Re: FreeBSD Easy Server

2002-11-19 Thread Pierrick Brossin

 Then don't enable one.  A badly configured firewall is arguably worse
 than no firewall at all.

wow no firewall is such a nice idea.

just kidding.. your server is then open to anyone.

don't you have a firewall `?! 

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Giorgos Keramidas
On 2002-11-19 09:07, Pierrick Brossin [EMAIL PROTECTED] wrote:
 Giorgos Keramidas wrote:
  Then don't enable one.  A badly configured firewall is arguably worse
  than no firewall at all.

 wow no firewall is such a nice idea.

It's not a bad idea, on a machine that doesn't run services that
nobody uses locally and has properly configured access controls with
tcpwrappers or similar tools for those services that are running.

 just kidding.. your server is then open to anyone.
 don't you have a firewall `?!

I do, but it's not the firewall that protects services like named that
are running.  Well, at least not *only* the firewall.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Greg 'groggy' Lehey
On Tuesday, 19 November 2002 at  9:07:25 +0100, Pierrick Brossin wrote:

 Then don't enable one.  A badly configured firewall is arguably worse
 than no firewall at all.

 wow no firewall is such a nice idea.

 just kidding.. your server is then open to anyone.

 don't you have a firewall `?!

I think you're missing the point.  If you don't know what you're
doing, don't do it.  If you want to run a server, you can't take a
default configuration.

If there's something in the Red Hat setup that you particularly liked,
please tell us about it.  But so far you've just said I want it
better.  So do we.

Greg
--
See complete headers for address and phone numbers

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Avleen Vig
On Tue, 19 Nov 2002, Pierrick Brossin wrote:

  Then don't enable one.  A badly configured firewall is arguably worse
  than no firewall at all.
 wow no firewall is such a nice idea.
 just kidding.. your server is then open to anyone.

E..
The only real benefits you get from a firewall are:
1) controlling which IP addresses can access a service
2) *maybe* bandwidth shaping. *maybe*.
3) packet re-writing.

3) is one of the least used in my experience (having worked as a security
officer for several years).
2) arguable whether this is part of your filtering firewall or the routing
mechanism within the firewall.
1) Unless you're running a service that you want to restrict the service
to specific IP's, and that applications doesn't understand TCP wrappers,
this doesn't help.

'man blackhole' too


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Pierrick Brossin

 I think you're missing the point.  If you don't know what you're
 doing, don't do it.  If you want to run a server, you can't take a
 default configuration.

I'm not missing anything.
I think we didn't understand eachother.

 If there's something in the Red Hat setup that you particularly liked,
 please tell us about it.  But so far you've just said I want it
 better.  So do we.

The first thing I said is I have a server at home which is SME and it is a
distribution that stand on one CD and it can install a full server
(IMAP,POP,SMTP,DNS,HTTP,FTP,SSH,) in 10-12 minutes .. Then you have a web
interface to configure your server.
I was trying to find the same kind of distribution but FreeBSD (or any other
BSD) based.. That's all.

Then someone suggested to make my own server. And I said the main problem in
doing my own server is to make correct firewall rules.

I never said that I want it better.

Maybe I don't understand what you guys mean but I would be suprised!

Cya

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Avleen Vig
On Sun, 17 Nov 2002, Pierrick Brossin wrote:

  I would advice doing a test installation of FreeBSD (see
  www.freebsd.org/handbook) and having a go at installing the packages you
  need.
  What do you think?

 I already tried to make my own server but there were to many problem
 for not so much time!
 Thanks for your answer
 I have to think about making my own server myself but last time I ended
 with the PC under my desk with no cable plugged.. and I couldn't
 remember what was the last thing I did two months ago :P

Pierrick,
It sounds like what you want to do is get a basic install of a machine as
fast as possible, and have it secure.
The advantage of FreeBSD is that this is possible, but it's highly
flexible - hwich means you need to know more about what you want. You
can't just have a server install. What is a server? What is a
workstation? What is life?

The terms means different things to everyone. To me, it means to do a
minimal install, and then only installing the packages I want. If I know
exactly what I want, I can normally do a custom isntall of a small mail
server (including tuning) in about 4 hours.
I'd say that if it takes you less than 3 hours to do an install:
a) You don't know what you're getting
b) You're very likely missing some custom optimizations
c) You haven't checked your install after it completed


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Pierrick Brossin
 E..
 The only real benefits you get from a firewall are:
 1) controlling which IP addresses can access a service
 2) *maybe* bandwidth shaping. *maybe*.
 3) packet re-writing.

That's all ?

I thought the firewall was THE thing to have when you have a server which is
running 24 jours a day, 365 days per year!

I'm considering myself as a newbie under FreeBSD for the moment so I may be
wrong about the next point but what you telling me is that I can restrict access
to certain services to certains IPs ?
So I would use the config file of each service to say this one can access, let's
samba .. this one cant (interfaces=... in smb.conf if I remember correctly).

They are Linux (ouch :D) distributions that are only firewall and don't run any
other services (like smoothwall if I'm right).
So a distribution like this one is superfluous for users like me ?

I own swissgeeks.com and need a little bit of security.
Got a lot of stuff running on this server and if I'm switching to FreeBSD I have
to be sure I won't get hacked, though it's always possible. Let's say I'd like
the same security as SME provides me for the moment.
As known, 1 year and a half and no problem!

This was the story :D

Cya

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Avleen Vig
On Tue, 19 Nov 2002, Pierrick Brossin wrote:

 The first thing I said is I have a server at home which is SME and it is a
 distribution that stand on one CD and it can install a full server
 (IMAP,POP,SMTP,DNS,HTTP,FTP,SSH,) in 10-12 minutes .. Then you have a web
 interface to configure your server.
 I was trying to find the same kind of distribution but FreeBSD (or any other
 BSD) based.. That's all.
 Then someone suggested to make my own server. And I said the main problem in
 doing my own server is to make correct firewall rules.

I think there is indeed a communication problem here :-)
Pierrick, I don't know of any way to just do a 'base install' with all of
those packages on FreeBSD.
When you install FreeBSD using it's default installer (sysinstall), you
have the option of specifying which packages you want installed initially.
Just letting an installer install all of those packages on it's own is a
bad idea. It makes me dislike SME and I haven't really looked at it.

When you install a server, *you* should pick which packages to install. If
you want SMTP, then choose SMTP during the install. If you want HTTP, then
choose that.

Also, you seem to be under the impression that having a firewall will
protect you from lots of bad things. Really, it won't.
All it will do if say which IP addresses can connect to which ports.
And if you're running a service like DNS, HTTP or SMTP that you want open
to the whole world, a firewall won't really help you at all :-)
What is it you want fro myour firewall?


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Pierrick Brossin
 Pierrick,
 It sounds like what you want to do is get a basic install of a machine as
 fast as possible, and have it secure.

Let's say I want to change for many reason.
The first one is flexibility!

I have the time to make a basic install and then install each package I do want.

Last time I tried, I had my ADSL connection running fine, Firewall configured
(almost everything closed), DHCPd, HTTPd, FTPd, SSH and DNS (was trying BIND and
djbdns).
Then I saw I didn't have much time to continue.. I had troubles with the
firewall customization, samba was always giving errors, had issues with djbdns..
wanted to get back to BIND but a bunch of people told me djbdns is the one I
should take. Then someone told me it's for professional and I had to use BIND.
I was really lost so I backuped /etc/ and some other stuff and put the machine
in a cupboard at home... And 1-2 months later I was posting here to find a
flexible and easy to install complete freebsd server.
But I was wrong :D
Have to give me time to make this damn server work I think!

Thanx for your answer Avleen!

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: new to freeBSD

2002-11-19 Thread Matthew Seaman
On Mon, Nov 18, 2002 at 08:47:21PM -0600, Kevin D. Kinsey, DaleCo, S.P. wrote:

 You can, as someone once joked, almost run FBSD on a modified
 four-slice toaster, with the right hardware.

I think you'll find that was NetBSD...

http://store1.yimg.com/I/bsdmall_1714_3949122

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
  Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD cluster setup

2002-11-19 Thread David Schultz
Thus spake Adam M Ryan [EMAIL PROTECTED]:
 Has anyone worked with a cluster setup for fbsd?  Is there any
 information on how I can get started with multiple machines and freebsd
 running as a solution cluster?

http://nrez.net/~rmger/fbsdcluster/cluster-doc.html
http://acme.ecn.purdue.edu/

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Pierrick Brossin

 It makes me dislike SME and I haven't really looked at it.

Taken from www.e-smith.org:

--
SME Server V5 consists of a modified Red Hat Linux installation, together with a
number of server applications as well as the server management software. The
management software presents users with a simplified user interface and
automatically configures the server applications as necessary.
--

 When you install a server, *you* should pick which packages to install. If
 you want SMTP, then choose SMTP during the install. If you want HTTP, then
 choose that.

I'm changing my mind ;P

 What is it you want from your firewall?

Protect my server and local network from intruders :D

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Avleen Vig
  E..
  The only real benefits you get from a firewall are:
  1) controlling which IP addresses can access a service
  2) *maybe* bandwidth shaping. *maybe*.
  3) packet re-writing.

 That's all ?

That's all really!

 I thought the firewall was THE thing to have when you have a server which is
 running 24 jours a day, 365 days per year!

I don't mean any disrespect Pierrick, but it sounds like you're following
what other people are telling you without really understanding it. Please
read a coupel of the others emails I sent after the above one, and you'll
see why having a firewall may or may not be useful. If it's not useful
then don't use it. It won't help!

Maybe one thing I forgot that a firewall can do, is watch and log inbound
connections, but something like an Intrution Detection System (IDS) is
better at that. And it can log hack-in attempts and other nasties.
Snort is a good lightweight IDS. www.snort.org.

 I'm considering myself as a newbie under FreeBSD for the moment so I may be
 wrong about the next point but what you telling me is that I can restrict access
 to certain services to certains IPs ?
 So I would use the config file of each service to say this one can access, let's
 samba .. this one cant (interfaces=... in smb.conf if I remember correctly).

Yes. Also look at 'man 5 hosts_access'. the file /etc/hosts.allow can be
configured to allow or deny access to services in the same way.
Eg, you could have these line in /etc/hosts.allow:
netbios-ns : 12.34.56.1 : allow
netbios-ns : ALL : deny

this would allow netbios connections to port 137 for the ip address
12.34.56.1, but deny it to everyoen else. See? No firewall needed :-)

 They are Linux (ouch :D) distributions that are only firewall and don't run any
 other services (like smoothwall if I'm right).
 So a distribution like this one is superfluous for users like me ?

It certainly sounds like it, unless you want to do lots of restrictions on
who can and cannot connect to certain ports.

 I own swissgeeks.com and need a little bit of security. Got a lot of
 stuff running on this server and if I'm switching to FreeBSD I have to
 be sure I won't get hacked, though it's always possible. Let's say I'd
 like the same security as SME provides me for the moment. As known, 1
 year and a half and no problem!
 This was the story :D

The chances of getting hacked are higher when:
There is a bug in a server that is listening on a network port, and
someoen you don't want connectig to this service because you don't trust
them, exploits it.
The best way around this is to always keeps your installations up to date.
Eg when a new apache version is released, I normally install withing 2 or
3 days after testing it on a spare machine.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



[no subject]

2002-11-19 Thread Tolpanov, Dmitry
subscribe freebsd-questions

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Pierrick Brossin
  running 24 jours a day, 365 days per year!

French into my sentence :D made a mistake heheh!
Meant 24 hours a day..

 I don't mean any disrespect Pierrick, but it sounds like you're following
 what other people are telling you without really understanding it.

I totally agree with you.
I have been using unix likes for some years now but never had luck to really go
deep into it!
Meaning I never developped an application which uses system calls.
I never developped a driver or helped to.. never debugged the kernel.
Never installed a full server on my own (except some small servers for work..
like a FTP HTTP with MRTG server..)

I always used unix likes as workstation and tried (but always failed) to make my
own server!

 this would allow netbios connections to port 137 for the ip address
 12.34.56.1, but deny it to everyoen else. See? No firewall needed :-)

ehehe I didn't know it was possible to go that far!

 The best way around this is to always keeps your installations up to date.
 Eg when a new apache version is released, I normally install withing 2 or
 3 days after testing it on a spare machine.

It's not really a problem!

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Confirmation: ext2fs requires kernel rebuild?

2002-11-19 Thread David Schultz
Thus spake Chris Pepper [EMAIL PROTECTED]:
   I'm trying to get at a file on an ext2fs slice. I'm a bit 
 confused about kernel recompiles vs. KLDs for Linux compatibility, 
 though. Am I reading correctly at 
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/linuxemu.html 
  http://www.seabug.org/archive/2000-05/msg00086.html, that I can 
 run Linux applications with a single command or rc.conf entry, but 
 accessing files on ext2 file systems requires a kernel rebuild?
 
   This seems a bit backwards -- is anyone aware of work to make 
 ext2fs a standard module, so it can be loaded under GENERIC?

Running Linux binaries and using Linux filesystems are two
completely different things.  To to the former, and the
appropriate rc.conf entry and install ports/emulators/linux_base
as described in the Handbook.  To use ext2fs, you can either add
the option EXT2FS to your kernel config to compile it statically
into your kernel, or you can load the ext2fs module dynamically,
even into GENERIC.  To do the latter, the module must exist;
it will be created if you make the kernel with -DWANT_EXT2FS_MODULE.
It is also installed by sysinstall, IIRC.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Lost + Found

2002-11-19 Thread Doron Shmaryahu
Hi,

I had a server which due to power problems rebooted a couple of times. I did
a fsck, because it kept complaining about inconsistencies.

Now some directories seem to have moved. I located them in lost + found. Is
there any way to recover these files from there ??

thanks

Doron



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



CVSUp from 4.3 to 4.7

2002-11-19 Thread Tolpanov, Dmitry
Hi.

There is a trouble during upgrade system:

To 4.7 version.

I've done cvsup stable-supfile to release=cvs tag=RELENG_4

And during make buildworld I've got the error:

mv -f term.h.new term.h
sed /usr/src/lib/libncurses/../../contrib/ncurses/include/termcap.h.in
termcap.h  -e /@NCURSES_MAJOR@/s//5/  -e /@NCURSES_MINOR@/s//1/  -e
/@NCURSES_CONST@/s///  -e /@OSPEED_INCLUDES@/s//#include
termios.h/  -e /@OSPEED_TYPE@/s//speed_t/
sed /usr/src/lib/libncurses/../../contrib/ncurses/include/unctrl.h.in
unctrl.h  -e /@NCURSES_MAJOR@/s//5/  -e /@NCURSES_MINOR@/s//1/
cc -o make_keys -O -pipe  -I. -I/usr/src/lib/libncurses
-I/usr/src/lib/libncurses/../../contrib/ncurses/ncurses
-I/usr/src/lib/libncurses/../../contrib/ncurses/include -Wall
-DFREEBSD_NATIVE -DNDEBUG -DHAVE_CONFIG_H -DTERMIOS
/usr/src/lib/libncurses/../../contrib/ncurses/ncurses/tinfo/make_keys.c
/usr/obj/usr/src/i386/usr/libexec/elf/ld: cannot find -lc
*** Error code 1

Stop in /usr/src/lib/libncurses.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Does anybody now what I should to do in order to fix this.
Thanks a lot.

Dmitry.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Lost + Found

2002-11-19 Thread Matthew Seaman
On Tue, Nov 19, 2002 at 12:10:33PM +0200, Doron Shmaryahu wrote:

 I had a server which due to power problems rebooted a couple of times. I did
 a fsck, because it kept complaining about inconsistencies.

 Now some directories seem to have moved. I located them in lost + found. Is
 there any way to recover these files from there ??

lost+found is where fsck(8) puts files or directories it finds on the
disk but that it can't place correctly into the filesystem because of
damage to directories further up the tree.

Just mv(1) the data back to where it came from.  Unfortunately,
there's no record kept on the system of where that was, so you'll just
have to remember for yourself as well as you can.  Note that if you're
seeing stuff in lost and found, then it's quite possible that there
were other files that have disappeared completely.  You may have to
recover the partition from backup to ensure that everything is
consistent.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
  Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



/etc/make.conf

2002-11-19 Thread Ebbinge, Onno
Hi All,

I recently setup /etc/make.conf with the following settings:

NO_BIND=true# do not build BIND
NO_SENDMAIL=true# do not build sendmail and related programs
NOGAMES=true# do not build games (games/ subdir)

This means 'do not BUILD' those parts of 'world'... 
Does this also mean that the old binaries of bind, sendmail and games 
are uninstalled? If not, how can I uninstall them in a clean way?

I had a similar problem with cvsup. I setup the /etc/cvsupfile and the 
/var/sup/refuse files but the refuse specifications didn't remove the 
stuff that was already there... I had to write a small shell script
that scans the refuse file to delete the files and directories 
matching the patterns in the refuse file. If anyone is intrested, 
email me.

Thanks,

Onno






This e-mail and any attachment is for authorised use by the intended recipient(s) 
only.  It may contain proprietary material, confidential information and/or be subject 
to legal privilege.  It should not be copied, disclosed to, retained or used by, any 
other party.  If you are not an intended recipient then please promptly delete this 
e-mail and any attachment and all copies and inform the sender.  Thank you.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: /etc/make.conf

2002-11-19 Thread Roman Neuhauser
# [EMAIL PROTECTED] / 2002-11-19 12:45:36 +0100:
 I recently setup /etc/make.conf with the following settings:
 
 NO_BIND=true# do not build BIND
 NO_SENDMAIL=true# do not build sendmail and related programs
 NOGAMES=true# do not build games (games/ subdir)
 
 This means 'do not BUILD' those parts of 'world'... 

right.

 Does this also mean that the old binaries of bind, sendmail and games 
 are uninstalled?

nope.

 If not, how can I uninstall them in a clean way?

well, the best way is to gather what exactly gets installed in the
exact version you installed, and rm those files/dirs.

most probably with some find(1)-fu.

-- 
If you cc me or remove the list(s) completely I'll most likely ignore
your message.see http://www.eyrie.org./~eagle/faqs/questions.html

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Firewall - opening ports

2002-11-19 Thread Fernando Gleiser
On Mon, 18 Nov 2002, Darryl Hoar wrote:

 Greetings,
 I have built a firewall using FreeBSD 4.7-release and an oline tutorial
 that uses IPFilter.

 I need to understand how to open specific ports to allow applications to
 talk
 if needed.

 Is there a document that describes how to do this ?

Read the IPFilter HOWTO: http://www.obfuscation.org/ipf/


Fer


 thanks,
 Darryl


 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Java freebsd 4.7

2002-11-19 Thread chauncey smith
I have a compaq M700 loaded with freebsd 4.7 and I've
been trying to install via ports. I downloaded and
installed in /usr/ports/distfiles the 3 tar.gz's that
the port requieres.when I run make install clean I get
the following error.

Unpacking...
Checksumming...
0
0
Extracting...
ELF interpreter /compat/svr4/lib/ld-linux.so.2 not
found
Abort trap
Done.
===  Patching for linux-sun-jdk-1.3.1.04_1
===  Applying FreeBSD patches for
linux-sun-jdk-1.3.1.04_1
patch:  can't cd to
/usr/ports/java/linux-sun-jdk13/work/jdk1.3.1_04: No
such file or directory
 Patch patch-aa failed to apply cleanly.
*** Error code 1

Stop in /usr/ports/java/linux-sun-jdk13.
*** Error code 1

Stop in /usr/ports/java/jdk13.

can you please help me?



__
Do you Yahoo!?
New DSL Internet Access from SBC  Yahoo!
http://sbc.yahoo.com

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



panic: kmem_map too small

2002-11-19 Thread Petri Helenius

I seem to get kmem_map too small panics when using large buffers with
bpf. Is there a tunable I should be increasing?

Pete


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



[no subject]

2002-11-19 Thread Peter Jamrisko
Hello, 

Does anybody know the good documentation for installing Apache-SSL.

Now, i have a server running with apache 1.3.26.  I wish to make it
SSL enable server with using SSLeay. Can anyone give me an advice on
how to install Apache-SSL in my current server.

Thanks

Peter.



-- 
---
Vhodn nkupy pes internet, slevov akce, zajmav ceny, dodvka
a do domu...http://shop.volny.cz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: your mail

2002-11-19 Thread Matthew Seaman
On Tue, Nov 19, 2002 at 02:36:30PM +0100, Peter Jamrisko wrote:

 Does anybody know the good documentation for installing Apache-SSL.
 
 Now, i have a server running with apache 1.3.26.  I wish to make it
 SSL enable server with using SSLeay. Can anyone give me an advice on
 how to install Apache-SSL in my current server.

Uh --- nowadays you'ld want to use OpenSSL which is based in part on
the SSLeay stuff.

Anyhow, I'm afraid that to make an SSL enabled apache, you've got to
delete your original apache and re-install.  There's two choices:

ports/www/apache13-ssl

This builds an apache httpd with the SSL stuff linked directly
into the main application.  See http://www.apache-ssl.org/.

Somewhat more popular and what I personally prefer to use, (and
incidentally the basis for the bundled HTTPS support in apache2) is:

ports/www/apache13-modssl

whilst this looks like (indeed, *is*) a DSO type loadable apache
module (like mod_php4 etc.), it isn't the same as other loadable
modules It builds against a specially patched apache source tree.  The
patches provide the 'EAPI' extended application programming interface
business that mod_ssl requires.  It also has a dependency on a
portable memory management library 'libmm'.  http://www.modssl.org/

Make sure you use a version of OpenSSL later than 0.9.6d --- either
install the OpenSSL port or run a recent version of -STABLE so you
don't get bitten by FreeBSD-SA-02:33.openssl
(ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02%3A33.openssl.asc)

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
  Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



HELP (or, now I've done it!) Vinum, RAID, and drivefailure...

2002-11-19 Thread Phillip Smith (3BAGSMEDIA)

Hoping that the gods are with me and that you knowledgeable people can
assist me with this _really_ big screw up...

FreeBSD4.6-stable

I was setting up Vinum (rather successfully I might add) until last when
I tried to configure a second mirror with two different drives...

All I can tell you is this...

I had one vinum mirror set-up with this info:

drive da3 device /dev/da3s1e
drive da4 device /dev/da4s1e
volume mirror setupstate
plex org concat
sd length 0 drive da3
plex org concat
sd length 0 drive da4

Working fine. I moved /usr to that mirror and edited /etc/fstab to point
/usr to this new mirror -- which worked fine. Then I wanted to set-up
another mirror on another two drives, so I
(stupidly) changed that vinum.conf to the following:

drive da3 device /dev/da3s1e
drive da4 device /dev/da4s1e
drive da1 device /dev/da1s1e
drive da2 device /dev/da2s1e
volume mirror setupstate
plex org concat
sd length 0 drive da3
plex org concat
sd length 0 drive da4
volume mirror1 setupstate
plex org concat
sd length 0 drive da1
plex org concat
sd length 0 drive da2

And started vinum and used the create -f command.

Then there was an error, something about no space on one of the devices
(presumably, the device where the mirror was already working). Next
thing I know there's a kernel panic or something that stops the system.
If I reboot, the kernel panics with a fatal trap 12: page fault while
in kernel mode message... Vinum sais that a device is not functioning
properly and can't 'sync' the devices...

I can't figure a way around this. The /usr (and binaries) are not
accessible, neither is my data. I can't start the system. I'm hoping you
can help...

(Wish I spent the 10 minutes and made that 'one last backup')

All I'd like to do is reverse that last vinum configuration... but I
can't get to any of the binaries because /usr is offline. I don't mind
re-building the system, but I moved my last back-up to that first mirror
(which I thought would be safe) and now I don't have access to it.

Signed 'having a rough day',

phillip.



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



keyboard mappings in X11

2002-11-19 Thread Yann Golanski
I have a logitech i touch keyboard and would like to know if it is
possible to have all those useless keys at the top of the keyboard
(media control and co) actually maped to something usefull. 

Has anyone already done something like that?

-- 
[EMAIL PROTECTED]  -=*=-  www.kierun.org
PGP:   009D 7287 C4A7 FD4F 1680  06E4 F751 7006 9DE2 6318
IRC:   nick kierun, server spod.uk.amiganet.org, channel #sanctus
NNGS:  nick kierun, server nngs.cosmic.org, port 9696.



msg09334/pgp0.pgp
Description: PGP signature


problem with bind and rndc

2002-11-19 Thread RJ45

hello,
I installed new bind9 from the ports collection.
I have FreeBSD 4.7 STABLE.
The program /usr/local/sbin/rndc-confgen should generate the rndc.conf
file for me and the rndc-confgen -a  should generate a key fiule.
the problem is that issuing the command /usr/local/sbin/rndc-confgen
actually does nothing. The process goes to sleep and nothing happens...
anyone has some clue about it ?
thank you very much.

Rick




To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



bsd-jdk131 fails to open windows

2002-11-19 Thread Jacques Beigbeder
OS : FreeBSD 4.7

Installation:
. I put in /usr/ports/distfiles:
-rw-r--r--  1 root  wheel575788 Nov 18 17:42 bsd-jdk131-patches-7.tar.gz
-rw-r--r--  1 root  wheel  29876595 Nov 18 17:42 j2sdk-1_3_1-src.tar.gz
-rwxr-xr-x  1 root  wheel  26423971 Nov 18 17:53 j2sdk-1_3_1_04-linux-i586.bin

. I ran:
cd /usr/ports/java/linux-sun-jdk13
make
make install
cd /usr/ports/java/jdk13
make
make install

Problem 1: msgfmt doesn't know
msgmft -o OUTPUT INPUT
Fix is easy, just create early in the PATH some 'msgmft' shell script.

Problem 2: it now compiles and installs.
But:
setenv PATH /usr/local/jdk1.3.1/bin:$PATH
cd /usr/local/jdk1.3.1/demo/applets/NervousText
appletviewer example1.html 
fails. top shows this process uses 100% CPU!
And no window opens...

--
Jacques Beigbeder|  [EMAIL PROTECTED]
Service de Prestations Informatiques | http://www.spi.ens.fr
Ecole normale supérieure |
45 rue d'Ulm |Tel : (+33 1)1 44 32 37 96
F75230 Paris cedex 05|Fax : (+33 1)1 44 32 20 75


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: problem with bind and rndc

2002-11-19 Thread Matthew Seaman
On Tue, Nov 19, 2002 at 07:34:05AM -0700, RJ45 wrote:

 I installed new bind9 from the ports collection.
 I have FreeBSD 4.7 STABLE.
 The program /usr/local/sbin/rndc-confgen should generate the rndc.conf
 file for me and the rndc-confgen -a  should generate a key fiule.
 the problem is that issuing the command /usr/local/sbin/rndc-confgen
 actually does nothing. The process goes to sleep and nothing happens...
 anyone has some clue about it ?

Sounds like it's blocking while waiting for /dev/random.  You need to
generate more randomness --- generally the kernel random number
generator keys off various interrupts, so plonking on the keyboard or
slinging a few packets across the network while you're waiting might
help.  

You can optimise the randomness collection by setting the rc.conf
'rand_irqs' variable to a list of irqs that see quite a bit of
activity.  To tell what irqs to use, look at the output of vmstat -i:

% vmstat -i
interrupt   total   rate
pcm0 irq10 167517  0
de0 irq11  123060  0
mux irq5   375110  1
fdc0 irq6   2  0
atkbd0 irq1135100  0
psm0 irq121066199  3
clk irq0 31997147 99
Total33864135105

and pick the irqs corresponding to devices that get the most action.
Don't use the clock interrupt (here irq0) as a regular tick is useless
for generating random data...

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
  Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



RE: /etc/make.conf

2002-11-19 Thread Ebbinge, Onno
Is there a way to scan the Makefiles in the bind, sendmail and
games directories to grab the installed files so that I can 
write a script that deletes them? 

Maybe a generic setup?

# cleanup src/contrib/bind src/contrib/sendmail src/games

 # Roman Neuhauser / 2002-11-19 
 # [EMAIL PROTECTED] / 2002-11-19 12:45:36 +0100:
  I recently setup /etc/make.conf with the following settings:
  
  NO_BIND=true# do not build BIND
  NO_SENDMAIL=true# do not build sendmail and related programs
  NOGAMES=true# do not build games (games/ subdir)
  
  This means 'do not BUILD' those parts of 'world'... 
 
 right.
 
  Does this also mean that the old binaries of bind, sendmail 
  and games are uninstalled?
 
 nope.
 
  If not, how can I uninstall them in a clean way?
 
 well, the best way is to gather what exactly gets installed in the
 exact version you installed, and rm those files/dirs.
 
 most probably with some find(1)-fu.

Regards,

Onno





This e-mail and any attachment is for authorised use by the intended recipient(s) 
only.  It may contain proprietary material, confidential information and/or be subject 
to legal privilege.  It should not be copied, disclosed to, retained or used by, any 
other party.  If you are not an intended recipient then please promptly delete this 
e-mail and any attachment and all copies and inform the sender.  Thank you.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: restore question

2002-11-19 Thread Jerry McAllister
 
 You guys mentioned earlier that if you are able to you should dump from
 single user mode. No one ever talks about booting off the fixit CD. Wouldn't
 that improve your chances of a successful backup because you would be
 minimizing file changes. In Root you are still running off the / correct?

Well, sort of, but in single user mode none of the daemons are running.
The only changes that might get made are ones you make yourself.  So,
it not likely to be a problem.   You are not likely to do anything else
while the dumps are running.

jerry


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re:

2002-11-19 Thread Kevin D. Kinsey, DaleCo, S.P.
- Original Message - 
From: Peter Jamrisko [EMAIL PROTECTED]


Hello, 

Does anybody know the good documentation for installing Apache-SSL.

Now, i have a server running with apache 1.3.26.  I wish to make it
SSL enable server with using SSLeay. Can anyone give me an advice on
how to install Apache-SSL in my current server.

Thanks

Peter.


You've been to their site?

http://www.apache-ssl.org/

HTH,

Kevin Kinsey
DaleCo, S.P.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



ApacheSSL

2002-11-19 Thread Peter Jamrisko
Hello, 

Does anybody know the good documentation for installing Apache-SSL.

Now, i have a server running with apache 1.3.26. I wish to make it
SSL enable server with using SSLeay. Can anyone give me an advice on
how to install Apache-SSL in my current server.

Thanks

Peter.

-- 
--
Profesionln prostor pro V server - pipojen k pten sti,
nepetrit napjen, klimatizovan prosted - sluba Server
Housing od Jet2Web Czech Republic.
Info:http://www.jet2web.cz/cs/products?article=jet2web_products_housing_housing



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



PCMCIA

2002-11-19 Thread Brian Henning
Hello,

Earlier i was asking about a D-Link DFE-670TXD PCMCIA NIC.  Is it ok to use
the fath driver with it? When i plug it into my laptop i get the following
message:
pccard inserted, slot 1
pccard[47] No card in database for D-Link (DFE-670TXD)

Is there something i can do to get this card working or is it just not
supported?

Thanks so much,

Brian

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: PCMCIA

2002-11-19 Thread John Bleichert
On Tue, 19 Nov 2002, Brian Henning wrote:

 Date: Tue, 19 Nov 2002 08:38:19 -0600
 From: Brian Henning [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: PCMCIA
 
 Hello,
 
 Earlier i was asking about a D-Link DFE-670TXD PCMCIA NIC.  Is it ok to use
 the fath driver with it? When i plug it into my laptop i get the following
 message:
 pccard inserted, slot 1
 pccard[47] No card in database for D-Link (DFE-670TXD)
 
 Is there something i can do to get this card working or is it just not
 supported?
 
 Thanks so much,
 
 Brian
 

Tha faith(4) driver isn't what you think it is:

http://www.freebsd.org/cgi/man.cgi?query=faithapropos=0sektion=0manpath=FreeBSD+4.7-RELEASEformat=html

It sounds like you don't have support for your card in your kernel. Look 
for your card in the LINT file and see what needs to be added. I can't 
look myself (my Thinkpad is in the shop) or else I would. LINT is in the 
same place as the GENERIC kernel config file.

Also, look at the comments in GENERIC, your card may be listed.

Good luck!

JB

#  John Bleichert 
#  http://vonbek.dhs.org/latest.jpg


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: PCMCIA

2002-11-19 Thread Ian Watkinson
On Tue, 2002-11-19 at 14:36, John Bleichert wrote:
 On Tue, 19 Nov 2002, Brian Henning wrote:
 
  Date: Tue, 19 Nov 2002 08:38:19 -0600
  From: Brian Henning [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Subject: PCMCIA
  
  Hello,
  
  Earlier i was asking about a D-Link DFE-670TXD PCMCIA NIC.  Is it ok to
 use
snip

eeBSD+4.7-RELEASEformat=html
 
 It sounds like you don't have support for your card in your kernel. Look 
 for your card in the LINT file and see what needs to be added. I can't 
 look myself (my Thinkpad is in the shop) or else I would. LINT is in the 
 same place as the GENERIC kernel config file.
 
 Also, look at the comments in GENERIC, your card may be listed.
 

You could try adding support for the dc cards, as this covers earlier
D-Link cards, however in Linux, it's under the tulip module, so perhaps
this gives you a pointer?

The files you are looking for are in /usr/src/sys/i386/conf

Ian Watkinson



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: panic: kmem_map too small

2002-11-19 Thread David Schultz
Thus spake Petri Helenius [EMAIL PROTECTED]:
 I seem to get kmem_map too small panics when using large buffers with
 bpf. Is there a tunable I should be increasing?

Yes, increase KVA_PAGES in your kernel config.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: PCMCIA

2002-11-19 Thread Brian Henning

- Original Message -
From: Ian Watkinson [EMAIL PROTECTED]
To: Brian Henning [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Tuesday, November 19, 2002 9:12 AM
Subject: Re: PCMCIA


 On Tue, 2002-11-19 at 14:36, John Bleichert wrote:
  On Tue, 19 Nov 2002, Brian Henning wrote:
 
   Date: Tue, 19 Nov 2002 08:38:19 -0600
   From: Brian Henning [EMAIL PROTECTED]
   To: [EMAIL PROTECTED]
   Subject: PCMCIA
  
   Hello,
  
   Earlier i was asking about a D-Link DFE-670TXD PCMCIA NIC.  Is it ok
to
  use
 snip

 eeBSD+4.7-RELEASEformat=html
 
  It sounds like you don't have support for your card in your kernel. Look
  for your card in the LINT file and see what needs to be added. I can't
  look myself (my Thinkpad is in the shop) or else I would. LINT is in the
  same place as the GENERIC kernel config file.
 
  Also, look at the comments in GENERIC, your card may be listed.
 

 You could try adding support for the dc cards, as this covers earlier
 D-Link cards, however in Linux, it's under the tulip module, so perhaps
 this gives you a pointer?

 The files you are looking for are in /usr/src/sys/i386/conf

 Ian Watkinson


Ian,
I already have the dc driver uncommented in my generic kernel. Is that what
you mean by adding support for the dc cards? So far i have not found
anything in the LINT or GENERIC config files that talks about the NIC that i
have.  Any other suggestions?
Thanks for all your help,
Brian

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Andrew Boothman
Pierrick Brossin wrote:


I have the time to make a basic install and then install each package I do want.

Last time I tried, I had my ADSL connection running fine, Firewall configured
(almost everything closed), DHCPd, HTTPd, FTPd, SSH and DNS (was trying BIND and
djbdns).
Then I saw I didn't have much time to continue.. I had troubles with the
firewall customization, samba was always giving errors, had issues with djbdns..
wanted to get back to BIND but a bunch of people told me djbdns is the one I
should take. Then someone told me it's for professional and I had to use BIND.
I was really lost so I backuped /etc/ and some other stuff and put the machine
in a cupboard at home... And 1-2 months later I was posting here to find a
flexible and easy to install complete freebsd server.
But I was wrong :D
Have to give me time to make this damn server work I think!


[Moving to -chat, this is more of a random rant than answering the 
original question :-) ]

:-)

I think everyone has been in your situation at one time or another. But, 
I don't think any Unix system should be easy and quick to install. 
Operating Systems by their nature are very complicated things and when 
you add the complexities of web servers, mail servers, dns servers,... 
on top it gets even worse.

But unless you take the time to make sure you understand what is going 
on and how the different parts interact, you'll never be able to 
troubleshoot your own problems. This is exactly what happened to you. If 
everything was installed and configured for you, I bet you wouldn't even 
know where to look for your system's configuration files let alone what 
to put in them or what the potential problem might be.

FreeBSD has a steep learning curve, and I like it that way. You should 
take the time to learn your way around the system. Buy books (DNS  BIND 
by Albitz and Liu is a great book), read manpages, google for solutions 
and information about your problems. Build your system up a stage at a 
time, over the course of months, and when you are finished (of course - 
you can never finish tweaking and playing with a system :-) ) you will 
be in a much more powerful and satisfying situation than any 
quick-install could have given you.

I just installed Red Hat Linux 8.0 (which I need for a University 
project) on my system onto my now triple-booting desktop machine. And, 
popular though it is, I think it falls into exactly the trap that I am 
describing. It tries to be all things to all people and automates the 
installation and configuration of services such that the new 
administrator ultimately has little or no understanding of what's going 
on. When you have a system that is being that 'easy', you start to end 
up with an OS like Windows where the administrator is limited by his 
configuration tools and is ultimately inconvienced by his convienent 
operating system. I do worry that some Linux distributions are falling 
into this trap, and are breading new generations of system 
administrators who don't have a basic enough understanding of what's 
going on to properly troubleshoot when things go wrong. And something 
_always_ goes wrong eventually. :-)

Andrew.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


Question about memory usage

2002-11-19 Thread Matt Winslow
I'm running FreeBSD 4.5, on a P-133 system.  I just upgraded my RAM
yesterday from 80MB to 256MB, because it always used to sit at 93-94% used
when I had 80.  Well now that I installed more, it's sitting at 93% used
again.  Being newer to BSD, is there a way I can check what is using
memory...or does it just do that automatically?

Thanks for the help!

Matt Winslow
[EMAIL PROTECTED]


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



RE: Question about memory usage

2002-11-19 Thread Barry Byrne
man top

 - Barry

--
Barry Byrne, IT Manager,
WBT Systems, Block 2, Harcourt Centre
Harcourt Street, Dublin 2, Ireland


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Matt Winslow
 Sent: 19 November 2002 16:13
 To: [EMAIL PROTECTED]
 Subject: Question about memory usage


 I'm running FreeBSD 4.5, on a P-133 system.  I just upgraded my RAM
 yesterday from 80MB to 256MB, because it always used to sit at 93-94% used
 when I had 80.  Well now that I installed more, it's sitting at 93% used
 again.  Being newer to BSD, is there a way I can check what is using
 memory...or does it just do that automatically?

 Thanks for the help!

 Matt Winslow
 [EMAIL PROTECTED]


 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Question about memory usage

2002-11-19 Thread John Bleichert
On Tue, 19 Nov 2002, Matt Winslow wrote:

 Date: Tue, 19 Nov 2002 11:13:15 -0500
 From: Matt Winslow [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Question about memory usage
 
 I'm running FreeBSD 4.5, on a P-133 system.  I just upgraded my RAM
 yesterday from 80MB to 256MB, because it always used to sit at 93-94% used
 when I had 80.  Well now that I installed more, it's sitting at 93% used
 again.  Being newer to BSD, is there a way I can check what is using
 memory...or does it just do that automatically?
 
 Thanks for the help!
 
 Matt Winslow
 [EMAIL PROTECTED]
 

BSD will use whatever memory you give it. Especially if you do a large 
compile or something of that nature. Going from 80 MB to 256 MB isn't that 
big of a step, esp. if it's a desktop system. Going from 256 MB to say 1.5 
GB you should see your percentages drop somewhat. That is, for a desktop 
system.

Remember that the memory usage statistics also contain shared memory and 
memory that is cached application data, which may be cleared and reused 
if a new application needs it.

Also, in a server system, if you had 1 GB of memory and only showed 500 MB 
used, you'd have 500 MB of wasted memory to pull out and put in another 
box. 93% sounds like a good usage to me :)

#  John Bleichert 
#  http://vonbek.dhs.org/latest.jpg


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Setting Host Parameters with /stand/sysinstall Scripts

2002-11-19 Thread Martin McCormick
I am building an install.cfg script to standardize our
building and upgrading of servers.  It works quite well so far,
but one part seems to not take.  This is the setting of local
host parameters as in

# My host specific data
hostname=ns1.hardknocks.edu
domainname=hardknocks.edu
nameserver=10.0.0.1
defaultrouter=10.0.0.2
ipaddr=10.0.0.1
netmask=255.0.0.0

These are all variables that some function uses to build
a new /etc/rc.conf file.  What function is it that I am missing?

I presently can get the script to extract and install the
kernel sources and the general collection of sources without X as
in:

# Select which distributions we want.
distSetDeveloper
distSetKernDeveloper
#Selects the standard kernel Developer's distribution set.
# OK, everything is set.  Do it!
installUpgrade

sysinstall tells me that the first part of the upgrade is
successful and the appropriate directories seem to indicate that
this is true.  If I look at /etc/rc.conf, however, it is still in
the state it was in before I ran the upgrade.

Martin McCormick

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



is this a gif() problem or something else

2002-11-19 Thread Brent Wiese
I am running an ipsec tunnel (gif/racoon) between an Alpha Freebsd box
and a win2k box. I actually have several tunnels and they all set up and
work.

The key to this particular tunnel is that the servers are only a few
hops away on a 100mb uplink.

While transferring a large file (approx 900 mb), I'm seeing about
75mb/s, which is great. However, about 75-80% of the way thru, the alpha
reboots and this error is logged in dmesg:

fatal kernel trap:

trap entry = 0x2 (memory management fault)
a0 = 0x1c795105b6a647
a1 = 0x1
a2 = 0x0
pc = 0xfc4adec0
ra = 0xfc4a5b1c
curproc= 0

panic: trap

syncing disks...
fatal kernel trap:

trap entry = 0x2 (memory management fault)
a0 = 0x58
a1 = 0x1
a2 = 0x0
pc = 0xfc5c4c84
ra = 0xfc5cbcc8
curproc= 0

I watched the load manually during the xfer and it never peaked over .81
that I saw. I'm suspecting this is either a problem w/ the gif() code
(maybe specific to alpha build), a heat problem or a bad stick of RAM?

Was curious if this rang any bells. I'd hate to spend a ton of time
chasing down false leads if someone else has already been through this.

Thanks,
Brent



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



How to allocate IRQ?

2002-11-19 Thread Narayanan Vidya-CVN065
Hi,
Is there a way to allocate an IRQ manually to a pccard device through the
command line? I would appreciate if some could tell me the procedure to do
this.

Thanks,
Vidya

application/ms-tnef

setsockopt() to set a timeout limitations?

2002-11-19 Thread Lance Bland
hi-

I used setsockopt() to set a timeout for a blocking socket.

It works for 1 second timeout.
It does not seem to work for a 5000 microsecond timeout.

is there a limit to the timeout?

TIA-

-lance


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: How to allocate IRQ?

2002-11-19 Thread John Bleichert
On Tue, 19 Nov 2002, Narayanan Vidya-CVN065 wrote:

 Date: Tue, 19 Nov 2002 11:05:54 -0600
 From: Narayanan Vidya-CVN065 [EMAIL PROTECTED]
 To: 'FreeBSD Questions' [EMAIL PROTECTED]
 Subject: How to allocate IRQ? 
 
 Hi,
 Is there a way to allocate an IRQ manually to a pccard device through the
 command line? I would appreciate if some could tell me the procedure to do
 this.
 
 Thanks,
 Vidya
 

See the pccard.conf(5) man page - you'll need to override its IRQ entries. 
Also, pccardd(8) and pccardc(8) are really useful for debugging this sort 
of modification.

HTH - JB


#  John Bleichert 
#  http://vonbek.dhs.org/latest.jpg


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Question about memory usage

2002-11-19 Thread David Schultz
Thus spake Matt Winslow [EMAIL PROTECTED]:
 I'm running FreeBSD 4.5, on a P-133 system.  I just upgraded my RAM
 yesterday from 80MB to 256MB, because it always used to sit at 93-94% used
 when I had 80.  Well now that I installed more, it's sitting at 93% used
 again.  Being newer to BSD, is there a way I can check what is using
 memory...or does it just do that automatically?

Free memory is wasted memory.  If you have more of it, FreeBSD
will use more, e.g. by caching things longer.  With the additional
memory, you will probably notice that your system is faster and
accesses the disk less frequently under load.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



usb modem howto for newbie

2002-11-19 Thread Ertan Kucukoglu
Hello,

I want to use a USB modem on FreeBSD 4.7-STABLE.

First I do not know where to start. Is there any how-to
pages?
I looked at umodem.c file. There is not so much
explanations in the code.

I searched the archieves for a starting point. I could not
find any helpful message for me.

Here is what I could manage:
kldload usb
kldload umodem
ls -l /dev/usb*
crw-rw  1 root  operator  108, 255 11 Eki 22:33
/dev/usb
crw-rw  1 root  operator  108,   0 11 Eki 22:33
/dev/usb0
crw-rw  1 root  operator  108,   1 19 Kas 19:27
/dev/usb1
usbdevs -v
Controller /dev/usb0:
addr 1: self powered, config 1, UHCI root hub(0x),
Intel(0x), rev 1.00
 port 1 powered
 port 2 addr 2: power 100 mA, config 1, USB
Communicator(0x7554), STMicroelectronics(0x0483), rev 1.01

Regards,

Ertan Kucukoglu

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



2questions

2002-11-19 Thread Enrique Morfin
Hi!

1) how can i update from 4.5 to 4.7 preserving all my
configurations?

2) i use snort (from ports) with no problems, then i
need to modify the source code, i did it and work on
linux, then i put the new source code on my freeBSD
box, type configure, then make and got this:

...
gcc  -g -O2 -Wall -L/usr/local/lib/mysql -o snort 
snort.o log.o decode.o mstring.o rules.o plugbase.o 
sp_pattern_match.o sp_tcp_flag_check.o
sp_icmp_type_check.o  sp_icmp_code_check.o
sp_ttl_check.o sp_ip_id_check.o sp_tcp_ack_check.o 
sp_tcp_seq_check.o sp_dsize_check.o spp_http_decode.o
spp_portscan.o  sp_ipoption_check.o sp_rpc_check.o
sp_icmp_id_check.o  sp_icmp_seq_check.o sp_respond.o
spo_alert_syslog.o spo_log_tcpdump.o  spo_database.o
sp_session.o spp_defrag.o parser.o spo_alert_fast.o 
spo_alert_full.o spo_alert_smb.o spo_alert_unixsock.o
sp_react.o  spo_xml.o sp_ip_tos_check.o snprintf.o
checksum.o spp_tcp_stream2.o  sp_reference.o
sp_ip_fragbits.o spp_anomsensor.o tag.o
spp_unidecode.o  codes.o strlcpyu.o strlcatu.o debug.o
sp_tcp_win_check.o  spp_rpc_decode.o spp_bo.o
spp_telnet_negotiation.o spo_csv.o  sp_ip_same_check.o
sp_priority.o sp_ip_proto.o ubi_BinTree.o 
ubi_SplayTree.o spo_unified.o spp_stream4.o
spp_frag2.o spp_arpspoof.o  spo_idmef.o spo_SnmpTrap.o
spo_log_null.o  -lz -lpcap -lm -lnsl  -lmysqlclient
/usr/libexec/elf/ld: cannot find -lnsl
*** Error code 1

Stop in /usr/local/snort-1.8.6.
*** Error code 1

Stop in /usr/local/snort-1.8.6.
*** Error code 1

Stop in /usr/local/snort-1.8.6.

any ideas?

_
Do You Yahoo!?
La mejor conexiĂłn a internet y 25MB extra a tu correo por $100 al mes. 
http://net.yahoo.com.mx

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



IMGATE

2002-11-19 Thread Kenzo
any one ever use IMGATE for Imail?
I want to play with it, and I was wondering of any Pros and Cons.
The program seems kind of old and I wasn't able to find any resent documents
for it.
this is the site for all who are wondering.
http://imgate.meiway.com/index.cfm
basically, I want to create a server that would filter all the incoming
E-mails for spam and viruses and then forward all the good E-mails on to the
mail server.
I've looked a spamassassin and couple other ones, but couldn't find anything
that said you could do that.  Just alot docs on how to setup an E-mail
server.
I don't want to setup an E-mail server, just a relay server.
Thanks.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Question about memory usage

2002-11-19 Thread Kris Kennaway
On Tue, Nov 19, 2002 at 11:13:15AM -0500, Matt Winslow wrote:
 I'm running FreeBSD 4.5, on a P-133 system.  I just upgraded my RAM
 yesterday from 80MB to 256MB, because it always used to sit at 93-94% used
 when I had 80.  Well now that I installed more, it's sitting at 93% used
 again.  Being newer to BSD, is there a way I can check what is using
 memory...or does it just do that automatically?

So you'd prefer that the extra memory you added was just sitting there
unused (i.e. wasted)? :-)

Kris



msg09363/pgp0.pgp
Description: PGP signature


Re: 2questions

2002-11-19 Thread Marc Perisa
Enrique Morfin wrote:

Hi!

1) how can i update from 4.5 to 4.7 preserving all my
configurations?



By following the documentation. It is written at:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cutting-edge.html

- especially chapter 21.4 Using make world. mergemaster(8) is the key. 
It should preserve every change in the configuration of standard FreeBSD 
files you had done (if used correctly). All others are not touched.

Hope that helps

Marc





To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


make index fails with repeated Warning: Duplicate INDEX entry:Stop in /usr/ports/finance msgs

2002-11-19 Thread Stacey Roberts
Hello,
 Yesterday, I portupgraded (-R) portlint. Since then I've not got a
borked ports tree, which I am unable to rectify.

Attempts to make clean in /usr/ports, as well as portsdb -Uu after
cvsuping the ports tree fail.

I've tried the following procedure:-

1] rm -r /usr/ports/*
2] cvsup ports-all
3] cd /usr/ports; make index

This continues to fail (twice now since last night). Am I in the middle
of some change? Is there something that I've missed in portupgrading
portlint?

At the moment, the following fail to complete in /usr/ports:-
make index
make clean
portsdb -Uu
 
All fail / stop with the following errors:

Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry: 
Warning: Duplicate INDEX entry: Stop in /usr/ports/finance.
Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry: 
Warning: Duplicate INDEX entry: Stop in /usr/ports/finance.
Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry: 
Warning: Duplicate INDEX entry: Stop in /usr/ports/finance.
Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry: 
Warning: Duplicate INDEX entry: Stop in /usr/ports/finance.
Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry: 
Warning: Duplicate INDEX entry: Stop in /usr/ports/finance.
Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry: 
Warning: Duplicate INDEX entry: Stop in /usr/ports/finance.
Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry: 
Warning: Duplicate INDEX entry: Stop in /usr/ports/finance.
Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry: 
Warning: Duplicate INDEX entry: Stop in /usr/ports/finance.
Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry: 
Warning: Duplicate INDEX entry: Stop in /usr/ports/finance.
Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry: 
 Done.
#

Thanks for the time.

Regards,

Stacey
-- 
Stacey Roberts
B.Sc (HONS) Computer Science

Web: www.vickiandstacey.com



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Question about memory usage

2002-11-19 Thread Jerry McAllister
 
 On Tue, Nov 19, 2002 at 11:13:15AM -0500, Matt Winslow wrote:
  I'm running FreeBSD 4.5, on a P-133 system.  I just upgraded my RAM
  yesterday from 80MB to 256MB, because it always used to sit at 93-94% used
  when I had 80.  Well now that I installed more, it's sitting at 93% used
  again.  Being newer to BSD, is there a way I can check what is using
  memory...or does it just do that automatically?

top(1) will show how much memory is allocated to the top resource
using processes.

jerry

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



configure the printer (II) and apsfilter

2002-11-19 Thread xxavi

Good, in this web page:

http://apsfilter.org/docs/apsfilter-handbook-stable.html#install_notes_freebsd

they say that it must alter this of a file of FreeBSD:

Index: lpr.c
===
RCS file: /home/ncvs/src/usr.sbin/lpr/lpr/lpr.c,v
retrieving revision 1.32
diff -u -r1.32 lpr.c
--- lpr.c   2000/01/19 14:25:08 1.32
+++ lpr.c   2000/04/05 09:36:01
@@ -320,7 +320,7 @@
seteuid(uid);
card('H', host);
card('P', person);
-   if (hdr  !pp-no_header) {
+   if (hdr) {
if (jobname == NULL) {
if (argc == 0)
jobname = stdin;


if I have FreeBSD 4.7 STABLE, even this in actually this modification that must
do?

Come, until another one.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



issues with Bind 9.2.1

2002-11-19 Thread Adam Bayless
Bind is dumping cores after a couple of minutes on two of my nameservers 
running 4.7, while one of them is rock solid. All three boxes are as shown:

FreeBSD hostname 4.7-RELEASE FreeBSD 4.7-RELEASE #0: Wed Oct  9 15:08:34 
GMT 2002 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  i386

Pretty vanilla installs. The config is pretty straightforward too, just a 
bunch of zones. I've even tried limiting the config to just a hints file 
and localhost.rev and still get the crash. Here's gdb's take on the core file:

GNU gdb 4.18 (FreeBSD)
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type show copying to see the conditions.
There is absolutely no warranty for GDB.  Type show warranty for details.
This GDB was configured as i386-unknown-freebsd...Deprecated bfd_read 
called at 
/usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c 
line 2627 in elfstab_build_psymtabs
Deprecated bfd_read called at 
/usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c 
line 933 in fill_symbuf


Core was generated by `named'.
Program terminated with signal 4, Illegal instruction.
Reading symbols from /usr/lib/libc.so.4...done.
Reading symbols from /usr/libexec/ld-elf.so.1...done.
#0  0x281b3798 in select () from /usr/lib/libc.so.4
(gdb) backtrace
#0  0x281b3798 in select () from /usr/lib/libc.so.4
#1  0x8125194 in evloop () at app.c:328
#2  0x81253d8 in isc_app_run () at app.c:526
#3  0x8053e39 in main (argc=1, argv=0xbfbffbf4) at ./main.c:572
#4  0x804a061 in _start ()
(gdb) quit

Both machines show the same trace. Anyone got any ideas for me?

Thanks,

Adam








Adam Bayless|  vi /etc/mail/aliases
Fibernet System Janitor |  complaints: /dev/null
[EMAIL PROTECTED]  |  :wq
baylessfamily.org/~abayless |  newaliases



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


Re: 2questions

2002-11-19 Thread Georg Klein
On Tue, 19 Nov 2002, Enrique Morfin wrote:
[...]
 gcc  -g -O2 -Wall -L/usr/local/lib/mysql -o snort
[...]
 spo_log_null.o  -lz -lpcap -lm -lnsl  -lmysqlclient
 /usr/libexec/elf/ld: cannot find -lnsl
 *** Error code 1
[...]
 any ideas?

There is no 'libnsl' on BSD - you relly need it only on Solaris Systems.

Georg

--
Georg Klein   [EMAIL PROTECTED]


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: issues with Bind 9.2.1

2002-11-19 Thread Kris Kennaway
On Tue, Nov 19, 2002 at 01:28:52PM -0700, Adam Bayless wrote:

 Core was generated by `named'.
 Program terminated with signal 4, Illegal instruction.

This probably means you either have:

a) Compiled the binary for an incorrect architecture or CPU type
(e.g. pentium pro running on a pentium)

b) something causing memory or filesystem corruption (i.e. bad
hardware) that has flipped a bit in the bind file.

Kris



msg09370/pgp0.pgp
Description: PGP signature


Re: cheat sheet? apache, mod_ssl, mod_php, mysql

2002-11-19 Thread Ronnie Clark
OK, 

I have doen the following in order:

cd /usr/ports/databases/mysql323-server
make install clean
cd /usr/ports/www/apache13-modssl
make install clean
cd /usr/ports/www/mod_php4
make install clean

And I have php and SSL playing nice. But, I have a server certificicate 
that is expired and doesn't match...  How does one update the CA and 
server cert after these steps?

Thanks in advance,
Ron Clark



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: issues with Bind 9.2.1

2002-11-19 Thread Adam Bayless
Kris,

Thanks for the speedy reply. I wondered about hardware issues too, but on 
two different machines with vastly different hardware and no other 
indications of problems?

The first machine is:

CPU: AMD Athlon(tm) Processor (1333.10-MHz 686-class CPU)
  Origin = AuthenticAMD  Id = 0x644  Stepping = 4
  Features=0x183fbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
  AMD Features=0xc044b18,AMIE,DSP,3DNow!
real memory  = 268369920 (262080K bytes)
avail memory = 255954944 (249956K bytes)

and the second is:

CPU: Pentium II/Pentium II Xeon/Celeron (334.09-MHz 686-class CPU)
  Origin = GenuineIntel  Id = 0x660  Stepping = 0
  Features=0x183f9ffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
real memory  = 268435456 (262144K bytes)
avail memory = 256024576 (250024K bytes)

I'm following the standard instructions that come with bind for these 
builds (./configure; make; make install) so am I safe to assume it's gonna 
build for the right architecture? I've also tried building them from the 
ports collection with no better results. Any other thoughts?

Thanks,

Adam



At 12:43 PM 11/19/2002 -0800, Kris Kennaway wrote:
On Tue, Nov 19, 2002 at 01:28:52PM -0700, Adam Bayless wrote:

 Core was generated by `named'.
 Program terminated with signal 4, Illegal instruction.

This probably means you either have:

a) Compiled the binary for an incorrect architecture or CPU type
(e.g. pentium pro running on a pentium)

b) something causing memory or filesystem corruption (i.e. bad
hardware) that has flipped a bit in the bind file.

Kris





Adam Bayless|  vi /etc/mail/aliases
Fibernet System Janitor |  complaints: /dev/null
[EMAIL PROTECTED]  |  :wq
baylessfamily.org/~abayless |  newaliases



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



/usr/ports/finance? WAS [make index fails with repeated Warning:Duplicate INDEX entry: Stop in /usr/ports/finance msgs]

2002-11-19 Thread Stacey Roberts
Sorry if this second post irks some, but in looking at the warnings /
errors indicated in my earlier post I noted that there is a complaint
about /usr/ports/finance. 

However a quick look at http://www.freebsd.org/ports/index.html reveals
that this ports dir does *not* exist. Now only today, I rm -rf
/usr/ports/* and re-cvsup ports-all, so how is it that I could end up
with a ports dir that doesn't exist (at least at the above url)? See:

# ls
.cvsignore  benchmarks  ftp mbone   sysutils
INDEX   biology games   misctextproc
INDEX.dbcad german  multimedia  ukrainian
LEGAL   chinese graphicsnet vietnamese
MOVED   comms   hebrew  newswww
Makefileconverters  hungarian   palmx11
Mk  databases   irc picobsd x11-clocks
README  deskutils   japaneseportuguese  x11-fm
Templates   devel   javaprint   x11-fonts
Tools   editors korean  russian x11-servers
archivers   emulators   langscience x11-toolkits
astro   finance mailsecurityx11-wm
audio   french  mathshells
#

Looking at finance:
# ls -la finance/
total 5
drwxr-xr-x   3 root  wheel   512 Nov 19 19:15 .
drwxr-xr-x  59 root  wheel  1536 Nov 19 20:50 ..
-rw-r--r--   1 root  wheel   119 Nov 18 09:42 Makefile
drwxr-xr-x   2 root  wheel   512 Nov 19 19:15 pkg
#

Checking finance/Makefile:
# ls -la finance/Makefile 
-rw-r--r--  1 root  wheel  119 Nov 18 09:42 finance/Makefile
# file finance/Makefile
finance/Makefile: ASCII text
# more finance/Makefile
# $FreeBSD: ports/finance/Makefile,v 1.1 2002/11/18 09:42:26 knu Exp $
#
SUBDIR += 

.include bsd.port.subdir.mk
#

I'm not a maintainer, but this *does* appear to be out of place here.
Looking at finance/pkg:
# ls -la finance/pkg/
total 3
drwxr-xr-x  2 root  wheel  512 Nov 19 19:15 .
drwxr-xr-x  3 root  wheel  512 Nov 19 19:15 ..
-rw-r--r--  1 root  wheel   45 Nov 18 09:22 COMMENT
# ls -la finance/pkg/COMMENT 
-rw-r--r--  1 root  wheel  45 Nov 18 09:22 finance/pkg/COMMENT
# file finance/pkg/COMMENT
finance/pkg/COMMENT: ASCII text
# more finance/pkg/COMMENT
Monetary, financial and related applications
#

Again, I'm somewhat puzzled by this. I'm not using any ports on this
machine that uses / requires anything to do with financial pkgs nor have
I installed any related ports.., What's this doing here, if its not
actually listed at FreeBSD.org?

Like I said earlier (and confirmed from relevant timestamps), my ports
tree was re-cvsup'ed within only an hour ago.

Could someone that knows (or know's someone that does) fill me in on
this / point me to where I might find out for myself, please?

Cheers

Stacey

-- 
Stacey Roberts
B.Sc (HONS) Computer Science

Web: www.vickiandstacey.com



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Basic mail and Sendmail problem

2002-11-19 Thread James Earl
  When I know try to send a mail to 'userone' with 'mail -v userone'
  I get the following error (same error in /var/spool/clientmqueue):
  userone... Connecting to localhost.mydomain. via relay...
  userone... Deferred: Connection refused by localhost.mydomain.
 
 One more thing to add: This works fine, when I am connected to my ISP.
 So this might be a problem with DNS configuration?

I just had a similar problem with a couple of my machines.

Try changing the 'search' line in resolv.conf to a local domain name.

For instance, my /etc/resolv.conf file is like this:

search localdomain.net
nameserver ?.?.?.? (real dns servers)
nameserver ?.?.?.?

And my /etc/hosts file:

127.0.0.1 localhost localhost.localdomain.net
192.168.19.1 gateway gateway.localdomain.net
..

sendmail_enable=NO in /etc/rc.conf

My big problem was my isp's DHCP server was assigning me a domain-name which would 
change my resolv.conf file.  To solve that I had to add a supersede line in 
dhclient.conf.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



RE: IMGATE

2002-11-19 Thread Jonas Fornander

We've been using IMGate for a couple of years. Couldn't live without it.
Currently it's removing about 15-20K spam messages a day. An added
benefit of using a mail gateway like IMGate is that if we need to take
down our POP server, the IMGate will store all mail and deliver them
when the POP server is up again.

IMGate is running postfix and added scripts. It's not that complex but
we chose to have Len Conrad (the author if IMGate) install it for us.

Jonas Fornander - System Administrator
Netwood Communications, LLC - www.netwood.net
Find out why we're better - 310-442-1530 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED]] On Behalf Of Kenzo
 Sent: Tuesday, November 19, 2002 12:00 PM
 To: [EMAIL PROTECTED]
 Subject: IMGATE
 
 
 any one ever use IMGATE for Imail?
 I want to play with it, and I was wondering of any Pros and 
 Cons. The program seems kind of old and I wasn't able to find 
 any resent documents for it. this is the site for all who are 
 wondering. http://imgate.meiway.com/index.cfm
 basically, I want to create a server that would filter all 
 the incoming E-mails for spam and viruses and then forward 
 all the good E-mails on to the mail server. I've looked a 
 spamassassin and couple other ones, but couldn't find 
 anything that said you could do that.  Just alot docs on how 
 to setup an E-mail server. I don't want to setup an E-mail 
 server, just a relay server. Thanks.
 
 
 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message
 


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



X Windows Superprobe - Where is it?

2002-11-19 Thread Drew Tomlinson
Sorry for the seemingly simple question but I can't find this
SuperProbe that will tell me what type of graphics card I have.
Google searches aren't yielding the location and I didn't find anything
with 'find' or 'man -k'.  I've installed XFree4 from ports.  Should I
have SuperProbe and if so, where is it?

Thanks,

Drew


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD Easy Server

2002-11-19 Thread Pierrick Brossin
Kris Kennaway wrote:


If you've been running this server for 1 and a half years I hope you
have kept up with all the security patches for the services running on
your machine (as well as the OS itself), otherwise it definitely will
not be secure.


I did the best I could do :)

--
Pierrick Brossin
IT Employee
15, Ch. du Château, 1422 Grandson, Switzerland
Tel Prof: +41-327201423 Mobile Priv: +41-794137145
Mail Prof: [EMAIL PROTECTED] Mail Priv: [EMAIL PROTECTED]


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: /usr/ports/finance? WAS [make index fails with repeated Warning:Duplicate INDEX entry: Stop in /usr/ports/finance msgs]

2002-11-19 Thread Marc Perisa
Hi Stacey,

Stacey Roberts wrote:

Sorry if this second post irks some, but in looking at the warnings /
errors indicated in my earlier post I noted that there is a complaint
about /usr/ports/finance. 


(snip)



Again, I'm somewhat puzzled by this. I'm not using any ports on this
machine that uses / requires anything to do with financial pkgs nor have
I installed any related ports.., What's this doing here, if its not
actually listed at FreeBSD.org?


It is.

http://www.freebsd.org/cgi/cvsweb.cgi/ports/finance/Makefile



Like I said earlier (and confirmed from relevant timestamps), my ports
tree was re-cvsup'ed within only an hour ago.

Could someone that knows (or know's someone that does) fill me in on
this / point me to where I might find out for myself, please?


That tree/files were added Mon Nov 18 9:42:26 2002 UTC by knu to the cvs 
repository(as you can see on that page.)
Perhaps the web pages which give you an overview about what ports exists 
were not updated yet.

But it is in the code repository. So it is offical and some one thought 
that it may be useful. If you don't want that part of the ports tree 
feel free to exclude it in your ports-cvsup file.

Hope that helps

Marc



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


Syslog Piping

2002-11-19 Thread Scott Pilz

In syslog, if you have:

*.* | /pipe.pl

The output should be piped to pipe.pl - how, in perl, would you go about
capturing this output? I have tried everything I could think of. $1,
ARGV[#], STDIN, while () (which apparently works on linux, I haven't
tried myself), and then some.

Anybody ever try this?

Thanks,

Scott


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: /usr/ports/finance? WAS [make index fails with repeatedWarning: Duplicate INDEX entry: Stop in /usr/ports/finance msgs]

2002-11-19 Thread Stacey Roberts
Hello Marc,
  Thanks for that pointer, explains some, then again raises other
questions for me.

Namely, (not complaining here) why would a new dir be created  with
nothing in it, and included in cvs? At the moment, (after trying 3
geographically different cvsup servers) this inclusion breaks my ability
to run make clean in /usr/ports big time.

Nice to know what's happened (funny, I *am* subscribed to ports@freebsd)
finally, that e-mail must have slipped me.

Cheers for that info.

Stacey

On Tue, 2002-11-19 at 21:44, Marc Perisa wrote:
 Hi Stacey,
 
 Stacey Roberts wrote:
  Sorry if this second post irks some, but in looking at the warnings /
  errors indicated in my earlier post I noted that there is a complaint
  about /usr/ports/finance. 
  
 
 (snip)
 
  
  Again, I'm somewhat puzzled by this. I'm not using any ports on this
  machine that uses / requires anything to do with financial pkgs nor have
  I installed any related ports.., What's this doing here, if its not
  actually listed at FreeBSD.org?
 
 It is.
 
 http://www.freebsd.org/cgi/cvsweb.cgi/ports/finance/Makefile
 
  
  Like I said earlier (and confirmed from relevant timestamps), my ports
  tree was re-cvsup'ed within only an hour ago.
  
  Could someone that knows (or know's someone that does) fill me in on
  this / point me to where I might find out for myself, please?
 
 That tree/files were added Mon Nov 18 9:42:26 2002 UTC by knu to the cvs 
 repository(as you can see on that page.)
 Perhaps the web pages which give you an overview about what ports exists 
 were not updated yet.
 
 But it is in the code repository. So it is offical and some one thought 
 that it may be useful. If you don't want that part of the ports tree 
 feel free to exclude it in your ports-cvsup file.
 
 Hope that helps
 
 Marc
 
 
 
 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message
-- 
Stacey Roberts
B.Sc (HONS) Computer Science

Web: www.vickiandstacey.com



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: HELP (or, now I've done it!) Vinum, RAID, and drivefailure...

2002-11-19 Thread Greg 'groggy' Lehey
On Tuesday, 19 November 2002 at  9:05:19 -0500, Phillip Smith (3BAGSMEDIA) wrote:

 Hoping that the gods are with me and that you knowledgeable people can
 assist me with this _really_ big screw up...

 FreeBSD4.6-stable

 I was setting up Vinum (rather successfully I might add) until last when
 I tried to configure a second mirror with two different drives...

 All I can tell you is this...

 I had one vinum mirror set-up with this info:

 ...

 Working fine. I moved /usr to that mirror and edited /etc/fstab to point
 /usr to this new mirror -- which worked fine. Then I wanted to set-up
 another mirror on another two drives, so I
 (stupidly) changed that vinum.conf to the following:

 ...

 And started vinum and used the create -f command.

That's your mistake.  NEVER use create for existing objects.  Vinum
finds them automatically.

 Then there was an error, something about no space on one of the
 devices (presumably, the device where the mirror was already
 working).

These error messages are important.  That's why I ask for them (and
not the config files) when people submit problem reports.

 Next thing I know there's a kernel panic or something that stops the
 system.  If I reboot, the kernel panics with a fatal trap 12: page
 fault while in kernel mode message... Vinum sais that a device is
 not functioning properly and can't 'sync' the devices...

 I can't figure a way around this. The /usr (and binaries) are not
 accessible, neither is my data. I can't start the system. I'm hoping
 you can help...

Well, not with the information you've supplied.  Take a look at
http://www.vinumvm.org/vinum/how-to-debug.html and supply as much of
the information as it asked for there.

 (Wish I spent the 10 minutes and made that 'one last backup')

 All I'd like to do is reverse that last vinum configuration... but I
 can't get to any of the binaries because /usr is offline. I don't mind
 re-building the system, but I moved my last back-up to that first mirror
 (which I thought would be safe) and now I don't have access to it.

What happens if you try to start Vinum?

Greg
--
When replying to this message, please copy the original recipients.
If you don't, I may ignore the reply or reply to the original recipients.
For more information, see http://www.lemis.com/questions.html
See complete headers for address and phone numbers

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: X Windows Superprobe - Where is it?

2002-11-19 Thread Drew Tomlinson
- Original Message -
From: Dan Nelson [EMAIL PROTECTED]
To: Drew Tomlinson [EMAIL PROTECTED]
Cc: FreeBSD Questions [EMAIL PROTECTED]
Sent: Tuesday, November 19, 2002 1:46 PM


 In the last episode (Nov 19), Drew Tomlinson said:
  Sorry for the seemingly simple question but I can't find this
  SuperProbe that will tell me what type of graphics card I have.
  Google searches aren't yielding the location and I didn't find
anything
  with 'find' or 'man -k'.  I've installed XFree4 from ports.  Should
I
  have SuperProbe and if so, where is it?

 Superprobe was removed in XFree86 4.2.0.  You're supposed to run
 XFree86 -configure instead, I believe.

Thank you very much.  XFree86 -configure crashes my Alpha but according
to the man pages, it is the correct command.  :)  OK, back to work...

Thanks,

Drew


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Syslog Piping

2002-11-19 Thread Chris Pressey
On Tue, 19 Nov 2002 15:39:24 -0600 (CST)
Scott Pilz [EMAIL PROTECTED] wrote:

 
   In syslog, if you have:
 
 *.*   | /pipe.pl
 
 The output should be piped to pipe.pl - how, in perl, would you go about
 capturing this output? I have tried everything I could think of. $1,
 ARGV[#], STDIN, while () (which apparently works on linux, I haven't
 tried myself), and then some.
 
   Anybody ever try this?
 
   Thanks,
 
   Scott

IIRC you might need to put

  $| = 1;

at the beginning of the Perl script, so that STDIN is automatically
flushed.

-Chris

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: make index fails with repeated Warning: Duplicate INDEX entry: Stop in /usr/ports/finance msgs

2002-11-19 Thread Kris Kennaway
On Tue, Nov 19, 2002 at 08:15:34PM +, Stacey Roberts wrote:

 This continues to fail (twice now since last night). Am I in the middle
 of some change?

Yes..apparently there are problems with empty port categories and some
of the bsd.port.mk targets.  These will go away once ports are
repo-copied into the new directories (shortly)




msg09386/pgp0.pgp
Description: PGP signature


Re: cheat sheet? apache, mod_ssl, mod_php, mysql

2002-11-19 Thread Andreas Ntaflos
On Tue, Nov 19, 2002 at 02:49:25PM -0600, Ronnie Clark wrote:
 
 And I have php and SSL playing nice. But, I have a server certificicate 
 that is expired and doesn't match...  How does one update the CA and 
 server cert after these steps?
 

Look at the FAQ section of the mod_ssl handbook at
http://www.modssl.org/docs/2.8/ssl_faq.html for information about the pro-
cedure of updating and creating a CA.

HTH
regards
-- 
Andreas ant Ntaflos | A cynic is a man who knows the price of
[EMAIL PROTECTED]   | everything, and the value of nothing.
Vienna, AUSTRIA   |  Oscar Wilde


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Anjuta broken?

2002-11-19 Thread dslb
Hi all

When I try to build anjuta on my FreeBSD 4.7, I get:

aneditor.cxx: In function `bool nonFuncChar(char)':
aneditor.cxx:292: redefinition of `bool nonFuncChar(char)'
/usr/X11R6/include/scintilla/PropSet.h:79: `bool nonFuncChar(char)' previously
defined here
aneditor.cxx: In method `long int AnEditor::Command(int, long int, long
int)':
aneditor.cxx:1555: `SCI_TEXTWIDTH' undeclared (first use this function)
aneditor.cxx:1555: (Each undeclared identifier is reported only once
aneditor.cxx:1555: for each function it appears in.)
aneditor.cxx: In method `void AnEditor::ReadProperties(const char *)':
aneditor.cxx:2073: `SCLEX_MATLAB' undeclared (first use this function)
gmake[2]: *** [aneditor.o] Error 1
gmake[2]: Leaving directory `/usr/ports/devel/anjuta/work/anjuta-1.0.0/src'
gmake[1]: *** [all-recursive] Error 1
gmake[1]: Leaving directory `/usr/ports/devel/anjuta/work/anjuta-1.0.0'
gmake: *** [all] Error 2
*** Error code 2

Stop in /usr/ports/devel/anjuta

My port system is up-to-date, so am I doing something wrong or is anjuta
just broken (according to freshports.org it is not broken).

br
socketd


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Help with X-Window etc.

2002-11-19 Thread Kris Kennaway
On Tue, Nov 19, 2002 at 02:55:35PM -0800, Nathan Kinkade wrote:
 On Tue, Nov 19, 2002 at 04:32:34PM -0600, Earl Larsen wrote:
  When I installed the X-window. The Desktop did not stay within the screan of
  the moniter. How can I fit the hole desktop within the screan?
   if the controls on your monitor won't take care of the problem then
   `man xvidtune`.

Or is the poster referring to the virtual desktop feature that
allows a desktop bigger than the physical screen dimensions?  This is
controlled from the XF86Config file.

Kris



msg09393/pgp0.pgp
Description: PGP signature


Re: Anjuta broken?

2002-11-19 Thread Joe Marcus Clarke
On Wed, 20 Nov 2002 [EMAIL PROTECTED] wrote:

 Hi all

 When I try to build anjuta on my FreeBSD 4.7, I get:

Update to the latest version of scintilla.

Joe


 aneditor.cxx: In function `bool nonFuncChar(char)':
 aneditor.cxx:292: redefinition of `bool nonFuncChar(char)'
 /usr/X11R6/include/scintilla/PropSet.h:79: `bool nonFuncChar(char)' previously
 defined here
 aneditor.cxx: In method `long int AnEditor::Command(int, long int, long
 int)':
 aneditor.cxx:1555: `SCI_TEXTWIDTH' undeclared (first use this function)
 aneditor.cxx:1555: (Each undeclared identifier is reported only once
 aneditor.cxx:1555: for each function it appears in.)
 aneditor.cxx: In method `void AnEditor::ReadProperties(const char *)':
 aneditor.cxx:2073: `SCLEX_MATLAB' undeclared (first use this function)
 gmake[2]: *** [aneditor.o] Error 1
 gmake[2]: Leaving directory `/usr/ports/devel/anjuta/work/anjuta-1.0.0/src'
 gmake[1]: *** [all-recursive] Error 1
 gmake[1]: Leaving directory `/usr/ports/devel/anjuta/work/anjuta-1.0.0'
 gmake: *** [all] Error 2
 *** Error code 2

 Stop in /usr/ports/devel/anjuta

 My port system is up-to-date, so am I doing something wrong or is anjuta
 just broken (according to freshports.org it is not broken).

 br
 socketd


 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message




PGP Key : http://www.marcuscom.com/pgp.asc


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: X Windows Superprobe - Where is it?

2002-11-19 Thread Dan Nelson
In the last episode (Nov 19), Drew Tomlinson said:
 Sorry for the seemingly simple question but I can't find this
 SuperProbe that will tell me what type of graphics card I have.
 Google searches aren't yielding the location and I didn't find anything
 with 'find' or 'man -k'.  I've installed XFree4 from ports.  Should I
 have SuperProbe and if so, where is it?

Superprobe was removed in XFree86 4.2.0.  You're supposed to run
XFree86 -configure instead, I believe.

-- 
Dan Nelson
[EMAIL PROTECTED]

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Syslog Piping

2002-11-19 Thread paul beard
Scott Pilz wrote:


	In syslog, if you have:

*.*			| /pipe.pl

The output should be piped to pipe.pl - how, in perl, would you 
go about
capturing this output? I have tried everything I could think of. $1,
ARGV[#], STDIN, while () 


while () {
code
}

should work. It's not a linuxism.

here's a sample:

[/home/paul]:: more test.pl
#!/usr/bin/env perl
while () {
print $_;
}

Now just pipe something thru it:

[/home/paul]:: cat .signature | test.pl
Paul Beard / 8040 27th Ave NE / Seattle WA 98115 /
paulbeard [at] mac [ dot] com / 206 529 8400

weblog @ http://paulbeard.no-ip.org/movabletype/

I'm rated PG-34!!

--
Paul Beard / 8040 27th Ave NE / Seattle WA 98115 /
paulbeard [at] mac [ dot] com / 206 529 8400

weblog @ http://paulbeard.no-ip.org/movabletype/

I'm rated PG-34!!


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Changing the boot manager

2002-11-19 Thread Anand Buddhdev
I currently have the booteasy boot manager on my FreeBSD system, so it
prompts me with a menu on startup (F1 FreeBSD) and waits 5 seconds before
defaulting to F1. But I only have FreeBSD my box. Is there any way to
go back to the simpler, standard boot code that loads FreeBSD directly?

I have read about boot0cfg, which is supposed to allow me to change the
MBR, but I can't seem to find the correct boot code to install there to
get rid of booteasy.

-- 
Anand Buddhdev

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Syslog Piping

2002-11-19 Thread Scott Pilz

Tried that - but found the problem.

Picky picky picky :)... needed a ./pipe.pl.. I should have known
better. Guess I got used to /bins.

Thanks.

On Tue, 19 Nov 2002, paul beard wrote:

 Scott Pilz wrote:

  In syslog, if you have:
 
  *.* | /pipe.pl
 
  The output should be piped to pipe.pl - how, in perl, would you
  go about
  capturing this output? I have tried everything I could think of. $1,
  ARGV[#], STDIN, while ()


 while () {
 code
 }

 should work. It's not a linuxism.

 here's a sample:

 [/home/paul]:: more test.pl
 #!/usr/bin/env perl
 while () {
  print $_;
  }

 Now just pipe something thru it:

 [/home/paul]:: cat .signature | test.pl
 Paul Beard / 8040 27th Ave NE / Seattle WA 98115 /
 paulbeard [at] mac [ dot] com / 206 529 8400

 weblog @ http://paulbeard.no-ip.org/movabletype/

 I'm rated PG-34!!

 --
 Paul Beard / 8040 27th Ave NE / Seattle WA 98115 /
 paulbeard [at] mac [ dot] com / 206 529 8400

 weblog @ http://paulbeard.no-ip.org/movabletype/

 I'm rated PG-34!!



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Changing the boot manager

2002-11-19 Thread David Schultz
Thus spake Anand Buddhdev [EMAIL PROTECTED]:
 I currently have the booteasy boot manager on my FreeBSD system, so it
 prompts me with a menu on startup (F1 FreeBSD) and waits 5 seconds before
 defaulting to F1. But I only have FreeBSD my box. Is there any way to
 go back to the simpler, standard boot code that loads FreeBSD directly?
 
 I have read about boot0cfg, which is supposed to allow me to change the
 MBR, but I can't seem to find the correct boot code to install there to
 get rid of booteasy.

fdisk -B /dev/foo0
where foo0 is the boot disk.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Norton AntiVirus detected and quarantined a virus in a message you sent.

2002-11-19 Thread NAV for Microsoft Exchange-MAILSERVICE
Recipient of the infected attachment:  icsnetbroadcaster\Inbox
Subject of the message:  A  excite game
One or more attachments were quarantined.
  Attachment snoopy.exe was Quarantined for the following reasons:
Virus W32.Klez.H@mm was found.

application/ms-tnef

Re: Help with X-Window etc.

2002-11-19 Thread Nathan Kinkade
On Tue, Nov 19, 2002 at 03:45:32PM -0800, Nathan Kinkade wrote:
 On Tue, Nov 19, 2002 at 03:20:32PM -0800, Kris Kennaway wrote:
  On Tue, Nov 19, 2002 at 02:55:35PM -0800, Nathan Kinkade wrote:
   On Tue, Nov 19, 2002 at 04:32:34PM -0600, Earl Larsen wrote:
When I installed the X-window. The Desktop did not stay within the screan of
the moniter. How can I fit the hole desktop within the screan?
 if the controls on your monitor won't take care of the problem then
 `man xvidtune`.
  
  Or is the poster referring to the virtual desktop feature that
  allows a desktop bigger than the physical screen dimensions?  This is
  controlled from the XF86Config file.
  
  Kris
 
 Good point.  You are probably right.  In that case, take a look at the
 'Virtual' directive in your XF86Config file (probably
 /etc/X11/XF86Config).  It is located in the Screen subsection of the
 config file.  Basically, X will, by default, give you a virtual
 desktop with as large a resolution as your monitor will support, unless
 you specifically tell it to hold itself to a given resolution with the
 'Virtual' directive.
 
 Nathan

Sorry, let me clarify that.  X will give you a virtual desktop as large
as the largest Mode that you have defined in Screen subsection.
However, most X config utils will create a mode for the highest
resolution/color depth possible for your hardware, even if you don't 
choose that as the default setting.

Nathan

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: console, ssh and so on ...

2002-11-19 Thread Lowell Gilbert
Glenn Becker [EMAIL PROTECTED] writes:

 Anyhoo, the problem is: when I am in console and ssh into my mail box,
 the display (in Pine, which is what my ISP has ... I'd use Mutt
 otherwise) is a bit funky. Not sure what words to use to describe it,
 but messages overlap so that when it -appears- I am on one message, I
 am really on the next, and so on. I can sort things out by first
 down-arrowing over everything, but that's kind of a pain ... and it
 still leaves a few 'ghost' lines at the top of the screen.
 
 It would seem that the # of lines on the screen is off, or the terminal
 type is wrong, or something along those lines. I've flailed around with
 switching term types, but that doesn't seem to do anything.

No, it wouldn't -- if the server doesn't support your terminal type,
then it doesn't support your terminal type.  The easiest way around
the problem would probably be to actually run a different terminal
type.  I think this can most conveniently be done with screen, but
installing the vt100 console should help also.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Basic mail and Sendmail problem

2002-11-19 Thread Mark
- Original Message -
From: James Earl [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 19, 2002 10:29 PM
Subject: Re: Basic mail and Sendmail problem


   When I know try to send a mail to 'userone' with 'mail -v
   userone' I get the following error (same error in
   /var/spool/clientmqueue): userone... Connecting to
   localhost.mydomain. via relay... userone... Deferred:
   Connection refused by localhost.mydomain.
 
  One more thing to add: This works fine, when I am connected
  to my ISP. So this might be a problem with DNS configuration?

 I just had a similar problem with a couple of my machines.

 Try changing the 'search' line in resolv.conf to a local domain name.

 For instance, my /etc/resolv.conf file is like this:

 search localdomain.net
 nameserver ?.?.?.? (real dns servers)
 nameserver ?.?.?.?

 And my /etc/hosts file:

 127.0.0.1 localhost localhost.localdomain.net
 192.168.19.1 gateway gateway.localdomain.net
 ...

 sendmail_enable=NO in /etc/rc.conf

Why disable sendmail?

 My big problem was my isp's DHCP server was assigning me a
 domain-name which would change my resolv.conf file. To solve that
 I had to add a supersede line in dhclient.conf.

Yeah. Had a similar problem on a local box. I also added a prepend
domain-name and prepend domain-name-servers line to dhclient.conf; like
so:

prepend domain-name ns-cache-0.ns.nl.demon.net ;
prepend domain-name-servers 194.159.73.135;
supersede domain-name ns-cache-0.ns.nl.demon.net 

The trailing spaces ARE intentional. That worked like a charm. Substitute
your own ISP, of course.

- Mark


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



FreeBSD gateway

2002-11-19 Thread Constantine
Hello!
I have installed FreeBSD 4.7 recently, and it seems it does not want to 
work as a gateway. I have two network cards in my FreeBSD computer, fxp0 
for LAN and sis0 for the cable modem. I am new to FreeBSD, so I am 
confused what the difference between gateways and routers is (I was 
thinking they link to the same thing). I can ping my FreeBSD box from 
winxp, I can ping internet from remote session to FreeBSD, but I cannot 
ping internet from my winxp.
My winxp has ip 192.168.0.1, netmask 255.255.255.0, and gateway 
192.168.0.18 settings. Now FreeBSD /etc/rc.conf follows:

gateway_enable=YES
kern_securelevel_enable=NO
nfs_reserved_port_only=YES
ifconfig_sis0=DHCP
ifconfig_fxp0=inet 192.168.0.18  netmask 255.255.255.0
#router_enable=YES
# from handbook
gateway_enable=YES
firewall_enable=YES
firewall_type=OPEN
natd_enable=YES
natd_interface=sis0
natd_flags=
#/ handbook

The last two lines from dmesg:
IP packet filtering initialized, divert disabled, rule-based forwarding 
enabled, default to deny, logging disabled
ip_fw_ctl: invalid command

%netstat -rn
Routing tables

Internet:
DestinationGatewayFlagsRefs  Use  Netif Expire
default68.105.xxx.x   UGSc20   sis0
68.105.xxx/24  link#1 UC  10   sis0
68.105.xxx.x   00:03:xx:xx:xx:xx  UHLW30   sis0   1197
68.105.xxx.xxx 127.0.0.1  UGHS00lo0
127.0.0.1  127.0.0.1  UH  10lo0
192.168.0  link#2 UC  10   fxp0
192.168.0.100:04:xx:xx:xx:xx  UHLW328742   fxp0   1005

Thank you!

--
Constantine


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


RE: FreeBSD gateway

2002-11-19 Thread Derrick Ryalls
 Hello!
 I have installed FreeBSD 4.7 recently, and it seems it does 
 not want to 
 work as a gateway. I have two network cards in my FreeBSD 
 computer, fxp0 
 for LAN and sis0 for the cable modem. I am new to FreeBSD, so I am 
 confused what the difference between gateways and routers is (I was 
 thinking they link to the same thing). I can ping my FreeBSD box from 
 winxp, I can ping internet from remote session to FreeBSD, 
 but I cannot 
 ping internet from my winxp.
 My winxp has ip 192.168.0.1, netmask 255.255.255.0, and gateway 
 192.168.0.18 settings. Now FreeBSD /etc/rc.conf follows:
 
 gateway_enable=YES
 kern_securelevel_enable=NO
 nfs_reserved_port_only=YES
 ifconfig_sis0=DHCP
 ifconfig_fxp0=inet 192.168.0.18  netmask 255.255.255.0 
 #router_enable=YES # from handbook gateway_enable=YES 
 firewall_enable=YES firewall_type=OPEN natd_enable=YES 
 natd_interface=sis0 natd_flags= #/ handbook

Are your ip's reversed?  I think the gateway should have the .1 address
and the xp box should use the .18

Are you using the default kernel?  If so, you will need to add a couple
lines are recompile.

options IPFIREWALL  #firewall
options IPDIVERT#divert sockets

as for the difference between a router and a gateway, a gateway is a
machine to deal with going from one network (lan) to another network
(wan), I think.
 
 The last two lines from dmesg:
 IP packet filtering initialized, divert disabled, rule-based 
 forwarding 
 enabled, default to deny, logging disabled
 ip_fw_ctl: invalid command
 
 %netstat -rn
 Routing tables
 
 Internet:
 DestinationGatewayFlagsRefs  Use  
 Netif Expire
 default68.105.xxx.x   UGSc20   sis0
 68.105.xxx/24  link#1 UC  10   sis0
 68.105.xxx.x   00:03:xx:xx:xx:xx  UHLW30  
  sis0   1197
 68.105.xxx.xxx 127.0.0.1  UGHS00lo0
 127.0.0.1  127.0.0.1  UH  10lo0
 192.168.0  link#2 UC  10   fxp0
 192.168.0.100:04:xx:xx:xx:xx  UHLW328742  
  fxp0   1005
 
 Thank you!
 
 --
 Constantine
 
 
 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message
 



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Dialing up via PPP

2002-11-19 Thread Steven Lake
HI all.  Looking for a good tutorial for dialing up to the
internet using Freebsd from the console.  I've looked around and found
links for using Fbsd as a router and a firewall and whatnot.  All I want
to do is just login to my ISP, fire up lynx and surf.  :)

Anyone got a very simple tutorial somewhere that I can use as I've
never worked with this before.  Many thanks.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Dialing up via PPP

2002-11-19 Thread Nathan Kinkade
On Tue, Nov 19, 2002 at 08:57:18PM -0600, Steven Lake wrote:
   HI all.  Looking for a good tutorial for dialing up to the
 internet using Freebsd from the console.  I've looked around and found
 links for using Fbsd as a router and a firewall and whatnot.  All I want
 to do is just login to my ISP, fire up lynx and surf.  :)
 
   Anyone got a very simple tutorial somewhere that I can use as I've
 never worked with this before.  Many thanks.

First, read:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ppp-and-slip.html

Then take a look at /usr/share/examples/ppp/ppp.conf.sample.

Truly, a basic configuration is quite simple and should work most of the
time.  Below is a sample /etc/ppp/ppp.conf file with all the comments
removed for brevity...something similar should suffice:

default:
 set log Phase Chat LCP IPCP CCP tun command
 ident user-ppp VERSION (built COMPILATIONDATE)
 set device /dev/cuaa0  # assuming your modem is serial 1 (COM1).
 set speed 115200
 set dial ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \
   \\ AT OK-AT-OK ATE1Q0 OK \\dATDT\\T TIMEOUT 40 CONNECT
 set timeout 900   # 15 minute idle timer (the default)

my_isp:
 set phone tele number
 set authname your username
 set authkey your password
 set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0
 add default HISADDR # Add a (sticky) default route


When setup, run `ppp -background my_isp` and see what happens.

Nathan

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Dialing up via PPP

2002-11-19 Thread Dave Cantrell
On Tue November 19 2002 20:57, Steven Lake wrote:
 HI all.  Looking for a good tutorial for dialing up to the
 internet using Freebsd from the console.  I've looked around and found
 links for using Fbsd as a router and a firewall and whatnot.  All I want
 to do is just login to my ISP, fire up lynx and surf.  :)
 
   Anyone got a very simple tutorial somewhere that I can use as I've
 never worked with this before.  Many thanks.
 

Try this: 
http://www.onlamp.com/lpt/a/254

or:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ppp-and-slip.html

drc
-- 
Dave Cantrell   | Contrary to popular belief, UNIX is User Friendly.
[EMAIL PROTECTED] | It's just choosy with whom it makes friends.  
Lincoln, Nebraska, USA  | And currently we have only a nodding acquaintance.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: FreeBSD gateway

2002-11-19 Thread Marc Perisa
Derrick Ryalls wrote:

Hello!
I have installed FreeBSD 4.7 recently, and it seems it does 
not want to 
work as a gateway. I have two network cards in my FreeBSD 
computer, fxp0 
for LAN and sis0 for the cable modem. I am new to FreeBSD, so I am 
confused what the difference between gateways and routers is (I was 
thinking they link to the same thing). I can ping my FreeBSD box from 
winxp, I can ping internet from remote session to FreeBSD, 
but I cannot 
ping internet from my winxp.
My winxp has ip 192.168.0.1, netmask 255.255.255.0, and gateway 
192.168.0.18 settings. Now FreeBSD /etc/rc.conf follows:

gateway_enable=YES
kern_securelevel_enable=NO
nfs_reserved_port_only=YES
ifconfig_sis0=DHCP
ifconfig_fxp0=inet 192.168.0.18  netmask 255.255.255.0 
#router_enable=YES # from handbook gateway_enable=YES 
firewall_enable=YES 
firewall_type=OPEN 
natd_enable=YES 
natd_interface=sis0 
natd_flags= #/ handbook



Are your ip's reversed?  I think the gateway should have the .1 address
and the xp box should use the .18


Nope. He set his FreeBSD box to the IP 192.168.0.18 and his Windows XP 
box to 192.168.0.1 . All is ok with that. It is only uncommon to do. 
Normally you would give the defaultgateway for a network x.y.z.1 or 
x.y.z.254 . But it is not forbidden to set it to any IP in that subnet.


Are you using the default kernel?  If so, you will need to add a couple
lines are recompile.

options IPFIREWALL  #firewall
options IPDIVERT#divert sockets

as for the difference between a router and a gateway, a gateway is a
machine to deal with going from one network (lan) to another network
(wan), I think.



From your point of view (as needed for this problem) routers and 
gateways are the same. In this case the FreeBSD box is acting as a 
router for your internal net to the Internet. A simple router would do 
the same. But for more complex routing you have to either setup gated 
(or similar software) or add all rules (if they are static) by hand.
A gateway is the simplest form of a router.

The last two lines from dmesg:
IP packet filtering initialized, divert disabled, rule-based 
forwarding 
enabled, default to deny, logging disabled
ip_fw_ctl: invalid command

That hints to a problem with the /etc/rc.firewall script (which is 
called when you add to /etc/rc.conf firewall_enable=YES).

Please provide us with the output of ipfw list. (You have to do that 
as root of course). I think your firewall ruleset is not tuned for a 
gateway situation.

Hope that helps

Marc



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


Re: 4.7-S: syslog from TiVo

2002-11-19 Thread Chris Pepper
Jerry,

	Thanks, but that doesn't seem to be the problem. I think it's 
getting through IPFW fine, and I removed the -s from syslogd's 
options, but I still can't find any info on (configuring) remote 
logging, aside from -a which I'm already using.


		Chris Pepper

At 12:16 AM -0500 2002/11/19, Jerry Bell wrote:
I really don't know if it would work or not, but you could put an ipfw
divert rule and natd to redirect the syslog packets to localhost:514 or
similar.

Also, you'll need to remove the '-s' flag from syslogd.

Jerry
- Original Message -
From: Chris Pepper [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 18, 2002 11:54 PM
Subject: 4.7-S: syslog from TiVo



 I've just networked my TiVo, and noticed that it tries to
 connect to 255.255.255.255:514/udp on restart. So naturally I'd like
 to capture this in syslog, to see what it has to tell me. I opened up
 the port in ipfw, and see a packet coming through, but after much
 head-banging on syslog.conf.5, and trial and error, I still can't get
 anything to showi up in the log file I created for this host, or
 messages or console.log. What am I missing??


 Thanks much,


 Chris Pepper

 [www:~] root# uname -a
 FreeBSD www.reppep.com 4.7-STABLE FreeBSD 4.7-STABLE #2: Mon Nov 18
 21:56:46 EST 2002
 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/REPPEP  i386

 [www:~] root# ipfw -aN l|grep syslog
 01400  1122 allow udp from 66.92.104.200/30 to any
 dst-port syslog
 [www:~] root# ps -aux|grep syslog
 root 5850  0.0  0.2  1028  720  ??  Ss   11:28PM   0:00.04
 /usr/sbin/syslogd -4 -a 66.92.104.200/30

 [www:~] root# tail -2 /etc/syslog.conf
 +airport.reppep.com
 *.* /var/log/airport.log
 [www:~] root# ls -l /var/log/airport.log

  -rw-r--r--  1 root  wheel  0 Nov 18 21:09 /var/log/airport.log


--
Chris Pepper:   http://www.reppep.com/~pepper/
Rockefeller University: http://www.rockefeller.edu/

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



VESA...getting 24bit depth on X

2002-11-19 Thread kevin buch
hello.
I have a Dell Inspiron 3800 laptop.  I can get X to
work but only at 8bit depth.  I want to get it to 16
or 24, and I was told that enabling VESA in the kernel
would work.

I enabled VESA in the kernel:
options VESA

and recompiled it.  But when I restarted I still had
to same problem.  I also added:

allscreens_flags=-g 80x30 VESA_1024x768
in /etc/rc.conf

I really don't know what else to do.  I recently had
RedHat on it and it worked fine...and X works fine
except for the resolution.

All help is appreciated.
Kevin

__
Do you Yahoo!?
Yahoo! Web Hosting - Let the expert host your site
http://webhosting.yahoo.com

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



freebsd.org

2002-11-19 Thread Chris Rogert
I just saw your link to alldomains.com on your webpage
http://www.freebsd.org/gallery/cgallery.html .  Our site,
Cheap-DomainRegistration.com, sells domain names for much cheaper (only
$8.75 with no hidden fees).  We would like to place your site in our
directory of Domain Names and Internet Resources if you are interested in
exchanging links.  The form to add your site and the HTML for our link can
be found at http://www.cheap-domainregistration.com/cgi-bin/links/add.cgi . 

I look forward to approving your site for our directory.  Please email me
if you have any questions.

Regards,
Chris Rogert
Cheap Domain Registration

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: VESA...getting 24bit depth on X

2002-11-19 Thread Kjell
 I have a Dell Inspiron 3800 laptop.  I can get X to
 work but only at 8bit depth.  I want to get it to 16
 or 24, and I was told that enabling VESA in the kernel
 would work.
 
 I enabled VESA in the kernel:
 options VESA

I have put the following in the kernel conf file:
options VESA
options VGA_WIDTH90
options SC_PIXEL_MODE

 and recompiled it.  But when I restarted I still had
 to same problem.  I also added:
 
 allscreens_flags=-g 80x30 VESA_1024x768
 in /etc/rc.conf

When i issue the following
vidcontrol -g 100x37 VESA_800x600
from the command line, my screen comes up as expected

 I really don't know what else to do.  I recently had
 RedHat on it and it worked fine...and X works fine
 except for the resolution.
 
 All help is appreciated.
 Kevin
 
gl from Kjell




To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



icz.com.pl

2002-11-19 Thread Chris Rogert
I just saw your link to alldomains.com on your webpage
http://freebsd.icz.com.pl/cgallery.html .  Our site,
Cheap-DomainRegistration.com, sells domain names for much cheaper (only
$8.75 with no hidden fees).  We would like to place your site in our
directory of Domain Names and Internet Resources if you are interested in
exchanging links.  The form to add your site and the HTML for our link can
be found at http://www.cheap-domainregistration.com/cgi-bin/links/add.cgi . 

I look forward to approving your site for our directory.  Please email me
if you have any questions.

Regards,
Chris Rogert
Cheap Domain Registration

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message