Re: Does anyone know how to subscribe to the isc dhcp list?

2004-01-02 Thread Mark Woodson
At 09:50 AM 1/2/2004, stan wrote:
I'm still not able to get failover working on ISC dhcpd, and it looks like
this list is out of answers.
The REAME in the work directory of the port mentions a couple of mailing
lists dedicated to that project (great anoth mailinglist to subscribe to
:-(), but it does not explain how to subscribe to them.
I'm too nice to send a message to the lsit asking :-)
You might try ISC's site.

http://www.isc.org/services/public/lists/dhcp-lists.html

It's polite to at least try searching for an answer.

-Mark 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DVD Burning

2003-12-23 Thread Mark Woodson
On Tuesday 23 December 2003 03:10 pm, Eric van Gyzen wrote:
 I have:

  - FreeBSD 5.1-RELEASE
  - HP DVD Writer 300i (ATAPI, using ATAPICAM)
  - Imation DVD-R media

 I'm trying:

   # growisofs -speed=1 -Z /dev/cd0=/tmp/foo.iso

   :-[ Unit won't start: 40901 ]
   :-( /dev/cd0: unsupported MMC profile 10

I'd suggest googling unsupported MMC profile 10 and read through the 
threads that brings up.  It appears to have something to do with 
incompatible media/firmware combos.

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Best Way to Fix a links Browser Compilation Problem

2003-11-05 Thread Mark Woodson
On Wednesday 05 November 2003 01:41 pm, Martin McCormick wrote:
 Mark Woodson writes:
 You do not actually need to edit the CONFIGURE_ARGS in Makefile,
 rather you include that statement in your call to make
 
 make WITHOUT_X11=yes install

   My thanks to you and one other person who pointed this out to
 me.  It looks like that is going to work.

 Martin McCormick

Quite welcome.

-Mark


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: isc-dhcp dyndns

2003-10-15 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wednesday 15 October 2003 08:39 am, J. Seth Henry wrote:
 How is everyone else updating their dynamic DNS entries from a
 FreeBSD based gateway router?

A script I found in the clients section @ dyndns.org.  If you look 
under clients there you'll find it.  I think it was called ddclient.  
There's probably a port.

- -Mark 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/jde5F/yyV91po54RAh6/AJ9bVm7QOLgbKp4cIOteTGzLuV8H4wCeJyY6
lJaF5HaTJulWk7RnVHaVjVs=
=18jD
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cdrdao with IDE burners?

2003-10-06 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Monday 06 October 2003 10:20 am, Fernando Gleiser wrote:
 My trusty SCSI CD burner is dying a slow death, so I'm thinking
 about getting a new one. The problem is SCSI drives are very
 expensive now when compared to an ATAPI one and I have a small
 budget.

 I use cdrdao a lot for music and video CDs and cdrecord for data
 CDs. do those tools work with ATAPI drives? do they work with
 ATAPI/CAM?

I can vouch for cdrdao.  Been using it with an atapi burner via 
atapi-cam.  Works great.

- -Mark

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/gaaoF/yyV91po54RArLcAJ9DWzXJQH8LwrHjEB86ietEHz8W/wCg7hoS
DgVj4kVY7MZP9IQUp0LgseE=
=2N7V
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: samba 3.0, FreeBSD 5.1

2003-10-02 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thursday 02 October 2003 10:10 am, Micheas Herman wrote:
 What is the best way to install samba 3.0 on FreeBSD 5.1

 I am not finding it in ports :-(

 Am I blind?

Nope, samba-devel is where the samba head is.

- -Mark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/fGpzF/yyV91po54RAqAQAKCh/a4Sb7VolB+VBDRwgM3Wy0u2EACghTeb
52YuGIpUyC58OcI/I037kG0=
=kQa5
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Mail-list PGP Keys

2003-10-01 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wednesday 01 October 2003 12:08 pm, Eric F Crist wrote:
 Does this fix the mime/plugin error in Kmail?  That's what Im
 really looking to do now.

You need to configure KDE and Kmail to recognize the gpg plugin.

http://freebsd.kde.org/howtos/aegypten-kmail.php

This has the info you need.

- -Mark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/ez1VF/yyV91po54RAme5AJ9lETesli+NcJL6T9zN4CTp4k69jQCfZIo5
GLEpbz72QQ7SIV34lsgauYc=
=Rz4O
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Mail-list PGP Keys

2003-10-01 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wednesday 01 October 2003 02:33 pm, Eric F Crist wrote:
 On Wednesday 01 October 2003 03:47 pm, Mark Woodson wrote:
  On Wednesday 01 October 2003 12:08 pm, Eric F Crist wrote:
   Does this fix the mime/plugin error in Kmail?  That's what Im
   really looking to do now.
 
  You need to configure KDE and Kmail to recognize the gpg plugin.
 
  http://freebsd.kde.org/howtos/aegypten-kmail.php
 
  This has the info you need.

 Wow, going through a lot to get this MIME stuff working.  Maybe
 someone can help me with this.

Yes, unfortunately it's not all that user friendly a process.  Though 
it's still relatively easy.

 I had 'Keep passphrase in memory' enabled when I went through the
 instructions on http://freebsd.kde.org/howtos/aegypten-kmail.php
 and everything seemed to work fine as far as reading emails you
 people send with a  MIME pgp key. However, I am not able to sign or
 encrypt anymore becase it's not giving me a way to input my
 passphrase.

I've found that signing requires changing it from OpenPGP (plugin) 
to inline OPenPGP (built-in). 

- -Mark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/e0orF/yyV91po54RAnmXAKCWB4etNDX2tmvXEFV+thm2l0OsfwCg5Zt7
WzHnY82zgfPRVs/w3/nRAxE=
=lOIL
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Mail-list PGP Keys SOLVED!!!!!!

2003-10-01 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wednesday 01 October 2003 03:11 pm, Eric F Crist wrote:
 Hey all,

 Thanks for putting in your time.  I finally got everything working
 the way it's supposed to.  I forgot to add the
 ./.gnupg/gpg-agent.conf file with a pinentry program.  DOH!

 I can now sign and encrypt, as well as verify and decrypt all MIME
 and standard pgp messages.

 My only, final question to the group is related to signature trust.
  Should I, upon recieving a new signature change its trust level to
 unconditional?  I would like messages that are verified to appear
 green in Kmail and anything below a level 5 is listed as untrusted,
 so shows yellow.

The idea with trust is that you do so as minimally as possible.  The 
only person you should trust unconditionally is yourself.  There's a 
great deal of literature on the subject out there I'd suggest doing a 
bit of reading.

- -Mark

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/e1auF/yyV91po54RAgp1AJ9ZfkT/qM+YE7Eer3fIh1uBBjYn2ACfT735
EPmjRdCaXw4q+Uf/Lgysw1E=
=+lDX
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: having trouble mounting cd rom

2003-09-15 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Monday 15 September, Charlie [EMAIL PROTECTED] wrote:
 On Monday 15 September 2003 09:38 am,  wrote:
  Charlie [EMAIL PROTECTED] writes:
   not sure why but when i run the command mount -t cd9660 -o ro
   /dev/acd0c /cdrom it gives me this error message cd9660:
   /dev/acd0c: Invalid argument
 
  Version of FreeBSD?
  Does /dev/acd0c exist?
  Is your CDROM drive an ATAPI device?
  Is the drive recognized at boot time?

  version 4 i believe, i bought it at compusa.
 yes /dev/acd0c exists
 not sure but i believe so
 not sure how to check if it's reconized at boot time

dmesg will tell you what's getting recognized at boot time.

dmesg | grep cd

That will strip out some of the irrelevant bits.   You should see 
something like:
acd0: DVD-R TDK DVDRW0404N at ata1-master PIO4


I find that invalid arguments frequently mean that the cd isn't a data 
cd, but rather an audio cd, or there is no cd in the drive.  It's a 
data cd?  You can skip the optional arguments and just:  mount /cdrom  
if the entry is in fstab (which default installs usually have).

- -Mark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/ZloQF/yyV91po54RArrzAJ95zgfka1g+klxsrz0kJwY4w6SdUQCg9MYf
xwJK8ebTj2lNcvuwuaCPXtQ=
=SlhW
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Entropy harvesting: interrupts ethernet point_to_point

2003-09-04 Thread Mark Woodson
On Thursday 04 September 2003 05:33 am, Putinas wrote:
[snip]
 and also part of my custom kernel, I tried to commend RANDOM_IP_ID,
 PFIL_HOOKS but I got same results :

 options INCLUDE_CONFIG_FILE
 options IPFIREWALL  #firewall
 options IPFIREWALL_VERBOSE  #enable logging to
 syslogd(8) options IPFIREWALL_FORWARD  #enable
 transparent proxy support options
 IPFIREWALL_DEFAULT_TO_ACCEPT#allow everything by default
 options IPV6FIREWALL#firewall for IPv6 options 
IPV6FIREWALL_VERBOSE
 options IPV6FIREWALL_DEFAULT_TO_ACCEPT
 options IPDIVERT#divert sockets
 options IPFILTER#ipfilter support
 options IPFILTER_LOG#ipfilter logging
 options IPSTEALTH   #support for stealth
 forwarding options PFIL_HOOKS
 options TCPDEBUG
 options RANDOM_IP_ID
 options TCP_DROP_SYNFIN #drop TCP packets with
 SYN+FIN options DUMMYNET
 options BRIDGE
 options DEVICE_POLLING

Is ipfilter and ipfw supported at the same time?  Are you planning on 
using both of them at the same time?  If you are planning on using 
ipfirewall you can safely comment out ipfilter options.

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: newbie questions (2) 5.1

2003-08-20 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wednesday 20 August 2003 11:22 am, [EMAIL PROTECTED] wrote:
  On Wednesday 20 August 2003 10:39 am, [EMAIL PROTECTED] 
wrote:
  hello again,
 
  first, i can't seem to get my modem to do anything, i think it's
  an irq conflict, but don't really want to mess around with the
  config files too much if i don't have to. in 5.1 sysinstall(8)
  there seems to be no option to change or confirm the info probed
  and sysinstall skips the kernel, not sure if that is the right
  expression, and sysinstall starts with the automatic defaults. 
  i have attached the dmesg file.  help, i am new to FreeBSD so i
  may need to be walked through the steps.
 
  The modem is recognized:
  [From dmesg.txt]
  sio4: U.S. Robotics Sportster 33600 FAX/Voice Int at port
  0x2f8-0x2ff irq 3 on isa0
  sio4: type 16550A
 
  What is it you are trying to do with the modem and how?
 
  - -Mark

 i saw that, but what does the sio1 message port not recognized
 mean, and what is sio1?

 i'm trying to use modem for dial-up, and haven't heard a peep from
 it.

Those messages mean that the kernel thinks it is detecting a serial 
port (com port), but that the irq isn't what it's expecting.  You can 
usually safely ignore those.  The important bit for you is that it 
detects your modem at sio4, so you'll want use sio4 (or cuaa4) in 
whatever document you are using to get dial-up working.

How are trying to get dial-up working?  ppp?

You'll probably want to have a look at the handbook (if you aren't 
already).

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/userppp.html

- -Mark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/Q8bXF/yyV91po54RApFLAJ4+wxGTVjm63oB2Bg+OT4GXYbx61gCZAZMB
1xPb4Bai8BzyY2rQ9d212lI=
=ZCHr
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Kuser/root account problem

2003-08-20 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wednesday 20 August 2003 11:17 am, Joshua Oreman wrote:
 On Wed, Aug 20, 2003 at 04:26:24PM +0300 or thereabouts, Jimmy 
Kimanzi wrote:
  Hi
 
  I used the kuser utility in KDE to add a user to the wheel group
  and it seems to have deleted the root account and I can't login
  as root now . Anyone know how I can fix this ?
  I'm running FreeBSD 5.1 - RELEASE and KDE 3.1.2.

 Try Ctrl+Alt+F1, then login as root. I think kuser probably
 forgot to run pwd_mkdb -- lucky for you :-)

 If that doesn't work, follow the instructions for a forgotten root
 password ('tis in the FAQ). When you're in single user mode, try
 `grep root /etc/master.passwd'. If something comes back, type
 `passwd root' to reset root's password. If nothing comes back,
 you'll have to add a line for root manually in /etc/master.passwd.
 Then run pwd_mkdb /etc/master.passwd. Whatever you do, type `exit'
 or Ctrl+D now.

I had a friend that had something similar happen to him after 
installing kuser, it hadn't actually deleted the root account, but it 
did expire it (which disallowed root logins).  Took him quite a while 
to figure out.

- -Mark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/Q8ekF/yyV91po54RAgHOAKDcqdD9MmnByW5joLR2vsAuzZTu7QCgitYP
SNmRlbiZL3N7BtM2EyKNiLM=
=SMK4
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [JunkMail] RE: RE: [JunkMail] IPF DHCP request

2003-08-18 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sunday 17 August 2003 05:05 pm, geek wrote:
 i read it already, but i have a problem with it

 #
 # Allow bootp traffic in from your ISP's DHCP server only.
 #
 pass in quick on ed0 proto udp from X.X.X.X/32 to any port = 68 keep state

 My IP changes every time i reboot the machine, how i can make this works ?!

The from (ed0 is the external interface in the example) is the address of your 
ISP's DHCP server.  replace X.X.X.X with any unless you want to try and 
figure out the DHCP server's IP address.

So the line above should read

pass in quick on ed0 proto udp from any to any port = 68 keep state

This is less secure than is ideal since it would allow a theoretical attack on 
your dhclient, but should work.

- -Mark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/QSTSF/yyV91po54RApamAKCVZthCWcjwvbD0EiJriOgPMu2elgCgp4uh
wPApM5PWXWdH8bZEHZV4GhE=
=5QOO
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Ports vs. Packages

2003-08-18 Thread Mark Woodson
On Monday 18 August 2003 04:25 pm, Charles Howse wrote:
  Neither. I'd recommend installing sysutils/portupgrade and using the
  portinstall option to fetch  install packages (so you always get the
  latest version). Check the -P and -PP options to portinstall.
 
  Note that doing this will require you to have an updated ports tree.
  You'll need to cvsup your ports regularly
  (net/cvsup-without-gui). There
  are many threads on the mailing lists with detailed information on how
  to cvsup your ports tree and rebuild your INDEX.

 Will doing it that way require all the compiling?

Not necessarily.  If you run portupgrade with -P it will attempt to use 
packages wherever it can find them, and install from ports where it cannot 
find a package.  -PP will _only_ use packages, however it will then fail if 
it cannot find a package and you would then need to fetch the package 
yourself manually.  The way it sounds like you would be using it you'd want 
to use -P, but I'd recommend reading the man page for portupgrade.

Packages are nice for the speed you can install them with, but can be much 
harder to deal with the dependencies unless you use something like 
portupgrade (which is much more useful after you've got what you want 
installed and want to keep it all up to date).

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [JunkMail] IPF DHCP request

2003-08-17 Thread Mark Woodson
At 09:29 PM 8/17/2003 +0100, geek wrote:
Hey guys, can u please post (who have) rules with DHCP involved?! because, 
i'm in troube, my firewall doesnt work because because my ipf.rules doesnt 
work and i dont know why!!

When i put in rules pass in/out all i have acess to the internet, 
otherwise, with my rules i dont, and i have change them so many times, and 
they didnt work anyway, if anyone can help me:

block in log all
block out log all
This should be at the end.  It's organizationally easiest if you break it 
up into by interface.  I think is overly restrictive additionally.

pass in quick on lo0 all
pass out quick on lo0 all
pass in quick on ep0 all
pass out quick on ep0 all
#Allow internal traffic to outside world
pass out quick on ep1 proto tcp all keep state
pass out quick on ep1 proto udp all keep stateuic
pass out quick on ep1 proto icmp all keep state
#Allow traffic from outside
#DNS
pass in quick on ep1 proto udp from any to any port = 53 keep state
this really isn't necessary.  You've allowed responses to queries by the 
pass out on the interface above.

#DHC# [dhclient]
pass in quick on ep1 proto udp from any to any port = 68 keep state keep 
fragsP
keep frags is really unnecessary.

I'd recommend the howto at this address.

http://www.schlacter.net/public/FreeBSD-STABLE_and_IPFILTER.html

-Mark 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking RIP requests on firewall

2003-08-14 Thread Mark Woodson
On Wednesday 13 August 2003 11:27 am, Darryl Hoar wrote:
 -Original Message-
 From: Mark Woodson [mailto:[EMAIL PROTECTED]
 Sent: Wednesday, August 13, 2003 11:54 AM
 To: [EMAIL PROTECTED]
 Subject: Re: Blocking RIP requests on firewall
 
 On Wednesday 13 August 2003 07:53 am, Darryl Hoar wrote:
  Greetings,
  I have a FreeBSD 4.7S machine that is running
  IPFilter and is configured as a firewall.
 
  My external interface is xl0.
  I put block in quick on xl0 proto udp from 10.0.0.1 to any port = 520
  reloaded the rules (by rebooting.  I have it locked down).
  it still generates log entries in my firewall_log file.
 
 Can you show an example of the log entry you're seeing?
 
  block return-rst in log quick on xl0 proto tcp from any to any
  block return-icmp-as-dest(port-unr) in log quick on xl0
 
 proto udp from any
 to any
 
  block in quick on xl0 proto udp from 10.0.0.1 to any port = 520
 
 if you change this to:
 block in quick on xl0 proto udp from any to any port = 520
 
 You will drop any packet bound for port 520 without logging,
 not just ones from 10.0.0.1
 
  block in log quick on xl0 all
 
 The other entries have the log keyword so will be generating entries.

 here's a couple of the entries:

 Aug 13 13:20:59 darryl ipmon[98]: 13:20:58.166238 xl0 @0:3 b
 10.0.0.1,router - 10.0.0.255,router PR udp len 2
 0 72  IN
 Aug 13 13:21:28 darryl ipmon[98]: 13:21:28.164643 xl0 @0:3 b
 10.0.0.1,router - 10.0.0.255,router PR udp len 2
 0 72  IN

I'm kind of at a loss, since it's using rule 3 (which appears to be the rule 
you've got to not log).  What's the output of ipfstat -in (shows the input 
filter with line #'s).

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking RIP requests on firewall

2003-08-14 Thread Mark Woodson
(top quoting make following threads difficult)
On Wednesday 13 August 2003 12:49 pm, Darryl Hoar wrote:
 ipfstat -in shows:

 @1 pass in quick on xl0 proto udp from 10.0.0.1/32 to any port = 68 keep
 state
 @2 block return-rst in log quick on xl0 proto tcp from any to any
 @3 block return-icmp-as-dest(port-unr) in log quick on xl0 proto udp from
 any to any

This line is blocking the router messages.  Put the rule above it in the list 
and that should take care of it.  That message would seem to be in effect 
just blocking any udp traffic in on that interface.  I'm not sure that the 
rule is working like you expect it to.  Not sure how to fix it, but I don't 
think icmp port-unreach's come in as udp packets.

 @4 block in quick on xl0 proto udp from 10.0.0.1/32 to any port = 520
 @5 block in log quick on xl0 from any to any
 @6 pass in quick on xl1 proto tcp from any to any flags S/FSRPAU
 @7 pass in quick on xl1 proto udp from any to any keep state
 @8 pass in quick on xl1 proto icmp from any to any keep state
 @9 block in quick on xl1 from any to any
 @10 pass in quick on lo0 from any to any

 I don't get it .  the log entries seem to be from rip, but its logging
 at rule 3.

If you ignore the reutnr-icmp-as-dest(port-unr) it make total sense, since it 
is denying any udp from any address coming in on xl0.

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ppp question

2003-08-14 Thread Mark Woodson
On Tuesday 12 August 2003 10:52 am, Plunkett, Ian Gregory (UMC-Student) wrote:
 Hello all,

 I am having a heck of a time getting ppp to work correctly.  I can connect
 to my isp using ppp manually (going into TERM mode, etc.).  But once I am
 connected this way I can't return to packet mode and I can't access the
 internet outside of that terminal window.

Are you adding a default route?  That sounds like the problem.

 I have also tried using kppp.  When I use this, I can access locations if I
 know the IP address but not if I type in the web address.  I included the
 correct dns when I configured the connection, still I get nothing if I type
 in the web address.

Again this sounds like you aren't adding a default route.

It would be most helpful if we could see the ppp.conf you are using, and any 
errors you are seeing using ppp automatically (the relevant entries in 
ppp.log if that is setup).

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problem with /etc/hosts on FreeBSD 5.1???

2003-08-14 Thread Mark Woodson
On Tuesday 12 August 2003 03:10 am, [EMAIL PROTECTED] wrote:
 Hi,
   I just loaded freeBSD 5.1 and ran into some troubleI have edited
 the /etc/hosts file to show the required namebut when I boot up the
 system hangs and gives the message ...My unspecified name is
 BLAA..Sleeping for retry It comes out of this loop if I hit ^C. I have

That's sendmail saying it can't figure out the host name.  Unless the machine 
is handling mail, it's not really a big deal.  It's not really hanging, 
you're just not being patient enough in letting it timeout.

Configure sendmail properly or disable it entirely to fix the problem.  The 
problem isn't really /etc/hosts.

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [JunkMail] RE: resolv.conf/named

2003-08-14 Thread Mark Woodson
On Tuesday 12 August 2003 04:38 pm, Stuart Whelan wrote:
  # /etc/resolv.conf
  domain internal.sricrm.com
  nameserver 10.1.2.2

 Shouldn't nameserver be 127.0.0.1 if you have named running on the local
 machine?

Yes, on the machine with named running it's set to 127.0.0.1.  That's the 
setting from a different machine (the one I work on), the only place it's not 
identical is the nameserver line. 

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [JunkMail] Promise ATA Raid controller

2003-08-09 Thread Mark Woodson
On Friday 08 August 2003 05:04 am, Steven Haywood wrote:
 Hi folks

 In the 4.8-i386 hardware notes, mention is made of:
 Promise Fasttrak TX2000 IDE cards
 Promise SuperTrak ATA RAID controllers

 Can I imply from this that:
 Promise FastTrak TX2000 ATA RAID Card
 will work?
 Has anyone any experience (good or bad) with these? I am considering
 buying one as my poor server really needs some decent storage.

Got one running on a 4.8-STABLE machine.  No problems at all running hardware 
RAID-1.

-Mark


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: kernel-building error

2003-08-08 Thread Mark Woodson
On Friday 08 August 2003 12:47 pm, mess-mate wrote:
 | umass.o: In function `umass_cam_quirk_cb':
 | umass.o(.text+0x21bb): undefined reference to `xpt_done'
 | *** Error code 1
 |
 | Thanks for your help.
 | mess-mate

 Thanks for your help.
 Problem semi-solved. Disabled 'umass' in the kernel and all
 goes well.
 I don't know whar the requirements are for 'umass', what's
 this beast ??

umass is USB mass storage (a usb hard drive).

The requirements for umass are:  scbus and da (scsi bus and scsi direct 
access) as the line states in the kernel config file
device  umass   # Disks/Mass storage - Requires scbus and da

The requirements for a device or option are listed in the config file.  
generally.

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [JunkMail] Re: Finding your dynamic external IP

2003-08-04 Thread Mark Woodson
On Monday 04 August 2003 08:39 am, Technical Director wrote:
 On Sun, 3 Aug 2003, David S. Jackson wrote:
  If your external IP number changes, as with DHCP, is there a way
  to find out what it currently is?  I was thinking you could keep
  BitchX logged into a chat channel and script a /dns yournick and
  email yourself the results from time to time.
 
  How would you do it?

dhclient allows you to execute scripts when it runs.

man dhclient-scripts and see the HOOKS sections, but the gist is that you can 
create an /etc/dhclient-(enter|exit)-hooks script to do whatever you might 
need.

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Changed a filesystem's name -- now system hangs on reboot (help)

2003-07-10 Thread Mark Woodson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thursday 10 July 2003 10:01 am, Joshua Oreman wrote:
 On Thu, Jul 10, 2003 at 03:09:35AM -0400 or thereabouts, Chuck Swiger wrote:
  [EMAIL PROTECTED] wrote:
  [ ... ]
 
  I've looked through the handbook and tried (unsuccessfully) to reboot
   into single-user mode or otherwise get to a place where I can either
   comment out the line in fstab or skip the check -- no luck.
  
  Any ideas much appreciated.
 
  This is when you boot single-user mode off of the install CD, or the
  FIXIT CD (#2) if you have that around.  Then mount your hard drive's root
  partition on /mnt (or make something in /tmp), and fix the problem.

 Completely unnecessary.

 Here's what you do:
 Booting [/kernel] in 9 seconds ... press Space
 OK boot -s
 ...
 Enter shell or RETURN for /bin/sh: press Enter
 # mount -uw /
 # mount /usr
 # my_favorite_editor /etc/fstab
 # umount /usr
 # exit

If you're favorite editor is vi, then you'll need to mount /var or it will 
complain.

- -Mark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/DazvF/yyV91po54RAtyNAJ9EUCiLab8MxJt7nBvIluOu6LjtLACdHBVL
FdE+Qi9U23GKTyn37CoMS/o=
=BS0x
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


NFS problems

2003-07-09 Thread Mark Woodson
I'm having trouble getting NFS exports to work properly on FreeBSD.  I'm 
running 4.8-STABLE as of July 3.

It's acting like the problem is in /etc/exports.

squelcher# less /etc/exports
/usr/src-ro -maproot=0  cad1 squelcher lappy
/usr/obj-ro -maproot=0  cad1 squelcher lappy

/usr/src will export and is mountable
/usr/obj is not

squelcher# ls -ls /usr
total 54
[edited for brevity]
 2 drwxr-xr-x   3 root  wheel   512 Jun  5 10:45 obj
 2 drwxr-xr-x  21 root  wheel   512 Jun  9 15:54 src

on squelcher (the nfs server) I see this in messages when I start/sighup 
mountd.

squelcher# tail  /var/log/messages
Jul  9 13:09:00 squelcher mountd[16110]: can't change attributes for /usr/obj
Jul  9 13:09:00 squelcher mountd[16110]: bad exports list line /usr/obj -ro 
-maproot
Jul  9 13:09:29 squelcher mountd[16110]: mount request denied from 10.1.2.60 
for /usr/obj

and Access denied messages on lappy (the nfs client).

The permissions look the same, the exports lines are the same, and I must be 
missing something but I can't figure out what it is.

-Mark

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 5.0-release upgrade

2003-06-05 Thread Mark Woodson
On Wed, 4 Jun 2003 12:31:42 -0700, Kent Stewart [EMAIL PROTECTED] wrote:

On Wednesday 04 June 2003 12:14 pm, Augusto Jun Devegili wrote:
Hi all,

I've installed 5.0-release and I want to get the latest sources in order
to upgrade my system. I've read the handbook and found cvsup. I've
created a supfile and I have one doubt: which should be the value of
tag so that I fetch the latest 5.0 sources?
TIA, and regards,

Augusto Jun Devegili
You can find the cvs tags at
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvs-tags.html
I don't think of 5.x as a release quality system in the sense that 4.x 
is. This will change when they release 5-stable at 5.2. Until then, I 
think the only tag to follow is tag=., which is 5-current.
If you look under /usr/share/examples/cvsup you'll find standard-supfile 
which will work to updating a 5.0 system with the latest sources.

-Mark
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]