D-Link card (ath0) and WPA-PSK

2007-02-17 Thread Gregory W. MacPherson
I wanted to access a WPA-PSK network with my laptop. I booted up FreeBSD
6.2. I already had a D-Link WNA2330 card inserted in the slot at boot up. 
The ath driver recognized the card:

ath0: Atheros 5212 mem 0x8800-0x8800 irq 11 at device 0,0 on cardbus0
ath0: Ethernet address: 00:15:e9:d9:77:13
ath0: mac 7,9 phy 4,5 radio 5,6

I configured /etc/wpa_supplicant and added a line to /etc/rc.conf to 
configure the interface to use DHCP. Then I issued /etc/rc.d/netif start.
What I got was a card that was associated and properly configured but 
that could not negotiate an address or pass traffic.

After several iterations of ifconfig ath0, I finally removed the card and
reinserted the card. Then and only then did the /etc/rc.d/netif start 
result in an associated and DHCP configured NIC.

ath0: ath_chan_set: unable to reset channel 2 (2417 Mhz, flags 0xe0 hal flags 
0xc0)
ath0: Atheros 5212 mem 0x8800-0x8800 irq 11 at device 0,0 on cardbus0
ath0: Ethernet address: 00:15:e9:d9:77:13
ath0: mac 7,9 phy 4,5 radio 5,6

Has anyone seen this before - where the card is recognized by the driver 
and the card can associate with the network but the WPA fails until the 
card is removed and reinserted?

Laptop is a Thinkpad T21.
OS is FreeBSD 6.2-STABLE #0
Kernel has the following compiled in:

device  wlan
device  wlan_wep
device  wlan_ccmp
device  wlan_tkip
device  wi
device  ath
device  ath_hal
device  ath_rate_sample

IPFW is compiled in and was set open.

Thanks,

-- Greg

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Gregory W. MacPherson - Global Network Exploitation Specialist, CISSP
http://www.netpublishing.com/greg/ [EMAIL PROTECTED]
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Master Password File Migration.

2007-02-17 Thread Grant Peel
Hi all,

I cant seem to find a straight answer.

Will $1$ passwords created (and currently used) in freeBSD 4.7 and 4.10 work 
when directly copied to 6.2? (i.e. will the unix users be able to login using 
thier regualr password, or will I have to reset them all?).

-Grant
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Master Password File Migration.

2007-02-17 Thread Erik Trulsson
On Sat, Feb 17, 2007 at 04:46:19AM -0500, Grant Peel wrote:
 Hi all,
 
 I cant seem to find a straight answer.
 
 Will $1$ passwords created (and currently used) in freeBSD 4.7 and 4.10
 work when directly copied to 6.2? (i.e. will the unix users be able to
 login using thier regualr password, or will I have to reset them all?).

Yes, they should work fine.


-- 
Insert your favourite quote here.
Erik Trulsson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Doubts in softc and device_get_softc(dev)

2007-02-17 Thread aji abraham

--- aji abraham [EMAIL PROTECTED] wrote:


 hi
 
My name is Aji Abraham, now working with device
 drivers. the word
 softc and the function device_get_softc(dev)
 getting confuse me a
 lot. am listing some query below ..  pls help me ..
 
 
 Q1 In a free BSD driver Code, there are two device
 depended structures
 
  struct xx_softc {
  ...
  ..
 
 
  };
 
  struct xx_if_softc {
  ...
  ..
 
 
  };
 
 sizeof(struct xx_softc ) is 68
 sizeof(struct xx_if_softc ) is 1186
 
 And in device attach function
 
  xx_attach(dev){
 
  struct xx_softc*sc;
  struct xx_if_softc *if_sc;
 
  sc_if = device_get_softc(dev);
  sc = device_get_softc(device_get_parent(dev));
 
  sc_if- .
  sc- 
  ...
  ..
 
  }
 
 
 Both allocation uses the same function. How it
 possible ?  can we 
 access
 all structure member ?
 
 Regards
 
 Aji Abraham




__
Yahoo! India Answers: Share what you know. Learn something new
http://in.answers.yahoo.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Master Password File Migration.

2007-02-17 Thread Grant Peel

Thanks Erik!

Here is the next big stumbling block.

On the older servers, (4.7 and 4.10) we user apache with mod_ssl and run a 
seperate daemon for the ssl (443) connections.


When we upgrade, will the certs and keys (created with 4.7 and 4.10) work 
using FreeBSD 6.2 and Apache 2.2 ?  or will I need to redo all the keys, 
csrs and order new certs?


-Grant


- Original Message - 
From: Erik Trulsson [EMAIL PROTECTED]

To: Grant Peel [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Saturday, February 17, 2007 5:09 AM
Subject: Re: Master Password File Migration.



On Sat, Feb 17, 2007 at 04:46:19AM -0500, Grant Peel wrote:

Hi all,

I cant seem to find a straight answer.

Will $1$ passwords created (and currently used) in freeBSD 4.7 and 4.10
work when directly copied to 6.2? (i.e. will the unix users be able to
login using thier regualr password, or will I have to reset them all?).


Yes, they should work fine.


--
Insert your favourite quote here.
Erik Trulsson
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


nfs, mountd, /etc/exports: grant access to several networks

2007-02-17 Thread bkoenig
Hello,

is it possible to allow hosts of different networks to mount an NFS export?

I tried already the following statements in /etc/exports without success:

-network net1/mask net2/mask
-network net1/mask -network net2/mask

Regards
Björn


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Master Password File Migration.

2007-02-17 Thread Oliver Koch
Hi,

Grant Peel schrieb:

 Here is the next big stumbling block.
 
 On the older servers, (4.7 and 4.10) we user apache with mod_ssl and run
 a seperate daemon for the ssl (443) connections.
 
 When we upgrade, will the certs and keys (created with 4.7 and 4.10)
 work using FreeBSD 6.2 and Apache 2.2 ?  or will I need to redo all the
 keys, csrs and order new certs?

that should work also. Nothing changed in the way to create certificate
for apache webserver.

Kind regards,

Oliver

-- 
Oliver Koch  Phone:  +49-(0)5323-72-2626
Computer Center  Fax:+49-(0)5323-72-3536
Clausthal University of Technology   E-Mail: [EMAIL PROTECTED]
Erzstraße 51 Web:  http://www.rz.tu-clausthal.de
38678 Clausthal-Zellerfeld, Germany



signature.asc
Description: OpenPGP digital signature


Please confirm your request to join id-freebsd

2007-02-17 Thread Yahoo! Groups

Hello freebsd-questions@FreeBSD.org,

We have received your request to join the id-freebsd 
group hosted by Yahoo! Groups, a free, easy-to-use community service.

This request will expire in 7 days.

TO BECOME A MEMBER OF THE GROUP: 

1) Go to the Yahoo! Groups site by clicking on this link:
   
http://groups.yahoo.com/i?i=eaIdRQ86AoyQU0VCFYVZPa2FRrEe=freebsd-questions%40FreeBSD%2Eorg
 

  (If clicking doesn't work, Cut and Paste the line above into your 
   Web browser's address bar.)

-OR-

2) REPLY to this email by clicking Reply and then Send
   in your email program

If you did not request, or do not want, a membership in the
id-freebsd group, please accept our apologies
and ignore this message.

Regards,

Yahoo! Groups Customer Care

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 

 



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ASUS M2n - AMD64 supported by FreeBSD 6.2?

2007-02-17 Thread Gelsema, P \(Patrick\) - FreeBSD
Dear list,

i am currently deciding on hardware for a server at home which will manage
my email (Mailtoaster), website, dns, dhcp and samba. It will replace 2
boxes. The load is currently average 0.4 on a Dual Pentium 3 800mhz (thats
the old mailserver - FreeBSD 5.4) and the other is just a windows 2003
file/ad/dns server. So no need for a lot of muscle.

I don't want to buy the bleeding edge and not the most expensive stuff. I
want reliable equipment which also doesnt generate a lot of heat and
noise. (Picky, i know ;-) )

At the moment I have come up with the following:
* Asus M2N with nVidia NForce 430 chipset
* AMD Athlon 64 X2 EE 3800+
* 2 Gigabyte of memory (DDR2 800mhz)
* Adaptec 390320D SCSI for systemdisks (3 x U320 15k drives (got these
spare - better use them)
* 4 x 500GB SATA 2 drives from Western Digital (Raid 5)

I got the following questions;

Question 1: is the SATA2 Raid 5 setup supported for the Nvidia 430
chipset? In my searches in basically all lists of Freebsd it seems there
were issues reported?

Question 2: Is the Hostraid functionality of the Adaptec card supported by
FreeBSD? For windows boxes additional software is required, will it be
supported out of the box by FreeBSD?

Question 3: Nvidia Nforce5 is this supported by FreeBSD 6.2 and will I be
able to build a RAID 5 set and use this in FreeBSD? I have seen emails in
lists which show issues.

Of course any suggestions regarding hardware is also appreciated.

Many thanks for allowing me to use your bandwidth!

Regards,

Patrick
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


xscreensaver problem

2007-02-17 Thread Gerard Seibert
I got the following information from:

http://www.jwz.org/xscreensaver/faq.html#root-lock

% xhost +localhost
localhost being added to access control list
% su
% Password: 
# gnorpm
...
# exit
% xhost -localhost
localhost being removed from access control list


When I attempt to run the above, I receive this error message:

xhost: unable to open display 

Also, there is no 'gnorpm' on this system.

This is on a FreeBSD-6.2 machine. What is causing this problem?


-- 
Gerard

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreSBIE NFS Client

2007-02-17 Thread Grant Peel
Hi all,

If I boot from a FreeSBIE disk on a blank machine, can I:

1. Create pristine filesystems (/ /usr /var /home etc) on the local HD.

2. Startup an NFS client to connect to a NFS server, and transfer over .tar. 
files to rebuild the local filesystems?

I know there is a list for FreeSBIE, but I am betting most of its users are 
hereand that list is a little sparse.

-Grant
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can I Mount A Windoze Drive?

2007-02-17 Thread Drew Jenkins
- Original Message 
From: Greg 'groggy' Lehey [EMAIL PROTECTED]
To: Drew Jenkins [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Saturday, February 17, 2007 3:03:03 AM
Subject: Re: Can I Mount A Windoze Drive?


Thank you to both you and Martin Tournoij as well for answering this question.
Drew


 

Sucker-punch spam with award-winning protection. 
Try the free Yahoo! Mail Beta.
http://advision.webevents.yahoo.com/mailbeta/features_spam.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ADSL-2 internal modem ?

2007-02-17 Thread Norberto Meijome
Hello everyone :)

I'm starting to re-build my home network, and I thought it'd be interesting to
run either my ADSL2 link on bridged mode to a FreeBSD box to do all the
firewalling,proxying,etc - that's easily done. ... 

but then I thought, would it be possible to get an internal ADSL2 / 2+ pci
modem that is supported by FreeBSD? 

Any pointers anyone?

thanks!!
B
_
{Beto|Norberto|Numard} Meijome

The greatest dangers to liberty lurk in insidious encroachment by men of zeal,
well-meaning but without understanding. Justice Louis D. Brandeis

I speak for myself, not my employer. Contents may be hot. Slippery when wet.
Reading disclaimers makes you go blind. Writing them is worse. You have been
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ADSL-2 internal modem ?

2007-02-17 Thread Derek Ragona

Use an external and connect it to your server via ethernet.

-Derek


At 07:30 AM 2/17/2007, Norberto Meijome wrote:

Hello everyone :)

I'm starting to re-build my home network, and I thought it'd be interesting to
run either my ADSL2 link on bridged mode to a FreeBSD box to do all the
firewalling,proxying,etc - that's easily done. ...

but then I thought, would it be possible to get an internal ADSL2 / 2+ pci
modem that is supported by FreeBSD?

Any pointers anyone?

thanks!!
B
_
{Beto|Norberto|Numard} Meijome

The greatest dangers to liberty lurk in insidious encroachment by men of 
zeal,

well-meaning but without understanding. Justice Louis D. Brandeis

I speak for myself, not my employer. Contents may be hot. Slippery when wet.
Reading disclaimers makes you go blind. Writing them is worse. You have been
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Accessing Server TTW

2007-02-17 Thread Drew Jenkins
Hi;
Another newbie question. I've successfully built (so far) my FBSD server on a 
separate HD on one of my 2 PCs at home. I am connected to the Internet via DHCP 
through my satellite dish. I would like to access Web pages on my FBSD server 
from my other PC. How do I set this up?
TIA,
Drew


 

8:00? 8:25? 8:40? Find a flick in no time 
with the Yahoo! Search movie showtime shortcut.
http://tools.search.yahoo.com/shortcuts/#news
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreSBIE NFS Client

2007-02-17 Thread Bill Moran
Grant Peel [EMAIL PROTECTED] wrote:

 Hi all,
 
 If I boot from a FreeSBIE disk on a blank machine, can I:
 
 1. Create pristine filesystems (/ /usr /var /home etc) on the local HD.

Yes.

 2. Startup an NFS client to connect to a NFS server, and transfer over .tar. 
 files
 to rebuild the local filesystems?

Please wrap your lines around 72 chars or so, see
http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-questions/index.html

Yes, you can do that as well.

I haven't used FreeSBIE in a while, but unless they've changed things 
_radically_,
you'll have all the tools that would be available under FreeBSD anyway, which
includes the tools you need to do the two things listed above.

-- 
Bill Moran
Collaborative Fusion Inc.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: serious performance problems with 6.2 Release

2007-02-17 Thread Ted Mittelstaedt

SOFTWARE defects that are specific to hardware that are
not documented in the PR database generally do not get fixed.

You usually don't document hardware defects in the PR database
since by definition these generally cannot be corrected by fixes in
the FreeBSD code.

Ted

- Original Message - 
From: Freminlins [EMAIL PROTECTED]
To: Ted Mittelstaedt [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Friday, February 16, 2007 2:45 AM
Subject: Re: serious performance problems with 6.2 Release


 Ted,

 On 16/02/07, Ted Mittelstaedt [EMAIL PROTECTED] wrote:
 
 
  I don't know where your getting the impression that I said this was a
  hardware bug.
 

 Umm, quoted from you above: Defects that are specific to hardware that
are
 not documented in the PR database generally do not get fixed. 

 If I didn't know this is simply the way you are at times I would think you
 have gone mad.

 Ted


 Frem.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Support for Silicon Image 3124 SATA controller?

2007-02-17 Thread Ted Mittelstaedt

Send an e-mail to the maintainer of the ata driver.  I
belive this is Soren right now.  Look in the header of the
source code to find out who is maintaining it.

Ted

- Original Message - 
From: Dieter [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Sent: Friday, February 16, 2007 7:12 AM
Subject: Support for Silicon Image 3124 SATA controller?


 I don't see the Sil 3124 SATA controller listed in the
 6.2 ata(4) man page.  Are there any plans to support it?
 I'm told that it is a significant improvement over previous
 Sil chips.  It even has documentation!

 Overview:
 http://www.siliconimage.com/products/product.aspx?id=27
 Datasheet:
 http://www.siliconimage.com/docs/SiI-DS-0160-C.pdf
 Another, longer, datasheet
 http://gkernel.sourceforge.net/specs/sii/
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Release 6.2

2007-02-17 Thread York Rapp
Thank your very much for your fast answer.

Very kind.

-- 
Cordiali saluti, / Best regards, / Mit freundlichen Gruessen,

York

Make each day count.


On Fri, 2007-02-16 at 10:57 -0500, Lowell Gilbert wrote:
 York Rapp [EMAIL PROTECTED] writes:
 
  I am looking for a DVD Image of Release 6.2 to download, but
  unfortunately (stupid as I am ;-)) I cannot find it.
 
  Can you give me an information or a link of a mirror.
 
 The FreeBSD Project does not release official ISOs larger than CD
 size.  The extra bandwidth (and mirror thrashing) isn't worthwhile.
 You can, of course, make your own as you wish.


Chiacchiera con i tuoi amici in tempo reale! 
 http://it.yahoo.com/mail_it/foot/*http://it.messenger.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


softc And device_get_softc(dev)

2007-02-17 Thread aji
hi

   My name is Aji Abraham, now working with device drivers. the word
softc and the function device_get_softc(dev) getting confuse me a
lot. am listing some query below ..  pls help me ..


Q1 In a free BSD driver Code, there are two device depended structures

 struct xx_softc {
 ...
 ..


 };

 struct xx_if_softc {
 ...
 ..


 };

sizeof(struct xx_softc ) is 68
sizeof(struct xx_if_softc ) is 1186

And in device attach function

 xx_attach(dev){

 struct xx_softc*sc;
 struct xx_if_softc *if_sc;

 sc_if = device_get_softc(dev);
 sc = device_get_softc(device_get_parent(dev));

 sc_if- .
 sc- 
 ...
 ..

 }


Both allocation uses the same function. How it possible ?  can we access
all structure member ?

Regards

Aji Abraham




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Same Keyboard Map

2007-02-17 Thread Peo Nilsson
Dear List.

I'm using FreeBSD 6.2 rc2 with the Gnome desktop.
Is there any one that can explain for me in an easy
way how to:

*) Get the same keyboard map with/without X+Gnome.

Without X+Gnome it works fine. I have choosen Swedish keyboard
layout. When entering X+Gnome the keyboard map/layout ends up wrong
(non Swedish). I't might be useful to know that I have choosen English
as the OS/Gnome language and wan't it to be that way.

I would appreciate any kind of help...

Sincerely


-- 
/Peo

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Why this script does not work as expected ?

2007-02-17 Thread Pierre-Francois LAURAND

Hi,

I'm trying to send dump files between 2 FreeBSD hosts ( 6.1 to 6.2 )
with this script :


#!/bin/sh

set -evx

#
# Launch nc in listen mode to recept datas on remote s-backup server.
#
/usr/bin/ssh -c blowfish [EMAIL PROTECTED] \
  /usr/bin/nc -lv 24864 \/backup/2007/02/s9_vol1_datas_20070216.dump 

if [ ${?} -gt 0 ]; then
  exit 1
fi

#read _ignore

#
# Dumping and sending datas to s-backup
#
/usr/bin/time /usr/bin/nice -n 20 /sbin/dump -C 16 -0 -f- /vol1 | \
  /usr/bin/nc -v s-backup 24864



This dump should be ~20 Gb, but the the remote file is only filled with
the first 1024 bytes !

Am I doing something wrong or missing something here ?
Thanks for any help !

--
pf
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Packet rate limiter

2007-02-17 Thread chrishome
 Hi
 
 is there any way how to limit packet per second [PPS] rate to 
 specified 
 IP (group of IP) ? Linux can achieve this via IPtables.
 I`ve searched a lot of web, but nothing interesting found (for PF, 
 IPFilter, and IPFW).
 

I agree this would be a very nice addition to IPFW as a basic feature,
or maybe a more advanced version via Dummynet.  It's much to easy for a
trojan / virus or intentionally malicious user to flood a FreeBSD box
setup as a router with loads of tiny UDP packets on port 80.  In fact,
just a few days ago we had 2 users behind one of our FreeBSD gateways
sending huge loads of traffic to a webhosting site..  This packet count
shown below was all within a 12 hour period ;) 

00010   99046537539618916491 deny ip from 172.17.106.114 to any
0001020010976  800449444 deny ip from 172.17.105.114 to any


Being able to put limits per protocol would be a wonderful addition. 
For now what we do is setup a count rule by MAC address for every user,
we check the count rules every 60 seconds, if we begin to see packets
per second for a certain host climb above for example 4000PPS, we simply
automatically add a deny rule.  These are generally users set for 1 or 2
Mbps each, so 4000PPS is pretty extreme for that kind of bandwidth
unless your doing something you shouldn't.

I've been talking to a few friends about possibly adding this to ipfw or
dummynet, and if I ever get around to a completed working version, I
would be more than happy to share, but for now, there are ways to still
fix the problem, just not as elegant as if it where actually a firewall
rule ;)

Chris Bowman
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ipfw limit src-addr woes

2007-02-17 Thread admin
Hi, I'm trying to use ipfw's limit clause to limit the number of 
connections a single IP can have at the same time in a transparent 
web-proxy environment:


00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port 
80 in via if0 setup limit src-addr 10

00401 fwd local.ip.ad.dr,8080 tcp from x.x.x.x/x to any dst-port 80
... the rest fwd...

the problem is that the src-addr limit is not enforced for some nasty 
clients that open a huge number (3-5 times the prescribed value) of 
www-connections to some single address Out There, forcing you to bump up 
certain sysctl variables (such as kern.ipc.nmbclusters, 
kern.ipc.maxsockets, etc.) to mitigate the DOS effects. What might be 
going on? Is ipfw broken, or am I misusing it?


OS: FreeBSD 6.2
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


A bottleneck in gstripe?

2007-02-17 Thread Kirk Strauser
I built a gstripe volume with 4 drives and a 128KB stripesize.  When running 
one particular application, gstat reports that stripe/stripe1 is 99% busy, 
although its four drives are running at less than 30% each.  Am I 
misinterpreting the numbers - maybe the total is the sum of the drives? - 
or is there some giant overhead that I'm missing?

I've set kern.geom.stripe.fast=1, and kern.geom.stripe.fast_failed stays at 
0.  I don't have enough experience with geom_strip to even know where to go 
from here.  Are stripe sizes likely to make much of a difference when the 
heaviest load is when PostgreSQL is receiving massive imports?  This is a 
production system and I don't have the opportunity to play with it as much 
as I'd like, so any pointers to experiments likely to make a difference 
would be most welcome.
-- 
Kirk Strauser


pgpnHawE5xGjT.pgp
Description: PGP signature


Operation not permitted when mounting floppy or cdrom

2007-02-17 Thread lysergius2001

FreeBSD 6.2.  Recently installed will not permit user mount of floppy disk,
cdrom, or usb.  Works fine as root.  Checked devfs.conf, devfs.rules, fstab,
/dev.  Nothing seems to make a difference.

Any ideas welcomed...

Thanks
--
Lysergius says, Stay light, but trust gravity
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Why this script does not work as expected ?

2007-02-17 Thread Kirk Strauser
On Saturday 17 February 2007 12:36, Pierre-Francois LAURAND wrote:

 /usr/bin/time /usr/bin/nice -n 20 /sbin/dump -C 16 -0 -f- /vol1 | \
/usr/bin/nc -v s-backup 24864

Try the -a option to dump, which tells it to output until it receives a 
write error.  Otherwise, it tries to chop up the dumps into tape-sized pieces 
(even when writing to stdout), and the default tape size seems to be tiny.
-- 
Kirk Strauser


pgpeExtrf0Pi3.pgp
Description: PGP signature


Re: Operation not permitted when mounting floppy or cdrom

2007-02-17 Thread Garrett Cooper

lysergius2001 wrote:

FreeBSD 6.2.  Recently installed will not permit user mount of floppy disk,
cdrom, or usb.  Works fine as root.  Checked devfs.conf, devfs.rules, 
fstab,

/dev.  Nothing seems to make a difference.

Any ideas welcomed...

Thanks


You don't have access to the /dev nodes. Make sure that your user has 
the ability to mount.


Make sure that this sysctl is also set to 1:

vfs.usermount: 1

If that doesn't work, then we'll have to get more info about the devices 
you're trying to mount (ls -l), what groups you're in, etc.

-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Automount 'Host is Down'

2007-02-17 Thread Robert Davison
I've got a sun storedge disk array with two 9BG disks that im trying to 
automount to FreeBSD 6.2
   
  I've got the following in my rc.conf:
   
  portmap_enable=YES
amd_enable=YES
amd_flags=-a /.amd_mnt -l syslog /host /etc/amd.map

  my fstab has the following entries:
   
  /dev/da0s1b noneswapsw  0   0
/dev/da0s1d /mnt/s  ufs rw,noauto   0   0
/dev/da1s1b noneswapsw  0   0
/dev/da1s1d /mnt/t  ufs rw,noauto   0   0
   
  my /etc/amd.map is as follows:
   
  # $FreeBSD: src/etc/amd.map,v 1.9 2002/05/15 22:24:29 obrien Exp $
#
/defaults   type:=host;fs:=${autodir}/${rhost};rhost:=${key}
*   opts:=rw,grpid,resvport,vers=3,nfsv2,proto=udp,nosuid,nodev
  localhost   type:=auto;fs:=${map};pref:=${key}/
  localhost/s type:=program;fs:=/mnt/s;\
mount:=/sbin/mount mount /mnt/s;\
unmount:=/sbin/umount umount /mnt/s
  localhost/t type:=program;fs:=/mnt/t;\
mount:=/sbin/mount mount /mnt/t;\
unmount:=/sbin/umount umount /mnt/t
   
  and finally, my /etc/amd.conf is as follows:
   
  # GLOBAL OPTIONS SECTION
[ global ]
normalize_hostnames =   no
print_pid = no
restart_mounts =yes
auto_dir =  /n
log_file =  /var/log/amd
log_options =   all
#debug_options =all
plock = no
selectors_on_default =  yes
# config.guess picks up sunos5 and I don't want to edit my maps yet
os =sos5
# if you print_version after setting up os, it will show it.
print_version = no
map_type =  file
search_path =   /etc/amd.map:/usr/lib/amd:/usr/local/AMD/lib
browsable_dirs =yes
  # DEFINE AN AMD MOUNT POINT
[ /s ]
map_name =  amd.s
  [ /t ]
map_name =  amd.t
   
  I have created links from / to /host/localhost/t as well as /host/localhost/s

  When I boot the system I have the /host directory. If I ls /hosts the 
directory is empty as expeced. When I try and cd to /t (remember linking 
through to /host/localhost/t) i get a message saying /t: Host is down message.
   
  Now if I look in /host, I have the /host/localhost directory, so it seems 
that amd is trying to work, but for some reason /t is unavailable.
   
  If I change my fstab to mount the partitions without amd i.e so that the /t 
and /s partitions automount on boot as well as turning off the amd deamon on 
boot, (after creating directories for /t and /s under /mnt) everything works 
fine.
   
  I just cant figure out why the /t: and /s host is down message is appearing 
when using amd.
   
  Has anyone had a similar experience ?
   
  

 


-
 Yahoo! Messenger - with free PC-PC calling and photo sharing.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


gvinum with RAID capable SATA card

2007-02-17 Thread Garrett Cooper

Hello,
	Motherboards usually don't support more than 2 SATA ports, and since 
SATA is 1:1, I have to invest in a SATA RAID card to get RAID-5 support.
	After reading the handbook a bit I came across chapter 19, which goes 
into some detail about why and how to the configure one's disks in a 
software RAID with gvinum. However, I'm not sure what mode (if one 
exists) that I could put a RAID card in to make the OS see single disks.
	So I guess my point is, can I turn off RAID functionality on the card 
and make the disks into single, separated disks available via the disk 
controller, or is that impossible with a RAID card?

I think the problem lies with my (limited) knowledge of RAID.
TIA,
-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Operation not permitted when mounting floppy or cdrom

2007-02-17 Thread Momchil Ivanov
На 17.2.2007 21:11 lysergius2001 пише:
 FreeBSD 6.2.  Recently installed will not permit user mount of floppy disk,
 cdrom, or usb.  Works fine as root.  Checked devfs.conf, devfs.rules,
 fstab, /dev.  Nothing seems to make a difference.

 Any ideas welcomed...

 Thanks

Try setting the vfs.usermount sysctl to 1

-- 
This correspondence is strictly confidential. Any screening, filtering
and/or production for the purpose of public or otherwise disclosure is
forbidden without written permission by the author signed above. If you are
not the intended recipient, please immediately notify the sender and
permanently delete any copies

PGP KeyID: 0x3118168B
Keyserver: pgp.mit.edu
Key fingerprint BB50 2983 0714 36DC D02E  158A E03D 56DA 3118 168B


pgpSBbroyeJzM.pgp
Description: PGP signature


CUPS+hplip woes; printmode mismatch with pen, tray, etc.

2007-02-17 Thread Anthony Michael Agelastos

Hello,

Recently CUPS and hplip have been updated and now my HP LaserJet  
1160Le is not working. I tried some basic troubleshooting and when my  
ideas did not work, I decided to delete the printer, reinstall all  
things relating to hplip, and then reinstall the printer.


So, as root, I go to http://localholst:631 and click on Add Printer.

In the Add Printer window, I do:

Name: HPLaserJet1160Le
Location: Den
Description: HP LaserJet 1160Le

and click on Continue. Now, I am in the Device for  
HPLaserJet1160Le window. The Device pull-down menu has the option:


HP LaserJet 1160 series USB 00CNG1R02434 HPLIP (HP LaserJet 1160 series)

Naturally, I choose this device and hit continue. Then, I am at the  
Model/Driver for HPLaserJet1160Le window and choose


Model: HP LaserJet 1160 Foomatic/hpijs (recommended)(en) and click  
on Add Printer and authenticate myself as root . I am then greeted  
with a window that says that the printer was added successfully.


Now, when I am in the Printers tab, I click on Print Test Page,  
and it brings me to a window that shows just the printer (and its  
information) and right next to the printer name (HPLaserJet1160Le), I  
am greeted with the message,


printmode mismatch with pen, tray, etc.

How do I fix this?

My printer has the following specs as displayed in CUPS:
Description: HP LaserJet 1160Le
Location: Den
Make and Model: HP LaserJet 1160 Foomatic/hpijs (recommended)
Printer State: idle, accepting jobs, published
Device URI: hp:/usb/hp_LaserJet_1160_series?serial=00CNG1R02434

My machine is currently running hplip-1.7.1 and cups-base-1.2.7_2...  
I am in the process of updating to 1.2.7_3 and will let you know if  
this fixes things.


In var/log/messages, there are the following lines.
Feb 17 15:35:29 dell kernel: ugen0: Hewlett-Packard hp LaserJet 1160  
series, rev 1.10/1.00, addr 2

Feb 17 15:40:07 dell kernel: All threads purged from ugen0.1
Feb 17 15:40:07 dell kernel: All threads purged from ugen0.2
Feb 17 15:40:10 dell hpijs: WARNING: printmode mismatch with pen,  
tray, etc.

Feb 17 15:40:11 dell kernel: All threads purged from ugen0.1

If I do a...
# grep printmode /var/log/cups/error_log
W [17/Feb/2007:16:10:03 -0500] [Job 9] printmode mismatch with pen,  
tray, etc.


It even has this problem with my firewall turned off. I am running  
FreeBSD 6.2-RELEASE on a Pentium 3. Does anyone have any ideas?


Thank you for your assistance with this.

-Anthony
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: gvinum with RAID capable SATA card

2007-02-17 Thread Matthew Seaman
Garrett Cooper wrote:
 Hello,
 Motherboards usually don't support more than 2 SATA ports, and since
 SATA is 1:1, I have to invest in a SATA RAID card to get RAID-5 support.
 After reading the handbook a bit I came across chapter 19, which
 goes into some detail about why and how to the configure one's disks in
 a software RAID with gvinum. However, I'm not sure what mode (if one
 exists) that I could put a RAID card in to make the OS see single disks.
 So I guess my point is, can I turn off RAID functionality on the
 card and make the disks into single, separated disks available via the
 disk controller, or is that impossible with a RAID card?
 I think the problem lies with my (limited) knowledge of RAID.

Most RAID controllers certainly will support acting in JBOD mode. 
Check the docco before buying.  

However, if you've got a hardware RAID card, then you'll almost
certainly be better off using it for doing RAID5 than doing it in
software with gvinum.  The RAID card will have hardware to do the
parity calculations needed for RAID5 and offloading that from the
CPU is a big win.

The balance of advantage between hardware and software RAID is not so
clear cut for RAID1 or RAID10 (mirror or mirror+stripe).  Software RAID
is a lot cheaper, can be monitored by native system tools and is pretty
much as performant as hardware RAID unless you have a battery backup
unit on the RAID card [in which case you can set the card to tell the OS
the data is secure as soon as it is in battery backed RAM on the card
(which takes nanoseconds) rather than actually written to disk (which
takes milliseconds), hence decreasing IO latency enormously].

When buying a RAID card, an important consideration is that there
are FreeBSD compatible management tools available -- otherwise, for
example, you'll not get alerted to disk problems other than by the
onboard alarm buzzer on the card.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
  Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature


Re: Why this script does not work as expected ?

2007-02-17 Thread Pierre-Francois LAURAND

Kirk Strauser a écrit :

On Saturday 17 February 2007 12:36, Pierre-Francois LAURAND wrote:


/usr/bin/time /usr/bin/nice -n 20 /sbin/dump -C 16 -0 -f- /vol1 | \
   /usr/bin/nc -v s-backup 24864


Try the -a option to dump, which tells it to output until it receives a 
write error.  Otherwise, it tries to chop up the dumps into tape-sized pieces 
(even when writing to stdout), and the default tape size seems to be tiny.


dump does not seem to be involved :

On client :
[EMAIL PROTECTED]:/tmp$ if (/usr/bin/ssh -c blowfish [EMAIL PROTECTED] \
 /usr/bin/nc -lv 24864 \/tmp/file.1m ); then \
 /bin/dd if=/dev/random bs=512k count=2 | \
 /usr/bin/nc -v s-backup 24864; fi

On remote, I only have a 1024 bytes file size:

[EMAIL PROTECTED]:/tmp$ ls -l
-rw-r-   1 backup  operator -1024 17 feb 22:52 file.1m

But, if on s-backup :
[EMAIL PROTECTED]:/tmp$ /usr/bin/nc -lv 24864 | /bin/dd of=/tmp/file.1m

And on client :
[EMAIL PROTECTED]: dd if=/dev/random bs=512k count=2 | \
 /usr/bin/nc -v s-backup 24864

I get the expected result on s-backup:

[EMAIL PROTECTED]:/tmp$ ls -l
-rw-r-   1 backup  operator   - 1048576 17 feb 22:54 file.1m

So, I think that ssh is the one that break the transmission.

--
pf
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Same Keyboard Map

2007-02-17 Thread Lars Stokholm

Peo Nilsson wrote:

Dear List.

I'm using FreeBSD 6.2 rc2 with the Gnome desktop.
Is there any one that can explain for me in an easy
way how to:

*) Get the same keyboard map with/without X+Gnome.

Without X+Gnome it works fine. I have choosen Swedish keyboard
layout. When entering X+Gnome the keyboard map/layout ends up wrong
(non Swedish). I't might be useful to know that I have choosen English
as the OS/Gnome language and wan't it to be that way.

I would appreciate any kind of help...

Sincerely


I think you just need to set

Option XkbLayout se

in the InputDevice section regarding your keyboard.

--
Kind regards,
Lars Stokholm
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: A bottleneck in gstripe?

2007-02-17 Thread Ivan Voras
Kirk Strauser wrote:
 I built a gstripe volume with 4 drives and a 128KB stripesize.  When running 
 one particular application, gstat reports that stripe/stripe1 is 99% busy, 
 although its four drives are running at less than 30% each.  Am I 
 misinterpreting the numbers - maybe the total is the sum of the drives? - 
 or is there some giant overhead that I'm missing?

Nevermind the % used number, it's an approximation of an approximation
- how is your real world performance? For example, use
ports/benchmarks/bonnie++ .

 I've set kern.geom.stripe.fast=1, and kern.geom.stripe.fast_failed stays at 
 0.  I don't have enough experience with geom_strip to even know where to go 
 from here.  Are stripe sizes likely to make much of a difference when the 
 heaviest load is when PostgreSQL is receiving massive imports?  This is a 

Not much, as the data is first written to WAL, which goes at full file
system speed (no fsyncs).




signature.asc
Description: OpenPGP digital signature


Re: ADSL-2 internal modem ?

2007-02-17 Thread Norberto Meijome
On Sat, 17 Feb 2007 08:08:39 -0600
Derek Ragona [EMAIL PROTECTED] wrote:

 Use an external and connect it to your server via ethernet.
 
  -Derek
 

thanks Derek, i knew i can do this anytime easily - i was just wondering about
doing the lot in BSD...

thanks!
_
{Beto|Norberto|Numard} Meijome

We've been wrong so many times before, why stop now?

I speak for myself, not my employer. Contents may be hot. Slippery when wet.
Reading disclaimers makes you go blind. Writing them is worse. You have been
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


pkg_version: not found

2007-02-17 Thread Richard Collyer

Hello,

Having a small issue with a 5.4 box.

When I do a make on a port I get a list of /usr/local/sbin/pkg_version: 
not found come up.


Varies by the port. Surely enough there is no pkg_version in that dir 
but pkg_version -v works. Odd no?


There are other pkg_info etc in there so I am assuming that the file has 
become deleted / corrupt?


Anyone know this package installs these tools there so I can try a 
re-install to get them back. Been ages but I think it was port-utils or 
something similar as I don't remember them being the base install.


Cheers
Richard
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pkg_version: not found

2007-02-17 Thread Kris Kennaway
On Sun, Feb 18, 2007 at 12:16:38AM +, Richard Collyer wrote:
 Hello,
 
 Having a small issue with a 5.4 box.
 
 When I do a make on a port I get a list of /usr/local/sbin/pkg_version: 
 not found come up.
 
 Varies by the port. Surely enough there is no pkg_version in that dir 
 but pkg_version -v works. Odd no?
 
 There are other pkg_info etc in there so I am assuming that the file has 
 become deleted / corrupt?
 
 Anyone know this package installs these tools there so I can try a 
 re-install to get them back. Been ages but I think it was port-utils or 
 something similar as I don't remember them being the base install.

Since you're using an old unsupported version of FreeBSD you're
triggering some code which attempts to work around some missing
features of old releases by using the sysutils/pkg_install port.

It seems you have only a partial installation of this port,
i.e. /usr/local/sbin/pkg_info exists but pkg_version does not.

Kris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


DND in Seamonkey; GTK again?

2007-02-17 Thread Joe Altman
In January, this was widely reported:

https://bugzilla.mozilla.org/show_bug.cgi?id=367203
https://bugzilla.mozilla.org/show_bug.cgi?id=355248

In a nutshell:

Drag and drop of messages to folders broken in trunk around 2006/10/01

and 

gtk2 dnd implementation broken

A sample error: (Gecko:7527): Gtk-CRITICAL **: gtk_drag_get_data:
assertion `GTK_IS_WIDGET (widget)' failed

It was fixed, sometime around 18 Jan 2007 21:37:11; but I've just seen
it again in Seamonkey 1.1 Gecko/20070212; and this is the error on my
console:

(Gecko:916): Gtk-CRITICAL **: gtk_drag_get_data: assertion
`GTK_IS_WIDGET (widget)' failed

I also note that there are more reports at the two bug sites above.

My questions:

1) Is anyone else seeing this?

2) If anyone has seen it, did you notice a resolution following a
   ports update?

3) Has anyone seen a fix put into the relevant source?[a]

[a] I have no idea which source is relevant, actually; but it looks
like the same GTK bits.

-- 
An actual query: What were those little elves in that Tolstoy novel?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pkg_version: not found

2007-02-17 Thread Jeffrey Goldberg


On Feb 17, 2007, at 6:16 PM, Richard Collyer wrote:


there is no pkg_version in that dir but pkg_version -v works. Odd no?


Try

  which pkg_version

to find out the path of the one that is working.  Also try

  whereis pkg_version




--
Jeffrey Goldberghttp://www.goldmark.org/jeff/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DND in Seamonkey; GTK again?

2007-02-17 Thread Joe Altman

On Sat, Feb 17, 2007 at 08:34:30PM -0500, Joe Altman wrote:
 
snip

DND works in Mozilla 1.7.13 Gecko/20070121.

So far, I cannot figure out who maintains GTK bits, or even if that is
who should hear about it.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


video acceleration desired

2007-02-17 Thread Bob McIsaac
HI:  
Playing an AVI video with FreeBSD6.2 on a 
http://www.via.com.tw/en/products/mainboards/motherboards.jsp?motherboard_id=400
 
appears in slow motion with KDE-Kaffeine.  It appears the Via CPU is 
doing all the work and that the graphics hardware is not fully 
exploited. /var/messages shows detection of specific VIA hardware 
such as network, USB, and audio ..  but nothing special for video.

I did grep -r vid_find /usr/src and concluded there is only support 
for ATI MACH video adapters. Everything else relies on some generic 
mechanism.  My goal is to use this nifty little mini-itx for a custom 
PVR but am hampered by this slow video problem. Any suggestions?

-Bob-

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


The FreeBSD Diary: 2007-01-28 - 2007-02-17

2007-02-17 Thread Dan Langille
The FreeBSD Diary contains a large number of practical 
examples and how-to guides.  This message is posted weekly
to freebsd-questions@freebsd.org with the aim of letting people
know what's available on the website.  Before you post a question
here it might be a good idea to first search the mailing list 
archives http://www.freebsd.org/search/search.html#mailinglists 
and/or The FreeBSD Diary http://www.freebsddiary.org/. 

These are the articles posted during this period:

7-Feb : Converting a system to RAID
 Want RAID?  Here is how to convert an existing system to use RAID 
 http://freebsddiary.org/raid-adding.php?2


-- 
Dan Langille
BSDCan - http://www.BSDCan.org/ - BSD Conference

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: gvinum with RAID capable SATA card

2007-02-17 Thread Garrett Cooper

Matthew Seaman wrote:

Garrett Cooper wrote:

Hello,
Motherboards usually don't support more than 2 SATA ports, and since
SATA is 1:1, I have to invest in a SATA RAID card to get RAID-5 support.
After reading the handbook a bit I came across chapter 19, which
goes into some detail about why and how to the configure one's disks in
a software RAID with gvinum. However, I'm not sure what mode (if one
exists) that I could put a RAID card in to make the OS see single disks.
So I guess my point is, can I turn off RAID functionality on the
card and make the disks into single, separated disks available via the
disk controller, or is that impossible with a RAID card?
I think the problem lies with my (limited) knowledge of RAID.


Most RAID controllers certainly will support acting in JBOD mode. 
Check the docco before buying.  


Ok, sounds good.


However, if you've got a hardware RAID card, then you'll almost
certainly be better off using it for doing RAID5 than doing it in
software with gvinum.  The RAID card will have hardware to do the
parity calculations needed for RAID5 and offloading that from the
CPU is a big win.


Well, it may be in a sense, but I'm afraid of controller reliability and 
the whole proprietary nature of RAID cards.. I don't want a controller 
maker to be bought up by another group a few years from now and I won't 
be able to use my drives because they don't exist :(..



The balance of advantage between hardware and software RAID is not so
clear cut for RAID1 or RAID10 (mirror or mirror+stripe).  Software RAID
is a lot cheaper, can be monitored by native system tools and is pretty
much as performant as hardware RAID unless you have a battery backup
unit on the RAID card [in which case you can set the card to tell the OS
the data is secure as soon as it is in battery backed RAM on the card
(which takes nanoseconds) rather than actually written to disk (which
takes milliseconds), hence decreasing IO latency enormously].

When buying a RAID card, an important consideration is that there
are FreeBSD compatible management tools available -- otherwise, for
example, you'll not get alerted to disk problems other than by the
onboard alarm buzzer on the card.

Cheers,

Matthew


Hmmm.. for my intentions though it would be purely personal data 
storage, so while speed would be wonderful it's not as necessary. I'm 
mostly aiming for storage size and reliability.


Thanks for the comments though; they were helpful :).
-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw limit src-addr woes

2007-02-17 Thread Abdullah Ibn Hamad Al-Marri

On 2/17/07, admin [EMAIL PROTECTED] wrote:

Hi, I'm trying to use ipfw's limit clause to limit the number of
connections a single IP can have at the same time in a transparent
web-proxy environment:

00350 skipto 401 tcp from x.x.x.x/x,y.y.y.y/y,z.z.z.z/z to any dst-port
80 in via if0 setup limit src-addr 10
00401 fwd local.ip.ad.dr,8080 tcp from x.x.x.x/x to any dst-port 80
... the rest fwd...

the problem is that the src-addr limit is not enforced for some nasty
clients that open a huge number (3-5 times the prescribed value) of
www-connections to some single address Out There, forcing you to bump up
certain sysctl variables (such as kern.ipc.nmbclusters,
kern.ipc.maxsockets, etc.) to mitigate the DOS effects. What might be
going on? Is ipfw broken, or am I misusing it?

OS: FreeBSD 6.2


I would go for pf instead of ipfw for that job ;)

--
Regards,

-Abdullah Ibn Hamad Al-Marri
Arab Portal
http://www.WeArab.Net/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


AMD/ATI FGLRX on FreeBSD lives again?

2007-02-17 Thread Abdullah Ibn Hamad Al-Marri

Hey Guys,

http://www.fglrx-freebsd.com/index.php
Last update: January 28th, 2007

The driver, as it stands, does the following:

  1. Installs the applicable Linux libraries, and ATI programs to
your linux_base.
  2. Compiles and installs the following ATI programs (For FreeBSD):
fgl_glxgears, fglrx_gamma, and the ATI control panel.
  3. Installs the X11 drivers and libraries. (Linux builds, but work
file under FreeBSD)
 Supports full 2D acceleration, including accelerated XVideo.
  4. Supports TV out and MultiHead.
  5. Does NOT support 3D acceleration, or build the kernel module.


Any of you aware of this?

--
Regards,

-Abdullah Ibn Hamad Al-Marri
Arab Portal
http://www.WeArab.Net/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]