Can one user have more than one system mailboxes?

2006-06-03 Thread a
Can a user have more than one system mailbox?

E. g., some ISP provides the next service: a client can make any number of
mailboxes for himself using web interface.
Almost all ISP are using UNIX.
So, how they do this?
Does that web interface create a new system user every time
I create a new mailbox?

I have sendmail 8.13.6 on FreeBSD 6.1-RELEASE.

Elisej Babenko
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can one user have more than one system mailboxes?

2006-06-03 Thread talonz

[EMAIL PROTECTED] wrote:

Can a user have more than one system mailbox?

E. g., some ISP provides the next service: a client can make any number of
mailboxes for himself using web interface.
Almost all ISP are using UNIX.
So, how they do this?
Does that web interface create a new system user every time
I create a new mailbox?

I have sendmail 8.13.6 on FreeBSD 6.1-RELEASE.

Elisej Babenko
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

  

--

Check out Postfix And Virtual and some type of IMAP for multiple virtual 
users.

There are some documents explaining the setup on the postfix homepage.

Regards Jason M


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Installing Apsfilter

2006-06-03 Thread Andreas Klemm
On Sat, May 27, 2006 at 06:28:39PM -0400, Gerard Seibert wrote:
 Trying to install Apsfilter, I encountered a problem. It seems that it
 requires print/acroread7 which is an interactive port. Reading the
 Makefile on acroread7, it seems I have to go to
 http://www.adobe.com/products/acrobat/distribute.html and fill out a
 form, wait a few days to see if I am approved, and then what?
 
 Is this really necessary? Is there some way around this? If I follow
 through with this scenario, what happens? Do I get a special code or
 file to install that will allow me to install the port just so I can get
 apsfilter installed?

Normally you should be able to deselect pdf if you don't want it.

I experience myself, that the configure script will be executed and
terminated immediately.

Don't know what is broken there.

Andreas ///

-- 
Andreas Klemm - Powered by FreeBSD 6
Need a magic printfilter today ? - http://www.apsfilter.org/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


portmanager keeps on reinstalling the same port

2006-06-03 Thread Yousef Raffah
excuse the n00b in me but I'm trying to install a port using portmanager
as installing it the traditional (make install clean) way failed and the
one of the cool guys on the list here suggested to use portmanager to
resolve the problem.

I have synced my ports as of today morning and tried to launch:
# portmanager deskutils/taskjuggler -l -f

the thing is, portmanager kicks out and tries to reinstall lang/perl5.8,
although it had reinstalled it earlier and I'm sure I have perl 5.8.8
installed already!. I'm not sure if this is a normal behaviour of
portmanager? But I will keep on monitoring it and see if it all goes
well


--
Sincerely,
Yousef Raffah
Senior Systems Administrator
--

Aren't you using Firefox? Get it at http://www.getfirefox.com




signature.asc
Description: This is a digitally signed message part


Help: Novice - Hardware Advice!

2006-06-03 Thread Maan Jee

Hello friends and fellows

Today, I wanna have some hardware advice:

I wanna build A super duper FreeBSD Web Server Box with apache2, mysql5,
php, etc.

But I am just unsure about what kind of hardware I should buy since I am not
having a big budget but do have a reasonable

There gonna be many database queries load fetching data from mysql-server.

What kind of Hardware I should buy?

1. Motherboad?

2. Processor?

3. RAM?
(What kind of and how much should be reasonable enough)

4. Storage System?

I am looking for a solution with very reasonable cost and best efficiency
:o)



--
Thanks!

BR / mj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help: Novice - Hardware Advice!

2006-06-03 Thread Erik Nørgaard
Maan Jee wrote:
 Hello friends and fellows
 
 Today, I wanna have some hardware advice:
 
 I wanna build A super duper FreeBSD Web Server Box with apache2, mysql5,
 php, etc.
 
 But I am just unsure about what kind of hardware I should buy since I am
 not
 having a big budget but do have a reasonable
 
 There gonna be many database queries load fetching data from mysql-server.
 
 What kind of Hardware I should buy?
 
 1. Motherboad?
 
 2. Processor?
 
 3. RAM?
 (What kind of and how much should be reasonable enough)
 
 4. Storage System?
 
 I am looking for a solution with very reasonable cost and best efficiency
 :o)

How much traffic will you serve?

This is also limited by the bandwidth you have - if you have an adsl
connection usually downstream is higher than up stream, but serving
pages go mostly upstream.

How much work will the server do to generate pages?

If everything is dynamic and you have a badly coded site it costs. You
can get much efficiency with good code and/or apache proxy, or a squid
proxy.

I bought a mini-itx with 1Ghz Via chip and 256MB ram, 60GB IDE disk.
Should I buy a new system today I would go for a fanless slower version.

It serves just fine, not only web pages but also mail, database, ldap,
dns, dhcp, imap as well as being firewall/router for the local network.
It seems that most resources are consumed by the smtp server blocking spam.

It's also reasonable cheap, around 400 euros, and consumes only around 30W.

Cheers, Erik
-- 
Ph: +34.666334818  web: http://www.locolomo.org
X.509 Certificate: http://www.locolomo.org/crt/8D03551FFCE04F0C.crt
Key ID: 69:79:B8:2C:E3:8F:E7:BE:5D:C3:C3:B1:74:62:B8:3F:9F:1F:69:B9


smime.p7s
Description: S/MIME Cryptographic Signature


Re: Can one user have more than one system mailboxes?

2006-06-03 Thread GiL A. Virtucio
i suck in administering sendmail... most of my admin friends use postfix but
personally I use qmail :) ... it uses qmailadmin for webbased mailbox
management and vqadmin for webbased email domain management. if you're
interested, here is a nice installation/config guide..

http://freebsd.qmailrocks.org/install.htm

===
Gil A. Virtucio
Janitor/Kolektor/Messenger/Driver
Asia Solution Phillippines Inc.
28/F Antel Global Corporate Center
3 Doña Julia Vargas Avenue,
Ortigas Center, Pasig
Mobile # : +63-916-3989695
http://gihl.eu.org/
===

- Original Message - 
From: [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Sent: Saturday, June 03, 2006 3:24 PM
Subject: Can one user have more than one system mailboxes?


 Can a user have more than one system mailbox?

 E. g., some ISP provides the next service: a client can make any number of
 mailboxes for himself using web interface.
 Almost all ISP are using UNIX.
 So, how they do this?
 Does that web interface create a new system user every time
 I create a new mailbox?

 I have sendmail 8.13.6 on FreeBSD 6.1-RELEASE.

 Elisej Babenko
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portmanager keeps on reinstalling the same port

2006-06-03 Thread Gerard Seibert
Yousef Raffah wrote:

 excuse the n00b in me but I'm trying to install a port using portmanager
 as installing it the traditional (make install clean) way failed and the
 one of the cool guys on the list here suggested to use portmanager to
 resolve the problem.
 
 I have synced my ports as of today morning and tried to launch:
 # portmanager deskutils/taskjuggler -l -f
 
 the thing is, portmanager kicks out and tries to reinstall lang/perl5.8,
 although it had reinstalled it earlier and I'm sure I have perl 5.8.8
 installed already!. I'm not sure if this is a normal behaviour of
 portmanager? But I will keep on monitoring it and see if it all goes
 well
 
 
You are telling 'portmanager' to rebuild your entire system when you use
the '-f' switch.

To install just this one port, run the program like this:

portmanager deskutils/taskjuggler -l -y

If you have 'portupgrade' installed, you might want to run 'portsclean':

portsclean -C -L

first to make sure that you have cleaned out any old work before
starting a new installation.


-- 
Gerard Seibert
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portmanager keeps on reinstalling the same port

2006-06-03 Thread Yousef Raffah
On Sat, 2006-06-03 at 07:44 -0400, Gerard Seibert wrote:
 Yousef Raffah wrote:
 
  excuse the n00b in me but I'm trying to install a port using portmanager
  as installing it the traditional (make install clean) way failed and the
  one of the cool guys on the list here suggested to use portmanager to
  resolve the problem.
  
  I have synced my ports as of today morning and tried to launch:
  # portmanager deskutils/taskjuggler -l -f
  
  the thing is, portmanager kicks out and tries to reinstall lang/perl5.8,
  although it had reinstalled it earlier and I'm sure I have perl 5.8.8
  installed already!. I'm not sure if this is a normal behaviour of
  portmanager? But I will keep on monitoring it and see if it all goes
  well
  
  
 You are telling 'portmanager' to rebuild your entire system when you use
 the '-f' switch.
 
 To install just this one port, run the program like this:
 
 portmanager deskutils/taskjuggler -l -y
I did that and here is the latest output I got from portmanager:


skipping taskjuggler-2.2.0 /deskutils/taskjuggler until dependency
p5-Class-MethodMaker-2.08 updated
skipping p5-Class-MethodMaker-2.08 /devel/p5-Class-MethodMaker until
dependency p5-PathTools-3.18 updated
skipping qt-3.3.6_2 /x11-toolkits/qt33 until dependency libmng-1.0.9
updated
skipping kdelibs-3.5.2_1 /x11/kdelibs3 until dependency
xorg-clients-6.9.0_3 updated
skipping p5-Bit-Vector-6.4_1 /math/p5-Bit-Vector until dependency
p5-Carp-Clan-5.3 updated
skipping xorg-clients-6.9.0_3 /x11/xorg-clients until dependency
imake-6.9.0 updated
skipping openssl-0.9.8b_1 /security/openssl marked IGNORE reason:
conflicts with another installed port
skipping xorg-fonts-encodings-6.9.0_1 /x11-fonts/xorg-fonts-encodings
until dependency xorg-clients-6.9.0_3 updated
skipping OpenEXR-1.2.2_1 /graphics/OpenEXR until dependency
pkg-config-0.20_2 updated
skipping libart_lgpl-2.3.17_1 /graphics/libart_lgpl until dependency
pkg-config-0.20_2 updated
skipping arts-1.5.2,1 /audio/arts until dependency qt-3.3.6_2 updated
skipping libidn-0.6.3 /dns/libidn until dependency pkg-config-0.20_2
updated
skipping libxml2-2.6.24_1 /textproc/libxml2 until dependency
pkg-config-0.20_2 updated
skipping libxslt-1.1.16_2 /textproc/libxslt until dependency
pkg-config-0.20_2 updated
skipping cups-base-1.1.23.0_9 /print/cups-base until dependency
gnutls-1.2.11 updated
skipping gamin-0.1.7_2 /devel/gamin until dependency pkg-config-0.20_2
updated
skipping fontconfig-2.3.2_5,1 /x11-fonts/fontconfig until dependency
pkg-config-0.20_2 updated
skipping freetype2-2.1.10_3 /print/freetype2 until dependency
pkg-config-0.20_2 updated
skipping libaudiofile-0.2.6 /audio/libaudiofile until dependency
pkg-config-0.20_2 updated
skipping libmad-0.15.1b_2 /audio/libmad until dependency
pkg-config-0.20_2 updated
skipping glib-2.10.2 /devel/glib20 until dependency pkg-config-0.20_2
updated
skipping jackit-0.100.0_2 /audio/jack until dependency pkg-config-0.20_2
updated
skipping gnutls-1.2.11 /security/gnutls until dependency
pkg-config-0.20_2 updated
skipping libsndfile-1.0.16 /audio/libsndfile until dependency
pkg-config-0.20_2 updated
skipping libtasn1-0.3.4 /security/libtasn1 until dependency
pkg-config-0.20_2 updated
skipping p5-PostScript-Simple-0.07 /print/p5-PostScript-Simple marked
IGNORE reason: looping, 3rd attempt at make
skipping p5-PathTools-3.18 /devel/p5-PathTools marked IGNORE reason:
looping, 3rd attempt at make
skipping libmng-1.0.9 /graphics/libmng marked IGNORE reason: looping,
3rd attempt at make
skipping mDNSResponder-107.5 /net/mDNSResponder marked IGNORE reason:
looping, 3rd attempt at make
skipping lua-5.0.2_1 /lang/lua50 marked IGNORE reason: looping, 3rd
attempt at make
skipping p5-Carp-Clan-5.3 /devel/p5-Carp-Clan marked IGNORE reason:
looping, 3rd attempt at make
skipping imake-6.9.0 /devel/imake-6 marked IGNORE reason: looping, 3rd
attempt at make
skipping pkg-config-0.20_2 /devel/pkg-config marked IGNORE reason:
looping, 3rd attempt at make
skipping portaudio-18.1_2 /audio/portaudio marked IGNORE reason:
looping, 3rd attempt at make


Should I update the dependencies manually? Isn't portmanager supposed to
update those dependencies?
 
 If you have 'portupgrade' installed, you might want to run 'portsclean':
 
 portsclean -C -L
 
 first to make sure that you have cleaned out any old work before
 starting a new installation.
 
I did that and it cleaned some stuff :) Thanks for sharing the
information.
 


--
Sincerely,
Yousef Raffah
Senior Systems Administrator
--

Aren't you using Firefox? Get it at http://www.getfirefox.com




signature.asc
Description: This is a digitally signed message part


Tuning GigE network for cluster computing?

2006-06-03 Thread Steve Kargl
First, I'm running FreeBSD 6.1-stable on a small cluster
with 6 nodes that contain Tyan motheriboards.  These broads
have Broadcom GigE NICs that use the bge device.

The cluster will be using MPI to possibly shove large data
sets through a GigE switch, so I'm trying to determine how
best to optimize the transfer.

Would DEVICE_POLLING and/or jumbo frames likely methods for
enhanced speeds?

-- 
Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Does FreeBSD 4.11-STABLE support the 8237R?

2006-06-03 Thread Danial Thom


--- Mark [EMAIL PROTECTED] wrote:

 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED]
 On Behalf Of Danial Thom
  Sent: vrijdag 2 juni 2006 18:28
  To: Scott Hiemstra; 'FreeBSD-Questions
 Questions'
  Subject: RE: Does FreeBSD 4.11-STABLE support
 the 8237R?
 
  --- Scott Hiemstra [EMAIL PROTECTED] wrote:
 
Did you say you are running a server?
 That MB is only suitable for
desktop use, as it has the slowest
 ethernet controller known to man
on a 32/33Mhz bus. Running this MB as a
 server is like putting
cheap, skinny tires on your porsche.
   
DT
  
   Personaly, I appreciate your dedication to
 maximum performance but
   please notice this thread is in reference
 to swapping a MB for another
   MB and coments like yours are not
 appreciated.
  
   Would you prefer if I had stated?
  
   I have the same board in a crappy server
 running 4.11 (FreeBSD
   4.11-STABLE #0) and no problems to report.
  
   Please notice I never said what the box was
 doing nor did I ask for
   your opinion of what MB/NIC I use in my
 systems. This SERVER is pur-
   pose built and runs stable 24/7 as a low
 volume outbound mail server
   so the performance of the NIC is not my
 primary concern. Please keep
   your useless comments to yourself as they
 do nothing but waste disk
   space, CPU time and the valuable time of
 people who attempt to help
   others on this list.
  
   Scott
 
  So if someone is planning on using a crappy
 motherboard as a server its
  not appropriate to mention that the
 replacement is not suitable for the
  task? So since you're replacing the MB, why
 not take the opportunity to
  use something suitable.
 
 Because it means introducing a whole slew of
 new, unknown variables. :)
 
 When I first installed 4.10R, it did not even
 support the 8237; and disk
 performance on that board was limited to a
 terribly slow Multi-World DMA 2
 mode (I think it was that; very slow, at
 least). So, imagine my delight
 when 4.11-STABLE supported the 8237 at last.
 Buying a newer type
 motherboard for 4.11-STABLE (where would you
 find one for socket 754, so
 soon replaced by socket 939, anyway?) would
 likely mean an unsupported
 south-bridge chip, and being back to square
 one. Nope. I'm gonna stick
 with what works for 4.11-STABLE (as that is
 still my preferred FreeBSD
 version; and if I cannot find a new motherboard
 after the new one dies, I
 will just continue to run the whole thing in a
 Vmware box).
 
 As for the LAN, since I only have a 100 Mb
 network, I see no reason to
 assume even a less than ideal performing
 gigabit LAN would slow things
 down (unless its performance dropped below 10%;
 and I'm sure it's not that
 bad).
 
 In fact, not to be unnecessarily contrary, but
 I would ere say this
 motherboard is totally unsuited for desktop use
 (I have a shiny P5WD2
 Premium for that), and that this board is
 rather ideally suited for a
 FreeBSD 4.11 system.


Well that's just stupid, but you're entitled to
waste your money in any way you choose. We run
FreeBSD 4.9 and I've never had a problem with
hardware. Of course I know how to choose hardware
and you don't :)

I never said desktop. The MB isn't really
suitable for anything that uses a LAN
extensively. 

Knowing ASUS (whose MBs I'd never use, btw), I'd
guess that the ethernet controller on the P4WD2
is connected to a 1x PCIe which would be a joke. 

What you don't get:

- The slower the bus, the more CPU cycles it
takes to do an I/O. Typically you are doing 1000s
and 1000s of I/Os per second. Thats 100s of 1000s
of cpu cycles wasted per second.
- inefficient controller = more CPU cyles per
access. Maybe MANY more. This translates to
degradation of your CPU. The more traffic, the
more degradation. Whether you're on a gig network
or a 100Mb/s network, the efficiency of the
controller will still eat up your cpu. Of course
if you're just doing IM or email, then you don't
get enough iterations per second to make a
difference. But on a server,or gaming machine or
anything on a broadband connection, you're just
killing your cpu using a crappy controller.

You'd be better off putting up an old 845 chipset
MB with an fxp controller running a 2.6Ghz
celeron than what you're running, for a lot less
money.

DT

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [freebsd-questions] emacs xemacs?

2006-06-03 Thread Lowell Gilbert
hernan [EMAIL PROTECTED] writes:

 I have the xemacs port installed and I would also like to have the
 normal emacs port installed.  When I try to 'make clean install'
 /usr/ports/editors/emacs it builds fine but fails to install because
 of xemacs, I'm at work now but the error was something to the effect
 that they both conflict and install files into the same place.

 I'm running FreeBSD 6.0 RELEASE, with a recent portupgrade so things
 are fairly up to date.  I'm trying to install emacs 21.3_9 and have
 xemacs 21.4.19 installed already.

You will need to install it to a different PREFIX.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tuning GigE network for cluster computing?

2006-06-03 Thread Danial Thom


--- Steve Kargl
[EMAIL PROTECTED] wrote:

 First, I'm running FreeBSD 6.1-stable on a
 small cluster
 with 6 nodes that contain Tyan motheriboards. 
 These broads
 have Broadcom GigE NICs that use the bge
 device.
 
 The cluster will be using MPI to possibly shove
 large data
 sets through a GigE switch, so I'm trying to
 determine how
 best to optimize the transfer.
 
 Would DEVICE_POLLING and/or jumbo frames likely
 methods for
 enhanced speeds?
 
 -- 
 Steve


--- Steve Kargl
[EMAIL PROTECTED] wrote:

 First, I'm running FreeBSD 6.1-stable on a
 small cluster
 with 6 nodes that contain Tyan motheriboards. 
 These broads
 have Broadcom GigE NICs that use the bge
 device.
 
 The cluster will be using MPI to possibly shove
 large data
 sets through a GigE switch, so I'm trying to
 determine how
 best to optimize the transfer.
 
 Would DEVICE_POLLING and/or jumbo frames likely
 methods for
 enhanced speeds?


Firstly we've been discussing how bad and
inefficient the broadcom controllers are. If you
have a tyan MB with onboard controllers they are
incredibly slow (ie inefficient), as well as
being quirky. If you have a PCI-X slot put in an
intel card. They have built-in interrupt
moderation so you don't have dick around with
polling. A 133Mhz intel controller (make sure
they have the GB chips on them and not the EB)
will use half the cpu of the on-board broadcoms.
If you don't believe try it with one box and
measure the cpu usage before and after. Its worth
the $50. investment in the card, believe me.

While polling may marginally decrease the cpu
load (depending on how bad FreeBSD 6.1 is on
interrupt overhead), its also going to add
latency to the processing of packets, which is
the opposite of what you want to do. 

DT

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [freebsd-questions] emacs xemacs?

2006-06-03 Thread Don Hinton
On Saturday 03 June 2006 11:20, Lowell Gilbert wrote:
 hernan [EMAIL PROTECTED] writes:
  I have the xemacs port installed and I would also like to have the
  normal emacs port installed.  When I try to 'make clean install'
  /usr/ports/editors/emacs it builds fine but fails to install because
  of xemacs, I'm at work now but the error was something to the effect
  that they both conflict and install files into the same place.
 
  I'm running FreeBSD 6.0 RELEASE, with a recent portupgrade so things
  are fairly up to date.  I'm trying to install emacs 21.3_9 and have
  xemacs 21.4.19 installed already.

 You will need to install it to a different PREFIX.

You'll probably need to define DISABLE_CONFLICTS as well.

hth...
don

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

-- 
Don Hinton don.hinton at vanderbilt.edu  tel: 615.480.5667
ISIS, Vanderbilt University  skype: donhinton
http://people.vanderbilt.edu/~don.hinton/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portmanager keeps on reinstalling the same port

2006-06-03 Thread Gerard Seibert
Yousef Raffah wrote:

 On Sat, 2006-06-03 at 07:44 -0400, Gerard Seibert wrote:
  Yousef Raffah wrote:
  
   excuse the n00b in me but I'm trying to install a port using portmanager
   as installing it the traditional (make install clean) way failed and the
   one of the cool guys on the list here suggested to use portmanager to
   resolve the problem.
   
   I have synced my ports as of today morning and tried to launch:
   # portmanager deskutils/taskjuggler -l -f
   
   the thing is, portmanager kicks out and tries to reinstall lang/perl5.8,
   although it had reinstalled it earlier and I'm sure I have perl 5.8.8
   installed already!. I'm not sure if this is a normal behaviour of
   portmanager? But I will keep on monitoring it and see if it all goes
   well
   
   
  You are telling 'portmanager' to rebuild your entire system when you use
  the '-f' switch.
  
  To install just this one port, run the program like this:
  
  portmanager deskutils/taskjuggler -l -y
 I did that and here is the latest output I got from portmanager:
 
 
 skipping taskjuggler-2.2.0 /deskutils/taskjuggler until dependency
 p5-Class-MethodMaker-2.08 updated
 skipping p5-Class-MethodMaker-2.08 /devel/p5-Class-MethodMaker until
 dependency p5-PathTools-3.18 updated
 skipping qt-3.3.6_2 /x11-toolkits/qt33 until dependency libmng-1.0.9
 updated
 skipping kdelibs-3.5.2_1 /x11/kdelibs3 until dependency
 xorg-clients-6.9.0_3 updated
 skipping p5-Bit-Vector-6.4_1 /math/p5-Bit-Vector until dependency
 p5-Carp-Clan-5.3 updated
 skipping xorg-clients-6.9.0_3 /x11/xorg-clients until dependency
 imake-6.9.0 updated
 skipping openssl-0.9.8b_1 /security/openssl marked IGNORE reason:
 conflicts with another installed port
 skipping xorg-fonts-encodings-6.9.0_1 /x11-fonts/xorg-fonts-encodings
 until dependency xorg-clients-6.9.0_3 updated
 skipping OpenEXR-1.2.2_1 /graphics/OpenEXR until dependency
 pkg-config-0.20_2 updated
 skipping libart_lgpl-2.3.17_1 /graphics/libart_lgpl until dependency
 pkg-config-0.20_2 updated
 skipping arts-1.5.2,1 /audio/arts until dependency qt-3.3.6_2 updated
 skipping libidn-0.6.3 /dns/libidn until dependency pkg-config-0.20_2
 updated
 skipping libxml2-2.6.24_1 /textproc/libxml2 until dependency
 pkg-config-0.20_2 updated
 skipping libxslt-1.1.16_2 /textproc/libxslt until dependency
 pkg-config-0.20_2 updated
 skipping cups-base-1.1.23.0_9 /print/cups-base until dependency
 gnutls-1.2.11 updated
 skipping gamin-0.1.7_2 /devel/gamin until dependency pkg-config-0.20_2
 updated
 skipping fontconfig-2.3.2_5,1 /x11-fonts/fontconfig until dependency
 pkg-config-0.20_2 updated
 skipping freetype2-2.1.10_3 /print/freetype2 until dependency
 pkg-config-0.20_2 updated
 skipping libaudiofile-0.2.6 /audio/libaudiofile until dependency
 pkg-config-0.20_2 updated
 skipping libmad-0.15.1b_2 /audio/libmad until dependency
 pkg-config-0.20_2 updated
 skipping glib-2.10.2 /devel/glib20 until dependency pkg-config-0.20_2
 updated
 skipping jackit-0.100.0_2 /audio/jack until dependency pkg-config-0.20_2
 updated
 skipping gnutls-1.2.11 /security/gnutls until dependency
 pkg-config-0.20_2 updated
 skipping libsndfile-1.0.16 /audio/libsndfile until dependency
 pkg-config-0.20_2 updated
 skipping libtasn1-0.3.4 /security/libtasn1 until dependency
 pkg-config-0.20_2 updated
 skipping p5-PostScript-Simple-0.07 /print/p5-PostScript-Simple marked
 IGNORE reason: looping, 3rd attempt at make
 skipping p5-PathTools-3.18 /devel/p5-PathTools marked IGNORE reason:
 looping, 3rd attempt at make
 skipping libmng-1.0.9 /graphics/libmng marked IGNORE reason: looping,
 3rd attempt at make
 skipping mDNSResponder-107.5 /net/mDNSResponder marked IGNORE reason:
 looping, 3rd attempt at make
 skipping lua-5.0.2_1 /lang/lua50 marked IGNORE reason: looping, 3rd
 attempt at make
 skipping p5-Carp-Clan-5.3 /devel/p5-Carp-Clan marked IGNORE reason:
 looping, 3rd attempt at make
 skipping imake-6.9.0 /devel/imake-6 marked IGNORE reason: looping, 3rd
 attempt at make
 skipping pkg-config-0.20_2 /devel/pkg-config marked IGNORE reason:
 looping, 3rd attempt at make
 skipping portaudio-18.1_2 /audio/portaudio marked IGNORE reason:
 looping, 3rd attempt at make
 
 
 Should I update the dependencies manually? Isn't portmanager supposed to
 update those dependencies?
  
  If you have 'portupgrade' installed, you might want to run 'portsclean':
  
  portsclean -C -L
  
  first to make sure that you have cleaned out any old work before
  starting a new installation.
  
 I did that and it cleaned some stuff :) Thanks for sharing the
 information.
  

Well, it seems that you have a problem here:

skipping openssl-0.9.8b_1 /security/openssl marked IGNORE reason:
conflicts with another installed port

You might want to check that out. Are you sure you have a completely
fresh ports tree? If not, update it and then run

portmanager -u -l -y

and see if that corrects the other problems. Then try to 

Re: Does Marvell 88E8053 PCIe Gigabit LAN controller work with 6.0?

2006-06-03 Thread Aaron VanAlstine
My mobo has a Marvell 88E8053 LAN controller. It wasn't even detected until
I downloaded the FreeBSD 6.0 driver. Once I installed the driver, DCHP
worked like a dream and I was right on-line. However, when I installed, 6.1,
I lost connectivity again.

Does anybody know if Marvell's 6.0 driver is incompatible with 6.1?

-- Aaron

On 5/29/06 18:56, Olivier Gautherot [EMAIL PROTECTED] wrote:

 Hi Aaron!
 
 Thanks, I changed the RAID configuration to RAID1 and reloaded the OS and
 for some reason it is now booting up properly. Now if I could only connect
 to the Net! ;) Oh well, the road to discovery has many detours...
 
 Welcome to the club! ;-) I had this issue once too. What network chipset do
 you have (seems to be on-board, isn't it?) I ended up replacing an old card
 that I was using happily with Windows, Linux and BeOS because it was not
 compatible with FreeBSD. Is yours at least detected?
 
 By the way, RAID1 is a good choice - better than RAID0 anyway.
 
 Have fun ;-)
 Cheers


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tuning GigE network for cluster computing?

2006-06-03 Thread Steve Kargl
On Sat, Jun 03, 2006 at 09:28:42AM -0700, Danial Thom wrote:
 
 [EMAIL PROTECTED] wrote:
 
  First, I'm running FreeBSD 6.1-stable on a
  small cluster
  with 6 nodes that contain Tyan motheriboards. 
  These broads
  have Broadcom GigE NICs that use the bge
  device.
  
  The cluster will be using MPI to possibly shove
  large data
  sets through a GigE switch, so I'm trying to
  determine how
  best to optimize the transfer.
  
  Would DEVICE_POLLING and/or jumbo frames likely
  methods for
  enhanced speeds?
 
 
 Firstly we've been discussing how bad and
 inefficient the broadcom controllers are. If you
 have a tyan MB with onboard controllers they are
 incredibly slow (ie inefficient), as well as
 being quirky. If you have a PCI-X slot put in an
 intel card. They have built-in interrupt
 moderation so you don't have dick around with
 polling. A 133Mhz intel controller (make sure
 they have the GB chips on them and not the EB)
 will use half the cpu of the on-board broadcoms.
 If you don't believe try it with one box and
 measure the cpu usage before and after. Its worth
 the $50. investment in the card, believe me.

I'll look into the Intel cards, but unfortunately
I'm probably stuck with the onboard broadcom devices
for the immediate future.  There is one expansion
slot (whether its PCI-X, I don't know).  I was 
actually planning to use the slot for infiniband,
myrinet, or the 10 GiGE cards that Drew Gallatin
has mentioned.

 While polling may marginally decrease the cpu
 load (depending on how bad FreeBSD 6.1 is on
 interrupt overhead), its also going to add
 latency to the processing of packets, which is
 the opposite of what you want to do. 

This is the conclusion that I reached in reading
i386/conf/NOTES.  Thanks for confirming my suspicions.

-- 
Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: MailScanner Issues

2006-06-03 Thread Martin Hepworth

Robert

ASk on the mailScanner email list. there are people there who run sendmail 
FreeBSd  MailScanner and will be able to tell you the rc.conf settings.

--
martin

On 5/28/06, Robert Davison [EMAIL PROTECTED] wrote:


I've done a bit more digging. It seems that my sendmail_in.pid and
sendmail_out.pid files are not running in /var/run, despite having this in
my rc.conf..

sendmail_enable=NONE
clamd_enable=YES
freshd_enable=YES
mailscanner_enable=YES
mta_enable=YES
mta_type=sendmail
mta_profiles=incoming outgoing submitqueue
mta_incoming_flags=-L sm-mta-in -bd -OPrivacyOptions=noetrn
-OQueueDirectory=/v
ar/spool/mqueue.in -ODeliveryMode=queueonly
mta_incoming_pidfile=/var/run/sendmail_in.pid
mta_incoming_configfile=/etc/mail/sendmail.cf
mta_outgoing_flags=-L sm-mta-out -q15m
mta_outgoing_pidfile=/var/run/sendmail_out.pid
mta_outgoing_configfile=/etc/mail/sendmail.cf
mta_submitqueue_flags=-L ms-msp-queue -Ac -q15m
mta_submitqueue_pidfile=/var/spool/clientmqueue/sm-client.pid
mta_submitqueue_configfile=/etc/mail/submit.cf

I'm getting a sendmail.pid file, but nothing more


-
Try the all-new Yahoo! Mail . The New Version is radically easier to use
– The Wall Street Journal
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


how to avoid recompiling applications?

2006-06-03 Thread Jonathan Horne
i have a system that i tend to tear up quite often.  sometimes accidently, 
sometimes not.  recompiling kde is quite a long process (and when i try to do 
it from packages, something is always messed up).

so, i was under the impression that if you *did not* make install clean (thus, 
only using 'make clean') and save your work directories, then when it came 
time to reinstall something, you would not have to go thru the compile 
process, and skip straight to the installation?

example is, last night i compiled xorg from ports, but then tried to (against 
my better judgement) pull down kde from packages.  utter catastrophe, after 
removing the non-working kde-package, kde3 port would not even compile after 
that.  anyway, long story short, i backed up 
my /usr/ports, /usr/src, /usr/obj, and reinstalled.  using my restored backup 
files, reapplying my old kernel and installworld went just without issue, i 
skipped the buildworld and buildkernel just fine, no hitches.  but when i 
went to reinstall the xorg from last night (all the work directories were 
still there), 'make install' returned no output, and nothing happened.  what 
gives?

i ended up having to do a make clean on my ports dir before i could continue.  
in the future for me, is there a way to proeperly retain all the precompiled 
stuff, and just skip right to the installation portion of my previously 
compiled ports?

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can one user have more than one system mailboxes?

2006-06-03 Thread Erik Nørgaard
 Can a user have more than one system mailbox?

 E. g., some ISP provides the next service: a client can make any number of
 mailboxes for himself using web interface.
 Almost all ISP are using UNIX.
 So, how they do this?
 Does that web interface create a new system user every time
 I create a new mailbox?

 I have sendmail 8.13.6 on FreeBSD 6.1-RELEASE.

Sorry, I missed OP. 1st: I doubt ISP's relies on unix accounts for mail.
Rather they likely have clients in an ldap directory and mail on some
database backend storage.

2nd: You can create an extra mailbox by adding a line to /etc/mail/aliases:

  mailbox_name:/path/to/mailbox_name

then run newaliases. To let a user access the mailbox you need to set
filepermissions accordingly.

Erik
-- 
Ph: +34.666334818  web: http://www.locolomo.org
X.509 Certificate: http://www.locolomo.org/crt/8D03551FFCE04F0C.crt
Key ID: 69:79:B8:2C:E3:8F:E7:BE:5D:C3:C3:B1:74:62:B8:3F:9F:1F:69:B9


smime.p7s
Description: S/MIME Cryptographic Signature


Apache22 + PHP5 installation issues

2006-06-03 Thread robert
Hi all,

I am having problems with setting up a web server. I'm running FreeBSD
6.1-Release-P1, updated of yesterday.

I have installed Apache22, php5 and php5-extensions from the ports. (I
did check the build Apache module option in the php5 config).

My first problem is that the handbook still refers the to mod_php which
is not available. A search of the archives gave me the answer that it
has been removed.

My httpd.conf has:

LoadModule php5_modulelibexec/apache22/libphp5.so

To which I have added:

AddType application/x- httpd-php .php
AddType application/x- httpd-php-source .phps

As per the pkg-message.

The problem is that although I can connect to apache, php does not
appear to run, all I get in a browser is unknown file type and a
suggestion to download the file.

I have also tried adding index.php to the DirectoryIndex

I have to follow the handbook and tried this:

IfModule php5_module
DirectoryIndex index.php index.html
/IfModule
IfModule php5_module
AddType application/x- httpd-php .php
AddType application/x- httpd-php-source .phps
/IfModule

ie with php5_module rather than mod_php, but that also fails to work


There is nothing in the apache-error.log nor messages that help.

Any ideas, suggestions please.

Rob






___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


kismet: madwifi_bg unknown capture source type

2006-06-03 Thread Erik Nørgaard
Hi:

I have had this problem ... actually I think since I upgraded to 6.0.
But I have just upgraded base and rebuilt kismet and the problem remains.

Whenever I try to run kismet I get the following error:

FATAL: Unknown capture source type 'madwifi_bg' in source
   'madwifi_bg,ath0,default'

I have a 3Com 11a/g card with Atheros chipset, and tried with both
madwifi_ag, madwifi_bg, madwifi_b and madwifi_g. Same result.

It appears that madwifi is not compiled but I can't figure where to
enable that.

How do I get madwifi working again?

Thanks, Erik
-- 
Ph: +34.666334818  web: http://www.locolomo.org
X.509 Certificate: http://www.locolomo.org/crt/8D03551FFCE04F0C.crt
Key ID: 69:79:B8:2C:E3:8F:E7:BE:5D:C3:C3:B1:74:62:B8:3F:9F:1F:69:B9


smime.p7s
Description: S/MIME Cryptographic Signature


Any current user experience with Asterisk on FreeBSD

2006-06-03 Thread Jason Lixfeld
I don't like the idea of having to run Linux because their system  
tools just don't compare to FreeBSD, but I have had bad experience in  
the past with FreeBSD + Asterisk using software timing.  This time  
around, I have a TDM400P with an FXO for timing, but I'm not sure  
what the zaptel support is like currently.


Asking around in asterisk land is useless because they are all linux  
zealots so I can't get a straight answer except for FreeBSD Sucks  
so I'm hoping someone on this side of the fence can give me a little  
more comprehensive overview of their experiences.


The system isn't anything complicated..  Just MoH, the TDM400P and  
Meetme..


Anyone have any experience, one way or the other?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache22 + PHP5 installation issues

2006-06-03 Thread Randy Pratt
On Sat, 03 Jun 2006 19:12:04 +0100
robert [EMAIL PROTECTED] wrote:

 Hi all,
 
 I am having problems with setting up a web server. I'm running FreeBSD
 6.1-Release-P1, updated of yesterday.
 
 I have installed Apache22, php5 and php5-extensions from the ports. (I
 did check the build Apache module option in the php5 config).
 
 My first problem is that the handbook still refers the to mod_php which
 is not available. A search of the archives gave me the answer that it
 has been removed.

There's been some changes to the way PHP is organized.  Take a look
at /usr/ports/UPDATING, particularly the 20060506 entry for users
of PHP.

If I remember correctly:

cd /usr/ports/lang/php5
make config
  (select Build Apache Module)
make install clean 
  (or portupgrade -f php5-\* if you already have it installed)

This has also been discussed and should be in the archives.

HTH

Randy
-- 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Any current user experience with Asterisk on FreeBSD

2006-06-03 Thread Chad Leigh -- Shire.Net LLC


On Jun 3, 2006, at 12:32 PM, Jason Lixfeld wrote:

I don't like the idea of having to run Linux because their system  
tools just don't compare to FreeBSD, but I have had bad experience  
in the past with FreeBSD + Asterisk using software timing.  This  
time around, I have a TDM400P with an FXO for timing, but I'm not  
sure what the zaptel support is like currently.


Asking around in asterisk land is useless because they are all  
linux zealots so I can't get a straight answer except for FreeBSD  
Sucks so I'm hoping someone on this side of the fence can give me  
a little more comprehensive overview of their experiences.


The system isn't anything complicated..  Just MoH, the TDM400P and  
Meetme..


Anyone have any experience, one way or the other?


You might want to ask on the asterisk-bsd list

List-Id:Asterisk on BSD discussion 
asterisk-bsd.lists.digium.com
	List-Unsubscribe: 	http://lists.digium.com/mailman/listinfo/ 
asterisk-bsd, mailto:[EMAIL PROTECTED] 
subject=unsubscribe

List-Archive:   http://lists.digium.com/pipermail/asterisk-bsd
List-Post:  mailto:asterisk-bsd@lists.digium.com
List-Help:  mailto:[EMAIL PROTECTED]
	List-Subscribe: 	http://lists.digium.com/mailman/listinfo/asterisk- 
bsd, mailto:[EMAIL PROTECTED]


From what I gather it seems to be getting better.  I tried back in  
Jan and had some issues with my TDM400 cards but it sounds like the  
issue was fixed.  I am just getting back in and am probably going the  
Linux route :-( for now since it seems to be more mature there and  
the 3rd party add-ons are Linux based and I just need to get the  
phone system running and forget about it (figuratively).


Chad



---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
chad at shire.net



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can one user have more than one system mailboxes?

2006-06-03 Thread a
On Sat, Jun 03, 2006 at 08:08:43PM +0200, Erik N??rgaard wrote:
  Can a user have more than one system mailbox?
 
  E. g., some ISP provides the next service: a client can make any number of
  mailboxes for himself using web interface.
  Almost all ISP are using UNIX.
  So, how they do this?
  Does that web interface create a new system user every time
  I create a new mailbox?
 
  I have sendmail 8.13.6 on FreeBSD 6.1-RELEASE.
 
 Sorry, I missed OP. 1st: I doubt ISP's relies on unix accounts for mail.
 Rather they likely have clients in an ldap directory and mail on some
 database backend storage.
 
 2nd: You can create an extra mailbox by adding a line to /etc/mail/aliases:
 
   mailbox_name:/path/to/mailbox_name
 
 then run newaliases. To let a user access the mailbox you need to set
 filepermissions accordingly.
 
 Erik
 -- 
 Ph: +34.666334818  web: http://www.locolomo.org
 X.509 Certificate: http://www.locolomo.org/crt/8D03551FFCE04F0C.crt
 Key ID: 69:79:B8:2C:E3:8F:E7:BE:5D:C3:C3:B1:74:62:B8:3F:9F:1F:69:B9

1st: It is interesting.
2nd: Thank you very much.

Elisej Babenko
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help: Novice - Hardware Advice!

2006-06-03 Thread VeeJay

Thanks for your advice.

Almost all pages will be generated dynamically (php).

Bandwidth is ADSL with 1Mb Upstream and 24Mb Downstream.
(Don't know if it is enough?)

Traffic is like going to grow upto 5 hits or more a day. Since I am
building an article liberary.

How can I implement Apache Proxy or Squid Proxy?

How can I make the server more robust?

Looking forward for your comments...

VJ

On 6/3/06, Erik Nørgaard [EMAIL PROTECTED] wrote:


Maan Jee wrote:
 Hello friends and fellows

 Today, I wanna have some hardware advice:

 I wanna build A super duper FreeBSD Web Server Box with apache2, mysql5,
 php, etc.

 But I am just unsure about what kind of hardware I should buy since I am
 not
 having a big budget but do have a reasonable

 There gonna be many database queries load fetching data from
mysql-server.

 What kind of Hardware I should buy?

 1. Motherboad?

 2. Processor?

 3. RAM?
 (What kind of and how much should be reasonable enough)

 4. Storage System?

 I am looking for a solution with very reasonable cost and best
efficiency
 :o)

How much traffic will you serve?

This is also limited by the bandwidth you have - if you have an adsl
connection usually downstream is higher than up stream, but serving
pages go mostly upstream.

How much work will the server do to generate pages?

If everything is dynamic and you have a badly coded site it costs. You
can get much efficiency with good code and/or apache proxy, or a squid
proxy.

I bought a mini-itx with 1Ghz Via chip and 256MB ram, 60GB IDE disk.
Should I buy a new system today I would go for a fanless slower version.

It serves just fine, not only web pages but also mail, database, ldap,
dns, dhcp, imap as well as being firewall/router for the local network.
It seems that most resources are consumed by the smtp server blocking
spam.

It's also reasonable cheap, around 400 euros, and consumes only around
30W.

Cheers, Erik
--
Ph: +34.666334818  web: http://www.locolomo.org
X.509 Certificate: http://www.locolomo.org/crt/8D03551FFCE04F0C.crt
Key ID: 69:79:B8:2C:E3:8F:E7:BE:5D:C3:C3:B1:74:62:B8:3F:9F:1F:69:B9






--
Thanks!

BR / mj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache22 + PHP5 installation issues

2006-06-03 Thread Toomas Aas

robert wrote:


My httpd.conf has:

LoadModule php5_modulelibexec/apache22/libphp5.so

To which I have added:

AddType application/x- httpd-php .php
AddType application/x- httpd-php-source .phps

^
You should not have a space here


I have also tried adding index.php to the DirectoryIndex

I have to follow the handbook and tried this:

IfModule php5_module
DirectoryIndex index.php index.html
/IfModule
IfModule php5_module
AddType application/x- httpd-php .php
AddType application/x- httpd-php-source .phps

^
Here too

/IfModule


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help: Novice - Hardware Advice!

2006-06-03 Thread Erik Nørgaard
VeeJay wrote:
 Thanks for your advice.
  
 Almost all pages will be generated dynamically (php).
  
 Bandwidth is ADSL with 1Mb Upstream and 24Mb Downstream.
 (Don't know if it is enough?)

First, your speed is likely 1Mbit and not 1Mbyte (1Mb)

You can make some rough estimates once you have your site running and
know how much an average page is. But, (almost) any system that you can
get hands on today will be able to serve your site.

Generally: If people have to wait more than 10 sec for a page to load,
it's too slow.

 Traffic is like going to grow upto 5 hits or more a day. Since I am
 building an article liberary.
  
 How can I implement Apache Proxy or Squid Proxy?

You need to build Apache WITH_PROXY_MODULE=yes then configure, see the
apache documentation, it is fairly thorough. Squid is also in ports. I
suggest you leave it til you have your site up running and see the
bottlenecks.

 How can I make the server more robust?

The answer is not a one-liner. You should really get hands on the
great manuals on hardening both system and services.

Erik
-- 
Ph: +34.666334818  web: http://www.locolomo.org
X.509 Certificate: http://www.locolomo.org/crt/8D03551FFCE04F0C.crt
Key ID: 69:79:B8:2C:E3:8F:E7:BE:5D:C3:C3:B1:74:62:B8:3F:9F:1F:69:B9


smime.p7s
Description: S/MIME Cryptographic Signature


weird arp issues

2006-06-03 Thread Subhi S Hashwa
Hello all,

I am having weird issue with arp/mac address on local gateway machine

The following is from /var/log/messages

Jun  3 21:14:58 nile kernel: arp_rtrequest: bad gateway 193.19.XXX.1 (!AF_LINK)

when checking arp table :

chesfw1-e1-0 (193.19.XXX.1) at 
0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.10.2.0.0.c1.13.e8.1.0.0.0.0.0.0.0.0.ec.0.5.4.1.0.ff.7f.5.4.2.0.33.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.4.0.0.0.0.0.0.20.0.0.0.0.dc.5.0.0.0.0.0.0.b5.f2.81.44.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.10.2.0.0.c1.13.e8.3.0.0.0.0.0.0.0.0.36.12.1.0.6.0.6.0.0.d.60.d4.37.3c.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.38.12.1.0.6.3.6
 permanent

The IP is an alias on a local NIC, rather than a remote MAC.
when I try to delete it I get

21:16:41 [EMAIL PROTECTED] ~]# arp -d -a
delete: cannot locate 193.19.XXX.1

The machine initially boots up fine with the right mac address for the
IP but then it starts showing these errors.

the machine is running routed and pf and is filtering about 20Mbps

21:23:08 [EMAIL PROTECTED] ~]# netstat -rn|grep 193.19.XXX.1
193.19.XXX.1   193.19.XXX.1   UHLW14lo0 =
193.19.XXX.1/32link#1 UC  00em0

uname:
FreeBSD XXX..com 6.0-RELEASE-p5 FreeBSD 6.0-RELEASE-p5

ifconfig :

em0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=bRXCSUM,TXCSUM,VLAN_MTU
inet6 fe80::211:43ff:fee7:bd77%em0 prefixlen 64 scopeid 0x1
inet 193.19.XXX.1 netmask 0x broadcast 193.19.XXX.1
inet 192.168.1.1 netmask 0xff00 broadcast 192.168.1.255
ether 00:11:43:e7:bd:77
media: Ethernet autoselect (100baseTX full-duplex)
status: active

Any ideas or pointers ?




-- 
Best regards,
 Subhi S Hashwa  mailto:[EMAIL PROTECTED]
 When everything is heading your way, you're in the wrong lane.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache22 + PHP5 installation issues

2006-06-03 Thread robert
On Sat, 2006-06-03 at 15:05 -0400, Randy Pratt wrote:
 On Sat, 03 Jun 2006 19:12:04 +0100
 robert [EMAIL PROTECTED] wrote:
 
  Hi all,
  
  I am having problems with setting up a web server. I'm running FreeBSD
  6.1-Release-P1, updated of yesterday.
  
  I have installed Apache22, php5 and php5-extensions from the ports. (I
  did check the build Apache module option in the php5 config).
  
  My first problem is that the handbook still refers the to mod_php which
  is not available. A search of the archives gave me the answer that it
  has been removed.
 
 There's been some changes to the way PHP is organized.  Take a look
 at /usr/ports/UPDATING, particularly the 20060506 entry for users
 of PHP.
 
 If I remember correctly:
 
   cd /usr/ports/lang/php5
   make config
 (select Build Apache Module)
   make install clean 
 (or portupgrade -f php5-\* if you already have it installed)
 
 This has also been discussed and should be in the archives.
 
 HTH
 
 Randy

Thanks Randy,

I originally built php5 with build Apache module and the libphp5.so is
present on my system (the ports were updated with portsnap yesterday). I
have tried forcing a rebuild but that has not changed anything.

Rob








___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Hiding dot files with ftpd

2006-06-03 Thread Kyrre Nygard


What's up all?

Just wondering if it's possible to hide dot files somehow
with FreeBSD's default ftpd when I invoke it from inetd?

ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l
ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -l

Thanks,
Kyrre

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache22 + PHP5 installation issues

2006-06-03 Thread robert
On Sat, 2006-06-03 at 23:02 +0300, Toomas Aas wrote:
 robert wrote:
 
  My httpd.conf has:
  
  LoadModule php5_modulelibexec/apache22/libphp5.so
  
  To which I have added:
  
  AddType application/x- httpd-php .php
  AddType application/x- httpd-php-source .phps
  ^
 You should not have a space here
 
  I have also tried adding index.php to the DirectoryIndex
  
  I have to follow the handbook and tried this:
  
  IfModule php5_module
  DirectoryIndex index.php index.html
  /IfModule
  IfModule php5_module
  AddType application/x- httpd-php .php
  AddType application/x- httpd-php-source .phps
  ^
  Here too
  /IfModule

Toomas,

Thanks

I corrected this and restarted Apache, unfortunately still the same
problem.

Rob





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Recommendation for 1000BASE-SX card?

2006-06-03 Thread Ted Mittelstaedt


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Erik Trulsson
Sent: Friday, June 02, 2006 12:40 AM
To: Ted Mittelstaedt
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: Recommendation for 1000BASE-SX card?


On Thu, Jun 01, 2006 at 05:01:08PM -0700, Ted Mittelstaedt wrote:


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Chuck Swiger
 Sent: Thursday, June 01, 2006 8:24 AM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: Re: Recommendation for 1000BASE-SX card?
 


[...]


  but I'm
 generally of
 the opinion that FreeBSD works just fine, most of the time, on
 most hardware,
 without any specific tweaking or tuning to be entirely usable.
 

 It does not.  In reality, current versions of FreeBSD work better
 on current versions of hardware.  FreeBSD has a terrible history
 of breaking things that used to work on old hardware, then
 when someone complains that something is broken, the developers
 in effect tell them their old hardware is crappy junk and to buy new
 hardware.

 Try running FreeBSD 6.X on a 80486 or Pentium system.

FreeBSD 6.x works just fine on a Pentium system, as long as you
have enough
memory.


Most Pentium 60's and Pentium 133's shipped from the factory with no
more than 32MB of ram.  That's only enough to load FreeBSD itself, not
any applications.  I'm not talking your souped up Pentium 200 with 128MB
of ram in it.  But, even those will roll over and die if you try to bring
up
a desktop like gnome or KDE on them.  Way way too slow.

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Does FreeBSD 4.11-STABLE support the 8237R?

2006-06-03 Thread Ted Mittelstaedt


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Scott Hiemstra
Sent: Friday, June 02, 2006 8:14 AM
To: 'FreeBSD-Questions Questions'
Subject: RE: Does FreeBSD 4.11-STABLE support the 8237R?


 I run FreeBSD 4.11 stable, and I need to replace my ASUS K8V Deluxe
 motherboard. I am thinking about de K8V-X SE. However,
 instead of the 8237
 chipset, it has the 8237R. Is that supported in FreeBSD 4.11 stable as
 well? Also, instead of the Gigabyte LAN, it has a Realtek
 8201CL D version
 LAN. Will that work, too? I can, for the life of me, no
 longer find a link
 on the new FreeBSD site (like
 http://www.freebsd.org/releases/4.11-STABLE/hardware-i386.html
 #DISK, for
 instance). If anyone could tell me where the page is at, or knows the
 answer, I'd really appreciate it.


I have the same board in a server running 4.11 (FreeBSD
4.11-STABLE #0) and
no problems to report.  The nic is detected as RealTek
8129/8139

Those are crap cards.  Lots of problems under even other operating
systems and those cards and non-autonegotiation hubs and switches.
They seem to negotiate OK if they are plugged into a 10/100 autoswitching
switch, but they are not that efficient.  If your server isn't doing a
lot of
network traffic they will work but I'd avoid using them in a file and
print
server most definitely.

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Does FreeBSD 4.11-STABLE support the 8237R?

2006-06-03 Thread Ted Mittelstaedt


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Scott Hiemstra
Sent: Friday, June 02, 2006 9:20 AM
To: 'FreeBSD-Questions Questions'
Subject: RE: Does FreeBSD 4.11-STABLE support the 8237R?


notice this thread is in reference to swapping a MB for another MB and
coments like yours are not appreciated.


Please notice I never said what the box was doing nor did I ask for your
opinion of what MB/NIC I use in my systems.

Makes no difference, he has as much right to sound off as you do
as long as he sounds off on FreeBSD or a directly related topic.  This
is a public forum.  If you don't like a post, delete it.

As I've said before on this mailing list, freebsd-questions is a public
mailing list that is FREE support.  You don't have it your way you
have it the responders way

If you can shuck some pearls out of the oyster bed here, your doing
better than most, but you have no right to urinate all over the oyster
bed just because you don't find any pearls.

If you want it your way I suggest you investigate PAID support.  There
are plenty of people out there taking money for support, and they will
give you the support any way you want, on as nice a silver platter and
bed of roses and as polite as you want.

 This SERVER is
purpose built
and runs stable 24/7 as a low volume outbound mail server so
the performance
of the NIC is not my primary concern.

You have no need to justify what your doing to him or to me or to
anybody.
Why bother doing it.

 Please keep your useless
comments to
yourself as they do nothing but waste disk space, CPU time and
the valuable
time of people who attempt to help others on this list.


His comments may be useless to you but not to everyone reading.
You don't know what people are looking for when they google the
archives or read this mailing list.  If your mother read your response
she would say your just sinking to his level and you need to
keep that in perspective here.  Of course, if my mother read my comments
here she would say speech is wasted on the deaf and I should keep
that in perspective, and I do, most of the time.

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Recommendation for 1000BASE-SX card?

2006-06-03 Thread Ted Mittelstaedt


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Danial Thom
Sent: Friday, June 02, 2006 10:08 AM
To: Ted Mittelstaedt; Chuck Swiger
Cc: [EMAIL PROTECTED]
Subject: RE: Recommendation for 1000BASE-SX card?




--- Ted Mittelstaedt [EMAIL PROTECTED]
wrote:

 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
 Behalf Of Chuck Swiger
 Sent: Thursday, June 01, 2006 8:24 AM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: Re: Recommendation for 1000BASE-SX
 card?
 
 
 
 Very well, let me put it another way: if your
 opinions about 
 what's wrong 
 differ from most other people, you might do
 better to rely on a 
 discussion 
 involving facts rather than opinions. 
 
 Or, it could simply be that he's not doing what
 most people
 are doing, so he is going to run into trouble
 that most people
 don't run into.
 
 I mention this because 
 some people 
 regard their own opinions so highly that they
 don't seem to be 
 aware that 
 other approaches exist and might even prove
 effective.
 
 
 Like you?
 
  Clearly there are drivers that are well
  supported and drivers that aren't. There are
  people out there trying to run their
 businesses
  and you seem to want to pretend that
 everything
  is just peachy and that everything can be
 tweaked
  and tuned a bit to be usable.
 
 I don't know about either the OP or your
 situation(s),
 
 Then, pray tell, don't comment.  Instead thank
 your lucky stars
 that you have not had to deal with that kind of
 problem.
 
  but I'm 
 generally of 
 the opinion that FreeBSD works just fine, most
 of the time, on 
 most hardware, 
 without any specific tweaking or tuning to be
 entirely usable.
 
 
 It does not.  In reality, current versions of
 FreeBSD work better
 on current versions of hardware.  FreeBSD has a
 terrible history
 of breaking things that used to work on old
 hardware, then
 when someone complains that something is
 broken, the developers
 in effect tell them their old hardware is
 crappy junk and to buy new
 hardware.
 
 Try running FreeBSD 6.X on a 80486 or Pentium
 system.  FreeBSD 4.11
 runs just fine on that hardware, if a bit
 slowly.  But, I don't need
 speed to control my garden sprinklers.
 
 Now, it is true that sometimes backwards
 compatibility can hurt you,
 it can cause you to maintain interfaces and
 structures that conflict
 with support of new hardware, it can sometimes
 put you into 
 situations that cannot be automatically
 resolved, thus you have to
 create a knob for the user to twaddle one way
 or another, depending
 on what hardware they have or what they want to
 do.  It can suck
 off developer time to maintain old junk that
 only a few people use,
 instead of putting in support for new crap that
 a lot of people use.
 So there is a balance beam of too much
 backwards compatability
 and not enough of it.  Microsoft is most
 definitely way far on the
 side of bending over backwards to support
 everything, but most people
 don't realize that FreeBSD is way far on the
 other side of sacrificing
 hardware support at the drop of a hat when
 people lose interest
 in it.
 
 That's true of some other platforms, such as
 Apple hardware and 
 MacOS X, or 
 even Sun/SPARC boxes, as well.  YMMV.
 
 
 Total apples and oranges comparison, not
 relevant to anything.
 
 If you have specific problems or a
 FreeBSD-driver to Windows-driver 
 performance comparison, providing #'s and
 enough details to 
 reproduce would be 
 helpful.
 
 That has been done with the Broadcom driver
 exhaustively in the
 PR database, there's at least a dozen PRs on
 problems related
 to that chip.  However it has not resulted in
 much code to fix
 the problem, or even interest among committers
 to apply the fixes
 that have been posted.  So no, I don't think
 that doing that
 is helpful at all.  In fact, I really think the
 PR system has
 gotten pretty much broken these days, there's
 too many bugs and
 not enough people working on them, and more
 coming in every
 day.
 
 What is needed is some developers putting some
 time into 
 knocking down the bugs in the PR database, but
 instead we have
 the foundation dumping money into funding
 students on projects
 like The Summer of Code which basically ends
 up creating a lot
 of half-finished efforts that may or may not
 eventually get
 integrated into the operating system at some
 point down the road.
 
 Nobody wants to fix other people's bugs, that's
 boring stuff,
 that is the one area of Open Source where
 commercial software
 companies have a leg up over us.  A commercial
 company can find
 some starving programmer and pay him, then put
 a manager over him to
 keep jerking the paycheck string to keep him on
 task to do the
 icky programming.  Open Source has real
 difficulty with the concept
 that some things in it are broken, rather
 ickely broken, and
 totally un-fun to work on, and the only way
 your going to get
 them fixed is by whipping some 

Re: Hiding dot files with ftpd

2006-06-03 Thread Daniel A. Akulenok
On Sat, June 3, 2006 22:57, Kyrre Nygard wrote:

 What's up all?

 Just wondering if it's possible to hide dot files somehow
 with FreeBSD's default ftpd when I invoke it from inetd?

 ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l
 ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -l

 Thanks,
 Kyrre

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

Hi Kyrre,
Files prepended with dots in UNIX operating systems usually symoblize a
file which is not shown to the user on a regular basis because the user
will actually not _need_ to know of it's prescense in daily use.
Therefore, it is entirely up to the FTP client of the user if files
prepended with dots are shown or not.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Does FreeBSD 4.11-STABLE support the 8237R?

2006-06-03 Thread Jerry McAllister
 
 notice this thread is in reference to swapping a MB for another MB and
 coments like yours are not appreciated.
 
 
 Please notice I never said what the box was doing nor did I ask for your
 opinion of what MB/NIC I use in my systems.
 
 Makes no difference, he has as much right to sound off as you do
 as long as he sounds off on FreeBSD or a directly related topic.  This
 is a public forum.  If you don't like a post, delete it.

So, I guess that means that the original poster can spout off and say that
the response contained irrelevant and offensive material if he wants as well.
Getting those types of responses is one way that persons (at least some of
them who have sufficient perception) learn how to make appropriate and
meaningful responses.  

 As I've said before on this mailing list, freebsd-questions is a public
 mailing list that is FREE support.  You don't have it your way you
 have it the responders way

And the original poster subsequently became a responder.

 If you can shuck some pearls out of the oyster bed here, your doing
 better than most, but you have no right to urinate all over the oyster
 bed just because you don't find any pearls.

Wow, I am stunned.

 If you want it your way I suggest you investigate PAID support.  There
 are plenty of people out there taking money for support, and they will
 give you the support any way you want, on as nice a silver platter and
 bed of roses and as polite as you want.

Pecuniary reward is not the only reason to learn how to make reasonable,
meaningful responses that are to the point of the question and to be
able to understand the difference.   Being able to post responses that
are respected in the community is another reward and may occasionally
require learning from peoples comments on the quality of the responses.

jerry

 
  This SERVER is
 purpose built
 and runs stable 24/7 as a low volume outbound mail server so
 the performance
 of the NIC is not my primary concern.
 
 You have no need to justify what your doing to him or to me or to
 anybody.
 Why bother doing it.
 
  Please keep your useless
 comments to
 yourself as they do nothing but waste disk space, CPU time and
 the valuable
 time of people who attempt to help others on this list.
 
 
 His comments may be useless to you but not to everyone reading.
 You don't know what people are looking for when they google the
 archives or read this mailing list.  If your mother read your response
 she would say your just sinking to his level and you need to
 keep that in perspective here.  Of course, if my mother read my comments
 here she would say speech is wasted on the deaf and I should keep
 that in perspective, and I do, most of the time.
 
 Ted
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Recommendation for 1000BASE-SX card?

2006-06-03 Thread Danial Thom
Its easy enough for commercial companies to fix
the bugs if they need to use the broadcom
drivers. There's just little incentive to donate
the code back with this bunch of rude,
incompetent clowns that have become the FreeBSD
micky mouse club.

I don't think it's that being the problem.  I
think
the problem is that the engineers at places like
HP and
ASUS and such, know perfectly well the Broadcom
and the
Realtek and the other cheapo-crappy ethernet
chipsets
are garbage.  But, I think they figure that they
are not
going to throw expensive programming time on
solving the
problems of those chips in software.  I think
they spend
the expensive programming time on their high-end
gear, which
has the Intel chipset and the other good stuff,
high end
parts in it.

There was a time when name brand companies like
Dell, HP
Gateway, Micron, etc. etc. made 2 lines of
computers.
Cheapo crappy desktop gear, and expensive high
quality
server gear.

What I think ruined it is too many people
pressing cheapo
crappy desktop gear into use as servers, it was
cutting
into the high-end server market in a big way. 
So, the
Dell's and the HP's of the world realized they
needed to
create server lines (and the motherboard
manufacturers 
realized this too with motherboard lines) that
were marketed
as servers, but were a lot cheaper than their
high end
servers.  This would allow them to package the
exact same
crappy desktop parts in a box marked as a
server and
costing twice as much, yet not as much as the
really good
quality server gear.  And so that is what is
going on
these days.
__

Ok, well we've blown the yahoo buffer so I have
to crop.

I'm not sure that its those corporate monsters
making a conscious effort to rip people off. The
market is uneducated. Managers at those companies
don't know anything, and the engineers that
design MBs are asian robots that just do
schematics and make the chips work. People
selecting products today are not engineers and
have no idea now to test hardware; heck even Matt
Dillon admits that he doesn't understand how the
PCI bus works, and he's trying to design an
operating system. Doesn't care either. Its all
about the CPU. Which is silly, since putting a
big, honking CPU on a box with a bad chipset or a
cheap NIC devalues the CPU to the point that you
might as well just get something cheap. Virtually
no-one has any clue about the performance of
their box. People are willing to spend any amount
on their MB and CPU, and they they'll go out and
buy a realtek ethernet card, or a 32-bit gig card
to save a few $$$. Its mindless. Its so mindless
I can't believe it. And even if you explain it to
them, they still don't understand. Its like a
bunch of women buying clothes. Costs more, must
be better. Its just crazy.

DT

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Makefile for rpm-4.0.4_4

2006-06-03 Thread RAW

This question is about a FreeBSD port that I cannot automake.

Dear FreeBSDers;

Tried to obtain, make and install Port rpm-4.0.4_4, on my new FreeBSD 
6.0. Not there yet Looks like the Makefile program got down to 
post-patch:, became unhappy, informed me with error code 127, (???) 
and quit.Make claimed that it could not find the shell script 
configure (see log below), but when I follow the path to the file, 
there it is. It left an extract done.rpm-4 doc empty.


How can I get the makefile to continue, find configure and finish the 
make job?


P.S. I ran Make in a terminal window on my KDE desktop. Matters?

Thanks for the help.


Make log:

/usr/rpm/rpm4
# make install clean
===  Vulnerability check disabled, database not found
= rpm-4.0.4.tar.gz doesn't seem to exist in /usr/ports/distfiles/.
= Attempting to fetch from ftp://ftp.rpm.org/pub/rpm/dist/rpm-4.0.x/.
fetch: ftp://ftp.rpm.org/pub/rpm/dist/rpm-4.0.x/rpm-4.0.4.tar.gz: File 
unavailable (e.g., file not found, no access)
= Attempting to fetch from 
ftp://ftp.mirrorservice.org/sites/ftp.rpm.org/pub/rpm/dist/rpm-4.0.x/.
rpm-4.0.4.tar.gz  100% of 5728 kB 2370  Bps 
00m00s

===  Extracting for rpm-4.0.4_4
= Checksum OK for rpm-4.0.4.tar.gz.
===  Patching for rpm-4.0.4_4
===  Applying FreeBSD patches for rpm-4.0.4_4
-e 's:%%LOCALBASE%%:/usr/local:'  /usr/rpm/rpm4/work/rpm-4.0.4/configure 
/usr/rpm/rpm4/work/rpm-4.0.4/beecrypt/configure

-e: not found
*** Error code 127

Stop in /usr/rpm/rpm4.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Does FreeBSD 4.11-STABLE support the 8237R?

2006-06-03 Thread Danial Thom
Jerry, old buddy. what up? :)

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Recommendation for 1000BASE-SX card?

2006-06-03 Thread Ted Mittelstaedt


-Original Message-
From: Danial Thom [mailto:[EMAIL PROTECTED]
Sent: Friday, June 02, 2006 10:59 AM
To: Ted Mittelstaedt; Heinrich Rebehn; [EMAIL PROTECTED]
Subject: RE: Recommendation for 1000BASE-SX card?




--- Ted Mittelstaedt [EMAIL PROTECTED]
wrote:

 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
 Behalf Of Danial Thom
 Sent: Thursday, June 01, 2006 6:38 AM
 To: Heinrich Rebehn; [EMAIL PROTECTED]
 Subject: Re: Recommendation for 1000BASE-SX
 card?
 
 
 
 
 --- Heinrich Rebehn [EMAIL PROTECTED]
 wrote:
 
  Danial Thom wrote:
The intel cards that use the EM driver
 are
  the
   best performing cards in FreeBSD that
 we've
   tested. We've test cards made by the same
  company
   that use the broadcom controllers and the
  intel
   cards are substantially better (ie use
 less
  CPU
   passing the same amount of traffic). 
   
   Be careful using on-board controllers.
  Usually
   vendors, for some reason, don't wire them
 to
  the
   pci-x bus. Most supermicro boards wire the
 em
   controllers to the 32bit/33mhz bus and the
  tyan
   and supermicro opteron boards we've tested
  wire
   the broadcoms to a shared 1x PCI-E, both
 of
  which
   will not only give you poor performance,
 but
  are
   not capable of running full gigabit rates.
   
   DT
   
  
  The Intel card would be an INTEL Pro1000MF,
  right? This would be quite
  expensive (~ EUR 430), but good performance
 and
  stability would warrant
  that.
  ATM, we are using the onboard controller
  (Broadcom BCM5704C wired to the
  pci-x bus). I did not have opportunity to do
  performance measurements,
  but we do have problems with our Linkpro
  1000SX/1000TX converters, the
  3rd of which has already died.
  That's why i want to give a PCI-X card with
  fiber interface a try.
 
 No, that would be the 1000MT, the MF is a
 fiber
 card I believe. They are about US$120. in the
 US.
 
 How do you know its wired to the PCI-X bus,
 since
 I don't believe that the controller has a way
 of
 reporting the way that the intel controller
 does?
 What MB do you have?
 
 Also keep in mind that the bge driver is a
 piece
 of crap; driver quality is a much more telling
 factor in these free OS's than the card in
 many
 cases. The EM and FXP are the only drivers
 worth
 anything (mainly because neither were written
 by
 mass-driver mill man Bill Paul).
 
 
 After having fixed bugs in the bge driver I
 must stress
 how wrong this statement is for the bge driver.
  Bill
 Paul may or may not have been associated with
 the bge driver,
 whether he was or not is immaterial since the
 bge driver is
 basically a port of the broadcom-supplied Linux
 driver,
 the code is Broadcoms mostly, with hunks of
 Broadcom
 code removed (like that dealing with the PHY's)
 when it
 was too difficult to port. (apparently)  The
 quality of
 the Broadcom driver isn't Bill Paul's, it's
 Broadcoms.
 
 No, I can assure you that the reason the
 Broadcom
 chips work like crap under FreeBSD is not due
 to Bill Paul,
 it is because the Broadcom hardware iteself is
 pure, unadulterated,
 stinking, bull crap.  It is crappy even under
 the supported operating
 systems like Windows, it's craptitude reaches
 new heights on
 the crap pile.  Broadcom missed their calling
 as an ethernet
 chipset designer, they should have gone into
 making vacuum
 cleaners, as they would certainly be the
 suckiest ones in
 that business.
 
 Ted

I'll disagree with you on the authoring issue
(without commenting on the crappiness of the
controller), because it is ultimately the
responsibility of the programmer to work around
the quirks and even the bugs in any given
controller, and the simple fact is that BP does a
half-assed job; certainly not the kind of job
someone whose sole responsibility was to maintain
a particular driver. All complex controllers are
a b*tch to write drivers for, and the ability to
seemlessly integrate working code into the OS to
mask the quirks is what separates the men from
the boys. Saying the driver stinks because the
example code stinks is a cop-out.

But I didn't say that.  I said the driver stinks
because the HARDWARE stinks.

When I can take a Windows box with a Broadcom
chip in it, that is exhibiting timeouts and slowness,
unplug it from one brand of 10BaseT hub, and plug
it into another brand of 10BaseT hub, and then
plug my laptop into the first hub port that the
Windows box was in, and have absolutely no problems,
and have the Broadcom Windows box work perfectly in
the second brand of hub, that is crappy hardware.

It is not drivers, and no amount of twaddling with
code in the driver will fix it.

All sample code
stinks. The sample code should be just that; an
example of how to program the controller.

Absolutely no, not at all.  It is very easy to write
a sample driver source that is full of unexplained magic
numbers, in fact the Broadcom driver that I tweaked
was broken precisely because one of the prior
FreeBSD programmers who 

RE: porno site using old devil logo...thought you should know

2006-06-03 Thread Ted Mittelstaedt


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of surfbass
Sent: Friday, June 02, 2006 8:37 PM
To: freebsd-questions@freebsd.org
Subject: porno site using old devil logo...thought you should know


Thought you might like to know, but keep my email anonymous 
please; I trust
you guys enough that i dont need to spoof it. I know I wouldn't 
want a logo
for such a fine product associated with a porno site.

http://www.celebritytemptation.com/images/11frontpageimages/devil.jpg


But, where's the porno on that site?

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: porno site using old devil logo...thought you should know

2006-06-03 Thread Chad Leigh -- Shire.Net LLC


On Jun 3, 2006, at 5:09 PM, Ted Mittelstaedt wrote:





-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of surfbass
Sent: Friday, June 02, 2006 8:37 PM
To: freebsd-questions@freebsd.org
Subject: porno site using old devil logo...thought you should know


Thought you might like to know, but keep my email anonymous
please; I trust
you guys enough that i dont need to spoof it. I know I wouldn't
want a logo
for such a fine product associated with a porno site.

http://www.celebritytemptation.com/images/11frontpageimages/devil.jpg



But, where's the porno on that site?


strip everything from images on down to leave the root site and you  
will find it


Chad



Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions- 
[EMAIL PROTECTED]


---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
chad at shire.net



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Recommendation for 1000BASE-SX card?

2006-06-03 Thread Danial Thom
The starving programmer was an exaggeration
used
to illustrate a point, I was not seriously
suggesting
to go out and hire a bad programmer.

But, when you buy cheap crappy hardware it is
cheap 
because the manufacturer has hired less talented
programmers among other things, and you can only
expect something that works not that works
well
--

I think its often difficult to distinguish
between what is crappy, because good code can
make bad hardware look good and vice versa. All
ethernet controllers were designed by idiots. 

My first success story (now I don't want to let
on to who I really am so I'll be vague), was an
ISA card by a major vendor that locked up
regularly, and it had a hideous reputation as
being a bad card. It was the only card of its
kind, and I needed it badly. They gave me
schematics and said that they had tried and tried
but couldn't find anything wrong with the card.
They had contracted out to some brainfarm to
write a driver, and the thing was this beautiful
self-contained scheduler (this is like MSDOS 3
mind you) with documented source, the whole deal.
Well I tore it apart, simplified the code, got
rid of all the soft interrupt passes and cleaned
up all the memory management code. Now the card
worked like a charm, didn't lock up, ran better
than their spec and Mega-Billon$- company
couldn't believe that some 23yo kid wrote a
driver that a company they paid 100K to couldn't
get to work.

My point is that until someone writes a really
good driver you never know if hardware is any
good or not. Now some  hardware is hopeless. I'm
not sure that the broadcom controllers are that
hopeless. But since the intel cards work well and
are cheap, who's going to spend the time to pour
over the broadcom driver and make it better?
There's a ton of I/Os in there that can be
streamlined. But who's gonna do it? Its sure not
worth my time.

DT




__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Does FreeBSD 4.11-STABLE support the 8237R?

2006-06-03 Thread Ted Mittelstaedt


-Original Message-
From: Jerry McAllister [mailto:[EMAIL PROTECTED]
Sent: Saturday, June 03, 2006 3:42 PM
To: Ted Mittelstaedt
Cc: Scott Hiemstra; 'FreeBSD-Questions Questions'
Subject: Re: Does FreeBSD 4.11-STABLE support the 8237R?



 notice this thread is in reference to swapping a MB for
another MB and
 coments like yours are not appreciated.
 
 
 Please notice I never said what the box was doing nor did I
ask for your
 opinion of what MB/NIC I use in my systems.

 Makes no difference, he has as much right to sound off as you do
 as long as he sounds off on FreeBSD or a directly related topic.  This
 is a public forum.  If you don't like a post, delete it.

So, I guess that means that the original poster can spout off
and say that
the response contained irrelevant and offensive material if he
wants as well.

Yes, he can.  Not a problem as long as he knows that his spouting
is being done for his own enjoyment, not because he seriously thinks
that he's right.  From my vantage point, it sounded like the OP was
really believing what he was saying.

Getting those types of responses is one way that persons (at
least some of
them who have sufficient perception) learn how to make appropriate and
meaningful responses.


appropriate and meaningful responses are in the eye of the beholder
as I already explained.  Too bad you missed that.

 As I've said before on this mailing list, freebsd-questions
is a public
 mailing list that is FREE support.  You don't have it your way you
 have it the responders way

And the original poster subsequently became a responder.


See above.  Then look up the definition of metadiscussion


Pecuniary reward is not the only reason to learn how to make reasonable,
meaningful responses that are to the point of the question and to be
able to understand the difference.   Being able to post responses that
are respected in the community is another reward and may occasionally
require learning from peoples comments on the quality of the responses.


Yup, I really need that totally unverifyable, most likely fake pen name
of mine
to be respected in the community. :-)  Wow, someone might even think I'm
a man, rather than the sweet, nubile, available, and very hetrosexual
 22 year old co-ed that I really am ;-)

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: porno site using old devil logo...thought you should know

2006-06-03 Thread Ted Mittelstaedt


-Original Message-
From: Chad Leigh -- Shire.Net LLC [mailto:[EMAIL PROTECTED]
Sent: Saturday, June 03, 2006 4:11 PM
To: Ted Mittelstaedt
Cc: freebsd-questions@freebsd.org
Subject: Re: porno site using old devil logo...thought you should know



On Jun 3, 2006, at 5:09 PM, Ted Mittelstaedt wrote:



 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of surfbass
 Sent: Friday, June 02, 2006 8:37 PM
 To: freebsd-questions@freebsd.org
 Subject: porno site using old devil logo...thought you should know


 Thought you might like to know, but keep my email anonymous
 please; I trust
 you guys enough that i dont need to spoof it. I know I wouldn't
 want a logo
 for such a fine product associated with a porno site.

 http://www.celebritytemptation.com/images/11frontpageimages/devil.jpg


 But, where's the porno on that site?

strip everything from images on down to leave the root site and you
will find it


Yup, another site that doesen't understand how to turn off directory
browsing.

It ain't porno if they don't have their pants off.

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Recommendation for 1000BASE-SX card?

2006-06-03 Thread Ted Mittelstaedt


-Original Message-
From: Danial Thom [mailto:[EMAIL PROTECTED]
Sent: Saturday, June 03, 2006 4:26 PM
To: Ted Mittelstaedt; Heinrich Rebehn; [EMAIL PROTECTED]
Subject: RE: Recommendation for 1000BASE-SX card?


I think its often difficult to distinguish
between what is crappy, because good code can
make bad hardware look good and vice versa. All
ethernet controllers were designed by idiots. 

My first success story (now I don't want to let
on to who I really am so I'll be vague), was an
ISA card by a major vendor that locked up
regularly, and it had a hideous reputation as
being a bad card. It was the only card of its
kind, and I needed it badly. They gave me
schematics and said that they had tried and tried
but couldn't find anything wrong with the card.
They had contracted out to some brainfarm to
write a driver, and the thing was this beautiful
self-contained scheduler (this is like MSDOS 3
mind you) with documented source, the whole deal.
Well I tore it apart, simplified the code, got
rid of all the soft interrupt passes and cleaned
up all the memory management code. Now the card
worked like a charm, didn't lock up, ran better
than their spec and Mega-Billon$- company
couldn't believe that some 23yo kid wrote a
driver that a company they paid 100K to couldn't
get to work.


Musta been one of those Intel SatisFAXion cards. ;-)

My point is that until someone writes a really
good driver you never know if hardware is any
good or not. Now some  hardware is hopeless. I'm
not sure that the broadcom controllers are that
hopeless. But since the intel cards work well and
are cheap, who's going to spend the time to pour
over the broadcom driver and make it better?
There's a ton of I/Os in there that can be
streamlined. But who's gonna do it? Its sure not
worth my time.


Precisely!!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


mount windows xp

2006-06-03 Thread Tsu-Fan Cheng

hi,
 i have a problem when trying to mount windows xp disk, I have
freebsd6.1/amd64
on a SATA and wondows xp on a 80gb regular ATA disk separatly. I boot into
freebsd and under /dev, it shows:
ad0
ad0s1
ad4
ad4s1

...
ad0 is the win$$ disk and ad4 is fbsd disk. I use mount_msdosfs /dev/ad0s1
/mnt
it gives:
Invalid argument
i heard something about not being to mount a disk too big, so I put the
MSDOSFS_LARGE option in my kernel config, sitll no use. any idea??
thanks!!

TFC
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mount windows xp

2006-06-03 Thread Garrett Cooper

Tsu-Fan Cheng wrote:

hi,
 i have a problem when trying to mount windows xp disk, I have
freebsd6.1/amd64
on a SATA and wondows xp on a 80gb regular ATA disk separatly. I boot into
freebsd and under /dev, it shows:
ad0
ad0s1
ad4
ad4s1

...
ad0 is the win$$ disk and ad4 is fbsd disk. I use mount_msdosfs /dev/ad0s1
/mnt
it gives:
Invalid argument
i heard something about not being to mount a disk too big, so I put the
MSDOSFS_LARGE option in my kernel config, sitll no use. any idea??
thanks!!

TFC


Try building NTFS support into the kernel and then mount the drive using 
mount_ntfs.

-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Shared Memory?

2006-06-03 Thread Micah

B. Cook wrote:

Hello All,

I'm not a programmer and nor do I play one in real life.. :)

I've recently setup a DansGuardian box for someone and I had some 
interesting things happen.


When the box would get under load (500+ simultaneout connections) it 
would load up the cpu:


last pid: 69931;  load averages:  4.73,  3.56,  3.32  up 5+11:10:58
09:56:31
49 processes:  8 running, 41 sleeping

Mem: 157M Active, 202M Inact, 106M Wired, 20M Cache, 60M Buf, 8168K Free
Swap: 2048M Total, 32K Used, 2048M Free


   PID USERNAME  THR PRI NICE   SIZERES STATETIME   WCPU COMMAND
49814 guardian1 1200 85868K 85160K RUN  0:01 14.87% 
dansguardian
30132 guardian1 1200 85868K 85180K RUN  0:22 14.11% 
dansguardian
52245 guardian1 1190 85860K 85168K RUN  0:06 13.94% 
dansguardian
23445 guardian1 1200 85896K 85208K RUN  0:22 13.87% 
dansguardian


at this time there were 10 dansguardian processes running.  the default 
config suggests 120 to start off with.. (doing that crashed the box in 
about 5 minutes)


I found one thing that seemed to help:
kern.ipc.shm_use_phys=1

from man tuning.

after setting the sysctl value the system now looks like this:
last pid: 40265;  load averages:  0.29,  0.29,  0.27 
  up 
7+17:55:46  16:41:47

34 processes:  1 running, 33 sleeping
CPU states:  0.0% user,  0.0% nice,  0.7% system,  1.5% interrupt, 97.8% 
idle

Mem: 125M Active, 249M Inact, 98M Wired, 16M Cache, 60M Buf, 4392K Free
Swap: 2048M Total, 36K Used, 2048M Free

  PID USERNAME  THR PRI NICE   SIZERES STATETIME   WCPU COMMAND
 6266 guardian1  960 76116K 18004K select   0:05 12.54% 
dansguardian
  696 guardian1  960 76112K 16960K select   0:01  0.81% 
dansguardian
 8969 guardian1  960 76112K  6036K select   0:00  0.12% 
dansguardian

21017 squid   1  960 31228K 26684K select  41:52  0.00% squid

After searching I can't seem to find out when it's appropriate (or not) 
to set this and if anything else should be set in conjunction with it.


Other than the fact that this helped.. can anyone point me in a 
direction or tell me why it helped?


collecting pv entries -- suggest increasing PMAP_SHPGPERPROC
collecting pv entries -- suggest increasing PMAP_SHPGPERPROC

this error is what somewhat lead me to this discovery.  And in hoping to 
fix that it suggested recompling the kernel with those values changed.. 
NOTES tells me that that value is now 201, google has people with 
numbers all over the place.. and I still can't seem to figure out why 
they did it.


egrep -v # /etc/sysctl.conf

security.bsd.see_other_uids=0
net.inet.ip.forwarding=1
net.inet.ip.random_id=1
kern.randompid=1
kern.coredump=0

kern.ipc.shmmax=536870912
kern.ipc.shm_use_phys=1

This is a stock 6.1 GENERIC kernel

The box is a router for internet traffic that passes several gigs of 
data from about 2500+ users.


Its a small 866 w/ 512M of ram and as previously stated running 
DansGuardian (www/dansguardian) and squid (www/squid).


I've asked a few times for information on the DG list, but I guess it's 
mainly a linux only crowd as I did not hear anything back from anyone.


netstat -m
260/2155/2415 mbufs in use (current/cache/total)
258/1264/1522/17088 mbuf clusters in use (current/cache/total/max)
258/1210 mbuf+clusters out of packet secondary zone in use (current/cache)
0/0/0/0 4k (page size) jumbo clusters in use (current/cache/total/max)
0/0/0/0 9k jumbo clusters in use (current/cache/total/max)
0/0/0/0 16k jumbo clusters in use (current/cache/total/max)
581K/3066K/3647K bytes allocated to network (current/cache/total)
56061/494261/470674 requests for mbufs denied 
(mbufs/clusters/mbuf+clusters)

0/0/0 requests for jumbo clusters denied (4k/9k/16k)
0/9/4528 sfbufs in use (current/peak/max)
0 requests for sfbufs denied
0 requests for sfbufs delayed
12 requests for I/O initiated by sendfile
328 calls to protocol drain routines

They want me to move it a larger box just for the sake of putting it on 
a larger box.. (2.2G Xeon w/ 2G ram) but I'd like to tune it better.. as 
opposed to just throw hardware at it and hope for the best.


all data/packets passes over lo..

lo0   16384 127   127.0.0.1 57055828 - 33798613 - -

and the box so far has been up for 7 days.



Any information helping me understand this beast would be greatly 
appreciated.


- Brian


This thread talks a little bit about how to choose an appropriate size 
for PMAP_SHPGPERPROC in regards to Apache - it might be adapted to work 
with DG:

http://lists.freebsd.org/pipermail/freebsd-hackers/2003-May/000695.html

I snooped through the code a little, but am not familiar enough with 
FreeBSD's guts to understand what pv_entries are other than they have 
something to do with paged memory


Hope that link helps some,
Micah
___
freebsd-questions@freebsd.org mailing 

shmget: No space on device (sshit)

2006-06-03 Thread David King
I'm trying to use sshit.pl from /usr/ports/secrurity/sshit, and I'm  
having some trouble with it that I think may be a bug, or a mis- 
configuration on my part.


sshit is a Perl program that receives syslog messages (configured in  
syslog.conf) of the form '/failed .*from (\d+\.\d+\.\d+\.\d+) /i' to  
try to detect SSH brute-force attempts, and after X from the same IP  
address in Y minutes, it adds them to an IPFW2 table, which has a  
deny from rule that runs on it.


sshit seems to be not working (i.e. it's never adding IP addresses to  
the ipfw2 table I specified) and dumping many of the following  
messages to /var/log/messages:
May 31 10:03:03 melchoir syslogd: Logging subprocess 20716 (exec /usr/ 
local/sbin/sshit) exited with status 28.


This appears to be because of the following:
~# echo 'May 29 12:20:32 melchoir sshd[5707]: Failed password for  
illegal user user1 from 61.82.52.1 port 43282 ssh2' | sshit; echo  
Error: $?

IPC::Shareable::SharedMem: shmget: No space left on device
at /usr/local/lib/perl5/site_perl/5.8.8/IPC/Shareable.pm line 566
Could not create shared memory segment: No space left on device
at ./sshit line 295
Error: 28

As you can see, shmget seems to say that it cannot get a shared  
memory segment. However:


~% grep SYSV /usr/src/sys/i386/conf/ROUTERKERNEL
options SYSVSHM #SYSV-style shared memory
options SYSVMSG #SYSV-style message queues
options SYSVSEM #SYSV-style semaphores

~% top|grep ^Mem
Mem: 182M Active, 23M Inact, 71M Wired, 1540K Cache, 41M Buf, 28M Free

~% sysctl -a | grep ipc.*shm
kern.ipc.shmmax: 134217728
kern.ipc.shmmin: 1
kern.ipc.shmmni: 192
kern.ipc.shmseg: 128
kern.ipc.shmall: 8192
kern.ipc.shm_use_phys: 0
kern.ipc.shm_allow_removed: 0

(that is after I turned up shmmax)

Some more potentially useful information:

~% grep sshit.pl.*v[0-9] `which sshit`
#  sshit.pl  v0.5

~% uname -a
FreeBSD  5.3-RELEASE-p20 FreeBSD 5.3-RELEASE-p20 #2: Fri Sep  9  
14:11:12 PDT 2005 root@:/usr/obj/usr/src/sys/ROUTERKERNEL  i386


~% pkg_info | grep sshit
sshit-0.5   Checks for SSH/FTP bruteforce and blocks given IPs

~% perl -v
This is perl, v5.8.8 built for i386-freebsd-64int

If you have absolutely any idea, please let me know. I'm happy to do  
some more debugging if it helps


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


[HOWTO] IPFW: Vector-Based Modularity

2006-06-03 Thread Dennis Olvany

IPFW: Vector-Based Modularity
by Dennis Olvany


I. Vectors
II. Modules
III. Examples
a. Simple Firewall
b. Complex Firewall
IV. NAT
V. Tips
a. Storing Rules
b. Ruleset
VI. Resources


A strategy for easy administration, greater efficiency and heightened 
security.



I. Vectors

A vector consists of a physical or virtual interface and a direction, 
ingress or egress. For this purpose the local host should be considered 
an interface of its own in the form of the IPFW alias, me. For example, 
consider a machine with the following interfaces. These two interfaces 
plus the local host would constitute a total of six vectors. The 
loopback interface should be considered part of me.


fxp0-in
`out

ste0-in
`out

me-in
  `out


II. Modules

Each vector may be associated with a rule module or may be allowed to 
match the default rule. The IPFW ruleset begins with a series of skipto 
rules directing matching traffic to a rule module. The default rule is 
then placed before the rule modules, greatly reducing the iterations 
required to reach it. IPFW sets offer a method for working with groups 
of rules and make modules easier to discern.



III. Examples

a. Simple Firewall

The default rule, 400, may be reached in as little as four iterations. 
This ruleset may be easily altered to offer services. Use dynamic rules 
only where absolutely needed. Also, the use of setup should be avoided. 
This may cause broken connections in the event that a dynamic rule times 
out. Setup may serve to block perfectly legitimate ingress and egress 
traffic.


00100 set 0 check-state
00200 set 1 skipto 1 ip from me to any out
00300 set 2 skipto 15000 ip from any to me in
00400 set 0 deny ip from any to any
1 set 1 count ip from any to any
10100 set 1 allow ip from any to any keep-state
15000 set 2 count ip from any to any
15100 set 2 deny ip from me to any
15200 set 2 allow icmp from any to any
15300 set 2 deny ip from any to any
65535 set 31 deny ip from any to any

b. Complex Firewall

This router has a total of 18 vectors, of which eight are restricted. 
The remaining ten match the default rule, 1000. This firewall contains 
49 rules, but the default rule may be reached in as little as ten 
iterations. The longest possible iteration through this ruleset is a 
mere 18 rules.


Tuning this firewall is quite simple. Rules 200-300 and 400-900 may be 
shuffled so the most-matched rules come first. Be mindful that the me 
vectors must always come first. Groups of allow rules within the modules 
may also be shuffled for increased performance.


00100 set 0 check-state
00200 set 2 skipto 15000 ip from any to me in
00300 set 1 skipto 1 ip from me to any out
00400 set 8 skipto 45000 ip from any to any out via vlan5
00500 set 4 skipto 25000 ip from any to any in via vlan2
00600 set 6 skipto 35000 ip from any to any in via fxp0
00700 set 3 skipto 2 ip from any to any in via vlan3
00800 set 7 skipto 4 ip from any to any out via vlan3
00900 set 5 skipto 3 ip from any to any out via fxp0
01000 set 0 allow ip from any to any
1 set 1 count ip from any to any
10100 set 1 allow ip from any to any keep-state
15000 set 2 count ip from any to any
15100 set 2 deny ip from me to any
15200 set 2 allow udp from 195.16.84.250 to any frag
15300 set 2 allow tcp from any to any dst-port 22 via fxp0
15400 set 2 allow udp from any to any dst-port 123
15500 set 2 allow udp from any to any dst-port 514
15600 set 2 allow icmp from any to any
15700 set 2 deny ip from any to any
2 set 3 count ip from any to any
20100 set 3 allow tcp from not 192.168.101.2 to any dst-port 80,443
20200 set 3 allow not icmp from any to { 192.168.102.2 or dst-ip 
192.168.102.7 } dst-port 53

20300 set 3 allow udp from any to any dst-port 123
20400 set 3 allow icmp from any to any
20500 set 3 deny ip from any to any
25000 set 4 count ip from any to any
25100 set 4 deny tcp from any to not 192.168.102.2 dst-port 25
25200 set 4 allow ip from any to any
3 set 5 count ip from any to any
30100 set 5 allow tcp from any to 192.168.102.2 dst-port 
25,53,80,110,443,587

30200 set 5 allow udp from any to 192.168.102.2 dst-port 53
30300 set 5 allow tcp from any to 192.168.102.7 dst-port 25,53
30400 set 5 allow udp from any to 192.168.102.7 dst-port 53,123
30500 set 5 allow udp from any to 192.168.102.4 dst-port 123
30600 set 5 allow udp from any to 192.168.102.10 dst-port 1194
30700 set 5 allow icmp from any to any
30800 set 5 deny ip from any to any
35000 set 6 count ip from any to any
35100 set 6 deny tcp from not 192.168.102.7 to any dst-port 25
35200 set 6 allow ip from any to any keep-state
4 set 7 count ip from any to any
40100 set 7 allow udp from any 123 to 192.168.101.2
40200 set 7 deny not icmp from any to 192.168.101.0/24
40300 set 7 allow ip from any to any
45000 set 8 count ip from any to any
45100 set 8 deny not icmp from any to 192.168.103.0/24
45200 set 8 allow ip from any to any
65535 set 31 deny ip 

Re: sudoedit, restricting to particular folder

2006-06-03 Thread Lawrence Horvath

Well, the problem with that would be that we are editing about 4000
zone files(that includes forwards and reverses) so an entry for each
zone wouldnt do, that it why i was hoping to make it effective on a
whole folder, not just one file or two. I was considering a folder
permissions solution, that seems like it would work well i think, then
i could use sudo to resrict to only rndc and let them have group write
access on the zones folder, i think that would be better then
sudoedit.

On 6/2/06, N.J. Thomas [EMAIL PROTECTED] wrote:

* Lawrence Horvath [EMAIL PROTECTED] [2006-06-01 22:13:39 -0700]:
 well in that case what can uyou recommend for editing only zone files
 and being able to run rndc, that is my main  goal, i need to lock a
 system so that only rndc reload, rndc reconfig and editing zone
 files is possible by a group of users, any suggestins? and/or how do
 you do this?

Restricting a group of users to run only rndc reload and rndc
reconfig via sudo is trivial. sudoers(1) will explain how, and
the sudoers file that comes with sudo is chock full of examples.

Off the top of my head, you would do something like this:

User_Alias  DNSOPS= user1, user2, user3
Cmnd_Alias  DNSRELOAD = /usr/sbin/rndc reload
Cmnd_Alias  DNSRECONF = /usr/sbin/rndc reconfig
DNSOPS  ALL   = DNSRELOAD, DNSRECONF

Don't know if that parses properly, but you get the idea.

As far as editing only zone files, if you know the names of the files
that they need to edit, something like this is sufficient:

DNSOPS  ALL   = sudoedit /etc/named.conf
DNSOPS  ALL   = sudoedit /etc/rndc.conf
DNSOPS  ALL   = sudoedit /var/named/zone1
DNSOPS  ALL   = sudoedit /var/named/zone2

However, if your users need to be able to create/modify/rename files
under /var/named (as you mentioned in your OP), then you will need a
properly written wrapper script.

Thomas

--
N.J. Thomas
[EMAIL PROTECTED]
Etiamsi occiderit me, in ipso sperabo




--
-Lawrence
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]