Re: Question about nethack and setgid
On 03/03/2011 02:49, Robert Bonomi wrote: Date: Wed, 02 Mar 2011 23:51:45 +0100 From: David Demelierdemelier.da...@gmail.com To: freebsd-questions@freebsd.org Subject: Question about nethack and setgid Hello, I don't understand how nethack can store the score in /usr/local/lib/nethack/logfile. the real binary is here /usr/local/lib/nethack/nethack And the mode is -rwxr-sr-x 1 games games 1793635 25 Jan 2011 /usr/local/lib/nethack/nethack So that means people in games group will run nethack as games user (owner of file) Actually, it means that the program will run with the _group_ id of the file -- i.e. the 'games' group. _That_ 's' is the 'sgid' or 'set groupID' bit. but I'm not in games group ! and I can save the file located in /usr/local/lib/nethack/logfile which mode is -rw-rw-r-- games games Lo and behold! The file _is_ writable by the games group. I'm writing a game that will store file too, because I can't make it works like nethack I was planning using the setuid mode but I don't like much this .. What am I misunderstanding? the function of the 'setgid' bit.grin. Okay, that's why the program was running on my user but with games group. I didn't see that the file was writable by games group neither. I understand everything now and my game is working too :-) Thanks, Cheers, -- David Demelier ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org -- David Demelier ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Fastest way to get an entire FBSD system back online?
On 2 Mar 2011 22:07:39 -, John Levine jo...@iecc.com wrote: It's not as automated as the Windows approach, but if you know what you're doing it's mostly limited by the speed of the disks. Use dump rather than an image copy so you only restore what's actually in use. Unlike Windows, UNIX gives you the ability to create a fully programmable automated approach according to your needs, e. g. for multiple installations, defective systems can be booted via LAN, USB or CD, then it can be determined _which_ system it is automatically, and the proper backup sets can be restored. Partitioning tasks (labeling, slicing, partitioning, newfsing and tunefsing, as well as other pre-restore tasks) can also be fully automated, reducing any interaction to zero (which is less than nearly-zero), which means that it's even better automated than Windows. By the way, you can create similar procedures if you are using ZFS. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
kernel backtrace
Hi, list! I have a server with mpd and freeradius. Sometimes this server crashing down. # uname -a FreeBSD billing.com 8.1-RELEASE-p2 FreeBSD 8.1-RELEASE-p2 #0: Mon Feb 21 10:31:53 EET 2011lo...@localhost.com:/usr/src/sys/i386/compile/GENERIC i386 # Here is a crash log. Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x28 fault code = supervisor write, page not present instruction pointer = 0x20:0xc08c6960 stack pointer = 0x28:0xc6bc frame pointer = 0x28:0xc6bbbc18 code segment= base 0x0, limit 0xf, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags= interrupt enabled, resume, IOPL = 0 current process = 12 (swi4: clock) trap number = 12 panic: page fault cpuid = 0 Uptime: 4h55m10s Physical memory: 3315 MB Dumping 228 MB: 213 197 181 165 149 133 117 101 85 69 53 37 21 5 I want to see the backtrace, but I can not do that. # kgdb kernel.debug /var/crash/vmcore.4 GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type show copying to see the conditions. There is absolutely no warranty for GDB. Type show warranty for details. This GDB was configured as i386-marcel-freebsd... Cannot access memory at address 0x0 (kgdb) bt #0 0x in ?? () (kgdb) So, my question is: Why I can not see a backtrace? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: SIL Fonts
I was unable to find a port with Charis or Doulos typefaces. Perhaps someone can tell me that these typefaces are part of some meta-port. Which? Hmm. I don't see any port with them, either, although bundling of them is permitted, under certain circumstances, and I didn't look into the innards of every font port. Of course, you could always get them from SIL and add them manually. And I imagine that they may be accessible via third-party texlive packages. Do you need ports for these fonts? b ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: SIL Fonts
On 03/03/2011 06:35, Jason C. Wells wrote: I was unable to find a port with Charis or Doulos typefaces. Perhaps someone can tell me that these typefaces are part of some meta-port. Which? As far as I know, those fonts haven't been ported yet. Why not try porting them yourself? You can model your work on the gentium port I wrote. The port does little more than unpack the tarball from SIL and copy files into various places. See the Porter's Handbook for details on how it all works: http://www.freebsd.org/doc/en_US.ISO8859-1/books/porters-handbook/ Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matt...@infracaninophile.co.uk Kent, CT11 9PW signature.asc Description: OpenPGP digital signature
Ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB)
Hello, I've got two ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB) in one router/firewall. I use OpenBSD 4.8 on this box. That works fine, but I see some input Ierr on the interfaces (using netstat), even when the load is not very high. $ netstat -I em2 -w2 (bandwith = 150 Mbits) em2 in packets errs 43263 0 4345817 39056 0 46648 124 44783 630 42571 0 45338 0 4093233 4371384 40193 193 40491 0 I would like to know if under FreeBSD, you see this kind of Ierr? Thanks, regards. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB)
On 3/3/2011 9:27 AM, Patrick Lamaiziere wrote: Hello, I've got two ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB) in one router/firewall. I use OpenBSD 4.8 on this box. That works fine, but I see some input Ierr on the interfaces (using netstat), even when the load is not very high. $ netstat -I em2 -w2 (bandwith = 150 Mbits) em2 in packets errs 43263 0 4345817 39056 0 46648 124 44783 630 42571 0 45338 0 4093233 4371384 40193 193 40491 0 I would like to know if under FreeBSD, you see this kind of Ierr? what does sysctl -a dev.em show for the two cards and what version of FreeBSD are you using ? ---Mike -- --- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, m...@sentex.net Providing Internet services since 1994 www.sentex.net Cambridge, Ontario Canada http://www.tancsa.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB)
Patrick Lamaiziere writes: I've got two ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB) in one router/firewall. I use OpenBSD 4.8 on this box. That works fine, but I see some input Ierr on the interfaces (using netstat), even when the load is not very high. I have Pro/1000 GT Dual Port Gigabit Ethernet Controller (82546EB). huff@ uptime 9:46AM up 50 days, 22:16, 5 users, load averages: 3.85, 3.56, 3.81 $ netstat -I em2 -w2 (bandwith = 150 Mbits) huff@ netstat -in NameMtu Network Address Ipkts Ierrs IdropOpkts Oerrs Coll em01500 209.6.xx.yy/21 209.6.91.204 49357148 - - 54769770 - - em11500 10.0.0.0/810.0.0.1 13547336 - - 209590 - - Robert Huff ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: SIL Fonts
On 3/3/11, Jason C. Wells j...@speakeasy.net wrote: On 03/03/11 05:01, b. f. wrote: I don't _need_ ports but I do like to use them because they include management tools. thanks for the response. Right, then, I will add some ports. b. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB)
On 3/3/11 3:27 PM, Patrick Lamaiziere wrote: Hello, I've got two ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB) in one router/firewall. I use OpenBSD 4.8 on this box. That works fine, but I see some input Ierr on the interfaces (using netstat), even when the load is not very high. $ netstat -I em2 -w2 (bandwith = 150 Mbits) em2 in packets errs 43263 0 4345817 39056 0 46648 124 44783 630 42571 0 45338 0 4093233 4371384 40193 193 40491 0 I would like to know if under FreeBSD, you see this kind of Ierr? Thanks, regards. igb0@pci0:7:0:0:class=0x02 card=0x145a8086 chip=0x10d68086 rev=0x02 hdr=0x00 vendor = 'Intel Corporation' device = '82575GB Gigabit Network Connection' class = network subclass = ethernet bar [10] = type Memory, range 32, base 0xdabc, size 131072, enabled bar [14] = type Memory, range 32, base 0xdac0, size 2097152, enabled bar [18] = type I/O Port, range 32, base 0xdcc0, size 32, enabled bar [1c] = type Memory, range 32, base 0xdabb8000, size 16384, enabled cap 01[40] = powerspec 2 supports D0 D3 current D0 cap 05[50] = MSI supports 1 message, 64 bit cap 11[60] = MSI-X supports 10 messages in map 0x1c enabled cap 10[a0] = PCI-Express 2 endpoint max data 256(256) link x4(x4) ecap 0001[100] = AER 1 0 fatal 0 non-fatal 1 corrected ecap 0003[140] = Serial 1 001b2112f438 # netstat -I igb1 NameMtu Network Address Ipkts Ierrs Idrop Opkts Oerrs Coll igb1 1500 Link#4 00:1b:21:12:f4:39 20782510695 0 0 21019791814 0 0 igb1 1500 192.168.26.0 192.168.26.24958475410 - - 78206829 - - To give you an idea of what kind of load the box has: State Table Total Rate current entries33174 searches 8365655154444334.3/s inserts 7175668168 3802.8/s removals 7175634994 3802.8/s Looks good here ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
license of the code in freebsd documantation
I'm writing a script based on the code in freebsd docs, and caring about the license of it. The original scripts are example 6 and 7 of the following page. How do I have to treat my code if I distribute it? http://www.freebsd.org/doc/en/articles/ldap-auth/client.html I know freebsd docs is licensed under The FreeBSD Documantation License but don't know about codes in them. -- kiwao m...@club.kyutech.ac.jp ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Fastest way to get an entire FBSD system back online?
It's not as automated as the Windows approach, but if you know what you're doing it's mostly limited by the speed of the disks. ... Unlike Windows, UNIX gives you the ability to create a fully programmable automated approach according to your needs, e. g. for multiple installations, defective systems can be booted via LAN, USB or CD, ... Of course. But the more interesting question is whether anyone's done that, e.g., a script to put dumps and a description of the disk setup on a backup device, and a boot image that will take the description and the dumps and put them back. As far as I know, nobody has. R's, John ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB)
On 3/3/2011 9:38 AM, Mike Tancsa wrote: On 3/3/2011 9:27 AM, Patrick Lamaiziere wrote: Hello, I've got two ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB) in one router/firewall. I use OpenBSD 4.8 on this box. That works fine, but I see some input Ierr on the interfaces (using netstat), even when the load is not very high. $ netstat -I em2 -w2 (bandwith = 150 Mbits) em2 in packets errs 43263 0 4345817 39056 0 46648 124 44783 630 42571 0 45338 0 4093233 4371384 40193 193 40491 0 I would like to know if under FreeBSD, you see this kind of Ierr? what does sysctl -a dev.em On my RELENG_8 box anywhere from 150-200Mb. Its an i7 920 with HT disabled. I get the odd error when traffic might burst to ~300Mb, or if its a high pps DDoS netstat -I em3 -w2 -b input (em3) output packets errs idrops bytespackets errs bytes colls 56679 0 0 47939889 24152 09241389 0 54177 0 0 46428216 21228 07658356 0 56423 0 0 47128429 21150 07504242 0 56355 0 0 48825932 21268 07375570 0 51313 0 0 41167876 21769 07745953 0 50287 0 0 40457080 20546 07636296 0 53996 0 0 44835477 22446 08195803 0 56622 0 0 47612493 22716 09101322 0 55103 0 0 43807429 23357 09618771 0 51373 0 0 40845281 21921 07621992 0 51047 0 0 39974391 21696 08036735 0 54348 0 0 43621771 21423 08145924 0 57291 0 0 47342937 22954 07952060 0 53454 0 0 43216991 21437 08131857 0 53968 0 0 43914442 21597 08433904 0 55069 0 0 46510336 22778 07717062 0 53664 0 0 43481854 24254 09693232 0 57467 0 0 45683446 25757 09747942 0 54721 0 0 43217577 23125 09481772 0 62349 0 0 52526624 23861 09862234 0 em3@pci0:3:0:1: class=0x02 card=0x115e8086 chip=0x105e8086 rev=0x06 hdr=0x00 -- --- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, m...@sentex.net Providing Internet services since 1994 www.sentex.net Cambridge, Ontario Canada http://www.tancsa.com/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Do you have to install Apache to use sarg (and squid) with Webmin?
Hi folks, I'm trying to put a simple proxy server together, and I have installed Squid, Sarg and Webmin, all of which are working fine. When I go into webmin to add a sarg module, I don't see it anywhere as an option. Is that because I have to install Apache first? If so, how do I then add the sarg module? Thank you, Ed ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: libsphinxclient (for the pecl sphinx api)
On 3/2/11 5:35 PM, Matthew Seaman m.sea...@infracaninophile.co.uk wrote: On 02/03/2011 21:46, Tom Worster wrote: does anyone have advice on getting libsphinxclient up an running? the sphinxsearch port seems not to do it and i'm completely failing to build the client from source. Well, as maintainer of sphinxsearch, I'm sorry about that. I did have a quick look at building libsphinxclient from both the 0.9.9 and 1.10-beta sources. You're right. It's pretty broken on FreeBSD. Patches welcome! I'll be happy to add libsphinxclient support somehow -- probably as a separate port, but right now $REALLIFE is keeping me too busy to devote much time to doing ports stuff. i wish i could help. but i'm just a user, not a developer, and i find tinkering with make files and the rest is usually a mistake. Looks like there's been some significant fixes gone into the development version -- the OP might like to try grabbing the latest code from SVN (http://code.google.com/p/sphinxsearch/) and trying that. the new stuff looks very interesting but for the production systems i generally use releases of whatever it may be on the assumption that a bit more qa goes into those. that's why i'm not even dealing with sphinx 1.10 for now as it's marked as a beta. all the same, thanks for the info. tom ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Backtick versus $()
Rob Farmer rfarmer at predatorlabs.net writes: LOL - how hypocritical. This thread was four days dead then suddenly two people show up and start pushing this mksh shell, which seems to Sorry for reviving again, but I only show up as I have an “alert” set to mksh to know when it’s being discussed already. Please know that the discussion “style” of that other guy is in no way related to mksh. be part of some obscure OpenBSD fork. Actually, it’s just developed as part of it. It’s in FreeBSD® ports, you know ☺ but actively used by quite a number of operating systems, such as Android, and included with many others (Debian/*buntu, Fedora, Red Hat Enterprise Linux 6, to name just a few), and available for/on even more. Most recent addition is FreeMiNT on Atari, and I’m expecting LynxOS any time now. As stated last week, I’m not likely to come back to this thread again. Dropping in via GMane only, anyway. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Bit order == byte order??
In sys/netinet/ip.h, the first octet of the ip header structure tests the byte ordering to determine the ordering of the header length (ip_hl) and version (ip_v) fields. My question: that always works? While my reading of the language specification document leaves both the ordering of the bits within a byte and the bytes within a longer field as implementation choices, the two are independent of each other. I haven't run into a CPU where this assumption was proven incorrect. It just surprised me to see that recently___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Simplest way to deny access to a class C
Hello all. I am sorry in advance if this question sounds too stupid. I have a small server for personal use of webpages running: 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 it is working fine , no problem very stable. I just need to block some IP class C address that are always trying to discover directories or applications under the web server. They do not do and can not do anything since this server has nothing installed but i am tired of seeing in the logs all the intents they do every 2-3 seconds. I have not installed any kind of firewall yet. What do you think is the best way to accomplish this task? If possible the easiest one. I do not want to do anything else but just bloc IP's, at this moment at least. Thanks in advance. Jorge Biquez ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Do you have to install Apache to use sarg (and squid) with Webmin?
No. Apache Mod_proxy is independent of squid, even natd and ipfw; a reverse proxy? Ed Flecko edfle...@gmail.com wrote: Hi folks, I'm trying to put a simple proxy server together, and I have installed Squid, Sarg and Webmin, all of which are working fine. When I go into webmin to add a sarg module, I don't see it anywhere as an option. Is that because I have to install Apache first? If so, how do I then add the sarg module? Thank you, Ed ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Simplest way to deny access to a class C
Adding null routes to the address space in question will prevent comms, but it won't stop traffic getting to you and then perhaps being logged. Some sort of firewall with a policy that denies them without logging? - Original Message - From: Jorge Biquez [mailto:jbiq...@intranet.com.mx] Sent: Thursday, March 03, 2011 10:59 AM To: freebsd-questions@freebsd.org freebsd-questions@freebsd.org Subject: Simplest way to deny access to a class C Hello all. I am sorry in advance if this question sounds too stupid. I have a small server for personal use of webpages running: 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 it is working fine , no problem very stable. I just need to block some IP class C address that are always trying to discover directories or applications under the web server. They do not do and can not do anything since this server has nothing installed but i am tired of seeing in the logs all the intents they do every 2-3 seconds. I have not installed any kind of firewall yet. What do you think is the best way to accomplish this task? If possible the easiest one. I do not want to do anything else but just bloc IP's, at this moment at least. Thanks in advance. Jorge Biquez ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org font size=1 div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in' /div This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system. /font ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Simplest way to deny access to a class C
Since you currently have NO firewall, then I would say the simplest method would be to turn one on, and create an open ruleset allowing all traffic, then add a filter rule to just block out what you do not want. However, having said this is the simplest way - it is not the best or even a really good way. Firewall should be inclusive; designed to only allow what you DO want and ignore/drop everything else. Please see: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html for a good explanation and overview. Some firewalls can be used as modules with the generic kernel, some will require you to compile a custom kernel - again there are advantages/disadvantages to either approach. Personally I use IPFW for simple stuff, and PF when it gets more complex, but that's just me. On Thu, Mar 3, 2011 at 11:59 AM, Jorge Biquez jbiq...@intranet.com.mxwrote: Hello all. I am sorry in advance if this question sounds too stupid. I have a small server for personal use of webpages running: 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 it is working fine , no problem very stable. I just need to block some IP class C address that are always trying to discover directories or applications under the web server. They do not do and can not do anything since this server has nothing installed but i am tired of seeing in the logs all the intents they do every 2-3 seconds. I have not installed any kind of firewall yet. What do you think is the best way to accomplish this task? If possible the easiest one. I do not want to do anything else but just bloc IP's, at this moment at least. Thanks in advance. Jorge Biquez ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org -- Nathan Vidican nat...@vidican.com (519) 962-9987 (Canada) (313) 586-1982 (USA) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Simplest way to deny access to a class C
Install a wins server to stop netbios requests and a dhcp server or denying the dhcp requests won't stop them. Use natd to forward them. Jorge Biquez jbiq...@intranet.com.mx wrote: Hello all. I am sorry in advance if this question sounds too stupid. I have a small server for personal use of webpages running: 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 it is working fine , no problem very stable. I just need to block some IP class C address that are always trying to discover directories or applications under the web server. They do not do and can not do anything since this server has nothing installed but i am tired of seeing in the logs all the intents they do every 2-3 seconds. I have not installed any kind of firewall yet. What do you think is the best way to accomplish this task? If possible the easiest one. I do not want to do anything else but just bloc IP's, at this moment at least. Thanks in advance. Jorge Biquez ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Fastest way to get an entire FBSD system back online?
On Thu, 3 Mar 2011, John Levine wrote: It's not as automated as the Windows approach, but if you know what you're doing it's mostly limited by the speed of the disks. ... Unlike Windows, UNIX gives you the ability to create a fully programmable automated approach according to your needs, e. g. for multiple installations, defective systems can be booted via LAN, USB or CD, ... Of course. But the more interesting question is whether anyone's done that, e.g., a script to put dumps and a description of the disk setup on a backup device, and a boot image that will take the description and the dumps and put them back. As far as I know, nobody has. Sometimes called bare-metal restore. The tools are there, but I haven't seen it done with FreeBSD, either. Handling media changes might be a little tricky for, say, a multi-DVD restore. And of course it should have a suitably scary This will destroy the system you are running! warning. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Backtick versus $()
On Thu, Mar 3, 2011 at 11:58 AM, Thorsten Glaser t...@mirbsd.org wrote: Rob Farmer rfarmer at predatorlabs.net writes: LOL - how hypocritical. This thread was four days dead then suddenly two people show up and start pushing this mksh shell, which seems to Sorry for reviving again, but I only show up as I have an “alert” set to mksh to know when it’s being discussed already. Please know that the discussion “style” of that other guy is in no way related to mksh. bash is better than mksh be part of some obscure OpenBSD fork. Actually, it’s just developed as part of it. It’s in FreeBSD® ports, you know ☺ but actively used by quite a number of operating systems, such as Android, and included with many others (Debian/*buntu, Fedora, Red Hat Enterprise Linux 6, to name just a few), and available for/on even more. Most recent addition is FreeMiNT on Atari, and I’m expecting LynxOS any time now. As stated last week, I’m not likely to come back to this thread again. Dropping in via GMane only, anyway. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Simplest way to deny access to a class C
Ps what log are you reading? Lol Michael J. Kearney mkear...@nvita.org wrote: Install a wins server to stop netbios requests and a dhcp server or denying the dhcp requests won't stop them. Use natd to forward them. Jorge Biquez jbiq...@intranet.com.mx wrote: Hello all. I am sorry in advance if this question sounds too stupid. I have a small server for personal use of webpages running: 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 it is working fine , no problem very stable. I just need to block some IP class C address that are always trying to discover directories or applications under the web server. They do not do and can not do anything since this server has nothing installed but i am tired of seeing in the logs all the intents they do every 2-3 seconds. I have not installed any kind of firewall yet. What do you think is the best way to accomplish this task? If possible the easiest one. I do not want to do anything else but just bloc IP's, at this moment at least. Thanks in advance. Jorge Biquez ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB)
Le Thu, 3 Mar 2011 15:27:12 +0100, Patrick Lamaiziere patf...@davenulle.org a écrit : I would like to know if under FreeBSD, you see this kind of Ierr? Thanks to all, I think I should have a try with FreeBSD so. Regards. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Ethernet cards Intel PRO/1000 QP (82571EB) and Intel PRO/1000 QP (82575GB)
On 3/3/11 7:40 PM, Patrick Lamaiziere wrote: Le Thu, 3 Mar 2011 15:27:12 +0100, Patrick Lamaiziere patf...@davenulle.org a écrit : I would like to know if under FreeBSD, you see this kind of Ierr? Thanks to all, I think I should have a try with FreeBSD so. Regards. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org Make sure you try under freebsd 8.2 as the igb driver was improved, as pointed out by Jack Vogel from Intel. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
snd_hda and via codec: no sound or full volume
Hello, A friend has a computer with a HDA VIA codec, he told me when he's trying to increase/decrease vol with mixer nothing happens : in fact only mixer vol 0 or mixer vol 1 change something. The values between 1-100 are the same volume. This is dmesg about snd_hda with verbose mode : http://files.malikania.fr/snd-hda.txt and /dev/sndstat: FreeBSD Audio Driver (newpcm: 64bit 2009061500/amd64) Installed devices: pcm0: HDA VIA VT1708S_0 PCM #0 Analog (play/rec) default pcm1: HDA VIA VT1708S_0 PCM #1 Digital (play) What happens? Cheers, -- David Demelier ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: mysql missing from my home-page WordPress....
On 03/01/2011 03:50 PM, Gary Kline wrote: On Tue, Mar 01, 2011 at 04:03:13PM -0500, Glenn Sieb wrote: On 3/1/11 3:53 PM, Gary Kline wrote: Any clues why I get a one-liner from wordpress that my database extention is missing? I re-installed everything; it is running. The wordpress db is there when I check 'show database'. What else? Check and make sure the MySQL extensions are installed in PHP? pkg_info | grep php5-mysql (if not..) cd /usr/ports/databases/php5-mysql make install clean Good luck! --Glenn This was the first thing I [re-] installed. q0 14:47 Serverethic [5001] pkg_info | gr php5-mysql 470:php5-mysql-5.3.5The mysql shared extension for php 471:php5-mysqli-5.3.5 The mysqli shared extension for php q0 14:47 Serverethic [5002] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org I had a similar problem with PHP after I upgraded it. The location of the php extensions had changed, but my php.ini was still pointing to the old location of the modules. You may want to double check the path and make sure they're both the same. If not, I recommend copying in the new .default php.ini file and make your custom changes there, as there were recently many settings changed/added in the latest PHP version. -- Thanks, John D Jones III freebsd-questi...@bsdgeeks4u.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Simplest way to deny access to a class C
On Thu, Mar 03, 2011 at 10:59:59AM -0600, Jorge Biquez wrote: Hello all. I am sorry in advance if this question sounds too stupid. I have a small server for personal use of webpages running: 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 it is working fine , no problem very stable. I just need to block some IP class C address that are always trying to discover directories or applications under the web server. They do not do and can not do anything since this server has nothing installed but i am tired of seeing in the logs all the intents they do every 2-3 seconds. I have not installed any kind of firewall yet. What do you think is the best way to accomplish this task? If possible the easiest one. I do not want to do anything else but just bloc IP's, at this moment at least. Thanks in advance. Jorge Biquez I'm assuming you're running Apache, in which case you can block addresses using .htaccess http://www.webmasterworld.com/apache/3118159.htm Regards, -- Frank Contact info: http://www.shute.org.uk/misc/contact.html pgp1c3llyGMXM.pgp Description: PGP signature
Re: mysql missing from my home-page WordPress....
Wordpress install ftw I created a new database manually Http://www.inverselog.info John D Jones III freebsd-questi...@bsdgeeks4u.com wrote: On 03/01/2011 03:50 PM, Gary Kline wrote: On Tue, Mar 01, 2011 at 04:03:13PM -0500, Glenn Sieb wrote: On 3/1/11 3:53 PM, Gary Kline wrote: Any clues why I get a one-liner from wordpress that my database extention is missing? I re-installed everything; it is running. The wordpress db is there when I check 'show database'. What else? Check and make sure the MySQL extensions are installed in PHP? pkg_info | grep php5-mysql (if not..) cd /usr/ports/databases/php5-mysql make install clean Good luck! --Glenn This was the first thing I [re-] installed. q0 14:47 Serverethic [5001] pkg_info | gr php5-mysql 470:php5-mysql-5.3.5The mysql shared extension for php 471:php5-mysqli-5.3.5 The mysqli shared extension for php q0 14:47 Serverethic [5002] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org I had a similar problem with PHP after I upgraded it. The location of the php extensions had changed, but my php.ini was still pointing to the old location of the modules. You may want to double check the path and make sure they're both the same. If not, I recommend copying in the new .default php.ini file and make your custom changes there, as there were recently many settings changed/added in the latest PHP version. -- Thanks, John D Jones III freebsd-questi...@bsdgeeks4u.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Kernel compiling problems
On 25/02/2011 12:21, Redd Vinylene wrote: Heya! Anybody know what's wrong with this? ## make buildworld buildkernel KERNCONF=NINJA cc -c -O2 -pipe -fno-strict-aliasing -std=c99 -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual -Wundef -Wno-pointer-sign -fformat-extensions -nostdinc -I. -I/usr/src/sys -I/usr/src/sys/contrib/altq -D_KERNEL -DHAVE_KERNEL_OPTION_HEADERS -include opt_global.h -fno-common -finline-limit=8000 --param inline-unit-growth=100 --param large-function-growth=1000 -mno-align-long-strings -mpreferred-stack-boundary=2 -mno-mmx -mno-3dnow -mno-sse -mno-sse2 -mno-sse3 -ffreestanding -fstack-protector -Werror /usr/src/sys/kern/sysv_msg.c /usr/src/sys/kern/sysv_msg.c:163: error: invalid application of 'sizeof' to incomplete type 'struct freebsd7_msgctl_args' /usr/src/sys/kern/sysv_msg.c:163: error: 'freebsd7_msgctl' undeclared here (not in a function) /usr/src/sys/kern/sysv_msg.c:1463: error: initializer element is not constant /usr/src/sys/kern/sysv_msg.c:1463: error: (near initialization for 'msgcalls[0]') cc1: warnings being treated as errors /usr/src/sys/kern/sysv_msg.c:1507: warning: function declaration isn't a prototype /usr/src/sys/kern/sysv_msg.c: In function 'freebsd7_msgctl': /usr/src/sys/kern/sysv_msg.c:1516: error: dereferencing pointer to incomplete type /usr/src/sys/kern/sysv_msg.c:1516: error: request for member 'cmd' in something not a structure or union /usr/src/sys/kern/sysv_msg.c:1516: warning: comparison between pointer and integer /usr/src/sys/kern/sysv_msg.c:1517: error: dereferencing pointer to incomplete type /usr/src/sys/kern/sysv_msg.c:1517: error: request for member 'buf' in something not a structure or union /usr/src/sys/kern/sysv_msg.c:1532: error: dereferencing pointer to incomplete type /usr/src/sys/kern/sysv_msg.c:1532: error: request for member 'msqid' in something not a structure or union /usr/src/sys/kern/sysv_msg.c:1532: error: dereferencing pointer to incomplete type /usr/src/sys/kern/sysv_msg.c:1532: error: request for member 'cmd' in something not a structure or union /usr/src/sys/kern/sysv_msg.c:1532: warning: passing argument 2 of 'kern_msgctl' makes integer from pointer without a cast /usr/src/sys/kern/sysv_msg.c:1532: warning: passing argument 3 of 'kern_msgctl' makes integer from pointer without a cast /usr/src/sys/kern/sysv_msg.c:1535: error: dereferencing pointer to incomplete type /usr/src/sys/kern/sysv_msg.c:1535: error: request for member 'cmd' in something not a structure or union /usr/src/sys/kern/sysv_msg.c:1535: warning: comparison between pointer and integer /usr/src/sys/kern/sysv_msg.c:1548: error: dereferencing pointer to incomplete type /usr/src/sys/kern/sysv_msg.c:1548: error: request for member 'buf' in something not a structure or union *** Error code 1 Stop in /usr/obj/usr/src/sys/NINJA. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. ## /usr/obj/usr/src/sys/NINJA cpu I586_CPU ident NINJA options SCHED_ULE options PREEMPTION options FFS options SOFTUPDATES options UFS_ACL options UFS_DIRHASH options UFS_GJOURNAL options MD_ROOT options MSDOSFS options CD9660 options PROCFS options PSEUDOFS options COMPAT_43 options COMPAT_FREEBSD4 options COMPAT_FREEBSD5 options COMPAT_FREEBSD6 options KTRACE options SYSVSHM options SYSVMSG options SYSVSEM options KBD_INSTALL_CDEV options _KPOSIX_PRIORITY_SCHEDULING device pci device sio device ata device atadisk device atapicd options ATA_STATIC_ID device fdc device atkbdc device atkbd device psm device vga device splash device sc device sound device ether device miibus device rl device ep device loop device random device tun device pty device md options AUDIT options INET options INET6 device gif device faith device bpf device pf device pflog device pfsync options ALTQ options ALTQ_CBQ options ALTQ_RED options ALTQ_RIO options ALTQ_HFSC options ALTQ_PRIQ ## uname -v FreeBSD 7.0-STABLE #0: Thu Jul 24 18:57:08 CEST 2008 ## /etc/cvsupfile *default host=cvsup.no.FreeBSD.org *default base=/var/db *default prefix=/usr *default release=cvs tag=RELENG_8 *default delete use-rel-suffix src-all doc-all tag=. Many thanks! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org I hope you're not running buildworld eachtime you try to compile the kernel :p -- David Demelier ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Kernel compiling problems
Heya! Anybody know what's wrong with this? ## make buildworld buildkernel KERNCONF=NINJA ... /usr/src/sys/kern/sysv_msg.c:163: error: invalid application of 'sizeof' to incomplete type 'struct freebsd7_msgctl_args This error message is suggestive. ;) options COMPAT_FREEBSD4 options COMPAT_FREEBSD5 options COMPAT_FREEBSD6 Upgrading from 7.x to 8.x, eh? But I think you forgot to update parts of your kernel config. From src/sys/conf/NOTES: Note that as a general rule, COMPAT_FREEBSDn depends on COMPAT_FREEBSDn+1, COMPAT_FREEBSDn+2, etc. ... up until m-1, where m is the FreeBSD version you are building. So if you have COMPAT_FREEBSD[456], you need COMPAT_FREEBSD7 as well. (When running 7.x, you didn't need it, of course.) b. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Bit order == byte order??
On Thu, Mar 03, 2011 at 11:26:12AM -0500, Frank Solensky wrote: In sys/netinet/ip.h, the first octet of the ip header structure tests the byte ordering to determine the ordering of the header length (ip_hl) and version (ip_v) fields. My question: that always works? While my reading of the language specification document leaves both the ordering of the bits within a byte and the bytes within a longer field as implementation choices, the two are independent of each other. I haven't run into a CPU where this assumption was proven incorrect. It just surprised me to see that recently Unless you have a CPU where memory is addressed bit-by-bit rather than byte-by-byte the ordering of bits within a byte is not only completely irrelevant, it is also pretty much impossible to determine programatically. -- Insert your favourite quote here. Erik Trulsson ertr1...@student.uu.se ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
xdm-options - non-bsd user needs bsd rc.d advice
Hi. I'm a BSD idiot I use [Debian] linux. rc.d question I'm trying to release a project (just below) to the widest possible unix audience. I need a line in /etc/inittab and to have a start/stop in /etc/rc.d, nothing unusual I think. I read many freeBSD rc.d materials and it only convinced me as much as I'd learned: if I'm not running BSD I don't know enough to talk about it :) I'm not sure how a real BSD hacker would place a simple start stop. Not where or how, not even after reading the docs. Also I'm not sure the project is good enough to warrant further testing / if the casual user might save time / effort with it. Tell me what you think if you have time! Who doesn't want feedback? http://sourceforge.net/projects/xdm-options/ https://sourceforge.net/projects/xdm-options/ (second has httpS) (xdm sample scripts but complete / round trip. chooser, login, desktop chooser, xdm server: by menu with no hacking required on any unix, saving the casual xdm interested person time in use or setup, is my hope) ... it uses no libs at all If anyone would like to quickly comment I'd love to hear why bsd would be a better choice than ubantu (for what audience it is better). Thanks all, John ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
No Handbook in 8.2
There seems to be no FreeBSD handbook in the 8.2 installation, likewise 8.0 and 8.1 (see http://docs.freebsd.org/doc/). Is this a botch or something else? Heidi ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: xdm-options - non-bsd user needs bsd rc.d advice
On Thu, Mar 03, 2011 at 05:01:10PM -0500, John D. Hendrickson and Sara Darnell wrote: Hi. I'm a BSD idiot I use [Debian] linux. [snip] If anyone would like to quickly comment I'd love to hear why bsd would be a better choice than ubantu (for what audience it is better). FreeBSD is definitely a better choice for *me* than Debian, or (worse yet) Ubuntu. I'm temporarily stuck in a hell of my own making, of sorts, because I installed Debian on a laptop I bought to make up for the fact that I managed to buy a laptop for which FreeBSD does not yet have complete graphics support (Intel HD video). The end result is significant annoyance. Debian, since I used it regularly about half a decade ago, has become increasingly complicated by attempts to guess what users want and provide it. This approach tends to result in making it very difficult to do things differently if you want to. Problems I'm encountering right now mostly center around networking issues -- for some asinine reason, it will connect to my WPA encrypted wireless network at home, but not to an open wireless network at a coffee shop. It makes no reasonable sense. With FreeBSD, it would be a trivial exercise to make it work. Worst-case scenario, I could just change a couple of lines in /etc/rc.d and enter the /etc/rc.d/netif restart command. On Debian, I've tried about half a dozen different approaches to getting it to connect to the coffee shop network, including more than one GUI with a seriously suboptimal interface, with no luck; it just keeps failing to get an IP address. I'm pretty sure there's some kind of automagical DWIMmery going on behind the scenes, trying to guess what I want it to do and doing it without my permission, and getting its guesses *wrong*. The upshot is this: FreeBSD is better for people who like essentially deterministic behavior out of their OSes, where the same input produces the same output, with (little or) no chance of it blowing up in your face or just stubbornly refusing to let you do what you want to do because some developer somewhere set up automagical default management based on what *he* thinks you *really* want to do. Debian to some extent, and Ubuntu to a far greater extent, is for people who don't want to know anything about what the system is doing under the hood, to the extent that if the system doesn't get it right automatically the person will refuse to actually spend any time learning enough about the system to fix the problem. Things are getting positively Microsoftish. In case you couldn't tell, I'm frustrated. I'm beginning to wonder whether having 4:3 resolution stretched out to a 16:9 aspect ratio display might be a lesser evil than using Debian, when it is even more annoying now (relative to FreeBSD) than it was five years ago. tl;dr summary: FreeBSD is power-user friendly. Linux-based systems are getting increasingly dumbed-down user obsequious, to the detriment of people who like being able to customize the system's behavior (or, y'know, actually troubleshoot it at all). -- Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ] pgp9MT6EerY3q.pgp Description: PGP signature
No Handbook in 8.2
Heidi Wyss writes: There seems to be no FreeBSD handbook in the 8.2 installation, likewise 8.0 and 8.1 (see http://docs.freebsd.org/doc/). Is this a botch or something else? Documentation is now included as a port, one per language. See e.g. misc/freebsd-doc-en. Robert Huff ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Simplest way to deny access to a class C
You might consider mod_security (/usr/ports/www/mod_security) which can be set up to ban hosts based on behaviour or characteristics. Or fail2ban (/usr/ports/security/py-fail2ban) is really great, too, in that it scans whatever logs you want, and can trigger a block in your firewall if enough violating log entries are found within a particular period of time. Everything is totally configurable, and there are plenty of examples that come with it. Patrick On Thu, Mar 3, 2011 at 8:59 AM, Jorge Biquez jbiq...@intranet.com.mx wrote: Hello all. I am sorry in advance if this question sounds too stupid. I have a small server for personal use of webpages running: 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 it is working fine , no problem very stable. I just need to block some IP class C address that are always trying to discover directories or applications under the web server. They do not do and can not do anything since this server has nothing installed but i am tired of seeing in the logs all the intents they do every 2-3 seconds. I have not installed any kind of firewall yet. What do you think is the best way to accomplish this task? If possible the easiest one. I do not want to do anything else but just bloc IP's, at this moment at least. Thanks in advance. Jorge Biquez ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
RE: Simplest way to deny access to a class C
Be careful of automated responses. What if someone spoofs IP's of legit users / customers / whatever and your automated response blocks them? Not good. I thought about blockingwell, never mind - might pi$$ someone off and attract unwanted attention... -Original Message- From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Patrick Gibson Sent: Thursday, March 03, 2011 5:58 PM To: Jorge Biquez Cc: freebsd-questions@freebsd.org Subject: Re: Simplest way to deny access to a class C You might consider mod_security (/usr/ports/www/mod_security) which can be set up to ban hosts based on behaviour or characteristics. Or fail2ban (/usr/ports/security/py-fail2ban) is really great, too, in that it scans whatever logs you want, and can trigger a block in your firewall if enough violating log entries are found within a particular period of time. Everything is totally configurable, and there are plenty of examples that come with it. Patrick On Thu, Mar 3, 2011 at 8:59 AM, Jorge Biquez jbiq...@intranet.com.mx wrote: Hello all. I am sorry in advance if this question sounds too stupid. I have a small server for personal use of webpages running: 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 it is working fine , no problem very stable. I just need to block some IP class C address that are always trying to discover directories or applications under the web server. They do not do and can not do anything since this server has nothing installed but i am tired of seeing in the logs all the intents they do every 2-3 seconds. I have not installed any kind of firewall yet. What do you think is the best way to accomplish this task? If possible the easiest one. I do not want to do anything else but just bloc IP's, at this moment at least. Thanks in advance. Jorge Biquez ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org font size=1 div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in' /div This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system. /font ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: mysql missing from my home-page WordPress....
On Thu, Mar 03, 2011 at 02:34:56PM -0500, Michael J. Kearney wrote: Wordpress install ftw I created a new database manually Http://www.inverselog.info John D Jones III freebsd-questi...@bsdgeeks4u.com wrote: On 03/01/2011 03:50 PM, Gary Kline wrote: On Tue, Mar 01, 2011 at 04:03:13PM -0500, Glenn Sieb wrote: On 3/1/11 3:53 PM, Gary Kline wrote: Any clues why I get a one-liner from wordpress that my database extention is missing? I re-installed everything; it is running. The wordpress db is there when I check 'show database'. What else? Check and make sure the MySQL extensions are installed in PHP? pkg_info | grep php5-mysql (if not..) cd /usr/ports/databases/php5-mysql make install clean Good luck! --Glenn This was the first thing I [re-] installed. q0 14:47 Serverethic [5001] pkg_info | gr php5-mysql 470:php5-mysql-5.3.5The mysql shared extension for php 471:php5-mysqli-5.3.5 The mysqli shared extension for php q0 14:47 Serverethic [5002] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org I had a similar problem with PHP after I upgraded it. The location of the php extensions had changed, but my php.ini was still pointing to the old location of the modules. You may want to double check the path and make sure they're both the same. If not, I recommend copying in the new .default php.ini file and make your custom changes there, as there were recently many settings changed/added in the latest PHP version. -- Thanks, John D Jones III freebsd-questi...@bsdgeeks4u.com Thanks duly noted to everyone. I was beginning to wonder if I had lost what mind I've got left! Not used to losing my two trial blog, (1), and beyond that, being dumbfounded at how messy it may be to keep WP current. (2) All of a sudden I'm thinking [[*hmmm, well, censored*]]. -g ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix Journey Toward the Dawn, E-Book: http://www.thought.org The 7.98a release of Jottings: http://jottings.thought.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
RE: Simplest way to deny access to a class C
Thank you all for your time and comments. I guess that I will install a firewall, that way I can also block those Class C's from sending tons of emails to non existing accounts I will read the website to see the best options. Any suggestion is more than welcome. Jorge Biquez At 06:02 p.m. 03/03/2011, you wrote: Be careful of automated responses. What if someone spoofs IP's of legit users / customers / whatever and your automated response blocks them? Not good. I thought about blockingwell, never mind - might pi$$ someone off and attract unwanted attention... -Original Message- From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Patrick Gibson Sent: Thursday, March 03, 2011 5:58 PM To: Jorge Biquez Cc: freebsd-questions@freebsd.org Subject: Re: Simplest way to deny access to a class C You might consider mod_security (/usr/ports/www/mod_security) which can be set up to ban hosts based on behaviour or characteristics. Or fail2ban (/usr/ports/security/py-fail2ban) is really great, too, in that it scans whatever logs you want, and can trigger a block in your firewall if enough violating log entries are found within a particular period of time. Everything is totally configurable, and there are plenty of examples that come with it. Patrick On Thu, Mar 3, 2011 at 8:59 AM, Jorge Biquez jbiq...@intranet.com.mx wrote: Hello all. I am sorry in advance if this question sounds too stupid. I have a small server for personal use of webpages running: 7.3-PRERELEASE FreeBSD 7.3-PRERELEASE #0 it is working fine , no problem very stable. I just need to block some IP class C address that are always trying to discover directories or applications under the web server. They do not do and can not do anything since this server has nothing installed but i am tired of seeing in the logs all the intents they do every 2-3 seconds. I have not installed any kind of firewall yet. What do you think is the best way to accomplish this task? If possible the easiest one. I do not want to do anything else but just bloc IP's, at this moment at least. Thanks in advance. Jorge Biquez ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org font size=1 div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in' /div This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system. /font ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: mysql missing from my home-page WordPress....
Hello, Thanks duly noted to everyone. I was beginning to wonder if I had lost what mind I've got left! Not used to losing my two trial blog, (1), and beyond that, being dumbfounded at how messy it may be to keep WP current. (2) It seems to me you are making you life more difficult with WP than it needs to be. Keeping WP current is a piece of cake, and you do not need to do it via ports. WP has built-in ftp capabilities and once you provide it with proper credentials, upgrading is as easy as clicking the upgrade button from within WP admin interface. This way you can keep multiple WP installations and easily maintain them. :) Warm regards, Zbigniew Szalbot ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
