GBDE encryped File system

2010-03-20 Thread Aiza
In release 8.0 is GBDE now part of the base system? If not what is the /boot/loader.conf command to add to enable it? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any

Re: GBDE encryped File system

2010-03-20 Thread Adam PAPAI
On 3/20/10 6:29 AM, Aiza wrote: In release 8.0 is GBDE now part of the base system? If not what is the /boot/loader.conf command to add to enable it? You don't have to enable it. Nothing to add to the loader.conf. But if you want to mount the partitions during the boot: 18.16.1.2.1

Re: Samba read speed performance tuning

2010-03-20 Thread Dan Naumov
On Sat, Mar 20, 2010 at 3:49 AM, Gary Gatten ggat...@waddell.com wrote: It MAY make a big diff, but make sure during your tests you use unique files or flush the cache or you'll me testing cache speed and not disk speed. Yeah I did make sure to use unique files for testing the effects of

freenas-like solution for aoe?

2010-03-20 Thread Vadkan Jozsef
Does anybody know a FreeNAS-like solution, that supports AoE? - Ata over Ethernet? Thank you! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to

Re: FreeBSD 8.0 Booting Problem on ZV5320US Laptop

2010-03-20 Thread Anoop Kumar Narayanan
richard.delaur...@gmail.com wrote: Are you able to get to the FreeBSD splash screen (where you get a countdown to startup with a menu of 6 selections)? Yes, It doesn't go beyond that selection most of the time. One of the choices there is boot w/o ACPI; you could try that if you get that

GBDE and fixit.iso

2010-03-20 Thread Aiza
Does the fixit.iso file include the GBDE application? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

securing sshd

2010-03-20 Thread Jamie Griffin
Hello I've been reading up on securing sshd after being bombarded with attempted logins. The steps i've taken so far to make things more secure are: * changed the encryption method for passwords in /etc/login.conf from md5 to blowfish and changed all the passwords to ridiculously obscure

Re: securing sshd

2010-03-20 Thread Erik Norgaard
On 20/03/10 14:18, Jamie Griffin wrote: I've been reading up on securing sshd after being bombarded with attempted logins. Hi! First step to ssh security is: Don't panic! Take your time to read the logs and understand what's going on. So, you've got bombarded with login attempts, but they

Copying mirrored partitions - will this work?

2010-03-20 Thread Mike Clarke
I'm currently running 8.0-RELEASE and am considering experimenting with 8.0-STABLE. I'd like to preserve my existing system in case things go pear-shaped so I'll copy the entire system onto a spare slice and then use csup to upgrade the copy to STABLE. Normally I'd go through the steps of

Re: securing sshd

2010-03-20 Thread Jerry
On Sat, 20 Mar 2010 16:32:28 +0100 Erik Norgaard norga...@locolomo.org articulated: * Disabled password logins completely, and to only allow public key authentication This seems good for security, but not always practical. Now you have to walk around with a USB or have keys on your

Re: securing sshd

2010-03-20 Thread Elias Chrysocheris
On Saturday 20 of March 2010 18:14:17 Jerry wrote: On Sat, 20 Mar 2010 16:32:28 +0100 Erik Norgaard norga...@locolomo.org articulated: * Disabled password logins completely, and to only allow public key authentication This seems good for security, but not always practical. Now you

Re: securing sshd

2010-03-20 Thread Erik Norgaard
On 20/03/10 17:14, Jerry wrote: Seriously, disabling password log-ins and using key authentication is extremely secure. Do make sure that you password protect your keys however. In any event, if you laptop or whatever is stolen, you have more than just one problem to contend with anyway. I

Re: securing sshd

2010-03-20 Thread Leonidas Tsampros
Jamie Griffin ja...@fantomatic.co.uk writes: Hello I've been reading up on securing sshd after being bombarded with attempted logins. The steps i've taken so far to make things more secure are: * changed the encryption method for passwords in /etc/login.conf from md5 to blowfish and

Re: securing sshd

2010-03-20 Thread Jamie Griffin
I think on reflection I might have been a little over the top with blocking password logins and I think the point about carrying a key on a usb stick, etc, is a very good one. The reason I went with that decision is because I only expect to be logging in to the server from two locations: at

Re: Trouble Installing JKD15 On A Vanilla 8.0 Installation

2010-03-20 Thread Tom Purl
On Fri, Mar 19, 2010 at 10:03 AM, Warren Block wbl...@wonkity.com wrote: On Fri, 19 Mar 2010, Tom Purl wrote: First, after the port had compiled on my system for many hours, it crashed with an error message stating that I was out of swap space. I had only devoted 128 MB of RAM to the VM at

Re: securing sshd

2010-03-20 Thread Erik Norgaard
On 20/03/10 18:23, Jamie Griffin wrote: The reason I went with that decision is because I only expect to be logging in to the server from two locations: at home or from a computer at my university In that case, the best thing you can do is figure out the IP ranges of either location.

AMD 64 X2 - Dual Core?

2010-03-20 Thread Gene
Hi - I just got a board with an AMD Athlon 64 X2 cpu. I was wondering - 1) Is the amd64 8.0 release the fbsd of choice here? and 2) Does it take advantage of the athlon's dual cores? Thanks, IHN, Gene -- To everything there is a season, And a time to every purpose under heaven.

Re: API to find the memory usage of a process.

2010-03-20 Thread Pieter de Goeje
On Thursday 18 March 2010 18:28:48 Jayadev Kumar wrote: Hi, I need to find the memory usage of a process, from inside the process. Is there any system call do this ? I was trying to find it from 'top' utility source code. I couldn't find the port which it is coming from yet. Thanks,

Re: securing sshd

2010-03-20 Thread Jamie Griffin
In that case, the best thing you can do is figure out the IP ranges of either location. Definately a good idea, thanks Eric. Btw. I found two articles on securityfocus.com, the first is analysis using a honeypot, as you see these attacks are pretty lame:

RE: How do I fix the broken python26 port in 7.2-RELEASE ?

2010-03-20 Thread George Sanders
Virgin 7.2-RELEASE install. I run: csup -h cvsup4.freebsd.org -i ports/lang/python26 -g -L 2 /usr/share/examples/cvsup/ports-supfile and now I have a /usr/ports/lang/python26/distinfo that looks like: MD5

RE: How do I fix the broken python26 port in 7.2-RELEASE ?

2010-03-20 Thread Michael Powell
George Sanders wrote: Virgin 7.2-RELEASE install. I run: csup -h cvsup4.freebsd.org -i ports/lang/python26 -g -L 2 /usr/share/examples/cvsup/ports-supfile and now I have a /usr/ports/lang/python26/distinfo that looks like:

Re: AMD 64 X2 - Dual Core?

2010-03-20 Thread Mike Tancsa
At 02:46 PM 3/20/2010, Gene wrote: Hi - I just got a board with an AMD Athlon 64 X2 cpu. I was wondering - 1) Is the amd64 8.0 release the fbsd of choice here? Yes. 8.0R is the way to go. However, you might want to bring it upto date after installing it as there are a number of bug fixes

Re: AMD 64 X2 - Dual Core?

2010-03-20 Thread krad
I totally disagree with using the 32bit unless you have a specific need or potentially if you are running it as a desktop. 64 everytime for servers for loads of reasons. If you are running less than 4 gig their is a fair chance you will in the next few years On 3/20/10, Gene

net-snmp pass scripts

2010-03-20 Thread krad
Hi, I know this isn't the ideal, place but im not having much joy on the net-snmp users mailing list. Does anyone have any good guides for writing or examples of snmp pass scripts? ___ freebsd-questions@freebsd.org mailing list

bruteforce protection howto

2010-03-20 Thread Vadkan Jozsef
Two pc's: 1 - router 2 - logger Situation: someone tries to bruteforce into a server, and the logger get's a log about it [e.g.: ssh login failed]. What's the best method to ban that ip [what is bruteforcig a server] what was logged on the logger? I need to ban the ip on the router pc. How can

Re: bruteforce protection howto

2010-03-20 Thread Jamie Griffin
Two pc's: 1 - router 2 - logger Situation: someone tries to bruteforce into a server, and the logger get's a log about it [e.g.: ssh login failed]. What's the best method to ban that ip [what is bruteforcig a server] what was logged on the logger? I need to ban the ip on the router

Re: confirm 0e468fd0cede091de70f462228a30f3c07dd71fa

2010-03-20 Thread Jerry
On Sat, 20 Mar 2010 21:34:27 + freebsd-questions-requ...@freebsd.org freebsd-questions-requ...@freebsd.org freebsd-questions-requ...@freebsd.org articulated: Mailing list subscription confirmation notice for mailing list freebsd-questions We have received a request for subscription of

Re: securing sshd

2010-03-20 Thread Peter
Jamie Griffin ja...@fantomatic.co.uk writes: Hello I've been reading up on securing sshd after being bombarded with attempted logins. The steps i've taken so far to make things more secure are: * changed the encryption method for passwords in /etc/login.conf from md5 to blowfish and

Re: bruteforce protection howto

2010-03-20 Thread Erik Norgaard
On 20/03/10 23:17, Vadkan Jozsef wrote: What's the best method to ban that ip [what is bruteforcig a server] what was logged on the logger? I need to ban the ip on the router pc. Take your time to think about if this is indeed the right solution. 1st: You need to decide which is the right

Re: Copying mirrored partitions - will this work?

2010-03-20 Thread Modulok
How valuable is your data? I recommend you make an offline backup. There's a lot of steps in your procedure which introduce room for error. You could perhaps disconnect one of the hard drive's data cable (same thing). Also, make a backup copy of your geom meta data somewhere. Other than that,

Re: freenas-like solution for aoe?

2010-03-20 Thread Dan Nelson
In the last episode (Mar 20), Vadkan Jozsef said: Does anybody know a FreeNAS-like solution, that supports AoE? - Ata over Ethernet? You can get iSCSI with the net/istgt port, which should perform better than AoE. -- Dan Nelson dnel...@allantgroup.com

ezjail

2010-03-20 Thread Aiza
I don't have sources installed on my system. Just use the binary Freebsd-update function. At new releases I do a clean install. I only have a single public IP address. Now I would like to play with jails. One for postfix, apache, and ftp. My reading of EZJAIL and the jails section of the