Re: musicpd frustrations

2007-03-02 Thread Micheal Patterson




- Original Message - 
From: Sam Jones [EMAIL PROTECTED]

To: freebsd-questions@freebsd.org
Sent: Friday, March 02, 2007 11:43 AM
Subject: musicpd frustrations



Hi all,

I'm trying to get musicpd to start on bootup. I'm doing my best to
follow the documentation on the website, but there are slight
contradictions as far as where to put config files. Right now I have
the line

musicpd_enable=YES

in /etc/rc.conf, the file /usr/local/etc/rc.d/musicpd, and the file
/usr/local/etc/mpd.conf, which looks like this:

port   6600
music_directory ~/music
playlist_directory   ~/playlists
log_file  ~/.mpdlog
error_file~/.mpderror
db_file   ~/.mpddb
filesystem_charset ISO-8859-1
user  sdjones

I can start musicpd by typing

/usr/local/etc/rc.d/musicpd start

but it won't start at bootup.
--
Sam Jones
[EMAIL PROTECTED]
[EMAIL PROTECTED]



/usr/local/etc/rc.d/musicpd should be /usr/local/etc/rc.d/musicpd.sh for 
it to be started at bootup unless things have changed in the bootup 
requirements that I'm not aware of.


--

Micheal Patterson

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Have I been hacked or is nmap wrong?

2006-01-17 Thread Micheal Patterson




- Original Message - 
From: Kilian Hagemann [EMAIL PROTECTED]

To: freebsd-questions@freebsd.org
Sent: Tuesday, January 17, 2006 11:07 AM
Subject: Have I been hacked or is nmap wrong?



Hi there,

I'm managing two FreeBSD based gateways, one running 5.2.1-RELEASE and the
other 5.3-STABLE, both not having been updated since I installed from ISO
images. They both have custom ipfw firewalls that are dropping pretty much
everything that's not supposed to come in.

All was fine and dandy until one day I noticed that when I nmap'ed them 
from

the outside, the one shows

The 1663 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE
80/tcp   open  http
554/tcp  open  rtsp
1755/tcp open  wms
5190/tcp open  aol



Kilian, what does a sockstat show you on those systems and are there any 
nats on either of these systems that would have a redirect_address to 
something behind them?


--

Micheal Patterson 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: resolv.conf

2005-08-16 Thread Micheal Patterson


.


- Original Message - 
From: Ronny Machado C. [EMAIL PROTECTED]

To: freebsd-questions@freebsd.org
Sent: Tuesday, August 16, 2005 8:54 AM
Subject: resolv.conf


Hi list,

I'm new to FreeBSD, and this is the first time I configure a FreeBSD box. 
Ok, let's get to the point: my problem is with DNS resolution, form some 
reason the resolv.conf changes after some time (10  to 20 minutes), from my 
DNS IP to the rl0 IP. Does any one know why? My machine is an AMD64/FreeBSD 
5.3 with PPPoE for an ADSL connection,



greetings from .CL,

pElA'0
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



As you may have seen already, this is a common issue with systems running 
dhclient. It will overwrite the resolv.conf with the ISP provided dns 
information as soon as it obtains it from the dhcp server. To counter this, 
do this with your dhclient.conf file (/etc/dhclient.conf) and create a 
prepend entry for each server you want to answer your dns requests. Take 
note, the file is read from top to bottom and in the example below, 
127.0.0.1 would be the primary dns server for your system.


interface rl0 {
   prepend domain-name-servers enteryourdnsiphere
   prepend domain-name-servers enteryourdnsiphere
   prepend domain-name-servers 127.0.0.1;
}

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Simple question of dns?

2005-08-10 Thread Micheal Patterson



- Original Message - 
From: Carstea Catalin [EMAIL PROTECTED]

To: freebsd-questions@freebsd.org
Sent: Wednesday, August 10, 2005 12:01 PM
Subject: Simple question of dns?


I want to configure my dns to redirect all request from :
http://www.mail.mydomain.com http://www.mail.mydomain.com
to
http://mail.mydomain.com
Many users do first request and my server respond only al the second url.
Tks!


If you have access to your dns zone file, add a cname entry:

www.mail  CNAME   mail.mydomain.com.


--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain 
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended 
recipient, please contact the sender by reply e-mail and destroy all 
copies of the original message.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Helpdesk/Call tracking software

2005-07-21 Thread Micheal Patterson




- Original Message - 
From: Cezar Fistik [EMAIL PROTECTED]

To: freebsd-questions@freebsd.org
Sent: Wednesday, July 20, 2005 5:11 PM
Subject: OT: Helpdesk/Call tracking software



Dear group,

Sorry for OT, but I'm sure someone in this group can help me. I'm
looking for an open source helpdesk/call tracking application for use
in an ISP customer support dept. We need something that will allow us
to register all incomming calls, to assign tasks to different
admnis/engineers according to customer's problem, to be able to see
the status of each opened issue and so on. Nothing unusual.

I made a search and found a number of such applications, but there are
so many...it wouldn't be possible to test all of them. So please just
tell me what you are using and how would you rate it.

Thank you very much.
--
Best regards,
Cezar  mailto:[EMAIL PROTECTED]




I currently use RT for our open source ticketing system. It's coded by Best 
Practical and is available at http://bestpractical.com/rt/


Screen shots and a description are available at their site.


--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: removing freebsd bootloader

2005-06-23 Thread Micheal Patterson

Paulo Roberto wrote:


Hello,

How do I remove the FreeBSD bootloader from the MBR without touching
the slices?

I do have an active WinXP primary slice that I would like to boot from
directly.

thank you,

Paulo



__ 
Discover Yahoo! 
Have fun online with music videos, cool games, IM and more. Check it out! 
http://discover.yahoo.com/online.html

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


 

Start up with the WinXP install cd, go into console repair mode and run 
fixmbr to intall the standard WinXP loader settings on the primary 
drive. Doing so will prevent you from being able to boot from any other 
drive however until / unless another boot manager is enabled on the 
primary drive.


--


Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain 
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended 
recipient, please contact the sender by reply e-mail and destroy all 
copies of the original message.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Odd nis problem..

2005-06-09 Thread Micheal Patterson
I've used yp in FBSD for some time now. I've never ran across this 
particular issue though, until now.


My layout.

I have a 4.10 yp master server. I have various servers linked to it 
including other fbsd 5.3 servers. They do well. However, I have one 
inparticular server that simply will not pull one specific group name 
over.


drwxr-xr-x   2 root$FreeBSD512 Apr 12 15:54 Usage Policy
drwxr-xr-x   7 rootwheel   512 Jun  9 04:45 archives

Instead of showing the actual group name, it displays $FreeBSD. Can anyone 
shed some light on possibly why this is occuring since the particular gid is 
viewable via ypcat group (itdept:*:32:root).


--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Odd nis problem..

2005-06-09 Thread Micheal Patterson
Nevermind folks. I'm feeling pretty stupid right now. The problem was 
starting me right in the face and I totally missed it.


Just an FYI, the # in the #$FreeBSD: src/etc/group,v 1.31 2004/06/23 
01:32:28 mlaier Exp $ line in the /etc/group file is a *VERY* important 
thing. The affected gid was 32. Now, as it turns out, the 32 is in the 
proper spot to indicate that $FreeBSD is the group name. Who'da thunk!


--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.


- Original Message - 
From: Micheal Patterson [EMAIL PROTECTED]

To: [EMAIL PROTECTED]
Sent: Thursday, June 09, 2005 4:54 AM
Subject: Odd nis problem..


I've used yp in FBSD for some time now. I've never ran across this 
particular issue though, until now.


My layout.

I have a 4.10 yp master server. I have various servers linked to it 
including other fbsd 5.3 servers. They do well. However, I have one 
inparticular server that simply will not pull one specific group name 
over.


drwxr-xr-x   2 root$FreeBSD512 Apr 12 15:54 Usage Policy
drwxr-xr-x   7 rootwheel   512 Jun  9 04:45 archives

Instead of showing the actual group name, it displays $FreeBSD. Can anyone 
shed some light on possibly why this is occuring since the particular gid 
is viewable via ypcat group (itdept:*:32:root).


--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FTP Log

2005-06-09 Thread Micheal Patterson


- Original Message - 
From: Dixit, Viraj [EMAIL PROTECTED]
To: Dan Nelson [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Thursday, June 09, 2005 4:05 PM
Subject: RE: FTP Log


My previous email didn't show some lines correctly. This one is fine.
VJ

Hi Dan,

Can you shed light on why my FTP daemon not writing FTP logins in my ftplog
file. I have my FTP account enabled in my syslog.conf file and syslogd is
running.

54148  ??  Ss 0:16.13 /usr/libexec/ftpd -D

84598  ??  Ss 0:03.73 /usr/sbin/syslogd -m 0

!ftpd
*.* /var/log/ftp.log

VJ


-

A few things for starters:

1. Try adding the -l option to enable connection logging. Add it twice to
include get, store, cmd info as well.

2. Check to make sure those are tabs and not spaces in the syslog.conf
entry.

3. Make sure the /var/log/ftp.log file actually exists. It won't create it
on it's own, so you may need to do a touch on the file and then restart
syslogd.


--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Multi-Volume Backup

2005-06-09 Thread Micheal Patterson


- Original Message - 
From: Cody Holland [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Sent: Thursday, June 09, 2005 4:14 PM
Subject: Multi-Volume Backup


I'm trying to do a multi-volume backup to hard drive via gnu tar.  It
works with the following command:
gtar -c -L 681574400 -f /usr/local/backup/dev1.tgz -f
/usr/local/backup/dev2.tgz -f /usr/local/backup/dev3.tgz /

But I really, really need this compressed.  If I put a -z in the command
it errors out stating:
gtar: Cannot use multi-volume compressed archives
gtar: Error is not recoverable: exiting now

Is there any way to do a compressed multi-volume backup, with each
volume being 650mb to hard drive?  Either with gtar or any other backup
method.

Thanks,
Cody
___

You'll need to use the -M flag as well to indicate a multi-volume tarball.
From what I can tell from the man page, a -L doesn't imply multi-volume.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD 5.3 and NIS

2005-05-19 Thread Micheal Patterson
I'm running nfs/nis off of a FreeBSD 4.10 system. I have a secondary NIS
master on a freebsd 5.3 system and so far, everything is cool between them.
There is one thing that I've noticed that I've never seen before though. I
have a nfs mount mounted but the permissions for the group show as $FreeBSD
instead of the actual group it should be. I've checked my nis settings in
/etc/group and have the standard +::: at the end. Anyone else seen this or
can possibly explain why this isn't listing as the appropriate group?

Thanks.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: smbfs in fstab

2005-04-26 Thread Micheal Patterson
.


- Original Message - 
From: Ash [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Tuesday, April 26, 2005 10:32 AM
Subject: Re: smbfs in fstab


 [EMAIL PROTECTED] wrote:
  currently I mount my XP share via: mount_smbfs -N //a7v133/raid
/storage1
 
  How can I get put this in my /etc/fstab so that it doesn't prompt me
  for a password upon bootup.  This winshare is accessible without a
  password and by anyone.  I have read through seveal forums and read
  man pages gallore, but I still remain unsuccessful.
 
  5.3-RELEASE-p1 FreeBSD 5.3-RELEASE-p1 #0

  From the man page for mount_smbfs(8):

 [quote]

 ~/.nsmbrc  Keeps static parameters for connections and other information.
 See /usr/share/examples/smbfs/dot.nsmbrc for details.
 
 ...

   It is possible to use fstab(5) for smbfs mounts:

//[EMAIL PROTECTED]/public/smb/public smbfs  rw,noauto 00

 [/quote]


  From /usr/share/examples/smbfs/dot.nsmbrc:

 [quote]

 # smbfs lookups configuration files in next order:
 #   1. ~/.nsmbrc
 #   2. /etc/nsmb.conf - if this file found it will
 #  override values with same keys from user files.

 [/quote]


 You will have to store your password in cleartext, but you seem to
 already be doing this in home directory since you are using the -N flag.

 -Ash
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]



If you want this to mount from the fstab at system boot, remove the noauto
flag and place an -N in the string:

#//[EMAIL PROTECTED]/share_name  /mount_pointsmbfs   rw,-N


That will read the password information from the users .nsmbrc file as Ash
stated, or, if you want it system wide, use the /etc/nsmb.conf file instead.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Exabyte 221L Auto Loader

2005-04-19 Thread Micheal Patterson
Is there anyone using this device with FreeBSD 4.x or 5.x? I'm new to the
world of auto-loaders and am curious if FreeBSD's tar / dump utilities can
support it properly for backing up of 3tb of data from various partitions.
If so, are there any specifics that I should be aware of when using this
device? Any recommendations on using other software other than tar or dump
to do this that are available in the ports tree?

Thanks.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpwrappers problem

2005-04-18 Thread Micheal Patterson

- Original Message - 
From: Didier Wiroth [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Cc: freebsd-stable@freebsd.org
Sent: Monday, April 18, 2005 6:26 AM
Subject: tcpwrappers problem


Hi,
(using freebsd5.4-stable)
I'm trying to display a ftpd banner with hosts.allow, but it doesn't 
work.

I'm using ftpd (/usr/libexec/ftpd) started through inetd.
Ined is started with standard flags:
/usr/sbin/inetd -wW -C 60
In hosts.allow I have:
ALL : ALL : allow
ALL : ALL : banners /usr/local/etc/banners/
ALL : PARANOID : RFC931 20 : deny
In /usr.../banners/ I've a banner called: ftpd and inetd and ftp etc.. 
copied the banner to different names to be sure ... ;-)

The directory is world r-x and the banners are world readable.
When changing for example: ALL:ALL:allow to ALL:ALL:deny, ftpd 
connections are blocked, so I assume the wrappers work.

Why isn't my banner displayed?
thanks
didier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

At first glance, I would say because you have an ALL : ALL : allow 
before you have your ALL : ALL : banners /usr/local/etc/banners/

With that, it's never making it to the banners entry.
--
Micheal Patterson
Senior Communications Systems Engineer
TSG Incorporated
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: newbie question

2005-04-18 Thread Micheal Patterson




- Original Message - 
From: Chad Morland [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Monday, April 18, 2005 1:10 PM
Subject: Re: newbie question


On 4/17/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
 Hello

 Can anyone give me a very rough estimate on how much time is required on
an
 ongoing basis, after a server is set up with FreeBSD and Apache, to
maintain
 everything.  By everything I am referring to everything required to keep
the
 server up, and host about 100 domains.  Thank you in advance and I
apologize
 if this question is not appropriate for this list.

 Sue

If you will be doing this as a business venture I HIGHLY recommend
that you either get a managed server or hire someone to help you admin
the server when you are stuck. There are many people out there that
offer this service. Go to any webhosting forum and ask for some
referrals.

The reason I say this is because it seems that A LOT of people think
they can make a quick buck off of webhosting without any real work.
These are usually the companies that fail quickly and give the hosting
industry a bad name. Running any type of business requires some
thought and experience.

There are a lot of minor issues that will stump a self described
newbie and having someone there to assist you will make your life
and the life of your clients that much easier.

-CM


Good advice Chad. Even for those that have been admin'ing *Nix boxes for
years get stumped by the most simplest of things at times. We rarely admit
it, but it happens.

Some additional things to consider if you plan on hosting sites as a
business.

oCGI access requirements of your clients.

oDNS, SMTP, POP3 requirements for your clients. These usually go hand in
hand with web hosting these days.

oThe ability for them to update pages properly on their own (ftp / front
page requirements / access)

oThe responsibility to ensure that the software is patched quickly as
needed (perl, php, mysql to name a few)

oSpam / AV filtering (do they want it? Do they not care?, Are they going
to trip out if you start filtering their mail?, etc)

oAre you going to host these on static IP's? If you're going to provide
SSL enabled sites, you have no choice since you can't use SSL on name based
virtual hosting.

oAre you going to need to do virtual domain maps for the users that
require / use email services?


A sundry of other items that are just too numerous to mention.

I'm not trying to scare anyone away from it, far from it, just trying to add
my .02 to the discussion of things to consider before you decide that
hosting is the thing for you.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Automounting smbfs?

2005-04-11 Thread Micheal Patterson


- Original Message - 
From: Kirk Strauser [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Sent: Friday, April 08, 2005 3:40 PM
Subject: Re: Automounting smbfs?

On Friday 08 April 2005 14:12, you wrote:

 Kirk,  here's what I did to auto mount my pesky windows shared backup
 folder prior to having a separate nfs mount to put them.

 Configure your share as noauto in /etc/fstab (example)

[...]

Out of curiosity, why would you do that instead of just letting FreeBSD
mount it automatically (which is what I do now)?

The goal I'm trying to accomplish is pushing the same map to multiple
machines (eg via LDAP).  I never bothered to do that with my NFS mounts,
but I'm using the addition of the SMB shares as an excuse to rework the
system before it grows much more.
-- 
Kirk Strauser


In my experience, automounting it via fstab doesn't always work correctly.
Some folks have great success with it where others don't. For example, I can
remove the noauto and with the very same config files and 5 out of 10 times
the mount won't take on system startup. When I remove the noauto and cron it
for @reboot, it works just fine. I've no idea why but it works for me.


--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Hard drive fullness limits information help request

2005-04-11 Thread Micheal Patterson


- Original Message - 
From: NMH [EMAIL PROTECTED]
To: hardware freebsd-hardware@freebsd.org; questions
freebsd-questions@freebsd.org
Sent: Monday, April 11, 2005 2:30 PM
Subject: Hard drive fullness limits information help request


 Hi all
   I know hard drives tend to not run well when near
 full. They have trouble performing self adjustments
 (hardware), self defragging(unix/FFS) etc.. (as I can
 express it) However, I need to find some documentation
 or some help in explaining this better.
   I am working with some people who store loads of
 files, on many drives and tend to fill the drives to
 95% and more and then can't understand why they become
 unstable.  I need to be able to explain it better and
 I would also like to know more to be able to
 factually/sanely set a percent full safe limit.

  Any help would be appreciatted

  Thanks!

  NMH.



 The Large Print Giveth And The Small Print Taketh Away
  -- Anon


NMH,

If these people are old enough to remember LP records, explain it to them in
this fashion.

A hard drive is much like an older LP record. Multiple songs, in sequencial
order. You can play them in any order that you wish by moving the tone arm
to a different song on the album. Now, say that you don't like track 3 and
wish to delete it (if you could). You would end up with 3 minutes of blank
space in the album. So, you want to add another song that you do like, but
it's 3 minutes 30 seconds long and won't fit into a 3 minute time slot. A
hard drive is able to place this 30 seconds at the end of the current space
and be able to jump to that 30 extra seconds and you never know the
difference. Now, if this happens a lot, meaning removing data, adding larger
data, removing data, adding smaller chunks of data, etc, the actual data
will get scattered throughout the disk. This is known as data fragmentation.
Hard drives are able to deal with to a considerable degree however the more
fragmented a drive is,  the harder the drive has to work in order to make
that unnoticed jump. As the drive works harder, access times grow longer and
there is a higher potential for data loss. When drives get to a higher usage
(90%+ utilization), there isn't much room to left to handle those scattered
chuncks of data.

That's the analogy that I used to use and it worked pretty well for me. Your
mileage may vary.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cmpq dl380 server. ipmi bmc question

2005-04-08 Thread Micheal Patterson




- Original Message - 
From: Aaron Sloan [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Sent: Friday, April 08, 2005 11:16 AM
Subject: cmpq dl380 server. ipmi bmc question



 Hello guys and gals,



 Does system fan control on a Compaq DL380 ,first edition, have any
support?
 Sounds like a jet at idle in the machine room.

 I have looked through the acpi and port recomendations I have come
 across via google and I'm not having any luck at all.  I believe it is
supported in Linux
 but I don't know how. I can't say I'm any hardware wizard on this kind of
thing.

 Update:  I installed freeipmi and ipmitool and I'm not having any luck
with these apps.
 The cli commands are apparently over my head because I haven't been able
to get it to work and now my head hurts.
 Am I barking up the right tree or just peeing on it?
 HP was not terribly helpful. All the recent ROMpaks have been installed.
 Thanks,
 Aaron


Aaron, are you sure that you're supposed to be able to adjust the fan speed
on the 380 from within the OS? The reason that I ask, is that the 330's and
350's have a temp sensor that isn't detected until during post, so there's a
few seconds on them that the fans run full on. I'm just curious because if
the 380's are set up the same, you may have a faulty sensor.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Automounting smbfs?

2005-04-08 Thread Micheal Patterson



- Original Message - 
From: Kirk Strauser [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Sent: Friday, April 08, 2005 12:52 PM
Subject: Automounting smbfs?

The built-in amd automounter may work great for NFS, but I increasingly find
myself mounting Windows shares and amd doesn't seem to support them.  Any
suggestions?
-- 
Kirk Strauser



Kirk,  here's what I did to auto mount my pesky windows shared backup folder
prior to having a seperate nfs mount to put them.


Configure your share as noauto in /etc/fstab (example)

### SMBFS Mounts
#
#//[EMAIL PROTECTED]/share  /mount pointsmbfs
noauto,rw,-N,-I=windows ip# 0   0

Then, in the root crontab, add this:

@reboot/path_to_your_script/mbfs.sh


Then, in path_to_your_script create a file named mbfs.sh and edit it as
such:

#!/bin/sh
echo  
echo  
echo mounting smbfs slices...
sleep 5
/sbin/mount /backups

Please keep in mind, that this method will require the proper share auth
info to be in /etc/nsmb.conf, so protect this file as it holds plain text
passwords for your windows systems.

Then on system restart, after everything else is accessible and running,
cron will launch and remount those drives for you.

Hope it helps.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Portupgrade problem

2005-04-08 Thread Micheal Patterson


- Original Message - 
From: Aperez [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Sent: Friday, April 08, 2005 1:23 PM
Subject: Portupgrade problem


 Hi

 I am having the following problem when I try to upgrade my ports:

 portupgrade -arR
 cd: can't cd to /usr/ports/multimedia/nautilus-media
 Port directory not found: multimedia/nautilus-media
 !multimedia/nautilus-media (nautilus-media-0.8.0_4) (port directory error)

 I checked in /usr/ports/multimedia and of course there is not such
 directory.

 Is there a way I can fix this?

 Thanks




Is your ports tree current via cvs? If not, I'd update the tree, then
rebuild portupgrade and see how that works for you.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: iSCSI (revisited?)

2005-04-06 Thread Micheal Patterson



- Original Message - 
From: Justin Bennett [EMAIL PROTECTED]
To: FreeBSD Hackers freebsd-hackers@freebsd.org
Cc: FreeBSD Questions freebsd-questions@freebsd.org
Sent: Monday, April 04, 2005 5:30 PM
Subject: iSCSI (revisited?)


 All,

 I was wondering what people thought of iSCSI and FreeBSD. Is it a viable
 option for creating SANs?

 I want to move away from tape backups, and have numerous production
 FreeBSD machines that I need to back up data from.

 Any other ideas for a disk to disk backup solution that people have used?

 Thanks,

 Justin



Justin, what I'm currently using is the following for just that:

Promise Vtrak 15100 with 15 250gb sata's, connected to a dual channel
Adaptec 39160 housed in a Compaq ML 330 running FreeBSD 5.3. The Vtrak has 2
logical arrays assigned, where my other 14 servers (windows and freebsd
alike) back up to one or the other arrays. I have one array shared via nfs
for the bsd boxes to back up to and the other is samba shared so that
windows systems can back up to that one. So far, it's worked well for me.
All I need to do now is get the company to realize they still need tape if
they want long term storage and then I can chain that to the Promise raid
and have it back up to take during the day and still have my backup window
in the early morning hours.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mpd VPN Server / W2K Clients

2005-04-04 Thread Micheal Patterson


- Original Message - 
From: Anton Zavrin [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Sent: Monday, April 04, 2005 9:27 AM
Subject: mpd VPN Server / W2K Clients


 Hello Jonathan,

 I found this thread from a long time ago at FreeBSD addicts:

http://lists.freebsd.org/pipermail/freebsd-questions/2003-December/027869.ht
 ml

 I'm having absolutely identical problem with my MPD (it used to work and
 then it just stopped, who knows why). I tried to follow up on that
solution
 you posted, but that page no longer opens up. Any help is greatly
 appreciated.

 Thank you much!

 -- 
 No virus found in this outgoing message.
 Checked by AVG Anti-Virus.
 Version: 7.0.308 / Virus Database: 266.9.1 - Release Date: 4/1/2005


 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]

Anton, some things too look for here. Are the remote systems using Win XP?
If so, are their firewalls configured to allow traffic from your network on
TCP ports 1723? Also, is GRE being blocked at any point between your mpd
system and their end? If it just stopped working, has anyone placed a
firmware firewall device in recently? Many of them that I've run across
recently don't even know what GRE is so a specific entry has to be made to
allow protocol 47 to pass freely in order to get pptp to function properly.

Hope it helps.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: NIS

2005-01-05 Thread Micheal Patterson

- Original Message - 
From: Brian McCann [EMAIL PROTECTED]
To: FreeBSD mailinglist freebsd-questions@freebsd.org
Cc: Bob Van Zant [EMAIL PROTECTED]
Sent: Wednesday, January 05, 2005 7:36 AM
Subject: Re: NIS


Nope...just tried that with no luck.  Thanks though.  Any other ideas 
anyone?

--Brian
On Tue, 04 Jan 2005 15:43:40 -0800, Bob Van Zant 
[EMAIL PROTECTED] wrote:
Are your dates screwed up? By that I mean is master.passwd newer than
your NIS file? Try touch(1)ing your NIS file and then running make.
I've never actually setup NIS before. My comment is just based on my
experiences with make.
-Bob
On Tue, 2005-01-04 at 17:29 -0500, Brian McCann wrote:
 HI all...I'm having a NIS problem I can't figure out.  I've done 
 this
 before on 4.7, and countless other times on RedHat...but this is
 evading me.  I'm trying to re-make my databases since I've added a
 user, I go into /var/yp and run make mynis and get `mynis' is up 
 to
 date., which I know can't be right.  I've got to be missing 
 something
 somewhere.
  I've added the line to the Makefile MASTER_PASSWD =
 /etc/master.passwd so that YP uses the file in /etc...or at
 least...that's all I recall having to do on 4.7, and doctored up 
 the
 sections that involve the passwd files changed it to only look at 
 UIDs
 greater then 3.
  Can someone point out my probably obvious mistake?

 Thanks,
 --Brian
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]

 ===
This footer was appended by the Honeypot Injector
The message was injected from 216.136.204.119
on 04 Jan 2005 14:29:24 -0800.  This IP
was classified in the WHITELIST sender group.
The org ID is 1681939, and the SBRS is 2.1
 ===


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

If you've added a user with adduser and need to update your nis maps, cd 
/var/yp and type make.

--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Mounting smbfs

2004-12-31 Thread Micheal Patterson


- Original Message - 
From: Robert Fitzpatrick [EMAIL PROTECTED]
To: FreeBSD freebsd-questions@freebsd.org
Sent: Thursday, December 30, 2004 10:19 AM
Subject: Mounting smbfs


Familiar with Webmin way of mounting smbfs type file systems on our
Linux boxes, I tried it with one of the FreeBSD 5.3 machines. It works
fine, but when rebooted, it sits waiting for a password. After
investigating a bit on the web I found that FreeBSD is uses the
/etc/nsmb.conf file for configuration and in that file I find
information evidently setup by Webmin, for example:
[spc2k:backupexec:backup]
workgroup=SPCLOCAL
password=x
addr=192.168.1.13
First, was this properly setup by Webmin? From the comments in the 
file,
it looks good. Since I am at a remote location, I had someone locally
just hit Ctrl+C during boot to get back in and look at these things. I
go to Webmin and click to mount, but then it wipes out all the mount
points except the one I clicked and does not mount that one. From
looking around the web, I realize Webmin may not be the best way to
manage this, I found this document:

http://www.freebsd.org/cgi/query-pr.cgi?pr=34247
I am looking for something that can guide me on how to make the 
entries
in my fstab file. I assume what I have now below is incorrect as the
boot up fails as previously mentioned.

//[EMAIL PROTECTED]/backup  /home/backup/Veritas/SPC2K  smbfs  rw  0  0
Can someone help or guide me to some more documentation on this?
--
Robert
--
Make your fstab entry something like this:
//[EMAIL PROTECTED]/backup  /home/backup/Veritas/SPC2K   smbfs 
rw,-N,-I=192.168.1.13 0   0

See how that works for you.
--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: bash - superuser

2004-12-20 Thread Micheal Patterson
- Original Message - 
From: Joshua Lokken [EMAIL PROTECTED]
To: David Landgren [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, December 20, 2004 11:04 AM
Subject: Re: bash - superuser


 On Mon, 20 Dec 2004 12:29:37 +0100, David Landgren [EMAIL PROTECTED]
wrote:
  Giuliano Cardozo Medalha wrote:
   Hi,
  
   I have a machine with FreeBSD 5.3 - release -p2.
  
   I have installed bash from ports.
  
   How is possible to use bash in root account ?
  
   Thanks a lot
 
  Don't.
 
  Leave /bin/sh as your shell.

 'Leave' /bin/sh as your shell makes it sound like /bin/sh is the
 default root shell.  Did this change in FreeBSD 5.x?  It appears
 that in 4.x, the root shell is /bin/csh by default, which [I believe]
 is linked to /bin/tcsh.


 -- 
 Joshua Lokken
 Open Source Advocate

csh is still the default root shell.

At one time, systems required multiple drives due to space. So, these
systems would have a partioning scheme such as:

hda0 - /
hda1 - /var
hda2 - /swap
hda3 - /usr

... and so on depending on their drive capacity at the time. Please keep in
mind that this OS (and it's ancestors) were running on systems that had
multiple drives with 20mb or less in their day. The tree has constantly
grown from those days. As such, many admins use this scheme today because
they either have used this scheme for 10's of years and don't wish to change
their ways. Personal and/or financial reasoning aside as to why they don't
wish to change is totally their decision.

Even so, there are some good points to this methodology. It provides the
ability to not lose the entire system in the event of drive failure. In this
method, having the root shell on another partition invites failure for the
entire system should root's shell reside on a crashed / failed partition. No
root, no repair capability.

On the other hand, many admins use a system with a single drive in them and
use NIS/NFS as their userland drive space. Some may even have /usr/ itself
fed from NFS.

In either method, if you want to use anything other than csh, you will need
to move it to /bin. You want it to be uncorruptable in the event of breach.
So, if you still wish to use bash as the root shell, copy the executable
into /bin, add it to /etc/shells, and set it immutable (chflags schg
/bin/bash) so that in the event of breach, the shell is still unable to be
modified and will be reachable in the event of NFS or partition failure.

With the state of drives, raid arrays, etc in todays world, either way will
work just as good as the other. Each person has their own preferences for
their own reasons.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: traffic volume monitoring - what program

2004-12-20 Thread Micheal Patterson



- Original Message - 
From: Matthias F. Brandstetter [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 20, 2004 2:05 PM
Subject: Re: traffic volume monitoring - what program


 -- quoting David Banning --
  I am looking at a new ISP that charges for a certain number
  gigabites of traffic. I have -no- idea what my traffic volume
  is.
 
  Can anyone recommend a good traffic volume checker in the
  ports?
 
 I only found ipac-ng for Linux based IPTABLES firewalls.
 But none so far for *BSD firewalls :(
 
 Any ideas?
 
 -- 
 As far as anyone knows we're a nice, normal family.
 
   -- Homer Simpson
  There's No Disgrace Like Home

Can't MRTG get you close enough for that wouldn't it?

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain 
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended 
recipient, please contact the sender by reply e-mail and destroy all 
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Linux libs missing dependancies

2004-12-20 Thread Micheal Patterson


- Original Message - 
From: Stephen Maver [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, December 20, 2004 1:16 PM
Subject: Linux libs missing dependancies


 Dear List,

 I've installed the linux steam client the other day,

 /usr/ports/games/linux-steam

 This theoretically allows you to download and run steam based games,
 such as Halflife and Counter Strike Source.

 Related ports installed:
 linux-steam-1.0 Half Life dedicated server running on steam
 linux_base-7.1_7The base set of packages needed in Linux mode

 # uname -a
 FreeBSD lupus.ntropy.net 5.3-RELEASE-p2 FreeBSD 5.3-RELEASE-p2 #1:
 Sun Dec  5 16:11:09 GMT 2004 ...

 # kldstat
 Id Refs AddressSize Name
  1   10 0xc040 39dcf8   kernel
  2   14 0xc079e000 537f0acpi.ko
  31 0xc15e1000 6000 linprocfs.ko
  41 0xc15ef000 17000linux.ko

 I chanced it and used the linux steam client to download the Counter
 Strike Source files, with no obvious problems.

 When I try to run the dedicated server it immediately crashes,
 probably as it should as it is linux specific I'd guess.

 $ ./srcds_run  -console -game cstrike +map de_dust +maxplayers 16
  -steamuser user -steampass passwd
 --
 Auto detecting CPU
 Using default binary.
 Auto-restarting the server on crash
 ./srcds_i486: error while loading shared libraries:
 /usr/compat/linux/lib/libm.so.6: ELF file OS ABI invalid
 Mon Dec 20 17:53:37 GMT 2004: Server restart in 10 seconds
 

 # ldd ./srcds_i486
 ./srcds_i486:
 ./srcds_i486: error while loading shared libraries:
 /lib/libm.so.6: ELF file OS ABI invalid
 ./srcds_i486: exit status 127

 The binary 'srcds_i486' relies on several other files that
 have missing dependancies.

 #  ldd bin/dedicated_i486.so
 bin/dedicated_i486.so:
 libm.so.6 = not found (0x0)
 libdl.so.2 = not found (0x0)
 tier0_i486.so (0x0)
 vstdlib_i486.so (0x0)
 libc.so.6 = not found (0x0)

 All of these libs exist in /usr/compat/linux/lib, and, with
 the linux emulation running, are seen as being in /lib/* if I
 understand it all correctly.

 Also, last night I was trying to use ldd, and suicidal symbolic
 linking, to show the *so files where their libs were. At one
 point it failed with an error about being unable to use the
 libraries as they were not freebsd native.

 Sorry for the lack of the specific error I am unable to
 recreate it today.

 So, the questions are:

 1) What would cause the error ELF file OS ABI invalid on
  `ldd ./srcds_i486` above ?

 2) How would I go about teaching the linux *.so files where
 their linux libraries are located ?

 Pointers to docs, or FMs I should have read, are welcome. I
 had a look through the manual and googled about on the error,
 but didnt turn up anything that helped.

 Thanks,

 Ste


This is my post to the hlds_linux list on how to get Source running on
FreeBSD. Hopefully it will get you where you need to go.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

-

Micheal Patterson [EMAIL PROTECTED]
Fri Aug 20 05:08:02 2004
Previous message: [hlds_linux] CS:S and FreeBSD 4.10-STABLE
Next message: [hlds_linux] CS:S and FreeBSD 4.10-STABLE
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Ok folks.. Here's what I did to get Source running on FreeBSD 4.10 with
an Intel cpu. AMD should be no different system wise.

1. Install source :)

2. Install the Linux_base-8 port. Once this is done,  run:
shell$ ldconfig -m /compat/linux/lib

** This merges the linux compat lib paths into your existing environment
and is what allows source to locate lib.so.6

3. Then recompile your kernel with the following options:

## SSE/MMX2 instructions support
options CPU_ENABLE_SSE

** This allows source to determine your CPU speed.

3. Reboot

Log back into the account you installed steam to, and execute:
./srcds_run -game cstrike +ip xx.xx.xx.xx -port 27015 +maxplayers 20
+map de_dust

This procedure worked for me with a clean freebsd 4.10 install and no
linux base. If you have linux base 7 installed, you'll need to run a
pkg_delete linux_base-7.1_7 before base 8 will install.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Opening ports

2004-12-17 Thread Micheal Patterson



- Original Message - 
From: Curtis Vaughan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, December 17, 2004 12:20 PM
Subject: Re: Opening ports



 On 17 Dec, 2004, at 09:24, Curtis Vaughan wrote:

  I realized that apparently by default most all ports are closed on my
  5.3-Release box. The reason I say this is because besides port 22, 80
  and 1 no other port seems to be open (based on a port scan). I
  just installed postfix and courier-imap and wanted to test ports 25
  and 110, but they do not respond even though postfix is running, I
  have enabled the ports in master.cf. Also they are in /etc/services.
 
  Looking over documents and checking my install, /etc/rc.firewall is
  not enabled in /etc/defaults/rc.conf.
 
  I assume I could go through rc.firewall and set it up for those ports
  I need opened, and enable it in rc.conf, but whereas we have a
  gatewall/firewall for our company, I don't see a lot of
  reason for having all the ports closed down on this server. Is there
  an easy way to enable them all?
 
  Curtis
 

 OK, I've got courier-imap running now and it opened port 143, but there
 is still no reply on 25. Which makes me think that the problem isn't
 the fact that ports are closed, but that nothing is listening.
 However, netstat shows:

 cod# netstat -na | grep LISTEN
 tcp4   0  0  *.143  *.*
 LISTEN
 tcp6   0  0  *.143  *.*
 LISTEN
 tcp4   0  0  *.80   *.*
 LISTEN
 tcp4   0  0  *.25   *.*
 LISTEN
 tcp4   0  0  *.1*.*
 LISTEN
 tcp4   0  0  *.22   *.*
 LISTEN
 tcp6   0  0  *.22   *.*
 LISTEN

 So, something is listening on port 25, but why no response to telnet
 requests?

 Curtis



I realize that this may sound strange, but do you have an allow in your
hosts.allow file for sendmail? Sendmail now uses wrappers by default as I
recall, and without it, you'll get refused.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Lost am I (FreeBSD4.10)

2004-11-21 Thread Micheal Patterson

- Original Message - 
From: Kevin D. Kinsey, DaleCo, S.P. [EMAIL PROTECTED]
To: Matthew Seaman [EMAIL PROTECTED]
Cc: gazwacker the kazmaster [EMAIL PROTECTED]; 
[EMAIL PROTECTED]
Sent: Saturday, November 20, 2004 3:52 PM
Subject: Re: Lost am I (FreeBSD4.10)


Matthew Seaman wrote:
On Fri, Nov 19, 2004 at 11:19:05PM -0500, gazwacker the kazmaster 
wrote:

Annoyed am I. For mine computer hath been tampered upon by a fool
which hath deleted mine /usr/share folder. I have the
installation CD, now how would I re-install my purloined portfolio?
(If no one knows how to do that, a copy of the 
/usr/share/misc/termcap file would suffice)

Grab the system sources via cvsup, and do a 'make world' cycle as
described here:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvsup.html
and here
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html
That will reinstall the contents of /usr/share along with all of the
rest of the system -- sure, it's a sledge hammer, but it will crack
this nut very effectively.  Nb. you should always compile a new kernel
to go with the new system -- having kernel and world out of synch
tends to cause a number of oddities of behaviour in the system.
Cheers,
Matthew
Lo!  A large hammer indeed.
Might not he simply changeth to /usr/src/share (if he indeed hath
such) and typest make install as root?
Kevin Kinsey
___
Are ye the wise owl in the woodline yonder? Thou must be for thou has 
provided rich knowledge upon those in need. So sayeth Kevin, so mote it 
be.

--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: What is preferred method to get new software on 4.10 stable?

2004-11-15 Thread Micheal Patterson


- Original Message - 
From: Andy Firman [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 15, 2004 9:33 AM
Subject: What is preferred method to get new software on 4.10 stable?



 Let's take Clamav for example.  My freshclam logs say this:
 WARNING: Your ClamAV installation is OUTDATED - please update immediately
!

 So, I have clamav-0.75.1 installed from ports.

 What would be the proper way to get clamav .80 installed?

 pkg_delete clamav-0.75.1 and then install .80 from source?

 Or is there some mechanism to get .80 in from the ports?


 Thanks,
 Andy

If you're ports tree has been kept up to date, you can go into the clamav
ports dir and run make deinstall, then make reinstall right behind it to
update it to current.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How can I specify the ipaddress in smbfs entry in fstab?

2004-11-03 Thread Micheal Patterson

- Original Message - 
From: Mark Jayson Alvarez [EMAIL PROTECTED]
To: albi [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Wednesday, November 03, 2004 7:46 PM
Subject: Re: How can I specify the ipaddress in smbfs entry in fstab?


--- albi [EMAIL PROTECTED] wrote:
hi,
  mountpt
 //[EMAIL PROTECTED]/mp3s   /mp3
you can probably use e.g.
//[EMAIL PROTECTED]/mp3s  /mp3
It still doesn't work.
I remember mounting it manually using the command
mount_smbfs -I ipaddress  //[EMAIL PROTECTED]/mp3s /mtpoint
I don't think substituting ipaddress(eg, 10.1.1.1) for
samba in [EMAIL PROTECTED] will make any sense because I
still have to specify its IP address using the -I
option whenever I mount it manually.

in your /etc/fstab, but of course you can also add
your samba-server
in /etc/hosts
tried it also, but didn't work.
Anymore idea? thanks.

If you trust those with root access on your system, you can use the 
/etc/nsmb.conf file and configure that with the proper info for the 
remote server:

[HOST:USER:SHARE_NAME]
addr=HOST_IP
password=USER_password_on_remote_system
workgroup=domain/workgroup
... then edit your fstab to something like:
//[EMAIL PROTECTED]/SHARE   /mountpointsmbfs   rw,-N,-I=remote 
system ip   0  0

USER, HOST, SHARE are the same as in the nsmb.conf file, and I've found 
that these are often case sensitive. If the password is listed in 
nsmb.conf, then the -N in the fstab entry will use that password and not 
require you to enter it. Once done, a simple mount /mountpoint should 
get you on your way.

Hope it helps.
--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [OT] Re: Serious investigations into UNIX and Windows

2004-10-29 Thread Micheal Patterson
.
- Original Message - 
From: Ted Mittelstaedt [EMAIL PROTECTED]
To: Ed Budd [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Friday, October 29, 2004 1:03 AM
Subject: RE: [OT] Re: Serious investigations into UNIX and Windows



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Ed Budd
Sent: Wednesday, October 27, 2004 10:54 AM
To: [EMAIL PROTECTED]
Subject: [OT] Re: Serious investigations into UNIX and Windows
It doesn't seem to matter whether the topic is international affairs 
or
computer science, when the discussion degenerates to grandiose and
overgeneralized assessments regarding human nature it's time for 
the
thread to die, at least IMHO.

No, we haven't brought Hitler and the Nazi's up, yet, so we are still
viable. ;-)
Ted
You can have that discussion by yourself, I won't jump into that fire 
pit.

--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sendmail just wont work

2004-10-28 Thread Micheal Patterson


- Original Message - 
From: nocturnal [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 28, 2004 10:31 AM
Subject: sendmail just wont work


 Hi

 I don't think i'll be lying when i say that i've setup close to a
 hundred FreeBSD servers(or 100 times) and the last one i setup was for a
 dedicated server customer but it has me stumped cuz sendmail just wont
 work on it, i used to get some localhost related errors in
 /var/log/maillog which i did not save.
 It did say something about Connection refused by localhost. In rc.conf i
 have sendmail set to NONE since it's not a smtp server, only a webserver
 and i have other webservers which have the sendmail option in rc.conf
 set to NONE but on them people can use the php mail function just fine.
 The issue is mainly that they want to use the mail() function in PHP but
 i've also tried just sending mails from the command line with sendmail
 and with the t argument but it never works.

 I don't know what else to say, if you need more info about the system
 then ask me. It's FreeBSD 4.10 and here are some config files.

 /etc/hosts
 ::1 localhost.polarfilm.com localhost
 127.0.0.1   localhost.polarfilm.com localhost
 #213.80.36.150  web01.polarfilm.com web01
 #213.80.36.150  web01.polarfilm.com.

 -
 /etc/rc.conf
 defaultrouter=secret
 font8x14=iso15-8x14
 font8x16=iso15-8x16
 font8x8=iso15-8x8
 hostname=web01
 ifconfig_fxp0=inet secret  netmask secret
 inetd_enable=NO
 kern_securelevel_enable=NO
 keymap=swedish.cp850
 nfs_reserved_port_only=YES
 scrnmap=iso-8859-1_to_cp437
 sendmail_enable=NONE
 sshd_enable=YES
 hostname=secret
 usbd_enable=NO
 moused_type=NO
 moused_enable=NO
 linux_enable=YES
 -
 -- 



 With kind regards

 Stefan

 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


In your /etc/hosts.allow file add sendmail: 127.0.0.1 : allow and see if
it helps.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: dummynet

2004-10-28 Thread Micheal Patterson


- Original Message - 
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Thursday, October 28, 2004 3:58 PM
Subject: Re: dummynet


 In a message dated 10/28/04 12:52:14 PM Eastern Daylight Time,
 [EMAIL PROTECTED] writes:
 Funny, I thought that's what Dummynet did.  It seems that you wouldn't
 want to steer a user into a horribly overpriced closed-source
 rate-limiting solutuion when it's available for free in the OS.

 BTW: Nice email addr. ;)
 
 Ah, but its not really available for free, because the free ones don't
work
 well, aren't supported and don't scale. Plus it seems that unless you
 value your time at $2./hr its already cost you more than the $800. to try
to
 use the free stuff. Are you planning on completely rewriting it yourself
 using dummynet as the code base? What good is open source if
 the entire code base is nowhere near as good as what you can buy?
 You would really struggle with an inadequate open source solution
 rather than pay for something that works?

snip


 TM

I'm just curious to know if you're ever actually looked at the hardware
options to see what OS they function on. I think you'd be surprised to find
that many of the more popular ones, are running on some flavor of either BSD
or Linux. On the support issue, dummynet is supported by it's developer,
Luigi Rizzo and he literally begs you to contact him directly if you locate
a bug in the subsystem, need some questions answered and even offers his
support under contract if you prefer.

3. Support
If you have found some bug, please report it to me by email, but don't
forget to include information on which version of FreeBSD and dummynet you
are using, your rules (ipfw show; ipfw pipe show), your configuration
(bridge or router) etc.
If you have a simple question, again just email me and i generally try to
reply as soon as possible. Again, please supply details!
For more complex things (like i have no time to learn how to use it, i just
want this work done), or customizations and additions of new features to
dummynet/ipfw, I am available (through my department) for doing support on a
contract basis.
Email [EMAIL PROTECTED] for discussing details.

As far as being nowhere as good as you can buy, take a WatchGuard Firebox
X1000 for example, they're pretty popular because they work. People that use
them always tell me they prefer them to any *Nix based solution. By that
statement, I know they've not really looked into that unit because the
developers plainly state that it runs on a Linux hardened kernel. It
terminates vpn connections, both ipsec and pptp, rate limits, nats and
firewalls. All of the very same features you can do with Linux or FreeBSD
using the appropriate packages.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: dummynet

2004-10-28 Thread Micheal Patterson
.
- Original Message - 
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 28, 2004 5:39 PM
Subject: Re: dummynet


In a message dated 10/28/04 6:07:18 PM Eastern Daylight Time,
[EMAIL PROTECTED] writes:
As far as being nowhere as good as you can buy, take a WatchGuard 
Firebox
X1000 for example, they're pretty popular because they work. People 
that use
them always tell me they prefer them to any *Nix based solution. By 
that
statement, I know they've not really looked into that unit because the
developers plainly state that it runs on a Linux hardened kernel. It
terminates vpn connections, both ipsec and pptp, rate limits, nats and
firewalls. All of the very same features you can do with Linux or 
FreeBSD
using the appropriate packages.
---
I never said anything about the O/S not being able to do it...
works is a relative term. Most of the linux firewall/bwmgt boxes are 
just
the
same marginal stuff in the native O/S with a front end. Its better 
than
nothing,
but no better than dummynet, so no sense bringing them up. Allot's 
stuff runs
on linux, etinc's stuff runs on both linux and freebsd. So it 
certainly can be
done on un*x.

The problem with dummynet is that once you do all the work and figure 
it all
out,
its still only marginally functional compared to something relatively
inexpensive.
So instead of buying the $3500 box that is everything you need, you've 
spend
$800
on hardware, $2000 worth of time, and you still have something not 
nearly as
good.
One question, have you ever used dummynet? If so, I'm curious as to why 
you find it only marginal. Not to be rude, but if you've not used it, 
please stop trolling.

--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Serious investigations into UNIX and Windows

2004-10-27 Thread Micheal Patterson
.


- Original Message - 
From: Ted Mittelstaedt [EMAIL PROTECTED]
To: Micheal Patterson [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Wednesday, October 27, 2004 3:24 AM
Subject: RE: Serious investigations into UNIX and Windows



I'll make this short, sweet, and to the point. The Human Race, is by nature
a lazy race. We, as in, ALL humans, strive to make our life easier. I'm well
aware of monopolies and their effect on us. I'm also aware of how technology
has changed our lives. If you think that you, or I don't have it easy? Go
check out the Amish. Ask them about why they don't have autos, or computers,
electricity, running water, internal plumbing or any other item you and I
take for granted on a day to day basis. Live for a year in the middle east
in a tent, with none of those items and tell me that you'd not be thrilled
to have a toilet to sit on again.

As for your Milk monopoly, a few words, Pail, Bucket and grab an udder and
roll your own. Unless you own the source of a product, you can't
monopolize it, or prevent others from undercutting you.

Don't harp on me about the internet and it's creation and how or why it was
designed. I know why it was designed as I was a part of the US Air Forces
side of it's inception. It's initial civilian usage was designed to allow
colleagues from the testing universities to share data quickly and
efficiently. DNS was designed because a host file couldn't hold every host
that used it. The US Military had an interest in it as a possible redundant
network in the event that Autovon, or Autodin failed and wanted a
non-centralized network that could still function in the event of
catastrophic failure of their internal communications network.

Bottom Line.

We're lazy, we've always been lazy and damn it, we WILL always look for
something easier, more convienient that can do more.

So, to you, Windows is harder to administrate, to me Unix is harder to
administrate. Who do you think's had to spend more time on the phone getting
someone else to answer their questions and who's had to look it all up
themself? I don't call MS for my issues.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Serious investigations into UNIX and Windows

2004-10-26 Thread Micheal Patterson


- Original Message - 
From: Ted Mittelstaedt [EMAIL PROTECTED]
To: Micheal Patterson [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Tuesday, October 26, 2004 1:20 AM
Subject: RE: Serious investigations into UNIX and Windows




  -Original Message-
  From: Micheal Patterson [mailto:[EMAIL PROTECTED]
  Sent: Monday, October 25, 2004 9:44 AM
  To: Ted Mittelstaedt; [EMAIL PROTECTED]; [EMAIL PROTECTED]
  Cc: [EMAIL PROTECTED]
  Subject: Re: Serious investigations into UNIX and Windows
 
 
  Honestly, what makes you think that Windows is more complex in it's
  administration than a *Nix system?

 Well, the first thing that makes me think this is because the ISP I
 work at has an arm of the businesses that is purely Windows
 techs who companies pay to fix their Windows servers, and I get called
 in to help fix lots of messes there pretty regularly.  (even
 though I do not have a MCSE myself)

 I've seen the stuff with my own eyes.  It ain't pretty.

 If you think that administering a Windows server is so simple then
 answer the following test:

 How do you lock down an Exchange 5.5 server to prevent a spammer from
 using it as a relay.

 I know how to do it.  No, it does not involve grubbing around in the
 registry.  No it is not documented, either.  I know for a fact that
 it isn't because I was in the conference call
 where we had to do it, and the Microsoft support tech himself told us
 it wasn't documented.


Are you referring to reconfiguring the IMC with:

Reroute incoming SMTP mail, then in Routing Restrictions,  selecting
Hosts and Clients with these IP addresses and leaving the data fields
blank?

If that's the method that you're talking about, it's only non-documented
within MS's help files. It's plastered all over the web. Do a search on
google for MS exchange 5.5 open relay and just look at the info that you
get. If that's the issue that you're discussing, someone in your admin
section just cost the company the price for the trouble ticket for no reason
because they didn't bother to look for it.

  It's common knowledge that Windows is
  easier to manage. That's one of it's selling points and it always has
  been. Windows is now easier than ever, just point and click. Tell me
how
  many times have you heard someone say that about any *Nix OS currently
  available?
 

 Windows by itself is pretty useless as a server.  It only becomes useful
 when you start adding in all the other crap, like a mailserver (exchange)
 a terminal server, a backup software, etc.

People in the type of network that I'm in, only use Windows for applications
that require it's use. Telerad, Centricity, and various other medical
software that requires MSSQL. All other applications here on my network are
using FreeBSD from 4.9 to 5.3.7 or AIX.

 You have obviously never had to sort out a mess with Veritos ie: Seagate
 Backup on Windows.  Backup is so hairy under Windows servers that even
 Microsoft themselves is afraid or unable to release a backup program
 with the operating system that backs up open files.  And SQL server,
 Exchange, and any other serious server application ALWAYS has open
 files under a Windows server.

Oh, yes.. I've had my share of issues with Windows. Just as I've had with
every other OS that I've used. I also know how to use login restrictions to
force users out of the network so that the backups can occur to reduce the
amount of open file skips as well.

  The human race as a whole, is always looking for something to make doing
  something easier for them. That's what drives our desire to contstantly
  design new technology.
 

 Hate to wake you with the clue phone but WE don't design new technology.
 The people who design new technology are the companies that produce
 it.  And they have agendas OTHER than just making your life easier.
 Such as making money.  Why do you think that there's a new version of
 Microsoft Word every couple years?  Can you tell me with a straight
 face that each new version of Word has made it easier to type a
 typical business letter?

Clue phone? How about letting me smack you in the forhead with a clue bat.
You speak about companies having other agendas. Yes, that's true. Pray tell,
do answer the inevitable quesiton. How is it that companies, corporations
and other big business are able to make that profit?

Do they force their wares onto the unsuspecting public and force us to
purchase them?

Do they force you to use the aftershave you use to make you smell better to
the little woman?

Do they force upon you the car that you drive, the furniture in your home,
the home you live in, is that forced upon you by anyone? Wait for it, wait
for it. Clue bat time.

You, as an individual, chose to own / use those items. Just as everyone else
did. Your desire to make your life easier and more comfortable for yourself
and your family. You, I and everyone around us are what makes the companies
and corporations successful

Re: Serious investigations into UNIX and Windows

2004-10-26 Thread Micheal Patterson


- Original Message - 
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Tuesday, October 26, 2004 12:32 PM
Subject: Re: Serious investigations into UNIX and Windows


In a message dated 10/26/04 12:24:06 PM Eastern Daylight Time,
[EMAIL PROTECTED] writes:
 If you think that administering a Windows server is so simple then
 answer the following test:

 How do you lock down an Exchange 5.5 server to prevent a spammer from
 using it as a relay.


So who was the one who said either was easy?

I said it takes a higher
talent level to generally administer a un*x box than a windows box. I don't
think that just because you can think of something thats not easy to do
in windows makes any point at all. The fact that a un*x guy had
to be called in to solve the problem says alot about the type of talent that
is required to do most things that windows techs do.

-

I agree with you. However, it wasn't I that posed that question. :)

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Serious investigations into UNIX and Windows

2004-10-25 Thread Micheal Patterson

- Original Message - 
From: Ted Mittelstaedt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Sunday, October 24, 2004 4:54 AM
Subject: RE: Serious investigations into UNIX and Windows


snip

  There
  are more people around that can administer MS systems than unix,

 Yes,

  and it can
  be done with a lower level of talent. .

 Having seen and dealing with the aftermath of networks owned by
 people that thought that, I have to state your out of your gourd.

 Windows today is just as complex as any UNIX system.  Sure, maybe
 a decade ago a peer-to-peer network of Windows systems your
 statement might have been true, but not today.



This type of discussion has been going around the world since Windows and
*Nix first clashed. Windows has a gui, *Nix by default on most OS's,
doesn't.  To configure Windows, you point here, click there, right click and
check properties here, add this information in the line provided. Click
apply and the program runs and yet there are those that feel it is more
complex than *Nix. I'll tell you what. You take any MS certified, high end
admin, that's never seen a *Nix OS and see how far he gets. Just tell him to
setup ftp with chroot environment, or bind, or heaven forbid Sendmail with
rbl, access, virtual aliasing, etc. If he's never seen it, it'll take him
forever. To those that live in the *Nix world, we can generally walk up to a
Windows DC and make it do what we want. Do you really think that MS was the
first to come up with MS Shares? What about AD User propogation to other
DC's? DNS? Or even Mail? Where do you think they got those ideas from?

Honestly, what makes you think that Windows is more complex in it's
administration than a *Nix system? It's common knowledge that Windows is
easier to manage. That's one of it's selling points and it always has
been. Windows is now easier than ever, just point and click. Tell me how
many times have you heard someone say that about any *Nix OS currently
available?

The human race as a whole, is always looking for something to make doing
something easier for them. That's what drives our desire to contstantly
design new technology.

o Man walked everywhere then he realized, riding a horse was faster and
easier than walking 3 hours.

o They designed a saddle for the horse because it was easier on the ass than
barebacking it.

o They designed a car because it was easier than riding a horse and thought
to be faster in it's infancy.

o Cars were made faster as the years went along because we wanted to get
there faster.

o The airplane was designed because people wanted to leave the ground and
fly to wherever they wanted to go.

o Helicopters were made because it's easier to land in a field with no
landing strip than to build the runway for a plane.

o Computers were made because people got headaches doing complex
calculations and wanted something that could do it for them and do it faster
as well.

and so on and so forth. The human race, as a whole, is lazy and always
looking for something to make their lives easier. In this day and age of
computer technology, MS provides that to us better than *Nix does. Yet,
there are those that are adamant that Windows is more complex than *Nix is.
How ironic.

 Ted


--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Internet Access

2004-10-22 Thread Micheal Patterson
- Original Message - 
From: Li Davis [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 21, 2004 11:58 PM
Subject: Internet Access


Hi,
I am switiching my OS over to FreeBSD.  Hopefully, that is.
My DSL service with SBCYahoo said that they can't integrate with 
FreeBSD.  I have to find someone in the area I live that will work 
before my first 30 days is up with SBC, so I can cancel the one year 
contract without big $ penalties.

It seems like it should work, from what is said about FreeBSD.  Could 
you please help me with this?  Thank you.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]
I have various sites that use SBC dsl just fine. SBC doesn't know 
officially support FreeBSD which is kind of surprising these days as 
various other venders (via google search) have setup info for freebsd 
and their service. At any rate, it will work. Since all new service via 
SBC uses PPPOE, that will need to be configured on your system to use 
dsl via SBC. Have a look at the handbook link below.

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/pppoe.html
--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: vpn

2004-10-18 Thread Micheal Patterson
.


- Original Message - 
From: Dmitry Chorine [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, October 18, 2004 1:56 PM
Subject: vpn


Hello

I need to be able to connect to my FreeBSD server using VPN client that
comes with Windows 2000/XP.

1) I would like to be able to surf internet but I don't want others to
see my real public IP, only public IP of my FreeBSD server.
2) Is it possible to use only software part that comes with FreeBSD
itself? Without installing any 3rd party applications even from ports?
(like I found in handbook how to do side-to-side vpn) but I need to be
able to dial-in using windows's client.


Thanks in advance
___



mpd from ports will terminate 128bit pptp connections via freebsd with the
native Windows 2000/XP pptp client. I use it all the time. That would be the
only thing you will need to intall and it's server side only.


Multi-link PPP capability
  PAP, CHAP, and MS-CHAP authentication
  PPP compression and encryption
  Point-to-Point Tunnelling Protocol (PPTP)
  PPP over Ethernet (PPPoE)
  RADIUS (authentication and accounting)


--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Read-Only file system

2004-10-14 Thread Micheal Patterson

- Original Message - 
From: steveb99 [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Thursday, October 14, 2004 4:28 PM
Subject: Read-Only file system


 I appear to have hosed myself and having trouble finding out what I do
 and how to fix it.  It appears that many of my file-systems are now
 saying they are read-only and I can't do anything with them, even when I
 login as root.
 I'm still learning so not a production mess. Can someone point to me how
 a file system can become Read-Only, the file permissions are fine.
 Also can this be repaired if so what should I be reading to learn to do
 that.

 TIA,
 Steve B.

First thing I would look at would be to make sure that the settings in
/etc/fstab are configured to be mount your slices as read write (rw) instead
of read only (r).

Your /etc/fstab should have entries similar to the one below. This would be
a normal one.

/dev/da0s1a /   ufs rw  1   1

Where you see rw, if that is an r only, then the file system will be mounted
as read only and cause your problem.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD 5.x and Lint

2004-09-30 Thread Micheal Patterson
Stupid question maybe, but are there any plans on putting the comments back
into Lint? I realize that these may be documented within the online
handbook, however, for those of us, who at times are required to go to a
remote site, and the net link has failed, needing to recompile something
without comments or access to the handbook is a problem.

Thanks.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 5.x and Lint

2004-09-30 Thread Micheal Patterson


- Original Message - 
From: Kris Kennaway [EMAIL PROTECTED]
To: Micheal Patterson [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Thursday, September 30, 2004 4:25 PM
Subject: Re: FreeBSD 5.x and Lint

On Thu, Sep 30, 2004 at 04:22:27PM -0500, Micheal Patterson wrote:
 Stupid question maybe, but are there any plans on putting the comments
back
 into Lint? I realize that these may be documented within the online
 handbook, however, for those of us, who at times are required to go to a
 remote site, and the net link has failed, needing to recompile something
 without comments or access to the handbook is a problem.

They're in NOTES instead, from which LINT is autogenerated.

Kris

---

Just out of curiosity, have you compared 5x NOTES to a 4.10 LINT and see
what's missing? I don't see anything on FIREWALL or IPFW or even IPF within
the 5.x NOTES, whereas within a 4.10 LINT, you have all the information for
the various settings. You need to cross reference the 5.x LINT, NOTES and
Handbook now to get the information you had within one single file within
the 4.x branch. Not that I'm really complaining, it's just that from all of
the various other version updates to FBSD, from 2.x to 3.x, from 3.x to 4.x
everything you needed to know about the kernel options was contained within
one single file. With the jump from 4.x to 5.x, it's no longer the same.
There was a time, when you could take LINT, remove what you didn't need and
actually build your kernel and maintain the comments so you knew exactly
what you had within your kernel. That's no longer an option unless one
desires to recombine NOTES and LINT themself.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 5.x and Lint

2004-09-30 Thread Micheal Patterson

- Original Message - 
From: [EMAIL PROTECTED]
To: 'Kris Kennaway' [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Thursday, September 30, 2004 4:29 PM
Subject: RE: FreeBSD 5.x and Lint


 From the handbook:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-confi
 g.html

 In FreeBSD 5.X and later versions you can still generate a buildable LINT
 file by typing:

 # cd /usr/src/sys/i386/conf  make LINT

 Kevin Glick
 ITS Manager
 [EMAIL PROTECTED]
 Sterling Business Forms

I'm not concerned about the LINT generation, I'm concerned with the lack of
comments within LINT now compared to the 2.x, 3.x and 4.x trees.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: natd not doing anything

2004-09-29 Thread Micheal Patterson




- Original Message - 
From: Alex de Kruijff [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Wednesday, September 29, 2004 10:05 AM
Subject: Re: natd not doing anything


 I changed the list from current@ to questions@, since you question is
 not only for CURRENT.

 On Tue, Sep 28, 2004 at 09:11:39PM +1000, Rebecca Dridan wrote:
  Hi all:
 
  I am having some issues with network set-up. I'm running CURRENT as of
  26th September, with an ipfw firewall and natd. I have one gateway
  machine with one external NIC and 3 internal NICs. At present nothing
from
  my internal machines can get out. I've reduced the firewall
(temporarily) to
  a basic
  ipfw -f flush
  divert natd ip from any to any via fxp0
  allow ip from any to any
 
  When I turn logging on, I see the packets being diverted, and then
  accepted by later rules, but not being rewritten in between, ie
 
  ipfw: 30 Divert 8668 TCP 192.168.7.2:54619 remote IP:1025 out via fxp0
  ipfw: 70 Accept TCP 192.168.7.2:54619 remote IP:1025 out via fxp0
 

From the looks of that log entry, he's created a double NAT with 192.168.7.2
being the IP of fxp0, his outside interface. If his next link (router?)
isn't configured to do NAT for the range he's using on fxp0, he'll not have
a back channel for the traffic to respond to and routing will fail. The end
result, is the problem that he's encountering.

snip

  options IPFILTER_DEFAULT_BLOCK  #block all packets by default
  options IPFIREWALL  #firewall - need for mac
filtering
  options IPFIREWALL_DEFAULT_TO_ACCEPT#allow everything by

snip

 Your kernel is fine. Otherwise, you wouldn't have the ability to log or
 to diverd. The later would result in packets being throuwn away at rule
 30.


He has both accept and block as the default configuration for the firewall.
That's not fine. I honestly don't know if it may cause a conflict with them
both defined nor which one would take precedence when both configured. I
would recommend removing one or the other for the default action he wishes
his firewall to take.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: natd not doing anything

2004-09-29 Thread Micheal Patterson


- Original Message - 
From: Alex de Kruijff [EMAIL PROTECTED]
To: Micheal Patterson [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Wednesday, September 29, 2004 10:51 AM
Subject: Re: natd not doing anything


snip

 This is not a problem. First ipfw and ipf are two different firewall
 rules. Its perfectly ok for one to deny everything by default and the
 other to accept everything. Also both firewalls can be used to gether.
 Secondly where one to set something like this for one firewall, then
 that firewall would most likly pick only one setting.

 He probly don't use ipf and thus can remove IPFILTHER lines. All this
 does is to make the kernel a bit smaller.

 -- 
 Alex

 Articles based on solutions that I use:
 http://www.kruijff.org/alex/FreeBSD/

Oops.. my bad. I missed that it was IPFilter and IPFW. As for the double
nat, that can be an issue as I've recently had that exact same problem. If
his router / natd unit isn't configured to provide nat for the range he is
using, it will fail due to routing.

--

Micheal Patterson
Senior Communications Systems Engineer
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: random device settings on bind9

2004-09-21 Thread Micheal Patterson

- Original Message - 
From: Joshua Lewis [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, September 21, 2004 10:44 PM
Subject: random device settings on bind9


I have set up bind 9.2.3 on 4.10. I followed the instructions for 
setting
up random as per the instructions at the end of the bind install.

the instructions say to add the rndc-key in my namd.conf. I was 
wondering
if that is a good idea? Doesn't this file get quarried by people on 
the
Internet. So am I basically just showing my secret key to everyone?

Thank you,
Joshua Lewis

No you're not. The named.conf file doesn't get queried from the net. 
It's only function is to provide options to the daemon and how to 
respond to the rndc command channel.

--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Too many dynamic rules, sorry

2004-09-17 Thread Micheal Patterson


.


- Original Message - 
From: Norm Vilmer [EMAIL PROTECTED]
To: Micheal Patterson [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, September 17, 2004 9:41 AM
Subject: Re: Too many dynamic rules, sorry


 Micheal Patterson wrote:
  .
 
 
  - Original Message - From: Norm Vilmer
  [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Thursday, September 16, 2004 11:57 PM
  Subject: Too many dynamic rules, sorry
 
 
  If I repeatedly nmap my FreeBSD 4.10 machine configured with
ipfirewall,
  I get the message Too many dynamic rules, sorry. Doing a sysctl -a
  |grep ip.fw I can see the the net.inet.ip.fw.dyn_count has reached the
  max value of 8192 that I set. The net.inet.ip.fw.dyn_ack_lifetime is
set
  to 300, so the dynamic rule count starts going down after about 5
  minutes after the simulated attack.
 
  Questions:
 
  When this happens, if my firewall still fully operational, in other
  words can I safely ignore this message?
 
  Is there a way to fix this?
 
 
 
  The error Too many dynamic rules, sorry will cause the system to drop
  any packets that are covered by a keep-state entry. So, the firewall,
  while operational, is in a dead lock down state for any outbound traffic
  until the dynamic rules clear out. I'm hoping that you're checking the
  system with nmap from behind it, because if your outside the firewall,
  then you're keeping state in inbound traffic and that's bad. You only
  want keep-state from traffic leaving that system, not to it.
 
  -- 
 
  Micheal Patterson
  TSG Network Administration
  405-917-0600
 
  Confidentiality Notice:  This e-mail message, including any attachments,
  is for the sole use of the intended recipient(s) and may contain
  confidential and privileged information. Any unauthorized review, use,
  disclosure or distribution is prohibited. If you are not the intended
  recipient, please contact the sender by reply e-mail and destroy all
  copies of the original message
  ___
  [EMAIL PROTECTED] mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to
  [EMAIL PROTECTED]
 
 Thanks for your help.

 I was running nmap against my public or outside interface. This is my
 first FreeBSD firewall, so I am sure my rules are not optimal, however,
 the firewall appears to be doing what I want. I gathered these rules
 from a number of how-to's and postings on the web with only a partial
 understanding of what they actually do (yes, I know, problem # 1).
 Here are the rules that I have that keep-state on the outside interface:

 #For DNS
 add 01300 pass udp from ${oip} to any 53 keep-state
 # For NTP
 add 01400 pass udp from ${oip} to any 123 keep-state
 # For VPN
 add 01500 pass gre from any to any keep-state
 # For ICMP
 add 01600 pass icmp from any to any via ${oip} keep-state

 Do you think these are causing the problem?

 Norm Vilmer

I don't recall if you're running ipfilter or ipfw on that system. I don't
know ipfilter well enough to assist yet, but with ipfw, if you have a
check-state entry above your keep-states, that may reduce the amount of
dynamic rule entries that you'll have. What the check-state does, is to
check the dynamic list, if an entry already exists, it stops processing
rules there.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Too many dynamic rules, sorry

2004-09-17 Thread Micheal Patterson


- Original Message - 
From: Norm Vilmer [EMAIL PROTECTED]
To: Micheal Patterson [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, September 17, 2004 10:30 AM
Subject: Re: Too many dynamic rules, sorry


snip


 I do have a check-state rule

 add 00200 check-state

 Norm Vilmer

Ok. Then right above the check-state entry, place an

allow ip from 123.123.123/24 to 123.123.123./24

Replace the ip's with the appropriate network/metric for your lan and that
will allow lan traffic to go to itself unhindered by any stateful checks.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Too many dynamic rules, sorry

2004-09-17 Thread Micheal Patterson


- Original Message - 
From: Norm Vilmer [EMAIL PROTECTED]
To: Micheal Patterson [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, September 17, 2004 11:47 AM
Subject: Re: Too many dynamic rules, sorry


 Micheal Patterson wrote:
 
  - Original Message - 
  From: Norm Vilmer [EMAIL PROTECTED]
  To: Micheal Patterson [EMAIL PROTECTED]
  Cc: [EMAIL PROTECTED]
  Sent: Friday, September 17, 2004 10:30 AM
  Subject: Re: Too many dynamic rules, sorry
 
 
  snip
 
 I do have a check-state rule
 
 add 00200 check-state
 
 Norm Vilmer
 
 
  Ok. Then right above the check-state entry, place an
 
  allow ip from 123.123.123/24 to 123.123.123./24
 
  Replace the ip's with the appropriate network/metric for your lan and
that
  will allow lan traffic to go to itself unhindered by any stateful
checks.
 
  --
 
  Micheal Patterson
  TSG Network Administration
  405-917-0600
 
 
 
 would this be the same?

 add 00200 allow all from any to any via ${iif} keep-state
 add 00210 check-state



The goal is to not use dynamic rules for your local lan, only the traffic
from the lan to the net. Otherwise, you're wasting dynamic state table space
for rules that aren't necessary.

A very basic stateful ruleset:

ipfw add 100 allow ip from 1.1.1.0/24 to 1.1.1.0/24
ipfw add 500 check-state
ipfw add 600 allow ip from 1.1.1.0/24 to any keep-state
ipfw add 65000 deny log ip from any to any

That type of ruleset, will allow local traffic without using state table,
and the entry at 1000 will catch everything else outbound and use state
tables for it.  If it's not originating from your network, and there's no
state entry, it's blocked by 65000.

--

Micheal Patterson
TSG Network Administration
405-917-0600

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Too many dynamic rules, sorry

2004-09-16 Thread Micheal Patterson
.
- Original Message - 
From: Norm Vilmer [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, September 16, 2004 11:57 PM
Subject: Too many dynamic rules, sorry


If I repeatedly nmap my FreeBSD 4.10 machine configured with 
ipfirewall,
I get the message Too many dynamic rules, sorry. Doing a sysctl -a
|grep ip.fw I can see the the net.inet.ip.fw.dyn_count has reached the
max value of 8192 that I set. The net.inet.ip.fw.dyn_ack_lifetime is 
set
to 300, so the dynamic rule count starts going down after about 5
minutes after the simulated attack.

Questions:
When this happens, if my firewall still fully operational, in other
words can I safely ignore this message?
Is there a way to fix this?

The error Too many dynamic rules, sorry will cause the system to drop 
any packets that are covered by a keep-state entry. So, the firewall, 
while operational, is in a dead lock down state for any outbound traffic 
until the dynamic rules clear out. I'm hoping that you're checking the 
system with nmap from behind it, because if your outside the firewall, 
then you're keeping state in inbound traffic and that's bad. You only 
want keep-state from traffic leaving that system, not to it.

--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: setup firewall/router/proxy

2004-09-01 Thread Micheal Patterson


- Original Message - 
From: Eric Brunner-Williams in Portland Maine [EMAIL PROTECTED]
To: Steve Bertrand [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; messmate [EMAIL PROTECTED];
freebsd-questions-en [EMAIL PROTECTED]
Sent: Wednesday, September 01, 2004 7:27 AM
Subject: Re: setup firewall/router/proxy


 Oki all,

 If it isn't too much of a bother, someone asked me the same question,
 but for a platform I'm unfamiliar with -- a 2.4.18-6mdk (Mandrake)
 linux distro. As the target is not freebsd, I'll be happy with any
 technical response, and off-list is probably better than on.

 TiA,
 Eric


It's been a long time since I've played with Linux in general, last one was
RH. If Mandrake has ipchains or ipfw, I'd say go with either and still use
squid. It's popular, easy to configure, works well and has support. It
shouldn't need any routing daemon as long as none of the advanced routing
protocols are needed.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: rl2 not working on otherwise functioning network/gateway

2004-09-01 Thread Micheal Patterson

- Original Message - 
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 01, 2004 9:42 PM
Subject: rl2 not working on otherwise functioning network/gateway


Ok, if someone here can help me w/ this I will be really grateful. I
turned to this list after a post on a forum offering the expected 
advice
didn't help solve my problem. Basically my computer acts as a gateway 
for
my network, and it functions fine. I then decided to add another 
network
adapter so that I could add my file server to the network. But after
making the necessary changes to my rc.conf, I found that the network 
card
was active, but had no IP address, and wasn't passing traffic. I'm
attaching my dmesg, and the output from ifconfig rl2. Here are a few
things I've tried to remedy the problem.

snip
You can't have multiple nics on the same network segment unless the 
system is in bridge mode. If you're wanting to route through, I assume, 
rl0 to the net, and have rl1 internal to the other system(s), you'll 
either have to bridge rl1 / rl2 together (man bridge) or renumber your 
internal systems to something other than the same network that rl1 is 
on.

--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [OT] VPN issues with some windows users...

2004-08-17 Thread Micheal Patterson

- Original Message - 
From: Eric Crist [EMAIL PROTECTED]
To: 'Jonathan T. Sage' [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Tuesday, August 17, 2004 8:48 PM
Subject: RE: [OT] VPN issues with some windows users...


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Jonathan T. Sage
Sent: Tuesday, August 17, 2004 8:51 PM
To: Eric Crist
Cc: [EMAIL PROTECTED]
Subject: Re: [OT] VPN issues with some windows users...

Eric Crist wrote:
 Hello all,

 I'm sorry this is a bit off-topic, but you're the only truly
 knowledgable group I know. ;)  Some fellow users and I have been
 having some issues connecting to a Cisco VPN system with
the built-in
 windows VPN software.  While successfully connected to the internet
 (at home, for example), I connect to the remote VPN.  Instantly, my
 internet connectivity seems to be lost, but I can use the VPN
 perfectly fine.  As soon as I disconnect, my internet
connectivity is
 completely restored. I have a second VPN I connect to using V-One's
 SmartPass software, and I have no issues (i.e. everything works
 perfectly, including my 'net connection).

 Anyone have any ideas?
probably (although not definatally) is related to a
misconfigured router
on the cisco VPN not allowing internet traffic out.  this might be
intentional too.  I run a very small vpn, and in order to keep
connection times down (my user base is um  well then) i have
configured to not allow any traffic other than directly to
the machine
that hosts the vpn.
dunno if this helps much, but might give you a starting point.
Jonathan,
Thanks for the quick reply.  I'm not trying to access the internet
through this VPN, I want to access the internet through my own 
internet
connection, and have only the VPN traffic try to use the VPN tunnel.
The SmartPass VPN connection resides just fine without interfering 
with
my connection.  This is what I'm hoping for.

Does this make sense?
Thanks,

Eric F Crist
Best Access Systems
11300 Rupp Dr. Burnsville, MN 55337
Phone: 952.894.3830
Cell: 612.998.3588
Fax: 952-894-1990

When I was using the Cisco VPN client to connect to our router as a 
terminator back in the olden days, there was an option for the security 
policy within the client software to totally disable access to 
non-secure networks while the client was active. I can't see Cisco 
changing that as time progressed.

There's also a couple of things to consider when working with the built 
in vpn software for Win2k and WinXP. Windows, when connected via builtin 
VPN, will connect with the remote network and provide a metric of 1 for 
that route and it will also be flagged as a default gateway (remote 
network of 0.0.0.0) , it becomes your best, lowest metric, route to the 
world by design. I would say, that one of your vpn connections is 
configured to allow your traffic to pass through it to the net whereas 
one is not. Since my remote vpn users need access to medical web sites 
due to the nature of thier specific jobs, I have to provide them a 
method of either adjusting the metric on their individual systems or 
configure to allow their web traffic to proceed as required. To me, it's 
easier for me to allow their traffic and filter it heavily than to allow 
remote users in other states administrative control over their network 
settings.

--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message. 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: using FreeBSD within a cluster

2004-08-03 Thread Micheal Patterson


- Original Message - 
From:   [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, August 03, 2004 1:22 AM
Subject: using FreeBSD within a cluster


 Hi there. :$
 Perhaps it is not a good start for a letter to such an organization, but I
hope to be excused (please). And, quite straightforward, i wish to ask you a
question. I can't find an answer to it in any FreeBSD FAQ, so -

 The problem that I have is how to orgainze cluster between (with) a number
of FreeBSD AND Linux servers. OR, if that is not suitable, using several
FreeBSD servers. I couldn't find any information explaining that variant of
using FreeBSD, so here goes the question:

 are FreeBSD-with-Linux clusters really possible?

 And, in case of positive answer, here is the next question - where can I
find any information about how it will become possible?
 How to make Linux/FreeBSD (preferably), or only FreeBSD servers work
together in a cluster?

 Again wishing you all the best and waiting for answer -
 Anton Suhonosenko
 [EMAIL PROTECTED]
 ICQ 143779294

 P.S. I am sorry for my terrible english.


Are you wanting to truely cluster the servers or are you wanting to load
balance services (web, mail, pop3, etc) between a group of servers?


--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: freebsd How do you restart rc.conf without rebooting

2004-07-31 Thread Micheal Patterson
- Original Message - 
From: Dan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, July 30, 2004 3:28 PM
Subject: freebsd How do you restart rc.conf without rebooting


How do you restart rc.conf without rebooting your machine.
Dan

/etc/netstart if I recall will reload and execute the settings within 
rc.conf without rebooting.

--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Re: BigApache for Windows - Why doesn't BSD have an installerpackage like this ???

2004-07-29 Thread Micheal Patterson

- Original Message - 
From: DK [EMAIL PROTECTED]
To: Guillermo_García-Rojas [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Thursday, July 29, 2004 1:36 AM
Subject: Re: Re: BigApache for Windows - Why doesn't BSD have an
installerpackage like this ???


snip

 
  Can you live without your Windows 2000 GUI? Can you work without it?

 Why would I want to... a GUI makes life easier  makes my ability to do
work
 more productive :)

Not really. Your windows 2k pro doesn't allow for remote administration
unless you have pc anywhere running, or it's connected to a domain to allow
remote management. If your gui crashes, the box dies. If IE crashes to far,
the box will die. No pretty gui for you then.

  What if some big company ask you to work for them, but they have UNIX
  systems, are you prepared or can you handle that work?

 Any OS will take me about 1 week to get up to speed - if its a MS product,
 about 2 days :)

You've been playing with FreeBSD 4.10 for 6 days, and still have issues.
You've played with 4.5 in the past also. Yet you still have problems.


  One more thing, my OpenBSD 3.5 costs me $0, FreeBSD price is $0 too.
  Did you spend the same amount of money on your Windows 2000??

 Yea 0$ - all my software is War... *cough* ... donated

You should be used to the problems of not having docs on the software that's
donated to your hard drive then.  Except in this case, the docs ARE freely
available, it would just appear that you decided to not use them and run
head long into something you know little to nothing about. Not that there's
anything wrong with that, but it's just like buying a car and not knowing it
needs gas. First thing you'd do is blame the car for not running when if you
look at the owners manual, it will plainly tell you that fuel is required.


 Kind Regards,

 DK



 __
 Do you Yahoo!?
 New and Improved Yahoo! Mail - Send 10MB messages!
 http://promotions.yahoo.com/new_mail
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BigApache for Windows - Why doesn't BSD have an installer

2004-07-29 Thread Micheal Patterson


- Original Message - 
From: DK [EMAIL PROTECTED]
To: Jerry McAllister [EMAIL PROTECTED]
Cc: Giorgos Keramidas [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Thursday, July 29, 2004 1:55 AM
Subject: Re: BigApache for Windows - Why doesn't BSD have an installer


 --- Jerry McAllister [EMAIL PROTECTED] wrote:
   - Installing Packages is nice  easy  straight forward from the
  docs(should be more of these!)
   - Installing ports/packages via ftp/net - Forget it!!
   I have barely got BSD running, the last thing I want is connecting a
BSD
   box to my broadband
   connection ?? Does BSD have a default firewall ?? Don't know, having
   trouble installing stuff let
   alone configuring a firewall via scripts/files
 
  You are probably better off and more secure with an initial install,
with
  no additional work or tweaking, of FreeBSD on the net than you would be
  with a MS system with every know fix available.   The system is
  inherently more secure and in addition - and maybe partially because of
  this - fewer, by far,  attempts at cracking FreeBSD are made than are
  made against MS systems.  Some of this is, of course, because there are
  much fewer FreeBSD systems out there to tempt kiddies.  But, the fact
  that cracking FreeBSD is more difficult contributes to this effect.

 So if I do a default install of FreeBSD  then connect to the net for
 ports/packages, is there a default firewall running in the background ??


No, but then again, there are hardly any services either. See, unlike
Windows, you're not going to have the same issues with trojans and breeches.
If it's just you, and you've not added anyone else, you're pretty damn safe.
Root can't log in from remote at all unless you specifically change the
options that would allow it.

snip


--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all
copies of the original message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BigApache for Windows - Why doesn't BSD have an installerpackage like this ???

2004-07-28 Thread Micheal Patterson
.
- Original Message - 
From: Ed Budd [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, July 28, 2004 5:59 PM
Subject: Re: BigApache for Windows - Why doesn't BSD have an 
installerpackage like this ???

snip
...damn I have gone way off track here... sorry for the ranting 
people... but after 6 days
straight of messing around trying to install 
Apache/MySQL/Mod_Perl/Mod_SSL/PHP.. I am a little
tired... 3 days of that was trying to get a basic GUI/File 
Manager/Find Files/Editor working


It must be very tiring and stressful to be a Troll. Perhaps you should 
consider another occupation...

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


If this wasn't a troll, perhaps he needs to stick with Windows until he 
has a better understanding of what the difference between workstations 
and servers really are.

--
Micheal Patterson
TSG Network Administration
405-917-0600
Confidentiality Notice:  This e-mail message, including any attachments, 
is
for the sole use of the intended recipient(s) and may contain 
confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, 
please
contact the sender by reply e-mail and destroy all copies of the 
original
message 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Firewall, OpenVPN and Squid question

2004-07-21 Thread Micheal Patterson


- Original Message - 
From: Paul Hillen [EMAIL PROTECTED]
To: Steve Bertrand [EMAIL PROTECTED]; Paul Hillen [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Wednesday, July 21, 2004 1:33 PM
Subject: RE: Firewall, OpenVPN and Squid question


 I have around 100 users at our site that would require the use of squid,
we
 house are own webserver, mail server, public DNS servers in the DMZ and 2
 private DNS servers on the internal network, used by both Internal and VPN
 users.

 Sites connecting Gateway to Gateway, there are apprx as follows;
 Site 1 - 25 users
 Site 2 - 5 users
 Site 3 - 12 users
 Our site VPN users are Apprx 25, and about 50% of them are connected at
any
 given time.

 My first thought is to put up a Firewall box that can the load of
publishing
 many internal boxes and publish a box with OpenVPN and another for SQUID
 and just keep them all separate.

 Will this setup put to much strain on the FIREWALL box or will it have no
 problem handling the NAT/ROUTING in this configuration.

 Thanks in advance
 Paul


Considering that many of the current hardware firewall solutions aren't much
more than either a BSD or Linux kernel in a ROM chip, with a 486 or 586
based cpu, memory, and a nice gui (Windows or Internal Web interface), I
can't see why a similar system on a PC would be any different.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: VPN server

2004-07-13 Thread Micheal Patterson


- Original Message - 
From: lycanthrope [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, July 13, 2004 6:59 PM
Subject: VPN server


 hello
 I would like to setup my freebsd 5.2-CURRENT box as a VPN server for
windows 2k/xp clients, and enable them to use internet (PPPoE ADSL)
connection. the clients are on various subnets connected to my box via LAN.
 I consider using pptop port for setting up VPN server, but if you have
some other idea, please tell me...all I need is it to support win clients
(and authentication usrname/pass) and I want the users to be able to access
internet..that's all...
 the simpler the merrier :)

 thank you!!

 regards,marin
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


If you want to support mppe128, you can use netgraph-mpd
(/usr/ports/net/mpd/ in the 4.x tree)
It supports username / pass and ip to the vpn client. I would imagine this
is also available in the 5.x tree as well.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: OK i feel stupid about this noob question but....

2004-07-10 Thread Micheal Patterson



- Original Message - 
From: Jammet [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, July 10, 2004 3:52 AM
Subject: OK i feel stupid about this noob question but


 I dont know whats wrong with me but for some reason i cant add users to
 my system. I go through the whole bit of adduser -s but it asks user
 names must match reguilar expressions [regext]   ...  I dont even
 remember that happening when i use to add users or i might just be going
 insane, anyways i put in regext or the username or something but when i
 finaly get through the other 4 questions on there and get to acually try
 to add the user it says it must follow the expression ... I decided to
 beat my head agenst my desk to see if i could knock something lose,
 anyone wanna help with this? i have added users before ( back when i
 first got everything installed about 2 years ago) and have not really
 needed to since, but now im trying again..

 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


Jammet,

adduser.conf doesn't yet exist on your system and adduser is asking you for
the defaults.  If you accept the default entries, it will ask you at the end
to save them. Tell it yes and run add user again and you're all set and back
to your normal routine.


--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: NATD Port Forwarding question

2004-07-04 Thread Micheal Patterson
Is the system configured to accept remote desktop requests? Windows XP has
it disabled by default.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.


- Original Message - 
From: Jon Kurjakovich [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, July 04, 2004 3:57 AM
Subject: NATD Port Forwarding question


 Hi there,

 I am currently using FreeBSD 4.8-RELEASE. I do plan on upgrading to
 5.2-CURRENT shortly but I know people who are using 5.2-CURRENT and are
 experiencing the same problem as me. If this email is not appropriate in
 this mailing list, could you please forward me to the correct one. Thank
 you.

 My problem: I am trying to use NATD to forward packets to machines on
 the internal network using the redirect_port command. I am specifically
 trying to connect to a Terminal Server on a Windows 2000 machine. It
 never seems to work for me. I am running natd using the following
 command: natd -f /etc/natd.conf with the following options in my
 natd.conf file.

 interface tun0
 same_ports yes
 use_sockets yes
 unregistered_only
 redirect_port tcp 192.168.1.2:3389 3389

 When I create an SSH tunnel using putty, that works fine. It is only
 when I try and use natd w/ port-forwarding that it doesn't work. I
 configure an extremely open firewall to ensure it is not my firewall
 causing the problems. The commands I use are:

 /sbin/ipfw -f flush
 /sbin/ipfw add 50 divert natd all from any to any via tun0
 /sbin/ipfw add pass all from any to any

 If anybody could shine any light on this problem for me - it'd be
 greatly appreciated. I have been trying to resolve the problem
 on-and-off for months now to no avail. I finally decided I should try
 the mailing list.

 Thanks.

 Regards,
 Jon


 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Routing problem in IPv4/IPSec VPN environment

2004-06-30 Thread Micheal Patterson



- Original Message - 
From: James P. Howard, II [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 2:57 PM
Subject: Routing problem in IPv4/IPSec VPN environment


 As a personal favor, I am building a VPN for a small business.  I
 have chosen FreeBSD for this due to my greater familiarity.  The
 project will consist of linking four sites, each with a FreeBSD
 system providing DHCP, NAT, and VPN services.  I have built DHCP and
 NAT servers before, but the IPSec and VPN is new to me.

 Right now, the first two systems are nearly complete.  The two
 machines are named goldengate and waltwhitman.  Here's the IP
 config, currently:

   goldengate:  external 192.168.1.101 internal 10.1.1.1
   waltwhitman: external 192.168.1.102 internal 10.1.2.1

 The external interfaces are in the reserved space because testing is
 taking place behind a cable/DSL router providing NAT services.  The
 output of gifconfig -a; ifconfig -a; netstat -rn for each will be
 provided at the end of this message.

 IPSec, with Racoon, is properly exchanging keys.  From goldengate, I
 can ping 10.1.2.1 and from waltwhitman I can ping 10.1.1.1.

 If a Windows computer is connected behind either system, they
 receive an IP (10.1.x.254, where x is the network number).

 The problem is, if behind the 10.1.2.1 firewall, I cannot ping
 10.1.1.1 and vice-versa.  I assume, at this point, this is some type
 of routing issue and not a problem with IPSec.  This seems to be
 confirmed by the fact tracerouting to the local internal interface
 goes through the *other* internal interface first:

snip

Not to be disrespectful, but did you do what I've done in the past and
forget to enable forwarding so the systems can route traffic?

[EMAIL PROTECTED]/sysctl -a |grep forward
net.inet.ip.forwarding: 1

If not, make sure that gateway_enable=YES in rc.conf and reboot, or sysctl
net.inet.ip.forwarding=1 from command line to enable it without a reboot.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: upgrading the perl installation problems.

2004-06-12 Thread Micheal Patterson


- Original Message - 
From: Eric Crist [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, June 12, 2004 2:13 AM
Subject: upgrading the perl installation problems.

Hello list,

I'm trying to install mimedefang from ports, but I get the error:

===  mimedefang-2.43_1 Port requires perl 5.6.1 or later. Install
lang/perl5
or lang/perl5.8 then try again.

I cd to the correct directory, type make install clean, get the 'all ok'
from
installation telling me it's reinstalled, and type:

#perl --version and get:

This is perl, version 5.005_03 built for i386-freebsd

What am I missing in this process?

TIA.

---

You're missing one of the last warnings during the make of perl5.x from the
ports tree..
use.perl.

Usage:
  /usr/local/bin/use.perl port   - /usr/bin/perl is the perl5 port
  /usr/local/bin/use.perl system - /usr/bin/perl is the system perl

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Backup question

2004-06-09 Thread Micheal Patterson

- Original Message - 
From: Karen Donathan [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, June 09, 2004 9:29 AM
Subject: Backup question


 Hello.

  What is the best way to back up the html directory?  We do not have a
 tape drive.  Is there a way to have an automated .tar file created and
 sent as email so I could save it on another server?  Any help would be
 great!

 Thanks
 Karen Donathan
 George Washington High School
 Charleston, WV
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


Sure, have a crontab do the tar daily and then use mutt to send it as an
attachment to the desired email address. Keep in mind, if you're not doing
the mail services yourself, some mail servers limit the file size of
attachments.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipnat and ipfw dummynet

2004-06-05 Thread Micheal Patterson


- Original Message - 
From: Nelis Lamprecht [EMAIL PROTECTED]
To: FreeBSD Questions Mail List [EMAIL PROTECTED]
Sent: Friday, June 04, 2004 7:43 AM
Subject: ipnat and ipfw dummynet


Sorry, I failed to point out my current network configuration.

I have 2 internal networks which use NAT, one class C ( 192.96.48.0/24 )
and one rfc1918 ( 192.168.1.0/24 ).

The internal interface(bge1) is configured with the class c network and
I have added a route to bge1 for 192.168.1.0/24. All traffic on the
192.96.48.0/24 network internally is routed via the gateway to get to
the 192.168.1.0 network.

Hope that makes sense.

Nelis

On Fri, 2004-06-04 at 14:43, Nelis Lamprecht wrote:
 Hi,

 I'm interested to hear how people utilise dummynet in a NAT environment.
 How does one create a pipe for a NAT network without effecting the
 actual LAN speed ? For example, on the gateway:

 $fwcmd add pipe 1 ip from 192.168.1.0/24 to any out
 $fwcmd add pipe 2 ip from any to 192.168.1.0/24 in
 $fwcmd pipe 1 config bw 128Kbit/s
 $fwcmd pipe 2 config bw 128Kbit/s

 The above example would be fine if 192.168.1.0/24 were only talking to
 the internet but unfortunately it also effects the machines from talking
 to each other internally. The only interface you can specify is the
 internal interface(bge1) because this is the only time that ipfw will
 see the addresses before they are passed to NAT(ipnat) and will not be
 seen on the external interface(bge0). So basically the above example
 should be written as:

 $fwcmd add pipe 1 ip from 192.168.1.0/24 to any out via bge1
 $fwcmd add pipe 2 ip from any to 192.168.1.0/24 in via bge1

 This however will also give 192.168.1.0/24 an internal LAN speed of
 128Kbit/s which is to say quite humorous ;-)

 What is the solution to this ? ..I'm obviously missing something. The
 internal interface is not firewalled.


 Many thanks,
-- 
Nelis Lamprecht



Nelis, this may help. Remember, that ipfw goes through the rulesets until it
finds a match and will stop at that point. So, to provide rate limiting as
well as allowing traffic on the lan to go all out, place allow rules before
the pipes to specifically allow traffic between your lan ip ranges
unhindered.

#Rate Limit Settings
$fwcmd pipe 1 config bw 128Kbit/s
$fwcmd pipe 2 config bw 128Kbit/s


#Unrestricted LAN Access Allows
$fwcmd add allow ip from 192.168.1.0/24 to 192.96.48.0/24
$fwcmd add allow ip from 192.96.48.0/24 to 192.168.0/24

#Rate Limit Rules
$fwcmd add pipe 1 ip from 192.168.1.0/24 to any out
$fwcmd add pipe 2 ip from any to 192.168.1.0/24 in


Hope it helps. It's been awhile since I've done any rate limiting, but as I
recall, that should do the trick.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sophos anti virus and mailmonitor on freebsd

2004-05-24 Thread Micheal Patterson




- Original Message - 
From: Frank Mueller [EMAIL PROTECTED]
To: Thomas Farrell [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, May 24, 2004 1:12 AM
Subject: Re: sophos anti virus and mailmonitor on freebsd


 I wonder who should ever need mailmonitor in FreeBSD
 Here we are running Sophos on several FBSD machines and we use amavis to
make it scan and filter
 our mails. That works perfectly and so I see no need for mailmonitor at
all.

 Greetz,

 Frank


While it is true that Sophos  sweep will run under Amavis, and that's all
you need, if you're processing mail with that system, then it's considered a
mail gateway to them legally and you have to purchase the mail gateway
version to legally use it. Trust me on this, I went round and around with
this problem because when I ordered Sophos for FreeBSD a couple of years
back, I specifically asked about the ability to use it on our mail server
and everything was good. This was before they offered their mail gateway
system. Earlier this year, our license was about to expire so I went to
renew and was shocked to hear that I was now in violation of my license. I
informed them that it was running on my smtp server, and was then informed
that their licensing had changed and now, I needed to purchase the product
for the mail gateway.  All I needed was to be able to run sweep, but we were
going to be forced to buy the Enterprise edition for mail gateways in order
to continue using it.  A Network Server != SMTP Server to them. I see no
reason to purchase the entire mail gateway package as it's not necessary,
however to be legal with them, it is. Hence the reason that we switched to
another av package and pulled sweep from our server.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Multiple CPUs

2004-05-21 Thread Micheal Patterson


- Original Message - 
From: Nicholas Bernstein [EMAIL PROTECTED]
To: freebsd-questions [EMAIL PROTECTED]
Sent: Friday, May 21, 2004 5:55 PM
Subject: Multiple CPUs


 How can one detect if a system is using multiple CPUs?
 I'm running freebsd 4.9 and I was hoping that either uname or top would
 give some information as to whether or not the second cpu is being used.
 dmegs outputs the following:

 CPU: Intel(R) Xeon(TM) CPU 2.40GHz (2399.33-MHz 686-class CPU)

 but I want to make sure that this is not just showing it's been
 detected, as opposed to being used.

 -- 
 Nicholas Bernstein, Unix Systems Administrator
 Document Systems Inc.
 http://docmagic.com
 [EMAIL PROTECTED]


The first line of output from top shows the following information. The C
column indicates that it's a multi-proc system and which CPU a given process
is currently running on.

PID USERNAME  PRI NICE  SIZERES STATE  C   TIME   WCPUCPU
COMMAND

You can also type /var/run/dmesg.boot and it will show you the CPU
information as well.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 4.7 Syslogs

2004-05-16 Thread Micheal Patterson


- Original Message - 
From: Matt Cyber Dog LaPlante [EMAIL PROTECTED]
To: 'Matthew Seaman' [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Saturday, May 15, 2004 12:34 PM
Subject: RE: FreeBSD 4.7 Syslogs


 I tried the logger command, but it didn't reach the messages file (which
is
 still empty).  Here is the output from the syslogd -d command:

 syslogd: bind: Address already in use
 logmsg: pri 53, flags 4, from , msg syslogd: bind: Address already in use
 Logging to CONSOLE /dev/console
 syslogd: bind: Address already in use
 logmsg: pri 53, flags 4, from , msg syslogd: bind: Address already in use
 Logging to CONSOLE /dev/console
 can't open /dev/klog (16)

snip

Something is listening already on port 514 and syslogd is complaining about
that. Do a sockstat |grep 514 and see what's sitting on that port. Also,
can't open /dev/klog (16) is another problem. That device is the kernel
log device so syslog can see kernel messages. Syslog may not be too happy
about that either.  You might check and see if you have a klog in /dev

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 4.7 Syslogs

2004-05-16 Thread Micheal Patterson




- Original Message - 
From: Matt Cyber Dog LaPlante [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, May 15, 2004 3:38 PM
Subject: RE: FreeBSD 4.7 Syslogs


snip

You've got a pretty high number of max logs with pretty hefty file size
limits. What's a df -k show on that system?

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 4.7 Syslogs

2004-05-16 Thread Micheal Patterson



- Original Message - 
From: JJB [EMAIL PROTECTED]
To: Matt Cyber Dog LaPlante [EMAIL PROTECTED]; 'Matthew
Seaman' [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Saturday, May 15, 2004 3:04 PM
Subject: RE: FreeBSD 4.7 Syslogs


 Well since you are new to FBSD and since the syslogd -d commands
 shows that you do not have logging specified in /etc/syslog.conf for
 the messages file. You just do not know what you are looking at. Who
 ever was sysadmin before you probably  commented it out for what
 ever reason.

 By the way I tried using the logger command on my 4.9 system and it
 did not write any messages at all. So it is no help in debugging
 this problem. I read the man logger info and as usual the man page
 is useless. Who ever writes those must work real hard at writing
 sentences that convey no meanings.

Logger works just fine if you know how to use it and are running it as root
and is a good tool for working with syslog problems. The man pages tell you
quite a bit about provided you can interpret them effectively.

man logger:

logger [-46Ais] [-f file] [-h host] [-p pri] [-t tag] [message ...]

-p pri  Enter the message with the specified priority.  The priority may
 be specified numerically or as a ``facility.level'' pair.  For
 example, ``-p local3.info'' logs the message(s) as
informational
 level in the local3 facility.  The default is ``user.notice.''


man syslogd will give you a list of all priorities and facilities.

Priorities:

LOG_EMERG A panic condition.  This is normally broadcast to all
   users.

LOG_ALERT A condition that should be corrected immediately, such as a
   corrupted system database.

LOG_CRIT  Critical conditions, e.g., hard device errors.
LOG_ERR   Errors.
LOG_WARNING   Warning messages.
LOG_NOTICEConditions that are not error conditions, but should possi-
   bly be handled specially.
LOG_INFO  Informational messages.
LOG_DEBUG Messages that contain information normally of use only when
   debugging a program.

Facilities:

LOG_AUTH  The authorization system: login(1), su(1), getty(8), etc.
LOG_AUTHPRIV  The same as LOG_AUTH, but logged to a file readable only by
   selected individuals.
LOG_CONSOLE   Messages written to /dev/console by the kernel console out-
   put driver.
LOG_CRON  The cron daemon: cron(8).
LOG_DAEMONSystem daemons, such as routed(8), that are not provided
   for explicitly by other facilities.
LOG_FTP   The file transfer protocol daemons: ftpd(8), tftpd(8).
LOG_KERN  Messages generated by the kernel.  These cannot be gener-
   ated by any user processes.
LOG_LPR   The line printer spooling system: lpr(1), lpc(8), lpd(8),
   etc.
LOG_MAIL  The mail system.
LOG_NEWS  The network news system.
LOG_SECURITY  Security subsystems, such as ipfw(4).
LOG_SYSLOGMessages generated internally by syslogd(8).
LOG_USER  Messages generated by random user processes.  This is the
   default facility identifier if none is specified.
LOG_UUCP  The uucp system.
LOG_LOCAL0Reserved for local use.  Similarly for LOG_LOCAL1 through
   LOG_LOCAL7.

So, you have facilities of auth, authpriv, console, cron, daemon, ftp, kern,
lpr, mail, news, security, syslog, user, uucp, local0 - local7 and you have
priorities of: emerg, alert, crit, err, warning, notice, info and debug

So, by doing the command logger -p facility.priority message like so:

logger -p security.notice This is a test of security.notice

You get this in your security log which is default to /var/log/security

May 16 03:24:14 router /kernel: ipfw: 65000 Deny TCP 222.90.22.52:4267
68.227.96.223:65506 in via ep0
May 16 03:30:03 router micheal: This is a test of security.notice

If you're running syslogd -d you'll see exactly what was sent to syslogd and
where it was placed:

logmsg: pri 155, flags 0, from router, msg May 16 04:01:04 micheal: This is
a test of security.notice
Logging to FILE /var/log/messages
Logging to CONSOLE /dev/console
Logging to FILE /var/log/security
logmsg: pri 166, flags 17, from router, msg May 16 04:01:04 router micheal:
This is a test of security.notice

As you can see, I have *.notice going to messages and security.* to security
and /dev/console.


--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman

Re: FreeBSD 4.7 Syslogs

2004-05-16 Thread Micheal Patterson


- Original Message - 
From: JJB [EMAIL PROTECTED]
To: Micheal Patterson [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Sunday, May 16, 2004 9:37 AM
Subject: RE: FreeBSD 4.7 Syslogs


 Thanks for the additional info.

 I tested using this  logger -p lpr.err  test test
 There is no error message about logger not working.

 And I get nothing in the /var/log/lpr-errs log file.

 syslogd -d  shows nothing happening.

 I am running 4.9. virgin install so all the config files are there.

 This is so simple that the only conclusion is that it's broken in
 4.x versions.

 Can any one verify that it's working in 4.x versions.

 Any ideas of suggestions of how to proceed to get the logger command
 working?

 -Original Message-
 From: Micheal Patterson [mailto:[EMAIL PROTECTED]
 Sent: Sunday, May 16, 2004 5:04 AM
 To: Matt Cyber Dog LaPlante; 'Matthew Seaman';
 [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Subject: Re: FreeBSD 4.7 Syslogs



Yes, I can verify that it's working in FreeBSD 4.7, 4.9 and 4.10 RC2


FreeBSD tsgrtr.tsgincorporated.com 4.7-RELEASE FreeBSD 4.7-RELEASE #0: Sat
Apr 12 15:42:55 CDT 2003
[EMAIL PROTECTED]:/usr/src/sys/compile/LANDMARK  i386

Logging to CONSOLE /dev/console
Logging to FILE /var/log/messages
Logging to FILE /var/log/lpd-errs
Logging to FILE /var/log/all.log
logmsg: pri 166, flags 17, from tsgrtr, msg May 16 14:38:58 tsgrtr micheal:
test test


FreeBSD router.rcservers.com 4.9-STABLE FreeBSD 4.9-STABLE #3: Sun Mar 28
20:16:07 CST 2004
[EMAIL PROTECTED]:/usr/src/sys/compile/ROUTER  i386


Logging to CONSOLE /dev/console
Logging to FILE /var/log/messages
Logging to FILE /var/log/lpd-errs
logmsg: pri 166, flags 17, from router, msg May 16 14:37:32 router micheal:
test test
---

FreeBSD fmswfw.firstmedok.com 4.10-RC2 FreeBSD 4.10-RC2 #1: Thu May 13
15:54:10 CDT 2004
root@:/usr/src/sys/compile/FMFW3  i386

Logging to CONSOLE /dev/console
Logging to FILE /var/log/messages
Logging to FILE /var/log/lpd-errs
logmsg: pri 166, flags 17, from fmswfw, msg May 16 14:43:22 fmswfw micheal:
test test

I start syslogd with -s -c -c normally and -s -c -c -d while I was debugging
so I don't get the message repeated x number of times entries in my logs
as I have a need to see each entry in the logs.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: blacklist(s)

2004-05-16 Thread Micheal Patterson


- Original Message - 
From: Gary Kline [EMAIL PROTECTED]
To: Chuck Swiger [EMAIL PROTECTED]
Cc: FreeBSD Mailing List [EMAIL PROTECTED]
Sent: Sunday, May 16, 2004 3:14 PM
Subject: Re: blacklist(s)


 On Sun, May 16, 2004 at 10:01:54AM -0400, Chuck Swiger wrote:
  Gary Kline wrote:
  On Fri, May 14, 2004 at 10:00:58PM -0400, Chuck Swiger wrote:
  According to the RFCs, one MUST NOT bounce mail sent to
postmaster.
  One ought to read the rfc-ignorant.org site I mentioned.
  [ ... ]
   Well, bit again.  The line in my access file was
  
   206.46  550 Verizon email not wanted here
  
   that I've commented out. This isn't the first time I've had
   to fine tune; it probably won't be the last.  Apologies!
 
  Consider using FEATURE(`delay_checks', `friend') and add the
following to
  the access map:
 
  Spam:abuse@ FRIEND
  Spam:postmaster@ FRIEND
 
  [ Pre 8.12 versions of sendmail use To: instead ]
 
  ...which will allow you to block mail as you please using IP or
other
  reject rules, yet not prevent delivery of mail to postmaster and
abuse...
 

 Outstanding idea, at least it seems.  This site has all
 the details:

 http://www.technoids.org/spamlovers.html

 I think that most email to postmaster should be allowed,
 any everything to abuse.

 thanks for the tip! (and a tip of the hat),

 gary


 -- 
Gary Kline [EMAIL PROTECTED]   www.thought.org Public
service Unix


Delay_checks does indeed work. However, there are some side effects that
need to be taken into consideration.

Since you're basically filtering on the delivery of the message,
sendmail doesn't check if the user exists until after acceptance. This
means, that for each and every spam message you receive for an invalid
user, Sendmail has to send a bounce back to the originator. See the
gotcha yet? If not read on. :)

For example, let's say, your mail server handles 50 - 100 thousand
messages every 24 hours, and 25 thousand of those are spam. Not too
uncommon in today's internet. Now, let's say that of those 25 thousand
messages, 20 thousand (conservative number) have forged return
addresses. You don't see these forgeries on unknown users under
Sendmail's normal config as the message is rejected at connection time.
Still don't see the gotcha? That's ok. I didn't either at first when it
happened to me. Let me explain what I saw with it.

If sendmail bounces after message acceptance, it now has to send a
bounce to each of those 20 thousand forged addresses. Each of those
messages will then bounce and return to postmaster after it can't
deliver them and at least, 2 things will most definitely occur.

1. The amount of mail sitting in your mail queue will increase.

2. The amount of mail to postmaster will most definitely increase as
these messages fail delivery to the forged originators.

If you're like me, you tend to keep tabs on your postmaster email for
possible problems, but in my experience, my mail load, both for the
server and in my mailbox, jumped 150% on my 2 mx's because of
delay_check. I ended up disabling delay_check and using amavisd and
spamassassin so that I can filter on connection.

I personally don't recommend delay_check to be enabled on a large
production mta. For smaller systems that don't pass a lot of email, it's
fine. However, for larger systems, I'd recommend using a different
method.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments,
is
for the sole use of the intended recipient(s) and may contain
confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient,
please
contact the sender by reply e-mail and destroy all copies of the
original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: natd -redirect_port

2004-05-15 Thread Micheal Patterson


- Original Message - 
From: JJB [EMAIL PROTECTED]
To: Christian Hiris [EMAIL PROTECTED]; [EMAIL PROTECTED]
Cc: Anthony Philipp [EMAIL PROTECTED]
Sent: Saturday, May 15, 2004 8:05 AM
Subject: RE: natd -redirect_port


 You are wrong, you do not have to compile ipfirewall kernel options
 into the kernel.
 IPFW is delivered as an bootable module.
 You need this in rc.conf to enable ipfw, it will auto load the
 bootable module.

 # Required For IPFW  kernel firewall support
 firewall_enable=YES  # Start daemon
 firewall_script=/etc/ipfw.rules  # run my custom rules
 firewall_logging=YES# Enable events logging

 natd_enable=YES # Enable IPFW nat function
 natd_interface=rl0
 natd_flags=-dynamic -m -u -f /etc/natd.conf


You're right, you don't have to recompile to use ipfw, however, since there
is no divert module, the kernel will still need to be recompiled to enable
divert. In order for the OP to do what they're wanting to do they will still
need to recompile kernel and restart the system.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Squirrell Mail question

2004-05-14 Thread Micheal Patterson


- Original Message - 
From: Darryl Hoar [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 14, 2004 9:53 AM
Subject: Squirrell Mail question


 Does squirrell Mail do pop3 as well as smtp ?  In other words,
 must I install a mail server for smtp prior to installing squirrell mail ?

 thanks,
 Darryl

Squirrel mail is a client. So, for it to be able to send mail, it has to
pass the message to a smtp server. For it to read mail, it has to have an
imap server that it connects to. Squirrellmail doesn't handle POP3 directly.
You have to configure your imap server to pull mail from a pop3. Check out
the squirrellmail faq about this at
http://www.squirrelmail.org/wiki/en_US/HowToPOP


--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Squirrell Mail question

2004-05-14 Thread Micheal Patterson


- Original Message - 
From: Micheal Patterson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 14, 2004 10:10 AM
Subject: Re: Squirrell Mail question




 - Original Message - 
 From: Darryl Hoar [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Friday, May 14, 2004 9:53 AM
 Subject: Squirrell Mail question


  Does squirrell Mail do pop3 as well as smtp ?  In other words,
  must I install a mail server for smtp prior to installing squirrell mail
?
 
  thanks,
  Darryl

 Squirrel mail is a client. So, for it to be able to send mail, it has to
 pass the message to a smtp server. For it to read mail, it has to have an
 imap server that it connects to. Squirrellmail doesn't handle POP3
directly.
 You have to configure your imap server to pull mail from a pop3. Check out
 the squirrellmail faq about this at
 http://www.squirrelmail.org/wiki/en_US/HowToPOP


 --


Correction, Squirrellmail has a built in utility to pull mail from a remote
POP3 server and store it on your local imap server,
http://www.squirrelmail.org/wiki/en_US/MailFetch

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Creating Virtual Interfaces

2004-05-14 Thread Micheal Patterson


- Original Message - 
From: Dwight Spence [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 14, 2004 4:06 PM
Subject: Creating Virtual Interfaces


 Is there a difference between virtual interfaces and alias ips?
 Also is FreeBSD able to configured interfaces such as bge0:1, bge0:2,
bge0:3?
 Or is ifconfig bge0 alias ip_address netmask netmask the only way?
 I am attempting to add 30 ips.

 Dwight Spence


Dwight, I've looked and what you're referring to would be sub interfaces,
such as Cisco and various other main stream routers use. FreeBSD to my
knowledge (and I even googled for it) doesn't support this, at least in 4.9
anyway. One thing to note when doing aliases, if all of the IP's are in the
same subnet,  the netmask for all aliased interfaces will be
255.255.255.255. The format for this in the rc.conf file would be:

ifconfig xl0=inet 192.168.1.1 netmask 255.255.255.0
ifconfig_xl0_alias0=inet 192.168.1.2 netmask 255.255.255.255
ifconfig_xl0_alias1=inet 192.168.1.3 netmask 255.255.255.255
... and so on.

Should they be ip's from different subnets, you should use the proper
netmask associated with that subnet.

ifconfig xl0=inet 192.168.1.1 netmask 255.255.255.0
ifconfig_xl0_alias0=inet 192.168.2.1 netmask 255.255.255.0
ifconfig_xl0_alias1=inet 192.168.3.1 netmask 255.255.255.248
... and so on.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: hw-loopback

2004-05-14 Thread Micheal Patterson



- Original Message - 
From: Dave Wiebe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 14, 2004 5:02 PM
Subject: hw-loopback


 Hi,

 I am trying to get my freebsd machine to access the internet but, I can
only get the machine to ping itself. Everytime I try to ping outside the
machine I get no route found. I believe my problem lies in the
configuration of the ethernet card. Running ifconfig shows me that everthing
is there but instead of full duplex, it says hw-loopback.

 I was successfully running windows on this machine and it did access the
internet, so I know the problem lies somewhere in the configuration. The
version of FreeBSD is 5.2.

 Any help is appreciated

 Sincerly

 David





David, it sounds like you simply don't have a gateway route assigned to the
system. Try running netstat -ran and see if you show a default route in your
routing table.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re:

2004-05-11 Thread Micheal Patterson


- Original Message - 
From: wendy [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, May 11, 2004 10:52 AM


 Easy to install
 FreeBSD can be installed from a variety of media including CD-ROM,
DVD-ROM,
 floppy disk, magnetic tape, an MS-DOS® partition, or if you have a network
 connection, you can install it directly over anonymous FTP or NFS. All you
 need is a couple of formatted 1.44MB floppies and these directions.



 THIS IS NOT TRUE! - the installation actually is very difficult and so
this
 Superior OS is not for 99.9% computer users - I'll probably kill my time
 only if I lost my job and stay home having nothing to do to configure how
to
 install it.

 Comparing to Windows, this BSD is very dumb- want to me to tell it
 everything. No wonder it's Free.

This BSD is as smart or as dumb as the end user wants it to be.

- Plug and Play has come a long way since it's inception years ago. However,
when your windows system decides that your Nvidia 5900 is actually a Trident
8900D, or your SoundBlaster is actually an Adlib card, or your MS Mouse is a
Logitech, no matter what drivers you as an admin, reading the manual that
came with the component, and scratching your head in wonder, then you'll
understand why they really call it Plug and Pray and you'd be forever
grateful if only Windows would ask you more than it does.

- Windows is much less intelligent than it believes itself to be and will
run headlong into a self cratering spiral trying to convince itself that
it's doing the right thing. It's the OS, so it must know more than the
Administrator! It will do so without so much as an error notice in the event
log. It will lock up the desktop with 100% cpu so you can't stop it while
it's on it's merry little way until it either blue screens or locks up hard.

- BSD is as smart, or as dumb, as you want it to be. BSD will also run
headlong into a self cratering spiral, but, it will do so screaming and
complaining every bloody step of the way. It will also offer you the ability
to thwart the disaster because it believes that you, as root, know what
you're doing and trusts you to know. It will diligently do as you request
until it can scream at you no more and the kernel reboots in panic.

Create a file called com1, then try to delete it on a Windows box and see
how smart it really is. You know com1 can be deleted, but Windows will throw
a fit, it believes that the OS is smarter than the user and knows what's
best. In some cases, it's right, others, it's not. If this is a virus file,
you're screwed because the OS won't allow anything to destroy the file. Ever
tried to kill a specific process in Windows and got the Access Denied error
when you know full well it can be killed?

My Freebsd will allow me to rm -rf / and will continue to try to delete
everything on the system because it trusts me to know that's a bad thing. It
will inform me that it's dieing through it's various avenues, yet it will
continue to destroy itself simply because I told it to do so. It will
continue to eat itself alive until it can no longer perform the operation.
Why does it do that you wonder? It's really very simple. It's because system
admins prefer to be in control over their systems and not have their systems
in control of them.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: OpenBSD/ (maybe FreeBSD) Firewall/Router/DNS

2004-05-11 Thread Micheal Patterson


- Original Message - 
From: Bryan Cassidy [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, May 11, 2004 12:31 PM
Subject: Re: OpenBSD/ (maybe FreeBSD) Firewall/Router/DNS


 Sounds good to me but I'm still confused about how I need to set this up
hardware wise. The link at freebsddiary sounds good to start with I guess.
I don't know if I need any extra hardware either. I have at the moment 2
NICs and 2 crossover cables. Do I need more? Do I keep the NIC in this
machine or do I move it to the machine that will be acting as a
firewall/router/gateway? How do I set this up? Still confused on this part.

You'll need a total of 3 nics to hook up a firewall and one PC behind it and
2 crossover cables.

2 nics in the firewall system and 1 nic in the PC.


dsl-modem  firewall  PC

If you plan on running more than one computer behind the firewall, you'll be
better off getting a hub or a low end 10/100 switch.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 3 Nics - Dual (Tripe) Homed Host

2004-05-11 Thread Micheal Patterson

snip

 I'm not sure if you were aware of aliasing, as I was not, or if this fits
 your situation as well as it did mine.  I'm curious now as to whether or
not
 my gateway/router machine could still provide connectivity between the two
 networks, via the virtual hosted interface, for clients on both LANs.
 Though my setup suites me now, I may give that a try.

 Regards,

 Travis Troyer


I'm not sure if you were aware of this option or not, but to configure
FreeBSD for native routing on it's directly connected network segments, you
will need to enable forwarding to configure it to be a gateway system.

To enable gateway mode via the command line:

/root sysctl net.inet.ip.forwarding=1

Then in your rc.conf add the following to do so on every boot:

gateway_enable=YES

The initial problem you described leads me to belive that this isn't
currently configured. Also, if you're running natd, then you may need to
make allowances in your firewall ruleset to allow the traffic to pass from
one lan segment to the other.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: OpenBSD/ (maybe FreeBSD) Firewall/Router/DNS

2004-05-10 Thread Micheal Patterson


- Original Message - 
From: Bryan Cassidy [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, May 11, 2004 12:20 AM
Subject: OpenBSD/ (maybe FreeBSD) Firewall/Router/DNS


 Hello. I am currently running FreeBSD 4.9-RELEASE p-7. I am pretty
comfortable with FreeBSD for the most part and really enjoy using it on a
day to day basis. This is my thoughts. I have an older NEC PC that I would
like to put to some use. First off I don't know if I need any 'extra'
hardware. I have now 1 DSL modem (dhcp - could get static, is it worth
getting?), 3 NICs, and 2 cables to connect the ethernet cards. I have just
been reading up on Firewalls on FreeBSD using ipfw. I would basically like
to do the following. I want to install OpenBSD 3.5 or Possibly one of the
FreeBSD 4.x, 5.x, 4-stable, current or whatever. Which would you all
recommend using in this situation? I want to continue to use my nice newer,
much faster computer to do all configurations to the system, updates,
installing software, running apache, configuring firewall, etc. etc. etc.
via ssh (good choice?) to the other/older box. Would really appreciate some
insight on this topic. Networking/Security is becoming very interesting to
my. Thanks. Don't forget, do I need any 'extra' hardware?
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


I can't speak for anyone else but myself, but here's my opinion on this.

If you have an older box, you'll need 2 nics. One (external / serial
interface) to the dsl modem (crossover cable), one to the lan side. If this
is also to a PC, you'll need another crossover cable. If the old NEC is a
486 with at least 32 mb ram, that should be all you'll need hardware wise as
long a it's got a couple of gig for drive space. If you want to enable full
firewall logging, you'll need more disk space for that of course. What I'd
recommend doing in your situation, is the same as I have here at home. Have
the bsd box (I prefer freebsd myself) connect to your provider and pull the
ip on the serial interface, then assign a private ip to the internal nic and
to the systems behind it on the lan. Then on the bsd box, enable nat and the
first rule of your firewall will be a divert rule to pass everything to NAT.

For more info on this and it's configuration, check out


http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/book.html

or

http://www.freebsddiary.org/ipfw.php

If you're still wanting more info, then I'd recommend a google search for
freebsd natd and / or freebsd ipfw to get a lot of good and useful info.

Hope it helps.
--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Removing wierd file

2004-04-20 Thread Micheal Patterson




- Original Message - 
From: Paul English [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, April 19, 2004 6:42 PM
Subject: Removing wierd file



 One of my former users has a strange file in her directory and I can't
 remove, chown or chmod it as root.

 ls -l
 total 0
 -rwxrws--T  1 1708453043  4187987649  0 Oct  9  2001 10009_dir

 It was created over nfs by arcinfo running on a Sun machine. I have no
 idea why it would have those permissions, let alone the invalied UID/GID.

 Suggestions anyone?

 Paul


I'm guessing that you're already tried to chown it to root and chmoding it
before trying to remove the file?

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: What does: is an interactive port mean?

2004-04-16 Thread Micheal Patterson




- Original Message - 
From: Gerard Seibert [EMAIL PROTECTED]
To: freebsd-questions [EMAIL PROTECTED]
Sent: Friday, April 16, 2004 4:25 PM
Subject: What does: is an interactive port mean?


 I was just trying to install Star Office 7.0 and I received the following
 error message:

 ** 'editors/staroffice70' is marked as IGNORE:
 is an interactive port

 I have run cvsup and portsdb -Uu prior to this. Can anyone enlighten me?

 Thanks!

 Gerard E. Seibert
 [EMAIL PROTECTED]


As I recall, Star Office is no longer a freeware item. You have to purchase
it from the main web site, place the downloaded tarball in your distfiles
directory and then re-run make to patch it properly for fbsd. The last time
I looked into purchasing it was when it was still 6.0 and it was $75.00 per
copy.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Unusual login requirement

2004-04-13 Thread Micheal Patterson

- Original Message - 
From: Doug Hardie [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 13, 2004 11:12 PM
Subject: Unusual login requirement


 I am trying to figure out how to implement an unusual login requirement
 and haven't found a good approach yet.  What I need is to have a
 specific user id that when it is logged in it executes a specific
 script and then immediately logs out.  Basically what it needs to do is
 run a make that builds a CD from a bunch of files and then burns the
 CD.  Obviously a blank CD would need to be in the burner first.  I
 don't want a general login as this would be used by a person who should
 not have access to the system.  I just need him to be able to burn a CD
 frequently.

 My first throught was to create a script and set it as the shell in the
 passwd file and add it to /etc/shells.  Is that the best approach?  I
 am not concerned about the user breaking out of the script as he is
 trusted.  I just don't want to create a regular user account for him.
 The server is running FreeBSD 4.6.  Thanks,

 -- Doug



If you use bash, you can create your script, start it in the .profile and
have exit directly below it. That way, when the script finishes, it will
exit out. Also, even though this is not a concern for you, this is a
safeguard should they break out of the script, it kills the session too.

--

Micheal Patterson
Network Administration
TSG Incorporated
405-917-0600

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: have i been hacked?

2004-04-13 Thread Micheal Patterson

- Original Message - 
From: dave [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 13, 2004 11:51 PM
Subject: have i been hacked?


 Hello,
 Wondering if a system on my network has been hacked? At approx 12:30
 this evening the hard disk went crazy, i have been out of town lately and
 have not checked any of the machines, when i did the CPU usage was at 15%
 which on this machine it never gets above 1 maybe 1.5. So i looked, and i
 had nearly 150 processes on the box, 9 running. When i got the daily run
 output i noticed the setuid files have changed. Wondering if this box got
 hacked and if so where to look to confirm this? And if so, what to do?
 Thanks.
 Dave.


 Checking setuid files and devices:
 ls: Terminated
 : No such file or directory

 guardian.davemehler.net setuid diffs:
 1,52d0
  94240 -r-sr-xr-x  1 root  wheel 448384 Jun  4 21:54:47 2003 /bin/rcp
  117807 -r-sr-x---  1 root  operator  421832 Jun  4 21:55:39 2003

Compared to my 4.9 systems, your rcp is nearly twice the size as it should
be.

-r-sr-xr-x  1 root  wheel  251444 Apr  9 12:05 rcp

You didn't say which version you were running but if it's a 4.x, then I'd
say you've got a serious issue here. If you're running 5.x then I can't say.

--

Micheal Patterson
Network Administration
TSG Incorporated
405-917-0600

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: mailman - partition virtual domain name?

2004-04-12 Thread Micheal Patterson




- Original Message - 
From: Noah [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Sunday, April 11, 2004 1:04 PM
Subject: Re: mailman - partition virtual domain name?


 On Sun, 11 Apr 2004 10:29:38 +0100, Matthew Seaman wrote
  On Sun, Apr 11, 2004 at 12:29:16AM -0800, Noah wrote:
   mailman-2.1.4
   sendmail-8.12.11
   freeBSD-4.9-STABLE
  
   I am placing listnames in the /etc/mail/aliases file to have the
forwarded to
   mailman for processing.
  
   I running virtual hosts on a machine and I want to stop people from
sending to
   [EMAIL PROTECTED] and only allow people to post to
[EMAIL PROTECTED]
  
   currently users can post to both [EMAIL PROTECTED] and
[EMAIL PROTECTED]
 
  This is with sendmail?  To make domain specific addresses, use
  virtusertable.  virtusertable support is already included in the
  stock freebsd.mc/freebsd.cf configuration, so all you need to do is
populate
  the /etc/mail/virtusertable file, and run 'make' to generate the .db
  file.  See /usr/share/sendmail/cf/README for details of what to put
  into virtusertable.



 okay that makes sense and been trying to get this to work.

 after I make the appropriate entries to the virtualusers tables.  sendmail
is
 not able to execute the mailman delivery program.

 entry in /etc/mail/virtualusers

 --- snip ---

 [EMAIL PROTECTED]  |/usr/local/mailman/mail/mailman post
test2

 --- snip ---




 and here is the error message

 --- snip ---

 Remote host said: 550 5.7.1 [EMAIL PROTECTED]... Cannot mail directly to
 programs

 --- snip ---

 - noah



For example:

/etc/mail/aliases:

employees:  |/usr/local/mailman/mail/mailman post employees
rest of your mailman aliases

In virtusertable:

[EMAIL PROTECTED]employees
rest of your mailman entry maps

[EMAIL PROTECTED]unused
snip

Rebuild your table and when mail comes in for [EMAIL PROTECTED] it will
bounce with a user unknown unless you have an account named unused. :)

--

Micheal Patterson
Network Administration
TSG Incorporated
405-917-0600

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: static NAT and firewalls

2004-04-10 Thread Micheal Patterson

- Original Message - 
From: Sebastian Kutsch [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, April 10, 2004 6:17 AM
Subject: static NAT and firewalls


 Hi,

 if have have configured static NAT on machine A do the TCP/IP-packeges
 get injectet into the firewall of the machine A or do they reach machine
 B unfiltered?

 Sebastian



Sebastian,

Provided that you have an entry at the beginning of your firewall to divert
to natd, all traffic will hit that rule, get passed to natd and then
injected back into the firewall after the divert rule and then pass out
through the firewall.

--

Micheal Patterson
Network Administration
TSG Incorporated
405-917-0600

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Sendmail refusing connection

2004-03-29 Thread Micheal Patterson



- Original Message - 
From: Payne [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, March 29, 2004 3:10 PM
Subject: Sendmail refusing connection


 Hi,

 I have installed FreeBSD 5.2 and I am trying to get to access mail from
 the outside world. But when I do a telnet to port 25 I get this error,

 telnet mail.eatme.com
 trying xxx.xxx.xxx.xxx

 telnet: connect to address xxx.xxx.xxx.xxx: Connection refused

 where do I need to go to tell my server it ok to access mail.

 Payne


 Please note that eatme.com and xxx.xxx.xxx.xxx are flake to protect the
 real server.


Sendmail has hooks into tcpd which causes it to look for the proper entries
in hosts.allow for connection access.
If this is to be a server that responds to the world, you'd need an entry
for sendmail : all : allow

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How To Upgrade to Perl 5.8 on 4.9 System?

2004-03-24 Thread Micheal Patterson




- Original Message - 
From: Drew Tomlinson [EMAIL PROTECTED]
To: Joshua Lokken [EMAIL PROTECTED]
Cc: FreeBSD Questions [EMAIL PROTECTED]; Bart Silverstrim
[EMAIL PROTECTED]
Sent: Wednesday, March 24, 2004 12:48 PM
Subject: Re: How To Upgrade to Perl 5.8 on 4.9 System?


 On 3/24/2004 8:18 AM Joshua Lokken wrote:

 * Bart Silverstrim [EMAIL PROTECTED] [2004-03-24 07:35]:
 
 
 On Mar 23, 2004, at 8:41 PM, Chuck Swiger wrote:
 
 
 
 Drew Tomlinson wrote:
 
 
 I'm using 4.9-RELEASE.  Is is possible to upgrade Perl from the
 default 5.005 version to 5.8.2?
 
 
 Yes.
 
 
 
 Are there any steps required beyond installing the port?
 
 
 Try:
 
 cd /usr/ports/lang/perl5.8
 make install
 use.perl port
 
 
 
 I also had to re-install some of my ports after installing the new Perl
 and switching the system perl to the newer version (4.9-release-p3).
 
 
 
 
 If you install sysutils/portupgrade, you can do (after
 installing the new Perl)
 
 # portupgrade -rf perl
 
 
 I tried this (adding the 'n') to see what portupgrade would find.  All
 it found was 'perl5.8', yet I have webmin, spamassassin, and various
 other things that use perl (AFAIK).  I changed the line to:

 portupgrade -rRf 'p5*'

 and if found lots of things.  It might be overkill but it should get
 everything that needs rebuilding, correct?

 Thanks for your help.

 Drew


Drew, install perl 5.8 from ports. Once completed, you'll have both versions
on your system in their respective directories. You can switch which one is
used as the system default by using the script use.perl located by default
in /usr/local/bin that is installed with the 5.8 port.

Syntax is:

Usage:
  ./use.perl port   - /usr/bin/perl is the perl5 port
  ./use.perl system - /usr/bin/perl is the system perl

This will allow you to switch from the system version (5.005_03), to the
port (v5.8.x) and vice versa.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ftp

2004-03-11 Thread Micheal Patterson


- Original Message - 
From: Osmany Guirola Cruz [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 11, 2004 3:15 PM
Subject: ftp


 in my system I have installed the anonymous ftp and I have a fat32
 partition mounted in /fat32
  I need put the content of these partition on the pub directorie
 something like these
   ftp://mymachine/pub/fat32/  and see the content of these partition via
 ftp .. Symbolic link does not work
  what should I do...



Anon ftp uses a chroot environment so you can't link to any directory that's
not within it's chroot. One possiblity is to mount /fat32 within the ftp
users home/root directory. Another one, that isn't heard of much is to
mount_null /fat32 into the ftp chroot file system. Please keep in mind that
null mounting, last I heard,  should be treated as experimental at best. For
more info on null mounting, check out man mount_null.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw + natd - not sharing internet for LAN users

2004-03-09 Thread Micheal Patterson




- Original Message - 
From: Prodigy [EMAIL PROTECTED]
To: freebsd-questions [EMAIL PROTECTED]
Sent: Tuesday, March 09, 2004 10:53 AM
Subject: ipfw + natd - not sharing internet for LAN users


snip

 # ipfw show
 65535 1546 115746 allow ip from any to any


This is your problem. Even though you're running NATD, you need to divert
all traffic to NATD in the firewall.

Try adding a divert entry to your firewall like this:

ipfw add 100 divert natd all from any to any via ed1

Then check /etc/services and make sure that there's an entry for natd:

natd8668/divert # Network Address Translation


--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: using samba for backups

2004-03-09 Thread Micheal Patterson

- Original Message - 
From: Marty Landman [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, March 09, 2004 5:00 PM
Subject: using samba for backups


 Maybe a dumb question, but now that I have samba servers on all three of
my
 nix boxes with mapped drives on my two windows workstations there's a
great
 temptation brewing in my mind to backup things directly on mapped hard
drives.

 Are there any potential pitfalls to this approach, iow are there any
 compatibility issues that come up if I copy files from a nix box to a
 windows box and vice versa?

 On the side it's getting to be such a pleasant development environment on
 my lan that I can't help shake this awful feeling that something's going
to
 mess up big time.

 Marty Landman   Face 2 Interface Inc.   845-679-9387
 FormATable  DB: http://face2interface.com/Products/FormATable.shtml
 Make a Website: http://face2interface.com/Home/Demo.shtml
 Free Formmailer: http://face2interface.com/Products/Formal.shtml



If you're planning on backing up from Windows to Unix, no problem unless
you're using the built in Windows backup system. In order to do a full
recovery from that, even with server 2003, the backup media has to be local
to the server to recover from a full system failure since you can't mount
network shares during the recovery process.

However, if you're planning on backing up from unix to Windows, you'll be
limited to a 4gb maximum file size on a per file basis. This is a problem
with the way that Windows communicates with smbd and it's various other
relatives (sharity, smb_fs, etc). To do this, you'll need to use dump, or
some other package that will allow you to limit the size of the file volume.
Tar won't allow you to do this.  So, for example, if you want to do a full
18gb backup from *nix to windows, you'll need to configure dump to do
something like this:

#!/sh
/sbin/dump -0 -B 200 -f
/backups/MAIL2/fri-sys-vol1,/backups/MAIL2/fri-sys-vol2,/backups/MA
IL2/fri-sys-vol3,/backups/MAIL2/fri-sys-vol4,/backups/MAIL2/fri-sys-vol5,/ba
ckups/MAIL2/fri-sys
-vol6,/backups/MAIL2/fri-sys-vol7,/backups/MAIL2/fri-sys-vol8,/backups/MAIL2
/fri-sys-vol9,/back
ups/MAIL2/fri-sys-vol10 /dev/ad0s1a

The above is a direct copy of what I do on a daily basis. That runs dump,
level 0 (full dump) 2gb volume size  -f all volume files that will be
needed device

This will end up with 10, 2gb volumes for my system backup.

Some would say that it's a waste of space, and it may be, but I prefer full
system backups instead of incrementals due to the specific reasons of this
particular server (HIPAA !UGH!). If for some reason, I need to move the
backup volumes to a single drive, I've got an entire system image from any
particular day of the week to run from instead of a full backup and a crap
load of daily incrementals. To each his own on that route though.

These are things to keep in mind in here. :)

--

Micheal Patterson
Network Administration
TSG Incorporated
405-917-0600

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Postfix install questions..

2004-03-08 Thread Micheal Patterson





- Original Message - 
From: Remko Lodder [EMAIL PROTECTED]
To: Micheal Patterson [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Monday, March 08, 2004 12:37 AM
Subject: RE: Postfix install questions..


 Try changing the file master.cf

 The first unhashed line with smtp, change the smtpd command {at the end of
 the line}
 into smtpd -v,
 Then reload postfix, now you have more verbose logging and it could tell
you
 what typo you probably made,

 When that does not work, perhaps displaying your main.cf could help

 Oh, dont forget to turn off the verbose logging again by removing the -v
 from
 the changed line ;)

 cheers

 --

 Kind regards,

 Remko Lodder
 Elvandar.org/DSINet.org
 www.mostly-harmless.nl Dutch community for helping newcomers on the
 hackerscene


I got it. I needed to run postmap on main.cf after configuring it.

--

Micheal Patterson
Network Administration
TSG Incorporated
405-917-0600


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Alias in different subnet on card

2004-03-08 Thread Micheal Patterson




- Original Message - 
From: Wayne Pascoe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, March 08, 2004 12:02 PM
Subject: Alias in different subnet on card


 Hi all,

 I'm running a firewall at the moment using FreeBSD 5.2.1 and IPFW. I
 have 3 interfaces in the machine.

 I need to be able to firewall a 4th range of IP's. I have tried to do
 this by adding an alias to xl1, but this hasn't worked. If I add the
 alias with a mask of 255.255.255.255, no other machine can ping the
 alias. I also see the following in /var/log/messages
 Mar  8 18:02:13 styx-tmp kernel: arplookup 19x.xxx.xxx.196 failed: host
 is not on local network

 The primary IP on xl 1 is currently 19x.xxx.xxx.1 and the mask on there is
 255.255.255.128 (/25)

 If I add the alias with a mask of 255.255.255.240 (/28) which is the
 correct mask for this subnet, and the mask that all other machines use,
 then I am able to ping this address. However, at this point, no
 forwarding appears to take place for machines using this IP address as
 their default route.

 Is there any way to use an alias to do firewalling like this or do I
 have to get another network card? The problem with another network card
 is that will mean a whole new machine as I'm out of slots in this one.

 Thanks in advance ?

 -- 
 Wayne Pascoe
 Microsoft complaining about the source
 license used by Linux is like the event
 horizon calling the kettle black - adamba on k5


You have 3 networks in a firewall, and since we don't know the full
topology, I'll use these network ranges for my example: 192.168.1.0,
192.168.2.0, and 192.168.3.0. You now want to add a 4th range, let's say,
192.168.4.0.


ipconfig_xl1=inet 192.168.1.1 netmask 255.255.255.128
ipconfig_xl1_alias0=inet 192.168.2.1 netmask 255.255.255.128
ipconfig_xl1_alias1=inet 192.168.3.1 netmask 255.255.255.128
ipconfig_xl1_alias2=inet 192.168.4.1 netmask 255.255.255.128

The only time you would use a netmask of 255.255.255.255 is if the aliased
IP is a member of a subnet that is already assigned on the interface.

ipconfig_xl1_alias3=inet 192.168.1.2 netmask 255.255.255.255

Then you will need to add the appropriate firewall rules to allow those
networks to either talk / no talk to the remaining network segments.

It would help to have all of the ip information that you're using and your
current alias maps to see just what's going on. Although, I'd guess that the
first problem may be a subnetting issue.

--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Postfix install questions..

2004-03-07 Thread Micheal Patterson
Tonight, I starting looking into installing postfix to replace sendmail as
our primary MTA. I'm currently playing with it on my home system (fbsd 4.9)
and installing from ports. The install goes well, I've went through the
main.cf and set it up. However, when trying to connect to port 25, I get an
error postfix fatal: unsupported dictionary type:  and nothing else.

postconf -m shows:

static
pcre
regexp
environ
proxy
btree
unix
hash

I've looked through google and it seems that every entry displaying
unsupported dictionary type shows hash, mysql, etc but nothing just simply
empty. Am I correct in thinking that for some reason, postfix doesn't see
hash as a viable type even though it's found and compiled in?

Error log entries in mailllog show:

Mar  7 22:51:13 caverns postfix/smtpd[3564]: fatal: unsupported dictionary
type:
Mar  7 22:51:14 caverns postfix/master[3560]: warning: process
/usr/local/libexec/postfix/smtpd pid 3564 exit status 1
Mar  7 22:51:14 caverns postfix/master[3560]: warning:
/usr/local/libexec/postfix/smtpd: bad command startup -- throttling


A nudge in the right direction would be appreciated.

Thanks.

--

Micheal Patterson
Network Administration
TSG Incorporated
405-917-0600


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Email account utilization warning. - yes, it's garbage.

2004-03-02 Thread Micheal Patterson



- Original Message - 
From: Jonathan T. Sage [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Tuesday, March 02, 2004 9:07 PM
Subject: Re: Email account utilization warning. - yes, it's garbage.

Heh.  are you goofy?  :)  j/k.

Note that the original sender address on these was spoofed (see also: faked)

In actuallity, it is Netsky-D (probably, I'm not opening it).

Courtesy of Yahoo! :

http://story.news.yahoo.com/news?tmpl=storycid=581e=3u=/nm/20040301/tc_nm/tech_worm_dc

So, newbies out there still checking mail on MS systems, don't open
.PIF's from this list or anywhere else, they are bad.

~j
-

It's being tagged as Worm.Bagle.J by clamscan.. Just as bad in my opinion.
There's nothing wrong with reading list mail from windows, as long as you
know how to protect yourself from the bad guys.  Besides, all of the lists
that I subscribe to, go to my work account where all the bad extensions are
filtered with procmail and clamscan / vscan and amavis :)

I can't speak for anyone else, but I'm not stupid. I may look the part but
that don't mean I is. :)

--

Micheal Patterson
Network Administration
TSG Incorporated
405-917-0600

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ports compilation

2004-03-02 Thread Micheal Patterson


- Original Message - 
From: Tadimeti Keshav [EMAIL PROTECTED]
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Wednesday, March 03, 2004 12:20 AM
Subject: ports compilation


 Hi all,
 So I managed to download a few ports's sources (such
 as aterm, xmms, xine). Without connecting to the net
 to install them, how may I install them using the
 ports skeletons? (I mean using MAKE  MAKE INSTALL)?

 Do I need to change some variable that points to the
 FTP server?

 Thanks in advance
 Tk




If your source file is the same as the port makefile is looking for
(signatures, extensions, version, etc), you can drop them into
/usr/ports/distfiles and the port makefile will find, patch (if necessary)
and install them for you. Provided there's no dependancies that you don't
have already, you shouldn't need to connect to the net.

--

Micheal Patterson
Network Administration
TSG Incorporated
405-917-0600

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


  1   2   3   >