Bug with tcsh? : if evaluating true instead of false

2006-10-25 Thread Garrett Cooper
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Ok, so I tried to make a simple script to add users so I wouldn't have
to type in groups/pw over and over again... the problem is that it's not
behaving like it should =o.

Script:
#!/bin/tcsh -x
#

if ( ( $# != 0 ) ) {

set GROUPS=;
set USER=;

if( ( $# == 2 ) ) {

set USER=$1;
set GROUPS=$0;

switch($0)

case -v:
set GROUPS=-G vip;
breaksw

case -w:
set GROUPS=-G vip,wheel;
breaksw
default:
echo bad argument(s) specified!;
exit(1);

endsw

} else if($# == 1) {
set USER=$0;
} else {
echo bad # of args; exiting..;
}

`pw add user -N -d /home/$USER -s /usr/local/bin/bash $GROUPS
$USER  mkdir /home/$USER  ln -s /home/dud.bash_login
/home/$USER/.bash_login`;

} else {
print Usage [-r|-v|-w] username
}

Output:
[EMAIL PROTECTED] ~]# ./mkuser
if ( ( 0 != 0 ) ) {
set GROUPS=
set USER=
if ( ( 0 == 2 ) ) {
set USER=
set GROUPS=./mkuser
switch ( ./mkuser )
echo bad argument(s) specified!
bad argument(s) specified!
exit ( 1 )

Basically it should drop out at the first if statement due to 0 != 0
being true and go straight to the else block, but it's falling through
to the switch statement. Any ideas?

Also..

[EMAIL PROTECTED] /home/gcooper]# tcsh --version
tcsh 6.14.00 (Astron) 2005-03-25 (i386-intel-FreeBSD) options
wide,nls,dl,al,kan,rh,color,filec

Thanks!

- -Garrett
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFPwXc6CkrZkzMC68RAo4sAJ9LOcJ6xnjTo2pWF8W6nOjqXqjfmACeP9OC
WQWFzBpbKca+kkdT1APlo3k=
=G6sT
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


tcpwrappers SSH

2006-10-25 Thread Рихад Гаджиев
A comment in /etc/hosts.allow states that:
Wrapping sshd(8) is not normally a good idea

Why? Is it because such restrictions should naturally be made using a 
firewall/PAM/sshd itself/whatever? I think GENERIC sshd wouldn't have been 
built with libwrap support in the first place. Or?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Bug with tcsh? : if evaluating true instead of false

2006-10-25 Thread Garrett Cooper
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Garrett Cooper wrote:
 Ok, so I tried to make a simple script to add users so I wouldn't have
 to type in groups/pw over and over again... the problem is that it's not
 behaving like it should =o.
 
 Script:
 #!/bin/tcsh -x
 #
 
 if ( ( $# != 0 ) ) {
 
 set GROUPS=;
 set USER=;
 
 if( ( $# == 2 ) ) {
 
 set USER=$1;
 set GROUPS=$0;
 
 switch($0)
 
 case -v:
 set GROUPS=-G vip;
 breaksw
 
 case -w:
 set GROUPS=-G vip,wheel;
 breaksw
 default:
 echo bad argument(s) specified!;
 exit(1);
 
 endsw
 
 } else if($# == 1) {
 set USER=$0;
 } else {
 echo bad # of args; exiting..;
 }
 
 `pw add user -N -d /home/$USER -s /usr/local/bin/bash $GROUPS
 $USER  mkdir /home/$USER  ln -s /home/dud.bash_login
 /home/$USER/.bash_login`;
 
 } else {
 print Usage [-r|-v|-w] username
 }
 
 Output:
 [EMAIL PROTECTED] ~]# ./mkuser
 if ( ( 0 != 0 ) ) {
 set GROUPS=
 set USER=
 if ( ( 0 == 2 ) ) {
 set USER=
 set GROUPS=./mkuser
 switch ( ./mkuser )
 echo bad argument(s) specified!
 bad argument(s) specified!
 exit ( 1 )
 
   Basically it should drop out at the first if statement due to 0 != 0
 being true and go straight to the else block, but it's falling through
 to the switch statement. Any ideas?
 
   Also..
 
 [EMAIL PROTECTED] /home/gcooper]# tcsh --version
 tcsh 6.14.00 (Astron) 2005-03-25 (i386-intel-FreeBSD) options
 wide,nls,dl,al,kan,rh,color,filec
 
   Thanks!
 
 -Garrett

Duh... tcsh syntax != C/C++ or Java syntax. Silly me... lol.
- -Garrett
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFPyQr6CkrZkzMC68RApumAJ9hl365xnqYknflDGr2Cc7O/UClnwCeN7Ih
KsVQzm0ySuW3bSGe7cCgltQ=
=MZO5
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


dummynet

2006-10-25 Thread Thanh Tuan Tran

Hello

I want to ask You:   when i configure my dummynet router with large delay
time, then can packet loss happen? ,and can you show me how to increase
network buffer size in dummynet router for overcoming it.


---Tuan---
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


HA Cluster based on promise VTrack Mxxx

2006-10-25 Thread bsd

Hello,

I am trying to figure out which hardware to build my HA cluster with.

I have seen various promise systems which seems quite interesting  
(VTrack M210p) but FreeBSD is not mentionned as an official suported  
OS on their brochure.


Has anyone build such cluster with this kind of attachement.


The cluster I was thinking about will be built with :

- 2 nodes Pentium Xeon with SCSI card
- 1 VTrack External Storage M210p (this one has automatic failure  
detection included on It's hardware).

- Linux-HA as a control solution


Has anyone built such cluster with these hardware ?

If not what have you been using ?


Sincerly yours.


«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§

Gregober --- PGP ID -- 0x1BA3C2FD
bsd @at@ todoo.biz

«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§


P Please consider your environmental responsibility before printing  
this e-mail



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


HA cluster based on promise Vtrack Mxxx

2006-10-25 Thread Greg Bernard

Hello,

I am trying to figure out which hardware to build my HA cluster with.

I have seen various promise systems which seems quite interesting  
(VTrack M210p) but FreeBSD is not mentionned as an official suported  
OS on their brochure.


Has anyone build such cluster with this kind of attachement.


The cluster I was thinking about will be built with :

- 2 nodes Pentium Xeon with SCSI card
- 1 VTrack External Storage M210p (this one has automatic failure  
detection included on It's hardware).

- Linux-HA as a control solution


Has anyone built such cluster with these hardware ?

If not what have you been using ?


Sincerly yours.


«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§

Grégory Bernard   11, rue de la Tour
Directeur 75116 Paris France
www.ToDoo.biz tel : +(33) 1 40 26 43 14

«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§

PGP ID -- 0x1BA3C2FD

P Please consider your environmental responsibility before printing  
this e-mail


Ce message et les pièces qui y sont éventuellement jointes sont  
exclusivement transmis à l'intention des personnes physiques ou  
morales auxquelles ils sont destinés.
Si vous avez reçu ce message par erreur, merci d'en avertir  
immédiatement la société ToDoo par téléphone ou par courrier  
électronique de retour à l'expéditeur et de supprimer toute copie de  
ce message.
Par ailleurs, il vous est notifié que toute divulgation,  
reproduction, distribution ou utilisation quelconque de tout ou  
partie de ce message (y compris de ses éventuelles pièces jointes) et  
des informations qui y sont contenues est interdite.
Internet ne permettant pas d'assurer l'intégrité de ce message, ToDoo  
et l'expéditeur déclinent toute responsabilité au cas où il aurait  
été intercepté ou modifié par quiconque.



This message and any possible attachments are transmitted for the  
exclusive use of the intended recipient(s).
Should you receive this message by mistake, please notify ToDoo or  
the sender at once by telephone or return e-mail and delete it from  
your system.
Moreover, any form of reproduction dissemination, copying,  
disclosure, modification, distribution and/or use of this message -  
or part of its contents, as well as its possible attachments by any  
unauthorized person or legal entity, is strictly prohibited.
The nature of the Internet means that the integrity of this message  
cannot be guaranteed. ToDoo and the sender therefore disclaim any  
liability whatsoever in the event of this message having been  
intercepted and/or altered.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


What's using the disk so much?

2006-10-25 Thread Patrik Jansson

Hi,
vmstat reports that quite a few processes are waiting for io (disk access)
so I ran gstat to see how much the drive is working and it says more or
less 100% constantly.
How can I determine which process (if it's mostly one single process) is
using the disk so much? top says the CPU is mostly idle.

Thanks,
-Patrik
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: What's using the disk so much?

2006-10-25 Thread Nikos Vassiliadis
On Wednesday 25 October 2006 15:03, Patrik Jansson wrote:
 Hi,
 vmstat reports that quite a few processes are waiting for io (disk access)
 so I ran gstat to see how much the drive is working and it says more or
 less 100% constantly.
 How can I determine which process (if it's mostly one single process) is
 using the disk so much? top says the CPU is mostly idle.

use top -m io

Nikos
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ACL: Default and other problems

2006-10-25 Thread Nico -telmich- Schottelius
Chuck Swiger [Tue, Oct 24, 2006 at 09:21:51AM -0700]:
 [...] 
 Now I am interested on how you would solve this problem with standard
 Unix-Ids without using external tools (like callin chown/chgrp/chmod
 each update).
 
 This constraint makes the problem impossible to solve.  Either you  
 are interested in the impossible, or you aren't really looking to  
 solve the problem using standard Unix mechanisms...

Actually, I am really not looking for 'old Unix mechanism' to solve
that issue, because I think ACLs are definetly made for this kind of
problem.

I've been using ACLs on Linux for some years now and I am really
wondering why simply applying the default ACLs is such a problem
in fbsd.

As far as I know, ACLs are considered stable in FreeBSD, aren't they?

I am really wondering who to contact for the issues I've reported on [0].

Thanks for any hints,

Nico

[0]: http://home.schottelius.org/~nico/freebsd/acl/
-- 
``...if there's one thing about Linux users, they're do-ers, not whiners.''
(A quotation of Andy Patrizio I completely agree with)


signature.asc
Description: Digital signature


Re: What's using the disk so much?

2006-10-25 Thread Bill Moran
In response to Patrik Jansson [EMAIL PROTECTED]:

 Hi,
 vmstat reports that quite a few processes are waiting for io (disk access)
 so I ran gstat to see how much the drive is working and it says more or
 less 100% constantly.
 How can I determine which process (if it's mostly one single process) is
 using the disk so much? top says the CPU is mostly idle.

In top, hit the 'm' key and it will switch to an IO view that shows
per-process IO usage.

This feature of top was added some time after 4.X.

-- 
Bill Moran
Collaborative Fusion Inc.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: What's using the disk so much?

2006-10-25 Thread Jonathan Arnold

Patrik Jansson wrote:

Hi,
vmstat reports that quite a few processes are waiting for io (disk access)
so I ran gstat to see how much the drive is working and it says more or
less 100% constantly.
How can I determine which process (if it's mostly one single process) is
using the disk so much? top says the CPU is mostly idle.


Check out the port sysutils/lsof

--
Jonathan Arnold (mailto:[EMAIL PROTECTED])
Daemon Dancing in the Dark, a FreeBSD weblog:
http://freebsd.amazingdev.com/blog/

UNIX is user-friendly. It's just a bit picky about who its friends are.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: What's using the disk so much?

2006-10-25 Thread Patrik Jansson



Hi,
vmstat reports that quite a few processes are waiting for io (disk access)
so I ran gstat to see how much the drive is working and it says more or
less 100% constantly.
How can I determine which process (if it's mostly one single process) is
using the disk so much? top says the CPU is mostly idle.


use top -m io

I have completly missed that option, thanks.
I will also checkout sysustils/lsof which J.A. recommended.

-Patrik
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


cvsup

2006-10-25 Thread eoghan

Hi
Trying to cvsup my ports and server is saying:
Rejected by server: Access limit exceeded, try again later
So im using cvsup.FreeBSD.org
but have tried cvsup1.FreeBSD.org, cvsup2.FreeBSD.org and  
cvsup3.FreeBSD.org

and get the same message... is there something wrong?
Thanks
Eoghan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvsup

2006-10-25 Thread Gábor Kövesdán

eoghan wrote:

Hi
Trying to cvsup my ports and server is saying:
Rejected by server: Access limit exceeded, try again later
So im using cvsup.FreeBSD.org
but have tried cvsup1.FreeBSD.org, cvsup2.FreeBSD.org and 
cvsup3.FreeBSD.org

and get the same message... is there something wrong?
Thanks
Eoghan

Hello,

try cvsup.countrycode.freebsd.org. E.g. cvsup.de.freebsd.org for 
Germany, cvsup.hu.freebsd.org, etc.


--
Cheers,

Gabor

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvsup

2006-10-25 Thread eoghan


On 25 Oct 2006, at 14:03, Gábor Kövesdán wrote:


eoghan wrote:

Hi
Trying to cvsup my ports and server is saying:
Rejected by server: Access limit exceeded, try again later
So im using cvsup.FreeBSD.org
but have tried cvsup1.FreeBSD.org, cvsup2.FreeBSD.org and  
cvsup3.FreeBSD.org

and get the same message... is there something wrong?
Thanks
Eoghan

Hello,

try cvsup.countrycode.freebsd.org. E.g. cvsup.de.freebsd.org for  
Germany, cvsup.hu.freebsd.org, etc.


Hi
Thanks, that works for me... but the others used to work all the  
time... anyway updating now...

Thanks again
Eoghan___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvsup

2006-10-25 Thread Bill Moran
In response to eoghan [EMAIL PROTECTED]:
 
 On 25 Oct 2006, at 14:03, Gábor Kövesdán wrote:
 
  eoghan wrote:
  Hi
  Trying to cvsup my ports and server is saying:
  Rejected by server: Access limit exceeded, try again later
  So im using cvsup.FreeBSD.org
  but have tried cvsup1.FreeBSD.org, cvsup2.FreeBSD.org and  
  cvsup3.FreeBSD.org
  and get the same message... is there something wrong?
  Thanks
  Eoghan
  Hello,
 
  try cvsup.countrycode.freebsd.org. E.g. cvsup.de.freebsd.org for  
  Germany, cvsup.hu.freebsd.org, etc.
 
 Hi
 Thanks, that works for me... but the others used to work all the  
 time... anyway updating now...

Every cvsup server has a limit to how many concurrent users it will
allow.  You probably just caught them at a busy time.  I'd be willing
to bet that if you try again in a few hours they'll be available again.

-- 
Bill Moran
Collaborative Fusion Inc.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpwrappers SSH

2006-10-25 Thread Alex Zbyslaw

òÉÈÁÄ çÁÄÖÉÅ× wrote:


A comment in /etc/hosts.allow states that:
Wrapping sshd(8) is not normally a good idea

Why? Is it because such restrictions should naturally be made using a 
firewall/PAM/sshd itself/whatever? I think GENERIC sshd wouldn't have been 
built with libwrap support in the first place. Or?
 

I can't answer the question as such, but on a low-ssh-usage box I do use 
/etc/hosts.allow for sshd and it works just fine(**).  The original 
author unfortunately left out the half of the statement that explained 
their reasoning.  Perhaps it's just to do with trying to maintain 
large(*) lists of hosts, which IIRC, hosts.allow is not overly efficient 
for.


--Alex

(*) large probably means hundreds.  IIRC the relevant library will just 
scan down the list of hosts/addresses and compare each, rather than 
trying anything clever with a db file or whatever.


(**) And I block access in the firewall.  Security in depth - if I 
bugger up one level, the other level still holds.




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: clean old portsnap snapshots?

2006-10-25 Thread Colin Percival
Joe Auty wrote:
 What is the best mechanism for deleting old portsnap shots to free up
 some space? Or, is this supposed to be handled automatically?

It should be handled automatically.

Colin Percival
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Nvidia on CURRENT...

2006-10-25 Thread Anders Troback
On Tue, 24 Oct 2006 13:56:03 +0200
Tore Lund [EMAIL PROTECTED] wrote:

 Anders Troback wrote:
  On Tue, 17 Oct 2006 15:14:38 +0200
  Tore Lund [EMAIL PROTECTED] wrote:
  
  Anders Troback wrote:
  On Tue, 17 Oct 2006 11:25:05 +0400
  Andrew Pantyukhin [EMAIL PROTECTED] wrote:
  I have it working fine on my current. Have you disabled agp in
  kernel config?
  No, should I? Running on GENERIC!
  It's a little easier to try it out by putting this line into
  /boot/device.hints:
 
  hint.agp.0.disabled=1
  
  No, no luck!
  
  This is the error from startx:
  
  NVIDIA: could not open the device file /dev/nvidiactl (No such file
  or directory).
  (EE) NVIDIA(0): Failed to initialize the NVIDIA kernel module!
  Please ensure
  (EE) NVIDIA(0): that there is a supported NVIDIA GPU in this
  system, and (EE) NVIDIA(0): that the NVIDIA device files have been
  created properly. (EE) NVIDIA(0): Please consult the NVIDIA README
  for details. (EE) NVIDIA(0):  *** Aborting ***
  (EE) Screen(s) found, but none have a usable configuration.
  
  And yes there is a Nvidia GPU in my system (at least when I'm
  running 6.2):-)
 
 Hmmm.  What about dmesg?  Does it report the device nvidia0 or
 anything else with nvidia chips?  And are you running nvidia-settings?
 
 The port nvidia-xconfig solved some problems for me by modifying my
 xorg.conf.  And I solved a couple of other problems by browsing the
 Nvidia knowledgebase:
 
 http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_alp.php
 
 (Though, I am running 6.1-RELEASE.)

Dmesg, nothing but pciconf outputs this info:

[EMAIL PROTECTED]:0:0:   class=0x03 card=0x01cc1028 chip=0x01d810de
rev=0xa1 hdr=0x00 vendor   = 'NVIDIA Corporation'
class= display
subclass = VGA

If I boot into my 6.2-PRERELASE it works...!


\\troback


-- 


Microsoft is not the answer.
Microsoft is the question.
And 'No' is the answer!

Anders Trobäck
http://www.troback.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


problems in rtorrent

2006-10-25 Thread krutik
What's this error in the rtorrent 0.5.3 ?:

Caught Segmentation fault, dumping stack
Stack dump not enabled.
  

-- 
Best regards,
 krutik  mailto:[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [OT] a mysql question

2006-10-25 Thread Chris


On Oct 24, 2006, at 6:52 PM, jan gestre wrote:


On 10/25/06, Jonathan Horne [EMAIL PROTECTED] wrote:


i do know how to import a .sql database dump, i was just wondering  
if i

can do
it via a restore job from netbackup.  any opinions i can get, are  
greatly

appreciated.


to backup a mysql database:

$ mysqldump -u user -p --opt databasename  database.bak.sql

to restore a database from the backup:

$ mysql -u user -p database  database.bak.sql

just make sure user has privileges to do the necessary commands, if  
not you
can use the root user of mysql. you can also use a gui tool like  
phpmyadmin

for managing mysql.


Just an extra detail. Be sure that you not only do a mysqldump for your
application databases but also dump the mysql database so you don't
lose any internal permission records you've created. You or your apps
will have likely created records in that database necessary for when you
attempt to actually use your restored application databases. The  
resulting

dump will need to be edited before you try to recover since your setup
of mysql on the restored server will automatically create the  
structures.

The dump file will duplicate the creation (not good). Get around that by
deleting everything in that dump file except the INSERT statements for
records you've created. They will usually be somewhat obvious, e.g.,
you may have an entry for daemon if a webserver cgi application has
been granted access to some database.

The records you will be interested in backing up
are from the database mysql and the table called user. These must
be restored after you restore the application databases in most cases
since they refer to the existence of the application database.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


xsane scsi scanner Error during device I/O

2006-10-25 Thread Per olof Ljungmark

Hi,

6.1-STABLE
xsane  xsane-backends
slide scanner Microtek 35 (supported according to docs)

pass3: Polaroid Polaroid 35/LE 1.40 Fixed Scanner SCSI-CCS device

on

ahc1: Adaptec 2930CU SCSI adapter port 0x1400-0x14ff mem 
0xf0901000-0xf0901fff irq 22 at device 11.0 on pci5


The brief Error during device I/O is the only message I get, nothing 
else anywhere.

What can I do to try to solve this?

Thanks,
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Shell question

2006-10-25 Thread Jack Stone

Folks:
I have managed to piece together a shell script that is able to retrieve the 
domains from the spams of the day and summarize those in a special file that 
can then be added to the sendmail's rejects in the access.db. But, first I 
have to eyeball the list and remove any obvious good-guy domains.


I would like to create another list of those same good guys that can be 
added to each day as they show up, then compare it to the above main list 
and delete the good guy domains before adding to the access.db.


What would be the best way of doing the above in a few lines added to my 
(sh) shell script?


BTW: The spam list of domains are listed in a column one below the other 
in a flat file.


Appreciate your usual fine advice on this. Hope I have been clear.

Thanks!

Jack

_
Find a local pizza place, music store, museum and more…then map the best 
route!  http://local.live.com?FORM=MGA001


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpwrappers SSH

2006-10-25 Thread Brian A. Seklecki

On Wed, 25 Oct 2006, Alex Zbyslaw wrote:


òÉÈÁÄ çÁÄÖÉÅ× wrote:


A comment in /etc/hosts.allow states that:
Wrapping sshd(8) is not normally a good idea


With tcpwrappers, you still have to open a socket and burn 
cycles/ram/resources on the 3-way, followed by a quick RST.


With pf(4), you can maintain a hash list on a L4 block rule and it's much 
more efficient.  No RST needed.


~BAS___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: tcpwrappers SSH

2006-10-25 Thread Paul Schmehl
--On Wednesday, October 25, 2006 12:08:26 +0400 Рихад Гаджиев 
[EMAIL PROTECTED] wrote:



A comment in /etc/hosts.allow states that:
Wrapping sshd(8) is not normally a good idea

Why? Is it because such restrictions should naturally be made using a
firewall/PAM/sshd itself/whatever? I think GENERIC sshd wouldn't have
been built with libwrap support in the first place. Or?

Because maintaining the access list can be quite ponderous if you have a 
lot of users.


I maintain a hobby website that only has two shell accounts.  I use 
hosts.allow for ssh because it gets rid of the brute-force crap.  But even 
for two users, the list of hosts/networks that are allowed is 10 or 15. 
Imagine what it would be if you have a hundred users...or a thousand.


Paul Schmehl ([EMAIL PROTECTED])
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/


Re: Shell question

2006-10-25 Thread Vince

Jack Stone wrote:
 Folks:
 I have managed to piece together a shell script that is able to retrieve
 the domains from the spams of the day and summarize those in a special
 file that can then be added to the sendmail's rejects in the access.db.
 But, first I have to eyeball the list and remove any obvious good-guy
 domains.
 
 I would like to create another list of those same good guys that can be
 added to each day as they show up, then compare it to the above main
 list and delete the good guy domains before adding to the access.db.
 
 What would be the best way of doing the above in a few lines added to my
 (sh) shell script?
 
hmm probably not the best but

egrep -v -f goodguys.txt spamers.txt

will only spit out the domains in spammers.txt that are not in goodguys.txt

goodguys.txt is a file of good guys domains in the format

aa.com|bb.com|cc.com|dd.com

creating this file programaticly shouldnt be too hard. not sure how well
this will scale as i only tested it with 5 or so names.
Vince


 BTW: The spam list of domains are listed in a column one below the
 other in a flat file.
 
 Appreciate your usual fine advice on this. Hope I have been clear.
 
 Thanks!
 
 Jack
 
 _
 Find a local pizza place, music store, museum and more…then map the best
 route!  http://local.live.com?FORM=MGA001
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


[EMAIL PROTECTED]: The results of your email commands]

2006-10-25 Thread Gary Kline
Folks, how can I un-sub from the -queestions list that is sent to 
[EMAIL PROTECTED] when the mailer thinks I am NOT a Subscriber???  See my 
//HERE
tag below

gary





- Forwarded message from [EMAIL PROTECTED] -

Date: Wed, 25 Oct 2006 09:07:13 -0700
From: [EMAIL PROTECTED]
Subject: The results of your email commands
To: [EMAIL PROTECTED]

The results of your email command are provided below. Attached is your
original message.

//  HERE::

- Results:
[EMAIL PROTECTED] is not a member of the freebsd-questions mailing list

- Unprocessed:
unsub me
-- 
Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
Thought Unlimited Org's Alternate Email Site
http://www.magnesium.net/~kline
   To live is not a necessity; but to live honorably...is a necessity. -Kant

- Done.


Date: Wed, 25 Oct 2006 09:07:12 -0700
From: Gary Kline [EMAIL PROTECTED]
Subject: unsub me
To: [EMAIL PROTECTED]


-- 
Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
Thought Unlimited Org's Alternate Email Site
http://www.magnesium.net/~kline
   To live is not a necessity; but to live honorably...is a necessity. -Kant



- End forwarded message -

-- 
Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
Thought Unlimited Org's Alternate Email Site
http://www.magnesium.net/~kline
   To live is not a necessity; but to live honorably...is a necessity. -Kant

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Moving jails from one computer to another

2006-10-25 Thread Doug Poland
Hello,

I'm curious if anyone has comments on moving a jail environment from
one computer to another.  Not having actually tried it yet, it would
seem to be possible given:

Both computers:
   are the same arch (i386, in my case).
   are running the same kernel and userland (e.g., FreeBSD RELENG_6_1)
   have identical jail environments (e.g., sysutils/ezjail)

Of course, minor modifications may need to be made for IP addresses
and such.

It would seem this scenario would be good for developing things like
web-based applications on a development server, then deploying the
final product to a production server.

Comments, thoughts, criticisms welcomed.


-- 
Regards,
Doug

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Fatal error 'Spinlock called when not threaded.'

2006-10-25 Thread Tuc at T-B-O-H.NET
Hi,

Out of no where I started to get :

Fatal error 'Spinlock called when not threaded.' at line 87 in file /usr/src/lib
/libpthread/thread/thr_spinlock.c (errno = 0)

On alot of programs. I thought it had to do with GTK/GNOME so I
did :

  pkgdb -Ff
  portupgrade -rf pkg-config\*

as per the 20061014 instructions. I got to ORBit2.0 and it did
it again. The compile was called as :

configure:22617: cc -o conftest -O -pipe  -I/usr/local/include  -L/usr/local/lib
 conftest.c -pthread -Wl,--export-dynamic -L/usr/local/lib -lgobject-2.0 -lgthre
ad-2.0 -lgmodule-2.0 -lglib-2.0 -liconv5

and gave :

Fatal error 'Spinlock called when not threaded.' at line 87 in file /usr/src/lib
/libpthread/thread/thr_spinlock.c (errno = 0)


If I look at all the libraries :

-lgobject-2.0 : New as of Oct 25 09:53
-lgthread-2.0 : New as of Oct 25 09:53
-lgmodule-2.0 : New as of Oct 25 09:53
-lglib-2.0: New as of Oct 25 09:53

So I'm stuck now... Help

My /etc/libmap.conf only does mapping by file, not
generically  :

[/usr/X11R6/lib/linux-flashplugin7/libflashplayer.so]
[/usr/X11R6/Adobe/Acrobat7.0/ENU/Browser/intellinux/nppdf.so]
[/usr/local/Acrobat7/Browser/intellinux/nppdf.so]
[/usr/X11R6/lib/linux-mozilla/plugins/nphelix.so]
[/usr/local/jdk1.4.2/jre/lib/i386/libJ3D.so]
[/usr/local/jdk1.4.2/jre/lib/i386/libj3daudio.so]
[/usr/local/jdk1.4.2/jre/lib/i386/libJ3DUtils.so]
[/usr/local/jdk1.4.2/jre/lib/i386/libmlib_jai/libmlib_jai.so]
[/usr/local/jdk1.4.2/jre/lib/i386/libclib_jiio.so]


Thanks, Tuc

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Ports: Darwin Streaming Server

2006-10-25 Thread andrew
Hi!

I'm compiling the port of net/DarwinStreamingServer and ran into an error:

[...]
Installing source build of Darwin Streaming Server
copying Install to FreeBSD
copying DarwinStreamingServer to FreeBSD/DarwinStreamingServer
cp: DarwinStreamingServer: No Such File or Directory
*** Error code 1


I looked for this file in the original source tarball I and don't see it.
I do see this file in the Linux tarball. Does this port require the Linux
binary tarball instead of the Source download? Yet the makefile
specifically stated using DarwinStreamingSrvr5.5.3-Source.tar.

I had found a set of FreeBSD binaries (woefully out of date) that seemed
to be compiled from the Linux download and running under Linux emulation.
Is this the case for the FreeBSD port?

I'm not subscribed to this list, so please Cc: me on any replies.

Thanks.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Shell question

2006-10-25 Thread cpghost
On Wed, Oct 25, 2006 at 09:53:47AM -0500, Jack Stone wrote:
 I have managed to piece together a shell script that is able to retrieve 
 the domains from the spams of the day and summarize those in a special file 
 that can then be added to the sendmail's rejects in the access.db. But, 
 first I have to eyeball the list and remove any obvious good-guy domains.

The domains from the spams? That's almost always pretty useless:

1. The only reliable information is what's in the SMTP envelope.
Headers like From: etc... are always spoofed and almost always
pointing to either inexistant or innocent victim domains (which
then get flooded by bounces).

2. The IP-Addresses from the senders (from the SMTP envelope or
at most the last Received: header, if you don't operate your own
MTA), will almost always point to PTR of some big broadband ISPs
hosting some infected Windows spam drones. Blocking the *domain*
name of the ISP (esp. the big ones) would be is silly, because
that would lock out a lot of legitimate users that send mails
through their (ISPs) mailers.

The bottom line: you'll end up banning 99% of innocent domains,
and still get flooded with spams, since spammers can and do fake
a HUGE amount of domain names.

However, blocking IP addresses using RBLs like spamhaus.org,
greylisting, and, to a lesser extent, using SPF (once it gets
more widely adopted) can do wonders, if you operate your own MTA.

E.g. the following Postfix configuration in
/usr/local/etc/postfix/main.cf is a bit tight, but very effective
in most setups:

smtpd_recipient_restrictions = 
permit_mynetworks,
reject_unauth_destination,
reject_unauth_pipelining,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
# check_sender_access hash:/usr/local/etc/postfix/sender_access,
# check_recipient_access hash:/usr/local/etc/postfix/recipient_access,
# check_helo_access hash:/usr/local/etc/postfix/secondary_mx_access,
# reject_rbl_client bl.spamcop.net,
reject_rbl_client sbl-xbl.spamhaus.org,
reject_rbl_client list.dsbl.org,
reject_rbl_client dnsbl.njabl.org,
reject_rbl_client relays.ordb.org,
reject_rbl_client opm.blitzed.org,
# reject_rbl_client dnsbl.sorbs.net,
check_policy_service unix:private/spfpolicy,
check_policy_service inet:127.0.0.1:10023,
# The following are a bit tight, but they won't do any harm
reject_invalid_hostname, 
reject_non_fqdn_hostname,
reject_unknown_hostname,
reject_non_fqdn_sender,
reject_unknown_sender_domain,
# check_client_access hash:/usr/local/etc/postfix/client_access,
reject_unknown_client

One can do even more, but that should be enough for now,
considerung the current state of the art of the spam engines.

If you prefer sendmail, a sendmail guru will certainly help translating
most directives from this config... ;)

 Jack

Good luck,
-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Just wondering ...

2006-10-25 Thread Kiffin Gish
Just wondering if anyone else has also been having problems upgrading
from Gnome 2.14 60 2.16.

Does it run on FreeBSD 6.1 or do I have to wait for 6.2?

-- 
Kiffin Gish [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Bug with tcsh? : if evaluating true instead of false

2006-10-25 Thread David Robillard

Ok, so I tried to make a simple script to add users so I wouldn't have
to type in groups/pw over and over again... the problem is that it's not
behaving like it should =o.


[ ...8... Removed a bunch of lines ...8... ]

IMHO, if you need to script something, use /bin/sh. It's the standard
shell interpreter on all flavors of UNIX and Linux (except maybe MacOS
X). All of the rc scripts are written with it. So why bother with
another shell?

Here's an interesting read on the topic:
http://www.faqs.org/faqs/unix-faq/shell/csh-whynot/
BTW, Tom Christiansen who wrote this is co-author of Programming
Perl from O'Reilly.

So, Garret, if you need help with this, I have a /bin/sh version of
the script you're trying to do. Just drop me a line and I'll send it
to you.

Just my two cents :)

David
--
David Robillard
UNIX systems administrator  Oracle DBA
CISSP, RHCE  Sun Certified Security Administrator
Montreal: +1 514 966 0122
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [EMAIL PROTECTED]: The results of your email commands]

2006-10-25 Thread Jerry McAllister
On Wed, Oct 25, 2006 at 09:13:43AM -0700, Gary Kline wrote:

olks, how can I un-sub from the -queestions list that is sent 
 to [EMAIL PROTECTED] when the mailer thinks I am NOT a Subscriber???  
 See my //HERE
   tag below

Probably you subscribed with a different address that is now forwarded
to your [EMAIL PROTECTED] address.   If you can figure out where that
forward lives, then you can log in there and do the unsubscribe.

jerry

 
   gary
 
 
 
 
 
 - Forwarded message from [EMAIL PROTECTED] -
 
 Date: Wed, 25 Oct 2006 09:07:13 -0700
 From: [EMAIL PROTECTED]
 Subject: The results of your email commands
 To: [EMAIL PROTECTED]
 
 The results of your email command are provided below. Attached is your
 original message.
 
 //  HERE::
 
 - Results:
 [EMAIL PROTECTED] is not a member of the freebsd-questions mailing list
 
 - Unprocessed:
 unsub me
 -- 
 Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
 Thought Unlimited Org's Alternate Email Site
   http://www.magnesium.net/~kline
To live is not a necessity; but to live honorably...is a necessity. 
 -Kant
 
 - Done.
 
 
 Date: Wed, 25 Oct 2006 09:07:12 -0700
 From: Gary Kline [EMAIL PROTECTED]
 Subject: unsub me
 To: [EMAIL PROTECTED]
 
 
 -- 
 Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
 Thought Unlimited Org's Alternate Email Site
   http://www.magnesium.net/~kline
To live is not a necessity; but to live honorably...is a necessity. -Kant
 
 
 
 - End forwarded message -
 
 -- 
 Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
 Thought Unlimited Org's Alternate Email Site
   http://www.magnesium.net/~kline
To live is not a necessity; but to live honorably...is a necessity. -Kant
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Moving jails from one computer to another

2006-10-25 Thread pete wright

On 10/25/06, Doug Poland [EMAIL PROTECTED] wrote:

Hello,

I'm curious if anyone has comments on moving a jail environment from
one computer to another.  Not having actually tried it yet, it would
seem to be possible given:

Both computers:
   are the same arch (i386, in my case).
   are running the same kernel and userland (e.g., FreeBSD RELENG_6_1)
   have identical jail environments (e.g., sysutils/ezjail)

Of course, minor modifications may need to be made for IP addresses
and such.

It would seem this scenario would be good for developing things like
web-based applications on a development server, then deploying the
final product to a production server.

Comments, thoughts, criticisms welcomed.




yea, this is actually one the larger benefits of jailing IMO.  i've
used this method to help setup distributed mirroring of websites for
some OSS projects.

-pete



--
~~o0OO0o~~
Pete Wright
www.nycbug.org
NYC's *BSD User Group
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: HA Cluster based on promise VTrack Mxxx

2006-10-25 Thread Damian Wiest
On Wed, Oct 25, 2006 at 11:56:19AM +0200, bsd wrote:
 Hello,
 
 I am trying to figure out which hardware to build my HA cluster with.
 
 I have seen various promise systems which seems quite interesting  
 (VTrack M210p) but FreeBSD is not mentionned as an official suported  
 OS on their brochure.
 
 Has anyone build such cluster with this kind of attachement.
 
 
 The cluster I was thinking about will be built with :
 
 - 2 nodes Pentium Xeon with SCSI card
 - 1 VTrack External Storage M210p (this one has automatic failure  
 detection included on It's hardware).
 - Linux-HA as a control solution
 
 
 Has anyone built such cluster with these hardware ?
 
 If not what have you been using ?
 
 
 Sincerly yours.

I wish you had asked two or three weeks ago as I setup a couple of
VTrak M500f arrays, but they were attached to Windows servers.  If we 
get any more in, I could probably do a quick test with FreeBSD.

The M500f supports fibre channel, SCSI and iSCSI so I would assume that
if you have an appropriate driver for one of those protocols, then
it should work for you.  Array configuration can be done very simply
either through the network management port, serial port or HTTP interface.
The HTTP interface is very nice and doesn't depend on Java or 
Internet Explorer, but it does require Javascript support on the client
end to work properly.  I'd definitely recommend this controller if you
have the cash to spare.

I know you mentioned external arrays, but a lot of people are reporting
success with the Promise SATA and LSI MegaRAID controllers.

Someone asked a similar question on the freebsd-hardware a few weeks 
ago, but I didn't see any replies.

-Damian

[1] http://www.mail-archive.com/freebsd-hardware@freebsd.org/msg01521.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


giflib port??

2006-10-25 Thread Odhiambo Washington

Does anyone have some news how I can install giflib on FreeBSD?

Thanks.

-Wash

--
+==+
|\  _,,,---,,_ | Odhiambo Washington[EMAIL PROTECTED]
Zzz /,`.-'`'-.  ;-;;,_ | Wananchi Online Ltd.   www.wananchi.com
   |,4-  ) )-,_. ,\ (  `'-'| Tel: +254 20 313985-9  +254 20 313922
  '---''(_/--'  `-'\_) | GSM: +254 722 743223   +254 733 744121
+==+

Rudin's Law:
If there is a wrong way to do something, most people will do it
every time.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Ports: Darwin Streaming Server

2006-10-25 Thread andrew
Okay. I found the fix to my problem. For the archives, I found the answer
on the Apple Streaming-Server-Users mailling list here:

http://lists.apple.com/archives/streaming-server-users/2004/Apr/msg00214.html

The Buildit script in the source/work directory
(work/DarwinStreamingSrvr5.5.3-Source/) refers to the CCOMP environment
variable, so rather than change the Buildit script I did the following:

#setenv CCOMP g++
#make clean  make

and it builds fine.



--Original Message--
 Hi!

 I'm compiling the port of net/DarwinStreamingServer and ran into an error:

 [...]
 Installing source build of Darwin Streaming Server
 copying Install to FreeBSD
 copying DarwinStreamingServer to FreeBSD/DarwinStreamingServer
 cp: DarwinStreamingServer: No Such File or Directory
 *** Error code 1


 I looked for this file in the original source tarball I and don't see it.
 I do see this file in the Linux tarball. Does this port require the Linux
 binary tarball instead of the Source download? Yet the makefile
 specifically stated using DarwinStreamingSrvr5.5.3-Source.tar.

 I had found a set of FreeBSD binaries (woefully out of date) that seemed
 to be compiled from the Linux download and running under Linux emulation.
 Is this the case for the FreeBSD port?

 I'm not subscribed to this list, so please Cc: me on any replies.

 Thanks.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [EMAIL PROTECTED]: The results of your email commands]

2006-10-25 Thread Gary Kline
On Wed, Oct 25, 2006 at 12:55:57PM -0400, Jerry McAllister wrote:
 On Wed, Oct 25, 2006 at 09:13:43AM -0700, Gary Kline wrote:
 
 olks, how can I un-sub from the -queestions list that is sent 
  to [EMAIL PROTECTED] when the mailer thinks I am NOT a Subscriber???  
  See my //HERE
  tag below
 
 Probably you subscribed with a different address that is now forwarded
 to your [EMAIL PROTECTED] address.   If you can figure out where that
 forward lives, then you can log in there and do the unsubscribe.


Or maybe I signed up using [EMAIL PROTECTED] ???
I have just a 144k ISDL link and the only browser that magnesium uses 
is links -g for GUI.  IW'll give it a shot, Jerry, thanks.

gary



 
 jerry
 
  
  gary
  
  
  
  
  
  - Forwarded message from [EMAIL PROTECTED] -
  
  Date: Wed, 25 Oct 2006 09:07:13 -0700
  From: [EMAIL PROTECTED]
  Subject: The results of your email commands
  To: [EMAIL PROTECTED]
  
  The results of your email command are provided below. Attached is your
  original message.
  
  //  HERE::
  
  - Results:
  [EMAIL PROTECTED] is not a member of the freebsd-questions mailing list
  
  - Unprocessed:
  unsub me
  -- 
  Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
  Thought Unlimited Org's Alternate Email Site
  http://www.magnesium.net/~kline
 To live is not a necessity; but to live honorably...is a necessity. 
  -Kant
  
  - Done.
  
  
  Date: Wed, 25 Oct 2006 09:07:12 -0700
  From: Gary Kline [EMAIL PROTECTED]
  Subject: unsub me
  To: [EMAIL PROTECTED]
  
  
  -- 
  Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
  Thought Unlimited Org's Alternate Email Site
  http://www.magnesium.net/~kline
 To live is not a necessity; but to live honorably...is a necessity. -Kant
  
  
  
  - End forwarded message -
  
  -- 
  Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
  Thought Unlimited Org's Alternate Email Site
  http://www.magnesium.net/~kline
 To live is not a necessity; but to live honorably...is a necessity. -Kant
  
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
Thought Unlimited Org's Alternate Email Site
http://www.magnesium.net/~kline
   To live is not a necessity; but to live honorably...is a necessity. -Kant

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Issues with Dual-Core CPU's and SMP+Generic Kernel...?

2006-10-25 Thread perikillo

 Hi people.

 Yesterday i was trying to setup another backup server with FreeBSD 6.1 and
Bacula.

This is my first time that i work with one Dual Core system and FreeBSD.

This is the system:

FreeBSD 6.1-RELEASE #0: Sun May  7 04:42:56 UTC 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/SMP
Preloaded elf kernel /boot/kernel/kernel at 0xc0afd000.
Preloaded elf module /boot/kernel/acpi.ko at 0xc0afd19c.
Calibrating clock(s) ... i8254 clock: 1190820 Hz
CLK_USE_I8254_CALIBRATION not specified - using default frequency
Timecounter i8254 frequency 1193182 Hz quality 0
Calibrating TSC clock ... TSC clock: 3006012457 Hz
CPU: Intel(R) Pentium(R) 4 CPU 3.00GHz (3006.01-MHz 686-class CPU)
Origin = GenuineIntel  Id = 0xf43  Stepping = 3
Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE
 Features2=0x649dSSE3,RSVD2,MON,DS_CPL,EST,CNTX-ID,CX16,b14
 AMD Features=0x2000LM
 Logical CPUs per core: 2
real memory  = 1063841792 (1014 MB)

ACPI APIC Table: INTEL  D945GTP 
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs

cpu0: ACPI CPU on acpi0
cpu1: ACPI CPU on acpi0

SMP: AP CPU #1 Launched!
cpu1 AP:
ID: 0x0100   VER: 0x00050014 LDR: 0x DFR: 0x
 lint0: 0x00010700 lint1: 0x0400 TPR: 0x SVR: 0x01ff
 timer: 0x000200ef therm: 0x0001 err: 0x0001 pcm: 0x0001
Trying to mount root from ufs:/dev/ad4s1a
start_init: trying /sbin/init

SMP: AP CPU #1 Launched!  This doesn't tell me that he just is going to use
1 CPU...?

The hard disk is one WD 320GB SATA, which just see 305GB but this is another
history!!

The layout i was trying to setup for the disk was:

/  512MB
SWAP 2000MB
/usr 20480MB
/var 8192 MB
/home 2048MB
/tmp 1024MB
/backups 264GB

With this layout the system didnt in boot multi-user enviroment, just
single-user, and the error was:

start_init: trying /sbin/init
.:Out of File Descriptors

The system just let me go into single-user mode.

I modify /boot/loader.conf

kern.maxfiles=   # Set the sys. wide open files limit
kern.maxproc=# Set the maximum # of processes
kern.maxssiz=# Set the max stack size
kern.maxusers= # Set size of various static tables

I play with this values, the last value that i use was kern.maxusers = 8192
which crash my system with a Kernel Trap 12, I couldnt recover my system,
doesnt even let go to Single-User Mode.

Ok for this i googling around but nothing clear, i setup freebsd about 10
times, i use GENERIC and SMP kernel and the same problem, different
settings, a lot of time invest.

After a will, i decide to setup the disk with the Automatic Layout and
GENERIC kernel only and WOW my system boot in Multi-User enviroment,
no moreOut of File Descriptor.

Them i decide to boot with SMP kernel and again, a success!!!

Them i start working with the disk, i use the same layout except for /home:

/  512MB
SWAP 2000MB
/usr 20480MB
/var 8192 MB
/tmp 1024MB
/backups 267GB

Load both GENERIC  SMP kernels, and everything is working right now, i
just want to know if thereis a problem between the Disk Setup or Layout and
the Kernels...?
Why and how i fix this problem of Out of file descriptors...?

Right now, i will customize my kernel, i wouldnt do the BuildWorld stuff,
because this is a remote system, until next week will visit this system and
rebuild everthing.

Thanks all for your time, greetings!!!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: giflib port??

2006-10-25 Thread Dan Nelson
In the last episode (Oct 25), Odhiambo Washington said:
 Does anyone have some news how I can install giflib on FreeBSD?

Isn't giflib superceded by libungif (which is in ports)?

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Where are CVS Tags Announced

2006-10-25 Thread Jason C. Wells
I was looking forward to the tagging of RELEASE_6_2 in the ports tree.  
I surfed around cvsweb but didn't see anything that looked like a tag 
announcement.  Where do I look to determine if the sources have been 
tagged with a new release? 


Thanks,
Jason
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Where are CVS Tags Announced

2006-10-25 Thread Eric

Jason C. Wells wrote:
I was looking forward to the tagging of RELEASE_6_2 in the ports tree.  
I surfed around cvsweb but didn't see anything that looked like a tag 
announcement.  Where do I look to determine if the sources have been 
tagged with a new release?

Thanks,
Jason
___



this is where i check for them:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvs-tags.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [EMAIL PROTECTED]: The results of your email commands]

2006-10-25 Thread Alex Zbyslaw

Gary Kline wrote:


Folks, how can I un-sub from the -queestions list that is sent to [EMAIL 
PROTECTED] when the mailer thinks I am NOT a Subscriber???  See my //HERE
tag below
 

Once a month you should be getting a reminder from 
[EMAIL PROTECTED] with the subject freebsd.org mailing list 
memberships reminder which would tell you what address you subscribed 
under (as well as your password and a link to let you fiddle with options).


So if you kept one of those, you'll have your answer. If not try 
examining the whole headers from a message to the mailing to see if they 
hold any clues.


Failing all that try emailing [EMAIL PROTECTED] to see 
if they can spot some obvious variant of your address.


--Alex


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Where are CVS Tags Announced

2006-10-25 Thread Jerry McAllister
On Wed, Oct 25, 2006 at 10:41:16AM -0700, Jason C. Wells wrote:

 I was looking forward to the tagging of RELEASE_6_2 in the ports tree.  
 I surfed around cvsweb but didn't see anything that looked like a tag 
 announcement.  Where do I look to determine if the sources have been 
 tagged with a new release? 

Sign up for the freebsd-announce Email list.   
It only gets messages when something is officially announced so it won't
add much traffic to your Email.

jerry

 
 Thanks,
 Jason
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [EMAIL PROTECTED]: The results of your email commands]

2006-10-25 Thread Jerry McAllister
On Wed, Oct 25, 2006 at 10:32:14AM -0700, Gary Kline wrote:

 On Wed, Oct 25, 2006 at 12:55:57PM -0400, Jerry McAllister wrote:
  On Wed, Oct 25, 2006 at 09:13:43AM -0700, Gary Kline wrote:
  
  olks, how can I un-sub from the -queestions list that is sent 
   to [EMAIL PROTECTED] when the mailer thinks I am NOT a Subscriber???  
   See my //HERE
 tag below
  
  Probably you subscribed with a different address that is now forwarded
  to your [EMAIL PROTECTED] address.   If you can figure out where that
  forward lives, then you can log in there and do the unsubscribe.
 
 
   Or maybe I signed up using [EMAIL PROTECTED] ???

Could be.  I manage a couple of lists and that sort of thing happens
a lot, especially at sites where there is a central domain based
Email distribution system.

Good luck,

jerry

 
   gary
 
 
 
  
  jerry
  
   
 gary
   
   
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ACL: Default and other problems

2006-10-25 Thread Chuck Swiger

On Oct 25, 2006, at 5:33 AM, Nico -telmich- Schottelius wrote:

This constraint makes the problem impossible to solve.  Either you
are interested in the impossible, or you aren't really looking to
solve the problem using standard Unix mechanisms...


Actually, I am really not looking for 'old Unix mechanism' to solve
that issue, because I think ACLs are definetly made for this kind of
problem.


OK.


I've been using ACLs on Linux for some years now and I am really
wondering why simply applying the default ACLs is such a problem
in fbsd.

As far as I know, ACLs are considered stable in FreeBSD, aren't they?


5.3 was the earliest stable release of 5.x; the TrustedBSD project  
has been importing improvements and so forth since 5.3 was released.   
You might want to retry your tests with FreeBSD 5.5 or 6.2 and see  
whether things have improved since then.


I am really wondering who to contact for the issues I've reported  
on [0].


Thanks for any hints,

Nico

[0]: http://home.schottelius.org/~nico/freebsd/acl/


You should probably use send-pr to file a bug report, and list your  
test-cases in it.  If you can write a patch to improve or fix any mis- 
behavior by the tools dealing with ACLs, that will help...


--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvsup

2006-10-25 Thread Kent Stewart
On Wednesday 25 October 2006 06:07, eoghan wrote:
 On 25 Oct 2006, at 14:03, Gábor Kövesdán wrote:
  eoghan wrote:
  Hi
  Trying to cvsup my ports and server is saying:
  Rejected by server: Access limit exceeded, try again later
  So im using cvsup.FreeBSD.org
  but have tried cvsup1.FreeBSD.org, cvsup2.FreeBSD.org and
  cvsup3.FreeBSD.org
  and get the same message... is there something wrong?
  Thanks
  Eoghan
 
  Hello,
 
  try cvsup.countrycode.freebsd.org. E.g. cvsup.de.freebsd.org for
  Germany, cvsup.hu.freebsd.org, etc.

 Hi
 Thanks, that works for me... but the others used to work all the
 time... anyway updating now...
 Thanks again

Try using fastest_cvsup and you can see what kind of response the 
servers are providing. I did a 
fastest_cvsup -c us
and it showed at 1837 UTC that 1 and 3 were at the limit and cvsup6 is 
probably down.

They update from the master on the hour and you need to wait 10-15 
minutes for the update to finish. There isn't any magic time where they 
all work but you can find one closer to the next update where you get 
through almost all of the time.

Kent

-- 
Kent Stewart
Richland, WA

http://www.soyandina.com/ I am Andean project.
http://users.owt.com/kstewart/index.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpwrappers SSH

2006-10-25 Thread Eric Schuele

On 10/25/06 09:56, Paul Schmehl wrote:
--On Wednesday, October 25, 2006 12:08:26 +0400 ? ??? 
[EMAIL PROTECTED] wrote:



A comment in /etc/hosts.allow states that:
Wrapping sshd(8) is not normally a good idea

Why? Is it because such restrictions should naturally be made using a
firewall/PAM/sshd itself/whatever? I think GENERIC sshd wouldn't have
been built with libwrap support in the first place. Or?

Because maintaining the access list can be quite ponderous if you have a 
lot of users.


I maintain a hobby website that only has two shell accounts.  I use 
hosts.allow for ssh because it gets rid of the brute-force crap.  But 
even for two users, the list of hosts/networks that are allowed is 10 or 
15. Imagine what it would be if you have a hundred users...or a thousand.


Viewed from a slightly different angle...

If you are responsible for maintaining machine xyz, and you have used 
tcpwrappers... chances are you'll eventually need access to that machine 
from a location you did not previously expect.  Maybe your sitting in 
the airport and get a call that the machine is malfunctioning.  Maybe 
you are on call at a social gathering.  In any case, you'll need access 
and if it is using tcpwrappers, you may not gain access.


IMHO, other than the problem with needing emergency access, I think 
tcpwrappers is a good thing.  I use then on my laptop for example.  As 
Paul mentions, it gets rid of the constant hammering you would normally 
be subject to, and I can still access it from the office or home.




Paul Schmehl ([EMAIL PROTECTED])
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/



--
Regards,
Eric
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


nice values outside the expected range ...

2006-10-25 Thread Bill Moran

I didn't know this was possible:
  PID USERNAMETHR PRI NICE   SIZERES STATE  C   TIME   WCPU COMMAND
11348 root  1  -4 -100  5740K  5764K getblk 0   0:00  0.00% cdrecord
11346 root  1  -8 -104  5740K  5764K cbwait 0   0:00  0.00% cdrecord

I thought the allowed values for nice were -20 to 20.  Is this something
new in the 6.x branch?

-- 
Bill Moran
Collaborative Fusion Inc.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Bug with tcsh? : if evaluating true instead of false

2006-10-25 Thread Garrett Cooper
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

David Robillard wrote:
 Ok, so I tried to make a simple script to add users so I wouldn't have
 to type in groups/pw over and over again... the problem is that it's not
 behaving like it should =o.
 
 [ ...8... Removed a bunch of lines ...8... ]
 
 IMHO, if you need to script something, use /bin/sh. It's the standard
 shell interpreter on all flavors of UNIX and Linux (except maybe MacOS
 X). All of the rc scripts are written with it. So why bother with
 another shell?
 
 Here's an interesting read on the topic:
 http://www.faqs.org/faqs/unix-faq/shell/csh-whynot/
 BTW, Tom Christiansen who wrote this is co-author of Programming
 Perl from O'Reilly.
 
 So, Garret, if you need help with this, I have a /bin/sh version of
 the script you're trying to do. Just drop me a line and I'll send it
 to you.
 
 Just my two cents :)
 
 David

I appreciate the help thanks! I usually do stuff in either bash or csh,
depending on the level of difficulty, but try to use tcsh for all
FreeBSD scripts on my system since tcsh is included as a part of the
base system. Plus, I do like tcsh better in some ways because the syntax
is similar to C/C++ and Java, but as you saw if I get in a programming
funk with either of the 3 beforementioned languages, it's fun
remembering language semantics sometimes :).

I'd appreciate the script though, definitely, as any resource I have to
learn all Unix script languages properly will only help in my becoming a
better Unix admin as well as script more common tasks to help make my
life a bit easier.

Thanks!
- -Garrett
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFP7e66CkrZkzMC68RAhsUAJ93jj0Qx1aFcVPLe0WT9xGnSiaEIQCdFiq1
D3AaQo5y5wv9Pcn8G4WbYQM=
=LcA7
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpwrappers SSH

2006-10-25 Thread Paul Schmehl
--On Wednesday, October 25, 2006 13:58:27 -0500 Eric Schuele 
[EMAIL PROTECTED] wrote:


Viewed from a slightly different angle...

If you are responsible for maintaining machine xyz, and you have used
tcpwrappers... chances are you'll eventually need access to that machine
from a location you did not previously expect.  Maybe your sitting in the
airport and get a call that the machine is malfunctioning.  Maybe you are
on call at a social gathering.  In any case, you'll need access and if it
is using tcpwrappers, you may not gain access.

This is *definitely* something that you need to think through.  I have two 
machines at work that are always on, so I can always ssh to them first, 
then to the server and edit the /etc/hosts.allow file to give myself 
temporary access, if needed.  In general, I prefer to go through those 
hosts, rather than open another avenue that I may later forget to remove. 
Since everything I do on those servers (almost) is through ssh, it's not a 
problem for me to need an extra hop before I get to the box.


Paul Schmehl ([EMAIL PROTECTED])
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/


Re: Bug with tcsh? : if evaluating true instead of false

2006-10-25 Thread Garrett Cooper
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

David Robillard wrote:
 Ok, so I tried to make a simple script to add users so I wouldn't have
 to type in groups/pw over and over again... the problem is that it's not
 behaving like it should =o.
 
 [ ...8... Removed a bunch of lines ...8... ]
 
 IMHO, if you need to script something, use /bin/sh. It's the standard
 shell interpreter on all flavors of UNIX and Linux (except maybe MacOS
 X). All of the rc scripts are written with it. So why bother with
 another shell?
 
 Here's an interesting read on the topic:
 http://www.faqs.org/faqs/unix-faq/shell/csh-whynot/
 BTW, Tom Christiansen who wrote this is co-author of Programming
 Perl from O'Reilly.
 
 So, Garret, if you need help with this, I have a /bin/sh version of
 the script you're trying to do. Just drop me a line and I'll send it
 to you.
 
 Just my two cents :)
 
 David

Also, another thing is that a lot of what I was trying to do was not
only add user classes, but also restrict users from accessing my server
unless they were in the wheel group.

Got that done with /etc/login.access by adding:

- -ALL except wheel:ALL

Now since I mentioned it though I was wondering, does this create issues
for secondary daemon accounts (www, mysql, etc)?

Thanks!

- -Garrett
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFP7jj6CkrZkzMC68RAuldAKCDmbEv4P94VUeIrfohLKIkcY1QlQCeKmz2
OCCVA0n6utl0J8AxoIxMWLA=
=Nufx
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpwrappers SSH

2006-10-25 Thread doug



On Wed, 25 Oct 2006, Eric Schuele wrote:


On 10/25/06 09:56, Paul Schmehl wrote:
--On Wednesday, October 25, 2006 12:08:26 +0400 ? ??? 
[EMAIL PROTECTED] wrote:



A comment in /etc/hosts.allow states that:
Wrapping sshd(8) is not normally a good idea

Why? Is it because such restrictions should naturally be made using a
firewall/PAM/sshd itself/whatever? I think GENERIC sshd wouldn't have
been built with libwrap support in the first place. Or?

Because maintaining the access list can be quite ponderous if you have a 
lot of users.


I maintain a hobby website that only has two shell accounts.  I use 
hosts.allow for ssh because it gets rid of the brute-force crap.  But even 
for two users, the list of hosts/networks that are allowed is 10 or 15. 
Imagine what it would be if you have a hundred users...or a thousand.


Viewed from a slightly different angle...

If you are responsible for maintaining machine xyz, and you have used 
tcpwrappers... chances are you'll eventually need access to that machine from 
a location you did not previously expect.  Maybe your sitting in the airport 
and get a call that the machine is malfunctioning.  Maybe you are on call at 
a social gathering.  In any case, you'll need access and if it is using 
tcpwrappers, you may not gain access.


IMHO, other than the problem with needing emergency access, I think 
tcpwrappers is a good thing.  I use then on my laptop for example.  As Paul 
mentions, it gets rid of the constant hammering you would normally be subject 
to, and I can still access it from the office or home.




This could be easily done in sshd_config if the order of processing the 
AllowUsers and DenyUsers directivies was optional. It is not DenyUsers takes 
precedent over AllowUsers. This effective eliminates denying access using a 
pattern.


It looks pretty easy to just switch this in the code, but the right way to do 
it would be to add an apache-like directive order, e.g. order deny,allow. 
Perhaps there is something in the protocols that would disallow this function.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpwrappers SSH

2006-10-25 Thread Eric Schuele

On 10/25/2006 14:13, Paul Schmehl wrote:
--On Wednesday, October 25, 2006 13:58:27 -0500 Eric Schuele 
[EMAIL PROTECTED] wrote:


Viewed from a slightly different angle...

If you are responsible for maintaining machine xyz, and you have used
tcpwrappers... chances are you'll eventually need access to that machine
from a location you did not previously expect.  Maybe your sitting in the
airport and get a call that the machine is malfunctioning.  Maybe you are
on call at a social gathering.  In any case, you'll need access and if it
is using tcpwrappers, you may not gain access.

This is *definitely* something that you need to think through.  I have 
two machines at work that are always on, so I can always ssh to them 
first, then to the server and edit the /etc/hosts.allow file to give 
myself temporary access, if needed.  In general, I prefer to go through 
those hosts, rather than open another avenue that I may later forget to 
remove. Since everything I do on those servers (almost) is through ssh, 
it's not a problem for me to need an extra hop before I get to the box.


I'm confused.  I was agreeing with you.  I was simply adding another 
reason as to why the author of the Wrapping sshd(8) is not normally a 
good idea comment might have made the comment.


Are you saying that my comment above is incorrect? Or that there is a 
suitable workaround for the problem in my example scenario?


I also agree that using a jump box to gain access to the machine in 
question would work.


I think I've somehow missed your point.  Please explain.



Paul Schmehl ([EMAIL PROTECTED])
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/



--
Regards,
Eric
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Moving jails from one computer to another

2006-10-25 Thread albi albinootje

On 10/25/06, Doug Poland [EMAIL PROTECTED] wrote:


I'm curious if anyone has comments on moving a jail environment from
one computer to another.  Not having actually tried it yet, it would
seem to be possible given:

Both computers:
   are the same arch (i386, in my case).
   are running the same kernel and userland (e.g., FreeBSD RELENG_6_1)
   have identical jail environments (e.g., sysutils/ezjail)



by coincidence i've finished moving a jail-environment from 1 disc to
a bigger disc and then to another machine today

unfortunately i had to rebuild world because the clock was wrong and
got a touch: file not found which turned out to be a FAQ after i
already restarted with time make buildworld etc. but of course
normally that shouldn't happen

in your case you already have another disc ready, and if e.g. your
jails are in /usr/jails/ then
you would replicate the relevant /etc/rc.conf content (without ezjail that is)

not sure where ezjail saves it's config-files, but that's probably
easy to replicate too
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: nice values outside the expected range ...

2006-10-25 Thread Dan Nelson
In the last episode (Oct 25), Bill Moran said:
 
 I didn't know this was possible:
   PID USERNAMETHR PRI NICE   SIZERES STATE  C   TIME   WCPU COMMAND
 11348 root  1  -4 -100  5740K  5764K getblk 0   0:00  0.00% cdrecord
 11346 root  1  -8 -104  5740K  5764K cbwait 0   0:00  0.00% cdrecord
 
 I thought the allowed values for nice were -20 to 20.  Is this something
 new in the 6.x branch?

cdrecord sets at least one of its processes to a realtime priority, and
they're printed in the NICE field as those big numbers.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Moving jails from one computer to another

2006-10-25 Thread Dimitar Vasilev

2006/10/25, albi albinootje [EMAIL PROTECTED]:


On 10/25/06, Doug Poland [EMAIL PROTECTED] wrote:

 I'm curious if anyone has comments on moving a jail environment from
 one computer to another.  Not having actually tried it yet, it would
 seem to be possible given:

 Both computers:
are the same arch (i386, in my case).
are running the same kernel and userland (e.g., FreeBSD RELENG_6_1)
have identical jail environments (e.g., sysutils/ezjail)


by coincidence i've finished moving a jail-environment from 1 disc to
a bigger disc and then to another machine today

unfortunately i had to rebuild world because the clock was wrong and
got a touch: file not found which turned out to be a FAQ after i
already restarted with time make buildworld etc. but of course
normally that shouldn't happen

in your case you already have another disc ready, and if e.g. your
jails are in /usr/jails/ then
you would replicate the relevant /etc/rc.conf content (without ezjail that
is)

not sure where ezjail saves it's config-files, but that's probably
easy to replicate too
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]



Idea - why not use rsync for faster copy of content?


--
Димитър Василев
Dimitar Vassilev

GnuPG key ID: 0x4B8DB525
Keyserver: pgp.mit.edu
Key fingerprint: D88A 3B92 DED5 917E 341E D62F 8C51 5FC4 4B8D B525
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Freebsd Access Point

2006-10-25 Thread Erik Richards
Greetings,

This is my first submission to a freebsd mailing list so please bare with me.  
I am relatively new to Freebsd but I have so far set up a box at home acting 
as a gateway, firewall, and webserver with php and I'm really loving this 
OS (my version is 6.0).  Now I would like to create an access point.  I have 
a wireless card (Linksys wmp54gs, Broadcom 4318 chipset) I have read that 
I need to use ndiswrapper and windows xp drivers for it to work under Freebsd.
And I need to use hostapd when configuring the card to act as an access point
correct?  I have found documentation on these two separate issues but 
nothing combining them?  My question is, is it possible to use my linksys
card under freebsd and set it up as an access point, or is it only possible 
with native drivers? I've also set up my gateway and all the computers 
behind it using static ips so will I still be able to make wireless work 
similarly?  I would also like to use WPA with my wireless setup.  I almost
forgot, I have 2 wired nic cards in my Freebsd box the one I have connected
to my inside LAN will I have to bride with my wlan card so my wireless
connections can get out to the internet? Thank you all very much for your help.

-Erik
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [EMAIL PROTECTED]: The results of your email commands]

2006-10-25 Thread Gary Kline
On Wed, Oct 25, 2006 at 07:01:16PM +0100, Alex Zbyslaw wrote:
 Gary Kline wrote:
 
  Folks, how can I un-sub from the -queestions list that is sent to 
  [EMAIL PROTECTED] when the mailer thinks I am NOT a Subscriber???  
  See my //HERE
  tag below
  
 
 Once a month you should be getting a reminder from 
 [EMAIL PROTECTED] with the subject freebsd.org mailing list 
 memberships reminder which would tell you what address you subscribed 
 under (as well as your password and a link to let you fiddle with options).
 
 So if you kept one of those, you'll have your answer. If not try 
 examining the whole headers from a message to the mailing to see if they 
 hold any clues.
 
 Failing all that try emailing [EMAIL PROTECTED] to see 
 if they can spot some obvious variant of your address.


The only variant would be the hostname, toxic; but I', lazy.
WEll, maybe I wasn't.   I'll check the postmarks. Thanks for the clue.

gary

PS:  I run mailma too; forgot about the monthly mailing.  (!!)

 
 --Alex
 
 

-- 
Gary Kline  Seattle BSD Users' Group (seabug)  | [EMAIL PROTECTED]
Thought Unlimited Org's Alternate Email Site
http://www.magnesium.net/~kline
   To live is not a necessity; but to live honorably...is a necessity. -Kant

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Freebsd Access Point

2006-10-25 Thread John Nielsen
On Wednesday 25 October 2006 16:23, Erik Richards wrote:
 This is my first submission to a freebsd mailing list so please bare with
 me. I am relatively new to Freebsd but I have so far set up a box at home
 acting as a gateway, firewall, and webserver with php and I'm really loving
 this OS (my version is 6.0).

Great! Consider following the upgrade instructions in the FreeBSD Handbook to 
bring your system up to 6.2-PRERELEASE or 6.2-RELEASE once it's released.

 Now I would like to create an access point.  
 I have a wireless card (Linksys wmp54gs, Broadcom 4318 chipset) I have read
 that I need to use ndiswrapper and windows xp drivers for it to work under
 Freebsd. And I need to use hostapd when configuring the card to act as an
 access point correct?  I have found documentation on these two separate
 issues but nothing combining them?  My question is, is it possible to use
 my linksys card under freebsd and set it up as an access point, or is it
 only possible with native drivers?

You don't need hostapd to create an access point. If your card and the driver 
it uses support it, you can create an access point using just ifconfig. 
Unfortunately, the ndis driver does not support hostap mode so you can not 
create a traditional infrastructure access point. However you should be 
able to create an ad-hoc network by doing something like this:

ifconfig ndis0 inet 1.2.3.4 netmask 255.255.255.0 ssid your_net mediaopt adhoc

Substitute the device name, IP address, netmask, and your desired ssid above 
as appropriate.

The other wireless stations on your network will also need to be set 
to ad-hoc mode using the same ssid.

 I've also set up my gateway and all the 
 computers behind it using static ips so will I still be able to make
 wireless work similarly?

Yep, should be no problem.

 I would also like to use WPA with my wireless setup.

This should be possible using ndis, but I don't remember for sure offhand.

 I almost forgot, I have 2 wired nic cards in my Freebsd box the one 
 I have connected to my inside LAN will I have to bride with my wlan card so
 my wireless connections can get out to the internet?

That's one option (see man 4 if_bridge), but I've found that it's easier just 
to have an external subnet, a wired internal subnet and a wireless internal 
subnet and let the FreeBSD box route between them. Since you've already set 
the box up as a gateway, this should be completely painless (you may not even 
need to do anything other than assign an IP on the new subnet to your 
wireless card).

 Thank you all very much for your help.

Sure.

JN
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


apache20 going nuts

2006-10-25 Thread John
Hi all,

Recently, occasionally apache starts using lots of processor on one of
my servers.  This has started out of the blue.  I am running apache
2.0.58 and 
FreeBSD codeine.yoafrica.com 6.1-STABLE FreeBSD 6.1-STABLE #0: Sat Jun
17 01:52:21 CAT 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/CODEINE  i386

I have just upgraded to apache 2.0.59.  This happens randomly and I
can't trace it to anything else.

On the webserver, I am running roundcube, vexim, mailman and a couple of
very small php apps I've built myself.  When I say small I mean very
very small.

Does anyone have any ideas about what I could do about this.  Find out
what in apache is using the processor so much.

TIA,

-John


last pid: 70289;  load averages:  8.38,  7.15,  3.95 up 52+17:42:14  23:12:10
168 processes: 9 running, 159 sleeping
CPU states: 98.1% user,  0.0% nice,  1.9% system,  0.0% interrupt,  0.0% idle
Mem: 316M Active, 366M Inact, 217M Wired, 50M Cache, 110M Buf, 39M Free
Swap: 2004M Total, 142M Used, 1862M Free, 7% Inuse

  PID USERNAME  THR PRI NICE   SIZERES STATETIME   WCPU COMMAND
51874 www 1 1300 19148K 12976K RUN  1:01 12.30% httpd
67045 www 1 1290 16308K 10028K RUN  0:55 11.96% httpd
29639 www 1 1300 19188K 13032K RUN  1:22 11.91% httpd
62291 www 1 1300 19160K 13020K RUN  1:05 11.77% httpd
87078 www 1 1300 19108K 12888K RUN  0:57 11.77% httpd
67445 www 1 1290 22812K 16668K RUN  1:06 11.72% httpd
67056 www 1 1290 18848K 12600K RUN  0:55 11.72% httpd

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: apache20 going nuts

2006-10-25 Thread Jeff Mohler

I was just there on 5.1 for the last few months..when I did a
kdump/ktrace, I saw invalid fnctl's just sucking things up.

I nailed it down to something in PHP, because I could trigger this
immediately by uploading photos to my coppermine installation, or
randomly with zencart.

Moving those services to another box but still using mysql on the
questionable server was just fine, so I said phuk it and built a new
faster box on 6.1 with apache22, the 5.1 sql server, and the latest
5.x PHP.

its been fine, and fast as heck.

IE: I gave up on finding the problem as its beyond my skills.

On 10/25/06, John [EMAIL PROTECTED] wrote:

Hi all,

Recently, occasionally apache starts using lots of processor on one of
my servers.  This has started out of the blue.  I am running apache
2.0.58 and
FreeBSD codeine.yoafrica.com 6.1-STABLE FreeBSD 6.1-STABLE #0: Sat Jun
17 01:52:21 CAT 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/CODEINE  i386

I have just upgraded to apache 2.0.59.  This happens randomly and I
can't trace it to anything else.

On the webserver, I am running roundcube, vexim, mailman and a couple of
very small php apps I've built myself.  When I say small I mean very
very small.

Does anyone have any ideas about what I could do about this.  Find out
what in apache is using the processor so much.

TIA,

-John


last pid: 70289;  load averages:  8.38,  7.15,  3.95 up 52+17:42:14  23:12:10
168 processes: 9 running, 159 sleeping
CPU states: 98.1% user,  0.0% nice,  1.9% system,  0.0% interrupt,  0.0% idle
Mem: 316M Active, 366M Inact, 217M Wired, 50M Cache, 110M Buf, 39M Free
Swap: 2004M Total, 142M Used, 1862M Free, 7% Inuse

  PID USERNAME  THR PRI NICE   SIZERES STATETIME   WCPU COMMAND
51874 www 1 1300 19148K 12976K RUN  1:01 12.30% httpd
67045 www 1 1290 16308K 10028K RUN  0:55 11.96% httpd
29639 www 1 1300 19188K 13032K RUN  1:22 11.91% httpd
62291 www 1 1300 19160K 13020K RUN  1:05 11.77% httpd
87078 www 1 1300 19108K 12888K RUN  0:57 11.77% httpd
67445 www 1 1290 22812K 16668K RUN  1:06 11.72% httpd
67056 www 1 1290 18848K 12600K RUN  0:55 11.72% httpd

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tcpwrappers SSH

2006-10-25 Thread Paul Schmehl
--On Wednesday, October 25, 2006 14:35:29 -0500 Eric Schuele 
[EMAIL PROTECTED] wrote:


I'm confused.  I was agreeing with you.  I was simply adding another
reason as to why the author of the Wrapping sshd(8) is not normally a
good idea comment might have made the comment.

Are you saying that my comment above is incorrect?


I guess I didn't word that well.  I was trying to say that your 
contribution was quite valuable.  I should have remembered to point out 
that you can easily lock yourself out of a server by forgetting to grant 
access properly.


IOW, thank you for pointing that out.  :-)

Paul Schmehl ([EMAIL PROTECTED])
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/


Re: problems in rtorrent

2006-10-25 Thread Leonidas Tsampros
On Wed, Oct 25, 2006 at 04:45:04PM +0300, [EMAIL PROTECTED] wrote:
 What's this error in the rtorrent 0.5.3 ?:
 
 Caught Segmentation fault, dumping stack
 Stack dump not enabled.

I don't know what exactly this is (although after a segmentation
fault, afaik you get a core dump), but i faced this error lots of
times with net-p2p/rtorrent . After installing net-p2p/rtorrent-devel,
most of these segfaults are gone (and the interface is far more
improved). So why don't you give rtorrent-devel a try?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


freebsd box dropping packets

2006-10-25 Thread Joe
I'm having a problem with a freebsd box that appears to be dropping 
packets...according to bpfstat. I've included the necessary output.


bge1 is an interface that is connected to a Netoptics Aggregator tap.


-


$ systat -ifstat

   /0   /1   /2   /3   /4   /5   /6   /7   /8   /9   /10
 Load Average   |

  Interface   Traffic   PeakTotal


lo0  in  0.000 KB/s  0.000 KB/s2.324 MB
 out 0.000 KB/s  0.000 KB/s2.324 MB

   bge1  in 15.732 MB/s 15.732 MB/s 
392808408830616.000 b

 out 0.000 KB/s  0.000 KB/s0.160 KB

   bge0  in  0.051 KB/s  0.051 KB/s   14.950 MB
 out 0.186 KB/s  0.186 KB/s   13.038 MB


-


$ systat
/0   /1   /2   /3   /4   /5   /6   /7   /8   /9   /10
 Load Average   ||

/0   /10  /20  /30  /40  /50  /60  /70  /80  /90  /100
root idle: cpu2 XX
root idle: cpu1 XX
root idle: cpu0 XX
 idle X
root idle: cpu3 
root irq29: bge X
sguil snort X


-


$ snort -V

   ,,_ -* Snort! *-
  o  )~   Version 2.6.0.2 (Build 85)
   By Martin Roesch  The Snort Team: 
http://www.snort.org/team.html

   (C) Copyright 1998-2006 Sourcefire Inc., et al.

-


$ ifconfig bge1
bge1: 
flags=289c3UP,BROADCAST,RUNNING,NOARP,PROMISC,SIMPLEX,MULTICAST,PPROMISC 
mtu 1500

options=1bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING
ether xx:xx:xx:xx:xx:xx
media: Ethernet autoselect (1000baseTX full-duplex)
status: active


-


$ sudo bpfstat -I bge1
  pid   netif  flags recv dropmatch sblen hblen command
39672bge1  p--s- 49221864 21646381 49221864 16432 0 snort


-


$ dmesg
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 6.1-RELEASE-p7 #0: Wed Sep 20 15:41:30 PDT 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/SMP
ACPI APIC Table: HP 0083
Timecounter i8254 frequency 1193182 Hz quality 0
CPU: AMD Opteron(tm) Processor 285 (2605.92-MHz K8-class CPU)
  Origin = AuthenticAMD  Id = 0x20f12  Stepping = 2

Features=0x178bfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2,HTT
  Features2=0x1SSE3
  AMD Features=0xe2500800SYSCALL,NX,MMX+,FFXSR,LM,3DNow+,3DNow
  AMD Features2=0x2CMP
  Cores per package: 2
real memory  = 5368705024 (5119 MB)
avail memory = 5013065728 (4780 MB)
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
 cpu2 (AP): APIC ID:  2
 cpu3 (AP): APIC ID:  3
MADT: Forcing active-low polarity and level trigger for SCI
ioapic0 Version 1.1 irqs 0-23 on motherboard
ioapic1 Version 1.1 irqs 24-27 on motherboard
ioapic2 Version 1.1 irqs 28-31 on motherboard
ioapic3 Version 1.1 irqs 32-35 on motherboard
ioapic4 Version 1.1 irqs 36-39 on motherboard
kbd1 at kbdmux0
acpi0: HP A05 on motherboard
acpi0: Power Button (fixed)
Timecounter ACPI-safe frequency 3579545 Hz quality 1000
acpi_timer0: 32-bit timer at 3.579545MHz port 0x908-0x90b on acpi0
cpu0: ACPI CPU on acpi0
cpu1: ACPI CPU on acpi0
cpu2: ACPI CPU on acpi0
cpu3: ACPI CPU on acpi0
pcib0: ACPI Host-PCI bridge on acpi0
pci0: ACPI PCI bus on pcib0
pcib1: ACPI PCI-PCI bridge at device 3.0 on pci0
pci1: ACPI PCI bus on pcib1
ohci0: OHCI (generic) USB controller mem 0xf7df-0xf7df0fff irq 19 
at device 0.0 on pci1

ohci0: [GIANT-LOCKED]
usb0: OHCI version 1.0, legacy support
usb0: SMM does not respond, resetting
usb0: OHCI (generic) USB controller on ohci0
usb0: USB revision 1.0
uhub0: AMD OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ohci1: OHCI (generic) USB controller mem 0xf7de-0xf7de0fff irq 19 
at device 0.1 on pci1

ohci1: [GIANT-LOCKED]
usb1: OHCI version 1.0, legacy support
usb1: SMM does not respond, resetting
usb1: OHCI (generic) USB controller on ohci1
usb1: USB revision 1.0
uhub1: AMD OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
pci1: base peripheral at device 2.0 (no driver attached)
pci1: base peripheral at device 2.2 (no driver attached)
pci1: display, VGA at device 3.0 (no driver attached)
isab0: PCI-ISA bridge at device 4.0 on pci0
isa0: ISA bus on isab0
atapci0: AMD 8111 UDMA133 controller port 
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x2000-0x200f at device 4.1 on pci0

ata0: ATA channel 0 on atapci0
ata1: ATA channel 1 on atapci0
pci0: bridge at device 4.3 (no driver attached)
pcib2: ACPI PCI-PCI bridge at device 7.0 on pci0
pci2: ACPI PCI bus on pcib2
ciss0: HP Smart Array 6i port 0x5000-0x50ff mem 
0xf7ef-0xf7ef1fff,0xf7e8-0xf7eb 

dual homing a freebsd server

2006-10-25 Thread Mark Sellers
To whom it may concern,

 

I want to put two nic cards in a server, and have two separate gateways
assigned to each nic.  I want one to master and the other slave.  When the
primary network dies I want it to failover to the other card on the fly.

 

Any help would be greatly appreciated.

 

Mark

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


freebsd-update vs. make buildworld

2006-10-25 Thread Niek

Hi experts,

Due to the recent security issue regarding openssl, I have to update a 
server running 6_release. I was wondering if updating using binaries 
using the freebsd-update utility is a viable alternative to recompiling 
the world. What would you recommend?


Niek
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


User mount of usb key drive ... question

2006-10-25 Thread Lane
I guess I don't know how to ask google and man fstab the correct way ...

How can I grant a non-root user the authority to mount (and then write to) a 
usb key drive? Especially when said user is already up in kde?

The drive works fine if root mounts it, but I'd rather not be root when I do 
this on my laptop.  And opening a konsole window, suing and then mounting , 
is cumbersome.

I've been looking at man devfs.rules, as this seems to be near the place I 
want to be.  But I haven't quite fingered out a way...

Ya'll don't gotta just tell me the answer, if you don't want.  I'm a man 
man, so to speak.  I'm eager to look it up myself, only I don't rightly know 
whereinaheck to look.

Thanks,

lane
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: User mount of usb key drive ... question

2006-10-25 Thread Nicolas Blais
On Wednesday 25 October 2006 20:18, Lane wrote:
 I guess I don't know how to ask google and man fstab the correct way ...

 How can I grant a non-root user the authority to mount (and then write to)
 a usb key drive? Especially when said user is already up in kde?

 The drive works fine if root mounts it, but I'd rather not be root when I
 do this on my laptop.  And opening a konsole window, suing and then
 mounting , is cumbersome.

 I've been looking at man devfs.rules, as this seems to be near the place
 I want to be.  But I haven't quite fingered out a way...

 Ya'll don't gotta just tell me the answer, if you don't want.  I'm a man
 man, so to speak.  I'm eager to look it up myself, only I don't rightly
 know whereinaheck to look.

 Thanks,

 lane

In /etc/devfs.rules I have:

[devfsrules_local=15]
add path 'da*' mode 0777

and in /etc/rc.conf I have:
devfs_system_ruleset=devfsrules_local

and in /etc/fstab:
#user mounts for umass devices
/dev/da0s1  /home/myhome/usbdrive msdosfs rw,noauto   0 0

and it works in KDE.

-- 
FreeBSD 7.0-CURRENT #1: Sat Oct  7 15:11:02 EDT 2006 
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/CLK01A 
PGP? : http://www.clkroot.net/security/nb_root.asc


pgpD1Lzyq0SW5.pgp
Description: PGP signature


Re: freebsd-update vs. make buildworld

2006-10-25 Thread Paul Schmehl

--On October 26, 2006 12:52:35 AM +0200 Niek [EMAIL PROTECTED] wrote:


Hi experts,

Due to the recent security issue regarding openssl, I have to update a
server running 6_release. I was wondering if updating using binaries
using the freebsd-update utility is a viable alternative to recompiling
the world. What would you recommend?

It is so long as you haven't altered any of the kernel or base source 
files.  If you have, you'll need to rebuild kernel and world.  I use both 
methods; freebsd-update when I'm using a GENERIC kernel with no changes 
and the traditional method when the source has been altered, the kernel is 
customized or the processor is not supported under freebsd-update.


Paul Schmehl ([EMAIL PROTECTED])
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/


Re: freebsd-update vs. make buildworld

2006-10-25 Thread Lane
On Wednesday 25 October 2006 19:23, Paul Schmehl wrote:
 --On October 26, 2006 12:52:35 AM +0200 Niek [EMAIL PROTECTED] wrote:
  Hi experts,
 
  Due to the recent security issue regarding openssl, I have to update a
  server running 6_release. I was wondering if updating using binaries
  using the freebsd-update utility is a viable alternative to recompiling
  the world. What would you recommend?

 It is so long as you haven't altered any of the kernel or base source
 files.  If you have, you'll need to rebuild kernel and world.  I use both
 methods; freebsd-update when I'm using a GENERIC kernel with no changes
 and the traditional method when the source has been altered, the kernel is
 customized or the processor is not supported under freebsd-update.

 Paul Schmehl ([EMAIL PROTECTED])
 Senior Information Security Analyst
 The University of Texas at Dallas
 http://www.utdallas.edu/ir/security/
Thanks, Paul

I had a similar setup in /etc/rc.conf and /etc/devfs.rules which didn't work.

I copied yours and then rebooted, but I still get operation not permitted 
when attempting to mount the usb drive as a non-root user.

Thanks for your attention.

lane
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: User mount of usb key drive ... question

2006-10-25 Thread Nicolas Blais

 Thanks, Paul

 I had a similar setup in /etc/rc.conf and /etc/devfs.rules which didn't
 work.

 I copied yours and then rebooted, but I still get operation not permitted
 when attempting to mount the usb drive as a non-root user.

 Thanks for your attention.

 lane

Do you have this in your /etc/sysctl.conf :
vfs.usermount=1

-- 
FreeBSD 7.0-CURRENT #1: Sat Oct  7 15:11:02 EDT 2006 
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/CLK01A 
PGP? : http://www.clkroot.net/security/nb_root.asc


pgpVAOhgrEIjL.pgp
Description: PGP signature


Re: User mount of usb key drive ... question

2006-10-25 Thread Lane
On Wednesday 25 October 2006 20:07, Nicolas Blais wrote:
  Thanks, Paul
 
  I had a similar setup in /etc/rc.conf and /etc/devfs.rules which didn't
  work.
 
  I copied yours and then rebooted, but I still get operation not
  permitted when attempting to mount the usb drive as a non-root user.
 
  Thanks for your attention.
 
  lane

 Do you have this in your /etc/sysctl.conf :
 vfs.usermount=1
Ahhh... I just found that!

Plus, apparently the user must own the mount point.

It works now.

Thanks again for all of your help!

lane
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: User mount of usb key drive ... question

2006-10-25 Thread Lane
On Wednesday 25 October 2006 20:07, Nicolas Blais wrote:
  Thanks, Paul
 
  I had a similar setup in /etc/rc.conf and /etc/devfs.rules which didn't
  work.
 
  I copied yours and then rebooted, but I still get operation not
  permitted when attempting to mount the usb drive as a non-root user.
 
  Thanks for your attention.
 
  lane

 Do you have this in your /etc/sysctl.conf :
 vfs.usermount=1
Ahhh... I just found that!

Plus, apparently the user must own the mount point.

It works now.

Thanks again for all of your help!

lane
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: User mount of usb key drive ... question

2006-10-25 Thread David J Brooks
On Wednesday 25 October 2006 19:18, Lane wrote:
 I guess I don't know how to ask google and man fstab the correct way ...

 How can I grant a non-root user the authority to mount (and then write to)
 a usb key drive? Especially when said user is already up in kde?

 The drive works fine if root mounts it, but I'd rather not be root when I
 do this on my laptop.  And opening a konsole window, suing and then
 mounting , is cumbersome.

 I've been looking at man devfs.rules, as this seems to be near the place
 I want to be.  But I haven't quite fingered out a way...

 Ya'll don't gotta just tell me the answer, if you don't want.  I'm a man
 man, so to speak.  I'm eager to look it up myself, only I don't rightly
 know whereinaheck to look.

Lane,

I think you'll find this link educational.
http://caia.swin.edu.au/reports/041130A/

HTH,
David
-- 
Sure the Almighty created the world in only six days,
but He didn't have an established user-base.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvsup

2006-10-25 Thread Brian

eoghan wrote:

Hi
Trying to cvsup my ports and server is saying:
Rejected by server: Access limit exceeded, try again later
So im using cvsup.FreeBSD.org
but have tried cvsup1.FreeBSD.org, cvsup2.FreeBSD.org and 
cvsup3.FreeBSD.org

and get the same message... is there something wrong?
Thanks
Eoghan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

I like using fastest_cvsup with this.

I use this script to get ports using it.  You can adjust this to see 
more or less detail.


more fastest-cvsup-ports-see
#!/bin/sh
 if SERVER=`/usr/local/bin/fastest_cvsup -q -c us`; then
   /usr/local/bin/cvsup -g -L 1 -h $SERVER 
/usr/share/examples/cvsup/my-ports-supfile

 fi




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Shell question

2006-10-25 Thread Warren Block

On Wed, 25 Oct 2006, Jack Stone wrote:


Folks:
I have managed to piece together a shell script that is able to retrieve the 
domains from the spams of the day and summarize those in a special file that 
can then be added to the sendmail's rejects in the access.db. But, first I 
have to eyeball the list and remove any obvious good-guy domains.


I would like to create another list of those same good guys that can be added 
to each day as they show up, then compare it to the above main list and 
delete the good guy domains before adding to the access.db.


Greylisting will be much more effective than this approach, and is 
easier to implement.  Combine that with sbl-xbl and maybe a few other 
DNSBLs, add greet_pause of five or ten seconds, and you have much more 
effectiveness with less false positives and much less maintenance. 
Adding clamav rounds out the whole thing.  I wrote an article that 
covers some of this:


http://www.wonkity.com/~wblock/greylist.pdf

-Warren Block * Rapid City, South Dakota USA
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


strange events

2006-10-25 Thread Z. Wade Hampton
Greetings to all,
And, please forgive me if this is a bone-head question(s).

I'm running, once again after 4 years, freebsd 4.2.

In KDE, with netscape or kfm I can only access my own web domain, which is
www.oldpathsbaptistchurch.org

No matter what else I put into the URL box and submit, it trys to find the
other URLs, but then resorts back to www.oldpathsbaptistchurch.org.
I must have done something wrong in initial setup/config, but after
checking through lots of stuff, I see no reason for this to happen.

Also, I get STOP error code 1s when I try to make lynx from the ports
collection.

Could someone have a little pity on this old stoner from the 60's and lend
some advice?

Thanks in advance,

Z. Wade Hampton
Sheridan, Montana
UNIX PINE 4.21

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: strange events

2006-10-25 Thread Lane
On Wednesday 25 October 2006 22:59, Z. Wade Hampton wrote:
 Greetings to all,
 And, please forgive me if this is a bone-head question(s).

 I'm running, once again after 4 years, freebsd 4.2.

 In KDE, with netscape or kfm I can only access my own web domain, which is
 www.oldpathsbaptistchurch.org

 No matter what else I put into the URL box and submit, it trys to find the
 other URLs, but then resorts back to www.oldpathsbaptistchurch.org.
 I must have done something wrong in initial setup/config, but after
 checking through lots of stuff, I see no reason for this to happen.

 Also, I get STOP error code 1s when I try to make lynx from the ports
 collection.

 Could someone have a little pity on this old stoner from the 60's and lend
 some advice?

 Thanks in advance,

 Z. Wade Hampton
 Sheridan, Montana
 UNIX PINE 4.21

Uhm, hey, old stoner!  

Is there any chance you could upgrade?  4.2 Rocked, but we're pushing 7.0, 
now.

Check out /etc/resolve.conf

Make sure that it references a valid upstream dns server.  Check out man 
resolv.conf to finger out what it does.  It did the same in 4.2.

What happens when you do a nslookup oldpathsbaptistchurch.org  from 
a shell?  Does it tell you anything about 15111 N. Hayden Rd., Ste 160, 
PMB 353 in Arizona?  

I learned on 4.2, so I think I can help you.  And please forgive me if I keep 
saying upgrade. But ...

upgrade.

I can show you how.

Love and kisses!

lane
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]