Re: MySQL + SSL

2009-10-08 Thread Matthew Seaman

Olivier Nicole wrote:

Hi,

I have been strugling to find the correct syntax for the mysql(1)
command to connect with SSL.

My server is accepting SSL connections:

  db2root: mysql -u root -p
  Enter password: 
  Welcome to the MySQL monitor.  Commands end with ; or \g.

  Your MySQL connection id is 1
  Server version: 5.4.2-beta FreeBSD port: mysql-server-5.4.2
  
  Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
  
  mysql SHOW VARIABLES LIKE '%ssl%';

  +---+---+
  | Variable_name | Value |
  +---+---+
  | have_openssl  | YES   |
  | have_ssl  | YES   |
  | ssl_ca| /usr/local/ssl/ca/ait-itserv.crt  |
  | ssl_capath|   |
  | ssl_cert  | /usr/local/ssl/crt/db2.cs.ait.ac.th.crt   |
  | ssl_cipher| DHE-RSA-AES256-SHA:AES128-SHA |
  | ssl_key   | /database/mysql/database.cs.ait.ac.th.key |
  +---+---+
  7 rows in set (0.00 sec)
  
  mysql quit

  Bye
  db2root:


This is a question more suited to one of the various MySQL fora really.

Anyhow, the standard take on using SSL to encrypt MySQL connections is:
don't do it.  MySQL is apparently pretty ropey when in comes to doing
crypto.

Instead, you should use ipsec, ssh, stunnel or the like to provide an
encrypted transport layer that you access MySQL through.  It's also
generally the case that the overhead of doing encryption between the DB
and the client application tends to destroy performance.  Design your 
network so that the DB is close to the application servers and has a

protected private network between the two, where you can send plaintext
traffic without fear of snooping.  If you need to work with systems
distributed over a number of sites, then replicating the DB so there is
an instance at each location is a good design choice, despite the
difficulties this introduces with Insert/Update/Delete on replica
DBs.  Then just encrypt the transport layer the inter-site replication
traffic uses.

Cheers,

Matthew

--
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
 Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
 Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature


Re: / almost out of space just after installation

2009-10-08 Thread perryh
Oliver Fromme o...@lurza.secnetix.de wrote:
 Chris Stankevitz chrisstankev...@yahoo.com wrote:
  ...
   Q1: Is 26M free space on / after installing FreeBSD normal?

 It depends on the FreeBSD version, and whether you installed
 the kernel with debug symbols.  430 MB space used in the
 root file system isn't completely uncommon.

 Nowadays I recomment to spend 1 GB for the root file system ...

I have long wondered where sysinstall gets its default FS sizes.

At least as far back as SunOs 3.5* the installer was able to auto-
size the partitions based on the selected distribution sets.  Of
course, this means that the installer must know the size of each
distribution set -- on each of /, /usr, and /var -- and that the
selection of what to install has to happen before the partitioning
is actually done.  I would think that the sizing of the distribution
sets could easily be automated as part of the release process, and
that the needed reordering of the installation process would not
be all that difficult for someone familiar with sysinstall and
accustomed to coding in the language involved.

* a commercial incarnation of 4.2BSD, some 20 or 30 years ago;
  I date myself by having even heard of it :)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Show bandwidth usage by IP address (through pf)

2009-10-08 Thread Oliver Fromme
Maxim Khitrov mkhit...@gmail.com wrote:
  I have pf filtering traffic to our network. Is there any easy way to
  see the current bandwidth usage sorted by ip? Someone is using up
  almost 100% of total bandwidth and parsing pfctl -ss -v isn't
  getting me anywhere.

The trafshow tool (ports/net/trafshow) does exactly that.

The nice thing about it is that it accepts the same filter
expressions that tcpdump accepts, so you can easily filter
by ports, addresses, interfaces, protocols and so on.

It works independent from your packet filter, so it doesn't
matter whether you use pf, ipf, ipfw or none at all.

If you want to see the amount of accumulated traffic (i.e.
since boot) per interface and per IP address, the commands
netstat -i and netstat -ib will tell that (in packets
and in bytes, respectively).

Best regards
   Oliver

-- 
Oliver Fromme, secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606,  Geschäftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün-
chen, HRB 125758,  Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart

FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd

One Unix to rule them all, One Resolver to find them,
One IP to bring them all and in the zone to bind them.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: When is it worth enabling hyperthreading?

2009-10-08 Thread Bill Moran
Pierre-Luc Drouin pldro...@pldrouin.net wrote:

 Hi,
 
 Could someone explain me in which cases it is useful to enable 
 hyperthreading on a machine running FreeBSD 8.0 and in which other cases 
 it is not a good idea? Is that possible that hyperthreading is 
 disadvantageous unless the number of active (non-sleeping) threads is 
 really high?
 
 For example, if I have an i7 CPU with 4 physical cores and that I run 
 some multi-threaded code that has only 4 threads, it will run almost 
 always (twice) slower with hyperthreading enabled than when I disable it 
 in the BIOS. If I understand correctly, hyperthreading has the advantage 
 of being able to do CPU context switching faster than the OS, but it 
 does this context switching systematically instead of only when 
 requested, so it slows things down unless the number of running 
 (non-sleeping) threads is greater or equal to let say the number of 
 physical threads x 1.5-1.75.

I can't speak to the technical explanation, but I can give you my real-
world experience.

We asked this same question where I worked and had the time and ability
to test it.  What we found:

* With hyperthreading on, workstations were more responsive to concurrent
  tasks.  They weren't particularly faster at executing, but there were
  less incidents of a background task causing the UI to stall or stutter.
* pgbench showed anywhere from 0% - 15% increased throughput.  Kind of
  pathetic, but we never saw a workload on PostgreSQL that was hurt by
  turning hyperthreading on.

-- 
Bill Moran
http://www.potentialtech.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Live CD

2009-10-08 Thread Randall Wood
Greetings - I've got a new Netbook I'm itching to install FreeBSD on,
and would prefer to avoid hassles by testing out the hardware with a
LiveCD first.  FreeSBIE seemed like an appropriate choice, but the
website is out of commission, and what I read on the web seems to
indicate the project is no longer maintained.  There's the FreeBSD Live
CD project, run by a Brazilian users' group, but it looks more
complicated than I'd prefer.  And I just discovered, through a posting
on the Daemon Forums, the RoFreeSBIE project, run by some Romanians.

Where to start?  I'm aware of the FreeBSD integrated fixit mode, but
that's not what I'm looking for.  I am looking for the FreeBSD
equivalent of Knoppix Linux, which will run a graphical desktop and give
me an idea if FreeBSD can work with my Atom dual core processor, Intel
onboard NIC and Wireless, the dinky little webcam, and so on, even
hardware that I wouldn't be able to identify by name in order to search
the web for info.

Has anybody had good or bad experiences with any of the above methods? 
A search of recent posts from this mailing list turned up precious
little, and the RoFreeSBIE site looks very interesting.  That's probably
where I would start, but like I said, I'm curious to see if anyone on
this list has had experience and would like to make recommendations. 
Otherwise, I'll let you know how it goes!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


It Happens With Time

2009-10-08 Thread Diego Montalvo
May not be the most brilliant FreeBSD user, but knew at one point some
of the boys working for X linux would jump ship. Well it is official
Debian pushes development of kFreeBSD port link here
http://urloid.com/bsd1

Not breaking down Debian, I would probably use them if I used Linux on
my servers, but it goes to show that Linux is not all that and perhaps
FreeBSD is all that! FreeBSD is the shit!

Support BSD by purchasing a BSD Magazine!  More Info here:
http://urloid.com/build2

Lovely Day for a Guinness or FreeBSD!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Multihome on FreeBSD 7.2

2009-10-08 Thread Aflatoon Aflatooni
Hi,
I have a DELL server with dual port nic card on it. The NICs are connected to 
the same VLAN.
I would like to configure the server so that both NIC cards are redundant that 
if one goes down the second one would pick up and continue. So I would need 
both ports to be configured with the same IP addresses of the server. Is there 
something that I need to configure or add to /etc/rc.conf?

Thanks


  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Multihome on FreeBSD 7.2

2009-10-08 Thread Steve Bertrand
Aflatoon Aflatooni wrote:
 Hi,
 I have a DELL server with dual port nic card on it. The NICs are connected to 
 the same VLAN.
 I would like to configure the server so that both NIC cards are redundant 
 that if one goes down the second one would pick up and continue. So I would 
 need both ports to be configured with the same IP addresses of the server. Is 
 there something that I need to configure or add to /etc/rc.conf?

You may want to look at lagg(4) in LACP mode:

%grep lagg /etc/rc.conf

cloned_interfaces=lagg0
ifconfig_lagg0=laggproto lacp laggport re0 laggport age0
ipv4_addrs_lagg0=208.70.104.110/25

Your switch will need to be capable of LACP as well, and be configured
in a similar manner.

Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Multihome on FreeBSD 7.2

2009-10-08 Thread Valentin Bud
On Thu, Oct 8, 2009 at 3:22 PM, Aflatoon Aflatooni aaflato...@yahoo.comwrote:

 Hi,
 I have a DELL server with dual port nic card on it. The NICs are connected
 to the same VLAN.
 I would like to configure the server so that both NIC cards are redundant
 that if one goes down the second one would pick up and continue. So I would
 need both ports to be configured with the same IP addresses of the server.
 Is there something that I need to configure or add to /etc/rc.conf?

 Thanks



 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org


Hello Aflatoon,

 Take a look at lagg(4). I think that's what you need.

a great day,
v

-- 
network warrior since 2005
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ion windows manager on FreeBSD

2009-10-08 Thread Carlos A. M. dos Santos
On Wed, Oct 7, 2009 at 3:43 PM, Chad Perrin per...@apotheon.com wrote:
 On Wed, Oct 07, 2009 at 01:25:35PM -0300, Carlos A. M. dos Santos wrote:

 You can fork the code, rename it, whatever, but you can NOT change
 the license without explicit permission from the original copyright
 owner. That would be legally considered theft!

 Incorrect.  It would be legally considered copyright infringement.
 Copyright law is not property law, and both different laws *and*
 different terms apply.  Theft is not a term legally applied to
 copyright infringement -- at least, in any jurisdiction of which I'm even
 vaguely aware of the state of copyright law.

 That would be legally considered copyright infringement!

I was referring to stealing intellectual property, which can be a
synonym of copyright violation, depending on the country law. In my
country, for instance, computer programs are considered intellectual
property but they are also subjected to author rights, just like books
and paintings [1,2] .

 There.  I fixed it for you.

Thanks for the clarification, anyway.


References (in Portuguese)

[1] http://www.planalto.gov.br/ccivil_03/Leis/L9609.htm
[2] http://www.planalto.gov.br/ccivil_03/Leis/L9610.htm

-- 
My preferred quotation of Robert Louis Stevenson is You cannot
make an omelette without breaking eggs. Not because I like the
omelettes, but because I like the sound of eggs being broken.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


salvaging hard drive contents

2009-10-08 Thread jeffry killen

Hello;
I have a hard drive that contains the /var file system in a system that
will not boot.
In single user mode I can mount  /var.

I want to take this disk and put it in another FreeBSD system and
try to copy the files I need off of it to a safe place.

The system I will plug it into will also have a separate disk with
/var.

Is there going to be a conflict with the labels and how would I
best go about this?


response to above query---

There will be no conflict.  All the magic as to 'wher to mout what' is 
in
the /etc/fstab file.  because it doesn't know about the disk you're 
adding,
ther won'tbe any conflicts. Simply use the long form of mount(1), to 
wit:

mount devicename mountpoint, and mount it on any convenient location,
say '/mnt'.
--
Now I have the hard disk I want to recover mounted but please for give 
me

for being in the learning phase, but how to I cd on to this drive?

I mounted it using the suggested 'mount -r (in this case ad12s1d) /var'
now how do I actually read it?
I tried cd ad12s1d/var and I got the 'file does not exist' response.
If I do
cd /;  ls -la
I do not see an added entry.

Thanks for suggestions, info, etc
Jeff K




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: salvaging hard drive contents

2009-10-08 Thread Warren Block

On Thu, 8 Oct 2009, jeffry killen wrote:


Now I have the hard disk I want to recover mounted but please for give me
for being in the learning phase, but how to I cd on to this drive?

I mounted it using the suggested 'mount -r (in this case ad12s1d) /var'
now how do I actually read it?


What you've done there is mount your salvage drive over your running 
system's /var.  That's probably going to give you problems, possibly 
very quickly.  Just umounting the incorrect /var is probably not going 
to be enough.  You might have to reboot.


Once that's cleared up, use a mountpoint that's not doing anything. 
/mnt is commonly used for that.


mount -r /dev/ad12s1d /mnt

Then /mnt contains the salvage drive's var filesystem:

cd /mnt
ls

-Warren Block * Rapid City, South Dakota USA
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


STOP state in top + segmentation fault and core dump?

2009-10-08 Thread Pierre-Luc Drouin

Hi,

When I run many heavily multi-threaded (1000+ threads/process) and 
memory intensive (1800 MB+/process) processes on FreeBSD 8.0 amd64, some 
of them get in STOP state in top and then seg fault and core dump. Are 
stop states in top caused by seg faults or it is the OS that stops the 
processes because they exceed some limit? I do not see any message about 
any limit being exceeded. The machine has 12GB of memory so it should  
be able to sustain 4 processes using 1800MB each of memory I guess (I 
have 12 GB of swap space anyway but it stays unused). Everything runs 
fine if I run a single process and I have never encountered such 
problems when running these on Linux. Anyone has an idea?


I am using the default limits right now:
limit
cputime  unlimited
filesize unlimited
datasize 33554432 kbytes
stacksize524288 kbytes
coredumpsize unlimited
memoryuseunlimited
vmemoryuse   unlimited
descriptors  11095
memorylocked unlimited
maxproc  5547
sbsize   unlimited
swapsize unlimited

Thank you!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


MAC and JAILS

2009-10-08 Thread Paul Procacci

Hey all,

I'm trying to implement MAC within jails.  however any attempt to do
this from directly within the jail results in Operation not Permitted
messages.  With that, I assume root within the jail doesn't have any
capabliities of defining his own policies.  Can anyone confirm (or deny)
this?

Thanks,
Paul


This message may contain confidential or privileged information.  If you are 
not the intended recipient, please advise us immediately and delete this 
message.  See http://www.datapipe.com/emaildisclaimer.aspx for further 
information on confidentiality and the risks of non-secure electronic 
communication. If you cannot access these links, please notify us by reply 
message and we will send the contents to you.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


FreeBSD 7.1 as a router - poor download speed, but normal upload

2009-10-08 Thread .kkursor
Hello everybody! Please help me if you can.
I have a home server built on Gigabyte MiniITX motherboard with VIA C3
800MHz CPU and 512M RAM aboard. The server acts as a file server,
torrent downloader, router and mail and HTTP server.
I have a PPTP connection to my ISP through the integrated network card.
The network configuration is:

[0:04] kkur...@dot.kkursor.ru ~ # ifconfig
rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu
1500
options=8VLAN_MTU
ether 00:19:cb:54:c6:15
inet 192.168.0.26 netmask 0xff00 broadcast 192.168.0.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
rl1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu
1500
options=8VLAN_MTU
ether 00:0f:ea:e2:cd:e0
inet 192.168.158.102 netmask 0xff00 broadcast 192.168.158.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST metric 0 mtu 16384
inet 127.0.0.1 netmask 0xff00 
tun0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST metric 0 mtu 1500
inet 195.98.183.20 -- 172.30.96.1 netmask 0x 
Opened by PID 73795
tun1: flags=8010POINTOPOINT,MULTICAST metric 0 mtu 1500

rl1 is integrated network card and rl0 is an additional PCI NIC which is
inserted into the only PCI slot on the motherboard. Connection to ISP is
done over rl1 using port pptp-client.
The problem is that there is very low download speed. My ISP provides
symmetric 4Mbps line, but download speed is poor - about 1 Mbps. Upload
speed is OK. I called ISP, they asked me to connect WinXP computer and
measure speed. It was normal, therefore there is an issue in my server.
If you could point me in the right direction, it would be wonderful.
Thank you very much for your work!

With best regards and looking forward for answer,
Kirill Sarksyan, Russian Federation
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 7.1 as a router - poor download speed, but normal upload

2009-10-08 Thread krad
2009/10/8 .kkursor d...@kkursor.ru

 Hello everybody! Please help me if you can.
 I have a home server built on Gigabyte MiniITX motherboard with VIA C3
 800MHz CPU and 512M RAM aboard. The server acts as a file server,
 torrent downloader, router and mail and HTTP server.
 I have a PPTP connection to my ISP through the integrated network card.
 The network configuration is:

 [0:04] kkur...@dot.kkursor.ru ~ # ifconfig
 rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu
 1500
options=8VLAN_MTU
ether 00:19:cb:54:c6:15
inet 192.168.0.26 netmask 0xff00 broadcast 192.168.0.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
 rl1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu
 1500
options=8VLAN_MTU
ether 00:0f:ea:e2:cd:e0
inet 192.168.158.102 netmask 0xff00 broadcast 192.168.158.255
media: Ethernet autoselect (100baseTX full-duplex)
status: active
 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST metric 0 mtu 16384
inet 127.0.0.1 netmask 0xff00
 tun0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST metric 0 mtu 1500
inet 195.98.183.20 -- 172.30.96.1 netmask 0x
Opened by PID 73795
 tun1: flags=8010POINTOPOINT,MULTICAST metric 0 mtu 1500

 rl1 is integrated network card and rl0 is an additional PCI NIC which is
 inserted into the only PCI slot on the motherboard. Connection to ISP is
 done over rl1 using port pptp-client.
 The problem is that there is very low download speed. My ISP provides
 symmetric 4Mbps line, but download speed is poor - about 1 Mbps. Upload
 speed is OK. I called ISP, they asked me to connect WinXP computer and
 measure speed. It was normal, therefore there is an issue in my server.
 If you could point me in the right direction, it would be wonderful.
 Thank you very much for your work!

 With best regards and looking forward for answer,
 Kirill Sarksyan, Russian Federation
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org



try turning the mtu on the tun0 interface to 1492. If it doent help try a
much lower setting eg 1450.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD 7.1 as a router - poor download speed, but normal upload

2009-10-08 Thread Morgan Wesström


.kkursor wrote:
 Hello everybody! Please help me if you can.
 I have a home server built on Gigabyte MiniITX motherboard with VIA C3
 800MHz CPU and 512M RAM aboard. The server acts as a file server,
 torrent downloader, router and mail and HTTP server.
 I have a PPTP connection to my ISP through the integrated network card.
 The network configuration is:
 
 [0:04] kkur...@dot.kkursor.ru ~ # ifconfig
 rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu
 1500
   options=8VLAN_MTU
   ether 00:19:cb:54:c6:15
   inet 192.168.0.26 netmask 0xff00 broadcast 192.168.0.255
   media: Ethernet autoselect (100baseTX full-duplex)
   status: active
 rl1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu
 1500
   options=8VLAN_MTU
   ether 00:0f:ea:e2:cd:e0
   inet 192.168.158.102 netmask 0xff00 broadcast 192.168.158.255
   media: Ethernet autoselect (100baseTX full-duplex)
   status: active
 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST metric 0 mtu 16384
   inet 127.0.0.1 netmask 0xff00 
 tun0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST metric 0 mtu 1500
   inet 195.98.183.20 -- 172.30.96.1 netmask 0x 
   Opened by PID 73795
 tun1: flags=8010POINTOPOINT,MULTICAST metric 0 mtu 1500
 
 rl1 is integrated network card and rl0 is an additional PCI NIC which is
 inserted into the only PCI slot on the motherboard. Connection to ISP is
 done over rl1 using port pptp-client.
 The problem is that there is very low download speed. My ISP provides
 symmetric 4Mbps line, but download speed is poor - about 1 Mbps. Upload
 speed is OK. I called ISP, they asked me to connect WinXP computer and
 measure speed. It was normal, therefore there is an issue in my server.
 If you could point me in the right direction, it would be wonderful.
 Thank you very much for your work!
 
 With best regards and looking forward for answer,
 Kirill Sarksyan, Russian Federation

Did you really saturate your upload while testing your download speed in
WinXP? What you're describing is a common problem with how TCP works
especially on (but not limited to) assymetric connections. I use the
technique described by Daniel Hartmeier to circumvent it and can fully
utilize my upload and download simultaneously.

http://www.benzedrine.cx/ackpri.html

/Morgan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ion windows manager on FreeBSD

2009-10-08 Thread Chad Perrin
On Thu, Oct 08, 2009 at 11:19:00AM -0300, Carlos A. M. dos Santos wrote:
 On Wed, Oct 7, 2009 at 3:43 PM, Chad Perrin per...@apotheon.com wrote:
  On Wed, Oct 07, 2009 at 01:25:35PM -0300, Carlos A. M. dos Santos wrote:
 
  You can fork the code, rename it, whatever, but you can NOT change
  the license without explicit permission from the original copyright
  owner. That would be legally considered theft!
 
  Incorrect.  It would be legally considered copyright infringement.
  Copyright law is not property law, and both different laws *and*
  different terms apply.  Theft is not a term legally applied to
  copyright infringement -- at least, in any jurisdiction of which I'm even
  vaguely aware of the state of copyright law.
 
  That would be legally considered copyright infringement!
 
 I was referring to stealing intellectual property, which can be a
 synonym of copyright violation, depending on the country law. In my
 country, for instance, computer programs are considered intellectual
 property but they are also subjected to author rights, just like books
 and paintings [1,2] .

The term Intellectual Property is essentially an invention of people
who wished copyright, patent, and trademark bodies of law were treated
more like actual property law.  Saying something is intellectual
property sure makes it *sound* like violating the relevant law should be
called stealing, but it's still not theft under the law (unless you
happen to live in some jurisdiction that treats this stuff in a very
nonstandard manner -- I can't speak for all jurisdictions, since I know
nothing about copyright law in Eritrea, for instance).

Not only is copyright not *legally* considered theft, but it is not
*practically* equivalent to theft, either.  In theft, a person has a
thing in his or her possession, and the thief takes it away.  There is no
thing in a copyright holder's possession that is taken away when
copyright is infringed.  The common excuse for calling it theft is
reference to the copyright holder's profits being stolen, but because
those profits do not even exist yet at the time of the copyright
infringement, they are not literally being taken away.


 
 References (in Portuguese)
 
 [1] http://www.planalto.gov.br/ccivil_03/Leis/L9609.htm
 [2] http://www.planalto.gov.br/ccivil_03/Leis/L9610.htm

Alas, I do not read Portuguese.  Maybe in Portugal the word for theft
is defined differently than here, so that it applies not to property per
se, but to any illegal act of acquisition; that is not a jurisdiction
whose copyright laws are familiar to me.  I rather doubt it, though,
because a legal definition of theft that is applicable to copyright would
fail to account for actual theft of actual property of naturally limited
abundance.

Given an example with which I am more familiar (the United States),
though, I cite Dowling v. US:

The infringer invades a statutorily defined province guaranteed to
the copyright holder alone. But he does not assume physical control
over the copyright; nor does he wholly deprive its owner of its use.

Dowling v. US specfically set forth for those who wished to define
bootleg recordings as stolen property the details for why this was not
an appropriate definition, and rejected outright and in all its
particulars the concept that copyright infringement is theft in any legal
sense of the term.  The reasoning is summed up in the above two-sentence
quote from the Dowling v. US decision.

The economic principle that differentiates copyright infringement from
property theft is that of rivalry.  A rival good is one whose use by one
consumer prevents the use by another, whereas a nonrival good is one
whose use by one consumer does not interfere with the use by another.
Copyright infringement is illegal acquisition, by a consumer, of a
nonrival good; property theft is illegal acquisition, by a consumer, of a
rival good.  Copyright violation does not deprive anyone else of the
opportunity to acquire or use the good in question, whereas property
theft *does*, accounting for the differences of legal status for
acquisition between rival and nonrival goods.

Thomas Jefferson, in discussions of the idea of copyright and patent law
before such were even included in the US Constitution, made this
distinction as well:

He who receives an idea from me, receives instruction himself without
lessening mine; as he who lights his taper at mine, receives light
without darkening me.

-- 
Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]


pgpPf5y4U19ZR.pgp
Description: PGP signature


Trouble getting new raid array to boot

2009-10-08 Thread David LeCount
I just built an aac raid array. I partitioned the disk, set the partition as 
active, and copied all my files to it with tar. I changed fstab on the new 
drive to reflect the changes. When I try to boot to the array, it says invalid 
partition. I've tried typing everything I could as the partition but they all 
fail. I was going to try making a new install on the new partition and then 
copy everything but I'm having unrelated problems with my burner. What do I 
need to do to get this thing to boot up?


  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Error Compiling qt4-dbus

2009-10-08 Thread Warren Liddell
Running AMD64 7.2-STABLE src  kernel upto date an trying to get ports 
updated when encountering the below issue which is now affecting a lot 
of programs..




cd 
/usr/ports/devel/dbus-qt4/work/qt-x11-opensource-src-4.5.2/./tools/qdbus/qdbus

make first
c++ -c -O2 -fno-strict-aliasing -pipe -O2 -Wall -W -D_LARGEFILE64_SOURCE 
-D_LARGEFILE_SOURCE -DQT_NO_DEBUG -DQT_XML_LIB -DQT_CORE_LIB -DQT_SHARED 
-I/usr/local/share/qt4/mkspecs/freebsd-g++ -I. -I../../../include/QtCore 
-I../../../include/QtXml -I../../../include -I../../../include/QtDBus 
-I.moc/release-shared -I/usr/local/include -o 
.obj/release-shared/qdbus.o qdbus.cpp
g++ -Wl,-O1 -pthread -Wl,-rpath,/usr/local/lib/qt4 
-Wl,-rpath,/usr/local/lib/qt4 -o ../../../bin/qdbus 
.obj/release-shared/qdbus.o-L/usr/local/lib/qt4 
-L/usr/ports/devel/dbus-qt4/work/qt-x11-opensource-src-4.5.2/lib 
-L/usr/local/lib -lQtDBus -L/usr/local/lib/qt4 -L/usr/local/lib -pthread 
-pthread -pthread -pthread -pthread -pthread -lQtXml -pthread -pthread 
-lQtCore -lz -lm -pthread -lgthread-2.0 -lglib-2.0 -liconv
.obj/release-shared/qdbus.o(.text+0xdc): In function `printArg(QVariant 
const)':

: undefined reference to `QDBusUtil::argumentToString(QVariant const)'
*** Error code 1

Stop in 
/usr/ports/devel/dbus-qt4/work/qt-x11-opensource-src-4.5.2/tools/qdbus/qdbus.

*** Error code 1

Stop in 
/usr/ports/devel/dbus-qt4/work/qt-x11-opensource-src-4.5.2/tools/qdbus/qdbus.

*** Error code 1

Stop in 
/usr/ports/devel/dbus-qt4/work/qt-x11-opensource-src-4.5.2/tools/qdbus.

*** Error code 1

Stop in /usr/ports/devel/dbus-qt4.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Trouble getting new raid array to boot

2009-10-08 Thread Tim Judd
On 10/8/09, David LeCount snailb...@yahoo.com wrote:
 I just built an aac raid array. I partitioned the disk, set the partition as
 active, and copied all my files to it with tar. I changed fstab on the new
 drive to reflect the changes. When I try to boot to the array, it says
 invalid partition. I've tried typing everything I could as the partition but
 they all fail. I was going to try making a new install on the new partition
 and then copy everything but I'm having unrelated problems with my burner.
 What do I need to do to get this thing to boot up?


Is the aac driver in the kernel, or loaded as a kld before you get
past the boot blocks, and loader?



--TJ
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Upgrade to 7.2 broke network connections

2009-10-08 Thread fbsd-ml
Today I updated a server from 6.4 to 7.2.  I cvsup'ed, built world, built
kernel, installed kernel, installed world, mergemastered, and rebooted. 
And sat there, while ntpdate timed out trying to connect to four different
servers, while interface status messages slowly scrolled:
tx0: device timeout 2 packets
tx0: seems we can continue normally
rl0: watchdog timeout

When it finally timed out, and I logged in, I found that I could ping
127.0.0.1, I could ping 192.168.50.7 (tx0 interface), I could ping the rl0
wan interface, I could not ping the gateway or anything outside of the
machine.

Looking at dmesg later, I found the same timeout messages repeated again
and again, and I found further error messages:
tx0: reinitialization
tx0: ERROR! Can't stop TxDMA
tx0: ERROR! Unknown PHY selected

and repeated periodically:
tx0: reinitialization
tx0: ERROR! Unknown PHY selected


I built and installed the generic kernel, and tried again.  Same deal.  I
disabled ipfilter and ntp in rc.conf, removed the configuration lines for
all but one interface, and rebooted.  Same deal, just shorter boot time
without having to wait for ntpdate (grin)

I thought, ok.really old NICs.  There were some warnings about
deprecated features in bootup.  I took out both NICs and put in an Intel
Pro 10/100/1000 -- obviously supported.  Same deal.

I previously attempted to update this server several months ago, going
from 6.something to 7.1, and had this same problem.  After several
frustrating days, I restored from backup and updated to latest 6.x, which
worked fine.

So I assume that I have something configured wrong.  If there were
hardware compatibility issues this big, this version would never have gone
to stable, and people would be screaming about it all over the mailing
lists.  So my question is.what should be my next troubleshooting step?

Thanks for your time,
Renee Gehlbach

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Trouble getting new raid array to boot

2009-10-08 Thread David LeCount
 Is the aac driver in the kernel, or loaded as a kld before
 you get
 past the boot blocks, and loader?

It's built into the kernel.


  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


How to set device permissions at startup

2009-10-08 Thread Aryeh M. Friedman
Since certain currently unused devices are not created in /dev 
(specifically in my case /dev/fuse*) how do I tell what ever (I can't 
tell it is devfs or what) to always make /dev/fuse* (when needed) with 
777 perms (the security implications are not an issue here)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Trouble getting new raid array to boot

2009-10-08 Thread Tim Judd
On 10/8/09, David LeCount snailb...@yahoo.com wrote:
 Is the aac driver in the kernel, or loaded as a kld before
 you get
 past the boot blocks, and loader?

 It's built into the kernel.

Then my answer would be missing MBR or boot blocks, an active
partition alone won't make a system boot.  it's just a flag to say
which partition is bootable, but doesn't mean that the boot flag
itself makes the partition boot.


fdisk(8) and bsdlabel(8) -- see the -B option to both.


If you have a dangerously dedicated disk, ignore fdisk.  If you don't
have a bsdlabel, ignore bsdlabel.

I do both on any standard install.


--TJ
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: How to set device permissions at startup

2009-10-08 Thread Herbert J. Skuhra
Den 9. okt. 2009 kl. 05.25 skrev Aryeh M. Friedman aryeh.fried...@gmail.com 
:


Since certain currently unused devices are not created in /dev  
(specifically in my case /dev/fuse*) how do I tell what ever (I  
can't tell it is devfs or what) to always make /dev/fuse* (when  
needed) with 777 perms (the security implications are not an issue  
here)


Have you tried devfs.rules(5)?

-Herbert



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


tar --unlink ?

2009-10-08 Thread Matthias Apitz

Hello,

To move a file tree from one place to another I see as an example:

# tar -cf - local | tar --unlink -xpf - -C /mnt

What does '--unlink' do exactly? I can't see it in the man page of
tar(1). Thanks in advance

matthias
-- 
Matthias Apitz
t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211
e g...@unixarea.de - w http://www.unixarea.de/
Vote NO to EU's Lisbon Treaty: http://www.no-means-no.eu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org