sasl server file not found
Hi, Postfix 2.1 cyrus-sasl2 and cyrus-sasl2-authd configured for authenticated smtp on a 5.2.1 box. I'm getting an error: "Can not connect to sasl2, server not found." In my rc.conf i have: saslauthd_enable="YES" saslauthd_flags="-a getpwent" and in my /usr/local/lib/sasl2/smtpd.conf file i have: pwcheck_method: saslauthd during startup i do see the message "Starting saslauthd" without any errors, any ideas? Thanks. Dave. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: [Fwd: /etc/hosts and /etc/host.conf confusion]
> -Original Message- >On Behalf Of David Fuchs > bump. At the very least perhaps someone could point me to some docs > that give a good explanation? > Hello, > > I'm having some difficulties understanding the > semantics behind the > resolver in FreeBSD, and how /etc/host.conf, /etc/hosts, and > /etc/resolv.conf fit together. [snip] Have you tried looking at the man page for each? The command to view the man page for the above is, respectively: # man host.conf # man hosts # man resolv.conf This should explain the exact function of each. In conclusion, read the man page first, and allow more than one hour and four minutes (1:04:00) between your original message and a bump. I don't check the email this list is directed to for a day or so sometimes. Some people are very quick to respond, others can take days. I have, on rare occaisions, waited over a week for a legit response. Be patient. -- Found on Conan O'Brian: Children's books written by celebrities; By Mel Gibson: Jesus Christ and the Terrible, Horrible, No Good, Very Bad Day. - Keep your powder dry and your pecker hard and the world WILL turn. - Eric F Crist ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: [Fwd: /etc/hosts and /etc/host.conf confusion]
On Jul 2, 2004, at 20:39, David Fuchs wrote: # $FreeBSD: src/etc/host.conf,v 1.6 1999/08/27 23:23:41 peter Exp $ # First try the /etc/hosts file hosts # Now try the nameserver next. bind # If you have YP/NIS configured, uncomment the next line # nis That's typical. Considering that 'hosts' is listed first, I would expect that any entries I add to /etc/hosts will take precedence over entries retrieved from bind. So, I added an entry to this file for a random IP-to-name mapping, and tested it with the 'host(1)' command, and it failed. When I enable debugging, it clearly shows that it's consulting the first nameserver listed in resolv.conf (an external host), no mention of a hosts file anywhere (or attempt to send a request to the local host) Try ping; even if the host isn't available you can see if it resolves. "host" does it's own thing, which is sometimes non-obvious (to me at least). Look at the sections in man host about the variables it expects to be configured. Additionally, what classifies as 'when the name server is not running' - does this mean that /etc/hosts is used when all the nameservers listed in /etc/resolv.conf are unavailable? (As I only use the local named(8) daemon to host my personal domain, not for everyday recursive lookups.) Or does it literally refer to when my local copy of named(8) is not in the process list? The latter. For example, many workstations aren't configured to run named at all; they'll still reference their local hosts file. KeS ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
[Fwd: /etc/hosts and /etc/host.conf confusion]
bump. At the very least perhaps someone could point me to some docs that give a good explanation? Original Message Subject: /etc/hosts and /etc/host.conf confusion Date: Tue, 22 Jun 2004 11:40:10 -0700 From: David Fuchs <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Hello, I'm having some difficulties understanding the semantics behind the resolver in FreeBSD, and how /etc/host.conf, /etc/hosts, and /etc/resolv.conf fit together. The manpage 'host.conf(5)' states: "The host.conf file holds part of the configuration for the resolver of FreeBSD. It describes what services (e.g., DNS or yp(8)) the C library resolving routines (like gethostbyname(3)) will use, and their order of use, when resolving host names or addresses." Well that explanation sounds good to me. My /etc/host.conf file looks like this: # $FreeBSD: src/etc/host.conf,v 1.6 1999/08/27 23:23:41 peter Exp $ # First try the /etc/hosts file hosts # Now try the nameserver next. bind # If you have YP/NIS configured, uncomment the next line # nis Considering that 'hosts' is listed first, I would expect that any entries I add to /etc/hosts will take precedence over entries retrieved from bind. So, I added an entry to this file for a random IP-to-name mapping, and tested it with the 'host(1)' command, and it failed. When I enable debugging, it clearly shows that it's consulting the first nameserver listed in resolv.conf (an external host), no mention of a hosts file anywhere (or attempt to send a request to the local host). As an addition to this, the manpage 'hosts(5)' states the following: "When using the name server named(8), this file provides a backup used when the name server is not running." Would someone please clarify this, as it seems to contradict my default 'host.conf(5)' file in /etc, which configures the resolver to consult /etc/hosts *before* bind (this behaviour is, of course, stated in the host.conf manpage). Additionally, what classifies as 'when the name server is not running' - does this mean that /etc/hosts is used when all the nameservers listed in /etc/resolv.conf are unavailable? (As I only use the local named(8) daemon to host my personal domain, not for everyday recursive lookups.) Or does it literally refer to when my local copy of named(8) is not in the process list? Thanks in advance for clearing things up for me. -- -David Fuchs ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Getting swap info without kvm access
In the last episode (Jul 02), [EMAIL PROTECTED] said: > I've written an Afterstep applet that retrieves and displays > different time and system information. The Linux port uses a few > functions like gmtime() and gethostname() and reads most of the info > from /proc files. The FreeBSD port used the function calls and gets > most of the info from sysctl() calls, except for the swap space. As > written now, that info is retrieved with kvm_getswapinfo(). The > problem is that that function requires access to /dev/mem which isn't > available without sgid privileges. The current work-around is to > display 0 for swap space if the applet is running un-privileged. > > I've searched and browsed the mailing lists, I've poured over the > .h's, .c's, sysctl -a and man pages for weeks but I'm stumped. Is > there some way to get total and either free or used swap space > without using /dev/mem? If not, why is that one piece of info not > available through a sysctl() call? It is in 5.x. The kvm_getswapinfo() function reads the vm.swap_info sysctl when getting status on a live system. You'll just have to install the applet setgid kmem to get swap info on 4.x. -- Dan Nelson [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Getting swap info without kvm access
I've written an Afterstep applet that retrieves and displays different time and system information. The Linux port uses a few functions like gmtime() and gethostname() and reads most of the info from /proc files. The FreeBSD port used the function calls and gets most of the info from sysctl() calls, except for the swap space. As written now, that info is retrieved with kvm_getswapinfo(). The problem is that that function requires access to /dev/mem which isn't available without sgid privileges. The current work-around is to display 0 for swap space if the applet is running un-privileged. I've searched and browsed the mailing lists, I've poured over the .h's, .c's, sysctl -a and man pages for weeks but I'm stumped. Is there some way to get total and either free or used swap space without using /dev/mem? If not, why is that one piece of info not available through a sysctl() call? Details about the applet including screen shots, an on-line man page and the source tar-ball are available at: http://www.mthoodcards.com/cgi-bin/index.py?grania It's the 1.2.0 version below the "The latest version." screen shot. The earlier 1.0.0 version at the is also available on http://www.tigr.net. Tricia ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: strange pw behaviour
On Jul 2, 2004, at 6:47 AM, Jonas Sonntag wrote: must ask again... I'm still stuck with this. It's pretty weird. I have 10 directories each owned by a unique group. All 10 directories are set 750. The groups have been added using pw and user www has been made a member of every group by using pw. This has worked a hundred times. Information is correct in /etc/group. How many groups is the www user in? By default, the system only permits a user to belong to up to 16 groups... -- -Chuck ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
postfix postmap, when to use
Hello, I've got a confusion issue, regarding postfix's postmap and when to use it. I've read some documentation that suggests you don't need to run it when making regexp or pcre map types such as in header_checks, yet the header_checks file supplied with postfix 2.1 suggests to run it. In addition hash and other types i'm similar confused. Has this changed from 2.0 to 2.1? Thanks. Dave. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: sshd:
mm... no, I dont' think so . Best Regards, :-) On Fri, 2 Jul 2004, Skylar Thompson wrote: On Thu, Jul 01, 2004 at 09:46:16PM -0400, [EMAIL PROTECTED] wrote: I exec /usr/sbin/sshd, but got "Privilege separation user sshd does not exist" but I do have, in the /etc/group: sshd:*:22: and with vipw: sshd:*:22:22::0:0:Secure Shell Daemon:/var/empty:/sbin/nologin is there anything I missed? Are you using any kind of other password database, like NIS? -- -- Skylar Thompson ([EMAIL PROTECTED]) -- http://www.cs.earlham.edu/~skylar/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: [WAAAY OT]
On Thu, 2004-07-01 at 20:43, Eric Crist wrote: > That's it! Reason for my question was that a buddy asked me as a trivia > question. Bet me $50 I couldn't figure it out (we both agreed any > method I could use was OK) by the time he left for Vancouver, WA > tomorrow morning. > > Thanks guys. > > > > Eric F Crist > President > AdTech Integrated Systems, Inc > (612) 998-3588 > > > > > -Original Message- > > From: Baron Fujimoto [mailto:[EMAIL PROTECTED] > > Sent: Thursday, July 01, 2004 7:45 PM > > To: Eric Crist > > Subject: RE: [WAAAY OT] > > > > > > ahh, I didn't realize that's what you were asking. I've seen > > at least one reference that speculates that "I" was for > > Intensity, though even there they acknowledge dispute over > > the etymology. I always just assumed it was a standard > > chosen to minimize ambiguity with many other common physical > > properties. > > > http://www.allaboutcircuits.com/vol_1/chpt_2/1.html > > On Thu, 1 Jul 2004, Eric Crist wrote: > > : Thanks for all your responses, but I still don't have the information > : I'm seeking. The letter I in Ohm's Law is short for an english word, > : such as E is short for Electromotive Force (or Voltage), and R is > short > : for Resistance. > : > : > : > -Original Message- > : > From: Luke [mailto:[EMAIL PROTECTED] > : > Sent: Thursday, July 01, 2004 7:24 PM > : > To: Eric Crist > : > Cc: [EMAIL PROTECTED] > : > Subject: Re: [WAAAY OT] > : > > : > > : > > : > > Anyone know what the ACTUAL definition/word for I in Ohm's > : > Law is? I > : > > know: > : > > > : > > E= Electromotive Force > : > > R= Resistance > : > > I= ? (I know it's amperage, but what does I mean?) > : > > : > Impedance > > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" I am afraid it doesn't stand for impedance. It is the symbol used for current throughout electromagnetic theory, and I don't think it does stand for an English word. Your are right it is off topic! ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: make buildworld: build changes only?
On 01-Jul-2004 Geert Hendrickx wrote: > Hi, > > I'm keeping track of -STABLE on semi-regular basis. But when I cvsup > to the latest sources and do make buildworld, it always starts to > rebuild the world entirely from scratch. That's somewhat frustrating, > especially if cvsup showed only a screenful of changes. > > Is it possible to rebuild these changes only? I know I could cd to > the directory of each changed file and do a make install there, but > that is of course not quite practical. I suppose this could be > automated, since this was exactly the design principle of make: > rebuild changed sources only. make -DNOCLEAN buildworld See /usr/src/Makefile.inc1 for all the various switches that are available. You may want to set some of them permanently in /etc/make.conf. Just do be aware that doing this can lead to trouble sometimes. -- Conrad J. Sabatier <[EMAIL PROTECTED]> -- "In Unix veritas" ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
TeamSpeak Client and Enemy Territory
Hi, I'm having a bit of a trouble trying to use teamspeak client and playing enemy territory or wolfenstein. Since both use /dev/dsp, if I start teamspeak and go to ET, et will be soundless; vice-versa. I tried to change the sound device on teamspeak to dsp0.1 but to no avail. My next guess was going to enable the sound server (FreeBSD 5.2.1 Gnome 2.6), but had no time to try it. My other guess was creating a dsp2 device, but MAKEDEV is gone on 5.2.1 and I couldn't find a way to do this. On a side request, people complain my voice is too faint on teamspeak. i have mixer rec/mic @ 100 and on ts the output volume is maxed. Is there any kind of mic boost on freebsd? Regards, Hugo ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: cvsupdate and make totally hoses the system
yes.. this explains it. I need to be more carefull with my reading. On Fri, Jul 02, 2004 at 04:14:25PM -0700, Kris Kennaway wrote: > On Fri, Jul 02, 2004 at 03:28:29PM -0700, David Bear wrote: > > I've done this twice now.. I install a clean 4.10-Release from ftp. > > I install cvsupdate without gui. I create my cvsupdate file in etc > > and run cvsupdate. > > > > then per instructions from the website > > # make buildworld > > # make buildkernel > > # make installkernel > > # reboot > > > > You should boot in single user mode (using boot -s from loader prompt > > for example). Then run: > > > > # mergemaster -p > > # make installworld > > > > == > > I cvsup to releng_4_10. > > > > the first hiccup comes with mergemaster as there are new accounts > > created for pf. thats fine. I just merge the new accounts. > > You're actually trying to update your system to 5.2-CURRENT. This is > because you're using the wrong cvsupfile: > > > *default tag=RELENG_4_10 > > > > *default tag=. > > ports-all tag=. > > src-all tag=. > ^ You've overridden the RELENG_4_10 tag and specified > that you want the top of the source tree, i.e. -CURRENT. > > Kris -- David Bear phone: 480-965-8257 fax:480-965-9189 College of Public Programs/ASU Wilson Hall 232 Tempe, AZ 85287-0803 "Beware the IP portfolio, everyone will be suspect of trespassing" ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: make buildworld: build changes only?
On 2004-07-02 00:54, Geert Hendrickx <[EMAIL PROTECTED]> wrote: > Is it possible to rebuild these changes only? I know I could cd to the > directory of each changed file and do a make install there, but that is > of course not quite practical. I suppose this could be automated, since > this was exactly the design principle of make: rebuild changed sources > only. > > I know this might brake some dependencies in some cases, but I expect > this to be rare. I could still do a "full" buildworld when necessary. Not if the 'partial build' produces a system that's not working good enough to do a full buildworld though :( If you know what you're doing, it's possible -- most of the time -- to get away with something like this: $ cd /usr/src $ cvs -qR up -APd $ cd usr.bin/foo/ $ make clean all install But this isn't guaranteed to always work and it cannot be automated in the way that you might be thinking of (i.e. run a couple of commands and let everything magically fall into place). The most automated way of building stuff is practically a crontab script that runs: if [ ! -f /root/.noautobuildworld ]; then cvsup -g -L 2 -h cvsup-server.example.net /root/supfile cd /usr/src && \ make buildworld fi Output shall be mailed to root, since this is called from crontab, and you'll be able to `touch /root/.noautobuildworld' to inhibit automatic buildworlds and use the last known good build from /usr/obj to install your system with `make installworld' as usual. HTH, Giorgos ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
core dump location
*This message was transferred with a trial version of CommuniGate(tm) Pro* 5.2.1-RELEASE I tried using this command to change the location where my core dump is being written: sysctl kern.corefile="/var/coredumps/%U/%N.core" After doing that, new core dumps didn't show up there. I tried creating the directory (wasn't sure if it would be created with the first core dump or not) and chmod it to 0777 just to make sure it was writeable by any process - still no core dumps there. Is there a way to put it back the way it was, where the core dump ends up in the working directory as programname.core ? Thanks, Chris _ Email harvesters eat this: [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: cvsupdate and make totally hoses the system
On Fri, Jul 02, 2004 at 03:28:29PM -0700, David Bear wrote: > I've done this twice now.. I install a clean 4.10-Release from ftp. > I install cvsupdate without gui. I create my cvsupdate file in etc > and run cvsupdate. > > then per instructions from the website > # make buildworld > # make buildkernel > # make installkernel > # reboot > > You should boot in single user mode (using boot -s from loader prompt > for example). Then run: > > # mergemaster -p > # make installworld > > == > I cvsup to releng_4_10. > > the first hiccup comes with mergemaster as there are new accounts > created for pf. thats fine. I just merge the new accounts. You're actually trying to update your system to 5.2-CURRENT. This is because you're using the wrong cvsupfile: > *default tag=RELENG_4_10 > > *default tag=. > ports-all tag=. > src-all tag=. ^ You've overridden the RELENG_4_10 tag and specified that you want the top of the source tree, i.e. -CURRENT. Kris pgpv6ZMFiWgIQ.pgp Description: PGP signature
Re: [OT] fetchmail, procmail and mutt (oh my!)
> Problem: > If I put 'mda /usr/local/bin/procmail' in the .fetchmailrc lines, > procmail puts the emails in the correct mbox files; but mutt complains > that the files are not valid email files and refuses to read them. Make it 'mda "/usr/local/bin/procmail -d %T"' and it'll work fine. Without the -d paramater, procmail just appends the mail to your mbox, without inserting a From-line ontop. If your mail goes from fetchmail via sendmail to procmail, then sendmail will take care of the From-line. If your mail goes from fetchmail to procmail directly (as you instructed with the mda command), procmail must do it. It's told to do so with -d %T. GH ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: make buildworld: build changes only?
On Fri, Jul 02, 2004 at 12:54:53AM +0200, Geert Hendrickx wrote: > Hi, > > I'm keeping track of -STABLE on semi-regular basis. But when I cvsup to > the latest sources and do make buildworld, it always starts to rebuild > the world entirely from scratch. That's somewhat frustrating, > especially if cvsup showed only a screenful of changes. > > Is it possible to rebuild these changes only? I know I could cd to the > directory of each changed file and do a make install there, but that is > of course not quite practical. I suppose this could be automated, since > this was exactly the design principle of make: rebuild changed sources > only. > > I know this might brake some dependencies in some cases, but I expect > this to be rare. I could still do a "full" buildworld when necessary. > > Any suggestions? The only safe way to rebuild is with the full documented cycle that includes a buildworld. "Unsafe" means "may leave you with an unusable system". If you want to play around with other make targets you can indeed short-cut the build process a lot of the time, but you're expected to be advanced enough to recover your system on your own when you damage something, and that pretty much means being able to figure out how to use the make shortcuts on your own :-) Kris pgpaGT5f1gOX2.pgp Description: PGP signature
SIGURG
I have a fairly active program that forks and uses pipes to communicate back to the parent before exiting. When I go to wait() on the child, occasionally the status is signaled - SIGURG instead of exit()ing normally. It appears the child process is doing everything it needs to be doing. What will generate this signal? Is it safe to ignore, or should I be handling it somehow? This is running on 4.10 ... -- Matthew George SecureWorks Technical Operations ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Syntax error-please
I have already posted a query about syntax errors in pccard.conf. Nobody responded to my most recent request. I would appreciate any help. The pccard.conf that ships with 4.8 yields syntax error messages when trying to configure my pcmcia card. Is there a problem with the following code? # Farallon EtherMac card "Farallon" "ENet" config auto "ep" ? insert /etc/pccard_ether $device start remove /etc/pccard_ether $device stop I will appreciate any help--I haven't had any luck Googling. Thanks, Ted Parks ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: cvsupdate and make totally hoses the system
On Fri, 02 Jul 2004 15:28:29 -0700 David Bear <[EMAIL PROTECTED]> wrote: > I've done this twice now.. I install a clean 4.10-Release from ftp. > I install cvsupdate without gui. I create my cvsupdate file in etc > and run cvsupdate. > > then per instructions from the website > # make buildworld > # make buildkernel > # make installkernel > # reboot > > You should boot in single user mode (using boot -s from loader prompt > for example). Then run: > > # mergemaster -p > # make installworld > > == > I cvsup to releng_4_10. > > the first hiccup comes with mergemaster as there are new accounts > created for pf. thats fine. I just merge the new accounts. > > the second hiccup comes with the first invocation of make > installworld. It dies telling me there is no hints file. So I copy > GENERIC.hints to /boot and rerun. Then after a lot of work, make > installworld dies with a core dump. And, now I have a completely > unusable system. Everything is does with the same error -- my binary > and kernel and libs our completely out of sync. > > I made two changes to make.conf (set usa resident, set noprofile). > my cvsufile is below. > > where am I going wrong? > > --- > *default host=cvsup10.FreeBSD.org > *default base=/usr/local/etc/cvsup > *default prefix=/usr > *default release=cvs delete use-rel-suffix > *default tag=RELENG_4_10 > > *default tag=. > ports-all tag=. > src-all tag=. > - > heya David, is everything between the lines above in the same file? if so, my guess (not 100% sure) would be that you've got 'default tag' specified twice. i'm not sure which one cvsup is reading, but if it is the second, you're inadvertently supping CURRENT, not 4.10. are you able to boot up, adjust that sup file, and cvsup again? through the boot commands (where you do boot -s), you can unload the kernel that is installed and load the previous one KERNEL.old. this may help. if not, do you have a rescue disc? sorry, but i'm not sure what else to suggest at this point. > > -- > David Bear > phone:480-965-8257 > fax: 480-965-9189 > College of Public Programs/ASU > Wilson Hall 232 > Tempe, AZ 85287-0803 > "Beware the IP portfolio, everyone will be suspect of trespassing" > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Gnome installing Mozilla by default
On Fri, 02 Jul 2004 01:21:19 -0400 Bruce Hunter <[EMAIL PROTECTED]> wrote: > On Thu, 2004-07-01 at 23:50, epilogue wrote: > > On Thu, 01 Jul 2004 22:40:08 -0400 > > Bruce Hunter <[EMAIL PROTECTED]> wrote: > > > > > On Thu, 2004-07-01 at 16:45, epilogue wrote: > > > > On Thu, 1 Jul 2004 10:46:04 -0700 > > > > Dan Finn <[EMAIL PROTECTED]> wrote: > > > > > > > > > On Thu, 1 Jul 2004 12:03:37 -0400, epilogue > > > > > <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > > On Thu, 01 Jul 2004 07:04:47 -0400 > > > > > > Aaron Walker <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > > > Roop Nanuwa wrote: > > > > > > > > > > > > > > > I'll join in on the praise for Opera. It really is the best > > > > > > > > web browser that's extremely light but still has all the > > > > > > > > "modern day" features one would expect from a web browser > > > > > > > > and then some. I will warn you about a couple of things, > > > > > > > > though. > > > > > > > > > > > > > > > > 1] The native FreeBSD version is not going to run Flash. > > > > > > > > I've pulled out many, many hairs about this but have never > > > > > > > > gotten the two to work together. If you want to view Flash, > > > > > > > > then install the linux-opera port. > > > > > > > > 2] You'll be spoiled after using Opera for any length of > > > > > > > > time. I've been using Opera for a long time and I simply > > > > > > > > can't tolerate any other browsers. The feature set it > > > > > > > > provides is so expansive that other browsers will seem > > > > > > > > utterly gutted in comparison. Ever use vi for a while and > > > > > > > > then notice that random':w' or ':wq' start appearing in > > > > > > > > places where they shouldn't because you've gotten so used > > > > > > > > to the commands? Same idea here. 3] The default interface > > > > > > > > is not for everyone. Just realize that the interface is > > > > > > > > highly configurable so don't let it turn you off if it's > > > > > > > > not to your liking. > > > > > > > > > > > > > > > > --roop > > > > > > > > > > > > > > Just curious, but which version of flash are you using with > > > > > > > Opera? I did a search of the ports tree and found quite a > > > > > > > few flash ports and was confused on which one to install. > > > > > > > > > > > > > > > > > > > um, this one... > > > > > > > > > > > > ~> pkg_info | grep -i flash > > > > > > > > > > > > linux-flashplugin-7.0r25 The official Macromedia Flash Player > > > > > > for Linux Mozilla and > > > > > > > > > > > > hth, > > > > > > epi > > > > > > > > > > > > > > > > all this talk of opera got me interested so I thought I would go > > > > > ahead and install it. > > > > > > > > > > a "make install" of /usr/ports/www/linux-opera seemed to work > > > > > fine. I get this when I try and run it: > > > > > > > > > > [ dfinn @ stewie : ~] : linux-opera > > > > > opera: Could not initialize spell checker interface. File not > > > > > found or could not be opened (-7) > > > > > Segmentation fault (core dumped) > > > > > > > > well, i've never run into this problem before, but the ports have a > > > > tendency to change from day to day and funny things can happen. > > > > > > > > my guess is that the linux-aspell (ports/textproc) dependency > > > > wasn't installed. try adding that and see what happens. > > > > > > > > also, just to be certain, do you have one of the linux-base ports > > > > installed and linux_enable="YES" in /etc/rc.conf? if not, this > > > > will definitely cause you all sorts of grief. if you end up > > > > installing a linux-base and adding that setting to rc.conf, just be > > > > aware that it will take a reboot(or some other less drastic > > > > wizardry that i don't know) in order for the new rc.conf setting to > > > > take effect. > > > > > > > > for the record, i'm using linux_base-8 and haven't had any problems > > > > whatsoever. some ports (acroread, for example) will ask for a > > > > different linux_base version but will install anyway. after the > > > > install of any such program, you just pkgdb -Fu and tell it to > > > > depend upon the version you have installed. > > > > > > > > give all this a shot and let us know what comes of it. i'm not > > > > sure that i've hit upon 'your' problem, but i've got my fingers > > > > crossed. > > > > > > > > > > > I got linux-opera installed and working. Then I installed > > > linux-flashplugin-7.0r25, and opera shows it in its plugin list, but > > > when I go to view a flash site, the flash is a blank area. I no > > > longer get the message telling me I haven't got flash installed. > > > > hello again, > > > > well, jsyk, the flash plugin doesn't work 100% of the time. so far, i > > haven't bumped into too many problematic sites, however ymwv. > > > > please send me the URL you're visiting. i'll give it a whirl on my end > > and let you know what kind of results i get. if it doesn't work on my > > end, we'll probably both have to wait for the next version of fl
cvsupdate and make totally hoses the system
I've done this twice now.. I install a clean 4.10-Release from ftp. I install cvsupdate without gui. I create my cvsupdate file in etc and run cvsupdate. then per instructions from the website # make buildworld # make buildkernel # make installkernel # reboot You should boot in single user mode (using boot -s from loader prompt for example). Then run: # mergemaster -p # make installworld == I cvsup to releng_4_10. the first hiccup comes with mergemaster as there are new accounts created for pf. thats fine. I just merge the new accounts. the second hiccup comes with the first invocation of make installworld. It dies telling me there is no hints file. So I copy GENERIC.hints to /boot and rerun. Then after a lot of work, make installworld dies with a core dump. And, now I have a completely unusable system. Everything is does with the same error -- my binary and kernel and libs our completely out of sync. I made two changes to make.conf (set usa resident, set noprofile). my cvsufile is below. where am I going wrong? --- *default host=cvsup10.FreeBSD.org *default base=/usr/local/etc/cvsup *default prefix=/usr *default release=cvs delete use-rel-suffix *default tag=RELENG_4_10 *default tag=. ports-all tag=. src-all tag=. - -- David Bear phone: 480-965-8257 fax:480-965-9189 College of Public Programs/ASU Wilson Hall 232 Tempe, AZ 85287-0803 "Beware the IP portfolio, everyone will be suspect of trespassing" ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Converting crypted passwords
The whole point of md5 digests is that you can't recover the password
from it, you can only match it against the md5-sum of a given password.
So I guess you cannot convert it to other formats without knowing the
password itself.
GH
On Fri, Jul 02, 2004 at 10:32:14AM +0200, Frank Altpeter wrote:
>
> Hi there,
>
> I'm wrestling with a converting problem for a couple of days now,
> but i didn't find a solution yet. Perhaps one of the crypting gurus
> here can give me a hint...
>
>
> Given is a system with md5 style passwords like that:
>
> $1$d61CkkOZ$BE/TofmL5h9gtfxKI6Vcy1
>
> (This can be generated by "openssl passwd -1 -salt d61CkkOZ test")
>
> Without knowing the password, i need to convert it to base64 encoded
> binary md5 digest style for using with ProFTP+mod_sql:
>
> {md5}CY9rzUYh03PK3k6DJie09g==
>
> (This can be generated by "printf '{md5}' ; printf 'test' | openssl dgst -binary
> -md5 | openssl enc -base64").
>
>
> The problem i have to solve is, how to convert the first encryption
> type into the second encryption type without having the plaintext
> password in between.
>
>
> With kind regards,
>
> Frank Altpeter
>
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Gigabit Adaptors
On Thu, Jul 01, 2004 at 10:53:11AM -0500, Michael Clark wrote: > After my recent disagreements with the em0 Intel MT adaptor, I have decided > to order something else for my FreeBSD use. > Anyone have any good suggestions for cards that they prefer to use in 5.x? I've had good experience with the Broadcom gigabit adapters. The ones I'm using are integrated, but I'm sure their cards are just as good. They're supported by the bge kernel driver. -- -- Skylar Thompson ([EMAIL PROTECTED]) -- http://www.cs.earlham.edu/~skylar/ pgpf68N7xPTHF.pgp Description: PGP signature
Re: sshd:
On Thu, Jul 01, 2004 at 09:46:16PM -0400, [EMAIL PROTECTED] wrote: > I exec /usr/sbin/sshd, but got "Privilege separation user sshd does not > exist" > but I do have, in the /etc/group: > sshd:*:22: > and with vipw: > sshd:*:22:22::0:0:Secure Shell Daemon:/var/empty:/sbin/nologin > > > is there anything I missed? Are you using any kind of other password database, like NIS? -- -- Skylar Thompson ([EMAIL PROTECTED]) -- http://www.cs.earlham.edu/~skylar/ pgpKIOWmlY3vX.pgp Description: PGP signature
Re: port upgrades
On Wed, Jun 30, 2004 at 02:22:07PM -0500, Chris wrote: > 5.2.1-RELEASE > > I've started using 'portupgrade' to update several ports to the latest versions, but > have an odd problem when it comes to certain ports. > > For example: > > server# pkg_version -v | grep Spam > bsdpan-Mail-SpamAssassin-2.63 < needs updating (port has 2.63_2) > > server# portupgrade bsdpan-Mail-SpamAssassin > ---> Skipping 'mail/p5-Mail-SpamAssassin' because it is held by user (specify -f to > force) > server# portupgrade -f bsdpan-Mail-SpamAssassin Have you tried running "pkgdb -F"? -- -- Skylar Thompson ([EMAIL PROTECTED]) -- http://www.cs.earlham.edu/~skylar/ pgpocQYl8sBq6.pgp Description: PGP signature
Re: Question reguarding /etc/hosts
UDP works fine on the box. Alot of UDP traffic gets passed thru it daily. It is set up as a firewall/NAT box , but I dont block any traffic I dont see causing problems - Original Message - . From: "Giorgos Keramidas" <[EMAIL PROTECTED]> To: "j0sh" <[EMAIL PROTECTED]> Sent: Friday, July 02, 2004 1:33 PM Subject: Re: Question reguarding /etc/hosts > On 2004-07-02 13:20, j0sh <[EMAIL PROTECTED]> wrote: > >"Giorgos Keramidas" <[EMAIL PROTECTED]> wrote: > >>On 2004-07-02 01:45, j0sh <[EMAIL PROTECTED]> wrote: > >>> I have a quake 1 server installed on my 4.9 release box. it works when I > >>> disable UDP support, but it core dumps when its enabled. I was told to > >>> check the /etc/hosts and make sure there is an entry ther for my machine > >>> and its there. any reccomendations? > >> > >> Let's see if I got what you said correctly. > >> > >> It works when you disable UDP support in the quake server configuration, > >> right? > > > > yes that is correct > > . Do you have other UDP applications installed? > > . Do they work correctly? > > . Are you using any sort of firewall, > that might be blocking UDP packets? > > These are a few things I'd check if I were you. > > Giorgos > > PS: You should Cc: the list too when you get replies. This way if anyone has > the same question later he might find the answer in the list archives [ that > is, if he looks there, which a lot of people don't anyway :-( ]. > > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re[2]: port upgrades
*This message was transferred with a trial version of CommuniGate(tm) Pro* *This message was transferred with a trial version of CommuniGate(tm) Pro* >Have you tried running "pkgdb -F"? Yes, at some point. I did solve the problem: I finally deleted all packages that were installed directly from cpan, and added them back with the pkg_add command. Now all is well. It -seems- that adding things via cpan does not update the pkgdb like pkg_add or portupgrade does. Thanks, Chris ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
make buildworld: build changes only?
Hi, I'm keeping track of -STABLE on semi-regular basis. But when I cvsup to the latest sources and do make buildworld, it always starts to rebuild the world entirely from scratch. That's somewhat frustrating, especially if cvsup showed only a screenful of changes. Is it possible to rebuild these changes only? I know I could cd to the directory of each changed file and do a make install there, but that is of course not quite practical. I suppose this could be automated, since this was exactly the design principle of make: rebuild changed sources only. I know this might brake some dependencies in some cases, but I expect this to be rare. I could still do a "full" buildworld when necessary. Any suggestions? GH ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Reading from ATAPICAM DVD
I am attempting to use DVD::RIP to rip a DVD (or a piece of one). It tries to execute "tcprobe -H 10 -i /dev/cd0c" and fails with the error: [fileinfo.c:118] file read error: Invalid argument The code is "(read(fdes, buf, bytes)". (The value of bytes is 4.) I also log a system error of: dscheck(#cd/2): b_bcount 5 is not on a sector boundary (ssize 2048) Is this an ATAPICAM or ATA issue or is it required that reads start at a sector boundary? I assume that this code at least works on Linux systems and I had always assumed that, even though the disk must start a transfer at a sector boundary, the driver buffered the data to make it appear as a byte stream. Maybe I'm confused. Any suggestions on this are appreciated as I want to get a better idea of what is happening before a report the problem. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: [EMAIL PROTECTED] Phone: +1 510 486-8634 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: DataTraveler 2.0
I can't add much to this except to say that I have the exact same problem with a Kingston DataTraveler2.0 USB flash drive on a 4.10 system (I've tried upgrading to both -STABLE and -CURRENT, didn't help). Also, after plugging in and unplugging the DataTraveler, my USB printer stops responding. I'd be happy to help with any questions about configuration/hardware, though I lack the knowledge to try fixing the problem myself. David On Fri, 2 Jul 2004 01:18:37 +0200, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > Hi there > > I am currently having trouble with this compact flash card. > It's a Kingston DataTraveler 2.0 and everytime I plug it in I > get theses errors popping up. > > umass0: BBB reset failed, TIMEOUT > umass0: BBB bulk-in clear stall failed, TIMEOUT > umass0: BBB bulk-out clear stall failed, TIMEOUT > > this repeats about five times. > > any suggest on a solutions or any ideas on where I can start > looking for answers? > > Thanks > Grant > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Compatibility with VIA 6103/6306/6303 or Realtek 8201 Ethernet cards
> Some of the units we're considering have one of the following NIC > chipsets: > VIA 6103 > VIA 6303 > VIA 6306 > Realtek 8201 > > Looking through the hardware compatibility notes, as well as the man pages > for vr(4), ed(4), and rl(4) doesn't seem to confirm or deny whether any of > these units will work with FreeBSD (although it'd be a little overwhelming > to list every card that isn't supported in the docs ;) > > Anyway ... can anyone confirm whether or not any of these NICs are > supported in the 4.X line? I don't know if this will help Bill, but I've got a 6102... # dmesg [snipped] vr0: port 0xe800-0xe8ff mem 0xdc00-0xdcff irq 11 at device 18.0 on pci0 on: # uname -n [snipped] FreeBSD 4.10-STABLE #0: Fri Jun 25 13:25:15 EDT 2004 Regards, Steve > > -- > Bill Moran > Potential Technologies > http://www.potentialtech.com > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Compatibility with VIA 6103/6306/6303 or Realtek 8201 Ethernet cards
Hey, Having a little trouble ensuring hardware compatibility. Some of the units we're considering have one of the following NIC chipsets: VIA 6103 VIA 6303 VIA 6306 Realtek 8201 Looking through the hardware compatibility notes, as well as the man pages for vr(4), ed(4), and rl(4) doesn't seem to confirm or deny whether any of these units will work with FreeBSD (although it'd be a little overwhelming to list every card that isn't supported in the docs ;) Anyway ... can anyone confirm whether or not any of these NICs are supported in the 4.X line? -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: IP bandwidth
--- Michael Clark <[EMAIL PROTECTED]> wrote: > Bandwithd and IPaudit do a good job. I use both. > > Michael Clark > Nemschoff Chairs Inc > mclark at nemschoff dot com > CompTIA A+, Network+, Server+, MCP > Voice: (920) 457 7726 x294 > Fax: (920) 453 6594 > > > -Original Message- > From: Philip Payne [mailto:[EMAIL PROTECTED] > Sent: Friday, July 02, 2004 4:43 AM > To: Radu MOLNAR; Arek Czereszewski > Cc: [EMAIL PROTECTED]; John Lee > Subject: RE: IP bandwidth > > > > > John Lee wrote: > > > > > >> dear all, > > >> > > >> i'm using a freebsd 4.10-stable server with 50 > IP addresses. > > >> Is there any program i can install that will be > able to tell me: > > >> > > >> - how much bandwidth (ie. kbps) each individual > IP is using? > > >> > > >> trafcount seems to count total traffic only, > any idea? > > >> > > > > > > I.e. > > > ipfw + rrdtools or mrtg > > > from ports (net-mgnt): > > > netramet, bandwidthd > > > > Any of these make real time statistics like iptraf > under > > linux. I also > > need something like this for both general > interface > > (realtime) statistics > > and for traffic monitorring (i can use tcpdump for > this but > > it would be > > nice to have both caracteristics in one program). > > I've used /usr/ports/net-mgmt/darkstat in the past > on my home network. Its > pretty simplistic but it might be of use. > > Phil. > ___ Try Port: iftop-0.16 Path: /usr/ports/net-mgmt/iftop Info: Network utility for real-time bandwidth usage information Maint: [EMAIL PROTECTED] Index: net-mgmt pkg-descr- iftop provides real-time bandwidth usage information on a specified interface, listed by host pairs. WWW: http://www.ex-parrot.com/~pdw/iftop/ __ Do you Yahoo!? Yahoo! Mail is new and improved - Check it out! http://promotions.yahoo.com/new_mail ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
"The Complete FreeBSD": errata and addenda
The trouble with books is that you can't update them the way you can a web page or any other online documentation. The result is that most leading edge computer books are out of date almost before they are printed. Unfortunately, The Complete FreeBSD, published by O'Reilly, is no exception. Inevitably, a number of bugs and changes have surfaced. "The Complete FreeBSD" has been through a total of five editions, including its predecessor "Installing and Running FreeBSD". Two of these have been reprinted with corrections. I maintain a series of errata pages. Start at http://www.lemis.com/errata-4.html to find out how to get the errata information. Have you found a problem with the book, or maybe something confusing? Please let me know: I'm constantly updating it. Greg ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
How to get best results from FreeBSD-questions
How to get the best results from FreeBSD questions. === Last update $Date: 2003/03/09 22:09:31 $ This is a regular posting to the FreeBSD questions mailing list. If you got it in answer to a message you sent, it means that the sender thinks that at least one of the following things was wrong with your message: - You left out a subject line, or the subject line was not appropriate. - You formatted it in such a way that it was difficult to read. - You asked more than one unrelated question in one message. - You sent out a message with an incorrect date, time or time zone. - You sent out the same message more than once. - You sent an 'unsubscribe' message to FreeBSD-questions. If you have done any of these things, there is a good chance that you will get more than one copy of this message from different people. Read on, and your next message will be more successful. This document is also available on the web at http://www.lemis.com/questions.html. = Contents: I:Introduction II: How to unsubscribe from FreeBSD-questions III: Should I ask -questions, -newbies or -hackers? IV: How to submit a question to FreeBSD-questions V:How to answer a question to FreeBSD-questions I: Introduction === This is a regular posting aimed to help both those seeking advice from FreeBSD-questions (the "newcomers"), and also those who answer the questions (the "hackers"). Note that the term "hacker" has nothing to do with breaking into other people's computers. The correct term for the latter activity is "cracker", but the popular press hasn't found out yet. The FreeBSD hackers disapprove strongly of cracking security, and have nothing to do with it. In the past, there has been some friction which stems from the different viewpoints of the two groups. The newcomers accused the hackers of being arrogant, stuck-up, and unhelpful, while the hackers accused the newcomers of being stupid, unable to read plain English, and expecting everything to be handed to them on a silver platter. Of course, there's an element of truth in both these claims, but for the most part these viewpoints come from a sense of frustration. In this document, I'd like to do something to relieve this frustration and help everybody get better results from FreeBSD-questions. In the following section, I recommend how to submit a question; after that, we'll look at how to answer one. II: How to unsubscribe from FreeBSD-questions == When you subscribed to FreeBSD-questions, you got a welcome message from [EMAIL PROTECTED] In this message, amongst other things, it told you how to unsubscribe. Here's a typical message: Welcome to the freebsd-questions mailing list! If you ever want to remove yourself from this mailing list, you can send mail to "[EMAIL PROTECTED]" with the following command in the body of your email message: unsubscribe freebsd-questions Greg Lehey <[EMAIL PROTECTED]> Here's the general information for the list you've subscribed to, in case you don't already have it: FREEBSD-QUESTIONS User questions This is the mailing list for questions about FreeBSD. You should not send "how to" questions to the technical lists unless you consider the question to be pretty technical. Normally, unsubscribing is even simpler than the message suggests: you don't need to specify your mail ID unless it is different from the one which you specified when you subscribed. If Majordomo replies and tells you (incorrectly) that you're not on the list, this may mean one of two things: 1. You have changed your mail ID since you subscribed. That's where keeping the original message from majordomo comes in handy. For example, the sample message above shows my mail ID as [EMAIL PROTECTED] Since then, I have changed it to [EMAIL PROTECTED] If I were to try to remove [EMAIL PROTECTED] from the list, it would fail: I would have to specify the name with which I joined. 2. You're subscribed to a mailing list which is subscribed to FreeBSD-questions. If that's the case, you'll have to figure out which one it is and get your name taken off that one. If you're not sure which one it might be, check the headers of the messages you receive from freebsd-questions: maybe there's a clue there. If you've done all this, and you still can't figure out what's going on, send a message to [EMAIL PROTECTED], and he will sort things out for you. Don't send a message to FreeBSD-questions: they can't help you. III: Should I ask -questions, -newbies or -hackers? === Two mailing lists handle general questions about FreeBSD, FreeBSD-questions and FreeBSD-hackers. In addition, the FreeBSD-newbies l
Re: Newbie
On Friday 02 July 2004 00:03, [EMAIL PROTECTED] wrote: > Hi, > > I am new to this, just wandering if I could get some pointers in right > direction into learning this software from basics to gaining intermidiate > skills. > > I am a cisco engineer however want to learn the unix/linux too. > > any advice you can give me or what will help in learning BSD. > > Regards > > Chintan > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" If you want to learn more about FreeBSD, I would suggest that you read the newbie section, which is located here: http://www.freebsd.org/projects/newbies.html Cheers, Jorn ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
syntax error
The pccard.conf that ships with 4.8 yields syntax error messages when trying to configure my pcmcia card. Could someone help me correct the following code from pccard.conf that applies to my card? # Farallon EtherMac card "Farallon" "ENet" config auto "ep" ? insert /etc/pccard_ether $device start remove /etc/pccard_ether $device stop I will appreciate any help--I haven't had any luck Googling. Thanks, Ted Parks ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: AMD64 vs i386 for FreeBSD
Quoting David O'Brien <[EMAIL PROTECTED]>: On Wed, Jun 30, 2004 at 01:17:35AM -0400, Kenneth Culver wrote: Quoting Doug White <[EMAIL PROTECTED]>: >Me either. -current actually supports running i386 binaries in amd64 mode. >Thats one of the processor's features. :-) >You can't run amd64 binaries when booted into an i386 OS, of course. Yeah you can run x86 but you cant' go into regular 32 bit mode that's all. ENOPARSE, can you please restate this? I think what I meant is that once the kernel puts the CPU into "amd64" mode, it can't go back into regular x86 mode. It can run x86 binaries but it's not fully back in x86 mode, and I think some of the x86 instructions are gone in 64-bit mode, so it has to emulate them somehow. From what I understand 32-bit binaries run slightly slower when the cpu is in 64-bit mode because of this. From what I've read, you can't make a kernel go back into normal x86 mode until you reboot. You probably know about all this better than I do, it's been a long time since I read any tech specs for the cpu. Ken ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: AMD64 vs i386 for FreeBSD
On Wed, Jun 30, 2004 at 01:17:35AM -0400, Kenneth Culver wrote: > Quoting Doug White <[EMAIL PROTECTED]>: > >Me either. -current actually supports running i386 binaries in amd64 mode. > >Thats one of the processor's features. :-) > > >You can't run amd64 binaries when booted into an i386 OS, of course. > > Yeah you can run x86 but you cant' go into regular 32 bit mode that's all. ENOPARSE, can you please restate this? -- -- David ([EMAIL PROTECTED]) ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
usb audio
i'm having a problem with my usb audio. the sound is choppy, but if i move my usb mouse around it's normal. I found a similar problem in google but with no fix. Does anyone have any ideas? Controller /dev/usb0: addr 1: full speed, self powered, config 1, UHCI root hub(0x), Intel(0x), rev 1.00 port 1 addr 2: low speed, power 100 mA, config 1, Kensington USB Wheel Mouse(0x1012), Kensington(0x047d), rev 1.00 port 2 powered ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
4.10-RELEASE kernel build fails on alpha
I have successfully installed 4.10-RELEASE on a CPQ Alpha DS20E. (Kern-Developer packages) Then tried to build a new kernel, in order to get ccd supported. The steps were: 1. insert "pseudo-device ccd 4" into the kernel config, no other change was made 2. config 3 make depend It worked well so far, but then make has failed with the following: ... ld -Bshareable -o accf_data.ko setdef0.o accf_data.kld setdef1.o ===> accf_http cc -O -pipe -mcpu=ev4 -D_KERNEL -Wall -Wredundant-decls -Wnested- externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith - Winline -Wcast-qual -fformat-extensions -ansi -DKLD_MODULE - nostdinc -I- -I. -I@ -I/usr/include -mno-fp-regs -Wa,-mev56 -Wall - Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing- prototypes -Wpointer-arith -Winline -Wcast-qual -fformat-extensions - ansi -c /usr/src/sys/modules/accf_http/../../netinet/accf_http.c ld -r -o accf_http.kld accf_http.o gensetdefs accf_http.kld cc -O -pipe -mcpu=ev4 -D_KERNEL -Wall -Wredundant-decls -Wnested- externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith - Winline -Wcast-qual -fformat-extensions -ansi -DKLD_MODULE - nostdinc -I- -I. -I@ -I/usr/include -mno-fp-regs -Wa,-mev56 -Wall - Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing- prototypes -Wpointer-arith -Winline -Wcast-qual -fformat-extensions - ansi -c setdef0.c cc -O -pipe -mcpu=ev4 -D_KERNEL -Wall -Wredundant-decls -Wnested- externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith - Winline -Wcast-qual -fformat-extensions -ansi -DKLD_MODULE - nostdinc -I- -I. -I@ -I/usr/include -mno-fp-regs -Wa,-mev56 -Wall - Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing- prototypes -Wpointer-arith -Winline -Wcast-qual -fformat-extensions - ansi -c setdef1.c ld -Bshareable -o accf_http.ko setdef0.o accf_http.kld setdef1.o ===> agp touch opt_bus.h touch opt_pci.h @ -> /usr/src/sys ln: @/sys: File exists *** Error code 1 Stop in /usr/src/sys/modules/agp. *** Error code 1 Stop in /usr/src/sys/modules. *** Error code 1 Stop in /usr/src/sys/compile/GENERIC. cartman# I also have tried the same after commenting out the ccd line in the config, result was the same. Does anyone have an idea what it could be? Thanks, Attila ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problem with gateway and ipfw in FreeBSD 5.2
On Fri, Jul 02, 2004 at 11:23:05AM +0800, Tony Liew wrote: > My problem, from FreeBSD I can ping outside and inside network. > from Internal network, I can ping internal interface and external > interface of FreeBSD Router. But I cannot ping the modem IP address so > goes public DNS server on the internet. does "sysctl -w net.inet.ip.forwarding=1" help? hth toni -- Wer es einmal so weit gebracht hat, dass er nicht | toni at stderror dot at mehr irrt, der hat auch zu arbeiten aufgehoert| Toni Schmidbauer -- Max Planck | pgpZmkQfUuRue.pgp Description: PGP signature
Re: Traffic shaping
On Fri, 2004-07-02 at 07:35, Kevin A. Pieckiel wrote: > I want to do traffic shaping with a FreeBSD firewall. The firewall uses > IPF on FBSD 5.2.1-p8, and the only shaper I see in the ports is trickle. > This doesn't even integrate into the firewall, so it would be useless to > me for shaping traffic from other hosts on the protected network. > Besides, I can't allocate bandwidth the way I want to. > > I basically want to be able to "guarantee" certain services a certain > minimum level of bandwidth, but offering more if it is available. For > example, I want WWW traffic to have at LEAST 50% of outgoing bandwidth > under heavy load (leaving 50% for all other services). But I also want > to "guarantee" that interactive sessions (ssh) have 10% of the bandwidth. > (I'm just making these numbers up for this example.) That way, if I > crank up, say, NNTP services on a client and start sucking large files > from USENET, or if I start FTPing ISO images for the next FBSD release, > I could still surf the web and ssh to my favorite offsite computers > without much delay in response. Yet if I'm otherwise idle while NNTPing > or FTPing, I can use the full bandwidth of my connection for the file > transfers. > > I started looing at ALTQ, but wasn't sure how well it worked with FBSD. > I'm not even sure if it can offer the kind of QoS shaping I want; I was > more interested in if it even worked with FBSD. > > Are there any recommendations out there? Does anyone here have any > experience with a FBSD QoS traffic shaper? ALTQ would probably work, but most recommendations around here would be for DUMMYNET. You will need to recompile your kernel if the option isn't there already. With DUMMYNET, you can specify traffic through certain ports or certain ips get X bandwidth, or you can have it intelligently divide bandwidth in that if no one else is using their allotment, you can "borrow" their. I don't have the full details on how to set it up as I have fully jumped off that bridge yet, but I am sure someone else on this list could give more detail answers to a finer grained question. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problem with gateway and ipfw in FreeBSD 5.2
On Fri, Jul 02, 2004 at 11:23:05AM +0800, Tony Liew wrote: > Hi, > > Currently I am trying out FreeBSD 5.2. > > SDSL modem >| > FreeBSD Router >| > Internal network > > My problem, from FreeBSD I can ping outside and inside network. > from Internal network, I can ping internal interface and external > interface of FreeBSD Router. But I cannot ping the modem IP address so > goes public DNS server on the internet. > > I have in my KERNEL: > options BRIDGE > options DIVERT > options IPFIREWALL > options IPFIREWALL_DEFAULT_TO_ACCEPT > > rc.conf > gateway_enable="YES" > defaultrouter="" > firewall_enable="YES" > firewall_type="OPEN" > natd_interface="" > natd_enable="YES" > router_enable="YES" > > sysctl.conf > > net.link.ether.bridge.enable=1 > net.link.ether.bridge.config=external interface, internal interface > net.link.ether.bridge.ipfw=1 > > > client on the internal network cannot connect to the internet. Any > suggestion? > > Thanks a lot. > > Regards, > Tony Liew Why do you have bridging enabled? Trying turning off bridging: net.link.ether.bridge.enable=0 And then make sure that you have the FW enabled: net.inet.ip.fw.enable=1 Nathan -- PGP Public Key: pgp.mit.edu:11371/pks/lookup?op=get&search=0xD8527E49 pgpd9124gcz0M.pgp Description: PGP signature
Re: Newbie
Chintan,Jon, Jon Drews wrote: Hello Chintan: In addition to Chris' advice I heartily recommend the tutorials at FreeBSD basics: http://www.oreillynet.com/pub/ct/15 I also find Greg Lehey's "The Complete FreeBSD" to be a very good reference book. On Thu, 01 Jul 2004 23:03:14 +0100, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: In addition to Jon ;-) (the ball keeps rolling) I recommend you also take a peek at the FreeBSD handbook http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ That also states intersting information, it's even buyable through bsdmall ;-) Cheers I am a cisco engineer however want to learn the unix/linux too. any advice you can give me or what will help in learning BSD. Regards Chintan -- Kind regards, Remko Lodder |[EMAIL PROTECTED] Reporter DSINet|[EMAIL PROTECTED] Projectleader Mostly-Harmless |[EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Traffic shaping
I want to do traffic shaping with a FreeBSD firewall. The firewall uses IPF on FBSD 5.2.1-p8, and the only shaper I see in the ports is trickle. This doesn't even integrate into the firewall, so it would be useless to me for shaping traffic from other hosts on the protected network. Besides, I can't allocate bandwidth the way I want to. I basically want to be able to "guarantee" certain services a certain minimum level of bandwidth, but offering more if it is available. For example, I want WWW traffic to have at LEAST 50% of outgoing bandwidth under heavy load (leaving 50% for all other services). But I also want to "guarantee" that interactive sessions (ssh) have 10% of the bandwidth. (I'm just making these numbers up for this example.) That way, if I crank up, say, NNTP services on a client and start sucking large files from USENET, or if I start FTPing ISO images for the next FBSD release, I could still surf the web and ssh to my favorite offsite computers without much delay in response. Yet if I'm otherwise idle while NNTPing or FTPing, I can use the full bandwidth of my connection for the file transfers. I started looing at ALTQ, but wasn't sure how well it worked with FBSD. I'm not even sure if it can offer the kind of QoS shaping I want; I was more interested in if it even worked with FBSD. Are there any recommendations out there? Does anyone here have any experience with a FBSD QoS traffic shaper? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
PMTUD, is it actually usable? (was Re: REPOST: Performance problems with FTP)
If you've been following this thread, you can probably guess the problem. If not, I'll summarize it briefly. I'm looking at a performance problem that appears to be caused by a combination of fragmented packets, and failure of PMTUD to work because of blocked/dropped ICMP packets. As I'm trying to track this down further, I'm getting hung up in that it appears as if so many systems are broken that I can't sort anything out. VERY few hosts seem to return ICMP messages when I ping with large packets, they seem to just silently drop the packet if the nofrag flag is set (either that or the ICMP messages are getting blocked). I'm trying this from a number of different locations, so I'm pretty sure it's not just this ISP. I wanted to see if anyone else was having a similar experience with PMTUD and debugging problems with it. I've been using hping (since the ping in 4.x does not yet support setting the nodefrag flag) to try to identify what providers are breaking the system, and (so far) I'm finding that PMTU doesn't work _anywhere_! Is my testing strategy invalid? Does anyone have any advice/suggestions/ war stories to aid me in determining how I should handle this? Should I just set the MTU on this server to 500 and give up on optimizing MTU sizes? -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Graphics
> > > Sir, > I am FreeBSD fan. I was looking for some kinda graphics for FreeBSD like > "Powered By FreeBSD" or such. Can you provide me with some such links. Check here:http://www.freebsd.org/copyright/daemon.html and here: http://www.freebsd.org/art.html and here: http://www.freebsdmall.com/cgi-bin/fm and here: http://www.linuxjewellery.com/beastie and click on some of the links. There are probably others, but this will get you started. jerry > > Thanking you. > > -- > Muhammad Moinur Rahman > Network Support Specialist > Bass Computronics Ltd > House#405(3rd fl), Road#27(old) > Dhanmomdi,Dhaka - 1209 > Office - (880) 2 81197977 > 8115033 > 9145776 > Fax- (880) 2 9145777 > Cell - (880)18 9250971 > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Wireless client problems
Hi, I'm currently running fbsd 4.9 on a Toshiba Satellite 2405-S221. The problem I am having is that after I install and configure the wireless card, I observe no activity between the card and the cpu. I know for certain that my pccard slots are fully functional and that fbsd is loading the appropriate drivers, but I am puzzled with the lack of activity. To setup the client I used the example from the FBSD handbook, 20.3.3.4.1 minus all the WEP encryption crap: ifconfig wi0 ssid inet netmask I choose the IP right off the top of my head, I simply make sure that the IP is not being used by any other machines on the network. Here is my output from dmesg: FreeBSD 4.9-RELEASE #0: Tue Jun 29 09:10:13 EST 2004 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/MYKERNEL Timecounter "i8254" frequency 1193182 Hz CPU: Intel(R) Pentium(R) 4 Mobile CPU 1.60GHz (1594.84-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0xf24 Stepping = 4 Features=0x3febf9ff real memory = 268238848 (261952K bytes) avail memory = 255270912 (249288K bytes) Preloaded elf kernel "kernel" at 0xc0597000. Warning: Pentium 4 CPU: PSE disabled Pentium Pro MTRR support enabled md0: Malloc disk Using $PIR table, 8 entries at 0xc00f01a0 apm0: on motherboard apm0: found APM BIOS v1.2, connected at v1.2 npx0: on motherboard npx0: INT 16 interface pcib0: on motherboard pci0: on pcib0 agp0: mem 0xf000-0xf7ff at device 0.0 on pci0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at 0.0 irq 11 uhci0: port 0xefe0-0xefff irq 11 at device 29.0 on pci0 usb0: on uhci0 usb0: USB revision 1.0 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhci1: port 0xef80-0xef9f irq 11 at device 29.1 on pci0 usb1: on uhci1 usb1: USB revision 1.0 uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered pcib2: at device 30.0 on pci0 pci2: on pcib2 fxp0: port 0xdf40-0xdf7f mem 0xff9ff000-0xff9f irq 11 at device 8.0 on pci2 fxp0: Ethernet address 00:00:39:c9:38:ad inphy0: on miibus0 inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto pci_cfgintr_linked: linked (6b) to hard-routed irq 11 pci_cfgintr: 2:10 INTA routed to irq 11 pcic0: irq 11 at device 10.0 on pci2 pcic0: PCI Memory allocated: 0x8800 pcic0: TI12XX PCI Config Reg: [pwr save][pci only] pccard0: on pcic0 pci_cfgintr_linked: linked (60) to hard-routed irq 11 pci_cfgintr: 2:11 INTA routed to irq 11 pcic1: irq 11 at device 11.0 on pci2 pcic1: PCI Memory allocated: 0x88001000 pccard1: on pcic1 pci_cfgintr_linked: linked (61) to hard-routed irq 11 pci_cfgintr: 2:11 INTB routed to irq 11 pcic2: irq 11 at device 11.1 on pci2 pcic2: PCI Memory allocated: 0x88002000 pccard2: on pcic2 pci2: (vendor=0x1179, dev=0x0805) at 13.0 irq 11 isab0: at device 31.0 on pci0 isa0: on isab0 atapci0: port 0xcfa0-0xcfaf,0xcfe4-0xcfe7,0xcfe8-0xcfef,0xcff4-0xcff7,0xcff8-0xcfff irq 11 at device 31.1 on pci0 ata0: at 0x1f0 irq 14 on atapci0 ata1: at 0x170 irq 15 on atapci0 pcm0: port 0xcdc0-0xcdff,0xce00-0xceff irq 11 at device 31.5 on pci0 pcm0: pci0: (vendor=0x8086, dev=0x2486) at 31.6 irq 11 orm0: at iomem 0xc-0xc,0xe-0xe on isa0 pmtimer0 on isa0 fdc0: at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0 fdc0: FIFO enabled, 8 bytes threshold fd0: <1440-KB 3.5" drive> on fdc0 drive 0 atkbdc0: at port 0x60,0x64 on isa0 atkbd0: flags 0x1 irq 1 on atkbdc0 kbd0 at atkbd0 psm0: irq 12 on atkbdc0 psm0: model IntelliMouse, device ID 3 vga0: at port 0x3c0-0x3df iomem 0xa-0xb on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> sio0: configured irq 4 not in bitmap of probed irqs 0 sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 8250 sio1: configured irq 3 not in bitmap of probed irqs 0 ppc0: at port 0x378-0x37f irq 7 on isa0 ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode ppc0: FIFO with 16/16/15 bytes threshold plip0: on ppbus0 lpt0: on ppbus0 lpt0: Interrupt-driven port ppi0: on ppbus0 ad0: 28615MB [58140/16/63] at ata0-master UDMA100 acd0: CD-RW at ata1-master PIO4 Mounting root from ufs:/dev/ad0s1a pccard: card inserted, slot 0 pccard: card inserted, slot 2 pccard: card removed, slot 2 pccard: card inserted, slot 2 wi0 at port 0x240-0x27f irq 11 slot 0 on pccard0 wi0: 802.11 address: 00:02:2d:6b:13:ed wi0: using Lucent Embedded WaveLAN/IEEE wi0: Lucent Firmware: Station 8.10.01 Output from ifconfig (wi0 left unconfigured) localhost# ifconfig fxp0: flags=8843 mtu 1500 inet6 fe80::200:39ff:fec9:38ad%fxp0 prefixlen 64 scopeid 0x1 inet 192.168.1.102 netmask 0xff00 broadcast 192.168.1.255 ether 00:00:39:c9:38:ad media: Ethernet autoselect (100baseTX ) status: active lp0: flags=8810 mtu 1500 lo0: flags=8049 mtu 16384 i
Re: strange pw behaviour
On Friday 02 July 2004 15:09, Bill Moran wrote: > The only other thought I have is that you might have some invalid user > names? (I'm really reaching here ...) > > Can you attach the group file so we can verify the syntax. I really don't think so... all entries come from pw and pw get's called the same way every time (from a script) here is a part of the /etc/group file: u186:*:2119:www u188:*:2121:www u189:*:2122:www u197:*:2130:www u192:*:2125:www 'ls -l' as user www shows: drwxr-x--- 4 u186 u186 512 Apr 23 21:56 u186 drwxr-x--- 9 u188 u188 1024 Jul 2 12:32 u188 drwxr-x--- 5 u189 u189 512 Jun 25 14:28 u189 drwxr-x--- 3 u192 u192 512 Jun 6 20:21 u192 drwxr-x--- 11 u197 u197 1024 Jul 2 14:15 u197 'ls -l *' as user www shows something like: u186: total 4 drwxr-xr-x 6 u186 u186 512 Jun 5 16:33 some_dir drwxr-xr-x 4 u186 u186 512 May 11 21:36 another_dir u188: total 16 drwxr-xr-x 12 u188 u188 512 Jul 1 17:17 dir1 drwxr-xr-x 17 u188 u188 1024 Jul 1 17:17 dir2 -rw-r--r-- 1 u188 u188 280 Jun 30 21:59 file.txt u189: ls: u189: Permission denied u192: ls: u192: Permission denied u197: ls: u197: Permission denied > Beyond that, I'm at a loss. Me too... I have been using pw to manage user accounts within different jails for quite some time now but never had issues like these.. Thanks anyway. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems with UDMA harddisks
On Fri, 2 Jul 2004 08:28:12 +0200 (CEST), "Peter Ulrich Kruppa"
<[EMAIL PROTECTED]> said:
> Hi!
>
> I hope somebody on this list has another good idea, I haven't
> thought of yet:
>
> I have a machine that came with two Excel Stor 40 GB ("Ganymede")
> UDMA/100 harddisks.
> To install FreeBSD 4.10 I had to disable UDMA in the BIOS,
> otherwise they wouldn't have booted (some complaint about ata0).
> Of course I wish to get UDMA working, since this is said to
> improve perfomance significantly.
> I checked if the UDMA cable is plugged into the correct places
> for mainboard, master and slave - this is o.k. .
>
> Are there any other things (bios settings, kernel modules, magic
> chants,...) I could try?
I've been using DragonFly so I am not absolutely certain 4.10 still uses
/boot/loader.conf, but if it does, then inserting the following line in
that file may help:
hw.ata.ata_dma="1"
Jud
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Graphics
Muhammad Moinur Rahman wrote: Sir, I am FreeBSD fan. I was looking for some kinda graphics for FreeBSD like "Powered By FreeBSD" or such. Can you provide me with some such links. Thanking you. comes in any apache install on your freebsd box ... http://beastie.flncs.com/icons/freebsd.gif ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: strange pw behaviour
Jonas Sonntag <[EMAIL PROTECTED]> wrote: > Hi Bill, > > first of all, thanks for the input! > > On Friday 02 July 2004 13:58, Bill Moran wrote: > > Did you add the users/groups to the jail, or to the host system? Make sure > > that the group file you added this to is the same group file that is being > > used by the program. For example, on one of my jail systems, I have > > /etc/group, which is pretty stock, and /jail/cgi-jail/etc/group, which has > > special groups for CGI clients, and /jail/frontpage/etc/group which has > > groups for clients who use frontpage ... etc. > > I'm within the jail only. I'm using pw from the host system, as you can see > from the -V switch to pw, but from thereon I'm logging on to the sshd running > inside the jail. So I'm talking about user www inside the jail and /etc/group > inside the jail. > > > Make sure that ownerships show up properly in the environment you're using. > > For example, if you have a user "wmoran" with uid 1501 in the host system, > > then a user "wmoran" in the jail with uid 1427, you're going to find that > > the permissions don't work out right, because file permissions are based on > > uid, and the user name is just displayed to make it human-readable. Group > > IDs are similar. > > I don't have any of the groups on the host system, all of them are inside the > jail. > Within the jail: All group names are displayed right, according to the entries > in /etc/group. User www is a member of all 10 groups. User www can list 6 > directories and gets Permission denied on 4 directories. > > > Have you looked at /etc/group (or whatever file is applicable) in a text > > editor to make sure everything is correct? The format is described in > > "man group" and is pretty easy to eye parse. > > The format is correct, since all modification is done by pw. The text editor > part is the funny one: As soon as I move one of my problematic group entries > to another position inside the file using vi, it might work and eventually it > might break one of the other groups. > I just reordered the file so that the entries are sorted by group id which > resulted in 7 directories showing and only 3 showing Permission denied. > > Sounds weird, right? > > Still I have no indication what's wrong with the other 3... I would suspect it > might be a host/jail issue, but since I have none of the groups on the host > while some _do_ work this is not it. > Also, I'm really only working inside the jail enviroment and everything looks > like it should there. > > As a sidenote: I have null-mounted the directory in which those 10 directories > are located to another jail on the same host system where I have the same > problem (showing 5, permission denied on 5 here). > > Since I don't suspect a bug in pw, maybe someone could enlighten me which > other programs might be involved here and I could recompile those before I > reinstall the whole world to those jails (not that I think reinstalling > something will help, but I'm lost here). Well, I tried ... The only other thought I have is that you might have some invalid user names? (I'm really reaching here ...) Can you attach the group file so we can verify the syntax. Beyond that, I'm at a loss. -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: IP bandwidth
Bandwithd and IPaudit do a good job. I use both. Michael Clark Nemschoff Chairs Inc mclark at nemschoff dot com CompTIA A+, Network+, Server+, MCP Voice: (920) 457 7726 x294 Fax: (920) 453 6594 -Original Message- From: Philip Payne [mailto:[EMAIL PROTECTED] Sent: Friday, July 02, 2004 4:43 AM To: Radu MOLNAR; Arek Czereszewski Cc: [EMAIL PROTECTED]; John Lee Subject: RE: IP bandwidth > > John Lee wrote: > > > >> dear all, > >> > >> i'm using a freebsd 4.10-stable server with 50 IP addresses. > >> Is there any program i can install that will be able to tell me: > >> > >> - how much bandwidth (ie. kbps) each individual IP is using? > >> > >> trafcount seems to count total traffic only, any idea? > >> > > > > I.e. > > ipfw + rrdtools or mrtg > > from ports (net-mgnt): > > netramet, bandwidthd > > Any of these make real time statistics like iptraf under > linux. I also > need something like this for both general interface > (realtime) statistics > and for traffic monitorring (i can use tcpdump for this but > it would be > nice to have both caracteristics in one program). I've used /usr/ports/net-mgmt/darkstat in the past on my home network. Its pretty simplistic but it might be of use. Phil. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" CONFIDENTIALITY NOTE: This electronic transmission, including all attachments, is directed in confidence solely to the person(s) to whom it is addressed, or an authorized recipient, and may not otherwise be distributed, copied or disclosed. The contents of the transmission may also be subject to intellectual property rights and all such rights are expressly claimed and are not waived. If you have received this transmission in error, please notify the sender immediately by return electronic transmission and then immediately delete this transmission, including all attachments, without copying, distributing or disclosing same. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: strange pw behaviour
Hi Bill, first of all, thanks for the input! On Friday 02 July 2004 13:58, Bill Moran wrote: > Did you add the users/groups to the jail, or to the host system? Make sure > that the group file you added this to is the same group file that is being > used by the program. For example, on one of my jail systems, I have > /etc/group, which is pretty stock, and /jail/cgi-jail/etc/group, which has > special groups for CGI clients, and /jail/frontpage/etc/group which has > groups for clients who use frontpage ... etc. I'm within the jail only. I'm using pw from the host system, as you can see from the -V switch to pw, but from thereon I'm logging on to the sshd running inside the jail. So I'm talking about user www inside the jail and /etc/group inside the jail. > Make sure that ownerships show up properly in the environment you're using. > For example, if you have a user "wmoran" with uid 1501 in the host system, > then a user "wmoran" in the jail with uid 1427, you're going to find that > the permissions don't work out right, because file permissions are based on > uid, and the user name is just displayed to make it human-readable. Group > IDs are similar. I don't have any of the groups on the host system, all of them are inside the jail. Within the jail: All group names are displayed right, according to the entries in /etc/group. User www is a member of all 10 groups. User www can list 6 directories and gets Permission denied on 4 directories. > Have you looked at /etc/group (or whatever file is applicable) in a text > editor to make sure everything is correct? The format is described in > "man group" and is pretty easy to eye parse. The format is correct, since all modification is done by pw. The text editor part is the funny one: As soon as I move one of my problematic group entries to another position inside the file using vi, it might work and eventually it might break one of the other groups. I just reordered the file so that the entries are sorted by group id which resulted in 7 directories showing and only 3 showing Permission denied. Sounds weird, right? Still I have no indication what's wrong with the other 3... I would suspect it might be a host/jail issue, but since I have none of the groups on the host while some _do_ work this is not it. Also, I'm really only working inside the jail enviroment and everything looks like it should there. As a sidenote: I have null-mounted the directory in which those 10 directories are located to another jail on the same host system where I have the same problem (showing 5, permission denied on 5 here). Since I don't suspect a bug in pw, maybe someone could enlighten me which other programs might be involved here and I could recompile those before I reinstall the whole world to those jails (not that I think reinstalling something will help, but I'm lost here). Thanks again for the input, Best regards Jonas ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: mini itx
arden <[EMAIL PROTECTED]> writes: > im collecting some bits to start a mini itx project > http://www.mini-itx.com/projects.asp > i have the need for a small silent pc > > has anyone used these boards with bds? I'm using an EPIA 6000 as a workstation in the kitchen. I boot FreeBSD-5.2 diskless so it's silent. Since there is no disk heat, I can also unplug the CPU fan. Totally silent. Very nice. Not a speed demon, but plenty fast for surfing and such. I'll probably do the same for the next machine I buy for my office: I find it a lot easier to code and think without fan and disk noise. (The server's in the basement with a bunch of RAID disk). I had X11 working on the built-in chipset with an older snapshot port, but the recent one doesn't work for me. I haven't tried heavy duty multimedia stuff nor decss and such on it. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Graphics
Sir, I am FreeBSD fan. I was looking for some kinda graphics for FreeBSD like "Powered By FreeBSD" or such. Can you provide me with some such links. Thanking you. -- Muhammad Moinur Rahman Network Support Specialist Bass Computronics Ltd House#405(3rd fl), Road#27(old) Dhanmomdi,Dhaka - 1209 Office - (880) 2 81197977 8115033 9145776 Fax- (880) 2 9145777 Cell - (880)18 9250971 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: REPOST: Performance problems with FTP
Charles Swiger <[EMAIL PROTECTED]> wrote: > On Jun 29, 2004, at 11:08 PM, Bill Moran wrote: > > Charles Swiger <[EMAIL PROTECTED]> wrote: > >> Well, that does tend to rule out a bunch of issues. Have you tried > >> changing the MTU of the FreeBSD box down to 1400 or so (or even 512), > >> just to see whether that does anything? > > > > OK. I've had a bit of success here ... > > > > By setting the MTU down to ~650, I get the best performance I've seen > > with this setup (about 27k/sec ... which isn't too bad) I set > > "SocketOptions maxseg 650" in the proftpd.conf file for now, which > > seems > > to help a good bit. > > Bingo, found something! All should be easy from here on out... :-) > > > But I'm really confused. Why does reducing the MTU improve > > performance? > > I would have thought it would hurt performance by increasing the # of > > packets, thus increasing overhead. > > Using a smaller MTU normally does hurt performance, as you have to send > more packets (as you've said) and because the overhead (ratio of packet > header size to data size) becomes larger. However, using an MTU which > is too big means packets have to be fragmented and reassembled, which > slows things down a lot, too. > > Anyway, it is likely that one of the networks involved in the > connection has a smaller MTU than normal, which means large data > packets get fragmented, resulting in delays. FTP data connections tend > to show this more than scp does, as the latter seems to vary the packet > size more: perhaps a result of using compression/encryption within the > SSH protocol. > > > I did some captures using Ethereal, and I'm seeing a weird pause (with > > the MTU at the default) where the client will send three packets, > > there'll > > be a pause, then the ack comes back, then three packets, pause, ack ... > > That rings a bell. Are you using path MTU discovery? Is some firewall > in place that might be blocking ICMP_UNREACH_NEEDFRAG messages (ICMP > type 3, subtype 4)? > > You should try doing a traceroute which can do pMTU testing; I'm not > sure whether the stock FreeBSD traceroute can do this, but a search > ought to dig up something. Well ... this has turned up the weirdest stuff I've seen in a while! Seems like you're right about PMTU ... but the problem is pretty complex overall. The max PMTU seems to change periodically. It was around 800bytes early yesterday when I checked it. Then, late yesterday, when I was going to track down exactly where the problem was, the PMTU went up to the same MTU my cable connection uses, thus I couldn't use this connection for testing as I couldn't get packets out of it without them fragmenting. (on the flip side, it seems to be _my_ ISP that's rejecting ICMP packets, so I'll have to complain to them) Anyway ... your advice, in addition to a number of resource I found on the web by searching for PMTU, has isolated the problem. Figuring out how to fix it will be another thing altogether. Thanks. -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: strange pw behaviour
Jonas Sonntag <[EMAIL PROTECTED]> wrote: > Hi list, > > must ask again... I'm still stuck with this. It's pretty weird. I have 10 > directories each owned by a unique group. All 10 directories are set 750. > The groups have been added using pw and user www has been made a member of > every group by using pw. This has worked a hundred times. Information is > correct in /etc/group. > > When I open a session as user www by using su and try to list those 10 > directories by using 'ls -l *' I get 6 times the directory contents and 4 > times 'Permission denied'. ...All directories are 750 and user www is a > member of all groups... > > Looking at 'strings /usr/sbin/pw' I see four CVS tags, the newest three years > old. So i don't suspect a bug there. > Now what could cause behaviour like this? Where should I keep looking for the > problem? > Please see the original post too. It seems I'm either missing something here > or something is very broken with my jails. I saw your previous post, and I'm not sure what's going wrong, but I thought I'd chime in with some guesses, since you're not getting other input. Did you add the users/groups to the jail, or to the host system? Make sure that the group file you added this to is the same group file that is being used by the program. For example, on one of my jail systems, I have /etc/group, which is pretty stock, and /jail/cgi-jail/etc/group, which has special groups for CGI clients, and /jail/frontpage/etc/group which has groups for clients who use frontpage ... etc. Make sure that ownerships show up properly in the environment you're using. For example, if you have a user "wmoran" with uid 1501 in the host system, then a user "wmoran" in the jail with uid 1427, you're going to find that the permissions don't work out right, because file permissions are based on uid, and the user name is just displayed to make it human-readable. Group IDs are similar. Administratively, it seems smarter to keep jailed filesystems completely seperate from host filesystems, as it makes filesystem permissions easier to not mess up. Don't access jailed filesystems from the host unless you're confident in your ability not to get confused. Have you looked at /etc/group (or whatever file is applicable) in a text editor to make sure everything is correct? The format is described in "man group" and is pretty easy to eye parse. HTH. -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Nearly empty port directories and README.html. Esp. relating to GTK themes and engines.
On Fri, Jul 02, 2004 at 05:04:51AM -0600, [EMAIL PROTECTED] wrote: > I'm a bit confused as to the function of the README.html files located in > otherwise empty ports directories from a cvsup from only a few minutes ago > (Fri Jul 2 04:45:00 MDT 2004). Of particular interest to me are the gtk > engine and theme ports such as x11-toolkits/gtk-engines-collection or > x11-toolkits/gtk-zenith-theme. At this point I haven't found a gtk theme > or engine port that has anything but a README.html in it. > > Would someone please clarify the function of these nearly empty port > directories for me, and detail what steps I can take to install a port > such as x11-toolkits/gtk-zenith-theme which exhibits this format? Those README.html files don't necessarily have any useful function. They aren't part of the ports cvsup collections at all, so cvsup(1) won't delete them. That means that their presence in any moved or deleted port will prevent cvsup(1) deleting the directory cleanly. You don't need the README.html files during normal usage of the ports tree -- only if you want to access via a web browser. If you delete all of the README.html files: # find /usr/ports -name README.html -print0 | xargs -0 rm then cvsup(1) will clean up those otherwise empty directories. As for the gtk-zenith-theme, you can tell from /usr/ports/MOVED that it's now to be found in the x11-themes directory: % grep gtk-zenith-theme MOVED x11-toolkits/gtk-zenith-theme|x11-themes/gtk-zenith-theme|2004-06-02|new category Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgpfHB3AGclJN.pgp Description: PGP signature
RE: vi / EAGAIN Problem
Sergey, I have submitted the problem to FreeBSD using the send-pr program, as Jonathan Chen asked me to. I will follow up here with some details for you though. Once the problem starts happening, it seems that I have to log off the system and log back in again to fix it. This usually (95% of the time) fixes the problem. It also only happens when I press a key - if I let vi sit there with a file loaded into it, it will not get the error no matter how long I wait. The problem only happens when I press a key, and not always the first one. I can usually work in vi for 10-15 seconds before the error comes up. Anyhow, I have submitted the bug report and the link to my ktrace is still up, so if anyone has any ideas about what could be causing this, I would love to hear from you. For now, my work-around is to just log off and back in again when it happens, but as you can imagine, that gets annoying in a big hurry. Tim Tim Gustafson MEI Technology Consulting, Inc [EMAIL PROTECTED] (516) 379-0001 Office (516) 480-1870 Mobile/Emergencies http://www.meitech.com/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Nearly empty port directories and README.html. Esp. relating to GTK themes and engines.
Hello. I'm a bit confused as to the function of the README.html files located in otherwise empty ports directories from a cvsup from only a few minutes ago (Fri Jul 2 04:45:00 MDT 2004). Of particular interest to me are the gtk engine and theme ports such as x11-toolkits/gtk-engines-collection or x11-toolkits/gtk-zenith-theme. At this point I haven't found a gtk theme or engine port that has anything but a README.html in it. Would someone please clarify the function of these nearly empty port directories for me, and detail what steps I can take to install a port such as x11-toolkits/gtk-zenith-theme which exhibits this format? -- Accident, n.: A condition in which presence of mind is good, but absence of body is better. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Question reguarding /etc/hosts
On 2004-07-02 01:45, j0sh <[EMAIL PROTECTED]> wrote: > I have a quake 1 server installed on my 4.9 release box. it works when > I disable UDP support, but it core dumps when its enabled. I was told > to check the /etc/hosts and make sure there is an entry ther for my > machine and its there. any reccomendations? Let's see if I got what you said correctly. It works when you disable UDP support in the quake server configuration, right? - Giorgos ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: strange pw behaviour
Hi list, must ask again... I'm still stuck with this. It's pretty weird. I have 10 directories each owned by a unique group. All 10 directories are set 750. The groups have been added using pw and user www has been made a member of every group by using pw. This has worked a hundred times. Information is correct in /etc/group. When I open a session as user www by using su and try to list those 10 directories by using 'ls -l *' I get 6 times the directory contents and 4 times 'Permission denied'. ...All directories are 750 and user www is a member of all groups... Looking at 'strings /usr/sbin/pw' I see four CVS tags, the newest three years old. So i don't suspect a bug there. Now what could cause behaviour like this? Where should I keep looking for the problem? Please see the original post too. It seems I'm either missing something here or something is very broken with my jails. On Friday 25 June 2004 15:00, Jonas Sonntag wrote: > Any hints would be appreciated. Any comments, too.. thanks ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
xconq in ports doesn't work under freebsd 4.9
Has anyone gotten xconq to work ? Under 4.9 (actually 4.10-stable) it requires tk84.1 which does not exist. If i muck with the makefile to use tk84 (which turns out to be tk84.6) it builds fine but then it fails to because the args it pass to tk are incorrect. __ Do you Yahoo!? New and Improved Yahoo! Mail - 100MB free storage! http://promotions.yahoo.com/new_mail ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: portupgrade fails on every port, undefined method 'each' for nil:NilClass
On Thursday 01 July 2004 09:44 pm, Akinori MUSHA wrote:
> Hi,
>
> I have just committed a fix against the "undefined method `each' for
> nil:NilClass" error that occurs typically when BEFORE_DEINSTALL is
> not defined in pkgtools.conf. Add "BEFORE_DEINSTALL = {}" to your
> pkgtools.conf and pkg_deinstall will start working again.
>
> For the "undefined method `>' for #" error, I still
> have no idea. Could you try again with a vanilla pkgtools.conf?
It didn't change the package upgrade
[Updating the pkgdb in /var/db/pkg ... - 326
packages found (-0 +1) . done]
** Listing the failed packages (*:skipped / !:failed)
! devel/automake14 (automake-1.4.6_1) (undefined method `>'
for #)
---> Packages processed: 2 done, 0 ignored, 0 skipped and 1 failed
or
ruby# portupgrade -Puf portupgrade
---> Checking for the latest package of 'sysutils/portupgrade'
** Listing the failed packages (*:skipped / !:failed)
! sysutils/portupgrade (portupgrade-20040701_1) (undefined
method `>' for #)
---> Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed
--
Kent Stewart
Richland, WA
http://users.owt.com/kstewart/index.html
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Converting crypted passwords
On Fri, Jul 02, 2004 at 10:32:14AM +0200, Frank Altpeter wrote:
> Given is a system with md5 style passwords like that:
>
> $1$d61CkkOZ$BE/TofmL5h9gtfxKI6Vcy1
>
> (This can be generated by "openssl passwd -1 -salt d61CkkOZ test")
>
> Without knowing the password, i need to convert it to base64 encoded
> binary md5 digest style for using with ProFTP+mod_sql:
>
> {md5}CY9rzUYh03PK3k6DJie09g==
>
> (This can be generated by "printf '{md5}' ; printf 'test' | openssl dgst -binary
> -md5 | openssl enc -base64").
>
>
> The problem i have to solve is, how to convert the first encryption
> type into the second encryption type without having the plaintext
> password in between.
I don't think that's actually possible without knowing the plaintext
of the password. Besides, the standard system password is the md5
hash of a different quantity to the other md5 hash -- since the system
md5 password style includes that extra random salt and the other
apparently doesn't. That means that one encrypts 'salt + password'
and the other encrypts just 'password', so there isn't some sort of
mechanical format translation you can do to go from one to the other.
One alternative you might want to look at is if ProFTP+mod_sql
supports a {crypt} style of password. Now, that will probably default
to the old style DES password crypttext, but supposing that it passes
everything through to the system crypt(3) function, you might just be
able to use an md5 style crypt in there, which you can simply
cut'n'paste from the master.passwd file. You'll have to experiment.
Cheers,
Matthew
--
Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks
Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614 Bucks., SL7 1TH UK
pgpYTvrnLW3hn.pgp
Description: PGP signature
RE: IP bandwidth
> > John Lee wrote: > > > >> dear all, > >> > >> i'm using a freebsd 4.10-stable server with 50 IP addresses. > >> Is there any program i can install that will be able to tell me: > >> > >> - how much bandwidth (ie. kbps) each individual IP is using? > >> > >> trafcount seems to count total traffic only, any idea? > >> > > > > I.e. > > ipfw + rrdtools or mrtg > > from ports (net-mgnt): > > netramet, bandwidthd > > Any of these make real time statistics like iptraf under > linux. I also > need something like this for both general interface > (realtime) statistics > and for traffic monitorring (i can use tcpdump for this but > it would be > nice to have both caracteristics in one program). I've used /usr/ports/net-mgmt/darkstat in the past on my home network. Its pretty simplistic but it might be of use. Phil. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: IPFW acting weird OR invalid ruleset?
> steve, > Yes everything else seems to work fine. There are > currently 2 PCs > with this issue. 1 is XP the other is Win2k. This ruleset worked > fine on FreeBSD 5.1, but I reformatted the box, and install 5.2.1 > uploaded the rc.firewall.rules and natd.conf files, since the network > interfaces where the same I didn't really have to change anything. Ok... so reading the ruleset the traffic will behave (referring to your rc.firewall): Outgoing FTP session is passed first by rule 04109 (with a keep-state) and then by 61001 (without a keep-state). So, will the returning traffic get passed by the check-state on the way back in?... I'm not sure, possibly. Also, funny that it works for 5.1 and not 5.2.1, which implies bugs. The general consensus from my & Steve's response is we don't understand the ruleset. Using skipto just to divert to natd and pass outgoing traffic does seem overly complicated and I've not seen anyone else use that approach. Maybe I am missing some advantage that it gives you. I figure you have two approaches to solve this: 1) If you want to debug the current ruleset add logging to the deny rules and check where the traffic is being dropped. If it is the ruleset at fault then the traffic MUST be being dropped by it on one of the rules. Remember logging is your friend. Or 2) There may be some benefit to re-writing the ruleset in a format you personally understand rather than using a template. Your general approach to firewall ruleset should be: a) First section contains any anti-spoofing and then rules to divert traffic going via the outside interface to natd and to check-state b) Second section to allow/deny traffic directly to the firewall. c) Then a section to allow the incoming services to your site. You should then end this section with something like "deny all traffic coming in via my external interface" as unless you specifically want the traffic you should drop it d) Then a section to permit the required traffic out from your site. You should end this section with something like "deny & log all traffic" as if you haven't specified it to pass, it shouldn't. Then you can refine this approach by adding deny rules without logging to only log what's required and pick up on traffic that you should be passing but you are not. I'm afraid it's very difficult to be specific on writing firewall policy as it will be unique to your needs but I hope that general approach will help. Tools like /usr/ports/security/fwbuilder (home www.fwbuilder.org) can help in generating policy but the install features for IPFW are not quite working. I have posted a script to help with this previously. Thanks, Phil. > I found these rules on this website: > > http://www.lugbe.ch/lostfound/contrib/freebsd_router/ > > here is the sample I used from the website: > > # be quiet and flush all rules on start > -q flush > > # allow local traffic, deny RFC 1918 addresses on the outside > add 00100 allow ip from any to any via lo0 > add 00110 deny ip from any to 127.0.0.0/8 > add 00120 deny ip from any to any not verrevpath in > add 00301 deny ip from 10.0.0.0/8 to any in via ep0 > add 00302 deny ip from 172.16.0.0/12 to any in via ep0 > add 00303 deny ip from 192.168.0.0/16 to any in via ep0 > > # check if incoming packets belong to a natted session, > allow through > if yes > add 01000 divert natd ip from any to me in via ep0 > add 01001 check-state > > # allow some traffic from the local net to the router > # SSH > add 04000 allow tcp from 192.168.1.0/24 to me dst-port 22 > in via ep1 > setup keep-state > # ICMP > add 04001 allow icmp from 192.168.1.0/24 to me in via ep1 > # NTP > add 04002 allow tcp from 192.168.1.0/24 to me dst-port > 123 in via ep1 > setup keep-state > add 04003 allow udp from 192.168.1.0/24 to me dst-port > 123 in via ep1 > keep-state > # DNS > add 04006 allow udp from 192.168.1.0/24 to me dst-port 53 > in via ep1 > > # drop everything else > add 04009 deny ip from 192.168.1.0/24 to me > > # pass outgoing packets (to be natted) on to a special NAT rule > add 04109 skipto 61000 ip from 192.168.1.0/24 to any in via ep1 > keep-state > > # allow all outgoing traffic from the router (maybe you > should be more > restrictive) > add 05010 allow ip from me to any out keep-state > > # drop everything that has come so far. This means it > doesn't belong > to an > established connection, don't log the most noisy scans. > add 59998 deny icmp from any to me > add 5 deny ip from any to me dst-port 135,137-139,445,4665 > add 6 deny log tcp from any to any established > add 6 deny log ip from any to any > > # this is the NAT rule. Only outgoing packets from the > local net will > come here. > # First, nat them, then pass them on (again, you may > choose to be more > restrictive) > add 61000 divert natd
Question reguarding /etc/hosts
I have a quake 1 server installed on my 4.9 release box. it works when I disable UDP support, but it core dumps when its enabled. I was told to check the /etc/hosts and make sure there is an entry ther for my machine and its there. any reccomendations? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: [WAAAY OT]
Asked my father (who used to work for the standards lab at the Electricity Trust of South Australia) and .. He had no hesitation is saying it was Intensity. He said the P was originally for Pressure and the I for Intensity. He also said that some early PMG instruments, we would call them watt meters or Volt Amp meters, used to have two meters, one labelled Pressure and the other Intensity. Thats one for the trivia nights! mjt On Fri, 2004-07-02 at 10:43, Eric Crist wrote: > That's it! Reason for my question was that a buddy asked me as a trivia > question. Bet me $50 I couldn't figure it out (we both agreed any > method I could use was OK) by the time he left for Vancouver, WA > tomorrow morning. > > Thanks guys. > Eric F Crist > President > AdTech Integrated Systems, Inc > (612) 998-3588 > > -Original Message- > > From: Baron Fujimoto [mailto:[EMAIL PROTECTED] > > Sent: Thursday, July 01, 2004 7:45 PM > > To: Eric Crist > > Subject: RE: [WAAAY OT] > > > > > > ahh, I didn't realize that's what you were asking. I've seen > > at least one reference that speculates that "I" was for > > Intensity, though even there they acknowledge dispute over > > the etymology. I always just assumed it was a standard > > chosen to minimize ambiguity with many other common physical > > properties. > > > http://www.allaboutcircuits.com/vol_1/chpt_2/1.html > > On Thu, 1 Jul 2004, Eric Crist wrote: > > : Thanks for all your responses, but I still don't have the information > : I'm seeking. The letter I in Ohm's Law is short for an english word, > : such as E is short for Electromotive Force (or Voltage), and R is > short > : for Resistance. > : > : > : > -Original Message- > : > From: Luke [mailto:[EMAIL PROTECTED] > : > Sent: Thursday, July 01, 2004 7:24 PM > : > To: Eric Crist > : > Cc: [EMAIL PROTECTED] > : > Subject: Re: [WAAAY OT] > : > > : > > Anyone know what the ACTUAL definition/word for I in Ohm's > : > Law is? I > : > > know: > : > > > : > > E= Electromotive Force > : > > R= Resistance > : > > I= ? (I know it's amperage, but what does I mean?) > : > > : > Impedance > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > -- Murray Taylor Special Projects Engineer - Bytecraft Systems & Entertainment P: +61 3 8710 2555 F: +61 3 8710 2599 D: +61 3 9238 4275 M: +61 417 319 256 E: [EMAIL PROTECTED] or visit us on the web http://www.bytecraftsystems.com http://www.bytecraftentertainment.com --- The information transmitted in this e-mail is for the exclusive use of the intended addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. E-mails may not be secure, may contain computer viruses and may be corrupted in transmission. Please carefully check this e-mail (and any attachment) accordingly. No warranties are given and no liability is accepted for any loss or damage caused by such matters. --- This Email has been scanned for Viruses by MailMarshal. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
