No free space add after removing large file

2005-08-30 Thread Frank de Bot

Hi,

On my fs I had a file of 20gb. The free space on that fs was at that 
time around 1gb. But after removing the 20gb file, the freespace wasn't 
added :-S ?

What has gone wrong and how can I 'reclaim' the free space?


Thanks in advaced,

Frank de Bot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: No free space add after removing large file

2005-08-30 Thread Frank de Bot

Gerhard Schmidt wrote:

On Tue, Aug 30, 2005 at 01:37:56PM +0200, Frank de Bot wrote:


Hi,

On my fs I had a file of 20gb. The free space on that fs was at that 
time around 1gb. But after removing the 20gb file, the freespace wasn't 
added :-S ?

What has gone wrong and how can I 'reclaim' the free space?



There could be a process which has an open filehandle to this file. The 
file isn't deleted until all filehandles are closed. 


Try to install /usr/ports/sysutils/lsof and look for the open handle. E.g.

lsof | grep filename  

Kill the process and the freespace should grow. If this doesn't work 
or there is no open handle try do go to single user mode an force an 
fsck on this fielsystem. 



Yes, that was the cause. I got my 20gb back :-D


Thanks!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ps -awux

2005-07-20 Thread Frank de Bot

Akhthar Parvez. K wrote:

Hello,

When I run the command ps -awux from a user's bash shell(not root), it's 
listing the processes under the particular user only. Can anyone tell me why?




Under FreeBSD 4.x the sysctl is:

kern.ps_showallprocs

0: only show processes of the user itself
1: Show all processes


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Libz

2005-07-07 Thread Frank de Bot
Recently a bug was discoverd which affected various unix platforms 
including FreeBSD. ( 
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc 
)


But it say it only affects the 5.x releases and not the 4. Is it true 
only the 5.x releases are affected? (I think it rather odd, because libz 
is pretty 'universal'


Thanks in advanced,

Frank
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Serial Access

2005-07-07 Thread Frank de Bot

Hi,

My server support by bios remote access via the serial port. Configured 
it, bios shows up on my terminal client. But as soon the FreeBSD has 
been loaded. (Last message I get through was: Press [enter] to boot 
immedialty.
Is it needed for FreeBSD to take over the serial console from here, or 
can it continue to show things without the help of FreeBSD?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Sudden freezes FreeBSD at same time

2005-06-09 Thread Frank de Bot

su-2.05b# uname -r
4.11-STABLE

Hardware specs:

MB(+case): Supermicro 5013S-i (details about chipset on it: 
http://www.supermicro.nl/products/system/1U/5013/SYS-5013S-i.cfm)

Proc: Xeon 2.0ghz 512kb 533fsb
IO controller: 3ware 7000-2
Memory: 1gig DDR ECC REG PC2100

That should cover the most specs of the server.

Could it be that there are bugs in the RELENG_4 stable cvs tree which 
could be a cause of it? When advisories come out I apply updates to the 
kernel and world.


Regards,

Frank


[EMAIL PROTECTED] wrote:

On Thu, 9 Jun 2005 12:38:38 +0200 (CEST)
Frank [EMAIL PROTECTED] wrote:



Today and yesterday I had a freeze of my production FreeBSD server at
exactly 11:18
I don't have any logs or crash dumps. Where can I look further to
examine the freezes?

I think it too coincidentaly that both freezes have occured at the
same time. At the time there's not any crontab line and process
accounting shows no abnormalities.



would be handy if you give the output of uname -r and the
hardware-specs

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ipfw + natd = some sites won't work :-S

2005-05-09 Thread Frank de Bot
Hi,
I got my FreeBSD set up to do nat, but it doesn't work 100%. Sites like 
Google for instance does work, but many other don't. All other protocols 
seems to be working properly. But why are sites failing to do anything? 
I got running natd with the verbose option and successfull request of 
google is indentical to a random other site :S
The firewall I use is rather big. the most important piece is:

01200 723652298 divert 8668 ip from any to 82.94.238.70 via fxp0
01200 521 85279 divert 8668 ip from 10.0.5.0/24 to any
01200   0 0 allow ip from any to 10.0.5.0/24
01201 524 85399 allow ip from 82.94.238.70 to any
01201   3   144 allow ip from any to 82.94.238.70
01500  871494 216106437 allow tcp from any to any established
/etc/natd.conf is:
alias_address %external_ip%
verbose
It just puzzles me why only some http request would fail and everything 
works fine!
Anyone got any idea?

Thanks in advanced,
Frank de Bot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw + natd = some sites won't work :-S

2005-05-09 Thread Frank de Bot
Emanuel Strobl wrote:
Am Dienstag, 10. Mai 2005 00:42 schrieb Frank de Bot:
Hi,
I got my FreeBSD set up to do nat, but it doesn't work 100%. Sites like
Google for instance does work, but many other don't. All other protocols

I guess you're using an A-DSL line with PPPoE, right?
If so, see tcp-mss fix. PPPoE consumes 8 bytes of your MTU so also the 
maximum segment sice of TCP sessions is reduced by 8 bytes which doesn't 
know the machine behind the NAT box. Your NAT box has to alter the mss 
field in the TCP header because many sites have wrong configured firewalls 
which simply block all ICMP traffic, so the error from your router must 
fragment never reaches to originating host. So the sent packaet is too 
big to go over your line and the Must Fragment bit is ingnored... you'll 
never receive what you've requested.

I'm not familar with IPFW, perhaps NATD can take care of MSS, PF does with 
max-mss.


I'm not using an ADSL with PPPoE. But the configuration used is kinda 
non-standard. I'll try to explain with a little drawing:

= Laptop = IP: 10.0.5.21   (/24)
|
|
= Server 1 = IP: 10.0.5.2
|IP: 10.0.3.1
|
|  (ipip tunnel)
|
= Server 2 = IP: 10.0.3.2
|IP %external_ip%
|
% internet %
Server 1 is a Linux box
Server 2 is the FreeBSD performing the NAT
Tracerouting occures without anyproblem. From the laptop to the internet
10.0.5.2 - 10.0.3.2 - %internet%
During testing I've also dumped the whole firewall exept the points 
written in the starting post. The behaviour stays exactly the same.


-Harry

seems to be working properly. But why are sites failing to do anything?
I got running natd with the verbose option and successfull request of
google is indentical to a random other site :S
The firewall I use is rather big. the most important piece is:
01200 723652298 divert 8668 ip from any to 82.94.238.70 via fxp0
01200 521 85279 divert 8668 ip from 10.0.5.0/24 to any
01200   0 0 allow ip from any to 10.0.5.0/24
01201 524 85399 allow ip from 82.94.238.70 to any
01201   3   144 allow ip from any to 82.94.238.70
01500  871494 216106437 allow tcp from any to any established
/etc/natd.conf is:
alias_address %external_ip%
verbose
It just puzzles me why only some http request would fail and everything
works fine!
Anyone got any idea?
Thanks in advanced,
Frank de Bot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw + natd = some sites won't work :-S

2005-05-09 Thread Frank de Bot
The ipfw rules standing without any other rules and '65535 allow ip from 
any to any' as  last rule give the same behaviour. So it's not a 
firewall case.

The network layout is posted in my reaction to Emanuel.
Sites I can't access are:
www.tweakers.net
www.fok.nl
www.yahoo.com
www.userfriendly.org
www.thinkgeek.com
Sites i CAN access:
www.google.com
www.gmail.com
www.fastclick.net

fbsd_user wrote:
Seeing snippet of your firewall rules is not giving us enough info
to work on.  
You have to post complete rule set because of the way rules are
processed. 

Also an explanation of your private network layout and how you
connect to the internet is needed.
List sites you can not access.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Frank de
Bot
Sent: Monday, May 09, 2005 6:42 PM
To: freebsd-questions@freebsd.org
Subject: ipfw + natd = some sites won't work :-S
Hi,
I got my FreeBSD set up to do nat, but it doesn't work 100%. Sites
like 
Google for instance does work, but many other don't. All other
protocols 
seems to be working properly. But why are sites failing to do
anything? 
I got running natd with the verbose option and successfull request
of 
google is indentical to a random other site :S
The firewall I use is rather big. the most important piece is:

01200 723652298 divert 8668 ip from any to 82.94.238.70 via
fxp0
01200 521 85279 divert 8668 ip from 10.0.5.0/24 to any
01200   0 0 allow ip from any to 10.0.5.0/24
01201 524 85399 allow ip from 82.94.238.70 to any
01201   3   144 allow ip from any to 82.94.238.70
01500  871494 216106437 allow tcp from any to any established
/etc/natd.conf is:
alias_address %external_ip%
verbose
It just puzzles me why only some http request would fail and
everything 
works fine!
Anyone got any idea?

Thanks in advanced,
Frank de Bot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw + natd = some sites won't work :-S

2005-05-09 Thread Frank de Bot
Emanuel Strobl wrote:

The problem is the same: IP-IP tunneling reduces TCPs mss which the linux 
box doesn't fix. ICMP will work of course, TCP with full payload won't.
I don't knwo how/why you tunnle IP into IP on that linux box, but that's 
the point where you have to dig.

Good luck,
-Harry

Which tunnel forms don't experience the reducing of mss? I've chosen for 
a ipip tunnel because it was a tunnen solutions which seemed to be the 
most simple. Once I got that working I was planning to change it to VPN 
or IPSec tunnel.
I got my reason for having that tunnel between the boxes (Server 2 is a 
server far apart from Server 1)

Frank
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Nat problem

2005-04-27 Thread Frank de Bot
Hi,
I got my FreeBSD box set up as a NAT gateway. I got it working partialy; 
icmp pinging from inside to the internet works. But as soon as I try to 
make a tcp connection (loading a webpage or so) it just sits still!

The external interface is fxp0
The internal interface is gif3 (this is  a ipip tunnel)
ipnat.conf is:
map fxp0 10.0.1.0/24 - 0.0.0.0/32 portmap tcp/udp 1025:65000
map fxp0 10.0.1.0/24 - 0.0.0.0/32
I find it very odd, because pings travel and are natted without 
problems. What can be wrong?

Thanks in advanced,
Frank de Bot!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


No rebuild on make buildworld

2005-03-16 Thread Frank de Bot
Hi,
When I do make buildworld, the whole world is build from scratch again. 
But I've noticed that some changes of my own will let it fail and when I 
change it, the process starts over again!!
How can I build the world, without everything to be rebuild?

Thanks in advanced,
Frank de Bot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Jail security

2005-03-07 Thread Frank de Bot
Hi,
I've set up a jail. But I don't have any idea how safe a jail is. Often 
is told chroot and jails can be escaped. How safe is it to give other 
people user access to a jailed environment? or maybe even root...

Thanks in advanced,
Frank de Bot
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Jail security

2005-03-07 Thread Frank de Bot
Jorn Argelo wrote:
On Mon, 07 Mar 2005 17:04:41 +0100, Frank de Bot wrote
Hi,
I've set up a jail. But I don't have any idea how safe a jail is. 
Often is told chroot and jails can be escaped. How safe is it to 
give other people user access to a jailed environment? or maybe even 
root...

A jailed process cannot leave its jail. Unless some exploit is being found in
jail itself, but that's rather unlikely. A cracker can only mess up your jail
and not your entire host. So if you build 4 jails for Apache, MySQL, Squid and
Postfix for instance, each of those processes will only run in its jail and
cannot interact with another jail or the host. Which is more secure then just
putting everything on your host.
Another major advantage of jails is that you can experiment at will without 
touching your production enviroment. Just create a jail and install apache in
the other jail. Once you are finished and it works, just amend your firewall
settings and you're ready to go.

If you're experienced enough I'd encourage you to use them. It can be
complicated for a newbie, but if you know your way around FreeBSD and the
command line, you should really use jails.
Jorn.

What if an exploit is found, then root should have the greatest chance 
to break out of the jail, or not?
Should it be possible to assign root another UID in a jail (this is 
pretty unlikely I think), so IF it breaks out it will find hisself 
working as a user at the host system :-P
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help Renaming Multple Files

2005-03-07 Thread Frank de Bot
for files in `ls`;do newfile=`echo $files | sed s|^reports_||g`;mv 
$files $newfile;done

it's unproved code at the moment, but it gives an idea how to do it.

Phusion wrote:
I need help figuring out how to rename multple files. The files are
named like reports_abcdef_MMDD.dat, reports_hijklm_MMDD.dat,
and reports_nopqrs_MMDD.dat. Here is an example.
Original Filename: reports_abcdef_MMDD.dat
New Filename: abcdef_MMDD.dat
Let me know how I can do this. Thanks.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]