date:20030117

On Fri, 17 Jan 2003, Rick Fournier wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On January 17, 2003 03:28 am, P. U. Kruppa wrote:
  Hello,
 
  is there any easy way to access ftp filesystems, i.e.
  - by one mouseclick or
  - by mounting it somewhere
  - without always having to reenter usernames und passwords
  - like in Windows (sorry!)

 well, if you use kde or gnome or any wm that supports icons, you could make
 a link icon on your desktop that includes the full path for the ftp with the
 login and pass, ie: ftp://user:[EMAIL PROTECTED]
Yes, I have thought about that: nautilus can open my ftp site
that way, but I can't find any documentation how to set up a link
to this, are there any commands like
# exec nautilus ftp://mysite.org
???

Uli.


 there is no way you could mount from a ftp:// url, but using NFS
 you could mount the local ftp dir on that server onto another pc.

 
  Thanks for your answers,
 
  Uli.
 
  *---*
  *Peter Ulrich Kruppa*
  *  -  Wuppertal -   *
  *  Germany  *
  *---*
 
  To Unsubscribe: send mail to [EMAIL PROTECTED]
  with unsubscribe freebsd-questions in the body of the message

 - --
 Rick Fournier ([EMAIL PROTECTED])
 PGP KeyID 31846E22 (B1E3 AE2E C867 F491  BF9F 9485 7818 122D 3184 6E22)
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.1 (FreeBSD)

 iD8DBQE+J7n8eBgSLTGEbiIRAlquAKDTSk51FXvOXuX7po00JynKCw6cngCfSZSz
 4OeJEIYEFoRr8SltO6dbyrU=
 =+NKN
 -END PGP SIGNATURE-


 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message



*---*
*Peter Ulrich Kruppa*
*  -  Wuppertal -   *
*  Germany  *
*---*

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Manually reinstall various lib's?

2003-01-17 Thread Matthew Seaman

On Fri, Jan 17, 2003 at 03:23:54AM -0500, Peter Leftwich wrote:
 
 [PLEASE CC: ME IN YOUR REPLY - THANK YOU]
 
 I just upgraded from 4.6.2 to 4.7 after accidentally, yes, as root, wiping
 out my /usr/local/bin/ folder with an rm -rf (I thought I was in
 /somemounteddrive/usr/local/bin/ and was removing unneeded stuff)!
 
 I also removed /usr/local/lib/ by accident and now startx and lots of
 different pkg_add -rf package commands are giving me errors about
 expecting different libraries.  Is there a way to manually install these?
 
 Please help, you're my only hope! =)  Yours, faithfully as root right now,

I assume from the desperate nature of this plea that you don't have
good backups of all the stuff you accidentally deleted.

Hmmm...  Do you have portupgrade installed?  Does it still work?

If not, try re-installing it from packages from one of the ftp sites.
You'll also need the packages it depends on:

% pkg_info -r portupgrade\*
Information for portupgrade-20021216:

Depends on:
Dependency: ruby-1.6.8
Dependency: ruby-shim-ruby18-1.8.0.p1
Dependency: ruby-bdb1-0.1.8

Then make sure your ports tree is up to date, and you've rebuilt the
indexes and fixed up the package dependencies:

# portsdb -Uu
# pkgdb -Fv

and then use portupgrade to force a reinstall of all previously
installed packages:

# portinstall -rRiaf

This should work through all installed packages in dependency order,
prompting you each time if you want to de-install and then re-install
the package.  If you'ld prefer to install pre-compiled packages rather
than compile from ports, add 'P' to that list of flags.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

FreeBSD + Fluxbox + Icons

2003-01-17 Thread bryan cassidy

Here is the output from uname -mrs 

FreeBSD 4.7-STABLE-20030105-JPSNAP i386

I am running fluxbox 0.1.14 and was wondering how to
get icons on the desktop. I'm pretty sure this has
been brought up MANY times. I installed the rox-filer
from the ports with make install  make clean. I can
run the file manager with 'rox' but don't know what
the hell to do with it after that. Hope someone could
help out here.

__
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Make World

2003-01-17 Thread DoubleF

Recently, Doron Shmaryahu wrote:

 This time there were no errors but when the
 machine rebooted it just says btx halted and a whole lot of other stuff. It
 sits there and does not boot.

If it's not the kernel, then let me give it a try. I can think
of one (1) way of BTX being loaded but panicking. If BTX is
not entirely in the area accessible by BIOS (~8G on my old one),
and the BIOS lies to the boot0 loader that it has loaded it (while
it hasn't) then BTX will be half-loaded and will panic as soon as
it reaches the not loaded code.

It is `perfectly' possible to have a kernel be loadable but not BTX
(i have such a monster). I have obsereved the same situation when
trying to get BTX loaded using packet interface to the disk.
You could try using boot0cfg(8) with -o nopacket.

Mind,
  Use of the `packet' option may cause `boot0' to fail,
  depending on the nature of BIOS support.
(boot0cfg(8))

By the way, your old 4.5 system could be `immune' to this as f.e. my
4.4-R doesn't absolutely require BTX to run properly. And yes,
when you interrupt your boot, BTX is skipped.

Could it be just a broken BTX binary?

Good luck,
DoubleF

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: RSA SecurID

2003-01-17 Thread Dax Eckenberg

 Yes.  Starting with just login authentication, then eventually, if I can
 figure out how, for web page authentication.  I saw that RSA has an
 addon for Apache, but you have to buy their $5000 server to support it.
 But logins are the first priority.
 
 Thanks,
 --Brian
 
 
 are you looking to use the fob's (lcd number generator) for login
 authentication?
 
 
  Hi all.  I've searched in the archives and found nothing on this newer
 
  then 2001...so any help would be appreciated.  I'm looking to find a 
  way to support RSA's SecurIDs on FreeBSD.  There was something 
  mentioned back in March of 2001 on the topic, but that's all I could 
  find.  Could someone please tell me if this is possible, and if it is,
 
  where to look for more info?
  
  Thanks,
  --Brian McCann
  

Do a google search for pam_securid.  It's a pam module which allows you to use the 
secureid fob for login.


-- dax

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Make World

2003-01-17 Thread Doron Shmaryahu

Hi,

thanks for the advice - do you think I could just install the btx loader by
itself ? Also why would top and ps not work ??

thanks again for all the help

Doron
- Original Message -
From: DoubleF [EMAIL PROTECTED]
To: FreeBSD-questions [EMAIL PROTECTED]
Sent: Friday, January 17, 2003 11:18 AM
Subject: Re: Make World


 Recently, Doron Shmaryahu wrote:

  This time there were no errors but when the
  machine rebooted it just says btx halted and a whole lot of other stuff.
It
  sits there and does not boot.

 If it's not the kernel, then let me give it a try. I can think
 of one (1) way of BTX being loaded but panicking. If BTX is
 not entirely in the area accessible by BIOS (~8G on my old one),
 and the BIOS lies to the boot0 loader that it has loaded it (while
 it hasn't) then BTX will be half-loaded and will panic as soon as
 it reaches the not loaded code.

 It is `perfectly' possible to have a kernel be loadable but not BTX
 (i have such a monster). I have obsereved the same situation when
 trying to get BTX loaded using packet interface to the disk.
 You could try using boot0cfg(8) with -o nopacket.

 Mind,
  Use of the `packet' option may cause `boot0' to fail,
  depending on the nature of BIOS support.
 (boot0cfg(8))

 By the way, your old 4.5 system could be `immune' to this as f.e. my
 4.4-R doesn't absolutely require BTX to run properly. And yes,
 when you interrupt your boot, BTX is skipped.

 Could it be just a broken BTX binary?

 Good luck,
 DoubleF

 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message





To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

5.0-RC3, /etc/pccard_ether incompatible change.

2003-01-17 Thread Alexander Pohoyda

Hello,

A snippet from my /etc/rc.conf:
pccard_enable=YES
ifconfig_wi0=inet 10.0.0.2
ifconfig_ed1=dhcp

On 4.5-RC3 it works as I expected, each interface will get it's own
value for ifconfig command.

On 5.0-RC3, however, this does not happen.
/etc/pccard_ether has been changed this way:

 case ${pccard_ifconfig} in
 [Nn][Oo] | '')
+ expr  : .*${interface}  /dev/null || exit 0
  ;;

Default value of ${pccard_ifconfig} is NO, so the script exits too
early now.

Am I abusing the featute? What is a correct way to deal with this
effect? For a time being I have commented out that line and it works
OK for me.

TIA

-- 
Alexander Pohoyda
[EMAIL PROTECTED]


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Make World

2003-01-17 Thread DoubleF

Recently, Doron Shmaryahu wrote:

 thanks for the advice - do you think I could just install the btx loader by
 itself ? Also why would top and ps not work ??

Personally I don't have top running in your situation (BTW, how
exactly does it fail for you?). As for ps... I guess things are a
bit different between 4.4 and 4.7. The absence of BTX is bad anyway...
The process of installing boot tools like BTX is in make world,
isn't it? It has been done for you, then.

Someone around here (possibly Jason Morgan) has some problems with
pstop which he believes not to be update-related. Check his postings.

Still - could BTX not be in the 8G area? If it is outside, it would be
nontrivial to make it come back... and reinstalling BTX would not help
you either.

Hacking boot1 source to load the kernel instead of BTX directly and
making world could solve the `typing' problem, but not pstop problem.
But running without BTX is not good (personally I don't care, though;).

Good luck,
DoubleF

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

freebsd4.7pim

2003-01-17 Thread Lo Galbo Emanuele

Hi, I would like to know if freebsd4.7 supports pim and mld by default or i have to 
download them for kame. Thanks



CONFIDENTIALITY NOTICE
This message and its attachments are addressed solely to the persons
above and may contain confidential information. If you have received
the message in error, be informed that any use of the content hereof
is prohibited. Please return it immediately to the sender and delete
the message. Should you have any questions, please contact us by
replying to [EMAIL PROTECTED] Thank you


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Make World

2003-01-17 Thread DoubleF

Recently, I (DoubleF) wrote:

Hacking boot1 source to load the kernel instead of BTX directly and

Sorry. I was on drugs;). boot2 not boot1. Here's the code:
/usr/src/sys/boot/i386/boot2/boot2.c--
#define RBX_MASK0x
#define PATH_CONFIG /boot.config
#define PATH_BOOT3  /boot/loader
#define PATH_KERNEL /kernel
--
A quick hack would be to substitute /boot/loader with /kernel
or whatever you wish. I haven't tested it by myself, though.
Slippery when wet.

DoubleF

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Can I use GRE on a gif device?

2003-01-17 Thread bsd

Hi all. 

I have successfully configured a tunnel from a BSD box to a Cisco router 
using the gif device to implement the BSD end of the tunnel. 

The Cisco Technician doing the far end of the config said that the protocol 
of choice for the job is GRE (protocol 47 according to /etc/protocols).  
However, I found that gif is using IPENCAP (protocol 4 according to 
/etc/protocols).  Said technician told me that GRE encrypts the tunneled 
data, while IPENCAP does not. 

So I guess there are really 2 questions:
1) Would it be wiser for me to run a tunnel on GRE than on IPENCAP?
2) Is there a way to tell gif to use GRE as the encapsulation protocol? 

I find no reference to GRE in the gif man page. 

Regards,
Patrick O'Reilly.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

how to restore /usr

2003-01-17 Thread Len Conrad

Trying to free up disk space, a user accidentally rm'd /usr instead of 
/usr/ports.

Starting with the cdrom, what is the best way to get the /usr tree back 
onto the disk?

thanks
Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Problem of installing grub 0.92

2003-01-17 Thread edifice

Dear All,

I am trying install grub 0.92 on my freebsd 4.7. I meet error when trying
to build it. The error message is following. Is there anything I have omitted?

# make
cd .   CONFIG_FILES= CONFIG_HEADERS=config.h  /usr/local/bin/bash ./config.sttus
config.status: creating config.h
config.status: config.h is unchanged
config.status: executing default-1 commands
make  all-recursive
Making all in netboot
Making all in stage2
make: don't know how to make pre_stage2. Stop
*** Error code 1

Stop in /tmp/grub-0.92.
*** Error code 1

Stop in /tmp/grub-0.92.

Best Regards,

Edifice
-- 
edifice [EMAIL PROTECTED]



attach:the message when configure
-

# sh ./configure
checking for a BSD-copatible install... /usr/bin/install -c
checking whether build environent is sane... yes
checking for gawk... no
checking for awk... no
checking for nawk... nawk
checking whether ake sets ${MAKE}... yes
checking build syste type... i386-unknown-freebsd4.7
checking host syste type... i386-unknown-freebsd4.7
checking whether to enable aintainer-specific portions of akefiles... no
checking for gcc... gcc
checking for gcc... (cached) gcc
checking for C copiler default output... a.out
checking whether the C copiler works... yes
checking whether we are cross copiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C copiler... yes
checking whether gcc accepts -g... yes
checking for style of include used by ake... GNU
checking dependency style of gcc... gcc
checking dependency style of gcc... (cached) gcc
checking for ranlib... ranlib
checking dependency style of gcc... (cached) gcc
checking for ranlib... ranlib
checking whether optiization for size works... yes
checking whether -Wundef works... yes
checking for objcopy... objcopy
checking if C sybols get an underscore after copilation... no
checking whether objcopy works for absolute addresses... yes
checking whether addr32 ust be in the sae line as the instruction... yes
checking for .code16 addr32 assebler support... yes
checking whether an absolute indirect call/jup ust not be prefixed with an aserisk... 
no
checking if start is defined by the copiler... no
checking if _start is defined by the copiler... yes
checking if __bss_start is defined by the copiler... yes
checking if _edata is defined by the copiler... yes
checking if edata is defined by the copiler... yes
checking if end is defined by the copiler... yes
checking if _end is defined by the copiler... yes
checking for opendisk in -lutil... no
checking for wgetch in -lncurses... yes
checking how to run the C preprocessor... gcc -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for eory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... no
checking for unistd.h... yes
checking for string.h... (cached) yes
checking for strings.h... (cached) yes
checking ncurses/curses.h usability... no
checking ncurses/curses.h presence... no
checking for ncurses/curses.h... no
checking ncurses.h usability... yes
checking ncurses.h presence... yes
checking for ncurses.h... yes
checking curses.h usability... yes
checking curses.h presence... yes
checking for curses.h... yes
configure: creating ./config.status
config.status: creating akefile
config.status: creating stage1/akefile
config.status: creating stage2/akefile
checking ncurses.h presence... yes
checking for ncurses.h... yes
checking curses.h usability... yes
checking curses.h presence... yes
checking for curses.h... yes
configure: creating ./config.status
config.status: creating akefile
config.status: creating stage1/akefile
config.status: creating stage2/akefile
config.status: creating docs/akefile
config.status: creating lib/akefile
config.status: creating util/akefile
config.status: creating grub/akefile
config.status: creating netboot/akefile
config.status: creating util/grub-iage
config.status: creating util/grub-install
config.status: creating util/grub-d5-crypt
config.status: creating config.h
config.status: config.h is unchanged
config.status: executing default-1 coands




To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

different ipfw/natd prob

i have a slightly different ipfw/natd problem.  

machines on the lan can ping internal nic on the server (fbsd 4.7), and
the external nic, but can not ping or reach anything outside. unless i
telnet into the server, then telnet out. currently running ipfw
open until problem is solved. server can ping all machines on lan.

 stephen


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: how to restore /usr

On Fri, 17 Jan 2003, Len Conrad wrote:

 Trying to free up disk space, a user accidentally rm'd /usr instead of
 /usr/ports.

 Starting with the cdrom, what is the best way to get the /usr tree back
 onto the disk?
If your system still can boot, you can do
# /stand/sysinstall
-- configure -- Distributions
and select the things you need.
In case you remember config-files you have edited, try to save
them from beeing overwritten by changing their names with mv .
You can rename them afterwards.

For the future:
There are quite simple tools to backup and restore the contents
of your partitions: dump and restore.

Hope that helps,

Uli.

 thanks
 Len


 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message


*---*
*Peter Ulrich Kruppa*
*  -  Wuppertal -   *
*  Germany  *
*---*

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: how to restore /usr

2003-01-17 Thread Axel Gruner

On Fri, 17 Jan 2003 05:23:13 -0600
Len Conrad [EMAIL PROTECTED] wrote:

 Trying to free up disk space, a user accidentally rm'd /usr instead of
 /usr/ports.
 
 Starting with the cdrom, what is the best way to get the /usr tree
 back onto the disk?

You did a backup, right?

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: how to restore /usr

2003-01-17 Thread Len Conrad

/stand/sysinstall works

so what if we did

install additional dist sets  + just binary base distribution?

Len


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Make World

2003-01-17 Thread Ian Watkinson

On Thu, 2003-01-16 at 23:28, Doron Shmaryahu wrote:
 Hi,
 
 I did a make world upgrade from 4.5 to 4.7 stable. I have done this a couple
 of times with no problems. This time there were no errors but when the
 machine rebooted it just says btx halted and a whole lot of other stuff. It
 sits there and does not boot. If I interrupt the boot process and load the
 kernel.GENERIC manually it boots fine. the only command's that seem to give
 errors are ps and top. The machine runs fine but I would obviously like to
 get rid of this problem.
 
 I have tried reinstalling the kernel, also the generic kernel. I tried doing
 a make world again still the same thing !! Any suggestions would help
 

You've done.

cvsup your-ports-cvsup-file
cvsup your=stable-cvsup-file

init 1

cd /usr/src
make buildworld.
make buildkernel KERNCONF=GENRIC
make installkernel KERNCONF=GENRIC
make installworld


and it still doesn't work.

I'd not do mergemaster, as it tends to be more of a hindrance than help,
although it does mean you need to read the release notes to see if the
format of anything has changed, which is no bad thing anyway.


-- 

Ian Watkinson


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: how to restore /usr

On Fri, 17 Jan 2003, Len Conrad wrote:

 /stand/sysinstall works

 so what if we did

 install additional dist sets  + just binary base distribution?
Yes, and the manuals are quite useful.

Good Luck!

Uli.

 Len


 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message


*---*
*Peter Ulrich Kruppa*
*  -  Wuppertal -   *
*  Germany  *
*---*

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

About ipfilter

2003-01-17 Thread budsz

Hi folks,

I need ipfilter which supported by IPv6, I was try in FreeBSD 4.7 STABLE
it's OK, but if I compiled on FreeBSD 5.0 DP1 always failure, because
ipfilter in FreeBSD 5.0 DP1 is too old so not support IPv6. any sugestion
for this?, I finished searching in web resource but I can't found
anything.

TIA

-- 
budsz

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: different ipfw/natd prob

Stephen D. Kingrea wrote:

i have a slightly different ipfw/natd problem.  

machines on the lan can ping internal nic on the server (fbsd 4.7), and
the external nic, but can not ping or reach anything outside. unless i
telnet into the server, then telnet out. currently running ipfw
open until problem is solved. server can ping all machines on lan.

On a wild guess, it sounds like your divert rule is wrong.
Need more information to help with this.

Please repost to the list and include the following:
The output of 'ipfw show'
The output of 'ifconfig'
The contents of your rc.conf file

--
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

pppstats

2003-01-17 Thread Quinn Ellis

When i try to run pppstats to see how long I've been on for, i get this 
message.

pppstats nonexistent interface 'ppp0' specified

I can't find any documentation about it either.  Any thoughts?

Regards,
Quinn

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Epson LQ 550

2003-01-17 Thread Shantanu Mahajan

+++ Blanka Neuhauserova [freebsd] [15-01-03 23:03 +0100]:
| Has anyone managed to print anything but plain text on Epson LQ 550?
| All I could find is the IBM Omni driver, and that seems to be Linux-only.
| 
| I've replaced my mother's w98 installation with FreeBSD-4.7/KDE-3.0.3
| and this is one of three last things she keeps bitching about.
| 
| TIA  HAND,
| 
| Roman Neuhauser
| 
| --
/usr/ports/print/apsfilter?

Regards,
Shantanu

-- 
Everyone is a genius.  It's just that
some people are too stupid to realize it. 




msg15802/pgp0.pgp
Description: PGP signature

Re: different ipfw/natd prob

oh, this looks bad before i do that, i should mention that in the
meantime, i tried to add a divert rule and got 

ip_fw_ctl: invalid command

on boot, i get 

IP packet filtering initialized, divert disabled, rule-based forwarding
enabled, default to deny, logging disabled

is this a clue that i need to rebuild kernel?

stephen d. kingrea

On Fri, 17 Jan 2003, Bill Moran wrote:

Stephen D. Kingrea wrote:
 i have a slightly different ipfw/natd problem.  
 
 machines on the lan can ping internal nic on the server (fbsd 4.7), and
 the external nic, but can not ping or reach anything outside. unless i
 telnet into the server, then telnet out. currently running ipfw
 open until problem is solved. server can ping all machines on lan.

On a wild guess, it sounds like your divert rule is wrong.
Need more information to help with this.

Please repost to the list and include the following:
The output of 'ipfw show'
The output of 'ifconfig'
The contents of your rc.conf file

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: different ipfw/natd prob

following is rc.conf, /etc/natd.conf, ifconfig, ipfw show

rc.conf

inetd_enable=YES
kern_securelevel_enable=NO
linux_enable=YES
tcp_extensions=YES
named_enable=YES
sendmail_enable=NO
portmap_enable=YES
router_enable=yes
router=/sbin/routed
router_flags=-q
defaultrouter=68.abc.de.1
hostname=www.kingrea.com
network_interfaces=lo0 fxp0 dc0
ifconfig_lo0=inet 127.0.0.1
ifconfig_dc0=inet 68.abc.de.14 netmask 255.255.255.0 media 10baseT/UTP
ifconfig_fxp0=inet 192.168.2.1 netmask 255.255.255.0
firewall_enable=YES
firewall_type=OPEN
gateway_enable=YES
natd_enable=YES
natd_interface=dc0
natd_flags=-f /etc/natd.conf

natd.conf

interface dc0
use_sockets yes
same_ports yes

ifconfig

dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 68.abc.de.14 netmask 0xff00 broadcast 68.abc.de.255
inet6 fe80::204:5aff:fe5a:9987%dc0 prefixlen 64 scopeid 0x1
ether 00:04:5a:5a:99:87
media: Ethernet 10baseT/UTP
status: active
fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 192.168.2.1 netmask 0xff00 broadcast 192.168.2.255
inet6 fe80::2a0:c9ff:fe5c:3738%fxp0 prefixlen 64 scopeid 0x2
ether 00:a0:c9:5c:37:38
media: Ethernet autoselect (100baseTX)
status: active
lp0: flags=8810POINTOPOINT,SIMPLEX,MULTICAST mtu 1500
faith0: flags=8002BROADCAST,MULTICAST mtu 1500
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
inet 127.0.0.1 netmask 0xff00
ppp0: flags=8010POINTOPOINT,MULTICAST mtu 1500
sl0: flags=c010POINTOPOINT,LINK2,MULTICAST mtu 552

ipfw show

00100   0   0 allow ip from any to any via lo0
00200   0   0 deny ip from any to 127.0.0.0/8
00300   0   0 deny ip from 127.0.0.0/8 to any
65000   4208345040 all ip from any to any
65535   0   0 deny ip from any to any


thanks for assistance!

stephen d. kingrea

On Fri, 17 Jan 2003, Bill Moran wrote:

Stephen D. Kingrea wrote:
 i have a slightly different ipfw/natd problem.  
 
 machines on the lan can ping internal nic on the server (fbsd 4.7), and
 the external nic, but can not ping or reach anything outside. unless i
 telnet into the server, then telnet out. currently running ipfw
 open until problem is solved. server can ping all machines on lan.

On a wild guess, it sounds like your divert rule is wrong.
Need more information to help with this.

Please repost to the list and include the following:
The output of 'ipfw show'
The output of 'ifconfig'
The contents of your rc.conf file

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: problem with top?

2003-01-17 Thread Jason Morgan

 Not sure how the GIMP port would have caused this... but I've had this same problem 
when mixing newly built kernels with old
 binaries.  Read the Makefile in /usr/src.  Sounds like you need to:
 
 # cd /usr/src
 # make installworld

I thought this may be the case. Everything works fine now. The strange
thing is, I didn't have any problems before I installed GIMP. Strange.
Maybe I did and didn't notice.

Thanks,

Jason

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

connecting to novell netware 5 server

2003-01-17 Thread Didier Wiroth

Hey,
(using FreeBSD 4.7-RELEASE)
1) Does someone have some links or documentation to share about how to 
connect from a freebsd client to novell netware 5 servers!
how to mount netware shares, administrating netware servers from a 
freebsd client, tools etc...

2) Do you need ipx on FreeBSD to connect to novell, will it be possible 
to connect only via tcp/ip in the near future?

Thanks a lot
Didier



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

OT: mount BSD slice from linux

2003-01-17 Thread Brian Henning

Tim,

Thanks for the help. It worked just as this article said it would.


Hi, you also need bsd disklabel support in the kernel.
option is CONFIG_BSD_DISKLABEL
here's a decent article on how to do it:
http://freeunix.dyndns.org:8088/site/howto/BSDfs.shtml

you REALLY don't want to try writing with it.  I hosed a test filesystem
that
way.

then you'll want to put something like:
/dev/hda3 /freebsd ufs ro,ufstype=44bsd,noauto,users,exec 0 0
/dev/hda8 /freebsd/usr ufs ro,ufstype=44bsd,noauto,users,exec 0 0

in your linux fstab file, with appropriate mountpoints for your system.
using fdisk options f,p,m you should be able to see the bsd disklabel pretty
well.  Though it is trial and error to see which FreeBSD partitions line up
to which linux parttion numbers.

Hope that helps.
Tim

by the way could you send this to the list also?  for some reason my isp
won't
deliver mail to the list.

On Thursday 16 January 2003 09:15 pm, Brian Henning wrote:
 Hello,

 I would like to mount my freebsd slices in linux. Has anyone got this
 working before? I am running gentoo 1.4rc. I have turned on UFS in the
 kernel, but i was told that because FreeBSD uses 16KB blocksize that it
 woun't work. Any help with this problem would be greatly appreciated.

 Thanks,

 Brian

 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Possible attack?

2003-01-17 Thread Jim Freeze

Hi:

I got an interesting log report today. 
Has anyone seen such messages lately?

Jan 14 12:59:52 rabbit /kernel: ipfw: limit 100 reached on entry 64000
Jan 14 17:39:13 rabbit ftpd[1502]: ANONYMOUS FTP LOGIN REFUSED FROM
  p5089A961.dip.t-dialin.net
Jan 14 17:39:13 rabbit ftpd[1503]: ANONYMOUS FTP LOGIN REFUSED FROM
  p5089A961.dip.t-dialin.net
Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
  Content-Disposition header due to
 field size (length = 25) (possible attack)
Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM
 pD9E60C0F.dip.t-dialin.net
Jan 15 17:33:04 rabbit ftpd[4435]: ANONYMOUS FTP LOGIN REFUSED FROM
 pD9E60C0F.dip.t-dialin.net
Jan 15 23:59:48 rabbit sm-mta[5210]: h0G4xkJI005209: Truncated MIME
 Content-Disposition header due to
  field size (length = 22) (possible attack)



-- 
Jim Freeze
--
It's not Camelot, but it's not Cleveland, either.
-- Kevin White, mayor of Boston

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Possible attack?

On Fri, 17 Jan 2003, Jim Freeze wrote:

 Hi:

 I got an interesting log report today.
 Has anyone seen such messages lately?

 Jan 14 12:59:52 rabbit /kernel: ipfw: limit 100 reached on entry 64000
 Jan 14 17:39:13 rabbit ftpd[1502]: ANONYMOUS FTP LOGIN REFUSED FROM
   p5089A961.dip.t-dialin.net
 Jan 14 17:39:13 rabbit ftpd[1503]: ANONYMOUS FTP LOGIN REFUSED FROM
   p5089A961.dip.t-dialin.net
 Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
   Content-Disposition header due to
  field size (length = 25) (possible attack)
 Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM
  pD9E60C0F.dip.t-dialin.net
 Jan 15 17:33:04 rabbit ftpd[4435]: ANONYMOUS FTP LOGIN REFUSED FROM
  pD9E60C0F.dip.t-dialin.net
 Jan 15 23:59:48 rabbit sm-mta[5210]: h0G4xkJI005209: Truncated MIME
  Content-Disposition header due to
   field size (length = 22) (possible attack)
Now, I don't know if this is something serious, but I can tell
you the attacker is a client of the german Telekom. Since you
know the exact date and time of these events and Telekom has her
own logs, he can be identified, if something serious happens.

Uli.




 --
 Jim Freeze
 --
 It's not Camelot, but it's not Cleveland, either.
   -- Kevin White, mayor of Boston

 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message


*---*
*Peter Ulrich Kruppa*
*  -  Wuppertal -   *
*  Germany  *
*---*

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

need help in setting up a demilitarized zone

2003-01-17 Thread Redmond Militante

hi all

so i have my gateway/ipfw/natd machine working, protecting a test client box. this 
gateway box is an dell optiplex gx150 pIII 930 mhz with 128 mb of ram, 2 nics - one 
integrated intel pro 1000, the other a really old 3com 3c905b that i pulled out of an 
old junker computer that we were going to throw out.

i would like this gateway box to protect our webserver, our mysql server, and possibly 
another webserver. our webserver is a dual xeon dell poweredge 1650 with 2 gig of ram, 
it gets sometimes more than 10 hits a day, and is hooked up to a t100 line.

will my little optiplex gateway box be able to keep up with a webserver that's this 
busy? i know i at least have to replace the 3com 3c905b card on it, as i'm pretty sure 
that that type of nic can't even handle a t100 connection. but - is the computer 
itself fast enough? also - does anyone have any recommendations for a good 4 port hub 
or switch for this particular purpose? right now i'm using an old netgear en 104tp, 
which is probably not ideal.

thanks again




msg15810/pgp0.pgp
Description: PGP signature

RE: Possible attack?

2003-01-17 Thread JoeB

Just some body knocking at your front door.
What this means is you have ports 20  21 open
and your were port scanned.
You have to add some rules to your firewall.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jim Freeze
Sent: Friday, January 17, 2003 9:35 AM
To: FreeBSD Questions
Subject: Possible attack?

Hi:

I got an interesting log report today.
Has anyone seen such messages lately?

Jan 14 12:59:52 rabbit /kernel: ipfw: limit 100 reached on entry
64000
Jan 14 17:39:13 rabbit ftpd[1502]: ANONYMOUS FTP LOGIN REFUSED FROM
  p5089A961.dip.t-dialin.net
Jan 14 17:39:13 rabbit ftpd[1503]: ANONYMOUS FTP LOGIN REFUSED FROM
  p5089A961.dip.t-dialin.net
Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
  Content-Disposition header due to
 field size (length = 25) (possible attack)
Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM
 pD9E60C0F.dip.t-dialin.net
Jan 15 17:33:04 rabbit ftpd[4435]: ANONYMOUS FTP LOGIN REFUSED FROM
 pD9E60C0F.dip.t-dialin.net
Jan 15 23:59:48 rabbit sm-mta[5210]: h0G4xkJI005209: Truncated MIME
 Content-Disposition header due to
  field size (length = 22) (possible attack)



--
Jim Freeze
--
It's not Camelot, but it's not Cleveland, either.
-- Kevin White, mayor of Boston

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Possible attack?

2003-01-17 Thread Axel Gruner

Hi.

On Fri, 17 Jan 2003 15:42:10 + (GMT)
[EMAIL PROTECTED] (P. U. Kruppa) wrote:

  Jan 14 12:59:52 rabbit /kernel: ipfw: limit 100 reached on entry
  64000 Jan 14 17:39:13 rabbit ftpd[1502]: ANONYMOUS FTP LOGIN REFUSED
  FROM  p5089A961.dip.t-dialin.net
  Jan 14 17:39:13 rabbit ftpd[1503]: ANONYMOUS FTP LOGIN REFUSED FROM
p5089A961.dip.t-dialin.net
  Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
Content-Disposition header due to
   field size (length = 25) (possible attack)
  Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM
   pD9E60C0F.dip.t-dialin.net
  Jan 15 17:33:04 rabbit ftpd[4435]: ANONYMOUS FTP LOGIN REFUSED FROM
   pD9E60C0F.dip.t-dialin.net
  Jan 15 23:59:48 rabbit sm-mta[5210]: h0G4xkJI005209: Truncated MIME
   Content-Disposition header due to
field size (length = 22) (possible attack)

Well, it was some guy from the deutsche telekom network. 
This guy just wanted to use yout FTP (anonymous). Thats all. I dont
think it was an attack, or it was a hacker..

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Possible attack?

Jim Freeze wrote:

Hi:

I got an interesting log report today. 
Has anyone seen such messages lately?

Jan 14 12:59:52 rabbit /kernel: ipfw: limit 100 reached on entry 64000
Jan 14 17:39:13 rabbit ftpd[1502]: ANONYMOUS FTP LOGIN REFUSED FROM
  p5089A961.dip.t-dialin.net
Jan 14 17:39:13 rabbit ftpd[1503]: ANONYMOUS FTP LOGIN REFUSED FROM
  p5089A961.dip.t-dialin.net
Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
  Content-Disposition header due to
 field size (length = 25) (possible attack)
Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM
 pD9E60C0F.dip.t-dialin.net
Jan 15 17:33:04 rabbit ftpd[4435]: ANONYMOUS FTP LOGIN REFUSED FROM
 pD9E60C0F.dip.t-dialin.net
Jan 15 23:59:48 rabbit sm-mta[5210]: h0G4xkJI005209: Truncated MIME
 Content-Disposition header due to
  field size (length = 22) (possible attack)

I've seen the anonymous FTP denied off and on.  I think that some folks
just randomly attempt to connect to any FTP server they find in the
hopes that there's cool stuff there.
The sm-mta Truncaded MIME stuff isn't familiar to me, and it doesn't
actually seem related (compare the times).  Could be someone with a
broken mailer? or some sort of bogus MIME header that facilitates
the propagation of some worm?
It's probably a cheesy attempt at an attack.  But it's not blatent
enough to do much more than note it in case something more serious
goes wrong.  If you don't have any clients that should be connecting
from Deutsche TeleKom, you can just firewall off that whole subnet.

--
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: installing win2k after Freebsd?

2003-01-17 Thread Dan Aiello

 There are 3 ways listed in the FAQ for this very problem.  In the
 past, I have recommended a fourth way in a followup of mine in this
 list.  Have you tried one of them.  Which one?

Man! Where were you two days ago when I needed this info? I partially
overwrote my BSD installation because I couldn't figure that out. I knew
there was a way to do that. What I needed what the boot0cfg command...
Better late than never, I suppose. At least I'll know for next time.

I've been looking in the FAQ and can't find the part that tells me what
you had in that e-mail. Could you please tell me where specifically to
find it?

Thanks!
Dan


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Sound card channels

2003-01-17 Thread Andrew Knapp

I have a CMedia CMI8738 sound card that is built onboard. I am trying to get the rear 
channels to work (the card uses the line-in jack as outputs to the rear speakers, i 
have a 4.1 speaker set that connects to it). So far I am having no luck. I am able to 
listen to sound fine, but only through the front two speakers. 
I am getting these messages in /var/log/messages, but don't know what they mean:
/usr/src/sys/vm/uma_core.c:1330: could sleep with pcm0 locked from 
/usr/src/sys/dev/sound/pcm/sound.c:163

I also get this when I boot up:
2nd 0xc402d980 pcm0:play:0 (pcm channel) @ /usr/src/sys/dev/sound/pcm/channel.c:441

I've tried setting the hw.snd.pcm0.vchans and hw.snd.maxautochans sysctl settings, but 
they haven't worked, and i feel that's probably not my problem anyway.

I am running -CURRENT, so if the the -CURRENT mailing list is a better place to post, 
just let me know.

TIA,
Andy

uname -a output:
FreeBSD antichrist 5.0-CURRENT FreeBSD 5.0-CURRENT #0: Fri Jan 17 06:19:18 EST 2003
 knappster@antichrist:/usr/obj/usr/src/sys/ANTICHRIST  i38

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Wireless

2003-01-17 Thread Ronan Lucio

Hi All,
 
I've having a problem with a FreeBSD wireless link
connected to a Lucent AP500.
 
This link has Orinoco radio cards in both sides.
The problem is the wi0 interface in the FreeBSD-4.6-STABLE
box hangs suddenly for some minutes and starts working.
 
Some days it happens many times during the day.
When the link is working fine, the wicontrol output
show the relation quality/signal/noise: [ 35 85 50 ], but,
when the link is hand, such output is: [ 0 0 50 ].
If I reboot the machine at this moment, the FreeBSD box
starts up and everything works fine for sometime (about 1 ou 2
hours) more and it after that... it cames hanging the
wi0 interface.
 
Sometimes it stays some days without hang the interface, too.
 
Ok, This is the problem.
Talking with my wireless equipament syplier, he told me
that the wi interface of FreeBSD systems is too old and
works to WaveLAN devices, yet.
 
He told that I should either downgrade the radio card firmware
or to change the SO from FreeBSD to Linux with the driver
wavelan2cs or orinoco2cs.
 
My question is:
Can it be true?
 
Thank's
Ronan Lucio

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: need help in setting up a demilitarized zone

2003-01-17 Thread bsd

Redmond Militante writes: 

hi all 

this gateway box is an dell optiplex gx150 pIII 930 mhz
with 128 mb of ram, 2 nics 

i would like this gateway box to protect our webserver,
our mysql server, and possibly another webserver. 
our webserver is a dual xeon dell poweredge 1650 with 2 gig of ram,
it gets sometimes more than 10 hits a day,
and is hooked up to a t100 line. 

will my little optiplex gateway box be able to keep up
with a webserver that's this busy? 

A PIII 930 can handle a LOT of traffic!  All it is doing is shuffling
packets - it should be ample for your needs!  And it has plenty RAM too. 

i know i at least have to replace the 3com 3c905b card on it,
as i'm pretty sure that that type of nic can't even handle a
t100 connection. 

For a DMZ you need 3 NICs.  You have an Intel NIC on-board(?), so why not
put 2 more new intel NICS in free PCI slots, and then you will be set. 

but - is the computer itself fast enough?

Plenty IMHO. 

Regards,
Patrick O'Reilly. 


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: different ipfw/natd prob

2003-01-17 Thread WillyB

Here's what I did that worked for me on FreeBSD 4.5-RELEASE

Maybe this will help you some.

Kernel recompile options I added:
options IPFIREWALL  # I added for firewall
options IPFIREWALL_DEFAULT_TO_ACCEPT# I added for firewall
options IPFIREWALL_VERBOSE  # I added for firewall
options IPFIREWALL_VERBOSE_LIMIT=10 # I added for firewall
options IPFIREWALL_DEFAULT_TO_ACCEPT# I added for firewall
options IPFIREWALL_FORWARD  # I added for firewall 

options IPDIVERT# I added for natd

ipfw rules:
/sbin/ipfw add 100 pass all from 127.0.0.1 to 127.0.0.1
/sbin/ipfw add 200 divert natd all from any to any via rl0

ifconfig:
xl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=3rxcsum,txcsum
inet 192.168.0.1 netmask 0xff00 broadcast 192.168.0.255
inet6 fe80::201:2ff:fee8:2298%xl0 prefixlen 64 scopeid 0x1
ether 00:01:02:e8:22:98
media: Ethernet autoselect (100baseTX full-duplex)
status: active
rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 24.xx.xxx.61 netmask 0xfe00 broadcast 24..xxx.255
inet6 fe80::250:bfff:fe51:5503%rl0 prefixlen 64 scopeid 0x2
ether 00:50:bf:51:55:03
media: Ethernet autoselect (100baseTX full-duplex)
status: active

rc.conf:
gateway_enable=YES
firewall_enable=YES
firewall_type=OPEN
natd_enable=YES
natd_interface=rl0
natd_flags=-f /etc/natd.cf
hostname=mygatewayhost
ifconfig_rl0=inet 24.121.16.61  netmask 255.255.254.0
ifconfig_xl0=inet 192.168.0.1  netmask 255.255.255.0


WillyB



[EMAIL PROTECTED] wrote:
following is rc.conf, /etc/natd.conf, ifconfig, ipfw show

rc.conf

inetd_enable=YES
kern_securelevel_enable=NO
linux_enable=YES
tcp_extensions=YES
named_enable=YES
sendmail_enable=NO
portmap_enable=YES
router_enable=yes
router=/sbin/routed
router_flags=-q
defaultrouter=68.abc.de.1
hostname=www.kingrea.com
network_interfaces=lo0 fxp0 dc0
ifconfig_lo0=inet 127.0.0.1
ifconfig_dc0=inet 68.abc.de.14 netmask 255.255.255.0 media 10baseT/UTP
ifconfig_fxp0=inet 192.168.2.1 netmask 255.255.255.0
firewall_enable=YES
firewall_type=OPEN
gateway_enable=YES
natd_enable=YES
natd_interface=dc0
natd_flags=-f /etc/natd.conf

natd.conf

interface dc0
use_sockets yes
same_ports yes

ifconfig

dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 68.abc.de.14 netmask 0xff00 broadcast 68.abc.de.255
inet6 fe80::204:5aff:fe5a:9987%dc0 prefixlen 64 scopeid 0x1
ether 00:04:5a:5a:99:87
media: Ethernet 10baseT/UTP
status: active
fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 192.168.2.1 netmask 0xff00 broadcast 192.168.2.255
inet6 fe80::2a0:c9ff:fe5c:3738%fxp0 prefixlen 64 scopeid 0x2
ether 00:a0:c9:5c:37:38
media: Ethernet autoselect (100baseTX)
status: active
lp0: flags=8810POINTOPOINT,SIMPLEX,MULTICAST mtu 1500
faith0: flags=8002BROADCAST,MULTICAST mtu 1500
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
inet 127.0.0.1 netmask 0xff00
ppp0: flags=8010POINTOPOINT,MULTICAST mtu 1500
sl0: flags=c010POINTOPOINT,LINK2,MULTICAST mtu 552

ipfw show

00100   0   0 allow ip from any to any via lo0
00200   0   0 deny ip from any to 127.0.0.0/8
00300   0   0 deny ip from 127.0.0.0/8 to any
65000   4208345040 all ip from any to any
65535   0   0 deny ip from any to any


thanks for assistance!

stephen d. kingrea

On Fri, 17 Jan 2003, Bill Moran wrote:



Stephen D. Kingrea wrote:


i have a slightly different ipfw/natd problem.  

machines on the lan can ping internal nic on the server (fbsd 4.7), and
the external nic, but can not ping or reach anything outside. unless i
telnet into the server, then telnet out. currently running ipfw
open until problem is solved. server can ping all machines on lan.

On a wild guess, it sounds like your divert rule is wrong.
Need more information to help with this.

Please repost to the list and include the following:
The output of 'ipfw show'
The output of 'ifconfig'
The contents of your rc.conf file

--
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message





To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



--
Your favorite stores, helpful shopping tools and great gift ideas.
Experience the convenience of buying online with Shop@Netscape!
http://shopnow.netscape.com/


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

RE: different ipfw/natd prob

2003-01-17 Thread JoeB

Do you really have named Domain server configured? If not remove
named_enable=YES
If you really do not want sendmail it should be
sendmail_enable=NONE
From your description I see no reason for any of the  router_
options
You don't need this either
network_interfaces=lo0 fxp0 dc0
ifconfig_lo0=inet 127.0.0.1


Your rule set is missing the divert rule to send
all packets to ipfw's built in nat function inferface module.

allow ip from any to any via lo0
divert natd all from any to any via dc0 add this rule
allow all ip from any to any
deny ip from any to any



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Stephen D.
Kingrea
Sent: Friday, January 17, 2003 8:53 AM
To: Bill Moran
Cc: [EMAIL PROTECTED]
Subject: Re: different ipfw/natd prob

following is rc.conf, /etc/natd.conf, ifconfig, ipfw show

rc.conf

inetd_enable=YES
kern_securelevel_enable=NO
linux_enable=YES
tcp_extensions=YES
named_enable=YES
sendmail_enable=NO
portmap_enable=YES
router_enable=yes
router=/sbin/routed
router_flags=-q
defaultrouter=68.abc.de.1
hostname=www.kingrea.com
network_interfaces=lo0 fxp0 dc0
ifconfig_lo0=inet 127.0.0.1
ifconfig_dc0=inet 68.abc.de.14 netmask 255.255.255.0 media
10baseT/UTP
ifconfig_fxp0=inet 192.168.2.1 netmask 255.255.255.0
firewall_enable=YES
firewall_type=OPEN
gateway_enable=YES
natd_enable=YES
natd_interface=dc0
natd_flags=-f /etc/natd.conf

natd.conf

interface dc0
use_sockets yes
same_ports yes

ifconfig

dc0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 68.abc.de.14 netmask 0xff00 broadcast 68.abc.de.255
inet6 fe80::204:5aff:fe5a:9987%dc0 prefixlen 64 scopeid 0x1
ether 00:04:5a:5a:99:87
media: Ethernet 10baseT/UTP
status: active
fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 192.168.2.1 netmask 0xff00 broadcast 192.168.2.255
inet6 fe80::2a0:c9ff:fe5c:3738%fxp0 prefixlen 64 scopeid 0x2
ether 00:a0:c9:5c:37:38
media: Ethernet autoselect (100baseTX)
status: active
lp0: flags=8810POINTOPOINT,SIMPLEX,MULTICAST mtu 1500
faith0: flags=8002BROADCAST,MULTICAST mtu 1500
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5
inet 127.0.0.1 netmask 0xff00
ppp0: flags=8010POINTOPOINT,MULTICAST mtu 1500
sl0: flags=c010POINTOPOINT,LINK2,MULTICAST mtu 552

ipfw show

00100   0   0 allow ip from any to any via lo0
00200   0   0 deny ip from any to 127.0.0.0/8
00300   0   0 deny ip from 127.0.0.0/8 to any
65000   4208345040 all ip from any to any
65535   0   0 deny ip from any to any


thanks for assistance!

stephen d. kingrea

On Fri, 17 Jan 2003, Bill Moran wrote:

Stephen D. Kingrea wrote:
 i have a slightly different ipfw/natd problem.

 machines on the lan can ping internal nic on the server (fbsd
4.7), and
 the external nic, but can not ping or reach anything outside.
unless i
 telnet into the server, then telnet out. currently running ipfw
 open until problem is solved. server can ping all machines on
lan.

On a wild guess, it sounds like your divert rule is wrong.
Need more information to help with this.

Please repost to the list and include the following:
The output of 'ipfw show'
The output of 'ifconfig'
The contents of your rc.conf file

--
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: need help in setting up a demilitarized zone

Redmond Militante wrote:

hi all

so i have my gateway/ipfw/natd machine working, protecting a test client box. this gateway box is

an dell optiplex gx150 pIII 930 mhz with 128 mb of ram, 2 nics - one integrated intel pro 1000,
the other a really old 3com 3c905b that i pulled out of an old junker computer that we were going
to throw out.

i would like this gateway box to protect our webserver, our mysql server, and possibly another

webserver. our webserver is a dual xeon dell poweredge 1650 with 2 gig of ram, it gets sometimes
more than 10 hits a day, and is hooked up to a t100 line.

will my little optiplex gateway box be able to keep up with a webserver that's this busy? i know

i at least have to replace the 3com 3c905b card on it, as i'm pretty sure that that type of nic
can't even handle a t100 connection. but - is the computer itself fast enough?

You don't say what kind of bandwidth the 100,000 hits/day equates to but assuming and average 15k/hit,
that equates to about 17k/sec on busy days.
If all you're doing on the Optiplex is ipfw filtering and port forwarding, I think it will keep up
just fine. If you want it to be a reverse proxy, you may have to beef it up a bit (probably add RAM
for the proxy cache)
The Handbook has a statement on IPFWs performance at the end of the firewall section:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls.html
(it's all the way at the bottom) and the tests there seem to indicate that a 486/66 could handle
the load you describe.
There are other factors, though. On your busy days, is the load spread out over all or most of the
24 hour period, or does 90% of it come during a 2 hour spike? If it's spiking pretty hard, your
requirements might be well above the 17k/sec I estimated.

also - does anyone

have any recommendations for a good 4 port hub or switch for this particular purpose? right now
i'm using an old netgear en 104tp, which is probably not ideal.

Not familiar with the hub you describe, but if you're running 100mb/sec ethernet, you're not even
scraping the surface with the bandwidth I estimated.
Again, this could change if your busy days are caused by huge spikes over short periods of time
that you need to be able to handle.

--
Bill Moran
Potential Technologies
http://www.potentialtech.com

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: different ipfw/natd prob

Stephen D. Kingrea wrote:

oh, this looks bad before i do that, i should mention that in the
meantime, i tried to add a divert rule and got 

ip_fw_ctl: invalid command

on boot, i get 

IP packet filtering initialized, divert disabled, rule-based forwarding
enabled, default to deny, logging disabled

Sounds like you need to recompile your kernel with IPDIVERT (as someone
else pointed out)

--
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: different ipfw/natd prob

i agree. it does seem that i need to recompile:

www# ipfw add diver natd all from any to any via dc0
ip_fw_ctl: invalid command
ipfw: getsockopt(IP_FW_ADD): Invalid argument

would seem to indicate this..

i shall commence, as per yours and JoeB's suggestion and report back

thank you both

stephen d. kingrea

On Fri, 17 Jan 2003, Bill Moran wrote:

Stephen D. Kingrea wrote:
 oh, this looks bad before i do that, i should mention that in the
 meantime, i tried to add a divert rule and got 
 
 ip_fw_ctl: invalid command
 
 on boot, i get 
 
 IP packet filtering initialized, divert disabled, rule-based forwarding
 enabled, default to deny, logging disabled

Sounds like you need to recompile your kernel with IPDIVERT (as someone
else pointed out)

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: DNS problem

please keep the line length at about 72 characters.
587 is a bit hard to read.

# [EMAIL PROTECTED] / 2003-01-16 16:40:40 +0200:
 I past some outputs from nslookup.

let me alert you to another problem you have besides in-addr.arpa
delegation: nslookup is terribly broken, you don't want to use it:

http://cr.yp.to/djbdns/nslookup.html

-- 
If you cc me or remove the list(s) completely I'll most likely ignore
your message.see http://www.eyrie.org./~eagle/faqs/questions.html

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Increase memory limit ?

put your replies *below* the text you reply to. most questions@
subscribers are used to reading from top to bottom, from left to
right.

# [EMAIL PROTECTED] / 2003-01-15 22:02:49 -0600:
 32-bit systems implementing VM typically could increase user-mode address 
 space up to 2 GB, although variants on that and other things (ie, where 
 devices get mapped into memory) make that only an approximation.  For 
 FreeBSD:
 
 # Certain applications can grow to be larger than the 128M limit
 # that FreeBSD initially imposes.  Below are some options to
 # allow that limit to grow to 256MB, and can be increased further
 # with changing the parameters.  MAXDSIZ is the maximum that the
 # limit can be set to, and the DFLDSIZ is the default value for
 # the limit.  MAXSSIZ is the maximum that the stack limit can be
 # set to.  You might want to set the default lower than the max,
 # and explicitly set the maximum with a shell command for processes
 # that regularly exceed the limit like INND.
 #
 options MAXDSIZ=(256*1024*1024)
 options MAXSSIZ=(256*1024*1024)
 options DFLDSIZ=(256*1024*1024)
 
 Depending on what you're doing, you might well find using a 64-bit 
 platform (Alpha hardware?  Solaris on SPARC?) to be more appropriate...
 
 Which file should I put in the following ?

in your kernel configuration file, look in /usr/src/sys/i386/conf/

-- 
If you cc me or remove the list(s) completely I'll most likely ignore
your message.see http://www.eyrie.org./~eagle/faqs/questions.html

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Connecting to httpd and sshd from remote computer

# [EMAIL PROTECTED] / 2003-01-16 14:06:56 +0100:
 Thank you for your quick answer.
 
 Changing the setting in the sshd_config file enabled sshd root login 
 (naturally). Shhd-problem solved :)

actually, a sshd-problem created. why don't you log in with your
regular account, and su to root if/when needed?

and don't top-post, please.
 
-- 
If you cc me or remove the list(s) completely I'll most likely ignore
your message.see http://www.eyrie.org./~eagle/faqs/questions.html

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Kernel build returns Error code 1

keep the line length within reasonable bounds, please. (that doesn't
include computer-generated text!)

# [EMAIL PROTECTED] / 2003-01-12 22:34:55 +0100:
 I'm trying to add sound support to my FreeBSD Release 4.6.2 kernel but
 it will not build successfully. Here is the error output I get (tail
 of make output):
 
 
 touch hack.c
 cc -elf -shared -nostdlib hack.c -o hack.So
 rm -f hack.c
 sh ../../conf/newvers.sh PATKERNEL 
 cc -c -O -pipe  -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes  -c
 linking kernel
 if.o: In function `if_setlladdr':
 if.o(.text+0x1bc4): undefined reference to `arp_ifinit'
 *** Error code 1
 
 Stop in /usr/src/sys/compile/PATKERNEL.

looks like you took out device ether. do `diff -u GENERIC PATKERNEL`
to be sure.

-- 
If you cc me or remove the list(s) completely I'll most likely ignore
your message.see http://www.eyrie.org./~eagle/faqs/questions.html

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

http://www.fwbuilder.org and ipfw

2003-01-17 Thread Didier Wiroth

Hey,

Is someone using fwbuilder on FreeBSD with ipfw as a gui frontend for a 
workstation firewall?



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

drac compile problem

2003-01-17 Thread Antoine Jacoutot

Hi,

I'm having a problem with compiling drac.
I run FreeBSD-4.7-STABLE, I just upgraded and compiled kernel+world and
cvsup the ports collection.
Now, here is my problem:


-bash-2.05b# cd /usr/ports/mail/drac/
-bash-2.05b# make install
===  Patching for drac-1.11_2
===  Applying FreeBSD patches for drac-1.11_2
Ignoring previously applied (or reversed) patch.
2 out of 2 hunks ignored--saving rejects to Makefile.rej
 Patch patch-aa failed to apply cleanly.
*** Error code 1

Stop in /usr/ports/mail/drac.
-bash-2.05b# make distclean
===  Cleaning for drac-1.11_2
===  Deleting distfiles for drac-1.11_2
-bash-2.05b# cd /usr/ports/mail/drac/
-bash-2.05b# make install
=
For databases compatible with other MTAs than sendmail, use:

WITH_POSTFIX=yes(Postfix)
WITH_POSTFIX_DB3=yes(Postfix with DB3 database maps)
WITH_EXIM=yes   (Exim)

Define WITH_FOREGROUND to make the rpc.dracd daemon stay in
foreground instead of detaching itself. This breaks the
startup script.
=
 drac.tar.Z doesn't seem to exist in /usr/ports/distfiles/.
 Attempting to fetch from ftp://ftp.cc.umanitoba.ca/src/.
Receiving drac.tar.Z (20705 bytes): 100%
20705 bytes transferred in 9.5 seconds (2.13 kBps)
===  Extracting for drac-1.11_2
 Checksum mismatch for drac.tar.Z.
Make sure the Makefile and distinfo file (/usr/ports/mail/drac/distinfo)
are up to date.  If you are absolutely sure you want to override this
check, type make NO_CHECKSUM=yes [other args].
*** Error code 1

Stop in /usr/ports/mail/drac.
-bash-2.05b# make NO_CHECKSUM=yes install
=
For databases compatible with other MTAs than sendmail, use:

WITH_POSTFIX=yes(Postfix)
WITH_POSTFIX_DB3=yes(Postfix with DB3 database maps)
WITH_EXIM=yes   (Exim)

Define WITH_FOREGROUND to make the rpc.dracd daemon stay in
foreground instead of detaching itself. This breaks the
startup script.
=
===  Extracting for drac-1.11_2
===  Patching for drac-1.11_2
===  Applying FreeBSD patches for drac-1.11_2
1 out of 2 hunks failed--saving rejects to Makefile.rej
 Patch patch-aa failed to apply cleanly.
*** Error code 1

Stop in /usr/ports/mail/drac.


If you have any idea... ;-)

Antoine


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Possible attack?

2003-01-17 Thread Jim Freeze

On Friday, 17 January 2003 at 10:01:43 -0500, Bill Moran wrote:
 Jim Freeze wrote:
  Hi:
  
  I got an interesting log report today. 
  Has anyone seen such messages lately?
  
  Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
Content-Disposition header due to
   field size (length = 25) (possible attack)
  Jan 15 17:33:04 rabbit ftpd[4435]: ANONYMOUS FTP LOGIN REFUSED FROM
   pD9E60C0F.dip.t-dialin.net
  Jan 15 23:59:48 rabbit sm-mta[5210]: h0G4xkJI005209: Truncated MIME
   Content-Disposition header due to
field size (length = 22) (possible attack)
 
 I've seen the anonymous FTP denied off and on.  I think that some folks
 just randomly attempt to connect to any FTP server they find in the
 hopes that there's cool stuff there.
 The sm-mta Truncaded MIME stuff isn't familiar to me, and it doesn't
 actually seem related (compare the times).  Could be someone with a
 broken mailer? or some sort of bogus MIME header that facilitates
 the propagation of some worm?
 It's probably a cheesy attempt at an attack.  But it's not blatent
 enough to do much more than note it in case something more serious
 goes wrong.  If you don't have any clients that should be connecting
 from Deutsche TeleKom, you can just firewall off that whole subnet.
 
 Thanks all for the replies. I accept the fact that I am going
 to get the FTP login attempts, I just had never seen the 
 (possible attack) in my logs.

 I'm not sure I have anything worth the effort to attempt a break-in. :)

-- 
Jim Freeze
--
Anyone who goes to a psychiatrist ought to have his head examined.
-- Samuel Goldwyn

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Strg+Alt+Entf ?!?!?

2003-01-17 Thread Daniel Graupner

Hello everyone,

when using strg+alt+entf in freebsd - reboot.
But I want to power off my machine when pressing this keys (halt).
...under linux it's no problem, there i can change the command executed, 
when this keyboard-sequence occurs.

any advice??

thanks


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

code 1 error on kernel compile

make depend returns (last 5 lines):

In file included from ../../isa/fdreg.h:42,
../../fd.c/:85:
../../isa/ic/nec765.h:4: unterminated character constant
mkdep: compile failed
*** error code 1

have i done something wrong?

stephen d. kingrea


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: /usr/ports/devel/apr fails to compile

2003-01-17 Thread Joan Picanyol i Puig


* Joan Picanyol i Puig [EMAIL PROTECTED] [20030113 16:09]:
 Hi,
 
 Trying to install subversion, I can't get apr to build:
 
 Making all in .
 /bin/sh
 
/fs/tmp/mount/tmp/build/ports/fs/bulk/mount/FreeBSD/ports/devel/apr/work/apr-0.9.1/libtool
 --silent --mode=compile gcc -g -O2   -DHAVE_CONFIG_H -D_REENTRANT
 -D_THREAD_SAFE
 
-I/fs/tmp/mount/tmp/build/ports/fs/bulk/mount/FreeBSD/ports/devel/apr/work/apr-util-0.9.1/include
 
-I/fs/tmp/mount/tmp/build/ports/fs/bulk/mount/FreeBSD/ports/devel/apr/work/apr-util-0.9.1/include/private
 
-I/fs/tmp/mount/tmp/build/ports/fs/bulk/mount/FreeBSD/ports/devel/apr/work/apr-0.9.1/include
 -I/usr/local/include  -c apr_dbm_berkeleydb.c  touch
 apr_dbm_berkeleydb.lo
 apr_dbm_berkeleydb.c: In function `vt_db_open':
 apr_dbm_berkeleydb.c:200: warning: passing arg 2 of pointer to function
 from incompatible pointer type
 apr_dbm_berkeleydb.c:200: warning: passing arg 4 of pointer to function
 makes pointer from integer without a cast
 apr_dbm_berkeleydb.c:200: too few arguments to function
 *** Error code 1
 
 Stop in
 
/fs/tmp/mount/tmp/build/ports/fs/bulk/mount/FreeBSD/ports/devel/apr/work/apr-util-0.9.1/dbm.
 *** Error code 1
 
 Stop in
 
/fs/tmp/mount/tmp/build/ports/fs/bulk/mount/FreeBSD/ports/devel/apr/work/apr-util-0.9.1/dbm.
 *** Error code 1
 
 Stop in
 
/fs/tmp/mount/tmp/build/ports/fs/bulk/mount/FreeBSD/ports/devel/apr/work/apr-util-0.9.1.
 *** Error code 1
 
 Stop in /fs/bulk/mount/FreeBSD/ports/devel/apr.
The problem persists after rebuilding world, gdbm and db4. Am I really
the only one seeing this? Any hints as to how to get it to compile?

tks
-- 
pica

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: too old?

2003-01-17 Thread Mike Meyer

In [EMAIL PROTECTED], Kenzo [EMAIL PROTECTED] typed:
 webmin-1.050_2 : Your system is too old to use this bsd.port.mk. You need a
 fresh make world or an upgrade kit. Please go to
 http://www.FreeBSD.org/ports/ or a mirror site and follow the instructions.
...
 How can I fix this?

See if /var/db/port.mkversion exists. If not, then go to /usr/ports/Mk
and do grep BSDPORTMKVERSION= bsd.port.mk, and put the numeric part
of the output line in /var/db/port.mkversion.

mike
-- 
Mike Meyer [EMAIL PROTECTED]  http://www.mired.org/consulting.html
Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

DNS problem

2003-01-17 Thread Hilmi Hilmiev

Hi all,

I have a veri bad situation with my DNS server. From the begining I 
don't know that this server is runing as well, cuz the DNS server is 
inherited for my. What is a my problem: reverse address resolving not 
work correct. What I mean: I use nslookup tool for checking the DNS 
server, and if I use as server my DNS server all type of resolving work. 
Still work. The problem is when I use server from the world: example 
ns1.versatel.net (situation is same with other server from the worl), 
this server can't find the reverse record for my machines. Here I past 
some outputs from nslookup.

My question is: what is wrong in my situation? Where is the problem: 
with my server or ...

10x to all in advance!

-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=RESULT WHEN I USE EXTERNAL 
FOR MY DOMAIN DNS SERVER-=-=-=-=-=-=-=-=-=-=-=-=
 server ns1.versatel.net
;; res_nmkquery(QUERY, ns1.versatel.net, IN, A)

Got answer:
   HEADER:
   opcode = QUERY, id = 58683, rcode = NOERROR
   header flags:  response, auth. answer, want recursion, recursion 
avail.
   questions = 1,  answers = 1,  authority records = 2,  additional = 2

   QUESTIONS:
   ns1.versatel.net, type = A, class = IN
   ANSWERS:
   -  ns1.versatel.net
   internet address = 62.58.62.132
   ttl = 86400 (1D)
   AUTHORITY RECORDS:
   -  versatel.net
   nameserver = ns1.versatel.net
   ttl = 86400 (1D)
   -  versatel.net
   nameserver = ns2.versatel.net
   ttl = 86400 (1D)
   ADDITIONAL RECORDS:
   -  ns1.versatel.net
   internet address = 62.58.62.132
   ttl = 86400 (1D)
   -  ns2.versatel.net
   internet address = 62.58.94.130
   ttl = 86400 (1D)


;; res_nmkquery(QUERY, ns1.versatel.net, IN, )

Got answer:
   HEADER:
   opcode = QUERY, id = 58684, rcode = NOERROR
   header flags:  response, auth. answer, want recursion, recursion 
avail.
   questions = 1,  answers = 0,  authority records = 1,  additional = 0

   QUESTIONS:
   ns1.versatel.net, type = , class = IN
   AUTHORITY RECORDS:
   -  versatel.net
   ttl = 86400 (1D)
   origin = ns1.versatel.net
   mail addr = hostmaster.versatel.net
   serial = 2002121801
   refresh = 10800 (3H)
   retry   = 3600 (1H)
   expire  = 604800 (1W)
   minimum ttl = 86400 (1D)


;; res_nmkquery(QUERY, ns1.versatel.net.wizzbit.nl, IN, )

Got answer:
   HEADER:
   opcode = QUERY, id = 58685, rcode = NXDOMAIN
   header flags:  response, want recursion, recursion avail.
   questions = 1,  answers = 0,  authority records = 1,  additional = 0

   QUESTIONS:
   ns1.versatel.net.wizzbit.nl, type = , class = IN
   AUTHORITY RECORDS:
   -  wizzbit.nl
   ttl = 499 (8m19s)
   origin = ns.wizzbit.nl
   mail addr = postmaster.wizzbit.nl
   serial = 20020451
   refresh = 14400 (4H)
   retry   = 3600 (1H)
   expire  = 604800 (1W)
   minimum ttl = 86400 (1D)


Default Server:  ns1.versatel.net
Address:  62.58.62.132

 62.58.54.10
Server:  ns1.versatel.net
Address:  62.58.62.132

;; res_nmkquery(QUERY, 10.54.58.62.in-addr.arpa, IN, PTR)

Got answer:
   HEADER:
   opcode = QUERY, id = 58686, rcode = NXDOMAIN
   header flags:  response, auth. answer, want recursion, recursion 
avail.
   questions = 1,  answers = 0,  authority records = 1,  additional = 0

   QUESTIONS:
   10.54.58.62.in-addr.arpa, type = PTR, class = IN
   AUTHORITY RECORDS:
   -  62.in-addr.arpa
   ttl = 7200 (2H)
   origin = ns.ripe.net
   mail addr = ops-62.ripe.net
   serial = 2003011602
   refresh = 43200 (12H)
   retry   = 7200 (2H)
   expire  = 1209600 (2W)
   minimum ttl = 7200 (2H)


*** ns1.versatel.net can't find 62.58.54.10: Non-existent host/domain



-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=RESULT 
IF I USE MY DNS SERVER
 server 62.58.54.11
;; res_nmkquery(QUERY, 11.54.58.62.in-addr.arpa, IN, PTR)

Got answer:
   HEADER:
   opcode = QUERY, id = 58687, rcode = NXDOMAIN
   header flags:  response, auth. answer, want recursion, recursion 
avail.
   questions = 1,  answers = 0,  authority records = 1,  additional = 0

   QUESTIONS:
   11.54.58.62.in-addr.arpa, type = PTR, class = IN
   AUTHORITY RECORDS:
   -  62.in-addr.arpa
   ttl = 7200 (2H)
   origin = ns.ripe.net
   mail addr = ops-62.ripe.net
   serial = 2003011602
   refresh = 43200 (12H)
   retry   = 7200 (2H)
   expire  = 1209600 (2W)
   minimum ttl = 7200 (2H)


;; res_nmkquery(QUERY, 62.58.54.11, IN, )

Got answer:
   HEADER:
   opcode = QUERY, id = 58688, rcode = NXDOMAIN
   header flags:  response, auth. answer, want recursion, recursion 
avail.
   questions = 1,  answers = 0,  authority records = 1,  additional = 0

   QUESTIONS:
   62.58.54.11, type = ,

Re: too old?

2003-01-17 Thread Kenzo

Thanks Mike that took care of it.
You're the MAN.

- Original Message -
From: Mike Meyer [EMAIL PROTECTED]
To: Kenzo [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, January 17, 2003 11:37 AM
Subject: Re: too old?

 In [EMAIL PROTECTED], Kenzo
[EMAIL PROTECTED] typed:
  webmin-1.050_2 : Your system is too old to use this bsd.port.mk. You
need a
  fresh make world or an upgrade kit. Please go to
  http://www.FreeBSD.org/ports/ or a mirror site and follow the
instructions.
 ...
  How can I fix this?

 See if /var/db/port.mkversion exists. If not, then go to /usr/ports/Mk
 and do grep BSDPORTMKVERSION= bsd.port.mk, and put the numeric part
 of the output line in /var/db/port.mkversion.

 mike
 --
 Mike Meyer [EMAIL PROTECTED] http://www.mired.org/consulting.html
 Independent WWW/Perforce/FreeBSD/Unix consultant, email for more
information.

 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

ATI Rage IIC supported?

2003-01-17 Thread Arnason, Arni



Hello,

would anyone be able to tell me if ATI Rage IIC AGP video card
is supported on 4.6.2? I'm having a hard time with xconfig.

if it is any tips on setting it up would be greatly appreciated

thanks very much

Arni Arnason



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Directory hashing question

please keep the line length at about 70 characters.
442 is a bit long.

# [EMAIL PROTECTED] / 2003-01-16 15:13:26 +:
 I have a question about best practices for directory hashing. I have
 about 80,000 zone files which are named after the domain which I
 generate using a Perl script. I'm looking for the best hashing to
 reduce the start up time for bind. 
 
 I've tried different hashings. Using example.foo as an example (:-)),
 if I take the first and second letters of the domain and hash it like
 this /var/named/e/x/example.foo I still end up with (in a few cases)
 more than 3000 zones in one directory. If I hash using the
 first+second and third+fourth like this /var/named/ex/am/example.com I
 end up with a lot fewer zones in the individual directories, but
 bind's start up time is much longer.

isn't this actually a Bind problem? you are IMO asking in the wrong
forum.
 
 I can live with the first hasing if I need to, but I'm seeking some
 advice and suggestions on what others think (or know) would be better.

I think better solution would be switching to djbdns, but am afraid
of starting a flamefest, so I won't say it. :)

-- 
If you cc me or remove the list(s) completely I'll most likely ignore
your message.see http://www.eyrie.org./~eagle/faqs/questions.html

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Help needed configuring racoon

2003-01-17 Thread Mike Doyle

Hi,

I think I need a little help configuring a VPN using FreeBSD and
racoon. At the moment I have got as far as compiling an IPSec
enabled kernel, and running racoon. When I try to ping a
machine on the other end of the tunnel, racoon fails to negotiate
key exchange. On debug level 1, the message in the log file is:

 ERROR: pfkey.c:1604:pk_recvacquire(): failed to get sainfo.

For any experts out there, I would be happy to send copies of any
relevant log files and/or config files. However, given that these are
the two firewalls protecting my LANs, I don't want to post configuration
info to a public forum.

PS: I'm not subscribed to questions, but I do check the web-archives
so please email me directly if you're prepared to help.

 = 
Michael Doyleemail: [EMAIL PROTECTED]
Network Administratorpersonal email: [EMAIL PROTECTED]
Co-operation Ireland   http://www.cooperationireland.org/
Phone: +353-1-661 0588   Fax: +353-1-661 8456

*

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Directory hashing question

2003-01-17 Thread Jan Grant

On Thu, 16 Jan 2003, John Ekins wrote:

 Hello,

 I have a question about best practices for directory hashing. I have
 about 80,000 zone files which are named after the domain which I
 generate using a Perl script. I'm looking for the best hashing to
 reduce the start up time for bind.

 I've tried different hashings. Using example.foo as an example (:-)),
 if I take the first and second letters of the domain and hash it like
 this /var/named/e/x/example.foo I still end up with (in a few cases)
 more than 3000 zones in one directory. If I hash using the
 first+second and third+fourth like this /var/named/ex/am/example.com I
 end up with a lot fewer zones in the individual directories, but
 bind's start up time is much longer.

 I can live with the first hasing if I need to, but I'm seeking some
 advice and suggestions on what others think (or know) would be better.

Assuming you want your directories to be as full as possible to get
optimal startup time, and that the definitive data defining your zone
files lives somewhere else (ie, that you're creating this directory
structure _purely_ for bind to consume, not for management purposes),
why not just determine (benchmark) the right number of zone files to
put in a directory, and slap the first n files into directory z001, the
next n into directory z002, and so on?


-- 
jan grant, ILRT, University of Bristol. http://www.ilrt.bris.ac.uk/
Tel +44(0)117 9287088 Fax +44 (0)117 9287112 http://ioctl.org/jan/
You see what happens when you have fun with a stranger in the Alps?


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Directory hashing question

2003-01-17 Thread Karl Vogel

 On Thu, 16 Jan 2003 15:13:26 +, 
 John Ekins [EMAIL PROTECTED] said:

J I have a question about best practices for directory hashing.
J I have about 80,000 zone files which are named after the domain which I
J generate using a Perl script.  I'm looking for the best hashing to
J reduce the start up time for bind.

J I've tried different hashings.  Using example.foo as an example (:-)),
J if I take the first and second letters of the domain and hash it like
J /var/named/e/x/example.foo, I still end up with (in a few cases)
J more than 3000 zones in one directory.

   Yup, lots of domain names start with an English word, and the first two
   letters are not evenly distributed.

J If I hash using the first+second and third+fourth like
J /var/named/ex/am/example.com, I end up with a lot fewer zones in the
J individual directories, but bind's start up time is much longer.

   Probably because it has lots more directories to look through.

J I'm seeking some advice and suggestions on what others think (or know)
J would be better.

   The hash function from SDBM has behaved pretty well for me in the past.
   It's simple and quick.  I'd create 256 directories (0x00 - 0xff),
   and use the last byte from the hash value of each domain name to
   determine the directory.  Examples below.

-- 
Karl Vogel  I don't speak for the USAF or my company
[EMAIL PROTECTED]  http://www.pobox.com/~vogelke

EXCUSE FOR GETTING TO WORK LATE #3:
I am stuck in the blood pressure machine down at the Food Giant.

---
Create the directories:

me% cd /var/named
me% perl -e 'for (0x00 .. 0xff) { printf %2.2x\n, $_; }' | xargs mkdir

Hash routine:

me% cat shash
#!/usr/local/bin/perl
# sdbm hashing routine
#
# Original C code from SDBM library:
#
#   long sdbm_hash(register char *str, register int len)
#   {
#   register unsigned long n = 0;
#   while (len--)
#   n = *str++ + 65587 * n;
#   return n;
#   }

use integer;
use strict;
use warnings;

my $hval;   # hash value.

while () {
chomp;
$hval = sdbmhash($_);
print $hval $_\n;
}

exit (0);

sub sdbmhash {
($_) = @_;
my $n = 0;

# Walk the string one character at a time.
# Use the lowest 31 bits (avoid sign-bit), and keep
# the lowest byte.

while (/(.)/g) {
$n = (ord($1) + 65587 * $n)  0x7fff;
}

return sprintf(%2.2x, $n  0xff);
}

me% echo example.foo | ./shash
7a example.foo

Here's a short, not-terribly-scientific test.  The hash distributes English
words pretty well:

me% cd /usr/share/lib/dict

me% wc -l words
   25143 words

me% ./shash  words | awk '{print $1}' | sort | uniq -c | pr -5t
 105 00120 34 93 67101 9a101 cd
  96 01110 35108 68 96 9b107 ce
 108 02 95 36105 69106 9c 83 cf
 102 03 83 37 95 6a107 9d 99 d0
  96 04101 38 96 6b106 9e 93 d1
  88 05 95 39101 6c 97 9f 90 d2
  96 06 99 3a104 6d 77 a0 96 d3
  80 07102 3b114 6e 98 a1 82 d4
  86 08 89 3c 88 6f103 a2 97 d5
 106 09 92 3d 76 70111 a3 89 d6
 106 0a109 3e111 71 97 a4 82 d7
  87 0b 87 3f108 72 98 a5 93 d8
  97 0c102 40111 73102 a6 84 d9
 103 0d 94 41106 74109 a7 96 da
  93 0e103 42107 75 99 a8 85 db
 107 0f114 43110 76 98 a9105 dc
  85 10 90 44104 77 91 aa111 dd
  95 11128 45 80 78 97 ab 95 de
 102 12 85 46108 79100 ac109 df
  97 13100 47 98 7a101 ad104 e0
 110 14122 48 93 7b 86 ae116 e1
 101 15 94 49118 7c106 af 81 e2
  86 16118 4a104 7d 94 b0 93 e3
 115 17108 4b 96 7e104 b1 83 e4
  82 18 98 4c 98 7f 89 b2 85 e5
 102 19 98 4d105 80104 b3103 e6
  90 1a103 4e 96 81100 b4 85 e7
 113 1b 95 4f 98 82 97 b5 99 e8
 105 1c 84 50111 83108 b6 83 e9
 101 1d 93 51 86 84112 b7 94 ea
  96 1e 90 52104

Changing timeout values for the resolver

2003-01-17 Thread Pranav A. Desai

Hi!

   Is there a way to change the timeout value for which the resolver waits
before going to the second nameserver in resolv.conf, in case the first
nameserver couldnt reply.

Can it be done without touching the code for resolver.

Thanks for your time.

-Pranav


***
Pranav A. Desai




To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Lockup on boot

2003-01-17 Thread A. Wright

If this list is not appropriate for this question, please direct me to the
correct one.

I recently purchased 2 SMC2632 wireless PCI adapter cards, and put them in
my desktop machine, which is a really old Compaq Prolenia 5500, on which I
have FreeBSD 4.7-RELEASE-p1 installed.  The problem
I have is this: When I boot up, it freezes up after these two lines:

pcib7: Host to PCI bridge on motherboard
pci7: PCI bus on pcib7

I eventually got the machine to boot by taking out both cards and booting up
normally.  Then shutting down, putting both cards back in and starting up
again, at which time the machine boots without a problem.  However, if I
need to reboot again, it will freeze after the same 2 lines, and I have to
take both cards out, reboot normally etc.  This is consistant behavior.
It freezes at the same place if I just put 1 of the cards in, though I
haven't established any particular pattern with just 1 card, but I assume
it's the same as with both cards.

I've done some research and I've already tried what is suggested in section
2.1.6 of this page: http://www.freebsd.org/releases/4.4R/relnotes-i386.html
I've also looked for some PnP settings in my BIOS, but the machine was made
in the mid-90's, and doesn't have any PnP options that I can find.

Any ideas/suggestions are appreciated.  I was planning on buying a new box,
but wanted to check with this list to see if there was anything else I could
try.

Thanks!
Aaron




To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Looking for M-Audio Audiophile 2496 driver

2003-01-17 Thread Stephane Baud

Hi,

I have an M-Audio Audiophile 2496 soundcard 
(http://www.m-audio.com/products/m-audio/audiophile.php) and am looking for a matching 
FreeBSD driver. I'm new to FreeBSD and have recently installed version 4.7 stable. 
Installation via FTP was a breeze and the only missing piece so far is sound. I know 
that this soundcard is not explicitely listed in the hardware compatibility list, but 
I was hoping that maybe someone in the FreeBSD community came up with a driver that's 
not yet offically listed, or at least that's there's work in progress or some alpha 
quality experimental driver that I'd be happy to help testing. This is not just one 
other exotic soundcard, it's an very good one (all reviews are raving about it), with 
extremely low latency (under 1ms on Mac OS X) and very good DACs. It's a very popular 
soundcard among musicians for computer based music and I was hoping to be able to use 
it on FreeBSD. Yes, there is an ALSA driver available on Linux, but I'd rather stick 
to FreeBSD as I'm convinced of its design superiority and I don't want to deal w/ the 
whole Linux distribution mess. I guess the only Linux distro that got my attention 
recently is Gentoo (www.gentoo.org), precisely because it ports based, a la FreeBSD, 
but it's still in its early stage and needs to mature a bit I think.

Thanks a lot in advance for your ideas/suggestions.

-- Stephane

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Strg+Alt+Entf ?!?!?

2003-01-17 Thread Lowell Gilbert

Daniel Graupner [EMAIL PROTECTED] writes:

 Hello everyone,
 
 when using strg+alt+entf in freebsd - reboot.
 But I want to power off my machine when pressing this keys (halt).
 ...under linux it's no problem, there i can change the command
 executed, when this keyboard-sequence occurs.
 
 any advice??

According to the FreeBSD FAQ, you can do this by changing the keyboard
map.  kbdmap(1) and kbdmap(5) seem to tell you everything you need to
know to set this up.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

kernel: ad3s1e: UDMA ICRC error writing fsbn

2003-01-17 Thread stan

 just put a new drive in service as an Amanda dumpdisk, and I'm fetting
 console messages like this:

 kernel: ad3s1e: UDMA ICRC error writing fsbn

 Is the drive bad? Or the controler?

-- 
They that would give up essential liberty for temporary safety deserve
neither liberty nor safety.
-- Benjamin Franklin

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Strange tape error message

2003-01-17 Thread stan

I'm building anew Amanda backup machine. I did a run last night and got
messages liek:

Jan 17 05:01:39 black /kernel: (sa0:ahc1:0:4:0): tape is now frozen- use an
OFFLINE, REWIND or MTEOM command to clear this state.

On the console.

What's going on?

-- 
They that would give up essential liberty for temporary safety deserve
neither liberty nor safety.
-- Benjamin Franklin

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

adduser question

2003-01-17 Thread Doug Reynolds

I am trying to add some samba machine names to my system.  you have to
add a dollar sign to the username.  ie, hostname$.  what would be the
pattern i'd have to enter into the adduser prompt.

---
doug reynolds | the maverick | [EMAIL PROTECTED]



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Lockup on boot -More Info-

2003-01-17 Thread A. Wright

It occurred to me to include my dmesg only after sending the message.  Sorry
for not providing this in the original email:

wi0: PRISM2STA WaveLAN port 0x1400-0x143f,0x1000-0x107f mem
0x4100-0x41000fff irq 11 at device 13.0 on pci0
wi0: 802.11 address: 00:04:e2:57:82:f7
wi0: using RF:PRISM2 MAC:HFA3841 CARD:HWB3163 rev.A
wi0: Intersil Firmware: Primary 0.03.00, Station 0.08.03
wi1: PRISM2STA WaveLAN port 0x1440-0x147f,0x1080-0x10ff mem
0x4108-0x41080fff irq 11 at device 14.0 on pci0
wi1: 802.11 address: 00:04:e2:57:81:d8
wi1: using RF:PRISM2 MAC:HFA3841 CARD:HWB3163 rev.A
wi1: Intersil Firmware: Primary 0.03.00, Station 0.08.03


- Original Message -
From: A. Wright [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, January 17, 2003 2:25 PM
Subject: Lockup on boot


 If this list is not appropriate for this question, please direct me to the
 correct one.

 I recently purchased 2 SMC2632 wireless PCI adapter cards, and put them in
 my desktop machine, which is a really old Compaq Prolenia 5500, on which I
 have FreeBSD 4.7-RELEASE-p1 installed.  The problem
 I have is this: When I boot up, it freezes up after these two lines:

 pcib7: Host to PCI bridge on motherboard
 pci7: PCI bus on pcib7

 I eventually got the machine to boot by taking out both cards and booting
up
 normally.  Then shutting down, putting both cards back in and starting up
 again, at which time the machine boots without a problem.  However, if I
 need to reboot again, it will freeze after the same 2 lines, and I have to
 take both cards out, reboot normally etc.  This is consistant
behavior.
 It freezes at the same place if I just put 1 of the cards in, though I
 haven't established any particular pattern with just 1 card, but I assume
 it's the same as with both cards.

 I've done some research and I've already tried what is suggested in
section
 2.1.6 of this page:
http://www.freebsd.org/releases/4.4R/relnotes-i386.html
 I've also looked for some PnP settings in my BIOS, but the machine was
made
 in the mid-90's, and doesn't have any PnP options that I can find.

 Any ideas/suggestions are appreciated.  I was planning on buying a new
box,
 but wanted to check with this list to see if there was anything else I
could
 try.

 Thanks!
 Aaron




 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: opie stable in 4.7?

2003-01-17 Thread Hanspeter Roth

  On Jan 16 at 17:44, Kris Kennaway spoke:

 On Thu, Jan 16, 2003 at 11:11:35PM +0100, Hanspeter Roth wrote:
  is OPIE stable in Freebsd 4.7?
 
 OPIE support works well.  S/Key is considered deprecated and has been
 removed from 5.0.

The others are given permission to read /etc/opiekeys. I don't feel
comfortable with this. 

I have only `permit 127.0.0.1 255.255.255.255' in opieaccess. But
with ssh from another address I can also login via the Unix
password.
Should I enable `sshd   authrequiredpam_opieaccess.so'
in pam.conf?

-Hanspeter

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

usb 56k modem support?

2003-01-17 Thread fbsdq


Hello,
   Does FreeBSD have support for any external USB 56k modems?  Im not 
talking about cable modems, but just regular modems [these are not external 
USB winmodems] 


Thanks.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: usb 56k modem support?

2003-01-17 Thread fbsdq

Supra Express 56k 

what is the brand/model number of the modem? 

-Original Message-
From: fbsdq [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 17, 2003 3:23 PM
To: [EMAIL PROTECTED]
Subject: usb 56k modem support? 

Hello,
Does FreeBSD have support for any external USB 56k modems?  Im not 
talking about cable modems, but just regular modems [these are not external 
USB winmodems]  

Thanks. 

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

login.conf tc=default

2003-01-17 Thread Hanspeter Roth

Hello,

I'm trying to setup an alternate welcome file for a specific user.
I have the following entry in login.conf:

user:\
:welcome=/etc/resolv.conf:\
:tc=default:

But the user is presented the default /etc/motd at login.
How will he see /etc/resolv.conf?

-Hanspeter

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: usb 56k modem support?

2003-01-17 Thread fbsdq


Hello,
  Does FreeBSD have support for any external USB 56k modems?  Im not
talking about cable modems, but just regular modems [these are not
external USB winmodems] 

To append to this...does anyone know of a good cheap pretty small modem pool 
for multiple dial up accounts? I was asking about USB modems because we have 
them, but if I can get some good/fairly cheap modem rack/pool to use instead 
that will work even better. 

Thanks. 


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: login.conf tc=default

2003-01-17 Thread Joe Marcus Clarke

On Fri, 2003-01-17 at 16:43, Hanspeter Roth wrote:
 Hello,
 
 I'm trying to setup an alternate welcome file for a specific user.
 I have the following entry in login.conf:
 
 user:\
   :welcome=/etc/resolv.conf:\
   :tc=default:
 
 But the user is presented the default /etc/motd at login.
 How will he see /etc/resolv.conf?

After you modified this, did you run cap_mkdb?

Joe

 
 -Hanspeter
 
 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message
-- 
PGP Key : http://www.marcuscom.com/pgp.asc




To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: installing win2k after Freebsd?

2003-01-17 Thread Giorgos Keramidas

On 2003-01-17 10:02, Dan Aiello [EMAIL PROTECTED] wrote:
  There are 3 ways listed in the FAQ for this very problem.  In the
  past, I have recommended a fourth way in a followup of mine in this
  list.  Have you tried one of them.  Which one?

 Man! Where were you two days ago when I needed this info? I partially
 overwrote my BSD installation because I couldn't figure that out. I knew
 there was a way to do that. What I needed what the boot0cfg command...
 Better late than never, I suppose. At least I'll know for next time.

 I've been looking in the FAQ and can't find the part that tells me what
 you had in that e-mail. Could you please tell me where specifically to
 find it?

There is one question-and-answer entry in the FAQ about this.  Look for:

Windows 95/98 killed my boot manager!  How do I get it back?

in the Installation chapter of the FAQ.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Crontab and jobs

2003-01-17 Thread Gerard Samuel

Im trying to setup a cron job to back up my db.
If I manually execute the script it works fine, but the cron job isn't 
executing the job.

## Backup PostgreSQL database
*/1*   *   *   *   /root/bin/pgsql-back2  
/dev/null  /dev/null

Anyone notice anything with this crontab entry???


--
Gerard Samuel
http://www.trini0.org:81/
http://dev.trini0.org:81/



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Crontab and jobs

2003-01-17 Thread Ceri Davies

On Fri, Jan 17, 2003 at 05:35:47PM -0500, Gerard Samuel wrote:
 Im trying to setup a cron job to back up my db.
 If I manually execute the script it works fine, but the cron job isn't 
 executing the job.
 
 ## Backup PostgreSQL database
 */1*   *   *   *   /root/bin/pgsql-back2  
 /dev/null  /dev/null
 
 Anyone notice anything with this crontab entry???

Show us the script.
It's probably your path.

Ceri
-- 
Remember the tome of the brethren!

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Crontab and jobs

2003-01-17 Thread Gerard Samuel

#!/bin/sh
#
# To back up PostgreSQL database
#

date=`date '+%Y%m%d-%H%M%S'`

pg_dump -cO -U user database  /root/db_back/pgsql-$date.sql


Ceri Davies wrote:


On Fri, Jan 17, 2003 at 05:35:47PM -0500, Gerard Samuel wrote:
 

Im trying to setup a cron job to back up my db.
If I manually execute the script it works fine, but the cron job isn't 
executing the job.

## Backup PostgreSQL database
*/1*   *   *   *   /root/bin/pgsql-back2  
/dev/null  /dev/null

Anyone notice anything with this crontab entry???
   


Show us the script.
It's probably your path.

Ceri
 


--
Gerard Samuel
http://www.trini0.org:81/
http://dev.trini0.org:81/



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Crontab and jobs

2003-01-17 Thread Gerard Samuel

Thanks to James and Ceri.
Use the full path to pg_dump - /usr/local/bin/pg_dump

Works now.

Gerard Samuel wrote:


#!/bin/sh
#
# To back up PostgreSQL database
#

date=`date '+%Y%m%d-%H%M%S'`

pg_dump -cO -U user database  /root/db_back/pgsql-$date.sql


Ceri Davies wrote:


On Fri, Jan 17, 2003 at 05:35:47PM -0500, Gerard Samuel wrote:
 

Im trying to setup a cron job to back up my db.
If I manually execute the script it works fine, but the cron job 
isn't executing the job.

## Backup PostgreSQL database
*/1*   *   *   *   /root/bin/pgsql-back
2  /dev/null  /dev/null

Anyone notice anything with this crontab entry???
  


Show us the script.
It's probably your path.

Ceri
 




--
Gerard Samuel
http://www.trini0.org:81/
http://dev.trini0.org:81/



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

Re: Crontab and jobs