Trying to DTRT: backup UFS2 with POSIX.1e ACLs, how?

2005-05-20 Thread Ash
What is the recommended method to backup UFS2 file systems with ACLs 
enabled?

I made the mistake of assuming (yes, yes, I'm well aware of the old 
adage) that dump(8) and restore(8) are compatible with POSIX.1e ACLs. I 
found during some testing that my assumption was either incorrect or I 
have not figured out how use dump/restore to properly play with ACLs.

I've searched around the Interweb as well as the usual local sources 
(and read the man pages (dump(8), restore(8), acl(3), etc...) along with 
/usr/src/sys/ufs/ufs/README.acls) for an answer to creating backups and 
restoring UFS2 file systems with POSIX.1e ACLs enabled. I did not gain 
any insight from the local documentation and my Internet searches have 
produced conflicting results.

In this ONLamp article (http://www.onlamp.com/lpt/a/4053), the author 
states that FreeBSD's dump has been modified to understand UFS2 
(including ACLs). My experience has been to the contrary.

I've also found newsgroup/mailing list articles stating that dump(8) 
does not yet understand ACLs and to use the archivers/star port. I don't 
have a problem installing a port to facilitate my backups (ACLs show up 
in snapshots, so I should be able to get a consistent backup), however I 
would obviously prefer to use dump(8)/restore(8), if I have the option.

I'm running a relatively recently -STABLE (5.4-STABLE #0: Tue May 17 
18:09:01 CDT 2005).

I have been passing the following flags to dump(8)/restore(8) for testing:
dump -0a -f filename  mount point | device name 
restore -rf filename
Any insight would be appreciated.
Thanks,
-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: two ISP connections, three nics, and a NAT

2005-05-12 Thread Ash
Greg Donald wrote:
I have two ISP connections, a DSL line and a Cable Modem line.  I want
to plug both connections into a FreeBSD box that has three nics in it,
one nic for each ISP connection and the last nic for my NAT.  How can
I bind the connections together without any other sort of router? 
I've used ipfw a bit over the past couple of years, and I've got a
basic NAT working for the other LAN PCs.  I can't seem to find any
docs on how to proceed with two connections however.  I've got two
connections for the sake of failover but it'd be nice to actually use
both of them instead of one or the other sitting idle all the time. 
Would it be as simple as adding a static route from each connection to
the other?

If anyone has any tips or URLs that'd be helpful.
TIA.


Short answer: You can't.
Long answer: You can't bind the two connections from two different ISPs 
into a single connection, it's just not the way IP works. What you can 
do however, is distribute the network load evenly across the two 
connections through your router. You already have a router: Your FreeBSD 
box.

One method you can try, is to distribute the load one a per machine 
basis. Let's say you have 4 computers in your LAN A, B, C and D. You can 
configure your router to send traffic originating from A and B through 
ISP 1, while C and D are routed through ISP 2. Unfortunately, I haven't 
used IPFW in a long enough time that I can't remember much about it, so 
I'm not sure if IPFW will allow you to do this (I *think* it does, but 
I'm too lazy to look it up). However, I do know that pf(4) (Firewall 
package ported over from OpenBSD and imported into 5.x in March of 2004) 
will allow you to do this. In case you want to examine the PF option, 
you may want to have a look at the Users Guide 
(ftp://ftp.openbsd.org/pub/OpenBSD/doc/pf-faq.txt) as well as an 
overview (http://www.bgnett.no/~peter/pf/).

-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problem ext2

2005-04-29 Thread Ash
Björn König wrote:
pier wrote:
I need ext2 because i need to exchange very big files (dvd iso images)
with linux computers.
But everytime i try to copy a big file i receive this message:
cp: ./sarge-i386-1.iso: File too large
 
Do your Linux kernel your ext2 file system support large files (files 
over 2GB)? If not, you will have to boot into Debian and enable LFS 
(large file support) and add that feature to your ext2 partition.


FreeBSD might only be able to deal with files smaller than 2 GiB on ext2 
file systems. Use a program like lxsplit to cut the file into chunks 
first, e.g.

 lxsplit -s filename 1024M
and join it later with
 lxsplit -j filename.001
Björn
Adding to Björn's advice, in case you don't with to use a port. The 
FreeBSD base system includes split(1), which will allow you split up 
binary files (with -b flag) and then join them with cat.

To split:
split -b 1024b original.iso original.
To join:
cat original.aa original.ab ... original.an  original.iso
Please note that this won't work for your particular case, if your 
Debian install does not support LFS.

-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: smbfs in fstab

2005-04-26 Thread Ash
[EMAIL PROTECTED] wrote:
currently I mount my XP share via: mount_smbfs -N //a7v133/raid /storage1
How can I get put this in my /etc/fstab so that it doesn't prompt me
for a password upon bootup.  This winshare is accessible without a
password and by anyone.  I have read through seveal forums and read
man pages gallore, but I still remain unsuccessful.
5.3-RELEASE-p1 FreeBSD 5.3-RELEASE-p1 #0
From the man page for mount_smbfs(8):
[quote]
~/.nsmbrc  Keeps static parameters for connections and other information.
   See /usr/share/examples/smbfs/dot.nsmbrc for details.
   
...
 It is possible to use fstab(5) for smbfs mounts:
  //[EMAIL PROTECTED]/public/smb/public smbfs  rw,noauto 0   0
[/quote]
From /usr/share/examples/smbfs/dot.nsmbrc:
[quote]
# smbfs lookups configuration files in next order:
#   1. ~/.nsmbrc
#   2. /etc/nsmb.conf - if this file found it will
#  override values with same keys from user files.
[/quote]
You will have to store your password in cleartext, but you seem to 
already be doing this in home directory since you are using the -N flag.

-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: UPDATING on AMD Processor

2005-04-25 Thread Ash
Odhiambo Washington wrote:
PS: I asked this Q stupidly before... No wonder I did not
get any responses ;)
 When it comes to the Intel platform, I can always find my way around,
 but in this one case of AMD, I am purely clueless. I don't even know
 what keyword to search for in the handbook, FAQ, google.
 
 Attached you will find the dmesg output of an oldish box on which I
 just installed FreeBSD 5.x, and I would like to:
 
 make buildworld
 make kernel
 make installworld
 
 I want to use this box as a firewall on my network. Can someone
 please point me to the relevant documentation that will guide me
 in the above process.
Unless you are enabling CPU specific optimizations in make.conf(5) (i.e. 
CPUTYPE=x or in your case CPUTYPE=k6)  the procedure you have above is 
platform agnostic. Just do what you would normally do on an Intel platform.

If you wish to use CPU specific optimizations, then make sure you look 
at the man page for make.conf(5) and /usr/share/examples/etc/make.conf

-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: lock user to home directory - not with rbash

2005-04-25 Thread Ash
Olaf Stein wrote:
hi
 
thanks for the advice on rbash
i got it to work but it is to restricted
Be careful what you ask for :)
in their home directories users should have full rw access
as far as i tried rbash (bash -r) that is not possible (i can not even do a
mkdir)
i am doing something wrong or is this the goal of rbash (bash -r)??
The man page for bash(1) covers restricted bash pretty well under 
RESTRICTED SHELL.

 
is there any other way of giving users access to their home directory and
shutting down anything else (even if read-only)??
 
thanks a lot for your help
/olaf
 
See Lowell Gilbert's response to your previous thread.
-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: need help pls asap

2005-04-23 Thread Ash
angelito munez wrote:
hi guys..
ok.. this is actually the problem.. the isp give us a public ip.. then it was 
assigned to the ADSL router.. then at the router, DCHP is enabled... so this means 
that my freebsd box is inside a private network with ip 172.16.16.2.. router has the 
private ip 172.16.16.1.. the router itself is doing a NAT because it has a real ip of 
62.215.85.228... now what i want to do is to make another private network with the 
freebsd as their gateway so that i can make some rules for this network.. and this 
should also act as their firewall.. now i have already configured the 2 network 
interfaces which is vr1 (172.16.16.2 - for the router's network) and vr0 
(192.168.0.1 - for another private network)... now i can ping outside addresses 
such as yahoo via vr1.. i can also ping 172.16.16.1(my freebsd's gateway) and 
192.168.0.1.. the problem is i have one host in my private network having an ip of 
192.168.0.2 and i can't ping this host.. what is the problem? i dont have any 
firewall rules t
o 
 block
 any network.. i even add ipfw 1 add allow ip from any to any... iv been 
thinking that it is a route problem but i dont know how to set the proper route because 
my box is in between 2 private networks.. these are my route..
Routing tables
Internet:
DestinationGatewayFlagsRefs  Use  Netif Expire
default172.16.16.1UGSc1   90vr1
127.0.0.1  127.0.0.1  UH  0   49lo0
172.16.16/24   link#2 UC  20vr1
172.16.16.100:0f:3d:87:9c:51  UHLW1   12vr1   1200
172.16.16.400:0b:db:95:89:a0  UHLW1 1912vr1   1081
192.168.0  link#1 UC  20vr0
192.168.0.100:11:95:90:c6:b6  UHLW0   18lo0
192.168.0.200:11:5b:2b:24:20  UHLW00vr0   1188

Please have your mail client wrap your e-mail to this list at 72 characters.
Your routing table doesn't look right. Did you copy/paste or transcribe it?
You have assigned 192.168.0.1 to your lo0 (loopback, see the manage for 
lo(4)) interface. However your route for the 192.168.0 says its directly 
connected on vr0.

What does ifconfig output for lo0 vr1 and vr2 show?
The reason you can ping 192.168.0.1, is because it is your own 
interface. It doesn't indicate that the network (e.g. cables, switch 
hub, etc...) between that interface and the rest of 192.168.0 are set up 
properly or that 192.168.0.2 is configured properly.

can you help me with this problem?
thanks for giving your time in reading this ill be waiting for your 
response..

I'm curious why you are setting things up in the way that you are. I 
this just a learning experience, or is there any particular reason that 
you do not want to put all your internal hosts on the same physical 
subnet and let your ADSL router handle NATing for you?

Also, just out of curiosity is this a VIA Mini-ITX based system?
Again, please wrap your at 72 characters, if you want to increase your 
chances of having someone answer your questions.

-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Two natd daemons

2005-04-23 Thread Ash
Alexandr Lookoshkoff wrote:
Hello freebsd-questions,
  I have gateway with two external links and want to some users using
  second link. How it can be done?
  Is it possible via two copyes of natd running?
What you are asking involves making a routing decision based on the 
source IP (sometimes called Policy Based Routing or Source Based 
Routing, depending on the vendor). IP Routing decisions are typically 
based on the destination address, not the source. What you want is some 
mechanism that will make route decisions based on the source address 
(i.e. packets with a source address from network A get routed out of 
interface 1 to gateway 1, while packets from  Network B get routed out 
of interface 2 to gateway 2).

I haven't used ipfw/natd in years, so I honestly don't know if natd/ipfw 
will allow you to do what you want. However, I do know that Packet 
Filter (pf(4) ported over to FreeBSD from OpenBSD) will allow you to do 
this. Check out pf.conf(5)'s man page and do a search for route-to. 
You might want to check out Peter N. M. Hansteen's Firewalling with 
with OpenBSD's PF packet filter:

http://www.bgnett.no/~peter/pf/en/long-firewall.html
As well as the official user's guide:
ftp://ftp.openbsd.org/pub/OpenBSD/doc/pf-faq.txt
Good luck to you,
-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: screen question

2005-04-22 Thread Ash
dave wrote:
Hello,
I've got a screen session that has four windows in it. Data in window 1
needs to be in windows 2 3 and 4, which are all separate files. I do not
want to manually retype all of this, was wondering if screen had a feature
like a virtual clipboard?
Thanks.
Dave.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

From the man page:
[snip]
copy
Enter  copy/scrollback mode. This allows you to copy text from the 
cur-rent window and its history into the paste buffer. In this mode a 
vi-ike `full screen editor' is active:

[/snip]
Check out the man page for further details:
$ man screen
-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Samba 3.0.14a with AD Support

2005-04-22 Thread Ash
: undefined reference to
`krb5_auth_con_setremoteseqnumber'
/usr/lib/libgssapi.so: undefined reference to `krb5_principal_get_realm'
/usr/lib/libgssapi.so: undefined reference to `krb5_set_error_string'
/usr/lib/libgssapi.so: undefined reference to `krb5_make_principal'
/usr/lib/libgssapi.so: undefined reference to `krb5_store_keyblock'
*** Error code 1
Stop in /usr/ports/net/samba3/work/samba-3.0.14a/source.
*** Error code 1
**
Has anyone experienced this problem when compiling Samba 3.0.14a?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]
I could be wrong, but I think the base system has all the kerberos
software you need to build samba already installed. I have a few 5.3
systems, and all of them built samba and joined an AD Windows 2000
domain no problem.
If you don't need MIT kerberos or something else I am missing, I would
try uninstalling the ports and try it again.


I've just configured d a 5.4-RC3 machine as a file server that is 
authenticating against 2003 AD. I installed net/nss_ldap (which in turn 
insalled open-ldap), security/pam_ldap and of course net/samba3.

Heimdal Kerberos is included in the base system (unless you have 
NO_KERBEROS=true in /etc/make.conf). Check out the kerberos(8) manpage 
for more details.

-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD vs Linux

2005-04-20 Thread Ash
koen de wijs wrote:
Hello folks,
I'm new to unix. This year I tried FreeBSD. Some friend of mine adviced 
FreeBSD. I think it works great. Only one thing that I don't like is 
that you will need to know a lot to setup a lot of basic stuff.
I want to try out Linux. I heard it is more user friendly and the basic 
stuff will be set up during installation.

I really don't like the sysinstall menu. It is really unlogically. Why 
isn't there a desktop and a server installation?
The above is a matter of taste, so I can't really do much other than 
share my personal experience. There is also a link closer the bottom if 
you want to skip my rant and get an answer to your second question.

I use (i.e. administer) FreeBSD, OpenBSD, GNU/Linux (Debian), Solaris 
and Microsoft Windows Servers on a daily basis, so I have seen my share 
of different installation methods throughout the years. I started in the 
Windows world a few years ago and moved to the UNIX world around 1995 
(Windows95 was a bit too much for my 486DX2-66 with 4MB of RAM to 
handle, so I gave Redhat a spin). I've personally found sysinstall(8), 
to be a rather straight forward and logical mechanism for configuring 
all of my basic stuff, eg:

- disk partitioning
- network configuration
- pkg-installation [1]
- input devices (e.g. keyboard/mouse)
- console configuration
- Xwindows configuration
I admit that printing and sound are not configured out of the box, 
however getting them up and running is not incredibly difficult.

My positive experience with sysinstall(8) may be due to the fact that I 
spent a few minutes to go over the instructions provided in the 
handbook, which is available in multiple languages (including, what I am 
assuming is your native tongue, German):

 http://www.freebsd.org/doc/
If your complaint is that FreeBSD and the community around it expect you 
too read some documentation, then FreeBSD probably is not the right OS 
for you. This is not to say that either you or FreeBSD are deficient, 
rather simply incompatible.

There are UNIX like operating systems that allow you to have the instant 
gratification of a (usually) mostly working install out of the box 
without much reading (e.g. Mandriva (or OS formerly known as Mandrake), 
Suse, Fedora Core, etc...), so perhaps you would be more comfortable 
using one of those.

Personally, I'm OK with the FreeBSD way of doing things so that's what 
I've been running as my primary desktop/workstation for the last few 
years. I do keep a GNU/Linux install (Currently Suse 9.2) on a laptop 
that I occasionally use so I remain up to date on the desktop side of 
GNU/Linux.

If you are looking for a relatively inexpensive and easy to configure 
desktop only machine, but want still to play around with some UNIXy 
stuff, then perhaps Windows XP + (Cygwin [2] or Microsoft Services For 
Unix [3]) is a better route for you.


Could anyone give me a good site that describes the differences between 
FreeBSD and Linux?

This is a good place to start:
http://www.over-yonder.net/~fullermd/rants/bsd4linux/bsd4linux1.php
Koen
(I don't want to start a flame war, only some good sites)
Unfortunately, due to the tone of your e-mail, you may find yourself 
getting flamed a bit. Hopefully, your e-mail was sincere and you get 
some helpful answers. If you're trolling with that e-mail, then I hope 
no one takes the bait.

In any case, I hope you find a solution that works for you.
-Ash
[1] I admit that I haven't used sysinstall(8) for this purpose in years, 
as I prefer to cvsup base and ports after installing a bare system and 
go from there.

[2] http://www.cygwin.com/
[3] http://www.microsoft.com/windows/sfu/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: gateway troubles

2005-04-19 Thread Ash
Alex wrote:
hi !
i have fbsd 5.3 router with gateway_enable=YES /etc/rc.conf
and 3 interfaces:
1. xl0 (mynet)
2. rl0
3. tun0 (internet) cuaa0
i need to get work router from mynet to  rl0 net and internet . i want 
to do that without natd but net.inet.ip.forwarding=1 work only on one 
psihical interface :)  i need to get work gateway between 3 interfaces . 
what i need to do ?

In order to route traffic between your local network and the Internet 
WITHOUT using NAT, then your ISP needs to assign a routeable public 
subnet to you as well as at least one address on a segment shared with 
one of their routers. Somehow, I get the feeling that this isn't the 
case so probably will need to use NAT.

FreeBSD gives you a few choices when it comes to building a 
router/firewall box. As always the handbook is the best place to start:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html
Incidentally, the handbook is available in multiple languages:
http://www.freebsd.org/doc/
Good luck,
-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Acrobat Reader 7.0

2005-04-16 Thread Ash
[EMAIL PROTECTED] wrote:
Hello!
On the Adobe website, there are two packages for
Acrobat Reader 7 that can be retrieved, one is a
.tar.gz, and the other is a .rpm. RPM files 
are normally for RedHat, and the other is probably a
general linux file.

From your list of required files, I notice you list a
requirement of rpm-3.0.6 9. Does this mean I should
download the RPM version? Is there a reason for one
instead of the other?
When the package is downloaded, do I just use the
command
  pkg_add -r acroread 
(that is, after I expand the file if necessary)?

Or do I need to do a 
  make install clean 
in the directory created by the expansion?

I have been seeing PDF files created in versions of
Acrobat later than 5, and they won't open in AcroRead5. 

Thanks for your help.
Harold
Acrobat7 is in the ports tree.
Assuming you do not have an earlier version of Acrobat Reader installed, 
then all you have to do to install Acrobat Reader 7 on your FreeBSD 
system is:

# cd /usr/ports/print/acroread7
# make
# make install
It above will automagically take care of everything for you. You will 
probably want to make sure that your ports tree is up to date before 
trying to install Acroread7. Refer to the handbook for more information:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ports-using.html
-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Connect to Cisco VPN server from FreeBSD?

2005-04-10 Thread Ash
Scott Mitchell wrote:
Hi all,
As in the subject - has anyone managed to get a FreeBSD machine to connect
to a Cisco VPN server, using IPSec and 2-factor authentication (password +
SecurID card)?  My employer has been acquired by another company, and this
will soon be the only remote-access method available.  Linux client
software exists, but given that it relies on a kernel module I'm not
holding out much hope of it working.  The security/vpnc port looks like it
might be useful.  No idea if racoon + FreeBSD native IPSec can be persuaded
to do the SecurID authentication.
I would try all these things myself, except I don't have any account
details for the server yet.  I really don't want to keep a Linux or Windows
machine around just to connect to the office...
Many thanks in advance,
Scott
I have not personally used this, however I have had reports of users 
connecting to a Cisco VPN 3000 box that I administered at one point with 
the following client:

http://www.unix-ag.uni-kl.de/~massar/vpnc/
-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BIND 9 on a dynamic ip address

2005-04-10 Thread Ash
Andrew P. wrote:
Ryan J. Cavicchioni wrote:
Hello, I am hoping to set up a DNS server for my home network just for
the sake of learning BIND. Unfortunately, I have a PPPoE connects
(wireless broadband) with a dynamic ip address. At the moment, I use
dyndns just so I have a hostname and I would like to keep using
dyndns. All I am looking to do is to use bind for hosts in my network
and have a local dns cache. I do not plan on pointing any domains to
my nameservers. Would this be possible? Or will there be problems that
I am not foreseeing? I am really new at this, that is why I would like
to leard bind.

If you have a stable LAN ip address, it's not a
problem. Configure BIND to listen on it and the
dynamic address you get to use internet won't
bother anyone (even BIND itself).
On the other hand, configuring a DNS server
listening on a dynamic IP address is a really
bad idea.
BIND 9 Administrator Reference Manual is a
good place to start (I started there a few
weeks ago).
http://www.bind9.net/manual/bind/9.3.1/Bv9ARM.html
Best wishes,
Andrew P.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

Adding to Andrew's comments. If you do not have a LAN interface, you 
should be able to use a loopback (lo(4) interface to test things with. 
You will^H^H^H^Hshould always have lo0 up and listening to 127.0.0.1 
(/8). You can bring up other instances of lo(4) with ifconfig(8) and 
treat it as you would any other interface. For example if you want to 
create lo1, you would type:

# ifconfig lo1 create
If you do have a local network, you can run bind without any 
difficulties on just your local network without any problems. You just 
want to be sure that you don't tell your servers that they are 
authoritative for a real domain (e.g. freebsd.com) or else you won't be 
able to resolve any host/sub-domain from freebsd.com. You can safely 
pick a non-valid domain without expecting to run into problems. An 
example would be my.lan (e.g. host1.my.lan host2.my.lan). Since .lan is 
not a valid TLD (at least today), you can expect to use it without 
running into any collisions. I believe Cisco uses .lan as a fake TLD 
in some of their lower end equipment (e.g. wireless APs/routers).

Good luck!
-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Connect to Cisco VPN server from FreeBSD?

2005-04-10 Thread Ash
Scott Mitchell wrote:
On Sun, Apr 10, 2005 at 12:26:45PM -0500, Ash wrote:
Scott Mitchell wrote:
Hi all,
As in the subject - has anyone managed to get a FreeBSD machine to connect
to a Cisco VPN server, using IPSec and 2-factor authentication (password +
SecurID card)?  My employer has been acquired by another company, and this
will soon be the only remote-access method available.  Linux client
software exists, but given that it relies on a kernel module I'm not
holding out much hope of it working.  The security/vpnc port looks like it
might be useful.  No idea if racoon + FreeBSD native IPSec can be persuaded
to do the SecurID authentication.
I would try all these things myself, except I don't have any account
details for the server yet.  I really don't want to keep a Linux or Windows
machine around just to connect to the office...
Many thanks in advance,
Scott
I have not personally used this, however I have had reports of users 
connecting to a Cisco VPN 3000 box that I administered at one point with 
the following client:

http://www.unix-ag.uni-kl.de/~massar/vpnc/

Thanks, that looks promising.  The SecurID thing is apparently just a
flavour of XAUTH which seems to be supported, so it might just work.
Cheers,
Scott
Whoops forgot to mention that I had configured out VPN3000 to 
authenticate users using SecurID. The vpnc users were able to 
authenticate just fine.

OT, but they were also able to use vpnc to bypass split-tunneling 
restrictions (no real surprise there).

Good luck,
-Ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Broken port tree: how to repair ?

2005-04-10 Thread Ash
Xavier Maillard wrote:
Hello,
I had a problem of corrupted database and I did a big mistake: I
incidentally deleted my port tree instead of the database.
Now I have big troubles whenever I want to upgrade/install any
new port.
Is there any way to fix this ?
Thank you.
You can cvsup your ports tree to bring it up to date:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ports-using.html
(yes this will work even if you've deleted your whole tree)
-ash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 5.3 + any smtp server, Refuses to receive any emails...

2004-11-21 Thread Ash
Erik Ellis wrote:
FreeBSD 5.3 + any smtp server, Refuses to receive any emails from any
external domain EXEPT bredband.net, witch  is odd, cuz I haven't entered
anything about bredband.net.
Right now im using Sendmail, but iwe tried postfix but I get the same
problem. No errors in logs, no errors from Postmaster. It just wont work.
What can be the problem.
Don't think theres any dns problems cuz its all updated and as I said. It
works when I send email from @bredband.net and @ellisdesign.org
mailto:[EMAIL PROTECTED]  but not from anything else.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Erik,
Have you had a look at /etc/mail/README and/or 
/usr/share/sendmail/cf/README? Particularly the bits regarding relaying? 
If not, then those READMEs are probably a good place to start.

Will this SMTP server be accessible by everyone on the Internet? If so, 
you really do want to make sure you understand why it's bad to be an 
open relay and what the possible consequences are (e.g. being 
blacklisted, slapped around by your ISP, name calling, etc...).

-Ash
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: what should i have in resolv.conf hosts

2004-11-20 Thread Ash
Danny Browne wrote:
Browsers in fluxbox (and gnome when i treid that switching to that) take 
forever to fetch webpages (2 mins on a DSL line). but the speed is normal when 
using ping or ftp or whatever from terminal/console.
are my reslov.conf and hosts file entrys correct?
resolv.conf just has:
nameserver 192.168.1.254
hosts has:
::1 localhost localhost.my.domain
127.0.0.1 localhost localhost.my.domain
192.168.1.3 VaioBSD VaioBSD.eircom.net
[SNIP]
Danny,
I assume that by browsers you mean a Mozilla derived browser compiled 
as a native FreeBSD binary (vs a Linux binary running under emulation). 
There seems to be a known issue the way Mozilla resolves under FreeBSD. 
There were some good threads in the news groups and mailing lists on 
this; You should be able to find them via groups.google.com by searching 
for something along the lines of mozilla DNS slow.

There are few couple of reported ways to get around the resolvers issue. 
I've read that disabling IPv6 in your kernel will help. Installing the 
Linux native ports (e.g. www/linux-mozillafirebird or www/linux-mozilla) 
is also reported to work. I haven't tried either of the fore mentioned 
workarounds, so I don't know if they work or are still applicable.

I route my web traffic through the Squid proxy (available as a FreeBSD 
port www/squid). As a result, I'm not affected by the resolvers issue 
since Squid is handling DNS resolution for browsers on my network.

I'm not saying my work around is the best fix; I just happened to need a 
proxy on my network so it was a convenient fix way for me to deal with 
this issue.

-Ash
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: reading a dos cdrom with .pdf files.

2004-11-19 Thread Ash
Gary Kline wrote:
People,
	I have several CDROMS all of which seem to be DOS type.
Data CDs are generally IS0-9660 with various extensions.
	At first I tried the disc in my CD player.  Nope; then 
	in one of my 5.3 machines using mount_msdosfs.  (probably
	with the wrong flags, I admit.) As a last resort  I put the
Wrong flags, unless the CD-ROM has a FAT/FAT32 file system (possible but 
unlikely).

	disc in my RH-8 platform intended to reboot into W2K. But
	a cup of coffee later I find that Red Hat had already popped
	up a window with the title of the disc and that it is a
	1.1MB pdf file.  I doubt this CDROM is a an ISO-9660 
	(or whatever).   But it's nice that  RH knew automagically 
	what to do with it and to pop up  the pdf reader.  
Why do you doubt it's ISO-9660?
I know there is the genius in FBSD-land to do this; probably
just enough not people.  My question is: what are the FBSD
FreeBSD is geared to be a great server operating. The feature you want 
(auto mounting device) isn't necessarily desirable on a server. While it 
is possible to configure, it is not something that is available 
immediately out of the box.

I'm not saying that FreeBSD doesn't make a great desktop. IMO FreeBSD 
makes a wonderful desktop, provided you take the time to read the docs 
and configure it properly.

commands to let me mount this disc and let me read the
files to be able to point acroread at them?
This is clearly explained in the man pages as well as the handbook 
(Section 16.6.7 Using Data CDs).

Assuming that you have a /cdrom directory, are using an IDE CD-ROM drive 
and do not have atapicam(4) configured the following command should work 
for you:

#mount -t cd9660 /dev/acd0 /cdrom
If I'm not mistaken, upon install, a /cdrom directory is created when an 
optical drive is detected (if you have multiple optical drives you also 
get /cdrom1, /cdrom2, /cdrom3 ) and /etc/fstab is configured 
appropriately to allow you to type the following to mount your first 
optical drive on /cdrom:

#mount /cdrom
If you are using SCSI/USB/Firewire drives or IDE with atapicam(4):
#mount -t cd9660 /dev/cd0 /cdrom
tia,
gary

-Ash
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: No output from Kernel Booting Up or /dev/console

2004-11-18 Thread Ash
Tabor Kelly wrote:
The is on a Dell Inspiron 1100 notebook (celeron 2.3Ghz) running FreeBSD
5.3R. When I boot my laptop I see the Beastie menu, and after making a
selection, I get no output from boot1 or the kernel. So, when my laptop
 is done booting, my screen looks like this:
/boot/kernel/acpi.ko text=0x3fbfc data=0x1c04+0x112c
syms=[0x4+0x72f0+0x4+0x97c7
]
-
FreeBSD/i386 (laptop.taborandtashell.net) (ttyv0)
login:
Also, nothing that would normally be displayed on ttyv0 via /dev/console 
 (syslog stuff) is there. Booting with ACPI disabled does not help. The 
weird thing is that this didn't used to happen. Right before all of this 
started, I was trying to get my touch pad working and I:

1. ran /stand/sysinstall and played with mouse settings.
2. edited /etc/rc.conf
3. created /boot/device.hints (I tried removing device.hints, it didn't 
help)
 
[SNIP]
Tabor,
Is it possible that your console is being redirected to a com port? The 
handbook covers this topic in section 20.6.

Also some quick info that might help you out:
There are a few places that this can be configured: boot.conf, 
/boot/loader.conf, /boot/loader.conf.local or /boot/loader.rc.

If /boot.conf refer to the Handbook Section 20.6 as well as boot(8)'s 
man page.
	

In either /boot/loader.conf or /boot/loader.conf.local for the following 
line:

console=comconsole
In /boot/loader.rc check for:
set console=comconsole
To set your console to display on your monitor using /boot/loader.conf 
or /boot/loader.conf.local set (or replace) the following:

console=vidconsole
In /boot/loader.rc
console=vidconsole
Good Luck,
-Ash
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]