Re: Anyone using squid and pf?

2012-11-26 Thread Volodymyr Kostyrko

24.11.2012 17:39, Leslie Jensen:


I've upgraded squid from 3.1 to 3.2. Starting squid 3.2 with the same
configuration file now gives me errors in cache.log when one tries to
access any site, and of course no access!

2012/11/24 16:24:56 kid1| WARNING: Forwarding loop detected for:

Reverting back to 3.1 works.

I know there are some changes in 3.2 that does this

+ 3.2 intercept port receiving forward-proxy requests will reject them
due to NAT failure/lies.

+ 3.2 Host header validation *will* reject if forward traffic is
validated as being intercepted.

I would appreciate suggestions for changes to squid.conf so that squid
will work for me with version 3.2.


When switching to 3.2 I had to split listening ports - one for 
transparency and one for the local machine. However this doesn't looks 
like your case.


Can you please provide relevant parts of pf.conf and full log output, 
not just the first line?


--
Sphinx of black quartz, judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: VPS FreeBSD Hosting

2012-11-26 Thread Arthur Chance

On 11/25/12 22:07, Michael Sierchio wrote:

Top-posting for brevity.  I use EC2.  You can start with Colin
Percival's HVM instances - I run a Xen kernel using a modified version
of his original scheme - which is to have a 1GB Linux partition
running grub to boot from a FreeBSD disk.  I'm happy to share an AMI
with you, but you should try Colin's stuff.

On Sun, Nov 25, 2012 at 1:08 PM, Jim Flowers jflow...@ezo.net wrote:

I gave up maintaining my own hardware for providing cloud computing
services about 10 years ago and have been using several dedicated server
services with root-access FreeBSD since about 6.0. with good results. At
the time VPS looked like too many problems.


FreeBSD is now officially supported by Amazon (but still supplied by 
Colin) as well as Colin's defenestrated FreeBSD AMIs.


http://aws.typepad.com/aws/2012/11/aws-marketplace-additional-operating-system-support.html

https://aws.amazon.com/marketplace/pp/B00AA25MLK/ref=sp_mpg_product_title?ie=UTF8sr=0-2

However, these are only on the new 3rd generation of EC2 instances, 
which are heavy duty systems. For many uses micro instances are enough, 
but you still have to pay the Windows tax on those. I don't know 
whether Colin is working to change that, or if there are technical 
reasons why it's impossible.


http://www.daemonology.net/freebsd-on-ec2/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread jb
Tim Daneliuk tundra at tundraware.com writes:

 ... 
  I use portsnap fetch update and it works...
 
 Ah, maybe that was the problem.  That works for me as well.

Well, not quite ...
# portsnap fetch update
Looking up portsnap.FreeBSD.org mirrors... 6 mirrors found.
Fetching snapshot tag from ec2-eu-west-1.portsnap.freebsd.org... done.
Ports tree hasn't changed since last snapshot.
No updates needed.
Ports tree is already up to date.
# ls -al /usr/ports/IN*
-rw-r--r--  1 root  wheel  26879548 Nov 26 11:50 /usr/ports/INDEX-7
-rw-r--r--  1 root  wheel  26763551 Nov 26 11:50 /usr/ports/INDEX-8
-rw-r--r--  1 root  wheel  26665016 Nov 26 11:53 /usr/ports/INDEX-9
-rw-r--r--  1 root  wheel   1654048 Nov 11 11:45 /usr/ports/INDEX-9.bz2
# portmaster -L | egrep '(ew|ort) version|total install'=== New 
version
available: java-zoneinfo-2012.j
=== New version available: liberation-fonts-ttf-2.00.1,1
=== New version available: libxul-10.0.11
=== New version available: firefox-17.0,1
=== New version available: libreoffice-3.5.7
=== New version available: vigra-1.9.0
=== 545 total installed ports
=== 6 have new versions available
# portmaster -L --index-only | egrep '(ew|ort) version|total install'
=== New version available: libreoffice-3.5.7
=== 545 total installed ports
=== 1 has a new version available
# portmaster -L --index | egrep '(ew|ort) version|total install'
=== New version available: libreoffice-3.5.7
=== 545 total installed ports
=== 1 has a new version available
#



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Tim Daneliuk

On 11/25/2012 11:17 PM, Warren Block wrote:

On Sun, 25 Nov 2012, Matthew Seaman wrote:


On 25/11/2012 23:10, Tim Daneliuk wrote:

After the recent security scare, I know the ports tree was temporarily
frozen.  Does anyone know when it will again be updates.  I just upgraded
to 9.1-PRE and need to rebuild Firefox  Thunderbird against the new
libraries and ... they're broken, marked as security hazards...


It's been being updated normally since near enough a week ago.
Normally means subject to the pre-9.1-RELEASE restrictions on sweeping
changes as is usual at this point in a release cycle.

FireFox 17 and Thunderbird 17 updates were committed to ports on 20th
November.


Hmm.  Is the index file being rebuilt?  With FF16 installed, and 17 in the port directory, 
portsdb -Fu  portversion -vl'' shows nothing to update.

After 'make index', it does show.


The problem was that I was missing the 'fetch' verb in my portsnap command.

--

Tim Daneliuk tun...@tundraware.com
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Tim Daneliuk

On 11/26/2012 01:30 AM, Matthew Seaman wrote:

On 26/11/2012 00:59, Tim Daneliuk wrote:

I use portsnap fetch update and it works...


Ah, maybe that was the problem.  That works for me as well.



Ummm... how long have you been using portsnap?  If you haven't been
running 'portsnap fetch' or 'portsnap cron' then you won't have received
any updates to your ports tree, ever.

This is all explained quite clearly in the portsnap(8) man page.

Cheers,

Matthew



I just switched from csup last week and am still learning the ropes.

--

Tim Daneliuk tun...@tundraware.com
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: error message

2012-11-26 Thread Polytropon
On Sun, 25 Nov 2012 22:44:57 -0700, emmanuel ilunga wrote:
 Hello,
 
 By ignorance, I named the host: machine0.example.com (just following what
 I saw.)

Even though this has nothing to do with the error message you
got, the name example.com is intended for _examples_ and not
for actual use. It will usually be found in documentation and
has the meaning of change this to what applies in _your_ case
if you follow this example.

Typical suggestions could be machine0.local or fbsd9.localdomain.
If _may_ be possible that your ISP requires you do enter a
specific host and domain name, or your setting requires this.
There might be rules you have to follow. Besides, _you_ will
decide about the name.

You can change this information easily in /etc/rc.conf, it's
the following setting:

hostname=hostname.domainname

You could also provide corresponding entries in /etc/hosts.



 Every time I reboot, I get: machine0# Nov26 04:37:03 machine0
 ntpd_initrest[2008]:host name not found: 0.freebsd.pool.org

The error message indicates that the name of the time server
(for NTP), called 0.freebsd.pool.org, cannot be resolved to an
IP. You should check your Internet connection and the setting
for the resolver in /etc/resolv.conf. Can you access other
machines on the Internet?

This is what you should be able to do:

% host 0.freebsd.pool.org
0.freebsd.pool.org has address 64.99.80.30



 I get this error, unless I enter my login info; and after I had entered my
 login info, if I don't do anything else right away, this error message
 comes back.

That's normal as NTP tries to make a connection to the specified
server as long as it's running. You'll find the NTP related settings
(ntpdate, ntpd) in /etc/rc.conf, plus examples and explanations
in /etc/defaults/rc.conf.



 And the time is wrong too.

Of course the time is wrong: It could not be adjusted because the
required Internet connection to obtain the current time could not
be made.

You can manually set the time using the date command.
See man date for details.



 Also, I received 4 installer discs: 2 installers and 2 important packages
 (2 for amd64 and 2 for i386), how do I read the appropriate Important
 Packages disc in?

According to what architecture you're using (i386 _or_ amd64),
you would probably use bsdinstall to deal with those discs
(at least the older installer, sysinstall, could be used
to install packages from the CDs or DVDs, so I assume this
functionality would also be part of bsdinstall).

The discs contain precompiled binary packages that you _can_
install (there is basically no need that forces you to install
all of them!) by using the system's package management command,
pkg_add (resp. pkg add). Simply mount the disc and install what
you need. Those discs are typically provided for offline use
when you cannot download software from the Internet.

I assume you're using FreeBSD 9 already. In this case, refering
to The FreeBSD Handbook about the steps of installation might
be a good idea:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/bsdinstall.html

I've got no deeper experience with bsdinstall so far, that's
why I can't be more specific, sorry.



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Odhiambo Washington
On Mon, Nov 26, 2012 at 3:48 PM, Tim Daneliuk tun...@tundraware.com wrote:

 On 11/26/2012 01:30 AM, Matthew Seaman wrote:

 On 26/11/2012 00:59, Tim Daneliuk wrote:

 I use portsnap fetch update and it works...


 Ah, maybe that was the problem.  That works for me as well.


 Ummm... how long have you been using portsnap?  If you haven't been
 running 'portsnap fetch' or 'portsnap cron' then you won't have received
 any updates to your ports tree, ever.

 This is all explained quite clearly in the portsnap(8) man page.

 Cheers,

 Matthew


 I just switched from csup last week and am still learning the ropes.


I am starting to switch, and after all the discussions in this thread, I
replaced my csup cron entry with the following:

portsnap fetch  portsnap extract  portsnap update

Initially I just had `csup -z -L 2 /usr/share/examples/cvsup/9.x-ports`
where 9.x-ports was an edited version of ports-supfile.

Now I have an /etc/portsnap.con with the equivalent edits from my 9.x-ports

Is this how best to do it?


And now I need to find an alternative to handle the src updates using svn
or something...


-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
I can't hear you -- I'm using the scrambler.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


bge driver for BCM5719 not working (9.1-RC3)

2012-11-26 Thread Ewald Jenisch
Hi,

I'm having a hard time getting FreeBSD 9.1 RC3 running on a HP
Proliant 385p G8. 

Installation runs so far, however I can't get any network interfaces
up and running.

The output of dmesg ... link states coalesced messages and
correspondigly in /var/log/messages I have numerous messages like
bge0: link state changed to UP, followed by bge0: link state
changed to DOWN.

I've already ruled out the following:

o) Wiring - OK (even changed cable)
o) different switchport
o) Check for latest firmware on machine including iLO - already got that

The problem is that I can't connect to the network in any way, so I'm
stuck with my installation off the ISO-image with no way of updating
my system :-(

Interestingly enough the MAC-address of the machine in question shows
up on the switch, so the server does have a link to the switch -
without being able to communicate though.

Digging around I came across the following PR:

http://www.freebsd.org/cgi/query-pr.cgi?pr=171121

So here are my questions:

o) Is there any chance this will be fixed in the 9.1-release?
(the PR mentions that the patch has been committed to -CURRENT)

o) How do I go about updating my system without network connectivity?

Thanks much in advance for any clue,
-ewald
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Matthew Seaman
On 26/11/2012 13:49, Odhiambo Washington wrote:
 I am starting to switch, and after all the discussions in this thread, I
 replaced my csup cron entry with the following:
 
 portsnap fetch  portsnap extract  portsnap update

You definitely don't want to do this.

Most importantly, 'extract' and 'update' aren't compatible. 'extract'
says 'take all the data you downloaded, synthesize a *complete* ports
tree from it, and overwrite /usr/ports with that, never mind what might
have been there before'.  'update' says 'just add the changed bits since
the last time you ran portsnap'

ie. you only need to run 'extract' *once*, then you keep up to date by
running 'update' at intervals.

Secondly, for the sake of the servers, please don't run 'portsnap fetch'
from a cron job.  You're not the only person to think of doing that, and
most people who do have the job run at the top of the hour.  This is
bad.  The servers really don't like it when several thousand cronjobs
all fire off simultaneously and the system load goes through the roof.
Which is why 'portsnap cron' exists -- it does exactly the same as
fetch, except it waits for a random amount of time before pulling down
any data.

Thirdly, you can tell portsnap several commands at once.  So change your
cron invocation to just:

portsnap cron update

and you should be happy.

 Initially I just had `csup -z -L 2 /usr/share/examples/cvsup/9.x-ports`
 where 9.x-ports was an edited version of ports-supfile.
 
 Now I have an /etc/portsnap.con with the equivalent edits from my 9.x-ports
 
 Is this how best to do it?

No.  You almost never need to modify the default portsnap.conf at all.
portsnap works best if you use it to maintain a complete ports tree.  It
also automatically uses a geographically close server for best performance.

 
 And now I need to find an alternative to handle the src updates using svn
 or something...

SVN works, but isn't amazingly quick.  If you're on a release branch you
can get the src (and just the src) using freebsd-update(8), which should
be pretty speedy and which I think is going to be the officially blessed
method for non-developers to keep up to date.  Although anyone will
still be able to use SVN if they want to.

You'll need to tweak /etc/freebsd-update.conf slightly to get just the
system sources.  It's pretty obvious what to do.

Cheers,

Matthew

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Mike Clarke
On Monday 26 November 2012 13:49:05 Odhiambo Washington wrote:
 I am starting to switch, and after all the discussions in this thread, I
 replaced my csup cron entry with the following:

 portsnap fetch  portsnap extract  portsnap update

portsnap fetch should only be used interactively; for non-interactive use, 
you should use portsnap cron

portsnap extract is only needed for initialising your portsnap-maintained 
ports tree.

So, after your initial portsnap run, what you need in your cron file is 
just portsnap fetch update

-- 
Mike Clarke
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Stas Verberkt

jb schreef op :

Tim Daneliuk tundra at tundraware.com writes:


...
 I use portsnap fetch update and it works...

Ah, maybe that was the problem.  That works for me as well.


Well, not quite ...

I think, after the security incident, you had to obtain a fresh 
snapshot of the ports tree,
i.e. you had to do portsnap fetch extract before usual service 
continued.

May this be your problem?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Odhiambo Washington
On Mon, Nov 26, 2012 at 5:14 PM, Mike Clarke jmc-freeb...@milibyte.co.ukwrote:

 On Monday 26 November 2012 13:49:05 Odhiambo Washington wrote:
  I am starting to switch, and after all the discussions in this thread, I
  replaced my csup cron entry with the following:
 
  portsnap fetch  portsnap extract  portsnap update

 portsnap fetch should only be used interactively; for non-interactive
 use,
 you should use portsnap cron

 portsnap extract is only needed for initialising your portsnap-maintained
 ports tree.

 So, after your initial portsnap run, what you need in your cron file is
 just portsnap fetch update



So is portsnap cron update and portsnap fetch update doing the same
thing?
Whichever way, it sounds like I need an initial run of portsnap extract
before putting this in crontab.

@Matthew, I do not need all ports (astro, hungarian, etc...) but you appear
to suggest I need everything, right?
My portsnap.conf contains:

*REFUSE all arabic astro benchmarks biology cad chinese finance french
games german hebrew
REFUSE hungarian japanese korean palm polish portuguese russian science
ukranian vietnamese*

Is that a misnomer?

Then coming to freebsd-update (I never thought I'd have to use it one
day!), I am a little confused with what to tinker. There are these two
lines:

*# Components of the base system which should be kept updated.
Components src world kernel

# Example for updating the userland and the kernel source code only:
# Components src/base src/sys world*

I always did csup to get my src then manually did the buildworld, make
kernel, reboot, installworld, then mergemaster.
From the above lines, I am not sure what I need, but think the Components
src world is what I need. How it comes to build my custom kernel is still
not clear to me.

My mergemaster.rc contained:

*IGNORE_FILES=/etc/crontab /etc/fstab /etc/group /etc/hosts /etc/inetd.conf
/etc/make.conf /etc/master.passwd /etc/motd /etc/newsyslog.conf
/etc/ntp.conf /etc/ntp.drift /etc/profile /etc/rc.conf /etc/resolv.conf
/etc/services /etc/shells /etc/syslog.conf /etc/ssh/sshd_config
/etc/ssh/ssh_host_key /etc/ssh/ssh_host_key.pub /etc/ssh/ssh_host_rsa_key
/etc/ssh/ssh_host_rsa_key.pub /etc/passwd /etc/rc.conf.local
/etc/zfs/exports /etc//namedb/named.conf /etc/periodic.conf /etc/hosts.allow
/etc/hosts /etc/pf.conf /etc/sysctl.conf /etc/make.conf /etc/src.conf
/etc/mail/aliases /etc/mail/mailer.conf /etc/remote*

How now do I deal with this? Hopefully you can explain to someone who has
been keeping off freebsd-update. I know there are many like me who are in
this situation now that csup is getting deprecated.



-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
I can't hear you -- I'm using the scrambler.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


vidcontrol - How do I make these persist?

2012-11-26 Thread Modulok
List,

If I edit things via vidcontrol, e.g: `vidcontrol grey black` where do I put
this to make it persist across reboots on all terminals?

Cheers!
-Modulok-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Michael Powell
Matthew Seaman wrote:

[snip]
 
 And now I need to find an alternative to handle the src updates using svn
 or something...
 
 SVN works, but isn't amazingly quick.  If you're on a release branch you
 can get the src (and just the src) using freebsd-update(8), which should
 be pretty speedy and which I think is going to be the officially blessed
 method for non-developers to keep up to date.  Although anyone will
 still be able to use SVN if they want to.
 
 You'll need to tweak /etc/freebsd-update.conf slightly to get just the
 system sources.  It's pretty obvious what to do.
 

As a result of the security incident I switched away from csup and am now 
using portsnap for ports, and svn for source. The only disconcerting item I 
noticed is the 500-some MB .svn directory now under /usr/src/.

Can using freebsd-update for source update(s) eliminate the need for this 
500MB waste of space? Or is there some switch for svn which could accomplish 
same?

Thanks - Mike


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread jb
Stas Verberkt legolas at legolasweb.nl writes:

 
 jb schreef op :
  Tim Daneliuk tundra at tundraware.com writes:
 
  ...
   I use portsnap fetch update and it works...
 
  Ah, maybe that was the problem.  That works for me as well.
 
  Well, not quite ...
 
 I think, after the security incident, you had to obtain a fresh 
 snapshot of the ports tree,
 i.e. you had to do portsnap fetch extract before usual service 
 continued.
 May this be your problem?

# portsnap fetch extract
# ls -al /usr/ports/IN*
-rw-r--r--  1 root  wheel  26879597 Nov 26 15:37 /usr/ports/INDEX-7
-rw-r--r--  1 root  wheel  26763600 Nov 26 15:38 /usr/ports/INDEX-8
-rw-r--r--  1 root  wheel  26744834 Nov 26 15:38 /usr/ports/INDEX-9
-rw-r--r--  1 root  wheel   1654048 Nov 11 11:45 /usr/ports/INDEX-9.bz2
# portsnap fetch update
Looking up portsnap.FreeBSD.org mirrors... 6 mirrors found.
Fetching snapshot tag from ec2-eu-west-1.portsnap.freebsd.org... done.
Latest snapshot on server matches what we already have.
No updates needed.
Ports tree is already up to date.
#

This fixed it.

But, let's see what happens with this test:

# rm -rf  /usr/ports/
# portsnap extract
# ls -al /usr/ports/IN*
-rw-r--r--  1 root  wheel  26879563 Nov 26 16:07 /usr/ports/INDEX-7
-rw-r--r--  1 root  wheel  26763566 Nov 26 16:07 /usr/ports/INDEX-8
-rw-r--r--  1 root  wheel  26744800 Nov 26 16:07 /usr/ports/INDEX-9
# portmaster -L | egrep '(ew|ort) version|total install'
=== New version available: java-zoneinfo-2012.j
=== New version available: liberation-fonts-ttf-2.00.1,1
=== New version available: libxul-10.0.11
=== New version available: firefox-17.0,1
=== New version available: libreoffice-3.5.7
=== New version available: vigra-1.9.0
=== 545 total installed ports
=== 6 have new versions available
# portmaster -L --index | egrep '(ew|ort) version|total install'
/tmp/d-78227-index/INDEX-9.bz2100% of 1615 kB  176 kBps 00m00s
=== New version available: libreoffice-3.5.7
=== 545 total installed ports
=== 1 has a new version available
# portmaster -L --index-only | egrep '(ew|ort) version|total install'
=== New version available: libreoffice-3.5.7
=== 545 total installed ports
=== 1 has a new version available
# ls -al /usr/ports/IN*
-rw-r--r--  1 root  wheel  26879563 Nov 26 16:07 /usr/ports/INDEX-7
-rw-r--r--  1 root  wheel  26763566 Nov 26 16:07 /usr/ports/INDEX-8
-rw-r--r--  1 root  wheel  26665016 Nov 26 16:12 /usr/ports/INDEX-9
-rw-r--r--  1 root  wheel   1654048 Nov 11 11:45 /usr/ports/INDEX-9.bz2
# portsnap update
Ports tree is already up to date.
#

Well, what do you say about this ?
jb


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Fleuriot Damien
I don't get what you're trying to show here.


What commands you've run indicate that:

1/ you have an up to date ports tree
2/ one of the installed ports needs to be updated


So what ?
Just run # portmaster libreoffice


I think you might be confused, new version available means that you have 
version 1.2.3 installed and that 1.2.4 is available *from the local ports tree*.
It does not indicate that there is a newer version of a package available 
remotely and that you should update your ports tree.


Hope this helps.


On Nov 26, 2012, at 4:21 PM, jb jb.1234a...@gmail.com wrote:

 Stas Verberkt legolas at legolasweb.nl writes:
 
 
 jb schreef op :
 Tim Daneliuk tundra at tundraware.com writes:
 
 ...
 I use portsnap fetch update and it works...
 
 Ah, maybe that was the problem.  That works for me as well.
 
 Well, not quite ...
 
 I think, after the security incident, you had to obtain a fresh 
 snapshot of the ports tree,
 i.e. you had to do portsnap fetch extract before usual service 
 continued.
 May this be your problem?
 
 # portsnap fetch extract
 # ls -al /usr/ports/IN*
 -rw-r--r--  1 root  wheel  26879597 Nov 26 15:37 /usr/ports/INDEX-7
 -rw-r--r--  1 root  wheel  26763600 Nov 26 15:38 /usr/ports/INDEX-8
 -rw-r--r--  1 root  wheel  26744834 Nov 26 15:38 /usr/ports/INDEX-9
 -rw-r--r--  1 root  wheel   1654048 Nov 11 11:45 /usr/ports/INDEX-9.bz2
 # portsnap fetch update
 Looking up portsnap.FreeBSD.org mirrors... 6 mirrors found.
 Fetching snapshot tag from ec2-eu-west-1.portsnap.freebsd.org... done.
 Latest snapshot on server matches what we already have.
 No updates needed.
 Ports tree is already up to date.
 #
 
 This fixed it.
 
 But, let's see what happens with this test:
 
 # rm -rf  /usr/ports/
 # portsnap extract
 # ls -al /usr/ports/IN*
 -rw-r--r--  1 root  wheel  26879563 Nov 26 16:07 /usr/ports/INDEX-7
 -rw-r--r--  1 root  wheel  26763566 Nov 26 16:07 /usr/ports/INDEX-8
 -rw-r--r--  1 root  wheel  26744800 Nov 26 16:07 /usr/ports/INDEX-9
 # portmaster -L | egrep '(ew|ort) version|total install'
=== New version available: java-zoneinfo-2012.j
=== New version available: liberation-fonts-ttf-2.00.1,1
=== New version available: libxul-10.0.11
=== New version available: firefox-17.0,1
=== New version available: libreoffice-3.5.7
=== New version available: vigra-1.9.0
 === 545 total installed ports
=== 6 have new versions available
 # portmaster -L --index | egrep '(ew|ort) version|total install'
 /tmp/d-78227-index/INDEX-9.bz2100% of 1615 kB  176 kBps 00m00s
=== New version available: libreoffice-3.5.7
 === 545 total installed ports
=== 1 has a new version available
 # portmaster -L --index-only | egrep '(ew|ort) version|total install'
=== New version available: libreoffice-3.5.7
 === 545 total installed ports
=== 1 has a new version available
 # ls -al /usr/ports/IN*
 -rw-r--r--  1 root  wheel  26879563 Nov 26 16:07 /usr/ports/INDEX-7
 -rw-r--r--  1 root  wheel  26763566 Nov 26 16:07 /usr/ports/INDEX-8
 -rw-r--r--  1 root  wheel  26665016 Nov 26 16:12 /usr/ports/INDEX-9
 -rw-r--r--  1 root  wheel   1654048 Nov 11 11:45 /usr/ports/INDEX-9.bz2
 # portsnap update
 Ports tree is already up to date.
 #
 
 Well, what do you say about this ?
 jb
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Warren Block

On Mon, 26 Nov 2012, kpn...@pobox.com wrote:


On Mon, Nov 26, 2012 at 02:08:52PM +, Matthew Seaman wrote:

Secondly, for the sake of the servers, please don't run 'portsnap fetch'
from a cron job.  You're not the only person to think of doing that, and
most people who do have the job run at the top of the hour.  This is
bad.  The servers really don't like it when several thousand cronjobs
all fire off simultaneously and the system load goes through the roof.
Which is why 'portsnap cron' exists -- it does exactly the same as
fetch, except it waits for a random amount of time before pulling down
any data.


More generally, a cron job can be run with a random delay added before
the real job kicks off. Just prefix the command you want cron to run
like so:

sleep $(jot -r 1 1 900)  command to run

If you like, replace 900 with some other number to change the upper bound
on the number of seconds to delay.


portsnap has a cron command that does this.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Sean Cavanaugh
 
 So is portsnap cron update and portsnap fetch update doing the same
 thing?
 Whichever way, it sounds like I need an initial run of portsnap extract
before
 putting this in crontab.

From scratch, you need to portsnap fetch extract to establish your ports
directory. After that you either use portsnap fetch update to
interactively update or use portsnap cron update for a cron script.

Fetch and Cron are identical except Cron adds a randomized time delay
so as not to fire off EXACTLY at the time you set. This helps prevent
everyone and their brother nailing the update server exactly at midnight
every night, but rather spread it out a few minutes.

Do NOT use a randomizer on your cron timer with portsnap cron or you will
be double randomizing and wondering why it seems to never be updating
sometimes.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: vidcontrol - How do I make these persist?

2012-11-26 Thread Maciej Suszko
Modulok modu...@gmail.com wrote:
 List,
 
 If I edit things via vidcontrol, e.g: `vidcontrol grey black` where
 do I put this to make it persist across reboots on all terminals?

Search for vidcontrol(1) in rc.conf(5) manual.
-- 
regards, Maciej Suszko.


signature.asc
Description: PGP signature


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread jb
Tim Daneliuk tundra at tundraware.com writes:

 ... 
 One wonders if using svn to keep the ports tree up-to-date might not be
 simpler, and perhaps, more reliable ...

As managed by portsnap:
$ du -hs /usr/ports/
850M/usr/ports/

As managed by svn (it took much longer to checkout/download it by comparison):
$ du -hs /usr/local/ports/
1.4G/usr/local/ports/
$ du -hs /usr/local/ports/.svn/
702M/usr/local/ports/.svn/

One thing about svn is that it is a developer's tool, with its own commands
set (that should never be mixed with UNIX commands w/r to dir/file
manipulation), and that should not be expected to be learned by non-devs.

For that reasons alone the portsnap-managed ports repo is more generic,
flexible to be handled by user and add-on apps/utilities, looks like more
efficient without that svn overhead resulting from its requirements and
characteristics as a source control system.

But, svn offers to a user a unique view into ports repo, e.g. history, logs,
info, attributes, etc.

jb


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When Is The Ports Tree Going To Be Updated?

2012-11-26 Thread Matthew Seaman
On 26/11/2012 19:17, Warren Block wrote:
 It can be downloaded with 'make fetchindex', or built in place with
 'make index' (slow--I think Mr. Seaman has a Perl version that's
 probably much faster). 

That's Dr Seaman if you're going to insist on being formal.  Most people
call me Matthew.

And, yes I do have some perl code for index building.  It's only faster
on average because it understands how to do incremental updates.  Just
building an index from scratch is actually a bit slower than 'make index'

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.

PGP: http://www.infracaninophile.co.uk/pgpkey
JID: matt...@infracaninophile.co.uk



signature.asc
Description: OpenPGP digital signature


Re: VPS FreeBSD Hosting

2012-11-26 Thread Jeremy Johnston

Hello,

  We at SmartServ Hosting, http://www.smart-serv.net/, have been 
offering VPS containers supporting FreeBSD for over a year and 
previously ran all our services from FreeBSD on bare metal before moving 
into our virtualization environment where we continue to use FreeBSD for 
our core services. We have hosts available in US and France currently.


On 11/25/2012 02:08 PM, Jim Flowers wrote:

I gave up maintaining my own hardware for providing cloud computing
services about 10 years ago and have been using several dedicated server
services with root-access FreeBSD since about 6.0. with good results. At
the time VPS looked like too many problems.

Now, however, it looks like there are quite a number of mature VPS hosting
services that are FreeBSD-centric at very attractive prices. Most offer KVM
or VPS-instance access to allow rebooting and reinstallation.

Can anyone comment on the providers and the technology in the context of
having used them specifically for FreeBSD in the last few years?  Good?
Bad? Indifferent?

Fairly modest duty - spam filtering, mailboxes, websites, storage, reverse
proxy and the like.

Oh yeah, some development.

Thanks
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Anyone using squid and pf?

2012-11-26 Thread Volodymyr Kostyrko

26.11.2012 20:40, Leslie Jensen:

Rules from pf.conf


# macros
ext_if=xl0
int_if=bge0

tcp_services={ 22, 993, 5910:5917 }
tcp_priv_services={ 389, 443 }
proxy_services = { 21, 80 }
icmp_types={ echoreq unreach squench timex }
internal_net = 172.18.0.0/16
proxy = 172.18.0.1
proxyport=8021

# tables
table goodguys persist
table sshguard persist

# options
set block-policy return # ports are closed but can be seen
set loginterface $ext_if

set skip on lo0

# scrub
scrub in

rdr pass proto tcp from any to any port ftp - 127.0.0.1 port 8021

# redirect www trafic to proxy
rdr on $int_if inet proto tcp from $internal_net to any port
$proxy_services - $proxy port 8080


I could be wrong here but I think you have a loop. You are redirecting 
from local interface to local interface i.e. the result of redirect is 
still subject for redirect. Could you try one of the following:


1. Make this a `rdr in on $int_if`.

2. Make this a `rdr pass ... - 127.0.0.1 port 8080`. I prefer this way 
so port for transparent forwarding is unreachable except when explicitly 
redirecting to it.


Personally I newer allow such ambiguity in my configs.

--
Sphinx of black quartz judge my vow.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Advanced Format Drive ?

2012-11-26 Thread Ronald F. Guilmette


Just a brief follow-up on my questions here (about 2 weeks ago) regarding
so-called Advanced Format (4KB block) drives...

I just got myself a shiny new Seagate 2.5 portable external 1TB hard drive.
fdisk is telling me this about it:

===
*** Working on device /dev/da1 ***
parameters extracted from in-core disklabel are:
cylinders=121601 heads=255 sectors/track=63 (16065 blks/cyl)

Figures below won't work with BIOS for partitions not in cyl 1
parameters to be used for BIOS calculations are:
cylinders=121601 heads=255 sectors/track=63 (16065 blks/cyl)

Media sector size is 512
Warning: BIOS sector numbering starts with sector 1
Information from DOS bootblock is:
The data for partition 1 is:
sysid 7 (0x07),(NTFS, OS/2 HPFS, QNX-2 (16 bit) or Advanced UNIX)
start 2048, size 1953519616 (953867 Meg), flag 0
beg: cyl 0/ head 32/ sector 33;
end: cyl 1023/ head 254/ sector 63
The data for partition 2 is:
UNUSED
The data for partition 3 is:
UNUSED
The data for partition 4 is:
UNUSED
===

Starting sector 2048 is definitely a multiple of 4KB, so I am assuming
that all I really need to do here in order to use this new drive as extra
stroage for a FreeBSD system (assuming that I am happy with good old
fashioned MBR style partitioning, which I am) is just:

newfs -U /dev/da1s1

Right?

Last question:  How could I even tell if this thing is or isn't Advanced
Format?  Is there some tool I could run that would tell me that?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Advanced Format Drive ?

2012-11-26 Thread Ronald F. Guilmette


I just wanted to add another data point... in case anybody is interested...

uring my recent spending binge, I also acquired a Hatachi portable external
2.5 inch Touro Moble 500GB drive.

Righ out of the box, this is what fdisk tells me about this one:

==
*** Working on device /dev/da1 ***
parameters extracted from in-core disklabel are:
cylinders=60801 heads=255 sectors/track=63 (16065 blks/cyl)

Figures below won't work with BIOS for partitions not in cyl 1
parameters to be used for BIOS calculations are:
cylinders=60801 heads=255 sectors/track=63 (16065 blks/cyl)

Media sector size is 512
Warning: BIOS sector numbering starts with sector 1
Information from DOS bootblock is:
The data for partition 1 is:
sysid 7 (0x07),(NTFS, OS/2 HPFS, QNX-2 (16 bit) or Advanced UNIX)
start 2048, size 976766976 (476937 Meg), flag 0
beg: cyl 0/ head 32/ sector 33;
end: cyl 1023/ head 254/ sector 63
The data for partition 2 is:
UNUSED
The data for partition 3 is:
UNUSED
The data for partition 4 is:
UNUSED
==


I can't help but note that both this one and also my new Seagate 2.5 portable
external 1TB drive are pre-partitioned with one partition that in both cases
starts at sector 2048.  I suppose that it is no coincidence that 2048 * 512B ==
1 megabyte, exactly.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: VPS FreeBSD Hosting

2012-11-26 Thread Shane Ambler

On 26/11/2012 20:48, Arthur Chance wrote:


FreeBSD is now officially supported by Amazon (but still supplied by
 Colin) as well as Colin's defenestrated FreeBSD AMIs.



I don't use them yet but while looking into cloud setups I found that
rackspace have offered freebsd 9 images for us to build a server with
since July. They don't offer it as a supported system on their managed
solutions but they are happy for you to build your own server with it,
even looks like you can use zfs.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Everything get slower with 8.3

2012-11-26 Thread Olivier Nicole
Hi,

Few weeks ago I upgraded many systems from 7.4 to 8.3 and since I feel
that everyting has got much slower:

- connecting a new shell takes 5 secnds between the password and the
  first promt;

- imap got slower to the point imp/horde times out

- amanda back-up will not complete

- etc.

I don;t know what to look for to correct this.

TIA,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Advanced Format Drive ?

2012-11-26 Thread Warren Block

On Mon, 26 Nov 2012, Ronald F. Guilmette wrote:


I can't help but note that both this one and also my new Seagate 2.5 portable
external 1TB drive are pre-partitioned with one partition that in both cases
starts at sector 2048.  I suppose that it is no coincidence that 2048 * 512B ==
1 megabyte, exactly.


Told ya.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


how to correct portsnap corruption

2012-11-26 Thread Dale Scott
Hi, I was running portsnap fetch on a remote terminal when my connection
failed. After connecting running portsnap again, it appeared to complete
correctly. However, when I run portsnap extract I get the following error:

 

casper# portsnap extract

/usr/ports/.cvsignore

/usr/ports/CHANGES

/usr/ports/COPYRIGHT

/usr/ports/GIDs

/usr/ports/KNOBS

/usr/ports/LASTCOMMIT.txt

files/bfd9e7e5d0fff1e0c601614c35085494c8de06eb100b2fe025a6c9a226ec0e09.gz
not found -- snapshot corrupt.

casper#

 

How can I recover from this without losing any app configs I have in the
ports tree? (i.e. make config)

 

Thanks,
Dale

 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Advanced Format Drive ?

2012-11-26 Thread Warren Block

On Mon, 26 Nov 2012, Ronald F. Guilmette wrote:


Starting sector 2048 is definitely a multiple of 4KB, so I am assuming
that all I really need to do here in order to use this new drive as extra
stroage for a FreeBSD system (assuming that I am happy with good old
fashioned MBR style partitioning, which I am) is just:

   newfs -U /dev/da1s1


You should also change the partition type to freebsd or freebsd-ufs. 
Offhand I'd guess they're both 0xa5, but have not looked.  Use 'gpart 
modify'.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org