RE: interrupt issue, storm on parallel port, 5.4

2005-08-03 Thread Norbert Koch
 Hello,
 I've got a printserver that has an hp deskjet printer attached via
 parallel port. I just got an email with the following message:
 
 Interrupt storm detected on irq7: lpt0; throttling interrupt source
 
 I've checked lpt0 in dmesg and this error didn't come up then, do 
 i have to
 worry about this? This is on a 5.4-p1 system, if so is there a fix?
 Thanks.
 Dave.

I have a similar problem with my hp laserjet.
Setting sysctl hw.intr_storm_threshold to a higher value seems to help.

Norbert
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: interrupt issue, storm on parallel port, 5.4

2005-08-03 Thread Roland Smith
On Tue, Aug 02, 2005 at 09:41:09PM -0400, dave wrote:
 Hello,
 I've got a printserver that has an hp deskjet printer attached via
 parallel port. I just got an email with the following message:
 
 Interrupt storm detected on irq7: lpt0; throttling interrupt source
 
 I've checked lpt0 in dmesg and this error didn't come up then, do i have to
 worry about this? This is on a 5.4-p1 system, if so is there a fix?

In short, put the parallel port in polling mode. See
http://www.xs4all.nl/~rsmith/freebsd/#parport for details.

Roland
-- 
R.F.Smith (http://www.xs4all.nl/~rsmith/) Please send e-mail as plain text.
public key: http://www.xs4all.nl/~rsmith/pubkey.txt


pgpOyO1cunIhT.pgp
Description: PGP signature


Re: xmlcatmgr: entry already exists

2005-08-03 Thread David LeCount
--- Lowell Gilbert
[EMAIL PROTECTED] wrote:

 David LeCount [EMAIL PROTECTED] writes:
 
  When trying to portupgrade -f sdocbook-xml, it
 fails
  with the following error:
  
  xmlcatmgr: entry already exists for
  `/usr/local/share/xml/sdocbook/4.1.2.5/catalog' of
  type `CATALOG'
 
 What else thinks it owns that file?  
 pkg_which(1) might help you figure it out.

I did a pkg_which on the catalog file and it just
turned up a question mark.




Start your day with Yahoo! - make it your home page 
http://www.yahoo.com/r/hs 
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


(no subject)

2005-08-03 Thread Sergey
Hello.

Say how easiest to adjust please pppd.

-- 
Best regards,
 Sergey  mailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Status of support for HP Proliant DL380

2005-08-03 Thread jaco
Hello all,

For you guys that are using Proplian DL380's, how stable is 5.4-STABLE on
this hardware?

Are there any pitfalls that I must watch out for? What will work better on
this hardware, 5.4 or 4.x?

Thank you!
---Jaco
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Lotus Notes 6.5.1

2005-08-03 Thread Ivailo Tanusheff
There is no Linux version for Lotus Notes, only Lotus Domino (server) has 
a Linux version. It seems to me IBM do not care much about the free OS :)




Daniel Marsh [EMAIL PROTECTED] 
08/02/2005 04:35 PM

To
Ivailo Tanusheff [EMAIL PROTECTED], 
freebsd-questions@freebsd.org
cc

Subject
Re: Lotus Notes 6.5.1






On Tue, 02 Aug 2005 14:49:07 +0800, Ivailo Tanusheff 
[EMAIL PROTECTED] wrote:

 (Didn't changed subject last time)

 Hi,

 I want to find a way to run Lotus Notes 6.5.1 on my FreeBSD Workstation.
 Is there anyone who has made this?
 I have installed wine, but when I try to install or run the client 
 nothing

 happens. Later I've copied notes installation from a windows box but 
 still

 I can't run the application.


Have you tried the Linux emulation with the Linux version of Lotus Notes??

Please report if this works as I am personally interested...

Thank you

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Networking with FreeBSD

2005-08-03 Thread Ivailo Tanusheff
You can use ipf or ipfw as firewall to create a set of rules, allowind and 
denying access to different resources from/to different network. Also you 
can use ipnat to make NAT translation if needed.
Personally I'd advice you to use ipf as packet filter, ipfw as traffic 
shaper and ipnat for NAT.

Hope this will help you, there are tons of topics and howto's about using 
ipf, ipfw and ipnat :)

Ivailo Tanusheff
Senior System administrator
ProCredit Bank (Bulgaria) AD

tel. +359 2 921 7161
fax +359 2 921 7110
http://www.procreditbank.bg


Disclaimer: The information contained in this message is intended solely 
for the use of individual or entity to whom it is addressed and other 
authorized to receive it. It may contain confidential or legally 
privileged information. If you are not the intended recipient you are 
hereby notified that any disclosure, copying, distribution or taking any 
action in reliance on the contents of this message is strictly prohibited 
and may be unlawful. If you have received this communication in error, 
please notify us immediately by responding to this email and then delete 
it from your system. ProCredit Bank is neither liable for the proper and 
complete transmission of the information contained in this message nor for 
any delay in its receipt. 



Stephan Weaver [EMAIL PROTECTED] 
Sent by: [EMAIL PROTECTED]
08/02/2005 07:26 PM

To
freebsd-questions@freebsd.org
cc

Subject
Networking with FreeBSD






Hello Everyone.

We are going to be connecting our Stores to our Main Head Office Via 
Fiber.
We want to separate our Internal Lan from the store computers.
So we have decided to separate them by networks [ip addressing] because of 

security.


Head Office
I have 3 Servers in my LAN. And 4 Networks in Total inside of out Head 
Office.
10.10.10.1 - Pixel Replication Server
192.168.1.1 - Web Based Server [Delivery Server]
192.168.100.1 - File Server
Including Internet Users.
192.168.0.1-254 [ Lan ].


The store computers that need to access specific servers, are only on that 

network.
For example.
Store 1, Computer 1 Needs to Replicate [he will have an ip of 
10.10.10.105]
Store 1, Computer 2 [The Delivery Pc]. he will have an ip of 192.168.1.105
Store 1, Computer 3 Will access the File Server by having an ip of 
192.168.100.105.


Now the Risk involved with this is we have no Real Security, For Example.
A Malicious user can easily change his ip address to 192.168.0.105 For 
Example and Get on our Head Office Internal Network. Which We don't Want.


So i would like to Setup, Install And Configure a FreeBSD Based Firewall, 
that will have 4 Network Cards, and will be placed between Our Head Office 

Switch, and out Fibre Switch [Wan].

But AFAIK, By Placing all these network cards in the Same Machine, FreeBSD 

Will Bridge All Those Networks.
How Can i keep the networks Separate, and Secure the Servers by 
Firewalling 
by ip addressing?


I would appreciate Advice / Suggestions / Anything That will give me a 
better clue on how to secure my network.



Yours Sincerely,
Stephan Weaver

_
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: polling decreases throughput ~50%

2005-08-03 Thread Victor Semionov
  Why is that? I thought polling should decrease CPU usage by avoiding too
  many context switches when a hw irq is generated frequently, but it
  shouldn't make the transfer slower if there are no other jobs running.

 You have to poll often enough to keep the pipe full, otherwise your max
 throughput can be limited.  Also, rl hardware isn't the greatest and
 probably requires a lot more CPU than a device with working buffer/DMA
 design.

HZ is 1000, which I guess should be more than enough with 
kern.polling.burst_max=150.

Indeed, it was hardware's fault - my other NIC is a fxp and I got much better 
results with it - less CPU, while throughput stayed the same as without 
polling.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: running lighttpd with FastCGI

2005-08-03 Thread Sander Holthaus - Orange XL
[EMAIL PROTECTED] wrote:
 I am attempting to run lighttpd with FastCGI. I understand I
 must first get FastCGI support into php4. Can anyone point me
 in the right direction? I have tried all types of switches while
 compiling php4. 
 
 I have been looking for any switches I can set by scanning
 through the Makefile of php4 in the ports.

PHP has a meta-port for cgi: www/php4-cgi. Use that to start. There are a
few options you have to define, in the Makefile of lang/php4, you will find:


.if ${PHP_SAPI} == cgi
OPTIONS=REDIRECT Enable force-cgi-redirect support off \
DISCARD Enable discard-path support off \
FASTCGI Enable fastcgi support off \
PATHINFO Enable path-info-check support on
.endif

And

.if ${PHP_SAPI} == cgi
.if defined(WITH_REDIRECT)
CONFIGURE_ARGS+=--enable-force-cgi-redirect
.endif
.if defined(WITH_DISCARD)
CONFIGURE_ARGS+=--enable-discard-path
.endif
.if defined(WITH_FASTCGI)
CONFIGURE_ARGS+=--enable-fastcgi
.endif
.if defined(WITHOUT_PATHINFO)
CONFIGURE_ARGS+=--disable-path-info-check
.endif
.endif

You want WITH_REDIRECT, as well as WITH_DISCARD and WITH_FASTCGI. (Forgot
what to do with PATHINFO).

Kind Regards,
Sander Holthaus

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Software Router

2005-08-03 Thread Subhro

Hello Folks,

One of my clients had asked me to provide a router. I was planning to 
use an old P1 boxs to make the router. The requirements state that it is 
for the purpose of internet – vlan communication. The router must have 
features like encapsulation , creating sub interfaces , enabling port 
trunking (802.1Q) etc. Is it possible?


Thanks
S.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Software Router

2005-08-03 Thread John Oxley
On Wed, Aug 03, 2005 at 04:43:37PM +0530, Subhro wrote:
 Hello Folks,
 
 One of my clients had asked me to provide a router. I was planning to 
 use an old P1 boxs to make the router. The requirements state that it is 
 for the purpose of internet ? vlan communication. The router must have 
 features like encapsulation , creating sub interfaces , enabling port 
 trunking (802.1Q) etc. Is it possible?

Have a look at quagga (/usr/ports/net/quagga):
Quagga is a routing software suite, providing implementations of
OSPFv2, OSPFv3, RIP v1 and v2, RIPv3, BGPv4 and experemental ISIS
for Unix platforms, particularly FreeBSD and Linux and also NetBSD, 
to mention a few. Quagga is a fork of GNU Zebra which was developed 
by KunihiroIshiguro. The Quagga tree aims to build a more involved 
community around Quagga than the current centralised model of GNU Zebra.


-- 
John Oxley
Systems Administrator
Yo!Africa
E-Mail:  john at yoafrica.com
Tel: +263 4 858404
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


BSDPAN versus CPAN

2005-08-03 Thread Dan Mahoney, System Admin

Hey all,

I'm under the understanding that it's somehow preferable to install perl 
modules via the ports system, rather than the straight off perl -MCPAN -e 
shell system I normally use.  Apparently the only advantage is this avoids 
the no origin recorded errors (although portupgrade can't handle BSDPAN 
modules).


On that note, is there any sort of CPAN equivalent that will, upon trying 
to build a module will try the ports tree first, and failing that, will 
function as a wraparound to the CPAN module?


--

A single death is a tragedy.  A million deaths is a statistic.

-Josef Stalin, As quoted on the cover to Savatage's Dead Winter Dead

Dan Mahoney
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Support for HP Intel Servers

2005-08-03 Thread Yacoob Patel
Hi

 

I am currently working on a proposal for a customer that is using FreeBSD
.Information is required for FreeBSD compatibility with the current HP Blade
servers.

 

Please can you assist with regards to this.

 

Yacoob Patel

Technical Consultant: SAN Enterprise 

SOURCECOM TECHNOLOGY SOLUTIONS(Pty) Ltd

Mobile +27 84 807 8692 Direct +27 11 797 7234

Reception +27 11 797 7200 Fax +27 11 234 1861

Yacoob BLOCKED::mailto:[EMAIL PROTECTED] @sts.co.za 

 BLOCKED::http://www.sourcecom.co.za/ http://www.sourcecom.co.za

We know that no one takes notice of disclaimers but they are vital for the
following reason: they protect the privacy and information of the person for
whom the email is intended. If it was your information that someone else was
reading, we're sure you'd want this protection. So if yours isn't the name
on top, please delete the mail and notify us - it would be much appreciated.


Please note that copying, disseminating or taking any action based on the
above information by anyone not intended as the recipient is unlawful.
Furthermore the views expressed in this message are those of the individual
sender, unless specifically stated as those of Sourcecom Technology
Solutions/Lithalelanga Technologies

 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


X problem

2005-08-03 Thread TranceKat
Hi everyone,
My name is Alex, and I have been wrestling with a new installation of 
FreeBSD.  I want to get X Windows running, but I keep getting the error:

xf86EnableIO: Failed to open /dev/io for extended I/O

whenever I run X -configure, or Xorg -configure.

I checked /dev/io and it is there, as is /dev/mem.  I looked in the kernel and 
I do have 
deviceio there as well.  I am running FreeBSD 5.4-RELEASE. 
/usr/src/sys/i386/compile/GENERIC

Thanks in advance,
Alex
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: X problem

2005-08-03 Thread Dmitry Mityugov
On 8/2/05, TranceKat [EMAIL PROTECTED] wrote:
 Hi everyone,
 My name is Alex, and I have been wrestling with a new installation of
 FreeBSD.  I want to get X Windows running, but I keep getting the error:
 
 xf86EnableIO: Failed to open /dev/io for extended I/O
 
 whenever I run X -configure, or Xorg -configure.
 
 I checked /dev/io and it is there, as is /dev/mem.  I looked in the kernel 
 and I do have
 deviceio there as well.  I am running FreeBSD 5.4-RELEASE.
 /usr/src/sys/i386/compile/GENERIC

Is there any chance that you enabled/increased securelevel
during/after the installation?

-- 
Dmitry Mityugov, St. Petersburg, Russia
I ignore all messages with confidentiality statements

We live less by imagination than despite it - Rockwell Kent, N by E
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DVD burning..

2005-08-03 Thread cpghost
On Tue, Aug 02, 2005 at 10:22:19AM +0930, Greg 'groggy' Lehey wrote:
 of coasters, and it might help identify the issues.  All my burn
 failures (about 40% of total!) have been with DVD+Rs, though
 admittedly a cheap no-name brand bought in Taipei.  I've found that
 they work OK if I burn them at speed=1; if I use the default speed of
 4, they usually fail.

Same here. DVD+R fail for me at a similar rate, though DVD-R from
the same brand are doing just fine.

What's puzzling is that growisofs doesn't always notice errors
while burning. Approx 1/3rd of errors are first detected while reading
the DVD+R back in (MEDIUM ERROR READ BIG etc..). OTOH, I'm adding and
later checking md5 checksums for every file; and I've never had a
checksum mismatch. If something goes wrong, it's the whole reading of
a sector or a bunch of sectors.

Oh, and this happens with multiple DVD writers on different machines.

Regards,
-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: xmlcatmgr: entry already exists

2005-08-03 Thread Lowell Gilbert
David LeCount [EMAIL PROTECTED] writes:

 --- Lowell Gilbert
 [EMAIL PROTECTED] wrote:
 
  David LeCount [EMAIL PROTECTED] writes:
  
   When trying to portupgrade -f sdocbook-xml, it
  fails
   with the following error:
   
   xmlcatmgr: entry already exists for
   `/usr/local/share/xml/sdocbook/4.1.2.5/catalog' of
   type `CATALOG'
  
  What else thinks it owns that file?  
  pkg_which(1) might help you figure it out.
 
 I did a pkg_which on the catalog file and it just
 turned up a question mark.

On my system, that file belongs to sdocbook-xml itself.
I don't actually know much about xmlcatmgr.
Maybe you should ask the maintainer of the sdocbook-xml port?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 5.4-rel Bootloader Wedgie on Supermicro 5013C-MT

2005-08-03 Thread Lowell Gilbert
Spud Pecker [EMAIL PROTECTED] writes:

 The boot loader on i386 5.4-rel locks up at the count down screen on
 the Supermicro SuperServer 5013C-MT.  Is anyone working on this issue?
  Is there a developer that needs hardware to test on?
 
 http://supermicro.com/products/system/1U/5013/SYS-5013C-MT.cfm

Is this happening pre-install?
Are you referring to the boot menu with the ASCII graphic of the
daemon mascot?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: hard drive not properly dismounted

2005-08-03 Thread Lowell Gilbert
[EMAIL PROTECTED] writes:

 I have a second hard drive in my docking station that gets mounted at each 
 boot as /hd2.
 
 For the  past few weeks, everytime I boot, I get the message
 
 /hd2 not properly dismounted
 
 I have a script in /usr/local/etc/rc.d that automatically mounts and unmounts 
 /hd2 at boot and shutdown.
 
 Also, if I just unmount /hd2 manually, I still get that message.

You mean if you umount and then mount it again later without rebooting?

 I've run fsck on it, can still access when booted, and don't see anything 
 wrong.
 
 Why am I getting that message?
 
 Any ideas?

What type of filesystem is it?
What version of FreeBSD?  
etc.: 
 http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-questions/ 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Dell PowerEdge1850 Won't Take a Freebsd4.11 Installation.

2005-08-03 Thread Lowell Gilbert
Martin McCormick [EMAIL PROTECTED] writes:

   I just powered up a shiny new Dell Poweredge 1850 with the
 idea of installing FreeBSD4.11 on it.  Everything started out okay
 until I got to the part in the Standard Installation where it was
 going to extract the distributions just after formatting the disk,
 actually the hardware raid disks.
 
   At that point, every single distribution prompted the message
 that roughly goes:
 
   User Information.  Unable to extract blablabla from acd0.
 
   So far, game over.
 
   A 750 server which also has a RAID controller is, so far,
 taking the installation perfectly.
 
   The CDROM drive works well enough to boot and the boot process
 looks right until I try to extract the distributions such as /bin,
 etc.
 
   Are there any other things to investigate before saying that
 4.11 and Dell 1850's don't get along?

Well, I'd certainly expect 5.4 or later, with the ATA and RAID
improvements, to work better, but you're right that it kind of 
sounds more like the CD is giving you the problems.

Check the emergency shell (alt-F4, I think?) for any messages...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


antivir-milter question

2005-08-03 Thread Denny White


I've read the docs on antivir-milter, installed it,
set it up to verify downloaded updates with gpg,
tested it to see if it's checking mail with eicar,
 everything's working fine. Only thing is, I'd
like it to show in my messages that they've been
checked for viruses  I can't seem to get it do
that. I know that the AddXHeader setting only works
in commercial version, but it says if you set the
ModifySubject to YES that it'll show up, as I
understand it, appended to the subject. I did that
 restarted it but still no notice. Any ideas/help
appreciated.
Denny White

GnuPG key  : 0x1644E79A  |  http://wwwkeys.nl.pgp.net
Fingerprint: D0A9 AD44 1F10 E09E 0E67  EC25 CB44 F2E5 1644 E79A

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


installing a HP Photosmart 7350 usb printer

2005-08-03 Thread FreeBsdBeni
Hi,

System : 5.4-REL-#6

I've installed cups (via ports) and downloaded the .ppd file from 
linuxprinting.org so I could use it in the kde-printer wizard. No problem so 
far. I can see and modify the settings also via localhost:631. When printing, 
the cups error-log sais : stopped with status 2 !. So I've changed the 
level to debug (see below pls). The file gets in /var/spool/cups/ but nothing 
gets printed on paper :-(

What still goes wrong ? Thx for any help.

D [03/Aug/2005:16:16:33 +0200] AcceptClient: 7 from localhost:631.
D [03/Aug/2005:16:16:33 +0200] ReadClient: 7 POST /printers/HPPhotosmart7350 
HTTP/1.1
D [03/Aug/2005:16:16:34 +0200] print_job: auto-typing file...
D [03/Aug/2005:16:16:34 +0200] print_job: request file type is 
application/postscript.
D [03/Aug/2005:16:16:34 +0200] check_quotas: requesting-user-name = 'beni'
D [03/Aug/2005:16:16:34 +0200] print_job: requesting-user-name = 'beni'
D [03/Aug/2005:16:16:34 +0200] Adding default job-sheets values none,none...
I [03/Aug/2005:16:16:34 +0200] Adding start banner page none to job 8.
I [03/Aug/2005:16:16:34 +0200] Adding end banner page none to job 8.
I [03/Aug/2005:16:16:34 +0200] Job 8 queued on 'HPPhotosmart7350' by 'beni'.
D [03/Aug/2005:16:16:34 +0200] Job 8 hold_until = 0
D [03/Aug/2005:16:16:34 +0200] StartJob(8, 0x8091000)
D [03/Aug/2005:16:16:34 +0200] StartJob() id = 8, file = 0/1
D [03/Aug/2005:16:16:34 +0200] job-sheets=none,none
D [03/Aug/2005:16:16:34 +0200] banner_page = 0
D [03/Aug/2005:16:16:34 +0200] StartJob: argv = 
HPPhotosmart7350,8,beni,file:///,1,multiple-document-handling=separate-documents-collated-copies
 
orientation-requested=3,/var/spool/cups/d8-001
D [03/Aug/2005:16:16:34 +0200] StartJob: 
envp[0]=PATH=/usr/local/libexec/cups/filter:/bin:/usr/bin
D [03/Aug/2005:16:16:34 +0200] StartJob: envp[1]=SOFTWARE=CUPS/1.1
D [03/Aug/2005:16:16:34 +0200] StartJob: envp[2]=USER=root
D [03/Aug/2005:16:16:34 +0200] StartJob: envp[3]=CHARSET=iso-8859-1
D [03/Aug/2005:16:16:34 +0200] StartJob: envp[4]=LANG=en
D [03/Aug/2005:16:16:34 +0200] StartJob: 
envp[5]=PPD=/usr/local/etc/cups/ppd/HPPhotosmart7350.ppd
D [03/Aug/2005:16:16:34 +0200] StartJob: 
envp[6]=CUPS_SERVERROOT=/usr/local/etc/cups
D [03/Aug/2005:16:16:34 +0200] StartJob: envp[7]=RIP_MAX_CACHE=8m
D [03/Aug/2005:16:16:34 +0200] StartJob: envp[8]=TMPDIR=/var/spool/cups/tmp
D [03/Aug/2005:16:16:34 +0200] StartJob: 
envp[9]=CONTENT_TYPE=application/postscript
D [03/Aug/2005:16:16:34 +0200] StartJob: envp[10]=DEVICE_URI=usb:/dev/ulpt0
D [03/Aug/2005:16:16:34 +0200] StartJob: envp[11]=PRINTER=HPPhotosmart7350
D [03/Aug/2005:16:16:34 +0200] StartJob: 
envp[12]=CUPS_DATADIR=/usr/local/share/cups
D [03/Aug/2005:16:16:34 +0200] StartJob: 
envp[13]=CUPS_FONTPATH=/usr/local/share/cups/fonts
D [03/Aug/2005:16:16:34 +0200] StartJob: envp[14]=CUPS_SERVER=localhost
D [03/Aug/2005:16:16:34 +0200] StartJob: envp[15]=IPP_PORT=631
D [03/Aug/2005:16:16:34 +0200] StartJob: statusfds = [ 8 9 ]
D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[1] = [ 10 -1 ]
D [03/Aug/2005:16:16:34 +0200] StartJob: filter = 
/usr/local/libexec/cups/filter/pstops
D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[0] = [ 11 12 ]
D [03/Aug/2005:16:16:34 +0200] 
start_process(/usr/local/libexec/cups/filter/pstops, 0xbfbef340, 
0xbfbee6b0, 10, 12, 9)
I [03/Aug/2005:16:16:34 +0200] Started 
filter /usr/local/libexec/cups/filter/pstops (PID 17668) for job 8.
D [03/Aug/2005:16:16:34 +0200] StartJob: filter = 
/usr/local/libexec/cups/filter/foomatic-rip
D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[1] = [ 10 13 ]
D [03/Aug/2005:16:16:34 +0200] 
start_process(/usr/local/libexec/cups/filter/foomatic-rip, 0xbfbef340, 
0xbfbee6b0, 11, 13, 9)
I [03/Aug/2005:16:16:34 +0200] Started 
filter /usr/local/libexec/cups/filter/foomatic-rip (PID 17669) for job 8.
D [03/Aug/2005:16:16:34 +0200] StartJob: backend = 
/usr/local/libexec/cups/backend/usb
D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[0] = [ -1 11 ]
D [03/Aug/2005:16:16:34 +0200] 
start_process(/usr/local/libexec/cups/backend/usb, 0xbfbef340, 0xbfbee6b0, 
10, 11, 9)
I [03/Aug/2005:16:16:34 +0200] Started 
backend /usr/local/libexec/cups/backend/usb (PID 17670) for job 8.
D [03/Aug/2005:16:16:34 +0200] ProcessIPPRequest: 7 status_code=0
D [03/Aug/2005:16:16:34 +0200] CloseClient: 7
D [03/Aug/2005:16:16:34 +0200] [Job 
8] /usr/local/libexec/cups/filter/foomatic-rip: No such file or directory
D [03/Aug/2005:16:16:34 +0200] [Job 8] Page = 595x842; 10,36 to 585,833
D [03/Aug/2005:16:16:34 +0200] [Job 8] slowcollate=0, slowduplex=0, 
sloworder=0
D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%BoundingBox: 0 0 595 842
D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%Creator: KDE 3.4.1 HTML Library
D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%Title: file:///
D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%CreationDate: Wed Aug 3 16:16:30 
2005
D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%Orientation: Portrait
D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%Pages: 1
D 

Re: BSDPAN versus CPAN

2005-08-03 Thread Dan Nelson
In the last episode (Aug 03), Dan Mahoney, System Admin said:
 I'm under the understanding that it's somehow preferable to install
 perl modules via the ports system, rather than the straight off perl
 -MCPAN -e shell system I normally use.  Apparently the only advantage
 is this avoids the no origin recorded errors (although portupgrade
 can't handle BSDPAN modules).

The other advantage is that if you install perl modules via ports,
portupgrade will upgrade them.  I didn't think CPAN had any sort of
automatic updating option.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: antivir-milter question

2005-08-03 Thread Norbert Koch
 I've read the docs on antivir-milter, installed it,
 set it up to verify downloaded updates with gpg,
 tested it to see if it's checking mail with eicar,
  everything's working fine. Only thing is, I'd
 like it to show in my messages that they've been
 checked for viruses  I can't seem to get it do
 that. I know that the AddXHeader setting only works
 in commercial version, but it says if you set the
 ModifySubject to YES that it'll show up, as I
 understand it, appended to the subject. I did that
  restarted it but still no notice. Any ideas/help
 appreciated.
 Denny White


Just an idea: run antivir through amavis-milter,
as amavis is possibly a bit more configurable.
The port is security/amavisd-new.

Norbert
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: installing a HP Photosmart 7350 usb printer

2005-08-03 Thread Norbert Koch
 System : 5.4-REL-#6

 I've installed cups (via ports) and downloaded the .ppd file from
 linuxprinting.org so I could use it in the kde-printer wizard. No
 problem so
 far. I can see and modify the settings also via localhost:631.
 When printing,
 the cups error-log sais : stopped with status 2 !. So I've changed the
 level to debug (see below pls). The file gets in /var/spool/cups/
 but nothing
 gets printed on paper :-(

 What still goes wrong ? Thx for any help.

 D [03/Aug/2005:16:16:33 +0200] AcceptClient: 7 from localhost:631.
 D [03/Aug/2005:16:16:33 +0200] ReadClient: 7 POST
 /printers/HPPhotosmart7350
 HTTP/1.1
 D [03/Aug/2005:16:16:34 +0200] print_job: auto-typing file...
 D [03/Aug/2005:16:16:34 +0200] print_job: request file type is
 application/postscript.
 D [03/Aug/2005:16:16:34 +0200] check_quotas: requesting-user-name = 'beni'
 D [03/Aug/2005:16:16:34 +0200] print_job: requesting-user-name = 'beni'
 D [03/Aug/2005:16:16:34 +0200] Adding default job-sheets values
 none,none...
 I [03/Aug/2005:16:16:34 +0200] Adding start banner page none to job 8.
 I [03/Aug/2005:16:16:34 +0200] Adding end banner page none to job 8.
 I [03/Aug/2005:16:16:34 +0200] Job 8 queued on 'HPPhotosmart7350'
 by 'beni'.
 D [03/Aug/2005:16:16:34 +0200] Job 8 hold_until = 0
 D [03/Aug/2005:16:16:34 +0200] StartJob(8, 0x8091000)
 D [03/Aug/2005:16:16:34 +0200] StartJob() id = 8, file = 0/1
 D [03/Aug/2005:16:16:34 +0200] job-sheets=none,none
 D [03/Aug/2005:16:16:34 +0200] banner_page = 0
 D [03/Aug/2005:16:16:34 +0200] StartJob: argv =
 HPPhotosmart7350,8,beni,file:///,1,multiple-document-ha
 ndling=separate-documents-collated-copies
 orientation-requested=3,/var/spool/cups/d8-001
 D [03/Aug/2005:16:16:34 +0200] StartJob:
 envp[0]=PATH=/usr/local/libexec/cups/filter:/bin:/usr/bin
 D [03/Aug/2005:16:16:34 +0200] StartJob: envp[1]=SOFTWARE=CUPS/1.1
 D [03/Aug/2005:16:16:34 +0200] StartJob: envp[2]=USER=root
 D [03/Aug/2005:16:16:34 +0200] StartJob: envp[3]=CHARSET=iso-8859-1
 D [03/Aug/2005:16:16:34 +0200] StartJob: envp[4]=LANG=en
 D [03/Aug/2005:16:16:34 +0200] StartJob:
 envp[5]=PPD=/usr/local/etc/cups/ppd/HPPhotosmart7350.ppd
 D [03/Aug/2005:16:16:34 +0200] StartJob:
 envp[6]=CUPS_SERVERROOT=/usr/local/etc/cups
 D [03/Aug/2005:16:16:34 +0200] StartJob: envp[7]=RIP_MAX_CACHE=8m
 D [03/Aug/2005:16:16:34 +0200] StartJob:
 envp[8]=TMPDIR=/var/spool/cups/tmp
 D [03/Aug/2005:16:16:34 +0200] StartJob:
 envp[9]=CONTENT_TYPE=application/postscript
 D [03/Aug/2005:16:16:34 +0200] StartJob:
 envp[10]=DEVICE_URI=usb:/dev/ulpt0
 D [03/Aug/2005:16:16:34 +0200] StartJob:
 envp[11]=PRINTER=HPPhotosmart7350
 D [03/Aug/2005:16:16:34 +0200] StartJob:
 envp[12]=CUPS_DATADIR=/usr/local/share/cups
 D [03/Aug/2005:16:16:34 +0200] StartJob:
 envp[13]=CUPS_FONTPATH=/usr/local/share/cups/fonts
 D [03/Aug/2005:16:16:34 +0200] StartJob: envp[14]=CUPS_SERVER=localhost
 D [03/Aug/2005:16:16:34 +0200] StartJob: envp[15]=IPP_PORT=631
 D [03/Aug/2005:16:16:34 +0200] StartJob: statusfds = [ 8 9 ]
 D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[1] = [ 10 -1 ]
 D [03/Aug/2005:16:16:34 +0200] StartJob: filter =
 /usr/local/libexec/cups/filter/pstops
 D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[0] = [ 11 12 ]
 D [03/Aug/2005:16:16:34 +0200]
 start_process(/usr/local/libexec/cups/filter/pstops, 0xbfbef340,
 0xbfbee6b0, 10, 12, 9)
 I [03/Aug/2005:16:16:34 +0200] Started
 filter /usr/local/libexec/cups/filter/pstops (PID 17668) for job 8.
 D [03/Aug/2005:16:16:34 +0200] StartJob: filter =
 /usr/local/libexec/cups/filter/foomatic-rip
 D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[1] = [ 10 13 ]
 D [03/Aug/2005:16:16:34 +0200]
 start_process(/usr/local/libexec/cups/filter/foomatic-rip, 0xbfbef340,
 0xbfbee6b0, 11, 13, 9)
 I [03/Aug/2005:16:16:34 +0200] Started
 filter /usr/local/libexec/cups/filter/foomatic-rip (PID 17669) for job 8.
 D [03/Aug/2005:16:16:34 +0200] StartJob: backend =
 /usr/local/libexec/cups/backend/usb
 D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[0] = [ -1 11 ]
 D [03/Aug/2005:16:16:34 +0200]
 start_process(/usr/local/libexec/cups/backend/usb, 0xbfbef340,
 0xbfbee6b0,
 10, 11, 9)
 I [03/Aug/2005:16:16:34 +0200] Started
 backend /usr/local/libexec/cups/backend/usb (PID 17670) for job 8.
 D [03/Aug/2005:16:16:34 +0200] ProcessIPPRequest: 7 status_code=0
 D [03/Aug/2005:16:16:34 +0200] CloseClient: 7
 D [03/Aug/2005:16:16:34 +0200] [Job
 8] /usr/local/libexec/cups/filter/foomatic-rip: No such file or directory
 D [03/Aug/2005:16:16:34 +0200] [Job 8] Page = 595x842; 10,36 to 585,833
 D [03/Aug/2005:16:16:34 +0200] [Job 8] slowcollate=0, slowduplex=0,
 sloworder=0
 D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%BoundingBox: 0 0 595 842
 D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%Creator: KDE 3.4.1 HTML Library
 D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%Title: file:///
 D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%CreationDate: Wed Aug
 3 16:16:30
 2005
 D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%Orientation: Portrait
 D 

Re: Networking with FreeBSD

2005-08-03 Thread Stephan Weaver




From: Nikolas Britton [EMAIL PROTECTED]
Reply-To: Nikolas Britton [EMAIL PROTECTED]
To: Stephan Weaver [EMAIL PROTECTED]
CC: [EMAIL PROTECTED], freebsd-questions@freebsd.org
Subject: Re: Networking with FreeBSD
Date: Tue, 2 Aug 2005 18:26:15 -0500

On 8/2/05, Stephan Weaver [EMAIL PROTECTED] wrote:


 From: Chuck Swiger [EMAIL PROTECTED]
 To: Stephan Weaver [EMAIL PROTECTED]
 CC: freebsd-questions@freebsd.org
 Subject: Re: Networking with FreeBSD
 Date: Tue, 02 Aug 2005 14:26:07 -0400
 
 Stephan Weaver wrote:
 [ ... ]
 Thank You So Very Much for your quick response.
 
 You're welcome.
 
 I am familar with firewalling, but i never done something like this.
 Mabee you can give me an actual Example from my reference.
 Using my networks ect.
 
 Sure, if I had lots of free time and nothing else to do, I could 
probably

 write up a security policy, firewall rules, along with pretty network
 topology diagrams and so forth.  But I was up 'til 2AM doing pretty 
much
 just that for a client yesterday (*), and I'd rather not spend that 
much

 effort again today without a good cause, or at least more beer.  :-)
 
 There is an expectation on the freebsd lists that you spend your own 
time
 to learn about the tasks you want to accomplish before asking other 
people

 to repeat what the documentation says for your own specific use case.
 (Read the docs.  Try stuff out.  Ask questions which show what you've 
done

 and what the specific error message or problem you have is.)
 
 What i want to do is seperate the network's on the same wire.
 
 Hmm.  Why do you want to put separate subnets on the same wire?
 
 (What does that mean to you, anyway?  Using the same external ISP
 connection? All boxes all on the same ethernet hub?  Something else?
 Consider IPsec. :-)
 
 --
 -Chuck
 
 (*): Client is in Denmark.  They wanted stuff urgently by this 
morning
 their time, after getting me something to respond to yesterday at 4PM 
my

 time.  Bleh, this global outsourcing thing really is overrated
 


 What i want to do in a nutshell,
 Connect all stores together via fibre, and protect my HeadOffice Lan, 
which

 will now be connected to all the stores. And Have some sort of security.

What fibre? how far are the stores? fibre networking gear? you have
fibre going all the way to your stores from HQ?

Also, why do you have pixel, httpd, and samba servers on different LANs?

Internet
   |
   |   |WANs 1-4, 192.168.2/24, 192.168.3/24, 192.168.4/24, 
192.168.5/24

Firewall -- DMZ 192.168.1/24 - Pixel, httpd, samba
   |
   |
HQ LAN 192.168.0/24


OR:

Internet
  |
  |   |-WAN, 192.168.2/24
Firewall --- DMZ, 192.168.1/24 - Pixel, httpd
  |
  |--- Samba
  |
HQ LAN 192.168.0/24

OR:

Internet
  |
  |   |---WAN(s)
Firewall
  |
  |
HQ LAN

Etc.

We need more info to help you.




Thank you for your concern and quick response everyone.

Now i will use your example as mentioned above.

I have one quick question though.
These WAN's will be on seperate networks because of the /24. correct?

So if Wan1 [192.168.2/24] Wants to Connect to our Pixel Server[192.168.1/24] 
 for example He would not be able to communicate because of the /24? Is 
this correct?


If so, how do allow them to communicate?

Yours Sincerely
Stephan Weaver

_
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


sysctl options loader.conf or sysctl.conf

2005-08-03 Thread dick hoogendijk
I'm a bit confused about whcih options needs to be set where.

I know i.e. that hw.ata.atapi_dma=1 needs to be set
in /boot/loader.conf while others are set in /etc/sysctl.conf. I need
to know where I can find info on the rules about this. Now I'm
dependant on what I happen to read somewhere.

I read something about vfs.read_max=16 - where do I set this I
wonder? Is there info about this somewhere?

-- 
dick -- http://nagual.st/ -- PGP/GnuPG key: F86289CE
++ Running FreeBSD 4.11-stable ++ FreeBSD 5.4
+ Nai tiruvantel ar vayuvantel i Valar tielyanna nu vilja
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: installing a HP Photosmart 7350 usb printer

2005-08-03 Thread FreeBsdBeni
On Wednesday 03 August 2005 16:37, you wrote:
  System : 5.4-REL-#6
 
  I've installed cups (via ports) and downloaded the .ppd file from
  linuxprinting.org so I could use it in the kde-printer wizard. No
  problem so
  far. I can see and modify the settings also via localhost:631.
  When printing,
  the cups error-log sais : stopped with status 2 !. So I've changed the
  level to debug (see below pls). The file gets in /var/spool/cups/
  but nothing
  gets printed on paper :-(
 
  What still goes wrong ? Thx for any help.
 
  D [03/Aug/2005:16:16:33 +0200] AcceptClient: 7 from localhost:631.
  D [03/Aug/2005:16:16:33 +0200] ReadClient: 7 POST
  /printers/HPPhotosmart7350
  HTTP/1.1
  D [03/Aug/2005:16:16:34 +0200] print_job: auto-typing file...
  D [03/Aug/2005:16:16:34 +0200] print_job: request file type is
  application/postscript.
  D [03/Aug/2005:16:16:34 +0200] check_quotas: requesting-user-name =
  'beni' D [03/Aug/2005:16:16:34 +0200] print_job: requesting-user-name =
  'beni' D [03/Aug/2005:16:16:34 +0200] Adding default job-sheets values
  none,none...
  I [03/Aug/2005:16:16:34 +0200] Adding start banner page none to job 8.
  I [03/Aug/2005:16:16:34 +0200] Adding end banner page none to job 8.
  I [03/Aug/2005:16:16:34 +0200] Job 8 queued on 'HPPhotosmart7350'
  by 'beni'.
  D [03/Aug/2005:16:16:34 +0200] Job 8 hold_until = 0
  D [03/Aug/2005:16:16:34 +0200] StartJob(8, 0x8091000)
  D [03/Aug/2005:16:16:34 +0200] StartJob() id = 8, file = 0/1
  D [03/Aug/2005:16:16:34 +0200] job-sheets=none,none
  D [03/Aug/2005:16:16:34 +0200] banner_page = 0
  D [03/Aug/2005:16:16:34 +0200] StartJob: argv =
  HPPhotosmart7350,8,beni,file:///,1,multiple-document-ha
  ndling=separate-documents-collated-copies
  orientation-requested=3,/var/spool/cups/d8-001
  D [03/Aug/2005:16:16:34 +0200] StartJob:
  envp[0]=PATH=/usr/local/libexec/cups/filter:/bin:/usr/bin
  D [03/Aug/2005:16:16:34 +0200] StartJob: envp[1]=SOFTWARE=CUPS/1.1
  D [03/Aug/2005:16:16:34 +0200] StartJob: envp[2]=USER=root
  D [03/Aug/2005:16:16:34 +0200] StartJob: envp[3]=CHARSET=iso-8859-1
  D [03/Aug/2005:16:16:34 +0200] StartJob: envp[4]=LANG=en
  D [03/Aug/2005:16:16:34 +0200] StartJob:
  envp[5]=PPD=/usr/local/etc/cups/ppd/HPPhotosmart7350.ppd
  D [03/Aug/2005:16:16:34 +0200] StartJob:
  envp[6]=CUPS_SERVERROOT=/usr/local/etc/cups
  D [03/Aug/2005:16:16:34 +0200] StartJob: envp[7]=RIP_MAX_CACHE=8m
  D [03/Aug/2005:16:16:34 +0200] StartJob:
  envp[8]=TMPDIR=/var/spool/cups/tmp
  D [03/Aug/2005:16:16:34 +0200] StartJob:
  envp[9]=CONTENT_TYPE=application/postscript
  D [03/Aug/2005:16:16:34 +0200] StartJob:
  envp[10]=DEVICE_URI=usb:/dev/ulpt0
  D [03/Aug/2005:16:16:34 +0200] StartJob:
  envp[11]=PRINTER=HPPhotosmart7350
  D [03/Aug/2005:16:16:34 +0200] StartJob:
  envp[12]=CUPS_DATADIR=/usr/local/share/cups
  D [03/Aug/2005:16:16:34 +0200] StartJob:
  envp[13]=CUPS_FONTPATH=/usr/local/share/cups/fonts
  D [03/Aug/2005:16:16:34 +0200] StartJob: envp[14]=CUPS_SERVER=localhost
  D [03/Aug/2005:16:16:34 +0200] StartJob: envp[15]=IPP_PORT=631
  D [03/Aug/2005:16:16:34 +0200] StartJob: statusfds = [ 8 9 ]
  D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[1] = [ 10 -1 ]
  D [03/Aug/2005:16:16:34 +0200] StartJob: filter =
  /usr/local/libexec/cups/filter/pstops
  D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[0] = [ 11 12 ]
  D [03/Aug/2005:16:16:34 +0200]
  start_process(/usr/local/libexec/cups/filter/pstops, 0xbfbef340,
  0xbfbee6b0, 10, 12, 9)
  I [03/Aug/2005:16:16:34 +0200] Started
  filter /usr/local/libexec/cups/filter/pstops (PID 17668) for job 8.
  D [03/Aug/2005:16:16:34 +0200] StartJob: filter =
  /usr/local/libexec/cups/filter/foomatic-rip
  D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[1] = [ 10 13 ]
  D [03/Aug/2005:16:16:34 +0200]
  start_process(/usr/local/libexec/cups/filter/foomatic-rip, 0xbfbef340,
  0xbfbee6b0, 11, 13, 9)
  I [03/Aug/2005:16:16:34 +0200] Started
  filter /usr/local/libexec/cups/filter/foomatic-rip (PID 17669) for job 8.
  D [03/Aug/2005:16:16:34 +0200] StartJob: backend =
  /usr/local/libexec/cups/backend/usb
  D [03/Aug/2005:16:16:34 +0200] StartJob: filterfds[0] = [ -1 11 ]
  D [03/Aug/2005:16:16:34 +0200]
  start_process(/usr/local/libexec/cups/backend/usb, 0xbfbef340,
  0xbfbee6b0,
  10, 11, 9)
  I [03/Aug/2005:16:16:34 +0200] Started
  backend /usr/local/libexec/cups/backend/usb (PID 17670) for job 8.
  D [03/Aug/2005:16:16:34 +0200] ProcessIPPRequest: 7 status_code=0
  D [03/Aug/2005:16:16:34 +0200] CloseClient: 7
  D [03/Aug/2005:16:16:34 +0200] [Job
  8] /usr/local/libexec/cups/filter/foomatic-rip: No such file or directory
  D [03/Aug/2005:16:16:34 +0200] [Job 8] Page = 595x842; 10,36 to 585,833
  D [03/Aug/2005:16:16:34 +0200] [Job 8] slowcollate=0, slowduplex=0,
  sloworder=0
  D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%BoundingBox: 0 0 595 842
  D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%Creator: KDE 3.4.1 HTML
  Library D [03/Aug/2005:16:16:34 +0200] [Job 8] 0 %%Title: file:///
  D 

ftp.freebsd.org ISO download statistics?

2005-08-03 Thread Marcin Koziej

Where can I find information how many FreeBSD CD ISO's were 
downloaded for i386 and amd64 for all releases with amd64 support?

m.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: running lighttpd with FastCGI

2005-08-03 Thread David Banning
 PHP has a meta-port for cgi: www/php4-cgi. Use that to start. There are a
 few options you have to define, in the Makefile of lang/php4, you will find:

Yes, I just found that reference on the lighttpd website. I actually did
try it, but ran into access problems. I -did- achieve success by compiling
the code available from the lighttpd website.

Just so I understand how to handle options when compiling in the ports;

 .if defined(WITH_REDIRECT)
 CONFIGURE_ARGS+=--enable-force-cgi-redirect
 .endif

To enable this, in the correct port I would go;

# make install WITH_DIRECT=yes

Is that the correct syntax for enabling options?

Thanks for your comments. I am now having trouble finding alternatives
for redirection to be placed on the .htaccess file. I don't see any
reference for that on the lighttpd website. I will try to post to that site.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Dell PowerEdge1850 Won't Take a Freebsd4.11 Installation.

2005-08-03 Thread Martin McCormick
Lowell Gilbert writes:
Well, I'd certainly expect 5.4 or later, with the ATA and RAID
improvements, to work better, but you're right that it kind of 
sounds more like the CD is giving you the problems.

Check the emergency shell (alt-F4, I think?) for any messages...

Thank you very much.  I have downloaded the iso images for 5.4
that I need to get started:

5.4-RELEASE-i386-bootonly.iso
5.4-RELEASE-i386-disc1.iso
5.4-RELEASE-i386-disc2.iso

and discovered another surprise.  There appears to be no headless
option as in boot -h although I may have missed it.  A google search
turned up a pretty good article on how to make a headless boot.flp
floppy for 5.4.

Is there any way to make the standard boot CD come up on a
serial port?

The instructions for making the boot.flp image assume you
already have FreeBSD5.4 installed somewhere which I don't yet have.

I did see a bootsio file on the bootonly CD so that looks like
a possibility.

As a computer user who happens to be blind, the ability to do
a cold start from a serial port, preferably from the boot/installation
cd saves lots of time and tinkering.  Most of us are in this business
because we love to tinker, but sometimes there is a job to be done and
the faster it gets done, the better.

Thanks again.

Martin McCormick WB5AGZ  Stillwater, OK 
OSU Information Technology Division Network Operations Group
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Slow DNS

2005-08-03 Thread [EMAIL PROTECTED]
Problem: I just got my named up and working however resolving a domain 
takes an unusual amount of time and the only way to go to a domain on a 
user computer is to ping it on the server first. I'm sure it is just an 
option I forgot to set, however can not figure it out. Any help is 
greatly appriated.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: running lighttpd with FastCGI

2005-08-03 Thread Sander Holthaus - Orange XL
David Banning wrote:
 PHP has a meta-port for cgi: www/php4-cgi. Use that to start. There
 are a few options you have to define, in the Makefile of lang/php4,
 you will find: 
 
 Yes, I just found that reference on the lighttpd website. I
 actually did try it, but ran into access problems. I -did-
 achieve success by compiling the code available from the lighttpd
 website. 
 
 Just so I understand how to handle options when compiling in the
 ports; 
 
 .if defined(WITH_REDIRECT)
 CONFIGURE_ARGS+=--enable-force-cgi-redirect
 .endif
 
 To enable this, in the correct port I would go;
 
 # make install WITH_DIRECT=yes
 
 Is that the correct syntax for enabling options?

I'm not sure what the definitive way is, but I use the following (php5 with
fastcgi):

make -DWITH_FASTCGI -DWITH_REDIRECT -DWITH_DISCARD install clean
From what I understand, you do not need to set those to yes explicitely. 

Clean is not necessary, but it will save you some diskspace.

Kind Regards,
Sander Holthaus


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


sound vs. PCIX bus

2005-08-03 Thread hal

Can anyone recommend a sound card for the PCIX bus?

or

Can anyone recommend a USB or otherwise attached sound card?

or

Some other way I can use mpg123 to make a lot of noise when
my server needs some attention.

BTW I am running 4.7 p25.
The application is mpg123

Thanx

hal
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 5.4-rel Bootloader Wedgie on Supermicro 5013C-MT

2005-08-03 Thread Joe Hamelin
Correct.  The boot selection screen locks and gets jumbled when
booting from the
5.4-RELEASE-i386-disc1.iso disk. 

Regards,

Joe

 
 Is this happening pre-install?
 Are you referring to the boot menu with the ASCII graphic of the
 daemon mascot?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


pf macro def

2005-08-03 Thread dick hoogendijk
I'm in the process of rewriting a ipf firewall to a pf firewall script

I have a macro defined like:
  tcp_services = { 21, 22, 25, 80, 113, 587, 110, 143, 993, 995, 6891,
49151:50251 }

I use it in a rule like:
  pass in on $ext_if inet proto tcp from any to $ext_if \
 port $tcp_services flags S/SA keep state

My question is about the 49151:50251 port range. It's used by my
PureFTP server. Is this a correct way of using the range. Can I have it
like this in a macro definition?

-- 
dick -- http://nagual.st/ -- PGP/GnuPG key: F86289CE
++ Running FreeBSD 4.11-stable ++ FreeBSD 5.4
+ Nai tiruvantel ar vayuvantel i Valar tielyanna nu vilja
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: clamav-0.86.2_1 from ports - freshclam core dumps

2005-08-03 Thread Kirk Strauser
On Tuesday 02 August 2005 23:20, Denis Lemire wrote:
 When run using the startup script in
 /usr/local/etc/rc.d/clamav-freshclam.sh, freshclam built from ports
 segfaults and core dumps with the following message:

Same here.  Annoyingly enough, it comes back up correctly if I reboot the 
server (for other reasons, of course :) ) and let the rc.d script start it.
-- 
Kirk Strauser


pgpPJQcKg26BG.pgp
Description: PGP signature


Re: pf macro def

2005-08-03 Thread Roland Smith
On Wed, Aug 03, 2005 at 07:05:30PM +0200, dick hoogendijk wrote:
 I'm in the process of rewriting a ipf firewall to a pf firewall script
 
 I have a macro defined like:
   tcp_services = { 21, 22, 25, 80, 113, 587, 110, 143, 993, 995, 6891,
 49151:50251 }

The manual page for pf.conf places the braces between double quotes in
macro definitions: foo = { 21, 22, 49151:50251 }
 
 I use it in a rule like:
   pass in on $ext_if inet proto tcp from any to $ext_if \
  port $tcp_services flags S/SA keep state
 
 My question is about the 49151:50251 port range. It's used by my
 PureFTP server. Is this a correct way of using the range. 

It should be according to the manual page. At least, that's how I read
the PARAMETERS section of pf.conf(5).

Roland
-- 
R.F.Smith (http://www.xs4all.nl/~rsmith/) Please send e-mail as plain text.
public key: http://www.xs4all.nl/~rsmith/pubkey.txt


pgpjTkYn5V6kh.pgp
Description: PGP signature


Re: Slow DNS

2005-08-03 Thread Charles Swiger

On Aug 3, 2005, at 12:10 PM, [EMAIL PROTECTED] wrote:
Problem: I just got my named up and working however resolving a  
domain takes an unusual amount of time and the only way to go to a  
domain on a user computer is to ping it on the server first. I'm  
sure it is just an option I forgot to set, however can not figure  
it out. Any help is greatly appriated.


Use dig or nslookup to debug what your nameserver is doing,  
perhaps your clients aren't permitted to talk to the named process...?


Check /var/named/etc/namedb/named.conf for a listen-on line, and  
change that from 127.0.0.1 to your local subnet, or comment it out  
entirely, depending on what you want to do.


--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sysctl options loader.conf or sysctl.conf

2005-08-03 Thread Gary W. Swearingen
dick hoogendijk [EMAIL PROTECTED] writes:

 I'm a bit confused about whcih options needs to be set where.

You're not alone.

 I know i.e. that hw.ata.atapi_dma=1 needs to be set
 in /boot/loader.conf while others are set in /etc/sysctl.conf. I need
 to know where I can find info on the rules about this. Now I'm
 dependant on what I happen to read somewhere.

Well, sysctl(8) refers to loader.conf(5), sysctl.conf(5), loader(8),
which refer to /boot/defaults/loader.conf  /etc/sysctl.conf and
don't forget the handboot and FAQ.

 I read something about vfs.read_max=16 - where do I set this I
 wonder? 

Since sysctl.conf is read in only when going multi-user and that
sounds like something you'd want always, I'd put it in loader.conf.

 Is there info about this somewhere?

Google?  If you think it's needed, please write a PR (probably on
/boot/default/loader.conf).
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Support for HP Intel Servers

2005-08-03 Thread Danny Howard
On Tue, Aug 02, 2005 at 06:09:55PM +0200, Yacoob Patel wrote:
 Hi
 
 I am currently working on a proposal for a customer that is using
 FreeBSD .Information is required for FreeBSD compatibility with the
 current HP Blade servers.

Hello,

I was researching blade servers last week, and the spiel seems to be
that FreeBSD works just fine, but is not formally supported.

And then I found:

http://people.freebsd.org/~jcagle/

That supplies stuff like BIOS upgrades for HP servers that can run in
FreeBSD!  Cool!

Any feedback that I hear about FreeBSD and HP Blade servers I'd really
dig!  Thanks!

-danny

-- 
http://dannyman.toldme.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sysctl options loader.conf or sysctl.conf

2005-08-03 Thread Charles Swiger

On Aug 3, 2005, at 11:21 AM, dick hoogendijk wrote:

I'm a bit confused about whcih options needs to be set where.


This changes over time.  A lot of options once needed to be set in  
the loader.conf before the kernel started up, but the system is  
getting more flexible and some of those can be changed at runtime  
now



I know i.e. that hw.ata.atapi_dma=1 needs to be set
in /boot/loader.conf while others are set in /etc/sysctl.conf. I need
to know where I can find info on the rules about this. Now I'm
dependant on what I happen to read somewhere.

I read something about vfs.read_max=16 - where do I set this I
wonder? Is there info about this somewhere?


Look at /boot/defaults/loader.conf, that ought to give you a good  
idea of what needs to be (or can be) set via that.  Otherwise, try  
using sysctl to change things, and if they are marked read-only, then  
they needed to be changed earlier or by rebuilding the kernel with a  
different config.


--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


binding lpd to a single IP

2005-08-03 Thread dave
Hello,
I've looked over the lpd man page but can't find what i want. I've got a
box that does printing services, but now it also has jails. I want to lock
lpd down to a specific IP, but don't see a flag to do so. Help appreciated.
Thanks.
Dave.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: binding lpd to a single IP

2005-08-03 Thread Charles Swiger

On Aug 3, 2005, at 1:49 PM, dave wrote:
I've looked over the lpd man page but can't find what i want.  
I've got a
box that does printing services, but now it also has jails. I want  
to lock
lpd down to a specific IP, but don't see a flag to do so. Help  
appreciated.


You can use /etc/hosts.lpd to list the specific IPs which are allowed  
to connect and print via lpd...?  Otherwise, you can use a firewall  
to control which IPs are allowed through.


--
-Chuck


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


squid config: which ntlm_auth do I use? and win

2005-08-03 Thread Derrick MacPherson
there's 
/usr/local/libexec/squid/ntlm_auth
and
/usr/local/bin/ntlm_auth

how are they different and which one do i use?  why is there 2?

Since there's 2 of these commands which are different, I think I've dug
myself into a confused hole, cause I think i've got my config messed
from trying various syntax




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: binding lpd to a single IP

2005-08-03 Thread dave
Hello,
Thanks, i am atempting to bind lpd to one IP not the * which means it's
listening everywhere, sorry if i was unclear.
Thanks.
Dave.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: squid config: which ntlm_auth do I use? and win

2005-08-03 Thread Dan Nelson
In the last episode (Aug 03), Derrick MacPherson said:
 there's 
 /usr/local/libexec/squid/ntlm_auth
 and
 /usr/local/bin/ntlm_auth
 
 how are they different and which one do i use?  why is there 2?

My guess is that you forgot to uninstall a previous version of squid,
and /usr/local/bin/ntlm_auth is old and should be removed.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sysctl options loader.conf or sysctl.conf

2005-08-03 Thread dick hoogendijk
On Wed, 03 Aug 2005 10:48:04 -0700
[EMAIL PROTECTED] (Gary W. Swearingen) wrote:

 Since sysctl.conf is read in only when going multi-user and that
 sounds like something you'd want always, I'd put it in loader.conf.

Not so. I tried /boot/loader.conf but vfs.read_max still was default
after the booting process. Putting it in /etc/sysctl.conf worked.
Confusing..

-- 
dick -- http://nagual.st/ -- PGP/GnuPG key: F86289CE
++ Running FreeBSD 4.11-stable ++ FreeBSD 5.4
+ Nai tiruvantel ar vayuvantel i Valar tielyanna nu vilja
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: squid config: which ntlm_auth do I use? and win

2005-08-03 Thread Derrick MacPherson
On Wed, 2005-08-03 at 14:09 -0500, Dan Nelson wrote:
 In the last episode (Aug 03), Derrick MacPherson said:
  there's 
  /usr/local/libexec/squid/ntlm_auth
  and
  /usr/local/bin/ntlm_auth
  
  how are they different and which one do i use?  why is there 2?
 
 My guess is that you forgot to uninstall a previous version of squid,
 and /usr/local/bin/ntlm_auth is old and should be removed.


In my squid.conf:

this works for non IE browsers, IE fails:

auth_param ntlm program /usr/local/bin/ntlm_auth --helper-
protocol=squid-2.5-ntlmssp
auth_param basic program /usr/local/bin/ntlm_auth --helper-
protocol=squid-2.5-basic

(IE fails with: authenticateNTLMHandleReply: Error validating user via
NTLM. Error returned 'BH NT_STATUS_ACCESS_DENIED')


Won't start when using:

auth_param ntlm program /usr/local/libexec/squid/ntlm_auth 
auth_param basic program /usr/local/libexec/squid/ntlm_auth

I've tried adding the windows domain name and server IP after like:
domainname/x.x.x.x and it doesnt start as well.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 5.4-RELEASE-p5 panic

2005-08-03 Thread dpk
On Tue, 2 Aug 2005, dpk wrote:

 (Another panic I would get would follow roughly the same path except it
 would die while trying to unlock a vnode lock that the thread didn't own.
 I'll try to get this information some time, too.)

Here's the backtrace from that panic:

#0  kdb_enter (msg=0x12 Address 0x12 out of bounds) at 
../../../kern/subr_kdb.c:266
#1  0xc033ea1f in panic (fmt=0xc04c99ff lockmgr: thread %p, not %s %p 
unlocking)
at ../../../kern/kern_shutdown.c:550
#2  0xc0333181 in lockmgr (lkp=0xc61f5e14, flags=6, interlkp=0x100, td=0x0)
at ../../../kern/kern_lock.c:419
#3  0xc038b08b in vop_stdunlock (ap=0x12) at ../../../kern/vfs_default.c:295
#4  0xc038af3b in vop_defaultop (ap=0x0) at ../../../kern/vfs_default.c:157
#5  0xc03010bb in spec_vnoperate (ap=0x0) at ../../../fs/specfs/spec_vnops.c:118
#6  0xc0301648 in spec_write (ap=0xeb858a94) at vnode_if.h:1044
#7  0xc03010bb in spec_vnoperate (ap=0x0) at ../../../fs/specfs/spec_vnops.c:118
#8  0xc0452ecd in vnode_pager_generic_putpages (vp=0xc61f5d68, m=0xeb858bf0, 
bytecount=4096,
flags=0, rtvals=0xeb858b70) at vnode_if.h:432
#9  0xc038b7e2 in vop_stdputpages (ap=0x12) at ../../../kern/vfs_default.c:650
#10 0xc038af3b in vop_defaultop (ap=0x0) at ../../../kern/vfs_default.c:157
#11 0xc03010bb in spec_vnoperate (ap=0x0) at ../../../fs/specfs/spec_vnops.c:118
#12 0xc0452c6a in vnode_pager_putpages (object=0xc085e7bc, m=0x12, count=18, 
sync=0, rtvals=0x12)
at vnode_if.h:1357
#13 0xc044a603 in vm_pageout_flush (mc=0xeb858bf0, count=1, flags=0) at 
vm_pager.h:147
#14 0xc044a52d in vm_pageout_clean (m=0x0) at ../../../vm/vm_pageout.c:347
#15 0xc044b3df in vm_pageout_scan (pass=0) at ../../../vm/vm_pageout.c:996
#16 0xc044c162 in vm_pageout () at ../../../vm/vm_pageout.c:1487
#17 0xc032911d in fork_exit (callout=0xc044be50 vm_pageout, arg=0x0, 
frame=0xeb858d48)
at ../../../kern/kern_fork.c:791
#18 0xc0474fcc in fork_trampoline () at ../../../i386/i386/exception.s:209

Again, vm_pageout_clean is being called with a NULL argument, and
eventually the spec_vnoperate function is called with a NULL (the other
panic, ufs_vnoperate was called with a NULL).

These couple of panics are relatively easy to reproduce on demand.

Interestingly (I think), vm_pageout_flush's m argument was the same with
each panic: 0xeb858bf0 .

That is decimal 3,951,397,872 . When you boot these servers without PAE
enabled, the real memory is 3,757,965,312. I think this indicates that
the page vnode_pager_generic_putpages is dealing with is within the PAE
range (I don't know exactly how to describe that). This could be a total
long shot, but I think it's unlikely that both panics would have something
like that in common without it being a bug of some sort.

If there's somewhere else I should be sending these please let me know.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Fetch able to get around firewall?

2005-08-03 Thread Jason Morgan
I have three clients behind my FreeBSD gateway/firewall. Two of the clients run 
FreeBSD and the other 
runs FreeBSD and Windows.  I would like for my firewall to be fairly tight, 
disallowing unspecified 
connections outbound. However, while I have no trouble getting most services up 
and running correctly
(qmail,apache,ssh,etc.), I am having trouble getting fetch (for portupgrade) to 
get through the 
firewall. I have tried 'fetch -p', which doesn't seem to work.  My question is, 
is it going to be 
possible to maintain a restrictive firewall and still have the ability to 
upgrade my ports from the 
inside clients?  Below is my  firewall (a slightly edited version of the one 
available in the handbook).

5 allow ip from any to any via fxp0
00010 allow ip from any to any via lo0
00014 divert 8668 ip from any to any in via xl0
00015 check-state
00020 skipto 800 udp from any to X.X.X.X dst-port 53 out via xl0 keep-state
00021 skipto 800 udp from any to X.X.X.X dst-port 53 out via xl0 keep-state
00030 skipto 800 udp from any to X.X.X.X dst-port 67 out via xl0 keep-state
00040 skipto 800 tcp from any to any dst-port 80 out via xl0 setup keep-state
00050 skipto 800 tcp from any to any dst-port 443 out via xl0 setup keep-state
00060 skipto 800 tcp from any to any dst-port 25 out via xl0 setup keep-state
00061 skipto 800 tcp from any to any dst-port 110 out via xl0 setup keep-state
00070 skipto 800 tcp from me to any out via xl0 setup uid root keep-state
00080 skipto 800 icmp from any to any out via xl0 keep-state
00090 skipto 800 tcp from any to any dst-port 37 out via xl0 setup keep-state
00100 skipto 800 tcp from any to any dst-port 119 out via xl0 setup keep-state
00105 skipto 800 tcp from any to any dst-port 20,21 out via xl0 setup keep-state
00110 skipto 800 tcp from any to any dst-port 22 out via xl0 setup keep-state
00120 skipto 800 tcp from any to any dst-port 43 out via xl0 setup keep-state
00130 skipto 800 udp from any to any dst-port 123 out via xl0 keep-state
00300 deny ip from 192.168.0.0/16 to any in via xl0
00301 deny ip from 172.16.0.0/12 to any in via xl0
00303 deny ip from 127.0.0.0/8 to any in via xl0
00304 deny ip from 0.0.0.0/8 to any in via xl0
00305 deny ip from 169.254.0.0/16 to any in via xl0
00306 deny ip from 192.0.2.0/24 to any in via xl0
00307 deny ip from 204.152.64.0/23 to any in via xl0
00308 deny ip from 224.0.0.0/3 to any in via xl0
00315 deny tcp from any to any dst-port 113 in via xl0
00320 deny tcp from any to any dst-port 137 in via xl0
00321 deny tcp from any to any dst-port 138 in via xl0
00322 deny tcp from any to any dst-port 139 in via xl0
00323 deny tcp from any to any dst-port 81 in via xl0
00330 deny ip from any to any frag in via xl0
00332 deny tcp from any to any established in via xl0
00360 allow udp from X.X.X.X to any dst-port 68 in via xl0 keep-state
00370 allow tcp from any to me dst-port 80 in via xl0 setup limit src-addr 2
00380 allow tcp from any to me dst-port 22 in via xl0 setup limit src-addr 2
00390 allow tcp from any to me dst-port 25 in via xl0 setup limit src-addr 2
00400 deny log logamount 10 ip from any to any in via xl0
00450 deny log logamount 10 ip from any to any out via xl0
00800 divert 8668 ip from any to any out via xl0
00801 allow ip from any to any
00999 deny log logamount 10 ip from any to any
65535 deny ip from any to any

Any suggestions? Is is the standard solution to allow all outbound connections 
through?

Thanks,
Jason

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Boot page fault - alternative kernel needed?

2005-08-03 Thread Jason Morgan
On Thu, Jul 28, 2005 at 10:28:18AM -0500, Kevin Kinsey wrote:
 Jason Morgan wrote:
 
 I have an old laptop that I am finally trying to get FreeBSD installed on.
 It was recently running Linux just fine, but I am having a tough time 
 getting FreeBSD installed on it.  Here is the error I get when booting.  
 I have typed all that is visible on the screen when it crashes.
 
 # Begin
 
 isa0: ISA Bus on isab0
 atapci0: Intel PIIX4 UDMA33 controller port 
 0x3000-0x300f,0x376,0x170-0x177,0x
 3f6,0x1f0-0x1f7 at device 1.1 on pci0
 ata0: channel #0 on atapci0
 ata1: channel #1 on atapci0
 uhci0: Intel 82371AB/EB (PIIX4) USB controller at device 1.2 on pci0
 
 
 Fatal trap 12: page fault while in kernel mode
 fault virtual address  = 0xeb97b
 fault code = supervisor read, page not present
 instruction pointer= 0x8:0xc00eb87c
 stack pointer  = 0x10:0xc10209f0
 frame pointer  = 0x10:0xc10209f0
 code segment   = base 0x0, limit 0xf, type 0x1b
   = DPL 0, pres 1, def32 1, gran 1
 processor eflags   = interrupt enabled, resume, IOPL = 0
 current process= 0 (swapper)
 trap number= 12
 panic: page fault
 
 # End
 
 So, my question is: Is this the UHCI driver failing to load 
 (happens at this same point every time I try to boot it)? 
 Is there any way around this? Possible using a trimmed down 
 kernel to boot?  Any suggestions?
 
 Thanks in advance,
 Jason
  
 
 
 Kevin Kinsey wrote:
 
 Well, the error message seems to indicate that the
 swapper if failing ... but it could be that it's failing
 because the previously loaded uhci device code finds
 a bug in your hardware --- IANAE,  but IIRC FBSD 5
 ( you don't say what version you're using) doesn't
 always play well with APM, ACPI, or what-not on
 some older laptops.
 
 We probably need someone else to tell us the
 exact incantation, but you might be able to
 'escape to loader prompt' and set the equivalent
 of {ACPI_LOAD =0} (like I said, not sure of exact
 syntax) before attempting to boot (see loader(8)
 in the on-line manual or on another machine).
 
 If you're trying FBSD 5, I've heard of some people
 having success with older laptops and FBSD 4.
 Otherwise, they can run 5 but without APM or
 ACPI support.
 
 Like I said, I can't say for certain that this is
 what your issue is, but if you've not got a working
 system, it probably can't hurt to futz around with
 it a bit.
 
 Hopefully somebody else knows the magic words

Well, I've tried everything I know to do. I've tried installing FBSD 4.11 as 
well as tweaking settings 
before booting the kernel.  I've tried the following settings in various 
combinations:

set hint.acpi.0.disabled=1
set hint.uhci.0.disabled=1
set hint.uhci.1.disabled=1
acpi_load=NO

No luck. Are there any other workarounds out there or something obvious that 
I've missed?

Thanks for the help,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: antivir-milter question

2005-08-03 Thread Martin Welk
On Wed, Aug 03, 2005 at 09:01:51AM -0500, Denny White wrote:

 I've read the docs on antivir-milter, installed it,
 set it up to verify downloaded updates with gpg,
 tested it to see if it's checking mail with eicar,
  everything's working fine. Only thing is, I'd
 like it to show in my messages that they've been
 checked for viruses  I can't seem to get it do
 that. I know that the AddXHeader setting only works
 in commercial version, but it says if you set the
 ModifySubject to YES that it'll show up, as I
 understand it, appended to the subject. I did that
  restarted it but still no notice. Any ideas/help
 appreciated.
 Denny White

Hm, I'm using the personal version of antivir-milter, installed it just a
few days ago - and for every checked mail, it puts a header like this in:
X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-7; AVE: 6.31.1.0;
VDF: 6.31.1.54; host: theatre.sax.de)

I suspect that something else is wrong. Does your sendmail delegate the
mail to antivir-milter? Is it running? It should write some message into
your /var/log/mailog, here's an example.

Startup:

ug  3 17:20:05 theatre avmilter[16541]: listening on: inet:[EMAIL PROTECTED]
Aug  3 17:20:06 theatre avmilter[16541]: engine version: 6.31.1.0
Aug  3 17:20:06 theatre avmilter[16541]: vdf version: 6.31.1.54
Aug  3 17:20:06 theatre avmilter[16541]: addressfilter not active
Aug  3 17:20:06 theatre avmilter[16541]: extension blocking is disabled
Aug  3 17:20:06 theatre avmilter[16541]: running in private mode
Aug  3 17:20:40 theatre sendmail[16570]: j73FKeek016570:

Later:

Aug  3 17:20:41 theatre sm-mta[16579]: j73FKfm7016579: Milter add: header:
X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-7; AVE: 6.31
.1.0; VDF: 6.31.1.54; host: theatre.sax.de)

I didn't do anything except following the installation instructions, that
means, I've put the required m4 macro string into my mc file and rebuilt
the sendmail.cf. From that on, it was working instantly like a charm

Oh yes, and with the EICAR test signature it generates an alert mail to the
postmaster and puts the file into the rejected files directory (for my
installation, /var/spool/avmilter/rejected). The only thing I had to change
was the path to sendmail, in /etc/avmilter.conf it isn't set and the
default points to /usr/lib/sendmail - on FreeBSD that's /usr/sbin/sendmail.

Regards,
Martin

-- 
  ,,Oh, there's a lot of opportunities, if you're knowing to take them,
  you know, there's a lot of opportunities, if there aren't
you can make them, make or break them!'' (Tennant/Lowe)


pgpLxbwVfQpju.pgp
Description: PGP signature


Re: sound vs. PCIX bus

2005-08-03 Thread Emanuel Haupt
 Can anyone recommend a sound card for the PCIX bus?
 
  or
 
 Can anyone recommend a USB or otherwise attached sound card?
 
  or
 
 Some other way I can use mpg123 to make a lot of noise when
 my server needs some attention.

i could recommend a solution that doesn't even require a soundcard to be
notified with a lot of noise.

have a look at audio/yell (in the ports tree). it can play a short tune
on your pc speaker.

cheers,
emanuel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


squid.conf

2005-08-03 Thread Derrick MacPherson
can anyone who has squid authenticating using samba3 please let me take
a peek at their config?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Making the Leap to 5.4 and 64bit

2005-08-03 Thread Wil Hatfield - HyperConX
First, greetings to the group and nice to meet everyone's acquaintance.

We are getting ready to make a big leap to Dual 64bit Xeon machines
(SuperMicro) and FreeBSD 5.4. We would really have like to stick with 4.11
but from what I am gathering it certainly doesn't support the 64bit
processors.

Now on to my questions:

Can anyone share any of their experiences that I may also encounter?
How can I make the most out of SMP and the dual 64bits?
Any undocumented or hard to find settings that I should know about?
Are there any commonly used applications that won't run on this system?


Thanks for your time,

Wil Hatfield
HyperConX




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Making the Leap to 5.4 and 64bit

2005-08-03 Thread Chad Leigh -- Shire.Net LLC


On Aug 3, 2005, at 3:22 PM, Wil Hatfield - HyperConX wrote:

First, greetings to the group and nice to meet everyone's  
acquaintance.


We are getting ready to make a big leap to Dual 64bit Xeon machines
(SuperMicro) and FreeBSD 5.4. We would really have like to stick  
with 4.11

but from what I am gathering it certainly doesn't support the 64bit
processors.


Jut FYI.  You should be able to run 4.11 in i386 (32 bit mode) (or  
5.4 in the same mode) if you want.   I run dual 64bit opterons  
running i386 32bit version of 5.3...  If you don't need the 64bit  
mode and there are 32bit things that you do require, you may want to  
consider it for the time being.


Chad


---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sound vs. PCIX bus

2005-08-03 Thread Dan Nelson
In the last episode (Aug 03), Emanuel Haupt said:
  Can anyone recommend a sound card for the PCIX bus?
   or
  Can anyone recommend a USB or otherwise attached sound card?
   or
  Some other way I can use mpg123 to make a lot of noise when
  my server needs some attention.
 
 i could recommend a solution that doesn't even require a soundcard to
 be notified with a lot of noise.
 
 have a look at audio/yell (in the ports tree). it can play a short
 tune on your pc speaker.

A much simpler version that doesn't require a port:

#! /bin/sh
echo t208a+b~a+a-~f+f~e-d  /dev/speaker

I like C-64 style arpeggio in my alert beeps:

echo l64cdcdcd  /dev/speaker
echo l64cdefedcc  /dev/speaker

You could also use the spkrtest program to play some long tunes.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Making the Leap to 5.4 and 64bit

2005-08-03 Thread Roland Smith
On Wed, Aug 03, 2005 at 02:22:14PM -0700, Wil Hatfield - HyperConX wrote:
 First, greetings to the group and nice to meet everyone's acquaintance.
 
 We are getting ready to make a big leap to Dual 64bit Xeon machines
 (SuperMicro) and FreeBSD 5.4. We would really have like to stick with 4.11
 but from what I am gathering it certainly doesn't support the 64bit
 processors.
 
 Now on to my questions:

You should subscribe to the freebsd-amd64 list.

 Can anyone share any of their experiences that I may also encounter?

Both 5.3 and 5.4-STABLE have been running fine on my Athlon64
uniprocessor.

Hardware:
Athlon64 3400+ (2.4 GHz, 400 MHz FSB)
MSI Neo FSR (MSI-6702) [VIA chipset]
2x512 MB PC3200U-2533 RAM

Nforce3 and 4 chipsets seem to have some problems, see the mailing list
archives. Same goes for the ehci driver.

 How can I make the most out of SMP and the dual 64bits?

Run apps that are multi-process or multi-threaded. :-)

 Any undocumented or hard to find settings that I should know about?

Some mobos had problems with ACPI on 5.3. For those mobos it has to be
disabled. This might be solved with 5.4.

If you're transplanting a make.conf from a machine with another
architecture, remove any --march options from CFLAGS and COPTFLAGS.

Same goes for the 'machine' and 'cpu' lines in your kernel
configuration if you copy that from a machine with another architecture.

FAST_IPSEC is seems to be b0rken on amd64.

Look at the open problem reports for amd64.

 Are there any commonly used applications that won't run on this system?

All apps that I use for common desktop use are fine. Emacs, Firefox,
mutt, etc.

To find a list of all the ports that are b0rken on amd64 try the following:

  cd /usr/ports
  find . -name Makefile | xargs grep -H BROKEN.*amd64|sed 's|/Makefile.*||'

If a port is marked BROKEN on amd64, it could just be that it wasn't
tested on it, or a previous version was broken. Try removing the BROKEN line
and see where the build fails. Sometimes the fix is trivial.

Roland
-- 
R.F.Smith (http://www.xs4all.nl/~rsmith/) Please send e-mail as plain text.
public key: http://www.xs4all.nl/~rsmith/pubkey.txt


pgpKvmge9ZF4O.pgp
Description: PGP signature


Re: growisofs: no mkisofs options are permitted with =, aborting

2005-08-03 Thread Hanspeter Roth
  On Aug 01 at 22:31, Hanspeter Roth spoke:

 
 Hello,
 
 I'm trying to burn an iso image onto a DVD+RW. 
 I'm trying: 
 
 growisofs -Z /dev/cd0=image.iso
 
 This yields:
 
 growisofs: no mkisofs options are permitted with =, aborting...

I must have been drunk!
I had also an additional option `-v' on the command-line.
Without this option it works.

Sorry for the noise!

-Hanspeter
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


A secure connection to an SCO Unix 5.2 behind a pf firewall.

2005-08-03 Thread eculp
I installed a FreeBSD6.0 server/firewall for a remote customer about a 
week ago.  Today they told me that on there LAN they had a Unix box 
that runs their internal ascii based accounting system that they have 
been accessing by modem from home.  Now they want to access it over the 
Internet.  The box is a pentiumIII running a SCO unixV from 1990 or 
2000 with no secure anything that I have been able to find.  In fact 
the company who maintains their system uses uucp for updating.  I was 
thinking ipsec, originally but now I don't see a way to configure the 
SCO end of a tunnel.  The server has a simple pf firewall with only a 
few ports open and opening ports isn't a problem.  The application is a 
terminal session.  Thirty users login in to it as root all with windows 
terminal sessions except for the modem connections and to make it more 
fun I shouldn't modify the SCO box because of their service contract.


I would appreciate any suggestions for a reasonably secure solution.  I 
just found all this out and am totally blank.


thanks,

ed

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Making the Leap to 5.4 and 64bit

2005-08-03 Thread Wil Hatfield
Roland,

Thanks for the tips and insight. Are they going to flame me on the
freebsd-amd64 list for my Xeon questions?


Wil Hatfield
HyperConX


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Making the Leap to 5.4 and 64bit

2005-08-03 Thread Wil Hatfield
Chad,

So I can kick it down to 32bit. Great to know and I may have to do that
myself. I will probably give the build a whirl both ways and compare some
benchmarks. Maybe even all 3 ways as I have some RD time.

Any settings I should know about to kick the install down to 32bit? I
suppose 4.11 is native 32bit or do I have to kick that down too on a 64bit
system?

Cheers,

Wil Hatfield
HyperConX


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Chad Leigh --
Shire.Net LLC
Sent: Wednesday, August 03, 2005 2:42 PM
To: Wil Hatfield - HyperConX
Cc: freebsd-questions@freebsd.org
Subject: Re: Making the Leap to 5.4 and 64bit



On Aug 3, 2005, at 3:22 PM, Wil Hatfield - HyperConX wrote:

 First, greetings to the group and nice to meet everyone's
 acquaintance.

 We are getting ready to make a big leap to Dual 64bit Xeon machines
 (SuperMicro) and FreeBSD 5.4. We would really have like to stick
 with 4.11
 but from what I am gathering it certainly doesn't support the 64bit
 processors.

Jut FYI.  You should be able to run 4.11 in i386 (32 bit mode) (or
5.4 in the same mode) if you want.   I run dual 64bit opterons
running i386 32bit version of 5.3...  If you don't need the 64bit
mode and there are 32bit things that you do require, you may want to
consider it for the time being.

Chad


---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Making the Leap to 5.4 and 64bit

2005-08-03 Thread Chad Leigh -- Shire.Net LLC


On Aug 3, 2005, at 4:21 PM, Wil Hatfield wrote:


Chad,

So I can kick it down to 32bit. Great to know and I may have to do  
that
myself. I will probably give the build a whirl both ways and  
compare some

benchmarks. Maybe even all 3 ways as I have some RD time.

Any settings I should know about to kick the install down to 32bit? I
suppose 4.11 is native 32bit or do I have to kick that down too on  
a 64bit

system?


Just use the appropriate install media.  The i386 install is  
automatically a 32bit i386 architecture install (and the machine will  
run as is) and the amd64 is an AMD64 and EMT64 or whatever the intel  
version is called install and will install a 64bit version.


The 64 bit processors will run in 32bit mode and installing the 32bit  
OS will do it for you automatically.


Chad



Cheers,

Wil Hatfield
HyperConX


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Chad Leigh --
Shire.Net LLC
Sent: Wednesday, August 03, 2005 2:42 PM
To: Wil Hatfield - HyperConX
Cc: freebsd-questions@freebsd.org
Subject: Re: Making the Leap to 5.4 and 64bit



On Aug 3, 2005, at 3:22 PM, Wil Hatfield - HyperConX wrote:



First, greetings to the group and nice to meet everyone's
acquaintance.

We are getting ready to make a big leap to Dual 64bit Xeon machines
(SuperMicro) and FreeBSD 5.4. We would really have like to stick
with 4.11
but from what I am gathering it certainly doesn't support the 64bit
processors.



Jut FYI.  You should be able to run 4.11 in i386 (32 bit mode) (or
5.4 in the same mode) if you want.   I run dual 64bit opterons
running i386 32bit version of 5.3...  If you don't need the 64bit
mode and there are 32bit things that you do require, you may want to
consider it for the time being.

Chad


---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions- 
[EMAIL PROTECTED]







---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: squid.conf (More info on what's not working)

2005-08-03 Thread Derrick MacPherson
wbinfo works, i can get responses as i expect.

wbinfo_group.pl works as expected.

wb_* all fail and in the log.winbindd I see:

[2005/08/03 15:10:41, 0] nsswitch/winbindd.c:process_loop(748)
  process_loop: Invalid request size from pid 20068: 1304 bytes sent,
should be 1824
  This usually means that you are running old wbinfo, pam_winbind or
libnss_winbind clients


installed are:
samba-3.0.14a_1,1
squid-2.5.10_4

Any ideas on how to deal with this?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pam_radius

2005-08-03 Thread Vince Hoffman



On Tue, 2 Aug 2005, Sean P. Malone wrote:

I’m rolling out a new email system and would love it if I could get that 
system to authentic the user off of our existing Active Directory user 
database.


As I understand, the pam_radius module should enable me to achieve the task. 
However, the only instructions that I’ve been able to find are at:


https://www.freebsd.uwaterloo.ca/twiki/bin/view/Freebsd/PamRadius?shin=print.patern

While these are helpful, I’m still not able to get my BSD system to 
authenticate against a MS IAS – although the attempts are logged on the IAS 
box without error.


Does anyone know of a good additional source of information?



I've had it working happily both against freeradius and against an ACE 
(securid) radius server, never tried with windows, I may have a go 
tomorrow at work.

The only thing I found was
for ssh authentication I had to have a user of that name on the freebsd 
box, for login/telnet I could use the template_user option. I guess thats 
something in ssh.
Other than that the man pages for pam_radius and radius.conf were enough 
to get it going.


Like I said I'll have a look tomorrow if I get a chance.

Vince

Thanks!

Sean
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

RE: A secure connection to an SCO Unix 5.2 behind a pf firewall.

2005-08-03 Thread eculp

Quoting Gayn Winters [EMAIL PROTECTED]:




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Wednesday, August 03, 2005 3:07 PM
To: freebsd-questions@freebsd.org
Subject: A secure connection to an SCO Unix 5.2 behind a pf firewall.


I installed a FreeBSD6.0 server/firewall for a remote
customer about a
week ago.  Today they told me that on there LAN they had a Unix box
that runs their internal ascii based accounting system that they have
been accessing by modem from home.  Now they want to access
it over the
Internet.  The box is a pentiumIII running a SCO unixV from 1990 or
2000 with no secure anything that I have been able to find.  In fact
the company who maintains their system uses uucp for updating.  I was
thinking ipsec, originally but now I don't see a way to configure the
SCO end of a tunnel.  The server has a simple pf firewall with only a
few ports open and opening ports isn't a problem.  The
application is a
terminal session.  Thirty users login in to it as root all
with windows
terminal sessions except for the modem connections and to
make it more
fun I shouldn't modify the SCO box because of their service contract.

I would appreciate any suggestions for a reasonably secure
solution.  I
just found all this out and am totally blank.

thanks,

ed



If your client is willing to use yet another box, you could front-end
the old SCO box with a dual port FBSD box and establish a secure tunnel
to the FBSD box.  This could also be done with a low-end firewall.


Thanks, gayn.

I assume that you mean installing it on the LAN behind the firewall and 
opening the tunnel to it.  I thought of that and mentioned it to them 
but found less that an enthusiastic response, that I expected.  They 
don't understand the value, unfortunately.  I guess I could do 
something like that with a jail, I would just need an extra IP, I guess.


Thanks again,

ed

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Making the Leap to 5.4 and 64bit

2005-08-03 Thread Chad Leigh -- Shire.Net LLC


On Aug 3, 2005, at 4:16 PM, Wil Hatfield wrote:


Roland,

Thanks for the tips and insight. Are they going to flame me on the
freebsd-amd64 list for my Xeon questions?


As long as they are 64bit questions, they shouldn't.  Intel adopted  
the 64bit extensions that AMD had made for their own 64bit Xeon  
series so the SW is the same.  It has the amd64 name since it started  
with the AMD opteron, which for a while was the only chip with the  
architecture.


Chad




Wil Hatfield
HyperConX


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions- 
[EMAIL PROTECTED]




---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


weird disk names

2005-08-03 Thread FreeBSD questions mailing list

I just upgraded to 5.4-p6 started gvinum and got this in /dev:

root:/dev# ls /dev | grep ad2
ad2
ad2a
ad2c
ad2cs1
ad2cs1c
ad2cs1d
ad2cs1e
ad2s1
ad2s1c
ad2s1d
ad2s1e

Where does the CS come from?

thanks
Arno

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Making the Leap to 5.4 and 64bit

2005-08-03 Thread Wil Hatfield
Chad,

That answers my final question of which media to install from. And now I
even understand why. Thanks a million.


Wil Hatfield
HyperConX


-Original Message-
From: Chad Leigh -- Shire.Net LLC [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 03, 2005 4:21 PM
To: Wil Hatfield
Cc: FreeBSD - Questions
Subject: Re: Making the Leap to 5.4 and 64bit



On Aug 3, 2005, at 4:16 PM, Wil Hatfield wrote:

 Roland,

 Thanks for the tips and insight. Are they going to flame me on the
 freebsd-amd64 list for my Xeon questions?

As long as they are 64bit questions, they shouldn't.  Intel adopted
the 64bit extensions that AMD had made for their own 64bit Xeon
series so the SW is the same.  It has the amd64 name since it started
with the AMD opteron, which for a while was the only chip with the
architecture.

Chad



 Wil Hatfield
 HyperConX


 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-
 [EMAIL PROTECTED]


---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
[EMAIL PROTECTED]





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


mail

2005-08-03 Thread John Larson
I have a peer to peer network and when I send a form
to  the server this is the maillog. I have set up
var/mail/user in main.cf. how do i retrieve the mail.
I hope to use freebsd mail program but I don't know
how to configure it. this system is not connected to
the internet.
May  5 23:20:31 www postfix/local[269]: 96A4613C:
to=[EMAIL PROTECTED], orig_to=larson, relay=local,
delay=0, status=sent (delivered to mailbox)
May  5 23:20:31 www postfix/qmgr[178]: 96A4613C:
removed
John Larson

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Networking with FreeBSD

2005-08-03 Thread Nikolas Britton
On 8/3/05, Stephan Weaver [EMAIL PROTECTED] wrote:
 
 
 From: Nikolas Britton [EMAIL PROTECTED]
 
 
 Internet
 |
 |   |WANs 1-4, 192.168.2/24, 192.168.3/24, 192.168.4/24,
 192.168.5/24
 Firewall -- DMZ 192.168.1/24 - Pixel, httpd, samba
 |
 |
 HQ LAN 192.168.0/24
 
 
 OR:
 
 Internet
|
|   |-WAN, 192.168.2/24
 Firewall --- DMZ, 192.168.1/24 - Pixel, httpd
|
|--- Samba
|
 HQ LAN 192.168.0/24
 
 OR:
 
 Internet
|
|   |---WAN(s)
 Firewall
|
|
 HQ LAN
 
 Etc.
 
 We need more info to help you.
 
 
 
 Thank you for your concern and quick response everyone.
 
 Now i will use your example as mentioned above.
 
 I have one quick question though.
 These WAN's will be on seperate networks because of the /24. correct?
 
Yes, 24 = class C = netmask of 255.255.255.0

http://public.pacbell.net/dedicated/cidr.html

 So if Wan1 [192.168.2/24] Wants to Connect to our Pixel Server[192.168.1/24]
   for example He would not be able to communicate because of the /24? Is
 this correct?

Yes because they are on different networks. you will need a router for
them to communicate.
 
 
 If so, how do allow them to communicate?
 

firewall = firewall, router, gateway, bridge, etc. with FreeBSD and
the right software it will do all of that transparently.

Setup a test lab of some sorts, start with this layout and work your
way up until you understand what it's doing:

Internet
   |
   |   |---WAN(s) 192.168.1/24
Firewall
   |
   |
HQ LAN 192.168.0/24

You will need 3 PCs; one for the LAN, one on the WAN1 side and one for
the firewall. For the firewall you will be using m0n0wall, 48MB ram
(minimum) and 3 network cards.

http://en.wikipedia.org/wiki/M0n0wall
http://m0n0.ch/wall/download.php?file=generic-pc-1.2b9.img
http://m0n0.ch/wall/installation_generic.php
http://m0n0.ch/wall/quickstart/
http://www.tomsnetworking.com/Reviews-161-ProdID-MONOWALL.php
http://www.tomsnetworking.com/Reviews-161-ProdID-MONOWALL.php

If you need any help setting it up etc. just ask me, I started using
it sometime late in 2003 so I probably have more experience using the
software then most people you'll run across
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


printing problems with CUPS on localhost server

2005-08-03 Thread Graham North
I just set up my FreeBSD box to act as a printserver.   I used CUPs and 
Samba following great directions found here: 
http://www.ajl-tech.com/index2.php?option=contentdo_pdf=1id=16


The printserver works very nicely printing jobs from my WinXP client to 
an hp4l printer attached to Freebsd, however it will not print files 
from itself using lpr.


A bit of hunting found some gotchas at:  
http://home.nyc.rr.com/computertaijutsu/cups.html ... and so I tried 
adding symbolic links for the lp and lpr commands as per the author's 
recommendations - see bottom of email.


The problem still exists however, now instead of getting error messages, 
if I issue a lpr filename command, my printer gives a quick blink, no 
errror messages are generated, but neither is printer output - nada!


Repeat - Samba and Cups work together fine on this elderly hp4l - print 
all sorts from Windows.   Just cannot access from the server itself.

I am sure that this is a simple configuration issue somewhere -

my printcap definition, ie:  hp4l|lp|hp4l:rm=192.168.0.102:rp=hp4l:
ps. This was auto-generated from CUPs and oirignally was 
hp4l|hp4l:rm=192.168.0.102:rp=hp4l:
(I later inserted the lp myself as CUPS does not, either way it doesn't 
work.)


Can anyone please point me straight on this?
Thanks,   Graham/


From gotchas

With FreeBSD, cups will place its configuration files in /usr/local/etc 
rather than /etc. The lp or lpr command that you will use is also going 
to be in /usr/local/bin rather than /usr/bin. As /usr/bin is listed 
first in the path for both root and normal user, if one tries to print 
using the command lp filename you'll get an error message.


There are various workarounds--one can edit the $PATH variable, type the 
entire path, eg /usr/local/bin/lp or do it the lazy man's way, which, as 
those who know me would expect, is what I did. I backed up the /usr/bin 
lp and lpr and then sym linked /usr/local/bin's commands to them.

mv /usr/bin/lp /usr/bin/lp.bak
mv /usr/bin/lpr /usr/bin/lpr.bak
ln -s /usr/local/bin/lp /usr/bin/lp
ln -s /usr/local/bin/lpr /usr/bin/lpr

**


--
Kindness can be infectious - try it.

Graham North
Vancouver, BC
www.soleado.ca


No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.338 / Virus Database: 267.9.9/62 - Release Date: 8/2/2005
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

perl stdin

2005-08-03 Thread Wouter van Rooij
\

Hello,

At the first place, sorry for my bad English.
My question is:
How can you, when you're writing a perl program, make a input
(stdin) hidden, so that when someone is typing an input in the
following program is hidden:
#!/usr/bin/perl
print Your name:;
$name = STDIN
I would like to get the input like this: 

Thank you,
Wouter van Rooij
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: perl stdin

2005-08-03 Thread Michael Beattie
On 8/3/05, Wouter van Rooij [EMAIL PROTECTED] wrote:
 \
 
 Hello,
 
 At the first place, sorry for my bad English.
 My question is:
 How can you, when you're writing a perl program, make a input
 (stdin) hidden, so that when someone is typing an input in the
 following program is hidden:
 #!/usr/bin/perl
 print Your name:;
 $name = STDIN
 I would like to get the input like this: 
 

You might be able to redirect STDOUT to nowhere and then when there's
a character pressed write a '*' to STDOUT or something.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: antivir-milter question

2005-08-03 Thread Denny White



Today Martin Welk had this to say:


On Wed, Aug 03, 2005 at 09:01:51AM -0500, Denny White wrote:


I've read the docs on antivir-milter, installed it,
set it up to verify downloaded updates with gpg,
tested it to see if it's checking mail with eicar,
 everything's working fine. Only thing is, I'd
like it to show in my messages that they've been
checked for viruses  I can't seem to get it do
that. I know that the AddXHeader setting only works
in commercial version, but it says if you set the
ModifySubject to YES that it'll show up, as I
understand it, appended to the subject. I did that
 restarted it but still no notice. Any ideas/help
appreciated.
Denny White


Hm, I'm using the personal version of antivir-milter, installed it just a
few days ago - and for every checked mail, it puts a header like this in:
X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-7; AVE: 6.31.1.0;
VDF: 6.31.1.54; host: theatre.sax.de)

I suspect that something else is wrong. Does your sendmail delegate the
mail to antivir-milter? Is it running? It should write some message into
your /var/log/mailog, here's an example.

Startup:

ug  3 17:20:05 theatre avmilter[16541]: listening on: inet:[EMAIL PROTECTED]
Aug  3 17:20:06 theatre avmilter[16541]: engine version: 6.31.1.0
Aug  3 17:20:06 theatre avmilter[16541]: vdf version: 6.31.1.54
Aug  3 17:20:06 theatre avmilter[16541]: addressfilter not active
Aug  3 17:20:06 theatre avmilter[16541]: extension blocking is disabled
Aug  3 17:20:06 theatre avmilter[16541]: running in private mode
Aug  3 17:20:40 theatre sendmail[16570]: j73FKeek016570:

Later:

Aug  3 17:20:41 theatre sm-mta[16579]: j73FKfm7016579: Milter add: header:
X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-7; AVE: 6.31
.1.0; VDF: 6.31.1.54; host: theatre.sax.de)

I didn't do anything except following the installation instructions, that
means, I've put the required m4 macro string into my mc file and rebuilt
the sendmail.cf. From that on, it was working instantly like a charm

Oh yes, and with the EICAR test signature it generates an alert mail to the
postmaster and puts the file into the rejected files directory (for my
installation, /var/spool/avmilter/rejected). The only thing I had to change
was the path to sendmail, in /etc/avmilter.conf it isn't set and the
default points to /usr/lib/sendmail - on FreeBSD that's /usr/sbin/sendmail.

Regards,
Martin

--
 ,,Oh, there's a lot of opportunities, if you're knowing to take them,
 you know, there's a lot of opportunities, if there aren't
   you can make them, make or break them!'' (Tennant/Lowe)



I had read where I needed to edit sendmail.mc but couldn't find
it. Then read the equivalent mc file for freebsd I needed to edit
was /etc/mail/freebsd.mc to which I added:

INPUT_MAIL_FILTER(
`antivir-milter',
`S=unix:/var/spool/avmilter/avmilter.sock, F=T, T=S:10m;R:10m;E:10m'
)dnl

Then I did a `make install' to rebuild, what I thought, was
sendmail.cf, but it's looking like I was way off beam. Here's
what's in /var/mail/maillog:

Aug  3 01:54:15 dualman avmilter[80193]: listening on: 
local:/var/spool/avmilter/avmilter.sock
Aug  3 01:54:19 dualman avmilter[80193]: engine version: 6.31.1.0
Aug  3 01:54:19 dualman avmilter[80193]: vdf version: 6.31.1.46
Aug  3 01:54:19 dualman avmilter[80193]: addressfilter not active
Aug  3 01:54:19 dualman avmilter[80193]: extension blocking is disabled
Aug  3 01:54:19 dualman avmilter[80193]: running in private mode
Aug  3 19:44:45 dualman avmilter[497]: listening on: 
local:/var/spool/avmilter/avmilter.sock
Aug  3 19:44:50 dualman avmilter[497]: engine version: 6.31.1.0
Aug  3 19:44:50 dualman avmilter[497]: vdf version: 6.31.1.50
Aug  3 19:44:50 dualman avmilter[497]: addressfilter not active
Aug  3 19:44:50 dualman avmilter[497]: extension blocking is disabled
Aug  3 19:44:50 dualman avmilter[497]: running in private mode

It's listening on local:/var/spool/avmilter/avmilter.sock, so
apparently I've botched things up. Can you clear up for me
about the sendmail.cf? I googled around  read in the fbsd
mailing list. The best I could come up with was what I stated
earlier, that the file I needed to edit was freebsd.mc
Denny White

GnuPG key  : 0x1644E79A  |  http://wwwkeys.nl.pgp.net
Fingerprint: D0A9 AD44 1F10 E09E 0E67  EC25 CB44 F2E5 1644 E79A

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: perl stdin

2005-08-03 Thread Benjamin Lutz
Wouter van Rooij wrote:
 \

 Hello,

 At the first place, sorry for my bad English.
 My question is:
 How can you, when you're writing a perl program, make a input
 (stdin) hidden, so that when someone is typing an input in the
 following program is hidden:
 #!/usr/bin/perl
 print Your name:;
 $name = STDIN
 I would like to get the input like this: 

# stty plays with the terminal characteristics.
# After disabling echo, anything the user types will no
# longer show up on screen.
# Disabling icanon disables buffering. If buffering is
# enabled, you'll get stdin strings only after the user
# presses enter.

system stty -echo -icanon;

# use sysread() and syswrite() for unbuffered read/write

while (sysread STDIN, $a, 1) {
if (ord($a)  32) { last; }
$b .= $a;
syswrite STDOUT, *, 1; # print asterisk
}
print \nyou said: $b\n;

# Return terminal back to standard mode

system stty echo icanon;


signature.asc
Description: OpenPGP digital signature


syslog in jail

2005-08-03 Thread dave
Hello,
I'm trying to set up an ftp server in a jail and it wasn't starting.
I've now found out why, but in doing so i've found that syslog isn't logging
to the jail, it's logging to the host system's xferlog file, i don't think
it should be doing this. In the host system and the jail i've got
syslogd_flags=-ss in their rc.conf files. Any pointers? Also, lpd is
listening in the jail as well.
Thanks.
Dave.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


OpenLDAP 'container' objectClass

2005-08-03 Thread Kyle Mott

Hi.

I'm trying to get the container structural objectClass in 
openldap-server-2.2.27 (from ports) enabled, but I can't find any 
references to 'container' in the schema files. Am I just missing something?




-Kyle Mott
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


SIIG CyberPro 4 port

2005-08-03 Thread Mike
Hello Everyone,

Can someone tell me if they have been successfull at
getting a 4 port SIIG CyberPro working under 5.3? I am
using only 2 of the ports (Modems) and have rebuilt
the kernel with puc. After the rebuild, all 4 ports
are detected but cannot connect via cu -l cuaa5.
cu just hangs. When done as such cu -l cuaa5 -s
1200 I can initilize the modem and cu does not
hang. I have added the appropriate flags in the
/boot/device.hints as per the FreeBSD handbook but
still no go.

COM_MULTIPORT is not for this card so the it was NOT
added. Any help would be appriciated.

Thanks

Mike



__ 
Yahoo! Mail for Mobile 
Take Yahoo! Mail with you! Check email on your mobile phone. 
http://mobile.yahoo.com/learn/mail 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: growisofs: no mkisofs options are permitted with =, aborting

2005-08-03 Thread Carl Delsey
On Thu, Aug 04, 2005 at 12:06:15AM +0200, Hanspeter Roth wrote:
   On Aug 01 at 22:31, Hanspeter Roth spoke:
 
  
  Hello,
  
  I'm trying to burn an iso image onto a DVD+RW. 
  I'm trying: 
  
  growisofs -Z /dev/cd0=image.iso
  
  This yields:
  
  growisofs: no mkisofs options are permitted with =, aborting...
 
 I must have been drunk!
 I had also an additional option `-v' on the command-line.
 Without this option it works.
 
 Sorry for the noise!

That's good it's sorted out now. I was starting to question my
debugging skills trying to figure this one out. ;-)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


SSH root logins using public key only confusion

2005-08-03 Thread The WRS
I've always preferred setting

PermitRootLogin without-password

in my sshd_config in order to allow root logins using a public key only.

I'm sure the above directive was all I needed to change in the past in
order to achieve this, however it now seems something has changed
either in the default sshd_config file or PAM's configuration itself.

The man page warns about several other directives i'm simply not sure
of ( ChallengeResponseAuthentication, PasswordAuthentication and
pam_unix within /etc/pam.d/sshd ) so I would appreciate some help on
how to reach my goal. I am very confused!

With a default sshd_config but PermitRootLogin set to
'without-password' I find that root is still allowed to login with a
user/pass. A feeble attempt at understanding the sshd_config man page
led me to disable ChallengeResponseAuthentication and enable
PasswordAuthentication left me with no direct root access at all (
password or public key ).

I have verified that my public key works correctly.

There are several local users who prefer authentication with
passwords, so I just want root to require the public key.

This is a FreeBSD 5.4 box.

My sshd_config is now default again ( except requirement of SSH2 ),
here is my /etc/pam.d/sshd in case it is causing the problem.

-

#
# $FreeBSD: src/etc/pam.d/sshd,v 1.15 2003/04/30 21:57:54 markm Exp $
#
# PAM configuration for the sshd service
#

# auth
authrequiredpam_nologin.so  no_warn
authsufficient  pam_opie.so no_warn no_fake_prompts
authrequisite   pam_opieaccess.so   no_warn allow_local
#auth   sufficient  pam_krb5.so no_warn try_first_pass
#auth   sufficient  pam_ssh.so  no_warn try_first_pass
authrequiredpam_unix.so no_warn try_first_pass

# account
#accountrequiredpam_krb5.so
account requiredpam_login_access.so
account requiredpam_unix.so

# session
#sessionoptionalpam_ssh.so
session requiredpam_permit.so

# password
#password   sufficient  pam_krb5.so no_warn try_first_pass
passwordrequiredpam_unix.so no_warn try_first_pass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


question on hosting and memory

2005-08-03 Thread David Banning
I am running apache 1.3 with php and I find when that for each person 
who visits the site, an additional 29 meg is consumed of my measly 512M.
Searching around, it seems like this is relatively normal.

So here is my question. How do big-time servers handle these type of 
memory requirements? Presumably there are servers out there getting
thousands of visitors at once. Do they have 29 Meg * 1000 for every
thousand visitors? At what memory ceiling do they setup another server
machine to handle the load? Wouldn't it require a ton of servers to handle
a load of a thousand visitors?

I am nowhere in this league, but the question comes to mind because it 
seems crazy that 20 visitors to my site can clog things up, simply because
I choose to run apache and php.

I have been looking at lighttpd decrease memory usage, but I require
url rewriting and I find the documentation for lighttpd is lacking
is this area.

Any comments or suggestions are welcome -

-- 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: question on hosting and memory

2005-08-03 Thread Chad Leigh -- Shire.Net LLC


On Aug 3, 2005, at 11:27 PM, David Banning wrote:


I am running apache 1.3 with php and I find when that for each person
who visits the site, an additional 29 meg is consumed of my measly  
512M.

Searching around, it seems like this is relatively normal.

So here is my question. How do big-time servers handle these type of
memory requirements? Presumably there are servers out there getting
thousands of visitors at once. Do they have 29 Meg * 1000 for every
thousand visitors? At what memory ceiling do they setup another server
machine to handle the load? Wouldn't it require a ton of servers to  
handle

a load of a thousand visitors?



It all depends on what the PHP is doing.  On one server I run, the  
hold up is not memory, but actually processing 200 PHP scripts with  
db accesses at once, even with code acceleration products installed.


I have a dual athlon 2800+ system with 4GB of memory.  It can handle  
200-240 httpd processes (apache2) with PHP5 running the postnuke  
system and phpbb2 (postnuke version).  The memory is only half used  
but the system load starts to go sky high when we start to get much  
over 200 httpd, depending on what mix of modules people are using,  
when enough processes need to run at once.  The CPU is not pegged,  
but the run queue gets too long.


I am continuing to try and tune things and improve things, but so far  
this is about where we are at.  Before I put a code accelerator in  
(we have tested the commercial Zend one [and still are testing] but  
run with eaccelerator most of the time) we hit the wall much sooner.


(Note that the mysql DB is on another machine on the LAN).

Chad


I am nowhere in this league, but the question comes to mind because it
seems crazy that 20 visitors to my site can clog things up, simply  
because

I choose to run apache and php.

I have been looking at lighttpd decrease memory usage, but I require
url rewriting and I find the documentation for lighttpd is lacking
is this area.

Any comments or suggestions are welcome -

--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions- 
[EMAIL PROTECTED]




---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: question on hosting and memory

2005-08-03 Thread Wil Hatfield
David,

First no host should be running anything less than dual 2.x Xeons and 1GB of
RAM. Thats a minimum. Add a large swap of about 4GB.  Then tailor your 1.3
so it only compiles with the components necessary. Basic core, PHP,
Frontpage, Python as DSO whenever possible. And your PHP should only be
compiled with what you actually expect to use. Our httpd's are using about
10MB each with PHP loaded. Then fine tune your httpd.conf timeouts so that
those idle processes don't stick around too long.

Then tune your kernel settings a bit. I use these in sysctl.conf and came
about them through trial and error mostly. Of course this means that
somebody on the list here may disagree with them but they work well and help
keep the processes in line.

kern.ipc.somaxconn=1024
kern.maxfiles=2
kern.maxproc=12328
kern.maxprocperuid=11084
kern.ipc.nmbclusters=32768
net.inet.tcp.recvspace=32768

Of course you will need to fine tune other full time applications on the
machine to use as little resources as possible themselves. This includes
your SMTP server, Pop3 server, etc. The more you can fine tune the faster
the machine can do its business and move on to the next task.


Hope it helps,

Wil Hatfield
HyperConX




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of David Banning
Sent: Wednesday, August 03, 2005 10:27 PM
To: [EMAIL PROTECTED]
Subject: question on hosting and memory


I am running apache 1.3 with php and I find when that for each person
who visits the site, an additional 29 meg is consumed of my measly 512M.
Searching around, it seems like this is relatively normal.

So here is my question. How do big-time servers handle these type of
memory requirements? Presumably there are servers out there getting
thousands of visitors at once. Do they have 29 Meg * 1000 for every
thousand visitors? At what memory ceiling do they setup another server
machine to handle the load? Wouldn't it require a ton of servers to handle
a load of a thousand visitors?

I am nowhere in this league, but the question comes to mind because it
seems crazy that 20 visitors to my site can clog things up, simply because
I choose to run apache and php.

I have been looking at lighttpd decrease memory usage, but I require
url rewriting and I find the documentation for lighttpd is lacking
is this area.

Any comments or suggestions are welcome -

--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]