Fwd: HEADSUP: Call for FreeBSD Status Reports - 3Q/2010

2010-10-11 Thread Daniel Gerzo

Hello,

this is a reminder to anyone who's planning on sending a status report 
to us. The submission deadline is 15th Sept 2010.


I know that many of you guys have spent last few days in Karlsruhe (and 
I hope to receive some additional reports covering the 
EuroBSDCon/DevSummit events), so that I understand that the reports 
might still be on their way. I just wanted to note, that to this date we 
have received only 5 entries.


Please, if you are planning to send your entry, let us know so we can at 
least count with you and poke you if we don't receive it soon :)


 Original Message 
Subject: HEADSUP: Call for FreeBSD Status Reports - 3Q/2010
Date: Thu, 30 Sep 2010 08:29:48 +0200
From: Daniel Gerzo dan...@freebsd.org
Organization: The FreeBSD Project
To: curr...@freebsd.org, hack...@freebsd.org, questi...@freebsd.org

Dear all,

I would like to remind you that the next round of status reports
covering the third quarter of 2010 is due on October 15th, 2010. This
initiative is very welcome in our community. Therefore, I would like to
ask you to submit your status reports soon, so that we can compile the
report on time.

Do not hesitate and write us a few lines - a short  description about
what you are working on, what are your plans and goals, so we can inform
our community about your great work! Check out the reports from the past
to get some inspiration of what your submission should look like.

If you know about a project that should be included in the status
report, please let us know as well, so we can poke the responsible
people to provide us with something useful. Updates to submissions from
the last report are welcome too.

Note that the submissions are accepted from anyone involved with the
FreeBSD community, you do not have to be a FreeBSD committer.
Submissions about anything related to FreeBSD are very welcome!

Please email us the filled-in XML template which can be found at
http://www.freebsd.org/news/status/report-sample.xml to
mont...@freebsd.org, or alternatively use our web based form located at
http://www.freebsd.org/cgi/monthly.cgi.

For more information, please visit http://www.freebsd.org/news/status/.

We are looking forward to see your submissions!

--
S pozdravom / Best regards
  Daniel Gerzo, FreeBSD committer
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


HEADSUP: Call for FreeBSD Status Reports - 3Q/2010

2010-09-30 Thread Daniel Gerzo

Dear all,

I would like to remind you that the next round of status reports
covering the third quarter of 2010 is due on October 15th, 2010. This
initiative is very welcome in our community. Therefore, I would like to
ask you to submit your status reports soon, so that we can compile the 
report on time.


Do not hesitate and write us a few lines - a short  description about 
what you are working on, what are your plans and goals, so we can inform 
our community about your great work! Check out the reports from the past 
to get some inspiration of what your submission should look like.


If you know about a project that should be included in the status
report, please let us know as well, so we can poke the responsible
people to provide us with something useful. Updates to submissions from
the last report are welcome too.

Note that the submissions are accepted from anyone involved with the
FreeBSD community, you do not have to be a FreeBSD committer.
Submissions about anything related to FreeBSD are very welcome!

Please email us the filled-in XML template which can be found at
http://www.freebsd.org/news/status/report-sample.xml to
mont...@freebsd.org, or alternatively use our web based form located at
http://www.freebsd.org/cgi/monthly.cgi.

For more information, please visit http://www.freebsd.org/news/status/.

We are looking forward to see your submissions!

--
S pozdravom / Best regards
  Daniel Gerzo, FreeBSD committer
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


HEADSUP: Call for FreeBSD Status Reports - 2Q/2010

2010-06-16 Thread Daniel Gerzo

Dear all,

I would like to remind you that the next round of status reports
covering the second quarter of 2010 is due on July 15th, 2010. This
initiative is very welcome in our community. Therefore, I would like to
ask you to submit your status reports soon, so that we can compile the 
report on time.


Do not hesitate and write us a few lines - a short  description about 
what you are working on, what are your plans and goals, so we can inform 
our community about your great work! Check out the reports from past to 
get some inspiration of what your submission should look like.


If you know about a project that should be included in the status
report, please let us know as well, so we can poke the responsible
people to provide us with something useful. Updates to submissions from
the last report are welcome too.

Note that the submissions are accepted from anyone involved with the
FreeBSD community, you do not have to be a FreeBSD committer.
Submissions about anything related to FreeBSD are very welcome!

Please email us the filled-in XML template to be found at
http://www.freebsd.org/news/status/report-sample.xml to
mont...@freebsd.org, or alternatively use our web based form located at
http://www.freebsd.org/cgi/monthly.cgi.

For more information, please visit http://www.freebsd.org/news/status/.

We are looking forward to see your submissions!

--
S pozdravom / Best regards
   Daniel Gerzo, FreeBSD committer
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


FreeBSD Status Report January-March, 2010

2010-04-22 Thread Daniel Gerzo
FreeBSD Quarterly Status Report

Introduction

   This report covers FreeBSD related projects between January and March
   2010. Being the first of the four reports planned for 2010 with 46
   entries, it shows a good progress of the FreeBSD Project and proves
   that our committers are keeping up with the latest trends in the OS
   development. During this period, a new minor version of FreeBSD,
   7.3-RELEASE, has been released, while the release process for
   8.1-RELEASE is soon to begin and is planned to be released later this
   summer.

   Thanks to all the reporters for their excellent work! We hope you enjoy
   the reading.

   Please note that the deadline for submissions covering the period
   between April and June 2010 is July 15th, 2010.
 __

Google Summer of Code

 * Google Summer of Code 2010

Projects

 * Chromium web browser
 * Clang replacing GCC in the base system
 * EFI support for FreeBSD/i386
 * mfsBSD
 * Modular Congestion Control
 * NAND Flash framework for embedded FreeBSD
 * Out of Tree Toolchain
 * PC-BSD PC-SysInstall Backend
 * The tbemd branch
 * webcamd

FreeBSD Team Reports

 * FreeBSD Bugbusting Team
 * Release Engineering Team
 * The FreeBSD Foundation

Network Infrastructure

 * (Virtual) Network Stack resource cleanup
 * 802.11n support
 * Atheros AR9285 support
 * Enhancing the FreeBSD TCP Implementation
 * Experimental NFS subsystem (NFSv4)
 * ipfw and dummynet enhancements
 * net80211 rate control framework
 * TCP/UDP connection groups

Kernel

 * CAM-based ATA implementation
 * Dynamic Ticks in FreeBSD
 * geom_sched
 * IPv6 without legacy IP kernel
 * Multichannel playback in HDA sound driver (snd_hda)
 * Rewrite of FreeBSD read/write path using vnode page
 * SUJ: Journaled Softupdates
 * ZFS

Documentation

 * The FreeBSD German Documentation Project
 * The FreeBSD Hungarian Documentation Project

Userland Programs

 * FreeBSD port for libunwind
 * LDAP support in base system

Architectures

 * FreeBSD/arm port for TI DaVinci
 * FreeBSD/ia64
 * FreeBSD/mips on D-Link DIR-320
 * FreeBSD/powerpc
 * FreeBSD/powerpc64 port
 * FreeBSD/sparc64

Ports

 * Portmaster
 * Ports Collection
 * QAT

Miscellaneous

 * BSDCan 2010 -- The BSD Conference
 * meetBSD 2010 -- The BSD Conference
 __

(Virtual) Network Stack resource cleanup

   Contact: Bjoern A. Zeeb b...@freebsd.org

   In February work was done to address resource leaks in the (virtual)
   network stack, especially on teardown.

   During that time also multiple general run-time problems and leaks were
   identified and fixed including leaked ipfw tables on module unload,
   routing entries leaked, in case of interfaces going away, as well as
   leaked link-layer entries in interaction with flowtable and timers.

   For virtual network stacks resources are are no longer allocated
   multiple times or freed upon teardown for eventhandlers, IP and upper
   level layers, like TCP syncache and host cache, flowtable, and
   especially radix/routing table memory.
   In addition epair(4) was enhanced and debugging was improved.

   This work was sponsored by ISPsystem.

Open tasks:

1. Merge the remaining patches.
2. Work on a better teardown model and get to the point where we can
   free UMA zones without keeping pages for type stability and timers
   around.
 __

802.11n support

   Contact: Rui Paulo rpa...@freebsd.org

   802.11n support in the Atheros driver is being worked on. Right now it
   can do AMPDU RX in software and we are working on TX AMPDU. The code
   lives in a private Perforce branch, but some bits of it are already
   committed to HEAD.

   This work is being sponsored by iXsystems, inc.
 __

Atheros AR9285 support

   Contact: Rui Paulo rpa...@freebsd.org

   Atheros AR9285 support was added to FreeBSD HEAD and 8-STABLE. There
   are still some issues but in general it works fine.
 __

BSDCan 2010 -- The BSD Conference

   URL: http://www.BSDCan.org/2010/
   URL: http://www.BSDCan.org/2010/schedule/

   Contact: BSDCan Information i...@bsdcan.org

   BSDCan, a BSD conference held in Ottawa, Canada, has quickly
   established itself as the technical conference for people working on
   and with 4.4BSD based operating systems and related projects. The
   organizers have found a fantastic formula that appeals to a wide range
   of people from extreme novices to advanced developers.

   BSDCan 2010 will be held on 13-14 May 2010 at the University of Ottawa,
   and will be 

HEADSUP: Call for FreeBSD Status Reports - 1Q/2010

2010-03-21 Thread Daniel Gerzo

Dear all,

I would like to remind you that the next round of status reports 
covering the first quarter of 2010 is due on April 15th, 2010. This 
initiative is very welcome in our community. Therefore, I would like to 
ask you to submit your status reports as soon as possible, so that we 
can compile the report on time.


There is a lot of projects which are currently being worked on, so do 
not hesitate and write us a few lines - a short  description about what 
you are working on, what are your plans and goals, so we can inform our 
community about your great work! Check out the reports from past to get 
some inspiration of what your submission should look like.


If you know about a project that should be included in the status 
report, please let us know as well, so we can poke the responsible 
people to provide us with something useful. Updates to submissions from 
the last report are welcome too.


Note that the submissions are accepted from anyone involved with the 
FreeBSD community, you do not have to be a FreeBSD committer. 
Submissions about anything related to FreeBSD are very welcome!


Please email us the filled-in XML template to be found at
http://www.freebsd.org/news/status/report-sample.xml to
mont...@freebsd.org, or alternatively use our web based form located at
http://www.freebsd.org/cgi/monthly.cgi.

For more information, please visit http://www.freebsd.org/news/status/.

We are looking forward to see your submissions!

--
S pozdravom / Best regards
   Daniel Gerzo, FreeBSD committer
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Options for redundant storage cluster?

2010-02-19 Thread Daniel Gerzo

On Thu, 18 Feb 2010 19:40:19 -0600 (CST), Robert Bonomi

 For the illiterati, like myself, _what_ does committed to head mean?

head is a synonym for -CURRENT. You can read more about this topic in our
great handbook:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/current-stable.html

What it basically means, is that the code hit the source tree of the
development branch, which allows it to be publicly available for other
developers and early adopters. After the code in head is considered stable,
it gets merged to the -stable branches (8.x, 7.x) and will be part of the
next release which will be cut from the given branch (like 8.2 or 7.4).

-- 
Kind regards
  Daniel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Options for redundant storage cluster?

2010-02-18 Thread Daniel Gerzo

On 19.2.2010 2:30, Adam Vande More wrote:
 I'd say right now ggated/ggatec + heartbeat is sort of roughly equivalent
 of  DRBD and heartbeat.  I think many of us are waiting for HAST though.

 
http://lists.freebsd.org/pipermail/freebsd-announce/2009-October/001279.html


FYI, HAST was committed to head today.


--
S pozdravom / Best regards
  Daniel Gerzo, FreeBSD committer
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


FreeBSD Status Reports April - September, 2009

2009-10-11 Thread Daniel Gerzo
FreeBSD Quarterly Status Report

Introduction

   This report covers FreeBSD related projects between April and September
   2009. During that time a lot of work has been done on wide variety of
   projects, including the Google Summer of Code projects. The BSDCan
   conference was held in Ottawa, CA, in May. The EuroBSDCon conference
   was held in Cambridge, UK, in September. Both events were very
   successful. A new major version of FreeBSD, 8.0 is to be released soon.
   If you are wondering what's new in this long-awaited release, read Ivan
   Voras' excellent summary.

   Thanks to all the reporters for the excellent work! We hope you enjoy
   the reading.

   Please note that the next deadline for submissions covering reports
   between October and December 2009 is January 15th, 2010.
 __

Google Summer of Code

 * About Google Summer of Code 2009
 * BSD-licensed iconv (Summer of Code 2009)
 * BSD-licensed text-processing tools (Summer of Code 2008)
 * Ext2fs Status report (Summer of Code 2009)
 * libnetstat(3) - networking statistics (Summer of Code 2009)
 * pefs - stacked cryptographic filesystem (Summer of Code 2009)

Projects

 * BSD# Project
 * Clang replacing GCC in the base system
 * FreeBSD TDM Framework
 * Grand Central Dispatch - FreeBSD port
 * libprocstat(3) - process statistics
 * New BSD licensed debugger
 * NFSv4 ACLs
 * The Newcons project
 * VirtualBox on FreeBSD

FreeBSD Team Reports

 * FreeBSD Bugbusting Team
 * FreeBSD KDE Team
 * FreeBSD Ports Management Team
 * Release Engineering Status Report
 * The FreeBSD Foundation Status Report

Network Infrastructure

 * Enhancing the FreeBSD TCP Implementation
 * Modular Congestion Control
 * Network Stack Virtualization
 * Stream Control Transmission Protocol (SCTP)

Kernel

 * FreeBSD/ZFS
 * hwpmc for MIPS

Documentation

 * The FreeBSD Dutch Documentation Project
 * The FreeBSD German Documentation Project
 * The FreeBSD Hungarian Documentation Project
 * The FreeBSD Spanish Documentation Project

Architectures

 * FreeBSD/sparc64

Ports

 * FreeBSD Gecko Project
 * Portmaster - utility to assist users with managing ports
 * Valgrind suite on FreeBSD

Miscellaneous

 * EuroBSDcon 2009
 * FreeBSD Developer Summit, Cambridge UK
 * New approach to the locale database
 * The FreeBSD Forums
 __

About Google Summer of Code 2009

   URL: http://socghop.appspot.com/org/home/google/gsoc2009/freebsd
   URL: http://wiki.freebsd.org/SummerOfCode2009Projects

   Contact: Brooks Davis bro...@freebsd.org
   Contact: Tim Kientzle kient...@freebsd.org
   Contact: Robert Watson rwat...@freebsd.org

   2009 was The FreeBSD Project's fifth year of participation in the
   Google Summer of Code. We had a total of 17 successful projects. Some
   GSoC code will be shipping with FreeBSD 8.0-RELEASE and others will be
   integrated into future releases.

   The FreeBSD GSoC admin team would like to thank Google and our students
   and mentors of another great year!
 __

BSD# Project

   URL: http://code.google.com/p/bsd-sharp/
   URL: http://www.mono-project.org/

   Contact: Romain Tartičre rom...@blogreen.org

   The BSD# Project is devoted to porting the Mono .NET framework and
   applications to the FreeBSD operating system.

   During the past year, the BSD# Team continued to track the Mono
   development and the lang/mono port have almost always been up-to-date
   (we however had to skip mono-2.2 because of some regression issues in
   this release). Most of our patches have been merged in the mono trunk
   upstream, and should be included in the upcoming mono-2.6 release.

   In the meantime, a few more .NET related ports have been updated or
   added to the FreeBSD ports tree. These ports include:
 * www/xsp and www/mod_mono that make it possible to use FreeBSD for
   hosting ASP.NET application;
 * lang/boo, a CLI-targeted programming language similar to Python;
 * lang/mono-basic, the Visual Basic .NET Framework for Mono;
 * devel/monodevelop, an Integrated Development Environment for .NET;
 * and much more...

Open tasks:

1. Test mono ports and send feedback (we are especially interested in
   tests where NOPORTDOCS / WITH_DEBUG is enabled).
2. Port the mono-debugger to FreeBSD.
3. Build a debug live-image of FreeBSD so that Mono hackers without a
   FreeBSD box can help us fixing bugs more efficiently.
 __

BSD-licensed iconv (Summer of Code 2009)

   URL: http://wiki.freebsd.org/G%C3%A1borSoC2009

   Contact: Gábor Kövesdán ga...@freebsd.org

   The code has been extracted from 

Re: best FBSD version for commercial use.

2009-10-11 Thread Daniel Gerzo

Nerius Landys wrote:

My 2 cents, as far as I know 7.1 will be maintained longer than 7.2
according to the freebsd.org website.  That is, security fixes will be
rolled out for 7.1 a while after 7.2 reaches End Of Life.  That made
me decide to go with 7.1 when I had to make the switch from 7.0 a few
months ago.  8.0 was not out at that time.



I don't think that is correct.  There must be something unclear there.


http://security.freebsd.org/

Near the bottom of the page mentioned above, there is a table.
RELENG_7_1 EoL is January 31, 2011, RELENG_7_2 EoL is May 31, 2010
according to the chart.  That is a difference of 8 months.


All of these seems to be correct, but it needs a little note. The last 
version from the X-STABLE branch gets the Extended lifetime support. 7.2 
is definitely not the latest release from the stable/7 branch, and that 
is the reason why it has shorter support life time. There, however, will 
be at least 7.3 which will potentially get longer support. And upgrading 
to 7.3 from 7.2 will surely not be a big deal. If you read the mentioned 
web page more carefully, you will see the following paragraph:


Extended
Selected releases (normally every second release plus the last release 
from each -STABLE branch) will be supported by the Security Officer for 
a minimum of 24 months after the release, and for sufficient additional 
time (if needed) to ensure that there is a newer Extended release for at 
least 3 months before the older Extended release expires.


--
S pozdravom / Best regards
  Daniel Gerzo, FreeBSD committer
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: AsiaBSDCon 2009

2009-07-20 Thread Daniel Gerzo

Gabriele Penazzi wrote:


However the video quality is ugly and most of the slides are not readable.
I would like to know if it's possible to download the presentation 
somewhere.

Thank you for your attention,


You are at the wrong mailing list, becasue that presentation has been 
OpenBSD-specific (but some parts may be common with FreeBSD too - I 
haven't checked);


However a quick google search revealed what you have been asking for:
http://www.openbsd.org/papers/asiabsdcon2009-release_engineering/

--
S pozdravom / Best regards
  Daniel Gerzo, FreeBSD committer
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re[2]: local copy of handbook

2009-01-04 Thread Daniel Gerzo
Hello Jerry,

For more information see http://docsnap.sk.freebsd.org/ and possibly
the rsync manual page.

 I was having a problem reaching that URL; however, I found that this
 one: http://www.oook.cz/bsd/docsnap.html did seem to work. In any case,
 I am unable to get the 'rsync' command to work. This is the output of
 one such attempt.

 ~ $ sudo rsync -rltvz docsnap.sk.FreeBSD.org::docsnap /usr/share/doc/
 rsync: failed to connect to docsnap.sk.FreeBSD.org: Operation timed out
 (60) rsync error: error in socket IO (code 10) at clientserver.c(124)
 [receiver=3.0.5]

 This has happened continually for the past few days. I am not sure if
 it is a temporary problem or or permanent one.

The docsnap.sk.FreeBSD.org (as well as ftp.sk and cvsup.sk) server is
currently offline due to some problems after its update.

Unfortunately it's been a vacations period here and we were unable to get
personally to the box and fix it. However I have been told that the
issue should be resolved tommorrow, so I would recommend you to try
tommorrow or a bit later.

-- 
Best regards,
 Danielmailto:dan...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: mfi raid tool for freebsd?

2008-12-24 Thread Daniel Gerzo
Hello Omer,

Wednesday, December 24, 2008, 1:32:05 PM, you wrote:

 I have a server with LSI MegaSAS 1064R RAID controller which is
 recognized as mfid0 . Is there a tool that i can query the status of
 the raid also the status of disks? I have tried smartmontools but it didn't 
 work at all..

Port:   linux-megacli-1.01.40_2
Path:   /usr/ports/sysutils/linux-megacli
Info:   LSI MegaRAID SAS controller management utility

Unfortunately, we do not have native tool yet :-(
It would be nice to ask LSI to port it to FreeBSD.

-- 
Best regards,
 Danielmailto:dan...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: dovecot, maildir, UFS 2 performance

2008-09-24 Thread Daniel Gerzo

Dear Wojciech,

On Wed, 24 Sep 2008 09:53:26 +0200 (CEST), Wojciech Puchar
[EMAIL PROTECTED] wrote:
 i have everything (/) on single partition on most of my servers,
 including 
 those having lots of mail.
 I don't think that is clever. sysinstall creates different partitions
 for /
 
 but i do. sysinstall and most people and manuals just copy traditions.
 it's nonsense.
 

Don't forget that if you create your large / in sysinstall, it will not
enable softupdates by default, as far as I remember.

-- 
Best regards
  Daniel Geržo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Uplading file via Lighttpd - system hangs

2008-09-23 Thread Daniel Gerzo

Hello guys,

I have noticed today that I have another problem possibly related to this
issue. I am running lighttpd+php-cgi in a jail on a 7.0-STABLE system as of
Thu Aug 21 10:59:02 CEST 2008. The problem seems to be that lighttpd stops
serving the pages, however I haven't had time to dig into this any more
closer, but I have found out that there's a lot of connections to the
lighty when it seems to be dead. May be it does not close the connections
properly??
The only common thing here is that that this jail is serving a page where a
lot of image uploading happens.

On Mon, 22 Sep 2008 19:04:41 +0200, Mel
[EMAIL PROTECTED] wrote:
 On Monday 22 September 2008 18:11:05 Yury Michurin wrote:
 Well, I'm working now on creating memory dump. and send it forward for
 more
 knowledgeable people,
 however, as you might notice, different people, with different hardware,
 and even different version 7.0 and 7.1,
 have the same problem.

 Even if lighttpd / php / some script / whatever misbehaves, system
 should
 not be halted by such userland proccess.
 
 I don't think it's halted, I think it's cluttered by invalid syscalls. 
 Secondly, any userland process can make the system unresponsive, by bad 
 coding. Just write /tmp and /var/tmp full. It's not so hard.
 
 I don't think that's the case here though. Any of you guys logging
netstat
 -m 
 output every 500ms? Maybe you can see mbufs being drained just before the

 system stops servicing syscalls.
 

-- 
S pozdravom / Best regards
  Daniel Geržo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Shared /usr in jails

2008-09-22 Thread Daniel Gerzo

Hi Matt,

On Mon, 22 Sep 2008 02:01:36 -0400, Matt Fioravante
[EMAIL PROTECTED] wrote:
 I want to implement a number of jails for different services on a single
 box.

I would recommend you to check the ez-jail utility. 

-- 
S pozdravom / Best regards
  Daniel Geržo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Locate command

2008-07-10 Thread Daniel Gerzo

Hello,

 Actually, the very first thing I always do after installing a FreeBSD is
 add this line to crontab:

 00 02 * * * /usr/libexec/locate.updatedb

 I guess I'm a locate-freak ;^D

 
 Done.  Thanks again.

You guys should rather use /etc/periodic/weekly/310.locate script
to update your locate database.

-- 
Best regards,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Jails and IP Aliasing

2008-07-08 Thread Daniel Gerzo

Hello,

* Something like a loopback address inside the jail.  It may be
  127.0.0.2 instead of 127.0.0.1 but most software can be persuaded
  to use it for loopback style things.
 
* The ability to map several IPs onto the jailed system by use of
  NAT and redirect within firewall rules
 
* The ability to have a jail with /no/ external IP for when the
  paranoia becomes unbearable[*].

Most of this is actually implemented by [EMAIL PROTECTED] You can find some 
patches
at http://sources.zabbadoz.net/freebsd/jail.html 

-- 
Best regards,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[4]: Fwd: twe0 interrupt storm

2008-06-15 Thread Daniel Gerzo
Hello Stanislav,

Sunday, June 15, 2008, 12:40:57 PM, you wrote:

 Dear Daniel,

 Please tell me you had this storms only with 3ware 8006-2LP?

Actually, I do have them on the boxes which do not have the raid
controller. I have several boxes in hetzner. The ones that does not
have any additional devices attached to the motherboard seem like not
having the problem. However most of my machines have at least
additional NIC device.

Please note that my machines does not crash even when there is an
interrupt storm. On the other hand, they suffer from some performance
problems :/

The funny thing is that after reboot there's some silent period of
time, when the interrupts are OK. After the systems becomes to be
loaded more, the interrupt rate increases unless it reaches around
350k interrupt rate...

I have tried to play with the BIOS settings, nothing really helped.

 Because as I remember on MSI motherboard controller, I have no
 problems with FreeBSD 6.2, but when I upgraded to FreeBSD 7.0 that
 storms appeared, but not so often as with 3ware.

 P.S. Maybe I have to ask them to update BIOS? I am so happy with their
 network and service,  don't want to move to another server...

I have tried to ask them to update the BIOS in the past, AFAIR they
replied that the BIOS update is up to me...

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fwd: twe0 interrupt storm

2008-06-14 Thread Daniel Gerzo
Hello Stanislav,

Thursday, June 12, 2008, 3:45:36 PM, you wrote:

 Hi, I have problem on FreeBSD 6.2, 7.0 with 3ware 8006-2LP RAID-1 controller:

Is it MSI mobo by any cnance?
I am seeing these interrupt storms on a few boxes (irq21 too, twe(4) or
fxp(4) attached to these) with an

Base Board Information
Manufacturer: MICRO-STAR INTERANTIONAL CO.,LTD
Product Name: MS-7368
Version: 1.0

I was unable so far to fix this problem...seems like some hardware
issue

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: Fwd: twe0 interrupt storm

2008-06-14 Thread Daniel Gerzo
Hello FreeBSD,

Saturday, June 14, 2008, 4:38:10 PM, you wrote:

 Be careful with hetzner.de hosting, here is their answer:

 The controller is compatible with the mainboard. With linux there are no
 problems. FreeBSD is also not officially supported by us (only
 Debian/Ubuntu/Suse).

Yea, I know they do not officialy support FreeBSD, unluckily :-(

These interrupt storms are the only problem I have with hetzner.de...

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IPv6 jails for FreeBSD (6.* preferably)

2008-06-03 Thread Daniel Gerzo
Hello Wojciech,

Tuesday, June 3, 2008, 8:27:56 PM, you wrote:

 does patch exist for it?

http://sources.zabbadoz.net/freebsd/jail.html

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can I Reinstall FreeBSD Over SSH?

2008-05-25 Thread Daniel Gerzo
Hello Kyrre,

Sunday, May 25, 2008, 9:42:37 AM, you wrote:

 My server is getting kinda messy, but my ISP charges too much for a
 reinstall. Can I do this myself over SSH? Or perhaps there are ways to
 make ones system as clean as a fresh install? Thanks.

This will probably help you:

http://www.freebsd.org/doc/en_US.ISO8859-1/articles/remote-install/

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: from 6.3 to 7.0, will this work?

2008-03-27 Thread Daniel Gerzo
Hello Tsu-Fan,

Thursday, March 27, 2008, 7:43:27 PM, you wrote:

 Hi,
 I am thinking upgrading my hardware to core2 duo to enjoy fbsd
 7.0, my old 6.3 runs on amd64 3400+. If I just buy a new m-board+core
 2 cpu, can my old installation boot up the system, and then allow me
 to recompile kernel and stuff? I thought about getting a new drive too
 to do a fresh install, but my bay is full and kinda on a budget, thank
 you!!

It should work fine.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


interrupt storms

2008-03-17 Thread Daniel Gerzo
Hello,

 recently, we have inserted a new NIC into our machine, and after a
 few hours of operation, the machine starts to suffer from interrupt
 storms.

Mar 17 21:05:24 ha-web1 kernel: interrupt storm detected on irq22:; 
throttling interrupt source
Mar 17 21:05:54 ha-web1 last message repeated 30 times
Mar 17 21:07:54 ha-web1 last message repeated 120 times
Mar 17 21:17:54 ha-web1 last message repeated 600 times
Mar 17 21:27:54 ha-web1 last message repeated 600 times

 Here is the output of vmstat -i:

interrupt  total   rate
irq1: atkbd0   5  0
irq9: acpi01  0
irq16: ohci0   1  0
irq17: ohci1 ohci3 1  0
irq18: ohci2 ohci4 1  0
irq20: em0  22617825   1714
irq22: em1 atapci0 699549409  53036
cpu0: timer 26380374   2000
cpu1: timer 26380325   2000
Total  774927942  58751

 Any idea, why em1 and atapci0 share the same irq? I don't think this
 is correct. Is there some way how to work this around?

 Thanks.

-- 
Best regards,
 Daniel  mailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: atacontrol mode D PIO4 persist across reboots

2008-03-10 Thread Daniel Gerzo
Hello Philip,

Monday, March 10, 2008, 8:46:46 AM, you wrote:

 $ atacontrol mode ad2 PIO4
 current mode = PIO4

 My problem is how do I get this to persist across reboot ?

putting it into /etc/rc.conf.local should work...

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: looks like success

2008-03-02 Thread Daniel Gerzo
Hello B.,

Thursday, February 28, 2008, 9:27:03 PM, you wrote:

 Hello all,

 make delete-old (took a long time to do by hand)
 and make delete-old-libs (went rather quickly)

if you really want to delete all things:

# yes | make delete-old

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


gmirror on slice

2008-02-23 Thread Daniel Gerzo
Hello people,

 I'm trying to set up a gmirror on two slices, but I am stuck
 somewhere. I am unable to find out what is wrong. Here's what I have
 done so far:

 I have 2 disks in the box. I have created 2 slices on both of them
 (ad{4,6}s1 and ad{4,6}s2) through sysinstall. (btw,
 http://www.freebsd.org/cgi/query-pr.cgi?pr=72895cat= is really
 annoying, lucky I had a remote console :-))

 Now I want to initialize gmirror on slice 1:

ha-db1# gmirror label -v -b round-robin gm0 /dev/ad4s1
gmirror: Can't store metadata on /dev/ad4s1: Operation not permitted.
ha-db1# sysctl kern.geom.debugflags=16
kern.geom.debugflags: 0 - 16
ha-db1# gmirror label -v -b round-robin gm0 /dev/ad4s1
gmirror: Can't store metadata on /dev/ad4s1: Operation not permitted.

for additional information, I am including the following:

ha-db1# fdisk -vp ad4
# /dev/ad4
g c1453521 h16 s63
p 1 0xa5 63 72340632
a 1
p 2 0xa5 72340695 1392803370

ha-db1# disklabel /dev/ad4s1
# /dev/ad4s1:
8 partitions:
#size   offsetfstype   [fsize bsize bps/cpg]
  a:  104857604.2BSD 2048 16384 8
  b: 25165824  1048576  swap
  c: 723406320unused0 0 # raw part, don't edit
  d: 25165824 262144004.2BSD 2048 16384 28528
  e: 20960408 513802244.2BSD 2048 16384 28528


 Any ideas will be much appreciated.

-- 
Best regards,
 Daniel  mailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: gmirror on slice

2008-02-23 Thread Daniel Gerzo
Hello Wojciech,

Saturday, February 23, 2008, 5:15:14 PM, you wrote:

 Now I want to initialize gmirror on slice 1:

 ha-db1# gmirror label -v -b round-robin gm0 /dev/ad4s1
 gmirror: Can't store metadata on /dev/ad4s1: Operation not permitted.
 ha-db1# sysctl kern.geom.debugflags=16

 you try to make a mirror on used slice or some partition of that

and what's wrong with that, actually?
how do I create gmirror-ed slice then?

I have also tried the above commands on system that has ad4s1 and its
partitions unmounted, still getting the same error.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[3]: gmirror on slice

2008-02-23 Thread Daniel Gerzo
Hello Wojciech,

Saturday, February 23, 2008, 8:41:55 PM, you wrote:

 gmirror: Can't store metadata on /dev/ad4s1: Operation not permitted.
 ha-db1# sysctl kern.geom.debugflags=16

 you try to make a mirror on used slice or some partition of that

 and what's wrong with that, actually?
 how do I create gmirror-ed slice then?

 I have also tried the above commands on system that has ad4s1 and its
 partitions unmounted, still getting the same error.
 swap off?

no swap being used.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw(8) doc bug?

2008-01-21 Thread Daniel Gerzo
Hello Ian,

Monday, January 21, 2008, 2:42:53 PM, you wrote:

 I was just browsing various versions of ipfw(8) such as:

 http://www.freebsd.org/cgi/man.cgi?query=ipfwapropos=0sektion=0manpath=FreeBSD+6.3-stableformat=html

 and noticed that (and 6.3-RELEASE) manuals sport 'FreeBSD 7.0' footers,
 however the proper FreeBSD 7 manual includes the new 'ipfw nat' section,
 so is different in at least that respect.

As far as I know, this isn't a bug. The reason why you see FreeBSD
7.0 in the footer is that the machine, which is serving the online
manuals is running 7.0, but the real content of the man page is the
same as you will find in the 6.3-RELEASE.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: kernel make error: /usr/src/sys/crypto/rijndael/* missing

2008-01-19 Thread Daniel Gerzo
Hello Colin,

Saturday, January 19, 2008, 3:13:31 PM, you wrote:

 Unfortunately, I got another error. Any ideas what is going wrong here?

I would guess a missing device scbus and/or da in your kernel
configuration file.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Secure update of /usr/src

2008-01-13 Thread Daniel Gerzo
Hello ??,

Sunday, January 13, 2008, 11:17:13 AM, you wrote:

 Hello all,

 is there any way to securely follow the STABLE branch of FreeBSD, e.g.

 I am afraid that this isn't currently possible with -STABLE branches.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


PV entries

2007-12-26 Thread Daniel Gerzo
Hello questions,

  I'm getting these messages on my FreeBSD 7.0-RC1 as well as on BETA4
  boxes (I haven't noticed it in the past):

  Dec 27 01:18:49 web1 kernel: Approaching the limit on PV entries, consider 
increasing either the vm.pmap.shpgperproc or the vm.pmap.pv_entry_max sysctl.

  I  would like to ask, what are these PV entries, in order to be able
  to tweak these numbers accordingly.

  Just for the record, following numbers are set (should be defaults):

  vm.pmap.shpgperproc: 200
  vm.pmap.pv_entry_max: 3254323

  Thanks.

-- 
Best regards,
 Daniel  mailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: reverse grep

2007-11-03 Thread Daniel Gerzo
Hello deeptech71,

Sunday, November 4, 2007, 1:12:45 AM, you wrote:

 How is it possible to select lines that do NOT match a specific pattern?

grep -v  ; next time please try man grep

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Hello sir

2007-10-16 Thread Daniel Gerzo
On Mon, Oct 15, 2007 at 06:24:26PM -0400, Jerry McAllister wrote:
 On Mon, Oct 15, 2007 at 11:07:33AM -0500, [EMAIL PROTECTED] wrote:
 
  
  Hello sir
  i would like to run freebsd.sd  to supoort freebsd on Sudan .. do i need 
  to follow any steps before i run it and join freebsd.org as mirror ?
  Mohammed Tayeb
  SysAdmin.
 
 There is documentation somewhere on setting up a mirror, but I just
 did a quickie search and didn't find it.   I don't have time right now
 to look more.   Maybe someone else will provide the information or maybe
 a useful link will be added on the main web site documentation somewhere.

http://www.freebsd.org/doc/en_US.ISO8859-1/articles/hubs/index.html

-- 
Sincerely,
  Daniel Gerzo
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Research About FreeSBD

2007-09-27 Thread Daniel Gerzo
Hello Danilo,

Thursday, September 27, 2007, 8:12:59 AM, you wrote:

 Good Night !

 I am working on an Open Source Project and specifically I am researching
 about Freebsd as a Company. I would like to know more about your current
 market position , financial performance , etc.

 Can I find this information in your web page or may be contact somebody
 in your Organization ? 

Although FreeBSD is not a company, you will find some financial
information and some other things about the project at
http://www.freebsdfoundation.org/.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: Research About FreeSBD , consult

2007-09-27 Thread Daniel Gerzo
Hello Danilo,

Thursday, September 27, 2007, 3:33:21 PM, you wrote:

 Daniel 

 Thanks very much for your support I really appreciate it.

You are welcome.

 I have a 2nd level of questions more related to the current domain of
 FreeBSD in the market (% of participation , mindshare , competitive
 advantages, others) 

 Is there a contact within your Organization I can call/contact to talk
 about it please. I would like to interview him/her

You will find contact information at:
http://www.freebsd.org/administration.html and
http://www.freebsdfoundation.org/contact.shtml


-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: run CVSup ahead of time?

2007-09-01 Thread Daniel Gerzo
Hello Grant,

Saturday, September 1, 2007, 1:28:05 PM, you wrote:

 Hi all,

 I am about 200 miles from the servers.

 Can I run cvsup now (12 hours ahead of time) safely on production
 servers, then do the rest when I get there?

of course.

 Noone else uses the ports system but me, or installs
 anything...i.e. I am the only one who can log into the shell.

 -Grant

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


pfctl: DIOCSETSTATUSIF

2007-02-28 Thread Daniel Gerzo
Hello pf,

I'm having the following problem:

db2# pfctl -f /etc/pf.conf
No ALTQ support in kernel
ALTQ related functions disabled
pfctl: DIOCSETSTATUSIF
Exit 1
db2# uname -srm
FreeBSD 7.0-CURRENT #0: Wed Feb 28 23:47:39 CET 2007 amd64

pf related items in kernel:

device  pf
device  pflog

-- 
Best regards,
 Daniel  mailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: pfctl: DIOCSETSTATUSIF

2007-02-28 Thread Daniel Gerzo
Hello J.D.,

Thursday, March 1, 2007, 12:58:31 AM, you wrote:

 At 12:51 AM 3/1/2007 +0100, Daniel Gerzo wrote:
Hello pf,

I'm having the following problem:

db2# pfctl -f /etc/pf.conf
No ALTQ support in kernel
ALTQ related functions disabled
pfctl: DIOCSETSTATUSIF
Exit 1
db2# uname -srm
FreeBSD 7.0-CURRENT #0: Wed Feb 28 23:47:39 CET 2007 amd64

pf related items in kernel:

device  pf
device  pflog


 any chance you have this in pf.conf:
 set loginterface tun0

 and tun0 isnt up yet?

 DIOCSETSTATUSIF generally means that pfctl is trying to operate on a 
 non-existant interface

ah, thanks!
I had a typo in the ext_if macro re0/rl0 :-)

 -JD 

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: When will X11R7.2 hit the ports tree ?

2007-02-18 Thread Daniel Gerzo
Hello Ivan,

Sunday, February 18, 2007, 1:04:44 PM, you wrote:

 X11R7.2 was released three days ago. Any ideas when 
 will we see it in ports ?

http://blog.xbsd.org/2007/02/16/xorg-72-has-been-released-but-not-in-ports-yet/

 Ivan Georgiev

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mx.freebsd.org

2007-01-31 Thread Daniel Gerzo
Hello Philip,

Wednesday, January 31, 2007, 10:23:03 AM, you wrote:

 Did @freebsd.org lists start taking the reject for X minutes to
 everyone approach and I missed it ?

That is called Graylisting.

 Also, it doesn't seem to always happen.  Saturday, [EMAIL PROTECTED] did
 this too, but just now 01:00 America/Los_Angeles it didn't it just
 accepted it outright.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: phpmyadmin 2.9.0.3 depends on php5 5.2.0

2006-11-09 Thread Daniel Gerzo
Hello Gerard,

Thursday, November 9, 2006, 7:45:53 PM, you wrote:

 On Thursday November 09, 2006 at 12:12:42 (PM) John Smith wrote:


 Why PHP 5.1.6 is removed in the first place?

See the PHP 5.2.0 announcement:

The PHP development team is proud to announce the immediate release
of PHP 5.2.0. This release is a major improvement in the 5.X series,
which includes a large number of new features, bug fixes and security
enhancements. Further details about this release can be found in the
release announcement 5.2.0, the full list of changes is available in
the ChangeLog PHP 5.

All users of PHP, especially those using earlier PHP 5 releases are
advised to upgrade to this release as soon as possible. This release
^
also obsoletes the 5.1 branch of PHP.
^^

 Contact the maintainer. I assume they would know.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Screenshots during installation?

2006-11-05 Thread Daniel Gerzo
Hello Yousef,

Sunday, November 5, 2006, 3:05:57 PM, you wrote:

 Hello,

 Is there a way I can take screenshots during installation? I know the
 installer runs sysinstall and I can invoke that from any terminal once
 the system installed and grab that window from my GUI, but are there
 other ways of doing it?

vidcontrol -p

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: webbased email administration

2006-10-12 Thread Daniel Gerzo
Hello Andreas,

Thursday, October 12, 2006, 9:09:35 AM, you wrote:

 Hi,
 We're considering setting up an email service here and we need to give IT
 admins in various companies the ability to administer their own email
 addresses (under their domain).

 I'm looking for software that will do this. We currently run Sendmail and
 WU-POP3, but can easily change to Postfix or whatever needed.

 Can anyone recommend a webbased system for administration of email adresses
 that will run on FreeBSD?

postfix + postfixadmin + mysql (there are also patches to make it work
with pgsql), all these tools are in ports.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: ZendOptimizer and libm.so.2?

2006-10-03 Thread Daniel Gerzo
Hello Mark,

Wednesday, October 4, 2006, 12:22:28 AM, you wrote:

  Which leads me to believe I'm correct in thinking Zend 
  Optimizer really just needs libm.so.2, right?
 
 You're better off installing the misc/compat4x port to get libm.so.2 .

 No, I *have* libm.so.2 (FreeBSD 4.11); The port for Zend Optimizer

You should be better with not having such an ancient system :-)

And now seriously, its End Of Life (i.e. support from security team)
is sheduled on January 31th 2007.

 said it needed libm.so.3, but from what I read, I really think libm.so.2
 suffices.

 - Mark

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: build audit kernel

2006-09-25 Thread Daniel Gerzo
Hello Robert,

Tuesday, September 26, 2006, 12:05:25 AM, you wrote:

 FYI: Support for audit has now been merged to the 6-STABLE branch for 
 inclusion in FreeBSD 6.2-RELEASE in the next month.  The 6.1-BETA1 image
 includes basic audit support; it will be significantly refined and updated in
 6.1-BETA2 next week.  The handbook chapter has else been extended to cover
 audit in more detail.

s/6.1-BETA/6.2-BETA/g :-)

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: help please

2006-09-21 Thread Daniel Gerzo
Hello Hèrvé,

Wednesday, September 20, 2006, 10:49:31 PM, you wrote:

 Hi everybody,

 I recently install freebsd 5.4, bind9, isc-dhcp-server, openldap on my
 machine.
 DNS server is working oke, but since I'm running ipfw firewall on the 
 machine, my windows client (internet Explorer kan reach my
 freeBsd webserver.
 can anyone tell me wich protocol and port I have to open up on my ipfw
 firewall
 so that windows client kan reach my webserver

80/tcp

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: sshd brute force attempts?

2006-09-20 Thread Daniel Gerzo
Hello Joao,

Tuesday, September 19, 2006, 11:12:37 PM, you wrote:

 On 9/19/06, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote:
 Hey all,

 I've looked around and found several linux-centric things designed to
 block brute-force SSH attempts.  Anyone out there know of something a bit
 more BSD savvy?

 I've found a few things based on openBSD's pf, but that doesn't seem to be
 the default in BSD either.

 Any response appreciated.


 I'm using BruteForceBlocker quite successfully.
 I take the opportunity to thank danger for it :-)

you're welcome ;-)

 http://www.freshports.org/security/bruteforceblocker/

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: rebooting into single user mode on a remote server

2006-09-17 Thread Daniel Gerzo
Hello pobox,

Saturday, September 16, 2006, 8:47:04 PM, you wrote:

 Hello,

 could somebody help me to understand the best way to enter into a single
 user mode on a remote server.

 I need it for the moment, during rebuilding world, when I have to reboot
 into single user mode before 'mergemaster -p'.

I don't want to persuade you to something that is not officially
supported, but I have never booted into single user mode while
upgrading my FreeBSD boxes and I have never experienced any problems
because of this. Just try to skip the reboot step and go ahead. It
works(tm) for me this way.

If you are paranoid, try to stop all running services except the ssh
deamon.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: php5 module is not created

2006-09-17 Thread Daniel Gerzo
Hello David,

Sunday, September 17, 2006, 11:05:44 PM, you wrote:

 I am attempting to install php with apache13. It seems that the mod_php5
 port does not exist in the ports. The main php5 port does not seem to
 create the module. Without the php5 module, how does what get php5 
 to work with apache13?

Try make config in the lang/php5 port.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: php5 module is not created

2006-09-17 Thread Daniel Gerzo
Hello David,

Sunday, September 17, 2006, 11:15:17 PM, you wrote:

 On Sun, Sep 17, 2006 at 11:11:58PM +0200, Daniel Gerzo wrote:
 Hello David,
 
 Sunday, September 17, 2006, 11:05:44 PM, you wrote:
 
  I am attempting to install php with apache13. It seems that the mod_php5
  port does not exist in the ports. The main php5 port does not seem to
  create the module. Without the php5 module, how does what get php5 
  to work with apache13?
 
 Try make config in the lang/php5 port.

 Is that the same as make configure? - I have been doing that.

It isn't. Please read the ports(7) manual page :-)

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: problem with phpMyAdmin port

2006-08-30 Thread Daniel Gerzo
Hello fbsd,

Wednesday, August 30, 2006, 6:18:05 PM, you wrote:

 Just downloaded phpMyAdmin port make files on 6.1 system and ran
 make install clear.

 Already had php5 and mysql5 previously installed and working.

 The phpMyAdmin port installed fine.

 Problem is the phpMyAdmin directory was installed as /www/phpMyAdmin
 and it should have been /usr/local/www/phpMyAdmin.
 This looks to me like port error to me.

not sure here, wait for others' replies.

 I tried to do work around by cp -R /www/phpMyAdmin /usr/local/www/
 This copied all the files and subdirectories ok.

 When I try to run phpMyAdmin I get this error
 Fatal error: Call to undefined function preg_replace() in
 /usr/local/www/phpMyAdmin/libraries/sanitizing.lib.php on line 37

this is not error of the port. You are missing PCRE php extension.
Install the lang/php4-extensions or php5-extensions port.

 This again looks like another port error.

 Is the phpMyAdmin port broken

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: Apache 2.2 http accept filter

2006-08-19 Thread Daniel Gerzo
Hello Gábor,

Saturday, August 19, 2006, 5:38:26 PM, you wrote:

 Ian Lord wrote:
 Hi,

 When I start apache2.2, I get the following error:

 [Sat Aug 19 11:26:50 2006] [warn] (2)No such file or directory: Failed 
 to enable the 'httpready' Accept Filter
 [Sat Aug 19 11:26:50 2006] [warn] (2)No such file or directory: Failed 
 to enable the 'httpready' Accept Filter
 [Sat Aug 19 11:26:50 2006] [warn] (2)No such file or directory: Failed 
 to enable the 'httpready' Accept Filter

 Here is my config
 In /etc/rc.conf:
 apache22_enable=YES
 apache22 ssl_enable=YES
 apache22_http_accept_enable=YES

 In /usr/local/etc/apache22/httpd.conf:
 AcceptFilter http httpready
 AcceptFilter https dataready

 Is there anything I am missing in the kernel or somewhere ?
 Also, is it better to run with or without httpready ? I read it was 
 better performance wide to use it

 Thanks a lot

 Yes, you have to put these two lines into your kernel config:
 options ACCEPT_FILTER_HTTP
 options ACCEPT_FILTER_DATA

 Alternatively, you can load the appropriate kernel modules as well.

well, the apache22_http_accept_enable=YES should do this for him,
but it seems like the problems stands elsewhere.

Ian, are you sure that these modules are present under the
/boot/modules directory?

 I think it's better to use these, you might gain a bit in the 
 performance as you wrote.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tuning FreeBSD

2006-08-19 Thread Daniel Gerzo
Hello Lisa,

Saturday, August 19, 2006, 10:35:29 PM, you wrote:

 Hi Folksm

 I'm getting these on a FreeBSD 5.3 box:

 Aug 19 15:46:32 radius sm-mta[12850]: k7JJk1rt012776: SYSERR(UID0): fill_fd:
 disconnect: cannot open /dev/null:
  Too many open files in system
 Aug 19 15:46:40 radius kernel: kern.maxfiles limit exceeded by uid 0, please
 see tuning(7).
 Aug 19 15:46:40 radius kernel: kern.maxfiles limit exceeded by uid 0, please
 see tuning(7).
 Aug 19 15:46:35 radius sm-mta[12784]: k7JJk7F0012784: SYSERR(UID0): queueup:
 cannot create queue file ./qfk7JJk
 7F0012784, euid=0, fd=-1, fp=0x0: Too many open files in system

 I checked, and the system shows:

 radius# sysctl kern.maxfiles
 kern.maxfiles: 1416
 radius# sysctl kern.maxusers
 kern.maxusers: 43

 I googled and read that kern.maxfiles is dependent upon kern.maxusers and
 that I shou;d raise maxusers which I tried to do via sysctl:

I don't think that this is really required. Just raise the
kern.maxfiles sysctl if you really need to do so.

I would rather search for the reason why I need to allow kernel to
open such many number of files. Allowing it to open too many files
can lead to a Denial of Service.

 radius# sysctl -w kern.maxusers=50
 sysctl: oid 'kern.maxusers' is a read only tunable
 sysctl: Tunable values are set in /boot/loader.conf

 My /boot/loader.conf is a zero byte length file.

That is not problem. There is no /boot/loader.conf by default (IIRC)
although there is /boot/defaults/loader.conf

 How can I fix this too many open files problem?

 Thanks,

 Lisa Casey

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: user level

2006-08-19 Thread Daniel Gerzo
Hello conrad,

Saturday, August 19, 2006, 10:52:13 PM, you wrote:

 Dear Sir: I assembled my first computer in March of 2005. I am 56 years
 old. Since that time, I have built one tower and built a computer for
 myself. I have tried several times to install and run FreeBSD and ran
 into trouble configuring my internet connection via DHCP. I have started
 studying an older manual for BSD by Greg Lehey for 4.4BSD. I have a lot

This must be pretty old, you should rather start reading our Handbook
located at http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/.
It's full of very good set of examples describing a lot of things you
can do with FreeBSD.

 to learn and I would love to install FreeBSD, but I am begining to
 wonder if Im in over my head. Would it be necessary for me to take
 college courses in order to function in a BSD enviroment? I have
 survived some major problems with other operating systems. I have run
 and used:Fedora Core, Xandros, Ubuntu, installed Debian, DesktopBSD, and
 PCBSD; but, my dream is to run FreeBSD, but I have to be connected to

If you were able to live with operating systems listed above, you will
be surely able to install FreeBSD. There is no magic, believe me. Also
PCBSD and DesktopBSD are forks of FreeBSD so it's pretty much
possible that the configuration is the same, although I've never seen
these two.

 the Internet to conduct personal business. What must I know to configure
 sbcglobal.net to operate FreeBSD. And, do you think I need to learn a

If DHCP is all you need to setup your internet connection, there is
nothing easier you can have. Just put the installation CD into your
drive, boot it and when the sysinstall will ask you

Do you want to try DHCP configuration of the interface?

you will choose [ Yes ] button. That's all.

 lot more, or should I scrub the whole idea because it was meant for a
 educated programmer? If you find the time to answer me I'll be very
 grateful. I'll understand if you just refer me to the proper man or info
 pages. Thank you for your time. Yours, Conrad

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to prevent users from receiving email

2006-08-19 Thread Daniel Gerzo
Hello Bill,

Sunday, August 20, 2006, 1:21:39 AM, you wrote:

 Apparently my memory is useless and I've lost the ability to use
 google as well.

 I just added a user account to a mail server, but I don't want that
 user to receive mail on that server.  It's running Postfix.

 I seem to remember a canonical method for preventing certain users
 from receiving email.  But my memory has failed, and I can't seem
 to find anything on google.

 Is it an /etc/aliases trick?

Indeed. Just make it go to /dev/null:

user: /dev/null

Do not forget to run newaliases ;-)

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 6.1 source upgrade: Error code 1

2006-08-18 Thread Daniel Gerzo
Hello Mischa,

Friday, August 18, 2006, 1:07:03 PM, you wrote:

 This is a source upgrade of FreeBSD 6.1 and not a prior version to 5.3.

What version of FreeBSD are you upgrading from?

If you are upgrading from FreeBSD  5.3. It is not possible to upgrade
to 6.x until you are running at least FreeBSD 5.3.

 Any ideas?

 Mischa

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: lang/php4 defaults to cgi build?

2006-08-17 Thread Daniel Gerzo
Hello Nikolas,

Thursday, August 17, 2006, 6:43:48 PM, you wrote:

 lang/php4 defaults to cgi build. When did we decide this? AFAIK it
 always built the apache module in the past... isn't that standard
 procedure for building a LAMP stack?

20060506:
  AFFECTS: users of PHP
  AUTHOR: [EMAIL PROTECTED]

  The old PHP slave ports (phpN-cli, phpN-cgi and mod_phpN) were removed
  in favour of unified PHP ports that allow building any combination of
  PHP SAPIs (cli, cgi and apache module).
  The PHP CGI binary was renamed to php-cgi, so you should update
  the path in your script. To simplify the update process, *only* for
  this release a 'php' compatibility symlink to php-cgi will be created
  if you don't select the CLI SAPI.
  Before the upgrade you *should* run 'make config' in lang/php4 or
  lang/php5 to configure the SAPIs you want to install.
  As a consequence the default binary packages include the CLI and the
  FastCGI SAPIs.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: How to bypass loader.conf at boot

2006-08-17 Thread Daniel Gerzo
Hello Odhiambo,

Thursday, August 17, 2006, 7:47:20 PM, you wrote:

 * On 17/08/06 21:22 +0400, Nguyen Tam Chinh wrote:
 | Hi all,
 | 
 | I edited the /boot/loader.conf to add values for kern.maxdsiz and
 | kern.dfldsiz.
 | Unfortunately my server can not boot after that (the values are too big).
 | How can I bypass the loader.conf parameters at
 | boot? Or how I can change these values interactively?
 | The server is located in a data center and I can access to it through
 | supporter.
 | Please advice.
 | Thanks all for helping.
 | 
 | PS. Please CC me because I'm not in this list.



 Off the top of my head .

I don't think that this is really needed.

Let the technician boot the box and tell him to escape to the boot
prompt. When he will be done, he just need to unset those variables
with the following command -- unset kern.maxdsiz; and unset
kern.dfldsiz. After that, he will just have to type 'boot' and that's
all. I hope that this will work for him ;-)

Anyway, try to read through loader(8) manual page.

 Get the guy at the data centre to get a 5.x or 6.x installation CD.
 He should boot with it and choose the Fixit option, and select the
 live filesystem on CD.
 After that, he will be dropped into a shell and the following steps
 will work:

 fsck -y /dev/da0s1a (change to the correct slice name!!)

 Once that is complete:

 mount /dev/da0s1a /mnt
 vi /mnt/boot/loader.conf
 save changes

 Exit the Fixit mode and reboot, removing the CD, and voila!


 -Wash

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Wilfully dirtying a filesystem

2006-08-17 Thread Daniel Gerzo
Hello Ceri,

Thursday, August 17, 2006, 6:55:08 PM, you wrote:

 I have a system on which /usr is slightly hosed, but not badly enough
 for it to fail a preen fsck.

 I cannot easily get to single-user on this machine, so is there a good
 way for me to dirty the filesystem just enough to force fsck -p to
 fail (yanking power also difficult)?  umount -f /usr; reboot doesn't
 seem to work...

I have been told maybe a week ago that umount -f is badly broken and
might lead to the deadlock, therefore I would avoid using it :)

 Ceri

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Compiling Kernel Modules

2006-08-16 Thread Daniel Gerzo
Hello Lawrence,

Wednesday, August 16, 2006, 10:21:27 PM, you wrote:

 I hope this is the correct list for this question but ..

 I am trying NOT to compile certain modules when I create
 my own custom kernel. I thought /etc/make.conf with the
 directive WITHOUT_MODULES did what I was expecting but
 it does not.

Actually, WITHOUT_MODULES is a list of modules you want to exclude
from the build.

You are looking for MODULES_OVERRIDE directive.

Please refer to the make.conf(5) manual page.

 So, how do I leave out certain modules when custom
 compile a new kernel?

 Thanks ..

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: quick way fall back to the original kernel

2006-08-14 Thread Daniel Gerzo
Hello gahn,

Monday, August 14, 2006, 6:07:08 PM, you wrote:

 Thanks for ur advice.

 actually i did that; rename the current kernel and
 name the kernel.old to kernel, which worked. but i
 am looking for a command that could do that.

you actually don't have to rename your kernels when you want to boot
different one to /boot/kernel. All you need is to set some variables
in /boot/loader.conf. See the approporiate manual page loader.conf(5)
and /boot/defaults/loader.conf. As a hint check the kernel and
bootfile variables. Or there is also utility called nextboot(8).

 the reason is that i am trying to keep my kernel up to
 date, but my understanding is that it could be done
 only with the original kernel, right? or i am
 mistaken...

 as to kernel.safe, there is no this directory by
 default (even boot manual has option for kernel safe).
 i am wondering where the kernel.safe is...

kernel.safe does not exist by default. Giorgos's kernel.safe directory
is only a copy of kernel which simply works for him and he is
certainly sure it does. Of course, you can keep as much kernels as you
want in your /boot directory (well, depends on how much of the free
space you have on root partition :-)) and you can name them let's say
kernel-06-03-20 and so on.

Please, also the corresponding chapter in our great Handbook:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html

and also this document can be good source for you:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/boot-blocks.html

 but i do keep a copy of the orginal kernel in case i
 loss track of kernel version...

Once you run make installkernel, the previous version of your kernel
is copied into the kernel.old directory.

 --- Giorgos Keramidas [EMAIL PROTECTED]
 wrote:

 On 2006-08-14 11:20, dick hoogendijk
 [EMAIL PROTECTED] wrote:
  On 13 Aug Atom Powers wrote:
   And, although I've never tried it, you sholud be
 able to `cp
   /boot/kernel.old /boot/kernel` to restore the
 previous kernel.
  
  I did. A few times. I just renamed the directories
 to kernel and
  whatevername ;-) Works like a charm..
 
 Right.
 
 I usually wait a few days to make sure there are no
 funny problems with
 the CURRENT kernel I'm using, and then run:
 
 # cd /boot
 # rm -fr kernel.safe
 # cp -Rp kernel kernel.safe
 
 This way, I have /boot/kernel, /boot/kernel.old and
 /boot/kernel.safe.
 
 By keeping kernel.safe out of the (kernel,
 kernel.old) way, I'm sure
 that I won't accidentally lose my 'safe' kernels
 because I run make
 installkernel at the wrong time.
 
 HTH,
 Giorgos

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Undelete for UFS2?

2006-08-12 Thread Daniel Gerzo
Hello Chris,

Saturday, August 12, 2006, 3:48:28 AM, you wrote:

 Just thought I'd ask though I'm pretty sure the answer is no. Nothing 
 important just my mailbox files for mailing lists including this one. 
 All my email addresses look alike and I was foulish enough to copy and
 paste.  Why oh why I didn't add the backup cronjob I don't know...

 Is there anyway to get spools for this list?  It's nice being able to 
 search messages locally.

 Lastly surely someone has implemented a trash folder mechanism for 
 freebsd... what is it called so I can look up how to install it?

maybe something like:

mkdir ~/.trash
alias rm 'mv -iv \!* ~/.trash/'

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[3]: BSDstats Project v2.0 ...

2006-08-12 Thread Daniel Gerzo
Hello Marc,

Saturday, August 12, 2006, 12:55:13 AM, you wrote:

 On Sat, 12 Aug 2006, Daniel Gerzo wrote:


 It would be nice to see this in base system, that would help to raise
 this number enourmously.  And surely it would be nice to see it
 somewhere under the freebsd.org domain.

 Actually, I've registered bsdstats.org for this ... I've been talking to
 various ppl from the other *BSDs about getting them involved as well, so
 went with the more 'neutral' domain instead of making this FreeBSD Only
 ... we share alot between us as it is, sharing marketing power is a good
 thing ...

Ah, I see. I haven't been thinking about this this way :)

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Web mail for phones

2006-08-12 Thread Daniel Gerzo
Hello Andrea,

Saturday, August 12, 2006, 5:58:15 PM, you wrote:

 Hello.

 I've searched the web a lot, but could not find anything about this; 
 maybe I can't figure the proper terms to search for.

 I'm used to installing NOCC on my mail IMAP servers and I'm happy with
 it when it comes to accessing mail from a computer.
 The next step would be accessing mail from cell phones and/or PDAs. Any
 hint?

try http://www.horde.org, they have recently released a public stable
version of such application.

 I'm totally ignorant on the matter as to what protocol they use (http,
 wap, ???).

   bye  Thanks
 av.


-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: BSDstats Project v2.0 ...

2006-08-11 Thread Daniel Gerzo
Hello Garance,

Friday, August 11, 2006, 9:59:41 PM, you wrote:

 At 11:49 AM -0500 8/11/06, Paul Schmehl wrote:

 I know we are used to dealing in internet-time, where
 things happen instantly, but there could be many reasons
 that the host count is only 1612.  Reasons that have
 nothing to do with the specific outcome of how these
 security issues are handled.

 I am certainly all for the improvements people have
 been talking about.  I'm just saying that even if you
 make all those improvements, you're probably going to
 have to wait a few weeks before we see any significant
 number of hosts show up.  That's just the way it is.

It would be nice to see this in base system, that would help to raise
this number enourmously.  And surely it would be nice to see it
somewhere under the freebsd.org domain.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BSDstats Project v2.0 ...

2006-08-07 Thread Daniel Gerzo
Hello Marc,

Monday, August 7, 2006, 5:42:27 AM, you wrote:

 I've now committed v2.0 of the 300.statistics periodic script ... this one
 adds the device reporting that we'd talked about previously, and the 
 summary reports now reflect the driver(s) in use for those deciding to
 report ...

 I've written it to report driver + chip= information from pciconf -l, 
 since even pciconf -lv doesn't seem to use card= ... the summary report
 will be extended next to show both vendor and chip statistics ...

Maybe it would be better if you strip the ending number from the
driver, so the page will list total number of driver usage not fxp0,
fxp1 totals and so on.

 Let me know of any problems ...

Seems like some people are already trying to be funny, because
according to the page there are already people running (~40)
FreeBSD 8.0-CURRENT :-) It's sad to see this to be happening.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: eaccelerator hit: log msgs

2006-08-07 Thread Daniel Gerzo
Hello dick,

Monday, August 7, 2006, 2:49:52 PM, you wrote:

 Installing eAccelerator with apache2.2.3/php4 was easy enough.
 It is indeed a lot faster, BUT,
 However, my httpd-error.log very fast with lots and lots of rules like:

 EACCELERATOR hit:/usr/local/www/horde/imp/config/servers.php
 etc, etc..

 I don't want these lines to appear.
 How and where can this be disabled?

put this into php.ini:
eaccelerator.debug = 0

 System: FreeBSD-6.1 with the latest ports collection

next time please read eaccelerator's documentation :-)

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: BSDstats Project v2.0 ...

2006-08-07 Thread Daniel Gerzo
Hello Pat,

Monday, August 7, 2006, 10:42:53 PM, you wrote:

 For those of us who can't read minds, what's the port to install, and
 the website where we can view the stats? :)

sysutils/bsdstats

http://bsdstats.hub.org/


-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: BSDstats Project v2.0 ...

2006-08-07 Thread Daniel Gerzo
Hello Chris,

Monday, August 7, 2006, 11:17:41 PM, you wrote:

 Bill Moran wrote:
 In response to Pat Maddox [EMAIL PROTECTED]:
 
 For those of us who can't read minds, what's the port to install, and
 the website where we can view the stats? :)
 
 As a side track on this, it'd be nice if the port installation message
 said something like got to http://bsdstats.hub.org to see current stats
 

 I agree - another note:

 After the install, better documentation might be add. Meaning, it needs
 to be defined that the 2 lines

 Should reflect the proper location:

 /etc/rc.conf - assuming the knobs are needed here.

  sorry, but you are wrong here; the correct location is
  /etc/periodic.conf as documented.

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: Upgrading to 6.1 (cvsup)

2006-05-09 Thread Daniel Gerzo
Hello Miguel,

Tuesday, May 9, 2006, 9:48:00 PM, you typed the following:

 Nikolas Britton wrote:

 is that info (tags meaning) available somewhere in the handbook?, im 
 running 6.1-RC1 and want to upgrade to 6.1-RELEASE, or better to 
 6.1-STABLE, what tag should i use?
 RELENG???

RELENG_6 = 6.1-STABLE
RELENG_6_1 = 6.1-RELEASE

-- 
Sincerely,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: New freebsd logo on freebsd.org

2006-05-09 Thread Daniel Gerzo
Hi michael,

Tuesday, May 9, 2006, 10:20:42 PM, you wrote about:

 On 5/9/06, Ceri Davies [EMAIL PROTECTED] wrote:

 I don't know about font overflows but I get the following

 http://people.freebsd.org/~ahze/bad-new-icon.png

reload your css files.

 Michael

-- 
Regards,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 7-CURRENT

2006-05-08 Thread Daniel Gerzo
Hello Perttu,

Monday, May 8, 2006, 1:02:07 PM, you typed:

 I have 7-CURRENT-SNAP009 on one testing computer and I'd like to update it
 to latest 7 sources. So can it be done via cvsup or how can update sources
 to latest? RELENG_7 seems to just delete everything with cvsup...

 yeah, cvsup is the right way, but instead of RELENG_7 tag use '.'

-- 
Sincerely,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Installing PHP

2006-03-30 Thread Daniel Gerzo
Hi Darryl,

Thursday, March 30, 2006, 6:04:05 PM, you has on mind:

 greetings,
 I have a freebsd 6.0-release box.  I need to install php to use with
 squirrelmail.   When I go to /usr/ports/www and look for php4, I
 see a lot of sub directories with names that aren't clear as to which
 one installs php4.

 So, anybody care to clarify this for me ?

you most probably want to read a chapter in our Handbook located at
http://www.freebsd.org/handbook. That documentation is a great thing
:)

also, for your information - the php4 core port persists in lang/php4
directory.

 Also, I need to configure php with the following options:
 --enable-track-vars
 --enable-force-cgi-redirect 
 --with-gettext
 --with-mysql

 which file should I put those in before make, make install ?

just type make config, see what options are configurable. if you need
to configure any further things, you will have to edit Makefile and
add these options to CONFIGURE_ARGS.

For a side note, if you need php4 extensions, go for
lang/php4-extensions port and type make config a then choose
extensions you really need, do not use CONFIGURE_ARGS for this.

 thanks,
 Darryl

-- 
Best Regards,
 Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Tightening up ssh

2006-03-26 Thread Daniel Gerzo
Hi Graham,

Sunday, March 26, 2006, 9:52:11 PM, you wrote about:

 Does this mean that there is a way to run ssh, but only allow
 certain users to use it.   My default seems to have been that if
 someone has a username and password they can access ssh (except root
 as PermitRootLogin no is the default).   The ssh port seems to be
 the most heavily attacked one on my machine and so I recently took
 to blocking port 22.   My preference would be to enable it to only
 one user and give them an obscure username and strong password. 
 Root is not currently allowed access by default in the setup.

check the AllowUsers and AllowGroups directive in sshd_config(5)

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Garrick Utley in Allie Sheedy's Frankenstein...  Tom Servo ]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: limiting brute force attacks

2006-02-28 Thread Daniel Gerzo
Hello Michael,

Tuesday, February 28, 2006, 4:25:55 PM, you contributed this to our collective 
wisdom:

 Hey people,

 I've seen some efforts from the netfilter community on Linux to provide a
 means to limit brute-force attacks via firewall rules. Can anyone suggest a
 way to do the same on FreeBSD? 

 I'm primarily interested in limiting attacks on sshd. I already use RSA auth,
 but I like defense-in-depth.

maybe you would be interested in ports/security/bruteforceblocker ?

 Thanks,
 Mike

-- 
Sincerely,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Hello

2006-02-19 Thread Daniel Gerzo
Programator George,

Sunday, February 19, 2006, 12:01:10 PM, si tukal:

 Hello,

 for the freeBSD does exist Live-CD? 

  you can use FreeSBIE: http://www.freesbie.org/

-- 
Sincerely,
   Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: suggestions for FreeBSD development

2006-02-09 Thread Daniel Gerzo
Hi gs,

Thursday, February 9, 2006, 10:03:42 PM, you made these points:

 Where are suggestions (for FreeBSD development) to be sent?
 To this (the questions site), or the hackers site, or some other site?

hackers@, current@

-- 
Best Regards,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: auth.log intruder prevention

2006-01-24 Thread Daniel Gerzo
On Tue, Jan 24, 2006 at 10:02:26PM +0100, Ilias Sachpazidis wrote:
 Hi Everyone,

hello,
   
 
 In auth.log of my FreeBSD boxes I got many requests to port 22, as you can
 see below.
 begin of snippet
 Jan 22 11:21:50 zeus sshd[92900]: Failed password for illegal user cracking
 from 65.208.188.105 port 58344 ssh2
 Jan 22 11:21:53 zeus sshd[92902]: Failed password for illegal user hacking
 from 65.208.188.105 port 58443 ssh2
 end of snippet
 
 I am wondering if any script is available to prevent hundreds of attempts on
 port 22 from external IPs that constantly checking user  passwords on my
 FreeBSD PCs.
 
 What I am looking for is a deamon application/script that receives the
 recorded data from auth.log and detects if any remote client (IP address) is
 checking user and passwords (Detection pattern: 5 missing attempts in 1
 min). On a successful detection, the script should add an ipfw rule
 rejecting further IP packets from the specific remote address.
 
 Is any script or something similar available so far? 

I've written a BruteForceBlocer, you can install it from ports as well,
check security/bruteforceblocker.

Hope you will like it.

-- 
Sincerely,
   Daniel Gerzo
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: oracle on freeBSD

2006-01-04 Thread Daniel Gerzo
Hello eoghan,

Wednesday, January 4, 2006, 7:59:44 PM, you wrote:

 Hello
 Im wondering if there is any info on getting oracle running on  
 freeBSD (im using 6.0). I have found this:

we have a section in handbook about setting up oracle, but it's
outdated now, though there are some people reporting it's still
possible to get latest versions of oracle running on FreeBSD.
check the handbook and try it yourself, you will need to set up a
linux compatibility for that.

also, if you get it running, could you please write some howto, so we
can update the handbook? (doesn't need to be in sgml markup, we will
make it by ourselves)

 http://www.scc.nl/~marcel/howto-oracle.html
 But it seems a little dated. I read oracle doesnt officially support  
 freeBSD and was pointed to a link here of people working with it:
 http://twister.pp.ru/ora-fbsd
 I dont speak russian, but is this no longer being continued?
 Also, by oracle, I mean the database. i realise they have many  
 products...
 Any info would help...
 Thanks
 Eoghan

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: oracle on freeBSD

2006-01-04 Thread Daniel Gerzo
Hello eoghan,

Wednesday, January 4, 2006, 10:16:40 PM, you wrote:

 On 4 Jan 2006, at 20:09, Daniel Gerzo wrote:

 Hello eoghan,

 Wednesday, January 4, 2006, 7:59:44 PM, you wrote:

 Hello
 Im wondering if there is any info on getting oracle running on
 freeBSD (im using 6.0). I have found this:

 we have a section in handbook about setting up oracle, but it's
 outdated now, though there are some people reporting it's still
 possible to get latest versions of oracle running on FreeBSD.
 check the handbook and try it yourself, you will need to set up a
 linux compatibility for that.


 Hi Daniel
 Yes I actually got that after i sent it although it appears to be the
 same as the link i sent below.

 also, if you get it running, could you please write some howto, so we
 can update the handbook? (doesn't need to be in sgml markup, we will
 make it by ourselves)

 I will have a go with it and the latest release. I was going to wait  
 till I upgrade my box. Not sure my system will run it efficiently...
 Having said that, I will give it a go over the next few days and let  
 you know how it goes.

that would be really nice, i wish you luck ;)

 http://www.scc.nl/~marcel/howto-oracle.html
 But it seems a little dated. I read oracle doesnt officially support
 freeBSD and was pointed to a link here of people working with it:
 http://twister.pp.ru/ora-fbsd
 I dont speak russian, but is this no longer being continued?
 Also, by oracle, I mean the database. i realise they have many
 products...
 Any info would help...
 Thanks
 Eoghan

-- 
Cheers,
 Danielmailto:[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Free BSD install tutorial I wrote

2006-01-01 Thread Daniel Gerzo
Hello Allen,

Sunday, January 1, 2006, 11:34:52 PM, you wrote:

 I wrote this quite a while ago and I've posted it to the docs list before and
 it got a good repsonce, but I've seen a couple install questions on here so
 I'm going to link to it again for this list. I don't think there is an easier
 to follow installer help anywhere. Not arrogance, but I did do very well with
 it in making it easy as crap to install:

I think handbook is here for this purpose (and people should be
following it, as it is being updated on regular occasion, though there
is possibility to find out-dated info and people are encouraged to
notify doc@ people to update information provided)

but no offense :)

 http://www.antionline.com/showthread.php?s=threadid=259335

 You don't have to sign up to read this.

 -Allen

-- 
Best regards,
 Danielmailto:[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: System upgrade questions

2005-11-26 Thread Daniel Gerzo
Hi Miguel,

Saturday, November 26, 2005, 6:29:50 PM, you wrote the following:

 Hi!

 I have a FreeBSD 5.3 release system which was upgraded with CVSup to
 RELENG_5. I have recently built a new kernel, but *have not* rebuilt
 world. The computer now says it's a FreeBSD 5.4-STABLE system.

 This can't be right, can it? :/

 I think I have two options: 
   * downgrade the sources to RELENG_5_3 with CVSup (replacing
 RELENG_5 with RELENG_5_3 in the supfile) and build a new FreeBSD
 5.3 kernel
 or 
   * rebuild world to have a FreeBSD 5.4 base system and kernel
 correct?

 If I opt for the second option, should I rebuild world everytime
 there's a version bump in FreeBSD?

I think you should go for the second option.

yes - you should rebuild world everytime, untill you exactly know what
has been changed in sources.

 TIA!

 Best regards,
 Miguel

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Never mow the grass... ]


Re[2]: cvsup vs. portsnap (was Re: cvsup problem)

2005-11-10 Thread Daniel Gerzo
Szia Andrew,

Thursday, November 10, 2005, 3:47:32 PM, you wrote:

 There are a couple more points against portsnap:
 - it lags behind by a few hours.

Actually, even cvsup is behind by a few hours, if you are not syncing
agains cvsup-master (to which only official cvsup mirrors have access,
and maybe even not all of them :)) so it depends on how often is your
cvsup-mirror beeing sinced.

 - setting up a mirror is still undocumented

-- 
Sincerely,
  Daniel Gerzo


Re: bruteforce not restarting pf?

2005-11-08 Thread Daniel Gerzo
Hello Dave,

Tuesday, November 8, 2005, 6:02:02 PM, you wrote these comments:

 Hello,
 I've got a machine running 5.4, offering ssh services and running
 bruteforce. In my daily security log emails i am seeing entries like:

snip

 I know these are automated atempts at entry but i thought bruteforce was
 suppose to stop these. In my auth.log i do see the IP being added, but
 connections are still allowed. Here's the snipet:

snip

 163.13.111.172 port 56376 ssh2
 163.13.111.172 was logged with total count of 3.
 Nov  7 07:07:03 zeus sshd[24753]: Failed password for root from 
 163.13.111.172 port 56418 ssh2
 IP 163.13.111.172 reached the maximum number of failed attempts!!!
 Adding IP to the firewall...
 Nov  7 07:07:05 zeus sshd[24757]: Illegal user simon from 163.13.111.172
 Nov  7 07:07:05 zeus sshd[24757]: Failed password for illegal user simon
 from 163.13.111.172 port 56461 ssh2
 Nov  7 07:07:08 zeus sshd[24759]: Illegal user simon from 163.13.111.172
 Nov  7 07:07:08 zeus sshd[24759]: Failed password for illegal user simon
 from 163.13.111.172 port 56504 ssh2
 Nov  7 07:07:10 zeus sshd[24761]: Failed password for root from 
 163.13.111.172 port 56543 ssh2

 Checking my bruteforce table ;i see 163.13.111.172/32 in it, so it was
 added, but i don't get why future connections were permitted unless pf was
 not restarted or informed about the updated table. In my pf.conf file i
 have:

what version of bruteforceblocker do you use?

 table bruteforce persist file /etc/bruteforce
 set block-policy drop
 block in log quick on $ext_if inet proto tcp from bruteforce to any port
 ssh

 Any help appreciated.
 Thanks.
 Dave.

Btw I'm about to release new version in a near future, the code is done,
but the port isn't yet :)

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ This is starting to get interesting, don't you think? ]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: bruteforceblocker + PF

2005-10-09 Thread Daniel Gerzo
Hi Enrique,

Friday, October 7, 2005, 4:44:31 PM, you thoughtfully wrote the following:

 El Viernes, 7 de Octubre de 2005 13:08, Daniel Gerzo escribió:
 1) Update your OpenSSH to 4.2, you can find the port in the
 security/openssh-portable (you can use -DOPENSSH_OVERWRITE_BASE
 option) Note, that this one I prefer more.

 Nice!!! It works perfectly, that was the problem, the ssh version and the logs
 it creates, after installing the one in the ports everything works fine.

I'm glad to hear/read this :)

 Thanks a lot by your help, and of course, for having made this little script,
 it is very helpful :)

You are welcome...

-- 
Sincerely,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: bruteforceblocker + PF

2005-10-07 Thread Daniel Gerzo
Hello Enrique,

Friday, October 7, 2005, 10:12:34 AM, you has on mind:

 El Osteguna 06 Urria 2005 22:18, Daniel Gerzo escribió:
 Hi questions, Enrique Ayesta Perojo,

 snip because I have accidently lost the thread :-)

It seems like bruteforceblocker is running, since you can see
messages in your auth.log. this is good. could you please provide
me info, which version of openssh are you using, so I can debug? I
have som reports, that my bruteforceblocker does not work with
older versions of openssh, since it uses little bit different
format of warnings, so my regexps does not apply. Also, please send
here the format of those messages.

Thank you.

 This is the version:

 OpenSSH_3.8.1p1 FreeBSD-20040419, OpenSSL 0.9.7e 25 Oct 2004

 It's a FreeBSD 5.4-p7 box, and here there are some of the messages 
 at /var/log/auth.log:

 Oct  6 18:29:26 fatboy sshd[28472]: Illegal user jack from 63.67.26.114
 Oct  6 18:29:26 fatboy sshd[28472]: reverse mapping checking getaddrinfo for
 host114.nokia-boston.com failed - POSSIBLE BREAKIN ATTEMPT!

 Oct  5 18:53:33 fatboy sshd[20731]: Illegal user pepito from 10.200.62.201
 Oct  5 18:53:33 fatboy sshd[20731]: Failed unknown for illegal user pepito
 from 10.200.62.201 port 44241 ssh2

yeah, that's what I thought it will be ;-)
OpenSSH = 3.8 uses little bit different warning messages. You have
two ways how to make your BruteForceBlocker to work with your
instllation.

1) Update your OpenSSH to 4.2, you can find the port in the
security/openssh-portable (you can use -DOPENSSH_OVERWRITE_BASE
option) Note, that this one I prefer more.

2) Modify the source code of the BruteForceBlocker, so that my regexps
will match your warnings, modify lines 58-60, for example change:

  Failed password.*from ((?:\d{1,3}\.){3}\d{1,3}) port
to
  Failed unknown for illegal user.*from ((?:\d{1,3}\.){3}\d{1,3}) port

or

  Invalid user.*from ((?:\d{1,3}\.){3}\d{1,3})
to
  Illegal user.*from ((?:\d{1,3}\.){3}\d{1,3})

 Thanks again

No problem, you are welcome. Let me know if it works.

-- 
Sincerely,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: bruteforceblocker + PF

2005-10-06 Thread Daniel Gerzo
Hi questions, Enrique Ayesta Perojo,

snip because I have accidently lost the thread :-)

   It seems like bruteforceblocker is running, since you can see
   messages in your auth.log. this is good. could you please provide
   me info, which version of openssh are you using, so I can debug? I
   have som reports, that my bruteforceblocker does not work with
   older versions of openssh, since it uses little bit different
   format of warnings, so my regexps does not apply. Also, please send
   here the format of those messages.

   Thank you.

-- 
Sincerely,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: bruteforceblocker + PF

2005-10-06 Thread Daniel Gerzo
Hi Dave,

Thursday, October 6, 2005, 10:24:20 PM, you wrote about:

 Hello,
 I've got bruetforceblocker going with pf, i just installed the port. My
 box is a 5.4 machine. I have it going on my lan server, which does ssh for
 my network, it's the box you'll hit if you ssh in as opposed to the firewall
 box. It's adding ip's to the table, but it's doing it staggeringly, i see
 activity in my logs where atempts are made and then the IP's keep coming
 back as if they're not being blocked.

I'm running BruteForceBlocker on a bunch of the boxes and I have no
problem with it. can you check the pf table, if it is growing? Can you
also see messages like:

User root from 67.15.192.35 not allowed because not listed in AllowUsers
67.15.192.35 was logged with total count of 1.
Failed password for invalid user root from 67.15.192.35 port 36082 ssh2
67.15.192.35 was logged with total count of 2.
User root from 67.15.192.35 not allowed because not listed in AllowUsers
67.15.192.35 was logged with total count of 3.
Failed password for invalid user root from 67.15.192.35 port 36111 ssh2
IP 67.15.192.35 reached the maximum number of failed attempts!!!
Adding IP to the firewall...

in your auth logfile?

If you want to check the pf table use command like:
# pfctl -t bruteforce -T show

 Thanks.
 Dave.

-- 
Best Regards,
  Daniel Gerzo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: openssl 0.9.8 breaking things

2005-09-28 Thread Daniel Gerzo
Hello Mark,

Wednesday, September 28, 2005, 6:41:47 PM, you contributed this to our 
collective wisdom:

 Just upgraded to openssl 0.9.8 and things are breaking, namely exim and
 cyrus-imap.  Non-SSL connections work, SSL connections cause a segfault.

 I'm going back to 0.9.7g using the WITH_OPENSSL_097 flag, but is there
 some way to make this work with 0.9.8?  Have I totally missed something
 here?

you need to recompile your software (exim,cyrus-imap,...) against new
openssl libs.

 This is FreeBSD 4.11.  Thanks!

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Was Jimi Hendrix's modem a `[1;35mPurple Hayes`[0m? ]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: open ssl??

2005-09-26 Thread Daniel Gerzo
Hello Gary,

Monday, September 26, 2005, 10:09:29 PM, you contributed this to our collective 
wisdom:

 Can any of your security gurus clue me in on what this blurb
 means?  I am slowly upgradingmy laptop, zen, and trying to
 ssh back into tao.  I get:

 OpenSSL version mismatch. Built against 90704f, you have 90800f

 I just upgraded tao; same err.  Do I have to reboot?!!

 gary

you have to recompile your software against new openssl libs...

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Oxymoron:  Kind Moderator ]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: open ssl??

2005-09-26 Thread Daniel Gerzo
Hello Gary,

Monday, September 26, 2005, 11:27:20 PM, you thoughtfully wrote the following:

 On Mon, Sep 26, 2005 at 04:46:01PM -0400, Kris Kennaway wrote:
 On Mon, Sep 26, 2005 at 01:09:29PM -0700, Gary Kline wrote:
  Can any of your security gurus clue me in on what this blurb
  means?  I am slowly upgradingmy laptop, zen, and trying to
  ssh back into tao.  I get:
  
  OpenSSL version mismatch. Built against 90704f, you have 90800f
  
  I just upgraded tao; same err.  Do I have to reboot?!!
 
 You have to rebuild whatever application that error came from, since
 you upgraded your openssl to an incompatible version.
 

 Hm, well, thank you both, Daniel and Kris.  I didn't realize
 the Open* security apps were this tightly integrated.  Makes
 sense.  --But then, it seems to me that if you (port or
 otherwise) upgrade ss[hl], the makefile would upgrade the 
 other.   Or else that the errs would be less cryptic.  
 [[I *know* I'm behind on a lot of my ports, but *mumble*]]

you should use utility called `portupgrade' for upgrading your ports,
so you can use something like:

# portupgrade -rR openssl

 I'm at my desk, logged into zen and ssh is missing the below.
 What rebuilds libcrypt.so.3?

 gary


 q4 14:22 zen [2508] ssh tao
 /libexec/ld-elf.so.1: Shared object libcrypto.so.3 not found, required
 by ssh

try /etc/rc.d/ldconfig restart

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Confucius say: Shit happens. ]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: ssh segfault

2005-09-25 Thread Daniel Gerzo
Hello Chris,

Sunday, September 25, 2005, 12:55:00 PM, you wrote the following:

 On 21/09/05, Noah [EMAIL PROTECTED] wrote:

 Hi there,

 I just upgraded my SSL crypto library to 0.9.8 and ssh to other machines is
 creating a core dump.  Is there an appropriate mail list for these types of
 issues?

 how might I troubleshoot this issue?

you need to compile your sshd against new openssl libs...


 also how might I return to teh previous version of 0.9.7 if need be.  or am I
 stuck right now.

 --- snip ---

 zsh: segmentation fault (core dumped)  ssh [EMAIL PROTECTED]

 --- snip ---

 cheers,

 Noah

 I think the 0.9.8 should be a new port openssl098 and not a straight
 upgrade as it will break a few things.


-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Innovation is hard to schedule. -- Dan Fylstra ]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: Only some IP's (SSHd)

2005-08-15 Thread Daniel Gerzo
Hi Adi,

Monday, August 15, 2005, 6:08:02 PM, you wrote:

 On Mon, 15 Aug 2005 08:29:46 -0700
 Carstea Catalin [EMAIL PROTECTED] wrote:

 What is the parameter that must be setting-up in
 my /etc/ssh/sshd_config to permit only known IPs.

 If you would like to permit ssh logins from specific IP addresses you
 should take a look at:

 man 5 hosts_access
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/tcpwrappers.html
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html

 It's definetely a very good idea to search the available online 
 offline documentation before posting already documented and ansewred
 questions.

It is also possible to do it via AllowUsers directive in sshd_config

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ BIRDS do it, bees do it, even chimpanzees do ]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: After Partitioning a Drive: WARNING - WRITE_DMA UDMA ICRC error (retrying request)

2005-08-06 Thread Daniel Gerzo
Hello Wesley,

Saturday, August 6, 2005, 8:51:19 PM, you typed:

ad1: 76344MB MAXTOR 6L080J4/A93.0500 [155112/16/63] at ata0-slave UDMA133

 Do the errors go away if you switch the disk (in BIOS, and what are the
 BIOS settings for this drive right now?) to PIO mode?

or try to decrease it's speed with atacontrol to, let's say, UDMA66.

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Famous last words: Hiyah, Captain BALDY! ]


Re[2]: Apache problems

2005-08-05 Thread Daniel Gerzo
Hello Philip,

Friday, August 5, 2005, 6:46:28 PM, you wrote about:

 Bryan Maynard wrote:
 I know this isn't directly freebsd related, but this list has been good
 to me before.
 
 I am running 5-STABLE. I installed Apache 2.1.4 using make install clean
 after updating my ports collection. Everything seemed to go fine. I
 then installed mod_php5 via make install clean. I added 192.168.1.102
 thereallm.org to my /etc/hosts file (I am testing this box before I
 send it out for co-located hosting). When I run apachectl start I get
 no errors - even with -e, but there's no pid for apache or httpd in top
 (via top | grep httpd or top | grep apache).
 Whats in the error_log file ?

 Me thinks it might be mod_uniquie_id complaining based on your setup.

 HTH

do you have apache21_enable=YES in your rc.conf?

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Man who scratches ass should not bite fingernails ]


Re: Bash prompt

2005-07-17 Thread Daniel Gerzo
Hi Alex,

Sunday, July 17, 2005, 11:30:38 PM, you wrote:

 How I can chage my bash prompt to this:
 [EMAIL PROTECTED] directory-name(e. g. alex for /usr/home/alex)]$

 I assume that I need to do that:

 export PS1='[EMAIL PROTECTED] \(here i don't know what to do, i assume, that I
 need to write \p or \P, but it's not working)]\$

try google fisrt next time :-)

http://freeunix.dyndns.org:8088/site2/howto/Bash.shtml#prompt

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Bother! said Pooh as he S*W*I*P*E*D a better tagline. ]


Re: SSH

2005-06-21 Thread Daniel Gerzo
Hello Jean-Paul,

Tuesday, June 21, 2005, 5:49:49 PM, you thoughtfully wrote the following:

 Hi everyone,

 I downloaded Putty  to ssh into my freebsd box
 This is what I see on the screen
 SSH-2.0-OpenSSH_3.8.1p1 FreeBSD-20040419

are you sure, you're using ssh protocol, not telnet? I'm pretty sure
that putty has set telnet by default.

 And the minute I click enter the screen disappears,,,
 I checked and SSH  daemon IS running,
 So what am I missing?
 I'm connecting from an XP box

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Drive a liberal ballistic: Ask them a simple question ]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: 5.4 Installation Problems on Dell GX280 - Fatal trap 12

2005-06-21 Thread Daniel Gerzo
Hello SHands,

Wednesday, June 22, 2005, 12:37:57 AM, you thinks about:

 I've had a nightmare trying to get 5.4 (also tried 5.3) to work on a
 Dell GX280 - which had exactly the same problem. In the end, I ended up
 using a serial link to get the install done and then got inetd setup so
 that I could troubleshoot over the network.

 This didn't help long term as the keyboard didn't work once I'd
 restarted after finishing the install. I stumbled on this script which
 seemed to do the trick:

 http://lists.freebsd.org/pipermail/freebsd-questions/2003-October/022771
 .html

 I used telnet to get at rc.conf - but there probably are other better
 ways.

 It seems a shame that Dell (and other manufacturers) are phasing out old
 'legacy' hardware like the good ol' PS/2 ports. It's just a good job
 that they didn't kill the serial port on this particular machine! (yet)

 that sux, indeed :-(

 Hope this helps,
 Stuart


 -Original Message-
 From: John Vaughan [mailto:[EMAIL PROTECTED] 
 Sent: 21 June 2005 22:10
 To: freebsd-questions@freebsd.org
 Subject: 5.4 Installation Problems on Dell GX280 - Fatal trap 12

 I am trying to install FreeBSD 5.4 on a Dell GX280 and am getting a
 Fatal trap 12 supervisor write, page not present error.  From what
 I've read, this is an ACPI problem which I could disable if I had a
 PS2 port, but the GX280 doesn't have them.  Has anyone gotten 5.4 to
 run properly on a GX280 using option 7 to boot with usb keyboard?

 -John

 So long, I can say that I'm able to use gx280 on 5.4. I was able to
 install it from CD with usb keyboard using option 7 - boot with usb
 keyboard. No fatal trap 12. The only problem I had is that I wan't
 able to use HTT.

 (but it was my fault I think :-) and since it is considered to be
 harmful and it doesn't really boost up machine's performance, I'm
 not solving it.)

-- 
Best Regards,

 DanGer, ICQ: 261701668  | e-mail protecting at: http://www.2pu.net/
 http://danger.rulez.sk  | proxy list at:http://www.proxy-web.com/
 | FreeBSD - The Power to Serve!

[ Fight Crime: Don't dial 911, shoot back!! ]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


  1   2   >