syslogd: select: Bad file descriptor

2004-02-10 Thread Sten Daniel Sørsdal

Feb 10 08:07:45 xx syslogd: select: Bad file descriptor

FreeBSD 4.9-RELEASE-p1 i386

run as in a ttys wrapper script:
/usr/sbin/syslogd -4 -A -cc -n -s -d -f /etc/syslog.conf

the output of script/command is not redirected to /var/log but i 
suspect it happens when newsyslog runs.

Has anyone encountered the same? Does anyone know of a remedy?

_// Sten Daniel Sørsdal
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


PPP and radius.conf - shouldnt it be doing round-robin?

2003-08-29 Thread Sten Daniel Sørsdal

I use userland ppp with radius authentication against 2 radius 
servers, on a freebsd 4.8-stable box that i use as a router/gateway.

The two servers are on two different interfaces, it seems that 
when i unplug the first server (#1 in radius.conf)
from the switch the arp cache on the gateway will time out and 
a Host is down message is generated (or icmp host unreachable). 

All authentication requests are then automatically denied without 
consulting the second server.

If i then swap the order of the radius servers in radius.conf while
the first server is still down, i get authenticated.

If i arp -s the mac address of the unplugged server, and it's the 
first one in radius.conf, the authentication mechanism proceeds to
query the second server and i get authenticated.

Is this intended or is it one of those icmp unreach/host down issues
i've seen more and more often lately?

i read this in 'man radius.conf':
 Up to 10 RADIUS servers may be specified for each service type.  The
 servers are tried in round-robin fashion, until a valid response is
 received or the maximum number of tries has been reached for all servers.

uname -a:
FreeBSD fictious 4.8-RELEASE FreeBSD 4.8-RELEASE #0: Sun Aug
3 00:55:37 GMT 2003 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/WACCESS  i386

- Sten
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Dumping/reading memory space of a running program.

2003-08-25 Thread Sten Daniel Sørsdal

 How do i read/dump the entire memory space of a running program?
 Is this possible?
 I really dont have the option of restarting it. 

-- Sten
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Requirements for doing a spin-off bsd branch?

2003-07-17 Thread Sten Daniel Sørsdal

I am curious as to what is required (legally) to make a branch 
of FreeBSD and call it somethingelseBSD?

This would be non-commercial but is it possible to do a commercial
version as well?

Any thoughts, advice and opinions are appreciated.

- Sten
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: How do I max a 6Mbps link

2003-07-10 Thread Sten Daniel Sørsdal
 
 Hi all,
 
 What configuration changes do I need to make to two 
 freebsd-stable boxes to
 fully max out a 6Mbps/220ms network link? This is for bulk 500+MB file
 transfers.
 
 The target application is proftpd with ncftpd as the client.
 
 Thanks in advance,
 Max
 

220ms? I dont think TCP can handle this. Look for a non-connection oriented protocol
to transfer files. UDP for example, or better, raw IP.
Maybe you're lucky and get FAST to work :-)

- Sten
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Changed ISP now can't get to websites / traceroute

2003-07-08 Thread Sten Daniel Sørsdal
 The thing is,
 now that I've got this new ISP (Zen - 8 static IP's), I find 
 that there
 are sites that I am not able to get (browse) to, most concerning is
 www.freebsdforums.org. Ever since I've got this new ADSL account, not
 for hell nor high-water can I hit that site, using any browser, using
 any OS (FreeBSD, RH £inux or MS Win2K Pro / XP) at home.

There could be a hundred reasons as to why you dont reach 
www.freebsdforums.org.

_Might_ be an MTU problem somewhere upstream, if ICMP is filtered this 
is definitly a bigger problem. Does ping work? If they also filter UDP 
as you mention (fbsd traceroute not working) I'd suggest you talk to 
your ISP and find out exactly what they are filtering.

Are those 8 static IP's public or private? If they start with
192.168.x.x, 10.x.x.x, 172.16.x.x through 172.16.31.x.x
they must be NATed and it is their NAT configuration that blocks the 
traceroute.

Contact the ISP!

- Sten
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


nano / nanorc

2003-06-27 Thread Sten Daniel Sørsdal
FreeBSD 4.8
 
Im trying to customize nanorc but i cant seem to either get the syntax activated or 
the colors to work (hard to tell).
Does anyone know what the requirements are for using color? 
Oh, im doing this remotely via ssh using securecrt. Nano v 1.2.1 built from ports.
 
- Sten
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


IPFW stateful deny question

2003-04-01 Thread Sten Daniel Sørsdal

This one is for the archives.
If anyone would donate their time to replying to this one, It would be appreciated. 

Im trying to setup a firewall that for a time-limited period block IP's that send 
packets to specified ports.
After time has expired the ip will be allowed again.

With this setup;

ipfw add 100 check-state
ipfw add 1000 skipto 2000 tcp from any to any 445
...
ipfw add 2000 deny ip from any to any keep-state
...

Would this setup a stateful block against that IP address, blocking all IP traffic 
from that particularly evil ip
Or would it just match the specifics? Would I have to do this instead to achieve this?

ipfw add 100 check-state
ipfw add 1000 skipto 2000 tcp from any to any 445 keep-state
...
ipfw add 2000 deny ip from any to any
...

- Sten
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Dual homed host routing problem

2003-03-27 Thread Sten Daniel Sørsdal
 I'm running FreeBSD 4.7-RELEASE and I have trouble routing 
 between two NIC's. On one side I have a 192.168.1.0/24 
 network and on the other a 212.110.94.64/27 network on which 
 I have mail and web servers, which the 192.168.1.0/24 hosts 
 should be able to reach.
 
 Here are the ifconfig and netstat -r outputs:
 wb0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
 inet 212.110.94.84 netmask 0xffe0 broadcast 212.110.94.95
 inet6 fe80::280:48ff:feb5:af3%wb0 prefixlen 64 scopeid 0x1 
 ether 00:80:48:b5:0a:f3
 media: Ethernet autoselect (100baseTX full-duplex)
 status: active
 rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
 inet 192.168.1.1 netmask 0xff00 broadcast 192.168.1.255
 inet6 fe80::202:44ff:fe4f:958e%rl0 prefixlen 64 scopeid 0x2 
 ether 00:02:44:4f:95:8e
 media: Ethernet autoselect (10baseT/UTP)
 status: active
 
 Routing tables
 Internet:
 DestinationGatewayFlagsRefs  Use  
 Netif Expire
 default   212.110.94.65  UGSc40wb0
 localhost localhost  UH  00lo0
 192.168.1 link#2 UC  1
 0 rl0
 192.168.1.255 ff:ff:ff:ff:ff:ff  UHLWb   1   45rl0
 212.110.94.64/27   link#1 UC  80wb0
 
 and I have net.inet.ip.forwarding set to 1
 
 How do I get my box to route packets between the two 
 interfaces 192.168.1.1 and 212.110.94.84?


Log into 212.110.94.65 and tell it that 192.168.1.0/24 is behind 212.110.94.84.
If it's a BSD box you could do on .94.65; route add -net 192.168.1.0/24 212.110.94.84

- Sten
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Equal-cost multipath routing for FreeBSD 4-STABLE?

2003-03-20 Thread Sten Daniel Sørsdal

 It is unclear wether one2many support bundling through VLANs as well.
 Any clues?

- Sten

-Original Message-
From: Matthew Seaman [mailto:[EMAIL PROTECTED] 
Sent: 20. mars 2003 14:25
To: [EMAIL PROTECTED]
Subject: Re: Equal-cost multipath routing for FreeBSD 4-STABLE?


On Thu, Mar 20, 2003 at 03:15:27PM +0200, Andrew Stesin wrote:

 suppose we have FreeBSD box `A' with 3 network interfaces (ip 
 unnumbered or numbered - shouldn't matter). This 3 interfaces form 3 
 parallel IP channels to some single destination `C' (let's think of 
 another FreeBSD box `B' with another 3 interfaces at the other end and 
 `C' being an alias to lo0 of `B' box).
 
 Than let's consider either 3 equal static routes to `C' set at `A', or 
 OSPF with 3 equal cost routes to `C' from `A'.
 
 Is it possible to tell kernel to route packets between `A' and `B' in 
 a round-robin way, so that each of 3 channels handle 1/3 of a total 
 consumed bandwidth? Something like equal-cost multipath feature of 
 Cisco IOS?

Yes.  See the ng_one2many(4) man page.  You don't need to futz about with aliases to 
lo0 on machine C: just make another ng_one2many cluster there and treat both of them 
as a regular network interfaces.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


TCP in TIME_WAIT for too long.

2003-03-05 Thread Sten Daniel Sørsdal

  Im using a 4.7-STABLE box with Zebra BGPD for full BGP feed and i have come across 
an unusual problem.
  It works great except when i come up in the situation when the provider reboots 
their router.
  FBSD doesnt seem to detect that the link has been broken and the TCP connection will 
stay in TIME_WAIT
  for a long time (up to 20 minutes?). Is there any way to tweak this to die after 
about 120 seconds?
  Will this break anything?

  Any help is appreciated!

- Sten

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


RE: PPPoE and troubles with TCP

2002-12-26 Thread Sten Daniel Sørsdal

  Have you remembered to setup anything to fix the MSS in TCP packets going through?
  You have disabled encryption and compression right?

-Original Message-
From: Rostislav Krasny [mailto:[EMAIL PROTECTED]] 
Sent: 26. desember 2002 15:42
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; FreeBSD Questions
Subject: Re: PPPoE and troubles with TCP


--- Stacey Roberts [EMAIL PROTECTED] wrote:
 On Thu, 2002-12-26 at 13:16, Rostislav Krasny wrote:
  --- Stacey Roberts [EMAIL PROTECTED] wrote:
   On Thu, 2002-12-26 at 12:26, Rostislav Krasny wrote:
Hello

I have Alcatel Speedtouch Home ADSL modem. I use PPPoE protocol 
for connection with my Internet Service Provider (ISP) through 
this
 ADSL
modem. I use FreeBSD 4.7-RELEASE and ppp (a.k.a. user-ppp) for
 this. In
the /etc/ppp/ppp.conf file I have ' set MRU 1492' and ' set MTU
 1492'
options. This is because the maximum MTU one can use with PPPoE 
is
 1492
according to RFC 2516. I have no problems with dialing to my 
ISP.
 But
after the PPPoE connection is established I have troubles with 
TCP connections to some hosts. For example I can't go to 
hhtp://www.ssh.com/  but to http://www.freebsd.org/ or 
http://www.gnu.org/ I can. If I run 'telnet www.ssh.com 80' and
 enter
HTTP request according to HTTP 1.1 or 1.0 protocol I don't get 
any answer. If I enter just 'GET /' I get some short answer. 
'GET /' is
 an
HTTP request according to the old HTTP 0.9 version of the 
protocol
 and
it is rarely used today. But the problem is not HTTP, I think. 
If I
 do
HTTP request according to HTTP 1.1 from my friends' computer I 
do
 have
some long answer. Furthermore if I change the MRU and MTU to 
1484
 or
smaller I have no problem with www.ssh.com. So it looks like TCP
 packet
overflow or something like that.
Besides FreeBSD I have Windows 98 Second Edition in my computer. 
I
 use
PPPoE with Win98SE too. I use RASPPPOE driver fo it, go to 
http://www.raspppoe.com/  for more information. I have no 
problems
 with
www.ssh.com when I use Win98SE with this impimentation of PPPoE 
protocol. I have MTU == 1492 set by default in RASPPPOE. I don't
 get
error messages about fragmentation when I run 'ping -f -l 1464 
www.ssh.com' in my Win98SE (ICMP+IP=1464+28=1492). Why in 
FreeBSD I cannot use MTU == 1492 without problems with some 
hosts like www.ssh.com ? How to fix it in FreeBSD?

P.S. ping have different syntax in Windows, so don't be wondered
 about
-f flag. -f sets no fragmentation flag in IP headers of all
 outgoing
packets.
   
   I use ADSL here on my site, but not that modem. How do you connect 
   to that device from the FBSD box?
  
  I configured my ADSL modem to work with PPPoE. Then I changed the 
  /etc/ppp/ppp.conf file to this one:
  
   /etc/ppp/ppp.conf 
  default:
  set log Phase Chat LCP IPCP CCP tun command
  ident user-ppp VERSION (built COMPILATIONDATE)
  
  set device  PPPoE:ed0
  set speed   sync
  #   set MRU 1484
  #   set MTU 1484
  set MRU maximum 1492
  set MTU maximum 1492
  set timeout 0
  set urgent  none# no priorities
  enable  dns # request DNS info (for
  resolv.conf)
  disable ipv6 ipv6cp
  disable shortseq protocomp acfcomp vjcomp deflate pred1
  mppe
  denyshortseq protocomp acfcomp vjcomp deflate pred1
  mppe
  
  myisp:
  set authnameusername@ISPstring
  set authkey password
  add default HISADDR # Add a (sticky) default route
   /etc/ppp/ppp.conf 
  
  The hostname of my box can be resolved through /ets/hosts , so I 
  don't need any kind of 'set ifaddr' in /etc/ppp/ppp.conf file. ed0 
  is the ethernet NIC my ADSL modem is connected to.
  
  Many lines of the default: section of the ppp.conf file are not
 critical.
  The only ones you need are these:
  
  set device  PPPoE:ed0
  set MRU maximum 1492
  set MTU maximum 1492
  enable  dns
  
  See `man 8 ppp` for more information.
  
 
 Dude,
 I wasn't asking for assistance.., rather I was hoping to provide 
 some help in response to your post.. :-)
 
 The reason why I asked about how you connect to your ADSL modem is 
 because if its ethernet, then there is no need to use ppp.
 
 But if there's a case-requirement why you need to use ppp, then fair 
 enough.
 
 Let me know either way, okay?

Yes, my computer is connected to my ADSL modem by Ethernet. What is the way to connect 
with the ISP without PPP? Is it ethernet bridging with DHCP? My ADSL Service Provider 
(Bezeq) does not support this. Moreover, the use of ethernet bridging is inconvenient 
for me because I can't switch the