Large numbers of Limiting open port RST response from 6 to 5 packets/sec

2008-03-09 Thread roy lee

this is  a web server,use nginx, Large numbers of Limiting
open port RST response from 6 to 5 packets/sec.

I need help.

dmesg:
Limiting open port RST response from 11 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
Limiting open port RST response from 8 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
Limiting open port RST response from 8 to 5 packets/sec
Limiting open port RST response from 7 to 5 packets/sec
Limiting open port RST response from 7 to 5 packets/sec
Limiting open port RST response from 14 to 5 packets/sec
Limiting open port RST response from 11 to 5 packets/sec
Limiting open port RST response from 9 to 5 packets/sec
Limiting open port RST response from 12 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
...

uname -a
FreeBSD qz14253.tmdxy.org 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sat Mar
8 20:41:05 UTC 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/
qz2kernel  i386

nginx.conf:

user  www www;

worker_processes  5;

pid /var/run/nginx.pid;

error_log  /var/log/www/error.log warn;

events {


   worker_connections  10240;


   use kqueue;


}

http {


   include   mime.types;


   default_type  application/octet-stream;





   log_format  main  '$remote_addr - $remote_user [$time_local] $request '


 '$status $body_bytes_sent $http_referer '


 '$http_user_agent $http_x_forwarded_for';

   sendfileon;
   #tcp_nopush on;
   #keepalive_timeout  0;
   keepalive_timeout  65;
   #gzip  on;
   includewebsite.conf;
}


sysctl.conf:
net.inet.icmp.drop_redirect=1
net.inet.icmp.log_redirect=1
net.inet.tcp.msl=2500
net.inet.icmp.icmplim=5
kern.ipc.somaxconn=32768
kern.ipc.shmall=32768
kern.ipc.shmmax=134217728
kern.ipc.semmap=256

loader.conf:
autoboot_delay=3
kern.maxfiles=32768
kern.ipc.semmni=256
kern.ipc.semmns=512
kern.ipc.semmnu=256
kern.ipc.nmbclusters=32768

netstat -n | awk '/^tcp/ {++S[$NF]} END {for(a in S) print a, S[a]}':
FIN_WAIT_1 634
FIN_WAIT_2 2192
LAST_ACK 52
CLOSING 1
SYN_RCVD 10
TIME_WAIT 16
ESTABLISHED 2959

netstat -m:
484/2336/2820 mbufs in use (current/cache/total)
105/965/1070/32768 mbuf clusters in use (current/cache/total/max)
105/919 mbuf+clusters out of packet secondary zone in use (current/
cache)
0/65/65/12800 4k (page size) jumbo clusters in use (current/cache/
total/max)
0/0/0/6400 9k jumbo clusters in use (current/cache/total/max)
0/0/0/3200 16k jumbo clusters in use (current/cache/total/max)
331K/2774K/3105K bytes allocated to network (current/cache/total)
0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
0/0/0 requests for jumbo clusters denied (4k/9k/16k)
104/175/6656 sfbufs in use (current/peak/max)
0 requests for sfbufs denied
0 requests for sfbufs delayed
401 requests for I/O initiated by sendfile
0 calls to protocol drain routines

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Large numbers of Limiting open port RST response from 6 to 5 packets/sec

2008-03-09 Thread Manolis Kiagias



roy lee wrote:

this is  a web server,use nginx, Large numbers of Limiting
open port RST response from 6 to 5 packets/sec.

I need help.

dmesg:
Limiting open port RST response from 11 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
Limiting open port RST response from 8 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
Limiting open port RST response from 8 to 5 packets/sec
Limiting open port RST response from 7 to 5 packets/sec
Limiting open port RST response from 7 to 5 packets/sec
Limiting open port RST response from 14 to 5 packets/sec
Limiting open port RST response from 11 to 5 packets/sec
Limiting open port RST response from 9 to 5 packets/sec
Limiting open port RST response from 12 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
...

uname -a
FreeBSD qz14253.tmdxy.org 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sat Mar
8 20:41:05 UTC 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/
qz2kernel  i386

SNIP

sysctl.conf:
net.inet.icmp.drop_redirect=1
net.inet.icmp.log_redirect=1
net.inet.tcp.msl=2500
net.inet.icmp.icmplim=5
kern.ipc.somaxconn=32768
kern.ipc.shmall=32768
kern.ipc.shmmax=134217728
kern.ipc.semmap=256

SNIP
ICMP packets are rate-limited by the kernel, but you limited them even 
more with this:


net.inet.icmp.icmplim=5

This is the cause of your messages. Adjust it to about 500.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Large numbers of Limiting open port RST response from 6 to 5 packets/sec

2008-03-09 Thread roy lee

Manolis Kiagias 写道:



roy lee wrote:

this is  a web server,use nginx, Large numbers of Limiting
open port RST response from 6 to 5 packets/sec.

I need help.

dmesg:
Limiting open port RST response from 11 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
Limiting open port RST response from 8 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
Limiting open port RST response from 8 to 5 packets/sec
Limiting open port RST response from 7 to 5 packets/sec
Limiting open port RST response from 7 to 5 packets/sec
Limiting open port RST response from 14 to 5 packets/sec
Limiting open port RST response from 11 to 5 packets/sec
Limiting open port RST response from 9 to 5 packets/sec
Limiting open port RST response from 12 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
...

uname -a
FreeBSD qz14253.tmdxy.org 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sat Mar
8 20:41:05 UTC 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/
qz2kernel  i386

SNIP

sysctl.conf:
net.inet.icmp.drop_redirect=1
net.inet.icmp.log_redirect=1
net.inet.tcp.msl=2500
net.inet.icmp.icmplim=5
kern.ipc.somaxconn=32768
kern.ipc.shmall=32768
kern.ipc.shmmax=134217728
kern.ipc.semmap=256

SNIP
ICMP packets are rate-limited by the kernel, but you limited them even 
more with this:


net.inet.icmp.icmplim=5

This is the cause of your messages. Adjust it to about 500.



if sysctl net.inet.icmp.icmplim=500 , the services will stop,
twisted log : writev() failed (32: Broken pipe) while sending request to 
upstream

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Large numbers of Limiting open port RST response from 6 to 5 packets/sec

2008-03-09 Thread Manolis Kiagias

roy lee wrote:

Manolis Kiagias 写道:



roy lee wrote:

this is  a web server,use nginx, Large numbers of Limiting
open port RST response from 6 to 5 packets/sec.

I need help.

dmesg:
Limiting open port RST response from 11 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
Limiting open port RST response from 8 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
Limiting open port RST response from 8 to 5 packets/sec
Limiting open port RST response from 7 to 5 packets/sec
Limiting open port RST response from 7 to 5 packets/sec
Limiting open port RST response from 14 to 5 packets/sec
Limiting open port RST response from 11 to 5 packets/sec
Limiting open port RST response from 9 to 5 packets/sec
Limiting open port RST response from 12 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
...

uname -a
FreeBSD qz14253.tmdxy.org 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sat Mar
8 20:41:05 UTC 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/
qz2kernel  i386

SNIP

sysctl.conf:
net.inet.icmp.drop_redirect=1
net.inet.icmp.log_redirect=1
net.inet.tcp.msl=2500
net.inet.icmp.icmplim=5
kern.ipc.somaxconn=32768
kern.ipc.shmall=32768
kern.ipc.shmmax=134217728
kern.ipc.semmap=256

SNIP
ICMP packets are rate-limited by the kernel, but you limited them 
even more with this:


net.inet.icmp.icmplim=5

This is the cause of your messages. Adjust it to about 500.



if sysctl net.inet.icmp.icmplim=500 , the services will stop,
twisted log : writev() failed (32: Broken pipe) while sending request 
to upstream
This is weird. We use 500 on a production web server (large torrent 
site). Kernel default is 200, you may wish to use this value.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [6.2] Fails downloading packages

2008-03-09 Thread Kris Kennaway

Gilles wrote:

Hello

Since 7.0 fails installing on a Hitachi IDE drive, I installed a
Minimal 6.2, but once done, its fails downloading packages:

freebsd# pkg_add -r bash

Error: FTP Unable to get
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.2-release/Latest/bash.tbz:
File unavailable (e.g., file not found, no access)
pkg_add: unable to fetch
'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.2-release/Latest/bash.tbz'
by URL

Indeed, there's no
/pub/FreeBSD/ports/i386/packages-6.2-release/Latest/


They were presumably removed for space reasons (6.3 is the latest 
release).  You can use ftp-archive or switch to the latest packages 
(packages-6-stable).  Use PACKAGESITE or related environment variables 
to do this, see the pkg_add manpage.


Kris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 7.0-RELEASE panics in ip_output

2008-03-09 Thread Kris Kennaway

Nick Sayer wrote:
Since upgrading to 7.0-RELEASE, I seem to get a panic about once a week 
or so.


I have 6to4 set up on this machine, and the stack trace I get from kgdb 
usually looks something like this:


Best to send this to freebsd-net@ instead, and file a PR if it doesnt 
get picked up right away.


Kris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Large numbers of Limiting open port RST response from 6 to 5 packets/sec

2008-03-09 Thread roy lee

Manolis Kiagias 写道:

roy lee wrote:

Manolis Kiagias 写道:



roy lee wrote:

this is  a web server,use nginx, Large numbers of Limiting
open port RST response from 6 to 5 packets/sec.

I need help.

dmesg:
Limiting open port RST response from 11 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
Limiting open port RST response from 8 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
Limiting open port RST response from 8 to 5 packets/sec
Limiting open port RST response from 7 to 5 packets/sec
Limiting open port RST response from 7 to 5 packets/sec
Limiting open port RST response from 14 to 5 packets/sec
Limiting open port RST response from 11 to 5 packets/sec
Limiting open port RST response from 9 to 5 packets/sec
Limiting open port RST response from 12 to 5 packets/sec
Limiting open port RST response from 6 to 5 packets/sec
...

uname -a
FreeBSD qz14253.tmdxy.org 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sat Mar
8 20:41:05 UTC 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/
qz2kernel  i386

SNIP

sysctl.conf:
net.inet.icmp.drop_redirect=1
net.inet.icmp.log_redirect=1
net.inet.tcp.msl=2500
net.inet.icmp.icmplim=5
kern.ipc.somaxconn=32768
kern.ipc.shmall=32768
kern.ipc.shmmax=134217728
kern.ipc.semmap=256

SNIP
ICMP packets are rate-limited by the kernel, but you limited them 
even more with this:


net.inet.icmp.icmplim=5

This is the cause of your messages. Adjust it to about 500.



if sysctl net.inet.icmp.icmplim=500 , the services will stop,
twisted log : writev() failed (32: Broken pipe) while sending request 
to upstream
This is weird. We use 500 on a production web server (large torrent 
site). Kernel default is 200, you may wish to use this value.




Revised to 200,At present normal,I will continue to follow.
thank you!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


CPU Frequency Scaling

2008-03-09 Thread Marcel Cuculici
Hello everyone! My system hardware is Asus P5B with Intel Core Duo 2 e6600.
I installed on it freeBSD 7.0 Release yesterday, but I don`t understand
something. In Gnome there is CPU Frequency Scaling Monitor Witch it`s set to
Performance, and the Cpu freq. is 2.39 Ghz, I can change it MANUALLY to
other freq as can bee see it in the link`s above, but can not set to Economy
:|

 In bios I have Intel Speed Step Enabled, and Cpu Freq set to AUTO.

 However, in Windows XP, my power scheme is set to Minimal Power Management
And the cpu freq stay at 1.58-1.60, and when computer need more cpu power
it  AUTOMATICALY jump`s to 2.40 Ghz.
 The same thing happen`s in Ubuntu linux 7.10 and Debian Etch, the Cpu stay
at ~1.60 Ghz and it jump`s auto when more Cpu resources is needed.

 I don`t undersntand why in linux and windows the cpu is automatically
controlled by operating system and in freeBSD I need to set it manually. How
can be this changed for freeBSD, to act as windows/linux at cpu freq scaling
chapter?



Thank`s in advance, and have a nice day! :)
freeBSD Cpu Freq ScreenShot


http://img291.imageshack.us/my.php?image=screenshotda4.png

http://img87.imageshack.us/my.php?image=screenshot1yc6.png

CPU settings Bios ScreenShot

http://img99.imageshack.us/my.php?image=cartilasala0017nb9.jpg

http://img100.imageshack.us/my.php?image=cartilasala0017fkq7.jpg
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: CPU Frequency Scaling

2008-03-09 Thread Erik Trulsson
On Sun, Mar 09, 2008 at 01:28:17PM +0200, Marcel Cuculici wrote:
 Hello everyone! My system hardware is Asus P5B with Intel Core Duo 2 e6600.
 I installed on it freeBSD 7.0 Release yesterday, but I don`t understand
 something. In Gnome there is CPU Frequency Scaling Monitor Witch it`s set to
 Performance, and the Cpu freq. is 2.39 Ghz, I can change it MANUALLY to
 other freq as can bee see it in the link`s above, but can not set to Economy
 :|
 
  In bios I have Intel Speed Step Enabled, and Cpu Freq set to AUTO.
 
  However, in Windows XP, my power scheme is set to Minimal Power Management
 And the cpu freq stay at 1.58-1.60, and when computer need more cpu power
 it  AUTOMATICALY jump`s to 2.40 Ghz.
  The same thing happen`s in Ubuntu linux 7.10 and Debian Etch, the Cpu stay
 at ~1.60 Ghz and it jump`s auto when more Cpu resources is needed.
 
  I don`t undersntand why in linux and windows the cpu is automatically
 controlled by operating system and in freeBSD I need to set it manually. How
 can be this changed for freeBSD, to act as windows/linux at cpu freq scaling
 chapter?

You can have it done automatically on FreeBSD too.

First you need to have 'device cpufreq' in your kernel config or load the 
cpufreq
kernel module with kldload cpufreq.  If you can change the frequency
manually, then this is probably already done.

Then you need to run the powerd(8) daemon.  It can be enabled to start
automatically at boot time by putting the line 'powerd_enable=YES' in
/etc/rc.conf






-- 
Insert your favourite quote here.
Erik Trulsson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ext3

2008-03-09 Thread Viktor Penkov
Hi everybody!!!I've installed the new release of fbsd, but I can't mount my
ext3 partitions.can somebody help me with this?
best regards
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ext3

2008-03-09 Thread Manolis Kiagias

Viktor Penkov wrote:

Hi everybody!!!I've installed the new release of fbsd, but I can't mount my
ext3 partitions.can somebody help me with this?
best regards
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


  

Have a look at

man 5 ext2fs

for instructions.

You will have to mount ext3 as ext2. This is possible as long as the 
ext3 filesystem is not dirty (i.e. the journal is clean, meaning the 
volume was properly dismounted last time you used it). Mind you, IIRC, 
if you write something to the disk while it is mounted as ext2, it will 
probably go through a long fsck next time you reboot into Linux 
(assuming you are sharing this partition between Linux and FreeBSD).

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IPv6 6to4

2008-03-09 Thread Lowell Gilbert
Ofloo [EMAIL PROTECTED] writes:

 When using 6to4 extensively the system crashes I've never had this with gif
 tunnels though every since I've started using 6to4 and stf interface this
 happens especially when the v6 gateway is unreachable for short time, ..

 I haven't seen the error yet but I do know i had this before,  well it's not
 showing in the /var/log/all.log nor /var/log/messages, however I do remember
 something about non-sleeping thread or something..

 If anyone needs more info let me know I'll be more then happy to provide a
 system to test on if required currently i have 3 exact systems which have
 this issue.

See the kernel debugging section in the Developers' Handbook.

You don't mention what version you're running, but you may want to
update to something recent.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: subversion -make error

2008-03-09 Thread Lowell Gilbert
comperr [EMAIL PROTECTED] writes:

 Hey - when I try make install clean on subversion I get
 sr/local/bin/ifnames-2.61 AUTOM4TE=/usr/local/bin/autom4te-2.61
 AUTORECONF=/usr/local/bin/autoreconf-2.61 AUTOSCAN=/usr/local/bin/
 autoscan-2.61 AUTOUPDATE=/usr/local/bin/autoupdate-2.61
 AUTOCONF_VERSION=261 LIBTOOL=/usr/local/bin/libtool LIBTOOLIZE=/usr/
 local/bin/libtoolize LIBTOOL_M4=/usr/local/share/aclocal/libtool.m4
 lt_cv_sys_max_cmd_len=262144 /bin/sh ./buildconf
 buildconf: checking installation...
 buildconf: python not found.
You need python installed
to build APR from SVN.
 *** Error code 1

 This is when I know I have python installed

Is python installed from the ports system?
What does which python tell you?

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Help with pf ruleset

2008-03-09 Thread erik Wilson
I'm pulling my hair out here. I've been working on this for days without
any success.

I've whittled the ruleset down to the barest possible rules and even that
doesn't work. I'm at my wits end. I would really appreciate it if someone
could show me where i'm being a complete and total moron.

Here's the situation. I have a somewhat unique environment. It consists of
2 WAN's, an internal LAN, and numerous VLANS (isolated clients, which need
to be accessible from the internet, but not to each other). This runs in a
VMWare esx server, but that's not really important.

FreeBSD 7.0-RELEASE

em0 = lan (10.0.0.x)
em2 = WAN1 (y.y.y.y) (dhcp)
em3 = WAN2 (x.x.x.x) (static /28 subnet)

the default gateway is on nic2. nic3 will need to forward ip:port's to
various vlans. nic2 is used for all outbound lan traffic (internet). nic2
will need to failover to nic3 eventually, and nic3 will have to failover to
nic2 (for outbound, obviously no choice for inbound).

So here's the problem. I can't even get nic2 or nic3 to respond to a ping
request from outside my network when pf is enabled. I know the interfaces
are set up correct, as I can ping the default gateways of both interfaces.

Also, outbound NAT works perfectly on wan1.

Here's my ruleset.

lan_if=em0
wan1_if=em2
wan2_if=em3
set block-policy return
set skip on lo0
nat on $wan1_if from $lan_if:network to any - ($wan1_if)
block in log
pass out log keep state
pass in log inet proto icmp all icmp-type echoreq keep state
pass in log quick on $lan_if

Looks simple enough, right? Why won't it work? All i want is to get a ping
from both of the firewalls WAN's from outside the network.

Any ideas?

Routing tables

Internet:
DestinationGatewayFlagsRefs  Use  Netif Expire
defaulty.y.y.129   UGS 0 4433em2
10.0.0.0/24link#1 UC  00em0
10.0.0.1   00:0c:29:a9:e5:75  UHLW1  338em0   1177
10.0.0.2   00:0c:29:c0:74:57  UHLW1 3291em0   1041
10.0.0.10  00:19:db:b1:07:78  UHLW1 4827em0   1185
10.0.1.0/24link#7 UC  00  vlan0
10.0.2.0/24link#8 UC  00  vlan1
10.0.2.2   00:0c:29:e9:8c:d2  UHLW1  251  vlan1   1190
10.0.3.0/24link#9 UC  00  vlan2
10.0.3.2   00:50:56:9c:53:89  UHLW1  420  vlan2   1152
10.0.4.0/24link#10UC  00  vlan3
10.0.5.0/24link#11UC  00  vlan4
127.0.0.1  127.0.0.1  UH  00lo0
y.y.y.128/25link#3 UC  00em2
x.x.x.144/28 link#4 UC  00em3
x.x.x.14600:0c:29:b5:0e:bb  UHLW16lo0
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IPFW - kernel: drop session / too many entries

2008-03-09 Thread ervin
I'm running

FreeBSD FreeWeb.local 6.3-RELEASE-p1 with apache2 php5 mysql5


On 09/03/2008, ervin [EMAIL PROTECTED] wrote:
 I get this message in the /etc/security file:

  Mar  9 14:24:45 FreeWeb kernel: drop session 80.198.0.217:61236 -
  192.168.1.99:80, too many entries

  which causes a delay when accessing the web server (one of them is
  www.valentin-jensen.org)

  I have the following in my sysctl.conf:

  net.inet.ip.fw.verbose=1
  net.inet.ip.fw.verbose_limit=5
  net.inet.ip.fw.dyn_max=8192

  Any ideas ?


  --

  mvh/best regards  ervin

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


IPFW - kernel: drop session / too many entries

2008-03-09 Thread ervin
I get this message in the /etc/security file:

Mar  9 14:24:45 FreeWeb kernel: drop session 80.198.0.217:61236 -
192.168.1.99:80, too many entries

which causes a delay when accessing the web server (one of them is
www.valentin-jensen.org)

I have the following in my sysctl.conf:

net.inet.ip.fw.verbose=1
net.inet.ip.fw.verbose_limit=5
net.inet.ip.fw.dyn_max=8192

Any ideas ?

-- 

mvh/best regards  ervin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


WLan randomly suffering from heavy package lost

2008-03-09 Thread Luca Presotto
Hi everyone.
I'm currently running  freebsd-7.0-release GENERIC on a dell Inspiron 6400 
(i386).
I have a problem when networking via wifi. I have an intel 3945abg 
integrated card and I'm using the wpi drivers.
I can connect to my wlan but after one minute or so of perfect 
connection the network starts to be terribly slow. I have tried pinging and I 
discovered that I have a 60% 
package lost when pinging something like google or other sites, that goes  
up to 90% or more when I increase the package size.
When pinging my router or other computers inside my network I get even 
worse performances. (Something like 97% package lost or 100% if increasing 
the package size to something like 1400)
With other OSes in my pc everything is fine, other pcs connect without 
problem. If I connect via etherneth to the same hub where the wifi 
transmitter is connected everything is fine.
I have tried adding to resolv.conf, automatically generated by dhclient, 
the addresses of the DNSs of my ISP and 
browsing the internet has become a liiitle better, but still very far from the 
normal speed. And connecting to other pcs inside my network is still a 
pain..

Any idea?

Thank you, 
Luca

resolve .conf:

nameserver 192.168.1.1 (my router)
nameserver ...(my ISP DNS)

#ifconfig wpi0
wpi0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500
ether 00:1b:77:23:a3:9e
inet6 fe80::21b:77ff:fe23:a39e%wpi0 prefixlen 64 scopeid 0x1 
inet 192.168.1.250 netmask 0xff00 broadcast 255.255.255.255
media: IEEE 802.11 Wireless Ethernet autoselect (OFDM/24Mbps)
status: associated
ssid Maldives channel 6 (2437 Mhz 11g) bssid 00:11:95:18:83:45
authmode OPEN privacy OFF txpower 50 bmiss 7 scanvalid 60
protmode CTS

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IPv6 6to4

2008-03-09 Thread Ofloo



Lowell Gilbert wrote:
 
 Ofloo [EMAIL PROTECTED] writes:
 
 When using 6to4 extensively the system crashes I've never had this with
 gif
 tunnels though every since I've started using 6to4 and stf interface this
 happens especially when the v6 gateway is unreachable for short time, ..

 I haven't seen the error yet but I do know i had this before,  well it's
 not
 showing in the /var/log/all.log nor /var/log/messages, however I do
 remember
 something about non-sleeping thread or something..

 If anyone needs more info let me know I'll be more then happy to provide
 a
 system to test on if required currently i have 3 exact systems which have
 this issue.
 
 See the kernel debugging section in the Developers' Handbook.
 
 You don't mention what version you're running, but you may want to
 update to something recent.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
 
 

It doesn't matter, I've had it since 6.0 and it is still present in version
6.3,.. not sure about 5.3 though from the point I've started using IPv6 and
SMP FreeBSD has been letting me down.
-- 
View this message in context: 
http://www.nabble.com/IPv6-6to4-tp15921128p15936498.html
Sent from the freebsd-questions mailing list archive at Nabble.com.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ext3

2008-03-09 Thread Josh Paetzel
On Sunday 09 March 2008 07:23:14 am Manolis Kiagias wrote:
 Viktor Penkov wrote:
  Hi everybody!!!I've installed the new release of fbsd, but I can't mount
  my ext3 partitions.can somebody help me with this?
  best regards



 Have a look at

 man 5 ext2fs

 for instructions.

 You will have to mount ext3 as ext2. This is possible as long as the
 ext3 filesystem is not dirty (i.e. the journal is clean, meaning the
 volume was properly dismounted last time you used it). Mind you, IIRC,
 if you write something to the disk while it is mounted as ext2, it will
 probably go through a long fsck next time you reboot into Linux
 (assuming you are sharing this partition between Linux and FreeBSD).

This may be mentioned in the manpage, but in case it's not, sysutils/e2fsprogs 
is an invaluable tool for those wishing to deal with ext[2|3]fs on FreeBSD.

-- 
Thanks,

Josh Paetzel

PGP: 8A48 EF36 5E9F 4EDA 5A8C 11B4 26F9 01F1 27AF AECB


signature.asc
Description: This is a digitally signed message part.


Re: Help with pf ruleset

2008-03-09 Thread Josh Paetzel
On Sunday 09 March 2008 08:22:07 am erik Wilson wrote:
 I'm pulling my hair out here. I've been working on this for days without
 any success.

 I've whittled the ruleset down to the barest possible rules and even that
 doesn't work. I'm at my wits end. I would really appreciate it if someone
 could show me where i'm being a complete and total moron.

 Here's the situation. I have a somewhat unique environment. It consists of
 2 WAN's, an internal LAN, and numerous VLANS (isolated clients, which need
 to be accessible from the internet, but not to each other). This runs in a
 VMWare esx server, but that's not really important.

 FreeBSD 7.0-RELEASE

 em0 = lan (10.0.0.x)
 em2 = WAN1 (y.y.y.y) (dhcp)
 em3 = WAN2 (x.x.x.x) (static /28 subnet)

 the default gateway is on nic2. nic3 will need to forward ip:port's to
 various vlans. nic2 is used for all outbound lan traffic (internet). nic2
 will need to failover to nic3 eventually, and nic3 will have to failover to
 nic2 (for outbound, obviously no choice for inbound).

 So here's the problem. I can't even get nic2 or nic3 to respond to a ping
 request from outside my network when pf is enabled. I know the interfaces
 are set up correct, as I can ping the default gateways of both interfaces.

 Also, outbound NAT works perfectly on wan1.

 Here's my ruleset.

 lan_if=em0
 wan1_if=em2
 wan2_if=em3
 set block-policy return
 set skip on lo0
 nat on $wan1_if from $lan_if:network to any - ($wan1_if)
 block in log
 pass out log keep state
 pass in log inet proto icmp all icmp-type echoreq keep state
 pass in log quick on $lan_if

 Looks simple enough, right? Why won't it work? All i want is to get a ping
 from both of the firewalls WAN's from outside the network.

 Any ideas?

 Routing tables

 Internet:
 DestinationGatewayFlagsRefs  Use  Netif Expire
 defaulty.y.y.129   UGS 0 4433em2
 10.0.0.0/24link#1 UC  00em0
 10.0.0.1   00:0c:29:a9:e5:75  UHLW1  338em0   1177
 10.0.0.2   00:0c:29:c0:74:57  UHLW1 3291em0   1041
 10.0.0.10  00:19:db:b1:07:78  UHLW1 4827em0   1185
 10.0.1.0/24link#7 UC  00  vlan0
 10.0.2.0/24link#8 UC  00  vlan1
 10.0.2.2   00:0c:29:e9:8c:d2  UHLW1  251  vlan1   1190
 10.0.3.0/24link#9 UC  00  vlan2
 10.0.3.2   00:50:56:9c:53:89  UHLW1  420  vlan2   1152
 10.0.4.0/24link#10UC  00  vlan3
 10.0.5.0/24link#11UC  00  vlan4
 127.0.0.1  127.0.0.1  UH  00lo0
 y.y.y.128/25link#3 UC  00em2
 x.x.x.144/28 link#4 UC  00em3
 x.x.x.14600:0c:29:b5:0e:bb  UHLW16lo0

The obfusication is making it harder for my brain to deal with than it should 
be.  At any rate, em3 isn't going to work properly without a route-to rule to 
get it to answer back to pings out the proper gateway.  I'm not entirely sure 
why you can't ping the ip on em2, could you provide the output of tcpdump -i 
em2 while you ping it?

Also, what did you do with em1? :)

-- 
Thanks,

Josh Paetzel

PGP: 8A48 EF36 5E9F 4EDA 5A8C 11B4 26F9 01F1 27AF AECB


signature.asc
Description: This is a digitally signed message part.


ifconfig ral0

2008-03-09 Thread Anatoli Marinov
How I can turn on fast frame and turbo modes for ralink wireless card:
[EMAIL PROTECTED]:2:11:0:   class=0x028000 card=0x25611814 chip=0x03011814
rev=0x00 hdr=0x00
vendor = 'Ralink Technology, Corp'
device = 'RT2561/RT61 802.11g PCI'
class  = network

The card supports these features under windows but here (freebsd 7.0 stable)
I could not switch the on.
ifconfig -v ral0
ral0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 2290
ether 00:0e:2e:ec:e1:3d
inet 172.16.4.1 netmask 0xff00 broadcast 172.16.4.255
media: IEEE 802.11 Wireless Ethernet OFDM/54Mbps mode 11g hostap
status: associated
ssid freebsdap channel 1 (2412 Mhz 11g) bssid 00:0e:2e:ec:e1:3d
authmode WPA privacy MIXED deftxkey 3
TKIP 2:128-bit
TKIP 3:128-bit powersavemode OFF powersavesleep 100 txpower 50
txpowmax 50.0 rtsthreshold 2346 fragthreshold 2346 bmiss 7
scanvalid 60 -bgscan bgscanintvl 300 bgscanidle 250 roam:rssi11a 7
roam:rate11a 12 roam:rssi11b 7 roam:rate11b 1 roam:rssi11g 7
roam:rate11g 5 -pureg protmode CTS -ht -htcompat -ampdu ampdulimit
8k
ampdudensity - -amsdu -shortgi htprotmode RTSCTS -puren -wme -burst
-ff -dturbo -hidessid apbridge dtimperiod 1 doth inact bintval 100

I tried to execute
ifconfig ral0 ff
ifconfig ral0 dturbo
ifconfig ral0 burst

But all lines filed..
Maybe the BSD  driver does not support them.
What do you think?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IPFW - kernel: drop session / too many entries

2008-03-09 Thread ervin
solved

change the limit src-addr x to a reasonable higher value (for me a 2
to 4 modification made the difference)

On 09/03/2008, ervin [EMAIL PROTECTED] wrote:
 I'm running

  FreeBSD FreeWeb.local 6.3-RELEASE-p1 with apache2 php5 mysql5



  On 09/03/2008, ervin [EMAIL PROTECTED] wrote:
   I get this message in the /etc/security file:
  
Mar  9 14:24:45 FreeWeb kernel: drop session 80.198.0.217:61236 -
192.168.1.99:80, too many entries
  
which causes a delay when accessing the web server (one of them is
www.valentin-jensen.org)
  
I have the following in my sysctl.conf:
  
net.inet.ip.fw.verbose=1
net.inet.ip.fw.verbose_limit=5
net.inet.ip.fw.dyn_max=8192
  
Any ideas ?
  
  
--
  
mvh/best regards  ervin
  

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


cdrecord, CD-R error messages with 7.0-RELEASE

2008-03-09 Thread Walker
When trying to burn an ISO with cdrecord:

cdrecord -v -sao fs=32m dev=1,0,0 speed=24 7.0-RELEASE-i386-disc1.iso

I'm seeing these syslog messages:

Mar  9 12:40:06 kern.crit server kernel: acd0: FAILURE -
MODE_SELECT_BIG ILLEGAL REQUEST asc=0x26 ascq=0x00 sks=0x00 0x00 0x0c
Mar  9 12:40:06 kern.crit server last message repeated 2 times
Mar  9 12:40:06 kern.crit server kernel: acd0: FAILURE -
MODE_SELECT_BIG ILLEGAL REQUEST asc=0x26 ascq=0x00 sks=0x00 0x00 0x0a
Mar  9 12:40:06 kern.crit server kernel: acd0: FAILURE - READ_BUFFER
ILLEGAL REQUEST asc=0x20 ascq=0x00
Mar  9 12:40:06 kern.crit server kernel: acd0: FAILURE - READ_BUFFER
ILLEGAL REQUEST asc=0x20 ascq=0x00
Mar  9 12:40:16 kern.crit server kernel: acd0: FAILURE - READ_TOC
ILLEGAL REQUEST asc=0x24 ascq=0x00 sks=0x40 0x00 0x02
Mar  9 12:43:32 kern.crit server kernel: acd0: FAILURE -
MODE_SELECT_BIG ILLEGAL REQUEST asc=0x26 ascq=0x00 sks=0x00 0x00 0x07

The two CD-R's I've recorded verify with an md5 okay.  Any ideas about
these error messages?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [7.0] Stuck at md0: Preloaded image /boot/msfroot

2008-03-09 Thread Gilles
On Sun, 09 Mar 2008 01:47:54 +0100, Gilles [EMAIL PROTECTED]
wrote:
I can successfully run and install FreeBSD 6.2 on the same
host/hard-disk. Any idea what could cause this?

I only get one line further with a 20GB Seagate ST320413A, where
FreeBSD gets stuck at the line that says ad0: 19092MB Seagate etc..

Could it be linked to ACPI and all those things? I booted as usual,
using the default boot.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cdrecord, CD-R error messages with 7.0-RELEASE

2008-03-09 Thread Wojciech Puchar
it's good idea to remove atapicd from kernel while using atapicam - don't 
keep both.


personally - i use only atapicam.


When trying to burn an ISO with cdrecord:

cdrecord -v -sao fs=32m dev=1,0,0 speed=24 7.0-RELEASE-i386-disc1.iso

I'm seeing these syslog messages:

Mar  9 12:40:06 kern.crit server kernel: acd0: FAILURE -
MODE_SELECT_BIG ILLEGAL REQUEST asc=0x26 ascq=0x00 sks=0x00 0x00 0x0c
Mar  9 12:40:06 kern.crit server last message repeated 2 times
Mar  9 12:40:06 kern.crit server kernel: acd0: FAILURE -
MODE_SELECT_BIG ILLEGAL REQUEST asc=0x26 ascq=0x00 sks=0x00 0x00 0x0a
Mar  9 12:40:06 kern.crit server kernel: acd0: FAILURE - READ_BUFFER
ILLEGAL REQUEST asc=0x20 ascq=0x00
Mar  9 12:40:06 kern.crit server kernel: acd0: FAILURE - READ_BUFFER
ILLEGAL REQUEST asc=0x20 ascq=0x00
Mar  9 12:40:16 kern.crit server kernel: acd0: FAILURE - READ_TOC
ILLEGAL REQUEST asc=0x24 ascq=0x00 sks=0x40 0x00 0x02
Mar  9 12:43:32 kern.crit server kernel: acd0: FAILURE -
MODE_SELECT_BIG ILLEGAL REQUEST asc=0x26 ascq=0x00 sks=0x00 0x00 0x07

The two CD-R's I've recorded verify with an md5 okay.  Any ideas about
these error messages?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


freebsd iso dvd

2008-03-09 Thread Christian J. Wong Cruz
Hello, I'm Christian Wong and I'm new in this list, I've bought a computer
with baseboard Intel DP35DP and Intel Core 2 Duo Processor E6750 and I don't
have internet connection, can someone tell me where can I download the best
iso dvd for my pc?

Thanks

-- 
Christian J. Wong Cruz
Estudiante de Ciencias de la Computación
Universidad Nacional de San Agustín
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [6.2] Fails downloading packages

2008-03-09 Thread Gilles
On Sun, 09 Mar 2008 11:25:18 +0100, Kris Kennaway [EMAIL PROTECTED]
wrote:
They were presumably removed for space reasons (6.3 is the latest 
release).  You can use ftp-archive or switch to the latest packages 
(packages-6-stable).

OK, thanks for the tip.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: freebsd iso dvd

2008-03-09 Thread Manolis Kiagias

Christian J. Wong Cruz wrote:

Hello, I'm Christian Wong and I'm new in this list, I've bought a computer
with baseboard Intel DP35DP and Intel Core 2 Duo Processor E6750 and I don't
have internet connection, can someone tell me where can I download the best
iso dvd for my pc?

Thanks

  

Ready made DVD ISO for 7.0-RELEASE here:

http://www.tuxdistro.com/torrents-details.php?id=921
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help with pf ruleset

2008-03-09 Thread Erik Norgaard

erik Wilson wrote:

I'm pulling my hair out here. I've been working on this for days without
any success.

I've whittled the ruleset down to the barest possible rules and even that
doesn't work. I'm at my wits end. I would really appreciate it if someone
could show me where i'm being a complete and total moron.

Here's the situation. I have a somewhat unique environment. It consists of
2 WAN's, an internal LAN, and numerous VLANS (isolated clients, which need
to be accessible from the internet, but not to each other). This runs in a
VMWare esx server, but that's not really important.

FreeBSD 7.0-RELEASE

em0 = lan (10.0.0.x)
em2 = WAN1 (y.y.y.y) (dhcp)
em3 = WAN2 (x.x.x.x) (static /28 subnet)

the default gateway is on nic2. nic3 will need to forward ip:port's to
various vlans. nic2 is used for all outbound lan traffic (internet). nic2
will need to failover to nic3 eventually, and nic3 will have to failover to
nic2 (for outbound, obviously no choice for inbound).

So here's the problem. I can't even get nic2 or nic3 to respond to a ping
request from outside my network when pf is enabled. I know the interfaces
are set up correct, as I can ping the default gateways of both interfaces.

Also, outbound NAT works perfectly on wan1.

Here's my ruleset.

lan_if=em0
wan1_if=em2
wan2_if=em3
set block-policy return
set skip on lo0
nat on $wan1_if from $lan_if:network to any - ($wan1_if)
block in log
pass out log keep state
pass in log inet proto icmp all icmp-type echoreq keep state
pass in log quick on $lan_if

Looks simple enough, right? Why won't it work? All i want is to get a ping
from both of the firewalls WAN's from outside the network.

Any ideas?


How about the log?

I know you have cut away a lot of rules, but maybe that just makes 
things more confusing. Try to nest your rules in the following order:


direction - interface - protocol - src net - dst net - port/type

You should need no out rules if you have in rules with keep state. 
At each branch level make a catchup rule at the end with default action 
and quick key word to make sure packets don't spill over and get 
matched by other rules.


Hopefully this will help you pin down where things go wrong.

Cheers, Erik

--
Erik Nørgaard
Ph: +34.666334818   http://www.locolomo.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help with pf ruleset

2008-03-09 Thread Erik Wilson
On Sun, Mar 9, 2008 at 3:20 PM, Erik Norgaard [EMAIL PROTECTED] wrote:

  erik Wilson wrote:
  I'm pulling my hair out here. I've been working on this for days without
  any success.
 
  I've whittled the ruleset down to the barest possible rules and even
 that
  doesn't work. I'm at my wits end. I would really appreciate it if
 someone
  could show me where i'm being a complete and total moron.
 
  Here's the situation. I have a somewhat unique environment. It consists
 of
  2 WAN's, an internal LAN, and numerous VLANS (isolated clients, which
 need
  to be accessible from the internet, but not to each other). This runs in
 a
  VMWare esx server, but that's not really important.
 
  FreeBSD 7.0-RELEASE
 
  em0 = lan (10.0.0.x)
  em2 = WAN1 (y.y.y.y) (dhcp)
  em3 = WAN2 (x.x.x.x) (static /28 subnet)
 
  the default gateway is on nic2. nic3 will need to forward ip:port's to
  various vlans. nic2 is used for all outbound lan traffic (internet).
 nic2
  will need to failover to nic3 eventually, and nic3 will have to failover
 to
  nic2 (for outbound, obviously no choice for inbound).
 
  So here's the problem. I can't even get nic2 or nic3 to respond to a
 ping
  request from outside my network when pf is enabled. I know the
 interfaces
  are set up correct, as I can ping the default gateways of both
 interfaces.
 
  Also, outbound NAT works perfectly on wan1.
 
  Here's my ruleset.
 
  lan_if=em0
  wan1_if=em2
  wan2_if=em3
  set block-policy return
  set skip on lo0
  nat on $wan1_if from $lan_if:network to any - ($wan1_if)
  block in log
  pass out log keep state
  pass in log inet proto icmp all icmp-type echoreq keep state
  pass in log quick on $lan_if
 
  Looks simple enough, right? Why won't it work? All i want is to get a
 ping
  from both of the firewalls WAN's from outside the network.
 
  Any ideas?

 How about the log?


I'll post some log info as soon as I can bring down the network again to do
some testing.


 I know you have cut away a lot of rules, but maybe that just makes
 things more confusing. Try to nest your rules in the following order:

 direction - interface - protocol - src net - dst net - port/type

 You should need no out rules if you have in rules with keep state.
 At each branch level make a catchup rule at the end with default action
 and quick key word to make sure packets don't spill over and get
 matched by other rules.


Good advice, thanks.  I'm afraid i've tried so many different options and
variations to get this to work that it's not as pretty as it should be.  I
got some of these rules from various examples posted on the web, and tweaked
them into unrecognizability ;)  Do you think that Josh is right about
needing a route-to rule for the second WAN interface?

Since you're handing out best practices ;)  Is it better to use a nat pass
or rdr pass rule than seperate nat/rdr and pass statements?  Why?

I think my biggest frustration is not finding a single place that is
detailed enough about things.  I've rad the book of pf, the man pages, the
handbooks, etc.. they all give pieces of the puzzle.  Maybe once i master
this i'll work on a pf bible ;)


 Hopefully this will help you pin down where things go wrong.

 Cheers, Erik


Cheers yourself Erik ;)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD 7.0 w/ 3ware 9650SE-24M8 no JBOD disks

2008-03-09 Thread William Taylor
I just installed FreeBSD 7.0 w/ a 3ware 9650SE-24M8 controller.
I set the controller to export JBOD disks but they don't show up in FreeBSD for 
some reason.
I have verified that they do show up in CentOS so I don't think the controller 
is setup wrong.
If I create an array it will show up in FreeBSD as da0. I have tried disabling 
the onboard 
sata controller as well to see if that made a difference. Also I couldn't find 
anything else
in the kernel that might pertain to this. BTW I had to use the onboard sata 
controller for the 
install because the disks were not showing up.


uname -a:  
FreeBSD localhost 7.0-STABLE FreeBSD 7.0-STABLE #0: Sun Mar  9 06:00:53 UTC 
2008 [EMAIL PROTECTED]:/usr/src/sys/amd64/compile/LDS  amd64

Potentialy relevent dmesg output:
3ware device driver for 9000 series storage controllers, version: 3.70.05.001
twa0: 3ware 9000 series Storage Controller port 0x3000-0x30ff mem 
0xd800-0xd9ff,0xda30-0xda300fff irq 18 at device 0.0 on pci9
twa0: [ITHREAD]
twa0: INFO: (0x04: 0x0053): Battery capacity test is overdue:
twa0: INFO: (0x15: 0x1300): Controller details:: Model 9650SE-24M8, 24 ports, 
Firmware FE9X 3.08.00.016, BIOS BE9X 3.08.00.004

da0 at twa0 bus 0 target 0 lun 0
da0: AMCC 9650SE-24M DISK 3.08 Fixed Direct Access SCSI-5 device 
da0: 100.000MB/s transfers
da0: 5721984MB (11718623232 512 byte sectors: 255H 63S/T 729450C)

FreeBSD has no problems detecting the disk w/ the onboard sata controller:
ad4: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata2-master SATA300
ad6: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata3-master SATA300
ad8: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata4-master SATA300
ad10: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata5-master SATA300
ad12: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata6-master SATA300
ad14: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata7-master SATA300


Thanks,
  William

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD 7.0 w/ 9650SE-24M8 no JBOD disks

2008-03-09 Thread William Taylor
I just installed FreeBSD 7.0 w/ a 3ware 9650SE-24M8 controller.
I set the controller to export JBOD disks but they don't show up in FreeBSD for 
some reason.
I have verified that they do show up in CentOS so I don't think the controller 
is setup wrong.
If I create an array it will show up in FreeBSD as da0. I have tried disabling 
the onboard
sata controller as well to see if that made a difference. Also I couldn't find 
anything else
in the kernel that might pertain to this. BTW I had to use the onboard sata 
controller for the 
install because the disks were not showing up.


uname -a: 
FreeBSD localhost 7.0-STABLE FreeBSD 7.0-STABLE #0: Sun Mar  9 06:00:53 UTC 
2008 [EMAIL PROTECTED]:/usr/src/sys/amd64/compile/LDS  amd64

Potentialy relevent dmesg output:
3ware device driver for 9000 series storage controllers, version: 3.70.05.001
twa0: 3ware 9000 series Storage Controller port 0x3000-0x30ff mem 
0xd800-0xd9ff,0xda30-0xda300fff irq 18 at device 0.0 on pci9
twa0: [ITHREAD]
twa0: INFO: (0x04: 0x0053): Battery capacity test is overdue: 
twa0: INFO: (0x15: 0x1300): Controller details:: Model 9650SE-24M8, 24 ports, 
Firmware FE9X 3.08.00.016, BIOS BE9X 3.08.00.004

da0 at twa0 bus 0 target 0 lun 0
da0: AMCC 9650SE-24M DISK 3.08 Fixed Direct Access SCSI-5 device 
da0: 100.000MB/s transfers
da0: 5721984MB (11718623232 512 byte sectors: 255H 63S/T 729450C)

FreeBSD has no problems detecting the disk w/ the onboard sata controller:
ad4: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata2-master SATA300
ad6: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata3-master SATA300
ad8: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata4-master SATA300
ad10: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata5-master SATA300
ad12: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata6-master SATA300
ad14: 953869MB Hitachi HDS721010KLA330 GKAOA70M at ata7-master SATA300


Thanks,
  William
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Read-only, diskless boot

2008-03-09 Thread Jay L. T. Cornwall
Hi,

I am trying to install FreeBSD onto a CompactFlash card for an ALIX
system. This guide precisely documents my goals:

http://www.freebsd.org/doc/en_US.ISO8859-1/articles/solid-state/ro-fs.html

Unfortunately, it has not been updated for FreeBSD 7. Crucial files such
as /etc/rc.diskless2 have been replaced by a new mechanism in
/etc/rc.initdiskless. The little documentation I have scraped from the
web is too focused on PXE boots with NFS-mounted directories for me to
figure the new system out.

All I need is:
  * / partition to work in read-only mode.
  * Volatile directories such as /root, /var and /tmp to be populated
into a memory filesystem on boot.

The /conf system seems to be related to this, however
/etc/rc.initdiskless specifically says that it is not the correct
mechanism to use for /var. (Quite what is, I've no idea.)

Can someone give me a leg up?

-- 
Jay L. T. Cornwall
http://www.jcornwall.me.uk/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help with pf ruleset

2008-03-09 Thread Erik Norgaard

Erik Wilson wrote:

I know you have cut away a lot of rules, but maybe that just makes
things more confusing. Try to nest your rules in the following order:

direction - interface - protocol - src net - dst net - port/type

You should need no out rules if you have in rules with keep state.
At each branch level make a catchup rule at the end with default action
and quick key word to make sure packets don't spill over and get
matched by other rules.

 
Good advice, thanks.  I'm afraid i've tried so many different options 
and variations to get this to work that it's not as pretty as it should 
be.  I got some of these rules from various examples posted on the web, 
and tweaked them into unrecognizability ;)  Do you think that Josh is 
right about needing a route-to rule for the second WAN interface?


It is absolutely possible that the problem is that the ping or response 
get sent the wrong way. Use snort to see what goes on. I did not analyze 
your setup to the point that I can tell you that.


Since you're handing out best practices ;)  Is it better to use a nat 
pass or rdr pass rule than seperate nat/rdr and pass statements?  Why?


I prefer to separate things. I know the less lines you have, the less 
lines can contain an error. But on the other hand, the less lines you 
have the more obscure and difficult to debug they become.


It is very common that people believe they have errors in their filter 
rules when in fact it's nat rules that are wrong.


When you have both rdr, nat and binat be careful to understand which 
order they take effect. They are first match. But since rdr is done on 
the way IN while nat is done on the way OUT, an rdr rule can take effect 
before the intended nat rule despite it being after the nat rule.


So, to avoid such confusion, write first your rdr, then nat.

Also, use the log statement in your nat rules while debugging.

Cheers, Erik

--
Erik Nørgaard
Ph: +34.666334818   http://www.locolomo.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


K8N-VM CSM not seeing over 2240MB RAM

2008-03-09 Thread Jeremy Johnston
I have been trying to trouble shoot a problem where my 32bit kernel will
not see past 2240MB of RAM where as the BIOS reports it as 3GB. Windows
on the same machine sees all 3GB.

My dmesg can be found at http://www.smart-serv.net/~jeremy/dmesg.txt

Any suggestions on what could be the cause of this would be greatly
appreciated.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


doesn't change to Daylight Saving Time

2008-03-09 Thread Xihong Yin

Hi,

My FreeBSD 6.2 doesn't change to Daylight Saving Time. How should I fix
it?

'zdump -v /etc/localtime | grep 2008' output:

/etc/localtime  Sun Mar  9 06:59:59 2008 UTC = Sun Mar  9 01:59:59 2008
EST isdst=0 gmtoff=-18000
/etc/localtime  Sun Mar  9 07:00:00 2008 UTC = Sun Mar  9 03:00:00 2008
EDT isdst=1 gmtoff=-14400
/etc/localtime  Sun Nov  2 05:59:59 2008 UTC = Sun Nov  2 01:59:59 2008
EDT isdst=1 gmtoff=-14400
/etc/localtime  Sun Nov  2 06:00:00 2008 UTC = Sun Nov  2 01:00:00 2008
EST isdst=0 gmtoff=-18000

Xihong

--
Get a free email account with anti spam protection.
http://www.bluebottle.com/tag/2

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


apache+mod_ssl-1.3.41+2.8.31 crashing with mod_php5

2008-03-09 Thread Chris Maness
I am having apache core dump after I install php5 with the apache 
module.  It runs fine without the module directives that are 
automagically added to the http.conf file, but after it is compiled and 
installed my main log (var log messages) indicates a core dump.


Mar  9 15:21:03 ns2 kernel: pid 67406 (httpd), uid 0: exited on signal 
11 (core dumped)


The httpd-error.log does not seem to indicate a problem.

Anyone else experiencing this?

Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: apache+mod_ssl-1.3.41+2.8.31 crashing with mod_php5

2008-03-09 Thread Erik Wilson
On Sun, Mar 9, 2008 at 6:26 PM, Chris Maness [EMAIL PROTECTED] wrote:

 I am having apache core dump after I install php5 with the apache
 module.  It runs fine without the module directives that are
 automagically added to the http.conf file, but after it is compiled and
 installed my main log (var log messages) indicates a core dump.


Have you upgraded to the latest version of apache to go with the latest
version of php5?  Perhaps you have an older version that isn't binary
compatible with the latest compiled php.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: apache+mod_ssl-1.3.41+2.8.31 crashing with mod_php5

2008-03-09 Thread Chris Maness

Erik Wilson wrote:
On Sun, Mar 9, 2008 at 6:26 PM, Chris Maness [EMAIL PROTECTED] 
mailto:[EMAIL PROTECTED] wrote:


I am having apache core dump after I install php5 with the apache
module.  It runs fine without the module directives that are
automagically added to the http.conf file, but after it is
compiled and
installed my main log (var log messages) indicates a core dump.

 
Have you upgraded to the latest version of apache to go with the 
latest version of php5?  Perhaps you have an older version that isn't 
binary compatible with the latest compiled php.


I just synced my port tree several days ago and rebuilt both.  I will 
try it again.


Chris Maness
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: apache+mod_ssl-1.3.41+2.8.31 crashing with mod_php5

2008-03-09 Thread Mel
On Sunday 09 March 2008 23:32:00 Erik Wilson wrote:
 On Sun, Mar 9, 2008 at 6:26 PM, Chris Maness [EMAIL PROTECTED] wrote:
  I am having apache core dump after I install php5 with the apache
  module.  It runs fine without the module directives that are
  automagically added to the http.conf file, but after it is compiled and
  installed my main log (var log messages) indicates a core dump.

 Have you upgraded to the latest version of apache to go with the latest
 version of php5?  Perhaps you have an older version that isn't binary
 compatible with the latest compiled php.

Bogus. Php works with any apache version it supports.

Chris: juggle order of /usr/local/etc/php/extensions.ini, see archive for 
discussion as to why this can't be handled normally.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: apache+mod_ssl-1.3.41+2.8.31 crashing with mod_php5

2008-03-09 Thread Chris Maness

Mel wrote:

On Sunday 09 March 2008 23:32:00 Erik Wilson wrote:
  

On Sun, Mar 9, 2008 at 6:26 PM, Chris Maness [EMAIL PROTECTED] wrote:


I am having apache core dump after I install php5 with the apache
module.  It runs fine without the module directives that are
automagically added to the http.conf file, but after it is compiled and
installed my main log (var log messages) indicates a core dump.
  

Have you upgraded to the latest version of apache to go with the latest
version of php5?  Perhaps you have an older version that isn't binary
compatible with the latest compiled php.



Bogus. Php works with any apache version it supports.

Chris: juggle order of /usr/local/etc/php/extensions.ini, see archive for 
discussion as to why this can't be handled normally.


  

OK, after my php finishes building ;o)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Read-only, diskless boot

2008-03-09 Thread Jay L. T. Cornwall

Jay L. T. Cornwall wrote:


All I need is:
  * / partition to work in read-only mode.
  * Volatile directories such as /root, /var and /tmp to be populated
into a memory filesystem on boot.


OK, this turned out to be easier after I spent some time reading through 
the /etc/rc.initdiskless script.


All that was needed was to create:
  /conf/base/root
  /conf/base/tmp
  /conf/base/var

And fill them with the files to be populated in a memory filesystem on 
reboot. A md_size file inside each dir tweaks the size of the memory 
disks according to the script.


Then touch /etc/diskless and the magic happens!

--
Jay L. T. Cornwall
http://www.jcornwall.me.uk/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


tar( bzip2 parts of manpage )

2008-03-09 Thread Markus Klaschka

Hi,
I never used built-in bzip functionality of tar, but I like bzip2 more 
than gzip, so I just searched and found following:

-j  (c mode only) Compress the resulting archive with bzip2(1).  In
extract or list modes, this option is ignored.  Note that, 
unlike

other tar implementations, this implementation recognizes bzip2
compression automatically when reading archives.
and
-y  (c mode only) Compress the resulting archive with bzip2(1).  In
extract or list modes, this option is ignored.  Note that, 
unlike

other tar implementations, this implementation recognizes bzip2
compression automatically when reading archives.

what's going on there?

I tested the -j option, works good. I created a file.tar.bz2 and like 
the manpage describes, tar -cvf is enough to unpack the tarball,

Is that a FreeBSD feature, how is it on other platforms?
Is bzip2 used, or is that build in as a tar?

Cheers

-
Markus Klaschka
MKDev - Markus Klaschka Development
http://www.mkdev.eu

Spain:  0034 - 63 747 23 07
UK:
0044 - 750 910 2718
Mail:   [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
Skype:  mark-use
IRC: 	mark-use @ irc.freenode.net : #freebsd, ##security, #freebsd-src, 
#bsdforen.de, #bsdgroup.de


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: tar( bzip2 parts of manpage )

2008-03-09 Thread Danny Pansters
On Sunday 09 March 2008 23:52:59 Markus Klaschka wrote:
 Hi,
 I never used built-in bzip functionality of tar, but I like bzip2 more
 than gzip, so I just searched and found following:
  -j  (c mode only) Compress the resulting archive with bzip2(1). 
 In extract or list modes, this option is ignored.  Note that, unlike
  other tar implementations, this implementation recognizes
 bzip2 compression automatically when reading archives.
 and
  -y  (c mode only) Compress the resulting archive with bzip2(1). 
 In extract or list modes, this option is ignored.  Note that, unlike
  other tar implementations, this implementation recognizes
 bzip2 compression automatically when reading archives.

 what's going on there?

 I tested the -j option, works good. I created a file.tar.bz2 and like
 the manpage describes, tar -cvf is enough to unpack the tarball,

you mean tar xvf

 Is that a FreeBSD feature, how is it on other platforms?
 Is bzip2 used, or is that build in as a tar?

bsdtar != gtar

In bsdtar -j (-y) indeed uses bzip2 to compress rather than gzip and upon 
unpacking it handles both tgz and tbz transparantly that's why you don't need 
to specify -j there (different from gtar IIRC). I think -j and -y are mainly 
there to be compatible with gtar but I'm not sure. Note that both bsdtar and 
bzip2 are in base and have been for a while so it seems like a logical 
feature for bsdtar. Knowing whether its a gzip or bzip2 compressed is easy to 
see from magic numbers.

Cheers,

Dan 


 Cheers

 -
 Markus Klaschka
 MKDev - Markus Klaschka Development
 http://www.mkdev.eu

 Spain:0034 - 63 747 23 07
 UK:
   0044 - 750 910 2718
 Mail: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
 Skype:mark-use
 IRC:  mark-use @ irc.freenode.net : #freebsd, ##security, #freebsd-src,
 #bsdforen.de, #bsdgroup.de


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: apache+mod_ssl-1.3.41+2.8.31 crashing with mod_php5

2008-03-09 Thread Chris Maness

Mel wrote:

On Sunday 09 March 2008 23:32:00 Erik Wilson wrote:
  

On Sun, Mar 9, 2008 at 6:26 PM, Chris Maness [EMAIL PROTECTED] wrote:


I am having apache core dump after I install php5 with the apache
module.  It runs fine without the module directives that are
automagically added to the http.conf file, but after it is compiled and
installed my main log (var log messages) indicates a core dump.
  

Have you upgraded to the latest version of apache to go with the latest
version of php5?  Perhaps you have an older version that isn't binary
compatible with the latest compiled php.



Bogus. Php works with any apache version it supports.

Chris: juggle order of /usr/local/etc/php/extensions.ini, see archive for 
discussion as to why this can't be handled normally.


  

I deleted the file and reinstalled php5 and now it appears to be working.
Thanks.

Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: subversion -make error

2008-03-09 Thread comperr
On Mar 9, 12:40 pm, Lowell Gilbert [EMAIL PROTECTED]
well.ilk.org wrote:
 comperr [EMAIL PROTECTED] writes:
  Hey - when I try make install clean on subversion I get
  sr/local/bin/ifnames-2.61 AUTOM4TE=/usr/local/bin/autom4te-2.61
  AUTORECONF=/usr/local/bin/autoreconf-2.61 AUTOSCAN=/usr/local/bin/
  autoscan-2.61 AUTOUPDATE=/usr/local/bin/autoupdate-2.61
  AUTOCONF_VERSION=261 LIBTOOL=/usr/local/bin/libtool LIBTOOLIZE=/usr/
  local/bin/libtoolize LIBTOOL_M4=/usr/local/share/aclocal/libtool.m4
  lt_cv_sys_max_cmd_len=262144 /bin/sh ./buildconf
  buildconf: checking installation...
  buildconf: python not found.
 You need python installed
 to build APR from SVN.
  *** Error code 1

  This is when I know I have python installed

 Is python installed from the ports system?
 What does which python tell you?

 --
 Lowell Gilbert, embedded/networking software engineer, Boston area
http://be-well.ilk.org/~lowell/
 ___
 [EMAIL PROTECTED] mailing 
 listhttp://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

[EMAIL PROTECTED] ~]# which python
[EMAIL PROTECTED] ~]# pkg_info -x python
Information for python-2.5,2:

Information for python25-2.5.2_1:
[EMAIL PROTECTED] ~]# pkg_info |grep python
python-2.5,2The meta-port for the default version of Python
interpret
python25-2.5.2_1An interpreted object-oriented programming language
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How did references to libc.so.7 get in my 6.3 ports?

2008-03-09 Thread Vinny

Hello Everyone,

I was trying to use portupgrade on totem and ran into a problem with
references for libc.so.7 failing to resolve.  I have a libc.so.6, of
course, seeing as libc.so.7 is for FreeBSD 7, isn't it?

uname -a
FreeBSD the.pal...ofretention.ca 6.3-PRERELEASE FreeBSD 6.3-PRERELEASE 
#0: Wed Jan 16 09:32:16 EST 2008 
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/THE  i386


Here is the history output of what I've done:

   125  18:45   cd /usr/ports
   126  18:45   whereis totem
   127  18:45   cd multimedia/totem
   128  18:45   portupgrade -rRpP multimedia/totem
...failed here due to libc.so.7 reference in libxlst

   129  20:14   cd ../../textproc/libxslt
   130  20:14   make clean
   131  20:14   make install package
...failed here due to a deinstall/reinstall issue for libgcrypt, just
to vex me.

   132  20:17   make install package -DFORCE_PKG_REGISTER
...failed here due to libc.so.7 reference in libxlst

   133  20:18   make clean
   134  20:19   make
...failed here due to libc.so.7 reference in libxlst

   135  20:20   ls /lib/libc.*
...only libc.so.6
   136  20:20   cd ../..
   137  20:20   cvsup self-ports-supfile
   138  20:27   cd textproc/libxslt

...update ports tree and try again
   139  20:27   make clean
   140  20:27   make install package
...failed here due to libc.so.7 reference in libxlst

and so on.

My current theory is that I've fetched a package that was linked
on a FreeBSD 7 system.

How can I find out which one?  The command that was likely the
culprit was:  portupgrade -rRpP multimedia/totem


Check this out:
$ cd /usr/local/bin
$ ldd totem
totem:
libtotem-plparser.so.1 = /usr/local/lib/libtotem-plparser.so.1 
(0x280bc000)

libhal.so.1 = /usr/local/lib/libhal.so.1 (0x280cb000)
libglade-2.0.so.0 = /usr/local/lib/libglade-2.0.so.0 (0x280d4000)
libgnome-desktop-2.so.2 = 
/usr/local/lib/libgnome-desktop-2.so.2 (0x280ea000)

libgnomeui-2.so.0 = /usr/local/lib/libgnomeui-2.so.0 (0x280fd000)
libjpeg.so.9 = /usr/local/lib/libjpeg.so.9 (0x28186000)
libstartup-notification-1.so.0 = 
/usr/local/lib/libstartup-notification-1.so.0 (0x281a3000)
libbonoboui-2.so.0 = /usr/local/lib/libbonoboui-2.so.0 
(0x281ab000)

libSM.so.6 = /usr/local/lib/libSM.so.6 (0x28204000)
libICE.so.6 = /usr/local/lib/libICE.so.6 (0x2820c000)
libgnome-keyring.so.0 = /usr/local/lib/libgnome-keyring.so.0 
(0x28223000)
libgnomecanvas-2.so.0 = /usr/local/lib/libgnomecanvas-2.so.0 
(0x28232000)

libgnome-2.so.0 = /usr/local/lib/libgnome-2.so.0 (0x2825e000)
libgnomevfs-2.so.0 = /usr/local/lib/libgnomevfs-2.so.0 
(0x28271000)

libssl.so.4 = /usr/lib/libssl.so.4 (0x282c9000)
libcrypto.so.4 = /lib/libcrypto.so.4 (0x282f8000)
libavahi-glib.so.1 = /usr/local/lib/libavahi-glib.so.1 
(0x283f)
libavahi-client.so.3 = /usr/local/lib/libavahi-client.so.3 
(0x283f3000)
libavahi-common.so.3 = /usr/local/lib/libavahi-common.so.3 
(0x28401000)

libutil.so.5 = /lib/libutil.so.5 (0x2840c000)
libesd.so.2 = /usr/local/lib/libesd.so.2 (0x28419000)
libaudiofile.so.0 = /usr/local/lib/libaudiofile.so.0 (0x28422000)
libpopt.so.0 = /usr/local/lib/libpopt.so.0 (0x28447000)
libart_lgpl_2.so.5 = /usr/local/lib/libart_lgpl_2.so.5 
(0x2844e000)
libgtk-x11-2.0.so.0 = /usr/local/lib/libgtk-x11-2.0.so.0 
(0x28464000)
libgdk-x11-2.0.so.0 = /usr/local/lib/libgdk-x11-2.0.so.0 
(0x287d3000)

libatk-1.0.so.0 = /usr/local/lib/libatk-1.0.so.0 (0x28858000)
libgdk_pixbuf-2.0.so.0 = /usr/local/lib/libgdk_pixbuf-2.0.so.0 
(0x28871000)
libpangocairo-1.0.so.0 = /usr/local/lib/libpangocairo-1.0.so.0 
(0x28889000)

libXinerama.so.1 = /usr/local/lib/libXinerama.so.1 (0x28892000)
libXi.so.6 = /usr/local/lib/libXi.so.6 (0x28895000)
libXcursor.so.1 = /usr/local/lib/libXcursor.so.1 (0x288a6000)
libXfixes.so.3 = /usr/local/lib/libXfixes.so.3 (0x288af000)
libcairo.so.2 = /usr/local/lib/libcairo.so.2 (0x288b4000)
libpng.so.5 = /usr/local/lib/libpng.so.5 (0x2892a000)
libpangoft2-1.0.so.0 = /usr/local/lib/libpangoft2-1.0.so.0 
(0x2894c000)
libfontconfig.so.1 = /usr/local/lib/libfontconfig.so.1 
(0x2897a000)

libexpat.so.6 = /usr/local/lib/libexpat.so.6 (0x289a4000)
libfreetype.so.9 = /usr/local/lib/libfreetype.so.9 (0x289c5000)
libpango-1.0.so.0 = /usr/local/lib/libpango-1.0.so.0 (0x28a2b000)
libbonobo-2.so.0 = /usr/local/lib/libbonobo-2.so.0 (0x28a66000)
libbonobo-activation.so.4 = 
/usr/local/lib/libbonobo-activation.so.4 (0x28abf000)
libORBitCosNaming-2.so.0 = 
/usr/local/lib/libORBitCosNaming-2.so.0 (0x28ad3000)

libgconf-2.so.4 = /usr/local/lib/libgconf-2.so.4 (0x28ad8000)
libORBit-2.so.0 = /usr/local/lib/libORBit-2.so.0 (0x28b0a000)
libgstvideo-0.10.so.0 = /usr/local/lib/libgstvideo-0.10.so.0 
(0x28b5c000)
 

Re: apache+mod_ssl-1.3.41+2.8.31 crashing with mod_php5

2008-03-09 Thread Chris Maness

Mel wrote:

On Sunday 09 March 2008 23:32:00 Erik Wilson wrote:
  

On Sun, Mar 9, 2008 at 6:26 PM, Chris Maness [EMAIL PROTECTED] wrote:


I am having apache core dump after I install php5 with the apache
module.  It runs fine without the module directives that are
automagically added to the http.conf file, but after it is compiled and
installed my main log (var log messages) indicates a core dump.
  

Have you upgraded to the latest version of apache to go with the latest
version of php5?  Perhaps you have an older version that isn't binary
compatible with the latest compiled php.



Bogus. Php works with any apache version it supports.

Chris: juggle order of /usr/local/etc/php/extensions.ini, see archive for 
discussion as to why this can't be handled normally.


  
OK, after I was able to get apache to load without crashing, none of my 
php aps worked correctly.  I suppose this had to do with me deleting


extensions.ini and only rebuilding php5 and not its dependencies.  Well, after 
rebuilding all of the deps, I now have a extensions.ini file again.  I tried 
re-arranging as suggested in the archive, but this did not solve the problem.  
I am only having this issue on my 7.0-R box.  6.3-R seems to be working ok, but 
I haven't been fooling with it.  I am having the issue on my test box.

Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How did references to libc.so.7 get in my 6.3 ports?

2008-03-09 Thread E. J. Cerejo
On Sun, 09 Mar 2008 20:12:45 -0400
Vinny [EMAIL PROTECTED] wrote:

 Hello Everyone,
 
 I was trying to use portupgrade on totem and ran into a problem with
 references for libc.so.7 failing to resolve.  I have a libc.so.6, of
 course, seeing as libc.so.7 is for FreeBSD 7, isn't it?
 
 uname -a
 FreeBSD the.pal...ofretention.ca 6.3-PRERELEASE FreeBSD 6.3-PRERELEASE 
 #0: Wed Jan 16 09:32:16 EST 2008 
 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/THE  i386
 
 Here is the history output of what I've done:
 
 125  18:45   cd /usr/ports
 126  18:45   whereis totem
 127  18:45   cd multimedia/totem
 128  18:45   portupgrade -rRpP multimedia/totem
 ...failed here due to libc.so.7 reference in libxlst
 
 129  20:14   cd ../../textproc/libxslt
 130  20:14   make clean
 131  20:14   make install package
 ...failed here due to a deinstall/reinstall issue for libgcrypt, just
 to vex me.
 
 132  20:17   make install package -DFORCE_PKG_REGISTER
 ...failed here due to libc.so.7 reference in libxlst
 
 133  20:18   make clean
 134  20:19   make
 ...failed here due to libc.so.7 reference in libxlst
 
 135  20:20   ls /lib/libc.*
 ...only libc.so.6
 136  20:20   cd ../..
 137  20:20   cvsup self-ports-supfile
 138  20:27   cd textproc/libxslt
 
 ...update ports tree and try again
 139  20:27   make clean
 140  20:27   make install package
 ...failed here due to libc.so.7 reference in libxlst
 
 and so on.
 
 My current theory is that I've fetched a package that was linked
 on a FreeBSD 7 system.
 
 How can I find out which one?  The command that was likely the
 culprit was:  portupgrade -rRpP multimedia/totem
 
 
 Check this out:
 $ cd /usr/local/bin
 $ ldd totem
 totem:
  libtotem-plparser.so.1 = /usr/local/lib/libtotem-plparser.so.1 
 (0x280bc000)
  libhal.so.1 = /usr/local/lib/libhal.so.1 (0x280cb000)
  libglade-2.0.so.0 = /usr/local/lib/libglade-2.0.so.0 (0x280d4000)
  libgnome-desktop-2.so.2 = 
 /usr/local/lib/libgnome-desktop-2.so.2 (0x280ea000)
  libgnomeui-2.so.0 = /usr/local/lib/libgnomeui-2.so.0 (0x280fd000)
  libjpeg.so.9 = /usr/local/lib/libjpeg.so.9 (0x28186000)
  libstartup-notification-1.so.0 = 
 /usr/local/lib/libstartup-notification-1.so.0 (0x281a3000)
  libbonoboui-2.so.0 = /usr/local/lib/libbonoboui-2.so.0 
 (0x281ab000)
  libSM.so.6 = /usr/local/lib/libSM.so.6 (0x28204000)
  libICE.so.6 = /usr/local/lib/libICE.so.6 (0x2820c000)
  libgnome-keyring.so.0 = /usr/local/lib/libgnome-keyring.so.0 
 (0x28223000)
  libgnomecanvas-2.so.0 = /usr/local/lib/libgnomecanvas-2.so.0 
 (0x28232000)
  libgnome-2.so.0 = /usr/local/lib/libgnome-2.so.0 (0x2825e000)
  libgnomevfs-2.so.0 = /usr/local/lib/libgnomevfs-2.so.0 
 (0x28271000)
  libssl.so.4 = /usr/lib/libssl.so.4 (0x282c9000)
  libcrypto.so.4 = /lib/libcrypto.so.4 (0x282f8000)
  libavahi-glib.so.1 = /usr/local/lib/libavahi-glib.so.1 
 (0x283f)
  libavahi-client.so.3 = /usr/local/lib/libavahi-client.so.3 
 (0x283f3000)
  libavahi-common.so.3 = /usr/local/lib/libavahi-common.so.3 
 (0x28401000)
  libutil.so.5 = /lib/libutil.so.5 (0x2840c000)
  libesd.so.2 = /usr/local/lib/libesd.so.2 (0x28419000)
  libaudiofile.so.0 = /usr/local/lib/libaudiofile.so.0 (0x28422000)
  libpopt.so.0 = /usr/local/lib/libpopt.so.0 (0x28447000)
  libart_lgpl_2.so.5 = /usr/local/lib/libart_lgpl_2.so.5 
 (0x2844e000)
  libgtk-x11-2.0.so.0 = /usr/local/lib/libgtk-x11-2.0.so.0 
 (0x28464000)
  libgdk-x11-2.0.so.0 = /usr/local/lib/libgdk-x11-2.0.so.0 
 (0x287d3000)
  libatk-1.0.so.0 = /usr/local/lib/libatk-1.0.so.0 (0x28858000)
  libgdk_pixbuf-2.0.so.0 = /usr/local/lib/libgdk_pixbuf-2.0.so.0 
 (0x28871000)
  libpangocairo-1.0.so.0 = /usr/local/lib/libpangocairo-1.0.so.0 
 (0x28889000)
  libXinerama.so.1 = /usr/local/lib/libXinerama.so.1 (0x28892000)
  libXi.so.6 = /usr/local/lib/libXi.so.6 (0x28895000)
  libXcursor.so.1 = /usr/local/lib/libXcursor.so.1 (0x288a6000)
  libXfixes.so.3 = /usr/local/lib/libXfixes.so.3 (0x288af000)
  libcairo.so.2 = /usr/local/lib/libcairo.so.2 (0x288b4000)
  libpng.so.5 = /usr/local/lib/libpng.so.5 (0x2892a000)
  libpangoft2-1.0.so.0 = /usr/local/lib/libpangoft2-1.0.so.0 
 (0x2894c000)
  libfontconfig.so.1 = /usr/local/lib/libfontconfig.so.1 
 (0x2897a000)
  libexpat.so.6 = /usr/local/lib/libexpat.so.6 (0x289a4000)
  libfreetype.so.9 = /usr/local/lib/libfreetype.so.9 (0x289c5000)
  libpango-1.0.so.0 = /usr/local/lib/libpango-1.0.so.0 (0x28a2b000)
  libbonobo-2.so.0 = /usr/local/lib/libbonobo-2.so.0 (0x28a66000)
  libbonobo-activation.so.4 = 
 /usr/local/lib/libbonobo-activation.so.4 (0x28abf000)
  libORBitCosNaming-2.so.0 = 
 /usr/local/lib/libORBitCosNaming-2.so.0 

Re: Freebsd7, mail/mailman, www/apache22, and sendmail [take 2]

2008-03-09 Thread Philip M. Gollucci

No comments, suggestions ?

Philip M. Gollucci wrote:

Issue:

The www/apache22 integration seems to be fine; however, the sendmail 
integration isn't quite right.


client computer:
$ echo `uname -a` | mail -s `date` [EMAIL PROTECTED]

Mail Server:
/var/log/maillog
m25JwCEk065018: m25JwCEl065018: DSN: unknown mailer error 255

m25JwCEl065018: to=[EMAIL PROTECTED], delay=00:00:00 \
xdelay=00:00:00, mailer=mailman, pri=32149,   \
relay=lists.p6m7g8.net, dsn=5.3.0, stat=unknown mailer error 255

m25JwCEm065018: return to sender: unknown mailer error 255

The setup:
-
/etc/make.conf
[snipped]

# SASL (cyrus-sasl v2) sendmail build flags...
SENDMAIL_CFLAGS=-I/usr/local/include -DSASL=2
SENDMAIL_LDFLAGS=-L/usr/local/lib
SENDMAIL_LDADD=-lsasl2
# Adding to enable alternate port (smtps) for sendmail...
SENDMAIL_CFLAGS+= -D_FFR_SMTP_SSL

.if ${.CURDIR:M*/usr/ports/mail/mailman*}
WITH_SENDMAIL=  yes
WITH_HTDIG= yes
.endif

.if ${.CURDIR:M*/usr/ports/www/apache22*}
WITH_SSL= yes
WITH_APR_FROM_PORTS=  yes
WITH_FULLBUILD=   yes
WITH_MYSQL=   yes
WITH_PCRE_FROM_PORTS= yes

WITH_LOG_FORENSIC=yes
WITH_PROXY_CONNECT=   yes
WITH_PROXY_FTP=   yes
WITH_PROXY_HTTP=  yes
WITH_PROXY_AJP=   yes
WITH_PROXY_BALANCER=  yes

WITHOUT_MEM_CACHED=   yes
.endif

-
/var/db/pkg
[snipped]
apache-2.2.8
apr-nothr-1.2.8_2
bash-static-3.2.33
mailman-with-htdig-2.1.9_5
mysql-client-5.1.23
pcre-7.6
python25-2.5.2_1
cyrus-sasl-2.1.22
cyrus-sasl-saslauthd-2.1.22

users:
id mailnull
uid=26(mailnull) gid=26(mailnull) groups=26(mailnull)

id mailman
uid=91(mailman) gid=91(mailman) groups=91(mailman)

id www
uid=80(www) gid=80(www) groups=80(www)

-
/etc/mail/host.mc
[snipped]
define(`ALIAS_FILE', `/etc/mail/aliases,/etc/mail/lists')

FEATURE(`smrsh')
FEATURE(mailertable, `hash -o /etc/mail/mailertable')
FEATURE(virtusertable, `hash -o /etc/mail/virtusertable')
VIRTUSER_DOMAIN(`lists.domain.tld')

dnl FEATURE(`limited_masquerade')
dnl MASQUERADE_AS(`lists.domain.tld')

Mmailman,   P=/etc/mail/mm-handler, F=rDFMhlqSu, U=mailman:mailman,
S=EnvFromL, R=EnvToL/HdrToL,
A=mm-handler $h $u

-
$ whereis smrsh
smrsh: /usr/libexec/smrsh

$ strings /usr/libexec/smrsh  | grep bin |head -1
/usr/libexec/sm.bin

$ ls -l /usr/libexec/sm.bin/
lrwxr-xr-x  1 root  wheel  -   31B Mar  4 18:43:32 2008 mailman@ - 
/usr/local/mailman/mail/mailman


$ ls -l /usr/local/mailman/mail/mailman
-rwxr-sr-x  1 root  mailman  -   15K Mar  4 12:45:40 2008 
/usr/local/mailman/mail/mailman*


$ /usr/local/mailman sudo bin/check_perms -f
No problems found

$ cat /etc/mail/mailertable
lists.domain.tldmailman:lists.domain.tld

$ ls -l /etc/mail/mm-handler
-rwxr-xr-x  1 root  wheel  -  5.8K Mar  4 19:10:53 2008 mm-handler*

-
/etc/rc.conf
[snipped]
sendmail_enable=YES
mailman_enable=YES
apache22_enable=YES
apache22_http_accept_enable=YES

-
/usr/local/mailman/Mailman/mm_cfg.py
from Defaults import *

MTA = None

DEFAULT_EMAIL_HOST = 'lists.domain.tld'
DEFAULT_URL_HOST = 'lists.domain.tld'
DEFAULT_URL_PATTERN = 'http://%s/mailman/'

-
/usr/local/etc/apache22/httpd.conf
User www
Group www

/usr/local/etc/apache22/vhosts/tld.domain.lists.conf

VirtualHost *
ServerName lists.domain.tld

DocumentRoot/usr/local/mailman
Alias   /icons/ /usr/local/mailman/icons/

Alias   /pipermail/ /usr/local/mailman/archives/public/
ScriptAlias /mailman/   /usr/local/mailman/cgi-bin/

ErrorLog  /usr/local/mailman/logs/httpd-error_log
CustomLog /usr/local/mailman/logs/httpd-access_log   common
CustomLog /usr/local/mailman/logs/httpd-combined_log combined

Directory /usr/local/mailman
  Options FollowSymLinks ExecCGI
  AllowOverride None
  Order allow,deny
  Allow from all
/Directory
/VirtualHost

-
$ uname -a
FreeBSD host.domain.tld 8.0-CURRENT FreeBSD 8.0-CURRENT #1: Sun Mar  2 
09:48:59 EST 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/HOST 
i386







--

Philip M. Gollucci ([EMAIL PROTECTED])
o:703.549.2050x206
Senior System Admin - Riderway, Inc.
http://riderway.com / http://ridecharge.com
1024D/EC88A0BF 0DE5 C55C 6BF3 B235 2DAB  B89E 1324 9B4F EC88 A0BF

Work like you don't need the money,
love like you'll never get hurt,
and dance like nobody's watching.

___

Re: subversion -make error

2008-03-09 Thread David Kelly


On Mar 9, 2008, at 7:02 PM, comperr wrote:


On Mar 9, 12:40 pm, Lowell Gilbert [EMAIL PROTECTED]
well.ilk.org wrote:


Is python installed from the ports system?
What does which python tell you?


[EMAIL PROTECTED] ~]# which python
[EMAIL PROTECTED] ~]# pkg_info -x python
Information for python-2.5,2:

Information for python25-2.5.2_1:
[EMAIL PROTECTED] ~]# pkg_info |grep python
python-2.5,2The meta-port for the default version of Python
interpret
python25-2.5.2_1An interpreted object-oriented programming  
language


Python should have been found in /usr/local/bin/python:

[EMAIL PROTECTED] {1009} which python
/usr/local/bin/python

--
David Kelly N4HHE, [EMAIL PROTECTED]

Whom computers would destroy, they must first drive mad.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How did references to libc.so.7 get in my 6.3 ports?

2008-03-09 Thread Vinny

E. J. Cerejo wrote:

On Sun, 09 Mar 2008 20:12:45 -0400 Vinny
[EMAIL PROTECTED] wrote:


Hello Everyone,

I was trying to use portupgrade on totem and ran into a problem
with references for libc.so.7 failing to resolve.  I have a
libc.so.6, of course, seeing as libc.so.7 is for FreeBSD 7, isn't
it?

uname -a FreeBSD the.pal...ofretention.ca 6.3-PRERELEASE FreeBSD
6.3-PRERELEASE #0: Wed Jan 16 09:32:16 EST 2008 
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/THE  i386



[snip]




You updated the port that put libc.so.6 in your system, you need to
find out which port it came from and then find out which which ports
depend on it and rebuild them also and then the problem will be
fixed.  I use /usr/ports/sysutils/bsdadminscripts which tells me
exactly which ports need to be rebuilt.



Hi E. J.,

Is it true that a port put libc.so.6 in my system?
I thought it was part of the base system (i.e. the world as in
buildworld).

I'm a bit (more) confused now.

Vinny
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How did references to libc.so.7 get in my 6.3 ports?

2008-03-09 Thread E. J. Cerejo
On Sun, 09 Mar 2008 23:49:42 -0400
Vinny [EMAIL PROTECTED] wrote:

 E. J. Cerejo wrote:
  On Sun, 09 Mar 2008 20:12:45 -0400 Vinny
  [EMAIL PROTECTED] wrote:
  
  Hello Everyone,
  
  I was trying to use portupgrade on totem and ran into a problem
  with references for libc.so.7 failing to resolve.  I have a
  libc.so.6, of course, seeing as libc.so.7 is for FreeBSD 7, isn't
  it?
  
  uname -a FreeBSD the.pal...ofretention.ca 6.3-PRERELEASE FreeBSD
  6.3-PRERELEASE #0: Wed Jan 16 09:32:16 EST 2008 
  [EMAIL PROTECTED]:/usr/obj/usr/src/sys/THE  i386
  
 [snip]
 
 
  
  You updated the port that put libc.so.6 in your system, you need to
  find out which port it came from and then find out which which ports
  depend on it and rebuild them also and then the problem will be
  fixed.  I use /usr/ports/sysutils/bsdadminscripts which tells me
  exactly which ports need to be rebuilt.
 
 
 Hi E. J.,
 
 Is it true that a port put libc.so.6 in my system?
 I thought it was part of the base system (i.e. the world as in
 buildworld).
 
 I'm a bit (more) confused now.
 
 Vinny
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

Then you're running FreeBSD 6.x and you updated your ports tree after FreeBSD 
7.0 release.  The latest ports tree no longer supports 6.x I believe. So you 
should upgrade to 7 release or stable.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How did references to libc.so.7 get in my 6.3 ports?

2008-03-09 Thread Vinny

Vinny wrote:

Hello Everyone,

I was trying to use portupgrade on totem and ran into a problem with
references for libc.so.7 failing to resolve.  I have a libc.so.6, of
course, seeing as libc.so.7 is for FreeBSD 7, isn't it?

uname -a
FreeBSD the.pal...ofretention.ca 6.3-PRERELEASE FreeBSD 6.3-PRERELEASE 
#0: Wed Jan 16 09:32:16 EST 2008 
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/THE  i386




[snip]

Well, am I embarrassed.  I found an old setting in
pkgtools.conf that I set some time ago when I was experimenting
with something:

  PKG_SITES = [
'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/',
  ]

Since 7 is now stable, I get packages built on 7.  D'oh.
I'll just reset that to the default:

 pkg_site_mirror()

Another self-inflicted problem solved.  I just have to rebuild
all the affected ports manually.

Vinny

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]