Re: How to know who use NFS.

2007-09-25 Thread Martin Alejandro Paredes Sanchez
El Lun 24 Sep 2007, Albert Shih escribió:
  Le 23/09/2007 à 00:27:15-0700, Martin Alejandro Paredes Sanchez a écrit
 I've two servers :

   Server A (NFS) --- NFS -- Server B

 On server A there one service is NFS, and server B is it's client.

 On server B I've lot of users, some users make very huge transfert throught
 NFS (what I don't want), huge = ~ 10-100 Go in one time (big file).

 I want to known who did this, because I've lot of users it's not easy to
 known when I'm using top/ps to known who did this (sometime it's the output
 of some scientifique software).

 The solution you give me can tell me the name of server B, but this thing I
 known it ;-), what I want to known is WHO on server B.


Ok, that change the problem, but I think tcpdump is still usefull, only if the 
the problem is caused when a user copy one huge file in one time, this 
because I assume 1 socket is created for each file copied (I am not an expert 
in NFS)

In computer B run this command (piped) as root

tcpdump -c 100 -nq dst port nfs and dst host serverB
nawk 'BEGIN {FS=[ .]}{print $8}'
nawk '{packets[$1]++} END{for (ip in packets){print packets[ip], ip}}'
sort -rn

In the last line will appear socket number that generate more packets, 
something like this:

59891

To know who has that socket, run

# sockstat -4c | grep :59891
USER COMMANDPID   FD PROTO  LOCAL ADDRESS FOREIGN ADDRESS
martin   kdeinit1173  9  tcp4   192.168.45.25:59891   192.168.45.43:2049

The first column is the user, lets see what is doing

# ps -wxU martin


 Do you think I need to use dark side of the forceI known it's not more
 powerful, but it's more easy ;-)


You mean windows (for the easy), NN.

If the problem is caused, because the user is copying a folder

cp  ~/MySmallFiles/*  /serverB/dest/

maybe, each file will create a different socket, because of that, you will 
need to translate each socket to a user before counting the packets, I think 
that is a job for perl, phyton or something like that.

maps
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Nikos Vassiliadis
On Tuesday 25 September 2007 06:07, Howard Goldstein wrote:
 Gary Kline wrote:
  My earlier post about deleting the first N lines was answered by
  this one-liner site {below}.   I wasn't including any
  redirection; doing so finally resolved the problem.  Now I need
  to delete every line from the 19th or so to the last line.

sed -e 18q
that is, quit after processing line 18.

  Question one, can anybody explain the following syntax?  What do
  P, D ba represent, in other words?

The manual page explains sed in a very good way. For sure, better
than I could describe it here. You'd better read it.

 
 
   # delete the last 10 lines of a file
   sed -e :a -e '$d;N;2,10ba' -e 'P;D'   # method 1
   sed -n -e :a -e '1,10!{P;N;D;};N;ba'  # method 2
 
 
  Question two, can sed do its thing inline?

Yes.
 -i extension
 Edit files in-place, saving backups with the specified extension.
 If a zero-length extension is given, no backup will be saved.  It
 is not recommended to give a zero-length extension when in-place
 editing files, as you risk corruption or partial content in situ-
 ations where disk space is exhausted, etc.


 Wouldn't it be easier to use  head -n 18 ?

No, it's the same. Some sed operation are trivial to read/write,
others aren't.

HTH

Nikos
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Override ports security restrictions?

2007-09-25 Thread Tim DeBoer
I'm trying to install /usr/ports/graphics/png

===  png-1.2.12_1 has known vulnerabilities:
= png -- DoS crash vulnerability.
   Reference: 
http://www.FreeBSD.org/ports/portaudit/4cb9c513-03ef-11dc-a51d-0019b95d4f14.html
= Please update your ports tree and try again.
*** Error code 1

While I can appreciate the attempt to protect me from doing something
stupid, I really do need to get this installed, and from what I've
read, it looks like a non-issue for me.

Is there a way to get force ports to install this package?

Thanks!

-- 
Tim DeBoer
Just once, I'd like it if someone called me Sir.
Without adding You're creating a scene.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Override ports security restrictions?

2007-09-25 Thread Karol Kwiatkowski
Tim DeBoer wrote:
 I'm trying to install /usr/ports/graphics/png
 
 ===  png-1.2.12_1 has known vulnerabilities:
 = png -- DoS crash vulnerability.
Reference: 
 http://www.FreeBSD.org/ports/portaudit/4cb9c513-03ef-11dc-a51d-0019b95d4f14.html
 = Please update your ports tree and try again.
 *** Error code 1
 
 While I can appreciate the attempt to protect me from doing something
 stupid, I really do need to get this installed, and from what I've
 read, it looks like a non-issue for me.
 
 Is there a way to get force ports to install this package?

from ports(7):

%   DISABLE_VULNERABILITIES
%  If defined, disable check for security vulnerabilities
%  using portaudit(1) (ports/ports-mgmt/portaudit) when
%  installing new ports.

To force it this lony time use something like 'make
-DDISABLE_VULNERABILITIES install'.

HTH,

Karol

-- 
Karol Kwiatkowski   karol.kwiat at gmail dot com
OpenPGP 0x06E09309



signature.asc
Description: OpenPGP digital signature


Re: php5

2007-09-25 Thread Gabriel Dragffy

On 25 Sep 2007, at 00:20, Thomas Abthorpe wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Monday 24 September 2007 18:59:00 Bill Banks wrote:

I just installed php5 but if I goto index.php it wants to download it
and not display it. What am I missing?


You are likely missing the following lines from your httpd.conf

AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps



Also make sure you compiled the apache module. If installing from  
ports it asks you. However, if you installed from a package it won't  
have this enabled. Assuming you're using apache, natch.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Override ports security restrictions?

2007-09-25 Thread Erik Trulsson
On Tue, Sep 25, 2007 at 01:27:05AM -0600, Tim DeBoer wrote:
 I'm trying to install /usr/ports/graphics/png
 
 ===  png-1.2.12_1 has known vulnerabilities:
 = png -- DoS crash vulnerability.
Reference: 
 http://www.FreeBSD.org/ports/portaudit/4cb9c513-03ef-11dc-a51d-0019b95d4f14.html
 = Please update your ports tree and try again.
 *** Error code 1
 
 While I can appreciate the attempt to protect me from doing something
 stupid, I really do need to get this installed, and from what I've
 read, it looks like a non-issue for me.
 
 Is there a way to get force ports to install this package?

Yes. Use 'make -DIGNORE_VULNERABILITIES install' 
(This is documented in the ports(7) manpage.)


-- 
Insert your favourite quote here.
Erik Trulsson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


xorg.conf -- how to make use of Modeline

2007-09-25 Thread Andriy Babiy
Hi everybody!

I want to explicitly set the video mode used by X server. Generally, X works 
with the default xorg.conf, generated with X -configure. But the picture is 
unstable: there are tiny waves that I wanted to get rid of. The xorg.conf 
manual page describes how to set mode to be used. First, I generated the 
Modeline with gtf, then inserted the line to the Monitor section and referenced 
it in the Display subsection. Probably, my config is incorrect because it is 
simply ignored, and X server starts always with the same resolution and refresh 
rate 1024x768x85Hz.
I wanted to ask if this is the correct way of setting the resolution / refresh 
rate. 

$uname -a
FreeBSD xxx.yyy.com 6.2-STABLE FreeBSD 6.2-STABLE #0: Thu Sep 20 23:24:38 PDT 
2007 root@:/usr/obj/usr/src/sys/AMD64  amd64

Ports were upgraded to the latest as of Sep 22.

$ cat /etc/X11/xorg.conf
Section ServerLayout
Identifier X.org Configured
Screen  0  Screen0 0 0
InputDeviceMouse0 CorePointer
InputDeviceKeyboard0 CoreKeyboard
EndSection

Section Files
RgbPath  /usr/local/share/X11/rgb
ModulePath   /usr/local/lib/xorg/modules
FontPath /usr/local/lib/X11/fonts/misc/
FontPath /usr/local/lib/X11/fonts/TTF/
FontPath /usr/local/lib/X11/fonts/OTF
FontPath /usr/local/lib/X11/fonts/Type1/
FontPath /usr/local/lib/X11/fonts/100dpi/
FontPath /usr/local/lib/X11/fonts/75dpi/
EndSection

Section Module
Load  extmod
Load  record
Load  dbe
Load  glx
Load  GLcore
Load  xtrap
Load  dri
Load  freetype
Load  type1
EndSection

Section InputDevice
Identifier  Keyboard0
Driver  kbd
EndSection

Section InputDevice
Identifier  Mouse0
Driver  mouse
Option  Protocol auto
Option  Device /dev/sysmouse
Option  ZAxisMapping 4 5 6 7
EndSection

Section Monitor
#DisplaySize  310   230 # mm
Identifier   Monitor0
VendorName   SAMSUNG
ModelNameSyncMaster 793DF
 ### Comment all HorizSync and VertRefresh values to use DDC:
HorizSync30.0 - 71.0
VertRefresh  50.0 - 160.0
UseModesmodes60Hz
Option  DPMS
EndSection

Section Device
### Available Driver options are:-
### Values: i: integer, f: float, bool: True/False,
### string: String, freq: f Hz/kHz/MHz
### [arg]: arg optional
#Option NoAccel   # [bool]
#Option SWcursor  # [bool]
#Option Dac6Bit   # [bool]
#Option Dac8Bit   # [bool]
#Option BusType   # [str]
#Option CPPIOMode # [bool]
#Option CPusecTimeout # i
#Option AGPMode   # i
#Option AGPFastWrite  # [bool]
#Option AGPSize   # i
#Option GARTSize  # i
#Option RingSize  # i
#Option BufferSize# i
#Option EnableDepthMoves  # [bool]
#Option EnablePageFlip# [bool]
#Option NoBackBuffer  # [bool]
#Option DMAForXv  # [bool]
#Option FBTexPercent  # i
#Option DepthBits # i
#Option PCIAPERSize   # i
#Option AccelDFS  # [bool]
#Option DDCMode   # [bool]
#Option IgnoreEDID# [bool]
#Option DisplayPriority   # [str]
#Option PanelSize # [str]
#Option ForceMinDotClock  # freq
#Option ColorTiling   # [bool]
#Option VideoKey  # i
#Option RageTheatreCrystal# i
#Option RageTheatreTunerPort  # i
#Option RageTheatreCompositePort  # i
#Option RageTheatreSVideoPort # i
#Option TunerType # i
#Option RageTheatreMicrocPath # str
#Option RageTheatreMicrocType # str
#Option ScalerWidth   # i
#Option RenderAccel   # [bool]
#Option SubPixelOrder # [str]
#Option ShowCache # [bool]
#Option DynamicClocks # [bool]
#Option VGAAccess # [bool]
#Option ReverseDDC# [bool]
#Option LVDSProbePLL  # [bool]
#Option AccelMethod   # str
#Option DRI   # [bool]
#Option ConnectorTable# str

Bandwidth filter with ipfw don't work

2007-09-25 Thread Edgardo Nuevo
Hi
I have Freebsd 6,2 with 2 cards of network, vr1 (10.0.1.10 with access
to Internet), vr0 (192.168.1.1 internal network), I have configured
ipfw + dummynet, when I configure a PC with 192.168.1.x does not work,
but I put an IP type 10.0.1.x its works, what's error?

### firewall.rules ###
-f flush
add 0012 skipto 20 all from any to any not layer2 in via vr0
# Define MAC's users
add 0013 skipto 20 all from any to any { MAC 00:1b:24:3b:4f:xx any or
MAC any 00:1b:24:3b:4f:xx } layer2
add 0014 skipto 20 all from any to any { MAC 00:1b:24:25:yy:69 any or
MAC any 00:1b:24:25:yy:69 } layer2

#Deny MACs not defined
add 0019 deny log logamount 100 ip from any to any MAC any any layer2 via vr0

# Enable NAT
add 0020 divert natd all from any to any via vr1

# Define pipe per MAC's
add pipe 1 ip from any to any MAC 00:1b:24:3b:4f:xx any in via vr0
add pipe 2 ip from any to any MAC any 00:1b:24:3b:4f:xx in via vr0

add pipe 3 ip from any to any MAC 00:1b:24:25:yy:69 any
add pipe 4 ip from any to any MAC any 00:1b:24:25:yy:69

# Define bandwith per pipe
pipe 1 config bw 50Kbit/s
pipe 2 config bw 50Kbit/s

pipe 3 config bw 6Kbit/s
pipe 4 config bw 6Kbit/s

add 0500 allow all from any to any
###

### sysctl.conf ###
net.link.ether.bridge.enable=1
net.link.ether.bridge_cfg=vr1:1,vr0:2
net.link.ether.bridge_ipfw=1
net.ip.dummynet.debug=1
net.inet.ip.fw.enable=1
net.link.ether.ipfw=1
###

Thanks

Dark Night Rider
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Override ports security restrictions?

2007-09-25 Thread Tim DeBoer
On 9/25/07, Erik Trulsson [EMAIL PROTECTED] wrote:
 On Tue, Sep 25, 2007 at 01:27:05AM -0600, Tim DeBoer wrote:
  I'm trying to install /usr/ports/graphics/png
 
  ===  png-1.2.12_1 has known vulnerabilities:
  = png -- DoS crash vulnerability.
 Reference: 
  http://www.FreeBSD.org/ports/portaudit/4cb9c513-03ef-11dc-a51d-0019b95d4f14.html
  = Please update your ports tree and try again.
  *** Error code 1
 
  While I can appreciate the attempt to protect me from doing something
  stupid, I really do need to get this installed, and from what I've
  read, it looks like a non-issue for me.
 
  Is there a way to get force ports to install this package?

 Yes. Use 'make -DIGNORE_VULNERABILITIES install'
 (This is documented in the ports(7) manpage.)


 --
 Insert your favourite quote here.
 Erik Trulsson
 [EMAIL PROTECTED]


Hmmm, it seems to want to work, but I end up with a bunch of errors.

# make -DIGNORE_VULNERABILITIES install
/usr/ports/Mk/bsd.port.mk, line 2294: warning: String co
mparison operator should be either == or !=
/usr/ports/Mk/bsd.port.mk, line 2294: warning: String co
mparison operator should be either == or !=
/usr/ports/Mk/bsd.port.mk, line 2294: Malformed conditio
nal (((${OSVERSION}  504105 || (${OSVERSION} = 60 
 ${OSVERSION}  600103) || (${OSVERSION} = 70  ${OS
VERSION}  700012))  ${PKGORIGIN} != ports-mgmt/pkg_ins
tall) || exists(${LOCALBASE}/sbin/pkg_info))
/usr/ports/Mk/bsd.port.mk, line 2295: warning: String co
mparison operator should be either == or !=
/usr/ports/Mk/bsd.port.mk, line 2295: warning: String co
mparison operator should be either == or !=
/usr/ports/Mk/bsd.port.mk, line 2295: Malformed conditio
nal ((${OSVERSION}  504105 || (${OSVERSION} = 60 
${OSVERSION}  600103) || (${OSVERSION} = 70  ${OSV
ERSION}  700012))  ${PKGORIGIN} != ports-mgmt/pkg_inst
all)
/usr/ports/Mk/bsd.port.mk, line 6100: if-less endif
/usr/ports/Mk/bsd.port.mk, line 6100: Need an operator
/usr/ports/Mk/bsd.port.mk, line 6103: if-less endif
/usr/ports/Mk/bsd.port.mk, line 6103: Need an operator
make: fatal errors encountered -- cannot continue

Any thoughts?

Thanks, I really do appreciate the help  :-)


-- 
Tim DeBoer
Just once, I'd like it if someone called me Sir.
Without adding You're creating a scene.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Gvinum and RAID 5 (again)

2007-09-25 Thread Gabriel Dragffy

Hi,

I've found out that gvinum won't let you grow a RAID 5 system without  
obliterating it first. Something that I haven't been able to  
ascertain is if gvinum will let you add discs to a RAID 5 array later  
on as hot spares?


Many thanks for so much help

Gabe
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Override ports security restrictions?

2007-09-25 Thread Tim DeBoer
On 9/25/07, Tim DeBoer [EMAIL PROTECTED] wrote:
[snip]
 Hmmm, it seems to want to work, but I end up with a bunch of errors.

 # make -DIGNORE_VULNERABILITIES install
 /usr/ports/Mk/bsd.port.mk, line 2294: warning: String co
 mparison operator should be either == or !=
 /usr/ports/Mk/bsd.port.mk, line 2294: warning: String co
 mparison operator should be either == or !=
 /usr/ports/Mk/bsd.port.mk, line 2294: Malformed conditio
 nal (((${OSVERSION}  504105 || (${OSVERSION} = 60 
  ${OSVERSION}  600103) || (${OSVERSION} = 70  ${OS
 VERSION}  700012))  ${PKGORIGIN} != ports-mgmt/pkg_ins
 tall) || exists(${LOCALBASE}/sbin/pkg_info))
 /usr/ports/Mk/bsd.port.mk, line 2295: warning: String co
 mparison operator should be either == or !=
 /usr/ports/Mk/bsd.port.mk, line 2295: warning: String co
 mparison operator should be either == or !=
 /usr/ports/Mk/bsd.port.mk, line 2295: Malformed conditio
 nal ((${OSVERSION}  504105 || (${OSVERSION} = 60 
 ${OSVERSION}  600103) || (${OSVERSION} = 70  ${OSV
 ERSION}  700012))  ${PKGORIGIN} != ports-mgmt/pkg_inst
 all)
 /usr/ports/Mk/bsd.port.mk, line 6100: if-less endif
 /usr/ports/Mk/bsd.port.mk, line 6100: Need an operator
 /usr/ports/Mk/bsd.port.mk, line 6103: if-less endif
 /usr/ports/Mk/bsd.port.mk, line 6103: Need an operator
 make: fatal errors encountered -- cannot continue

 Any thoughts?

 Thanks, I really do appreciate the help  :-)

Never mind that. I'm an idiot.
I was trying to build on the machine I'm going to replace.
Observation skills FTW.

make DISABLE_VULNERABILITIES=yes install

Did the trick.

Thanks for the help!

-- 
Tim DeBoer
http://www.freebsd-geek.com
Just once, I'd like it if someone called me Sir.
Without adding You're creating a scene.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Hinged Cables

2007-09-25 Thread support

   [Images_Header.jpg ]
 
   Acme Electronics = Inc
   Attn:  Purchasing
   Dear Purchasing,

   These cables are  the result of our design engineers listening toour  
customers.
   Plugging in a network cable, = even  into tight spots, is easy.
   Unplugging a = cable  sometimes requires hiring a a contortionist.

These cable = are  revolutionizing the way network cables aremade.   
Our customers love these new cables and they = commonly buy
   more = after the  first order.

   The improvement in = these new  hinged boot cables is in the ease
   of insertion = and  removal.  Traditional RJ45 boots, although 
   initially a big hit, had limitations. In tight = spaces,  they were
   difficult to access, they lost some  flexibility with age, and they
   made an RJ45 plug a = bit  bulky.

   To improve RJ45 = plug  insertion, removal and provide a snagless
   feature, = our  engineers designed an injection molded strainrelief  
without adding any bulk to the plug, and best of = all -- 
   provide a hinged push button to release the = captivator  clip
   holding in the RJ45 Plug.  You have to  feel how easy = these 
   cables unplug!

   New Hinged = Network  Cables
   Hinged Boot Molded Cat = 5E  Cables
   [LifetimeWarranty-An=]
   Length Description

   Cost

   Select  Color

   Buy
   3 Foot Molded  Hinged Network Cable %getprice(17-6097z0-003)%$1.22 
Select in  store

   [3-Buy.gif ]  
   5 Foot Molded  Hinged Network Cable $1.58 Select in  store
   [3-Buy.gif ]
   7 Foot Molded  Hinged Network Cable %getprice(17-6097z0-007)%$2.03 
Select in  store [3-Buy.gif ]
   10 Foot Molded  Hinged Network Cable %getprice(17-6097z0-007)%$2.52 
Select in  store [3-Buy.gif ]
   14 Foot Molded  Hinged Network Cable %getprice(17-6097z0-014)%$3.35 
Select in  store [3-Buy.gif ]
   25 Foot Molded  Hinged Network Cable %getprice(17-6097z0-025)%$4.88 
Select in  store [3-Buy.gif ]

   To  buy 1  - Click on the [3-Buy.gif ] button and = you will
   be  re-directed to our  E-store.
 2  - Call your Account Manager - = Drocer = Nepo  at 1-800-658-5883
   [new-snagless-trans.gif ] [old-boot-trans.gif ]

   New Molded RJ45  Boot



   Old Style RJ45  = Boot

   You have to  FEEL how easy it is to plug
   and unplug = these  = cables!

   = /tbody

   [cable-rainbow-white-64.jpg ]
   Available in a = rainbow of  colors
   Colors available = are:   Blue - Gray - White - Black - Red - Yellow
   - = Green  - Orange - Purple
   Each Cat 5E cable has 2 = Boots  (Molded or Slip-on), is made from
   Flexible  Stranded Wire, and carries our Lifetime  Warranty.
   We also have a large  assortment of Cat 6 cables in stock and cancustom  
manufacture any type of  cables.
   [Fiber-promo-test-white-trans-2=] [Fiber-promo-inspect-white-tran=]
   [Fiber-promo-oven-white-trans-2=]

   Each cable is = certified using  computer based = equipment
   Each Cable is also 
   extensively visually   tested High  volume production with
   state-of-the-art  = equipment


   Call = me with  any questions,
   Drocer Nepo
   Account  Manager
   602 863-2655

   E-Store - =
   Buy  online any time day or  = night   nbs= p;

[e-store-1-white-150.jpg=]


   Cabling  Products Catalog
   UPS  and Battery E-Store
   [1]Email  us
   Sent to -  [EMAIL PROTECTED]
   Phoenix  - Scottsdale - Tucson - Las Vegas - Salt Lake City = - 
   Myrtle Beach
   If you would like to be removed = from  this email notification,
   click -  [2]Remove 


   [bottom.jpg ]
   = /tbody

References

   1. 3Dmailto:[EMAIL PROTECTED]
   2. 3Dmailto:[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: can not start phpmyadmin after upgrade to 2.10.3

2007-09-25 Thread A.Rymkus
Hi, vuthecuong.

You wrote at 04.08.2007, 11:12:48:

v Today when after upgrade phpmyadmin through portupgrade from 2.10.2 to
v 2.10.3
v when I browse to phpmyadmin page, it said:


v   phpMyAdmin - Error

v Cannot start session without errors, please check errors given in your
v PHP and/or webserver log file and configure your PHP installation properly.

v What's is this error?
v How can I solve it?
v Tnx in advanced

v ___
v freebsd-questions@freebsd.org mailing list
v http://lists.freebsd.org/mailman/listinfo/freebsd-questions
v To unsubscribe, send any mail to
v [EMAIL PROTECTED]

You have to update php5-session port, it's usually installed by
php5-extensions port.
At my home FreeBSD box I'd just ran following command:
  portupgrade php*
and in the morning all the things were working... May be you will want
to run
  portupgrade php5-session
I think it would help you ;)



-- 
WBR, A.Rymkus

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Booting to Sysinstall

2007-09-25 Thread Jerahmy Pocott


On 25/09/2007, at 1:57 AM, Manolis Kiagias wrote:


Jerahmy Pocott wrote:

Hello,

Okay so here is the situation:
Server has dead fd and cd drives, or maybe none at all. You want  
to install FreeBSD

on it.

The idea I had was to create a small partition, copy the contents  
of a cd into, set it
to boot off that partition, reboot and it would boot up into  
sysinstall.


Would this be possible? Or is it a dumb idea?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions- 
[EMAIL PROTECTED]



The problem with this approach is, you actually need to boot the  
FreeBSD kernel to continue with the install. Just by marking a  
partition as bootable, will not make it boot, and neither copying  
the FreeBSD CD contents will. You have to write a suitable boot  
sector that will load the rest of the OS, be it DOS, Windows,  
FreeBSD or whatever. And the fact remains, to install FreeBSD you  
have to boot into the FreeBSD kernel.


Okay, well say I used some tools to create a UFS partition, put the  
contents of the Boot Only iso on it and put the FreeBSD
boot loader program into the MBR (it's boot0?) how could I get it to  
load the kernel? There seem to be a number of different

boot straps, boot, cdboot, pxeboot etc, on this iso image..

I experimented with this on an existing installation and for some  
reason the slice I created to boot into the basic environment
to install from ended up booting the existing installation instead of  
the version in the slice it was booting from?!



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to downgrade from xorg-7.3 to xorg-7.2 ...

2007-09-25 Thread Lena
On Sat, 22 Sep,  Mel [EMAIL PROTECTED] wrote:

  I recently upgraded to xorg-7.3

  how can I safely downgrade back to xorg-7.2?

 If you still have xorg-7.2 packages this is the fastest:
 (cd /usr/ports/x11/xorg  make all-depends-list)|xargs pkg_delete -f
 env PKGDIR=/path/to/packages/All pkg_add /path/to/packages/All/xorg-7.2.tbz

Will following work right?

cd /usr/ports/x11/xorg
make all-depends-list | xargs pkg_delete -f
cd /usr/ports/packages/All
fetch 
ftp://ftp2.ua.FreeBSD.org/pub/FreeBSD/ports/i386/packages-6-stable/All/xorg-7.2.tbz
pkg_add -r xorg-7.2.tbz

 Unfortunately since the xorg-modular joy[1] there's no good way to make 
 portupgrade ignore an upgrade via HOLD_PKGS, so you need to go back to manual 
 upgrading, deciding port by port what you can upgrade and don't use -R or -r 
 in case a dep on X is pulled in.

Thanks,

Lena
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to downgrade from xorg-7.3 to xorg-7.2 ...

2007-09-25 Thread Lena
 Date: Sat, 22 Sep 2007 15:38:25 +0200
 From: Mel [EMAIL PROTECTED]

  I recently upgraded to xorg-7.3

  how can I safely downgrade back to xorg-7.2?

 If you still have xorg-7.2 packages this is the fastest:
 (cd /usr/ports/x11/xorg  make all-depends-list)|xargs pkg_delete -f
 env PKGDIR=/path/to/packages/All pkg_add /path/to/packages/All/xorg-7.2.tbz

Will following work right?

cd /usr/ports/x11/xorg
make all-depends-list | xargs pkg_delete -f
cd /usr/ports/packages/All
fetch 
ftp://ftp2.ua.FreeBSD.org/pub/FreeBSD/ports/i386/packages-6-stable/All/xorg-7.2.tbz
pkg_add -r xorg-7.2.tbz

 Unfortunately since the xorg-modular joy[1] there's no good way to make 
 portupgrade ignore an upgrade via HOLD_PKGS, so you need to go back to manual 
 upgrading, deciding port by port what you can upgrade and don't use -R or -r 
 in case a dep on X is pulled in.

Thanks,

Lena
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Proposal for Web Development Services

2007-09-25 Thread Anjali Gupta
Hello,

Let me first introduce ourselves.

We at Phxx WebLaunch Solutions, LLC, are an IT enabled Service (ITES)
company dealing primarily in Website design, Graphics design, Application
development, E-commerce, Flash animations, Banners and Corporate brandings
(Logo  Stationery).

We distinguish ourselves by offering high quality services and a willingness
to work around the clock to get your job done (fast turnaround). With our
work, most firms have achieved a significant savings by outsourcing their
Website designs  Development; Graphic/Flash designs projects to us.

We have expertise in following areas:

- Logo Design  Stationery Design (Brochure/Letterheads/Business
cards/Envelops etc)
- Full Website design (Web 2.0)
- Complete Web Development (Web 2.0  Ajax)
- Search Engine Marketing (SEM)  Search Engine Optimization (SEO)
- Complete Shopping Solutions (os-Commerce/ZenCart/X-Cart)

*Technology Expertise*
HTML/XHTML/DHTML/SHTML/XML/XSLT
ASP/DOTNET/PHP/PEARL/Ruby on Rails (RORs)/ AJAX
MSSQL/MYSQL (Advanced Database interactivity)
PSD/CDR/EPS/AI/FLA (Action Script 2.0)

Our detailed work samples, Client Testimonials  Client can be seen at
http://www.WebLaunch.com http://www.weblaunch.com/

Do let us know if this interests you and I'll be happy to answer your
questions.

Regards,

Anjali Gupta
Business Development
Phxx WebLaunch Solutions, LLC
http://WebLaunch.com http://weblaunch.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Update on data corruption with Tyan/3Ware

2007-09-25 Thread Bart Silverstrim

Ted Mittelstaedt wrote:



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bart
Silverstrim
Sent: Monday, September 24, 2007 7:05 PM
To: Ted Mittelstaedt
Cc: Chris Boyd; freebsd-questions@freebsd.org
Subject: Re: Update on data corruption with Tyan/3Ware




Ted Mittelstaedt wrote:

3ware is supported by the manufacturer - what do they say?

Ted


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Chris Boyd
Sent: Monday, September 24, 2007 2:54 PM
To: freebsd-questions@freebsd.org
Subject: Update on data corruption with Tyan/3Ware


Here's an update on my odd problem.  Thanks to Don B for some hints
that helped us start looking in a better directions.

System is a Tyan Thunder K8SE motherboard with dual Opteron 250
2.4GHz CPUs and a 3Ware 9550SX-4LP PCI Express four port RAID
controller running in RAID 5.  Disks are 4x Seagate 500GB SATA.  4GB
Memory.

Latest BIOS and firmware on mobo and RAID controller.

FreeBSD 6.2 AMD64 with all patches as of 9-21-2007

We've narrowed the problem down to files that are  4GB.  Anytime we
have a file that's  4GB, we get inconsistent checksums, can't
uncompress it, etc.  Files  4GB are fine.

So is this a RAID controller issue?  A filesystem problem?  All hints
appreciated.

How are you getting the files on the system?  Network transfer? Direct
copy from a disc?

What filesystem is it you're using?

3ware is well supported under Linux, from what I can tell and what I've
experienced, and can't imagine that a manufacturer with a good track
record of driver support for Linux for so long would not support FreeBSD
as well.


Bart and Chris,

  The problem might be that the 3ware driver uses a 32 bit int to
represent
a file size.  In FreeBSD, stat() ftruncate() lseek() and
friends which are based on strut stat had this limitation under FreeBSD
4.xx.

  Note line# 821 of twe_freebsd.c the driver:

sc-twed_disk-d_maxsize = (TWE_MAX_SGL_LENGTH - 1) * PAGE_SIZE;
sc-twed_disk-d_sectorsize = TWE_BLOCK_SIZE;
sc-twed_disk-d_mediasize = TWE_BLOCK_SIZE *
(off_t)sc-twed_drive-td_size;
sc-twed_disk-d_fwsectors = sc-twed_drive-td_sectors;

that off_t also appears elsewhere.

  I'm not a driver programmer but I'd bet the driver hasn't been updated
for 64 bit FreeBSD.


A) Holy @[EMAIL PROTECTED] job and thank you for pointing that out!  :-)
B) Does that mean that this would affect all 3Ware products on FreeBSD, 
or only when running the 64 bit OS?  I believe I am storing 4+ gig files 
on a Linux system with a 3Ware controller in it and to my knowledge 
there hasn't been any problems with it.


Sorry if it's a silly question...I'm not a programmer.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Confusion on SSH and PAM

2007-09-25 Thread Rakhesh Sasidharan


Hi,

I've spent a fair bit of yesterday and today playing around with this. 
Have reached some confusing conclusions.


Here's a snippet from my ''sshd_config'' file:

8---
PubkeyAuthenticationyes
ChallengeResponseAuthentication yes
PermitRootLogin without-password
PasswordAuthentication  no
UsePAM  yes
8---

The idea being that I use Public Key authentication. No password 
authentication. Yes to PAM authentication etc (my understanding is that 
*if* Public Key auth fails then this is invoked). And root is allowed 
login using Key authentication.


Here's the SSHD section for PAM:

8---
auth  required  pam_nologin.so  no_warn
auth  required  pam_unix.so try_first_pass
account   required  pam_login_access.so
account   required  pam_unix.so
session   required  pam_permit.so
password  required  pam_unix.so no_warn try_first_pass
8---

Pretty standard config.

As long as I login as root with a key, things work as expected.

However, when I login as root without a key I am prompted for the 
password, and even though I enter the password correctly I am prompted 
again for a total of 3 times and then it fails.


After a bit of trial and error, I finally figured that setting 
''PermitRootLogin yes'' lets root login without a key. So it seems to me 
that when I don't use Key authentication, PAM is invoked, and even though 
I supply the correct root password I am prompted again and again for a 
password coz root login is disallowed by SSHD. Strange, coz I was under 
the impression that as far as PAM is concerned I have successfully 
authenticated, so shouldn't it have OK-ed me and left SSH to refuse login 
with some message? Why ask for the password thrice and then refuse?


I also tried without the ''no_warn'' option in the pam_unix module. That 
time I get an error like this after each password input:


8---
pam_unix: pam_sm_authenticate: UNIX authentication refused
8---

Any ideas or nudges in the right direction as to why this is happening? 
Looks like I've understood the interaction between SSH and PAM wrong here, 
so would appreciate some enlightenment.


Regards,

- Rakhesh
http://rakhesh.net/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Is anybody here running Pidgin (under FreeBSD)?

2007-09-25 Thread Christian Baer
Hi there again, peeps!

Since I still can't get Pidgin to run on this box and it seems that nobody
had any advice for me, I have decided to go at this step by step. I hope
you can bear with me on this one. BTW. The note on the subject, running
Pidgin under FreeBSD, is there because not all people on this list
actually don't use FreeBSD for everything. :-)

If there is someone who runs Pidgin under FreeBSD behind a router and is
willing to help me, would you please do the following:

- run Pidgin from a console or Xterm (XServer must be running) with the -d
  option.

- Send the result to me. Pidgin does not share any sensitive data in this
  mode apart from you IPs, which you can change like this: 192.168.x.x. If
  you do this, make sure that I can still distinguisch the private and
  public IPs.

- Let me know how you installed Pidgin (from the ports or with pkg_add).

- Tell me what Version of Pidgin this is.

You might find a post from me on this list, where I described what I am
looking for. Don't worry about that, I just need information because at
the moment I can't do much more than guess what the Problem is.

To give you a short version...
I noticed this in my log:

(00:59:33) stun: using server
(00:59:33) nat-pmp: found a default gateway
(00:59:33) nat-pmp: Attempting to retrieve the public ip address for the NAT 
device at: 192.168.x.x
(00:59:33) nat-pmp: Timeout: 0s 25us

Now, IFAIK sofar only Apple has a working implentation of nat-pmp. A
friend of mine runs Pidgin under WinXP behind a similar router as mine,
has no trouble with that and doesn't get anthing about nat-pmp in his log.
His Pidgin retrieves the needed Information var UPnP. This is activated on
my router too (status reports only) but still I think that an IM soft
should work without.

Never mind about that now. Just send me the info and I'll try to make
heads or tails of it.

Thanks and regards!
Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: Veritas Backup Exec on Freebsd 6.1 (Boon Keng Lee)

2007-09-25 Thread A.Rymkus
Hi, Ian.

You wrote at 20.08.2007, 21:43:00:

IL Hi,

IL  

IL Please kindly advise us can the FreeBSD 6.1 being backup via Veritas 

IL Backup Exec 11d Server for Windows with the Linux Client agent ? Thank for

IL the help.

IL  

IL ~~

IL Hi,

IL  

IL On our side, we didn't manage to make this happen using the regular linux
IL agent that veritas (now Symantec) provides, but we were able to install the
IL legacy unix agent which works like a charm. We take full and incremental
IL backups without problem.

IL  

IL Regards

IL ___
IL freebsd-questions@freebsd.org mailing list
IL http://lists.freebsd.org/mailman/listinfo/freebsd-questions
IL To unsubscribe, send any mail to
IL [EMAIL PROTECTED]

I've tried to use an 10d linux client, it works, but sometime it
generates wrong directory listing (missing some dirs), so we'd decided
to leave our FreeBSD server with tar backups...

-- 
WBR, A.Rymkus

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Mpd (3.x) mpd4 config and differeces in reconnect/dial behaviour ?

2007-09-25 Thread Alan Tamm
On 9/25/07, David N [EMAIL PROTECTED] wrote:

 On 25/09/2007, Alan Tamm [EMAIL PROTECTED] wrote:
  Hi everyone!
 
  Since upgrade from 3.x to 4.x I have to manually (re) open the bundle
 PPPoE
  but I can't afford this system to be offline/needing manual intervention
  from now on. When the connection times out mpd4 just won't reconnect..
 
 
  This (mpd3.x) setup works flawlessly (without reconnection problems):
 
  #mpd.conf
  pppoe:
  new -i ng0 pppoe PPPoE
  set iface addrs 192.168.0.1 192.168.0.2
  set iface route default
  set iface disable on-demand
  set iface idle 0
  set bundle disable multilink
  set bundle authname secret
  set link no acfcomp protocomp
  set link disable pap chap
  set link accept chap
  set link mtu 1492
  set link keep-alive 10 60
  set ipcp yes vjcomp
  set ipcp ranges 0.0.0.0/0 0.0.0.0/0
  open iface
 
  #mpd.links
  PPPoE:
  set link type pppoe
  set pppoe iface rl0
  set pppoe service 
  set pppoe disable incoming
  set pppoe enable originate
 
 
  ## mpd4 --version
  ## Version 4.3
  # (no reconnect)
 
  #mpd.conf
 
  PPPoE:
  # new PPPoE PPPoE
  new -i ng0 PPPoE PPPoE
  set iface route default
  set iface disable on-demand
  set iface idle 0
  set ipcp yes vjcomp
  set ipcp ranges 0.0.0.0/0 0.0.0.0/0
  set bundle disable multilink
  ## set bundle disable noretry
  set auth authname secret
  set link no acfcomp protocomp
  set link disable pap chap chap-msv1 chap-msv2 eap
  set link accept chap-md5 chap
  set link keep-alive 5 30
  set link max-redial 0
  open
 
  #mpd.links
  PPPoE:
  set phys type pppoe
  set pppoe iface rl0
  # set pppoe service whatever
  set pppoe disable incoming
  set pppoe enable originate
 
 
  #log output:
  Sep 24 20:43:28 secret mpd: [PPPoE] LCP: no reply to 1 echo request(s)
  Sep 24 20:43:33 secret mpd: [PPPoE] LCP: no reply to 2 echo request(s)
  Sep 24 20:43:38 secret mpd: [PPPoE] LCP: no reply to 3 echo request(s)
  Sep 24 20:43:43 secret mpd: [PPPoE] LCP: no reply to 4 echo request(s)
  Sep 24 20:43:48 secret mpd: [PPPoE] LCP: no reply to 5 echo request(s)
  Sep 24 20:43:48 secret mpd: [PPPoE] LCP: peer not responding to echo
  requests
  Sep 24 20:43:48 secret mpd: [PPPoE] LCP: state change Opened --
 Stopping
  Sep 24 20:43:48 secret mpd: [PPPoE] AUTH: Accounting data for user : 70
  seconds, 666055 octets in, 83043 octets out
  Sep 24 20:43:48 secret mpd: [PPPoE] Bundle up: 0 links, total bandwidth
 9600
  bps
  Sep 24 20:43:48 secret mpd: [PPPoE] IPCP: Close event
  Sep 24 20:43:48 secret mpd: [PPPoE] IPCP: state change Opened --
 Closing
  Sep 24 20:43:48 secret mpd: [PPPoE] IPCP: SendTerminateReq #4
  Sep 24 20:43:48 secret mpd: [PPPoE] IPCP: LayerDown
  Sep 24 20:43:49 secret mpd: [PPPoE] IFACE: Down event
  Sep 24 20:43:49 secret mpd: [PPPoE] IPCP: Down event
  Sep 24 20:43:49 secret mpd: [PPPoE] IPCP: LayerFinish
  Sep 24 20:43:49 secret mpd: [PPPoE] No NCPs left. Closing links...
  Sep 24 20:43:49 secret mpd: [PPPoE] closing link PPPoE...
  Sep 24 20:43:49 secret mpd: [PPPoE] IPCP: state change Closing --
 Initial
  Sep 24 20:43:49 secret mpd: [PPPoE] AUTH: Cleanup
  Sep 24 20:43:49 secret mpd: [PPPoE] LCP: SendTerminateReq #2
  Sep 24 20:43:49 secret mpd: [PPPoE] LCP: LayerDown
  Sep 24 20:43:49 secret mpd: [PPPoE] link: CLOSE event
  Sep 24 20:43:49 secret mpd: [PPPoE] LCP: Close event
  Sep 24 20:43:49 secret mpd: [PPPoE] LCP: state change Stopping --
 Closing
  Sep 24 20:43:51 secret mpd: [PPPoE] LCP: SendTerminateReq #3
  Sep 24 20:43:53 secret mpd: [PPPoE] LCP: state change Closing -- Closed
  Sep 24 20:43:53 secret mpd: [PPPoE] LCP: LayerFinish
  Sep 24 20:43:53 secret mpd: [PPPoE] link: DOWN event
  Sep 24 20:43:53 secret mpd: [PPPoE] LCP: Down event
  Sep 24 20:43:53 secret mpd: [PPPoE] LCP: state change Closed -- Initial
 
  Thats it (the problem), after timeout no retry attempt is made !
 
  # quick fix:
  Manual open command for bundle PPPoE
 
  # and log output after open:
 
  Sep 24 20:51:45 secret mpd: [PPPoE] link: OPEN event
  Sep 24 20:51:45 secret mpd: [PPPoE] LCP: Open event
  Sep 24 20:51:45 secret mpd: [PPPoE] LCP: state change Initial --
 Starting
  Sep 24 20:51:45 secret mpd: [PPPoE] LCP: LayerStart
  Sep 24 20:51:45 secret mpd: [PPPoE] PPPoE: Connecting to '*'
  Sep 24 20:51:45 secret mpd: PPPoE: rec'd ACNAME secret
  Sep 24 20:51:45 secret mpd: [PPPoE] PPPoE: connection successful
  Sep 24 20:51:45 secret mpd: [PPPoE] link: UP event
  Sep 24 20:51:45 secret mpd: [PPPoE] link: origination is local
  Sep 24 20:51:45 secret mpd: [PPPoE] LCP: Up event
  Sep 24 20:51:45 secret mpd: [PPPoE] LCP: state change Starting --
 Req-Sent
  Sep 24 20:51:45 secret mpd: [PPPoE] LCP: SendConfigReq #4
  Sep 24 20:51:45 secret mpd: MRU 1492
  Sep 24 20:51:45 secret mpd: MAGICNUM 10c658b6
  Sep 24 20:51:46 secret mpd: [PPPoE] LCP: rec'd Configure Request #20
  (Req-Sent)
  Sep 24 20:51:46 secret mpd: MRU 1492
  Sep 24 20:51:46 secret mpd: AUTHPROTO PAP
  Sep 24 20:51:46 secret mpd: MAGICNUM 022165ca
  Sep 24 20:51:46 

Re: USB 2.0 PCI card for FreeBSD 5.4?

2007-09-25 Thread RW
On Mon, 24 Sep 2007 17:36:14 -0700
Roger B.A. Klorese [EMAIL PROTECTED] wrote:

 Does anyone know one or two PCI USB cards that are compatible with 
 FreeBSD 5.4?
 
 (Please let's hold off on the upgrade, you fool messages -- the
 cycle is:
 - install USB 2.0 card
 - back up to USB drive
 - upgrade
 ...and backing up 75GB at 1MB/sec isn't gonna fly.)

Why not? It's only 20 hours, sounds like a lot less hassle than
finding/buying/installing a new card..
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


cannot connect to SMTP from clients inside network except my own

2007-09-25 Thread Eric
I sent this to the pf list and didnt get any replies. Hoping someone 
here sees something amiss!



my rules are at the bottom, but here is what i am seeing and I cannot
figure it out.

i have pf doing nat and redirecting several services to a server
(gondolin). My domain is mikestammer.com. If i am on a client machine 
inside my network, I

can telnet mikestammer.com 25 and i get the SMTP server prompt, but if I
try to telnet to any other mail server it always times out.  Mail to and
from my domain using mikestammer.com works for sending and receiving 
email from inside my network using mikestammer.com for hostname


Can anyone see a reason for this in my rules? I did some captures from
the client machine when trying to reach another mail server and was 
seeing things like this:


229 26.404238   192.168.0.152   68.73.91.210TCP [TCP Previous 
segment lost]
3244  smtp [SYN] Seq=5538293 Len=0 MSS=1460

230 26.406292   192.168.0.51192.168.0.152   ICMPDestination 
unreachable
(Host unreachable)

68.73.91.210 is the mail server I want to connect to

i am not having any problem connecting to IMAP servers to get email, but
trying to send via those servers has never worked properly from inside 
my LAN.



any other comments on my ruleset are appreciated as well

Thanks

Eric

#
# $FreeBSD$
# PF rule set for mpd under FreeBSD
#
# Network Configuration
#
#  Kernel mode PPPoE with mpd
# ---[FreeBSD PF]---[Switch]--[192.168.0.0/24]
#  ADSLxl0  sk0(192.168.0.51)
#

# Macros
ext_if=ng0# replace with actual ext_ifernal int_iferface name
i.e., dc0
int_if=sk0# replace with actual int_ifernal int_iferface name
i.e., dc1


intnet = 192.168.0.0/24 # Adressspace of LAN
gondolin = 192.168.0.51 # This machine
isengard = 192.168.0.101
baraddur = 192.168.0.150

table badhost const {0.0.0.0/8, 169.254.0.0/16, 192.0.2.0/24, \
224.0.0.0/4, 240.0.0.0/4, 10.0.0.0/8, \
172.16.0.0/12, 192.168.0.0/16, 255.255.255.255, \
127.0.0.1/8}

#
# hosts that can use this system as a gateway
#
table allowhost const {192.168.0.0/24}

set loginterface ng0
set skip on lo0


# step 1: normalise packets #

# Clean up fragmented and abnormal packets, defeat NAT detection too
# max-mss is needed due to mpd's poor MSS handling
scrub in all
scrub out all random-id max-mss 1440


# step 2: NAT rules #


# services provided to the outside world:
rdr on $ext_if proto tcp from any to $ext_if port 22 - $gondolin port 22
rdr on $ext_if proto tcp from any to $ext_if port 25 - $gondolin port 25
rdr on $ext_if proto tcp from any to $ext_if port 80 - $gondolin port 80
rdr on $ext_if proto tcp from any to $ext_if port 113 - $gondolin port 113
rdr on $ext_if proto tcp from any to $ext_if port 143 - $gondolin port 143
rdr on $ext_if proto tcp from any to $ext_if port 443 - $gondolin port 443
rdr on $ext_if proto tcp from any to $ext_if port 993 - $gondolin port 993

rdr on $ext_if proto tcp from any to $ext_if port 3389 - $isengard port
3389
rdr on $ext_if proto udp from any to $ext_if port 30275 - $baraddur
port 30275


# all ordinary traffic:
nat on $ext_if from $intnet to any - $ext_if



# step 3: Filtering #


# Remember default rule for non-matching packets are passed!!!
block out log on $ext_if   all
block in  log on $ext_if   all
block return-rst  out log on $ext_if proto tcp all
block return-rst  in  log on $ext_if proto tcp all
block return-icmp out log on $ext_if proto udp all
block return-icmp in  log on $ext_if proto udp all

# allow lo0 interface packet
pass in quick on lo0 all
pass out quick on lo0 all

# allow internal network traffic
pass in on $int_if from any to allowhost
pass out on $int_if from allowhost to any


#
# block spoofing attack
#
block in quick log on $ext_if from badhost to any

# Allow ICMP (ping) IN
# pass out/in certain ICMP queries and keep state (ping)
pass in on $ext_if inet proto icmp all icmp-type 8 code 0 keep state

#HTTP server
pass in on $ext_if proto tcp from any to $gondolin port 80 label HTTP
flags S/SA
pass in on $ext_if proto tcp from any to $gondolin port 443 label
HTTPS flags S/SA

#ident service
pass in on $ext_if proto tcp from any to $gondolin port 113 label
ident flags S/SA

#RDP to Isengard
pass in on $ext_if proto tcp from any to $isengard port 3389 label RDP
flags S/SA

#Mail server (SMTP and IMAP)
pass in on $ext_if proto tcp from any to $gondolin port 25 label SMTP
flags S/SA
pass in on $ext_if proto tcp from any to $gondolin port 143 label IMAP
flags S/SA
pass in on $ext_if proto tcp from any to $gondolin port 993 label
IMAPS flags S/SA

#Hamachi
pass in on $ext_if proto udp from any to $baraddur port 30275 label
Hamachi

#SSH server

Re: nvidia-driver rebooting machine on X startup

2007-09-25 Thread falz
 Maybe someone can build a WITNESS/DDB kernel, since dumping seems to be
 failing?

I compiled these options in last night, but I'm afraid I'm not quite
sure what special steps I need to do to utilize those options, if any.
I built that kernel, booted into it, started xorg with the nvidia
driver, it immediately reboots just as it did before.

Something else that's odd that just started happening that's similar
to the original poster- their xorg.conf was being truncated to zero
bytes. Mine somehow gets changed to what appears to be a different
version. The bottom line in it is about 20 Us, and the 'Driver
nvidia' lines I added were gone. I have several xorg.conf files
named other things, but none have these characteristics.

--falz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Update on data corruption with Tyan/3Ware

2007-09-25 Thread Erik Trulsson
On Mon, Sep 24, 2007 at 10:58:20PM -0700, Ted Mittelstaedt wrote:
 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of Bart
  Silverstrim
  Sent: Monday, September 24, 2007 7:05 PM
  To: Ted Mittelstaedt
  Cc: Chris Boyd; freebsd-questions@freebsd.org
  Subject: Re: Update on data corruption with Tyan/3Ware
 
 
 
 
  Ted Mittelstaedt wrote:
   3ware is supported by the manufacturer - what do they say?
  
   Ted
  
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] Behalf Of Chris Boyd
   Sent: Monday, September 24, 2007 2:54 PM
   To: freebsd-questions@freebsd.org
   Subject: Update on data corruption with Tyan/3Ware
  
  
   Here's an update on my odd problem.  Thanks to Don B for some hints
   that helped us start looking in a better directions.
  
   System is a Tyan Thunder K8SE motherboard with dual Opteron 250
   2.4GHz CPUs and a 3Ware 9550SX-4LP PCI Express four port RAID
   controller running in RAID 5.  Disks are 4x Seagate 500GB SATA.  4GB
   Memory.
  
   Latest BIOS and firmware on mobo and RAID controller.
  
   FreeBSD 6.2 AMD64 with all patches as of 9-21-2007
  
   We've narrowed the problem down to files that are  4GB.  Anytime we
   have a file that's  4GB, we get inconsistent checksums, can't
   uncompress it, etc.  Files  4GB are fine.
  
   So is this a RAID controller issue?  A filesystem problem?  All hints
   appreciated.
 
  How are you getting the files on the system?  Network transfer? Direct
  copy from a disc?
 
  What filesystem is it you're using?
 
  3ware is well supported under Linux, from what I can tell and what I've
  experienced, and can't imagine that a manufacturer with a good track
  record of driver support for Linux for so long would not support FreeBSD
  as well.
 
 Bart and Chris,
 
   The problem might be that the 3ware driver uses a 32 bit int to
 represent
 a file size.

The 3ware driver handles blocks on the device. It knows nothing
about files or their sizes.  That is the job of the filesystem which resides
at a higher level in the OS.

It is true that the 3ware twe(4) driver uses 32-bit ints to represent the
*disk* size in number of disk-blocks.  With the standard 512-byte block size
this gives a maximum disk size of (512*4G==) 2TB, which is a known
limitation of the twe(4) driver as well as many other disk controllers.
Anyways the twa(4) driver is supposed to handle volumes larger than 2TB.

(twe(4) handles 3ware 7000 and 8000-series controllers, while the twa(4)
driver is for the 9000-series.)

  In FreeBSD, stat() ftruncate() lseek() and
 friends which are based on strut stat had this limitation under FreeBSD
 4.xx.
 
   Note line# 821 of twe_freebsd.c the driver:
 
 sc-twed_disk-d_maxsize = (TWE_MAX_SGL_LENGTH - 1) * PAGE_SIZE;
 sc-twed_disk-d_sectorsize = TWE_BLOCK_SIZE;
 sc-twed_disk-d_mediasize = TWE_BLOCK_SIZE *
 (off_t)sc-twed_drive-td_size;
 sc-twed_disk-d_fwsectors = sc-twed_drive-td_sectors;
 
 that off_t also appears elsewhere.

Since off_t is a 64-bit type, and since none of that code fragment has
anything to do with *file* sizes, I am not sure what your point is.

 
   I'm not a driver programmer but I'd bet the driver hasn't been updated
 for 64 bit FreeBSD.




-- 
Insert your favourite quote here.
Erik Trulsson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Mpd (3.x) mpd4 config and differeces in reconnect/dial behaviour ?

2007-09-25 Thread Alan Tamm
On 9/25/07, Ian Smith [EMAIL PROTECTED] wrote:

 On Mon, 24 Sep 2007 21:25:32 +0300 Alan Tamm [EMAIL PROTECTED] wrote:

  Since upgrade from 3.x to 4.x I have to manually (re) open the bundle
 PPPoE
  but I can't afford this system to be offline/needing manual intervention
  from now on. When the connection times out mpd4 just won't reconnect..

 Been there ..

  This (mpd3.x) setup works flawlessly (without reconnection problems):
 
  #mpd.conf
  pppoe:
  new -i ng0 pppoe PPPoE
  set iface addrs 192.168.0.1 192.168.0.2
  set iface route default
  set iface disable on-demand
  set iface idle 0
  set bundle disable multilink
  set bundle authname secret
  set link no acfcomp protocomp
  set link disable pap chap
  set link accept chap
  set link mtu 1492
  set link keep-alive 10 60
  set ipcp yes vjcomp
  set ipcp ranges 0.0.0.0/0 0.0.0.0/0
  open iface
 
  #mpd.links
  PPPoE:
  set link type pppoe
  set pppoe iface rl0
  set pppoe service 
  set pppoe disable incoming
  set pppoe enable originate
 
 
  ## mpd4 --version
  ## Version 4.3
  # (no reconnect)
 
  #mpd.conf
 
  PPPoE:
  # new PPPoE PPPoE
  new -i ng0 PPPoE PPPoE
  set iface route default
  set iface disable on-demand
  set iface idle 0
  set ipcp yes vjcomp
  set ipcp ranges 0.0.0.0/0 0.0.0.0/0
  set bundle disable multilink
  ## set bundle disable noretry

 No, you need this one .. or at least, it's what worked for me.  From my
 mpd.conf, with comments I added when I was also getting redial to work:

# without, 'noretry' was ENABLED (so no redial!)
set bundle disable noretry
 and
# without, 'Max redial:no redial' (-1); 0 = 'Max redial:unlimited'
set link max-redial 0

  set auth authname secret
  set link no acfcomp protocomp
  set link disable pap chap chap-msv1 chap-msv2 eap
  set link accept chap-md5 chap
  set link keep-alive 5 30
  set link max-redial 0
  open
 
  #mpd.links
  PPPoE:
  set phys type pppoe
  set pppoe iface rl0
  # set pppoe service whatever
  set pppoe disable incoming
  set pppoe enable originate

 [..]
  Sep 24 20:43:53 secret mpd: [PPPoE] LCP: Down event
  Sep 24 20:43:53 secret mpd: [PPPoE] LCP: state change Closed -- Initial
 
  Thats it (the problem), after timeout no retry attempt is made !

 Yep.

  # quick fix:
  Manual open command for bundle PPPoE

 Yes, that works fine until you lose the link :)


Indeed :P

 I have made some attempts before but had no time to go in depth until
 now..
  Settings I played with so far  although without any progress whatsoever
 are:
 
  set bundle disable noretry# dumped - no effect
  set link max-redial 0# default is -1 and 0 - redial
 indefinitely

 Hmm, well 'set bundle disable noretry' is what worked for me here.  Are
 you sure you restarted mpd afresh after changing that?  I recall having
 found something in update/changelog notes regarding the default value
 having changed for this, and after showing numerous values via console.

  I'm kind of lost right now so any help would be appreciated..
  And I do like mpd 4.x new features (ipv6cp etc) A LOT btw ;)

 Here's my working mpd.conf; note that I'm still on mpd-4.1 though, fwiw,
 otherwise it's little different from yours.

 PPPoE:
new bPPPoE lPPPoE
set iface addrs 1.1.1.1 2.2.2.2
set iface route default
set iface disable on-demand
set iface idle 0
set iface up-script /root/bin/mpd_up
set iface down-script /root/bin/mpd_dn
# needed? seems so, t23 had trouble with large tcp pkts .. yep,
 fixes ..
set iface enable tcpmssfix
set bundle disable multilink
# without, 'noretry' was ENABLED (so no redial!)
set bundle disable noretry
set auth authname yeahright
set auth password uhuh
set link no acfcomp protocomp
set link disable pap chap
set link accept chap
set link mtu 1492
set link keep-alive 10 60
# without, 'Max redial:no redial' (-1); with, 'Max
 redial:unlimited'
set link max-redial 0
set ipcp yes vjcomp
set ipcp ranges my.ipa.ddr.ess/0 220.233.0.0/16
 # log dns servers as info anyway .. only passed to up-script, called as:
 # up: script interface proto local-ip remote-ip authname [dns1 ip] [dns2
 ip]
 # where 'dns1' and 'dns2' are LITERAL STRINGS $6 and $8 (dox need
 work!)
 # dn: script interface proto authname
 # later 6/3/7 which works, but we know these anyway .. ah why not ..
set ipcp enable req-pri-dns
set ipcp enable req-sec-dns
open

 mpd.links (note 'set link type' for 4.1, your 'set phys type' for 4.2)

 lPPPoE:
set link type pppoe
set pppoe iface xe0
set pppoe service 
set pppoe disable incoming
set pppoe enable originate

 Cheers, Ian


Thanks,
I am not finished (fine tuning/tweaking later) the setup so thanks again for
the info/examples.


-- 
Regards,
Alan Tamm

 PS! I just found this msg under spam folder (courtesy 

Re: Confusion on SSH and PAM

2007-09-25 Thread Christian Baer
On Tue, 25 Sep 2007 15:56:22 +0400 (GST) Rakhesh Sasidharan wrote:

 Any ideas or nudges in the right direction as to why this is happening? 
 Looks like I've understood the interaction between SSH and PAM wrong here, 
 so would appreciate some enlightenment.

I'm not sure if I can offer any enlightenment here, but you can have my 2
cents. :-)

When you authenticate yourself with you private key, everything works as
you expect. If I understand you correctly, you are confused as to why you
still get prompted for a password when you don't supply a key and then
even the right password doesn't get you in.

This is one of these things with computer logic. :-) You have told the
sshd that a root login vai PAM is not ok, only via private key. PAM is
activated just the same (and probably works for other users). The login
follows a certain order...

1 Ask for username
2 Did we get a key? If not, goto 5
3 Is the key ok? If not, goto 5
4 Let user login, exit authentification
5 Is PAM globally on? If not exit
6 Ask for password
7 Is the password ok? If not goto 6 max 2 times, after that exit
8 Let user login, exit

I know, crappy algorithem that remindes of BASIC a bit. In this case it
should do the job, though. Please forget that the word goto exists in
other languages too (even Java). :-)

Your problem seems to be from steps 5 to 7. After the authentification by
key fails, the sshd just goes to the next step, which is the password. For
security reasons, the communication inside is a bit brief. PAM only gets
the answer not authenticated and because the reason isn't an issue, the
user is asked for the password again. The point is that the sshd just
refuses your login each time, because a password just isn't enough.

I have already made up a little something to put this situation into
another context (access to an underground club for parties) to maybe make
it a little clearer but I think the world has had quite enough of my
little stories aready. :-)

Regards
Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Confusion on SSH and PAM

2007-09-25 Thread Rakhesh Sasidharan


Christian Baer wrote:


On Tue, 25 Sep 2007 15:56:22 +0400 (GST) Rakhesh Sasidharan wrote:


Any ideas or nudges in the right direction as to why this is happening?
Looks like I've understood the interaction between SSH and PAM wrong here,
so would appreciate some enlightenment.


I'm not sure if I can offer any enlightenment here, but you can have my 2
cents. :-)


I don't mind enlightenment that can be got for 2 cents! :-)


This is one of these things with computer logic. :-) You have told the
sshd that a root login vai PAM is not ok, only via private key. PAM is
activated just the same (and probably works for other users). The login
follows a certain order...


1 Ask for username
2 Did we get a key? If not, goto 5
3 Is the key ok? If not, goto 5
4 Let user login, exit authentification
5 Is PAM globally on? If not exit
6 Ask for password
7 Is the password ok? If not goto 6 max 2 times, after that exit
8 Let user login, exit


... snip ...


Your problem seems to be from steps 5 to 7. After the authentification by
key fails, the sshd just goes to the next step, which is the password. For
security reasons, the communication inside is a bit brief. PAM only gets
the answer not authenticated and because the reason isn't an issue, the
user is asked for the password again. The point is that the sshd just
refuses your login each time, because a password just isn't enough.


I see. I thought the interaction between SSHD and PAM was that SSHD tells 
PAM to authenticate on its behalf, PAM replies with a PASS/ FAIL depending 
on the final result of its modules, and SSHD allows/ disallows based on 
this result. But from what you say, I get the impression that SSHD can ask 
PAM to re-try even if PAM replies with a PASS ... that's kind of futile, 
isn't it? Why doesn't SSHD just take the PASS result and deny the user 
straightaway instead of making PAM retry twice?


Here's something else that I tried. There's a PAM module for CAPTCHA. 
(http://www.semicomplete.com/projects/pam_captcha/ in case someone's 
interested). I modified my PAM config to include that too before the 
pam_unix module.


-8-
auth  required  pam_nologin.so  no_warn
auth  requisite /usr/local/lib/pam_captcha.so   math randomstring
auth  required  pam_unix.so try_first_pass
account   required  pam_login_access.so
account   required  pam_unix.so
session   required  pam_permit.so
password  required  pam_unix.so 
-8-


Following our previous logic, shouldn't pam_captcha get invoked, verify 
through CAPTCHA, pass onto pam_unix to get password, pass result to SSH, 
fail, and restart with pam_captcha and pam_unix for 2 more times? But it 
does not happen that way! Instead, now, pam_captcha does the looping for 2 
more times, and even after successfully entering the CAPTCHA strings root 
login is denied. Strange. pam_unix is not even called for the password!


When PAM is used to authenticate for SSHD, is it not that PAM goes through 
all its modules and *then* passes the result to SSH? Or are there any 
subtler interactions ... each module passes its result to SSH and their 
behaviour is influenced by SSHD's reply?



I know, crappy algorithem that remindes of BASIC a bit. In this case it
should do the job, though. Please forget that the word goto exists in
other languages too (even Java). :-)



:-)

Regards,

- Rakhesh
http://rakhesh.net/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Confusion on SSH and PAM

2007-09-25 Thread CyberLeo Kitsana
Rakhesh Sasidharan wrote:
 Any ideas or nudges in the right direction as to why this is happening?
 Looks like I've understood the interaction between SSH and PAM wrong
 here, so would appreciate some enlightenment.

According to my understanding of the SSH protocol, you're continually
asked because an authentication failure is not a fatal error.

When authenticating an SSH session, a list of mutually supported methods
is compiled (public-key, challenge-response, S/Key,
keyboard-interactive, plaintext) and the client cycles through the list
based on what it thinks is most likely to work.

It's perfectly acceptable for a client to attempt password
authentication before public-key, or even interleave them. All the
server can do is say yay or nay to an attempt with a restricted method,
because it cannot know if the next attempt may utilize an allowed method.

After the requisite three or five failed attempts (depending on the
server config), it may send a general failure code (too many failed
attempts) and disconnect the client at it's discretion.

-- 
Fuzzy love,
-CyberLeo
Technical Administrator
CyberLeo.Net Webhosting
http://www.CyberLeo.Net
[EMAIL PROTECTED]

Furry Peace! - http://.fur.com/peace/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Problem with PHP cli core dumping

2007-09-25 Thread Derrick
6.2 release (waiting till I can reboot the machine and will update to 
RELENG - nobody in the office yet)


all ports are updated to current.

php -v
PHP 5.2.4 with Suhosin-Patch 0.9.6.2 (cli) (built: Sep 24 2007 18:31:21)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
Segmentation fault (core dumped)

I get that core dump everytime; I'm not sure where to go with this.


Derrick MacPherson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Freebsd Tomcat

2007-09-25 Thread Yance Kowara

Hi All,

 

A web and database developer requested me to build atomcat server.

 

Is there any good integrated doco on FreeBSD andTomcat?

 

All I get when I googled it is old docs on JDK 1.3(e.g. 
http://www.osnews.com/story.php/3558/Deploying-Apache-Tomcat-on-FreeBSD/)and

http://www.pl.freebsd.org/doc/en_US.ISO8859-1/articles/java-tomcat/article.html

 

Many of the docs pointed out the need to switch onLinux emulation option in the 
kernel (Docs using FreeBSD 4.10). Is it stillnecessary to do this or is it now 
handled by KLDload?

 

Attached is pkg_info output. I tried installingeverything from ports 
collection. Any missing software?

 

I am now reading on Apache Tomcat connector. Is itstill necessary to install it?

 

Kind regards,

 

 

Yance


   
-
Boardwalk for $500? In 2007? Ha! 
Play Monopoly Here and Now (it's updated for today's economy) at Yahoo! Games.apache-2.2.6_1  Version 2.2 of Apache web server with prefork MPM.
apache-ant-1.7.0_1  Java- and XML-based build tool, conceptually similar to mak
autoconf-2.13.000227_6 Automatically configure source code on many Un*x 
platforms
autoconf-2.59_3 Automatically configure source code on many Un*x platforms
autoconf-2.61_2 Automatically configure source code on many Un*x platforms
autoconf-wrapper-20070404 Wrapper script for GNU autoconf
automake-1.4.6_4GNU Standards-compliant Makefile generator (1.4)
automake-wrapper-20070404 Wrapper script for GNU automake
bash-3.1.10_1   The GNU Project's Bourne Again SHell
expat-2.0.0_1   XML 1.0 parser written in C
gettext-0.14.5_2GNU gettext package
gmake-3.80_2GNU version of 'make' utility
help2man-1.36.4_1   Automatically generating simple manual pages from program o
jakarta-tomcat-5.0.30_6 Open-source Java web server by Apache, 5.0.x branch
javavmwrapper-2.3   Wrapper script for various Java Virtual Machines
libiconv-1.9.2_2A character set conversion library
libtool-1.5.22_4Generic shared library support script
linux-expat-1.95.8  Linux/i386 binary port of Expat XML-parsing library
linux-fontconfig-2.2.3_7 Linux/i386 binary of Fontconfig
linux-sun-jdk-1.5.0.12,2 Sun Java Development Kit 1.5 for Linux
linux-xorg-libs-6.8.2_5 Xorg libraries, linux binaries
linux_base-fc-4_10  Base set of packages needed in Linux mode (for i386/amd64)
m4-1.4.9GNU m4
p5-gettext-1.05_1   Message handling functions
perl-5.8.8  Practical Extraction and Report Language
popt-1.7_4  A getopt(3) like library with a number of enhancements, fro
rpm-3.0.6_13The Red Hat Package Manager
wget-1.10.2 Retrieve files from the Net via HTTP and FTP
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Problem with PHP cli core dumping

2007-09-25 Thread Eric

Derrick wrote:
6.2 release (waiting till I can reboot the machine and will update to 
RELENG - nobody in the office yet)


all ports are updated to current.

php -v
PHP 5.2.4 with Suhosin-Patch 0.9.6.2 (cli) (built: Sep 24 2007 18:31:21)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
Segmentation fault (core dumped)

I get that core dump everytime; I'm not sure where to go with this.


Derrick MacPherson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


Start playing with the order of extensions in your extensions.ini file, 
which is located at /usr/local/etc/php


thats usually what does this.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


PF: block out port 80 so that not allow clients in LAN to browse Internet via port 80

2007-09-25 Thread vuthecuong
Recently I used squid for cache proxy configured  to go internet through 
port 3128.

But internet browser in LAN still connect to Internet through port 80
if in conenction option of Internet browser is chose to connect directly 
to internet,

not through proxy server.
So how can I block out port 80 so that LAN clients must go to internet 
through port

3128 via proxy server?
Tnx in advanced
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Freebsd Tomcat

2007-09-25 Thread Bob Middaugh

 -- Original message --
From: Yance Kowara [EMAIL PROTECTED]
 
 Hi All,
 
  
 
 A web and database developer requested me to build atomcat server.
 
  
 
 Is there any good integrated doco on FreeBSD andTomcat?
 
  
 
 All I get when I googled it is old docs on JDK 1.3(e.g. 
 http://www.osnews.com/story.php/3558/Deploying-Apache-Tomcat-on-FreeBSD/)and
 
 http://www.pl.freebsd.org/doc/en_US.ISO8859-1/articles/java-tomcat/article.html
 
  
 
 Many of the docs pointed out the need to switch onLinux emulation option in 
 the 
 kernel (Docs using FreeBSD 4.10). Is it stillnecessary to do this or is it 
 now 
 handled by KLDload?
 
  
 
 Attached is pkg_info output. I tried installingeverything from ports 
 collection. 
 Any missing software?
 
  
 
 I am now reading on Apache Tomcat connector. Is itstill necessary to install 
 it?
 
  
 
 Kind regards,
 
  
 
  
 
 Yance
 
We use the diablo-jdk15 and tomcat 4.1 or 5.5 with postgres 8.1, all from 
ports.  I'm not a web developer or DB guy, but that seems to suffice for us.


---BeginMessage---
apache-2.2.6_1  Version 2.2 of Apache web server with prefork MPM.
apache-ant-1.7.0_1  Java- and XML-based build tool, conceptually similar to mak
autoconf-2.13.000227_6 Automatically configure source code on many Un*x 
platforms
autoconf-2.59_3 Automatically configure source code on many Un*x platforms
autoconf-2.61_2 Automatically configure source code on many Un*x platforms
autoconf-wrapper-20070404 Wrapper script for GNU autoconf
automake-1.4.6_4GNU Standards-compliant Makefile generator (1.4)
automake-wrapper-20070404 Wrapper script for GNU automake
bash-3.1.10_1   The GNU Project's Bourne Again SHell
expat-2.0.0_1   XML 1.0 parser written in C
gettext-0.14.5_2GNU gettext package
gmake-3.80_2GNU version of 'make' utility
help2man-1.36.4_1   Automatically generating simple manual pages from program o
jakarta-tomcat-5.0.30_6 Open-source Java web server by Apache, 5.0.x branch
javavmwrapper-2.3   Wrapper script for various Java Virtual Machines
libiconv-1.9.2_2A character set conversion library
libtool-1.5.22_4Generic shared library support script
linux-expat-1.95.8  Linux/i386 binary port of Expat XML-parsing library
linux-fontconfig-2.2.3_7 Linux/i386 binary of Fontconfig
linux-sun-jdk-1.5.0.12,2 Sun Java Development Kit 1.5 for Linux
linux-xorg-libs-6.8.2_5 Xorg libraries, linux binaries
linux_base-fc-4_10  Base set of packages needed in Linux mode (for i386/amd64)
m4-1.4.9GNU m4
p5-gettext-1.05_1   Message handling functions
perl-5.8.8  Practical Extraction and Report Language
popt-1.7_4  A getopt(3) like library with a number of enhancements, fro
rpm-3.0.6_13The Red Hat Package Manager
wget-1.10.2 Retrieve files from the Net via HTTP and FTP
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]---End Message---
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

RE: Update on data corruption with Tyan/3Ware

2007-09-25 Thread Ted Mittelstaedt


 -Original Message-
 From: Erik Trulsson [mailto:[EMAIL PROTECTED]
 Sent: Tuesday, September 25, 2007 5:27 AM
 To: Ted Mittelstaedt
 Cc: Bart Silverstrim; Chris Boyd; freebsd-questions@freebsd.org
 Subject: Re: Update on data corruption with Tyan/3Ware
 
 
  Bart and Chris,
  
The problem might be that the 3ware driver uses a 32 bit int to
  represent
  a file size.
 
 The 3ware driver handles blocks on the device. It knows nothing
 about files or their sizes.  That is the job of the filesystem 
 which resides
 at a higher level in the OS.
 
 It is true that the 3ware twe(4) driver uses 32-bit ints to represent the
 *disk* size in number of disk-blocks.  With the standard 512-byte 
 block size
 this gives a maximum disk size of (512*4G==) 2TB, which is a known
 limitation of the twe(4) driver as well as many other disk controllers.
 Anyways the twa(4) driver is supposed to handle volumes larger than 2TB.
 
 (twe(4) handles 3ware 7000 and 8000-series controllers, while the twa(4)
 driver is for the 9000-series.)
 

Your right, I missed that.

   In FreeBSD, stat() ftruncate() lseek() and
  friends which are based on strut stat had this limitation 
 under FreeBSD
  4.xx.
  
Note line# 821 of twe_freebsd.c the driver:
  
  sc-twed_disk-d_maxsize = (TWE_MAX_SGL_LENGTH - 1) * PAGE_SIZE;
  sc-twed_disk-d_sectorsize = TWE_BLOCK_SIZE;
  sc-twed_disk-d_mediasize = TWE_BLOCK_SIZE *
  (off_t)sc-twed_drive-td_size;
  sc-twed_disk-d_fwsectors = sc-twed_drive-td_sectors;
  
  that off_t also appears elsewhere.
 
 Since off_t is a 64-bit type, and since none of that code fragment has
 anything to do with *file* sizes, I am not sure what your point is.


This isn't true, it is OS dependent.  On FreeBSD 64 bit it may be
a long long but it isn't on all UNIXes.  (particularly old ones)
That is why GNU/Linux has (or had) off64_t

It's my understanding the twa/twe drivers have a binary blob that they
loads.  You don't know what architecture this blob was compiled under.
I merely pointed out use of this code fragment to illustrate a
point, not to state that this was a bug in the driver to indicate
that it may be possible the blob as a limitation of some kind.

Since Bart Silverstrim says he is storing 4GB files without
trouble under Linux, I would ASSUME the limitation ISN'T in
the 3ware hardware.

Apparently you missed the post from Chris that states:

...FreeBSD 6.2 AMD64 with all patches as of 9-21-2007...

...We've narrowed the problem down to files that are  4GB.  Anytime we
have a file that's  4GB, we get inconsistent checksums, can't
uncompress it, etc.  Files  4GB are fine...

So as I already stated the VERY FIRST RESPONSE that Chris needs to
go to 3ware and ask them what is going on.  Unless your going to continue
to say that FreeBSD64 has a 4GB filesize limitation?

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Freebsd Tomcat

2007-09-25 Thread Bahman M.
On Tue, 25 Sep 2007 06:23:17 -0700 (PDT)
Yance Kowara [EMAIL PROTECTED] wrote:

 
 Hi All,
 
  
 
 A web and database developer requested me to build atomcat server.
 
  
 
 Is there any good integrated doco on FreeBSD andTomcat?
 
  
 
 All I get when I googled it is old docs on JDK 1.3(e.g.
 http://www.osnews.com/story.php/3558/Deploying-Apache-Tomcat-on-FreeBSD/)and
 
 http://www.pl.freebsd.org/doc/en_US.ISO8859-1/articles/java-tomcat/article.html
 
  
 
 Many of the docs pointed out the need to switch onLinux emulation
 option in the kernel (Docs using FreeBSD 4.10). Is it stillnecessary
 to do this or is it now handled by KLDload?
 
  
 
 Attached is pkg_info output. I tried installingeverything from ports
 collection. Any missing software?
 
  
 
 I am now reading on Apache Tomcat connector. Is itstill necessary to
 install it?

I use
  - Diablo JDK 1.5
  - JDK 1.6 
  - Tomcat 5.5 
  - PostgreSQL 8.2
  - PL/Java 1.3.1
for development and had no problems so far.

Bahman

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


IPFW with DNSBL

2007-09-25 Thread Dan Mahoney, System Admin

Hey all,

Has anyone found a way to have ipfw work with a DNS blocklist?

I realize the core functionality is not in IPFW, but I am thinking 
somehow, of having a table dynamically maintained by some kind of divert 
daemon?


Couple this with some kind of a connection delay (perhaps also in the 
divert pipe), and this could be potentially useful.


Also, could someone please commit a table-save-state startup/shutdown 
script for ipfw as exists in pf?


Thanks,

Dan Mahoney

--

Dan Mahoney
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


well done x.org 7.3 team!

2007-09-25 Thread Anton Shterenlikht
The best thing is that 30-40 ports, mostly drivers, are not required
anymore in my simple installation.

many thanks!

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 928 8233 
Fax: +44 (0)117 929 4423
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


pf redirect question

2007-09-25 Thread Jonathan Horne
i have a server at my office i need to decomission, only problem, there are a 
handful of client that are still talking to it.

i was wondering if it feasable to down the server, take its IP and stick it on 
our FreeBSD server, and then use pf with rdr statements to redirect any 
traffic from stragglers to the service on the other new server?

i was trying to to proof it with a line like this in my pf.conf on my laptop:

rdr on $ext_if proto tcp from any to $ext_if port 80 - 10.22.192.131 port 
8080

just to see if i could get an http request to my laptop to redirect over to 
the 8080 on the other ip, but so far nothing.

a) is what im trying to do... tcpifically possible?
b) if yes, can someone point me in the right direction?

thanks,
-- 
Jonathan Horne
http://dfwlpiki.dfwlp.org
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Update on data corruption with Tyan/3Ware

2007-09-25 Thread Erik Trulsson
On Tue, Sep 25, 2007 at 07:09:16AM -0700, Ted Mittelstaedt wrote:
 
 
  -Original Message-
  From: Erik Trulsson [mailto:[EMAIL PROTECTED]
  Sent: Tuesday, September 25, 2007 5:27 AM
  To: Ted Mittelstaedt
  Cc: Bart Silverstrim; Chris Boyd; freebsd-questions@freebsd.org
  Subject: Re: Update on data corruption with Tyan/3Ware
  
  
   Bart and Chris,
   
 The problem might be that the 3ware driver uses a 32 bit int to
   represent
   a file size.
  
  The 3ware driver handles blocks on the device. It knows nothing
  about files or their sizes.  That is the job of the filesystem 
  which resides
  at a higher level in the OS.
  
  It is true that the 3ware twe(4) driver uses 32-bit ints to represent the
  *disk* size in number of disk-blocks.  With the standard 512-byte 
  block size
  this gives a maximum disk size of (512*4G==) 2TB, which is a known
  limitation of the twe(4) driver as well as many other disk controllers.
  Anyways the twa(4) driver is supposed to handle volumes larger than 2TB.
  
  (twe(4) handles 3ware 7000 and 8000-series controllers, while the twa(4)
  driver is for the 9000-series.)
  
 
 Your right, I missed that.
 
In FreeBSD, stat() ftruncate() lseek() and
   friends which are based on strut stat had this limitation 
  under FreeBSD
   4.xx.
   
 Note line# 821 of twe_freebsd.c the driver:
   
   sc-twed_disk-d_maxsize = (TWE_MAX_SGL_LENGTH - 1) * PAGE_SIZE;
   sc-twed_disk-d_sectorsize = TWE_BLOCK_SIZE;
   sc-twed_disk-d_mediasize = TWE_BLOCK_SIZE *
   (off_t)sc-twed_drive-td_size;
   sc-twed_disk-d_fwsectors = sc-twed_drive-td_sectors;
   
   that off_t also appears elsewhere.
  
  Since off_t is a 64-bit type, and since none of that code fragment has
  anything to do with *file* sizes, I am not sure what your point is.
 
 
 This isn't true, it is OS dependent.  On FreeBSD 64 bit it may be
 a long long but it isn't on all UNIXes.  (particularly old ones)
 That is why GNU/Linux has (or had) off64_t

Well, yes, but since the code fragment above comes from a file with
FreeBSD-specific code it really does not matter in this case how other
systems define off_t.

 
 It's my understanding the twa/twe drivers have a binary blob that they
 loads. 

No, they don't.  What you might be thinking of is that you used to be able
to include a firmware image for the card in the driver.  That firmware is
code which is executed *on* the controller card and is normally included
on the card.  Including a firmware image in the driver is no longer
supported since there nowadays is support for updating the firmware via
a userland program.

 You don't know what architecture this blob was compiled under.

And if they are even half-way competent at setting up a cross-compile
environment it does not matter what system they use to compile the code.

 I merely pointed out use of this code fragment to illustrate a
 point, not to state that this was a bug in the driver to indicate
 that it may be possible the blob as a limitation of some kind.
 
 Since Bart Silverstrim says he is storing 4GB files without
 trouble under Linux, I would ASSUME the limitation ISN'T in
 the 3ware hardware.
 
 Apparently you missed the post from Chris that states:
 
 ...FreeBSD 6.2 AMD64 with all patches as of 9-21-2007...
 
 ...We've narrowed the problem down to files that are  4GB.  Anytime we
 have a file that's  4GB, we get inconsistent checksums, can't
 uncompress it, etc.  Files  4GB are fine...

I missed none of that.  I just note that the 3ware driver and card knows
nothing about files.  It has no way of knowing whether the blocks it is
reading and writing belongs to one large file or several small files. 
Therefore if there are problems only with *files* larger than 4GB it seems
unlikely that the problem is with the card or its driver.

 
 So as I already stated the VERY FIRST RESPONSE that Chris needs to
 go to 3ware and ask them what is going on.  Unless your going to continue
 to say that FreeBSD64 has a 4GB filesize limitation?

No, I know very well that FreeBSD does not have any 4GB filesize limitation.
It can have bugs in the filesystem or virtual memory system though.
The userland programs reading and writing the file might also have bugs
for that matter.


The first things I would check in such a situation is if the same problem
happens with some other disk controller in the same system.
I would also check the RAM carefully with Memtest86 or similar. (Bad RAM
can cause all kinds of very strange behaviour.)



-- 
Insert your favourite quote here.
Erik Trulsson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problem with PHP cli core dumping

2007-09-25 Thread Maxim Khitrov
On 9/25/07, Derrick [EMAIL PROTECTED] wrote:
 6.2 release (waiting till I can reboot the machine and will update to
 RELENG - nobody in the office yet)

 all ports are updated to current.

 php -v
 PHP 5.2.4 with Suhosin-Patch 0.9.6.2 (cli) (built: Sep 24 2007 18:31:21)
 Copyright (c) 1997-2007 The PHP Group
 Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
 Segmentation fault (core dumped)

 I get that core dump everytime; I'm not sure where to go with this.

Do you have APC installed? That might do this. Are you running PHP in
a jail? I suggest you comment out all installed extensions from
extensions.ini, then enable them one by one.

- Max
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: USB 2.0 PCI card for FreeBSD 5.4?

2007-09-25 Thread Roger B.A. Klorese

RW wrote:

Why not? It's only 20 hours, sounds like a lot less hassle than
finding/buying/installing a new card..
  


Because I can't afford 20 hours of slammed I/O on our main hosting 
server, plus I need to add the card in order to use the drive for 
ongoing backups anyway.


(Also, I don't work for you, so I don't owe you an answer to questions 
beginning with why not...)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is your Thunderbird OK?

2007-09-25 Thread Byung-Hee HWANG
On Mon, 2007-09-24 at 14:34 +0200, Wojciech Puchar wrote:
 
  Just been wondering about this for long weeks. I have some complain
  Thudnerbird's the speed when it start up on FreeBSD. Its speed is very
  slow. While thunderbird start up, I go to brew coffee. Aside from that,
  Thunderbird is the best MUA, indeed.
 i use pine. others use mutt, elm etc. no need to use windows like thing
Yeah I also like text based MUAs such as mutt or pine. Sometimes I get
HTML messages from my co-workers who use webmail. I must read those HTML
messages for my work, study. That's why I need windows-like MUAs, not
text based MUAs. Is there any other best MUA? I _really_ feel thirsty
for best MUA.. anytime..

Byung-Hee

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Update on data corruption with Tyan/3Ware

2007-09-25 Thread Chris Boyd


On Sep 25, 2007, at 9:09 AM, Ted Mittelstaedt wrote:


So as I already stated the VERY FIRST RESPONSE that Chris needs to
go to 3ware and ask them what is going on.  Unless your going to  
continue

to say that FreeBSD64 has a 4GB filesize limitation?



I have opened a ticket with AMCC via their site this AM but have not  
had a response yet.  When I get a resolution I will update the list.


--Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is your Thunderbird OK?

2007-09-25 Thread Christian Baer
On Wed, 26 Sep 2007 00:41:53 +0900 Byung-Hee HWANG wrote:

 Yeah I also like text based MUAs such as mutt or pine. Sometimes I get
 HTML messages from my co-workers who use webmail. I must read those HTML
 messages for my work, study. That's why I need windows-like MUAs, not
 text based MUAs. Is there any other best MUA? I _really_ feel thirsty
 for best MUA.. anytime..

If you can live without the pretty pictures, you can configure Mutt to use
an external browser like lynx or links to display HTML.

Otherwise, you could give Claws a closer look.

Regards
Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is anybody here running Pidgin (under FreeBSD)?

2007-09-25 Thread Dmitry Gorbik
On Tue, 25 Sep 2007 13:58:41 +0200 (CEST)
Christian Baer [EMAIL PROTECTED] wrote:

 Hi there again, peeps!
 
 Since I still can't get Pidgin to run on this box and it seems that nobody
 had any advice for me, I have decided to go at this step by step. I hope
 you can bear with me on this one. BTW. The note on the subject, running
 Pidgin under FreeBSD, is there because not all people on this list
 actually don't use FreeBSD for everything. :-)
 
 If there is someone who runs Pidgin under FreeBSD behind a router and is
 willing to help me, would you please do the following:
 
 - run Pidgin from a console or Xterm (XServer must be running) with the -d
   option.
 
 - Send the result to me. Pidgin does not share any sensitive data in this
   mode apart from you IPs, which you can change like this: 192.168.x.x. If
   you do this, make sure that I can still distinguisch the private and
   public IPs.
 
 - Let me know how you installed Pidgin (from the ports or with pkg_add).
 
 - Tell me what Version of Pidgin this is.
 
 You might find a post from me on this list, where I described what I am
 looking for. Don't worry about that, I just need information because at
 the moment I can't do much more than guess what the Problem is.
 
 To give you a short version...
 I noticed this in my log:
 
 (00:59:33) stun: using server
 (00:59:33) nat-pmp: found a default gateway
 (00:59:33) nat-pmp: Attempting to retrieve the public ip address for the NAT 
 device at: 192.168.x.x
 (00:59:33) nat-pmp: Timeout: 0s 25us
 
 Now, IFAIK sofar only Apple has a working implentation of nat-pmp. A
 friend of mine runs Pidgin under WinXP behind a similar router as mine,
 has no trouble with that and doesn't get anthing about nat-pmp in his log.
 His Pidgin retrieves the needed Information var UPnP. This is activated on
 my router too (status reports only) but still I think that an IM soft
 should work without.
 
 Never mind about that now. Just send me the info and I'll try to make
 heads or tails of it.
 
 Thanks and regards!
 Chris
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

Ok, there is my log in attach. No problems coming through gateway 
192.168.1.1... I also have:
(19:53:30) nat-pmp: found a default gateway
(19:53:30) nat-pmp: Attempting to retrieve the public ip address for the NAT 
device at: 192.168.1.1
(19:53:30) nat-pmp: Timeout: 0s 25us
(19:53:30) nat-pmp: Response was not received from our gateway! Instead from: 
216.230.191.191

All pidgin feautures (file recieving works well).


pid_log
Description: Binary data


signature.asc
Description: PGP signature


Re: Software Lojack

2007-09-25 Thread Roland Smith
On Mon, Sep 24, 2007 at 06:33:30PM -0400, Jerry wrote:
 Hi All,
 
 I am wondering if there is already written (in the ports) some utility 
 that would either periodically and/or on boot up, take note of if the
 machine is connected to the net and if so, send some information to a
 configured address giving some basic information such as date/time
 and the network address where it is connected.   

You could write a shell-script that does this and run it as a cron(8) job.

 The intent would be to put this in laptops/notebooks belonging to an
 organization/business to track where they were, especially if they
 were stolen.   I know, if they got in to the hands of professional
 theft ring, the first thing they would do is wipe them, but it could
 help track them otherwise.

Since most windows users wouldn't have a clue what to do with a FreeBSD
machine, I think _every_ laptop would be wiped.

To secure your laptops and mitigate the consequences of theft there are
several things you can do;
- Encrypt the /home partitions. This will not prevent theft but will
  reduce the chance of your data falling into the wrong hands.
- Make frequent backups to prevent data loss.
- Glue engraved labels to the machine, e.g. to the lid where it can't be
  removed without damaging the LCD screen. This might make the machine
  less desirable to a stolen goods dealer.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp6eEV5NjdB6.pgp
Description: PGP signature


Re: sed question...

2007-09-25 Thread Giorgos Keramidas
On 2007-09-24 20:52, Gary Kline [EMAIL PROTECTED] wrote:
On Mon, Sep 24, 2007 at 11:07:20PM -0400, Howard Goldstein wrote:
  # delete the last 10 lines of a file
  sed -e :a -e '$d;N;2,10ba' -e 'P;D'   # method 1
  sed -n -e :a -e '1,10!{P;N;D;};N;ba'  # method 2
 
 Question two, can sed do its thing inline?
 
 Wouldn't it be easier to use  head -n 18 ?

If you _know_ that the file has 28 lines, yes.  If you don't,
then itmay be tricky to 'guess' that -n 18 is the right option.

 No, because most of these files are between 40 and 50 lines.  I only
 care about the first 30 or 40; everything below has to be deleted.  By
 hand, using vi, I might type :31,$d that fixes that one file.  Of
 course, I could simply edit in 19 for 10 above.  It would be more
 savvy to understand the sed syntax.

You don't need to manually edit files with vi(1) if all you want to do
is type ``:31,$dRET:wqRET'' ...

sed -i '' -e '31,$d' file.txt

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problem with PHP cli core dumping

2007-09-25 Thread Derrick

On Tue, 25 Sep 2007, Eric wrote:


Derrick wrote:
6.2 release (waiting till I can reboot the machine and will update to 
RELENG - nobody in the office yet)


all ports are updated to current.

php -v
PHP 5.2.4 with Suhosin-Patch 0.9.6.2 (cli) (built: Sep 24 2007 18:31:21)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
Segmentation fault (core dumped)

I get that core dump everytime; I'm not sure where to go with this.


Derrick MacPherson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


Start playing with the order of extensions in your extensions.ini file, which 
is located at /usr/local/etc/php


thats usually what does this.



so it's sessions.so
I've tried rebuilding it, but still has the same issue.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problem with PHP cli core dumping

2007-09-25 Thread Derrick

On Tue, 25 Sep 2007, Eric wrote:


Derrick wrote:


so it's sessions.so
I've tried rebuilding it, but still has the same issue.

PHP 5.2.4 with Suhosin-Patch 0.9.6.2 (cli) (built: Sep 15 2007 12:57:59)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
  with eAccelerator v0.9.5.2, Copyright (c) 2004-2006 eAccelerator, by 
eAccelerator

  with Suhosin v0.9.20, Copyright (c) 2002-2006, by Hardened-PHP Project

heres how my file looks

extension=zip.so
extension=fileinfo.so
extension=suhosin.so
extension=pdf.so
extension=bz2.so
extension=ctype.so
extension=pcre.so
extension=simplexml.so
extension=spl.so
extension=dom.so
extension=ftp.so
extension=gd.so
extension=gettext.so
extension=iconv.so
extension=imap.so
extension=ldap.so
extension=mbstring.so
extension=mcrypt.so
extension=mhash.so
extension=mysql.so
extension=openssl.so
extension=session.so
extension=pspell.so
extension=sockets.so
extension=xml.so
extension=zlib.so
extension=pdo.so
extension=sqlite.so



mine:
extension=json.so
extension=filter.so
extension=imagick.so
extension=hash.so
extension=tokenizer.so
extension=simplexml.so
extension=posix.so
extension=mbstring.so
extension=ctype.so
extension=xmlwriter.so
extension=openssl.so
extension=zlib.so
extension=iconv.so
extension=mhash.so
extension=pdo.so
extension=imap.so
extension=ftp.so
extension=pdo_sqlite.so
extension=gettext.so
extension=spl.so
extension=dom.so
extension=xmlreader.so
extension=mysql.so
extension=sqlite.so
extension=gd.so
extension=pcre.so
extension=xml.so
extension=session.so


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Gary Kline
On Tue, Sep 25, 2007 at 09:31:04AM +0300, Nikos Vassiliadis wrote:
 On Tuesday 25 September 2007 06:07, Howard Goldstein wrote:
  Gary Kline wrote:
 My earlier post about deleting the first N lines was answered by
 this one-liner site {below}.   I wasn't including any
 redirection; doing so finally resolved the problem.  Now I need
 to delete every line from the 19th or so to the last line.
 
 sed -e 18q
 that is, quit after processing line 18.


This quits after line 18, as you say.  Given a file of 100 lines,
I was everything from line 81,100d.  Which is what #method 1
does.  But trying to parse this from man sed is more than
difficule.  And I have yet to find ba in the man page.  That is
why I asked for some insights rather that to be told to go read
the man page; to me, that's dismissing the issue rather than
addressing it.

 
 Question one, can anybody explain the following syntax?  What do
 P, D ba represent, in other words?
 
 The manual page explains sed in a very good way. For sure, better
 than I could describe it here. You'd better read it.
 
  
  
# delete the last 10 lines of a file
sed -e :a -e '$d;N;2,10ba' -e 'P;D'   # method 1
sed -n -e :a -e '1,10!{P;N;D;};N;ba'  # method 2
  
  
 Question two, can sed do its thing inline?
 
 Yes.
  -i extension
  Edit files in-place, saving backups with the specified extension.
  If a zero-length extension is given, no backup will be saved.  It
  is not recommended to give a zero-length extension when in-place
  editing files, as you risk corruption or partial content in situ-
  ations where disk space is exhausted, etc.
 

Right.  I always do a perl -pi.bak [...] mostly out of habit.
With sed, redirection saved the new output, leaving the original
in ``.''  FWIW, I was using the sed on my Ubuntu server.  It is 
different from the BSD sed that I've used now/then since 1978.
The linux sed man page is just slightly more readable that the
BSD.  Probably newer.

gary


 
  Wouldn't it be easier to use  head -n 18 ?
 
 No, it's the same. Some sed operation are trivial to read/write,
 others aren't.
 
 HTH
 
 Nikos

-- 
  Gary Kline  [EMAIL PROTECTED]   www.thought.org  Public Service Unix
  http://jottings.thought.org   http://transfinite.thought.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Howard Goldstein


Giorgos Keramidas wrote:
 On 2007-09-24 20:52, Gary Kline [EMAIL PROTECTED] wrote:
   
 On Mon, Sep 24, 2007 at 11:07:20PM -0400, Howard Goldstein wrote:
 
  # delete the last 10 lines of a file
  sed -e :a -e '$d;N;2,10ba' -e 'P;D'   # method 1
  sed -n -e :a -e '1,10!{P;N;D;};N;ba'  # method 2

Question two, can sed do its thing inline?
 
 Wouldn't it be easier to use  head -n 18 ?
   

 If you _know_ that the file has 28 lines, yes.  If you don't,
 then itmay be tricky to 'guess' that -n 18 is the right option.

   
In the bits you snipped he said he wanted to ditch everything after the
18th line. 

I didn't realize complexity was the goal.  Is this a homework assignment
Gary?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Gary Kline
On Tue, Sep 25, 2007 at 07:24:25PM +0300, Giorgos Keramidas wrote:
 On 2007-09-24 20:52, Gary Kline [EMAIL PROTECTED] wrote:
 On Mon, Sep 24, 2007 at 11:07:20PM -0400, Howard Goldstein wrote:
   # delete the last 10 lines of a file
   sed -e :a -e '$d;N;2,10ba' -e 'P;D'   # method 1
   sed -n -e :a -e '1,10!{P;N;D;};N;ba'  # method 2
  
Question two, can sed do its thing inline?
  
  Wouldn't it be easier to use  head -n 18 ?
 
 If you _know_ that the file has 28 lines, yes.  If you don't,
 then itmay be tricky to 'guess' that -n 18 is the right option.
 
  No, because most of these files are between 40 and 50 lines.  I only
  care about the first 30 or 40; everything below has to be deleted.  By
  hand, using vi, I might type :31,$d that fixes that one file.  Of
  course, I could simply edit in 19 for 10 above.  It would be more
  savvy to understand the sed syntax.
 
 You don't need to manually edit files with vi(1) if all you want to do
 is type ``:31,$dRET:wqRET'' ...
 
   sed -i '' -e '31,$d' file.txt


The catch is that I don't always know the linecount; the only
thing I have found--by examing ALL hundreds of files (briefly:)
--is that I was to delete the last 19 lines.  

If sed can understand negative indexing, then would -e '-19,$d'
work?  That would makr sense from a human standpoint; not sure
how that would fit the sed model, tho.

gary


 

-- 
  Gary Kline  [EMAIL PROTECTED]   www.thought.org  Public Service Unix
  http://jottings.thought.org   http://transfinite.thought.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problem with PHP cli core dumping

2007-09-25 Thread Eric

Derrick wrote:


so it's sessions.so
I've tried rebuilding it, but still has the same issue.

PHP 5.2.4 with Suhosin-Patch 0.9.6.2 (cli) (built: Sep 15 2007 12:57:59)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
   with eAccelerator v0.9.5.2, Copyright (c) 2004-2006 eAccelerator, by 
eAccelerator

   with Suhosin v0.9.20, Copyright (c) 2002-2006, by Hardened-PHP Project

heres how my file looks

extension=zip.so
extension=fileinfo.so
extension=suhosin.so
extension=pdf.so
extension=bz2.so
extension=ctype.so
extension=pcre.so
extension=simplexml.so
extension=spl.so
extension=dom.so
extension=ftp.so
extension=gd.so
extension=gettext.so
extension=iconv.so
extension=imap.so
extension=ldap.so
extension=mbstring.so
extension=mcrypt.so
extension=mhash.so
extension=mysql.so
extension=openssl.so
extension=session.so
extension=pspell.so
extension=sockets.so
extension=xml.so
extension=zlib.so
extension=pdo.so
extension=sqlite.so

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Gary Kline
On Tue, Sep 25, 2007 at 01:05:06PM -0400, Howard Goldstein wrote:
 
 
 Giorgos Keramidas wrote:
  On 2007-09-24 20:52, Gary Kline [EMAIL PROTECTED] wrote:

  On Mon, Sep 24, 2007 at 11:07:20PM -0400, Howard Goldstein wrote:
  
   # delete the last 10 lines of a file
   sed -e :a -e '$d;N;2,10ba' -e 'P;D'   # method 1
   sed -n -e :a -e '1,10!{P;N;D;};N;ba'  # method 2
 
   Question two, can sed do its thing inline?
  
  Wouldn't it be easier to use  head -n 18 ?

 
  If you _know_ that the file has 28 lines, yes.  If you don't,
  then itmay be tricky to 'guess' that -n 18 is the right option.
 

 In the bits you snipped he said he wanted to ditch everything after the
 18th line. 

Not 'xactly.  Given a file of, say 200 line, I want to exact 
just the middle.  Roughly everythiing after #155, and from the 
end, -19 to the EOF.

 
 I didn't realize complexity was the goal.  Is this a homework assignment
 Gary?


Errm, only working toward one, Howard.
-- 
  Gary Kline  [EMAIL PROTECTED]   www.thought.org  Public Service Unix
  http://jottings.thought.org   http://transfinite.thought.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


xfce-4.4.1_1 strange behavior with Launch Desktop Icons.

2007-09-25 Thread Lisandro Grullon
Dear FBSD users,
I am running FBSD 6.2R with most of my ports upgrade to the latest. I just 
finish doing a upgrade of Xorg 7.2 to 7.3 because I was having an issue with my 
keyboard and mouse using 7.2. In any case the reason I am posting this is 
because after the upgrade, I launch xfce4 using startx and all went ok, yet 
when I am in my desktop and I try assessing the home or filesystem icons, 
they just appear to blink and never get launched, is any of you having this 
issue, I am not sure if this is a software bug that xfce4 is having. If any 
experience this, please elaborate. Lisandro

_
Gear up for Halo® 3 with free downloads and an exclusive offer. It’s our way of 
saying thanks for using Windows Live™.
http://gethalo3gear.com?ocid=SeptemberWLHalo3_WLHMTxt_2___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Nikos Vassiliadis
On Tuesday 25 September 2007 19:58, Gary Kline wrote:
   But trying to parse this from man sed is more than
   difficule.  And I have yet to find ba in the man page.  That is
   why I asked for some insights rather that to be told to go read
   the man page; to me, that's dismissing the issue rather than
   addressing it.

Hm, my suggestion was wrong... sed is a bit cryptic to learn from the
manual page. The manual can be used as a reference, if you alread know
sed.

So, ba is:
branch to the a label
for example:
my_label:
 ...
bmy_label

My points are:
If you want to learn sed, you have to invest some time.
If you want to ask for an one-liner that does what you want,
that's fine too.

sed isn't only s/foo/bar/. There is a dc(1) clone in sed,
which is at least an amazing accomplishment for sed. You
might want (or not) to learn more things about it.

   Right.  I always do a perl -pi.bak [...] mostly out of habit.
   With sed, redirection saved the new output, leaving the original
   in ``.''  FWIW, I was using the sed on my Ubuntu server.  It is
   different from the BSD sed that I've used now/then since 1978.

I think this version of sed is different too, since it's part
of BSD since 4.4BSD. It may be compatible with the older BSD
one. The in-place replacement is a non-standard extension which
both BSD and GNU sed share.

Cheers

Nikos
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Nikos Vassiliadis
Gary,

 This will probably help you, it has many nice one-liners.

http://sed.sourceforge.net/grabbag/tutorials/sed1line.txt

Nikos
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Gary Kline
On Tue, Sep 25, 2007 at 08:38:50PM +0300, Nikos Vassiliadis wrote:
 On Tuesday 25 September 2007 19:58, Gary Kline wrote:
  But trying to parse this from man sed is more than
  difficule.  And I have yet to find ba in the man page.  That is
  why I asked for some insights rather that to be told to go read
  the man page; to me, that's dismissing the issue rather than
  addressing it.
 
 Hm, my suggestion was wrong... sed is a bit cryptic to learn from the
 manual page. The manual can be used as a reference, if you alread know
 sed.
 
 So, ba is:
 branch to the a label
 for example:
 my_label:
  ...
 bmy_label


Thank you!  This will help me de-code that sed one-liner that was
evidently written by a sedexpert. The linux pages help further,
but I've found some soild tutorials.  
 
 My points are:
 If you want to learn sed, you have to invest some time.
 If you want to ask for an one-liner that does what you want,
 that's fine too.
 
 sed isn't only s/foo/bar/. There is a dc(1) clone in sed,
 which is at least an amazing accomplishment for sed. You
 might want (or not) to learn more things about it.
 
  Right.  I always do a perl -pi.bak [...] mostly out of habit.
  With sed, redirection saved the new output, leaving the original
  in ``.''  FWIW, I was using the sed on my Ubuntu server.  It is
  different from the BSD sed that I've used now/then since 1978.
 
 I think this version of sed is different too, since it's part
 of BSD since 4.4BSD. It may be compatible with the older BSD
 one. The in-place replacement is a non-standard extension which
 both BSD and GNU sed share.
 


The last time I used sed seriously was in the early 80's; then
there was only redirection :-)  much obliged for your tips.  I've
got to write a shell/sed script to edit the rest of this stuff.
Time to invest!!

gary


 Cheers
 
 Nikos
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
  Gary Kline  [EMAIL PROTECTED]   www.thought.org  Public Service Unix
  http://jottings.thought.org   http://transfinite.thought.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Gary Kline
On Tue, Sep 25, 2007 at 08:50:57PM +0300, Nikos Vassiliadis wrote:
 Gary,
 
  This will probably help you, it has many nice one-liners.
 
 http://sed.sourceforge.net/grabbag/tutorials/sed1line.txt
 
 Nikos


Aww, you found my stash:)  But as I said, up-queue, I'm
overdue to upgrade  forgetten skills since BSD-4.2.

gary


-- 
  Gary Kline  [EMAIL PROTECTED]   www.thought.org  Public Service Unix
  http://jottings.thought.org   http://transfinite.thought.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help I borke my 7.0 AMD64

2007-09-25 Thread Abdullah Ibn Hamad Al-Marri
On 9/25/07, Kevin Oberman [EMAIL PROTECTED] wrote:
  Date: Tue, 25 Sep 2007 02:44:33 +0300
  From: Abdullah Ibn Hamad Al-Marri [EMAIL PROTECTED]
 
  On 9/25/07, Mel [EMAIL PROTECTED] wrote:
   On Monday 24 September 2007 22:47:59 Abdullah Ibn Hamad Al-Marri wrote:
  
Could you please put it somewhere where so that I could fetch it?
  
   Probably the safest way:
   pkg_add -r gcc-4.2.2_20070905.tbz
  
   Then set CC and CXX in /etc/make.conf to point to the installed gcc
   in /usr/local. This should get you through the build-tools stage. If it
   creates issues later on, you should have a libgcc_* in /usr/obj. In fact, 
   I
   highly recommend pressing ctrl-c after gcc has been built and copy the
   missing library from /usr/obj to /usr/lib then unset CC and CXX
   in /etc/make.conf and re-run buildworld.
  
   I just looked on freebsd ftp servers, there's a package for amd64 arch and
   7-current dated Sep 15.
   --
   Mel
 
  Hello,
 
  I installed that.
 
  And it did the trick.
 
  I just don't want to take the risk now.
 
  I did these steps
 
  rm -r /usr/obj/*
  cd /usr/src
  make cleandir
  make cleanworld
  make -j7 buildworld
 
  I'm too worried, I may get broken world now.
 
  Shall I recopy libgcc_* from /obj again and rebuild the world again?
  since current libgcc_* is made by the gcc42 latest port.

 If you use gcc 4.2.2 to buildworld, it does a two stage build. It starts
 by building the base gcc (4.2.1) withe the default compiler and then
 builds it again using the just built compiler. You should be fine if you
 define CC as gcc422. It will only be used to build the gcc4.2.1
 compiler. Once that is done, the make system will use only the newly
 built version.

 If you have removed /usr/obj/*, you can speed the build with -DNO_CLEAN.
 (There is nothing to clean, but make will still try.) Since there is
 nothing to clean, making cleandir and cleanworld looks unnecessary,
 too.

 Unless you have a 6 core system, -j7 is probably excessive. Both my own
 tests and those of others show that having one more build thread than
 there are processors seems to be the sweet spot. (I don't recall if
 anyone has tested at over 6 cores, though.)

 I think I understand the build system, but I am far from a make(1) guru,
 so. if I misunderstand any of it, hopefully those who are will chime in
 with the right information.
 --
 R. Kevin Oberman, Network Engineer
 Energy Sciences Network (ESnet)
 Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
 E-mail: [EMAIL PROTECTED]  Phone: +1 510 486-8634
 Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751

Thanks I fixed by coping it from obj


-- 
Regards,

-Abdullah Ibn Hamad Al-Marri
Arab Portal
http://www.WeArab.Net/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


courier-imap

2007-09-25 Thread Bill Banks

i think that it not validating the username  passwd

--
---
Bill Banks 508-829-2005
Wachusett Programming  Ourweb
http://www.ourweb.net
http://www.ourwebtemplates.com
 



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache22 Port can't find Berkeley DB.

2007-09-25 Thread Aliya Harbouri
Hi!

Just FYI, I didn't get any response to the message I sent to the
port-maintainer.  I do know they've been working on / releasing stuff
on this port in the meantime.

Since I don't see any other way to communicate to a maintainer other
than by list/email, I guess the right, next step is filing a Problem
Report.  (Do PR's forward to the maintainer, or some other list?)

http://www.freebsd.org/cgi/query-pr.cgi?pr=116637

Thanks! :-)

Ali
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: PF: block out port 80 so that not allow clients in LAN to browse Internet via port 80

2007-09-25 Thread RW
On Tue, 25 Sep 2007 20:52:16 +0700
vuthecuong [EMAIL PROTECTED] wrote:

 Recently I used squid for cache proxy configured  to go internet
 through port 3128.
 But internet browser in LAN still connect to Internet through port 80
 if in conenction option of Internet browser is chose to connect
 directly to internet,
 not through proxy server.
 So how can I block out port 80 so that LAN clients must go to
 internet through port
 3128 via proxy server?
 Tnx in advanced
 

Blocking a port with PF is really basic. If you have to ask you would
be better-off reading about PF first, before you do anything. 

http://www.openbsd.org/faq/pf/index.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: nvidia-driver rebooting machine on X startup

2007-09-25 Thread Mel
On Tuesday 25 September 2007 14:22:56 falz wrote:
  Maybe someone can build a WITNESS/DDB kernel, since dumping seems to be
  failing?

 I compiled these options in last night, but I'm afraid I'm not quite
 sure what special steps I need to do to utilize those options, if any.
 I built that kernel, booted into it, started xorg with the nvidia
 driver, it immediately reboots just as it did before.

 Something else that's odd that just started happening that's similar
 to the original poster- their xorg.conf was being truncated to zero
 bytes. Mine somehow gets changed to what appears to be a different
 version. The bottom line in it is about 20 Us, and the 'Driver
 nvidia' lines I added were gone. I have several xorg.conf files
 named other things, but none have these characteristics.


I fear it's a hard reboot then, if DDB doesn't catch anything. DDB is a kernel 
debugger, even if dump isn't on, it will catch panic stages.

Stray bytes and truncated files are another sign of hard reboot. I'm afraid 
only nvidia can catch this one. Try downgrading to Xorg 7.2 and use the 97xx 
series of the driver, then freeze it until you see some solution posted :p

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to downgrade from xorg-7.3 to xorg-7.2 ...

2007-09-25 Thread Mel
On Tuesday 25 September 2007 09:34:49 [EMAIL PROTECTED] wrote:
 On Sat, 22 Sep,  Mel [EMAIL PROTECTED] wrote:
   I recently upgraded to xorg-7.3
  
   how can I safely downgrade back to xorg-7.2?
 
  If you still have xorg-7.2 packages this is the fastest:
  (cd /usr/ports/x11/xorg  make all-depends-list)|xargs pkg_delete -f
  env PKGDIR=/path/to/packages/All pkg_add
  /path/to/packages/All/xorg-7.2.tbz

 Will following work right?

 cd /usr/ports/x11/xorg
 make all-depends-list | xargs pkg_delete -f
 cd /usr/ports/packages/All
 fetch
 ftp://ftp2.ua.FreeBSD.org/pub/FreeBSD/ports/i386/packages-6-stable/All/xorg
-7.2.tbz pkg_add -r xorg-7.2.tbz

It should if they're still there.

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: nvidia-driver rebooting machine on X startup

2007-09-25 Thread Aryeh Friedman
In some situations that will not work... for example 7.2 completely
fails on a P35 chipset... see my update post for some ideas.

--Aryeh

On 9/25/07, Mel [EMAIL PROTECTED] wrote:
 On Tuesday 25 September 2007 14:22:56 falz wrote:
   Maybe someone can build a WITNESS/DDB kernel, since dumping seems to be
   failing?
 
  I compiled these options in last night, but I'm afraid I'm not quite
  sure what special steps I need to do to utilize those options, if any.
  I built that kernel, booted into it, started xorg with the nvidia
  driver, it immediately reboots just as it did before.
 
  Something else that's odd that just started happening that's similar
  to the original poster- their xorg.conf was being truncated to zero
  bytes. Mine somehow gets changed to what appears to be a different
  version. The bottom line in it is about 20 Us, and the 'Driver
  nvidia' lines I added were gone. I have several xorg.conf files
  named other things, but none have these characteristics.


 I fear it's a hard reboot then, if DDB doesn't catch anything. DDB is a kernel
 debugger, even if dump isn't on, it will catch panic stages.

 Stray bytes and truncated files are another sign of hard reboot. I'm afraid
 only nvidia can catch this one. Try downgrading to Xorg 7.2 and use the 97xx
 series of the driver, then freeze it until you see some solution posted :p

 --
 Mel
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: PF: block out port 80 so that not allow clients in LAN to browse Internet via port 80

2007-09-25 Thread Mel
On Tuesday 25 September 2007 23:40:14 RW wrote:
 On Tue, 25 Sep 2007 20:52:16 +0700

 vuthecuong [EMAIL PROTECTED] wrote:
  Recently I used squid for cache proxy configured  to go internet
  through port 3128.
  But internet browser in LAN still connect to Internet through port 80
  if in conenction option of Internet browser is chose to connect
  directly to internet,
  not through proxy server.
  So how can I block out port 80 so that LAN clients must go to
  internet through port
  3128 via proxy server?
  Tnx in advanced
  

 Blocking a port with PF is really basic. If you have to ask you would
 be better-off reading about PF first, before you do anything.

 http://www.openbsd.org/faq/pf/index.html

Well, he could block, but transparently doing it without annoying users is 
better(tm).

Vuthecuong, the following line will redirect traffic from the local net to 
port 80 on the internet to squid on port 3128:
rdr on $int_if proto tcp from $int_if:network to any port www - \
   $int_addr port 3128

where $int_if is the internal interface, $int_addr the address on the internal 
interface squid listens on and $ext_if the external interface.

There's a full article on how to set this up, here:
http://www.benzedrine.cx/transquid.html
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pf redirect question

2007-09-25 Thread Mel
On Tuesday 25 September 2007 16:46:58 Jonathan Horne wrote:
 i have a server at my office i need to decomission, only problem, there are
 a handful of client that are still talking to it.

 i was wondering if it feasable to down the server, take its IP and stick it
 on our FreeBSD server, and then use pf with rdr statements to redirect any
 traffic from stragglers to the service on the other new server?

 i was trying to to proof it with a line like this in my pf.conf on my
 laptop:

 rdr on $ext_if proto tcp from any to $ext_if port 80 - 10.22.192.131 port
 8080

 just to see if i could get an http request to my laptop to redirect over to
 the 8080 on the other ip, but so far nothing.

 a) is what im trying to do... tcpifically possible?

Yes, but a network layout would help. Also, why not put the old IP on the new 
machine?

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Giorgos Keramidas
On 2007-09-25 11:28, Gary Kline [EMAIL PROTECTED] wrote:
 Thank you!  This will help me de-code that sed one-liner that was
 evidently written by a sedexpert. The linux pages help further, but
 I've found some soild tutorials.  

Hi Gary.

A word of caution there...

If you plan to use GNU/Linux manpages for learning sed(1) be _very_
cautious for GNU/Linux-specific parts.  There are subtle, yet possibly
important differences between GNU/Linux sed and BSD sed.

But I'm sure you know that already, right? :-)

Cheers, Giorgos

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Gary Kline
On Wed, Sep 26, 2007 at 01:21:48AM +0300, Giorgos Keramidas wrote:
 On 2007-09-25 11:28, Gary Kline [EMAIL PROTECTED] wrote:
  Thank you!  This will help me de-code that sed one-liner that was
  evidently written by a sedexpert. The linux pages help further, but
  I've found some soild tutorials.  
 
 Hi Gary.
 
 A word of caution there...
 
 If you plan to use GNU/Linux manpages for learning sed(1) be _very_
 cautious for GNU/Linux-specific parts.  There are subtle, yet possibly
 important differences between GNU/Linux sed and BSD sed.
 
 But I'm sure you know that already, right? :-)
 


Sure; that's why, especially when it comes to quasi-common
untilities, I believe in the ``keep it simple, sir'' philosophy:)

gary




 Cheers, Giorgos
 

-- 
  Gary Kline  [EMAIL PROTECTED]   www.thought.org  Public Service Unix
  http://jottings.thought.org   http://transfinite.thought.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Pollywog
On Tuesday 25 September 2007 22:21:48 Giorgos Keramidas wrote:


 A word of caution there...

 If you plan to use GNU/Linux manpages for learning sed(1) be _very_
 cautious for GNU/Linux-specific parts.  There are subtle, yet possibly
 important differences between GNU/Linux sed and BSD sed.


I am generally aware that sometimes there are differences between the 
utilities used with Linux and their BSD counterparts.  As for the differences 
themselves, do they exist because someone has reinvented the utilities or 
is there perhaps another reason?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problem with PHP cli core dumping

2007-09-25 Thread Derrick

On Tue, 25 Sep 2007, Maxim Khitrov wrote:


On 9/25/07, Derrick [EMAIL PROTECTED] wrote:

6.2 release (waiting till I can reboot the machine and will update to
RELENG - nobody in the office yet)

all ports are updated to current.

php -v
PHP 5.2.4 with Suhosin-Patch 0.9.6.2 (cli) (built: Sep 24 2007 18:31:21)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
Segmentation fault (core dumped)

I get that core dump everytime; I'm not sure where to go with this.


Do you have APC installed? That might do this. Are you running PHP in
a jail? I suggest you comment out all installed extensions from
extensions.ini, then enable them one by one.


APC = pear-APC ?

No, no jail.

It's sessions.so, and I've rebuilt all of php and extenstions from 
scratch, still the same problem.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problem with PHP cli core dumping

2007-09-25 Thread Eric

Derrick wrote:

On Tue, 25 Sep 2007, Maxim Khitrov wrote:


On 9/25/07, Derrick [EMAIL PROTECTED] wrote:

6.2 release (waiting till I can reboot the machine and will update to
RELENG - nobody in the office yet)

all ports are updated to current.

php -v
PHP 5.2.4 with Suhosin-Patch 0.9.6.2 (cli) (built: Sep 24 2007 18:31:21)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
Segmentation fault (core dumped)

I get that core dump everytime; I'm not sure where to go with this.


Do you have APC installed? That might do this. Are you running PHP in
a jail? I suggest you comment out all installed extensions from
extensions.ini, then enable them one by one.


APC = pear-APC ?

No, no jail.

It's sessions.so, and I've rebuilt all of php and extenstions from 
scratch, still the same problem.


Try moving sessions.so to the beginning of the file. You can also 
comment everything out and uncomment things one at a time to find the 
extension that, along with sessions.so, is causing your crash. It's a 
pain in the butt but that should let you narrow things down.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problem with PHP cli core dumping

2007-09-25 Thread Mel
On Tuesday 25 September 2007 18:50:39 Derrick wrote:
 On Tue, 25 Sep 2007, Eric wrote:
  Derrick wrote:
  so it's sessions.so
  I've tried rebuilding it, but still has the same issue.
 
  PHP 5.2.4 with Suhosin-Patch 0.9.6.2 (cli) (built: Sep 15 2007 12:57:59)
  Copyright (c) 1997-2007 The PHP Group
  Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
with eAccelerator v0.9.5.2, Copyright (c) 2004-2006 eAccelerator, by
  eAccelerator
with Suhosin v0.9.20, Copyright (c) 2002-2006, by Hardened-PHP Project
 
  heres how my file looks
 
  extension=zip.so
  extension=fileinfo.so
  extension=suhosin.so
  extension=pdf.so
  extension=bz2.so
  extension=ctype.so
  extension=pcre.so
  extension=simplexml.so
  extension=spl.so
  extension=dom.so
  extension=ftp.so
  extension=gd.so
  extension=gettext.so
  extension=iconv.so
  extension=imap.so
  extension=ldap.so
  extension=mbstring.so
  extension=mcrypt.so
  extension=mhash.so
  extension=mysql.so
  extension=openssl.so
  extension=session.so
  extension=pspell.so
  extension=sockets.so
  extension=xml.so
  extension=zlib.so
  extension=pdo.so
  extension=sqlite.so

 mine:
 extension=json.so
 extension=filter.so
 extension=imagick.so
 extension=hash.so
 extension=tokenizer.so
 extension=simplexml.so
 extension=posix.so
 extension=mbstring.so
 extension=ctype.so
 extension=xmlwriter.so
 extension=openssl.so
 extension=zlib.so
 extension=iconv.so
 extension=mhash.so
 extension=pdo.so
 extension=imap.so
 extension=ftp.so
 extension=pdo_sqlite.so
 extension=gettext.so
 extension=spl.so
 extension=dom.so
 extension=xmlreader.so
HERE
 extension=mysql.so
 extension=sqlite.so
 extension=gd.so
 extension=pcre.so
 extension=xml.so
 extension=session.so

Move session to indicated spot, then try php -v again. If it still coredumps, 
move above spl. If it still coredumps, move it up one spot and rerun, till it 
stops coredumping.

The bug is in the general extension destructor and changing the order till it 
works is the only remedy.


-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: anyone have a favorite laptop?

2007-09-25 Thread Bill Campbell
On Mon, Sep 24, 2007, Arend P. van der Veen wrote:
We have used Thinkpads for a long time.  I am currently using a T60. 
Never had any problems.

I used Thinkpads for about 10 years with various Linux systems.
My last one was a Thinkpad 600 which I used continuously from
August 1999 through March 2007 when I got a Mac Powerbook (now if
only I could run OS X on a Thinkpad :-).

We have used a fair variety of Thinkpads with our auction
software for the last 10 years or so with excellent results.

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676

Liberty don't work as good in practice as it does in speeches.
Will Rogers
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: PF: block out port 80 so that not allow clients in LAN to browse Internet via port 80

2007-09-25 Thread vuthecuong

   Mel wrote:

On Tuesday 25 September 2007 23:40:14 RW wrote:
  

On Tue, 25 Sep 2007 20:52:16 +0700

vuthecuong [1][EMAIL PROTECTED] wrote:


Recently I used squid for cache proxy configured  to go internet
through port 3128.
But internet browser in LAN still connect to Internet through port 80
if in conenction option of Internet browser is chose to connect
directly to internet,
not through proxy server.
So how can I block out port 80 so that LAN clients must go to
internet through port
3128 via proxy server?
Tnx in advanced



Blocking a port with PF is really basic. If you have to ask you would
be better-off reading about PF first, before you do anything.

[2]http://www.openbsd.org/faq/pf/index.html


Well, he could block, but transparently doing it without annoying users is
better(tm).

Vuthecuong, the following line will redirect traffic from the local net to
port 80 on the internet to squid on port 3128:
rdr on $int_if proto tcp from $int_if:network to any port www - \
   $int_addr port 3128

where $int_if is the internal interface, $int_addr the address on the internal
interface squid listens on and $ext_if the external interface.

There's a full article on how to set this up, here:
[3]http://www.benzedrine.cx/transquid.html


   tnx Mel.
   I learn that.
   tnx u very much

References

   1. mailto:[EMAIL PROTECTED]
   2. http://www.openbsd.org/faq/pf/index.html
   3. http://www.benzedrine.cx/transquid.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sed question...

2007-09-25 Thread Giorgos Keramidas
On 2007-09-25 22:49, Pollywog [EMAIL PROTECTED] wrote:
 On Tuesday 25 September 2007 22:21:48 Giorgos Keramidas wrote:
  A word of caution there...
 
  If you plan to use GNU/Linux manpages for learning sed(1) be _very_
  cautious for GNU/Linux-specific parts.  There are subtle, yet
  possibly important differences between GNU/Linux sed and BSD sed.

 I am generally aware that sometimes there are differences between the
 utilities used with Linux and their BSD counterparts.  As for the
 differences themselves, do they exist because someone has reinvented
 the utilities or is there perhaps another reason?

The history and evolution of the BSD command-line tools and their GNU
counterparts is not exactly 'linear'.  Some of the BSD features were
implemented first in BSD sources, and then where reimplemented from
scratch in the GNU toolchain.  Others were implemented first in the GNU
tools and were ported to BSD.

Sometimes, when porting a certain feature from GNU tools to the BSD
world there were 'conflicts', i.e. an option letter was already taken,
or the way GNU tools did something didn't fit the existing BSD way of
life so it was retrofitted to the traditional BSD standards, to avoid
POLA violations for example.

It's not easy to answer precisely what the reasons for all the possible
differences are, but we can at least try if you have a particular
difference in mind :-)

- Giorgos

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Sharing application jail and host?

2007-09-25 Thread Aminuddin
Hi freebsd gurus,
I'm playing with jail setup and wanted to provide a virtual server to my
external remote users to login by ssh and run a couple of applications.

Do I need to install the application using the ports in the jail itself or
can I just install the application in the host environment? Is there any
methods to enable sharing of the application across the jail and host?

Example, if I want to let jail to run pure-ftpd, do I need to install
pure-ftpd in each of the jail that I will be creating?

Thanks

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: xfce-4.4.1_1 strange behavior with Launch Desktop Icons.

2007-09-25 Thread Norberto Meijome
On Tue, 25 Sep 2007 13:26:04 -0400
Lisandro Grullon [EMAIL PROTECTED] wrote:

 Dear FBSD users,
 I am running FBSD 6.2R with most of my ports upgrade to the latest. I just 
 finish doing a upgrade of Xorg 7.2 to 7.3 because I was having an issue with 
 my keyboard and mouse using 7.2. In any case the reason I am posting this is 
 because after the upgrade, I launch xfce4 using startx and all went ok, yet 
 when I am in my desktop and I try assessing the home or filesystem icons, 
 they just appear to blink and never get launched, is any of you having this 
 issue, I am not sure if this is a software bug that xfce4 is having. If any 
 experience this, please elaborate. Lisandro


Hi Lisandro,
have you got Thunar installed? those icons launch your file manager, which by 
default is the Thunar file manager. I am not sure if there is a way to replace 
it for other.

You may want to check ~/.xsession-errors to see if there are any errors being 
issued by xfdesktop or Thunar itself.

B
_
{Beto|Norberto|Numard} Meijome

A No uttered from deepest conviction is better and greater than a
Yes merely uttered to please, or what is worse, to avoid trouble.
   Mahatma Ghandi

I speak for myself, not my employer. Contents may be hot. Slippery when wet. 
Reading disclaimers makes you go blind. Writing them is worse. You have been 
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: anyone have a favorite laptop?

2007-09-25 Thread Bob Johnson
I've been happy with FBSD on Dell Inspirons, although the newest I've
used it on is an 8600 (it's what I'm using now). Some things have been
problems (e.g. on the 7500 the sound input never had a driver, on the
8600 it took a while to find a driver that would make a working NDIS
driver for the wireless).

In general, if you get something new on the market you are far more
likely to have trouble getting it working. In that regard in
particular, I've had better luck with nVidia rather than ATI video
(nVidia publishes FreeBSD drivers).

- Bob

On 9/25/07, Bill Campbell [EMAIL PROTECTED] wrote:
 On Mon, Sep 24, 2007, Arend P. van der Veen wrote:
 We have used Thinkpads for a long time.  I am currently using a T60.
 Never had any problems.

 I used Thinkpads for about 10 years with various Linux systems.
 My last one was a Thinkpad 600 which I used continuously from
 August 1999 through March 2007 when I got a Mac Powerbook (now if
 only I could run OS X on a Thinkpad :-).

 We have used a fair variety of Thinkpads with our auction
 software for the last 10 years or so with excellent results.

 Bill
 --
 INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
 URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
 FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676

 Liberty don't work as good in practice as it does in speeches.
 Will Rogers
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pf redirect question

2007-09-25 Thread Jonathan Horne
On Tuesday 25 September 2007 17:22:12 Mel wrote:
 On Tuesday 25 September 2007 16:46:58 Jonathan Horne wrote:
  i have a server at my office i need to decomission, only problem, there
  are a handful of client that are still talking to it.
 
  i was wondering if it feasable to down the server, take its IP and stick
  it on our FreeBSD server, and then use pf with rdr statements to redirect
  any traffic from stragglers to the service on the other new server?
 
  i was trying to to proof it with a line like this in my pf.conf on my
  laptop:
 
  rdr on $ext_if proto tcp from any to $ext_if port 80 - 10.22.192.131
  port 8080
 
  just to see if i could get an http request to my laptop to redirect over
  to the 8080 on the other ip, but so far nothing.
 
  a) is what im trying to do... tcpifically possible?

 Yes, but a network layout would help. Also, why not put the old IP on the
 new machine?

because the new machine is on a different subnet, across a vpn link.

what other info would you need, that you might be able to help me with an 
example?

thanks,
-- 
Jonathan Horne
http://dfwlpiki.dfwlp.org
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: PF: block out port 80 so that not allow clients in LAN to browse Internet via port 80

2007-09-25 Thread RW
On Wed, 26 Sep 2007 00:15:36 +0200
Mel [EMAIL PROTECTED] wrote:


 Well, he could block, but transparently doing it without annoying
 users is better(tm).

It depends. 

If they are doing a lot of ftp downloading, you may want to force it to
go though squid, so it can be cached. And you can't really do that in
combination with http interception.

There is also the issue with interception that https will bypass squid,
which is a loophole if you want to want monitor access, or block sites.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Sharing application jail and host?

2007-09-25 Thread Philip Hallstrom

Hi freebsd gurus,
I'm playing with jail setup and wanted to provide a virtual server to my
external remote users to login by ssh and run a couple of applications.

Do I need to install the application using the ports in the jail itself or
can I just install the application in the host environment? Is there any
methods to enable sharing of the application across the jail and host?

Example, if I want to let jail to run pure-ftpd, do I need to install
pure-ftpd in each of the jail that I will be creating?


You can share directories b/n the host and the jails using nullfs.  I do 
that to share /usr/ports.


If you're just starting out look into the ezjail package.  It makes life a 
*lot* simpler if you're going to be managing several jails.  It uses this 
trick to create a master jail such that future jails only take up about 
10mb (base install anyway).


Good stuff.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Update on data corruption with Tyan/3Ware

2007-09-25 Thread Ted Mittelstaedt


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Erik Trulsson
 Sent: Tuesday, September 25, 2007 8:06 AM
 To: Ted Mittelstaedt
 Cc: Chris Boyd; freebsd-questions@freebsd.org; Bart Silverstrim
 Subject: Re: Update on data corruption with Tyan/3Ware




  ...We've narrowed the problem down to files that are  4GB.  Anytime we
  have a file that's  4GB, we get inconsistent checksums, can't
  uncompress it, etc.  Files  4GB are fine...

 I missed none of that.  I just note that the 3ware driver and card knows
 nothing about files.  It has no way of knowing whether the blocks it is
 reading and writing belongs to one large file or several small files.
 Therefore if there are problems only with *files* larger than 4GB it seems
 unlikely that the problem is with the card or its driver.


I'm sure it seems unlikely but I've seen many a problem source be an
unlikely source.

 
  So as I already stated the VERY FIRST RESPONSE that Chris needs to
  go to 3ware and ask them what is going on.  Unless your going
 to continue
  to say that FreeBSD64 has a 4GB filesize limitation?

 No, I know very well that FreeBSD does not have any 4GB filesize
 limitation.
 It can have bugs in the filesystem or virtual memory system though.

I think those bugs have been ironed.  People have been complaining
about 4GB limitations for several years now, and the FreeBSD developers
have been fixing these problems as they come up.  One of the
motivators for going to 64 bit was to support large files like this.

I think if more people were seeing this we would see far more complaints
about it.

 The userland programs reading and writing the file might also have bugs
 for that matter.


That is true.  But how many different userland programs have to fail
before you stop blaming userland programs?  In any case this is easy
as pie to eliminate - run the same userland program on a different
system and see if it fails the same way.


 The first things I would check in such a situation is if the same problem
 happens with some other disk controller in the same system.

I wouldn't.  The big reason you buy raid controllers like the 3ware is
because they are supported by the manufacturer.  That's good money you
have paid 3ware and they owe you some time for support.

If 3ware comes back and says we tested the 9550 on amd64 bit and there
is no problem with larger than 4GB files then that is the time to spend
the effort building a test system and checking, or putting a disk in your
existing system and testing, or whatever.  If you find the 3ware controller
is the problem after doing this then your going to need the audit trail
in order to get them to fix the problem - or you return the card to where
you bought it from and buy a hipoint card.  Loss of revenue from returns
often speaks the loudest of all.

As it is, simply due to this posting of his, I have gone ahead and added
a 4GB test into the list of tests in the buildsheets for all of my
3ware 9550 servers, and I have
a couple myself.  Meaning, the next time I have to tear down and
rebuild any of them (hopefully far in the future) I will test for this
condition before putting the server online.  And if it fails you
better believe 3ware will hear about it and I'll file a PR and such.
Fortunately I do not deal with that large of files on any of those
servers.

There is always the chance 3ware will come back and say Oops, you
are right there's a bug in the driver, here's a fix

I would feel pretty stupid after having gone to all that trouble to
tear into the system to prove the card is at fault, only to have them
come back and say yep, we knew about that

 I would also check the RAM carefully with Memtest86 or similar. (Bad RAM
 can cause all kinds of very strange behaviour.)


More wasted time jumping the gun.  If both the 3ware card and another
controller failed this test THEN that is the time to start in with the
memory tests and other kinds of tests.  With bad ram many times it takes
days of testing it over and over and over for the ram to fail once.

And his symptoms are too repeatable anyway.  Bad ram almost always causes
random strange behavior, it is rarely associated with something as
repeatable
as what he is describing.  I wouldn't rule it out of course - but start
with the easy tests first - and the easiest of all is asking the
manufacturer
if it is a known problem.

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How to install harvard style

2007-09-25 Thread ronggui
In order to install the harvard bibliography style , I have to edit
'Makefile' setting 'bstdir', 'stydir', 'htmldir' and 'docdir' to values
appropriate to your LaTeX installation. My question is how to figure out he
bstdir etc.?

Thanks.

-- 
Ronggui Huang

Department of Sociology, Fudan University, Shanghai, China

Department of Public and Social Administration, CityU, HK
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: anyone have a favorite laptop?

2007-09-25 Thread Jack Barnett

   Bill Campbell wrote:

On Mon, Sep 24, 2007, Arend P. van der Veen wrote:
  

We have used Thinkpads for a long time.  I am currently using a T60. 
Never had any problems.


I used Thinkpads for about 10 years with various Linux systems.
My last one was a Thinkpad 600 which I used continuously from
August 1999 through March 2007 when I got a Mac Powerbook (now if
only I could run OS X on a Thinkpad :-).

We have used a fair variety of Thinkpads with our auction
software for the last 10 years or so with excellent results.

Bill

  

   I also use Think Pads, 9545 (was a 486!), T20 series, T40 series.
   All work wonderfully... IBM makes rock solid laptops.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: courier-imap

2007-09-25 Thread Rakhesh Sasidharan


Bill Banks wrote:


i think that it not validating the username  passwd


Have you started courier-authdaemond in /usr/local/etc/rc.d? Added users 
to UserDB or whatever auth method you are using?


I have some notes on installing Courier IMAP here: 
http://rakhesh.net/mail/courier-imap.


That gives you the steps I followed while installing Courier IMAP on my 
home machine.


HTH,


- Rakhesh
http://rakhesh.net/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Atomic actions in LDAP

2007-09-25 Thread Olivier Nicole
Hi,

I would like to use LDAP to manage users printer quota.

Printers can be located on several servers, so I need a way to update
the information without ceating deadlocks/overwrites.

Is there a way for LDAP to do atomic action ? That is increase the
value of one reccord by a certain amount, without reading the reccord
in a variable, increasing the variable and writting the result back?

Bests,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: anyone have a favorite laptop?

2007-09-25 Thread OutBackDingo
Also IBM Z series, like my Z60M Runs 6, and 7 CURRENT really well

On Mon, 2007-09-24 at 11:05 -0700, Predrag Punosevac wrote:
 Steve Franks wrote:
  The freebsd laptop page is a nice resource, but it's a bit heavy on
  specifics (i.e. I have a laptop I want to install on), not so good
  generally (want to buy a laptop).  So anyone have realworld advice?
  I'm not against something used in the 1GHz+ range.
 
  I have a compaq that is %#*!^$.  The pcmcia will not work, the
  ndiswrapper for the broadcom panics, etc.  So, compaq is right out
  (the've always maintained their poor reputation, no?) - so compaq is
  out.  Seems gateway has an equally bad rap
 
  Thanks,
  Steve
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED]

 IBM ThinkPad you can not go wrong.
 
 T23, T30 or T43 are $200-400 on ebay. If you are rich T60 by far the 
 best laptop on the market in my opinion.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]