Re: Unknown devices

2009-10-16 Thread RW
On Thu, 15 Oct 2009 00:38:03 +0200
Polytropon free...@edvax.de wrote:

 On Wed, 14 Oct 2009 23:04:51 +0400, Arkady Tokaev
 tok...@hotmail.com wrote:
  
  While I was trying to update ports I have received message
  about absence disk space.It's impossible, I thought.But df
  command said:
 
  $ df -h
  Filesystem SizeUsed   Avail Capacity  Mounted on
  /dev/ad0s1a 23G3.5G 18G16%/
  devfs  1.0K1.0K  0B   100%/dev
  /dev/md0   9.4M2.8M6.5M30%/etc
  /dev/md131M 16M 13M55%/usr/local/etc
  /dev/md219M 18K 19M 0%/root
  /dev/md331M6.1M 24M20%/var
  $
  What is the md devices?How I can remove them?
 
 See man md: The md devices refer to memory disks, RAM that
 emulates a hard disk.
 
 Sadly, I don't recognize a reason why your /etc, /usr/local/etc,
 /root and /var subtrees are mounted onto memory disks... seems
 that you're not running a default install, do you?

I would imagine that they're vnode md devices that each have a file on
the root filesystem as a backing store. I've never tried it myself but
you could do this as an alternative to conventional partitioning.
It's a little less efficient, but they can be resized. I'm not aware
that sysinstall can install like this though - perhaps it's pc-bsd or
something.

There should lines like mdconfig_md0=... defining the devices in
rc.conf
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Graphics card recommendation

2009-10-15 Thread RW
On Wed, 14 Oct 2009 11:59:49 -0400
Jerry ges...@yahoo.com wrote:


 nVidia (AMD64) is not supported in 7.x versions of FreeBSD as far as I
 know. There was some talk of it being supported in 8.x, but I have
 not heard from anyone actually doing so.

The existing driver is 32 bit and will never run on amd64. What's
happened is that 8-current has provided some of the VM features that
nVidia regard as prerequisites for a new 64-bit driver.

 All my machines use nvidea
 cards, and the lack of support for it in FBSD, even after an extended
 period of time, is a real PIA.

Right, but for most of that time the ball has been in FreeBSD's court.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: man quits back to the prompt after CTRL-G

2009-10-14 Thread RW
On Tue, 13 Oct 2009 23:10:02 -0700
Chris Stankevitz cstankev...@toyon.com wrote:

 Bill Campbell wrote:
  The -e and -E options to less control this.  You want neither of
  these specified if you don't want to have less automatically exit
  at end-of-file.  The ``-e'' option causes it to exit the second
  time it hits eof while ``-E'' exits the first time.
 
 Bill,
 
 Thank you for your explanation.  I hope to find that my PAGER 
 environment variable is less -E.  If so, I will drop the -E.

I think it's sufficient simply to change your pager to less. IIRC it
defaults to more.

more and less are the same binary in FreeBSD, but they work
slightly differently according to how they are invoked.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: / almost out of space just after installation

2009-10-10 Thread RW
On Sat, 10 Oct 2009 11:27:31 -0600
Chad Perrin per...@apotheon.com wrote:

 On Fri, Oct 09, 2009 at 10:15:22PM +0100, RW wrote:
  On Fri, 9 Oct 2009 17:28:09 +0200 (CEST)
  Oliver Fromme o...@lurza.secnetix.de wrote:

   Depending on the size of installed RAM, /tmp could also
   be a memory disk by default. 
  
  I don't see why it should depend on the amount of RAM, since it
  would normally be swap-backed.
 
 It should depend on the amount of RAM because putting /tmp in memory
 takes away from the RAM available to the rest of the system.  If your
 system typically runs processes that consume a lot of RAM (like
 Firefox, ha ha), your system could bog down a lot during typical use
 if you use a RAM disk for /tmp without considering how much RAM you
 have and need to use.  By default, I think, /tmp should be on the
 hard drive -- perhaps with an option when partitioning to set it up
 to use RAM instead of physical storage.

But it's not really a true RAM disk unless you use specify a malloc
backed md device - which you should never do because it keeps the /tmp
data in RAM unconditionally. 

tmpfs and swap-backed md devices normally used for /tmp are similar to
conventional partitions in that they are disk-based storage cached in
RAM. The difference is that because swap is ephemeral there's no need
to commit updates to the backing store except for memory management
reasons.

Most people's  /tmp requirements are pretty modest compared to
modern swap and RAM sizes, but my /tmp device is ~3 times RAM size and
it doesn't seem to create problems when I fill it. 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: / almost out of space just after installation

2009-10-10 Thread RW
On Sat, 10 Oct 2009 12:28:08 -0700 (PDT)
Richard Mahlerwein mahle...@yahoo.com wrote:

 The only time I can
 really think I'd want /tmp to be in RAM is if I already had too much
 RAM for the needs of the box - otherwise, just give me the RAM...

But it wouldn't actually be a ram disk, that's just just a misnomer
that people, who ought to know better, are throwing around. It
would probably be tmpfs.

 While I'm reasonably happy rolling my own FS sizes, I would be even
 happier if I didn't have to.  As long as we're doing the wish list,
 I'd guess for this (all numbers significantly flexible):
 
 Drive  16 GB = keep current layout?
 
 Drive  16 and  40 GB = 
 / = 1 GB
 swap = 1.5x RAM 
 /tmp = 2 GB
 /var = 2 GB
 /usr = remaining space

2 GB each for /var and /tmp is far too high for such  small disks, I
wouldn't want to squander 4GB like that much below a TB. It's a figure
that's hardly ever going to be about right either for /tmp or /var,
when it isn't far too big, it's likely to be too small.

 Drive  40 GB = 
 / = 1 GB
 swap = 1.5x RAM 
 /tmp = 2 GB
 /var = 2 GB
 /usr = 1/2 of remaining space, min 20 GB, max 35 GB
 /home = everything else.


Having a home directory separate from /usr is often a good idea, but
making it part of the default install is a really bad idea IMO. 

A desktop user with a largish disk may want  98% of it
under /home, a server may need next to nothing under /home. The amount
needed for /usr also varies enormously.

It's so hard to come-up with sensible values that the only sensible
thing to do is leave them on the same partition by default. It's not
exactly rocket science to add your own /home partition.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: / almost out of space just after installation

2009-10-10 Thread RW
On Sat, 10 Oct 2009 19:43:25 -0700 (PDT)
Richard Mahlerwein mahle...@yahoo.com wrote:

 --- On Sat, 10/10/09, RW rwmailli...@googlemail.com wrote:
 

 But it wouldn't actually be a ram disk, that's just just a misnomer
 that people, who ought to know better, are throwing around. It
 would probably be tmpfs.
 
 Correction (or at least correction to precision) noted.  I'd still
 rather use it as RAM the regular way.  :)

You can't, there is no regular way, it's not 1975 anymore:

http://varnish.projects.linpro.no/wiki/ArchitectNotes

If you allocate 1.5 x RAM to swap, your system will grind to a halt
long before you half-fill it with conventional paging, so you might as
well allow tmpfs to use a substantial amount to back /tmp.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: / almost out of space just after installation

2009-10-09 Thread RW
On Fri, 9 Oct 2009 17:28:09 +0200 (CEST)
Oliver Fromme o...@lurza.secnetix.de wrote:

 Randi Harper wrote:
   / = 1GB
   /var = 2GB
   /tmp = 2GB
 
 Depending on the size of installed RAM, /tmp could also
 be a memory disk by default. 

I don't see why it should depend on the amount of RAM, since it would
normally be swap-backed.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Updating the ports collection

2009-10-06 Thread RW
On Tue, 06 Oct 2009 15:43:56 -0700
Chris Stankevitz cstankev...@toyon.com wrote:

 
 The FreeBSD handbook section 4.5.1 describes several methods for 
 obtaining the ports collection including CVSup, Portsnap, and
 sysinstall.
 
 Section 4.5.1 also describes how to update the ports collection, but 
 only for the CVSup and Portsnap methods.
 
 Q1: How do I update the ports collection after using sysinstall to 
 obtain it?

I'd suggest that you don't use the tree from sysinstall, unless your
intent is not to update the tree until the next release.

If you use portsnap the tree gets overwritten with the extract, so
you might as well not bother with the on-disk version. 


If you use csup then the steps are 

1. Set the tag to match the port snapshot on the disc and run csup

2. Set the tag to . (the current tree) and run csup again

Step 1 does nothing to the tree, but if you skip it you may end with
some stale files left in your tree, which could cause serious problems.
IMO this is more trouble than it's worth unless you have a dialup
connection. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Disk Cloning

2009-09-29 Thread RW
On Mon, 28 Sep 2009 20:08:43 -0600 (MDT)
Warren Block wbl...@wonkity.com wrote:

 On Tue, 29 Sep 2009, RW wrote:
 
  On Tue, 29 Sep 2009 02:22:31 +0200
  Polytropon free...@edvax.de wrote:
 
  doing 1:1 copies with dd is always possible and will
  keep content identically; remember to copy the MBR separately
  with bs=512 and count=1 from the /dev/ad{source} device.
 
  Why?
 
 Because it contains the partition table.

Right, but why separately, rather than with the rest of the disk? 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: battery reconditioning

2009-09-28 Thread RW
On Mon, 28 Sep 2009 14:49:47 +0700 (ICT)
Olivier Nicole olivier.nic...@cs.ait.ac.th wrote:

 Hi,
 
  form time to time, there appears some error / warning
  messages in console, which say this:
  Sep 28 00:13:40 dell kernel: aac0: **Monitor** Battery needs
  reconditioning.
 
 What is your question?
 
 It informs you you should change the battery used on the RAID
 hardware, so change the battery :)

It says reconditioning rather replacing. Some battery types benefit
from an occasional deep discharge.

http://support.dell.com/support/edocs/software/svradmin/1.9/en/stormgmt/battery.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Disk Cloning

2009-09-28 Thread RW
On Tue, 29 Sep 2009 02:22:31 +0200
Polytropon free...@edvax.de wrote:

 doing 1:1 copies with dd is always possible and will
 keep content identically; remember to copy the MBR separately
 with bs=512 and count=1 from the /dev/ad{source} device.

Why?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Question about FreeBSD installation procedure

2009-09-26 Thread RW
On Sat, 26 Sep 2009 22:01:18 +0800 (WST)
Bret Busby b...@busby.net wrote:

 Hello.
 
 I have been interested in installing FreeBSD on my laptop (HP/Compaq
 NX5000, 2MB RAM), in a free 20MB partition.
 
 I noticed that the Linux Format magazine to which I subscribe, in
 Issue 124, comes with FreeBSD 7.2 on the DVD.
 
 From what I understand, FreeBSD (and possibly all BSD) uses hard
 disc slices rather than partitions, and therefore cannot
 easily be installed in a free partition, but needs for hard disc
 slices to be used.

A slice is a primary partition in IBM PC terminology. A disk can have
four primary partitions or three primary partitions and an extended
partition. The extended partition can contain logical partitions

 Is it yet possible to install FreeBSD into a hard disc partition,
 rather than needing to install into hard disc slices?

 I have attached a copy of the screenshot showing the partition table;

Attachments are stripped.

 I wanted to install FreeBSD into sda8.

Assuming that's a logical partition, then no. If you have less than
three primary partitions, you might be able to delete the logical
partition, shrink the extended partition and convert the free space into
a primary partition.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: net.inet.ip.random_id possible ASA problems?

2009-09-24 Thread RW
On Thu, 24 Sep 2009 09:21:21 -0400
Steve Bertrand st...@ibctech.ca wrote:


 IIRC, random_id allows initial TCP sequence numbers to be randomized.

I was a bit sceptical about that because it's inet.ip., not inet.tcp.

From a quick grep of the source it appears to be for setting the ip id,
for ip fragmentation.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: How to get pf to wait for ng0

2009-09-19 Thread RW
On Sat, 19 Sep 2009 22:30:14 -0500
Sam Fourman Jr. sfour...@gmail.com wrote:

 Hello list,
 
 I am trying to use FreeBSD 8 RC1 to setup L2 tunnels via mpd5.
 My problem is the pf.conf file is never parsed because ng0 does not
 exist yet on startup
 
 ng0 is this case is DSL PPPoE to our local telco for internet access.
 after the DSL dials up (via mpd5) if I do pfctl -d  pfctl -e -f
 /etc/pf.conf everything works as expected.
 
 What is the best way to get pf to wait and parse the ruleset until
 after ng0 exists?

Take a look at what /etc/rc.d/ppp does

Probably you need a script that runs after ng0 comes up and does
something similar. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: A question about the date Function

2009-09-16 Thread RW
On Wed, 16 Sep 2009 15:25:04 -0500
Martin McCormick mar...@dc.cis.okstate.edu wrote:


 date -j -f %a %b %d %T %Z %Y `date` +%s f0
 date +%s f1
 
 I then compared the outputs of f0 and f1 and they are identical.
 
   What does the long form of this command give us that
 date +%s fails to do?
 
   Nothing is broken, here. I am just curious. Thank you.


I suspect that the the long form is just an example designed to
demonstrate more than one thing in single  line rather than a practical
suggestion.

I used to use it in scripts and never questioned it until for some
reason it stopped working, and I tried the simpler alternative. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: difficult-to-phrase question...

2009-09-08 Thread RW
On Mon, 7 Sep 2009 18:34:15 -0700
Gary Kline kl...@thought.org wrote:

 On Tue, Sep 08, 2009 at 01:56:12AM +0100, RW wrote:

  Wouldn't you be better-off just turning-off session management, and
  using autostart instead
 
 
 
   sounds like a good idea; how do i accomplish this?  

The Session Manager  in Control Center lets you turn it off, and you
can drag application icons into  ~/.kde/Autostart  to have them
autostart instead.

 also,
 what if i have a  konqueror running and sites running and the power
 goes out. sometimes i want the apps to restart, not usually.  is it
 possible to save Some programs state and let others go?

The Session Manager lets you exempt applications, but I'm not sure if
you can distinguish  konqueror browsers from file managers though.

In other browsers crash recovery works independently of session
management, I think you probably do need it with konqueror but I'm not
sure.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Using mdconfig for swap space

2009-09-08 Thread RW
On Tue, 8 Sep 2009 16:51:20 -0500
Peter Steele pste...@maxiscale.com wrote:

 Are there any advantages to using mdconfig and creating a virtual
 disk for swap space as opposed to having a designated swap partition?
 For example, I could do something like this:
 
 mdconfig -a -t swap -f /var/swap0 -s 4g
 swapon -a /dev/md0

FWIW that's already supported by adding  swapfile=/var/swap0 to
rc.conf

Your arguments are wrong BTW -t swap creates a device *backed* by
swap. And the size comes from the size of the supplied file - which you
typically create with dd.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Error compiling KDE 3

2009-09-07 Thread RW
On Wed, 2 Sep 2009 20:08:26 -0500
Andrew Gould andrewlylego...@gmail.com wrote:

 On Wed, Sep 2, 2009 at 3:03 PM, Jerryges...@yahoo.com wrote:

  cd /usr/ports/security/gnutls
  make deinstall  make reinstall  make distclean
  cd -
  make install
 
  --
  Jerry
  ges...@yahoo.com
 
 
 The package list may have changed between version 2.6.4 and 2.8.3.  I
 would recommend replacing make deinstall, above, with:
 
 pkg_delete gnutls-2.6.4

There's no significant difference between make deinstall and
pkg_delete - the last time I checked there was only one port that
didn't use the default make deinstall target, which calls 
pkg_delete -f.

Usually this kind of thing happens because files moved between
ports, and the best thing is to remove all of the affected ports before
upgrading. Normally there's an UPDATING entry advising this. 

The FORCE_PKG_REGISTER method is a bit of cludge, but I gather it also
works for this kind of build problem. I guess it allows a repeat install
when a package has lost files due to a transient conflict.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: difficult-to-phrase question...

2009-09-07 Thread RW
On Wed, 2 Sep 2009 16:43:30 -0700
Gary Kline kl...@thought.org wrote:

 
   i can use grep to find S and grep gives me the file[s] that
   have the string.  now, is there any easy way of reading that
   file, or deleting or otherwise munging that file?
 
   nutshell is that every time i reboot (into kde), kde wastes
   time/cpu spawning unwanted whatever: versions of konqueror,
 kttsd, ksayit, 

Wouldn't you be better-off just turning-off session management, and
using autostart instead
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: SUID permission on Bash script

2009-08-29 Thread RW
On Sat, 29 Aug 2009 00:06:29 -0700
per...@pluto.rain.com wrote:

 Michael David Crawford m...@prgmr.com wrote:
  It's not that setuid shell scripts are really more
  inherently insecure than programs written in C.
 
 Actually, absent some careful cooperation between the kernel
 and the interpreter to prevent a race condition that can cause
 the interpreter to run (with elevated permissions) a completely
 different script than the one that was marked setuid, setuid
 scripts _are_ insecure in a way that _cannot_ be fixed by any
 degree of care that might be taken in the writing of the script.
 
 Check the hackers@ archives.  It was discussed a little over a
 month ago.

But is isn't that the same issue that Matthew Seaman was saying was
fixed years ago (in the link I gave before), and is described in the
follow-up:

http://www.mail-archive.com/freebsd-questions@freebsd.org/msg185145.html

That's entirely in the kernel, it doesn't require interpreter support.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: SUID permission on Bash script

2009-08-28 Thread RW
On Fri, 28 Aug 2009 11:54:19 +0300
Giorgos Keramidas keram...@ceid.upatras.gr wrote:

 On Fri, 28 Aug 2009 09:24:35 +0100, Jeronimo Calvo
 jeronimocal...@googlemail.com wrote:

  As far as i know, using SUID, script must runs with root
  permissions... so i shoudnt get Permission denied, what im doing
  wrong??
 
 No it must not.  There are security reasons why shell scripts are not
 setuid-capable.  You can find some of them in the archives of the
 mailing list, going back at least until 1997.

I'm bit puzzled by this, previous threads have given the impression
that this is a myth, for example:

http://www.mail-archive.com/freebsd-questions@freebsd.org/msg185134.html

So are scripts actually incapable of running setuid?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Can partitions span more than one drive?

2009-08-26 Thread RW
On Wed, 26 Aug 2009 08:45:47 -0400
John Almberg jalmb...@identry.com wrote:


 Question: is it possible to just expand my existing /backup
 partition to encompass both the current drive and the new drive? I'm
 guessing not, since Chapter 8 in Absolute FreeBSD says that a
 partition is part of a slice, 

You can join 2 partitions into 1 with gconcat. OTOH that would wipe any
existing data as you would need to put a new filesystem on the combined
partition.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: /etc/rc.d/named dilemma

2009-08-22 Thread RW
On Fri, 21 Aug 2009 21:37:09 -0700
Nerius Landys nlan...@gmail.com wrote:

 Then why
 can't I do a lookup right after named starts?

Possibly it's a delay in bind being ready or maybe you don't have any
network access - the latter is common with ppp.


 By the way, the underlying issue that I'm trying to address is that
 ntpdate, which comes right after named in the boot sequence, is not
 able to resolve the DNS for the time servers.


Try putting the following in /usr/local/etc/rc.d/waitfordns and make it
executable (untested)

 
#!/bin/sh
#
# PROVIDE: waitfordns
# REQUIRE: named
# BEFORE:  ntpdate

. /etc/rc.subr

: ${waitfordns_enable:=yes}
name=waitfordns
rcvar=`set_rcvar`
stop_cmd=:
start_cmd=waitfordns_start   


waitfordns_start(){

   /usr/bin/dig +time=1 +retry=99 @127.0.0.1 google.com 21  /dev/null

}

load_rc_config ${name}
run_rc_command $1
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Packages available for different FreeBSD versions

2009-08-20 Thread RW
On Thu, 20 Aug 2009 07:05:27 -0500
Andrew Gould andrewlylego...@gmail.com wrote:

 On Mon, Aug 17, 2009 at 9:27 PM, RWrwmailli...@googlemail.com wrote:
  On Mon, 17 Aug 2009 17:41:12 -0500
  Andrew Gould andrewlylego...@gmail.com wrote:
 
  STABLE is what it sounds like.
 
  I don't think it is what it sounds like - STABLE branches are
  development branches with stable binary interfaces. It's the
  security branches that are intended for production use.
 
 
 From:
 http://www.freebsd.org/doc/en_US.ISO8859-1/articles/version-guide/index.html
 
 During the lifetime of each major release, an individual branch may
 also be termed STABLE. This indicates that the FreeBSD Project
 believes that the branch is of sufficiently proven quality to be used
 by a wide range of users.

Right, sufficiently proven quality to be used by a wide range of users
for beta testing.

I'm not saying that the stable branches shouldn't be used for production
use, just that it's inadvisable to use them without a clear
understanding of the reason why.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: digital camera and devd

2009-08-20 Thread RW
On Thu, 20 Aug 2009 19:54:37 +
Michal m...@infosec.pl wrote:

 Hello,
 
 I've got a Canon digital camera set up and working with gphoto2 via 
 devfs+devd but it's not elegant/clean enough:
 ...
 Problem with this solution is that it changes owner for all /dev/usb 
 files i.e. usb, usb0, usb1, usb2 and usb3.
 
 How can I check exactly which /dev/usb* entry corresponds to my
 camera? And by the way /dev/usb3 means port 3, hub 3 or what are they?

I'm not very familiar with  devfs+devd, but can you not use glabel to
give the camera a persistent name.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Packages available for different FreeBSD versions

2009-08-17 Thread RW
On Mon, 17 Aug 2009 17:41:12 -0500
Andrew Gould andrewlylego...@gmail.com wrote:

 STABLE is what it sounds like. 

I don't think it is what it sounds like - STABLE branches are
development branches with stable binary interfaces. It's the security
branches that are intended for production use.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Managing encrypted disks

2009-08-13 Thread RW
On Thu, 13 Aug 2009 22:10:19 -0400
Steve Bertrand st...@ibctech.ca wrote:

 What I'd like to know, is if it's possible to somehow check to see if
 there are any GELI 'attach'ed disks on a given system that have not
 yet been mounted (or, iow, were umount'd, but were left attached).
 
 #dmesg doesn't say much in this regard, and I couldn't find out by
 listing /dev either.

Attached partitions show in /dev as  *.eli, mount tells you what is
mounted. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Freebsd-update question

2009-08-08 Thread RW
On Sat, 8 Aug 2009 07:16:15 -0700 (PDT)
Richard Mahlerwein mahle...@yahoo.com wrote:

 I thought I'd give freebsd-update a try since I run a GENERIC kernel.
 
 mobius# freebsd-update -s update.freebsd.org fetch
 Looking up update.freebsd.org mirrors... none found.
 Fetching public key from update.freebsd.org... failed.
 No mirrors remaining, giving up. 

Can you access the svr record?

$ dig +short _http._tcp.update.freebsd.org srv
1 50 80 update5.FreeBSD.org.
2 10 80 update1.FreeBSD.org.
1 35 80 update4.FreeBSD.org.

If not try running freebsd-update with servers 4 and 5.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Freebsd-update question

2009-08-08 Thread RW
On Sat, 8 Aug 2009 11:14:10 -0700 (PDT)
Richard Mahlerwein mahle...@yahoo.com wrote:


 mobius# dig +short _http._tcp.update.freebsd.org srv
 (returns nothing)

This is typically either due either to broken SRV support in DNS, or
the absence of full dns on a private network behind proxies. Perhaps
you need to set HTTP_PROXY.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: KDE3 -- KDE4

2009-08-07 Thread RW
On Thu, 6 Aug 2009 17:33:38 -0700
Gary Kline kl...@thought.org wrote:

i'd be interested in Paul's question.  it may be that kde3
   is sopping up wy to much disc space.  only have 6.5g 
   left

KDE4 makes  KDE3 look like Fluxbox.

I can't remember  the exact figures on /usr, but I maintain my ccache
by timestamp, and it rose from 3.2GB to 7.9GB after adding KDE4. And
that 3.2GB figure included kde3 (including KOffice), xfce, fluxbox,
windowmaker, icewm and numerous gui and server applications.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: KDE3 -- KDE4

2009-08-07 Thread RW
On Thu, 06 Aug 2009 19:53:05 -0500
Paul Schmehl pschmehl_li...@tx.rr.com wrote:

 --On August 6, 2009 7:15:18 PM -0500 Andrew Gould 
 andrewlylego...@gmail.com wrote:

  Unless things have changed very recently, KDE4 is in its own
  directory folder.  This may imply that KDE3 and KDE4 can coexist.
 
  As always, YMMV.
 
 I was looking for something a little more definitive, like I upgraded
 like this, and here's the problems I ran into.
 
 I don't want to run KDE3 and KDE4 side by side.  I want to migrate
 from the former to the latter.

There was some speculation that stability problems are exacerbated by
having both versions, so it's sensible to remove kde3.

AFAIK there is no automatic migration, it's like installing a different
desktop. I know you can copy wallet files across, and you can probably
carry some other data over, but for the most part it isn't worth it.

I'd suggest you back-up or rename your .kde and .kderc to keep them
safe. KDE4 is very much the new coke of desktops. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: KDE3 -- KDE4

2009-08-07 Thread RW
On Fri, 7 Aug 2009 09:12:03 -0500
Andrew Gould andrewlylego...@gmail.com wrote:


 Is there an increase in usability/benefit to match the increase in
 resource consumption?  (Please forgive me - I know that's a horribly
 subjective question.)


IMO it's less usable in terms of ergonomics, and they are still talking
about catching-up with kde3 in terms of features and configurability.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: kernel designations terminology confusion -- amd64 used for into quad core

2009-08-06 Thread RW
On Wed, 5 Aug 2009 14:14:49 +0100
David Southwell da...@vizion2000.net wrote:

 Hi every one
 
 My understanding is that one uses the amd64 for building a kernel for
 systems with Intel Quad Core processors.
 
 It is helpful when naming conventions follow a logical strand. I mean
 why does freebsd use a single manufacturer's name to represent a
 genre? 


The time to complain about that was when they put the i in i386.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Secure password generation...blasphemy!

2009-08-04 Thread RW
On Mon, 3 Aug 2009 22:20:50 -0800
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

 On Monday 03 August 2009 18:28:52 Modulok wrote:
 
  I wrote a python script which uses /dev/random, and hashes the
  output with sha256. I then truncate the output to the desired
  length. Blasphemy! According to the superstitious password crowd my
  passwords are not very secure ... maybe.
 
 They aren't, because you reduce the random to a much less random,
 *because* you are hashing.

Not in FreeBSD, it's a 256bit PRNG and a 256 bit hash.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Secure password generation...blasphemy!

2009-08-04 Thread RW
On Mon, 3 Aug 2009 20:28:52 -0600
Modulok modu...@gmail.com wrote:

 However, wouldn't hashing bytes from /dev/random be quite secure? The
 hash function would cover any readily apparent patterns, if they were
 found to existed.

That's fine, the only issue is that hex digits lead to long passwords
for a given stength. 

Most password generators are OK, provided that they ultimately
derive a sufficiently strong seed  from /dev/random and don't do
anything stupid, this includes things like jot, which uses the
arc4random library.

The main problem is that there are still a few generators around, IIRC
sysutils/pwgen is one, that still seed from the time and the pid, so I
wouldn't use a generator unless I'd seen the source.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Secure password generation...blasphemy!

2009-08-04 Thread RW
On Tue, 4 Aug 2009 10:42:22 -0600
Modulok modu...@gmail.com wrote:

 As I understand it I would have to double the length of a hashed
 password for it to be as secure as an un-hashed one, as each pair of
 characters represent one byte. Aye?

I wouldn't put it quite like that, it's the hexadecimal representation
that puts one bytes into two characters not the hashing.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: not dead [yet].

2009-08-04 Thread RW
On Tue, 4 Aug 2009 16:32:54 -0400
Glen Barber glen.j.bar...@gmail.com wrote:
 

         Meanwhile: how do I get rid of a truckload of old binaries
  that I rarely/never use?  Most show a list of dependencies that's
  about 70 lines long, and I don't want to break things.
 
 
 ports-mgmt/pkg_cutleaves may be what you're looking for.


Or portmanager -slid which is a bit easier to use for a one-off
cleanup, and also understands build-dependencies.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Secure password generation...blasphemy!

2009-08-04 Thread RW
On Mon, 3 Aug 2009 22:34:27 -0400
Bill Moran wmo...@potentialtech.com wrote:

 Modulok modu...@gmail.com wrote:
 
  I need a way to generate a lot of secure passwords. So, I read all
  about it. Either people are getting way carried away, or I'm missing
  something...
 
 You could just use apg ... it's in the ports.



By the look of it this was originally DES-based, and was upgraded to use
CAST or SHA1.  However the seeding from /dev/random seems to have been
left at 64 bits (the DES blocksize) plus some extra from
gettimeofday(). In practice it's probably good enough, it just seems a
bit lame.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ntpd / time synchronization

2009-07-29 Thread RW
On Wed, 29 Jul 2009 08:48:44 +0200
Zbigniew Szalbot z.szal...@lcwords.com wrote:

 Hello,
 
 Jerry pisze:
 
  ntpd_enable=YES
  ntpd_flags=-g -c /etc/ntp.conf -p /var/run/ntpd.pid
  -f /var/db/ntp.drift
  
  Assuming you are running the system ntpd file, the above are not
  really required. They are the defaults anyway. Try commenting out
  the line and restarting ntpd.
 
 Thank you Jerry - that was the problem. If you want to run a default 
 nptd service, you should not have any ntpd flags in the rc.conf file.

I doubt it, I think you must have done something else to fix it. The
only difference between what you had, and the defaults is the -g
option. That option just allows ntpd to make an initial unlimited
correction rather, rather than exiting if the clock is out by 1000s. 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: linux emulator

2009-07-24 Thread RW
On Fri, 24 Jul 2009 10:58:05 -0400
PJ af.gour...@videotron.ca wrote:

 Let's try 3 questions, all related.
 1. Which linux emulator is one supposed to use or is this something
 that should not be installed and left to be handled as a dependency
 by ports?
 
 2. I am trying to install ogle on FreeBSD 7.2 running on amd64. I have
 installed linux-base-fc4.

What are you trying to do exactly? Ogle is in ports, and has no linux
dependencies.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: disk encryption with geli

2009-07-24 Thread RW
On Fri, 24 Jul 2009 17:17:49 +0200
Stefan Miklosovic miklosovic.free...@gmail.com wrote:

 hi all
 
 i am going to encrypt my /home directory
 which is mounted in /etc/fstab like
 
 /dev/ad0s2f /home   ufs rw,noatime

I think that should be /dev/ad0s2f.eli in fstab.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: jpeg-7 - rebuild all dependencies - how?

2009-07-24 Thread RW
On Fri, 24 Jul 2009 08:28:14 -0800
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

 On Friday 24 July 2009 05:52:37 chris scott wrote:
 
  maybe it would be a good idea for ports to have an event log like
  yum does on centos. Just a simple log of stuff added, removed, and
  upgraded. It would be invaluable in this situation as you could see
  what was removed and it would be fairly easy to recover. It just
  may take a little time.
 
 Err, this is available through cvs log/cvs diff.

I believe he's referring to a log of package installs and deletes. 

What would probably be more useful, is to periodically write out an
ordered list of leaf-origins, then you can just diff today's file with
an older copy. I used to have a script for it, but it fell-off. I think
package-cut-leaves keeps a similar list.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ULE and Prescott question

2009-07-23 Thread RW
On Wed, 22 Jul 2009 22:33:46 +0200
Ivan Voras ivo...@freebsd.org wrote:

 Scott Bennett wrote:
   This is a curiousity question.  I'm running 7.2-STABLE at
  present on an old Inspiron XPS, which has a 3.4 GHz P4 Prescott
  CPU.  I have hyperthreading enabled in the kernel.  The question
  is:  is there any appreciable performance difference to be expected
  with this hardware setup between the ULE scheduler and the 4BSD
  scheduler?  Or does the fact that there is only one core eliminate
  any difference in performance characteristics?
 
 I'd guess the second thing. It's not like there's cache to be shared
 between cores, etc. 

But with hyperthreading enabled, don't you have virtual CPUs sharing
L1 cache rather that cores sharing L2 cache, making the case for ULE
even stronger?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: backticks in rc.conf

2009-07-21 Thread RW
On Tue, 21 Jul 2009 14:18:37 +0300
Giorgos Keramidas keram...@ceid.upatras.gr wrote:


 There's a catch here that may go unnoticed for a while...
 
 rc.conf may be sourced by /etc/rc *long* before filesystems are
 mounted.  As a result grep or awk may be not be available and stop
 rc.conf from loading.

rc.conf is sourced for each rcng script
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: question

2009-07-17 Thread RW
On Fri, 17 Jul 2009 10:51:57 -0700 (PDT)
Zohreh zohreh...@yahoo.com wrote:

 Dear Sir/Madam 
  
 i have a question about free bsd and squid that was installed on it.
 i insatlled squid 2.6 stabled 20 on freebsd 7. and i enabled firewall
 on freebsd . now i brows http sites on internet but i cannot brows
 ftp site and i cannot pass pop3 through of my squid .

Squid doesn't proxy pop3, it will only proxy ftp if the client is
configured to use a proxy - interception doesn't work with ftp.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: portupgrade question

2009-07-08 Thread RW
On Thu, 9 Jul 2009 08:00:28 +1200
Jonathan Chen j...@chen.org.nz wrote:

 On Wed, Jul 08, 2009 at 02:50:17PM +0200, dan wrote:
  THat's the point !
  
  isnt that -R implied by -N ?
  
  From the portupgrade  man page 
  
  
  [...]
  -N
  --new
  Install a new port/package when a specified package is not
  installed. Prior to the installation a new port/package, all the
  required packages are upgraded.
 
 No. Since the dependant package *is* installed. It's just not up
 to date.

I don't understand what you're are saying here. My reading of the
manpage is the same as Dan's: when you install kdeadmin with
portupgrade -N, everything that kdeadmin requires will be upgraded i.e.
brought up to date. 



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: How to symlink devfs devices?

2009-07-08 Thread RW
On Wed, 8 Jul 2009 21:45:48 +0200
Roland Smith rsm...@xs4all.nl wrote:

 On Wed, Jul 08, 2009 at 05:49:24PM +, Paul B. Mahol wrote:
  
   Is it possible to create a symlink to a device and use the
   symlink in place of the real device name in FreeBSD, especially
   in version 7.2?
  
   1. A disk
  /dev/camera - /dev/da0s1
 
  devfs.conf(5)
 
 Geneally, yes. But not in this case, I think. You don't want any old
 usb device to be linked to /dev/camera! USB devices are enumerated in
 the sequence thay are plugged in. So there is no hard guarantee that
 the camera will always be available as da0s1. It might be da1s1 if
 another USB drive was plugged in earlier.
 
 And not all cameras represent themselves as disk devices (USB mass
 storage). Lots of modern ones use PTP
 [http://en.wikipedia.org/wiki/Picture_Transfer_Protocol].
 
 So in this case it might be better to use HAL (via hald(8))
 [http://freedesktop.org/wiki/Software/hal]

although if it is a standard usb mass storage device, you can mount it
via it's msdos volume label, or a generic label written to the device by
glabel. Both methods are described in the glabel(8).

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: question

2009-07-07 Thread RW
On Tue, 07 Jul 2009 01:46:45 -0400
DJ Lawless jlawless...@aol.com wrote:

 Do you need to become a member of freeBSD to get a freeBSD.org email
 address?
 
 if yes how do you become a member?

If you have to ask, it's not going to happen.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: sysctl gnome2

2009-07-04 Thread RW
On Sun, 05 Jul 2009 01:36:33 +0200
Roy Stuivenberg roys1...@gmail.com wrote:

 Hello,
 
 Sometimes when I send a message with pidgin, or evolution, the
 application shuts down.
 Is there an option with sysctl, that would prevent this to happen?

sysctl is an interface to the kernel, it doesn't know anything about
third-party, high-level applications.

The behaviour you describe sounds more like a bug than a feature, but
if there is a way to turn it off it will be in the gnome or application
configuration.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Using ctorrent or other program to seed a torrent

2009-06-28 Thread RW
On Sun, 28 Jun 2009 13:31:41 -0700
Kelly Jones kelly.terry.jo...@gmail.com wrote:

 I know how to use ctorrent to create a torrent file, but how do I
 actually seed the resulting file so that others can get it, and how do
 I 'register' myself w/ a tracker so that others will know what IP
 address to connect to, etc?

There are two kinds of trackers, closed and open. With a closed tracker
you usually have to upload the torrent file on a website. With open
trackers you don't need to do anything other than specify the URLs of
the trackers when you create the torrent file.

 
 Can ctorrent seed torrents, or do I need another program for that?

I would imagine so, or you wouldn't be able to seed after downloading.

With most clients you can place the file or directory in the download
location, load the torrent file and then tell the client to verify the
download. It'll then detect that it's complete and switch to seeding. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: The question of moving vi to /bin

2009-06-28 Thread RW
On Thu, 25 Jun 2009 16:15:12 -0500
Gary Gatten ggat...@waddell.com wrote:

 I like M$ Notepad - is there a version of that for FBSD? 

Actually, there is. Wine implements it's own version of notepad.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: upgrading installed ports: time to do it ?

2009-06-25 Thread RW
On Thu, 25 Jun 2009 20:20:12 +0100
Chris Whitehouse cwhi...@onetel.com wrote:

 RW wrote:

  Portmanger does cope with most of the portupgrade -o  and
  portupgrade -r entries, although sometime it will need to be run
  (or rerun) in pristine-mode. 
 
 just curious, do you know this because you know how they all work or 
 have you tried them. And how does portmaster fit in? Does it use the 
 same 'leaf-nodes first' algorithm as portmanager?

It's leaf-last, the leaves are on the top of the tree. 

All the upgrade tools build in dependency order, but portmanager also
rebuilds ports that directly depend on the ports it's upgraded
(originally it included indirect dependencies, but that's now only done
in pristine mode). In other words it, more or less, does the equivalent
of portupgrade -fr as a matter of course.

As regards portupgrade -o, it depends on the circumstances. In the
case of perl5.8 to perl5.10, I would expect that it would continue with
perl5.8 until something actually needs perl5.10. It would then detect
a conflict, remove perl5.8, install perl5.10 and then rebuild everything
that depended on perl5.8. Essentially it would do the right thing. I'm
not sure about python, it's bit more complicated, but I would guess it
would be similar to perl.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Best practices for securing SSH server

2009-06-24 Thread RW
On Tue, 23 Jun 2009 22:37:12 +0200
Erik Norgaard norga...@locolomo.org wrote:


 You're right, as long as port-knocking as a first pass authentication 
 scheme is not in wide spread use, then any attackers will not waste
 time port-knocking. If ever port-knocking becomes common, attackers
 will adapt and start knocking.

It would be fairly straightforward to prevent that by having a
combination of knocking ports and secret guard ports. When a guard port
gets hit the sequence is broken, and the source IP gets blocked for a
while.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Best practices for securing SSH server

2009-06-24 Thread RW
On Wed, 24 Jun 2009 17:12:59 +0200
cpghost cpgh...@cordula.ws wrote:


 It all boils down to this: do you login from a secure machine
 or not? Each tool has its own set of uses. When I want to log in
 from a public terminal, I prefer OPIE; 

OPIE is probably fine in almost all cases, but you may wish to read the
following thread:

http://comments.gmane.org/gmane.os.freebsd.security.general/9272

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: upgrading installed ports: time to do it ?

2009-06-23 Thread RW
On Tue, 23 Jun 2009 22:21:21 +0100
Chris Whitehouse cwhi...@onetel.com wrote:

 RW wrote:
  On Mon, 22 Jun 2009 20:58:41 +0100
  Chris Whitehouse cwhi...@onetel.com wrote:
  
  I'll probably get flamed for this but since I've been using 
  ports-mgmt/portmanager I've almost forgotten
  about /usr/ports/UPDATING and all that pkgdb -Fu stuff or whatever
  it was. I've upgraded ports just by doing 'portmanager -u' over
  one or two quite major changes and not had any problems that
  haven't been down to an individual ports.
  
  You still need to read UPDATING, portmanager handles some of the
  issues automatically, but not all.
 
 Not trolling but can you give me some examples?

Many of of the entries aren't solely to do with guiding
portmaster/portupgrade through the upgrade, they may also involve
migrating configuration or user data, or performing other
administrative tasks.

Portmanger does cope with most of the portupgrade -o  and
portupgrade -r entries, although sometime it will need to be run (or
rerun) in pristine-mode. 

However, it doesn't always work correctly when software has been
repackaged because this can create temporary unrecorded conflicts
which are difficult for any tool to deal with. If you see any
instructions to remove packages before upgrading, it's prudent to follow
them. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: upgrading installed ports: time to do it ?

2009-06-22 Thread RW
On Mon, 22 Jun 2009 20:58:41 +0100
Chris Whitehouse cwhi...@onetel.com wrote:

 I'll probably get flamed for this but since I've been using 
 ports-mgmt/portmanager I've almost forgotten
 about /usr/ports/UPDATING and all that pkgdb -Fu stuff or whatever it
 was. I've upgraded ports just by doing 'portmanager -u' over one or
 two quite major changes and not had any problems that haven't been
 down to an individual ports.

You still need to read UPDATING, portmanager handles some of the
issues automatically, but not all.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Program update(s)

2009-06-13 Thread RW
On Sat, 13 Jun 2009 12:09:17 +0200
Jos Chrispijn j...@webrz.net wrote:

 
 RW wrote:
  For the most part you don't, you can just run perl-after-upgrade.

  
 Good suggestion, thanks.
  If you are referring to the switch from lang/perl5.8 to
  lang/perl5.10, then that's exceptional and optional.

  
 Exceptional oke, but optional? I have to make sure that all related 
 programs are in line with this version; 

It's optional to go from lang/perl5.8 to lang/perl5.10.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Program update(s)

2009-06-12 Thread RW
On Fri, 12 Jun 2009 21:47:39 +0200
Jos Chrispijn j...@webrz.net wrote:

 Can someone tell me why I have to recompile all related programs when
 I upgrade to a newer version of Perl? 

For the most part you don't, you can just run perl-after-upgrade.

If you are referring to the switch from lang/perl5.8 to  lang/perl5.10,
then that's exceptional and optional.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Which nVidea driver to install

2009-06-08 Thread RW
On Mon, 08 Jun 2009 02:26:34 -0400
Michael Powell nightre...@verizon.net wrote:


 To install the nvidia-driver port a kernel module named nvidia.ko is 
 compiled. This module requires linux.ko to be loaded first. The
 reason is the nvidia-driver itself is a linux binary blob, and
 consequently must utilize the linuxolator to run. Very simple
 concept. 

Simple, but wrong. 

The driver is not a Linux driver, if you go to the nVidia site you will
see that there are separate Linux and FreeBSD drivers. You don't need
to load linux.ko at all if you built nvidia.ko without Linux support.

 The OpenGL support is part of the install. It is not related to any
 so called 'optional support for Linux binaries'. Ask yourself this:
 when you run glxgears is glxgears a linux binary or was it compiled
 as a FreeBSD binary?

Clearly you don't need Linux support to run the native glxgears, but you
would if you wanted to run a Linux glxgears binary.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Which nVidea driver to install

2009-06-07 Thread RW
On Sun, 07 Jun 2009 20:13:30 -0400
Michael Powell nightre...@verizon.net wrote:

 The nv can easily be installed along with Xorg. The nvidia driver is
 more complex as it relies on the linuxolator to function, so there is
 a larger number of dependencies. 

I think that's misleading, AFAIK it's more a case that it can optionally
support OpenGL for Linux binaries, in which case it acquires some Linux
dependencies.

 Sometimes with laptop built-in chips it can be difficult to get
 things going because of a non-standard resolution requiring a
 non-standard modeline. In such situations the nv xorg driver will
 probably be easier to get going. The ultimate fallback is VESA mode,
 but nobody wants that if it can be avoided.

I've never had a problem with either, they both have their own
configuration program to generate xorg.conf

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: burncd

2009-06-07 Thread RW
On Sun, 7 Jun 2009 21:11:58 -0400 (EDT)
Chuck Bacon c...@cape.com wrote:


 Is there a better tool than burncd? 

I've used burncd for CD's, but for DVDs I follow the handbook, and have
never had any problems:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/creating-dvds.html

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Driver for nVidia Geforce 6150LE

2009-06-06 Thread RW
On Sat, 6 Jun 2009 15:00:48 +0100
Mike Clarke jmc-freeb...@milibyte.co.uk wrote:

 On Saturday 06 June 2009, Jerry wrote:
 
  I did notice a driver on the nVidia page for FreeBSD x86, version #
  185.18.14, released June 5, 2009; however, the version is the ports
  is: 180.44, which has actually been superseded four times since its
  release by nVidia.
 
  Would the x86 driver work in 64 bit FreeBSD or do I have to install
  the x86 version instead?
 
 No, in the absence of a 64 bit driver from Nvidia you'd need to use
 the nv driver included in the xorg-drivers port. I had quite a
 struggle to get the nv driver to give me a 1280x1024 display.

You wont get effects in Gnome or KDE4 with nv either. In my experience
it also uses a lot more cpu just to basic things like web browsing, and
movies.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: top view different screens

2009-06-02 Thread RW
On Tue, 02 Jun 2009 06:50:34 +0100
Matthew Seaman m.sea...@infracaninophile.co.uk wrote:

 Momchil Ivanov wrote:
 
  how can I view the second and third screens in top? Is it possible?
 
 Ah, now for that you'ld have to use middle(1) and bottom(1),
 Unfortunately no one has written them yet...
 
 Seriously though: you can run top in an xterm and make the window as
 tall as you can bear, you can filter the top output by username, turn
 the display of idle processes on or off, sort the output order by any
 of the columns shown, or else you can forget top(1) entirely and use
 ps(1) to examine the whole process list.

or you can do something like

top 999 |less  

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Set task priority

2009-06-02 Thread RW
On Tue, 02 Jun 2009 19:19:49 -0400
Greg Larkin glar...@freebsd.org wrote:


 I had the same situation here, and nice(1) wasn't cutting it for me.
 I finally switched to idprio(1):
 http://www.freebsd.org/cgi/man.cgi?query=idpriosourceid=opensearch
 
 idprio 31 mysqldump .
 
 will run only when other processes are idle.  That should prevent any
 further self-incurred DOS symptoms for you.

IIRC idprio can actually make things worse under heavy load, because it
can lead to priority inversion. I think that's why you have to be root
to set it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: find and searching for specific expression in files

2009-05-30 Thread RW
On Sat, 30 May 2009 14:12:50 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

 On Saturday 30 May 2009 13:56:22 Valentin Bud wrote:
  2009/5/30 Zbigniew Szalbot z.szal...@lcwords.com

   You can use egrep -r * (grep -e) to search for specific text
  pattern while you are in a directory with many sub directories. The
  output is nice because it tells you the file in which the text
  pattern was found :).
 
 Discouraged because:
 - it's possible to hit maxarglen if the root directory has many 
 subdirectories.
 - Will not search hidden directories in the root directory because of
 the shell glob

You can replace egrep -r string * with egrep -r string .
i.e. recurse from the current directory, rather than search or recurse
on everything that matches *. That avoids the first two problems, and
most of the time the third doesn't matter

 - cannot be combined with other search criteria such as the file's
 timestamp.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: removing distfiles?

2009-05-28 Thread RW
On Thu, 28 May 2009 07:49:12 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

 On Thursday 28 May 2009 03:13:46 RW wrote:
  On Wed, 27 May 2009 22:56:10 +0200
 
  Roland Smith rsm...@xs4all.nl wrote:
   Using e.g. 'portmaster --clean-distfiles-all' only removes those
   distfiles that do not belong to installed ports.
 
  I've not used it myself, but there is also a shell script called
  distviper in bsdadminscripts which supports both of distclean's
  modes without the ruby dependence.
 
 What ruby dependence in portmaster? He said portMASTER not
 portUPGRADE.

I wrote: supports both of distclean's modes without the ruby
dependence. 

Portmaster only supports one of the modes, distclean has a ruby
dependence.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: removing distfiles?

2009-05-28 Thread RW
On Thu, 28 May 2009 12:24:30 +0100
RW rwmailli...@googlemail.com wrote:

 On Thu, 28 May 2009 07:49:12 +0200
 Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
 
  On Thursday 28 May 2009 03:13:46 RW wrote:
   On Wed, 27 May 2009 22:56:10 +0200
  
   Roland Smith rsm...@xs4all.nl wrote:
Using e.g. 'portmaster --clean-distfiles-all' only removes those
distfiles that do not belong to installed ports.
  
   I've not used it myself, but there is also a shell script called
   distviper in bsdadminscripts which supports both of distclean's
   modes without the ruby dependence.
  
  What ruby dependence in portmaster? He said portMASTER not
  portUPGRADE.
 
 I wrote: supports both of distclean's modes without the ruby
 dependence. 
 
 Portmaster only supports one of the modes, distclean has a ruby
 dependence.


Sorry, that should have been portsclean not distclean.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: superpages?

2009-05-28 Thread RW
On Thu, 28 May 2009 17:17:38 +0200
cpghost cpgh...@cordula.ws wrote:


 The following excerpt from:
   http://www.freebsd.org/releases/7.2R/relnotes-detailed.html
 may be helpful:
 
   [amd64, i386] The FreeBSD virtual memory subsystem now supports
   fully transparent use of superpages for application memory;
   application memory pages are dynamically promoted to or demoted from
   superpages without any modification to application code. This change
   offers the benefit of large page sizes such as improved virtual
   memory efficiency and reduced TLB (translation lookaside buffer)
   misses without downsides like application changes and virtual memory
   inflexibility.

Just out of idle curiosity, how does it work at the page queue level.
Most of the references to superpages are in pmap.c and vm_reserv.c. I
don't see any special handling in the pageout daemon where the inactive
and active queues are handled. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What is this forum for?

2009-05-28 Thread RW
On Thu, 28 May 2009 23:38:46 +0200 (CEST)
Wojciech Puchar woj...@wojtek.tensor.gdynia.pl wrote:


 i repeated what i read recently about ICE ON ARCTIC SEA melting that
 will flood.
 
 Even knowledge from primary school physics and no single calculation
 is enough to prove that water level will not change at all.

Even for you this is a new low. When you learned about Archimedes
principle did they not teach you about thermal expansion - or did you
just assume that as the ice melts everything remains at the same
temperature. 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: What is this forum for?

2009-05-28 Thread RW
On Fri, 29 May 2009 00:53:53 +0200 (CEST)
Wojciech Puchar woj...@wojtek.tensor.gdynia.pl wrote:

  is enough to prove that water level will not change at all.
 
  Even for you this is a new low.
 
 just another attack? you really can't discuss like a human? I think
 you can, but you like behave in me too style. others are agains,
 you must be too!

Do you not think it's a bit arrogant to ridicule the climate scientists
based on what you yourself referred to as knowledge from primary school
physics and no single calculation?
 
 about thermal expansion - water will be roughly the same temperature, 
 maybe globally few degrees more. check out how much water expands
 really.
 

It's not just the melt water, it's the temperature of the water in
the oceans, which is maintained by convection currents. Most of the
water in the world is held at 2-4 Celsius by these currents. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: removing distfiles?

2009-05-27 Thread RW
On Wed, 27 May 2009 22:56:10 +0200
Roland Smith rsm...@xs4all.nl wrote:


 Using e.g. 'portmaster --clean-distfiles-all' only removes those
 distfiles that do not belong to installed ports.

I've not used it myself, but there is also a shell script called
distviper in bsdadminscripts which supports both of distclean's modes
without the ruby dependence.

Personally I much prefer the less aggressive mode (distclean -D) which
deletes files unreferenced by the ports tree, rather than unreferenced
by installed ports.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: removing distfiles?

2009-05-27 Thread RW
On Wed, 27 May 2009 21:34:58 -0400
Robert Huff roberth...@rcn.com wrote:

 
 RW writes:
 
   Personally I much prefer the less aggressive mode (distclean -D)
   which deletes files unreferenced by the ports tree, rather than
   unreferenced by installed ports.
 
   I use -DD.  With nearly 1000 ports on one machine, it's
 important to realize many ports go months (and some years) between
 updates and pain of downloading a fresh copy is minimal given a half
 decent net connection.

That's what I used to think until I  deleted some java distfiles, and
had to go though the rigmarole  of getting all the various files
manually. There's also the possibility that a distfile gets rerolled
and local copy is the only one that matches the port checksums. Disk
space is cheap, the extra files don't add up to much in practice. The
real advantage of cleaning comes from not have ten copies of kdebase
and the like.

Deleting only the obsolete files also has the advantage of being
entirely safe - so I do it from a periodic script.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Secure unsalted or fixed salt symmetric encryption?

2009-05-26 Thread RW
On Tue, 26 May 2009 19:02:10 +0200
Roland Smith rsm...@xs4all.nl wrote:


 Or if you have the case of a 'known-plaintext' attack. It happens
 more often than you would think: 
 [http://en.wikipedia.org/wiki/Known-plaintext_attack] 
 Note that using a random salt would be a good protection against such
 an attack!

Only if the passphrase is weak. If you don't use salt you can
pre-compute a table that maps weak passphrases to a few bytes of
of the ciphertext of a known plaintext first block. But if that
passphrase contains sufficient entropy it's no cheaper than a
brute-force attack against the cipher. A cipher that can't withstand
that isn't worth using.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Secure unsalted or fixed salt symmetric encryption?

2009-05-25 Thread RW
On Sun, 24 May 2009 22:57:35 -0700
Kelly Jones kelly.terry.jo...@gmail.com wrote:


 and was surprised that doing this to identical files yielded different
 results. I then realized openssl enc randomly(?) chooses a salt if
 you don't supply one.
 
 I want my backups encrypted, but I also want identical files to
 encrypt identically. Thoughts?


Then don't use salt - just a fully randomized key.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Secure unsalted or fixed salt symmetric encryption?

2009-05-25 Thread RW
On Mon, 25 May 2009 21:00:39 +0200
Roland Smith rsm...@xs4all.nl wrote:


 Or you can use the -nosalt option. But as explained in
 [http://www.openssl.org/docs/apps/enc.html], using a random salt by
 default is a design decision because: Without the -salt option it is
 possible to perform efficient dictionary attacks on the password.
 That doesn't sound good, does it?

It's not a problem since she's using a random key file, not a weak
password.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Secure unsalted or fixed salt symmetric encryption?

2009-05-25 Thread RW
On Mon, 25 May 2009 23:52:05 +0200
Roland Smith rsm...@xs4all.nl wrote:

 On Mon, May 25, 2009 at 10:06:01PM +0100, RW wrote:
  On Mon, 25 May 2009 21:00:39 +0200
  Roland Smith rsm...@xs4all.nl wrote:
  
  
   Or you can use the -nosalt option. But as explained in
   [http://www.openssl.org/docs/apps/enc.html], using a random salt
   by default is a design decision because: Without the -salt
   option it is possible to perform efficient dictionary attacks on
   the password. That doesn't sound good, does it?
  
  It's not a problem since she's using a random key file, not a weak
  password.
 
 But a key alone is not sufficient. You'll need to specify an
 initialization vector as well, using the -iv option. E.g.:
 
 openssl enc -aes256 -in infile -out outfile.aes \
 -K 971001EE50DCDBCAF3F521851E773B0285838CA549E2258C1A195565D61F2145 \
 -iv FD246E34A631AE38
 
 If you try it with only a key or keyfile, you'll get a 'iv undefined'
 error, resulting in a zero-length output file. :-(
 

It works for me:

$ echo hello world  infile

$ head -c32 /dev/random |sha256  keyfile

$ openssl enc -aes256 -nosalt -kfile keyfile  -in infile -out outfile

$ openssl enc -aes256  -nosalt -d -kfile keyfile  -in outfile 
hello world
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: virtual network with qemu

2009-05-14 Thread RW
On Thu, 14 May 2009 13:39:17 +0200
marco\.borsati...@poste\.it marco.borsat...@poste.it wrote:

 First, thank you.
 You are right, qemu has an internal DHCP server, which should be
 perfect for me, becuse I would like to emulate a network without any
 contact with external (real) world. The problem is that my virtual PC
 can't ping the gateway. For my idea (this is just a way to study a
 project for a network without a real network) the communication is
 intended only among virtual PCs. But If I can't contact the (virtual)
 gateway will it be possible to contact another virtual PC on a
 different subnet? 

The problem is that ping is a setuid binary, so qemu cant send a ping
into the outside world as an ordinary user process. I think you may be
able to ping between two emulated machine within qemu. Even if you
can't it might be worth staying with qemu's networking, if pings aren't
essential, as it sounds closer to what you need than networking via
tap.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto sidestep sysinstall during installation

2009-05-11 Thread RW
On Mon, 11 May 2009 16:11:08 -0400
Michael Powell nightre...@verizon.net wrote:


 -Stable is where newer software from -Current (HEAD) is merged
 backwards. An example would be a driver bug that was fixed in
 8.0-Current would be made available in 7.2-Stable. The main purpose
 for using -Stable is for when some specific problem you are having in
 7.2-Release has been fixed, and updating from -Release to -Stable is
 how you go about obtaining the fix.

Also bear in mind that only the base system is branched, not the ports
tree. And most user-visible change takes place in ports.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Perl upgrade

2009-05-09 Thread RW
On Sat, 09 May 2009 13:05:32 +0200
Jos Chrispijn j...@webrz.net wrote:

 Not that I am that paranoid, but can someone tell me why Perl 5.8 is
 not automatically updated to 5.10 thru the ports, but (accordingly by 
 UPDATING) has to be updated by some manual interaction?

That's the way the port system works.  perl5.6, perl5.8 and perl5.10 are
separate ports, making it automatic would involve forcing people off
perl5.8 and marking it as moved.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: i had a tought

2009-04-22 Thread RW
On Wed, 22 Apr 2009 14:42:21 -0400
Jerry McAllister jerr...@msu.edu wrote:


 On the other hand, you can just stick with FreeBSD and not bother
 with the Lunix stuff and you will get along just fine.   


http://www.youtube.com/watch?v=gb_qHP7VaZE

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Preventing ntpd from adjusting time (backwards)

2009-04-21 Thread RW
On Tue, 21 Apr 2009 14:09:09 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

 On Tuesday 21 April 2009 11:39:32 Matthew Seaman wrote:

* Don't run 'ntpd -g' as the documentation tells you is the
  modern and accepted method.  Instead, run 'ntpdate' as a separate
  process and run 'ntpd' without the '-g' flag.
 
 Hmm, isc sure knows how to abstract something as simple as command
 line options into several levels. From the source, -q activates
 mode_ntpdate which is one path for time reset. Since not using that,
 it's not that path.
 
 The other codepath, has 4 possibles, 2 of which relating to step-in
 and step- out, which I could increase to values that are less likely
 to cause a step. Would be worthwhile if there aren't 2 other
 possibilities which most likely cause the step back after reboot
 syndrome:

The bottom line though, is that ntpdate_enable=yes solves the problem
entirely, since the real problem is not the step, but the fact that it
happens in the background, and after a delay.

ntpdate may be deprecated, but it's been deprecated for years, and I
doubt it will go away until ntpd fully replaces it's functionality.
ntpd -gq can replace ntpdate in a crontab, but ntpd -gqn doesn't really
replace ntpdate -b in the boot-sequence.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Preventing ntpd from adjusting time (backwards)

2009-04-21 Thread RW
On Tue, 21 Apr 2009 16:43:32 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

 On Tuesday 21 April 2009 16:20:52 RW wrote:
 
  The bottom line though, is that ntpdate_enable=yes solves the
  problem entirely, since the real problem is not the step, but the
  fact that it happens in the background, and after a delay.
 
 Care to expand on that? Dovecot won't stop if root issues a date
 command that sets time to the past, for example?

I was assuming that since you're running ntpd you wouldn't be doing
that.
 
  ntpdate may be deprecated, but it's been deprecated for years, and I
  doubt it will go away until ntpd fully replaces it's functionality.
  ntpd -gq can replace ntpdate in a crontab, but ntpd -gqn doesn't
  really replace ntpdate -b in the boot-sequence.
 
 I'm actually counting on it to be gone in 8.0.

Is that official?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Preventing ntpd from adjusting time (backwards)

2009-04-21 Thread RW
On Tue, 21 Apr 2009 20:23:14 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

 On Tuesday 21 April 2009 19:31:33 RW wrote:
  On Tue, 21 Apr 2009 16:43:32 +0200
 
  Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
   On Tuesday 21 April 2009 16:20:52 RW wrote:
The bottom line though, is that ntpdate_enable=yes solves the
problem entirely, since the real problem is not the step, but
the fact that it happens in the background, and after a delay.
  
   Care to expand on that? Dovecot won't stop if root issues a date
   command that sets time to the past, for example?
 
  I was assuming that since you're running ntpd you wouldn't be doing
  that.
 
 Right, then this works because ntpdate is started before dovecot in
 rcorder, like Tim Judd said else in thread.

ntpdate and ntpd normally  start consecutively, both way before
Dovecot. The difference is that ntpdate runs in the foreground,
blocking the boot-process for a fraction of a second, but ntpd forks-off
into the background and takes a lot longer over making its initial
correction.

If you're dead set against using ntpdate, you could use the preferred
ntpd -gnq in it's place, at the expense of about 10 seconds of extra
boot time.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Encrypted slice with geli

2009-04-20 Thread RW
On Mon, 20 Apr 2009 14:17:40 -0600
Modulok modu...@gmail.com wrote:


 Cryptographically speaking: No, the majority of your data still
 exists as magnetic signatures on the physical disk. (Though is not
 directly accessible.)

This is a bit misleading, the data in the unwritten disk sectors is
still accessible through the device, so it would still be possible to
image the disk and perform  offline reconstruction of the data. You
wouldn't need to rely on magnetic hysteresis.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Console mode scrolling

2009-04-17 Thread RW
On Fri, 17 Apr 2009 16:55:16 +0200
Fernando Apesteguía fernando.apesteg...@gmail.com wrote:

 Hi,
 
 Is there a way to scroll the screen in console mode? Something like I
 do in Linux with Ctrl + Page Up?
 
 I find it specially useful, but I don't know how to do it in FreeBSD.
 I'm using FreeBSD 7.1-RELEASE-p4 #12

use the scroll-lock key
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Xorg and nvidia-driver-173 ABI

2009-04-09 Thread RW
On Thu, 09 Apr 2009 07:19:31 -0400
Michael Powell nightre...@verizon.net wrote:

 RW wrote:
 
  I picked-up the most recent xorg update a couple of days ago, and
  since then X has been failing to start with the binary nvidia
  driver, and is leaving the following in Xorg.0.log:
  
(EE) NVIDIA(0): This video driver ABI is not supported.
(EE) NVIDIA(0): Use the -ignoreABI option to override this check.

 Have you rebuilt the nvidia-port after the xorg update? You might
 just need to do the make, make deinstall, make reinstall dance for
 the version you're using. This will rebuild the kernel module to
 match the new xorg.


Yes, I always do that, the driver installs a library that overwrites
one installed by Xorg, and doesn't work correctly otherwise.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Three little question.

2009-04-08 Thread RW
On Wed, 8 Apr 2009 21:55:44 +0800 (CST)
makefile makef...@yeah.net wrote:

 
 Every time I run make fetch-recursive,it fetched all the dependence
 packages.Not only the package I need to compile. For example,in
 the /usr/ports/x11-drivers/xf86-video-intel,I run make
 fetch-recursive,it will download glib,but I alreaday have glib
 installed.Is there another command can solve my problem?

Then leave off the -recursive part, although actually the targets you
really need are checksum[-recursive] not  fetch[-recursive].

It's good practice to leave the files in the distfile directory and
clean it with portsclean -D, then you don't have to download them
again. Ports often need to be rebuilt with the same distfile.

 I installed gnome2-lite,but I don't think it is small enough.I don't
 need file-roller,epiphany,totem...How should I do?Gnome2-lite
 depend on them.

gnome2-lite is just a metaport, so you could just delete it and install
just the ports you want. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Xorg and nvidia-driver-173 ABI

2009-04-08 Thread RW
I picked-up the most recent xorg update a couple of days ago, and
since then X has been failing to start with the binary nvidia driver,
and is leaving the following in Xorg.0.log:

  (EE) NVIDIA(0): This video driver ABI is not supported.
  (EE) NVIDIA(0): Use the -ignoreABI option to override this check.

-ignoreABI doesn't help.

I presume that nvidia will eventually fix this for the current driver,
but I'm using the legacy driver port x11/nvidia-driver-173. Is there any
prospect of the nvidia driver working again on my hardware?

If the answer is no, would the nv driver benefit from a switch from
i386 to amd64.  

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Question about forcing fsck at boottime

2009-03-31 Thread RW
On Tue, 31 Mar 2009 08:15:54 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

 On Tuesday 31 March 2009 08:05:11 manish jain wrote:
 
  I am migrating from Linux and am still learning the basics of
  FreeBSD. One thing that I would to carry over from my Linux days is
  to force an fsck on all filesystems at system startup. On Linux,
  this was simply a matter of editing /etc/rc.sysinit. Things seem a
  bit more complicated in the BSD world. Can somebody please point me
  in the right direction ?
 
 fsck -p is done by default (meaning, filesystems are not fully
 scanned if they are marked clean). If pruning fails, background_fsck
 is checked, which will work on UFS systems with soft updates, but is
 not recommended by many as it may leave some errors unchecked.


I don't think that's quite right,  fsck -p is only done if
background_fsck=NO, otherwise an fsck -pF is done instead. The
latter does an fsck -p on filesystems that aren't eligible for
background checking - usually root and any none UFS filesystems. 

In other words you need to set background_fsck=NO to get a preen on
all filesystems.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Question about forcing fsck at boottime

2009-03-31 Thread RW
On Tue, 31 Mar 2009 16:00:18 +0530
manish jain invalid.poin...@gmail.com wrote:

 As for the reason why I want to force fsck is that it has now
 happened 3 timed that, after a clean and proper shutdown - with no
 foreign filesystems mounted, FreeBSD has complained on system restart
 (twice on a 5.x distribution I had briefly used and now once on 7.1)
 that / was not properly unmounted. Having bgfsck enabled is like
 inviting a dragon to dinner when this happens.

If you've done a normal install, soft-updates aren't enabled on /,
so it will get foreground checked by default. 

If I were you I'd reboot into single user mode and do a full fsck on it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Question about forcing fsck at boottime

2009-03-31 Thread RW
On Tue, 31 Mar 2009 17:36:32 +0200
Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:

 On Tuesday 31 March 2009 14:24:11 RW wrote:
  On Tue, 31 Mar 2009 08:15:54 +0200
 
  Mel Flynn mel.flynn+fbsd.questi...@mailing.thruhere.net wrote:
somebody please point me in the right direction ?
  
   fsck -p is done by default (meaning, filesystems are not fully
   scanned if they are marked clean). If pruning fails,
   background_fsck is checked, which will work on UFS systems with
   soft updates, but is not recommended by many as it may leave some
   errors unchecked.
 
  I don't think that's quite right,  fsck -p is only done if
  background_fsck=NO, otherwise an fsck -pF is done instead. The
  latter does an fsck -p on filesystems that aren't eligible for
  background checking - usually root and any none UFS filesystems.
 
 As far as I can tell, -F -p skips clean disks (-p) and defers to
 background when possible, though the manpage doesn't exclude your or
 my theory. ENOTIME to check the source.

I wouldn't dispute that clean filesytems are skipped, it's just that you
seemed to be implying that every filesystem gets a foreground fsck -p. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: nvidia-drivers crash computer on X start

2009-03-28 Thread RW
On Sat, 28 Mar 2009 13:53:43 +0100
Anders Holmström holmstrom.and...@gmail.com wrote:

 The current xorg.conf I'm using is listed below. It was generated with
 X -configure. I've used many different xorg.confs, but they've all
 more or less been using the same settings as below,

I don't know if it will help, but the nvidia driver has its own utility
for generating xorg.conf:

x11/nvidia-xconfig





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Problem with Gmail/Evolution and IPFW

2009-03-27 Thread RW
On Fri, 27 Mar 2009 22:01:51 +0100
Roy Stuivenberg roys1...@gmail.com wrote:

 Hello, 
 
 I'm having a problem with Gmail and IPFW. 
 Gmail is configured in Evolution.
 running prerelease 7.2 / stable + Gnome2
 
 When I can't send mail (with attachment), I 
 have to disable IPFW, and at that point I'm able to send mail.

This sounds like it could be a path mtu discovery problem; try adding
the following: 

allow icmp from any to any icmptypes 3
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: WINE installation problem

2009-03-26 Thread RW
On Thu, 26 Mar 2009 07:20:38 +0100
Alain G. Fabry alainfa...@belgacom.net wrote:

 Hi,
 
 My WINE was running fine, but while performing a portupgrade I got an
 error message. So I decided to remove WINE and reinstall. Now I can't
 install it either. 

If you ever do that again, make a package first.

 I get the following message
 ===  wine-1.1.17,1 builds, but fails upon startup.
 *** Error code 1
 
 Stop in /usr/ports/emulators/wine.

I'd suggest you either get an old package of wine, or install
portdowngrade and use it to take the wine port back to a previous
version. wine-1.1.16,1 works for me.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: mount 2nd HD containing running Freebsd system

2009-03-25 Thread RW
On Wed, 25 Mar 2009 17:55:50 +0800
Fbsd1 fb...@a1poweruser.com wrote:

 I have run out of space on my running 7.1 system. I have a 2nd HD 
 containing 6.1 that I want to mount and use the 80gb /usr slice.
 
 What is the mount command to use?
 
 Thinking   mount /dev/ad1 /mnt  but un-sure how this handles the 6.1 
 slices on that HD.

You need to mount the bsd partition[s] not the whole disk.
Probably something like /dev/ad1s1d 

I'd suggest you re-label it and put a new filesytem on it if you can. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: updated world to CURRENT, how to update ports to CURRENT?

2009-03-24 Thread RW
On Tue, 24 Mar 2009 11:21:10 +0100
Matthias Apitz g...@unixarea.de wrote:

 El día Tuesday, March 24, 2009 a las 10:07:14AM +, Bruce Cran
 escribió:
 
  The ports tree isn't versioned like /usr/src; 'portsnap fetch' will
  always fetch the latest copy from cvs mainline, and the only way to
  go back to a branch (e.g RELENG_5_5_0) is by using csup, which you
  would only really want to do if you're using a release of FreeBSD
  which has gone out of support, such as 5.x.
 
 What made me worry about this was reading
 
 http://www.freebsd.org/ports/index.html
 
 The Ports Collection supports the latest release on the
 FreeBSD-CURRENT and FreeBSD-STABLE branches

You should still rebuild all your ports, since you have crossed a major
version boundary. 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


sa-compile's bsdpan package

2009-03-23 Thread RW

I see that when I run Spamassassin's sa-compile it generates a bsdpan
package. Is there any way of preventing this? 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: portupdate xorg-server

2009-03-21 Thread RW
On Sat, 21 Mar 2009 00:39:31 -0500
Adam Vande More amvandem...@gmail.com wrote:

 RW wrote:
 
  IMO this doesn't make any sense. If portupgrade is failing on a port
  where manual make install works, then portupgrade simply has a
  bug. Any port upgrading tool belongs in a port, because it's more
  important that it responds to changes in the ports system than
  changes in the base system. 
 
  As to upgrading piecemeal rather than with -a, I don't see how that
  helps, and it may actually make things worse by not building in
  dependency order.
  ___
 

 As to the first part of your msg, what you said doesn't make any
 sense to me either.  Never did I claim portupgrade fails where a
 normal make install would succeed.  I would appreciate it if you
 could take my example as I state it instead adding stuff to make it
 sound implausible. 

And I would appreciate it if you actually read what I posted before you
accuse me of making things up.

My reply wasn't to your email it was to Neil Hogan, who did say that.


 Also
 after you get some experience in ports, you'll be able to understand
 that you can't depend on it compiling all the time. 
..
   Hope that clears up the confusion for you.

Since you are the one that sees problems, and I find the whole thing to
be generally straightforward, I don't really think you are in a
position to be condescending. 

Many problems that are seen after a portupgrade -R will go away after
after a portupgrade -a, so why waste time in debugging them. In my
experience a failed portupgrade -a scarcely ever leads to runtime
problems and most build problems are resolved after running csup.

Personally I don't find fault-finding signifiantly harder after a
portupgrade -a than after a portupgrade -R  YMMV.

The really important thing is to read UPDATING, but if you don't update
frequently enough you can run into a state where it's difficult to
conflate the entries into a single recipe.  If I ever let things slide
to the point where I was faced with two really complex metaport updates,
I *might* be tempted to take the tree back to the point when the first
update stablised and do them sequentially in that way.






___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: issues in XFCE 4.6 (looking for a working WM)

2009-03-20 Thread RW
On Fri, 20 Mar 2009 01:15:37 -0600 (MDT)
Keith Seyffarth w...@weif.net wrote:

 
 At this point, I guess I'm looking for recommendations on a window
 manager.

The XFCE upgrade went smoothly for me, apart from missing icons,
although I don't use it all that much so I may have missed something.
At very least I'd do a portupgrade -a,  preferably a  portupgrade -fa.

Running 6.0 isn't very sensible, there aren't all that many people
using Freebsd as a desktop machine in the first place, and most of the
people best suited to fix problems, or file detailed PRs will be on 7
or 8 by now.

 What other window managers do people use, or what would you recommend
 and why?

I'd suggest kde3, it's very stable, and version updates are always
simple. You don't have to install it all, if you don't want to.

xfce is the lightest of the 3 main desktop environments, so the next
down are the likes of windowmaker, fluxbox, icewm, and enlightenment.
Personally I'd go with fluxbox out of these, but that's  largely
personal preference. I like the taskbar and system tray support, icewm
is similar, but seems less sophisticated and isn't really functional
out-of the-box.

If you want a desktop environment on top of a window manager you can use
the rox ports to get session management, icons on the desktop, and a
file manager.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: portupdate xorg-server

2009-03-20 Thread RW
On Fri, 20 Mar 2009 17:04:00 -0500
Neal Hogan nealho...@gmail.com wrote:
 But, I wonder what the most efficient way is to update ports. I
 appreciate Adam's point about the fact that portupgrade (and
 portmanager and portmaster) are ports themselves and are going to not
 be as reliable as what is in base. 

IMO this doesn't make any sense. If portupgrade is failing on a port
where manual make install works, then portupgrade simply has a bug.
Any port upgrading tool belongs in a port, because it's more important
that it responds to changes in the ports system than changes in the
base system. 

As to upgrading piecemeal rather than with -a, I don't see how that
helps, and it may actually make things worse by not building in
dependency order.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


<    1   2   3   4   5   6   7   8   9   10   >