Re: pkgng problem

2013-08-19 Thread Michael W. Lucas
For the archives:

I left the problem alone for a few days, with no changes on my side.

Came back Monday. Tried again. Everything worked on the affected
machines.

==ml

-- 
Michael W. Lucas  -  mwlu...@michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: pkgng problem

2013-08-16 Thread Michael W. Lucas
On Fri, Aug 16, 2013 at 11:23:41AM -0700, Adrian Chadd wrote:
>Have you done a "pkg update" first, just in case you needed to pull in a
>pkgng update?

Yep, tried that.

==ml

-- 
Michael W. Lucas  -  mwlu...@michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: pkgng problem

2013-08-16 Thread Michael W. Lucas
Matt,

Another data point on this:

Machines converted to pkgng a couple weeks ago can install new
packages just fine despite showing the same error. And it looks like
they download the new repo information:

# pkg install sysrc
Updating repository catalogue
digests.txz 100%  997KB 997.1KB/s 997.1KB/s   00:00
packagesite.txz 100% 5530KB   1.4MB/s   1.9MB/s   00:04
pkg: Invalid manifest format: mapping values are not allowed in this contex
Incremental update completed, 0 packages processed:
8292 packages updated, 1115 removed and 129 added.
pkg: No digest falling back on legacy catalog format
packagesite repository catalogue is up-to-date, no need to fetch fresh copy
The following 1 packages will be installed:

Installing sysrc: 5.2

The installation will require 39 kB more space

15 kB to be downloaded

Proceed with installing packages [y/N]: y
sysrc-5.2.txz 100%   16KB  15.8KB/s  15.8KB/s   
00:00
Checking integrity... done
[1/1] Installing sysrc-5.2... done

Machines upgraded to pkgng this week, using the same script as I used
a couple weeks ago, cannot install packages.

# pkg install sysrc
Updating repository catalogue
digests.txz 100%  997KB 997.1KB/s 997.1KB/s   00:00
packagesite.txz 100% 5530KB   2.7MB/s   1.5MB/s   00:02
pkg: Invalid manifest format: mapping values are not allowed in this context
Incremental update completed, 0 packages processed:
0 packages updated, 0 removed and 22568 added.
pkg: No digest falling back on legacy catalog format
packagesite repository catalogue is up-to-date, no need to fetch fresh copy
pkg: No packages matching 'sysrc' has been found in the repositories

Not sure if this supports the "bad repo" theory, but it's interesting.

Thanks,
==ml

-- 
Michael W. Lucas  -  mwlu...@michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: pkgng problem

2013-08-16 Thread Michael W. Lucas

Thanks, Matt.

# pkg -vv | sed -ne '/Repositories/,$p'
Repositories:
  packagesite:
 url: http://pkg-test.freebsd.org/pkg-test-freebsd:9:x86:32/latest
 key:
 enabled: yes
 mirror_type: SRV

Also: 

# pkg -v
1.1.4


==ml

-- 
Michael W. Lucas  -  mwlu...@michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


pkgng problem

2013-08-16 Thread Michael W. Lucas
Hi,

I'm sure someone has had this before, but I can't find any reference
to it.

# pkg upgrade
Updating repository catalogue
digests.txz 100%  997KB 997.1KB/s 997.1KB/s   00:00
packagesite.txz 100% 5530KB   1.8MB/s   3.2MB/s   00:03
pkg: Invalid manifest format: mapping values are not allowed in this context
Incremental update completed, 0 packages processed:
0 packages updated, 0 removed and 22568 added.
pkg: No digest falling back on legacy catalog format
packagesite repository catalogue is up-to-date, no need to fetch fresh copy
Nothing to do

This is from a machine freshly converted to pkgng.

Any suggestions?

Thanks,
==ml

-- 
Michael W. Lucas  -  mwlu...@michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: PAM confusion

2011-12-13 Thread Michael W. Lucas
On Mon, Dec 12, 2011 at 03:34:28PM -0600, Reid Linnemann wrote:
> On Thu, Dec 8, 2011 at 10:45 AM, Michael W. Lucas
>  wrote:
> > Hi,
> >
> > I'm attempting to hook security/pam_ssh_agent_auth into sudo, and have
> > learned that PAM doesn't work the way I thought it did.
> >
> > I'm running FreeBSD-9/i386, with sudo 1.7.2.6.
> >
> > My goal is that sudo pass all auth requests back to the users' SSH
> > agent. ?Sudo should never use passwords for authentication. If the
> > user doesn't have an SSH agent, or if the SSH agent breaks somehow,
> > the sudo request is denied.
> >
> > With my current config, sudo requests are accepted without a password
> > even if the users' environment has no $SSH_AUTH_SOCK. I'm obviously
> > doing something wrong.
> >
> > Here's my pam.d/sudo. I removed password settings and required the
> > pam_ssh_agent_auth library.
> >
> > ---
> > #auth ? ? ? ? ? include ? ? ? ? system
> > auth ? ? ? ? ? ?required ? ? ? ?/usr/local/lib/pam_ssh_agent_auth.so 
> > file=~/.ssh/authorized\
> > _keys
> >
> > # account
> > account ? ? ? ? include ? ? ? ? system
> >
> > # session
> > # XXX: pam_lastlog (used in system) causes users to appear as though
> > # they are no longer logged in in system logs.
> > session ? ? ? ? required ? ? ? ?pam_permit.so
> >
> > # password
> > #password ? ? ? include ? ? ? ? system
> > ---
> >
> > Any suggestions what I'm doing wrong?
> >
> > Thanks,
> > ==ml
> >
> > --
> > Michael W. Lucas
> > http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
> > Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
> > mwlu...@blackhelicopters.org, Twitter @mwlauthor
> 
> Make sure your sudoers file has
> 
> Defaults env_keep += "SSH_AUTH_SOCK"
> 
> Also, make sure your matching rule for your user doesn't have NOPASSWD
> set. It seems that since you've already authenticated to the system,
> sudo still knows the user and/or group credentials without the pam
> module's help - all it does is authenticate the public and private
> keys. If you have NOPASSWD, sudo doesn't even think it needs to refer
> to the authentication mechanism because according to sudoers it needs
> no password for the user issuing the request.

Hi,

Thanks for answering!

Turns out my problem was that sudo caches the last time the user
authenticated.

For future reference, I blogged how to set this up at
http://blather.michaelwlucas.com/archives/1106

==ml

-- 
Michael W. Lucas
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
mwlu...@blackhelicopters.org, Twitter @mwlauthor
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


PAM confusion

2011-12-08 Thread Michael W. Lucas
Hi,

I'm attempting to hook security/pam_ssh_agent_auth into sudo, and have
learned that PAM doesn't work the way I thought it did.

I'm running FreeBSD-9/i386, with sudo 1.7.2.6.

My goal is that sudo pass all auth requests back to the users' SSH
agent.  Sudo should never use passwords for authentication. If the
user doesn't have an SSH agent, or if the SSH agent breaks somehow,
the sudo request is denied.

With my current config, sudo requests are accepted without a password
even if the users' environment has no $SSH_AUTH_SOCK. I'm obviously
doing something wrong.

Here's my pam.d/sudo. I removed password settings and required the
pam_ssh_agent_auth library.

---
#auth   include system
authrequired/usr/local/lib/pam_ssh_agent_auth.so 
file=~/.ssh/authorized\
_keys

# account
account include system

# session
# XXX: pam_lastlog (used in system) causes users to appear as though
# they are no longer logged in in system logs.
session requiredpam_permit.so

# password
#password   include system
---

Any suggestions what I'm doing wrong?

Thanks,
==ml

-- 
Michael W. Lucas
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
mwlu...@blackhelicopters.org, Twitter @mwlauthor
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: em0 NIC slow on 8.2-p1 amd64?

2011-07-22 Thread Michael W. Lucas
On Fri, Jul 22, 2011 at 04:15:11PM -0400, Mike Tancsa wrote:
> On 7/22/2011 4:10 PM, Michael W. Lucas wrote:
> > 
> > 
> > 3.65  419155.4
> 
> Thats 400Mb/s no ?   Whats the CPU in this thing ? Also your NIC version
> was 7.1.9.  RELENG_8 has 7.2.3. Can you try that version if possible ?

 I sit corrected, decimal point error. My apologies, long
day here.

For the CPU, 400Mbs isn't bad.

CPU: Intel(R) Celeron(R) CPU  420  @ 1.60GHz (1600.01-MHz K8-class CPU)
  Origin = "GenuineIntel"  Id = 0x10661  Family = 6  Model = 16  Stepping = 1
  
Features=0xafebfbff
  Features2=0xe31d
  AMD Features=0x20100800
  AMD Features2=0x1
  TSC: P-state invariant

My ~30MB/s from applications is roughly 240Mb/s. 

Will applications such as NFS cut bandwith usage that much?

I'll try the newer driver.


> > So no, I'm not saturating this network. Not even close. I have a
> > machine with a 100Mbs vr0 that can spit out twice that much.
> 
> How could FastE nics do 800Mb/s ?

Same decimal point error. It's clearly time for me go home.

Thanks,
==ml

-- 
Michael W. Lucas
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
mwlu...@blackhelicopters.org, Twitter @mwlauthor
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: em0 NIC slow on 8.2-p1 amd64?

2011-07-22 Thread Michael W. Lucas

On Fri, Jul 22, 2011 at 03:46:06PM -0400, Mike Tancsa wrote:
> On 7/22/2011 3:08 PM, Michael W. Lucas wrote:
> > 
> > Basically the same.  I don't think it's disk.
> 
> Are you able to saturate the ethernet ?  Try something like
> 
> 
> /usr/src/tools/tools/netrate/netblast/netblast
> 
> on the local ethernet and see if you can generate and receive a full
> gigabit on the wire

Very helpful, thank you. Copied ifstat and netblast from an 8.0 box to
the freenas box, and started firing traffic at a machine on the local
network.

./netblast x.x.x.x 500 250 10

start: 1311364875.158297086
finish:1311364885.158882731
send calls:1826947
send errors:   11
approx send rate:  182693
approx error rate: 0

ifstat -b -i em0 shows:

   17.84  214390.1
3.65  419155.4
4.12  418916.4
3.65  419466.2
  410.14  417715.7
5.06  418383.2
 3120.18  410983.4
   em0
 Kbps in  Kbps out
3.65  412871.2
3.65  416097.9
3.65  416431.1
5.65  195233.8

So no, I'm not saturating this network. Not even close. I have a
machine with a 100Mbs vr0 that can spit out twice that much.

==ml


> # ./netblast 10.11.11.243 500 250 10
> 
> start: 1311363559.619619931
> finish:1311363569.619418229
> send calls:5210086
> send errors:   1249890
> approx send rate:  396019
> approx error rate: 0
> 
> 
> ./netblast 10.11.11.241 500 300 10
> 
> start: 1311346264.584043978
> finish:1311346274.583848423
> send calls:7417664
> send errors:   4214676
> approx send rate:  320298
> approx error rate: 0
> 
> 
> When the sender if an igb nic, I am able to push out 955Mb to the em0
> nic acting as a sink. The other way around, 855Mb
> The em nic is
> 
> em1@pci0:5:0:0: class=0x02 card=0x34ec8086 chip=0x10d38086 rev=0x00
> hdr=0x00
> vendor = 'Intel Corporation'
> device = 'Intel 82574L Gigabit Ethernet Controller (82574L)'
> class  = network
> subclass   = ethernet
> bar   [10] = type Memory, range 32, base 0xb250, size 131072,
> enabled
> bar   [18] = type I/O Port, range 32, base 0x1000, size 32, enabled
> bar   [1c] = type Memory, range 32, base 0xb252, size 16384, enabled
> cap 01[c8] = powerspec 2  supports D0 D3  current D0
> cap 05[d0] = MSI supports 1 message, 64 bit
> cap 10[e0] = PCI-Express 1 endpoint max data 128(256) link x1(x1)
> cap 11[a0] = MSI-X supports 5 messages in map 0x1c enabled
> ecap 0001[100] = AER 1 0 fatal 0 non-fatal 1 corrected
> ecap 0003[140] = Serial 1 001517ed36e4
> 
> em1:  port 0x1000-0x101f mem
> 0xb250-0xb251,0xb252-0xb2523fff irq 16 at device 0.0 on pci5
> em1: Using MSIX interrupts with 3 vectors
> em1: [ITHREAD]
> em1: [ITHREAD]
> em1: [ITHREAD]
> em1: Ethernet address: 00:15:17:ed:36:e4
> 
> 
> 
> ifstat -b shows
> 
> # ifstat -b -i igb0
>igb0
>  Kbps in  Kbps out
> 0.00  0.00
> 0.00  0.00
> 578794.0  0.00
> 855298.0  0.00
> 855365.9  0.00
> 855316.6  0.00
> 855335.2  0.00
> 855346.5  0.00
> 855358.6  0.00
> 855368.7  0.00
> 855356.6  0.00
> 727163.6  0.00
> 0.00  0.00
> 
> thats the em equipped machine generating the traffic
> 
> 
>   ---Mike
> 
> 
> 
> 
> 
> > 
> > There's kern/152828 claiming a performance regression with em under
> > 8.2, but I'm not sure if that is applicable to my system. I'd upgrade
> > the kernel to test, but I'm not brave enough to downgrade the kernel
> > to 8.0 for comparison. (I've never had good luck running an old kernel
> > on a new userland.)
> > 
> > ==ml
> > 
> 
> 
> -- 
> ---
> Mike Tancsa, tel +1 519 651 3400
> Sentex Communications, m...@sentex.net
> Providing Internet services since 1994 www.sentex.net
> Cambridge, Ontario Canada   http://www.tancsa.com/

-- 
Michael W. Lucas
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
mwlu...@blackhelicopters.org, Twitter @mwlauthor
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: em0 NIC slow on 8.2-p1 amd64?

2011-07-22 Thread Michael W. Lucas
On Fri, Jul 22, 2011 at 02:06:23PM -0400, Mike Tancsa wrote:
> On 7/22/2011 1:50 PM, Eduardo Morras wrote:
> > At 17:12 21/07/2011, Michael W. Lucas wrote:
> >> On Thu, Jul 21, 2011 at 05:01:57PM +0200, Eduardo Morras wrote:
> >> >
> >> > Have you tried other protocols? Http, rsync... It maybe a problem at
> >> > client side, some ftp clients can set a maximun ftp transfer, like
> >> > filezilla, winscp,
> >>
> >> FTP and NFSv3 both have similar results.
> >>
> >> ==ml
> > 
> > Perhaps you have reached the maximum disk speed. Sorry not more ideas,
> > but it doesn't look like a nic problem. Put the file in cache before
> > sending it. If it's faster the problem is a bottleneck on hard disk or
> > sata/ata/usb bus.
> 
> What if you do a fetch -o /dev/null {http|ftp}://remotesite/file
> 
> and see what speeds you get. That would get rid of the disk as an io issue

Good idea.

fetch -o /dev/null ftp://xxx/ftp/FreeBSD-9.0-CURRENT-201011-amd64-dvd1.iso
/dev/null 100% of 1027 MB   29 MBps 00m00s

Basically the same.  I don't think it's disk.

There's kern/152828 claiming a performance regression with em under
8.2, but I'm not sure if that is applicable to my system. I'd upgrade
the kernel to test, but I'm not brave enough to downgrade the kernel
to 8.0 for comparison. (I've never had good luck running an old kernel
on a new userland.)

==ml

-- 
Michael W. Lucas
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
mwlu...@blackhelicopters.org, Twitter @mwlauthor
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: em0 NIC slow on 8.2-p1 amd64?

2011-07-21 Thread Michael W. Lucas
On Thu, Jul 21, 2011 at 05:01:57PM +0200, Eduardo Morras wrote:
> 
> Have you tried other protocols? Http, rsync... It maybe a problem at 
> client side, some ftp clients can set a maximun ftp transfer, like 
> filezilla, winscp, 

FTP and NFSv3 both have similar results.

==ml

-- 
Michael W. Lucas
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
mwlu...@blackhelicopters.org, Twitter @mwlauthor
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: em0 NIC slow on 8.2-p1 amd64?

2011-07-21 Thread Michael W. Lucas
On Wed, Jul 20, 2011 at 09:32:27PM +0200, Eduardo Morras wrote:
> At 21:16 20/07/2011, Michael W. Lucas wrote:
> 
> >It's at gigabit:
> >
> >em0: flags=8843 metric 0 mtu 1500
> >
> >options=219b
> >ether 00:15:17:31:c8:fe
> >inet xxx
> >media: Ethernet autoselect (1000baseT )
> >status: active
> 
> All seems to be ok, try a netstat -I em0 -d  (it's a capital 'i') to 
> get statistics. If too much packets are dropped recheck cables.
> 
> Other options:
> 
> a) 30 MB/s looks very strange, do you have pf or similar with a filter rule?
> b) Have you checked your disk i/o performance?
> c) If you generate the data dinamically, may be your producer app is 
> the problem.
> 
> About the em specific problem under 8.2 you cite, others can guide 
> better than me.
> 
> HTH

No obvious errors on netstat:

netstat -I em0 -d
NameMtu Network   Address  Ipkts Ierrs IdropOpkts Oerrs 
 Coll Drop
em01500   00:15:17:31:c8:fe 11709782 0 0  6855755 0 
00 
em01500 139.171.199.0 data5-vm   9546994 - -  7584135 - 
-- 

PF is running, but disabling it makes no difference in throughput.

Disk is mostly idle... not saying it can't be disk, mind you, but
local disk-to-disk copies go much more quickly. I'm testing by copying
an ISO.

And as far as me knowing "many more things," well, if I knew what the
problem was, I wouldn't be begging for help like any other user.  :-)

Thanks,
==ml

-- 
Michael W. Lucas
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
mwlu...@blackhelicopters.org, Twitter @mwlauthor
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: em0 NIC slow on 8.2-p1 amd64?

2011-07-21 Thread Michael W. Lucas
On Wed, Jul 20, 2011 at 05:19:47PM -0400, Mike Tancsa wrote:
> On 7/20/2011 12:04 PM, Michael W. Lucas wrote:
> > Hi,
> > 
> > I'm running FreeNAS 8.0/amd64, with an 8.2-p1 kernel.  When using FTP
> > or SCP, performance maxes out around 30MB/s. This is on a gigabit
> > network, no errors showing. 
> 
> what does
> sysctl -a dev.em
> 
> show ?
> 
> What kind of switch is the box plugged into ? Can you show the output of
> the switch interface showing how its connected e.g. flow control,
> duplex, interface counters etc.

It's an HP Procurve 3400cl-24g.

  Port  Type  | Enabled Mode Flow Ctrl MDI 
...
  15100/1000T | Yes Auto Disable   Auto


  | Intrusion   MDI   Flow  Bcast 
  Port  Type  | Alert Enabled Status Mode   Mode  Ctrl  Limit 
...
  15100/1000T | NoYes Up 1000FDxMDI   off   0 

 Status and Counters - Port Counters for port 15  

  Name  : data5
  Link Status : Up  
  Totals (Since boot or last clear) :
   Bytes Rx: 2,717,700,038  Bytes Tx: 2,179,415,738 
   Unicast Rx  : 162,116,833Unicast Tx  : 190,514,323   
   Bcast/Mcast Rx  : 51,058 Bcast/Mcast Tx  : 35,257,606
  Errors (Since boot or last clear) :
   FCS Rx  : 0  Drops Rx: 0 
   Alignment Rx: 0  Collisions Tx   : 0 
   Runts Rx: 0  Late Colln Tx   : 0 
   Giants Rx   : 0  Excessive Colln : 0 
   Total Rx Errors : 0  Deferred Tx : 0 
  Rates (5 minute weighted average) :
   Total Rx  (bps) : 2428792Total Tx  (bps) : 5019632   
   Unicast Rx (Pkts/sec) : 0Unicast Tx (Pkts/sec) : 0 
   B/Mcast Rx (Pkts/sec) : 0B/Mcast Tx (Pkts/sec) : 1 
   Utilization Rx  : 00.24 %Utilization Tx  : 00.50 %


dev.em.0.%desc: Intel(R) PRO/1000 Network Connection 7.1.9
dev.em.0.%driver: em
dev.em.0.%location: slot=0 function=0
dev.em.0.%pnpinfo: vendor=0x8086 device=0x108b subvendor=0x8086 
subdevice=0x class=0x02
dev.em.0.%parent: pci1
dev.em.0.nvm: -1
dev.em.0.debug: -1
dev.em.0.rx_int_delay: 0
dev.em.0.tx_int_delay: 66
dev.em.0.rx_abs_int_delay: 66
dev.em.0.tx_abs_int_delay: 66
dev.em.0.rx_processing_limit: 100
dev.em.0.flow_control: 3
dev.em.0.link_irq: 0
dev.em.0.mbuf_alloc_fail: 0
dev.em.0.cluster_alloc_fail: 0
dev.em.0.dropped: 0
dev.em.0.tx_dma_fail: 0
dev.em.0.rx_overruns: 0
dev.em.0.watchdog_timeouts: 0
dev.em.0.device_control: 1075053128
dev.em.0.rx_control: 67141634
dev.em.0.fc_high_water: 10240
dev.em.0.fc_low_water: 8740
dev.em.0.queue0.txd_head: 338
dev.em.0.queue0.txd_tail: 338
dev.em.0.queue0.tx_irq: 0
dev.em.0.queue0.no_desc_avail: 0
dev.em.0.queue0.rxd_head: 375
dev.em.0.queue0.rxd_tail: 374
dev.em.0.queue0.rx_irq: 0
dev.em.0.mac_stats.excess_coll: 0
dev.em.0.mac_stats.single_coll: 0
dev.em.0.mac_stats.multiple_coll: 0
dev.em.0.mac_stats.late_coll: 0
dev.em.0.mac_stats.collision_count: 0
dev.em.0.mac_stats.symbol_errors: 0
dev.em.0.mac_stats.sequence_errors: 0
dev.em.0.mac_stats.defer_count: 0
dev.em.0.mac_stats.missed_packets: 0
dev.em.0.mac_stats.recv_no_buff: 0
dev.em.0.mac_stats.recv_undersize: 0
dev.em.0.mac_stats.recv_fragmented: 0
dev.em.0.mac_stats.recv_oversize: 0
dev.em.0.mac_stats.recv_jabber: 0
dev.em.0.mac_stats.recv_errs: 0
dev.em.0.mac_stats.crc_errs: 0
dev.em.0.mac_stats.alignment_errs: 0
dev.em.0.mac_stats.coll_ext_errs: 0
dev.em.0.mac_stats.xon_recvd: 0
dev.em.0.mac_stats.xon_txd: 0
dev.em.0.mac_stats.xoff_recvd: 0
dev.em.0.mac_stats.xoff_txd: 0
dev.em.0.mac_stats.total_pkts_recvd: 11708739
dev.em.0.mac_stats.good_pkts_recvd: 11708739
dev.em.0.mac_stats.bcast_pkts_recvd: 2121887
dev.em.0.mac_stats.mcast_pkts_recvd: 57365
dev.em.0.mac_stats.rx_frames_64: 464757
dev.em.0.mac_stats.rx_frames_65_127: 4131944
dev.em.0.mac_stats.rx_frames_128_255: 43756
dev.em.0.mac_stats.rx_frames_256_511: 204667
dev.em.0.mac_stats.rx_frames_512_1023: 492040
dev.em.0.mac_stats.rx_frames_1024_1522: 6371575
dev.em.0.mac_stats.good_octets_recvd: 10457944503
dev.em.0.mac_stats.good_octets_txd: 2875493372
dev.em.0.mac_stats.total_pkts_txd: 7967315
dev.em.0.mac_stats.good_pkts_txd: 7967315
dev.em.0.mac_stats.bcast_pkts_txd: 121
dev.em.0.mac_stats.mcast_pkts_txd: 0
dev.em.0.mac_stats.tx_frames_64: 1739777
dev.em.0.mac_stats.tx_frames_65_127: 3871275
dev.em.0.mac_stats.tx_frames_128_255: 270032
dev.em.0.mac_stats.tx_frames_256_511: 412542
dev.em.0.mac_stats.tx_frames_512_1023: 255864
dev.em.0.mac_stats.tx_frames_1024_1522: 1417825
dev.em.0.mac_stats.tso_txd: 427046
dev.em.0.mac_stats.tso_ctx_fail: 0
dev.em.0.interrupts.asserts: 10716051
dev.em.0.inter

Re: em0 NIC slow on 8.2-p1 amd64?

2011-07-20 Thread Michael W. Lucas
On Wed, Jul 20, 2011 at 07:12:27PM +0200, Eduardo Morras wrote:
> At 18:04 20/07/2011, Michael W. Lucas wrote:
> >Hi,
> >
> >I'm running FreeNAS 8.0/amd64, with an 8.2-p1 kernel.  When using FTP
> >or SCP, performance maxes out around 30MB/s. This is on a gigabit
> >network, no errors showing.
> >
> >It looks a lot like kern/152828, but it seems that nobody's looking at
> >that.
> 
> Don't know about that, but perhaps the nic is not working at full gigabit.
> 
> Can you post the output of ifconfig?
> 
> #ifconfig em0
> 

It's at gigabit:

em0: flags=8843 metric 0 mtu 1500

options=219b
ether 00:15:17:31:c8:fe
inet xxx
media: Ethernet autoselect (1000baseT )
status: active

Thanks, 
==ml


> If it's not connected at 1 gigabit or not full duplex you can force 
> it with ifconfig. If there are too much errors check the cable.
> 
> >As per suggestions from the archives, I've tried disabling TSO. No
> >change.
> >
> >Anyone else experiencing this, or have any suggestions? At the moment,
> >the boss is complaining that his Windows Home Server is doing better
> >than this machine, and that's a technological direction I really don't
> >want to go in.
> >
> >Thanks,
> >==ml
> 

-- 
Michael W. Lucas
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
mwlu...@blackhelicopters.org, Twitter @mwlauthor
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


em0 NIC slow on 8.2-p1 amd64?

2011-07-20 Thread Michael W. Lucas
Hi,

I'm running FreeNAS 8.0/amd64, with an 8.2-p1 kernel.  When using FTP
or SCP, performance maxes out around 30MB/s. This is on a gigabit
network, no errors showing. 

It looks a lot like kern/152828, but it seems that nobody's looking at
that.

As per suggestions from the archives, I've tried disabling TSO. No
change.

Anyone else experiencing this, or have any suggestions? At the moment,
the boss is complaining that his Windows Home Server is doing better
than this machine, and that's a technological direction I really don't
want to go in.

Thanks,
==ml

-- 
Michael W. Lucas
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: Network Flow Analysis http://www.networkflowanalysis.com/
mwlu...@blackhelicopters.org, Twitter @mwlauthor
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


apache22 build problem: cgi disabled

2010-07-28 Thread Michael W. Lucas
Hi,

I'm running a July 26 -current/amd64, both ports and userland, and it
seems that the newest apache22 doesn't build a lot of modules, such as
mod_cgi, mod_cache, etc.

/var/db/ports/apache22/options includes (among other things):

WITH_CGI=true

make.conf defines only perl and sendmail.mc.

The port's config.log shows:

  $ ./configure --prefix=/usr/local --enable-layout=FreeBSD 
--with-perl=/usr/local/bin/perl5.8.9 --with-port=80 --with-expat=/usr/local 
--with-iconv=/usr/local --enable-http --with-pcre=/usr/local 
--with-apr=/usr/local/bin/apr-1-config 
--with-apr-util=/usr/local/bin/apu-1-config --disable-authn-file 
--disable-authn-default --disable-authz-host --disable-authz-groupfile 
--disable-authz-user --disable-authz-default --disable-auth-basic 
--disable-charset-lite --disable-include --disable-log-config --disable-env 
--disable-setenvif --disable-mime --disable-status --disable-autoindex 
--disable-asis --disable-cgid --disable-cgi --disable-negotiation --disable-dir 
--disable-imagemap --disable-actions --disable-userdir --disable-alias 
--disable-filter --disable-proxy --disable-proxy-connect --disable-proxy-ftp 
--disable-proxy-http --disable-proxy-ajp --disable-proxy-balancer 
--disable-proxy-scgi --disable-reqtimeout --enable-so 
--enable-mods-shared=auth_basic auth_digest authn_file authn_dbm authn_anon 
authn_default authn_alias authz_host authz_groupfile authz_user authz_dbm 
authz_owner authz_default disk_cache file_cache dav dav_fs actions alias asis 
autoindex cern_meta charset_lite deflate dir dumpio env expires headers 
imagemap include info log_config logio mime mime_magic negotiation rewrite 
setenvif speling status unique_id userdir usertrack vhost_alias version 
reqtimeout proxy_connect ssl --with-dbm=sdbm --with-ssl=/usr --disable-ipv6 
--with-devrandom --with-mpm=prefork --prefix=/usr/local --mandir=/usr/local/man 
--infodir=/usr/local/info/ --build=amd64-portbld-freebsd9.0

There's a --disable-cgi in there, but no cgi listed after
--enable-mods.

So, my FreeBSD options are set to enable CGI, but they aren't making
it down to the Apache build process.

Am I doing something daft here, or should I file a PR?

Thanks,
==ml

-- 
Michael W. Lucasmwlu...@blackhelicopters.org
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
New book available: Network Flow Analysis
http://www.networkflowanalysis.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: PDF storage software recommendations?

2010-06-17 Thread Michael W. Lucas
On Thu, Jun 17, 2010 at 01:12:13PM -0400, Greg Larkin wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Michael W. Lucas wrote:
> > Hi,
> > 
> > I have to store a bunch of PDFs of orders.  I'd like to be able to
> > "tag" these by customer, date, and a couple of other characteristics,
> > and then search and/or sort by these tags.
> > 
> > I'm certain that we have something in ports that will do this, but
> > danged if I can find a good candidate.  While I'm sure I could build a
> > database/PHP app that would work, surely someone's already done this?
> > Any recommendations?
> > 
> > Thanks,
> > ==ml
> > 
> 
> Hi Michael,
> 
> I maintain print/pdftk, and you can edit document metadata with it.  The
> "updateinfo" subcommand should do what you want.  I found this page
> describing that and some other functions of the tool:
> http://scottnesbitt.net/ubuntublog/?p=269.

That looks like a fabulous tool, actually.  I've wanted that
functionality for years.  But it's not quite what I want.

We get orders for services via PDF.  We need to keep them, and call
them up months or years later.  We'd need to find things like "all of
the PDFs for Customer X" or "all of the PDFs for circuit ID
such-and-such."  Surely other people have had this problem, for
generic documents/files if not PDFs in particular...

==ml

-- 
Michael W. Lucasmwlu...@blackhelicopters.org
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
New book:  Network Flow Analysis
pre-order now!  http://www.networkflowanalysis.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


PDF storage software recommendations?

2010-06-17 Thread Michael W. Lucas
Hi,

I have to store a bunch of PDFs of orders.  I'd like to be able to
"tag" these by customer, date, and a couple of other characteristics,
and then search and/or sort by these tags.

I'm certain that we have something in ports that will do this, but
danged if I can find a good candidate.  While I'm sure I could build a
database/PHP app that would work, surely someone's already done this?
Any recommendations?

Thanks,
==ml

-- 
Michael W. Lucasmwlu...@blackhelicopters.org
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
New book:  Network Flow Analysis
pre-order now!  http://www.networkflowanalysis.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: diskless problem: Lookup of /dev for devfs, error: 13

2009-11-20 Thread Michael W. Lucas
On Fri, Nov 20, 2009 at 02:20:54AM -0900, Mel Flynn wrote:
> On Thu, 19 Nov 2009 16:18:29 -0500, "Michael W. Lucas"
>  wrote:
> > Hi,
> > 
> > I'm attempting to run a diskless 8.0 i386 workstation on VMWare, using
> > an OpenSolaris box as a file store.  I get PXE, the kernel loads, but
> > when we try to remount the filesystem I get:
> > 
> > ...
> > NFS ROOT:  XXX.XXX.XXX.XXX:/storage1/vm/netflow
> > Lookup of /dev for devfs, error 13
> > exec /sbin/init: error 13
> > exec /sbin/oinit: error 13
> > exec /sbin/init.bak: error 13
> > exec /rescue/inet: error 13
> > exec /stand/sysinstall: error 13
> > init: not found in path
> > ...
> > 
> > At first glance, it would appear that /dev is missing.
> 
> Actually, at first glance it would appear that the mount doesn't allow
> execution.

Interesting.  (BTW, this is running on a GENERIC kernel, no firewall.)

I did a packet capture on the OpenSolaris NFS server, and found that
the kernel load and initial boot takes place over NFSv2.  When the
FreeBSD box tries to remount root, it sends a NFSv3 FSINFO request.
The server returns NFS3ERR_STALE.  It appears that that error is
generated when the permissions to the mount are revoked... but we just
mounted it seconds before?

It turns out that there's a whole discussion thread on nfsv2 and v3
interoperability with diskless systems.  See
http://lists.freebsd.org/pipermail/freebsd-hackers/2008-January/022792.html
for a sample message.

Short answer: it seems that there are interoperability annoyances with
diskless systems and assorted NFS servers.  NFS mount options in
/etc/fstab seem to be ignored, but you can set them in
/boot/loader.conf.

boot.nfsroot.options="nfsv2"

made FreeBSD try a NFSv2 remout, and the system came up.

Thanks for pointing out it seems to be a permissions error, I wouldn't
have headed down this route without that.

==ml


-- 
Michael W. Lucasmwlu...@blackhelicopters.org
http://www.MichaelWLucas.com/
Latest book:  Cisco Routers for the Desperate, 2nd Edition
http://www.CiscoRoutersForTheDesperate.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


diskless problem: Lookup of /dev for devfs, error: 13

2009-11-19 Thread Michael W. Lucas

Hi,

I'm attempting to run a diskless 8.0 i386 workstation on VMWare, using
an OpenSolaris box as a file store.  I get PXE, the kernel loads, but
when we try to remount the filesystem I get:

...
NFS ROOT:  XXX.XXX.XXX.XXX:/storage1/vm/netflow
Lookup of /dev for devfs, error 13
exec /sbin/init: error 13
exec /sbin/oinit: error 13
exec /sbin/init.bak: error 13
exec /rescue/inet: error 13
exec /stand/sysinstall: error 13
init: not found in path
...

At first glance, it would appear that /dev is missing.  I've never
seen this happen before diskless systems, though, and I can't find any
other references to this.  I know that other people have PXE-booted
FreeBSD on VMWare, however.

Anyone have any suggestions on what to check?

Thanks,
==ml

-- 
Michael W. Lucasmwlu...@blackhelicopters.org
http://www.MichaelWLucas.com/
Latest book:  Cisco Routers for the Desperate, 2nd Edition
http://www.CiscoRoutersForTheDesperate.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


"disklabel: Class not found" when editing USB disk

2009-02-26 Thread Michael W. Lucas
Hi,

I'm following Ceri's instructions for getting FreeBSD on a flash
drive.  My laptop is a Feb 1 -current, I'm installing FreeBSD 7.1, and
the instructions are for 6.1, so we have all kinds of things that
could be going wrong.

The USB boots with the error:

F1 FreeBSD
F6 PXE
Boot: F1

Not ufs
Not ufs
No /boot/loader

When I investigated the flash's disklabel, I saw:

8 partitions:
#size   offsetfstype   [fsize bsize bps/cpg]
  a:  4000106   16unused0 0   
  c:  40001220unused0 0 # "raw" part, don't edit

I newfs'd this flash drive and put data on it.  The obvious thing to
do is set the disklabel for partition a to 4.2BSD.  Even if I have to
reinstall the data, no big deal.

So, run bsdlabel -e /dev/da0s1 and change the disklabel to:

#size   offsetfstype   [fsize bsize bps/cpg]
  a:  4000106   164.2BSD0 0
  c:  40001220unused0 0 # "raw" part, don't edit

Then I get the error:

bsdlabel: Class not found
re-edit the label? [y]: 

The same error appears if I try to edit the disklabel off-disk and
restore (-R).

Google tells me that this error is not uncommon, but the only
solutions I saw (loading geom_mbr and setting kern.geom.debugflags=16)
did not help.

Anyone have any suggestions?  Or, can anyone tell me I'm running down
the wrong path?

Thanks,
==ml

-- 
Michael W. Lucasmwlu...@blackhelicopters.org, mwlu...@freebsd.org
http://www.BlackHelicopters.org/~mwlucas/
Latest book:  Cisco Routers for the Desperate, 2nd Edition
http://www.CiscoRoutersForTheDesperate.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


net4801, nanobsd, & -current

2008-06-24 Thread Michael W. Lucas
f enabling this!
# Note that 'bpf' is required for DHCP.
device  bpf # Berkeley packet filter

# USB support
#device uhci# UHCI PCI->USB interface
#device ohci# OHCI PCI->USB interface
#device ehci# EHCI PCI->USB interface (USB 2.0)
device  usb # USB Bus (required)
#device udbp# USB Double Bulk Pipe devices
device  ugen# Generic
device  uhid# "Human Interface Devices"
device  ukbd# Keyboard
#device ulpt# Printer
device  umass   # Disks/Mass storage - Requires scbus and da
#device ums # Mouse
#device ural# Ralink Technology RT2500USB wireless NICs
#device rum # Ralink Technology RT2501USB wireless NICs
#device zyd # ZyDAS zb1211/zb1211b wireless NICs
#device urio# Diamond Rio 500 MP3 player
#device uscanner# Scanners
# USB Serial devices
device  ucom# Generic com ttys
device  uark# Technologies ARK3116 based serial adapters
device  ubsa# Belkin F5U103 and compatible serial adapters
device  ubser   # BWCT console serial adapters
device  uftdi   # For FTDI usb serial adapters
device  uipaq   # Some WinCE based devices
device  uplcom  # Prolific PL-2303 serial adapters
device  uslcom  # SI Labs CP2101/CP2102 serial adapters
device  uvisor  # Visor and Palm devices
device  uvscom  # USB serial support for DDI pocket's PHS
# USB Ethernet, requires miibus
#device aue # ADMtek USB Ethernet
#device axe # ASIX Electronics USB Ethernet
#device cdce# Generic USB over Ethernet
#device cue # CATC USB Ethernet
#device kue # Kawasaki LSI USB Ethernet
#device rue # RealTek RTL8150 USB Ethernet
#device udav# Davicom DM9601E USB

# FireWire support
#device firewire# FireWire bus code
#device sbp # SCSI over FireWire (Requires scbus and da)
#device fwe # Ethernet over FireWire (non-standard!)
#device fwip# IP over FireWire (RFC 2734,3146)
#device dcons   # Dumb console driver
#device dcons_crom  # Configuration ROM for dcons



-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
  Now Shipping: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com
On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons."
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Portmaster error or actual bug?

2008-02-26 Thread Michael W. Lucas
On Tue, Feb 26, 2008 at 02:52:49PM -0500, Randy Pratt wrote:
> On Tue, 26 Feb 2008 13:08:59 -0500
> "Michael W. Lucas" <[EMAIL PROTECTED]> wrote:
> 
> > Hi,
> > 
> > Not sure if this is a bug, but it sure looks like one to me.
> > 
> > I run:
> > 
> > # portmaster -o lang/expect-devel expect-5.43.0_3
> > 
> > expecting to replace Expect 5.43 with the version in expect-devel
> > (5.44).  Instead, it reinstalls expect-5.43.
> > 
> > Am I doing something wrong?  Or is this an actual bug in portmaster?
> > 
> 
> I think this has been reported and Doug Barton has a patch for it
> already:
>   
>   http://docs.freebsd.org/cgi/mid.cgi?47BF5119.206
> 
> I don't think its been committed yet though.

Aha!  Yes, that's my problem.

We'll give Doug a few days to commit his patch, I suppose.  ;-)

==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
  Now Shipping: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com
On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons."
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Portmaster error or actual bug?

2008-02-26 Thread Michael W. Lucas
Hi,

Not sure if this is a bug, but it sure looks like one to me.

I run:

# portmaster -o lang/expect-devel expect-5.43.0_3

expecting to replace Expect 5.43 with the version in expect-devel
(5.44).  Instead, it reinstalls expect-5.43.

Am I doing something wrong?  Or is this an actual bug in portmaster?

Thanks,
==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
  Now Shipping: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com
On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons."
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: timekeeping on jail servers

2007-12-18 Thread Michael W. Lucas
On Tue, Dec 18, 2007 at 11:02:12AM -0500, Bill Moran wrote:
> In response to "Michael W. Lucas" <[EMAIL PROTECTED]>:
> 
> > Hi,
> > 
> > Been searching around without results:
> > 
> > Has anyone come up with a decent way to do timekeeping on a jail
> > server?  ntpd(8) binds to all addresses, and I'd rather not do a
> > ntpdate out of cron.
> 
> I'm not entirely sure I comprehend where you're having trouble, Michael,
> but we use openntpd on all our systems, specifically because you can
> tell it what addresses to bind to.

That would be you don't have my problem.  Openntpd will solve my
problem.

Thanks for all the pointers, including the dozen or so private ones!

==ml


-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
  Now Shipping: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com
On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons."
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


timekeeping on jail servers

2007-12-18 Thread Michael W. Lucas
Hi,

Been searching around without results:

Has anyone come up with a decent way to do timekeeping on a jail
server?  ntpd(8) binds to all addresses, and I'd rather not do a
ntpdate out of cron.

Thanks,
==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
  Now Shipping: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com
On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons."
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Is the last sector of a partition free?

2007-07-17 Thread Michael W. Lucas
Hi,

How can I tell if the last sector on a partition is used by the file
system?  I'm sure there's an easy way, but can't figure it out.  (I
have a couple file systems I'm considering switching over to gjournal,
but would like to know if it'll work before I schedule downtime.)

Thanks,
==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
  Coming Soon: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com
On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons."
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: if_lagg(4) and rc.conf

2007-07-05 Thread Michael W. Lucas
On Tue, Jul 03, 2007 at 03:10:05PM -0400, John Nielsen wrote:
> On Tuesday 03 July 2007 02:35:16 pm Michael W. Lucas wrote:
> > I'm trying to configure a lagg(4) interface out of rc.conf.  FreeBSD
> > doesn't want to initialize the interface at boot.  I'm obviously
> > missing some little thing.  I'm successfully loading if_lagg into the
> > kernel, so that's not the problem.
> >
> > I can configure the interface at the command line if I do a "ifconfig
> > lagg0 create" and then enter the configuration, but there doesn't seem
> > to be a rc.conf flag to tell the system to create an interface?
> >
> > Here's my rc.conf for these interfaces:
> >
> > ifconfig_em3="up"
> > ifconfig_em7="up"
> > ifconfig_lagg0="laggproto lacp laggport em3 laggport em7 10.184.1.19
> > netmask 0x"
> 
> I haven't played with if_lagg yet, but you should be able to use the 
> cloned_interfaces knob in /etc/rc.conf to create the interface. e.g.:
> 
> cloned_interfaces="lagg0"
> ifconfig_em3="up"
> ifconfig_em7="up"
> ifconfig_lagg0="laggproto lacp laggport em3 laggport em7 10.184.1.19 \
>   netmask 0x"
> 
> if_lagg(4) mentions this briefly (at the end before the examples)

This last bit, of course, was the key to the whole thing.

I don't know how many times I looked at the man page without seeing
that.  Thanks for pointing it out.

==ml



-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
  Coming Soon: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com
On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons."
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


if_lagg(4) and rc.conf

2007-07-03 Thread Michael W. Lucas
Hi,

I'm trying to configure a lagg(4) interface out of rc.conf.  FreeBSD
doesn't want to initialize the interface at boot.  I'm obviously
missing some little thing.  I'm successfully loading if_lagg into the
kernel, so that's not the problem.

I can configure the interface at the command line if I do a "ifconfig
lagg0 create" and then enter the configuration, but there doesn't seem
to be a rc.conf flag to tell the system to create an interface?

Here's my rc.conf for these interfaces:

ifconfig_em3="up"
ifconfig_em7="up"
ifconfig_lagg0="laggproto lacp laggport em3 laggport em7 10.184.1.19 netmask 
0x"

Any suggestions?

Thanks,
==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
  Coming Soon: "Absolute FreeBSD" -- http://www.AbsoluteFreeBSD.com
On 5/4/2007, the TSA kept 3 pairs of my soiled undies "for security reasons."
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: USB key device nodes

2007-04-15 Thread Michael W. Lucas
On Sun, Apr 15, 2007 at 02:00:00PM +0400, Boris Samorodov wrote:
> This is almost a FAQ. You may do here:
> 
> # true > /dev/da1
> 
> ...and than look at /dev/da1*

Now that I know the answer, it's easy to find in Google.  Many times.

I'll get it in the FAQ.  Thanks for the answer!

==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
Latest book: PGP & GPG -- http://www.pgpandgpg.com
"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


USB key device nodes

2007-04-14 Thread Michael W. Lucas


Hi,

This strikes me as odd.  I have a 1GB USB pocketknife that doesn't
give me the right device nodes until after I try to mount it.  The
mount attempt seems to create the proper device nodes.

The USB drive shows up on insertion like so:

Apr 14 19:09:41 stretchlimo kernel: umass0:  on uhub4
Apr 14 19:09:41 stretchlimo root: Unknown USB device: vendor 0x1370 product 
0x2168 bus uhub4
Apr 14 19:09:41 stretchlimo kernel: da1 at umass-sim0 bus 0 target 0 lun 0
Apr 14 19:09:41 stretchlimo kernel: da1:  
Removable Direct Access SCSI-2 device 
Apr 14 19:09:41 stretchlimo kernel: da1: 40.000MB/s transfers
Apr 14 19:09:41 stretchlimo kernel: da1: Attempt to query device size failed: 
UNIT ATTENTION, Not ready to ready change,

Disklabel tells me that it has a single DOS partition on it:

# fdisk /dev/da1 
*** Working on device /dev/da1 ***
parameters extracted from in-core disklabel are:
cylinders=998 heads=64 sectors/track=32 (2048 blks/cyl)

parameters to be used for BIOS calculations are:
cylinders=998 heads=64 sectors/track=32 (2048 blks/cyl)

Media sector size is 512
Warning: BIOS sector numbering starts with sector 1
Information from DOS bootblock is:
The data for partition 1 is:
sysid 6 (0x06),(Primary 'big' DOS (>= 32MB))
start 32, size 2043871 (997 Meg), flag 80 (active)
beg: cyl 0/ head 1/ sector 1;
end: cyl 996/ head 63/ sector 32
The data for partition 2 is:

The data for partition 3 is:

The data for partition 4 is:


But the only device node I get upon insertion is:

# ls /dev/da*
/dev/da1
#

I try to mount it, and immediately check the device nodes:

# mount_msdosfs /dev/da1 /media
mount_msdosfs: /dev/da1: : Invalid argument
# ls /dev/da*
/dev/da1/dev/da1s1
#

Of course, at this point I can mount_msdosfs /dev/da1s1.

Is this behavior normal?  I'm trying to configure devd to automount a
USB device, but the lack of a proper device node appearing the first
time around kiboshes that.

This is a 7.x i386 system.

Thanks,
==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
Latest book: PGP & GPG -- http://www.pgpandgpg.com
"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: xorg resolution on new laptop

2007-04-03 Thread Michael W. Lucas
> I'm not certain why this works since I'm setting the mode to  1440x900
> in 16bits but it does.
> (from xdpyinfo)
> screen #0:
>   print screen:no
>   dimensions:1440x900 pixels (302x191 millimeters)
>   resolution:121x120 dots per inch
>   depths (7):24, 1, 4, 8, 15, 16, 32
>   root window id:0x5d
>   depth of root window:24 planes
>   number of colormaps:minimum 1, maximum 1

I missed the bit about xdpyinfo, never seen that program before.  I have:

screen #0:
  print screen:no
  dimensions:1440x900 pixels (373x231 millimeters)
  resolution:98x99 dots per inch
  depths (7):24, 1, 4, 8, 15, 16, 32
  root window id:0x4c
  depth of root window:24 planes
  number of colormaps:minimum 1, maximum 1

The difference is in the "resolution" entry: Vince has 121x120, I have
98x99.  My text is all quite large, my icons larger.

What I really need to do is learn about X.  All of the docs I've found
have been for older versions or consist only of occult references to a
particular users' edge case.  It seems nobody's written a book about
xorg.  (Don't ask me to, I don't know enough to even write the
proposal! :-)

Does anyone have a recommendation for a decent user tutorial for X
troubleshooting?  I don't mean "run startx", I mean "this is the log
file and this is what the various entries mean" sort of
troubleshooting.

Thanks,
==ml


> Michael W. Lucas wrote:
> > Hi folks,
> > 
> > I've scoured Google seeking wisdom, and found nothing except hordes of
> > Linux users whining about this same problem.  FreeBSD users don't seem
> > to have this issue, except for me.  Finally I have no choice but to
> > throw myself on your tender mercies.
> > 
> > I've been going nuts trying to get 1440x900 resolution on my new
> > Toshiba P105.  Any help anyone could offer would be greatly
> > appreciated.  Xorg assures me that the 945GM video card is supported
> > by the i810 driver, provided I use the 915resolution program to set
> > the resolution before starting X.  I run:
> > 
> > /usr/local/bin/915resolution 3c 1440 900
> > 
> > to add the resolution 1440x900 to the video BIOS.  915resolution -l
> > now shows me:
> > 
> > ...
> > Mode 3c : 1440x900, 8 bits/pixel
> > ...
> > Mode 4d : 1440x900, 16 bits/pixel
> > ...
> > Mode 5c : 1440x900, 32 bits/pixel
> > ..
> > 
> > So, in theory 1440x900 should be available to the card.
> > 
> > startx fails without a config file, so I let it create one and tweaked
> > in based on gossip, rumour, and innuendo I've uncovered in three days
> > of Web searching.  I get something that looks *about* like 1200x768,
> > but it's a far cry from 1440x900.
> > 
> > pciconf -lv tells me:
> > 
> > ...
> > [EMAIL PROTECTED]:2:0:   class=0x03 card=0xff311179 chip=0x27a28086 
> > rev=0x03 hdr=0x00
> > vendor = 'Intel Corporation'
> > device = 'Mobile Integrated Graphics Controller'
> > class  = display
> > subclass   = VGA
> > [EMAIL PROTECTED]:2:1:   class=0x038000 card=0xff311179 chip=0x27a68086 
> > rev=0x03 hdr=0x00
> > vendor = 'Intel Corporation'
> > device = 'Mobile Integrated Graphics Controller'
> > class  = display
> > ...
> > 
> > Here's relevant stuff trimmed from my xorg.conf.
> > 
> > --
> > 
> > Section "Module"
> > Load  "extmod"
> > Load  "glx"
> > Load  "dri"
> > Load  "dbe"
> > Load  "record"
> > Load  "xtrap"
> > Load  "type1"
> > Load  "freetype"
> > Load  "i2c"
> > Load  "bitmap"
> > Load  "int10"
> > EndSection
> > 
> > ...
> > 
> > Section "Monitor"
> > #DisplaySize  370   230 # mm
> > Identifier   "Monitor0"
> > VendorName   "LPL"
> > ModelName"0"
> > EndSection
> > 
> > Section "Device"
> > ### Available Driver options are:-
> > ### Values: : integer, : float, : "True"/"False",
> > ### : "String", : " Hz/kHz/MHz"
> > ### [arg]: arg optional
> > #Option "NoAccel"   # []
> > #Option "SWcursor"  # []
> > #Optio

Re: xorg resolution on new laptop

2007-04-03 Thread Michael W. Lucas
On Tue, Apr 03, 2007 at 09:29:12AM +0100, Vince wrote:
> I have this working, however i cant remember my method for working it out.

Thanks for the answer, but this doesn't work for me.  Comments below.

> I use
> /usr/local/bin/915resolution 4d 1440 900 16
> (in an rc script /usr/local/etc/rc.d/915res )

You just overwrote a different mode than I did, no biggie.  I copied
yours.

> my xorg.conf  (relevant bits)
> Section "Device"
> 
> Identifier  "Card0"
> Driver  "i810"
> VendorName  "Intel Corporation"
> BoardName   "Mobile Integrated Graphics Controller"
> BusID   "PCI:0:2:0"
> Option  "DRI" "true"

Interesting point:  I copied this entry, and Xorg.0.log shows that DRI should 
be enabled:

(II) I810(0): [DRI] installation complete
(II) I810(0): direct rendering: Enabled


glxinfo says I don't have DRI, however:

glxinfo 
name of display: :0.0
Unrecognized deviceID 27a2
display: :0  screen: 0
direct rendering: No


Still searching, but thanks for info.  At least I know it *can* work
on FreeBSD...

> EndSection
> 
> Section "Screen"
> Identifier "Screen0"
> Device "Card0"
> Monitor"Monitor0"
> DefaultDepth 24
> Subsection "Display"
>  Depth   24
>  Modes   "1440x900" "1024x768" "800x600"
>  ViewPort0 0
> EndSubsection
> EndSection
> 
> 
> 
> I'm not certain why this works since I'm setting the mode to  1440x900
> in 16bits but it does.
> (from xdpyinfo)
> screen #0:
>   print screen:no
>   dimensions:1440x900 pixels (302x191 millimeters)
>   resolution:121x120 dots per inch
>   depths (7):24, 1, 4, 8, 15, 16, 32
>   root window id:0x5d
>   depth of root window:24 planes
>   number of colormaps:minimum 1, maximum 1
> 
> 
> Vince
> 
> 
> Michael W. Lucas wrote:
> > Hi folks,
> > 
> > I've scoured Google seeking wisdom, and found nothing except hordes of
> > Linux users whining about this same problem.  FreeBSD users don't seem
> > to have this issue, except for me.  Finally I have no choice but to
> > throw myself on your tender mercies.
> > 
> > I've been going nuts trying to get 1440x900 resolution on my new
> > Toshiba P105.  Any help anyone could offer would be greatly
> > appreciated.  Xorg assures me that the 945GM video card is supported
> > by the i810 driver, provided I use the 915resolution program to set
> > the resolution before starting X.  I run:
> > 
> > /usr/local/bin/915resolution 3c 1440 900
> > 
> > to add the resolution 1440x900 to the video BIOS.  915resolution -l
> > now shows me:
> > 
> > ...
> > Mode 3c : 1440x900, 8 bits/pixel
> > ...
> > Mode 4d : 1440x900, 16 bits/pixel
> > ...
> > Mode 5c : 1440x900, 32 bits/pixel
> > ..
> > 
> > So, in theory 1440x900 should be available to the card.
> > 
> > startx fails without a config file, so I let it create one and tweaked
> > in based on gossip, rumour, and innuendo I've uncovered in three days
> > of Web searching.  I get something that looks *about* like 1200x768,
> > but it's a far cry from 1440x900.
> > 
> > pciconf -lv tells me:
> > 
> > ...
> > [EMAIL PROTECTED]:2:0:   class=0x03 card=0xff311179 chip=0x27a28086 
> > rev=0x03 hdr=0x00
> > vendor = 'Intel Corporation'
> > device = 'Mobile Integrated Graphics Controller'
> > class  = display
> > subclass   = VGA
> > [EMAIL PROTECTED]:2:1:   class=0x038000 card=0xff311179 chip=0x27a68086 
> > rev=0x03 hdr=0x00
> > vendor = 'Intel Corporation'
> > device = 'Mobile Integrated Graphics Controller'
> > class  = display
> > ...
> > 
> > Here's relevant stuff trimmed from my xorg.conf.
> > 
> > --
> > 
> > Section "Module"
> > Load  "extmod"
> > Load  "glx"
> > Load  "dri"
> > Load  "dbe"
> > Load  "record"
> > Load  "xtrap"
> > Load  "type1"
> > Load  "freetype"
> > Load  "i2c"
> > Load  "bitmap"
> > Load  "int10"
> > EndSection
> > 
> > ...
> > 
> > Section "Monitor"

xorg resolution on new laptop

2007-04-02 Thread Michael W. Lucas

Hi folks,

I've scoured Google seeking wisdom, and found nothing except hordes of
Linux users whining about this same problem.  FreeBSD users don't seem
to have this issue, except for me.  Finally I have no choice but to
throw myself on your tender mercies.

I've been going nuts trying to get 1440x900 resolution on my new
Toshiba P105.  Any help anyone could offer would be greatly
appreciated.  Xorg assures me that the 945GM video card is supported
by the i810 driver, provided I use the 915resolution program to set
the resolution before starting X.  I run:

/usr/local/bin/915resolution 3c 1440 900

to add the resolution 1440x900 to the video BIOS.  915resolution -l
now shows me:

...
Mode 3c : 1440x900, 8 bits/pixel
...
Mode 4d : 1440x900, 16 bits/pixel
...
Mode 5c : 1440x900, 32 bits/pixel
..

So, in theory 1440x900 should be available to the card.

startx fails without a config file, so I let it create one and tweaked
in based on gossip, rumour, and innuendo I've uncovered in three days
of Web searching.  I get something that looks *about* like 1200x768,
but it's a far cry from 1440x900.

pciconf -lv tells me:

...
[EMAIL PROTECTED]:2:0:   class=0x03 card=0xff311179 chip=0x27a28086 
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = 'Mobile Integrated Graphics Controller'
class  = display
subclass   = VGA
[EMAIL PROTECTED]:2:1:   class=0x038000 card=0xff311179 chip=0x27a68086 
rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = 'Mobile Integrated Graphics Controller'
class  = display
...

Here's relevant stuff trimmed from my xorg.conf.

--

Section "Module"
Load  "extmod"
Load  "glx"
Load  "dri"
Load  "dbe"
Load  "record"
Load  "xtrap"
Load  "type1"
Load  "freetype"
Load  "i2c"
Load  "bitmap"
Load  "int10"
EndSection

...

Section "Monitor"
#DisplaySize  370   230 # mm
Identifier   "Monitor0"
VendorName   "LPL"
ModelName"0"
EndSection

Section "Device"
### Available Driver options are:-
### Values: : integer, : float, : "True"/"False",
### : "String", : " Hz/kHz/MHz"
### [arg]: arg optional
#Option "NoAccel"   # []
#Option "SWcursor"  # []
#Option "ColorKey"  # 
#Option "CacheLines"# 
#Option "Dac6Bit"   # []
#Option "DRI"   # []
#Option "NoDDC" # []
#Option "ShowCache" # []
#Option "XvMCSurfaces"  # 
#Option "PageFlip"  # []
Identifier  "Card0"
Driver  "i810"
VendorName  "Intel Corporation"
BoardName   "Mobile Integrated Graphics Controller"
BusID   "PCI:0:2:0"
EndSection

Section "Screen"
Identifier "Screen0"
Device "Card0"
Monitor"Monitor0"
DefaultDepth 24
SubSection "Display"
Viewport   0 0
Depth 1
Modes   "1440x900"
EndSubSection
SubSection "Display"
Viewport   0 0
Depth 4
EndSubSection
SubSection "Display"
Viewport   0 0
Depth 8
Modes   "1440x900"
    EndSubSection
SubSection "Display"
Viewport   0 0
Depth 15
Modes   "1440x900"
EndSubSection
SubSection "Display"
Viewport   0 0
Depth 16
Modes   "1440x900"
EndSubSection
SubSection "Display"
Viewport   0 0
Depth 24
Modes   "1440x900"
EndSubSection
EndSection

Any ideas, anyone?

Thanks,
==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
Latest book: PGP & GPG -- http://www.pgpandgpg.com
"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: pfspamd greylisting stuttering at everything

2006-10-26 Thread Michael W. Lucas
On Mon, Oct 23, 2006 at 08:20:32AM +0200, Peter N. M. Hansteen wrote:
> > I'm set up just like the man page, but every incoming connection is
> > being stuttered at.  This plays havoc with incoming legit mail, of
> > course, and I've been forced to fall back on older antispam tools.
> 
> Are you sure you are actually seeing stuttering, not just the
> greylisting database getting (slowly) initialized?  

[sorry for the delay answering, I needed to spend some quality time
with my mailserver to answer this thoroughly.]

Well, if I manually telnet to port 25 from any machine, I get about
one character a second.  And I get taunted.  I don't think that's the
innocuous 451 error mentioned in the manual.

> You should expect a 'silent period' while the machines which are
> trying to send you mail prove their good intentions to your
> greylister.  The point of greylisting, after all, is to force
> correspondents to retry 'within a reasonable time'.  The lower
> threshold for 'reasonable' is set with the first of the -G arguments
> to spamd.  The other factor is how long the correspondent takes to
> actually retry, which depends on a number of other factors you really
> can't influence much, such as the size of that server's outgoing
> queue.

I've let it run for three hours this morning.

Before starting pfspamd today, I checked my spamdb.  spamdb listed 12
entries.  After 3 hours, spamdb listed the same 12 entries.  My spamd
logs to /var/log/spam, which has many interesting entries in it:

Oct 26 11:18:31 bewilderbeast spamd[731]: (GREY) 216.136.204.119: <[EMAIL 
PROTECTED]> -> <[EMAIL PROTECTED]>
Oct 26 11:18:40 bewilderbeast spamd[731]: 204.127.192.84: connected (12/1)
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: From: Leila Wood 
<[EMAIL PROTECTED]>
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: To: [EMAIL PROTECTED]
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Subject: caustic assent
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: This is a 
multi-part message in MIME format.
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: 
--060605040706020008040508
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: Content-Type: 
text/html; charset=ISO-8859-1
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: 
Content-Transfer-Encoding: 7bit
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: 
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: 
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body: 
Oct 26 11:18:47 bewilderbeast spamd[731]: 89.110.7.178: Body:  
Oct 26 11:19:13 bewilderbeast spamd[731]: 204.152.190.11: disconnected after 
390 seconds.
Oct 26 11:19:15 bewilderbeast spamd[731]: 12.130.136.42: disconnected after 390 
seconds.
Oct 26 11:19:34 bewilderbeast spamd[731]: 89.110.7.178: disconnected after 390 
seconds.
Oct 26 11:19:48 bewilderbeast spamd[731]: 200.52.66.237: connected (10/1)

So, bad stuff is making it there.

Good stuff is as well, though.  I sent an email from work to test the
setup:

bewilderbeast~;grep gkn /var/log/spamd
Oct 26 11:33:59 bewilderbeast spamd[4622]: (GREY) 194.76.60.27: <[EMAIL 
PROTECTED]> -> <[EMAIL PROTECTED]>
Oct 26 11:35:42 bewilderbeast spamd[4622]: 194.76.60.27: From: "Michael Lucas 
\(DL\)" <[EMAIL PROTECTED]>
Oct 26 11:35:42 bewilderbeast spamd[4622]: 194.76.60.27: Body: [EMAIL PROTECTED]
Oct 26 11:41:50 bewilderbeast spamd[4622]: (GREY) 194.76.60.27: <[EMAIL 
PROTECTED]> -> <[EMAIL PROTECTED]>
Oct 26 11:43:33 bewilderbeast spamd[4622]: 194.76.60.27: From: "Michael Lucas 
\(DL\)" <[EMAIL PROTECTED]>
Oct 26 11:43:33 bewilderbeast spamd[4622]: 194.76.60.27: Body: [EMAIL PROTECTED]

Ten minute delay between the first and last attempt.
I'm running spamd as below:

pfspamd_flags="-v -G7:4:864 -r451"

This tells me that after seven minutes, the next attempt should be
graylisted and handed to my mail server.

bewilderbeast~;grep gkn /var/log/maillog
bewilderbeast~;

Nothing.

bewilderbeast~;spamdb | grep gkn
bewilderbeast~;

Nothing again.

> I would give the initial database buildup a few hours at least.  If
> you're impatient and you have a few addresses which you consider
> 'known good', you could whitelist them using 
> 
>   # spamdb -a nnn.nnn.nnn.nnn

I'd rather avoid whitelisting manually, except perhaps my home IP,
until I know greylisting works on its own.

> see spamdb(8) for details.  I suppose that man page could do with a
> bit more text.

All of spamd could use some documentation, but that'll happen.  ;-)

> PS  My favorite quote about spamd and greylisting at the moment is this
> recent message to openbsd-misc: 
> http://marc.theaimsgroup.com/?l=open

pfspamd greylisting stuttering at everything

2006-10-21 Thread Michael W. Lucas

Hi,

I hear greylisting is wonderful, and yet it's being unkind to me.  Any
help would be appreciated.

According to spamd(8), addresses that are not in the spamd table
should not be stuttered at when spamd(8) is running in greylisting
mode; rather they should just get a 451 and watch for more incoming
connections.

I'm set up just like the man page, but every incoming connection is
being stuttered at.  This plays havoc with incoming legit mail, of
course, and I've been forced to fall back on older antispam tools.

spamd is running as:

spamd -v -G7:4:864 -r451

My pf.conf is just:

---
int="vr0"
my_address="198.22.63.8"

table  persist
table  persist 
table  persist file "/usr/local/etc/spamd/whitelist"

no rdr on {lo0} from any to any

rdr pass inet proto tcp from  to $my_address port smtp -> 
$my_address port smtp
rdr pass inet proto tcp from  to any port smtp -> 127.0.0.1 port 8025
rdr pass inet proto tcp from ! to any port smtp -> 127.0.0.1 port 
8025

pass in on $int proto tcp from any to $int port 22 flags S/SA keep state
---

(OK, the last rule should not be necessary, but I'm being careful.)

My spamd.conf is very textbook:

--
all:\
:spamhaus:spews1:china:korea:whitelist:

spamhaus:\
:black:\
:msg="SPAM. Your address %A is in the Spamhaus Block List\n\
See http://www.spamhaus.org/sbl and\
http://www.abuse.net/sbl.phtml?IP=%A for more details":\
:method=http:\
:file=www.openbsd.org/spamd/SBL.cidr.gz:

spews1:\
:black:\
:msg="SPAM. Your address %A is in the spews level 1 database\n\
See http://www.spews.org/ask.cgi?x=%A for more details":\
:method=http:\
:file=www.openbsd.org/spamd/spews_list_level1.txt.gz:

spews2:\
:black:\
:msg="SPAM. Your address %A is in the spews level 2 database\n\
See http://www.spews.org/ask.cgi?x=%A for more details":\
:method=http:\
:file=www.openbsd.org/spamd/spews_list_level2.txt.gz:

china:\
:black:\
:msg="SPAM. Your address %A appears to be from China\n\
See http://www.okean.com/asianspamblocks.html for more details":\
:method=http:\
:file=www.openbsd.org/spamd/chinacidr.txt.gz:

korea:\
:black:\
:msg="SPAM. Your address %A appears to be from Korea\n\
See http://www.okean.com/asianspamblocks.html for more details":\
:method=http:\
:file=www.openbsd.org/spamd/koreacidr.txt.gz:

whitelist:\
:white:\
:file=/usr/local/etc/spamd/whitelist:

relaydb-black:\
:black:\
:msg="SPAM. Your address %A is in my relaydb list.":\
:method=exec:\
:file=relaydb -4lb:

relaydb-white:\
:white:\
:method=exec:\
:file=relaydb -4lw:
---

I'm missing something obvious, I'm sure... something so obvious that
everyone else has caught it.  Any suggestions?

Thanks,
==ml


-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
Latest book: PGP & GPG -- http://www.pgpandgpg.com
"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


mimedefang, perl, and amd64 trouble

2006-10-17 Thread Michael W. Lucas
Hi,

(copying wes@, the mimedefang maintainer, just because it might
possibly be his headache.)

I have a brand-new, freshly-cvsupped 7.0 amd64 box as a mail server.
Perl seems to be having troubles; when I fire up mimedefang, it can't
load some dependencies.

Oct 17 21:47:39 bewilderbeast mimedefang-multiplexor[1730]: Starting slave 0 
(pid 1747) (
1 running): Bringing slaves up to minSlaves (2)
Oct 17 21:47:39 bewilderbeast mimedefang-multiplexor[1730]: Slave 0 stderr: 
Can't load '/
usr/local/lib/perl5/5.8.8/mach/auto/Sys/Hostname/Hostname.so' for module 
Sys::Hostname: /
usr/local/lib/perl5/5.8.8/mach/auto/Sys/Hostname/Hostname.so: mmap of entire 
address spac
e failed: Cannot allocate memory at /usr/local/lib/perl5/5.8.8/mach/XSLoader.pm 
line 70. 
 at /usr/local/lib/perl5/5.8.8/mach/Sys/Hostname.pm line 23
Oct 17 21:47:39 bewilderbeast mimedefang-multiplexor[1730]: Slave 0 stderr: 
Can't load '/
usr/local/lib/perl5/5.8.8/mach/auto/File/Glob/Glob.so' for module File::Glob: 
/usr/local/
lib/perl5/5.8.8/mach/auto/File/Glob/Glob.so: mmap of entire address space 
failed: Cannot 
allocate memory at /usr/local/lib/perl5/5.8.8/mach/XSLoader.pm line 70.  at 
/usr/local/li
b/perl5/5.8.8/mach/File/Glob.pm line 96 Compilation failed in require at 
/usr/local/bin/m
imedefang.pl line 3197. BEGIN failed--compilation aborted at 
/usr/local/bin/mimedefang.pl
 line 3197.
Oct 17 21:47:39 bewilderbeast mimedefang-multiplexor[1730]: Reap: slave 0 (pid 
1747) exit
ed normally with status 255 (SLAVE DIED UNEXPECTEDLY)

Has anyone seen anything like this on FreeBSD before?  I know that
Wine has had some mmap problems, but I imagine a Perl failure would be
big news here...

Any ideas or suggestions appreciated.

==ml

--
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
Latest book: PGP & GPG -- http://www.pgpandgpg.com
"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


ng_fec headaches

2006-08-28 Thread Michael W. Lucas
pcib3
pcib4:  at device 4.0 on pci0
pci4:  on pcib4
pcib5:  at device 5.0 on pci0
pci5:  on pcib5
pcib6:  at device 0.0 on pci5
pci6:  on pcib6
em0:  port 0xecc0-0xecff 
mem 0xfe6e-0xfe6f irq 64 at device 7.0 on pci6
em0: Ethernet address: 00:13:72:64:cc:9d
pcib7:  at device 0.2 on pci5
pci7:  on pcib7
em1:  port 0xdcc0-0xdcff 
mem 0xfe4e-0xfe4f irq 65 at device 8.0 on pci7
em1: Ethernet address: 00:13:72:64:cc:9e
pcib8:  at device 6.0 on pci0
pci8:  on pcib8
pcib9:  at device 0.0 on pci8
pci9:  on pcib9
em2:  port 0xccc0-0xccff 
mem 0xfe1e-0xfe1f irq 106 at device 4.0 on pci9
em2: Ethernet address: 00:04:23:ce:45:d6
em3:  port 0xcc80-0xccbf 
mem 0xfe1c-0xfe1d irq 107 at device 4.1 on pci9
em3: Ethernet address: 00:04:23:ce:45:d7
pcib10:  at device 0.2 on pci8
pci10:  on pcib10
em4:  port 0xbcc0-0xbcff 
mem 0xfdfe-0xfdff,0xfdf8-0xfdfb irq 96 at device 2.0 on pci10
em4: Ethernet address: 00:04:23:c2:91:02
em5:  port 0xbc80-0xbcbf 
mem 0xfdfc-0xfdfd,0xfdf4-0xfdf7 irq 97 at device 2.1 on pci10
em5: Ethernet address: 00:04:23:c2:91:03
em6:  port 0xbc40-0xbc7f 
mem 0xfdf2-0xfdf3 irq 101 at device 3.0 on pci10
em6: Ethernet address: 00:04:23:ce:4c:2a
em7:  port 0xbc00-0xbc3f 
mem 0xfdf0-0xfdf1 irq 102 at device 3.1 on pci10
em7: Ethernet address: 00:04:23:ce:4c:2b
uhci0:  port 0x9ce0-0x9cff irq 16 at 
device 29.0 on pci0
uhci0: [GIANT-LOCKED]
usb0:  on uhci0
usb0: USB revision 1.0
uhub0:  on usb0
uhub0: 2 ports with 2 removable, self powered
uhci1:  port 0x9cc0-0x9cdf irq 19 at 
device 29.1 on pci0
uhci1: [GIANT-LOCKED]
usb1:  on uhci1
usb1: USB revision 1.0
uhub1:  on usb1
uhub1: 2 ports with 2 removable, self powered
uhci2:  port 0x9ca0-0x9cbf irq 18 at 
device 29.2 on pci0
uhci2: [GIANT-LOCKED]
usb2:  on uhci2
usb2: USB revision 1.0
uhub2:  on usb2
uhub2: 2 ports with 2 removable, self powered
ehci0:  mem 0xfeb0-0xfeb003ff 
irq 23 at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
usb3: EHCI version 1.0
usb3: companion controllers, 2 ports each: usb0 usb1 usb2
usb3:  on ehci0
usb3: USB revision 2.0
uhub3:  on usb3
uhub3: 6 ports with 6 removable, self powered
uhub4:  on uhub3
uhub4: multiple transaction translators
uhub4: 2 ports with 2 removable, self powered
pcib11:  at device 30.0 on pci0
pci11:  on pcib11
vgapci0:  port 0xac00-0xacff mem 
0xf000-0xf7ff,0xfdcf-0xfdcf irq 18 at device 13.0 on pci11
isab0:  at device 31.0 on pci0
isa0:  on isab0
atapci0:  port 
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 31.1 on pci0
ata0:  on atapci0
ata1:  on atapci0
acpi_hpet0:  iomem 0xfed0-0xfed003ff on acpi0
Timecounter "HPET" frequency 14318180 Hz quality 2000
fdc0:  port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FAST]
atkbdc0:  port 0x60,0x64 irq 1 on acpi0
atkbd0:  flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0:  irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: model IntelliMouse Explorer, device ID 4
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A
sio0: [FAST]
orm0:  at iomem 0xc-0xcafff,0xec000-0xe on isa0
sc0:  at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0:  at port 0x3c0-0x3df iomem 0xa-0xb on isa0
Timecounters tick every 1.000 msec
acd0: CDROM  at ata0-master UDMA33
amr0: delete logical drives supported by controller
amrd0:  on amr0
amrd0: 1430400MB (2929459200 sectors) RAID 5 (optimal)
SMP: AP CPU #1 Launched!
Trying to mount root from ufs:/dev/amrd0s1a




-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
Latest book: PGP & GPG -- http://www.pgpandgpg.com
"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Proper startup of ng_fec?

2006-08-21 Thread Michael W. Lucas
Hi,

I'm looking at using ng_fec to implement "adapter teaming" -- it
appears that Cisco switches swallow it more easily than ng_one2many.
Is there a proper way to configure a Netgraph interface at boot?  A
search for ngctl in /etc/rc.d/* only leads to the Bluetooth startup.

It appears that I need to write a custom rc.d script to have a
ng_one2many interface appear and start early in the boot sequence.
Anyone have a better way?

Thanks,

==ml


-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/
Latest book: PGP & GPG -- http://www.pgpandgpg.com
"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: filling up UDP socket buffers like mad

2006-03-27 Thread Michael W. Lucas
On Mon, Mar 27, 2006 at 04:29:31PM +0100, Freminlins wrote:
> Michael,
> 
> On 3/27/06, Michael W. Lucas <[EMAIL PROTECTED]> wrote:
> >
> > # netstat -na
> > udp4   43414  0  *.514  *.*
> 
> 
> That's a big queue.

Yep.  Mine is bigger than yours.  :-)

> I'm attaching the output of netstat -na and netstat -s for general
> > informative purposes; if anyone has any further suggestions, I'm all
> > ears.

> Try running syslogd with -n.

Trying now, thanks!

I'm also going to drop a line on hackers@, see if anyone over there is
interested in syslogd problems.

Thanks to everyone for the help.

==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/

"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: filling up UDP socket buffers like mad

2006-03-27 Thread Michael W. Lucas
On Mon, Mar 27, 2006 at 10:22:18AM -0500, Chuck Swiger wrote:
> Michael W. Lucas wrote:
> > On Fri, Mar 24, 2006 at 06:03:47PM -0500, Charles Swiger wrote:
> [ ... ]
> > udp4   43414  0  *.514  *.*
> > udp4   0  0  *.49661*.*
> > ...
> > 
> > We have no firewall on this machine; it's buried behind three layers
> > of firewall.
> 
> Heh.  :-)  Well, it's pretty clear that the syslog traffic isn't being drained
> by the syslog daemon properly.  I've seen syslogd get stuck like that if it 
> was
> forwarding logs to another host specified by name and not IP, and it was 
> having
> problems resolving it.

This *is* the loghost other hosts are forwarding their logs to.  So,
I'm pretty sure that's not it.  :-)

==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/

"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: filling up UDP socket buffers like mad

2006-03-27 Thread Michael W. Lucas
On Fri, Mar 24, 2006 at 06:03:47PM -0500, Charles Swiger wrote:
> On Mar 24, 2006, at 4:17 PM, Michael W. Lucas wrote:
> >Running FreeBSD 6.1-PRERELEASE as a DNS, dhcp, and syslog server.
> >
> >I'm having trouble with DNS, DHCP, and syslogd locking up, and I think
> >I've found what they all share in common.
> >
> >During the lockups, the box starts dropping UDP due to full socket
> >buffers.  I have a dumb little script to capture the rate of drops
> >over 5 seconds, and it's about 45 a second.
> >
> >168725 dropped due to full socket buffers
> >168958 dropped due to full socket buffers
> 
> There is generally a cause behind the socket buffers filling up,  
> whether that is some form of livelock due to an OS problem or a  
> misconfiguration with a firewall/dummynet setup.  You could look at  
> the output of "netstat -a(n)" for insight as to where the packets are  
> being queued up, but "netstat -s" would be useful to show to us as well.

Thanks.  I think you've shown me how to find the problem:

# netstat -na
...
udp4   0  0  127.0.0.1.57058127.0.0.1.53   
udp4   0  0  127.0.0.1.61259127.0.0.1.53   
udp4   0  0  127.0.0.1.54240127.0.0.1.53   
udp4   0  0  127.0.0.1.52997127.0.0.1.53   
udp4   0  0  *.67   *.*
udp4   43414  0  *.514  *.*
udp4   0  0  *.49661*.*
...

We have no firewall on this machine; it's buried behind three layers
of firewall.

I've tried running syslogd in debug mode, but not found anything
particularly useful yet.  Syslogd is now set to restart every 15
minutes, and run in debug mode, so hopefully the next time this
happens I'll have the debugging output.  The problem happens even
within fifteen minutes, but because of my timeouts nobody notices.

I'm attaching the output of netstat -na and netstat -s for general
informative purposes; if anyone has any further suggestions, I'm all
ears.

Thanks,
==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/

"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur




Active Internet connections (including servers)
Proto Recv-Q Send-Q  Local Address  Foreign Address(state)
tcp4  96  0  10.184.1.11.53 10.184.1.8.49838   ESTABLISHED
tcp4 104  0  10.184.1.11.53 10.184.1.8.61719   ESTABLISHED
tcp4   0  0  127.0.0.1.6011 *.*LISTEN
tcp4   0 48  10.184.1.11.22 10.184.184.108.52392   ESTABLISHED
tcp4   0  0  127.0.0.1.6010 *.*LISTEN
tcp4   0  0  10.184.1.11.22 10.184.184.108.64567   ESTABLISHED
tcp4   0  0  *.199  *.*LISTEN
tcp4   0  0  *.80   *.*LISTEN
tcp4   0  0  127.0.0.1.25   *.*LISTEN
tcp4   0  0  *.22   *.*LISTEN
tcp4   0  0  127.0.0.1.953  *.*LISTEN
tcp4   0  0  127.0.0.1.53   *.*LISTEN
tcp4   0  0  10.184.3.248.53*.*LISTEN
tcp4   0  0  10.184.1.11.53 *.*LISTEN
udp4   0  0  127.0.0.1.59578127.0.0.1.53   
udp4   0  0  127.0.0.1.57058127.0.0.1.53   
udp4   0  0  127.0.0.1.61259127.0.0.1.53   
udp4   0  0  127.0.0.1.54240127.0.0.1.53   
udp4   0  0  127.0.0.1.52997127.0.0.1.53   
udp4   0  0  *.67   *.*
udp4   43414  0  *.514  *.*
udp4   0  0  *.49661*.*
udp4   0  0  *.52767*.*
udp4   0  0  *.63357*.*
udp4   0  0  127.0.0.1.58915127.0.0.1.5680 
udp4   0  0  127.0.0.1.62275127.0.0.1.5679 
udp4   0  0  127.0.0.1.57431127.0.0.1.5678 
udp4   0  0  *.63077*.*
udp4   0  0  *.161  *.*
udp4   0  0  *.57589*.*
udp4   0  0  *.5681 *.*
udp4   0  0  127.0.0.1.5680 *.*
udp4   0  0  127.0.0.1.5679 *.*
udp4   0  0  127.0.0.1.5678 *.*
udp4

filling up UDP socket buffers like mad

2006-03-24 Thread Michael W. Lucas

Hi,

Running FreeBSD 6.1-PRERELEASE as a DNS, dhcp, and syslog server.

I'm having trouble with DNS, DHCP, and syslogd locking up, and I think
I've found what they all share in common.

During the lockups, the box starts dropping UDP due to full socket
buffers.  I have a dumb little script to capture the rate of drops
over 5 seconds, and it's about 45 a second.

168725 dropped due to full socket buffers
168958 dropped due to full socket buffers

Right now, named and syslogd are in cron to restart every 15 minutes.
Once they restart, everything works fine.  Immediately after the
reload, the UDP drops cease.  The script reveals no change in the
number of drops... for a few minutes.

I've turned kern.ipc.maxsockbuf to increase the number of UDP buffers,
which Google tells me is correct.  Mind you, I'd previously tuned it
to 8388608.  I've now doubled that again, to 16777216.  I really don't
want to just keep doubling this resource when something happens.

The best thing to do here is to identify what's using all these
sockets, but I'm stumped on how to do that.  My bowels tell me it's
syslogd, because that's the program that is most resistant to
restarting, but that's a pretty crappy reason.  Any thoughts?

Thanks,
==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/

"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: replacement for Acrobat Professional?

2006-01-11 Thread Michael W. Lucas
On Thu, Jan 12, 2006 at 09:43:55AM +1030, Greg 'groggy' Lehey wrote:
> *sigh* Yet Another Undocumented Program.  "README" is 92 lines long,
> half of which deals with installation issues.  I'll look later.

It has a minimal GUI with some usable stuff for what I wanted.
> > But OpenOffice's PDF export is far easier for
> > preparing PDFs in general.
> 
> And ghostscript is even easier.

If, say, you're the sort of guy who writes entire books in
troff/mdoc/etc.  :-)

From what I know of how you work, I imagine that flpsed would not be
very helpful.

> I'd need convincing that any PDF editor is the correct way to prepare
> documents; there are much more precise tools available for that.  

Agreed, completely and absolutely.

> I
> thought your original requirement was to mark up existing PDFs, and it
> still sounds like a good idea for that.

That is the requirement: they send me the final PDFs with the page
layouts all done, and their comments in the margins.  I go through and
make my comments direct in the document, and then they have someone go
through and rearrange according to my comments on their comments,
strip out everyone's comments, and send it to the printer.

Scary?  Yes.  Terrifying, actually.  But more and more web presses
speak PDF.  It could be worse; they *could* speak only MS .doc...

And hey, I imagine that *you* of all people would understand dealing
with publishers and printers.  :-)

==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/

"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur


pgpG4biz0UKuY.pgp
Description: PGP signature


Re: replacement for Acrobat Professional?

2006-01-11 Thread Michael W. Lucas
On Tue, Jan 10, 2006 at 11:59:35PM -0600, Kevin Kinsey wrote:
> It's up to Michael, though, to tell us how well it works, I suppose.  No
> package in packages-6-current/Latest, so I'm building from src, and
> headed for bed before it gets done I imagine.

So, for posterity...

I'd rate pdftops and flpsed as 95% of the way there for this audience.
Some small things don't work, particularly "layered" elements.  Some
parts of the manuscript I was given were highlighted, for example.  In
the original the highlighting is transparent, while the pdftops/flpsed
combination the highlighting obliterates the underlying text.  There
are other, very minor variations.

That last 5% might not be critical for most people; I would certainly
use it for preparing personal documents, or even documents within my
company.  But OpenOffice's PDF export is far easier for preparing PDFs
in general.

for this application, pdftops/flpsed is not acceptable.  When you dump
a PDF directly to a web press and produce a book from it, tiny
variations in page placement or layout will result in a really useless
print run.  But from the various tools people have suggested and that
I've tried last night and this morning, it's as good as we have.

Thanks for all the help, I'll do this the old-fashioned way.

==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/

"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: replacement for Acrobat Professional?

2006-01-11 Thread Michael W. Lucas
On Tue, Jan 10, 2006 at 11:59:35PM -0600, Kevin Kinsey wrote:
> >It looks as if people have missed the point that you want to edit
> >PDFs.  If you find a good solution, will you post it, please?

Absolutely.  Actually, I'll be posting my results for posterity
anyway.

> Well, I think Denny had it pretty well when he said:
>   "http://www.freebsdsoftware.org/print/flpsed.html";
> 
> #grep -i PDF /usr/ports/print/flpsed/pkg-descr
> Using pdftops, which is part of xpdf one can convert PDF documents to
>* Import and export PDF.  Therefore it can be used as a PDF editor.

This looks like the best option to me.  I missed this in my search.  :-(

I never thought I'd say this, but we have too *much* software available...

==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/

"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: replacement for Acrobat Professional?

2006-01-10 Thread Michael W. Lucas
On Tue, Jan 10, 2006 at 10:18:35PM +, Ceri Davies wrote:
> 
> On 9 Jan 2006, at 19:53, Michael W. Lucas wrote:
> 
> >
> >Hi folks,
> >
> >I've been handed a whole bunch of PDFs and asked to make my comments
> >directly in them.  I'm sure there's something in ports that can do
> >that, but my search hasn't turned up anything.  (Of course, I really
> >have no idea what I'm looking for, which hampers the search. :-)
> 
> A printer and a red biro out of the question?

It's worked for me for twenty years now.

Emailing them back to five or six people so they can make further
comments is the hard part.  :-)

==ml

-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/

"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


replacement for Acrobat Professional?

2006-01-09 Thread Michael W. Lucas

Hi folks, 

I've been handed a whole bunch of PDFs and asked to make my comments
directly in them.  I'm sure there's something in ports that can do
that, but my search hasn't turned up anything.  (Of course, I really
have no idea what I'm looking for, which hampers the search. :-)

Any suggestions on a replacement for or equivalent to Acrobat Pro?

I'm on a -current box running i386.

Thanks for any pointers,

==ml


-- 
Michael W. Lucas[EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.BlackHelicopters.org/~mwlucas/

"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Maximum uptime 497 days?

2004-06-28 Thread Michael W. Lucas
On Tue, Jun 29, 2004 at 12:40:53AM +0900, Rob wrote:
> Michael W. Lucas wrote:
> >Hi,
> >
> >This tickles something in the back of my memory.
> >
> >You aren't by chance talking about remote uptime detection,
> >Netcraft-style, are you?
> >
> >IIRC, that rolls over to 0 at 497 days.  But actual system uptime is
> >unaffected.
> 
> Yes, I read it first time on a Netcraft's webpage, then googled and found
> other reports as well. So this 497 limitation is only for Netscaft's way
> of measuring up-time?
> 
> Rob.

Yep.

It's a counter that rolls over in the TCP stack.

==ml

-- 
Michael Lucas   [EMAIL PROTECTED], [EMAIL PROTECTED]
   "I'm sorry, but 'Social Darwinism' is no excuse for killing all of 
   your co-workers."  -- Ivan Brunetti
http://www.BlackHelicopters.org/~mwlucas/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Maximum uptime 497 days?

2004-06-28 Thread Michael W. Lucas

Hi,

This tickles something in the back of my memory.

You aren't by chance talking about remote uptime detection,
Netcraft-style, are you?

IIRC, that rolls over to 0 at 497 days.  But actual system uptime is
unaffected.

==ml

On Mon, Jun 28, 2004 at 12:39:30PM +0900, Rob wrote:
> 
> Hi,
> 
> By accident I happen to come across this remarkable limit of
> uptime registration for FreeBSD systems. After 497 days, the
> timer jumps to zero again.
> 
> 497 days is less than a 1.5 years !
> 
> Has this been fixed in newer versions of FreeBSD (stable and/or
> current) ? Or is there a hardware limitation (CPU?) that does
> not allow this?
> 
> Just wondering.
> 
> Regards,
> Rob.
> 
> 
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

-- 
Michael Lucas   [EMAIL PROTECTED], [EMAIL PROTECTED]
   "I'm sorry, but 'Social Darwinism' is no excuse for killing all of 
   your co-workers."  -- Ivan Brunetti
http://www.BlackHelicopters.org/~mwlucas/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


play a music CD backwards?

2004-03-09 Thread Michael W. Lucas
No, I'm not looking for satanic messages.  :-)  

I have a music CD that was pressed from a master tape run backwards
(Throbbing Gristle's "2nd Annual Report", if anyone cares).  It would
be nice to hear it forwards.

Can someone suggest a way to hear a CD backwards?  Sadly, none of the
standard CD players have this option.  I'd happily rip this to MP3 if
I could find a MP3 player with a "play backwards" option.

==ml

-- 
Michael Lucas   [EMAIL PROTECTED], [EMAIL PROTECTED]

Today's chance of throwing it all away to start a goat farm: 44.3%
http://www.BlackHelicopters.org/~mwlucas/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"