Re: OpenVPN routing

2011-04-25 Thread Maciej Milewski
On Tuesday 26 of April 2011 04:38:29, Ryan Coleman wrote: > Also: > [root@nbserver1 /usr/home/ryanc]# ifconfig > em0: flags=8943 metric 0 > mtu 1500 options=98 > ether 00:14:22:15:dc:65 > inet 192.168.46.2 netmask 0xff00 broadcast 192.168.46.255 > media: Ethernet autosel

disk problem: suggestion on how to handle...

2011-04-25 Thread Denis Fortin
Good morning, I have a small server with an SSD drive in it that is having some problems. Notably, dmesg has been repeatedly reporting the following error message: g_vfs_done():ad0s1a[READ(offset=-574217714356717568, length=16384)]error = 5 I realize that the best course of action is t

Re: problem updating ports (latex-cjk)

2011-04-25 Thread Fred
Hi Fred, The make clean went ok. The make patch: ===> Vulnerability check disabled, database not found ===> License check disabled, port has not defined LICENSE ===> Found saved configuration for latex-cjk-4.8.2_4 ===> Extracting for latex-cjk-4.8.2_4 => SHA256 Checksum OK for cjk-4.8.2.tar

Re: Password theft from memory?

2011-04-25 Thread Bob Hall
On Mon, Apr 25, 2011 at 11:29:08PM +0100, RW wrote: > On Mon, 25 Apr 2011 13:54:20 -0400 > Bob Hall wrote: > > > On Mon, Apr 25, 2011 at 05:46:33PM +0200, C. P. Ghost wrote: > > > On Mon, Apr 25, 2011 at 5:15 PM, Bob Hall wrote: > > > > On Mon, Apr 25, 2011 at 03:18:46PM +0100, RW wrote: > > > >

Re: OpenVPN routing

2011-04-25 Thread Ryan Coleman
Also: [root@nbserver1 /usr/home/ryanc]# ifconfig em0: flags=8943 metric 0 mtu 1500 options=98 ether 00:14:22:15:dc:65 inet 192.168.46.2 netmask 0xff00 broadcast 192.168.46.255 media: Ethernet autoselect (1000baseT ) status: active tap0: flags=8943 metric

OpenVPN routing

2011-04-25 Thread Ryan Coleman
I've got an OpenVPN connection working to my remote server, but I want to route the traffic to the local LAN. I have a bridge set up, pingable... but can't ping the em1 (192.168.46.2) from the remote machine. Server.conf: local 192.168.46.2 port 1194 proto udp dev tap ca keys/cacert.pem cert ke

Re: easy Firewall setup

2011-04-25 Thread Antonio Olivares
On Mon, Apr 25, 2011 at 9:06 PM, Daniel Staal wrote: > --As of April 25, 2011 7:43:33 PM -0500, Antonio Olivares is alleged to have > said: > >> I don't know which one to use, is there a page, howto (build a >> firewall or convert an existing one) to use here?  All I want is to be >> allowed to vi

Re: easy Firewall setup

2011-04-25 Thread Daniel Staal
--As of April 25, 2011 7:43:33 PM -0500, Antonio Olivares is alleged to have said: I don't know which one to use, is there a page, howto (build a firewall or convert an existing one) to use here? All I want is to be allowed to visit websites but don't allow anyone out there to come in somehow

easy Firewall setup

2011-04-25 Thread Antonio Olivares
Dear kind folks, Is there an easy firewall setup available somewhere(like the one referenced below but for FreeBSD)? i.e, like I saw reading in Distrowatch an easy way(using a page on the net: http://connie.slackware.com/~alien/efg/) I have read that there is pf and there is an implementation b

ZFS and zfsloader

2011-04-25 Thread Peter Toth
Hi there, I've recently migrated my old laptop to a new one (both running R8.2 + ZFS). Used zfs send/recv and corrected mountpoints. On the old laptop I had my / sitting in zpool, on the new one I've created a separate zpool/root for /. Everything is working OK except one strangeness - the boot lo

Re: Password theft from memory?

2011-04-25 Thread RW
On Mon, 25 Apr 2011 13:54:20 -0400 Bob Hall wrote: > On Mon, Apr 25, 2011 at 05:46:33PM +0200, C. P. Ghost wrote: > > On Mon, Apr 25, 2011 at 5:15 PM, Bob Hall wrote: > > > On Mon, Apr 25, 2011 at 03:18:46PM +0100, RW wrote: > > >> I don't believe the heap is allocated zeroed pages.  The kernel

Re: routing to a directly attached subnet without an address in this subnet

2011-04-25 Thread Lionel Fourquaux
On Mon, Apr 25, 2011 at 10:17:40PM +1000, Daniel Marsh wrote: What you need to verify is the default routes on the client hosts. It's very likely your packets and your initial route add commands on your dual host machine are correct, yet the return route on the other clients are incorrect. I ha

Safe to use GPT within gmirror?

2011-04-25 Thread Helmut Schneider
Hi, can I safely use GPTs within a GEOM_MIRROR? I created a new mirror and then used gpart to create additinal partitions. dmesg gives: the secondary GPT header is not in the last LBA As far as I read by now it seems safe to ignore that message but I want to get sure. Or are mirrored GPTs only

Re: ZFS performance strangeness

2011-04-25 Thread krad
On 24 April 2011 17:21, Sergio de Almeida Lenzi wrote: > Em Ter, 2011-04-12 às 13:33 +0200, Lars Wilke escreveu: > > > Hi, > > > > There are quite a few threads about ZFS and performance difficulties, > > but i did not find anything that really helped :) > > Therefor any advice would be highly app

Re: Password theft from memory?

2011-04-25 Thread Bob Hall
On Mon, Apr 25, 2011 at 05:46:33PM +0200, C. P. Ghost wrote: > On Mon, Apr 25, 2011 at 5:15 PM, Bob Hall wrote: > > On Mon, Apr 25, 2011 at 03:18:46PM +0100, RW wrote: > >> I don't believe the heap is allocated zeroed pages.  The kernel > >> does allocate such pages to the BSS segment, but that's

Re: Password theft from memory?

2011-04-25 Thread C. P. Ghost
On Mon, Apr 25, 2011 at 5:15 PM, Bob Hall wrote: > On Mon, Apr 25, 2011 at 03:18:46PM +0100, RW wrote: >> I don't believe the heap is allocated zeroed pages.  The kernel >> does allocate such pages to the BSS segment, but that's because it >> holds zeroed data such as C static variables. > > Accor

Re: Password theft from memory?

2011-04-25 Thread Bob Hall
On Mon, Apr 25, 2011 at 03:18:46PM +0100, RW wrote: > I don't believe the heap is allocated zeroed pages. The kernel > does allocate such pages to the BSS segment, but that's because it > holds zeroed data such as C static variables. According to McKusick and Neville-Neil's book on FreeBSD, sbrk

Re: problem updating ports (latex-cjk)

2011-04-25 Thread Frédéric Perrin
Hello Fred, Fred writes: > I ran into a problem when updating ports on 8.1-RELEASE (i386). > ~/print/latex-cjk doesn't want to build. > > ===> Patching for latex-cjk-4.8.2_4 > ===> Applying FreeBSD patches for latex-cjk-4.8.2_4 > Ignoring previously applied (or reversed) patch. > 1 out of 1 hun

Re: zfs partition for /etc?

2011-04-25 Thread krad
On 23 April 2011 23:48, Adam Vande More wrote: > On Sat, Apr 23, 2011 at 3:36 PM, krad wrote: > >> not sure about that as the auto mounts are done when /etc/rc.d/zfs runs so >> there might be a dependency >> > > Hum yeah you are right. I don't think it would be possible then as all the > old et

Re: Password theft from memory?

2011-04-25 Thread RW
On Sun, 24 Apr 2011 19:53:41 +0200 "C. P. Ghost" wrote: > On Sun, Apr 24, 2011 at 7:10 PM, Modulok wrote: > > I don't know if this is a problem on FreeBSD... > > > > Process A requests memory. > > Process A Stores a plaintext password in memory or other sensitive > > data. Process A terminates a

problem updating ports (latex-cjk)

2011-04-25 Thread Fred
Hello, I ran into a problem when updating ports on 8.1-RELEASE (i386). ~/print/latex-cjk doesn't want to build. ===> Patching for latex-cjk-4.8.2_4 ===> Applying FreeBSD patches for latex-cjk-4.8.2_4 Ignoring previously applied (or reversed) patch. 1 out of 1 hunks ignored--saving rejects t

Re: routing to a directly attached subnet without an address in this subnet

2011-04-25 Thread Lionel Fourquaux
On Sun, Apr 24, 2011 at 06:43:11PM -0500, Robert Bonomi wrote: Sorry, it _is_ impossible. :( simply put, to communicate _on_ a network, you have to be *ON* that network, i.e., 'have an address in that network's address-space'. I don't quite see why this would be required, as long as packets

Re: routing to a directly attached subnet without an address in this subnet

2011-04-25 Thread Lionel Fourquaux
On Sun, Apr 24, 2011 at 08:50:53PM -0400, David Scheidt wrote: On Apr 24, 2011, at 4:29 PM, Lionel Fourquaux wrote: em0 has addresses fe80::1234:56ff:fe78:9abc and 2001:db8::1 em1 has address fe80::1234:56ff:fe78:9abd Network 2001:db8::/64 is directly attached to em0, and network 2001:db8:0:1::