Re: RE : Re: problem installing on i386

2006-09-26 Thread Erik Norgaard
Desmond Coughlan wrote: So on the second disk drive, which is around.. 20GB, IIRC, we want /mail, /sql and /forums, and maybe 512M of swap. On the first, system files etc. and swap. I used to tinker around with postgreSQL, so that'll be what we'll be using. How does that sound? 1)

Re: calenders .. silly question !

2006-09-26 Thread Erik Norgaard
Desmond Coughlan wrote: The thread on calendars has got me thinking The 'non-profit' organisation I mentioned, is a school. Here in France (and no doubt in dozens of other countries), many universities have constructed 'virtual campuses'. By that, I mean that the student logs

USB based webcam

2006-09-24 Thread Erik Norgaard
Hi: I have a laptop with a built in webcam: ugen0: Vimicro Corp. USB2.0 Web Camera, rev 2.00/1.00, addr 2 Since this goes on the generic usb device, I guess there is no driver. Is this supported? Do I need to download a driver somewhere or will webcam software provide it? Secondly, what

Re: help please

2006-09-21 Thread Erik Norgaard
Hèrvé Simplice van der Eijk wrote: Hi everybody, I recently install freebsd 5.4, bind9, isc-dhcp-server, openldap on my machine. DNS server is working oke, but since I'm running ipfw firewall on the machine, my windows client (internet Explorer kan reach my freeBsd webserver. can anyone tell

Re: Firewall

2006-09-21 Thread Erik Norgaard
Hèrvé Simplice van der Eijk wrote: on 1 machine I set up a freebsd 5.4 server with dhcp, dns, ldap running on it. on an other machine I set up apachy webserver and both are working fine. when I'm making an http request on a windows client (internet explore) it shows my web site. but

Re: sshd brute force attempts?

2006-09-20 Thread Erik Norgaard
Dan Mahoney, System Admin wrote: On Tue, 19 Sep 2006, Erik Norgaard wrote: Along with some good advice. First of all: ssh is not a public service like http or smtp where you need anyone to be able to connect. So don't let them in the first place. It is in this case. It's a web server

Re: Thin Terminals

2006-09-20 Thread Erik Norgaard
Robert Davison wrote: I've been looking at the Sun Ray terminals and like the idea of using thin clients to connect to the main server to run apps. Are they any programms in thr ports which allow a similar set-up using FreeBSD. I know you can do this with X but would need a tutorial to help

Re: Dummynet in an IPFilter setup

2006-09-20 Thread Erik Norgaard
Odhiambo Washington wrote: I need to control bandwidth on the external interface only, not on the LAN (internal interfaces). Is this rightful thinking or sheer imagination which is not practical? If you're happy with IPFilter and need to ensure minimum bandwidth for some network segment,

Re: sshd brute force attempts?

2006-09-20 Thread Erik Norgaard
Elijah Savage wrote: Joao Barros wrote: I'm using BruteForceBlocker quite successfully. I take the opportunity to thank danger for it :-) http://www.freshports.org/security/bruteforceblocker/ I use /usr/ports/security/denyhost It was very easy to install and setup the config file is

Re: 6.2-Release schedule

2006-09-19 Thread Erik Norgaard
Kris Kennaway wrote: No critical pending issues, no show stoppers left, no required or desired features. Only some stress tests problems. So, does this mean that the page has not been updated? Usually I would expect a problem - solved list. Or does this mean that the path through betas and

Re: sshd brute force attempts?

2006-09-19 Thread Erik Norgaard
Dan Mahoney, System Admin wrote: Hey all, I've looked around and found several linux-centric things designed to block brute-force SSH attempts. Anyone out there know of something a bit more BSD savvy? My best attempt will be to get this:

Re: php4 no longer has apache module?

2006-09-18 Thread Erik Norgaard
Michael P. Soulier wrote: On 17/09/06 Michael P. Soulier said: So, I upgrade lang/php4. php4-4.4.4 PHP Scripting Language (Apache Module and CLI) And yet, it doesn't seem to contain the apache module. [EMAIL PROTECTED] ~]$ pkg_info -L php4-4.4.4 | grep '\.so' [EMAIL PROTECTED] ~]$

Re: Using BSD as filter

2006-09-18 Thread Erik Norgaard
Dave wrote: I am interested in using BSD on a computer between my cable modem and a router which is both wireless and hardwired. Is this something that anyone could advise me of such as: 1) Which bsd software would be best for my purpose. I use packet filter. 2) I am interested in

6.2-Release schedule

2006-09-18 Thread Erik Norgaard
Hi: I was just looking over the release schedule for the 6.2 release, a few weeks ago, there was no detailed plan, now it's there including the todo-list, http://www.freebsd.org/releases/6.2R/todo.html No critical pending issues, no show stoppers left, no required or desired features.

Re: RSS feeds for important sites?

2006-09-12 Thread Erik Norgaard
Marc G. Fournier wrote: I'm trying to get my rss reader configured up so that I no longer miss anything ... or, at least, make it easier to keep on top of everything ... I can't seem to find stuff like DaemonNews and such ... Does anyone have a list of BSD related RSS feeds that they'd be

Re: NAT+IPSEC toubles

2006-09-11 Thread Erik Norgaard
Administrators wrote: Hi, I'm building VPN connected to CISCO device. I NEED to translate my LAN adress to a given adress. The VPN work well when I try doing ifconfig em0 alias [EMAIL PROTECTED] ping -S [EMAIL PROTECTED] dest_@ but I didn't manage to translate LAN adresse AND having VPN

Re: Word processor for 6.1

2006-09-05 Thread Erik Norgaard
Perry Hutchison wrote: Looking at that post it seems something failed when you tried to update your ports collection. I suspect the blunder was in trying to update Ports at all, given it is a new 6.1 CD install and nothing *else* is updated. The Handbook suggests to always update Ports before

Re: Word processor for 6.1

2006-09-05 Thread Erik Norgaard
RW wrote: On Tuesday 05 September 2006 09:35, Erik Norgaard wrote: In the standard-supfile for the base system you'd specify RELENG_6 which means you'll get head of -STABLE, or if you are conservative RELENG_6_1 which means that you'll just get security patches to the 6.1 release. I do wish

Re: Word processor for 6.1

2006-09-04 Thread Erik Norgaard
Perry Hutchison wrote: Anyone know where I can find a working word processor for 6.1? AbiWord and OpenOffice both require Gnome, which won't build. What do you mean: which won't build? No problems here - I recently compiled both. They don't require the full gnome package. There is a

Re: time to come clean... .

2006-09-04 Thread Erik Norgaard
Gary Kline wrote: I've just installed/reinstaled rsync here on ns1.thought.org (aka sage) and on zen.thought.org. I've fiddled with the rsyncd.conf on both FBSD systems. What I don't understand is how rsync, using ssh, gets past the secret password. If, say, I

Re: Changing root's shell

2006-08-09 Thread Erik Norgaard
Ross Penner wrote: On 8/8/06, Pete Slagle [EMAIL PROTECTED] wrote: I followed your steps but the problem remains. The /etc/passwd file is edited but I still can't logon as root. When I changed the shell initially, I used chpass. I also tried changeing the /etc/master.passwd file to no avail.

Re: Thin terminals for FreeBSD

2006-08-08 Thread Erik Norgaard
Nagy László wrote: Hello, I need to setup an environment where some users (10 to 20 employees) will use terminals to run programs. They need to run a few popular programs: thunderbird, firefox, adobe acrobat, openoffice and gaim. This site will be a customer service. We decided to reduce

Re: switching from linux to freebsd

2006-08-02 Thread Erik Norgaard
Yuan, Jue wrote: On Tuesday 01 August 2006 23:18, Erik Nørgaard wrote: Yuan, Jue wrote: What about the first question? curious too :-) http://lists.freebsd.org/pipermail/freebsd-questions/ is a good bookmark to have when you accidentially delete a post you later want to look at. Hi.

Re: switching from linux to freebsd

2006-08-01 Thread Erik Norgaard
Tyler Spivey wrote: Hello. I'm interested in moving my server from linux to freeBSD, but have several questions: 2. Can Ufs handle crashes very well, or is a very long fsck needed like the old ext2 days? Usually fsck will run in the background after boot has finished. On very hard crashes you

Re: How to use kernel modules from CURRENT on STABLE

2006-07-26 Thread Erik Norgaard
Rafael Aquino wrote: When you do a make depend in /usr/src/sys/i386/conf/KERNEL/ you are just compiling the modules... Ok, I tried to make something in various directories, it seems that the way to build modules only is: # cd /usr/src/sys/modules # make Thanks, Erik -- Ph:

How to use kernel modules from CURRENT on STABLE

2006-07-25 Thread Erik Norgaard
Hi: I have had some problems, it seems that the drivers in -STABLE does not support my hardware fully. So I want to try out drivers on -CURRENT without switching the whole system up to current. What is the best way to do this? - checkout current and copy the relevant source into the stable

Re: Connection refusal for an NFS mount

2006-07-21 Thread Erik Norgaard
David Landgren wrote: Short of rebooting the server, how do I reinitialise the NFS layers? Does the following order sound sane? /etc/rc.d/mountd stop /etc/rc.d/nfsd stop /etc/rc.d/rpcbind stop ... and the the same again with start in the reverse order? rpcbind must be started first in order

Re: HOWTO wireless please.

2006-07-21 Thread Erik Norgaard
Marwan Sultan wrote: ALso i tried the ndisgen way, to convert, and it built the driver as w39n51_sys.ko and i kldloaded # kldload /usr/home/admin/w39n51_sys.ko after issuing this command, no devices showedup in ifconfig -a and this is the result in /var/log/messages kernel: ndis0: Intel(R)

Re: fbsd 6 didnot work on laptop

2006-07-19 Thread Erik Norgaard
Marwan Sultan wrote: Well, i have HP laptop dv5178us model. i installed freebsd 6.1, after installation is complete, it will ask you to remove any cd and reboot till here is fine after i reboot, it hangs!! nothing happens! nothing moves!! just blank black dead screen!! I installed fbsd

Re: fbsd 6 didnot work on laptop

2006-07-19 Thread Erik Norgaard
Marwan Sultan wrote: Well, I did what im doing since 7 years on desktops! just inserted the cd, startedup the laptop and asked for installation, then the normal procedures, you know? partitioning..etc.. when the installation done, i removed the cd and restarted, but the laptop freeze..on a

Re: Start dhcpd on boot

2006-07-17 Thread Erik Norgaard
Chris Hill wrote: I installed net/isc-dhcp3-server from ports, butI can't seem to persuade it to start when the machine boots. After boot I can do a # /usr/local/etc/rc.d/isc-dhcpd.sh start ...and the daemon runs and works, but I would like for it to start automatically on boot, with no manual

Re: Alt Gr key troubles in FreeBSD

2006-07-17 Thread Erik Norgaard
nocturnal wrote: I tried all the things you mentioned and i discovered that the problem can easily be reproduced in any application. It's simply a matter of me not letting go of the shift key fast enough. I reproduce it by typing any number of characters in caps with the shift key down and

Re: Boot hangs at /bin/sh?, can't see USB keyboard

2006-07-13 Thread Erik Norgaard
Michael P. Soulier wrote: On 12/07/06 Erik Nørgaard said: The keyboard usually works on the boot menu as the bios is in control. So, exit the menu to load the kernel modules you need, usb, ukbd and uhid I think should do. Then boot into single user mode. For next time, this happens, I suggest

Re: IMAP server alternatives

2006-07-11 Thread Erik Norgaard
Reko Turja wrote: The downside of Cyrus is the abysmal documentation, but once you get hang of it, it's one fine IMAP/POP server. And of course there's project wiki at http://cyruswiki.andrew.cmu.edu/ which definitely is updated after 2003 :) I too can recommend cyrus-imap which I have

Re: Alt Gr key troubles in FreeBSD

2006-07-10 Thread Erik Norgaard
nocturnal wrote: i noticed major issues with Alt Gr keys. I think they're called deadkeys in the X.org configuration. It's mainly because i'm from sweden and have all the important characters like {, [, ], }, among others, on keys that require the Alt Gr key to be pressed for me to use them.

Re: 3 NIC firewall help

2006-07-04 Thread Erik Norgaard
Mark Moellering wrote: I have a problem which I think must be simple, I just can't figure out exactly what I need to do. I have a gateway / firewall (freebsd 6.1) with 3 nic cards. I just added the third card, rl1, which I have attached to a wireless access point. I can ping the access

Re: mod_proxy missing under freebsd

2006-07-04 Thread Erik Norgaard
npy wrote: I need to get mod_proxy running under apache and can't seem to find the ports. Anyone knows where mod_proxy is located? Which version of apache? For apache 2.2 check Makefile.doc: To enable a module category: WITH_CATEGORY_MODULES To disable a module category:

Re: setting ntp-servers for ntpdate via dhcp

2006-07-03 Thread Erik Norgaard
Jonathan Horne wrote: On Sunday 02 July 2006 15:49, Erik Nørgaard wrote: There is a dhcp-option, ntp-servers, to set which ntp-server to use. It would be quite useful with ntpdate. Does anyone have a patch to ntpdate startup script or other hack that use this option? - just before I start

wifi: Combining open non-encrypted AP and EAP-TLS in one

2006-06-30 Thread Erik Norgaard
Hi: I have got the idea that I want to set up a hostap on my FBSD box. My idea is that I want to allow strangers to associate and get their network configuration via dhcp. Any attempt to access the Internet will then be redirected to a web page explaining that they have to register first.

Re: smp kernel

2006-06-21 Thread Erik Norgaard
Michael P. Soulier wrote: Hello, Is SMP enabled in the GENERIC kernel? I have a hyperthreading box, and on Linux it shows up with two cpus. When I do a top on the box in FreeBSD I still see only one CPU. Also, sysctl -a | grep cpu only shows a dev.cpu.0. The GENERIC does not support SMP. If

Queueing with pf

2006-06-14 Thread Erik Norgaard
Hi: I have a network: 54Mbps 100Mbps 320Kbps- WLAN -- FBSD w PF --- DSL - Internet -2Mbps Clearly, any congestion will occur on the DSL-Internet line. I want to enable queueing on the FBSD gateway using PF such that

Re: FreeBSD firewall, nat, kernel

2006-06-13 Thread Erik Norgaard
[EMAIL PROTECTED] wrote: Hi, I've just installed a FBSD 6.1 box and I want to install Firewall and NAT services. The handbook Firewall chapter indicates to compile Firewall if you want NAT. But, I could not find in the GENERIC file the IPFIREWALL options. Do you have an idea ? See the NOTES

Re: Where is CARP?

2006-06-13 Thread Erik Norgaard
Ashley Moran wrote: Hi Am I missing something here? I'm running FreeBSD 6.1/amd64 and I can't see any sign of CARP. The man page is there but very little else: $ sudo ifconfig carp0 create ifconfig: SIOCIFCREATE: Invalid argument $ sysctl -a | grep carp net.inet.ip.same_prefix_carp_only:

Re: Need some help with PF rule letting two machines access each other

2006-06-09 Thread Erik Norgaard
Pat Maddox wrote: 12.34.56.78 runs a server on port 1234 87.65.43.21 should connect to this Both of them have PF rulesets that block off most traffic, keeping open the publically available ports I need open. In this case though, any traffic over this port should only be between these two

Re: Beginner Questions

2006-06-08 Thread Erik Norgaard
Mayo, Richard A RDECOM CERDEC STCD SRI wrote: I'm setting up a FreeBSD box for the first time, so naturally I have a bunch of questions. I'm sure these are addressed on the web somewhere, but I'm not having any luck finding anything so here goes: What file controls the way Xwindows sets up

Re: pxeboot looping

2006-04-27 Thread Erik Norgaard
John Pettitt wrote: It's fetching it - I just grabbed pxeboot from an iso image ant that one gets a lot further so I suspect something in my build environment is not right for the soekris box. I'm still investigating. There is a problem building pxeboot if you have /usr/obj present - it

OpenLDAP: ACL and binddn when dn contains non-ascii chars

2006-04-26 Thread Erik Norgaard
Hi: I'm trying to build my address book, now since my own name contains non-ascii characters, my cn becomes cn:: RXJpayBOw7hyZ2FhcmQ= I wish to restrict access so that each person can edit his own details, but not search the entire directory, something like this should do: # Access Control:

Re: IP Filter

2006-04-26 Thread Erik Norgaard
Bradford Fisher wrote: Currently, I have FreeBSD 6.0 p7 running with the GENERIC kernel. In rc.conf, I have set the options: ipfilter_enable=YES, ipfilter_rules=/etc/ipf.rules, ipmon_enable=YES, ipmon_flags=-Ds . Looks ok, but you should be able to check that the rules are actually loaded.

Solved: OpenLDAP: ACL and binddn when dn contains non-ascii chars

2006-04-26 Thread Erik Norgaard
Erik Norgaard wrote: But what do I put in place of cn=myname? But, what do I set as binddn? I am using the address book with Thunderbird and I don't know if it is smart enough to convert iso chars to utf-8. Seems to have same answer, only that in slapd.conf myname must be written in utf-8

LDAP schema problems

2006-04-24 Thread Erik Norgaard
Hi: I am writing here because OpenLDAP doesn't seem to have a list for user questions. I am building an address book, suffix dc=domain, dc=tld. I have two problems: a) To get attributes such as mail I use the inetOrgPerson object class. Further, since my contacts are personal contacts and not

Problem compiling jdk13

2006-04-17 Thread Erik Norgaard
Hi: I am trying to compile legacy jdk13 because it seems that developing for java card I need this. However, I get the following error: calvin# make === jdk-1.3.1p9_5 has known vulnerabilities: = jdk/jre -- Security Vulnerability With Java Plugin. Reference:

Solved: Problem compiling jdk13

2006-04-17 Thread Erik Norgaard
Erik Norgaard wrote: Hi: I am trying to compile legacy jdk13 because it seems that developing for java card I need this. However, I get the following error: calvin# make === jdk-1.3.1p9_5 has known vulnerabilities: = jdk/jre -- Security Vulnerability With Java Plugin. Reference

getting a user's home dir (sed/awk?)

2006-04-17 Thread Erik Norgaard
Hi: I am trying to create a script, the idea is to host a number of web services, each running as a different process owned by a different user bound to a non privileged port on localhost. The point is that each service can be restarted without affecting other services and that any security

Forcing build of vulnerable port

2006-04-12 Thread Erik Norgaard
Hi: I am working with java card and it seems that I need to use jdk12, to install that I need jdk11, which fails because of a reported vulnerability. How do I force building a vulnerable port? Thanks, Erik -- Ph: +34.666334818 web: www.locolomo.org S/MIME

Re: Timescale for 6.1-RELEASE...

2006-04-11 Thread Erik Norgaard
martinko wrote: i'm afraid todo page is not updated very often. at least this was the case when i was watching it during previous releases. so one was/is left to search through mailing lists for occasional background info.. :-( btw, there used to be a great site publishing summaries of

Toggling port dependencies

2006-04-11 Thread Erik Norgaard
Hi: Some ports exists in multiple versions such as OpenLDAP, the most recent and recommended is 2.3, but some other ports depends on another version for example jabberd that requires 2.2. Some ports will let you choose which version to compile against but jabberd don't. How to I make a port

Solved (I hope): Toggling port dependencies

2006-04-11 Thread Erik Norgaard
RW wrote: On Tuesday 11 April 2006 13:25, RW wrote: You could try setting USE_OPENLDAP_VER=23 for the port. Actually, I see it conflict with 2.2, so it must be set globally. Yes, OpenLDAP 2.3 conflicts with 2.2, but jabberd by default assumes 2.2 so the build fails. Then rather than

Re: Question bout migrating from 4.X tree to 5.x or even 6.x

2006-04-05 Thread Erik Norgaard
Robert Yoon wrote: I am planning on upgrading from the 4.x tree to the 6.x tree. I have been reading online and have found little or no reference information. I think a lot of stuff was written when 5.3 was announced, that was when 5.x branch was declared stable IIRC. I would like to

Re: How to examine FreeBSD source changes with CVS?

2006-04-04 Thread Erik Norgaard
Pete Slagle wrote: I seek education about FreeBSD source control spelunking. I noticed that GENERIC was updated recently in 6-STABLE, and I would like to see what changed. More generally, how does one examine diffs in the FreeBSD source as it changes? Could some kind soul demonstrate how

Re: Mail Merging

2006-04-03 Thread Erik Norgaard
Carlos Silva wrote: the archives are gziped as i said. the maibox is in IMAP format.. If by IMAP format you mean that mail is stored on an imap server then you can copy mails from the gzipped archive, which I assume to be mbox, to the server: Thunderbird AFIAK stores local folders in mbox

Re: ipnat syntax error?

2006-04-03 Thread Erik Norgaard
Juergen Heberling wrote: Due to historical reasons I can not just take a /29 or /30 block out of the middle of the cidr I will ultimately use -- this FreeBSD server will implement a firewall on an existing connection replacing an old Cisco router that only NAT'd. So I will see if things can

6.1-PRERELEASE: pf blocks fetch after restart

2006-03-30 Thread Erik Norgaard
Hi: I wrote about this some weeks ago, now I have investigated further, system upgrated to latest (yesterday) snap of RELENG_6 Summary: 1) boot 2a) fetch http://host/file: operation not permitted 2b) fetch ftp://host/file: operation not permitted 3) pfctl -Fr pfctl -Rf pf.conf 4a) fetch

Solved: 6.1-PRERELEASE: pf blocks fetch after restart

2006-03-30 Thread Erik Norgaard
Solved, I had a wrong entry in the nullnet table. Excluding the persist keyword from the table definition made things work when only the rules were flushed - then the table would be removed and not recreated when the rules were loaded again. This caused the extra confusion. Erik -- Ph:

ssh-tunnel only accounts

2006-03-30 Thread Erik Norgaard
Hi: How do I add a user such that he can only establish a tunnel to some other service running on the host? that is, what shell do I need? Is there a way to restrict further what services they can connect to? Thanks, Erik -- Atos Origin, Madrid Phone: +34 91 214 8617

Re: ipf and ipnat stopped working, no routing between nics.

2006-03-30 Thread Erik Norgaard
Daniel A. wrote: Hi, I run a FreeBSD 6.0 at home in my closet. Yesterday, while I was linking IRCd services with a friend of mine, my router completely stopped routing any packets between the internal nic (sis0) and the external nic (rl0). The only thing that I can think of, whoich could have

Re: How to clear userland?

2006-03-29 Thread Erik Norgaard
Graham North wrote: mtree eh? I had to man that one... and I will obviously have to read it again - properly. Any chance of asking for a bit of perspective on the command from you? If not, no big deal I will do a bit some background reading. you do something like this to rebuild the

Re: IP Filter problems on 4.11-STABLE

2006-03-29 Thread Erik Norgaard
B H wrote: Now IPFilter does not work or is VERY slow, ssh, web and mail timesout. NAT is working like it should. # dmesg | grep 'IP Filter' IP Filter: v3.4.35 initialized. Default = pass all, Logging = enabled ipf.rules looks like this: # Let clients behind the firewall send out to the

Re: IP Filter problems on 4.11-STABLE

2006-03-29 Thread Erik Norgaard
B H wrote: You have nat? Yes, and it's working. are you routing traffic? Yes. from where to where are you trying to connect, From the outside and in. From outside and in means from somewhere on the internet to the external interface on our fw? or to a natted server inside? The

Re: FBSD 6.0 ipfilter nat redirect not working.

2006-03-29 Thread Erik Norgaard
into the firewall. # This rule enforces the block all by default logic. #block in quick on rl0 all block in log quick on rl0 all -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Erik Norgaard Sent: Wednesday, March 29, 2006 2:54 AM To: [EMAIL PROTECTED] Cc: [EMAIL

Re: Blob and FreeBSD

2006-03-29 Thread Erik Norgaard
Adam Stroud wrote: I have been using both Open and Free BSD for a few years. Here is a Quick question about FreeBSD and the use of third party closed source binary drivers (known as blob to the OpenBSD community). I was just doing some reading on the OpenBSD website about their views on

Re: User unknown?

2006-03-28 Thread Erik Norgaard
Guillaume R. wrote: Re To be more accurate here is a trace that I can found in /var/mail/root. Seems to be a internal mail for my user (which never receive any mail...) The original message was received at Fri, 11 Nov 2005 19:34:32 +0100 (CET) from [EMAIL PROTECTED] - The following

Re: how to create da* device?

2006-03-28 Thread Erik Norgaard
Peter wrote: I am still trying to get my USB hard drive to work. It used to work but now when I plug it in all I get is: kernel: umass0: PI-036 USB2.0 Drive, rev 2.00/0.01, addr 2 kernel: umass0: Get Max Lun not supported (STALLED) I remember such messages before but after them there were

Re: How to clear userland?

2006-03-28 Thread Erik Norgaard
[EMAIL PROTECTED] wrote: On 3/28/06, Graham North [EMAIL PROTECTED] wrote: Is there a nice tidy way to clear my userland - CLEAN without jeopardizing or reloading the OS? pkg_delete -a should get rid of anything not in the base system. alternately, deleting /usr/local and /usr/X11R6 will

Re: FBSD 6.0 ipfilter nat redirect not working.

2006-03-28 Thread Erik Norgaard
fbsd_user wrote: # /root ipnat -l List of active MAP/Redirect filters: map rl0 10.0.10.0/29 - 0.0.0.0/32 proxy port ftp ftp/tcp map rl0 0.0.0.0/0 - 0.0.0.0/32 proxy port ftp ftp/tcp map rl0 10.0.10.0/29 - 0.0.0.0/32 rdr rl0 0.0.0.0/0 port 6188 - 10.0.10.4 port 80 tcp List of active sessions:

Re: arp problem?

2006-03-27 Thread Erik Norgaard
spen wrote: I get this message all the time and I 've searched around forums but did not find something about it.. arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 arp: 00:10:b5:df:b5:ff attempts to modify permanent entry for 10.101.10.47 on xl0 arp:

Re: How do you keep users from stealing other user's ip??

2006-03-24 Thread Erik Norgaard
Mark Jayson Alvarez wrote: Hi, Ok here's our problems. Mostly pertaining to tracking down who is this user eating up our bandwidth or who is this user flooding our network. 1. Users when they want to plug a machine to the network... let's say their own testbeds, they will choose whatever ip

Re: encrypted drives

2006-03-24 Thread Erik Norgaard
Igor Robul wrote: On Wed, Mar 22, 2006 at 10:14:32AM +0100, Erik Norgaard wrote: home partition which is fine for single user laptops, but on multiuser systems, each home directory should be distinct encrypted partitions in order not to disclose data to other users. Maybe I'm wrong, but what

Re: net-im is not in my supfile..

2006-03-23 Thread Erik Norgaard
Mark Jayson Alvarez wrote: Hi, I'm trying to install the latest jabberd but first I would like to cvsup the latest ports tree. I only want the ports-net-im to speed up the process, however, to my surprise, net-im is not in my /usr/share/example/cvsup/ports-supfile. Adding that line and

encrypted drives

2006-03-22 Thread Erik Norgaard
Hi: 1) I was thinking, what is the performance penalty of storing data on an encrypted device? Sure, for writing documents, coding and stuff, I guess the performance loss is insignificant, but for music and video which then needs to be decrypted and then decoded, is this a problem? 2) One

Re: 6.1-BETA 4 stable for normal use?

2006-03-22 Thread Erik Norgaard
Rakhesh Sasidharan wrote: I'd like to try out FreeBSD and was wondering whether I should start with 6.1-BETA4 or 6.0? Its just for home use anyways, more as a way to fool around with FreeBSD a bit, so was wondering if 6.1-BETA4 would suffice for the purpose ... is it stable enough or would it

Re: encrypted drives

2006-03-22 Thread Erik Norgaard
Kenyon Ralph wrote: On 3/22/06, Erik Norgaard [EMAIL PROTECTED] wrote: 2) One thing is to create an entire encrypted device for /home. But that have the unfortunate consequence that other user's data is unencrypted once the system is up. What would be more appropriate is a solution where each

Re: What does udp port 514 use?

2006-03-22 Thread Erik Norgaard
Miguel wrote: Halid Faith wrote: 2 - When I type netstat -na I see that udp port 514 is open as below udp4 0 0 *.514 *.* udp6 0 0 *.514 *.* Should I close this port ? then How can I close this port? that is the syslog port for

Re: ipfilter nat redirect

2006-03-22 Thread Erik Norgaard
fbsd_user wrote: I have a web server on my private lan that I want to be accessible from the public internet. dc0 is the interface facing the public internet I added this rdr rule after the map rules at the end of my nat file. ordering is extremely important, nat rules are first match while

Re: encrypted drives

2006-03-22 Thread Erik Norgaard
Erik Norgaard wrote: Is there any possibility for users to mount their own encrypted mfs? I played a bit with mdconfig and gbde: 1) it seems that ordinary users cannot create any devices. I guess this should be configurable in devfs.rules or devfs.conf? At least that would allow user

Re: ipfilter nat redirect

2006-03-22 Thread Erik Norgaard
John Murphy wrote: I think the filter action occurs before NAT so you would need this: pass in log quick on dc0 proto tcp from any to your live IP port = 80 For ip-filter, if nat is done when the packet comes IN on an interface, like with rdr, then this takes place BEFORE filtering. If nat

Re: sound on Compaq Presario (and kernel question)

2006-03-22 Thread Erik Norgaard
Anna Davour wrote: On Wed, 22 Mar 2006, Ariff Abdullah wrote: On Tue, 21 Mar 2006 18:46:25 +0100 (CET) Anna Davour [EMAIL PROTECTED] wrote: Trying to get the sound to work on my Compaq Presario M2000. Now uname -a gives: FreeBSD possession 6.1-PRERELEASE FreeBSD 6.1-PRERELEASE #0: Thu Mar

configuring fetch to passive mode

2006-03-17 Thread Erik Norgaard
Hi: This ought to be a configuration tunable, but I can't find any documentaion on it: How to I force fetch to use passive mode? When I try make fetch of some port I get: = Attempting to fetch from \ ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/. fetch: \

Re: configuring fetch to passive mode

2006-03-17 Thread Erik Norgaard
Nikos Vassiliadis wrote: On Friday 17 March 2006 12:41, Erik Norgaard wrote: Hi: This ought to be a configuration tunable, but I can't find any documentaion on it: How to I force fetch to use passive mode? When I try make fetch of some port I get: = Attempting to fetch from \ ftp

Re: configuring fetch to passive mode

2006-03-17 Thread Erik Norgaard
RW wrote: On Friday 17 March 2006 10:41, Erik Norgaard wrote: Hi: This ought to be a configuration tunable, but I can't find any documentaion on it: How to I force fetch to use passive mode? When I try make fetch of some port I get: = Attempting to fetch from \ ftp

Charactersets and encoding: switching from ISO-8859-1 to UTF-8

2006-03-16 Thread Erik Norgaard
Hi: I have just installed a virgin system, FBSD 6.1-BETA3 and upgraded to the head of RELENG_6. Since it is virgin, I thought this may be the time to make the switch to UTF-8. Googling, it appears that UTF-8 was introduced in the base in 2004, but I find no keymaps for UTF-8 console, no

Re: Regarding the (apparent) removal of syslogd_program functionality in recent versions

2006-03-14 Thread Erik Norgaard
Bill Moran wrote: The rc.conf manpage states that syslogd_program= can be used to change the program run for system logging. This is also mentioned in /etc/defaults/rc.conf and in the pkg-message for the syslog-ng port. it seems there is some inconsistencies regarding what should be the

Re: where is mergemaster?

2006-03-13 Thread Erik Norgaard
Peter wrote: Where can I find mergemaster? I would like to upgrade my box. It should be in your path, but I have also had problems with my path not being set correctly in single user mode. If you choose csh as shell in single user then run csh .cshrc IIRC this should set your environment

Re: Let's make a FreeBSD ports blog! CCCCOOOL =)

2006-03-10 Thread Erik Norgaard
Vaaf wrote: We need someone to do the coding, XHTML/CSS, though some Ruby and Ajax too wouldn't hurt, so we can have a decent system in the back, and in the front be able to present information in a very intuitive way. Then, we'd need lots of members to write articles, rate ports and such. I'd

Re: Open Source and 3rd world countries

2006-03-10 Thread Erik Norgaard
Kristian Vaaf wrote: I'm writing this thesis on the benefits of integrating open source software into third world countries to boost their economies and the knowledge of their people. I will also write about a detailed scenario, where, ofcourse, FreeBSD plays the lead role. However I can't

Re: Help with IP Filter 4.1.8

2006-03-10 Thread Erik Norgaard
Roman Serbski wrote: 1) Other udp services, are responces also blocked? you can for example try ntp. If so, then it is likely a bug in ip-filter. Yes. Same for other udp (I tested with ntp). The symptoms are the same - there is a hit on a rule allowing outgoing ntp, but then reply is blocked.

Installing FreeBSD with hw SATA RAID-1

2006-03-08 Thread Erik Norgaard
Hi: I am new on RAID, I googled a bit on how to install freebsd with RAID-1. But I found mostly references to software raid, and I have a CERC SATA RAID controler (6 channel). Is this because hardware RAID-1 Just Works (TM)? or how do I make sure that my raid is actually used and not just

Re: Translate Linux iptables to Freebsd pf ?

2006-03-08 Thread Erik Norgaard
Frank Bonnet wrote: Does anyone knows a tool that could translate iptables rules to FreeBSD pf rules ? maybe fwbuilder would work, but I would prefer not to use it. Or if it does not exists, some examples are welcome. Have you tried the pf user's guide? Has samples also:

Re: Installing FreeBSD with hw SATA RAID-1

2006-03-08 Thread Erik Norgaard
Alex Zbyslaw wrote: If the controller is supported, then it should just work, but unless there is a CLI which works for FreeBSD then you won't be able to do things like rebuild the RAID from within FreeBSD, only from its BIOS. It looks like the controller is supported by the aac driver so

Solved: Installing FreeBSD with hw SATA RAID-1

2006-03-08 Thread Erik Norgaard
Alex Zbyslaw wrote: So whatever utilities Dell(?) provide should work. You should be able to find those on the manufacturer's website and maybe even in the ports. cd /usr/ports make search name=aac finds this: Port: aaccli-1.0 Path: /usr/ports/sysutils/aaccli Info: Adaptec SCSI RAID

Re: Help with IP Filter 4.1.8

2006-03-06 Thread Erik Norgaard
Roman Serbski wrote: My ruleset consists of only 6 rules: pass out quick on lo0 from any to any pass out quick on xl0 proto tcp from any to any port = domain flags S/FSRPAU keep state pass out quick on xl0 proto udp from any to any port = domain keep state block out log quick on xl0 all pass

<    1   2   3   4   5   6   7   8   >