Re: Apache 2.2.8 + mod_authnz_ldap

2008-05-09 Thread Mel
On Friday 09 May 2008 02:03:01 n j wrote:
> Hello,
>
> did anyone experience any problems trying to install mod_authnz_ldap
> with Apache 2.2.8 on FreeBSD 6.3?
>
> I ran into the following trouble:
>
> mod_authnz_ldap.c:41:2: #error mod_authnz_ldap requires APR-util to
> have LDAP support built in. To fix add --with-ldap to ./configure
> which caused "Stop in
> /usr/ports/www/apache22/work/httpd-2.2.8/modules/aaa. *** Error code
> 1".

What are you using for apr? The one that comes with apache itself, or the 
devel/apr port?
I found in practice that even though the "APR from ports" option contains a 
warning, it works better if you have more software depending on apr (i.e., 
subversion) and it's also better manageable with the plugins (in my case 
db4*). F.e., I don't have to rebuild apache, if I want to migrate to the 
latest and greatest db4 minor release.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Group of the newly created files and directories

2008-05-08 Thread Mel
On Thursday 08 May 2008 15:16:46 Unga wrote:

> Thanks for replies. Btw, where is the open(2) syscall
> is implemented in FreeBSD, just curious?

/usr/src/sys/kern/vfs_syscalls.c

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [SSHd] Increasing wait time?

2008-05-08 Thread Mel
On Thursday 08 May 2008 05:50:59 Steve Bertrand wrote:
> >>ssh stream  tcp  nowait/20/4/10  root  /usr/sbin/sshd  sshd -i
> >>
> >> into /etc/inetd.conf set a limit of
> >>
> >> * 20 overall ssh connections
> >> * 4 connection attempts per minute
> >> * at most 10 connections from a single IP
> >>
> >> This works very well on a personal server, not sure how it scales up.
> >
> > So if I copy over some files via scp, I can lock myself out. Fun stuff ;)
>
> Come on...
>
> The comment was based on a 'personal' server for logins.
>
> How 'bout you explain why SCP would break this so the OP understands...
>
> Otherwise, explain why running an FTP session through one of the
> server's SSH tunnels wouldn't be equally viable to running an unlimited
> number of SCP sessions over normal TCP ;)

because:
for FILE in */*.[ch]; do scp ${FILE} host:/backup; done
is quicker to write then setup tunnels.

The point is, that there's a difference between failed login attempts and 
incoming connections. sshd logs failed login attempts, so it's easy to 
seperate them (sysutils/grok) and set the rate limit to an acceptable value, 
should one try to hammer the server by simply opening connections.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Group of the newly created files and directories

2008-05-08 Thread Mel
On Thursday 08 May 2008 10:48:29 Unga wrote:

> That is, in Linux, the group will the user's primary
> group, but in FreeBSD, it is the the group of the
> parent directory!

Yes, it's been that way in any BSD for as long as I know.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: minpasswordlen and login.conf not working on 6 or 7 series

2008-05-07 Thread Mel
On Wednesday 07 May 2008 23:23:54 Omer Faruk Sen wrote:
> Actually I have read it but haven't read all the man pages because
> even in 7.0 manual page for login.conf still have:
>
>  minpasswordlennumber  6 The minimum length a local password 
> may be.
>
> I think that line should be removed from manual page too.

It's confusing, but...
 The following capabilities are reserved for the purposes indicated and
 may be supported by third-party software.  They are not implemented in
 the base system.

So this basically means, that cap_mkdb /etc/login.conf will not throw an error 
when it sees that capability and it will also set the default value, if 
applicable. Programs can use getcap(3) to consult the value. For instance you 
could write your own login program, or consult and enforce it through a 
webpage, or implement it in a server program.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: minpasswordlen and login.conf not working on 6 or 7 series

2008-05-07 Thread Mel
On Wednesday 07 May 2008 23:00:04 Omer Faruk Sen wrote:

> I wanted to set  the minimum length of  passwords  of my users so I
> have done the followings in login.conf
>
> 1) added  :minpasswordlen=5:\ todefault like:

> Am I missing something here? Or this may be a bug on FreeBSD 6.X and 7.X

You didn't read the login.conf manpage:
 The minpasswordlen and minpasswordcase facilities for enforcing restric-
 tions on password quality, which used to be supported by login.conf, have
 been superseded by the pam_passwdqc(8) PAM module.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Delaying pf.conf loading

2008-05-07 Thread Mel
On Wednesday 07 May 2008 19:21:22 Justin Jereza wrote:
> Hello.
>
> Is it possible to delay the loading of pf rules from pf.conf after ppp
> has connected and named is running through rc.conf?

No, the design of the rc system does not allow for rc.conf to alter the order 
of the scripts executed, since rc.conf is loaded on a per-script basis and 
the ordering is done based on 'comments' in the scripts themselves.

You can however, load an empty table with the appropreate name, then create an 
rc script in /usr/local/etc/rc.d/ that fills the table with hostnames to 
solve your problem.

Here's an example:

/etc/rc.conf:
pf_dyntables_enable="YES"
pf_dyntables_list="adservers"

/etc/pf.conf:
table  persist

/etc/pf/dynamic/adservers:
cdn.fastclick.net
ad.doubleclick.net
# etc etc

/usr/local/etc/rc.d/pf_dyntables:

#!/bin/sh
#
# PROVIDE: pf_dyntables
# REQUIRE: named pf ppp

. /etc/rc.subr

name="pf_dyntables"
rcvar=`set_rcvar`
start_cmd="${name}_start"
stop_cmd=":"

load_rc_config $name

: ${pf_dyntables_enable="NO"}
: ${pf_dyntables_dir="/etc/pf/dynamic"}
: ${pf_dyntables_list="NONE"}

pf_dyntables_start()
{
   if test x"${pf_dyntables_list}" != x"NONE"; then
  for table in ${pf_dyntables_list}; do
 echo "Loading table <$table>"
 cat ${pf_dyntables_dir}/${table} |/usr/bin/xargs \
${pf_program} -t ${table} -Tadd
  done
   else
  echo hi
   fi
}

run_rc_command "$1"


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [SSHd] Increasing wait time?

2008-05-07 Thread Mel
On Wednesday 07 May 2008 06:16:19 Norbert Papke wrote:
> On May 6, 2008, Gilles wrote:
> > Is there a way to configure SSHd, so that the wait time between login
> > attempts increases after X failed tries?
>
> I run sshd via inetd rather than as a stand-alone daemon.  inetd provides
> optional rate limiting functionality.  For instance. putting
>
>ssh stream  tcp  nowait/20/4/10  root  /usr/sbin/sshd  sshd -i
>
> into /etc/inetd.conf set a limit of
>
> * 20 overall ssh connections
> * 4 connection attempts per minute
> * at most 10 connections from a single IP
>
> This works very well on a personal server, not sure how it scales up.


So if I copy over some files via scp, I can lock myself out. Fun stuff ;)
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: configure: how to tell what options were used

2008-05-06 Thread Mel
On Tuesday 06 May 2008 22:13:47 Steve Franks wrote:
> I think I'm having problems with a port due to a sub-port having
> incorrect configure options.  Anyone know how to find out what those
> might have been?  I'm not seeing a standard way to find that out...

Don't clean the build, then:
make all-depends-list | while read DIR; do
cd ${DIR}
configlog=$(make -V WRKSRC)/config.log
if test -f ${configlog}; then
echo ${configlog}
fi
done | xargs ${EDITOR}

Then have fun finding the problem in the logs. Without knowing what to look 
for, that can be tedious.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: What is CPP's real default include path?

2008-05-05 Thread Mel
On Monday 05 May 2008 20:42:23 Walt Pawley wrote:
> At 12:06 PM +0200 5/5/08, Mel wrote:
> >On Monday 05 May 2008 10:12:05 Walt Pawley wrote:
> >> I've been fiddling with compiling nzbget-0.4.0 on a 6.3 system.
> >> My initial efforts failed the configuration process for not
> >> finding iconv.h. This, despite /usr/local/include/iconv.h being
> >> present and supposedly in the include search path if the info
> >> documentation can be believed.
> >>
> >> Just to see if I could learn something, I copied the
> >> /usr/local/include/iconv.h to /usr/include/ and tried again.
> >> After this, the configuration process completed and the
> >> application seemed to "make" and "make install" just fine.
> >>
> >> Is there some way to ascertain what the set of default include
> >> paths actually is?
> >
> >Even though cc has a million options, there's none that I know that prints
> > the system include path (not even in -dumpspecs). However, in practice
> > you can assume it's /usr/include.
> >
> >To make configure scripts believe you have something installed, it's not a
> >good idea to copy headers.
> >Look for a --with-iconv=/usr/local option and failing that, change CFLAGS
> > and LDFLAGS in the environment when configuring.
>
> Admonition understood - I was just experimenting and wanted the
> file to be in a specific place without any uncertainty about
> just what various "look over there" options actually do. The
> reason for such a mind set is that actual behavior of cpp seems
> to differ from its documentation, to wit:
>
>   info cpp :: Header Files::Search Path reads:

FreeBSD uses a modified version of GCC. Info files haven't been updated to 
reflect that.

>   GCC looks in several different places for headers.  On a normal Unix
>   system, if you do not instruct it otherwise, it will look for headers
>   requested with `#include ' in:
>
>  /usr/local/include

Nope.

>  LIBDIR/gcc/TARGET/VERSION/include
>  /usr/TARGET/include

No idea really.

>  /usr/include
Yep.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: What is CPP's real default include path?

2008-05-05 Thread Mel
On Monday 05 May 2008 10:12:05 Walt Pawley wrote:
> I've been fiddling with compiling nzbget-0.4.0 on a 6.3 system.
> My initial efforts failed the configuration process for not
> finding iconv.h. This, despite /usr/local/include/iconv.h being
> present and supposedly in the include search path if the info
> documentation can be believed.
>
> Just to see if I could learn something, I copied the
> /usr/local/include/iconv.h to /usr/include/ and tried again.
> After this, the configuration process completed and the
> application seemed to "make" and "make install" just fine.
>
> Is there some way to ascertain what the set of default include
> paths actually is?

Even though cc has a million options, there's none that I know that prints the 
system include path (not even in -dumpspecs). However, in practice you can 
assume it's /usr/include.

To make configure scripts believe you have something installed, it's not a 
good idea to copy headers.
Look for a --with-iconv=/usr/local option and failing that, change CFLAGS and 
LDFLAGS in the environment when configuring.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [6.3] Keeping host up to date

2008-05-04 Thread Mel
On Saturday 03 May 2008 17:07:08 Manolis Kiagias wrote:
> Gilles wrote:
> > Hello
> >
> > I have some newbie questions:
> >
> > 1. Am I right in understanding that running "make ; make install" in
> > /usr/ports/ turns the port into a package, so that when I run
> > "pkg_info", it doesn't make any difference whether a package was
> > downloaded directly from the Net or compiled locally through the Ports
> > collection?
>
> When you compile a port, a package is created and installed (but you get
> to select the options. Pre-built packages have the default options and
> are usually older versions). In fact, you can even use the ports to
> create packages and install them on other systems. (See man ports)

Probably the most confusing thing for someone new to the ports system is:
- that a port that gets installed is referred to as a package
- that a tarball containing the compiled files to install a port is also 
called a package.

When you compile and install a port, a tarball is NOT created. The 'make 
package' target will do this for you.

Also, pre-built packages from FreeBSD-servers have the default options, or 
more to the point the options that are set by the PACKAGE_BUILDING switch in 
the port's Makefile if present.
But since you can make your own packages, it is perfectly ok to use a 
build 'server' and upgrade 'client' machines using your own packages and your 
own options.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: handling stale dependencies

2008-05-02 Thread Mel
On Friday 02 May 2008 07:20:30 Zbigniew Szalbot wrote:
> Hello,
>
> I will appreciate your advice about how to best handle stale
> dependencies. Today I wanted to upgrade phpMyAdmin and I got a number of
> questions about stale dependencies. I eventually deleted all of them,
> but does this mean I need to upgrade ports which used this dependency
> (mailgraph-1.14_1, netpbm-10.26.52, p5-FuzzyOcr-devel-3.4.2_1,
> php5-gd-5.2.5_1, and rrdtool-1.2.26)?
>
> Stale dependency: mailgraph-1.14_1 -> png-1.2.27 (graphics/png):
> Delete this? ([y]es/[n]o/[a]ll) [yes]
> Deleted.

Something went wrong earlier on, and portupgrade screwed up. It tried to 
upgrade png, got as far as uninstalling it, failed to install it and then 
failed to restore the backup and for some reason also thinks that rrdtool 
does not depend on graphics/png, while it does, unconditionally.
Best thing to do when you see pkgdb mentioning "stale dependencies" is hit 
ctrl-c hard, fast and often. Then scroll up to see what it did wrong and try 
to figure out how to correct it's mess.

What is at present the png version installed on your system and could you show 
the output of:
grep 'DEPORIGIN: graphics/png' /var/db/pkg/*/+CONTENTS

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD Server Settings Consult

2008-05-02 Thread Mel
On Friday 02 May 2008 13:28:44 Free BSD wrote:
> We've been having some problems with our server and I was wondering if
> someone had any advice or suggestions for our current system settings.

Would help to know, at minimum:
- ammount of ram
- ammount of cpu's
- platform (uname -m )
- pciconf -lv|grep ^none
- dmesg output that complains about hardware
- what's different about your kernel with respect to GENERIC

What the problems are:
- from the sysctl variables, I'm guessing you want more network performance
- you mention core dumps, does the kernel crash?

Some background:
- what's the primary purpose of the machine
- why are things like ipc tuned?


> kern.maxfilesperproc=65536

The above will only work with programs that use open(2) exclusively and not 
fopen, because fopen is limited to SHRT_MAX, being 32767.


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ACPI can only be compiled into the kernel on the amd64 and ia64 platforms

2008-05-01 Thread Mel
On Thursday 01 May 2008 23:43:17 alexus wrote:
> like i said i copy GENERIC
>
> dd# pwd
> /usr/src/sys/i386/conf
> dd# grep -i acpi GENERIC
> dd#
>
> my GENERIC doesn't have acpi either...
>
> as far as "weird" part goes, this is a plain vanila
> FreeBSD-7.0-RELEASE, I'm not sure what you mean by "weird" or i386
> part, all I did is cp GENERIC dd then vi dd, then config dd and then
> tried compiling and it threw me an error right away.

Ah, the old config way.
Better to use buildkernel target in /usr/src.
What's your uname -m?

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: TERM

2008-05-01 Thread Mel
On Thursday 01 May 2008 22:56:39 alexus wrote:
> My HOME, END isn't working whenever I login through PuTTY or SecureCRT
> to FreeBSD-7.0-RELEASE-p1
>
> anyone knows where/what needs to be adjusted?

Your client. IIRC, secureCRT had an option to bind keys to a different 
combination. But it's been a while.
ctrl-a for HOME and ctrl-e for END should work, regardless of client.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ACPI can only be compiled into the kernel on the amd64 and ia64 platforms

2008-05-01 Thread Mel
On Wednesday 30 April 2008 23:23:27 alexus wrote:
> dd# make cleandepend && make depend
> rm -f .depend machine amd64
> cd ../../../modules;
> MAKEOBJDIRPREFIX=/usr/src/sys/i386/compile/dd/modules
> KMODDIR=/boot/kernel DEBUG_FLAGS="-g" MACHINE=i386
> KERNBUILDDIR="/usr/src/sys/i386/compile/dd" make  cleandepend
> ===> aac (cleandepend)
> rm -f @ machine amd64
> rm -f .depend GPATH GRTAGS GSYMS GTAGS
> ===> accf_data (cleandepend)
> rm -f @ machine amd64
> rm -f .depend GPATH GRTAGS GSYMS GTAGS
> ===> accf_http (cleandepend)
> rm -f @ machine amd64
> rm -f .depend GPATH GRTAGS GSYMS GTAGS
> ===> acpi (cleandepend)
> ===> acpi/acpi (cleandepend)
> "Makefile", line 4: "ACPI can only be compiled into the kernel on the
> amd64 and ia64 platforms"
> *** Error code 1
>
> Stop in /usr/src/sys/modules/acpi.
> *** Error code 1
>
> Stop in /usr/src/sys/modules.
> *** Error code 1
>
> Stop in /usr/src/sys/i386/compile/dd.
> dd#
>
> I took GENERIC and rewise it a little bit

You removed device acpi and shouldn't have done that.
Also, your build system looks weird.
What is compile/dd, why are you compiling under i386 when your system is 
detected as amd64 or ia64, why is MAKEOBJDIRPREFIX pointing to a directory 
below the source tree, rather then a directory outside the source tree.
In other words, not enough info (aside from the missing question).

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: HDD missing from sysinstall

2008-05-01 Thread Mel
On Thursday 01 May 2008 22:31:13 Cameigons wrote:
> I just want to say I'm having the same problem. I have an asus p5n-e SLI,
> two seagate 250GB sata2 HD's.
>
> When trying to install FreeBSD 7.0-Release, the sysinstall pops up the
> message "No Disks Found!(...)". And after that I can't boot up neither my
> Win Xp, Linux or Freebsd 6.2 anymore...
>
> Has anyone figured out a solution yet? :/

That would typically start with send-pr, so devs know there's a problem. 
Looking at the dmesg posted by Troels, I would include an acpi dump.

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/acpi-debug.html

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Recovering mysql data - mysqlbinlog

2008-05-01 Thread Mel
On Thursday 01 May 2008 22:24:33 Paul Schmehl wrote:
> --On Thursday, May 01, 2008 21:52:05 +0200 Mel
>
> <[EMAIL PROTECTED]> wrote:
> > On Thursday 01 May 2008 21:13:41 John wrote:
> >> Thank you Mel and Paul for the suggestions.  From what I understand the
> >> general query log is more for debugging and the binary log is for point
> >> in time recovery and replication.  I'll be adding a my.cnf file (using
> >> the my-large.cnf as a skeleton) soon.  I'm glad the issue was caught
> >> earlier on and now I'm the wiser thanks to you guys.  I wonder why the
> >> default is no. I can't think of anyone who wouldn't find the binary
> >> logging beneficial.
> >
> > I can think of a reason for FreeBSD. The binary logs are never deleted
> > and upon every server restart a new one is created. If you're like me,
> > developing on a laptop with a webenvironment including 'Mysql server',
> > shutting down your laptop daily, you quickly find yourself having full
> > /var partition.
>
> That can be alleviated by adding the logs to newsyslog.conf and gzipping
> and rotating them regularly.
> If you don't restart mysql much, something like this would work:
>
> /var/db/mysql/[hostname]-bin.*mysql:mysql  660  7 *  $W6D0 JBG
> /var/db/mysql/[FQHN].pid
>
> If you're restarting it daily, something like this should work:
>
> /var/db/mysql/[hostname]-bin.*mysql:mysql 660 25 * $D0  JBG
> /var/db/mysql/[FQHN].pid
>
> Adjust the counts and the rotation schedule to your liking and, of course,
> use your own hostname and fully qualified hostname.

Yes, in this particular case it can, not changing hostnames is a plus then (as 
in, getting hostname from your dhcp server) ;)
Actually, I think you can use a fixed name, but it's been a while since I 
looked at the bin-log related variables.

However if you're using the bin-log, to recover accidental deletes or 
replications, then you need to use the mysql provided SQL commands for it. 
It's scriptable (periodic/crontab), but not for use in newsyslog.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Recovering mysql data - mysqlbinlog

2008-05-01 Thread Mel
On Thursday 01 May 2008 21:13:41 John wrote:
> Thank you Mel and Paul for the suggestions.  From what I understand the
> general query log is more for debugging and the binary log is for point in
> time recovery and replication.  I'll be adding a my.cnf file (using the
> my-large.cnf as a skeleton) soon.  I'm glad the issue was caught earlier on
> and now I'm the wiser thanks to you guys.  I wonder why the default is no.
> I can't think of anyone who wouldn't find the binary logging beneficial.

I can think of a reason for FreeBSD. The binary logs are never deleted and 
upon every server restart a new one is created. If you're like me, developing 
on a laptop with a webenvironment including 'Mysql server', shutting down 
your laptop daily, you quickly find yourself having full /var partition.

People running dedicated or semi-dedicated MySQL installations, are encouraged 
to tweak their installation anyway. The most common ones being:
- put the binary logs on a large enough disk, if possible a seperate disk
  all together for performance.
- by default, /tmp is used for temporary sorting tables, when JOINs demand it.
  If that's a small partition or worse a 64MB memory disk, expect to get in
  trouble, system wide. Use the tmpdir configuration variable.
- thread_concurrency as indicated in the templates
- skip-networking for security if all traffic is local
- sort and key buffer + max_connections to limit/max out memory usage.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Recovering mysql data - mysqlbinlog

2008-05-01 Thread Mel
On Thursday 01 May 2008 19:45:32 John wrote:
> Can someone direct me to where the MySQL transaction logs are stored?  I am
> running FreeBSD 6.1 with MySql 5.0.41 which I installed from ports, no
> extra config.  From what I've read online, unless you disable them (which I
> couldn't find in the makefile) the logs should be being created.  Doing a
> find / --name "bin." Didn't turn up anything.

By default they end up in /var/db/mysql and are named $hostname-bin.###
Also, the information you read online is incorrect. By default, binary logging 
(which are the transaction logs) is disabled. I don't recall whether this is 
a FreeBSD port specific modification.

You can turn it on by putting a my.cnf in /var/db/mysql. Templates named 
my-$size.cnf are in /usr/local/share/mysql and are well-commented.

> I'll also note that it is not in var/db/mysql with the rest of the mysql
> data files and the ib_logfiles which would have been useful, but the data I
> am trying to recover is from a MyISAM.

I take it you tried myisamchk?
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dmesg empty after shutdown -r

2008-05-01 Thread Mel
On Thursday 01 May 2008 13:58:45 A. Hamilton-Wright wrote:
> > On Thursday 01 May 2008 01:58:46 A Hamilton-Wright wrote:
> >> After "shutdown -r now" and the subsequent reboot, I have
>
>(... no dmesg)
>
> On Thu, 1 May 2008, Mel wrote:
> > dmesg -M doesn't show anything either?
>
> Wish I'd thought to try that last night.  I eventually shut it
> down again (shutdown -p) until I could come in this morning and
> take a look at the console while booting -- and now everything
> is fine.  I have now tried a few reboots (shutdown -r) and halts
> (shutdown -h), and I have a dmesg every time it recovers.

Just for the record, I asked because by default, dmesg uses kvm_read(3) to 
read the kernel's message buffer. -M tries to read the sysctl kern.msgbuf, so 
in the event kvm_read screwed up somewhere without noting an error, 
the 'backdoor' might just work. Pure speculation without having looked in 
detail at the kernel code, but I wanted to rule it out. What I did suspect, 
is that kernel's message buffer didn't get filled to begin with and that's a 
whole different ballgame.

FYI: unless you really need dmesg to work for normal operations, you could've 
just let it up running and use scroll-lock+arrows/pgup|down to go all the way 
back up to btx loader. If it was the kernel message buffer not getting 
filled, I'd suspect some kind of message complaining about that.
I know that doesn't help now, but for next time and googlers ;)
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: 7.0-RELEASE + newer kernel

2008-05-01 Thread Mel
On Thursday 01 May 2008 13:17:03 Anselm Strauss wrote:


> The reasons why I hesitate to upgrade to 7.0-STABLE are:
>
> - freebsd-update won't work anymore. How do I then get informed about
> security updates?

Using your favorite RSS reader and subscribe to:
http://www.freebsd.org/security/advisories.rdf

> - Can't install distributions with sysinstall anymore. Do I just
> compile everything from source?

Yes (to distributions, no to ports), but you have to upgrade by source 
to -STABLE to begin with, unless you want to go the hard way and bake a new 
CD/DVD.

> - How do I actually update from release to stable? I have to compile
> everything myself from the sources, right? As well as for any update?

The handbook has an entire section for this:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cutting-edge.html

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Nut problem and last message repeated in dmesg

2008-05-01 Thread Mel
On Thursday 01 May 2008 11:01:02 Olivier GARNIER wrote:

> > Can anyone tell my how to see the "last message" which is repeated
> > hundred
>
> times?

...

> Apr 30 23:16:33 myhost upsmon[1011]: Poll UPS [EMAIL PROTECTED] failed -
> Server disconnected
>
> May  1 08:57:44 myhost upsmon[1011]: Poll UPS [EMAIL PROTECTED] failed -
> Data stale
>
> May  1 08:58:19 myhost last message repeated 7 times

It's a bit bad choice of words, better would be "previous message repeated 7 
times". So the message that is repeated, is the message directly above it.

Sorry, can't help you with NUT, but it looks like server disconnects are not 
handled correctly and just generate hundreds of messages about stale data, 
rather then refreshing the data.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dmesg empty after shutdown -r

2008-05-01 Thread Mel
On Thursday 01 May 2008 01:58:46 A Hamilton-Wright wrote:

> After "shutdown -r now" and the subsequent reboot, I have
> logged in to my machine
>   FreeBSD qemg.org 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 10:35:36
> UTC 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC 
> amd64
>
> Everything seems to be running normally, except "dmesg" produces
> no output, and /var/run/dmesg.boot is zero bytes long.
>
> Does anyone have any ideas why this would ever occur?  Or even how
> it could occur?

dmesg -M doesn't show anything either?
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: BSDL C data structure library

2008-04-30 Thread Mel
On Wednesday 30 April 2008 18:19:27 Nathan Lay wrote:
> Hi list,
> As the subject suggests, is there a BSD licensed generalized C data
> structure library?  I noticed there is GDSL but I really don't want to
> use it because of the GPL.  If such a data structure library doesn't
> exist, I'd be extremely happy and willing to write one for the BSD
> community.

Well, partly. queue(3) shows you the linked lists/queues that are basically a 
preprocessor hack, but work quite well.
I personally dont know about anything in base, for the other structures 
mentioned on the GDSL homepage.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Install port without man page

2008-04-30 Thread Mel
On Thursday 24 April 2008 18:35:16 Ashant Chalasani wrote:
> Also part of the output of
> [EMAIL PROTECTED] /usr/ports/net/isc-dhcp3-server]# make install clean
> MANPREFIX=/tmp/ PREFIX=/mnt/
>
> is..
> .
> install -c -m 444 dhcpd /mnt//sbin
> chmod 755 /mnt//sbin/dhcpd
> install -c  dhcpd.man8   /mnt//man/man8/dhcpd.8
> install -c  dhcpd.conf.man5   /mnt//man/man5/dhcpd.conf.5
> install -c  dhcpd.leases.man5   /mnt//man/man5/dhcpd.leases.5
> ===> Installing rc.d startup script(s)
> ..
>
> ps:
> [EMAIL PROTECTED] uname -a FreeBSD fbsd70.kwest.wapsol.de 7.0-RELEASE
> FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008
> [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  i386
>
> On Thu, Apr 24, 2008 at 6:22 PM, Ashant Chalasani <[EMAIL PROTECTED]> wrote:
> > I've experimented with the isc-dhcp3-server port all 3 options -
> >  NO_INSTALL_MANPAGES, NOPORTDOCS and MANPREFIX and in every case there
> >  were manpages installed in /mnt/man/
> >
> >  [EMAIL PROTECTED] /mnt/man]# find . -name *dhcp*
> >  ./man5/dhcp-options.5
> >  ./man5/dhcp-eval.5
> >  ./man5/dhcpd.conf.5
> >  ./man5/dhcpd.leases.5
> >  ./man8/dhcpd.8
> >
> >  However, with
> >  [EMAIL PROTECTED] /usr/ports/net/isc-dhcp3-server]# make install clean
> >  MANPREFIX=/tmp/ PREFIX=/mnt/
> >
> >  we got...
> >
> >  ===>   Compressing manual pages for isc-dhcp3-server-3.0.5_2
> >  gzip: can't stat: /tmp//man/man1/omshell.1: No such file or directory
> >  gzip: can't stat: /tmp//man/man5/dhcpd.conf.5: No such file or directory
> >  gzip: can't stat: /tmp//man/man5/dhcpd.leases.5: No such file or
> > directory gzip: can't stat: /tmp//man/man5/dhcp-eval.5: No such file or
> > directory gzip: can't stat: /tmp//man/man5/dhcp-options.5: No such file
> > or directory gzip: can't stat: /tmp//man/man8/dhcpd.8: No such file or
> > directory

That's because MANPREFIX relies on an mtree being present, meaning 
man/man[1-9] directories should be below it.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Sidetracked: why gjournal over soft-updates (Was: Re: UFS2 Journaling implementation detail)

2008-04-19 Thread Mel
On Friday 18 April 2008 17:40:04 Ivan Voras wrote:

> >  5. "Some UFS implementations avoid journaling and
> >  instead implement soft updates: they order their
> >  writes in such a way that the on-disk file system is
> >  never inconsistent, or that the only inconsistency
> >  that can be created in the event of a crash is a
> >  storage leak. To recover from these leaks, the free
> >  space map is reconciled against a full walk of the
> >  file system at next mount." -
> >  (http://en.wikipedia.org/wiki/Journaling_file_system)
> >
> >  So the disadvantage of Soft Update is it is necessary
> >  to run fsck after reboot in event of a crash or power
> >  failure?
>
> Yes. The advantage is that practically, the data is as safe as with
> journalling.

I've been following this with interest, however it's still not clear to me, 
why I'd want a journaling filesystem, because:
1) If you have soft-updates the data is as safe as with journal
2) If you have soft-updates fsck will run in the background
3) Soft-updates don't require diskspace.

So...other then "journaling filesystems are cool", what's the real advantage?

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: disaster recovery: I can't login

2008-04-19 Thread Mel
On Saturday 19 April 2008 11:08:36 Dino Vliet wrote:
>Hi folks,
>Yesterday disaster struck after I wanted to remove Gnome and issued
>the following command:
> pkg_deinstall -R x11/gnome* -x evolution
> I went to sleep and when I woke up I rebooted and got the login
> screen iso my normal graphical GDM. I logged in as I normally do
>  and thought I was logged in because I saw a line saying I had
> mail, but then the line below that one said:
> /usr/local/bin/bash was not found.
> As root I coudn't login as well, so I sat a while looking at my
> screen and looking for options.

And at this point, you should reboot the machine in single user mode. You can 
then pick /bin/sh as the shell.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD 7.0 not reading rc.conf at startup

2008-04-19 Thread Mel
On Saturday 19 April 2008 02:07:09 Marco Beishuizen wrote:
> Hi,
>
> Since I upgraded to 7.0, it seams that my /etc/rc.conf isn't read
> anymore at startup. At least partly. Things that do not start anymore
> are:
> - oss
> - dbus
> - hald
> - avahi
>
> They are all gnome related. I have in my rc.conf: oss_enable="YES",
> hald_enable="YES", avahi_daemon_enable="YES and dbus_enable="YES". The
> gnome FAQ mentiones to put gnome_enable="YES" in the rc.conf but that
> doesn't work at all.
>
> Does anyone know how to make FreeBSD start these things automatically?

Anything useful come up when you put rc_debug="YES" in there?
Gutshot guess, the polkitd_enable is missing.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Where to have my .so files install?

2008-04-19 Thread Mel
On Saturday 19 April 2008 02:47:28 cpghost wrote:
> On Fri, 18 Apr 2008 20:24:09 -0400
>
> "Aryeh M. Friedman" <[EMAIL PROTECTED]> wrote:
> > Adam J Richardson wrote:
> > > Hi all.
> > >
> > > I'm writing a program which uses .so files as plugins. Now I need
> > > to decide where on the filesystem to install the plugins. I don't
> > > want to clutter the system locations like /lib and /usr/lib. Can
> > > anyone suggest a decent install location? Google doesn't help much
> > > with this.
> > >
> > > TiA,
> > > Adam J Richardson
> >
> > /usr/local/lib
>
> To expand a bit: don't put your own stuff in /lib or /usr/lib,
> since this is used by FreeBSD's userland itself. On FreeBSD,
> third party stuff goes into /usr/local/{lib,bin,etc,...}.
> See hier(7).

I actually put my own stuff in /opt, which follows /usr/local layout, because 
ports use /usr/local and I don't want to risk some port installing over or 
deleting (part of) my apps.
It's easy to set up:
mkdir /opt
mtree -ude -f /etc/mtree/BSD.local.dist -p /opt

Add /opt/bin, /opt/sbin to path in /etc/login.conf.
Add /opt/man to OPTIONAL_MANPATH in /etc/manpath.config
Add a MANPATH_MAP in there too.
Delete the users' .profile line that overrides the PATH variable (I really 
wish they'd take that outof the skel).
Add /opt/etc/rc.d to local_startup in /etc/rc.conf
Add /opt/lib to ldconfig_paths in /etc/rc.conf
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [SSHd] Limiting access from authorized IP's

2008-04-18 Thread Mel
On Friday 18 April 2008 20:53:37 Paul Schmehl wrote:
> --On Friday, April 18, 2008 20:30:53 +0200 Mel
>
> <[EMAIL PROTECTED]> wrote:
> > On Friday 18 April 2008 16:53:49 Paul Schmehl wrote:
> >> Firewalls are for preventing access to running services.  By definition,
> >> if you are running a service, you want it to be accessed.
> >
> > That's your assumption.
> > First of all, firewalls are for preventing unwanted connections, this is
> > not necessarily the same as access to running services.
> > Prime examples: cable modem and windows hosts broadcast spam on an ISP's
> > network, ping floods. User scans [1], vulnerability scans, open relay
> > scanners, spammers fall into running services category.
>
> They don't fall into the category of services that you authorized or
> approved of.  Keep in mind, we're talking about *hosts*, individual
> workstations if you will, not enterprises.

Well, I don't particularly like someone using my bandwidth to find out if I 
changed my mailserver config to such that I would now be an open relay, every 
10-20 minutes for weeks on end, so I want it to be over with at the TCP 
level, not at the daemon level.

Individual hosts are exactly the target for these scans. Same with the 
webserver, there are a great number of requests that seperate a scan from a 
legitimate user.

> >> For an individual host it makes a great deal more sense to only run
> >> those services you intend to use ***and keep them up to date and
> >> properly configured***.
> >
> > It is an illusion to think that the patch always comes before the
> > exposure.
>
> It's a worse illusion to believe the firewall is going to help.  If the
> service is exposed and compromised, the firewall wouldn't be blocking it
> anyway.

In a targetted scenario, this is correct. However, scans precede the attack 
and one example I gave with grok, you can limit the chances that the attacker 
gets the information he needs to exploit the bug he's looking for.
 
> Furthermore, if the host is compromised, the firewall is one of the 
> first things that will be disabled.

That would require root. So there's something else wrong in the chain, or it 
is one of those unfortunate services that run as root.

> > Secondly, pending the ammount of services you offer, this can be a full
> > task and especially for the "hobby" category, it is more time-efficient
> > to shut off any unauthorized traffic to begin with.
> > Say, some webapp allows uploading a file and executing it. It is then
> > quite easy to add a daemon to your server, that you have not configured.
> > With a firewall in default block mode, this daemon does not receive
> > connections. Even when the patch is released before exposure, you could
> > be, say sleeping and it can be too late. For some this is paranoia, for
> > others common sense.
>
> Again, the firewall is providing a false sense of security in exactly the
> scenario you propose.  Where do you think hacker's daemons are running
> these days?  **On the ports that you can't close on the firewall**.

I'm curious which those are.

>
> >> [4] # grep sshd /etc/defaults/rc.conf
> >> sshd_enable="NO"# Enable sshd
> >
> > No? Surely you're not using inetd?
>
> I haven't used inetd in years.  I'm not sure why you think I would be.

Well, since sshd_enable is set to no, I assumed inetd would be where you've 
started it.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [SSHd] Limiting access from authorized IP's

2008-04-18 Thread Mel
On Friday 18 April 2008 16:53:49 Paul Schmehl wrote:

> I see this statement all the time, and I wonder why.  What does a firewall
> on an individual host accomplish?

...

> Firewalls are for preventing access to running services.  By definition, if
> you are running a service, you want it to be accessed.

That's your assumption.
First of all, firewalls are for preventing unwanted connections, this is not 
necessarily the same as access to running services.
Prime examples: cable modem and windows hosts broadcast spam on an ISP's 
network, ping floods. User scans [1], vulnerability scans, open relay 
scanners, spammers fall into running services category.

> So firewalls are 
> self-defeating or completely useless at the host level **unless** you don't
> know what you're doing.

Or, when you do know what you're doing and don't see the firewall as a single 
entity but as a node in the security tree, where tools like grok come in as 
well.

> For an individual host it makes a great deal more sense to only run those
> services you intend to use ***and keep them up to date and properly
> configured***.

It is an illusion to think that the patch always comes before the exposure. 
Secondly, pending the ammount of services you offer, this can be a full task 
and especially for the "hobby" category, it is more time-efficient to shut 
off any unauthorized traffic to begin with.
Say, some webapp allows uploading a file and executing it. It is then quite 
easy to add a daemon to your server, that you have not configured. With a 
firewall in default block mode, this daemon does not receive connections. 
Even when the patch is released before exposure, you could be, say sleeping 
and it can be too late. For some this is paranoia, for others common sense.

> Firewalls are too often crutches for people that don't want to learn how to
> properly maintain a host.

Or save time, till it can be properly done. You're also assuming that you have 
full control over installed software. The "hobby" case you mention or a 
hosting environment this isn't always reality.

> # sockstat | grep cupsd
> root cupsd  6208  3  stream /var/run/cups.sock
> root cupsd  6208  4  udp4   *:631 *:*

Sure,
block in proto udp from any to any port 631

Works for nfs and rpc as well :)

> [4] # grep sshd /etc/defaults/rc.conf
> sshd_enable="NO"# Enable sshd

No? Surely you're not using inetd? sshd has tcp wrapper support built in, so 
you can set everything from /etc/ssh/sshd_config, including the port and 
using tcp wrappers. So in the event, inetd is vulnerable, sshd won't be.

[1]
# cat /etc/pf/grok-ssh.conf
file "/var/log/auth.log" {
type "ssh-illegal-user" {
match = "Invalid user %USERNAME% from %IP%";
threshold = 5;   # 5 hits ...
key = "%IP%";# from a single ip ...
interval = 60;   # in 1 minutes
reaction = "/sbin/pfctl -t scans -Tadd %IP%";
};

type "ssh-scan-possible" {
match = "Did not receive identification string from %IP%";
threshold = 3;
interval = 60;
reaction = "/sbin/pfctl -t scans -Tadd %IP%";
};
};

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: usb serial line speed limits

2008-04-18 Thread Mel
On Friday 18 April 2008 11:50:46 Per olof Ljungmark wrote:

> 'B1228800' undeclared (first use in this function)
> /usr/src/sys/modules/ubsa/../../dev/usb/ubsa.c:534: error: (Each
> undeclared identifier is reported only once
> /usr/src/sys/modules/ubsa/../../dev/usb/ubsa.c:534: error: for each
> function it appears in.)
> *** Error code 1
>
> Where can I dig out more info on how to proceed? Unfortunately my
> understanding of C and the rest is rather limited...


/usr/src/sys/sys/termios.h defines the baud rates. Next one up from 115200 is 
B230400. Max is B921600.


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [SSHd] Limiting access from authorized IP's

2008-04-18 Thread Mel
On Friday 18 April 2008 10:51:45 Gilles wrote:

> 1. I'd like to limit connections from the Net only from specific IP's.
> It seems like there are several ways to do it (/etc/hosts.allow,
> AllowHosts/AllowUsers, TCP-wrapper, port-knocking, etc.). Which would
> you recommend?

hosts.allow == TCP wrapper.
I recommend firewall, with hosts.allow backup. In the event the firewall gets 
disabled, hosts.allow takes over.
Note though, that with setups like this, you will have to call someone to add 
your IP to the lists, when your IP changes or you're on a location you didn't 
think you'd need access from.
I personally prefer sshd to be world accessible and block scans, since I 
consider being locked out of the machines a security risk as well...

> 2. Although it's up and running, I can't find SSHd in the list of
> installed apps:
>
> $ which sshd
>
> /usr/sbin/sshd

It's not a port, comes with the base system.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD-EN-08:01.libpthread

2008-04-17 Thread Mel
On Thursday 17 April 2008 14:59:10 ervin wrote:
> I get the following error while installing the patch below . any
> ideas how to solve?
>
> install: rename: /lib/[EMAIL PROTECTED] to /lib/libpthread.so.2: Operation not
> permitted *** Error code 71

Most likely, chflags noschg /lib/libpthread.so.2 then make install. If that 
doesn't work, report back with your kern.securelevel and whether /lib is 
mounted read only or not.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Check Out Your Winning.

2008-04-17 Thread Mel

@chat maybe? Or better @/dev/null? Bad enough some spam gets through.


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FTP server behind firewall?

2008-04-17 Thread Mel
On Thursday 17 April 2008 04:32:41 Gilles wrote:

> Actually, we don't necessarily need an FTP. Whatever solution to send
> files is fine, provided I can add this feature in a VB Classic client
> application.

Depends a bit on the max filesize and number of files. You can do a HTTP POST 
request, using a simple upload script (numerous examples of those to be found 
on the web). Of course, the traffic for that is larger since it will be 
base64 encoded. On the plus side, you don't need local user accounts on the 
ftp server, while still having full control over where the files end up.

This can get tedious if you have multiple small files, or filesizes in the 
order >100M.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Will USE_PYTHON accept my existing Python version?

2008-04-16 Thread Mel
On Wednesday 16 April 2008 22:11:51 Toomas Aas wrote:

> Sorry for asking such a stupid question. I tried to figure out the answer
> myself by reading /usr/ports/Mk/bsd.python.mk, but it's really over my
> head.

Nah, just read the comments.
>
> If I'm going to install a port that defines USE_PYTHON=yes in it's
> Makefile and I currently have python-2.4.3,1 installed, will the port
> accept my existing Python version or attempt to pull in Python 2.5?

# PYTHON_DEFAULT_VERSION
#   - Version of the default python binary in your ${PATH}, in
# the format "python2.5". Set this in your /etc/make.conf
# in case you want to use an older version as a default.
#     default: python2.5
#

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How can I access video tape under FBSD?

2008-04-16 Thread Mel
On Wednesday 16 April 2008 22:11:16 Roland Smith wrote:
> On Wed, Apr 16, 2008 at 08:28:30PM +0200, Frank Wißmann wrote:
> > Hi, folks!
> > I have bought for myself a taperecorder-to-usb-connector, which I wrote
> > in /etc/usbd.conf as following:
> > Device  "Video tape"
> > Product "0x2821"
> > Vendor  "0xeb1a"
>
> Neither the vendor nor the device are listed in
> /usr/src/sys/dev/usb/usbdevs. That does not bode well.

Quick scan on google reveils 0xeb1a is Pinnacle. You might ask on multimedia 
list if anyone knows this card. Could be it's accessible as 'tv tuner' or 
similar interface.

I suspect there's gonna be a few requests like this with harddisk space being 
cheap and old home movies hitting the expiring date.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Using flags with portinstall of apache?

2008-04-16 Thread Mel
On Wednesday 16 April 2008 17:19:04 Derek Ragona wrote:

> If you want SSL, you need to install that port first.

Err, why?
It's apache22, not the old days of 
apache13-ssl/apache13-modssl/apache13-foossl.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How do I use more process memory with mysqld

2008-04-16 Thread Mel
On Wednesday 16 April 2008 10:08:44 Vikash Badal wrote:
>  -Original Message-
>
> > From: Mel [mailto:[EMAIL PROTECTED]
> > Sent: 15 April 2008 07:52 PM
> > To: freebsd-questions@freebsd.org
> > Cc: Vikash Badal
> > Subject: Re: How do I use more process memory with mysqld
> >
> > On Tuesday 15 April 2008 17:07:14 Vikash Badal wrote:
> > >   datasize 33554432 kB
> >
> > That says 3G.
> >
> > > 48647 mysql  35  200   963M   938M kserel 0 718.9H
> >
> > 22.17% mysqld
> >
> > Your my.cnf is missing. Are you sure you're allowing mysql to
> > go beyong 1G?
>
> Sorry about that ... Missed that one.
>
> My.cnf:
> ~~
> # The MySQL server
> [mysqld]
> key_buffer = 768M
> max_allowed_packet = 2M
> table_cache = 1024
> sort_buffer_size = 4M
> read_buffer_size = 4M
> read_rnd_buffer_size = 16M
> myisam_sort_buffer_size = 128M
> thread_cache_size = 8
> query_cache_size = 64M
> max_connections = 200

key_buffer_size + (read_buffer_size + sort_buffer_size) * max_connections = 
max_mem_usage:

768 + (4 + 4) * 200 = 2368

From the 963 shown in top, I'm guessing you're around 22 concurrent 
connections. The key buffer is allocated on start up, read/sort buffer on per 
connection base. So if you want it to use more memory, put more in the key 
buffer and make sure to leave 1.6G for your max connections.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: determining what's in the base system

2008-04-15 Thread Mel
On Wednesday 16 April 2008 01:14:50 Chad Perrin wrote:

> Assume you have a FreeBSD system installed that has been running for at
> least a year, with a bunch of graphical desktop and productivity software
> installed, and have both installed and uninstalled a lot of software over
> that time.  Now imagine that you want to know whether a given utility was
> something that came with the base system or was installed by some port or
> package later on.  What's the easiest way to do that (preferably without
> installing the FreeBSD base system on a computer and checking whether the
> utility is present)?


If you didn't change LOCALBASE/PREFIX during installation, anything 
below /usr/local belongs to ports. Only exception would be kernel modules 
that need to be loaded before /usr is mounted (like graphic card drivers).

See hier(7).

Also, grep -v '^@' /var/db/pkg/*/+CONTENTS lists all files installed by ports.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to switch scheduler on 7.0?

2008-04-15 Thread Mel
On Tuesday 15 April 2008 21:59:46 Daniel Tourde wrote:

> I would like to switch scheduler on my FreeBSD 7.0 box but I don't know how
> to do that. The scheduler by default has terrible performances under
> KDE/Gnome and I would like to test the new one.

What made you believe it is the scheduler?

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: overnight upgrade interrupted by questions

2008-04-15 Thread Mel
On Tuesday 15 April 2008 22:10:41 Chris Whitehouse wrote:

> Do something like [sorry not exact syntax as I don't have access to a
> freebsd machine]:
> foreach i (`cat portlist`)
> foreach? cd /usr/ports/$i && make config

You should 'make config-conditional' to save yourself some work. make config 
always shows you the dialogue, while config-conditional checks to see if the 
variablenames have changed and if not, just moves on using what you already 
have in /var/db/ports.

These are the ports that will bite you:
# find /usr/ports -name 'configure' -path '*/scripts/*' \
-exec grep -l '/usr/bin/dialog' {} +
/usr/ports/emulators/vmware3/scripts/configure
/usr/ports/japanese/typist/scripts/configure
/usr/ports/misc/sonytv/scripts/configure
/usr/ports/print/apsfilter/scripts/configure
/usr/ports/print/ghostscript-gnu/scripts/configure
/usr/ports/print/ghostscript-gpl/scripts/configure

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: strange file-permission problem

2008-04-15 Thread Mel
On Tuesday 15 April 2008 20:55:01 Mikhail Teterin wrote:

> I've encountered a problem, which went ahead most of the things I know
> about Unix file permissions:
>
>  [EMAIL PROTECTED]:run/dovecot/login (10) ls -l ssl-parameters.dat
>  -rw-r-  2 root  dovecot  230 Apr 13 00:33 ssl-parameters.dat
>  [EMAIL PROTECTED]:run/dovecot/login (11) groups
>  dovecot
>  [EMAIL PROTECTED]:run/dovecot/login (12) id
>  uid=143(dovecot) gid=9005(dovecot) groups=9005(dovecot)
>  [EMAIL PROTECTED]:run/dovecot/login (13) cat ssl-parameters.dat > /dev/null
>  cat: ssl-parameters.dat: Permission denied
>  [EMAIL PROTECTED]:run/dovecot/login (14) ls -ld
>  drwxr-x---  2 root  dovecot  512 Apr 15 14:44 .
>
> I had to set the mode of ssl-parameters.dat to 644 to allow dovecot-users
> to login, but it should not be needed -- the file should be readable by
> members of the group "dovecot" (such as user "dovecot").

Since the default GID for dovecot is 143, I suspect you have two dovecot 
groups. ls -ln should show you the numeric group id.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Install port without man page

2008-04-15 Thread Mel
On Tuesday 15 April 2008 18:07:42 Ashant Chalasani wrote:

> Is there a way to install a port without the man-pages.  I'm trying to
> install a dhcp server onto a Tinybsd image and end up buying myself a
> bunch of files in /man, as seen at
> http://code.google.com/p/tinybsdap/wiki/InstallingPorts (hope the
> linking is not minded).

Read what you got in there:
Instead of using FORCE_PKG_REGISTER which will alter the currently installed 
ports on the build system and change their prefix so they can't be 
uninstalled properly with pkg_delete, you can set PKG_DBDIR to a different 
directory.
For example, all 'trash' that's part of the image build process, but not going 
to be in the image goes in /build. Image on /mnt, you'd do:

mkdir -p /build/var/db/pkg
mkdir /build/local
# saves you some work create all 'man*' directories and should you decide more 
# directories should be excluded, then you can do so
mtree -ude -f /etc/mtree/BSD.local.dist -p /build/local
mkdir /mnt/man
mount -t nullfs /build/local/man /mnt/man
cd /usr/ports/shells/bash
make PKG_DBDIR=/var/db/pkg PREFIX=/mnt install
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: overnight upgrade interrupted by questions

2008-04-15 Thread Mel
On Tuesday 15 April 2008 15:26:42 Edward Ruggeri wrote:
> A lot of people would reply that they'd like to configure the ports
> themselves before launching the installation, leading people to
> suggest scripts such as:
>
> #!/bin/sh
> plist=`pkg_version -ovl'<' |awk '{ print $1 }'`
> for porg in $plist ; do
> cd  /usr/ports/${porg} && make config-recursive
> done

Sorry to disappoint you, but that wont work for two reasons:
1) make config-recursive is flawed by design, because it makes a dependency 
list based on current settings and if you alter dependencies during your 
recursive configuring, it will not update the list.

2) If you hit an interactive configure (not config, configure) target, then 
you will still end up with a dialog. Prime example: print/ghostscript-gpl.

If you wanted to script the first case, you'd do the following in every origin 
that needs updating:
#!/bin/sh

VISITED=

config_port() {
local ldeps rdeps bdeps
ldeps=`make -V LIB_DEPENDS`
rdeps=`make -V RUN_DEPENDS`
bdeps=`make -V BUILD_DEPENDS`

make config-conditional
for dep in ${ldeps} ${rdeps} ${bdeps}; do
dir=${dep##*:}
case ${VISITED} in
*" ${dir}"*)
;;
*)
echo "---> $dir"
VISITED="${VISITED} ${dir}"
    cd ${dir}
config_port
esac
done
}

config_port

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How do I use more process memory with mysqld

2008-04-15 Thread Mel
On Tuesday 15 April 2008 17:07:14 Vikash Badal wrote:

>   datasize 33554432 kB

That says 3G.


> 48647 mysql  35  200   963M   938M kserel 0 718.9H 22.17% mysqld

Your my.cnf is missing. Are you sure you're allowing mysql to go beyong 1G?


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Install port without man page

2008-04-15 Thread Mel
On Tuesday 15 April 2008 19:32:03 Matthew Seaman wrote:
> Ashant Chalasani wrote:
> > Hello All,
> >
> > Is there a way to install a port without the man-pages.  I'm trying to
> > install a dhcp server onto a Tinybsd image and end up buying myself a
> > bunch of files in /man, as seen at
> > http://code.google.com/p/tinybsdap/wiki/InstallingPorts (hope the
> > linking is not minded).
>
> Ports should honour the NOPORTDOCS make variable and not install any
> documentation (including man pages).

I don't see evidence of that in /usr/ports/Mk/bsd.port.mk:
Meaning, I don't see any location where MAN# variables are merged with 
PORTDOCS or where NOPORTDOCS interacts with MAN#.

As far as I can tell, if MAN# variables are set by the port, then they are 
compressed/uncompressed based on NOMANCOMPRESS. If imake is used to install 
manpages, then NO_INSTALL_MANPAGES is respected, because the port knows 
there's a fixed target to install manpages when using imake. Gmake/autotools 
ports include the man page install in the main install target in between 10 
or 20 fake targets to support the autotools experience and making it next to 
impossible to seperate installstages.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Install port without man page

2008-04-15 Thread Mel
On Tuesday 15 April 2008 18:07:42 Ashant Chalasani wrote:

> Is there a way to install a port without the man-pages.  I'm trying to
> install a dhcp server onto a Tinybsd image and end up buying myself a
> bunch of files in /man, as seen at
> http://code.google.com/p/tinybsdap/wiki/InstallingPorts (hope the
> linking is not minded).

If the port controls installing the manpages, then you can set 
NO_INSTALL_MANPAGES in /etc/make.conf.
If they're installed by the underlying software's install script, then you 
can't control that from the port.
You can of course, nullfs mount the ${LOCALBASE}/man directory on the image 
build machine to a different location and then unmount it from under the 
image once all ports are installed.
Linking to /dev/null as suggested will likely screw with install targets.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: glXIsDirect failed

2008-04-15 Thread Mel
On Tuesday 15 April 2008 18:57:45 Alain G. Fabry wrote:

> xorg log indicates GLX and DRI to be loaded
> 
> (II) LoadModule: "glx"
> (II) Loading /usr/local/lib/xorg/modules/extensions//libglx.so
> (II) Module glx: vendor="X.Org Foundation"
> compiled for 1.4.0, module version = 1.0.0
> ABI class: X.Org Server Extension, version 0.3

That's software GL. You need a driver for your video card and you don't 
mention which one you have.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [?OT?] strndup exists in FreeBSD?

2008-04-14 Thread Mel
On Tuesday 15 April 2008 01:06:24 Giorgos Keramidas wrote:
> On Mon, 14 Apr 2008 15:43:24 -0700, "Steve Franks" <[EMAIL PROTECTED]> 
wrote:
> > I'm getting an undefined reference to strndup, so clearly there's a
> > header somewhere with it - doesn't seem to be in my default libc,
> > however on 7.0-amd64?
>
> I don't see an strndup() function in our libc.
>
> [EMAIL PROTECTED]:/usr/src/lib/libc/string$ grep ^strdup *.c
> strdup.c:strdup(str)
> [EMAIL PROTECTED]:/usr/src/lib/libc/string$ grep ^strndup *.c
> [EMAIL PROTECTED]:/usr/src/lib/libc/string$
>
> While it seems like a cool function name, what's the point of having it?
> If you know how much you want to copy, it's trivial to allocate a buffer
> large enough and strlcpy() into it.  If you don't know how much you want
> to copy, then strdup() is ok anyway :)

It can be convenient for trickery:
char file[MAXPATHLEN];
char *dir;
...
dir = strndup(file, (strrchr(file, '/')-file)));

Or space optimization:
char *p, *path;
path = malloc(MAXPATHLEN);
(void)strlcpy(path, argv[i], MAXPATHLEN);
p = strndup(path, strlen(path));
free(path);

But, personally I prefer taking the long route or wasting a few bytes over 
dual allocations.


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [?OT?] strndup exists in FreeBSD?

2008-04-14 Thread Mel
On Tuesday 15 April 2008 00:43:24 Steve Franks wrote:
> I'm getting an undefined reference to strndup, so clearly there's a
> header somewhere with it - doesn't seem to be in my default libc,
> however on 7.0-amd64?


 as BUF_strndup.

And no, there's no strndup.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Limiting apache's upload speed?

2008-04-14 Thread Mel
On Tuesday 15 April 2008 00:15:45 David Kaye wrote:

> Just as a side note for anyone S'ing the FA's, when I ran:
>
> #pkg_add -r mod_cband
>
> it pulled down a version of mod_cband compiled for Apache 2.0, with Apache
> 2.0 therefore being a dependancy, it was pulled down as well. After I
> removed 2.0, I needed to reinstall 2.2 and make mod_cband from ports. None
> of this was a problem, I just thought it should be on the list somewhere.

If you pull packages from FreeBSD servers, then you should expect them to use 
default options (more to the point, the options defined by PACKAGE_BUILDING 
if the port specifies it) and default dependencies.
The default APACHE_PORT is www/apache20. If you use www/apache22, then 
you 'cannot' use those packages.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: advanced programming unix environment

2008-04-14 Thread Mel
On Monday 14 April 2008 22:02:22 Brother Seamus wrote:
> Hi Mel,
>
> Thanks for your reply - very insightful - i have beendelving into the c
> library files - which is after all why i am readingthis book, though still
> at the beginning 8).
>
> On the pracct.c source file I have found it sufficient just to change line
> 31
>
> from
>   struct acctacdata;
> to
>  struct acctv1acdata;

I changed it like this, to be compatible with other OS's:
--- proc/pracct.c~  2005-05-24 03:59:41.0 -0800
+++ proc/pracct.c   2008-04-14 12:53:41.0 -0800
@@ -13,6 +13,12 @@
 #define AXSIG 0
 #endif

+#ifdef HAVE_ACCTV1
+typedef struct acctv1 acct_t;
+#else
+typedef struct acct acct_t;
+#endif
+
 static unsigned long
 compt2ulong(comp_t comptime)   /* convert comp_t to unsigned long */
 {
@@ -28,7 +34,7 @@
 int
 main(int argc, char *argv[])
 {
-   struct acct acdata;
+   acct_t  acdata;
FILE*fp;

if (argc != 2)

And added HAVE_ACCTV1 to CFLAGS in Make.defines.freebsd :)

>
> this leaves me with only 1 error which I have side stepped but not fixed.
>
>
> error: +
>
> bsdexit2.c: In function 'thr_fn2';
> bsdexit2.c:31: Warning format '%d' expects type 'int', but argument 2 has
> type 'pthread_t' +
>
> line 31of threads/bsdexit2.c reads:
>
> printf("thread 2: ID is %d\n", pthread_self
>
> which I have commented this line and Make finishes building.
>
> however which "%   ?" operater would I use to display pthread_self.
> In the c library pthread.h it says it is of "pthread_t" type.

Yes, it's a structure, so it's not an integer. pthread_self() returns the 
structure, not the thread id. The thread id is burried in the structure and 
you shouldn't make any assumptions about it's size or type, since it's opaque 
to you.

However, you can cast it to int and get away with it ;)
So make it:
printf("thread 2: ID is %d\n", (int)pthread_self());

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Defer Checking on USB Drive

2008-04-14 Thread Mel
On Monday 14 April 2008 21:45:32 Andy Christianson wrote:

> Is there a way to have the file system
> check for the partition that resides on the USB drive follow this same
> behavior?

man tunefs, specifically, it needs to be ufs2 partitioned. Good telltale if it 
is ufs2 is the precense of a .snap directory in the root of the partition.
fsck uses this to make a snapshot of the partition so that it can defer the 
fsck.
And yes, could be your pass flag in fstab is set to 1, rather then 2.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: advanced programming unix environment

2008-04-14 Thread Mel
On Monday 14 April 2008 18:48:58 Brother Seamus wrote:

> I am trying to build the neccesary files for the stevens/rago APUE.2e book
> on FreeBSD 7.0



> I get the following error:
> +
> pracct.c  ../lib/libapue.a
> pracct.c: In function 'main':
> pracct.c:31: error: storage size of 'acdata' isn't known
> pracct.c:31: warning: unused variable 'acdata'

The legacy struct acct has been renamed to acctv1 and a new one is named 
acctv2.
If you add:
typedef struct acctv1 acct_t;
After the #include 

then change the type of acdata to 'acct_t', you'll probably have solved it. 
But depends a bit on the rest of the library.


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Interrupt storm with 7.0

2008-04-14 Thread Mel
On Monday 14 April 2008 11:36:43 Jan Henrik Sylvester wrote:
> lysergius2001 wrote:
> > Recently installed 7.0-RELEASE on an i386 as upgrade from 6.3-RELEASE and
> > now have a continuous interrupt storm on IRQ17.  This is a shared IRQ for
> > ath0 and echi0.  Never saw this on 6.3??? Any suggestions?
>
> Just another contribution to the collection of interrupt storms maybe
> related to ath:
>
> Whenever I plug in my ath1 on cardbus0, I get exactly one storm:
> interrupt storm detected on "irq10:"; throttling interrupt source
>
> ath1:  mem 0xd022-0xd022 irq 10 at device 0.0 on
> cardbus0
>
> Anyhow, I am not sure, if it is really ath causing this. During boot, I
> get one storm, too, that is on irq 10, but my ath0 on pci2 is on irq 9:
>
> ath0:  mem 0xd020-0xd020 irq 9 at device 4.0 on pci2
> [...]
> interrupt storm detected on "irq10:"; throttling interrupt source
>
> I do not get interrupt storms on irq 9 and I have already had that storm
> before I replaced my minipci iwi0 with ath0:
>
> http://lists.freebsd.org/pipermail/freebsd-current/2007-October/078684.html
>
> The reply to that posting was that it is probably related to USB:
>
> http://lists.freebsd.org/pipermail/freebsd-current/2007-October/078687.html
>
> Moreover, I have a bunch of other devices sharing irq 10:
>
> vgapci0:  port 0x3000-0x30ff mem
> 0xd800-0xdfff,0xd010-0xd010 irq 10 at device 0.0 on pci1
> uhci0:  port 0x1800-0x181f
> irq 10 at device 29.0 on pci0
> uhci2:  port 0x1840-0x185f
> irq 10 at device 29.2 on pci0
> ehci0:  mem
> 0xd000-0xd3ff irq 10 at device 29.7 on pci0
> fwohci0:  mem
> 0xd0218000-0xd02187ff,0xd021-0xd0213fff irq 10 at device 7.0 on pci2
> pcm0:  port 0x1c00-0x1cff,0x18c0-0x18ff mem
> 0xdc00-0xddff,0xd800-0xd8ff irq 10 at device 31.5 on pci0
>
> On our problematic irq, we both have got echi0. Thus, the second storm I
> get upon attaching ath1 might not be directly caused by ath.
>
> No suggestions, just more data.

I dug through daily security runs and \o/ the machine got rebooted one time, 
so I got a dmesg:
+uhci0:  port 0xdce0-0xdcff irq 11 at 
device 7.2 on pci0
+uhci0: [GIANT-LOCKED]
+ath0:  mem 0x8800-0x8800 irq 11 at device 0.0 on 
cardbus0
+ath0: Ethernet address: 00:11:95:69:1d:eb
+ath0: mac 7.9 phy 4.5 radio 5.6

Not ehci, but uhci. Still...

I can't find if it had cpufreq. The kernel config I still have and it had it 
compiled in, but it doesn't show in the dmesg. Only power/sleep button, lid 
switch and thermal zone.

A typical storm session looks like this:
+ath0: link state changed to DOWN
+interrupt storm detected on "irq11:"; throttling interrupt source
+interrupt storm detected on "irq11:"; throttling interrupt source
+interrupt storm detected on "irq11:"; throttling interrupt source
+interrupt storm detected on "irq11:"; throttling interrupt source
+interrupt storm detected on "irq11:"; throttling interrupt source
+interrupt storm detected on "irq11:"; throttling interrupt source
+interrupt storm detected on "irq11:"; throttling interrupt source
+interrupt storm detected on "irq11:"; throttling interrupt source
+interrupt storm detected on "irq11:"; throttling interrupt source
+interrupt storm detected on "irq11:"; throttling interrupt source
+interrupt storm detected on "irq11:"; throttling interrupt source
+ath0: link state changed to UP

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: DNS server Problem

2008-04-14 Thread Mel
On Monday 14 April 2008 11:02:43 Ruel Luchavez wrote:

> I have BIND DNS Server in my freebsd, i keep on searching in google on how
> to restart it?
> is there a command to restart it like the squid and dhcp? or there is no
> command for it?

If you start reading here:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/system-administration.html

It will soon answer your question and you will pick up the basics of FreeBSD 
administration very quickly.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Interrupt storm with 7.0

2008-04-13 Thread Mel
On Sunday 13 April 2008 14:41:51 lysergius2001 wrote:

> Recently installed 7.0-RELEASE on an i386 as upgrade from 6.3-RELEASE and
> now have a continuous interrupt storm on IRQ17.  This is a shared IRQ for
> ath0 and echi0.  Never saw this on 6.3??? Any suggestions?

I've seen something similar on an old dell laptop, on 6.3. It would cause an 
interrupt storm when it got disconnected by the hostap for beacon misses. ath 
driver as well, not sure what it shared it with.
Unfortunately, I never got around to reporting it and the machine has been 
destroyed by little mongrols, I mean the sweet boys.

I know this doesn't help you, but at least you know that there is 'something' 
with the ath driver that can cause interrupt storms.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Pkg_info corrupt for some packages

2008-04-13 Thread Mel
On Sunday 13 April 2008 11:41:19 Aijaz Baig wrote:
> Hi,
>
> Well...I tried to cut and paste the command as is by mel (though It would
> have been better if you explained what that cryptic looking command
> actually meant) and I got the followinfg output:
>
> 'grep: /var/db/pkg/xorg-server-1.4_4,1/+CONTENTS: No such file or directory

Well, that explaines it right there. It wasn't installed properly, because 
every installed port should have a +CONTENTS file.
You can grab the files from 'pkgdb.db' like Andrew suggested, but I personally 
wouldn't trust those if portupgrade was the one that did this in the first 
place.
This is where daily backups rock :).

If your /usr/ports/INDEX-6 (or -7) is in sync with your installed packages, 
then maybe the following script will work. It worked for me testing it, but I 
can't guarentee it will work in all cases.

If you're on FreeBSD 6, change INDEXFILE to /usr/ports/INDEX-6. Rest should 
work without changes.

#!/bin/sh


INDEXFILE='/usr/ports/INDEX-7'
for dir in /var/db/pkg/*; do
if test ! -e ${dir}/+CONTENTS -a -d ${dir}; then
pkgname=${dir##*pkg/}
echo "Restoring ${pkgname}"
IDX=$(grep "^${pkgname}|" ${INDEXFILE} 2>/dev/null)
if test -z "${IDX}"; then
echo "Failed: cannot find ${pkgname} in ${INDEXFILE}"
else
_origin=${IDX#*|}
origin=${_origin%%|*}
echo "---> ${origin}"
cd ${origin}
mv ${dir} /tmp/
make -DFORCE_PKG_REGISTER generate-plist fake-pkg
for file in /tmp/${pkgname}/*; do
f=${file##*/}
if test ! -f ${dir}/${f}; then
echo "--> Restoring ${pkgname}/${f}"
mv ${file} ${dir}/
fi
done
fi
fi
done


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: 6.2 -> 7.0 now mlock(2) fails

2008-04-12 Thread Mel
On Saturday 12 April 2008 14:51:16 Dieter wrote:
> > > I never saw mlock(2) fail in 6.2 but with 7.0 I sometimes
> > > get mlock(2) failed: Resource temporarily unavailable.
> >
> > That's error EAGAIN:
> >
> >  [EAGAIN]   Locking the indicated range would exceed
> > either the system or per-process limit
> > for locked memory.
> >
> > You are hitting either the `vm.max_wired' limit, or the per-process
> > RLIMIT_MEMLOCK limit.
> >
> > > What changed and how do I fix it?
> >
> > It would be nice if you could run a test program that prints the value of
> > vm.max_wired and RLIMIT_MEMLOCK on 6.2 and then on 7.0.  As an extra
> > test, it may be worth printing these values in the log of your
> > application when mlock(2) fails.
>
> vm.max_wired looks like a sysctl, but sysctl doesn't know about it.
>
> sysctl: unknown oid 'vm.max_wired'
>
> sysctl -a | grep -i wire | grep -vi firewire
> vm.stats.vm.v_wire_count: 89046
>
> /usr/include/sys/resource.h:#define RLIMIT_MEMLOCK  6   /*
> locked-in-memory address space */
>
> It doesn't always fail, just sometimes.  It is trying to lock 172490752
> bytes. There can be two processes wanting to do this at once.  Seems to be
> the 2nd one that sometimes fails.

If these are your own programs, you should build in the following logic:

struct rlimit rl;

if( -1 == getrlimit(RLMIT_MEMLOCK, &rlp) )
{
/* cannot even get the limit, should probably bail here */
}
if( rlp.rlim_cur < sizeof(i_want_to_lock_this) )
{
/* bail out or try increasing the limit then bail */
}

As for the sysctl, I'm pretty sure it's a loader tunable, like the more known 
kern.maxdsiz.

On a 7-stable and a 6.2-'stable' machine, I get exactly the same values:
# cat t.c
#include 
#include 
#include 
#include 
#include 
#include 

int main(int unused_argc, char **unused_argv)
{
struct rlimit rl;

if( -1 == getrlimit(RLIMIT_MEMLOCK, &rl) )
err(EX_OSERR, "Cannot get limit");

printf("memlock.current=%u\n", rl.rlim_cur);
printf("memlock.max=%u\n", rl.rlim_max);

return EX_OK;
}

# gcc -o t t.c

# ./t
memlock.current=4294967295
memlock.max=4294967295

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: port gnome-applets won't upgrade properly

2008-04-12 Thread Mel
On Saturday 12 April 2008 21:44:23 Dino Vliet wrote:
> Folks,
>
> I've tried to upgrade my ports and get the following error from
> gnome-applets everytime I do a portupgrade gnome-applets:
>
> ain.c:42: error: structure has no member named `gconf'
> main.c:46: error: structure has no member named `gweather_pref'
> main.c:46: error: structure has no member named `gconf'
> gmake[2]: *** [main.o] Error 1
> gmake[2]: Leaving directory
> `/usr/ports/x11/gnome-applets/work/gnome-applets-2.22.1/gweather' gmake[1]:
> *** [install-recursive] Error 1
> gmake[1]: Leaving directory
> `/usr/ports/x11/gnome-applets/work/gnome-applets-2.22.1/gweather' gmake:
> *** [install-recursive] Error 1

less -p20080323 /usr/ports/UPDATING
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: PHP5 install error on FreeBSD 7.0

2008-04-12 Thread Mel
On Saturday 12 April 2008 21:29:18 Joseph Simmons wrote:
> cougar# pwd
> /usr/ports/www/apache22/work/httpd-2.2.6
> cougar# make -n install-htdocs
> echo Installing HTML documents ;
> /usr/ports/www/apache22/work/httpd-2.2.6/build/mkdir.sh
> /usr/local/www/apache22/data ;  test -d
> /usr/ports/www/apache22/work/httpd-2.2.6/docs/docroot && (cd
> /usr/ports/www/apache22/work/httpd-2.2.6/docs/docroot && cp -rp
> index.html ) &&  ( [ ! -f /usr/local/www/apache22/data/index.html ] &&
> cp -p /index.html /usr/local/www/apache22/data/index.html)

Apparently they fixed that in 2.2.8, because my version ends in ||true which 
makes any failure not fatal.
Part of the problem is that htdocsdir is not set, so cp -p /index.html fails, 
even though config.log shows the value, it's not translated to the Makefile.

Hmm, the quick fix would be to run:
cd /usr/ports/www/apache22/work/httpd-2.2.6 && make -k install

The longer but probably better fix is to update your ports tree, using csup or 
portsnap. In that case the handbook is your friend:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ports-using.html

One reason it is the better fix, is that 2.2.8 fixes a few security issues:
http://www.apache.org/dist/httpd/CHANGES_2.2.8

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: PHP5 install error on FreeBSD 7.0

2008-04-12 Thread Mel
On Saturday 12 April 2008 20:59:48 Joseph Simmons wrote:
> /usr/local/include/apache22 does not exist.
> Apache seems to work fine, though, when I install apache from
> /usr/ports/www/apache22, at the end, I get some errors:
> Installing configuration files
> Installing HTML documents
> *** Error code 1
>
> Stop in /usr/ports/www/apache22/work/httpd-2.2.6.
> *** Error code 1
>
> Stop in /usr/ports/www/apache22/work/httpd-2.2.6.
> *** Error code 1
>
> Stop in /usr/ports/www/apache22.
> *** Error code 1
>
> Stop in /usr/ports/www/apache22.
>
>
>
> I don't know where to look to find more information about the errors.

That happens in the install from apache itself.

Could you do the following:
cd /usr/ports/www/apache22/work/httpd-2.2.6
make -n install-htdocs

And show the output here.

> Is there a place I can get the header files from, would you know why
> they are missing?

They're missing because the install failed before they got installed.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: PHP5 install error on FreeBSD 7.0

2008-04-12 Thread Mel
On Saturday 12 April 2008 19:59:12 Joseph Simmons wrote:
> I installed apache from the port collection so wherever the default
> location is httpd.conf is in /usr/local/etc/apache22, the log
> files are in /var/log and at least some of the files that are used for
> loading modules are in /usr/local/libexec/apache22. I'm not sure where
> the other stuff is.
> I've not heard of PREFIX.

Well, the headers are missing. Does the directory:
/usr/local/include/apache22
exist?

If it doesn't, something went wrong with the apache install or files got 
deleted afterwards somehow.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: PHP5 install error on FreeBSD 7.0

2008-04-12 Thread Mel
On Saturday 12 April 2008 02:13:40 Joseph Simmons wrote:

> I have Apache 2.2.6 installed and running, I've tried to install PHP
> several times, below is what the terminal gives me when I try to
> install PHP5 from the port collection.
> Thanks
>
>
> cougar# pwd
> /usr/ports/lang/php5
> cougar# make install
> ===>  Building for php5-5.2.5
> "Makefile", line 588: warning: duplicate script for target
> "main/internal_functions.lo" ignored
> /bin/sh /usr/ports/lang/php5/work/php-5.2.5/libtool
> --preserve-dup-deps --mode=compile cc  -DHAVE_MYSQL_H
> -I/usr/local/include/apache22   -I/usr/local/include/apr-1
> -I/usr/local/include/apr-1 -I/usr/local/include
> -I/usr/local/include/mysql -Isapi/apache2handler/
> -I/usr/ports/lang/php5/work/php-5.2.5/sapi/apache2handler/
> -DPHP_ATOM_INC -I/usr/ports/lang/php5/work/php-5.2.5/include
> -I/usr/ports/lang/php5/work/php-5.2.5/main
> -I/usr/ports/lang/php5/work/php-5.2.5 -I/usr/local/include/libxml2
> -I/usr/local/include
> -I/usr/ports/lang/php5/work/php-5.2.5/ext/date/lib
> -I/usr/ports/lang/php5/work/php-5.2.5/TSRM
> -I/usr/ports/lang/php5/work/php-5.2.5/Zend-pipe -g -O0 -Wall
> -prefer-non-pic -c
> /usr/ports/lang/php5/work/php-5.2.5/sapi/apache2handler/mod_php5.c -o
> sapi/apache2handler/mod_php5.lo
>  cc -DHAVE_MYSQL_H -I/usr/local/include/apache22
> -I/usr/local/include/apr-1 -I/usr/local/include/apr-1
> -I/usr/local/include -I/usr/local/include/mysql -Isapi/apache2handler/
> -I/usr/ports/lang/php5/work/php-5.2.5/sapi/apache2handler/
> -DPHP_ATOM_INC -I/usr/ports/lang/php5/work/php-5.2.5/include
> -I/usr/ports/lang/php5/work/php-5.2.5/main
> -I/usr/ports/lang/php5/work/php-5.2.5 -I/usr/local/include/libxml2
> -I/usr/local/include
> -I/usr/ports/lang/php5/work/php-5.2.5/ext/date/lib
> -I/usr/ports/lang/php5/work/php-5.2.5/TSRM
> -I/usr/ports/lang/php5/work/php-5.2.5/Zend -pipe -g -O0 -Wall -c
> /usr/ports/lang/php5/work/php-5.2.5/sapi/apache2handler/mod_php5.c -o
> sapi/apache2handler/.libs/mod_php5.o
> In file included from
> /usr/ports/lang/php5/work/php-5.2.5/sapi/apache2handler/mod_php5.c:26:
> /usr/ports/lang/php5/work/php-5.2.5/sapi/apache2handler/php_apache.h:24:19:
> error: httpd.h: No such file or directory

Where is your apache installed? Did you by any chance alter the PREFIX?
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: kdebase3 installation failure

2008-04-12 Thread Mel
On Saturday 12 April 2008 16:47:04 Alain G. Fabry wrote:

> configure: error: `CFLAGS' has changed since the previous run:
> configure:   former value:  -O2 -pipe  -fno-strict-aliasing
> configure:   current value: -O2 -pipe -fno-strict-aliasing
> configure: error: changes in the environment can compromise the build

There's a reason many sane people go insane when dealing with GNU autotools. 
Apparently it trips over an extra space in CFLAGS, which has no functional 
impact on the environment at all. So, find where that extra space comes from 
and where it disappears and you'll have found the problem.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Invoking ldconfig without arguments wipes all hints and makes me very sad

2008-04-11 Thread Mel
On Friday 11 April 2008 16:42:57 Shelby Cain wrote:
> On Fri, 2008-04-11 at 00:35 +0200, Mel wrote:
> > It translates to "be verbose about restoring factory settings", because
> > without arguments it will restore the built-in set.
>
> Why does "factory settings" not include scanning the built-in system
> library path /usr/lib?  From the man page, it would seem that if I truly
> wanted to remove all runtime information I'd want to run something along
> the lines of ldconfig -s.  Am I misreading something?

It should, otherwise it's a bug in either the manpage or ldconfig.

> Also, under what circumstances does -v actually do something?  I can't
> seem to find a case where -v actually alters the output of ldconfig.

When it does something. For example, if your cache contains libfoo.so.1 and 
you installed /usr/local/lib/libfoo.so.2, then ldconfig -vm /usr/local/lib 
will print:
Updating libfoo.so.1.0 to /usr/local/lib/libfoo.so.2

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Pkg_info corrupt for some packages

2008-04-11 Thread Mel
On Friday 11 April 2008 18:28:31 Andrew Pantyukhin wrote:
> On Fri, Apr 11, 2008 at 04:32:32PM +0200, Aijaz Baig wrote:
> > I was trying to find a way to list all the packages on my
> > system and I came across this little article and accordingly
> > issued the command *pkg_info | grep 'package name' *and I saw
> > the following on the screen instead:
> >
> > pkg_info: the package info for package 'Terminal-0.2.8' is corrupt
> > ...
> > pkg_info: the package info for package 'xorg-server-1.4_4,1' is corrupt
> >
> > How did the pkg_info information for the above mentioned
> > packages became corrupt?..
>
> Possibly the usual portupgrade fckup^Wglitch.
>
> > Is there to fix this problem?
>
> Reinstall all packages.

That's a bit overdone maybe.
@OP:
Could you show output of:
grep '^@' /var/db/pkg/xorg-server-1.4_4,1/+CONTENTS |egrep -v '^(@comment MD5|
@dirrm |@unexec)'


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Apache - warnings in httpd-error.log about duplicate definitions

2008-04-11 Thread Mel
On Friday 11 April 2008 12:52:56 Mike Clarke wrote:
> Every time I start up Apache (1.3.41) on my 6.3 system I get lots of
> warnings in httpd-error.log about duplicate definitions of constants
> and functions. The timestamps suggest that this only started happening
> after I ran portupgrade on 23rd March. I can run portupgrade again
> tonight to see if that fixes it but I don't expect it'll have much
> effect since all the apache and php ports are up to date.:
>
> kestrel:/root# portversion -v | egrep 'php|apache'
> apache-1.3.41   =  up-to-date with port
> php4-4.4.8  =  up-to-date with port
> php4-bz2-4.4.8  =  up-to-date with port
> php4-ctype-4.4.8=  up-to-date with port
> php4-curl-4.4.8 =  up-to-date with port
> php4-gd-4.4.8   =  up-to-date with port
> php4-mbstring-4.4.8 =  up-to-date with port
> php4-mcrypt-4.4.8   =  up-to-date with port
> php4-mysql-4.4.8=  up-to-date with port
> php4-openssl-4.4.8  =  up-to-date with port
> php4-overload-4.4.8 =  up-to-date with port
> php4-pcre-4.4.8 =  up-to-date with port
> php4-posix-4.4.8=  up-to-date with port
> php4-session-4.4.8  =  up-to-date with port
> php4-tokenizer-4.4.8=  up-to-date with port
> php4-xml-4.4.8  =  up-to-date with port
> php4-zlib-4.4.8 =  up-to-date with port
> php5-5.2.5_1=  up-to-date with port
> php5-gd-5.2.5_1 =  up-to-date with port
> php5-pcre-5.2.5_1   =  up-to-date with port
> php5-xml-5.2.5_1=  up-to-date with port
> phpMyAdmin-2.11.5   =  up-to-date with port
> php_doc-en-20080318 =  up-to-date with port

So...
How did you get php4 and php5 to install simultaniously?

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: listing attached devices

2008-04-10 Thread Mel
On Friday 11 April 2008 00:50:00 Chad Perrin wrote:
> I feel like I'm missing something obvious.
>
> When I plug in a compact flash card reader, I can check /var/log/messages
> to see what devices it has recently detected.  What I'd like to be able
> to do, however, is just enter a simple command at the shell prompt and
> get a list of what devices are connected -- preferably with some control
> over which devices are listed so I can narrow it down to storage devices
> that aren't mounted (even if only via grep).

usbdevs?
glabel really is your friend though.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Invoking ldconfig without arguments wipes all hints and makes me very sad

2008-04-10 Thread Mel
On Thursday 10 April 2008 23:44:39 Shelby Cain wrote:
> On Thu, 2008-04-10 at 23:09 +0200, Mel wrote:
> > First of all, running ldconfig without arguments does nothing bad.
> > Running ldconfig without flags and with arguments does.
> >
> > Secondly, what is the command:
> > ldconfig /usr/lib
> >
> > supposed to do, according to newbie friendly logic?
> > Because it should be possible to "just have the linker create hints for
> > one directory".
>
> Your example seems perfectly reasonable should one wish to create hints
> for only one directory.
>
> However, in my particular case it seems that my blunder of running
> ldconfig -v (and not ldconfig by itself as I had assumed - my bad) is
> sufficient to render it impossible to log in as my regular user account
> since I had set my default login shell to bash.  That, in conjunction
> with root being disallowed by default in sshd effectively locked me out
> of my machine once I closed my only open ssh session.
>
> Modifying my original suggestion slightly, is there any reason why it
> would be a bad thing for ldconfig to assume -r when either -v with no
> other arguments (or no arguments at all) is passed to ldconfig or is
> there some specific reason for the current behavior?


It translates to "be verbose about restoring factory settings", because 
without arguments it will restore the built-in set.
The 'alias' shell command is suitable for user protection:
alias ldconfig='/sbin/ldconfig -r'
   This will default to -r if called as ldconfig. If you really do want to
   modify the search path on the command line, you can type the full path
   to the ldconfig binary, as in: /sbin/ldconfig -vm /usr/local/lib.

Similar:
alias rm='rm -i'
alias cp='cp -i'

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: buildkernel:Stop in /usr/src/sys/modules/oltr

2008-04-10 Thread Mel
On Wednesday 09 April 2008 07:06:03 dotyao wrote:
> from 6.3 pre to 6.3 reselase,buildkernel error:
> ===> oltr (all)
> uudecode <
> /usr/src/sys/modules/oltr/../../contrib/dev/oltr/i386-elf.trlld.o.uu cc -O2
> -fno-strict-aliasing -pipe -Werror -D_KERNEL -DKLD_MODULE -nostdinc -I-  
> -DHAVE_KERNEL_OPTION_HEADERS -include
> /usr/obj/usr/src/sys/mm21645/opt_global.h -I. -I@ -I@/contrib/altq
> -I@/../include -finline-limit=8000 -fno-common -g
> -I/usr/obj/usr/src/sys/mm21645 -mno-align-long-strings
> -mpreferred-stack-boundary=2  -mno-mmx -mno-3dnow -mno-sse -mno-sse2
> -ffreestanding -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes
>  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual 
> -fformat-extensions -std=c99 -c
> /usr/src/sys/modules/oltr/../../contrib/dev/oltr/if_oltr.c cc -O2
> -fno-strict-aliasing -pipe -Werror -D_KERNEL -DKLD_MODULE -nostdinc -I-  
> -DHAVE_KERNEL_OPTION_HEADERS -include
> /usr/obj/usr/src/sys/mm21645/opt_global.h -I. -I@ -I@/contrib/altq
> -I@/../include -finline-limit=8000 -fno-common -g
> -I/usr/obj/usr/src/sys/mm21645 -mno-align-long-strings
> -mpreferred-stack-boundary=2  -mno-mmx -mno-3dnow -mno-sse -mno-sse2
> -ffreestanding -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes
>  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual 
> -fformat-extensions -std=c99 -c
> /usr/src/sys/modules/oltr/../../contrib/dev/oltr/trlldbm.c cc -O2
> -fno-strict-aliasing -pipe -Werror -D_KERNEL -DKLD_MODULE -nostdinc -I-  
> -DHAVE_KERNEL_OPTION_HEADERS -include
> /usr/obj/usr/src/sys/mm21645/opt_global.h -I. -I@ -I@/contrib/altq
> -I@/../include -finline-limit=8000 -fno-common -g
> -I/usr/obj/usr/src/sys/mm21645 -mno-align-long-strings
> -mpreferred-stack-boundary=2  -mno-mmx -mno-3dnow -mno-sse -mno-sse2
> -ffreestanding -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes
>  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual 
> -fformat-extensions -std=c99 -c
> /usr/src/sys/modules/oltr/../../contrib/dev/oltr/trlldhm.c
> /usr/src/sys/modules/oltr/../../contrib/dev/oltr/trlldhm.c:1453:8: invalid
> suffix "xf7" on integer constant

I don't have those sources handy, but there should be a 0xf7 on that line that 
I think got corrupted to 8xf7 somehow.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Invoking ldconfig without arguments wipes all hints and makes me very sad

2008-04-10 Thread Mel
On Thursday 10 April 2008 22:50:31 Edward Capriolo wrote:
> I just wrote to the list about the SAME thing. I totally agree. This
> is like the
> saying 'rm' command without arguments will delete every file on your
> computer. I did the same thing. I wish it was a virtual system I did
> it to as well :)

First of all, running ldconfig without arguments does nothing bad. Running 
ldconfig without flags and with arguments does.

Secondly, what is the command:
ldconfig /usr/lib

supposed to do, according to newbie friendly logic?
Because it should be possible to "just have the linker create hints for one 
directory".

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: freebsd-questions Digest, Vol 210, Issue 6

2008-04-10 Thread Mel
On Wednesday 09 April 2008 06:43:23 Tim DeBoer wrote:
> --
>
> > Message: 16
> > Date: Tue, 8 Apr 2008 21:24:58 +0200
> > From: Mel <[EMAIL PROTECTED]>
> > Subject: Re: Apache22 Port Install Problem
> > To: freebsd-questions@freebsd.org
> > Cc: Tim DeBoer <[EMAIL PROTECTED]>
> > Message-ID: <[EMAIL PROTECTED]>
> > Content-Type: text/plain;  charset="iso-8859-1"
> >
> > On Tuesday 08 April 2008 07:11:47 Tim DeBoer wrote:
> > > The install goes fine, no obvious errors anyway, when I do apachectl
> > > configtest, I get
> > > # apachectl configtest
> > > Syntax error on line 117 of /usr/local/etc/apache22/httpd.conf:
> > > Invalid command 'Order', perhaps misspelled or defined by a module not
> >
> > 
> >
> > Is this line present and active?
> > LoadModule authz_host_module libexec/apache22/mod_authz_host.so
> >
> >
> > --
> > Mel
> >
> > Problem with today's modular software: they start with the modules
> >and never get to the software part.
>
> No.
> I do have LoadModule auth_basic_module libexec/apache22/mod_auth_basic.so
> though.
>
> I tried recompiling again without auth_basic, and used the authz options
> instead, but it's not actually installing them for some reason.
>
> # make deinstall
> ===>  Deinstalling for www/apache22
> ===>   Deinstalling apache-2.2.8
> pkg_delete: file '/usr/local/libexec/apache22/mod_authz_dbm.so' doesn't
> exist
> pkg_delete: file '/usr/local/libexec/apache22/mod_authz_default.so' doesn't
> exist
> pkg_delete: file '/usr/local/libexec/apache22/mod_authz_groupfile.so'
> doesn't exist
> pkg_delete: file '/usr/local/libexec/apache22/mod_authz_host.so' doesn't
> exist

Well, authz_host is the module that provides the Order directive, so the only 
reason I can think of that it didn't get installed after redoing make config 
is that you didn't make clean so that it just reinstalled the previously 
built version.
If you're sure thats not the case, could you show:
cat /var/db/ports/apache22/options
and the output of:
cd /usr/ports/www/apache22 && make -V CONFIGURE_ARGS

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Mail Spool Problems / IMAP

2008-04-08 Thread Mel
On Tuesday 08 April 2008 21:32:45 Jerry McAllister wrote:
> On Tue, Apr 08, 2008 at 11:42:41AM -0700, Chris Maness wrote:
> > On Tue, 8 Apr 2008, Chuck Swiger wrote:
> > >On Apr 8, 2008, at 10:50 AM, Chris Maness wrote:
> > >>How is this header look?  I am not quite sure of what I am looking for.
> > >
> > >That seems to be fine.  If it was corrupted, you'd see a line or a few
> > >lines of obvious binary garbage...
> > >
> > >--
> > >-Chuck
> >
> > It does seem like something something is corrupt.  What can I do to reset
> > everything and restore everything so that thunderbird can read my inbox
> > again.  I have contempalted deleting the user, but I'm not sure if that
> > will delete what ever is corrupted.
>
> Very often it is only one character out of place.   Each header should
> start with  'From' in the beginning of a line

Since you mention one character, it should actually be starting with 'From ' 
and any line that starts with 'From ' that is not the start of a mail should 
be changed to '>From ' before ending up in the mbox file.

This test weeds it out, allthough there's still room for false positives, 
easily resolved by the human brain:
grep '^From ' /var/mail/myloginname |grep -v '200[78]$'
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Large file system creation

2008-04-08 Thread Mel
On Tuesday 08 April 2008 21:12:00 Edward Capriolo wrote:

> Seems like a shame to boot a nice 9TB disk pack off a floppy Disk or a
> Pen drive. I mean you do what you have to but that just screams
> 'workaround'

Or worrying about 1 minute longer boot cycle on 90 days+ uptime screams 
optimization fever.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Apache22 Port Install Problem

2008-04-08 Thread Mel
On Tuesday 08 April 2008 07:11:47 Tim DeBoer wrote:

> The install goes fine, no obvious errors anyway, when I do apachectl
> configtest, I get
> # apachectl configtest
> Syntax error on line 117 of /usr/local/etc/apache22/httpd.conf:
> Invalid command 'Order', perhaps misspelled or defined by a module not



Is this line present and active?
LoadModule authz_host_module libexec/apache22/mod_authz_host.so


-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Remote backups using ssh and dump

2008-04-07 Thread Mel
On Friday 04 April 2008 19:59:27 Paul Schmehl wrote:

> Has anyone done this?

/usr/local/etc/periodic/daily/201.backup-disks:

#!/bin/sh
# vim: ts=4 sw=4 noet ai
#
# The following tunables are supported:
# daily_backup_disks_enable (bool):
#   Turn backup on/off.
#   Default: Off
# daily_backup_disks_mounts (list):
#   The mount points to backup daily.
#   Default: / /var /home /usr
# daily_backup_disks_compress_local (bool):
#   Compress the backup on the local machine.
#   Default: Compress on receiving machine.
# daily_backup_disks_compressor (program path):
#   The compress program to use.
#   Default: /usr/bin/bzip2
# daily_backup_disks_ext (string):
#   The extension to use for the filename.
#   Default: bz2
# daily_backup_disks_islocal (bool):
#   If this is a backup to a local disk.
#   Default: NO
# daily_backup_disks_host (hostname):
#   Hostname to backup to.
#   Default: backup
# daily_backup_disks_machid (string):
#   Machine id of this machine, used as prefix on backup files.
#   Default: `hostname -s`
# daily_backup_disks_transporter (program path):
#   Program used to transport the backup. Arguments must be compatible with
#   ssh(1).
#   Default: /usr/bin/ssh
# daily_backup_disks_backuproot (path):
#   Path to the directory where backups are stored on the receiving machine.
#   Default: /backup

if [ -r /etc/defaults/periodic.conf ]
then
. /etc/defaults/periodic.conf
source_periodic_confs
fi
# Set defaults
daily_backup_disks_compress_local=${daily_backup_disks_compress_local:-"NO"}
daily_backup_disks_mounts=${daily_backup_disks_mounts:-"/ /var /home /usr"}
daily_backup_disks_compressor=${daily_backup_disks_compressor:-"/usr/bin/bzip2"}
daily_backup_disks_ext=${daily_backup_disks_ext:="bz2"}
daily_backup_disks_islocal=${daily_backup_disks_islocal:="NO"}
daily_backup_disks_hostname=${daily_backup_disks_hostname:="backup"}
daily_backup_disks_machid=${daily_backup_disks_machid:=`hostname -s`}
daily_backup_disks_transporter=${daily_backup_disks_transporter:="/usr/bin/ssh"}
daily_backup_disks_backuproot=${daily_backup_disks_backuproot:="/backup"}

case "$daily_backup_disks_enable" in
[Yy][Ee][Ss])
  level=$(/bin/date +%w)
  date=$(/bin/date +%Y%m%d)
  echo ''
  for disk in ${daily_backup_disks_mounts}; do
dname=${disk#"/"}
test -z "$dname" && dname=root
dname=$(echo $dname | /usr/bin/tr '/' '_')
fname="${daily_backup_disks_machid}.${dname}.${level}"
fname="${fname}.${date}.dump.${daily_backup_disks_ext}"
fpath="${daily_backup_disks_backuproot}/${fname}"
if test ${daily_backup_disks_islocal} = "NO"; then
  echo -n "Processing ${disk} to ${daily_backup_disks_host}:"
  echo"${daily_backup_disks_backuproot}/${fname}"
  if test ${daily_backup_disks_compress_local} = "NO"; then
# dd is necessary, because bzip2 cannot "compress STDIN to
# named file"
/sbin/dump -${level}uaLf - ${disk} | \
  ${daily_backup_disks_transporter} \
  ${daily_backup_disks_host} \
  "${daily_backup_disks_compressor} -c - | /bin/dd of=${fpath}"
  else
# dd is now necessary, because scp cannot copy STDIN.
/sbin/dump -${level}uaLf - ${disk} | \
  ${daily_backup_disks_compressor} -c - | \
  ${daily_backup_disks_transporter} \
  ${daily_backup_disks_host} "/bin/dd of=${fpath}"
  fi
else
  echo "Processing ${disk} to ${fpath}"
  /sbin/dump -${level}uaLf - ${disk} | \
${daily_backup_disks_compressor} -c - >${fpath}
fi
rc=$(($rc + $?))
  done
  ;;
*)  rc=0;;
esac

exit $rc

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: F_NOTIFY in fcntl(2)?

2008-04-03 Thread Mel
On Thursday 03 April 2008 16:11:59 Mel wrote:
> On Thursday 03 April 2008 12:25:55 John Conover wrote:
> > Does freebsd support the F_NOTIFY, (i.e., File and directory change
> > notification,) in fcntl(2)?
> >
> > I get that it doesn't, but its an old 5X version, and I might have to
> > upgrade.
>
> Nope, this is a GNU extension to fcntl. File change notifications are done
> with EVFILT_VNODE using kqueue(2). Directory changes have no interface that
> I know of. You might wanna take a look at how devel/gamin handles this,
> specifically the kqueue implementation.

Figured I'd give an example of how it can be done (as in: works for me for 
file deletion/creation and renames). Doesn't work for utimes(2) operations on 
a file, as in "touch /tmp/this_file_exists" will not fire.
Code inlined below sig.

-- 
Mel

#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 

int main(int argc, char **argv)
{
int kq, fd;
struct kevent changes, events;
time_t *mtime;
struct stat sb;

if( -1 == (fd = open("/tmp/.", O_RDONLY)) )
err(EX_OSERR, "Cannot open dir /tmp");

if( NULL == (mtime = malloc(sizeof(time_t))) )
err(EX_OSERR, "Failed to allocate %d bytes", sizeof(time_t));

if( -1 == fstat(fd, &sb) )
err(EX_OSERR, "Cannot stat fd %u", fd);

*mtime = sb.st_mtime;

if( -1 == (kq = kqueue()) )
err(EX_OSERR, "Cannot get a kqueue");

EV_SET(&changes, fd, EVFILT_TIMER, EV_ADD|EV_ENABLE, 0, 500,
(void *)mtime);

for( ;; )
{

/* we can only get one event, really. */
if( -1 == kevent(kq, &changes, 1, &events, 1, NULL) )
err(EX_OSERR, "kevent");

if( events.flags & EV_ERROR )
errc(EX_OSERR, events.data, "Event error");

/* secretly, our timer is an fd, we probably should use udata for this
 * though.
 */
if( -1 == fstat(events.ident, &sb) )
{
warn("Failed to stat fd %u", events.ident);
break;
}
else
{
if( *mtime && *mtime != sb.st_mtime )
printf("Mtime changed: %u => %u\n", *mtime, sb.st_mtime);
else
printf("Mtime unchanged: %u\n", *mtime);

*mtime = sb.st_mtime;
}
}

close(kq);
return 0;
}
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ftpd help

2008-04-03 Thread Mel
On Thursday 03 April 2008 17:23:10 Victor Farah wrote:

>   I have a default install of freebsd 6.2, and I enable ftpd in inetd.
> That all works nicely, I add a user to the system that needs to access
> ONLY two directories that are in two different places.
> For example: /usr/local/www/dir1 and /usr/local/www/dir2/
>
> There are many directories in /usr/local/www/ that this person SHOULD
> not have access too.
 
mkdir /home/personX/dir1 /home/personX/dir2
mount -t nullfs /usr/local/www/dir1 /home/personX/dir1
mount -t nullfs /usr/local/www/dir2 /home/personX/dir2

Done. You can also add '-o ro' if the user isn't allowed to make changes to 
the directories.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: F_NOTIFY in fcntl(2)?

2008-04-03 Thread Mel
On Thursday 03 April 2008 12:25:55 John Conover wrote:
> Does freebsd support the F_NOTIFY, (i.e., File and directory change
> notification,) in fcntl(2)?
>
> I get that it doesn't, but its an old 5X version, and I might have to
> upgrade.

Nope, this is a GNU extension to fcntl. File change notifications are done 
with EVFILT_VNODE using kqueue(2). Directory changes have no interface that I 
know of. You might wanna take a look at how devel/gamin handles this, 
specifically the kqueue implementation.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Webalizer compiles and installs fine in 6.1, goes splat in 6.2.

2008-04-03 Thread Mel
On Thursday 03 April 2008 01:21:38 Lou Katz wrote:
> In /usr/ports/webalizer (6.2)
>
> # make
> ===>  Vulnerability check disabled, database not found
> ===>  Extracting for webalizer-2.1.10_13
> => MD5 Checksum OK for webalizer-2.01-10-src.tar.bz2.
> => SHA256 Checksum OK for webalizer-2.01-10-src.tar.bz2.
> ===>  Patching for webalizer-2.1.10_13
> ===>  Applying extra patch /usr/ports/www/webalizer.save/files/output.patch
> ===>  Applying extra patch
> /usr/ports/www/webalizer.save/files/linklist.patch ===>  Applying extra
> patch /usr/ports/www/webalizer.save/files/webalizer-fullrefs.patch ===> 
> Applying FreeBSD patches for webalizer-2.1.10_13
> ===>   webalizer-2.1.10_13 depends on shared library: gd.4 - not found
> ===>Verifying install for gd.4 in /usr/ports/graphics/gd
> ===>  Building for gd-2.0.35,1
> make LIB=gd SRCS="gd.c gd_gd.c gd_gd2.c gd_io.c gd_io_dp.c gd_io_file.c 
> gd_io_ss.c gd_jpeg.c gd_png.c gd_ss.c gd_topal.c  gd_wbmp.c gdcache.c
> gdfontg.c gdfontl.c gdfontmb.c  gdfonts.c gdfontt.c gdft.c gdfx.c
> gdhelpers.c gdhelpers.h  gdkanji.c gdtables.c gdxpm.c gd_security.c  wbmp.c
> gd_gif_in.c gd_gif_out.c"  SHLIB_MAJOR=4 SHLIB_MINOR=0  CFLAGS="-O2
> -fno-strict-aliasing -pipe   -I/usr/ports/graphics/gd/work/gd-2.0.35
> -I/usr/local/include/freetype2/freetype  -I/usr/local/include/freetype2
> -I/usr/local/include  -DHAVE_LIBPNG -DHAVE_LIBJPEG -DHAVE_LIBFREETYPE
> -DHAVE_LIBZ  -DHAVE_ERRNO_H -DHAVE_FT2BUILD_H -DHAVE_LIBFREETYPE
> -DHAVE_LIBJPEG -DHAVE_LIBPNG  -DHAVE_LIBZ -DHAVE_STDDEF_H -DHAVE_STDINT_H
> -DHAVE_STDLIB_H -I/usr/local/include/X11 -I/usr/local/include -DHAVE_LIBXPM
> -I/usr/local/include -DHAVE_LIBFONTCONFIG -DHAVE_PTHREAD  -DHAVE_ICONV
> -DHAVE_ICONV_H -DHAVE_ICONV_T_DEF" -ECFLAGS LDADD="-L/usr/local/lib -lpng
> -lz -ljpeg -lfreetype -lm -L/usr/local/lib -lXpm -lX11 -pthread
> -L/usr/local/lib -lfontconfig -L/usr/local/lib -liconv"  -f
> /usr/share/mk/bsd.lib.mk libgd.a
> cc -O2 -fno-strict-aliasing -pipe   -I/usr/ports/graphics/gd/work/gd-2.0.35
> -I/usr/local/include/freetype2/freetype -I/usr/local/include/freetype2
> -I/usr/local/include  -DHAVE_LIBPNG -DHAVE_LIBJPEG -DHAVE_LIBFREETYPE
> -DHAVE_LIBZ -DHAVE_ERRNO_H -DHAVE_FT2BUILD_H -DHAVE_LIBFREETYPE
> -DHAVE_LIBJPEG -DHAVE_LIBPNG  -DHAVE_LIBZ -DHAVE_STDDEF_H -DHAVE_STDINT_H
> -DHAVE_STDLIB_H -I/usr/local/include/X11 -I/usr/local/include -DHAVE_LIBXPM
> -I/usr/local/include -DHAVE_LIBFONTCONFIG -DHAVE_PTHREAD  -DHAVE_ICONV
> -DHAVE_ICONV_H -DHAVE_ICONV_T_DEF -c gdft.c gdft.c:1403:35:
> fontconfig/fontconfig.h: No such file or directory gdft.c:1466: error:

Install x11-fonts/fontconfig or set WITHOUT_X11 cause you don't need XPM 
support in GD anyway.
And be sure to read:
less -p20070519 /usr/ports/UPDATING

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD Traffic Shaping

2008-04-02 Thread Mel
On Wednesday 02 April 2008 14:21:38 [EMAIL PROTECTED] wrote:

> Also, the reason for this need is that some services use
> burst-bandwidth and I have many peaks and lows throughout the day.
> This means that my carrier who bills me by the 95th percentile is
> having a field day.

He bills by the second or average hour like most people? It's not as black and 
white as it seems - you also get higher average when the number of 
connections increases, not just the bandwidth they consume.

I think you'll find that bursts are best counteracted like this:
http://www.probsd.net/pf/index.php/Hednod%27s_HFSC_explained#Tips.2FIdeas

This seperates 'downloads' from 'webpages', 'normal mails' from 'attachments' 
and you can then tune accordingly, if you have/get some graph.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD Traffic Shaping

2008-04-02 Thread Mel
On Wednesday 02 April 2008 09:27:21 [EMAIL PROTECTED] wrote:
> I gave port 80 as an example but I need this configuration for
> limiting other services as well.
>
> If you have a 100mbps connection and only one client, you want him to
> only use 50kbps, not the full pipe. If you have 200 clients, they
> still get 50kbps each.
>
> Is this feature that I need so complicated that it can't be
> implemented easily into FreeBSD or is it that not many people need it
> ? It sounds quite useful to me :)

It isn't as useful as you think. I can easily generate 200 clients being only 
one person. That's why the focus in bandwidth shapers lies on the type of 
traffic and the origin/destination rather then the state and they divide the 
bandwidth within those pipes between the states.
Secondly - bit besides the point, but not many people think about it - if you 
have 100% available and limit a single person to 5%, you're more likely to 
end up at the 100%, simply because it takes more time for that person to get 
what he wants.
So if there's no financial/legal issues involved, it's better to get rid of 
the clients as fast as possible.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD Traffic Shaping

2008-04-02 Thread Mel
On Wednesday 02 April 2008 10:55:58 Ted Mittelstaedt wrote:

> The vast majority of people out there have asymmetrical bandwidth
> limiting needs - that is, they have a pipe to the Internet and
> have a lot more data coming from the Internet to them, than data
> going from them to the Internet.  Their desire is to somehow make
> it so that certain kinds of incoming data meeting certain criteria
> are limited.  Their problem is that since they don't have control of
> the end sending the data to them, they can't do this.

That's only true for locally generated traffic. Since you can limit the 
outgoing pipe of the internal interface, in a NAT situation, you can in 
practical terms limit/prioritize incoming traffic.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD Traffic Shaping

2008-04-01 Thread Mel
On Wednesday 02 April 2008 00:18:36 [EMAIL PROTECTED] wrote:

> I've tried dummynet but it doesn't do what I need because if I define
> a pipe with 1mbps and if I have 1000 connections, each connection will
> have less than 50kbps.
>
> Any way to do this in FreeBSD ?

No, unfortunately your ISP gives you bandwidth, not FreeBSD.
You can give yourself the illusion of guarenteed bandwidth using HFSC and pf 
altq, but at 500% of max bandwidth it is nothing more then an illusion. 
That's aside from the fact that HFSC only allows 75% of capacity to be 
designated as 'realtime'.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [6.3] How are those daemons started?

2008-03-31 Thread Mel
On Monday 31 March 2008 22:27:55 Gilles wrote:
> On Mon, 31 Mar 2008 15:06:20 -0500, Erik Osterholm
>
> <[EMAIL PROTECTED]> wrote:
> >Also note /etc/defaults/rc.conf which is /why/ these services
> >are on by default.  Entries in /etc/rc.conf override entries in
> >/etc/defaults/rc.conf, so you should never change
> >/etc/defaults/rc.conf.
>
> Thanks guys. After reading /etc/defaults/rc.conf, I understood that
> the reason there's sendmail listening on TCP25 is so that local
> daemons can send e-mail to the admin.

Somewhat. Most daemons can do fine without the socket listener and 
invoke /usr/sbin/sendmail by default. Only ones that can't get 
to /usr/sbin/sendmail (i.e.: chrooted daemons), but in my experience they 
don't know how to talk SMTP either.
I guess it's legacy that MTA's start their SMTP listener by default.
You can set sendmail_enable="NO" in /etc/rc.conf to disable the listener. If 
you set it to "NONE" sendmail will be totally off and all mail from daemons 
invoking /usr/sbin/sendmail will end up in /var/spool/mqueue without being 
processed further.

If you choose to go with the "NO" option, be sure to read and 
update /etc/aliases. The difference between mail stacking up 
in /var/spool/mqueue or /var/mail is only the packaging.

Informative reading: newaliases(8), crontab(5) and periodic(8).
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [6.3] How are those daemons started?

2008-03-31 Thread Mel
On Monday 31 March 2008 21:47:42 Gilles wrote:
> Hello
>
>   By running "netstat -an", I notice that some daemons are running,
> even though nothing is listed in either /etc/rc.conf or some
> equivalent in /usr/local/etc/ :
>
> tcp4   0  0  127.0.0.1.25
> udp4   0  0  *.2727 *.*
> udp4   0  0  *.2727 *.*
> udp4   0  0  *.514  *.*
>
> nmap seems to only handle TCP (TCP2000 = "callbook"?) doesn't say
> which application is opening those ports, and lsof | grep doesn't
> return anything :-/


port 25 is sendmail, enabled by default /etc/defaults/rc.conf.
514 is syslog, also on by default.
2727 udp, no idea, but sockstat(1) will tell you.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: That age old question again

2008-03-16 Thread Mel
On Monday 17 March 2008 00:18:27 Robert Chalmers wrote:
> Not quite but close.
> On the front page of FreeBSD.org, is the download links for
> LATEST RELEASES
>   a.. Production Release 7.0
> Which I'm assuming is the latest, and commercially useable version.
>
> Now I still find the situation of CURRENT, STABLE as they relate to RELEASE
> slightly confusing, and no amount of description seems to clear it up.
>
> Ok, I understand CURRENT is developmental, and becomes the next major
> version as stated below. So the next major version is the one on the
> website? Release 7.0 - or, 7.0-RELEASE ...yes/no?
>
> Then 7.0-STABLE continues the work to be the bugfix/security blah blah
> tree.
>
> The question I have is:  For the Production Release shown above -
> 7.0-RELEASE, what is the cvsup tag to keep this version updated ??

Releases are like photos: a momentum in time.
Current and stable are moving targets, where current moves faster then stable. 
As a general rule, if something comitted in -current holds up for x weeks (I 
believe 3, but it ain't written in stone) and it has importance for -stable, 
it will be committed to stable and end up in a the next /minor/ release for 
that branch.
Development in -current ends up in the next /major/ release.
As it stands, 7 is the stable branch, 8 is the current branch and 6 is legacy 
stable, 5 is pray-it-still-works ancient 'stable' and 4 is passed end-of 
life.
So far so good.
Except, there's also the ability to "keep a release up to date with only 
security fixes". That's what you want to use in production and the cvs tag 
contains two version numbers: RELENG_7_0.

Yes, I realize many use -stable branches in production, but there is the 
chance that your system is broken on reboot.
Reading through the dated entries in /usr/src/UPDATING gives you an idea what 
users of -stable can deal with and make your descision accordingly.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Why not a DVD iso version too?

2008-03-16 Thread Mel
On Sunday 16 March 2008 22:29:29 Joshua Isom wrote:
> On Mar 16, 2008, at 3:02 PM, Mel wrote:
> > On Sunday ١٦ March ٢٠٠٨ ٢١:٠٣:٢٧ Incoming Mail List wrote:
> >> I think I can answer this one.  Perhaps, not enough disk space?  See,
> >> the "Where is packages-٦.٢-release" for more context.  You know, disk
> >> space isn't infinite...uh-huh.
> >
> > Easy to bitch, ain't it?
> > Make an iso-dvd then and provide the space and bandwidth.
> >
> > I hope they never release a DVD officially, cause it'll mean that ٨٠%
> > of
> > what's downloaded then will never ever be used, yet it does use up the
> > bandwidth on every new release. Stick to windows if you believe that's
> > a
> > proper use of resources.
>
> Well, since the OP just wants a DVD version, and not specifically a
> version that's too big to fit on a CD, why not just create a DVD iso
> that contains just enough to install?

Unless there's DVD drives out there that can't mount cd's (which would 
surprise me since DVD's use iso9660 file system), there's no reason to make a 
700MB dvd image.

> Personally, I wonder why there isn't a ISO image that'll install
> FreeBSD somewhat in a Gentoo concept, format the disk(s), download the
> source, csup and install from the source(good for someone wanting to
> follow -STABLE instead of -RELEASE), install and csup the ports tree,
> and good to go.

Cause a gzipped ports tree requires less resources then a csup'd one, for one 
and because you may want to get the gateway you're building on site to have 
some decent firewall rules before going up the big scary net.
Install disks have their use and binary installs are faster all around, but 
there's limits to convenience and having all binary packages on disk, most of 
which are obsolete within weeks, majority of which you'll never use (17k+ 
ports atm) certainly is one of them.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Why not a DVD iso version too?

2008-03-16 Thread Mel
On Sunday 16 March 2008 21:20:20 [EMAIL PROTECTED] wrote:
> On 16/03/2008, Mel <[EMAIL PROTECTED]> wrote:
> > On Sunday 16 March 2008 21:03:27 Incoming Mail List wrote:
> >  > I think I can answer this one.  Perhaps, not enough disk space?  See,
> >  > the "Where is packages-6.2-release" for more context.  You know, disk
> >  > space isn't infinite...uh-huh.
> >
> >  Easy to bitch, ain't it?
> >  Make an iso-dvd then and provide the space and bandwidth.
> >
> >  I hope they never release a DVD officially, cause it'll mean that 80% of
> >  what's downloaded then will never ever be used, yet it does use up the
> >  bandwidth on every new release. Stick to windows if you believe that's a
> >  proper use of resources.
>
> How many iterations of:
> "I just downloadededed all 4 iso's(sic) and the
> bootonly, which one do I need to do a nef tea pee
> install?"

It's not iteratitive, but recursive, since the next time they only download 1, 
(pardon the amnesiacs). :)
(I know, I'm an optimist)

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Wireless AP FreeBSD 7.0

2008-03-16 Thread Mel
On Sunday 16 March 2008 21:07:53 Sam Fourman Jr. wrote:

> my question is Does FreeBSD 7.0 Have ALTQ and pf enabled by default?
> or do Ihave to compile that support in the kernel

pf, yes. Altq, not on 6.x, don't know if that's changed and can't check my 7.x 
system atm. See man altq when in doubt.

> Here is the HOWTO I am following to setup a Small office Samba File
> Server / Wireless AP
> http://tun0.net/ascii/config/freebsd_access_point/howtoforge-freebsd_wirele
>ss.html
>
> if anyone knows of a more current HOWTO please let me know

Hmm, it's quite outdated, but most things will work.
I don't see the reason for using pfsync on a small home network with only 1 
gateway to the net, so you can leave that out.
You don't need bind9 port, cause FreeBSD has bind 9 in base for quite a while.
Wlan layers will be loaded automically, when a driver is loaded that needs 
them, so no need for them to be loaded in loader.conf.
The table in the pf config has no name, not very good practice and not sure if 
that'll work.
The pf config also doesn't define any queues, so compiling in altq isn't 
necessary with the config given there.

Before you do anything, make sure the driver for your wireless card supports:
- hostap
- apbridge

You can check this with ifconfig -v on the interface name, i.e.:
ath0: flags=8843 mtu 1500
inet 192.168.100.1 netmask 0xff00 broadcast 192.168.100.255
inet 192.168.100.51 netmask 0x broadcast 192.168.100.51
ether 00:xx:xx:xx:xx:xx
media: IEEE 802.11 Wireless Ethernet autoselect mode 11g 
  ^^
status: associated
ssid MYSSID channel 1 (2412) bssid 00:xx:xx:xx:xx:xx
authmode OPEN privacy ON deftxkey 1
wepkey 1:104-bit powersavemode OFF powersavesleep 100 txpowmax 34
txpower 63 rtsthreshold 2346 mcastrate 1 fragthreshold 2346 bmiss 7
-pureg protmode CTS -wme burst ssid SHOW apbridge dtimperiod 1
     
bintval 100

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Why not a DVD iso version too?

2008-03-16 Thread Mel
On Sunday 16 March 2008 21:03:27 Incoming Mail List wrote:

> I think I can answer this one.  Perhaps, not enough disk space?  See,
> the "Where is packages-6.2-release" for more context.  You know, disk
> space isn't infinite...uh-huh.

Easy to bitch, ain't it?
Make an iso-dvd then and provide the space and bandwidth.

I hope they never release a DVD officially, cause it'll mean that 80% of 
what's downloaded then will never ever be used, yet it does use up the 
bandwidth on every new release. Stick to windows if you believe that's a 
proper use of resources.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Compile error, kde related?

2008-03-16 Thread Mel
On Sunday 16 March 2008 12:56:22 Leslie Jensen wrote:
> Leslie Jensen skrev:
> > Mel skrev:
> >> On Saturday 15 March 2008 18:10:00 Leslie Jensen wrote:
> >>>> portupgrade -Rf x11-toolkits/qt33
> >>>> If uic still does not show linked to libthr, I have no clue what
> >>>> causes that on your system. I'd inspect /etc/libmap.conf,
> >>>> /etc/make.conf, the config.log for qt33 and the final link command
> >>>> that produces the uic binary.
>
> I've tried to make a fresh instal of FreeBSD 7.0 and there is libthr
> linked as it should be. What I don't understand is that on the system
> where I have the problem I did a pkg_delete -a after it was upgraded to
> 7.0, and manually deleted everything left in /usr/local before starting
> over with the ports.
>
> Can I manually link uic to libthr and would it be a clean hack or?

Nope. But I would be interested to see what the line is that compiles uic. And 
what configure produces.

I still think there's something '6.x-ish' going on here, but without knowing 
how uic gets built, it's anyone's guess.

Could you try the following:
cd /usr/ports/x11/qt33
make clean
mkdir /var/log/portbuilds
make build >/var/log/portbuilds/`make -V PKGNAME`.log 2>&1
make -V CONFIGURE_ARGS >> /var/log/portbuilds/`make -V PKGNAME`.log
cat `make -V WRKSRC`/config.log \
>>/var/log/portbuilds/`make -V PKGNAME`.log

Then put that log up somewhere if you have webspace, or try to find references 
to '-pthread', 'libpthread', 'libthr' and the final link command that makes 
uic.

It's probably some setting you have or some stray library that causes this and 
until you get it resolved, you can't trust any threaded application you build 
from ports. Or, it's specific for qt, but I highly doubt that.
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Network identity for sending mail.

2008-03-16 Thread Mel
On Sunday 16 March 2008 08:47:47 Malcolm Kay wrote:

> The send-pr appears to assume that mail can and will be sent
> directly through sendmail or equivalent rather than inderctly through
> an ISP mail service. 

No. It assumes that the variable MAIL_AGENT in the environment is capable of 
sending mail and if /unset/ uses sendmail.
Have a look at the mail/smail port and set MAIL_AGENT accordingly in 
environment. This can be done permanently for all users, by adding the 
variable to the setenv entry in the default listing in /etc/login.conf and 
running cap_mkdb /etc/login.conf afterwards.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Compile error, kde related?

2008-03-15 Thread Mel
On Saturday 15 March 2008 18:10:00 Leslie Jensen wrote:
> > portupgrade -Rf x11-toolkits/qt33
> > If uic still does not show linked to libthr, I have no clue what causes
> > that on your system. I'd inspect /etc/libmap.conf, /etc/make.conf, the
> > config.log for qt33 and the final link command that produces the uic
> > binary.
>
> I just did
> bsdpc01# pkg_info | grep qt3
> and found no qt33 installed!

That could be, cause the port is called qt33 but the package once installed 
qt-3 or qt-copy-3 :P
Better: pkg_info qt-*
-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Compile error, kde related?

2008-03-15 Thread Mel
On Saturday 15 March 2008 10:04:21 Leslie Jensen wrote:
> > There's your problem. I don't see a libpthread or better on 7.x a
> > libthr.so linked in:
> >
> > libthr.so.3 => /lib/libthr.so.3 (0x38b55000)
> >
> > is what it shows on my 7.x system.
> >
> > So the question is, why isn't qt built with thread support. I don't see
> > how that's possible with the current ports makefile.
> > Do you have a file /lib/libthr.so*?
>
> Yes I do.
>
> bsdpc01# find /lib | grep "libthr.so"
> /lib/libthr.so.3
>
> So what do you suggest I do now?
>

portupgrade -Rf x11-toolkits/qt33
If uic still does not show linked to libthr, I have no clue what causes that 
on your system. I'd inspect /etc/libmap.conf, /etc/make.conf, the config.log 
for qt33 and the final link command that produces the uic binary.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


<    5   6   7   8   9   10   11   12   13   14   >