Re: ipfw confusion
You might turn on logging and post the logs of what is being blocked. Sometimes things are being blocked by rules you do not expect. On Mon, Aug 19, 2013 at 4:18 PM, Gary Aitken vagab...@blackfoot.net wrote: On 08/19/13 00:36, Jason Cox wrote: Are you sure that your DNS requests are over TCP? DNS primarily uses UDP to serve requests. TCP is used when the response data size exceeds 512 bytes (I think), or for tasks such as zone transfers. I know a few resolver implementations use TCP for all queries, but most I have used not. You might want to add rules to allow UDP as well. There are identical rules included for udp: 21149 allow udp from any to 12.32.44.142 dst-port 53 in via tun0 keep-state 21169 allow udp from any to 12.32.36.65 dst-port 53 in via tun0 keep-state One of the requests which is being refused is a zone transfer request from a secondary which is a tcp request. Others are probably udp. On Sun, Aug 18, 2013 at 11:06 PM, Gary Aitken vagab...@blackfoot.net wrote: I'm having some weird ipfw behavior, or it seems weird to me, and am looking for an explaination and then a way out. ipfw list ... 21109 allow tcp from any to 12.32.44.142 dst-port 53 in via tun0 setup keep-state 21129 allow tcp from any to 12.32.36.65 dst-port 53 in via tun0 setup keep-state ... 65534 deny log logamount 5 ip from any to any tail -f messages Aug 18 23:33:06 nightmare named[914]: client 188.231.152.46#63877: error sending response: permission denied 12.32.36.65 is the addr of the internal interface (xl0) on the firewall and is the public dns server. 12.32.44.142 is the addr of the external interface (tun0) which is bridged on a dsl line. It appears that a dns request was allowed in, but the response was not allowed back out. It seems to me the above rules 21109 and 21129 should have allowed the request in and the response back out. It's possible a request could come in on 12.32.44.142, which is why 21109 is present; although I know I am getting failures to reply to refresh requests from a secondary addressed to 12.32.36.65 What am I missing? Is there a problem if the incoming rule is for tun0, which gets passed to named since 12.32.44.142 is on the physical machine running named, but named pumps its response out on 12.32.36.65, relying on routing to get it to the right place, and that fails to match the state tracking mechanism which started with 12.32.44.142? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: ipfw confusion
On Mon, Aug 19, 2013 at 1:06 AM, Gary Aitken vagab...@blackfoot.net wrote: ipfw list ... 21109 allow tcp from any to 12.32.44.142 dst-port 53 in via tun0 setup keep-state 21129 allow tcp from any to 12.32.36.65 dst-port 53 in via tun0 setup keep-state ... 65534 deny log logamount 5 ip from any to any What am I missing? Do you have a check-state rule earlier in your rules? 1000 check-state Dan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
svnsync and local changes
Back when cvsup was in use, I mirrored the ports with cvsup-mirror. Then I could add files and make changes. My servers used my repository so they always had my changes and I only had to do them once. I am trying to replicate the same setup now that subversion is used. I've set up svnsync, and that works fine. I was able to add files with 'svn add' and 'svn commit'. My servers properly download all the new files. The problem is I can no longer use svnsync. Now it gives me Destination HEAD (316955) is not the last merged revision (316951).I've tried removing my files with 'svn rm', but that just changes the number in the error. Is there some way to get this to work with svnsync? Is there a better way for me to have a local repository that includes local changes? Thanks, Dan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: getpwnam_r returns EINVAL on FreeBSD 8.3
On Mon, Dec 3, 2012 at 5:54 PM, Dan Lists lists@gmail.com wrote:
After upgrading a server from FreeBSD 7.3 to FreeBSD 8.3 I noticed
this bug. Since upgrading, getpwnam_r is acting inconsistently. If I
look up a user that does not exist and the name is 16 characters or
less, getpwnam_r returns 0 and the result is NULL. If the name is
more than 16 characters, getpwnam_r returns EINVAL. Everything works
correctly for users that exist.
I was incorrect. The behavior of getpwnam_r is the same on 7.3 and
8.3. The software I was testing acted differently on the two
versions.
This only happens when the nsswitch.conf passwd: line contains files.
You need to use files if you are using another module such as msql or
ldap. The problem exists without the other modules listed. For
example:
passwd: files
I would like to emphasize that this does NOT happen when passwd: is
set to compat. I believe this is a bug. getpwnam_r should have the
same return values (or errno for getpwnam) whether nsswitch.conf has
compat or files. If there is a really good reason for them to be
different, it should be documented.
Below is a simple test program. Set passwd: to files in nsswitch.conf
and run the program. Any idea how to fix this bug with getpwnam_r?
#include stdio.h
#include sys/types.h
#include pwd.h
main()
{
lookup(doesnotexist);
lookup(doesnotexisty);
}
int lookup( char *name)
{
struct passwd pwd;
char buffer[1024];
struct passwd *result;
int err;
printf(\nLooking up: %s\n, name);
err = getpwnam_r(name, pwd, buffer, sizeof(buffer), result);
if( err != 0 ){
printf(Return code: %d\n, err);
}else if( result == 0 ){
printf(Returned no result!\n);
}else{
printf(Returned: %s (%d)\n, result-pw_name, result-pw_uid);
}
}
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
getpwnam_r returns EINVAL on FreeBSD 8.3
After upgrading a server from FreeBSD 7.3 to FreeBSD 8.3 I noticed
this bug. Since upgrading, getpwnam_r is acting inconsistently. If I
look up a user that does not exist and the name is 16 characters or
less, getpwnam_r returns 0 and the result is NULL. If the name is
more than 16 characters, getpwnam_r returns EINVAL. Everything works
correctly for users that exist.
This only happens when the nsswitch.conf passwd: line contains files.
You need to use files if you are using another module such as msql or
ldap. The problem exists without the other modules listed. For
example:
passwd: files
Below is a simple test program. Set passwd: to files in nsswitch.conf
and run the program. Any idea how to fix this bug with getpwnam_r?
#include stdio.h
#include sys/types.h
#include pwd.h
main()
{
lookup(doesnotexist);
lookup(doesnotexisty);
}
int lookup( char *name)
{
struct passwd pwd;
char buffer[1024];
struct passwd *result;
int err;
printf(\nLooking up: %s\n, name);
err = getpwnam_r(name, pwd, buffer, sizeof(buffer), result);
if( err != 0 ){
printf(Return code: %d\n, err);
}else if( result == 0 ){
printf(Returned no result!\n);
}else{
printf(Returned: %s (%d)\n, result-pw_name, result-pw_uid);
}
}
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Newbie question: Why aren't my cron jobs running?
On Tue, Jun 12, 2012 at 12:06 PM, Polytropon free...@edvax.de wrote: On Tue, 12 Jun 2012 08:29:02 -0500, Mark Felder wrote: On Tue, 12 Jun 2012 00:06:21 -0500, Robert Bonomi bon...@mail.r-bonomi.com wrote: Comment: using a leading zero on the numeric fields is a BAD IDEA(tm) -- you are *strongly* encocuraged to remove them. Yes, that means numbers will not be column aligned, but it is a small price to pay to avoid the hair-tearing that =will= ensue when using it bites you. Any other info on this? I've never heard of this before and I've never seen an issue using leading zeroes on the minutes value. There are some specific interpretations that _may_ be interpreted according to the C rules, e. g. prefix 0x- for hexadecimal or 08- for octal notation. For example, 083 != 83, just as 0x83 != 83. As it has been mentioned, spaces also have a significant meaning in crontabs, so they cannot be used everywhere to align data columns. The syntax of his crontab file is correct. Vixie cron does care about leading spaces, tabs, extra spaces, or leading zeros. Earlier versions of cron are much pickier about the crontab file. The cron logs show that it is starting his jobs at the correct times. It is far more likely that there is a problem with the scripts. A very common cause of problems with scripts run from cron is that they do not inherit your environment. Do the scripts run from the command line? If the do, then the problem is most likely something in your environment that the scripts need. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
ZFS mounting order
Greetings! I have a FreeBSD 9 system with 3 different ZFS pools on it. I am booting from a ro CF Card w/o any major issues, the problem I am encountering is that zroot needs to be mounted at boot first, because it contains /usr, zhome and tank contain other various sub-partitions of /usr. Also, zroot causes me a lot of problems when I try to do zpool import, when zpool gets to probing zroot, I get g_vfs errors printed to the console and the hacnine hangs till I reset it (which is obviously not acceptable behavior.) I was able to get around this when booting to my cf card by making / ro, which was my intention all along for that media.) I suspect this happens because there is a on that volume that is trying to replace something on / on either the USB boot img or on my CF card and this might be causing either to freak out. So I dunno what to do to get this working the way it should and some guidence would be greatly appreciated! -- Chris Brennan | http://xaerolimit.net | http://xaerolimit.net/forum A: Yes. Q: Are you sure? A: Because it reverses the logical flow of conversation. Q: Why is top posting frowned upon? http://xkcd.com/84/ | http://xkcd.com/149/ | http://xkcd.com/549/ GPG: D5B20C0C (6741 8EE4 6C7D 11FB 8DA8 9E4A EECD 9A84 D5B2 0C0C) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Wierd install (kinda)
This is a new way of setting up a machine for me, I have no more smaller spare hard-drives to setup as a system boot/root drive for my FreeBSD machine (they are all dead), but what I do have is a 2GB CF card, the rest of the system is being housed on a ZFS array. My goal is to boot the FreeBSD9 bootstick img and install just what I need to the CF card, but I am unsure of exactly how to go about this. I only want what I need on the card and no more and then have it mounted RO at boot (will I have the option then to remount it RW if I need to make changes later?) The host system is am AMD64 machine w/ 6GB of RAM, it has 6 SATA drives of varying sizes, the smallest being 500GB, the largest being 1TB, The ZFS array is 3 750GB SATA drives in a ZFS-backed/run raid5 array (raidz or raiz2 I think is what it's called.) They all have important data them so they cannot be touched/modified in any way by the installer. P.S. I know my signature dosn't match my public key, I haven't added this e-mail yet (it's on my TODO list!) -- Chris Brennan | http://xaerolimit.net | http://xaerolimit.net/forum A: Yes. Q: Are you sure? A: Because it reverses the logical flow of conversation. Q: Why is top posting frowned upon? http://xkcd.com/84/ | http://xkcd.com/149/ | http://xkcd.com/549/ GPG: D5B20C0C (6741 8EE4 6C7D 11FB 8DA8 9E4A EECD 9A84 D5B2 0C0C) pgp00KGREBaet.pgp Description: PGP signature
USA Anonymous CVS
From http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/anoncvs.html USA: anon...@anoncvs1.freebsd.org:/home/ncvs (For ssh, use ssh version 2 and no password is required.) SSH2 HostKey: 2048 53:1f:15:a3:72:5c:43:f6:44:0e:6a:e9:bb:f8:01:62 /etc/ssh/ssh_host_dsa_key.pub Example A-2. Using SSH to Check Out the src/ Tree: % cvs -d anon...@anoncvs1.freebsd.org:/home/ncvs co src The authenticity of host 'anoncvs1.freebsd.org (216.87.78.137)' can't be established. DSA key fingerprint is 53:1f:15:a3:72:5c:43:f6:44:0e:6a:e9:bb:f8:01:62. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'anoncvs1.freebsd.org' (DSA) to the list of known hosts. However, when I acutally issue the command, I get a different DSA key, different IP, and it will not accept any password: # cvs -d anon...@anoncvs1.freebsd.org:/home/ncvs co src The authenticity of host 'anoncvs1.freebsd.org (96.47.72.116)' can't be established. DSA key fingerprint is 4e:bc:48:a0:e1:27:0a:62:c8:da:45:31:d4:ad:b2:00. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'anoncvs1.freebsd.org' (DSA) to the list of known hosts. Password: Password: Password: Permission denied (publickey,keyboard-interactive). cvs [checkout aborted]: end of file from server (consult above messages if any) Is the USA anonymous CVS server no longer operational? Thanks, Dan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Still having trouble with package upgrades
On Wed, Mar 07, 2012 at 03:20:19PM -0500, David Jackson wrote: I think that your statement here is fundamentally flawed and wrong, because you have assumed that it is impossible for the OS to be able to be user friendly and geek friendly at the same time. This is wrong. In fact, I have outlined ways repeatedly that FreeBSD could provide an easy to use package system without compromising on the flexibility of ports in any way. The idea that the OS has to be either difficult to use or it has to be easy to use for novices is wrong. The OS can be both and I have written about ways that can be done, in fact, I can show how it can be done in every area. For instance, with better binary packages, those are simply built from ports using the best set of options. Those who want to compile for themselves will still be able to do so, just fine. So you have presented a position here that is simply not true. FreeBSD can be more user friendly and as the same time be flexible and friendly to experts such as yourself. its not an either or choice. It can be, if there aren't resources available to devote to both. You've brought this up multiple times. No one is interested in actually doing it. Maybe you should do it yourself and provide the person-power and hardware to get it done right. If it works, I suspect that the FreeBSD devs would accept it and make you an official contributor. Otherwise, as has been noted several times, you are not FreeBSD's target audience. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: make install fails for /usr/ports/security/sudo after downgrade from 9.0-R to 8-STABLE
On 03/03/12 12:31, ill...@gmail.com wrote: Stale header files in /usr/include maybe? Hi, Yes that's it. It seems utmp.h got changed to utmpx.h between 8.2 and 9.0. Fixed by csup of 9.0-R and doing the buildworld buildkernel etc. thanks, -- freebsd at growveg dot net ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
make install fails for /usr/ports/security/sudo after downgrade from 9.0-R to 8-STABLE
Hello list, I had to downgrade from 9-R to 8-STABLE. To do this, I did the following: 1. rm -rf /usr/obj 2. pkg_delete -a 3. rm -rf /usr/ports 4. mkdir -p /usr/ports/distfiles 5. rm -rf /usr/src 6. rm -rf /usr/local/* 6. csup 8-STABLE sources 7. csup ports 8. cd /usr/src make cleandir make cleandir make buildworld make buildkernel make installkernel mergemaster -p 9. (merged required files) 10. make installworld mergemaster 11. reboot. Practically everything in ports actually builds. I've installed X, icewm, windowmaker, firefox36, thunderbird, gimp and a few others. I think I've eliminated all the cruft from 9.0. However, I can't build sudo (or screen) and I can't work out why. Here is the error: # make distclean clean install === Cleaning for sudo-1.8.4 === Deleting distfiles for sudo-1.8.4 === License sudo accepted by the user === Found saved configuration for sudo-1.8.3_2 = sudo-1.8.4p2.tar.gz doesn't seem to exist in /usr/ports/distfiles/. = Attempting to fetch http://www.sudo.ws/sudo/dist/sudo-1.8.4p2.tar.gz === License sudo accepted by the user === Found saved configuration for sudo-1.8.3_2 = sudo-1.8.4p2.tar.gz doesn't seem to exist in /usr/ports/distfiles/. = Attempting to fetch http://www.sudo.ws/sudo/dist/sudo-1.8.4p2.tar.gz [...] cc -c -I../include -I.. -I. -I.. -I. -O2 -pipe -march=core2 -I/usr/local/include -fno-strict-aliasing -D_BSD_SOURCE -DLOCALEDIR=\/usr/local/share/locale\ ./ttyname.c cc -c -I../include -I.. -I. -I.. -I. -O2 -pipe -march=core2 -I/usr/local/include -fno-strict-aliasing -D_BSD_SOURCE -DLOCALEDIR=\/usr/local/share/locale\ ./ttysize.c cc -c -I../include -I.. -I. -I.. -I. -O2 -pipe -march=core2 -I/usr/local/include -fno-strict-aliasing -D_BSD_SOURCE -DLOCALEDIR=\/usr/local/share/locale\ ./utmp.c ./utmp.c: In function 'utmp_settime': ./utmp.c:132: error: dereferencing pointer to incomplete type ./utmp.c:133: error: dereferencing pointer to incomplete type ./utmp.c: In function 'utmp_fill': ./utmp.c:151: error: dereferencing pointer to incomplete type ./utmp.c:153: error: dereferencing pointer to incomplete type ./utmp.c:154: error: dereferencing pointer to incomplete type ./utmp.c:157: error: dereferencing pointer to incomplete type ./utmp.c:160: error: dereferencing pointer to incomplete type ./utmp.c:160: error: dereferencing pointer to incomplete type ./utmp.c:161: error: dereferencing pointer to incomplete type ./utmp.c:161: error: dereferencing pointer to incomplete type ./utmp.c:166: error: dereferencing pointer to incomplete type ./utmp.c:170: error: dereferencing pointer to incomplete type ./utmp.c: In function 'utmp_login': ./utmp.c:294: error: storage size of 'utbuf' isn't known /bin/sh ../libtool --tag=disable-static --mode=compile cc -c -I../include -I.. -I. -I.. -I. -O2 -pipe -march=core2 -I/usr/local/include -fno-strict-aliasing -D_BSD_SOURCE -DLOCALEDIR=\/usr/local/share/locale\ ./sudo_noexec.c ./utmp.c: In function 'utmp_logout': ./utmp.c:343: error: storage size of 'utbuf' isn't known *** Error code 1 libtool: compile: cc -c -I../include -I.. -I. -I.. -I. -O2 -pipe -march=core2 -I/usr/local/include -fno-strict-aliasing -D_BSD_SOURCE -DLOCALEDIR=\/usr/local/share/locale\ ./sudo_noexec.c -fPIC -DPIC -o .libs/sudo_noexec.o 1 error *** Error code 2 1 error *** Error code 1 Stop in /usr/ports/security/sudo. *** Error code 1 Stop in /usr/ports/security/sudo. Can anyone help please? -- freebsd at growveg dot net ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
User disappeared during update error
I did a upgrade to FreeBSD 9 a few weeks ago and just started using it, and when I try and create a new user, I get the follow: pw: user 'todd' disappeared during update adduser: ERROR: There was an error adding user (todd). I first noticed this issue when trying to install postfix and got a similar error. Anyone know what this is or how to fix it without a complete re-install? Ron ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: odd SDcard behaviour in freebsd-9.0-R
On 27/02/2012 17:55, Michael Sierchio wrote: Forgive the naive question, but on one of my Nikons, it is possible to present the device itself, or the SD card as a USD drive. Which are you doing? No doubt there is no driver for the D50 in the kernel, but the generic umass driver should handle the device. Hi, Yes, on freebsd 8.2 the camera has only ever presented itself as storage and it has only ever been the sd card within the camera that has been visible to freebsd. On 9.0 I can see umass output in /var/log/messages but not any corresponding disk descriptor like /dev/da5s1 so I have no way of accessing the sd card. -- freebsd at growveg dot net ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Unable to upgrade packages on FreeBSD
On Mon, Jan 30, 2012 at 03:28:28PM -0700, Chad Perrin wrote: You talk a lot about how easy it is to maintain a binary package system. I would like you to convince me that it is easy, keeping in mind that it should remain compatible with the ports system. I am willing to be convinced. -- Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ] Oh come on, guys. David is the same person who said that FreeBSD was poorly documented. http://osdir.com/ml/freebsd-questions/2011-12/msg00684.html I really hate throwing around the 'T' word, but I'm starting to wonder. I'll give him the benefit of the doubt a bit longer. David, it's increasingly clear that FreeBSD is not going to fit your needs. If, for some reason, you are interested in the FreeBSD kernel, but binary packages, consider GNU/kFreeBSD. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Odd error when doing pkg_version
Starting a couple of days ago, when I run pkg_version I get the following error: /libexec/ld-elf.so.1: Shared object libgdbm.so.3 not found, required by httpd Everything seems to run OK except for this message appearing in the middle of the run. I've tried to narrow it down with no real luck. I've tried searching for ports with libgdbm or ld-elf in them and am not finding any (installed or not). Does anyone know where this is coming from and how to fix it? Ron ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Odd error when doing pkg_version
Starting a couple of days ago, when I run pkg_version I get the following error: /libexec/ld-elf.so.1: Shared object libgdbm.so.3 not found, required by httpd Everything seems to run OK except for this message appearing in the middle of the run. I've tried to narrow it down with no real luck. I've tried searching for ports with libgdbm or ld-elf in them and am not finding any (installed or not). Does anyone know where this is coming from and how to fix it? maybe portupgrade -f httpd\* ? Yeah, I tried looking at that, but I don't have the httpd port installed or any of the other variations of httpd. Or if I do, it doesn't show up anywhere that I can see. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Portmaster general questions and problems
I had been using portupgrade for several years and never had any problems and upgrading ports was quick and simple process every week. But, due to portupgrade no longer being maintained and failing to work anymore, I have switched to using portmaster and am having nothing but problems, so much so that I dread updating my ports. I'm trying to figure out what I'm doing wrong or what I don't understand about portmaster. I've looked on google and can't find any documentation that isn't just basic stuff or rehashes of the man pages (which are fine for reference, but not helpful in understanding how to use it). Here is an example of a problem I run into all the time: I went to update php and I got this: === Starting check for runtime dependencies === Gathering dependency list for devel/libltdl from ports === No dependencies for devel/libltdl === Installing for libltdl-2.2.10 === Generating temporary packing list === Checking if devel/libltdl already installed === libltdl-2.2.10 is already installed You may wish to ``make deinstall'' and install this port again by ``make reinstall'' to upgrade it properly. If you really wish to overwrite the old port of devel/libltdl without deleting it first, set the variable FORCE_PKG_REGISTER in your environment or the make install command line. *** Error code 1 Stop in /usr/ports/devel/libltdl. ok, so libltdl-2.2.10 is already installed? Why is that an issue? Why doesn't portmaster just happily skip it since it's already installed? What am I not understanding here? Or am I using portmaster wrong? Portmaster also doesn't seem to understand when ports are already up-to-date, so doing this: portmaster php5-* To update all the php5 ports causes portmaster to re-install things that are already up to date. Is this expected behavior? if so, how can I upgrade ports without typing each one my hand. I'd rather not run portmaster with -a since I don't want to blindly update everything. Is there a good tutorial on portmaster somewhere that can help an some get started with it? Is portmaster the best tool for updating ports? Thanks, Ron ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Portmaster recursion problem
I recently switched from using portupgrade to portmaster and am having an odd problem upgrading. When I run 'portmaster apache' I get this recursion problem: === Port directory: /usr/ports/www/apache22 === Starting check for build dependencies === Gathering dependency list for www/apache22 from ports === Launching child to update devel/autoconf devel/autoconf perl-5.8.9_3 apache-2.2.17 devel/autoconf perl-5.8.9_3 apache-2.2.17 devel/autoconf perl-5.8.9_3 apache-2.2.17 devel/autoconf perl-5.8.9_3 apache-2.2.17 devel/autoconf perl-5.8.9_3 apache-2.2.17 devel/autoconf perl-5.8.9_3 apache-2.2.17 devel/autoconf perl-5.8.9_3 apache-2.2.17 devel/autoconf This just keeps going and going. I've tried upgrading other ports and they all do the same thing (with slightly different packages). What is very weird is the dependencies. For example, I run 'portmaster nano' and I get: === The following actions will be taken if you choose to proceed: Upgrade nano-2.2.5 to nano-2.2.6 Upgrade apache-2.2.17 to apache-2.2.17_1 Install devel/autoconf Upgrade autoconf-wrapper-20071109 to autoconf-wrapper-20101119 Upgrade perl-5.8.9_3 to perl-5.8.9_4 Install devel/libtool Upgrade openssl-1.0.0_2 to openssl-1.0.0_4 I'm not sure why nano is dependent on apache? This leads me to wonder is something is messed up in my dependencies, and if so, how do I fix it? I'd love to go back to using portupgrade, but it seems it is not longer maintained or functional (this reason I switched to portmaster). Thanks, Ron ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
portupgrade fails to run or do anything
I'm trying to upgrade my ports and I can't get portupgrade to do anything. I type 'sudo portupgrade apache' (or any package) and all I get back is a command prompt. No error or any other message. portversion seems to work correctly, showing my out of date ports, etc. Running portupgrade with -F doesn't help at all. I've also noticed that tab-expansion isn't working like it used to on the port names, so that makes me wonder if the database is screwed up. I've tried running pkgdb and it just returns like portupgrade. Running portsdb to try and rebuild the index doesn't help. Any ideas? I'm perplexed and Google is no help. Thanks ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: portupgrade fails to run or do anything
On Sun, 7 Nov 2010 12:57:03 -0500, Chris Brennan xa...@xaerolimit.net wrote: On Sun, Nov 7, 2010 at 12:21 PM, Ron (Lists) wrote: I'm trying to upgrade my ports and I can't get portupgrade to do anything. I type 'sudo portupgrade apache' (or any package) and all I get back is a command prompt. No error or any other message. portversion seems to work correctly, showing my out of date ports, etc. Running portupgrade with -F doesn't help at all. I've also noticed that tab-expansion isn't working like it used to on the port names, so that makes me wonder if the database is screwed up. I've tried running pkgdb and it just returns like portupgrade. Running portsdb to try and rebuild the index doesn't help. Any ideas? I'm perplexed and Google is no help. Thanks Syntax is 'portupgrade www/apache' (/usr/ports is assumed) 'portupgrade apache' has always worked before and adding the www/ in front does not fix the problem. Still the same results, e.g. nothing. :-) Ron ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: portupgrade fails to run or do anything
On Sun, 7 Nov 2010 19:08:23 +0100, Polytropon free...@edvax.de wrote: On Sun, 07 Nov 2010 09:21:22 -0800, Ron (Lists) rg.li...@rzweb.com wrote: I'm trying to upgrade my ports and I can't get portupgrade to do anything. I type 'sudo portupgrade apache' (or any package) and all I get back is a command prompt. No error or any other message. portversion seems to work correctly, showing my out of date ports, etc. You need to be in /usr/ports and then issue the port name together with the category; in your case: % cd /usr/ports % sudo portupgrade www/apache Running portupgrade with -F doesn't help at all. I've also noticed that tab-expansion isn't working like it used to on the port names, so that makes me wonder if the database is screwed up. The expansion is handled by the shell, and based on the content of directories accessed. If you follow the example above, autocomplete should work fine. I've tried running pkgdb and it just returns like portupgrade. That should not be; did you run this? # pkgdb -aF This is the most common call for that program, issued as root (or via su or sudo or super). Running portsdb to try and rebuild the index doesn't help. See from the manpage: Note that INDEX file is updated every few hours on official site, it is recommended that you run ``portsdb -Fu'' after every CVSup of the ports tree in order to keep them always up-to-date and in sync with the ports tree. Any ideas? I'm perplexed and Google is no help. I can suggest reading the manpages of the programs in question before consulting google. One of FreeBSD's strengths is its EXCELLENT documentation. Know about that fact, and it will help you in many situations. :-) None of these suggestions help. I have never had to put www/ in front of the port name before. The tab expansion is handled by bash-completion as used to be smart enough to know the command I was typing and could auto-complete port names, but no longer, which is why I suspect that I have a screwed up database. Ron ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
OK, now perl won't install...
Based on advice to switch to portmaster from portupgrade, I am now having a problem with perl. When I went to upgrade a perl package, it re-installed perl, but fail (and removed perl). I am getting this message: === perl-5.8.9_3 : Your apache does not support DSO modules. I have tried to configure and upgrade apache but get this message; /usr/local/sbin/apxs: not found /usr/ports/Mk/bsd.apache.mk, line 245: warning: /usr/local/sbin/apxs -q MPM_NAME returned non-zero status How do I upgrade apache (or is this something else going wrong)? Help! My system is really screwed up without perl running. Ron ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
/usr/local/sbin/apxs is missing.
Still trying to unscrew my perl installation. Perl and Apache both fail to install due to the missing /usr/local/sbin/apxs. I have no idea what failed package removed it, but now I can't install perl. Who installs this file? It appears to be an apache file, but I can't install apache because it's missing. I'm really dead in the water because so much the system requires perl and it was uninstalled by portmaster (for some reason I don't understand) and I can't install it due to the missing file. Ron ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Freebsd, postfix and push email
Is there a way to get my freebsd/postfix setup to send push notifications to an iPhone (I assume other smart phones work the same way). I've searched the web and I can't find any information about how to make this work. I know it can be done with Exchange and ActiveSync, but I don't want to run any kind of exchange server. Thanks for any help, or even a point in the right direction. Ron ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: 8.0-RELEASE-i386-memstick fixit - No USB devices found!
Ian Smith wrote: Very long story short: googled for ages and found a forum thread about this very problem, in which someone suggested Options / Rescan Devices then trying again. The OP there said it didn't work for him, but it sure did for me! snip Options / Rescan Devices fixed it for me. Maybe it will for Derek and/or maybe provide another clue? Indeed this works for me. I've added a follow-up to the PR. Thanks for the tip! - Derek ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: 8.0-RELEASE-i386-memstick fixit - No USB devices found!
For the archives, there's now a PR for this: bin/140972 - Derek ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
8.0-RELEASE-i386-memstick fixit - No USB devices found!
Hi, Just wondering if anyone else out there has successfully gotten the 8.0-RELEASE-i386-memstick fixit prompt up. It boots fine, and sysinstall comes up, but I continually get No USB devices found! when I go to the fixit/USB option. When I switch to the debug tty, I see da0, and all my device parameters. I've even created a second USB stick, and stuck it in and tried. No joy. Anyways, has anyone successfully gotten the 8.0-RELEASE-i386-memstick fixit prompt up? Thanks! - Derek ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: 8.0-RELEASE-i386-memstick fixit - No USB devices found!
Randi Harper wrote: On Fri, Nov 27, 2009 at 5:00 AM, Derek (freebsd lists) 48225...@razorfever.net wrote: It boots fine, and sysinstall comes up, but I continually get No USB devices found! when I go to the fixit/USB option. Anyways, has anyone successfully gotten the 8.0-RELEASE-i386-memstick fixit prompt up? can you bring up a normal fixit shell prompt and see what entries you have in /dev for da0*? There should be a da0a. Due to sysinstall weirdness, adding this USB support was somewhat of a hack, as it doesn't look for da0 - it looks for da0a. :P When I do Fixit/Shell and switch to tty3 I do: find /dev/ -name da0* and get: ./da0 ./da0a Is this what you mean by normal fixit shell? - Derek ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
libspectre - libgs = 8.61 problem
Morning All: While installing the kde4 port, I got to libspectre. The libspectre port insists that I must have libgs to compile it. After a little research, I found that this is a ghostscript library. So I installed the ghostscript-8.63 port. noe, libspectre insists that I have to have libgs version = 8.61. I checked /usr/local/lib and found the following: ls -l libgs.* libgs.so - libgs.so.8.63 libgs.so8 - libgs.so.8.63 libgs.so.8.63 So I'm guessing there's a problem in the configure script, but if there is, I can't find it. Then again, maybe I'm just missing something simple. Any ideas, anyone? Thanks. Gene -- To everything there is a season, And a time to every purpose under heaven. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: freebsd 7.0 and jail
Make sure your buildworld /usr/obj is updated. Good idea is to erase your /usr/obj and buildworld again before going on with the jails. fc On Mon, Sep 8, 2008 at 7:28 PM, gahn [EMAIL PROTECTED] wrote: Hello: I am trying to build jails on 7.0 system and got errors: / Installing everything -- cd /usr/src; make -f Makefile.inc1 install === share/info (install) === lib (install) === lib/csu/i386-elf (install) gcc -O2 -fno-strict-aliasing -pipe -I/usr/src/lib/csu/i386-elf/../common -I/usr/src/lib/csu/i386-elf/../../libc/include -Wsystem-headers -Wall -Wno-format-y2k -W -Wno-unused-parameter -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Wreturn-type -Wcast-qual -Wwrite-strings -Wswitch -Wshadow -Wcast-align -Wunused-parameter -Wchar-subscripts -Winline -Wnested-externs -Wredundant-decls -Wno-pointer-sign -c crt1.c gcc:No such file or directory *** Error code 1 Stop in /usr/src/lib/csu/i386-elf. *** Error code 1 Stop in /usr/src/lib. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. *** Error code 1 /// looks like the code of jail is broken, did anyone have similar problem? I am working in an environment that is able to use freebsd-update script. Thanks in Advance ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Net/Force Install
Hello, The co-host that i use to host my email, web and DNS doesn't offer the option of using FreeBSD. This isn't really a problem per-se, but i would *really* rather use FreeBSD as it is what i am accustomed to and most comfortable using. So, off to my question. They offer a rescuemode where i can boot into and have full access to the disks. Do you think it would be possible to maybe create an image of an existing BSD install with the same disk makeup, etc. and dd it to the remote disk? Have any of you ever attempted this before? The procedure that i was planning to use involved using dd to pipe the image over a netcat connection. Thanks! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Linux equivalent to freebsd
Hi, Sorry this question is a little off-topic... We've been using Freebsd for many years and all of our servers are running freebsd. The only thing that is a pain with freebsd, is poor commercial support :( We are running in a situation where a customer needs Zend platform 3 (http://www.zend.com/products/zend_platform) which won't be available for freebsd until the end of the year... So I will need to setup a machine with linux. I don't know much about linux distributions, could someone recommend one to me please. We are looking for a platform that will support amd64 extensions, will act as a console only server and that has a good way to install ports and upgrade. We want something secure and stable. We don't wanna go with Redhat or any commercial distribution. I really like the cvsup/make install/portupgrade way of dealing with software installation and updates and I am looking for something equivalent on a linux distribution. Could you recommend a distribution you are using in production, we've check ubuntu, fedora and Debian, but I wonder what freebsd users recommend... Thanks ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ps oddity
Now, here's the strange part. When running under my user id, even in daemon mode, ps -aux | grep user would show me the daemon process. However, now that it's running as root, it doesn't. Why is that? The only way I've been able to tell that it's running is by using sockstat. Are you doing ps -aux | grep root instead of ps -aux | grep previous_user_who_is_not_running_the_process ? Look for your process in ps -aux | less Still missing ? -- Felipe ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Portupgrade libusb/doctool problem.
If this isn't an appropriate list for this sort of query, my apologies and could someone maybe give me a steer to somewhere better? I've got... 6.1 recently updated ports via portsnap When I go to do a portupgrade -arR, everything cruises along fine until I get to libusb. It configures fine, but then starts throwing errors about docbook-4.2 not being found, which is kind of screwy, as it most definitely is. I've tried uninstalling, reinstalling, everything. I've googled and found nothing. I'm at a complete loss. Any ideas? TIA, anyone who can help. kabel Very long log follows: # portupgrade -vrR libusb --- Session started at: Wed, 15 Nov 2006 23:33:45 -0500 --- Upgrade of devel/libusb started at: Wed, 15 Nov 2006 23:33:46 -0500 --- Upgrading 'libusb-0.1.10a_2' to 'libusb-0.1.12_1' (devel/libusb) --- Build of devel/libusb started at: Wed, 15 Nov 2006 23:33:46 -0500 --- Building '/usr/ports/devel/libusb' === Cleaning for jade-1.2.1_9 === Cleaning for dsssl-docbook-modular-1.79,1 === Cleaning for docbook-1.3 === Cleaning for docbook-4.2 === Cleaning for gmake-3.81_1 === Cleaning for xmlcatmgr-2.2 === Cleaning for docbook-241_2 === Cleaning for docbook-3.0_2 === Cleaning for docbook-3.1_2 === Cleaning for docbook-4.0_2 === Cleaning for docbook-4.1_2 === Cleaning for docbook-xml-4.2_1 === Cleaning for iso8879-1986_2 === Cleaning for unzip-5.52_2 === Cleaning for gettext-0.14.5_2 === Cleaning for libtool-1.5.22_2 === Cleaning for libiconv-1.9.2_2 === Cleaning for libusb-0.1.12_1 === Vulnerability check disabled, database not found === Found saved configuration for libusb-0.1.12_1 === Extracting for libusb-0.1.12_1 = MD5 Checksum OK for libusb-0.1.12.tar.gz. = SHA256 Checksum OK for libusb-0.1.12.tar.gz. === Patching for libusb-0.1.12_1 === Applying FreeBSD patches for libusb-0.1.12_1 === libusb-0.1.12_1 depends on file: /usr/local/share/sgml/jade/catalog - found === libusb-0.1.12_1 depends on file: /usr/local/share/sgml/docbook/dsssl/ modular/catalog - found === libusb-0.1.12_1 depends on file: /usr/local/share/sgml/docbook/catalog - not found ===Verifying install for /usr/local/share/sgml/docbook/catalog in /usr/ ports/textproc/docbook === Vulnerability check disabled, database not found === Found saved configuration for docbook-1.3 === Extracting for docbook-1.3 === Patching for docbook-1.3 === Configuring for docbook-1.3 === Installing for docbook-1.3 === docbook-1.3 depends on file: /usr/local/share/sgml/docbook/2.4.1 - found === docbook-1.3 depends on file: /usr/local/share/sgml/docbook/3.0 - found === docbook-1.3 depends on file: /usr/local/share/sgml/docbook/3.1 - found === docbook-1.3 depends on file: /usr/local/share/sgml/docbook/4.0 - found === docbook-1.3 depends on file: /usr/local/share/sgml/docbook/4.1 - found === docbook-1.3 depends on file: /usr/local/share/xml/docbook/4.2 - found === docbook-1.3 depends on file: /usr/local/share/sgml/iso8879 - found === Generating temporary packing list === Registering installation for docbook-1.3 === Returning to build of libusb-0.1.12_1 === libusb-0.1.12_1 depends on file: /usr/local/share/sgml/docbook/4.2/ catalog - found === Configuring for libusb-0.1.12_1 configure: WARNING: you should use --build, --host, --target checking for a BSD-compatible install... /usr/bin/install -c -o root -g wheel checking whether build environment is sane... yes checking for gawk... no checking for mawk... no checking for nawk... nawk checking whether make sets $(MAKE)... yes checking build system type... i386-portbld-freebsd6.1 checking host system type... i386-portbld-freebsd6.1 checking for style of include used by make... GNU checking for i386-portbld-freebsd6.1-gcc... cc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether cc accepts -g... yes checking for cc option to accept ANSI C... none needed checking dependency style of cc... gcc3 checking for a sed that does not truncate output... /usr/bin/sed checking for egrep... grep -E checking for ld used by cc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for /usr/bin/ld option to reload object files... -r checking for BSD-compatible nm... nm checking whether ln -s works... yes checking how to recognise dependent libraries... pass_all checking how to run the C preprocessor... cc -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking dlfcn.h usability... yes checking dlfcn.h presence... yes checking for
Re: advice on upgrading production FreeBSD 5.4
[EMAIL PROTECTED] wrote: I inherited a production FreeBSD 5.4 used as a web/mail server (Apache, PostgreSQL, php, qmail, vpopmail, Courier). Could anybody help me with information about a web resource on upgrading such system (all, OS only or component by component) with minimum downtime. I looked into cvsup and portupgrade - is this the right way for production systems or is there another one? For example is it possible to have the older version running until the new one downloads/compiles and then to replace it within seconds? Also - what if the new version does not work correctly - is it possible to keep the old and revert to it. regarding rolling-back to an older version, check out the --backup-packages option of portupgrade. It will create a package of the already installed version so that you can reinstall it without recompiling. Thank you, Iv ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: stale dependencies in pkgdb
Andrew wrote:
On Fri, 2006-02-10 at 11:42 -0500, Robert Huff wrote:
Andrew writes:
I've run pkgdb -F as portupgrade suggests, deleting stale
dependencies, but they seem to keep reappearing.
I'm not an expert on pkgdb, but I'm pretty sure that's the way
it works.
You need to fix, not delete, the stale dependencies. This may
take some effort the first time around.
Beyond that, I question the wisdom of any automatic
solution. There are definitely times when I do _not_ want to accept
the fixes proposed by pkgdb -F.
My apologies; I re-read the man pages for portupgrade and pkgdb and I
think I understand what's going on now. Thanks anyway...
-Andrew
A good solution in the long term, rather than fixing dependencies every
time you do an upgrade, is to look at the ALT_PKGDEP section of
pkgtools.conf. Here is how i addressed the cdrtools dependency you
mentioned.
ALT_PKGDEP = {
'cdr-tools*' = 'cjk-cdrtools*',
'pcre-*' = 'pcre-utf8',
}
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
SOLVED: package contains missing libgmodule
Thanks for your reply, Michael. Of course, you are right. I should have been more specific. I had reinstalled glib version 2, but that did not solve my problem. Just to be double sure, after I read your email, I reinstalled glibc-2.8.3 AGAIN, but still got the error. Your email got me thinking. I wanted to do: find / -iname libgmodule* This would search for every file named libgmodule* in the file system on the version of find that I've found on linux systems. I kept boinking the BSD version, so I ran: $ find / | grep libgmodule* /usr/local/lib/libgmodule-2.0.so.0 /usr/local/lib/libgmodule-2.0.so /usr/local/lib/libgmodule-2.0.a /usr/local/lib/libgmodule12.a /usr/local/lib/libgmodule12.so /usr/local/lib/libgmodule12.so.3 I added a link and tried artsd: $ ls -l libgmodule* -rw-r--r-- 1 root wheel 8220 Nov 13 19:02 libgmodule-2.0.a lrwxr-xr-x 1 root wheel 19 Nov 13 19:02 libgmodule-2.0.so - libgmodule-2.0.so.0 -rwxr-xr-x 1 root wheel 12701 Nov 13 19:02 libgmodule-2.0.so.0 lrwxr-xr-x 1 root wheel 19 Nov 13 21:11 libgmodule-2.0.so.600 - libgmodule-2.0.so.0 This time, I got the same exact error, but for the library: libgthread-2.0.so.600 I added a link to libgthread-2.9.so.0. $ ls -l libgthread* -rw-r--r-- 1 root wheel 12668 Nov 13 19:02 libgthread-2.0.a lrwxr-xr-x 1 root wheel 19 Nov 13 19:02 libgthread-2.0.so - libgthread-2.0.so.0 -rwxr-xr-x 1 root wheel 17820 Nov 13 19:02 libgthread-2.0.so.0 lrwxr-xr-x 1 root wheel 19 Nov 13 21:14 libgthread-2.0.so.600 - libgthread-2.0.so.0 Now, artsd and everything else is happy. I have sound on KDE. I don't know if the missing links are the result of something I deinstalled, but shouldn't a reinstall of the port or package recreate those links? I am not trying to complain, just want to figure out if I stumbled on a bug, or if these is just another instance of me boinking my own system. Regards, Obitori On Sunday 13 November 2005 16:30, Michael C. Shultz wrote: On Sunday 13 November 2005 13:32, [EMAIL PROTECTED] wrote: /libexec/ld-elf.so.1: Shared object libgmodule-2.0.so.600 not found, required by artsd I get the above error from quite a few packages, from mozilla to artsd to others. Any suggestion on what I need to reinstall. I tried gtk, glib and gnome2, but still no joy. Thanks, Obitori find /var/db/pkg/. | xargs grep libgmodule /var/db/pkg/./glib-2.8.3/+CONTENTS:lib/libgmodule-2.0.a /var/db/pkg/./glib-2.8.3/+CONTENTS:lib/libgmodule-2.0.so /var/db/pkg/./glib-2.8.3/+CONTENTS:lib/libgmodule-2.0.so.0 @comment PKG_FORMAT_REVISION:1.1 @name glib-2.8.3 @comment ORIGIN:devel/glib20 Looks like it comes from devel/glib20 -Mike ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Jail cloning problem
On Thu, 10 Nov 2005, patrick wrote: I built a jail, and then I tar'd it up after some setup so that I could create new jails quickly. When I start up a cloned jail, everything works except SSH. If I try to ssh outside of the jail, I just get: Host key verification failed.. I know from past experience that if I rebuild the second jail the make world way, everything works fine, so I suspect that there is some permissions or dev issue after untarring. I'm 100% certain that it does not have to do with any actual host key verification. I've rebuilt the dev folder using MAKEDEV jail, and have also tried ensuring that permissions are correct in /tmp and /var, but to no avail. Can anyone think of any reason why SSH wouldn't work in a cloned jail like this? Use dump and restore, and things will work as expected. The initial jail has to be built on it's own file system though. -Glenn Thanks, Patrick ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: apache13+mod_ssl portupgrade problem..
Steve Monkhouse wrote: Hi guys.. Ive been pulling my hair out for the last couple of hours over this to no avail... FreeBSD 5.2.1-RELEASE-p8 P4 2.8 512mb RAM I 'had' a working apache13+modssl installation along with mod_perl. Everything was working perfectly until I decided yesterday to portupgrade the machine. I started off with perl being portupgraded via 'portupgrade -rR perl' Then I did the php modules via portupgrade php-* Maybe i missed something, but did you also upgrade php itself? Either way, try a: php -m and then check your php error logs. I have found that problems with php can way too easily segfault an apache instance. And anything else that I missed then got done as well.. Everything now shows that its up-to-date eg.. apache+mod_ssl-1.3.33+2.8.24_1 = up-to-date with port however whenever I try to start apache with apachectl startssl it gives : /usr/local/sbin/apachectl startssl: httpd started but does not start.. nothing at all appears in the logs (error or access) even with debug enabled.. the only message that appears is in messages Sep 22 17:44:23 server kernel: pid 77689 (httpd), uid 0: exited on signal 11 (core dumped) Ive searched high and low for a solution, but to no avail.. Ive deinstalled and reinstalled, deinstalled / install distclean etc etc but no diff.. The sad thing is that this was working perfectly yesterday albeit with versions that haven't been updated for 2 months.. What have I done wrong ? and how do I go about rectifying it ?? Any help would be GREATLY appreciated.. as my web server is still down at the moment.. Thanks in advance Steve ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
hard drive not properly dismounted
Hello, I have a second hard drive in my docking station that gets mounted at each boot as /hd2. For the past few weeks, everytime I boot, I get the message /hd2 not properly dismounted I have a script in /usr/local/etc/rc.d that automatically mounts and unmounts /hd2 at boot and shutdown. Also, if I just unmount /hd2 manually, I still get that message. I've run fsck on it, can still access when booted, and don't see anything wrong. Why am I getting that message? Any ideas? Thanks, DW ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Multiple aliased IP address when using VLAN's on 5.4
Greetings, I have a situation where I am using multiple VLAN's on one network card. Until recently, each of those VLAN's was on a different subnet, and I had no issues. However, now I need to add several different IP's on the same subnet to one of the VLAN's, but I have been unsuccessful. It seems aliases are not allowed when using VLAN's, and adding any other VLAN interface name on an identical VLAN does not work either.. Any tips? -- Stephen. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
SSH, SSL and DNS headaches
Can anybody provide me with some insight into this before I rip all of my hair out: Starting 3 days ago, suddenly it seemed to take a very, very, verly long time for ssh and ssl communications to negotiate between nodes on my network. I have 3 subnets: a LAN (10.10.0.0/16) a DMZ (10.20.0.0/16) a secured subnet for databases (10.30.0.0/16) I have 2 DNS/Bind servers running in the DMZ: 1 for the public web servers that get NAT'd, and provide public DNS lookups for the outside world. The other DNS server is for internal queries, providing the cooresponding private IP addresses to LAN clients and servers in the DMZ and secure subnet. Both sDNS servers are running FreeBSD (one is 5.2.1, the other is 5.3) Everything has been working great for months, until, like I said, 3 days ago. Some SSH negotiations were taking so long that they would time out before I would have a chance to enter the password for my private key. Apache/SSL communincations are also taking a long time. But when I make intial connections over port 80, it is very fast. I have also been able to make straight postgresql connections from nodes on my LAN to database servers in my secure subnet, but if I ssh to and from the same boxesslow timeouts. It seems to be that encrypted traffic is having a problem. The weird thing is that when I tried on a couple of servers to change the DNS server in resolv.conf from the internal (private IP address) DNS server to the public server, it seemed to speed things up. But I don't understand whywhy would it be faster if a lookup reply is providing the external PUBLIC ip address instead of the internal PRIVATE ip address? And I also don't understand why this would have just suddenly started 3 days ago after working fine. All the subnets are seperated by a Cisco PIX 515 firewall, and I see no errors on it. I also see no errors on any of my FreeBSD boxes in the logs (other than the SSH timeout errors). I've tried rebooting the PIX, rebooting my DNS servers, rebooting all the equipment on my communication rack (router, firewall, switches, etc.). I'm really confused. One thing that has helped is that on 5.3 boxes, I put UseDNS no in sshd_config, and that seemed to help the SSH problem (but no Apache/SSL). I can't do this on all the boxes, though...some are 5.2.1, and when I put the same directive in there, I get an invalid config message when I try to restart SSH. Thanks for any help on this. I am going insane. -DW ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.3 - Write failure on transfer
I have made some limited progress on the FreeBSD 5.3 Netserver problem outline below. I have been able to install FreeBSD 5.3 on a Netserver using the onboard SCSI card. However it will not install if I use the HP 1si NetRaid card for the SCSI drives. So it appears to be having a problem with the HP 1si NetRaid card. Any suggestions or advice? Lino Webzone lists wrote: Further to this problem, I have tried installing FreeBSD5.3 on a second hp netserver and I continue to get the same problem during the install process. Write failure on transfer! (wrote -1 bytes of 1425408 bytes) After two weeks of stuffing around I am giving up on 5.3 - there is clearly something wrong with 5.3 - there does not appear to be anything wrong with the hardware - its appears to be a FreeBSD 5.3 issue -. I have gone back to 4.10 which installs fine. Somewhere between 4.10 and 5.3 something has broken in relation to an installation on a netserver box. Has anyone else got a hp netserver LC2000r or similar box and been able to get 5.3 installed? Lino lists wrote: It looks like it is having a problem relating to the mounting the drives. When I rerun the FreeBSD5.3 install a second time - it lists the drives from the first install but they are missing the mount locations. Any suggestions on a work around? Lino lists wrote: Loren M. Lang wrote: On Sun, Jan 02, 2005 at 03:53:33PM +1030, Lino Fusco wrote: Hi, I am a newbie to this list and I hope I am posting to the correct list - apologies if I am off target. I am installing FreeBSD 5.3 on a hp netserver LC2000r. The box is a dual processor P3 with three scsi2 drives running in a raid1 configuration with one hot spare. We have six of these boxes. Three of them are running FreeBSD 4.8 or 4.9 without a hitch. I decided to install 5.3 from CD on a fourth box and I am having a problem. I go through the install process. When it goes to write the file structure to the drives it does this in a around 1 second - this seems very fast. Then it starts copying from the CD and I quickly get the following error: Write failure on transfer! (wrote -1 bytes of 1425408 bytes) I click ok and the next error message is: unable to transfer the base distribution from acd0, do you want to try to retrieve it again?. So this has started me troubleshooting the possible causes of the problem: 1) First stop was to suspect the freebsd iso I had burnt was suspect. So I re burnt the cd and the problem persisted. I then suspected the ISO I had downloaded was corrupted. So I downloaded it again, burnt the cd but the problem still persisted. 2) I then suspected the second copy could have come from a cache and therefore may have the same problem as the first copy - so I checked the md5 signature but it lines up with the original from freebsd.org 3) I suspected the CD Rom drive - so I swapped it with one of our other Netserver boxes - problem still persisted. 4)I suspected a drive formatting problem - so I went back into the SCSI software, redid the raid drives and reformatted them - problem still persisted. 5) I suspected another hardware problem - so I pulled out FreeBSD 4.9 to see if that would install - and it did install without any errors. That sort of discounts there being any hardware problems. It points to something specific to freebsd 5.3. So this is where I have got to - FreeBSD 4.9 will install without errors but 5.3 will not install. I suspect the problem has to do with the initial setting up of the file structure - 5.3 is doing this in about one second whereas 4.9 takes closer to a minute to do this. Any thoughts or suggestion? I believe FreeBSD 5.3 does support using UFS 1 in the install, just check the option in the disklabel program, but if the partitioning also fails then that may not be the problem. Lino Webzone ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Hi, Tried setting the partitions to UFS1 - FreeBSD 5.3 then takes closer to a minute to setup the partitions just like 4.9 - but still get the same error message when it goes to copy the files. Thanks but did not work. Lino ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
External modem issues with 5.3 - serial interface there, butaccessing it locks tip/cu up.
Hi all, I'm trying to get an external modem working under 5.3, without success. FBSD is detecting the serial port, and the device is in /dev (as cuaa0). When I try to access the modem using cu or tip, as per the Handbook, both lock up. I have not made any changes to /etc/ttys because I do not intend to have dial-in access (am I correct there?, and /etc/remote looks fine. Any suggestions? -- Stephen. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
make buildworld broke
I had a box crash and I got it up again. I lost some information in / and /etc. After some reconstructing, it seems to be running fine and all the services are working. I wanted to do a buildworld just to update anything I might have missed. When I try, I always get a stop error. How can I get my buildworld back, I dont want to take the box offline for long. I also need to add another proc to it, which means I need to add smp support, which I can't currently do. What is the best course of action for me from here? Am I overlooking something simple? FreeBSD 5.2.1-RELEASE FreeBSD 5.2.1-RELEASE #0: TIA ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.3 - Write failure on transfer
Further to this problem, I have tried installing FreeBSD5.3 on a second hp netserver and I continue to get the same problem during the install process. Write failure on transfer! (wrote -1 bytes of 1425408 bytes) After two weeks of stuffing around I am giving up on 5.3 - there is clearly something wrong with 5.3 - there does not appear to be anything wrong with the hardware - its appears to be a FreeBSD 5.3 issue -. I have gone back to 4.10 which installs fine. Somewhere between 4.10 and 5.3 something has broken in relation to an installation on a netserver box. Has anyone else got a hp netserver LC2000r or similar box and been able to get 5.3 installed? Lino lists wrote: It looks like it is having a problem relating to the mounting the drives. When I rerun the FreeBSD5.3 install a second time - it lists the drives from the first install but they are missing the mount locations. Any suggestions on a work around? Lino lists wrote: Loren M. Lang wrote: On Sun, Jan 02, 2005 at 03:53:33PM +1030, Lino Fusco wrote: Hi, I am a newbie to this list and I hope I am posting to the correct list - apologies if I am off target. I am installing FreeBSD 5.3 on a hp netserver LC2000r. The box is a dual processor P3 with three scsi2 drives running in a raid1 configuration with one hot spare. We have six of these boxes. Three of them are running FreeBSD 4.8 or 4.9 without a hitch. I decided to install 5.3 from CD on a fourth box and I am having a problem. I go through the install process. When it goes to write the file structure to the drives it does this in a around 1 second - this seems very fast. Then it starts copying from the CD and I quickly get the following error: Write failure on transfer! (wrote -1 bytes of 1425408 bytes) I click ok and the next error message is: unable to transfer the base distribution from acd0, do you want to try to retrieve it again?. So this has started me troubleshooting the possible causes of the problem: 1) First stop was to suspect the freebsd iso I had burnt was suspect. So I re burnt the cd and the problem persisted. I then suspected the ISO I had downloaded was corrupted. So I downloaded it again, burnt the cd but the problem still persisted. 2) I then suspected the second copy could have come from a cache and therefore may have the same problem as the first copy - so I checked the md5 signature but it lines up with the original from freebsd.org 3) I suspected the CD Rom drive - so I swapped it with one of our other Netserver boxes - problem still persisted. 4)I suspected a drive formatting problem - so I went back into the SCSI software, redid the raid drives and reformatted them - problem still persisted. 5) I suspected another hardware problem - so I pulled out FreeBSD 4.9 to see if that would install - and it did install without any errors. That sort of discounts there being any hardware problems. It points to something specific to freebsd 5.3. So this is where I have got to - FreeBSD 4.9 will install without errors but 5.3 will not install. I suspect the problem has to do with the initial setting up of the file structure - 5.3 is doing this in about one second whereas 4.9 takes closer to a minute to do this. Any thoughts or suggestion? I believe FreeBSD 5.3 does support using UFS 1 in the install, just check the option in the disklabel program, but if the partitioning also fails then that may not be the problem. Lino Webzone ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Hi, Tried setting the partitions to UFS1 - FreeBSD 5.3 then takes closer to a minute to setup the partitions just like 4.9 - but still get the same error message when it goes to copy the files. Thanks but did not work. Lino ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.3 - Write failure on transfer
It looks like it is having a problem relating to the mounting the drives. When I rerun the FreeBSD5.3 install a second time - it lists the drives from the first install but they are missing the mount locations. Any suggestions on a work around? Lino lists wrote: Loren M. Lang wrote: On Sun, Jan 02, 2005 at 03:53:33PM +1030, Lino Fusco wrote: Hi, I am a newbie to this list and I hope I am posting to the correct list - apologies if I am off target. I am installing FreeBSD 5.3 on a hp netserver LC2000r. The box is a dual processor P3 with three scsi2 drives running in a raid1 configuration with one hot spare. We have six of these boxes. Three of them are running FreeBSD 4.8 or 4.9 without a hitch. I decided to install 5.3 from CD on a fourth box and I am having a problem. I go through the install process. When it goes to write the file structure to the drives it does this in a around 1 second - this seems very fast. Then it starts copying from the CD and I quickly get the following error: Write failure on transfer! (wrote -1 bytes of 1425408 bytes) I click ok and the next error message is: unable to transfer the base distribution from acd0, do you want to try to retrieve it again?. So this has started me troubleshooting the possible causes of the problem: 1) First stop was to suspect the freebsd iso I had burnt was suspect. So I re burnt the cd and the problem persisted. I then suspected the ISO I had downloaded was corrupted. So I downloaded it again, burnt the cd but the problem still persisted. 2) I then suspected the second copy could have come from a cache and therefore may have the same problem as the first copy - so I checked the md5 signature but it lines up with the original from freebsd.org 3) I suspected the CD Rom drive - so I swapped it with one of our other Netserver boxes - problem still persisted. 4)I suspected a drive formatting problem - so I went back into the SCSI software, redid the raid drives and reformatted them - problem still persisted. 5) I suspected another hardware problem - so I pulled out FreeBSD 4.9 to see if that would install - and it did install without any errors. That sort of discounts there being any hardware problems. It points to something specific to freebsd 5.3. So this is where I have got to - FreeBSD 4.9 will install without errors but 5.3 will not install. I suspect the problem has to do with the initial setting up of the file structure - 5.3 is doing this in about one second whereas 4.9 takes closer to a minute to do this. Any thoughts or suggestion? I believe FreeBSD 5.3 does support using UFS 1 in the install, just check the option in the disklabel program, but if the partitioning also fails then that may not be the problem. Lino Webzone ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Hi, Tried setting the partitions to UFS1 - FreeBSD 5.3 then takes closer to a minute to setup the partitions just like 4.9 - but still get the same error message when it goes to copy the files. Thanks but did not work. Lino ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD 5.3 - Write failure on transfer
Loren M. Lang wrote: On Sun, Jan 02, 2005 at 03:53:33PM +1030, Lino Fusco wrote: Hi, I am a newbie to this list and I hope I am posting to the correct list - apologies if I am off target. I am installing FreeBSD 5.3 on a hp netserver LC2000r. The box is a dual processor P3 with three scsi2 drives running in a raid1 configuration with one hot spare. We have six of these boxes. Three of them are running FreeBSD 4.8 or 4.9 without a hitch. I decided to install 5.3 from CD on a fourth box and I am having a problem. I go through the install process. When it goes to write the file structure to the drives it does this in a around 1 second - this seems very fast. Then it starts copying from the CD and I quickly get the following error: Write failure on transfer! (wrote -1 bytes of 1425408 bytes) I click ok and the next error message is: unable to transfer the base distribution from acd0, do you want to try to retrieve it again?. So this has started me troubleshooting the possible causes of the problem: 1) First stop was to suspect the freebsd iso I had burnt was suspect. So I re burnt the cd and the problem persisted. I then suspected the ISO I had downloaded was corrupted. So I downloaded it again, burnt the cd but the problem still persisted. 2) I then suspected the second copy could have come from a cache and therefore may have the same problem as the first copy - so I checked the md5 signature but it lines up with the original from freebsd.org 3) I suspected the CD Rom drive - so I swapped it with one of our other Netserver boxes - problem still persisted. 4)I suspected a drive formatting problem - so I went back into the SCSI software, redid the raid drives and reformatted them - problem still persisted. 5) I suspected another hardware problem - so I pulled out FreeBSD 4.9 to see if that would install - and it did install without any errors. That sort of discounts there being any hardware problems. It points to something specific to freebsd 5.3. So this is where I have got to - FreeBSD 4.9 will install without errors but 5.3 will not install. I suspect the problem has to do with the initial setting up of the file structure - 5.3 is doing this in about one second whereas 4.9 takes closer to a minute to do this. Any thoughts or suggestion? I believe FreeBSD 5.3 does support using UFS 1 in the install, just check the option in the disklabel program, but if the partitioning also fails then that may not be the problem. Lino Webzone ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Hi, Tried setting the partitions to UFS1 - FreeBSD 5.3 then takes closer to a minute to setup the partitions just like 4.9 - but still get the same error message when it goes to copy the files. Thanks but did not work. Lino ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: buildworld via ssh
I did a 'make -DNOCLEAN buildworld 21 blah.txt ' and it didnt work as I would have expected. It spaced it out when I looked at the processes like this make -DNOCLEAN buildworld 2 1 blah.txt So, it tried to also tried to make 2 and failed and wrote the output to a file named 1 A redirect like this works on BSDi, not sure why it didn't in this case on FreeBSD5.2 Am I doing something wrong? BTW i now have this # ll /usr/obj/usr/src/usr.sbin/zzz total 2 -rw-r--r-- 1 root wheel 1076 Dec 23 07:34 zzz.8.gz TIA -Chris - Original Message - From: Giorgos Keramidas [EMAIL PROTECTED] To: lists [EMAIL PROTECTED] Cc: freebsd-questions@freebsd.org Sent: Wednesday, December 22, 2004 7:56 PM Subject: Re: buildworld via ssh On 2004-12-22 19:47, lists [EMAIL PROTECTED] wrote: I am doing a buildworld(Rel5.2) via ssh to a remote location. I detached the process from my session, but I failed to pipe the output to a logfile. Long story short, my session was terminated and I am not sure if the process completed correctly or not. Is there any way to find out if the build was sucessful? If you don't mind wasting a few cycles, you can restart the build with -DNOCLEAN and wait a bit. If the build was interrupted because of the detach, it will resume building everything and finish a lot faster than a full buildworld. Having said that, one of the last things that get built is src/usr.sbin/zzz. You can check if /usr/obj/usr/src/usr.sbin/zzz/zzz exists. If it does, you can probably assume the build finished successfully. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: eject DAT tape via command?
Try: mt -f /dev/tape rewoffl Regards, Matthias F. Brandstetter wrote: Hi all, is it possible to eject a DAT tape via a command from CLI? eject does not seem to work :( Greets and TIA, Matthias ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Sed Help.....
Rod, Take a look at what the shell replacement is actually doing. If you were to write the line manually it would look like this: sed -e 's/\/usr\X11R6\/bin\/xdm/\/usr\/local\/bin\/kdm/g' ... Right? But the shell doesn't escape the path separators (slashes). You need to escape them yourself in the variable assignments. Like this, KDMLINE='\/usr\/local\/bin\/kdm' c And if there is only one occurrence per line, then you don't need the 'g' modifier. Hope that helps. Alex On Nov 10, 2004, at 9:43 AM, Rod Person wrote: I trying to write a script that will make it easier for a friend that I finally talked into trying Freebsd setup a desktop. This part of the script is suppose to change the line in the ttys file to allow kdm to start on boot. Here is the relavent code: KDMLINE=/usr/local/bin/kdm -nodaemon REPLACELINE=/usr/X11R6/bin/xdm -nodaemon sed -e s/$REPLACELINE/$KDMLINE/g /etc/test/ttys /etc/test/new Here is the error I'm getting: sed: 1: s//usr/X11R6/bin/xdm -n ...: bad flag in substitute command: 'X' I can't seem to figure this out and the only things I've found in searching is that sed had a problem with replacing strings over 4096 bytes, but I don't think this is the cause and all those post were years old. This is on FreeBSD 5.3. Rod ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: 5.3-release-i386-disc2.iso will not burn
Quoting jkcooke [EMAIL PROTECTED]: I have downloaded both of the 5.3 i386 isos and the miniinstall iso, disc1 and the miniinstall burn an image, disc 2 does not. I downloaded disc2 from two additional ftp sites with the same result. Is there a problem with disc2 ?. Jim at [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] You will need to provide more details. What error do you receive? What OS are you using? What software are you using? What hardware are you using? Sent using IMP under Horde - http://www.horde.org/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Emergency, cannot boot 4.10
Greetings, My 4.10 server is halting during the boot process because the kern.maxfiles entry in /etc/sysctl.conf is corrupted or wrong (though I have not changed it in some time). What I want to do is simply remove that entry from the sysctl.conf file, but I cannot even get into the system. I have a presentation later today based on some of the work I've done on that server -- if someone could clue me in on how to best get in to fix that file, I'd really appreciate it. I've tried the Brazilian LiveCD ISO, without success -- the keyboard mappings are for Portugeuse, not English. -- Stephen. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
dns-more than I ever wanted to know...
I've come across a ton of DNS tutorials on the web. Everything I've found so far is very lengthy. I need to setup a simple small office/home office network with DNS so that it resolves my inside network among the machines and hides it from the greater internet. I'm open to suggestions of a quick fix that won't take me a day and half reading full time. Thanks, Alex - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: dns-more than I ever wanted to know...
Steve,
Thanks a bunch! This is a great help. I'm not clear on the use of
allow-transfer. Reading the manpage for named.conf(5), I'm tempted to
leave it out. But, I'm not fully understanding the use of it. The
manpage says,
allow-transfer
Specifies which hosts are allowed to receive zone transfers from the
server. allow-transfer may also be specified in the zone statement,
in which case it overrides the options allow-transfer statement. If
not specified, the default is to allow transfers from all hosts.
I'm taking which hosts are allowed to receive zone transfers from the
server to mean hosts on my local network and the server is the DNS
server I'm setting up now. I don't want my zone information going out
to the internet (my isp), but I do want to let it in (of course). I
failed to mention that the machine acting as DNS inside my network
is/will be configured as a gateway. (QUESTION: I have vr0 and vr1. Does
it matter which interface I face toward the internet?) Perhaps this
doesn't matter as long as the DNS server is pointing to/resolving for
the inside (local) network interface (10.0.0.1). Let me make this more
clear. I have the following (typical?) small office setup:
-
ISP--- monopolists
+
|
|
|
(vr1) --- DHCP'd from ISP
--
FreeBSD 4.10 gateway
--
(vr0) --- 10.0.0.1
| DNS,ipfw,natd,httpd
|
|
{... local network ...}
So, all this just to clarify allow-transfer. :) My questions go deeper
than DNS. But, I'm trying to figure out the rest myself.
Thanks,
Alex
On Sep 24, 2004, at 9:57 AM, Steve Bertrand wrote:
snip
... and then add a record for a domain.
zone domain.com {
type master;
file domain.com.zone;
allow-transfer { 192.168.0.3; }; // This is your secondary DNS
allow-update { none; };
};
snip
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Alexander Sendzimir (owner)802 863 5502
MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: dns-more than I ever wanted to know...
Thanks to everyone who responded to this. I'm working on synthesizing everything. I'm one step closer now. Alex On Sep 24, 2004, at 9:14 AM, mailing lists at MacTutor wrote: I've come across a ton of DNS tutorials on the web. Everything I've found so far is very lengthy. I need to setup a simple small office/home office network with DNS so that it resolves my inside network among the machines and hides it from the greater internet. I'm open to suggestions of a quick fix that won't take me a day and half reading full time. Thanks, Alex - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Ssh connection
Are you running a firewall? On Sep 19, 2004, at 8:28 AM, Pota Kalima wrote: I am having trouble connecting TO my base machine which runs release 5.2.1 from 2 other machines (Mac OS X, and Windoz). I can connect to the OS X machine FROM this base machine as well as from the windoz machine. When attempting connection from OS X I get the following message: Yes Master? ssh -v [EMAIL PROTECTED] OpenSSH_3.6.1p1+CAN-2004-0175, SSH protocols 1.5/2.0, OpenSSL 0x0090702f debug1: Reading configuration data /etc/ssh_config debug1: Rhosts Authentication disabled, originating port will not be trusted. debug1: Connecting to 192.168.0.5 [192.168.0.5] port 22. debug1: connect to address 192.168.0.5 port 22: Permission denied ssh: connect to host 192.168.0.5 port 22: Permission denied I have checked to see that sshd is running at start-up. When I ps -aux I see that /usr/bin/sshd is one of the processes running. The ssh_config file on both the base machine and Mac OS X appear identical to me. Grateful for any help. Pota ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: how to make an executable run as another user
Rich, Someone else had responded to your post explaining that setuid does not work with shell scripts. Nor does it work with any interpreted input. The following article might help explain this (and others): http://www.evolt.org/article/UNIX_File_Permissions_and_Setuid_Part_2/ 18/263/ QUOTE: In most UNIX kernels there exists what is called a 'race condition' when executing scripts. Scripts are pieces of code which are interpreted by, strangely enough, interpreters. Common examples of interpreters are perl, sed, and awk. So when you have in your perl code #!/usr/local/bin/perl it tells the operating system to start executing the perl interpreter with the current script as input. Between the time that the perl interpreter starts executing and the time that it reads in your script the 'race condition' exists. At this time, a mischievous person could 'win the race' and be able to replace your script with another. And if your script is running as setuid, that person's script would run as your user! So their script could do anything that you could do from the command line. As a result, most UNIX kernels will disable users from running scripts as setuid. The most common way around this is to create a wrapper program around your script. A wrapper, in this context, is a small program, possibly written in C, that when executed will simply run your script. The 'race condition' does not exist for real executables and so you won't be thwarted by the kernel itself. I'm not exceptionally well versed in this stuff. But I think this is what you're after. Alex On Sep 17, 2004, at 3:50 PM, Richard Bradley wrote: Um. I feel silly asking this. But I can't work it out. I want a shell script to run as another user. I always thought this was easy to do with the setuid bit, but never tried it before. I read man chmod and found this: . 4000(the setuid bit). Executable files with this bit set will run with effective uid set to the uid of the file owner. . s The set-user-ID-on-execution and set-group-ID-on-execution bits. And off I went. I wrote a shell script to output the current uid. I chown'ed it to another user. I chmod +sed it. I ran it. It didn't work. - rtb27# cat test #! /bin/sh whoami rtb27# ll test -rwsr-sr-x 1 rich wheel 20 Sep 17 19:34 test rtb27# ./test root Um. Help? Rich ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Apache Installation
This is valid advice. However, since you say your are new to FreeBSD (and, perhaps, *nix?), I would break the process down like this. Use a terminal (xterm) to do run these commands. Otherwise, excuse the simplicity. I'll assume you're using sudo for root privilege. 1. It's easiest to use the ports tree (/usr/ports). Apache is in the www directory under /usr/ports. So, go there. cd /usr/ports/www There are a few versions you could install when it comes to Apache. You can see them with ls -d apache* 'apache13' is the most straight forward to start with. So, go into this directory, cd apache13 2. Fetch, extract, and compile. Check the Makefile for things you can modify to your needs. more Makefile Look for defined(...) or !defined(...). For example, .if (!defined(WITHOUT_APACHE_EXPAT)... In the case of Apache 1.3.x you can specify -DWITHOUT_APACHE_EXPAT. If you're unsure about this, then forget about it. Just compile and install. Or extract, sudo make extract which will usually tell you what you can modify on the command line. Otherwise, sudo make You can do the make and install in one line. sudo make install If your were to exclude expat support, then you would use this sudo make -DWITHOUT_APACHE_EXPAT sudo make install or sudo make -DWITHOUT_APACHE_EXPAT install You can remove the installation and start over by running sudo make deinstall and sudo rm -rf ./work where ./ assumes you are already in /usr/ports/www/apache13/. This gets rid of the work directory that 'make extract' created. You don't have to do it like this all the time. But once you're familiar with the basic process, you will discover your own refined process. Good luck, Alex On Sep 17, 2004, at 3:09 PM, Hugo Silva wrote: Hey, It's very simple! Assuming you have an updated ports tree, just do this as root: cd /usr/ports/www/apache13 make install clean Hey I am a novice at FreeBSD! I want to install apache v 1.3.28 in my FreeBSD 5.21. Can u guys help me? How to proceed? -macuser ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- www.6s-gaming.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: what are the pros and cons of running in single user?
jan, I agree with what you say about tuning the startup scripts. In my relatively limited experience as a system admin., I think this is the 'better' thing to do. Perhaps you would agree. My next step is to understand the kernel security levels and what each one entails. But, that I can, hopefully, look up. thanks, alex On Sep 16, 2004, at 9:56 AM, Jan Grant wrote: On Thu, 16 Sep 2004, Ed Budd wrote: mailing lists at MacTutor wrote: I have a machine running 4.10-STABLE that will be a dedicated gateway with a router/firewall combo and web server plus mysql server (maybe). What would be the pros and cons of running this system single user? Processes that run under their own uid, would they be able to run? Just curious. Any extra thoughts welcome. er...doesn't single user mode mean no networking? My understanding is that this is really only for maintenance (ie. make installworld, etc.), not regular operations. Perhaps you meant something else or I just haven't had enough caffeine yet... snip So to answer the question: you can certainly tune the scripts and services available that launch you into multi-user mode to get a minimum profile on the machine. However if you modify rc to the extent that it turns on everything you need in order to set up bridging, run a few daemons etc then you're effectively duplicating the multiuser startup anyway. jan * modulo securelevel changes which can only be reverted via reboot. -- jan grant, ILRT, University of Bristol. http://www.ilrt.bris.ac.uk/ Tel +44(0)117 9287088 Fax +44 (0)117 9287112 http://ioctl.org/jan/ The Java disclaimer: values of 'anywhere' may vary between regions. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: what are the pros and cons of running in single user?
Now might be a good time for me to point out that I'm learning some subtle and useful things about system startup that is helping me think about how I might customize system start up if I go that route. Thanks to everyone who's responding. alex On Sep 16, 2004, at 1:31 PM, Sergey Zaharchenko wrote: On Thu, Sep 16, 2004 at 06:01:13PM +0300, Giorgos Keramidas probably wrote: On 2004-09-16 09:11, Ed Budd [EMAIL PROTECTED] wrote: er...doesn't single user mode mean no networking? My understanding is that this is really only for maintenance (ie. make installworld, etc.), Well, you can always bring up the network interfaces manually ;-) Actually, that's what /etc/netstart is for. -- DoubleF Carmel, New York, has an ordinance forbidding men to wear coats and trousers that don't match. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: AudioCD not playing
Q: Are you compiling for the correct processor in your kernel configuration? For example, if you have a i586 you don't want to compile for an i686. abs On Sep 15, 2004, at 7:14 AM, Konstantin wrote: Hello! When I try to play AudioCD with cdplay 0.92 I receive the following message: #cdplay -d /dev/acd0 /* cdplay interface */ acd0: unknow transfer phase acd0: FAILURE - ATAPI_IDENTIFY no interrupt acd0: timeout sending command = a1 Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x6a fault code = supervisor read, page not present instruction pointer = 0x8: 0xc04c5596 stack pointer = 0x10: 0xcdcbb50 frame pointer = 0x10: 0xcdcbb50 code segment= base 0x0, limit 0xf type = DPL 0, pres 1, def 32 1 gran 1 0x1b processor eflags= interrupt enabled, resume, 10PL = 0 current process = 36 (swi7: task queue) trap number = 12 panic: page fault syncing disks .. etc After this computer rebooting. How can I undestend this? How can I listen AudioCD? [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
what are the pros and cons of running in single user?
I have a machine running 4.10-STABLE that will be a dedicated gateway with a router/firewall combo and web server plus mysql server (maybe). What would be the pros and cons of running this system single user? Processes that run under their own uid, would they be able to run? Just curious. Any extra thoughts welcome. Thanks, Alex - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Burning OS X .dmg disk images...
Does anyone know of how to burn Mac OS X .dmg images under FBSD? I have .dmg files from an OSX system (10.3.x) that I want to convert to ISO images (if necessary) for burning to cd/dvd. I can't find anything in the list archives about this. Thanks, Alex - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Update Databases from Webserver
Peter, Thanks for your response. In response to You don't say why you'd want to do this. If you want to allow customers of an e-commerce site to avoid repeating their details whenever they want to buy, perhaps consider basing the payment backend around PayPal. The need for users to authenticate in order to make a payment hasn't brought e-Bay to its knees. Pretty much the end result would be Amazon like with the customer being able to choose a previously used card. Is this possible without storing credit card numbers or using paypal? Anyway thanks everyone for their replies thus far any input helps. -Troy -Original message- From: Peter Risdon [EMAIL PROTECTED] Date: Tue, 7 Sep 2004 07:18:22 -0600 To: FreeBSD Mail Lists [EMAIL PROTECTED] Subject: Re: Update Databases from Webserver I'm afraid the awful truth is that if you need to ask this question here, you shouldn't be storing other people's credit card details on your server. If you want to use the numbers to confirm identity or something, you could store an encrypted version of the number and use that for comparison. But to start storing plaintext CC details on your system without being deeply expert in all the security issues raised would be very dangerous. And the high degree of monitoring needed for such a system would make it uneconomical without commensurately high volumes of business. Peter. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Update Databases from Webserver
Hello, I would like to see how other people are updating backend databases (postgresql on FreeBSD, internal network) from a webserver (apache,php on FreeBSD, dmz network) through a firewall. Pretty much what I am trying to learn is how to take private information (credit card numbers, etc.) and write it to a backend database without leaving any huge holes for hacking. Should this be done or am I barking up the wrong tree, should there be an intermediary step? I have been trying to find information books/web that gives a real nuts and bolts way of trying to do this stuff and am not having a lot of luck. Any pointers books or sites would be appreciated. Thanks for your time. Troy ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Update Databases from Webserver
Richard, Thanks for your reply. I thought there was something terribly wrong with that logic. So I thought I would ask in this mail list since people have been great here in the past about everything else I wanted to know. Are there any security lists in relation to ecommerce that you would recommend? So I can stop annoying everyone else here. I just don't want to make anymore mistakes than I have to starting down this road. Thanks again, Troy -Original message- From: Richard Lynch [EMAIL PROTECTED] Date: Mon, 6 Sep 2004 17:22:54 -0600 To: FreeBSD Mail Lists [EMAIL PROTECTED] Subject: Re: Update Databases from Webserver FreeBSD Mail Lists wrote: I would like to see how other people are updating backend databases (postgresql on FreeBSD, internal network) from a webserver (apache,php on FreeBSD, dmz network) through a firewall. Pretty much what I am trying to learn is how to take private information (credit card numbers, etc.) and write it to a backend database without leaving any huge holes for hacking. Should this be done or am I barking up the wrong tree, should there be an intermediary step? I have been trying to find information books/web that gives a real nuts and bolts way of trying to do this stuff and am not having a lot of luck. Any pointers books or sites would be appreciated. The most common answer is Don't do that 99.9% of e-commerce sites have absolutely no business storing credit card numbers on any hardware they own. They should simply run the transaction through their Merchant Account (bank) computer using a secure connection, and the software provided by their Merchant Account (bank). If you need a recurring charge, you can run your charge through the Merchant Account as a recurring charge (whoda thunk it?) and the Merchant Account software will give you back a unique transaction # to refer to if you ever need to cancel THAT particular recurring charge. You would store only that transaction number, and *NOT* the customer's credit card charge. In the unlikely event that you really *ARE* in the 0.01% of servers that needs to store credit card info... Well, it's kinda scare that you're asking here, rather than a security mailing list, but here is *ONE* solution that may be worth considering. I am posting to the list so that others can tell us just how inadequate this is. You should also be aware that by no means am I an expert -- I am simply describing what has been described to me as the right way (tm) to do this. My information may be out of date. (It's been awhile.) I chose to let the Merchant Account (bank) worry about keeping credit card numbers safe, rather than do all of the following. You probably should too. Depending on the current interpretation of existing laws, you, the web developer, may or may not be held responsible for *ANY* damages that result from your work -- no matter how faultless you may be in reality. We're talking legalities here, not reality. Did I mention that you really shouldn't be doing this at all? Good. First, your servers *MUST* be in a physically secure location, with access limited to *ONLY* people you really really really trust. No software in the world will do you any damn good if a not-so-honest person can waltz in and play around with the hardware! If you *CANNOT* guarantee that the hardware in question can *ONLY* be accessed by trusted individuals, than you should stop reading right here and now. This rules out shared servers, co-location (IMHO), and almost all corporate servers, which need too many people of limited trust value to be able to access them to keep them up. Next, you need a SECOND server which will be used to hold credit card info, and that second computer will *NOT* be connected to the Internet (directly) You put an extra NIC in your web-server, and run a cross-over cable to the SECOND server, the extra one, which will hold the credit card numbers. You limit ethernet access to that second computer which will hold credit cards so that *ONLY* the one computer connected to it via the cross-over cable will be allowed to connect. The extra NIC in the web-server and the SECOND server are both on a separate sub-net from everything else in your system. IE, the only interface cards in your entire organization that utilize the IP address space in question are those two (2) NICs. You then make 100% sure that you simply cannot get to that SECOND box from anywhere else in the organization. What is quite well-documented is that you use SSL (and ONLY SSL) to allow the customer to get their credit card info to your web-server. You then write some routines to get the credit card numbers from your web-server through your second NIC to the second server. These routines get the fine-tooth code-review treatment, by multiple people. They should be mind-numbingly simple, clearly documented
Re: Enabling Serial Console
Marc, Try putting either '-h' or '-D' in /boot.config. I found '-D' worked for me. Personally, I'm wondering if I can put together a serial multiplexer to USB device and write a C or Perl script that will tee the output to respective files that I can 'tail -f' on. For a more thorough treatment in a non-intuitive place checkout the Handbook: http://www.freebsd.org/doc/handbook/serialconsole-setup.html Alex On Sep 3, 2004, at 10:18 AM, Marc G. Fournier wrote: Wish to enable the serial console on my servers so that I can remotely view a reboot when it crashes ... I know to plug the serial cable into COM1 ... and I know I have to add something to /boot.config, but, if I want to set it so that even if the keyboard is plugged in, the serial console works, what do I need to add? I always thought -P, but reading the man page, I'm not so sure :( Also ... I'm going to cross-connect the servers for now ... ServerA/COM1-ServerB/COM2, ServerB/COM1-ServerC/COM2, etc ... what happens if all machines come up at once? I see nothing in the man page about 'detecting serial', so I'm assuming that the serial console will still work, even if there is nothing at the other end 'listening' yet? Thanks ... Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: parts of ports
Checkout /usr/ports/misc/porteasy It might be just what you're looking for. Alex On Sep 1, 2004, at 9:32 AM, messmate wrote: Hi, is there a way to install only parts of the ports tree to set them up ? The ports tree takes 237M up :( Have only 600M hd space available included swap. The purpose is to setup a firewall/router/proxy VERY secured :) Thanks in advance for your help. mess-mate ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Hardware Recommendations (UK)
I recently built a system using a VIA EPIA PD1 motherboard with a VIA C3 (1GHz) processor on it. I've successfully compiled the entire system (buildworld and buildkernel) for 4.10-STABLE and a number of ports. Everything appears to work fine. If you want to build your own kernel, be aware that /etc/make.conf must contain CPUTYPE=i586 while the kernel configuration file must/can contain cpuI686_CPU. This appears to be the only way of getting this to compile as a Pentium class cpu. The whole system cost me $514.10(US+tax) and consisted of 1. case (Morex 668S w/200W p.s.) 2. motherboard (VIA EPIA PD1) 3. 512MB memory module (PC2100/DDR266) 4. 80G Seagate Barracuda hard disk (ST380011A) I was pretty easy to put together and configure. So far, I'm very happy with it. I'll be setting it up as a firewall/router/webserver when I get around to it (firewalling is another issue I'm not prepared for). (At least I don't feel like I am.) I've heard these systems are popular in Europe for low price and low power consumption. You can check out the parts I got at http://www.logicsupply.com/ . HTH, Alex On Sep 1, 2004, at 11:24 AM, Graham Bentley wrote: Hi Can anyone recommend a good solid mobo for building a little web server ? Is it worth paying the extra for Intel manufactured ? Thanks ! Custom PC North West Open Source Solutions http://www.cpcnw.co.uk ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
netstat -m 'cannot allocate memory'
Hello, On 2 of my systems I get the following error while doing netstat -m: $ netstat -m netstat: sysctl: retrieving mbstat: Cannot allocate memory This is a PIV 2ghz, with 1,5 GB of memory I couldn't find anything about this on the internet.. anyone that has any idea whats wrong here ? Thanks ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: netstat -m 'cannot allocate memory'
/var/log/messages gives: Jul 29 01:55:56 server /kernel: All mbuf clusters exhausted, please see tuning(7). So I have set in /boot/loader.conf kern.ipc.nmbclusters=32768 And rebooted the machine but stilll got the same message with netstat -m dmesg is not giving any weird messages top: last pid: 5178; load averages: 0.22, 0.12, 0.09 up 0+00:34:27 10:35:01 100 processes: 4 running, 96 sleeping CPU states: 11.3% user, 0.0% nice, 2.7% system, 0.0% interrupt, 86.0% idle Mem: 131M Active, 444M Inact, 180M Wired, 23M Cache, 163M Buf, 729M Free Swap: 3072M Total, 3072M Free # vmstat procs memory pagedisks faults cpu r b w avmfre flt re pi po fr sr ad0 ad2 in sy cs us sy id 2 6 0 238980 767852 439 1 1 0 356 0 0 0 359 3718 168 4 3 93 Steve wrote: what does dmesg, tail /var/log/messages, vmstat, and top tell you -- Steve Rieger ICQ # 5956607 yahoo IM riegersteve - Original Message - From: lists [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, July 29, 2004 1:08 AM Subject: netstat -m 'cannot allocate memory' Hello, On 2 of my systems I get the following error while doing netstat -m: $ netstat -m netstat: sysctl: retrieving mbstat: Cannot allocate memory This is a PIV 2ghz, with 1,5 GB of memory I couldn't find anything about this on the internet.. anyone that has any idea whats wrong here ? Thanks ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: netstat -m 'cannot allocate memory'
Is it possible to rebuild these without doing a complete make world and if so without rebooting ? Dan Nelson wrote: In the last episode (Jul 29), lists said: Hello, On 2 of my systems I get the following error while doing netstat -m: $ netstat -m netstat: sysctl: retrieving mbstat: Cannot allocate memory This is a PIV 2ghz, with 1,5 GB of memory That means you have rebuilt your kernel and now kernel and world are out of sync. At minimum, rebuild libkvm and netstat. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ipfw count rules to count traffic to virtual ip's
Anyone ? Hello, I'm trying to setup ipfw to count traffic to each ip on the server (one interface with multiple aliased ip's) now it seems that the count rules are about the same for each ip while this isn't the truth.. 7 7715117 6712750640 count ip from any to any via fxp0 8 2953770 167284959 count ip from any to any in recv fxp0 9 4761341 6545462313 count ip from any to any out xmit fxp0 00010 7707303 6712093431 count tcp from any to any via 1.1.1.1 00011 2948103 166773748 count tcp from any to any in recv 1.1.1.1 00012 4759198 6545319411 count tcp from any to any out xmit 1.1.1.1 00016 7707299 6712092983 count tcp from any to any via 2.2.2.2 00017 2948101 166773668 count tcp from any to any in recv 2.2.2.2 00018 4759195 6545319003 count tcp from any to any out xmit 2.2.2.2 00022 2842887 145092334 count tcp from any to any 80 via fxp0 As you can see the traffic for ip 1.1.1.1 and ip 2.2.2.2 are about the same while ip 2.2.2.2 is actually doing nothing (all ports are blocked cause its not active yet) What is going wrong here ? how come ipfw counts the same traffic for each ip.. Also rule 22 from any to any 80 shows only a few hundred megs traffic while 95% of all the traffic on the server is http traffic from website's so this should be atleast around the 5GB of traffic instead of a few hundred megs.. Any idea's ?? Thanks m. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ipfw count rules to count traffic to virtual ip's
Well : This won't work: ipfw add 00010 count tcp from any to any via 1.1.1.1 ipfw add 00011 count tcp from any to any in recv 1.1.1.1 ipfw add 00012 count tcp from any to any out xmit 1.1.1.1 ipfw add 00016 count tcp from any to any via 2.2.2.2 ipfw add 00017 count tcp from any to any in recv 2.2.2.2 ipfw add 00018 count tcp from any to any out xmit 2.2.2.2 This works: ipfw add 00022 count tcp from 1.1.1.1 to any ipfw add 00023 count tcp from any to 1.1.1.1 ipfw add 00024 count tcp from 2.2.2.2 to any ipfw add 00025 count tcp from any to 2.2.2.2 Is ipfw unable to count ip traffic on that way ? or is it just unlogical how i am doing it.. Steve Bertrand wrote: Anyone ? Hello, I'm trying to setup ipfw to count traffic to each ip on the server (one interface with multiple aliased ip's) now it seems that the count rules are about the same for each ip while this isn't the truth.. Are these the exact rules, or does # ipfw show mix them up a bit? For instance: # ipfw add 1 count tcp from any to 1.1.1.1 *should* count all tcp traffic destined for 1.1.1.1, and likewise, # ipfw add 11000 count tcp from 1.1.1.1 to any *should* count all tcp traffic from the IP. If ipfw show is conveluting the rules a bit, you might start by sending in a small sample of your ruleset. Just a thought... Steve 7 7715117 6712750640 count ip from any to any via fxp0 8 2953770 167284959 count ip from any to any in recv fxp0 9 4761341 6545462313 count ip from any to any out xmit fxp0 00010 7707303 6712093431 count tcp from any to any via 1.1.1.1 00011 2948103 166773748 count tcp from any to any in recv 1.1.1.1 00012 4759198 6545319411 count tcp from any to any out xmit 1.1.1.1 00016 7707299 6712092983 count tcp from any to any via 2.2.2.2 00017 2948101 166773668 count tcp from any to any in recv 2.2.2.2 00018 4759195 6545319003 count tcp from any to any out xmit 2.2.2.2 00022 2842887 145092334 count tcp from any to any 80 via fxp0 As you can see the traffic for ip 1.1.1.1 and ip 2.2.2.2 are about the same while ip 2.2.2.2 is actually doing nothing (all ports are blocked cause its not active yet) What is going wrong here ? how come ipfw counts the same traffic for each ip.. Also rule 22 from any to any 80 shows only a few hundred megs traffic while 95% of all the traffic on the server is http traffic from website's so this should be atleast around the 5GB of traffic instead of a few hundred megs.. Any idea's ?? Thanks m. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ipfw count rules to count traffic to virtual ip's
Ok then I get it.. I thought ipfw was also able to have a ip address there instead of only a interface. Thanks Steve Bertrand wrote: Well : This won't work: ipfw add 00010 count tcp from any to any via 1.1.1.1 ipfw add 00011 count tcp from any to any in recv 1.1.1.1 ipfw add 00012 count tcp from any to any out xmit 1.1.1.1 ipfw add 00016 count tcp from any to any via 2.2.2.2 ipfw add 00017 count tcp from any to any in recv 2.2.2.2 ipfw add 00018 count tcp from any to any out xmit 2.2.2.2 This works: ipfw add 00022 count tcp from 1.1.1.1 to any ipfw add 00023 count tcp from any to 1.1.1.1 ipfw add 00024 count tcp from 2.2.2.2 to any ipfw add 00025 count tcp from any to 2.2.2.2 Is ipfw unable to count ip traffic on that way ? or is it just unlogical how i am doing it.. It didn't seem logical to me. Anything after via, xmit, or recv should be an interface name (or alias) as this is what ipfw expects to see. The actual addressing should be located within the to/from portion of the rule. You can even go farther and count port usage as well. Say for instance, you want to get an idea of how much http(s) traffic there is generated on 1.1.1.1 : ipfw add 00100 count tcp from any to 1.1.1.1 80,443 Regards, STeve Steve Bertrand wrote: Anyone ? Hello, I'm trying to setup ipfw to count traffic to each ip on the server (one interface with multiple aliased ip's) now it seems that the count rules are about the same for each ip while this isn't the truth.. Are these the exact rules, or does # ipfw show mix them up a bit? For instance: # ipfw add 1 count tcp from any to 1.1.1.1 *should* count all tcp traffic destined for 1.1.1.1, and likewise, # ipfw add 11000 count tcp from 1.1.1.1 to any *should* count all tcp traffic from the IP. If ipfw show is conveluting the rules a bit, you might start by sending in a small sample of your ruleset. Just a thought... Steve 7 7715117 6712750640 count ip from any to any via fxp0 8 2953770 167284959 count ip from any to any in recv fxp0 9 4761341 6545462313 count ip from any to any out xmit fxp0 00010 7707303 6712093431 count tcp from any to any via 1.1.1.1 00011 2948103 166773748 count tcp from any to any in recv 1.1.1.1 00012 4759198 6545319411 count tcp from any to any out xmit 1.1.1.1 00016 7707299 6712092983 count tcp from any to any via 2.2.2.2 00017 2948101 166773668 count tcp from any to any in recv 2.2.2.2 00018 4759195 6545319003 count tcp from any to any out xmit 2.2.2.2 00022 2842887 145092334 count tcp from any to any 80 via fxp0 As you can see the traffic for ip 1.1.1.1 and ip 2.2.2.2 are about the same while ip 2.2.2.2 is actually doing nothing (all ports are blocked cause its not active yet) What is going wrong here ? how come ipfw counts the same traffic for each ip.. Also rule 22 from any to any 80 shows only a few hundred megs traffic while 95% of all the traffic on the server is http traffic from website's so this should be atleast around the 5GB of traffic instead of a few hundred megs.. Any idea's ?? Thanks m. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ipfw count rules to count traffic to virtual ip's
Yea thats the part I read from the manual and tried but got these out
put from..
with the rule count tcp from 1.1.1.1 to any it also works so no big
deal there I was just wondering if i did something wrong or not..
If anyone has got a answer please let us know.
Thanks.
Steve Bertrand wrote:
Ok then I get it..
I thought ipfw was also able to have a ip address there instead of only
a interface.
Thanks
Nope, I was wrong...
# man ipfw [snipped]
recv | xmit | via {ifX | if* | ipno | any}
Matches packets received, transmitted or going through, respec-
tively, the interface specified by exact name (ifX), by device
name (if*), by IP address, or through some interface.
I just found the latter rules to be a little more clear and precise.
Perhaps someone else can shed light on the failure, but it's just nice to
know that you're up and achieving the results you desired ;)
Steve
Steve Bertrand wrote:
Well :
This won't work:
ipfw add 00010 count tcp from any to any via 1.1.1.1
ipfw add 00011 count tcp from any to any in recv 1.1.1.1
ipfw add 00012 count tcp from any to any out xmit 1.1.1.1
ipfw add 00016 count tcp from any to any via 2.2.2.2
ipfw add 00017 count tcp from any to any in recv 2.2.2.2
ipfw add 00018 count tcp from any to any out xmit 2.2.2.2
This works:
ipfw add 00022 count tcp from 1.1.1.1 to any
ipfw add 00023 count tcp from any to 1.1.1.1
ipfw add 00024 count tcp from 2.2.2.2 to any
ipfw add 00025 count tcp from any to 2.2.2.2
Is ipfw unable to count ip traffic on that way ? or is it just unlogical
how i am doing it..
It didn't seem logical to me. Anything after via, xmit, or recv should be
an interface name (or alias) as this is what ipfw expects to see. The
actual addressing should be located within the to/from portion of the
rule.
You can even go farther and count port usage as well. Say for instance,
you want to get an idea of how much http(s) traffic there is generated on
1.1.1.1 :
ipfw add 00100 count tcp from any to 1.1.1.1 80,443
Regards,
STeve
Steve Bertrand wrote:
Anyone ?
Hello,
I'm trying to setup ipfw to count traffic to each ip on the server
(one
interface with multiple aliased ip's)
now it seems that the count rules are about the same for each ip
while
this isn't the truth..
Are these the exact rules, or does # ipfw show mix them up a bit?
For instance:
# ipfw add 1 count tcp from any to 1.1.1.1
*should* count all tcp traffic destined for 1.1.1.1, and likewise,
# ipfw add 11000 count tcp from 1.1.1.1 to any
*should* count all tcp traffic from the IP.
If ipfw show is conveluting the rules a bit, you might start by sending
in
a small sample of your ruleset.
Just a thought...
Steve
7 7715117 6712750640 count ip from any to any via fxp0
8 2953770 167284959 count ip from any to any in recv fxp0
9 4761341 6545462313 count ip from any to any out xmit fxp0
00010 7707303 6712093431 count tcp from any to any via 1.1.1.1
00011 2948103 166773748 count tcp from any to any in recv 1.1.1.1
00012 4759198 6545319411 count tcp from any to any out xmit 1.1.1.1
00016 7707299 6712092983 count tcp from any to any via 2.2.2.2
00017 2948101 166773668 count tcp from any to any in recv 2.2.2.2
00018 4759195 6545319003 count tcp from any to any out xmit 2.2.2.2
00022 2842887 145092334 count tcp from any to any 80 via fxp0
As you can see the traffic for ip 1.1.1.1 and ip 2.2.2.2 are about
the
same while ip 2.2.2.2 is actually doing nothing (all ports are
blocked
cause its not active yet)
What is going wrong here ? how come ipfw counts the same traffic for
each ip..
Also rule 22 from any to any 80 shows only a few hundred megs
traffic
while 95% of all the traffic on the server is http traffic from
website's so this should be atleast around the 5GB of traffic instead
of
a few hundred megs..
Any idea's ??
Thanks
m.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]
___
[EMAIL
ipfw count rules to count traffic to virtual ip's
Hello, I'm trying to setup ipfw to count traffic to each ip on the server (one interface with multiple aliased ip's) now it seems that the count rules are about the same for each ip while this isn't the truth.. 7 7715117 6712750640 count ip from any to any via fxp0 8 2953770 167284959 count ip from any to any in recv fxp0 9 4761341 6545462313 count ip from any to any out xmit fxp0 00010 7707303 6712093431 count tcp from any to any via 1.1.1.1 00011 2948103 166773748 count tcp from any to any in recv 1.1.1.1 00012 4759198 6545319411 count tcp from any to any out xmit 1.1.1.1 00016 7707299 6712092983 count tcp from any to any via 2.2.2.2 00017 2948101 166773668 count tcp from any to any in recv 2.2.2.2 00018 4759195 6545319003 count tcp from any to any out xmit 2.2.2.2 00022 2842887 145092334 count tcp from any to any 80 via fxp0 As you can see the traffic for ip 1.1.1.1 and ip 2.2.2.2 are about the same while ip 2.2.2.2 is actually doing nothing (all ports are blocked cause its not active yet) What is going wrong here ? how come ipfw counts the same traffic for each ip.. Also rule 22 from any to any 80 shows only a few hundred megs traffic while 95% of all the traffic on the server is http traffic from website's so this should be atleast around the 5GB of traffic instead of a few hundred megs.. Any idea's ?? Thanks m. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Swap size
Hello all, What swap size should i use having 768 Mb of memory? I've heard something about preformance degradation if swap size is bellow 2x of ram... Thanks, Alexander. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Which version of freebsd..
Currently were going to reinstall all servers we have from redhat 9 to freebsd because redhat 9 is EOL... But after reading a few mails here that 4.9 is most likely not supported for a long time.. what version should we take then? We will be using it for multiple servers (mail, database, app, web etc..) ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FTP Program
Gerard Seibert wrote: I am currently using WS_FTP Pro version 8.03 on my WinXP Pro machine. I was wondering if anyone could recommend a similar type FTP program for FreeBSD. I really like the ease of use, scheduling capabilities, etc. of WS_FTP and would therefore like to find a similar product for use on FreeBSD. Thanks! Gerard Seibert [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Hello Gerard, I have been using axyftp for a while with no problems. Port: axyftp-0.5.1_1 Path: /usr/ports/ftp/axyftp/ Info: X Window System FTP client, with WSftp-like UI Thanatos ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: anyone using vmware to run freebsd
David Bear wrote: i did a quick search of the web site and there was mention of using vmware to launch other os's from bsd, but is anyone using some other os to host vmware and then launch freebsd? separate question.. didn't know how to phrase search for this. ARe there any self contained freebsd cd's. Something like knoppix which launches and loads a complete working freebsd from cdrom? Hiya David, I ran VMWare 2 from Win2000 w/ FreeBSD 4.2 (yeah, this was a while ago). The only problem I ran into was the editor I was using was not releasing the perl scripts for 10 to 15 seconds after saving .. it had a known bug :(. I'm pretty sure I had apache, mod_perl, mysql and various other things running. Thanatos ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: anyone using vmware to run freebsd
lists wrote: David Bear wrote: i did a quick search of the web site and there was mention of using vmware to launch other os's from bsd, but is anyone using some other os to host vmware and then launch freebsd? separate question.. didn't know how to phrase search for this. ARe there any self contained freebsd cd's. Something like knoppix which launches and loads a complete working freebsd from cdrom? Hiya David, I ran VMWare 2 from Win2000 w/ FreeBSD 4.2 (yeah, this was a while ago). The only problem I ran into was the editor I was using was not releasing the perl scripts for 10 to 15 seconds after saving .. it had a known bug :(. I'm pretty sure I had apache, mod_perl, mysql and various other things running. Thanatos ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] I guess I should have specified that I was running the editor fromWindows and mounting FreeBSD using Samba. Thanatos ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Enabling USB ports for printing...
Well, on the good side, Warren, my firewall is now working. Even if defined open. A step at a time, right? I checked rc.conf and usb is already enabled. I thought I might have forgotten that. Checked the bios and usb is supported and engaged. Dmesg does not say anything about specified ports as lpt might. Just this usb0: OHCI version 1.0, legacy support usb0: SMM does not respond, resetting usb0: OHCI (generic) USB controller on ohci0 usb0: USB revision 1.0 Perhaps I have a misconfigured jumper on the motherboard? On Mar 23, 2004, at 7:29 PM, Warren Block wrote: On Tue, 23 Mar 2004 [EMAIL PROTECTED] wrote: % usbdevs -v Controller /dev/usb0: addr 1: self powered, config 1, OHCI root hub(0x), AMD(0x), rev 1.00 port 1 disabled port 2 disabled port 3 disabled port 4 disabled Disabled... Is USB enabled in your BIOS? Do the ports show up in dmesg? Do you have usbd running? (usbd_enable=YES in /etc/rc.conf). -Warren Block * Rapid City, South Dakota USA - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: traffic speed stats are not right
anyone ? On Mon, 2004-03-22 at 13:00, lists wrote: Hello, The traffic stats on my freebsd stable box are way to low. When I copy over files from one server to another then it goes with about 6 meg/sec the box where i copy from is an linux machine and this one says the speed is indeed around the 6 meg/sec measured with iptraf and mrtg. but when I look at the freebsd box the speed measured there with mrtg trafshow is about 250kbyte/sec while in fact the file's come in with about 6 meg /sec (copying over big file's and every sec the size of the file gets bigger with a few meg (ls -lh). I'm running freebsd on a PIII866 mhz, 512 meg ram and a 3com network card (xl0) anyone has got an idea what this could be ? thnx ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Enabling USB ports for printing...
I'm running 4.9-STABLE, CUPS 1.1.19 and I'm trying to get an Epson Photo Stylus 1270 (usb) working with the system and CUPS. So far, no luck. I've walked through the setup for CUPS via http://127.0.0.1:631/ in order to add the usb printer. I'm at a loss to figure this out. What am I missing? Here's what I have/get: % ls /dev/ulpt* crw--- 1 root wheel 113, 0 Mar 23 08:16 /dev/ulpt0 crw--- 1 root wheel 113, 1 Mar 23 08:16 /dev/ulpt1 crw--- 1 root wheel 113, 2 Mar 23 08:16 /dev/ulpt2 crw--- 1 root wheel 113, 3 Mar 23 08:16 /dev/ulpt3 crw--- 1 root wheel 113, 4 Mar 23 08:16 /dev/ulpt4 % usbdevs -v Controller /dev/usb0: addr 1: self powered, config 1, OHCI root hub(0x), AMD(0x), rev 1.00 port 1 disabled port 2 disabled port 3 disabled port 4 disabled % usbdevs -f /dev/ulpt0 usbdevs: /dev/ulpt0: Device not configured My kernel configuration contains the following for usb: # USB support device uhci # UHCI PCI-USB interface device ohci # OHCI PCI-USB interface device usb # USB Bus (required) device ugen # Generic device uhid # Human Interface Devices device ulpt # Printer device umass # Disks/Mass storage - Requires scbus and da (done) device ums # Mouse device uscanner # Scanners - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Enabling USB ports for...stuff/printing...
Running 4.9-STABLE, CUPS 1.1.19 and I'm trying to get an Epson Photo Stylus 1270 (usb) working with the system and CUPS. So far, no luck. I've walked through the setup for CUPS via http://127.0.0.1:631/. I'm at a loss to figure this out. What am I missing? Here's what I have. % ls /dev/ulpt* crw--- 1 root wheel 113, 0 Mar 23 08:16 /dev/ulpt0 crw--- 1 root wheel 113, 1 Mar 23 08:16 /dev/ulpt1 crw--- 1 root wheel 113, 2 Mar 23 08:16 /dev/ulpt2 crw--- 1 root wheel 113, 3 Mar 23 08:16 /dev/ulpt3 crw--- 1 root wheel 113, 4 Mar 23 08:16 /dev/ulpt4 % usbdevs -v Controller /dev/usb0: addr 1: self powered, config 1, OHCI root hub(0x), AMD(0x), rev 1.00 port 1 disabled port 2 disabled port 3 disabled port 4 disabled % usbdevs -f /dev/ulpt0 usbdevs: /dev/ulpt0: Device not configured My kernel configuration contains the following for usb: # USB support device uhci # UHCI PCI-USB interface device ohci # OHCI PCI-USB interface device usb # USB Bus (required) device ugen # Generic device uhid # Human Interface Devices device ulpt # Printer device umass # Disks/Mass storage - Requires scbus and da (done) device ums # Mouse device uscanner # Scanners - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
traffic speed stats are not right
Hello, The traffic stats on my freebsd stable box are way to low. When I copy over files from one server to another then it goes with about 6 meg/sec the box where i copy from is an linux machine and this one says the speed is indeed around the 6 meg/sec measured with iptraf and mrtg. but when I look at the freebsd box the speed measured there with mrtg trafshow is about 250kbyte/sec while in fact the file's come in with about 6 meg /sec (copying over big file's and every sec the size of the file gets bigger with a few meg (ls -lh). I'm running freebsd on a PIII866 mhz, 512 meg ram and a 3com network card (xl0) anyone has got an idea what this could be ? thnx ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: MAKEDEV - where is it?
Hey, you know, I was JUST reading this once again: http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/book.html#WHERE- IS-MAKEDEV On Mar 22, 2004, at 3:46 PM, GP wrote: Hi, would anyone know where the MAKEDEV file in FreeBSD version 5.1 resides if it does? I cannot find the file anywhere! Thanks, George ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: KDE 3.2.1
On Saturday 20 March 2004 01:55, Chris wrote: Is it me? Or does KDE 3.2.1 seem to run much faster then 3.2.0? I've noticed this ass well, and even more so since qt33 has been put into ports. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Printing from Mac OS X to CUPS on FreeBSD 4.9-STABLE...
Okay. I've looked hi and lo for an answer to this and I'm not coming up with anything useful. I have two machines on the same network (192.168.0.x). One is an x86 running 4.9-STABLE and CUPS 1.1.19. The other is a PowerBook G4 running Mac OS X 10.3.2 (Panther). The x86 machine has an HP laser printer attached to it via parallel. When on the fbsd machine, I can print files locally just fine. Under Mac OS X I can print to file as Postscript or PDF, put the file on the fbsd machine and print it locally just fine. So, it appears the PS/PDF data coming from OS X is not a problem. However, when I try to print from Mac OS X to the x86 box using IPP...nothing. I was getting a Destination printer does not exist! in the error log. I believe I've turned on browsing locally (BTW, I appear to be receiving CUPS' broadcast packets). I've tried configuring IPP printing on the PowerBook using both the Printer Setup Utility and http://localhost:631/. No go. Here's my cupsd.conf: ServerName 127.0.0.1 LogLevel info RequestRoot /usr/local/var/spool/cups ConfigFilePerm 0644 TempDir /usr/local/var/spool/cups/tmp Listen 127.0.0.1 Listen 192.168.0.2 BrowseAddress 192.168.0.255 BrowseShortNames No BrowseAllow 127.0.0.1 BrowseAllow 192.168.0.4 ImplicitClasses Off RootCertDuration 43200 Location / Order Deny,Allow Deny From All Allow From 127.0.0.1 Allow From 192.168.0.4 /Location Location /admin AuthType None AuthClass Anonymous Order Deny,Allow Deny From All Allow From 127.0.0.1 Allow From 192.168.0.4 /Location The error_log file on the fbsd box shows the following error: get_printer_attrs: resource name '/ipp' no good! Does there need to exist an ipp directory under the spool directory? Where? I've tried this and still no go. Permissions, perhaps? Thanks, alex - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir (owner)802 863 5502 MacTutor: Apple Mac OS X Consulting [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
mrtg graphics ar way to low..
hi, Currently i'm installing mrtg and net-snmp on all my servers, All the linux servers just work like they should but the mrtg stats for the freebsd 4.9 (stable) server are way to low.. When I copied over a few gig of data from a linux server to the freebsd server.. The linux stats in mrtg were just like they should be (about 70 mbit for a ling time) But the freebsd graphs show just a few mbit anyone has got an idea where to look to solve this ? (in mrtg or net-snmp) thnx ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
NFS not responding.
Hi all, I'm experiencing problems with a 4.9 server attached to a NetApp. Some background. There are several Solaris 8 machines connected to it, and (2) FreeBSD 4.9 machines. The Solaris servers and one FreeBSD machine have no issues connecting to the NetApp. However, the 4.9 server in question does. It was configured identically to its' sister 4.9 server. The NetApp in question acts as a mailstore. Specifically, the problem occurs when our MTA attempts to deliver a message to the mailstore. The spawned process hangs, and this message occurs in /var/log/messages. Mar 3 16:27:32 mailserve5 /kernel: nfs server 192.168.1.10:/vol/mail0: not responding Let me re-iterate that the problem only occurs on the one machine, and it is configured identically to the other FreeBSD server. Here is the appropriate snippet of the /etc/fstab file: 192.168.1.10:/vol/web0 /remote/web0nfs rw,-r=32767,-w=32767,dumbtimer,intr,nfsv3 - - I have tried udp and nfsv2 to no avail. To debug this I have been using tcpdump and nfsstat, but because the problem is unpredictable, I haven't been able to see the issue occur. Can anyone suggest something? Either a potential cause or another way to determine the cause.. -- Steve ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Mailman web interface not changing settings
Dear list, I hope this is a valid question on this list, if not please ignore me and I'll go bother the mailman people. I have just installed Mailman 2.1.4 on a 4.9-RELEASE-p1 FreeBSD system, using portupgrade(upgrading from v2.1.1 - v2.1.4). It runs fine from the command line but I can not use the web interface to update list settings. Note, I could not use the web interface in mailman v2.1.1 either, but I now *need* to have this working. I have set up httpd.conf as described in FreeBSD-post-install- notes(for virtual hosts) and I am using sendmail as the MTA, so I dont think I've veered to far from the norm in setup. The web interface at http://www.vhost.com/mailman/admin/testlist is up and running, and I can log in and out of the admin page. But if I try to change any setting, then click on the submit your changes button at the bottom of the page, the page updates, but the settings all return to their initial values. It seems to me that all parts of mailman are working, including the web interface, but it simply does not update the config. Anyone know why this may be? Permissions maybe? Thanks for your time, Stephen ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Hardware requirements for firewall
On Wed, 7 Jan 2004, Wayne Pascoe wrote: Why not just try it? Because it's a commercial hosting operation pushing up to 20Mb/s with SLA's to our clients. My biggest fear is not that this won't work, but that it will work but with intermittant bugs. Introducing a new machine has a certain level of risk. What is your contingency plan if the machine fails anyway? If there is so much at stake why not use the better machine then? Another alternative.. prepare both machines. Have the better machine ready to do an able to be connected/switched to at a moments notice. Put the slower machine on at the slowest day. Monitor it closely as traffic grows. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: archiving and restoring disk images...
Thanks, Dan. I'm thinking this whole process over based on what you've said. I've never tried storing a disk as an archive, so I thought I'd try it on for size. Thanks for your point of view. Very helpful. Alex On Tuesday, December 9, 2003, at 05:26 PM, Dan Nelson wrote: In the last episode (Dec 09), [EMAIL PROTECTED] said: I dumped a disk image of my root partition like this: dd if=/dev/da0s1a | gzip -9 -c where.ever.gz Does this include the boot sector? In other words, if I need to restore this disk image I can do the reverse and the boot sector and root partition will be back to that state. How should I go about this, if what I'm saying is valid? Can I do this in single user mode or should I boot from CD and go from there? I haven't needed to do this yet, but I want to know how. If dumping the root partition like this is not a good means of backing up, please say so. What would you recommend? I tar most everything else. The first BSD partition includes the disklabel partition and the boot blocks for that slice, but will not contain the MBR or fdisk partition table. Something like dd if=/dev/da0 of=mbr count=1 would do that. To restore the disklabel partition you'll need to dd your where.ever dump to /dev/da0s1, since on a new disk there won't be an 'a' partition to write to. After the dd is done, the 'a' partition should appear. I usually either use dump or tar to back up my root partition, and use sysinstall or a bootable CD image to fdisk and disklabel new media before restoring. That way I can change the partition sizes if my new disk is larger/smaller than the original. -- Dan Nelson [EMAIL PROTECTED] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Alexander Sendzimir 802 863 5502 Mac Tutor of Vermont, LLC info @ mactutor . vt . us Colchester, VT 05446 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Mini atx for firewall
On Thu, 20 Nov 2003, J. Seth Henry wrote: Guys, Case Outlet*, and perhaps others by now, have the Travla Flex ATX / mini ITX case that will accomodate two PCI cards. I have an 933MHz EPIA board with two 3c905TX-C NICs, and have seen a substantial improvement in performance over my old Netgear router. Which model did you get? Don't see any model as Flex. The models they have are C### (ie C137, etc). The only one I see listed with 2 PCI is the 137. Is that the one you got? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Unable
Hi , I m trying to install FreeBSD 4.9 on a Compaq Deskpro EP series PIII600 with 256Mb RAM 12Gb HDD . This is the message that I got : Unable to make new root filesystem on /dev/ad0s1a! Command returned status 36. I tried to change in BIOS from UDMA to PIO-0 PIO-4 EDMA but without luck. Can anybody tell me what can I do to install FreeBSD on this machine ? Sorin Chiorean Network Specialist Computer Partners ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Unable to make new root filesystem
Hi , I m trying to install FreeBSD 4.9 on a Compaq Deskpro EP series PIII600 with 256Mb RAM 12Gb HDD . This is the message that I got : Unable to make new root filesystem on /dev/ad0s1a! Command returned status 36. I tried to change in BIOS from UDMA to PIO-0 PIO-4 EDMA but without luck. Can anybody tell me what can I do to install FreeBSD on this machine ? Sorin Chiorean Network Specialist Computer Partners ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
