Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread vuthecuong

Sorry I not explained clearly:
Who is assigning the dynamic IP ?
This is my Lan, server is freebsd 6.2, My LAN have 5 XP,Linux CLients.
I registered a DynamicIP at dyndns.com: www.thecuong.gotdns.com

In Freebsd 6.2, I have also postfix MTA. Currently my clients have mail 
adress such as

[EMAIL PROTECTED], [EMAIL PROTECTED]
With this mail addressed, I cand send/receive mail from/to my company, 
Yahoo etc.
But my postfix only can receive mails from freebsd-questions mailing 
list, it can not send

mail  to this.
I recognized that the cause of this problem is that my DNS (on Freebsd 
6.2) not

reverse lookup as freebsd-questions requiried in order to prevent spam.
Freebsd-questions is currently treats [EMAIL PROTECTED],
[EMAIL PROTECTED] as spam. When mail fom these addressed come,
it rejected.

I suggest that now I will attached  zone file and reverse file,
then could you help me check and let me know what's wrong?
Pls help me, I really need your help.
Tnx



Olivier Nicole wrote:
Maybe I'm stupid because I already spent 3 days creating my zone file 
and reverse file

but I still can not sussefull.
I'm running FreeBSD 6.2, I have DynamicIP: www.thecuong.gotdns.com.
Could you help me to create the simple example  of zone file and reverse 
file for me



Who is assigning the dynamic IP ?

Dynamic DNS only works with DHCP: DCHP gives and IP to a machine and
then it informes DNS that it has given that IP and that now the DNS
should update its synamic tables accordingly. You cannot have dynamic
DNS working alone (well I think so).

Plus the DNS server that holds dynamic reccords should be at a fixed
IP address (I never heard of a DNS server on a machine with dynamic
IP, that sounds way to unstable to me).

Olivier

  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread Olivier Nicole
I understand your problem.

dyndns.com is taking care of the forward dynamic DNS for you.

Now who is in charge of the reverse DNS for 58.187.106.120 (your
current IP)? I beleive it is FPT.

So FPT should upgrade its own reverse DNS every time it gives an IP to
your server.

Right now if I make a reverse DNS lookup on 58.187.106.120 it gets
nothing, while it should get thecuong.gotdns.com.

The easiest way to solve your email problem would be that your server
sends all the email thought FPT mail server.

As a rule, it is a bad idea to use a machine with a dynamic address to
be an SMTP server: when the IP changes, the DNS cache will take some
time to update everywhere, so for some time your email will be sent to
the wrong IP: mailiong list may decide that your account is dead and
remove you from the list.

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread Olivier Nicole
 But my postfix only can receive mails from freebsd-questions mailing
 list, it can not send mail to this. 

There is another thing you have to consider. As it is explained in
http://www.bsdforums.org/forums/showthread.php?p=265093#post265093
your dynamic IP has been black listed (the IP was used before by
someone else who sent SPAM, so now the IP is in a list of bad guys and
many mail server will refuse to receive emails from your IP).

So it is really a better idea that you sent all your email thought FPT
email server.

Best regards,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread J65nko

On 7/13/07, Olivier Nicole [EMAIL PROTECTED] wrote:

I understand your problem.

dyndns.com is taking care of the forward dynamic DNS for you.

Now who is in charge of the reverse DNS for 58.187.106.120 (your
current IP)? I beleive it is FPT.

So FPT should upgrade its own reverse DNS every time it gives an IP to
your server.

Right now if I make a reverse DNS lookup on 58.187.106.120 it gets
nothing, while it should get thecuong.gotdns.com.

The easiest way to solve your email problem would be that your server
sends all the email thought FPT mail server.

As a rule, it is a bad idea to use a machine with a dynamic address to
be an SMTP server: when the IP changes, the DNS cache will take some
time to update everywhere, so for some time your email will be sent to
the wrong IP: mailiong list may decide that your account is dead and
remove you from the list.

Olivier


This same issue is being discussed at
http://www.bsdforums.org/forums/showthread.php?p=265093#post265093  ;)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Openbox/GTK 2.x

2007-07-13 Thread Olivier Regnier

Hi everyone,

I'm working with FreeBSD 6.2 with Openbox Window Manager. I want to 
customize my Openbox theme.

It is possible to download GTK themes for Openbox ?

I'm looking the following website:  http://www.gentoo-art.org/ but most 
GTK 2.x are made for Gnome, Kde or Xfce.


Can you give me informations about this ?

Thank your for your help.

Olivier Regnier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: I've got a question for you guys (unsubscibing)

2007-07-13 Thread Olivier Nicole
 I have gone to  http://lists.freebsd.org/mailman/listinfo/freebsd-questions 
 days ago. It does not work.

Did you receive the mail asking you to confirm the removal?

Something like that:

Mailing list removal confirmation notice for mailing list
freebsd-questions

We have received a request for the removal of your email address,
[EMAIL PROTECTED] from the freebsd-questions@freebsd.org mailing list.
To confirm that you want to be removed from this mailing list, simply
reply to this message, keeping the Subject: header intact.  Or visit
this web page:


http://lists.freebsd.org/mailman/confirm/freebsd-questions/1234567890abcdef1234567890abcdef


Or include the following line -- and only the following line -- in a
message to [EMAIL PROTECTED]:

confirm 1234567890abcdef1234567890abcdef

Note that simply sending a `reply' to this message should work from
most mail readers, since that usually leaves the Subject: line in the
right form (additional Re: text in the Subject: is okay).

If you do not wish to be removed from this list, please simply
disregard this message.  If you think you are being maliciously
removed from the list, or have any other questions, send them to
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread vuthecuong

Olivier Nicole wrote:

But my postfix only can receive mails from freebsd-questions mailing
list, it can not send mail to this. 



There is another thing you have to consider. As it is explained in
http://www.bsdforums.org/forums/showthread.php?p=265093#post265093
your dynamic IP has been black listed (the IP was used before by
someone else who sent SPAM, so now the IP is in a list of bad guys and
many mail server will refuse to receive emails from your IP).

So it is really a better idea that you sent all your email thought FPT
email server.

Best regards,

Olivier

  
OK I understood, this is one lession I learned today: In order to run 
real mail server,

fixed IP address for forward and reverse DNS is must-have.
I will choose method of relaying through ISP though I prefer the first one.
Tnx you very much.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: I've got a question for you guys (unsubscibing)

2007-07-13 Thread Marc Lechevalier
I have gone to  http://lists.freebsd.org/mailman/listinfo/freebsd-questions 
days ago. It does not work.


- Original Message - 
From: Duane Hill [EMAIL PROTECTED]

To: freebsd-questions@freebsd.org
Sent: Thursday, July 12, 2007 8:24 AM
Subject: Re: I've got a question for you guys (unsubscibing)




http://lists.freebsd.org/mailman/listinfo/freebsd-questions

On Thu, 12 Jul 2007 at 07:18 -0400, [EMAIL PROTECTED] 
confabulated:



I have the same question. I tried unsubscribing with no luck.


- Original Message - From: [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Sent: Thursday, July 12, 2007 2:02 AM
Subject: I've got a question for you guys (unsubscibing)



Why, despite sending multiple e-mails to the unsubscribe address, am I
continued to be subscribed to this list?? Any help would be grand.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




-
 _|_
(_| |
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED] 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Transparent email proxy

2007-07-13 Thread Olivier Nicole
Hi,

As an ISP, or the person in charge of a large organisation, have you
ever set-up a transparent email redirection: all outgoing email would
be proceeded to an outgoing server in order to check for virus, spam,
whatever.

Best regards,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Transparent email proxy

2007-07-13 Thread Heiko Wundram (Beenic)
On Friday 13 July 2007 09:30:06 Olivier Nicole wrote:
 As an ISP, or the person in charge of a large organisation, have you
 ever set-up a transparent email redirection: all outgoing email would
 be proceeded to an outgoing server in order to check for virus, spam,
 whatever.

Don't do this transparently. Only leads to pain and suffering (and 
sufficiently high client disappointment), especially if you want to support 
TLS over SMTP (which either means a failed certificate for the sending host 
in case you proxy fully), or not check-/controllable by you (in case you pass 
encrypted SMTP on directly).

Easiest solution that worked for me: block all outgoing traffic to ports 25 
and 465, and tell your clients to use yoursmtphost as their smarthost, 
which then accepts the mail, scans it, and sends it on properly. This works 
fine for a university of 8000 computers. ;-)

-- 
Heiko Wundram
Product  Application Development
-
Office Germany - EXPO PARK HANNOVER
 
Beenic Networks GmbH
Mailänder Straße 2
30539 Hannover
 
Fon+49 511 / 590 935 - 15
Fax+49 511 / 590 935 - 29
Mail   [EMAIL PROTECTED]


Beenic Networks GmbH
-
Sitz der Gesellschaft: Hannover
Geschäftsführer: Jorge Delgado
Registernummer: HRB 61869
Registergericht: Amtsgericht Hannover
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Making a mounted ISO image of a CD-ROM writable

2007-07-13 Thread CyberLeo Kitsana
Paul Hoffman wrote:
 At 10:53 PM +0200 7/12/07, Roland Smith wrote:
 On Thu, Jul 12, 2007 at 12:38:10PM -0700, Paul Hoffman wrote:
  Greetings again. I want to make an ISO image of the FreeBSD
 distribution
  with a boot.config file that contains /boot/loader -h. I have the ISO
  image as a file on my hard drive, and have mounted it on /mnt:

  mdconfig -a -t vnode -f /path/to/my/bootable.iso -u 0
  mount -w -t cd9660 /dev/md0 /mnt

  However, when I try to create files on /mnt, I get:

  -su: boot.config: Read-only file system

  How do I make it so that I can write into /mnt so that I can then later
  save those back to the ISO image?

 Try the sysutils/isomaster port.
 
 Er, thanks, but I am running on a text-only system. Looks nice, however.
 
 Other thoughts? I would hope this would be as easy as run this program
 to change the image to read-write.

Due to the way iso9660 (cd) filesystems are arranged, they cannot be
written to after they are created. The easiest option would be to copy
all the files to a directory on your hard disk, make the required
changes, and use mkisofs to regenerate a new iso9660 filesystem.

This will likely require more than a cursory perusal of mkisofs(8),
given that you wish to create a bootable CD.

-- 
Fuzzy love,
-CyberLeo
Technical Administrator
CyberLeo.Net Webhosting
http://www.CyberLeo.Net
[EMAIL PROTECTED]

Furry Peace! - http://.fur.com/peace/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Dual boot FreeBSD(6.2) / Current ?

2007-07-13 Thread CyberLeo Kitsana
Patrick Lamaiziere wrote:
 Hello,
 
 How to make a dual boot with Stable and Current ? The FreeBSD loader
 always uses the bsd partition 'a' to load the kernel. So i always boot
 6.2.
 
 My main boot loader is Gag.
 

Perhaps install the depeendant filesystems (/, /var, /usr) for the two
versions each in their own slices, and share independant filesystems
(/tmp, /home) from a third slice?

-- 
Fuzzy love,
-CyberLeo
Technical Administrator
CyberLeo.Net Webhosting
http://www.CyberLeo.Net
[EMAIL PROTECTED]

Furry Peace! - http://.fur.com/peace/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread Steve Bertrand
vuthecuong wrote:
 Olivier Nicole wrote:
 But my postfix only can receive mails from freebsd-questions mailing
 list, it can not send mail to this. 

 There is another thing you have to consider. As it is explained in
 http://www.bsdforums.org/forums/showthread.php?p=265093#post265093
 your dynamic IP has been black listed (the IP was used before by
 someone else who sent SPAM, so now the IP is in a list of bad guys and
 many mail server will refuse to receive emails from your IP).

 So it is really a better idea that you sent all your email thought FPT
 email server.

 Best regards,

 Olivier

   
 OK I understood, this is one lession I learned today: In order to run
 real mail server,
 fixed IP address for forward and reverse DNS is must-have.
 I will choose method of relaying through ISP though I prefer the first one.
 Tnx you very much.

The ISP who assigns you the IP from their allocated block are
responsible for the reverse entry. You can create one locally, but the
Internet as a whole will never look to anything you set up for an rDNS
entry. I believe that every IP that is in use on a network, no matter
what piece of infrastructure or computer it is assigned to should have a
reverse entry.

Most ISP's now are configuring rDNS entries for dynamic clients as such,
with prefixes that include ppp, dynamic, dialin etc. Almost all of these
such entries will cause mail blocks leading to blacklists due to the
fact 99.99% of dynamic IP entries should never be sending mail directly
to another MX to begin with.

In your case, you can still run a fully functional email server at your
end, however, instead of sending out directly, you use your upstream as
your smart host as stated above.

Aside from that, if you are a non-business client without static IP(s),
your ISP should be blocking you from sending outbound 25 traffic into
their network, except to their mail servers directly anyway.

Of course, your ISP should also be blocking port 25 inbound into their
network from the outside world, and outbound from their network to you
(except to their own legit mail servers) to protect against exploitation
of someone with an open relay. (You shouldn't be able to use yourself on
the dynamic IP as an SMTP server from outside your own location). If
they have implemented this, then you will have to use SMTP Auth on port
587. As a matter of fact, you should be using this anyway.

This ISP uses SMTP Auth across the board for all of our users (ADSL,
SDSL, dial-up etc). Only a very small handful are permitted to use port
25, and those clients would be the ones (like old Mac OS mail software)
that do not have the ability to implement port 587.

Cheers!

Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 10Mbps versus 100Mbps Cable Modems

2007-07-13 Thread Sten Daniel Soersdal

fbsd2 wrote:
Comclark cable in Angeles City Philippines has changed 
from using 100Mbps Cable Modem to 10Mbps Cable Modem.

To me this seems to be all wrong as all I see is slower response.
Is there any technical or performance reason for any cable internet 
provider to downgrade their network subscribers cable modems 
from 100Mbps to 10Mbps? 


That reason could be compatibility.

If you see slower response then perhaps something is wrong.
Perhaps you should call their support and verify that you do not have a 
mismatched duplex setting?


Mismatched duplex can come from misbehaving autonegotiation or that one 
end is set to full-duplex while the other end is set to half-duplex, or, 
one end is set to full-duplex and the other end is set to auto-negotiate 
(which results in falling back to half-duplex).


--
Sten Daniel Soersdal
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 6.2 Freezes

2007-07-13 Thread Nikos Vassiliadis
On Thursday 12 July 2007 13:02, Steven Wagner wrote:
 Our server is running for awhile (sometimes 1 day, sometimes less than
 an hour) then ssh sessions hang and disconnect, web server times out,
 console allows us to give input to the login prompt, but after typing
 root and hitting enter the password prompt never appears.

Looks like the UFS subsystem is deadlocked...

[snip]
 1035 root 1 -4 0 10904K 9636K ufs 0:12 0.00% perl5.8.8
 1016 root 1 -4 0 10904K 9636K ufs 0:12 0.00% perl5.8.8
 1041 root 1 -4 0 10904K 9636K ufs 0:12 0.00% perl5.8.8
 1033 root 1 -4 0 10904K 9636K ufs 0:12 0.00% perl5.8.8
 1036 root 1 -4 0 10904K 9636K ufs 0:12 0.00% perl5.8.8
 1034 root 1 -4 0 10904K 9636K ufs 0:12 0.00% perl5.8.8
 1038 root 1 -4 0 10904K 9636K ufs 0:12 0.00% perl5.8.8
 1040 root 1 -4 0 10904K 9636K ufs 0:12 0.00% perl5.8.8
 1039 root 1 -4 0 10900K 9632K ufs 0:11 0.00% perl5.8.8
 1101 root 1 96 0 9972K 9040K select 0:05 0.00% named
 2170 root 1 -4 0 80996K 79172K ufs 0:05 0.00% perl5.8.8

Yes, lots of processes are stuck in ufs state.

[snip]

 If anyone has any ideas on what might be causing this or a suggestion as
 to how I can capture more information at the time of a crash it's very
 much appreciated.

I am not aware of the state of UFS snapshots on 6.2R,
but on previous releases there were such problems.

So, do you have any snapshots on active filesystems?
snapinfo(8) will help you find out.

HTH, Nikos

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Openbox/GTK 2.x

2007-07-13 Thread Norberto Meijome
On Fri, 13 Jul 2007 09:53:14 +0200
Olivier Regnier [EMAIL PROTECTED] wrote:

 Hi everyone,
 
 I'm working with FreeBSD 6.2 with Openbox Window Manager. I want to 
 customize my Openbox theme.
 It is possible to download GTK themes for Openbox ?
 
 I'm looking the following website:  http://www.gentoo-art.org/ but most 
 GTK 2.x are made for Gnome, Kde or Xfce.
 

Olivier, why not use the existing Openbox themes? 

http://www.google.com.au/search?q=openbox+themesie=utf-8oe=utf-8aq=trls=org.mozilla:en-US:officialclient=firefox-a

_
{Beto|Norberto|Numard} Meijome

When the Paris Exhibition closes electric light will close with it and no more 
be heard of. 
   Erasmus Wilson (1878) Professor at Oxford University

I speak for myself, not my employer. Contents may be hot. Slippery when wet. 
Reading disclaimers makes you go blind. Writing them is worse. You have been 
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to start apache22 without ssl

2007-07-13 Thread Norberto Meijome
On Fri, 13 Jul 2007 08:35:25 -0400
pj [EMAIL PROTECTED] wrote:

 My only question now is: Why is httpd running with -DNOHTTPACCEPT ? How 
 does this affect apache22's operation?

It tells Apache not to try to access the kernel HTTP Accept module. Unless you
load accf_http (and, optionally, accf_data), you'll get that parameter added to
Apache's command line.

For example, 

[EMAIL PROTECTED] [Sat Jul 14 00:16:08 2007]
~
$ kldstat
Id Refs AddressSize Name
 17 0xc040 6f6668   kernel
 21 0xc0af7000 2364 accf_http.ko
 31 0xc0afa000 3f7c vmxnet.ko
 41 0xc0afe000 59f20acpi.ko
 51 0xc2db8000 d000 ipfw.ko
 61 0xc3393000 2000 accf_data.ko

[EMAIL PROTECTED] [Sat Jul 14 00:16:10 2007]
~
$ ps xa | grep htt
 2367  ??  Ss 0:25.84 /usr/local/sbin/httpd -k start
 2369  ??  I  0:01.60 /usr/local/sbin/httpd -k start
 2370  ??  I  0:01.37 /usr/local/sbin/httpd -k start
 2371  ??  I  0:01.73 /usr/local/sbin/httpd -k start
 2372  ??  I  0:01.75 /usr/local/sbin/httpd -k start
 2373  ??  I  0:01.26 /usr/local/sbin/httpd -k start
 2374  ??  I  0:02.02 /usr/local/sbin/httpd -k start
 2387  ??  I  0:01.74 /usr/local/sbin/httpd -k start
 2388  ??  I  0:02.02 /usr/local/sbin/httpd -k start
10235  ??  I  0:01.34 /usr/local/sbin/httpd -k start
33166  p0  S+ 0:00.01 grep htt
 1291  p2  I+ 0:00.01 tail -f /var/log/httpd-projects-error_log

For more info, see the following man pages

$ apropos accf
accf_data(9) - buffer incoming connections until data arrives
accf_http(9) - buffer incoming connections until a certain complete 
HTTP requests arrive

_
{Beto|Norberto|Numard} Meijome

Those who do not remember the past are condemned to repeat it.
   George Santayana

I speak for myself, not my employer. Contents may be hot. Slippery when wet.
Reading disclaimers makes you go blind. Writing them is worse. You have been
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Dual boot FreeBSD(6.2) / Current ?

2007-07-13 Thread Patrick Lamaiziere
Hello,

How to make a dual boot with Stable and Current ? The FreeBSD loader
always uses the bsd partition 'a' to load the kernel. So i always boot
6.2.

My main boot loader is Gag.

Thanks in advance, regards.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Transparent email proxy

2007-07-13 Thread Paul procacci

Paul procacci wrote:

Olivier Nicole wrote:

Hi,

As an ISP, or the person in charge of a large organisation, have you
ever set-up a transparent email redirection: all outgoing email would
be proceeded to an outgoing server in order to check for virus, spam,
whatever.

Best regards,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


  
The answer to your question is yes.  To elaborate a bit more however 
here is a personal document I wrote (i.e. wasn't intended for anyone 
else), hopefully it provides you with good enough information and/or 
the information you were looking for.  Mind you, this is BSD and qmail 
(yes, I'm a fanboy) specific.  This assumes you are familiar with the 
software I decided to use under the components heading.  Certainly 
feel free to ask any questions.  I realize the document isn't 
production quality due to the reasons given about, but rest assured 
I can vouche for this method.


Additionally note, this is obviously not the only method.just that 
it's my method.;P  Cheers!


~Paul

--

I have 5 machines behind a load balancer, one of which is FBSD 4.11, 
and the other 4 are FBSD 6.2.  The component list I used is as follows:


Components

tcpserver
daemontools
qmail w/ QMAILQUEUE patch
qmail-qfilter
spamassassin
*custom c scripts  (These are optional; one is provided)


Flow

This is the current flow of any emails that reach the cluster. Note 
the items listed within *'s are custom programs and explained later in 
this document:


tcpserver-qmail-smtpd-qmail-qfilter-spamc-*reject_spam*-qmail-queue-qmail-remote 



**Note :: reject_spam is included because that is needed for denying 
emails.  (You could rewrite it in perl or sh if you needed to)


Installation

The installation for any new and existing proxy boxes is extremely 
straightforward.


For all but qmail listed above, use the ports tree.

Setup spamd to create the /tmp/.spamd.sock socket.  That's what I call 
mine, yours can/will vary.


Once all this is installed, create /etc/tcp.smtp with the following 
entry and build the cdb file:

:+RELAYCLIENT=+QMAILQUEUE=/var/qmail/bin/qmail-queue-spam

Ensure tcpserver uses that file(i.e. -x)

While in /usr/ports/qmail.

 a) upload the attached files (patch-qmail.c and patch-Makefile) into 
./files/


 b) edit patch-qmail.c to reflect a message you would like to give.
   '+case 20: return DAnti-SPAM Threshold Reached see 
http://domain.com/legal_information.aspx;;'


 c) type: make extract

 d) type: make patch

 e)  copy the attached file (reject-spam.c) to ./work/qmail*/

 f) Now, I haven't included some of my patches here do to sensative 
information.  Therefore, you'll need to edit the Makefile 
(work/qmail-*/Makefile) to removed any and all references to 
check_block and reject-record-spam.


 g) type: make install

 h) copy reject-spam to /var/qmail/bin

  i) Copy the  attached shell script (qmail-queue-spam) to 
/var/qmail/bin/; that is going to tie this together.


Please note that it's NECESSARY to use the local software FW to allow 
relaying.  IPFW is a good choice (my preference anyways).  Deny 
everything to port 25, and  only allow the hosts you want.  I found 
this to be the easiest.

 Then on those hosts, smarthost the hidden (not really) machine.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



My attached c file got stripped.  Here is it.

reject-spam.c
---
#include stralloc.h
#include substdio.h
#include readwrite.h
#include getln.h
#include str.h

stralloc s = {0};
substdio i = {0};
substdio o = {0};

char ibuf[1024];
char obuf[1024];

int main(void){

   int match;

   substdio_fdbuf(i,read,0,ibuf,sizeof(ibuf));
   substdio_fdbuf(o,write,1,obuf,sizeof(obuf));

   for(;;){
   if(getln(i,s,match,'\n') == -1) _exit(81);
   if(!match || s.len == 1) break;
   if(!str_diffn(X-Spam-Flag: YES\n, s.s, s.len)) _exit(20);
   substdio_put(o,s.s,s.len);
   }

   substdio_put(o,s.s,s.len);
   substdio_copy(o,i);
   substdio_flush(o);
   _exit(0);
}


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Transparent email proxy

2007-07-13 Thread Paul procacci

Olivier Nicole wrote:

Hi,

As an ISP, or the person in charge of a large organisation, have you
ever set-up a transparent email redirection: all outgoing email would
be proceeded to an outgoing server in order to check for virus, spam,
whatever.

Best regards,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

  
The answer to your question is yes.  To elaborate a bit more however 
here is a personal document I wrote (i.e. wasn't intended for anyone 
else), hopefully it provides you with good enough information and/or the 
information you were looking for.  Mind you, this is BSD and qmail (yes, 
I'm a fanboy) specific.  This assumes you are familiar with the software 
I decided to use under the components heading.  Certainly feel free to 
ask any questions.  I realize the document isn't production quality 
due to the reasons given about, but rest assured I can vouche for this 
method.


Additionally note, this is obviously not the only method.just that 
it's my method.;P  Cheers!


~Paul

--

I have 5 machines behind a load balancer, one of which is FBSD 4.11, and 
the other 4 are FBSD 6.2.  The component list I used is as follows:


Components

tcpserver
daemontools
qmail w/ QMAILQUEUE patch
qmail-qfilter
spamassassin
*custom c scripts  (These are optional; one is provided)


Flow

This is the current flow of any emails that reach the cluster. Note the 
items listed within *'s are custom programs and explained later in this 
document:


tcpserver-qmail-smtpd-qmail-qfilter-spamc-*reject_spam*-qmail-queue-qmail-remote 



**Note :: reject_spam is included because that is needed for denying 
emails.  (You could rewrite it in perl or sh if you needed to)


Installation

The installation for any new and existing proxy boxes is extremely 
straightforward.


For all but qmail listed above, use the ports tree.

Setup spamd to create the /tmp/.spamd.sock socket.  That's what I call 
mine, yours can/will vary.


Once all this is installed, create /etc/tcp.smtp with the following 
entry and build the cdb file:

:+RELAYCLIENT=+QMAILQUEUE=/var/qmail/bin/qmail-queue-spam

Ensure tcpserver uses that file(i.e. -x)

While in /usr/ports/qmail.

 a) upload the attached files (patch-qmail.c and patch-Makefile) into 
./files/


 b) edit patch-qmail.c to reflect a message you would like to give.
   '+case 20: return DAnti-SPAM Threshold Reached see 
http://domain.com/legal_information.aspx;;'


 c) type: make extract

 d) type: make patch

 e)  copy the attached file (reject-spam.c) to ./work/qmail*/

 f) Now, I haven't included some of my patches here do to sensative 
information.  Therefore, you'll need to edit the Makefile 
(work/qmail-*/Makefile) to removed any and all references to check_block 
and reject-record-spam.


 g) type: make install

 h) copy reject-spam to /var/qmail/bin

  i) Copy the  attached shell script (qmail-queue-spam) to 
/var/qmail/bin/; that is going to tie this together.


Please note that it's NECESSARY to use the local software FW to allow 
relaying.  IPFW is a good choice (my preference anyways).  Deny 
everything to port 25, and  only allow the hosts you want.  I found this 
to be the easiest.

 Then on those hosts, smarthost the hidden (not really) machine.
--- Makefile.orig   Thu Dec 14 16:23:19 2006
+++ MakefileThu Dec 14 16:25:12 2006
@@ -157,6 +157,37 @@
 binm2
chmod 755 binm2
 
+check_block: \
+load check_block.o alloc.a error.a stralloc.a substdio.a control.o env.a 
open.a \
+getln.a fs.a str.a
+   ./load check_block control.o stralloc.a substdio.a alloc.a \
+   error.a env.a str.a open.a getln.a fs.a str.a -L/usr/local/lib/mysql 
-lmysqlclient
+
+check_block.o: \
+compile check_block.c stralloc.h substdio.h readwrite.h str.h
+   ./compile check_block.c -I/usr/local/include
+
+reject-record-spam: \
+load reject-record-spam.o slurpclose.o alloc.a str.a error.a stralloc.a 
getln.a \
+substdio.a control.o env.a fs.a
+   ./load reject-record-spam control.o slurpclose.o getln.a stralloc.a 
substdio.a alloc.a \
+   error.a env.a str.a fs.a open.a -L/usr/local/lib/mysql -lmysqlclient
+
+
+reject-record-spam.o: \
+compile reject-record-spam.c stralloc.h substdio.h readwrite.h getln.h str.h 
scan.h fmt.h
+   ./compile reject-record-spam.c -I/usr/local/include
+
+reject-spam: \
+load reject-spam.o alloc.a str.a error.a stralloc.a getln.a \
+substdio.a
+   ./load reject-spam getln.a stralloc.a substdio.a str.a alloc.a \
+   error.a
+
+reject-spam.o: \
+compile reject-spam.c stralloc.h substdio.h readwrite.h getln.h str.h
+   ./compile reject-spam.c
+
 binm2+df: \
 binm2+df.sh conf-qmail
cat binm2+df.sh \
@@ -808,7 +839,7 @@
 forward preline condredirect bouncesaying except maildirmake \
 maildir2mbox maildirwatch 

USB disk cryptographied with GELI and fsck

2007-07-13 Thread DSA - JCR
HI all again

FreeBSD 6.2 i386

I have a problem with an USB disk that I cryptographied with GELI.
It says that I must run fsck when I try to mount it.

I used the command

cat key1 key2 | geli -k - attach /dev/da1

when I try to mount it

mount /dev/da1.eli /usb2

I get an error saying that I need to run fsck in the disk.

Ok, How can I run fsck in this USB GELI disk?

i have used after attached the GELI disk as before

fsck /dev/da1.eli

and also

fsck -t geli /dev/da1.eli

and always I get the same

fsck doesn't recognaize the filessytem in the disk


what must I do?

Must I erase the disk and begin again?
I think that must be a fsck for GELI disk crypto or not.





Thanks in advance

Sincerely

Juan Coruña
Desarrollo de Software Atlantico



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to start apache22 without ssl

2007-07-13 Thread pj

Norberto Meijome wrote:

On Wed, 11 Jul 2007 22:35:35 -0400
pj [EMAIL PROTECTED] wrote:


Apache22 from ports doesn't use SSL by default. Check your httpd.conf
file and make sure the LoadModule for ssl_module line is commented
out.
  
The latest 2.2.4 does by default. The first thing I had done was to 
comment out the ssl_module. But that did not change anything.


can you please show :
- the output of 
pkg_info | grep apache

- which file you changed
- what line/s you changed
- what did you do after you changed the config
- how are you determining that 'nothing has changed'

thx

_
{Beto|Norberto|Numard} Meijome

Quantum Logic Chicken:
  The chicken is distributed probabalistically on all sides of the
  road until you observe it on the side of your course.

I speak for myself, not my employer. Contents may be hot. Slippery when wet. 
Reading disclaimers makes you go blind. Writing them is worse. You have been 
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Thank you for the response.
The problem was one of my ignorance of Webmin using its own server 
running in ssl mode. I had assumed it was apache.
I now understand that apache2.2.4 is compiled with ssl but does not use 
ssl unless it is set up with certificates and, I believe, OpenSSL. That 
said, I did reinstall the port and now everything seems to be working fine.
My only question now is: Why is httpd running with -DNOHTTPACCEPT ? How 
does this affect apache22's operation?

Thanks in adavance,
Phil
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


KDE problem after update

2007-07-13 Thread Albert Shih
Hi all

I'm not really use kde as window mamanger but I use kpdf (very good
application). 

After update (kde 3.5.7) I can use kpdf because he tell me something like 

Could not find mime type application/octet-stream

No mime types installed.

when I type

kpdf file.pdf

and after that when kpdf is open (not my file.pdf) and I'm going to
OpenFile I've got 

Malformed URL
file:///home/me

and in the file browser I can see any file. In the Filter I've mime,mime

Any solution ?

Regards.



NB: I've do what is in /usr/src/UPDATING and activate hald etc...



--
Albert SHIH
Observatoire de Paris Meudon
SIO batiment 15
Téléphone : 01 45 07 76 26
Heure local/Local time:
Ven 13 jul 2007 17:15:27 CEST
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: USB disk cryptographied with GELI and fsck

2007-07-13 Thread Fabian Keil
DSA - JCR [EMAIL PROTECTED] wrote:

 I have a problem with an USB disk that I cryptographied with GELI.
 It says that I must run fsck when I try to mount it.
 
 I used the command
 
 cat key1 key2 | geli -k - attach /dev/da1
 
 when I try to mount it
 
 mount /dev/da1.eli /usb2
 
 I get an error saying that I need to run fsck in the disk.
 
 Ok, How can I run fsck in this USB GELI disk?
 
 i have used after attached the GELI disk as before
 
 fsck /dev/da1.eli
 
 and also
 
 fsck -t geli /dev/da1.eli
 
 and always I get the same
 
 fsck doesn't recognaize the filessytem in the disk
 
 
 what must I do?

Use fsck_ffs (or specify ffs with fsck's -t option).

Fabian 


signature.asc
Description: PGP signature


Re: USB disk cryptographied with GELI and fsck

2007-07-13 Thread RW
On Fri, 13 Jul 2007 14:16:25 - (GMT)
DSA - JCR [EMAIL PROTECTED] wrote:

 HI all again
 
 FreeBSD 6.2 i386
 
 I have a problem with an USB disk that I cryptographied with GELI.
 It says that I must run fsck when I try to mount it.
 
 I used the command
 
 cat key1 key2 | geli -k - attach /dev/da1
 
 when I try to mount it
 
 mount /dev/da1.eli /usb2
 
 I get an error saying that I need to run fsck in the disk.
 
 Ok, How can I run fsck in this USB GELI disk?
 
 i have used after attached the GELI disk as before
 
 fsck /dev/da1.eli
 
 and also
 
 fsck -t geli /dev/da1.eli
 
 and always I get the same
 
 fsck doesn't recognaize the filessytem in the disk

You need to specify a filesystem, geli is not a filesystem.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: KDE problem after update

2007-07-13 Thread RW
On Fri, 13 Jul 2007 17:18:43 +0200
Albert Shih [EMAIL PROTECTED] wrote:

 Hi all
 
 I'm not really use kde as window mamanger but I use kpdf (very good
 application). 
 
 After update (kde 3.5.7) I can use kpdf because he tell me something
 like 
 
   Could not find mime type application/octet-stream

I saw this kind of thing temporarily during the last KDE upgrade.
Did you bring all your ports up to date? Have you tried restarting your
desktop session, or rebooting?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Garbled text in xterm

2007-07-13 Thread Michael Gass

Just installed Xorg 7.2 on an old 486DX cpu machine (Compaq ProLinea)
running FreeBSD (Just to do it!).   Only an old vga card.

I can run the server and startx brings up twm, but I have garbled text
in the xterm; that is, the wrong letters and symbols come up when xterm
opens and when I type (text in the menubar is OK).  I have made many 
alterations to xorg.conf and checked a number of faqs, but have found 
nothing that corrects the problem.  I am out of ideas.

Any suggestions as to what the problem is and what I might try?

Below are my current xorg.conf and a recent log file.

Thanks,

Mike Gass

-xorg.conf---

Section ServerLayout
Identifier Layout0
Screen  0  Screen0 0 0
InputDeviceKeyboard0 CoreKeyboard
InputDeviceMouse0 CorePointer
EndSection

Section Files
EndSection

Section Module
Load  freetype
# Load xtt
Load  extmod
# Load  dri
Load  glx
Load  dbe
Load  record
Load  xtrap
Load  type1
EndSection

Section InputDevice
Identifier  Mouse0
Driver  mouse
Option  Protocol Auto
Option  Device /dev/sysmouse
EndSection

Section InputDevice
Identifier  Keyboard0
Driver  kbd
Option  XkbModel pc104
Option  XkbLayout us
EndSection

Section Monitor
Identifier   Monitor0
 ### Comment all HorizSync and VertRefresh values to use DDC:
HorizSync31.5 - 57.0
VertRefresh  50.0 - 90.0
EndSection

Section Device
Identifier  Card0
Driver  vga
Card* Generic VGA compatible
EndSection

Section Screen
Identifier Screen0
Device Card0
MonitorMonitor0
DefaultDepth 4
SubSection Display
Viewport   0 0
Depth 4
Modes1024x768 800x600
EndSubSection
EndSection

-Xorg.0.log

_XSERVTransSocketOpenCOTSServer: Unable to open socket for inet6
_XSERVTransOpen: transport open failed for inet6/prolin.home.net:0
_XSERVTransMakeAllCOTSServerListeners: failed to open listener for inet6

X Window System Version 7.2.0
Release Date: 22 January 2007
X Protocol Version 11, Revision 0, Release 7.2
Build Operating System: FreeBSD 6.2-STABLE i386 
Current Operating System: FreeBSD prolin.home.net 6.2-RELEASE FreeBSD 
6.2-RELEASE #0: Tue Jun 26 17:36:41 CDT 2007 [EMAIL 
PROTECTED]:/usr/obj/usr/src/sys/PROLIN070626 i386
Build Date: 11 June 2007
Before reporting problems, check http://wiki.x.org
to make sure that you have the latest version.
Module Loader present
Markers: (--) probed, (**) from config file, (==) default setting,
(++) from command line, (!!) notice, (II) informational,
(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
(==) Log file: /var/log/Xorg.0.log, Time: Thu Jul 12 10:43:19 2007
(==) Using config file: /etc/X11/xorg.conf
(==) ServerLayout Layout0
(**) |--Screen Screen0 (0)
(**) |   |--Monitor Monitor0
(**) |   |--Device Card0
(**) |--Input Device Keyboard0
(**) |--Input Device Mouse0
(==) FontPath set to:
/usr/local/lib/X11/fonts/misc/,
/usr/local/lib/X11/fonts/TTF/,
/usr/local/lib/X11/fonts/OTF,
/usr/local/lib/X11/fonts/Type1/,
/usr/local/lib/X11/fonts/100dpi/,
/usr/local/lib/X11/fonts/75dpi/
(==) RgbPath set to /usr/local/share/X11/rgb
(==) ModulePath set to /usr/local/lib/xorg/modules
(II) Loader magic: 0x819e340
(II) Module ABI versions:
X.Org ANSI C Emulation: 0.3
X.Org Video Driver: 1.1
X.Org XInput driver : 0.7
X.Org Server Extension : 0.3
X.Org Font Renderer : 0.5
(II) Loader running on freebsd
(II) LoadModule: pcidata
(II) Loading /usr/local/lib/xorg/modules//libpcidata.so
(II) Module pcidata: vendor=X.Org Foundation
compiled for 7.2.0, module version = 1.0.0
ABI class: X.Org Video Driver, version 1.1
(--) Using syscons driver with X support (version 2.0)
(--) using VT number 9

(II) PCI: Probing config type using method 1
(II) PCI: Standard check for type 1 failed.
(II) PCI: stages = 0x00, oldVal1 = 0x,
mode1Res1 = 0x, mode1Res2 = 0x
(II) PCI: No PCI bus found or probed for
(II) Addressable bus resource ranges are
[0] -1  0   0x - 0x (0x0) MX[B]
[1] -1  0   0x - 0x (0x1) IX[B]
(II) OS-reported resource ranges:
[0] -1  0   0x0010 - 0x3fff (0x3ff0) MX[B]E(B)
[1] -1  0   0x000f - 0x000f (0x1) MX[B]
[2] -1  0   0x000c - 0x000e (0x3) MX[B]
[3] -1  0   0x - 0x0009 (0xa) MX[B]
[4] -1  0   0x - 0x (0x1) IX[B]
[5] -1  0   0x - 0x00ff (0x100) IX[B]
(II) OS-reported resource ranges after removing 

Re: Transparent email proxy

2007-07-13 Thread Bart Silverstrim

Olivier Nicole wrote:

Hi,

As an ISP, or the person in charge of a large organisation, have you
ever set-up a transparent email redirection: all outgoing email would
be proceeded to an outgoing server in order to check for virus, spam,
whatever.


Incoming mail, yes.  Outgoing, no, I haven't.

But I thought only a few kinds of bots are using your user's email 
server settings...aren't most still direct sending from the user's 
system (turning zombies into the mail relay, not having the zombies 
flood the provider's mail server?)


The only way to stop the former that I know of is to have your routers 
only allow port 25 traffic outbound from your legit mail server only and 
all others are blocked.  You might also want to set up a way to have it 
report attempts to send mail out from your clients so you can see how 
many of your users may be infected with something.


You'd then need to probably set up your UNIX system to accept email and 
scan it before forwarding it on.  It should be relatively easy using 
Postfix and Amavisd-new (Amavis can be tied to clamav and Spamassassin). 
 I am trying to figure out a new incoming bastion mail server scheme 
now...but our original does something like this for incoming mail now.


-Bart
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Dual boot FreeBSD(6.2) / Current ?

2007-07-13 Thread Andrey Shuvikov

On 7/13/07, CyberLeo Kitsana [EMAIL PROTECTED] wrote:

Patrick Lamaiziere wrote:
 Hello,

 How to make a dual boot with Stable and Current ? The FreeBSD loader
 always uses the bsd partition 'a' to load the kernel. So i always boot
 6.2.

 My main boot loader is Gag.


Perhaps install the depeendant filesystems (/, /var, /usr) for the two
versions each in their own slices, and share independant filesystems
(/tmp, /home) from a third slice?

--
Fuzzy love,
-CyberLeo
Technical Administrator
CyberLeo.Net Webhosting
http://www.CyberLeo.Net
[EMAIL PROTECTED]

Furry Peace! - http://.fur.com/peace/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



When I tried to dual-boot FreeBSD and PC-BSD I noticed that FreeBSD
loader always loads the first A5 slice it can find. I used GRUB to
change the type of the slice I didn't need to something else (for
example, A6, unless you have OpenBSD installed :-)). If Gag can do it
too, it could help.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: www/linux-flashplayer7 - now works with SOUND on youtube

2007-07-13 Thread Jamie Jones
 That's not true :) 

   http://lists.freebsd.org/pipermail/freebsd-questions/2007-June/150745.html

 (YouTube is explicitly mentioned.) Please follow this mini how-to
 carefully. YouTube works, actually I still can't find any flash=7 site
 that doesn't work. YouTube works _of_course_ means that sound works
 too.

Eeek! I missed that! Sorry - I read it again too, and still manages to miss it!

 I've been using YouTube 4 months now. Nothing changed in meantime.

 Please report if this works for you. We can surely help you to get
 flash7/nativebrowsers working if you experience problems.

Oh well, as I said, it now works for me anyway.. I used to have regular
problems with myspace and google video, but they appear to work now too (!!)

Ho hum!

cheers,
Jamie

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Finally Converting From Bind 8 - Bind 9

2007-07-13 Thread Tim Daneliuk

Josh Paetzel wrote:

On Monday 02 July 2007 16:48, Tim Daneliuk wrote:

I am (ever so) slowly moving my domain from FBSD 4.x to 6.2.  I am now
at the point where I need to convert my Bind 8 configuration to Bind 9.
In so doing, I like to finally separate my internal (non-routable) hosts
so that their names never resolve outside the private network, and
expose only the public facing hosts to the world via DNS.  I'd also
like to (finally) associate names with dhcpd-provided addresses
so both forwards  reverses work inside the private network.

Could some kind soul please point me to a good HOWTO on this migration and
reconfiguration?  I am DAGSing as I write this, but so far have not
found what I want.

TIA,


The first part of what you want is easy. 
In named.conf you'll have something like...


acl private-hosts { 192.168.1.0/24; 192.168.2.0/24; };

view internal {
match-clients { private-hosts; };
zone example.org {
type master;
file master/db.internal.example.org;
};
};

view external {
match-clients { any; };
zone example.org {
type master;
file master/db.example.org;
};
};

Now you have two separate zonefiles, one which is consulted when someone from 
192.168.1.0/24 or 192.168.2.0/24 makes a query and one that is consulted when 
anyone else makes a query.


HTH



OK - that works great ... but there is one efficiency I'd like to
achieve that I'm not quite sure how implement.   At the moment,
both db.internal and db.external contain common public host information
because I want those hosts visible to both communities.  This means I
have to make changes in two places when an public host entry is modified.

I tried removing the public information from the db.internal file with
the hope that an internal client requesting public host info would have
the request satisfied automatically from db.external - this didn't work,
the public hosts just disappeared from the internal view altogether.
This raises two questions:

1) Is there a way to configure BIND9 so that internal client requests
   are first serviced out of db.internal, but if the lookup fails the
   server will then go look at db.external?

2) Better still is there some sort of include mechanism where I could
   keep a flat file of public host information for use by db.external,
   but include it into db.internal.

Either of these would satisfy my desire to only have to edit a single file
of public host information.

TIA,
--

Tim Daneliuk [EMAIL PROTECTED]
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Transfering a File From One Server To Another

2007-07-13 Thread Pat Singer
Thanks for everyone's answers, however nc didn't work because it doesn't 
accomodate authentication, and scp failed as well (although it looked like it 
succeeded). I will assume it's due to the screwy problems on the sick server.
  Pat

Steve Bertrand [EMAIL PROTECTED] wrote:
  Pat Singer wrote:
 Hi;
 I have a server that's screwed up. I'm building out another server now. I 
 need to transfer a 1/2G file from the old one. FTP doesn't work. I tried this:
 wget http://203.223.111.11/path/to/file
 It connected to the machine but threw a 404. Ideas?

# scp file.name [EMAIL PROTECTED]:/home/username

Should do it for you.

Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


   
-
Pinpoint customers who are looking for what you sell. 
   
-
Ready for the edge of your seat? Check out tonight's top picks on Yahoo! TV. 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


cron job every 5 hours

2007-07-13 Thread Dave

Hello,
   I want to run an updater script, every 5 hours and x minutes. I thought 
to use:


minute 5 * * * root path/to/scriptname

but that looks like it only works once a day, i want it to go every 5 hours 
not justa at 5 in the monrning.

Thanks.
Dave.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ssh-copy-id

2007-07-13 Thread Pollywog
Since FreeBSD does not have ssh-copy-id as part of the OpenSSH package, what 
is the best way to copy a public key to an account on another host?  Some 
Linuxes (Debian and Ubuntu) have a ssh-copy-id script for this in their 
OpenSSH packages.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Finally Converting From Bind 8 - Bind 9

2007-07-13 Thread Alex Zbyslaw

Tim Daneliuk wrote:


2) Better still is there some sort of include mechanism where I could
   keep a flat file of public host information for use by db.external,
   but include it into db.internal.


I don't think there is, but let someone who uses bind more than I do 
give a definitive on that :-)


What you *can* do, irrespective of bind version, is to have two files 
which you pre-process with m4, and have a third file which m4 includes 
on both the others.


So you start with:

   internal.M4 which includes shared
   external.M4 which also includes shared
   shared which gets included in the other two.

Then m4 internal.M4  internal and m4 external.M4 - external.

Bind then loads internal and external.

Alternatively you could start with one M4 file which uses lots of ifdefs 
for the non-shared portions.  The create internal and external by 
specifying different definitions to m4.  e.g. m4 -D _TYPE=EXTERNAL or m4 
-D _TYPE=INTERNAL.


For a problem with small differences between two files, this is a better 
solution, but not what I'd do in this case.


Whole process can be easily controlled with a Makefile (including any 
restarts).


--Alex


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cron job every 5 hours

2007-07-13 Thread Duane Hill

On Fri, 13 Jul 2007 at 12:50 -0400, [EMAIL PROTECTED] confabulated:


Hello,
  I want to run an updater script, every 5 hours and x minutes. I thought to 
use:


minute 5 * * * root path/to/scriptname


crontab(5):
  ...
  Steps are also permitted after an asterisk, so if you want to say
  ``every two hours'', just use ``*/2''.
  ...

So, my guess would be:

minute */5 * * * root path/to/scriptname

but that looks like it only works once a day, i want it to go every 5 hours 
not justa at 5 in the monrning.

Thanks.
Dave.


-
 _|_
(_| |
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


The Complete FreeBSD: errata and addenda

2007-07-13 Thread Greg Lehey
The trouble with books is that you can't update them the way you can a web page
or any other online documentation.  The result is that most leading edge
computer books are out of date almost before they are printed.  Unfortunately,
The Complete FreeBSD, published by O'Reilly, is no exception.  Inevitably, a
number of bugs and changes have surfaced.

The Complete FreeBSD has been through a total of five editions, including its
predecessor Installing and Running FreeBSD.  Two of these have been reprinted
with corrections.  I maintain a series of errata pages.  Start at
http://www.lemis.com/errata-4.html to find out how to get the errata
information.

Note also that the book has now been released for free download in PDF
form.  Instead of downloading the changed pages, you may prefer to
download the entire book.  See http://www.lemis.com/grog/Documentation/CFBSD/ 
for more information.

Have you found a problem with the book, or maybe something confusing?
Please let me know: I'm no longer constantly updating it, but I may be
able to help

Greg
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


port installation problem

2007-07-13 Thread pj
When trying to install CUPS and also when installing Gnome-light, I get 
the same error messsage, really, the exact same:


===   cups-1.2.10_1 depends on executable: espgs - not found
===Verifying install for espgs in /usr/ports/print/cups-pstoraster
===  Installing for cups-pstoraster-8.15.4_1
===   cups-pstoraster-8.15.4_1 depends on executable: gs - not found
===Verifying install for gs in /usr/ports/print/ghostscript-gpl
===  Building for ghostscript-gpl-8.57
 in pre-build ...
   creating directories for compilation ...
   building EPAG utility ...
gmake: `ert' is up to date.
   creating symlinks for EPAG ...
./obj/echogs -w ./obj/ldt.tr -n - cc -pthread -L/usr/local/lib -o ./bin/gs
./obj/echogs -a ./obj/ldt.tr -n -s ./obj/gs.o -s
cat ./obj/ld.tr ./obj/ldt.tr
./obj/echogs -a ./obj/ldt.tr -s -  -lm
if [ x != x ]; then LD_RUN_PATH=; export LD_RUN_PATH; fi; \
XCFLAGS= XINCLUDE= XLDFLAGS= XLIBDIRS= XLIBS= \
FEATURE_DEVS= DEVICE_DEVS= DEVICE_DEVS1= DEVICE_DEVS2= DEVICE_DEVS3= \
DEVICE_DEVS4= DEVICE_DEVS5= DEVICE_DEVS6= DEVICE_DEVS7= DEVICE_DEVS8= \
DEVICE_DEVS9= DEVICE_DEVS10= DEVICE_DEVS11= DEVICE_DEVS12= \
DEVICE_DEVS13= DEVICE_DEVS14= DEVICE_DEVS15= DEVICE_DEVS16= \
DEVICE_DEVS17= DEVICE_DEVS18= DEVICE_DEVS19= DEVICE_DEVS20= \
DEVICE_DEVS_EXTRA= \
/bin/sh ./obj/ldt.tr
*** Error code 2
Stop in /usr/ports/print/ghostscript-gpl.
*** Error code 1
Stop in /usr/ports/print/cups-pstoraster.
*** Error code 1
Stop in /usr/ports/print/cups.


I tried portsnap fetch; portsnap extract and then make install clean but 
that only gave me more errors in the CUPS build.


What is going on here? Any ideas?
Thanks in advance,
Phil
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ssh-copy-id

2007-07-13 Thread Jonathan Horne
On Friday 13 July 2007 11:51:12 Pollywog wrote:
 Since FreeBSD does not have ssh-copy-id as part of the OpenSSH package,
 what is the best way to copy a public key to an account on another host? 
 Some Linuxes (Debian and Ubuntu) have a ssh-copy-id script for this in
 their OpenSSH packages.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

i just scp the id file to my homedir on the destination computer.  then i:

cat id_rsa.pub  .ssh/authorized_keys2

hth,
-- 
Jonathan Horne
http://dfwlpiki.dfwlp.org
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread Chuck Swiger

On Jul 12, 2007, at 10:09 PM, vuthecuong wrote:

I just confirm only:

I'm using dynamicDNS, so I will able to specify the forward *AND*  
reverse lookups?


No.  Reverse lookups are controlled by whoever owns the IP delegation  
for the netblock in question, and they are not going to configure PTR  
records for dynamic IPs.  If you want to have reverse lookups you  
control, you'll need to get static IPs.


--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Problem with Broadcom 5704 B1 on amd64 6.2 release

2007-07-13 Thread James Shank

Greetings,

I've run into a problem with the onboard Broadcom 5704 NetXtreme nics
on a Tyan S2891 Thunder K8SRE motherboard.

Here is the relevant dmesg output to show the error:

pcib5: ACPI PCI-PCI bridge at device 11.0 on pci8
pci10: ACPI PCI bus on pcib5
pcib5: memory: end (de1f)  start (48739b2de10)
pcib5: memory: end (de1f)  start (dbca73fdde11)
bge0: Broadcom BCM5704 B0, ASIC rev. 0x2100 mem
0x48739b2de10-0x48739b2de10 irq 28 at device 9.0 on pci10
pcib5: memory: end (de1f)  start (48739b2de10)
bge0: couldn't map memory
device_attach: bge0 attach returned 6
bge1: Broadcom BCM5704 B0, ASIC rev. 0x2100 mem
0xdbca73fdde11-0xdbca73fdde11 irq 29 at device 9.1 on pci10
pcib5: memory: end (de1f)  start (dbca73fdde11)
bge1: couldn't map memory
device_attach: bge1 attach returned 6

It appears to me that the problem might be due to using a 32-bit int
for end addresses where it looks like the start address uses 64-bit
int.

Any input on how to proceed would be greatly appreciated.

I've also attached full dmesg output as well as pciconf -l -v output.

Thanks!

-James


dmesg.out
Description: Binary data


pciconf.out
Description: Binary data
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Ports Clean

2007-07-13 Thread Grant Peel
Hi all,

My ports collection on some of the servers is wasting alot of space.

What would be the best method to 'cleanout' the ports dir without adversly 
affecting the operation of the rest of the server? 

All of the servers are live production servers.

-Grant
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread Chuck Swiger

On Jul 12, 2007, at 10:36 PM, Olivier Nicole wrote:

I'm using dynamicDNS, so I will able to specify the forward *AND*
reverse lookups?


Yes.


No, nobody else is going to see the results your local nameserver  
sends since it isn't authoritative for the domains, and the  
delegation for the IP block isn't going to point to your server but  
to the actual nameserver.  Take a look at what happens when someone  
using an external nameserver does the same queries:



Forward DNS lookup: (alrw17.desktops.cs.ait.ac.th is dynamic DNS)

banyanon57: dig alrw17.desktops.cs.ait.ac.th

;  DiG 9.3.1  alrw17.desktops.cs.ait.ac.th
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 15772
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1,  
ADDITIONAL: 1


;; QUESTION SECTION:
;alrw17.desktops.cs.ait.ac.th.  IN  A

;; ANSWER SECTION:
alrw17.desktops.cs.ait.ac.th. 3600 IN   A   192.41.170.214

;; AUTHORITY SECTION:
desktops.cs.ait.ac.th.  43200   IN  NS  dns.cs.ait.ac.th.

;; ADDITIONAL SECTION:
dns.cs.ait.ac.th.   43200   IN  A   192.41.170.15

;; Query time: 1 msec
;; SERVER: 192.41.170.15#53(192.41.170.15)
;; WHEN: Fri Jul 13 12:35:23 2007
;; MSG SIZE  rcvd: 96



% dig alrw17.desktops.cs.ait.ac.th

;  DiG 9.3.4  alrw17.desktops.cs.ait.ac.th
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NXDOMAIN, id: 30625
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;alrw17.desktops.cs.ait.ac.th.  IN  A

;; AUTHORITY SECTION:
desktops.cs.ait.ac.th.  10800   IN  SOA dns.cs.ait.ac.th.  
postmaster.cs.ait.ac.th. 2006139734 21600 1800 1209600 43200


;; Query time: 892 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Jul 13 13:09:14 2007
;; MSG SIZE  rcvd: 97

Notice the NXDOMAIN response...?


Reverse DNS lookup:

banyanon58: dig -x 192.41.170.214

;  DiG 9.3.1  -x 192.41.170.214
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 14984
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1,  
ADDITIONAL: 1


;; QUESTION SECTION:
;214.170.41.192.in-addr.arpa.   IN  PTR

;; ANSWER SECTION:
214.170.41.192.in-addr.arpa. 43200 IN   CNAME   214.170.41.192.rev- 
dns.cs.ait.ac

.th.
214.170.41.192.rev-dns.cs.ait.ac.th. 3600 IN PTR  
alrw17.desktops.cs.ait.ac.th.


;; AUTHORITY SECTION:
170.41.192.rev-dns.cs.ait.ac.th. 43200 IN NSdns.cs.ait.ac.th.

;; ADDITIONAL SECTION:
dns.cs.ait.ac.th.   43200   IN  A   192.41.170.15

;; Query time: 9 msec
;; SERVER: 192.41.170.15#53(192.41.170.15)
;; WHEN: Fri Jul 13 12:35:31 2007
;; MSG SIZE  rcvd: 158


% dig -x 192.41.170.214
;  DiG 9.3.4  -x 192.41.170.214
;; global options:  printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 53167
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;214.170.41.192.in-addr.arpa.   IN  PTR

;; ANSWER SECTION:
214.170.41.192.in-addr.arpa. 43200 IN   CNAME   214.170.41.192.rev- 
dns.cs.ait.ac.th.
214.170.41.192.rev-dns.cs.ait.ac.th. 3600 IN PTR  
VAIO.desktops.cs.ait.ac.th.


;; AUTHORITY SECTION:
170.41.192.rev-dns.cs.ait.ac.th. 43200 IN NSdns.cs.ait.ac.th.

;; Query time: 438 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Jul 13 13:09:49 2007
;; MSG SIZE  rcvd: 140

The answer everyone else gets, VAIO.desktops.cs.ait.ac.th, doesn't  
match alrw17.desktops.cs.ait.ac.th, so a double-reverse lookup check  
would fail.


--
-Chuck


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to start apache22 without ssl

2007-07-13 Thread pj

Norberto Meijome wrote:

On Fri, 13 Jul 2007 08:35:25 -0400
pj [EMAIL PROTECTED] wrote:

My only question now is: Why is httpd running with -DNOHTTPACCEPT ? How 
does this affect apache22's operation?


It tells Apache not to try to access the kernel HTTP Accept module. Unless you
load accf_http (and, optionally, accf_data), you'll get that parameter added to
Apache's command line.

For example, 


[EMAIL PROTECTED] [Sat Jul 14 00:16:08 2007]
~
$ kldstat
Id Refs AddressSize Name
 17 0xc040 6f6668   kernel
 21 0xc0af7000 2364 accf_http.ko
 31 0xc0afa000 3f7c vmxnet.ko
 41 0xc0afe000 59f20acpi.ko
 51 0xc2db8000 d000 ipfw.ko
 61 0xc3393000 2000 accf_data.ko

[EMAIL PROTECTED] [Sat Jul 14 00:16:10 2007]
~
$ ps xa | grep htt
 2367  ??  Ss 0:25.84 /usr/local/sbin/httpd -k start
 2369  ??  I  0:01.60 /usr/local/sbin/httpd -k start
 2370  ??  I  0:01.37 /usr/local/sbin/httpd -k start
 2371  ??  I  0:01.73 /usr/local/sbin/httpd -k start
 2372  ??  I  0:01.75 /usr/local/sbin/httpd -k start
 2373  ??  I  0:01.26 /usr/local/sbin/httpd -k start
 2374  ??  I  0:02.02 /usr/local/sbin/httpd -k start
 2387  ??  I  0:01.74 /usr/local/sbin/httpd -k start
 2388  ??  I  0:02.02 /usr/local/sbin/httpd -k start
10235  ??  I  0:01.34 /usr/local/sbin/httpd -k start
33166  p0  S+ 0:00.01 grep htt
 1291  p2  I+ 0:00.01 tail -f /var/log/httpd-projects-error_log

For more info, see the following man pages

$ apropos accf
accf_data(9) - buffer incoming connections until data arrives
accf_http(9) - buffer incoming connections until a certain complete 
HTTP requests arrive

_
{Beto|Norberto|Numard} Meijome

Those who do not remember the past are condemned to repeat it.
   George Santayana

I speak for myself, not my employer. Contents may be hot. Slippery when wet.
Reading disclaimers makes you go blind. Writing them is worse. You have been
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Somethings isn't quite right here.
It was suggested I load the accf_http from the /boot/loader.conf file. I 
did. So, now I removed the line from /boot/loader.conf; it is empty of 
any directives. I rebooted and accf_http.ko is no longer in the kernel - 
according to kldstat.


ps xa | grep htt gives

 /usr/local/sbin/httpd - DNOHTTPACCEPT

Something is fishy here... any thoughts?
Why me? I always seem to get these weird anomalies... :(
Phil
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Finally Converting From Bind 8 - Bind 9

2007-07-13 Thread Josh Paetzel
On Friday 13 July 2007, Tim Daneliuk wrote:
 Josh Paetzel wrote:
  On Monday 02 July 2007 16:48, Tim Daneliuk wrote:
  I am (ever so) slowly moving my domain from FBSD 4.x to 6.2.  I
  am now at the point where I need to convert my Bind 8
  configuration to Bind 9. In so doing, I like to finally separate
  my internal (non-routable) hosts so that their names never
  resolve outside the private network, and expose only the public
  facing hosts to the world via DNS.  I'd also like to (finally)
  associate names with dhcpd-provided addresses so both forwards 
  reverses work inside the private network.
 
  Could some kind soul please point me to a good HOWTO on this
  migration and reconfiguration?  I am DAGSing as I write this,
  but so far have not found what I want.
 
  TIA,
 
  The first part of what you want is easy.
  In named.conf you'll have something like...
 
  acl private-hosts { 192.168.1.0/24; 192.168.2.0/24; };
 
  view internal {
  match-clients { private-hosts; };
  zone example.org {
  type master;
  file master/db.internal.example.org;
  };
  };
 
  view external {
  match-clients { any; };
  zone example.org {
  type master;
  file master/db.example.org;
  };
  };
 
  Now you have two separate zonefiles, one which is consulted when
  someone from 192.168.1.0/24 or 192.168.2.0/24 makes a query and
  one that is consulted when anyone else makes a query.
 
  HTH

 OK - that works great ... but there is one efficiency I'd like to
 achieve that I'm not quite sure how implement.   At the moment,
 both db.internal and db.external contain common public host
 information because I want those hosts visible to both communities.
  This means I have to make changes in two places when an public
 host entry is modified.

 I tried removing the public information from the db.internal file
 with the hope that an internal client requesting public host info
 would have the request satisfied automatically from db.external -
 this didn't work, the public hosts just disappeared from the
 internal view altogether. This raises two questions:

 1) Is there a way to configure BIND9 so that internal client
 requests are first serviced out of db.internal, but if the lookup
 fails the server will then go look at db.external?

 2) Better still is there some sort of include mechanism where I
 could keep a flat file of public host information for use by
 db.external, but include it into db.internal.

 Either of these would satisfy my desire to only have to edit a
 single file of public host information.

 TIA,

Sure, you can $INCLUDE a file in to a zonefile. :)

-- 
Thanks,

Josh Paetzel


pgpLBopDKFtGx.pgp
Description: PGP signature


Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread Dan Casey
Chuck Swiger wrote:
 On Jul 12, 2007, at 10:09 PM, vuthecuong wrote:
 I just confirm only:

 I'm using dynamicDNS, so I will able to specify the forward *AND*
 reverse lookups?

 No.  Reverse lookups are controlled by whoever owns the IP delegation
 for the netblock in question, and they are not going to configure PTR
 records for dynamic IPs.  If you want to have reverse lookups you
 control, you'll need to get static IPs.

Slight correction.  To do what you want, you will need to get a static
ip.  Then you can request your isp (or whoever owns the ip block) to
setup the PTR record for you.

 *whois -a 192.41.170.214*

OrgName:Asia Pacific Network Information Centre
OrgID:  APNIC
Address:PO Box 2131
City:   Milton
StateProv:  QLD
PostalCode: 4064
Country:AU

ReferralServer: whois://whois.apnic.net

NetRange:   192.41.170.0 - 192.41.170.255
CIDR:   192.41.170.0/24
NetName:APNIC-ERX-192-41-170-0
NetHandle:  NET-192-41-170-0-1
Parent: NET-192-0-0-0-0
NetType:Early Registrations, Transferred to APNIC
Comment:This IP address range is not registered in the ARIN database.
Comment:This range was transferred to the APNIC Whois Database as
Comment:part of the ERX (Early Registration Transfer) project.
Comment:For details, refer to the APNIC Whois Database via
Comment:WHOIS.APNIC.NET or http://www.apnic.net/apnic-bin/whois2.pl
Comment:** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment:for the Asia Pacific region.  APNIC does not operate networks
Comment:using this IP address range and is not able to investigate
Comment:spam or abuse reports relating to these addresses.  For more
Comment:help, refer to http://www.apnic.net/info/faq/abuse
RegDate:2005-01-31
Updated:2005-01-31

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3100
OrgTechEmail:  [EMAIL PROTECTED]

# ARIN WHOIS database, last updated 2007-07-12 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

 *whois -h WHOIS.APNIC.NET 192.41.170.214*
% [whois.apnic.net node-1]
% Whois data copyright termshttp://www.apnic.net/db/dbcopyright.html

inetnum:  192.41.170.0 - 192.41.170.255
netname:  AIT-CS-NET
descr:imported inetnum object for AIT-4
country:  TH
admin-c:  KK705-AP
tech-c:   KK705-AP
status:   ASSIGNED PORTABLE
remarks:  --
remarks:  imported from ARIN object:
remarks:
remarks:  inetnum: 192.41.170.0 - 192.41.170.255
remarks:  netname: AIT-CS-NET
remarks:  org-id:  AIT-4
remarks:  status:  assignment
remarks:  rev-srv: CS4.CS.AIT.AC.TH
   NS.THNIC.NET
   NS.UU.NET
remarks:  tech-c:  KK96-ARIN
remarks:  reg-date:1988-07-08
remarks:  changed: [EMAIL PROTECTED] 19950525
remarks:  source:  ARIN
remarks:
remarks:  --
notify:   [EMAIL PROTECTED]
mnt-by:   APNIC-HM
changed:  [EMAIL PROTECTED] 19950525
changed:  [EMAIL PROTECTED] 20041222
source:   APNIC

person:   Kanchana Kanchanasut
address:  Asian Institute of Technology
  Km 42 Paholtothin Road
  Pratumthani Province
country:  TH
phone:+662 5245703
e-mail:   [EMAIL PROTECTED]
nic-hdl:  KK705-AP
remarks:  --
remarks:  imported from ARIN object:
remarks:
remarks:  poc-handle:  KK96-ARIN
remarks:  is-role: N
remarks:  last-name:   Kanchanasut
remarks:  first-name:  Kanchana
remarks:  street:  Asian Institute of Technology
   Km 42 Paholtothin Road
   Pratumthani Province
remarks:  country: TH
remarks:  mailbox: [EMAIL PROTECTED]
remarks:  bus-phone:   +662 5245703
remarks:  reg-date:1992-11-23
remarks:  changed: [EMAIL PROTECTED] 19921123
remarks:  source:  ARIN
remarks:
remarks:  --
notify:   [EMAIL PROTECTED]
mnt-by:   MNT-ERX-ASIANINSTIOFTECHN-NON-TH
changed:  [EMAIL PROTECTED] 20041222
source:   APNIC

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cron job every 5 hours

2007-07-13 Thread Josh Paetzel
On Friday 13 July 2007, Duane Hill wrote:
 On Fri, 13 Jul 2007 at 12:50 -0400, [EMAIL PROTECTED] 
confabulated:
  Hello,
I want to run an updater script, every 5 hours and x minutes. I
  thought to use:
 
  minute 5 * * * root path/to/scriptname

 crontab(5):
...
Steps are also permitted after an asterisk, so if you want to
 say ``every two hours'', just use ``*/2''.
...

 So, my guess would be:

 minute */5 * * * root path/to/scriptname


Sort of, that would run the cronjob at midnight, 5am, 10am, 3pm, and 
8pm so there would be one interval where it runs at 4 hours.

The real method if it's imparitive to run it every 5 hours would be to 
set up a cronjob for each day of the week, rotating by one hour.

minute 0,5,10,15,20 * * 0
minute 1,6,11,16,21 * * 1
minute 2,7,12,17,22 * * 2
and so on and so forth


-- 
Thanks,

Josh Paetzel


pgpKypBoJsPIw.pgp
Description: PGP signature


Re: Ports Clean

2007-07-13 Thread Josh Paetzel
On Friday 13 July 2007, Grant Peel wrote:
 Hi all,

 My ports collection on some of the servers is wasting alot of
 space.

 What would be the best method to 'cleanout' the ports dir without
 adversly affecting the operation of the rest of the server?

 All of the servers are live production servers.

 -Grant

There are a few possibilities.

1) cd to each installed ports dir and do a make clean
2) do the same but a make distclean
3) rm -rf /usr/ports/*/*/work
4) rm -rf /usr/ports and recvsup the tree

-- 
Thanks,

Josh Paetzel


pgp82OPCTptKf.pgp
Description: PGP signature


Re: Installing in a logical partition

2007-07-13 Thread Josh Paetzel
On Friday 13 July 2007, h p wrote:
 Hi.

 I try to install FreBSD 6.2 as third OS on my laptop (after Windows
 XP and Gentoo Linux).

 I only have a logical partition left for it. sysinstall only shows
 four slices on my hard drive, ad4s1 - ad4s4. ad4s4 is correctly
 recognized as a DOS extended partition, but the logical partitions
 inside it are not displayed - so I can't select the slice I have
 set aside for FreeBSD.

 Is this possible? I don't find that limitation in the handbook, and
 it seems utterly anachronistic to me. What can I do to get around
 this?

 Thanks,

 Helge


Logical partitions are a horrible hack that should die a horrible 
death.  FreeBSD doesn't support installing/booting from them.

-- 
Thanks,

Josh Paetzel


pgpZ9G4vjqUrH.pgp
Description: PGP signature


Re: Ports Clean

2007-07-13 Thread Philip M. Gollucci

Josh Paetzel wrote:

On Friday 13 July 2007, Grant Peel wrote:

Hi all,

My ports collection on some of the servers is wasting alot of
space.

What would be the best method to 'cleanout' the ports dir without
adversly affecting the operation of the rest of the server?

All of the servers are live production servers.

-Grant


There are a few possibilities.

1) cd to each installed ports dir and do a make clean
2) do the same but a make distclean
3) rm -rf /usr/ports/*/*/work
4) rm -rf /usr/ports and recvsup the tree


No -- install /usr/ports/ports-mgmt/portupgrade
via ports or packages.

portsclean -DD
portsclean -C

--

Philip M. Gollucci ([EMAIL PROTECTED]) 323.219.4708
Senior System Admin - Riderway, Inc. http://riderway.com
1024D/EC88A0BF 0DE5 C55C 6BF3 B235 2DAB  B89E 1324 9B4F EC88 A0BF

Work like you don't need the money,
love like you'll never get hurt,
and dance like nobody's watching.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Installing in a logical partition

2007-07-13 Thread h p
Hi.

I try to install FreBSD 6.2 as third OS on my laptop (after Windows XP
and Gentoo Linux).

I only have a logical partition left for it. sysinstall only shows
four slices on my hard drive, ad4s1 - ad4s4. ad4s4 is correctly
recognized as a DOS extended partition, but the logical partitions
inside it are not displayed - so I can't select the slice I have set
aside for FreeBSD.

Is this possible? I don't find that limitation in the handbook, and it
seems utterly anachronistic to me. What can I do to get around this?

Thanks,

Helge

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD-6.1 bootup hangs after power failure

2007-07-13 Thread Tek Bahadur Limbu

Hi All,

Due to a power outage, my FreeBSD-6.1 (i386) machine got rebooted. 
However, upon reboot right after the initial startup menu, it simply hangs.


I tried rebooting the machine several times but in vain.

My Bios detects my hard drive. Also since I get the initial startup 
menu, something must be wrong or corrupted in the Boot loader.


Can somebody point me or give me any hints about fixing this problem. I 
have really some information in my hard drive which I want to keep or 
restore.


Thanking you...

--

With best regards and good wishes,

Yours sincerely,

Tek Bahadur Limbu

(TAG/TDG Group)
Jwl Systems Department

Worldlink Communications Pvt. Ltd.

Jawalakhel, Nepal

http://www.wlink.com.np
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread Chuck Swiger

On Jul 13, 2007, at 10:44 AM, Dan Casey wrote:

I'm using dynamicDNS, so I will able to specify the forward *AND*
reverse lookups?


No.  Reverse lookups are controlled by whoever owns the IP delegation
for the netblock in question, and they are not going to configure PTR
records for dynamic IPs.  If you want to have reverse lookups you
control, you'll need to get static IPs.


Slight correction.  To do what you want, you will need to get a static
ip.  Then you can request your isp (or whoever owns the ip block) to
setup the PTR record for you.


That's not really a correction.  :-)

If you get a single static IP, for example, normally the ISP or  
netblock owner will not delegate that, but are willing to setup a PTR  
record.


If you get a larger static netblock, especially a /24 or larger, then  
your ISP can delegate reverse DNS to nameservers you run, and thus  
you can set up and change the reverse lookup results at will without  
needing your ISP to make PTR record changes.  See http://www.ietf.org/ 
rfc/rfc2317.txt about Classless IN-ADDR.ARPA delegation for the  
deal with regard to delegation of smaller netblocks than a /24.


--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Creating and Copying bsdpan packages across machines

2007-07-13 Thread Anthony Volodkin

Hi,

I have a few servers where packages are managed via a central package build
system, and the remaining machines are set to only fetch packages from
there, so they don't try to build them.  This works great and saves lots of
time.

The only issue I still have here is with bsdpan- packages which are created
by Perl CPAN modules not in the ports system.  There are just a few of them,
but they are important.

What I've tried is:

1. Install module EVDB::API using:

   perl -MCPAN -e install EVDB::API

command on the package build server

2. Generate a package out of the installed port via:

   pkg_create -b bsdpan-EVDB-API-0.99

3. Copy the resulting bsdpan-EVDB-API-0.99.tbz on another machine, and try
installing it with:

   pkg_add bsdpan-EVDB-API-0.99.tbz

What happens here is:

# pkg_add -v bsdpan-EVDB-API-0.99.tbz
Requested space: 36140 bytes, free space: 15849822208 bytes in
/var/tmp/instmp.AEIbBN
extract: Package name is bsdpan-EVDB-API-0.99
extract: CWD to /
extract: ///usr/local/lib/perl5/5.8.8/man/man3/EVDB::API.3
extract: ///usr/local/lib/perl5/5.8.8/man/man3/EVDB::API::JSON.3
tar: /usr/local/lib/perl5/5.8.8/man/man3/EVDB::API.3: Cannot stat: No such
file or directory
tar: Error opening archive: Empty input file: Inappropriate file type or
format
pkg_add: extract_plist: can not invoke 101 byte tar pipeline: /usr/bin/tar
cf - /usr/local/lib/perl5/5.8.8/man/man3/EVDB\:\:API.3|/usr/bin/tar --unlink
-xpf - -C /

I haven't been able to debug it further.

What's going on here?

What else can I do to resolve this?


Thanks for your help.

--
Anthony Volodkin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: is is able to setting up DNS server reverse lookup with DynamicIP?

2007-07-13 Thread Steve Bertrand
Chuck Swiger wrote:
 On Jul 13, 2007, at 10:44 AM, Dan Casey wrote:
 I'm using dynamicDNS, so I will able to specify the forward *AND*
 reverse lookups?

 No.  Reverse lookups are controlled by whoever owns the IP delegation
 for the netblock in question, and they are not going to configure PTR
 records for dynamic IPs.  If you want to have reverse lookups you
 control, you'll need to get static IPs.

 Slight correction.  To do what you want, you will need to get a static
 ip.  Then you can request your isp (or whoever owns the ip block) to
 setup the PTR record for you.
 
 That's not really a correction.  :-)

Correct ;)

 If you get a single static IP, for example, normally the ISP or netblock
 owner will not delegate that, but are willing to setup a PTR record.

That is, if the ISP *is* willing to set up a rDNS entry. I have had
clients move from their previous provider to us because the old provider
would not set up a reverse DNS entry for their statically assigned
IP(s). Sounds bad, but it happens.

 If you get a larger static netblock, especially a /24 or larger, then
 your ISP can delegate reverse DNS to nameservers you run, and thus you
 can set up and change the reverse lookup results at will without needing
 your ISP to make PTR record changes.  See
 http://www.ietf.org/rfc/rfc2317.txt about Classless IN-ADDR.ARPA
 delegation for the deal with regard to delegation of smaller netblocks
 than a /24.

I personally wouldn't do this. If anything, I would delegate permissions
on our name servers so that the client can log in to our DNS interface
and make the changes there. That way, we always have control over the
names in the event you ever have a rogue employee at the other end.

However, we don't do anything of the sort. When clients need rDNS
entries changed, the client requests it, and we make it so. It is the
same way that we work with one of our external ADSL wholesalers.

Mind you, when you call us, someone answers the phone. You can ask for
the button pushers directly, and changes are made live time mostly. Try
that with a Sympatico, AOL or the like.

Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: KDE problem after update

2007-07-13 Thread Albert Shih
 Le 13/07/2007 à 16:35:14+0100, RW a écrit
 On Fri, 13 Jul 2007 17:18:43 +0200
 Albert Shih [EMAIL PROTECTED] wrote:
 
 
 I saw this kind of thing temporarily during the last KDE upgrade.
 Did you bring all your ports up to date? Have you tried restarting your

Yes...all my ports is up to date.

 desktop session, or rebooting?

OK I'm going to try this (restarting desktop session).

Thanks for you answer.

Regards.
--
Albert SHIH
Observatoire de Paris Meudon
SIO batiment 15
Heure local/Local time:
Ven 13 jul 2007 21:56:57 CEST
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Finally Converting From Bind 8 - Bind 9

2007-07-13 Thread Tim Daneliuk

Alex Zbyslaw wrote:

Tim Daneliuk wrote:


2) Better still is there some sort of include mechanism where I could
   keep a flat file of public host information for use by db.external,
   but include it into db.internal.


I don't think there is, but let someone who uses bind more than I do 
give a definitive on that :-)


What you *can* do, irrespective of bind version, is to have two files 
which you pre-process with m4, and have a third file which m4 includes 
on both the others.


So you start with:

   internal.M4 which includes shared
   external.M4 which also includes shared
   shared which gets included in the other two.

Then m4 internal.M4  internal and m4 external.M4 - external.

Bind then loads internal and external.


A reasonable and very Unix-ish solution, certainly.  Though, I think
the subsequent post on this thread regarding $INCLUDE is probably more
elegant ;)



Alternatively you could start with one M4 file which uses lots of ifdefs 
for the non-shared portions.  The create internal and external by 
specifying different definitions to m4.  e.g. m4 -D _TYPE=EXTERNAL or m4 
-D _TYPE=INTERNAL.


For a problem with small differences between two files, this is a better 
solution, but not what I'd do in this case.


Me either - conditional content gets clumsy to maintain in a big hurry.



Whole process can be easily controlled with a Makefile (including any 
restarts).


--Alex





--

Tim Daneliuk [EMAIL PROTECTED]
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Periodic e-mails

2007-07-13 Thread Jasvinder S. Bahra
Hello everybody,

Until recently, I was getting my periodic reports forwarded to my external
e-mail box.

I arranged this by adding the following line to the top of the /etc/aliases
file and then running newaliases...

root: EXTERNAL-EMAIL-ADDRESS

However, I am no longer getting e-mail in my external mail account.  I was
playing around with the host settings at one point and I think that is the
reason why i'm having the problem.  I haven't had any success resolving the
issue myself, and while I did google it, I couldn't find many options.

I examined /var/log/maillog, and saw something unexpected...

Jul 12 23:45:13 HOSTNAME sm-mta[580]: l6824ssQ008021:
to=[EMAIL PROTECTED], delay=4+20:40:18, xdelay=00:00:00,
mailer=esmtp, pri=21733613, relay=sirius.DOMAIN...DOMAIN.ORG., dsn=4.0.0,
stat=Deferred: Connection refused by HOSTNAME.DOMAIN.ORG.DOMAIN.ORG.

(Note, i've replaced references to my actual hostname and domain with
HOSTNAME and DOMAIN.ORG respectively).

For some reason, it is saying Connection refused by
HOSTNAME.DOMAIN.ORG.DOMAIN.ORG.  I'm not sure wht e-mail cant be sent, but
regardless, I would expect it to say Connection refused by
HOSTNAME.DOMAIN.ORG.

Now, i've set the appropriate settings in /etc/hosts...

127.0.0.1localhost.DOMAIN.ORG localhost
EXTERNAL-IP-ADDRESSHOSTNAME.DOMAIN.ORG HOSTNAME

My /etc/host.conf file is set as follows...

hosts
dns

My DNS server entries are defined /etc/resolv.conf

nameserver DNS-SERVER-1
nameserver DNS-SERVER-2
nameserver DNS-SERVER-3

I have the following settings of interest in /etc/rc.conf.  Note that I do
not receive any e-mail on this machine - sendmail is only used to, well,
*send* mail..

hostname=HOSTNAME.DOMAIN.ORG
sendmail_enable=NO

I'm using FreeBSD v5.5 on this box...

FreeBSD HOSTNAME.DOMAIN.ORG 5.5-RELEASE FreeBSD 5.5-RELEASE #0: Tue May
23 14:58:27 UTC 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  i386

Anyone have any ideas, or suggestions?

Regards,

Jazz



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Periodic e-mails

2007-07-13 Thread Chuck Swiger

On Jul 12, 2007, at 4:12 PM, Jasvinder S. Bahra wrote:

I examined /var/log/maillog, and saw something unexpected...

Jul 12 23:45:13 HOSTNAME sm-mta[580]: l6824ssQ008021:
to=[EMAIL PROTECTED], delay=4+20:40:18, xdelay=00:00:00,
mailer=esmtp, pri=21733613, relay=sirius.DOMAIN...DOMAIN.ORG.,  
dsn=4.0.0,

stat=Deferred: Connection refused by HOSTNAME.DOMAIN.ORG.DOMAIN.ORG.

(Note, i've replaced references to my actual hostname and domain with
HOSTNAME and DOMAIN.ORG respectively).


That kind of issue tends to indicate that someone missed a period at  
the end of the hostname in zone file specifying the MX record for  
domain.org.


--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Attansic L1 Gigabit Ethernet Adapter

2007-07-13 Thread Jose Luis Alarcon Sanchez
Hi friends.

My PC box have this Ethernet adapter (Linux kernel description):

Ethernet controller: Attansic Technology Corp. L1 Gigabit Ethernet Adapter (rev 
b0)

Please, is there a way for make it work with FreeBSD?.

Thanks you very much, in advance. You're very kind.

Best Regards.

Jose.

-- 
http://www.lordofunix.org/ 
 
Not Registered GNU/Hurd User.
Registered BSD User 51101.
Registered Linux User #213309.
Memories. You are talking about memories.
Rick Deckard. Blade Runner.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Finally Converting From Bind 8 - Bind 9

2007-07-13 Thread Tim Daneliuk

Josh Paetzel wrote:



Sure, you can $INCLUDE a file in to a zonefile. :)



Yup - that sure does it.  However, it is still possible to do
Very Stupid Things (tm).  Anyone running bind should not that
this combination of things causes great silliness:

$ORIGIN mydomain.com.

@ IN SOA ..

; Nameservers

IN NSfoo.mydomain.com   ; oops, missing trailing period

Really dumb, and it had my wondering what was wrong with my $INCLUDE -
nothing, of course.

Thanks for the help.  I now have a nice clean db.external with
a corresponding view.  db.internal merely $INCLUDES db.external
as its first statement and has a corresponding view.  Now when I
modify *anything* - $TTL, a host definition ... whatever, it propagates
into both views with a single edit.



--

Tim Daneliuk [EMAIL PROTECTED]
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: cannot log in via console, cannot su(1), only as root

2007-07-13 Thread Michael K. Smith - Adhost
Hello Martin:

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:owner-freebsd-
 [EMAIL PROTECTED] On Behalf Of martinko
 Sent: Thursday, July 12, 2007 5:28 PM
 To: freebsd-questions@freebsd.org
 Subject: Re: cannot log in via console, cannot su(1), only as root
 
 Michael K. Smith - Adhost wrote:
  Hello Martinko:
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:owner-freebsd-
  [EMAIL PROTECTED] On Behalf Of martinko
  Sent: Saturday, July 07, 2007 4:36 PM
  To: freebsd-questions@freebsd.org
  Subject: Re: cannot log in via console, cannot su(1), only as root
 
  martinko wrote:
  hello list,
 
  i was updating sw configuration of my old computer and towards the
  end i
  noticed i couldn't log in on local console other than root.  i
 tried
  remote ssh using public keys which worked but i found out su(1) to
  any
  user except root does not work either.  i've no idea how i could
  possibly manage to break my system like this and unfortunately i
  need
  to fix it by tomorrow.  therefore i would really appreciate your
  prompt
  hints as what to check etc.
 
  some more details follow ...
 
  upgrade from 6.0-R to 6.2-R
  everything went ok ..
  i was doing changes in /etc based on my other computer settings
  i was working via ssh(1), therefore i haven't noticed when logging
 on
  console stopped working.
 
  what works:
  log in via ssh(1) using public/private keys
  log in on local console as root
  su(1) to root
 
  what doesn't work:
  log in via ssh(1) using password
  log in on local console as a normal user
  su(1) to a normal user (it even doesn't ask for password a throws
  sorry)
 
  besides, as root i'm able to change passwords via passwd(1), but it
  doesn't help and a normal user cannot change their own password
(old
  password check would fail).
 
  i ran vipw(8) and it doesn't seem to me there's something wrong
with
  my
  files.
 
  any hints pls ??
 
 
  The normal user would have to be a member of the wheel group to
use
 su
  at any point.  If your normal user logs in via ssh/console/whatever,
  they should be able to run the passwd command to change their own
  password.  You wouldn't want them to su to do so.  If you want to
 test
  this, add your normal user to the wheel group, log in again and see
 if
  it works.
 
 
 I'm not having problem with a password as such.  I can change it.  I
 just cannot log in using password as any user apart from root, whether
 logging locally (console) or remotely (ssh).  Users I tried su(1) are
 of
 course members of wheel group.  su(1) failed before even accepting any
 password.  There's something wrong somewhere and I need to find it,
 just
 don't know how.  Any ideas pls ??
 
 Martin
 
There are three things I would check.

1) When you ps auxww | grep sshd is it the system version in /sbin or is
it firing from /usr/local/sbin?
a) If it's in /usr/local/sbin then the config file *may* be in
/usr/local/etc/sshd/sshd_config
2) Is your /etc/ttys configuration odd?
3) Is /etc/pam.d/sshd configured the way you would like?  Is it calling
odd or unexpected PAM modules?

Regards,

Mike
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


named and nfs mounts at boot time

2007-07-13 Thread Tim Daneliuk

While we're on the subject of dns ... I have nfs mounts configured in
/etc/fstab using the host *name*.  When the system boots, it grumbles
about the name resolution because named has not yet been started.  It
works fine because, by the time you have a fully booted system, named is
running and nfs runs happily.

'Just wondering if there is a way to get the warnings during boot to
be quiet without resorting to using IP addresses in the fstab nfs
mount entries...


--

Tim Daneliuk [EMAIL PROTECTED]
PGP Key: http://www.tundraware.com/PGP/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Intel G965 chipset?

2007-07-13 Thread Bruce Caruthers

Hi, all.

I am in the process of replacing my old, formerly
solidly reliable 4.2 RAID server.  I've been eyeing
the Intel DG965WH motherboard and its kin, but from
my searches of the mailing list archives, it seems
unclear whether it will work.  There were several
postings with workarounds (e.g. turn off ACPI, the
marvell_pata patch, etc.) but no followup postings
to indicate whether any of that worked...


=== My Question:
So, can I use an Intel motherboard with the 965
chipset?  If not, what is the latest chipset I can
use which will meet my needs?


=== My needs are:
* long-term reliable (current system is 7 years old)
* 6+ SATA with RAID 1 (RAID 5 would be nice, but
  not required -- old server is just RAID 1 with
  a Highpoint 370 on an Abit BX133 mobo)
* Firewire for removable snapshot drives
* Preferably PCI-e/Express, since that seems to be
  the near-future for later expansion
* Being able to use non-SATA CD/DVD drive for
  installs and perhaps experimenting with BSD DVD
  burning tools
* Unless I do the DVD burning stuff, CPU doesn't
  matter to me (currently using Celeron 766MHz on
  old server, with 256 MB RAM, and only noticed
  when rebuilding a kernel)
* I don't care about audio, and just need basic
  text-mode VGA, since this will sit in my basement.


=== OS:
If it matters, I'll be moving from 4.2 to I guess
6.2 with this (clean install).  I've used pre-1.0
FreeBSD/386BSD up through 4.10, but haven't messed
with 5.x or newer yet.  Any major gotchas I should
be aware of?


Sorry for being long-winded.  Just want to be clear
on what my concerns are, so I don't waste anyone's
time.  :)

Thanks!
   -bkc
--
Bruce Caruthers http://www.BruceCaruthers.com/
~~~
It's good to be good,  EDUCATION is understanding the rules;
but it's better to be luckyEXPERIENCE is understanding the exceptions.
-- The Trading Goddess  -- Farmer's Almanac.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: named and nfs mounts at boot time

2007-07-13 Thread Chuck Swiger

On Jul 13, 2007, at 3:29 PM, Tim Daneliuk wrote:

While we're on the subject of dns ... I have nfs mounts configured in
/etc/fstab using the host *name*.  When the system boots, it grumbles
about the name resolution because named has not yet been started.  It
works fine because, by the time you have a fully booted system,  
named is

running and nfs runs happily.

'Just wondering if there is a way to get the warnings during boot to
be quiet without resorting to using IP addresses in the fstab nfs
mount entries...


Put the NFS server IPs and hostnames into /etc/hosts.

--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


named and nfs mounts at boot time

2007-07-13 Thread Robert Huff
Tim Daneliuk writes:

  While we're on the subject of dns ... I have nfs mounts
  configured in /etc/fstab using the host *name*.  When the system
  boots, it grumbles about the name resolution because named has
  not yet been started.  It works fine because, by the time you
  have a fully booted system, named is running and nfs runs
  happily.

I'm not sure this will work, but have you considered mapping
those hosts in /etc/hosts?  Also think about the contents of
/etc/resolv.conf.


Robert Huff
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


a suggestion for a good multifunction (printer, scanner, copier, fax ) solution?

2007-07-13 Thread eculp
Does anyone have a suggestion for a good multifunction (printer,  
scanner, copier, fax ) solution that is supported, out of the  box on  
up to date FreeBSD Current and/or FreeBSD STABLE preferably using  
cupsd w/gutenprint?  Epson - Lexmark - HP ?


I need a scanner and a printer so it sounds like a better deal to get  
two in one but suggestions from folks who have been there and done  
that are greatly appreciated.


Thanks,

ed
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Merging with Mercurial (was: Re: macosx stuff seeping into the ports?)

2007-07-13 Thread Giorgos Keramidas
On 2007-07-12 12:36, Michael P. Soulier [EMAIL PROTECTED] wrote:
 I just tried a merge with mercurial, built out of ports.

 /usr/local/bin/hgmerge:
 /Developer/Applications/Utilities/FileMerge.app/Contents/MacOS/FileMerge: not 
 found

 Umm, why the hell would I have that on FreeBSD??

The default 'hgmerge' script distributed as part of the official
Mercurial tree tries FileMerge and a few other merge-tools before
giving up.

You can always replace the default merge-tool with one you like better,
by a variety of methods:



1. Setting in your ~/.hgrc file the ui.merge option:

[ui]
merge = kdiff3

Popular choices for [ui.merge] include kdiff3, meld and I've recently
started experimenting with Sun's gpyfm Python/GTK+ GUI merge tool.



2. Setting HGMERGE in the environment of the `hg' utility:

$ env HGMERGE=true hg merge

When you use this sort of 'merge trickery', you can do things like:

$ hg up -C localhead
$ env HGMERGE=true hg merge [remotehead]

and then you can selectively revert files to their local head version,
or to their remote head version:

$ hg revert --no-backup -r remotehead obj/lib/libfoo.so.1
$ hg revert --no-backup -r localhead obj/bin/*

This tends to a bit error-prone and doesn't really help when you
_really_ want to do a 3-way merge of source code or text files.



Most of the available merge tools tend to create a varying level of mess
with binary files, like snapshots of build trees, so I'm looking at
alternative ways of merging.

Each time Mercurial invokes $HGMERGE or [ui.merge] there is a conflict
because both the local and remote branch has modified the same file.

Ideally, it should be possible to write a smarter merge wrapper script,
which is written in Python to hook into Mercurial as a backend, and
provide the user with more choices, like:

$ export HGMERGE=smart-merge

$ hg up -C localhead
0 files updated, 0 files merged, 0 files removed, 0 files unresolved
$ hg merge [remotehead]

Merging file obj/lib/libfoo.so.1
  command:   (a)ccept, (d)iff, (e)dit, (h)istory, (m)erge, (q)uit
  changeset: (a)ncestor, (p)arent, (c)hild, (m)erged

[m] 

At which point, you can run commands like:

? accept child
? acc ch
? diff parent
? h p

or any sort of command which can be auto-completed to something
meaningful using some sort of syntax like the one shown above.

This way it would be _much_ easier to merge binary files, and given a
sufficiently 'smart' HGMERGE application it could be easy to merge by
pressing RET RET RET a few times, and let the defaults apply :)

This may be tricky to write, and I don't trust my Python skills yet to
embark on such a project, so I'm just using a local wrapper around
gdiff3 and Sun's gpyfm GTK+-based merge tool (gpyfm) for now.  For
Mercurial workspaces which contain source code, this combination can
really work wonders :-)

If you need help with setting up something which supersedes the default
'hgmerge' script distributed with the Mercurial port, please feel free
to ask me for the merge scripts I am using locally, search for
MergeProgram in the Mercurial wiki[*], or hop into #mercurial on
Freenode IRC and chat with all the friendly folks there.

[*] http://www.selenic.com/mercurial/

I hope all this helps a bit,

- Giorgos

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD-6.1 bootup hangs after power failure

2007-07-13 Thread Nikola Lecic
On Sat, 14 Jul 2007 00:32:54 +0545
Tek Bahadur Limbu [EMAIL PROTECTED] wrote:

 Hi All,
 
 Due to a power outage, my FreeBSD-6.1 (i386) machine got rebooted. 
 However, upon reboot right after the initial startup menu, it simply
 hangs.
 
 I tried rebooting the machine several times but in vain.
 
 My Bios detects my hard drive. Also since I get the initial startup 
 menu, something must be wrong or corrupted in the Boot loader.
 
 Can somebody point me or give me any hints about fixing this problem.
 I have really some information in my hard drive which I want to keep
 or restore.

Hello Tek,

The first thing I'd do is to download FreeSBIE (if you already don't
have it), boot from it and do some initial inspection of the main drive.

Then you will probably collect some more data about status of file
systems etc. that will allow people from this list to share with you
much more useful advices than it's possible at the moment.

Nikola Lečić
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: www/linux-flashplayer7 - now works with SOUND on youtube

2007-07-13 Thread Nikola Lecic
On Fri, 13 Jul 2007 08:33:04 +1000
Paul Fraser [EMAIL PROTECTED] wrote:

 Actually that's not entirely true - the only problem is sound drops
 out of sync almost straight away, but otherwise it works just fine.

Hm, this is very strange and certainly shouldn't be so. Could you please
share some more details? What wrapper do you use? Are there warning or
any other messages if you run the browser from terminal?

Nikola Lečić 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to start apache22 without ssl

2007-07-13 Thread Norberto Meijome
On Fri, 13 Jul 2007 13:27:41 -0400
pj [EMAIL PROTECTED] wrote:

 Somethings isn't quite right here.
 It was suggested I load the accf_http from the /boot/loader.conf file. I 
 did. So, now I removed the line from /boot/loader.conf; it is empty of 
 any directives. I rebooted and accf_http.ko is no longer in the kernel - 
 according to kldstat.

man loader.conf

Once you understand what loader.conf is for, and what a kernel module is, you
should understand what has happened.

 ps xa | grep htt gives
 
  /usr/local/sbin/httpd - DNOHTTPACCEPT
 
 Something is fishy here... any thoughts?

nothing fishy at all. read the man, read about kernel modules, read :)

 Why me? I always seem to get these weird anomalies... :(

sorry to break it to you, but odds are it's due to your current lack of
understanding of the system, rather than the universe poised against you :)
don't worry, it's fixable (understanding, not the universe ;) ).

Good luck,
_
{Beto|Norberto|Numard} Meijome

There are two kinds of stupid people. One kind says,'This is old and therefore
good'. The other kind says, 'This is new, and therefore better.'
 John Brunner, 'The Shockwave Rider'.

I speak for myself, not my employer. Contents may be hot. Slippery when wet.
Reading disclaimers makes you go blind. Writing them is worse. You have been
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Intel G965 chipset?

2007-07-13 Thread Ivan Carey

Bruce Caruthers wrote:

Hi, all.

I am in the process of replacing my old, formerly
solidly reliable 4.2 RAID server.  I've been eyeing
the Intel DG965WH motherboard and its kin, but from
my searches of the mailing list archives, it seems
unclear whether it will work.  There were several
postings with workarounds (e.g. turn off ACPI, the
marvell_pata patch, etc.) but no followup postings
to indicate whether any of that worked...


=== My Question:
So, can I use an Intel motherboard with the 965
chipset?  If not, what is the latest chipset I can
use which will meet my needs?


=== My needs are:
* long-term reliable (current system is 7 years old)
* 6+ SATA with RAID 1 (RAID 5 would be nice, but
  not required -- old server is just RAID 1 with
  a Highpoint 370 on an Abit BX133 mobo)
* Firewire for removable snapshot drives
* Preferably PCI-e/Express, since that seems to be
  the near-future for later expansion
* Being able to use non-SATA CD/DVD drive for
  installs and perhaps experimenting with BSD DVD
  burning tools
* Unless I do the DVD burning stuff, CPU doesn't
  matter to me (currently using Celeron 766MHz on
  old server, with 256 MB RAM, and only noticed
  when rebuilding a kernel)
* I don't care about audio, and just need basic
  text-mode VGA, since this will sit in my basement.


=== OS:
If it matters, I'll be moving from 4.2 to I guess
6.2 with this (clean install).  I've used pre-1.0
FreeBSD/386BSD up through 4.10, but haven't messed
with 5.x or newer yet.  Any major gotchas I should
be aware of?


Sorry for being long-winded.  Just want to be clear
on what my concerns are, so I don't waste anyone's
time.  :)

Thanks!
   -bkc
--
Bruce Caruthers http://www.BruceCaruthers.com/
~~~
It's good to be good, EDUCATION is understanding the rules;
but it's better to be lucky   EXPERIENCE is understanding the exceptions.
-- The Trading Goddess  -- Farmer's Almanac.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


  

Hello Bruce,
I'm no expert but when I asked similar questions about this board and a 
server board I found this information:

http://www.reghardware.co.uk/2006/06/06/intel_launches_p965/
The 965 motherboard uses the ICH8 chipset

FreeBSD ata(4) supports the ICH8
http://www.freebsd.org/cgi/man.cgi?query=atasektion=4manpath=FreeBSD+6.2-RELEASE

Intel Technical doc
http://www.intel.com/design/motherbd/wh/wh_documentation.htm

So it looks like the 965 motherboard should work under FreeBSD 6.2

Ivan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Using FreeBSD iconv on Linux

2007-07-13 Thread Manjunath Warad
Hi,
Can someone direct me as how to use FreeBSD iconv on linux? I know
there exists a GNU iconv on linux; however, I am interested in using FreeBSD
iconv.

I would be grateful if someone let me know how to get the complete package
[source code and makefiles] on windows machine and if possible let me know
what are the changes involved to port the source code and makefiles to build
in Linux. 

Thanks,
Manju


***
This e-mail and attachments contain confidential information from HUAWEI,
which is intended only for the person or entity whose address is listed
above. Any use of the information contained herein in any way (including,
but not limited to, total or partial disclosure, reproduction, or
dissemination) by persons other than the intended recipient's) is
prohibited. If you receive this e-mail in error, please notify the sender by
phone or email immediately and delete it!
 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Using FreeBSD iconv on Linux

2007-07-13 Thread Manjunath Warad
Hi,
Can someone direct me as how to use FreeBSD iconv on linux? I know
there exists a GNU iconv on linux; however, I am interested in using FreeBSD
iconv.

I would be grateful if someone let me know how to get the complete package
[source code and makefiles] on windows machine and if possible let me know
what are the changes involved to port the source code and makefiles to build
in Linux. 

Thanks,
Manju


***
This e-mail and attachments contain confidential information from HUAWEI,
which is intended only for the person or entity whose address is listed
above. Any use of the information contained herein in any way (including,
but not limited to, total or partial disclosure, reproduction, or
dissemination) by persons other than the intended recipient's) is
prohibited. If you receive this e-mail in error, please notify the sender by
phone or email immediately and delete it!
 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: www/linux-flashplayer7 - now works with SOUND on youtube

2007-07-13 Thread Pollywog
On Saturday 14 July 2007 00:27:40 Nikola Lecic wrote:
 On Fri, 13 Jul 2007 08:33:04 +1000

 Paul Fraser [EMAIL PROTECTED] wrote:
  Actually that's not entirely true - the only problem is sound drops
  out of sync almost straight away, but otherwise it works just fine.

 Hm, this is very strange and certainly shouldn't be so. Could you please
 share some more details? What wrapper do you use? Are there warning or
 any other messages if you run the browser from terminal?

I am not sure whether I have sound, but flashplayer only works for me in 
Firefox, not Konqueror.  I will try YouTube and then post if I have sound.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Kmail Problems after update

2007-07-13 Thread Dantavious
Hi.
It seems that after my update to kde 3.5.7, my kmail filters do not work. They 
only work if I select each message and apply the filter manually. If I try to 
do several at a time kmail crashes. Anyone else seeing this or know what I 
can do to fix this.
Derrick
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Ports Clean

2007-07-13 Thread ajm
On Fri, Jul 13, 2007 at 01:05:09PM -0500, Josh Paetzel wrote:
 On Friday 13 July 2007, Grant Peel wrote:
  Hi all,
 
  My ports collection on some of the servers is wasting alot of
  space.
 
  What would be the best method to 'cleanout' the ports dir without
  adversly affecting the operation of the rest of the server?
 
  All of the servers are live production servers.
 
  -Grant
 
 There are a few possibilities.
 
 1) cd to each installed ports dir and do a make clean
 2) do the same but a make distclean
 3) rm -rf /usr/ports/*/*/work
 4) rm -rf /usr/ports and recvsup the tree
 
 -- 
 Thanks,
 
 Josh Paetzel

or you can put the following in a script

# cleaning all work directories of install ports.

plist=`pkg_version -voI |awk '{ print $1 }'`
for porg in $plist ; do
cd /usr/ports/${porg}  make clean
done

-- 
Alexander
FreeBSD 6.0-RELEASE i386
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]