Dialog on some ports looks odd

2012-12-13 Thread Dan Mahoney, System Admin
Hey there, Can people confirm some brokenness to me? When I'm on a system over SSH, I find that doing the following: cd /usr/ports/mail/alpine; make config looks fine, but cd /usr/ports/mail/opendkim; make config seems to corrupt the headings and not display correctly, the OK/Cancel

portupgrade -- is there a way to only build and update ports that actually NEED it?

2012-06-25 Thread Dan Mahoney, System Admin
Hey there, I'm presently in the process of trying to do a portupgrade from rt-3.8.8 to 3.8.13. By all estimations, this is a minor bump. Already, I've encountered several annoyances due to ABI changes, such as the libtool2.4 fun. With normal portupgrade, this forces you to go fix the

possbility of a port for older versions of libintl?

2012-06-11 Thread Dan Mahoney, System Admin
Hey there, I recently discovered that the vmware-tools package is compiled against libintl.so.8 -- yes, this is probably something that should be fixed at the vmware level, but VMware's love for FreeBSD isn't there. As a workaround, it might be useful to have a port which compiles an older

Re: Don't know how to make /usr/ports/dns/bind96/work/.build....

2009-07-29 Thread Dan Mahoney, System Admin
On Wed, 29 Jul 2009, Doug Barton wrote: Mel Flynn wrote: On Tuesday 28 July 2009 20:24:27 Dan Mahoney, System Admin wrote: make: don't know how to make /usr/ports/dns/bind96/work/.build_done.bind96._usr_local. Stop *** Error code 2 Someone else had the same problem, and they also chose

Re: Don't know how to make /usr/ports/dns/bind96/work/.build....

2009-07-29 Thread Dan Mahoney, System Admin
On Wed, 29 Jul 2009, Doug Barton wrote: Dan Mahoney, System Admin wrote: I believe Mel is right here. 'make clean ; make config ; make' worked for me. As does a second make after getting this error, but it's nonintuitive, and probably a ports bug. I'm not sure why 'make clean

Re: Don't know how to make /usr/ports/dns/bind96/work/.build....

2009-07-29 Thread Dan Mahoney, System Admin
On Wed, 29 Jul 2009, Doug Barton wrote: Mel Flynn wrote: On Wednesday 29 July 2009 10:57:05 Doug Barton wrote: Dan Mahoney, System Admin wrote: I believe Mel is right here. 'make clean ; make config ; make' worked for me. As does a second make after getting this error, but it's nonintuitive

Re: Don't know how to make /usr/ports/dns/bind96/work/.build....

2009-07-29 Thread Dan Mahoney, System Admin
On Wed, 29 Jul 2009, Doug Barton wrote: Dan Mahoney, System Admin wrote: The fact that the error occurs AT ALL is the bug and what is counterintuitive, and many people would not think to try typing make again, and instead would just assume the thing's broken. Ok, I actually misunderstood

Don't know how to make /usr/ports/dns/bind96/work/.build....

2009-07-28 Thread Dan Mahoney, System Admin
Hey all, I'm having a problem on multiple systems: With a clean port, in dns/bind96: I get the options screen, I select only overwrite base in addition to the defaults:, and after, I get this: make: don't know how to make /usr/ports/dns/bind96/work/.build_done.bind96._usr_local. Stop ***

Re: Health Monitoring on Dell 600SC

2009-03-08 Thread Dan Mahoney, System Admin
On Sun, 8 Mar 2009, Polytropon wrote: On Sat, 7 Mar 2009 23:04:45 -0500 (EST), Dan Mahoney, System Admin d...@prime.gushi.org wrote: Hey all, I've got a dell 600SC in a remote location, and it's started freezing up (I'm thinking I've got a dying fan). I'm not familiar with this special

Re: Health Monitoring on Dell 600SC

2009-03-08 Thread Dan Mahoney, System Admin
On Sun, 8 Mar 2009, Tim Judd wrote: On Sun, Mar 8, 2009 at 2:02 AM, Dan Mahoney, System Admin d...@prime.gushi.org wrote: On Sun, 8 Mar 2009, Polytropon wrote: On Sat, 7 Mar 2009 23:04:45 -0500 (EST), Dan Mahoney, System Admin d...@prime.gushi.org wrote

Health Monitoring on Dell 600SC

2009-03-07 Thread Dan Mahoney, System Admin
Hey all, I've got a dell 600SC in a remote location, and it's started freezing up (I'm thinking I've got a dying fan). I've seen a thread from this user: http://lists.freebsd.org/pipermail/freebsd-hardware/2004-September/001883.html But seem to recall that non of this worked for me either.

(no subject)

2008-12-11 Thread Dan Mahoney, System Admin
Okay, new problem with regard to netgroups, NIS, and Pam: Given the following situation: * I want to be able to have su work normally in the event of an NIS disconnect, since I will likely need to su to fix said disconnect. * The wheel group needs to stay local * I want su to still use

How to block NIS logins via ssh?

2008-12-10 Thread Dan Mahoney, System Admin
Hello all, I'm noticing that when following the directions given here: http://www.freebsd.org/doc/en/books/handbook/network-nis.html For how to disable logins, the recommended action is to set the shell to /sbin/nologin. However, this is sloppy as it allows the user to log in, get the motd,

Re: How to block NIS logins via ssh?

2008-12-10 Thread Dan Mahoney, System Admin
On Wed, 10 Dec 2008, Dan Nelson wrote: In the last episode (Dec 10), Dan Mahoney, System Admin said: I'm noticing that when following the directions given here: http://www.freebsd.org/doc/en/books/handbook/network-nis.html For how to disable logins, the recommended action is to set the shell

Re: How to block NIS logins via ssh?

2008-12-10 Thread Dan Mahoney, System Admin
On Wed, 10 Dec 2008, Dan Nelson wrote: In the last episode (Dec 10), Dan Mahoney, System Admin said: On Wed, 10 Dec 2008, Dan Nelson wrote: In the last episode (Dec 10), Dan Mahoney, System Admin said: I'm noticing that when following the directions given here: http://www.freebsd.org/doc/en

/var/yp/securenets and ipv6?

2008-12-09 Thread Dan Mahoney, System Admin
Hello all... I searched for this everywhere and I guess it's a question that's never been asked. What's the syntax under FreeBSD for ipv6 addresses in securenets? Please reply off-list. -Dan Mahoney -- Dan Mahoney Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC

IPFW uid logging...

2008-09-08 Thread Dan Mahoney, System Admin
Hey all, I have the following rule set up in ipfw to limit the exposure of bad php scripts and trojans that try to send mail directly. allow tcp from any to any dst-port 25 uid root deny log tcp from any to any dst-port 25 out However, the log messages I get look like this: Sep 8 13:21:11

Re: IPFW uid logging...

2008-09-08 Thread Dan Mahoney, System Admin
On Mon, 8 Sep 2008, Dan Nelson wrote: In the last episode (Sep 08), Dan Mahoney, System Admin said: I have the following rule set up in ipfw to limit the exposure of bad php scripts and trojans that try to send mail directly. allow tcp from any to any dst-port 25 uid root deny log tcp from

Re: Circumstance leading up to removal of perl from base?

2008-06-21 Thread Dan Mahoney, System Admin
On Sat, 21 Jun 2008, Kris Kennaway wrote: Dan Mahoney, System Admin wrote: Hello all, I know it was a long time ago, but I was talking with a co-worker about why perl was removed from the base in v5 -- I seem to recall a discussion on some mailing list about either the number of arguments

Re: Circumstance leading up to removal of perl from base?

2008-06-21 Thread Dan Mahoney, System Admin
On Sat, 21 Jun 2008, Wojciech Puchar wrote: Yes I know how to use the OS, I'm more sking for historical rivia reasons. -Dan I know it was a long time ago, but I was talking with a co-worker about why perl was removed from the base in v5 -- I seem to recall a discussion on some mailing list

Circumstance leading up to removal of perl from base?

2008-06-20 Thread Dan Mahoney, System Admin
Hello all, I know it was a long time ago, but I was talking with a co-worker about why perl was removed from the base in v5 -- I seem to recall a discussion on some mailing list about either the number of arguments or the format of the arguments and/or output of a base perl function having

mailcap documentation?

2008-05-01 Thread Dan Mahoney, System Admin
Hello all, There's apparently an RFC-standard file called /etc/mailcap (as well as .mailcap), but I can't find any docs on this file. Would it be worthwhile to rework the RFC into a manpage (I am willing to do it), or should I bother the providers of ports that use it (such as, say, alpine

Manpage for rpc.ypupdated?

2008-04-26 Thread Dan Mahoney, System Admin
With all the recent changeover in namespace for rpc/yp stuff, there's been a lot moved around, but in all my searches, the ypd.upupdated daemon is completely undocumented. (even with a grep through the rest of the man directories provides no mention). Near as I can tell, it allows nis

Shell Menu that populates from /var/db/pkg

2008-01-10 Thread Dan Mahoney, System Admin
Hello all, I'd like to have a shell menu on my system that gives them available programs they can learn, but that also learns from ports/packages which options are available. (I.e. it won't list every branch port, but will list things from, say, editors, games, and possibly only certain

DigiBoard Classic

2008-01-01 Thread Dan Mahoney, System Admin
Hello All, I have a digiboard classic PCI, and I am trying to build a system to monitor many serial systems (UPSes) using FreeBSD. I cannot find any documentation referring to this driver -- it seems that everything digi related in the BSD tree refers to the intelligent cards, whereas the

Portsnap -- update claims up to date but it's not.

2007-12-25 Thread Dan Mahoney, System Admin
Maybe I'm just doing this completely wrong: prime# portsnap update Ports tree is already up to date. prime# portsnap fetch Looking up portsnap.FreeBSD.org mirrors... 4 mirrors found. Fetching snapshot tag from portsnap3.FreeBSD.org... done. Fetching snapshot metadata... done. Updating from Mon

Re: Portsnap -- update claims up to date but it's not.

2007-12-25 Thread Dan Mahoney, System Admin
On Tue, 25 Dec 2007, Jay Chandler wrote: Dan Mahoney, System Admin wrote: Maybe I'm just doing this completely wrong: prime# portsnap update Ports tree is already up to date. prime# portsnap fetch Looking up portsnap.FreeBSD.org mirrors... 4 mirrors found. Fetching snapshot tag from portsnap3

Notes for a first-time porter

2007-12-19 Thread Dan Mahoney, System Admin
All, I am thinking of doing a quick port of the zsu zone file serial number bumper for FreeBSD. However, I have a couple of questions regarding ports that aren't clear to me, nor do they seem to be in the porter's handbook. 1) What provision is made for when a port's distsite is simply

Passwd and pam?

2007-12-14 Thread Dan Mahoney, System Admin
Hello all, In looking through some pam stuff I find that there's a pam_passwdqc module to do password quality control. However, in reading the passwd man page, NO mention is made of either pam, or /etc/pam.d/passwd Is passwd a legacy tool which doesn't support this pam feature? -Dan --

FreeBSD mail forwarder and SPF

2007-12-10 Thread Dan Mahoney, System Admin
Hello all, I secure my outbound e-mail with SPF. One of the ports maintainers ([EMAIL PROTECTED]) also secures his INBOUND e-mail with SPF. I tried to e-mail garga about a minor doc-bug, and got a bounce, since his mailserver didn't recognize mx2.freebsd.org as a valid MX for [EMAIL

Maybe this is a bug, should I report it?

2007-12-04 Thread Dan Mahoney, System Admin
But why is it that portupgrade feels the need to upgrade gpg to gpg2, when gpg is still in the tree? I'm running a portupgrade -rf gettext, and didn't previously have gpg2 installed. -Dan -- this is too stupid even for irc -mtreal, EFnet #macintosh, 09/15/2K, 12:33 AM Dan

viability of QUOTA support as a KLD?

2007-12-03 Thread Dan Mahoney, System Admin
Hey all, It seems most of the things I want to do under freeBSD have been turned into nice KLD modules. However, I'm still forced to do a kernel recompile for QUOTA support. Is there some major reason it cannot be made into a KLD as well? -Dan Mahoney -- It would be bad. -Egon Spengler,

What's unknown about i386-unknown?

2007-11-20 Thread Dan Mahoney, System Admin
Hey all. I see i386-unknown as a build target all the time. So my (possibly silly) question is: what's the unknown variable here? And why isn't it? -Dan -- Dan Mahoney Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Site:

Re: Build Frustrations

2007-11-20 Thread Dan Mahoney, System Admin
On Tue, 20 Nov 2007, Jerry McAllister wrote: Apache2 is a complete piece of crap. Portable Runtime my ass. Was there something so wrong with APACI? Apache1.3 built out of the box on every system in the world. Using ports is no better. And again, I'll take anything anyone can offer to

Re: Build Frustrations

2007-11-20 Thread Dan Mahoney, System Admin
On Tue, 20 Nov 2007, Philip M. Gollucci wrote: This allowed apache2-non-ports to compile. However the question in my mind that still bears answering is: why apr would FIND such a library as installed (i.e. not fail at configure-time) but then fail to compile. I.e. why does the APR not set

Build Frustrations

2007-11-19 Thread Dan Mahoney, System Admin
All, I'm of the realization that FreeBSD is a volunteer project, but there's a recent issue I've hit, and I've contacted nearly EVERYONE I can think of about it to try and fix, and the response I've gotten has been a deafening silence. I'm having trouble building apache2.2.6, it relates I

Re: Build Frustrations

2007-11-19 Thread Dan Mahoney, System Admin
On Mon, 19 Nov 2007, Jerry McAllister wrote: On Mon, Nov 19, 2007 at 07:19:34PM -0500, Dan Mahoney, System Admin wrote: All, I'm of the realization that FreeBSD is a volunteer project, but there's a recent issue I've hit, and I've contacted nearly EVERYONE I can think of about it to try

Re: Build Frustrations

2007-11-19 Thread Dan Mahoney, System Admin
On Mon, 19 Nov 2007, Jerry McAllister wrote: You can tell ports where to install something. We used to install all of Apache in its own directory to make it easy to manipulate in a system we were installing in a lot of places. Check the ports doc and such. Actually, I just tried this.

6.3-PRERELEASE

2007-11-12 Thread Dan Mahoney, System Admin
Hey All, I recently CVSUPPED to what I thought would be 6.2-STABLE but instead got 6.3-PRERELEASE. However, I look at www.freebsd.org/releng and I see no reference to the release cycle of 6.3. Was this a mistake of some sort? -Dan -- Man, this is such a trip -Dan Mahoney, October 25,

Re: 6.3-PRERELEASE

2007-11-12 Thread Dan Mahoney, System Admin
On Tue, 13 Nov 2007, Tino Engel wrote: No, I wanted to track the 6-release chain, but was just a little surprised...I thought this kind of CVS naming scheme didn't take place till much later in the release engineering process. -Dan Dan Mahoney, System Admin schrieb: Hey All, I recently

Two questions about UNIX(r) certification.

2007-10-18 Thread Dan Mahoney, System Admin
I recently noticed that Apple's new OS, Leopard, is Unix certified. I'd imagine that the big reason that FreeBSD hasn't done this yet is: It costs a lot of money. That said, if in theory one were to try to get the operating system certified (say, to increase awareness and market share versus

Re: Two questions about UNIX(r) certification.

2007-10-18 Thread Dan Mahoney, System Admin
On Thu, 18 Oct 2007, Aryeh M. Friedman wrote: Dan Mahoney, System Admin wrote: I recently noticed that Apple's new OS, Leopard, is Unix certified. UNIX Certified what the [EMAIL PROTECTED]@ does that mean as far I know no one is in a position to make such a statement except maybe

IPFW with DNSBL

2007-09-25 Thread Dan Mahoney, System Admin
Hey all, Has anyone found a way to have ipfw work with a DNS blocklist? I realize the core functionality is not in IPFW, but I am thinking somehow, of having a table dynamically maintained by some kind of divert daemon? Couple this with some kind of a connection delay (perhaps also in the

Re: Sysinstall: No Floppy Devices Found

2007-09-03 Thread Dan Mahoney, System Admin
On Tue, 16 Jan 2007, Kevin Kobb wrote: I have found that when I do an install with an install.cfg file on a floppy, I must insert the floppy right after the system begins to boot from CD. If I don't when I tell sysinstall to read the floppy I get an error. As a work around, if I go into the

Floppy IO Errors

2007-08-30 Thread Dan Mahoney, System Admin
All, I am trying to load a kernel module from a floppy disk (ms dos formatted). Is there anything special I have to do to format these disks, or make them readable? I can boot from an MS DOS startup disk (as generated by XP) but BSD returns an IO error when trying to read any floppy. I've

Building UNSTRIPPED binaries in ports?

2007-08-21 Thread Dan Mahoney, System Admin
Hello, I am encountering a bug with named-9.4.1-P1 that I am attempting to work with ISC on, that I have built from ports (dns/bind94). However, I need a non-stripped version of the binary to get a backtrace. I can't roll my own binary because it may be related to some way that the port is

Re: number of processes reported by top versus ps

2007-02-15 Thread Dan Mahoney, System Admin
On Thu, 15 Feb 2007, Christian Walther wrote: Aah, that's right, threads. Forgot about those. -Dan On 15/02/07, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote: Hey all, I'm getting about a hundred more processes reported by ps aux|wc -l versus the total number of processes in top

number of processes reported by top versus ps

2007-02-14 Thread Dan Mahoney, System Admin
Hey all, I'm getting about a hundred more processes reported by ps aux|wc -l versus the total number of processes in top. Is this a normal thing? My system's been under some heavy load in the past couple days, but it's all presumably stable now. -Dan -- Man, this is such a trip -Dan

commented LINT?

2007-01-27 Thread Dan Mahoney, System Admin
Hey all, Back in 4.x, LINT was a fully-commented entity. Now it appears to be built-on-the-fly, which is great for being sure every-option is in in a programmatic manner, but bad as far as being able to look at LINT for syntax or notes as to which options need to be added together (or are

Re: Problem with ipfw flush

2007-01-25 Thread Dan Mahoney, System Admin
? -Dan Re: freebsd-questions Digest, Vol 162, Issue 11 Message: 31 On Wed, 24 Jan 2007 19:20:47 -0500 (EST), Dan Mahoney wrote: On Wed, 24 Jan 2007, Kevin Kinsey wrote: Dan Mahoney, System Admin wrote: Hey all. In trying to tweak my firewall setup I'm using a file called /etc

Problem with ipfw flush

2007-01-24 Thread Dan Mahoney, System Admin
Hey all. In trying to tweak my firewall setup I'm using a file called /etc/ipfw.rules However, it seems even though I copy my rules perfectly to that file, the system freezes up and locks me out when I do: ipfw -f flush; ipfw /etc/ipfw.rules I've also tried doing it as ipfw -f flush

Re: Problem with ipfw flush

2007-01-24 Thread Dan Mahoney, System Admin
On Thu, 25 Jan 2007, [EMAIL PROTECTED] wrote: In trying to tweak my firewall setup I'm using a file called /etc/ipfw.rules However, it seems even though I copy my rules perfectly to that file, the system freezes up and locks me out when I do: ipfw -f flush; ipfw /etc/ipfw.rules I've also

Re: Problem with ipfw flush

2007-01-24 Thread Dan Mahoney, System Admin
On Wed, 24 Jan 2007, Kevin Kinsey wrote: Dan Mahoney, System Admin wrote: Hey all. In trying to tweak my firewall setup I'm using a file called /etc/ipfw.rules However, it seems even though I copy my rules perfectly to that file, the system freezes up and locks me out when I do: /usr

Re: Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-18 Thread Dan Mahoney, System Admin
On Wed, 17 Jan 2007, Ted Mittelstaedt wrote: yes, but guess what - FBSD 6.2 is now released, so just install that and the updated driver is already in the kernel You were just waiting to say that weren't you :) -Dan Ted - Original Message - From: Dan Mahoney, System Admin [EMAIL

Re: Transport Mode IPSEC

2007-01-18 Thread Dan Mahoney, System Admin
On Wed, 17 Jan 2007, Ted Mittelstaedt wrote: Dan, You do realize, don't you, that since both of these hosts are on a switch, and are using unicast traffic to communicate with each other, that they cannot be sniffed, don't you? That implies trust of the switch, trust against arp-cache

Re: Transport Mode IPSEC

2007-01-18 Thread Dan Mahoney, System Admin
On Thu, 18 Jan 2007, Andrew Pantyukhin wrote: On 1/18/07, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote: It's not that simple. The difficulty is in key exchange, and it stays. I can show you how to implement it with static keys: As I read through the article (http://www.freebsd.org/doc

Dummynet howto?

2007-01-18 Thread Dan Mahoney, System Admin
Hey all, In dummynet, what's an appropriate queue size for a 50 Megabit pipe? And is there a general rule-of-thumb or calcluation I should be doing (i.e. limitation size times some number or something?) -Dan -- Hitler, Satan, those Hanson kids, anything. Just not the curious anteater.

Transport Mode IPSEC

2007-01-17 Thread Dan Mahoney, System Admin
Hey all, I see the handbook has a nice howto on tunnel mode ipsec. I just want to protect my NFS/NIS traffic between two hosts on a switch (neither NAT'd) -- is there a reference as to transport-mode ipsec anywhere, or has anyone done it that can outline it? I would imagine it would be

Re: Sysinstall: No Floppy Devices Found

2007-01-16 Thread Dan Mahoney, System Admin
On Tue, 16 Jan 2007, Kevin Kobb wrote: I have found that when I do an install with an install.cfg file on a floppy, I must insert the floppy right after the system begins to boot from CD. If I don't when I tell sysinstall to read the floppy I get an error. I've found the floppy works okay

Dummynet with vlans

2007-01-16 Thread Dan Mahoney, System Admin
Hey all, Note: I'm cc'ing Luigi Rizzo because, well, he's authoritative. This is NOT the same issue I asked about a couple years ago (which related to vlans, and bridging -- there is no bridge in play here). Anyway... We have a machine playing vlan aggregator. Gigabit nics (intels). em0

Origin of LINT?

2007-01-16 Thread Dan Mahoney, System Admin
I know it's probably off-topic, but I've searched google for a bit with no results, and because I'm curious: Does anyone (maybe one of the old guard) know the origin of the term lint for the all-inclusive feature set. I know SpamAssassin uses it as well (it's the command line argument to

Re: Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-15 Thread Dan Mahoney, System Admin
to your src/sys/dev/bge/ directory and recompile your 6.1-release kernel with no problems. I did. Look carefully at the chip on your MB and post the BCM model number on it if this doesen't work. Ted - Original Message - From: Dan Mahoney, System Admin [EMAIL PROTECTED] To: Ted Mittelstaedt

Re: Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-13 Thread Dan Mahoney, System Admin
: network, ethernet at device 4.1 (no driver attached) Also, I'm running 6.1-RELEASE, will the cvs drivers from CURRENT work? -Dan Ted - Original Message - From: Dan Mahoney, System Admin [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 12, 2007 5:02 PM Subject: Broadcom Nics

Re: Easier way to install on 3ware 9550 card?

2007-01-13 Thread Dan Mahoney, System Admin
On Sat, 13 Jan 2007, Erik Trulsson wrote: On Thu, Jan 11, 2007 at 12:01:48PM -0500, Dan Mahoney, System Admin wrote: yOn Wed, 10 Jan 2007, Erik Trulsson wrote: On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote: On Wed, 3 Jan 2007, John Nielsen wrote: Apologies

Sysinstall: No Floppy Devices Found

2007-01-12 Thread Dan Mahoney, System Admin
Hey all, I'm getting the message when I try to load a KLD in Sysinstall, even though I KNOW my floppy drive works. In fact, I can load the KLD from the loader prompt just fine. Is there a difference/advantage to one way of doing this over the other? -Dan Mahoney -- Hitler, Satan, those

Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-12 Thread Dan Mahoney, System Admin
Hey all, I have a Transport GT24 (B3992 Motherboard), and while it has one intel nic which works well, I'd like to be able to use the onboard broadcom network cards. Is there a known way of making them work? I seem to recall some dealy where you could use a windows driver? -Dan -- I love

Re: Easier way to install on 3ware 9550 card?

2007-01-11 Thread Dan Mahoney, System Admin
yOn Wed, 10 Jan 2007, Erik Trulsson wrote: On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote: On Wed, 3 Jan 2007, John Nielsen wrote: Apologies for top-posting. I've made some progress with this, but as I suspected, I'm screwed on namespace collision. I.e. I am

Re: Easier way to install on 3ware 9550 card?

2007-01-11 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Peter Giessel wrote: On Wednesday, January 10, 2007, at 01:22AM, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote: I am unable to load a version of twa.ko that supports my 3ware card because a previous version of twa.ko that does not support it is already in the generic

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, John Nielsen wrote: Apologies for top-posting. I've made some progress with this, but as I suspected, I'm screwed on namespace collision. I.e. I am unable to load a version of twa.ko that supports my 3ware card because a previous version of twa.ko that does not support

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Erik Trulsson wrote: On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote: On Wed, 3 Jan 2007, John Nielsen wrote: Apologies for top-posting. I've made some progress with this, but as I suspected, I'm screwed on namespace collision. I.e. I am unable

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Dimitar Vasilev wrote: Dan, comment out the twa lines in the kernel. Rebuild it and include the new modules. should be easy. the module in the kernel it's conflicting with is on an INSTALL CD. But I don't think I'll have the namespace conflicts with the NEW module. -Dan

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Peter Giessel wrote: On Wednesday, January 10, 2007, at 01:22AM, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote: I am unable to load a version of twa.ko that supports my 3ware card because a previous version of twa.ko that does not support it is already in the generic

Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
Hey all, I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's a 1u system -- sticking extra things into PCI slots as a workaround is likely to be impossible. I found this document on how to get it installed, in theory: http://www.3ware.com/kb/article.aspx?id=14850 But

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, [EMAIL PROTECTED] wrote: I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's a 1u system -- sticking extra things into PCI slots as a workaround is likely to be impossible. Any possibility of using a USB floppy drive? Will the BSD installer

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, Per olof Ljungmark wrote: Dan Mahoney, System Admin wrote: Hey all, I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's a 1u system -- sticking extra things into PCI slots as a workaround is likely to be impossible. I don't think you need

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, Tom Judge wrote: Dan Mahoney, System Admin wrote: Hi Dan, I have installed FreeBSD on several systems with 9550 controllers. The driver is available in sysinstall from 6.1 Release. (I installed from a 6.1 Release CD) This was the 9650, actually. -Dan -- It would

3ware 9650 Support

2007-01-03 Thread Dan Mahoney, System Admin
According to the 3ware site this card is supported as of FreeBSD 6.1. I previously posted with it as the 9550, but the end result is I hadn't slept enough, it's the 9650SE-4LPML. I checked the CVS sources for the twa driver, they haven't been touched in many months so I don't feel it's

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, John Nielsen wrote: 1) Boot to complete install CD 2) Go into Fixit mode (not just the emergency shell) 3) # sysctl kern.module_path=/dist/boot/kernel 4) # kldload twa 5) # exit 6) proceed with installation This shouldn't be necessary though, since twa is included in

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, Mike Tancsa wrote: On Wed, 3 Jan 2007 02:56:40 -0500 (EST), in sentex.lists.freebsd.questions you wrote: 4) Allowing non-standard modules to reside on the CD, instead of loading from floppy (i.e. I see there's a twa module in the base system, why aren't the .ko's sitting

Command to dump firewall rules to be persistent across reboots.

2006-11-29 Thread Dan Mahoney, System Admin
Hey all, I'm experimenting with ipfw as means of controlling some interesting anomalies like with portsenty or some ssh anti-brute-force scripts (i.e. adding bad hosts to tables, adding deny rules for certain hosts, etc), and I was wondering if there was (either in the form of a script, or a

IPFW: delete range of rules?

2006-11-29 Thread Dan Mahoney, System Admin
Hey all, the ipfw man page says rules can be deleted individually or in groups, but I don't see (other than the sets) an easy way to craft deletion of rules in a range (for example, 500-550). As the system I'm using crafts client rules by client numbers, this is a kinda useful feature, is it

MultiPath routing support

2006-10-23 Thread Dan Mahoney, System Admin
Hey all, Are there any supported methods for enabling multipath routing under FreeBSD. I currently have a couple BSD boxes which potentially have two default gateways to our two core routers, and I'd like to be able to load-balance. Doing it in IPFW or DUMMYNET would seem to break OSPF

Re: sshd brute force attempts?

2006-09-20 Thread Dan Mahoney, System Admin
On Wed, 20 Sep 2006, Erik Norgaard wrote: Dan Mahoney, System Admin wrote: On Tue, 19 Sep 2006, Erik Norgaard wrote: Along with some good advice. First of all: ssh is not a public service like http or smtp where you need anyone to be able to connect. So don't let them in the first place

sshd brute force attempts?

2006-09-19 Thread Dan Mahoney, System Admin
Hey all, I've looked around and found several linux-centric things designed to block brute-force SSH attempts. Anyone out there know of something a bit more BSD savvy? My best attempt will be to get this: http://www.csc.liv.ac.uk/~greg/sshdfilter/index_15.html running and adapt it. I've

Re: sshd brute force attempts?

2006-09-19 Thread Dan Mahoney, System Admin
On Tue, 19 Sep 2006, Erik Norgaard wrote: Along with some good advice. First of all: ssh is not a public service like http or smtp where you need anyone to be able to connect. So don't let them in the first place. It is in this case. It's a web server that allows shell usage (and

Re: sshd brute force attempts?

2006-09-19 Thread Dan Mahoney, System Admin
On Tue, 19 Sep 2006, backyard wrote: In reality using passwords with SSH kinda defeats the purpose of SSH. Keeping passwords from being sent across the network as cleartext? -Dan -- Of course she's gonna be upset! You're dealing with a woman here Dan, what the hell's wrong with you? -S.

include format for /etc/rc.conf

2006-08-30 Thread Dan Mahoney, System Admin
Hey all, Are there any supported formats for INCLUDES in /etc/rc.conf such that I can drop default configs into /etc/rc.conf and then have files in a certain directory (ala includerc) override them? Basically, I'd like to do mass-updates of several dozen machines' configs normally found in

Deny large number of IPs via ipfw

2006-06-11 Thread Dan Mahoney, System Admin
Hey all, I've got a file that I just synced from a major RBL, and I'd like to just use it to globally deny access to my system. Is there an easy way to do this within ipfw -- the file is about 3 *million* lines, and is from cbl.abuseat.org. -Dan -- SOY BOMB! -The Chest of the nameless

RE: Deny large number of IPs via ipfw

2006-06-11 Thread Dan Mahoney, System Admin
. -Dan You really need to rethink what you are doing. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Mahoney, System Admin Sent: Sunday, June 11, 2006 8:36 AM To: [EMAIL PROTECTED] Subject: Deny large number of IPs via ipfw Hey all, I've got

named/bind hangup

2006-05-11 Thread Dan Mahoney, System Admin
Hey all, I have caching DNS servers running on two BSD 5.4 machines, and what happens on both of them is that the processes will just lock up, and while they may still answer some queries, they don't refresh or update, or respond to proper signals. For example: s2# sh /etc/rc.d/named stop

PAM and OPIE and su

2005-12-16 Thread Dan Mahoney, System Admin
Hey all, this is sort of a wierd question, but bear with me. I notice that pam_securetty has a function that allows people to have to be secure before it will let them do something (for example, use login as root). I've recently enabled telnetd on my system because of people trapped behind

build ports without X -- make.conf

2005-11-07 Thread Dan Mahoney, System Admin
Hey all, In BSD 4.x, there was a section in the make.conf manpage that said you could define WITHOUT_X11 and ports would build without it (for things like ghostscript, cvsup, etc, which have distinctly different ports) For some reason this is gone in 5.x -- what's the appropriate way to do

Re: build ports without X -- make.conf

2005-11-07 Thread Dan Mahoney, System Admin
On Mon, 7 Nov 2005, Paul Waring wrote: On Mon, Nov 07, 2005 at 01:16:27PM -0500, Dan Mahoney, System Admin wrote: In BSD 4.x, there was a section in the make.conf manpage that said you could define WITHOUT_X11 and ports would build without it (for things like ghostscript, cvsup, etc, which

building parallel builds of mysql40 and mysql41

2005-09-12 Thread Dan Mahoney, System Admin
Hey all, I'm presently running mysql40-server from ports. I'd like to jump up to mysql41-server. However, Ive tried to build the port for the new one before the old one is deinstalled (just so the dbs dont have to be down during a long build) and the ports tree doesn't seem to like this.

ssh behavior changes after upgrade to 4.1-portable

2005-08-30 Thread Dan Mahoney, System Admin
Hey all, I just upgraded to the latest 4.1-portable openssh, and now when trying to log into my system I get the following: [EMAIL PROTECTED]:/etc/ssh$ ssh [EMAIL PROTECTED] WARNING: DSA key found for host prime.gushi.org in /home/danm/.ssh/known_hosts:1 DSA key fingerprint

preexec function in tcsh

2005-08-25 Thread Dan Mahoney, System Admin
Hey all, I'm reading here that a certain version of tcsh (starting with 6.09) has support for a preexec function. I'm not seeing this in the source or manpage. Is there any way to upgrade the tcsh version in FreeBSD? -Dan -- Station! -Bill Ted's Bogus Journey Dan

5.4 -- bridging, ipfw, dot1q

2005-08-11 Thread Dan Mahoney, System Admin
Okay, here's the situation. PLEASE let me know if there's a better place to ask. (isp@, kernel@, something) I'm setting up a bridging firewall where the packets are passing through on dot1q trunks. The bridge works. Packet counts work (so I assume the bridge at least sees the packets).

Re: 5.4 -- bridging, ipfw, dot1q

2005-08-11 Thread Dan Mahoney, System Admin
On Thu, 11 Aug 2005, Glenn Dawson wrote: At 09:08 PM 8/11/2005, Dan Mahoney, System Admin wrote: Okay, here's the situation. PLEASE let me know if there's a better place to ask. (isp@, kernel@, something) I'm setting up a bridging firewall where the packets are passing through on dot1q

BSDPAN versus CPAN

2005-08-03 Thread Dan Mahoney, System Admin
Hey all, I'm under the understanding that it's somehow preferable to install perl modules via the ports system, rather than the straight off perl -MCPAN -e shell system I normally use. Apparently the only advantage is this avoids the no origin recorded errors (although portupgrade can't

Custom Sendmail through /etc/make.conf

2005-08-01 Thread Dan Mahoney, System Admin
Hey all... I'm building a new box and thinking I'd like to stick with the base sendmail instead of building my own as I've traditionally been doing. Here is my devtools/Site/site.config.m4 file APPENDDEF(`confENVDEF', `-DSASL -DNETINET6') APPENDDEF(`confLIBDIRS', `-L/usr/local/lib')

  1   2   >