Re: Mouse stopped working on quit fvwm
On Sun, 03 Feb 2013 18:36:31 -, ill...@gmail.com ill...@gmail.com wrote: On 3 February 2013 04:23, Roger Marsh roger.ma...@btinternet.com wrote: The problem was encountered when upgrading to FreeBSD 9.1-RELEASE and a 18 January 2013 portsnap. Steps were: Upgrade to FreeBSD 9.1-RELEASE pkg_delete -a rm -r /usr/local/* Install ports using portmaster Turn on the ttyv8 xdm and reboot Login via the xdm dialog using the user .xsession file containing just /usr/local/bin/fvwm2 Do whatever and quit from fvwm back to the xdm dialogue Usually, but not always, the pointer does not move in response to pointer device. But it is still possible to login and get the fvwm display back, but pointless because the pointer still does not move. Only recovery option found was reboot. For me the most convenient work around is turn xdm off and login at a terminal and use the command 'startx exit'. It was quite a while before it occurred to me that the absence of xorg.conf from all the usual locations might be the problem. It is not a surprise now if X just works without any manual configuration. The Xorg -configure and X -config /root/xorg.conf.new dance gives a black screen on the hardware. For both reasons I did not bother with the dance when doing the upgrade. After generating and copying xorg.conf.new to /etc/X11/xorg.conf the pointer was mobile after quitting from fvwm. Although it works I did not quite trust the generated xorg.conf because of the black screen and wondered if any of the information in the file was needed. So I deleted it and replaced it by 'touch /etc/X11/xorg.conf'. The pointer is mobile after quitting from fvwm. Maybe the problem was my sloppy configuration management in losing, I assume, an existing xorg.conf file. But maybe it is a bug because it is not a surprise if X just works without any manual configuration and the problem occurs possibly after hours of successful and varied use of applications via fvwm. Is your Xorg built with HAL support? You might have to kick HAL. I've not had problems using moused ( Xorg with HAL disabled) an old-fashioned xorg.conf. I rebuilt with HAL support on current oldest hardware. No problems. My notes say I tried this when upgrading to FreeBSD 7.2 and the problems led to builds being done without HAL support since then. Thanks for the kick. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Mouse stopped working on quit fvwm
The problem was encountered when upgrading to FreeBSD 9.1-RELEASE and a 18 January 2013 portsnap. Steps were: Upgrade to FreeBSD 9.1-RELEASE pkg_delete -a rm -r /usr/local/* Install ports using portmaster Turn on the ttyv8 xdm and reboot Login via the xdm dialog using the user .xsession file containing just /usr/local/bin/fvwm2 Do whatever and quit from fvwm back to the xdm dialogue Usually, but not always, the pointer does not move in response to pointer device. But it is still possible to login and get the fvwm display back, but pointless because the pointer still does not move. Only recovery option found was reboot. For me the most convenient work around is turn xdm off and login at a terminal and use the command 'startx exit'. It was quite a while before it occurred to me that the absence of xorg.conf from all the usual locations might be the problem. It is not a surprise now if X just works without any manual configuration. The Xorg -configure and X -config /root/xorg.conf.new dance gives a black screen on the hardware. For both reasons I did not bother with the dance when doing the upgrade. After generating and copying xorg.conf.new to /etc/X11/xorg.conf the pointer was mobile after quitting from fvwm. Although it works I did not quite trust the generated xorg.conf because of the black screen and wondered if any of the information in the file was needed. So I deleted it and replaced it by 'touch /etc/X11/xorg.conf'. The pointer is mobile after quitting from fvwm. Maybe the problem was my sloppy configuration management in losing, I assume, an existing xorg.conf file. But maybe it is a bug because it is not a surprise if X just works without any manual configuration and the problem occurs possibly after hours of successful and varied use of applications via fvwm. Roger Marsh ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Why Clang
On 6/21/12 1:40 AM, Michel Talon wrote: Second, FreeBSD is not a commercial company, and while this argument may have a merit for commercial sponsors of FreeBSD, it has zero bearing on FreeBSD itself. You seem to be unaware of what percentage of the development and maintenance staff and the money to pay for them comes from those commercial users. If FreeBSD cannot maintain the critical mass to continue, it will not continue. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Is ZFS production ready?
On 6/21/12 9:47 AM, Wojciech Puchar wrote: True but this applies as much to you. You think you know it all and that is quite the probdlem with you. And discussing with you is a true waste with this attittute. Even its free. so stop it. This mailing list isn't your blog. If you want to hear your own voice, go lock yourself in a room. We'll all be happier. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Why Clang
On 6/21/12 10:08 AM, Wojciech Puchar wrote: Second, FreeBSD is not a commercial company, and while this argument may have a merit for commercial sponsors of FreeBSD, it has zero bearing on FreeBSD itself. You seem to be unaware of what percentage of the development and maintenance staff and the money to pay for them comes from those commercial users. If FreeBSD cannot maintain the critical mass to continue, it will not continue. but why it isn't clearly stated: We put clang because sponsors wanted it. Sponsors didn't want clang. Sponsors wanted not to be encumbered by a GPLv3 license. If there was a shmoodlepoodle compiler instead of clang that met this requirement instead and was at least as performant and stable, it would likely have been selected. If you don't like clang as an option, go away and come back when you've built a better compiler and offered it under an acceptable license. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Why Clang
On 6/21/12 10:16 AM, Wojciech Puchar wrote: We put clang because sponsors wanted it. Sponsors didn't want clang. Sponsors wanted not to be encumbered by a GPLv3 they are not. programs compiled by GPLv3 compiler are not encumbered. Programs that link to GPLv3 libraries are encumbered. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Why Clang
On 6/21/12 10:36 AM, Wojciech Puchar wrote: sources please! Google GPLv3 court case. There are no applicable results. Until a Judge decides what the license truly means everyone using it is at risk. true. But why anyone from FreeBSD fundation didn't just write official letter to GNU Free Software Foundation asking for just that case? Because what FSF says is irrelevant. What courts decide is all that counts. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Why Clang
On 6/21/12 10:30 AM, Wojciech Puchar wrote: z woj...@wojtek.tensor.gdynia.pl wrote: programs compiled by GPLv3 compiler are not encumbered. This has not been decided in court yet. sources please! Logical fallacy -- looking for a non-existence proof. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Is ZFS production ready?
On 6/21/12 11:21 AM, Wojciech Puchar wrote: ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org Only after you, my man, only after you. not yours. i'm not homosexual For which the gay community is grateful. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Access to Time Warner cable network
On Apr 2, 2012, at 7:32 AM, Dave d...@g8kbv.demon.co.uk wrote: On 1 Apr 2012 at 19:05, Jerry wrote: On Mon, 02 Apr 2012 08:50:42 +1000 Da Rock articulated: Given that the other tech in question asked me to help him, and he is a Winblows nut like yourself, I think this premise can be dismissed out of hand. I won't even bother to qualify the rest, I wouldn't want to ruin your delusion. No delusion here. You have confirmed what I suspected. A classic case of The blind leading the blind. If one idiot can screw something up, just think what two idiots can accomplish? -- Jerry Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __ In the world of the blind, the one eyed bloke is promoted to near god like status! Dave Does all this smugness actually seem useful to all of you, or is one factor behind the precipitous drop in FreeBSD community size how much y'all love the sound of your own voices?!___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Is this bunk.
It's a lot like complaining that your bull is counterproductive because it isn't a cow and therefore won't yield milk. If one's definition of productive is expands the amount of software in the universe that is non-proprietary, then perhaps the BSD license is non-productive -- but that was never its goal. The license serves to improve the amount of reusable software in the universe -- and in doing so, the quality of that code -- and in the process, the idea that entities could leverage it to build proprietary extensions is in the mix. Many companies have built products with proprietary components using BSD-licensed baselines. Rather than start from scratch, they ended up with products that were less expensive and higher-quality. For many of these companies, religious compliance to software liberation is not a pill they would consider swallowing. On 8/22/10 5:25 PM, Garry wrote: This is a conversation held on a UK group page, can you confirm or deny this as twaddle. Mac OS X is basically BSD that's been appleised (serious vendor lock-in), they do give a little back to BSDs, but have made sure that BSDs can't get much off of them, but they can get a lot out of BSD. Also, Windows uses (or used to use) a BSD stack for networking for instance. So, in supporting/using BDS i would enevatibaly end up writing code for it, or filing bugs or whatever. (I have assisted with a few Linux drivers and written kernel patches, as well as working on things like DirectX 3D 9 for Wine and work on KDE etc...) Having seen how BDS license software has been used, to create highly tied in, almost crippled proprietary software, I do not feel that I can support software developed under such licenses. Web-Kit has actually worked quite well as an open system, even though Apple done a hostile take over of the project from KHTML in KDE. So, the GPL has worked to produce an open product in Web-kit but the BSD license has lead to vendor lock-in on the part of Microsoft and most significantly Apple. This does not mean to say that I have a problem with the quality of the code in BSD, I just feel that the license is counter productive. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Just want to ask
On Jun 29, 2010, at 11:13 AM, Matthew Seaman m.sea...@infracaninophile.co.uk wrote: Whether or not he agrees with them is a matter of philosophical interest only, so long as he keeps to the terms. Agree TO them, not agree WITH them. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How long do you go without upgrading FreeBSD to a newer release?
On 2010-05-16 17:42, Dan Naumov wrote: Hello folks [snip] Do you liva by the If it's not broken, don't fix it mantra or do you religiously keep your OS installations up to date? - Sincerely, Dan Naumov Depends on the installation requirements. I know of two 2.2.8 installations on PII hardware still running like champs, not a glitch in god knows how many years of 24/7 operation. None of them are exposed externally so there are no security considerations. The customers that runs them are still more then happy with their servers so I'm actually a bit curious to see how long they will keep them running. I have a few other servers that are highly exposed. My mantra there is to run _verified_ software. Not necessarily the latest, but software that has no known bugs and has been well tested. To religiously update everytime there is a new version and blame it on security is stupid. How do you know that a brand new version of a software does not contain a big gaping security hole unless it has been tested in the wild yet? -- R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: can't ping localhost
On Wed, Mar 10, 2010 at 9:23 PM, Anton Shterenlikht me...@bristol.ac.uk wrote: I misconfigured my system somehow, so now I can't ping localhost: # ping localhost PING localhost (127.0.0.1): 56 data bytes ping: sendto: No route to host ping: sendto: No route to host ^C # cat /etc/hosts # $FreeBSD: head/etc/hosts 109997 2003-01-28 21:29:23Z dbaker $ # ::1 localhost localhost.men.bris.ac.uk 127.0.0.1 localhost localhost.men.bris.ac.uk So far, can't find anything relevant on the net. Please advise many thanks anton -- Just a shot in the dark. Do you have a default route? -r ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: can't ping localhost
On Wed, Mar 10, 2010 at 9:23 PM, Anton Shterenlikht me...@bristol.ac.uk wrote: I misconfigured my system somehow, so now I can't ping localhost: # ping localhost PING localhost (127.0.0.1): 56 data bytes ping: sendto: No route to host ping: sendto: No route to host ^C # cat /etc/hosts # $FreeBSD: head/etc/hosts 109997 2003-01-28 21:29:23Z dbaker $ # ::1 localhost localhost.men.bris.ac.uk 127.0.0.1 localhost localhost.men.bris.ac.uk So far, can't find anything relevant on the net. Please advise many thanks anton http://www.freebsd.org/doc/handbook/network-routing.html ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Changing Default Shell
Lowell Gilbert, I would like to thank you for your posting about changing the default shell. I was running in circles until I found your post suggestion vipw. Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Restarting after Make Install....
On Wed, Jan 20, 2010 at 6:44 AM, Jerry ges...@yahoo.com wrote: On Tue, 19 Jan 2010 20:13:33 -0500 Roger Roger rno...@gmail.com articulated: I'm not a FreeBSD expert so I cannot speak about what is considered best pratices but I never restart my server after doing a port install/reinstall/upgrade/removal. I guess the only time you will need to do that is when your port may be a kernel module that cannot be unloaded/reloaded without causing major problems. I only do a ports update when there are a significance number of programs that I have installed that have updates available. If the major players like OpenLDAP, MySQL, Postfix, Apache, etc are all to be updated at one time, I usually choose to reboot after the process has completed. It is not that I feel it is absolutely necessary; but rather that I want to insure that they will in fact all start up correctly, and in some cases, like Postfix, in the correct order. I have on rare occasions found discrepancies on how the system starts and performs after a major update. At worst, you lose only a minute or so of up time, assuming your machine is not a mission critical one. At best, you might discover a problem that might have gone unknown for an extended period of time. I think that the old English saying: six of one, a half dozen of the other is appropriate to the situation. Just my 2¢. -- Jerry ges...@yahoo.com |=== |=== |=== |=== | You are only young once, but you can stay immature indefinitely. Thank you for sharing your procedure. I do not have enough time with FreeBSD but it helps to read about different things other people are doing. I really admire and appreciate the quality of this mailing list. -r ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Restarting after Make Install....
On Tue, Jan 19, 2010 at 8:05 PM, Diego Montalvo dmonta...@gmail.com wrote: Been using FreeBSD for a long time now, but have never really been sure if FreeBSD needs to be restarted after installing a Port or Ports using make install clean? What is the best practice... Used to restarting Windows for everything... Diego I'm not a FreeBSD expert so I cannot speak about what is considered best pratices but I never restart my server after doing a port install/reinstall/upgrade/removal. I guess the only time you will need to do that is when your port may be a kernel module that cannot be unloaded/reloaded without causing major problems. -r ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
I need help on installation
I found an old pc that I just reformatted the HDD using G parted, now that I try to boot from a Free BSD CD (7.2 release) the Intel chip gives me an error message that the system boot failed and asks me to insert a system disk which I do not have, how do I go about that because I virtually cannot install any operating system. Do I have to install a boot loader like GRUB2? If so How do I go about that? Since I have found no iso image of GRUB2 to burn into a live cd. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Downloading and Burning Free BSD
I clicked the ISO link and I was brought to a directory, this to be exact ( ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/ISO-IMAGES/7.2/) Once I have downloaded all Iso Images do I burn the 'boot only.iso' file on one DVD or CD only? or do I burn that along with 'disc1.iso', and how do I go about burning the rest of the files in that directory once I have downloaded them? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
How to diagnose server crashed.
Hello all, I'm running a dedicated server and today I was not able to ssh to it. I contacted technical support and they reported to me that the machine had frozen (they could not see anything on the screen neither type anything). So I was forced to do a hard reboot. Is there anything that I can do to find out what happened? I'm currently running 7.2-p4. I looked over some logs and the only weird thing that I saw was a lot of: Limiting closed port RST response from xxx to xxx. I'm only running a ssh server with minimal amount of software and running the generic kernel. I recently finished doing a re-installation so I do not have a firewall in place yet. Any tip or suggestions would be appreciated. -r ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Remote re-installation of current FreeBSD system.
Hello all, I'm in control of a dedicated server and I would like to re-install FreeBSD. I found the following guide: http://www.freebsd.org/doc/en/articles/remote-install/ which seems to cover pretty much all should need but it assumes that I have some other OS (linux) installed, since I have FreeBSD 7.2-p4 I wonder if maybe there is an easier way. The reason for wanting to re-install is because I only have on big slice that covers the entire harddrive and I don't want that. Primarily I would like to have /usr/local in a separate slice. Any input, advice, tips etc would be very welcomed. (trying to be prepared before attempting anything) Thank you, -r ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Help understanding basic FreeBSD concepts (ports, updates, jails)
Hello all, I have another concept that I'm confused about, the source distribution. Some ports, like lsof require the existence of /usr/src. What I don't understand is which version to use to keep synchronized with the production release. When the installed was performed the release was 7.2 but after doing freebsd-update the release is now 7.2-p4. According to the documentation, I can track CURRENT, STABLE plus other. Which one is the recommended one for a production server. I have not build that many packages that need the sources present so now would be a good time to find out which one I should use. Thank you for your time and patience, -r ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Help understanding basic FreeBSD concepts (ports, updates, jails)
On Sat, Nov 7, 2009 at 3:20 PM, Frank Shute fr...@shute.org.uk wrote: You mentioned lsof but there is a utility in base which you probably don't know about called fstat(1), which does a lot of what lsof does. Thank you for the tip. I will definitely look into it. IIRC, the sources for 7.2 should be on the CD (run sysinstall(8) after sticking the CD in). That will save you from downloading all the sources. Then update the sources with csup(1) using the correct tag: RELENG_7_2 There's a supfile, /usr/share/examples/cvsup/standard-supfile, which you can change the default host and cvs tag of and it should work. http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvsup.html goes into the details. Regards, -- Frank Contact info: http://www.shute.org.uk/misc/contact.html ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: eclipse install
Coert Waagmeester skrev: Hello all, What is the best way to install eclipse on FreeBSD 7.2? On Linux I installed java, and downloaded the newest eclipse. Regards, Coert ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org Hi Coert, I had an issue some time back and I posted this to the list. I don't know if it'll help you. -- Dear mailing list, I don't know if anyone has noticed or if it's my machine having stale ports but it seems that to make eclipse 3.4.1 working on FreeBSD 7.1 STABLE with diablo-jdk-1.6.0.07.02_4 you need to do the following: Do _not_ make clean until you have made: cp /usr/ports/java/eclipse/work/plugins/org.eclipse.swt.gtk.freebsd.x86/gtk/library/libswt* /usr/local/diablo-jdk1.6.0/jre/lib/i386/client/ It seems like make install builds the swt-gtk:s but that the .jar somehow 'misses' adding them in. /Roger -- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: ipnat port-range
alexus skrev: 2009/5/16 Roger Olofsson 240olofs...@telia.com: Odhiambo ワシントン skrev: On Wed, May 13, 2009 at 9:09 PM, alexus ale...@gmail.com wrote: On Wed, May 13, 2009 at 12:58 PM, alexus ale...@gmail.com wrote: i need to redirect bunch of ports, or port-range from outside to my jail # /etc/rc.d/ipnat reload /etc/rc.d/ipnat: DEBUG: checkyesno: ipnat_enable is set to YES. /etc/rc.d/ipnat: DEBUG: run_rc_command: doit: /sbin/ipnat -F -C -f /etc/ipnat.rules 0 entries flushed from NAT table 2 entries flushed from NAT list syntax error error at port-range, line 8 # grep port-range /etc/ipnat.rules rdr bce0 0/0 port-range 49152:65534 - lama port-range 49152:65534 tcp # -- http://alexus.org/ that rule is wrong to begin with as rdr doesn't work with ranges, i guess I need to use something else.. anyone done something like that? use ipnat to map range of ports? this is for ftp PASV Looks like it's time to convert your rules into PF then start using PF. Dear Mailing List, Since this answer quite obviously isn't helping anyone - why can't everyone just be happy with software that actually works well on FreeBSD and disregard petty licensing differences - let us try and help instead. And if you can't help - please keep the 'noise' out of the lists. Sorry for possibly starting a flame here - what's important is to use FreeBSD and try to help to improve it. Give wise answers to people that ask - try not to tell someone to buy another car if that person wants to know how to open the door to the current one. Ipnat and FTP PASV is covered extensively in the ipfilter howto on http://www.obfuscation.org/ipf/ - this might give some pointers around using the FTP proxy in ipnat. You will need to combine this with ports allowed in ipfilter rules and also, the FTP daemon that you use will have to have the ability to control what ports to use for the data transfer. For instance, if you use pure-ftpd you will need to set the following parameter to be able to use the ports 1024-2024 for PASV data: PassivePortRange 1024 2024 The ipnat rule would be something like: rdr external_interface 0.0.0.0/0 port 1024-2024 - internal.ftp.ip port 1024 tcp And the ipfilter rule would be pass in quick on external_interface proto tcp from any to any port 1023 2025 flags S keep state keep frags pass out quick on external_interface proto tcp from any port 1023 2025 to any keep state With of course the ftp server port opened as well pass in quick on external_interface proto tcp from any to any port = ftp_server_port flags S keep state keep frags Good luck! /R i dont see how things are obvious for you as they not so obvious for me. first of all my ipf default policy to allow everything. so the original question is for ipnat and not for ipf now for non-passive (active) i put in these rules rdr bce0 0/0 port ftp-data - lama port ftp-data tcp rdr bce0 0/0 port ftp - lama port ftp tcp and for pasv i still dont know what to do i've tried rdr bce0 0/0 port 49152-65534 - lama port 65534 and in my ftp i said that this is range for pasv connections yet i'm able to make a connection (but that goes through ftp/tcp(21)) and whenever i enter into pasv it stops working... Hi Alexus, You need to RDR the ports that the ftp protocol use for the DATA transfer in PASV mode. You can find information about this at wikipedia - http://en.wikipedia.org/wiki/File_Transfer_Protocol or by reading the FTP RFC. RDR is ipnat - the line goes into the ipnat configuration file. Good luck! /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: ipnat port-range
Odhiambo ワシントン skrev: On Wed, May 13, 2009 at 9:09 PM, alexus ale...@gmail.com wrote: On Wed, May 13, 2009 at 12:58 PM, alexus ale...@gmail.com wrote: i need to redirect bunch of ports, or port-range from outside to my jail # /etc/rc.d/ipnat reload /etc/rc.d/ipnat: DEBUG: checkyesno: ipnat_enable is set to YES. /etc/rc.d/ipnat: DEBUG: run_rc_command: doit: /sbin/ipnat -F -C -f /etc/ipnat.rules 0 entries flushed from NAT table 2 entries flushed from NAT list syntax error error at port-range, line 8 # grep port-range /etc/ipnat.rules rdr bce0 0/0 port-range 49152:65534 - lama port-range 49152:65534 tcp # -- http://alexus.org/ that rule is wrong to begin with as rdr doesn't work with ranges, i guess I need to use something else.. anyone done something like that? use ipnat to map range of ports? this is for ftp PASV Looks like it's time to convert your rules into PF then start using PF. Dear Mailing List, Since this answer quite obviously isn't helping anyone - why can't everyone just be happy with software that actually works well on FreeBSD and disregard petty licensing differences - let us try and help instead. And if you can't help - please keep the 'noise' out of the lists. Sorry for possibly starting a flame here - what's important is to use FreeBSD and try to help to improve it. Give wise answers to people that ask - try not to tell someone to buy another car if that person wants to know how to open the door to the current one. Ipnat and FTP PASV is covered extensively in the ipfilter howto on http://www.obfuscation.org/ipf/ - this might give some pointers around using the FTP proxy in ipnat. You will need to combine this with ports allowed in ipfilter rules and also, the FTP daemon that you use will have to have the ability to control what ports to use for the data transfer. For instance, if you use pure-ftpd you will need to set the following parameter to be able to use the ports 1024-2024 for PASV data: PassivePortRange 1024 2024 The ipnat rule would be something like: rdr external_interface 0.0.0.0/0 port 1024-2024 - internal.ftp.ip port 1024 tcp And the ipfilter rule would be pass in quick on external_interface proto tcp from any to any port 1023 2025 flags S keep state keep frags pass out quick on external_interface proto tcp from any port 1023 2025 to any keep state With of course the ftp server port opened as well pass in quick on external_interface proto tcp from any to any port = ftp_server_port flags S keep state keep frags Good luck! /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Tips Trix: Eclipse on 7.1 STABLE and swt-gtk issue
Dear mailing list, I don't know if anyone has noticed or if it's my machine having stale ports but it seems that to make eclipse 3.4.1 working on FreeBSD 7.1 STABLE with diablo-jdk-1.6.0.07.02_4 you need to do the following: Do _not_ make clean until you have made: cp /usr/ports/java/eclipse/work/plugins/org.eclipse.swt.gtk.freebsd.x86/gtk/library/libswt* /usr/local/diablo-jdk1.6.0/jre/lib/i386/client/ It seems like make install builds the swt-gtk:s but that the .jar somehow 'misses' adding them in. /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: problem redirecting with ipnat
David Banning skrev: I am attempting to route local and external traffic to a second machine on port 85 to apache. The redirection works for external traffic coming in but I cannot seem to redirect local traffic to the secondary machine. Here are my ipnat rules; rdr fxp0 0/0 port 85 - 192.168.1.10 port 85 rdr tun0 0/0 port 85 - 192.168.1.10 port 85 rdr dc0 0/0 port 80 - 192.168.1.1 port 8180 where 192.168.1.1 is the local machine and 192.168.1.10 is the secondary machine the third ipnat entry simply redirects all outgoing browser traffic to squid/dansguardian Here is my ifconfig; [r...@3s1 /etc]# ifconfig fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 options=8VLAN_MTU inet 209.161.205.12 netmask 0xff00 broadcast 209.161.205.255 ether 00:0d:60:09:fc:6e media: Ethernet autoselect (10baseT/UTP) status: active dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 options=8VLAN_MTU inet 192.168.1.1 netmask 0xff00 broadcast 192.168.1.255 ether 00:20:78:0e:13:d6 media: Ethernet autoselect (10baseT/UTP) status: active plip0: flags=108810POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT mtu 1500 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 inet6 ::1 prefixlen 128 inet 127.0.0.1 netmask 0xff00 tun0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1492 inet 209.161.205.12 -- 207.136.64.7 netmask 0x Opened by PID 356 [r...@3s1 /etc]# Externally, simply http://3s1.com:85 works but will not work locally - wondering if anyone could provide direction here. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org Hello David, It looks like you are trying to port forward using a NAT tool(?) May I suggest that you use a port forward tool instead? Try portfwd-0.29 from ports. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: analyzing httpd-error.log
Charles Howse skrev: On Mar 28, 2009, at 11:51 PM, Olivier Nicole wrote: Hi, Webalizer is doing what it's supposed to with httpd-access.log, but when I give it the error log to process is coughs, spits and spills out errors with no data processed. My research hasn't turned up a good solution for webalizer and -error.log. The format of error log is pretty much different from the format of transfer log. No wonder webalizer is not liking it. You may have to write your own format for th error log. Well, can anyone suggest a port that will parse the error.log and output it to a web page that's easy to read? Also, in httpd.conf what level of detail should I set in the error.log to get the most information. It's currently set to 'warn', which I understand to be 'warn' and everything more critical than that. I don't care about the size of the log, or the amount of garbage per line. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org Hi Charles, I don't know if this will help you but try looking at Lire (logreport.org). For just collecting and web-based viewing phplogcon from www.phplogcon.org can be used. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Newsyslog mode on /var/log/security?
Garance A Drosehn skrev: At 10:48 PM +0200 3/29/09, Roger Olofsson wrote: Dear mailing list, I seem to have forgotten something about /var/log/security and newsyslog.conf. I get wrong mode after the trim. Excerpt from /etc/newsyslog.conf: /var/log/security 644 7 5000 * JC Are you sure that's the only line you have for /var/log/security in your /etc/newsyslog.conf file? The distributed config file has: /var/log/security600 10 100* JC Obviously you have a different entry from that, but did you remove the original entry? Output from newsyslog -vn: chmod 600 /var/log/security.0.bz2 Why is the mode not 644? /etc/rc.d/syslogd restart and newsyslog restart have been performed. I tried changing the permissions-field in my newsyslog.conf from 600 to 644, and newsyslog worked correctly for me. Hi Garance, You are correct! I missed the original line. Silly me :^D Thank you very much! /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: [OT] - Best Practices(TM) for Configuration File Changes
Glen Barber skrev: Hello, list. Before I pose my question, I am not intending to start a flame-war of any sort -- I'm just searching for different ways of doing things. With so many different version control systems available (aside from the traditional keep current backups solution), I am curious: Q: What is *your* favorite/suggestion solution to keep (working) versions of configuration files, in case something goes awry? I am specifically targeting configuration files because they are what I change the most, in avoidance of It worked 10 minutes ago... situations. Cheers, Hi Glen, For local configuration files there's a tool called rcs that can be used for tracking changes and rollback. It's a part of the FreeBSD base system. Check the man pages for rcs(1) ci(1) co(1) rcsdiff(1) and rcsintro(1) - rcsintro(1) is probably where you want to start. It's also available on other *nix systems like AIX, Red Hat, Solaris etc. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Newsyslog mode on /var/log/security?
Dear mailing list, I seem to have forgotten something about /var/log/security and newsyslog.conf. I get wrong mode after the trim. Excerpt from /etc/newsyslog.conf: /var/log/security 644 7 5000 * JC Output from newsyslog -vn: chmod 600 /var/log/security.0.bz2 Why is the mode not 644? /etc/rc.d/syslogd restart and newsyslog restart have been performed. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Unlimited storage?
Dear Mailing List, What would this look like for FreeBSD? --- Many servers with local HDs One (1) storage for all servers using local HDs on all servers (RAID) File system that allows growth (also negative growth) --- What components and software would be required? /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: freebsd 7.1 and high avalalibity
gahn skrev: Hi all: What kind of options do I have for HA software in terms of Freebsd 7.1? I have two servers that need to work in symphony so that in case one down then we have another replica to work with. Thanks in advance ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.0.234 / Virus Database: 270.10.23/1947 - Release Date: 02/10/09 17:44:00 Hello gahn, CARP or freevrrpd. http://www.freebsd.org/doc/en/books/handbook/carp.html http://www.freshports.org/net/freevrrpd/ /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: having trouble with OpenOffice
af300...@gmail.com skrev: Hi, Tonight I finally took the bull by the horns and got OpenOffice installed. However, I'm not having a problem that I haven't found an answer to yet but seems to be related to the X server (from searches on the net). So, I do this: [a...@sniper /usr/home/andy]$ /usr/local/bin/openoffice.org-2.4.2-scalc I18N: Operating system doesn't support locale en_US The application cannot be started. The component manager is not available. Segmentation fault (core dumped) As you can tell, OpenOffice failed because my OS doesn't support locale en_US. Huh!?! I'm using the English version. In fact, the only way to consider me as being bilingual is something of a matter of mental gymnastics because English is spoken in England and to me, England is a foreign country. Thus, I'm bilingual, or at the least, I speak a foreign language. Never the less, how would this be fixed? Andy ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.0.233 / Virus Database: 270.10.18/1936 - Release Date: 02/02/09 19:21:00 Hello Andy, I seem to recall that this is a make option, like for instance: make LOCALIZED_LANG=sv I would suppose that sv in your case would be en. Good Luck. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: xdm doesn't run as daemon
Anton Shterenlikht skrev: After upgrades of 23-24 Jan 2009 xdm is not working: # xdm # ps ax|grep xdm 75632 p1 S+ 0:00.01 grep xdm # cat /var/log/xdm.log # So no xdm daemon. My system: FreeBSD 6.4-STABLE alpha, xdm-1.1.8_1. Any ideas? No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.0.233 / Virus Database: 270.10.18/1935 - Release Date: 02/02/09 19:21:00 Hi Anton, Tried detaching it? xdm /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Keeping FreeBSD updated (the binary way)
Svein Halvor Halvorsen skrev: Hi, list! I have just acquired a new computer to replace an old server. This older server has been running FreeBSD 5.3 since 2004 and most of its packages are way out of date. I've been scared of changing something in fear of rendering the machine unbootable, or some core applications unrunnable. I want to make sure I have better routines this time around, when I'm starting a-fresh. I'd like to keep my system and packages fairly up to date, and still keep the compiling to a minimum. Is it possible to pkg_add -r packages from -STABLE on the latest -RELEASE? That is, will the following work, or slowly render my system to an incoherent state: 1) Regularly run freebsd-update 2) Regularly run portsnap 3) Set my PACKAGESITE to the -STABLE location 4) Regularly run portupgrade -P Will the postsnap'ed index always be in sync with what's available as precompiled packages for -STABLE? Will these -STABLE packages always run on my freebsd-update'd -RELEASE system? If some ports have the NO_PACKAGE bit set, will compiling them against dependencies from -STABLE work, as long as I've run portsnap? Svein Halvor ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.10.12/1909 - Release Date: 2009-01-22 07:08 Hello Svein, When I recently went from 6 to 7 I realized that it is less time-consuming to wipe the machine clean and install fresh from the cd. The pre-condition for this is separated disks for system and data. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: looking for a fail over system
Buck Jones skrev: MY web server just died and It's taking some time to get back up . I want to find a fail over device so when one computer dies another automatically takes over. of course letting me know this happened would be a good thing too. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.10.10/1906 - Release Date: 2009-01-21 07:07 Hello Buck, I have been using some approaches over the years. One is a hot/cold failover like carp only I used freevrrpd (/usr/ports/net/freevrrpd). The second one is a simple loadbalancer called pen (/usr/ports/net/pen (http://siag.nu hit the 'More stuff' link). The third approach would be using dns - providing you run your own dns, you could do simple round-robin (http://en.wikipedia.org/wiki/Round_robin_DNS). The easiest one, providing you have a mirror of your web server would probably be pen. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Memory Usage
Grant Peel skrev: Hi all, Does anyone have scripts they may be willing to share the parses any FreeBSD utility (top, w, etc) suitable for using the output to use mrtg to show memory and disk usage? -Grant ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.10.2/1871 - Release Date: 2009-01-01 17:01 I used to use mrtg but ever since Cacti came along I've been using that instead. Cacti is excellent. It's in ports. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Nice web interface or music?
stan skrev: I's like to set up my MP3's so that I can access them from the web server on my Free-BSD 7.1 machine. Is there a port, that provides a nice interface to this? I'd like something better than just letting Apache display the directories. Sugestins? No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.10.1/1870 - Release Date: 2008-12-31 08:44 Hello Stan, Saw something called subsonic over at http://subsonic.sourceforge.net/changelog.php that looks interesting. Unfortunately I can't find it in ports and I haven't had time to try installing it yet. Looks like it needs Jetty or Tomcat as a base. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Wireless router?
Corey Chandler skrev: Roger Olofsson wrote: Corey Chandler skrev: Nerius Landys wrote: Thank you all for your suggestions. This will be a project for me over the holidays. I decided to go the standalone wireless router approach. Good man! I will need to figure out how to configure my standalone wireless router to pass everything through to the internal LAN that I already have. It's called Bridge mode on most APs-- it does exactly what you describe. Just make sure things like DHCP server are turned off or you'll see some... odd breakages. Also I don't know too much about security, like how to prevent eavesdroppers from connecting to my internal network. One of you mentioned access lists, and I assume that means I tell the wireless router which MAC addresses it accepts, and nothing else. Ugh. MAC addresses are trivial to spoof-- I usually don't bother with using them for security, although I do use 'em to ensure that particular machines always inherit particular addresses. Is there any other way to provide security? Like a password-protected network? What are the buzzwords for these security schemes? Which security scheme do you recommend for preventing random people within proximity from connecting to my internal netowrk? Absolutely. Google for WPA or WPA2; WEP has been broken and is trivial to bruteforce, so I'd not bother with that. Once you get the unit in, feel free to email me off list for configuration questions; it sounds like a fun project! -- CJC ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.10.0/1861 - Release Date: 2008-12-22 11:23 Hello Corey, I don't use 'bridge mode'. I set a normal LAN ip for the wifi router - as well as ips to the FreeBSD gateway and dns. This is for the LAN part of the router - then another internal LAN ip for the wifi part. To examplify. Wifi router LAN part - ip 192.168.0.20, gateway 192.168.0.1, dns 192.168.0.10 and 192.168.0.11. Wifi wifi part - network 10.0.0.1 - 10.0.0.10. The problem with doing that is a lot of systems start throwing weird errors in a double NAT environment. I'd probably avoid that step and restrict wireless to its own VLAN if I were to go that route... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.10.0/1865 - Release Date: 2008-12-26 13:01 Hello Corey, There is no double NAT involved. /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Wireless router?
Nerius Landys skrev: Thank you all for your suggestions. This will be a project for me over the holidays. I decided to go the standalone wireless router approach. I will need to figure out how to configure my standalone wireless router to pass everything through to the internal LAN that I already have. Also I don't know too much about security, like how to prevent eavesdroppers from connecting to my internal network. One of you mentioned access lists, and I assume that means I tell the wireless router which MAC addresses it accepts, and nothing else. Is there any other way to provide security? Like a password-protected network? What are the buzzwords for these security schemes? Which security scheme do you recommend for preventing random people within proximity from connecting to my internal netowrk? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.10.0/1861 - Release Date: 2008-12-22 11:23 Hello again Nerius, You have understood the MAC filtering correctly. You should also encrypt the wifi traffic by using at least WPA encryption. For most wifi routers this is a checkbox and a key or a passphrase that you enter. All clients that wants access and have their MAC address in the access list will have to enter the passphrase/key on the first connect. This means that you control the MAC address list - all new wifi devices that wants to connect to your wifi LAN needs to get added to the MAC access list - manually by you. You also control the encryption passphrase - all wifi clients that wants to connect to your wifi LAN need to know the encryption passphrase. If you use WPA for encryption you will have a higher degree of security than using the old and hackable WEP. Of course both the MAC list and the encryption key/passphrase are stored in the wifi router - so if you don't set a proper password for admin access to this one - all is lost. You should disable wireless access for admin (remote management) to it - only allow cabled access and use a good strong password. Buzzwords? I dunno - I hope people on the mailing list help me out here... Is there a better/simpler way of doing this? Greetings /Roger For a good laugh ... Enjoy Jason Dixons presentations from the BSDcon on http://www.youtube.com/watch?v=g7tvI6JCXD0feature=channel_page or http://www.youtube.com/watch?v=mMmbjJI5su0feature=channel_page ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Wireless router?
Corey Chandler skrev: Nerius Landys wrote: Thank you all for your suggestions. This will be a project for me over the holidays. I decided to go the standalone wireless router approach. Good man! I will need to figure out how to configure my standalone wireless router to pass everything through to the internal LAN that I already have. It's called Bridge mode on most APs-- it does exactly what you describe. Just make sure things like DHCP server are turned off or you'll see some... odd breakages. Also I don't know too much about security, like how to prevent eavesdroppers from connecting to my internal network. One of you mentioned access lists, and I assume that means I tell the wireless router which MAC addresses it accepts, and nothing else. Ugh. MAC addresses are trivial to spoof-- I usually don't bother with using them for security, although I do use 'em to ensure that particular machines always inherit particular addresses. Is there any other way to provide security? Like a password-protected network? What are the buzzwords for these security schemes? Which security scheme do you recommend for preventing random people within proximity from connecting to my internal netowrk? Absolutely. Google for WPA or WPA2; WEP has been broken and is trivial to bruteforce, so I'd not bother with that. Once you get the unit in, feel free to email me off list for configuration questions; it sounds like a fun project! -- CJC ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.10.0/1861 - Release Date: 2008-12-22 11:23 Hello Corey, I don't use 'bridge mode'. I set a normal LAN ip for the wifi router - as well as ips to the FreeBSD gateway and dns. This is for the LAN part of the router - then another internal LAN ip for the wifi part. To examplify. Wifi router LAN part - ip 192.168.0.20, gateway 192.168.0.1, dns 192.168.0.10 and 192.168.0.11. Wifi wifi part - network 10.0.0.1 - 10.0.0.10. MAC addresses are indeed trivial to spoof - but if combined with a wifi encryption key/passphrase it adds to security. Greetings /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Wireless router?
Nerius Landys skrev: I have a PC with FreeBSD set up as a router (NAT). The PC has several network cards and I'm grouping the internal-facing network cards as a bridge (promiscuous mode for the interfaces). Everything works well. Now I'd like to extend my wired network to include wireless. I really have no experience with wireless networks. I have a couple of computers that are wireless-ready (a laptop and a Playstation 3 that I won in a raffle). Is it possible to somehow add some hardware to my FreeBSD router PC to make it into a wireless router? What kind of hardware would I install? What is it called? The PC only has PCI slots, can you recommend a brand and model of wireless server equiptment if such a thing exists? Would a normal wireless card suffice? What model should I get? I would prefer to set up static internal IPs for my wireless network at home, would this be possible? Or is DHCP the way to go (I hesitate at the thought of configuring a DHCP server). Another way to go is to hook up a standalone wireless router appliance to my FreeBSD machine's network interface (one of the interfaces). I already have such a device, I think it's made by Linksys. But then, I would be NAT'ing both through the FreeBSD machine and through the wireless router. So it would be a double-NAT so to speak. Is there anything wrong with that approach? So in a nutshell, I have a wired FreeBSD router with multiple ethernet jacks at home, and I want to extend it to include wireless network. Any suggestions would be appreciated. Thanks. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.10.0/1861 - Release Date: 2008-12-22 11:23 Hello Nerius, I simply bought a standard wireless router, turned off all services in it except the access list and plugged it in the LAN. The access list filters on mac addresses and that level of security is fine where I live. The wireless router does have firewall, dhcp, port triggering and such but I disabled all of those since my FreeBSDs do all of that already. The wireless router has one port for internet and four ports as a normal switch, I don't use the internet port. I just plug in the ethernet cable in the switch part as uplink. I considered having a wifi nic as accesspoint in the FreeBSD main router, however, it was better for me to be able to place the wifi router for optimal range of the wifi. Turned out that the centre point for wifi is not the same as where the main router is Greetings /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: general question about setting up gateway
Richard Yang skrev: hi, i am trying to use freebsd as my home network gateway to the internet. any good reference i should know besides what's in the handbook? thanks rich ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.9.19/1857 - Release Date: 2008-12-19 10:09 Hello Richard, The first step is really easy - assuming you have a FreeBSD with two nics in it - edit /etc/rc.conf and comment out the line that starts with 'defaultrouter=' and then add a line saying 'gateway_enable=YES. The second step is a bit more complicated - you will have to decide on a firewall and a NAT mechanism. Depending on your choice here you will have to do various things to implement it. The handbook is a good start when chosing firewall - http://www.freebsd.org/doc/en/books/handbook/firewalls.html . There are alot of other additional information spread out on the (w)internet - here's a couple: ipfilter http://freebsd.peon.net/tutorials/21/ ipfilter and pf resources http://www.obfuscation.org/ipf/ pf http://web.irtnog.org/howtos-orig/freebsd-firewall I hope this will help you get started. Greetings /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Snow in my Server
Gary Hartl skrev: Help, I'm in southern Ontario and I have 20cm of snow on my freebsd 7-release server. IT seems to be causeing some http outages. My FBSD 6-.0 doesn't seem to be affected thou. Any suggestions, Cheers, Gary ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.9.19/1857 - Release Date: 2008-12-19 10:09 Locate roof in ports and build roof! /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Canonical way for DHCP-IP-/etc/hosts
Greg Larkin skrev: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Roger Olofsson wrote: Jeff Laine skrev: On Sun, Dec 14, 2008 at 02:00:12PM +0100, Roger Olofsson wrote: Dear mailing list, I am sorry if this question has been asked over and over again - however the htdig search interface for the lists is somewhat shaky and gives referrer errors for me. Pre-conditions. Dualhomed firewalled FreeBSD7.1. One nic is LAN and the other dynamical IP from ISP. Question: What is the canonical way for catching the IP address from a DHCP assigned nic (from ISP that doesn't set hostname) and put the IP into /etc/hosts with a hostname? Reason for asking Firewall rules needs refreshing after new IP Possible answers: Create dhcp-exit-hooks (undocumented?) in /etc like so: #!/bin/sh if [ ! -z $new_ip_address ]; then IP=`ifconfig WAN | grep 'inet' | grep -v 'inet6' | cut -f 2 -d ' '` if [ ! -z $IP ]; then echo $IPwan.local.domain wan /etc/hosts refresh firewall rules here fi fi Hello. I think pf can handle with dhcp updates on interfaces pretty well. If only I get your question right. Hi Jeff and thank you for your reply, Yes, I know that pf will handle interfaces just fine, the question was not specific to pf though but more around dhclient, dhclient-script and the part of dhclient-script that calls the undocumented dhclient-exit-hooks. It might be handy to have the external IP assigned to a hostname - not only for pf. /R Hi Roger, I wrote a blog post about automatically configuring /etc/hosts with a DHCP dynamic IP address earlier this year: http://blog.sourcehosting.net/tag/dhcp/. You can download a ZIP file with the dhclient-exit-hook script in it near the bottom of the page. In my case, I also wrote some commands to update the Apache httpd.conf file with the correct ServerName directive. You can easily remove that from the script if you don't need it. If you need any assistance, let me know. Regards, Greg -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAklG1FEACgkQ0sRouByUApB1SACgmfJ4EtiyKdhyPgILZyc77Fxc gHMAnRGGBWIya0Fg314LyrJZq9tTZvbj =jHL5 -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.9.18/1849 - Release Date: 2008-12-15 09:01 Hello Greg, Thank you very much. I guess this is the canonical way of doing it. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Canonical way for DHCP-IP-/etc/hosts
Roger Olofsson skrev: Dear mailing list, I am sorry if this question has been asked over and over again - however the htdig search interface for the lists is somewhat shaky and gives referrer errors for me. Pre-conditions. Dualhomed firewalled FreeBSD7.1. One nic is LAN and the other dynamical IP from ISP. Question: What is the canonical way for catching the IP address from a DHCP assigned nic (from ISP that doesn't set hostname) and put the IP into /etc/hosts with a hostname? Reason for asking Firewall rules needs refreshing after new IP Possible answers: Create dhcp-exit-hooks (undocumented?) in /etc like so: #!/bin/sh if [ ! -z $new_ip_address ]; then IP=`ifconfig WAN | grep 'inet' | grep -v 'inet6' | cut -f 2 -d ' '` if [ ! -z $IP ]; then echo $IPwan.local.domain wan /etc/hosts refresh firewall rules here fi fi ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.9.17/1847 - Release Date: 2008-12-13 16:56 Sorry I mean dhclient-exit-hooks not dhcp-exit-hooks /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Canonical way for DHCP-IP-/etc/hosts
Dear mailing list, I am sorry if this question has been asked over and over again - however the htdig search interface for the lists is somewhat shaky and gives referrer errors for me. Pre-conditions. Dualhomed firewalled FreeBSD7.1. One nic is LAN and the other dynamical IP from ISP. Question: What is the canonical way for catching the IP address from a DHCP assigned nic (from ISP that doesn't set hostname) and put the IP into /etc/hosts with a hostname? Reason for asking Firewall rules needs refreshing after new IP Possible answers: Create dhcp-exit-hooks (undocumented?) in /etc like so: #!/bin/sh if [ ! -z $new_ip_address ]; then IP=`ifconfig WAN | grep 'inet' | grep -v 'inet6' | cut -f 2 -d ' '` if [ ! -z $IP ]; then echo $IP wan.local.domain wan /etc/hosts refresh firewall rules here fi fi ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Canonical way for DHCP-IP-/etc/hosts
Jeff Laine skrev: On Sun, Dec 14, 2008 at 02:00:12PM +0100, Roger Olofsson wrote: Dear mailing list, I am sorry if this question has been asked over and over again - however the htdig search interface for the lists is somewhat shaky and gives referrer errors for me. Pre-conditions. Dualhomed firewalled FreeBSD7.1. One nic is LAN and the other dynamical IP from ISP. Question: What is the canonical way for catching the IP address from a DHCP assigned nic (from ISP that doesn't set hostname) and put the IP into /etc/hosts with a hostname? Reason for asking Firewall rules needs refreshing after new IP Possible answers: Create dhcp-exit-hooks (undocumented?) in /etc like so: #!/bin/sh if [ ! -z $new_ip_address ]; then IP=`ifconfig WAN | grep 'inet' | grep -v 'inet6' | cut -f 2 -d ' '` if [ ! -z $IP ]; then echo $IP wan.local.domain wan /etc/hosts refresh firewall rules here fi fi Hello. I think pf can handle with dhcp updates on interfaces pretty well. If only I get your question right. No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.9.17/1847 - Release Date: 2008-12-13 16:56 Hi Jeff and thank you for your reply, Yes, I know that pf will handle interfaces just fine, the question was not specific to pf though but more around dhclient, dhclient-script and the part of dhclient-script that calls the undocumented dhclient-exit-hooks. It might be handy to have the external IP assigned to a hostname - not only for pf. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Quite Stumped here, need suggestions
Robert Richards skrev: Hi All: I am running: FreeBSD 6.3-RELEASE-p5 #3: Sun Oct 5 15:31:05 EDT 2008 On a Sager 8800 Laptop. I have had FreeBSD installed for about a year, and all is working perfectly. I can bring up KDE, run many apps, all without a problem, except for ONE recent development. Every so often FreeBSD initiates a clean shutdown on it's own. Xwindows goes down cleanly, kernel modules are unloaded, processes are stopped, drives are cleanly dismounted, and the system is powered down. It's exactly what you would expect if you issued a shutdown -h now command. No core files are generated, and messages, even when the OS is brought up with verbose logging shows nothing. After trying many things, including running with a previous kernel, a GENERIC kernel, running in single-user mode, running minimalist, etc I decided to buildworld and buildkernel and essentially reinstall everything. While updating sources via cvsup, there was a shutdown. A subsequent attempt completed successfully. I then cleared out /usr/obj and did a make buildworld. After 39 minutes a shutdown. Repeated this, and a shutdown happened after 7 minutes. I repeated this in single user mode, with older kernels, with GENERIC kernel, same results, the system shuts down cleanly at some point. Never at the same point or doing the same task (Yes I used script as well; script simply exits as if make said all done! ). It's as if a ghost-root issued a shutdown -h command. One additional clue. If I bring the system up without acpi the shutdown is instant, and unclean. No scripts are run, drives are left dirty, but still no clue in the logs. I am now stumped! What could cause the system to shut down in this fashion? With acpi active, the init scripts are executed in shutdown mode. What could cause the kernel to believe it has received a command to shutdown like this? I am not new to this stuff, but I have never seen anything like this. I AM new to FreeBSD, I had been running Linux for years until recently, and absolutely love the order, consistency, layout, and clean architecture of this OS. But this is weird! Where to look? What to try? I am truly stumped here. Bob No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.9.18/1848 - Release Date: 2008-12-14 12:28 Hi Bob, Do the shutdowns appear after using the lap for some time? If that is the case then I'd guess it's a heat problem or a disk failing. Have you booted to single user and done fsck? /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
mount_nfs from fstab with -L option?
Dear mailing list, What would be the correct way to do the following: mount_nfs -L server:/path mnt when using the /etc/fstab file? Greetings from Sweden /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: mount_nfs from fstab with -L option?
Steve Polyack skrev: Roger Olofsson wrote: Dear mailing list, What would be the correct way to do the following: mount_nfs -L server:/path mnt when using the /etc/fstab file? Greetings from Sweden /Roger Any options passed to mount(8)may be added (comma separated) to the Options section in /etc/fstab. For example: # Device Mountpoint FSType Options Dump Pass# server:/path /mnt nfs rw,-L 00 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.9.13/1826 - Release Date: 2008-12-03 09:34 Thank you Steve! /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
please confirm - possible bug in isc-dhcpd?
Dear mailing list, 7.1-PRERELEASE isc-dhcp30-server-3.0.7_3 When configuring failover and using FQDN instead of ip address, isc-dhcpd says failover peer can't find address. It does however start and will not, of course, work properly. The behaviour is that the very first client might get address but none after that one - causing alot of confusion. The workaround - use ip addresses in dhcpd.conf when configuring failover peer. Can anyone confirm this behaviour? Is it a bug? The man page shows an example where FQDNs are being used If it is a bug, where do I report it? Greetings /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: CUPS: cannot see printer from various program
Laszlo Nagy skrev: The printer is Epson Stylus Photo R265. I'm using gutenprint 5 and CUPS. The test page prints well from CUPS. I can also print images and web pages from firefox, because the CUPS/R265 printer can be selected in the print dialog of firefox. However, when I open an image from eog (eye of gnome), the only printer destination I can choose is LPR. Which is bad, because this is a printer server with diskless clients, and the users must be able to select print options from the GUI. The system is FreeBSD 7.0. My girlfriend had the same problem with Ubuntu before, but not with kiwi, so it might not be related to FreeBSD. Thanks, Laci ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.175 / Virus Database: 270.9.10/1812 - Release Date: 2008-11-25 19:53 Hello Laszlo, You might want to add the following lines to /etc/make.conf CUPS_OVERWRITE_BASE=yes NO_LPR=yes WITH_CUPS=yes And rebuild the application you want to print from. (The above was found on the excellent guide at http://www.math.colostate.edu/~reinholz/freebsd/) Greetings /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: XMing and FreeBSD
Pieter Donche skrev: I have - in the same subnet - a WinXP PC and a multi-boot PC with a) OpenSuse10.3, b) FreeBSD-7.0 (and c) WinXP) I installed the free X-Windows server Xming on the WinXP PC, and I can connect to the other PC when it is booted in OpenSUSE 10.3: Xming is configured for 'open session via XDMCP', I specify fully qualified hostname and I get the openSUSE username/password login screen, etc... (I didn't need to change anything in the OpenSuSE) But when that PC is booted into FreeBSD - XMing only gives me a screen with a grey background and a black X - connection seems not established. The FreeBSD runs KDM as window manager and KDE as desktop. Why and how to remedy? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.176 / Virus Database: 270.9.11/1817 - Release Date: 2008-11-28 08:17 Hello Pieter, You might want to look over your settings in the following: /usr/local/lib/X11/wdm/Xclients Make sure that paths/names etc are ok for the section about kde startkde*|kde*|KDE*) # startup kde STARTKDE_PATH=startkde if ! test -x $STARTKDE_PATH ; then FindInPath $STARTKDE_PATH if test -n $result -a -x $result; then STARTKDE_PATH=$result; fi fi if [ -x $STARTKDE_PATH ] ; then echo Starting kde $HOME/.xwm.msgs exec $STARTKDE_PATH -console $HOME/.xwm.msgs 21 fi ;; You should look for eventual settings for displaymanagers for KDM - I am sorry but I don not know where/how/if KDM has a setting for this. WDM has this in the wdm-config file - maybe KDM has something similar? (The wdm setting is like this: DisplayManager*wdmWm: WindowMaker:FluxBox) You should also check your Xorg log files for any messages - they should be in /var/log. Greetings /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: what is your programming language on freebsd?
Wojciech Puchar skrev: may be asking in the wrong mailing list, but my impression is that mono on FreeBSD is generally not a popular idea. To pose my questions to the developers in the FreeBSD community: 1. What programming language(s) do you deploy on FreeBSD? whatever i need. i personally use mostly C. 2. Is FreeBSD more optimised in performance for any particular language? i don't think so. 3. Is FreeBSD even a popular choice as a development platform, or is it better suited as a special-purpose OS (eg. mail server, DNS server)? i don't know how popular it is for what tasks. but it works excellent for all you specified. it's unix anyway. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.175 / Virus Database: 270.9.0/1771 - Release Date: 2008-11-06 07:58 IMHO there are only three alternatives left these days when creativity seems to be fading C - the prince among languages and Eclipse + Java - the future already today. And - For learning purposes - the highly underrated Pascal by Niklaus Wirth. In my mind C was created as a tool needed to create UNIXWhere did creativity like this vanish? (does anyone still use the word homepage?) (cm.bell-labs.com/~dmr) /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: CUPS wont print inside GNOME
Sean Cavanaugh skrev: I have the latest GNOME installed from ports and have the odd issue of CUPS not wanting to work with it right. If i access the CUPS web configuration page, i can print test pages just fine and not a single issue, but if i try and print a test page from inside GNOME, including trying with the gnome-cups-manager port, it will stop and present the following error /usr/local/libexec/cups/filter/pstoraster failedthis error will carry over to the web interface and those jobs are pretty much hosed, yet i can create a test print from web interface even when this error is present. I do notice that test pages from web interface come from user anonymous whereas test pages from gnome-cups-manager are from the respected user that ran it. even root is unable to print from inside gnome. -Sean ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.175 / Virus Database: 270.8.5/1757 - Release Date: 2008-10-30 14:35 Hi Sean, I assume you have cups-pstoraster installed? It should be installed when installing CUPS itself. If you built Gnome from source you should have this in /etc/make.conf CUPS_OVERWRITE_BASE=yes NO_LPR=yes WITH_CUPS=yes /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: CUPS wont print inside GNOME
Sean Cavanaugh skrev: Date: Fri, 31 Oct 2008 17:58:06 +0100 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] CC: freebsd-questions@freebsd.org Subject: Re: CUPS wont print inside GNOME Sean Cavanaugh skrev: I have the latest GNOME installed from ports and have the odd issue of CUPS not wanting to work with it right. If i access the CUPS web configuration page, i can print test pages just fine and not a single issue, but if i try and print a test page from inside GNOME, including trying with the gnome-cups-manager port, it will stop and present the following error /usr/local/libexec/cups/filter/pstoraster failedthis error will carry over to the web interface and those jobs are pretty much hosed, yet i can create a test print from web interface even when this error is present. I do notice that test pages from web interface come from user anonymous whereas test pages from gnome-cups-manager are from the respected user that ran it. even root is unable to print from inside gnome. -Sean ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.175 / Virus Database: 270.8.5/1757 - Release Date: 2008-10-30 14:35 Hi Sean, I assume you have cups-pstoraster installed? It should be installed when installing CUPS itself. If you built Gnome from source you should have this in /etc/make.conf CUPS_OVERWRITE_BASE=yes NO_LPR=yes WITH_CUPS=yes /Roger i have cups-pstoraster installed. like i said, i can get a test page to print fine from the CUPS web page, just not if it was initialized inside gnome even though i do see the print jobs sitting in the queue for the printer with status Stopped. Restarting the jobs doesnt help them any either. i installed everything from ports but my make.conf file is a little bare UnKnown# less /etc/make.conf # added by use.perl 2008-10-23 14:57:35 PERL_VER=5.8.8 PERL_VERSION=5.8.8 -Sean ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.175 / Virus Database: 270.8.5/1757 - Release Date: 2008-10-30 14:35 Hi again Sean, Add the lines, make reinstall and see if Gnome picks it up.. There's an excellent site at http://www.math.colostate.edu/~reinholz/freebsd/ that has CUPS related information. Please let the list know if it helps! /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: gconcat question
-Ursprungligt Meddelande- From: John Nielsen [EMAIL PROTECTED] Sent: 19/10/2008 3:39:00 AM To: freebsd-questions@freebsd.org Cc: [EMAIL PROTECTED] Subject: Re: gconcat question On Saturday 18 October 2008, Roger Olofsson wrote: What are the steps to bring back gconcatenated disks if doing an upgrade from FreeBSD6 to FreeBSD7 like this? As-is situation: FreeBSD 6.2-STABLE ad0 has FreeBSD ad1, ad2 and ad3 are gconcatenated using 'gconcat label -v data /dev/ad1 /dev/ad2 /dev/ad3'. The concat device should just appear automatically after the upgrade as long as you (continue to) load the geom_concat kernel module. Be aware that if the on-disk metadata format has changed then it will automatically be upgraded. This is usually a good thing but if you need to roll back to 6.x for some reason it's something to take into consideration. Planned upgrade: Reboot from cdrom, install FreeBSD7 from cd to ad0 Just curious, is there a reason you're going this route instead of upgrading from source? JN . Hello John and thank you for your reply! Follow-up question - /dev contains a /dev/concat/label entry - is this entry created when loader.conf invokes the kernel module? The machine won't be rollbacked so that's not an issue. The reason for following this route is that it's faster than doing it from source (it's an old machine). The machine has been a playground and has alot of ports installed that aren't being used anymore. The concatenated drives contain data only hence the need to preserve those. /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: gconcat question SOLVED
-Ursprungligt Meddelande- From: John Nielsen [EMAIL PROTECTED] Sent: 19/10/2008 5:52:51 PM To: [EMAIL PROTECTED] Cc: freebsd-questions@freebsd.org Subject: Re: gconcat question On Sunday 19 October 2008, Roger Olofsson wrote: -Ursprungligt Meddelande- From: John Nielsen [EMAIL PROTECTED] Sent: 19/10/2008 3:39:00 AM To: freebsd-questions@freebsd.org Cc: [EMAIL PROTECTED] Subject: Re: gconcat question On Saturday 18 October 2008, Roger Olofsson wrote: What are the steps to bring back gconcatenated disks if doing an upgrade from FreeBSD6 to FreeBSD7 like this? As-is situation: FreeBSD 6.2-STABLE ad0 has FreeBSD ad1, ad2 and ad3 are gconcatenated using 'gconcat label -v data /dev/ad1 /dev/ad2 /dev/ad3'. The concat device should just appear automatically after the upgrade as long as you (continue to) load the geom_concat kernel module. Be aware that if the on-disk metadata format has changed then it will automatically be upgraded. This is usually a good thing but if you need to roll back to 6.x for some reason it's something to take into consideration. Planned upgrade: Reboot from cdrom, install FreeBSD7 from cd to ad0 Just curious, is there a reason you're going this route instead of upgrading from source? Hello John and thank you for your reply! Follow-up question - /dev contains a /dev/concat/label entry - is this entry created when loader.conf invokes the kernel module? Yes. Many of the GEOM modules (label, mirror, concat, stripe, etc) create nodes in the relevant subdirectories in /dev as soon as they taste the drives (or other providers) and discover metadata belonging to them. This is generally when they are loaded (if modules) or at boot time (if compiled into the kernel or preloaded by loader.conf). Any time you insert a device (such as a USB stick) the loaded modules also have an opportunity to taste it and create nodes as appropriate. The machine won't be rollbacked so that's not an issue. The reason for following this route is that it's faster than doing it from source (it's an old machine). The machine has been a playground and has alot of ports installed that aren't being used anymore. The concatenated drives contain data only hence the need to preserve those. Makes sense. :) JN . Thank you John, it worked excellent! /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
gconcat question
Dear mailing list, What are the steps to bring back gconcatenated disks if doing an upgrade from FreeBSD6 to FreeBSD7 like this? As-is situation: FreeBSD 6.2-STABLE ad0 has FreeBSD ad1, ad2 and ad3 are gconcatenated using 'gconcat label -v data /dev/ad1 /dev/ad2 /dev/ad3'. Planned upgrade: Reboot from cdrom, install FreeBSD7 from cd to ad0 /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
HALP PLEASE!!! USB MOUSE JERKINESS SPORADIC MADNESS
I ain't sure if this is the right place for these kinds of questions so here goes it. Every time I'm playing an OpenGL game in X and use the scrollwheel of my mouse, it seems as though the response time of the mouse decreases and mouse movements get real slow for a bit and then go back to normal until I scroll the scrollwheel up or down. I have /dev/sysmouse in my Xorg.conf. Does anyone have any idea what might be causing this erratic behavior? Thanks in advance for any help anyone might be helpful enough to offer. This problem has been eating me for the past month. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Video streaming with freeBSD
Sam Fourman Jr. skrev: If the main purpose of your box is to be a PVR, I suggest going with a Linux distribution and using MythTV (http://www.mythtv.org). While I am a fan of FreeBSD as a web/mail/etc. server, it did not meet my needs when attempting to build a PVR. I found the Gentoo Linux distribution most comfortable for me because it uses a portage system similar to the ports system of FreeBSD. Others I tried were package based and didn't always support my hardware. I would like to try and put together the most functional FreeBSD based PVR system possible, even if it does have less functionality than it's Linux counterpart. does anyone have a recipe for a working FreeBSD based PVR? if not post Ideas for software / configurations / Hardware, and I will l make a web page out of it. Sam Fourman Jr. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.138 / Virus Database: 270.6.0/1602 - Release Date: 2008-08-09 13:22 Some year back I was meddling around with VLC (videolan) that does a pretty good job of the streaming part. There was issues with threads at the time so I let it rest though. Xmltv to grab the channels listings should also work. TV cards supported should be in the handbook Please let us know the uri for the webpage! /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Wireless (Edimax EW-7128g / ral) to work on FreeBSD 7.0
On Fri, Aug 8, 2008 at 7:46 AM, David Gurvich [EMAIL PROTECTED] wrote: I'm not sure of your settings, but increasing tx power is only good for transmitting and will increase noise, hurting reception. Your S:N numbers look quite poor, I rarely get any handshake when signal is that bad. I'm surprised you managed to get a dhcp offer. Have you tried this computer in the same location as the windows machines? How far from the router are you compared to those? The machines are right near each other. I've even tried swapping the antennas only to find the same result. I tried decreasing txpower to 32, 36, 40 which did not seem to help. My laptop is even farther away (about 50 feet) from the router than my freebsd machine and has a much better signal. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Wireless (Edimax EW-7128g / ral) to work on FreeBSD 7.0
Hi, I'm running FreeBSD 7.0 and have been having trouble getting a connection to my wireless access point with the ral driver. This is the contents of my /etc/rc.conf: ifconfig_ral0=ssid myssid wepmode on weptxkey 1 wepkey key here bssid ap bssid DHCP When I run 'dhclient ral0' to get the network parameters, it seems to be sending out several DHCPDISCOVER messages with no offers. I'll rarely get an offer and send out the request. I have txpower set to 50 (highest value accepted by this driver I guess) and this is what a typical scan shows; # ifconfig ral0 scan SSID BSSID CHAN RATES:N INT CAPS myssid bssid 11 54M -91:-95100EPWME # ifconfig ral0 ral0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 ether addr media: IEEE802.11 Wireless Ethernet autoselect (OFDM/54Mbps) status:associated ssid myssid channel 11 (2462 Mhz 11g) bssid ... authmode OPEN privacy ON deftxkey 1 wepkey 1:... bmiss 7 scanvalid 60 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi11g roam:rate11g 5 protmode CTS FWIW, I have this same wireless card on several of my windows machines and it seems to be working flawlessly :( ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: High Availability FreeBSD www cluster
Michael Christie skrev: Hi all , I want to cluster some freeBSD servers, The purpose of this is to learn. I would like to run some basic services like www and mail on a test network. I would like to set up the servers so if one server falls over the other will take over the services automatically, load balanceing would be good as well. I have googled, I could be looking in the wrong place , there seems not to be much in regard to seting up freebsd in a cluster, lots on linux. I have looked at the High Availability Linux project , I see on the front page that it will run on freebsd. So I am a bit lost and i am wanting to learn how to cluster freebsd web and mail servers, I have looked at Beowulf clusters, which seem to give computers more grunt, Can some on on the list please advise me on what clustering softwhere i need to get started and if the High Availability Linux project softwhere will do the job. web links any thing to help me get started would be good. No I do not want to change over to linux. Thanks ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.138 / Virus Database: 270.5.12/1595 - Release Date: 2008-08-06 08:23 Hello, I have been running freevrrpd and pen (http://siag.nu/pen/ or in ports) for HA web services. My setup was a firewall/gateway consisting of more than 1 machine using freevrrpd thus enabling failover for the firewall/gateway. I write firewall and not firewalls since freevrrpd creates a virtual ip that is failover'ed between the machines. On the firewall/gateway pen were running and pointed towards the web servers. Pen can point at as many web servers as you like and balances the load between them in a very simple way. If the web servers are identical in setup they become redundant. DNS loadbalancing is very similar. Good luck! /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: freebsd and fluxbox locales
Hello Kenneth, I think you need to run xorgconfig and set the appropriate keyboard when creating xorg.conf. For fluxbox there is however a file called keys in the .fluxbox directory if there is any special character you would want mapped (For FreeBSD you set it with sysinstall but that is not the issue here) /Roger kenneth hatteland skrev: I have read all I can google and the handbook trying to make my norwegian special keys working along with @ amongst others. so something is wrong with my locales. I have been given many things to try but no luck whatsoever. this is my.login.conf :charset=ISO-8859-1:\ :lang=nb_NO.ISO8859-1: this is .bashrc export LANG=nb_NO.ISO-8859-1 export LC_ALL=nb.NO.ISO-8859-1 anyone who` s got something else for me to try is very apprecheated :) Kenneth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.138 / Virus Database: 270.5.9/1583 - Release Date: 2008-07-31 06:17 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Locate command
Rem P Roberti skrev: Whenever I do a locate command on a new installation I get this message: locate: database too small: /var/db/locate.database Can someone give me a heads up on how to fix this? Thanks, Rem ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG - http://www.avg.com Version: 8.0.138 / Virus Database: 270.4.7/1542 - Release Date: 2008-07-09 06:50 Actually, the very first thing I always do after installing a FreeBSD is add this line to crontab: 00 02 * * * /usr/libexec/locate.updatedb I guess I'm a locate-freak ;^D /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Load balance for POP3
[EMAIL PROTECTED] skrev: Hi All, I need to switch the users connections between two POP3 servers based on login information. Since the login is part of the pop3 handshake, I'm stuck on how to transfer the connection and pass the info already sent. I'm trying to script something with socat (http://www.dest-unreach.org/socat/doc/socat.html). I'll appreciate any clue. TIA, - Marcelo ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] No virus found in this incoming message. Checked by AVG. Version: 8.0.101 / Virus Database: 270.4.1/1522 - Release Date: 2008-06-27 08:27 You might want to take a look at Pen /usr/ports/net/pen. /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Off topic: Online article DIY - kernel module
Dear newsgroup, I accidentally stumbled over an article that allegedly describes how to make your own kernel module for FreeBSD7 and felt an urge to share this. The article can be found and downloaded at www.freesoftwaremagazine.com. /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Off topic: Online article DIY - kernel module
Zbigniew Szalbot skrev: Hi there, Roger Olofsson: Dear newsgroup, I accidentally stumbled over an article that allegedly describes how to make your own kernel module for FreeBSD7 and felt an urge to share this. The article talks about ULE scheduler. Would you recommend using it against SCHED_4BSD in this context: CPU: Intel(R) Core(TM)2 Quad CPUQ6600 @ 2.40GHz (2400.01-MHz 686-class CPU) Jun 17 17:22:38 relay kernel: FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs Many thanks! Zbigniew Szalbot Dear Zbigniew, May I suggest that you direct your question to the author of the article? /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to fix this error?
Hello Moshiur, 1. Fetch the file php-5.2.6.tar.bz2 from (for instance) http://karakurty.odessa.ua/ftp/pub/FreeBSD/ports/distfiles/ 2. Put the file in /usr/ports/distfiles 3. Run the portmanager command again. Good luck! /Roger Moshiur Rahman Khan skrev: Dear all, I need to update some ports and portmanager could not succeed. Please help me and suggest me which activities should I apply to fix. Tell me detail because I am new in FreeBSD. Best Regards, Moshiur Rahman Khan # portmanager -u -l I found updated error for the following package: skipping php5-5.2.5_1 /lang/php5 marked IGNORE reason: failed during make skipping php5-sockets-5.2.5_1 /net/php5-sockets until dependency php5-5.2.6 updated skipping php5-snmp-5.2.5_1 /net-mgmt/php5-snmp until dependency php5-5.2.6 updated skipping php5-gd-5.2.5_1 /graphics/php5-gd until dependency php5-5.2.6 updated skipping jffnms-0.8.3_1 /net-mgmt/jffnms until dependency php5-5.2.6 updated skipping php5-ctype-5.2.5_1 /textproc/php5-ctype until dependency php5-5.2.6 updated skipping php5-mysql-5.2.5_1 /databases/php5-mysql until dependency php5-5.2.6 updated skipping php5-pcre-5.2.5_1 /devel/php5-pcre until dependency php5-5.2.6 updated skipping php5-session-5.2.5_1 /www/php5-session until dependency php5-5.2.6 updated skipping php5-bz2-5.2.5_1 /archivers/php5-bz2 until dependency php5-5.2.6 updated skipping php5-openssl-5.2.5_1 /security/php5-openssl until dependency php5-5.2.6 updated skipping pecl-pdflib-2.1.4 /print/pecl-pdflib until dependency php5-5.2.6 updated skipping php5-zlib-5.2.5_1 /archivers/php5-zlib until dependency php5-5.2.6 updated skipping php5-mcrypt-5.2.5_1 /security/php5-mcrypt until dependency php5-5.2.6 updated skipping php5-mbstring-5.2.5_1 /converters/php5-mbstring until dependency php5-5.2.6 updated skipping phpMyAdmin-2.11.4_1 /databases/phpmyadmin until dependency php5-5.2.6 updated portmanager 0.4.1_9 INFO: finished with some ports not updated if --log was used see /var/log/portmanager.log [b][u]Detail Given here in below:[/u][/b] |--- /usr/ports/Mk/bsd.port.mk Tue Nov 8 01:02:51 2005 |+++ bsd.port.mkWed Nov 16 02:16:57 2005 -- Patching file bsd.port.mk using Plan A... Hunk #1 failed at 2049. 1 out of 1 hunks failed--saving rejects to bsd.port.mk.rej done MGPMrUpdate 0.4.1_9 command: #1 of 14 cd /usr/ports/lang/php5 make -V OPTIONS checking for conflicts before building php5-5.2.5_1 MGPMrUpdate 0.4.1_9 command: #3 of 14 cd /usr/ports/lang/php5 make check-conflicts intitial clean of work directories MGPMrUpdate 0.4.1_9 command: #7 of 14: === Cleaning for /devel/autoconf261 === Cleaning for /devel/autoconf261 === Cleaning for /devel/pkg-config === Cleaning for /devel/pkg-config === Cleaning for /textproc/libxml2 === Cleaning for /lang/php5 fetch php5-5.2.5_1 MGPMrUpdate 0.4.1_9 command: #8 of 14 cd /usr/ports/lang/php5 make fetch === Vulnerability check disabled, database not found === Found saved configuration for php5-5.2.5_1 update php5-5.2.5_1 MGPMrUpdate 0.4.1_9 command: #9 of 14 cd /usr/ports/lang/php5 make === Vulnerability check disabled, database not found === Found saved configuration for php5-5.2.5_1 === Extracting for php5-5.2.6 = MD5 Checksum mismatch for php-5.2.6.tar.bz2. = SHA256 Checksum mismatch for php-5.2.6.tar.bz2. = MD5 Checksum OK for suhosin-patch-5.2.6-0.9.6.2.patch.gz. = SHA256 Checksum OK for suhosin-patch-5.2.6-0.9.6.2.patch.gz. === Refetch for 1 more times files: php-5.2.6.tar.bz2 php-5.2.6.tar.bz2 === Vulnerability check disabled, database not found === Found saved configuration for php5-5.2.5_1 = php-5.2.6.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/. = Attempting to fetch from http://br.php.net/distributions/. fetch: php-5.2.6.tar.bz2: local modification time does not match remote = Attempting to fetch from http://cn.php.net/distributions/. fetch: php-5.2.6.tar.bz2: local modification time does not match remote = Attempting to fetch from http://dk.php.net/distributions/. fetch: php-5.2.6.tar.bz2: local modification time does not match remote = Attempting to fetch from http
Re: simple network traffic query tool
Tobias Kirschstein skrev: hi, i'm looking for a small tool to query the current network traffic (kb IN and OUT) per interface. is there any sysctl or tool which gives me a similar output to systat -ifstat: /0 /1 /2 /3 /4 /5 /6 /7 /8 /9 /10 Load Average Interface Traffic PeakTotal lo0 in 0.000 KB/s 0.000 KB/s 226.079 KB out 0.000 KB/s 0.000 KB/s 226.079 KB wpi0 in 0.000 KB/s 0.000 KB/s 164.577 MB out 0.000 KB/s 0.000 KB/s6.205 MB the background: unfortunately the network monitor build into superkaramba does not work for freebsd, os i want to write a widget which uses sysctl or any other tool if available got get this information. systat is not appropriate to be used because it does not terminate on its own as i see. Hello, If you want something more of a web service you could install SNMP from ports and use Cacti (also from ports). See http://www.cacti.net/ for a quick glance at what you'll get. Just my nickels worth. /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Quick+easy port redirect
Tuc at T-B-O-H.NET skrev: Hi, Is there a quick/easy (cookbook?) way to do port redirects. Basically I want that anything that leaves a specific interface to any ip on port 80 go to 192.168.0.1 port 87. I'm using ipfw for some other things so it has to work and play well with that. Thanks, Tuc ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] That leaves. You mean only outgoing traffic from the interface and not incoming? If you mean all traffic to and from, you could try bounce. /usr/ports/net/bounce Just my nickels worth. /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: my brother is making me learn FreeBSD...
Donald Laniohan skrev: My task is to build a BSD server and do something with it. That is all the information he gave me, that, and any questions I have to make Google my best friend, which I have. i remember building my first whitebox, it was a 386 with windows 3.1. I remember when I built my 486 and stole a copy of windows 95. I thought I was a savage. BSD, however, has showed me how juvenile I have been. If I do not master BSD my brother is going to keep me as a desktop support for his windows clients and I want to progress past this. So he's giving me a 1u, and said to put BSD on it and make it do something, im just so stuck in my windows comfort zone I can't think of what I would need a unix server to that I couldn't make windows do for me. I know this is trivial but if somebody could offer any suggestion or resource I, and my career, would greatly appreciate it Donald Laniohan MLAN Consulting San Diego, CA [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] what I would need a unix server to that I couldn't make windows do for me. The answer is - nothing. Both are operating systems for computers and have unlimited possibilities. It's a matter of time and curiosity. Look at it like this: Windows: Easy things - short time to learn and do Hard things - proprietary stuff - long time to learn and do FreeBSD Easy things - longer time than above to learn and do Hard things - if you get through the easy stuff - it's a doodle If you're curious enough, you'll find time to master both. And then the next thing you get curious of and so on. On my behalf I started by trying FreeBSD some 10 odd years ago and noticed that it then vastly outperformed Windows for some of the things I used it for. Another thing was the incredible stability. Been hooked ever since. These days I've heard that Mac OSX is built on part of *BSD - must be a reason somewhere As for resources the starting point was in the thread - that'd be www.freebsd.org of course and here's some more: http://www.oreillynet.com/pub/au/73 - All hail Dru Lavigne! http://www.freebsd.org/ports/ http://freebsdhowtos.com/ http://www.freebsd.org/projects/index.html http://tomclegg.net/examples http://freebsd.peon.net/ http://www.freshports.org/ http://freebsd.teekoo.com/ http://sourceforge.net/projects/mpd/ http://www.freebsddiary.org/ http://www.bsd.org/ ...and of course www.google.com. Just my nickels worth. /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: faster booting
Martin McCormick skrev: I second the statement about BIOS checks taking a long time. After working with many FreeBSD boxes, mostly Dells and a few IBM servers, they can take forever (2 to 3 minutes) which seems like forever when one is trying to get back on line quickly. If one is using a serial console, the \|/-\|/- of the kernel loading doesn't start until most of that time is gone. I am guessing the actual FreeBSD kernel bootup is maybe 30 seconds or so. If you have a SCSI bus, be sure the settling time built in to the boot process is as short as will still work correctly. Earlier versions of FreeBSD waited 15 seconds default. I safely got it down to 1.5 seconds and might have even gotten it shorter if I really knew how long it took the bus to settle. Martin McCormick WB5AGZ Stillwater, OK Systems Engineer OSU Information Technology Department Network Operations Group ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] I tend to not reboot machines...FreeBSD somehow makes that possible. But If I do a shutdown there's the CTRL-D to get it back up fast Just my nickels worth. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: rsync
Gary Kline skrev: On Friday 29 February 2008 19:25:50 Girish Venkatachalam wrote: On 18:18:06 Feb 29, Gary Kline wrote: Is there a flag I can set to use with rsync to backup every file of /usr/home/* [here on my FBSD desktop] to my Ubuntu desktop that has only /home/*?? Of course, I could always create /usr/home on my other computers. ... Your question is not clear to me. I use $ rsync -avzp --delete /usr/home/* /home if that is what you are looking for. What does the --delete do?! I want to make a complete copy of, say, /usr/home/kline/* from here [tao] to my Ubuntu server, ethos, which has a /home mountpoint--- in otheer words: /home/kline/*. If the --delete /usr/home* /home syntax will let rsync rewrite /usr/home to /home, then fine. gary -Girish ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] --delete makes sure that if you delete a file on the source, it's also deleted on the mirror. (Tip for those that use rsync to backup Windows machines to FreeBSD - You will most likely have to use --ignore-errors if you are syncing to/from windows machines with --delete.) Just my nickels worth. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Mirroring / Cloning FreeBSD System
FreeBSD-Utah skrev: I have a question on how to mirror a FreeBSD installation / system. This environment will have two identical / separate systems referred to as “System A” and “System B” - I want to install FreeBSD on to “System A” - Once that installation is complete with selected ports and custom applications, I want to make an exact duplicate of “System A” on “System B” I don’t want to do this with drives in the same system, rather I would like to “clone” “System A” Also, it would be nice to be able to do this as a “mirroring” solution to keep a clone over time of the system in the case of failure of either “System A” or “System B” Is this possible to do? If so, any direction on how I would do this would be welcome. Is there a port / application that enables this? Thank you in advance! Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] I use rsync to mirror and freevrrpd for failover via heartbeat. Freevrrpd should be in ports. Freevrrpd gives both systems the same virtual ip so you will need to avoid rsyncing the configuration file for it. There is a nice feature that makes you trigger a script when one system goes down to initialize configurations on the system taking over. Mind you, if you are using firewall as part of the system you will need to alias the interfaces and use dns names in configuration files. Just my nickels worth /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Setting Variables in expect Scripts From Shell Output
Martin McCormick skrev: While running an expect script, is it possible to set an expect script variable to the string kept in a shell variable? I can generate the shell variable just fine but when I try to export it to the expect script for later use with something like: set LOGFILENAME [exec echo \$TMPFILE] something happens without error, but a later attempt to see the contents of it such as send_user $LOGFILENAME\n proves that it never got set. It just echoes the literal string LOGFILENAME. Thanks. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] If you're not too worried about speed my old trick to circumvent this was to simply write the variable to a temporary file then read in that file for the send_user thing later on...Providing the send_user is a script, mind you. Just my nickels worth...remember to delete the tempfile though. /R ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: one solved ; yet one new issue.
Gary Kline wrote: no diff. i also filled in smart-host in the .mc file. i did a make install. no difference... gary Those would have no effect. Send the file to me. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: one solved ; yet one new issue.
Gary Kline wrote: Jan 4 15:01:07 tao sendmail[21840]: m04N16F5021840: from=kline, size=549, class=0, nrcpts=1, msgid=[EMAIL PROTECTED], [EMAIL PROTECTED] Jan 4 15:01:07 tao sendmail[21840]: m04N16F5021840: [EMAIL PROTECTED], ctladdr=kline (1004/1004), delay=00:00:01, xdelay=00:00:00, mailer=relay, pri=30549, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1] And:: Jan 4 15:08:19 tao sendmail[21855]: m04N8Jok021855: from=kline, size=543, class=0, nrcpts=1, msgid=[EMAIL PROTECTED], [EMAIL PROTECTED] Jan 4 15:08:19 tao sendmail[21855]: m04N8Jok021855: [EMAIL PROTECTED], ctladdr=kline (1004/1004), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30543, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1] telnet 127.0.0.1 25 telnet actual-IP-address 25 Does either work? The second but not the first? If so, look at your config file to see if you're listening only on the actual IP address. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: one solved ; yet one new issue.
Gary Kline wrote: Neither works; I thought the second mightt. *Which* config file? Your sendmail config file. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: remote x session
Jonathan Horne skrev: i have been wanting to set up the ability to open an entirely new x session to another box, in a window of my currently running session. xnest is one way of doing this, but i was wondering if there are any others (perhaps, a little easier to configure and get going) ? cheers, You might want to look at WDM and Fluxbox. There are alot of other window managwers of course but these 2 have small overhead and run very nice. Read more at http://fluxbox-wiki.org/index.php/WDM . There are some tips in the mailing list archive for these to get you started as well. Greetings from Sweden /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Difficulties establishing VPN tunnel with IPNAT
Jerahmy Pocott skrev: The Sonic Wall client doesn't trigger ANY firewall rules, which is why I thought there must be something going wrong with the NAT. It actually establishes the tunnel okay but never gets an IP address, from my understanding this client uses some sort of dhcp over ipsec to provision the client address.. What I am getting using the standard PPTP method are a bunch of hits: fxp1 @0:25 b x.x.x.x - 10.0.0.3 PR gre len 20 (93) IN NAT (rule @0:25 is the final 'block all' rule) What is protocol 'gre'? Why is a NAT'd packet getting blocked?! Thanks! J. On 25/11/2007, at 9:09 AM, Roger Olofsson wrote: Hello again Jerahmy, I would suggest that you verify what port(s) and protocol(s) 'Sonic Wall Global VPN Client' needs to work. I would also suggest that you look in the logfile from ipf to see what it's blocking and when. My guess is that the VPN client is using a protocol like IPSEC (IP protocol 50) and possibly port 500 (IKE) for which you will have to activate the ipnat proxy. map WAN internal_ip/24 - 0.0.0.0/32 proxy port 500 ipsec/udp You might also try to disable the blocking of fragged packets. For some VPN clients this can cause problems. Good luck! /Roger Jerahmy Pocott skrev: Sorry let me clarify.. There are two issues, one is connecting to any external VPN, with no filter I can establish a connection to PPTP VPN, but the 'Sonic Wall Global VPN Client' still fails to connect even with no filter rules. The redirect for the CVS server has an ipf rule to allow traffic on that port, but users are getting connection refused messages. I will include my ipf rules, I clearly need some sort of rule to allow inbound for the VPN to work, though I think the ipnat is breaking the Sonic Wall client. Which is strange because everything worked fine with ipfw/natd. Here are my ipf rules: # Allow all in/out on internel interface pass in quick on fxp0 all pass out quick on fxp0 all # Allow all in/out on loopback interface pass in quick on lo0 all pass out quick on lo0 all # Allow all out-going on public interface and keep state pass out quick on fxp1 proto tcp from any to any flags S keep state pass out quick on fxp1 proto udp from any to any keep state pass out quick on fxp1 proto icmp from any to any keep state # Block all inbound traffic from non-routable or reserved address spaces block in quick on fxp1 from 192.168.0.0/16 to any#RFC 1918 private IP block in quick on fxp1 from 172.16.0.0/12 to any #RFC 1918 private IP block in quick on fxp1 from 10.0.0.0/8 to any#RFC 1918 private IP block in quick on fxp1 from 127.0.0.0/8 to any #loopback block in quick on fxp1 from 0.0.0.0/8 to any #loopback block in quick on fxp1 from 169.254.0.0/16 to any#DHCP auto-config block in quick on fxp1 from 192.0.2.0/24 to any #reserved for docs block in quick on fxp1 from 204.152.64.0/23 to any #Sun cluster interconnect block in quick on fxp1 from 224.0.0.0/3 to any #Class D E multicast # Block frags block in quick on fxp1 all with frags # Block short tcp packets block in quick on fxp1 proto tcp all with short # block source routed packets block in quick on fxp1 all with opt lsrr block in quick on fxp1 all with opt ssrr # Block anything with special options block in quick on fxp1 all with ipopts # Block public pings block in quick on fxp1 proto icmp all icmp-type 8 # Block ident block in quick on fxp1 proto tcp from any to any port = 113 # Block all Netbios service. 137=name, 138=datagram, 139=session # Block MS/Windows hosts2 name server requests 81 block in quick on fxp1 proto tcp/udp from any to any port = 137 block in quick on fxp1 proto tcp/udp from any to any port = 138 block in quick on fxp1 proto tcp/udp from any to any port = 139 block in quick on fxp1 proto tcp/udp from any to any port = 81 # Allow CVS access pass in quick on fxp1 proto tcp/udp from any to any port = 2401 # Logged Blocking Rules # # Block nmap OS fingerprint attempts block in log first quick on fxp1 proto tcp from any to any flags FUP # Block all other in coming traffic block in log first quick on fxp1 all Thanks for the help! J. On 25/11/2007, at 12:50 AM, Roger Olofsson wrote: Hello Jerahmy, Assuming you want to connect from the outside to your VPN. Have you made sure that port 2401 is open for inbound traffic in your ipf.rules? You might also want to do 'ipnat -C -f path to ipnat.rules'. Man ipnat ;^) Greeting from Sweden /Roger Jerahmy Pocott skrev: Hello, I recently decided to give ipf and ipnat a try, previously I had always been using ipfw and natd. Since switching over I can no longer establish a VPN tunnel from any system behind the gateway. I did 'ipf -F a' to flush all rules but I was still unable to connect so I think it's a problem with ipnat? Also my redirect from ipnat doesn't seem to work either. These are the only ipnat rules I have: (fxp1 is the external interface) # ipnat built in ftp proxy rules map fxp1
Re: Difficulties establishing VPN tunnel with IPNAT
Jerahmy Pocott skrev: On 26/11/2007, at 1:00 AM, Roger Olofsson wrote: Hello Jerahmy, (sorry for top-posting, btw). Gre is protocol 47. In your firewall rules you only allow/block protocols tcp/udp/icmp. If you want to use PPTP you will need to allow both the port and the protocol for it. I put: pass out quick on fxp1 proto gre from any to any keep state This allowed the PPTP connection to establish, how ever trying to use apps over that connection resulted in: fxp1 (block all rule) b x.x.x.x - 10.0.0.3 PR gre len 20 (53) (frag 57516:[EMAIL PROTECTED]) IN bad NAT By placing to rule: pass in quick on fxp1 proto gre from any to any and allowing frags everything started working properly, but allowing all gre traffic in doesn't seem like a good idea.. Is there any way to make this work without putting static ip address rules or allowing all traffic? In your original question you mentioned having problems with CVS. From the looks of it, you redirect CVS to 10.0.0.2, meaning that all users on that machine can use CVS. The redirect rule is supposed to redirect connections to CVS on the external interface to 10.0.0.2 on the internal lan, where the CVS server is actually running. Cheers, J. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Hello Jerahmy, Some progress it seems? Why not set it to allow gre from VPN server only? Ie pass in quick on fxp1 proto gre from vpn server ip to any? The way you ask your question, 'make it work without static ip or allowing all traffic', isn't that contradictory? As for the frag part, I'd say that if gre needs frag, then you will have to enable it. About the CVS, I seem to have misunderstood your question. I assumed 10.0.0.2 wanted to recieve CVS inbound and not serve it outbound, or am I mistaking again? /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Difficulties establishing VPN tunnel with IPNAT
Jerahmy Pocott skrev: On 26/11/2007, at 4:47 AM, Roger Olofsson wrote: Hello Jerahmy, Some progress it seems? Why not set it to allow gre from VPN server only? Ie pass in quick on fxp1 proto gre from vpn server ip to any? The way you ask your question, 'make it work without static ip or allowing all traffic', isn't that contradictory? As for the frag part, I'd say that if gre needs frag, then you will have to enable it. About the CVS, I seem to have misunderstood your question. I assumed 10.0.0.2 wanted to recieve CVS inbound and not serve it outbound, or am I mistaking again? /Roger Yes, that is what I meant by 'static ip' I could allow all gre from the specific ip address but I would prefer that gre traffic be allowed from a host only when an existing connection has been opened to it.. 10.0.0.2 is a CVS server. It seems to me that natd works better with ipsec ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Hello again Jerahmy, It would seem that there is a PPTP proxy in ipf that you might want to try as well. The syntax would be: map fxp1 10.0.0.0/0 - 0/32 proxy port 1723 pptp/tcp Good luck! /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Difficulties establishing VPN tunnel with IPNAT
Hello Jerahmy, Assuming you want to connect from the outside to your VPN. Have you made sure that port 2401 is open for inbound traffic in your ipf.rules? You might also want to do 'ipnat -C -f path to ipnat.rules'. Man ipnat ;^) Greeting from Sweden /Roger Jerahmy Pocott skrev: Hello, I recently decided to give ipf and ipnat a try, previously I had always been using ipfw and natd. Since switching over I can no longer establish a VPN tunnel from any system behind the gateway. I did 'ipf -F a' to flush all rules but I was still unable to connect so I think it's a problem with ipnat? Also my redirect from ipnat doesn't seem to work either. These are the only ipnat rules I have: (fxp1 is the external interface) # ipnat built in ftp proxy rules map fxp1 10.0.0.0/24 - 0/32 proxy port 21 ftp/tcp map fxp1 0.0.0.0/0 - 0/32 proxy port 21 ftp/tcp # CVS Server on Fileserv rdr fxp1 0/32 port 2401 - 10.0.0.2 port 2401 tcp/udp # nat all out going traffic on fxp1 from internal lan map fxp1 10.0.0.0/24 - 0/32 I can post my firewall rules too if that would help, however with NO rules set it still didn't work so I don't think that would help.. (I'm using the klm which is default to accept?) Thanks! J. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Difficulties establishing VPN tunnel with IPNAT
Hello again Jerahmy, I would suggest that you verify what port(s) and protocol(s) 'Sonic Wall Global VPN Client' needs to work. I would also suggest that you look in the logfile from ipf to see what it's blocking and when. My guess is that the VPN client is using a protocol like IPSEC (IP protocol 50) and possibly port 500 (IKE) for which you will have to activate the ipnat proxy. map WAN internal_ip/24 - 0.0.0.0/32 proxy port 500 ipsec/udp You might also try to disable the blocking of fragged packets. For some VPN clients this can cause problems. Good luck! /Roger Jerahmy Pocott skrev: Sorry let me clarify.. There are two issues, one is connecting to any external VPN, with no filter I can establish a connection to PPTP VPN, but the 'Sonic Wall Global VPN Client' still fails to connect even with no filter rules. The redirect for the CVS server has an ipf rule to allow traffic on that port, but users are getting connection refused messages. I will include my ipf rules, I clearly need some sort of rule to allow inbound for the VPN to work, though I think the ipnat is breaking the Sonic Wall client. Which is strange because everything worked fine with ipfw/natd. Here are my ipf rules: # Allow all in/out on internel interface pass in quick on fxp0 all pass out quick on fxp0 all # Allow all in/out on loopback interface pass in quick on lo0 all pass out quick on lo0 all # Allow all out-going on public interface and keep state pass out quick on fxp1 proto tcp from any to any flags S keep state pass out quick on fxp1 proto udp from any to any keep state pass out quick on fxp1 proto icmp from any to any keep state # Block all inbound traffic from non-routable or reserved address spaces block in quick on fxp1 from 192.168.0.0/16 to any#RFC 1918 private IP block in quick on fxp1 from 172.16.0.0/12 to any #RFC 1918 private IP block in quick on fxp1 from 10.0.0.0/8 to any#RFC 1918 private IP block in quick on fxp1 from 127.0.0.0/8 to any #loopback block in quick on fxp1 from 0.0.0.0/8 to any #loopback block in quick on fxp1 from 169.254.0.0/16 to any#DHCP auto-config block in quick on fxp1 from 192.0.2.0/24 to any #reserved for docs block in quick on fxp1 from 204.152.64.0/23 to any #Sun cluster interconnect block in quick on fxp1 from 224.0.0.0/3 to any #Class D E multicast # Block frags block in quick on fxp1 all with frags # Block short tcp packets block in quick on fxp1 proto tcp all with short # block source routed packets block in quick on fxp1 all with opt lsrr block in quick on fxp1 all with opt ssrr # Block anything with special options block in quick on fxp1 all with ipopts # Block public pings block in quick on fxp1 proto icmp all icmp-type 8 # Block ident block in quick on fxp1 proto tcp from any to any port = 113 # Block all Netbios service. 137=name, 138=datagram, 139=session # Block MS/Windows hosts2 name server requests 81 block in quick on fxp1 proto tcp/udp from any to any port = 137 block in quick on fxp1 proto tcp/udp from any to any port = 138 block in quick on fxp1 proto tcp/udp from any to any port = 139 block in quick on fxp1 proto tcp/udp from any to any port = 81 # Allow CVS access pass in quick on fxp1 proto tcp/udp from any to any port = 2401 # Logged Blocking Rules # # Block nmap OS fingerprint attempts block in log first quick on fxp1 proto tcp from any to any flags FUP # Block all other in coming traffic block in log first quick on fxp1 all Thanks for the help! J. On 25/11/2007, at 12:50 AM, Roger Olofsson wrote: Hello Jerahmy, Assuming you want to connect from the outside to your VPN. Have you made sure that port 2401 is open for inbound traffic in your ipf.rules? You might also want to do 'ipnat -C -f path to ipnat.rules'. Man ipnat ;^) Greeting from Sweden /Roger Jerahmy Pocott skrev: Hello, I recently decided to give ipf and ipnat a try, previously I had always been using ipfw and natd. Since switching over I can no longer establish a VPN tunnel from any system behind the gateway. I did 'ipf -F a' to flush all rules but I was still unable to connect so I think it's a problem with ipnat? Also my redirect from ipnat doesn't seem to work either. These are the only ipnat rules I have: (fxp1 is the external interface) # ipnat built in ftp proxy rules map fxp1 10.0.0.0/24 - 0/32 proxy port 21 ftp/tcp map fxp1 0.0.0.0/0 - 0/32 proxy port 21 ftp/tcp # CVS Server on Fileserv rdr fxp1 0/32 port 2401 - 10.0.0.2 port 2401 tcp/udp # nat all out going traffic on fxp1 from internal lan map fxp1 10.0.0.0/24 - 0/32 I can post my firewall rules too if that would help, however with NO rules set it still didn't work so I don't think that would help.. (I'm using the klm which is default to accept?) Thanks! J. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any
Re: system admin question...
Gary Kline skrev: This is for the system admins out there; I brought up this question last weekend, (re xsysstats, an *old* app), but got no answers, so again: What are the best tools, graphical or otherwise, that I can use on a dedicated Gnome [or CWTM, KDE, Whatever] workspace that will help me track each of my four or five computers? (((Is xosview broken? I have it running here on this pre xorg-7.2 system.))) xsysstats seems reasonable; are there any others? I'd like to be able to spot any overloads of file system snafus before they go critical... . thanks for any|all insights, gary Nagios and Cacti are your friends ;^) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Intel 965GME + ICH8M have problem
Hi, I install FreeBSD6.2 in Intel 965GME + ICH8M have problem Using IDE HDD + IDE CDROM is ok, but IDE HDD + USB CDROM is fail. Could FreeBSD6.2 full support ICH8M or not? Best Regards, Roger Yu ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: USB 2.0 PCI card for FreeBSD 5.4?
RW wrote: Why not? It's only 20 hours, sounds like a lot less hassle than finding/buying/installing a new card.. Because I can't afford 20 hours of slammed I/O on our main hosting server, plus I need to add the card in order to use the drive for ongoing backups anyway. (Also, I don't work for you, so I don't owe you an answer to questions beginning with why not...) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
USB 2.0 PCI card for FreeBSD 5.4?
Does anyone know one or two PCI USB cards that are compatible with FreeBSD 5.4? (Please let's hold off on the upgrade, you fool messages -- the cycle is: - install USB 2.0 card - back up to USB drive - upgrade ...and backing up 75GB at 1MB/sec isn't gonna fly.) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
FreeBSD and ImageMagick crashes OS?
Dear mailing list, The other day I encountered a strange phenomena. Having run FreeBSD since 3.x I have never had a server crash on me until now. I completely blame the FreeBSD developers for spoiling me like that. Now, when I get spoiled, it's hard to go back so when my webserver tried to handle a 7Mb JPG using ImageMagick and managed to crash the server I naturally got curious. Turns out ImageMagick was called through php to resize the .JPG and most likely, the server runs out of memory/disk space. /var/tmp fills up and console spews as follows: Aug 22 19:29:49 rutilus kernel: vnode_pager_putpages: I/O error 28 Aug 22 19:29:49 rutilus kernel: vnode_pager_putpages: residual I/O 32768 at 62620 Aug 22 19:29:49 rutilus kernel: pid 29 (syncer), uid 0 inumber 49382 on /var: filesystem full Server drops net and does not respond to keyboard input, not even on console. Now, I realize that changing settings for ImageMagick and having a bigger /var disk and using a smaller .JPG of course would avoid the crash. But, I still am somewhat kerfuffled about the fact that it brings my favourite operating system to its knees I'd want FreeBSD to intercept and log the error, the application should in my world be contained by the operating system and never ever be allowed to crash it. As the old saying was once - an operating system should emulate crashes, not crash while emulating. I know, I know, you can't stop applications from doing whatever crazy stuff they do and some might even crash the OS as it appears. Luckily there's 3 versions of the OS inbetween the crashes though ;^) Just thought I'd share this with the list. Greetings from Sweden /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Gnome FreeBSD
Michael S skrev: Good day all, I decided to add GUI to my GUI-less FreeBSD machine. I am considering installing Gnome, which I haven't used for long while and the last time was on Linux anyway. The reason is that most of my favorite applications use gtk libraries, like Firefox, GAIM (can't get used to the new name),wxPython and others. In short I wanted to avoid 2 huge sets of libraries (gtk and qt) by not installing KDE. I wanted to know how Gnome feels on FreeBSD, is it polished enough? Are there crashes? Any caveats at all? Thanks in advance, Michael ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] A while back on this list I read about fluxbox so I decided to try it out. I like it very much, it's very lightweight and very flexible. It's in the ports tree if you want to have a look. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: LAN failover redundandcy?
Ewald Jenisch skrev: Hi, I'm looking for a way to configure failover redundancy for one of my servers. To be specific: The server in question has one IP-address but two LAN interfaces each of them connecting to a different switch. Traffic normally runs only through one of the two interfaces; the other is for redundandy only. In case the active LAN-interface goes down (e.g. because of a link and/or switch failure) the second LAN-interface should take over in the sense that traffic should run through the second interface (again the server has only one IP-address, so binding a different IP-address to the interface is not an option here) Is there any way how this can be configured under FreeBSD 6.2? Thanks much in advance for your help, -ewald ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] You might want to look at freevrrpd. It should be in ports. Greetings /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Cleartype-similar?
Dear Mailing List, Is there something similar to cleartype for FreeBSD? Grateful for any replies! Greetings /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Drive concatenation...Which tool to use?
John Nielsen skrev: On Wednesday 25 July 2007, Josh Tolbert wrote: I've got a friend that wants to use a FreeBSD box for a file server. He has a huge pile of drives of different sizes, but he wants them all as one big file system. What's the appropriate tool for this? gstripe doesn't seem like it'd be smart to use with differently-sized drives. Is gvinum up to snuff and stable enough to use? Is ccd still supported? What would be your tool of choice? gconcat, perhaps? JN ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Gconcat looks mighty cool, will it be able to concat two devices that already have existing filesystems on them and retain these? Say that ad0 has /usr and ad1 has /home will gconcat preserve these after concat:ing ad0 with ad1? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Remote Desktop tool for FreeBSD
Ivan Carey skrev: simon butsana wrote: Hi, Does anyone know of a remote X client that can be used to establish a remote X session with a FreeBSD box. As an example, I would greatly like to test a tool with features similar to Microsoft's Remote Desktop. Thanks, Simon Roger Olofsson [EMAIL PROTECTED] a écrit : Steve Franks skrev: I just had this problem this week - drives are fine until you access one and then disappears. Checked my bios monitor page and 12V was only 11.8V. Changing from a 300W to a 500W power supply magically fixed the problem... I don't claim that this is necessarily your problem, but it caught me off-guard and it's worth looking at. Steve On 7/16/07, Roger Olofsson wrote: Dear mailing list, I have 2 IBM HDs and one WD HD (ata) in an old pc and for some reason FBSD 6.2 can't find the IBMs on a warm-boot. Cold-boot is fine and, the WD is fine. The motherboard is an old Aopen AX34 and all settings are default except for ACPI that's off. The first thought that came to mind was that one of the IBMs are going bad, but, I find it very unlikely that both HDs are doing it. One is a 120 and one is an 80gigger but both 'vanish' on warm-boot. Some other setting in bios than ACPI? Grateful for any answer, /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Thank you for your answer. I'll check the PSU and if necessary replace it. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Simon-Pierre Butsana [EMAIL PROTECTED] I do not fear computers. I fear the lack of them. —Isaac Asimov - Découvrez le blog Yahoo! Mail : dernières nouveautés, astuces, conseils.. et vos réactions ! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] . Simon, I use x11vnc and kdm on the server and tightvnc on the client. This setup works very well. Ivan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Dera Mailing List, I am hijacking my thread back! I use Xming on Windows as X client to connect remotely. It's on Sourceforge - http://sourceforge.net/projects/xming . Good luck! To close the original thread, it turned out one HD of the two on same IDE channel was dying, replaced it and issue is gone. For some strange reason the dying HD locked up the IDE channel making both HDs vanish. Thank you to all that responded! /Roger ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
