ipf+ipnat - Routing has completely stopped

[Daniel A.]

Hi,
I run a FreeBSD 6.0 at home in my closet.
Yesterday, while I was linking IRCd services with a friend of mine, my router
completely stopped routing any packets between the internal nic (sis0) and
the external nic (rl0).
The only thing that I can think of, whoich could have caused this, is that I
ran ettercap on the server to diagnose why our servers wouldnt link. I did NOT
run any ARP poisoning or DNS spoofing attacks on myself.
But I didnt notice if the routing stopped at that point, or later, because I
could always connect to my server, and the server could always connect to the
internet. The situation is still the same.

I have tried to do
- "ipf -Fa -f /etc/ipf.rules; ipnat -FC -f /etc/ipnat.rules" - Didnt help
- "cd /etc/rc.d; ./ipfilter restart; ./ipnat restart" - Didnt help
- Launch ettercap again and exit "cleanly" after telling it to stop sniffing.
A tcpdump reveals that, indeed, no packets at all make it from sis0 to rl0.
So my conclusion is that ipnat "forgot" how to route between the two
interfaces.

Could anyone please give some pointers?

Included stuff:
_ipf.rules
[EMAIL PROTECTED] etc $ cat ipf.rules
# Let clients behind the firewall send out to the internet, and replies to
# come back in by keeping state.
pass out quick on rl0 proto tcp all flags S keep state
pass out quick on rl0 proto udp all keep state
pass out quick on rl0 proto icmp all keep state

# Allow everything on local net
pass in quick on sis0 all
pass out quick on sis0 all

# loopback stuff
pass in quick on lo0 all
pass out quick on lo0 all

# Since nothing should be coming from these address ranges, block them
block in quick on rl0 from 192.168.0.0/16 to any
block in quick on rl0 from 172.16.0.0/12 to any
block in quick on rl0 from 127.0.0.0/8 to any
block in quick on rl0 from 10.0.0.0/8 to any
block in quick on rl0 from 169.254.0.0/16 to any
block in quick on rl0 from 192.0.2.0/24 to any
block in quick on rl0 from 204.152.64.0/23 to any
block in quick on rl0 from 224.0.0.0/3 to any

# Let's let people access the services running behind this system

# Let's let people access the services running on this system
#pass in quick on rl0 proto tcp from any to any port 3 >< 5
flags S keepstate #Passive FTP
#pass in quick on rl0 proto tcp from any to any port = 20 flags S keep
state #Ac   tive FTP
#pass in quick on rl0 proto tcp from any to any port = 21 flags S keep
state #FT   P
pass in quick on rl0 proto tcp from any to any port = 22 flags S keep state #SSH
pass in quick on rl0 proto tcp from any to any port = 80 flags S keep state #WWW
pass in quick on rl0 proto tcp from any to any port = 113 flags S keep
state #oi   dentd
pass in quick on rl0 proto udp from any to any port = 123 keep state #ntpd
pass in quick on rl0 proto tcp from any to any port = 6697 flags S
keep state #ircd, SSL
pass in quick on rl0 proto tcp from any to any port = 6667 flags S
keep state #ircd, non-SSL
#pass in quick on rl0 proto tcp from any to any port = 7029 flags S
keep state #   irc link

pass in quick on rl0 proto tcp from any to 192.168.0.2/32 port = 9541 keep state
pass in quick on rl0 proto udp from any to 192.168.0.2/32 port = 9542 keep state

# Steam Dedicated Server
#pass in quick on rl0 proto udp from any to any port = 1200 # Friends network
#pass in quick on rl0 proto udp from any to any port 26999 >< 27016 # Gameport
#pass in quick on rl0 proto udp from any to any port = 27020
#pass in quick on rl0 proto tcp from any to any port 27029 >< 27040
#pass in quick on rl0 proto tcp from any to any port = 27015 # SRCDS Rcon

# Block everything else
block in quick on rl0
_ipf.rules END

_ipnat.rules
#rdr rl0 0/0 port 9541 -> 192.168.0.2 port 9541 tcp
#rdr rl0 0/0 port 9542 -> 192.168.0.2 port 9542 udp
map rl0 192.168.0.0/29 -> 0/32 proxy port 21 ftp/tcp
#map rl0 0.0.0.0/0 -> 0/32 proxy port 21 ftp/tcp
map rl0 192.168.0.0/29 -> 0/32 portmap tcp/udp 1025:65000
map rl0 192.168.0.0/29 -> 0/32
_ipnat.rules END

_ifconfig -a
[EMAIL PROTECTED] etc $ ifconfig -a
fwe0: flags=108802 mtu 1500
options=8
ether 02:00:0a:04:69:d1
ch 1 dma -1
sis0: flags=8843 mtu 1500
options=8
inet6 fe80::20a:e6ff:fe53:fc1e%sis0 prefixlen 64 scopeid 0x2
inet 192.168.0.1 netmask 0xff00 broadcast 192.168.0.255
ether 00:0a:e6:53:fc:1e
media: Ethernet autoselect (100baseTX )
status: active
rl0: flags=8843 mtu 1500
options=8
inet6 fe80::2b0:2ff:fe00:27f3%rl0 prefixlen 64 scopeid 0x3
inet 87.49.144.133 netmask 0xff80 broadcast 87.49.144.255
ether 00:b0:02:00:27:f3
media: Ethernet autoselect (100baseTX )
status: active
plip0: flags=108810 mtu 1500
lo0: flags=8049 mtu 16384
inet

Re: SiI3112 Controller Question

[Alex Zbyslaw]

Richard P. Koett wrote:


Thanks Alex. I did check Google before posting but nothing I read was
very recent. I was curious if things had improved since newer firmware
and newer versions of FreeBSD had come along.

I'll go with the HPT controller.
 

Everything I read on the mailing lists said that the controller itself 
was complete garbage and that no changes in FreeBSD could help that.  
I'm sure that two of the first three posts I found with google said that 
to :-(  I don't know your Highpoint controller at all but I can't 
imagine it could be anything but better, assuming it's recognised.


Good luck,

--Alex

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Fwd: ipf+ipnat - Routing has completely stopped

[Daniel A.]

Hi,
I run a FreeBSD 6.0 at home in my closet.
Yesterday, while I was linking IRCd services with a friend of mine, my router
completely stopped routing any packets between the internal nic (sis0) and
the external nic (rl0).
The only thing that I can think of, whoich could have caused this, is that I
ran ettercap on the server to diagnose why our servers wouldnt link. I did NOT
run any ARP poisoning or DNS spoofing attacks on myself.
But I didnt notice if the routing stopped at that point, or later, because I
could always connect to my server, and the server could always connect to the
internet. The situation is still the same.

I have tried to do
- "ipf -Fa -f /etc/ipf.rules; ipnat -FC -f /etc/ipnat.rules" - Didnt help
- "cd /etc/rc.d; ./ipfilter restart; ./ipnat restart" - Didnt help
- Launch ettercap again and exit "cleanly" after telling it to stop sniffing.
A tcpdump reveals that, indeed, no packets at all make it from sis0 to rl0.
So my conclusion is that ipnat "forgot" how to route between the two
interfaces.

Could anyone please give some pointers?

Included stuff:
_ipf.rules
[EMAIL PROTECTED] etc $ cat ipf.rules
# Let clients behind the firewall send out to the internet, and replies to
# come back in by keeping state.
pass out quick on rl0 proto tcp all flags S keep state
pass out quick on rl0 proto udp all keep state
pass out quick on rl0 proto icmp all keep state

# Allow everything on local net
pass in quick on sis0 all
pass out quick on sis0 all

# loopback stuff
pass in quick on lo0 all
pass out quick on lo0 all

# Since nothing should be coming from these address ranges, block them
block in quick on rl0 from 192.168.0.0/16 to any
block in quick on rl0 from 172.16.0.0/12 to any
block in quick on rl0 from 127.0.0.0/8 to any
block in quick on rl0 from 10.0.0.0/8 to any
block in quick on rl0 from 169.254.0.0/16 to any
block in quick on rl0 from 192.0.2.0/24 to any
block in quick on rl0 from 204.152.64.0/23 to any
block in quick on rl0 from 224.0.0.0/3 to any

# Let's let people access the services running behind this system

# Let's let people access the services running on this system
#pass in quick on rl0 proto tcp from any to any port 3 >< 5
flags S keep state #Passive FTP
#pass in quick on rl0 proto tcp from any to any port = 20 flags S keep
state #Active FTP
#pass in quick on rl0 proto tcp from any to any port = 21 flags S keep
state #FTP
pass in quick on rl0 proto tcp from any to any port = 22 flags S keep state #SSH
pass in quick on rl0 proto tcp from any to any port = 80 flags S keep state #WWW
pass in quick on rl0 proto tcp from any to any port = 113 flags S keep
state #oidentd
pass in quick on rl0 proto udp from any to any port = 123 keep state #ntpd
pass in quick on rl0 proto tcp from any to any port = 6697 flags S
keep state #ircd, SSL
pass in quick on rl0 proto tcp from any to any port = 6667 flags S
keep state #ircd, non-SSL
#pass in quick on rl0 proto tcp from any to any port = 7029 flags S
keep state #irc link

pass in quick on rl0 proto tcp from any to 192.168.0.2/32 port = 9541 keep state
pass in quick on rl0 proto udp from any to 192.168.0.2/32 port = 9542 keep state

# Steam Dedicated Server
#pass in quick on rl0 proto udp from any to any port = 1200 # Friends network
#pass in quick on rl0 proto udp from any to any port 26999 >< 27016 # Gameport
#pass in quick on rl0 proto udp from any to any port = 27020
#pass in quick on rl0 proto tcp from any to any port 27029 >< 27040
#pass in quick on rl0 proto tcp from any to any port = 27015 # SRCDS Rcon

# Block everything else
block in quick on rl0
_ipf.rules END

_ipnat.rules
#rdr rl0 0/0 port 9541 -> 192.168.0.2 port 9541 tcp
#rdr rl0 0/0 port 9542 -> 192.168.0.2 port 9542 udp
map rl0 192.168.0.0/29 -> 0/32 proxy port 21 ftp/tcp
#map rl0 0.0.0.0/0 -> 0/32 proxy port 21 ftp/tcp
map rl0 192.168.0.0/29 -> 0/32 portmap tcp/udp 1025:65000
map rl0 192.168.0.0/29 -> 0/32
_ipnat.rules END

_ifconfig -a
[EMAIL PROTECTED] etc $ ifconfig -a
fwe0: flags=108802 mtu 1500
options=8
ether 02:00:0a:04:69:d1
ch 1 dma -1
sis0: flags=8843 mtu 1500
options=8
inet6 fe80::20a:e6ff:fe53:fc1e%sis0 prefixlen 64 scopeid 0x2
inet 192.168.0.1 netmask 0xff00 broadcast 192.168.0.255
ether 00:0a:e6:53:fc:1e
media: Ethernet autoselect (100baseTX )
status: active
rl0: flags=8843 mtu 1500
options=8
inet6 fe80::2b0:2ff:fe00:27f3%rl0 prefixlen 64 scopeid 0x3
inet 87.49.144.133 netmask 0xff80 broadcast 87.49.144.255
ether 00:b0:02:00:27:f3
media: Ethernet autoselect (100baseTX )
status: active
plip0: flags=108810 mtu 1500
lo0: flags=8049 mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
inet 127.0.0.1 netmask 0xff00
__

Oops: Deleted /var/named

[daniel]

Yes, it was dumb, but while I have a backup of all of my domain info and have 
restored it all, starting named gives me this error now:

  devfs rule: ioctl DEVFSIO_RAPPLY: Inappropriate ioctl for device
  devfs rule: ioctl DEVFSIO_RAPPLY: Inappropriate ioctl for device
  devfs rule: ioctl DEVFSIO_RAPPLY: Inappropriate ioctl for device

I can only assume that it has something to do with the files 
in /var/named/dev/ that I have untarred there.  I tried doing a "make 
deinstall; make install" in /usr/ports/dns/bind9 but that didn't create 
anything.  What is the propper way to re-set this up?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Oops: Deleted /var/named

[daniel]

Yes, it was dumb, but while I have a backup of all of my domain info and have 
restored it all, starting named gives me this error now:

  devfs rule: ioctl DEVFSIO_RAPPLY: Inappropriate ioctl for device
  devfs rule: ioctl DEVFSIO_RAPPLY: Inappropriate ioctl for device
  devfs rule: ioctl DEVFSIO_RAPPLY: Inappropriate ioctl for device

I can only assume that it has something to do with the files 
in /var/named/dev/ that I have untarred there.  I tried doing a "make 
deinstall; make install" in /usr/ports/dns/bind9 but that didn't create 
anything.  What is the propper way to re-set this up?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

intel server board: strange LAN problem [SOLVED]

[[EMAIL PROTECTED]@mgEDV.net]

the original problem was:
NIC1 was "missing" at all and PXE boot from this nic also did not work.

the solution for those who are interested in:

Intel SE7320VP2/SE7320VP2D2 has 2 onboard NIC's:
NIC1 (Marvell Yukon-Chipset)
NIC2 (Intel-Chipset)

FreeBSD 6 by default recognizes the intel-nic, which is shown as em0.
the 2nd nic needs an additional module from marvel yukon (if_myk.ko),
which then will enable and show the nic to freebsd.

the following steps have been successfully tested:

- download the nic driver for freebsd from (www.marvell.com/drivers/)
- install the if_myk.ko to /boot/kernel
- load the module via /boot/loader.conf or kldload.
- configure the interface with ("ifconfig myk0")
- get a new, fine 1GBit Ethernet Connection working ,-)

cu & have fun
---> if you have this board, you definitely will ;-|

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ipf and ipnat stopped working, no routing between nics.

[Daniel A.]

Hi,
I rebooted my machine last night, and everything started working again.
But no, I didnt check that. And after I was looking at some sysctls
late last night, I did speculate about whether those you mention were
right or not.

Problem resolved, and thanks for the help :)


ps. Sorry I accidentally spammed the list. It didnt seem as if my
emails went through at the time.
On 3/31/06, Erik Norgaard <[EMAIL PROTECTED]> wrote:
> Daniel A. wrote:
> > Hi,
> > I run a FreeBSD 6.0 at home in my closet.
> > Yesterday, while I was linking IRCd services with a friend of mine, my 
> > router
> > completely stopped routing any packets between the internal nic (sis0) and
> > the external nic (rl0).
> > The only thing that I can think of, whoich could have caused this, is that I
> > ran ettercap on the server to diagnose why our servers wouldnt link. I did 
> > NOT
> > run any ARP poisoning or DNS spoofing attacks on myself.
> > But I didnt notice if the routing stopped at that point, or later, because I
> > could always connect to my server, and the server could always connect to 
> > the
> > internet. The situation is still the same.
> >
> > I have tried to do
> > - "ipf -Fa -f /etc/ipf.rules; ipnat -FC -f /etc/ipnat.rules" - Didnt help
> > - "cd /etc/rc.d; ./ipfilter restart; ./ipnat restart" - Didnt help
> > - Launch ettercap again and exit "cleanly" after telling it to stop 
> > sniffing.
> > A tcpdump reveals that, indeed, no packets at all make it from sis0 to rl0.
> > So my conclusion is that ipnat "forgot" how to route between the two
> > interfaces.
> >
> > Could anyone please give some pointers?
>
> did you check
>
> # sysctl -a |grep forward
>
> you should have
>
> net.inet.ip.forwarding: 1
> net.inet.ip.fastforwarding: 0
> net.inet6.ip6.forwarding: 0
>
> Erik
> --
> Ph: +34.666334818  web: www.locolomo.org
> S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
> Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
> Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

ipf and ipnat stopped working, no routing between nics.

[Daniel A.]

(My apologies if you're recieving this email for the third time. It
doesnt seem as the previous ones reached the list)
Hi,
I run a FreeBSD 6.0 at home in my closet.
Yesterday, while I was linking IRCd services with a friend of mine, my router
completely stopped routing any packets between the internal nic (sis0) and
the external nic (rl0).
The only thing that I can think of, whoich could have caused this, is that I
ran ettercap on the server to diagnose why our servers wouldnt link. I did NOT
run any ARP poisoning or DNS spoofing attacks on myself.
But I didnt notice if the routing stopped at that point, or later, because I
could always connect to my server, and the server could always connect to the
internet. The situation is still the same.

I have tried to do
- "ipf -Fa -f /etc/ipf.rules; ipnat -FC -f /etc/ipnat.rules" - Didnt help
- "cd /etc/rc.d; ./ipfilter restart; ./ipnat restart" - Didnt help
- Launch ettercap again and exit "cleanly" after telling it to stop sniffing.
A tcpdump reveals that, indeed, no packets at all make it from sis0 to rl0.
So my conclusion is that ipnat "forgot" how to route between the two
interfaces.

Could anyone please give some pointers?

Included stuff:
_ipf.rules
[EMAIL PROTECTED] etc $ cat ipf.rules
# Let clients behind the firewall send out to the internet, and replies to
# come back in by keeping state.
pass out quick on rl0 proto tcp all flags S keep state
pass out quick on rl0 proto udp all keep state
pass out quick on rl0 proto icmp all keep state

# Allow everything on local net
pass in quick on sis0 all
pass out quick on sis0 all

# loopback stuff
pass in quick on lo0 all
pass out quick on lo0 all

# Since nothing should be coming from these address ranges, block them
block in quick on rl0 from 192.168.0.0/16 to any
block in quick on rl0 from 172.16.0.0/12 to any
block in quick on rl0 from 127.0.0.0/8 to any
block in quick on rl0 from 10.0.0.0/8 to any
block in quick on rl0 from 169.254.0.0/16 to any
block in quick on rl0 from 192.0.2.0/24 to any
block in quick on rl0 from 204.152.64.0/23 to any
block in quick on rl0 from 224.0.0.0/3 to any

# Let's let people access the services running behind this system

# Let's let people access the services running on this system
#pass in quick on rl0 proto tcp from any to any port 3 >< 5
flags S keep state #Passive FTP
#pass in quick on rl0 proto tcp from any to any port = 20 flags S keep
state #Active FTP
#pass in quick on rl0 proto tcp from any to any port = 21 flags S keep
state #FTP
pass in quick on rl0 proto tcp from any to any port = 22 flags S keep state #SSH
pass in quick on rl0 proto tcp from any to any port = 80 flags S keep state #WWW
pass in quick on rl0 proto tcp from any to any port = 113 flags S keep
state #oidentd
pass in quick on rl0 proto udp from any to any port = 123 keep state #ntpd
pass in quick on rl0 proto tcp from any to any port = 6697 flags S
keep state #ircd, SSL
pass in quick on rl0 proto tcp from any to any port = 6667 flags S
keep state #ircd, non-SSL
#pass in quick on rl0 proto tcp from any to any port = 7029 flags S
keep state #irc link

pass in quick on rl0 proto tcp from any to 192.168.0.2/32 port = 9541 keep state
pass in quick on rl0 proto udp from any to 192.168.0.2/32 port = 9542 keep state

# Steam Dedicated Server
#pass in quick on rl0 proto udp from any to any port = 1200 # Friends network
#pass in quick on rl0 proto udp from any to any port 26999 >< 27016 # Gameport
#pass in quick on rl0 proto udp from any to any port = 27020
#pass in quick on rl0 proto tcp from any to any port 27029 >< 27040
#pass in quick on rl0 proto tcp from any to any port = 27015 # SRCDS Rcon

# Block everything else
block in quick on rl0
_ipf.rules END

_ipnat.rules
#rdr rl0 0/0 port 9541 -> 192.168.0.2 port 9541 tcp
#rdr rl0 0/0 port 9542 -> 192.168.0.2 port 9542 udp
map rl0 192.168.0.0/29 -> 0/32 proxy port 21 ftp/tcp
#map rl0 0.0.0.0/0 -> 0/32 proxy port 21 ftp/tcp
map rl0 192.168.0.0/29 -> 0/32 portmap tcp/udp 1025:65000
map rl0 192.168.0.0/29 -> 0/32
_ipnat.rules END

_ifconfig -a
[EMAIL PROTECTED] etc $ ifconfig -a
fwe0: flags=108802 mtu 1500
options=8
ether 02:00:0a:04:69:d1
ch 1 dma -1
sis0: flags=8843 mtu 1500
options=8
inet6 fe80::20a:e6ff:fe53:fc1e%sis0 prefixlen 64 scopeid 0x2
inet 192.168.0.1 netmask 0xff00 broadcast 192.168.0.255
ether 00:0a:e6:53:fc:1e
media: Ethernet autoselect (100baseTX )
status: active
rl0: flags=8843 mtu 1500
options=8
inet6 fe80::2b0:2ff:fe00:27f3%rl0 prefixlen 64 scopeid 0x3
inet 87.49.144.133 netmask 0xff80 broadcast 87.49.144.255
ether 00:b0:02:00:27:f3
media: Ethernet autoselect (100baseTX )
status: active
plip0: flags=108810 mtu 1500
lo0: flags=8049 mtu 16384
inet6 ::1 prefixlen 

rcng, addition to rc.subr

[Frans Haarman]

I am changing /etc/rc.subr. I can now use rc.env.d directories. Each file in the
directory becomes a variable. somewhat like daemontools envdir. It
seemed nice to
include it to rcng.

So with this we can do:

echo 'yes' > rc.env.d/sshd/sshd_enable

Am concidering adding the "$_command'
name to the variables if there is no _ in the file name.

Then we could do:

echo yes > rc.env.d/sshd/enable


Here is the script:

#custom rc.env.d
#used to overide/configure last variables using rc.env.d

if [ -d /data/etc/rc.env.d/"$_command" ]; then

debug "rc.env.d /data/etc/rc.env.d/${_command}"
envd_vars=`ls /data/etc/rc.env.d/"${_command}"` #each file is a var
for envd_file in $envd_vars
do
if [ -f /data/etc/rc.env.d/"$_command"/$envd_file ]; then
  export $envd_file=`head -1 
/data/etc/rc.env.d/${_command}"/$envd_file`
fi
done

#echo "rc.env.d /data/etc/rc.env.d/${_command}"
fi


Does this look ok to you ?

Regards,
Frans
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

p5-GSSAPI-0.20 missing dependency?

[Rob Heemskerk]

Hello,

I ran into a problem with my weekly portupgrade. p5-Authen-SASL seems to
depend on the new port p5-GSSAPI-0.20 which fails to build:

Searching krb5-config command... not found! at ./Makefile.PL line 94.

from where am i supposed to get krb5-config?

Thanks,
Rob



FreeBSD 4.11-RELEASE-p12

bash-2.05b# pwd
/usr/ports/security/p5-GSSAPI
bash-2.05b# make clean
===>  Cleaning for perl-5.8.8
===>  Cleaning for p5-GSSAPI-0.20
bash-2.05b# make
===>  Vulnerability check disabled, database not found
===>  Extracting for p5-GSSAPI-0.20
=> MD5 Checksum OK for GSSAPI-0.20.tar.gz.
===>   p5-GSSAPI-0.20 depends on file: /usr/local/bin/perl5.8.8 - found
===>  Patching for p5-GSSAPI-0.20
===>   p5-GSSAPI-0.20 depends on file: /usr/local/bin/perl5.8.8 - found
===>   p5-GSSAPI-0.20 depends on file: /usr/local/bin/perl5.8.8 - found
===>  Configuring for p5-GSSAPI-0.20

 Welcome to GSSAPI.pm setup!

 run "perl Makefile.PL --help" to see further installation options


--
 Searching krb5-config command... not found! at ./Makefile.PL line 94.
*** Error code 1

Stop in /usr/ports/security/p5-GSSAPI.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Terminal in the background

[Harrison Peter CSA BIRKENHEAD]

I certainly get this logged in /var/log/messages. Perhaps check your settings?
 
 
Peter Harrison



-Original Message-
From: Logan McNaughton [mailto:[EMAIL PROTECTED]
Sent: 30 March 2006 15:41
To: Harrison Peter CSA BIRKENHEAD
Subject: Re: Terminal in the background


thanks, what log file shows shutdown notices? because I type shutdown -p +10, 
and nothing shows up in that file


On 3/30/06, Harrison Peter CSA BIRKENHEAD < [EMAIL PROTECTED]> wrote: 

>From: "Logan McNaughton" < [EMAIL PROTECTED]>
>Subject: Terminal in the background
>To: freebsd-questions@freebsd.org   
>Message-ID:
>   < [EMAIL PROTECTED]>
>Content-Type: text/plain; charset=ISO-8859-1 
>
> I dunno if this goes more in an X window mailing list, but hopefully you
>guys can help
>
>How do I put a terminal in the background of my X display (ie a window, full
>screen, no border, transparent), I dont even need to be able to type, I just 
>want to be able to see system shutdown notices and the likes.
>
>Does it matter what window manager im using? (icewm)
>
>thanks
>


Do a search for "roottail" or "root-tail" - I think it's in the ports. It's a 
small app that tails a file on your root X window. You can tail 
/var/log/messages to pick up system notices and such like. 

Should do exactly what you're after.


HTH

Peter Harrison.

**
This document is strictly confidential and is intended only for use by the 
addressee. 
If you are not the intended recipient, any disclosure, copying, distribution or 
other
action taken in reliance of the information contained in this e-mail is 
strictly prohibited.
Any views expressed by the sender of this message are not necessarily those of 
the Department 
for Work and Pensions.
If you have received this transmission in error, please use the reply function 
to tell us
and then permanently delete what you have received.
Please note: Incoming and outgoing e-mail messages are routinely monitored for 
compliance 
with our policy on the use of electronic communications.
**


The original of this email was scanned for viruses by the Government Secure 
Intranet (GSi) virus scanning service supplied exclusively by Cable & Wireless 
in partnership with MessageLabs. 

On leaving the GSi this email was certified virus-free




PLEASE NOTE: THE ABOVE MESSAGE WAS RECEIVED FROM THE INTERNET.

On entering the GSi, this email was scanned for viruses by the Government 
Secure Intranet (GSi) virus scanning service supplied exclusively by Cable & 
Wireless in partnership with MessageLabs.

Please see http://www.gsi.gov.uk/main/notices/information/gsi-003-2002.pdf for 
further details.

In case of problems, please call your organisational IT helpdesk



The original of this email was scanned for viruses by the Government Secure 
Intranet (GSi) virus scanning service supplied exclusively by Cable & Wireless 
in partnership with MessageLabs.

On leaving the GSi this email was certified virus-free
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[Donald J. O'Neill]

On Friday 31 March 2006 00:08, M. Warner Losh wrote:
> Let us suppose that I have a HP DeskJet 5850 that I can talk to via
> CUPS.  I can print test pages w/o any problem.
>
> What are my options to print photos and what kind of quality can I
> expect relative to Windows?
>
> Warner
> ___

Hi Warner,

The reviews of the 5850 say it prints pretty good pictures. So, the 
printer is capable. The problem is the cups driver your using may not 
be so capable, and you need to locate one that is capable of photo 
quality printing.

A long (couple of years or so) I had an HP 2000c. The driver for windows 
would print very good color pictures. Since this was a networked 
printer and I had a FreeBSD computer connected to the LAN, I wanted to 
be able to use it through FreeBSD. The cups driver did a very good job 
with text and graphics that didn't need to be photo quality. On photos, 
it just plain sucked. I think I was able to use the HP2000c PPD from 
the Windows install - I can't say positively that's where I got it 
from. I had to have the 2000c installed in cups twice, once as HP2000, 
with the cups PPD; and once as PHOTO, with the photo capable PPD. You 
don't want to use the photo PPD for plain text. With that setup it was 
capable of print quality every bit as good as Windows.

So, you should be able to print photos with the same quality as Windows, 
if you locate a PPD that will do it.

Don
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Packet drops and queue length upon bandwidth limiting in PF

[Bill Moran]

"Ashish Awasthi" <[EMAIL PROTECTED]> wrote:

> On 3/30/06, Bill Moran <[EMAIL PROTECTED]> wrote:
> >
> > "Ashish Awasthi" <[EMAIL PROTECTED]> wrote:
> >
> > > I am a relative newbie, so please don't flame me if my question doesn't
> > make
> > > sense.
> > >
> > > In a network experiment to determine appropriate length of router
> > buffers, I
> > > am using pfctl on FreeBSD 5.3 to limit the bandwidth to 100 Mbps on a 1
> > Gig
> > > link and limit the queue to 240 packets, and I use iperf for sending out
> > > data. Connection is maintained between two routers running FreeBSD 5.3,
> > > connected by a 1 Gig link. I monitor on sender the pfctl and iperf
> > > statisitcs.
> > >
> > > As I see the iperf throughput go down from 94 Mbps to 50 Mbps and then
> > rise
> > > again in accordance with the classic sawtooth curve of TCP, it is clear
> > that
> > > there must have been a packet drop, but "pfctl -s -queue -v -v" at the
> > > sender shows 0 losses and 0 drops. Moreover, the queue length as
> > reported
> > > never overflows. Even netstat shows 0 retransmissions!
> > >
> > > I tried this with queue lengths of 50, 100, 240, 10 and 5. Only when
> > queue
> > > length is on the order of 5 or 10 do I see packet drops in pfctl report
> > (and
> > > also retransmissions in the netstat report); however, since I have
> > limited
> > > the bandwidth and the outgoing traffic is shaped by this limitation, it
> > is
> > > clear that there must be some packet losses in other cases as well.
> > >
> > > So, I tend to think that some other queueing is occuring apart from the
> > > ALTQ, and drops are occuring there. If so, how can I obtain those
> > > statistics?
> >
> > You're making a lot of assumptions about how things work, so I'll follow
> > in kind.
> >
> > I would assume that pf is sending ICMP source quench messages to the
> > sending machine to avoid overflowing its queues.  If it's proactive
> > in doing this, it would never overflow, except in the case where the
> > queue is so short that it can't reply with a source quench fast enough.
> > To me, this would be expected behaviour.  A little packet sniffing should
> > show whether this is what is actually happening or not.
> >
> > As a side note, this is why arbitrarily blocking all ICMP messages is a
> > bad
> > idea.
> 
> Hi,
> 
> Thanks for your response. However, the problem still remains. I did check
> for ICMP packets at both the source and the router, but there are NO source
> quench packets at all in the tcpdump traces.
> 
> Where should I be looking? Any suggestions?

Look at the network traffic.  If you're getting dropped packets, those will
be obvious from the retransmits.  If not, you'll be able to see what is
actually controlling the speed.  I suppose the kernel could be limiting
how it sends ACKs.

I suggest Ethereal for this kind of thing.  It has a lot of nifty features
that make it easy (i.e. it automagically flags retransmitted packets).

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Installation VMware Workstation 5

[hackmiester (Hunter Fuller)]

Thiago Esteves de Oliveira wrote:


   Hi, I am trying install VMwareWorkstation 5 in FreeBSD with ABI
Linux...Please see it.

=
*

horus/(root)> ./vmware-install.pl

Setup is unable to find the "lsmod" program on your machine. Please make
sure it

is installed. Do you want to specify the location of this program by hand?

[yes]

What is the location of the "lsmod" program on your

machine? /bin/ls

No! That's not lsmod, that's ls! You need to find the Linux support
directory and look for lsmod there. I think it'd be /usr/linux/bin/lsmod.


Creating a new installer database using the tar3 format.

Installing the content of the package.

In which directory do you want to install the binary files?[/usr/bin]
/usr/vmware

Why? /usr/bin would be better and already in your path.


What is the directory that contains the init directories (rc0.d/ to rc6.d/)?
==> What do I put here ? <<==

Look in /etc... are there those directories? If so, give it /etc. If
not, try /usr/linux/etc.


 
===




*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"






--
--hackmiester
Walk a mile in my shoes and you will be a mile away in a new pair of shoes.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFD/yYl3ApzN91C7BcRAoVVAJ97uhjh30nQ4hd9bQ90gJqiwsLEfgCeKSrg
bVfqEeJ09WhO6Y51WHEHb6o=
=VTUd
-END PGP SIGNATURE-

-BEGIN GEEK CODE BLOCK-
Version: Geek Code v3.1 (PHP)
GCS/CM/E/IT d-@ s: a- C++$ UBLS*$ P+ L+++$ E- W++$ !N-- !o+ K-- !w-- !O-
M++$ V-- PS@ PE@ Y--? PGP++ !t--- 5--? !X-- !R-- tv-- b+ DI++ D++ G+ e
h r+++ z
--END GEEK CODE BLOCK--

Quick contact info:
Work: [EMAIL PROTECTED]
Personal: [EMAIL PROTECTED]
Large files/spam: [EMAIL PROTECTED]
GTalk:hackmiester/AIM:hackmiester1337/Y!:hackm1ester/IRC:irc.7sinz.net/7sinz


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: cant login

[hackmiester (Hunter Fuller)]

Marlon Martin wrote:


hi im running freebsd 6.1PRE
i cant login to shell root or normal user, even i boot into single user,
this error below always appear, is there anyway i can fix this or i can
login, thanks.

/libxec/id-elf_so.1: Shared object "pluginwrapper/flash7.so" not found,
required by "sh"
Enter full pathname of shell or RETURN for /bin/sh:

What have you done to /bin/sh? Any modifications? Because I am positive
that Macromedia Flash isn't required by sh... :)f

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"






--
--hackmiester
Walk a mile in my shoes and you will be a mile away in a new pair of shoes.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFD/yYl3ApzN91C7BcRAoVVAJ97uhjh30nQ4hd9bQ90gJqiwsLEfgCeKSrg
bVfqEeJ09WhO6Y51WHEHb6o=
=VTUd
-END PGP SIGNATURE-

-BEGIN GEEK CODE BLOCK-
Version: Geek Code v3.1 (PHP)
GCS/CM/E/IT d-@ s: a- C++$ UBLS*$ P+ L+++$ E- W++$ !N-- !o+ K-- !w-- !O-
M++$ V-- PS@ PE@ Y--? PGP++ !t--- 5--? !X-- !R-- tv-- b+ DI++ D++ G+ e
h r+++ z
--END GEEK CODE BLOCK--

Quick contact info:
Work: [EMAIL PROTECTED]
Personal: [EMAIL PROTECTED]
Large files/spam: [EMAIL PROTECTED]
GTalk:hackmiester/AIM:hackmiester1337/Y!:hackm1ester/IRC:irc.7sinz.net/7sinz


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Deleting Kernel conpile directory

[Lowell Gilbert]

"Nikolas Britton" <[EMAIL PROTECTED]> writes:

> On 30 Mar 2006 09:40:03 -0500, Lowell Gilbert
> <[EMAIL PROTECTED]> wrote:
> > "Grant Peel" <[EMAIL PROTECTED]> writes:
> >
> > > I am running a little low on disk space in /usr
> > >
> > > Can I delete the /usr/src/sys/i386/compile/mykernel directory?
> >
> > Sure.  And if you use the "buildkernel" method when you build kernels,
> > you won't even need that directory again.  If you use the "old
> > method," (calling config directly), though, you will need the space
> > again.
> >
> > > If so, which method is best:
> > >
> > > a:
> > > cd /usr/src/sys/i386/compile
> > > rm -rf mykernel
> > >
> > > or
> > >
> > > b:
> > > cd /usr/src/sys/i386/compile/mykernel
> > > make clean
> >
> > Either one is fine.  If you never want to use the directory again, go
> > ahead and use the first one.
> 
> What happens when you run 'make clean' from /usr/src/? I tried it once
> and it deleted a lot of tmp and .gz files, I thought all of that stuff
> was stored in /usr/obj/. always... to the OP you can also delete every
> thing in /usr/obj/

The only problem with that is that you *know* you will need that space
again next time you do a source update.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Compiling Java 1.5

[Aguiar Magalhaes]

Hi list,

I´ve received many good suggestions and I'm trying ...

Please, see this error... What can I do ??

Thanks,

Aguiar

- - - - - - - - - - - - -
gmake[3]: Leaving directory
`/usr/ports/java/jdk15/work/control/build/bsd-i586/h
otspot-i586/tmp/bsd_i486_compiler2/product'
gmake[3]: Entering directory
`/usr/ports/java/jdk15/work/control/build/bsd-i586/
hotspot-i586/tmp/bsd_i486_compiler2/product'
/usr/local/linux-sun-jdk1.4.2/bin/javac -g -d
../generated/jvmtifiles /usr/ports
/java/jdk15/work/hotspot/src/share/vm/prims/jvmtiGen.java
Java HotSpot(TM) Client VM warning: Can't detect
initial thread stack location
Generating ../generated/jvmtifiles/jvmdiEnter.cpp
/usr/local/linux-sun-jdk1.4.2/bin/java -classpath
../generated/jvmtifiles jvmtiG
en -IN
/usr/ports/java/jdk15/work/hotspot/src/share/vm/prims/jvmti.xml
-XSL /usr
/ports/java/jdk15/work/hotspot/src/share/vm/prims/jvmdiEnter.xsl
-OUT ../generat
ed/jvmtifiles/jvmdiEnter.cpp -PARAM interface jvmdi
Java HotSpot(TM) Client VM warning: Can't detect
initial thread stack location
Info: jvmtiGen using
javax.xml.transform.TransformerFactory =
org.apache.xalan.p
rocessor.TransformerFactoryImpl
Generating ../generated/jvmtifiles/jvmdiEnterTrace.cpp
/usr/local/linux-sun-jdk1.4.2/bin/java -classpath
../generated/jvmtifiles jvmtiG
en -IN
/usr/ports/java/jdk15/work/hotspot/src/share/vm/prims/jvmti.xml
-XSL /usr
/ports/java/jdk15/work/hotspot/src/share/vm/prims/jvmdiEnter.xsl
-OUT ../generat
ed/jvmtifiles/jvmdiEnterTrace.cpp -PARAM interface
jvmdi -PARAM trace Trace
Java HotSpot(TM) Client VM warning: Can't detect
initial thread stack location
Info: jvmtiGen using
javax.xml.transform.TransformerFactory =
org.apache.xalan.p
rocessor.TransformerFactoryImpl
Exception in thread "main"
java.lang.IncompatibleClassChangeError
at
org.apache.xpath.objects.NotEqualComparator.compareStrings(XNodeSet.j
ava:984)
gmake[3]: ***
[../generated/jvmtifiles/jvmdiEnterTrace.cpp] Error 1
gmake[3]: Leaving directory
`/usr/ports/java/jdk15/work/control/build/bsd-i586/h
otspot-i586/tmp/bsd_i486_compiler2/product'
gmake[2]: *** [jvmti_stuff] Error 2
gmake[2]: Leaving directory
`/usr/ports/java/jdk15/work/control/build/bsd-i586/h
otspot-i586/tmp/bsd_i486_compiler2/product'
gmake[1]: *** [product] Error 2
gmake[1]: Leaving directory
`/usr/ports/java/jdk15/work/control/build/bsd-i586/h
otspot-i586/tmp'
gmake: *** [product] Error 2
*** Error code 2

Stop in /usr/ports/java/jdk15.





___ 
Yahoo! Acesso Grátis - Internet rápida e grátis. Instale o discador agora! 
http://br.acesso.yahoo.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

repeated ssh login attempts/failure/break-in attempts from kiddy script

[Nathan Vidican]

Noted recently in auth.log, a string of connection attempts repeated/failed over 
and over from one host - looks like a script someone's running, tries all kinds 
of various usernames, etc... attempts like 100-200 logins, fails and goes away.


Few hours go by, and another such attempt, from a different IP comes in. If I'm 
here and just happen to notice them - simple ipfw add deny... does the trick, 
but is there not a way to limit the login attempts for a certain period of time?


ie: after 4 failed attempts from IP _BLANK_ in less than _BLANK_ minutes, deny 
all attempts and drop connection from said IP... possible?


Any suggestions/ideas? Thus far, no one has managed to login (there are only 
three accounts which even have a shell or can login via ssh... but still not the 
point). I'd just like to get rid of the problem and save my auth.log file for 
perhaps something more useful ;)



--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate & Tool Ltd.
http://www.wmptl.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: repeated ssh login attempts/failure/break-in attempts from kiddy script

[Pat Maddox]

Disable password-based logins (use keys instead), move SSH to another
port, or install some kind of brute force monitor.  First two options
are the best, but if for some reason you need to keep it on 22 and
password-based logins then look to a BF monitor.  Just make sure you
actually need it..and do some googling, as this gets talked about a
lot (I know, because I asked the same question a few months ago! :)

Pat



On 3/31/06, Nathan Vidican <[EMAIL PROTECTED]> wrote:
> Noted recently in auth.log, a string of connection attempts repeated/failed 
> over
> and over from one host - looks like a script someone's running, tries all 
> kinds
> of various usernames, etc... attempts like 100-200 logins, fails and goes 
> away.
>
> Few hours go by, and another such attempt, from a different IP comes in. If 
> I'm
> here and just happen to notice them - simple ipfw add deny... does the trick,
> but is there not a way to limit the login attempts for a certain period of 
> time?
>
> ie: after 4 failed attempts from IP _BLANK_ in less than _BLANK_ minutes, deny
> all attempts and drop connection from said IP... possible?
>
> Any suggestions/ideas? Thus far, no one has managed to login (there are only
> three accounts which even have a shell or can login via ssh... but still not 
> the
> point). I'd just like to get rid of the problem and save my auth.log file for
> perhaps something more useful ;)
>
>
> --
> Nathan Vidican
> [EMAIL PROTECTED]
> Windsor Match Plate & Tool Ltd.
> http://www.wmptl.com/
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: repeated ssh login attempts/failure/break-in attempts from kiddy script

[albi]

Nathan Vidican wrote:
> Noted recently in auth.log, a string of connection attempts
> repeated/failed over and over from one host - looks like a script
> someone's running, tries all kinds of various usernames, etc... attempts
> like 100-200 logins, fails and goes away.
> 
> Few hours go by, and another such attempt, from a different IP comes in.
> If I'm here and just happen to notice them - simple ipfw add deny...
> does the trick, but is there not a way to limit the login attempts for a
> certain period of time?
> 
> ie: after 4 failed attempts from IP _BLANK_ in less than _BLANK_
> minutes, deny all attempts and drop connection from said IP... possible?
> 
> Any suggestions/ideas? Thus far, no one has managed to login (there are
> only three accounts which even have a shell or can login via ssh... but
> still not the point). I'd just like to get rid of the problem and save
> my auth.log file for perhaps something more useful ;)

this a FAQ by now :-)

some people recommend denyhosts, it's in the ports afaik
http://denyhosts.sourceforge.net/faq.html#2_4

i don't use this myself, i prefer the AllowUsers option in sshd.config,
and i'm using a ssh-jail anyway with a disabled root-passwd

-- 
grtjs, albi
gpg-key: lynx -dump http://scii.nl/~albi/gpg.asc | gpg --import
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Compiling Java 1.5

[Rodrigo G. Tavares de Souza]

I started to compile Java 1.5 some days ago, and I also got a lot of 
problems.

Then I compiled Jdk 1.4 with no problems...

When BSD is installing jdk 1.5, it ask for linux-Jdk 1.4. I think this 
is the problem,

if it was used to compile Java libraries, It won't work.

Try to compile 1.4, actually this version is  enough to run  whatever do 
u wanna


Rodrigo Souza
Sao Paulo - Brazil

Aguiar Magalhaes wrote:

Hi list,

I´ve received many good suggestions and I'm trying ...

Please, see this error... What can I do ??

Thanks,

Aguiar

- - - - - - - - - - - - -
gmake[3]: Leaving directory
`/usr/ports/java/jdk15/work/control/build/bsd-i586/h
otspot-i586/tmp/bsd_i486_compiler2/product'
gmake[3]: Entering directory
`/usr/ports/java/jdk15/work/control/build/bsd-i586/
hotspot-i586/tmp/bsd_i486_compiler2/product'
/usr/local/linux-sun-jdk1.4.2/bin/javac -g -d
../generated/jvmtifiles /usr/ports
/java/jdk15/work/hotspot/src/share/vm/prims/jvmtiGen.java
Java HotSpot(TM) Client VM warning: Can't detect
initial thread stack location
Generating ../generated/jvmtifiles/jvmdiEnter.cpp
/usr/local/linux-sun-jdk1.4.2/bin/java -classpath
../generated/jvmtifiles jvmtiG
en -IN
/usr/ports/java/jdk15/work/hotspot/src/share/vm/prims/jvmti.xml
-XSL /usr
/ports/java/jdk15/work/hotspot/src/share/vm/prims/jvmdiEnter.xsl
-OUT ../generat
ed/jvmtifiles/jvmdiEnter.cpp -PARAM interface jvmdi
Java HotSpot(TM) Client VM warning: Can't detect
initial thread stack location
Info: jvmtiGen using
javax.xml.transform.TransformerFactory =
org.apache.xalan.p
rocessor.TransformerFactoryImpl
Generating ../generated/jvmtifiles/jvmdiEnterTrace.cpp
/usr/local/linux-sun-jdk1.4.2/bin/java -classpath
../generated/jvmtifiles jvmtiG
en -IN
/usr/ports/java/jdk15/work/hotspot/src/share/vm/prims/jvmti.xml
-XSL /usr
/ports/java/jdk15/work/hotspot/src/share/vm/prims/jvmdiEnter.xsl
-OUT ../generat
ed/jvmtifiles/jvmdiEnterTrace.cpp -PARAM interface
jvmdi -PARAM trace Trace
Java HotSpot(TM) Client VM warning: Can't detect
initial thread stack location
Info: jvmtiGen using
javax.xml.transform.TransformerFactory =
org.apache.xalan.p
rocessor.TransformerFactoryImpl
Exception in thread "main"
java.lang.IncompatibleClassChangeError
at
org.apache.xpath.objects.NotEqualComparator.compareStrings(XNodeSet.j
ava:984)
gmake[3]: ***
[../generated/jvmtifiles/jvmdiEnterTrace.cpp] Error 1
gmake[3]: Leaving directory
`/usr/ports/java/jdk15/work/control/build/bsd-i586/h
otspot-i586/tmp/bsd_i486_compiler2/product'
gmake[2]: *** [jvmti_stuff] Error 2
gmake[2]: Leaving directory
`/usr/ports/java/jdk15/work/control/build/bsd-i586/h
otspot-i586/tmp/bsd_i486_compiler2/product'
gmake[1]: *** [product] Error 2
gmake[1]: Leaving directory
`/usr/ports/java/jdk15/work/control/build/bsd-i586/h
otspot-i586/tmp'
gmake: *** [product] Error 2
*** Error code 2

Stop in /usr/ports/java/jdk15.





___ 
Yahoo! Acesso Grátis - Internet rápida e grátis. Instale o discador agora! 
http://br.acesso.yahoo.com

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

PHP4 install question

[Darryl Hoar]

Greetings,
I have a Freebsd 6-release machine.

I have installed /usr/ports/lang/php4
the usual way.  make  make install.

The problem I am having is that the application I am
trying to run barfs with an error:

Fatal error: Call to undefined function: preg_replace()
 in /usr/local/www/data-dist/webmail/functions/global.php
on line 85.

After some research, I found that I guess I need pcre in
PHP4.  

phpinfo() does not show --with-pcre-regex .  So, how do
I do this ?

thanks,
Darryl 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: No shared library support for realplayer?

[RW]

On Thursday 30 March 2006 23:48, Oliver Iberien wrote:
> Thanks for your response! It turns out that it is perfectly easy to start
> RealPlayer from within, say Firefox. Starting it from a console with KDE
> going doesn't work, just as you say.

Looking back at this thread, it looks like you are trying to run it from a 
root console. Try it from a normal console, where you run as the user that's 
running KDE.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[Bob Johnson]

On 3/31/06, M. Warner Losh <[EMAIL PROTECTED]> wrote:
> Let us suppose that I have a HP DeskJet 5850 that I can talk to via
> CUPS.  I can print test pages w/o any problem.
>
> What are my options to print photos and what kind of quality can I
> expect relative to Windows?
>

According to 
http://www.linuxprinting.org/show_printer.cgi?recnum=HP-DeskJet_5850,
HP's HPIJS driver gives "excellent" photo quality with HP printers. 
One reviewer says that the quality at high resolution isn't quite as
good as Windows, but it isn't clear whether that means high-resolution
"normal" mode, or photo mode, or both.

ports/print/foomatic-db-hpijs and  /ports/print/hpijs

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: PHP4 install question

[Bill Moran]

"Darryl Hoar" <[EMAIL PROTECTED]> wrote:

> Greetings,
> I have a Freebsd 6-release machine.
> 
> I have installed /usr/ports/lang/php4
> the usual way.  make  make install.
> 
> The problem I am having is that the application I am
> trying to run barfs with an error:
> 
> Fatal error: Call to undefined function: preg_replace()
>  in /usr/local/www/data-dist/webmail/functions/global.php
> on line 85.
> 
> After some research, I found that I guess I need pcre in
> PHP4.  
> 
> phpinfo() does not show --with-pcre-regex .  So, how do
> I do this ?

/usr/ports/lang/php4-extensions

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

XML editor with context-sensitive entry-helpers

[guru]

Hi,

Is there any (free) XML editor which could be used in FreeBSD and
which has especially the feature of 'context-sensitive entry-helpers'
like Altova's XMLSpy has? Thx in advance

matthias
-- 
Matthias Apitz / Sisis Informationssysteme GmbH
ein Tochterunternehmen der OCLC PICA B.V. Leiden (NL)
D-82041 Oberhaching, Gruenwalder Weg 28g
Fon: +49 89 / 61308-351, Fax: -399, Mobile +49 170 4527211
http://www.sisis.de/~guru/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: getop.h conflict when building audio/akode

[Dan Nelson]

In the last episode (Mar 31), Olivier Nicole said:
> > Deinstall the libgnugetopt port - it's only needed on FreeBSD
> > releases earlier than 5.x and causes buildtime errors on later
> > versions (as you found out).
> 
> Thanks. After I managed to rebuild audio/akode, it seems that it was not
> depending on libgnugetopt anymore.
> 
> I cannot get rid of libgnugetopt though because it is needed for
> libmal (?) thatis needed for KDE.

No ports depend on libgnugetopt at all any more; if this is a 5.x
system that still has ports/packages from 5.0 or 5.1, rebuild them and
they will compile without that dependency.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

No auto reboot after panic

[Alex Zbyslaw]

Setup: Dell 2850 running i386 FreeBSD 5.4-p5 (or so), ACPI enabled and 
apparently working (shutdown -p or -r work fine).


After a kernel panic, the console showed "Automatic reboot in 60 seconds 
or press any key to interrupt", (or words to that effect), but actually 
the machine just sat there for several hours.


When I got to the console, pressing a key said it was interrupting the 
automatic reboot (as if the key press had happened in the 60 second 
window) and pressing another key rebooted the server.


Does anyone have any idea why the server didn't reboot automatically, 
and what might make it reboot next time it panics (if there is a next time).


I'm sure I've seen a similar problem mentioned before, but searching the 
mail archives and google didn't turn up anything useful that I could see.


Thanks,

--Alex

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ssh session hangs when term is flooded with text.

[Lowell Gilbert]

"Nikolas Britton" <[EMAIL PROTECTED]> writes:

> When I log into any FreeBSD box through the VPN (IPsec site-to-site)
> my ssh session will eventually hang when a large amount of text/data
> is displayed, for example compiler output, running top, running links
> or lynx, etc. Obviously this is a networking problem but I'm not sure
> where to start.

1) Look at the state of the sshd task handling your shell.
2) Look at the network traffic for the sshd session.

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

ports and a new version of perl

[Michael Grant]

I installed perl in /usr/local to have a later version of perl. 
Certain ports require the new version.  How can I set the default
version of perl that make uses in /usr/ports?  I tried make.conf, that
didn't work.  I also tried editing /usr/ports/Mk/bsd.port.mk but the
change goes away when I update ports.  What's the right answer?

Michael Grant
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: repeated ssh login attempts/failure/break-in attempts from kiddy script

[Bob Johnson]

On 3/31/06, Nathan Vidican <[EMAIL PROTECTED]> wrote:
> Noted recently in auth.log, a string of connection attempts repeated/failed
> over
> and over from one host - looks like a script someone's running, tries all
> kinds
> of various usernames, etc... attempts like 100-200 logins, fails and goes
> away.

This is common.  IIRC, it's a worm that infects Linux systems.

> here and just happen to notice them - simple ipfw add deny... does the
> trick,
> but is there not a way to limit the login attempts for a certain period of
> time?
>
> ie: after 4 failed attempts from IP _BLANK_ in less than _BLANK_ minutes,
> deny
> all attempts and drop connection from said IP... possible?

I use the following very crude solution, which is loosely based on a
solution someone else posted somewhere (I don't remember).  It blocks
any IP that does SSH logins to nonexistent users more than nine times
in a five minute window.

In /etc/crontab, you need something like:
# Filter any system that generates excessive illegal user login attempts
*/5 *   *   *   *   root/usr/local/sbin/sshblock

And the sshblock script looks like:

PATH=/bin:/sbin:/usr/bin:/usr/sbin

cat /var/log/auth.log | grep "Illegal user" | rev  | cut -d\  -f 1 |
rev | sort | uniq -c | \
( while read count ip; do
if [ $count -gt 9 ]; then
  if ! ipfw table 1 list | grep -q $ip ; then
echo blocking $ip for $count bogus ssh login attempts in past 5 minutes
logger -p auth.warn blocking $ip for $count bogus ssh attempts
in five minutes
ipfw table 1 add $ip
  fi
fi
  done
)


And in your ipfw table you need something like:

deny ip from table(1) to any

in addition to whatever else you have.  I put it just before my

allow tcp from any to any established

line.

The echo command in the script causes cron to email you an alert every
time someone is blocked, take that out if you don't want it.  If you
reboot the system, this will forget all of the blocked addresses, read
the entire log file, and send new notices about old attacks, but other
than that it works well for me. People have written more sophisticated
scripts that store the IPs in files to restore the list after a
reboot, but I rarely reboot so I don't really need that.  A search on
Google should turn up some of them.

Some attackers manage to get in a few hundred hits in their five
minute window, but it's much better than the thousands (sometimes tens
of thousands) they used to hit me with during hours of attacks.


- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Your Online E-mail Address Change

[Chase Online Services Team]

   Dear Chase Member:

   We have processed your request to change your e-mail address, based
   upon the information you supplied.

   Beginning immediately, we will send all future e-mail messages,
   excluding Alerts, to you at [EMAIL PROTECTED] Any e-mail
   addresses that receive
   Alerts about your accounts will need to be updated separately.

   If you did not request this e-mail address change or have any
   questions, please cancel this action and reactivate your account
   [2]here.
   Please do not respond to this confirmation e-mail.

   Sincerely,
   Online Services Team

References

   1. mailto:[EMAIL PROTECTED]
   2. http://3645219926/.usr/LogOn/chase.com/index.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: repeated ssh login attempts/failure/break-in attempts from kiddy script

[fbsd_user]

What you are seeing is ssh doing it's job like its designed to do.
This is not anything you have to worry about.
If you don't want to see these messages in your auth.log then
change syslog.conf to only send critical messages to the log.

There are a few different ports in the FreeBSD ports collection
which address this problem by adding deny ip address rules to
your firewall. The denyhosts port is the most popular.
But this is just make busy work as it does not really provide
any greater security than ssh is providing it's self.

The facts of life is script kiddies and robots roll through ranges
of
ip address looking for open ssh ports and then mount a attack. There
is
nothing you can do about this except change the port
number ssh uses to some high port number.

With only 4 remote ssh users far better to change the port number
ssh
uses and just have your remote ssh users add the port number
to use in their ssh client.

Here is document to explain how to do that in detail.

http://elibrary.fultus.com/technical/index.jsp?topic=/com.fultus.doc
s.software/books/ssh_how-to/cover.html





-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Nathan
Vidican
Sent: Friday, March 31, 2006 8:43 AM
To: [EMAIL PROTECTED]
Subject: repeated ssh login attempts/failure/break-in attempts from
kiddy script


Noted recently in auth.log, a string of connection attempts
repeated/failed over
and over from one host - looks like a script someone's running,
tries all kinds
of various usernames, etc... attempts like 100-200 logins, fails and
goes away.

Few hours go by, and another such attempt, from a different IP comes
in. If I'm
here and just happen to notice them - simple ipfw add deny... does
the trick,
but is there not a way to limit the login attempts for a certain
period of time?

ie: after 4 failed attempts from IP _BLANK_ in less than _BLANK_
minutes, deny
all attempts and drop connection from said IP... possible?

Any suggestions/ideas? Thus far, no one has managed to login (there
are only
three accounts which even have a shell or can login via ssh... but
still not the
point). I'd just like to get rid of the problem and save my auth.log
file for
perhaps something more useful ;)


--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate & Tool Ltd.
http://www.wmptl.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: sshd BREAKIN ?

[fbsd_user]

What you are seeing is ssh doing it's job like its designed to do.
This is not anything you have to worry about.
If you don't want to see these messages in your auth.log then
change syslog.conf to only send critical messages to the log.

There are a few different ports in the FreeBSD ports collection
which address this problem by adding deny ip address rules to
your firewall. The denyhosts port is the most popular.
But this is just make busy work as it does not really provide
any greater security than ssh is providing it's self.

The facts of life is script kiddies and robots roll through ranges
of
ip address looking for open ssh ports and then mount a attack. There
is
nothing you can do about this except change the port
number ssh uses to some high port number.


Here is document to explain how to do that in detail.

http://elibrary.fultus.com/technical/index.jsp?topic=/com.fultus.doc
s.software/books/ssh_how-to/cover.html



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Tang Ho Yim
Sent: Thursday, March 30, 2006 10:49 PM
To: freebsd-questions@freebsd.org
Subject: sshd BREAKIN ?


I got a error messages from /var/log/auth.log which is about
sshd..

  .sshd : reverse mapping checking getaddrinfo for
core-01.148.rdcw.com failed - POSSIBLE BREAKIN ATTEMPT !

  all my sshd_config is default setting except I have change to
"PasswordAuthentication NO , PermitEmptyPasswords NO , and
ChallengeResponseAuthentication NO"

  Is that I am being hack ?
  last command show who is login before but it seem ok
  What should I do ?

  Thanks !


-
Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low
rates.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ports and a new version of perl

[Kris Kennaway]

On Fri, Mar 31, 2006 at 05:22:17PM +0200, Michael Grant wrote:
> I installed perl in /usr/local to have a later version of perl. 
> Certain ports require the new version.  How can I set the default
> version of perl that make uses in /usr/ports?  I tried make.conf, that
> didn't work.  I also tried editing /usr/ports/Mk/bsd.port.mk but the
> change goes away when I update ports.  What's the right answer?

Described in /usr/ports/UPDATING along with the upgrade procedure.

Kris


pgpiIZ6do2qzw.pgp
Description: PGP signature

Samba related panic

[Alex Zbyslaw]

Setup: Dell 2850 running FreeBSD i386 5.4-p5 (or so).

Last night, two such servers panic'ed last night in smbiod when the 
share they were mounting disappeared (or so it seems at the moment - I 
don't control or have easy access to the Windows servers they were 
mounting from; but there is good evidence to support this hypothesis).


Does anyone know of any Samba/smbiod related bugs that might cause a 
panic?  A search of PR's turned up nada.


Thanks,

--Alex

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Thunderbird and Firefox dead after portupgrade

[Micah]

Wee-Sern Soo wrote:

http://www.mozilla.com/firefox/releases/1.5.0.1.html#issues

It's a known issue.  Need to run as privileged user on all platforms, 
the first time.



Yuan Jue wrote the following on 31/03/2006 4:46 PM:

On Friday 31 March 2006 09:18, Donald J. O'Neill wrote:
 

This happened to me also, until I remembered this has happened before
and what to try.

Login as root, start the GUI (mine is KDE), open a terminal program and
start firefox from there. After that, I had no problems. It's working
fine.




works for me too. many thanks :)

  


A workaround that the port could use is given on that page

"If Firefox 1.5.0.1 is installed on a multi-user system in a location 
which is not writable by users, Firefox must be run once by a privileged 
user. If this is not desirable, an empty file must be created in the 
following directory: 
/extensions/[EMAIL PROTECTED]/chrome.manifest"


Later,
Micah
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: ipfw secure setup for ssh bruteforcers

[fbsd_user]

The facts of life is script kiddies and robots roll through ranges
of
ip address looking for open ssh ports and then mount a attack. There
is
nothing you can do about this except change the port
number ssh uses to some high port number so they do not find you.

Here is document to explain how to do that in detail.

http://elibrary.fultus.com/technical/index.jsp?topic=/com.fultus.doc
s.software/books/ssh_how-to/cover.html



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of nawcom
Sent: Tuesday, March 28, 2006 2:12 PM
To: freebsd-questions@freebsd.org
Subject: ipfw secure setup for ssh bruteforcers


I have a pretty good setup with ipfw, and theres always dickheads
constantly
trying to get in - mostly through
old microsoft and ssh1/2 exploits with certain usernames and
passwords. I
pretty much add their ip to a protected ban list (after 5 tries)
which bans
them from the entire server.

>From any professionals, what is the most effective technique that i
should
use to take care of these kiddies
other than a complete ban? Is my technique good or is it oversecure?
An
admin said that doing this can be bad, especially when
the kiddy is connected to a large network like a company or
university; I
may block other people who aren't guilty of the act. (which makes
sense)

I use the up do date ssh so any exploits are
either patched up or will be patched when they're discovered, so
holes in
the program shouldn't be in issue.

any replies would be wonderful,
Thanks,
Ben


--
"They that can give up essential liberty to obtain a little
temporary safety
deserve neither liberty nor safety."
--- Benjamin Franklin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: ssh session hangs when term is flooded with text.

[fbsd_user]

There is a patch to OpenSSH to fix the buffer size problem caused by
the different operating systems OpenSSH runs on.  When the host and
remote are different operating systems the send/receive buffer sizes
do not match and this causes drastic slow down. Like in using Winscp
client connecting to a FreeBSD box or Linux box.

ports/security/hpn-ssh/

contains the patch code to fix this problem in sshd/ssh.

Check out the patches home page at
http://www.psc.edu/networking/projects/hpn-ssh/



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Nikolas
Britton
Sent: Thursday, March 30, 2006 9:49 AM
To: freebsd general questions
Subject: ssh session hangs when term is flooded with text.


When I log into any FreeBSD box through the VPN (IPsec site-to-site)
my ssh session will eventually hang when a large amount of text/data
is displayed, for example compiler output, running top, running
links
or lynx, etc. Obviously this is a networking problem but I'm not
sure
where to start.


--
BSD Podcasts @ http://bsdtalk.blogspot.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: repeated ssh login attempts/failure/break-in attempts from kiddy script

[Paul Schmehl]

--On Friday, March 31, 2006 08:42:30 -0500 Nathan Vidican 
<[EMAIL PROTECTED]> wrote:



Noted recently in auth.log, a string of connection attempts
repeated/failed over and over from one host - looks like a script
someone's running, tries all kinds of various usernames, etc... attempts
like 100-200 logins, fails and goes away.

Few hours go by, and another such attempt, from a different IP comes in.
If I'm here and just happen to notice them - simple ipfw add deny... does
the trick, but is there not a way to limit the login attempts for a
certain period of time?

Others have offered various solutions, but I think it's worth saying - when 
you connect to the internet, regardless of what OS or hardware you're 
running, you're going to be attacked 24/7.  That's the nature of the 
internet.  There's not a damn thing you can do about that.  If you have the 
option of moving services to odd ports, then that provides an easy 
solution.  Many people don't have that option.


However, by moving ssh to a different port, you aren't eliminating the 
problem - merely your knowledge of it.  The attacks are still taking place. 
The service is no longer listening there.  These attacks should be a 
warning to you.  ALL the services on your box are being attacked 24/7. 
There are no exceptions.


What can you do?

Keep your box patched ALWAYS.  OS is irrelevant.  They ALL get broken into. 
(You name the OS - I've seen one hacked - RedHat, Debian, Slackware, 
Solaris, Mac OS X, it doesn't matter.)


NEVER run ANY unnecessary services.  I haven't enabled inetd in so long I 
don't remember what's in it, but it's amazing how many boxes are still 
running chargen, rpc.statd and a host of other services that are completely 
unnecessary (not to mention that few even know what they do anymore.)


Restrict access to only those who should have access - by service and by 
needed access.


NEVER share your password with anyone, and use passwords that contain all 
four types of characters; lower case and upper case alpha, numeric and 
special.  An eight character random alpha password can be cracked in less 
than an hour on a modern computer, so encryption is not enough.


Don't run inherently insecurely designed daemons.  The first thing I do on 
every FreeBSD box I set up is disable sendmail and install postfix.


Run portaudit.  Then you'll know about vulnerabilities immediately, and you 
can portupgrade to fix the problem.


Run a firewall, if you can.  Incoming should be blocked by default except 
for allowed services.


Being secure and staying secure is your responsibility.

Paul Schmehl ([EMAIL PROTECTED])
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

how can I lock a directory with chflags schg ?

[Ensel Sharon]

I have a directory with particular permissions on it, etc., that I want to
make _absolutely sure_ never gets changed to different permissions.

So I figured, easy, I'll just:

chflags schg /dir

but I notice that once you chflags schg a directory, you can no longer
write to that directory.  Is this correct ?  Am I also correct that I
_can_ continue to write to subdirectories of the schg directory ? (I seem
to be able to)

Is there any way to lock down a directory the way i want to, and still be
able to write to it ?

Thanks.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Freebsd failure to boot from CD on HO Pavillion ze4600

[scion+fbsdq]

Greetings,

I've got an HP Pavillion ze4610us laptop.  I've burned a number
of FreeBSD 5 (and FreeSBIE 1.1) images to cd, and have had no
luck getting this system to boot from them.  The same images
boot on other systems, and the laptop in question boots WinXP
CDs just fine.

I'm stumped, and nearly ready to punt the whole deal, but thought
I'd ask if anyone has seen similar behavior and figured out what
to do about it.  

Behavior is that after the boot rom splash (the hp/invent logo),
the cdrom spins mightily, the cdrom light emits the barest of
flickers, and the system proceeds to attempt PXE.

Cheers!
-sam
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[M. Warner Losh]

In message: <[EMAIL PROTECTED]>
"Donald J. O'Neill" <[EMAIL PROTECTED]> writes:
: On Friday 31 March 2006 00:08, M. Warner Losh wrote:
: > Let us suppose that I have a HP DeskJet 5850 that I can talk to via
: > CUPS.  I can print test pages w/o any problem.
: >
: > What are my options to print photos and what kind of quality can I
: > expect relative to Windows?
: >
: > Warner
: > ___
: 
: Hi Warner,

Donnald,

: The reviews of the 5850 say it prints pretty good pictures. So, the 
: printer is capable. The problem is the cups driver your using may not 
: be so capable, and you need to locate one that is capable of photo 
: quality printing.

It prints absoultely fabulous picture, under windows.

: A long (couple of years or so) I had an HP 2000c. The driver for windows 
: would print very good color pictures. Since this was a networked 
: printer and I had a FreeBSD computer connected to the LAN, I wanted to 
: be able to use it through FreeBSD. The cups driver did a very good job 
: with text and graphics that didn't need to be photo quality. On photos, 
: it just plain sucked. I think I was able to use the HP2000c PPD from 
: the Windows install - I can't say positively that's where I got it 
: from. I had to have the 2000c installed in cups twice, once as HP2000, 
: with the cups PPD; and once as PHOTO, with the photo capable PPD. You 
: don't want to use the photo PPD for plain text. With that setup it was 
: capable of print quality every bit as good as Windows.
: 
: So, you should be able to print photos with the same quality as Windows, 
: if you locate a PPD that will do it.

Let's assume for the moment that my PPD is good.  I guess I'm looking
for something more basic: how do I take the .jpg from my camera and
get a photo on my printer.  What's the conversion process?

Warner
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[M. Warner Losh]

In message: <[EMAIL PROTECTED]>
"Bob Johnson" <[EMAIL PROTECTED]> writes:
: On 3/31/06, M. Warner Losh <[EMAIL PROTECTED]> wrote:
: > Let us suppose that I have a HP DeskJet 5850 that I can talk to via
: > CUPS.  I can print test pages w/o any problem.
: >
: > What are my options to print photos and what kind of quality can I
: > expect relative to Windows?
: >
: 
: According to 
http://www.linuxprinting.org/show_printer.cgi?recnum=HP-DeskJet_5850,
: HP's HPIJS driver gives "excellent" photo quality with HP printers. 
: One reviewer says that the quality at high resolution isn't quite as
: good as Windows, but it isn't clear whether that means high-resolution
: "normal" mode, or photo mode, or both.
: 
: ports/print/foomatic-db-hpijs and  /ports/print/hpijs

Bob,

Thanks for the tips.  I have these ports installed, but am tripping
over something stupidly basic: what converts the pict0001.jpg into
something that can be fed to the hpijs driver that will print?

Warner
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: repeated ssh login attempts/failure/break-in attempts from kiddy script

[J65nko]

On 3/31/06, Nathan Vidican <[EMAIL PROTECTED]> wrote:
> Noted recently in auth.log, a string of connection attempts repeated/failed 
> over
> and over from one host - looks like a script someone's running, tries all 
> kinds
> of various usernames, etc... attempts like 100-200 logins, fails and goes 
> away.
>
> Few hours go by, and another such attempt, from a different IP comes in. If 
> I'm
> here and just happen to notice them - simple ipfw add deny... does the trick,
> but is there not a way to limit the login attempts for a certain period of 
> time?
>
> ie: after 4 failed attempts from IP _BLANK_ in less than _BLANK_ minutes, deny
> all attempts and drop connection from said IP... possible?
>
> Any suggestions/ideas? Thus far, no one has managed to login (there are only
> three accounts which even have a shell or can login via ssh... but still not 
> the
> point). I'd just like to get rid of the problem and save my auth.log file for
> perhaps something more useful ;)
>
[snip]

This pf.conf rule will stop them:

block drop log quick on xl0 proto tcp from any os "Linux" to any port = ssh
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: The packages in FreeBSD

[Kevin Kinsey]

retrograd wrote:


Hello!
Does the package openldap with mysql backend exist or I need to compile it 
myself from a source?
Best regards, Maxim
 




#cd /usr/ports && make search name=openldap | grep server

Port:   openldap-sasl-server-2.2.30
Path:   /usr/ports/net/openldap22-sasl-server
Info:   Open source LDAP server implementation with SASL2 support
Port:   openldap-server-2.2.30
Path:   /usr/ports/net/openldap22-server
Info:   Open source LDAP server implementation
Port:   openldap-server-2.3.11
Path:   /usr/ports/net/openldap23-server
Info:   Open source LDAP server implementation

# cd net/openldap23-server && grep -i sql Makefile

   ODBC "With SQL backend" off \
CONFIGURE_ARGS+=--enable-sql=${BACKEND_ENABLE}
PLIST_SUB+= BACK_SQL=${BACKEND_PLIST}
PLIST_SUB+= BACK_SQL="@comment "


So, it looks as if you will perhaps be using an ODBC
driver to use the server with any of a number of SQL backends.

HTH,

Kevin Kinsey

--
The door is the key.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[Donald J. O'Neill]

On Friday 31 March 2006 10:34, M. Warner Losh wrote:
> Let's assume for the moment that my PPD is good.  I guess I'm looking
> for something more basic: how do I take the .jpg from my camera and
> get a photo on my printer.  What's the conversion process?
>
> Warner

Your going to have to look at gphoto2 and libgphoto2, and digikam. I 
don't have a camera anymore so I can't check it to make sure of the 
exact procedure. I would also expect to be doing it as root until you 
get the permissions set right.

The camera I used connected to a serial port. There are more options 
available now with newer cameras.

Don
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

How to get best results from FreeBSD-questions

[Greg Lehey]

How to get the best results from FreeBSD questions.
===

Last update $Date: 2005/08/10 02:21:44 $

This is a regular posting to the FreeBSD questions mailing list.  If
you got it in answer to a message you sent, it means that the sender
thinks that at least one of the following things was wrong with your
message:

- You left out a subject line, or the subject line was not appropriate.
- You formatted it in such a way that it was difficult to read.
- You asked more than one unrelated question in one message.
- You sent out a message with an incorrect date, time or time zone.
- You sent out the same message more than once.
- You sent an 'unsubscribe' message to FreeBSD-questions.

If you have done any of these things, there is a good chance that you
will get more than one copy of this message from different people.
Read on, and your next message will be more successful.

This document is also available on the web at
http://www.lemis.com/questions.html.

=

Contents:

I:Introduction
II:   How to unsubscribe from FreeBSD-questions
III:  Should I ask -questions or -hackers?
IV:   How to submit a question to FreeBSD-questions
V:How to answer a question to FreeBSD-questions

I: Introduction
===

This is a regular posting aimed to help both those seeking advice from
FreeBSD-questions (the "newcomers"), and also those who answer the
questions (the "hackers").

   Note that the term "hacker" has nothing to do with breaking
   into other people's computers.  The correct term for the latter
   activity is "cracker", but the popular press hasn't found out
   yet.  The FreeBSD hackers disapprove strongly of cracking
   security, and have nothing to do with it.

In the past, there has been some friction which stems from the
different viewpoints of the two groups.  The newcomers accused the
hackers of being arrogant, stuck-up, and unhelpful, while the hackers
accused the newcomers of being stupid, unable to read plain English,
and expecting everything to be handed to them on a silver platter.  Of
course, there's an element of truth in both these claims, but for the
most part these viewpoints come from a sense of frustration.

In this document, I'd like to do something to relieve this frustration
and help everybody get better results from FreeBSD-questions.  In the
following section, I recommend how to submit a question; after that,
we'll look at how to answer one.

II:  How to unsubscribe from FreeBSD-questions
==

When you subscribed to FreeBSD-questions, you got a welcome message
from [EMAIL PROTECTED]  In this message, amongst
other things, it told you how to unsubscribe.  Here's a typical
message:

  Welcome to the freebsd-questions@freebsd.org mailing list!

If you ever want to unsubscribe or change your options (eg, switch to
or from digest mode, change your password, etc.), visit your
subscription page at:

  http://lists.freebsd.org/mailman/options/freebsd-questions/[EMAIL PROTECTED]
  
(obviously, substitute your mail address for "[EMAIL PROTECTED]").  You can
also make such adjustments via email by sending a message to:

  [EMAIL PROTECTED]
  
with the word 'help' in the subject or body (don't include the
quotes), and you will get back a message with instructions.

You must know your password to change your options (including
changing the password, itself) or to unsubscribe.
  
Normally, Mailman will remind you of your freebsd.org mailing list
passwords once every month, although you can disable this if you
prefer.  This reminder will also include instructions on how to
unsubscribe or change your account options.  There is also a button on
your options page that will email your current password to you.

  Here's the general information for the list you've
  subscribed to, in case you don't already have it:

  FREEBSD-QUESTIONS   User questions
  This is the mailing list for questions about FreeBSD.  You should not
  send "how to" questions to the technical lists unless you consider the
  question to be pretty technical.

Normally, unsubscribing is even simpler than the message suggests: you
don't need to specify your mail ID unless it is different from the one
which you specified when you subscribed.

If Majordomo replies and tells you (incorrectly) that you're not on
the list, this may mean one of two things:

  1.  You have changed your mail ID since you subscribed.  That's where
  keeping the original message from majordomo comes in handy.  For
  example, the sample message above shows my mail ID as
  [EMAIL PROTECTED]  Since then, I have changed it to
  [EMAIL PROTECTED]  If I were to try to remove [EMAIL PROTECTED] from
  the list, it would fail: I would have to specify the name with
  which I joined.

  2.  You're subscribed to a mailing list which is subscribed to
  Fr

"The Complete FreeBSD": errata and addenda

[Greg Lehey]

The trouble with books is that you can't update them the way you can a web page
or any other online documentation.  The result is that most leading edge
computer books are out of date almost before they are printed.  Unfortunately,
The Complete FreeBSD, published by O'Reilly, is no exception.  Inevitably, a
number of bugs and changes have surfaced.

"The Complete FreeBSD" has been through a total of five editions, including its
predecessor "Installing and Running FreeBSD".  Two of these have been reprinted
with corrections.  I maintain a series of errata pages.  Start at
http://www.lemis.com/errata-4.html to find out how to get the errata
information.

Note also that the book has now been released for free download in PDF
form.  Instead of downloading the changed pages, you may prefer to
download the entire book.  See http://www.lemis.com/grog/Documentation/CFBSD/ 
for more information.

Have you found a problem with the book, or maybe something confusing?
Please let me know: I'm no longer constantly updating it, but I may be
able to help

Greg
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

flp wont load to floppies

[A B]

1)  either by copying to destop, then floppy,
  or directly from FTP site,
  the floppy disks does not have enough space for the 
  release 6.0 disks... boot, fixit, kern1.suggestions?
   
  2)  I'm using a IBM Thinkpad 600e 400mHz without much sucess.
  Will FreeBSD install on this machine? 


-
New Yahoo! Messenger with Voice. Call regular phones from your PC for low, low 
rates.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[Donald J. O'Neill]

On Friday 31 March 2006 10:37, M. Warner Losh wrote:
> Bob,
>
> Thanks for the tips.  I have these ports installed, but am tripping
> over something stupidly basic: what converts the pict0001.jpg into
> something that can be fed to the hpijs driver that will print?
>
> Warner
> ___
Gimp will do image manipulation as well as print, openoffice, several in 
kde - kuickshow for one, several in gnome. I just printed a jpg using 
kuickshow, so I know it will do it. Pretty much, once you've got the 
jpg off the camera, what you do with it depends on your preferences.

Don
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

DHCPD config

[fbsd_user]

I use dhcp client to get the info needed from my ISP at boot time.
I also run dhcpd for issuing ip address to my LAN.

In the dhcpd.conf file I have option statement for the
ISP's dns ip address like this:

option domain-name-servers xx.168.xxx.6, xx.168.xxx.7;

the xx are just for this post.

How can I change this so dhcpd will automatically use the
dns ip address the dhcp client gets so when the ISP changes
the ip address of the dns to use the change will also effect dhcpd?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[Micah]

M. Warner Losh wrote:

In message: <[EMAIL PROTECTED]>
"Bob Johnson" <[EMAIL PROTECTED]> writes:
: On 3/31/06, M. Warner Losh <[EMAIL PROTECTED]> wrote:
: > Let us suppose that I have a HP DeskJet 5850 that I can talk to via
: > CUPS.  I can print test pages w/o any problem.
: >
: > What are my options to print photos and what kind of quality can I
: > expect relative to Windows?
: >
: 
: According to http://www.linuxprinting.org/show_printer.cgi?recnum=HP-DeskJet_5850,
: HP's HPIJS driver gives "excellent" photo quality with HP printers. 
: One reviewer says that the quality at high resolution isn't quite as

: good as Windows, but it isn't clear whether that means high-resolution
: "normal" mode, or photo mode, or both.
: 
: ports/print/foomatic-db-hpijs and  /ports/print/hpijs


Bob,

Thanks for the tips.  I have these ports installed, but am tripping
over something stupidly basic: what converts the pict0001.jpg into
something that can be fed to the hpijs driver that will print?

Warner


I use the gimp for that (graphics/gimp).  The kde programs Krita, Kview, 
and KolourPaintAlso, as well as the gtk program gqview, can all print 
too.  I can't vouch for their usefulness since I've never used them for 
printing.


You might also try browsing http://www.freebsd.org/ports/graphics.html 
to see if there's something there that sounds better.


HTH,
Micah
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Apache Httpd - Access error

[Rodrigo G. Tavares de Souza]

Hi,

   I'm getting a strange error when I try a direct access to a folder 
in the server.

   If I simple type the machine address in the browser, it works
   Ex: http://200.153.0.100 [it works]
   But, if I type the address with the folder/file name, it doesn't 
work. The address is
translated to the machine name, getting an error, because the isn't a 
DNS to this address.
   I saw the httpd.conf, but there is no reference to machine name or 
domain.


   Ex: http://200.153.0.100/folder [automatic translated to] 
http://machine.domain.com/folder [it doesn't work]


  It also happen in the local network.

  What do I suppose to do?

Best Regards,
Rodrigo Souza
Sao Paulo - Brazil
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: terrible performance in 6.1beta4

[Miguel]

[EMAIL PROTECTED] wrote:


Miguel,

 


you are not inserting into an indexed table, are you?
 


yes, i am...
is that a problem?
   



it used to be a problem, but since your gentoo box is doing the same
task in 4-5 minutes, i doubt it is currently the problem.

i seem to recall some speedup of the copyin-command in one of the
latest releases of PostgreSQL. i don't know the details, maybe they
are deferring index-updates automagically when copying-in ( check
PostgreSQL release notes ).

Miguel, you have not yet confirmed the two
postgresql.conf-files(gentoo vs fbsd) to be identical ( or i missed
that ). please let me know.
 


Yes, thay are identical, except for he shared_buffers,


another issue pops to my mind: on 4.x i had to tweak some sysctl's
regarding shared-memory ( default settings would not allow PGSQL to
claim as much as i would like ). i don't know if this still needs to
be done on 6.x. if i recall correctly, postgresql would not start if
it could not allocate it's shared buffers. things may have changed:
check you postgresql.log to see if it is complaining.

please let us know if you achieved any speed update at all.
 



i increased the shred_buffers to 35% of fisical RAM, that doesnt helped 
very much, neither do fsync off.

thanks for all folks,


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Crash During FreeBSD compilation has left system unbootable

[Paul Wilson]

While working on a FreeBSD modification, during compiling it, the system
hung completely.
It was actually during the 'make install' stage, make had finished by this
point.
I had just added 'device atapicam' to my config file also (i doubt that's
relevant tho?).

Upon reboot, none of my back-up kernels now boot. When I boot the half
compiled
kernel I get:

-
When loading required module 'pci'
int = 000  err = 0 efl = 000
[etc...]

BTX Halted.
-

When trying to boot my back up kernels, I get this error straight away:

--
Fatal Trap 18: integer divide fault while in kernel mode.

intruction pointer = 0x20 : 0xc064f37a
stack pointer   = 0x28 : 0xc0c20c84
frame pointer  = 0x28 : 0xc0c20c94
code segment= base 0x0, limit 0xf, type 0x1b
   = DPL, pres1, def32

processor eflags = interrupt enabled, resume, IOPL = 0
current process   = 0()
[thread pid 0 tid 0]
Stopped at link_elf_lookup_symbol+0x16: divl 0x54 (%ebx), % eax

db> trace
Tracing pid 0 tid 0 td 0xc09322c0
link_elf_lookup_symbol(c2275c00, c2255a60, c0c20cc0, c2255a60, 1c) at
link_elf_lookup_symbol 0x56

link_elf_lookup_set(c2275c00, c0874da6, c0c20d4c, c0c20d50,0) at
link_elf_lookup_set+0x56

link_file_lookup_set(c2275c00, c0874da6, c0c20d4c, c0c20d50,0) at
link_file_lookup_set+0x54

linker_preload(0, c1ec00, c1e000,0,c0445255) at linker_preload + 0c1c3

mi_startup() at mi-startup + 0x96

begin() at begin +0x2c

db>
--

I'd greatly appreciate if anyone can tell me if I can recover from this
problem or if it's completely lost.

Thanks in advance,
Paul
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[M. Warner Losh]

In message: <[EMAIL PROTECTED]>
"Donald J. O'Neill" <[EMAIL PROTECTED]> writes:
: On Friday 31 March 2006 10:37, M. Warner Losh wrote:
: > Bob,
: >
: > Thanks for the tips.  I have these ports installed, but am tripping
: > over something stupidly basic: what converts the pict0001.jpg into
: > something that can be fed to the hpijs driver that will print?
: >
: > Warner
: > ___
: Gimp will do image manipulation as well as print, openoffice, several in 
: kde - kuickshow for one, several in gnome. I just printed a jpg using 
: kuickshow, so I know it will do it. Pretty much, once you've got the 
: jpg off the camera, what you do with it depends on your preferences.

gimp doesn't have my printer listed, and printing .ps to it fails.  Is
there some file I need to put somewhere?

Warner
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Apache Httpd - Access error

[Jim Stapleton]

Have you tried setting up the part I have below here, which occures
right after the server admin email address? The example shows the info
for a test machine I have running on my network at home.


# ServerName gives the name and port that the server uses to identify itself.
# This can often be determined automatically, but we recommend you specify
# it explicitly to prevent problems during startup.
#
# If your host doesn't have a registered DNS name, enter its IP address here.
#
ServerName 192.168.1.95:80



If I remember correctly, I had a similar problem (on a Windows test
machine) as to what you described, and I did not have the ServerName
set.


On 3/31/06, Rodrigo G. Tavares de Souza <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I'm getting a strange error when I try a direct access to a folder
> in the server.
> If I simple type the machine address in the browser, it works
> Ex: http://200.153.0.100 [it works]
> But, if I type the address with the folder/file name, it doesn't
> work. The address is
> translated to the machine name, getting an error, because the isn't a
> DNS to this address.
> I saw the httpd.conf, but there is no reference to machine name or
> domain.
>
> Ex: http://200.153.0.100/folder [automatic translated to]
> http://machine.domain.com/folder [it doesn't work]
>
>It also happen in the local network.
>
>What do I suppose to do?
>
> Best Regards,
> Rodrigo Souza
> Sao Paulo - Brazil
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: flp wont load to floppies

[Jon Krause]

- Original Message - 
From: "A B" Sent: Friday, March 31, 2006 12:02 PM
Subject: flp wont load to floppies


> 1)  either by copying to destop, then floppy,
>   or directly from FTP site,
>   the floppy disks does not have enough space for the
>   release 6.0 disks... boot, fixit, kern1.suggestions?
>
>   2)  I'm using a IBM Thinkpad 600e 400mHz without much sucess.
>   Will FreeBSD install on this machine?
>

Are you attempting to prepare these floppies on a "Windows * " machine?
Are you following the directions in the handbook?

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install-pre.html

Specifically, using "fdimage" to copy the .flp files to (floppy)disk?



>
> -
> New Yahoo! Messenger with Voice. Call regular phones from your PC for low,
low rates.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Sendmail Patch Question

[Sean Murphy]

do I download it ASCII or Binary?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sendmail Patch Question

[Giorgos Keramidas]

On 2006-03-31 10:00, Sean Murphy <[EMAIL PROTECTED]> wrote:
> do I download it ASCII or Binary?

Patches are, in general, text-only files.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Which xorg driver/setup to use to get all the buttons for a Logitech MX518

[Jim Stapleton]

Hello, I had this listed in my question about the appropriate format
to ask many questions (which was answered this morning by a general
question format post to the group). At any rate, I figured I'd make a
fresh-clean question post that was less unpleasnt, and here it is.

I've googled the problem in general, tried looking around xorg and
this site, but I couldn't find any useful information on getting my
MX518 working with all of it's buttons in BSD (were I to downgrade
back to Linux, I could, but I'd rather not do that, ports is much more
useful than the extra three buttons).

At any rate, could someone tell me what driver to use, and what device
to point it to? Right now I just have the xorg defualt setup, with the
options to tell it to use the scroll wheel and 10 buttons (although
it's only able to handle 7).

Thanks,
-Jim Stapleton
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[Donald J. O'Neill]

On Friday 31 March 2006 11:56, M. Warner Losh wrote:
> In message: <[EMAIL PROTECTED]>
>
> "Donald J. O'Neill" <[EMAIL PROTECTED]> writes:
> : On Friday 31 March 2006 10:37, M. Warner Losh wrote:
> : > Bob,
> : >
> : > Thanks for the tips.  I have these ports installed, but am
> : > tripping over something stupidly basic: what converts the
> : > pict0001.jpg into something that can be fed to the hpijs driver
> : > that will print?
> : >
> : > Warner
> : > ___
> :
> : Gimp will do image manipulation as well as print, openoffice,
> : several in kde - kuickshow for one, several in gnome. I just
> : printed a jpg using kuickshow, so I know it will do it. Pretty
> : much, once you've got the jpg off the camera, what you do with it
> : depends on your preferences.
>
> gimp doesn't have my printer listed, and printing .ps to it fails. 
> Is there some file I need to put somewhere?
>
> Warner

Are you using cups? Or something else? If you have your printer working 
under cups, then I would think that gimp would print to it. I remember 
when I was using an HP2000c, it wasn't listed under gimp either, but I 
was able to install it there because I was able to use it with cups. 
Failing that, there are other programs you can use to print the 
adjusted jpg file, kuickshow is one, openoffice2.0.2 has several, kde 
has several besides kuickshow, gnome2 has several.

Warner, I know you are expert on FreeBSD, and know you know your way 
around a computer at least as well as I do, if not better, I have 
several emails from you concerning ACPI, and you show up in various 
other lists that I belong to, so I know who you are. My question to you 
is: do you have some hidden reason for showing up on questions and 
acting like a newbie, or are you sincerely looking for help here. With 
the hand holding your asking for, I'm beginning to wonder. If you do 
in-fact, need the help, then you should know that without providing 
information, that you haven't been volunteering, we aren't going to get 
anywhere fast. 

Don
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sendmail Patch Question

[Sean Murphy]

Giorgos Keramidas wrote:

On 2006-03-31 10:00, Sean Murphy <[EMAIL PROTECTED]> wrote:

do I download it ASCII or Binary?


Patches are, in general, text-only files.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



Ok I installed the patch and did the make and install according to the 
instructions.  How do I check to see if the patch is applied?  does the 
make install restart the sendmail daemon automatically?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: DHCPD config

[Kris Anderson]

--- fbsd_user <[EMAIL PROTECTED]> wrote:

> I use dhcp client to get the info needed from my ISP
> at boot time.
> I also run dhcpd for issuing ip address to my LAN.
> 
> In the dhcpd.conf file I have option statement for
> the
> ISP's dns ip address like this:
> 
> option domain-name-servers xx.168.xxx.6,
> xx.168.xxx.7;
> 
> the xx are just for this post.
> 
> How can I change this so dhcpd will automatically
> use the
> dns ip address the dhcp client gets so when the ISP
> changes
> the ip address of the dns to use the change will
> also effect dhcpd?
> 
> ___
> freebsd-questions@freebsd.org mailing list
>
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
Hey there,

I think the answer you are looking for lies in
dhclient-script. I noticed it futzes with resolv.conf.
If you happen to notice resolv.conf changing (You can
test this about by making a backup of resolv.conf,
erasing its contents and then rebooting the machine,
just for the sake of everything running properly and
seeing if the contents of resolv.conf get repopulated
with your ISPs DNS settings) then you can create a
script to grab the elements needed from the ISP and
drop them in to a file for dhcpd to read and then
SIGTERM dhcpd and restart it.

In man dhcpd there is a hint about these two items:
omapi, dhcpctl. The omapi (A way to control the dhcpd
process without having to shut it down, or so the man
page claims) man page seems to exist while the dhcpctl
one does not, nor does the command exist (I was able
to find it in source though).

Hope that helps you in your quest.

~Mr. Anderson

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

bootable FreeBSD on USB-Flash-Drive [SOLUTION]

[Grossmann Martin]

a little success story with freebsd and a tiny usb stick:
[tried with FreeBSD 6.1-BETA4 install-cd and a kingston 256MB
usb-flash-drive]

prepare yourself to work on the command-line ;-)
- attach the usb-stick to the server
- boot the freebsd installation cd-rom
- go to the "fixit" shell
- CHECK YOUR DMESG WHAT DEVICE YOUR USB STICK ACTUALLY IS!!! (here /dev/da0)

create the future "/"-filesystem on your usb-drive:

wipe everything on the usb-drive:
# dd if=/dev/zero of=/dev/da0 bs=1m
create a new partition table on it with a default slice 1 and make it
bootable
# fdisk -BI /dev/da0
label it for booting freebsd:
# bsdlabel -wB /dev/da0s1
you'll have to edit the disklabel (sometimes you'll have to: # export
EDITOR=/mnt2/usr/bin/vi):
# bsdlabel -e /dev/da0s1
... and change partition a from "unused" to "4.2BSD" as partition type
create the future "/" a.k.a. root-filesystem on it:
# newfs -m 0 -o space /dev/da0s1a

mount the filesystem for installation:
# mount /dev/da0s1a /mnt

install freebsd on /mnt:
# export DESTDIR=/mnt
# cd /dist/
# for i in base manpages catpages
# do
#   cd $i; echo y|./install.sh; cd ..;
# done

go to the kernels directory and install a kernel of your choice:
[default is GENERIC kernel; change to "smp" for smp-machines]
# rmdir /mnt/boot/kernel
# cd kernels;
# cat generic.??|tar --unlink -xpzf - -C /mnt/boot
# cd /mnt/boot && mv GENERIC kernel

now, tell freebsd to mount the right root-filesystem:
# echo "/dev/da0  /  ufs  rw,noatime  1  1" >/mnt/etc/fstab

create your rc.conf.local in /mnt/etc to redefine some settings:
# cat 

Re: Best way to print photos

[M. Warner Losh]

In message: <[EMAIL PROTECTED]>
"Donald J. O'Neill" <[EMAIL PROTECTED]> writes:
: On Friday 31 March 2006 11:56, M. Warner Losh wrote:
: > In message: <[EMAIL PROTECTED]>
: >
: > "Donald J. O'Neill" <[EMAIL PROTECTED]> writes:
: > : On Friday 31 March 2006 10:37, M. Warner Losh wrote:
: > : > Bob,
: > : >
: > : > Thanks for the tips.  I have these ports installed, but am
: > : > tripping over something stupidly basic: what converts the
: > : > pict0001.jpg into something that can be fed to the hpijs driver
: > : > that will print?
: > : >
: > : > Warner
: > : > ___
: > :
: > : Gimp will do image manipulation as well as print, openoffice,
: > : several in kde - kuickshow for one, several in gnome. I just
: > : printed a jpg using kuickshow, so I know it will do it. Pretty
: > : much, once you've got the jpg off the camera, what you do with it
: > : depends on your preferences.
: >
: > gimp doesn't have my printer listed, and printing .ps to it fails. 
: > Is there some file I need to put somewhere?
: >
: > Warner
: 
: Are you using cups? Or something else? If you have your printer working 
: under cups, then I would think that gimp would print to it.

I have cups running.  I'd have thought that too, so I'm doing
something insanely stupid.  I can print to my other HP printer, but it
understands .ps natively.  If the answer to printing from gimp is
'just print a .ps' then I'm happy.

: I remember 
: when I was using an HP2000c, it wasn't listed under gimp either, but I 
: was able to install it there because I was able to use it with cups. 
: Failing that, there are other programs you can use to print the 
: adjusted jpg file, kuickshow is one, openoffice2.0.2 has several, kde 
: has several besides kuickshow, gnome2 has several.

I can print test pages with the CUPS interface w/o a problem.  I'll
try directly printing a simple color PS document next.  I just
realized that I haven't tried to do that yet.

: Warner, I know you are expert on FreeBSD, and know you know your way 
: around a computer at least as well as I do, if not better, I have 
: several emails from you concerning ACPI, and you show up in various 
: other lists that I belong to, so I know who you are. My question to you 
: is: do you have some hidden reason for showing up on questions and 
: acting like a newbie, or are you sincerely looking for help here. With 
: the hand holding your asking for, I'm beginning to wonder. If you do 
: in-fact, need the help, then you should know that without providing 
: information, that you haven't been volunteering, we aren't going to get 
: anywhere fast. 

The reason is that I've been trying to get printing working for
something like ages.  I've fought cups, hpijs, etc many times in the
past.  I picked bad times, in retrospect, to try to use these tools
since they were broken in some subtle way at the time.  I'm frustrated
and need a little hand-holding.  I think I might have earned a little
bit of it from the years of kernel related help I've given out :-).
I've not focused on printing on FreeBSD much at all since until the
latest color printer I got, good old lpr/lpd has been enough.

I'm not sure what information to provide.  I do understand its need.
I'm somewhat new to the image processing side of printing, so am
acting like a totale newbie because in some ways I am :-).

I'm doing multiple printer/scanner projects at the same time.  I have
a network connected HP LaserJet 2200 that's working great under both
lpr and cups.  I have a network connected HP DeskJet 5850 that's not
working at all under lpr/FreeBSD, but I can at least print test pages
on under CUPS.  It works great from Windows.  I also have a usb
connected HP OfficeJet 4200 scanner/printer/fax that I'm trying to get
scanning working on, but that's on a completely different
machine/different story :-).

Warner
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Portupgrad Problem

[Cody Holland]

Using FreeBSD 5.4-Stable #0.  Trying to update my ports using portsnap,
pkg_version, and portupgrade.  All goes well until I get to portupgrade
-arR.  All my ports update except for of them.  Here is the message I
get:

# portupgrade -arR
cd: can't cd to /usr/ports/archivers/pear-Archive_Tar
cd: can't cd to /usr/ports/devel/pear-Console_Getopt
cd: can't cd to /usr/ports/devel/pear-XML_RPC
cd: can't cd to /usr/ports/devel/php4-pear
** Package 'php4-pear' has been removed from ports tree.
** Port directory not found: devel/php4-pear
** Package 'pear-Console_Getopt' has been removed from ports tree.
** Port directory not found: devel/pear-Console_Getopt
** Package 'pear-XML_RPC' has been removed from ports tree.
** Port directory not found: devel/pear-XML_RPC
** Package 'pear-Archive_Tar' has been removed from ports tree.
** Port directory not found: archivers/pear-Archive_Tar
** Listing the failed packages (*:skipped / !:failed)
!  (php4-pear-4.4.1_1)  (port directory error)
!  (pear-Console_Getopt-1.2)(port directory error)
!  (pear-XML_RPC-1.4.3) (port directory error)
!  (pear-Archive_Tar-1.3.1) (port directory error)
--->  Packages processed: 0 done, 73 ignored, 0 skipped and 4 failed

I know this is telling me that there is no ports directory for these
ports...and there isn't one.  I just don't know what to do, to correct
this.  Any advice would greatly be appreciated.

Thanks,
Cody
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: getop.h conflict when building audio/akode

[Michael Nottebrock]

Olivier Nicole schrieb:
>> Deinstall the libgnugetopt port - it's only needed on FreeBSD releases earl=
>> ier=20
>> than 5.x and causes buildtime errors on later versions (as you found out).
> 
> Thanks. After I managed to rebuild audio/akode, it seems that it was not
> depending on libgnugetopt anymore.
> 
> I cannot get rid of libgnugetopt though because it is needed for
> libmal (?) thatis needed for KDE.

You can. All functionality that libgnugetopt provides is now included in
FreeBSD's libc.

It's pretty unlikely that you have anything left on your system that
actually *links* to libgnugetopt by now - just deinstalling it and
deleting the recorded dependencies afterwards with pkgdb -F will most
likely work just fine. If you want to make absolutely sure, delete
libgnugetopt and then recompile every port that had a dependency on it
recorded.

Cheers,
-- 
   ,_,   | Michael Nottebrock   | [EMAIL PROTECTED]
 (/^ ^\) | FreeBSD - The Power to Serve | http://www.freebsd.org
   \u/   | K Desktop Environment on FreeBSD | http://freebsd.kde.org



signature.asc
Description: OpenPGP digital signature

Re: Starting privoxy at startup

[Oliver Iberien]

Sorry to drag this out, but I still have not got this to work. I've looked at 
the permissions of the files involved but nothing untoward shows up. I think. 
There is just the conf file and the stuff in /var/log, right? How should 
their permissions look?

If I wanted to have two flags for privoxy in rc.conf -- the one below and one 
pointing to /usr/local/etc/privoxy/conf -- what would that look like? 

Thanks,

Oliver

On Monday 27 March 2006 10:16, you wrote:
> > Still not working yet... Yes, thank you, I'll take you up on your offer
> > of a configuration file.
>
> Here's /usr/local/etc/privoxy.sh.  Remember, try just these two lines in
> /etc/rc.conf:
>
>  privoxy_enable="YES"
>  privoxy_flags="-- user privoxy"
>
> Pete
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reprocessing sendmail failed messages

[Tim Traver]

Hi All,

ok, I know this isn't the right list, but I've already tried the 
sendmail group, and no response, so I'm hoping that there might be some 
sendmail gurus on this list that can help me...


After a temporary DNS outage, several machines that we run have email
messages on them that sendmail attempted to relay to our mail
cluster, but failed because they could not find the host name of the
server they were relaying to.

So, now, I have hundreds of messages in the clientmqueue directory that
are marked as having permanent fatal errors. The top of the d file
looks like this :

  - The following addresses had permanent fatal errors -
[EMAIL PROTECTED]
   (reason: 550 Host unknown)

  - Transcript of session follows -
550 5.1.2 [EMAIL PROTECTED] Host unknown (Name server:
..com: host not found)

I see that there are many of these message that are important, and
want to save and send them.

Is there a way to get sendmail to re-attempt to send these messages ? I
think it just ignores them right now because of those lines.

Any help would be greatly appreciated,

Tim.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: flp wont load to floppies

[Andy Greenwood]

right, if you are trying to copy the image directly to a fat16 (windows
format) floppy disk, you might run out of room because the fat16 fs takes up
some space on the disk. Also, the disks might be bad and be covered with bad
sectors that you can't use. Make sure you are doing it the right way and try
some other disks too. The last time I installed, I had to boot from floppy
and went through about 4 or 5 disks before I had enough good ones.

On 3/31/06, Jon Krause <[EMAIL PROTECTED]> wrote:
>
>
> - Original Message -
> From: "A B" Sent: Friday, March 31, 2006 12:02 PM
> Subject: flp wont load to floppies
>
>
> > 1)  either by copying to destop, then floppy,
> >   or directly from FTP site,
> >   the floppy disks does not have enough space for the
> >   release 6.0 disks... boot, fixit, kern1.suggestions?
> >
> >   2)  I'm using a IBM Thinkpad 600e 400mHz without much sucess.
> >   Will FreeBSD install on this machine?
> >
>
> Are you attempting to prepare these floppies on a "Windows * " machine?
> Are you following the directions in the handbook?
>
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install-pre.html
>
> Specifically, using "fdimage" to copy the .flp files to (floppy)disk?
>
>
>
> >
> > -
> > New Yahoo! Messenger with Voice. Call regular phones from your PC for
> low,
> low rates.
> > ___
> > freebsd-questions@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> [EMAIL PROTECTED]"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

kde plugins -- getting konqueror to play .wmv files?

[Oliver Iberien]

I have installed mplayer, its codecs, and kmplayer from the ports on FreeBSD 
6.0, and am trying to get konqueror to play embedded wmv's. 

I get an error saying that the plugin for application type x-mplayer2 has not 
been found. I checked the kmplayer port to see where it put the plugin. It's 
at /usr/local/lib/kde3/libkmplayerpart.so. I check the plugin paths. Not only 
is /usr/local/lib/kde3/ not included, konqueror seems to have registered only 
one plugin, "Netscape plugins." 

I add this path and tell it to scan for new plugins. It gets to 20%, then 
crashes, starts up and crashes, and does this a few more times. It seems to 
take chunks of my file associations with it, as I start getting random 
"application type octet-stream" errors when KDE applications start, and I 
have to go fix that 
(http://www.mepislovers.org/modules/newbb/viewtopic.php?topic_id=15061&forum=9).

Does anyone know how to get konqueror to accept plugins, this one especially, 
and get this to work?

Oliver
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Crash During FreeBSD compilation has left system unbootable

[Kris Anderson]

--- Paul Wilson <[EMAIL PROTECTED]> wrote:

> While working on a FreeBSD modification, during
> compiling it, the system
> hung completely.
> It was actually during the 'make install' stage,
> make had finished by this
> point.
> I had just added 'device atapicam' to my config file
> also (i doubt that's
> relevant tho?).
> 
> Upon reboot, none of my back-up kernels now boot.
> When I boot the half
> compiled
> kernel I get:
> 
> -
> When loading required module 'pci'
> int = 000  err = 0 efl = 000
> [etc...]
> 
> BTX Halted.
> -
> 
> When trying to boot my back up kernels, I get this
> error straight away:
> 
> --
> Fatal Trap 18: integer divide fault while in kernel
> mode.
> 
> intruction pointer = 0x20 : 0xc064f37a
> stack pointer   = 0x28 : 0xc0c20c84
> frame pointer  = 0x28 : 0xc0c20c94
> code segment= base 0x0, limit 0xf, type 0x1b
>= DPL, pres1, def32
> 
> processor eflags = interrupt enabled, resume, IOPL =
> 0
> current process   = 0()
> [thread pid 0 tid 0]
> Stopped at link_elf_lookup_symbol+0x16: divl 0x54
> (%ebx), % eax
> 
> db> trace
> Tracing pid 0 tid 0 td 0xc09322c0
> link_elf_lookup_symbol(c2275c00, c2255a60, c0c20cc0,
> c2255a60, 1c) at
> link_elf_lookup_symbol 0x56
> 
> link_elf_lookup_set(c2275c00, c0874da6, c0c20d4c,
> c0c20d50,0) at
> link_elf_lookup_set+0x56
> 
> link_file_lookup_set(c2275c00, c0874da6, c0c20d4c,
> c0c20d50,0) at
> link_file_lookup_set+0x54
> 
> linker_preload(0, c1ec00, c1e000,0,c0445255) at
> linker_preload + 0c1c3
> 
> mi_startup() at mi-startup + 0x96
> 
> begin() at begin +0x2c
> 
> db>
> --
> 
> I'd greatly appreciate if anyone can tell me if I
> can recover from this
> problem or if it's completely lost.
> 
> Thanks in advance,
> Paul
None of your kernels?
Found this in the handbook -
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-trouble.html

You might also want to see if you have a rescue disk
handy, the worst case you can do a reinstall of just
the kernel items and their sources.

Hope that helps.

~mr. anderson

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: DHCPD config

[Lowell Gilbert]

Kris Anderson <[EMAIL PROTECTED]> writes:

> I think the answer you are looking for lies in
> dhclient-script. I noticed it futzes with resolv.conf.
> If you happen to notice resolv.conf changing (You can
> test this about by making a backup of resolv.conf,
> erasing its contents and then rebooting the machine,
> just for the sake of everything running properly and
> seeing if the contents of resolv.conf get repopulated
> with your ISPs DNS settings) then you can create a
> script to grab the elements needed from the ISP and
> drop them in to a file for dhcpd to read and then
> SIGTERM dhcpd and restart it.

Basically, "have dhclient-script rewrite the dhcpd.conf".

Running your own nameserver and pointing the internal DHCP clients to
it is another option, but slightly less resistant to failures.  Doing
both will get you the best of both worlds.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Reprocessing sendmail failed messages

[Kris Anderson]

--- Tim Traver <[EMAIL PROTECTED]> wrote:

> Hi All,
> 
> ok, I know this isn't the right list, but I've
> already tried the 
> sendmail group, and no response, so I'm hoping that
> there might be some 
> sendmail gurus on this list that can help me...
> 
> After a temporary DNS outage, several machines that
> we run have email
> messages on them that sendmail attempted to relay to
> our mail
> cluster, but failed because they could not find the
> host name of the
> server they were relaying to.
> 
> So, now, I have hundreds of messages in the
> clientmqueue directory that
> are marked as having permanent fatal errors. The top
> of the d file
> looks like this :
> 
>- The following addresses had permanent fatal
> errors -
> [EMAIL PROTECTED]
> (reason: 550 Host unknown)
> 
>- Transcript of session follows -
> 550 5.1.2 [EMAIL PROTECTED] Host unknown (Name
> server:
> ..com: host not found)
> 
> I see that there are many of these message that are
> important, and
> want to save and send them.
> 
> Is there a way to get sendmail to re-attempt to send
> these messages ? I
> think it just ignores them right now because of
> those lines.
> 
> Any help would be greatly appreciated,
> 
> Tim.
> ___
> freebsd-questions@freebsd.org mailing list
>
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
Hey there Tim,

Found this with google.
http://lists.freebsd.org/pipermail/freebsd-questions/2004-June/049850.html

A Dr Matthew had this answer (read full text to see
what's up but here's a snippet)

If you end up with a load of messages stuck in
/var/spool/clientmqueue, you've got a similar problem
with not running
a MSP queue daemon.  The case is exactly analogous,
except that the
sendmail flags are in
/var/spool/clientmqueue/sm-client.pid and should
read:

/usr/sbin/sendmail -L sm-msp-queue -Ac -q30m

and you need to set 'sendmail_msp_queue_flags' in
/etc/rc.conf to
override them.

-

Hope that helps.

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam
protection around 
http://mail.yahoo.com 

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: flp wont load to floppies

[Daan Vreeken [PA4DAN]]

Hi A B,

On Friday 31 March 2006 19:02, A B wrote:
> 1)  either by copying to destop, then floppy,
>   or directly from FTP site,
>   the floppy disks does not have enough space for the
>   release 6.0 disks... boot, fixit, kern1.suggestions?

The *.flp files are byte-for-byte images of the floppy, not files you should 
place on a floppy. If you want to create FreeBSD install-floppies from DOS or 
Windows you need the "fdimage.exe" utility. You can find it on a FreeBSD ftp 
server in the "tools" directory.

For details on how to use "fdimage" see (section 1.3) :
http://www.freebsd.org/relnotes/6-STABLE/installation/i386/index.html

>   2)  I'm using a IBM Thinkpad 600e 400mHz without much sucess.
>   Will FreeBSD install on this machine?

It should. I run FreeBSD on much older systems.

Good luck,
Daan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sendmail Patch Question

[Giorgos Keramidas]

On 2006-03-31 10:23, Sean Murphy <[EMAIL PROTECTED]> wrote:
> Giorgos Keramidas wrote:
> >On 2006-03-31 10:00, Sean Murphy <[EMAIL PROTECTED]> wrote:
> >>do I download it ASCII or Binary?
> >
> >Patches are, in general, text-only files.
>
> Ok I installed the patch and did the make and install according to the
> instructions.  How do I check to see if the patch is applied?  does the
> make install restart the sendmail daemon automatically?

Nope.  You can do that manually though:

# cd /etc/mail
# make restart

This should take care of it.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Starting privoxy at startup

[Fabian Keil]

Oliver Iberien <[EMAIL PROTECTED]> wrote:

> Sorry to drag this out, but I still have not got this to work. I've
> looked at the permissions of the files involved but nothing untoward
> shows up. I think. There is just the conf file and the stuff
> in /var/log, right? How should their permissions look?

If you comment out

\
1>/dev/null 2>&1

in the start script, Privoxy should give you a reason why it
doesn't start.

And no, Privoxy also needs at least read access to the filter
and action files. Read access to the templates will be appreciated
as well, but shouldn't cause start problems.

You probably want Privoxy to be able to write to the action files,
otherwise you can't modify them with the web interface.
 
> If I wanted to have two flags for privoxy in rc.conf -- the one below
> and one pointing to /usr/local/etc/privoxy/conf -- what would that
> look like? 

I believe you can change the configfile only in the start
script itself.

Fabian
-- 
http://www.fabiankeil.de/


signature.asc
Description: PGP signature

jvmdiEnterTrace.cpp

[Aguiar Magalhaes]

Hi List,

I´m compiling JDK 1.5 on freebsd 6.0 (using ports) and
I've received a error, because the code
jvmEnterTrace.cpp is break...

It's in
/usr/ports/java/jdk15/work/control/build/bsd-i586/hotspot-i586/tmp/bsd_i486_compiler2/generated/jvmtifiles/jvmdiEnterTrace.cpp

Can I download it again ??  Where ??

How can I fix it ??

Help me please,

Aguiar




___ 
Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular e 
anti-spam realmente eficaz. 
http://br.info.mail.yahoo.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Python import not working after update

[Tom Grove]

I updated to 6.0-p6 and for some reason I can't run any python scripts 
that use import?  For example:


ImportError: Shared object "libmysqlclient_r.so.14" not found, required 
by "_mysql.so"


It seems like the python module for mysql can't find libraries it 
needs.  Any help would be much appreciated.


-Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Portupgrad Problem

[Peter]

--- Cody Holland <[EMAIL PROTECTED]> wrote:

> Using FreeBSD 5.4-Stable #0.  Trying to update my ports using
> portsnap,
> pkg_version, and portupgrade.  All goes well until I get to
> portupgrade
> -arR.  All my ports update except for of them.  Here is the message I
> get:
> 
> # portupgrade -arR
> cd: can't cd to /usr/ports/archivers/pear-Archive_Tar
> cd: can't cd to /usr/ports/devel/pear-Console_Getopt
> cd: can't cd to /usr/ports/devel/pear-XML_RPC
> cd: can't cd to /usr/ports/devel/php4-pear
> ** Package 'php4-pear' has been removed from ports tree.
> ** Port directory not found: devel/php4-pear
> ** Package 'pear-Console_Getopt' has been removed from ports tree.
> ** Port directory not found: devel/pear-Console_Getopt
> ** Package 'pear-XML_RPC' has been removed from ports tree.
> ** Port directory not found: devel/pear-XML_RPC
> ** Package 'pear-Archive_Tar' has been removed from ports tree.
> ** Port directory not found: archivers/pear-Archive_Tar
> ** Listing the failed packages (*:skipped / !:failed)
> !  (php4-pear-4.4.1_1)  (port directory error)
> !  (pear-Console_Getopt-1.2)(port directory error)
> !  (pear-XML_RPC-1.4.3) (port directory error)
> !  (pear-Archive_Tar-1.3.1) (port directory error)
> --->  Packages processed: 0 done, 73 ignored, 0 skipped and 4 failed
> 
> I know this is telling me that there is no ports directory for these
> ports...and there isn't one.  I just don't know what to do, to
> correct
> this.  Any advice would greatly be appreciated.

Update your ports tree.  See the Handbook for this.


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: formating a disk

[Albert Shih]

 Le 31/03/2006 à 06:34:16+0200, Albert Shih a écrit
>  Le 30/03/2006  20:19:17-0500, Jerry McAllister a écrit
> > > 
> > 
> > I wonder what exactly you mean by 'format'.
> > We don't tend to use that word to mean making slices (fdisk), 
> > partitions (disklabel/bsdlabel) or file systems (newfs).
> > 
> > Usually format refers to something done at the very low leval of
> > the drive and is normally only done at the manufacturer nowdays.
> > I expect you mean one or more of the others, but cannot say.
> > 
> > But, anyway, that is what you need to do - in that order.  
> >   fdisk,  disk/abel/bsdlabel,  newfs
> > 
> > So, try and explain what you have done using these utilities if
> > you have and if you haven't, then check them out and see if
> > that helps.   If you really did a "format" under XP, then I think
> > you can just start over with fdisk, but I haven't tried that on
> > a hard disk much less a firewire device.
> 
> First I try to edit the slice with fdisk but when he need to write I've 
> got
> 
> Information from DOS bootblock is:
> 1: sysid 165 (0xa5),(FreeBSD/NetBSD/386BSD)
> start 63, size 156296322 (76316 Meg), flag 80 (active)
> beg: cyl 1/ head 1/ sector 1;
> end: cyl 512/ head 254/ sector 63
> 2: 
> 3: 
> 4: 
> Should we write new partition table? [n] y
> fdisk: Geom not found
> [EMAIL PROTECTED] rc.d]#
> 
> What's that mean ?
> How can I fix that ?
> 
I answer to myself


After

dd if=/dev/zero of=/dev/da0 bs=1k count=100

it's ... not working but after

dd if=/dev/zero of=/dev/da0 bs=1k count=10

everything work fine.

Thanks.


--
Albert SHIH
Universite de Paris 7 (Denis DIDEROT)
U.F.R. de Mathematiques.
7 ième étage, plateau D, bureau 10
Heure local/Local time:
Fri Mar 31 21:41:04 CEST 2006
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: formating a disk

[Jerry McAllister]

> 
>  Le 31/03/2006 à 06:34:16+0200, Albert Shih a écrit
> >  Le 30/03/2006  20:19:17-0500, Jerry McAllister a écrit
> > > > 
> > > 
> > > I wonder what exactly you mean by 'format'.
> > > We don't tend to use that word to mean making slices (fdisk), 
> > > partitions (disklabel/bsdlabel) or file systems (newfs).
> > > 
> > > Usually format refers to something done at the very low leval of
> > > the drive and is normally only done at the manufacturer nowdays.
> > > I expect you mean one or more of the others, but cannot say.
> > > 
> > > But, anyway, that is what you need to do - in that order.  
> > >   fdisk,  disk/abel/bsdlabel,  newfs
> > > 
> > > So, try and explain what you have done using these utilities if
> > > you have and if you haven't, then check them out and see if
> > > that helps.   If you really did a "format" under XP, then I think
> > > you can just start over with fdisk, but I haven't tried that on
> > > a hard disk much less a firewire device.
> > 
> > First I try to edit the slice with fdisk but when he need to write I've 
> > got
> > 
> > Information from DOS bootblock is:
> > 1: sysid 165 (0xa5),(FreeBSD/NetBSD/386BSD)
> > start 63, size 156296322 (76316 Meg), flag 80 (active)
> > beg: cyl 1/ head 1/ sector 1;
> > end: cyl 512/ head 254/ sector 63
> > 2: 
> > 3: 
> > 4: 
> > Should we write new partition table? [n] y
> > fdisk: Geom not found
> > [EMAIL PROTECTED] rc.d]#
> > 
> > What's that mean ?
> > How can I fix that ?
> > 
> I answer to myself
> 
> After
> 
>   dd if=/dev/zero of=/dev/da0 bs=1k count=100
> 
> it's ... not working but after
> 
>   dd if=/dev/zero of=/dev/da0 bs=1k count=10
> 
> everything work fine.

Ah, yes.   You got hit by that one.  I have a couple of times and almost
mentioned it, but was unsure of how you were using the terminology so I
didn't want to add any more to the issue just then.

I don't know just why that happens sometimes -- someone else might 
be able to explain.  Some fragment of left over data must confuse 
things.  But using the dd as you mention above does seem to fix it 
and that step is indicated in the bsdlabel man page, although not 
in a very enlightening manner.

So, good luck,

jerry

> 
> Thanks.
> 
> --
> Albert SHIH
> Universite de Paris 7 (Denis DIDEROT)
> U.F.R. de Mathematiques.
> 7 ième étage, plateau D, bureau 10
> Heure local/Local time:
> Fri Mar 31 21:41:04 CEST 2006
> 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Reprocessing sendmail failed messages

[Robert Huff]

Kris Anderson writes:

>  Found this with google.
>  http://lists.freebsd.org/pipermail/freebsd-questions/2004-June/049850.html
>  
>  A Dr Matthew had this answer (read full text to see what's up but
>  here's a snippet)
>  
>  If you end up with a load of messages stuck in
>  /var/spool/clientmqueue, you've got a similar problem with not
>  running a MSP queue daemon.  The case is exactly analogous,
>  except that the sendmail flags are in
>  /var/spool/clientmqueue/sm-client.pid and should read:
>  
>  /usr/sbin/sendmail -L sm-msp-queue -Ac -q30m
>  
>  and you need to set 'sendmail_msp_queue_flags' in /etc/rc.conf to
>  override them.

Or:
1) cd /etc/mail
2) make stop
3) make start
4) ps -ax | grep sendmand you should see something like:

 1153  ??  Ss 0:14.88 sendmail: accepting connections (sendmail)
 1156  ??  IWs0:00.00 sendmail: Queue [EMAIL PROTECTED]:30:00 for 
/var/spool/client
15854  p6  S+ 0:00.01 grep sendm


This method uses the same scripts invoked at boot, and will
automatically read the various "sendmail_" variables out of rc.conf.


Robert Huff


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Can FreeBSD safely use a (un-booted from) drive that is invisible to the BIOS?

[Danny MacMillan]

Hi,

I have a machine with the following two drives (as listed in dmesg):

ad0: 12427MB  at ata0-master UDMA33
ad2: 76319MB  at ata1-master UDMA33

ad0 is the boot drive.  It is recognized by the BIOS, obviously, and
has been in the machine for some years.  ad2 is a new drive I just
added to the machine yesterday.  It is not visible to the BIOS at all.
If anyone can posit a reason it would not be visible to the BIOS, I
would like to know the answer.  The BIOS supports LBA and ad0 is more
than 8GB so it wouldn't appear to be the 8GB limit, and the next limit
I am aware of is comfortably larger than 76GB.

At any rate ... it is not visible to the BIOS, but it is visible to
FreeBSD.  Since I'm not booting from the drive, I think it shouldn't
matter ... but when I use Fdisk from sysinstall I get the following
familiar error message:

|WARNING:  A geometry of 155061/16/63 for ad2 is incorrect.  Using  ?
?a more likely geometry.  If this geometry is incorrect or you  ?
?are unsure as to whether or not it's correct, please consult   ?
?the Hardware Guide in the Documentation submenu or use the ?
?(G)eometry command to change it now.   ?
?   ?
?Remember: you need to enter whatever your BIOS thinks the  ?
?geometry is!  For IDE, it's what you were told in the BIOS ?
?setup. For SCSI, it's the translation mode your controller is  ?
?using.  Do NOT use a ``physical geometry''.|

Since I don't actually know what the BIOS thinks the geometry is,
I got cold feet and decided to ask the list.  I don't =think= it
should matter, since the BIOS shouldn't ever touch the disk, at least
as far as my understanding goes.

I do have one concern.  This drive was purchased more or less to act
as an emergency backup of the drive that's already in there.  If ad0
ever fails, ad2 drive will have to be put in a new machine whose BIOS
recognizes it in order to boot.  If I accept the mystery geometry for
the drive today, will I later face a problem where the BIOS disagrees
and the drive will be unbootable?

Thank you for your kind attention.

-- 
Danny MacMillan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sendmail Patch Question

[Sean Murphy]

Giorgos Keramidas wrote:

On 2006-03-31 10:23, Sean Murphy <[EMAIL PROTECTED]> wrote:

Giorgos Keramidas wrote:

On 2006-03-31 10:00, Sean Murphy <[EMAIL PROTECTED]> wrote:

do I download it ASCII or Binary?

Patches are, in general, text-only files.

Ok I installed the patch and did the make and install according to the
instructions.  How do I check to see if the patch is applied?  does the
make install restart the sendmail daemon automatically?


Nope.  You can do that manually though:

# cd /etc/mail
# make restart

This should take care of it.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



Ok I just did the make restart.  Everything is good but the version 
number did not change.  How do I know the patch was applied?  Is there 
some command I can use to check?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

idesk, rox, and icewm

[Logan McNaughton]

Okay, im trying to use icewm with rox and idesk, I start icewm, then start
rox pinboard, then idesk, but idesk always starts behind the rox pinboard
backdrop and I cant see the idesk. I went into winoptions for icewm, and
changed ROX-Pinboard.layer to behind (says to do that in the rox manual),
still cant see idesk, then i change idesk.layer to OnTop, still cant see it,
any suggestions?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[Bob Johnson]

On 3/31/06, M. Warner Losh <[EMAIL PROTECTED]> wrote:
> In message: <[EMAIL PROTECTED]>
> "Bob Johnson" <[EMAIL PROTECTED]> writes:
> : On 3/31/06, M. Warner Losh <[EMAIL PROTECTED]> wrote:
> : > Let us suppose that I have a HP DeskJet 5850 that I can talk to via
> : > CUPS.  I can print test pages w/o any problem.
> : >
> : > What are my options to print photos and what kind of quality can I
> : > expect relative to Windows?
> : >
> :
> : According to
> http://www.linuxprinting.org/show_printer.cgi?recnum=HP-DeskJet_5850,
> : HP's HPIJS driver gives "excellent" photo quality with HP printers.
> : One reviewer says that the quality at high resolution isn't quite as
> : good as Windows, but it isn't clear whether that means high-resolution
> : "normal" mode, or photo mode, or both.
> :
> : ports/print/foomatic-db-hpijs and  /ports/print/hpijs
>
> Bob,
>
> Thanks for the tips.  I have these ports installed, but am tripping
> over something stupidly basic: what converts the pict0001.jpg into
> something that can be fed to the hpijs driver that will print?
>
> Warner
>

In principle, an application feeds it to CUPS, CUPS feeds it to
GhostScript, and GhostScript uses the HPIJS driver to print it. Or
something like that.  In practice, I use APSFILTER instead of CUPS,
and I haven't ever tried to do photo printing from FreeBSD, although
getting my wife's HP photo printer working with FreeBSD is on my list
of things to do this weekend, or next weekend, or maybe the weekend
after that.

The process works for printing JPEGs from web pages on my laser
printer (although not with HPIJS), and since the HPIJS driver is
supposed to autodetect photo paper in your printer, I would expect it
to "just work" for photos if you can print a web page with it.

As for a specific application, The Gimp knows something about printing
photos, but again, I haven't actually done it.   Digikam also looks
very promising as a photo manipulation tool.  Anything that can
display it and knows how to print ought to do it (kview for example?).
I'm sure someone with actual experience can provide a more complete
answer.;-)

So far, I've printed from the Gimp by writing the file to a USB
thumbdrive, and plugging that into the photo printer.  The Gimp will
let you define the picture dimensions in inches, which may be
necessary to get the printing results you want.  Otherwise you may end
up with a picture that is 1 x 1.5 inches, or one point by one point,
or a piece of an 8x10 printed on 4x6 paper, or any of several other
possible defaults I've managed to print in the past.  Some printers
also do bad things if the image has too many pixels (or maybe bytes),
so I've sometimes needed to reduce the image resolution before
printing.

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Thunderbird and Firefox dead after portupgrade

[[EMAIL PROTECTED]]

On 3/31/06, Micah <[EMAIL PROTECTED]> wrote:
> Wee-Sern Soo wrote:
> > http://www.mozilla.com/firefox/releases/1.5.0.1.html#issues
> >
> > It's a known issue.  Need to run as privileged user on all platforms,
> > the first time.
> >
> >
> > Yuan Jue wrote the following on 31/03/2006 4:46 PM:
> >> On Friday 31 March 2006 09:18, Donald J. O'Neill wrote:
> >>
> >>> This happened to me also, until I remembered this has happened before
> >>> and what to try.
> >>>
> >>> Login as root, start the GUI (mine is KDE), open a terminal program and
> >>> start firefox from there. After that, I had no problems. It's working
> >>> fine.
> >>>
> >>>
> >>
> >> works for me too. many thanks :)
> >>
> >>
>
> A workaround that the port could use is given on that page
>
> "If Firefox 1.5.0.1 is installed on a multi-user system in a location
> which is not writable by users, Firefox must be run once by a privileged
> user. If this is not desirable, an empty file must be created in the
> following directory:
> /extensions/[EMAIL PROTECTED]/chrome.manifest"
>

This sort of bizzare need to elevate general awareness
and spiritual enlightenment in the browser using
public is what drove me away from winders in the
first place.  I am not ranting against FreeBSD here.
mozilla/firefox/netscape need to pull their collective
heads out and build something that browses an interweb,
not a file-installing-platform for your base system.

--
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Reprocessing sendmail failed messages

[Tim Traver]

Kris,

thanks for your attempts, but I'm not sure you understand what I mean...

I cannot run a queue manually on these messages because sendmail thinks 
they are permanent errors. So any queue runs on these messages produce 
nothing.


On this box we don't run a sendmail daemon. We only relay mail to 
another server when the sendmail daemon gets called. That is why those 
messages are in the clientmqueue dir instead of the regular mqueue dir.


My real issue is that I now have these bunch of messages that won't get 
processed, because sendmail assumes they are permanent failures.


The q files are named with a capital Q in front of them, is this why 
they are ignored ?


Is there any one who knows how to revert and re-submit these messages ???

Thanks,

Tim.


Kris Anderson wrote:

--- Tim Traver <[EMAIL PROTECTED]> wrote:

  

Hi All,

ok, I know this isn't the right list, but I've
already tried the 
sendmail group, and no response, so I'm hoping that
there might be some 
sendmail gurus on this list that can help me...


After a temporary DNS outage, several machines that
we run have email
messages on them that sendmail attempted to relay to
our mail
cluster, but failed because they could not find the
host name of the
server they were relaying to.

So, now, I have hundreds of messages in the
clientmqueue directory that
are marked as having permanent fatal errors. The top
of the d file
looks like this :

   - The following addresses had permanent fatal
errors -
[EMAIL PROTECTED]
(reason: 550 Host unknown)

   - Transcript of session follows -
550 5.1.2 [EMAIL PROTECTED] Host unknown (Name
server:
..com: host not found)

I see that there are many of these message that are
important, and
want to save and send them.

Is there a way to get sendmail to re-attempt to send
these messages ? I
think it just ignores them right now because of
those lines.

Any help would be greatly appreciated,

Tim.
___
freebsd-questions@freebsd.org mailing list



http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  

To unsubscribe, send any mail to
"[EMAIL PROTECTED]"



Hey there Tim,

Found this with google.
http://lists.freebsd.org/pipermail/freebsd-questions/2004-June/049850.html

A Dr Matthew had this answer (read full text to see
what's up but here's a snippet)

If you end up with a load of messages stuck in
/var/spool/clientmqueue, you've got a similar problem
with not running
a MSP queue daemon.  The case is exactly analogous,
except that the
sendmail flags are in
/var/spool/clientmqueue/sm-client.pid and should
read:

/usr/sbin/sendmail -L sm-msp-queue -Ac -q30m

and you need to set 'sendmail_msp_queue_flags' in
/etc/rc.conf to
override them.

-

Hope that helps.

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam
protection around 
http://mail.yahoo.com 


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
  

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[Donald J. O'Neill]

On Friday 31 March 2006 14:16, Bob Johnson wrote:
>
> In principle, an application feeds it to CUPS, CUPS feeds it to
> GhostScript, and GhostScript uses the HPIJS driver to print it. Or
> something like that.  In practice, I use APSFILTER instead of CUPS,
> and I haven't ever tried to do photo printing from FreeBSD, although
> getting my wife's HP photo printer working with FreeBSD is on my list
> of things to do this weekend, or next weekend, or maybe the weekend
> after that.
>
> The process works for printing JPEGs from web pages on my laser
> printer (although not with HPIJS), and since the HPIJS driver is
> supposed to autodetect photo paper in your printer, I would expect it
> to "just work" for photos if you can print a web page with it.
>
>
> As for a specific application, The Gimp knows something about
> printing photos, but again, I haven't actually done it.   Digikam
> also looks very promising as a photo manipulation tool.  Anything
> that can display it and knows how to print ought to do it (kview for
> example?). I'm sure someone with actual experience can provide a more
> complete answer.;-)
>
> So far, I've printed from the Gimp by writing the file to a USB
> thumbdrive, and plugging that into the photo printer.  The Gimp will
> let you define the picture dimensions in inches, which may be
> necessary to get the printing results you want.  Otherwise you may
> end up with a picture that is 1 x 1.5 inches, or one point by one
> point, or a piece of an 8x10 printed on 4x6 paper, or any of several
> other possible defaults I've managed to print in the past.  Some
> printers also do bad things if the image has too many pixels (or
> maybe bytes), so I've sometimes needed to reduce the image resolution
> before printing.
>
> - Bob
> ___

Unless the printer was capable of determining what sort of paper it was 
loaded with, I just don't see how the HPIJS driver would autodetect 
photopaper. 

Don
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Compiling Java 1.5

[Jonathan Chen]

On Fri, Mar 31, 2006 at 10:35:24AM -0300, Aguiar Magalhaes wrote:
> Hi list,
> 
> I?ve received many good suggestions and I'm trying ...
> 
> Please, see this error... What can I do ??
> 
> Thanks,
> 
> Aguiar
> 
> - - - - - - - - - - - - -
> gmake[3]: Leaving directory
> `/usr/ports/java/jdk15/work/control/build/bsd-i586/h
> otspot-i586/tmp/bsd_i486_compiler2/product'
> gmake[3]: Entering directory
> `/usr/ports/java/jdk15/work/control/build/bsd-i586/
> hotspot-i586/tmp/bsd_i486_compiler2/product'
> /usr/local/linux-sun-jdk1.4.2/bin/javac -g -d

For some reason, the linux-jdk1.4 binaries isn't up to bootstrapping
your native JDK1.5 build. Check the following:
- don't build in a jail
- make sure the linuxalator is loaded
- make sure the linprocfs is mounted during your initial build

If that doesn't work, you can installing the navtive linux-sun-jdk15
to enable your build. FYI, if you had native JDK1.4 installed, that would
work as well.

Cheers.
-- 
Jonathan Chen <[EMAIL PROTECTED]>
--
"I don't want to achive immortality through my works..
 I want to achieve it through not dying" - Woody Allen
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[Bob Johnson]

On 3/31/06, Donald J. O'Neill <[EMAIL PROTECTED]> wrote:
> On Friday 31 March 2006 14:16, Bob Johnson wrote:
> >
> > [...]
> > The process works for printing JPEGs from web pages on my laser
> > printer (although not with HPIJS), and since the HPIJS driver is
> > supposed to autodetect photo paper in your printer, I would expect it
> > to "just work" for photos if you can print a web page with it.

> > ___
>
> Unless the printer was capable of determining what sort of paper it was
> loaded with, I just don't see how the HPIJS driver would autodetect
> photopaper.
>
> Don

The documentation says that's exactly what happens.  The printer
detects it, and tells the driver.  On our HP printer, you switch a
lever to get it to print from the photo paper tray instead of the main
tray.  That may be what it detects, or maybe it's even smarter than
that.

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Can FreeBSD safely use a (un-booted from) drive that is invisible to the BIOS?

[fbsd_user]

You have 2 problems here. bios not seeing the HD and
the old FBSD HD geometry WARNING.

For the FBSD HD geometry WARNING you can just let FBSD use what
ever it thinks it should be. This is not a problem.

Your bios problem is most likely a hardware config thing.

If the 2 HDs are on the same ribbon are the HD jumpers set
correctly, (master/slave for right nipple on the ribbon or both cs
for cable select)

Do you have a ata type cdrom drive on the ribbon?
Same thing about jumpers here to.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Danny
MacMillan
Sent: Friday, March 31, 2006 3:06 PM
To: freebsd-questions@freebsd.org
Subject: Can FreeBSD safely use a (un-booted from) drive that is
invisible to the BIOS?


Hi,

I have a machine with the following two drives (as listed in dmesg):

ad0: 12427MB  at ata0-master UDMA33
ad2: 76319MB  at ata1-master UDMA33

ad0 is the boot drive.  It is recognized by the BIOS, obviously, and
has been in the machine for some years.  ad2 is a new drive I just
added to the machine yesterday.  It is not visible to the BIOS at
all.
If anyone can posit a reason it would not be visible to the BIOS, I
would like to know the answer.  The BIOS supports LBA and ad0 is
more
than 8GB so it wouldn't appear to be the 8GB limit, and the next
limit
I am aware of is comfortably larger than 76GB.

At any rate ... it is not visible to the BIOS, but it is visible to
FreeBSD.  Since I'm not booting from the drive, I think it shouldn't
matter ... but when I use Fdisk from sysinstall I get the following
familiar error message:

|WARNING:  A geometry of 155061/16/63 for ad2 is incorrect.  Using
¦
¦a more likely geometry.  If this geometry is incorrect or you
¦
¦are unsure as to whether or not it's correct, please consult
¦
¦the Hardware Guide in the Documentation submenu or use the
¦
¦(G)eometry command to change it now.
¦
¦
¦
¦Remember: you need to enter whatever your BIOS thinks the
¦
¦geometry is!  For IDE, it's what you were told in the BIOS
¦
¦setup. For SCSI, it's the translation mode your controller is
¦
¦using.  Do NOT use a ``physical geometry''.
|

Since I don't actually know what the BIOS thinks the geometry is,
I got cold feet and decided to ask the list.  I don't =think= it
should matter, since the BIOS shouldn't ever touch the disk, at
least
as far as my understanding goes.

I do have one concern.  This drive was purchased more or less to act
as an emergency backup of the drive that's already in there.  If ad0
ever fails, ad2 drive will have to be put in a new machine whose
BIOS
recognizes it in order to boot.  If I accept the mystery geometry
for
the drive today, will I later face a problem where the BIOS
disagrees
and the drive will be unbootable?

Thank you for your kind attention.

--
Danny MacMillan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: IP Filter problems on 4.11-STABLE

[Bernt Hansson]

Erik Norgaard wrote:

B H wrote:
You have nat? 


Yes, and it's working.

are you routing traffic? 


Yes.

from where to where are you trying to connect,


 From the outside and in.


 From outside and in means from somewhere on the internet to the 
external interface on our fw? or to a natted server inside?


To the fw, trying to ssh in and telnetting to the popserver.



The outside ip is not in the range 82.182.0.0/16? you have blocked 
everything from that address space,, first in-rule.


Yes I know. That is a bunch of ms-dos boxes running all kinds of 
desises. Well I reverted to 4.10-RELEASE-p22 And now all is well.



Erik



Bernt

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[M. Warner Losh]

In message: <[EMAIL PROTECTED]>
"Donald J. O'Neill" <[EMAIL PROTECTED]> writes:
: On Friday 31 March 2006 14:16, Bob Johnson wrote:
: >
: > In principle, an application feeds it to CUPS, CUPS feeds it to
: > GhostScript, and GhostScript uses the HPIJS driver to print it. Or
: > something like that.  In practice, I use APSFILTER instead of CUPS,
: > and I haven't ever tried to do photo printing from FreeBSD, although
: > getting my wife's HP photo printer working with FreeBSD is on my list
: > of things to do this weekend, or next weekend, or maybe the weekend
: > after that.
: >
: > The process works for printing JPEGs from web pages on my laser
: > printer (although not with HPIJS), and since the HPIJS driver is
: > supposed to autodetect photo paper in your printer, I would expect it
: > to "just work" for photos if you can print a web page with it.
: >
: >
: > As for a specific application, The Gimp knows something about
: > printing photos, but again, I haven't actually done it.   Digikam
: > also looks very promising as a photo manipulation tool.  Anything
: > that can display it and knows how to print ought to do it (kview for
: > example?). I'm sure someone with actual experience can provide a more
: > complete answer.;-)
: >
: > So far, I've printed from the Gimp by writing the file to a USB
: > thumbdrive, and plugging that into the photo printer.  The Gimp will
: > let you define the picture dimensions in inches, which may be
: > necessary to get the printing results you want.  Otherwise you may
: > end up with a picture that is 1 x 1.5 inches, or one point by one
: > point, or a piece of an 8x10 printed on 4x6 paper, or any of several
: > other possible defaults I've managed to print in the past.  Some
: > printers also do bad things if the image has too many pixels (or
: > maybe bytes), so I've sometimes needed to reduce the image resolution
: > before printing.
: >
: > - Bob
: > ___
: 
: Unless the printer was capable of determining what sort of paper it was 
: loaded with, I just don't see how the HPIJS driver would autodetect 
: photopaper. 

It doesn't.  However, one of the CUPS settings is 'paper type' and
'paper size'.  There's also print quality.  I can set those manually
and CUPS claims that the settings changes have taken effect.

Warner
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Can FreeBSD safely use a (un-booted from) drive that is invisible to the BIOS?

[Bob Johnson]

On 3/31/06, Danny MacMillan <[EMAIL PROTECTED]> wrote:
> [,,,]
> ad0 is the boot drive.  It is recognized by the BIOS, obviously, and
> has been in the machine for some years.  ad2 is a new drive I just
> added to the machine yesterday.  It is not visible to the BIOS at all.
> If anyone can posit a reason it would not be visible to the BIOS, I
> would like to know the answer.  The BIOS supports LBA and ad0 is more
> than 8GB so it wouldn't appear to be the 8GB limit, and the next limit
> I am aware of is comfortably larger than 76GB.

If ad2 were operating as the slave drive without a master on that
controller, that could explain it, but that doesn't seem to be what's
happening here.

Are you sure you don't have the second drive disabled in the BIOS somehow?

> [...]
> At any rate ... it is not visible to the BIOS, but it is visible to
> FreeBSD.  Since I'm not booting from the drive, I think it shouldn't
> matter ... but when I use Fdisk from sysinstall I get the following
> familiar error message:
>
> |WARNING:  A geometry of 155061/16/63 for ad2 is incorrect.  Using  ¦
> ¦a more likely geometry.  If this geometry is incorrect or you  ¦
> ¦are unsure as to whether or not it's correct, please consult   ¦
> ¦the Hardware Guide in the Documentation submenu or use the ¦
> ¦(G)eometry command to change it now.   ¦
> ¦   ¦
> ¦Remember: you need to enter whatever your BIOS thinks the  ¦
> ¦geometry is!  For IDE, it's what you were told in the BIOS ¦
> ¦setup. For SCSI, it's the translation mode your controller is  ¦
> ¦using.  Do NOT use a ``physical geometry''.|
>
> Since I don't actually know what the BIOS thinks the geometry is,
> I got cold feet and decided to ask the list.  I don't =think= it
> should matter, since the BIOS shouldn't ever touch the disk, at least
> as far as my understanding goes.

FreeBSD uses BIOS routines to start the boot process, then uses its
own idea of what's on the disk.  So, as far as I know, you will only
have a problem if they are different enough to either cause the boot
process to fail, or on a dual boot system, to cause Windows to think
the partitions are in different places than does FreeBSD, or if your
BIOS is picky about the partition table.

A few years ago I started ignoring that message and it's worked for
me.  I just let sysinstall do what it wants (I believe I started that
practice when a bug in sysinstall gave me no choice).  I *think* that
with modern block addressed, i/o buffered disks, on which the
"physical geometry" is an illusion anyway, the only real problem you
can run into is different ideas of the total size of the disk, i.e.
where the last usable block is.  One "geometry" might give you a few
megabytes more than another geometry, but the difference is at the end
of the disk.  That isn't going to have any effect on booting (assuming
the BIOS is willing to start the boot process), and not likely to even
be a problem when dual booting.

>
> I do have one concern.  This drive was purchased more or less to act
> as an emergency backup of the drive that's already in there.  If ad0
> ever fails, ad2 drive will have to be put in a new machine whose BIOS
> recognizes it in order to boot.  If I accept the mystery geometry for
> the drive today, will I later face a problem where the BIOS disagrees
> and the drive will be unbootable?
>

If my understanding is correct, it is unlikely to cause a problem, but
it might.  The BIOS routines will still be able to read the first few
sectors to start the boot process.  If your BIOS is so picky that it
notices that the partition table claims to use bytes beyond what it
thinks is the end of the disk (or some other imagined offense), and
refuses to boot, then you might have a problem.  I've seen such picky
BIOSes, but not for several years.  I think (hope) that manufacturers
are learning that quibbling over such things doesn't make the system
better.  If you were to change the geometry settings of a disk after
you put a filesystem on it, you would likely trigger other issues, but
that's not what you're asking.

> Thank you for your kind attention.

Good luck,

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Best way to print photos

[Bob Johnson]

On 3/31/06, M. Warner Losh <[EMAIL PROTECTED]> wrote:
> In message: <[EMAIL PROTECTED]>
> "Donald J. O'Neill" <[EMAIL PROTECTED]> writes:
> : On Friday 31 March 2006 14:16, Bob Johnson wrote:
> : >
> : > The process works for printing JPEGs from web pages on my laser
> : > printer (although not with HPIJS), and since the HPIJS driver is
> : > supposed to autodetect photo paper in your printer, I would expect it
> : > to "just work" for photos if you can print a web page with it.
> : >
> : >

> : > ___
> :
> : Unless the printer was capable of determining what sort of paper it was
> : loaded with, I just don't see how the HPIJS driver would autodetect
> : photopaper.
>
> It doesn't.  However, one of the CUPS settings is 'paper type' and
> 'paper size'.  There's also print quality.  I can set those manually
> and CUPS claims that the settings changes have taken effect.
>
> Warner
>

If HPIJS doesn't autodetect photo paper, you may not be able to print
decent photos.  It may be that HPIJS detects the change, but doesn't
tell CUPS about it.

You have me curious enough that I think getting our HP 4xxx (whatever
it is) working with FreeBSD will be a project for this weekend.  The
pinhole camera can wait another week, I guess.  If I learn anything
useful, I'll let you know.

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: DHCPD config

[fbsd_user]

Let me see if I understand you correctly.

Your saying that dhcp client has no built in way to
communicate to dhcpd the dns ip address it receives
at boot time or during the normal lease update process?

That your suggesting the work around is to customize the
dhclient-script code at the point where it determines the
/etc/resolv.conf file gets deleted and re-written with the
new dns ip address info, by adding code to parse into
the dhcpd.conf file replacing the option line for
dns ip addresses with the new ip address?

Well I looked at that script code and it's way above my
ability to write script code at that level.

The other suggestion of adding my own LAN DNS server
is over kill because my LAN just has 2 pc's on it and
the only purpose of the LAN is to share a single
dynamic IP address from my ISP.

There must be a lot of other people in the same boat as I
am who have all ready customized the dhclient-script or
more properly the /etc/dhclient-exit-hooks file to
edit the dhcpd.conf file with the correct DNS ip address.

Do you know of any web sites that contain dhcp scripts?

***



Kris Anderson <[EMAIL PROTECTED]> writes:

> I think the answer you are looking for lies in
> dhclient-script. I noticed it futzes with resolv.conf.
> If you happen to notice resolv.conf changing (You can
> test this about by making a backup of resolv.conf,
> erasing its contents and then rebooting the machine,
> just for the sake of everything running properly and
> seeing if the contents of resolv.conf get repopulated
> with your ISPs DNS settings) then you can create a
> script to grab the elements needed from the ISP and
> drop them in to a file for dhcpd to read and then
> SIGTERM dhcpd and restart it.

Basically, "have dhclient-script rewrite the dhcpd.conf".

Running your own nameserver and pointing the internal DHCP clients
to
it is another option, but slightly less resistant to failures.
Doing
both will get you the best of both worlds.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"