Re: making photoalbums for web pages

2013-05-10 Thread Matthias Fechner
Am 10.05.2013 09:41, schrieb Matthias Apitz:
 clicking them) and the application puts them together, with thumbnails,
 to a tree which just goes per SCP -rp to our webserver;

why not use on the webserver: www/gallery3?



Gruß
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Upgrade icu failed

2012-12-24 Thread Matthias Fechner
Am 23.12.12 17:56, schrieb Walter Hurry:
 pkg_info should be reporting 'no packages installed'.
 What is the output from pkg2ng?

I get there a lot of error messages:

pkg_info: the package info for package 'ImageMagick-6.8.0.7' is corrupt
usage: pkg info pkg-name
   pkg info -a
   pkg info [-eDgxXdrlBsqOf] pkg-name
   pkg info [-drlBsqfR] -F pkg-file

For more information see 'pkg help info'.
pkg_info: the package info for package 'ImageMagick-6.8.0.7' is corrupt
make: don't know how to make showconfig. Stop
cat: /var/db/pkg/ImageMagick-6.8.0.7/+COMMENT: No such file or directory
pkg_info: the package info for package 'ImageMagick-6.8.0.7' is corrupt
egrep: /var/db/pkg/ImageMagick-6.8.0.7/+CONTENTS: No such file or directory
pkg: open(/tmp/pkg2ngfNwkS/+DESC): No such file or directory
Segmentation fault (core dumped)
Registration of ImageMagick-6.8.0.7 failed.
name: ImageMagick
version: 6.8.0.7
origin:
comment: |
  maintainer:
prefix:
licenselogic: single
deps:
pkg_info: the package info for package 'ORBit2-2.14.19' is corrupt
usage: pkg info pkg-name
   pkg info -a
   pkg info [-eDgxXdrlBsqOf] pkg-name
   pkg info [-drlBsqfR] -F pkg-file


It continues with a lot of packages, it seems for all packages upgraded
since the change from pkg to pkgng.

Is this maybe a problem with portmaster?

Thanks,
Matthias

-- 
Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Upgrade icu failed

2012-12-23 Thread Matthias Fechner
Dear list,

I checked the file /usr/ports/UPDATING and there is noted 20121218 for
icu to execute the command:
portmaster -w -r icu

(my system is already on pkgng as described a in the UPDATING file,
20121015).
If I execute now portmaster i get the following error message:
*
=== icu-4.8.1.1_1 1/1

=== Currently installed version: icu-4.8.1.1_1
=== Port directory: /usr/ports/devel/icu

=== Starting check for build dependencies
=== Gathering dependency list for devel/icu from ports
=== Launching child to update pkg-1.0.3_1 to pkg-1.0.4_1

=== icu-4.8.1.1_1 1/1  pkg-1.0.3_1 (1/16)

=== Currently installed version: pkg-1.0.3_1
=== Port directory: /usr/ports/ports-mgmt/pkg

=== Starting check for build dependencies
=== Gathering dependency list for ports-mgmt/pkg from ports
=== No dependencies for ports-mgmt/pkg

===  Cleaning for pkg-1.0.4_1
You are about to convert your system to pkgng while you have ports/packages
installed with the old pkg_install tools.

You can choose to:
- keep pkg_install as the package management system by adding this line
to /etc/make.conf:

WITHOUT_PKGNG=yes

- switch to pkgng:
1) Add WITHOUT_PKGNG to /etc/make.conf
2) Install ports-mgmt/pkg
3) Convert your package database by running pkg2ng
4) Remove WITHOUT_PKGNG from /etc/make.conf

*** [pre-everything] Error code 1

Stop in /usr/ports/ports-mgmt/pkg.

=== make failed for ports-mgmt/pkg
=== Aborting update

=== Update for pkg-1.0.3_1 failed
=== Aborting update


Is this a know problem or the there someting in the UPDATING file not
mentioned?
In /etc/make.conf I have:
WITH_PKGNG=yes
(as descriped in 20121015)

Thanks,
Matthias

-- 
Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Upgrade icu failed

2012-12-23 Thread Matthias Fechner
Am 23.12.12 17:29, schrieb Walter Hurry:
 What's the output from pkg_info?

pkg info gives me a full list of all installed ports, pkg_info complains
about a lot of corrupted package infos, but i think this is related to,
pkg is new and pkg_info is the old tool.

 Have you done any other upgrades of ports since migrating to pkgng?

yes, I did my last upgrade 12.12.2012.
Till the note in /usr/ports/UPDATING 20121212.
After these steps I executed portmaster -a, which was successfully.

Thanks,
Matthias

-- 
Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


ZFS and zpool mistake

2012-10-08 Thread Matthias Fechner
Dear list,

I installed a freebsd with freebsd on a zfs root and only one disk:
  pool: zroot
 state: ONLINE
  scan: none requested
config:

NAME STATE READ WRITE CKSUM
zrootONLINE   0 0 0
  ada0p3 ONLINE   0 0 0

This disk was now insterted into the computer and boots fine.
The next step I wanted was to setup a mirror with a second disk.

So I inserted a second disk, configured everything with gpart and added
the disk to the zroot with:
zpool add zroot gpt/disk1
(I think I had to execute zpool add zroot mirror gpt/disk1, this is not
clear from the man page)

And now I have a problem, it seems not to be a mirror but a stripe:
NAME STATE READ WRITE CKSUM
zrootONLINE   0 0 0
  ada0p3 ONLINE   0 0 0
  gpt/disk1  ONLINE   0 0 0

Is there any chance to get it into a mirror?

I don't think there was anything written to the second disk but I cannot
remove it anymore.

Has anyone a tip for me, howto convert the stripe to a mirror?

Thanks,
Matthias

-- 
Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: TLS config help

2012-08-29 Thread Matthias Fechner
Am 29.08.12 12:38, schrieb AN:
 Trying to configure TLS and sendmail using the following steps

I use:
cd /etc/mail/certs


Create a CA:

- Edit /etc/ssl/openssl.cfn - default_days= 1825
- Generate CAcertificate
- /usr/src/crypto/openssl/apps/CA.pl -newca
cp demoCA/cacert.pem .

Create a key:

/usr/src/crypto/openssl/apps/CA.pl -newreq

Remove passphrase from key:

openssl rsa -in newkey.pem -out key.pem

Sign key:

/usr/src/crypto/openssl/apps/CA.pl -sign

Set permissions:

chmod 0600 *

Sendmail:

define(`confCACERT_PATH',`/etc/mail/certs')
define(`confCACERT',`/etc/mail/certs/cacert.pem')
define(`confSERVER_CERT',`/etc/mail/certs/newcert.pem')
define(`confSERVER_KEY',`/etc/mail/certs/key.pem')
define(`confCLIENT_CERT',`/etc/mail/certs/newreq.pem')
define(`confCLIENT_KEY',`/etc/mail/certs/key.pem')

DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl

Bye,
Matthias

-- 
Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: USB 3.0 with FreeBSD 8.1

2012-01-28 Thread Matthias Fechner
Am 28.01.2012 05:28, schrieb Henry Olyer:
 b)  Does 9.0 have USB 3.0 support.

my system says:
Jan 27 22:16:51 server kernel: xhci0: XHCI (generic) USB 3.0
controller mem 0xf9cfe000-0xf9cf irq 19 at device 0.0 on pci5
Jan 27 22:16:51 server kernel: xhci0: 64 byte context size.
Jan 27 22:16:51 server kernel: usbus3 on xhci0

So it detects at least my usb3 controller.

Bye
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: upgrade from 8.2 to 9.0

2012-01-13 Thread Matthias Fechner
Hi,

Am 13.01.2012 14:42, schrieb Dick Hoogendijk:
 I possible I want my server to upgrade from 8.2-RELEASE to 9.0-RELEASE.
 I guess the binary upgrade will not be a problem with freebsd-update -r
 9.0-RELEASE fetch If so, I do like to hear the caveats.

I did last week a source upgrade and the new generic kernel has not able
to detected my hard disks anymore and therefor the system could not be
booted, because the zfs file system was not mountable anymore.

But if some users are reporting here good results, I maybe will try it
again.

Bye
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Problems with php5-pdo_pgsql, libpq etc. after upgrading postgresql

2011-10-25 Thread Matthias Fechner

Dear list,

Am 24.10.11 07:20, schrieb Jon Theil Nielsen:

databases/php5-pdo_pgsql, I got this error:
...
checking for gawk... gawk
checking for PostgreSQL support for PDO... yes, shared
checking for pg_config... /usr/local/bin/pg_config
checking for openssl dependencies... no
checking for PQparameterStatus in -lpq... no
Unable to build the PDO PostgreSQL driver: libpq 7.4+ is required
===   Script configure failed unexpectedly.


I have exactly the same problem.
Is there already a solution for this available?

Bye
Matthias

--
Programming today is a race between software engineers striving to 
build bigger and better idiot-proof programs, and the universe trying to 
produce bigger and better idiots. So far, the universe is winning. -- 
Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Problems with php5-pdo_pgsql, libpq etc. after upgrading postgresql

2011-10-25 Thread Matthias Fechner
Dear list,

Am 25.10.2011 11:20, schrieb Matthias Fechner:
 Am 24.10.11 07:20, schrieb Jon Theil Nielsen:
 databases/php5-pdo_pgsql, I got this error:
 ...
 checking for gawk... gawk
 checking for PostgreSQL support for PDO... yes, shared
 checking for pg_config... /usr/local/bin/pg_config
 checking for openssl dependencies... no
 checking for PQparameterStatus in -lpq... no
 Unable to build the PDO PostgreSQL driver: libpq 7.4+ is required
 ===   Script configure failed unexpectedly.
 
 I have exactly the same problem.
 Is there already a solution for this available?

I was able to solve the problem.
I disabled the GSSAPI option in the postgres port and reinstalled the
client and server. After this php5-pdo_pgsql compiles fine.

Bye
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: ruby18-rmagick not rebuild (portupgrade)

2010-10-27 Thread Matthias Fechner

Am 26.10.10 20:47, schrieb Lowell Gilbert:

graphics/ruby-rmagick is a different port than graphics/ImageMagick, so
rebuilding everything will only rebuild the former if it's out of date.
Whether the other is rebuilt is irrelevant.


hm ok, I added now the following line:
'graphics/ImageMagick*' = 'portupgrade -f 
graphics/ruby-rmagick; /usr/local/etc/rc.d/apache22 restart',


in the AFTERINSTALL section, that should force portupgrade to rebuild 
the rmagick port and restart apache afterwards.



Matthias

--
Programming today is a race between software engineers striving to 
build bigger and better idiot-proof programs, and the universe trying to 
produce bigger and better idiots. So far, the universe is winning. -- 
Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


ruby18-rmagick not rebuild (portupgrade)

2010-10-26 Thread Matthias Fechner
Hi,

I have a small question to portupgrade.
I use it to upgrade my ports to the new versions with:
portupgrade -Rrav

If an upgrade of ImageMagick-nox11 is included it always forgets to
rebuild ruby18-rmagick.

Is this maybe a bug of portupgrade?

Bye,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: system is under attack (what can I do more?)

2010-06-18 Thread Matthias Fechner

Am 18.06.10 17:55, schrieb Jason Dixon:

Doesn't FreeBSD's version of pf support the overload feature? This is
how we typically manage ssh bruteforce attempts in OpenBSD/pf-land.
   


and what you want to do if a user connects authorizied very often in 
lets say 10 seconds?
If you work e.g. with subversion or other tunneled connection 10 
connections in 5 seconds is not seldom.
On pf-level you are not able to distinquish between successfull or 
denied connection or?


Bye,
Matthias

--
Programming today is a race between software engineers striving to build bigger and 
better idiot-proof programs, and the universe trying to produce bigger and better idiots. 
So far, the universe is winning. -- Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Midphase Hosting

2010-06-10 Thread Matthias Fechner

Hi,

Am 10.06.10 11:47, schrieb Jonathan McKeown:

Subject: [#24548754] Re: why does ps |grep sometimes not return itself?
Date: Thu, 10 Jun 2010 02:46:31 -0500
From: freebsd-questions@freebsd.org
Reply-To: supp...@mpcustomer.com
Message-ID:e436b556aafa1c4bd0f2c367a0097...@secure.mpcustomer.com
   


I suggest to block on the freebsd server the complete domain 
mpcustomer.com that should solve the problem.
It is really anyoing. I had already contact with the postmaster and he 
was unable to do anything.


Bye,
Matthias

--
Programming today is a race between software engineers striving to build bigger and 
better idiot-proof programs, and the universe trying to produce bigger and better idiots. 
So far, the universe is winning. -- Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Midphase Hosting

2010-06-10 Thread Matthias Fechner

Am 10.06.10 11:47, schrieb Jonathan McKeown:

I'm assuming the list admins already have examples to work with, but here is a
set of headers from the reply I got to my last list post, in case it's any
help.
   


for everyone how does not want this mails anymore but into your 
/etc/mail/access the following line:
Connect:secure.mpcustomer.com   ERROR:550 We don't accept mail from 
spammers


Bye,
Matthias

--
Programming today is a race between software engineers striving to build bigger and 
better idiot-proof programs, and the universe trying to produce bigger and better idiots. 
So far, the universe is winning. -- Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Midphase Hosting

2010-06-10 Thread Matthias Fechner

Am 10.06.10 15:30, schrieb Matthew Seaman:

Until then, as someone upthread said, block them using your access DB if
you run your own sendmail based mail system.  The equivalents for people
running other MTAs are left as exercises for interested students.  If
you don't have your own mail system, then I suspect that it will be
quite hard for you to arrange to block the e-mail from midphase.
   


is it possible to get there hostname/IP-address to some spamer blacklists?
That should solve the problem for a lot of people.

Bye,
Matthias

--
Programming today is a race between software engineers striving to build bigger and 
better idiot-proof programs, and the universe trying to produce bigger and better idiots. 
So far, the universe is winning. -- Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: davical upgrade problem

2010-06-09 Thread Matthias Fechner

Hi,

Am 09.06.10 14:31, schrieb n dhert:

---   Upgrading 'davical-0.9.8.4' to 'davical-0.9.9' (www/davical)
---   Build of www/davical started at: Tue, 08 Jun 2010 06:48:38 +0200
---   Building '/usr/ports/www/davical'
===   Cleaning for davical-0.9.9
Unknown extension pdo_pgsql for PHP 52.
   


have you installed the paket: php5-pdo_pgsql?

Bye,
Matthias

--
Programming today is a race between software engineers striving to build bigger and 
better idiot-proof programs, and the universe trying to produce bigger and better idiots. 
So far, the universe is winning. -- Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: davical upgrade problem

2010-06-09 Thread Matthias Fechner

Hi,

Am 10.06.10 07:12, schrieb n dhert:
I have not php5-pdo_pgsql-5.3.2_1 on mystem since this is for PHP5 
version 3.x, not for PHP5 version 2.x, which is the version of PHP I 
use on my system... Two months ago PHP5-3.2 was automatically 
installed as part of my daily portupgrades, but users on my 
(multiuser) system immediatly had a myriad of error messages, since 
they have applications that use PHP 5.2 instead of 5.3... I was forced 
to revert to PHP 5.2

But I do have on my system:
# pkg_info | grep pdo_
php52-pdo_mysql-5.2.13_2 The pdo_mysql shared extension for php
php52-pdo_pgsql-5.2.13_2 The pdo_pgsql shared extension for php
php52-pdo_sqlite-5.2.13_2 The pdo_sqlite shared extension for php
How to make Davical use these?


please always reply to the mailing list and not privat to me, you can 
also use the list reply button from thunderbird.

I have installed the following packages:
php5-pdo-5.3.2_1The pdo shared extension for php
php5-pdo_pgsql-5.3.2_1 The pdo_pgsql shared extension for php
php5-pdo_sqlite-5.3.2_1 The pdo_sqlite shared extension for php

It was running with php5.2 before here, so the version is not a problem.
If the lib is not found check your php configuration (extensions.conf) 
you can also use phpinfo to see if it is loaded, i you do not know I'm 
talking about, use google to learn a little bit about php. :)


And please no ToFu.

Bye,
Matthias

--
Programming today is a race between software engineers striving to build bigger and 
better idiot-proof programs, and the universe trying to produce bigger and better idiots. 
So far, the universe is winning. -- Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: cron not sending emails

2010-05-28 Thread Matthias Fechner

Am 28.05.10 13:42, schrieb Laszlo Nagy:

If I put this into root's crontab

* * * * * echo TEST


a quick guess, you have a line like:
MAILTO=address

Bye,
Matthias

--
Programming today is a race between software engineers striving to build bigger and 
better idiot-proof programs, and the universe trying to produce bigger and better idiots. 
So far, the universe is winning. -- Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: PHP upgrade fails

2010-05-21 Thread Matthias Fechner

Hi,

Am 21.05.10 02:23, schrieb Zbigniew Szalbot:

I think something is wrong. It may be that I upgraded the wrong php
port? My initial command was portupgrade php\*
   


it is always a good advice to check /usr/ports/UPDATING before you start 
upgrading anything, there is a manual in how to upgrade php to version 
5.3 without problems (as far your application runs with 5.3).


Bye,
Matthias

--
Programming today is a race between software engineers striving to build bigger and 
better idiot-proof programs, and the universe trying to produce bigger and better idiots. 
So far, the universe is winning. -- Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Apache web server being attacked

2010-05-18 Thread Matthias Fechner

Hi,

Am 19.05.10 05:00, schrieb Aiza:
Where do I find documentation on how to enable and use apache mods 
rewrite and redirect?


have you tried the apache.org website?
There is a lot of information and examples available:
http://httpd.apache.org/docs/2.2/mod/mod_rewrite.html

Also google helps a lot answering this questions or find examples.

Bye,
Matthias

--
Programming today is a race between software engineers striving to build bigger and 
better idiot-proof programs, and the universe trying to produce bigger and better idiots. 
So far, the universe is winning. -- Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Automatic Way to Tell if a FreeBSD system is 64 or 32-bit?

2010-03-16 Thread Matthias Fechner
Hi,

Am 16.03.2010 18:02, schrieb Martin McCormick:
   Is there a FreeBSD command similar to the Linux arch
 command?

have you tried:
uname -p

Bye
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Thousands of ssh probes

2010-03-05 Thread Matthias Fechner

Hi,

Am 05.03.10 17:01, schrieb Matthew Seaman:

table ssh-bruteforce persist
[...near the top of the rules section...]
block drop in log quick on $ext_if fromssh-bruteforce

[...later in the rules section...]
pass in on $ext_if proto tcp  \
  from any to $ext_if port ssh \
  flags S/SA keep state\
  (max-src-conn-rate 3/30, overloadssh-bruteforce  flush global)
   


that is dangarous, if you use subversion over ssh you will sometimes get 
more then 10 requests in 30 seconds.

That means you will also block users they are allowed to connect.

Gruss,
Matthias

--
Programming today is a race between software engineers striving to build bigger and 
better idiot-proof programs, and the universe trying to produce bigger and better idiots. 
So far, the universe is winning. -- Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Thousands of ssh probes

2010-03-05 Thread Matthias Fechner
Hi,

Am 05.03.2010 18:10, schrieb John:
 I have just switched to pf from ipfw, so I am still learning the
 nuances and style points.

I switched now to security/sshguard-pf.
It works perfectly and blocks also via pf.
Blocking is working there with:

table sshguard persist
block in log quick proto tcp from sshguard to any label ssh
bruteforce probability 85%

So I let 15% of the pakets through in the hope that will slow down this
brute force attacks and I can protect in this step other hosts.
Hopefully the attacker keeps then longer in my tarpit.

Bye
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Hilfe: Upgrade von 7-Stable auf 8-Stable fehlgeschlagen

2009-12-07 Thread Matthias Fechner
Hallo Christoph,

Christoph Sold wrote:
 Stimmt. Meist geht's ja gut, diesmal nicht. Ideen?

du kannst versuchen den neuen Kernel zu booten, allerdings besteht die
Gefahr das du dich dann nicht mehr einloggen kannst.

Ich würde dir empfehlen, setze bei dir daheim ein FreeBSD 7 auf und mach
das Update genauso wie auf deinem Server, dann kannst du damit ohne
Risiko einige Sachen probieren.

Gruss
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Warning: PHP Update from 5.2.10 to 5.2.11 and FastCGI

2009-09-26 Thread Matthias Fechner
Hi Michael,

Michael Powell schrieb:
 patch I got. I use cvsup11 because it closest to me (in the Verizon 
 datacenter in Ashland, Va.) but I have had that server go stale before. 
 Might try csupping ports again from something a little higher up in the 
 hierarchy.

why not using portsnap?

Bye
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: PHP5 and ldap

2009-02-26 Thread Matthias Fechner

Hi Pieter,

Pieter Donche wrote:

---  Skipping 'x11/kde3' (kde-3.5.10_1) because a requisite package 'kdegraphi
cs-3.5.10' (graphics/kdegraphics3) failed (specify -k to force)
** Listing the failed packages (-:ignored / *:skipped / !:failed)
 ! graphics/kdegraphics3 (kdegraphics-3.5.10)(configure error)
 * x11/kde3 (kde-3.5.10_1)


it seems that only this two packages failed to build.
So a
portupgrade -f kdegraphics3 kde3
should be enough.

Bye,
Matthias

--
Programming today is a race between software engineers striving to 
build bigger and better idiot-proof programs, and the universe trying to 
produce bigger and better idiots. So far, the universe is winning. -- 
Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: PHP5 and ldap

2009-02-24 Thread Matthias Fechner

Hi Pieter,

Pieter Donche wrote:

Since yesterday, I get at

$ php --version
PHP Warning:  PHP Startup: Unable to load dynamic library 
'/usr/local/lib/php/20060613/ldap.so' - Shared object libldap-2.4.so.5 not 
found, required by ldap.so in Unknown on line 0


have you upgrade openldap the last days (i expect yes)?
If yes, read the /usr/ports/UPDATING

Bye,
Matthias

--
Programming today is a race between software engineers striving to 
build bigger and better idiot-proof programs, and the universe trying to 
produce bigger and better idiots. So far, the universe is winning. -- 
Rich Cook


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: problem when building dovecot-sieve with the new dovecot port

2008-06-29 Thread Matthias Fechner

Hi Nicolas,

Nicolas Letellier wrote:
I'm upgrading my dovecot from 1.0.14 to 1.1. 
I pkg_deinstall my dovecot and my dovecot-sieve.


you must use a new version of dovecot-sieve too, see that bug report:
http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/125064

After I manually patched my port it built fine.

Bye,
Matthias

--
Programming today is a race between software engineers striving to 
build bigger and better idiot-proof programs, and the universe trying to 
produce bigger and better idiots. So far, the universe is winning. -- 
Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Off Topic: Sunbird calendar server?

2008-06-27 Thread Matthias Fechner

Hi Jack,

Jack Barnett wrote:
This is a bit off topic, but does anyone know of a Calendar Server 
that is compatible with Sunbird?


you can try that one:
http://rscds.sourceforge.net/

I access it from Sunbird/Lightning from Windows and Linux and with iCal 
from MacOSX. I can work offline with it and iCal synchronizes then the 
changes. Works really great.

I also include some ical files like holidays from my webserver to lightning.

Bye,
Matthias

--
Programming today is a race between software engineers striving to 
build bigger and better idiot-proof programs, and the universe trying to 
produce bigger and better idiots. So far, the universe is winning. -- 
Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD as VOIP PBX

2008-06-20 Thread Matthias Fechner

Hi Thomas,

Thomas Mullins wrote:

Is anyone using FreeBSD for their VOIP PBX needs?  If so, what software
are you using?  And any recommendations for software to look at would be
greatly appreciated.


I have here asterisk (from the port) running with 2 ISDN cards (HFC) 
using ISDN4BSD with capi.

The computer makes the connections from
external ISDN, SIP, IAX2 - internal ISDN, SIP, IAX2.

Works for more then 2 years absolutly stable.

Best regards,
Matthias

--
Programming today is a race between software engineers striving to 
build bigger and better idiot-proof programs, and the universe trying to 
produce bigger and better idiots. So far, the universe is winning. -- 
Rich Cook


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Uninstall Webmin

2008-05-24 Thread Matthias Fechner

Hi Ruel,

Ruel Luchavez wrote:

Guys, how do you uninstall the setup of webmin (setu.sh)? i allready search
all the directory of
my webmin but i cant find the unistall.sh?


why not use:
pkg_delete webmin-1.410_1

Bye
Matthias

--

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Source Upgrade to FreeBSD 7 fails

2008-03-19 Thread Matthias Fechner

Hi Mel,

Mel wrote:
libssl.so.4, needed by 
/usr/local/lib/libldap.so, not found 


hm, the first mail was blocked:
   - The following addresses had permanent fatal errors -
[EMAIL PROTECTED]
(reason: 554 5.7.1 [EMAIL PROTECTED]: Recipient 
address rejected: Access denied)


hopefully that Mail goes through (send it by mistack directly to you and 
not over the mailinglist).


Thanks a lot for your help, I disabled no the WITH_OPENLDAP in my 
make.conf and everything build fine (first mail with FreeBSD 7).


I rechecked the option now and find out that I added the option 
WITH_OPENLDAP a long time ago with combination of exim, but with postfix 
it isn't necessary anymore so I removed it from the make.conf.


Best regards,
Matthias

--

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Source Upgrade to FreeBSD 7 fails

2008-03-13 Thread Matthias Fechner

Hi Mel,

Mel schrieb:

How ever did you get something in /usr/src looking for /usr/local/lib/*?


hm not really. I deleted now /usr/src and /usr/obj, did a fresh cvsup 
and got the same error message.



What's in /etc/make.conf please?


hm, that is a bit longer but here:
CPUTYPE?=i686
CFLAGS= -O1 -pipe
FETCH_ENV= FTP_PASSIVE_MODE=\yes\
USA_RESIDENT=NO
HAVE_MOTIF=yes
CUPS_OVERWRITE_BASE=yes
WITH_CUPS=yes
NO_LPR=yes
WITH_MUTT_COMPRESSED_FOLDERS=yes
WITH_MUTT_NCURSES=yes
WITH_MUTT_IMAP=yes
WITH_MUTT_POP=yes
WITH_MUTT_SSL=yes
WITH_MUTT_QUOTE_PATCH=yes
WITH_MUTT_PGP_PATCH=yes
WITH_MUTT_MBOX_HOOK_PATCH=yes
WITH_MUTT_IMAP_HEADER_CACHE=yes
WITH_MUTT_SIDEBAR_PATCH=yes
WITH_MUTT_EDIT_THREADS=yes
WITH_MUTT_REVERSE_REPLY_PATCH=yes
ASPELL_DE=yes
ASPELL_EN=yes
WITH_APACHE2=yes
WITH_BERKELEYDB=db42
WITH_PROXY_MODULES=yes
WITH_SSL_MODULES=yes
NET_SNMP_SYS_CONTACT=[EMAIL PROTECTED]
NET_SNMP_SYS_LOCATION=Keller
DEFAULT_SNMP_VERSION=3
NET_SNMP_LOGFILE=/var/log/snmpd.log
NET_SNMP_PERSISTENTDIR=/var/net-snmp
WITH_PERL=yes
WITH_SLAPI=yes
WITH_BDB_VER=42
A4=yes
ISPELL_DENEU=yes
WITH_OPENLDAP=yes
WITH_CONTENT_SCAN=yes
WEBALIZER_LANG=german
INSTALL_AS_NCFTP=yes
ENABLE_SUIDPERL=yes
WITH_MOD_DAV_SVN=yes
WITH_CRAM=yes
PAGESIZE=a4
WITH_SUID_GPG=yes
WEBSVNDIR=../home/http/svn/htdocs
WITH_SCPONLY_SVN=yes
WITH_SCPONLY_SVNSERVE=yes
RUBY_VER=1.8
DRIVER_MANAGER=unixodbc
DEFAULT_CVS_SERVER=:pserver:[EMAIL PROTECTED]:/home/ncvs
WITHOUT_WEB=YES
WITH_LINUX_BOOTSTRAP=YES
FETCH_CMD=/usr/bin/fetch -ARr
WITH_PHP5=YES
PAPERSIZE=a4
PERL_VER=5.8.8
PERL_VERSION=5.8.8


Bye,
Matthias

--
Programming today is a race between software engineers striving to 
build bigger and better idiot-proof programs, and the universe trying to 
produce bigger and better idiots. So far, the universe is winning. -- 
Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Source Upgrade to FreeBSD 7 fails

2008-03-12 Thread Matthias Fechner

Hi,

I cvsup the RELENG_7_0 tree today and tried to build the system with 
make buildworld but I got the following error message:
cc -O1 -pipe -march=pentiumpro 
-I/usr/src/kerberos5/libexec/ipropd-master/../../../crypto/heimdal/lib/krb5 
-I/usr/src/kerberos5/libexec/ipropd-master/../../../crypto/heimdal/lib/asn1 
-I/usr/src/kerberos5/libexec/ipropd-master/../../../crypto/heimdal/lib/roken 
 -I. -I/usr/local/include -DOPENLDAP=1 -DHAVE_CONFIG_H 
-I/usr/src/kerberos5/libexec/ipropd-master/../../include 
-L/usr/local/lib -Wl,-rpath,/usr/local/lib -o ipropd-master 
ipropd_master.o -lkadm5srv -lhdb -lkrb5 -lroken 
/usr/obj/usr/src/kerberos5/libexec/ipropd-master/../../lib/libvers/libvers.a 
 -lasn1 -lcrypto -lcrypt -lcom_err -lldap -llber
/usr/obj/usr/src/tmp/usr/bin/ld: warning: libssl.so.4, needed by 
/usr/local/lib/libldap.so, not found (try using -rpath or -rpath-link)
/usr/obj/usr/src/tmp/usr/bin/ld: warning: libcrypto.so.4, needed by 
/usr/local/lib/libldap.so, not found (try using -rpath or -rpath-link)
/usr/local/lib/libldap.so: undefined reference to 
`SSL_CTX_set_tmp_rsa_callback'

...
*** Error code 1

Stop in /usr/src/kerberos5/libexec/ipropd-master.
*** Error code 1

How can I solve that?

Thanks,
Matthias

--

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Autoattach geli device but not at startup

2007-11-09 Thread Matthias Fechner
Hi RW,

RW wrote:
 I think it would just be easier to write a script to handle the
 attach, fsck, and mount. 

yeah, seems to be the best solution, thx for the tip.

Bye
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Autoattach geli device but not at startup

2007-11-07 Thread Matthias Fechner
Hi,

I have here a setup where some backup directories are mounted
encrypted (using geli).
rc.conf:
geli_devices=ad3
geli_ad3_flags=-k /root/backup1.key
...

But if the system must be rebooted it asks for the password before a
network connection is available.
The computer has no keyboard via default so it is really a pain to get
the system up again.

Is their a possibility to do something like that after the reboot:
mount /mnt/backup1
and mount starts geli and geli will ask for the passphrase?

Thanks,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Own Install CD with custom kernel

2007-09-16 Thread Matthias Fechner
Hi,

I'm working currently on a custom FreeBSD install CD with included I4B.
But I have my problems and every try takes about 8 hours to rebuild
the CDs again so hopefully I'll get some help here to speed it up a
little :)

What I did:
Prepared my environment like (checkout cvs, copy files, created patch
etc. - default FreeBSD CD builds fine)

It seems that sysinstall will not install per default the new kernel.
For a non SMP system (like mine) it is I4B.
So it seems to me that I must change /usr/src/usr.sbin/sysinstall to
do this. I attached the patch to this email.

cd /usr/src/release
make release CHROOTDIR=/home/storage/ownfreebsd BUILDNAME=FreeBSD-I4B \
CVSROOT=/home/storage/ncvs RELEASETAG=RELENG_6 MAKE_ISOS=1 \
KERNEL_FLAGS=-j4 WORLD_FLAGS=-j4 \
LOCAL_PATCHES=/root/patch.diff PATCH_FLAGS=-p1 \
KERNELS=I4B I4BSMP GENERIC SMP |tee /root/build.log

Then I execute the make release command and some hours later I got all
the ISO I need to install my new system.

Ok so far so good. Now I booted with the new created ISO and try to
install from it. I checked if the right kernel is select in the
distribution selection and yes that is fine.
But at the installation itself it seems that sysinstall is not copying
the kernel to the right place. I got the following message (debugging
messages in sysinstall are enabled):
DEBUG: installFixupKernel: Install I4B kernel
DEBUG: Executing command 'mv /boot/I4B /boot/kernel'
mv: rename /boot/I4B to /boot/kernel: No such file or directory
DEBUG: Command 'mv /boot/I4B /boot/kernel' ressturns status of 1

I checked now the the installed system and there is absolutly no kernel
installed. (no /boot/GENERIC, no /boot/I4B or anything else)

I'm sure that I must oversaw something in sysinstall to change but I
cannot find it.
What must I change now that sysinstall install my custom kernel?

Thx a lot for help!

Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
diff -Nur src.orig/usr.sbin/sysinstall/Makefile src/usr.sbin/sysinstall/Makefile
--- src.orig/usr.sbin/sysinstall/Makefile	2006-03-11 19:52:47.0 +0100
+++ src/usr.sbin/sysinstall/Makefile	2007-09-05 07:38:50.0 +0200
@@ -50,6 +50,9 @@
 .if exists(${.CURDIR}/../../sys/${MACHINE}/conf/SMP)
 CFLAGS+=-DWITH_SMP	
 .endif
+.if exists(${.CURDIR}/../../sys/${MACHINE}/conf/I4B)
+CFLAGS+=-DWITH_I4B	
+.endif
 DPADD+=	${LIBDEVINFO}
 LDADD+=	-ldevinfo
 .endif
diff -Nur src.orig/usr.sbin/sysinstall/dist.c src/usr.sbin/sysinstall/dist.c
--- src.orig/usr.sbin/sysinstall/dist.c	2007-03-30 21:21:56.0 +0200
+++ src/usr.sbin/sysinstall/dist.c	2007-09-06 01:37:43.0 +0200
@@ -100,8 +100,16 @@
 static Distribution KernelDistTable[] = {
 DTE_TARBALL(GENERIC,  KernelDists, KERNEL_GENERIC, /boot),
 #ifdef WITH_SMP
+#ifdef WITH_I4B
+DTE_TARBALL(I4BSMP,   KernelDists, KERNEL_I4BSMP,  /boot),
+#else
 DTE_TARBALL(SMP, 	KernelDists, KERNEL_SMP,	  /boot),
 #endif
+#else
+#ifdef WITH_I4B
+DTE_TARBALL(I4B,  KernelDists, KERNEL_I4B, /boot),
+#endif
+#endif
 DTE_END,
 };
 
@@ -216,11 +224,19 @@
 selectKernel(void)
 {
 #ifdef WITH_SMP
+#ifdef WITH_I4B
+return DIST_KERNEL_I4B;
+#else
 /* select default kernel based on deduced cpu count */
 return NCpus  1 ? DIST_KERNEL_SMP : DIST_KERNEL_GENERIC;
+#endif
+#else
+#ifdef WITH_I4B
+return DIST_KERNEL_I4B;
 #else
 return DIST_KERNEL_GENERIC;
 #endif
+#endif
 }
 
 int
diff -Nur src.orig/usr.sbin/sysinstall/dist.h src/usr.sbin/sysinstall/dist.h
--- src.orig/usr.sbin/sysinstall/dist.h	2006-03-11 19:52:47.0 +0100
+++ src/usr.sbin/sysinstall/dist.h	2007-09-06 01:31:31.0 +0200
@@ -74,6 +74,8 @@
 /* Subtypes for KERNEL distribution */
 #define DIST_KERNEL_GENERIC	0x1
 #define DIST_KERNEL_SMP		0x2
+#define DIST_KERNEL_I4B		0x4
+#define DIST_KERNEL_I4BSMP	0x8
 #define DIST_KERNEL_ALL		0xF
 
 /* Canned distribution sets */
diff -Nur src.orig/usr.sbin/sysinstall/install.c src/usr.sbin/sysinstall/install.c
--- src.orig/usr.sbin/sysinstall/install.c	2006-12-31 19:34:58.0 +0100
+++ src/usr.sbin/sysinstall/install.c	2007-09-15 09:27:35.0 +0200
@@ -910,13 +910,30 @@
 	 * NB: we assume any existing kernel has been saved
 	 * already and the /boot/kernel we remove is empty.
 	 */
+	msgDebug(installFixupKernel: Remove /boot/kernel\n);
 	vsystem(rm -rf /boot/kernel);
-#if WITH_SMP
-	if (dists  DIST_KERNEL_SMP)
+
+	msgDebug(installFixupKernel: Checking for SMP and I4B\n);
+	if (dists  DIST_KERNEL_I4BSMP)
+	{
+		msgDebug(installFixupKernel: Install I4BSMP kernel\n);
+		vsystem(mv /boot/I4BSMP /boot/kernel);
+	}
+	else if (dists  DIST_KERNEL_SMP)
+	{
+		msgDebug(installFixupKernel: Install SMP kernel\n);
 		vsystem(mv /boot/SMP /boot/kernel);
+	}
+	else if (dists  DIST_KERNEL_I4B)
+	{
+		msgDebug(installFixupKernel: 

Re: im new with pf

2007-05-31 Thread Matthias Fechner
Hello Jonathan,

* Jonathan Horne [EMAIL PROTECTED] [30-05-07 19:19]:
 like i said, i need to allow local (and me, trusted) to anything, and anyone 
 else just access to 25, 80 and 443.  thanks for any critiques and ideas.

you can try security/fwbuilder a nice tool to build firewalls and
administrate them. It can compile the rules for several systems
including pf.

Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Apache Rotate Logs and Log Rotate

2007-02-15 Thread Matthias Fechner
Hi Peter,

Peter Pluta wrote:
 Any feedback, suggestions, or comments would be greatly appreciated.

you can use newsyslog for this, see man newsyslog.conf for more details.
I use e.g. the following line:
/home/http/*/logs/*.log 664  72*$M1D0 JG  /var/run/httpd.pid


Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Sendmail and smtp-auth against passwd

2006-11-28 Thread Matthias Fechner
Hi,

* Vince [EMAIL PROTECTED] [27-11-06 11:03]:
 define(`confAUTH_MECHANISMS', `LOGIN PLAIN DIGEST-MD5 CRAM-MD5')
 TRUST_AUTH_MECH(`LOGIN PLAIN DIGEST-MD5 CRAM-MD5')

thx for all the answers even the PMs I got.
I found the problem now:
The problem is/was if you have the two lines:
define(confAUTH_MECHANISMS', LOGIN PLAIN DIGEST-MD5 CRAM-MD5')
TRUST_AUTH_MECH(LOGIN PLAIN DIGEST-MD5 CRAM-MD5')

sendmail uses the sasldb for authentification but if you replace them
with:
define(confAUTH_MECHANISMS',PLAIN LOGIN')dnl
TRUST_AUTH_MECH(PLAIN LOGIN')dnl

everythings works fine.

So it is necessary to disable strong authentification. It seems that
the saslauthd cannot handle it :(

Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Sendmail and smtp-auth against passwd

2006-11-26 Thread Matthias Fechner
Hi,

i tried to get smtp-auth against the pass working but it is not
work. I must add users with saslpasswd2 to the sasldb but I want to
auth my smtp users with there normal password without the need to
add them to an additional db.

What I did is:
Installed sasl2authd from the ports.

/etc/make.conf:
# Add SMTP AUTH support to Sendmail
SENDMAIL_CFLAGS+=   -I/usr/local/include -DSASL=2
SENDMAIL_LDFLAGS+=  -L/usr/local/lib
SENDMAIL_LDADD+=-lsasl2
# Enable smtps for sendmail
SENDMAIL_CFLAGS+= -D_FFR_SMTP_SSL
SENDMAIL_MILTER_IN_BASE=yes
And recompiled sendmail in base.

Edit /usr/local/lib/sasl2/Sendmail.conf:
pwcheck_method: saslauthd

Enabled saslauth in rc.conf and start it:
saslauthd_enable=yes
saslauthd_flags=-a getpwent

Edited my .mc file:
dnl Enable smpt-auth
FEATURE(authinfo')
define(confDONT_BLAME_SENDMAIL',GroupReadableSASLDBFile')dnl
define(confAUTH_MECHANISMS',LOGIN GSSAPI DIGEST-MD5 CRAM-MD5')dnl
define(confRUN_AS_USER',root:mail')dnl

But it seems to me that sendmail isn't using saslauth instead it uses
directly the sasldb so all thinks I configured in sasl2authd is useless.

Has someone smtp-auth with sendmail against passwd running?

Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Problem with pf - bug?

2006-10-02 Thread Matthias Fechner
Hi,

I added the following rules to my config for pf:
table bruteforce persist file /usr/local/firewall/bruteforce
block in   log  quick inet  from bruteforce  to any  label RULE 1 \
-- DROP 
pass in   log  quick inet proto tcp  from any  to any port 22 flags \
S/AS modulate state  (  max-src-conn 100 max-src-conn-rate 5/10,
overload \
bruteforce flush global )  label RULE 2 -- ACCEPT 

If I load the rules everything is fine but if I restart/reload the
rules with the command (sudo /etc/rc.d/pf restart) the PC hangup
compeletely. CTRL+ALT+del has no effect the only why to get the PC
running again is pressing the reset button and do a manual filesystem
check.

Can anyone please help me?

Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: BSDstats: Just added - Vendor Stats

2006-08-28 Thread Matthias Fechner
Hello Marc,

* Marc G. Fournier [EMAIL PROTECTED] [26-08-06 22:43]:
 Figuring that for the purposes of these stats, driver stats might be too 
 fine, I've just added a page breaking down hardware use by Vendor, 
 eliminating the driver ... (ie. 161 3com devices in use, etc) ... there is 
 a bug in the stats query used for this one, where I'm showing some 'blank 
 lines' for devices ... not sure if its a missing device in pci_dev.txt or 
 not, will investigate further ...

is it possible to see what the program transmit?
I can only see that it transfers anything but not what.

Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Simple DNS Configuration

2006-07-25 Thread Matthias Fechner
Hello David,

* David Stanford [EMAIL PROTECTED] [25-07-06 02:50]:
 www  IN  A   66.246.140.170

you can also write:
www IN   CNAME  chadwick.daemonbox.net.

so if the IP address changes you must only edit one line.

Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Simple DNS Configuration

2006-07-24 Thread Matthias Fechner
Hi David,

David Stanford wrote:
 Now it appears to be working correctly and responding to queries, however
 I'm noticing I continue to get that same error when I add my CNAME entry:
 =
 @  IN   CNAMEwww.example.org.
 =

write:
www IN  CNAME   example.org.



Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Problem compiling devel/newt

2006-07-16 Thread Matthias Fechner
Hi,

I tried to compile devel/newt today, but I got the following errormessage:
---cut---

cc -O1 -pipe -march=pentiumpro -I/usr/local/include -I/usr/local/include
-c scale.c
cc -O1 -pipe -march=pentiumpro -I/usr/local/include -I/usr/local/include
-c grid.c
cc -O1 -pipe -march=pentiumpro -I/usr/local/include -I/usr/local/include
-c windows.c
cc -O1 -pipe -march=pentiumpro -I/usr/local/include -I/usr/local/include
-c buttonbar.c
cc -O1 -pipe -march=pentiumpro -I/usr/local/include -I/usr/local/include
-c checkboxtree.c
ar q libnewt.a newt.o button.o form.o checkbox.o entry.o label.o
listbox.o  scrollbar.o textbox.o scale.o grid.o windows.o buttonbar.o
checkboxtree.o
ar: creating libnewt.a
ranlib libnewt.a
cc -O1 -pipe -march=pentiumpro -I/usr/local/include -I/usr/local/include
-c test.c
cc -g  -L/usr/local/lib -L/usr/local/lib -o test test.o libnewt.a
-lslang -lm -lpopt -lncurses -static
/usr/local/lib/libslang.a(sldisply.o)(.text+0x2bdc): In function
`SLtt_tgetstr':
: undefined reference to `tgetstr'
/usr/local/lib/libslang.a(sldisply.o)(.text+0x2c3b): In function
`SLtt_tgetnum':
: undefined reference to `tgetnum'
/usr/local/lib/libslang.a(sldisply.o)(.text+0x2c6b): In function
`SLtt_tgetflag':
: undefined reference to `tgetflag'
/usr/local/lib/libslang.a(sldisply.o)(.text+0x2e83): In function
`SLtt_initialize':
: undefined reference to `tgetent'
*** Error code 1

Stop in /usr/ports/devel/newt/work/newt-0.51.0.
*** Error code 1

Stop in /usr/ports/devel/newt.
---cut---

I have FreeBSD 6.1 running.
Is the port broken? I have checked bugs.freebsd.org but could not found
any bug reported for this port with this errormessage.

Thx for help,
Matthias
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ppp not starting at boot

2006-06-21 Thread Matthias Fechner
Hello Michael,

* Michael P. Soulier [EMAIL PROTECTED] [20-06-06 19:32]:
 # Enable PPPoE
 ppp_enable=YES
 ppp_mode=ddial
 ppp_nat=YES
 ppp_profile=storm
 
 Is this not correct? Should this not cause ppp to be started, using the
 storm profile, at boot?
 
 I had to do it manually via
 
 ppp -ddial storm

I remember that on FreeBSD 6.x the script ppp-user has changed to ppp,
maybe updated without using mergemaster?


Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning. --
Rich Cook


pgpTxRCbFpjIs.pgp
Description: PGP signature


Re: PXE boot jumpstarting

2006-04-26 Thread Matthias Fechner
Hello Erik,

* Erik Nrgaard [EMAIL PROTECTED] [25-04-06 20:44]:
 Server went down, power failure I think, at 9.XXam and I wasn't home to
 put it back up.

ah ok :)
Great manual!


Best regards,
Matthias


pgpxvhInyMvK3.pgp
Description: PGP signature


Re: PXE boot jumpstarting

2006-04-25 Thread Matthias Fechner
Hello Erik,

* Erik Nrgaard [EMAIL PROTECTED] [25-04-06 00:19]:
   http://www.daemonsecurity.com/pub/pxeboot

is it possible, that the side is down?
I got always:
Connection to 81.33.11.59 Failed



Best regards,
Matthias


pgpyrSyWkH2in.pgp
Description: PGP signature


Re: spamassassin build failure

2006-03-26 Thread Matthias Fechner
Hello Michael,

* Michael P. Soulier [EMAIL PROTECTED] [26-03-06 08:19]:
 Nope, I didn't do that. How would I know to do that? :)

reading /usr/ports/UPDATING :)


Best regards,
Matthias


pgpOvxufzBn0e.pgp
Description: PGP signature


Re: Strange HD behavior

2006-03-25 Thread Matthias Fechner
Hello Luiz,

* Luiz Eduardo Guida Valmont [EMAIL PROTECTED] [25-03-06 19:06]:
 Is there an OS agnostic HD diagnose tool that's reliable?
 
 The HD is a Seagate one.

You can try /usr/ports/sysutils/smartmontools and the tool from
seagate itself.


Best regards,
Matthias
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: I could not run this script in /etc/crontab

2006-03-01 Thread Matthias Fechner
Hello Halid,

* Halid Faith [EMAIL PROTECTED] [28-02-06 22:15]:
 I could not run this script in /etc/crontab as below;
 
 */1 *   *   *   *   root/root/thescript
 
 What should I do ?

try a MAILTO=email to get the output back. Maybe you get an error
message which helps to fix the problem.

Best regards,
Matthias
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Upgrade 5.4 to 6.0

2006-02-21 Thread Matthias Fechner
Hello hal,

* hal [EMAIL PROTECTED] [21-02-06 10:45]:
 Is there any reason why I should not upgrade a 5.4
 system to 6.0 as opposed to doing a clean install?

you should not update if you use an active ITK ISDN card with
asterisk. It is not working in FreeBSD 6.

Best regards,
Matthias
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Capi 4 BSD with FreeBSD 6

2006-02-03 Thread Matthias Fechner
Hi,

* Matthias Fechner [EMAIL PROTECTED] [01-02-06 16:04]:
 I have a ITK active ISDN with a PCI Interface.
 I used the card with FreeBSD 5.4 with the description from:
 http://www.shellbang.org/freebsd/introducingc4b.html

is the following card really not supported by FreeBSD 6?

1 controller installed:

Controller 1
 Name:   IX1-Basic-1
 Manufacturer:   ITK - CAPI+ V1.1 (ITK Basic V3.10)
 Number of B-channels:   2
 Global options: 0x0009
 B1 protocol support:0x004f
 B2 protocol support:0x000b
 B3 protocol support:0x0007
   
   
Best regards,
Matthias
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Capi 4 BSD with FreeBSD 6

2006-02-01 Thread Matthias Fechner
Hi,

I have a ITK active ISDN with a PCI Interface.
I used the card with FreeBSD 5.4 with the description from:
http://www.shellbang.org/freebsd/introducingc4b.html

How can i use this active ISDN card with FreeBSD6?

Is the driver from Thomas Wintergerst allready implemented in FreeBSD6?

Thx for help!

Best regards,
Matthias
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


No success with make buildworld

2006-01-29 Thread Matthias Fechner
Hi,

i had checked out the tree RELENG_5 and RELENG_6 and tried to compile
 /usr/src with make buildworld, but I always get the errormessage:

--- cut ---
rpcgen -C -h -o crypt.h /usr/obj/usr/src/i386/usr/include/rpcsvc/crypt.x
rpcgen -C -l -o crypt_clnt.c
/usr/obj/usr/src/i386/usr/include/rpcsvc/crypt.x
rpcgen -C -c -o crypt_xdr.c
/usr/obj/usr/src/i386/usr/include/rpcsvc/crypt.x
rpcgen -C -h -o yp.h /usr/obj/usr/src/i386/usr/include/rpcsvc/yp.x
rpcgen -C -c -o yp_xdr.c /usr/obj/usr/src/i386/usr/include/rpcsvc/yp.x
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/dmisc.c gdtoa_dmisc.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/dtoa.c gdtoa_dtoa.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/gdtoa.c gdtoa_gdtoa.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/gethex.c gdtoa_gethex.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/gmisc.c gdtoa_gmisc.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/hd_init.c gdtoa_hd_init.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/hexnan.c gdtoa_hexnan.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/misc.c gdtoa_misc.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/smisc.c gdtoa_smisc.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/strtoIg.c gdtoa_strtoIg.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/strtod.c gdtoa_strtod.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/strtodg.c gdtoa_strtodg.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/strtof.c gdtoa_strtof.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/strtord.c gdtoa_strtord.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/sum.c gdtoa_sum.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/ulp.c gdtoa_ulp.c
ln -sf /usr/src/lib/libc/../../contrib/gdtoa/strtopx.c gdtoa_strtopx.c
make: don't know how to make atexit.c. Stop
*** Error code 2

Stop in /usr/src/lib.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
zsh: exit 1 make buildworld
--- cut ---

I tried to completly delete the /etc/make.conf and my environment of
the shell is clear, env says:

--- cut ---
TERM=xterm-color
SHELL=/usr/local/bin/zsh
PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/X11R6/bin
HOME=/root
LOGNAME=root
USER=root
PWD=/usr/src
[EMAIL PROTECTED]
PROMPT=%{%}%20..%~%%{%}%(!.#.) %{%}
_=/usr/bin/env
OLDPWD=/usr/local/etc/cvsup
--- cut ---

I tried to compile it from the console with sh as shell too; I got the
same errormessage.
I deleted /usr/src and /usr/obj, but the same errormessage.

Has anyone the same probleme like myself or has a hint for me?

TIA.

Best regards
Matthias

-- 

Programming today is a race between software engineers striving to build
bigger and better idiot-proof programs, and the universe trying to produce
bigger and better idiots. So far, the universe is winning. -- Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: No success with make buildworld

2006-01-29 Thread Matthias Fechner
Hello Garrett,

* Garrett Cooper [EMAIL PROTECTED] [29-01-06 09:15]:
The simple answer to your problem is that you haven't cvsupp'ed all 
 of the sources required to build your system. The more difficult answer 
 is that you need to find out which category you are lacking in order to 
 compile everything. Here's my cvsup file as a basis:

thanks a lot, I found now the problem. It was really a problem of my
cvsup server I had used.
I corrected now the problem on the cvsup-server and everthing is fine
now.

Best regards,
Matthias

-- 

Programming today is a race between software engineers striving to build
bigger and better idiot-proof programs, and the universe trying to produce
bigger and better idiots. So far, the universe is winning. -- Rich Cook
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]