Re: Xorg and WSXGA
On Thu, Nov 01, 2007 at 07:49:42AM -0500, Josh Paetzel wrote: On Thursday 01 November 2007 12:53:11 am Crist J. Clark wrote: On Tue, Oct 30, 2007 at 07:50:10PM -0400, Brian A. Seklecki wrote: On Mon, 2007-10-29 at 23:36 -0700, Crist J. Clark wrote: I finally dumped the CRT and bought a ridiculusly cheap 20 LCD monitor. Works great except I'm having problems getting it to go widescreen and use the full display area. I followed the instruction xinit -- -verbose 9 -logverbose 9 It should print out a list of modes that it _will_ validate. It doesn't really give me any useful additional information that I notice. I still don't understand why it refuses to go for 1680x1050. The log is attached. Could you attach your xorg.conf? It looks like there is a combination of problems keeping it from doing 1680x1050. I've tried a few things, but right now, running on defaults and auto-generated configuration. -- Crist J. Clark | [EMAIL PROTECTED] Section ServerLayout Identifier X.org Configured Screen 0 Screen0 0 0 InputDeviceMouse0 CorePointer InputDeviceKeyboard0 CoreKeyboard EndSection Section Files RgbPath /usr/local/share/X11/rgb ModulePath /usr/local/lib/xorg/modules FontPath /usr/local/lib/X11/fonts/misc/ FontPath /usr/local/lib/X11/fonts/TTF/ FontPath /usr/local/lib/X11/fonts/OTF FontPath /usr/local/lib/X11/fonts/Type1/ FontPath /usr/local/lib/X11/fonts/100dpi/ FontPath /usr/local/lib/X11/fonts/75dpi/ EndSection Section Module Load extmod Load record Load dbe Load glx Load GLcore Load xtrap Load dri Load freetype Load type1 EndSection Section InputDevice Identifier Keyboard0 Driver kbd EndSection Section InputDevice Identifier Mouse0 Driver mouse Option Protocol auto Option Device /dev/sysmouse Option ZAxisMapping 4 5 6 7 EndSection Section Monitor #DisplaySize 470 300 # mm Identifier Monitor0 VendorName ENV ModelNameG2016w ### Comment all HorizSync and VertRefresh values to use DDC: #HorizSync31.0 - 80.0 #VertRefresh 56.0 - 75.0 Option DPMS #ModeLine 1680x1050 146.2 1680 1784 2136 2240 1050 1053 1059 1089 -hsync +vsync #ModeLine 1680x1050 146.2 1680 1784 2136 2240 1050 1053 1059 1089 -hsync +vsync EndSection Section Device ### Available Driver options are:- ### Values: i: integer, f: float, bool: True/False, ### string: String, freq: f Hz/kHz/MHz ### [arg]: arg optional #Option NoAccel # [bool] #Option SWcursor # [bool] #Option ColorKey # i #Option CacheLines# i #Option Dac6Bit # [bool] #Option DRI # [bool] #Option NoDDC # [bool] #Option ShowCache # [bool] #Option XvMCSurfaces # i #Option PageFlip # [bool] # Recommended by http://gentoo-wiki.com/HOWTO_Widescreen_Resolutions_(WSXGA) Option ModeValidation NoMaxPClkCheck Identifier Card0 Driver i810 VendorName Intel Corporation BoardName 82810E DC-133 CGC [Chipset Graphics Controller] BusID PCI:0:1:0 EndSection Section Screen Identifier Screen0 Device Card0 MonitorMonitor0 DefaultFbBpp 24 SubSection Display Viewport 0 0 Depth 1 EndSubSection SubSection Display Viewport 0 0 Depth 4 EndSubSection SubSection Display Viewport 0 0 Depth 8 EndSubSection SubSection Display Viewport 0 0 Depth 15 EndSubSection SubSection Display Viewport 0 0 Depth 16 EndSubSection SubSection Display Viewport 0 0 Depth 24 EndSubSection # SubSection Display # Viewport 0 0 # Depth 24 # Modes 1680x1050 # EndSubSection EndSection ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: curious DNS behavior on a 7.0...
however, right now new every website i browse is penalized with a 10-20 second delay before the page finally starts loading. tcpdump is full of these: wouldn't it be your browser requesting the IPv6 address? you can check easy enough by pinging any website (which you haven't resolved yet) and see if u get the same calls. Good observation. unless you are pointing your resolver to localhost, and your local named is requesting the v6 records. Look into disabling this behaviour @ named.conf. I don't personally believe disabling this is the right approach. For instance, I set up a test IPv6 IP on an interface on a 100Mbps LANx WAN fast Ethernet connection. I then added an record to a named server. Working from another server on the same physical network (albeit different subnet across separate interfaces), the query time for both is exactly the same. Note that my resolver on 'cohiba' points to 208.70.104.3. cohiba# dig lanx-fa1.ibctech.ca lanx-fa1.ibctech.ca.7087IN 3ffe:ff00:1::1 ;; Query time: 0 msec cohiba# dig lanx-fa1.ibctech.ca ;lanx-fa1.ibctech.ca. IN A ;; Query time: 0 msec ...Now, performing the same test, from the same server, using the same DNS box looking for the exact same www site that the OP stated that was a problem originally: # INITIAL DNS LOOKUP cohiba# dig www.srh.noaa.gov ; DiG 9.3.2 www.srh.noaa.gov ;; ANSWER SECTION: www.srh.noaa.gov. 86400 IN A 216.38.80.20 ;; Query time: 210 msec ;; SERVER: 208.70.104.3#53(208.70.104.3) # SPECIFIC IPv6 LOOKUP (no answer) cohiba# dig www.srh.noaa.gov ; DiG 9.3.2 www.srh.noaa.gov ;www.srh.noaa.gov. IN ;; Query time: 102 msec CONCLUSION: If the last poster is right and it's only the browser is failing because it uses it's own faulty internal DNS resolver, then this is obviously a serious hindrance to the implementation of IPv6. Of course most 'users' aren't on the 'Internet' if their MSN page doesn't display, and will take the path of least cost to make it work ;) I'm not a protocol expert, but from what I can tell, a web browser DNS resolver/cache that works this way may also have quite an impact on the view regarding usability of any OS as IPv6 becomes more prevalent, not just FreeBSD. I've never noticed these problems before. Running Portable Firefox on my Windows XP workstation, I see the IPv6 and IPv4 address of all sites I go to, if they are v6 enabled. However, I have 16^N variables involved that make that an unfair evaluation. -- Does anyone else have issues in this regard? Particularly, does anyone else have IPv6 enabled, or better yet in use that can provide any feedback? Steve ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Official mirror source
Hello, I am one of the sys admin looking after mirror.aarnet.edu.au which is also ftp2.au.freebsd.org. We have had issues with upstream mirrors we have used locally. Can you suggest a good mirror to rsync from internationally? Did you see the rsync mirrors on the freebsd.org site? Chris Thanks, Alex Alex Dodson System Administrator AARNet Pty Ltd Ph: 61 7 3317 9550 Mob: 61 434 306 682 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions- [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: imap-uw and sasl
On 11/1/07, Thomas Abthorpe [EMAIL PROTECTED] wrote: Try adding the following you /etc/make.conf WITH_SSL_AND_PLAINTEXT=yes # imap-uw WITH_ENTOURAGE_BRAIN_DAMAGE=yes # imap-uw On 01/11/2007, Michael Grant [EMAIL PROTECTED] wrote: I just installed imap-uw and saslauthd on my box. I'm having trouble getting it to accept plain text logins (in fact any logins at all). I'm trying to authenticate people in the passwd file. I get the following in the maillog: Nov 1 11:14:53 myhost ipop3d[97953]: Unexpected client disconnect, while reading line user=??? host=example.com [10.20.30.40] Yes, the user=??? is just like that with the question marks. I am definitely sending the username. I'm thinking it might be a sasl problem or something I've not configured with saslauthd but I don't see it. I see these messages in /var/log/messages but they do not seem correlated with the time of the I tried to login (and there's many fewer of them): Nov 1 11:00:32 charm ipop3d[87124]: Login failed user=myname auth=myname host=example.com [10.20.30.40] Ideas? Suggestions where to look for more error messages? Michael Grant ___ At first I thought that this couldn't possibly have anything to it, but after some experimentation, I discovered that things worked if I was using SSL. I tried this and did a make clean and reinstalled but it didn't change anything. I also tried selecting Allow plain text passwords and SSL on the menu during the make process of imap-uw. No, still the same behavior. I think I'm going to give up and force everyone to use SSL which probably isn't a bad thing. However, it sure would have been nice if the error imap-uw generated was a little more revealing. Especially when the user connected without SSL, it could have returned a very explicit error message like Clear connections no longer supported, use port 995 with SSL. Thanks for the response, it did help. Michael Grant ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: i keep getting this when i buildkernel on 7.0 beta 1.5...
On 11/2/07, Jonathan Horne [EMAIL PROTECTED] wrote: Quoting Boris Samorodov [EMAIL PROTECTED]: On Thu, 1 Nov 2007 20:20:10 -0500 Jonathan Horne wrote: awk -f /usr/src/sys/modules/zlib/../../conf/kmod_syms.awk zlib.kld export_syms | xargs -J% objcopy % zlib.kld ld -Bshareable -d -warn-common -o zlib.ko.debug zlib.kld objcopy --only-keep-debug zlib.ko.debug zlib.ko.symbols objcopy --strip-debug --add-gnu-debuglink=zlib.ko.symbols zlib.ko.debug zlib.ko 1 error *** Error code 2 1 error *** Error code 2 1 error [EMAIL PROTECTED] /usr/src]# anyone able to tell me wha to do? Remove a -j option from the make command and get a real error message. WBR -- Boris Samorodov (bsam) Research Engineer, http://www.ipt.ru Telephone Internet SP FreeBSD committer, http://www.FreeBSD.org The Power To Serve ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] without the -j, this is where i appear to be hanging up: uipc_syscalls.o(.text+0x3c1): In function `sctp_generic_recvmsg': /usr/src/sys/kern/uipc_syscalls.c:2600: undefined reference to `sctp_sorecvmsg' uipc_syscalls.o(.text+0x21a2): In function `sctp_generic_sendmsg_iov': /usr/src/sys/kern/uipc_syscalls.c:2478: undefined reference to `sctp_lower_sosend' uipc_syscalls.o(.text+0x249d): In function `sctp_generic_sendmsg': /usr/src/sys/kern/uipc_syscalls.c:2371: undefined reference to `sctp_lower_sosend' uipc_syscalls.o(.text+0x266c): In function `sctp_peeloff': /usr/src/sys/kern/uipc_syscalls.c:2238: undefined reference to `sctp_can_peel_off' uipc_syscalls.o(.text+0x28e6):/usr/src/sys/kern/uipc_syscalls.c:2279: undefined reference to `sctp_do_peeloff' rtsock.o(.text+0xb7d): In function `rt_newaddrmsg': /usr/src/sys/net/rtsock.c:897: undefined reference to `sctp_addr_change' in_proto.o(.data+0xa8): undefined reference to `sctp_input' in_proto.o(.data+0xb0): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xb4): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xbc): undefined reference to `sctp_init' in_proto.o(.data+0xc8): undefined reference to `sctp_drain' in_proto.o(.data+0xcc): undefined reference to `sctp_usrreqs' in_proto.o(.data+0xdc): undefined reference to `sctp_input' in_proto.o(.data+0xe4): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xe8): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xfc): undefined reference to `sctp_drain' in_proto.o(.data+0x100): undefined reference to `sctp_usrreqs' in_proto.o(.data+0x110): undefined reference to `sctp_input' in_proto.o(.data+0x118): undefined reference to `sctp_ctlinput' in_proto.o(.data+0x11c): undefined reference to `sctp_ctloutput' in_proto.o(.data+0x130): undefined reference to `sctp_drain' in_proto.o(.data+0x134): undefined reference to `sctp_usrreqs' *** Error code 1 Stop in /usr/obj/usr/src/sys/HPDC7100. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. anything i can do to get around that? the only thing in my kernel config that differs from GENERIC, is the removal of the INET6 line, and addition of 'options SMP' (and, the ident). -- Jonathan Horne http://dfwlpiki.dfwlp.org [EMAIL PROTECTED] This message was sent using IMP, the Internet Messaging Program. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Try removing the following from your kernel options SCTP# Stream Control Transmission Protocol ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: i keep getting this when i buildkernel on 7.0 beta 1.5...
Quoting Boris Samorodov [EMAIL PROTECTED]: On Fri, 02 Nov 2007 09:16:30 -0500 Jonathan Horne wrote: Quoting Boris Samorodov [EMAIL PROTECTED]: On Thu, 1 Nov 2007 20:20:10 -0500 Jonathan Horne wrote: awk -f /usr/src/sys/modules/zlib/../../conf/kmod_syms.awk zlib.kld export_syms | xargs -J% objcopy % zlib.kld ld -Bshareable -d -warn-common -o zlib.ko.debug zlib.kld objcopy --only-keep-debug zlib.ko.debug zlib.ko.symbols objcopy --strip-debug --add-gnu-debuglink=zlib.ko.symbols zlib.ko.debug zlib.ko 1 error *** Error code 2 1 error *** Error code 2 1 error [EMAIL PROTECTED] /usr/src]# anyone able to tell me wha to do? Remove a -j option from the make command and get a real error message. WBR -- Boris Samorodov (bsam) Research Engineer, http://www.ipt.ru Telephone Internet SP FreeBSD committer, http://www.FreeBSD.org The Power To Serve ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] without the -j, this is where i appear to be hanging up: uipc_syscalls.o(.text+0x3c1): In function `sctp_generic_recvmsg': /usr/src/sys/kern/uipc_syscalls.c:2600: undefined reference to sctp_sorecvmsg' uipc_syscalls.o(.text+0x21a2): In function `sctp_generic_sendmsg_iov': /usr/src/sys/kern/uipc_syscalls.c:2478: undefined reference to sctp_lower_sosend' uipc_syscalls.o(.text+0x249d): In function `sctp_generic_sendmsg': /usr/src/sys/kern/uipc_syscalls.c:2371: undefined reference to sctp_lower_sosend' uipc_syscalls.o(.text+0x266c): In function `sctp_peeloff': /usr/src/sys/kern/uipc_syscalls.c:2238: undefined reference to sctp_can_peel_off' uipc_syscalls.o(.text+0x28e6):/usr/src/sys/kern/uipc_syscalls.c:2279: undefined reference to `sctp_do_peeloff' rtsock.o(.text+0xb7d): In function `rt_newaddrmsg': /usr/src/sys/net/rtsock.c:897: undefined reference to `sctp_addr_change' in_proto.o(.data+0xa8): undefined reference to `sctp_input' in_proto.o(.data+0xb0): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xb4): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xbc): undefined reference to `sctp_init' in_proto.o(.data+0xc8): undefined reference to `sctp_drain' in_proto.o(.data+0xcc): undefined reference to `sctp_usrreqs' in_proto.o(.data+0xdc): undefined reference to `sctp_input' in_proto.o(.data+0xe4): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xe8): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xfc): undefined reference to `sctp_drain' in_proto.o(.data+0x100): undefined reference to `sctp_usrreqs' in_proto.o(.data+0x110): undefined reference to `sctp_input' in_proto.o(.data+0x118): undefined reference to `sctp_ctlinput' in_proto.o(.data+0x11c): undefined reference to `sctp_ctloutput' in_proto.o(.data+0x130): undefined reference to `sctp_drain' in_proto.o(.data+0x134): undefined reference to `sctp_usrreqs' *** Error code 1 Stop in /usr/obj/usr/src/sys/HPDC7100. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. anything i can do to get around that? the only thing in my kernel config that differs from GENERIC, is the removal of the INET6 line, From /sys/conf/NOTES: - # SCTP is a NEW transport protocol defined by # RFC2960 updated by RFC3309 and RFC3758.. and # soon to have a new base RFC and many many more # extensions. This release supports all the extensions # including many drafts (most about to become RFC's). # It is the premeier SCTP implementation in the NET # and is quite well tested. # # Note YOU MUST have both INET and INET6 defined. # you don't have to enable V6, but SCTP is # dual stacked and so far we have not teased apart # the V6 and V4.. since an association can span # both a V6 and V4 address at the SAME time :-) - and addition of 'options SMP' (and, the ident). WBR -- Boris Samorodov (bsam) Research Engineer, http://www.ipt.ru Telephone Internet SP FreeBSD committer, http://www.FreeBSD.org The Power To Serve well i appear to have fallen prey to the oldest trick in the book... so remind me not to get involved in land wars in asia. :) also, if i would have just 'read' the GENERIC config file before i started editing it, i would have noticed that 'options SMP' is now already included! *slaps forehead!* cheers, -- Jonathan Horne http://dfwlpiki.dfwlp.org [EMAIL PROTECTED] This message was sent using IMP, the Internet Messaging Program. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: problem of install 7.0 on notebook
Quoting Jonathan Horne [EMAIL PROTECTED]: Quoting David Yeske [EMAIL PROTECTED]: On 11/2/07, Zhang hw [EMAIL PROTECTED] wrote: I have now could work on my notebook with freebsd 6.2-release and 6.3-prerelease, but there are still some problems such as acpi. So I want to have a try of freebsd 7.0-beta-1.5, but I can't install it, the boot process stop at pci probing: pcib2:PCI-PCI brige at device 4.0 on pci0 pci16:PCI-PCI bus on pcib2 if acpi enable, it maybe show as: pcib2:ACPI PCI-PCI brige... pci16:ACPI... my cpu is athlon 64x2, I've tried both amd64 and i386 versions. Help! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] What happens if you boot verbose? That might better indicate where the kernel is hanging. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] without the -j, this appears to be wherei am hanging up: uipc_syscalls.o(.text+0x3c1): In function `sctp_generic_recvmsg': /usr/src/sys/kern/uipc_syscalls.c:2600: undefined reference to `sctp_sorecvmsg' uipc_syscalls.o(.text+0x21a2): In function `sctp_generic_sendmsg_iov': /usr/src/sys/kern/uipc_syscalls.c:2478: undefined reference to `sctp_lower_sosend' uipc_syscalls.o(.text+0x249d): In function `sctp_generic_sendmsg': /usr/src/sys/kern/uipc_syscalls.c:2371: undefined reference to `sctp_lower_sosend' uipc_syscalls.o(.text+0x266c): In function `sctp_peeloff': /usr/src/sys/kern/uipc_syscalls.c:2238: undefined reference to `sctp_can_peel_off' uipc_syscalls.o(.text+0x28e6):/usr/src/sys/kern/uipc_syscalls.c:2279: undefined reference to `sctp_do_peeloff' rtsock.o(.text+0xb7d): In function `rt_newaddrmsg': /usr/src/sys/net/rtsock.c:897: undefined reference to `sctp_addr_change' in_proto.o(.data+0xa8): undefined reference to `sctp_input' in_proto.o(.data+0xb0): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xb4): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xbc): undefined reference to `sctp_init' in_proto.o(.data+0xc8): undefined reference to `sctp_drain' in_proto.o(.data+0xcc): undefined reference to `sctp_usrreqs' in_proto.o(.data+0xdc): undefined reference to `sctp_input' in_proto.o(.data+0xe4): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xe8): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xfc): undefined reference to `sctp_drain' in_proto.o(.data+0x100): undefined reference to `sctp_usrreqs' in_proto.o(.data+0x110): undefined reference to `sctp_input' in_proto.o(.data+0x118): undefined reference to `sctp_ctlinput' in_proto.o(.data+0x11c): undefined reference to `sctp_ctloutput' in_proto.o(.data+0x130): undefined reference to `sctp_drain' in_proto.o(.data+0x134): undefined reference to `sctp_usrreqs' *** Error code 1 Stop in /usr/obj/usr/src/sys/HPDC7100. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. -- Jonathan Horne http://dfwlpiki.dfwlp.org [EMAIL PROTECTED] my apologies all, the above reply did not pertain to this thread. please exuse me while i finish the rest of my coffee!! -- Jonathan Horne http://dfwlpiki.dfwlp.org [EMAIL PROTECTED] This message was sent using IMP, the Internet Messaging Program. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: curious DNS behavior on a 7.0...
Quoting Steve Bertrand [EMAIL PROTECTED]: CONCLUSION: If the last poster is right and it's only the browser is failing because it uses it's own faulty internal DNS resolver, then this is obviously a serious hindrance to the implementation of IPv6. so a browser behavior, and not an operating system or name server behavior? as far as i know, my name servers dont know how to speak ipv6 either, as they are 6.2p8's without INET6 in their kernel configs. so, my browser of choice is opera, but admittedly, i dont recall ever seeing a setting i can change concerning this behavior. how then, would one go about elminating ipv6 behavior from a browser? Of course most 'users' aren't on the 'Internet' if their MSN page doesn't display, and will take the path of least cost to make it work ;) not sure if that was intended for me or not... if so, my retort is if i wanted path of least cost (in terms of time and trouble)... i would have just got on my ibook which 'just works' (har har :) *shrug* all i know is that my other systems that have no ipv6 at all, arent able to produce such behavior. cheers, -- Jonathan Horne http://dfwlpiki.dfwlp.org [EMAIL PROTECTED] This message was sent using IMP, the Internet Messaging Program. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Duplicate existing FreeBSD Server in VM
Terry Sposato wrote: What is the best way to go about getting this exact machine transferred to the VM? Both machines exist on the same network and will be able to talk to each other, I have been thinking of a couple of different ways to get all my data across which is the easy part, but I want to match everything that is installed, base system, ports etc. Anyone have any ideas or point me into the right direction? There are a # of ways to skin that cat. Have a look at my Linux P2V page as it describes a process that should work for you. http://mark.foster.cc/wiki/index.php/Linux_P2V -- Said one park ranger, 'There is considerable overlap between the intelligence of the smartest bears and the dumbest tourists.' Mark D. Foster, CISSP [EMAIL PROTECTED] http://mark.foster.cc/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
IPFW2 woes...
Hey all, I've written a short IPFW ruleset, with only some count rules and one allow all ip rule. I've got the following entries in my /etc/rc.conf file: # IPFW Settings # Only used for traffic accounting! firewall_enable=YES firewall_script=/etc/ipfw.sh Every time this system boots, it asks if I'm sure if I want the divert daemon enabled? The answer, really, is NO. pf is doing all that for me, I'm just using IPFW for packet accounting. The message changes slightly if I add natd_enable=NO to the file. Why is it asking me this, and what do I need to do to make it go away!? Thanks! - Eric F Crist Secure Computing Networks ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: skip bad block on QIC-150 tar
At Fri, Nov 02, 2007 at 12:00 , our malformed and occasionally flatulent friend [EMAIL PROTECTED] spewed forth this fount of brain juice: Message: 2 Date: Thu, 1 Nov 2007 22:35:43 -0800 From: Ted Mittelstaedt [EMAIL PROTECTED] Subject: RE: skip bad block in QIC-150 tar -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Thursday, November 01, 2007 11:10 AM I'm trying to recover some files from a 5 yr old tar on a QIC-150 tape. Unfortunately, there's a bad block on the tape; tar barfs and quits when it gets to it: tar: Unrecognized archive format: Inappropriate file type or format I managed to get a complete directory listing using tar t on my first attempt, before the tape became unreadable; it had to work at it but apparently managed to eventually get the block read. I've cleaned the tape and retried multiple times, to no avail. I've tried omitting the directory containing the bad block, but that hasn't prevented it from terminating. Anyone know a way to get around this? Untar from the non-rewinding device. When it hits the bad spot and aborts, just rerun tar again - it will start up the tape and forward it looking for the end of file mark that signifies the end of the current file and the beginning of the next. You may need to rerun it a couple times to get past the bad section. You can also use the mt fsf command to bump it forward. Ted And another method that I've used in similar cicrumstances, is to use 'dd' and then extract from the dd'ed files. When the failure occurs, then use the 'skip' funciton of dd to get past the bad section and save the next hunk.That might be something to try if the above suggestion does not work. Bill -- Bill Vermillion - bv @ wjv . com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: i keep getting this when i buildkernel on 7.0 beta 1.5...
Quoting Boris Samorodov [EMAIL PROTECTED]: On Thu, 1 Nov 2007 20:20:10 -0500 Jonathan Horne wrote: awk -f /usr/src/sys/modules/zlib/../../conf/kmod_syms.awk zlib.kld export_syms | xargs -J% objcopy % zlib.kld ld -Bshareable -d -warn-common -o zlib.ko.debug zlib.kld objcopy --only-keep-debug zlib.ko.debug zlib.ko.symbols objcopy --strip-debug --add-gnu-debuglink=zlib.ko.symbols zlib.ko.debug zlib.ko 1 error *** Error code 2 1 error *** Error code 2 1 error [EMAIL PROTECTED] /usr/src]# anyone able to tell me wha to do? Remove a -j option from the make command and get a real error message. WBR -- Boris Samorodov (bsam) Research Engineer, http://www.ipt.ru Telephone Internet SP FreeBSD committer, http://www.FreeBSD.org The Power To Serve ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] without the -j, this is where i appear to be hanging up: uipc_syscalls.o(.text+0x3c1): In function `sctp_generic_recvmsg': /usr/src/sys/kern/uipc_syscalls.c:2600: undefined reference to `sctp_sorecvmsg' uipc_syscalls.o(.text+0x21a2): In function `sctp_generic_sendmsg_iov': /usr/src/sys/kern/uipc_syscalls.c:2478: undefined reference to `sctp_lower_sosend' uipc_syscalls.o(.text+0x249d): In function `sctp_generic_sendmsg': /usr/src/sys/kern/uipc_syscalls.c:2371: undefined reference to `sctp_lower_sosend' uipc_syscalls.o(.text+0x266c): In function `sctp_peeloff': /usr/src/sys/kern/uipc_syscalls.c:2238: undefined reference to `sctp_can_peel_off' uipc_syscalls.o(.text+0x28e6):/usr/src/sys/kern/uipc_syscalls.c:2279: undefined reference to `sctp_do_peeloff' rtsock.o(.text+0xb7d): In function `rt_newaddrmsg': /usr/src/sys/net/rtsock.c:897: undefined reference to `sctp_addr_change' in_proto.o(.data+0xa8): undefined reference to `sctp_input' in_proto.o(.data+0xb0): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xb4): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xbc): undefined reference to `sctp_init' in_proto.o(.data+0xc8): undefined reference to `sctp_drain' in_proto.o(.data+0xcc): undefined reference to `sctp_usrreqs' in_proto.o(.data+0xdc): undefined reference to `sctp_input' in_proto.o(.data+0xe4): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xe8): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xfc): undefined reference to `sctp_drain' in_proto.o(.data+0x100): undefined reference to `sctp_usrreqs' in_proto.o(.data+0x110): undefined reference to `sctp_input' in_proto.o(.data+0x118): undefined reference to `sctp_ctlinput' in_proto.o(.data+0x11c): undefined reference to `sctp_ctloutput' in_proto.o(.data+0x130): undefined reference to `sctp_drain' in_proto.o(.data+0x134): undefined reference to `sctp_usrreqs' *** Error code 1 Stop in /usr/obj/usr/src/sys/HPDC7100. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. anything i can do to get around that? the only thing in my kernel config that differs from GENERIC, is the removal of the INET6 line, and addition of 'options SMP' (and, the ident). -- Jonathan Horne http://dfwlpiki.dfwlp.org [EMAIL PROTECTED] This message was sent using IMP, the Internet Messaging Program. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
IPFW Rules and Games
Lots of people play games here and basically a pain to keep trying to
get these stupid things to work with individual rules for each.
I'm running FreeBSD 6.x with IPFW/natd
I get a dynamic IP from my ISP and the internal nic is 192.168.17.1
Everything inside the network is 192.168.17.xxx
The setup is this:
192.168.17.x -- 192.168.17.1 [FreeBSD] Dynamic IP -- {Random Game
Server on the Internets}
[Internet Network(GAME)] -- [FreeBSD] -- {Internets}
There are a bunch of games that send out TCP/UDP packets (and who knows
what else) on different ports to different destinations and then
receive data back on random ports. Basically, anything on any
protocol from the internal network should be able to establish and setup
connections out AND be allowed to receive data back from whomever they
connected out to; but random hosts trying to connect in should be blocked.
I added this for a temporary fix:
${fwcmd} add pass all from any to any
I don't think that is the right answer; That allows to much in?
I've tried these per the docs:
${fwcmd} add allow all from any to any out via {$iip} setup
${fwcmd} add allow all from any to any out via {$iip} established
${fwcmd} add allow all from any to any in via {$iip} established
and also a bunch of others; but none of them worked.
Here is my full config:
# simple
[Ss][Ii][Mm][Pp][Ll][Ee])
# This is a prototype setup for a simple firewall. Configure this
# machine as a DNS and NTP server, and point all the machines
# on the inside at this machine for those services.
# set these to your outside interface network and netmask and ip
oif=xl0
onet=`ifconfig xl0 | grep inet | awk '{print $6}'`
omask=0xfe00
oip=`ifconfig xl0 | grep inet | awk '{print $2}'`
# set these to your inside interface network and netmask and ip
iif=dc1
inet=192.168.17.0
imask=0xff00
iip=192.168.17.1
setup_loopback
# Stop spoofing
${fwcmd} add deny all from ${inet}:${imask} to any in via ${oif}
${fwcmd} add deny all from ${onet}:${omask} to any in via ${iif}
# Stop RFC1918 nets on the outside interface
${fwcmd} add deny all from any to 10.0.0.0/8 via ${oif}
${fwcmd} add deny all from any to 172.16.0.0/12 via ${oif}
${fwcmd} add deny all from any to 192.168.0.0/16 via ${oif}
# Stop draft-manning-dsua-03.txt (1 May 2000) nets (includes
RESERVED-1,
# DHCP auto-configuration, NET-TEST, MULTICAST (class D), and
class E)
# on the outside interface
${fwcmd} add deny all from any to 0.0.0.0/8 via ${oif}
${fwcmd} add deny all from any to 169.254.0.0/16 via ${oif}
${fwcmd} add deny all from any to 192.0.2.0/24 via ${oif}
${fwcmd} add deny all from any to 224.0.0.0/4 via ${oif}
${fwcmd} add deny all from any to 240.0.0.0/4 via ${oif}
# Network Address Translation. This rule is placed here
deliberately
# so that it does not interfere with the surrounding
address-checking
# rules. If for example one of your internal LAN machines had
its IP
# address set to 192.0.2.1 then an incoming packet for it after
being
# translated by natd(8) would match the `deny' rule above.
Similarly
# an outgoing packet originated from it before being translated
would
# match the `deny' rule below.
case ${natd_enable} in
[Yy][Ee][Ss])
if [ -n ${natd_interface} ]; then
${fwcmd} add divert natd all from any to any via
${natd_interface}
fi
;;
esac
# Stop RFC1918 nets on the outside interface
${fwcmd} add deny all from 10.0.0.0/8 to any via ${oif}
${fwcmd} add deny all from 172.16.0.0/12 to any via ${oif}
${fwcmd} add deny all from 192.168.0.0/16 to any via ${oif}
# Stop draft-manning-dsua-03.txt (1 May 2000) nets (includes
RESERVED-1,
# DHCP auto-configuration, NET-TEST, MULTICAST (class D), and
class E)
# on the outside interface
${fwcmd} add deny all from 0.0.0.0/8 to any via ${oif}
${fwcmd} add deny all from 169.254.0.0/16 to any via ${oif}
${fwcmd} add deny all from 192.0.2.0/24 to any via ${oif}
${fwcmd} add deny all from 224.0.0.0/4 to any via ${oif}
${fwcmd} add deny all from 240.0.0.0/4 to any via ${oif}
# Allow internal traffic
${fwcmd} add allow all from any to any via ${iif}
# Allow all local traffic
${fwcmd} add allow all from ${inet}:${imask} to ${inet}:${imask}
# Allow TCP through if setup succeeded
${fwcmd} add pass tcp from any to any established
# Allow IP fragments to pass through
${fwcmd} add pass all from any to any frag
# Allow setup of incoming email
#${fwcmd} add pass tcp from any to ${oip} 25 setup
#${fwcmd} add pass
pkgdb.db: unexpected file type or format
Yesterday I moved from 6.2-RELENG to 7-RELENG and everything worked fine (though I do have a few questions about mergemaster that I'll ask later). As suggested on this list, I started to rebuild all of my ports. I started with portupgrade -f '2007-11-01 12:00' and all seemed to go well until I realized that I should have added -- batch to that. So I interrupted the process and restarted with portupgrade -f --batch '2007-11-01 12:00' This has been running apparently just fine overnight, but then I noticed that after building each port, they didn't get installed because I was getting an error like /var/db/pkg/pkgdb.db: unexpected file type or format -- Invalid argument So I stopped things again and tried to fix pkgdb.db $ sudo pkgdb -v -F --- Checking the package registry database /var/db/pkg/pkgdb.db: unexpected file type or format -- Invalid argument $ sudo file /var/db/pkg/pkgdb.db /var/db/pkg/pkgdb.db: Berkeley DB 1.85 (Hash, version 2, native byte- order) What should I do now. I suppose that my problem was with interrupting the portupgrade the first time 'round. But is there anything I can do to fix this. -j ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
The Complete FreeBSD: errata and addenda
The trouble with books is that you can't update them the way you can a web page or any other online documentation. The result is that most leading edge computer books are out of date almost before they are printed. Unfortunately, The Complete FreeBSD, published by O'Reilly, is no exception. Inevitably, a number of bugs and changes have surfaced. The Complete FreeBSD has been through a total of five editions, including its predecessor Installing and Running FreeBSD. Two of these have been reprinted with corrections. I maintain a series of errata pages. Start at http://www.lemis.com/errata-4.html to find out how to get the errata information. Note also that the book has now been released for free download in PDF form. Instead of downloading the changed pages, you may prefer to download the entire book. See http://www.lemis.com/grog/Documentation/CFBSD/ for more information. Have you found a problem with the book, or maybe something confusing? Please let me know: I'm no longer constantly updating it, but I may be able to help Greg ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
How to get best results from FreeBSD-questions
How to get the best results from FreeBSD questions. === Last update $Date: 2005/08/10 02:21:44 $ This is a regular posting to the FreeBSD questions mailing list. If you got it in answer to a message you sent, it means that the sender thinks that at least one of the following things was wrong with your message: - You left out a subject line, or the subject line was not appropriate. - You formatted it in such a way that it was difficult to read. - You asked more than one unrelated question in one message. - You sent out a message with an incorrect date, time or time zone. - You sent out the same message more than once. - You sent an 'unsubscribe' message to FreeBSD-questions. If you have done any of these things, there is a good chance that you will get more than one copy of this message from different people. Read on, and your next message will be more successful. This document is also available on the web at http://www.lemis.com/questions.html. = Contents: I:Introduction II: How to unsubscribe from FreeBSD-questions III: Should I ask -questions or -hackers? IV: How to submit a question to FreeBSD-questions V:How to answer a question to FreeBSD-questions I: Introduction === This is a regular posting aimed to help both those seeking advice from FreeBSD-questions (the newcomers), and also those who answer the questions (the hackers). Note that the term hacker has nothing to do with breaking into other people's computers. The correct term for the latter activity is cracker, but the popular press hasn't found out yet. The FreeBSD hackers disapprove strongly of cracking security, and have nothing to do with it. In the past, there has been some friction which stems from the different viewpoints of the two groups. The newcomers accused the hackers of being arrogant, stuck-up, and unhelpful, while the hackers accused the newcomers of being stupid, unable to read plain English, and expecting everything to be handed to them on a silver platter. Of course, there's an element of truth in both these claims, but for the most part these viewpoints come from a sense of frustration. In this document, I'd like to do something to relieve this frustration and help everybody get better results from FreeBSD-questions. In the following section, I recommend how to submit a question; after that, we'll look at how to answer one. II: How to unsubscribe from FreeBSD-questions == When you subscribed to FreeBSD-questions, you got a welcome message from [EMAIL PROTECTED] In this message, amongst other things, it told you how to unsubscribe. Here's a typical message: Welcome to the freebsd-questions@freebsd.org mailing list! If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://lists.freebsd.org/mailman/options/freebsd-questions/[EMAIL PROTECTED] (obviously, substitute your mail address for [EMAIL PROTECTED]). You can also make such adjustments via email by sending a message to: [EMAIL PROTECTED] with the word 'help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. Normally, Mailman will remind you of your freebsd.org mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you. Here's the general information for the list you've subscribed to, in case you don't already have it: FREEBSD-QUESTIONS User questions This is the mailing list for questions about FreeBSD. You should not send how to questions to the technical lists unless you consider the question to be pretty technical. Normally, unsubscribing is even simpler than the message suggests: you don't need to specify your mail ID unless it is different from the one which you specified when you subscribed. If Majordomo replies and tells you (incorrectly) that you're not on the list, this may mean one of two things: 1. You have changed your mail ID since you subscribed. That's where keeping the original message from majordomo comes in handy. For example, the sample message above shows my mail ID as [EMAIL PROTECTED] Since then, I have changed it to [EMAIL PROTECTED] If I were to try to remove [EMAIL PROTECTED] from the list, it would fail: I would have to specify the name with which I joined. 2. You're subscribed to a mailing list which is subscribed to
Re: remote binary upgrade from 4.10 to 6.2
David Yeske wrote: I have a lot of appliances in the field running FreeBSD. These machines do not have a working compiler. They need to be upgraded from FreeBSD 4.10 to FreeBSD 6.2. Has anyone gone through this successfully? Does anyone have pointers on a clean way to do this? Due to the lack of console support for most of these machines, booting from the 6.2 cd will not work. This has to be a remote binary upgrade. I need to have FreeBSD 4.10 install FreeBSD 6.2, although this could be done in stages with multiple reboots. I want to avoid upgrading from FreeBSD 4.10 to 5.5 to 6.2. It appears that FreeBSD 6.2 runs just fine on UFS1. First, I should mention that I have not done something like this before. However, I think it would help if you could be a little more specific. What are the specs of the machine (CPU, RAM, disk)? How remote are they (i.e. next building or Greenland)? How many appliances need upgrading? Do you control the network they're attached to? A couple of ideas: 1) As you say, the official advice is 4.10 - 5.5 - 6.2. You could cross-compile the 5.5 world + kernel on a build machine and installworld/kernel on the appliance. Reboot, and repeat for 6.2. This assumes you have the disk space for the new world/kernel, or that you can at least NFS mount a remote /usr/obj. 2) If you have the disk space, you can create another partition, place a complete 6.2 distribution there (compiled on a build machine) and change the boot loader to boot the new partition. 3) If you are able to PXE boot the machine, you could do a network install of the appliance. 4) If you control the network, you could build a kernel with NFS_ROOT support so you're independent on the local disk. Wipe the disk and install a new distribution there. 5) Finally, if you have the RAM, you could build a kernel with MFS_ROOT support, place a memdisk image on the local disk and proceed as 4) Erik ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: i keep getting this when i buildkernel on 7.0 beta 1.5...
On Thu, 1 Nov 2007 20:20:10 -0500 Jonathan Horne wrote: awk -f /usr/src/sys/modules/zlib/../../conf/kmod_syms.awk zlib.kld export_syms | xargs -J% objcopy % zlib.kld ld -Bshareable -d -warn-common -o zlib.ko.debug zlib.kld objcopy --only-keep-debug zlib.ko.debug zlib.ko.symbols objcopy --strip-debug --add-gnu-debuglink=zlib.ko.symbols zlib.ko.debug zlib.ko 1 error *** Error code 2 1 error *** Error code 2 1 error [EMAIL PROTECTED] /usr/src]# anyone able to tell me wha to do? Remove a -j option from the make command and get a real error message. WBR -- Boris Samorodov (bsam) Research Engineer, http://www.ipt.ru Telephone Internet SP FreeBSD committer, http://www.FreeBSD.org The Power To Serve ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: problem of install 7.0 on notebook
Quoting David Yeske [EMAIL PROTECTED]: On 11/2/07, Zhang hw [EMAIL PROTECTED] wrote: I have now could work on my notebook with freebsd 6.2-release and 6.3-prerelease, but there are still some problems such as acpi. So I want to have a try of freebsd 7.0-beta-1.5, but I can't install it, the boot process stop at pci probing: pcib2:PCI-PCI brige at device 4.0 on pci0 pci16:PCI-PCI bus on pcib2 if acpi enable, it maybe show as: pcib2:ACPI PCI-PCI brige... pci16:ACPI... my cpu is athlon 64x2, I've tried both amd64 and i386 versions. Help! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] What happens if you boot verbose? That might better indicate where the kernel is hanging. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] without the -j, this appears to be wherei am hanging up: uipc_syscalls.o(.text+0x3c1): In function `sctp_generic_recvmsg': /usr/src/sys/kern/uipc_syscalls.c:2600: undefined reference to `sctp_sorecvmsg' uipc_syscalls.o(.text+0x21a2): In function `sctp_generic_sendmsg_iov': /usr/src/sys/kern/uipc_syscalls.c:2478: undefined reference to `sctp_lower_sosend' uipc_syscalls.o(.text+0x249d): In function `sctp_generic_sendmsg': /usr/src/sys/kern/uipc_syscalls.c:2371: undefined reference to `sctp_lower_sosend' uipc_syscalls.o(.text+0x266c): In function `sctp_peeloff': /usr/src/sys/kern/uipc_syscalls.c:2238: undefined reference to `sctp_can_peel_off' uipc_syscalls.o(.text+0x28e6):/usr/src/sys/kern/uipc_syscalls.c:2279: undefined reference to `sctp_do_peeloff' rtsock.o(.text+0xb7d): In function `rt_newaddrmsg': /usr/src/sys/net/rtsock.c:897: undefined reference to `sctp_addr_change' in_proto.o(.data+0xa8): undefined reference to `sctp_input' in_proto.o(.data+0xb0): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xb4): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xbc): undefined reference to `sctp_init' in_proto.o(.data+0xc8): undefined reference to `sctp_drain' in_proto.o(.data+0xcc): undefined reference to `sctp_usrreqs' in_proto.o(.data+0xdc): undefined reference to `sctp_input' in_proto.o(.data+0xe4): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xe8): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xfc): undefined reference to `sctp_drain' in_proto.o(.data+0x100): undefined reference to `sctp_usrreqs' in_proto.o(.data+0x110): undefined reference to `sctp_input' in_proto.o(.data+0x118): undefined reference to `sctp_ctlinput' in_proto.o(.data+0x11c): undefined reference to `sctp_ctloutput' in_proto.o(.data+0x130): undefined reference to `sctp_drain' in_proto.o(.data+0x134): undefined reference to `sctp_usrreqs' *** Error code 1 Stop in /usr/obj/usr/src/sys/HPDC7100. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. -- Jonathan Horne http://dfwlpiki.dfwlp.org [EMAIL PROTECTED] This message was sent using IMP, the Internet Messaging Program. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Xorg and WSXGA]
Original Message Subject: Re: Xorg and WSXGA From:[EMAIL PROTECTED] Date:Fri, November 2, 2007 11:38 am To: [EMAIL PROTECTED] -- On Thu, Nov 01, 2007 at 07:49:42AM -0500, Josh Paetzel wrote: On Thursday 01 November 2007 12:53:11 am Crist J. Clark wrote: On Tue, Oct 30, 2007 at 07:50:10PM -0400, Brian A. Seklecki wrote: On Mon, 2007-10-29 at 23:36 -0700, Crist J. Clark wrote: I finally dumped the CRT and bought a ridiculusly cheap 20 LCD monitor. Works great except I'm having problems getting it to go widescreen and use the full display area. I followed the instruction xinit -- -verbose 9 -logverbose 9 It should print out a list of modes that it _will_ validate. It doesn't really give me any useful additional information that I notice. I still don't understand why it refuses to go for 1680x1050. The log is attached. Could you attach your xorg.conf? It looks like there is a combination of problems keeping it from doing 1680x1050. I've tried a few things, but right now, running on defaults and auto-generated configuration. -- Crist J. Clark | [EMAIL PROTECTED] _ Are you running 7.0 or 6.2 ? My Xorg installed on the top of 7.0 kept crashing my old DeLL dimension Pentium III so much so that I went back to 6.2. In your case sounds like the frequency and the colour depth of the monitor picked by Xorg -config are incompatible with the resolution that you want to use. Try playing manually with xorg.conf file or you can try to use the toll xorgconfig which is purely text based to create the xorg.conf file. In the past I was able to use beautifully xorgcfg tool (probably came from Xfree86's tool xf86cfg) but my computer kept complaining that this time does not recognize the command. Any how you also have to read xorg.#.log files very carefully as they are the key to resolve your problems. Good Luck Predrag __ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: curious DNS behavior on a 7.0...
Jonathan, On Thu, 2007-11-01 at 20:41 -0500, Jonathan Horne wrote: [...snip...] however, right now new every website i browse is penalized with a 10-20 second delay ... [...snip...] Type about:config in the Firefox address bar. Then edit the following value: (default is false) network.dns.disableIPv6 That's enough to solve your problem ;; Sincerely, -- So if Jules doesn't marry you, you can be a rich old maid. -- Micahel Corleone, Chapter 27, page 384 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: iso.1 target and release(8) in RELENG_7 (WAS: Re: release(8) environmental variables)
On Thu, 2007-11-01 at 12:04 -0400, Brian A. Seklecki wrote: Here's some fun -- I'm pretty sure this worked in RELENG_6: make release in /usr/src/release into RELEASEDIR=/opt/releasedir I'm an idiot. MAKE_ISOS was somehow not set in my shell script / make.conf(5) ~BAS ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: New FreeBSD art?
On Nov 02, 2007, at 6:25 am, Chad Perrin wrote: Do you mean this?: http://www.freebsd.org/logo.html Aha! yes that's it. I thought the artwork page was all there was. However there's no Powered by FreeBSD version of those, and the licensing terms are scarier than most MS EULAs. I think I will leave it for now... Thanks for the link though Ashley -- blog @ http://aviewfromafar.net/ linked-in @ http://www.linkedin.com/in/ashleymoran currently @ home ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW Rules and Games
Bob Hall wrote:
On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote:
I added this for a temporary fix:
${fwcmd} add pass all from any to any
I don't think that is the right answer; That allows to much in?
Yes.
I've tried these per the docs:
${fwcmd} add allow all from any to any out via {$iip} setup
${fwcmd} add allow all from any to any out via {$iip} established
${fwcmd} add allow all from any to any in via {$iip} established
and also a bunch of others; but none of them worked.
Try oip instead of iip. iip is your internal IP address, so anything
going out from iip is going to your lan, and anything coming in to iip
is coming from your lan. You want to control packets communicating with
the outside world, so you want to control them at oip.
Sorry, that didn't work.
I also tried this:
${fwcmd} add allow tcp from any to any via ${oip} setup
${fwcmd} add allow udp from any to any via ${oip} setup
${fwcmd} add allow tcp from any to any via ${oip} established
${fwcmd} add allow udp from any to any via ${oip} established
That also blocks it. :(
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW Rules and Games
Jack Barnett wrote:
Bob Hall wrote:
On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote:
I added this for a temporary fix:
${fwcmd} add pass all from any to any
I don't think that is the right answer; That allows to much in?
Yes.
I've tried these per the docs:
${fwcmd} add allow all from any to any out via {$iip} setup
${fwcmd} add allow all from any to any out via {$iip} established
${fwcmd} add allow all from any to any in via {$iip} established
and also a bunch of others; but none of them worked.
Try oip instead of iip. iip is your internal IP address, so anything
going out from iip is going to your lan, and anything coming in to iip
is coming from your lan. You want to control packets communicating with
the outside world, so you want to control them at oip.
Sorry, that didn't work.
I also tried this:
${fwcmd} add allow tcp from any to any via ${oip} setup
${fwcmd} add allow udp from any to any via ${oip} setup
${fwcmd} add allow tcp from any to any via ${oip} established
${fwcmd} add allow udp from any to any via ${oip} established
That also blocks it. :(
Even tried this and still doesn't work.
${fwcmd} add allow tcp from any to any via ${oip}
${fwcmd} add allow udp from any to any via ${oip}
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW Rules and Games
Jack Barnett wrote:
Jack Barnett wrote:
Jack Barnett wrote:
Bob Hall wrote:
On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote:
I added this for a temporary fix:
${fwcmd} add pass all from any to any
I don't think that is the right answer; That allows to much in?
Yes.
I've tried these per the docs:
${fwcmd} add allow all from any to any out via {$iip} setup
${fwcmd} add allow all from any to any out via {$iip} established
${fwcmd} add allow all from any to any in via {$iip} established
and also a bunch of others; but none of them worked.
Try oip instead of iip. iip is your internal IP address, so anything
going out from iip is going to your lan, and anything coming in to iip
is coming from your lan. You want to control packets communicating with
the outside world, so you want to control them at oip.
Sorry, that didn't work.
I also tried this:
${fwcmd} add allow tcp from any to any via ${oip} setup
${fwcmd} add allow udp from any to any via ${oip} setup
${fwcmd} add allow tcp from any to any via ${oip} established
${fwcmd} add allow udp from any to any via ${oip} established
That also blocks it. :(
Even tried this and still doesn't work.
${fwcmd} add allow tcp from any to any via ${oip}
${fwcmd} add allow udp from any to any via ${oip}
Grrr, this doesn't work either:
# statefull
${fwcmd} add check-state
${fwcmd} add allow tcp from any to any established
${fwcmd} add allow all from any to any out keep-state
${fwcmd} add allow icmp from any to any
This thread talks about the same problem:
[1]http://lists.freebsd.org/pipermail/freebsd-ipfw/2005-December/00225
8.html
You will most likely find that dynamic rules will allow this
ingress traffic, without the need to explicitly allow it.
But unfortunately there is no follow up reply in that archive.
References
1. http://lists.freebsd.org/pipermail/freebsd-ipfw/2005-December/002258.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW Rules and Games
On Fri, 02 Nov 2007 04:59:27 -0500
Jack Barnett [EMAIL PROTECTED] wrote:
Lots of people play games here and basically a pain to keep trying to
get these stupid things to work with individual rules for each.
I'm running FreeBSD 6.x with IPFW/natd
I get a dynamic IP from my ISP and the internal nic is 192.168.17.1
Everything inside the network is 192.168.17.xxx
The setup is this:
192.168.17.x -- 192.168.17.1 [FreeBSD] Dynamic IP -- {Random
Game Server on the Internets}
[Internet Network(GAME)] -- [FreeBSD] -- {Internets}
There are a bunch of games that send out TCP/UDP packets (and who
knows what else) on different ports to different destinations and then
receive data back on random ports. Basically, anything on any
protocol from the internal network should be able to establish and
setup connections out AND be allowed to receive data back from
whomever they connected out to; but random hosts trying to connect
in should be blocked.
You simply need to allow back traffic on the same socket connection
this will happen automatically with TCP if you are passing established
traffic, with UDP you will have to keep-state. You will probably find
that the games also require you to open one or more incoming ports too.
If you are not very confident with ipfw I would suggest you switch to
pf. It's a very good firewall and generally easier to use. Also if you
are playing games, you'll want to do traffic prioritisation, which is a
pain with ipfw.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Now it is ntpd that can't find anything
On Thu, 1 Nov 2007 22:46:56 -0400 N.J. Thomas [EMAIL PROTECTED] wrote: * jekillen [EMAIL PROTECTED] [2007-11-01 15:43:53 -0800]: These are the servers I have listed: [...] I suppose I should find ones that are reachable via ipv4. Better yet, use the NTP Pool Project. If you including the following in your ntp.conf: server 0.pool.ntp.org prefer server 1.pool.ntp.org prefer server 2.pool.ntp.org prefer You don't need any of the prefers. Using prefer like this simply disables the clustering algorithm, and degrades the accuracy. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Now it is ntpd that can't find anything
* RW [EMAIL PROTECTED] [2007-11-02 14:34:05 +]: server 0.pool.ntp.org prefer server 1.pool.ntp.org prefer server 2.pool.ntp.org prefer You don't need any of the prefers. Using prefer like this simply disables the clustering algorithm, and degrades the accuracy. Yeah, I had copied this out of my larger config file which had other servers non-essentials listed in there, I should have removed the prefer tags before giving it to OP. Thomas -- N.J. Thomas [EMAIL PROTECTED] Etiamsi occiderit me, in ipso sperabo ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW Rules and Games
RW wrote:
On Fri, 02 Nov 2007 04:59:27 -0500
Jack Barnett [1][EMAIL PROTECTED] wrote:
Lots of people play games here and basically a pain to keep trying to
get these stupid things to work with individual rules for each.
I'm running FreeBSD 6.x with IPFW/natd
I get a dynamic IP from my ISP and the internal nic is 192.168.17.1
Everything inside the network is 192.168.17.xxx
The setup is this:
192.168.17.x -- 192.168.17.1 [FreeBSD] Dynamic IP -- {Random
Game Server on the Internets}
[Internet Network(GAME)] -- [FreeBSD] -- {Internets}
There are a bunch of games that send out TCP/UDP packets (and who
knows what else) on different ports to different destinations and then
receive data back on random ports. Basically, anything on any
protocol from the internal network should be able to establish and
setup connections out AND be allowed to receive data back from
whomever they connected out to; but random hosts trying to connect
in should be blocked.
You simply need to allow back traffic on the same socket connection
this will happen automatically with TCP if you are passing established
traffic, with UDP you will have to keep-state. You will probably find
that the games also require you to open one or more incoming ports too.
If you are not very confident with ipfw I would suggest you switch to
pf. It's a very good firewall and generally easier to use. Also if you
are playing games, you'll want to do traffic prioritisation, which is a
pain with ipfw.
Thanks. Yes, generally firewalls and networking isn't my strong
point.
I checked out the handbook on it and it looks easy enough.
I found this: [2]http://www.allard.nu/pfw/ - but appears it's not in
the ports and commerical software?
I also have fwbuilder installed; but don't really like that much.
Are there any other GUI like interfaces that could help me in building
rules for pf?
I haven't read though it all yet; but I'll still need natd with pf,
right?
References
1. mailto:[EMAIL PROTECTED]
2. http://www.allard.nu/pfw/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW Rules and Games
On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote:
I added this for a temporary fix:
${fwcmd} add pass all from any to any
I don't think that is the right answer; That allows to much in?
Yes.
I've tried these per the docs:
${fwcmd} add allow all from any to any out via {$iip} setup
${fwcmd} add allow all from any to any out via {$iip} established
${fwcmd} add allow all from any to any in via {$iip} established
and also a bunch of others; but none of them worked.
Try oip instead of iip. iip is your internal IP address, so anything
going out from iip is going to your lan, and anything coming in to iip
is coming from your lan. You want to control packets communicating with
the outside world, so you want to control them at oip.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: New FreeBSD art?
and the licensing terms are scarier than most MS EULAs. I think I will leave it for now... Thanks for the link though Ashley 1. Write to[EMAIL PROTECTED] asking permission to use a trademarked image 2. Include a trademark sign on your site 3. Include a line that says something like Trademark of the FreeBSD foundation 4. Don't cut up the image and reproduce it in some other image without permission That's about it. The rest is mostly lawyer-ese ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: pkgdb.db: unexpected file type or format
Jeffrey Goldberg wrote: Yesterday I moved from 6.2-RELENG to 7-RELENG and everything worked fine (though I do have a few questions about mergemaster that I'll ask later). As suggested on this list, I started to rebuild all of my ports. I started with portupgrade -f '2007-11-01 12:00' and all seemed to go well until I realized that I should have added --batch to that. So I interrupted the process and restarted with portupgrade -f --batch '2007-11-01 12:00' This has been running apparently just fine overnight, but then I noticed that after building each port, they didn't get installed because I was getting an error like /var/db/pkg/pkgdb.db: unexpected file type or format -- Invalid argument So I stopped things again and tried to fix pkgdb.db $ sudo pkgdb -v -F --- Checking the package registry database /var/db/pkg/pkgdb.db: unexpected file type or format -- Invalid argument $ sudo file /var/db/pkg/pkgdb.db /var/db/pkg/pkgdb.db: Berkeley DB 1.85 (Hash, version 2, native byte-order) What should I do now. I suppose that my problem was with interrupting the portupgrade the first time 'round. But is there anything I can do to fix this. I've seen no responses, is this still a problem? First off, what does `file /var/db/pkg/pkgdb.db` report? And have you looked at pkgdb(5)? I'm only guessing, but maybe `pkgdb -aF` for starters, and maybe you'll have to do `pkgdb -u`. YMMV, and all that. Kevin Kinsey -- We totally deny the allegations, and we're trying to identify the allegators. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW Rules and Games
Jack Barnett wrote:
Jack Barnett wrote:
Bob Hall wrote:
On Fri, Nov 02, 2007 at 04:59:27AM -0500, Jack Barnett wrote:
I added this for a temporary fix:
${fwcmd} add pass all from any to any
I don't think that is the right answer; That allows to much in?
Yes.
I've tried these per the docs:
${fwcmd} add allow all from any to any out via {$iip} setup
${fwcmd} add allow all from any to any out via {$iip} established
${fwcmd} add allow all from any to any in via {$iip} established
and also a bunch of others; but none of them worked.
Try oip instead of iip. iip is your internal IP address, so anything
going out from iip is going to your lan, and anything coming in to iip
is coming from your lan. You want to control packets communicating with
the outside world, so you want to control them at oip.
Sorry, that didn't work.
I also tried this:
${fwcmd} add allow tcp from any to any via ${oip} setup
${fwcmd} add allow udp from any to any via ${oip} setup
${fwcmd} add allow tcp from any to any via ${oip} established
${fwcmd} add allow udp from any to any via ${oip} established
That also blocks it. :(
Even tried this and still doesn't work.
${fwcmd} add allow tcp from any to any via ${oip}
${fwcmd} add allow udp from any to any via ${oip}
Grrr, this doesn't work either:
# statefull
${fwcmd} add check-state
${fwcmd} add allow tcp from any to any established
${fwcmd} add allow all from any to any out keep-state
${fwcmd} add allow icmp from any to any
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Problem with pinentry-curses On FBSD 5. 5…
Michael Nottebrock schrieb: This is a bug in pinentry-curses By the way, patches from the community that get rid of this error are highly appreciated. I simply do not have the time at the moment to look for a fix myself. Cheers, -- ,_, | Michael Nottebrock | [EMAIL PROTECTED] (/^ ^\) | FreeBSD - The Power to Serve | http://www.freebsd.org \u/ | K Desktop Environment on FreeBSD | http://freebsd.kde.org signature.asc Description: OpenPGP digital signature
Re: pkgdb.db: unexpected file type or format
On Nov 2, 2007, at 4:21 PM, Kevin Kinsey wrote: Jeffrey Goldberg wrote: $ sudo pkgdb -v -F --- Checking the package registry database /var/db/pkg/pkgdb.db: unexpected file type or format -- Invalid argument $ sudo file /var/db/pkg/pkgdb.db /var/db/pkg/pkgdb.db: Berkeley DB 1.85 (Hash, version 2, native byte-order) I've seen no responses, I got a response off list suggesting that I simply remove pkgdb.db and call portupgrade which would rebuild it. I tried that (well I renamed pkgdb.db) and things seemed to go well for a few seconds, but portupgrade then barfed at the portsdb.db file. So I fixed that with portsdb -F and then running portupgrade seems to have done the right thing and all is well at the moment. First off, what does `file /var/db/pkg/pkgdb.db` report? You must have missed that I had that information in my original post. And have you looked at pkgdb(5)? I'm only guessing, but maybe `pkgdb -aF` for starters, I also had the output of pkgdb -v -F in my original post. But I do see that the formating of my post made that difficult to see. Anyway, thank you for your help. Everything seems to be going well at the moment. Cheers, -j -- Jeffrey Goldberghttp://www.goldmark.org/jeff/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
vim doesn't preserve the terminal content
I use vim both on Linux and FreeBSD. On Linux after I exit vim original screen content is restored. On FreeBSD vim leaves the last content viewed in vim. How do I make vim preserve the screen? Thanks, Yuri ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW Rules and Games
Hi, Jack, let's see.
Jack Barnett wrote:
Lots of people play games here and basically a pain to keep trying to
get these stupid things to work with individual rules for each.
I'm running FreeBSD 6.x with IPFW/natd
I get a dynamic IP from my ISP and the internal nic is 192.168.17.1
Everything inside the network is 192.168.17.xxx
The setup is this:
192.168.17.x -- 192.168.17.1 [FreeBSD] Dynamic IP -- {Random Game
Server on the Internets}
[Internet Network(GAME)] -- [FreeBSD] -- {Internets}
There are a bunch of games that send out TCP/UDP packets (and who knows
what else) on different ports to different destinations and then
receive data back on random ports. Basically, anything on any
protocol from the internal network should be able to establish and setup
connections out AND be allowed to receive data back from whomever they
connected out to; but random hosts trying to connect in should be
blocked.
Back on random ports? That's not how it should be. Your client must
send a request (ping or connect) to a server, using the game's client
port as the local port, and the server port as the remote port. The
reply should come back the same way, reversed.
for example, a client sends a connect request:
192.168.17.7:28000 87.15.13.165
natd converts the packet to:
49.74.121.3:28000 87.15.13.165:29000
(49.74.121.3 is your public IP)
and adds a dynamic rule (inside natd, not ipfw), that packet coming from
87.15.13.165, port 29000 to 49.74.121.3 port 28000 should be routed to
192.168.17.7, port 28000. So:
the server replies:
87.15.13.165:29000 49.74.121.3:28000
natd converts the packet to:
87.15.13.165:29000 192.168.17.7:28000
Any unknown packets will be blocked by natd. These are the unauthorized
random hosts.
So basically the ruleset should be simple:
ipfw -f flush
# allow lo0 stuff
# block some spoofs/attacks
# if you are hosting gameservers from 192.168.17.3 or whatever,
# you should (manually) open server ports, in other words, add
# routes to 192.168.17.3 to specific server ports
ipfw add divert natd all from any to any via $outside_interface
allow all from any to any
# block some more spoofs/attacks :)
# define services (like you did with http)
Correct me if I'm wrong.
What games do reply back on random ports?
I added this for a temporary fix:
${fwcmd} add pass all from any to any
I don't think that is the right answer; That allows to much in?
I've tried these per the docs:
${fwcmd} add allow all from any to any out via {$iip} setup
${fwcmd} add allow all from any to any out via {$iip} established
${fwcmd} add allow all from any to any in via {$iip} established
and also a bunch of others; but none of them worked.
Here is my full config:
# simple
[Ss][Ii][Mm][Pp][Ll][Ee])
# This is a prototype setup for a simple firewall. Configure this
# machine as a DNS and NTP server, and point all the machines
# on the inside at this machine for those services.
# set these to your outside interface network and netmask and ip
oif=xl0
onet=`ifconfig xl0 | grep inet | awk '{print $6}'`
I'm not sure about this. Isn't the sixth word the broadcast address
(ending with .255)?
omask=0xfe00
0xfe00 wtf?
oip=`ifconfig xl0 | grep inet | awk '{print $2}'`
# set these to your inside interface network and netmask and ip
iif=dc1
inet=192.168.17.0
imask=0xff00
iip=192.168.17.1
What kind of internet connection do you have?
setup_loopback
# Stop spoofing
${fwcmd} add deny all from ${inet}:${imask} to any in via ${oif}
${fwcmd} add deny all from ${onet}:${omask} to any in via ${iif}
# Stop RFC1918 nets on the outside interface
${fwcmd} add deny all from any to 10.0.0.0/8 via ${oif}
${fwcmd} add deny all from any to 172.16.0.0/12 via ${oif}
${fwcmd} add deny all from any to 192.168.0.0/16 via ${oif}
# Stop draft-manning-dsua-03.txt (1 May 2000) nets (includes
RESERVED-1,
# DHCP auto-configuration, NET-TEST, MULTICAST (class D), and
class E)
# on the outside interface
${fwcmd} add deny all from any to 0.0.0.0/8 via ${oif}
${fwcmd} add deny all from any to 169.254.0.0/16 via ${oif}
${fwcmd} add deny all from any to 192.0.2.0/24 via ${oif}
${fwcmd} add deny all from any to 224.0.0.0/4 via ${oif}
${fwcmd} add deny all from any to 240.0.0.0/4 via ${oif}
# Network Address Translation. This rule is placed here
deliberately
# so that it does not interfere with the surrounding
address-checking
# rules. If for example one of your internal LAN machines had
its IP
# address set to 192.0.2.1 then an incoming packet for it after
being
# translated by natd(8) would match the `deny' rule above.
Similarly
# an outgoing packet
Re: vim doesn't preserve the terminal content
On Fri, Nov 02, 2007 at 02:29:47PM -0700, Yuri wrote: I use vim both on Linux and FreeBSD. On Linux after I exit vim original screen content is restored. On FreeBSD vim leaves the last content viewed in vim. How do I make vim preserve the screen? I don't know how to do that, but it is one Lunix (bash?) feature that I hate and would like to know how to change it to function the way it does under FreeBSD (tcsh). jerry Thanks, Yuri ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: SQUID 2.6 disk usage didn't grow HELP
Hi Narek, Narek Gharibyan wrote: I set squid 2.6 transparent proxy with default settings on P4 2000 RAM 512/ 80GB HDD. I change only Which exact 2.6 version of Squid are you using? Which FreeBSD version are you running on your machine? cache_mem 128 MB cache_dir ufs /usr/local/squid/cache 40960 16 256 Squid works normally and do caching. It takes 300Mb RAM, and about 3GB HDD space, but it DOESN'T use more space. Squid works about 15 days without any restart and it use only 3GB space and the cache size didn't grow. Is it normal? I want to use more HDD cache Please advice That's strange. Can you post the full output of squidclient mgr:info and squidclient mgr:storedir ? Thank you in advance Thanking you... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- With best regards and good wishes, Yours sincerely, Tek Bahadur Limbu System Administrator (TAG/TDG Group) Jwl Systems Department Worldlink Communications Pvt. Ltd. Jawalakhel, Nepal http://www.wlink.com.np http://teklimbu.wordpress.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: i keep getting this when i buildkernel on 7.0 beta 1.5...
On Fri, 02 Nov 2007 09:16:30 -0500 Jonathan Horne wrote: Quoting Boris Samorodov [EMAIL PROTECTED]: On Thu, 1 Nov 2007 20:20:10 -0500 Jonathan Horne wrote: awk -f /usr/src/sys/modules/zlib/../../conf/kmod_syms.awk zlib.kld export_syms | xargs -J% objcopy % zlib.kld ld -Bshareable -d -warn-common -o zlib.ko.debug zlib.kld objcopy --only-keep-debug zlib.ko.debug zlib.ko.symbols objcopy --strip-debug --add-gnu-debuglink=zlib.ko.symbols zlib.ko.debug zlib.ko 1 error *** Error code 2 1 error *** Error code 2 1 error [EMAIL PROTECTED] /usr/src]# anyone able to tell me wha to do? Remove a -j option from the make command and get a real error message. WBR -- Boris Samorodov (bsam) Research Engineer, http://www.ipt.ru Telephone Internet SP FreeBSD committer, http://www.FreeBSD.org The Power To Serve ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] without the -j, this is where i appear to be hanging up: uipc_syscalls.o(.text+0x3c1): In function `sctp_generic_recvmsg': /usr/src/sys/kern/uipc_syscalls.c:2600: undefined reference to sctp_sorecvmsg' uipc_syscalls.o(.text+0x21a2): In function `sctp_generic_sendmsg_iov': /usr/src/sys/kern/uipc_syscalls.c:2478: undefined reference to sctp_lower_sosend' uipc_syscalls.o(.text+0x249d): In function `sctp_generic_sendmsg': /usr/src/sys/kern/uipc_syscalls.c:2371: undefined reference to sctp_lower_sosend' uipc_syscalls.o(.text+0x266c): In function `sctp_peeloff': /usr/src/sys/kern/uipc_syscalls.c:2238: undefined reference to sctp_can_peel_off' uipc_syscalls.o(.text+0x28e6):/usr/src/sys/kern/uipc_syscalls.c:2279: undefined reference to `sctp_do_peeloff' rtsock.o(.text+0xb7d): In function `rt_newaddrmsg': /usr/src/sys/net/rtsock.c:897: undefined reference to `sctp_addr_change' in_proto.o(.data+0xa8): undefined reference to `sctp_input' in_proto.o(.data+0xb0): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xb4): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xbc): undefined reference to `sctp_init' in_proto.o(.data+0xc8): undefined reference to `sctp_drain' in_proto.o(.data+0xcc): undefined reference to `sctp_usrreqs' in_proto.o(.data+0xdc): undefined reference to `sctp_input' in_proto.o(.data+0xe4): undefined reference to `sctp_ctlinput' in_proto.o(.data+0xe8): undefined reference to `sctp_ctloutput' in_proto.o(.data+0xfc): undefined reference to `sctp_drain' in_proto.o(.data+0x100): undefined reference to `sctp_usrreqs' in_proto.o(.data+0x110): undefined reference to `sctp_input' in_proto.o(.data+0x118): undefined reference to `sctp_ctlinput' in_proto.o(.data+0x11c): undefined reference to `sctp_ctloutput' in_proto.o(.data+0x130): undefined reference to `sctp_drain' in_proto.o(.data+0x134): undefined reference to `sctp_usrreqs' *** Error code 1 Stop in /usr/obj/usr/src/sys/HPDC7100. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. anything i can do to get around that? the only thing in my kernel config that differs from GENERIC, is the removal of the INET6 line, From /sys/conf/NOTES: - # SCTP is a NEW transport protocol defined by # RFC2960 updated by RFC3309 and RFC3758.. and # soon to have a new base RFC and many many more # extensions. This release supports all the extensions # including many drafts (most about to become RFC's). # It is the premeier SCTP implementation in the NET # and is quite well tested. # # Note YOU MUST have both INET and INET6 defined. # you don't have to enable V6, but SCTP is # dual stacked and so far we have not teased apart # the V6 and V4.. since an association can span # both a V6 and V4 address at the SAME time :-) - and addition of 'options SMP' (and, the ident). WBR -- Boris Samorodov (bsam) Research Engineer, http://www.ipt.ru Telephone Internet SP FreeBSD committer, http://www.FreeBSD.org The Power To Serve ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: curious DNS behavior on a 7.0...
Steve Bertrand wrote: -- Does anyone else have issues in this regard? Particularly, does anyone else have IPv6 enabled, or better yet in use that can provide any feedback? I have a couple of ideas. First, named has some flags like -4 and -6 (see man named). Second, firefox has a config flag to disable ipv6 lookups. Go to about:config and search for ipv6. For instance, mine shows network.dns.disableIPv6 user set boolean true -- Said one park ranger, 'There is considerable overlap between the intelligence of the smartest bears and the dumbest tourists.' Mark D. Foster, CISSP [EMAIL PROTECTED] http://mark.foster.cc/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: vim doesn't preserve the terminal content
On Friday 02 November 2007, Jerry McAllister wrote: On Fri, Nov 02, 2007 at 02:29:47PM -0700, Yuri wrote: I use vim both on Linux and FreeBSD. On Linux after I exit vim original screen content is restored. On FreeBSD vim leaves the last content viewed in vim. How do I make vim preserve the screen? The easiest way is to use a terminal with standard support for alternate screens, like rxvt. I don't know how to do that, but it is one Lunix (bash?) feature that I hate and would like to know how to change it to function the way it does under FreeBSD (tcsh). This has to do with the terminal capability strings ti and te. Xterm and the FeeBSD console don't have them defined in /etc/termcap (or they are empty). I don't know if syscons even supports alternate screens. Here is some (linux specific) info about it: http://www.shallowsky.com/linux/noaltscreen.html Hope this helps, Pieter de Goeje ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: vim doesn't preserve the terminal content
Jerry McAllister wrote: On Fri, Nov 02, 2007 at 02:29:47PM -0700, Yuri wrote: I use vim both on Linux and FreeBSD. On Linux after I exit vim original screen content is restored. On FreeBSD vim leaves the last content viewed in vim. How do I make vim preserve the screen? I don't know how to do that, but it is one Lunix (bash?) feature that I hate and would like to know how to change it to function the way it does under FreeBSD (tcsh). jerry Thanks, Yuri I believe the save/restore functionality is specified via /etc/termcap; there was a thread about it a few months ago - see http://lists.freebsd.org/pipermail/freebsd-current/2007-July/075665.html for more information. -- Bruce ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: vim doesn't preserve the terminal content
Yuri wrote: I use vim both on Linux and FreeBSD. On Linux after I exit vim original screen content is restored. On FreeBSD vim leaves the last content viewed in vim. How do I make vim preserve the screen? Thanks, Yuri This behavior is controlled by xterm settings. Try holding the control key and middle-clicking with the mouse on an xterm window. You should see an Enable Alternate Screen Switching option. See 'man 1 xterm' or http://www.x.org/archive/X11R6.8.0/doc/xterm.1.html ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Aurora Theme Engine
Hi, I have found that my favorite gnome theme engine is not in the ports, I have discovered all that needs to be modified to make it work under FreeBSD, what do I do to get it into the ports (who do I pass it onto etc?). The theme in question is here: http://www.gnome-look.org/content/show.php?content=56438 And this is what I did to make it work: 1) Make the install-sh file executable 2) Change the --prefix=/usr to --prefix=/usr/local ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: New FreeBSD art?
On Nov 02, 2007, at 2:05 pm, James wrote: 1. Write to[EMAIL PROTECTED] asking permission to use a trademarked image 2. Include a trademark sign on your site 3. Include a line that says something like Trademark of the FreeBSD foundation 4. Don't cut up the image and reproduce it in some other image without permission That's about it. The rest is mostly lawyer-ese I was just hoping to find a new version of the Powered by FreeBSD logos to use as an image link back to the FreeBSD page. Those can be used on sites served by FreeBSD, without requesting permission. I mean, I want to *advertise* the project, it seems silly that I have to ask permission and display trademark notices. I could still use one of the old ones, I just wondered if there were any available using the new logo. While I'm on the subject, can anyone open the SVG version? I've tried Intaglio and Pixelmator (both OS X apps) and they reject it. I validated the file against the W3C SVG XSD and DTD (normal English to resume shortly) using XMLMate in TextMate, and they both say it is invalid. I don't need to use the file, I was just curious if anyone else had problems opening it. Ashley -- blog @ http://aviewfromafar.net/ linked-in @ http://www.linkedin.com/in/ashleymoran currently @ home ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW Rules and Games
On Fri, Nov 02, 2007 at 10:59:04PM +0100, [EMAIL PROTECTED] wrote:
onet=`ifconfig xl0 | grep inet | awk '{print $6}'`
I'm not sure about this. Isn't the sixth word the broadcast address
(ending with .255)?
It's correct. I've been using this in my firewall file since FBSD
4.something. No problems. By default, awk uses spaces as column
delimiters. The line containing inet starts with eight spaces. Try it
and see what happens.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: vim doesn't preserve the terminal content
I use vim both on Linux and FreeBSD. On Linux after I exit vim original screen content is restored. On FreeBSD vim leaves the last content viewed in vim. How do I make vim preserve the screen? I don't know how to do that, but it is one Lunix (bash?) feature that I hate and would like to know how to change it to function the way it does under FreeBSD (tcsh). I hate it when it restores my screen and to prevent that in linux I added this to my .vimrc: set t_ti = set t_te = So read about whatever those options mean and set them accordingly... -philip ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: extracting 7_bit_ascii from ms_word files
thanks to everyone for their assistance. thanks, especially, for reports of personal satisfaction with a particular solution. it appears, now, that i had found everything that there is to be found, currently. without the feedback, however, i would not know that. i will give these ideas a whirl. happy coding to all and to all a good compile. rob ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Mounting/examining dd image?
I was trying to transplant my system from a small, old drive to a big, new one. I made a dd dump of the entire small drive, but then I accidentally destroyed the drive (be careful with bare drives and metal PC cases...) Anyway, I have the dd file but I don't have a spare drive onto which to copy it. Is there a way to read its contents/mount it/explore it/hopefully extract files from it on a running system? -jsd- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Mounting/examining dd image?
On Friday 02 November 2007, Jon Drukman wrote: I was trying to transplant my system from a small, old drive to a big, new one. I made a dd dump of the entire small drive, but then I accidentally destroyed the drive (be careful with bare drives and metal PC cases...) Anyway, I have the dd file but I don't have a spare drive onto which to copy it. Is there a way to read its contents/mount it/explore it/hopefully extract files from it on a running system? Yes there is: mdconfig -a -t vnode -f /path/to/dd/image/file That will cause the file to be treated as an md device. See also man mdconfig. The output of that command is the newly created /dev/md? device node. Depending on whether you dumped the whole disk, a slice, or a partition there may be additional devices. If you dd'ed the whole disk your former root partition might show up as /dev/md0s1a, for example. Once you've identified the device node(s) that contain(s) the filesystem(s) you're interested in, just mount it/them like you would any other device, e.g. mount /dev/md0s1a /mnt JN ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
