FreeBSD 7.0 and DummyNet

2008-05-27 Thread Ray Seals
It's been a long time since I have tried to get dummynet working.  I have a
FreeBSD 7.0 box ready to go.  Do I still need to recompile the kernel and
all that stuff or is there any easier way to do this now?

-- 
Ray Seals
-
Office: 314-594-0150 (St. Louis Area)
866-875-8863 (toll free)
Fax: 253-681-9982
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Version 5.4

2008-05-27 Thread Dennis Kirschling
Hi, 

 

I have a customer running BSD that has been informed that he needs to
upgrade his Apache product.  I have a wealth of experience with SCO
products but very little with BSD.  The Apache that they are operating
now is version 2.0.55?  I don't have the knowledge to look into
installed products or where I would gather the Apache upgrade and the
installation instructions.  If you can point me to any info regarding
this upgrade I sure would appreciate it!

 

Thanks you!

 

Dennis Kirschling

Office 916 714-1002

Cell916 825-3737

[EMAIL PROTECTED]

 

  

 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

like sSMTP, but with alternate config

2008-05-27 Thread Chad Perrin
I found this in the sSMTP manpage today:

  -Cfile (ignored) Use alternate configuration file.

Is there something substantially like sSMTP in ports that allows use of
alternate configuration files, rather than just accepting and ignoring
sendmail options for alternate configuration files?

-- 
Chad Perrin [ content licensed PDL: http://pdl.apotheon.org ]
Isaac Asimov: Part of the inhumanity of the computer is that, once it is
completely programmed and working smoothly, it is completely honest.


pgpaGqJeTiSkh.pgp
Description: PGP signature


Re: freebsd and snort

2008-05-27 Thread gahn
Thanks. greatly appreciated.

Best

- Original Message 
From: Scot Hetzel [EMAIL PROTECTED]
To: gahn [EMAIL PROTECTED]
Cc: freebsd general questions freebsd-questions@freebsd.org; freebsd security 
[EMAIL PROTECTED]
Sent: Tuesday, May 27, 2008 12:57:38 AM
Subject: Re: freebsd and snort

On 5/27/08, gahn [EMAIL PROTECTED] wrote:
 Hello all:

  I tried to install snort under /usr/ports/security and have some problems. 
 with make all, I checked every item on the menu but I got error messages:

  //

  laptop# make all
  ===  snort-2.8.1_1 is marked as broken: FLEXRESP2 patch file does not 
 incorporate cleanly.
  *** Error code 1

  Stop in /usr/ports/security/snort.

  ///

  tried make distclean and it didn't seem to help to clear the problem. 
 Looked at the timestamps on the files and I don't see any files modified by 
 the command make all

  could anyone help me on this?

Use make config to bring up the Options screen, and check FLEXRESP
and uncheck FLEXRESP2.

Scot



  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: freebsd-questions Digest, Vol 217, Issue 4

2008-05-27 Thread Camilo Reyes
 Mark Ovens writes:

  The advantage of building a custom kernel is ...

   There are others.
    If I understand correctly, space for the kernel (code and data)
 is allocated once at initial system load.  Smaller code portion =
 more space for data.
    Second, fewer components = fewer interactions = fewer
 possible points of failure.
    And, _anecdotally_, smaller kernels are faster.  I haven't
 tested in a few years, but it used to be enough faster you could
 tell it with the naked eye.


                Robert Huff

Not to mention added security.
-Camilo



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: freebsd and snort

2008-05-27 Thread Camilo Reyes
 On 5/27/08, gahn [EMAIL PROTECTED] wrote:
 Hello all:

  I tried to install snort under /usr/ports/security and have some problems. 
with make all, I checked every item on the menu but I got error messages:

  //

  laptop# make all
  ===  snort-2.8.1_1 is marked as broken: FLEXRESP2 patch file does not 
incorporate cleanly.
  *** Error code 1

  Stop in /usr/ports/security/snort.

  ///

  tried make distclean and it didn't seem to help to clear the problem. 
Looked at the timestamps on the files and I don't see any files modified by 
the command make all

  could anyone help me on this?

 Use make config to bring up the Options screen, and check FLEXRESP
 and uncheck FLEXRESP2.

 Scot

Or do: vi Makefile. Then edit anything that has FLEXRESP2 on it.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: News in Spanish

2008-05-27 Thread Eduardo Morras

At 13:44 24/05/2008, you wrote:


   Hello. I'm FreeBSD user. Very days ago, I verified that the news
   (what's new) in spanish is not up to date (the last is 1999!!) Why?
   Link: [1]http://www.freebsd.org/es/news/press.html#story200802:02
   Very thanks.
   Pd:If is possible, please, reply in spanish.


Good Morning Mustela. I see no one has answered you. There is a 
maillist at [EMAIL PROTECTED] where you can ask. You can do it at 
the main Spanish maillist too. In both list you must be a member to 
post. You can sign up at: (see links below)



Muy Buenas Mustela. Veo que nadie te ha respondido. Hay una lista de 
correo en  [EMAIL PROTECTED] donde puedes preguntar. Tambien puedes 
hacerlo en la lista de correo de FreeBsd en castellano. Ambas listas 
necesitan que estes apuntado/a para poder mandar mensajes.


Puedes darte de alta en

https://listas.es.freebsd.org/mailman/listinfo/freebsd  o mandando un 
mensaje a


mailto:[EMAIL PROTECTED] para freebsd 
en castellano


mailto:[EMAIL PROTECTED]  para la lista de 
documentacion.


HTH


One reason that life is complex is that it has a real part and an 
imaginary part
   -Andrew Koenig  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 7.0 and DummyNet

2008-05-27 Thread Vince Hoffman

Ray Seals wrote:

It's been a long time since I have tried to get dummynet working.  I have a
FreeBSD 7.0 box ready to go.  Do I still need to recompile the kernel and
all that stuff or is there any easier way to do this now?


I tend to use pf/altq but dummynet and ipfw seem to exist as modules

[EMAIL PROTECTED]
(19:09:46 /usr/src/sys/amd64/conf) 0 # ls /boot/kernel/dummynet.ko
/boot/kernel/dummynet.ko*
[EMAIL PROTECTED]
(19:10:08 /usr/src/sys/amd64/conf) 0 # ls /boot/kernel/ipfw.ko
/boot/kernel/ipfw.ko*

so
kldload dummynet  kldload ipfw
should do the job.

Vince
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 7.0 and DummyNet

2008-05-27 Thread Vince Hoffman

Vince Hoffman wrote:

Ray Seals wrote:
It's been a long time since I have tried to get dummynet working.  I 
have a

FreeBSD 7.0 box ready to go.  Do I still need to recompile the kernel and
all that stuff or is there any easier way to do this now?


I tend to use pf/altq but dummynet and ipfw seem to exist as modules

[EMAIL PROTECTED]
(19:09:46 /usr/src/sys/amd64/conf) 0 # ls /boot/kernel/dummynet.ko
/boot/kernel/dummynet.ko*
[EMAIL PROTECTED]
(19:10:08 /usr/src/sys/amd64/conf) 0 # ls /boot/kernel/ipfw.ko
/boot/kernel/ipfw.ko*

so
kldload dummynet  kldload ipfw
should do the job.

Oh and remember that if you do just kldload ipfw (like i just did to 
test) it defaults to deny all ;)

Vince


Vince
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Version 5.4

2008-05-27 Thread pete wright
On Tue, May 27, 2008 at 10:43 AM, Dennis Kirschling [EMAIL PROTECTED] wrote:
 Hi,



 I have a customer running BSD that has been informed that he needs to
 upgrade his Apache product.  I have a wealth of experience with SCO
 products but very little with BSD.  The Apache that they are operating
 now is version 2.0.55?  I don't have the knowledge to look into
 installed products or where I would gather the Apache upgrade and the
 installation instructions.  If you can point me to any info regarding
 this upgrade I sure would appreciate it!



The FreeBSD product has excellent documentation.  The best place to
start is here:


http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/


Regarding your current task, the section on ports is probably the
most helpful.  It looks like you will have to upgrade the Apache port
that is currently installed.  Is there a specific version of the
Apache web server that is needed?  FreeBSD supports many different
versions of the Apache webserver - yet the ports system makes
installing, and updating, these applications very easy.

Hope this helps,
-pete


-- 
~~o0OO0o~~
Pete Wright
www.nycbug.org
NYC's *BSD User Group
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: News in Spanish

2008-05-27 Thread Mustela

   Hola, Gábor, Simon y Eduardo.
   Pues Eduardo, debo confesar que con tu respuesta ya son tres... ¡estoy
   sorprendido, la verdad!
   A ver, os comento que me gustaría pertenecer a la comunidad BSD para
   hacer traducciones y otras cosas (eso sí, al español), pero el tiempo
   me lo impide y nunca he hecho estas cosas de pertenecer a comunidades.
   No sé qué he de hacer y tampoco soy un serio programador. Me dedico a
   la administración de servidores y cuando llego a casa, aparte de hacer
   obras, me apetece descansar, jejeje.
   No obstante, si veo que tengo un tiempo para dedicarme a traducción no
   me cabrá la menor duda de apoyaros y ponerme manos a la obra.
   Gracias a todos por vuestro interés.
   Eduardo Morras escribió:

 At 13:44 24/05/2008, you wrote:

Hello. I'm FreeBSD user. Very days ago, I verified that the news
(what's new) in spanish is not up to date (the last is 1999!!)
 Why?
Link:
 [1][1]http://www.freebsd.org/es/news/press.html#story200802:02
Very thanks.
Pd:If is possible, please, reply in spanish.

 Good Morning Mustela. I see no one has answered you. There is a
 maillist at [EMAIL PROTECTED] where you can ask. You can do it
 at the main Spanish maillist too. In both list you must be a member
 to post. You can sign up at: (see links below)
 Muy Buenas Mustela. Veo que nadie te ha respondido. Hay una lista
 de correo en  [EMAIL PROTECTED] donde puedes preguntar. Tambien
 puedes hacerlo en la lista de correo de FreeBsd en castellano.
 Ambas listas necesitan que estes apuntado/a para poder mandar
 mensajes.
 Puedes darte de alta en
 [4]https://listas.es.freebsd.org/mailman/listinfo/freebsd  o
 mandando un mensaje a
 [5]mailto:[EMAIL PROTECTED] para
 freebsd en castellano
 [6]mailto:[EMAIL PROTECTED]  para la
 lista de documentacion.
 HTH
 ---
 -
 One reason that life is complex is that it has a real part and an
 imaginary part
-Andrew Koenig

References

   1. http://www.freebsd.org/es/news/press.html#story200802:02
   2. mailto:[EMAIL PROTECTED]
   3. mailto:[EMAIL PROTECTED]
   4. https://listas.es.freebsd.org/mailman/listinfo/freebsd
   5. mailto:[EMAIL PROTECTED]
   6. mailto:[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipnat

2008-05-27 Thread alexus
anyone else?

On Tue, May 27, 2008 at 1:36 AM, alexus [EMAIL PROTECTED] wrote:
 thats same as what I have

 map dc0 192.168.2.0/24 - 0/32




 2008/5/26 Necati Ersen SISECI [EMAIL PROTECTED]:
 Nat rule should be like this.

 map dc0 192.168.2.0/24 - External_IP/32


 alexus yazmış:

 hi

 i cant figure something out, maybe someone can help me...

 i have two interfaces on my 7.0-RELEASE-p1 dc0 and fxp0, dc0 has
 public IP, and fxp0 is internal, my ipnat.rules looks like this

 map dc0 192.168.2.0/24 - 0/32

 su-3.2# ipnat -l
 List of active MAP/Redirect filters:
 map dc0 192.168.2.0/24 - 0.0.0.0/32

 List of active sessions:
 su-3.2#

 NAT on 192.168.2.0/24 doesn't seem to be working at all :(




 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]




 --
 http://alexus.org/




-- 
http://alexus.org/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Setting quotas on nested directories

2008-05-27 Thread Aaron Holmes

Hello all,
I want to set quotas on nested directories; ie: /mnt/docs has the 
directories legal and IT

I want to limit legal to 50GB. How can this be done, if at all?
From my googleing, it looks like any filesystems you want to apply 
quotas need to be be 1) in /etc/fstab and 2) mounted


Thanks,
Aaron Holmes
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Setting quotas on nested directories

2008-05-27 Thread Dan Nelson
In the last episode (May 27), Aaron Holmes said:
 Hello all,
 I want to set quotas on nested directories; ie: /mnt/docs has the 
 directories legal and IT
 I want to limit legal to 50GB. How can this be done, if at all?
  From my googleing, it looks like any filesystems you want to apply 
 quotas need to be be 1) in /etc/fstab and 2) mounted

Quotas on UFS are set at either the user- or the group-ID level, not on
directories themselves.  So you could create a group named legal,
then chgrp -R legal /mnt/docs/legal, and run edquota -g legal to
set a 50GB quota on files in the legal group.

http://www.freebsd.org/doc/en/books/handbook/quotas.html describes how
to set up the system to enable quotas.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


dump and remote file fetching

2008-05-27 Thread Zbigniew Szalbot

Hello,

Need a word of advice. I use dump to backup my data. All fine. Dump 
saves compressed *.bz2 files. Nice. All I need now is a way to copy them 
from the server to a remote backup machine. The problem I am facing is 
that bz2 files are owned by root:wheel. So if I use scp 
[EMAIL PROTECTED]:/path/to/*.bz2, it does not have sufficient permissions 
to fetch the files. I can use sudo, but then I need to interactively 
type the password, which I would like to avoid.


Can you suggest simple ways of getting around this? I don't mind using 
special tools for the job, especially if they are not too complicated... :)


Before firing this email off I took a look at rsync and it seems easy 
enough to do just what I need but still many thanks for suggestions!



--
Zbigniew Szalbot
www.lc-words.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Survive from DDoS

2008-05-27 Thread Kalpin Erlangga Silaen
Dear all,

yesterday, our shell server was attack and server immeditiately reboot.
I checked logs, it likes UDP flood with destination port 53. Is there
any way how to survive from this kind attack? Also, is there any
url/resources to improve our shell server?

Thank you


Kalpin Erlangga Silaen

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD based router ...

2008-05-27 Thread Marc G. Fournier
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Does anyone know of anyone make an enterprise level router based off of FreeBSD?

- -- 
Marc G. FournierHub.Org Hosting Solutions S.A. (http://www.hub.org)
Email . [EMAIL PROTECTED]  MSN . [EMAIL PROTECTED]
Yahoo . yscrappy   Skype: hub.orgICQ . 7615664
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (FreeBSD)

iEYEARECAAYFAkg8u+cACgkQ4QvfyHIvDvMF8wCg25K5IaX4/DIHk8KFIAfKXe/b
decAoOqllLM7c6ty7wwXcwuPlEk/xSo6
=O+GR
-END PGP SIGNATURE-

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD based router ...

2008-05-27 Thread Matthew Donovan
On Tue, May 27, 2008 at 10:56:55PM -0300, Marc G. Fournier wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 
 Does anyone know of anyone make an enterprise level router based off of 
 FreeBSD?
 
 - -- 
 Marc G. FournierHub.Org Hosting Solutions S.A. (http://www.hub.org)
 Email . [EMAIL PROTECTED]  MSN . [EMAIL PROTECTED]
 Yahoo . yscrappy   Skype: hub.orgICQ . 7615664
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v2.0.9 (FreeBSD)
 
 iEYEARECAAYFAkg8u+cACgkQ4QvfyHIvDvMF8wCg25K5IaX4/DIHk8KFIAfKXe/b
 decAoOqllLM7c6ty7wwXcwuPlEk/xSo6
 =O+GR
 -END PGP SIGNATURE-
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
Juniptor makes routers based on freebsd. Sorry for the spelling really it's 
incorrect for the company name but you can just look up theri site if you want 
to pay for it really good from what I have heard.


pgpTorZjMCfFM.pgp
Description: PGP signature


Re: FreeBSD based router ...

2008-05-27 Thread Outback Dingo
That would be Juniper

On Wed, May 28, 2008 at 9:28 AM, Matthew Donovan [EMAIL PROTECTED]
wrote:

 On Tue, May 27, 2008 at 10:56:55PM -0300, Marc G. Fournier wrote:
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
 
 
  Does anyone know of anyone make an enterprise level router based off of
 FreeBSD?
 
  - --
  Marc G. FournierHub.Org Hosting Solutions S.A. (
 http://www.hub.org)
  Email . [EMAIL PROTECTED]  MSN .
 [EMAIL PROTECTED]
  Yahoo . yscrappy   Skype: hub.orgICQ . 7615664
  -BEGIN PGP SIGNATURE-
  Version: GnuPG v2.0.9 (FreeBSD)
 
  iEYEARECAAYFAkg8u+cACgkQ4QvfyHIvDvMF8wCg25K5IaX4/DIHk8KFIAfKXe/b
  decAoOqllLM7c6ty7wwXcwuPlEk/xSo6
  =O+GR
  -END PGP SIGNATURE-
 
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
 Juniptor makes routers based on freebsd. Sorry for the spelling really it's
 incorrect for the company name but you can just look up theri site if you
 want to pay for it really good from what I have heard.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD based router ...

2008-05-27 Thread Giorgos Keramidas
On Tue, 27 May 2008 22:28:35 -0400, Matthew Donovan [EMAIL PROTECTED] wrote:
 On Tue, May 27, 2008 at 10:56:55PM -0300, Marc G. Fournier wrote:
 Does anyone know of anyone make an enterprise level router based off of 
 FreeBSD?

 Juniptor makes routers based on freebsd. Sorry for the spelling really
 it's incorrect for the company name but you can just look up theri
 site if you want to pay for it really good from what I have heard.

The correct spelling of the name is 'Juniper'.

You are right of course.  Juniper develops high-end routers.
They're very very good at it too :)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD based router ...

2008-05-27 Thread Kurt Buff
On Tue, May 27, 2008 at 6:56 PM, Marc G. Fournier [EMAIL PROTECTED] wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1


 Does anyone know of anyone make an enterprise level router based off of 
 FreeBSD?

 - --
 Marc G. FournierHub.Org Hosting Solutions S.A. (http://www.hub.org)
 Email . [EMAIL PROTECTED]  MSN . [EMAIL PROTECTED]
 Yahoo . yscrappy   Skype: hub.orgICQ . 7615664
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v2.0.9 (FreeBSD)

 iEYEARECAAYFAkg8u+cACgkQ4QvfyHIvDvMF8wCg25K5IaX4/DIHk8KFIAfKXe/b
 decAoOqllLM7c6ty7wwXcwuPlEk/xSo6
 =O+GR
 -END PGP SIGNATURE-

Where are you heading with your question?

I'm in the middle of putting together a router with a white box and 3
NICs (onboard, add-in Intel, and a Sangoma A301), doing BGP4 with a
DS3 and a T1. It'll be running FreeBSD 7.0, and probably OpenBGP or
quagga.

I'm having to learn the BGP stuff from scratch, but I've got people to
put questions to, including the ISPs.

I suppose, though, that this doesn't meet your definition of 'enterprise level'.

Kurt
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]