Re: new user questions. (Before I back myself into a corner!)
On Tue, Nov 23, 2010 at 08:41:17PM -0600, Kevin Kinsey wrote: [...] Have a FTP server, so I can automate some of the web page graphics updates, from other systems that generate the data, and can FTP files across the LAN, also of course for general web page maintenance needs. The base system ftpd is run from inetd, a super server which can serve several small protocols. Have a look at /etc/inetd.conf. The first real line: #ftp stream tcp nowait root/usr/libexec/ftpd ftpd -l Uncomment that (remove the 'hash'), and save it (you'll have to be root again, of course). An easier solutions would be to enable the ftp server in standalone mode via /etc/rc.conf: ftpd_enable=YES -- Jonathan Chen j...@chen.org.nz -- The reason why worry kills more people than work is that more people worry than work. - Robert Frost ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
freebsd PHP extensions: missing option ?
There is something I would like clarified with PHP extension options... # cd /usr/ports/lang/php52-extensions # make showconfig | grep PDO PDO=on PHP Data Objects Interface (PDO) PDO_SQLITE=on PDO sqlite driver This corresponds with # cat /var/db/ports/php5-extensions/options | grep PDO WITH_PDO=true WITH_PDO_SQLITE=true However, the interactive menu, displays one more option: PDO_MYSQL # cd /usr/ports/lang/php52-extensions # make config ... [X] PDO PHP Data Objects Interface (PDO) [X] PDO_SQLITE PDO sqlite driver [X] PDO_MYSQL PDO mysql driver -- 1st question: why does the options file not contain a WITH_PDO_MYSQL=true line ? and if I further look: $ pkg_info | grep pdo php52-pdo-5.2.14_1 The pdo shared extension for php php52-pdo_mysql-5.2.14_1 The pdo_mysql shared extension for php php52-pdo_pgsql-5.2.14_1 The pdo_pgsql shared extension for php php52-pdo_sqlite-5.2.14_1 The pdo_sqlite shared extension for php $ grep pdo /usr/local/etc/php/extensions.ini extension=pdo.so extension=pdo_mysql.so extension=pdo_sqlite.so extension=pdo_pgsql.so in a web browser phpinfo.php also tells me: PDO support enabled PDO drivers pgsql, sqlite, mysql So I also have and use also pdo_pgsql The interactive menu for php5 extensions does not provide a [ ] PDO_PGSQL option -- 2nd question: why not such an option in the interactive menu? Some other ports need pdo_pgsql and install it along with the port as a dependency, e.g. davical. I installed that in march 2010 and did several portugprades (0.9.7.6, 0.9.8.1, 0.9.8.4 - no problems). But from version 0.9.9 onwards davical doesn't want to portupgrade any longer and throws a message 'Unknown extension pdo_pgsql for PHP52' ... This must be related with the configuration of php extensions, but the file /var/db/ports/php5-extensions/options should not be edited manually. 3rd question: How to solve this? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
Gary Kline kl...@thought.org wrote: I can't find an atom cpu computer with dual NICs. Dunno about having them on-board, but anything with a Poulsbo SCH should have two PCIe channels, each of which could be used for a NIC. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
On Wed, 24 Nov 2010 01:26:53 -0800 per...@pluto.rain.com wrote: Dunno about having them on-board, but anything with a Poulsbo SCH should have two PCIe channels, each of which could be used for a NIC. You also get network cards with multiple ports which would work. e.g. http://reviews.cnet.com/adapters-nics/d-link-dfe-570tx/1707-3380_7-785663.html -- Bruce Cran ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
On 24.11.2010 02:43, Gary Kline wrote: Maybe someone on-list can help me; after 5+ hours of clicking and typing, I can't find an atom cpu computer with dual NICs. I _thought_ I'd found a computer to replace to Kayak firewall [pfSense], but nada. Any wizards on this list have a clue? http://global.msi.eu/index.php?func=proddescmaincat_no=388prod_no=1943 //Svein -- +---+--- /\ |Svein Skogen | sv...@d80.iso100.no \ / |Solberg Østli 9| PGP Key: 0xE5E76831 X|2020 Skedsmokorset | sv...@jernhuset.no / \ |Norway | PGP Key: 0xCE96CE13 | | sv...@stillbilde.net ascii | | PGP Key: 0x58CD33B6 ribbon |System Admin | svein-listm...@stillbilde.net Campaign|stillbilde.net | PGP Key: 0x22D494A4 +---+--- |msn messenger: | Mobile Phone: +47 907 03 575 |sv...@jernhuset.no | RIPE handle:SS16503-RIPE +---+--- A: Because it fouls the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing on usenet and in e-mail? Picture Gallery: https://gallery.stillbilde.net/v/svein/ signature.asc Description: OpenPGP digital signature
Re: a gmirror disappears after adding gjournals to its partitions
CyberLeo Kitsana cyber...@cyberleo.net wrote: If the kldstat Id numbers are assigned sequentially, it looks as if geom_journal got loaded first and this may somehow be related (although I don't entirely see how -- absent geom_mirror to make gm0 and its partitions visible, I'd think that geom_journal should not be able to find its metadata at all). From what I've found, this is because there is no taste difference between a bsdlabel on a gmirror and a bsdlabel on a non-mirror. ... which seems like a bug, unless I misunderstand how geoms work -- see diagram below: * If gjournal stores its metadata at the end of its provider, it should not be finding anything recognizable at the end of ad0s2a, because that block contains gmirror's metadata. * OTOH, if gjournal is looking for something at the beginning of its provider, it should be finding a bsdlabel -- not gjournal metadata -- at the beginning of ad0s2a and that should keep it from recognizing anything in ad0s2a (which is already known to be a partition, thus finding another bsdlabel at its beginning cannot be legitimate). It looks to me as if gjournal is confused: it claims to have found data and journal on each of ad0s2a, ad0s2d, and ad0s2e but in fact only the first of those even exists! The actual partitioning of ad0s2 is into ad0s2a and ad0s2b (plus the conventional ad0s2c entry covering all of ad0s2). It is gm0 (whose provider is ad0s2a) that is partitioned into gm0a, gm0d, and gm0e; if gm0's bsdlabel were interpreted as being directly on ad0s2a, shouldn't those partitions be named ad0s2aa, ad0s2ad, and ad0s2ae? __ | ad0s2 bsdlabel (on ad0s2) | ad0s2c _ || ad0s2a | gm0 bsdlabel (on gm0) ||| gm0c _ ||| | gm0a | data ||| | | ||| | |_ ||| | | journal ||| | |_ ||| |___|_gjMeta ||| | gm0d | data ||| | | ||| | | ||| | | ||| | | ||| | |_ ||| | | journal ||| | |_ ||| |___|_gjMeta ||| | gm0e | data ||| | | ||| | | ||| | | ||| | | ||| | | ||| | | ||| | | ||| | | ||| | | ||| | | ||| | | ||| | | ||| | |_ ||| | | journal ||| | |_ |||__|___|_gjMeta ||_gmMeta || ad0s2b || || ||_ ... either make the two look different somehow (use a different geom that stores its metadata at the beginning of the provider, instead of the end, thus eliminating ambiguity in the bsdlabel taste), When I asked earlier how to subdivide gm0, bsdlabel was recommended. Is there something else that would work better? (This machine is likely too old to understand GPT.) or to make the inner geom avoid the outer devices (hardcode provider names in metadata). Since you have an outer geom that provides a static name, hardcoding the name of the gmirror into the gjournal metadata shouldn't cause anything to break if your disks change places, either. But I suspect this may not scale well. Suppose I later decide to mirror the swap instead of using ad0s2b and ad8s2b as separate swap partitions. Is there not a 50/50 chance of the swap mirror becoming gm0 and my current gm0 becoming gm1, thereby breaking any metadata that depends on hard-coded provider names? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How long laptop battery should live ?
On Tue, 23 Nov 2010 23:17:37 -0600 Adam Vande More amvandem...@gmail.com wrote: IIRC, there where some improvement to HEAD while ago that increased FreeBSD power usage efficiecy a non-negligible amount. Perhaps those improvements where MFC'd already, Google around either way as there are settings to tune which will decrease power consumption. In order to get those savings you need to set hw.acpi.cpu.cx_lowest to C2 or C3. -- Bruce Cran ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: new user questions. (Before I back myself into a corner!)
Allow me to answer some of your questions without begin too
precise about the whole picture, because I just can't speak
about all aspects due to lack of experience. :-)
On Tue, 23 Nov 2010 22:55:51 -, Dave d...@g8kbv.demon.co.uk wrote:
I'd like to:-
Have a ssh login via LAN available, I believe that's a standard feature,
but I expressedly disabled that (well, told it not to implement it) when
I orignaly installed the OS.
The SSH functionality is provided by
sshd_enable=YES
in /etc/rc.conf; upon reboot or
/etc/rc.d/sshd start
the server gets activated. If no keys are present, they are
generated at first startup. You can also provide your own set
of keys if you already have some. See
man sshd
for details.
Have a small web server, again I've read that Apache can do a good job,
but I don't want (nor need) all it's facilities, in particular I need to
lock it down so no Put's can happen for a start! The web pages are
simple flat form, text and static graphics, with a little client side
scripting, purely to find the client's local date and time, to select the
graphic to serve.
Well, lighttpd comes to my mind, although there are some others
that are really good at this simple stuff. Reducing things to
a working and functional minimum isn't as easy as it sounds. :-)
Have a FTP server, so I can automate some of the web page graphics
updates, from other systems that generate the data, and can FTP files
across the LAN, also of course for general web page maintenance needs.
The system brings an FTP server. You can enable it by uncommenting
the entry
ftp stream tcp nowait root /usr/libexec/ftpd ftpd -ll
in /etc/inetd.conf. With this approach, the system's inetd controls
the communication to the server program.
You'll notice that THIS line has ftpd -ll (ell ell) instead of just
one -l. This is intended for log purposes. Add the line
!ftpd
*.* /var/log/ftpd.log
to /etc/syslog.conf and
touch /var/log/ftpd.log
to create a log file for the FTP server. This can help you to
spot misbehaviour either on server or client side.
That sounds in the face of things what I want, but am unsure of the
implications of doing that. Is it better (ie, easier for a novice to
manage) than the native OS based FTP server tool? I would preffer to
have FTP login's that are in no way related to any system login users.
In order to disallow system level accounts for FTP, use the file
/etc/ftpusers: This file contains the accounts that are NOT allowed
to make an FTP connection. Put root and toor (UID 0 accounts)
on top. Also put ftp there - this is the anonymous FTP user
which I think you do NOT want to work.
Also, consider using scp for file transfers, it's often much more
convenient, allthough I like
ftp -u ftp://$(FTPUSER):$(FTPPASSWD)@$(SERVER) ${FILES}
for shoving new stuff onto the the web server with FTP server. :-)
There's nothing wrong with system's FTP in my opinion, as long as
you know what it's actually doing (and how), and you can see the
implications to consider to your particular needs and security
requirements.
Of all the stuff I've read so far in the FreeBSD handbook, and a few
other places, not one mention is made (that I can see so far) of how to
set services for alternative port numbers?
In the documentation of that services (FTP, SSH for example) you
can specify alternative ports, e. g. -p port for sshd which can
be set via sshd_flags= in the /etc/rc.conf file. It's always a good
idea to look through the man pages of the programs you use. The
system's program ALL do come with a good manpage - software from
ports not always provides that quality.
Unless there is a compelling argument to, I'd prefer to stick with V8.0
too.
I don't see a problem with that. Unlike most other operating systems,
you can always use FreeBSD on old-fashioned hardware. For example,
I have a 150 MHz P1 with 128 MB here doing some simple in-house
server stuff - it currently runs 8.0 (and will soon receive an
update using freebsd-update, a tool that will allow you to keep
your system on a current state even if you don't want to run big
compile orgies on it).
PS: I run one of these
http://www.ncdxf.org/beacon/monitors.html
Greetings es 73 de JO52TD ryryryry ...-.- :-)
--
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
Bruce Cran writes: You also get network cards with multiple ports which would work. e.g. http://reviews.cnet.com/adapters-nics/d-link-dfe-570tx/1707-3380_7-785663.html The machine I'm typing on has a two port Intel Pro/1000-GT; I cannot recommend it highly enough. One caveat: the better multi-port cards can get expensive very fast. Robert Huff ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
--On November 23, 2010 17:43:12 -0800 Gary Kline kl...@thought.org wrote: Maybe someone on-list can help me; after 5+ hours of clicking and typing, I can't find an atom cpu computer with dual NICs. I _thought_ I'd found a computer to replace to Kayak firewall [pfSense], but nada. Any wizards on this list have a clue? -- Gary Kline kl...@thought.org http://www.thought.org Public Service UnixJourney Toward the Dawn, E-Book: http://www.thought.org The 7.97a release of Jottings: http://jottings.thought.org I run pfSense on this http://www.supermicro.com/products/motherboard/ATOM/ICH9/X7SPE.cfm?typ=HIPMI=Y in this http://www.supermicro.com/products/chassis/1U/503/SC503L-200.cfm - glz ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
On 11/24/10 01:43, Gary Kline wrote: Maybe someone on-list can help me; after 5+ hours of clicking and typing, I can't find an atom cpu computer with dual NICs. I _thought_ I'd found a computer to replace to Kayak firewall [pfSense], but nada. Any wizards on this list have a clue? I don't know if your requirement for an Atom CPU is absolute, or you're just looking for a low power solution, but if it's the latter and 100Mb/s networking is fast enough, I use one of these http://www.pcengines.ch/alix2d13.htm for my pfSense firewall. Three network interfaces so you have a DMZ, plus a hardware crypto accelerator for VPNs. Total power consumption measured at 5W. The alix2d2 is the 2 network port version. -- Although the wombat is real and the dragon is not, few know what a wombat looks like, but everyone knows what a dragon looks like. -- Avram Davidson, _Adventures in Unhistory_ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Maintainer of mod_proxy_html ?
Hi, Does anyone know if David Lay d...@bitwizards.com.au is still maintaining the mod_proxy_html port? Or maybe have an alternative e-mail address? I tried contacting him 3 days ago at that e-mail but the mail bounced with that mail server being down. I don't know if it's on purpose or not but the port does not include conf a file (proxy_html.conf) that renders the module useless unless you create one and it's not all that trivial. The installation routines also don't modify the httpd.conf file nor advise that you do so (nor to create the conf file). The module compiles and runs perfectly though for Apache 2.2 on FBSD 8. There is a mention of this supposed bug back in 2008: http://bahumbug.wordpress.com/2008/10/13/freebsd-port-of-mod_proxy_html-is-broken/ Thanks, -- Alejandro Imass ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
trying to sysctl(3) a char value
Hello,
Since I cannot adjust the brightness on my HP Probook because it sucks
I'm writing a small script that can be use instead. I need to sysctl
the following sysctl variables :
hw.acpi.video.lcd0.brightness
hw.acpi.video.lcd0.levels
the -brightness one is easy since it's an integer, but the levels is
possibly a char :
mark...@melon ~ $ sysctl hw.acpi.video.lcd0.brightness
hw.acpi.video.lcd0.brightness: 90
mark...@melon ~ $ sysctl hw.acpi.video.lcd0.levels
hw.acpi.video.lcd0.levels: 100 50 0 5 10 15 20 25 30 33 36 40 43 46 50
55 60 65 70 75 80 83 86 90 93 96 100
How can I store the content of hw.acpi.video.lcd0.levels? This small
code doesn't work :
#include stdio.h
#include stdlib.h
#include sys/types.h
#include sys/sysctl.h
int
main(int argc, char *argv[])
{
char buf[128];
size_t len;
len = sizeof (buf);
if (sysctlbyname(hw.acpi.video.lcd0.levels, buf, len, NULL, 0) ==
-1) {
perror(sysctl);
return -1;
}
printf(levels = %s\n, buf);
}
mark...@melon ~ $ ./a.out
levels = d
Kind regards,
--
Demelier David
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Jail source address selection in 8.1-RELEASE
Hi, There appears to be a loosely documented sysctl 'security.jail.param.ip4.saddrsel' which should limit source IP selection of jails to their primary jail interface/IP. The sysctl does not appear to do anything, however: # sysctl security.jail.param.ip4.saddrsel=0 - # echo $? 0 # sysctl security.jail.param.ip4.saddrsel # # sysctl -d security.jail.param.ip4.saddrsel security.jail.param.ip4.saddrsel: Do (not) use IPv4 source address selection rather than the primary jail IPv4 address. Is this tunable only available when VIMAGE jails are built? The 8.1-RELEASE Release Notes suggest it is for VIMAGE jail(8) containers, while 7.3-RELEASE Release Notes suggest that it is available for the entire jail(8) subsystem as 'security.jail.ip4_saddrsel', a different OID. FreeBSD 8.1-RELEASE FreeBSD 8.1-RELEASE #0: Tue Aug 3 16:24:09 EDT 2010 r...@:/usr/obj/usr/src/sys/GENERIC amd64 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
On Wed, Nov 24, 2010 at 04:03:56PM +, Arthur Chance wrote: On 11/24/10 01:43, Gary Kline wrote: Maybe someone on-list can help me; after 5+ hours of clicking and typing, I can't find an atom cpu computer with dual NICs. I _thought_ I'd found a computer to replace to Kayak firewall [pfSense], but nada. Any wizards on this list have a clue? I don't know if your requirement for an Atom CPU is absolute, or you're just looking for a low power solution, but if it's the latter and 100Mb/s networking is fast enough, I use one of these http://www.pcengines.ch/alix2d13.htm for my pfSense firewall. Three network interfaces so you have a DMZ, plus a hardware crypto accelerator for VPNs. Total power consumption measured at 5W. The alix2d2 is the 2 network port version. Thanks to everyone indeed. The long-story-short is that just a few months ago I thought I *had* found a low-power [Atom] box with a dual-NIC for around $300. So I figured that since there was at least that one there might be others. Late last night my friend at the University figured that it wouldn't be that hard to build one from parts. [[ Sure, if you've got two good hands and a several hours, etc. ]] An Atom CPU is only the means to the end of finally having a low power config. Right now I'm probably burning 100w using the Kayak and an '05 40G drive. Any low-power box will work. Appreciate the help! gary -- Although the wombat is real and the dragon is not, few know what a wombat looks like, but everyone knows what a dragon looks like. -- Avram Davidson, _Adventures in Unhistory_ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix Journey Toward the Dawn, E-Book: http://www.thought.org The 7.97a release of Jottings: http://jottings.thought.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
gvfs-1.6.6' build failure
FreeBSD jimmiejaz.org 8.1-STABLE FreeBSD 8.1-STABLE #0: Mon Nov 15 17:52:21 EST 2010 root@:/usr/obj/usr/src/sys/FORTYTWO i386 Hit this in the middle of the Gnome 2.32, I hit this error, any suggestions? [13:44:20] jim...@jimmiejaz 115 [0] /usr/ports/devel/gvfs#make clean ; rehash ; portupgrade -f devel/gvfs === Cleaning for gvfs-1.6.6 --- Upgrading 'gvfs-1.6.3_1' to 'gvfs-1.6.6' (devel/gvfs) --- Building '/usr/ports/devel/gvfs' === Cleaning for gvfs-1.6.6 === License check disabled, port has not defined LICENSE === Found saved configuration for gvfs-0.2.3_2 === Extracting for gvfs-1.6.6 = SHA256 Checksum OK for gnome2/gvfs-1.6.6.tar.bz2. === Patching for gvfs-1.6.6 === Applying FreeBSD patches for gvfs-1.6.6 === gvfs-1.6.6 depends on executable: gmake - found === gvfs-1.6.6 depends on file: /usr/local/bin/intltool-extract - found === gvfs-1.6.6 depends on executable: pkg-config - found === gvfs-1.6.6 depends on shared library: dbus-1.3 - found === gvfs-1.6.6 depends on shared library: hal.1 - found === gvfs-1.6.6 depends on shared library: soup-gnome-2.4.1 - found === gvfs-1.6.6 depends on shared library: gnome-keyring - found === gvfs-1.6.6 depends on shared library: avahi-client.3 - found === gvfs-1.6.6 depends on shared library: intl - found === gvfs-1.6.6 depends on shared library: atk-1.0.0 - found === gvfs-1.6.6 depends on shared library: gconf-2.4 - found === gvfs-1.6.6 depends on shared library: glib-2.0.0 - found === gvfs-1.6.6 depends on shared library: gtk-x11-2.0.0 - found === gvfs-1.6.6 depends on shared library: IDL-2.0 - found === gvfs-1.6.6 depends on shared library: xml2.5 - found === gvfs-1.6.6 depends on shared library: ORBit-2.0 - found === gvfs-1.6.6 depends on shared library: pango-1.0.0 - found === Configuring for gvfs-1.6.6 configure: WARNING: unrecognized options: --with-gconf-source checking for a BSD-compatible install... /usr/bin/install -c -o root -g wheel checking whether build environment is sane... yes checking for a thread-safe mkdir -p... /usr/local/bin/gmkdir -p checking for gawk... gawk checking whether gmake sets $(MAKE)... yes checking whether build environment is sane... yes checking for style of include used by gmake... GNU checking for gcc... cc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether cc accepts -g... yes checking for cc option to accept ISO C89... none needed checking dependency style of cc... gcc3 checking for an ANSI C-conforming const... yes checking for library containing strerror... none required checking for gcc... (cached) cc checking whether we are using the GNU C compiler... (cached) yes checking whether cc accepts -g... (cached) yes checking for cc option to accept ISO C89... (cached) none needed checking dependency style of cc... (cached) gcc3 checking how to run the C preprocessor... cpp checking whether ln -s works... yes checking whether gmake sets $(MAKE)... (cached) yes checking build system type... i386-portbld-freebsd8.1 checking host system type... i386-portbld-freebsd8.1 checking how to print strings... print: not found printf checking for a sed that does not truncate output... /usr/bin/sed checking for grep that handles long lines and -e... /usr/bin/grep checking for egrep... /usr/bin/grep -E checking for fgrep... /usr/bin/grep -F checking for ld used by cc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B checking the name lister (/usr/bin/nm -B) interface... BSD nm checking the maximum length of command line arguments... (cached) 262144 checking whether the shell understands some XSI constructs... yes checking whether the shell understands +=... no checking for /usr/bin/ld option to reload object files... -r checking for objdump... objdump checking how to recognize dependent libraries... pass_all checking for ar... ar checking for strip... strip checking for ranlib... ranlib checking command to parse /usr/bin/nm -B output from cc object... ok checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking for dlfcn.h... yes checking for objdir... .libs checking if cc supports -fno-rtti -fno-exceptions... no checking for cc option to produce PIC... -fPIC -DPIC checking if cc PIC flag -fPIC -DPIC works... yes checking if cc static flag -static works... yes checking if cc supports -c -o file.o... yes checking if cc supports -c -o file.o... (cached) yes checking whether the cc linker
Re: trying to sysctl(3) a char value
In the last episode (Nov 24), David DEMELIER said: Since I cannot adjust the brightness on my HP Probook because it sucks I'm writing a small script that can be use instead. I need to sysctl the following sysctl variables : hw.acpi.video.lcd0.brightness hw.acpi.video.lcd0.levels the -brightness one is easy since it's an integer, but the levels is possibly a char : mark...@melon ~ $ sysctl hw.acpi.video.lcd0.brightness hw.acpi.video.lcd0.brightness: 90 mark...@melon ~ $ sysctl hw.acpi.video.lcd0.levels hw.acpi.video.lcd0.levels: 100 50 0 5 10 15 20 25 30 33 36 40 43 46 50 55 60 65 70 75 80 83 86 90 93 96 100 Looking at the source, that sysctl definition is CTLTYPE_OPAQUE with a display format of I, which means that it's just an array of integers. Print each one in a loop. You can also take a look at /usr/src/sbin/sysctl/sysctl.c to see how it printed the numbers. -- Dan Nelson dnel...@allantgroup.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: trying to sysctl(3) a char value
2010/11/24 Dan Nelson dnel...@allantgroup.com: In the last episode (Nov 24), David DEMELIER said: Since I cannot adjust the brightness on my HP Probook because it sucks I'm writing a small script that can be use instead. I need to sysctl the following sysctl variables : hw.acpi.video.lcd0.brightness hw.acpi.video.lcd0.levels the -brightness one is easy since it's an integer, but the levels is possibly a char : mark...@melon ~ $ sysctl hw.acpi.video.lcd0.brightness hw.acpi.video.lcd0.brightness: 90 mark...@melon ~ $ sysctl hw.acpi.video.lcd0.levels hw.acpi.video.lcd0.levels: 100 50 0 5 10 15 20 25 30 33 36 40 43 46 50 55 60 65 70 75 80 83 86 90 93 96 100 Looking at the source, that sysctl definition is CTLTYPE_OPAQUE with a display format of I, which means that it's just an array of integers. Print each one in a loop. You can also take a look at /usr/src/sbin/sysctl/sysctl.c to see how it printed the numbers. -- Dan Nelson dnel...@allantgroup.com Thank you, it works ! -- Demelier David ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: a gmirror disappears after adding gjournals to its partitions
On 11/24/2010 04:52 AM, per...@pluto.rain.com wrote: It looks to me as if gjournal is confused: It is not gjournal that is confused; it's bsdlabel. The gjournals lie entirely within the partitions defined within the bsdlabel, and don't care about anything outside of that. The ambiguity here is that the bsdlabel is stored at the beginning of the disk, and is very loose about what it accepts as valid, since there is no direct harm in being eager. The metadata for gmirror is stored at the end. The metadata for the bsdlabel is stored at the beginning. When bsdlabel tastes before gmirror, it sees the same label on the component disks that would be on the gm0 mirror. Moreover, all the partitions it then creates are identically sized, and contain exactly the same data, as they would on the mirror. It will complain that partition 'c' doesn't cover the whole unit, but this is not a fatal error as it doesn't take exclusive access, and so you are always free to use that same bsdlabel through another geom path. The problem arises when bsdlabel tastes ad0 before gmirror, and creates all the partitions thereupon, which triggers a taste of all the newly created devices by gjournal, which opens the devices exclusively once it finds the metadata it needs within the partitions. Now that they're opened exclusively somewhere, all the other paths to that device through the geom graph are withered, and cannot be tasted or used by anything else, including gmirror. Hardcoding provider names into gjournal makes it reject these ambiguously created devices. Since gjournal doesn't take exclusive access, gmirror can now taste the still-available ad0, see that it's a mirror, and launch gm0, which triggers a taste by bsdlabel (and creates the partitions) which triggers a taste by gjournal, which matches the names its expecting. That was difficult to keep clear. I hope it makes sense! ... either make the two look different somehow (use a different geom that stores its metadata at the beginning of the provider, instead of the end, thus eliminating ambiguity in the bsdlabel taste), When I asked earlier how to subdivide gm0, bsdlabel was recommended. Is there something else that would work better? (This machine is likely too old to understand GPT.) The machine's bios does not need to understand GPT to use it on a pure data disk; only as a boot disk. There are a few bioses that throw fits when not all the disks include mbr/slice tables, but those (thankfully) tend to be the minority. Plus, since GPT expects metadata at both the beginning and end of the disk, seeing gmirror metadata instead may prevent it from creating these ambiguous device nodes as well (but test this assumption before relying on it). or to make the inner geom avoid the outer devices (hardcode provider names in metadata). Since you have an outer geom that provides a static name, hardcoding the name of the gmirror into the gjournal metadata shouldn't cause anything to break if your disks change places, either. But I suspect this may not scale well. Suppose I later decide to mirror the swap instead of using ad0s2b and ad8s2b as separate swap partitions. Is there not a 50/50 chance of the swap mirror becoming gm0 and my current gm0 becoming gm1, thereby breaking any metadata that depends on hard-coded provider names? When you create a mirror, you give it an explicit name, which will not change over the life of the mirror without your explicit action. This name does not have to be 'gm0' or some such. I have named mirrors after the hostname, or 'hostname-purpose', such as 'sc1425-root' and 'sc1425-swap' -- Fuzzy love, -CyberLeo Technical Administrator CyberLeo.Net Webhosting http://www.CyberLeo.Net cyber...@cyberleo.net Furry Peace! - http://.fur.com/peace/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: freebsd PHP extensions: missing option ?
n dhert wrote: There is something I would like clarified with PHP extension options... # cd /usr/ports/lang/php52-extensions # make showconfig | grep PDO PDO=on PHP Data Objects Interface (PDO) PDO_SQLITE=on PDO sqlite driver This corresponds with # cat /var/db/ports/php5-extensions/options | grep PDO WITH_PDO=true WITH_PDO_SQLITE=true However, the interactive menu, displays one more option: PDO_MYSQL # cd /usr/ports/lang/php52-extensions # make config ... [X] PDO PHP Data Objects Interface (PDO) [X] PDO_SQLITE PDO sqlite driver [X] PDO_MYSQL PDO mysql driver -- 1st question: why does the options file not contain a WITH_PDO_MYSQL=true line ? It's not a default option, because not everyone uses MySQL. and if I further look: $ pkg_info | grep pdo php52-pdo-5.2.14_1 The pdo shared extension for php php52-pdo_mysql-5.2.14_1 The pdo_mysql shared extension for php php52-pdo_pgsql-5.2.14_1 The pdo_pgsql shared extension for php php52-pdo_sqlite-5.2.14_1 The pdo_sqlite shared extension for php $ grep pdo /usr/local/etc/php/extensions.ini extension=pdo.so extension=pdo_mysql.so extension=pdo_sqlite.so extension=pdo_pgsql.so in a web browser phpinfo.php also tells me: PDO support enabled PDO drivers pgsql, sqlite, mysql So I also have and use also pdo_pgsql The interactive menu for php5 extensions does not provide a [ ] PDO_PGSQL option -- 2nd question: why not such an option in the interactive menu? I can't answer that; I do note that this is true in the main trunk ports/lang/php5-extensions as well; a user note on the php.net site (http://www.php.net/manual/en/pdo.installation.php) makes a similar complaint. Suggestion: run make maintainer in the php52-extensions directory and respectfully mail that person with your question. Some other ports need pdo_pgsql and install it along with the port as a dependency, e.g. davical. I installed that in march 2010 and did several portugprades (0.9.7.6, 0.9.8.1, 0.9.8.4 - no problems). But from version 0.9.9 onwards davical doesn't want to portupgrade any longer and throws a message 'Unknown extension pdo_pgsql for PHP52' ... This must be related with the configuration of php extensions, but the file /var/db/ports/php5-extensions/options should not be edited manually. 3rd question: How to solve this? See above for starters. You might also be able to hack the Makefile, but that's just what it is ... a hack ;-) Good luck! Kevin Kinsey ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
On Wed, Nov 24, 2010 at 2:43 AM, Gary Kline kl...@thought.org wrote: Maybe someone on-list can help me; after 5+ hours of clicking and typing, I can't find an atom cpu computer with dual NICs. I _thought_ I'd found a computer to replace to Kayak firewall [pfSense], but nada. Any wizards on this list have a clue? I don't know if I'm a wizard, but FitPC2i might do you good. http://www.fit-pc.com/web/fit-pc2/specifications/ -- chs, ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How long laptop battery should live ?
Hello, Thanks for all your answers, I guess my battery is getting on its end of life.. After running 30 minutes on battery, the percent is still 100% while the remaining time is slowly decreasing.. Aaaah buying a new battery costs around $134 ! I think I could live a few months before buying a new one but it sucks :-/ Cheers, -- Demelier David ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How long laptop battery should live ?
On Wed, Nov 24, 2010 at 2:42 PM, David DEMELIER demelier.da...@gmail.comwrote: Thanks for all your answers, I guess my battery is getting on its end of life.. After running 30 minutes on battery, the percent is still 100% while the remaining time is slowly decreasing.. Aaaah buying a new battery costs around $134 ! I think I could live a few months before buying a new one but it sucks :-/ One thing I forgot to mention is that this might be a good case for an SSD drive. I installed one in my old laptop w/ old worn battery and system performance and battery life increased significantly all for less than your new battery price. There's a lot of advantages to SSD's in a laptop. -- Adam Vande More ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: msk0 interface stops working when downloading
On Tue, Nov 23, 2010 at 04:10:03PM -0800, Garrett Cooper wrote: On Tue, Nov 23, 2010 at 3:25 PM, Andrew Moran amo...@forsythia.net wrote: Hey guys, After banging my head against this for a few hours, I've decided to ask for help. ? ? ?I installed FreeBSD 8.1 amd64 on a Shuttle J1 4100 system (tech specs here http://us.shuttle.com/J1_4100.aspx). ? I installed from DVD and the install went fine. I notice when I pkg_add -r anything, ?the network stops responding. Some details: 1) I can reproduce it 100% by downloading a large file. ? ? low traffic like the SSH connection does not trigger it. ? I think it's being triggered by traffic above a certain rate. 2) I can recover by restarting the network interfaces (/etc/rc.d/netif stop; ?/etc/rc.d/netif start) 3) I see no errors in dmesg or /var/log/messages. ?Nothing at all. 4) I've tried the following in /etc/sysctl.conf: net.inet.tcp.tso=0 net.inet.tcp.inflight.enable=0 and in /boot/loader.conf: hw.pci.enable_msix=0 hw.pci.enable_msi=0 hw.bce.tso_enable=0 But the problem persists. The interface is identified as: mskc0: Marvell Yukon 88E8057 Gigabit Ethernet port 0xe800-0xe8ff mem 0xfebfc000-0xfebf irq 17 at device 0.0 on pci2 msk0: Marvell Technology Group Ltd. Yukon Ultra 2 Id 0xba Rev 0x00 on mskc0 msk0: Ethernet address: 80:ee:73:01:60:7d miibus0: MII bus on msk0 e1000phy0: Marvell 88E1149 Gigabit PHY PHY 0 on miibus0 e1000phy0: ?10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto mskc0: [ITHREAD] Does anyone know what could be causing this or how I can resolve it? ? Any help is appreciated, thanks. 1. freebsd-stable is the proper list, not freebsd-current. 2. I have a similar chipset (not the same though) that hasn't had any issues for a while: $ pciconf -lv | grep -A 3 msk ms...@pci0:2:0:0: class=0x02 card=0x81f81043 chip=0x436411ab rev=0x12 hdr=0x00 vendor = 'Marvell Semiconductor (Was: Galileo Technology Ltd)' device = 'Yukon PCI-E Gigabit Ethernet Controller (88E8056)' class = network $ devinfo -v | grep -A 3 mskc0 mskc0 pnpinfo vendor=0x11ab device=0x4364 subvendor=0x1043 subdevice=0x81f8 class=0x02 at slot=0 function=0 msk0 miibus0 e1000phy0 pnpinfo oui=0x5043 model=0xb rev=0x1 at phyno=0 $ uname -a FreeBSD orangebox.local 9.0-CURRENT FreeBSD 9.0-CURRENT #0 r215607M: Sat Nov 20 21:22:34 UTC 2010 gcoo...@orangebox.local:/usr/obj/usr/src/sys/ORANGEBOX amd64 Sorry for not grabbing the full dmesg output, but unfortunately I have BUS_DEBUG turned on for this test box, which blows out my syslog buffer at boot :). I've CCed yongari@ for comment. It seems there are a couple of msk(4) issues on Yukon Ultra and Ultra II controllers. Some revisions appear to work without problems but others didn't work well. You may have noticed there are a couple of msk(4) related PRs. Perhaps I have to sit down and verify every register access patterns and check controller status. For long time, one of the problem was lack of hardware access. There is no standalone PCIe Yukon Ultra/Ultra II controllers in market so it looks hard to get it in near future. :-( Thanks, -Garrett ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: new user questions. (Before I back myself into a corner!)
Hi again. Firstly, many thanks for the responces to my questions. Much appreciated. Especialy as on other lesser forums (Lugs etc) I often get flamed for asking such stuff, and learn nothing as a result. OK. The FTP thing first Just for the heck of it, trying to use the built in server daemon, because it's there etc I've sort of got the default FTP server up and running thanks to the hints from you all, but pound to a penny, it's not optimaly configured, yet. I have two users defined, ral and faros (easy to remember, as they are the names of the two external automated systems I intend to have send data to the small website, when that's done.) Each with a unique password. Both are also members of a group webupdater. (As an asside, creating users, regardless of what shell I pick from the list, I get unknown root shell warnings as adduser completes.) Both users can connect to the ftp server (still stuck at port 21 for now, but I'm manually starting it from the root command line) and log in with their username and password. (Both can also login to the system from the console too, not what I wanted, but.. I did try the nologin shell, but that prevents them from loging in to the FTP server too.) However, each user see's it's own unique homedir folder, exactly as described in the man pages, but I'd like them to see the folder structure below by default. I have created a directory '/var/site' and from that some decendant directories that mimic the existing site on the other machine. /sitethe root folder for the FTP and WWW system. /site/60m /site/faros /site/faros/fixedimages /site/faros/parking I've been trying to use Groups, and the ftpchroot file, to get the users to see the /site directory as their root (for compatablility with the way things work on the other system, so I don't have to change existing batch and script files when I get to point them at this box) or their individual data directory 60m for ral and 'Faros' for Faros. However, the pages for that feature are a little thin in content detail that I can use. (I'm looking at the man pages and handbook files on the freebsd.org site) I have this in /etc/ftpchroot @webupdater /var/site And indeed, loging into the ftp server as either faros, or ral, the default directory is indeed the /site folder as I wish. As ftp users, then can traverse the tree downwards as needed, but not upwards from /site back to /var. Nice. But, neither user can read write or even see anything in those directories (only the decendant directories are visible.) Without that entry in ftpchroot, then I can indeed ftp stuff up/down/sideways to/from each user's home folder, but that's not a lot of use for what I want. I sort of understand the way the rights work (I think) but as yet I can't see a way to assign group rights to a folder tree. Navigating my way there in the console, if I do a ls -l, then I see what's sort of expected. drwxr-xr-x # root wheel 512 date time subfolder etc. (# is a number) (when logged in as root, somewhat less, when logged in as ral or faros, but I can still list and read stuff.) Of course, the group webupdater is not listed, hence it's users wont be able to see or do anything. What have I missed? Can I assign group rights to a folder structure? Or, am I going about this all wrong. Problems and unfamiliarity asside, I'm sort of enjoying all this. But it's a near vertical learning curve, again... Best regards, time for the kettle to start work I think. Dave B. PS: I saw somewhere, that pureftp has had some recent security troubles. Can't find the details right now though. Ah.. Here we are http://www.vuxml.org/freebsd/533d20e7-f71f-11df-9ae1-000bcdf0a03b.html Like yesterday! Mind you, looking at it's features and abilities, I think I already need a second FreeBSD machine to play with to check this stuff out on. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
evolution-data-server build problem
Hi, I have a problem building evolution-data-server, and because of this a number of other ports don't build/upgrade either. ... gmake[4]: Entering directory `/usr/ports/databases/evolution-data-server/work/evolution-data-server-2.32.1/camel' CC libcamel_provider_1_2_la-camel-sasl-gssapi.lo camel-sasl-gssapi.c: In function 'gssapi_set_exception': camel-sasl-gssapi.c:157: error: implicit declaration of function 'error_message' camel-sasl-gssapi.c:157: warning: nested extern declaration of 'error_message' camel-sasl-gssapi.c:157: warning: assignment makes pointer from integer without a cast gmake[4]: *** [libcamel_provider_1_2_la-camel-sasl-gssapi.lo] Error 1 gmake[4]: Leaving directory `/usr/ports/databases/evolution-data-server/work/evolution-data-server-2.32.1/camel' gmake[3]: *** [all-recursive] Error 1 gmake[3]: Leaving directory `/usr/ports/databases/evolution-data-server/work/evolution-data-server-2.32.1/camel' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/usr/ports/databases/evolution-data-server/work/evolution-data-server-2.32.1/camel' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/usr/ports/databases/evolution-data-server/work/evolution-data-server-2.32.1' gmake: *** [all] Error 2 ... Hope that someone knows how to solve this. Thanks in advance. Regards, Marco -- C++ is the best example of second-system effect since OS/360. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
On Wed, Nov 24, 2010 at 02:23:33PM +0100, Goran Lowkrantz wrote: --On November 23, 2010 17:43:12 -0800 Gary Kline kl...@thought.org wrote: Maybe someone on-list can help me; after 5+ hours of clicking and typing, I can't find an atom cpu computer with dual NICs. I _thought_ I'd found a computer to replace to Kayak firewall [pfSense], but nada. Any wizards on this list have a clue? -- Gary Kline kl...@thought.org http://www.thought.org Public Service UnixJourney Toward the Dawn, E-Book: http://www.thought.org The 7.97a release of Jottings: http://jottings.thought.org I run pfSense on this http://www.supermicro.com/products/motherboard/ATOM/ICH9/X7SPE.cfm?typ=HIPMI=Y in this http://www.supermicro.com/products/chassis/1U/503/SC503L-200.cfm - glz Well, it looks like this one is it; it has the enclosure and so on with take more assembly that I myself can do, but not a fellow computer geek. Since I'm doing this as-if from scratch, what's the best way of getting pfSense installed? Can I do it somehow over the wire or use a thumb drive? What I understand is that the board won't be in stock until Dec 20th and I need it by the 15th, so should I just google around? (I'm imagine all the tens of millions of peiople who are shopping for a board that runs a firewall integrated with FrreeBSD:-) Anybody? -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix Journey Toward the Dawn, E-Book: http://www.thought.org The 7.97a release of Jottings: http://jottings.thought.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
On Wed, Nov 24, 2010 at 7:20 PM, Gary Kline kl...@thought.org wrote: Anybody? Gary, in case you didn't catch it the pcengines link already given to you is low power setup with comsumption comparable or better than an Atom. It's also been tested with FreeBSD and pfSense according to the manufacturers site. There's nothing wrong with Atom, but different models have different chipsets/NIC's and there may be a possibility of unsupported hardware. Perhaps it might be easier for you to go with a known commodity. pfSense documentation is offered on their website as well as community support. I suggest you start there. -- Adam Vande More ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
On Wed, Nov 24, 2010 at 08:14:01PM -0600, Adam Vande More wrote: On Wed, Nov 24, 2010 at 7:20 PM, Gary Kline kl...@thought.org wrote: Anybody? Gary, in case you didn't catch it the pcengines link already given to you is low power setup with comsumption comparable or better than an Atom. It's also been tested with FreeBSD and pfSense according to the manufacturers site. There's nothing wrong with Atom, but different models have different chipsets/NIC's and there may be a possibility of unsupported hardware. Perhaps it might be easier for you to go with a known commodity. pfSense documentation is offered on their website as well as community support. I suggest you start there. Thanks Adam, I forwarded the other model to my friend at the U and didn't hear back. --Of course, for lots of the civilian class, it is almost T'giving :-) Good thing there is ~three weeks left... . gary -- Adam Vande More ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix Journey Toward the Dawn, E-Book: http://www.thought.org The 7.97a release of Jottings: http://jottings.thought.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
Folks (mostly Adam), Hang on a sec. I think I misread what my friend said. Following is a snip of what he said was good; that this was among the stuff he installed a few years back and now was much better:: ALIX.2D13 system board - $115 CompactFlash card 4GB SLC - $20 Enclosure - $9 AC adapter - $13 Is this the same board and so forth that Arthur pointed me at below? My friend's name is Noah; what he saw was that the boad was not in stock and that it would not be restocked until 20dec. Because the 15th is better for Noah to drive down, I would like to have the stuff here when it's best for him. Figure ther have to be other vendors that sell this. gary On Wed, Nov 24, 2010 at 04:03:56PM +, Arthur Chance wrote: On 11/24/10 01:43, Gary Kline wrote: Maybe someone on-list can help me; after 5+ hours of clicking and typing, I can't find an atom cpu computer with dual NICs. I _thought_ I'd found a computer to replace to Kayak firewall [pfSense], but nada. Any wizards on this list have a clue? I don't know if your requirement for an Atom CPU is absolute, or you're just looking for a low power solution, but if it's the latter and 100Mb/s networking is fast enough, I use one of these http://www.pcengines.ch/alix2d13.htm for my pfSense firewall. Three network interfaces so you have a DMZ, plus a hardware crypto accelerator for VPNs. Total power consumption measured at 5W. The alix2d2 is the 2 network port version. -- Although the wombat is real and the dragon is not, few know what a wombat looks like, but everyone knows what a dragon looks like. -- Avram Davidson, _Adventures in Unhistory_ -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix Journey Toward the Dawn, E-Book: http://www.thought.org The 7.97a release of Jottings: http://jottings.thought.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
On Wed, Nov 24, 2010 at 9:01 PM, Gary Kline kl...@thought.org wrote: Folks (mostly Adam), Hang on a sec. I think I misread what my friend said. Following is a snip of what he said was good; that this was among the stuff he installed a few years back and now was much better:: ALIX.2D13 system board - $115 CompactFlash card 4GB SLC - $20 Enclosure - $9 AC adapter - $13 Is this the same board and so forth that Arthur pointed me at below? My friend's name is Noah; what he saw was that the boad was not in stock and that it would not be restocked until 20dec. Because the 15th is better for Noah to drive down, I would like to have the stuff here when it's best for him. Figure ther have to be other vendors that sell this. Yes, but if you browse the manufacturer you'll see that there are other boards in-stock which meet your requirements like this one: http://www.pcengines.ch/alix6e1.htm Doesn't have battery but that's easy enough to address around and less to go wrong. -- Adam Vande More ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
Maybe someone on-list can help me; after 5+ hours of clicking and typing, I can't find an atom cpu computer with dual NICs. I _thought_ I'd found a computer to replace to Kayak firewall [pfSense], but nada. Any wizards on this list have a clue? You'd probably have to build one yourself out of parts. Any respectable computer shop will have Mini-ITX Atom motherboards and cases, just add another NIC to that along with memory/drives and you're done. Regards, -- Matt Emmerton ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: foo; no such thing as a dual-nic atom firewall
On Wed, Nov 24, 2010 at 09:45:41PM -0600, Adam Vande More wrote: On Wed, Nov 24, 2010 at 9:01 PM, Gary Kline kl...@thought.org wrote: Folks (mostly Adam), Hang on a sec. I think I misread what my friend said. Following is a snip of what he said was good; that this was among the stuff he installed a few years back and now was much better:: ALIX.2D13 system board - $115 CompactFlash card 4GB SLC - $20 Enclosure - $9 AC adapter - $13 Is this the same board and so forth that Arthur pointed me at below? My friend's name is Noah; what he saw was that the boad was not in stock and that it would not be restocked until 20dec. Because the 15th is better for Noah to drive down, I would like to have the stuff here when it's best for him. Figure ther have to be other vendors that sell this. Yes, but if you browse the manufacturer you'll see that there are other boards in-stock which meet your requirements like this one: http://www.pcengines.ch/alix6e1.htm Doesn't have battery but that's easy enough to address around and less to go wrong. all right. the thing is that here i don't know the requirments. if 6e1 is better, that good. -- Adam Vande More -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix Journey Toward the Dawn, E-Book: http://www.thought.org The 7.97a release of Jottings: http://jottings.thought.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
gateway_enable=NO
The system installed now and in adresses /etc or /etc/rc.d there is no script. Does system work in default as ROUTER? I ask this question, because i tried it works. As it is written gateway_enable=NO # Set to YES if this host will be a gateway in the address - /etc/defaults/rc.conf But if I write gateway_enable=NO in the address /etc/rc.conf , my system will work in as ROUTER. I say this because the host in my system's local network can ping my system's global IP. As i know it can be only in ROUTER. Thanks. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: gvfs-1.6.6' build failure
Deleting xz-5.0.0 and installing lzma-9.12 fixed this problem. Sorry for the noise, but a heads up if anyone else hits this issue. On 11/24/10 13:54, Jimmie James wrote: FreeBSD jimmiejaz.org 8.1-STABLE FreeBSD 8.1-STABLE #0: Mon Nov 15 17:52:21 EST 2010 root@:/usr/obj/usr/src/sys/FORTYTWO i386 Hit this in the middle of the Gnome 2.32, I hit this error, any suggestions? /usr/lib/libarchive.so: undefined reference to `lzma_stream_enco...@xz_5.0' /usr/lib/libarchive.so: undefined reference to `lzma_alone_deco...@xz_5.0' /usr/lib/libarchive.so: undefined reference to `lzma_memus...@xz_5.0' /usr/lib/libarchive.so: undefined reference to `lzma_stream_deco...@xz_5.0' /usr/lib/libarchive.so: undefined reference to `lzma_c...@xz_5.0' /usr/lib/libarchive.so: undefined reference to `lzma_...@xz_5.0' /usr/lib/libarchive.so: undefined reference to `lzma_lzma_pre...@xz_5.0' /usr/lib/libarchive.so: undefined reference to `lzma_alone_enco...@xz_5.0' gmake[4]: *** [gvfsd-archive] Error 1 Stop in /usr/ports/devel/gvfs. *** Error code 1 Stop in /usr/ports/devel/gvfs. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
