ipfw, NAT and CISCO IPSec VPNs

2009-08-10 Thread Jonathan Belson
Hiya I've got a pretty standard network which uses a FreeBSD server to perform NAT between my internal IPs (192.168.0.x) and the outside world. Everything is working tickety-boo, but I'm trying to tweak my firewall rules (ipfw, based on the 'SsIiMmPpLlEe' firewall template in rc.firewall) to

Re: Performance problem with samba/zfs

2009-02-20 Thread Jonathan Belson
Jonathan Belson wrote: I just moved my work to an exported UFS partition and I've seen the same problem appear a couple of times. It's possibly a little less frequent though. So with zfs off the hook, it's possible that the problem lies with samba (or maybe the editor itself, although I

Re: Performance problem with samba/zfs

2009-02-18 Thread Jonathan Belson
Mel wrote: On Monday 16 February 2009 07:56:02 Jonathan Belson wrote: I export a few samba shares from a FreeBSD amd64 server and I've been editing text files on one of the shares via a Windows box. This /usually/ works fine, but occasionally I'll get a pause of several seconds when I save

Performance problem with samba/zfs

2009-02-16 Thread Jonathan Belson
Hiya I export a few samba shares from a FreeBSD amd64 server and I've been editing text files on one of the shares via a Windows box. This /usually/ works fine, but occasionally I'll get a pause of several seconds when I save back a modified file. No errors are generated on the server, but

Re: Changing 'From:' address of periodic scripts

2008-09-01 Thread Jonathan Belson
Jonathan Belson wrote: Matthew Seaman wrote: Yes. root is specifically exempted from all the masquerading stuff. There's an EXPOSED_USER macro you can use in $(hostname).mc to control that. Ah, that explains it. There doesn't seem to be a way to remove exposed users, but there is a web

Re: Changing 'From:' address of periodic scripts

2008-08-28 Thread Jonathan Belson
Greg Larkin wrote: Jonathan Belson wrote: | Hiya | | I set up a remote box to e-mail 'periodic' output to me directly. It | has now | stopped working, and I suspect it's because the 'From:' addresses of the | status | e-mails is of the form '[EMAIL PROTECTED]' and the ISP has upped its | anti

Re: Changing 'From:' address of periodic scripts

2008-08-28 Thread Jonathan Belson
Matthew Seaman wrote: Jonathan Belson wrote: | | OK, thanks. After playing with MASQUERADE_AS(), MASQUERADE_DOMAIN() | plus a few FEATURES(), I've managed to change the 'From:' address for | e-mails sent via the command line. Unfortunately, e-mails sent via the | cron-ed periodic scripts

Changing 'From:' address of periodic scripts

2008-08-11 Thread Jonathan Belson
Hiya I set up a remote box to e-mail 'periodic' output to me directly. It has now stopped working, and I suspect it's because the 'From:' addresses of the status e-mails is of the form '[EMAIL PROTECTED]' and the ISP has upped its anti-spam checks. I see /usr/sbin/periodic itself uses the

Problems with Dell/Seagate tape drive

2005-06-08 Thread Jonathan Belson
Hiya I've installed FreeBSD-Stable on a Dell PowerEdge 600SC, and I'm having real problems getting the tape drive to work reliably. It's a Dell rebadged ATA Seagate/Certance STT2401A As I mentioned in a previous e-mail, I get the message 'ast0: FAILURE - REZERO timed out' when tar-ing

Rewinding tapes

2005-05-19 Thread Jonathan Belson
Hiya I've written a small script that backs up data to a tape, rewinds it, then reads back the data that was stored as a test. The problem I've run into is that 'mt rewind' is asynchronous, and subsequent tape operations will fail until the rewind operation has finished. Is there a way to

Re: Rewinding tapes

2005-05-19 Thread Jonathan Belson
Dan Nelson wrote: mt rewind is synchronous on all the tape drive I have used it on (dat, dlt, 9-track, 3490). Apologies, it's 'tar' that seems to return when the drive is still busy - attempting to access the tape device before it's finished making groaning noises gives an input/output error. #

Re: Corrupted e-mails

2004-08-20 Thread Jonathan Belson
Hiya Here is my .qmail, which runs SpamAssassin on the incoming e-mail for this account: |/usr/local/bin/spamassassin | /usr/local/bin/maildir /home/jon/Maildir/ #./Maildir/ well, Jon, if you look above the # in a dot qmail file means to drop the email and not deliver. I don't quite

Corrupted e-mails

2004-08-18 Thread Jonathan Belson
Hiya For the last few months, I've had a problem where a small number (less than ~1 in 1000) of e-mails get corrupted. All I have in my Maildir is something like the following two lines: Return-Path: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] In case case it's a spam so it's no great

[Q] ipfw and 'me'

2003-01-06 Thread Jonathan Belson
Hiya My ISP uses DHCP to allocate IP numbers, so currently every time the IP changes, I have to manually change my firewall rules. I've just been looking into the 'me' option for ipfw: me matches any IP address configured on an interface in the system. The address list is

Re: [Q] ipfw and 'me'

2003-01-06 Thread Jonathan Belson
Ceri Davies wrote: On Mon, Jan 06, 2003 at 05:02:01PM +, Jonathan Belson wrote: I've just been looking into the 'me' option for ipfw: me matches any IP address configured on an interface in the system. The address list is evaluated at the time the packet is analysed

Re: [Q] ipfw and 'me'

2003-01-06 Thread Jonathan Belson
Dan Nelson wrote: me is me. Maybe the recv | xmit | via {ifX | if* | ipno | any} options will help? What exactly are you trying to allow/block? My firewall rules are based on the 'simple' pattern in rc.firewall. I've got stuff like this to explicitly allow certain connections: # ssh

Re: [Q] ipfw and 'me'

2003-01-06 Thread Jonathan Belson
Jack L. Stone wrote: The best way to do this is to use awk to determine and set a variable for the external IP every time it changes and then refer to that variable in your rules. ifconfig | grep ^xl0 -1 | tail -n 1 | awk '{ print $2 }' Any neater way? :-) --Jon http://www.witchspace.com

Re: [Q] ipfw and 'me'

2003-01-06 Thread Jonathan Belson
Fernando Gleiser wrote: ifconfig xl0 | awk '/^\tinet / {print $2}' Nice! My awk isn't what it should be... --Jon http://www.witchspace.com To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message

[Q] Sockets verses message queues?

2002-10-25 Thread Jonathan Belson
Hiya I'm writing an application which will fork into two processes (master/slave), and I require that the two be able to communicate asynchronously. The master will send commands to the slave then get on with other things, and the slave will send a message back when it's finished. Is there any