Re: How to block 200K ip addresses?

2007-08-26 Thread Kevin Downey
On 8/25/07, Aminuddin [EMAIL PROTECTED] wrote:
 My complete list has about 300K of lines.
 It takes about a few hours just to load the rules.
 Will it be faster to load using the table?


 -Original Message-
 From: Dan Nelson [mailto:[EMAIL PROTECTED]
 Sent: Sunday, August 26, 2007 9:37 AM
 To: Aminuddin
 Cc: freebsd-questions@freebsd.org
 Subject: Re: How to block 200K ip addresses?

 In the last episode (Aug 26), Aminuddin said:
  From: Dan Nelson
   In the last episode (Aug 26), Aminuddin said:
How do you block this large range of ip addresses from different
subnet? IPFW only allows 65536 rules while this will probably use
up a few hundred thousands of lines.
   
I'm also trying to add this into my proxy configuration file, ss5.conf
 but
it doesn't allow me to add this large number.
   
IS this the limitation of IPF or FreeBSD? How do I work around this?
  
   Even though there are 65536 rule numbers, each number can actually have
   any amount of rules assigned to it.  What you're probably looking for,
   though, is ipfw's table keyword, which uses the same radix tree lookup
   format as the kernel's routing tables, so it scales well to large
   amounts of sparse addresses.  man ipfw, search for lookup tables.
 
  I intend to create a ruleset file consisting of this statement:
 
  Ruleset
 
  add 2300 skipto 2301 ip from 0.0.0.0/6 to any
  add 2400 skipto 2401 ip from any to 0.0.0.0/6
  add 2300 skipto 2302 ip from 4.0.0.0/6 to any
  add 2400 skipto 2402 ip from any to 4.0.0.0/6
 [...]
  add 2300 skipto 2363 ip from 248.0.0.0/6 to any
  add 2400 skipto 2463 ip from any to 248.0.0.0/6
  add 2300 skipto 2364 ip from 252.0.0.0/6 to any
  add 2400 skipto 2464 ip from any to 252.0.0.0/6
 
  add 2301 deny ip from 3.0.0.0/8 to any
  add 2401 reject ip from any to 3.0.0.0/8
  add 2302 deny ip from 4.0.25.146/31 to any
  add 2402 reject ip from any to 4.0.25.146/31
 [...]
  add 2302 deny ip from 4.18.37.16/28 to any
  add 2402 reject ip from any to 4.18.37.16/28
  add 2302 deny ip from 4.18.37.128/25 to any
  add 2402 reject ip from any to 4.18.37.128/25
  end ruleset
 
  Will the above rules block me from ssh into my remote server if the
  ip addresses of my local pc (dynamic ip) not within any of the above
  rules ip range as well as block my snmpd services?

 Yes; it's a little convoluted but should work.  You want to drop
 incoming packets from the listed IP ranges, and return a host
 unreachable to internal machines sending outgoing packets to the
 listed IP ranges?  Wouldn't it be easier to use ipfw's table feature
 and have something like this:

 add table 1 3.0.0.0/8
 add table 1 4.0.25.146/31
 add table 1 4.0.25.148/32
 [...]
 add table 1 4.18.37.16/28
 add table 1 4.18.37.128/25
 add 2300 deny ip from table 1 to any
 add 2400 reject ip from any to table 1

 That way you only have two ipfw rules, both of which use a single table
 lookup.

 --
 Dan Nelson
 [EMAIL PROTECTED]

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]


I would use the pf firewall, it has an option to file tables from a file like:

table evil persist file /root/evil.txt

[EMAIL PROTECTED] /root% wc -l evil.txt
  178438 evil.txt

so its not 300k lines but it takes seconds to load.

-- 
I am the kwisatz haderach
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to block 200K ip addresses?

2007-08-26 Thread Dan Nelson
In the last episode (Aug 26), Aminuddin said:
 From: Dan Nelson [mailto:[EMAIL PROTECTED] 
  In the last episode (Aug 26), Aminuddin said:
   From: Dan Nelson 
In the last episode (Aug 26), Aminuddin said:
 How do you block this large range of ip addresses from
 different subnet? IPFW only allows 65536 rules while this
 will probably use up a few hundred thousands of lines.
 
 I'm also trying to add this into my proxy configuration file,
 ss5.conf but it doesn't allow me to add this large number.
 
 IS this the limitation of IPF or FreeBSD? How do I work
 around this?

Even though there are 65536 rule numbers, each number can
actually have any amount of rules assigned to it.  What you're
probably looking for, though, is ipfw's table keyword, which
uses the same radix tree lookup format as the kernel's routing
tables, so it scales well to large amounts of sparse addresses. 
man ipfw, search for lookup tables.
  
   I intend to create a ruleset file consisting of this statement:
   
   Ruleset
  
   add 2300 skipto 2301 ip from 0.0.0.0/6 to any
   add 2400 skipto 2401 ip from any to 0.0.0.0/6
   add 2300 skipto 2302 ip from 4.0.0.0/6 to any
   add 2400 skipto 2402 ip from any to 4.0.0.0/6
  [...]
   add 2300 skipto 2363 ip from 248.0.0.0/6 to any
   add 2400 skipto 2463 ip from any to 248.0.0.0/6
   add 2300 skipto 2364 ip from 252.0.0.0/6 to any
   add 2400 skipto 2464 ip from any to 252.0.0.0/6
  
   add 2301 deny ip from 3.0.0.0/8 to any
   add 2401 reject ip from any to 3.0.0.0/8
   add 2302 deny ip from 4.0.25.146/31 to any
   add 2402 reject ip from any to 4.0.25.146/31
  [...]
   add 2302 deny ip from 4.18.37.16/28 to any
   add 2402 reject ip from any to 4.18.37.16/28
   add 2302 deny ip from 4.18.37.128/25 to any
   add 2402 reject ip from any to 4.18.37.128/25
   end ruleset
   
   Will the above rules block me from ssh into my remote server if
   the ip addresses of my local pc (dynamic ip) not within any of
   the above rules ip range as well as block my snmpd services?
  
  Yes; it's a little convoluted but should work.  You want to drop
  incoming packets from the listed IP ranges, and return a host
  unreachable to internal machines sending outgoing packets to the
  listed IP ranges?  Wouldn't it be easier to use ipfw's table
  feature and have something like this:
  
  add table 1 3.0.0.0/8
  add table 1 4.0.25.146/31
  add table 1 4.0.25.148/32
  [...]
  add table 1 4.18.37.16/28
  add table 1 4.18.37.128/25
  add 2300 deny ip from table 1 to any
  add 2400 reject ip from any to table 1
  
  That way you only have two ipfw rules, both of which use a single
  table lookup.

 My complete list has about 300K of lines. It takes about a few hours
 just to load the rules. Will it be faster to load using the table?
 
I did a quick test myself by fetching the safepeer ip list and adding
it via rules and tables.  This was a quick hack, so I'm just adding the
first IP in each line, not the whole netblock (I didn't want to write a
range-netmask converter).  On my heavily-loaded box (currently doing a
buildworld and some mrtg sweeps), I'm only able to insert about 60 ipfw
deny ip from 4.0.25.146 to any-format rules per second.  By contrast:

([EMAIL PROTECTED]) /tmp# head -3 splist1.table
table 1 add 0.0.0.0
table 1 add 4.0.25.146
table 1 add 4.0.26.14
([EMAIL PROTECTED]) /tmp# wc -l splist1.table
  191637 splist1.table
([EMAIL PROTECTED]) /tmp# time ipfw /tmp/splist1.table
ipfw /tmp/splist1.table: U:3.30s S:1.75s E:6.74s CPU:75% Faults:0/95 I/O:0/0 
Swaps:0
([EMAIL PROTECTED]) /tmp# ipfw table 1 list | wc -l
  191637

Under 7 seconds to load all 191k entries :)

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to block 200K ip addresses?

2007-08-26 Thread CyberLeo Kitsana
Kevin Downey wrote:
 I would use the pf firewall, it has an option to file tables from a file like:
 
 table evil persist file /root/evil.txt
 
 [EMAIL PROTECTED] /root% wc -l evil.txt
   178438 evil.txt
 
 so its not 300k lines but it takes seconds to load.

I attempted something similar with a digest of a PeerGuardian database
reworked with tableutil-0.6. The resultant file had 157,546 subnet
declarations in it.

When I attempted to populate a pf table with the file on 6.2-RELEASE, it
thought about it for a few seconds, then happily reported:

pfctl: Cannot allocate memory.

I never pared it down to see where the actual limit was for my hardware,
though, as a partial PeerGuardian list is pretty much useless.

-- 
Fuzzy love,
-CyberLeo
Technical Administrator
CyberLeo.Net Webhosting
http://www.CyberLeo.Net
[EMAIL PROTECTED]

Furry Peace! - http://.fur.com/peace/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to block 200K ip addresses?

2007-08-26 Thread Kevin Downey
On 8/25/07, CyberLeo Kitsana [EMAIL PROTECTED] wrote:
 Kevin Downey wrote:
  I would use the pf firewall, it has an option to file tables from a file 
  like:
 
  table evil persist file /root/evil.txt
 
  [EMAIL PROTECTED] /root% wc -l evil.txt
178438 evil.txt
 
  so its not 300k lines but it takes seconds to load.

 I attempted something similar with a digest of a PeerGuardian database
 reworked with tableutil-0.6. The resultant file had 157,546 subnet
 declarations in it.

 When I attempted to populate a pf table with the file on 6.2-RELEASE, it
 thought about it for a few seconds, then happily reported:

 pfctl: Cannot allocate memory.

 I never pared it down to see where the actual limit was for my hardware,
 though, as a partial PeerGuardian list is pretty much useless.

 --
 Fuzzy love,
 -CyberLeo
 Technical Administrator

this machine is amd64 so perhaps the extra address space? I dunno,
evil.txt is infact more or less the peerguardian list and it loads.

-- 
I am the kwisatz haderach
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and ImageMagick crashes OS?

2007-08-26 Thread Norberto Meijome
On Sat, 25 Aug 2007 05:56:59 +
Kris Kennaway [EMAIL PROTECTED] wrote:

  :) having been bitten by that in several unix-like OS (pick any Linux 
  distro, and freebsd too), i just remove /var/tmp and make a smylink to /tmp 
  , which is big enough for my foreseeable needs. I like to keep my /var 
  clean of tmp rubbish.
  
  and yes,  configuring PHP and it's libraries helps too :)  
 
 That's not an answer obviously.  

of course, but filling up /var with tmp files is to me a senseless way to use 
/var. My MMV from what everyone else sees as common sense anyway. :)
FWIW, i don't recall geting panics / crashes due to /var filling up.

Regards,
B
_
{Beto|Norberto|Numard} Meijome

Those who do not remember the past are condemned to repeat it.
   George Santayana

I speak for myself, not my employer. Contents may be hot. Slippery when wet. 
Reading disclaimers makes you go blind. Writing them is worse. You have been 
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: TCP packets don't flow from external hosts to WinVista clients behind

2007-08-26 Thread MIZ0

 Could be TCP window scaling. See
 http://en.wikipedia.org/wiki/TCP_window_scale_option
 Or the plain old PMTUD problem described in
 
http://www.cisco.com/en/US/tech/tk870/tk877/tk880/technologies_tech_note09186a008011a218.shtml#backinfo


 =Adriaan=

Nothing helps.
I've tried to change client's mtu, even shrinked packets with ng_tcpmss 
- no effect.
I don't understand why freebsd machines from internal network can't 
establish  any TCP connection to external net too.

Can ipfw or netgraph detect client's OS type and allow only Windows XP ? =))
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Do I need to recompile my standard kernel to enable ipfw?

2007-08-26 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Aminuddin wrote:
 Do I need to do the above if I'm not using the NAT function?
 I'm using 6.2 release.

No.  IPFW is available via a loadable kernel module.  Just add
firewall_enable=YES to /etc/rc.conf, choose your firewall type
from /etc/rc.firewall and add firewall_type=FOO also to
/etc/rc.conf plus write yourself a custom ruleset if you need
something other than one of the prepackaged ones.  Then reboot and test.

However, beware that the default setting without any firewall rules
installed is 'block everything via the network', so make sure you've
got console access when setting this up.

Also, I'd definitely recommend using PF rather than IPFW.  Mostly
that's personal preference, but I've used both IPFW and PF quite
extensively, and IMHO PF blows IPFW out of the water.

Cheers,

Matthew

- --
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
  Kent, CT11 9PW
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG0TYE8Mjk52CukIwRCLdeAJ9L40C893hhFZfoSuPVqIFf7JT17wCeNIKQ
fQ0N8JuSM/ikLnCgpucmQGM=
=h9ur
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to block 200K ip addresses?

2007-08-26 Thread B H

Dan Nelson:




This was a quick hack, so I'm just adding the
first IP in each line, not the whole netblock (I didn't want to write a
range-netmask converter).


No need to do that, there is ipcalc in the ports.

http://jodies.de/ipcalc
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: secure /usr/src update

2007-08-26 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Martin Laabs wrote:

 as far as I know neither CVSup, CTM nor (anonymous) CVS support any
 kind of (cryptographic) signing or encryption.
 Now I'd like to know if it is possible to obtain or update the base system
 in a secure and reliable way at all. For the ports collection there is
 portsnap which seems for me - in respect to the security issue - well
 concepted.

http://www.daemonology.net/freebsd-update/

although that page is now legacy, as FreeBSD update is a fully
blessed part of the base system in 6.2+

It's from the same person (Colin Percival) who bought us portsnap,
and he just happens to be FreeBSD security office too...

Cheers,

Matthew

- --
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
  Kent, CT11 9PW
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG0Tg28Mjk52CukIwRCJb6AKCU8nfoipsiat6GOCEEoO/9W7ntxwCeJWch
m52WDdhBauNUdo26in193yo=
=H16f
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: TCP packets don't flow from external hosts to WinVista clients behind

2007-08-26 Thread Bill Moran
MIZ0 [EMAIL PROTECTED] wrote:

   Could be TCP window scaling. See
   http://en.wikipedia.org/wiki/TCP_window_scale_option
   Or the plain old PMTUD problem described in
   
 http://www.cisco.com/en/US/tech/tk870/tk877/tk880/technologies_tech_note09186a008011a218.shtml#backinfo
  
   =Adriaan=
 
 Nothing helps.
 I've tried to change client's mtu, even shrinked packets with ng_tcpmss 
 - no effect.
 I don't understand why freebsd machines from internal network can't 
 establish  any TCP connection to external net too.

Sounds to me like you need to carefully go over your network setup.  Have
you verified that the problem machines correctly have all the information
they need: proper netmasks, routers, etc?  Run tcpdump on both
interfaces of the gateway and see if that provides any hint.

I have a strong suspicion that you're looking in the wrong place --
otherwise you would have found the problem.  Are there two DHCP servers
on this network?  Wouldn't be the first time I saw that problem mess with
someone's head.

With the information you've provided so far, we're guessing in the dark.
I doubt that ipfw is the culprit, but it's going to take more information
to be sure.

 Can ipfw or netgraph detect client's OS type and allow only Windows XP ? =))

Potentially, but I can't see it doing that by accident.

-- 
Bill Moran
http://www.potentialtech.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


IPMI A Question to all Dell Users.

2007-08-26 Thread Grant Peel
Hi all,

I have been reading a bit about IPMI.

I am running 6.2 on all my servers.

Does any Dell (PowerEdge) users have the IPMI port installed? Is it safe? Easy 
to use? Any problems with installation?

I am mostly interested in viewing sensor info and extracting SELs.

TIA,

-Grant
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Pesky File

2007-08-26 Thread Grant Peel
Hi all,

How do I view and delete this file?

-rw-r--r--1 gpeel  wheel  57080 Oct  3  2004 -P

-Grant
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Pesky File

2007-08-26 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Grant Peel wrote:
 Hi all,
 
 How do I view and delete this file?
 
 -rw-r--r--1 gpeel  wheel  57080 Oct  3  2004 -P

Either call the file ./-P on your command line, or use
'--' to mark the end of command arguments.  Eg:

% touch -- -P
% ls -l -- -P
- -rw-r--r--  1 matthew  wheel  0 Aug 26 13:09 -P
% rm -- -P

Cheers,

Matthew

- --
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
  Kent, CT11 9PW
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG0W3k8Mjk52CukIwRCNIQAJ42/C4ohk8O4JNfSOY/N8VOeAZ7YQCfSXn7
U568mzYq8fiGv7KhAJgEAWQ=
=xvF5
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Pesky File

2007-08-26 Thread Bahman M.
What immediately came to my mind:
%  rm `find . -type f -name '-P'`

Bahman

On 8/26/07, Grant Peel [EMAIL PROTECTED] wrote:
 Hi all,

 How do I view and delete this file?

 -rw-r--r--1 gpeel  wheel  57080 Oct  3  2004 -P

 -Grant
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Pesky File

2007-08-26 Thread Bahman M.
To view the file:
% cat `find . -type f -name '-P'`

Bahman

On 8/26/07, Bahman M. [EMAIL PROTECTED] wrote:
 What immediately came to my mind:
 %  rm `find . -type f -name '-P'`

 Bahman

 On 8/26/07, Grant Peel [EMAIL PROTECTED] wrote:
  Hi all,
 
  How do I view and delete this file?
 
  -rw-r--r--1 gpeel  wheel  57080 Oct  3  2004 -P
 
  -Grant
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED]
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Pesky File

2007-08-26 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Bahman M. wrote:
 What immediately came to my mind:
 %  rm `find . -type f -name '-P'`

This is just an excessively prolix way of running a command that
outputs ./-P and then feeding the result into rm(1).  You can just type:

   rm ./-P

for heaven's sake...

Cheers,

Matthew

- --
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
  Kent, CT11 9PW
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG0XAT8Mjk52CukIwRCCgmAJ4yonsuo6FvAYT+1ZWLMDiuAH9dugCffMIe
xPLN/jHG0Qha2ZbsMrmqfNw=
=Pmxs
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Pesky File

2007-08-26 Thread Bahman M.
You're right. 'rm ./P' is much better or using '--' as the end of
arguments. I didn't know that.

Bahman

On 8/26/07, Matthew Seaman [EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA256

 Bahman M. wrote:
  What immediately came to my mind:
  %  rm `find . -type f -name '-P'`

 This is just an excessively prolix way of running a command that
 outputs ./-P and then feeding the result into rm(1).  You can just type:

rm ./-P

 for heaven's sake...

 Cheers,

 Matthew

 - --
 Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
   Flat 3
 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
   Kent, CT11 9PW
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v2.0.4 (FreeBSD)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iD8DBQFG0XAT8Mjk52CukIwRCCgmAJ4yonsuo6FvAYT+1ZWLMDiuAH9dugCffMIe
 xPLN/jHG0Qha2ZbsMrmqfNw=
 =Pmxs
 -END PGP SIGNATURE-

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ipmi

2007-08-26 Thread Grant Peel
Hi all,

I took a stab at installing ipmitool on my PE750.

When I try to use it I get this.

The box is running FreeBSD 6.2 so my understanding is there is no kernel work 
to be done.

Can anyone take my blinders off and show me what I am missing?

excelsior# ipmitool sensor
Could not open device at /dev/ipmi0 or /dev/ipmi/0 or /dev/ipmidev/0: No such 
file or directory
Get Device ID command failed
Unable to open SDR for reading
excelsior#

-Grant
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Pesky File

2007-08-26 Thread Lowell Gilbert
For the record, both of the answers that have already been posted are
described right in man rm.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipmi

2007-08-26 Thread Grant Peel
Yes, I tried that.

Still same error message.

I am thinking its saysing there is no device node.

I am adding it the loader.conf and rebooting ... see what happes.

Oddly enough, there is a ipmi1 in the dev dir.

crw-rw   1 root   operator0,  91 Aug 25 07:15 ipmi1

-Grant
  - Original Message - 
  From: Riemer Palstra 
  To: Grant Peel 
  Cc: freebsd-questions@freebsd.org 
  Sent: Sunday, August 26, 2007 9:08 AM
  Subject: Re: ipmi


  On Sun, Aug 26, 2007 at 08:44:51AM -0400, Grant Peel wrote:
   Can anyone take my blinders off and show me what I am missing?
   
   excelsior# ipmitool sensor
   Could not open device at /dev/ipmi0 or /dev/ipmi/0 or /dev/ipmidev/0:
   No such file or directory

  Is the ipmi module loaded or compiled into the kernel?

  Usually a 'kldload ipmi' should be enough.

  -- 
  Riemer Palstra
  [EMAIL PROTECTED]

--
Total Control Panel  Login  
To: [EMAIL PROTECTED]  Message Score:  50   High (60): Pass  
From: [EMAIL PROTECTED]  My Spam Blocking Level:  High  Medium (75): 
Pass  
 Low (90): Pass 
   Block messages from this sender (blacklist)
  
This message was delivered because the content filter score did not 
exceed your filter level.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Transferring a GEOM array between hosts

2007-08-26 Thread [EMAIL PROTECTED]
On 25/08/07, Joe Schaefer [EMAIL PROTECTED] wrote:

 I have an external JBOD array that is a mirror
 of two stripes.  What I'd like to do is plug
 that array into a new/different freebsd host
 machine.  Is there anything I need to do to
 prepare the new machine for the array?

 Naively, I'd hope that the new machine will pick
 up the geom configuration from the drives themselves,
 so I won't have to run any gmirror or gstripe commands
 on the new machine after the JBOD has been plugged
 into it.

 Can anyone who has done this before give me
 a few tips on how to plan appropriately for
 such a move?

The only problem I have run into is forgetting
to load the appropriate modules on the new
machine.

I would assume, as well, that crossing up your
namespace would be bad.  It actually sounds
like a fun experiment to try some day.

-- 
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipmi

2007-08-26 Thread Riemer Palstra
On Sun, Aug 26, 2007 at 08:44:51AM -0400, Grant Peel wrote:
 Can anyone take my blinders off and show me what I am missing?
 
 excelsior# ipmitool sensor
 Could not open device at /dev/ipmi0 or /dev/ipmi/0 or /dev/ipmidev/0:
 No such file or directory

Is the ipmi module loaded or compiled into the kernel?

Usually a 'kldload ipmi' should be enough.

-- 
Riemer Palstra
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipmi

2007-08-26 Thread Grant Peel
Added a sym link from /dev/ipmi1 to ipmi0 and all is well.

-Grant

  - Original Message - 
  From: Grant Peel 
  To: Riemer Palstra 
  Cc: freebsd-questions@freebsd.org 
  Sent: Sunday, August 26, 2007 9:16 AM
  Subject: Re: ipmi


  Yes, I tried that.

  Still same error message.

  I am thinking its saysing there is no device node.

  I am adding it the loader.conf and rebooting ... see what happes.

  Oddly enough, there is a ipmi1 in the dev dir.

  crw-rw 1 root operator 0, 91 Aug 25 07:15 ipmi1

  -Grant
  - Original Message - 
  From: Riemer Palstra 
  To: Grant Peel 
  Cc: freebsd-questions@freebsd.org 
  Sent: Sunday, August 26, 2007 9:08 AM
  Subject: Re: ipmi


  On Sun, Aug 26, 2007 at 08:44:51AM -0400, Grant Peel wrote:
   Can anyone take my blinders off and show me what I am missing?
   
   excelsior# ipmitool sensor
   Could not open device at /dev/ipmi0 or /dev/ipmi/0 or /dev/ipmidev/0:
   No such file or directory

  Is the ipmi module loaded or compiled into the kernel?

  Usually a 'kldload ipmi' should be enough.

  -- 
  Riemer Palstra
  [EMAIL PROTECTED]

  --
  Total Control Panel Login 
  To: [EMAIL PROTECTED] Message Score: 50 High (60): Pass 
  From: [EMAIL PROTECTED] My Spam Blocking Level: High Medium (75): Pass 
  Low (90): Pass 
  Block messages from this sender (blacklist) 

  This message was delivered because the content filter score did not exceed 
your filter level. 
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED]

--
Total Control Panel  Login  
To: [EMAIL PROTECTED]  Block messages from this sender (blacklist)  
From: [EMAIL PROTECTED]  Remove this sender from my whitelist  
  
You received this message because the sender is on your whitelist.  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


flash player

2007-08-26 Thread Michael S
Good day all,

I am trying to install flash 7 from ports, I keep on
getting this message linux-flashplugin -- critical
vulnerabilities.
   Reference:
http://www.FreeBSD.org/ports/portaudit/b42e8c32-34f6-11dc-9bc9-001921ab2fa4.html

I know that I uninstalled portaudit. Is there a way to
still install the plugin?

Thanks in advance,
Michael
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: flash player

2007-08-26 Thread Oliver Herold
Yes you can diable it with make DISABLE_VULNERABILITIES=yes in the
linux-flashplugin directory.

Cheers

Oliver

On Sun, Aug 26, 2007 at 09:53:33AM -0400, Michael S wrote:
 Good day all,
 
 I am trying to install flash 7 from ports, I keep on
 getting this message linux-flashplugin -- critical
 vulnerabilities.
Reference:
 http://www.FreeBSD.org/ports/portaudit/b42e8c32-34f6-11dc-9bc9-001921ab2fa4.html
 
 I know that I uninstalled portaudit. Is there a way to
 still install the plugin?
 
 Thanks in advance,
 Michael
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
Q:  What's tiny and yellow and very, very, dangerous?
A:  A canary with the super-user password.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: flash player

2007-08-26 Thread N.J. Mann
In message [EMAIL PROTECTED], Michael S wrote:
 
 I am trying to install flash 7 from ports, I keep on
 getting this message linux-flashplugin -- critical
 vulnerabilities.
Reference:
 http://www.FreeBSD.org/ports/portaudit/b42e8c32-34f6-11dc-9bc9-001921ab2fa4.html
 
 I know that I uninstalled portaudit.

I strongly suggest you reinstall it straight away.  The gains far out
way the (supposed) pain.


 Is there a way to
 still install the plugin?

man ports

You are looking for DISABLE_VULNERABILITIES


Cheers,
   Nick.
-- 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: flash player

2007-08-26 Thread Michael S
Thanks a lot. I will try that.


--- Oliver Herold [EMAIL PROTECTED] wrote:

 Yes you can diable it with make
 DISABLE_VULNERABILITIES=yes in the
 linux-flashplugin directory.
 
 Cheers
 
 Oliver
 
 On Sun, Aug 26, 2007 at 09:53:33AM -0400, Michael S
 wrote:
  Good day all,
  
  I am trying to install flash 7 from ports, I keep
 on
  getting this message linux-flashplugin -- critical
  vulnerabilities.
 Reference:
 

http://www.FreeBSD.org/ports/portaudit/b42e8c32-34f6-11dc-9bc9-001921ab2fa4.html
  
  I know that I uninstalled portaudit. Is there a
 way to
  still install the plugin?
  
  Thanks in advance,
  Michael
  ___
  freebsd-questions@freebsd.org mailing list
 

http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to
 [EMAIL PROTECTED]
 
 -- 
 Q:What's tiny and yellow and very, very, dangerous?
 A:A canary with the super-user password.
 ___
 freebsd-questions@freebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Dell 2950: 4GB not seen (amd64; works on other 2950:s)

2007-08-26 Thread Peter Schuller
 You need to look closely at the hardware configuration for these servers
 and their motherboards.  Often some memory is reserved for things like
 onboard video, etc.  You can free up that video memory by adding a separate
 video card, but necessarily other memory that may be used by the
 motherboard.  Unfortunately with dell systems same model's don't
 necessarily mean same motherboard.  Also, how memory is used via the BIOS
 is dependent on the BIOS version.  You should try to be sure all systems
 you want to compare have the same motherboard and chipset and that these
 also have the same BIOS version.

I'll have a closer look and inquire with Dell what the intended functionality 
is (hopefully it doesn't turn out to be something that requires Windows/Linux 
to work around).

Thanks!

-- 
/ Peter Schuller

PGP userID: 0xE9758B7D or 'Peter Schuller [EMAIL PROTECTED]'
Key retrieval: Send an E-Mail to [EMAIL PROTECTED]
E-Mail: [EMAIL PROTECTED] Web: http://www.scode.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Dell 2950: 4GB not seen (amd64; works on other 2950:s)

2007-08-26 Thread Peter Schuller
 Derek triggered a thought ... I believe the 2950s have the ability to
 do RAM RAID1, to increase RAM reliability.  If that belief is correct,
 it could be that you've got 4G physically in the machine, but only 2G
 logically available to the OS.

 At least, I think I remember seeing an option like that in a BIOS ...

Now that you mention it I do think I recognize that. It would fit with the ~ 2 
GB visible memory, but on the other hand the kernel does print the full 4 GB 
during boot. But will definitely have to look into that.

Thanks!

-- 
/ Peter Schuller

PGP userID: 0xE9758B7D or 'Peter Schuller [EMAIL PROTECTED]'
Key retrieval: Send an E-Mail to [EMAIL PROTECTED]
E-Mail: [EMAIL PROTECTED] Web: http://www.scode.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Mouse suddenly gets detached and reattached

2007-08-26 Thread Bahman M.
The problem was the device itself. After testing it with other USB
ports as you suggested I found that I'd better replace it with a new
one.
Thank you.

Bahman

On 8/26/07, Pieter de Goeje [EMAIL PROTECTED] wrote:
 On Saturday 25 August 2007, Bahman M. wrote:
  Hi all,
 
  I just installed X (xorg 7.2) and am using FluxBox. It's working well
  and there are no problems. However, the mouse gets suddenly detached
  and immediately reattached. I can't say exactly how often this
  happens, roughly about 6~7 times a day.
 
  # dmesg | tail -n 4
  ums0: at uhub0 port 1 (addr 2) disconnected
  ums0: detached
  ums0: vendor 0x05e3 USB Mouse, rev 1.10/1.00, addr 2, iclass 3/1
  ums0: 5 buttons and Z dir.
 
  # sudo sysctl -a | grep ums
  dev.ums.0.%desc: vendor 0x05e3 USB Mouse, rev 1.10/1.00, addr 2, iclass 3/1
  dev.ums.0.%driver: ums
  dev.ums.0.%location: port=0 interface=0
  dev.ums.0.%pnpinfo: vendor=0x05e3 product=0x1205 devclass=0x00
  devsubclass=0x00 release=0x0100 sernum= intclass=0x03
  intsubclass=0x01
  dev.ums.0.%parent: uhub0
 
  # uname -ai
  FreeBSD attila 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 10:40:27
  UTC 2007 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC
   i386 GENERIC
 
  Is it sign of a problem? In fact I don't care about the hardware as it
  can be easily replaced, I'm afraid that there's something wrong with
  software.
 
  Thanks in advance for your help.
 
  Bahman
 An obvious test would be to connect the mouse to another usb port and/or
 controller. Maybe the mouse is flaky; try exchanging it with another. There
 could be a fracture in the mouse cord.

 Try to rule out hardware failure first.

 Hope this helps,
 Pieter de Goeje

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How to make good Squid(Proxy ) Server in FreeBSD 5.4 ?

2007-08-26 Thread Prakash Poudyal
Hello Everybody,

Can anybody give me idea related to configure the squid (proxy server). I
need to know hhow much I need to fix the cache memeory . My machine consist
of 2 GB Ram and dual processor . And operating system is FreeBSD 5.4. And I
do have client more than 500 and most of them are research orriented. And
also I am trying to configure another proxy server as for the parent proxy.
So please tell me how to make parent proxy as well. So please give me some
idea or tips so that I could run the server properly and my clients would
have a good smile in there face.

Thank you,



Prakash
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ldconfig problem after upgrade 4.11 to 5.5

2007-08-26 Thread Martin Schweizer
Hello Kris

Am Wed, Aug 22, 2007 at 09:20:51AM -0400 Kris Kennaway schrieb:
  After I updated my 4.11 to an 5.5 system (following 
  /usr/src/UPDATING), I get 
  around 63 error messages while the system boot up:
  
  ldconfig: /var/run/ld.so.hints: No such file or directory
search: trailing characters ignored
No such file or directory
  0: - lmalloc.1.1: trailing characters ignored. No such file 
  or 
  directory
  ...
  ...
  
 Looks like it might be a broken symlink.
 
 Why are you updating to 5.5 though?  You should be using 6.2.

If I'm understanding /usr/src/UPDATING correct I should first update to 
5.5 
and then to 6.2?
   
   OK.  It may have been easier (and still could be) to just do a binary
   upgrade instead.
   
Any ideas where I can check this symlink?
   
   Use find(1) to look for libmalloc.so.1.1
  
  The files are all located in /usr/lib/compat/aout. The path is defined in 
  /etc/defaults/rc.conf
  [snip]
  ldconfig_paths_aout=/usr/lib/compat/aout /usr/X11R6/lib/aout 
  /usr/local/lib/aout
  [snip]
  
  Any ideas?
 
 Are you missing aout support from your kernel?  I think it's COMPAT_AOUT.

After reading about ldconfig and playing with the parameters (see man page) I 
find out that the processing of the pathes in /etc/defaults/rc.conf isn't 
correct.
/etc/defaults/rc.conf:
[snip]
ldconfig_insecure=NO  # Set to YES to disable ldconfig security checks
ldconfig_paths=/usr/lib/compat /usr/X11R6/lib /usr/local/lib
ldconfig_paths_aout=/usr/lib/compat/aout /usr/X11R6/lib/aout 
/usr/local/lib/aout
ldconfig_local_dirs=/usr/local/libdata/ldconfig /usr/X11R6/libdata/ldconfig
# Local directories with ldconfig configuration files.
ldconfig_local32_dirs=/usr/local/libdata/ldconfig32 
/usr/X11R6/libdata/ldconfig32
# Local directories with 32-bit compatibility ldconfig
[snip]

Following this I set in /etc/rc.conf

[snip]
ldconfig_paths_aout=/usr/lib/compat/aout
[snip]

Any ideas why the kernel do not process the pathes correct?

Now it works. Thank you for your help.

-- 

Regards

Martin Schweizer
[EMAIL PROTECTED]

PC-Service M. Schweizer GmbH; Bannholzstrasse 6; CH-8608 Bubikon
Tel. +41 55 243 30 00; Fax: +41 55 243 33 22; http://www.pc-service.ch;
public key : http://www.pc-service.ch/pgp/public_key.asc; 
fingerprint: EC21 CA4D 5C78 BC2D 73B7  10F9 C1AE 1691 D30F D239;



pgpxscqlhhKE6.pgp
Description: PGP signature


Increase Disk Size in a gmirror RAID1

2007-08-26 Thread Charles Uchu Strader
Hello.  This is my first post onto the list, so please correct me if 
this is not the correct place.


The situation is I currently have a machine running gmirror RAID1 on two 
36GB disks.  That's all fine and dandy, except that those disks are 
running out of space (temporarily alleviated through an NFS mount to 
another machine).  What I'd really like to do is upsize the disks on 
that machine so that it ended with two 73GB disks.


The machine only has two drive bays.

Does anyone have ideas on how to do this, with minimal downtime and ease? 

Here's the existing partition scheme for disk da0, which is part of the 
gm0 mirror:


PartMountSizeNewfsPart
da0sa1/512MBUFS2Y
da0s1bswap4096MBSWAP
da0s1d/var4787MBUFS2+SY
da0s1e/tmp512MBUFS2+SY
da0s1f/usr6144MBUFS2+SY
da0s1g/web18675MBUFS2+SY

The goal would be a result that adds the new space into the /web 
partition, or creates a new /web2 partition if adding into the the 
existing partition is not possible.  So something like (noting /web size 
is not exact below):


PartMountSizeNewfsPart
da0sa1/512MBUFS2Y
da0s1bswap4096MBSWAP
da0s1d/var4787MBUFS2+SY
da0s1e/tmp512MBUFS2+SY
da0s1f/usr6144MBUFS2+SY
da0s1g/web48675MBUFS2+SY

What I've done so far is to forget da1 from the gm0 mirror, restart, and 
put the 73GB into drive bay two.  But now I'm at bit lost at the process 
to follow to achieve my desired result.  I'm thinking something like 
fdisk, bsdlabel, newfs on the new da1 73GB drive.  Then dd or 
dump/restore from da0/gm0 to da1.  Then shutdown, remove the 36GB da0, 
put in the second 73GB drive, boot and them get gmirror to sync things 
from the 73GB drive.


I need assistance on how to issue those commands properly to achieve 
this result.


I have a test machine I can do this on, so I will continue to learn/play 
in the meantime.


Thanks,

Charles Uchu


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


List of legal Wireless bands

2007-08-26 Thread Steven
Hi I am looking for a list of wireless bands and sub bands that can be
freely used for a private home network.

 

Thanks in advance

Steven

 

 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


filesystem types

2007-08-26 Thread Jim Pazarena

I installed an amd 64 bit 6.2 freebsd with the default filesystem (on 3 drives)
and my MySQL seems to have a 4Gb limit. Is there another filesystem I can select
which bypasses this limit?

Where can I read about available filesystems on FreeBSD?

Thanks.
Jim

2nd post. I think I screwed up the first post. sorry for the bandwidth.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: filesystem types

2007-08-26 Thread Erik Trulsson
On Sun, Aug 26, 2007 at 09:41:35AM -0700, Jim Pazarena wrote:
 I installed an amd 64 bit 6.2 freebsd with the default filesystem (on 3 
 drives)
 and my MySQL seems to have a 4Gb limit. Is there another filesystem I can 
 select
 which bypasses this limit?

The default filesystem in FreeBSD does not have any 4GB limitation.
If you have run into such a limit it is something else that is responsible
for the limit - probably the application you are using.



 
 Where can I read about available filesystems on FreeBSD?
 
 Thanks.
 Jim
 



-- 
Insert your favourite quote here.
Erik Trulsson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


send newsletter to me

2007-08-26 Thread Mike
send newsletter to me or can i download them at your site?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Postfix/SpamAssassin Guru?

2007-08-26 Thread Noel Jones
On 8/25/07, Eric Crist [EMAIL PROTECTED] wrote:

 On Aug 24, 2007, at 11:26 PMAug 24, 2007, Noel Jones wrote:

 [snip]

  an easier way is to run spamassassin under the control of amavisd-new
  and let amavisd-new add address extensions such as user+spam and to
  let dovecot file the mail in a spam folder.

 Noel,

 Are you saying I just need amavisd-new installed and properly
 configured?  Is there something I need to tell dovecot?

 A bit more information in regards to where I can look for
 documentation would be appreciated!


look in the amavisd-new, dovecot, and postfix docs for recipient
delimiter.  Followup questions should go to the list for one of those
projects.

-- 
Noel Jones
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: List of legal Wireless bands

2007-08-26 Thread Pollywog
On Sunday 26 August 2007 17:15:35 Steven wrote:
 Hi I am looking for a list of wireless bands and sub bands that can be
 freely used for a private home network.

I believe that would depend on the country of one's residence.  What is legal 
in one country might run one afoul of the law (and their neighbors) in 
another.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: List of legal Wireless bands

2007-08-26 Thread Martin Laabs

Hi Steven,


Hi I am looking for a list of wireless bands and sub bands that can be
freely used for a private home network.


you can't answer this question in general. The frequency-bands
that you are allowed to use without special regulation are country
specific. The most commen bands are the ISM bands at approp. 27MHz,
433MHz, 860MHz and 2.4GHz.
Detailed start and stop frequencies (and other restrictions) often
depends on the regulations in your country but some intervals are
nearly international usable.

Bye,
  Martin L.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: TCP packets don't flow from external hosts to WinVista clientsbehind

2007-08-26 Thread mich . admin
 
 MIZ0 [EMAIL PROTECTED] wrote:
 
Could be TCP window scaling. See
http://en.wikipedia.org/wiki/TCP_window_scale_option
Or the plain old PMTUD problem described in

  http://www.cisco.com/en/US/tech/tk870/tk877/tk880/technologies_tech_note09186a008011a218.shtml#backinfo
   
=Adriaan=
  
  Nothing helps.
  I've tried to change client's mtu, even shrinked packets with ng_tcpmss 
  - no effect.
  I don't understand why freebsd machines from internal network can't 
  establish  any TCP connection to external net too.
 
 Sounds to me like you need to carefully go over your network setup.  Have
 you verified that the problem machines correctly have all the information
 they need: proper netmasks, routers, etc?  Run tcpdump on both
 interfaces of the gateway and see if that provides any hint.
 
 I have a strong suspicion that you're looking in the wrong place --
 otherwise you would have found the problem.  Are there two DHCP servers
 on this network?  Wouldn't be the first time I saw that problem mess with
 someone's head.
 
 With the information you've provided so far, we're guessing in the dark.
 I doubt that ipfw is the culprit, but it's going to take more information
 to be sure.
 
  Can ipfw or netgraph detect client's OS type and allow only Windows XP ? =))
 
 Potentially, but I can't see it doing that by accident.
 
 -- 
 Bill Moran
 http://www.potentialtech.com

Network settings are ok, there're no any DHCP server in my net.

Router's interfaces.
rl0 (ISP): flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=8VLAN_MTU
inet 85.249.249.249 netmask 0xff00 broadcast 85.249.249.255
ether 00:11:95:5b:84:47
media: Ethernet autoselect (100baseTX full-duplex)
status: active
fxp0 (Internal Net) flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
options=8VLAN_MTU
inet 10.0.0.2 netmask 0xff80 broadcast 10.0.0.127
ether 00:d0:b7:a0:95:cf
media: Ethernet autoselect (100baseTX full-duplex)
status: active

I've run telnet ya.ru 80 under Windows XP:

fxp0:
02:34:04.717756 IP (tos 0x0, ttl 127, id 54374, offset 0, flags [DF], proto: 
TCP (6), length: 48) 10.0.0.3.2723  ya.ru.http: S, cksum 0x51a0 (correct), 
835980332:835980332(0) win 16384 mss 512,nop,nop,sackOK
-
02:34:04.755485 IP (tos 0x0, ttl  54, id 5070, offset 0, flags [DF], proto: TCP 
(6), length: 48) ya.ru.http  10.0.0.3.2723: S, cksum 0x326f (correct), 
3512433525:3512433525(0) ack 835980333 win 4096 mss 1360,sackOK,eol
-
02:34:04.756316 IP (tos 0x0, ttl 127, id 54375, offset 0, flags [DF], proto: 
TCP (6), length: 40) 10.0.0.3.2723  ya.ru.http: ., cksum 0x28be (correct), ack 
1 win 17680


rl0:
02:34:04.720584 IP (tos 0x0, ttl 126, id 54374, offset 0, flags [DF], proto: 
TCP (6), length: 48) 85.249.249.249.2723  ya.ru.http: S, cksum 0x5221 
(correct), 835980332:835980332(0) win 16384 mss 512,nop,nop,sackOK
-
02:34:04.754547 IP (tos 0x0, ttl  55, id 5070, offset 0, flags [DF], proto: TCP 
(6), length: 48) ya.ru.http  85.249.249.249.2723: S, cksum 0x32f0 (correct), 
3512433525:3512433525(0) ack 835980333 win 4096 mss 1360,sackOK,eol
-
02:34:04.758703 IP (tos 0x0, ttl 126, id 54375, offset 0, flags [DF], proto: 
TCP (6), length: 40) 85.249.249.249.2723  ya.ru.http: ., cksum 0x293f 
(correct), ack 1 win 17680


And now i've trying to telnet ya.ru 80 under FreeBSD (i used ip 10.0.0.3 
instead of WinXP)
fxp0:
02:09:52.627482 IP (tos 0x10, ttl  64, id 3657, offset 0, flags [none], proto: 
TCP (6), length: 64) 10.0.0.3.61654  ya.ru.http: S, cksum 0x319a (correct), 
2498390137:2498390137(0) win 65535 mss 512,nop,wscale 1,nop,nop,timestamp 
76265599 0,sackOK,eol
***It repeats 3-5 times, then telnet returns Connection Timed Out 
error***

rl0:
02:09:52.631529 IP (tos 0x10, ttl  63, id 3657, offset 0, flags [none], proto: 
TCP (6), length: 64) 85.249.249.249.61654  ya.ru.http: S, cksum 0x321b 
(correct), 2498390137:2498390137(0) win 65535 mss 512,nop,wscale 
1,nop,nop,timestamp 76265599 0,sackOK,eol
-
02:09:52.665396 IP (tos 0x0, ttl  55, id 2, offset 0, flags [DF], proto: 
TCP (6), length: 64) ya.ru.http  85.249.249.249.61654: S, cksum 0x077a 
(correct), 45449397:45449397(0) ack 2498390138 win 4096 mss 1360,nop,wscale 
0,nop,nop,timestamp 1643393506 76265599,sackOK,eol
-
02:09:52.665423 IP (tos 0x0, ttl  64, id 56014, offset 0, flags [DF], proto: 
TCP (6), length: 40) 85.249.249.249.61654  ya.ru.http: R, cksum 0x6450 
(correct), 2498390138:2498390138(0) win 0

I gave up =(
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: xfce 4.4 questions

2007-08-26 Thread Predrag Punosevac
I told you before. You should not have snapped the ports during the 6.1 
installation and you should not have used CD to get Xfce. What you now 
have is a light version of Xfce 4.2.
Metaport probably doesn't work because your port three is not up today 
or you have some dependency issues in particular related to the fact 
that you have XOrg 6.9 vs XOrg 7.2. I need some output form the compiler 
to say anything more about this.  My guess is as good as yours. I hope 
some more knowledgeable says something.


The thinks which will not work are auto mounting, CD/DVD players, CD 
ripping, printing pretty much anything that needs permissions links and 
enabling in rc.conf file.
The Handbook is exceptionally written but you really need to know it to 
do full configuration your-self. The hand book is also very wide in 
scope and is not written for particular group of users (Desktop for 
instance) The following document
is also very useful http://www.freebsd.org/  and is mostly written for 
Desktop users like you and me.
It talks about configuring Gnome but the same goes for any full Desktop 
like KDE or Xfce. The easiest way to configure Xfce is to

copy configuration files from FreeSBIE (Based on FreeBSD 6.2)
project http://www.freesbie.org/ which uses Xfce as its default desktop 
environment. You could
also use their live CD to check your hardware since if it not working 
with FreeSBIE it is likely it will need some extra configuration with

FreeBSD or it might not work at all (like some audio card of Wi device)

I hate to suggest this but if you are  finding  configuration  
overwhelming (the fact that you seems unaware of the fact no daemons 
will work until you enable it in rc.conf file is an indication) you 
should probably try to install PC-BSD or DesktopBSD versions of FreeBSD. 
With a little bit luck with your hardware you will get fully functional 
KDE desktop environment and everything would work out of box.
After playing it with couple of weeks you will fill ready to do full 
customized installation your self or to disable KDE and use maybe some 
light Window Manager instead. I think Xfce should not have any 
dependency issues with KDE so you would be able just to turn of KDE 
install Xfce meta port and have everything working.


Richard Deal wrote:
Thanks for the quick and insightful response, Predrag. I'm sure I'm 
making some mistakes, after all I am by admission a newbie here. 
Please see my  comments below.


cheers

Predrag Punosevac wrote:
Meta port installs the whole thing. My immediate hunch is that you 
are making several mistakes. Is your port tree updated?
Why did you use CD to install the Xfce? Why do you want to use 
pkg_add utility. What about Xorg.
 If a Metaport installs the whole thing, then why isn't working? 
At first, I installed Xfce4 from /usr/ports/x11-wm/xfce4/ (make 
install clean) after performing a full install, including the ports 
tree, from the 6.1 Release CD's I downloaded. This installed Xfce4.2, 
but as I mentioned in my original message, several default features 
were broken, such as the xfterm menu/options bar (please see original 
message). Why did I use pkg_add? -- Because after several unsuccessful 
attempts to install from CD, and doing some research, I thought, why 
not - the CD install isn't working. What about Xorg, you ask? Well, 
what do you want to know? Whatever version came with the 6.1 Release 
is what I'm using. Forget about Xfce4.4 for the moment; if Xfce4.2 AND 
Xorg came bundled with the 6.1 CD Release, they _should_ be 
compatible. Btw, I did run through xorgconfig prior to installing 
Xfce4, before attempting two types of installs: 'make install' 
locally, and (after a fresh reinstall of the OS) 'pkg_add -r xfce4' as 
it states in the Handbook.


Quick instruction would take only 10 minutes but then you need XOrg 
and Xfce which will take couple hours to compile.


Do fresh minimal installation without X. When the installer ask you 
about adding port tree you decline. The same when installer ask you to

add any of the packages from the second CD.

Then after installation cvsup the system and build your world and/or 
custom kernel as you like it. You will be fine without cvsup and with 
generic kernel.


do

portsnap fetch  portsnap extract

then go to /usr/ports and install XOrg via ports (do not use pkg_add 
since you will get XOrg 6.9 instead of 7.2)

Then go to Xfce 4.4 meta port and do make install clean.

You will have complete Xfce which still doesn't mean that all things 
will work since you need to edit fstab, devfs.conf and rc.conf files
 Ok. But...what exactly won't work? Where can I find some docs which 
detail what I have to do with fstab, devfs.conf and rc.conf files in 
order to _make_it_ALL_work_? Sorry, but the Handbook just is NOT all 
that clear.


Have Fun
Predrag


P.S. You can not get Xfce 4.4 since you do not even have XOrg 7.2
 As I stated in my original message, I really don't care about 
Xfce4.4 right now; I'll settle for 

How do I force ucom to attach?

2007-08-26 Thread Thomas D. Dean
# uname -a
FreeBSD asus.tddhome 6.2-STABLE FreeBSD 6.2-STABLE #2: \
  Fri Jun 22 10:14:36 PDT 2007 \
  [EMAIL PROTECTED]:/usr/src/sys/i386/compile/GENERIC  i386

I have a Prologix USB to GPIB adapter.  I had it working, using
/dev/cuaU0.  Then, I rebooted the system.  No other changes.  I do not
remember the what I did initially to get it working.

Now, dmesg shows the device attaches to ugen0 and /dev/cuaU0 does not
exist.

I disconnnected the device, loaded ucom, reconnected the device.  Same
result.

How do I get the device to attach to ucom?

tomdean

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


/bin/[

2007-08-26 Thread Jim Stapleton
Sorry if you get this question a lot - a few searches didn't find
results for me.

I have a /bin/[ file in my system - I just want to make sure it's
not a sign of someone having hacked my machine.

Thanks,
-Jim Stapleton
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /bin/[

2007-08-26 Thread Jeff Mohler
*heh*

DONT remove that.its normal.



On 8/26/07, Jim Stapleton [EMAIL PROTECTED] wrote:

 Sorry if you get this question a lot - a few searches didn't find
 results for me.

 I have a /bin/[ file in my system - I just want to make sure it's
 not a sign of someone having hacked my machine.

 Thanks,
 -Jim Stapleton
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /bin/[

2007-08-26 Thread Joshua Isom
If you look at /etc/rc, the shell script that boots your system, you'll 
notice [ being called quite often.  For better understanding, look at 
`man 1 [`.


On Aug 26, 2007, at 3:57 PM, Jim Stapleton wrote:


Sorry if you get this question a lot - a few searches didn't find
results for me.

I have a /bin/[ file in my system - I just want to make sure it's
not a sign of someone having hacked my machine.

Thanks,
-Jim Stapleton
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /bin/[

2007-08-26 Thread Garrett Cooper

Jeff Mohler wrote:

*heh*

DONT remove that.its normal.



On 8/26/07, Jim Stapleton [EMAIL PROTECTED] wrote:
  

Sorry if you get this question a lot - a few searches didn't find
results for me.

I have a /bin/[ file in my system - I just want to make sure it's
not a sign of someone having hacked my machine.

Thanks,
-Jim Stapleton
   '[' is an extension of the test(1) program, an essential part for 
evaluating shell-related logic.

-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /bin/[

2007-08-26 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Jim Stapleton wrote:
 Sorry if you get this question a lot - a few searches didn't find
 results for me.
 
 I have a /bin/[ file in my system - I just want to make sure it's
 not a sign of someone having hacked my machine.

No -- that's perfectly alright.  If you look closely you can see
that it is in fact identical to /bin/test:

% ls -lai test '['
871508 -r-xr-xr-x  2 root  wheel  7652 Aug 18 12:31 [*
871508 -r-xr-xr-x  2 root  wheel  7652 Aug 18 12:31 test*

It's used for testing various conditions in shell scripts -- like
this for example:

   [ x$foo != x ]  echo \$foo is set to $foo

which could be written equivalently as:

   test x$foo != x  echo 2\$foo is set to $foo

The curious name is historic, based on some early shells where there
was a built-in syntax using the '[' character.  Having test or [ as
an external program means that all the standard shell on FreeBSD can
 use exactly the same test syntax and theres only one copy of the
code to keep maintained in the source tree.

Cheers,

Matthew

- --
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
  Kent, CT11 9PW
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG0e2e8Mjk52CukIwRCElMAJ40jLDH5y/TKKUJ7uT5Mv84LdnZgQCdG5Iy
4Y3I0l4+Hv9WMZTvl1jri64=
=xzZw
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: xfce 4.4 questions

2007-08-26 Thread Erik Trulsson
On Sun, Aug 26, 2007 at 02:24:40PM -0400, Richard Deal wrote:
 Thanks for the quick response. A bit more detail would be more helpful; 
 please see my  comments below.
 - r
 Thanks,


A couple of notes about e-mail conventions first:
  A common convention is to mark *quoted* lines with a preceding '' character
  (this is usually done by the mail program when you reply to a mail.)
  IF you quote somebody who has quoted somebody else then those lines
  will be marked with '' etc. 
  Your usage of '* to mark *new* lines clashes badly with this convention
  and makes it difficult to see what was added and what was quoted.
  Try to do things differently in the future.

  Also when replying to a post on a mailing list it is usually a very good
  idea to send the reply to the list also and only to the individual
  who wrote what you are replying.  This gives other people a chance to add
  their knowledge too.
  I have add a Cc: back to the freebsd-questions@ list



As for your questions:

A small warning first: Personally I almost never use binary packages,
preferring instead to install directly via the ports system - which gives me
a bit more control over the process, at the cost of it taking longer to
compile and install things.  This means that I have little experience with
the binary packages.


I suspect that your problems with xfce-4.2 where you are missing some
features is due to one of:
a) Those features depend on some optional component that you have not
installed
b) You simply haven't configured xfce4 correctly.
c) You misunderstood the documentation in some way.
d) A bug in xfce itself.
In most of those cases the best place to ask is the xfce developers.



For general information about ports and packages you should read the
relevant parts of the FreeBSD handbook first which explain many things
better than I can:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ports.html




 - r
 
 
 Erik Trulsson wrote:
 On Sat, Aug 25, 2007 at 06:11:42PM -0400, Richard Deal wrote:
   
 Folks,
 
 I'm trying to install xfce 4.4 on my FreeBSD 6.1 box, (which I just 
 upgraded via sysinstall). It ain't workin' and I sure could use some 
 help. Full disclosure: I'm new to FreeBSD, although I do have a basic 
 working knowledge of *nix fundamentals.
 
 I was able to install xfce 4.2, but the install is broken -- allow me to 
 explain. Xfce 4.2  does install, I can start it, but several features 
 don't work. For example, according to the docs I should see a menu bar 
 (and options) on xfterm, but it isn't there. Several other install 
 defaults are busted too. I've reinstalled the OS several times from a 
 'minimal' install to 'install EVERYTHING', via the CD, upgrades via 
 sysinstall, via FTP. All were successful). I've installed  XFCE4 
 according to your docs (pkg_add -r xfce4) several times, and from 
 /usr/ports/x11-wm/xfce4 (make install clean), but still the same 
 problems. So, I thought I'd try installing a newer version of xfce (4.4).
 
 First question: what is a 'meta port', what does it do and what are it's 
 limitations?
 
 
 A 'meta port' is a port which doesn't install anything itself, but just
 depends on a bunch of other ports so that they can all get pulled in
 automatically.
   
  Well, as I suspected, but in this case it they don't all seem to be 
 pulled in automatically. What am I missing? Are there any logs detailing 
 the successes/failures?

If you install via the ports system, then any error messages should be
printed right on the screen.
If something does go wrong the exact wording of any error messages will
be very useful to figure out what the problem is.


   
 Can't find anything in your docs that speak to this (nor any of the books 
 I have, most notably the recent 'FreeBSD 6 Unleashed'). Reading the Ports 
 page of your site, specifically the *xfce-4.4.1_1 
 http://www.FreeBSD.org/cgi/cvsweb.cgi/ports/x11-wm/xfce4   *metaport; 
 'meta' seems to imply run this and you'll install all the basics you 
 need to run XFCE 4.4. Either it doesn't work or I've misinterpreted 
 this. Under xfce-4.4.1, it says: Requires: -- do I really have to 
 install _every_single_pkg_listed_ BEFORE I install the xfce-4.4.1 
 metaport??? If so, that seems a bit much. Why can't there be a single 
 manifest file which calls/installs all those required pkg's as a part of 
 the metaport installation? In order to install xfce 4.4, do I have to 
 manually install each and every file/port/pkg listed there which 
 references xfce4.4?
 
 
 No,no.  The point of the ports system/packages is that all the required
 ports will be pulled in and installed automatically.
 
   
  Again, to use a local colloquialism: it ain't workin'. Not everything 
 needed is being pulled in as you say -- I need help in determining why.
 After doing a fresh OS install (6.1) from CD (X-Kern-Developer package), 
 followed immediately by an upgrade (via sysinstall/FTP) which included an 
 istall of the entire ports tree, I 

Re: Increase Disk Size in a gmirror RAID1

2007-08-26 Thread Charles Uchu Strader
So it looks like I came up with a resolution myself on this.  Here's a 
post for posterity or any comments:



What I've done so far is to forget da1 from the gm0 mirror, restart, 
and put the 73GB into drive bay two.  But now I'm at bit lost at the 
process to follow to achieve my desired result.  I'm thinking 
something like fdisk, bsdlabel, newfs on the new da1 73GB drive.  Then 
dd or dump/restore from da0/gm0 to da1.  Then shutdown, remove the 
36GB da0, put in the second 73GB drive, boot and them get gmirror to 
sync things from the 73GB drive.




So my resolution to upsizing the disk was to utilize gmirror (rather 
than dump/restore or dd).  Here's what I did:


1) Sync the existing smaller disk (da0 / 36GB) to the new larger disk 
(da1 / 73GB) now in the machine using gmirror.


2) Remove da0 from the gmirror:

# gmirror remove gm0 da0

3) Edit /etc/fstab so that after the next reboot it will boot as if only 
a single disk, instead of the gmirror /dev/mirror .  Also comment out: 
geom_mirror_load=YES in /boot/loader.conf


4) Shutdown and power down.  Take out 36GB from drive bay 1.  Take 73GB 
from drive bay 2 and put into drive bay 1.  Start the server back up and 
da0 is now the 73GB drive.


5) Now, since gmirror applied its slice and disklabel partition, 
checking disk usage shows that the system sees the disk still as a 36GB 
and the /web partition I wanted to increase was still at 18GB, instead 
of the 51GB I needed.  To fix that I did the following:


# fdisk -u /dev/da0  (just following the standard prompts, only needing 
to change the total byte size from from 71119692 (36GB) to 143363997 
(73GB) when that prompt came up)


# disklabel -e /dev/da0s1  (updated the disk labels so that c: had the 
new 143363997 value and so that g: (the /web partition) had the new 
value 110491549.


# umount /web

# newfs  -U /dev/da0s1g

# mount /dev/da0s1g /web

6) Edit the /etc/fstab to restore it to the gmirror style references, 
instead of single disk.  And uncomment out: : geom_mirror_load=YES in 
/boot/loader.conf


Then also:

# gmirror label -v -b round-robin gm0 /dev/da0

7) Shutdown and power down.  Add the second new 73GB drive into bay 2.  
Restart the server and once booted back in get both bigger drives in 
sync with gmirror and everything is good to go!


# gmirror insert gm0 da1

...

(Caveat)  I've only done this on a test machine with no activity and no 
data in the /web partition.  Before I do this on a live server, I'll 
probably run the whole process again with data in /web and see how it 
all does.


Any comments or thoughts about this process, would love feedback. 


~Charles Uchu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: filesystem types

2007-08-26 Thread CyberLeo Kitsana
Jim Pazarena wrote:
 I installed an amd 64 bit 6.2 freebsd with the default filesystem (on 3
 drives)
 and my MySQL seems to have a 4Gb limit. Is there another filesystem I
 can select
 which bypasses this limit?
 
 Where can I read about available filesystems on FreeBSD?

http://jeremy.zawodny.com/blog/archives/000796.html

The above blog entry indicates that MyISAM tables on x86 platforms have
a limit of 4GB or around 4.2 billion rows, depending on create options,
due to a limitation in MyISAM's index algorithms.

It does say that the limit is raised on 64-bit platforms, so are you
sure you compiled MySQL for amd64?

The InnoDB storage engine does not have this limitation.

-- 
Fuzzy love,
-CyberLeo
Technical Administrator
CyberLeo.Net Webhosting
http://www.CyberLeo.Net
[EMAIL PROTECTED]

Furry Peace! - http://.fur.com/peace/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: send newsletter to me

2007-08-26 Thread [EMAIL PROTECTED]
On 26/08/07, Mike [EMAIL PROTECTED] wrote:
 send newsletter to me or can i download them at your site?

If you are looking for the quarterly status reports, I believe
they are sent out on the [EMAIL PROTECTED] list,
or you can look at them on:
http://www.freebsd.org/news/status/

-- 
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Increase Disk Size in a gmirror RAID1

2007-08-26 Thread [EMAIL PROTECTED]
On 26/08/07, Charles Uchu Strader [EMAIL PROTECTED] wrote:
 So it looks like I came up with a resolution myself on this.  Here's a
 post for posterity or any comments:
 
 
  What I've done so far is to forget da1 from the gm0 mirror, restart,
  and put the 73GB into drive bay two.  But now I'm at bit lost at the
  process to follow to achieve my desired result.  I'm thinking
  something like fdisk, bsdlabel, newfs on the new da1 73GB drive.  Then
  dd or dump/restore from da0/gm0 to da1.  Then shutdown, remove the
  36GB da0, put in the second 73GB drive, boot and them get gmirror to
  sync things from the 73GB drive.
 

 So my resolution to upsizing the disk was to utilize gmirror (rather
 than dump/restore or dd).  Here's what I did:

 1) Sync the existing smaller disk (da0 / 36GB) to the new larger disk
 (da1 / 73GB) now in the machine using gmirror.

 2) Remove da0 from the gmirror:

 # gmirror remove gm0 da0

 3) Edit /etc/fstab so that after the next reboot it will boot as if only
 a single disk, instead of the gmirror /dev/mirror .  Also comment out:
 geom_mirror_load=YES in /boot/loader.conf

 4) Shutdown and power down.  Take out 36GB from drive bay 1.  Take 73GB
 from drive bay 2 and put into drive bay 1.  Start the server back up and
 da0 is now the 73GB drive.

 5) Now, since gmirror applied its slice and disklabel partition,
 checking disk usage shows that the system sees the disk still as a 36GB
 and the /web partition I wanted to increase was still at 18GB, instead
 of the 51GB I needed.  To fix that I did the following:

 # fdisk -u /dev/da0  (just following the standard prompts, only needing
 to change the total byte size from from 71119692 (36GB) to 143363997
 (73GB) when that prompt came up)

 # disklabel -e /dev/da0s1  (updated the disk labels so that c: had the
 new 143363997 value and so that g: (the /web partition) had the new
 value 110491549.

 # umount /web

 # newfs  -U /dev/da0s1g

 # mount /dev/da0s1g /web

 6) Edit the /etc/fstab to restore it to the gmirror style references,
 instead of single disk.  And uncomment out: : geom_mirror_load=YES in
 /boot/loader.conf

 Then also:

 # gmirror label -v -b round-robin gm0 /dev/da0

 7) Shutdown and power down.  Add the second new 73GB drive into bay 2.
 Restart the server and once booted back in get both bigger drives in
 sync with gmirror and everything is good to go!

 # gmirror insert gm0 da1

 ...

 (Caveat)  I've only done this on a test machine with no activity and no
 data in the /web partition.  Before I do this on a live server, I'll
 probably run the whole process again with data in /web and see how it
 all does.

 Any comments or thoughts about this process, would love feedback.

Given your restricted circumstances, I would probably
have yanked one half of the old mirror (obviously after
a careful backup*) put in one of the new disks, created
a second (now degraded mirror), do whatever slice
and partition business needed to be done, dump/restore,
modify fstab, shutdown, yank other half of old mirror,
insert new disk, boot, add to mirror, sync (hopefully).
Hotswap would be really super, though.  Maybe saving
you rebooting at all.

Also, if drive cabling were sufficient (and controllers)
you could just let it all hang out while you moved
everything, and then tidied up once everything was
copacetic.


* I say I would, but in reality, I would probably just wing it.
. . .
And suffer.

-- 
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD MBRs

2007-08-26 Thread Christopher Key

Ivan Voras wrote:

Christopher Key wrote:


I've a machine with 3 SATA drives.  The first (ad8) with a standard
FreeBSD install in a single slice with /boot/boot0 MBR.  The remaining
two drives (ad10, ad12) are in a RAID1 mirror with 3 slices, and used
for storing data.  They have the /boot/mbr MBR.


Ok. Let's call them the first (ad8), second (ad10) and third (ad12) 
drive



After booting off various USB flash drives to try and update the BIOS on
my machine, it got into a state where during startup, it would display
'Missing operating system' and hang.  What seems to have been happening
is that it was trying to boot from one of my data store drives, despite
the boot order of the disks set in the BIOS.


Flashing the BIOS often resets all settings, including boot order. 
Depending on your BIOS, controller and motherboard, you might need to 
first select the active controller, then the drive on the controller. 
In your case, you need to finally tell BIOS to boot of the first drive 
(ad8).


Another thing that might be happening (though judging from what you 
said elsewhere it's not probable) is that the changed BIOS code 
enumerates devices differently than it used to, so ad8 is no longer 
the drive with boot0. This case will not hurt your RAID if you used 
gmirror, it might for other systems.



The only solution that I found was to start booting from a USB flash
drive with a boot0 MBR, and to hit F5 to change to booting from my first
drive  After this, the machine then reboots quite happily until I hit F5
again, in which case I get the same 'Missing operating behavior'.  This
persists even while power cycling the machine.


Ok, so now you're booting from the first drive, and with F5 you're 
telling your boot loader to skip it and move on to the second drive, 
which has the standard mbr (this mbr is what's displaying the Missing 
operating system message).



I had imagined the boot process to be entirely stateless, certainly
across power cycles.  The BIOS executes the MBR on the first drive in
its boot boot.  The boot0 MBR then allowed you to either execute the
boot sector from any of the slices on the current drive, or to execute
the MBR from the next drive in the list.


boot0 will by default remember what's the last option you booted from 
and use it as the default for the next time. It may not be the best 
thing for you, but I found it to be extremely useful behaviour in 
several cases, since it allowed me to script a boot order when the 
BIOS and the disk controller didn't get along for booting.



However, this clearly isn't what's happening.  Is it boot0 remembering
my F5 key stroke, or is it more likely that the BIOS is remembering
something?  Does anyone have any recommendations to avoid this in the
future?  Is putting boot0 on all three drives a good idea perhaps?


It will not hurt in any case to put boot0 on any drives (as long as 
you do it with the appropriate utility, else you may destroy the 
partition table). In your case, it will only be useless.


Here's something to try (I didn't try it): Do you have active 
partitions on the second and the third drive? If so, you might want to 
unmark them, and hopefully the boot loader won't display the drives in 
the boot menu. Maybe.


Or, if you're seriously worried about hitting F5 during boot, you 
might try an alternative boot loader such as sysutils/extipl or 
sysutils/grub.

Hello All,

Many thanks Ivan, Lowell, Jerry and Alex for your feedback.  I've done 
some experimentation, and had a read of the boot0 and mbr source code, 
and I think I know what's going on now:


When executed, boot0 retains a copy of the partition (slice) table in 
memory, and in it, marks each slice as being inactive.  When you hit 
F1-F4 to boot one of those partitions, it marks the selected slice as 
active, rewrites the partition table to the disk, and executes the 
appropriate boot sector for that slice.  If on the other hand you hit 
F5, it writes the partition table back out *without an active slice*, 
and executes the MBR from the next disk.


In my case, when I hit F5, boot/mbr was executed from my second disk, 
which displays 'Missing operating system' if there is an active slice 
but no magic number in the boot sector for that slice.  Now, as far as I 
can tell, when I next attempted to boot my system having hit F5 
previously, the BIOS didn't attempt to boot from my first drive because 
there was no active slice.  It instead tried to boot from my second 
drive, hence giving me the message 'Missing operating system'.


Now, when I inserted the USB drive and tried to boot, the BIOS saw the 
there was an active slice on it, and executed boot0 from it.  When I 
then hit F5 to switch to my first harddrive, boot0 was loaded fro it, 
and showed its default option as F5, having remembered that from last 
time.  If I then hit F1 to boot from the first slice on that disk, boot0 
would mark the first slice as active in the partition table and write 
that back to 

How Swe-e-e-et It Is!!

2007-08-26 Thread Mary Evans
This is for anybody struggling with FreeBSD who might need some encouragement.

I wanted to install nxserver from Nomachine.com. There is a port of the 
sources, along with an open-source implementation of the rest of it.

I have been trying to make the ^^%$!!! thing work for [pick a big number. . . 
any BIG number] of days, and I just couldn't figure out what the double 
hockey-sticks was going wrong.

I tried both the ports and the package installs, but I screwed up the 
configuration BIG-TIME!

I finally decided I had learned too much, and was trying too hard.  I decided 
one more try . . . after all, I'm eventually going to move this installation 
over to my primary computer and dump windows - - except as a program that runs 
under FBSD - - and I won't even need it.

I gave it one more chance, after hunting down and eliminating every single 
reference to nxserver, both on my Winblow$ machine and on the FBSD box.

I did an install, and then I just fired up the client on Winblow$.  First time, 
it didn't connect, but I don't recall why just now.  (I'm two beers into it, 
and I don't really care why!), but I fixed it, and  IT WORKS!

I am so excited!  Jeez, you'd think I won the Powerball drawing!

But to anybody who's struggling, keep struggling.  The pay-off is HUMONGUS, in 
terms of the great feeling of satisfaction you get when something really 
succeeds.

I'm going to try to look at what notes I took (when I sober up), so I can 
document it and be able to help somebody else.  

For right now, WHOO-HOOO!
I'm gonna open another Bud Lite!

Hang in there!

Marye
P.S.  I think you probably gotta have a healthy dose of nerd to keep trying . 
. .that, or OCD.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /bin/[

2007-08-26 Thread Jim Stapleton
Thanks everyone for the help. I tried using man, but it didn't find
anything. Glad to know my system isn't compromised.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /bin/[

2007-08-26 Thread Garrett Cooper

Jim Stapleton wrote:

Thanks everyone for the help. I tried using man, but it didn't find
anything. Glad to know my system isn't compromised.


   When searching for many shell sensitive commands and characters ('[' 
included), single-quoting the query will help you find what you need to 
find.

Cheers,
-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Named

2007-08-26 Thread Narek Gharibyan
Has Anyone tried to use Named under windows? What are results?

 

Regards,

Narek

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Named

2007-08-26 Thread Noel Jones
On 8/25/07, Narek Gharibyan [EMAIL PROTECTED] wrote:
 Has Anyone tried to use Named under windows? What are results?


I used bind on windows a couple years ago.  Seemed to work as expected.
Official binary packages for Windows are available from isc.org

-- 
Noel Jones
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: harassed by mplayer on FreeBSD-6.1-R amd64

2007-08-26 Thread luizbcampos
 sorry, Roland, it will be no use this script of yours...

On 8/24/07, Roland Smith [EMAIL PROTECTED] wrote:

 On Fri, Aug 24, 2007 at 12:33:19PM -0300, [EMAIL PROTECTED] wrote:
  Hi, everybody...I've downloaded mplayer but there is not a graphical
  interface... and how do I configure it?

 It is configured in the default build. It is called 'gmplayer'.  But you
 might want to try building mplayer locally, so you can make a better
 choice wrt the codecs you want. E.g, in the default build, the H.264
 codec is not enabled. Neither are the esound or arts sound
 systems.

 Add your choice of dvd devices to /etc/make.conf;

 .if ${.CURDIR:M*/multimedia/mplayer}
 WITH_DVD_DEVICE=/dev/cd1
 WITH_CDROM_DEVICE=/dev/cd1
 .endif

 Deinstall the package, then go to /usr/ports/multimedia/mplayer,
 and issue 'make config' and then 'make install clean' as root.

 Roland
 --
 R.F.Smith   http://www.xs4all.nl/~rsmith/
 [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
 pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FIFO overflow error

2007-08-26 Thread Aminuddin Abdullah
I've been getting a lot of this error on one of my FreeBSD 6.2 boxes. I have
5 other servers running the same configurations as this one and none of them
is giving me the error.

The only different between this and the other servers is AMD on this one and
Intel on the rest.

 

The repeated errors given were:

 

vr0: receive error (0406) overflow

vr0: rx error (09): FIFO overflow

vr0: rx error (09): FIFO overflow

vr0: receive error (0407) overflow

vr0: rx error (09): FIFO overflow

vr0: receive error (0407) overflow

vr0: receive error (0404) overflow

vr0: rx error (09): FIFO overflow

vr0: receive error (0404) overflow

vr0: rx error (09): FIFO overflow

vr0: receive error (0404) overflow

vr0: rx error (09): FIFO overflow

vr0: rx error (09): FIFO overflow

vr0: receive error (0407) overflow

vr0: rx error (09): FIFO overflow

vr0: receive error (0407) overflow

vr0: receive error (0404) overflow

vr0: rx error (09): FIFO overflow

vr0: watchdog timeout

vr0: rx error (09): FIFO overflow

vr0: receive error (1405) overflow

vr0: rx shutdown error!

vr0: restarting

 

..

Netstat -m does not shows any memory issues.

$ netstat -m

8512/8918/17430 mbufs in use (current/cache/total)

6992/6630/13622/65536 mbuf clusters in use (current/cache/total/max)

6928/6512 mbuf+clusters out of packet secondary zone in use (current/cache)

0/0/0/0 4k (page size) jumbo clusters in use (current/cache/total/max)

0/0/0/0 9k jumbo clusters in use (current/cache/total/max)

0/0/0/0 16k jumbo clusters in use (current/cache/total/max)

16112K/15489K/31601K bytes allocated to network (current/cache/total)

0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)

0/0/0 requests for jumbo clusters denied (4k/9k/16k)

0/7/4608 sfbufs in use (current/peak/max)

0 requests for sfbufs denied

0 requests for sfbufs delayed

0 requests for I/O initiated by sendfile

1 calls to protocol drain routines

 

Ifconfig shows

vr0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500

inet 66.90.101.146 netmask 0xff00 broadcast 66.90.101.255

ether 00:17:31:78:e0:f8

media: Ethernet autoselect (100baseTX full-duplex)

status: active

 

My loader.conf:

kern.maxusers=256

kern.maxproc=32768

kern.ipc.nmbclusters=65536

kern.ipc.maxsockets=32768

 

sysctl.conf

kern.maxprocperuid=32768

kern.ipc.somaxconn=32768

kern.ipc.maxsockbuf=16777216

net.inet.ip.portrange.first=3

net.inet.ip.portrange.hifirst=3

net.inet.ip.rtexpire= 1200

net.inet.ip.intr_queue_maxlen=1024

 

net.inet.tcp.rfc1323=1

net.inet.tcp.mssdflt=1460

 

net.inet.udp.recvspace=65535

net.inet.udp.maxdgram=57344

 

net.inet.tcp.sendspace=65535

net.inet.tcp.recvspace=65535

net.local.stream.recvspace=65535

net.local.stream.sendspace=65535

net.inet.tcp.keepidle=72000

net.inet.tcp.keepintvl=1800

 

net.inet.icmp.icmplim=300

net.inet.tcp.delayed_ack=0

net.inet.tcp.blackhole=2

net.inet.udp.blackhole=1

 



 

This server is acting as socks5 proxy server connecting to 40-80 users,
which will connect to more than 8000-11000 peers. 

All other servers can push close to 85mbit/sec but this one can only go to a
max of 25mbit.

 

Anyone? Is this configuration or hardware problem?

 

Thanks

 

 

 

 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Monitoring CPU usage on multi-core system

2007-08-26 Thread Paul Hoffman
Hi again. On a dual-core system, how do I tell how much of each of 
the CPU cores are in use? Is the CPU usage in 'top' for the two CPUs 
at once? Is there something in ports (that works without X...) that 
will give good info?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: time issue

2007-08-26 Thread Michael P. Soulier
On 25/08/07 Bill Moran said:

 If this turns out to be your problem, I recommend using pool.ntp.org.
 Read up a bit, it should be much more reliable on a consistent basis.
 Also, OpenNTP has support built in to automatically talk to all of
 ntp.org's servers without any funky configuration:
 http://www.pool.ntp.org/use.html

The only problem with the ntp pool is that ntp does its best to factor out
problems with specific ntp servers, by learning about their quirks over time.
An ntp pool where the specific servers that you're talking to change regularly
defeats this. 

Good enough to keep time on my server though, I suppose, since I'm not running
a cellular network. :)

Mike
-- 
Michael P. Soulier [EMAIL PROTECTED]
Any intelligent fool can make things bigger and more complex... It
takes a touch of genius - and a lot of courage to move in the opposite
direction. --Albert Einstein


pgplEixpqmftK.pgp
Description: PGP signature


Re: time issue

2007-08-26 Thread Dan Nelson
In the last episode (Aug 27), Michael P. Soulier said:
 On 25/08/07 Bill Moran said:
  If this turns out to be your problem, I recommend using
  pool.ntp.org. Read up a bit, it should be much more reliable on a
  consistent basis. Also, OpenNTP has support built in to
  automatically talk to all of ntp.org's servers without any funky
  configuration: http://www.pool.ntp.org/use.html
 
 The only problem with the ntp pool is that ntp does its best to
 factor out problems with specific ntp servers, by learning about
 their quirks over time. An ntp pool where the specific servers that
 you're talking to change regularly defeats this.

ntpd does a single DNS lookup for each server at startup and doesn't
shift from them even if the DNS changes, so that's not an issue.
 
 Good enough to keep time on my server though, I suppose, since I'm
 not running a cellular network. :)

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]