localization management tool which works in FreeBSD

2009-08-26 Thread Matthias Apitz

Hello,

Is ther some localization management tool which runs in FreeBSD and
supports

- connectors to CVS or SVN (i.e. pulls/stores the source and translated
  files there)
- extracts text pieces for translations from various file formats, like
  XML, HTML, PO, ASCII, ... presents these extracted strings for
  translation and writes the target file with the translated strings;
- keeps somehow track of already translated text pieces and offers the
  translation nextime the (modified) source file is opened again;
- does some checks, for example if the length of the translated string
  will fit, some kind of aspell/ispell checks, ...
- export/import of extracted strings and its translation to give a way
  the work of translation to translators;
- GUI

Thanks in advance

matthias
-- 
Matthias Apitz
t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211
e g...@unixarea.de - w http://www.unixarea.de/
People who hate Microsoft Windows use Linux but people who love UNIX use 
FreeBSD.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what www perl script is running?

2009-08-26 Thread Colin Brace

Steve Bertrand said the following on 08/26/2009 01:33 AM:


In this case, OP, look for:

- directories named as such:
-- ...
-- . ..
-- . .
-- etc, particularly under:
-- /var/tmp
-- /tmp
-- or anywhere else the [gu]id of the webserver could possibly write to
   


Thanks for the comments, Steve. This has indeed been the case here: 
there was a bunch of files installed by user 'www' (the webserver) in a 
directory called ., in /tmp ; the script itself was in /tmp


Someone has suggested to me that the vulnerability might have been in 
the RoundCube webmail package which I had installed:


http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0413

Cross-site scripting (XSS) vulnerability in RoundCube Webmail 
(roundcubemail) 0.2 stable allows remote attackers to inject arbitrary 
web script or HTML via the background attribute embedded in an HTML 
e-mail message.


--
  Colin Brace
  Amsterdam
  http://www.lim.nl


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what www perl script is running?

2009-08-26 Thread Colin Brace



Colin Brace wrote:
 
 
 CyberLeo Kitsana wrote:
 
 Are these files available in a tarball someplace public, for those of us
 who enjoy performing autopsies on virii? 
 
 Sure thing: http://silenceisdefeat.com/~cbrace/www_badstuff.gz
 
 this tarball contains tmpfile which is the misbehaving script as well as
 the contents of a directory called ., which has a bunch of source code
 and so on. As indicated earlier, this stuff was installed by user 'www'.
 
 It should be unpacked in an empty directory.

Oops, I missed six more files written by www to /tmp. Here they are:

http://silenceisdefeat.com/~cbrace/www_badstuff-2.gz



-
  Colin Brace
  Amsterdam
  http://lim.nl
-- 
View this message in context: 
http://www.nabble.com/what-www-perl-script-is-running--tp25112050p25149271.html
Sent from the freebsd-questions mailing list archive at Nabble.com.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what www perl script is running?

2009-08-26 Thread Colin Brace



Colin Brace wrote:
 
 
 CyberLeo Kitsana wrote:
 
 Are these files available in a tarball someplace public, for those of us
 who enjoy performing autopsies on virii? 
 

ah, another directory found in /tmp with files written by www called
.bash/ Contents here:

http://silenceisdefeat.com/~cbrace/www_badstuff-3.gz

Sorry about the multiple tarballs. 

-
  Colin Brace
  Amsterdam
  http://lim.nl
-- 
View this message in context: 
http://www.nabble.com/what-www-perl-script-is-running--tp25112050p25149559.html
Sent from the freebsd-questions mailing list archive at Nabble.com.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Removing firefox-2.0.0.20_9,1 from system

2009-08-26 Thread Jerry
I recently installed openoffice.org-3.1.0_2 on my system. For some
reason it brought in firefox-2 also. I all ready had Firefox-3.5
installed. I do not want or need two different installations of Firefox
on my system.

Firefox-2 appears to be required by these programs.

/var/db/pkg $ pkg_info -R firefox-2.0.0.20_9,1
Information for firefox-2.0.0.20_9,1:

Required by:
gegl-0.0.22_6
gimp-2.6.6,2
gimp-app-2.6.6_3,1
gimp-gutenprint-5.1.7_2
gimp-help-2.4.2_1
librsvg2-2.26.0_1

I am not sure why these programs require Firefox-2 since Firefox-3.5
was installed prior to their installation.

Is there any way I can safely remove Firefox-2 and force the use of
Firefox-3.5 instead without breaking anything?

-- 
Jerry
ges...@yahoo.com

Harp not on that string.

William Shakespeare, Henry VI
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: KDE3 -- KDE4

2009-08-26 Thread Michiel Overtoom
On Friday 07 August 2009 16:12:03 Andrew Gould wrote:

 Is there an increase in usability/benefit to match the increase in
 resource consumption?

As I see it, KDE4 fell in the Vista trap.  I tried KDE4 and was showered with 
eye candy effects, some of which couldn't even be disabled.  Also, quite a 
few features I used in KDE3 were missing from KDE4.

I never understood the need for transparent windows.  If you're working in a 
window you want to concentrate on its contents, not on stuff that's happening 
beneath it.  It breaks the flow.  I think it's indicative of the 
ritalin-generation of teens who can't concentrate for two minutes and need to 
constantly tweet about nonsense.  Geez, I'm getting old ;-)

In my time, we didn't have color screens.  We had machine code on the bare 
metal, and a USER PORT to hook up your hardware.

Greetings, 

-- 
The ability of the OSS process to collect and harness 
the collective IQ of thousands of individuals across 
the Internet is simply amazing. - Vinod Valloppillil 
http://www.catb.org/~esr/halloween/halloween4.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Firefox 3.5...

2009-08-26 Thread Peter Harrison
I've Firefox 3.0.11,1 on my 7.2-release system at the moment. Anyone offer some 
advice on moving up to 3.5?

Is it as simple as pkg_delete'ing 3.0 and then installing 3.5?

Thanks for any thoughts.


Peter Harrison.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what www perl script is running?

2009-08-26 Thread Bill Moran
Adam Vande More amvandem...@gmail.com wrote:

 On Tue, Aug 25, 2009 at 2:43 PM, Bill Moran wmo...@potentialtech.comwrote:
 
  In response to Adam Vande More amvandem...@gmail.com:
 
   On Tue, Aug 25, 2009 at 12:06 PM, Bill Moran wmo...@potentialtech.com
  wrote:
  
In response to Adam Vande More amvandem...@gmail.com:
   
 On Tue, Aug 25, 2009 at 11:05 AM, Bill Moran 
  wmo...@potentialtech.com
wrote:

  In response to Paul Schmehl pschmehl_li...@tx.rr.com:
 
   --On Tuesday, August 25, 2009 08:30:17 -0500 Colin Brace 
  c...@lim.nl
  wrote:
  
Bill Moran wrote:
   
You can add an ipfw rule to prevent the script from calling
  home,
  which
will effectively render it neutered until you can track down
  and
  actually
_fix_ the problem.
   
Mike Bristow above wrote: The script is talking to
  94.102.51.57 on
  port
7000. OK, so I how do I know what port the script is using for
  outgoing
traffic on MY box? 7000 is the remote host port, right?
   
FWIW, here are my core PF lines:
   
pass out quick on $ext_if proto 41
pass out quick on gif0 inet6
pass in quick on gif0 inet6 proto icmp6
block in log
   
That is to say: nothing is allowed in unless explicitly allowed
Everything allowed out.
(plus some ipv6 stuff I was testing with a tunnel)
   
  
   The problem with blocking outbound ports is that it breaks things
  in
odd
  ways.
   For example, your mail server listens on port 25 (and possibly
  465 as
  well) but
   it communicates with connecting clients on whatever ethereal port
  the
  client
   decided to use.  If the port the client selects happens to be in
  a
range
  that
   you are blocking, communication will be impossible and the client
will
  report
   that your mail server is non-responsive.
 
  You're doing it wrong.  Block on the destination port _only_ and
  you
don't
  care about the ephemeral ports.

 What ports would you block then when you're trying to run a
  webserver?
   
My point (which is presented in examples below) is that you block
everything
and only allow what is needed (usually only dns and ntp, possibly smtp
  if
the web server needs to send mail)
   
That single statement above was directed specifically at the comment
  about
it being impossible to predict (and thus block) ephemeral source ports.
 He's
right about that, and that's why filtering on the destination port is
  the
more common practice.
   
Of course, that caused me to create an email that seems to contradict
itself, if you don't notice that it's two answers to two different
comments.
  
   My point was that it's unfeasible to block by destination point.  You can
   only block by destination port if it's a known quantity, and the
  destination
   port is ephemeral in the question I posed(which what the OP had an issue
   with).
 
  Please read the entire email before you respond.  My last example below
  demonstrates how to do what you call unfeasible.
 
   It's much easier to block outgoing ports for services you *don't*
want to
   offer, but, if the service isn't running anyway, blocking the
  port is
   non-productive.
 
  You're obviously misunderstanding me completely.  Your not blocking
  incoming
  connections, your preventing outgoing ones, which means there _is_
  no
  service running on your local machine.
 
  For example, a server that is _only_ web (with SSH for admin) could
have
  a ruleset like:
 
  pass in quick on $ext_if proto tcp from any to me port
  {25,587,465,22}
keep
  state
  pass out quick on $ext_if proto tcp from me to any port {25} keep
  state
  pass out quick on $ext_if proto upd from me to any port {53,123}
  keep
state
  block all
 
  (note that's only an example, there may be some fine points I'm
missing)
 
  One thing that had not yet been mentioned when I posted my earlier
comment,
  is that this system is a combination firewall/web server.  That
  makes
the
  rules more complicated, but the setup is still possible:
 
  pass in quick on $ext_if proto tcp from any to me port {80} keep
  state
  pass out quick on $ext_if proto upd from me to any port {53,123}
  keep
state
  pass out quick on $ext_if from $internal_network to any all keep
  state
  block all
 
  Which allows limited outgoing traffic originating from the box
  itself,
  but allows unlimited outgoing traffic from systems on
$internal_network.
 
  I've done this with great success.  In fact, I had a fun time where
  a
  client in question was infected with viruses out the wazoo, but the
  viruses never spread off their 

Can partitions span more than one drive?

2009-08-26 Thread John Almberg
Now that I've got my rsnapshot backup server working beautifully,  
backing up several servers to a central backup server (I like this a  
lot), I have a problem...


I built my backup server from a machine I had lying around. It has  
two 140G hard drives. I dedicated one drive to a /backup partition.  
Unfortunately, that is now running at 88% capacity... i.e., only 16G  
left...


Now that I know this approach is going to work, I'm going to run out  
and buy a big drive.


Question: is it possible to just expand my existing /backup partition  
to encompass both the current drive and the new drive? I'm guessing  
not, since Chapter 8 in Absolute FreeBSD says that a partition is  
part of a slice, which is part of a physical drive, but maybe some  
bright person has come up with an app that overcomes that limitation.


Thanks: John
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: KDE3 -- KDE4

2009-08-26 Thread Mike Jeays


On August 26, 2009 06:50:00 am Michiel Overtoom wrote:
 On Friday 07 August 2009 16:12:03 Andrew Gould wrote:
  Is there an increase in usability/benefit to match the increase in
  resource consumption?

 As I see it, KDE4 fell in the Vista trap.  I tried KDE4 and was showered
 with eye candy effects, some of which couldn't even be disabled.  Also,
 quite a few features I used in KDE3 were missing from KDE4.

 I never understood the need for transparent windows.  If you're working in
 a window you want to concentrate on its contents, not on stuff that's
 happening beneath it.  It breaks the flow.  I think it's indicative of the
 ritalin-generation of teens who can't concentrate for two minutes and need
 to constantly tweet about nonsense.  Geez, I'm getting old ;-)

 In my time, we didn't have color screens.  We had machine code on the bare
 metal, and a USER PORT to hook up your hardware.

 Greetings,

The need for semi-transparent windows is a big question in my mind too. I 
suspect it has been implemented because it is possible, and initially looks 
'cool'. But it seems to be a distraction from actually doing useful work. Much 
better to turn it off, IMHO.

-- 
Mike Jeays
http://www.jeays.ca
http://www.rotarycpmm.ca
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RSEC installation, anyone tried?

2009-08-26 Thread Jeronimo Calvo
Hi folks, did anyone tried to install rsec on freebsd 7.2?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Can partitions span more than one drive?

2009-08-26 Thread Greg Larkin
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

John Almberg wrote:
 Now that I've got my rsnapshot backup server working beautifully,
 backing up several servers to a central backup server (I like this a
 lot), I have a problem...
 
 I built my backup server from a machine I had lying around. It has two
 140G hard drives. I dedicated one drive to a /backup partition.
 Unfortunately, that is now running at 88% capacity... i.e., only 16G
 left...
 
 Now that I know this approach is going to work, I'm going to run out and
 buy a big drive.
 
 Question: is it possible to just expand my existing /backup partition to
 encompass both the current drive and the new drive? I'm guessing not,
 since Chapter 8 in Absolute FreeBSD says that a partition is part of a
 slice, which is part of a physical drive, but maybe some bright person
 has come up with an app that overcomes that limitation.
 
 Thanks: John

Hi John,

I haven't done much with any of these solutions yet, but I think each
one can do what you want, with various pros/cons:

Vinum: http://www.freebsd.org/doc/en/books/handbook/vinum-vinum.html

RAID0 striping:
http://www.freebsdwiki.net/index.php/RAID0,_Software,_How_to_setup

ZFS: http://www.freebsd.org/doc/en/books/handbook/filesystems-zfs.html


Hope that helps get you started,
Greg
- --
Greg Larkin

http://www.FreeBSD.org/   - The Power To Serve
http://www.sourcehosting.net/ - Ready. Set. Code.
http://twitter.com/sourcehosting/ - Follow me, follow you
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFKlTNy0sRouByUApARAuIfAKCSSxrcZxS7t4U1dZZOdZ6Taoxs8gCgrLrC
BFLKz7VNBHEYTpoTQ25jnm8=
=pM8t
-END PGP SIGNATURE-

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what www perl script is running?

2009-08-26 Thread Bill Moran
In response to Adam Vande More amvandem...@gmail.com:

 On Wed, Aug 26, 2009 at 7:11 AM, Bill Moran wmo...@potentialtech.comwrote:
 
  Adam Vande More amvandem...@gmail.com wrote:
  
   On Tue, Aug 25, 2009 at 2:43 PM, Bill Moran wmo...@potentialtech.com
  wrote:
  
In response to Adam Vande More amvandem...@gmail.com:
   
 On Tue, Aug 25, 2009 at 12:06 PM, Bill Moran 
  wmo...@potentialtech.com
wrote:

  In response to Adam Vande More amvandem...@gmail.com:
 
   On Tue, Aug 25, 2009 at 11:05 AM, Bill Moran 
wmo...@potentialtech.com
  wrote:
  
In response to Paul Schmehl pschmehl_li...@tx.rr.com:
   
 --On Tuesday, August 25, 2009 08:30:17 -0500 Colin Brace 
c...@lim.nl
wrote:

  Bill Moran wrote:
 
  You can add an ipfw rule to prevent the script from
  calling
home,
which
  will effectively render it neutered until you can track
  down
and
actually
  _fix_ the problem.
 
  Mike Bristow above wrote: The script is talking to
94.102.51.57 on
port
  7000. OK, so I how do I know what port the script is using
  for
outgoing
  traffic on MY box? 7000 is the remote host port, right?
 
  FWIW, here are my core PF lines:
 
  pass out quick on $ext_if proto 41
  pass out quick on gif0 inet6
  pass in quick on gif0 inet6 proto icmp6
  block in log
 
  That is to say: nothing is allowed in unless explicitly
  allowed
  Everything allowed out.
  (plus some ipv6 stuff I was testing with a tunnel)
 

 The problem with blocking outbound ports is that it breaks
  things
in
  odd
ways.
 For example, your mail server listens on port 25 (and
  possibly
465 as
well) but
 it communicates with connecting clients on whatever ethereal
  port
the
client
 decided to use.  If the port the client selects happens to be
  in
a
  range
that
 you are blocking, communication will be impossible and the
  client
  will
report
 that your mail server is non-responsive.
   
You're doing it wrong.  Block on the destination port _only_
  and
you
  don't
care about the ephemeral ports.
  
   What ports would you block then when you're trying to run a
webserver?
 
  My point (which is presented in examples below) is that you block
  everything
  and only allow what is needed (usually only dns and ntp, possibly
  smtp
if
  the web server needs to send mail)
 
  That single statement above was directed specifically at the
  comment
about
  it being impossible to predict (and thus block) ephemeral source
  ports.
   He's
  right about that, and that's why filtering on the destination port
  is
the
  more common practice.
 
  Of course, that caused me to create an email that seems to
  contradict
  itself, if you don't notice that it's two answers to two different
  comments.

 My point was that it's unfeasible to block by destination point.  You
  can
 only block by destination port if it's a known quantity, and the
destination
 port is ephemeral in the question I posed(which what the OP had an
  issue
 with).
   
Please read the entire email before you respond.  My last example below
demonstrates how to do what you call unfeasible.
   
 It's much easier to block outgoing ports for services you
  *don't*
  want to
 offer, but, if the service isn't running anyway, blocking the
port is
 non-productive.
   
You're obviously misunderstanding me completely.  Your not
  blocking
incoming
connections, your preventing outgoing ones, which means there
  _is_
no
service running on your local machine.
   
For example, a server that is _only_ web (with SSH for admin)
  could
  have
a ruleset like:
   
pass in quick on $ext_if proto tcp from any to me port
{25,587,465,22}
  keep
state
pass out quick on $ext_if proto tcp from me to any port {25}
  keep
state
pass out quick on $ext_if proto upd from me to any port
  {53,123}
keep
  state
block all
   
(note that's only an example, there may be some fine points I'm
  missing)
   
One thing that had not yet been mentioned when I posted my
  earlier
  comment,
is that this system is a combination firewall/web server.  That
makes
  the
rules more complicated, but the setup is still possible:
   
pass in quick on $ext_if proto tcp from any to me port {80}
  keep
state
pass out quick on $ext_if proto upd from me to any port
  {53,123}

Re: what www perl script is running?

2009-08-26 Thread Adam Vande More
On Wed, Aug 26, 2009 at 7:11 AM, Bill Moran wmo...@potentialtech.comwrote:

 Adam Vande More amvandem...@gmail.com wrote:
 
  On Tue, Aug 25, 2009 at 2:43 PM, Bill Moran wmo...@potentialtech.com
 wrote:
 
   In response to Adam Vande More amvandem...@gmail.com:
  
On Tue, Aug 25, 2009 at 12:06 PM, Bill Moran 
 wmo...@potentialtech.com
   wrote:
   
 In response to Adam Vande More amvandem...@gmail.com:

  On Tue, Aug 25, 2009 at 11:05 AM, Bill Moran 
   wmo...@potentialtech.com
 wrote:
 
   In response to Paul Schmehl pschmehl_li...@tx.rr.com:
  
--On Tuesday, August 25, 2009 08:30:17 -0500 Colin Brace 
   c...@lim.nl
   wrote:
   
 Bill Moran wrote:

 You can add an ipfw rule to prevent the script from
 calling
   home,
   which
 will effectively render it neutered until you can track
 down
   and
   actually
 _fix_ the problem.

 Mike Bristow above wrote: The script is talking to
   94.102.51.57 on
   port
 7000. OK, so I how do I know what port the script is using
 for
   outgoing
 traffic on MY box? 7000 is the remote host port, right?

 FWIW, here are my core PF lines:

 pass out quick on $ext_if proto 41
 pass out quick on gif0 inet6
 pass in quick on gif0 inet6 proto icmp6
 block in log

 That is to say: nothing is allowed in unless explicitly
 allowed
 Everything allowed out.
 (plus some ipv6 stuff I was testing with a tunnel)

   
The problem with blocking outbound ports is that it breaks
 things
   in
 odd
   ways.
For example, your mail server listens on port 25 (and
 possibly
   465 as
   well) but
it communicates with connecting clients on whatever ethereal
 port
   the
   client
decided to use.  If the port the client selects happens to be
 in
   a
 range
   that
you are blocking, communication will be impossible and the
 client
 will
   report
that your mail server is non-responsive.
  
   You're doing it wrong.  Block on the destination port _only_
 and
   you
 don't
   care about the ephemeral ports.
 
  What ports would you block then when you're trying to run a
   webserver?

 My point (which is presented in examples below) is that you block
 everything
 and only allow what is needed (usually only dns and ntp, possibly
 smtp
   if
 the web server needs to send mail)

 That single statement above was directed specifically at the
 comment
   about
 it being impossible to predict (and thus block) ephemeral source
 ports.
  He's
 right about that, and that's why filtering on the destination port
 is
   the
 more common practice.

 Of course, that caused me to create an email that seems to
 contradict
 itself, if you don't notice that it's two answers to two different
 comments.
   
My point was that it's unfeasible to block by destination point.  You
 can
only block by destination port if it's a known quantity, and the
   destination
port is ephemeral in the question I posed(which what the OP had an
 issue
with).
  
   Please read the entire email before you respond.  My last example below
   demonstrates how to do what you call unfeasible.
  
It's much easier to block outgoing ports for services you
 *don't*
 want to
offer, but, if the service isn't running anyway, blocking the
   port is
non-productive.
  
   You're obviously misunderstanding me completely.  Your not
 blocking
   incoming
   connections, your preventing outgoing ones, which means there
 _is_
   no
   service running on your local machine.
  
   For example, a server that is _only_ web (with SSH for admin)
 could
 have
   a ruleset like:
  
   pass in quick on $ext_if proto tcp from any to me port
   {25,587,465,22}
 keep
   state
   pass out quick on $ext_if proto tcp from me to any port {25}
 keep
   state
   pass out quick on $ext_if proto upd from me to any port
 {53,123}
   keep
 state
   block all
  
   (note that's only an example, there may be some fine points I'm
 missing)
  
   One thing that had not yet been mentioned when I posted my
 earlier
 comment,
   is that this system is a combination firewall/web server.  That
   makes
 the
   rules more complicated, but the setup is still possible:
  
   pass in quick on $ext_if proto tcp from any to me port {80}
 keep
   state
   pass out quick on $ext_if proto upd from me to any port
 {53,123}
   keep
 state
   pass out quick on $ext_if from $internal_network to any all
 keep
   state
   block all
  
   Which allows limited outgoing traffic originating from the box
   itself,
   but allows 

Firefox 3.5 on FBSD

2009-08-26 Thread Andrew Falanga
Hi,

Well, I installed firefox 3.5 on my box at home but it wasn't working
correctly.  Every time I'd start it I'd get, Bad system call (core dump),
or something similar.  Does anyone here run firefox 3.5 on their box?  If
so, what is the trick?

Andy

-- 
A: Because it messes up the order in which people normally read text.
Q: Why is it such a bad thing?
A: Top-posting.
Q: What is the most annoying thing on usenet and in e-mail?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Serial console trouble: loader and login works, but no kernel messages

2009-08-26 Thread Thomas Backman

On Aug 23, 2009, at 14:18, Thomas Backman wrote:

First off: Not subscribed to this list, please make sure to Cc me if  
you don't reply directly. :)


Anyway, I finally got my null modem cable, and plugged in in between  
a machine running 8.0-BETA2 and one running WinXP using Hyperterminal.


My settings:

/boot/loader.conf:
boot_multicons=YES
boot_serial=YES
comconsole_speed=115200
console=comconsole,vidconsole

/etc/ttys:
# Serial terminals
# The 'dialup' keyword identifies dialin lines to login, fingerd etc.
ttyu0   /usr/libexec/getty std.115200 vt100   on secure

/boot.config (which is read properly):
-Dh -S115200

Anything wrong in the above?
Hyperterminal is set to 115200 bps, 8 bits, no parity, 1 stop bit,  
and no flow control (if that's the correct translation to English).


On the serial console, I go from the screen with the FreeBSD logo,  
with single-user options etc. (which works fine), and then nothing,  
until a login tty pops up (which also works fine). The main, if not  
only, reason I want a serial console is to be able to use it for  
single user mode, DDB, and so on.
All kernel messages, and all rc messages are seen only on the  
graphics card; the serial console receives nothing but the / 
boot.config: -Dh ..., the logo screen, and then the login screen,  
during startup and *nothing* at all during shutdown. Also, I'm able  
to login and use the system both via the serial console and via the  
graphics card/keyboard... Is this supposed to be? I'm not  
complaining, I just got the impression it was one or the other.


Any advice on how to get the kernel/rc messages etc. to the serial  
console (only or as well)?


Regards,
Thomas
OK, so to rule out any installation-related problems, I booted from a  
bootonly install CD (a May ~5th snapshot of 8.0-CURRENT), with boot - 
h -S115200. Same thing: bootloader stuff on the serial console,  
kernel messages on the local computer only - and very slowly, at that,  
I'd say about one line a second. You could very easily see the  
characters being written to the screen.


Am I the only one having these problems? It'd suck to buy a rather  
expensive (probably because they're pretty rare these days, plus I had  
to order from abroad) null modem cable and have it be completely  
useless.


Regards,
Thomas
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what www perl script is running?

2009-08-26 Thread Morgan Wesström
Jonathan McKeown wrote:
 On Wednesday 26 August 2009 15:44:41 Adam Vande More wrote:
 
 [450 lines including multiple signatures and twelve levels of quoting, all to 
 say:]
 
 Specifically what am I confused on?  Or are you just going to continue
 with the personal attacks?  You've offered no technical rebuttal, simply
 insults.
 
 Please, take it to email - or at least learn to trim (ideally both).

No, please keep it on the list. I really, really want to see what
concensus you reach. :-)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Can partitions span more than one drive?

2009-08-26 Thread Nikos Vassiliadis

RW wrote:

On Wed, 26 Aug 2009 08:45:47 -0400
John Almberg jalmb...@identry.com wrote:



Question: is it possible to just expand my existing /backup
partition to encompass both the current drive and the new drive? I'm
guessing not, since Chapter 8 in Absolute FreeBSD says that a
partition is part of a slice, 


You can join 2 partitions into 1 with gconcat. OTOH that would wipe any
existing data as you would need to put a new filesystem on the combined
partition.


No, you can always use growfs to expand the filesystem.
But of course, the usual warnings apply, read carefully the
growfs manual...

Nikos
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firefox 3.5 on FBSD

2009-08-26 Thread Erik Trulsson
On Wed, Aug 26, 2009 at 08:21:57AM -0600, Andrew Falanga wrote:
 Hi,
 
 Well, I installed firefox 3.5 on my box at home but it wasn't working
 correctly.  Every time I'd start it I'd get, Bad system call (core dump),
 or something similar.  Does anyone here run firefox 3.5 on their box?  If
 so, what is the trick?

kldload sem

See the 20090628 entry in /usr/ports/UPDATING




-- 
Insert your favourite quote here.
Erik Trulsson
ertr1...@student.uu.se
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Removing firefox-2.0.0.20_9,1 from system

2009-08-26 Thread George Liaskos
Add WITH_GECKO=libxul to your /etc/make.conf and run portmaster -o to
replace firefox with firefox35.

http://www.freebsd.org/gnome/docs/faq226.html#q1
http://www.freebsd.org/cgi/man.cgi?query=portmastersektion=8apropos=0manpath=FreeBSD+7.2-RELEASE+and+Ports

On Wed, Aug 26, 2009 at 1:30 PM, Jerryges...@yahoo.com wrote:
 I recently installed openoffice.org-3.1.0_2 on my system. For some
 reason it brought in firefox-2 also. I all ready had Firefox-3.5
 installed. I do not want or need two different installations of Firefox
 on my system.

 Firefox-2 appears to be required by these programs.

 /var/db/pkg $ pkg_info -R firefox-2.0.0.20_9,1
 Information for firefox-2.0.0.20_9,1:

 Required by:
 gegl-0.0.22_6
 gimp-2.6.6,2
 gimp-app-2.6.6_3,1
 gimp-gutenprint-5.1.7_2
 gimp-help-2.4.2_1
 librsvg2-2.26.0_1

 I am not sure why these programs require Firefox-2 since Firefox-3.5
 was installed prior to their installation.

 Is there any way I can safely remove Firefox-2 and force the use of
 Firefox-3.5 instead without breaking anything?

 --
 Jerry
 ges...@yahoo.com

 Harp not on that string.

        William Shakespeare, Henry VI
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firefox 3.5...

2009-08-26 Thread Jerry
On Wed, 26 Aug 2009 11:32:09 +0100
Peter Harrison peter.piggy...@virgin.net wrote:

 I've Firefox 3.0.11,1 on my 7.2-release system at the moment. Anyone
 offer some advice on moving up to 3.5?
 
 Is it as simple as pkg_delete'ing 3.0 and then installing 3.5?

I used: pkg_delete -dfv Firefox 3.0.11,1

It worked fine. Then build and install the new version. Depending on
how you manage your ports, you might need to run something like:
pkgdb -Ffuv after installing the new port.


-- 
Jerry
ges...@yahoo.com

Parts that positively cannot be assembled in improper order will be.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firefox 3.5...

2009-08-26 Thread Wayne Sierke
On Wed, 2009-08-26 at 11:32 +0100, Peter Harrison wrote:
 I've Firefox 3.0.11,1 on my 7.2-release system at the moment. Anyone
 offer some advice on moving up to 3.5?
 
 Is it as simple as pkg_delete'ing 3.0 and then installing 3.5?
 
 Thanks for any thoughts.

Should be, or if you use portupgrade:

http://lists.freebsd.org/pipermail/freebsd-questions/2009-July/202568.html


Wayne


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what www perl script is running?

2009-08-26 Thread Adam Vande More
On Wed, Aug 26, 2009 at 8:30 AM, Bill Moran wmo...@potentialtech.comwrote:

 In response to Adam Vande More amvandem...@gmail.com:

  On Wed, Aug 26, 2009 at 7:11 AM, Bill Moran wmo...@potentialtech.com
 wrote:
 
   Adam Vande More amvandem...@gmail.com wrote:
   
On Tue, Aug 25, 2009 at 2:43 PM, Bill Moran 
 wmo...@potentialtech.com
   wrote:
   
 In response to Adam Vande More amvandem...@gmail.com:

  On Tue, Aug 25, 2009 at 12:06 PM, Bill Moran 
   wmo...@potentialtech.com
 wrote:
 
   In response to Adam Vande More amvandem...@gmail.com:
  
On Tue, Aug 25, 2009 at 11:05 AM, Bill Moran 
 wmo...@potentialtech.com
   wrote:
   
 In response to Paul Schmehl pschmehl_li...@tx.rr.com:

  --On Tuesday, August 25, 2009 08:30:17 -0500 Colin Brace
 
 c...@lim.nl
 wrote:
 
   Bill Moran wrote:
  
   You can add an ipfw rule to prevent the script from
   calling
 home,
 which
   will effectively render it neutered until you can
 track
   down
 and
 actually
   _fix_ the problem.
  
   Mike Bristow above wrote: The script is talking to
 94.102.51.57 on
 port
   7000. OK, so I how do I know what port the script is
 using
   for
 outgoing
   traffic on MY box? 7000 is the remote host port, right?
  
   FWIW, here are my core PF lines:
  
   pass out quick on $ext_if proto 41
   pass out quick on gif0 inet6
   pass in quick on gif0 inet6 proto icmp6
   block in log
  
   That is to say: nothing is allowed in unless explicitly
   allowed
   Everything allowed out.
   (plus some ipv6 stuff I was testing with a tunnel)
  
 
  The problem with blocking outbound ports is that it
 breaks
   things
 in
   odd
 ways.
  For example, your mail server listens on port 25 (and
   possibly
 465 as
 well) but
  it communicates with connecting clients on whatever
 ethereal
   port
 the
 client
  decided to use.  If the port the client selects happens
 to be
   in
 a
   range
 that
  you are blocking, communication will be impossible and
 the
   client
   will
 report
  that your mail server is non-responsive.

 You're doing it wrong.  Block on the destination port
 _only_
   and
 you
   don't
 care about the ephemeral ports.
   
What ports would you block then when you're trying to run a
 webserver?
  
   My point (which is presented in examples below) is that you
 block
   everything
   and only allow what is needed (usually only dns and ntp,
 possibly
   smtp
 if
   the web server needs to send mail)
  
   That single statement above was directed specifically at the
   comment
 about
   it being impossible to predict (and thus block) ephemeral
 source
   ports.
He's
   right about that, and that's why filtering on the destination
 port
   is
 the
   more common practice.
  
   Of course, that caused me to create an email that seems to
   contradict
   itself, if you don't notice that it's two answers to two
 different
   comments.
 
  My point was that it's unfeasible to block by destination point.
  You
   can
  only block by destination port if it's a known quantity, and the
 destination
  port is ephemeral in the question I posed(which what the OP had
 an
   issue
  with).

 Please read the entire email before you respond.  My last example
 below
 demonstrates how to do what you call unfeasible.

  It's much easier to block outgoing ports for services you
   *don't*
   want to
  offer, but, if the service isn't running anyway, blocking
 the
 port is
  non-productive.

 You're obviously misunderstanding me completely.  Your not
   blocking
 incoming
 connections, your preventing outgoing ones, which means
 there
   _is_
 no
 service running on your local machine.

 For example, a server that is _only_ web (with SSH for
 admin)
   could
   have
 a ruleset like:

 pass in quick on $ext_if proto tcp from any to me port
 {25,587,465,22}
   keep
 state
 pass out quick on $ext_if proto tcp from me to any port
 {25}
   keep
 state
 pass out quick on $ext_if proto upd from me to any port
   {53,123}
 keep
   state
 block all

 (note that's only an example, there may be some fine points
 I'm
   missing)

 One thing that had not yet been mentioned when I posted my
   earlier
   comment,
 is that this system is a combination firewall/web 

Re: Can partitions span more than one drive?

2009-08-26 Thread RW
On Wed, 26 Aug 2009 08:45:47 -0400
John Almberg jalmb...@identry.com wrote:


 Question: is it possible to just expand my existing /backup
 partition to encompass both the current drive and the new drive? I'm
 guessing not, since Chapter 8 in Absolute FreeBSD says that a
 partition is part of a slice, 

You can join 2 partitions into 1 with gconcat. OTOH that would wipe any
existing data as you would need to put a new filesystem on the combined
partition.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: what www perl script is running?

2009-08-26 Thread Jonathan McKeown
On Wednesday 26 August 2009 15:44:41 Adam Vande More wrote:

[450 lines including multiple signatures and twelve levels of quoting, all to 
say:]

 Specifically what am I confused on?  Or are you just going to continue
 with the personal attacks?  You've offered no technical rebuttal, simply
 insults.

Please, take it to email - or at least learn to trim (ideally both).
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Removing firefox-2.0.0.20_9,1 from system

2009-08-26 Thread Lowell Gilbert
Jerry ges...@yahoo.com writes:

 I recently installed openoffice.org-3.1.0_2 on my system. For some
 reason it brought in firefox-2 also. I all ready had Firefox-3.5
 installed. I do not want or need two different installations of Firefox
 on my system.

 Firefox-2 appears to be required by these programs.

 /var/db/pkg $ pkg_info -R firefox-2.0.0.20_9,1
 Information for firefox-2.0.0.20_9,1:

 Required by:
 gegl-0.0.22_6
 gimp-2.6.6,2
 gimp-app-2.6.6_3,1
 gimp-gutenprint-5.1.7_2
 gimp-help-2.4.2_1
 librsvg2-2.26.0_1

 I am not sure why these programs require Firefox-2 since Firefox-3.5
 was installed prior to their installation.

 Is there any way I can safely remove Firefox-2 and force the use of
 Firefox-3.5 instead without breaking anything?

It's not using the firefox2 executable, but for gecko support.  You will
need to rebuild each port from which you want to remove the dependency.

Some time soon, the Makefile support will change to using www/libxul
instead of its current system.  If you want to make an equivalent change
before then, you can put WITH_GECKO=libxul in your make.conf and rebuild
the dependent ports.

See bsd.gecko.mk for more information, or just keep an eye on it to see
when the changes come into the tree.
-- 
Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


question about security updates

2009-08-26 Thread Jason

I was wondering in the case of openssl:

http://security.freebsd.org/advisories/FreeBSD-SA-09:08.openssl.asc

Corrected:  2009-04-22 14:07:14 UTC (RELENG_7, 7.2-PRERELEASE)
2009-04-22 14:07:14 UTC (RELENG_7_2, 7.2-RC2)
2009-04-22 14:07:14 UTC (RELENG_7_1, 7.1-RELEASE-p5)
2009-04-22 14:07:14 UTC (RELENG_7_0, 7.0-RELEASE-p12)
2009-04-22 14:07:14 UTC (RELENG_6, 6.4-STABLE)
2009-04-22 14:07:14 UTC (RELENG_6_4, 6.4-RELEASE-p4)
2009-04-22 14:07:14 UTC (RELENG_6_3, 6.3-RELEASE-p10)
CVE Name:   CVE-2009-0590


I see that in release 7_2, that this was corrected. Does this mean that
if I were to download the 7.2 iso, that this patch would already be applied
to this release?

To me, it seems that anything that isn't *-RELEASE-p? would be applied to
the distributed iso, but I could be wrong.

Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread cpghost
On Mon, Aug 24, 2009 at 02:51:41PM -0600, Tim Judd wrote:
  Buy spinrite, no matter what.
 
 It's OS/FS independent.  it works on the bits stored on the magnetic
 platters, NOT on a filesystem.  TiVo, Linux, BSD and Mac OSX drives
 are treated the same.  Bits on a magnetic platter.  It's recovery
 stems from the randomization and movement of the head to the sector in
 question that allows it to salvage any bits it can (for example, other
 recovery will abandon 512bytes if 1 bit cannot be read.  spinrite will
 recover 512bytes-1bit to a hard drive's spare sector once spinrite
 says i'm done working with this sector.)  It leads to a very
 successful rate.

(Disclaimer: I'm not familiar with spinrite.)

512bytes-1bit may be read back, but you can't be sure that those are
the correct bytes! IIRC, sectors are usually protected by some kind of
ECC. Simply ignoring the ECC and reading raw magnetic data will all
too often result in corrupt sectors.

Of course, if you have out-of-band error correction or at least error
detection mechanisms (like .PAR or md5/sha1 checksums), raw magnetic
recovery is better than nothing, if you're desperate.

-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Serial console trouble: loader and login works, but no kernel messages

2009-08-26 Thread Thomas Backman

On Aug 26, 2009, at 18:04, Danny Braniss wrote:


you need to set
hint.uart.0.flags=0x10

danny
I already tried that (in /boot/loader.conf); it shows up in dmesg (and  
didn't before), but still no luck.


Regards/thanks,
Thomas
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firefox 3.5...

2009-08-26 Thread ill...@gmail.com
2009/8/26 Wayne Sierke w...@au.dyndns.ws:
 On Wed, 2009-08-26 at 11:32 +0100, Peter Harrison wrote:
 I've Firefox 3.0.11,1 on my 7.2-release system at the moment. Anyone
 offer some advice on moving up to 3.5?

 Is it as simple as pkg_delete'ing 3.0 and then installing 3.5?

 Thanks for any thoughts.

 Should be, or if you use portupgrade:

 http://lists.freebsd.org/pipermail/freebsd-questions/2009-July/202568.html


2nd'd.  portupgrade -o www/firefox35 firefox\* worked perfectly here.

-- 
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firefox 3.5...

2009-08-26 Thread David Southwell
 2009/8/26 Wayne Sierke w...@au.dyndns.ws:
  On Wed, 2009-08-26 at 11:32 +0100, Peter Harrison wrote:
  I've Firefox 3.0.11,1 on my 7.2-release system at the moment. Anyone
  offer some advice on moving up to 3.5?
 
  Is it as simple as pkg_delete'ing 3.0 and then installing 3.5?
 
  Thanks for any thoughts.
 
  Should be, or if you use portupgrade:
 
  http://lists.freebsd.org/pipermail/freebsd-questions/2009-July/202568.htm
 l

 2nd'd.  portupgrade -o www/firefox35 firefox\* worked perfectly here.
yep it compiles fine on amd64 freebsd 7.2 p3. However when launched it asks 
for you to accept a cookie from some strange site. I denied the cookie 
permission and firefox35 immediately shut down. 

david
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Serial console trouble: loader and login works, but no kernel messages

2009-08-26 Thread Mike Tancsa

At 12:10 PM 8/26/2009, Thomas Backman wrote:

danny

I already tried that (in /boot/loader.conf); it shows up in dmesg (and
didn't before), but still no luck.



Try adding it to  /boot/device.hints

eg

hint.uart.0.at=isa
hint.uart.0.port=0x3F8
hint.uart.0.flags=0x10
hint.uart.0.irq=4
hint.uart.1.at=isa
hint.uart.1.port=0x2F8

Or, if you want to use loader.conf, try

hw.uart.console=io:0x3f8

---Mike




Regards/thanks,
Thomas
___
freebsd-curr...@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to freebsd-current-unsubscr...@freebsd.org



Mike Tancsa,  tel +1 519 651 3400
Sentex Communications,m...@sentex.net
Providing Internet since 1994www.sentex.net
Cambridge, Ontario Canada www.sentex.net/mike

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread Jerry
On Wed, 26 Aug 2009 18:10:38 +0200
cpghost cpgh...@cordula.ws wrote:

 On Mon, Aug 24, 2009 at 02:51:41PM -0600, Tim Judd wrote:
   Buy spinrite, no matter what.
  
  It's OS/FS independent.  it works on the bits stored on the magnetic
  platters, NOT on a filesystem.  TiVo, Linux, BSD and Mac OSX drives
  are treated the same.  Bits on a magnetic platter.  It's recovery
  stems from the randomization and movement of the head to the sector
  in question that allows it to salvage any bits it can (for example,
  other recovery will abandon 512bytes if 1 bit cannot be read.
  spinrite will recover 512bytes-1bit to a hard drive's spare sector
  once spinrite says i'm done working with this sector.)  It leads
  to a very successful rate.
 
 (Disclaimer: I'm not familiar with spinrite.)
 
 512bytes-1bit may be read back, but you can't be sure that those are
 the correct bytes! IIRC, sectors are usually protected by some kind of
 ECC. Simply ignoring the ECC and reading raw magnetic data will all
 too often result in corrupt sectors.
 
 Of course, if you have out-of-band error correction or at least error
 detection mechanisms (like .PAR or md5/sha1 checksums), raw magnetic
 recovery is better than nothing, if you're desperate.
 
 -cpghost.

I have used Spinrite several times with excellent results. In fact, I
recently used it to recover a Laptop drive that had become unusable.

Spinrite tries to turn off ECC if possible. It is not the cheapest
product; however, it works better than anything else I have tried on
bonked discs. Use it on its highest recover level and it will recover
the drive; although it may take a while.

http://www.grc.com/intro.htm

-- 
Jerry
ges...@yahoo.com

Lord, defend me from my friends; I can account for my enemies.

Charles D'Hericault
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Serial console trouble: loader and login works, but no kernel messages

2009-08-26 Thread Thomas Backman

On Aug 26, 2009, at 18:16, Mike Tancsa wrote:

Or, if you want to use loader.conf, try

hw.uart.console=io:0x3f8

   ---Mike

That solved it! Thanks a lot!! :)

Regards,
Thomas
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: question about security updates

2009-08-26 Thread Jerry McAllister
On Wed, Aug 26, 2009 at 09:08:17AM -0700, Jason wrote:

 I was wondering in the case of openssl:
 
 http://security.freebsd.org/advisories/FreeBSD-SA-09:08.openssl.asc
 
 Corrected:  2009-04-22 14:07:14 UTC (RELENG_7, 7.2-PRERELEASE)
 2009-04-22 14:07:14 UTC (RELENG_7_2, 7.2-RC2)
 2009-04-22 14:07:14 UTC (RELENG_7_1, 7.1-RELEASE-p5)
 2009-04-22 14:07:14 UTC (RELENG_7_0, 7.0-RELEASE-p12)
 2009-04-22 14:07:14 UTC (RELENG_6, 6.4-STABLE)
 2009-04-22 14:07:14 UTC (RELENG_6_4, 6.4-RELEASE-p4)
 2009-04-22 14:07:14 UTC (RELENG_6_3, 6.3-RELEASE-p10)
 CVE Name:   CVE-2009-0590
 
 
 I see that in release 7_2, that this was corrected. Does this mean that
 if I were to download the 7.2 iso, that this patch would already be applied
 to this release?

It would not be in the ISO.   That does not get changed after it
is released.   But if you do an update (CSUP) to RELENG_7_2
eg put the line *default tag=RELENG_7_2  in your supfile, then
that will download the security updates.   You then need to do the
builds as it tells in the handbook.

Make sure you read and understand the procedures in the handbook.
It will all work just fine.
I have done it many times.
But, don't try to shortcut or make guesses about the procedures
in the handbook.  Then you will be off in space and it will leave
something screwed up.

That is why the handbook was written and one of the things
that makes FreeBSD superior.

jerry


 
 To me, it seems that anything that isn't *-RELEASE-p? would be applied to
 the distributed iso, but I could be wrong.
 
 Thanks,
 Jason
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread Roland Smith
On Tue, Aug 25, 2009 at 11:46:50PM -0600, Kelly Martin wrote:
 plugging the drive in and accessing it, I heard those tell-tale signs
 of hard drive failure: clicks and pops and other unusual noises, so I
 know that it has some damage. I hate those sounds, having heard them
 on failing drives too many times before.

If the drive is that bad, it is doubtfull if dd or ddrescue will be able to
get a good copy.

  My question: what kind of checks and/or repair tools should I run on
  the damaged drive after it's mounted?
 
  As others have mentioned, first make a copy (with the disk unmounted) of the
  partitions on that disk with dd, saving them to another drive. That way you
  can experiment with the data without further deterioration of the
  original.
 
 I ran dd and it took over 20 hours to complete. In fact it just
 finished this evening, after running all day. Lots of FAILURE errors
 were reported along the way, enough to fill two console screens or
 more. And of course to complicate things I didn't have a spare drive
 as an output device that was the *same size*, so I used a smaller
 drive thinking that it wouldn't matter since the source drive wasn't
 full anyway. I have no idea if data is scattered around on the FFS
 filesystem such that cloning a mostly empty, larger drive onto
 something smaller might lose data... I searched Google and couldn't
 find the answer, so I proceeded anyway. It doesn't matter now though,
 as I have a new drive now and another plan.

Using dd you make a block-for block copy; dd doesn't know about filesystems.
You could pipe the output from dd through a compression program like gzip or
bzip2. That could yield a smaller image. But you'd have to uncompress it in
order to use it.

Or you could try just copying the filesystems separately. E.g. copy from
ad4s1f instead of the whole ad4. That way you can split the data over several
files which you can store in different places.

 I'm going to try dd a second time, but this time I'll use ddrescue as
 some people suggested and I'll make the target drive an
 identical-sized 500 Gbyte drive, which I purchased today. I imagine it
 will take a long time to create this cloned disk... hopefully with
 fewer errors than dd gave me, though we'll see.
 
I hope you get a good copy, but it doesn't sound too likely. I'm not a hardware
expert, but if the disk is really breaking down in the hardware or
electronics, it is not inconceivable that even reading might further
deteriorate it. If you do not get a good 1:1 copy, you'll have extra errors in
your data! Depending on the options you give dd, it will either skip blocks
with errors or fill it with zeroes or other characters. See the piece of the
manual page of fsck_ufs that describes the 'noerror' conversion.

 Indeed some of the partitions seem to be beyond repair. In particular
 my /var partition is totally fubar'ed. When using fsck_ffs I got all
 sorts of errors when trying to repair the partition, things like:
 
 BAD SUPER BLOCK: VALUES IN SUPER BLOCK DISAGREE WITH THOSE IN FIRST ALTERNATE
 So I used the -b option suggested in the man page, fsck_ffs -y -b 160
 /dev/ad0s1d and it ran and fixed a few things, but then stopped with
 the following error:
 
 fsck_ufs: cannot alloc 4294967292 bytes for inoinfo

The meaning of errors is explained in Appendix A of Fsck - The UNIX File
System Check Program. You can find it this as
/usr/share/doc/smm/03.fsck/paper.ascii.gz

 MySQL databases are normally stored in /var/db/mysql. But then I
 remembered my MySQL server was actually running in a Jail environment,
 and therefore it was located at /usr/jails/myjail/var/db/mysql instead
 of /var/db/mysql, and therefore the jailed MySQL database was on a
 totally different partition. Lucky! And I was also very lucky that I
 could mount the large /usr partition in read-only mode and copy off
 the most critical files I needed, starting with the database. No
 errors on that part of the disk so far, at least with the few critical
 files I've copied over. Whew!

Congratulations!
 
 Until just a few minutes ago I didn't think there'd be a happy ending.
 But I've got the most critical data copied over now, the rest can
 wait. I'm going to go run dd a second time (well, ddrescue) now and
 then start work on the copy once it finishes, in a day or two.

Time to start thinking about a solid backup strategy as well. :-)


Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpOcLejmqquP.pgp
Description: PGP signature


Problem syncing Palm TX with jpilot on FreeBSD 8.0-BETA3

2009-08-26 Thread Tony McC
Hello,

I am running FreeBSD 8.0-BETA3 amd64 and am having trouble syncing my
Palm TX with jpilot.  This used to work with 7.2-STABLE amd64 and I
suspect I'm just not using the usb: connection correctly but have not
been able to find a solution by searching the archives.  

I am running a custom kernel with device uvisor commented out, though
the same problem occurs if I recompile with uvisor included. 

When I plug in the Palm TX I get the following at the end of dmesg
output:

ugen0.4: Palm, Inc. at usbus0
ugen0.4: Palm, Inc. at usbus0 (disconnected)

If I tell jpilot to sync with a Palm at usb: I get the following error
message:

dlp_OpenConduit() failed
Sync canceled
Exiting with status SYNC_ERROR_OPEN_CONDUIT
Finished.

I also have the following in my /etc/devfs.rules:

add path 'ugen*' unhide mode 0660 group operator

and I am a member of the operator group.

What should I set to get hotsync working?

Thanks all in anticipation,
Tony
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Can partitions span more than one drive?

2009-08-26 Thread Roland Smith
On Wed, Aug 26, 2009 at 08:45:47AM -0400, John Almberg wrote:
 Question: is it possible to just expand my existing /backup partition  
 to encompass both the current drive and the new drive? I'm guessing  
 not, since Chapter 8 in Absolute FreeBSD says that a partition is  
 part of a slice, which is part of a physical drive, but maybe some  
 bright person has come up with an app that overcomes that limitation.

You could use gconcat, but you'd have to partition, label and newfs this new
combined device which would render your current data unreadable. And on a
concatenated disk the risk of failure is increased. If one of the two drives
dies, you'll lose all data. If you want to combine disks, use some form of
RAID to protect yourself from a dying disk. :-)

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgppeqDozSi8w.pgp
Description: PGP signature


Re: Problem syncing Palm TX with jpilot on FreeBSD 8.0-BETA3

2009-08-26 Thread Roland Smith
On Wed, Aug 26, 2009 at 06:54:25PM +0100, Tony McC wrote:
 Hello,
 
 I am running FreeBSD 8.0-BETA3 amd64 and am having trouble syncing my
 Palm TX with jpilot.  This used to work with 7.2-STABLE amd64 and I
 suspect I'm just not using the usb: connection correctly but have not
 been able to find a solution by searching the archives.  
 
 I am running a custom kernel with device uvisor commented out, though
 the same problem occurs if I recompile with uvisor included. 
 
 When I plug in the Palm TX I get the following at the end of dmesg
 output:
 
   ugen0.4: Palm, Inc. at usbus0
   ugen0.4: Palm, Inc. at usbus0 (disconnected)
 
 If I tell jpilot to sync with a Palm at usb: I get the following error
 message:
 
   dlp_OpenConduit() failed
   Sync canceled
   Exiting with status SYNC_ERROR_OPEN_CONDUIT
   Finished.
 
 I also have the following in my /etc/devfs.rules:
 
   add path 'ugen*' unhide mode 0660 group operator
 
 and I am a member of the operator group.
 
 What should I set to get hotsync working?

I think you have to add the following

add path 'usb/*' mode 0660 group operator

It seems that the new libusb in 8.x doesn't use the ugen devices anymore, it
uses the new /dev/usb/* devices. Adding the above fixed gphoto2 for me on
8-BETA2.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp2jmRHxCqqj.pgp
Description: PGP signature


Re: Firefox 3.5...

2009-08-26 Thread Peter Harrison
Wednesday, 26 August 2009 at 23:54:12 +0930, Wayne Sierke said:
 On Wed, 2009-08-26 at 11:32 +0100, Peter Harrison wrote:
  I've Firefox 3.0.11,1 on my 7.2-release system at the moment. Anyone
  offer some advice on moving up to 3.5?
  
  Is it as simple as pkg_delete'ing 3.0 and then installing 3.5?
  
  Thanks for any thoughts.
 
 Should be, or if you use portupgrade:
 
 http://lists.freebsd.org/pipermail/freebsd-questions/2009-July/202568.html

OK thanks, I'll check that out.


Peter.


 
 
 Wayne
 
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firefox 3.5...

2009-08-26 Thread Peter Harrison
Wednesday, 26 August 2009 at 11:55:38 -0400, ill...@gmail.com said:
 2009/8/26 Wayne Sierke w...@au.dyndns.ws:
  On Wed, 2009-08-26 at 11:32 +0100, Peter Harrison wrote:
  I've Firefox 3.0.11,1 on my 7.2-release system at the moment. Anyone
  offer some advice on moving up to 3.5?
 
  Is it as simple as pkg_delete'ing 3.0 and then installing 3.5?
 
  Thanks for any thoughts.
 
  Should be, or if you use portupgrade:
 
  http://lists.freebsd.org/pipermail/freebsd-questions/2009-July/202568.html
 
 
 2nd'd.  portupgrade -o www/firefox35 firefox\* worked perfectly here.

Thanks for confirming.


Peter

.
 
 -- 
 --
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Firefox 3.5...

2009-08-26 Thread Peter Harrison
Wednesday, 26 August 2009 at 10:37:48 -0400, Jerry said:
 On Wed, 26 Aug 2009 11:32:09 +0100
 Peter Harrison peter.piggy...@virgin.net wrote:
 
  I've Firefox 3.0.11,1 on my 7.2-release system at the moment. Anyone
  offer some advice on moving up to 3.5?
  
  Is it as simple as pkg_delete'ing 3.0 and then installing 3.5?
 
 I used: pkg_delete -dfv Firefox 3.0.11,1
 
 It worked fine. Then build and install the new version. Depending on
 how you manage your ports, you might need to run something like:
 pkgdb -Ffuv after installing the new port.

Thanks Jerry. I tend to build ports on one machine and then install packages on 
another so I'll be doing it with packages, but thanks for the info.


Peter.

 
 
 -- 
 Jerry
 ges...@yahoo.com
 
 Parts that positively cannot be assembled in improper order will be.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread George Davidovich
On Wed, Aug 26, 2009 at 08:07:41PM +0200, Roland Smith wrote:
 On Tue, Aug 25, 2009 at 11:46:50PM -0600, Kelly Martin wrote:
  plugging the drive in and accessing it, I heard those tell-tale
  signs of hard drive failure: clicks and pops and other unusual
  noises, so I know that it has some damage. I hate those sounds,
  having heard them on failing drives too many times before.
 
 If the drive is that bad, it is doubtfull if dd or ddrescue will be
 able to get a good copy.

Probably true.  I hesitate to suggest this, but sticking the drive in a
freezer (preferrably in a ziplock bag) for a few hours or overnight
might help.  Stories from people claiming I swear it works! go back
years.  

To the exent it does work, it might give Kelly enough time to attempt
recovery.  If more time is required, he can try and find a creative
workaround for the 5 meter max length for USB cables.  Also,
experimenting with dry ice or acetone baths might prove to be
interesting, or at least educational. ;-)

-- 
George
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread Roland Smith
On Wed, Aug 26, 2009 at 12:13:48PM -0700, George Davidovich wrote:
snip
  If the drive is that bad, it is doubtfull if dd or ddrescue will be
  able to get a good copy.
 
 Probably true.  I hesitate to suggest this, but sticking the drive in a
 freezer (preferrably in a ziplock bag) for a few hours or overnight
 might help.  Stories from people claiming I swear it works! go back
 years.  

Interesting.

 To the exent it does work, it might give Kelly enough time to attempt
 recovery.  If more time is required, he can try and find a creative
 workaround for the 5 meter max length for USB cables.  Also,
 experimenting with dry ice or acetone baths might prove to be
 interesting, or at least educational. ;-)

Acetone and electronics are _not_ a good mix! Acetone is extremely
flammable. It evaporates easily and can form explosive mixtures in air over a
wide range of concentrations. Not to mention that it would degrade/destroy
printed circuit boards; acetone breaks down the resin that binds the glass
fibers in the laminates! Not as fast as n-Methyl-2-pyrrolidone, bus fast
enough.

I remember this special non-condictive 3M fluid that can be used to cool
electronics. A group of hackers dunked a complete PC minus the case and power
supply in this stuff. The fluid itself was cooled with liquid nitrogen. They
everclocked it something wicked. Not very practical though. :-)

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpXZwydo45KR.pgp
Description: PGP signature


Re: hard disk failure - now what?

2009-08-26 Thread Jerry McAllister
On Wed, Aug 26, 2009 at 10:23:47PM +0200, Roland Smith wrote:

 On Wed, Aug 26, 2009 at 12:13:48PM -0700, George Davidovich wrote:
 snip
   If the drive is that bad, it is doubtfull if dd or ddrescue will be
   able to get a good copy.
  
  Probably true.  I hesitate to suggest this, but sticking the drive in a
  freezer (preferrably in a ziplock bag) for a few hours or overnight
  might help.  Stories from people claiming I swear it works! go back
  years.  
 
 Interesting.
 
  To the exent it does work, it might give Kelly enough time to attempt
  recovery.  If more time is required, he can try and find a creative
  workaround for the 5 meter max length for USB cables.  Also,
  experimenting with dry ice or acetone baths might prove to be
  interesting, or at least educational. ;-)
 
 
 I remember this special non-condictive 3M fluid that can be used to cool
 electronics. A group of hackers dunked a complete PC minus the case and power
 supply in this stuff. The fluid itself was cooled with liquid nitrogen. They
 everclocked it something wicked. Not very practical though. :-)

A number of supercomputers from Cray and Control Data and maybe some
other places used this sort of thing on some experimental systems.  I
don't know if any ever were put in to commercial production.  They submerged
who boards in to it and then supercooled the fluid.   I don't remember
the chemical names.  

The fluid was a relative of Freon and held sufficient levels of oxygen 
to support lung breathers.  They used to have a tank with a live mouse 
submerged in it bouncing around and seeming to have no trouble not 
choking or drowning.  A variation of it was also researched as a blood 
substitute for some special medical needs.  I don't know how far that 
went.I know it is not all fantasy because I saw the live mouse.   
I didn't try the blood substitute.

jerry


 
 Roland
 -- 
 R.F.Smith   http://www.xs4all.nl/~rsmith/
 [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
 pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread Polytropon
On Wed, 26 Aug 2009 12:13:48 -0700, George Davidovich free...@optimis.net 
wrote:
 Probably true.  I hesitate to suggest this, but sticking the drive in a
 freezer (preferrably in a ziplock bag) for a few hours or overnight
 might help.  Stories from people claiming I swear it works! go back
 years.  

I heared a similar suggestion from a guy who tried to get the
protection code out of a car radio. :-)



 To the exent it does work, it might give Kelly enough time to attempt
 recovery.  If more time is required, he can try and find a creative
 workaround for the 5 meter max length for USB cables. 

5 meters? I always thought USB is specified for 2 meters only.
I've never seen a 5 meters long USB cable, by the way.





-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread George Davidovich
On Wed, Aug 26, 2009 at 04:45:40PM -0400, Jerry McAllister wrote:
 On Wed, Aug 26, 2009 at 10:23:47PM +0200, Roland Smith wrote:
 
  On Wed, Aug 26, 2009 at 12:13:48PM -0700, George Davidovich wrote: I
  remember this special non-condictive 3M fluid that can be used to
  cool electronics. A group of hackers dunked a complete PC minus the
  case and power supply in this stuff. The fluid itself was cooled
  with liquid nitrogen. They everclocked it something wicked. Not very
  practical though. :-)
 
 A number of supercomputers from Cray and Control Data and maybe some
 other places used this sort of thing on some experimental systems.  I
 don't know if any ever were put in to commercial production.  They
 submerged who boards in to it and then supercooled the fluid.   I
 don't remember the chemical names.  

I do, but have no idea why.

http://en.wikipedia.org/wiki/Perfluorohexane

 The fluid was a relative of Freon and held sufficient levels of oxygen 
 to support lung breathers.  They used to have a tank with a live mouse 
 submerged in it bouncing around and seeming to have no trouble not 
 choking or drowning.  

 A variation of it was also researched as a blood substitute for some
 special medical needs.  I don't know how far that went.I know it
 is not all fantasy because I saw the live mouse.   

I believe you.  I saw a similar scene in a movie, so I already knew it
had to be true.  Bonus points for anyone that can add to this thread's
collection of off-topic but semi-interesting trivia and name the movie. 

 I didn't try the blood substitute.

How do you save a drowning mouse?
Use mouse to mouse resuscitation.

Thanks, I'll be here all week.  Try the veal instead.

-- 
George
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread Scott Schappell

On Aug 26, 2009, at 14:14:51, George Davidovich wrote:

I believe you.  I saw a similar scene in a movie, so I already knew it
had to be true.  Bonus points for anyone that can add to this thread's
collection of off-topic but semi-interesting trivia and name the  
movie.


What is The Abyss for 1000, Alex?

:)

Scott
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: hard disk failure - now what?

2009-08-26 Thread Gary Gatten
I had a laptop years ago that started to die, but seemed to work OK when
first removed from a cold car.  After an hour or so it would die.  I
eventually put it in the freezer long enough to get what I needed off
the drive, so in some cases I would agree that cold is good!

-Original Message-
From: owner-freebsd-questi...@freebsd.org
[mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Polytropon
Sent: Wednesday, August 26, 2009 4:13 PM
To: George Davidovich
Cc: freebsd-questions@freebsd.org
Subject: Re: hard disk failure - now what?

On Wed, 26 Aug 2009 12:13:48 -0700, George Davidovich
free...@optimis.net wrote:
 Probably true.  I hesitate to suggest this, but sticking the drive in
a
 freezer (preferrably in a ziplock bag) for a few hours or overnight
 might help.  Stories from people claiming I swear it works! go back
 years.  

I heared a similar suggestion from a guy who tried to get the
protection code out of a car radio. :-)



 To the exent it does work, it might give Kelly enough time to attempt
 recovery.  If more time is required, he can try and find a creative
 workaround for the 5 meter max length for USB cables. 

5 meters? I always thought USB is specified for 2 meters only.
I've never seen a 5 meters long USB cable, by the way.





-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
freebsd-questions-unsubscr...@freebsd.org





font size=1
div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 
1.0pt 0in'
/div
This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system.
/font

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread Jerry McAllister
On Wed, Aug 26, 2009 at 02:14:51PM -0700, George Davidovich wrote:

  
  A number of supercomputers from Cray and Control Data and maybe some
  other places used this sort of thing on some experimental systems.  I
  don't know if any ever were put in to commercial production.  They
  submerged who boards in to it and then supercooled the fluid.   I
  don't remember the chemical names.  
 
 I do, but have no idea why.
 
 http://en.wikipedia.org/wiki/Perfluorohexane
 
  The fluid was a relative of Freon and held sufficient levels of oxygen 
  to support lung breathers.  They used to have a tank with a live mouse 
  submerged in it bouncing around and seeming to have no trouble not 
  choking or drowning.  
 
  A variation of it was also researched as a blood substitute for some
  special medical needs.  I don't know how far that went.I know it
  is not all fantasy because I saw the live mouse.   
 
 I believe you.  I saw a similar scene in a movie, so I already knew it
 had to be true.  Bonus points for anyone that can add to this thread's
 collection of off-topic but semi-interesting trivia and name the movie. 

I vaguely remember a movie with it in, but I saw it in
person at Cray headquarters back when.

 
  I didn't try the blood substitute.
 
   How do you save a drowning mouse?
   Use mouse to mouse resuscitation.
 
 Thanks, I'll be here all week.  Try the veal instead.

Only with the asparagus.

jerry

 
 -- 
 George
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread Polytropon
On Wed, 26 Aug 2009 16:30:59 -0500, Gary Gatten ggat...@waddell.com wrote:
 I had a laptop years ago that started to die, but seemed to work OK when
 first removed from a cold car.  After an hour or so it would die.  I
 eventually put it in the freezer long enough to get what I needed off
 the drive, so in some cases I would agree that cold is good!

That really sounds like a thermal problem (defective cooling)...



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: hard disk failure - now what?

2009-08-26 Thread Gary Gatten
Naw, I don't recall the POST error exactly, but from what I remember it
couldn't find a boot device.  Could've been the controller, but from
what I recall I swapped the drive (later) and all was good.  I really
don't recall though - I could've put the bad drive in a good laptop
and fixed it that way - really don't recall details.  Wish I could fix
some other problems by throwing them in a freezer!

-Original Message-
From: Polytropon [mailto:free...@edvax.de] 
Sent: Wednesday, August 26, 2009 5:54 PM
To: Gary Gatten
Cc: George Davidovich; freebsd-questions@freebsd.org
Subject: Re: hard disk failure - now what?

On Wed, 26 Aug 2009 16:30:59 -0500, Gary Gatten ggat...@waddell.com
wrote:
 I had a laptop years ago that started to die, but seemed to work OK
when
 first removed from a cold car.  After an hour or so it would die.  I
 eventually put it in the freezer long enough to get what I needed off
 the drive, so in some cases I would agree that cold is good!

That really sounds like a thermal problem (defective cooling)...



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...





font size=1
div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 
1.0pt 0in'
/div
This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system.
/font

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread Polytropon
On Wed, 26 Aug 2009 20:07:41 +0200, Roland Smith rsm...@xs4all.nl wrote:
 If the drive is that bad, it is doubtfull if dd or ddrescue will be able to
 get a good copy.

There's an additional problem: Let's assume dd creates an 1:1 copy
of the file system in its actual state - nobody guarantees that
this file system is fully intact, or can be repaired.

I have (!) the problem myself that I got the dd copy from the partition
holding my home directory just fine, but the file system itself is
damaged in such a state that fsck_ffs cannot repair it. At least, I
could get data off it - EXCEPT my home directory, sadly. But that's
not a (physical) disk problem, but a file system related one.



 Using dd you make a block-for block copy; dd doesn't know about filesystems.
 You could pipe the output from dd through a compression program like gzip or
 bzip2. That could yield a smaller image. But you'd have to uncompress it in
 order to use it.

I'm often told that hard disks are cheap today, and it's much
more relaxing operating on a plain image than on a compressed
one.




 Or you could try just copying the filesystems separately. E.g. copy from
 ad4s1f instead of the whole ad4. That way you can split the data over several
 files which you can store in different places.

That is the encouraged method. In case you have separated file
systems, it's a quite optimum case. For example, you don't need
to mess around with a 20 GB /tmp partition if you intendedly want
to lose its data.



 I hope you get a good copy, but it doesn't sound too likely. I'm not a 
 hardware
 expert, but if the disk is really breaking down in the hardware or
 electronics, it is not inconceivable that even reading might further
 deteriorate it.

In case of such hardware defects that causes growing problems,
it's wise to get the data (1st) as fast as possible and (2nd)
as accurate as possible - before the disk completely dies.

In such a case, it's still possible to recover data, e. g. to
mount the disks (the cylinders or platters) into another drive
unit. But if the disks are defective theirselves...


 If you do not get a good 1:1 copy, you'll have extra errors in
 your data! Depending on the options you give dd, it will either skip blocks
 with errors or fill it with zeroes or other characters. See the piece of the
 manual page of fsck_ufs that describes the 'noerror' conversion.

As far as I remember, dd_rescue or ddrescue can handle such
problems. In case of errors, they retry and keep reading.



  fsck_ufs: cannot alloc 4294967292 bytes for inoinfo
 
 The meaning of errors is explained in Appendix A of Fsck - The UNIX File
 System Check Program. You can find it this as
 /usr/share/doc/smm/03.fsck/paper.ascii.gz

When I tried to repair my defective partition in another system
with less RAM, I got a similar error:

cannot alloc 1073796864 bytes for inoinfo

The real (usual) error is

fsck_4.2bsd: bad inode number 306176 to nextinode

It seems that more RAM is needed to store information.



 Time to start thinking about a solid backup strategy as well. :-)

The correct time to do so is BEFORE you start storing data. :-)



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread Al Plant

Gary Gatten wrote:

I had a laptop years ago that started to die, but seemed to work OK when
first removed from a cold car.  After an hour or so it would die.  I
eventually put it in the freezer long enough to get what I needed off
the drive, so in some cases I would agree that cold is good!

-Original Message-
From: owner-freebsd-questi...@freebsd.org
[mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Polytropon
Sent: Wednesday, August 26, 2009 4:13 PM
To: George Davidovich
Cc: freebsd-questions@freebsd.org
Subject: Re: hard disk failure - now what?

On Wed, 26 Aug 2009 12:13:48 -0700, George Davidovich
free...@optimis.net wrote:

Probably true.  I hesitate to suggest this, but sticking the drive in

a

freezer (preferrably in a ziplock bag) for a few hours or overnight
might help.  Stories from people claiming I swear it works! go back
years.  


I heared a similar suggestion from a guy who tried to get the
protection code out of a car radio. :-)




To the exent it does work, it might give Kelly enough time to attempt
recovery.  If more time is required, he can try and find a creative
workaround for the 5 meter max length for USB cables. 


5 meters? I always thought USB is specified for 2 meters only.
I've never seen a 5 meters long USB cable, by the way.






Aloha,

Off Topic but very funny as well as interesting.

I have a usb cable that I bought  it on line and have used it for a 
small video camera that is 15 meters long and it works OK.



~Al Plant - Honolulu, Hawaii -  Phone:  808-284-2740
  + http://hawaiidakine.com + http://freebsdinfo.org +
  + http://aloha50.net   - Supporting - FreeBSD 6.* - 7.* - 8.* +
   email: n...@hdk5.net 
All that's really worth doing is what we do for others.- Lewis Carrol

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Information on Setting up a Jailed Webserver

2009-08-26 Thread APseudoUtopia
Hello,

I have a small site which runs PostgreSQL, Nginx, and PHP. I'm looking
into running nginx inside a jailed host on my server for security
reasons (eg, if there is a hole in a php script).

The website root is actually a working copy of my subversion
repository. I have svnserve running through OpenVPN. My plan would be
to have svnserve and OpenVPN running on the main system, and
nginx/php running inside a jail.

I was wondering if it would be somehow possible to run a command on
the main system that updates the svn working copy inside the jail for
nginx to serve. Would I need to do the svn up over tcp/ip from the
jail to the main system? Or can I somehow update it via
file://path/to/main/repo?  I've never used or setup a jail before, so
how everything works is a bit confusing to me. Right now, I use an svn
post-commit hook to update the www working copy.

Also, how memory-intensive is a jail? I'm willing to run postgresql in
another jail as well if it wouldn't be too memory-intensive.  And
possibly even an IRC server.

I'm running FreeBSD 7.2-RELEASE-p3.

Thank you for the suggestions, advise, and criticisms.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Information on Setting up a Jailed Webserver

2009-08-26 Thread Adam Vande More
On Wed, Aug 26, 2009 at 9:59 PM, APseudoUtopia apseudouto...@gmail.comwrote:

 Hello,

 I have a small site which runs PostgreSQL, Nginx, and PHP. I'm looking
 into running nginx inside a jailed host on my server for security
 reasons (eg, if there is a hole in a php script).

 The website root is actually a working copy of my subversion
 repository. I have svnserve running through OpenVPN. My plan would be
 to have svnserve and OpenVPN running on the main system, and
 nginx/php running inside a jail.

 I was wondering if it would be somehow possible to run a command on
 the main system that updates the svn working copy inside the jail for
 nginx to serve. Would I need to do the svn up over tcp/ip from the
 jail to the main system? Or can I somehow update it via
 file://path/to/main/repo?

The second method, it's quite easy.

 I've never used or setup a jail before, so
 how everything works is a bit confusing to me. Right now, I use an svn
 post-commit hook to update the www working copy.

 Also, how memory-intensive is a jail?

Very light when compared to other virtualization methods.  Usually, most
setups won't run things that require a lot disk io in virtual systems, but
jails are an exception.  Practically native speed, it's easier to understand
jails by thinking of them as an enhanced chroot enviro rather than a
virtualization instance.


 I'm willing to run postgresql in
 another jail as well if it wouldn't be too memory-intensive.  And
 possibly even an IRC server.


If you're going to run multiple jails, look at /usr/ports/sysutils/ezjail





 I'm running FreeBSD 7.2-RELEASE-p3.

Keep in mind jail needs to run same kernel as host.  If you upgrade base
system, do so with every jail as well.



 Thank you for the suggestions, advise, and criticisms.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org




-- 
Adam Vande More
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Information on Setting up a Jailed Webserver

2009-08-26 Thread Erich Dollansky
Hi,

On 27 August 2009 am 11:10:37 Adam Vande More wrote:
 On Wed, Aug 26, 2009 at 9:59 PM, APseudoUtopia 
apseudouto...@gmail.comwrote:
 
  Also, how memory-intensive is a jail?

 Very light when compared to other virtualization methods. 

jails share the kernel but not the world.

So, there will be only one kernel loaded but all libraries in use 
will be loaded individually by each jail when needed.

Jails need some more disk space as the world, all libraries needed 
and all applications needed are installed individually in each 
jail.

This can be minimised with proper planning of what runs it what 
jail.

Erich
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Information on Setting up a Jailed Webserver

2009-08-26 Thread Thomas Wahyudi
may be it will better to imagine that jail is a different computer, so 
if your jail need connection to main host it will connect like other 
computer that not running in jail.
you can do file:// from main host to jail but not from jail to main 
host. As far I know jail is a method so memory intensive is depend on 
your application.


regards
Thomas

APseudoUtopia wrote:

... [cut] 
  



I was wondering if it would be somehow possible to run a command on
the main system that updates the svn working copy inside the jail for
nginx to serve. Would I need to do the svn up over tcp/ip from the
jail to the main system? Or can I somehow update it via
file://path/to/main/repo?  I've never used or setup a jail before, so
how everything works is a bit confusing to me. Right now, I use an svn
post-commit hook to update the www working copy.

Also, how memory-intensive is a jail? I'm willing to run postgresql in
another jail as well if it wouldn't be too memory-intensive.  And
possibly even an IRC server.

I'm running FreeBSD 7.2-RELEASE-p3.

Thank you for the suggestions, advise, and criticisms.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: hard disk failure - now what?

2009-08-26 Thread Roland Smith
On Thu, Aug 27, 2009 at 01:03:58AM +0200, Polytropon wrote:
 On Wed, 26 Aug 2009 20:07:41 +0200, Roland Smith rsm...@xs4all.nl wrote:
  If the drive is that bad, it is doubtfull if dd or ddrescue will be able to
  get a good copy.
 
 There's an additional problem: Let's assume dd creates an 1:1 copy
 of the file system in its actual state - nobody guarantees that
 this file system is fully intact, or can be repaired.

Certainly. If filesystem data is missing, there is only so much that fsck_ufs
can do about it.
 
  Using dd you make a block-for block copy; dd doesn't know about filesystems.
  You could pipe the output from dd through a compression program like gzip or
  bzip2. That could yield a smaller image. But you'd have to uncompress it in
  order to use it.
 
 I'm often told that hard disks are cheap today, and it's much
 more relaxing operating on a plain image than on a compressed
 one.

Of course. But if you are operating under restricted scape constraints...

  I hope you get a good copy, but it doesn't sound too likely. I'm not a
  hardware expert, but if the disk is really breaking down in the hardware
  or electronics, it is not inconceivable that even reading might further
  deteriorate it.
 
 In case of such hardware defects that causes growing problems,
 it's wise to get the data (1st) as fast as possible and (2nd)
 as accurate as possible - before the disk completely dies.

And (3rd) in as few tries as possible!

 In such a case, it's still possible to recover data, e. g. to
 mount the disks (the cylinders or platters) into another drive
 unit. But if the disks are defective theirselves...

I wonder if that is still possible with current drives? My impression was
(from a paper that I can't locate ATM) that data densities are so high that it
is extremely difficult to read the data with different arm/head assembly then
the one it was written with.

  Time to start thinking about a solid backup strategy as well. :-)
 
 The correct time to do so is BEFORE you start storing data. :-)

Very true! But since the lack of backups was what got the OP in this mess in
the first place...

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpuFA9QD2zWP.pgp
Description: PGP signature


Can anyone reproduce this Samba problem?

2009-08-26 Thread John W
I have been trying to set up a 'dropbox' Samba share on FreeBSD, but
am not having luck.
I went back and forth on the Samba ML for a bit, and now I'm trying to
determine if I am seeing FreeBSD-specific bad behavior.

Could anyone out there see if they can reproduce my issue on FreeBSD?

I have a simple reproduction case (repeatable for me, at least), and
I'm curious if people see the same behavior on:
  - Samba 3.2 (broken for me)
  - Samba 3.3 (broken for me)
  - Samba 3.4 (It's not in ports, I haven't installed it manually yet,
but someone with Ubuntu has confirmed it works for them with this
version)

Here is tail of the old thread with gory details, if anyone's interested:
http://www.mail-archive.com/sa...@lists.samba.org/msg102359.html

So here is what I am trying to do, and how to reproduce my issue:

I want a dropbox share, with the sticky bit set, and with the file
owner to be inherited from the share directory, for new files/dirs.
Note: I do not want to use SUIDDIR if possible. I realize it is an
option, but am trying to avoid it for now.

So I have a directory like this:

drwxrwxr-t  20 nobody   myuser   512 Aug 19 20:07 myshare

And it is shared in smb.conf like this:

[myshare]
 comment = my share
 path = /path/to/myshare
 read only = no
 inherit permissions = yes
 inherit owner = yes

Now I want to create a directory in this share (from a Windows
machine, or smbclient).
What I would *expect* is this:

drwxrwxr-t   2 nobody   myuser   512 Aug 19 14:07 some_new_dir

Notice that the sticky bit is set, and the user is set to 'nobody'
which will ensure that no users, including the original creator, can
alter this directory once created.
And in fact, this is what happens when Jeremy Allison tried it on
Ubuntu 8.10 with Samba 3.4 (see thread mentioned earlier).

HOWEVER, on both my FreeBSD boxes with either Samba 3.2 or 3.3, I
instead get this:

drwxrwxr-t   2 myuser  myuser512 Aug 19 14:07 some_new_dir

Notice the owner is 'myuser' instead of 'nobody'.
Thus, the user 'myuser' can now rename the directory (for instance),
which is not acceptable.
It seems as though 'inherit owner' is just being ignored. I don't know why.

Interestingly, if I turn off 'inherit permissions', then 'inherit
owner' DOES take effect correctly. However, that means the sticky bit
does not get inherited, which will not work for me. I need both to be
inherited, and for some reason they are behaving mutually-exclusive
(with 'inherit permissions' taking precedence).

I have tried this on Samba3.3 and 3.2, both on FreeBSD-7.2_RELEASE
(amd64) machines, and neither works.

So to sum up:
I'd very much appreciate it if some FreeBSD people could try
reproducing this with any/all of Samba 3.2,3.3,3.4.
I'd also be curious of the results with Samba3.2 or 3.3 on a non-FreeBSD Unix.

I'm just trying to determine if I'm crazy or not (:

Thanks
-John
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org