saslauthd with sendmail

2006-03-17 Thread Jonathan Horne
Greetings!  This is my first posting to this list, ive been using FreeBSD
for about 5 days now.  I come from a fairly extensive linux background, so I
have a pretty good handle on compiling and configuring things.  Im actually
doing a project for myself to see if I can configure an exact services
replica of my production linux servers, but on FreeBSD (and then ill switch
it over!!).

 

I have a couple dev boxes im using for my experimentation.  One, I did a
minimal install.  The other, I did the developer install (install option 4 I
believe it was).  The other, I did a full/complete install, but so far, ive
not used that one in any of my testing.  Its just there.

 

I am having terrible trouble with sendmail and saslauthd!  Ive spent at
least 48 hours compiling or pkg_add'ing things to try to get it to work.
Each time I give the command: sendmail -d0.1 -bv root, this is what I get:

 

fbsd60-3# sendmail -d0.1 -bv root

Version 8.13.4

 Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MILTER MIME7TO8 MIME8TO7

NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS PIPELINING
SCANF

STARTTLS TCPWRAPPERS USERDB XDEBUG

Warning: Option: AuthMechanisms requires SASL support (-DSASL)

 

I also get that last warning line when sendmail starts too.  Ive tried
pkg_install sendmail+tls+sasl2+ldap,  then sendmail+tls+sasl2, then even
sendmail and cyrus-sasl-saslauthd.  Same thing as above.  Still complains of
no SASL.  Then ive tried using ports.  

 

cd /usr/ports/security/sasl2

make install distclean

cd /usr/ports/security/sasl2-saslauthd

make install distclean

 

then,

 

cd /usr/src/lib/libsm 

make obj  make depend  make 

cd /usr/src/lib/libsmutil 

make obj  make depend  make 

cd /usr/src/usr.sbin/sendmail 

make obj  make depend  make  make install

 

and always, with each attempt, I have the proper lines in /etc/rc.conf, such
as saslauthd_enable=YES, and the make.conf contains:

 

SENDMAIL_CFLAGS+= -I/usr/local/include -DSASL=2

SENDMAIL_LDFLAGS+= -L/usr/local/lib

SENDMAIL_LDADD+= -lsasl2

 

I can get Sendmail to recievemails for local [EMAIL PROTECTED] no problem,
like I said, I have a general handle on the configuration of sendmail.  I
just cant get saslauthd to play nice on freebsd for the life of me!  Help!!!

 

Thanks,

Jonathan Horne

 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: List Etiquette Question - Thank yous

2006-03-24 Thread Jonathan Horne
im fond of the next time im in [your town] ill stop off and buy you a
beer!

:)

jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


what is going on??

2006-03-24 Thread Jonathan Horne
last night i took down my fedora sever to migrate it to freebsd 6.0.  ive
done numerous tests on dev boxes in the past weeks getting ready for this
event, and they were all successful test installs.  i had all my services
down and i knew what i was supposed to be doing.

however, when i get to first boot, the machine says:

starting sshd.

and hangs for a few minutes.  if i hit ctrl-c i see that sendmail is having
trouble starting.  i have a good DNS server listed, and the format of the
/etc/hosts file is correct.

now im having trouble getting pkg_add -r to work, everything to
ftp.freebsd.org times out.

im in a bad situation, as the server i took down hosts all my personal email
accoutns (i had to add gmail just to even try to read the lsits).

can someone shed some light for me here??

thanks
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: what is going on??

2006-03-24 Thread Jonathan Horne
Thanks for the replies everyone.

It turned out to be partially ipv6, partially the ipfw on my pfsense
firewall.  Ultimately, the hangup was in sendmail, unable to start.  Ipv6
messages in the logevel 20 maillogs.

However, during all my troubles, I was always able to resolve
ftp.freebsd.org (I don't think I mentioned that before), as well as I could
ping it and any number of other hosts as I scratched my head for 3 hours.

Ultimately, I ended up compiling a new kernel anyway to enable SMP, and I
just removed the ipv6 support while I was there.  That and disabling the
userlan ftp-proxy application on my firewall, I was up and running this
morning within a few hours of compiling.

So long fedora!

:D

jonathan

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Eric Schuele
Sent: Friday, March 24, 2006 8:50 PM
To: Jonathan Horne
Cc: freebsd-questions@freebsd.org
Subject: Re: what is going on??

Jonathan Horne wrote:
 last night i took down my fedora sever to migrate it to freebsd 6.0.  ive
 done numerous tests on dev boxes in the past weeks getting ready for this
 event, and they were all successful test installs.  i had all my services
 down and i knew what i was supposed to be doing.
 
 however, when i get to first boot, the machine says:
 
 starting sshd.
 
 and hangs for a few minutes.  if i hit ctrl-c i see that sendmail is
having
 trouble starting.  i have a good DNS server listed, and the format of the
 /etc/hosts file is correct.
 
 now im having trouble getting pkg_add -r to work, everything to
 ftp.freebsd.org times out.
 
 im in a bad situation, as the server i took down hosts all my personal
email
 accoutns (i had to add gmail just to even try to read the lsits).
 
 can someone shed some light for me here??

My .02 cents:
Double check your name resolution functionality.  Also, seems I had 
trouble once upon a time with IPV6 causing similar issues as well.  But 
that was quite some time ago.

 
 thanks
 jonathan
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]
 


-- 
Regards,
Eric
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: what is going on??

2006-03-25 Thread Jonathan Horne
[quote]
...that there are still quite a few 'broken' DNS servers out there.
'Broken' with respect to servicing IPv6 requests.
[/quote]

Actually, when you mention it that way, that makes pretty good sense as to
what my situation then was.  The server I was specifying was a *very* old
metaip 4.1 DNS server, and its quite possible it was answering the ipv6
queries with a simple u.

However, im fairly certain that the hangup was not with SSH (SSH just
happened to be the lat daemon successfully started, thus the last thing
printed to the screen), but sendmail. The maillog had a few lines saying
unable to get ipv6 name, or something like that.

Cheers,
jonathan


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


USB external drive size limitations?

2006-03-25 Thread Jonathan Horne
Last night I plugged in a 300GB Maxtor USB drive into my FreeBSD 6.0 server
(with a fat filesystem), and it told me it was too big!!

 

Haha, its full of my backups from my previous operating system (fedora) and
now im going to have a fun time getting those files onto my new FreeBSD
server!  Can someone recommend a course of action for me here?  Google isn't
really turning up anything interesting relating to size of external drives.

 

Thanks,

jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


compiling sendmail to 8.13.6

2006-03-25 Thread Jonathan Horne
Ok, I just cvsup'd and it did not pull down the sources for sendmail 8.13.6
( I might still have misunderstanding of what exactly cvsup does).  Anyway,
I took matters into my own hands, and I was wondering if my procedure would
be considered acceptable by my peers.  So, this is what I did:

 

1)   pulled down sendmail.8.13.6.tar.gz from sendmail.org.

2)   read FREEBSD-upgrade doc from /usr/src/contrib/sendmail, and found
this info

For the import of sendmail, the following files were removed:

 

Build

cf/cf/Build

cf/cf/generic-*.cf

devtools/*

doc/op/op.ps

*/Build

[e-v]*/*.0

sendmail/makesendmail

sendmail/sysexits.h

 

The following directories were renamed:

 

sendmail - src

 

3)   untared sendmail.8.13.6.tar.gz, and made the exact same changes to
files/folders listed above.  Rename source folder to just 'sendmail'

4)   remove /usr/src/contrib/sendmail.  Replace with my new sendmail
directory that I just downloaded and edited

5)   re-compile sendmail as most all howtos dictate:

 

# cd /usr/src/lib/libsm

# make obj  make depend  make

# cd /usr/src/lib/libsmutil

# make obj  make depend  make

# cd /usr/src/usr.sbin/sendmail/

# make obj  make depend  make  make install

 

  6) cd /etc/mail/  do a make all install restart

  7) reboot.

 

When the system came back up, the sendmail banner tells me its running
8.13.6/8.13.4.  would this mean im upgraded to the latest and am now without
a shadow of a doubt secure against this latest sendmail threat?  Would that
have been an acceptable way to upgrade a production server (and should I do
it again, this time on my production sendmail server)?

 

Thanks for reading!

jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


best way to use cp?

2006-03-25 Thread Jonathan Horne
ok, tell them dumb linux user how to properly copy directories recursivly,
so he can stop overwritng directories with source files.

/humor

ok seriously, tho, i think im doing it wrong.  last night i blasted some
directories, and when i looked at the destination of where i was supposed to
be copying to, it was full of all kinds of junk that was supposed to be in
the top level of the directories i was copying.

example, i want to copy /mnt/usb1/path/oldfolder  (the folded all its
recursive contents) into /home/mydir

im pretty sure i have the syntax wrong, so could someone enlighten me?

thanks!
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


what is the process for migrating a pre-built kernel to a new machine?

2006-03-25 Thread Jonathan Horne
What if I want to use a kernel I compiled on one system, on another system?
What is the process to successfully migrate a kernel from one system to
another (or back to the same after a disaster recovery)?

 

Thanks,

jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


method for installing ports

2006-03-25 Thread Jonathan Horne
Ive read many many guides found all over the net in the past few days, and
they can never seem to agree on the way a port is installed.  I see these
methods:

Make install
Make install clean
Make install distclean

What is the difference between the 3, and are there legitimate times when
one is preferred over the other?

Thanks,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: what is the process for migrating a pre-built kernel to a new machine?

2006-03-25 Thread Jonathan Horne
So if when you say copy the kernel, do you just mean the contents of the
/boot/kernel directory, and that's as plain as it is?  Or is there more to
it?

The reason I'm asking, is that I always plan for disaster recovery, and
after a build, easily the single longest task for bringing my particular
system totally back online, is compiling the kernel (im still running my 5
year old dual p3 800).  For time's sake during recovery, I would like to
skip at least that process.

Can you give me more specifics on exactly what should be moved/copied?

Cheers,
jonathan

-Original Message-
From: Jason C. Wells [mailto:[EMAIL PROTECTED] 
Sent: Saturday, March 25, 2006 11:43 PM
To: Jonathan Horne; freebsd general questions
Subject: Re: what is the process for migrating a pre-built kernel to a new
machine?

Jonathan Horne wrote:
 What if I want to use a kernel I compiled on one system, on another
system?
 What is the process to successfully migrate a kernel from one system to
 another (or back to the same after a disaster recovery)?

Just FTP, NFS, or otherwise copy the kernel to the new system and reboot.

Now for the caveats.  It is inadvisable to copy a kernel from one 
version of FreeBSD to another.  You'll get mysterious library errors 
from libraries like libkvm.  Copying 6.1 kernels to and from 6.1 systems 
is OK.  Copying 6.1 kernels to 5.4 system is bad.  Copying a kernel from 
last month's build of stable to this months build of stable is probably 
bad also.

I would advise you to install the kernel sources on each machine where 
you want to build a custom kernel.  That or set up one machine to be 
your build server in the fashion described in the handbook.

You also have to take care regarding hardware compatibility.  If one 
system is all SCSI and the other is all IDE you are not going to be able 
to move those kernels around and have properly functioning hard drives.

For disaster recovery, keep your kernel config file.  I would argue that 
the config file is more important than the actual kernel binary.

Later,
Jason C. Wells

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: method for installing ports

2006-03-25 Thread Jonathan Horne
Thanks to you both!  That defiantly clears it up, and explains some of the
behavior ive seen when I go back to redo something from ports ive already
done :)

Cheers,
jonathan

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Peter
Sent: Saturday, March 25, 2006 11:40 PM
To: Jonathan Horne; freebsd-questions@freebsd.org
Subject: Re: method for installing ports


--- Jonathan Horne [EMAIL PROTECTED] wrote:

 Ive read many many guides found all over the net in the past few
 days, and
 they can never seem to agree on the way a port is installed.  I see
 these
 methods:
 
 Make install

Installs a port and any needed build dependencies.

 Make install clean

Same as above but removes the uncompressed source code.

 Make install distclean

Same as above but removes the distribution files (the compressed
source code).  Do this if you will be building on some other
architecture
or if you will never use the source code again.

 What is the difference between the 3, and are there legitimate times
 when one is preferred over the other?


__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: How do you keep users from stealing other user's ip??

2006-03-26 Thread Jonathan Horne
You make it sound like they are doing it on purpose.  Could it be the lease
duration is so short that the ips are going back into the pool before they
are truly abandoned by the original user?  If you look at the behavior of
the MS DHCP server, the lease duration is 8 days (with standard 4 day
renewal).  If it takes 8 days for it to back into the pool, this should be
more than enough time for a user to go home for the weekend, and hopefully
get the same ip when they get back to work.  I would suggest increasing the
lease duration time and see if that stops users from stepping on each others
dhcp leases (don't forget, in the typical dhcp-request conversation, the
client asks hey, I had x.x.x.x last, is it still available for me?  you
want the server to be able to say sure).  On my freebsd router, the DHCP
server came with a 1 hour lease duration (which causes a 30 minute renewal..
IMO this is too fast).

Second, you mentioned that users could just download software that would
allow them to change their mac address.  It sounds like some users have too
high a rights assignment, if they are causing mischief like that.

Cheers,
jonathan

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ted Mittelstaedt
Sent: Sunday, March 26, 2006 4:06 AM
To: Mark Jayson Alvarez; [EMAIL PROTECTED]
Subject: RE: How do you keep users from stealing other user's ip??

Hi Mark,

  The only way you can really lock it down is to statically assign
everything (either with a DHCP server that has a table of mac addresses)
and maintain an accurate list of mac addresses, and use managed switches
that have filtering capabilities.

  We do this on bridged DSL networks (except for the managed switch part)
and it's actually a lot easier to manage that most people think.

  What you have to do is when a new person hooks into the network,
you give them a test IP address, you ping that, get their MAC for that,
then hard code that into your DHCP server and tell them to switch
over to DHCP to get their permanent address.  Once they do that, hard-
code the IP address and mac in the router ARP table, and install a
filter on the switch port going to them that ignores any traffic
that originates from a different MAC than the one that you probed
from them.

Ted

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Mark Jayson
Alvarez
Sent: Thursday, March 23, 2006 10:26 PM
To: [EMAIL PROTECTED]
Subject: How do you keep users from stealing other user's ip??


Good day,


  We are trying to reorganize our local area network and I need
some tips on how you are managing your own lan...

  We have a vanilla pc router with interface facing our private
lan and interface facing the Internet.

 One problem which we are experiencing right now is that any
user from private lan can use any ip address he wants. If he
boots his computer with a stolen ip address, the poor owner of
that machine(not active at the moment) will give automatically
up his ip address to this user. The same scenario for public ip
addresses. Basically, we need to track down the users through
their ip address.. But this is trivial as of now since anyone
can use any ip he wants. Even if there is a solution out there
to tie up his mac address to his ip address..(sort of checking
the mac first before giving him an ip, possibly through dhcp..)
still, users can just download applications which will enable
him to change his mac address

 Now, where thinking about authenticating users before he is
allowed to use a particular network service(internet proxy,
mail etc.) because I guess it is a clever way of keeping the
bad users from doing something bad within your network when
after all, the reason why he is plugging his lancard to the
network is to use a particular service. However, it still
doesn't keep them from playing around and steal other ip
addresses or mac addresses and thus denying network access to
those legitimate owners. I'm thinking about tying dhcp with
authentication, and freeradius comes to mind.. I just need some
more tips from you. User's workstations are mixed Windows and
*nixes. Some have laptops with wireless interfaces.

  Any idea how to handle this situations??
  Thanks...



-
New Yahoo! Messenger with Voice. Call regular phones from your
PC and save big.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.3.1/292 - Release Date: 3/24/2006


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___

a few questions and concepts

2006-04-07 Thread Jonathan Horne
im still pretty new to freebsd.  ive been playing around with the cvsup
tools, and they are quite fascinating.

i changed my production server from Fedora to FreeBSD 6.0, about 1 day
before the most recent sendmail exploit was published (well, published on
freebsd.org anyway).  i did download the patch and recompile it, but as
some have also noted on this list, that it still banners as 8.13.4 when
you telnet to it.

so, the past couple of days, i have learned to cvsup my /usr/src
directories.  ive just been using the standard copy of the stable-supfile.
 i have learned that if i perform the sendmail recompile after the cvsup,
that it sendmail seems to proclaim 8.13.6 in the banner.  on top of that,
i have learned that if i recompile the kernel after cvsup, that it no
longer says FreeBSD 6.0-RELEASE, but FreeBSD 6.1-PRERELEASE.

my questions:
1) after cvsup, i think i can assume that sendmail is now compiling from
sourcecode that should definatly be free from the current exploit.  i
would also assume that anything that i would need to recompile from
/usr/src should also see the benefit of 'latest source code'?
2) on a production server, should i avoid recompiling a kernel that will
be FreeBSD 6.1-PRERELEASE?  on the whole, how reliable is the bulk of
these newer sources that were pulled down by cvsup?

i can definatly see the benefits of using cvsup to take care of problem
with some things (like sendmail), but allowing it to update everything
under the /usr/src tree, im wondering if i could be setting myself up for
issues (by not editing the stable-supfile and taking only what i need).

last, im also as well interested in hearing how some of my peers here
apply the cvsup concepts to your production servers.

thanks for reading,
Jonathan Horne

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: a few questions and concepts

2006-04-07 Thread Jonathan Horne
On Friday 07 April 2006 16:34, Giorgos Keramidas wrote:
 On 2006-04-07 15:54, Jonathan Horne [EMAIL PROTECTED] wrote:
  im still pretty new to freebsd.  ive been playing around with the cvsup
  tools, and they are quite fascinating.
 
  i changed my production server from Fedora to FreeBSD 6.0, about 1 day
  before the most recent sendmail exploit was published (well, published on
  freebsd.org anyway).

 Murphy at work, again, eh? :)

  i did download the patch and recompile it, but as some have also noted
  on this list, that it still banners as 8.13.4 when you telnet to it.
 
  so, the past couple of days, i have learned to cvsup my /usr/src
  directories.  ive just been using the standard copy of the
  stable-supfile. i have learned that if i perform the sendmail recompile
  after the cvsup, that it sendmail seems to proclaim 8.13.6 in the banner.
   on top of that, i have learned that if i recompile the kernel after
  cvsup, that it no longer says FreeBSD 6.0-RELEASE, but FreeBSD
  6.1-PRERELEASE.

 You are running RELENG_6 now, which is much more recent than
 RELENG_6_0_RELEASE.

 The first one is the top of the 6.X branch, which changes moderately
 slow, but it *does* change.  The 6.0-RELEASE source tree is frozen in
 time at the point the tag was placed on the source tree.

  my questions:
  1) after cvsup, i think i can assume that sendmail is now compiling from
  sourcecode that should definatly be free from the current exploit.  i
  would also assume that anything that i would need to recompile from
  /usr/src should also see the benefit of 'latest source code'?

 Yes, both true.

  2) on a production server, should i avoid recompiling a kernel that will
  be FreeBSD 6.1-PRERELEASE?  on the whole, how reliable is the bulk of
  these newer sources that were pulled down by cvsup?

 In general, if you a bit paranoid, you should avoid running RELENG_6 on
 a production system.  At least until you have thoroughly tested it on a
 test system and found everything working as expected.

  i can definatly see the benefits of using cvsup to take care of
  problem with some things (like sendmail), but allowing it to update
  everything under the /usr/src tree, im wondering if i could be setting
  myself up for issues (by not editing the stable-supfile and taking
  only what i need).

 This is why each FreeBSD release is associated with at least:

 * A frozen tag, like RELENG_6_0_RELEASE

 * A security branch, like RELENG_6_0

 * A stable branch, like RELENG_6

 Changes go very fast in the CURRENT FreeBSD branch.  After they settle
 in for a while, soem of them are backported to the RELENG_X branch.  The
 RELENG_X branch changes much slower than the experimental, CURRENT
 branch, but it does change every time a new feature is backported to
 RELENG_X.

 Then, when security fixes are made available, they are added both to the
 RELENG_X branch and the RELENG_X_Y security branches.

 If all you want is the frozen release sources plus changes that are
 really really necessary, because they fix a serious security bug, you
 probably want RELENG_X_Y (RELENG_6_0 in this case).

 Regards,
 Giorgos

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

thank you kindly for your reply, that was quite informative.  ive actually 
read the document on the differences between the stable, current, and release 
(or whatever), and find that system quite confusing for the moment.   im sure 
ill grasp the method of the madness eventually.  i guess what confuses me, is 
that i read about those, and then try to find them on the ftp sites.  i 
assume, that only release is made into a .iso file?  and to move to a higher 
version (either the security RELENG_6_0 or stable RELENG_6), you do this thru 
the cvsup tool.

so, by your descriptions and reply to my previous comments, my system that is 
running what says 6.1-PRERELEASE is really RELENG_6 (stable) ?

thanks,
Jonathan Horne
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: about sendmail security update

2006-04-08 Thread Jonathan Horne
On Saturday 08 April 2006 10:25, Gonzalo Suarez wrote:
 hello!

 i'm a very new freebsd user/admin. i run my own server since 1 month ago, i
 've been told about a security issue with sendmail. i read about it on the
 security ad
 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail
.ascand I don't know how could i get my system patch or upgraded. some
 people tell me to quit using sendmail and try postfix, but i would like to
 fix sendmail and try to configure it...

 I installed the system with a freebsd5.4 release cd. i downloaded the patch
 and when I excuted it i realized that i don't have the source code of
 sendmail since i started the installation with de cd-rom standard
 installation. what am i supposed to do now? patch or upgrade. what is the
 easy way? i have compiled some little C code for college practices and
 installed some bsd-ports with make install but  now i'm a little bit lost
 here...

 thanks for your help.

 Gonzalo.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

here is how i updated my system, just yesterday.  mine is 6.0, but im pretty 
sure its pretty close to the same (actually, before i clicked send here, i did 
this same thing on an unused 5.4 dev box i had, and ive determined that these 
instructions worked on 5.4 as well).

1) cvsup your /usr/src directories.  if they are empty, this will cause them 
to populate.  if there is anything already there, this will update your 
sources to latest.

# pkg_add -r cvsup-without-gui
# pkg_add -r fastest_cvsup
# cp /usr/share/examples/cvsup/stable-supfile /root
# cvsup -L 2 -h `(fastest_cvsup -q -c us )` /root/stable-supfile

that should update your entire sources tree.  take a look at the 
stable-supfile, it can be edited to be more brief about which portions of the 
src tree its going to pull down.  no edits = the whole thing.

2) recompile sendmail

# cd /usr/src/lib/libsm
# make obj  make depend  make
# cd /usr/src/lib/libsmutil
# make obj  make depend  make
# cd /usr/src/usr.sbin/sendmail/
# make obj  make depend  make  make install
# cd /etc/mail
# make all install restart

i generally also restart sendmail from the rc.d script as well, just to be 
sure.

# /etc/rc.d/sendmail restart

now, when you telnet to hostname.domain 25, you will see:

220 locahost.domain ESMTP Sendmail 8.13.6/8.13.3; Sat, 8 Apr 2006 
13:18:24 -0500 (CDT)

good luck!
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: fxp: promiscuous mode enabled

2006-04-09 Thread Jonathan Horne
On Sunday 09 April 2006 10:06, Derek Ragona wrote:
 promiscuous mode means the ethernet NIC grabs ALL packets, not just the
 ones addressed to it.  This is typically done by packet sniffers.

  -Derek

 At 09:35 AM 4/9/2006, Thiago Esteves de Oliveira wrote:
   Hi,
 
   I have a problem with my ethernet adapter (fxp)...
 
   When a run 'dmesg',  look:
 
   fxp: promiscuous mode enabled
   fxp: promiscuous mode disabled
   fxp: promiscuous mode enabled
   fxp: promiscuous mode disabled
 
   I didn't find it in fxp's manual...
 
 
 What's it ...
 
 --
 
 
   Thiago Esteves de Oliveira  
 
 

Typical Intel ethernet nic behavior of every one ive ever had.  they do that 
in linux too.  i think its just part of its initialization routines or 
something.  it ends up in the disabled mode anyway, i dont think its worth 
worrying over.  :)

cheers,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Proper Method of Time Sync?

2006-04-14 Thread Jonathan Horne
i have read about 2 methods to sync the time on a freebsd box.

1) add these entries to /etc/rc.conf:
ntpdate_enable=YES
ntpdate_flags=us.pool.ntp.org
... and let the system do a one-time sync at bootup, and rely on this
single method for timesync.

2) add this entry to /etc/rc.conf
ntpd_enable=YES
add the file with these contents to /etc/rc.conf:
server us.pool.ntp.org
driftfile /var/db/ntp.drift
restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap

so, i have a workstation and a server, which i originally did method 1 on,
but soon enough, time drifted quite a bit.  so i switched it to the 2nd
method, and they appear to be sync'd perfectly.  a third box i set up, i
did only method 2, and this one did not stay synced at all.  after i
manually ran 'ntpdate -v -b us.pool.ntp.org', this box straightend up.

are both methods required for proper time syncronization, or can one rely
only on the ntpd method?

thanks,
Jonathan Horne

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Proper Method of Time Sync?

2006-04-14 Thread Jonathan Horne
 i have read about 2 methods to sync the time on a freebsd box.

 1) add these entries to /etc/rc.conf:
 ntpdate_enable=YES
 ntpdate_flags=us.pool.ntp.org
 ... and let the system do a one-time sync at bootup, and rely on this
 single method for timesync.

 2) add this entry to /etc/rc.conf
 ntpd_enable=YES
 add the file with these contents to /etc/rc.conf:
 server us.pool.ntp.org
 driftfile /var/db/ntp.drift
 restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap

 so, i have a workstation and a server, which i originally did method 1 on,
 but soon enough, time drifted quite a bit.  so i switched it to the 2nd
 method, and they appear to be sync'd perfectly.  a third box i set up, i
 did only method 2, and this one did not stay synced at all.  after i
 manually ran 'ntpdate -v -b us.pool.ntp.org', this box straightend up.

 are both methods required for proper time syncronization, or can one rely
 only on the ntpd method?

 thanks,
 Jonathan Horne


Sorry, Typo:
 2) add this entry to /etc/rc.conf
 ntpd_enable=YES
 add the file with these contents to /etc/rc.conf:

i meant to say add the file /etc/ntp.conf with these contents

thanks,
Jonathan Horne


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Why are people singing there postings on this mailling list ?

2006-04-15 Thread Jonathan Horne
On Saturday 15 April 2006 08:23, Kees Plonsz wrote:
 Is is so important to know that the question or answer came from
 that person ? I don't think so.
 Even if it were so, for me it is too much trouble to import every key
 into my key-database from a key-server.
 On the other hand, those who aren't able to read singed messages
 are confronted with a lot of carbage tekst wich makes the posting
 harder to read.
 We don't send postings in .html for that same reason.

 Let me hear your opinion about this..

my 2 cents is:
Ive never imported one key in my entire life, nor have i had need to.

hehe, here is how i sign emails:
Jonathan Horne
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


vsftpd wont start at boot

2006-04-15 Thread Jonathan Horne
i compiled vsftpd from ports today.  at the end of the install, it asks me to 
add vsftpd_enable=YES to /etc/rc.conf, and also that i should add:

listen=YES
background=YES

to /usr/local/etc/vsftpd.conf.  when i do all those things, vsftpd will start 
when i issue it from a terminal, but it will not start at boot.

can someone point me in the right direction here?

thanks,
Jonathan Horne
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: vsftpd wont start at boot

2006-04-15 Thread Jonathan Horne
On Saturday 15 April 2006 16:09, albi wrote:
 On Sat, 15 Apr 2006 14:47:25 -0500

 Jonathan Horne [EMAIL PROTECTED] wrote:
  i compiled vsftpd from ports today.  at the end of the install, it
  asks me to add vsftpd_enable=YES to /etc/rc.conf, and also that i
  should add:
 
  listen=YES
  background=YES
 
  to /usr/local/etc/vsftpd.conf.  when i do all those things, vsftpd
  will start when i issue it from a terminal, but it will not start at
  boot.
 
  can someone point me in the right direction here?

 do you have /usr/local/etc/rc.d/vsftpd
 and is it executable ?

 afair the last version of vsftpd asks you before installing whether you
 want to use the rc.d/ script or not

 if you don't have this script, i've just copied it here :
 http://scii.nl/~albi/vsftpd

i did check just to be sure:

[EMAIL PROTECTED] ls -la /usr/local/etc/rc.d/vs*
-r-xr-xr-x  1 root  wheel  927 Apr 15 09:08 /usr/local/etc/rc.d/vsftpd

vsftpd will start if i issue the command manually, but i hope i can get it set 
up that the daemon will start if i have to reboot my server.

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: vsftpd wont start at boot

2006-04-15 Thread Jonathan Horne
 At 04:37 PM 4/15/2006, Jonathan Horne wrote:
 On Saturday 15 April 2006 16:09, albi wrote:
   On Sat, 15 Apr 2006 14:47:25 -0500
  
   Jonathan Horne [EMAIL PROTECTED] wrote:
i compiled vsftpd from ports today.  at the end of the install, it
asks me to add vsftpd_enable=YES to /etc/rc.conf, and also that i
should add:
   
listen=YES
background=YES
   
to /usr/local/etc/vsftpd.conf.  when i do all those things, vsftpd
will start when i issue it from a terminal, but it will not start at
boot.
   
can someone point me in the right direction here?
  
   do you have /usr/local/etc/rc.d/vsftpd
   and is it executable ?
  
   afair the last version of vsftpd asks you before installing whether you
   want to use the rc.d/ script or not
  
   if you don't have this script, i've just copied it here :
   http://scii.nl/~albi/vsftpd
 
 i did check just to be sure:
 
 [EMAIL PROTECTED] ls -la /usr/local/etc/rc.d/vs*
 -r-xr-xr-x  1 root  wheel  927 Apr 15 09:08 /usr/local/etc/rc.d/vsftpd
 
 vsftpd will start if i issue the command manually, but i hope i can get it
 set
 up that the daemon will start if i have to reboot my server.
 
 thanks,
 jonathan

On Saturday 15 April 2006 16:48, Derek Ragona wrote:
 rename the script to:
 /usr/local/etc/rc.d/vsftpd.sh

  -Derek

This was it!! thanks for helping me with my problem! when i renamed the file 
to vsftpd.sh, it all started on boot exactly as i was expecting it to!

thanks again,
jonathan horne
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


a favorite graphical ftp client?

2006-04-16 Thread Jonathan Horne
i would like to ask the list for opinions on a good graphical ftp client for a 
freebsd desktop.  before i try them all, id like to get a few 
recomendations :)

thanks,
jonathan horne
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: a favorite graphical ftp client?

2006-04-16 Thread Jonathan Horne
On Sunday 16 April 2006 20:17, [EMAIL PROTECTED] wrote:
  i would like to ask the list for opinions on a good graphical ftp client

 for a

  freebsd desktop.  before i try them all, id like to get a few
  recomendations :)

 gftp is quite nice imho -- http://gftp.seul.org/

sorry, i should have mentioned i use KDE.  will gftp be any trouble to 
compile, or is it going to pull down the entire gnome to go with it?  im 
really looking for something that works well under KDE.

thanks,
jonathan horne
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Is Squirrelmail the best webmail choice?

2006-04-18 Thread Jonathan Horne
ive used squirrelmail for quite a while, and i just want to make sure i
have my mind as open as possible here.  are there any other choices for
webmail that are about as easy as SM to configure, but offer a better user
interface or experience?

ive heard of horde, but ive not seen it since early 2000 or so, and even
then, when i tried to set it up, it was a complete and total failure.

so, any other recommendations for webmail besides squirrelmail?

thanks,
Jonathan Horne

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Curious behavior today

2006-04-18 Thread Jonathan Horne
ive been working on a pair of test boxes today, and 2 daemons in a row,
have installed from ports without the .sh on the end of their startup
script.

ive done tons of installs on these test boxes, what am i all of a sudden
doing wrong?  the only thing im doing different is (what i thinkn is just)
syntax.

before:
cd /usr/ports/mail/dovecot
make install distclean

now:
cd /usr/ports/mail/dovecot; make install distclean

saslthaud did the same thing just a while a go.  this happend on 2 boxes
simultaneously!

thanks,
Jonathan Horne

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Curious behavior today

2006-04-18 Thread Jonathan Horne
 Jonathan Horne [EMAIL PROTECTED] writes:

 ive been working on a pair of test boxes today, and 2 daemons in a row,
 have installed from ports without the .sh on the end of their startup
 script.

 ive done tons of installs on these test boxes, what am i all of a sudden
 doing wrong?

 Nothing is wrong.
 See man rc.

well, only reason im asking, as in all my previous test boxes, the start
up scripts seemed to initially appear in /usr/local/etc/rc.d/ already with
the .sh on them.  ive done dovecot and sasl2 a ton of times, its just
seems odd that they start this behavior all of a sudden.

jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


how to eliminate an unused interface?

2006-04-20 Thread Jonathan Horne
my box has a firewire port that is showing up as fwe0.  it is not being
used, and i would like to eliminate this device from the network
configuration.  (some applications try to bind to this as its default
interface, ex: iftop).

how do i go about elimination, or where is that network configuration for
that located?

thanks,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to eliminate an unused interface?

2006-04-20 Thread Jonathan Horne
 Robert Huff wrote:
 Jonathan Horne writes:


  my box has a firewire port that is showing up as fwe0.  it is not
  being used, and i would like to eliminate this device from the
  network configuration.  (some applications try to bind to this as
  its default interface, ex: iftop).

  how do i go about elimination, or where is that network
  configuration for that located?


  /etc/rc.conf?


  Robert Huff

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

 Hello,

 Edit your kernel and remove firewire support -- it's in the last lines
 of the kernel config.
 ___


so is there no other place to comment that devices configuration out? 
someone referred to the rc.conf file, but only my xl0 (with DHCP settings)
appears there.

removing firewire from the kernel would work, but then i would not beable
to plug in a firewire drive down the road.  i just want to eliminate the
firewire networking interface support.

thanks,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


custom kernel file question

2006-04-20 Thread Jonathan Horne
here is a silly one, which may deserve a chuckle from my peers :)

what am i doing that zaps my custom kernel config file?  i compiled a new
one the day i built this box, but now i return to /usr/src/sys/i386/conf/,
and my file isnt there anymore!

what did i do that removed it, so i can avoid (or safeguard against) this
action in the future?

thanks,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to eliminate an unused interface?

2006-04-20 Thread Jonathan Horne
On Thursday 20 April 2006 17:44, Chris Hill wrote:

 Could you not just do a

 # ifconfig fwe0 down

 ?

 Just a thought. Maybe you've already tried this, but nobody else has
 suggested it.

 HTH.

 --
 Chris Hill   [EMAIL PROTECTED]
 ** [ Busy Expunging | ]

actually i did try that, but iftop still bound to it on start.  oh well, a 
security advisory came out yesterday anyway, thus we're all due for a kernel 
compile as it is.  ill just comment out the fwe0 and call it even.

thanks all,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Trunking connections

2006-04-21 Thread Jonathan Horne
you should check out the fbsd/firewall pfSense.  it has exactly what your
talking about built in, and easy to configure.  i could go on and on all
day about how great that firewall is... but you should check it out
yourself.

www.pfsense.org

its built on 6.0.

jonathan

 List,

 In a branch office, I've got two ADSL lines setup (with two different
 ISPs) - one of them are supposed to work as backup line, but since it is
 a ADSL flat fee line, I was wondering if there's a way of setting up
 some sort of a trunk with FreeBSD, so I can make use of the extra
 bandwith.

 Obviously, the line should be unaffected if one of the lines go down.

 I've got a FreeBSD firewall/gateway with three interfaces..

 Any ideas ?

 /mich

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


konsole colors

2006-04-23 Thread Jonathan Horne
my shell is bash, and is set the 'ls' command to always show colors.  on my 
screen, i have a hard time seeing that dark blue color against the black 
backround.  is there a way i can lighten this default dark blue to a shade a 
little easier to differentiate?

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


learning to buildworld

2006-04-24 Thread Jonathan Horne
i have begun spending a good deal of time researching and practicing the
buildworld process on my dev boxes.  i want to make sure i have the entire
process down pat, before i attempt it on my production server.

the handbook states that i should:

make buildworld
make buildkernel
make installkernel

and then reboot to single usermode.  the installworld comes while in
single user mode, and my production server would see quite a bit of
downtime over this.  handbook says to, in sigle user mode:

mergemaster -p
make installworld
mergemaster
reboot

ive seen several articles on the net, and of course, no one agrees on the
exact steps to take to update your system.  my question is, is it safe to
'mergemaster' and 'make installworld' while still up and running?  or do i
just need to bite the downtime-bullet, and put it in single user?

my server is co-located, so its not exactly convenient to put it in single
user mode, so if there is any reason to believe the whole processes can be
completed safely without single-user mode, then i will probably try it.

thanks,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to verify speed of a 1Gb/s network?

2006-04-26 Thread Jonathan Horne
On Tuesday 25 April 2006 23:17, Chad Leigh -- Shire.Net LLC wrote:
 On Apr 25, 2006, at 9:16 PM, Rob wrote:
  Hi,
 
  How can I verify that a 1Gb/s network is indeed
  operating at its optimal speed? I tried this:
 
  [master]$ ping -s 65507 node
  65515 bytes from node: icmp_seq=0 ttl=64 time=1.97 ms
  65515 bytes from node: icmp_seq=1 ttl=64 time=1.95 ms
  65515 bytes from node: icmp_seq=2 ttl=64 time=1.94 ms
  65515 bytes from node: icmp_seq=3 ttl=64 time=1.97 ms
 
  (I tried many times, over a long period of time
  to get these typical values).
 
  From this I conclude that it takes about 1.95 ms
 
  for 65515 x 8 bits to go forth and back between
  master and node.
 
  Ideally, on a 1Gbit/s network, the time should be:
65515 x 8 x 2 / (10243) = 0.98 ms
  (x 2 for the roundtrip signal forth and back
  and 10243 is the 1G of the network)
 
  May I now conclude that the real-time is about
  two times the ideal-time? I wonder if this indicates
  a problem of the network?
  And is this a proper test of this Gbit/s network?
 
  Thanks,
  Rob.
 
  PS: I verified my calculation method for two
  computers here on a 100Mbit/s network, from which
  I get:
 time with ping: 12.4 ms
 ideal calculated time: 10 ms
  which is an acceptable difference

 I would suspect that a ping is not a valid test as it does not test
 throughput and the send and reception phases have a large influence
 on the out come.  Ie, the time for the send and reception to take
 place is long enough compared to the fast network that the results
 are skewed.  Try an ftp or other non-encrypted data transfer with a
 large enough file that the startup and wind-down won't affect and
 skew it.  Probably still not a definitive test

 btw, here is a test of my gbit network using your ping test

 15 packets transmitted, 15 packets received, 0% packet loss
 round-trip min/avg/max/stddev = 0.128/0.227/0.342/0.061 ms

a few years back, i had a gigabit fiber switch, and 2 intel gigabit fiber 
cards that i put in my 2 fastest computers (at the time, dual p3 1000 and 
dual p3 933).  they both had 10k rpm ultra160 SCSI drives.  the fastest i 
could get for continuous transfer (i made some gigantic zip files containing 
several .iso files) was about 250mbit.

jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


OT - drives in a RAID5 configuration

2006-04-26 Thread Jonathan Horne
i would like to ask my freebsd peers a hardware question:

my  FreeBSD 6.0 server has a 3ware 6800 8 channel IDE raid controller.  
configuration is 6 disks, 4 120GB disks (/opt) in RAID5, and 2 76GB disks in 
RAID1 (everything else).  one of the 76GB drives has failed.  i have a few 
options that i could persue, but one option i need some advice on.

i have another 120GB disk here at my apt, but its not the same model as the 
other 4 120s that are currently in the server.  they are otherwise identical, 
but the 4 have 8mb cache, and the one here has 2mb cache.  if i eliminate the 
76GB RAID1, and (break/rebuild) the RAID5 with the additional 2mb chace 120GB 
drive, what kind, if any, performance degrdation would i expect?  in a 
hardware RAID5 configuration, does the cache on the drive play a major role?

on a related note, is anyone using any 3ware controllers in FreeBSD, and is 
there a way to monitor status (healthly, failed) from within the OS?

thanks all,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


server rebuilds and disaster recovery

2006-04-28 Thread Jonathan Horne
this weekend, im going to have to rebuild my 6.0 server in order to
recover from a faulty disk (i have to eliminate a RAID1 array, and break
rebuild the RAID5 with one more disk).

all my daemons and whatnot, im pretty good at recovering.  sendmail,
apache, mysql, etc, shouldnt be a problem.

what i think i need help with is, what is the best way to recover my
previous system's user accounts?  this time around my server is going to
go from piece-by-piece updates, to a full buildworld before i build all
the daemons.

can someone recommend a good way to recover my users, or dissertate how
they go about doing it successfully?  also, any tips outside of users that
you think i might benefit from in a rebuild/redeploy, would also be
appreciated!

thanks a million,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: server rebuilds and disaster recovery

2006-04-28 Thread Jonathan Horne
On Friday 28 April 2006 13:41, Philip Hallstrom wrote:
  this weekend, im going to have to rebuild my 6.0 server in order to
  recover from a faulty disk (i have to eliminate a RAID1 array, and break
  rebuild the RAID5 with one more disk).
 
  all my daemons and whatnot, im pretty good at recovering.  sendmail,
  apache, mysql, etc, shouldnt be a problem.
 
  what i think i need help with is, what is the best way to recover my
  previous system's user accounts?  this time around my server is going to
  go from piece-by-piece updates, to a full buildworld before i build all
  the daemons.
 
  can someone recommend a good way to recover my users, or dissertate how
  they go about doing it successfully?  also, any tips outside of users
  that you think i might benefit from in a rebuild/redeploy, would also be
  appreciated!

 Maybe I'm not fully understanding, but why wouldn't you just backup
 /etc/passwd (and all it's related master and db files), etc/group, heck,
 /etc/ in general, then everyone's home directories, /var/cron/tabs and
 /var/mail (or wherever you store their inbox)


well, thats pretty much what im doing right now, i just 
tarball /usr/home, /etc, /usr/local/etc, /root, a few things from /var.  what 
i need to know is, what is the proper way to re-import these files once the 
new system is up?

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache 2.2 showing version

2006-04-29 Thread Jonathan Horne
take a look at the ServerTokens section of httpd.conf.

#
# ServerTokens
# This directive configures what you return as the Server HTTP response
# Header. The default is 'Full' which sends information about the OS-Type
# and compiled in modules.
# Set to one of:  Full | OS | Minor | Minimal | Major | Prod
# where Full conveys the most information, and Prod the least.
#
ServerTokens Full

cheers,
jonathan


On Saturday 29 April 2006 12:16, Aguiar Magalhaes wrote:
 Hi,

 When the Apache 2.2 shows the forbidden pages and
 others, It shows the version of apache, php, ssl, etc.

 It's dangerous..

 Please, how can I fix it ?

 Thanks,

 Aguiar



 ___
 Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular
 e anti-spam realmente eficaz. http://br.info.mail.yahoo.com/
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache 2.2 showing version

2006-04-29 Thread Jonathan Horne
no KDK, you were not incorrect.  in fact, my answer should have included your 
information, and your answer should have included mine (ie, we were both a 
little short).  the fact is, that both items should be considered when taming 
down that particular info that apache displays.

ServerTokens specifies the verbosity, while ServerSignature allows it on, or 
eliminates it altogether.

cheers,
jonathan

On Saturday 29 April 2006 12:59, Kevin Kinsey wrote:
 Jonathan Horne wrote:
  take a look at the ServerTokens section of httpd.conf.
 
  #
  # ServerTokens
  # This directive configures what you return as the Server HTTP response
  # Header. The default is 'Full' which sends information about the OS-Type
  # and compiled in modules.
  # Set to one of:  Full | OS | Minor | Minimal | Major | Prod
  # where Full conveys the most information, and Prod the least.
  #
  ServerTokens Full
 
  cheers,
  jonathan

 Oops --- foot in mouth disease here, methinks.  I was looking
 at a box with Apache 1.3.X ...

 Sorry, Aguiar  :o

 KDK
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: libexpat.so.5 not found

2006-04-30 Thread Jonathan Horne
something probably upgraded libexpat.so to .6.  my .6 is located 
at /usr/local/lib/libexpat.so.6.  what i do when i get into situations where 
one app demands an old version, is just symlink the old version to the new.

ln -s /usr/local/lib/libexpat.so.6 /usr/local/lib/libexpat.so.5

this will cause apache to see a libexpat.so.5, but it will be using the .6 
version.

hth,
jonathan

On Sunday 30 April 2006 04:31, dharam paul wrote:
 I am getting folloing error while I try to start
 apache :
 /libexec/ld-elf.so.1: Shared object libexpat.so.5
 not found, required by http
d
 /usr/local/sbin/apachectl start: httpd could not be
 started
 usage: /usr/local/sbin/apachectl
 (start|stop|restart|fullstatus|status|graceful|
   configtest|help)

 Help please,
 dp



 __
 Yahoo! India Matrimony: Find your partner now. Go to
 http://yahoo.shaadi.com ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Recovering Squirrelmail settings

2006-05-03 Thread Jonathan Horne
i did a full reinstall of my server yesterday, and about the only thing i
did not correctly recover, was my squirrelmail settings/address books. 
where is this information stored?  im unable to find what im looking for
on the squirrelmail.org website.

can someone point me in the right direction?  hopefully the data i need
will be amongst the things i was backing up.

thanks,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Recovering Squirrelmail settings

2006-05-03 Thread Jonathan Horne
:(  well, i searched again, and this time squirrelmail.org produced what i
hoped i wouldnt find.

in my rebuild, i did recover my /usr/local/www/squirrelmail folder, and
the main config is in there.  i checked my recovered config, and it said
that my user settings were stored in /var/spool/squirrelmail.  oops.  oh
well, ive updated my backup script, and i guess next time ill be able to
recover my addressbooks and other user settings.

:)
cheers,
jonathan

 On Wed, 3 May 2006 08:28:44 -0500 (CDT)
 Jonathan Horne [EMAIL PROTECTED] wrote:

 i did a full reinstall of my server yesterday, and about the only thing
 i
 did not correctly recover, was my squirrelmail settings/address books.
 where is this information stored?  im unable to find what im looking for
 on the squirrelmail.org website.

 can someone point me in the right direction?  hopefully the data i need
 will be amongst the things i was backing up.

 IIRC, Squirrelmail keeps its config in a PHP file with the rest of
 the PHP scripts that make up the program.  With the FreeBSD port,
 this ends up somewhere in /usr/local/www.

 Which breaks hier ... but that's for another day and another patch ...

 --
 Bill Moran
 Collaborative Fusion Inc.

 
 IMPORTANT: This message contains confidential information and is
 intended only for the individual named. If the reader of this
 message is not an intended recipient (or the individual
 responsible for the delivery of this message to an intended
 recipient), please be advised that any re-use, dissemination,
 distribution or copying of this message is prohibited. Please
 notify the sender immediately by e-mail if you have received
 this e-mail by mistake and delete this e-mail from your system.
 E-mail transmission cannot be guaranteed to be secure or
 error-free as information could be intercepted, corrupted, lost,
 destroyed, arrive late or incomplete, or contain viruses. The
 sender therefore does not accept liability for any errors or
 omissions in the contents of this message, which arise as a
 result of e-mail transmission.
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ULE Scheduler and overall performance on 6.x - Wow

2006-05-07 Thread Jonathan Horne
i remember when i first started using freebsd about 2 months ago, the first 
kernel i built, i did the ULE (at some articles recommendataion).  but, ive 
not done it since.  i guess i have been noticing a bit of lag on my system 
(amd 1800mhz 512rdram, u160 scsi raid0), but nothing unacceptable.

however, since i didnt have a problem with my first kernel that i did, and 
your positive response, i decided to go ahead and change out the specified 
scheduler in my kernconf, and let 'er rip.

is your system a desktop?  were your prevously running the same desktop 
configuration on the same box, with the 4BSD?  is the ULE scheduler suited 
for a server setup as well (my server is also SMP), or is this something that 
should be kept to a desktop?

thanks,
jonathan horne

On Sunday 07 May 2006 04:43, Duane Whitty wrote:
 Hi,

 I decided to give the ULE scheduler a try  a while ago (April 28).
 when I last built 6-STABLE

 Anyhow it seems great.  I'm running a 2.4GHz Celeron with
 512MB RAM and two 40GB, PATA disks.  Right now I'm running
 both a GNOME and a KDE session, I've got Thunderbird and
 Evolution open, Firefox is running and running well, and I'm
 updating the my local copy of the FreeBSD repository.  Oh yeah,
 I'm also running a DNS server, a Sendmail server, and SAMBA
 I can't believe how responsive everything is on this low-end machine
 I'm running.Wow!  (And this with debugging turned on but no WITNESS
 or INVARIANTS turned on)

 Well time to rebuild the sources  :)

 dwpc@ /home/duaneuname -a
 FreeBSD dwpc.dwlabs.ca 6.1-RC FreeBSD 6.1-RC #0: Fri Apr 28 18:41:15 ADT
 2006 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/DWPC-KERNEL  i386

 Best Regards,

 Duane Whitty
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


memory usage

2006-05-07 Thread Jonathan Horne
i have a server that has 2GB ram, recently upgraded from 1GB ram.  it runs 
apache2.0 with php5, sendmail with spamass-milter, dovecot, mysql5.0, cacti, 
and a couple other small things (like snmp, my bx irc shell, etc).

when ever i look at the memory usage (via phpsysinfo, or cacti graphs), its 
nearly always showing less than 100mb of ram available.  top shows several 
perls (probably spamassassin), 8 or so httpds (typical), but that would 
probably only account for (a liberal guess) 500-600 mb of ram.

is there a good way to find out where this bottomless ram funnel leads to?  
or, should this behavior just be considered typical?

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: memory usage

2006-05-07 Thread Jonathan Horne
On Sunday 07 May 2006 12:09, Jonathan Horne wrote:
 i have a server that has 2GB ram, recently upgraded from 1GB ram.  it runs
 apache2.0 with php5, sendmail with spamass-milter, dovecot, mysql5.0,
 cacti, and a couple other small things (like snmp, my bx irc shell, etc).

 when ever i look at the memory usage (via phpsysinfo, or cacti graphs), its
 nearly always showing less than 100mb of ram available.  top shows several
 perls (probably spamassassin), 8 or so httpds (typical), but that would
 probably only account for (a liberal guess) 500-600 mb of ram.

 is there a good way to find out where this bottomless ram funnel leads to?
 or, should this behavior just be considered typical?

 thanks,
 jonathan

update...

i just upgraded to the new phpsysinfo rc2, and it shows more detailed 
information about what the memory usage is doing.  it shows that 1.57GB is 
being used by buffers.  what is the significance of 1.57GB of memory being 
used by 'buffers'?

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: memory usage

2006-05-07 Thread Jonathan Horne
On Sunday 07 May 2006 19:43, Michal Mertl wrote:
 Jonathan Horne wrote:
  On Sunday 07 May 2006 12:09, Jonathan Horne wrote:
   i have a server that has 2GB ram, recently upgraded from 1GB ram.  it
   runs apache2.0 with php5, sendmail with spamass-milter, dovecot,
   mysql5.0, cacti, and a couple other small things (like snmp, my bx irc
   shell, etc).
  
   when ever i look at the memory usage (via phpsysinfo, or cacti graphs),
   its nearly always showing less than 100mb of ram available.  top shows
   several perls (probably spamassassin), 8 or so httpds (typical), but
   that would probably only account for (a liberal guess) 500-600 mb of
   ram.
  
   is there a good way to find out where this bottomless ram funnel leads
   to? or, should this behavior just be considered typical?
  
   thanks,
   jonathan
 
  update...
 
  i just upgraded to the new phpsysinfo rc2, and it shows more detailed
  information about what the memory usage is doing.  it shows that 1.57GB
  is being used by buffers.  what is the significance of 1.57GB of memory
  being used by 'buffers'?

 I would expect a question like this is somewhere in the FAQ.

 It is typical that you only see a couple of hundred kilobytes of free
 memory on a (at least a little used) FreeBSD system. The system
 allocates  'physical' memory as needed (as long as there is some free)
 and only when there is no free memory, it starts to reuse some of the
 'almost' free memory. 'Almost' free memory is mainly disk cache (your
 buffers).

 This is nothing to worry about. You can see there is a memory shortage
 when there is some swapping during normal workload (in top there appears
 kb in/out on the swap line). It is neither anything to worry about
 when you have some swap space used - FreeBSD is rather aggresively
 copying parts of memory to swap when it feels to. As long as it doesn't
 need to use the data in the swap often it's an optimization - even disk
 cache is better usage of your memory then inactive parts of your
 programs' memory.

 Michal

well, i guess my system's top confirms what you say:

Swap: 4071M Total, 4071M Free

and, i wasnt experiencing any lack in performance, i was just curious.  but i 
admit that i must be forgiven for almost doubting!

thanks again,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD 6.1-STABLE !!

2006-05-08 Thread Jonathan Horne
on a dev box, did a cvsup and buildworld yesterday... and now my kernel
says 6.1 stable!

fbsd60-2# uname -a
FreeBSD fbsd60-2.dev.dfwlp.com 6.1-STABLE FreeBSD 6.1-STABLE #0: Sun May 
7 18:33:48 CDT 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/FBSD60-2  i386

*shrug* i look on freebsd.org, but i didnt see an announcement about it
yet.  how close to release does this put us?

cheers,
jonathan




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: New FreeBSD Logo

2006-05-09 Thread Jonathan Horne
 Greetings:
 I just looked at the new FreeBSD logo and it's an interesting
 abstraction of the daemon motif of the old logo.
 Among other things, like running two installations of FreeBSD v6, one
 as a production server to host my web
 site and the other as a desktop and development server, I do fine art
 and graphics. The logo has an etherial
 feel to it (forgive the pun). But if someone new to FreeBSD sees the
 logo and hasn't seen the old logo, he
 or she might wonder what the cone shaped designs are sticking out of
 the glass like ball and what they are
 supposed to represent. So aesthetically it's engaging but too much of
 an abstraction of the theme.
 As far as psychology goes, Apple uses the apple with a bite out of it
 which has a dual significance. One that
 invokes the idea of giving an apple to the teacher and the other is the
 Biblical symbol of temptation and transgression.
 I think that that is why Apple doesn't have a bigger market share. The
 FreeBSD logo pushes a similar button.
 The icon of the adversary. I am not offended by the new or the old
 logo, accept that there seems to be too much
 of a trend toward cartoon character art. This, I presume is to appeal
 to the child in us all. But seriously when do we
 actually get to be grownups.
 I like FreeBSD. But I wouldn't but a logo sticker on my windshield. I
 have used Macs from the beginning and don't
 have a Mac logo sticker on anything, either. I have and use Linux
 systems and don't particularly care for the cute
 little penguin either. I have seen a more mature take on the penguin
 emblem that I was impressed with.
 It was used by a L.U.G. based in Maryland or thereabouts. I would like
 to see a mature logo for FreeBSD.
 Thanks all for being here;
 Jk


i dont mind saying that i think i must be about the only one who likes the
new art.  i think its very modern looking, crisp and abreviated,
un-childish, but at the same time not too serious or ominous.

ive actually thought about printing out some examples of both versions,
carrying it down to our artists in our print studio, and taste testing
them with professional artists who couldnt give one care about anything
technical.  *shrug* would be an interesting experiment, to say the least.

jonathan


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: vote for keeping beastie as official logo

2006-05-10 Thread Jonathan Horne

 If you are as dissatisfied with the new official logo
 as I am, then forward this email to the FreeBSD federation
 board of directors at [EMAIL PROTECTED]

 Dear FreeBSD federation board of directors:

 I am upset with the manner in which it was decided
 that a new logo was needed.

 Only posting a message that this was happening on the
 announcement list was an big mistake as it left out
 the users who promote FreeBSD at the grass roots
 level from knowing about it. An change of this
 magnitude should have been broadcast to all lists
 to get the widest based input possible.

 I sincerely hope this deception was not on
 purpose as it looks that way.

 Furthermore the new logo design is not satisfactory
 and does not represent the wants of the user community
 as shown by the multiple posts on the questions
 list of late.


 My vote is for keeping the beastie image as the
 official FreeBSD logo and removing the sex toy
 logo from publication.




you should also note in this letter, that it only applies to people who
dont read a minimum of slashdot.

*wink*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Setting Default NIC

2006-05-10 Thread Jonathan Horne
 I Just upgraded my freebsd machine to a new board, this one has an
 onboard NIC where as the old one just had a PCI 10/100 nic. I put the
 old NIC on the new board as well so I can have 2 running out of the
 machine, but I don't know how to set it so that the onboard NIC (vr0) is
 the default and the PIC nic (r10) is not, because when I unplug the PCI
 one all net connectivity shuts down. Here's my ifconfig and my rc.conf
 as always help is much appreciated.

 *IFCONFIG

 rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
 options=8VLAN_MTU
 inet6 fe80::210:b5ff:fe5f:c324%rl0 prefixlen 64 scopeid 0x1
 inet 192.168.42.10 netmask 0xff00 broadcast 192.168.42.255
 ether 00:10:b5:5f:c3:24
 media: Ethernet autoselect (100baseTX full-duplex)
 status: active
 vr0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
 inet6 fe80::250:70ff:fee8:7fe%vr0 prefixlen 64 scopeid 0x2
 inet 192.168.42.9 netmask 0xff00 broadcast 192.168.42.255
 ether 00:50:70:e8:07:fe
 media: Ethernet autoselect (100baseTX full-duplex)
 status: active
 plip0: flags=108810POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT mtu 1500
 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
 inet6 ::1 prefixlen 128
 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
 inet 127.0.0.1 netmask 0xff00

 ***RC.CONF

 # -- sysinstall generated deltas -- # Sun Jan  1 19:02:32 2006
 # Created: Sun Jan  1 19:02:32 2006
 # Enable network daemons for user convenience.
 # Please make all changes to this file, not to /etc/defaults/rc.conf.
 # This file now contains just the overrides from /etc/defaults/rc.conf.
 hostname=taurus.cruz
 #ifconfig_rl0=DHCP
 inetd_enable=YES
 moused_enable=YES
 moused_flags=-3
 moused_port=/dev/psm0
 moused_type=auto
 nfs_server_enable=YES
 rpcbind_enable=YES
 saver=daemon
 sshd_enable=YES
 usbd_enable=YES
 apache2_enable=YES
 apache_enable=YES
 mysqld_enable=YES
 mysql_enable=YES
 mountd_flags = -r

 # -- sysinstall generated deltas -- # Sun Jan 15 11:40:28 2006
 # The Following specifies that the server is using a static IP address
 ifconfig_rl0=inet 192.168.42.10  netmask 255.255.255.0
 ifconfig_vr0=inet 192.168.42.9   netmask 255.255.255.0

 defaultrouter=192.168.42.1
 hostname=taurus.cruz
 # -- sysinstall generated deltas -- # Sun Apr  9 01:33:24 2006
 nfs_client_enable=YES
 # -- sysinstall generated deltas -- # Sun Apr 23 21:29:11 2006
 font8x8=swiss-8x8
 font8x14=NO
 font8x16=swiss-8x16



are those 2 nics going to be bonded into 1 interface?  haveing 2 nics, on
the same network isnt really going to earn you anything unless they are
bonded or loadbalanced, either thru network configuration or switching
hardware.

if youre not going to go thru one of those techniques, then i would remove
one nics.

unless, long shot (tm), as in this has no technical base, just a guess...
have you tried reversing the order in which they appear in the rc.conf
file?  i dont know if that matters, or if it reads the order of their
IRQs, but it might be worth a shot if you really want both of those nics.

jonathanh


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: daemon to listen on localhost only?

2006-05-10 Thread Jonathan Horne
 Is there a way to tell a daemon to listen only to the localhost without
 using a firewall?


any chance you could tell us what deamon youre trying to configure? (that
would help).

jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can I Make my own CD ROM bootable from this ftp server:

2006-07-29 Thread Jonathan Horne
On Saturday 29 July 2006 16:04, Jerry McAllister wrote:


 I don't know Nero so I don't know what choices it offers.
 But, generally you just want a plain burn plus fixate.


in nero, there is one of the upper drop down menus thats has burn image.  
that is the only thing one needs to do to successfully burn a .iso file into 
a bootable image.

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


anyone with a p4 HT machine ever see anything from cpu1?

2006-07-30 Thread Jonathan Horne
i have smp support compiled into my kernel, an still, i never see anything on 
the HT'd cpu.  i realize that most ppl believe that the HT portion of the 
technology was just a bunch of smoke blown up our butts by intel, but windows 
sure loves to bounce that extra cpu graph around a lot.  below is just a snip 
of my top window, but as far down as i can stretch my 1280x1024 screen, its 
all cpu 0 processes, even while compiling.

last pid: 16214;  load averages:  0.75,  0.35,  0.17up 1+00:37:34  
09:43:04
114 processes: 2 running, 112 sleeping
CPU states: 34.2% user,  0.0% nice, 15.4% system,  0.4% interrupt, 50.0% idle
Mem: 202M Active, 456M Inact, 232M Wired, 860K Cache, 110M Buf, 97M Free
Swap: 983M Total, 983M Free

  PID USERNAMETHR PRI NICE   SIZERES STATE  C   TIME   WCPU COMMAND
 8805 root  1   80 35880K 35552K wait   0   0:11 15.64% ruby18
15952 root  1   80  1224K  1112K wait   0   0:00  8.00% make
15925 root  1   80  1224K  1112K wait   0   0:00  3.59% make
  656 jhorne1  960   303M 53372K select 0   8:25  2.69% Xorg
  742 jhorne1  960 12632K  8252K select 0  16:42  1.03% gkrellm
 1337 jhorne1  960 29092K 21276K select 0   0:02  0.78% kdeinit
  732 jhorne1  960 30700K 22904K select 0   1:21  0.10% kdeinit
  293 root  1  960  1260K   684K select 0   0:24  0.05% moused
  752 jhorne1  960 25780K 17952K select 0   7:07  0.00% kdeinit
  738 jhorne4  20  -76 14012K  8132K kserel 0   1:34  0.00% artsd
  758 jhorne1  960 31820K 21544K select 0   1:24  0.00% kdeinit
  720 jhorne1  960 30724K 22796K select 0   1:13  0.00% kdeinit
  695 jhorne1  960  3532K  2012K select 0   0:41  0.00% gam_server
  728 jhorne1  960 25596K 17556K select 0   0:12  0.00% kdeinit

dmesg shows that freebsd sees the other cpu...

[EMAIL PROTECTED] ~]# dmesg | grep cpu
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
cpu0: ACPI CPU on acpi0
acpi_throttle0: ACPI CPU Throttling on cpu0
cpu1: ACPI CPU on acpi0
acpi_throttle1: ACPI CPU Throttling on cpu1
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
cpu0: ACPI CPU on acpi0
acpi_throttle0: ACPI CPU Throttling on cpu0
cpu1: ACPI CPU on acpi0
acpi_throttle1: ACPI CPU Throttling on cpu1

FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
SMP: AP CPU #1 Launched!

so is the SMP portion of the technology as worthless as 'they' say?

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: anyone with a p4 HT machine ever see anything from cpu1?

2006-07-30 Thread Jonathan Horne
On Sunday 30 July 2006 13:36, Tamouh H. wrote:
 do a check to make sure HT is enabled:

 sysctl -a machdep.hyperthreading_allowed

oops... we have definatly found my problem.

[EMAIL PROTECTED] ~]# sysctl -a machdep.hyperthreading_allowed
machdep.hyperthreading_allowed: 0

what do i need to do to get it changed?

thanks,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SMTP-AUTH woes.

2006-07-31 Thread Jonathan Horne
On Sunday 30 July 2006 23:21, Greg Groth wrote:
 FreeBSD 6.1
 saslauthd version 2.1.22
 sendmail version 8.13.6

 My problem is that sendmail is not authenticating plain text passwords.

  From my /etc/mail/hostname.mc file:

 define(`confAUTH_MECHANISMS',`PLAIN LOGIN')dnl
 TRUST_AUTH_MECH(`PLAIN LOGIN')dnl

 However when I telnet to the server I find the following:

 250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5

  From my /etc/make.conf:

 SENDMAIL_CFLAGS=-I/usr/local/include -DSASL=2
 SENDMAIL_LDFLAGS=-L/usr/local/lib
 SENDMAIL_LDADD=-lsasl2

  From my /usr/local/lib/sasl2/Sendmail.conf file:

 pwcheck_method: saslauthd

  From my /var/log/maillog file:

 Jul 30 23:08:01 mail sendmail[4061]: NOQUEUE: connect from [EMAIL PROTECTED]
 Jul 30 23:08:01 mail sendmail[4061]: STARTTLS: ServerCertFile missing
 Jul 30 23:08:01 mail sendmail[4061]: AUTH: available mech=NTLM LOGIN
 ANONYMOUS PLAIN GSSAPI OTP DIGEST-MD5 CRAM-MD5, allowed mech=EXTERNAL
 GSSAPI KERBEROS_V4 DIGEST-MD5 CRAM-MD5
 Jul 30 23:08:01 mail sendmail[4061]: k6V481s5004061: Milter: no active
 filter

 Everything seems to be in place.  SASL is running, and is working fine
 with the included testing tools, but sendmail does not seem to be
 accepting plain text logins.  This is the same setup I have up and
 running on a 6.0 box, but it doesn't seem to be working now.  Any ideas
 on what I might have screwed up?

 TIA
 Greg Groth

did you buildworld before you recompiled sendmail?  ive found that if i 
buildworld, that before i recompile sendmail (to implement sasl2) that i have 
to make clean on my /usr/src, or else make will try to use what was already 
recompiled for sendmail during the buildworld.

hth,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


need help troubleshooting man

2006-08-01 Thread Jonathan Horne
i remember a thread from a few weeks back, that i followed closely, but
was never able to resolve my issue as the original poster did.  i have a
6.1-STABLE system that the bulk of my mans to not work, but some that are
recently installed from ports are working.  can someone guide me thru
trouble shooting this issue?

i have several other boxes that are RELENG, and they all ahve 100% working
man pages, but this system (which is also my only system with x/kde) is
the only one not working.

[EMAIL PROTECTED] ~]$ uname -a
FreeBSD athena.dfwlp.com 6.1-STABLE FreeBSD 6.1-STABLE #0: Fri Jun 16
20:48:52 CDT 2006

[EMAIL PROTECTED]:/usr/obj/usr/src/sys/ATHENA  i386
[EMAIL PROTECTED] ~]$ man man
No manual entry for man
[EMAIL PROTECTED] ~]$ man iftop
IFTOP(8) 
IFTOP(8)



NAME
   iftop - display bandwidth usage on an interface by host

tia,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SATA Cables Suck!

2006-08-01 Thread Jonathan Horne
On Tuesday 01 August 2006 19:23, Nikolas Britton wrote:
 The number one problem I've had with SATA RAIDs has been the cables! 4
 times I've lost arrays because the cables came loose or some other
 stupid problem with the cables.

 I need a vendor that has high quality latching SATA-II cables. Also...
 what can we do with the old cables to fix them... super glue them
 on?... Here's a question... Are all SATA cables rated for SATA-II?
 I've never seen a definitive answer to this question and newegg.com
 does not sells SATA-II cables... Also does the spec call for
 shielded cables?

 frustrated, need a place to unload thanks.

when i built my computer 2 years ago, i went for sata drives for the first 
time.  my intial impression was wow... is that actually going to stay 
connected?

jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


a good web statistics port?

2006-08-01 Thread Jonathan Horne
something other than webalizer?  i would really prefer awstats, but its been 
in command injection limbo forever.  can someone recommand something better 
than webalizer, that is preferrably searchable and sortable, etc etc?

thanks in advance,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: need help troubleshooting man

2006-08-02 Thread Jonathan Horne
On Wednesday 02 August 2006 05:14, Matti J. Karki wrote:
 On 8/1/06, Jonathan Horne [EMAIL PROTECTED] wrote:
  i remember a thread from a few weeks back, that i followed closely, but
  was never able to resolve my issue as the original poster did.  i have a
  6.1-STABLE system that the bulk of my mans to not work, but some that are
  recently installed from ports are working.  can someone guide me thru
  trouble shooting this issue?

 I managed to get this kind of situation by installing first the
 minimal set (or distribution) and then installing everything else
 from the ports. The minimal installation set does not have man pages.
 To get small - but fully functional - installation, I had to install
 the User set, which contains the required binaries and all relevant
 documentation files. Maybe re-running the sysinstall and selecting
 appropriate distribution set could help?


 -Matti

well, i thought about that for a moment, and i wasnt able to come to any real 
conclusion.

1) i have only one box that is running STABLE, and its my x/kde workstation.  
this is also my only computer with half-broken man pages.
2) i have several production and development servers (no desktops), and they 
are all RELENG.  all my releng boxes have working man pages.

what do i need to check between my working releng and my stable workstation to 
find the difference in why the stable has broken mans?

tia,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: need help troubleshooting man

2006-08-02 Thread Jonathan Horne
On Wednesday 02 August 2006 18:03, Jonathan Horne wrote:
 1) i have only one box that is running STABLE, and its my x/kde
 workstation.   this is also my only computer with half-broken man pages.
 2) i have several production and development servers (no desktops), and
 they are all RELENG.  all my releng boxes have working man pages.

i neglected to mention that *all* of my systems were installed as minimal, 
reguardless if they ended up as releng servers or stable workstation.

tia,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


(no subject)

2006-08-03 Thread Jonathan Horne
im having a problem with cvsup-ing my existing sources.  if i update an
existing set, i get this:

 -=(oo)=(cvsup18.us.freebsd.org)=-

Parsing supfile /root/stable-supfile
Connecting to cvsup15.us.freebsd.org
Connected to cvsup15.us.freebsd.org
Server software version: SNAP_16_1h
Negotiating file attribute support
Exchanging collection information
Establishing multiplexed-mode data connection
Running
Updating collection src-all/cvs
Server warning: RCS file error in
/usr/local/etc/cvsup/prefixes/FreeBSD.cvs/src/sys/modules/i2c/controllers/nfsmb/Makefile,v:
1: head expected
Shutting down connection to server
Finished successfully
[EMAIL PROTECTED] ~]#

i use the stable-supfile, but with one changed line, to get me to RELENG:

*default release=cvs tag=RELENG_6_1

command i use to cvsup is as such:

cvsup -L 2 -h `(fastest_cvsup -q -c us )` /root/stable-supfile

and my system is:

FreeBSD zeus.dfwlp.com 6.1-RELEASE-p2 FreeBSD 6.1-RELEASE-p2 #0: Thu Jun
29 00:56:08 CDT 2006 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/ZEUS
 i386

last night i wanted to recompile the kernel, so that the next time i
reboot ill have p3.  when i cvsup'd my existing set, i got the above
error.  so i did a rm -rf /usr/src/*, cvsup'd again, and no issues.  put a
backup of my kernel conf file in there, and away i went.  i kinda thought
nothing of it until this morning, when just for kicks, i did another cvsup
on the same box, and got the updating error again.

none of my other boxes get an error like this, they all peform a normal
cvs updating operation.

any ideas?

tia,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


trouble with cvsup

2006-08-03 Thread Jonathan Horne
(resent, as i was in too much of a hurry this morning, and forgot to add a
subject line)

im having a problem with cvsup-ing my existing sources.  if i update an
existing set, i get this:

 -=(oo)=(cvsup18.us.freebsd.org)=-

Parsing supfile /root/stable-supfile
Connecting to cvsup15.us.freebsd.org
Connected to cvsup15.us.freebsd.org
Server software version: SNAP_16_1h
Negotiating file attribute support
Exchanging collection information
Establishing multiplexed-mode data connection
Running
Updating collection src-all/cvs
Server warning: RCS file error in
/usr/local/etc/cvsup/prefixes/FreeBSD.cvs/src/sys/modules/i2c/controllers/nfsmb/Makefile,v:
1: head expected
Shutting down connection to server
Finished successfully
[EMAIL PROTECTED] ~]#

i use the stable-supfile, but with one changed line, to get me to RELENG:

*default release=cvs tag=RELENG_6_1

command i use to cvsup is as such:

cvsup -L 2 -h `(fastest_cvsup -q -c us )` /root/stable-supfile

and my system is:

FreeBSD zeus.dfwlp.com 6.1-RELEASE-p2 FreeBSD 6.1-RELEASE-p2 #0: Thu Jun
29 00:56:08 CDT 2006 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/ZEUS
 i386

last night i wanted to recompile the kernel, so that the next time i
reboot ill have p3.  when i cvsup'd my existing set, i got the above
error.  so i did a rm -rf /usr/src/*, cvsup'd again, and no issues.  put a
backup of my kernel conf file in there, and away i went.  i kinda thought
nothing of it until this morning, when just for kicks, i did another cvsup
on the same box, and got the updating error again.

none of my other boxes get an error like this, they all peform a normal
cvs updating operation.

any ideas?

tia,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


a build server for my network

2006-08-05 Thread Jonathan Horne
i was reading this today, and working on creating a build server:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/small-lan.html

the section for ports mentions that the make.conf files need to have DISTDIR 
and some other things specified in order for it all to work properly.  i 
looked at the example make.conf, but i dont see examples for the settings 
that are listed in the handbook.  

can someone point me in the right direction here, so i can sucessfully share 
my ports folder with others via nfs?

thanks
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


so for kicks, i just ...

2006-08-06 Thread Jonathan Horne
i just decided to take a box, and installworld, without going to single user 
mode.  from what i can see, the update was completely successful.  of course, 
other then myself (su'd to root), there were no other users logged in).

i wonder how many people are brave enough, and do actually installworld 
without changing to single user mode?  i wonder what is truly at risk from 
not going to single mode?

curious,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


kde port

2006-08-09 Thread Jonathan Horne
the freebsd-kde list doesnt seem to exist anymore, so i thought i would throw 
this out here.

anyone have any guesses as to how long it will be before kde 3.5.4 is merged 
into the ports tree?

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD as a VPN Server/Router

2006-08-09 Thread Jonathan Horne
there is a freebsd based project called pfsense (.org) that would suit your 
needs perfectly.

ive been running it for quite a while now, and i think its the best thing 
since sliced bread.  i have a IPSec WAN between 2 sites (my apt, and my 
servers that are at a colo).  tons of features that are found on other 
expensive firewalls, are included!

cheers,
jonathan

On Wednesday 09 August 2006 12:33, Odhiambo Washington wrote:
 I am going to venture into the field of the security gurus so help me
 God! It looks like I am gonna get stuck in wet cement, I can feel it;)

 I have two sites, siteA and siteB. Each site has a horde of Windows PCs
 behind a FreeBSD box, which acts as a firewall/router/proxy/everything:)
 Each site has got a dedicated connection to an ISP. At the moment it's
 the same ISP, if that matters, but my thinking is that it can be any
 ISP.

 I have a challenge of establishing a WAN between the two sites. They
 are geographically apart. In this scenario, siteA has several
 applications running on several windows servers which are behind the
 FreeBSD box.
 The challenge is to allow siteB to access these applications securely
 via the WAN setup. VPN comes straight to mind, but this is a new area
 to me.

 The boxes are both FreeBSD 5.5-STABLE.

 I am looking for pointers/clues on how to do the setup in a clean way,
 while adhering to K.I.S.S as closely as possible.

 If extra hardware (other than the FreeBSD boxes) is required so that
 the WAN is efficient, I'd be happy to know.

 I am very optimistic on pulling this one off, since I belong to a
 community full of security experts (FreeBSD users).

 PS: I am already googling, perhaps with the wrong keywords:-)

 -Wash

 http://www.netmeister.org/news/learn2quote.html

 DISCLAIMER: See http://www.wananchi.com/bms/terms.php

 --
 +==+

 |\  _,,,---,,_ | Odhiambo Washington[EMAIL PROTECTED]

 Zzz /,`.-'`'-.  ;-;;,_ | Wananchi Online Ltd.   www.wananchi.com

|,4-  ) )-,_. ,\ (  `'-'| Tel: +254 20 313985-9  +254 20 313922

   '---''(_/--'  `-'\_) | GSM: +254 722 743223   +254 733 744121
 +==+

 Who messed with my anti-paranoia shot?
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Intel 945G driver

2006-08-10 Thread Jonathan Horne
 I have a HP 7600 desktop with FBSD 6. While setting up the system i did
 not
 find an Intel 945G in the listed options to select a video card. Where can
 i
 find this?

 Thanks,
 Viswas
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]


i have an hp 7100, and i just chose the 810i in my xorg.conf.  works fine.

[EMAIL PROTECTED] ~]$ pciconf -lv
snip
[EMAIL PROTECTED]:2:0:  class=0x03 card=0x3006103c chip=0x25828086 rev=0x04
hdr=0x00
vendor   = 'Intel Corporation'
device   = '82915G/GV/GL, 82910GL Integrated Graphics Device'
class= display
subclass = VGA
snip


and from my xorg.conf:

Section Device
Identifier  Intel 810
Driver  i810
# VideoRam8192
# Insert Clocks lines here if appropriate
EndSection

if your pciconf output is similar to mine, then those settings should
treat you pretty well.

hth,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BSDstats Project v2.0 ...

2006-08-12 Thread Jonathan Horne
On Friday 11 August 2006 22:29, Nikolas Britton wrote:
 On 8/11/06, Matthew Seaman [EMAIL PROTECTED] wrote:
  Marc G. Fournier wrote:
   On Fri, 11 Aug 2006, Nikolas Britton wrote:
   Ok... With my new script it took only 158 minutes to compute ALL
   TCP/IP address hashes. I'll repeat that... I have an md5 hash for
   every IP address in the world! All I need to do is grep your hash and
   it will tell me your IP address. yippee! :-)
  
   Can someone please explain to me what exactly you are trying to secure
   against in this case?
 
  He's trying to prevent any possibility of information disclosure about
  his servers.  If I wanted to hack into his site, knowing what hosts he
  had running (ie. a bunch of live IP numbers) and what OS etc. each used
  would mean I'm already halfway to my goal.  Now, while the design of
  bsdstats does not disclose that sort of stuff readily, any security
  conscious admin is going to worry about that data being collected and
  held outside of his administrative control.  Having a completely
  anonymous and untraceable token to identify each of the hosts sending
  in information should make connecting the information back to the
  original sender practically impossible.

 YES! what he said... I don't want ANYTHING to trace back to me or my
 systems.

  Although, playing devil's advocate here, anyone that could steal the
  Apache log files from the bsdstats server would be able to work out
  that sort of data fairly readily.  I guess the truly paranoid should
  only submit their data via some sort of anonymizing proxy.

 That's simple, don't keep the log files...

 * Can we trust Marc to delete them?
 * I thought this was going to be an official FreeBSD project hosted on
  freebsd.org?
 * Maybe we should get the OpenBSD people involved?

 Just thinking out loud :-/

honestly, should said security concious admins, really be participating 'using 
his bosses servers' in this project?  probably not.  even if all the security 
consious admins out there decline to have all their datacenters participate 
in bsdstats, im sure just the ones who decide that the risk of sending the 
same info your browser does (plus a bit more if you choose and deliberatly 
enable) is appropriate for them, is still going to give one hell of a great 
demographic report to bsdstats.

2 cents,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


working with dbsd-tools

2006-08-13 Thread Jonathan Horne
i almost have desktopbsd tools working perfectly... except that i cannot mount 
usb drives without opening a terminal as root, and chmoding /dev/da* to 660.

how can i cause new devices (such as da*) to be created with proper 
permissions to let me mount it without becomming root to do so?  ive already 
set up my devd.conf, and cdrom is working (but that one doesnt 
disappear/reappear like usb devices do).

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


boot messages logging

2006-08-13 Thread Jonathan Horne
is there a place where all the booting messages are logged?  right before my 
daemons start, i see some elf-lib.something cannot find libaudio.so.2 (which 
does exist on my system), but it scrolls so fast that i cannot read it all.  
are these messages logged?

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BSDstats v3.0 - The Security Rewrite

2006-08-14 Thread Jonathan Horne
On Monday 14 August 2006 08:19, Marc G. Fournier wrote:
 Over the past few days, I've been working with Paul Schmehl and Matthew
 Seaman to come up with a more security sensitive version of BSDstats ...
 one that reduces the amount of sensitive information stored in the
 database down to ... zero.  No IPs, no hostnames ...

 This new version also reduces the number of 'network fetches' down to 4
 for the first run, and 3 for subsequent runs, so it runs a bit faster, and
 talks across the network less.

 And, finally, this one has its own domain for check in server ...

 None of the pre-v3.x clients can talk to the v3.x server, since the DB
 format has totally changed, so everyone needs to grab the latest version
 and run it so that we can re-sync the database properly ...

 From now forward, the stats will be viewable from:

   http://www.bsdstats.org

 
 Marc G. Fournier   Hub.Org Networking Services (http://www.hub.org)
 Email . [EMAIL PROTECTED]  MSN . [EMAIL PROTECTED]
 Yahoo . yscrappy   Skype: hub.orgICQ . 7615664

mark,

i noticed the percentages columns, they definatly make the information all 
that more fascinating.  would it be possible to segregate the far right 
column by release, and show what percentages of the 6.1s are stable, p3, p2, 
release?  etc etc?  that column as it sits is still good information (so im 
not suggesting dumping it), but i would like to see another section to break 
out the versions, by percentages.

my 2 cents, :)
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How do I access external USB fat32 160 GB drive?

2006-08-18 Thread Jonathan Horne
 Hello

   When I try to mount the drive with mount_msdos it tells me the filsystem
 is to big. The drive consists av a single fat32 partition.

   Windows can access it so it must be possible in FreeBSD too. I read
 about recompiling the kernel with option MSDOSFS_LARGE. But that option
 seems to be gone i GENERIC now.

   Thanks



you have to change the MSDOSFS to MSDOSFS_LARGE. i did it on one of my
systems, and it works fine (however, ive heard hearsay that its not
enabled by default due to stability issues when it has too may files in
the filesystem).

hth,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to change the root user's name on FreeBSD 6.1 running postfix

2006-08-19 Thread Jonathan Horne
On Saturday 19 August 2006 22:15, Paul Hamilton wrote:
 Hi,

 I am running postfix on FreeBSD 4.11 and 6.1 servers.

 In FreeBSD 4.11, you can run 'chsh root'  and edit the name to what you
 want.  However, on my FreeBSD 6.1 servers, I still receive email addressed
 from 'root unix'.   I would like to be able to differentiate the root mail
 according to server the mail came from  :-)

 Any idea's?



 Regards,

 Paul Hamilton
 Busselton, 6280
 Australia


i do exactly that, by editing /etc/master.passwd and /etc/passwd.  substitute 
in the name you would like to appear, and then 
run 'pwd_mkdb /etc/master.passwd.

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: I915 3d acceleration - picture shifts

2006-08-25 Thread Jonathan Horne
On Friday 25 August 2006 14:14, vvp wrote:
 Hello!

 I use FreeBSD 6.1 on HP nx6110 laptop. After fresh installation the drm
 module for i915 didn't work.
 I've found a patch for i915 to make it work. After that 3d acceleration is
 works, but I've got another issue:when running KDE screensavers, picture is
 shifted up. That is probably not a drm driver issue as I saw similar thing
 on a SuSE linux box with i810 graphics chipset.
 Have anyone ever seen a solution?


what version of kde are you running?  ive been fighting my screen savers for a 
while now, as mine dont even run.  (and i too have a i915)

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: You've got an e-card at jwave.net!

2006-08-27 Thread Jonathan Horne
On Saturday 26 August 2006 23:41, mail.jwave.net wrote:
You've got an e-card at jwave.net

A friend has sent you this e-card.
Sexy Surprise from jwave.net!
There are 2 ways to view the e-card.
1. Simply click the link below.
[1]http://mail.jwave.net/index.html
2. Copy and paste the link above into your browser's address window.
Hope you enjoy our e-cards! Spread the love and send one of our
e-cards!
Brought to you by jwave.net - a better way to greet!

Copyright © 1999-2006 jwave.net All rights reserved.

 References

1. http://mail.jwave.net/

haha, by far probably the most humorous form of spam ive seen against this 
list so far!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


got a new monitor, trying to reconfig xorg

2006-08-27 Thread Jonathan Horne
i just brought home new samsung 22 widescreen LCD.  so far, i cannot get xorg 
to take anything other than standard CRT type resolutions, such as 1280x1024.  
i took at look at my Xorg.0.log, and saw this:

(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): [EMAIL PROTECTED]
(II) I810(0): Manufacturer's mask: 0
(II) I810(0): Supported Future Video Modes:
(II) I810(0): #0: hsize: 1680  vsize 1050  refresh: 60  vid: 179
(II) I810(0): #1: hsize: 1280  vsize 1024  refresh: 60  vid: 32897
(II) I810(0): #2: hsize: 1280  vsize 960  refresh: 60  vid: 16513
(II) I810(0): #3: hsize: 1152  vsize 864  refresh: 75  vid: 20337
(II) I810(0): Supported additional Video Mode:
(II) I810(0): clock: 146.2 MHz   Image Size:  474 x 296 mm
(II) I810(0): h_active: 1680  h_sync: 1784  h_sync_end 1960 h_blank_end 2240 
h_border: 0
(II) I810(0): v_active: 1050  v_sync: 1053  v_sync_end 1059 v_blanking: 1089 
v_border: 0
(II) I810(0): Ranges: V min: 56  V max: 75 Hz, H min: 30  H max: 81 kHz, 
PixClock max 170 $
(II) I810(0): Monitor name: SyncMaster
(II) I810(0): Serial No: H2QL700073
(II) I810(0): Will use BIOS call 0x5f05 to set refresh rates for CRTs.
(--) I810(0): Maximum space available for video modes: 12288 kByte
(II) I810(0): Using detected DDC timings
(II) I810(0):   HorizSync 30-81
(II) I810(0):   VertRefresh 56-75
(WW) I810(0): config file vrefresh range 50-100Hz not within DDC vrefresh 
range 56-75Hz

the first part, seems to be the normal video modes that i would expect to see 
from an i810 graphics card, but then right below that, i see video modes that 
would be preferred on my new monitor (1680x1050) in a section 
called Supported Future Video Modes.  does this mean there is a chance i 
might see proper resolutions for my new monitor, without upgrading to some 
other video card?

my computer has a 915G:

(II) I810(0): Integrated Graphics Chipset: Intel(R) 915G
(--) I810(0): Chipset: 915G

if anyone who has a similar setup (with a wide screen monitor), i would 
appreciate if i could be pointed in the right direction.

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: got a new monitor, trying to reconfig xorg

2006-08-28 Thread Jonathan Horne
On Monday 28 August 2006 07:44, newsmaster wrote:
 Jonathan Horne wrote in msgid:
 [EMAIL PROTECTED]

  well, i finally got it to render at 1680x1050, but the size of my desktop
  is fixed at about 1.5 outside the physical size of the lcd (and about
  3/8 top
  and bottom).  ive dont quite a bit of googling, and i am now trying to
  figure out if there is a way to constain or shrink the desktop down, so
  that i will be at the edges of my screen?

 Did you try xvidtune ? It is disigned for that purpose.


i did, but i couldnt outwardly figure out what i was looking at.  when i go 
tot he xvidtune page tho, it says its for XFree86... will it till work 
properly for xorg?

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: got a new monitor, trying to reconfig xorg

2006-08-28 Thread Jonathan Horne
On Monday 28 August 2006 08:40, newsmaster wrote:
 Jonathan Horne wrote in msgid:
 [EMAIL PROTECTED]

  On Monday 28 August 2006 07:44, newsmaster wrote:
  Jonathan Horne wrote in msgid:
  [EMAIL PROTECTED]
 
   well, i finally got it to render at 1680x1050, but the size of my
   desktop is fixed at about 1.5 outside the physical size of the lcd
   (and about 3/8 top
   and bottom).  ive dont quite a bit of googling, and i am now trying to
   figure out if there is a way to constain or shrink the desktop down,
   so that i will be at the edges of my screen?
 
  Did you try xvidtune ? It is disigned for that purpose.
 
  i did, but i couldnt outwardly figure out what i was looking at.  when i
  go tot he xvidtune page tho, it says its for XFree86... will it till work
  properly for xorg?

 Yes, for me its works very well with Xorg.
 I bought me a new IIyama lcd screen and I had to add manually
 some new mode-lines. You can extrapolate from the existing ones.
 Then xvidtune makes the finishing touch. Press on show and replace
 the mode-line with the output of xvidtune.


when you click the narrower and shorters (etc) buttons, shouldnt the display 
be obeying these buttons?  if so, im at a loss, as when i click them back and 
forth, nothing happens.

ill try again,

jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: got a new monitor, trying to reconfig xorg

2006-08-28 Thread Jonathan Horne
On Monday 28 August 2006 10:05, Jonathan Horne wrote:
 On Monday 28 August 2006 08:40, newsmaster wrote:
  Jonathan Horne wrote in msgid:
  [EMAIL PROTECTED]
 
   On Monday 28 August 2006 07:44, newsmaster wrote:
   Jonathan Horne wrote in msgid:
   [EMAIL PROTECTED]
  
well, i finally got it to render at 1680x1050, but the size of my
desktop is fixed at about 1.5 outside the physical size of the lcd
(and about 3/8 top
and bottom).  ive dont quite a bit of googling, and i am now trying
to figure out if there is a way to constain or shrink the desktop
down, so that i will be at the edges of my screen?
  
   Did you try xvidtune ? It is disigned for that purpose.
  
   i did, but i couldnt outwardly figure out what i was looking at.  when
   i go tot he xvidtune page tho, it says its for XFree86... will it till
   work properly for xorg?
 
  Yes, for me its works very well with Xorg.
  I bought me a new IIyama lcd screen and I had to add manually
  some new mode-lines. You can extrapolate from the existing ones.
  Then xvidtune makes the finishing touch. Press on show and replace
  the mode-line with the output of xvidtune.

 when you click the narrower and shorters (etc) buttons, shouldnt the
 display be obeying these buttons?  if so, im at a loss, as when i click
 them back and forth, nothing happens.

 ill try again,


problem solved.  got an nvidia 7300GS.  as little changing the driver and 
vendor name, and the next startx i was at the proper resolution and refresh 
rate.

sorry intel!

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Wake on Lan stopped working soon after system upgrade

2006-08-29 Thread Jonathan Horne
 Hi there

 I recently upgraded my system from
 FreeBSD 6.1-STABLE #1: Sun Jul 30 15:12:34 NZST 2006
 to
 FreeBSD 6.1-STABLE #2: Mon Aug  7 19:20:35 NZST 2006
 Somewhere along the way my Wake on Lan stopped working. I've tested my
 Wakeup system[1] - it is still wakes up my WinXP laptop but won't wake
 up my FreeBSD[2] box.

 After checking a few logs it seems I did manage to wake the system up
 remotely once once after 'make installkernel' and 'make installworld'.
 The only thing I've changed since then is an upgrade of ports[3].

 I have noticed that when my FreeBSD box is shut down, the Ethernet
 lights are off. I have a feeling that previously the lights may have
 stayed on when the system was down(?) I've checked the bios[4]
 settings, it is still set to wake on lan. The LAN port[5] is built
 into the motherboard.

 I've had a bit of a look at the ACPI[6] settings in the kernel[7], but
 nothing's standing out, even after reading the acpi man page. I've
 tried booting with and without acpi, and always shutdown with
 shutdown -p.

 Hope someone can help,
 Dan


 [1] Linksys WRT54Sv1.1 GDD-WRT v23 SP1 Final (05/16/06) voip

 [2] FreeBSD schooner.harbour 6.1-STABLE FreeBSD 6.1-STABLE #2: Mon Aug
  7 19:20:35 NZST 2006

 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/SCHOONER  i386

 [3] Here's what portmanager  -u updated after the last time I got WoL to
 work.
 00029 have:portupgrade-2.1.3.2_2,2 /sysutils/portupgrade
 OLD available: portupgrade-2.1.3.2_3,2
 00045 have:php5-5.1.4  /lang/php5
 built with OLD dependency: apache-1.3.37_1
 00047 have:apache-1.3.37   /www/apache13
 OLD available: apache-1.3.37_1
 00065 have:postgresql-libpqxx-2.6.6
 /databases/postgresql-libpqxx   OLD available:
 postgresql-libpqxx-2.6.7
 00080 have:koffice-1.5.1,2 /editors/koffice-kde3
 built with OLD dependency:

 postgresql-libpqxx-2.6.7
 00087 have:kdelibs-3.5.3   /x11/kdelibs3
 built with OLD dependency:

 mDNSResponder-107.5
 00093 have:libltdl-1.5.22  /devel/libltdl15


 [4] BIOS upgraded before I set WoL up. Gigabyte GA-7VKMLS motherboard
 VIA KM266/KL266 chipset

 [5]
 rl0: RealTek 8139 10/100BaseTX port 0xe000-0xe0ff mem
 0xdefdff00-0xdefd irq 18 at device 19.0 on pci0
 miibus0: MII bus on rl0
 rlphy0: RealTek internal media interface on miibus0
 rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
 rl0: Ethernet address: 00:20:ed:6f:dd:4d
 acpi_button1: Sleep Button on acpi0


 [6]
 $ dmesg | grep acpi
 acpi0: AMIINT AMIINI09 on motherboard
 acpi0: Power Button (fixed)
 acpi_timer0: 24-bit timer at 3.579545MHz port 0x808-0x80b on acpi0
 cpu0: ACPI CPU on acpi0
 acpi_button0: Power Button on acpi0
 pcib0: ACPI Host-PCI bridge port 0xcf8-0xcff on acpi0
 acpi_button1: Sleep Button on acpi0
 fdc0: floppy drive controller port 0x3f2-0x3f3,0x3f4-0x3f5,0x3f7 irq
 6 drq 2 on acpi0
 sio0: 16550A-compatible COM port port 0x3f8-0x3ff irq 4 flags 0x10 on
 acpi0
 sio1: 16550A-compatible COM port port 0x2f8-0x2ff irq 3 on acpi0
 ppc0: ECP parallel printer port port 0x378-0x37f,0x778-0x77b irq 7
 drq 3 on acpi0
 atkbdc0: Keyboard controller (i8042) port 0x60,0x64 irq 1 on acpi0
 acpi0: AMIINT AMIINI09 on motherboard
 acpi0: Power Button (fixed)
 acpi_timer0: 24-bit timer at 3.579545MHz port 0x808-0x80b on acpi0
 cpu0: ACPI CPU on acpi0
 acpi_button0: Power Button on acpi0
 pcib0: ACPI Host-PCI bridge port 0xcf8-0xcff on acpi0
 acpi_button1: Sleep Button on acpi0
 fdc0: floppy drive controller port 0x3f2-0x3f3,0x3f4-0x3f5,0x3f7 irq
 6 drq 2 on acpi0
 sio0: 16550A-compatible COM port port 0x3f8-0x3ff irq 4 flags 0x10 on
 acpi0
 sio1: 16550A-compatible COM port port 0x2f8-0x2ff irq 3 on acpi0
 ppc0: ECP parallel printer port port 0x378-0x37f,0x778-0x77b irq 7
 drq 3 on acpi0
 atkbdc0: Keyboard controller (i8042) port 0x60,0x64 irq 1 on acpi0
 $

 [7]
 $ sysctl -a | grep acpi
   acpidev48 2K   -   48  32
   acpisem19 2K   -   19  64
  acpitask 0 0K   -1  32
acpica  156685K   -20527  16,32,64,128,256,512,1024
   acpipwr 1 1K   -1  32
 debug.acpi.do_powerstate: 1
 debug.acpi.acpi_ca_version: 0x20041119
 debug.acpi.semaphore_debug: 0
 hw.acpi.supported_sleep_state: S1 S4 S5
 hw.acpi.power_button_state: S5
 hw.acpi.sleep_button_state: S1
 hw.acpi.lid_switch_state: NONE
 hw.acpi.standby_state: S1
 hw.acpi.suspend_state: S3
 hw.acpi.sleep_delay: 1
 hw.acpi.s4bios: 0
 hw.acpi.verbose: 0
 hw.acpi.disable_on_reboot: 0
 hw.acpi.handle_reboot: 0
 hw.acpi.reset_video: 1
 hw.acpi.cpu.cx_supported: C1/0
 hw.acpi.cpu.cx_lowest: C1
 hw.acpi.cpu.cx_usage: 100.00%
 machdep.acpi_timer_freq: 3579545
 machdep.acpi_root: 1025552
 dev.acpi.0.%desc: AMIINT AMIINI09
 dev.acpi.0.%driver: acpi
 dev.acpi.0.%parent: nexus0
 dev.acpi_sysresource.0.%desc: System Resource
 

Re: NFS exports file errors

2006-08-29 Thread Jonathan Horne
 On Tue, 29 Aug 2006, Bill Moran wrote:

 In response to [EMAIL PROTECTED]:

 
  I'm getting the following errors when trying to mount volumes via NFS
  between to FBSD 6.1-STABLE machines:
 
  Aug 29 14:20:41 host mountd[1587]: can't export /usr
  Aug 29 14:20:41 host mountd[1587]: bad exports list line /usr -ro
 -maproot

 You have to map root to something ... i.e.
 /usr -ro -maproot root

 I did, using this sytax, like I always have:

 / -ro -maproot=0 192.x.x.1
 /usr -ro -maproot=0 root 192.x.x.1
 /var -ro -maproot=0 root 192.x.x.1
 /home -ro -maproot=0 root 192.x.x.1

 where 192.x.x.1 is the IP of the only host I want to have access.  I tried
 switching to your syntax (taking out the -0 and putting in  root but I
 get the same results...

 James Smallacombe   PlantageNet, Inc. CEO and Janitor
 [EMAIL PROTECTED] 
 http://3.am

i thought the syntax was maproot=root,  thus,

/ -ro -maproot=root 192.x.x.1
/usr -ro -maproot=root 192.x.x.1
/var -ro -maproot=root 192.x.x.1
/home -ro -maproot=root 192.x.x.1

if that doesnt work, then i would remove the -ro, out of wondering if it
could be colliding with the maproot=root.

hth,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: question about network setup

2006-08-29 Thread Jonathan Horne
On Tuesday 29 August 2006 23:13, Nazar wrote:
 Alright guys. This is probably the complete newbie question, but I just
 cant fight a straight answer on google. The questions usually I found,
 werent answered. Anyways, to the point. I'm behind router. Cable modem -
 Router - pc's. Basic home setup. I set up apache and want to figure out
 how is it possible for me to use external ip to connect to my server? I can
 access the server via internal ip  people can access it via my external,
 but for me doesnt show up. I know this configuration has to do with my
 network, rather than apache, or at least main configuration of my network
 and probably some tweaking with apacheWell, if possible, some replies
 would be
 appreciated. Maybe at least point me at the right direction. Thank you.

so, for you, the internal works, and for external people the external ip 
works... are you trying to access the external from your internal?  wont work 
(well, not with the average soho router).

can you be more specific as to exactly what is not working?

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


not adding daemons to rc.conf

2006-08-30 Thread Jonathan Horne
ive noticed that apache can be started manually using the apachectl tool, even 
if it is not enabled in /etc/rc.conf.  do many other daemons have this 
ability?  i have a dev server that i would like to not have many things 
enabled in the rc.conf, but i would like an easy way to just start specific 
daemons when i need.

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: can someone point me to some good and descriptive VPN documentation for my use?

2006-08-31 Thread Jonathan Horne
On Thursday 31 August 2006 11:28, Alex Zbyslaw wrote:
 Jim Stapleton wrote:
  I'm trying to VPN in to work from home, and the IT group there only
  supports windows. There are Cisco pre-configured clients for Linux,
  MacOS X, and Windows available, but not BSD.
 
  I tried running the Linux binary, but it wanted to move to a
  nonexistant driectory, and didn't tell me which directory it couldn't
  find, so I couldn't make the proper symlink.

 You could try a strings on the binary to try to find the directory -
 assuming that's the only problem, of course :-)

 --Alex



the most important question is, what type of vpn concentrator do you have?  if 
it happens to be a cisco vpn3000, the try this:

/usr/ports/security/vpnc

other wise, google [your vpn model] freebsd and see what turns up.

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: MONOWALL WAN

2006-09-01 Thread Jonathan Horne
On Tuesday 29 August 2006 16:19, Laurie Zimmerman wrote:
 Hi,

 I have a client who would like to share a DSL connection with a neighboring
 office.  I would like to put my clients network (they only need to share
 Internet) on a separate IP network behind a monowall.  My question is, will
 monowall allow a private address (the LAN IP of router) to be its WAN
 address?

 Thanks

 Laurie

my firewall is pfSense, which is based on monowall.

on pfSense, in order to use a private address on the wan interface, you have 
to uncheck a box that says block private networks (it even says 'for the 
purposes of putting the wan interface on a private lan).

i would assume due the lineage of pfSense, that monowall likely has a similar 
feature.

hth,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ACPI won't shutdown

2006-09-04 Thread Jonathan Horne
On Monday 04 September 2006 06:17, bsd wrote:
 Hello,

 I have configured a new server and everything goes find but ACPI.

 When Shutting down the server I have these messages :

 …
 All buffers synced.
 Uptime: 5m2s
 mpt0: Unhandled Event Notify Frame. Event 0x30
 mpt1: Unhandled Event Notify Frame. Event 0x30
 Shutting down ACPI


 Then nothing !!

 Computer seems to freeze for an infinite amount of time. I have to
 manually shutdown the computer with the Power button !


 Any idea ?
 


tell is a little about your hardware?  i have a system that does this exact 
same behavior.  mine is;

supermicro 370DE6
dual pentium 3 1000
2048MB ECC-Reg'd PC133
an older samsung cdrw (this is the only ide device in the system)
3ware 6800 raid controller with 3 raid units (20GB R1, 80GB R1, 335GB R5)

my system exhibits the exact sme behavior you describe, but i too have no idea 
why.  system has always had no trouble with acpi


cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ACPI won't shutdown

2006-09-04 Thread Jonathan Horne
On Monday 04 September 2006 08:35, Matteo Pillon wrote:
 On Mon, Sep 04, 2006 at 01:17:12PM +0200, bsd wrote:
  Computer seems to freeze for an infinite amount of time. I have to
  manually shutdown the computer with the Power button !

 Did you try with 'halt -p'?

 If it doesn't work, can you give more infos on your system?

 Bye.

im not the original-poster, but my system with the exact same behavior, is 
always shutdown with a 'shutdown -p now'.

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to get the install config options back?

2006-09-04 Thread Jonathan Horne
On Monday 04 September 2006 09:25, Alexander Sashurin wrote:
 *This message was transferred with a trial version of CommuniGate(r) Pro*

 Andreas Widerøe Andersen wrote:
  *This message was transferred with a trial version of CommuniGate(r) Pro*
  Hi,
  When I install a new port (Ie. php5) I early get a config options box
  where
  I can choose various add-ons.
 
  However, if the installation fails or I abort it somehow I can't seem
  to get
  the option box back the next time I want to install the port again.
 
  How can I get this box back so I can make changes to the installation
  options?
 
  Thanks,
  Andreas
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to
  [EMAIL PROTECTED]

 make clean doesn't help?
 what about make config?

other option would be to:

make rmconfig

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


questions about periodic

2006-09-05 Thread Jonathan Horne
i have a couple virtual machines running freebsd 6.1-;4 on a ms vs2005 host, 
and as of the moment of this writing (and for a while now actually), they are 
idling at near 0% utilization.  but during the nights, they really get going 
to the point that they ramp the cpu fan speeds to max on the my host box!  it 
takes them hours and hours to quiet back down, sometimes not until i power 
the virtual machines off and back on again.

im wondering if the cause of these early hours cpu hogging could be comming 
from items running from periodic?  i think the daily folder is probably the 
culprit.  is there a good way to see which all scripts are being run, what 
their scheduling and priority is?  i would like to cull out as many as i 
could live without (if possible).

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


can i build more than one world on a buildserver?

2006-09-06 Thread Jonathan Horne
is it possible to have STABLE and RELENG built on a single build server? 
or further, is it possible to have 5.5 and 6.1 worlds built from the same
machine?

just wondering.  :)

thanks,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: can i build more than one world on a buildserver?

2006-09-06 Thread Jonathan Horne
On Wednesday 06 September 2006 13:16, [EMAIL PROTECTED] wrote:
 On 9/6/06, Jonathan Horne [EMAIL PROTECTED] wrote:
  is it possible to have STABLE and RELENG built on a single build server?
  or further, is it possible to have 5.5 and 6.1 worlds built from the same
  machine?

 buildworld and buildkernel targets are
 fairly sophisticated.

 The /usr/obj tree corresponds to the source
 directory, so if you have your 5.5 sources in
 /src/5.5
 and your 6.1 sources in
 /src/6.1 (or /usr/src/6.1 for that matter)

 the world(s) would be built in
 /usr/obj/src/5.5/ and /usr/obj/src/6.1/
 repsectively. (Or /usr/obj/usr/src/6.1)

 If the purpose is to buildworld on one
 fast machine and then export it to slower
 machines on th' network, this works
 admirably well.

thank you!!  this was the exact hint i was hoping for!

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: can i build more than one world on a buildserver?

2006-09-07 Thread Jonathan Horne
On Wednesday 06 September 2006 19:05, Jonathan Horne wrote:
 On Wednesday 06 September 2006 13:16, [EMAIL PROTECTED] wrote:
  On 9/6/06, Jonathan Horne [EMAIL PROTECTED] wrote:
   is it possible to have STABLE and RELENG built on a single build
   server? or further, is it possible to have 5.5 and 6.1 worlds built
   from the same machine?
 
  buildworld and buildkernel targets are
  fairly sophisticated.
 
  The /usr/obj tree corresponds to the source
  directory, so if you have your 5.5 sources in
  /src/5.5
  and your 6.1 sources in
  /src/6.1 (or /usr/src/6.1 for that matter)
 
  the world(s) would be built in
  /usr/obj/src/5.5/ and /usr/obj/src/6.1/
  repsectively. (Or /usr/obj/usr/src/6.1)
 
  If the purpose is to buildworld on one
  fast machine and then export it to slower
  machines on th' network, this works
  admirably well.

 thank you!!  this was the exact hint i was hoping for!

 cheers,
 jonathan

well, so far, kinda so good.

i was able to cvsup 5.5-RELENG, 6.1-STABLE, and 6.1-RELENG to my build box.  i 
did a test kernel on the 6.1-RELENG, and that went fine, pretty much as 
expected.  but the 5.5 will not build.  i get this error:

[EMAIL PROTECTED] /usr/5.5-RELENG/src]# make buildkernel KERNCONF=TYCHE

--
 Kernel build for TYCHE started on Thu Sep  7 06:48:26 CDT 2006
--
=== TYCHE
mkdir -p /usr/obj/usr/5.5-RELENG/src/sys

--
 stage 1: configuring the kernel
--
cd /usr/5.5-RELENG/src/sys/i386/conf;  
PATH=/usr/obj/usr/5.5-RELENG/src/i386/legacy/usr/sbin:/usr/obj/usr/5.5-RELENG/src/i386/legacy/usr/bin:/usr/obj/usr/5.5-RELENG/src/i386/legacy/usr/games:/usr/obj/usr/5.5-RELENG/src/i386/usr/sbin:/usr/obj/usr/5.5-RELENG/src/i386/usr/bin:/usr/obj/usr/5.5-RELENG/src/i386/usr/games:/sbin:/bin:/usr/sbin:/usr/bin
  
config  -d /usr/obj/usr/5.5-RELENG/src/sys/TYCHE  
/usr/5.5-RELENG/src/sys/i386/conf/TYCHE
../../conf/files: coda/coda_fbsd.c must be optional, mandatory or standard
*** Error code 1

Stop in /usr/5.5-RELENG/src.
*** Error code 1

Stop in /usr/5.5-RELENG/src.

should building parts of 5.5 from a 6.1-buildserver be possible?  or should i 
install 5.5 on my buildserver, and compile 5.5 from there as well as the 
higher versions?

thanks,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


trouble with a pair of bind9 servers

2006-09-07 Thread Jonathan Horne
i have 2 servers im working with for a test im doing with bind9.  a 6.1-p4, 
and a 5.5-p3.  both have bind9-9.3.2.1 from ports, without replace base 
version checked.  both are responding correctly for general lookups of hosts 
out on the internet, even based on the querying clients ip vs the acl on the 
zones.

the trouble im having is, that my slave (5.5-p3) will not transfer the zone 
from the master (6.1-p4).  my /var/log/messages is filled with these:

Sep  7 21:50:24 fbsd55-2 named[1847]: exiting
Sep  7 21:50:26 fbsd55-2 named[1924]: starting BIND 9.3.2 -t /var/named -u 
bind
Sep  7 21:50:26 fbsd55-2 named[1924]: /etc/namedb/named.conf:40: 
option 'allow-update' is not allowed in 'slave' zone 'dlptest.com'
Sep  7 21:50:26 fbsd55-2 named[1924]: command channel listening on 
127.0.0.1#953
Sep  7 21:50:26 fbsd55-2 named[1924]: command channel listening on ::1#953
Sep  7 21:50:26 fbsd55-2 named[1924]: zone dlptest.com/IN/internal: has 0 SOA 
records
Sep  7 21:50:26 fbsd55-2 named[1924]: zone dlptest.com/IN/internal: has no NS 
records
Sep  7 21:50:26 fbsd55-2 named[1924]: running
Sep  7 21:50:27 fbsd55-2 named[1924]: dumping master 
file: /etc/namedb/tmp-UZF5mCCxZP: open: permission denied
Sep  7 21:50:27 fbsd55-2 named[1924]: transfer of 'dlptest.com/IN' from 
192.168.125.91#53: failed while receiving responses: permission denied
Sep  7 21:51:20 fbsd55-2 named[1924]: dumping master 
file: /etc/namedb/tmp-SaWWYxV06u: open: permission denied
Sep  7 21:51:20 fbsd55-2 named[1924]: transfer of 'dlptest.com/IN' from 
192.168.125.91#53: failed while receiving responses: permission denied

this was giving me the impression that the bind user was not able to write 
to /var/named/etc/namedb, but every time i make a chmod or chown adjustment, 
it just gets changed back:

fbsd55-2# /etc/rc.d/named restart
Stopping named.
etc/namedb changed
user expected 0 found 53 modified
Starting named.
fbsd55-2#

here are my 2 config files (first the master, then the slave)

acl dlpnets {
192.168.125.64/26;
127.0.0.1;
};
options {
directory   /etc/namedb;
pid-file/var/run/named/pid;
dump-file   /var/dump/named_dump.db;
statistics-file /var/stats/named.stats;
listen-on   { 192.168.125.91; 127.0.0.1; };
};
view internal {
match-clients { dlpnets; };
recursion yes;
zone . {
type hint;
file named.root;
};
zone 0.0.127.IN-ADDR.ARPA {
type master;
file master/localhost.rev;
};
zone dlptest.com {
type master;
file /etc/namedb/dlptest.com.i.hosts;
allow-transfer { any; };
also-notify { 192.168.125.91; };
notify yes;
};
};
view external {
match-clients { any; };
recursion no;
zone dlptest.com {
type master;
file /etc/namedb/dlptest.com.e.hosts;
};
};



(begin the slave named.conf)
acl dlpnets {
192.168.125.0/26;
192.168.125.91;
127.0.0.1;
};

options {
directory   /etc/namedb;
pid-file/var/run/named/pid;
dump-file   /var/dump/named_dump.db;
statistics-file /var/stats/named.stats;
listen-on   { 127.0.0.1; 192.168.125.93; };
};
view internal {
match-clients { dlpnets; };
recursion yes;
zone . {
type hint;
file named.root;
};
zone 0.0.127.IN-ADDR.ARPA {
type master;
file master/localhost.rev;
};
zone dlptest.com {
type slave;
masters { 192.168.125.91; };
file /etc/namedb/dlptest.com.i-slave.hosts;
transfer-source 192.168.125.93;
allow-transfer { any; };
allow-update { 192.168.125.91; };
};
};

ive been dinking around with this for a few hours now, and im about to pull 
what little hair i have left out.  can someone shed light on this for me 
please?  any help at all would be much appreciated!

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RSSreader: Recommendations Sought

2006-09-09 Thread Jonathan Horne
On Saturday 09 September 2006 16:32, Marc G. Fournier wrote:
 Anyone suggest a good one that runs under FreeBSD?

 Thx in advance ...

 
 Marc G. Fournier   Hub.Org Networking Services (http://www.hub.org)
 Email . [EMAIL PROTECTED]  MSN . [EMAIL PROTECTED]
 Yahoo . yscrappy   Skype: hub.orgICQ . 7615664
 ___

im a kde user, so kaggregator works for me (which it also integrates into 
kontact).  when i happen to anywhere else, i just use the customized google 
page, and just insert all the feeds i want to keep up with.

hth,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


cdrecord not working the way expected

2006-09-10 Thread Jonathan Horne
anyone here sucessfully using cdrecord in freebsd?  -scanbus option gives me 
this error:

[EMAIL PROTECTED] ~]# cdrecord -scanbus
Cdrecord-Clone 2.01 (i386-unknown-freebsd6.1) Copyright (C) 1995-2004 Jörg 
Schilling
cdrecord: Error 0. Cannot open SCSI driver.
cdrecord: For possible targets try 'cdrecord -scanbus'.
cdrecord: For possible transport specifiers try 'cdrecord dev=help'.

i have a feeling that the reason my DVD-CDRW isnt working in xine is probably 
rooted in the same cause.  can anyone point me in the right direction here?

[EMAIL PROTECTED] ~]# dmesg |grep acd0
acd0: CDRW LITE-ON COMBO SOHC-4832K/OQKB at ata0-master UDMA40
acd0: CDRW LITE-ON COMBO SOHC-4832K/OQKB at ata0-master UDMA40
[EMAIL PROTECTED] ~]# uname -a
FreeBSD athena.dfwlp.com 6.1-STABLE FreeBSD 6.1-STABLE #0: Wed Aug 30 13:08:08 
CDT 2006 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/ATHENA  i386

anything at all that can get me going on this would be much appricated!

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cdrecord not working the way expected

2006-09-10 Thread Jonathan Horne
On Sunday 10 September 2006 14:47, Shantanoo Mahajan wrote:
 +++ michael johnson [freebsd] [10-09-06 11:16 -0400]:
 | On 9/10/06, Jonathan Horne [EMAIL PROTECTED] wrote:
 | anyone here sucessfully using cdrecord in freebsd?  -scanbus option
 |  gives me
 | this error:
 | 
 | [EMAIL PROTECTED] ~]# cdrecord -scanbus
 | Cdrecord-Clone 2.01 (i386-unknown-freebsd6.1) Copyright (C) 1995-2004
 |  J?rg Schilling
 | cdrecord: Error 0. Cannot open SCSI driver.
 | cdrecord: For possible targets try 'cdrecord -scanbus'.
 | cdrecord: For possible transport specifiers try 'cdrecord dev=help'.
 | 
 | i have a feeling that the reason my DVD-CDRW isnt working in xine is
 | probably
 | rooted in the same cause.  can anyone point me in the right direction
 | here?
 | 
 | [EMAIL PROTECTED] ~]# dmesg |grep acd0
 | acd0: CDRW LITE-ON COMBO SOHC-4832K/OQKB at ata0-master UDMA40
 | acd0: CDRW LITE-ON COMBO SOHC-4832K/OQKB at ata0-master UDMA40
 | [EMAIL PROTECTED] ~]# uname -a
 | FreeBSD athena.dfwlp.com 6.1-STABLE FreeBSD 6.1-STABLE #0: Wed Aug 30
 | 13:08:08
 | CDT 2006 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/ATHENA  i386
 | 
 | anything at all that can get me going on this would be much appricated!

 # kldload atapicam
 # chmod 666 /dev/pass0 /dev/xpt0 /dev/cd0

  k3b

 Is what I generally use and it works for me. After you run 'kldload..'
 check the dmesg output immediatly. You shoud be able to see some 'cd0'
 or 'cd*'. 'dmesg | grep ^cd'


 Shantanoo

thank you!  that was it!!
[EMAIL PROTECTED] ~]# kldstat
Id Refs AddressSize Name
 1   15 0xc040 6b5a90   kernel
 22 0xc0ab6000 1adb8linux.ko
 31 0xc0ad1000 5f60 snd_ich.ko
 42 0xc0ad7000 22b88sound.ko
 51 0xc0afa000 59e80acpi.ko
 61 0xc0b54000 4a3710   nvidia.ko
 71 0xc86f5000 4000 atapicam.ko
(dmesg...)
0: LITE-ON COMBO SOHC-4832K OQKB Removable CD-ROM SCSI-0 device
cd0: 3.300MB/s transfers
cd0: Attempt to query device size failed: NOT READY, Medium not present
[EMAIL PROTECTED] ~]# cdrecord -scanbus
Cdrecord-Clone 2.01 (i386-unknown-freebsd6.1) Copyright (C) 1995-2004 Jörg 
Schilling
Using libscg version 'schily-0.8'.
scsibus1:
1,0,0   100) 'LITE-ON ' 'COMBO SOHC-4832K' 'OQKB' Removable CD-ROM
1,1,0   101) *
1,2,0   102) *
1,3,0   103) *
1,4,0   104) *
1,5,0   105) *
1,6,0   106) *
1,7,0   107) *

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Newbie Experience

2006-09-11 Thread Jonathan Horne
On Monday 11 September 2006 05:29, Jeff Rollin wrote:
 On 11/09/06, Bill Moran [EMAIL PROTECTED] wrote:
  Bob Walker [EMAIL PROTECTED] wrote:
   Hi,
  
   I have always wanted to better understand Unix, and so I finally made
 
  the
 
   decision to switch some of my office PCs over to either a Unix or Linux
   system. With office suites like OpenOffice, I felt that I would be able
 
  to
 
   transition away from Windows with minimal disruption to my business.
   So,
 
  I
 
   downloaded the .iso images from FreeBSD, Suse, and Fedora. I initially
   favored FreeBSD, since it seemed to have the closest lineage to pure
 
  Unix,
 
   and that was important to me, but after many, many attempts to install
 
  both
 
   the OS and Gnome desktop environment, I threw up my hands.
 
  I'm confused.  What compelled you to torture yourself, _then_ complain
  about it to a list that's sole purpose in existing is to help prevent
  you from torturing yourself?
 
  If you had posted many questions and got no answers, I could understand
  throwing up your hands.  As it stands, you might want to use those hands
  to smack yourself for making your life more difficult than it needs to
  be.
 
  If you have problems, ask on the list at the time the problem occurs.
  Complaining after the fact (as you're doing) accomplishes nothing.
 
  While I can't speak for the project officially, I would wager to say:
  1) We know our installation is not as pretty and easy as others, and
  2) We don't care.
 
  We are a community.  We're not Microsoft.  We're not interested in
  driving users away by saying here's everything you need, don't bother
  us again.  Our limited resources are focused on developing the really
  important parts of the system.  While few would complain if the
  install process were made easier, nobody has the time to work on it.
  Become part of the community and ask questions when you have trouble.
  Find a local user's group.  But please, please don't complain about the
  OS not working right when you use it wrong.  The FreeBSD community is
  an integral part of the OS.  Not making use of the FreeBSD community
  and then complaining that the OS is difficult to use would be like not
  using a mouse then complaining that MS Windows is hard to use.
 
  --
  Bill Moran

  Well said, Sir.


truly.

indeed it is said, that the fastest way to get the highest quantity of help, 
is to make a post about how horrible an operating system is, that you spent 
hours and hours and got nothing done, and that you have already decided that 
you never want to see [insert OS here] again.

myself, as an admin of such a support forum (the unfortunatly now defunct 
linuxiso.org), i long ago learned to ignore the the ones that we have 
already lost, and keep my eyes open for the many more that will (usually 
with minutes) replace them, who are actually there to learn.

cheers,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


wow, i didnt realize we were so close!

2006-09-12 Thread Jonathan Horne
next seems to be upon us!

[EMAIL PROTECTED] ~]# uname -a
FreeBSD athena.dfwlp.com 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #0: Mon Sep
11 20:42:48 CDT 2006 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/ATHENA
 i386

cheers,
jonathan

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


  1   2   3   4   5   >