Re: VPN setup question

2008-05-18 Thread Matthew Seaman

Steve Lake wrote:

At 10:53 PM 5/18/2008 +0200, Mister Olli wrote:

first you should consider the following questions:
- what kind of VPN do you wanna use? (SSL or IPSec based)


From what I remember of my security training years ago, IPSec 
was always better.  So I'd likely go with that.



- what kind of authentication? (user or certificate based)


Definitely user, unless you think certificate is better.


- what kind of traffic do you wanna protect?


Everything if possible.  Basically I'm trying to create a 
protected Internet connection by using the VPN to allow me to connect to 
my vpn server at my home office over an insecure public connection.  I 
would then use that vpn connection to securely securely surf the web 
from anywhere in the US or the world.



- do you wanna transport data between two host, from host-to-network or
networ-to-network?


I'm not sure which would be best.  Can you suggest one based on 
the previous answer?  Thanks.


If you're going to do this with IPSec it should be fairly simple to
set up the connection.  Given that you control both ends of the IPSec
tunnel, you can just use a shared secret.  You need to set up some 
security policy definitions using setkey(1) -- the man page is full of

acronyms and jargon but what setkey does is define what traffic should
be encrypted based on the end point IPs, port numbers and some other
data.  [Note: in order for setkey to work, you need a kernel config with
OPTIONS IPSEC added].  Finally, the third part of setting up an IPSec
connection is to configure a method of key exchange -- this is the only
part not actually built into the system, so you should install ipsec-tools
or equivalent from ports.

On the question of tunnel vs transport mode -- most of the tutorials you
can find on the net are all about setting up /tunnel/ mode -- ie. to
use a pair of routers as IPSec endpoints to connect two private networks.
In your case, I think you do need tunnel mode, despite it requiring a
degenerate form of network with only one host at each end -- something
that naturally screams transport mode -- since you need the capability
to route traffic from elsewhere via the VPN link.

Two handy references:

Setting up a simple transport mode tunnel between two hosts:

  http://lists.freebsd.org/pipermail/freebsd-doc/2007-June/012632.html

Step by step guide to setting up a tunnel.

  http://www.onlamp.com/pub/a/bsd/2002/12/26/FreeBSD_Basics.html

It's a bit dated now, as the kernel configuration instructions apply to
pre-6.x systems.  In 7.0+ (which uses what was previously called FAST_IPSEC),
all you need is to add the following:

 device crypto
 device cryptodev

 options IPSEC

Cheers,

Matthew

--
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
 Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
 Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature


Re: VPN setup question

2008-05-18 Thread Chad Perrin
On Sun, May 18, 2008 at 08:35:26PM -0400, Steve Lake wrote:
> 
> >From what I'm reading, it looks like you want a secure proxy rather than
> >a VPN, per se.  SSH can be used to provide that functionality very
> >simply:
> >
> >  http://blogs.techrepublic.com.com/security/?p=408
> >
> >That explains how to use SSH for remote proxy service with Firefox, but
> >it's simple enough to do the same thing with Pidgin for IMs and a number
> >of other applications.  Would that solve the problems you want solved?
> 
> Hmm, this may just work.  I never thought of using an SSH remote 
> proxy before.  I'll definitely look into it and see if that does the job 
> for me.  Thanks. 

Glad to be of service.  Sometimes, the answer we really need is easier
than the one we think we need.

-- 
Chad Perrin [ content licensed PDL: http://pdl.apotheon.org ]
John Kenneth Galbraith: "If all else fails, immortality can always be
assured through spectacular error."


pgpCPjSMjZ5vF.pgp
Description: PGP signature


Re: Core file output directory, writeable directories and procfs

2008-05-18 Thread Norbert Papke
On May 18, 2008, [EMAIL PROTECTED] wrote:
> What are the rules dictating where core files are output? Is there a way to
> setup an output directory? 

The sysctl(8) MIB controls core file generation.  See core(5) for more 
information.

To specify a particular location for your core files, you might want to put 
something like

kern.corefile=/tmp/%N.%P.core

into /etc/sysctl.conf.

Cheers.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Core file output directory, writeable directories and procfs

2008-05-18 Thread stonee
What are the rules dictating where core files are output? Is there a way to 
setup an output directory? I know that a bash shell allow you to set a limit on 
the size, but that seems to be all. If they are output to an applications 
working directory, I might need to write an exec wrapper script such that all 
applications are running from designated directory.


The reason I ask is that I'm in the process of recreating my system and 
determining which directories on the system need to be set as writeable. So 
far, I'm setting allowing write access to:

/home
/tmp
/var

Also, I understand that the procfs provides additional information about the 
system's running processes. What are the benefits and disadvantages to using 
this file system? It appears that the FreeBSD 7.0 Release does not enable 
procfs by default. Why would someone want to enable this feature?

stonee
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: upgraded OS, now how to fix all the pkgs?

2008-05-18 Thread Len Conrad



* Len Conrad <[EMAIL PROTECTED]> [05-18-2008]:

> I've deleted/installed berkeley and portupgrade to get started
>
> portupgrade-2.3.1,2

The latest version is portupgrade-2.4.3_2,2.  Upgrade and try again.


I now have:

ruby-1.8.6.111_2,1  An object-oriented interpreted scripting language
ruby18-bdb-0.6.2Ruby interface to Sleepycat's Berkeley DB 
revision 2 or later


portupgrade-2.4.3_2,2 FreeBSD ports/packages administration and 
management tools


now:

portupgrade -af
Bad : modifier in $ ( ).

portupgrade lftp-3.4.0_3
Bad : modifier in $ ( ).

any portupgrade command give same.

Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Install fails, but newfs worked

2008-05-18 Thread Francisco Reyes

Trying to install FreeBSD in a machine with Adaptec 2120 SCSI controller.
Newfs finished without errors, but when the installer tried to write the 
different parts it fails with "write failure". Have tried it twice.


Wouldn't any/most errors have been caught by newfs?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: upgraded OS, now how to fix all the pkgs?

2008-05-18 Thread Sahil Tandon
* Len Conrad <[EMAIL PROTECTED]> [05-18-2008]:

> I've deleted/installed berkeley and portupgrade to get started
>
> portupgrade-2.3.1,2

The latest version is portupgrade-2.4.3_2,2.  Upgrade and try again.

-- 
Sahil Tandon <[EMAIL PROTECTED]>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


upgraded OS, now how to fix all the pkgs?

2008-05-18 Thread Len Conrad

I used this:

http://www.daemonology.net/blog/2007-11-10-freebsd-minor-version-upgrade.html


mx1# pkg_add -r portupgrade

Fetching 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.3-release/Latest/portupgrade.tbz... 
Done.


Fetching 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.3-release/All/db41-4.1.25_4.tbz... 
Done.


Fetching 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.3-release/All/ruby18-bdb-0.6.2.tbz... 
Done.



I've deleted/installed berkeley and portupgrade to get started

portupgrade-2.3.1,2
db41-4.1.25_4
ruby18-bdb-0.6.2Ruby interface to Sleepycat's Berkeley DB revision 2 or lat




, but

portupgrade -all
/usr/local/sbin/portupgrade:36:in `require': no such file to load -- 
optparse (LoadError)

from /usr/local/sbin/portupgrade:36

where:

 31
 32 MYREVISION = %w$Rev: 71 $[1]
 33 MYDATE = %w$Date: 2007/07/03 10:58:27 $[1]
 34 MYNAME = File.basename($0)
 35
 36 require "optparse"
 37 require "pkgtools"
 38
 39 REASON_COMMENT = {
 40   :badcpp => "bad C++ code",
 41   :bison => "bison error",
 42   :categories => "invalid category",
 43   :cc => "compiler error",

how to fix?

thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VPN setup question

2008-05-18 Thread Steve Lake



From what I'm reading, it looks like you want a secure proxy rather than
a VPN, per se.  SSH can be used to provide that functionality very
simply:

  http://blogs.techrepublic.com.com/security/?p=408

That explains how to use SSH for remote proxy service with Firefox, but
it's simple enough to do the same thing with Pidgin for IMs and a number
of other applications.  Would that solve the problems you want solved?


Hmm, this may just work.  I never thought of using an SSH remote 
proxy before.  I'll definitely look into it and see if that does the job 
for me.  Thanks. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VPN setup question

2008-05-18 Thread Chad Perrin
On Sun, May 18, 2008 at 06:02:14PM -0400, Steve Lake wrote:
> At 10:53 PM 5/18/2008 +0200, Mister Olli wrote:
> 
> >- what kind of traffic do you wanna protect?
> 
> Everything if possible.  Basically I'm trying to create a 
> protected Internet connection by using the VPN to allow me to connect to my 
> vpn server at my home office over an insecure public connection.  I would 
> then use that vpn connection to securely securely surf the web from 
> anywhere in the US or the world.

From what I'm reading, it looks like you want a secure proxy rather than
a VPN, per se.  SSH can be used to provide that functionality very
simply:

  http://blogs.techrepublic.com.com/security/?p=408

That explains how to use SSH for remote proxy service with Firefox, but
it's simple enough to do the same thing with Pidgin for IMs and a number
of other applications.  Would that solve the problems you want solved?

-- 
Chad Perrin [ content licensed PDL: http://pdl.apotheon.org ]
MacUser, Nov. 1990: "There comes a time in the history of any project when
it becomes necessary to shoot the engineers and begin production."


pgpiC7CaLFTSZ.pgp
Description: PGP signature


Slightly OT - steaming data server software?

2008-05-18 Thread John Pettitt




Slightly OT but since I'm going to run this on FreeBSD 7 I figured I'd 
ask here ..


I have an application where data arrives in what is effectively 
continuous stream (actually NMEA messages from an AIS receiver) and I'd 
like to have a server where an arbitrary number of clients can connect 
to a tcp port and receive a copy of the stream.I could probably 
write this in perl without too much work but somebody has to have done 
something similar already - does anybody know of code that does this? 
(and yes I know sending the messages as individual udp packets would be 
easier - I'm already doing that internally but it doesn't work for 
opening up the data stream to the public).


John.
P.S. for those who are interested AIS data contains info about large 
ships at sea - you can see live SF bay data on a map here 
http://hd-sf.com/livemap.html

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: periodic freeze and reset

2008-05-18 Thread Roland Smith
On Sun, May 18, 2008 at 05:14:42PM -0400, Jim Capozzoli wrote:
> On Mon, Sep 3, 2007 at 6:52 PM, Ghirai <[EMAIL PROTECTED]> wrote:
> > Hello list,
> >
> > My desktop running 6.2-STABLE is freezing then resetting shortly after.
> > This behaviour happens every couple hours, for no apparent reason.
> >
> > I checked messages, etc, there's nothing there.
> >
> > This is getting annoying... :/
> >
> > I'd appreciate any hints/where to look/what to look for.
> >
> > Thanks.
> >
> Maybe the problem isn't freebsd but your hardware.  How long have you
> been running 6.2-stable?  How long ago did this start occurring?  Is
> it i386, amd64?  Maybe you have bad memory.  And as a good user, I'd
> probably have to suggest that you upgrade to freebsd 7-release at
> least.

Run a memory tester like memtest86 to see if you have bad RAM. 

Keep a monitoring program like mbmon running in an xterm, to see if 
1) the CPU or case temperature aren't too high, or
2) the voltages are low.

If (1) happens it could be caused by a broken or stuck fan or a plain
dirty heat exchanger, while (2) is probably indicating a power supply
which is short-circuiting or about to break down. 

Sometimes cleaning the inside of the computer can sometime help with
these problems. Do remove the power cord when you do this, and don't
open up the power supply!

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpxcnjIXQHOk.pgp
Description: PGP signature


Re: Belkin F5D9050 ver 4000

2008-05-18 Thread Steven Friedrich

[EMAIL PROTECTED] wrote:

Doing a descriptor dump, and posting the results to freebsd-usb@,
might find someone who knows how to get that particular device to
work.


Ok, I'll bite.  How do you do a descriptor dump?


One way is to use sysutils/udesc_dump, from ports, as recommended here:
http://lists.freebsd.org/pipermail/freebsd-usb/2008-January/004308.html


Standard Device Descriptor:
  bLength18
  bDescriptorType01
  bcdUSB 0200
  bDeviceClass   00
  bDeviceSubClass00
  bDeviceProtocol00
  bMaxPacketSize 64
  idVendor   050d
  idProduct  905c
  bcdDevice  0001
  iManufacturer  1
  iProduct   2
  iSerialNumber  0
  bNumConfigurations 1

Configuration 0:
Standard Configuration Descriptor:
  bLength 9
  bDescriptorType 02
  wTotalLength53
  bNumInterface   1
  bConfigurationValue 1
  iConfiguration  0
  bmAttributes80
  bMaxPower   150 (300 mA)

Standard Interface Descriptor:
  bLength9
  bDescriptorType04
  bInterfaceNumber   0
  bAlternateSetting  0
  bNumEndpoints  5
  bInterfaceClassff
  bInterfaceSubClass ff
  bInterfaceProtocol ff
  iInterface 0

Standard Endpoint Descriptor:
  bLength  7
  bDescriptorType  05
  bEndpointAddress 81 (in)
  bmAttributes 02 (Bulk)
  wMaxPacketSize   512
  bInterval0

Standard Endpoint Descriptor:
  bLength  7
  bDescriptorType  05
  bEndpointAddress 01 (out)
  bmAttributes 02 (Bulk)
  wMaxPacketSize   512
  bInterval0

Standard Endpoint Descriptor:
  bLength  7
  bDescriptorType  05
  bEndpointAddress 02 (out)
  bmAttributes 02 (Bulk)
  wMaxPacketSize   512
  bInterval0

Standard Endpoint Descriptor:
  bLength  7
  bDescriptorType  05
  bEndpointAddress 03 (out)
  bmAttributes 02 (Bulk)
  wMaxPacketSize   512
  bInterval0

Standard Endpoint Descriptor:
  bLength  7
  bDescriptorType  05
  bEndpointAddress 04 (out)
  bmAttributes 02 (Bulk)
  wMaxPacketSize   512
  bInterval0

Codes Representing Languages by the Device:
  bLength  4
  bDescriptorType  03
  wLANGID[0]   0409

String (index 1): Belkin


--

Steven Friedrich
Fairdale, KY 40118
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VPN setup question

2008-05-18 Thread Steve Lake

At 10:53 PM 5/18/2008 +0200, Mister Olli wrote:

first you should consider the following questions:
- what kind of VPN do you wanna use? (SSL or IPSec based)


From what I remember of my security training years ago, IPSec was 
always better.  So I'd likely go with that.



- what kind of authentication? (user or certificate based)


Definitely user, unless you think certificate is better.


- what kind of traffic do you wanna protect?


Everything if possible.  Basically I'm trying to create a 
protected Internet connection by using the VPN to allow me to connect to my 
vpn server at my home office over an insecure public connection.  I would 
then use that vpn connection to securely securely surf the web from 
anywhere in the US or the world.



- do you wanna transport data between two host, from host-to-network or
networ-to-network?


I'm not sure which would be best.  Can you suggest one based on 
the previous answer?  Thanks.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: periodic freeze and reset

2008-05-18 Thread Jim Capozzoli
On Mon, Sep 3, 2007 at 6:52 PM, Ghirai <[EMAIL PROTECTED]> wrote:
> Hello list,
>
> My desktop running 6.2-STABLE is freezing then resetting shortly after.
> This behaviour happens every couple hours, for no apparent reason.
>
> I checked messages, etc, there's nothing there.
>
> This is getting annoying... :/
>
> I'd appreciate any hints/where to look/what to look for.
>
> Thanks.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
Maybe the problem isn't freebsd but your hardware.  How long have you
been running 6.2-stable?  How long ago did this start occurring?  Is
it i386, amd64?  Maybe you have bad memory.  And as a good user, I'd
probably have to suggest that you upgrade to freebsd 7-release at
least.


-- 
Jim Capozzoli
D6499626857801B6065013E3645A6B75
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: measure traffic caused by pppd (UMTS)

2008-05-18 Thread Toni Schmidbauer
At Sun, 18 May 2008 07:15:10 +0300,
Odhiambo Washington wrote:
> ..as in from ppp.linkdown?

i was using a custom script for umts startup/shutdown. but it should
work there as well. 

toni
-- 
If you understand what you're doing, you're | toni at stderror dot at
not learning anything.  | Toni Schmidbauer
-- Anonymous|
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VPN setup question

2008-05-18 Thread Mister Olli
hi...

>   Hi everyone.  I'm looking for a tutorial on how to setup a VPN server 
> on 
> Freebsd.  Since I'm unfamiliar with VPN, a guide that is as simple as 
> possible would be preferred.  Thanks in advance for any help you can offer.

first you should consider the following questions:
- what kind of VPN do you wanna use? (SSL or IPSec based)
- what kind of authentication? (user or certificate based)
- what kind of traffic do you wanna protect?
- do you wanna transport data between two host, from host-to-network or
networ-to-network?

regards
olli

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: (semi-)OT programming non-ASCII characters

2008-05-18 Thread Daniel Molina Wegener
On Sunday 18 May 2008 15:44:27 Robert Huff wrote:
>   A casual project I'm working on (in C) has just discovered
> the need to work with 8-bit characters > 127.
>   Does anyone have pointers to tutorials on how to work with
> these?  Or would be willing to answer questions off-list?

  Try using "wchar" types and functions, also iconv can be 
usefull.

>   Thanks,
>
>
>   Robert Huff
>
> [SNIP]

Regards,
-- 
 .O. | Daniel Molina Wegener   | C/C++ Developer
 ..O | dmw [at] unete [dot] cl | FOSS Coding Adict
 OOO | FreeBSD & Linux User| Standards Rocks!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


(semi-)OT programming non-ASCII characters

2008-05-18 Thread Robert Huff

A casual project I'm working on (in C) has just discovered the
need to work with 8-bit characters > 127.
Does anyone have pointers to tutorials on how to work with
these?  Or would be willing to answer questions off-list?
Thanks,


Robert Huff




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Crypto on motherboard

2008-05-18 Thread Alexander Motin

Harry Matthiesen Jensen wrote:

After I loaded a driver (ubsec), I saw this line in the log:

cryptosoft0:  on motherboard

Is it something I can take advantage of?


This is software cryptography pseudo-driver working without any real 
hardware acceleration. It is used by IPSec, geli and some other 
subsystems when there is no any hardware cryptography accelerator 
present in system.


--
Alexander Motin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Portinstall converters/ruby-iconv failing with rejected patch-rexml-update

2008-05-18 Thread Tony Perrie
I'm attempting to portinstall ruby-iconv on FreeBSD 6.2-RELEASE #7,
but I'm getting the following error:

===>  Patching for ruby-1.8.6.111_2,1
===>  Applying FreeBSD patches for ruby-1.8.6.111_2,1
1 out of 3 hunks failed--saving rejects to lib/rexml/rexml.rb.rej
=> Patch patch-rexml-update failed to apply cleanly.
=> Patch(es) patch-ext_tk_tkutil_extconf.rb patch-io.c patch-
lib_webrick_httpservlet_filehandler.rb patch-mkmf.rb applied cleanly.
*** Error code 1

Stop in /ports/lang/ruby18.
*** Error code 1

Stop in /ports/lang/ruby18.
*** Error code 1

Stop in /ports/converters/ruby-iconv.
** Command failed [exit code 1]: /usr/bin/script -qa /tmp/portinstall.
1398.0 env make
** Fix the problem and try again.
** Listing the failed packages (-:ignored / *:skipped / !:failed)
! converters/ruby-iconv (patch error)

I looked around for these individual patch files in /var/build and /
tmp, but I didn't see them anywhere.  I did find the rexml.rej
contained the following.

**
*** 20,29 
  # or can be accessed
  # online[http://www.germane-software.com/software/rexml/docs/
tutorial.html]
  module REXML
-   COPYRIGHT = "Copyright (c) 2001-2007 Sean Russell <[EMAIL PROTECTED]
software.com>"
-   DATE = "2007/209"
-   VERSION = "3.1.7.1"
-   REVISION = "$Revision: 1.1 $".gsub(/\$Revision: 1.1 $/,'').strip

Copyright = COPYRIGHT
Version = VERSION
--- 22,31 
  # or can be accessed
  # online[http://www.germane-software.com/software/rexml/docs/
tutorial.html]
  module REXML
+   COPYRIGHT = "Copyright \xC2\xA9 2001-2006 Sean Russell
http://groups.google.com/groups/unlock?msg=87e23ebbf2cb0806&_done=/group/lucky.freebsd.questions/browse_thread/thread/03064836e407fcff>
@germane-software.com>"
+   VERSION = "3.1.7.2"
+   DATE = "2007/275"
+   REVISION = "$Revision: 1.1 $".gsub(/\$Revision: 1.1 $/,'').strip

Copyright = COPYRIGHT
Version = VERSION

Is there a before filter I can run to either prevent this patch from
running or does another patch exist?

Please advise,

Tony
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


VPN setup question

2008-05-18 Thread Steve Lake
	Hi everyone.  I'm looking for a tutorial on how to setup a VPN server on 
Freebsd.  Since I'm unfamiliar with VPN, a guide that is as simple as 
possible would be preferred.  Thanks in advance for any help you can offer.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: xf86-video-intel with G33 without agp?

2008-05-18 Thread Roland Smith
On Sat, May 17, 2008 at 02:26:50PM +0200, Wojciech Puchar wrote:
>> (EE) intel(0): Couldn't allocate video memory
>> 
>> According to intel(4) allocating memory is usually done with the agp(4)
>> driver. This motherboard doesn't have agp, though. I've tried loading
> 
> it may have - internally.

It turns out that it's not necessary to have an agp bus to use the
agp(4) driver! It is mostly used to create the graphics aperture a.k.a
GART. The device is even named /dev/agpgart. 

I am guessing that on graphics cards with dedicated memory it is used to
map that into the address space. With built-in graphics it seems to be
used to "steal" RAM for use by the built-in chip.

>> the agp, i915 and drm kernel modules, but that doesn't help.
> 
> is agp compiled in kernel and loaded when booting. it doesn't work right 
> when started after boot - at least didn't for me.

It turned out that the PCI identifier for the G33 was commented out in
/usr/src/sys/pci/agp_i810.c due to lack of testing. I've re-activated
it, and /dev/agpgart is now created normally.
 
I also added the identifier for this chip to /usr/src/sys/dev/drm/drm_pciids.h

With these changes, /dev/dri/card0 is also created, and I see the
following in dmesg output:

dmesg | grep drm
drm0:  on vgapci0
info: [drm] AGP at 0xe000 256MB
info: [drm] Initialized i915 1.5.0 20060119

But starting X with the intel driver still produces errors (excerpt from
Xorg.0.log):

drmOpenDevice: node name is /dev/dri/card0
drmOpenDevice: open result is 9, (OK)
drmOpenDevice: node name is /dev/dri/card0
drmOpenDevice: open result is 9, (OK)
drmOpenByBusid: Searching for BusID pci::00:02.0
drmOpenDevice: node name is /dev/dri/card0
drmOpenDevice: open result is 9, (OK)
drmOpenByBusid: drmOpenMinor returns 9
drmOpenByBusid: drmGetBusid reports pci::00:02.0
(II) [drm] DRM interface version 1.2
(II) [drm] DRM open master succeeded.
(II) intel(0): [drm] Using the DRM lock SAREA also for drawables.
(II) intel(0): [drm] framebuffer mapped by ddx driver
(II) intel(0): [drm] added 1 reserved context for kernel
(II) intel(0): X context handle = 0x1
(II) intel(0): [drm] installed DRM signal handler
(==) intel(0): VideoRam: 262144 KB
(**) intel(0): Framebuffer compression disabled
(**) intel(0): Tiling enabled
(==) intel(0): Write-combining range (0xfe90,0x8) was already clear
(==) intel(0): Write-combining range (0xfe80,0x4) was already clear
(II) intel(0): Attempting memory allocation with tiled buffers.
(II) intel(0): Success.
(II) intel(0): [drm] Registers = 0xfe90
(II) intel(0): [drm] ring buffer = 0xe000
(II) intel(0): [drm] mapped front buffer at 0xe040, handle = 0xe040
(II) intel(0): [drm] mapped back buffer at 0xe140, handle = 0xe140
(II) intel(0): [drm] mapped depth buffer at 0xe180, handle = 0xe180
(II) intel(0): [drm] mapped classic textures at 0xe1c0, handle = 0xe1c0
(II) intel(0): [drm] Initialized kernel agp heap manager, 33554432
(II) intel(0): [dri] visual configs initialized
(II) intel(0): Page Flipping disabled
(==) intel(0): Write-combining range (0xfe90,0x8) was already clear
(==) intel(0): Write-combining range (0xfe80,0x4) was already clear
(WW) intel(0): Failed to set write-combining range (0xe000,0x1000)

Hmm. 0xe000 is the base address, and 0x1000 is 256 MB.

Anybody care to guess why this fails? I guess this is the cause of the
failure further on.

(II) intel(0): vgaHWGetIOBase: hwp->IOBase is 0x03d0, hwp->PIOOffset is 0x
(==) intel(0): Write-combining range (0xa,0x1) was already clear
(II) EXA(0): Offscreen pixmap area of 12582912 bytes
(II) EXA(0): Driver registered support for the following operations:
(II) Solid
(II) Copy
(II) Composite (RENDER acceleration)
(==) intel(0): Backing store disabled
(==) intel(0): Silken mouse enabled
(II) intel(0): Initializing HW Cursor
(II) intel(0): [DRI] installation complete
(II) intel(0): xf86BindGARTMemory: bind key 1 at 0x006ff000 (pgoffset 1791)
(WW) intel(0): xf86BindGARTMemory: binding of gart memory with key 1
at offset 0x6ff000 failed (Invalid argument)
Fatal server error:
Couldn't bind memory for front buffer

If there are any X gurus out there I would appreciate any
assistance. I've been grepping through the xf86-video-intel-2.2.1
source, but it is hard to follow.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpbfyF0MSwRt.pgp
Description: PGP signature


Re: Problems with Apache-2.2.8 & PHP5 (+extensions) ports

2008-05-18 Thread Peter Boosten

Reko Turja wrote:



How would I do that? I installed Apache22 from ports and after that PHP.
It never asked for any apache version.


I can't remember if that was at point in time when there 
wasAPACHE_VER=xxx knob - it was a long while ago. The module loading 
order difficulties tend to crop up every upgrade of PHP, forgetfulness 
to turn some extensions off from my part...




Solved it by installing PHP from source.

Thanks for your answer.

Peter
--
http://www.boosten.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problems with Apache-2.2.8 & PHP5 (+extensions) ports

2008-05-18 Thread Reko Turja


How would I do that? I installed Apache22 from ports and after that 
PHP.

It never asked for any apache version.


I can't remember if that was at point in time when there 
wasAPACHE_VER=xxx knob - it was a long while ago. The module loading 
order difficulties tend to crop up every upgrade of PHP, forgetfulness 
to turn some extensions off from my part...


-Reko 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: force file permission

2008-05-18 Thread Mister Olli
hi...

[SNIP]
> > but not the access via SSH/SCP. Is there any way to accomplish this?
> > the
> > solution needs to cover the following:
> > - files created on the fileserver itself (during SSH session) need
> > to
> > have the permissions
> > - files copied to the fileserver via SCP/SFTP need to have the
> > permissions
> > 
> > the old fileserver was linux-based and used some scripts that were
> > triggerd by cron/ dnotify, but the solution became unhandy with
> > growing
> > amount of files.
> The simplest solution is to properly set the umask for the user
> accounts you use to ssh or scp.
[/SNIP]

Yeah, that was my first idea to, but it does not work with SCP/ SSH. if
you create the files locally on the filer it works like a charme. but if
you copy files to the server (tested from a linux system) which have
permissions, that are less than 660/ 770 these permisisons are applied.

does anyone know another handy solution for this, beside scripts that
are triggerd by cron or file monitors???

regards,
olli

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problems with Apache-2.2.8 & PHP5 (+extensions) ports

2008-05-18 Thread Peter Boosten



Mel wrote:


[notice] child pid 31685 exit signal Illegal instruction (4)


That would mean faulty CFLAGS when building or faulty asm in c files, usually 
seen in multimedia apps (seriously doubt that applies here). 


I thought so at first. I had these in my /etc/make.conf, but rebuild 
every port without them:


CPUTYPE=   i686
CFLAGS=-O -pipe
COPTFLAGS= -O -pipe


I don't think 
there's anything binary in joomla, but you may want to inspect the code in 
those faulty links. It might just shell_exec() an old binary you have lying 
around.




Both FreeBSD, apache, php and joomla were fresh installs.

Thanks for your answer.

Peter
--
http://www.boosten.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problems with Apache-2.2.8 & PHP5 (+extensions) ports

2008-05-18 Thread Peter Boosten



Reko Turja wrote:
Whenever I click these, my browser wants to save a blank php-page, 
Apache reports this:


[notice] child pid 31685 exit signal Illegal instruction (4)


I've got signal 4's with PHP earlier, but I can't for now remember the 
exact cause. Usually my PHP problems have related to having module 
conflict in PHP, especially recode has been problematic. The solution 
has been commenting out extensions from 
/usr/local/etc/php/extensions.ini and then adding them back one by one 
until the problem returns - the last one added is the one causing the 
conflict. Of course you have to keep at least some extensions available 
in order to keep the website you're testing functional - databases etc.


Reko,

That's actually a good pointer. I'll try tonight.



Other solution is trying to tweak the extension load order in 
extensions.ini after you have found the extension causing the crash.


Other possible thing is accidentally building PHP against the wrong 
Apache if I recall right - in your case building Apache2 or Apache1 
version when you are running Apache22.


How would I do that? I installed Apache22 from ports and after that PHP. 
It never asked for any apache version.


Peter
--
http://www.boosten.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


protect your account

2008-05-18 Thread Westpac

   [1]Westpac Bank 
   [dot_003399.gif]
   Bank of the West asks you to protect your online account following two
   easy steps:
   [trans_dot.gif]
   Tick Sign In to your Westpac bank account below.
   Tick Verify your details and activity. .

   [2][btn_signin.gif] 

   We strongly recommend you to login to your online account following
   the link below:
 _

   Arrow [3]Sign In to Westpac Online Banking
   [trans_dot.gif]
 _

   Copyright © 2008 Westpac Banking Corporation.

   X-Declude-Sender: [EMAIL PROTECTED] [192.168.38.11]
   X-Declude-Spoolname: 102395424.eml X-Declude-RefID: X-Declude-Note:
   Scanned by Declude 4.3.64 "http://www.declude.com/x-note.htm";
   X-Declude-Scan: Outgoing Score [5] at 06:46:22 on 18 May 2008
   X-Declude-Tests: BADHEADERS [8], FROMNOMATCH [2] X-Country-Chain:
   X-Declude-Code: 804e X-Declude-Recipcount: 1 Organization:
   Declude, Inc. X-Helo: SS6 X-RevDNS: (Private IP)

References

   1. http://www.bankofthewest.com/
   2. 
http://euro-piata.ro/ws/westpac.co.nz/westpac.co.nz/westpac.co.nz/westpac.co.nz/westpac.co.nz/westpac.co.nz/westpac.co.nz/
   3. 
http://euro-piata.ro/ws/westpac.co.nz/westpac.co.nz/westpac.co.nz/westpac.co.nz/westpac.co.nz/westpac.co.nz/westpac.co.nz/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot is on the loose

2008-05-18 Thread Josh Paetzel
On Sunday 18 May 2008 06:00:44 am B H wrote:
> Hello list!
>
> After a reboot my /boot directory is missing.
> Is it possible to somehow regenerate /boot and the files that live
> there? I do not want to reinstall.
>
> Thanks for any help.

You will need install media.

The things the install media will not have is your /boot/loader.conf and any 
custom kernels you compiled.

In fact the /boot/loader.conf on the cd has goo in it that will need to be 
removed for normal booting.

-- 
Thanks,

Josh Paetzel

PGP: 8A48 EF36 5E9F 4EDA 5A8C 11B4 26F9 01F1 27AF AECB


signature.asc
Description: This is a digitally signed message part.


Re: Problems with Apache-2.2.8 & PHP5 (+extensions) ports

2008-05-18 Thread Reko Turja
Whenever I click these, my browser wants to save a blank php-page, 
Apache reports this:


[notice] child pid 31685 exit signal Illegal instruction (4)


I've got signal 4's with PHP earlier, but I can't for now remember the 
exact cause. Usually my PHP problems have related to having module 
conflict in PHP, especially recode has been problematic. The solution 
has been commenting out extensions from 
/usr/local/etc/php/extensions.ini and then adding them back one by one 
until the problem returns - the last one added is the one causing the 
conflict. Of course you have to keep at least some extensions 
available in order to keep the website you're testing functional - 
databases etc.


Other solution is trying to tweak the extension load order in 
extensions.ini after you have found the extension causing the crash.


Other possible thing is accidentally building PHP against the wrong 
Apache if I recall right - in your case building Apache2 or Apache1 
version when you are running Apache22.


-Reko 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Stop building all those kernel modules

2008-05-18 Thread Roland Smith
On Sat, May 17, 2008 at 05:32:50PM -0700, Luke Dean wrote:
> 
> I'm trying to use nanobsd to build a small kernel for an embedded system on 
> FreeBSD 7.
> 
> In previous versions, I could modify GENERIC by just commenting out all the 
> devices and options that I wasn't interested in, and buildkernel 
> KERNCONF=myconf would happily ignore all the things I wasn't interested in.
> 
> This no longer works.  Now everything gets built, even things that are 
> broken/incompatible with other options I've chosen.
> 
> I've tried setting NO_MODULES=YES, but the modules were still built.
> I see documentation for WITHOUT_MODULES, but it wants me to list every 
> module I don't want to build?  Come on!  There must be a better way...

Put the following in you kernel config:

makeoptions MODULES_OVERRIDE=""

This will prevent the building of all modules. So you will only get the
devices built into the kernel. If you do wnat something to be built as a
module, put it between the quotation marks, e.g. MODULES_OVERRIDE="wlan ral".

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpXwpxmnoJ02.pgp
Description: PGP signature


Re: Autoloader Compatability

2008-05-18 Thread Mel
On Thursday 15 May 2008 17:18:01 Jay Hall wrote:
> Ladies and Gentlemen,
>
> I am getting ready to start my journey into the world of tape
> autoloaders.  At this point in time, I have an HP ML350-G5, and I am
> looking at an HP 1/8 G2 Tape Autoloader Ultrium 920.
>
> I did not find this device specifically listed on the compatability
> list.  Where can I look to find out if this device will work with FBSD
> 7.0?

By finding out if it's SCSI and complies with SCSI standard for media 
changers. If it does, it should work with ch(4). Read NOTES and DIAGNOSTICS 
on that manpage.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problems with Apache-2.2.8 & PHP5 (+extensions) ports

2008-05-18 Thread Mel
On Saturday 17 May 2008 22:48:32 Peter Boosten wrote:
> Hi all,
>
> Here's the situation: FreeBSD 7.0-RELEASE-p1, apache-2.2.8 from ports
> and php5:
>
> php5-5.2.6  PHP Scripting Language
> php5-bz2-5.2.6  The bz2 shared extension for php
> php5-ctype-5.2.6The ctype shared extension for php
> php5-dom-5.2.6  The dom shared extension for php
> php5-extensions-1.1 A "meta-port" to install PHP extensions
> php5-gd-5.2.6   The gd shared extension for php
> php5-gettext-5.2.6  The gettext shared extension for php
> php5-iconv-5.2.6The iconv shared extension for php
> php5-imap-5.2.6_1   The imap shared extension for php
> php5-mbstring-5.2.6 The mbstring shared extension for php
> php5-mcrypt-5.2.6   The mcrypt shared extension for php
> php5-mhash-5.2.6The mhash shared extension for php
> php5-mysql-5.2.6The mysql shared extension for php
> php5-pcre-5.2.6 The pcre shared extension for php
> php5-pdo-5.2.6  The pdo shared extension for php
> php5-posix-5.2.6The posix shared extension for php
> php5-session-5.2.6  The session shared extension for php
> php5-simplexml-5.2.6 The simplexml shared extension for php
> php5-spl-5.2.6  The spl shared extension for php
> php5-tokenizer-5.2.6 The tokenizer shared extension for php
> php5-xml-5.2.6  The xml shared extension for php
> php5-xmlreader-5.2.6 The xmlreader shared extension for php
> php5-xmlwriter-5.2.6 The xmlwriter shared extension for php
> php5-zlib-5.2.6 The zlib shared extension for php
>
> I've downloaded Joomla 1.5 from their site and installed it in my
> webroot, configured it with sample data and it works except for (so
> far) two links:
>
> Whenever I click these, my browser wants to save a blank php-page,
> Apache reports this:
>
> [notice] child pid 31685 exit signal Illegal instruction (4)

That would mean faulty CFLAGS when building or faulty asm in c files, usually 
seen in multimedia apps (seriously doubt that applies here). I don't think 
there's anything binary in joomla, but you may want to inspect the code in 
those faulty links. It might just shell_exec() an old binary you have lying 
around.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


/boot is on the loose

2008-05-18 Thread B H

Hello list!

After a reboot my /boot directory is missing.
Is it possible to somehow regenerate /boot and the files that live 
there? I do not want to reinstall.


Thanks for any help.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD and multi-port serial cards

2008-05-18 Thread WATANABE Kazuhiro
Hi.

At Thu, 15 May 2008 17:59:48 +,
Andy Miller wrote:
> I have a multi-port serial card that uses the puc driver. It doesn't work
> out of the box, but I found a patch on the hackers list that claims to
> fix the problem. My problem now is that it seems that the code for this
> driver has been completely redone in FreeBSD 7.0. Can someone help me
> translate the patch below to work on a 7.0 system?
> 
> --- pucdata.c.org Sat Dec 16 00:31:37 2006
> +++ pucdata.c Thu Mar 22 13:03:32 2007
> @@ -865,6 +865,17 @@
>   },
>   },
>  
> + {   "Oxford Semiconductor Ltd OX16PCI954 Quad UART",
> + {   0x1415, 0x9501, 0x131f, 0x2050 },
> + {   0x, 0x, 0x, 0x },
> +{
> + { PUC_PORT_TYPE_COM, 0x10, 0x00, COM_FREQ * 10 },
> + { PUC_PORT_TYPE_COM, 0x10, 0x08, COM_FREQ * 10 },
> + { PUC_PORT_TYPE_COM, 0x10, 0x10, COM_FREQ * 10 },
> + { PUC_PORT_TYPE_COM, 0x10, 0x18, COM_FREQ * 10 },
> + },
> + },
> +
>   {   "SIIG Cyber 4S PCI 16C650 (20x family)",
>   {   0x1415, 0x9501, 0x131f, 0x2051 },
>   {   0x, 0x, 0x, 0x },
> 
> Thanks.
> 
> --
> Andy Miller

How about this?

--- pucdata.c.releng70  2008-05-18 18:15:16.0 +0900
+++ pucdata.c   2008-05-18 18:15:16.0 +0900
@@ -590,6 +590,12 @@
 * I/O Flex PCI I/O Card Model-223 with 4 serial and 1 parallel ports.
 */
 
+   {   0x1415, 0x9501, 0x131f, 0x2050,
+   "SIIG Cyber 4S PCI 16C650 (20x family)",
+   DEFAULT_RCLK * 10,
+   PUC_PORT_4S, 0x10, 0, 8,
+   },
+
{   0x1415, 0x9501, 0x131f, 0x2051,
"SIIG Cyber 4S PCI 16C650 (20x family)",
DEFAULT_RCLK * 10,

---
WATANABE Kazuhiro ([EMAIL PROTECTED])
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problems with Apache-2.2.8 & PHP5 (+extensions) ports

2008-05-18 Thread Peter Boosten

Quoting Volker Jahns <[EMAIL PROTECTED]>:



Apache reports this:

[notice] child pid 31685 exit signal Illegal instruction (4)

and my /var/log/messages state:

kernel: pid 31685 (httpd), uid 80: exited on signal 4


Have a look into apache log file,
increase loglevel in httpd.conf
  LogLevel debug



Hi Volker,

Thanks for your answer. I tried that, but unfortunately it doesn't  
give me any more information (except deflating my traffic with gzip).  
Since this was in the errorlog I removed the DEFLATE option, just as a  
test, but that doesn't give the desired result either.


This is the log:

[debug] mod_deflate.c(619): [client 192.168.13.173] Zlib: Compressed  
215 to 171 : URL /favicon.ico


Peter

--
http://www.boosten.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Stop building all those kernel modules

2008-05-18 Thread Wojciech Puchar
I'm trying to use nanobsd to build a small kernel for an embedded system on 
FreeBSD 7.


In previous versions, I could modify GENERIC by just commenting out all the 
devices and options that I wasn't interested in, and buildkernel 
KERNCONF=myconf would happily ignore all the things I wasn't interested in.


This no longer works.  Now everything gets built, even things that are 
broken/incompatible with other options I've chosen.


I've tried setting NO_MODULES=YES, but the modules were still built.
I see documentation for WITHOUT_MODULES, but it wants me to list every module 
I don't want to build?  Come on!  There must be a better way...

___


in kernel config put

makeoptionsMODULES_OVERRIDE=""

or

makeoptions NO_MODULES=yes


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"