilOnline.com Unit 3603 Antel Global Corporate Center Doña Julia Vargas Ave. Ortigas Center, Pasig City Tel. No. - (0632) 687-0715 loc. 106 Web Site: www.philonline.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
ppp via null modem cable
Hello. I am trying to configure a FreeBSD box to serve as a ppp server for a Windows box. I have to use a null-modem cable with only RxD/TxD/GND. Here is my ppp.conf for userland ppp: default: set log ... ident ... direct0: set device /dev/cuaa0 set speed 19200 set timeout 0 set lqrperiod 10 enable lqr accept lqr set ctsrts off set cd off set accmap 000a set openmode passive enable pap chap set ifaddr 172.16.0.1/0 172.16.0.100-172.16.0.199 And I have a ppp.secret with one entry only: test test Neither ppp -dedicated direct0 nor interactive ppp work. Can someone verify, if there is something wrong with my ppp.conf, so that I _only_ need to investigate in finding Windows configuration problems? Thank you, Norbert ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
ppp vial null modem cable
Hello. I am trying to configure a FreeBSD box to serve as a ppp server for a Windows box. I have to use a null-modem cable with only RxD/TxD/GND. Here is my ppp.conf for userland ppp: default: set log ... ident ... direct0: set device /dev/cuaa0 set speed 19200 set timeout 0 set lqrperiod 10 enable lqr accept lqr set ctsrts off set cd off set accmap 000a set openmode passive enable pap chap set ifaddr 172.16.0.1/0 172.16.0.100-172.16.0.199 And I have a ppp.secret with one entry only: test test Neither ppp -dedicated direct0 nor interactive ppp work. Can someone verify, if there is something wrong with my ppp.conf, so that I _only_ need to investigate in finding Windows configuration problems? Thank you, Norbert ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: install FreeBSD 5.3 and gnome2 help
Brian Duke wrote: libtool15: link: CURRENT `1000' is not a nonnegative integer http://lists.freebsd.org/pipermail/freebsd-questions/2005-May/087588.html If that doesn't work then try uninstalling libtool3 and forcing re-installation of libtool5. You don't look like you use portupgrade to manage your ports. You should. (Or use some equivalent tool; searching the mailing lists for portupgrade should find you other people's favourites). --Alex ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Electrical circuits simulator
PSpice and Candence are the only circuit simulators that I know of with GUIs, and PSpice is for Windows only where I think that Cadence requires purchasing a license (not sure though... look for Cadence on google). I will say that Cadence is a powerful extension of Spice though. -Garrett On Thu, 7 Jul 2005, [ISO-8859-15] Björn König wrote: Shantanoo wrote: I haven't check Oregano. But for electrical circuit simulation 'spice' is nice :) I used spice too for a few weeks only. It's very powerful, but as far as I know it has no GUI (everybody wants a GUI ;-p) and in my opinion it's very hard to learn quickly without a printed documentation and without lots of examples. By the way, I suggest 'chipmunk' if you want to build circuits with gates, simple controllers, segment displays and so on. Björn ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: suitability of freebsd 5.3 for 486 dx2 66?
Dmitry Mityugov wrote: On 7/8/05, Cecil [EMAIL PROTECTED] wrote: I plan on running a 486 I found laying around as a freebsd box. It only has a floppy, and yes, it's a 486. It does have 500 meg hard disk and 20 megs of ram though. Any ideas as to what is realistic to expect out of this machine? I plan to run it as a CLI box only to learn perl, python, C++ and some other stuff on. Well, one thought comes to my mind, it probably will take forever (perhaps a week?) to make kernel and world on this CPU, and 500 mb HDD does not look big enough to accomodate temporary and object files during this process. For Release 5.4, the installation notes indicate 24 MB RAM is required, and if I recall, some folks have indicated having problems with less than 32 MB (24 may be for a rather minimalist install). You might just be able to squeeze 4.11 onto this box, but as Dmitry noted, you're likely in for some painful compile times if you do antyhing serious with it. -- Greg Barniskis, Computer Systems Integrator South Central Library System (SCLS) Library Interchange Network (LINK) gregb at scls.lib.wi.us, (608) 266-6348 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: suitability of freebsd 5.3 for 486 dx2 66?
Cecil wrote: I plan on running a 486 I found laying around as a freebsd box. It only has a floppy, and yes, it's a 486. It does have 500 meg hard disk and 20 megs of ram though. Any ideas as to what is realistic to expect out of this machine? I plan to run it as a CLI box only to learn perl, python, C++ and some other stuff on. You don't have enough disk space to fit Perl, Python, and a full FreeBSD distribution. The CPU is going to be slow but workable, but 20MB of RAM is going to be very marginal, too. I'm not sure the installer will be able to run, although if you can get the disk built out, FreeBSD will run. -- -Chuck ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: dual boot
Ultimate wrote: Obviously, I am a newbi ... so further illustration with the solution would be appreciated 1) Do as root sysctl kern.geom.debugflag=16 2) Start sysinstall 3) Go Configure-FDISK- OK - Q 4) It will ask if you wish boot manager 5) Select BootMgr ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: suitability of freebsd 5.3 for 486 dx2 66?
If it is only for cli and learning programming, I'd suggest to install FreeBSD 4.11. All you need (gcc, perl, python, vim/emacs) is readyly available from the original install cd #1. I had a comparable box running as a samba fileserver under FreeBSD and even could run a make world on it. You need to have at least a cdrom drive or network card in your 486 box for installation. If you don't need the comfort of sysinstall, you could also give netbsd a try. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Cecil Sent: Friday, July 08, 2005 2:16 PM To: freebsd-questions@freebsd.org Subject: suitability of freebsd 5.3 for 486 dx2 66? I plan on running a 486 I found laying around as a freebsd box. It only has a floppy, and yes, it's a 486. It does have 500 meg hard disk and 20 megs of ram though. Any ideas as to what is realistic to expect out of this machine? I plan to run it as a CLI box only to learn perl, python, C++ and some other stuff on. Xeys ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: SSH and gigabit NICs
Deyan Dyankov wrote: I'm not sure that this is the problem, but ..keep in mind, that ssh encrypts the data and ftp doesn't. The delay might be actually the time for encryption, right? Yes, this is a possibility, and I'll revisit it tonight. I thought I'd looked at the CPU usage during transfer, but I should do so again. It still seems strange to me that SSH got slower over Gigabit. It it had just not gotten faster, then the encryption would be the obvious culprit, but to get slower... Unfortunately there seems to be no way to turn off the encryption for SSH, which would be the easiest test. Thanks for the suggestion, --Alex ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Logging into FreeBSD
Hi all, I'm afraid I must show my extreme ignorance. Using FreeBSD 5.4 I've created a log-in that starts a script I created #!/bin/sh mysql -u username -ppassword It works fine. I get motd, then the mysql prompt. When I type the quit command I lose my SSH connection which is great! Problem is I don't have a clue how to even search for security problems related to using a custom login similar to what I've created. Can anybody point me in the right direction(s)? I'm happy to do the reading on my own. Thanks a lot, Daniel Auman Personalized Computer Systems, Inc. 4486 Indian Ripple Road Dayton, Ohio 45440 Phone: (937)296-7416 Fax: (937)431-0775 email: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Logging into FreeBSD
On 7/8/05, Daniel Auman [EMAIL PROTECTED] wrote: Hi all, I'm afraid I must show my extreme ignorance. Using FreeBSD 5.4 I've created a log-in that starts a script I created #!/bin/sh mysql -u username -ppassword Are you says that you have the password hardcoded into your script? If so, make sure the read premission are set that only that user can access that script. Otherwise, your leaving your self wide open. It works fine. I get motd, then the mysql prompt. When I type the quit command I lose my SSH connection which is great! Problem is I don't have a clue how to even search for security problems related to using a custom login similar to what I've created. Can anybody point me in the right direction(s)? I'm happy to do the reading on my own. Thanks a lot, Daniel Auman Personalized Computer Systems, Inc. 4486 Indian Ripple Road Dayton, Ohio 45440 Phone: (937)296-7416 Fax: (937)431-0775 email: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Igor dual boot
HI Igor, when i follow your instruction i still do get the error below: ERROR: Unable to write data to disk ad0! --100%-- [OK] [Press enter or space] and Disk partition write returned an error status! -100%-- [OK] [Press enter or space] --- Igor Robul [EMAIL PROTECTED] wrote: Ultimate wrote: Obviously, I am a newbi ... so further illustration with the solution would be appreciated 1) Do as root sysctl kern.geom.debugflag=16 2) Start sysinstall 3) Go Configure-FDISK- OK - Q 4) It will ask if you wish boot manager 5) Select BootMgr ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Sell on Yahoo! Auctions no fees. Bid on great items. http://auctions.yahoo.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Igor dual boot
Ultimate wrote: Disk partition write returned an error status! -100%-- [OK] [Press enter or space] kern.geom.debugflags=16 of course (missing 's' at end of kern.geom.debugflags) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Logging into FreeBSD
Daniel Auman wrote: #!/bin/sh mysql -u username -ppassword User just can do \! /bin/sh at mysql prompt and get shell access. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Igor -- It Worksssss!!!! ---- dual boot
thanks a billion Man You fixed my headache!!! You are the man. Poeple, this stuff works its real good stuff --- Igor Robul [EMAIL PROTECTED] wrote: Ultimate wrote: Obviously, I am a newbi ... so further illustration with the solution would be appreciated 1) Do as root sysctl kern.geom.debugflags=16 2) Start sysinstall 3) Go Configure-FDISK- OK - Q 4) It will ask if you wish boot manager 5) Select BootMgr ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Root 8% reserved space and tunefs
Evening. We are downloading an item to a freebsd 5.3 server which has a size a little short of the max size of the HD. For technical reasons there is no way to remove portions of the item before it is finished. There is enough space but only if the 8% reserved for root is taken into account. This is not currently being used as the files are being aquired as www (via apache). I cannot use tunefs to free the 8% as the files are on /usr/ and cannot be umounted. If anyone has any ideas they would be much appreciated; the only things we haven't tried are slowly shifting the data onto a seperate slice, shifting the volume bit by bit, trying to have apache run as root temporarily or replacing the HD with a larger one (the latter being the least viable). Sincerely, Elliot Crosby-McCullough ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: DarwinStreamingServer problem
steve lasiter [EMAIL PROTECTED] writes: Please get DSS-v5_0_3_2.zip from http://developer.apple.com/darwin/project/streaming/ And you must accept the APSL. Then, put in /usr/ports/distfiles/DDS-v5_0_3_2.zip Add an s to project. As in: http://developer.apple.com/darwin/projects/streaming/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Root 8% reserved space and tunefs
On Friday 08 July 2005 07:37 am, Elliot Crosby-McCullough wrote: Evening. We are downloading an item to a freebsd 5.3 server which has a size a little short of the max size of the HD. For technical reasons there is no way to remove portions of the item before it is finished. There is enough space but only if the 8% reserved for root is taken into account. This is not currently being used as the files are being aquired as www (via apache). I cannot use tunefs to free the 8% as the files are on /usr/ and cannot be umounted. If anyone has any ideas they would be much appreciated; the only things we haven't tried are slowly shifting the data onto a seperate slice, shifting the volume bit by bit, trying to have apache run as root temporarily or replacing the HD with a larger one (the latter being the least viable). Sincerely, Elliot Crosby-McCullough ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Why can't you just download the item as root then? You could probably do a wget under sudo. Casey ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Redirecting requests
I am looking for the best way to redirect request on a specific port. Baiscally all I want to do is when a connection is made to a port, say 5000, send that request out through another port, say 2000, on the other interface. Any ideas? -- Bob Bomar [EMAIL PROTECTED] - FreeBSD: The Power to Serve http://www.freebsd.org pgpt6xRMFxi0k.pgp Description: PGP signature
Re: Redirecting requests
I'm using PF, and have this which works like a champ
rdr on $public proto tcp from any to any port 3389 - 1.2.3.4 port 3389
rdr on $public proto tcp from any to any port 3390 - 1.2.3.5 port 3389
pass in on $public proto tcp from any to any port {3380:3390} keep state
On 7/8/05, Bob Bomar [EMAIL PROTECTED] wrote:
I am looking for the best way to redirect request
on a specific port. Baiscally all I want to do
is when a connection is made to a port, say 5000,
send that request out through another port, say 2000,
on the other interface. Any ideas?
--
Bob Bomar
[EMAIL PROTECTED]
-
FreeBSD: The Power to Serve
http://www.freebsd.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Redirecting requests
On Fri, Jul 08, 2005 at 11:43:55AM -0400, Hornet wrote:
I'm using PF, and have this which works like a champ
rdr on $public proto tcp from any to any port 3389 - 1.2.3.4 port 3389
rdr on $public proto tcp from any to any port 3390 - 1.2.3.5 port 3389
pass in on $public proto tcp from any to any port {3380:3390} keep state
On 7/8/05, Bob Bomar [EMAIL PROTECTED] wrote:
I am looking for the best way to redirect request
on a specific port. Baiscally all I want to do
is when a connection is made to a port, say 5000,
send that request out through another port, say 2000,
on the other interface. Any ideas?
My problem lies in the fact that the first machine and second
machine will have the same IP address, its a long story, but
that is what the client wants.
--
Bob Bomar
[EMAIL PROTECTED]
-
FreeBSD: The Power to Serve
http://www.freebsd.org
pgpttk7KonM9d.pgp
Description: PGP signature
Re: SSH and gigabit NICs
On 08/07/05, Alex Zbyslaw [EMAIL PROTECTED] wrote: Unfortunately there seems to be no way to turn off the encryption for SSH, which would be the easiest test. Well, looking at /usr/src/crypto/openssh/cipher.c, there is a none in struct Cipher. But specifying 'none' in Ciphers in sshd_config, I get Bad SSH2 cipher spec 'none'. trying to start sshd. Does anyone know if/how the none Cipher is really available? I need ssh only for authentication when transfering backups, and encryption makes a difference in transfer speed on slow machines... -- (nil) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Has this box been hacked?
Give ME a break. You're only stating the obvious: the more daemons are running, the more exposure. This particular box is running BIND 8, a transparent Squid proxy, and SSH. BIND is sandboxed and Squid is running as a nonprivileged user. Squid is also set not to take requests from outside. I wasn't the one who configured it; I've been asked to analyze it. --Brett At 11:56 PM 7/6/2005, Ted Mittelstaedt wrote: Sure, FreeBSD 4.11 is very easy for a remote attacker to root. All you need to do is let a user on it setup some convenient password like the word password for the root user, and use the same on an easy-to-remember userID like sam or bob, then put a DNS entry in for it like porno-pictures.example.com and post that on a popular website and it shouldn't take but a few days for it to get rooted. Other than that, give me a break, Brett. If this is a router and an out of the box install then there's no services turned on that can be rooted. Is it customary to run a webserver on your router nowadays? Give us a list of services this box is running and we can give you a better idea of how easy it might be to root. Ted -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Brett Glass Sent: Wednesday, July 06, 2005 9:42 AM To: [EMAIL PROTECTED] Subject: Has this box been hacked? A client had a network problem, and I wanted to make sure that his FreeBSD 4.11 router wasn't the cause of it, so I rebooted it. I then did a last command and saw the following: root ttyv0 Tue Jul 5 12:01 - 12:05 (00:04) adminttyp0localhostTue Jul 5 11:57 - 11:57 (00:00) root ttyv0 Tue Jul 5 11:49 - 12:00 (00:11) reboot ~ Tue Jul 5 11:49 shutdown ~ Tue Jul 5 11:47 root ttyv0 Tue Jul 5 11:37 - shutdown (00:10) reboot ~ Tue Jul 5 11:36 shutdown ~ Tue Jul 5 05:36 shutdown ~ Tue Jul 5 11:22 Note the shutdown entry with the time 5:36 AM, which is odd because it's out of chronological order and the other logs don't show the typical debug messages at that time. Where might such an entry come from? How likely is it that the box has been rooted? Are there known exploits that might have been used to root a FreeBSD 4.11-RELEASE machine? (The only unusual activity I can see in the logs is a few attempts to log in as root via SSH. The attempts that were logged were not successful, but of course a skilled attacker would cover his tracks.) --Brett ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Redirecting requests
Then change from any to any to from any to $intreface1 I think
that is the syntax.
On 7/8/05, Bob Bomar [EMAIL PROTECTED] wrote:
On Fri, Jul 08, 2005 at 11:43:55AM -0400, Hornet wrote:
I'm using PF, and have this which works like a champ
rdr on $public proto tcp from any to any port 3389 - 1.2.3.4 port 3389
rdr on $public proto tcp from any to any port 3390 - 1.2.3.5 port 3389
pass in on $public proto tcp from any to any port {3380:3390} keep state
On 7/8/05, Bob Bomar [EMAIL PROTECTED] wrote:
I am looking for the best way to redirect request
on a specific port. Baiscally all I want to do
is when a connection is made to a port, say 5000,
send that request out through another port, say 2000,
on the other interface. Any ideas?
My problem lies in the fact that the first machine and second
machine will have the same IP address, its a long story, but
that is what the client wants.
--
Bob Bomar
[EMAIL PROTECTED]
-
FreeBSD: The Power to Serve
http://www.freebsd.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: SSH and gigabit NICs
On 07/07/05, Alex Zbyslaw [EMAIL PROTECTED] wrote: Does anyone have a clue what might be going on? Dunno, but you might take a look at /usr/ports/security/hpn-ssh/: --- pkg-descr --- High Performance Enabled SSH/SCP from the Pittsburgh Supercomputing Center hpn-ssh is a version of OpenSSH modified to support high-performance bulk transfers (such as with scp or rsync). These modifications are required because: SCP and the underlying SSH protocol is network performance limited by statically defined internal flow control buffers. These buffers often end up acting as a brake on the network throughput of SCP especially on long and wide paths. Modifying the ssh code to allow the flow control buffers to be defined at run time eliminates this bottleneck. WWW: http://www.psc.edu/networking/projects/hpn-ssh/ -- (nil) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Can't use 'su' command, after I installed FreeBSD by minimized model !
When I logon, my $SHELL is /bin/sh, but when I use 'su root' to do some confige, the system told me : $ su su: Sorry I found out the su command location with the following : $ which su /usr/bin/su Anybody help me to figure out the problems ? thanks! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Has this box been hacked?
At 05:32 PM 7/7/2005, J65nko BSD wrote: If you would have installed something like tripwire or aide, you would have been in a better position to find out whether the box has been owned. I didn't build the machine. --Brett Glass ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can't use 'su' command,
When I logon, my $SHELL is /bin/sh, but when I use 'su root' to do some confige, the system told me : $ su su: Sorry I found out the su command location with the following : $ which su /usr/bin/su Anybody help me to figure out the problems ? thanks! Is your id in the 'wheel' group? It must be to be allowed to do an su to root. jerry ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
netgear wg311T and ath driver attaching
hi i found the posts above while searching freebsd's mailinglists i've exactly the same pb with freebsd 5.4 and netgear WG311T did you find any solution ?? i don't really want to upgrade to 6.0 and i'm not sure it will solve the pb :( otherwise i could buy another wireless card (i can give mine back to the shop 7 days after buying it) which 802.11g pci card is really known to work with freebsd 5.4 ?? (because i've also be looking to man pages saying it was supported) thanks for your help ! Florian Luke St.Clair wrote: I'm attempting to use the netgear wg311T card, which I bought since the ath man page and docs said it is supported under FBSD. I'm using the 5.4 release. Yes, I'm using one on -CURRENT If so, is it possible to just download/compile the ath driver from -CURRENT? If so, how? The driver is part of the system, you don't have to download/compile Simply put this in your /boot/loader.conf: if_ath_load=YES Or should I be able to make this work on a release system? Yes, see above. Sorry, I must not have been clear - I kldloaded the if_ath module, as specified in my first post, which is what gave me the dmesg errors. The ath0 interface then does not show up in ifconfig -a, because of the errors. So I'm not sure how, on a 5.4-RELEASE system, what you're suggesting could work. If the ath driver attached properly, yes, if_ath_load would in fact start my card automatically on boot, but the driver can't attach, so trying to attach on bootup isn't very helpful. So, the question still stands, i think - can i get this card working on a 5.4 release sytem, or do i have to use CURRENT or do something else? And if I can't get this working on current, the man page of ath REALLY needs to be updated, at the very least to specify that wg311v1 is supported, but not v2, like the OBSD man page does. Any my apologies for what must end up looking like horrible html mail from hotmail - my main mail is down temporarily. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Has this box been hacked?
On 7/8/05, Brett Glass [EMAIL PROTECTED] wrote: Give ME a break. You're only stating the obvious: the more daemons are running, the more exposure. Brett say hello to my insta-trash filter. Get a hair cut you damn hippie http://www.ymmv.com/gifs/brett.gif This particular box is running BIND 8, a transparent Squid proxy, and SSH. BIND is sandboxed and Squid is running as a nonprivileged user. Squid is also set not to take requests from outside. I wasn't the one who configured it; I've been asked to analyze it. --Brett At 11:56 PM 7/6/2005, Ted Mittelstaedt wrote: http://www.ymmv.com/gifs/brett.gif Sure, FreeBSD 4.11 is very easy for a remote attacker to root. All you need to do is let a user on it setup some convenient password like the word password for the root user, and use the same on an easy-to-remember userID like sam or bob, then put a DNS entry in for it like porno-pictures.example.com and post that on a popular website and it shouldn't take but a few days for it to get rooted. Other than that, give me a break, Brett. If this is a router and an out of the box install then there's no services turned on that can be rooted. Is it customary to run a webserver on your router nowadays? Give us a list of services this box is running and we can give you a better idea of how easy it might be to root. Ted -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Brett Glass Sent: Wednesday, July 06, 2005 9:42 AM To: [EMAIL PROTECTED] Subject: Has this box been hacked? A client had a network problem, and I wanted to make sure that his FreeBSD 4.11 router wasn't the cause of it, so I rebooted it. I then did a last command and saw the following: root ttyv0 Tue Jul 5 12:01 - 12:05 (00:04) adminttyp0localhostTue Jul 5 11:57 - 11:57 (00:00) root ttyv0 Tue Jul 5 11:49 - 12:00 (00:11) reboot ~ Tue Jul 5 11:49 shutdown ~ Tue Jul 5 11:47 root ttyv0 Tue Jul 5 11:37 - shutdown (00:10) reboot ~ Tue Jul 5 11:36 shutdown ~ Tue Jul 5 05:36 shutdown ~ Tue Jul 5 11:22 Note the shutdown entry with the time 5:36 AM, which is odd because it's out of chronological order and the other logs don't show the typical debug messages at that time. Where might such an entry come from? How likely is it that the box has been rooted? Are there known exploits that might have been used to root a FreeBSD 4.11-RELEASE machine? (The only unusual activity I can see in the logs is a few attempts to log in as root via SSH. The attempts that were logged were not successful, but of course a skilled attacker would cover his tracks.) --Brett ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Screen display problem during installation
I'm trying to install 5.4 on a system that currently has 4.10 on it. My problem is that when the system boots from the install disk 1 I cannot see the initial menu due to a display problem. I see the initial boot information then the box that should have the selection options in, but without the content of the box. The box just overwrites the display information, leaves the boot information on the screen and I see BSD Daemon to the right of it. I don't have a floppy drive on the system to attempt a console install so I cannot use that solution. From memory I didn't have any problems with the 4.10 install, so I tried on another PC with the same CD and this displayed the initial menu OK. Any ideas on what I could do to resolve this? Thanks, Jim ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Ntpd error msg
Hello list, I've just installed a new 5.3 server and I have setup ntpd. When I start the daemon I get this error msg: Wintermute ntpd[512]: Frequency format error in /var/db/ntpd.drift Here is my ntp.conf: Driftfile /var/db/ntpd.drift Server pool.ntp.org Server pool.ntp.org Server pool.ntp.org Server pool.ntp.org Restrict default ignore Ntpd.drift is located in /var/db/ Any ideas? Thanks. shawn -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.8.11/44 - Release Date: 7/8/2005 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Root 8% reserved space and tunefs
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Elliot Crosby-McCullough Sent: Friday, July 08, 2005 7:37 AM To: freebsd-questions@freebsd.org Subject: Root 8% reserved space and tunefs Evening. We are downloading an item to a freebsd 5.3 server which has a size a little short of the max size of the HD. For technical reasons there is no way to remove portions of the item before it is finished. There is enough space but only if the 8% reserved for root is taken into account. This is not currently being used as the files are being aquired as www (via apache). I cannot use tunefs to free the 8% as the files are on /usr/ and cannot be umounted. If anyone has any ideas they would be much appreciated; the only things we haven't tried are slowly shifting the data onto a seperate slice, shifting the volume bit by bit, trying to have apache run as root temporarily or replacing the HD with a larger one (the latter being the least viable). Sincerely, Elliot Crosby-McCullough Buy an extra disk drive? If there is no space to plug in another drive, you could use an USB external drive. -gayn ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Thanks Garrett -- Re: dual boot
I got something from Igor which worked 1) Do as root sysctl kern.geom.debugflags=16 2) Start sysinstall 3) Go Configure-FDISK- OK - Q 4) It will ask if you wish boot manager 5) Select BootMgr --- Garrett Cooper [EMAIL PROTECTED] wrote: Ultimate wrote: # fdisk -l fdisk: illegal option --l usage: fdisk etc --- Garrett Cooper [EMAIL PROTECTED] wrote: Ultimate wrote: i have on my hard disk two OS. freebsd and win2k i reinstalled the win2k and upon booting i made the partition with the freebsd active. but now i can only have access to freebsd. my win2k which i know is still there doesn't get to load since freebsd boot0 doesn't register it. i have tried to ways of getting it up 1. boot0cfg -m 0x3 ad0 error msg:- boot0cf: /dev/ad0: unknown or incompatible boot code 2. fdisk -B -b /boot/boot0 ad0 error msg:- fdisk: can't write fdisk partition table: Operation not permitted Obviously, I am a newbi ... so further illustration with the solution would be appreciated Thankz Could you copy your output from fdisk -l here please? Thanks, -Garrett Sorry, I was thinking linux. Try -v. -Garrett __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can't use 'su' command, after I installed FreeBSD by minimized model !
When I logon, my $SHELL is /bin/sh, but when I use 'su root' to do some confige, the system told me : $ su su: Sorry I found out the su command location with the following : $ which su /usr/bin/su Anybody help me to figure out the problems ? thanks! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] is the user name your are using to attempt su in the wheel group? can you log in directly as root? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Redirecting requests
I am looking for the best way to redirect request on a specific port. Baiscally all I want to do is when a connection is made to a port, say 5000, send that request out through another port, say 2000, on the other interface. Any ideas? -- Bob Bomar [EMAIL PROTECTED] - FreeBSD: The Power to Serve http://www.freebsd.org IPFW can do that with some creative thinking. Give us a little more on what you are doing and we might be able to help a bit more. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
a sort ?
Hi All, I am trying to sort a tab delimited file with sort. The problem I am having is with the -t option. I can not get it to accept a tab. Things I have tried: sort -t \t sort -t '\t' sort -t \t sort -t 0x09 sort -t '0x09' sort -t 0x09 sort -t ^I sort -t '^I' sort -t ^I Any suggestions would be much appreciated. Thanks ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
How to get best results from FreeBSD-questions
How to get the best results from FreeBSD questions. === Last update $Date: 2004/09/19 02:40:48 $ This is a regular posting to the FreeBSD questions mailing list. If you got it in answer to a message you sent, it means that the sender thinks that at least one of the following things was wrong with your message: - You left out a subject line, or the subject line was not appropriate. - You formatted it in such a way that it was difficult to read. - You asked more than one unrelated question in one message. - You sent out a message with an incorrect date, time or time zone. - You sent out the same message more than once. - You sent an 'unsubscribe' message to FreeBSD-questions. If you have done any of these things, there is a good chance that you will get more than one copy of this message from different people. Read on, and your next message will be more successful. This document is also available on the web at http://www.lemis.com/questions.html. = Contents: I:Introduction II: How to unsubscribe from FreeBSD-questions III: Should I ask -questions, -newbies or -hackers? IV: How to submit a question to FreeBSD-questions V:How to answer a question to FreeBSD-questions I: Introduction === This is a regular posting aimed to help both those seeking advice from FreeBSD-questions (the newcomers), and also those who answer the questions (the hackers). Note that the term hacker has nothing to do with breaking into other people's computers. The correct term for the latter activity is cracker, but the popular press hasn't found out yet. The FreeBSD hackers disapprove strongly of cracking security, and have nothing to do with it. In the past, there has been some friction which stems from the different viewpoints of the two groups. The newcomers accused the hackers of being arrogant, stuck-up, and unhelpful, while the hackers accused the newcomers of being stupid, unable to read plain English, and expecting everything to be handed to them on a silver platter. Of course, there's an element of truth in both these claims, but for the most part these viewpoints come from a sense of frustration. In this document, I'd like to do something to relieve this frustration and help everybody get better results from FreeBSD-questions. In the following section, I recommend how to submit a question; after that, we'll look at how to answer one. II: How to unsubscribe from FreeBSD-questions == When you subscribed to FreeBSD-questions, you got a welcome message from [EMAIL PROTECTED] In this message, amongst other things, it told you how to unsubscribe. Here's a typical message: Welcome to the freebsd-questions@freebsd.org mailing list! If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://lists.freebsd.org/mailman/options/freebsd-questions/[EMAIL PROTECTED] (obviously, substitute your mail address for [EMAIL PROTECTED]). You can also make such adjustments via email by sending a message to: [EMAIL PROTECTED] with the word 'help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. Normally, Mailman will remind you of your freebsd.org mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you. Here's the general information for the list you've subscribed to, in case you don't already have it: FREEBSD-QUESTIONS User questions This is the mailing list for questions about FreeBSD. You should not send how to questions to the technical lists unless you consider the question to be pretty technical. Normally, unsubscribing is even simpler than the message suggests: you don't need to specify your mail ID unless it is different from the one which you specified when you subscribed. If Majordomo replies and tells you (incorrectly) that you're not on the list, this may mean one of two things: 1. You have changed your mail ID since you subscribed. That's where keeping the original message from majordomo comes in handy. For example, the sample message above shows my mail ID as [EMAIL PROTECTED] Since then, I have changed it to [EMAIL PROTECTED] If I were to try to remove [EMAIL PROTECTED] from the list, it would fail: I would have to specify the name with which I joined. 2. You're subscribed to a mailing list which is subscribed to
The Complete FreeBSD: errata and addenda
The trouble with books is that you can't update them the way you can a web page or any other online documentation. The result is that most leading edge computer books are out of date almost before they are printed. Unfortunately, The Complete FreeBSD, published by O'Reilly, is no exception. Inevitably, a number of bugs and changes have surfaced. The Complete FreeBSD has been through a total of five editions, including its predecessor Installing and Running FreeBSD. Two of these have been reprinted with corrections. I maintain a series of errata pages. Start at http://www.lemis.com/errata-4.html to find out how to get the errata information. Have you found a problem with the book, or maybe something confusing? Please let me know: I'm constantly updating it. Greg ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
simple locate question
How to creata a second locate database for private use? (mp3 database or so). I have tried $ locate -U dir_with_mp3s -o database.dtb Searching in this database doent work $ locate -d database.dtb somesong.mp3 gives no result. The database exists and it looks ok, seems to be a simple ascii format. What am I doing wrong? I guess its simple, isn't it! Thanks Florian ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: a sort ?
On 07/08/05 09:51 AM, Daniel Malaby sat at the `puter and typed: Hi All, I am trying to sort a tab delimited file with sort. The problem I am having is with the -t option. I can not get it to accept a tab. Things I have tried: sort -t \t sort -t '\t' sort -t \t sort -t 0x09 sort -t '0x09' sort -t 0x09 sort -t ^I sort -t '^I' sort -t ^I Any suggestions would be much appreciated. Did you try sorting without the -t parameter? IIRC, it uses whitespace to delimit fields by default, which includes the tab. Unless you're trying to sort by a field other than the first, you really don't need it anyway. Then again, you could also just hit the tab key: -t ' '. HTH Lou -- Louis LeBlanc FreeBSD-at-keyslapper-DOT-net Fully Funded Hobbyist, KeySlapper Extrordinaire :) Please send off-list email to: leblanc at keyslapper d.t net Key fingerprint = C5E7 4762 F071 CE3B ED51 4FB8 AF85 A2FE 80C8 D9A2 Genius doesn't work on an assembly line basis. You can't simply say, Today I will be brilliant. -- Kirk, The Ultimate Computer, stardate 4731.3 pgpGecrNVVEmp.pgp Description: PGP signature
Re: Ntpd error msg
At 11:15 7/8/2005, Shawn Wall wrote: Hello list, I've just installed a new 5.3 server and I have setup ntpd. When I start the daemon I get this error msg: Wintermute ntpd[512]: Frequency format error in /var/db/ntpd.drift Here is my ntp.conf: Driftfile /var/db/ntpd.drift Server pool.ntp.org Server pool.ntp.org Server pool.ntp.org Server pool.ntp.org Restrict default ignore Ntpd.drift is located in /var/db/ Any ideas? Thanks. shawn You should be able to zero out the file and it should be regenerated. It shouldn't matter, but the drift file is usuallly named ntp.drift and is located in /etc: http://www.US-Webmasters.com/FreeBSD/Install/NTP/ Start Here to Find It Fast! - http://www.US-Webmasters.com/best-start-page/ $8.77 Domain Names - http://domains.us-webmasters.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
IPFW not seeing packages from passive monitor
Hi, I just had setup a FreeBSD server to do some monitor on bandwidth and IDS on a passive port in my switch (a span port), so i'm doing some ipfw rules to connect with rrdtool and get some graphs of traffic by tcpports and this kind of stuff, but all packages from this NIC in the span port seems to not be visible to ipfw, i can tcpdump it, but no rule can count this packages, what can be the cause of this? I had setup an internal IP on this NIC (10.0.0.0/8), ipfw on the other interface works ok, i have this sysctl settings: net.link.ether.inet.proxyall: 0 net.link.ether.inet.log_arp_wrong_iface: 1 net.link.ether.inet.log_arp_movements: 1 net.link.ether.ipfw: 1 net.inet.ip.fw.enable: 1 net.inet.ip.fw.autoinc_step: 100 net.inet.ip.fw.one_pass: 1 net.inet.ip.fw.debug: 1 net.inet.ip.fw.verbose: 1 net.inet.ip.fw.verbose_limit: 0 net.inet.ip.fw.dyn_buckets: 256 net.inet.ip.fw.curr_dyn_buckets: 256 net.inet.ip.fw.dyn_count: 0 net.inet.ip.fw.dyn_max: 4096 net.inet.ip.fw.static_count: 13 net.inet.ip.fw.dyn_ack_lifetime: 300 net.inet.ip.fw.dyn_syn_lifetime: 20 net.inet.ip.fw.dyn_fin_lifetime: 1 net.inet.ip.fw.dyn_rst_lifetime: 1 net.inet.ip.fw.dyn_udp_lifetime: 10 net.inet.ip.fw.dyn_short_lifetime: 5 net.inet.ip.fw.dyn_keepalive: 1 TIA, Vinicius ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: DarwinStreamingServer problem
Lowell, Maybe I'm missing something but that is where I was going and the only available code there is the DarwinStreamingSrvr5.5-Source.tar file and the others for Linux and OS X. I'm still unable to find any .zip file on the page. Did you find it? Dean --- Lowell Gilbert [EMAIL PROTECTED] wrote: steve lasiter [EMAIL PROTECTED] writes: Please get DSS-v5_0_3_2.zip from http://developer.apple.com/darwin/project/streaming/ And you must accept the APSL. Then, put in /usr/ports/distfiles/DDS-v5_0_3_2.zip Add an s to project. As in: http://developer.apple.com/darwin/projects/streaming/ Sell on Yahoo! Auctions no fees. Bid on great items. http://auctions.yahoo.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Serial console only refreshes 1 line of text
I recently installed FreeBSD over serial on a GX280 (no PS/2 ports and
ACPI conflicts using boot with usb keyboard option). After installing
I changed my ttys to
ttyd0 /usr/libexec/getty std.9600 unknown on secure
ttyd1 /usr/libexec/getty std.9600 unknown off secure
...
As talked about in the handbook 20.6.5.4 Getting a Login Prompt on the
Serial Console
When I finish the setup and reboot, I get the loader prompt where I
select to boot with ACPI disabled. After which I get one line of text
that refreshes itself. The other lines remain the same- showing the
loader. Below is a screenshot of what I am getting.
Though I am not completely new to FreeBSD, this is the first time I
have had to rely on using the serial console to do anything. Is there
something in my configuration that would be causing this problem?
Thanks for the help,
-John
ÚÄ¿
³ ³
³ ³ ,,
³ ³ /()`
³ Welcome to FreeBSD!³ \ \___ / |
³ ³ /- _ `-/ '
³ ³(/\/ \ \ /\
³ 1. Boot FreeBSD [default] ³/ / | `\
³ 2. Boot FreeBSD with ACPI disabled ³O O ) /|
³ 3. Boot FreeBSD in Safe Mode ³`-^--'` '
³ 4. Boot FreeBSD in single user mode³ (_.) _ ) /
³ 5. Boot FreeBSD with verbose logging ³`.___/`/
³ 6. Escape to loader prompt ³ `-' /
³ 7. Boot FreeBSD with USB keyboard ³ . __ / __ \
³ 8. Reboot ³ |O)))==) \) /
³ ³ '`--' `.__,' \
³ ³ ||
³ ³ \ / /\
³ Select option, [Enter] for default ³ __( (_ / \__/
³ or [Space] to pause timer 7 ³,' ,-' |
ÀÄÙ`--{__)
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 5.4-RELEASE #0: Sun May 8 10:21:06 UTC 2005
Password:otrect4.255tion)tation)Password:
(ttyd0)ednnecteal/libice4.255tion)tation)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
cdrom mount question
I am not sure which list to post this to, I'll start here. :-) I am trying to play a CD through amaroK in KDE, but when I try to mount the disc I get the following error: cd9660: /dev/acdo: Operation not permitted I am not running as root when trying to access the device and I'm sure this is the problem. . . I just don't know how to fix it :-). Thanks for all your help! Bryan -- Open Source: by the people, for the people. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Kernel question
On Friday 01 July 2005 11:02 pm, Nikolas Britton wrote: On 7/1/05, Bryan Maynard [EMAIL PROTECTED] wrote: I read through your kernel - very nice comments, thanks a lot! I compiled the kernel and boot-up is noticably faster, thanks again! I would like to investigate transfering all the device info from boot -v to LATITUDE_C600.hints. I don't really know what most of the info from boot -v means, I'd like to work on figuring it out. Maybe you could help me learn and we could figure it out together? Any help you could give you be greatly appreciated! One thing of note: I don't have any sound. I've never had sound, but after booting with the new kernel I went into KDE's control panel and tested the sound system, but nothing came out. I didn't get any errors when it restarted the sound system so I'm not sure what's up. Your using the wrong driver. the one you want is snd_maestro3. Add this to your loader.conf file: #sound_load=YES#PCM Sound Support #snd_driver_load=YES # Loads every sound drivers it can find snd_maestro3=YES # Your driver hw.snd.maxautovchans=4 #sets up up to 4 virtual audio channels on demand #hw.snd.targetirqrate=36# read the sound man page #hint.pcm.0.buffersize=16384 #read the sound man page After you do that reboot and retest it. first thing is to check dmesg. dmesg|grep -i pcm and do the same for ess and maestro, you should see that it was detected. also you should try 'cat /dev/sndstat'. fire up X and well, anyways if everything is working put the driver in the kernel config file and comment it out in loader.conf. I'll see what I can do about your other questions later, right now I need a smoke and have work to do. My sound is working now, thanks :-) My battery doesn't seem to be charging though. . . Everytime I boot dmesg tells me that my battery has a critically low charge. I do not know how to correct this. I just need my battery to work and I'll have a fully functional laptop! I've incuded the dmesg output from the new kernel boot in case you need to look at it along with my current CUSTOM.hints file (maybe it'll help. . . :-?) Anyway, thanks a lot for the new kernel, it works like a charm! Bryan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Thanks for all your help! Bryan -- Open Source: by the people, for the people. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: cdrom mount question
On Fri, 8 Jul 2005 14:42:22 + Bryan Maynard [EMAIL PROTECTED] wrote: I am not sure which list to post this to, I'll start here. :-) I am trying to play a CD through amaroK in KDE, but when I try to mount the disc I get the following error: cd9660: /dev/acdo: Operation not permitted I am not running as root when trying to access the device and I'm sure this is the problem. . . I just don't know how to fix it :-). Thanks for all your help! Bryan -- Open Source: by the people, for the people. Hello, The instructions to allow a normal user to mount devices is in the FAQ: http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/disks.html#USER-FLOPPYMOUNT Best Regards, Ale ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: simple locate question
Florian Hengstberger [EMAIL PROTECTED] writes: How to creata a second locate database for private use? (mp3 database or so). I have tried $ locate -U dir_with_mp3s -o database.dtb Searching in this database doent work $ locate -d database.dtb somesong.mp3 gives no result. The database exists and it looks ok, seems to be a simple ascii format. What am I doing wrong? I guess its simple, isn't it! I don't know; the standard locate program doesn't take a -U option, and will give an error message accordingly if called the way you claim you did. Have you installed some other version of locate? To use the standard locate, you use the locate.updatedb(8) script, as the locate(1) manual will tell you. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: DarwinStreamingServer problem
Don't top-post, please. steve lasiter [EMAIL PROTECTED] writes: Lowell, Maybe I'm missing something but that is where I was going and the only available code there is the DarwinStreamingSrvr5.5-Source.tar file and the others for Linux and OS X. I'm still unable to find any .zip file on the page. Did you find it? No, I stopped looking after I noticed your first mistake. I wasn't going to register with the license server in order to check it out for you. It's possible that the port is outdated and should be updated to the latest release. I can't be sure without actually trying it. But if that is the case, then try talking to the port's maintainer. Dean --- Lowell Gilbert [EMAIL PROTECTED] wrote: steve lasiter [EMAIL PROTECTED] writes: Please get DSS-v5_0_3_2.zip from http://developer.apple.com/darwin/project/streaming/ And you must accept the APSL. Then, put in /usr/ports/distfiles/DDS-v5_0_3_2.zip Add an s to project. As in: http://developer.apple.com/darwin/projects/streaming/ Sell on Yahoo! Auctions √ no fees. Bid on great items. http://auctions.yahoo.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- Lowell Gilbert, embedded/networking software engineer, Boston area http://be-well.ilk.org/~lowell/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: simple locate question
Lowell Gilbert wrote: Florian Hengstberger [EMAIL PROTECTED] writes: How to creata a second locate database for private use? (mp3 database or so). I have tried $ locate -U dir_with_mp3s -o database.dtb Searching in this database doent work $ locate -d database.dtb somesong.mp3 gives no result. The database exists and it looks ok, seems to be a simple ascii format. What am I doing wrong? I guess its simple, isn't it! I don't know; the standard locate program doesn't take a -U option, and will give an error message accordingly if called the way you claim you did. Have you installed some other version of locate? To use the standard locate, you use the locate.updatedb(8) script, as the locate(1) manual will tell you. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] FCODES=database.dtb; SEARCHPATHS=dir_with_mp3s; export FCODES; export SEARCHPATHS; /usr/libexec/locate.updatedb then of course using locate -d database.dtb somefile -- Jeremy Johnston (President / Developer) SmartServ Hosting Email: [EMAIL PROTECTED] Phone: 1-250-402-6634 Ext. 201 Cell: 1-250-402-9583 | [EMAIL PROTECTED] (150 Characters max) Fax: 1-250-402-6634 Toll Free: 1-866-702-2904 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: cdrom mount question
On Fri, Jul 08, 2005 at 02:42:22PM +, Bryan Maynard wrote: I am not sure which list to post this to, I'll start here. :-) I am trying to play a CD through amaroK in KDE, but when I try to mount the disc I get the following error: You don't have to mount a music CD. cd9660: /dev/acdo: Operation not permitted You do need permission to access the device though. As root, type 'chmod 666 /dev/acdo'. To keep this setting after reboot, add the following to /etc/devfs.conf: perm acd0 0666 Roland -- R.F.Smith (http://www.xs4all.nl/~rsmith/) Please send e-mail as plain text. public key: http://www.xs4all.nl/~rsmith/pubkey.txt pgptGPZbx4X02.pgp Description: PGP signature
Suspend-to-disk resuming
I'm trying to get suspend-to-disk (S4OS) working. (S3 doesn't work, but I'll worry about that later). When I run acpiconf -s 4, it appears to suspend ok. However, when I boot the computer, it just boots as normal, rather than resuming (it does complain about uncleanly unmounted disks). How do I tell the kernel to load a suspend-to-disk image rather than booting? I'm using the july snapshot of 6-CURRENT on a Thinkpad T43p. Thanks, Ben ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
portupgrade error [cannot convert nil into String (PkgDB::DBError)]
I am having some problems with portupgrade. The error message is / usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:322:in `deorigin': (more below). I see there have been isolated occurrences of this in June of 2003 and 2004, curiously, but I haven't found the solutions there to work. Removing the ports tree and re-fetching it, removing and rebuilding pkgdb, removing and reinstalling portupgrade/ruby, etc, even building a new kernel and world, seem ineffective. I'm still on 4.x (FreeBSD red.paulbeard.org 4.11-RELEASE-p11 FreeBSD 4.11-RELEASE-p11 #0: Tue Jul 5 10:46:00 PDT 2005 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/RED i386) if that helps. Please include me on replies as I am off the list. Thanks for any pointers. [/]# portsdb -Ufu Updating the ports index ... Generating INDEX.tmp - please wait..Warning: Duplicate INDEX entry: freeciv-gtk2-2.0.1_2 Warning: Duplicate INDEX entry: mod_frontpage2-5.0.2.2635 Warning: Duplicate INDEX entry: mod_jk2-apache2-2.0.2 Warning: Duplicate INDEX entry: mod_rpaf-ap2-0.5 Done. done [Updating the portsdb format:dbm_hash in /opt/ports ... - 13138 port entries found . 1000.2000.3000.4000.5000.6000... .. 7000.8000.9000.1.11000.12000 .13000. . done] ([EMAIL PROTECTED])-(03:34 PM / Fri Jul 08) [/]# portupgrade -avvv --- Session started at: Fri, 08 Jul 2005 15:37:34 -0700 --- Session ended at: Fri, 08 Jul 2005 15:37:56 -0700 (consumed 00:00:22) /usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:322:in `deorigin': from /usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:915:in `tsort_build' from /usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:914:in `each' from /usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:914:in `tsort_build' from /usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:906:in `each' from /usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:906:in `tsort_build' from /usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:928:in `sort_build' from /usr/local/lib/ruby/site_ruby/1.8/pkgdb.rb:932:in `sort_build!' from /usr/local/sbin/portupgrade:674:in `main' from /usr/local/sbin/portupgrade:207:in `initialize' from /usr/local/sbin/portupgrade:207:in `new' from /usr/local/sbin/portupgrade:207:in `main' from /usr/local/sbin/portupgrade:1869 -- Paul Beard contact info: www.paulbeard.org/paulbeard.vcf Are you trying to win an argument or solve a problem? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
[Fwd: Re: cdrom mount question]
On Fri, 8 Jul 2005, Garrett Cooper wrote: Andreas Davour wrote: On Fri, 8 Jul 2005, Bryan Maynard wrote: I am not running as root when trying to access the device and I'm sure this is the problem. . . I just don't know how to fix it :-) . I don't know if I used amaroK or whatever KDE player was in the menu, but I just acted like the disc was mounted and it worked. It was a bit strange, since I had tried hard to change the protection on the device without getting it to work. Maybe the player ran setuid root or something, and tried to do magic on its own. Have amaroK actually complained about the disc not being mounted? If not, just try without mountinga and you might be lucky. Audio CDs shouldn't be mounted... If you try and do that you will most likely encounter issues with reading the CD. All that you would have to do most likely is change the permissions for the device to allow full read access to you on a user or group level (ie 0666, 0660 or equivalent). Modifying /etc/devfsd.conf to your liking is the best way to go to retain changes across boots. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Software patents and FreeBSD
Howdy, i'll be meeting tuesday with staffers for my congressman (since he's still in D.C.) to discuss software patents and the evil behind them. I've got a new perspective on the troubles they can cause given my Summer of Code project which is licensed under the APSL (http:// www.opensource.apple.com/apsl/) (my project: http:// wikitest.freebsd.org/moin.cgi/launchd) What are some good points, on how software patents, could/have affected the FreeBSD project? I can make a case for how beneficial having something like FreeBSD has been for the I.T. industry, but i'd also like to be able to demonstrate the harm that software patents can cause to a large open source project like FreeBSD. Cheers, -R. Tyler Ballance ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
DSL setup
I just installed FreeBSD 5.4 and am having problems setting up DSL. I followed the instructions in the handbook, but nothing worked. Do I have to configure something else other than ppp.conf? Thanks, Jake ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
dovecat-0.99.14 SSL option not present?
I am trying to get dovecat running on a FreeBSD-5.2.1 system with a nightly-updated ports tree. I am running into the problem that dovecat 0.99.14 is not compatible with GNUTLS at the moment, as document on this list previous to my joining: # make config will allow you to redo your config choices and select SSL rather than GNUTLS, support for which is broken in Dovecot itself ATM, thus in the port also. However, when I run the config, I don't have the option to select SSL. My options are: GNUTLS, SASL2, VPOPMAIL, LDAP, PGSQL, and MYSQL. Any suggestions? Thanks, Steve B. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
device.hints question
I was installing apcupsd with an APC USB UPS, and found that I needed to disable the uhid driver. The instructions on the apcupsd site specifically say to recompile the kernel. But, I try to keep my kernel as generic as possible, so I tried entering the following line into the device.hints file. hint.uhid.0.disabled=1 This did not work, and I'm not sure if it's a syntax issue on my part, or if disabling this driver via device.hints is just not supported. I did a web search for information on device.hints and uhid, but did not find anything specific. Recompiling with a custom kernconf worked, and everything is up and running.. But, I'm interested in a little bit of background on why the device hint did not work. If anyone has a quick answer great. Like I said, everything is working, so it's not like I need an answer. But, I'm still fairly new to Unix and FreeBSD, and trying to learn the why behind how things work. So, any information would be helpful. Thanks a bunch, George ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Problem with php5 configure.
I ran into a configure error while updating php5, I get the following:
Configuring extensions
checking whether to enable LIBXML support... yes
checking libxml2 install dir... /usr/local
checking whether libxml build works... no
configure: error: build test failed. Please check the config.log for
details.
=== Script configure failed unexpectedly.
Please report the problem to [EMAIL PROTECTED] [maintainer] and attach the
/usr/ports/lang/php5/work/php-5.0.4/config.log including the output of the
failure of your make command. Also, it might be a good idea to provide an
overview of all packages installed on your system (e.g. an `ls
/var/db/pkg`).
*** Error code 1
Configure Log:
-lm -lxml2 -lz -liconv -lm 15
/usr/local/lib/libxml2.so: undefined reference to `pthread_equal'
collect2: ld returned 1 exit status
configure: failed program was:
#line 18580 configure
#include confdefs.h
char xmlInitParser();
int main() {
xmlInitParser();
return 0;
}
The box is running yesterday's 5 stable. I have the latest libxml2
installed.
I tried emailing the maintainer, but got no response. Anyone have a
suggestion? Please cc me, I'm not subscribed to the list.
TIA,
Beech
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
