IBM Thinkpad R51 FreeBSD 4.10???

2004-09-02 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi All,
I recently purchased an IBM Thinkpad R51 and I was looking to install
FreeBSD 4.10. Has anyone ever done this? Should I anticipate any
problems? Lastly I have never installed FreeBSD on a laptop before are
there things that I should know before I get started? Thanks in advance
for you help.
HZS
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBN9WwlT9WV6TztkoRAol1AJ9CJU9EOAA976RAfYOQNI6v4tf/OgCgkyPC
rnr5z0hnkABA5QNVyNnQ1KM=
=n2Vy
-END PGP SIGNATURE-


smime.p7s
Description: S/MIME Cryptographic Signature


Re: Network Routing Problems???

2004-08-23 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Very good, I will try it and let you know thanks so much.
Cheers
Kevin D. Kinsey, DaleCo, S.P. wrote:
| Hakim Z. Singhji wrote:
|
| I am having problems getting a connection to my FreeBSD gateway from my
| Mandrake 10 Linux Machine. I am able to ping, traceroute, ssh etc. the
| linux box from my freeBSD machine however I am not able to ping the
| gateway. What could be the problem, this is my configuration:
|
| FreeBSD: Gateway, IPFW  NAT running
|
|
|
| Is IPFW blocking packets on your inside IF?  Try
| add allow all from any to any via txp0 and test
| again?
|
| Kevin Kinsey
| DaleCo, S.P.
| ___
| [EMAIL PROTECTED] mailing list
| http://lists.freebsd.org/mailman/listinfo/freebsd-questions
| To unsubscribe, send any mail to
| [EMAIL PROTECTED]
|
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBKZKklT9WV6TztkoRAvstAJ9HXwhGGrde4M2WHneM4wnpax9yvwCbBJNe
HEku9QSt6RtMDpUiU9GRuoA=
=4b15
-END PGP SIGNATURE-


smime.p7s
Description: S/MIME Cryptographic Signature


Re: Network Routing Problems???

2004-08-23 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello All,
I want to thank everyone for there help...attached are the config files
for my FreeBSD gateway. I have rc.conf, ipfw rule-set and my natd.conf
file. I thought that I took care of incoming traffic, maybe you all can
help me and show me if I missed anything. Thank in advance
Hakim Z. Singhji wrote:
| Hello All,
|
| I am having problems getting a connection to my FreeBSD gateway from my
| Mandrake 10 Linux Machine. I am able to ping, traceroute, ssh etc. the
| linux box from my freeBSD machine however I am not able to ping the
| gateway. What could be the problem, this is my configuration:
|
| FreeBSD: Gateway, IPFW  NAT running
| HOSTNAME=redgate
| dc0  - 24.199.***.*** [DHCP]
| txp0 - 192.168.1.1
| txp1 - unassigned
|
| Mandrake 10: Workstation
| HOSTNAME=metalgate
|
| [EMAIL PROTECTED]:] route
| DestinationGatewayGenmaskInterace
| 192.168.1.0*255.255.255.0eth0
| 127.0.0.0*255.0.0.0lo0
| default192.168.1.10.0.0.0eth0
|
| [EMAIL PROTECTED]:] ifconfig eth0
| eth0 link encap: Ethernet HiWadd:00:0D:87:27:C7:80
| inet 192.168.1.3 broadcast 192.168.1.255 mask /24
| UP BROADCAST RUNNING MULTICAST MTU 1500 metric 1
|
| [EMAIL PROTECTED]:] ping 192.168.1.1
| - --- redgate ping statistics-
| 31 packets transmitted, 0 received, 100% packet loss
|
| ___
| [EMAIL PROTECTED] mailing list
| http://lists.freebsd.org/mailman/listinfo/freebsd-questions
| To unsubscribe, send any mail to
| [EMAIL PROTECTED]
|
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBKnc8lT9WV6TztkoRAn09AJ4iP8AS/Ai+vh4lyrCwsXe5/dyYaQCgg2JM
uEE8jHfxVr0Zevb4zTufpgs=
=Bsc7
-END PGP SIGNATURE-
###
# RC.CONF FILE
###

 Network ##

gateway_enable=YES
network_interfaces=dc0 txp0 txp1
hostname=redgate.ath.cx
ifconfig_dc0=DHCP
ifconfig_txp0=inet 192.168.1.1/24
ifconfig_txp1=inet 192.168.1.2/24
natd_enable=dc0
natd_flags=-s -u -f /etc/natd.conf

# IPFW 

firewall_enable=YES
firewall_script=/etc/rc.firewall
firewall_type=/etc/ipfw.rules
firewall_quiet=NO
firewall_logging_enable=YES

## Extra Firewalling Options ##

log_in_vain=YES
tcp_drop_synfin=NO
tcp_restrict_rst=YES
icmp_drop_redirect=YES

 MISC RC Rules #

...



# IPFW.RULES


add 00100 allow ip from any to any via lo0
add 00101 deny ip from any to 127.0.0.0/8

# from man ipfw: allow only tcp connections I've created
add 00300 check-state
add 00301 deny tcp from any to any in established
add 00302 allow tcp from any to any out setup keep-state

# allow DNS/UDP Packets
add 00400 allow udp from 207.69.188.185 53 to any in recv dc0
add 00401 allow udp from 207.69.188.186 53 to any in recv dc0
add 00402 allow udp from 207.69.188.187 53 to any in recv dc0
add 00403 allow udp from any to any out 

# allow DHCP
add 00500 allow udp from any 68 to 24.29.99.105. 67 out via dc0
add 00501 allow udp from 24.29.99.105 67 to any 68 in via dc0

# uncomment rules 00502 and 00503 if ISP's DHCP server has problems
#add 00502 allow udp from any 68 to 255.255.255.255 67 out via dc0
#add 00503 allow udp from any 67 to 255.255.255.255 68 in via dc0

#allow some icmp types (codes not supported)
add 00600 allow icmp from any to any icmptypes 3

#allow source quench in and out 
add 00601 allow icmp from any to any icmptypes 4

#allow me to ping out and receive response back
add 00602 allow icmp from any to any icmp types 8 out
add 00603 allow icmp from any to any icmptypes 0 in

#allow me to run traceroute
add 00604 allow icmp from any to any icmptypes 11 in
##
# NAT.CONF
##

# I'm not at all sure if this is ok for diverting these packets
# to my private network machines ip and port numbers???

redirect_port tcp 192.168.1.3:110 110 #pop3
redirect_port udp 192.168.1.3:110 110 #pop3
redirect_port tcp 192.168.1.3:25 25 #smtp
redirect_port udp 192.168.1.3:25 25 #smtp
redirect_port tcp 192.168.1.3:80 80 #http
redirect_port udp 192.168.1.3:80 80 #http










smime.p7s
Description: S/MIME Cryptographic Signature


Network Routing Problems???

2004-08-22 Thread Hakim Z. Singhji
Hello All,
I am having problems getting a connection to my FreeBSD gateway from my
Mandrake 10 Linux Machine. I am able to ping, traceroute, ssh etc. the
linux box from my freeBSD machine however I am not able to ping the
gateway. What could be the problem, this is my configuration:
FreeBSD: Gateway, IPFW  NAT running
HOSTNAME=redgate
dc0  - 24.199.***.*** [DHCP]
txp0 - 192.168.1.1
txp1 - unassigned
Mandrake 10: Workstation
HOSTNAME=metalgate
[EMAIL PROTECTED]:] route
Destination Gateway Genmask Interace
192.168.1.0 *   255.255.255.0   eth0
127.0.0.0   *   255.0.0.0   lo0
default 192.168.1.1 0.0.0.0 eth0
[EMAIL PROTECTED]:] ifconfig eth0
eth0 link encap: Ethernet HiWadd:00:0D:87:27:C7:80
inet 192.168.1.3 broadcast 192.168.1.255 mask /24
UP BROADCAST RUNNING MULTICAST MTU 1500 metric 1
[EMAIL PROTECTED]:] ping 192.168.1.1
- --- redgate ping statistics-
31 packets transmitted, 0 received, 100% packet loss
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Network Routing Problems???

2004-08-22 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello All,
I am having problems getting a connection to my FreeBSD gateway from my
Mandrake 10 Linux Machine. I am able to ping, traceroute, ssh etc. the
linux box from my freeBSD machine however I am not able to ping the
gateway. What could be the problem, this is my configuration:
FreeBSD: Gateway, IPFW  NAT running
HOSTNAME=redgate
dc0  - 24.199.***.*** [DHCP]
txp0 - 192.168.1.1
txp1 - unassigned
Mandrake 10: Workstation
HOSTNAME=metalgate
[EMAIL PROTECTED]:] route
Destination Gateway Genmask Interace
192.168.1.0 *   255.255.255.0   eth0
127.0.0.0   *   255.0.0.0   lo0
default 192.168.1.1 0.0.0.0 eth0
[EMAIL PROTECTED]:] ifconfig eth0
eth0 link encap: Ethernet HiWadd:00:0D:87:27:C7:80
inet 192.168.1.3 broadcast 192.168.1.255 mask /24
UP BROADCAST RUNNING MULTICAST MTU 1500 metric 1
[EMAIL PROTECTED]:] ping 192.168.1.1
- - --- redgate ping statistics-
31 packets transmitted, 0 received, 100% packet loss
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBKSBNlT9WV6TztkoRAqX8AJ9qxZpN6LCTDo7F6GZxOrHegNO4yQCeLHGF
vd7SoLLlnsYkTQnzczOA9dg=
=zhlX
-END PGP SIGNATURE-
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Network Routing Problems???

2004-08-22 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello All,
I am having problems getting a connection to my FreeBSD gateway from my
Mandrake 10 Linux Machine. I am able to ping, traceroute, ssh etc. the
linux box from my freeBSD machine however I am not able to ping the
gateway. What could be the problem, this is my configuration:
FreeBSD: Gateway, IPFW  NAT running
HOSTNAME=redgate
dc0  - 24.199.***.*** [DHCP]
txp0 - 192.168.1.1
txp1 - unassigned
Mandrake 10: Workstation
HOSTNAME=metalgate
[EMAIL PROTECTED]:] route
Destination Gateway Genmask Interace
192.168.1.0 *   255.255.255.0   eth0
127.0.0.0   *   255.0.0.0   lo0
default 192.168.1.1 0.0.0.0 eth0
[EMAIL PROTECTED]:] ifconfig eth0
eth0 link encap: Ethernet HiWadd:00:0D:87:27:C7:80
inet 192.168.1.3 broadcast 192.168.1.255 mask /24
UP BROADCAST RUNNING MULTICAST MTU 1500 metric 1
[EMAIL PROTECTED]:] ping 192.168.1.1
- - --- redgate ping statistics-
31 packets transmitted, 0 received, 100% packet loss
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBKWtQlT9WV6TztkoRAgZSAKCAAEifTWqv2ZQ6jr6XTIvGZL6j9QCgh53i
cU3jAfpHqmvp3mSHYRd5DxE=
=LkoA
-END PGP SIGNATURE-


smime.p7s
Description: S/MIME Cryptographic Signature


Another Network Routing Problems???

2004-08-22 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello All,
I am having problems getting a connection to my FreeBSD gateway from my
Mandrake 10 Linux Machine. I am able to ping, traceroute, ssh etc. the
linux box from my freeBSD machine however I am not able to ping the
gateway. What could be the problem, this is my configuration:
FreeBSD: Gateway, IPFW  NAT running
HOSTNAME=redgate
dc0  - 24.199.***.*** [DHCP]
txp0 - 192.168.1.1
txp1 - unassigned
Mandrake 10: Workstation
HOSTNAME=metalgate
[EMAIL PROTECTED]:] route
Destination Gateway Genmask Interace
192.168.1.0 *   255.255.255.0   eth0
127.0.0.0   *   255.0.0.0   lo0
default 192.168.1.1 0.0.0.0 eth0
[EMAIL PROTECTED]:] ifconfig eth0
eth0 link encap: Ethernet HiWadd:00:0D:87:27:C7:80
inet 192.168.1.3 broadcast 192.168.1.255 mask /24
UP BROADCAST RUNNING MULTICAST MTU 1500 metric 1
[EMAIL PROTECTED]:] ping 192.168.1.1
- - --- redgate ping statistics-
31 packets transmitted, 0 received, 100% packet loss
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBKWuvlT9WV6TztkoRAtH8AJ0UxVGgvYlkUqXJ/fesXeb7VCSQcACfVhIx
PRGKj30MfroShbmhCjfhAXo=
=idCM
-END PGP SIGNATURE-


smime.p7s
Description: S/MIME Cryptographic Signature


Re: HOWTO Ping LAN???

2004-08-20 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello,
Thank you for your replies gentlemen, this post is a bit old, I have
already built my FreeBSD NAT box and configured IPFW...I am currently
building a new kernel configuration for the machine to include IPDIVERT,
IPFIREWALL and a few other system specific modifications.
If I have any questions concerning this issue, I will include you both
(Eric, Rich) in the list. Thanks
Eric Crist wrote:
| SEE BOTTOM
|
|-Original Message-
|From: [EMAIL PROTECTED]
|[mailto:[EMAIL PROTECTED] On Behalf Of
|Rich Shinnick
|Sent: Thursday, August 19, 2004 11:46 PM
|To: 'Hakim Singhji'; 'Hakim Z. Singhji'; 'MatthewSeaman'
|Cc: 'Bill Moran'; [EMAIL PROTECTED]
|Subject: RE: HOWTO Ping LAN???
|
|
|Hakim,
|
|What you are trying to do is possible in two ways:
|
|1. SSH to the box, and tunnel to other internal machines
|according to the tunnels you have set up. (See the last email
|I sent). 2. Port forward connections from the Internet thru
|the BSD to internal machines.
|
|Check these links: http://www.rootprompt.net/freebsd_firewall.html
|http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/fire
|walls.html
|
|
|  _
|
|From: Hakim Singhji [mailto:[EMAIL PROTECTED]
|Sent: Thursday, July 29, 2004 10:27 AM
|To: Hakim Z. Singhji; MatthewSeaman
|Cc: Bill Moran; [EMAIL PROTECTED]
|Subject: Re: HOWTO Ping LAN???
|
|
|Hi Matt,
|
|You say that the only way I will be able to connect to my
|network is by tunneling.
|This is not what I want to do, I thought I may be able to
|SSH, Telnet, www, etc.
|from the outside to my default gateway and have the gateway
|pass SSH, Telnet,
|www., or any other request to the machine on the private
|network by including the
|localhost.defaultgateway.domain.org or something to that affect.
|
|Does NAT Overloading only go one way???
|
|Hakim Z. Singhji
|Coordinating Mgr. / Infection Control
|718-245-3923
|[EMAIL PROTECTED]
|
|
|Matthew Seaman [EMAIL PROTECTED]
|
|7/29/2004 5:32:32
|
|AM
|
|
|On Thu, Jul 29, 2004 at 01:40:02AM -0400, Hakim Z. Singhji wrote:
|
|
|Figure 1
|
|***
|* Internet *
|*24.199.1xx.xx*
|***
|~ |
|~ |
|*** **
|* Defaut GW * __ __ *Kids Machine*
|*192.68.0.1 * *192.68.0.3 *
|FreeBSD 4.10 * * Mandrake 10*
|*** **
|~ |
|~ |
|*
|*Wrk Station1*
|*192.68.0.2 *
|*Redhat 9 *
|*
|
|This is a rough diagram of the network... I would like to
|
|ssh, ping,
|
|etc. the machines behind the default gateway directly (without
|tunneling) from the outside the network (at work for
|
|example). Is this
|
|possible and if so how do I config. Keep in mind that my default
|gateway is FreeBSD. I know this may be a complicated project but if
|you could help that would help me greatly. Many thanks to
|
|everyone in
|
|advance.
|
|I'm afraid that's not going to be possible with your current
|network layout. If you want all of your machines to be
|accessible from the Internet, then you'll need routable
|addresses on all of your machines.
|
|I know you've said you don't want to use tunnelling, but
|unfortunately, that's the only way you can access a private
|address space as you have from outside it. A relatively
|simple way of doing that is to ssh into your gateway box, and
|use the '-L' or '-R' portforwarding options to create a
|tunnel to one of the internal machines, and then ssh or
|otherwise connect through that tunnel: see eg.
|
|
| http://www.linux.ie/articles/tutorials/ssh.php
|
| One other point: you're going to have problems if you're using
| 192.168.0.0 as the IP number on your FreeBSD machine. That's the
| *network* address, and shouldn't be applied directly to any specific
| machine. If you're running your internal network using 192.168.0.0/24 as
| the address space, then you have 254 addresses (from 192.168.0.1 to
| 192.168.0.254) to use for client machines, since 192.168.0.0 (network
| address) and 192.168.0.255 (broadcast address) are reserved as part of
| the networking setup.
|
| Cheers,
|
| Matthew
|
| --
| Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks
| Savill Way
| PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
| Tel: +44 1628 476614 Bucks., SL7 1TH UK
|
|
| Hello,
|
| There is one real solution to this here.
|
| You could setup a DMZ to your Default Gateway.  If this is a Linksys
| Broadband Gateway, it's as simple as checking a box and typing in the
| private IP address.  This routes all incoming (non-statefull)
| connections to this host.  Since your IP changes, use a dynamic DNS
| service such as no-ip.org(sp?) or tzo.com.  I've used TZO.com,
| personally, then I just got DSL with a /29 static IP address allocation.
| This should work without issue, unless your DMZ firewall rules prevent
| it.  I would need more information to let you know.
|
| HTH
|
| Eric F Crist
| Best Access Systems
| 11300 Rupp Dr. Burnsville, MN 55337
| Phone: 952.894.3830
| Cell: 612.998.3588
| Fax: 952-894-1990

NAT / ipfw / GW - FreeBSD 4.10 to Linux Private Network???

2004-08-14 Thread Hakim Z. Singhji
Hello All,
So with the help of all of you I have configure my FreeBSD 4.10 gateway.
I am able to ping, tracerout, ssh and call webpages with a fully
functioning DHCP client. I thank all of you from the bottom of my heart,
those of you that helped me out... its been hardwork and late nights (or
early mornings) building these computers from scratch and then
introducing them with Linux and FreeBSD OS's which I have only a
combined year of experience.
With that said I have come to the final component of my network... the
NAT component. I was trying to play around with it until I found out
that I really didn't know what I was doing... so here I am again.
I'm trying to configure one box through NAT via my FreeBSD gateway. I
figure after I do it once I'll be able to tweak it for the rest of my
machines. This is my set up
[internet] - [firewall/gateway] -- [ linux box ]
24.199.105.0--  192.168.1.1 -   192.168.1.3
(   dc0   )  (  txp0  ) (  eth0  )
I'm trying to get internet connection for my linux box, and I also want
all pop3, smtp and http passed to my linux box as well.  The freebsd box
is setup to be headless once I get this configured properly. In addition
I would like SSH2 to be able to tunnel from box to box as well as SSH2
outside my network with my Linux box.
I have attached my config files for ipfw.rules, rc.conf, and natd.conf
however natd.conf is where I am lost I don't exactly know the rules
for natd.conf. I reviewed my resources: The Complete FreeBSD by Greg
Lehey and Absolute BSD by Michael Lucas however there was not much on
the actual syntax. If someone could help me in these areas it would be
greatly appreciated.  Thanks in advance...
Hakim Z. Singhji
New York University
1st year Information Systems Management Student

###
# RC.CONF FILE
###

 Network ##

gateway_enable=YES
network_interfaces=dc0 txp0 txp1
hostname=redgate.ath.cx
ifconfig_dc0=DHCP
ifconfig_txp0=inet 192.168.1.1/24
ifconfig_txp1=inet 192.168.1.2/24
natd_enable=dc0
natd_flags=-s -u -f /etc/natd.conf

# IPFW 

firewall_enable=YES
firewall_script=/etc/rc.firewall
firewall_type=/etc/ipfw.rules
firewall_quiet=NO
firewall_logging_enable=YES

## Extra Firewalling Options ##

log_in_vain=YES
tcp_drop_synfin=NO
tcp_restrict_rst=YES
icmp_drop_redirect=YES

 MISC RC Rules #

...



# IPFW.RULES


add 00100 allow ip from any to any via lo0
add 00101 deny ip from any to 127.0.0.0/8

# from man ipfw: allow only tcp connections I've created
add 00300 check-state
add 00301 deny tcp from any to any in established
add 00302 allow tcp from any to any out setup keep-state

# allow DNS/UDP Packets
add 00400 allow udp from 207.69.188.185 53 to any in recv dc0
add 00401 allow udp from 207.69.188.186 53 to any in recv dc0
add 00402 allow udp from 207.69.188.187 53 to any in recv dc0
add 00403 allow udp from any to any out 

# allow DHCP
add 00500 allow udp from any 68 to 24.29.99.105. 67 out via dc0
add 00501 allow udp from 24.29.99.105 67 to any 68 in via dc0

# uncomment rules 00502 and 00503 if ISP's DHCP server has problems
#add 00502 allow udp from any 68 to 255.255.255.255 67 out via dc0
#add 00503 allow udp from any 67 to 255.255.255.255 68 in via dc0

#allow some icmp types (codes not supported)
add 00600 allow icmp from any to any icmptypes 3

#allow source quench in and out 
add 00601 allow icmp from any to any icmptypes 4

#allow me to ping out and receive response back
add 00602 allow icmp from any to any icmp types 8 out
add 00603 allow icmp from any to any icmptypes 0 in

#allow me to run traceroute
add 00604 allow icmp from any to any icmptypes 11 in
##
# NAT.CONF
##

# I'm not at all sure if this is ok for diverting these packets
# to my private network machines ip and port numbers???

redirect_port tcp 192.168.1.3:110 110 #pop3
redirect_port udp 192.168.1.3:110 110 #pop3
redirect_port tcp 192.168.1.3:25 25 #smtp
redirect_port udp 192.168.1.3:25 25 #smtp
redirect_port tcp 192.168.1.3:80 80 #http
redirect_port udp 192.168.1.3:80 80 #http










smime.p7s
Description: S/MIME Cryptographic Signature


Re: DHCP and rc Questions For FreeBSD 4.10???

2004-08-12 Thread Hakim Z. Singhji
Bill  FreeBSD-Questions,

This configuration is not as intuitive as I thought it would be. 
In /etc/rc.conf I added the following strings:


network_interfaces=lo0 dc0
ifconfig_dc0=DHCP


Then I deleted the entries in dhclient.conf and relied on the
default. I started the daemon by [dhclient dc0] and it 
seemed to be processing.  However, that was all that 
happened. When I [ifconfig dc0] I get this return:

#
[EMAIL PROTECTED] ifconfig dc0
dc0 flags = 8843UP, BROADCAST, RUNNING, SIMPLEX,
MULTICAST MTU 1500
inet6 fe:80::2c0:f0ff:fe79:4ab7%dc0 prefixlen 64 scopeid 0x1
inet 0.0.0.0 net mask 0xff00 broadcast 255.255.255.255
ether 00:01:02:c3:40:1a
media Ethernet auto select (100basefull duplex)
status: active
###

Then I tried to ping a host...

###

[EMAIL PROTECTED] ping www.yahoo.com
[EMAIL PROTECTED] ping 24.199.105.1
[EMAIL PROTECTED] ping www.absolutebsd.org

Ping: Cannot resolve www.yahoo.com 
hostname lookup failure, etc.
###

However somehow when I run a report the system
indicates that UDP packets are being transmitted but the 
statistics are highly skewed at a rate of 
11290 IKPTS : 38 OPKTS

I was reading Greg Lehey's book The Complete 
FreeBSD which happens to have more information on
DHCP,DNS, BIND than Absolute BSD by Michael Lucas and 
Greg says that in order for dhcp to work you must start dhcpd,
am I reading this correctly. I assumed that dhcpd would provide 
DHCP for the private network (in my case), I did not think that
my default gateway would rely on dhcpd in order to function.

Now I have 2 questions:
*must I configure dhcpd now?
*must I configure dns (resolv.conf, named, etc.)?
*does DHCP rely on the two configurations list above to data?

Thank you in advance for your help?

HZS
-Original Message-
From: Hakim Z. Singhji [EMAIL PROTECTED]
Sent: Aug 11, 2004 12:32 PM
To: Bill Moran [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: Re: DHCP and rc Questions For FreeBSD 4.10???

Alright, thank you Bill...I will let you know how I fair.

Cheers

-Original Message-
From: Bill Moran [EMAIL PROTECTED]
Sent: Aug 11, 2004 9:25 AM
To: Hakim Z. Singhji [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: Re: DHCP and rc Questions For FreeBSD 4.10???

Wrap your likes around 72 characters.

All you need in /etc/rc.conf is:
network_interfaces=lo0 dc0
ifconfig_dc0=DHCP

Everything else you added is just re-affirming the default values.


Hakim Z. Singhji [EMAIL PROTECTED] wrote:

 Hi All,
 
 I've been researching this issue although it may be minor I don't like to rely on 
 the [EMAIL PROTECTED] unless I have to. I'm sure you understand...anyway, 
 http:www.freebsddiary.com has a tutorial that with info I could not find in The 
 Complete FreeBSD or Absolute BSD. It described two entries; one in dhclient.conf 
 and the other in rc.conf.  See Below:
 
 ###
 dhclient.conf
 ###
 interface dc0{
 send host-name redgate;
 request subnet-mask, broadcast-address, routers, domain-name-servers, domain-name, 
 time-servers;
 require domain-name-servers;
 
 ###
 rc.conf
 ###
 ifconfig_dc0=DHCP #IS THIS VARIABLE DECLARATION CASE SENSITIVE???
 hostname=redgate
 
 ###
 
 The question I have now is if this is all I have to do to get dhcp running at 
 startup? I anyone else has any suggestions they are welcome. Unfortunately I cannot 
 test this until the evening so feedback will be very helpful and will save me some 
 time researching.  Thanks in advance.
 
 -Original Message-
 From: Hakim Z. Singhji [EMAIL PROTECTED]
 Sent: Aug 11, 2004 11:24 AM
 To: [EMAIL PROTECTED]
 Subject: DHCP and rc Questions For FreeBSD 4.10???
 
 Hi All,
 
 I have installed FreeBSD 4.10 to serve as a headless gateway/router/firewall/NAT. 
 The first problem that I have run into can probably be resolved easily. I tried to 
 configure my NIC card via sysinstaller.  However, rc.conf does not have a startup 
 variable for dc0. Therefore dhclient is inoperable.
 
 I built this box to be headless therefore it is low-tech with no floppy or flash 
 drive and is currently a stand-alone machine so I am not able to copy the rc.conf 
 file to this post. dc0 is working because I can bring its status to active 
 manually: '[EMAIL PROTECTED] ifconfig dc0 ether up'.
 
 I was wondering what what variables should be assigned to rc.conf, the related 
 variables I have thus far are:
 
 ##
 ifconfig_dc0=dhcp
 dhcp_program=/sbin/dhclient
 dhcp_flags= 
 ##
 
 It would be appreciated if someone could attach or copy an rc.conf file for a 
 similar system configuration. Thanks in advance.
 
 HZS
 
 ___
 [EMAIL PROTECTED] mailing

Re: DHCP and rc Questions For FreeBSD 4.10???

2004-08-12 Thread Hakim Z. Singhji
Who manages your DHCP server?  The config I described has worked in
every configuration I've ever dealt with (and that's quite a few) so
there is definately something external causing the problem.

I have an Earthlink Highspeed Cable account w/ DHCP Server

Did you install a packet filter when you set this box up?  

Yes, however I turned firewall to [firewall_enable=NO] and commented
all firewall entries in the rc.conf file.

If you don't have a DHCP _server_ on your network, then the DHCP _client_
will not be able to to its job.

Earthlink should provide a DHCP server, when I had my standalone redhat 
box it was configured and I was also receiving DNS as well through earthlink.


What do you suggest I do?

-Original Message-
From: Bill Moran [EMAIL PROTECTED]
Sent: Aug 12, 2004 11:45 AM
To: Hakim Z. Singhji [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: DHCP and rc Questions For FreeBSD 4.10???

Hakim Z. Singhji [EMAIL PROTECTED] wrote:
 Bill  FreeBSD-Questions,
 
 This configuration is not as intuitive as I thought it would be. 
 In /etc/rc.conf I added the following strings:
 
 
 network_interfaces=lo0 dc0
 ifconfig_dc0=DHCP
 
 
 Then I deleted the entries in dhclient.conf and relied on the
 default. I started the daemon by [dhclient dc0] and it 
 seemed to be processing.  However, that was all that 
 happened. When I [ifconfig dc0] I get this return:
 
 #
 [EMAIL PROTECTED] ifconfig dc0
 dc0 flags = 8843UP, BROADCAST, RUNNING, SIMPLEX,
 MULTICAST MTU 1500
 inet6 fe:80::2c0:f0ff:fe79:4ab7%dc0 prefixlen 64 scopeid 0x1
 inet 0.0.0.0 net mask 0xff00 broadcast 255.255.255.255
 ether 00:01:02:c3:40:1a
 media Ethernet auto select (100basefull duplex)
 status: active
 ###
 
 Then I tried to ping a host...

You've gone too far ... there's not use trying to ping anything if you
obviously didn't get a DHCP address.

Who manages your DHCP server?  The config I described has worked in
every configuration I've ever dealt with (and that's quite a few) so
there is definately something external causing the problem.

Did you install a packet filter when you set this box up?  Look through
/etc/rc.conf for anything related to firewall.  Turn off all firewall
rules while you're setting things up.  Once it works, you can start
turning security stuff like that back on.

 I was reading Greg Lehey's book The Complete 
 FreeBSD which happens to have more information on
 DHCP,DNS, BIND than Absolute BSD by Michael Lucas and 
 Greg says that in order for dhcp to work you must start dhcpd,
 am I reading this correctly. I assumed that dhcpd would provide 
 DHCP for the private network (in my case), I did not think that
 my default gateway would rely on dhcpd in order to function.

DHCP only works if there is a DHCP server.  DO NOT run more than 1
DHPC server on a single network or everything is likely to go to hell.

Most cheesy internet routers that people buy include a DHCP server.

If you provide more information about what your network setup is, we
can tell you whether you need a DHCP server or not.  But the simple
answer is: DHCP won't work unless there is a DHCP server somewhere.

 Now I have 2 questions:
 *must I configure dhcpd now?

Maybe not.  Does the network you're plugging in to require DHCP?

 *must I configure dns (resolv.conf, named, etc.)?

No.  If you don't mind using IP addresses for everything.  If you want
to be able to use hostnames (such as www.yahoo.com) then you need DNS.

 *does DHCP rely on the two configurations list above to data?

Huh?

The two lines I provided are enough to configure FreeBSD to be a DHCP
_client_.  Any additional configuration is just tweaking its behaviour
and and is almost never required.

If you don't have a DHCP _server_ on your network, then the DHCP _client_
will not be able to to its job.

If you have a very small network (how many computers are here anyway?)
a DHCP server is probably more work than it's worth.

If you are plugged into a larger network (such a the Internet through an
ISP) then either a) your ISP's DHCP isn't working right or b) your ISP
isn't using DHCP or c) your ISP is doing something to enforce security,
such as registering MAC addresses, and you aren't registered correctly
or d) something bizaar that I've never seen before.

Again, if you could provide some information on how you're trying to set
things up, we could provide less general answers.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DHCP and rc Questions For FreeBSD 4.10???

2004-08-12 Thread Hakim Z. Singhji
Hi Bill,

What is the output of ipfw show?

I dont know that command? Syntax???

#

[EMAIL PROTECTED] ipfw show

#

is that correct?

You may do better to set:
firewall_enable=YES
firewall_type=OPEN

Ok I will...

I wrote to Earthlink and this is what they had to say:

Earthlink: I suggest you reset the cable modem and then 
try connecting to the net.

Earthlink:In order to fix this your cable modem needs to 
be reset. First shut down your computer and then disconnect 
the power from the cable modem for 1 to 3 minutes. This will 
reset the modem. Next, reconnect the power to the cable modem 
and turn on your computer. If this does not resolve the issue, 
please let us know so we can dig a little deeper.

What do you think of this???



-Original Message-
From: Bill Moran [EMAIL PROTECTED]
Sent: Aug 12, 2004 12:29 PM
To: Hakim Z. Singhji [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: DHCP and rc Questions For FreeBSD 4.10???

Hakim Z. Singhji [EMAIL PROTECTED] wrote:
 Who manages your DHCP server?  The config I described has worked in
 every configuration I've ever dealt with (and that's quite a few) so
 there is definately something external causing the problem.
 
 I have an Earthlink Highspeed Cable account w/ DHCP Server
 
 Did you install a packet filter when you set this box up?  
 
 Yes, however I turned firewall to [firewall_enable=NO] and commented
 all firewall entries in the rc.conf file.

What is the output of ipfw show?

You may do better to set:
firewall_enable=YES
firewall_type=OPEN

 If you don't have a DHCP _server_ on your network, then the DHCP _client_
 will not be able to to its job.
 
 Earthlink should provide a DHCP server, when I had my standalone redhat 
 box it was configured and I was also receiving DNS as well through earthlink.
 
 
 What do you suggest I do?
 
 -Original Message-
 From: Bill Moran [EMAIL PROTECTED]
 Sent: Aug 12, 2004 11:45 AM
 To: Hakim Z. Singhji [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: Re: DHCP and rc Questions For FreeBSD 4.10???
 
 Hakim Z. Singhji [EMAIL PROTECTED] wrote:
  Bill  FreeBSD-Questions,
  
  This configuration is not as intuitive as I thought it would be. 
  In /etc/rc.conf I added the following strings:
  
  
  network_interfaces=lo0 dc0
  ifconfig_dc0=DHCP
  
  
  Then I deleted the entries in dhclient.conf and relied on the
  default. I started the daemon by [dhclient dc0] and it 
  seemed to be processing.  However, that was all that 
  happened. When I [ifconfig dc0] I get this return:
  
  #
  [EMAIL PROTECTED] ifconfig dc0
  dc0 flags = 8843UP, BROADCAST, RUNNING, SIMPLEX,
  MULTICAST MTU 1500
  inet6 fe:80::2c0:f0ff:fe79:4ab7%dc0 prefixlen 64 scopeid 0x1
  inet 0.0.0.0 net mask 0xff00 broadcast 255.255.255.255
  ether 00:01:02:c3:40:1a
  media Ethernet auto select (100basefull duplex)
  status: active
  ###
  
  Then I tried to ping a host...
 
 You've gone too far ... there's not use trying to ping anything if you
 obviously didn't get a DHCP address.
 
 Who manages your DHCP server?  The config I described has worked in
 every configuration I've ever dealt with (and that's quite a few) so
 there is definately something external causing the problem.
 
 Did you install a packet filter when you set this box up?  Look through
 /etc/rc.conf for anything related to firewall.  Turn off all firewall
 rules while you're setting things up.  Once it works, you can start
 turning security stuff like that back on.
 
  I was reading Greg Lehey's book The Complete 
  FreeBSD which happens to have more information on
  DHCP,DNS, BIND than Absolute BSD by Michael Lucas and 
  Greg says that in order for dhcp to work you must start dhcpd,
  am I reading this correctly. I assumed that dhcpd would provide 
  DHCP for the private network (in my case), I did not think that
  my default gateway would rely on dhcpd in order to function.
 
 DHCP only works if there is a DHCP server.  DO NOT run more than 1
 DHPC server on a single network or everything is likely to go to hell.
 
 Most cheesy internet routers that people buy include a DHCP server.
 
 If you provide more information about what your network setup is, we
 can tell you whether you need a DHCP server or not.  But the simple
 answer is: DHCP won't work unless there is a DHCP server somewhere.
 
  Now I have 2 questions:
  *must I configure dhcpd now?
 
 Maybe not.  Does the network you're plugging in to require DHCP?
 
  *must I configure dns (resolv.conf, named, etc.)?
 
 No.  If you don't mind using IP addresses for everything.  If you want
 to be able to use hostnames (such as www.yahoo.com) then you need DNS.
 
  *does DHCP rely on the two configurations list above to data?
 
 Huh?
 
 The two lines I provided are enough to configure FreeBSD to be a DHCP
 _client_.  Any additional configuration is just

Re: DHCP and rc Questions For FreeBSD 4.10???

2004-08-12 Thread Hakim Z. Singhji
You must really like the # symbol.

Actually what I realized is that these posts end up on google searches
and all sorts of places all across the web.  Since people maybe 
referencing these threads to help solve their problems I take little 
extra time to make sure that my posts are legible reads as well as 
I can make at the time and organized in a way to use at your terminal
if necessary.

Have you tested basic network connectivity?

I installed FreeBSD on Tuesday Night and on monday I had Redhat 
running perfectly fine on the same network connection and cable.

I reduced it either to ipfiltering or cable modem (both likely candidates).

Do you get all the proper lights on both your NIC and the cable modem?

Yes on dc0 I do, however I not familiar with the other two 3COM XL
txp0, txp1. But I'm trying to connect to dc0. 


-Original Message-
From: Bill Moran [EMAIL PROTECTED]
Sent: Aug 12, 2004 10:21 AM
To: Hakim Z. Singhji [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: DHCP and rc Questions For FreeBSD 4.10???

Hakim Z. Singhji [EMAIL PROTECTED] wrote:
 Hi Bill,
 
 What is the output of ipfw show?
 
 I dont know that command? Syntax???
 
 #
 
 [EMAIL PROTECTED] ipfw show
 
 #

You must really like the # symbol.

 is that correct?

Yes, that's all you have to do.  Look at the rules that come back
to see what your current ruleset is.

 You may do better to set:
 firewall_enable=YES
 firewall_type=OPEN
 
 Ok I will...
 
 I wrote to Earthlink and this is what they had to say:
 
 Earthlink: I suggest you reset the cable modem and then 
 try connecting to the net.
 
 Earthlink:In order to fix this your cable modem needs to 
 be reset. First shut down your computer and then disconnect 
 the power from the cable modem for 1 to 3 minutes. This will 
 reset the modem. Next, reconnect the power to the cable modem 
 and turn on your computer. If this does not resolve the issue, 
 please let us know so we can dig a little deeper.
 
 What do you think of this???

I'll bet any amount of small pocket change that it's a scripted
answer they give out the first time you ask a question.  Have you
done it?  Cable modems can be flakey, and resetting them is
occasionally required.

Have you tested basic network connectivity?  Do you get all the
proper lights on both your NIC and the cable modem?  If there
are cable problems, you're going to waste a lot of time trying
to fix DHCP problems!

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Monitor Resolution???

2004-08-11 Thread Hakim Z. Singhji

Thank you oliver!!!
-Original Message-
From: Oliver Fuchs [EMAIL PROTECTED]
Sent: Aug 11, 2004 1:06 AM
To: [EMAIL PROTECTED]
Subject: Re: Monitor Resolution???

On Tue, 10 Aug 2004, Hakim Z. Singhji wrote:

 Hello All,
 
 I have a question that may be trivial to most however, I don't seem to know how to 
 modify my monitor resolution. I am using FreeBSD without X windows install.  Text 
 only and the font and overall resolution is 'HUGE'.  I recently installed 4.10 (last 
 night) but I don't know where I went wrong with this? Thanks in advance for your 
 help.
 

An acceptable resolution is VESA_800x600 (I do not think that the kernel can
do more at the moment?). 

To enable it you have to recompile your kernel with
option SC_PIXEL_MODE enabled (so you can use the raster text mode).

Then load the vesa support with kldload vesa and try 
vidconrtol -g 100x37 VESA_800x600.

If it is o.k. for you put in your /etc/rc.conf file:
allscreens_flags=-g 100x37 VESA_800x600 
and add to /boot/loader.conf:
vesa_load=YES 
to load the vesa module at startup.

Oliver
-- 
... don't touch the bang bang fruit
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


DHCP and rc Questions For FreeBSD 4.10???

2004-08-11 Thread Hakim Z. Singhji
Hi All,

I have installed FreeBSD 4.10 to serve as a headless gateway/router/firewall/NAT. The 
first problem that I have run into can probably be resolved easily. I tried to 
configure my NIC card via sysinstaller.  However, rc.conf does not have a startup 
variable for dc0. Therefore dhclient is inoperable.

I built this box to be headless therefore it is low-tech with no floppy or flash drive 
and is currently a stand-alone machine so I am not able to copy the rc.conf file to 
this post. dc0 is working because I can bring its status to active manually: '[EMAIL 
PROTECTED] ifconfig dc0 ether up'.

I was wondering what what variables should be assigned to rc.conf, the related 
variables I have thus far are:

##
ifconfig_dc0=dhcp
dhcp_program=/sbin/dhclient
dhcp_flags= 
##

It would be appreciated if someone could attach or copy an rc.conf file for a similar 
system configuration. Thanks in advance.

HZS

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DHCP and rc Questions For FreeBSD 4.10???

2004-08-11 Thread Hakim Z. Singhji
Hi All,

I've been researching this issue although it may be minor I don't like to rely on the 
[EMAIL PROTECTED] unless I have to. I'm sure you understand...anyway, 
http:www.freebsddiary.com has a tutorial that with info I could not find in The 
Complete FreeBSD or Absolute BSD. It described two entries; one in dhclient.conf 
and the other in rc.conf.  See Below:

###
dhclient.conf
###
interface dc0{
send host-name redgate;
request subnet-mask, broadcast-address, routers, domain-name-servers, domain-name, 
time-servers;
require domain-name-servers;

###
rc.conf
###
ifconfig_dc0=DHCP #IS THIS VARIABLE DECLARATION CASE SENSITIVE???
hostname=redgate

###

The question I have now is if this is all I have to do to get dhcp running at startup? 
I anyone else has any suggestions they are welcome. Unfortunately I cannot test this 
until the evening so feedback will be very helpful and will save me some time 
researching.  Thanks in advance.

-Original Message-
From: Hakim Z. Singhji [EMAIL PROTECTED]
Sent: Aug 11, 2004 11:24 AM
To: [EMAIL PROTECTED]
Subject: DHCP and rc Questions For FreeBSD 4.10???

Hi All,

I have installed FreeBSD 4.10 to serve as a headless gateway/router/firewall/NAT. The 
first problem that I have run into can probably be resolved easily. I tried to 
configure my NIC card via sysinstaller.  However, rc.conf does not have a startup 
variable for dc0. Therefore dhclient is inoperable.

I built this box to be headless therefore it is low-tech with no floppy or flash drive 
and is currently a stand-alone machine so I am not able to copy the rc.conf file to 
this post. dc0 is working because I can bring its status to active manually: '[EMAIL 
PROTECTED] ifconfig dc0 ether up'.

I was wondering what what variables should be assigned to rc.conf, the related 
variables I have thus far are:

##
ifconfig_dc0=dhcp
dhcp_program=/sbin/dhclient
dhcp_flags= 
##

It would be appreciated if someone could attach or copy an rc.conf file for a similar 
system configuration. Thanks in advance.

HZS

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DHCP and rc Questions For FreeBSD 4.10???

2004-08-11 Thread Hakim Z. Singhji
Alright, thank you Bill...I will let you know how I fair.

Cheers

-Original Message-
From: Bill Moran [EMAIL PROTECTED]
Sent: Aug 11, 2004 9:25 AM
To: Hakim Z. Singhji [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: Re: DHCP and rc Questions For FreeBSD 4.10???

Wrap your likes around 72 characters.

All you need in /etc/rc.conf is:
network_interfaces=lo0 dc0
ifconfig_dc0=DHCP

Everything else you added is just re-affirming the default values.


Hakim Z. Singhji [EMAIL PROTECTED] wrote:

 Hi All,
 
 I've been researching this issue although it may be minor I don't like to rely on 
 the [EMAIL PROTECTED] unless I have to. I'm sure you understand...anyway, 
 http:www.freebsddiary.com has a tutorial that with info I could not find in The 
 Complete FreeBSD or Absolute BSD. It described two entries; one in dhclient.conf 
 and the other in rc.conf.  See Below:
 
 ###
 dhclient.conf
 ###
 interface dc0{
 send host-name redgate;
 request subnet-mask, broadcast-address, routers, domain-name-servers, domain-name, 
 time-servers;
 require domain-name-servers;
 
 ###
 rc.conf
 ###
 ifconfig_dc0=DHCP #IS THIS VARIABLE DECLARATION CASE SENSITIVE???
 hostname=redgate
 
 ###
 
 The question I have now is if this is all I have to do to get dhcp running at 
 startup? I anyone else has any suggestions they are welcome. Unfortunately I cannot 
 test this until the evening so feedback will be very helpful and will save me some 
 time researching.  Thanks in advance.
 
 -Original Message-
 From: Hakim Z. Singhji [EMAIL PROTECTED]
 Sent: Aug 11, 2004 11:24 AM
 To: [EMAIL PROTECTED]
 Subject: DHCP and rc Questions For FreeBSD 4.10???
 
 Hi All,
 
 I have installed FreeBSD 4.10 to serve as a headless gateway/router/firewall/NAT. 
 The first problem that I have run into can probably be resolved easily. I tried to 
 configure my NIC card via sysinstaller.  However, rc.conf does not have a startup 
 variable for dc0. Therefore dhclient is inoperable.
 
 I built this box to be headless therefore it is low-tech with no floppy or flash 
 drive and is currently a stand-alone machine so I am not able to copy the rc.conf 
 file to this post. dc0 is working because I can bring its status to active 
 manually: '[EMAIL PROTECTED] ifconfig dc0 ether up'.
 
 I was wondering what what variables should be assigned to rc.conf, the related 
 variables I have thus far are:
 
 ##
 ifconfig_dc0=dhcp
 dhcp_program=/sbin/dhclient
 dhcp_flags= 
 ##
 
 It would be appreciated if someone could attach or copy an rc.conf file for a 
 similar system configuration. Thanks in advance.
 
 HZS
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]


-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Monitor Resolution???

2004-08-10 Thread Hakim Z. Singhji
Hello All,

I have a question that may be trivial to most however, I don't seem to know how to 
modify my monitor resolution. I am using FreeBSD without X windows install.  Text only 
and the font and overall resolution is 'HUGE'.  I recently installed 4.10 (last night) 
but I don't know where I went wrong with this? Thanks in advance for your help.

HZS
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Monitor Resolution???

2004-08-10 Thread Hakim Z. Singhji
Thanks Matthew... once again :)

Cheers

-Original Message-
From: Matthew Seaman [EMAIL PROTECTED]
Sent: Aug 10, 2004 3:52 PM
To: Hakim Z. Singhji [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: Monitor Resolution???

On Tue, Aug 10, 2004 at 03:27:35PM -0400, Hakim Z. Singhji wrote:

 I have a question that may be trivial to most however, I don't seem to know how to 
 modify my monitor resolution. I am using FreeBSD without X windows install.  Text 
 only and the font and overall resolution is 'HUGE'.  I recently installed 4.10 (last 
 night) but I don't know where I went wrong with this? Thanks in advance for your 
 help.

vidcontrol(1)

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help Debugging Kshell Script???

2004-08-08 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
David,
I appologize you are correct the script I sent you is a version of the
same script that I am working on for an AIX machine.  Attached is an
unencrypted version of the script for System V: BSD/Linux machines.
This is the error it is giving me and I'm not sure why I am getting this
error?

[EMAIL PROTECTED] sys_admin]$ ./swap_mon.ksh~
\nSwap Space Report for redgate.ath.cx\n
Sun Aug  8 00:03:48 EDT 2004
(standard_in) 3: illegal character: O
(standard_in) 3: parse error
(standard_in) 3: illegal character: O
(standard_in) 3: parse error
\nTotal Amount of Swap Space:\t494MB
Total KB of Swap Space Used:\t23MB
Total KB of Swap Space Free:\t471MB
\nPercent of Swap Space Used:\t4.6500%
\nPercent of Swap Space Free:\t95.3400%
\n
#
I need some help figuring out why bc is giving me such a hard time. I'm
almost positive my syntax is correct. This is where I think the problem
begins (and possibly ends) in the script:
#
do
# Use the bc utility in a here document to calculate the percentage of
# free and used swap space
PERCENT_USED=$(bc EOF
scale=4
($SW_USED / $SW_TOTAL) * 100
EOF
)
PERCENT_FREE=$(bc EOF
scale=4
($SW_FREE / $SW_TOTAL) * 100
EOF
)
##
Thanks for your help in advance.
HZS
David Fleck wrote:
| Unfortunately, I think the script you attached has been mangled in some
| way or other; it appears to be missing the end of the 'paging_mon'
| function, as well as whatever code invokes that function (and the
| swap_mon function as well).  If I try to run it, I get:
|
| dcf$ ./swap_mon.ksh
| \nSwap Space Report for grond.sourballs.org\n
| Sun Aug  8 07:31:26 CDT 2004
| ./swap_mon.ksh: line 85: funtion: command not found
| ./swap_mon.ksh: line 135: syntax error: unexpected end of file
|
| if I fix the typo (funtion - function) I just get the 'unexpected EOF'
| error.
|
| Both my 4.9 and 5.2.1 systems have /usr/bin/bc, so I assume it is part
| of the base install.  However, neither system has 'lsps', which appears
| to be an AIX command.
|
|
| --
| David Fleck
| [EMAIL PROTECTED]
|
| ___
| [EMAIL PROTECTED] mailing list
| http://lists.freebsd.org/mailman/listinfo/freebsd-questions
| To unsubscribe, send any mail to
| [EMAIL PROTECTED]
|
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBFkiclT9WV6TztkoRAngzAJ4jtRcnE5ZkANyZOM9ORxb+scnMNACeJFVf
JzNrpFMIjSw0NfpxOgyT13U=
=sXLe
-END PGP SIGNATURE-
##
#! /usr/bin/ksh   
###
#  CREATED_BY: Hakim Z. Singhji
###
#  SCRIPT:  swap_mon.zsh  
###
#  DATE:  8/4/04  
###
#  VERSION: 0.1   
###
#  PLATFORM: Linux Only   
###
#  PURPOSE:  This shell script is used to produce a report of the system's swap 
#space statistics including: Total paging space in MB, MB of free 
#paging space, MB of used pagine space, % of paging space used and 
#% of paging space free
###
#  REV LIST:

#  set -x  # Uncomment to debug this shell script
#  set -n  # Uncomment to check command syntax without any execution

###
# DEFINE VARIABLES HERE ###

THISHOST=$(hostname)# Host name of this machine
PC_LIMIT=65 # Upper limit of Swap space percentage before 
# notification 

###
# INITIALIZE THE REPORT ###

echo \nSwap Space Report for $THISHOST\n
date

###
# CAPTURE AND PROCESS DATE 

free -m | grep -i swap | while read junk

Re: Help Debugging Kshell Script???

2004-08-07 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi David,
Your absolutely right, I've been encrypting everything these days and I
didn't really think about what it would be like to help me and have to
jump through hoops just to see the file... Thanks.
David Fleck wrote:
| On Fri, 6 Aug 2004, Hakim Z. Singhji wrote:
|
| You must import my public key to open the attached file.
|
|
| Why?  Why not just attach the plain file?
|
|
| --
| David Fleck
| [EMAIL PROTECTED]
|
|
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD4DBQFBFYQrlT9WV6TztkoRAvnkAJY6WeAm+pgtJc9SCQGS8fHt/3mcAKCElJ3t
nBkebGIh5g5yFbLXVCglmw==
=V05b
-END PGP SIGNATURE-
##
#! /usr/bin/ksh   
###
#  CREATED_BY: Hakim Z. Singhji
###
#  SCRIPT:  page_swap_mon.zsh 
###
#  DATE:  8/4/04  
###
#  VERSION: 0.1   
###
#  PLATFORM: Linux Only   
###
#  PURPOSE:  This shell script is used to produce a report of the system's swap 
#of paging space statistics including: Total paging space in MB, MB 
#of Free paging space Used, and % of paging space Free. 
###
#  REV LIST:

#  set -x  # Uncomment to debug this shell script
#  set -n  # Uncomment to check command syntax without any execution

###
# DEFINE VARIABLES HERE ###

THISHOST=$(hostname)# Host name of this machine
PC_LIMIT=65 # Upper limit of Swap space percentage before 
# notification 

###
# INITIALIZE THE REPORT ###

echo \nSwap Space Report for $THISHOST\n
date

###
# CAPTURE AND PROCESS DATE 
function swap_mon
{
free -m | grep -i swap | while read junk SW_TOTAL SW_USED SW_FREE

do 
# Use the bc utility in a here document to calculate the percentage of 
# free and used swap space

PERCENT_USED=$(bc EOF
scale=4
($SW_USED / $SW_TOTAL) * 100
EOF
)

PERCENT_FREE=$(bc EOF
scale=4
($SW_FREE / $SW_TOTAL) * 100
EOF
)

# Produce the rest of the paging space report:
echo \nTotal Amount of Swap Space:\t${SW_TOTAL}MB
echo Total KB of Swap Space Used:\t${SW_USED}MB
echo Total KB of Swap Space Free:\t${SW_FREE}MB
echo \nPercent of Swap Space Used:\t${PERCENT_USED}%
echo \nPercent of Swap Space Free:\t${PERCENT_FREE}%

# Grab the integer portion of the percent used to test for
# the over limit threshold

INT_PERCENT_USED=$(echo $PERCENT_USED | cut -d. -f1)

if (( PC_LIMIT = INT_PERCENT_USED ))
then 
# Swap space limit has exceeded th threshold, send
# notification

tput smso # TURN ON REVERSE VIDEO!
echo \n\nWARNING: Paging Space has Exceeded the 
${PC_LIMIT}% Upper Limit!\n
tput rmso # TURN OFF REVERSE VIDEO!!
fi
done

echo \n
}
###
funtion paging_mon
{
###
# DEFINE VARIABLES 

PAGING_STAT=/tmp/paing_stat.out # Paging Stat hold file

###
# CAPTURE AND PROCESSING THE DATA #

# Load the data in a file without the column headings

lsps -s | tail +2  $PAGING_STAT

# Start a while loop and feed the loop from

Help Debugging KShell Script???

2004-08-06 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Everyone,
I need some help with this shell script.  I originally wrote it in ksh
and I not really familiar with bash.  However, that is what I'm using at
home now and I don't have ksh on any of my machines... Could you folks
help me convert this script to bash...I don't think the arithmatic
operator bc is a bash option.  It appears that is where the first bug
is at.
Please see the attached (encrypted/compressed) script for any additional
details.  You must import my public key to open the attached file.
**
gpg --decrypt swap_mon.ksh.sig
**
Thanks in advance
HZS
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBEwwglT9WV6TztkoRAnGcAJ4tVU6pQLp6ZQIBGWcjkTrVsEI6mACfWG9Y
AIjZC7q4Doa6440/Gk1YgPI=
=Yvuq
-END PGP SIGNATURE-
-BEGIN PGP MESSAGE-
Version: GnuPG v1.2.4 (GNU/Linux)
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=3pCO
-END PGP MESSAGE-
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Help Debugging Kshell Script???

2004-08-06 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Everyone,
I need some help with this shell script.  I originally wrote it in ksh
and I not really familiar with bash.  However, that is what I'm using at
home now and I don't have ksh on any of my machines... Could you folks
help me convert this script to bash...I don't think the arithmatic
operator bc is a bash option.  It appears that is where the first bug
is at.
Please see the attached (encrypted/compressed) script for any additional
details.  You must import my public key to open the attached file.
**
gpg --decrypt swap_mon.ksh.sig
**
Thanks in advance
HZS
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBExinlT9WV6TztkoRAqHMAKCMFthVnjHWNh6aoNZdSBfoOeveLACeLURE
n7WTKf5/nFy4e5vdrMN5Pc8=
=732m
-END PGP SIGNATURE-
-BEGIN PGP MESSAGE-
Version: GnuPG v1.2.4 (GNU/Linux)
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=3pCO
-END PGP MESSAGE-


smime.p7s
Description: S/MIME Cryptographic Signature


Questions on IPFW???

2004-08-03 Thread Hakim Z. Singhji
Hey guys,

Question, when NAT overloading is it possible to use only IPFW rules to pass TCP/UDP 
packects to remote ip addresses within the network? Or do you have to use 
natd...because IPFW allows you to execute the following for example:


ip from 192.168.99.100 80 to 192.168.99.101 9981


or even in conjunction with a dummynet rule of somesort?


Hakim Z. Singhji 
New York University
pub 1024D/A4F3B64A 2004-07-30 Hakim Z. Singhji (NYU) [EMAIL PROTECTED]
Key fingerprint = 1407 12D9 73F2 5C38 45CE C387 953F 5657 A4F3 B64A
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Questions on IPFW???

2004-08-03 Thread Hakim Z. Singhji
Hello Chuck,

I was wondering if someone could help me answer some questions I have concerning IPFW 
vs. natd I am trying to allow my FreeBSD 4.10 gateway to perform port forwarding for 
SSH, SQL*Net and Webservice (Web not as important yet). 

I wanted to know if I can use IPFW as opposed to natd to redirect or pass TCP  UDP 
(is ICMP out of the question???) to a remote location.  Gateway::192.0.0.1:22 -- 
remote server 192.0.0.5:22 or 192.0.0.5:9881 for instance. From the configuration of 
ipfw it appears that it can be done instead of using natd.

Any suggestions or corrections of my logic welcome. Thanks in advance.

HZS

-Original Message-
From: Chuck Swiger [EMAIL PROTECTED]
Sent: Aug 3, 2004 12:40 PM
To: Hakim Z. Singhji [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: Questions on IPFW???

Hakim Z. Singhji wrote:
 Question, when NAT overloading is it possible to use only IPFW rules to
 pass TCP/UDP packects to remote ip addresses within the network?

I don't know what NAT overloading means.

It is possible to use only IPFW rules to pass TCP  UDP packets from one 
interface to another using the fwd action.  However, note that:

   The fwd action does not change the contents of the packet at all.
   In particular, the destination address remains unmodified, so
   packets forwarded to another system will usually be rejected by
   that system unless there is a matching rule on that system to
   capture them.  For packets forwarded locally, the local address
   of the socket will be set to the original destination address of
   the packet.  This makes the netstat(1) entry look rather weird
   but is intended for use with transparent proxy servers.

 Or do you have to use natd...because IPFW allows you to execute
 the following for example:
 
 ip from 192.168.99.100 80 to 192.168.99.101 9981
 

That's the body of an IPFW rule which matches packets with those attributes. 
Without an action (allow, deny, fwd), what you've written isn't a 
complete rule: it doesn't mean anything by itself.

 or even in conjunction with a dummynet rule of somesort?

Um.  Do you understand the question you are asking?

I don't-- perhaps try using a complete sentence.  Better yet, why don't you 
tell us what your network looks like and what you want to do.  You most likely 
will receive answers which are more specific and more useful to you...

-- 
-Chuck


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Questions on IPFW???

2004-08-03 Thread Hakim Z. Singhji
Actually Chuck,

You answered my question, I wanted to know which was better to use with port 
forwarding (ipfw or natd) and based on what you wrote, natd is a better fit due to the 
fact that I would not have to force the other machine to accept packets redirected 
from the NAT box using natd.  Is that correct???

-Original Message-
From: Hakim Z. Singhji [EMAIL PROTECTED]
Sent: Aug 3, 2004 12:49 PM
To: Chuck Swiger [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: Questions on IPFW???

Hello Chuck,

I was wondering if someone could help me answer some questions I have concerning IPFW 
vs. natd I am trying to allow my FreeBSD 4.10 gateway to perform port forwarding for 
SSH, SQL*Net and Webservice (Web not as important yet). 

I wanted to know if I can use IPFW as opposed to natd to redirect or pass TCP  UDP 
(is ICMP out of the question???) to a remote location.  Gateway::192.0.0.1:22 -- 
remote server 192.0.0.5:22 or 192.0.0.5:9881 for instance. From the configuration of 
ipfw it appears that it can be done instead of using natd.

Any suggestions or corrections of my logic welcome. Thanks in advance.

HZS

-Original Message-
From: Chuck Swiger [EMAIL PROTECTED]
Sent: Aug 3, 2004 12:40 PM
To: Hakim Z. Singhji [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: Questions on IPFW???

Hakim Z. Singhji wrote:
 Question, when NAT overloading is it possible to use only IPFW rules to
 pass TCP/UDP packects to remote ip addresses within the network?

I don't know what NAT overloading means.

It is possible to use only IPFW rules to pass TCP  UDP packets from one 
interface to another using the fwd action.  However, note that:

   The fwd action does not change the contents of the packet at all.
   In particular, the destination address remains unmodified, so
   packets forwarded to another system will usually be rejected by
   that system unless there is a matching rule on that system to
   capture them.  For packets forwarded locally, the local address
   of the socket will be set to the original destination address of
   the packet.  This makes the netstat(1) entry look rather weird
   but is intended for use with transparent proxy servers.

 Or do you have to use natd...because IPFW allows you to execute
 the following for example:
 
 ip from 192.168.99.100 80 to 192.168.99.101 9981
 

That's the body of an IPFW rule which matches packets with those attributes. 
Without an action (allow, deny, fwd), what you've written isn't a 
complete rule: it doesn't mean anything by itself.

 or even in conjunction with a dummynet rule of somesort?

Um.  Do you understand the question you are asking?

I don't-- perhaps try using a complete sentence.  Better yet, why don't you 
tell us what your network looks like and what you want to do.  You most likely 
will receive answers which are more specific and more useful to you...

-- 
-Chuck


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Questions on IPFW???

2004-08-03 Thread Hakim Z. Singhji
Thanks buddy...I appreciate it.

-Original Message-
From: Chuck Swiger [EMAIL PROTECTED]
Sent: Aug 3, 2004 1:11 PM
To: Hakim Z. Singhji [EMAIL PROTECTED], 
freebsd Questions [EMAIL PROTECTED]
Subject: Re: Questions on IPFW???

Hakim Z. Singhji wrote:
 You answered my question, I wanted to know which was better to use with
 port forwarding (ipfw or natd) and based on what you wrote, natd is a
 better fit due to the fact that I would not have to force the other machine
 to accept packets redirected from the NAT box using natd.  Is that
 correct???

That's right.  Most people want to use NAT, because it lets you set up an 
internal network without having to specially configure the internal machines.

With regard to your other question, if you want an external connection to, 
say, port 22 to be forwarded to port 22 on some machine on your internal 
network, use:

redirect_port tcp 192.0.0.5:22 22

...in /etc/natd.conf or your natd_flags in /etc/rc.conf.

-- 
-Chuck



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: HOWTO Ping LAN???

2004-07-28 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Bill,
| Do you have _real_ IPs?
I have one IP only...
|Most people only get one real IP from their ISP, and
|then use private IPs (such as 192.168.0.x or 10.0.0.x) for the rest
|of their machines.
Yes, I have a similar setup for my private network...
|If you're doing such, you'll either need exciting nat rules on
| the gateway, or some other workaround.
Yes this is where I need assistance, I have read quite a bit on NAT
however it seems that I am missing something???
With that said, I'll get back to business. I was thinking that NAT would
resolve my issue, however only one way. What if I am outside my
home-network and I want to SSH one of the machines behind the default
gateway. At present it is not possible and I don't know how to make this
possible.
Figure 1
***
*  Internet   *
*24.199.1xx.xx*
***
~   |
~   |
***   **
* Defaut GW   * __ __ *Kids Machine*
*192.68.0.0   *   *192.68.0.3  *
~ FreeBSD 4.10 *  * Mandrake 10*
***   **
~   |
~   |
***
*Wrk Station 1*
*192.68.0.1   *
*Redhat 9 *
***
This is a rough diagram of the network... I would like to ssh, ping,
etc. the machines behind the default gateway directly (without
tunneling) from the outside the network (at work for example). Is this
possible and if so how do I config.  Keep in mind that my default
gateway is FreeBSD.  I know this may be a complicated project but if you
could help that would help me greatly.  Many thanks to everyone in advance.
HZS
Bill Moran wrote:
| PLEASE wrap your lines.  I'm not interested in fixing obnoxious email
formatting
| any more.  See http://www.lemis.com/questions.html
|
| Hakim Singhji [EMAIL PROTECTED] wrote:
|
|Hi All,
|
|Many of you have seen my posts lately, I'm a noobie to FreeBSD.  I'm
trying
|to configure a home Windows Free home network complete with default
|gateway, LAN, Wireless 802.11b and several flavors of Linux/BSD.
|
|Its a pretty big project for me and is teaching me ALOT.  However I have a
|test setup and I'm am not able to ping my local machine.  I can only ping
|my gateway.  My local machine is enabled to receive FTP, PING and SSH. In
|addition the firewall on my default gateway is also configured to operate
|those services.
|
|I don't know where I''ve gone wrong, my default gateway works fine
|however...I cannot find my network from the outside.  What is the
problem???
| Thanks in advance for all your help.
|
|
| Do you have _real_ IPs?  Most people only get one real IP from their
ISP, and
| then use private IPs (such as 192.168.0.x or 10.0.0.x) for the rest
of their
| machines.  If you're doing such, you'll either need exciting nat rules on
| the gateway, or some other workaround.
|
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBCI2xNF6tCt5tOyIRAuioAJwIqSmh060ZCg4j2AB1qyFzbE4/+gCfRwtI
1HdZdh/+e9KVTjaP8tVoZ7s=
=ZVbx
-END PGP SIGNATURE-
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD Gateway???

2004-07-27 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Olaf Hoyer wrote:
| On Sat, 24 Jul 2004, Hakim Z. Singhji wrote:
|
||
|| 10/100?  There are less Gigabit types that are supported, yet,
|| but then the reason for that should be pretty obvious.
||
|| Anyway, you generally can't go wrong with 3Com.  That said,
|| I've never had trouble with 3Com, SiS, DEC/Intel, even RealTek
|| and the onboard VIA/Rhine stuff (drivers, respectively: xl, sis, dc,
|| rl, vr).
||
|| That covers quite a few chipsets.  There are plenty more.  The
|| only problem I have answering your post is that I don't know what's
|| *not* supported.  Also, some users have reported issues with watchdog
|| timeout errors using 5.X FBSD and one of the drivers mentioned above.
|| You could probably spot which one on Google ...
|
|
| Hi!
|
| Well, I personally prefer the Intel Etherexpress in 100MBit Scenarios.
| (fxp)
|
| You also could look at ebay, sometimes they show up in bundles of 5 or
| so, and then are below those 30$ list price...
|
| Or you could have a look at a Znyx or Adaptec or Intel dual/Quad card, I
| also noticed some Adaptec quad ones on german ebay recently.
|
| In Gigabit world, well, Intel or Broadcom (em or bge) cards are nice,
| but given the scenario you have, they are overkill and quite costly
| compared to some fxp or xl.
|
| Do _not_ go for Realtek or Via, they impose a far heavier load on the
| CPU than Intel or 3COM.
|
| HTH
| Olaf
|
Hi Olaf,
Thanks alot for your help, I found a pretty good deal on a pair 3COM
Xl's $10 each...pretty good huh.  Hey maybe I could use you as a
resource if I have any questions about setting up the Gateway/Router.
Thanks again.
HZS
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBBwCrNF6tCt5tOyIRAkr9AJ9dRdcevTSJoVeQLo2sPNFgHPtMigCguZEa
ulyosIh6cWZnWogvKTh2cnQ=
=9tRi
-END PGP SIGNATURE-
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD Gateway???

2004-07-27 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Pavel Duda wrote:
| Hakim Z. Singhji wrote:
|
| Does anyone have any suggestions
| on the type of NIC I should use?
|
|
| Almost any normal NIC will be fine. I'm using mostly Realtek-based
| (RTL8139) and Intel (8255) cards wo problems.
|
| ___
| [EMAIL PROTECTED] mailing list
| http://lists.freebsd.org/mailman/listinfo/freebsd-newbies
| To unsubscribe, send any mail to [EMAIL PROTECTED]
Hi Everyone,
I would like to thank you for all your help...I found a pair of 3COM
XL's for $10 each...I was told that is a steal... so I went for it.
Thanks again.  Oh, I may need your help once I get started building the
box remember I'm originally from Linux World. So this will be a new hack
for me. Hope I can look to you guys for help if I get in trouble.
HZS

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBBwNWNF6tCt5tOyIRAuG9AKCKAA/u6WFZDMc0F8lPWjF1Bm6fsgCg43ZZ
4kiTmFl8vATMP//PXnRatpE=
=rqv5
-END PGP SIGNATURE-


smime.p7s
Description: S/MIME Cryptographic Signature


FreeBSD Gateway???

2004-07-23 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Everyone,
I am building a gateway/router from a i386 300Mhz, 32MB RAM, 5GB hda and
~  I need to buy the NIC cards.  I wanted to have three interface
connection points to my gateway/router. Does anyone have any suggestions
on the type of NIC I should use?  I would appreciate some help.
In addition, I'm new to BSD. I hail from the Redhat world, but I
anticipate FreeBSD to be a great addition to my network.
HZS
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBAdyvNF6tCt5tOyIRAqPLAJ9tyc3SbDvsvW6g3xmU3m6qsCf1nwCgt3Kl
fnx7NOpoaTrCTF6e5jg1iX4=
=agHz
-END PGP SIGNATURE-


smime.p7s
Description: S/MIME Cryptographic Signature


Re: FreeBSD Gateway???

2004-07-23 Thread Hakim Z. Singhji
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Kevin D. Kinsey, DaleCo, S.P. wrote:
| Hakim Z. Singhji wrote:
|
| -BEGIN PGP SIGNED MESSAGE-
| Hash: SHA1
|
| Hi Everyone,
|
| I am building a gateway/router from a i386 300Mhz, 32MB RAM, 5GB hda and
| ~  I need to buy the NIC cards.  I wanted to have three interface
| connection points to my gateway/router. Does anyone have any suggestions
| on the type of NIC I should use?  I would appreciate some help.
|
| In addition, I'm new to BSD. I hail from the Redhat world, but I
| anticipate FreeBSD to be a great addition to my network.
|
| HZS
|
|
|
| 10/100?  There are less Gigabit types that are supported, yet,
| but then the reason for that should be pretty obvious.
|
| Anyway, you generally can't go wrong with 3Com.  That said,
| I've never had trouble with 3Com, SiS, DEC/Intel, even RealTek
| and the onboard VIA/Rhine stuff (drivers, respectively: xl, sis, dc,
| rl, vr).
|
| That covers quite a few chipsets.  There are plenty more.  The
| only problem I have answering your post is that I don't know what's
| *not* supported.  Also, some users have reported issues with watchdog
| timeout errors using 5.X FBSD and one of the drivers mentioned above.
| You could probably spot which one on Google ...
|
| HTH,
|
| Kevin Kinsey
| ___
| [EMAIL PROTECTED] mailing list
| http://lists.freebsd.org/mailman/listinfo/freebsd-newbies
| To unsubscribe, send any mail to [EMAIL PROTECTED]
|
Well Kevin,
Do you know where I can get a 3COM or Intel card for a good price???  I
tried pricewatch.com however they all seem to be around the same between
29 - 35 dollars.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBAeS2NF6tCt5tOyIRAvVcAKDnxH1D1zBKCQUlW2+ehaoqNo5B0wCgn/TB
3m8zLQgRUmCTgb6eIbpVSoQ=
=TE8C
-END PGP SIGNATURE-


smime.p7s
Description: S/MIME Cryptographic Signature