restore /usr dump on two hard disk parallel y

2013-04-23 Thread s m
hello guys
i'm trying to restore DUMP file for partition /usr on tow hard disk
parallel y. these two hard are connected to my system (i have freebsd8.2).
i use  restore command and it uses /tmp directory to restore dump. in
restoring dump process, two hard disks try to use /tmp directory of my
system. therefore conflict happened and restore command return error.
i try to use TMPDIR and define another tmp directory for one of my hard
disk but it does not identify it and use my system tmp directory yet.
please let me know if using TMPDIR is a good idea and how i can use it. if
not, how i can restore /usr dump file on two hard disk parallel y?
thanks in advance
sam
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash?

2013-04-23 Thread Walter Hurry
On Tue, 23 Apr 2013 21:37:49 +0200, Fernando Apesteguía wrote:

> El 23/04/2013 21:24, "Walter Hurry"  escribió:
>>
>> FreeBSD 9.1-RELEASE on amd64.
>>
>> I have installed Flash according to the instructions in the handbook.
>> When I do 'about:plugins' in Firefox, I get the following response:
>>
>> Shockwave Flash
>>
>> File: npwrapper.libflashplayer.so Version:
>> Shockwave Flash 11.2 r202
>>
>> MIME Type   Description Suffixes
>> application/x-shockwave-flash   Shockwave Flash swf
>> application/futuresplashFutureSplash Player spl
>>
>> When I go to:
>>
>> http://helpx.adobe.com/flash-player/kb/find-version-flash-player.html
>>
>> it reports that Flash is installed, version 11.2.202.280, and I can see
>> the red bouncing ball.
>>
>>
>> When I go to https://www.youtube.com/watch?v=B8tSMKGbnW0
>>
>> again it reports that Flash is installed correctly.
>>
>> When I go to:
>>
>> http://www.chemgapedia.de/vsengine/info/en/help/requirements/flash.html
>>
>> once again, both tests run perfectly.
>>
>> Yet when I go to youtube.com and click on a link, it says "The Adobe
>> Flash Player is required for video playback. Get the latest Flash
>> Player".
>>
>> What is wrong?
> 
> That's an issue with Firefox. Search the list. There is a setting you
> have to change in Firefox in order to avoid that problem.
> 
That did the trick, thanks. The PR is 177404.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Home WiFi Router with pfSense or m0n0wall?

2013-04-23 Thread Alejandro Imass
On Mon, Apr 22, 2013 at 8:04 PM, RW  wrote:
> On Mon, 22 Apr 2013 14:25:30 -0400
> Michael Powell wrote:
>
>
>> Most consider the answer to use WPA2, which I do use too. Many think
>> it is 'virtually' unbreakable, but this really is not true; it just
>> takes longer. I've done WPA2 keys in as little as 2-3 hours before.
>
> Are you saying that any WPA2 key can be cracked or or you simply
> referring to weak keys?

I would also like to specifically if it's for weak keys or are all
WPA2 personal keys crackable by brute force. Also is WPA2 Enterprise
as weak also. Could anyone expand on how weak is WPA2 and WPA2
Enterprise or is this related to weak PSKs only??

Thanks,

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash?

2013-04-23 Thread Fernando Apesteguía
El 23/04/2013 21:45, "Ralf Mardorf"  escribió:
>
>
> On Tue, 2013-04-23 at 21:37 +0200, Fernando Apesteguía wrote:
> > That's an issue with Firefox. Search the list. There is a setting you
have
> > to change in Firefox in order to avoid that problem.
>
> Perhaps the answer is somewhere in the thread "[Solved] Youtube & Flash
> Videos broken?", but OTOH, Flash is outdated and that could be the issue
> too.

Yep, that's the thread I was referring to. It worked for me.

>
> I don't have Flash or Gnash installed, but Firefox (20.0.1 here) anyway
> plays many YouTube videos.
>
>
>
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash?

2013-04-23 Thread Ralf Mardorf

On Tue, 2013-04-23 at 21:37 +0200, Fernando Apesteguía wrote:
> That's an issue with Firefox. Search the list. There is a setting you have
> to change in Firefox in order to avoid that problem.

Perhaps the answer is somewhere in the thread "[Solved] Youtube & Flash
Videos broken?", but OTOH, Flash is outdated and that could be the issue
too.

I don't have Flash or Gnash installed, but Firefox (20.0.1 here) anyway
plays many YouTube videos.




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Flash?

2013-04-23 Thread Fernando Apesteguía
El 23/04/2013 21:24, "Walter Hurry"  escribió:
>
> FreeBSD 9.1-RELEASE on amd64.
>
> I have installed Flash according to the instructions in the handbook.
> When I do 'about:plugins' in Firefox, I get the following response:
>
> Shockwave Flash
>
> File: npwrapper.libflashplayer.so
> Version:
> Shockwave Flash 11.2 r202
>
> MIME Type   Description Suffixes
> application/x-shockwave-flash   Shockwave Flash swf
> application/futuresplashFutureSplash Player spl
>
> When I go to:
>
> http://helpx.adobe.com/flash-player/kb/find-version-flash-player.html
>
> it reports that Flash is installed, version 11.2.202.280, and I can see
> the red bouncing ball.
>
>
> When I go to https://www.youtube.com/watch?v=B8tSMKGbnW0
>
> again it reports that Flash is installed correctly.
>
> When I go to:
>
> http://www.chemgapedia.de/vsengine/info/en/help/requirements/flash.html
>
> once again, both tests run perfectly.
>
> Yet when I go to youtube.com and click on a link, it says "The Adobe
> Flash Player is required for video playback. Get the latest Flash Player".
>
> What is wrong?

That's an issue with Firefox. Search the list. There is a setting you have
to change in Firefox in order to avoid that problem.

>
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash?

2013-04-23 Thread Ralf Mardorf

On Tue, 2013-04-23 at 19:24 +, Walter Hurry wrote:
> What is wrong?

It's wrong to consume crap that needs proprietary software, that isn't
available for *nix, resp. it's smarter to use an OS that fit to the
individual needs of the user. FreeBSD and Linux aren't a good choice, if
you want to consume such stuff.

Current version is 11.7,
http://www.adobe.com/support/flashplayer/downloads.html .

But for *nix the last version is 11.2.

"Adobe Flash Player 11.2 will be the last version to target Linux as a
supported platform. Adobe will continue to provide security backports to
Flash Player 11.2 for Linux." - http://get.adobe.com/flashplayer/

Regards,
Ralf






___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Flash?

2013-04-23 Thread Walter Hurry
FreeBSD 9.1-RELEASE on amd64.

I have installed Flash according to the instructions in the handbook. 
When I do 'about:plugins' in Firefox, I get the following response:

Shockwave Flash

File: npwrapper.libflashplayer.so
Version: 
Shockwave Flash 11.2 r202

MIME Type   Description Suffixes
application/x-shockwave-flash   Shockwave Flash swf
application/futuresplashFutureSplash Player spl

When I go to:

http://helpx.adobe.com/flash-player/kb/find-version-flash-player.html

it reports that Flash is installed, version 11.2.202.280, and I can see 
the red bouncing ball.


When I go to https://www.youtube.com/watch?v=B8tSMKGbnW0

again it reports that Flash is installed correctly.

When I go to:

http://www.chemgapedia.de/vsengine/info/en/help/requirements/flash.html

once again, both tests run perfectly.

Yet when I go to youtube.com and click on a link, it says "The Adobe 
Flash Player is required for video playback. Get the latest Flash Player".

What is wrong?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Online Marketing start $99 per month- Freebsd.org

2013-04-23 Thread Robert


To
The Owner at
Freebsd.org
 

We’d love to
help you & optimizing your website in the major search engines
like Google, Yahoo, Msn & Bing which
results in improvements in Keyword Ranking, Traffic & Link
popularity.
 

We assure you
that after we start the SEO Campaign for your website your site will
be positioned in Top page of Google, Yahoo, Msn
& Bing and other search engines and your website will
generate revenues as traffic will float your website.
 

Your return on
investment (ROI) after 6 months of SEO will be at least 3
times that of paid advertisements and many times greater than our
cost. In fact, we guarantee that in the first month of our work, you
will see an improvement in ranking, link popularity and traffic or
we'll work for free until you do!
 

To brief you
about our company, We are leading dedicated SEO firm based in India
team size around 200 full time employees, with over 9 years of
experience. We have been partnering with various digital agencies
over USA, UK, CANADA, SOUTH AFRICA. Currently we have 400+ happy
customers and we ranked 1000+ keywords in top 10 ranking.
 

style="background:transparent">Link

Building strategies we used :
 

- Incorporating
links only from sites that have good quality content, good traffic
and social sharing. 

- Links and
Contents Sharing.
- Using unique
and top quality, content, every single time. 

- Incorporating
SMO as the best way to generate traffic .
- Focusing on
local search that helps local business listings .
 

Fortunately, you
can still start today and begin getting that traffic in just a few
weeks. We look forward to discuss our SEO plans with you. Sounds
interesting? Feel free to email us
 

If you have any
question please ask.
 

 

Thanks
Robert | Sales
Manager
 

 

PS1: This is one
time email and we won’t contact you if you don’t respond to this
email.You may also ask us for “REMOVE”.
PS2: We found
your site from online advertisements but did not click the Ad to
visit.
PS3 : If you
really interested we will share more informations like Company
Information, Keywords we ranked top 10 and Client Testimonials  
etc..

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Problem creating user account

2013-04-23 Thread Julian H. Stacey
Outback Dingo wrote:
> On Tue, Apr 23, 2013 at 10:10 AM, Julian H. Stacey  wrote:
> 
> > "Herbert J. Skuhra" wrote:
> > > Den 23.04.2013 13:17, skrev AMS_MDF_operations:
> > > > LS,
> > > > What is going ewrong?
> > > >
> > > > Problem : Creating user account
> > > >
> > > > -bash-2.05b$ uname -a
> > > > FreeBSD us-syslog01.dcn.versatel.net 4.9-RELEASE-p10 FreeBSD
> > > > 4.9-RELEASE-p10 #1: Thu Jun 24 10:04:37 GMT 2004
> > > > r...@syslog1.versatel.net:/usr/obj/usr/src/sys/SYSLOG  i386
> > > > -bash-2.05b$
> > >
> > > This version of FreeBSD is 9 years old and long EOL'ed.
> > > Have you ever considered upgrading this machine?
> >
> > Wow !  Actually I too still run some 4 (for reasons
> > I won't distract this thread with) as well as other hosts on
> > 9.1-RELEASE etc, but if ams_mdf_operati...@tele2.com needs to stay
> > on 4, he/she should at least consider upgrading to 4.11-RELEASE for
> > various bug fixes while staying on same feature set.
> >
> >
> looking at the hostname, it simply appears to be a syslog server, so why
> upgrade it, if it aint broke dont fix it
> 4.X was rock solid stable and fast

Yes, 4 was light on resources too, no bloated gcc make worlds
thrashing on *insn*.c  back then.  But I still long ago upgraded
all my 4.x to 4.11, just as I similarly raised sundry 6.* hosts to
last minor number of 6.4.

Raising to last minor numbers is generaly easy, reduces local version
diversity, gets free bug fixes without the cost of problems from
new features/ changes in new major numbers. Increases the chances
someone out there is running the same major.minor combo, even if EOL'd.

Cheers,
Julian
-- 
Julian Stacey, BSD Unix Linux C Sys Eng Consultant, Munich http://berklix.com
 Reply below not above, like a play script.  Indent old text with "> ".
 Send plain text.  No quoted-printable, HTML, base64, multipart/alternative.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Problem creating user account

2013-04-23 Thread Outback Dingo
On Tue, Apr 23, 2013 at 10:10 AM, Julian H. Stacey  wrote:

> "Herbert J. Skuhra" wrote:
> > Den 23.04.2013 13:17, skrev AMS_MDF_operations:
> > > LS,
> > > What is going ewrong?
> > >
> > > Problem : Creating user account
> > >
> > > -bash-2.05b$ uname -a
> > > FreeBSD us-syslog01.dcn.versatel.net 4.9-RELEASE-p10 FreeBSD
> > > 4.9-RELEASE-p10 #1: Thu Jun 24 10:04:37 GMT 2004
> > > r...@syslog1.versatel.net:/usr/obj/usr/src/sys/SYSLOG  i386
> > > -bash-2.05b$
> >
> > This version of FreeBSD is 9 years old and long EOL'ed.
> > Have you ever considered upgrading this machine?
>
> Wow !  Actually I too still run some 4 (for reasons
> I won't distract this thread with) as well as other hosts on
> 9.1-RELEASE etc, but if ams_mdf_operati...@tele2.com needs to stay
> on 4, he/she should at least consider upgrading to 4.11-RELEASE for
> various bug fixes while staying on same feature set.
>
>
looking at the hostname, it simply appears to be a syslog server, so why
upgrade it, if it aint broke dont fix it
4.X was rock solid stable and fast



> Cheers,
> Julian
> --
> Julian Stacey, BSD Unix Linux C Sys Eng Consultant, Munich
> http://berklix.com
>  Reply below not above, like a play script.  Indent old text with "> ".
>  Send plain text.  No quoted-printable, HTML, base64,
> multipart/alternative.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscr...@freebsd.org"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Problem creating user account

2013-04-23 Thread Julian H. Stacey
"Herbert J. Skuhra" wrote:
> Den 23.04.2013 13:17, skrev AMS_MDF_operations:
> > LS,
> > What is going ewrong?
> > 
> > Problem : Creating user account
> > 
> > -bash-2.05b$ uname -a
> > FreeBSD us-syslog01.dcn.versatel.net 4.9-RELEASE-p10 FreeBSD
> > 4.9-RELEASE-p10 #1: Thu Jun 24 10:04:37 GMT 2004
> > r...@syslog1.versatel.net:/usr/obj/usr/src/sys/SYSLOG  i386
> > -bash-2.05b$
> 
> This version of FreeBSD is 9 years old and long EOL'ed.
> Have you ever considered upgrading this machine?

Wow !  Actually I too still run some 4 (for reasons
I won't distract this thread with) as well as other hosts on
9.1-RELEASE etc, but if ams_mdf_operati...@tele2.com needs to stay
on 4, he/she should at least consider upgrading to 4.11-RELEASE for
various bug fixes while staying on same feature set.

Cheers,
Julian
-- 
Julian Stacey, BSD Unix Linux C Sys Eng Consultant, Munich http://berklix.com
 Reply below not above, like a play script.  Indent old text with "> ".
 Send plain text.  No quoted-printable, HTML, base64, multipart/alternative.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Problem creating user account

2013-04-23 Thread Herbert J. Skuhra

Den 23.04.2013 13:17, skrev AMS_MDF_operations:

LS,
What is going ewrong?

Problem : Creating user account

-bash-2.05b$ uname -a
FreeBSD us-syslog01.dcn.versatel.net 4.9-RELEASE-p10 FreeBSD
4.9-RELEASE-p10 #1: Thu Jun 24 10:04:37 GMT 2004
r...@syslog1.versatel.net:/usr/obj/usr/src/sys/SYSLOG  i386
-bash-2.05b$


This version of FreeBSD is 9 years old and long EOL'ed.
Have you ever considered upgrading this machine?



-bash-2.05b$ sudo adduser
Use option ``-silent'' if you don't want to see all warnings and
questions.

Check /etc/shells
Check /etc/master.passwd
Check /etc/group
Usernames must match regular expression:
[Usernames must match regular expression]:
Enter your default shell: bash csh date no sh tcsh [bash]:
Your default shell is: bash -> /usr/local/bin/bash
Enter your default HOME partition: [/home]:
Copy dotfiles from: /usr/share/skel no [/usr/share/skel]:
Send message from file: /etc/adduser.message no [no]:
Do not send message
Use passwords (y/n) [y]:

Ok, let's go.
Don't worry about mistakes. I will give you the chance later to 
correct

any input.
Enter username [Usernames must match regular expression]: l-ong
Username doesn't match the regexp /Usernames must match regular
expression/


For this message I deleted an existing user, and try to create this 
same

user.
Also this failed, see below


I guess someone has modified /etc/adduser.conf or the adduser script 
after this user has been created.

Have you checked?

--
Herbert




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Problem creating user account

2013-04-23 Thread AMS_MDF_operations
LS,
What is going ewrong?

Problem : Creating user account

-bash-2.05b$ uname -a
FreeBSD us-syslog01.dcn.versatel.net 4.9-RELEASE-p10 FreeBSD 
4.9-RELEASE-p10 #1: Thu Jun 24 10:04:37 GMT 2004 
r...@syslog1.versatel.net:/usr/obj/usr/src/sys/SYSLOG  i386
-bash-2.05b$



-bash-2.05b$ sudo adduser 
Use option ``-silent'' if you don't want to see all warnings and 
questions.

Check /etc/shells
Check /etc/master.passwd
Check /etc/group
Usernames must match regular expression: 
[Usernames must match regular expression]: 
Enter your default shell: bash csh date no sh tcsh [bash]: 
Your default shell is: bash -> /usr/local/bin/bash
Enter your default HOME partition: [/home]: 
Copy dotfiles from: /usr/share/skel no [/usr/share/skel]: 
Send message from file: /etc/adduser.message no [no]: 
Do not send message
Use passwords (y/n) [y]: 

Ok, let's go.
Don't worry about mistakes. I will give you the chance later to correct 
any input.
Enter username [Usernames must match regular expression]: l-ong
Username doesn't match the regexp /Usernames must match regular 
expression/


For this message I deleted an existing user, and try to create this same 
user.
Also this failed, see below



p-vrij:*:1010:1010:Peter Vrij:/home/p-vrij:/usr/local/bin/bash

-bash-2.05b$  sudo rmuser p-vrij
Password:
Matching password entry:

Is this the entry you wish to remove? y
Remove user's home directory (/home/p-vrij)? y
Updating password file, updating databases, done.
Updating group file: utbackup (removing group p-vrij -- personal group is 
empty) done.
Removing user's home directory (/home/p-vrij): done.
Removing files belonging to p-vrij from /tmp: done.
Removing files belonging to p-vrij from /var/tmp: done.
Removing files belonging to p-vrij from /var/tmp/vi.recover: done.



Enter username [Usernames must match regular expression]: p-vrij
Username doesn't match the regexp /Usernames must match regular 
expression/

Regards,

Ronald van Nigtevecht
Engineer Network ll
Afd. Transmission MDF

Tele2 Zakelijk 
Postbus 22697
1100 DD Amsterdam Z-O
The Netherlands

T +31 (0) 20 750 2590 MDF
T +31 (0) 20 750 2631

mailto:ronald.vannigteve...@tele2.com
http://www.tele2zakelijk.nl

Tele2 Zakelijk is a trade name of Versatel Nederland B.V. This message and 
any attachment are company proprietary and may be privileged or otherwise 
protected from disclosure. If you are not the intended recipient, please 
telephone or email the sender and delete this message and any attachment 
from your system. If you are not the intended recipient you must not copy 
this message or attachment or disclose the contents to any other person 
and destroy all copies of the original message and attachment.



 IMPORTANT NOTICE 
This e-mail (including any attachments) may contain information that is 
confidential or otherwise protected from disclosure and it is intended 
only for the addressees. If you are not the intended recipient, please 
note that any copying, distribution or other use of information contained 
in this e-mail (and its attachments) is not allowed. If you have received 
this e-mail in error, kindly notify us immediately by telephone or e-mail 
and delete the message (including any attachments) from your system.

Please note that e-mail messages may contain computer viruses or other 
defects, may not be accurately replicated on other systems, or may be 
subject of unauthorized interception or other interference without the 
knowledge of sender or recipient. Tele2 only send and receive e-mails on 
the basis that Tele2 is not responsible for any such computer viruses, 
corruption or other interference or any consequences thereof.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Thunderbird MCD/Autoconfig - functions not working?

2013-04-23 Thread Da Rock
Quick question guys - anyone using the autoconfig feature of Thunderbird 
out there? I might have to either create something or add something to 
something else that will actually do the same job otherwise.


I decided to give it a go and see if it might save some work on 
deployment, but the getent function simply doesn't work. I've submitted 
a bug report due to lack of support from mozilla themselves, but I 
thought I might check if anyone might be using it with the current 
Thunderbird.


To get it running I:
created an all.js with the general.config entries under the 
defaults/pref directory.
created a thunderbird.cfg under thunderbird lib directory with a url 
redirect to a server using getent to obtain the username. It is set to 
refresh every hour (atm).


What I get:
Thunderbird starts and asks for account setup. (or an error message if I 
set it)
with the NSPR_LOG variables set I can see it failed to retrieve the 
config with a http error.
the server logs indicate Thunderbird attempted to retrieve the file but 
failed to offer a user so the filename requested is incomplete.


Given the rather interesting background of this feature it might simply 
be a case of wysiwyg- and lucky for that; but I thought I'd query the 
vast resources here JIC.


Cheers
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Home WiFi Router with pfSense or m0n0wall?

2013-04-23 Thread Arthur Chance

On 04/22/13 21:49, Michael Powell wrote:

Alejandro Imass wrote:


On Mon, Apr 22, 2013 at 3:45 PM, Michael Powell 
wrote:

Alejandro Imass wrote:


[...]


Really these WEP/WPA2 protocols are not providing the level of
protection that is truly necessary in this modern day. You can keep out
script kiddies and people who don't have skill, but people who know
what they are doing are only slowed down.



Thanks for the detailed explanation! So, are there ways to run a
secure WiFi network? It would seem that in my case I have neighbours
that know what they're doing so should I just forget about WiFi go
back to UTP?



We use 802.1x auth on our switch (and other hardwares) ports at work and
this utilizes a Radius server. At work we are mostly a $MS WinderZ shop,
but with Enterprise grade access points (we have Aruba's), EAP, and
Radius we

[...]


This email is already getting a trifle long, so suffice to say if you
really need the best security on a home ISP router the best you can do is
turn off the radio and use Ethernet and UTP. This returns to the original
focus of your question in that the firewall would be the point of
contention and not the cracking of WEP/WPA2 auth keys. What I was wanting
to point out to you originally is that changing the firewall is a
separate issue from the cracking of Wifi auth keys.



I absolutely got that but I was assuming that a pre-packaged WiFi
router with pfSense or m0n0wall would have a more secure wireless
hardware and software as well. Now I see the problem is more complex
and that the wireless part is vulnerable regardless. So if by cracking
the wireless part they can spoof the mac addresses of authorized
equipment, what other methods could a BSD-based firewall use to
prevent the cracker from penetrating or using the network beyond the
WiFi layer? From your response it seems very little or nothing
really...


Yes - unfortunately this is about the state of things. Not a whole lot
you're going to do to improve the consumer grade home router. There are some
hardware specific firmware projects that I've never played with such as:

http://www.dd-wrt.com/site/index

The pre-packaged home equipment is relatively cheap when compared against
the top of the line enterprise-grade commercial products. Most are some form
of embedded Linux. For example, the MI424WR-Rev3 I have here is busybox (
http://www.busybox.net/ ). If you turn on remote management and telnet into
it you get a busybox prompt! With a busybox shell and all busybox commands.
The firewall many of these embedded Linux things are using is iptables2, the
standard linux firewall package.

What I was pondering is some form of L2TP tunnel, or some other form of
IPSEC tunnel to form some kind of VPN like communication between the client
and the wifi. Just never have begun to find the time to get anywhere with
the idea. But basically it would resemble a VPN that only accepts connection
from a tunnel endpoint client and not pass any traffic from any other client
lacking this VPN-like endpoint. I think such a thing is very possible and
have read some articles by people who have done very similar sounding
things. Indeed, this is what SSL-VPN providers do via a subscription service
so people surfing at open wifi coffee shops tunnel through the local open
wifi and setup an encrypted VPN tunnel.


A quick note: pfSense (I don't know about m0n0wall) has OpenVPN built in 
to it. Depending on whether all devices which are going to connect 
wirelessly can run the client end of OpenVPN, this might be a quick way 
to get greater security on the WiFi side.



Just not enough time in the day. I know it's do-able, just never have found
the time to properly approach it.




--
In the dungeons of Mordor, Sauron bred Orcs with LOLcats to create a
new race of servants. Called Uruk-Oh-Hai in the Black Speech, they
were cruel and delighted in torturing spelling and grammar.

_Lord of the Rings 2.0, the Web Edition_
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"