InstallJammer on Fbsd 7.0 ?

2008-09-12 Thread Len Conrad


Anybody got this running on FreeBSD 7.0?

http://www.installjammer.com/

installjammer-1.2.9.tar.gz

./installjammer

Could not find an installkit for your platform 'FreeBSD-7-x86'.
You must modify this script and define a platform at the top.

==

changed installjammer:

PLATFORM="FreeBSD-x86"

./installjammer
/libexec/ld-elf.so.1: Shared object "libc.so.6" not found, required by 
"installkit"

I grabbed installkit1.1.tar.gz but not clear if/how one can compile jammer for 
FreeBSD 7. 



Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: InstallJammer on Fbsd 7.0 ?

2008-09-12 Thread Len Conrad

>> Anybody got this running on FreeBSD 7.0?
>>
>> http://www.installjammer.com/
>>
>> installjammer-1.2.9.tar.gz
>>
>> ./installjammer
>>
>> Could not find an installkit for your platform 'FreeBSD-7-x86'.
>> You must modify this script and define a platform at the top.
>>
>> ==
>>
>> changed installjammer:
>>
>> PLATFORM="FreeBSD-x86"
>>
>> ./installjammer
>> /libexec/ld-elf.so.1: Shared object "libc.so.6" not found, required by 
>> "installkit"
>>
>> I grabbed installkit1.1.tar.gz but not clear if/how one can compile jammer 
>> for FreeBSD 7. 
>
>Installing misc/compat6x would be a good start.  It would get you that
>library, at least.
>
>To be honest, I wouldn't trust an install package that I didn't have
>the source for...

>you'

__
www.IMGate.net IMGate Mail Firewall

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: InstallJammer on Fbsd 7.0 ?

2008-09-12 Thread Len Conrad

>> Anybody got this running on FreeBSD 7.0?
>>
>> http://www.installjammer.com/
>>
>> installjammer-1.2.9.tar.gz
>>
>> ./installjammer
>>
>> Could not find an installkit for your platform 'FreeBSD-7-x86'.
>> You must modify this script and define a platform at the top.
>>
>> ==
>>
>> changed installjammer:
>>
>> PLATFORM="FreeBSD-x86"
>>
>> ./installjammer
>> /libexec/ld-elf.so.1: Shared object "libc.so.6" not found, required by 
>> "installkit"
>>
>> I grabbed installkit1.1.tar.gz but not clear if/how one can compile jammer 
>> for FreeBSD 7. 
>
>Installing misc/compat6x would be a good start.  It would get you that
>library, at least.
>
>To be honest, I wouldn't trust an install package that I didn't have
>the source for...

the source is here, I'm trying with 1.2.6

http://downloads.installjammer.com/installkit/src/installkit-1.2.6.tar.gz

./configure
gmake

fails with

rm -f libcraplzma0.1.so
ld -Bshareable -x -o libcraplzma0.1.so crapLzma.o CRC.o Alloc.o String.o 
StringConvert.o OutBuffer.o 
FileStreams.o StreamUtils.o LZInWindow.o LZMAEncoder.o RangeCoderBit.o 
C_FileIO.o -lsupc++ -static-libgcc 
-L/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib 
-L/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib -ltclstub8.4
ld: unrecognized -a option `tic-libgcc'
*** Error code 1

Stop in 
/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/build/craplzma.
rm -f libcraplzma0.1.so
ld -Bshareable -x -o libcraplzma0.1.so crapLzma.o CRC.o Alloc.o String.o 
StringConvert.o OutBuffer.o FileStreams.o StreamUtils.o LZInWindow.o 
LZMAEncoder.o RangeCoderBit.o C_FileIO.o -lsupc++ -static-libgcc 
-L/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib 
-L/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib -ltclstub8.4
ld: unrecognized -a option `tic-libgcc'
*** Error code 1

Stop in 
/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/build/craplzma.
gmake: *** [craplzma] Error 1

advice was "Makefile, and in the TARGETS list, remove the "craplzma"", 

done but:

Install miniarc.tcl 
/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib/miniarc0.1/miniarc.tcl
Install pkgIndex.tcl 
/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib/miniarc0.1
Installing header files in 
/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/include
"Makefile.shared", line 2: Need an operator
"Makefile.shared", line 3: Need an operator
"Makefile.shared", line 4: Need an operator
"Makefile.shared", line 59: Need an operator
make: fatal errors encountered -- cannot continue
"Makefile.shared", line 2: Need an operator
"Makefile.shared", line 3: Need an operator
"Makefile.shared", line 4: Need an operator
"Makefile.shared", line 59: Need an operator
make: fatal errors encountered -- cannot continue





__
www.IMGate.net IMGate Mail Firewall

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: InstallJammer on Fbsd 7.0 ?

2008-09-12 Thread Len Conrad

>> 
>> Install miniarc.tcl 
>> /usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib/miniarc0.1/miniarc.tcl
>> Install pkgIndex.tcl 
>> /usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib/miniarc0.1
>> Installing header files in 
>> /usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/include
>> "Makefile.shared", line 2: Need an operator
>> "Makefile.shared", line 3: Need an operator
>> "Makefile.shared", line 4: Need an operator
>> "Makefile.shared", line 59: Need an operator
>> make: fatal errors encountered -- cannot continue
>> "Makefile.shared", line 2: Need an operator
>> "Makefile.shared", line 3: Need an operator
>> "Makefile.shared", line 4: Need an operator
>> "Makefile.shared", line 59: Need an operator
>> make: fatal errors encountered -- cannot continue
>
>Sounds like the Makefiles require gmake, and you ran plain make instead
>of gmake this time.

no, I ran gmake the first time, and tried again with gmake, results as above.

the developer says he's compiled on 4,5,6 and will try to get 7 done next week.

thanks
Len




>-- 
>Dan Nelson
>[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


can't svn spamaassin trunk

2008-09-22 Thread Len Conrad

FreeBSD 6.2-RELEASE

Registering installation for subversion-1.4.0_1

svn checkout http://svn.apache.org/repos/asf/spamassassin/trunk 
spamassassin-trunk
/libexec/ld-elf.so.1: /usr/lib/libkrb5.so: Undefined symbol 
"initialize_asn1_error_table_r"

did a portsnap, but no change

Seem to be lots of hits on google, nothing really helpful.

how to fix?

thanks,
Len



__
IMGate OpenSource Mail Firewall www.IMGate.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


help with AWk

2008-09-27 Thread Len Conrad

The logic desired if

If IP has no PTR, print "PTR_NUL", else print the PTR.


dig +short -x 1.2.3.4 | awk '{if ( $0 == "" ) {print "PTR_NUL" } else {print $0 
} }'

... works if PTR exist, but if no PTR, PTR_NUL doesn't print.

thanks
Len





__
IMGate OpenSource Mail Firewall www.IMGate.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


what else is needed to make ftp passive work

2008-10-22 Thread Len Conrad
two machines on the same private network.  

ftp  10.0.0.24
Connected to 10.0.0.24.
220 mx1.fairhope.net FTP server (Version 6.00LS) ready.
Name (10.0.0.24:username): 
331 Password required for username.
Password:
230 User username logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
229 Entering Extended Passive Mode (|||64341|)

at this point, there is a long delay, that eventually completes:

200 EPRT command successful.
150 Opening ASCII mode data connection for '/bin/ls'

... and the rest of the ftp session runs fast.

on the ftp server, if we "ipfw disable firewall", the ftp session runs without 
delay.

in hosts file, both machines have both of their records, so we don't think the 
delay is query for PTR of either IP.

our ipfw.rules:

# stateful
$IPF 50 check-state
$IPF 60 allow tcp  from any to any established 
$IPF 70 allow all  from any to any out keep-state
$IPF 80 allow icmp from any to any

# open well-known ports

# FTP
$IPF 120 allow tcp from any to any 20 in
$IPF 121 allow tcp from any to any 20 out
$IPF 122 allow tcp from any to any 21 in
$IPF 123 allow tcp from any to any 21 out

In inetd.conf, we've added "-l -l -d" but don't get any ftpd debug info written 
to /var/log/messages or /var/log/xferlog or dmesg system buffer.

So what else is needed inf our ifpw.rules for the ftpd params to get the switch 
to Extended Passive Mode to run quickly?

thanks,
Len




__
IMGate OpenSource Mail Firewall www.IMGate.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


adaptec 5805 and FreeBSD NAS

2009-09-26 Thread Len Conrad

We are considering building 12 x 2TB NAS system in an Intel storage server box 
with Adaptec 5805 SAS/SATA HBA.

Anybody have FreeBSD experience with 24TB (RAID6) and Adaptec 5805?

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


postfix/amavids/sa/etc in FreeBSD jail?

2009-10-09 Thread Len Conrad
is a FreeBSD jail enough of a virtualized OS to run a full filtering MX config 
setup exactly as on a native FreeBSD?

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


is this Intel CPU ok for 7.2 AMD64?

2009-10-14 Thread Len Conrad
the FreeBSD 6.2 i386 dmesg.boot shows:

CPU: Intel(R) Xeon(TM) CPU 3.60GHz (3591.25-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf41  Stepping = 1
  
Features=0xbfebfbff
  Features2=0x659d>
  AMD Features=0x2010
  Logical CPUs per core: 2
real memory  = 3220963328 (3071 MB)
avail memory = 3150913536 (3004 MB)
ACPI APIC Table: 
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
 cpu2 (AP): APIC ID:  6
 cpu3 (AP): APIC ID:  7
ioapic0: Changing APIC ID to 8
ioapic1: Changing APIC ID to 9
ioapic1: WARNING: intbase 32 != expected base 24
ioapic2: Changing APIC ID to 10
ioapic2: WARNING: intbase 64 != expected base 56
ioapic0  irqs 0-23 on motherboard
ioapic1  irqs 32-55 on motherboard
ioapic2  irqs 64-87 on motherboard

thanks,
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


FWD: is this Intel CPU ok for 7.2 AMD64?

2009-10-15 Thread Len Conrad

-- Original Message --
From:  "Len Conrad" 
Reply-To:  
Date:  Wed, 14 Oct 2009 22:48:26 +0200

the FreeBSD 6.2 i386 dmesg.boot shows:

CPU: Intel(R) Xeon(TM) CPU 3.60GHz (3591.25-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf41  Stepping = 1
  
Features=0xbfebfbff
  Features2=0x659d>
  AMD Features=0x2010
  Logical CPUs per core: 2
real memory  = 3220963328 (3071 MB)
avail memory = 3150913536 (3004 MB)
ACPI APIC Table: 
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
 cpu2 (AP): APIC ID:  6
 cpu3 (AP): APIC ID:  7
ioapic0: Changing APIC ID to 8
ioapic1: Changing APIC ID to 9
ioapic1: WARNING: intbase 32 != expected base 24
ioapic2: Changing APIC ID to 10
ioapic2: WARNING: intbase 64 != expected base 56
ioapic0  irqs 0-23 on motherboard
ioapic1  irqs 32-55 on motherboard
ioapic2  irqs 64-87 on motherboard

thanks,
Len

==

So, is there a definite, unique answer? 

Does it matter whether I run IA64 or AMD64 in the above Dell 1850?

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: FW: DNS Question

2009-10-23 Thread Len Conrad
-- Original Message --
From: krad 
Date:  Fri, 23 Oct 2009 15:56:40 +0100

>2009/10/23 Sean Cavanaugh 
>
>>
>>
>>
>> > Date: Fri, 23 Oct 2009 08:30:08 -0400
>> > From: dave.l...@pixelhammer.com
>> > To: freebsd-questions@freebsd.org
>> > Subject: DNS Question
>> >
>> > Good morning.
>> >
>> > I have been asked by my co-workers and sales why I always create a A
>> > record for new domains we host instead of a CNAME.
>> >
>> > The issue I run into lately with some domains is that a client has a
>> > website with a industry host such as frank.relator.com and he wants to
>> > have DNS point www.frank.com to frank.relator.com with a CNAME. The
>> > client does not want an A record for frank.com.
>> >
>> > Somewhere, in a class far far away, I was taught a DNS zone had to have
>> > a A record to function properly. I can't seem to locate anything in the
>> > RFCs.
>> >
>> > Am I wrong?
>> >
>>
>>
>> I think you are confusing basics of DNS records. you are partially correct
>> in that a DNS zone needs an initial A record to be able to translate a name
>> to an IP, but there is nothing wrong about setting up a CNAME to point to a
>> record in a different zone instead. you just cannot do a zone that has a
>> CNAME only that does not at some point to a valid A record. CNAMEs are
>> forwarders only whereas A records are actual lookups.
>>
>> for proper way to set this up
>>
>> The A record would be assigned for the main name that you want to associate
>> to an IP address.
>> The CNAME record just relates a different name to that original name. this
>> allows you to change the IP address of the server and only have to update
>> the original A record instead of every DNS record for that server.
>>
>> for small number of vhosts, this would not really be an issue, but imagine
>> if you were hosting a couple hundred vhosts from a single IP and then had to
>> change that IP because you switched your ISP. It would take you a LONG time
>> to update them if they were all A records, but only a couple of seconds if
>> you had it properly set up as CNAME's
>>
>> www.bobshosting.comA 192.168.0.1
>> www.vhost1.com  CNAME  www.bobshosting.com.
>> www.vhost2.com  CNAME  www.bobshosting.com.
>> www.vhost3.com  CNAME  www.bobshosting.com.
>> www.vhost4.com  CNAME  www.bobshosting.com.
>>
>>
>>
>> -Sean
>>
>>
>>  ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "
>> freebsd-questions-unsubscr...@freebsd.org"
>>
>
>I try to use CNAMES as much as possible, for one very good reason. If say I
>have web server with 1000 vhost on it. I have one A record for the server
>and all the cnames point at that A record. Now i need to change the ip of
>the server. I update the A record and add a reverse record and im done. IF I
>had done it your way with all A records I would now have to go and edit
>another 1000 records. Even worse if some of these domains are not under my
>control I have to go and liaise with customers, or other third parties, and
>it becomes a complete mess. The chances of me convincing them all and
>coordinated it correctly are minimal 8(

domains sharing records is better handled by $INCLUDE

$INCLUDE /path/db.ttl, which contains

$TTL 6h


$INCLUDE /path/db.ns, which contains

@ ns ns1.domain.tld.
@ ns ns2.domain.tld.

$INCLUDE /path/db.www, which contains

@   a ip.ad.re.ss
www a ip.ad.re.ss

etc.

Changing an include file changes all the zone files that include it, giving 
enormous leverage, while removing the extra query required to resolve a CNAME 
to canonical.

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: DNS Question

2009-10-23 Thread Len Conrad
>
>All true, and I did not do a very good job of explaining it. My issue 
>was that we have requests to use a CNAME for the domain record. Such as 
>this.
>
>example.com  CNAME  otherdomain.com
>www.example.com  CNAME   otherdomain.com
>
>I was taught this was not good form

worse, it's illegal.

, but allowed. I can deal with it. 
>But what of having a SOA record for example.com, no A or CNAME record 
>for the TLD example.com, only hosts such as www, ns1, ftp, etc.
>
>I tried it an it seems to work fine, but doesn't look proper to me. Then 
>again I remember when CNAME were considered evil.

CNAMEs are still evil, unless 
1) no other solution exists and 
2) the user knows how to use CNAMEs (rare).

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


RE: DNS Question

2009-10-23 Thread Len Conrad
>> >All true, and I did not do a very good job of explaining it. My issue 
>> >was that we have requests to use a CNAME for the domain record. Such as 
>> >this.
>> >
>> >example.com CNAME otherdomain.com
>> >www.example.com CNAME otherdomain.com
>> >
>> >I was taught this was not good form
>> 
>> worse, it's illegal.
>
>
>how is this illegal?

CNAME rule: 

a node with a CNAME cannot contain any other records. 

for the node domain.tld:

domain.tld. soa ...
domain.tld. ns ...
domain.tld. cname otherdomain.tld.

this node has a CNAME and "other data", so it's illegal, no matter what you 
want to do, or what makes sense to you, or what is convenient for you.

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


how to show "make configure" menu after initial make

2009-11-09 Thread Len Conrad

subsequent "make configure" simply uses the original menu choices with no 
re-display of the menu to change the options

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


where to find libintl.so.8

2009-11-17 Thread Len Conrad

FreeBSD  6.2-RELEASE FreeBSD 6.2-RELEASE #0

portsnap'd  today

running ver 1.2.8 of

rdiff-backup

which gets:

ImportError: Shared object "libintl.so.8" not found, required by "librsync.so.1"

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


can't get a full fbsd 7.2 amd64 install

2009-12-10 Thread Len Conrad
fbsd 7.2
amd64
"kernel developer" install

Here's a successful install du

du -d1 -h /
2.0K/.snap
2.0K/dev
1.8G/usr
1.6G/var
1.7M/etc
2.0K/cdrom
2.0K/dist
1.1M/bin
206M/boot
6.7M/lib
396K/libexec
2.0K/media
2.0K/mnt
2.0K/proc
4.0M/rescue
 42K/root
4.3M/sbin
 24K/tmp
3.6G/  <

here's what we're getting on another machine, way too little:

du -h -d1 /
2.0K/.snap
2.0K/dev
1.1G/usr
238K/var
1.7M/etc
2.0K/cdrom
2.0K/dist
1.1M/bin
411M/boot
6.7M/lib
396K/libexec
2.0K/media
2.0K/mnt
2.0K/proc
4.0M/rescue
 10K/root
4.3M/sbin
 12K/tmp
1.5G/ <

and /usr is also missing 800 MB just after install.

using 7.2 amd64 disc01, as forever.

I ran sysinstall, post install config, and checked stuff, but still didn't get, 
eg, anything in /usr/bin/

comments?

Could my client have chosen the wrong .iso?  

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: can't get a full fbsd 7.2 amd64 install

2009-12-12 Thread Len Conrad
At 11:50 AM 12/10/2009, you wrote:
>fbsd 7.2
>amd64
>"kernel developer" install
>
>Here's a successful install du
>
>du -d1 -h /
>2.0K/.snap
>2.0K/dev
>1.8G/usr
>1.6G/var
>1.7M/etc
>2.0K/cdrom
>2.0K/dist
>1.1M/bin
>206M/boot
>6.7M/lib
>396K/libexec
>2.0K/media
>2.0K/mnt
>2.0K/proc
>4.0M/rescue
> 42K/root
>4.3M/sbin
> 24K/tmp
>3.6G/  <
>
>here's what we're getting on another machine, way too little:
>
>du -h -d1 /
>2.0K/.snap
>2.0K/dev
>1.1G/usr
>238K/var
>1.7M/etc
>2.0K/cdrom
>2.0K/dist
>1.1M/bin
>411M/boot
>6.7M/lib
>396K/libexec
>2.0K/media
>2.0K/mnt
>2.0K/proc
>4.0M/rescue
> 10K/root
>4.3M/sbin
> 12K/tmp
>1.5G/ <
>
>and /usr is also missing 800 MB just after install.
>
>using 7.2 amd64 disc01, as forever.
>
>I ran sysinstall, post install config, and checked stuff, but still didn't 
>get, eg, anything in /usr/bin/
>
>comments?
>
>Could my client have chosen the wrong .iso?  

the amd64 .iso is verified as disc01 and we have the same partial install 
failure, with no install errors, on two machines, Dell 1850, with amd64 and 
i386.

any ideas?

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: can't get a full fbsd 7.2 amd64 install

2009-12-13 Thread Len Conrad

>I could be mistaken, but that sounds like an awfully big /var and
>/usr. Are you sure this is a vanilla install that no one has touched?

the install is running off the i386/amd64 disc1 .iso.  /usr is with /usr/ports

Len





>-- randi
>
>
>
>On Sat, Dec 12, 2009 at 8:11 PM, Len Conrad  wrote:
>> At 11:50 AM 12/10/2009, you wrote:
>>>fbsd 7.2
>>>amd64
>>>"kernel developer" install
>>>
>>>Here's a successful install du
>>>
>>>du -d1 -h /
>>>2.0K/.snap
>>>2.0K/dev
>>>1.8G/usr
>>>1.6G/var
>>>1.7M/etc
>>>2.0K/cdrom
>>>2.0K/dist
>>>1.1M/bin
>>>206M/boot
>>>6.7M/lib
>>>396K/libexec
>>>2.0K/media
>>>2.0K/mnt
>>>2.0K/proc
>>>4.0M/rescue
>>> 42K/root
>>>4.3M/sbin
>>> 24K/tmp
>>>3.6G/  <<<<<<<<<<<<<
>>>
>>>here's what we're getting on another machine, way too little:
>>>
>>>du -h -d1 /
>>>2.0K/.snap
>>>2.0K/dev
>>>1.1G/usr
>>>238K/var
>>>1.7M/etc
>>>2.0K/cdrom
>>>2.0K/dist
>>>1.1M/bin
>>>411M/boot
>>>6.7M/lib
>>>396K/libexec
>>>2.0K/media
>>>2.0K/mnt
>>>2.0K/proc
>>>4.0M/rescue
>>> 10K/root
>>>4.3M/sbin
>>> 12K/tmp
>>>1.5G/ <<<<<<<<<<<<<
>>>
>>>and /usr is also missing 800 MB just after install.
>>>
>>>using 7.2 amd64 disc01, as forever.
>>>
>>>I ran sysinstall, post install config, and checked stuff, but still didn't 
>>>get, eg, anything in /usr/bin/
>>>
>>>comments?
>>>
>>>Could my client have chosen the wrong .iso?
>>
>> the amd64 .iso is verified as disc01 and we have the same partial install 
>> failure, with no install errors, on two machines, Dell 1850, with amd64 and 
>> i386.
>>
>> any ideas?
>>
>> Len
>>
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>>
>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

__
IMGate OpenSource Mail Firewall www.IMGate.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Freebsd 7.2 port of "Postfix 2.7 Snapshot 20091209"

2009-12-17 Thread Len Conrad
Anybody know where to get this?

The fix reversing the order of black/white queries in postscreen is important 
for us.

thanks
Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


which IP+gateway for Freebsd guest VM in VMware workstation

2009-12-26 Thread Len Conrad

VMWare has lots of info how to set up the (Windows XP) VMWare Workstation 
networking side, but not much on setting up networking in the guest OS.

I've tried NAT and bridging, no DHCP, and can't ping anything except the 
localhost IPs.   

XP ipconfig shows the fixed IP, plus 2 192.168.c.d IPs from VMnet1 and VMnet8.  

I'm sure this is really simple, but my experimentation has come up with zilch.

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: which IP+gateway for Freebsd guest VM in VMware workstation

2009-12-27 Thread Len Conrad

>>VMWare has lots of info how to set up the (Windows XP) VMWare Workstation 
>>networking side, but not much on setting up networking in the guest OS.
>>
>>I've tried NAT and bridging, no DHCP, and can't ping anything except the 
>>localhost IPs.
>>
>>XP ipconfig shows the fixed IP, plus 2 192.168.c.d IPs from VMnet1 and VMnet8.
>>
>>I'm sure this is really simple, but my experimentation has come up with zilch.
>
>Take a look here:
>http://www.freebsd.org/doc/en/books/handbook/config-network-setup.html

thanks, I've been setting up FreeBSD for 10 years, and have multimple FreeBSD 
VMs running in several ESXi hosts.

>The guest OS will have an em0 interface

it does.

> which is connected to
>a host interface VMnet1, VMnet8 or similar.

XP ipconfig shows:

Ethernet adapter VMware Network Adapter VMnet8:

Connection-specific DNS Suffix  . :
Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for 
VMnet8
Physical Address. . . . . . . . . : 00-50-56-C0-00-08
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.219.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :

Ethernet adapter VMware Network Adapter VMnet1:

Connection-specific DNS Suffix  . :
Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for 
VMnet1
Physical Address. . . . . . . . . : 00-50-56-C0-00-01
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.198.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :

The physical Ethernet adapter has a fixed public IP.  I have only one public IP 
from the ISP.  In the VMWare Virtual Network Editor, this i/f is listed as 
VNnet0, Type Bridged, Connected column is "-", and Subnet Address is "-"


> Actually the guest's
>networking configuration is simpler than the host's one.

yeah, right! :)  It's too simple for me. 


> You should
>configure the em interface with an appropriate IP address:
>1) Bridging: WinXP fixed IP and FreeBSD fixed IP
>for example, WinXP 192.168.10.100 and FreeBSD 192.168.10.101

I'd like to stay with bridged.

the XP fixed ip is a.b.c.99, and I set the em0 to a.b.c.98.
/etc/rc.d/netif restart
/etc/rc.d/routing restart

ifconfig shows em0 with .98 and correct broadcast IP, but "status: no carrier"


>2) host to host: WinXP 192.168.c.d and FreeBSD 192.168.c.x
>for example, WinXP 192.168.20.100 and FreeBSD 192.168.20.101
>
>3) NAT: WinXP 192.168.e.d and FreeBSD 192.168.e.x
>for example, WinXP 192.168.30.100 and FreeBSD 192.168.30.101

Just to get something going, I have tried NAT:

from xp ipfconfig above:

xp @ 192.168.219.1

the VMWare Virtual Network Editor shows the NAT network with gateway 
192.168.219.2, so I put that in /etc/rc.conf, and set the FreeBSD rc.conf IP to 
192.168.219.3.

/etc/rc.d/netif restart
/etc/rc.d/routing restart

and always get "status: no carrier"

xp can ping itself at  192.168.219.1, but can't ping .2 or .3

FreeBSD VM can't ping anything but itself.

>Keep in mind that using DHCP is much more easy as you don't have to
>search for the appropriate address yourself, the VMware's DHCP server
>will offer it. Using DHCP from the FreeBSD side is as easy as typing
>"dhclient em0".

I'd like to be able to ssh/ftp into the FreeBSD VM from Internet, so I'd prefer 
to stay away from DHCP for the FreeBSD VM networking.

Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Hardware virtualization

2009-12-30 Thread Len Conrad
-- Original Message --
From: "Diego F. Arias R." 
Date:  Wed, 30 Dec 2009 16:24:24 -0500

>On Wed, Dec 30, 2009 at 4:06 PM, Mike Jeays  wrote:
>
>> I am about to buy a new desktop, and I want to make sure that hardware
>> virtualization is included. In one or two local computer stores, I get a
>> blank
>> look when I ask about this. Intel seems provide it on only certain chip
>> models
>> and they don't seem be very forthcoming, Perhaps it is better to buy an AMD
>> product?
>>
>> Any hints, please?
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "
>> freebsd-questions-unsubscr...@freebsd.org"
>>
>
>
>Hello:
>
>I like AMD because ALL their Athlon X2 and Phenom have it. Intel some models
>have it some ones dont. then you have to check first at intel page to be
>shure about.

http://en.wikipedia.org/wiki/Amd64#AMD64

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


upgraded OS, now how to fix all the pkgs?

2008-05-18 Thread Len Conrad

I used this:

http://www.daemonology.net/blog/2007-11-10-freebsd-minor-version-upgrade.html


mx1# pkg_add -r portupgrade

Fetching 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.3-release/Latest/portupgrade.tbz... 
Done.


Fetching 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.3-release/All/db41-4.1.25_4.tbz... 
Done.


Fetching 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.3-release/All/ruby18-bdb-0.6.2.tbz... 
Done.



I've deleted/installed berkeley and portupgrade to get started

portupgrade-2.3.1,2
db41-4.1.25_4
ruby18-bdb-0.6.2Ruby interface to Sleepycat's Berkeley DB revision 2 or lat




, but

portupgrade -all
/usr/local/sbin/portupgrade:36:in `require': no such file to load -- 
optparse (LoadError)

from /usr/local/sbin/portupgrade:36

where:

 31
 32 MYREVISION = %w$Rev: 71 $[1]
 33 MYDATE = %w$Date: 2007/07/03 10:58:27 $[1]
 34 MYNAME = File.basename($0)
 35
 36 require "optparse"
 37 require "pkgtools"
 38
 39 REASON_COMMENT = {
 40   :badcpp => "bad C++ code",
 41   :bison => "bison error",
 42   :categories => "invalid category",
 43   :cc => "compiler error",

how to fix?

thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: upgraded OS, now how to fix all the pkgs?

2008-05-18 Thread Len Conrad



* Len Conrad <[EMAIL PROTECTED]> [05-18-2008]:

> I've deleted/installed berkeley and portupgrade to get started
>
> portupgrade-2.3.1,2

The latest version is portupgrade-2.4.3_2,2.  Upgrade and try again.


I now have:

ruby-1.8.6.111_2,1  An object-oriented interpreted scripting language
ruby18-bdb-0.6.2Ruby interface to Sleepycat's Berkeley DB 
revision 2 or later


portupgrade-2.4.3_2,2 FreeBSD ports/packages administration and 
management tools


now:

portupgrade -af
Bad : modifier in $ ( ).

portupgrade lftp-3.4.0_3
Bad : modifier in $ ( ).

any portupgrade command give same.

Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Cannot --enable-pcretest-libedit because libedit library was not found

2012-05-20 Thread Len Conrad
8.2-RELEASE FreeBSD 8.2-RELEASE #0

with current portsnap

mtr, postfix-current, pcre all fail to install with error:

** Cannot --enable-pcretest-libedit because libedit library was not found.
===>  Script "configure" failed unexpectedly.
Please report the problem to m...@freebsd.org [maintainer] and attach the
"/usr/ports/devel/pcre/work/pcre-8.30/config.log" including the output of the
failure of your make command. Also, it might be a good idea to provide an
overview of all packages installed on your system (e.g. an `ls /var/db/pkg`).
*** Error code 1

thanks
Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Can't get plone to run

2012-07-09 Thread Len Conrad
Following the instructions from "Professional Plone 4 Development" book.

(not plone/zope from ports)

freebsd 9.0

got pretty far, then:

plone# bin/instance fg

2012-07-09 16:49:55 INFO ZServer HTTP server started at Mon Jul  9 16:49:55 2012
Hostname: 0.0.0.0
Port: 8080
2012-07-09 16:49:55 INFO Zope Set effective user to "myname"
Traceback (most recent call last):
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/Startup/run.py", 
line 76, in 
run()
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/Startup/run.py", 
line 22, in run
starter.prepare()
  File 
"/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/Startup/__init__.py", line 
86, in prepare
self.startZope()
  File 
"/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/Startup/__init__.py", line 
259, in startZope
Zope2.startup()
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/__init__.py", line 
46, in startup
from Zope2.App.startup import startup as _startup
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/App/startup.py", 
line 38, in 
import OFS.Application
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/OFS/Application.py", line 
22, in 
import App.Product
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/App/Product.py", line 44, 
in 
from OFS.Folder import Folder
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/OFS/Folder.py", line 24, 
in 
from webdav.Collection import Collection
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/webdav/Collection.py", 
line 30, in 
from webdav.Resource import Resource
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/webdav/Resource.py", line 
35, in 
from OFS.event import ObjectClonedEvent
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/OFS/event.py", line 20, 
in 
import OFS.interfaces
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/OFS/interfaces.py", line 
19, in 
from zope.location.interfaces import IPossibleSite
ImportError: cannot import name IPossibleSite

ideas?

Thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


can't make port BIND 9.7.3

2011-02-22 Thread Len Conrad
7.2-RELEASE-p1-jc2

trying to make in /usr/ports/dns/bind97

distinfo shows bind-9.7.3.tar.gz

make options:
 
SSL
IDN
replace_base
sigchase
ipv6
threads
links
xml

exiting the options, an immediate stop:

make: don't know how to make 
/usr/ports/dns/bind97/work/.build_done.bind97._usr_local. Stop
*** Error code 2

Stop in /usr/ports/dns/bind97.

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


syslog-ng logging stopped

2011-03-11 Thread Len Conrad
uname -a
FreeBSD 7.0-RELEASE

syslog-ng --version
syslog-ng 2.0.10

change date on syslog-ng.conf is  "Apr 20  2009"

syslog-ng been running untouched for that long. Millions of lines/per day log 
from 10 source machine.

about 00:20 today Friday,  all syslogging to syslog-ng stopped.

sockstat -4 shows udp/tcp 514 listening

chkrootkit  shows nothing wrong

stop syslog-ng

then pkg_delete, and then

cd /usr/ports/sysutils/syslog-ng2

make && make install

start it,

no change

I rebooted the syslog server.  no change

trafshow -i bce0 -n

then filter 514

... shows 100KBs arriving from our syslog clients.

tshark capture "port 514" on syslog-ng box shows plenty of traffic arriving 
with untouched pf rules active, 

pfctl -d   no change so pfctl -e

df shows plenty of disk space for /var

suggestions?

Len 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: syslog-ng logging stopped

2011-03-11 Thread Len Conrad

-- Original Message --
From: Iñigo Ortiz de Urbina 
Date:  Fri, 11 Mar 2011 23:12:49 +0100

>Whats in dmesg and /var/log/? You shared extensive and excellent
>troubleshooting info but didnt spot none of these.
>
>Keep us updated im sure im not the only one puzzled :)
>
>On 3/11/11, Len Conrad  wrote:
>> uname -a
>> FreeBSD 7.0-RELEASE
>>
>> syslog-ng --version
>> syslog-ng 2.0.10
>>
>> change date on syslog-ng.conf is  "Apr 20  2009"
>>
>> syslog-ng been running untouched for that long. Millions of lines/per day
>> log from 10 source machine.
>>
>> about 00:20 today Friday,  all syslogging to syslog-ng stopped.
>>
>> sockstat -4 shows udp/tcp 514 listening
>>
>> chkrootkit  shows nothing wrong
>>
>> stop syslog-ng
>>
>> then pkg_delete, and then
>>
>> cd /usr/ports/sysutils/syslog-ng2
>>
>> make && make install
>>
>> start it,
>>
>> no change
>>
>> I rebooted the syslog server.  no change
>>
>> trafshow -i bce0 -n
>>
>> then filter 514
>>
>> ... shows 100KBs arriving from our syslog clients.
>>
>> tshark capture "port 514" on syslog-ng box shows plenty of traffic arriving
>> with untouched pf rules active,
>>
>> pfctl -d   no change so pfctl -e
>>
>> df shows plenty of disk space for /var
>>
>> suggestions?
>>
>> Len
>>
>>
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>>
>
>
>--
>Iñigo Ortiz de Urbina Cazenave
>http://www.twitter.com/ioc32

=

dmesg -a | less showed nothing

/var/log/console.log showed nothing

/var/log/messages showed nothing



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: syslog-ng logging stopped

2011-03-12 Thread Len Conrad


>-- Original Message --
>From: Iñigo Ortiz de Urbina 
>Date:  Fri, 11 Mar 2011 23:12:49 +0100
>
>>Whats in dmesg and /var/log/? You shared extensive and excellent
>>troubleshooting info but didnt spot none of these.
>>
>>Keep us updated im sure im not the only one puzzled :)
>>
>>On 3/11/11, Len Conrad  wrote:
>>> uname -a
>>> FreeBSD 7.0-RELEASE
>>>
>>> syslog-ng --version
>>> syslog-ng 2.0.10
>>>
>>> change date on syslog-ng.conf is  "Apr 20  2009"
>>>
>>> syslog-ng been running untouched for that long. Millions of lines/per day
>>> log from 10 source machine.
>>>
>>> about 00:20 today Friday,  all syslogging to syslog-ng stopped.
>>>
>>> sockstat -4 shows udp/tcp 514 listening
>>>
>>> chkrootkit  shows nothing wrong
>>>
>>> stop syslog-ng
>>>
>>> then pkg_delete, and then
>>>
>>> cd /usr/ports/sysutils/syslog-ng2
>>>
>>> make && make install
>>>
>>> start it,
>>>
>>> no change
>>>
>>> I rebooted the syslog server.  no change
>>>
>>> trafshow -i bce0 -n
>>>
>>> then filter 514
>>>
>>> ... shows 100KBs arriving from our syslog clients.
>>>
>>> tshark capture "port 514" on syslog-ng box shows plenty of traffic arriving
>>> with untouched pf rules active,
>>>
>>> pfctl -d   no change so pfctl -e
>>>
>>> df shows plenty of disk space for /var
>>>
>>> suggestions?
>>>
>>> Len
>>>
>>>
>>> ___
>>> freebsd-questions@freebsd.org mailing list
>>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>>>
>>
>>
>>-- 
>>Iñigo Ortiz de Urbina Cazenave
>>http://www.twitter.com/ioc32
>
>=
>
>dmesg -a | less showed nothing
>
>/var/log/console.log showed nothing
>
>/var/log/messages showed nothing

btw, I later replaced syslog-ng with syslogd, listening UDP:514.  no lines in 
messages, maillog.

Len






>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: syslog-ng logging stopped

2011-03-12 Thread Len Conrad
At 03:52 PM 3/12/2011, you wrote:
>That probably means that it's not syslog-ng causing the problems.

right

>Maybe some firewall rule?

I run pf.  pfctl -d didn't allow logging to start.  trafshow and tshark showed
all the traffic hitting port 514, not being blocked.

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: syslog-ng logging stopped

2011-03-13 Thread Len Conrad

>May it be a permission issue (fs or /dev/kmem or the like)?

syslog-ng or syslogd as root doesn't enable log writing.

> Can you
>manually start syslog-ng or syslogd with verbose flags enabled?

I edited rc.d/syslog-ng   script to add -d

of course, nothing is logged, so -d doesn't help.

Len



>Man, you really stumbled upon something weird!
>
>On 3/12/11, Len Conrad  wrote:
>> At 03:52 PM 3/12/2011, you wrote:
>>>That probably means that it's not syslog-ng causing the problems.
>>
>> right
>>
>>>Maybe some firewall rule?
>>
>> I run pf.  pfctl -d didn't allow logging to start.  trafshow and tshark
>> showed
>> all the traffic hitting port 514, not being blocked.
>>
>> Len
>>
>>
>>
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>>
>
>
>-- 
>Iñigo Ortiz de Urbina Cazenave
>http://www.twitter.com/ioc32



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


bind 98 make fails

2011-03-16 Thread Len Conrad
FreeBSD 8.2 i386  

kern dev distribution

as 42-bit VM on host ESXi 4.1

portsnap fetch extract

cd /usr/ports/dns/bind98

make

Options for bind98 9.8.0   |
| 
++ |
[X] SSL Building without OpenSSL removes DNSSEC | |
[X] LINKS   Create conf file symlinks in /usr/local | |
[X] XML Support for xml statistics output   | |
[X] IDN Add IDN support to dig, host, etc.  | |
[X] REPLACE_BASEReplace base BIND with this version | |
[ ] LARGE_FILE  64-bit file support | |
[X] SIGCHASEdig/host/nslookup will do DNSSEC validation | |
[X] IPV6IPv6 Support (autodetected by default)  | |
[X] THREADS Compile with thread support | |
[ ] DLZ_POSTGRESQL  DLZ Postgres driver | |
[ ] DLZ_MYSQL   DLZ MySQL driver (single-threaded BIND) | |
[ ] DLZ_BDB DLZ BDB driver  | |
[ ] DLZ_LDAPDLZ LDAP driver | |
[ ] DLZ_FILESYSTEM  DLZ filesystem driver   | |
[ ] DLZ_STUBDLZ stub driver 

make: don't know how to make /usr/ports/dns/bind98

/work/.build_done.bind98._usr_local. Stop
*** Error code 2

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


tcp/ip failures with fbsd 8.2 386 on ESX 4.1

2011-03-19 Thread Len Conrad

FreeBSD 8.2 32-bit
ESXi 4.1
em0 driver to the ESXi Intel emulation
syslog-ng 2.0.10

em0: flags=8943 metric 0 mtu 
1500
options=9b
ether 00:50:56:90:00:01
inet a.b.c.85 netmask 0xffe0 broadcast a.b.c.95
media: Ethernet autoselect (1000baseT )
status: active

We've be running FreeBSD 7.x for a couple of years on ESXi 4.0 and 4.1 with no 
problems.

We're having tcp/ip failures with 8.2 as syslog-ng server.  trafshow shows 
aggregate port 514 traffic hitting peaks of about 25K char/sec.

After sometimes many hours of the syslog-ng VM server running well, 

monit from other machines signals port 514 is down, up, down, up.

this is confirmed by other machines with

nmap a.b.c.d -p 514 -sU

... showing closed, open, closed, etc.

syslog-ng logging for all syslog clients stops more or less simultaneously.

trafshow filtered for port 514 shows udp packets arriving, but instead of 
showing the source and destinations by PTR domain name, it switches to showing 
their IPs.

to test the external DNS, on the syslog-ng VM, we try

dig @recursive.server -x a.b.c.d

and get no response.  Other machines query the recursive server successfully.

Without rebooting the FreeBSD VM, we do

/etc/rc.d/netif restart
/etc/rc.d/routing restart

which allows full operation.

dmesg and messages show no errors.

Suggestions?

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: tcp/ip failures with fbsd 8.2 386 on ESX 4.1

2011-03-19 Thread Len Conrad

>Maybe try disabling dns lookups within syslog-ng?
>
>- Original Message -
>From: Len Conrad [mailto:lcon...@go2france.com]
>Sent: Saturday, March 19, 2011 05:40 PM
>To: freebsd-questions@freebsd.org 
>Subject: tcp/ip failures with fbsd 8.2 386 on ESX 4.1
>
>
>FreeBSD 8.2 32-bit
>ESXi 4.1
>em0 driver to the ESXi Intel emulation
>syslog-ng 2.0.10
>
>em0: flags=8943 metric 0 mtu 
>1500
>options=9b
>ether 00:50:56:90:00:01
>inet a.b.c.85 netmask 0xffe0 broadcast a.b.c.95
>media: Ethernet autoselect (1000baseT )
>status: active
>
>We've be running FreeBSD 7.x for a couple of years on ESXi 4.0 and 4.1 with no 
>problems.
>
>We're having tcp/ip failures with 8.2 as syslog-ng server.  trafshow shows 
>aggregate port 514 traffic hitting peaks of about 25K char/sec.
>
>After sometimes many hours of the syslog-ng VM server running well, 
>
>monit from other machines signals port 514 is down, up, down, up.
>
>this is confirmed by other machines with
>
>nmap a.b.c.d -p 514 -sU
>
>... showing closed, open, closed, etc.
>
>syslog-ng logging for all syslog clients stops more or less simultaneously.
>
>trafshow filtered for port 514 shows udp packets arriving, but instead of 
>showing the source and destinations by PTR domain name, it switches to showing 
>their IPs.
>
>to test the external DNS, on the syslog-ng VM, we try
>
>dig @recursive.server -x a.b.c.d
>
>and get no response.  Other machines query the recursive server successfully.
>
>Without rebooting the FreeBSD VM, we do
>
>/etc/rc.d/netif restart
>/etc/rc.d/routing restart
>
>which allows full operation.
>
>dmesg and messages show no errors.
>
>Suggestions?
>
>Len

the failure just happened again.  this time ssh sessions, like the one running 
trafshow, are cut off.  ssh again gets "connection refused"

on another machine running a looping, logging script of

nmap a.b.c.d -p 514 -sU

show port 514 open

It seems like the tcp/ip or em0 driver gets screwed up.

Len




>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
>
>
>
>
>
>
>
>"This email is intended to be reviewed by only the intended recipient
> and may contain information that is privileged and/or confidential.
> If you are not the intended recipient, you are hereby notified that
> any review, use, dissemination, disclosure or copying of this email
> and its attachments, if any, is strictly prohibited.  If you have
> received this email in error, please immediately notify the sender by
> return email and delete this email from your system."
>
>
>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


ELF interpreter /libexec/ld-elf.so.1 not found

2011-04-27 Thread Len Conrad
FreeBSD in a jail at Johncompanies.com

uname -a
FreeBSD 7.2-RELEASE-p1-jc2 FreeBSD 7.2-RELEASE-p1-jc2 #0: Thu Jun 18 15:16:49 
PDT 2009 Johncompanies.com:/usr/obj/usr/src/sys/jail8  amd64

portstap fetch update

nmap installed with make && make install

nmap a.b.c.d -p 143 -sU

ELF interpreter /libexec/ld-elf.so.1 not found
Abort

locate ld-elf.so.1

/libexec/ld-elf.so.1
/usr/libexec/ld-elf.so.1
/usr/share/man/man1/ld-elf.so.1.1.gz

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


portsnap broken

2011-12-04 Thread Len Conrad
Never had a problem before

Freebsd 8.2

a couple weeks ago, on virgin 8.2, initial run of 

portsnap fetch extract

... ran great, and a couple of updates since then, also.  

but today:

# portsnap fetch
Looking up portsnap.FreeBSD.org mirrors... 5 mirrors found.
Fetching snapshot tag from portsnap1.FreeBSD.org... done.
Fetching snapshot metadata... done.
Updating from Sun Dec  4 15:26:46 CET 2011 to Mon Dec  5 02:05:11 CET 2011.
Fetching 4 metadata patches... done.
Applying metadata patches... done.
Fetching 0 metadata files... done.
Fetching 27 patches.1020... done.
Applying patches... done.
Fetching 2 new ports or files... done.


# portsnap update
Removing old files and directories... done.
Extracting new files:
/usr/ports/MOVED
/usr/ports/Mk/bsd.sites.mk
/usr/ports/Mk/bsd.wx.mk
/usr/ports/archivers/rpm4/
/usr/ports/astro/google-earth/
/usr/ports/astro/match/
/usr/ports/astro/xearth/
/usr/ports/astro/xtide/
/usr/ports/audio/audacity-devel/
/usr/ports/audio/thunar-media-tags-plugin/
/usr/ports/cad/brlcad/
/usr/ports/chinese/Makefile
/usr/ports/chinese/opencc/
/usr/ports/comms/Makefile
/usr/ports/comms/p5-SMS-Send-NexmoUnicode/
/usr/ports/converters/enca/
/usr/ports/databases/msql3/
/usr/ports/databases/p5-DBD-ODBC/
/usr/ports/databases/p5-DBD-SQLite/
/usr/ports/databases/p5-DBIx-Inspector/
/usr/ports/databases/pecl-rrd/
/usr/ports/databases/phpmyadmin/
/usr/ports/databases/postgresql-jdbc/
/usr/ports/databases/redis/
/usr/ports/deskutils/gtg/
/usr/ports/devel/Makefile
/usr/ports/devel/bglibs/
/usr/ports/devel/binutils/
/usr/ports/devel/fistgen/
/usr/ports/devel/glui/
/usr/ports/devel/imake/
/usr/ports/devel/libdombey/
/usr/ports/devel/mdds/
/usr/ports/devel/mingw32-libffi/
/usr/ports/devel/mingw32-libyaml/
/usr/ports/devel/mingw32-zlib/
/usr/ports/devel/p4v/
/usr/ports/devel/p5-App-cpanminus/
/usr/ports/devel/p5-CHI/
/usr/ports/devel/p5-Config-Model/
/usr/ports/devel/p5-FindBin-libs/
/usr/ports/devel/p5-Sepia/
/usr/ports/devel/p5-Test-SharedFork/
/usr/ports/devel/py-urwid/
/usr/ports/devel/rubygem-chronic/
/usr/ports/devel/rubygem-columnize/
/usr/ports/devel/rubygem-devise/
/usr/ports/devel/rubygem-gemcutter/
/usr/ports/devel/rubygem-hoe/
/usr/ports/devel/rubygem-jammit/
/usr/ports/devel/rubygem-json/
/usr/ports/devel/rubygem-json_pure/
/usr/ports/devel/rubygem-little_plugger/
/usr/ports/devel/rubygem-minitest/
/usr/ports/devel/rubygem-multi_json/
/usr/ports/devel/rubygem-sequel/
/usr/ports/devel/rubygem-sexp_processor/
/usr/ports/devel/rubygem-tins/
/usr/ports/devel/valgrind/
/usr/ports/devel/websvn/
/usr/ports/devel/zziplib/
/usr/ports/dns/dnsjava/
/usr/ports/dns/rubygem-dnsruby/
/usr/ports/editors/paredit-mode.el/
/usr/ports/emulators/qemu-devel/
/usr/ports/emulators/virtualbox-ose-additions/
/usr/ports/emulators/virtualbox-ose-kmod/
/usr/ports/emulators/virtualbox-ose/
/usr/ports/emulators/wine/
/usr/ports/ftp/R-cran-RCurl/
files/260946d9401adc15de38730058d50c9798d7cb6a547da435f7308f9fb0515670.gz not 
found -- snapshot corrupt.

Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Client Authentication

2013-03-24 Thread Len Conrad
At 11:22 PM 3/23/2013, you wrote:
>I am not sure this is the best place to ask this, but I didn't see any other 
>maillists that seemed more appropriate.
>
>Basically, my outgoing mail server is being systematically attacked to try 
>passwords looking for one that works.

brute force attacks are easily blocked with pf's connection rate-limiting.  
Because our mail users are not world travellers, we use PF to block sending IPs 
by country. 


Any IP that TCP connects x times in y minutes to your mail server gets blocked 
for z hours.

Cracked passwords on our mail users seem to be stolen by infections or phished 
rather than obtained by brute force.

Our sender rate-limiting has three levels

Our outbound server (postfix + postfwd) has per-sender rate limiting, which has 
totally stopped the really high volume password cracks.  

We have 3 levels of rate limiting.

1. 2000 msgs limit for every sender.  We chose 2000 by identifying a handful of 
legit habitual senders of up to 1500 msgs, who are whitelisted from 
rate-limiting for the following levels.

2. 700 msgs limit for senders who habitually send up to 500 msgs, who are 
whitelisted from the following limit.

3  50 msgs limit for all senders who are not whitelisted above.

Rate limiting causes the msgs to be held, not discarded or rejected, with an 
alert msg to the mail admin, who then inspects the held msgs for releasing or 
deleting.

All the cert and PIN stuff appears to be theoretical suggestions not based on 
experience, since while effective, it would be a practical nightmare of 
training and maintenance.

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


perl port 5.8.2 won't install?

2004-06-23 Thread Len Conrad
fbsd 4.10 release
# cd /usr/ports/lang/perl5.8
# make && make install
===>  Vulnerability check disabled
>> perl-5.8.2.tar.gz doesn't seem to exist in /usr/ports/distfiles/.
>> Attempting to fetch from 
http://www.cpan.dk/CPAN/modules/by-module/../../src/.
perl-5.8.2.tar.gz 100% of   11 MB  264 kBps 00m00s
>> BSDPAN-5.8.0_1.tar.gz doesn't seem to exist in /usr/ports/distfiles/.
>> Attempting to fetch from 
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tobez/.
BSDPAN-5.8.0_1.tar.gz 100% of 6338  B   36 kBps
===>  Extracting for perl-5.8.2_5
>> Checksum OK for perl-5.8.2.tar.gz.
>> Checksum OK for BSDPAN-5.8.0_1.tar.gz.
===>  Patching for perl-5.8.2_5
===>  Applying FreeBSD patches for perl-5.8.2_5
8 out of 8 hunks failed--saving rejects to ext/Opcode/Safe.pm.rej
>> Patch patch-Safe.pm failed to apply cleanly.
>> Patch(es) patch-Install.pm patch-MM_Unix.pm applied cleanly.
*** Error code 1

the .rej file contains:
# less /usr/ports/lang/perl5.8/work/perl-5.8.2/ext/Opcode/Safe.pm.rej
***
*** 3,9 
  use 5.003_11;
  use strict;
- our $VERSION = "2.07";
  use Carp;
--- 3,9 
  use 5.003_11;
  use strict;
+ $Safe::VERSION = "2.09";
  use Carp;
***
*** 47,53 
  # the whole glob *_ rather than $_ and @_ separately, otherwise
  # @_ in non default packages within the compartment don't work.
  $obj->share_from('main', $default_share);
- Opcode::_safe_pkg_prep($obj->{Root});
  return $obj;
  }
--- 47,53 
  # the whole glob *_ rather than $_ and @_ separately, otherwise
  # @_ in non default packages within the compartment don't work.
  $obj->share_from('main', $default_share);
+ Opcode::_safe_pkg_prep($obj->{Root}) if($Opcode::VERSION > 1.04);
  return $obj;
  }
***
*** 155,161 
  my $no_record = shift || 0;
  my $root = $obj->root();
  croak("vars not an array ref") unless ref $vars eq 'ARRAY';
-   no strict 'refs';
  # Check that 'from' package actually exists
  croak("Package \"$pkg\" does not exist")
unless keys %{"$pkg\::"};
--- 155,161 
  my $no_record = shift || 0;
  my $root = $obj->root();
  croak("vars not an array ref") unless ref $vars eq 'ARRAY';
+ no strict 'refs';
  # Check that 'from' package actually exists
  croak("Package \"$pkg\" does not exist")
unless keys %{"$pkg\::"};
***
*** 190,196 
  sub share_redo {
  my $obj = shift;
  my $shares = \%{$obj->{Shares} ||= {}};
-   my($var, $pkg);
  while(($var, $pkg) = each %$shares) {
# warn "share_redo $pkg\:: $var";
$obj->share_from($pkg,  [ $var ], 1);
--- 190,196 
  sub share_redo {
  my $obj = shift;
  my $shares = \%{$obj->{Shares} ||= {}};
+ my($var, $pkg);
  while(($var, $pkg) = each %$shares) {
# warn "share_redo $pkg\:: $var";
$obj->share_from($pkg,  [ $var ], 1);
***
*** 214,224 
  # Create anon sub ref in root of compartment.
  # Uses a closure (on $expr) to pass in the code to be executed.
  # (eval on one line to keep line numbers as expected by caller)
-   my $evalcode = sprintf('package %s; sub { eval $expr; }', $root);
  my $evalsub;
-   if ($strict) { use strict; $evalsub = eval $evalcode; }
-   else {  no strict; $evalsub = eval $evalcode; }
  return Opcode::_safe_call_sv($root, $obj->{Mask}, $evalsub);
  }
--- 214,224 
  # Create anon sub ref in root of compartment.
  # Uses a closure (on $expr) to pass in the code to be executed.
  # (eval on one line to keep line numbers as expected by caller)
+ my $evalcode = sprintf('package %s; sub { @_ = (); eval $expr; }', 
$root);
  my $evalsub;

+ if ($strict) { use strict; $evalsub = eval $evalcode; }
+ else {  no strict; $evalsub = eval $evalcode; }
  return Opcode::_safe_call_sv($root, $obj->{Mask}, $evalsub);
  }
***
*** 228,234 
  my $root = $obj->{Root};
  my $evalsub = eval
-   sprintf('package %s; sub { do $file }', $root);
  return Opcode::_safe_call_sv($root, $obj->{Mask}, $evalsub);
  }
--- 228,234 
  my $root = $obj->{Root};
  my $evalsub = eval
+   sprintf('package %s; sub { @_ = (); do $file }', $root);
  return Opcode::_safe_call_sv($root, $obj->{Mask}, $evalsub);
  }
***
*** 383,390 
  This is almost identical to exporting variables using the L
  module.
- Each NAME must be the B of a variable, typically with the leading
- type identifier included. A bareword is treated as a function name.
  Examples of legal names are '$foo' for a scalar, '@foo' for an
  array, '%foo' for a hash, '&foo' or 'foo' for a subroutine and '*foo'
--- 383,391 
  This is almost identical to exporting variables using the L
  module.
+ Each NAME must be the B of a non-lexical variable, typically
+ with the leading type identif

Re: perl port 5.8.2 won't install?

2004-06-23 Thread Len Conrad

How did you update your ports collection?
when running sysintall "upgrade" from cdrom to go from 4.7 to 4.10.
  These are probably stale
files that should/would have been removed with a correctly updated
collection.
ok, I'll have a go at refreshing the ports, thanks
Len
_
http://MenAndMice.com/DNS-training : Denver; NYC; San Jose
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Removing thousands of files using rm

2004-07-06 Thread Len Conrad

I often have the need to remove hundreds or even thousands of files from a
single directory (very often). Using rm, I usually get:
pearl# rm -rvf *
/bin/rm: Argument list too long.
man xargs
Len
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: DNS server

2004-07-11 Thread Len Conrad

No, it doesn't.  I can successfully perform a whois from here on your domain,
but an nslookup/dig both fail.  Give it 72 hours to propagate across the net.
propagation is a bogus idea when applied to DNS.  Like WMD and "immediate 
threat" when applied to Iraq.

As soon as the delegation and glue data for domain.tld is present in the 
.tld servers, that data is instantaneously available across all of Internet.

dig @NS_auth_for_tld domain.tld  any
Forget about whois data, it is operationally irrelevant for DNS 
operation.  whois protocol with whois servers, dns protocol with dns 
servers, ne'ver the twain meet.

Len
_
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: DNS server

2004-07-11 Thread Len Conrad

Perhaps you need to do some research on the subject.
perhaps you need to clarify your vagary 
There are a series of DNS systems
???
For a public domain.tld, the only two servers involved are :
1. the servers authoritative for .tld to publish the delegation and glue 
records for domain.tld.

2. the servers authoritative for domain.tld to answer authoritatively.
Period. There are NO other servers involved, nor is there any "propagation".
a domain needs to be added to before it will function correctly.
This is known as propagation.
the misnomer propagation is used by people who think DNS data needs time to 
be available, to "propagate", over several days or a week, for all of 
Internet.  This is pure BS. There is no such concept in DNS.

Len
_
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


buildup of Windows time_wait talking to fbsd 4.10

2005-01-10 Thread Len Conrad
We have a windows mailserver that relays its outbound to a fbsd 
gateway.  We changed to a different fbsd gateway running 4.10. Windows then 
began having trouble sending to 4.10.  Windows "netstat -an" shows  dozens 
of lines like this:

 source IP  desitination IP
==
  TCP10.1.16.3:1403 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1407 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1415 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1419 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1435 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1462 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1470 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1473 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1478 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1493 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1504 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1507 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1508 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1521 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1526 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1546 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1550 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1568 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1571 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1589 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1592 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1616 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1620 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1629 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1644 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1647 192.168.200.59:25  TIME_WAIT
  TCP10.1.16.3:1654 192.168.200.59:25  TIME_WAIT
Eventually, the windows SMTP logs line like "cannot connect to remote IP" 
or "address already in use" because no local tcp/ip sockets are available, 
we think.

The new gateway/fbsd 4.10 "sockstat -4" shows no corresponding tcp 
connections when the Windows server is showing as above.  On the fbsd 4.10 
machines, smtp logs, syslog, and dmesg show no errors.

We switch the windows box to smtp gateway towards the old box/fbsd 4.7, all 
is cool.

Suggestions with how to proceed debugging, please.
I'm trying to get the dmesg.boot for the 4.7 and 4.10 boxes now, sorry.
Len
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: buildup of Windows time_wait talking to fbsd 4.10

2005-01-10 Thread Len Conrad

Just off the top of my head...
You mentioned the freebsd machine is the gateway.  Do you have a firewall 
on the host blocking connections from the windows machine?
a forgotten detail is that the windows machine sends just fine to the 4.10 
gateway for a few minutes, but the time_wait inevitably builds up, so smtp 
access from windows to either gateway is ok.

  Do you have a different kernel configuration between 4.7 and 4.10?
both GENERIC
 i.e. do you have something like ipdivert, etc in the kernel on one box 
and not the other? Can the windows machine ping the ip 192.168.200.59 as 
its a different class C?
sure, basic connectivity is ok.
Len
_
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: buildup of Windows time_wait talking to fbsd 4.10

2005-01-11 Thread Len Conrad

We have a windows mailserver that relays its outbound to a fbsd 
gateway.  We changed to a different fbsd gateway running 4.10. Windows 
then began having trouble sending to 4.10.  Windows "netstat -an" 
shows  dozens of lines like this:

source IP  desitination IP
==
 TCP10.1.16.3:1403 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1407 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1415 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1419 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1435 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1462 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1470 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1473 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1478 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1493 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1504 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1507 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1508 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1521 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1526 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1546 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1550 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1568 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1571 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1589 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1592 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1616 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1620 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1629 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1644 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1647 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1654 192.168.200.59:25  TIME_WAIT
Eventually, the windows SMTP logs line like "cannot connect to remote IP" 
or "address already in use" because no local tcp/ip sockets are 
available, we think.

The new gateway/fbsd 4.10 "sockstat -4" shows no corresponding tcp 
connections when the Windows server is showing as above.  On the fbsd 
4.10 machines, smtp logs, syslog, and dmesg show no errors.

We switch the windows box to smtp gateway towards the old box/fbsd 4.7, 
all is cool.

Suggestions with how to proceed debugging, please.
I'm trying to get the dmesg.boot for the 4.7 and 4.10 boxes now, sorry.
Len
Just off the top of my head...
You mentioned the freebsd machine is the gateway.  Do you have a firewall 
on the host blocking connections from the windows machine?
the two mail servers that send outbound to the fbsd gateway are on the 
subnet, same rules.   the firewall is "outside" the subnets of the mail 
servers and gateways.

We haven't put a sniffer yet.  there's none on windows boxes, and tcpview 
on the fbsd boxes.

We going to start changing NIC model/brands.
thanks
Len
_
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


perl and berkeley

2004-05-26 Thread Len Conrad
Freebsd 4.8
1. installed a perl mod that decided it needed Perl 5.8.  that went ok, but 
now I've got

/usr/bin/perl  5.0
/usr/local/bin/perl   5.8
What is the command to get the sytstem to switch to defaulting to 5.8?
2. "pkg_add -r db3"  also went ok, but
perl -MCPAN -e 'install BerkeleyDB'
bombs out with:
/usr/bin/perl -I/usr/libdata/perl/5.00503/mach -I/usr/libdata/perl/5.00503 
/usr/libdata/perl/5.00503/ExtUtils/xsubpp -noprototypes -typemap 
/usr/libdata/perl/5.00503/ExtUtils/typemap -typemap typemap 
BerkeleyDB.xs >xstmp.c && mv xstmp.c BerkeleyDB.c
cc -c 
-I./libraries/4.2.41/include   -DVERSION=\"0.25\" 
-DXS_VERSION=\"0.25\" -DPIC -fpic 
-I/usr/libdata/perl/5.00503/mach/CORE  BerkeleyDB.c
BerkeleyDB.xs:74: #error db.h is from Berkeley DB 1.x - need at least 
Berkeley DB 2.6.4
*** Error code 1

thanks
Len
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: perl and berkeley

2004-05-26 Thread Len Conrad

which perl
This will show which perl executable you are actually calling.
the system perl:
# which perl
/usr/bin/perl

I guess typing:
/usr/local/bin/perl -MCPAN -e 'install BerkeleyDB'
that fails, too, same error
Len
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: perl and berkeley

2004-05-26 Thread Len Conrad

#v+
If you want this version of Perl to be used by default, please type
  use.perl port
#v-
# use.perl port
# which perl
/usr/bin/perl
Check out the rest of that file for more information.
ports are not installed, just specific pkgs
# pkg_info
...
db3-3.3.11,1The Berkeley DB package, revision 3
...
perl-5.8.0_4Practical Extraction and Report Language
and
/usr/local/bin/perl -MCPAN -e 'install BerkeleyDB'
end also with:
/usr/local/bin/perl5.8.4 /usr/local/lib/perl5/5.8.4/ExtUtils/xsubpp 
-noprototypes -typemap /usr/local/lib/perl5/5.8.4/ExtUtils/typemap -typemap 
typemap  BerkeleyDB.xs > BerkeleyDB.xsc && mv BerkeleyDB.xsc BerkeleyDB.c
cc -c  -I./libraries/4.2.41/include  -DHAS_FPSETMASK -DHAS_FLOATINGPOINT_H 
-fno-strict-aliasing -I/usr/local/include 
-O-DVERSION=\"0.25\"  -DXS_VERSION=\"0.25\" -DPIC -fPIC 
"-I/usr/local/lib/perl5/5.8.4/i386-freebsd/CORE"   BerkeleyDB.c
BerkeleyDB.xs:74: #error db.h is from Berkeley DB 1.x - need at least 
Berkeley DB 2.6.4
*** Error code 1

Len
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: perl and berkeley

2004-05-27 Thread Len Conrad

$ls -alT perl*
lrwxr-xr-x  1 root  wheel 19 Mar 20 15:25:53 2004 perl@ -> 
/usr/local/bin/perl
...
lrwxr-xr-x  1 root  wheel 19 Mar 20 15:25:53 2004 perl5.8.2@ -> 
/usr/local/bin/perl
...
I have the same:
# ll /usr/bin/perl*
lrwxr-xr-x  1 root  wheel 19 May 26 20:49 /usr/bin/perl@ -> 
/usr/local/bin/perl
-r-xr-xr-x  2 root  wheel  10200 Apr 11 15:48 /usr/bin/perl5*
-r-xr-xr-x  2 root  wheel  10200 Apr 11 15:48 /usr/bin/perl5.00503*
lrwxr-xr-x  1 root  wheel 19 May 26 20:49 /usr/bin/perl5.8.0@ -> 
/usr/local/bin/perl
-r-xr-xr-x  1 root  wheel  31723 Apr 11 15:48 /usr/bin/perlbug*
-r-xr-xr-x  1 root  wheel  26305 Apr 11 15:48 /usr/bin/perlcc*
-r-xr-xr-x  1 root  wheel  16807 Apr 11 15:48 /usr/bin/perldoc*

# /usr/local/bin/perl -v
This is perl, v5.8.4 built for i386-freebsd
so the 5.8 is now the default version, good, 1 of 2 problems solved.
It sure looks like the db3 pkg install is screwing up since
perl -MCPAN -e 'install BerkeleyDB'
... still gives:
BerkeleyDB.xs:74: #error db.h is from Berkeley DB 1.x - need at least 
Berkeley DB 2.6.4
*** Error code 1

I've deleted and re-installed that db3 pkg, but still get the same error.
thanks
Len
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: perl and berkeley

2004-05-28 Thread Len Conrad

> perl -MCPAN -e 'install BerkeleyDB'
>
> ... still gives:
>
> BerkeleyDB.xs:74: #error db.h is from Berkeley DB 1.x - need at least
> Berkeley DB 2.6.4
> *** Error code 1
>
> I've deleted and re-installed that db3 pkg, but still get the same error.
my first try would probably be to remove all CPAN modules installed
under the old perl, and reinstall them.  Then try installing that DB.
However, wiser heads may have a better clue.
Sounds like a good plan, but MCPAN doesn't seem to support uninstall of 
modules.  "find" does show where modules are installed to uninstall them 
manually.

I see MCPANPLUS supports uninstall.  Dammit, this "simple" project of 
getting PERL to talk to db3 is like the ball of string.

thanks
Len
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


(no subject)

2010-10-04 Thread Len Conrad
installed:

Python 2.7 (r27:82500, Sep 30 2010, 16:50:36)


cd /usr/ports/www/py-django11

fails:


==
WARNING: The C extension could not be compiled, speedups are not enabled.
Plain-Python installation succeeded.
==
===>  Installing for py27-MarkupSafe-0.11
===>   py27-MarkupSafe-0.11 depends on file: /usr/local/bin/easy_install-2.7 - 
found
===>   py27-MarkupSafe-0.11 depends on file: /usr/local/bin/python2.7 - found
===>   Generating temporary packing list
===>  Checking if textproc/py-MarkupSafe already installed
running easy_install
error: Not a URL, existing file, or requirement spec: 
'/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/dist/MarkupSafe-0.11-py2.7-freebsd-8.1-RELEASE-i386.egg'
*** Error code 1

Stop in /usr/ports/textproc/py-MarkupSafe.
*** Error code 1

Stop in /usr/ports/devel/py-Jinja2.
*** Error code 1

Stop in /usr/ports/devel/py-Jinja2.
*** Error code 1

Stop in /usr/ports/textproc/py-sphinx.
*** Error code 1

Stop in /usr/ports/www/py-django11.
*** Error code 1

Stop in /usr/ports/www/py-django11.

Seems like the path is wrong above compared to the ports tree:

mx1# find /usr/ports/ -iname "*markupsafe*" | less
/usr/ports/devel/py-Jinja2/work/Jinja2-2.5.2/jinja2/_markupsafe
/usr/ports/devel/py-Jinja2/work/Jinja2-2.5.2/build/lib/jinja2/_markupsafe
/usr/ports/textproc/py-MarkupSafe
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/markupsafe
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/MarkupSafe.egg-info
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/lib.freebsd-8.1-RELEASE-i386/markupsafe
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/temp.freebsd-8.1-RELEASE-i386-2.7/markupsafe
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/build/lib/markupsafe
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/dist/MarkupSafe-0.11-py2.7.egg
/usr/ports/textproc/py-MarkupSafe/work/.extract_done.MarkupSafe._usr_local
/usr/ports/textproc/py-MarkupSafe/work/.patch_done.MarkupSafe._usr_local
/usr/ports/textproc/py-MarkupSafe/work/.configure_done.MarkupSafe._usr_local
/usr/ports/textproc/py-MarkupSafe/work/.build_done.MarkupSafe._usr_local
/usr/ports/distfiles/MarkupSafe-0.11.tar.gz



===

the tkinter fails, too  (I'm trying to work thru thinkpython.pdf)


cd /usr/ports/x11-toolkits/py-tkinter


===>   Returning to build of libX11-1.3.3_1,1
===>   libX11-1.3.3_1,1 depends on file: /usr/local/bin/autoconf-2.67 - found
===>   libX11-1.3.3_1,1 depends on package: libtool>=2.2 - found
===>   libX11-1.3.3_1,1 depends on executable: pkg-config - found
===>  Configuring for libX11-1.3.3_1,1
configure.ac:5: warning: AC_INIT: not a literal: 
https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
configure.ac:5: warning: AC_INIT: not a literal: 
https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
configure.ac:5: warning: AC_INIT: not a literal: 
https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
configure:14185: error: possibly undefined macro: AS_MESSAGE_LOG_FDdnl
  If this token and others are legitimate, please use m4_pattern_allow.
  See the Autoconf documentation.
*** Error code 1

Stop in /usr/ports/x11/libX11.
*** Error code 1

Stop in /usr/ports/x11-toolkits/tk85.
*** Error code 1

Stop in /usr/ports/x11-toolkits/tk85.
*** Error code 1

Stop in /usr/ports/x11-toolkits/py-tkinter.


Thanks
Len 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Problems installing django and py-tkinter

2010-10-04 Thread Len Conrad
webmail ate my subject


-- Original Message --
From: "Len Conrad" 
Reply-To: lcon...@go2france.com
Date:  Mon,  4 Oct 2010 21:47:23 +0200

>installed:
>
>Python 2.7 (r27:82500, Sep 30 2010, 16:50:36)
>
>
>cd /usr/ports/www/py-django11
>
>fails:
>
>
>==
>WARNING: The C extension could not be compiled, speedups are not enabled.
>Plain-Python installation succeeded.
>==
>===>  Installing for py27-MarkupSafe-0.11
>===>   py27-MarkupSafe-0.11 depends on file: /usr/local/bin/easy_install-2.7 - 
>found
>===>   py27-MarkupSafe-0.11 depends on file: /usr/local/bin/python2.7 - found
>===>   Generating temporary packing list
>===>  Checking if textproc/py-MarkupSafe already installed
>running easy_install
>error: Not a URL, existing file, or requirement spec: 
>'/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/dist/MarkupSafe-0.11-py2.7-freebsd-8.1-RELEASE-i386.egg'
>*** Error code 1
>
>Stop in /usr/ports/textproc/py-MarkupSafe.
>*** Error code 1
>
>Stop in /usr/ports/devel/py-Jinja2.
>*** Error code 1
>
>Stop in /usr/ports/devel/py-Jinja2.
>*** Error code 1
>
>Stop in /usr/ports/textproc/py-sphinx.
>*** Error code 1
>
>Stop in /usr/ports/www/py-django11.
>*** Error code 1
>
>Stop in /usr/ports/www/py-django11.
>
>Seems like the path is wrong above compared to the ports tree:
>
>mx1# find /usr/ports/ -iname "*markupsafe*" | less
>/usr/ports/devel/py-Jinja2/work/Jinja2-2.5.2/jinja2/_markupsafe
>/usr/ports/devel/py-Jinja2/work/Jinja2-2.5.2/build/lib/jinja2/_markupsafe
>/usr/ports/textproc/py-MarkupSafe
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/markupsafe
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/MarkupSafe.egg-info
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/lib.freebsd-8.1-RELEASE-i386/markupsafe
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/temp.freebsd-8.1-RELEASE-i386-2.7/markupsafe
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/build/lib/markupsafe
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/dist/MarkupSafe-0.11-py2.7.egg
>/usr/ports/textproc/py-MarkupSafe/work/.extract_done.MarkupSafe._usr_local
>/usr/ports/textproc/py-MarkupSafe/work/.patch_done.MarkupSafe._usr_local
>/usr/ports/textproc/py-MarkupSafe/work/.configure_done.MarkupSafe._usr_local
>/usr/ports/textproc/py-MarkupSafe/work/.build_done.MarkupSafe._usr_local
>/usr/ports/distfiles/MarkupSafe-0.11.tar.gz
>
>
>
>===
>
>the tkinter fails, too  (I'm trying to work thru thinkpython.pdf)
>
>
>cd /usr/ports/x11-toolkits/py-tkinter
>
>
>===>   Returning to build of libX11-1.3.3_1,1
>===>   libX11-1.3.3_1,1 depends on file: /usr/local/bin/autoconf-2.67 - found
>===>   libX11-1.3.3_1,1 depends on package: libtool>=2.2 - found
>===>   libX11-1.3.3_1,1 depends on executable: pkg-config - found
>===>  Configuring for libX11-1.3.3_1,1
>configure.ac:5: warning: AC_INIT: not a literal: 
>https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
>configure.ac:5: warning: AC_INIT: not a literal: 
>https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
>configure.ac:5: warning: AC_INIT: not a literal: 
>https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
>configure:14185: error: possibly undefined macro: AS_MESSAGE_LOG_FDdnl
>  If this token and others are legitimate, please use m4_pattern_allow.
>  See the Autoconf documentation.
>*** Error code 1
>
>Stop in /usr/ports/x11/libX11.
>*** Error code 1
>
>Stop in /usr/ports/x11-toolkits/tk85.
>*** Error code 1
>
>Stop in /usr/ports/x11-toolkits/tk85.
>*** Error code 1
>
>Stop in /usr/ports/x11-toolkits/py-tkinter.
>
>
>Thanks
>Len 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: vm ware

2011-01-19 Thread Len Conrad
=>Hi,
> I want to inquire if its possible to install freeBSD on vm ware?
> is there any live cd iso available?

I've had no problems installing FreeBSD 6,7,8 as VM into ESXi 4.1 hypervisor.

Latest success was using the VMWare cold converter .iso to virtualize a FreeBSD 
6.2 physical machine and export it to ESXi 4.1 as VM.

The trick that saves lot of pain and time post-virtualization was that we first 
edited /etc/fstab on the physical machine and replace the "sd" devices with 
"da" so FreeBSD kernel finds all the slices, then we shut it down to reboot 
with the cold converter.

Then we look via the VMWare console of the FreeBSD VM /var/run/dmesg.boot file 
to see what interface the hardware probe found and fix up /etc/rc.conf. Then

/etc/rc.d/netif restart
/etc/rc.d/routing restart

We are building a new VM with fbsd 8.1, but until then the 6.2 virtualization 
got us off an over-powered Pentium4 to an 8-core Xeon ESXi.

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


can a jail have link to outside of the jail?

2012-08-16 Thread Len Conrad

I have an ssh user who needs only to search some log files not in his jail. The 
jail required because I don't want the user seeing the rest the machine.  If 
the dirs were linked to his jail, would that work? 

What I'd really like is something like ftpchroot for but ssh.

suggestions?

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Problem with r-o access in jail

2012-08-21 Thread Len Conrad

Want a nullfs filesystem to be read-only for tech people to search-only maillog 
files.

host machine's files:

/var/log/mx1/maillog* files

the maillog files are all 644 and r bit is set all along the path


using ezjail

jail root is /var/jails

jail name is fixit

mkdir -p /var/jails/fixit/mx1

fixit/mx1 dir has 644 and r bit is set all along the path

mount_nullfs -o ro /var/log/mx1 /var/jails/fixit/mx1


"ezjail-admin console fixit"  as fixit jail root user


I add a user fixit:fixit


ssh logon to fixit jail's ip as  user fixit

ll /mx1

gives nothing but:

ls: maillog.45.bz2: Permission denied
ls: maillog.46.bz2: Permission denied
ls: maillog.47.bz2: Permission denied
ls: maillog.48.bz2: Permission denied
ls: maillog.49.bz2: Permission denied
ls: maillog.5.bz2: Permission denied
ls: maillog.50.bz2: Permission denied
ls: maillog.51.bz2: Permission denied



ezjail-admin console fixit 

...shows the  /mx1/maillog* files all to be 644

If move the jail fixit user from group fixit to group wheel, user fixit has 
access to /mx1/maillog* files.

suggestions?

thanks,
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


py-sqlalchemy install fails

2012-08-23 Thread Len Conrad
fbsd 9.0

py 2.7.3

cd /usr/ports/databases/py-sqlalchemy

make

ends with:

creating build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
copying lib/SQLAlchemy.egg-info/PKG-INFO -> 
build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
copying lib/SQLAlchemy.egg-info/SOURCES.txt -> 
build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
copying lib/SQLAlchemy.egg-info/dependency_links.txt -> 
build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
copying lib/SQLAlchemy.egg-info/not-zip-safe -> 
build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
copying lib/SQLAlchemy.egg-info/top_level.txt -> 
build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
creating dist
creating 'dist/SQLAlchemy-0.7.8-py2.7.egg' and adding 
'build/bdist.freebsd-9.0-RELEASE-i386/egg' to it
removing 'build/bdist.freebsd-9.0-RELEASE-i386/egg' (and everything under it)
***
WARNING: The C extension could not be compiled, speedups are not enabled.
Plain-Python build succeeded.
***


make install

...

building '_mysql' extension
cc -DNDEBUG -O2 -pipe -fno-strict-aliasing -O2 -pipe -fno-strict-aliasing -fPIC 
-Dversion_info=(1,2,3,'final',0) -D__version__=1.2.3 -I/usr/local/include/mysql 
-I/usr/local/include/python2.7 -c _mysql.c -o 
temp.freebsd-9.0-RELEASE-i386-2.7/_mysql.o -pipe -fno-strict-aliasing -g 
-DMY_PTHREAD_FASTMUTEX=1
In file included from pymemcompat.h:10,
 from _mysql.c:29:
/usr/local/include/python2.7/Python.h:166:17: error: pth.h: No such file or 
directory
In file included from _mysql.c:36:
/usr/local/include/mysql/my_config.h:422:1: warning: "HAVE_WCSCOLL" redefined
In file included from /usr/local/include/python2.7/Python.h:8,
 from pymemcompat.h:10,
 from _mysql.c:29:
/usr/local/include/python2.7/pyconfig.h:890:1: warning: this is the location of 
the previous definition
error: command 'cc' failed with exit status 1
*** Error code 1

Stop in /usr/ports/databases/py-MySQLdb.
*** Error code 1

Stop in /usr/ports/databases/py-MySQLdb.
*** Error code 1

Stop in /usr/ports/databases/py-sqlalchemy.
*** Error code 1

Stop in /usr/ports/databases/py-sqlalchemy.

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: promise sx4000

2002-12-25 Thread Len Conrad


i have promise sx4000 raid card and im trying to get it work with freebsd
5.0
so is there anyone who knows a driver for that card?


Promise told me they don't support FreeBSD.

There's no driver for the sx4000 and they won't provide the doc + board to 
develop one.

Len



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: promise sx4000

2002-12-25 Thread Len Conrad


and the doc only?


no doc at programmers level

yes, :((

Len



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: What are the SMTP rules for sending mail to FreeBSD

2002-12-28 Thread Len Conrad


Easier said than done.  I've been assigned 66.45.116.136/29 by the ISP.


.136 is not a power of 2 which is required for classless reverse 
delegation. It should be .132/29 or .140/29

I control DNS for quadtelecom.com, but I don't control the reverse 
lookup.  I'd like to know the exact algorithm in use, so that I can 
negotiate with my ISP.

For sub-Class C delegation, see the DNS & BIND book, 4th edition.

1. Your ISP creates a arbitrarily named node in the reverse domain and 
delegates the zone to you:

tabak.116.45.66.in-addr.arpa. NS ns1.quadtelecom.com.
tabak.116.45.66.in-addr.arpa. NS ns2.quadtelecom.com.

2. then for each ip in your tabak subzone he create a CNAME in his NS:

133.116.45.66.in-addr.arpa. CNAME 133.tabak.116.45.66.in-addr.arpa.
.
.
.
139.116.45.66.in-addr.arpa. CNAME 139.tabak.116.45.66.in-addr.arpa.

3. then in your NS:

133.tabak.116.45.66.in-addr.arpa. PTR name.what.ever.
.
.
.
139.tabak.116.45.66.in-addr.arpa. PTR hostname.some.dom.

The rule is that the parent domain's CNAME rdata field must, of course, be 
matched the child domain's PTR owner field.

For example, how are are hosts with multiple IP adresses handled?


put only one PTR per ip.

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: What are the SMTP rules for sending mail to FreeBSD

2002-12-28 Thread Len Conrad


>_450_Client_host_rejected:_cannot_find_your_hostname,_[66.45.116.138]
>

Your mail server is identifying itself as [66.45.116.138] instead of a
host with (valid) forward DNS records (hosts that do this are blocked
as a -- very effective -- anti-spam measure).  Fix your mail server to
identify itself as gatehouse.quadtelecom.com and you should get past
this filter.


"hostname" is postfix jargon for HELO hostname, so are you saying he must 
correct his helo hostname?

Unfortunately, postfix also uses the same phrase "cannot find your 
hostname" for the reject_unknown_client rejection of the envelope 
@sender.domain, where ip sending to postfix does not have matching PTR and 
A records.

Len



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: What are the SMTP rules for sending mail to FreeBSD

2002-12-29 Thread Len Conrad


ISTR Postfix replies with 450 to (almost) all errors by default.


And there are errors where you need to escalate the 4xx response to 554 to 
stop the sending MTA from re-trying for days, or just harvest the 4xx ip's 
to a new .map filean block with 554.

Postfix's new "sender address verification" is extremely effective in 
blocking crap that used to get through, but it always returns 4xx so your 
reject counts go through the roof as SAV 4xx rejects are re-tried 100's of 
times.  But, in fact, this is more of a resource consumption for the 
senders than it is on your MX.  And the advantage of keeping this crap out 
of your system outweighs the higher rate of repeated rejects.

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


how to restore /usr

2003-01-17 Thread Len Conrad
Trying to free up disk space, a user accidentally rm'd /usr instead of 
/usr/ports.

Starting with the cdrom, what is the best way to get the /usr tree back 
onto the disk?

thanks
Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: how to restore /usr

2003-01-17 Thread Len Conrad
/stand/sysinstall works

so what if we did

install additional dist sets  + just binary base distribution?

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Experiences with Adaptec 2400A?

2003-01-29 Thread Len Conrad
We are looking at this board for high-volume MX gateways.

Anybody have any comments from experience?

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Postfix & SpamAssassin

2003-02-01 Thread Len Conrad


Can Spamassassin work directly with Postfix?


yes, as a "content-filter", see the Spamassassin site, see the postfix site.

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: DNS question

2003-02-01 Thread Len Conrad


When a person does a dns lookup to the server and its not already cached, 
how does It find out the correct name server to use to find the ip?

The DNS navigates the DNS namespace until it finds a positive or negative 
answer, or the until DNS's that should have the answer fail to respond.

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


RE: DNS question

2003-02-01 Thread Len Conrad


Ahh okay, I understand that. Someone once told me the information is
already downloaded in a list, so the server doesn't have to contact
root all the time to get ns information. Is this not true anymore?


bind9 has the root-servers "hints zone" in its binary, but will use an 
external hints zone if listed in named.conf.

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: lsof

2002-09-18 Thread Len Conrad


>I don't know what I did differently but when I tried it just now, I see
>
> >> Attempting to fetch from ftp://vic.cc.purdue.edu/pub/tools/unix/lsof/NEW/.
>Receiving lsof_4.65B.freebsd.tar.gz (509943 bytes): 100%
>509943 bytes transferred in 17.6 seconds (28.29 kBps)
>
>I would try again.

mx1# pgk_add -r lsof
pgk_add: Command not found.
mx1# pkg_add -r lsof
Error: FTP Unable to get 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-4-stable/Latest/lsof.tgz: 
File unavailable (e.g., file not fo
und, no access)
pkg_add: unable to fetch 
`ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-4-stable/Latest/lsof.tgz' 
by URL


having installed ports with /stand/sysinstall 2 days ago:

mx1# cd /usr/ports

mx1# make search name=lsof
Port:   lsof-4.63.2
Path:   /usr/ports/sysutils/lsof
Info:   Lists information about open files (similar to fstat(1))
Maint:  [EMAIL PROTECTED]
Index:  sysutils
B-deps:
R-deps:

mx1# cd /usr/ports/sysutils/lsof
mx1# make && make install
 >> lsof_4.64G.freebsd.tar.gz doesn't seem to exist in /usr/ports/distfiles/.
 >> Attempting to fetch from ftp://vic.cc.purdue.edu/pub/tools/unix/lsof/.
fetch: lsof_4.64G.freebsd.tar.gz: File unavailable (e.g., file not found, 
no access)
 >> Attempting to fetch from ftp://vic.cc.purdue.edu/pub/tools/unix/lsof/NEW/.
fetch: lsof_4.64G.freebsd.tar.gz: File unavailable (e.g., file not found, 
no access)
 >> Attempting to fetch from ftp://ftp.cert.dfn.de/pub/tools/admin/lsof/.
fetch: lsof_4.64G.freebsd.tar.gz: File unavailable (e.g., file not found, 
no access)
 >> Attempting to fetch from ftp://ftp.cert.dfn.de/pub/tools/admin/lsof/NEW/.
fetch: lsof_4.64G.freebsd.tar.gz: File unavailable (e.g., file not found, 
no access)
 >> Attempting to fetch from 
ftp://ftp.auscert.org.au/pub/mirrors/vic.cc.purdue.edu/lsof/.
fetch: lsof_4.64G.freebsd.tar.gz: File unavailable (e.g., file not found, 
no access)
 >> Attempting to fetch from ftp://ftp.web.ad.jp/pub/UNIX/tools/lsof/.
fetch: lsof_4.64G.freebsd.tar.gz: Undefined error: 0
 >> Attempting to fetch from ftp://ftp.web.ad.jp/pub/UNIX/tools/lsof/NEW/.
fetch: lsof_4.64G.freebsd.tar.gz: Undefined error: 0
 >> Attempting to fetch from ftp://ftp.sunet.se/pub/unix/admin/lsof/.
fetch: lsof_4.64G.freebsd.tar.gz: File unavailable (e.g., file not found, 
no access)
 >> Attempting to fetch from ftp://ftp.sunet.se/pub/unix/admin/lsof/NEW/.
fetch: lsof_4.64G.freebsd.tar.gz: File unavailable (e.g., file not found, 
no access)
 >> Attempting to fetch from 
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/.
fetch: lsof_4.64G.freebsd.tar.gz: File unavailable (e.g., file not found, 
no access)
 >> Couldn't fetch it - please try to retrieve this
 >> port manually into /usr/ports/distfiles/ and try again.
*** Error code 1

for i in mtr ; do

the same.   4.6.2 has been a real pain in the @ss for ports and pkgs. I've 
never had FreeBSD going back to 1999 be so broken in ports and pkgs that I 
commonly install.

the other biggie is mtr, which I finally tricked into installing, only to have:

img10# mtr 66.64.14.18

Error opening terminal: vt100.

never had that one before, either.

ok, ok

portupgrade mtr

did nothing, but

portupgrade -f mtr

got me a working mtr.  :))

Looking forward to 4.7 !  :)

Len


www.menandmice.com/DNS-training : DNS Training
BIND8NT.MEIway.com: Secure config ; DNS and mail interactions
IMGate.MEIway.com : Free, proven config for anti-mail-abuse gateways


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



can't intall PERL module

2002-09-18 Thread Len Conrad

fbsd 4.6.2

perl -MCPAN -e 'install Date::Calc'

t/f029..ok
t/f030..ok
t/f031..ok
t/f032..ok
t/f033..ok
t/f034..Use of uninitialized value at t/f034.t line 332.
Use of uninitialized value at t/f034.t line 332.
FAILED tests 252-253
 Failed 2/259 tests, 99.23% okay
t/f035..ok
t/f036..ok
t/m001..ok
t/m002..ok
t/m003..ok
t/m004..ok
t/m005..ok
t/m006..FAILED tests 10-11
 Failed 2/33 tests, 93.94% okay
t/m007..ok
t/m008..ok
t/m009..ok
t/m010..ok
t/m011..ok
Failed Test  Status Wstat Total Fail  Failed  List of failed
---
t/f034.t2592   0.77%  252-253
t/m006.t 332   6.06%  10-11
Failed 2/48 test scripts, 95.83% okay. 4/2960 subtests failed, 99.86% okay.
*** Error code 2

Stop in /var/.cpan/build/Date-Calc-5.1.
   /usr/bin/make test -- NOT OK
Running make install
   make test had returned bad status, won't install without force

First time in several dozen times that this has failed.  3 or 4 other 
modules installed ok.

Suggestions?

Len



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: can't intall PERL module

2002-09-18 Thread Len Conrad


> >> (09.18.2002 @ 1445 PST): Len Conrad said, in 1.4K: <<
> > fbsd 4.6.2
> >
> > perl -MCPAN -e 'install Date::Calc'
>
>why do it that way?
>cd /usr/ports/devel/p5-Date-Calc && make install

because I've always done it the other way and it never failed

thanks  :))

Len




www.menandmice.com/DNS-training : DNS Training
BIND8NT.MEIway.com: Secure config ; DNS and mail interactions
IMGate.MEIway.com : Free, proven config for anti-mail-abuse gateways


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



time off by 30 minutes

2002-09-20 Thread Len Conrad

# killall ntpd

# ntpdate -db time.nist.gov
20 Sep 06:52:39 ntpdate[63322]: ntpdate 4.1.0-a Wed Aug 14 18:56:48 GMT 
2002 (1)
transmit(192.43.244.18)
receive(192.43.244.18)
transmit(192.43.244.18)
receive(192.43.244.18)
transmit(192.43.244.18)
receive(192.43.244.18)
transmit(192.43.244.18)
receive(192.43.244.18)
transmit(192.43.244.18)
server 192.43.244.18, port 123
stratum 1, precision -17, leap 00, trust 000
refid [ACTS], delay 0.06598, dispersion 0.00110
transmitted 4, in filter 4
reference time:c1359156.3dc0980b  Fri, Sep 20 2002  7:21:42.241
originate timestamp: c1359181.62f5232d  Fri, Sep 20 2002  7:22:25.386
transmit timestamp:  c1358a88.039830e3  Fri, Sep 20 2002  6:52:40.014
filter delay:  0.06641  0.06598  0.08263  0.06641
  0.0  0.0  0.0  0.0
filter offset: 1785.351 1785.351 1785.343 1785.352
  0.00 0.00 0.00 0.00
delay 0.06598, dispersion 0.00110
offset 1785.351903

20 Sep 06:52:40 ntpdate[63322]: step time server 192.43.244.18 offset 
1785.351903 sec

this date is late by 30 minutes according to wall clock

# date 0722
Fri Sep 20 07:22:00 CDT 2002

# ntpdate -db time.nist.gov
20 Sep 06:53:06 ntpdate[63393]: ntpdate 4.1.0-a Wed Aug 14 18:56:48 GMT 
2002 (1)
transmit(192.43.244.18)
receive(192.43.244.18)
transmit(192.43.244.18)
receive(192.43.244.18)
transmit(192.43.244.18)
receive(192.43.244.18)
transmit(192.43.244.18)
receive(192.43.244.18)
transmit(192.43.244.18)
server 192.43.244.18, port 123
stratum 1, precision -17, leap 00, trust 000
refid [ACTS], delay 0.06648, dispersion 0.00136
transmitted 4, in filter 4
reference time:c1359197.3da2d72f  Fri, Sep 20 2002  7:22:47.240
originate timestamp: c135919b.6c2a8869  Fri, Sep 20 2002  7:22:51.422
transmit timestamp:  c1358aa2.4cface67  Fri, Sep 20 2002  6:53:06.300
filter delay:  0.06648  0.06688  0.06660  0.08636
  0.0  0.0  0.0  0.0
filter offset: 1785.101 1785.101 1785.101 1785.091
  0.00 0.00 0.00 0.00
delay 0.06648, dispersion 0.00136
offset 1785.101419

20 Sep 06:53:06 ntpdate[63393]: step time server 192.43.244.18 offset 
1785.101419 sec

Location is KS, USA.

Suggestions?

Len



www.menandmice.com/DNS-training : DNS Training
BIND8NT.MEIway.com: Secure config ; DNS and mail interactions
IMGate.MEIway.com : Free, proven config for anti-mail-abuse gateways


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: time off by 30 minutes

2002-09-20 Thread Len Conrad


>
>Check your /etc/localtime is correct for your timezone.
>
>ln -s /usr/share/zoneinfo/America/ localtime
>
>where  is the correct location.

rm /etc/localtime

from /usr/share/zoneinfo/zone.tab:

US  +415100-0873900 America/Chicago Central Time
US  +450628-0873651 America/Menominee   Central Time - Michigan - 
Wisconsin border
US  +470659-1011757 America/North_Dakota/Center Central Time - 
North Dakota - Oliver County

I've tried rm old + ln new with all three of above, still 30 minutes late.

Where else is this determined?

Len



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: time off by 30 minutes

2002-09-20 Thread Len Conrad


>I think the problem could be the -d (debug) option to ntpdate.  Try

# rm /etc/localtime
# ln -s /usr/share/zoneinfo/America/Chicago /etc/localtime
# ntpdate time.nist.gov
20 Sep 08:42:52 ntpdate[71492]: step time server 192.43.244.18 offset 
1784.223346 sec

but the correct time is 09:12

Len



www.menandmice.com/DNS-training : DNS Training
BIND8NT.MEIway.com: Secure config ; DNS and mail interactions
IMGate.MEIway.com : Free, proven config for anti-mail-abuse gateways


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: time off by 30 minutes

2002-09-20 Thread Len Conrad


>Why dont you set it  by using
>date 200209201514
>and then use
>ntpdate  & ntpd
>to keep it current afterward..

this is what I always have done, but it's not working on this machine:

# killall ntp
No matching processes were found

# date 200209201048
Fri Sep 20 10:48:00 CDT 2002

# ll /etc/localtime
lrwxr-xr-x  1 root  wheel  35 Sep 20 08:42 /etc/localtime -> 
/usr/share/zoneinfo/America/Chicago

# ntpdate time.nist.gov
20 Sep 10:19:25 ntpdate[78703]: step time server 192.43.244.18 offset 
1783.164410 sec

# :(((

>cheers!

That TV show is cancelled until this problem is solved.

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: time off by 30 minutes

2002-09-20 Thread Len Conrad


>I think that the one you want is:
>ntpdate -b
>
>That will force the system clock to reset even if it is off by more
>than the maximum allowed step. It is normally used at boot time when
>you want the time to be set correctly immediately since the existing
>state of the clock is unknown.

# killall ntpd
No matching processes were found

# date
Fri Sep 20 13:15:32 CDT 2002 (always 30 minutes behind wall clock)

# ll /etc/localtime
lrwxr-xr-x  1 root  wheel  35 Sep 20 13:17 /etc/localtime -> 
/usr/share/zoneinfo/America/Chicago

# date 1346
Fri Sep 20 13:46:00 CDT 2002

# ntpdate -b time.nist.gov
20 Sep 13:16:44 ntpdate[91924]: step time server 192.43.244.18 offset 
1780.295789 sec

thanks anyway

Len




www.menandmice.com/DNS-training : DNS Training
BIND8NT.MEIway.com: Secure config ; DNS and mail interactions
IMGate.MEIway.com : Free, proven config for anti-mail-abuse gateways


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: time off by 30 minutes

2002-09-20 Thread Len Conrad


> >>I think the problem could be the -d (debug) option to ntpdate.  Try
> >
> ># rm /etc/localtime
> ># ln -s /usr/share/zoneinfo/America/Chicago /etc/localtime
> ># ntpdate time.nist.gov
> >20 Sep 08:42:52 ntpdate[71492]: step time server 192.43.244.18 offset
> >1784.223346 sec
>  ^^^

# rm /etc/localtime

# ln -s /usr/share/zoneinfo/America/Chicago /etc/localtime

# date
Fri Sep 20 16:54:07 CDT 2002(wall clock is + 30 minutes from this time)

# date 1723
Fri Sep 20 17:23:00 CDT 2002

# ntpdate -b tock.jrc.us
20 Sep 16:55:49 ntpdate[8172]: step time server 65.211.109.11 offset 
1780.396309 sec

# date
Fri Sep 20 16:56:00 CDT 2002

Is the peecee's hardware messed up?

Len




www.menandmice.com/DNS-training : DNS Training
BIND8NT.MEIway.com: Secure config ; DNS and mail interactions
IMGate.MEIway.com : Free, proven config for anti-mail-abuse gateways


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: time off by 30 minutes

2002-09-20 Thread Len Conrad


>I have never got date to really change the time unless I followed the 
>example of
>
>  The command:
>
>date 8506131627
>
>  sets the date to ``June 13, 1985, 4:27 PM''.

# date 0209201743
Fri Sep 20 17:43:00 CDT 2002

# ntpdate -b tock.jrc.us
20 Sep 17:13:49 ntpdate[9542]: step time server 65.211.109.11 offset 
1778.177441 sec

:((

thanks
Len



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: time off by 30 minutes

2002-09-20 Thread Len Conrad


>Are you running a kern_secure level that prevents jumps of more than 1 second?

ah, I've commented it out but the person who set ip had rc.conf with 
securelevel 2.  It that it??

dmesg:

Time adjustment clamped to +1 second
Time adjustment clamped to +1 second
Time adjustment clamped to +1 second
Time adjustment clamped to +1 second
Time adjustment clamped to +1 second
Time adjustment clamped to +1 second
Time adjustment clamped to +1 second
Time adjustment clamped to +1 second
Time adjustment clamped to +1 second
Time adjustment clamped to +1 second
Time adjustment clamped to +1 second

Any way to change the SL without rebooting, it's a busy mail gateway?

or otherwise to override this override?

Len




www.menandmice.com/DNS-training : DNS Training
BIND8NT.MEIway.com: Secure config ; DNS and mail interactions
IMGate.MEIway.com : Free, proven config for anti-mail-abuse gateways


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Promise FastTrak TX200/SX4000

2002-09-30 Thread Len Conrad


>On Mon, Sep 30, 2002 at 02:52:47AM -0700, OCTAVIAN HORNOIU wrote:
> > Are the TX2000 and SX4000 cards

When I checked on the sx4000 about two weeks ago, the FreeBSD guy said he 
was waiting on the cards + docs from Promise US to arrive in DK. I really 
don't think sx4000 will make it into 4.7.

Len



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



OS X POP client weird?

2002-10-09 Thread Len Conrad

FreeBSD port of qpopper version 4.0.4 (non-standalone) on FreeBSD 4.6.2 
Release.

All is working fine, except we note that two users show these errors:

Oct  8 19:54:28 boxname qpopper[88744]: xxx at 
12-233-2-114.client.attbi.com (12.233.2.114): -ERR [SYS/TEMP] POP 
authentication DB not available (user xxx): No such file or directory (2)

Only these two users are running the Apple Mail App under OS X as POP clients.

The 2 users have no apparent trouble accessing their mailboxes through 
qpopper.  The admin just noticed in the syslog file when looking for 
something else.

Len




To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: mailing list software

2002-10-22 Thread Len Conrad


I recommend Mailman:

/usr/ports/mail/mailman

It's from GNU (free!), works well, and is well supported. It installed
simply and easily for me.


But does a list subscriber need to find/remember and use his list password 
to unsubscribe?

That stupid requirement pretty much kills mailman for the non-geek, 
mass-market crowd.

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: Resolving hostnames takes "forever"

2002-11-02 Thread Len Conrad
pkg_add _r mtr

And run mtr for a few hours to a couple of points a few hops beyond your 
ISP and see if you have big delays, packet loss, etc.

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: [OT] Spare mailservers

2002-11-21 Thread Len Conrad


We are now adding a second mailserver (20 MX) to our configuration,
which will forward mail to the main mailserver (10 MX) through
mailertable. A third one will be added as soon as we grow as we now
expect. To avoid having to edit all the DNS zones again then


why do that? are you running MS DNS?

If you're running BIND, use $INCLUDE, aggressively, in all your zone files.

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



.sh interactive ok, from crontab, not

2002-11-24 Thread Len Conrad
Trying to write a little watch-dog/keep-alive script for a couple of 
related daemons, an MTA and an SMTP AV scanner.

This snippet works fine...

if ( ps aux | grep -i "^root.*master" ) > /dev/null
then
echo "then: exit code equal 0"
exit 0
else


... when run from the command line, the echo text displays. But, when run 
from crontab every 10 minutes, the if fails, and the else clause runs.

I've tried every syntax I know, but still can't get this logic to work.

Upstream in the same script, there is another "if" with same syntax that 
also checks a related daemon, and that IF works as expected, both 
interactively and from crontab.

suggestions?

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: .sh interactive ok, from crontab, not

2002-11-24 Thread Len Conrad


> if ( ps aux | grep -i "^root.*master" ) > /dev/null
> then
> echo "then: exit code equal 0"
> exit 0
> else
> 
>
> ... when run from the command line, the echo text displays. But, when run
> from crontab every 10 minutes, the if fails, and the else clause runs.
>
> I've tried every syntax I know, but still can't get this logic to work.

It works for me, and I suspect that it's working for you, too.


well, it's really not.  The crontab execution is trying to run the daemon 
even when the daemon shows up in "ps aux".

 However, you
may not see the results expected if you are piping the cron output through
sendmail


I'm not, and anyway the echo is after the IF condition "fails".


Also, make sure that you're running the expected shell. Check the SHELL=
line in crontab, or force the script to run via the expected shell by
running 'sh script' instead of just 'script', or tell the script what shell
to run by adding something like the following on the first line:

#!/bin/sh


already there, and /etc/crontab also contains

SHELL=/bin/sh


Although this isn't related to your problem , you might find it simpler to
use the -q option on grep instead of redirecting the output. For example,

if ( ps -aux | grep -q -i "^root.*master" ); then

instead of,


ok.

thanks
Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: .sh interactive ok, from crontab, not

2002-11-24 Thread Len Conrad


Well, it was just a guess. :) I tested against my 'named' daemon, using the
code you supplied and it works fine.


same code works fine for my AV daemon, but not for the MTA daemon


 What version of FreeBSD?


4.5


Are you using
the 'stock' shell?


yes


 Did you look at the output from grep to see what you get?


I forgot to mention, "I'm blue in the face"


How about splitting the test onto more than one line so that you can echo
and then test the status code.


done that  :))


ps -aux | grep -i "^root.*master"
STATUS=$?
echo "got $STATUS"
if [ $STATUS = 0 ] ; then


here's what I get from the command line:

ps -aux | grep -i "^root.*master"
STATUS=$?
echo "got $STATUS"
if [ $STATUS = 0 ] ; then

#if ( ps aux | grep -qi "^root.*master" )
#then
#echo "then: exit code equal 0"
exit 0
else

gives:

# /usr/local/bin/watchdog.sh
root  48701  0.0  0.9  1012  572  ??  Is5:01PM   0:02.30 
/usr/libexec/postfix/master
got 0

... but your version, or my multiple versions, have never mishaved from the 
command line, it's running from crontab that does comes out inverted.

I´ll see what happens in 10 min with next crontab run

thanks

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: .sh interactive ok, from crontab, not

2002-11-24 Thread Len Conrad


What does your crontab entry look like?


*/10*   *   *   *   root/usr/local/bin/watchdog.sh



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: .sh interactive ok, from crontab, not

2002-11-24 Thread Len Conrad


Okay, I was able to duplicate your problem. It is due to the output of 'ps'
being truncated to 80 columns, the default terminal size. You are likely
running a wide terminal display on your interactive session (as I do)


yep, TeraTerm on Windows, very wide display.


but cron will see the default 80 column terminal. This is the difference 
between the two.

ugh, amazing!


Try running 'ps' using the -w flag (wide column mode):

  if ( ps -auxw | grep -iq "^root.*master" ) ; then

I've tested this and it works.


here, too, thanks!!

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



ATA RAID Highpoint RR 133

2002-11-26 Thread Len Conrad
DMESG with a 4.7R GENERIC kernel shows for our Rocketraid 133:

atapci1:  port 
0x8400-0x84ff,0x8800-0x8803,0x9000-0x9007,0x9400-0x9403,0x9800-0x9807 irq 
11 at  device 13.0 on pci0

But we have nice Highpoint doc "FreeBSD INstallation Guide" where it talks 
about installing their drivers, up to fsbd 4.7, via loader.conf.

They say "sysctl hpt37x2.status" and other systcl params are available.

We are confused about the GENERIC support vs. what we are supposed to do 
with the Highpoint FreeBSD driver, etc.

Also, is there any shell command to check the status of the mirroring for 
disk loss via GENERIC support? ie, does the GENERIC ata raid driver do 
logging to anywhere?

the raid stuff in atacontrol is fine, but we can't see how to discover 
"have we gone "critical" with one disk down?"

Thanks
Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: Interest in diskless booting?

2002-12-07 Thread Len Conrad


I was at a local installfext yesterday
(http://installfest.auug.org.au/), and a number of people were
interested in doing diskless booting, either for reasons of economy or
reliability.  I'm currently about to finish the manuscript of the
fourth edition of "The Complete FreeBSD", and I was wondering if there
was enough interest in this topic for me to include it in the book.
If *you* are interested, please let me know.  I'll make a decision
depending on the amount of feedback I get.


** diskless booting

** how to prepare a disk to generate a bootable .iso

** up-to-date pico/small how-to for writing a bootable image to a CF drive.

:))

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



booting from Promise tx2000

2003-02-23 Thread Len Conrad
fbsd 4.7 release

no drives on motherboard ata channels

one ATA Master drive on each TX2000 IDE channel  (no Array is defined, we 
just want two independent disks for now)

fbsd cdrom boots, finds the disks and installs fbsd.

we choose boot manager because we typically have our system fail to boot 
without boot manager (fbsd 3 and 4 has has this pb) so we always install 
boot mgr and live with the additional timeout.

booting never gets to fbsd boot mgr menu.

we´ve disabled a bunch mobo i/o devics we don't need and can see no PCI IRQ 
conflicts.

any ideas?

Len

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


RE: booting from Promise tx2000

2003-02-24 Thread Len Conrad

I might be wrong here.. but I think you need some specific raid drivers for
the TX cards to work
the tx2000 is seen as an standard ATA interface. no driver needed

Len

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: booting from Promise tx2000

2003-02-24 Thread Len Conrad

If your BIOS supports this, try setting the boot device in CMOS
configuration to SCSI Boot Device.
it does, and that's how we have it.

 The problem is that the offboard ATA
controller you are using has its own BIOS, thus the system BIOS will not
boot a disk attatched to it.
I don't think so, the system BIOS scans the i/o address space for 
executable segements and passes control to any that it finds, giving the 
disk controller card a chance to run its own code, hook interrupts, etc.

 Setting SCSI boot device will mostly make your
BIOS offer to hand booting over to what ever device offers to take it. Most
(modern) ATA controllers respond to the call for a "SCSI boot device" and
take controle, then booting the system from the hard drives they own.
agreed, but it's not happening.  We've played a lot with the System bios 
settings and with the tx2000 bios setup utility, which sees the drives 
correctly.

Len

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


booting from Promise tx2000: FIXED

2003-02-24 Thread Len Conrad
Since we only had one ATA133 disk on each TX2000 ATA channel, we skipped 
the TX2000 setup utility to define an "array" (we didn't want to run RAID 
or want any stinking arrays at all).

We were able to boot from mobo ATA CDROM and install fbsd through the TX2000.

( btw, we always install fbsd boot mgr, since without the boot mgr, we more 
often than not, cannot get any boot at all )

But, no boot from TX2000 fbsd disk. Nothing, no errors, from TX200, nothing 
from fbsd bootblock.

When we did define an array as "span", but only had one disk per ATA 
channel in the "span", we were finally able to get a boot but with a failure :

Mounting Root from ufs:/dev/ad4s1a
Root Mount Failed: 16
We figured the fbsd install pre-array/span wasn't accessible after we did 
defined array/span.

So with the array mode + span now on, we re-installed fbsd via the TX2000 
to the same disk.  And now, we can boot just fine.

 while waiting for Soeren Schmidt to get the Promise SX4000 driver done!

:))

Len 

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


EPoX ep-4g4m+ ?

2003-02-25 Thread Len Conrad
An integrator wants to use in some 1U boxes for us.

With Intel 845G

Any body have any horror stories?  EPoX ok in general?

Len

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


can't get to ATA133

2003-02-26 Thread Len Conrad
FreeBSD 4.7R

Promise TX2000 with two ATA133 drives as ata masters using the ATA133 IDE 
cables that came with the TX2000.

dmesg shows:

ad4: DMA limited to UDMA33, non-ATA66 cable or device
ad6: DMA limited to UDMA33, non-ATA66 cable or device
ar0: 39083MB  [4982/255/63] status: READY subdisks:
 0 READY ad4: 39083MB  [79408/16/63] at ata2-master UDMA33
ar1: 39083MB  [4982/255/63] status: READY subdisks:
 0 READY ad6: 39083MB  [79408/16/63] at ata3-master UDMA33
Anybody know why TX sees only 33?

Len



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: can't get to ATA133

2003-02-27 Thread Len Conrad

> ad4: DMA limited to UDMA33, non-ATA66 cable or device
> ad6: DMA limited to UDMA33, non-ATA66 cable or device
> ar0: 39083MB  [4982/255/63] status: READY subdisks:
>   0 READY ad4: 39083MB  [79408/16/63] at ata2-master
> UDMA33 ar1: 39083MB  [4982/255/63] status: READY
> subdisks: 0 READY ad6: 39083MB  [79408/16/63] at
> ata3-master UDMA33
>
> Anybody know why TX sees only 33?
The ata driver is quite strict on standards implementation. It could be that
the promise cables may not comply as strictly with the standard as it would
prefer. Try getting 80-conductor cables from a third party. Generally
speaking, buying your own cables is better than using the ones that came
with the controller anyway, as those are usually el-cheapos, even with the
most expensive controllers.
One unreported point we later verified was in the TX2000 on-board setup 
util, "Show Drive Status" shows both drives as mode "U6" (is ATA133).

Len

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


Re: can't get to ATA133 (Addendum to previous post)

2003-02-27 Thread Len Conrad

There are two things you might want to look at. First it trying to set the
modes manually after boot. This is not recommended, and I would not do it
unless on a read only file system, if setting the higher mode fails, or
fails partially, you might be in for a world of trouble. To do this, you
can try:
atacontrol mode ata4 udma6 ---
atacontrol mode ata6 udma6 ---
mx# atacontrol mode ata2 udma6 ---
Master = UDMA33
Slave  = ???
mx# atacontrol mode ata3 udma6 ---
Master = UDMA33
Slave  = ???

Also, you might want to look at the length of the cables. According to the
Ultra-ATA (UDMA) standards, an 80-conductor cable must be no longer than
30cm, or about 12". Cables of longer length begin to build up too much
noise, even for the double-conductor design to combat. While Promise's BIOS
and their own drivers (as seen on Windows) might tolerate these noise
levels, I'm very sure ata(4) will not.
I've already thought of that and the guy on site says the Promise cables 
are 18 inches.

Len

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message


  1   2   >