Re: Firewalls

2008-04-28 Thread Wojciech Puchar
of this in the handbook.  Several years ago I needed to do traffic shaping 
and used IPFW with dummynet.


and use it again. for me most logic, most clear and gives what i need.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Questions about stats

2008-04-28 Thread Luigi

Hi,

I'm a user of PC-BSD in Belgium.

I've installed bsdstats yet.

So I'd like to know if it's possible to have stats for Belgium and where
can I find it ?

Thank you very much.

Luigi

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Questions about stats

2008-04-28 Thread Luigi

Leslie Jensen a écrit :



Luigi skrev:

Hi,

I'm a user of PC-BSD in Belgium.

I've installed bsdstats yet.

So I'd like to know if it's possible to have stats for Belgium and where
can I find it ?

Thank you very much.

Luigi



Hello Luigi.

I wrote to the webmaster at bsdstats.org about the countrystats that 
cannot be seen. I've recieved no answer so I'm afraid you'll have to 
be patient. It has worked before and I don't know the reason why it 
doesen't work now.


/Leslie



Hi Leslie,

Thank you for your answer.

I wrote to the webmaster of bsdstats.org too. But I've received no 
answer too. Maybe It's take a long time or they have a lot of work. I 
wait for answer. I've suscribe to the statslist but I received news one 
or two times.


These informations are very important for me because I want to verify if 
there are other users of BSD as me in Belgium. I'm sure that they are 
users but I don't know how many.


/Luigi

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Invitation from Kiran

2008-04-28 Thread Kiran
View My Invitation here 

http://pimpmysearch.com/r.php?g=Yhqndwd_Nludqm=iuhhevg-txhvwlrqv,iuhhevg.rujs=Kiran

thanks,
Kiran




-
This invitation was sent by Kiran ([EMAIL PROTECTED]) via PimpMySearch to 
[EMAIL PROTECTED]

If you would not like to receive further invitations from your friends please 
let us know
http://invite.pimpmysearch.com/i/[EMAIL PROTECTED]

Or write to: Zyber Media, PO Box 1046, Novi, MI 48376-1046, USA.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ssh StrictHostKeyChecking=no refuse connection when key changed

2008-04-28 Thread Anton Shterenlikht
On Fri, Apr 25, 2008 at 09:37:13AM -0700, Chuck Swiger wrote:
 On Apr 25, 2008, at 9:09 AM, Anton Shterenlikht wrote:
 Is it normal that StrictHostKeyChecking=no in .ssh/config
 still refuses ssh connection when host ID has changed.
 
 I've a setup in which host ids change frequently. How
 can I setup ssh so that it ignores key change.
 
 You'd be better off fixing whatever it is that is making your host IDs  
 change, but I suppose you  could also try to create a zero-length  
 known_hosts file, and keep it that way via:
 
   chflags uchg ~/.ssh/known_hosts
 
 You might also try to automate finding the current valid hostkeys via  
 ssh-keyscan.

Chuck, perhaps I should explain better what's going on.

I've a VMS cluster behind a FBSD frontend, acting as a router and
a firewall. (Don't ask why.. the Uni are not happy to connect VMS
to the local network directly. Just because they haven't been using
it for 10 year, they think it is not secure - what nonsence, but
nevermind.)

I access VMS cluster using ssh with port forwarding. In case a node
in my VMS cluster goes down, its IP is automatically given to another
alive VMS node - a VMS cluster feature. For example:

Imagine the VMS cluster consisting of 2 nodes - Node1 and Node2.
The IP are:

Node1 10.10.10.1 (failover to 10.10.10.2)
Node2 10.10.10.2 (failover to 10.10.10.1)

and in ipnat.rules:

rdr dc0 xx.xx.xx.xx port x - 10.10.10.1 port 22

This works fine until Node1 is down, in which case the cluster
software directs all connections to 10.10.10.1 to Node2. Since
its key doesn't match what's in known_hosts, the connection is
refused.

At present I tune the VMS cluster and reboot individual nodes
frequently. I'd like to be able to tell ssh to ignore key mismatch
at this stage.

many thanks
anton

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 928 8233 
Fax: +44 (0)117 929 4423
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ssh StrictHostKeyChecking=no refuse connection when key changed

2008-04-28 Thread Mike Clarke
On Monday 28 April 2008, Anton Shterenlikht wrote:

 This works fine until Node1 is down, in which case the cluster
 software directs all connections to 10.10.10.1 to Node2. Since
 its key doesn't match what's in known_hosts, the connection is
 refused.

 At present I tune the VMS cluster and reboot individual nodes
 frequently. I'd like to be able to tell ssh to ignore key mismatch
 at this stage.

Just a quick, and untested, thought. Could you use the same key files on 
all the nodes in the cluster? It might work unless ssh on the local 
machine objects to machines having identical keys in the known_hosts 
file.

-- 
Mike Clarke
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Converting from tcpdump to netflow

2008-04-28 Thread Eduardo Morras

Hello everybody:

   I'm capturing packets from our network using tcpdump. Only 96 
bytes for each packet. Now the sysmaster says that he wants analyze 
the network with netflow graphics. Is there any app that can convert 
from tcpdump/pcap to netflow? We have no router with netflow 
capabilities. Should i restart the packet capture with fprobe or 
similar app? Can be fprobe and tcpdump work in parallel?


Thanks In Advance


Useful Acronyms : UPnP = Universal Plug and Pray 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ZFS + gmirror: how?

2008-04-28 Thread Robert Jesacher
On 27/04/2008 20:44 Guus Houtzager wrote:
 Hi,
 
 I'm rather new to FreeBSD and I'm having trouble with ZFS and gmirror.
 I've used this guide to install FreeBSD 7 on ZFS:
 http://www.ish.com.au/solutions/articles/freebsdzfs
 This goes flawless, however, the /bootdir is still just /dev/ad01sa (in
 my case), so if that disk breaks, I still can't boot from ad1. So I
 thought I could just make a gmirror containing /dev/ad0s1a and ad1s1a
 and use that for /bootdir. This however does not work.
 What I did is:
 - gmirror load
 - gmirror label -v -b round-robin gm0 /dev/ad1s1a
 - newfs /dev/mirror/gm0
 - mount /dev/mirror/gm0 /mnt/tmp
 - dump -L -0 -f- /bootdir | (cd /mnt/tmp  restore -r -v -f-)
 - edit /etc/fstab and /mnt/root/etc/fstab: change all references to
 ad0s1a by /dev/mirror/gm0
 - echo 'geom_mirror_load=YES'  /boot/loader.conf
 - echo 'geom_mirror_load=YES'  /mnt/tmp/boot/loader.conf
 - reboot
 However: I can see the bootprocess starting first ZFS followed by a
 message saying it's waiting for GEOM gmirror to start, which it does
 after a little while and then I get a prompt where I can manually tell
 the system where the root filesystem is. And if I tell it
 zfs:system/root it does not work (my zpool is named system).
 Anyone know what I'm doing wrong and what's the best way to do this?
 Thanks in advance!
 
 PS: please CC me in any reply, as I'm not subscribed to this list. Thanks!
 
 Regards,


I'm not sure if this is the cause, but it looks like
/boot/zfs/zpool.cache might not be up to date or missing.

Once I had the same issue. You should boot up somehow (you can even use
the 7.0 install CD). Make sure you have the directory /boot/zfs and do a
zpool import. After this you should have a valid zpool.cache file
which you need to copy to your mirror device.

PLMK if this works for you as this is also my desired setup. I only
need to make the gmirror step tough ;-)

br,
Robert


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: wine: notepad OK, others not

2008-04-28 Thread Tijl Coosemans
On Saturday 26 April 2008 10:02:39 [EMAIL PROTECTED] wrote:
 It's really easier to try to install an app under Wine...
 
 With, it seems, at least two exceptions:
 
 * Some apps -- such as Wordpad and Write -- are packaged and
   installed with Windows, rather than on separate media.  Are
   there instructions somewhere for installing such an app
   under wine?  I'm certainly not finding it at all obvious.

Such apps you can only try to copy over to Wine. Wine has its
own simple version of Wordpad though. Just run wine wordpad.

 * Some add-on (separately installable) apps are packaged
   on multiple diskettes (or multiple CDs for that matter). 
   Pre-mounting the first, and pointing wine at the mount
   point, seems likely to result in getting stuck partway
   through the install when it asks for the second disk.
 
 The version of Visio that I have is in the second category.

You should ask about this on the wine-users mailing list. It should
be possible to unmount the disk when it asks for the next one. If
you can't then that's a bug.

 The manpage describes a way of pointing wine to a device
 rather than to a mounted filesystem:
 
   The Unix device corresponding to a DOS drive can be
   specified the same way, except with '::' instead of
   ':'. So for the previous example, if the CDROM device
   is mounted from /dev/hdc, the corresponding symlink
   would be $WINEPREFIX/dosdevices/d:: - /dev/hdc.
 
 but, as reported elsewhere, wine could not find setup.exe
 on the Visio install diskette with dosdevices set up this
 way.

I'm not entirely sure, but I think the :: link is only used for
raw access to devices. Wine doesn't mount disks on its own.

 ... You also might want to have a look at
 http://wiki.winehq.org/winetricks for a script
 that can install and setup various packages ...
 
 Unfortunately, I can't find Visio in its list of packages.

Yes, it's only for extra packages (libs, fonts,..) like mfc42.dll
and such. It's just that installing DLLs via winetricks might be
easier than trying to figure out what DLLs to copy from a Windows
install.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ZFS + gmirror: how?

2008-04-28 Thread Wojciech Puchar

I'm rather new to FreeBSD and I'm having trouble with ZFS and gmirror.
I've used this guide to install FreeBSD 7 on ZFS:


if you use ZFS, use ZFS mirroring.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ppp reconnecting problem

2008-04-28 Thread Malcolm Kay
On Sun, 27 Apr 2008 04:43 pm, Ivan Toman wrote:
 
Hello!
I encountered big problem after switching router from gentoo to
freebsd. It does not properly reconnect ADSL link after loosing
connection, for example, when ISP cycle IP address or when I pull out
cable from ADSL switcher for testing purporse. I cannot realize what's
going on and really need help.
First problem get when ISP disconnect me after 24 hours due to IP
change. Link does not properly get reconnected. ppp tries to connect,
and appearenty is connected, but something is wrong because no traffic
is possible and after few seconds ppp goes down and reconnects again.
And again and again Strange above all is that during reconnecting
routing table always has default route, but ping does not go. Next, I
will put some information that I think is relevant to problem, but it
seems to me, not very useful in debugging this.
During reconnecting as I describe above, this is my routing table:
[EMAIL PROTECTED] /home/coldplug]# netstat -rn
Routing tables
Internet:
Destination� � � � � � �  Gateway� � � � � � � � � � �  Flags� � �
Refs� � � � �  Use�  Netif Expire
default� � � � � � � � � � �  172.29.252.12� � � � �
UGS� � � � � � � �  1�  2284023� �  tun0
10.23.99.64/29� � � �  link#1� � � � � � � � � � � �
UC� � � � � � � � �  0� � � � � � �  0� �  nfe0
10.23.99.66� � � � � � �  00:30:84:ee:3c:cf�  UHLW� � � � � � �
1� � � �  4065� �  nfe0� �  1030
10.23.99.70� � � � � � �  00:02:b3:9e:b9:81�  UHLW� � � � � � �  1� �
223104� �  nfe0� �  1027
127.0.0.1� � � � � � � � �  127.0.0.1� � � � � � � � �
UH� � � � � � � � �  0� � � � � �  72� � �  lo0
172.29.252.12� � � � �  78.3.33.136� � � � � � �  UGH� � � � � � � �
1� � � � � � �  0� �  tun0
Internet6:
Destination� � � � � � � � � � � � � � � � � � � � � �
Gateway� � � � � � � � � � � � � � � � � � � � � �  Flags�  Netif
Expire
::1� � � � � � � � � � � � � � � � � � � � � � � � � � � � � �
::1� � � � � � � � � � � � � � � � � � � � � � � � � �  UHL� � � �
lo0
fe80::%lo0/64� � � � � � � � � � � � � � � � � � � �
fe80::1%lo0� � � � � � � � � � � � � � � � � �  U� � � �  lo0
fe80::1%lo0� � � � � � � � � � � � � � � � � � � � � �
link#5� � � � � � � � � � � � � � � � � � � � � � �  UHL� � � �  lo0
ff01:5::/32� � � � � � � � � � � � � � � � � � � � � �
fe80::1%lo0� � � � � � � � � � � � � � � � � �  UC� � � �  lo0
ff01:6::/32� � � � � � � � � � � � � � � � � � � � � �
link#6� � � � � � � � � � � � � � � � � � � � � � �  UGC� � �  tun0
ff02::%lo0/32� � � � � � � � � � � � � � � � � � � �
fe80::1%lo0� � � � � � � � � � � � � � � � � �  UC� � � �  lo0
ff02::%tun0/32� � � � � � � � � � � � � � � � � � �
fe80::211:9ff:fe8d:4a27%tun0�  UGC� � �  tun0
[EMAIL PROTECTED] /home/coldplug]#
And this I get if try to ping ISP's dns
[EMAIL PROTECTED] /home/coldplug]# ping 195.29.150.3
PING 195.29.150.3 (195.29.150.3): 56 data bytes
ping: sendto: No buffer space available
ping: sendto: No buffer space available
ping: sendto: No buffer space available
ping: sendto: No buffer space available
^C
--- 195.29.150.3 ping statistics ---
10 packets transmitted, 0 packets received, 100.0% packet loss
[EMAIL PROTECTED] /home/coldplug]#
No buffer space available??? What is that?
These are lines from log, where you can see that it reconnects and
never stops that
[EMAIL PROTECTED] /home/coldplug]# tail -f /var/log/ppp.log
Apr 26 12:06:22 maraska-gw ppp[956]: tun0: Phase: deflink: carrier -
login
Apr 26 12:06:22 maraska-gw ppp[956]: tun0: Phase: deflink: login -
lcp
Apr 26 12:06:23 maraska-gw ppp[956]: tun0: Warning: deflink: Reducing
configured MRU from 1500 to 1492
Apr 26 12:06:23 maraska-gw ppp[956]: tun0: Phase: deflink: his = PAP,
mine = none
Apr 26 12:06:23 maraska-gw ppp[956]: tun0: Phase: Pap Output:
[EMAIL PROTECTED] 
Apr 26 12:06:24 maraska-gw ppp[956]: tun0: Phase: Pap Input: SUCCESS
(Access Accepted. )
Apr 26 12:06:24 maraska-gw ppp[956]: tun0: Phase: deflink: Already in
NETWORK phase
Apr 26 12:06:24 maraska-gw ppp[956]: tun0: Phase: deflink: lcp - open
Apr 26 12:06:24 maraska-gw ppp[956]: tun0: Warning: 0.0.0.0/0: Change
route failed: errno: No such process
Apr 26 12:06:24 maraska-gw ppp[956]: tun0: Warning: ff02:6::/32:
Change route failed: errno: Network is unreachable
Apr 26 12:08:23 maraska-gw ppp[956]: tun0: Phase: deflink: open - lcp
Apr 26 12:08:23 maraska-gw ppp[956]: tun0: Warning: 0.0.0.0/0: Change
route failed: errno: No such process
Apr 26 12:08:23 maraska-gw ppp[956]: tun0: Warning: ff02:6::/32:
Change route failed: errno: Network is unreachable
Apr 26 12:08:24 maraska-gw ppp[956]: tun0: Phase: Received
NGM_PPPOE_CLOSE
Apr 26 12:08:24 

OS throws away large packets

2008-04-28 Thread Mr Y
Hi all,

I'm trying to implement Large Recieve Offload for an Ethernet driver on
FreeBSD 6.3, but all my MTU packets are being thrown by the OS.
I'm using mbuf chains in this imlpementation, each mbuf is a cluster of
MCLBYTES bytes. They are linked by the m_next pointer.
The first packet being thrown away is 2945 bytes long. Wireshark shows the
packet that is being passed to the OS is correct.

Do I need to set some OS parameter to make it recieve mbuf chains?

Please help.

- Yony
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: OS throws away large packets

2008-04-28 Thread Tom Judge

Mr Y wrote:

Hi all,

I'm trying to implement Large Recieve Offload for an Ethernet driver on
FreeBSD 6.3, but all my MTU packets are being thrown by the OS.
I'm using mbuf chains in this imlpementation, each mbuf is a cluster of
MCLBYTES bytes. They are linked by the m_next pointer.
The first packet being thrown away is 2945 bytes long. Wireshark shows the
packet that is being passed to the OS is correct.

Do I need to set some OS parameter to make it recieve mbuf chains?

Please help.



Hi Yony,

I seem to remember some discussion about this list last year see the 
following threads:


http://lists.freebsd.org/pipermail/freebsd-net/2007-September/015250.html
http://lists.freebsd.org/pipermail/freebsd-net/2007-September/015350.html

From my limited reading of these threads just now and possibly bad 
memory.  It would seem that the MRU to MTU relationship is defined in 
the nic driver rather than enforced further up the stack or at least 
that seamed to be the case with the bce driver.


Hope this is helpful,

Tom
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Converting from tcpdump to netflow

2008-04-28 Thread Vince

Eduardo Morras wrote:

Hello everybody:

   I'm capturing packets from our network using tcpdump. Only 96 bytes 
for each packet. Now the sysmaster says that he wants analyze the 
network with netflow graphics. Is there any app that can convert from 
tcpdump/pcap to netflow? We have no router with netflow capabilities. 
Should i restart the packet capture with fprobe or similar app? Can be 
fprobe and tcpdump work in parallel?


net-mgmt/softflowd says it can read in pcap files and export netflow 
from them (see http://www.mindrot.org/projects/softflowd/ )


Vince



Thanks In Advance


Useful Acronyms : UPnP = Universal Plug and Pray
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ZFS + gmirror: how?

2008-04-28 Thread Guus Houtzager

Hi,

On Apr 28, 2008, at 3:44 PM, Wojciech Puchar wrote:

I'm rather new to FreeBSD and I'm having trouble with ZFS and  
gmirror.

I've used this guide to install FreeBSD 7 on ZFS:


if you use ZFS, use ZFS mirroring.


Ofcourse, but since FreeBSD can't boot from ZFS (yet), I need a  
normal filesystem for that, and that's the one I want mirrored. I'll  
use zfs mirroring for everything else.


Regards,
--
Guus HoutzagerEmail: [EMAIL PROTECTED]
  ++?++ Out of Cheese error. Redo from start.
   -- Terry Pratchett, Interesting Times



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: VLAN Trunking with Freebsd

2008-04-28 Thread Wojciech Puchar
If you are just creating from the command line and want cisco router like 
subinterfaces, the following works (I have the vlan module built into my 
kernel might need to load it otherwise.)

[EMAIL PROTECTED]
(19:22:09 ~) 0 # ifconfig bge0.1
ifconfig: interface bge0.1 does not exist
[EMAIL PROTECTED]
(19:22:13 ~) 0 # ifconfig bge0.1 create
[EMAIL PROTECTED]
(19:22:15 ~) 0 # ifconfig bge0.1
bge0.1: flags=8842BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
   options=3RXCSUM,TXCSUM
   ether 00:e0:81:2d:a3:16
   media: Ethernet autoselect (100baseTX full-duplex)
   status: active
   vlan: 1 parent interface: bge0
[EMAIL PROTECTED]
(19:22:17 ~) 0 # ifconfig bge0.1 destroy

Not certain how thats represented in rc.conf, Will have a look.


ifconfig_bge0.1=create ip_address/mask

should work
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: simple network traffic query tool

2008-04-28 Thread beni
On Thursday 24 April 2008 18:10:40 Tobias Kirschstein wrote:
 hi,

 i'm looking for a small tool to query the current network traffic (kb
 IN and OUT) per interface. is there any sysctl or tool which gives me a
 similar output to systat -ifstat:

 /0   /1   /2   /3   /4   /5   /6   /7   /8   /9   /10
  Load Average   

   Interface   Traffic   PeakTotal
 lo0  in  0.000 KB/s  0.000 KB/s  226.079 KB
  out 0.000 KB/s  0.000 KB/s  226.079 KB

wpi0  in  0.000 KB/s  0.000 KB/s  164.577 MB
  out 0.000 KB/s  0.000 KB/s6.205 MB

 the background:
 unfortunately the network monitor build into superkaramba does not work
 for freebsd, os i want to write a widget which uses sysctl or any other
 tool if available got get this information. systat is not appropriate
 to be used because it does not terminate on its own as i see.

I'm using a modified version of Superkarambas CompactMonitor. It is written 
for Linux I think, but easily adaptable for freebsd. 
All I did was moddify the 
~/.kde/share/apps/superkaramba/themes/CompactMonitor/CompactMonitor.theme 
file : 

text  x=435 y=50  sensor=network device=vr0 format=%in KB/s  decimals=1
text  x=370 y=50  value=Download
text  x=570 y=50  sensor=program program=netstat -ibh | grep Link#1 | 
awk '{print $7}' align=right interval=1000

text  x=435 y=65 sensor=network device=vr0 format=%out KB/s decimals=1
text  x=370 y=65 value=Upload
text  x=570 y=65 sensor=program program=netstat -ibh | grep Link#1 | 
awk '{print $10}' align=right interval=1000

Add
graph x=370 y=30  sensor=network device=vr0 format=%out w=200 h=15 
color=255,127,127 interval=1000 max=100
graph x=370 y=30  sensor=network device=vr0 format=%in  w=200 h=15 
color=127,230,180 interval=1000 max=100
if you want to add a graphic representation and change the vr0 according to 
your (ethernet) device.

It works for me with kde 3.5.8 on 7.0-stable.
-- 
Beni.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Problems mounting by label

2008-04-28 Thread Jeffrey Goldberg
I am trying to set up labels on a USB HD so that I can mount it in the  
same place each time I connect it.


The short version is that from what I've done (which I will detail  
below) when I try to


 $ sudo mount /dev/ufs/Back1s1 /Volumes/Back1
 mount: /dev/ufs/Back1s1 : Invalid argument

While

 $ sudo mount /dev/da4s1 /Volumes/Back1

does work.

Using the latter defeats the purpose however, since I want eventually  
to mount things to a different mount point depending on their label.


Here is more detail of what I've done so far.  I'm running RELENG_7_0

One thing that I've noticed is that /dev/da4s1 and /dev/ufs/Back1s1  
have different device numbers:


ls -l /dev/da4* /dev/ufs
crw-r-  1 root  operator0, 121 Apr 10 03:57 /dev/da4
crw-r-  1 root  operator0, 122 Apr 10 03:57 /dev/da4s1

/dev/ufs:
total 0
crw-r-  1 root  operator0, 123 Apr 10 03:57 Back1
crw-r-  1 root  operator0, 124 Apr 10 03:57 Back1s1

But that might not mean anything.

I first used fdisk to change the active slice to be of FreeBSD type  
(I'm not planning on using these disks for other systems.)  Here is  
what fdisk currently reports


$ fdisk /dev/da4
*** Working on device /dev/da4 ***
parameters extracted from in-core disklabel are:
cylinders=9729 heads=255 sectors/track=63 (16065 blks/cyl)

Figures below won't work with BIOS for partitions not in cyl 1
parameters to be used for BIOS calculations are:
cylinders=9729 heads=255 sectors/track=63 (16065 blks/cyl)

Media sector size is 512
Warning: BIOS sector numbering starts with sector 1
Information from DOS bootblock is:
The data for partition 1 is:
sysid 165 (0xa5),(FreeBSD/NetBSD/386BSD)
start 16065, size 156280320 (76308 Meg), flag 80 (active)
beg: cyl 1/ head 0/ sector 1;
end: cyl 512/ head 254/ sector 63
The data for partition 2 is:
UNUSED
The data for partition 3 is:
UNUSED
The data for partition 4 is:
UNUSED

I also used glabel to try to get a label on it, but couldn't see how I  
could use the glabel information for mounting.


here is what glabel reports for the device

$ glabel dump /dev/da4s1
Metadata on /dev/da4s1:
Magic string: GEOM::LABEL
Metadata version: 2
   Label: Backup 1

So not knowing how to use the glabel information for mounting I used  
the -L option to newfs when I created the USF2 filesystem on /dev/da4s1


$ tunefs -p /dev/da4s1
tunefs: ACLs: (-a) disabled
tunefs: MAC multilabel: (-l)   disabled
tunefs: soft updates: (-n) disabled
tunefs: gjournal: (-J) disabled
tunefs: maximum blocks per file in a cylinder group: (-e)  2048
tunefs: average file size: (-f)16384
tunefs: average number of files in a directory: (-s)   64
tunefs: minimum percentage of free space: (-m) 8%
tunefs: optimization preference: (-o)  time
tunefs: volume label: (-L) Back1
[EMAIL PROTECTED] /dev/ufs]$

(oops, I probably should turn on ACLs for this, but that is another  
matter).


Any pointers to help in getting this slice mountable in the same place  
every time.  I feel like I must be very close to how this should be  
done, but something is a bit off.


Cheers,

-j








--
Jeffrey Goldberghttp://www.goldmark.org/jeff/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: simple network traffic query tool

2008-04-28 Thread Grant Peel

Take a look at ipa.

-Grant


- Original Message - 
From: beni [EMAIL PROTECTED]

To: freebsd-questions@freebsd.org
Cc: Tobias Kirschstein [EMAIL PROTECTED]
Sent: Monday, April 28, 2008 2:00 PM
Subject: Re: simple network traffic query tool



On Thursday 24 April 2008 18:10:40 Tobias Kirschstein wrote:

hi,

i'm looking for a small tool to query the current network traffic (kb
IN and OUT) per interface. is there any sysctl or tool which gives me a
similar output to systat -ifstat:

/0   /1   /2   /3   /4   /5   /6   /7   /8   /9   /10
 Load Average   

  Interface   Traffic   PeakTotal
lo0  in  0.000 KB/s  0.000 KB/s  226.079 
KB
 out 0.000 KB/s  0.000 KB/s  226.079 
KB


   wpi0  in  0.000 KB/s  0.000 KB/s  164.577 
MB
 out 0.000 KB/s  0.000 KB/s6.205 
MB


the background:
unfortunately the network monitor build into superkaramba does not work
for freebsd, os i want to write a widget which uses sysctl or any other
tool if available got get this information. systat is not appropriate
to be used because it does not terminate on its own as i see.


I'm using a modified version of Superkarambas CompactMonitor. It is 
written

for Linux I think, but easily adaptable for freebsd.
All I did was moddify the
~/.kde/share/apps/superkaramba/themes/CompactMonitor/CompactMonitor.theme
file :

text  x=435 y=50  sensor=network device=vr0 format=%in KB/s 
decimals=1

text  x=370 y=50  value=Download
text  x=570 y=50  sensor=program program=netstat -ibh | grep Link#1 |
awk '{print $7}' align=right interval=1000

text  x=435 y=65 sensor=network device=vr0 format=%out KB/s decimals=1
text  x=370 y=65 value=Upload
text  x=570 y=65 sensor=program program=netstat -ibh | grep Link#1 |
awk '{print $10}' align=right interval=1000

Add
graph x=370 y=30  sensor=network device=vr0 format=%out w=200 h=15
color=255,127,127 interval=1000 max=100
graph x=370 y=30  sensor=network device=vr0 format=%in  w=200 h=15
color=127,230,180 interval=1000 max=100
if you want to add a graphic representation and change the vr0 according 
to

your (ethernet) device.

It works for me with kde 3.5.8 on 7.0-stable.
--
Beni.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Firewalls

2008-04-28 Thread Bruce Cran

Doug Hardie wrote:
FreeBSD supports 3 firewalls:  IPF, IPFW, and PF.  Some time ago 
(perhaps years) I seem to recall some discussion that one or more of 
those was better maintained and higher quality than the others.  I don't 
see any indications of this in the handbook.  Several years ago I needed 
to do traffic shaping and used IPFW with dummynet.  It worked but the 
need eventually went away.  More recently I needed to incorporate spamd 
which defaults to PF so I used that.  However, now I am back to needing 
traffic shaping again.  I suspect trying to use both PF and IPFW 
simultaneously will not be a good approach.  In addition, there now are 
instructions for using spamd with IPFW so it appears that either PF or 
IPFW will do what I need.  Is there any additional information available 
to assist in selecting between those?  Thanks.


As I understand it pf is often found to be easiest to use and has lots 
of features like altq and os fingerprinting but is quite a bit slower 
than ipfw.


--
Bruce
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Recommendations for BSD Unix Toolbox: 1000+ Commands for FreeBSD BSD Books

2008-04-28 Thread loony

What are folks recommendations for the updated edition of BSD UNIX Toolbox: 
1000+ Commands for FreeBSD, OpenBSD and NetBSD (Paperback)by Christopher Negus 
(Author), Francois Caen (Author)?

Overall, Absolute FreeBSD boosted my confidence/competence but as my  only  
printed  Unix/Linux/BSD  resource although it is not the be one and end all  
resource to FreeBSD as I was hoping for, particularly when it comes to slightly 
more advanced topics as building a production LAMP server.  I have the budget 
for another book.

I don't have access to a print version so I can really check it out before I 
buy.  Has anyone found BSD UNIX useful, more than useless, or redundant?  Is it 
organized and indexed well?  Is a good read on the toilet or only when when 
your working on a box?  Hasn't some other sys admin documented their commands 
really well and shared them?  This recommendation would be for a FreeBSD novice 
user.  If they didn't know how to script and had a choice between BSD UNIX 
Toolbox and a book about how to script, what would they be better off getting?

On that note, does anyone have recommendations for a freebsd orientated 
beginners guide to scripting and using scripts to manage a freebsd box and 
common systems/services/daemons?

loonybomber


May the admins live long and prosper.





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Recommendations for BSD Unix Toolbox: 1000+ Commands for FreeBSD BSD Books

2008-04-28 Thread Roland Smith
On Mon, Apr 28, 2008 at 02:10:45PM -0700, loony wrote:
 
 Overall, Absolute FreeBSD boosted my confidence/competence but as my
 only  printed  Unix/Linux/BSD  resource although it is not the be one
 and end all  resource to FreeBSD as I was hoping for, particularly
 when it comes to slightly more advanced topics as building a
 production LAMP server.  I have the budget for another book. 

Configuring a ?AMP server is largely not really OS specific (apart from
things like firewalling). The AMP part should work on all UNIX-like
systems. Of course FreeBSD has ports, which makes installation of the
software easier.

Some searching on the internet is certain to give you lots of tutorials.

 This recommendation would be for a FreeBSD novice user.  If they
 didn't know how to script and had a choice between BSD UNIX Toolbox
 and a book about how to script, what would they be better off getting?

Depends on the persons other exerience. I switched to FreeBSD after
having used Slackware Linux for several years. With the Handbook and the
manual pages, I fealt at home straight away.

For novices, I would teach them system administration first, and
scripting later.

 On that note, does anyone have recommendations for a freebsd
 orientated beginners guide to scripting and using scripts to manage a
 freebsd box and common systems/services/daemons?

There is a lot of usefull documentation included with FreeBSD, starting
with the Handbook and FAQ. Look in /usr/share/doc/en_US.ISO8859-1/books

Daemons belonging to the base system or available via ports come with a
control script in (/usr/local)/etc/rc.d. There is no need to write your
own, unless you want to contribute a new port, which is not really a job
for a novice. However, one can learn a lot by studying the already available
scripts and the infrastructure that supports them. 

I've also found the Advanced Bash-Scripting Guide
[http://tldp.org/LDP/abs/html/] usefull, although one has to be carefull
of bash-specific features not supported by FreeBSD's /bin/sh.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpNEHzWVynWS.pgp
Description: PGP signature


Re: Problem with reconnecting ppp (ppp -ddial isp)

2008-04-28 Thread cpghost
On Sat, 26 Apr 2008 21:12:11 +0200
Ivan Toman [EMAIL PROTECTED] wrote:

 First problem get when ISP disconnect me after 24 hours due to IP 
 change. Link does not properly get reconnected. ppp tries to connect, 
 and appearenty is connected, but something is wrong because no
 traffic is possible and after few seconds ppp goes down and
 reconnects again. And again and again Strange above all is that
 during reconnecting routing table always has default route, but ping
 does not go. Next, I will put some information that I think is
 relevant to problem, but it seems to me, not very useful in debugging
 this.

I don't know if it's exactly the same problem, but I've had a similar
problem with userland ppp and even submitted logfiles of forced
disconnects. I thought the problem was with ng_pppoe, but apparently,
it is with ppp(8). Unfortunately, ppp's maintainer didn't reply or
chime in, and the problem is obviously still lingering there, deep
inside ppp or between ppp and ng_pppoe. :( The thread started here:

http://lists.freebsd.org/pipermail/freebsd-stable/2007-December/038874.html

You may not have hit the very same bug, but the circumstances are
pretty much similar. Someone really ought to have a look at ppp.

Fortunately, with the help from Alexander and Julian, I've switched
to net/mpd5, and didn't encounter any problems with this 24h forced
ADSL disconnect ever since (running RELENG_7 now). Just give it a
try: you'll like it!

I'm now using the following /usr/local/etc/mpd5/mpd.conf:

--- /usr/local/etc/mpd5/mpd.conf --
startup:
# configure users
set user mpd XX
# configure the console
set console self 127.0.0.1 5005
set console user mpd
set console open
# configure the web server
set web self 192.168.254.1 5006
set web user mpd
set web open

default:
load pppoe_client

pppoe_client:
create bundle static B1
set iface route default
set iface enable nat
set ipcp ranges 0.0.0.0/0 0.0.0.0/0
set ipcp disable vjcomp

create link static L1 pppoe
set link action bundle B1
set auth authname 
set auth password XX
set link max-redial 0
set link mtu 1460
set link mru 1460
set link keep-alive 10 60
set link disable acfcomp
set link disable protocomp 
set pppoe iface sis0 
set pppoe service 
set log +echo
open
--- /usr/local/etc/mpd5/mpd.conf ---

Good luck!

 Ivan Toman

-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Recommendations for BSD Unix Toolbox: 1000+ Commands for FreeBSD BSD Books

2008-04-28 Thread Jon Radel
loony wrote:
 
 What are folks recommendations for the updated edition of BSD UNIX Toolbox: 
 1000+ Commands for FreeBSD, OpenBSD and NetBSD (Paperback)by Christopher 
 Negus 
 (Author), Francois Caen (Author)?

Amazon.com started shipping pre-ordered copies only today, so I can't
imagine too many people have had a chance to form in-depth impressions
yet.  I'll try to say more after I actually have browsed my copy.  :-)

For the moment, I will strongly second Roland Smith's reminder that ?AMP
 is largely OS independent so long as you use a *n?x that
Apache/MySQL/etc. are well supported under.  You may well do better to
find a Use Apache to build a web site or (language of your choice)
with (database of your choice) book that suits your development
philosophy.

--Jon Radel


smime.p7s
Description: S/MIME Cryptographic Signature


Syncing Mail After Cut Over

2008-04-28 Thread Chris Maness
Whould it be acceptable to use rsync to sync the mail spool after using 
dump/restore onto new hardware?  I plan on doing some testing first and 
leave the original server up while testing, so the servers mail spool will 
be out of sync.


Chris Maness
(909) 223-9179
http://www.chrismaness.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Syncing Mail After Cut Over

2008-04-28 Thread Bill Campbell
On Mon, Apr 28, 2008, Chris Maness wrote:
Whould it be acceptable to use rsync to sync the mail spool after using 
dump/restore onto new hardware?  I plan on doing some testing first and 
leave the original server up while testing, so the servers mail spool will 
be out of sync.

This is easy if your mail stores use Maildir where each message
is in a file.  I have done it many times, including at ISPs with
tens of thousands of e-mail accounts.  We set up a new server,
create the necessary accounts on it, move all DNS to point to
that server so that clients go to the new one, then rsync over
their old $HOME directories to the new server.

It's a completely different kettle of fish if the mail stores are
in single files such as the standard BSD/Unix mail stores, U.W.
IMAP's binary format, etc.

Bill
-- 
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
Voice:  (206) 236-1676  Mercer Island, WA 98040-0820
Fax:(206) 232-9186

Liberty means responsibility. That is why most men dread it.
   -- George Bernard Shaw
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvsup:Release not specified for collection

2008-04-28 Thread Mayank Jain Nawal


Hi,

Use the following supfile.




#supfile 

*default host=cvsup1.FreeBSD.org
*default base=/usr
*default prefix=/usr
*default release=cvs tag=.
*default delete use-rel-suffix

ports-all



Don't use both of the options like host as well as default host comment out 
one from both of the option. 

Regards
Mayank Jain Nawal



Hi,

I am trying to update my ports collection for the first time on a
FreeBSD4.8 i386 machine. I've edited the example file. I'm getting the
error:

Release not specified for collection host=cvsup1freebsd.org  

Here is my ports-supfile:

# $FreeBSD: src/share/examples/cvsup/ports-supfile,v 1.19.2.8 2002/12/15
15:47:22 lioux Exp $
host=cvsup1freebsd.org
base=/usr
prefix=/usr
*default host=cvsup1.FreeBSD.org
*default base=/usr
*default prefix=/usr
*default release=cvs tag=.
*default delete use-rel-suffix
 
ports-all

Do I have this file setup correctly?

TIA,

Tim
tim at cxq5.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


a monster stole my /

2008-04-28 Thread Hartleigh Burton

Hiya!

I have a problem with / currently being at 108% capacity. I have found  
a previous thread in the archives which explains a few questions but I  
can't find what is taking up all the additional space. At best without  
destroying what I still do not understand I can manage to get / to  
about 101% capacity.


To answer a couple of potential questions straight up, there is  
nothing in /root and /tmp is on a separate partition.


intranet# df -h
Filesystem   SizeUsed   Avail Capacity  Mounted on
/dev/da0s1a  989M986M-76M   108%/
devfs1.0K1.0K  0B   100%/dev
/dev/da0s1e  989M216K910M 0%/tmp
/dev/da0s1f   58G4.8G 48G 9%/usr
/dev/da0s1d  4.8G2.2G2.3G49%/var
/dev/da1p1   3.3T682G2.4T22%/db
devfs1.0K1.0K  0B   100%/var/named/dev

intranet# du -h -d1
2.0K./.snap
1.5K./dev
218K./tmp
4.8G./usr
2.2G./var
1.7M./etc
2.0K./cdrom
2.0K./dist
1.1M./bin
 71M./boot
4.4M./lib
360K./libexec
2.0K./media
512B./net
2.0K./proc
3.8M./rescue
 26K./root
4.1M./sbin
512B./host
682G./db
689G.



If I move the old kernel/GENERIC files from /boot I can manage to get  
back to 101%, I really have no idea where the rest of the space has  
gone though. Is there any way to locate large files on a specific  
partition?


I did have a problem not too long ago where my /db array did not mount  
and MySQL managed to recreate the default/sample database on /db/ 
mysql, could this default database be somewhere else on / while the / 
db array problem was fixed?


*scratches head*





Hartz.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: a monster stole my /

2008-04-28 Thread Colin Yuile
On Tue, 29 Apr 2008 14:40:09 +1000
Hartleigh Burton [EMAIL PROTECTED] wrote:

 Hiya!
 
 I have a problem with / currently being at 108% capacity. I have found  
 a previous thread in the archives which explains a few questions but I  
 can't find what is taking up all the additional space. At best without  
 destroying what I still do not understand I can manage to get / to  
 about 101% capacity.
 
 To answer a couple of potential questions straight up, there is  
 nothing in /root and /tmp is on a separate partition.
 
 intranet# df -h
 Filesystem   SizeUsed   Avail Capacity  Mounted on
 /dev/da0s1a  989M986M-76M   108%/
 devfs1.0K1.0K  0B   100%/dev
 /dev/da0s1e  989M216K910M 0%/tmp
 /dev/da0s1f   58G4.8G 48G 9%/usr
 /dev/da0s1d  4.8G2.2G2.3G49%/var
 /dev/da1p1   3.3T682G2.4T22%/db
 devfs1.0K1.0K  0B   100%/var/named/dev
 
 intranet# du -h -d1
 2.0K  ./.snap
 1.5K  ./dev
 218K  ./tmp
 4.8G  ./usr
 2.2G  ./var
 1.7M  ./etc
 2.0K  ./cdrom
 2.0K  ./dist
 1.1M  ./bin
   71M ./boot
 4.4M  ./lib
 360K  ./libexec
 2.0K  ./media
 512B  ./net
 2.0K  ./proc
 3.8M  ./rescue
   26K ./root
 4.1M  ./sbin
 512B  ./host
 682G  ./db
 689G  .
 
 
 
 If I move the old kernel/GENERIC files from /boot I can manage to get  
 back to 101%, I really have no idea where the rest of the space has  
 gone though. Is there any way to locate large files on a specific  
 partition?
 
 I did have a problem not too long ago where my /db array did not mount  
 and MySQL managed to recreate the default/sample database on /db/ 
 mysql, could this default database be somewhere else on / while the / 
 db array problem was fixed?
 
 *scratches head*
 


It is possible that you have mounted a filesystem onto a non empty directory.
The stuff in the dir used as a mount point will be hidden by the mount.

Colin

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]