Re: Fetching directories inclusive subdirectories on HTTP server via fetch or othe FreeBSD-own tools?

2009-04-02 Thread perryh
O. Hartmann ohart...@zedat.fu-berlin.de wrote:
 I need to fetch a whole directory tree from a public remote site.
 The top level directory and its subdirectories are accessible via
 ftp:// and http:// so I tried fetch, but fetch does only retrieve
 data on file basis and does not copy a whole directory tree
 recursively. The remote site does not offer sftp/sshd for that
 purpose.

There's at least one ftp server (wuftpd) that will do it for you
on the server end.  All you have to do is get {dirname}.tar.
(The .tar file won't appear in the directory listing, because
it's created on the fly.)

It might be worth a try, to see if the server of interest happens
to be set up this way.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


keep-state and divert

2009-04-02 Thread Victor Sudakov
Colleagues,

I have read some recommendations on combining a stateful firewall with divert, 
e.g. http://www.derkeiler.com/Mailing-Lists/FreeBSD-Security/2003-06/0078.html
and http://nuclight.livejournal.com/124348.html (the latter is in Russian).

Do I understand correctly that it is (mathematically?) impossible to
use the two together without also using skipto? 

If we consider a simple example below, how would you replace the 600th
rule for a stateful one?

00100 divert 8668 ip from any to table(1) out via rl0
00200 deny log logamount 100 ip from 10.0.0.0/8 to any out via rl0
00300 deny log logamount 100 ip from 172.16.0.0/12 to any out via rl0
00400 deny log logamount 100 ip from 192.168.0.0/16 to any out via rl0

00500 divert 8668 ip from table(1) to any in via rl0
00600 allow ip from table(1) to any in via rl0
00700 deny log logamount 100 ip from any to 10.0.0.0/8 in via rl0
00800 deny log logamount 100 ip from any to 172.16.0.0/12 in via rl0
00900 deny log logamount 100 ip from any to 192.168.0.0/16 in via rl0

65535 allow ip from any to any

Thank you in advance for any input.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: WinPopUp type messages from FreeBSD to Mac OS X

2009-04-02 Thread Oliver Fromme
Charles Howse wrote:
  Anyone know of a command-line program that will pop-up a window on my  
  Mac with a message from FreeBSD?

If you're running an X server on your Mac (Xorg, XFree86),
then you can use the xmessage(1) tool, with the $DISPLAY
variable set appropriately.  It can even be used to create
simple dialogs (Such as OK / Cancel) that can be used
from shell scripts.

Best regards
   Oliver

-- 
Oliver Fromme, secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606,  Geschäftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün-
chen, HRB 125758,  Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart

FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd

The scanf() function is a large and complex beast that often does
something almost but not quite entirely unlike what you desired.
-- Chris Torek
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ftp with .... ?

2009-04-02 Thread Vasadi I. Claudiu Florin

On Thu, 02 Apr 2009 01:18:39 +0300, Joshua Gimer jgi...@gmail.com wrote:


What user is your ftp daemon running as?


ftpadmin.. have a look @ http://daemonforums.org/showthread.php?t=3050  
that's where I curently am.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fetching directories inclusive subdirectories on HTTP server via fetch or othe FreeBSD-own tools?

2009-04-02 Thread Olivier Nicole
 I need to fetch a whole directory tree from a public remote site.
 The top level directory and its subdirectories are accessible via
 ftp:// and http:// so I tried fetch, but fetch does only retrieve
 data on file basis and does not copy a whole directory tree
 recursively. The remote site does not offer sftp/sshd for that
 purpose.

wget -r

It's in the ports.

Bests,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: py24-gobject won't deinstall

2009-04-02 Thread Oliver Fromme
Polytropon free...@edvax.de wrote:
  Richard DeLaurell wrote:
   I reveal my ignorance: why does this work to delete the package
   
  # pkg_delete -f /var/db/pkg/py24-gobject*
   
   while 'pkg_delete  py24-gobject*' did not?
  
  Use the -f, Luke. The force! Use the force! :-)
  
   Would the latter have done the trick if issued from the /var/db/pkg
   directory itself?
  
  If you delete a package with -f that is required by another
  package, you BREAK this package. That's okay only if you're
  going to install the needed dependency right afterwards (by
  pkg_add or make).

However, the problem is that you will lose dependency
information if you do it that way.  That's why it is
not recommended.

Better use one of the port management tools (portmaster,
portupgrade) which have options to replace one port
with another port while retaining its dependencies.

As a rule of thumb, never use a force option (-f)
with any tool (rm, umount, pkg_delete, ...) unless you
know exactly what the consequences are.  I've seen people
shooting their feet too often that way.

Best regards
   Oliver

PS:  To check the consistency of your package database,
you can use this small script (requires Python):

http://www.secnetix.de/olli/scripts/pkg_check_dependencies

If you get no output from pkg_check_dependencies -q,
then your dependencies are good.

-- 
Oliver Fromme, secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606,  Geschäftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün-
chen, HRB 125758,  Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart

FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd

What is this talk of 'release'?  We do not make software 'releases'.
Our software 'escapes', leaving a bloody trail of designers and quality
assurance people in its wake.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: Fetching directories inclusive subdirectories on HTTP server via fetch or othe FreeBSD-own tools?

2009-04-02 Thread Marc Coyles
 O. Hartmann ohart...@zedat.fu-berlin.de wrote:
  I need to fetch a whole directory tree from a public remote site.
  The top level directory and its subdirectories are accessible via
  ftp:// and http:// so I tried fetch, but fetch does only retrieve
  data on file basis and does not copy a whole directory tree
  recursively. The remote site does not offer sftp/sshd for that
  purpose.

Wget --ftp-user=USER --ftp-password=PASS -r -l=0 ftp://address/directory

L8rs!
Marci


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: keep-state and divert

2009-04-02 Thread Paul A Procacci

Victor Sudakov wrote:

Colleagues,

I have read some recommendations on combining a stateful firewall with divert,
e.g. http://www.derkeiler.com/Mailing-Lists/FreeBSD-Security/2003-06/0078.html
and http://nuclight.livejournal.com/124348.html (the latter is in Russian).

Do I understand correctly that it is (mathematically?) impossible to
use the two together without also using skipto?

If we consider a simple example below, how would you replace the 600th
rule for a stateful one?

00100 divert 8668 ip from any to table(1) out via rl0
00200 deny log logamount 100 ip from 10.0.0.0/8 to any out via rl0
00300 deny log logamount 100 ip from 172.16.0.0/12 to any out via rl0
00400 deny log logamount 100 ip from 192.168.0.0/16 to any out via rl0

00500 divert 8668 ip from table(1) to any in via rl0
00600 allow ip from table(1) to any in via rl0
00700 deny log logamount 100 ip from any to 10.0.0.0/8 in via rl0
00800 deny log logamount 100 ip from any to 172.16.0.0/12 in via rl0
00900 deny log logamount 100 ip from any to 192.168.0.0/16 in via rl0

65535 allow ip from any to any

Thank you in advance for any input.




Hopefully you don't mind a response which provides a fully functioning
firewall ruleset.  It's by no means complete, but should give you the
answer to your question.

http://procacci.me/ipfw.conf

This message may contain confidential or privileged information.  If you are 
not the intended recipient, please advise us immediately and delete this 
message.  See http://www.datapipe.com/emaildisclaimer.aspx for further 
information on confidentiality and the risks of non-secure electronic 
communication. If you cannot access these links, please notify us by reply 
message and we will send the contents to you.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


ACL

2009-04-02 Thread Vasadi I. Claudiu Florin


Hello guyz,

I have here a little misunderstanding of something. Maybe I didn't do it  
corectly; anyway, it works, so that's the question. Regarding ACL's  
default entry. When I specify one, It doesn't apear as one would aspect.  
For instance, on solaris, when I set default ACL on a folder I have  
something like (notice the default):


# file: muzica
# owner: root
# group: wheel
user::rwx
user:smbadmin:rwx
user:ftpadmin:rwx
group::---
mask::rwx
other::---
default:user::rwx
default:user:root:rwx
default:group::rwx
default:group:wheel:rwx
default:other:---


Now, on FreeBSD I have no such default options, but strainglly it works.  
It's good that it works, but the problem remains... how to tell, with  
detailes, IF a default ACL is set to a folder, AND what's is it's values.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: going from cvs to svnq

2009-04-02 Thread perryh
Chuck Robey chu...@telenix.org wrote:
 But I do need to figure out how to get the subversion archive (not
 a particular branch of the archive, the whole kit and kaboodle).

devel/svk?  (From a mention last December; I have not tried it.)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: keep-state and divert

2009-04-02 Thread Michael Powell
Victor Sudakov wrote:

 Colleagues,
 
 I have read some recommendations on combining a stateful firewall with
 divert, e.g.
 http://www.derkeiler.com/Mailing-Lists/FreeBSD-Security/2003-06/0078.html
 and http://nuclight.livejournal.com/124348.html (the latter is in
 Russian).
 
 Do I understand correctly that it is (mathematically?) impossible to
 use the two together without also using skipto?
 
 If we consider a simple example below, how would you replace the 600th
 rule for a stateful one?
 
 00100 divert 8668 ip from any to table(1) out via rl0
 00200 deny log logamount 100 ip from 10.0.0.0/8 to any out via rl0
 00300 deny log logamount 100 ip from 172.16.0.0/12 to any out via rl0
 00400 deny log logamount 100 ip from 192.168.0.0/16 to any out via rl0
 
 00500 divert 8668 ip from table(1) to any in via rl0
 00600 allow ip from table(1) to any in via rl0
 00700 deny log logamount 100 ip from any to 10.0.0.0/8 in via rl0
 00800 deny log logamount 100 ip from any to 172.16.0.0/12 in via rl0
 00900 deny log logamount 100 ip from any to 192.168.0.0/16 in via rl0
 
 65535 allow ip from any to any
 
 Thank you in advance for any input.
 

I haven't used ipfw for a very long time, and haven't kept current with any 
changes. Below is an example (using kernel pppd) that I used to use a long 
time ago. For example purposes only, extract what you need for your specific 
configuration needs.

# Firewall rules

fwcmd=/sbin/ipfw
$fwcmd -f flush
$fwcmd add allow all from any to any via lo0
$fwcmd add allow all from any to any via xl0
$fwcmd add deny log all from any to 127.0.0.0/8

# Stop private networks (RFC1918) from entering the outside interface.  
$fwcmd add deny log ip from 192.168.0.0/16 to any in via ppp0  
$fwcmd add deny log ip from 172.16.0.0/12 to any in via ppp0  
$fwcmd add deny log ip from 10.0.0.0/8 to any in via ppp0  
$fwcmd add deny log ip from any to 192.168.0.0/16 in via ppp0  
$fwcmd add deny log ip from any to 172.16.0.0/12 in via ppp0  
$fwcmd add deny log ip from any to 10.0.0.0/8 in via ppp0  

# Stop draft-manning-dsua-01.txt nets on the outside interface  
$fwcmd add deny all from 0.0.0.0/8 to any in via ppp0  
$fwcmd add deny all from 169.254.0.0/16 to any in via ppp0  
$fwcmd add deny all from 192.0.2.0/24 to any in via ppp0  
$fwcmd add deny all from 224.0.0.0/4 to any in via ppp0  
$fwcmd add deny all from 240.0.0.0/4 to any in via ppp0  
$fwcmd add deny all from any to 0.0.0.0/8 in via ppp0  
$fwcmd add deny all from any to 169.254.0.0/16 in via ppp0  
$fwcmd add deny all from any to 192.0.2.0/24 in via ppp0  
$fwcmd add deny all from any to 224.0.0.0/4 in via ppp0  
$fwcmd add deny all from any to 240.0.0.0/4 in via ppp0

#$fwcmd add divert natd all from any to any via ppp0
$fwcmd add divert natd ip from any to me in via ppp0
$fwcmd add divert natd ip from 10.10.0.0/8 to any out via ppp0
$fwcmd add check-state

$fwcmd add allow log tcp from 209.67.60.33 to any 113 via ppp0


$fwcmd add deny log udp from any to me in recv ppp0
$fwcmd add allow udp from any to any via ppp0 keep-state
$fwcmd add allow log icmp from any to any icmptypes 3,4

$fwcmd add allow tcp from any to me 80 via ppp0 keep-state

$fwcmd add deny log tcp from any to any in recv ppp0 setup
$fwcmd add allow tcp from any to any out xmit ppp0 setup keep-state
$fwcmd add allow tcp from any to any via ppp0 established keep-state

$fwcmd add allow log icmp from any to any icmptypes 8 out xmit ppp0
$fwcmd add allow log icmp from any to any icmptypes 0 in recv ppp0
$fwcmd add allow log icmp from any to any icmptypes 11 in recv ppp0

$fwcmd add 65432 deny log tcp from any to any
$fwcmd add 65433 deny log udp from any to any
$fwcmd add 65434 deny log icmp from any to any
$fwcmd add 65435 deny log ip from any to any



This was used in conjunction with the natd.conf here:

interface ppp0
use_sockets yes
same_ports yes
dynamic yes

For example purposes only - this is a very very old config.

-Mike



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: keep-state and divert

2009-04-02 Thread Victor Sudakov
Paul A Procacci wrote:
 
 I have read some recommendations on combining a stateful firewall with 
 divert,
 e.g. 
 http://www.derkeiler.com/Mailing-Lists/FreeBSD-Security/2003-06/0078.html
 and http://nuclight.livejournal.com/124348.html (the latter is in Russian).
 
 Do I understand correctly that it is (mathematically?) impossible to
 use the two together without also using skipto?
 
 If we consider a simple example below, how would you replace the 600th
 rule for a stateful one?
 
 00100 divert 8668 ip from any to table(1) out via rl0
 00200 deny log logamount 100 ip from 10.0.0.0/8 to any out via rl0
 00300 deny log logamount 100 ip from 172.16.0.0/12 to any out via rl0
 00400 deny log logamount 100 ip from 192.168.0.0/16 to any out via rl0
 
 00500 divert 8668 ip from table(1) to any in via rl0
 00600 allow ip from table(1) to any in via rl0
 00700 deny log logamount 100 ip from any to 10.0.0.0/8 in via rl0
 00800 deny log logamount 100 ip from any to 172.16.0.0/12 in via rl0
 00900 deny log logamount 100 ip from any to 192.168.0.0/16 in via rl0
 
 65535 allow ip from any to any
 
 Thank you in advance for any input.
 
 
 
 Hopefully you don't mind a response which provides a fully functioning
 firewall ruleset.  It's by no means complete, but should give you the
 answer to your question.
 
 http://procacci.me/ipfw.conf

I have seen a number of such complete rulesets, some of them being
very inventive and tricky. 

I see that your example also uses skipto with keep-state.  My
question was however if it was possible to do without skipto. 

And a simple example would be most appreciated, not a fully functional
fuleset.

I am also thinking about using natd -deny_incoming for keeping state,
instead of keep-state rules. Is this feasible?

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ACL

2009-04-02 Thread Victor Sudakov
Vasadi I. Claudiu Florin wrote:
 
 Now, on FreeBSD I have no such default options, but strainglly it works.  
 It's good that it works, but the problem remains... how to tell, with  
 detailes, IF a default ACL is set to a folder, AND what's is it's values.

Is getfacl -d what you are looking for?

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ACL

2009-04-02 Thread Vasadi I. Claudiu Florin
On Thu, 02 Apr 2009 11:09:16 +0300, Vasadi I. Claudiu Florin  
claudiu.vas...@gmail.com wrote:


On Thu, 02 Apr 2009 11:06:40 +0300, Victor Sudakov v...@mpeks.tomsk.su  
wrote:





Is getfacl -d what you are looking for?




Maybe I didn't speak corectly. I already set the ACL (yes, setfacl -d  
[...]) but when I do getfacl file, there is no output that let's mee  
see the default entryes, like in solaris. thus, I cannot be sure it is  
set; but still it works, so I can't see it, but I see it's effects. bug ?


Like I said before, on solaris one has something like (notice the  
default entryes):


# file: muzica
# owner: root
# group: wheel
user::rwx
user:smbadmin:rwx
user:ftpadmin:rwx
group::---
mask::rwx
other::---
default:user::rwx
default:user:root:rwx
default:group::rwx
default:group:wheel:rwx
default:other:---


But on FreeBSD one has only (notice NO default entryes):

# file: muzica
# owner: root
# group: wheel
user::rwx
user:smbadmin:rwx
user:ftpadmin:rwx
group::---
mask::rwx
other::---



Still, keep in mind that althow no default entryes are visible, they  
do theyr job (child folders inherit parent folder ACL)



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: guile-1.8.6 build core dumps (autoconf issue ?)

2009-04-02 Thread Manish Jain

Mel Flynn wrote:

On Thursday 02 April 2009 03:01:53 manish jain wrote:

Hi Mel,

Sorry, I was away for work.

Here is what I think you want :

/usr/ports/lang/guile # make -C /usr/ports/lang/guile -V CONFIGURE_ENV
-V CONFIGURE_ARGS
CPPFLAGS=-I/usr/local/include  LDFLAGS=-L/usr/local/lib
SHELL=/bin/sh CONFIG_SHELL=/bin/sh MAKE=gmake
AUTOCONF=/usr/local/bin/autoconf-2.62
AUTOHEADER=/usr/local/bin/autoheader-2.62
AUTOIFNAMES=/usr/local/bin/ifnames-2.62
AUTOM4TE=/usr/local/bin/autom4te-2.62
AUTORECONF=/usr/local/bin/autoreconf-2.62
AUTOSCAN=/usr/local/bin/autoscan-2.62
AUTOUPDATE=/usr/local/bin/autoupdate-2.62 AUTOCONF_VERSION=262
lt_cv_sys_max_cmd_len=262144
 --prefix=/usr/local ${_LATE_CONFIGURE_ARGS}


Hmmm...last straw:
find /usr/local -name '*.la' -exec grep -- '-llthread' {} +

To explain: something guile needs is built with linux-threads yet this is not 
correctly handled and the resulting binaries are flawed, most likely because 
another library that guile needs uses FreeBSD native threads.


On FreeBSD threaded linking is done with -pthread linker flag which pulls in 
the correct threading library (on 7.0 and above libthr, on 6.x and earlier 
libpthread).



Hi Mel,

There is no output.


/root # find /usr/local -name '*.la' -exec grep -- '-llthread' {} +
/root # 




--

Thank you and Regards
Manish Jain
invalid.poin...@gmail.com
+91-99830-62246

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: keep-state and divert

2009-04-02 Thread Victor Sudakov
Michael Powell wrote:
  
  I have read some recommendations on combining a stateful firewall with
  divert, e.g.
  http://www.derkeiler.com/Mailing-Lists/FreeBSD-Security/2003-06/0078.html
  and http://nuclight.livejournal.com/124348.html (the latter is in
  Russian).
  
  Do I understand correctly that it is (mathematically?) impossible to
  use the two together without also using skipto?

[dd]

 
 I haven't used ipfw for a very long time, and haven't kept current with any 
 changes. Below is an example (using kernel pppd) that I used to use a long 
 time ago. For example purposes only, extract what you need for your specific 
 configuration needs.

I have looked at your ruleset. First you have:

[dd]
 $fwcmd add divert natd ip from any to me in via ppp0
 $fwcmd add divert natd ip from 10.10.0.0/8 to any out via ppp0
 $fwcmd add check-state
 

[dd]

and only later you have your keep-state rules:

 
 $fwcmd add allow udp from any to any via ppp0 keep-state
 $fwcmd add allow log icmp from any to any icmptypes 3,4
 
 $fwcmd add allow tcp from any to me 80 via ppp0 keep-state
 
 $fwcmd add deny log tcp from any to any in recv ppp0 setup
 $fwcmd add allow tcp from any to any out xmit ppp0 setup keep-state
 $fwcmd add allow tcp from any to any via ppp0 established keep-state

This means your dynamic rules will contain an already NAT-ted address,
which is useless.

With my example ruleset below, where would you put the keep-state
option?


00100 divert 8668 ip from any to table(1) out via rl0
00200 deny log logamount 100 ip from 10.0.0.0/8 to any out via rl0
00300 deny log logamount 100 ip from 172.16.0.0/12 to any out via rl0
00400 deny log logamount 100 ip from 192.168.0.0/16 to any out via rl0

00500 divert 8668 ip from table(1) to any in via rl0
00600 check-state
00700 deny log logamount 100 ip from any to 10.0.0.0/8 in via rl0
00800 deny log logamount 100 ip from any to 172.16.0.0/12 in via rl0
00900 deny log logamount 100 ip from any to 192.168.0.0/16 in via rl0

65535 allow ip from any to any


-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ACL

2009-04-02 Thread Victor Sudakov
Vasadi I. Claudiu Florin wrote:
 
 
 Is getfacl -d what you are looking for?
 
 
 
 Maybe I didn't speak corectly. I already set the ACL (yes, setfacl -d  
 [...]) but when I do getfacl file, 

Don't do just getfacl file, try getfacl -d file.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fetching directories inclusive subdirectories on HTTP server via fetch or othe FreeBSD-own tools?

2009-04-02 Thread O. Hartmann

Oliver Fromme wrote:

O. Hartmann ohart...@zedat.fu-berlin.de wrote:
  I run into a problem I can not solve. I need to fetch a whole directory 
  tree from a public remote site. The top level directory and its 
  subdirectories are accessible via ftp:// and http:// so I tried fetch, 
  but fetch does only retrieve data on file basis and does not copy a 
  whole directory tree recursively. The remote site does not offer 
  sftp/sshd for that purpose.
  
  Is there a simple way to perform such a task with FreeBSD's own tools (I 
  try to avoid installing 'wget' and sibblings)? I need to keep it simple, 
  task should be performed via cronjob.


I'm afraid you can't do that with FreeBSD base tools.

An alternative to wget would be omi (ports/ftp/omi)
which is a simple FTP mirroring tool, written in C
without any dependencies.  Usage is simple:

$ omi -s server.name.com -r /remote/dir -l ./local/dir

Note that, by default, it tries to synchronize the local
dir perfectly, i.e. if the remote dir is empty, it will
wipe out the local dir.  (The option -P 0 will prevent
omi from removing anything.)

Best regards
   Oliver



Thanks for so much answers.

I tried 'omi' but I find that the tool does not travers deeper into a 
dir than level one, so subdirs seem to be left out. I will try wget, 
although this tool would not be the first choice.



Thanks,
Oliver
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


apache halting during log rotation

2009-04-02 Thread Robin Becker

I have the following in my newsyslog.conf



/var/log/httpd-*.log644  9 8@T01BG /var/run/httpd.pid 30


and am seeing crashes with apache-2.0.63_2 which I think are associated.

The relevant error log entries appear to be these lines


[Thu Apr 02 01:00:00 2009] [notice] Graceful restart requested, doing restart
[Thu Apr 02 01:00:00 2009] [emerg] (2)No such file or directory: Couldn't 
initialize cross-process lock in child
[Thu Apr 02 01:00:00 2009] [emerg] (2)No such file or directory: Couldn't 
initialize cross-process lock in child
[Thu Apr 02 01:00:00 2009] [notice] FastCGI: process manager initialized (pid 
93707)
[Thu Apr 02 01:00:01 2009] [warn] RSA server certificate CommonName (CN) 
`*.xxx.org' does NOT match server name!?
[Thu Apr 02 01:00:01 2009] [warn] RSA server certificate CommonName (CN) 
`*.xxx.org' does NOT match server name!?

...

[Thu Apr 02 01:00:01 2009] [warn] RSA server certificate wildcard CommonName 
(CN) `*.xxx.org' does NOT match server name!?
[Thu Apr 02 01:00:01 2009] [notice] Apache/2.0.63 (FreeBSD) mod_fastcgi/2.4.6 
mod_ssl/2.0.63 OpenSSL/0.9.8e configured -- resuming normal operations
[Thu Apr 02 01:00:01 2009] [alert] Child 93701 returned a Fatal error... Apache 
is exiting!
[Thu Apr 02 01:00:01 2009] [alert] FastCGI: read() from pipe failed (0)
[Thu Apr 02 01:00:01 2009] [alert] FastCGI: the PM is shutting down, Apache 
seems to have disappeared - bye


I have used this rotation scheme with 6.0/6.1/6.2 for some years and it has 
never failed till the last few days when I'm now running 7.0-RELEASE. Can anyone 
adivise what could be done to ameliorate this.


I see mention of rotatelogs, is that a better solution to this problem?
--
Robin Becker
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: keep-state and divert

2009-04-02 Thread Michael Powell
Victor Sudakov wrote:

[snip]
 
 I have looked at your ruleset. First you have:
 
 [dd]
 $fwcmd add divert natd ip from any to me in via ppp0
 $fwcmd add divert natd ip from 10.10.0.0/8 to any out via ppp0
 $fwcmd add check-state
 
 
 [dd]
 
 and only later you have your keep-state rules:
 
 
 $fwcmd add allow udp from any to any via ppp0 keep-state
 $fwcmd add allow log icmp from any to any icmptypes 3,4
 
 $fwcmd add allow tcp from any to me 80 via ppp0 keep-state
 
 $fwcmd add deny log tcp from any to any in recv ppp0 setup
 $fwcmd add allow tcp from any to any out xmit ppp0 setup keep-state
 $fwcmd add allow tcp from any to any via ppp0 established keep-state
 
 This means your dynamic rules will contain an already NAT-ted address,
 which is useless.
 
 With my example ruleset below, where would you put the keep-state
 option?
 
 
 00100 divert 8668 ip from any to table(1) out via rl0
 00200 deny log logamount 100 ip from 10.0.0.0/8 to any out via rl0
 00300 deny log logamount 100 ip from 172.16.0.0/12 to any out via rl0
 00400 deny log logamount 100 ip from 192.168.0.0/16 to any out via rl0
 
 00500 divert 8668 ip from table(1) to any in via rl0
 00600 check-state
^^^
Yes - the check-state line is required first in order to make use of the 
keep-state line later in the ruleset.

00650 allow ip from table(1) to any in via rl0 keep-state

Or wherever you are intending to set up state for a rule in the state table.

 00700 deny log logamount 100 ip from any to 10.0.0.0/8 in via rl0
 00800 deny log logamount 100 ip from any to 172.16.0.0/12 in via rl0
 00900 deny log logamount 100 ip from any to 192.168.0.0/16 in via rl0
 
 65535 allow ip from any to any
 
 
$fwcmd add allow tcp from any to any out xmit ppp0 setup keep-state
$fwcmd add allow tcp from any to any via ppp0 established keep-state

Note in these two rules the setting of the SYN flag with setup. This 
allows the initial 3-way TCP handshake. The subsequent established line is 
where it will remember the traffic. It is not truly necessary to have it 
split between two lines like this, as a looser example:

$fwcmd add allow tcp from any to me 80 via ppp0 keep-state

Of course, you will need to adjust for the direction(s) of your traffic 
flow, that is, in order to meet your specific needs. My example rule was 
intended for use as an endpoint where I was mainly interested in blocking 
all inbound traffic with a very limited number of exceptions with state 
being used to allow back in from the outside all return traffic originated 
by me, and only me.

It's been something on the order of 6-7 years since I last used ipfw. For 
something like 2-3 years after that I used ipfilter. When pf was imported 
from OpenBSD and became stable I made the move to pf. 

So my recall of specifics related to ipfw is dim at best. Was just hoping 
you could pick out some detail which may be of use to you. Your needs may be 
different from mine and consequently there is no real one magic copy this 
for plug and play ruleset. Mine was just one example where I was trying to 
illustrate one possibility of utilizing state. And this from a working 
ruleset that I used for years.

-Mike



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


gcc 2.95 - 4.4

2009-04-02 Thread Mark
Hello,

 

I recently upgraded my old gcc 2.95 to gcc44. Question is, though, what

make.conf, or other settings, do I need to apply to get the system to use

the new gcc? Ports keep finding (and using) the old gcc 2.95.

 

I also set things like this in the Makefile:

 

$(GCC) = /usr/local/bin/gcc44

 

But that doesn't seem to help.

 

Thanks

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: gcc 2.95 - 4.4

2009-04-02 Thread Polytropon
On Thu, 02 Apr 2009 10:01:00 GMT, Mark ad...@asarian-host.net wrote:
 I also set things like this in the Makefile:
 
 $(GCC) = /usr/local/bin/gcc44
 
 But that doesn't seem to help.

Should be, according to syntax:

GCC=/usr/local/bin/gcc44

or

CC=/usr/local/bin/gcc44

As far as I understood, CC is the variable used by the
port's make subsystem.



Maybe it's possible to install the port over the system's
compiler by defining a prefix other than /usr/local, but I
don't know if this is recommended.


-- 
Polytropon
From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: keep-state and divert

2009-04-02 Thread Victor Sudakov
Michael Powell wrote:
  
  With my example ruleset below, where would you put the keep-state
  option?
  
  
  00100 divert 8668 ip from any to table(1) out via rl0
  00200 deny log logamount 100 ip from 10.0.0.0/8 to any out via rl0
  00300 deny log logamount 100 ip from 172.16.0.0/12 to any out via rl0
  00400 deny log logamount 100 ip from 192.168.0.0/16 to any out via rl0
  
  00500 divert 8668 ip from table(1) to any in via rl0
  00600 check-state
 ^^^
 Yes - the check-state line is required first in order to make use of the 
 keep-state line later in the ruleset.
 
 00650 allow ip from table(1) to any in via rl0 keep-state

It should be out here, not in, because I want to permit outbound
traffic and corresponding return traffic. You might think of something like

650 allow ip from any to table(1) out via rl0 keep-state

However, if we place the keep-state rule at 650, only already
diverted packets will reach it, and it will be useless because the src
address will already have become the public one. I need a rule which
would permit return traffic to the RFC1913 hosts (i.e. after
dealiasing).

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fetching directories inclusive subdirectories on HTTP server via fetch or othe FreeBSD-own tools?

2009-04-02 Thread Vincent Hoffman
On 2/4/09 10:41, O. Hartmann wrote:
 Oliver Fromme wrote:
 O. Hartmann ohart...@zedat.fu-berlin.de wrote:
   I run into a problem I can not solve. I need to fetch a whole
 directory   tree from a public remote site. The top level directory
 and its   subdirectories are accessible via ftp:// and http:// so I
 tried fetch,   but fetch does only retrieve data on file basis and
 does not copy a   whole directory tree recursively. The remote site
 does not offer   sftp/sshd for that purpose.
 Is there a simple way to perform such a task with FreeBSD's own
 tools (I   try to avoid installing 'wget' and sibblings)? I need to
 keep it simple,   task should be performed via cronjob.

 I'm afraid you can't do that with FreeBSD base tools.

 An alternative to wget would be omi (ports/ftp/omi)
 which is a simple FTP mirroring tool, written in C
 without any dependencies.  Usage is simple:

 $ omi -s server.name.com -r /remote/dir -l ./local/dir

 Note that, by default, it tries to synchronize the local
 dir perfectly, i.e. if the remote dir is empty, it will
 wipe out the local dir.  (The option -P 0 will prevent
 omi from removing anything.)

 Best regards
Oliver


 Thanks for so much answers.

 I tried 'omi' but I find that the tool does not travers deeper into a
 dir than level one, so subdirs seem to be left out. I will try wget,
 although this tool would not be the first choice.

I seem to remember that nctp3 had a decent -R recurse option to its get
(or its ncftpget non interactive mode) if you want to avoid wget.

Vince


 Thanks,
 Oliver
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 freebsd-questions-unsubscr...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


regardinf Virtual File system VOP_RENAME_APV function.

2009-04-02 Thread Cherukuri, Balaji
Hi FreeBSD Team,

 

I am implementing a stackable file system similar to NULLFS and I have question 
on VOP_RENAME_APV function.

 

In VOP_RENAME_APV function:

 

VOP_RENAME_APV(struct vop_vector *vop, struct vop_rename_args *a)

{

int rc;

 



if (vop-vop_rename != NULL)

rc = vop-vop_rename(a);

else

rc = vop-vop_bypass(a-a_gen);

 

vop_rename_post(a, rc);

return (rc);

}

 

I want to know that what is the importance of vop_rename_post function. 
Actually I returned EXDEV from my file system, but still vop_rename_post  
function is doing rename operation.

 

I want to know whether it is having default implementation of rename 
functionality, can I use this function for rename operation directly because I 
do not have anything new to do in rename functionality.

 

Please let me know, Is there any document which will talk how to write 
filesystem in FreeBSD environment? 

 

Thanks in advance,

BalajiC

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Ports options not coming up

2009-04-02 Thread Da Rock
I'd to debug this, but I'm not even sure where to start. On just one
system since some recent updates I have no options screens coming up for
ports. I get a blue screen and then nothing; stdout says options
unchanged.

It is a vm if that means anything?

Cheers

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Ports options not coming up

2009-04-02 Thread rasz

Da Rock wrote:

I'd to debug this, but I'm not even sure where to start. On just one
system since some recent updates I have no options screens coming up for
ports. I get a blue screen and then nothing; stdout says options
unchanged.

It is a vm if that means anything?

Cheers

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

  
if i understand you correctly, and this is the same thing, i have had 
this happen when
building ports in a terminal emulator of sorts, particularly  the xfce4 
one (and maybe kde4 konsole)
when the actual window is too small (e.g. in number of lines). i would 
see the blue screen for a bit and then
options unchanged. it doesn't happen if at all if i keep the window a 
good size, but i don't know about VM.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


ghostscript8 build failure

2009-04-02 Thread Anton Shterenlikht
on 7.1-stable and on 8.0-current i386 I get
when upgrading ghostscript:

[skip]

if [ x != x ]; then LD_RUN_PATH=; export LD_RUN_PATH; fi; \
XCFLAGS= XINCLUDE= XLDFLAGS= XLIBDIRS= XLIBS= \
FEATURE_DEVS= DEVICE_DEVS= DEVICE_DEVS1= DEVICE_DEVS2= DEVICE_DEVS3= \
DEVICE_DEVS4= DEVICE_DEVS5= DEVICE_DEVS6= DEVICE_DEVS7= DEVICE_DEVS8= \
DEVICE_DEVS9= DEVICE_DEVS10= DEVICE_DEVS11= DEVICE_DEVS12= \
DEVICE_DEVS13= DEVICE_DEVS14= DEVICE_DEVS15= DEVICE_DEVS16= \
DEVICE_DEVS17= DEVICE_DEVS18= DEVICE_DEVS19= DEVICE_DEVS20= \
DEVICE_DEVS_EXTRA= \
/bin/sh ./obj/../soobj/ldt.tr
./obj/../soobj/gdevl256.o(.text+0x780): In function `gs_shared_init':
: multiple definition of `gs_shared_init'
./obj/../soobj/gdevxalt.o(.text+0x1820): first defined here
/usr/bin/ld: Warning: size of symbol `gs_shared_init' changed from 148 in 
./obj/../soobj/gdevxalt.o to 36 in ./obj/../soobj/gdevl256.o
./obj/../soobj/gdevvglb.o(.text+0xa40): In function `gs_shared_init':
: multiple definition of `gs_shared_init'
./obj/../soobj/gdevxalt.o(.text+0x1820): first defined here
gmake[1]: *** [bin/../sobin/libgs.so.8.64] Error 1
gmake[1]: Leaving directory 
`/usr/ports/print/ghostscript8/work/ghostscript-8.64'
gmake: *** [so] Error 2
*** Error code 1

Stop in /usr/ports/print/ghostscript8.
*** Error code 1

Stop in /usr/ports/print/ghostscript8.
#

Is this something to do with incomplete perl-dependt ports upgrades?

many thanks
anton

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 928 8233 
Fax: +44 (0)117 929 4423
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: gcc 2.95 - 4.4

2009-04-02 Thread Mark
-Original Message-
From: Polytropon [mailto:free...@edvax.de] 
Sent: donderdag 2 april 2009 12:15
To: Mark
Cc: freebsd-questions@freebsd.org
Subject: Re: gcc 2.95 - 4.4

On Thu, 02 Apr 2009 10:01:00 GMT, Mark ad...@asarian-host.net wrote:

  I also set things like this in the Makefile:
  
  $(GCC) = /usr/local/bin/gcc44
  
  But that doesn't seem to help.
 
 Should be, according to syntax:
 
   GCC=/usr/local/bin/gcc44
 
 or
 
   CC=/usr/local/bin/gcc44

Ok, got it working now. Thanks. :)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


How to 'unbreak' re2c port?

2009-04-02 Thread Mark
Okay, I just upgraded to gcc44 in order to fix what I thought was a

compilation issue with re2c plus a gcc 2.95 compiler. However, gcc44

*still* trips over it! Same deal (see below). So, has ANYONE been able to

compile this port at all?

 

Thanks.

 

- Mark

 

 

==  Building for re2c-0.13.5

make  all-am

source='code.cc' object='code.o' libtool=no  DEPDIR=.deps depmode=gcc

/bin/sh .../depcomp  c++ -DHAVE_CONFIG_H -I.  -O -pipe -c -o code.o

code.cc

In file included from globals.h:9,

 from code.cc:11:

stream_lc.h:18: syntax error before `'

stream_lc.h:29: syntax error before `;'

stream_lc.h:31: syntax error before `'

stream_lc.h:42: destructors must be member functions

stream_lc.h:42: virtual outside class declaration

stream_lc.h: In function `void basic_null_stream()':

stream_lc.h:42: confused by earlier errors, bailing out

cpp0: output pipe has been closed

*** Error code 1

 

Stop in /usr/ports/devel/re2c/work/re2c-0.13.5.

*** Error code 1

 

Stop in /usr/ports/devel/re2c/work/re2c-0.13.5.

*** Error code 1

 

Stop in /usr/ports/devel/re2c.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


amarok + ipod

2009-04-02 Thread Neal Hogan
(no luck on the multimedia list . . . so, I'm trying here)

Hello,
Well, I've got amarok running with 7.1-RELEASE and my question concerns
amarok's interaction with an ipod. I am able to transfer music from my
computer to the ipod and can play music that's on the ipod on amarok, but
the quality, in both cases is quite poor. There is a lot of skipping,
repetition, and general distortion.  The songs sound fine from their source
(i.e., the transferring device). I've been looking around (google, mailing
list archives, etc.), but I don't see any suggestions. I'm hoping you may
provide some guidance.

 Also, when I quit amarok, it doesn't appear to fully shutdown. It will get
to a point in the process and just hang. If I press enter after several
seconds of waiting, I get back to my prompt. The point at which it hangs is
not consistent.

Do you need a dmesg or anything?

Thanks!


-- 
www.nealhogan.net  www.lambdaserver.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Recovered my gnome but alacarte doesn't run

2009-04-02 Thread Manish Jain


Hi all,

I crashed my gnome with a brilliant idea I had a few days back. After 
about 100 man-hours and 500 MB of downloads, I have recovered my gnome 
except for one glitch : alacarte doesn't run. I suppose I could sit down 
some more and trace the problem, but 1) I am exhausted and 2) I am sure 
any gtk/python user could readily point out what is missing in my setup.


Below is the output of alacarte :


  Traceback (most recent call last):
  File /usr/local/bin/alacarte, line 22, in module
from Alacarte.MainWindow import MainWindow
  File /usr/local/lib/python2.5/site-packages/Alacarte/MainWindow.py, line 19, in 
module
import gtk, gtk.glade, gmenu, gobject, gio
  File /usr/local/lib/python2.5/site-packages/gtk-2.0/gtk/__init__.py, line 38, in 
module
import gobject as _gobject
  File /usr/local/lib/python2.5/site-packages/gtk-2.0/gobject/__init__.py, line 33, 
in module
from glib import spawn_async, idle_add, timeout_add, timeout_add_seconds, \
  File /usr/local/lib/python2.5/site-packages/gtk-2.0/glib/__init__.py, line 30, in 
module
from glib._glib import *
ImportError: /usr/local/lib/python2.5/site-packages/gtk-2.0/glib/_glib.so: Undefined 
symbol PyUnicodeUCS2_DecodeUTF8

[1]+  Exit 1  alacarte



Any help would be greatly appreciated.
--

Thank you and Regards
Manish Jain
invalid.poin...@gmail.com
+91-99830-62246

NB : Laast year I kudn't spell Software Engineer. Now I are won.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


FreeBSD 8.0-CUR: /usr/ports/x11/linux-f8-xorg-libs won't install although emulators/linux_base-f8 is already installed

2009-04-02 Thread O. Hartmann
Before filing a PR I will ask for hints for a problem I revealed when I 
wanted installing usr/ports/x11/linux-f8-xorg-libs on a FreeBSD 
8.0-CURRENT/amd64 box (most recent build_world, ports tree up to date).

I receive this error:

===  linux-f8-xorg-libs-7.3 the port should be used with linux_base-f8, 
please read /usr/ports/UPDATING.

*** Error code 1

Stop in /usr/ports/x11/linux-f8-xorg-libs.


Package /usr/ports/emulators/linux_base-f8 is already installed, up to 
date and Linux kernel module is also running and showing up when doing 
kldstat adjacent with linprocfs and linsysfs.


What's wrong?

Oliver
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Acroread8 problem on 6.4?

2009-04-02 Thread Olivier Nicole
Hi,

I just installed acroread8 on a new box, 6.4 amd64.

When I try to launch acroread, I get:

cannot set up thread-local storage: cannot set up LDT for thread-local storage


What does that mean?

How to make it work?

Best regards,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 8.0-CUR: /usr/ports/x11/linux-f8-xorg-libs won't install although emulators/linux_base-f8 is already installed

2009-04-02 Thread Boris Samorodov
On Thu, 02 Apr 2009 13:28:20 + O. Hartmann wrote:

 Before filing a PR I will ask for hints for a problem I revealed when
 I wanted installing usr/ports/x11/linux-f8-xorg-libs on a FreeBSD
 8.0-CURRENT/amd64 box (most recent build_world, ports tree up to
 date).
 I receive this error:

 ===  linux-f8-xorg-libs-7.3 the port should be used with
 linux_base-f8, please read /usr/ports/UPDATING.

There was an error at /usr/ports/UPDATING, I committed a fix two
hours ago. You should define at /etc/make.conf variables:
OVERRIDE_LINUX_BASE_PORT=f8
OVERRIDE_LINUX_NONBASE_PORTS=f8

 *** Error code 1

 Stop in /usr/ports/x11/linux-f8-xorg-libs.


 Package /usr/ports/emulators/linux_base-f8 is already installed, up to
 date and Linux kernel module is also running and showing up when doing
 kldstat adjacent with linprocfs and linsysfs.

 What's wrong?

HTH  WBR
-- 
Boris Samorodov (bsam)
Research Engineer, http://www.ipt.ru Telephone  Internet SP
FreeBSD Committer, http://www.FreeBSD.org The Power To Serve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Please confirm your request to join emo-newsletter

2009-04-02 Thread Yahoo! Groups

Hello freebsd-questions@FreeBSD.org,

We have received your request to join the emo-newsletter 
group hosted by Yahoo! Groups, a free, easy-to-use community service.

This request will expire in 7 days.

TO BECOME A MEMBER OF THE GROUP: 

1) Go to the Yahoo! Groups site by clicking on this link:
   
http://groups.yahoo.com/i?i=wyicwhsr4fkvkm0tcydxva1osj0u3hlke=freebsd-questions%40FreeBSD%2Eorg
 

  (If clicking doesn't work, Cut and Paste the line above into your 
   Web browser's address bar.)

-OR-

2) REPLY to this email by clicking Reply and then Send
   in your email program

If you did not request, or do not want, a membership in the
emo-newsletter group, please accept our apologies
and ignore this message.

Regards,

Yahoo! Groups Customer Care

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 

 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 8.0-CUR: /usr/ports/x11/linux-f8-xorg-libs won't install although emulators/linux_base-f8 is already installed

2009-04-02 Thread Steve Kargl
On Thu, Apr 02, 2009 at 01:28:20PM +, O. Hartmann wrote:
 Before filing a PR I will ask for hints for a problem I revealed when I 
 wanted installing usr/ports/x11/linux-f8-xorg-libs on a FreeBSD 
 8.0-CURRENT/amd64 box (most recent build_world, ports tree up to date).
 I receive this error:
 
 ===  linux-f8-xorg-libs-7.3 the port should be used with linux_base-f8, 
 please read /usr/ports/UPDATING.

  ^^^

 *** Error code 1
 
 Stop in /usr/ports/x11/linux-f8-xorg-libs.
 
 
 Package /usr/ports/emulators/linux_base-f8 is already installed, up to 
 date and Linux kernel module is also running and showing up when doing 
 kldstat adjacent with linprocfs and linsysfs.
 
 What's wrong?
 

See above?

-- 
Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 8.0-CUR: /usr/ports/x11/linux-f8-xorg-libs won't install although emulators/linux_base-f8 is already installed

2009-04-02 Thread O. Hartmann

Boris Samorodov wrote:

On Thu, 02 Apr 2009 13:28:20 + O. Hartmann wrote:


Before filing a PR I will ask for hints for a problem I revealed when
I wanted installing usr/ports/x11/linux-f8-xorg-libs on a FreeBSD
8.0-CURRENT/amd64 box (most recent build_world, ports tree up to
date).
I receive this error:



===  linux-f8-xorg-libs-7.3 the port should be used with
linux_base-f8, please read /usr/ports/UPDATING.


There was an error at /usr/ports/UPDATING, I committed a fix two
hours ago. You should define at /etc/make.conf variables:
OVERRIDE_LINUX_BASE_PORT=f8
OVERRIDE_LINUX_NONBASE_PORTS=f8


*** Error code 1



Stop in /usr/ports/x11/linux-f8-xorg-libs.




Package /usr/ports/emulators/linux_base-f8 is already installed, up to
date and Linux kernel module is also running and showing up when doing
kldstat adjacent with linprocfs and linsysfs.



What's wrong?


HTH  WBR



After adding both lines as recommended everything worked well!

Thanks.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Stop during upgrade of textproc/linux-expat

2009-04-02 Thread Ewald Jenisch
Hi,

While upgrading my ports I ran into a problem during the upgrade of
textproc/linux-expat. After the usual cvsup, make fetchindex, pkgdb
-F I started portupgrade -arR which resulted in a Stop because of a
syntax error - for details see below.

Has anybode else had this problem? What can I do against it?

Thanks much in advance for your help,
-ewald


--  Cut here  --

# portupgrade -arR
** Port marked as IGNORE: net/citrix_ica:
is an interactive port
---  Upgrading 'linux-expat-1.95.8' to 'linux-expat-1.95.8_1' (textproc/linux-e
xpat)
---  Building '/usr/ports/textproc/linux-expat'
===  Cleaning for linux-expat-1.95.8_1
===  Vulnerability check disabled, database not found
===  Extracting for linux-expat-1.95.8_1
= MD5 Checksum OK for rpm/i386/fedora/4/expat-1.95.8-6.i386.rpm.
= SHA256 Checksum OK for rpm/i386/fedora/4/expat-1.95.8-6.i386.rpm.
===   linux-expat-1.95.8_1 depends on file: /usr/local/bin/rpm2cpio - found
===  Patching for linux-expat-1.95.8_1
===  Configuring for linux-expat-1.95.8_1
---  Backing up the old version
---  Uninstalling the old version
---  Deinstalling 'linux-expat-1.95.8'
pkg_delete: package 'linux-expat-1.95.8' is required by these other packages
and may not be deinstalled (but I'll delete it anyway):
citrix_ica-10.6_1
linux-fontconfig-2.2.3_7
linux-openmotif-2.2.4_2
linux-xorg-libs-6.8.2_5
ELF binary type 3 not known.
/compat/linux/sbin/ldconfig: 1: Syntax error: ( unexpected
pkg_delete: unexec command for '/compat/linux/sbin/ldconfig -r /compat/linux' fa
iled
pkg_delete: couldn't entirely delete package (perhaps the packing list is
incorrectly specified?)
[Updating the pkgdb format:bdb_btree in /var/db/pkg ... - 800 packages found (
-1 +0) (...) done]
---  Installing the new version via the port
===  Installing for linux-expat-1.95.8_1
===   linux-expat-1.95.8_1 depends on file: /compat/linux/etc/fedora-release -
found
===   Generating temporary packing list
===  Checking if textproc/linux-expat already installed
cd /usr/ports/textproc/linux-expat/work  /usr/bin/find * -type d -exec /bin/mk
dir -p /compat/linux/{} \;
cd /usr/ports/textproc/linux-expat/work  /usr/bin/find * ! -type d | /usr/bin/
cpio -pm -R root:wheel /compat/linux
299 blocks
===   Running linux ldconfig
/compat/linux/sbin/ldconfig -r /compat/linux
ELF binary type 3 not known.
/compat/linux/sbin/ldconfig: 1: Syntax error: ( unexpected
*** Error code 2

Stop in /usr/ports/textproc/linux-expat.
*** Error code 1

Stop in /usr/ports/textproc/linux-expat.
===  Cleaning for linux-expat-1.95.8_1
---  Cleaning out obsolete shared libraries
---  Upgrading 'linux-fontconfig-2.2.3_7' to 'linux-fontconfig-2.2.3_8' (x11-fo
nts/linux-fontconfig)
---  Building '/usr/ports/x11-fonts/linux-fontconfig'
===  Cleaning for linux-fontconfig-2.2.3_8
===  Vulnerability check disabled, database not found
===  Extracting for linux-fontconfig-2.2.3_8
= MD5 Checksum OK for rpm/i386/fedora/4/fontconfig-2.2.3-13.i386.rpm.
= SHA256 Checksum OK for rpm/i386/fedora/4/fontconfig-2.2.3-13.i386.rpm.
===   linux-fontconfig-2.2.3_8 depends on file: /usr/local/bin/rpm2cpio - found
===  Patching for linux-fontconfig-2.2.3_8
===  Configuring for linux-fontconfig-2.2.3_8
---  Backing up the old version
---  Uninstalling the old version
Stale dependency: linux-fontconfig-2.2.3_7 -- linux-expat-1.95.8_1 -- manually
run 'pkgdb -F' to fix, or specify -O to force.
---  Skipping 'x11/linux-xorg-libs' (linux-xorg-libs-6.8.2_5) because a requisi
te package 'linux-fontconfig-2.2.3_7' (x11-fonts/linux-fontconfig) failed (speci
fy -k to force)
---  Skipping 'x11-toolkits/linux-openmotif' (linux-openmotif-2.2.4_2) because
a requisite package 'linux-xorg-libs-6.8.2_5' (x11/linux-xorg-libs) failed (spec
ify -k to force)
** Listing the failed packages (-:ignored / *:skipped / !:failed)
- net/citrix_ica (marked as IGNORE)
! x11-fonts/linux-fontconfig (linux-fontconfig-2.2.3_7) (uninstall error
)
* x11/linux-xorg-libs (linux-xorg-libs-6.8.2_5)
* x11-toolkits/linux-openmotif (linux-openmotif-2.2.4_2)
#
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Fetching directories inclusive subdirectories on HTTP server via fetch or othe FreeBSD-own tools?

2009-04-02 Thread Oliver Fromme
O. Hartmann wrote:
  I tried 'omi' but I find that the tool does not travers deeper into a 
  dir than level one, so subdirs seem to be left out. I will try wget, 
  although this tool would not be the first choice.

Well, omi _does_ recurse into subdirectories, but it
might fail if the FTP server has an unusual output
format, or otherwise behaves in unexpected ways.
Sometimes -o nostat helps to work around it.

Especially if the FTP server runs on some non-UNIX
environment and the directory output does not look
like an ls -l, omi has trouble parsing it.  I've
seen FTP servers running on VMS or Novell Netware
that looked _really_ weird.  These are not supported
by omi, I'm afraid.

Best regards
   Oliver

-- 
Oliver Fromme, secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606,  Geschäftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün-
chen, HRB 125758,  Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart

FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd

I made up the term 'object-oriented', and I can tell you
I didn't have C++ in mind.
-- Alan Kay, OOPSLA '97
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Stop during upgrade of textproc/linux-expat

2009-04-02 Thread Ewald Jenisch
On Thu, Apr 02, 2009 at 08:04:38PM +0400, Chagin Dmitry wrote:
 
 linux_expat depends on running linuxulator
 (USE_LDCONFIG=YES in Makefile) so kldload linux :)
 

Hi Dmitry,

Thanks much for the hint! I tried kldload linux then restarting the
build process and it went through :-)

Something related but slightly off-topic: To load linux-emu
(linuxolator) automatically - is having 'linux_load=YES' in
/boot/loader.conf sufficient?

-ewald

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Stop during upgrade of textproc/linux-expat

2009-04-02 Thread Chagin Dmitry
On Thu, Apr 02, 2009 at 05:28:23PM +0200, Ewald Jenisch wrote:
 Hi,
 
 While upgrading my ports I ran into a problem during the upgrade of
 textproc/linux-expat. After the usual cvsup, make fetchindex, pkgdb
 -F I started portupgrade -arR which resulted in a Stop because of a
 syntax error - for details see below.
 
 Has anybode else had this problem? What can I do against it?
 

linux_expat depends on running linuxulator
(USE_LDCONFIG=YES in Makefile) so kldload linux :)

-- 
Have fun!
chd


pgpjr0KojIX3K.pgp
Description: PGP signature


Re: Stop during upgrade of textproc/linux-expat

2009-04-02 Thread Chagin Dmitry
On Thu, Apr 02, 2009 at 06:26:23PM +0200, Ewald Jenisch wrote:
 On Thu, Apr 02, 2009 at 08:04:38PM +0400, Chagin Dmitry wrote:
  
  linux_expat depends on running linuxulator
  (USE_LDCONFIG=YES in Makefile) so kldload linux :)
  
 
 Hi Dmitry,
 
 Thanks much for the hint! I tried kldload linux then restarting the
 build process and it went through :-)
 
 Something related but slightly off-topic: To load linux-emu
 (linuxolator) automatically - is having 'linux_load=YES' in
 /boot/loader.conf sufficient?
 

yes, man linux :)

-- 
Have fun!
chd


pgp0OrT4LPThS.pgp
Description: PGP signature


RE: Build/Install world via ssh

2009-04-02 Thread Simon Griffiths
 -Original Message-
 From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd-
 questi...@freebsd.org] On Behalf Of Bruce Cran
 Sent: 01 April 2009 23:12
 To: Simon Griffiths
 Cc: freebsd-questions@freebsd.org
 Subject: Re: Build/Install world via ssh
 
 On Wed, 1 Apr 2009 22:38:47 +0100
 Simon Griffiths simon.griffi...@tenenbaum.co.uk wrote:

[snip]

Thank you all for your advice.  The build went through fine and the box came
back lovely even though I did have a backup plan if that didn't work.

Great stuff, saves a 300 mile journey :-)

Simon

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


problem redirecting with ipnat

2009-04-02 Thread David Banning
I am attempting to route local and external traffic to a second machine
on port 85 to apache. 

The redirection works for external traffic coming in but I cannot seem
to redirect local traffic to the secondary machine.

Here are my ipnat rules;

rdr fxp0 0/0 port 85 - 192.168.1.10 port 85
rdr tun0 0/0 port 85 - 192.168.1.10 port 85
rdr dc0 0/0 port 80 - 192.168.1.1 port 8180

where 192.168.1.1 is the local machine and 192.168.1.10 is the 
secondary machine

the third ipnat entry simply redirects all outgoing browser traffic to 
squid/dansguardian

Here is my ifconfig;

[r...@3s1 /etc]# ifconfig
fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=8VLAN_MTU
inet 209.161.205.12 netmask 0xff00 broadcast 209.161.205.255
ether 00:0d:60:09:fc:6e
media: Ethernet autoselect (10baseT/UTP)
status: active
dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=8VLAN_MTU
inet 192.168.1.1 netmask 0xff00 broadcast 192.168.1.255
ether 00:20:78:0e:13:d6
media: Ethernet autoselect (10baseT/UTP)
status: active
plip0: flags=108810POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT mtu 1500
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 
inet6 ::1 prefixlen 128 
inet 127.0.0.1 netmask 0xff00 
tun0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1492
inet 209.161.205.12 -- 207.136.64.7 netmask 0x 
Opened by PID 356
[r...@3s1 /etc]#

Externally, simply http://3s1.com:85

works but will not work locally - wondering if anyone could provide direction
here.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: problem redirecting with ipnat

2009-04-02 Thread Roger Olofsson



David Banning skrev:

I am attempting to route local and external traffic to a second machine
on port 85 to apache. 


The redirection works for external traffic coming in but I cannot seem
to redirect local traffic to the secondary machine.

Here are my ipnat rules;

rdr fxp0 0/0 port 85 - 192.168.1.10 port 85
rdr tun0 0/0 port 85 - 192.168.1.10 port 85
rdr dc0 0/0 port 80 - 192.168.1.1 port 8180

where 192.168.1.1 is the local machine and 192.168.1.10 is the 
secondary machine


the third ipnat entry simply redirects all outgoing browser traffic to 
squid/dansguardian


Here is my ifconfig;

[r...@3s1 /etc]# ifconfig
fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=8VLAN_MTU
inet 209.161.205.12 netmask 0xff00 broadcast 209.161.205.255
ether 00:0d:60:09:fc:6e
media: Ethernet autoselect (10baseT/UTP)
status: active
dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=8VLAN_MTU
inet 192.168.1.1 netmask 0xff00 broadcast 192.168.1.255
ether 00:20:78:0e:13:d6
media: Ethernet autoselect (10baseT/UTP)
status: active
plip0: flags=108810POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT mtu 1500
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 
inet6 ::1 prefixlen 128 
inet 127.0.0.1 netmask 0xff00 
tun0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1492
inet 209.161.205.12 -- 207.136.64.7 netmask 0x 
Opened by PID 356

[r...@3s1 /etc]#

Externally, simply http://3s1.com:85

works but will not work locally - wondering if anyone could provide direction
here.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org




Hello David,

It looks like you are trying to port forward using a NAT tool(?) May I 
suggest that you use a port forward tool instead? Try portfwd-0.29 from 
ports.


/R

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


kernal dump on zfs file system panic?!? panic: ffs_blkfree freeing free block

2009-04-02 Thread John H. Nyhuis
	About every 5-10 minutes, my freshly installed freeBSD 7.1 stable box 
hangs and begains a kernal dump.  I get the following error message:


dev = twed0s1d, block = 1, fs = /archive
panic: ffs_blkfree freeing free block
cpuid = 1
Uptime = 11m23s
Physical memory: 1011 MB
Dumping 67 MB: 52 36 20 4
Dump complete

/archive has no files in it as it is an empty filesystem.  In fact, it's a 
seperate spindle from the OS disk.


fsck does not resolve the problem:

# umount /archive
# fsck -t zfs /dev/twed0s1d

and I've verified that the disks involved don't have bad blocks.  Since the 
machine becomes non-responsive after the dump, I can't access logs or anything 
to see what happened.


Machine is using ASUS P2B-D mainboard (dual 500Mhz PIII Intel), with a 3ware 
7000-2 raid card.  The 3ware has 2 Maxtor 200GB drives in a RAID-1; these would 
normally be mounted as /archive.  The volume is empty (no files).


Google shows lot's of people having similar problems with zfs, but no solutions 
that I have found yet.


Anyone have any ideas?

Thanks,

John H. Nyhuis
IT Manager
Dept. of Pediatrics
HS RR541C, Box 356320
University of Washington
Desk: (206)-685-3884
jnyh...@u.washington.edu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: kernal dump on zfs file system panic?!? panic: ffs_blkfree freeing free block

2009-04-02 Thread Wojciech Puchar


dev = twed0s1d, block = 1, fs = /archive
panic: ffs_blkfree freeing free block


looks like ffs related panic, not ZFS.

something is completely wrong here.


cpuid = 1
Uptime = 11m23s
Physical memory: 1011 MB
Dumping 67 MB: 52 36 20 4
Dump complete

/archive has no files in it as it is an empty filesystem.  In fact, it's a 
seperate spindle from the OS disk.


fsck does not resolve the problem:

# umount /archive
# fsck -t zfs /dev/twed0s1d

and I've verified that the disks involved don't have bad blocks.  Since the 
machine becomes non-responsive after the dump, I can't access logs or 
anything to see what happened.


Machine is using ASUS P2B-D mainboard (dual 500Mhz PIII Intel), with a 3ware 
7000-2 raid card.  The 3ware has 2 Maxtor 200GB drives in a RAID-1; these 
would normally be mounted as /archive.  The volume is empty (no files).


Google shows lot's of people having similar problems with zfs, but no 
solutions that I have found yet.


Anyone have any ideas?

Thanks,

John H. Nyhuis
IT Manager
Dept. of Pediatrics
HS RR541C, Box 356320
University of Washington
Desk: (206)-685-3884
jnyh...@u.washington.edu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: problem redirecting with ipnat

2009-04-02 Thread David Banning

Thank Roger - I am not sure what the difference is between those two.
You solutions worked. Thanks -



David Banning skrev:

I am attempting to route local and external traffic to a second machine
on port 85 to apache.
The redirection works for external traffic coming in but I cannot seem
to redirect local traffic to the secondary machine.

Here are my ipnat rules;

rdr fxp0 0/0 port 85 - 192.168.1.10 port 85
rdr tun0 0/0 port 85 - 192.168.1.10 port 85
rdr dc0 0/0 port 80 - 192.168.1.1 port 8180

where 192.168.1.1 is the local machine and 192.168.1.10 is the 
secondary machine


the third ipnat entry simply redirects all outgoing browser traffic 
to squid/dansguardian


Here is my ifconfig;

[r...@3s1 /etc]# ifconfig
fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=8VLAN_MTU
inet 209.161.205.12 netmask 0xff00 broadcast 209.161.205.255
ether 00:0d:60:09:fc:6e
media: Ethernet autoselect (10baseT/UTP)
status: active
dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=8VLAN_MTU
inet 192.168.1.1 netmask 0xff00 broadcast 192.168.1.255
ether 00:20:78:0e:13:d6
media: Ethernet autoselect (10baseT/UTP)
status: active
plip0: flags=108810POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT mtu 1500
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 inet6 ::1 
prefixlen 128 inet 127.0.0.1 netmask 0xff00 tun0: 
flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1492
inet 209.161.205.12 -- 207.136.64.7 netmask 0x 
Opened by PID 356

[r...@3s1 /etc]#

Externally, simply http://3s1.com:85

works but will not work locally - wondering if anyone could provide 
direction

here.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
freebsd-questions-unsubscr...@freebsd.org





Hello David,

It looks like you are trying to port forward using a NAT tool(?) May I 
suggest that you use a port forward tool instead? Try portfwd-0.29 
from ports.


/R


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Ports options not coming up

2009-04-02 Thread Da Rock
On Thu, 2009-04-02 at 14:15 +0200, rasz wrote:
 Da Rock wrote:
  I'd to debug this, but I'm not even sure where to start. On just one
  system since some recent updates I have no options screens coming up for
  ports. I get a blue screen and then nothing; stdout says options
  unchanged.
 
  It is a vm if that means anything?
 
  Cheers
 
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
 

 if i understand you correctly, and this is the same thing, i have had 
 this happen when
 building ports in a terminal emulator of sorts, particularly  the xfce4 
 one (and maybe kde4 konsole)
 when the actual window is too small (e.g. in number of lines). i would 
 see the blue screen for a bit and then
 options unchanged. it doesn't happen if at all if i keep the window a 
 good size, but i don't know about VM.

You know, I followed the vm track but I never even considered the
terminal! Duh! :)

Cheers

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Sponsor Connect Luau at HPTFE!

2009-04-02 Thread Connect Headquarters
HPTFE Sponsorship Opportunity

Gain Visibility and Connect with Clients and Prospects 

How: Sponsor the Connect Luau by the Pool at the Fabulous Four Seasons Hotel at 
HPTFE 2009[http://www.hptechnologyforum.com/exhibitchicklet]

When: Tuesday, 16 June 2009, 7:00p – 9:00p

Who: 400+ Connect Members

What: Food, Beverage, Entertainment and Giveaways

Sponsor Packages:

Silver $5,000
Logo on invitation 
Logo on 2-touch reminders
Logo guiding/entryway signage

Gold $10,000 (Limit 6)
Logo on invitation 
Logo on 2-touch reminders
Logo guiding/entryway signage
Logo poolside signage
Chicklet ad on myCommunity for June 2009
Corporate listing on branded giveaway

Platinum $25,000 (Limit 3 – 2 remaining) 
Logo on invitation 
Logo on 2-touch reminders
Logo guiding/entryway signage
Logo poolside signage
Banner ad on myCommunity for June-July 2009
Prominent logo on branded giveaway (T-Shirt)
Sponsor recognition in June Connect Now Newsletter

If you have any questions or would like to purchase a sponsorship, please 
download the Sponsorship 
Contract[http://www.connect-community.org/Portals/0/Events/SponsorshipContractConnectLuau2009.pdf]
 or contact Kristi Browder, Connect Executive Director at 512-289-1235 or 
kbrow...@connect-community.org

Note: HPTFE 2009 exhibitors receive a 10% discount on any of the above 
sponsorships.



If you would like to unsubscribe / opt-out of all future Connect e-mail 
correspondence, please send an e-mail with opt-out in the subject line to 
i...@connect-community.org.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


How to Update my Freebsd packages kernel and Core

2009-04-02 Thread Panos
Hello I'm new to Freebsd and I would like to know if there is anything 
like apt-get for upgrating everything in my Freebsd. If  not Could you 
tell me how I can do it.
Some of my packages are from ports and some using the sysinstall and I 
install them from the cd.

I use Freebsd 7.1

thank you very much.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: How to Update my Freebsd packages kernel and Core

2009-04-02 Thread Glen Barber
2009/4/2 Panos panos...@gmail.com:
 Hello I'm new to Freebsd and I would like to know if there is anything like
 apt-get for upgrating everything in my Freebsd. If  not Could you tell me
 how I can do it.

There is no 'apt' in FreeBSD.

Documentation on how to manage your installed software is located here:

   http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ports.html

 Some of my packages are from ports and some using the sysinstall and I
 install them from the cd.
 I use Freebsd 7.1


-- 
Glen Barber
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: How to Update my Freebsd packages kernel and Core

2009-04-02 Thread Sean Cavanaugh
for the base OS (kernel and core are same thing, unlike gnu/linux), use 
freebsd-update. If you compiled your own kernel, then it will skip updating 
the kernel only, in which case just csup /usr/src and recompile anyway


for ports, there are many methods. Read the ports section in the handbook. 
personally I use prt-mgmt/portupgrade.


-Sean

--
From: Panos panos...@gmail.com
Sent: Thursday, April 02, 2009 6:30 PM
To: freebsd-questions@freebsd.org
Subject: How to Update my Freebsd packages kernel and Core

Hello I'm new to Freebsd and I would like to know if there is anything 
like apt-get for upgrating everything in my Freebsd. If  not Could you 
tell me how I can do it.
Some of my packages are from ports and some using the sysinstall and I 
install them from the cd.

I use Freebsd 7.1

thank you very much.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
freebsd-questions-unsubscr...@freebsd.org



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: How to Update my Freebsd packages kernel and Core

2009-04-02 Thread Glenn Sieb
Panos said the following on 4/2/09 6:30 PM:
 Hello I'm new to Freebsd and I would like to know if there is anything
 like apt-get for upgrating everything in my Freebsd. If  not Could you
 tell me how I can do it.
 Some of my packages are from ports and some using the sysinstall and I
 install them from the cd.
 I use Freebsd 7.1


Hi Panos--you want to look into /usr/ports/ports-mgmt/portupgrade

That should take care of your needs. :)

Best,
--Glenn

-- 
...destination is merely a byproduct of the journey
   --Eric Hansen

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: How to Update my Freebsd packages kernel and Core

2009-04-02 Thread Josh Paetzel

On Apr 2, 2009, at 5:59 PM, Glen Barber glen.j.bar...@gmail.com wrote:


2009/4/2 Panos panos...@gmail.com:
Hello I'm new to Freebsd and I would like to know if there is  
anything like
apt-get for upgrating everything in my Freebsd. If  not Could you  
tell me

how I can do it.


There is no 'apt' in FreeBSD.

Documentation on how to manage your installed software is located  
here:


  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ports.html

Some of my packages are from ports and some using the sysinstall  
and I

install them from the cd.
I use Freebsd 7.1



--
Glen Barber


One of the distinctions that freebsd makes that linux does not is  
between the base system and 3rd party software. Hence you will find no  
unified tool that upgrades everything like apt does for debian. The  
link above explains how to deal with 3rd party software. For the  
kernel and base system check out freebsd-update.


Thanks,

Josh Paetzel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: py24-gobject won't deinstall

2009-04-02 Thread Richard DeLaurell
Oliver Fromme wrote:

PS:  To check the consistency of your package database,
 you can use this small script (requires Python):

 http://www.secnetix.de/olli/scripts/pkg_check_dependencies

 If you get no output from pkg_check_dependencies -q,
 then your dependencies are good.


Oliver,

I've run your script with the '-q' switch and here is the result:

++
#python pkg_check_dependencies -q

Traceback (most recent call last):
  File pkg_check_dependencies, line 55, in module
if line.startswith(@pkgdep)
IndexError: list index out of range
++

Portmaster list reports that python-2.5.2 is installed
(/usr/local/bin/python).

What have I missed?

It is not an emergency so do not feel pressed to answer quickly.

Thank you for your help and have a good day--

Richard
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: keep-state and divert

2009-04-02 Thread Victor Sudakov
Victor Sudakov wrote:
 If we consider a simple example below, how would you replace the 600th
 rule for a stateful one?
 
 00100 divert 8668 ip from any to table(1) out via rl0
 00200 deny log logamount 100 ip from 10.0.0.0/8 to any out via rl0
 00300 deny log logamount 100 ip from 172.16.0.0/12 to any out via rl0
 00400 deny log logamount 100 ip from 192.168.0.0/16 to any out via rl0
 
 00500 divert 8668 ip from table(1) to any in via rl0
 00600 allow ip from table(1) to any in via rl0
 00700 deny log logamount 100 ip from any to 10.0.0.0/8 in via rl0
 00800 deny log logamount 100 ip from any to 172.16.0.0/12 in via rl0
 00900 deny log logamount 100 ip from any to 192.168.0.0/16 in via rl0
 
 65535 allow ip from any to any
 

It seems that the ruleset should be reordered and changed to the following:

00100 divert 8668 ip from table(1) to any in via rl0
00200 check-state
00300 deny log logamount 100 ip from any to 10.0.0.0/8 in via rl0
00300 deny log logamount 100 ip from any to 172.16.0.0/12 in via rl0
00300 deny log logamount 100 ip from any to 192.168.0.0/16 in via rl0

00400 skipto 500 ip from any to table(1) out via rl0 keep-state
00500 divert 8668 ip from any to table(1) out via rl0
00600 deny log logamount 100 ip from 10.0.0.0/8 to any out via rl0
00600 deny log logamount 100 ip from 172.16.0.0/12 to any out via rl0
00600 deny log logamount 100 ip from 192.168.0.0/16 to any out via rl0

65535 allow ip from any to any

It seems to work. However there is an obscure moment in it. When I
look at the dynamic rules being created, for each connection I see two
rules: one with the private source address and another with a NAT'ed
source address. Which means the outgoing packet traverses the 400th
rule twice.  I don't understand how this happens.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Recovering partitions from disk image?

2009-04-02 Thread snott

Hello FreeBSD gurus,

I recently had the pleasure of trying to recover a failed RAID1 array.  It
consisted of two 120GB disks in mirrored configuration.  Both drives have a
ton of bad sectors, so bad that the 3ware RAID card stopped recognizing that
there was a mirror at all.  Having no other options that I could think of, I
pulled the drive with the one with the least read errors, directly connected
it to ATA bus and used GNU ddrescue to make a disk image with only about 7
read errors.

Neither fdisk nor bsdlabel can read the disk image.  I wonder if there's
some funny data at the beginning of the hard drive the 3ware card used for
RAID configuration?  If this is true, is there a way to search for the
beginning of the real fdisk data and lop it off to make a possibly valid
disk image?

Here's how it was laid out before the crash:

Filesystem  Size   Used  Avail Capacity  Mounted on
/dev/twed0s1a   4.9G   2.8G   1.7G62%/
/dev/twed0s1e   9.8G   5.0G   4.0G56%/var
/dev/twed0s1f   9.8G   952M   8.1G10%/usr/home
/dev/twed0s2e88G15G65G19%/mnt

TestDisk can find all the old partitions, but I can't figure out what if
anything it can actually do with them.  It only finds them if I do a quick
search and specify Non partitioned media as the partition type:

-
Disk disk0.img - 123 GB / 115 GiB - CHS 15018 255 63  

 Partition  StartEndSize in sectors  

   P UFS  0  15 31   652 196  7   10485760 [/]   
   P UFS652 196  8  1958  47 24   20971520 [/var]   
   P UFS   1958  47 25  3263 153 41   20971520 [/usr/home]  
   P UFS   3394  14 31 15017  14 27  186723492 [/mnt] 

Write isn't available because the partition table type None has been
selected.
-

It doesn't look like scan_ffs works on files.  
Can I use the testdisk output to extract some portion of the disk image and
mount it somehow?

Any suggestions on how to get to the data is much appreciated.  I've learned
the hard way that RAID1 is no substitution for a backup plan :/

Thanks,
Skye

-- 
View this message in context: 
http://www.nabble.com/Recovering-partitions-from-disk-image--tp22862006p22862006.html
Sent from the freebsd-questions mailing list archive at Nabble.com.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: DVD playback issue: FAILURE - non aligned DMA transfer attempted

2009-04-02 Thread Novembre
On Thu, Apr 2, 2009 at 7:24 PM, Sergio de Almeida Lenzi 
lenzi.ser...@gmail.com wrote:

  Em



 I've played another DVD which, I'm 100% sure, had copy protection in the
 same drive without any errors, but that was before upgrading my machine from
 7.0-RELEASE to RELENG_7 on Feb 19, 2009. This DVD, however, does not play
 and gives that error. Also, I have already turned the hw.ata.atapi_dma to
 0, but that didn't help either. I'm a bit skeptical about it being the
 copy protection of the disc.

 Any more ideas?

  Hummm.
 may be the dvd drive is with some firmware problem

 After I changed (switched) to dvd drive using sata interface, I
 have never seen that problem again

 I have seen this too, some dvd plays good, some not...
 but with SATA, all plays good


 Sergio



This DVD drive is using the SATA interface. I'm using the ATAPICAM layer to
emulate it as a SCSI drive though. I don't know what's happening here.

Thanks for your suggestions though...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org