date:20070109

Hi,

I'm trying to write an appropriate CPUTYPE entry for
/etc/make.conf for the following machine:

CPU: Intel(R) Pentium(R) 4 CPU 2.80GHz (2799.95-MHz 686-class CPU)
  Origin = GenuineIntel  Id = 0xf41  Stepping = 1
  Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,
  SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,
  DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE
  Features2=0x441dSSE3,RSVD2,MON,DS_CPL,CNTX-ID,b14
  Logical CPUs per core: 2

I've read the appropriate sections in the make.conf(5)
manpage, /usr/share/examples/etc/make.conf and even
/usr/share/mk/bsd.cpu.mk, but they don't really help.

So far I've been using CPUTYPE=pentium4, but I wonder
if nocona would be better, however I'm not sure if my
CPU above qualifies as a nocona one.  I think the main
difference is that nocona supports SSE3, and SSE3 is
indeed listed in the CPU features above, so ...

Does anybody know for sure?  Thank you very much in advance!

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

With sufficient thrust, pigs fly just fine.  However, this
is not necessarily a good idea.  It is hard to be sure where
they are going to land, and it could be dangerous sitting
under them as they fly overhead. -- RFC 1925
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Shell recommendations

Dak Ghatikachalam [EMAIL PROTECTED] wrote:
  I am using ksh93 shell as my login shell
  each and everytime
  
  I do set -o vi
  
  and perform some commands
  
  it simply dumps ksh93.core
   file and crashed whole terminal session,

If you can't solve your problem otherwise, I recommend
you install zsh (also from /usr/ports), and then make a
symlink zsh - ksh.  When zsh is invoked with the name
ksh, it emulates the behaviour of ksh.  I just tried it,
set -o vi, and it seems to work perfectly well.

(zsh also has a lot of additional features, far beyond
what you can do with ksh.)

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

Passwords are like underwear.  You don't share them,
you don't hang them on your monitor or under your keyboard,
you don't email them, or put them on a web site,
and you must change them very often.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Shell recommendations

Oliver Fromme wrote:
  If you can't solve your problem otherwise, I recommend
  you install zsh (also from /usr/ports), and then make a
  symlink zsh - ksh.

I'm sorry, that should be the other way round, of course,
the symlink must be ksh - zsh (i.e. ln -s zsh ksh).

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

PI:
int f[9814],b,c=9814,g,i;long a=1e4,d,e,h;
main(){for(;b=c,c-=14;i=printf(%04d,e+d/a),e=d%a)
while(g=--b*2)d=h*b+a*(i?f[b]:a/5),h=d/--g,f[b]=d%g;}
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

libkrb5.so.8 - missing

2007-01-09 Thread Vizion

Hi

Can someone please tell me what package installs libkrb5.so.8 for 
FREEBSD-6.1-RELEASE #0?

Thanks in advance

David

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Using IPFW to bypass hotmail.com

2007-01-09 Thread Tek Bahadur Limbu

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Dear All,

I run a transparent squid proxy using IPFW below:

ipfw -q add allow tcp  from 192.168.55.0/24 to any  3128 in via bge0

Now I want the IP: 192.168.55.22 to bypass Squid when requesting
www.hotmail.com.

How do I go about doing this using IPFW? Can somebody shed some light
on this issue?

Thanks.


- -- 


With best regards and good wishes,

Yours sincerely,

Tek Bahadur Limbu

(TAG/TDG Group)
Jwl Systems Department

Worldlink Communications Pvt. Ltd.

Jawalakhel, Nepal
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (FreeBSD)

iD8DBQFFo3IGVrOl+eVhOvYRAliLAJsEHVzJ/5517Jh4VO89dncftAU6GACgqsXo
cBxfF4URRL+dh5jiqaxZQAE=
=KwVZ
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: libkrb5.so.8 - missing

2007-01-09 Thread Vizion

 -Original Message-
 From: Niclas Zeising [mailto:[EMAIL PROTECTED] 
 Sent: Tuesday, January 09, 2007 2:41 AM
 To: Vizion
 Cc: freebsd-questions@freebsd.org
 Subject: Re: libkrb5.so.8 - missing

 On 1/9/07, Vizion [EMAIL PROTECTED] wrote:
  Hi

  Can someone please tell me what package installs 
 libkrb5.so.8 for FREEBSD-6.1-RELEASE #0?

  Thanks in advance

  David

 It's kerberos5. If i remember correctly it's installed by default if
 you havent added NO_KERBEROS to make.conf, see make.conf(5)

Umph well somehow I have lost libkrb5.so.8.

Any idea of correct way to re-install?

Thanks
david

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: libkrb5.so.8 - missing

2007-01-09 Thread Niclas Zeising


On 1/9/07, Vizion [EMAIL PROTECTED] wrote:

Hi

Can someone please tell me what package installs libkrb5.so.8 for 
FREEBSD-6.1-RELEASE #0?

Thanks in advance

David


It's kerberos5. If i remember correctly it's installed by default if
you havent added NO_KERBEROS to make.conf, see make.conf(5)

HTH
//Niclas
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: libkrb5.so.8 - missing

2007-01-09 Thread Niclas Zeising

On 1/9/07, Vizion [EMAIL PROTECTED] wrote:

 -Original Message-
 From: Niclas Zeising [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, January 09, 2007 2:41 AM
 To: Vizion
 Cc: freebsd-questions@freebsd.org
 Subject: Re: libkrb5.so.8 - missing

 On 1/9/07, Vizion [EMAIL PROTECTED] wrote:
  Hi

  Can someone please tell me what package installs
 libkrb5.so.8 for FREEBSD-6.1-RELEASE #0?

  Thanks in advance

  David

 It's kerberos5. If i remember correctly it's installed by default if
 you havent added NO_KERBEROS to make.conf, see make.conf(5)

Umph well somehow I have lost libkrb5.so.8.

Any idea of correct way to re-install?

Thanks
david

The best way is to rebuild the entire FreeBSD world + maybe kernel.
See http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html
and http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html
For documentation on how to to that.  You can also try to only rebuild
the kerberos5 part of the soruce tree, but that's not supported and
might not work.

HTH
//Niclas
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

CLI to migrate WMA files to MP3

2007-01-09 Thread bsd


Hello,

I have 1200 files to migrate from WMA to MP3, I was wondering if you  
knew any Command Line Interface (aka program !) that will handle the  
task smoothly.



Sincerly your.


«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§

Gregober --- PGP ID -- 0x1BA3C2FD
bsd @at@ todoo.biz

«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§


P Please consider your environmental responsibility before printing  
this e-mail



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: CLI to migrate WMA files to MP3

2007-01-09 Thread Andrew Pantyukhin


On 1/9/07, bsd [EMAIL PROTECTED] wrote:

Hello,

I have 1200 files to migrate from WMA to MP3, I was wondering if you
knew any Command Line Interface (aka program !) that will handle the
task smoothly.


audio/pacpl
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

diablo-jdk 1.5.0 problem

2007-01-09 Thread scaligeracarni

I made :
pkg_add diablo-jdk-freebsd6.i386.1.5.0.07.01.tbz

on a freebsd 6.1 but when I try to run java the computer say that I need 
libz.so.2!
How can resolve my problem?


--
Passa a Infostrada. ADSL e Telefono senza limiti e senza canone Telecom
http://click.libero.it/infostrada09gen07


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Nmap Scan from FreeBSD OS - Coding Question

2007-01-09 Thread linux quest

I am currently doing a simple penetration testing for my company in a LAN 
environment. Yes, I have already downloaded NMap by using the 'make install' 
command... and it did fetched the required files from insecure.org successfully.

My question will be, how can I create a Network Program in .c that will invoke 
the nmap capabilities to scan the network or computers? Example, lets say, I 
want an automated nmap scan to run on FreeBSD to scan 192.168.1.10 and 
192.168.1.11 , every morning at 10am - may I know how do I achieve that? I hope 
someone can show me a simple coding to invoke nmap scan, thanks :)

Thanks :)

Regards,
Linux Quest

 __
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Nmap Scan from FreeBSD OS - Coding Question

2007-01-09 Thread Vince

linux quest wrote:
 I am currently doing a simple penetration testing for my company in a LAN 
 environment. Yes, I have already downloaded NMap by using the 'make install' 
 command... and it did fetched the required files from insecure.org 
 successfully.
 
 My question will be, how can I create a Network Program in .c that will 
 invoke the
nmap capabilities to scan the network or computers? Example, lets say, I
want an automated nmap scan to run on FreeBSD to scan 192.168.1.10 and
192.168.1.11 , every morning at 10am - may I know how do I achieve that?
I hope someone can show me a simple coding to invoke nmap scan, thanks :)
 
you dont really need c for this, a simple shell script run from cron
would do fine.
something like
===start==
#!/bin/sh

TARGETS=192.168.1.10 192.168.1.11
NMAP=/usr/local/bin/nmap
NMAPOPTIONS=
RECEPIENTS=[EMAIL PROTECTED]
SUBJECT=namp scan results

$NMAP $NMAPOPTIONS $TARGETS | /usr/bin/mail -s $SUBJECT $RECEPIENTS
===end=
save that somewhere and remember to chmod it to be executable



add a line like
1   10   *   *   * /path/to/script

to the appropriate users crontab
(change /path/to/script to the location of the script)

and you should get the output emailed to you every morning.

Vince
 Thanks :)
 
 Regards,
 Linux Quest
 
  __
 Do You Yahoo!?
 Tired of spam?  Yahoo! Mail has the best spam protection around 
 http://mail.yahoo.com 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Nmap Scan from FreeBSD OS - Coding Question

2007-01-09 Thread Bill Moran

In response to linux quest [EMAIL PROTECTED]:

 I am currently doing a simple penetration testing for my company in a LAN
 environment. Yes, I have already downloaded NMap by using the 'make install'
 command... and it did fetched the required files from insecure.org
 successfully.
 
 My question will be, how can I create a Network Program in .c that will
 invoke the nmap capabilities to scan the network or computers? Example,
 lets say, I want an automated nmap scan to run on FreeBSD to scan
 192.168.1.10 and 192.168.1.11 , every morning at 10am - may I know how
 do I achieve that? I hope someone can show me a simple coding to invoke
 nmap scan, thanks :)

[Please wrap your lines around 72 chars or so]

It seems to me that C would be overkill for such a task.  You could easily
use cron + a shell/perl/python/etc script to get the task done.

-- 
Bill Moran
Collaborative Fusion Inc.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: iSCSI

2007-01-09 Thread DAve


John Nielsen wrote:

On Monday 08 January 2007 14:52, DAve wrote:

We are moving to SAN in the near future to resolve a host of issues. I
have been looking through archives for information on FreeBSD and iSCSI
without much success.

We currently have 15 servers running FreeBSD and several more in the
queue/on order. It is looking like FreeBSD may not provide the
production level of iSCSI initiator we will require. (The iSCSI target
host will be a third party vendor)

I am sending a request for information to the project lead but I am also
interested in knowing if anyone is currently using any iSCSI with
FreeBSD and what your success failures might be.


I just started using the latest iSCSI initiator[1] on my 6-STABLE desktop to 
access some volumes on a LeftHand Networks SAN. It's a bit lacking in polish, 
but it works quite well. The one big missing feature is that it doesn't 
handle network disconnections. No panics or anything though, and performance 
was what I expected.


I'd be interested in what Danny tells you about the initiator's readiness for 
production use, but in any case you'll probably just have to do some 
stability and stress testing on your own.


[1] ftp://ftp.cs.huji.ac.il/users/danny/freebsd/iscsi-17.5.tar.bz2

JN


The developers response, for those who are interested.

hi Dave,
the initiator for iSCSI will hit stable/current real soon now.
that was the good news, now for the down side:
what was missing all along was recovery from network disconnects, so
while I think I have it almost worked out, I've come across a major
flow in the iscsi design:
when the targets crashes, and comes back, there is no way
to tell the client to run an fsck. This is not a problem if the client
is mounting the iscsi partition read only.

danny


Thanks everyone who responded on and off list to me.

DAve


--
Three years now I've asked Google why they don't have a
logo change for Memorial Day. Why do they choose to do logos
for other non-international holidays, but nothing for
Veterans?

Maybe they forgot who made that choice possible.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Automatically get nameservers

2007-01-09 Thread George Vanev


I have a FreeBSD 6.1 box for a gateway.
It connects to ISP via pppoe.
In /etc/ppp/ppp.conf i have this line:
enable dns
so I have the necessery nameserver-s in /etc/resolv.conf
So far, so good...
I want Windows client machines, connected to the FreeBSD box
to get the nameservers automatically.
Can you tell me how this may be done?!
Regerds
--
George Vanev
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Using IPFW to bypass hotmail.com

Tek Bahadur Limbu wrote:
  I run a transparent squid proxy using IPFW below:
  
  ipfw -q add allow tcp  from 192.168.55.0/24 to any  3128 in via bge0

That's not the rule for transparent proxying.  For that you
need a forward (or fwd) rule, not an allow rule.
(Of course, the allow rule above might still be needed,
but it's not the one that actually enables the transparent
proxying).

  Now I want the IP: 192.168.55.22 to bypass Squid when requesting
  www.hotmail.com.
  
  How do I go about doing this using IPFW? Can somebody shed some light
  on this issue?

Simply add an allow rule for that IP, and place it
_before_ the forward (or fwd) rule in your rule set:

allow tcp from 192.168.55.22 to www.hotmail.com

Note that the hostname is not resolved dynamically, but
at the time the rule is added to teh rule set.

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

To this day, many C programmers believe that 'strong typing'
just means pounding extra hard on the keyboard.
-- Peter van der Linden
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: diablo-jdk 1.5.0 problem

scaligeracarni wrote:
  I made :
  pkg_add diablo-jdk-freebsd6.i386.1.5.0.07.01.tbz
  
  on a freebsd 6.1 but when I try to run java the computer say that I need 
  libz.so.2!
  How can resolve my problem?

Install the compat5x package.

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

(On the statement print 42 monkeys + 1 snake:)  By the way,
both perl and Python get this wrong.  Perl gives 43 and Python
gives 42 monkeys1 snake, when the answer is clearly 41 monkeys
and 1 fat snake.-- Jim Fulton
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FreeBSD File System, please help

On Tuesday 09 January 2007 2:34 am, you wrote:

 No idea.  There is no manpage for getent on my (6.1) system, so
 I don't know what it might do.

Maybe it's new (to FreeBSD) as per 6.2.  Anyway:

---

SYNOPSIS
 getent database [key ...]

DESCRIPTION
 The getent program retrieves and displays entries from the 
administrative
 database specified by database, using the lookup order specified in
 nsswitch.conf(5).  The display format for a given database is as per 
the
 ``traditional'' file format for that database.

---

Example:

$ getent passwd
root:*:0:0:System Administrator:/root:/usr/local/bin/zsh
rootcsh:*:0:0:Charlie :/root:/bin/csh
daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologin
operator:*:2:5:System :/:/usr/sbin/nologin
bin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologin

This has the huge benefit of fully supporting nsswitch, so the same command 
fetches *all* of your accounts, including those in NIS/YP and LDAP.
-- 
Kirk Strauser


pgpmUi8ThFRJB.pgp
Description: PGP signature

Re: Automatically get nameservers

On Tuesday 09 January 2007 7:56 am, George Vanev wrote:

 I want Windows client machines, connected to the FreeBSD box
 to get the nameservers automatically.
 Can you tell me how this may be done?!
 Regerds

I think the best solution would be to configure the FreeBSD box as a caching 
nameserver, then point all your windows boxes to it.
-- 
Kirk Strauser


pgpybxNBkjGze.pgp
Description: PGP signature

Re: Automatically get nameservers

George Vanev wrote:
  I have a FreeBSD 6.1 box for a gateway.
  It connects to ISP via pppoe.
  In /etc/ppp/ppp.conf i have this line:
  enable dns
  so I have the necessery nameserver-s in /etc/resolv.conf
  So far, so good...
  I want Windows client machines, connected to the FreeBSD box
  to get the nameservers automatically.
  Can you tell me how this may be done?!

There are several ways to do it.

Personally I have simply set up an own nameserver on the
FreeBSD machine (just named_enable=YES in /etc/rc.conf)
and enabled forward only in /etc/namedb/named.conf.
Then I wrote a small /etc/ppp/ppp.linkup script that
writes the nameserver addresses into forwarders entries
in /etc/namedb/named.conf and restarts the named process
(/etc/rc.d/named restart).  That's it.

If your ISP's nameservers never change (mine never did),
you can probably also just hardcode them.  :-)

Another option, if you don't absolutely have to use your
ISP's nameservers for some reason, then you can also just
ignore them, i.e. letting your own nameserver resolve
everything itself, without forwarding.  (Of course that's
not possible if your ISP blocks port 53.)

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

Python tricks is a tough one, cuz the language is so clean. E.g.,
C makes an art of confusing pointers with arrays and strings, which
leads to lotsa neat pointer tricks; APL mistakes everything for an
array, leading to neat one-liners; and Perl confuses everything
period, making each line a joyous adventure wink.
-- Tim Peters
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

NMap Installation Problem ...

2007-01-09 Thread linux quest

After running nmap for some time, I have got problem running a simple command 
of nmap ... like 

nmap 192.168.1.2
nmap: Command not found

I think there is something wrong with my installation procedures. I type in 
make install clean command in /usr/local/bin/nmap and 
/usr/ports/security/nmap - but somehow I still see the command not found 
message.

I have also typed in make deinstall clean on both of the directory location, 
restart the OS, and install everything again using the make install clean 
command (on both of the directory location) - but I still receive the same 
nmap: Command not found message. 

Thanks for the help :)

Regards,
Linux Quest
 __
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

arplookup 192.168.1.254 failed: host is not on local network

2007-01-09 Thread Taharni Duggan

how do i host custom game on warcraft 3
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Automatically get nameservers

2007-01-09 Thread Nathan Vidican


George Vanev wrote:

I have a FreeBSD 6.1 box for a gateway.
It connects to ISP via pppoe.
In /etc/ppp/ppp.conf i have this line:
enable dns
so I have the necessery nameserver-s in /etc/resolv.conf
So far, so good...
I want Windows client machines, connected to the FreeBSD box
to get the nameservers automatically.
Can you tell me how this may be done?!
Regerds
I think what you're looking for is DHCP, (Dynamic Host Configuration 
Protocol), which will enable you to serve your windows clients on the 
network with all of their network configuration, including but not 
limited to: ip address, gateway, subnet mask, dns servers, netbios name 
servers, etc. You can install a dhcpd server from within the ports 
collection, or via package if you'd prefer. A DHCP server will allow the 
FreeBSD machine you've setup as an internet gateway to act almost 
identically to the commercially available dsl/cable routers. I'd suggest 
isc-dhcp3-server, available in the ports collection under the 'net' 
category, you can install using the following commands on a = 
6.1-RELEASE machine, (assuming you have the ports collection installed):


cd /usr/ports/net/isc-dhcp3-server/  make install

cp /usr/local/etc/dhcpd.conf.sample /usr/local/etc/dhcpd.conf  vi 
/usr/local/etc/dhcpd.conf


mv /usr/local/etc/rc.d/isc-dhcpd /usr/local/etc/rc.d/isc-dhcpd.sh

echo 'dhcpd_enable=YES'  /etc/rc.conf

sh /usr/local/etc/rc.d/isc-dhcpd.sh start

Good-luck, read up and come back with any further questions if need be, 
but it seems like DHCP will solve your problem adequately. All you'll 
have to do from the windows machines, is set them to automatically 
configure themselves via DHCP (which is the default setting).


--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmptl.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

User Security Question?

2007-01-09 Thread VeeJay


Hello Friends

Just had a debate with a collegue at office, but still lack knowledge on
FreeBSD security :(


I have few questions.

1. What previligies a standard user (NOT member of Wheel Group) has on a
FreeBSD Box?

2. How can he/she damages the systems or make a breach?

3. If that particular user is willing to damage the FreeBSD box,
so which locations OR files are more likely to be damaged or affected?

4. How dangerous a Standard User could be to a FreeBSD box?

5. What sort of possible methods he/she can apply to hack the system and
create a breach into the system?

6. How can we check that if a system is affected by a Bad User?

I would really appreciate your comments in this regard

Cheers!!!
--
Thanks!

BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: NMap Installation Problem ...

2007-01-09 Thread Niclas Zeising


On 1/9/07, linux quest [EMAIL PROTECTED] wrote:

After running nmap for some time, I have got problem running a simple command 
of nmap ... like

nmap 192.168.1.2
nmap: Command not found

I think there is something wrong with my installation procedures. I type in make install 
clean command in /usr/local/bin/nmap and /usr/ports/security/nmap - but somehow I still see 
the command not found message.

I have also typed in make deinstall clean on both of the directory location, restart the OS, and 
install everything again using the make install clean command (on both of the directory location) 
- but I still receive the same nmap: Command not found message.

Thanks for the help :)

Regards,
Linux Quest
 __


Have you tried running rehash after the install? If you're using
[t]csh this is nessesary to make the shell discover new commands.
You only need to do make install clean in ports/security/nmap, not
in local/bin/nmap.
HTH
//Niclas
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

CLI to migrate WMA files to MP3

2007-01-09 Thread Robert Huff

bsd writes:

  I have 1200 files to migrate from WMA to MP3, I was wondering if
  you knew any Command Line Interface (aka program !) that will
  handle the task smoothly.

audio/sox?


Robert Huff
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Vivitar USB camera support

2007-01-09 Thread Lowell Gilbert

[EMAIL PROTECTED] writes:

 Does anyone happen to know where I would find a how-to for downloading
 and displaying images from a Vivitar ViviCam 3825?  I see several
 digital-camera utilities of one sort or another in the ports, but
 none whose index entry mentions Vivitar.

That camera seems to support umass(4), so just plug it in and use it
like a USB hard drive...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

isatap on freebsd

2007-01-09 Thread anto jayanto


I try to implement ipv6/ipv4 tunneling using ISATAP,but its was not  
sucecssfull, when i re-compile my kernel using pseudo-device ist, and 
error,if kernel can not know pseudo-device ist.
any one can help me?


i try to follow mr suzzuki paper at http://www.kame.net/newsletter/20041201/


 __
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Automatically get nameservers

2007-01-09 Thread Peter Nyamukusa

On Tuesday 09 January 2007 16:38, Kirk Strauser wrote:
 On Tuesday 09 January 2007 7:56 am, George Vanev wrote:
  I want Windows client machines, connected to the FreeBSD box
  to get the nameservers automatically.
  Can you tell me how this may be done?!
  Regerds

 I think the best solution would be to configure the FreeBSD box as a
 caching nameserver, then point all your windows boxes to it.

I think you will need to have DHCP running in your network as DHCP is the only 
way to automatically get nameservers regardless of the OS you are using

Hope this helps

Regards
-- 
Peter Nyamukusa
Systems Administrator
Africa Online Zimbabwe
Tel:    +263-4-250890
Fax:    +263-4-702203
E-mail: [EMAIL PROTECTED]
AIM:   petenya
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FreeBSD 3.4 / 4.5 - 2007 DST Changes

2007-01-09 Thread Lowell Gilbert

Cormany, Adam [EMAIL PROTECTED] writes:

 We have a few older FreeBSD systems running 3.4 and 4.5. Are there
 patches for the 2007 daylight savings time US change for these FreeBSD
 versions? If so, where can I find them?

http://www.freebsd.org/cgi/cvsweb.cgi/src/share/zoneinfo/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

isatap on freebsd

2007-01-09 Thread anto jayanto


I try to implement ipv6/ipv4 tunneling using ISATAP,but its was not  
sucecssfull, when i re-compile my kernel using pseudo-device ist, and 
error,if kernel can not know pseudo-device ist.
any one can help me?


i try to follow mr suzzuki paper at http://www.kame.net/newsletter/20041201/

 
 __
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: NMap Installation Problem - Thanks for the coding help :)

2007-01-09 Thread Vince

Hmm you shouldnt have a /usr/local/bin/nmap/ directory.
whats the output of
ls -l /usr/local/bin/nmap

if it is a directory delete the directory, then try
cd /usr/ports/security/nmap
make deinstall clean
make install clean

which nmap


cheers,
Vince

linux quest wrote:
 Hi Vince,
 
 Thanks for the automated emailing code guide. However, after running
 nmap for some time, I have got problem running a simple command of nmap
 ... like
 
 nmap 192.168.1.2
 nmap: Command not found
 
 I think there is something wrong with my installation procedures. I type
 in make install clean command in /usr/local/bin/nmap and
 /usr/ports/security/nmap - but somehow I still see the command not found.
 
 I have also typed in make deinstall clean on both of the directory
 location, restart the OS, and install everything again using the make
 install clean command (on both of the directory location) - but I still
 receive the same nmap: Command not found message.
 
 Thanks for the help :)
 
 Regards,
 Linux Quest
 
 */Vince [EMAIL PROTECTED]/* wrote:
 
 linux quest wrote:
  I am currently doing a simple penetration testing for my company
 in a LAN environment. Yes, I have already downloaded NMap by using
 the 'make install' command... and it did fetched the required files
 from insecure.org successfully.
 
  My question will be, how can I create a Network Program in .c that
 will invoke the
 nmap capabilities to scan the network or computers? Example, lets say, I
 want an automated nmap scan to run on FreeBSD to scan 192.168.1.10 and
 192.168.1.11 , every morning at 10am - may I know how do I achieve that?
 I hope someone can show me a simple coding to invoke nmap scan,
 thanks :)
 
 you dont really need c for this, a simple shell script run from cron
 would do fine.
 something like
 ===start==
 #!/bin/sh
 
 TARGETS=192.168.1.10 192.168.1.11
 NMAP=/usr/local/bin/nmap
 NMAPOPTIONS=
 RECEPIENTS=[EMAIL PROTECTED]
 SUBJECT=namp scan results
 
 $NMAP $NMAPOPTIONS $TARGETS | /usr/bin/mail -s $SUBJECT $RECEPIENTS
 ===end=
 save that somewhere and remember to chmod it to be executable
 
 
 
 add a line like
 1 10 * * * /path/to/script
 
 to the appropriate users crontab
 (change /path/to/script to the location of the script)
 
 and you should get the output emailed to you every morning.
 
 Vince
  Thanks :)
 
  Regards,
  Linux Quest
 
  __
  Do You Yahoo!?
  Tired of spam? Yahoo! Mail has the best spam protection around
  http://mail.yahoo.com
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to
 [EMAIL PROTECTED]
 
 
 __
 Do You Yahoo!?
 Tired of spam? Yahoo! Mail has the best spam protection around
 http://mail.yahoo.com
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Automatically get nameservers

Peter Nyamukusa wrote:
  Kirk Strauser wrote:
   George Vanev wrote:
I want Windows client machines, connected to the FreeBSD box
to get the nameservers automatically.
Can you tell me how this may be done?!
Regerds
   
   I think the best solution would be to configure the FreeBSD box as a
   caching nameserver, then point all your windows boxes to it.
  
  I think you will need to have DHCP running in your network as DHCP is the 
  only 
  way to automatically get nameservers regardless of the OS you are using

No, you don't need DHCP in the case George described.
As Kirk explained you can simply set up a name server
on the FreeBSD machine (just one line in /etc/rc.conf),
then let the Windows machines use that name server.
No DHCP required at all.

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

I suggested holding a Python Object Oriented Programming Seminar,
but the acronym was unpopular.
-- Joseph Strout
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: User Security Question?

VeeJay [EMAIL PROTECTED] wrote:
  Just had a debate with a collegue at office, but still lack knowledge on
  FreeBSD security :(

For a start, I recommend you read the security(7) manual
page.  It should give at least rough answer to most of
your questions.  Another good reading is chapter 14 of
the FreeBSD Handbook, titled Security.

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

  Can the denizens of this group enlighten me about what the
  advantages of Python are, versus Perl ?
python is more likely to pass unharmed through your spelling
checker than perl.
-- An unknown poster and Fredrik Lundh
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Automatically get nameservers

2007-01-09 Thread David Kelly

On Tue, Jan 09, 2007 at 04:57:31PM +0100, Oliver Fromme wrote:
 Peter Nyamukusa wrote:
   Kirk Strauser wrote:
George Vanev wrote:
 I want Windows client machines, connected to the FreeBSD box
 to get the nameservers automatically.
 Can you tell me how this may be done?!
 Regerds

I think the best solution would be to configure the FreeBSD box as a
caching nameserver, then point all your windows boxes to it.
   
   I think you will need to have DHCP running in your network as DHCP is the 
 only 
   way to automatically get nameservers regardless of the OS you are using
 
 No, you don't need DHCP in the case George described.
 As Kirk explained you can simply set up a name server
 on the FreeBSD machine (just one line in /etc/rc.conf),
 then let the Windows machines use that name server.
 No DHCP required at all.

But for the Windows machines to get the nameservers automatically one
has to set up DHCP somewhere. On the FreeBSD machine. Or on a SOHO
router. Somewhere. It Just So Happens(sm) that if you do this the
Windows machines will also get IP addresses automatically.

The problem gets a little harder if you do not want just anyone who
connects to your network to be given an address.

-- 
David Kelly N4HHE, [EMAIL PROTECTED]

Whom computers would destroy, they must first drive mad.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

make.conf and building multiple kernels and worlds

2007-01-09 Thread Jonathan Horne

i am finally looking at make.conf and how editing it could improve my
system(s).

1) does specifying a cpu architecture really help?
2) if i am building for a p4-540 (nacona?), a p3, and a p4-xeon, what
problems am i setting myself up for by specifying a cpu type on my build
box?

at this point, im wondering how to go about building for more than one
architecture effectively.  right now, i build one world, and 3 different
kernels, but they are all build with generic options.

just wondering how i can effectivly leverage my build server to have the
best compile options for my target boxes.

any suggestions?

thanks,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Automatically get nameservers

David Kelly wrote:
  Oliver Fromme wrote:
   Peter Nyamukusa wrote:
Kirk Strauser wrote:
 George Vanev wrote:
  I want Windows client machines, connected to the FreeBSD box
  to get the nameservers automatically.
  Can you tell me how this may be done?!
  Regerds
 
 I think the best solution would be to configure the FreeBSD box as a
 caching nameserver, then point all your windows boxes to it.

I think you will need to have DHCP running in your network as DHCP is 
the only 
way to automatically get nameservers regardless of the OS you are using
   
   No, you don't need DHCP in the case George described.
   As Kirk explained you can simply set up a name server
   on the FreeBSD machine (just one line in /etc/rc.conf),
   then let the Windows machines use that name server.
   No DHCP required at all.
  
  But for the Windows machines to get the nameservers automatically one
  has to set up DHCP somewhere. On the FreeBSD machine. Or on a SOHO
  router. Somewhere.

No, the FreeBSD machine (which acts as a PPPoE client)
already receives the addresses of the name servers via
the PPP protocol.  There's really no need for DHCP.

I have exactly that setup at home, and I definitely do
not use DHCP.

Best regards
   Oliver

-- 
Oliver Fromme,  secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing
Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
Any opinions expressed in this message may be personal to the author
and may not necessarily reflect the opinions of secnetix in any way.

One of the main causes of the fall of the Roman Empire was that,
lacking zero, they had no way to indicate successful termination
of their C programs.
-- Robert Firth
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

6.1 to 6.2-RC2: iwi-firmware-kmod and monitor/ibbs

2007-01-09 Thread Jan Henrik Sylvester

I could not find documentation about iwi-firmware-kmod and things do not 
work the way I expect them. If this is not the right place to ask this 
question, please, point me to an appropriate mailing list or forum.


How do I use the ibbs and monitor mode with iwi-firmware-kmod (6.2-RC2)?

If I try to go to mediaopt ibbs, I always get Device not configured.

I would like to use kismet. My configuration file, which seemed to work 
with iwi-firmware (6.1), contains 
source=radiotap_bsd_b,iwi0,iwikismet. I only ever got a few packages 
with iwi-firmware (6.1), before it stopped working and sometimes 
crashed. With iwi-firmware-kmod (6.2-RC2), Kismet always immediately 
stops with a FATAL error, seemingly because promiscuous mode is not 
available.


If I manually load iwi_monitor, dmesg gives me
  firmware_get: failed to load firmware image iwi_monitor
  iwi0: could not load firmware
  iwi0: promiscuous mode disabled
-- I guess I should not do that. Without manually loading iwi_monitor, I get
  iwi0: could not allocate firmware DMA memory
  iwi0: promiscuous mode disabled
-- something seems to be wrong here, too.

How are ibbs and monitor supposed to work? Should I manually load the 
firmware or not? How do I invoke ibbs at all?


Trying to switch between bbs, ibbs, and monitor, I noticed a few oddities:

janh# ifconfig iwi0 down
janh# ifconfig iwi0 mediaopt ibbs
ifconfig: SIOCSIFMEDIA (media): Device not configured
janh# ifconfig iwi0 mediaopt monitor
janh# ifconfig iwi0 mediaopt bbs
ifconfig: SIOCSIFMEDIA (media): Device not configured
janh# ifconfig iwi0 -mediaopt monitor
janh# kldstat | grep iwi
301 0xc383a000 d000 if_iwi.ko
janh# kldload iwi_monitor
janh# kldstat | grep iwi
301 0xc383a000 d000 if_iwi.ko
321 0xc4843000 2f000iwi_monitor.ko
janh# kldunload iwi_monitor
janh# kldstat | grep iwi
301 0xc383a000 d000 if_iwi.ko
janh# kldload iwi_bbs
kldload: can't load iwi_bbs: No such file or directory
janh# kldload iwi_ibbs
kldload: can't load iwi_ibbs: No such file or directory
janh# ls /boot/modules
iwi_bss.ko  iwi_ibss.ko iwi_monitor.ko  kqemu.kolinker.hints

Something is wrong here, I guess.

With iwi-firmware (6.1), I used to load the required firmware with 
iwicontrol and set the mediaopt with ifconfig. Many reboots were 
required to get back to a defined state. I had many crashes using 
ifconfig iwi0 [...] even without ibbs or monitor mode involved. With 
iwi-firmware-kmod (6.2-RC2), I had not a single crash, but sometimes 
lost the bbs connection for a few seconds and I could not get ibbs and 
monitor to work at all. I guess it is an improvement (stability over 
functionality).


Oh, btw, is there any way to check the status of the radio button as 
with iwicontrol iwi0 -r on 6.1? A change usually shows up at dmesg, 
but I would like to get the current state.


Thanks
Jan Henrik
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Automatically get nameservers

On Tuesday 09 January 2007 9:28 am, Peter Nyamukusa wrote:

 I think you will need to have DHCP running in your network as DHCP is the
 only way to automatically get nameservers regardless of the OS you are
 using

Depends on how many clients you're setting up.  If there are only a handful, 
just hardcode them and be done with it.
-- 
Kirk Strauser


pgpzdoZYEJajd.pgp
Description: PGP signature

Re: Adduser utility to generate random passwds ?

2007-01-09 Thread Michael


Frank Bonnet wrote:

Hello

Is there a possibility to use as a standalone software
the adduser feature that generate random passwd.

I want to generate new strong password for existing users.

Thank you

Frank
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


Another good choice for separate password generation is apg which is 
also in the ports.  What I like about apg is that it also provides a 
basic phonic for each password you can generate that helps you to 
remember your password.  As you may already know, having completely 
ambiguous random passwords isn't necessarily the best thing to use since 
most users will tend to write them down on paper somewhere and defeat 
the real purpose for generating good secure passwords in the first place.


Here is a small script that can generate these passwords via a web 
interface which is quite nice.  It does require that you have a ksh 
shell however since it was written with this shell in mind.


#!/usr/local/bin/ksh93

PATH=/bin:/user/bin:/usr/local/bin:/; export PATH
umask 077

a=/tmp/apg.$RANDOM
b=/tmp/apg.$RAMDOM

cat  EOF
Content-type: text/html

!DOCTYPE html PUBLIC -//IETF//DTD HTML 2.0//EN
 html
   head
   titleHelp generating a new password/title
   /head

   body
   h3Help generating a new password/h3

   blockquote
   These passwords should be reasonably safe.
   Feel free to use one, or reload the page
   for a new batch./p
   /blockquote pre font size=+1
EOF

apg -q -m 4 -x 4 -M NC -E '[EMAIL PROTECTED]*()\\' -n 10  $a
apg -q -m 4 -x 4 -M S  -E '[EMAIL PROTECTED]*()\\' -n 10  $b

# tr command is for bug workaround; apg is not supposed to
# include characters specified after -E option

paste $a $b |   
   tr 'l' 'L' |

   awk '
 BEGIN {
   printf Password\tRough guess at pronunciation\nhr /
   }
   {
   printf %s%s\t%s %s\n, $1, $3, $2, $4
   }'

cat  EOF
   /font
   /pre
   /blockquote
   /blockquote
   hr /
   /body
 /html
EOF

rm $a $b
exit 0

This script is from the book BSD Hacks, enjoy!

Michael Lawver

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: iSCSI

2007-01-09 Thread Dan Nelson

In the last episode (Jan 09), DAve said:
 The developers response, for those who are interested.
 
 hi Dave,
   the initiator for iSCSI will hit stable/current real soon now.
 that was the good news, now for the down side:
 what was missing all along was recovery from network disconnects, so
 while I think I have it almost worked out, I've come across a major
 flow in the iscsi design:
   when the targets crashes, and comes back, there is no way
 to tell the client to run an fsck. This is not a problem if the
 client is mounting the iscsi partition read only.
 
   danny

Why should the client need to do an fsck?  From its point of view it
should just look like the target had the iSCSI equivalent of a bus
reset.  It should resend any queued requests and continue.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Management techiniques for multiple FreeBSD servers?

2007-01-09 Thread Howard Jones

Hi,

I'm looking around for any articles/docs regarding techniques for
managing groups of FreeBSD servers - things like running a local package
mirror or build server, standardised installs, update management - all
the usual boring stuff. I know that people like Yahoo use thousands of
*BSD systems, but does anyone have any pointers on tools to make
day-to-day management of them scale?

Best Regards,

Howie
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

New Dell -Question

2007-01-09 Thread Darryl Hoar

Greetings,
I am going to be building a new server to do the following:

* email server (office use)
* webserver (office use)
* dhcp server
* samba pdc.

I would like to buy a basic Dell box as the hardware and
use FreeBSD.

I would like to avoid issue with Freebsd not working with
the hardware.

Can someone point me to Dell hardware that works with Freebsd,
or share their personal experiences with Freebsd and Dell hardware ?

thanks,
Darryl

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Automatically get nameservers

2007-01-09 Thread David Kelly

On Tue, Jan 09, 2007 at 05:23:07PM +0100, Oliver Fromme wrote:
 David Kelly wrote:
   But for the Windows machines to get the nameservers automatically one
   has to set up DHCP somewhere. On the FreeBSD machine. Or on a SOHO
   router. Somewhere.
 
 No, the FreeBSD machine (which acts as a PPPoE client)
 already receives the addresses of the name servers via
 the PPP protocol.  There's really no need for DHCP.
 
 I have exactly that setup at home, and I definitely do
 not use DHCP.

Yes, the FreeBSD machine can get *its* nameserver addresses from the
upstream connection via PPPoE. But the original poster asked how could
his Windows machines connected thru the FreeBSD machine *automatically*
get nameservice.

Some have suggested configuring the FreeBSD machine as a caching
nameserver. That is an option, but the Windows machines still do not
*automatically* know who to use for nameservice. Also its a bit harder
for the caching nameserver to be updated when/if PPPoE changes the
nameservice addresses. This is something SOHO routers do fairly easily,
altho most simply pass the same addresses they are given. Some will act
as a nameserver, possibly caching.

Once again I repeat, for the Windows machines to automatically get
nameserver addresses someone has to be running a DHCP server. Otherwise
someone has to type the addresses into a dialog box on each Windows
machine.

-- 
David Kelly N4HHE, [EMAIL PROTECTED]

Whom computers would destroy, they must first drive mad.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: iSCSI

2007-01-09 Thread DAve


Dan Nelson wrote:

In the last episode (Jan 09), DAve said:

The developers response, for those who are interested.

hi Dave,
the initiator for iSCSI will hit stable/current real soon now.
that was the good news, now for the down side:
what was missing all along was recovery from network disconnects, so
while I think I have it almost worked out, I've come across a major
flow in the iscsi design:
when the targets crashes, and comes back, there is no way
to tell the client to run an fsck. This is not a problem if the
client is mounting the iscsi partition read only.

danny


Why should the client need to do an fsck?  From its point of view it
should just look like the target had the iSCSI equivalent of a bus
reset.  It should resend any queued requests and continue.



That was my thought as well. I have my pop toasters all mounting a NFS 
mail store and when NFS goes away I don't have my NFS clients doing a 
fsck when the mount returns.


Not sure if that is important as iSCSI is all new to me, still reading 
up on it. Does FreeBSD do anything special to a NFS mount when it returns?


Should I subscribe to the SCSI list to continue this thread?

DAve

--
Three years now I've asked Google why they don't have a
logo change for Memorial Day. Why do they choose to do logos
for other non-international holidays, but nothing for
Veterans?

Maybe they forgot who made that choice possible.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Sun Fire x2100

2007-01-09 Thread DAve


Peter Thoenen wrote:

--- DAve [EMAIL PROTECTED] wrote:

Is anyone running FreeBSD on a Sun Fire X2100? Any caveats I should
know 
about? 


I don't recommend them if you plan to use as a file server.  They have
an issue with randomly rebooting under a large network load with
thousands of open connections.  Have seen this on my system and have
have had a dozen or so folk email me with the identical problem. 


-Peter




Nope, outbound smtp only, with AV scanning.

Thanks for the response.

DAve


--
Three years now I've asked Google why they don't have a
logo change for Memorial Day. Why do they choose to do logos
for other non-international holidays, but nothing for
Veterans?

Maybe they forgot who made that choice possible.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Automatically get nameservers

2007-01-09 Thread Peter Nyamukusa

On Tuesday 09 January 2007 19:10, David Kelly wrote:
 On Tue, Jan 09, 2007 at 05:23:07PM +0100, Oliver Fromme wrote:
  David Kelly wrote:
But for the Windows machines to get the nameservers automatically
one has to set up DHCP somewhere. On the FreeBSD machine. Or on a SOHO
router. Somewhere.
 
  No, the FreeBSD machine (which acts as a PPPoE client)
  already receives the addresses of the name servers via
  the PPP protocol.  There's really no need for DHCP.
 
  I have exactly that setup at home, and I definitely do
  not use DHCP.

 Yes, the FreeBSD machine can get *its* nameserver addresses from the
 upstream connection via PPPoE. But the original poster asked how could
 his Windows machines connected thru the FreeBSD machine *automatically*
 get nameservice.

 Some have suggested configuring the FreeBSD machine as a caching
 nameserver. That is an option, but the Windows machines still do not
 *automatically* know who to use for nameservice. Also its a bit harder

I agree here for any device to automatically receive DNS servers then DHCP has 
to be running and the device has to act as a DHCP client otherwise you would 
have to specify them statically. Unless we mis-understood the question

Regards

-- 
Peter Nyamukusa
Systems Administrator
Africa Online Zimbabwe
Tel:+263-4-250890
Fax:+263-4-702203
E-mail: [EMAIL PROTECTED]
AIM:   petenya
 for the caching nameserver to be updated when/if PPPoE changes the
 nameservice addresses. This is something SOHO routers do fairly easily,
 altho most simply pass the same addresses they are given. Some will act
 as a nameserver, possibly caching.

 Once again I repeat, for the Windows machines to automatically get
 nameserver addresses someone has to be running a DHCP server. Otherwise
 someone has to type the addresses into a dialog box on each Windows
 machine.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Why is sysinstall considered end-of-life?

2007-01-09 Thread hal



On Jan 9, 2007, at 1:19 AM, David Schulz wrote:

to be honest, i actually like the sys-install program. i did it so  
many times, that i just fly trough the sys-install installation in  
like a minute to do a plain basic installation. i also like the  
fact that i can just use it via ssh from a remote location without  
a hassle.


Likewise, sysinstall was never that difficult to use and now is
nearly automatic.  There are some places that could be tuned/cleaned
up but nothing to get excited about.

hal
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FreeBSD 6.1-RELEASE and nfe ?

2007-01-09 Thread Josh Paetzel

On Tuesday 09 January 2007 03:12, Frank Staals wrote:
 Hey,

 I am running a FreeBSD 6.1-RELEASE machine with a MSI K8N SLI-F
 mainboard, it has problems with the nve driver so I searched around
 on the internet and found this site about the nfe driver:
 http://www.se.hiroshima-u.ac.jp/~shigeaki/software/freebsd-nfe.html
 . Allthough there were no files for 6.1-RELEASE. Are there specific
 files or instructions for installing on 6.1-RELEASE. I'm not too
 fond of upgrading my system at this point and when I tried using
 the 6.2-PRERELEASE files I came upon these errors during the 'make'
 when rebuilding my kernel:


 -DHAVE_KERNEL_OPTION_HEADERS -include opt_global.h -fno-common
 -finline-limit=8000 --param inline-unit-growth=100 --param
 large-function-growth=1000  -mcmodel=kernel -mno-red-zone 
 -mfpmath=387 -mno-sse -mno-sse2 -mno-mmx -mno-3dnow  -msoft-float
 -fno-asynchronous-unwind-tables -ffreestanding -Werror
 ../../../dev/mii/dcphy.c
 cc -c -O2 -frename-registers -pipe -fno-strict-aliasing  -Wall
 -Wredundant-decls -Wnested-externs -Wstrict-prototypes
 -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual
 -fformat-extensions -std=c99 -g -nostdinc -I-  -I. -I../../..
 -I../../../contrib/altq -I../../../contrib/ipfilter
 -I../../../contrib/pf -I../../../contrib/dev/ath
 -I../../../contrib/dev/ath/freebsd -I../../../contrib/ngatm
 -I../../../dev/twa -D_KERNEL -DHAVE_KERNEL_OPTION_HEADERS -include
 opt_global.h -fno-common -finline-limit=8000 --param
 inline-unit-growth=100 --param large-function-growth=1000
 -mcmodel=kernel -mno-red-zone  -mfpmath=387 -mno-sse -mno-sse2
 -mno-mmx -mno-3dnow  -msoft-float -fno-asynchronous-unwind-tables
 -ffreestanding -Werror  ../../../dev/mii/e1000phy.c
 ../../../dev/mii/e1000phy.c: In function `e1000phy_attach':
 ../../../dev/mii/e1000phy.c:133: error: `MII_ANEGTICKS_GIGE'
 undeclared (first use in this function)
 ../../../dev/mii/e1000phy.c:133: error: (Each undeclared identifier
 is reported only once
 ../../../dev/mii/e1000phy.c:133: error: for each function it
 appears in.) ../../../dev/mii/e1000phy.c:136: error: `fast_ether'
 undeclared (first use in this function)
 ../../../dev/mii/e1000phy.c:137: error: `esc' undeclared (first use
 in this function)
 ../../../dev/mii/e1000phy.c:146: error: `MII_ANEGTICKS' undeclared
 (first use in this function)
 ../../../dev/mii/e1000phy.c:119: warning: unused variable `id'
 ../../../dev/mii/e1000phy.c: In function `e1000phy_service':
 ../../../dev/mii/e1000phy.c:298: warning: passing arg 1 of
 `e1000phy_mii_phy_auto' from incompatible pointer type
 ../../../dev/mii/e1000phy.c:398: warning: passing arg 1 of
 `e1000phy_mii_phy_auto' from incompatible pointer type
 ../../../dev/mii/e1000phy.c: At top level:
 ../../../dev/mii/e1000phy.c:484: error: conflicting types for
 'e1000phy_mii_phy_auto'
 ../../../dev/mii/e1000phy.c:91: error: previous declaration of
 'e1000phy_mii_phy_auto' was here
 ../../../dev/mii/e1000phy.c:484: error: conflicting types for
 'e1000phy_mii_phy_auto'
 ../../../dev/mii/e1000phy.c:91: error: previous declaration of
 'e1000phy_mii_phy_auto' was here
 ../../../dev/mii/e1000phy.c:91: warning: 'e1000phy_mii_phy_auto'
 declared `static' but never defined
 ../../../dev/mii/e1000phy.c:484: warning: 'e1000phy_mii_phy_auto'
 defined but not used
 *** Error code 1

 Stop in /usr/src/sys/amd64/compile/PFSERVERKERNEL.
 [EMAIL PROTECTED]

 I hope anyone can help me. If it is not possible to install nfe on
 6.1-RELEASE would upgrading to 6-STABLE allow me to install the
 driver ?

 Regards,

It says it needs 6.2-PRERELEASE or higher for a reason.  Not a big 
shock that it didn't build on your 6.1 box.

Upgrading to RELENG_6_2 or RELENG_6 will get you to a point where you 
can build the driver.

-- 
Thanks,

Josh Paetzel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Permissions Question


Malcolm Kay wrote:

I am confused (or someone is).
On all the FreeBSD systems I have immediate access to the file
/etc/mail/aliases has the default permissions -rw-r--r--, in 
other words is readable by anyone. On the other 
hand /etc/mail/aliases.db is sometimes -rw-r- and sometimes 
-rw-r--r-- but since it is only an encoded version of aliases 
and additional restrictions would seem useless.


I can imagine some might object to reason setting either of these 
o+r, but this does seem to be the norm.


Perhaps someone else has other views. Or perhaps this is some 
variation when using profix, qmail etc. in place of sendmail.


Malcolm
 
  
Postfix is the MTA, but the file itself is NFS shared between all the 
mailservers, and furthermore is used as part of a script that expects 
things to be just so.


I inherited this setup, and don't dare start changing the permissions on 
key files until I understand what every part of the equation expects to 
see-- an example would be the user mailboxes, wherein the permissions 
were set incorrectly causing Sendmail to choke (dontblamesendmail has 
more on this for the curious).


--
Jay Chandler
Network Administrator, Chapman University
714.628.7249 / [EMAIL PROTECTED]
Today's Excuse: user to computer ratio too high. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Permissions advice needed.


Malcolm Kay wrote:

On Tue, 9 Jan 2007 04:02 pm, Garrett Cooper wrote:
  

Why does he need access to aliases though? For mail program
purposes? -Garrett



I think you may have mixed up two threads with very similar 
subject lines. I see no reference to aliases in this thread.

(Confusing isn't it)

Malcolm
  

Yeah, I pick interesting times to start threads it would seem. :-)

We're doing some group membership stuff through the aliases file, and 
this guy helps administer some of them in a tertiary sense.  The correct 
way to do this is of course through our LDAP directory, but that would 
of course make entirely too much sense...


--
Jay Chandler
Network Administrator, Chapman University
714.628.7249 / [EMAIL PROTECTED]
Today's Excuse: user to computer ratio too high. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: iSCSI

2007-01-09 Thread Jeff Mohler


That only works if the target comes up within the 2min window that
SCSI allows for.  It won't wait forever.

On 1/9/07, Dan Nelson [EMAIL PROTECTED] wrote:

In the last episode (Jan 09), DAve said:
 The developers response, for those who are interested.

 hi Dave,
the initiator for iSCSI will hit stable/current real soon now.
 that was the good news, now for the down side:
 what was missing all along was recovery from network disconnects, so
 while I think I have it almost worked out, I've come across a major
 flow in the iscsi design:
when the targets crashes, and comes back, there is no way
 to tell the client to run an fsck. This is not a problem if the
 client is mounting the iscsi partition read only.

danny

Why should the client need to do an fsck?  From its point of view it
should just look like the target had the iSCSI equivalent of a bus
reset.  It should resend any queued requests and continue.

--
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

filesystem size

2007-01-09 Thread Simon Gao


Hi,

What's largest filesystem size supported by FreeBSD 5.2.1 i386?

Simon
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: arplookup 192.168.1.254 failed: host is not on local network

2007-01-09 Thread Garrett Cooper

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Taharni Duggan wrote:
 how do i host custom game on warcraft 3

You aren't on the same subnet as your other machine. You need to
configure your network for all machines properly.

BTW, this isn't a warcraft 3 support group and your information you
provided was lacking at best. /sbin/ifconfig and /usr/bin/netstat -nr
output would be helpful, to say the least.
- -Garrett
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.1 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFo+ZuEnKyINQw/HARAtzjAKCrFhSgF+IOQYPJS/DSB8/zDIBrjgCeI7kd
Qph/dqoEMwv9u2gOdM0LtYA=
=wEKo
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: filesystem size

2007-01-09 Thread Andy Greenwood


On 1/9/07, Simon Gao [EMAIL PROTECTED] wrote:

Hi,

What's largest filesystem size supported by FreeBSD 5.2.1 i386?


You might want to read this:
http://www.freebsd.org/projects/bigdisk/index.html



Simon
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]




--
I'm nerdy in the extreme and whiter than sour cream
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Permissions Question Re: Permissions advice needed

2007-01-09 Thread [EMAIL PROTECTED]

The following suggestion should work for both problems and avoid the
difficulties I saw with the other solutions.
Write an executable (Korn shell) script owned by the owner of the
files to be examined (thus he should have all the access he needs)
which checks the user-id of its caller [effective and/or original]
(to make sure unauthorized users don't get access) and the current
date against an end-date (to shut off access at the desired date
automatically), probably use the julian date to make checking easier.

While I have your attention, does anybody know of jobs for any or all
of the following: C/C++, Korn shell scripts, and  SQL (Sybase) 
programmers.  I live in the NYC suburbs area (Rockland Cty) and
I'm willing to telecommute and maybe even relocate.  My resume can
be sent by email upon request.

On 1/8/2007, Andy Greenwood [EMAIL PROTECTED] wrote
On 1/8/07, Kirk Strauser [EMAIL PROTECTED] wrote:
 On Monday 08 January 2007 12:07 pm, Jay Chandler wrote:

 I've got a user who needs to be able to view (read only) the aliases
 file.  We'll grant him root access a few weeks after the eventual
 heat-death of the universe, so how would you all go about doing this?

 You could configure sudo to give him access to run that one
 command as root.
One has to be very careful about giving out such access!
root has much power.

On 8 Jan 2007 13:24:58, Kirk Strauser [EMAIL PROTECTED] wrote
 On Monday 08 January 2007 12:57 pm, Andy Greenwood wrote:
 I've never used them, but wasn't ACL written just for this scenario?

 Perhaps, but that seems like a lot more effort to accomplish a
 relatively easy job.
Would work, but it doesn't take into account the time limitation
( We'll grant him root access a few weeks).

On 8 Jan 2007 15:07:01, Robert Huff [EMAIL PROTECTED] wrote
 Jay Chandler writes:

(snip)
 Hand him some sheets of printout?
Waste of paper (and trees).  Also, one can't use  UNIX  tools on the
data (e.g.,  grep , editors) to put some of the data in other docs.
   
  Sadly, the data change too often for this to be effective.

   Copy the file evey N minutes, then change ownership and
 permissions?
Again, too much work for the owner.

On 08 Jan 2007 13:19:32 Jay Chandler [EMAIL PROTECTED] wrote
Robert Huff wrote:
 Jay Chandler writes:

(snip)
  Copy the file evey N minutes, then change ownership and
 permissions?
(snip)
 Probably the simplest way to do it-- just wanted to make sure I wasn't
 overlooking something silly.

 Thanks!
Too much work for the one copying unless he has a script do it
maybe as a  cron  job.


On 9 Jan 2007 08:43:11, Brett Davidson [EMAIL PROTECTED] wrote
(on Subject: Permissions advice needed.)
 
 I have a curious problem.
 
 I need an executable file to be owned by a user's uid and gid so they
 can run it.
A user can run a script/binary file whose uid and gid differ from his
(Just give other 'rx' permission.)
If you want to give such access only to one user, put him in an ACL.
Give him 'rx' permission; he won't be able to modify the file.
Anyway, why must the executable file be owned by the user running it?
 HOWEVER, I don't want them to be able to modify or delete the file
 and/or it's permissions. Another program will do that.

 This, under standard Unix permissions, is a tad difficult. :-)
difficult???  I don't see that.
 ACL's don't help here as the owner of a file has the ability to 
 change permissions.

 I could set the immutable bit (Linux term for the schg flag) but the
 modifying program does not recognise this flag and will thus fail to
 modify the file.
 (I have no control over the modifying program).

 Any ideas?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: libkrb5.so.8 - missing

2007-01-09 Thread perryh

Vizion [EMAIL PROTECTED] wrote:

 Can someone please tell me what package installs libkrb5.so.8
 for FREEBSD-6.1-RELEASE #0?

On my 6.1 system, /usr/ports/INDEX contains an entry for krb5-1.5_1
but my /usr/ports/security/krb5/pkg-plist lists lib/libkrb5.so.3
rather than libkrb5.so.8.  To make matters even more interesting,
my /usr/lib does include a libkrb5.so.8 (dated May  6  2006).
I do not pretend to understand the discrepancy :)

I'll send it separately, since the list does not like attachments.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: NMap in FreeBSD Problem ...

2007-01-09 Thread linux quest


Thanks ... I think the 'rehash' command does help a bit... at least now, when I 
type 'nmap', I can see the help manual (before this, there was just error msg). 
However, now, when I type 'nmap 192.168.1.10', (where 192.168.1.10 is the PC 
that I wanted to scan) ... I got the message ... 

'Limiting closed port RST response from 283 to 200 packets/sec'

May I know how do I get nmap to scan the 192.168.1.10 computer?

Thanks.

Regards,
Linux Quest


Niclas Zeising [EMAIL PROTECTED] wrote:
 On 1/9/07, linux quest 
 wrote:

 After running nmap for some time, I have got problem running a simple command 
 of nmap ... like



 nmap 192.168.1.2

 nmap: Command not found



 I think there is something wrong with my installation procedures. I type in 
 make install clean command in /usr/local/bin/nmap and 
 /usr/ports/security/nmap - but somehow I still see the command not found 
 message.



 I have also typed in make deinstall clean on both of the directory 
 location, restart the OS, and install everything again using the make 
 install clean command (on both of the directory location) - but I still 
 receive the same nmap: Command not found message.



 Thanks for the help :)



 Regards,

 Linux Quest

  __



Have you tried running rehash after the install? If you're using

[t]csh this is nessesary to make the shell discover new commands.

You only need to do make install clean in ports/security/nmap, not

in local/bin/nmap.

HTH

//Niclas

--




 __
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

FW: Permissions advice needed.

2007-01-09 Thread Brett Davidson

-Original Message-
From: Malcolm Kay [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 9 January 2007 6:03 p.m.
To: freebsd-questions@freebsd.org
Cc: Brett Davidson
Subject: Re: Permissions advice needed.

On Tue, 9 Jan 2007 06:13 am, Brett Davidson wrote:
 I have a curious problem.

 I need an executable file to be owned by a user's uid and gid so they 
 can run it.

Malcolm: A user does not need to own a file to be able to run it. All
they need is execute permission. So what is the real problem?

Brett: This file is being run via suexec in Apache, so yes, both uid and
gid need to match in order for the file to be run. 
This particular system is running a shared-hosting webserver and
utilising php-cgi and suexec appears to be the easiest way of providing
inter-site isolation.
The only problem with that is that you need a wrapper in order to
provide customised php.ini settings for each site via the PHPRC
environment variable. That wrapper is the file I am concerned about
here.

 HOWEVER, I don't want them to be able to modify or delete the file 
 and/or it's permissions. Another program will do that.

Malcolm: Deleting or creating a file requires write access in the
directory containg the file reference -- it has nothing to do with the
permissions on the file itself.

Brett:I only want one particular file in the directory to be untouchable
so directory permissions aren't helpful. Directory permissions only go
part of the way as the file has to be read-only as well.

Anyway, for what it's worth, I have found a fix; in FreeBSD 6.2 the
MAC_BSDEXTENDED filesystem firewall has been enhanced.

If I use that, make the file suid (harmless since it's already owned by
the user),  then the ugidfw rule below all works well :

ugidfw add subject not uid 0 object suid rx

This works well as this is the only non-root suid file on the system. In
other systems where this may not be the case the rule should still be
harmless as these suid files SHOULD only have rx permissions for
non-root users anyway. :-)

The only gotcha to that would be during program upgrades performed via a
non-root user; the rule will either need to be relaxed or an additional
specific rule could be placed above it to allow suid modifications to
any specific non-root owned programs that may be in place. 

Cheers,
Brett.

 This, under standard Unix permissions, is a tad difficult. :-)

 ACL's don't help here as the owner of a file has the ability to change

 permissions.

 I could set the immutable bit (Linux term for the schg flag) but the 
 modifying program does not recognise this flag and will thus fail to 
 modify the file.
 (I have no control over the modifying program).

 Any ideas?

 I don't want to go down the line of using BSD MAC but I'm starting to 
 think I may have too just to be able to prevent the user from 
 modifying ONE file! (I'm not even sure I could implement this using 
 MAC anyway).

 Cheers,
 Brett.
 ___
 freebsd-questions@freebsd.org mailing list 
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

RE: Permissions advice needed.

2007-01-09 Thread Brett Davidson

Unfortunately, as I expounded to Malcolm Lay, in this application (a
shared-hosting webserver) suexec is being used which does not traverse
symbolic links. :-(
 
MAC_BSDEXTENDED in Bsd6.2 solves the problem very nicely.
 
Cheers,
Brett.
 
 



From: George Vanev [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 9 January 2007 7:42 p.m.
To: Brett Davidson
Subject: Re: Permissions advice needed.


Brett,
 
Why don't you make a symbolic link to that file.
You may set read, write and execute permissions if you wish... doesn't
matter.
The users will be able to run your executable via the link,
but they won't be able to modify it.

 
On 1/8/07, Brett Davidson [EMAIL PROTECTED] wrote: 

I have a curious problem.

I need an executable file to be owned by a user's uid and gid so
they 
can run it.
HOWEVER, I don't want them to be able to modify or delete the
file
and/or it's permissions. Another program will do that.

This, under standard Unix permissions, is a tad difficult. :-) 

ACL's don't help here as the owner of a file has the ability to
change
permissions.

I could set the immutable bit (Linux term for the schg flag) but
the
modifying program does not recognise this flag and will thus
fail to 
modify the file.
(I have no control over the modifying program).

Any ideas?

I don't want to go down the line of using BSD MAC but I'm
starting to
think I may have too just to be able to prevent the user from
modifying 
ONE file! (I'm not even sure I could implement this using MAC
anyway).

Cheers,
Brett.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED] 





-- 
George Vanev

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

problems while setting up faithd

2007-01-09 Thread bkoenig

Hello,

I try to set up faithd and read the instructions in faithd(8) and
src/usr.sbin/faithd/README. It is necessary to route the packets to the
faith0 interface. Everytime I run

route change -inet6 myipv6net -prefixlen 96 -ifp faith0

I get the error message route: writing to routing socket: Network is
unreachable.

What did I wrong?

Regards Björn


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

RE: Permissions advice needed.

2007-01-09 Thread Brett Davidson

To clarify a point, the following line, 

This works well as this is the only non-root suid file on the system

should be replaced with 

This works well as this is the only non-root accessable suid file on
the system.

Cheers,
Brett.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brett Davidson
Sent: Wednesday, 10 January 2007 8:53 a.m.
To: freebsd-questions@freebsd.org
Subject: FW: Permissions advice needed.

-Original Message-
From: Malcolm Kay [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 9 January 2007 6:03 p.m.
To: freebsd-questions@freebsd.org
Cc: Brett Davidson
Subject: Re: Permissions advice needed.

On Tue, 9 Jan 2007 06:13 am, Brett Davidson wrote:
 I have a curious problem.

 I need an executable file to be owned by a user's uid and gid so they 
 can run it.

Malcolm: A user does not need to own a file to be able to run it. All
they need is execute permission. So what is the real problem?

Brett: This file is being run via suexec in Apache, so yes, both uid and
gid need to match in order for the file to be run. 
This particular system is running a shared-hosting webserver and
utilising php-cgi and suexec appears to be the easiest way of providing
inter-site isolation.
The only problem with that is that you need a wrapper in order to
provide customised php.ini settings for each site via the PHPRC
environment variable. That wrapper is the file I am concerned about
here.

 HOWEVER, I don't want them to be able to modify or delete the file 
 and/or it's permissions. Another program will do that.

Malcolm: Deleting or creating a file requires write access in the
directory containg the file reference -- it has nothing to do with the
permissions on the file itself.

Brett:I only want one particular file in the directory to be untouchable
so directory permissions aren't helpful. Directory permissions only go
part of the way as the file has to be read-only as well.

Anyway, for what it's worth, I have found a fix; in FreeBSD 6.2 the
MAC_BSDEXTENDED filesystem firewall has been enhanced.

If I use that, make the file suid (harmless since it's already owned by
the user),  then the ugidfw rule below all works well :

ugidfw add subject not uid 0 object suid rx

This works well as this is the only non-root suid file on the system. In
other systems where this may not be the case the rule should still be
harmless as these suid files SHOULD only have rx permissions for
non-root users anyway. :-)

The only gotcha to that would be during program upgrades performed via a
non-root user; the rule will either need to be relaxed or an additional
specific rule could be placed above it to allow suid modifications to
any specific non-root owned programs that may be in place. 

Cheers,
Brett.



 This, under standard Unix permissions, is a tad difficult. :-)

 ACL's don't help here as the owner of a file has the ability to change

 permissions.

 I could set the immutable bit (Linux term for the schg flag) but the 
 modifying program does not recognise this flag and will thus fail to 
 modify the file.
 (I have no control over the modifying program).

 Any ideas?

 I don't want to go down the line of using BSD MAC but I'm starting to 
 think I may have too just to be able to prevent the user from 
 modifying ONE file! (I'm not even sure I could implement this using 
 MAC anyway).

 Cheers,
 Brett.
 ___
 freebsd-questions@freebsd.org mailing list 
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Contributing to FreeBSD documentation (was: Re: no ath0 on newsystem with good card)

2007-01-09 Thread Steve Franks


Yes, and in today's world, it is likely to be some young sub-saharan african
pup who can't just go down to the local retailer and drop $400 on a new
system if his won't install...

Steve

On 1/8/07, Ted Mittelstaedt [EMAIL PROTECTED] wrote:



- Original Message -
From: Giorgos Keramidas [EMAIL PROTECTED]
To: Steve Franks [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Sunday, January 07, 2007 8:25 AM
Subject: Contributing to FreeBSD documentation (was: Re: no ath0 on
newsystem with good card)


 On 2007-01-07 08:54, Steve Franks [EMAIL PROTECTED] wrote:
  Apologies on not hitting the list.  Alyays forget to reply-all.

 No problem.  I just didn't copy the list because I wasn't sure I should.

  So, I figured I'd try to fix the safe-mode end of things on my own,
  and I found a post several years old (looked like it even could have
  been yours) about safemode, which doesn't show up anywhere on the
  freebsd site.  So I did what it said and grep'd boot/beastie.4th for
  safemode, which came up with this suprisingly total solution:
 
  add apic.0.disabled=1 to boot/device.hints.  Not only does my system
  come up in regular boot mode, but, as you suspected, the pccard works
  too, so all appears well.

 Excellent news!   Thanks for sharing the answer :)

  So my final question, what in all the land is an apic,

 Advanced Programmable Interrupt Controller.  This is the part of your
 system which assigns priorities to interrupt lines of a device.  The
 full details are probably too technical for some percentage of our user
 base, but more details can be found at the following pages:


http://en.wikipedia.org/wiki/Advanced_Programmable_Interrupt_Controller
   http://en.wikipedia.org/wiki/Programmable_Interrupt_Controller
   http://en.wikipedia.org/wiki/Intel_8259
   http://en.wikipedia.org/wiki/Intel_APIC_Architecture

  and why isn't apic or safemode mentioned in the handbook, manpages, or
  even on the freebsd site?

 IIRC it is mentioned in the Developer's Handbook, but you are right that
 it should be in the main Handbook too.

  Further, I'd like to write a handbook page on freebsd and laptops,
  because we're on my third one here now, and I'm starting to get the
  drift of what could usefully be added to the handbook, namely a
  thourough discussion of booting and device.hints.

 That would be great!  If you can help writing such a section for the
 Handbook, a lot of users will be highly indebted to you, for sure :)


I'll throw my $0.02 in here on this.

Years ago on the CD distributions there was a file in the root of the
distro
labeled hints or some such.  It was also on the website.  It contained
all
the little workarounds for SPECIFIC pieces of hardware.  I know as I wrote
several entries for it.  That apic problem was listed in there as were
several
others, I know some for laptops specifically.

Sometime during the FreeBSD 4.X series one of the developers got a bug
up their ass that somehow this was the wrong place for problems to be
listed.  Something along the lines of these problems aren't FreeBSD
problems
they are sucky hardware problems and it makes FreeBSD look bad to have
the workarounds even listed at all, and we have the bug database and these
icky ugly things really ought to go into the bug database.  So this file
disappeared.
As did every other easily recognizable place for submitting hints.  As did
the
specific e-mail address for hints to go to.

These installation problems IMHO  PROPERLY belong in the README for the
distribution.  That is the FIRST place that someone BRAND NEW to FreeBSD
is going to look for them.  No FreeBSD newbie who has oddball hardware
that has bugs in it, is going to take the time spending hours reading the
Handbook
or searching the questions mailing list archives for tidbits, or querying
the bug
database for PR's for their gear.  Any newbie to FreeBSD
is going to do the same thing that they do to any other OS, they are going
to stick
the CD in their oddball hardware and boot it, and if it doesen't come up
they
will look at the README file that came with the ISO image they downloaded,
and if the hardware-specific workarounds for their machine aren't there,
they will
discard the ISO cd and move on to some other Open Source OS.

For all the huffing-and-puffing on peer-review for the Handbook, well
that is fine for that.  But an install hints file's very usefulness is
junk
if a
committee is reviewing it.

Hardware-specific install hints are, by their very nature, NOT guarenteed
to work.  They may even make things worse.  All they are is user-developed
workarounds that may or may not be The FreeBSD Way of doing things.
The only thing that can be said about them is that at one time, one year,
with
one particular piece of gear, someone tried some off-the-wall thing and
it worked.  It might not ever work again in any future version of FreeBSD.
There might be manufacture-specific BIOS updates that fix things.  There
might be a driver update in a later

Re: Permissions Question Re: Permissions advice needed

On Tuesday 09 January 2007 1:01 pm, [EMAIL PROTECTED] wrote:

 On 1/8/07, Kirk Strauser [EMAIL PROTECTED] wrote:

 You could configure sudo to give him access to run that one
 command as root.

 One has to be very careful about giving out such access!
 root has much power.

Hence sudo, where you're giving them exactly one permission: the ability 
to execute one specific read-only command.
-- 
Kirk Strauser


pgpiZgdAhrYaY.pgp
Description: PGP signature

FreeBSD 6.2 Release

2007-01-09 Thread stefanos sofroniou

Dear Sirs,

I just wanted to ask you since FreeBSD 6.2 is going to be
released, sooner or later I will be forced to upgrade my
system from 6.1 to 6.2. 
Well my question goes like this: what is the best way for me
to do it? By downloading the ISO images or by doing it with
cvsup stable-supfile?

Waiting for your reply.

Best Regards,

Stefanos Sofroniou
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FreeBSD 6.2 Release

2007-01-09 Thread Tsu-Fan Cheng


I use cvsup stable source, and upgrade the system according to README (?) in
/usr/src, it suits me fine for a couple fo upgrades.

TFC

On 1/9/07, stefanos sofroniou [EMAIL PROTECTED] wrote:


Dear Sirs,

I just wanted to ask you since FreeBSD 6.2 is going to be
released, sooner or later I will be forced to upgrade my
system from 6.1 to 6.2.
Well my question goes like this: what is the best way for me
to do it? By downloading the ISO images or by doing it with
cvsup stable-supfile?

Waiting for your reply.

Best Regards,

Stefanos Sofroniou
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FreeBSD 6.2 Release


stefanos sofroniou wrote:

Dear Sirs,

I just wanted to ask you since FreeBSD 6.2 is going to be
released, sooner or later I will be forced to upgrade my
system from 6.1 to 6.2. 
Well my question goes like this: what is the best way for me

to do it? By downloading the ISO images or by doing it with
cvsup stable-supfile?

  
On a semi-related note, are there installation instructions for 
upgrading from 6.1 to 6.2?


On that vein, are there instructions for the same upgrade if you don't 
have console access-- namely, no single-user mode?


Regards,

--
Jay Chandler
Network Administrator, Chapman University
714.628.7249 / [EMAIL PROTECTED]
Today's Excuse: user to computer ratio too high. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: User Security Question?

2007-01-09 Thread VeeJay


On 1/9/07, VeeJay [EMAIL PROTECTED] wrote:



Hello Friends

Just had a debate with a collegue at office, but still lack knowledge on
FreeBSD security :(


I have few questions.

1. What previligies a standard user (NOT member of Wheel Group) has on a
FreeBSD Box?

2. How can he/she damages the systems or make a breach?

3. If that particular user is willing to damage the FreeBSD box,
so which locations OR files are more likely to be damaged or affected?

4. How dangerous a Standard User could be to a FreeBSD box?

5. What sort of possible methods he/she can apply to hack the system and
create a breach into the system?

6. How can we check that if a system is affected by a Bad User?

I would really appreciate your comments in this regard

Cheers!!!
--
Thanks!

BR / vj





--
Thanks!

BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FreeBSD 6.1-RELEASE and nfe ?

2007-01-09 Thread Chris Whitehouse


Frank Staals wrote:

Hey,

I am running a FreeBSD 6.1-RELEASE machine with a MSI K8N SLI-F 
mainboard, it has problems with the nve driver so I searched around on 
the internet and found this site about the nfe driver: 
http://www.se.hiroshima-u.ac.jp/~shigeaki/software/freebsd-nfe.html . 
Allthough there were no files for 6.1-RELEASE. Are there specific files 
or instructions for installing on 6.1-RELEASE. I'm not too fond of 
upgrading my system at this point and when I tried using the 
6.2-PRERELEASE files I came upon these errors during the 'make' when 
rebuilding my kernel:


I have
-rw-r--r--  1 root  wheel  1756 30 Oct 09:13 e1000phy.patch
-rw-r--r--  1 root  wheel  15730 30 Oct 09:13 nfe-20060905.tar.gz
which I think are for 6.1 which i can email you if you want to risk

1) I am bad and will hack your box
2) there is some innate stupidity in using them.

The e1phy.patch is for Marvell 88E1000 PHY variants, don't know 
what's on your board.


I use i386 but I don't think there were separate versions for 64 bit

Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FreeBSD 6.2 Release

2007-01-09 Thread Eric


Jay Chandler wrote:

stefanos sofroniou wrote:

Dear Sirs,

I just wanted to ask you since FreeBSD 6.2 is going to be
released, sooner or later I will be forced to upgrade my
system from 6.1 to 6.2. Well my question goes like this: what is the 
best way for me

to do it? By downloading the ISO images or by doing it with
cvsup stable-supfile?

  
On a semi-related note, are there installation instructions for 
upgrading from 6.1 to 6.2?


On that vein, are there instructions for the same upgrade if you don't 
have console access-- namely, no single-user mode?


Regards,

try this page for easy, step by step instructions on how to upgrade. 
this doesnt address your second question, only the first. Hope it helps!


http://mikestammer.com/dokuwiki/bsd:updateos
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FreeBSD 6.2 Release

2007-01-09 Thread Ivan Voras

Jay Chandler wrote:

 On a semi-related note, are there installation instructions for
 upgrading from 6.1 to 6.2?

Upgrading between minor version of FreeBSD is always the same - run
cvsup, recompile, install - it's also the same between 6.1 and 6.2.

(see
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvsup.html and
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html
... chapter The Canonical Way to Update Your System)

 On that vein, are there instructions for the same upgrade if you don't
 have console access-- namely, no single-user mode?

With some care, it can be done the same way and without problems in
multiuser mode. While it's NOT recommended, I've frequently done updates
from multiuser (sometimes even in hot production) without any issues.
There's really little that can go wrong, and if you follow procedure and
there are no unusual events, nothing that can't be fixed relatively easily.

Note that things are different when upgrading from one major version to
another (e.g. 6.x to 7.x), though I even managed to update 5.x to 6.x
while the machine was live the whole time with only minor glitches,
solved by recompiling ports. I doubt this would work with 6.x-7.x
because of the many changes.



signature.asc
Description: OpenPGP digital signature

Re: is THIS why the 6.2 release seems stalled ?

2007-01-09 Thread Kris Kennaway

On Mon, Jan 08, 2007 at 09:33:18AM -0800, Jim Pazarena wrote:
 http://farragut.flameeyes.is-a-geek.org/articles/2007/01/08/a-shadow-lies-upon-all-bsd-distributions
 -
 Gentoo/FreeBSD: license problems require a development pause
 
 http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/gentoo-freebsd-license-problems-requires-a-development-pause
 
 The big license mess, part 2
 
 http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/the-big-license-mess-part-2
 --
 Gentoo/FreeBSD On Hold Due To Licensing Issues

No.

Kris


pgpDgGN952vdm.pgp
Description: PGP signature

Re: filesystem size

2007-01-09 Thread Kris Kennaway

On Tue, Jan 09, 2007 at 02:01:47PM -0500, Andy Greenwood wrote:
 On 1/9/07, Simon Gao [EMAIL PROTECTED] wrote:
 Hi,
 
 What's largest filesystem size supported by FreeBSD 5.2.1 i386?
 
 You might want to read this:
 http://www.freebsd.org/projects/bigdisk/index.html

And update to a modern release of FreeBSD, if large filesystem support
is important to you.

Kris


pgpyGrRXbEvp5.pgp
Description: PGP signature

Re: Management techiniques for multiple FreeBSD servers?

2007-01-09 Thread Paul Schmehl

--On Tuesday, January 09, 2007 16:30:59 + Howard Jones 
[EMAIL PROTECTED] wrote:


I'm looking around for any articles/docs regarding techniques for
managing groups of FreeBSD servers - things like running a local package
mirror or build server, standardised installs, update management - all
the usual boring stuff. I know that people like Yahoo use thousands of
*BSD systems, but does anyone have any pointers on tools to make
day-to-day management of them scale?


Check out Richard Bejtlich's blog - Taosecurity
http://taosecurity.blogspot.com/index.html

Here's some topics that might be of particular interest to you:
http://taosecurity.blogspot.com/2007/01/more-freebsd-package-issues.html
http://taosecurity.blogspot.com/2007/01/recovering-from-bad-freebsd-package.html
http://taosecurity.blogspot.com/2006/11/gvinum-on-freebsd.html

Paul Schmehl ([EMAIL PROTECTED])
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

Re: filesystem size

2007-01-09 Thread Simon Gao

I looked at the link. It seems that it's not desirable to make a 
filesystem larger than 2TB with 5.2.1. How about 6.1/6.2? Are those 
remaining issues resolved with 6.1/6.2?


Simon

Kris Kennaway wrote:

On Tue, Jan 09, 2007 at 02:01:47PM -0500, Andy Greenwood wrote:
  

On 1/9/07, Simon Gao [EMAIL PROTECTED] wrote:


Hi,

What's largest filesystem size supported by FreeBSD 5.2.1 i386?
  

You might want to read this:
http://www.freebsd.org/projects/bigdisk/index.html



And update to a modern release of FreeBSD, if large filesystem support
is important to you.

Kris
  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Natd is not working as expected

2007-01-09 Thread Ross Penner


I've configured my freebsd computer to be the gateway for my home network
using the guidelines in the handbook. All the required kernel options are
enabled and the entries in /etc/rc.conf have been added. I'm unsure what the
problem could be and I'm hoping somebody can give me some advice on where to
look to diagnose this issue.

the bind9 server is functioning correctly as I'm able to resolve IP address,
but no packets seem to be getting through.

Thanks ahead of time for any help you can give,

Ross Penner
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: is THIS why the 6.2 release seems stalled ?

2007-01-09 Thread Nikolas Britton


On 1/9/07, Kris Kennaway [EMAIL PROTECTED] wrote:

On Mon, Jan 08, 2007 at 09:33:18AM -0800, Jim Pazarena wrote:
 
http://farragut.flameeyes.is-a-geek.org/articles/2007/01/08/a-shadow-lies-upon-all-bsd-distributions
 -
 Gentoo/FreeBSD: license problems require a development pause

 
http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/gentoo-freebsd-license-problems-requires-a-development-pause
 
 The big license mess, part 2

 
http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/the-big-license-mess-part-2
 --
 Gentoo/FreeBSD On Hold Due To Licensing Issues

No.

Kris




Why then? Are you guys ever going to do something about Xorg DRI/DRM
for Radeon cards, Java, and Flash support? More importantly:
1. Xen Dom0 support?
2. Fix SATA RAID driver problems?
3. Better chipset support for new 51xx Xeon and Core 2 Duo systems?
4. ZFS support?
5. Better support for 2TB, or greater, RAID arrays: (fsck, etc.)?
6. Speed up GigE and 10GigE stuff? checksum offloading, Interrupt load
problems, packet processing speed, etc?
7. Better SMP support, GIANT lock in RAID/LAN drivers, etc...

Why should I continue using FreeBSD when the project never delivers on
it promises?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

fsck report after crash...

2007-01-09 Thread Agus


Hi, all.i suffer a blackout today when my freebsd was running, and when
i start up again i run fsck and it reports that 5 files areUNREF..this
happens during
Phase 4 - Check Reference Count

UNREF FILE I=94324 OWNER=mysql MODE=100600
SIZE=0 MTIME=Jan 9 20:30 2007
CLEAR? no

and a few more with same owner and mode; the only thing that changes is the
I,(inode, i guess)

Is there a way to fix this?!?

thanxs and greetzz to all
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: is THIS why the 6.2 release seems stalled ?

2007-01-09 Thread Garrett Cooper

Nikolas Britton wrote:

On 1/9/07, Kris Kennaway [EMAIL PROTECTED] wrote:

On Mon, Jan 08, 2007 at 09:33:18AM -0800, Jim Pazarena wrote:

http://farragut.flameeyes.is-a-geek.org/articles/2007/01/08/a-shadow-lies-upon-all-bsd-distributions

-
Gentoo/FreeBSD: license problems require a development pause

http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/gentoo-freebsd-license-problems-requires-a-development-pause

The big license mess, part 2

http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/the-big-license-mess-part-2

--
Gentoo/FreeBSD On Hold Due To Licensing Issues

No.

Kris

Why then? Are you guys ever going to do something about Xorg DRI/DRM
for Radeon cards, Java, and Flash support? More importantly:
1. Xen Dom0 support?
2. Fix SATA RAID driver problems?
3. Better chipset support for new 51xx Xeon and Core 2 Duo systems?
4. ZFS support?
5. Better support for 2TB, or greater, RAID arrays: (fsck, etc.)?
6. Speed up GigE and 10GigE stuff? checksum offloading, Interrupt load
problems, packet processing speed, etc?
7. Better SMP support, GIANT lock in RAID/LAN drivers, etc...

Why should I continue using FreeBSD when the project never delivers on
it promises?

Don't know about some of the items, but...
-Flash support with Mozilla products is being done through Mozilla's
ActionScript Engine:
http://www.adobe.com/aboutadobe/pressroom/pressreleases/200611/110706Mozilla.html.
So, I expect the latest version of Adobe's Flash Player to be supported
on all Unix platforms to some extent in the future. Sound support will
be interesting though.

-Isn't Xen handled by the Xen project and not FreeBSD?
Seems like your comment (was related) but off-topic.
-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: is THIS why the 6.2 release seems stalled ?

2007-01-09 Thread Peter Giessel

On Tuesday, January 09, 2007, at 02:38PM, Nikolas Britton [EMAIL PROTECTED] 
wrote:
Why then? Are you guys ever going to do something about Xorg DRI/DRM
for Radeon cards, Java, and Flash support? More importantly:

Why is another project's problems FreeBSD's problem?
Xorg isn't even in the base system.

If you install a port, that is your problem, but my server runs great without 
Xorg
and Xorg is not part of FreeBSD.  It will run on FreeBSD, but that is like
blaming Apple for Windows Media Player problems on Mac OS X.

2. Fix SATA RAID driver problems?

If you buy a quality SATA Raid card, with quality support, this isn't an
issue.  3ware regularly updates the drivers for their cards and
regularly commits their updates back into the base system.  Buy
a cheep card, get cheep support, buy a quality card, get quality
support.

Why should I continue using FreeBSD when the project never delivers on
it promises?

Why do you blame FreeBSD for other project's problems?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: fsck report after crash...

2007-01-09 Thread Beech Rintoul

On Tuesday 09 January 2007 14:53, Agus wrote:
 Hi, all.i suffer a blackout today when my freebsd was running, and when
 i start up again i run fsck and it reports that 5 files areUNREF..this
 happens during
 Phase 4 - Check Reference Count

 UNREF FILE I=94324 OWNER=mysql MODE=100600
 SIZE=0 MTIME=Jan 9 20:30 2007
 CLEAR? no

 and a few more with same owner and mode; the only thing that changes is the
 I,(inode, i guess)

 Is there a way to fix this?!?

Boot into single-user and run fsck -y.

Cheers,

Beech

-- 
---
Beech Rintoul - Sys. Administrator - [EMAIL PROTECTED]
/\   ASCII Ribbon Campaign  | Alaska Paradise Travel
\ / - NO HTML/RTF in e-mail  | 201 East 9Th Avenue Ste.310
 X  - NO Word docs in e-mail | Anchorage, AK 99501
/ \  - Please visit Alaska Paradise - http://www.alaskaparadise.com
---













pgplJ0aBEWv91.pgp
Description: PGP signature

Re: is THIS why the 6.2 release seems stalled ?

2007-01-09 Thread Greg 'groggy' Lehey

On Tuesday,  9 January 2007 at 17:08:45 -0600, Nikolas Britton wrote:
 On 1/9/07, Kris Kennaway [EMAIL PROTECTED] wrote:
 On Mon, Jan 08, 2007 at 09:33:18AM -0800, Jim Pazarena wrote:

 http://farragut.flameeyes.is-a-geek.org/articles/2007/01/08/a-shadow-lies-upon-all-bsd-distributions
 -
 Gentoo/FreeBSD: license problems require a development pause

 http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/gentoo-freebsd-license-problems-requires-a-development-pause
 
 The big license mess, part 2

 http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/the-big-license-mess-part-2
 --
 Gentoo/FreeBSD On Hold Due To Licensing Issues

 No.

 Why then?
 [bitch and moan session removed]

 Why should I continue using FreeBSD when the project never delivers
 on it promises?

You shouldn't.  You obviously don't understand the issues.  We don't
owe you anything.  Play an active part or go away.

Greg
--
When replying to this message, please copy the original recipients.
If you don't, I may ignore the reply or reply to the original recipients.
For more information, see http://www.lemis.com/questions.html
See complete headers for address and phone numbers.


pgpBHdulEGGwN.pgp
Description: PGP signature

Re: is THIS why the 6.2 release seems stalled ?

2007-01-09 Thread Chris

Nikolas Britton wrote:
On 1/9/07, Kris Kennaway [EMAIL PROTECTED] wrote:
On Mon, Jan 08, 2007 at 09:33:18AM -0800, Jim Pazarena wrote:

http://farragut.flameeyes.is-a-geek.org/articles/2007/01/08/a-shadow-lies-upon-all-bsd-distributions

-
Gentoo/FreeBSD: license problems require a development pause

http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/gentoo-freebsd-license-problems-requires-a-development-pause

The big license mess, part 2

http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/the-big-license-mess-part-2

--
Gentoo/FreeBSD On Hold Due To Licensing Issues

No.

Kris

Why should I continue using FreeBSD when the project never delivers on
it promises?

You shouldn't! If you are that taken back - you certainly don't need the
issues of a project that does not deliver on it's promises.

On the other hand - feel free to use Microsoft's products because we all
know that they tend to keep promises AND, as a extra bonus, create an
ultra secure OS that never fails. And as an extra extra bonus - you have
the luxury of paying a poop-load for all that ... and more!

So - with such an obvious choice (as mentioned above), you really don't
need the failed promises that this project routinely makes to you,
Nikolas Britton!

--
Best regards,
Chris

Everything is revealed to he who turns over enough stones.
(Including the snakes that he did not want to find.)

smime.p7s
Description: S/MIME Cryptographic Signature

Re: is THIS why the 6.2 release seems stalled ?

2007-01-09 Thread Andreas Rudisch

On Wed, 10 Jan 2007 00:08:45 +0100, Nikolas Britton  
[EMAIL PROTECTED] wrote:



Why then? Are you guys ever going to do something about Xorg DRI/DRM
for Radeon cards, Java, and Flash support? More importantly:


Since when is Xorg a part of FreeBSD?
Java ports / Java-diablo anyone?


1. Xen Dom0 support?
2. Fix SATA RAID driver problems?
3. Better chipset support for new 51xx Xeon and Core 2 Duo systems?
4. ZFS support?
5. Better support for 2TB, or greater, RAID arrays: (fsck, etc.)?
6. Speed up GigE and 10GigE stuff? checksum offloading, Interrupt load
problems, packet processing speed, etc?
7. Better SMP support, GIANT lock in RAID/LAN drivers, etc...


?


Why should I continue using FreeBSD when the project never delivers on
it promises?


Noone is forcing you to do so.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: is THIS why the 6.2 release seems stalled ?

2007-01-09 Thread Jerry McAllister

On Tue, Jan 09, 2007 at 05:08:45PM -0600, Nikolas Britton wrote:

On 1/9/07, Kris Kennaway [EMAIL PROTECTED] wrote:
On Mon, Jan 08, 2007 at 09:33:18AM -0800, Jim Pazarena wrote:

http://farragut.flameeyes.is-a-geek.org/articles/2007/01/08/a-shadow-lies-upon-all-bsd-distributions
-
Gentoo/FreeBSD: license problems require a development pause

http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/gentoo-freebsd-license-problems-requires-a-development-pause

The big license mess, part 2

http://farragut.flameeyes.is-a-geek.org/articles/2007/01/07/the-big-license-mess-part-2
--
Gentoo/FreeBSD On Hold Due To Licensing Issues

No.

Kris

Why should I continue using FreeBSD when the project never delivers on
it promises?

Don't.
FreeBSD is created and supported by volunteers.
Seems like you just posted a nice list of things
for you to get busy and contribute.

jerry

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FreeBSD 6.2 Release

2007-01-09 Thread Joe Holden


Ivan Voras wrote:

Note that things are different when upgrading from one major version to
another (e.g. 6.x to 7.x), though I even managed to update 5.x to 6.x
while the machine was live the whole time with only minor glitches,
solved by recompiling ports. I doubt this would work with 6.x-7.x
because of the many changes.

I'd just like to add for future reference, that upgrading to 7.x from 
6.x is possible, only problems I personally encountered was the above 
problems with ports needing to be recompiled, which is to be expected 
anyway.


Ta,
Joe
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: iSCSI

2007-01-09 Thread Marc G. Fournier

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



- --On Tuesday, January 09, 2007 12:14:15 -0500 DAve [EMAIL PROTECTED] 
wrote:

 That was my thought as well. I have my pop toasters all mounting a NFS mail
 store and when NFS goes away I don't have my NFS clients doing a fsck when
 the mount returns.

 Not sure if that is important as iSCSI is all new to me, still reading up on
 it. Does FreeBSD do anything special to a NFS mount when it returns?

'k, maybe I'm misunderstanding things, but iSCSI != NFS ... iSCSI is just 
removing your SCSI drives from your local server and putting them in a 
different location (over an ethernet connection) ... with NFS, you have one 
server to which multiple clients can connect ... with iSCSI, you have a 
one-to-one mapping of a file system on the 'target' to the server in question 
... so, again, it was my understanding that stuff like an fsck is the 
responsibility of the server, not the target, same as if the SCSI drives were 
local to the server ...

- 
Marc G. Fournier   Hub.Org Networking Services (http://www.hub.org)
Email . [EMAIL PROTECTED]  MSN . [EMAIL PROTECTED]
Yahoo . yscrappy   Skype: hub.orgICQ . 7615664
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (FreeBSD)

iD8DBQFFpDvG4QvfyHIvDvMRAhLCAKDXPvQB2ZVn3oZ42wt7su+nKmLrVgCgpyy2
UIyUtRnJy52ftxXgdoAKGT0=
=AR/j
-END PGP SIGNATURE-

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: FreeBSD 6.2 Release

2007-01-09 Thread David Stanford


Dear Sirs,

I just wanted to ask you since FreeBSD 6.2 is going to be
released, sooner or later I will be forced to upgrade my
system from 6.1 to 6.2.
Well my question goes like this: what is the best way for me
to do it? By downloading the ISO images or by doing it with
cvsup stable-supfile?

Waiting for your reply.

Best Regards,

Stefanos Sofroniou



You should take a look at:

http://www.daemonology.net/blog/2006-11-26-freebsd-6.1-to-6.2-binary-upgrade.html

...if you have no objections to a stock (GENERIC) kernel.

-David
--
[EMAIL PROTECTED] ~]# fortune
Happiness is just an illusion, filled with sadness and confusion.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: fsck report after crash...

2007-01-09 Thread Agus


Ok..done it.now, can u explain me or point me a link to the why i have
to doit in single mode and what this does??
i've done it and now when i restart in normal mode i got the same UNREF
erros plus some Phase 5 - Check Cyl Groups errors.
FREE BLK COUNT WRONG IN SUPERBLK
Salvage? no

BLK MISSING IN BIT MAPS
Salvage?no

then i did a fsck in normal mode and this last errors disappear but still
get the first ones

thanx.

2007/1/9, Beech Rintoul [EMAIL PROTECTED]:


On Tuesday 09 January 2007 14:53, Agus wrote:
 Hi, all.i suffer a blackout today when my freebsd was running, and
when
 i start up again i run fsck and it reports that 5 files
areUNREF..this
 happens during
 Phase 4 - Check Reference Count

 UNREF FILE I=94324 OWNER=mysql MODE=100600
 SIZE=0 MTIME=Jan 9 20:30 2007
 CLEAR? no

 and a few more with same owner and mode; the only thing that changes is
the
 I,(inode, i guess)

 Is there a way to fix this?!?

Boot into single-user and run fsck -y.

Cheers,

Beech

--

---
Beech Rintoul - Sys. Administrator - [EMAIL PROTECTED]
/\   ASCII Ribbon Campaign  | Alaska Paradise Travel
\ / - NO HTML/RTF in e-mail  | 201 East 9Th Avenue Ste.310
X  - NO Word docs in e-mail | Anchorage, AK 99501
/ \  - Please visit Alaska Paradise - http://www.alaskaparadise.com

---















___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Question on roaming VPNs using mpd, NAT, and FreeBSD6

2007-01-09 Thread Tom Norris

Hello everyone,

(sorry if this double-posts, I sent from my unsubscribed work-email account
the first time around...)

I have a machine running FreeBSD6 happily humming along in a
(remote) datacenter.  I managed to get mpd running thanks to this (
http://web.archive.org/web/20050507010741/http://freebsdaddicts.org/forum/vi
ewtopic.php?id=253 ) guide, and now I'm trying to set up NAT/DHCP on the
server.  I am doing this because I am trying to encrypt my network traffic
over my school's network, because my tinfoil hat has been a lot thicker
lately ;)

The best visualization I can make of what I am trying to achieve is this:
   Windows2003 Laptop (school) == tunnel over internet == FreeBSD
(datacenter) == whatever-part-of-the-internet-my-laptop-asked-for

I can manage to make my laptop connect to my FreeBSD machine, but I
can't contact any sites other than that FreeBSD Machine.  Meaning, on my
laptop, if I type:
C:\Documents and Settings\Tomping google.com

Pinging google.com [72.14.207.99] with 32 bytes of data:

Control-C
^C

I get nothing, but if I do:

C:\Documents and Settings\Tomping a.b.c.190

Pinging a.b.c.190 with 32 bytes of data:

Reply from a.b.c.190: bytes=32 time=101ms TTL=49 Reply from a.b.c.190:
bytes=32 time=76ms TTL=49

Ping statistics for a.b.c.190:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round
trip times in milli-seconds:
Minimum = 76ms, Maximum = 101ms, Average = 88ms Control-C ^C

I get a reply. (63.246.146.190 being the FBSD Machine)

Is enabling internet access for the laptop just a case of adding
gateway_enable=YES and natd_enable=YES in /etc/rc.conf then adding
/usr/sbin/dhcpd (network-alias) -q to my startup scripts on the FreeBSD
machine?  If this is true, will natd work with only one network card with
multiple IP addresses aliased to it(for example: vr0_alias0=a.b.c.190,
vr0_alias1=a.b.c.191, vr0_alias2=a.b.c.192 ... vr0_alias9=a.b.c.199)  Also,
is it possible to assign the laptop one of the external IPs, so if user foo
connects to a.b.c.194 (for the sake of argument), traffic gets forwarded to
the laptop?

Thank You for Your Time,
Tom Norris


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: fsck report after crash...