Re: chrooting SSH users into their home directories

2005-09-02 Thread Ed Stover
On Fri, September 2, 2005 2:50 pm, Brian Kaczynski wrote:
> I was wondering how you could lock a user into their home with chroot
> when using SSH, similar to what the /etc/ftpchroot file does for FTP
> users. The ssh server is sshd.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>
off the top of my head use a restricted bash shell


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mouse wheel problem

2005-09-01 Thread Ed Stover
On Thu, September 1, 2005 10:38 am, Dave McCammon wrote:
>
>
> --- Alejandro Pulver <[EMAIL PROTECTED]> wrote:
>
>> On Tue, 30 Aug 2005 11:57:18 -0500
>> "Efren Bravo" <[EMAIL PROTECTED]> wrote:
>>
>> > Hi,
>> >
>> > I've written on /etc/rc.conf :
>> >
>> > moused_port="/dev/psm0"
>> > moused_flags="-r high -z 4"
>> > moused_type="auto"
>> > moused_enable="YES"
>> >
>> > and on /etc/X11/xorg.conf
>> >
>> > Section "InputDevice"
>> > Identifier  "Mouse0"
>> > Driver  "mouse"
>> > Option  "Protocol" "auto"
>> > Option  "Device" "/dev/sysmouse"
>> > Option  "Buttons" "5"
>> > Option  "ZAxisMapping" "4 5"
>> > EndSection
>> >
>> > But the scrollwheel doesn't work. I've tried with
>> Kde's
>> > Applications.
>> > Have I a bad configuration?
>> >
>> > Thanks...
>> >
>>
>> Hello,
>>
>> It works for me without the "ZAxisMapping" option
>> (and the same
>> options in rc.conf):
>>
>> Identifier   "Mouse1"
>> Driver   "mouse"
>> Option   "Protocol"  "Auto"
>> Option   "Device""/dev/sysmouse"
>> Option   "Buttons"   "5"
>>
>> Best Regards,
>> Ale
>
> I had a heck of a time getting my wheel to work in
> RELENG_6. Eventually, starting moused with setting in
> rc.conf(below) and turning off Emulate3Buttons (had to
> put line in with the "false". commenting out didn't
> work) and adding the "Buttons" line worked. The
> instructions out of the handbook didn't work this
> time.
>
> xorg.conf sections--
> Section "InputDevice"
>
> # Identifier and driver
>
> Identifier  "Mouse1"
>  Driver "mouse"
>  Option "Protocol""auto"
>  Option "Device"  "/dev/sysmouse"
>
> Option "Emulate3Buttons" "false"
>Option "Buttons" "5"
>
> EndSection
>
> rc.conf---
> moused_enable="YES"
> moused_type="auto"
> moused_flags="-z 4"
>
> excerpt from dmesg--
> psm0:  irq 12 on atkbdc0
> psm0: [GIANT-LOCKED]
> psm0: model IntelliMouse, device ID 3
>
> (It is a Logitech optic mouse.Two button with Wheel)
>
>

Yeah , this one time at band camp, I had a brand new mouse with a wheel
and for the life of me i couldent get the stupid thing to work. I treid
everything from new drivers, x configs, etc, etc turned out, my mouse
was honestly brokewasted about four hours on that stupid thing... grr.
Who needs mice anyways...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: problem with email...

2005-08-31 Thread Ed Stover
On Wed, August 31, 2005 10:40 am, [EMAIL PROTECTED] wrote:
> Hello,
>
> Thank you in advance for your help.  My name is Karen Donathan and I am
> the Computer Science teacher at George Washington High School in
> Charleston, WV.  (http://gwhs.kana.k12.wv.us).  We have been running
> FreeBSD on our webserver for abuot 5 years.
>
> Over the summer, I recently began getting "fake" email messages from
> [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],[EMAIL PROTECTED], 
> etc.
> etc. etc.  The subject line is always something like "YOUR ACCOUNT IS
> SUSPENDED", "You have successfully updated your password", etc.
> Each of these contain an attachment, so I know that a virus is trying to
> get into our server.  I need some suggestions on what to do to make this
> stop.
>
> Thank you,
>
> Karen Donathan

I use clam anti virus , works wonders for that. What do you utilize for an
MTA?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: start up command for mysql

2005-08-18 Thread Ed Stover
Andrew L. Gould wrote:
> On Thu, 18 Aug 2005 13:53:13 -0700
> "Mick Wilcoxen" <[EMAIL PROTECTED]> wrote:
> 
> 
>>Ok, really new at this FreeBSD & Mysql stuff.
>> 
>>Which file do i put the startup command and the location of this ?
>> 
>>The startup command is as follows
>> 
>>/usr/local/mysql/bin/safe_mysqld &.
>> 
>>***
>>Mick Wilcoxen
>>(530)933-2882
> 
> 
> If you installed MySQL from the ports, you'll find a start-up file in
> in /usr/local/etc/rc.d/.  Just make sure the file name ends in ".sh"
> and MySQL will be started at bootup.
> 
> Andrew Gould
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 
> 
Dont forget to place it in the /etc/rc.conf as well.. darn rcsubr ;)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: screen grabs

2005-08-17 Thread Ed Stover
Randy Pratt wrote:
> On Tue, 16 Aug 2005 15:34:44 +0100
> "Charles Smyth" <[EMAIL PROTECTED]> wrote:
> 
> 
>>Hi,
>>
>>I wondered if anyone can advise me about how to get screen shots /
>>grabs of the FreeBSD installation screens as shown in the online
>>manual, etc. I can use The Gimp’s resources to do screen shots with
>>everything installed, but this wouldn’t be available at the
>>installation phase. 
>>
> 
> 
> The screenshots in the Handbook were done with vidcontrol:
> 
>   vidcontrol -p < /dev/ttyv0 > shot.scr
> 
> See vidcontrol(1) for further detail.  There are also tools in the ports
> tree (graphics/scr2png) if you need to convert to PNG format.
> 
>   scr2png < shot.scr > shot.png
> 
> Most of the screenshots were taken post-installation.  There are a few
> screens which have different content post-installation than during
> installation and those were edited with editors/hexedit to reflect the
> exact display at installation.
> 
> A few of the screens were captured using the headless install technique
> described in the Handbook in "Advanced Installation" since
> those screens don't display when running Sysinstall after installation.
> 
> HTH,
> 
> Randy
> 
I allways wondered how they did that! now I can hop through some
installation tutorials for some locals.
Thanks!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Aggregated bandwidth

2005-08-17 Thread Ed Stover
jason wrote:
> David wrote:
> 
>> Hello, I have an extra box laying around that I would like to experiment
>> with aggregating cable modem bandwidth. I have 3 nics and 3 cable
>> modems and
>> I would to know if there any way or any app that I can use to combine
>> all 3
>> modems into one 4.5 meg service. What about upstream also?
>>
>> This email is sent as a personal and private communication and is
>> intended
>> for the recipient only. Any divulgence of the contents of this email to
>> persons not addressed is strictly forbidden. Further you or your agent
>> are
>> not authorized to share, rent, or sell this email address to anyone.
>> Violators will be reported.
>>
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to
>> "[EMAIL PROTECTED]"
>>
>>  
>>
> I know it can be done, search for channel bonding.  Also are you paying
> for the 3 modems?  If your isp does not have them in the system you
> should see no extra bandwidth.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
> 

I have read of people doing this with OpenBSD's pf on FreeBSD. If you
search through the archived lists you should be able to find that
somewhere Otherwise, I think you may only be able to do round robin
outgoing connections for maximized bandwidth. Perhaps if you are
planning to serv out of these, you may want to think of doing some sort
of roundrobin DNS...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: I need one command

2005-08-17 Thread Ed Stover
On Wed, August 17, 2005 2:27 pm, Carstea Catalin said:
> I run squid on my freebsd box and i need to know the free memory.
> In redhat exist a nice command #free to show the free memory. In
> FreeBsd how can i get the same result?
>
> --
> Any help would be greatly appreciated.
> regards,
> Carstea Catalin
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>
I usually just use top ;)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: two default routes

2005-07-20 Thread Ed Stover
Emanuel Strobl wrote:
> Am Montag, 18. Juli 2005 05:25 CEST schrieb Jon Falconer:
> 
>>I have two ISP connections, a 45Mb and a 6Mb. Depending on what block of
>>local addresses a packet is coming from will determine which ISP I want
>>to send the packet out. In essence the default route used for a packet
>>depends on its source address (for traffic leaving our campus.) Can
>>someone tell me what package I should read up on (ip,ipf,ipfw,other)? or
> 
> 
> See IPFWs fwd or PFs route-to and reply-to.
> 
> -Harry
> 
> 
>>if I should just do this with a real router and not FreeBSD?
>>
>>Thanks for your insights,
>>
>>Jon
>>
>>___
>>freebsd-questions@freebsd.org mailing list
>>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>To unsubscribe, send any mail to
>>"[EMAIL PROTECTED]"

I am an ipfw advocate but I have seen a number of different people do
this with OPENBSD's pf on FreeBSD. Google it try "load balance pf freebsd".
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: I have found a pc on the side curb

2005-07-20 Thread Ed Stover
David Kelly wrote:
> On Mon, Jul 18, 2005 at 11:46:20AM -0400, Jason Stewart wrote:
> 
>>There are ways to get into a machine without using the password but
>>the only right thing to do in your case would be to reinstall FreeBSD
>>and just use the box that way instead of trying to get at the
>>pre-existing and most likely private installation.
> 
> 
> Betcha that defeats his purpose. Its not to have a FreeBSD machine but
> to be nosey to find out what is on the one he found.
> 
> With physical access to the system its pretty easy to change the root
> password. Is not as if the filesystems are encrypted. Am sure its in the
> archives somewhere but I don't intent to make it easy by saying how.
> 
> Is much harder to force change the password without leaving a
> significant trail.
> 

Kinda reminds me of what the toor acount was really about.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: illegal user root user failed login attempts

2005-05-22 Thread Ed Stover
Alex Zbyslaw wrote:
> Ed Stover wrote:
> 
>> One of my personal favorite things to do is:
>> move ssh to port 1001
>>  
>>
> Is there a reason behind choosing port 1001?  <1024; not registered to
> anything else useful; reasonably memorable?
Well as long as you dont have a service allready running on what ever
the port number is. Sure choose a number that you feel is a nice one.

>  Are there any other useful
> criteria I've missed?
> 
Not that I can think of. Let me know if you need any thing else.
> Thanks,
> 
> --Alex

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: illegal user root user failed login attempts

2005-05-19 Thread Ed Stover
Emanuel Strobl wrote:
> Am Mittwoch, 18. Mai 2005 22:56 schrieb Kirk Strauser:
> 
>>On Tuesday 17 May 2005 09:36, Peter Kropholler wrote:
>>
>>>As things stand, ssh is designed so you can't get at people's
>>>passwords and I am leaving it alone. Focussing instead on the task of
>>>making sure my passwords are strong, limiting AllowUsers to specific
>>>users and trusted ip addresses, and moving ssh off port 22.
>>
>>Alternatively, scrap all that and force RSA authentication after
>>disabling password login.  I could give you my root password (and even
>>my personal password) and there isn't jack you can do with it because no
>>services authenticate off it; it's only useful for logging in locally.
> 
> 
> IMHO that's the only way to cope with these crappy hacked boxes. 
> Additionally that was the original idea of SSH as far as I know.
> Maybe time to think about disabling ChallangeResponseAtuh 
> in /etc/ssh/sshd_conf by default in FreeBSD?
> 
> -Harry
 There is a wealth of things that we can do to for protection:
1:(mentioned earlier) move ssh off port 22
2:use tcp wrappers "/etc/hosts.allow"
3:don't allow users to have a shell or at least restrict the shell (rbash)
4:firewall incoming ssh connections

One of my personal favorite things to do is:
move ssh to port 1001
install portsentry
have portsentry listen to port 22
log, report to abuse, and repeat
you could even finger the machine that is trying to connect. It will
tell you who was logged onto it when the incident happened.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Main web site... & egg on my face

2005-05-19 Thread Ed Stover
Gavin R. Putland wrote:
> Ahem...
> 
> On Wed, 18 May 2005 04:41 pm, Tony Shadwick wrote:
> 
>>Just out of curiousity...
>>
>>cat /etc/resolv.conf
> 
> 
> That gives the local primary and secondary nameservers of
> my ISP, as I believe it should.  The problem was not likely
> to be in my machine because I have done a few OS installs
> in recent days, whereas www.freebsd.org and the underlying
> releng pages, as seen by me, are several months old.
> 
> I was familiar with resolv.conf, but not the following:
> 
> 
>>nslookup www.freebsd.org
> 
> 
> That gives:
> 
> Server: 203.21.20.20
> Address:203.21.20.20#53
> 
> Non-authoritative answer:
> Name:   www.freebsd.org
> Address: 216.136.204.117
> 
> The "Server" is my ISP's primary nameserver.  I don't know
> the significance of the #53, but I can report that it has
> been consistent for a couple of hours.  When I load
> 216.136.204.117 into a browser, I get the UP-TO-DATE
> FreeBSD home page.
> 
> That suggested to me that my ISP uses a proxy which can be
> bypassed by typing the real IP address instead of the
> mnemonic version thereof.  So I got on a bus, went to an
> internet cafe and, having established that the cafe didn't
> use the same ISP, typed in www.freebsd.org... and got the
> up-to-date version.
> 
> So I'll take up the matter with my ISP.  (Or perhaps I
> should change to internode.on.net, whose servers apparently
> run FreeBSD.)
> 
> 
>>:)
> 
> 
> Indeed.
> 
> With thanks (and apologies, if amusement is outweighed by
> annoyance).
> 
> Gavin R. Putland.
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 
I think all of this maybe some scandalous covert government operation to
make people think FreeBSD is not in development any more. ;)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Ethernet over FireWire: How?

2005-05-16 Thread Ed Stover
Olivier Nicole wrote:
> Hi Rob,
> 
> 
>>Can someone give me a layman's answer to how I can
>>use the firewire as the second ethernet card?
>>The backside of the computer has a socket labeled
>>'1394', but this is not a RJ-45 connector. Do I
>>need a converter cable from firewire to RJ-45?
Just drop $15 for another NIC.
> 
>  
> I'd say that "Ethernet over Firewire" is really what it says it is,
> Ethernet is encapsulated in Firewire, so at the other end you also
> need to attach to a "Ethernet over Firewire" device.
> 
> Beside, Firewire is much slower than Ethernet I guess.
Firewire is essentially twice as fast as 100baseT and almost as fast as
1000baseT (GigaBit)
> 
> If you build a router for your lab, I'd recommend that you buy proper
> Ethernet cards, they will prove much more reliable (last longer,
> deliver higher bandwidth, attach nicely to some weird Ethernet
> switches...) than cheap solution like "over Firewire".
"over firewire" is not a cheap solution, actually it will cost you more
upfront and in the long run then ethernet.
> Is it worth
> saving 50$ on a machine that is supposed to handle a good share of
> your lab infrastructure?
Remember a decent NIC is $8-$15  ..
> 
> Olivier
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Filesystem was not properly dismounted (5.4-RELEASE)

2005-05-15 Thread Ed Stover
VnPenguin wrote:
> Hi all,
> On my FreeBSD 5.4 system, when I do "reboot" or "shutdown -h " and
> reboot, there is always a warning at boot time:
> 
> WARNING: / was not properly dismounted
> 
> and fbsd starts filesystem check over / partition (~5GB) :(
> 
> Anyone could explain me why this ? Any solution for help ?
> 
> Thank you,
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 
> 
Why in the world is your / partition ~5Gb ?
256M is what your / should be, 512Mb is even cool... You used to be a
Linux guy huh? ;)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Strange kernel messages

2005-05-15 Thread Ed Stover
Colin J. Raven wrote:
> Hi all!
> I occasionally get these in my daily security run output (which is
> worrying in itself)
> 
> Limiting closed port RST response from 1629 to 200 packets per second
> 
> the number of these can range from one or two, to sometimes 25 - 30
> although the latter case is rarer. Usually there's about six or so.
> These don't arrive every day, usually about once per week on average.
You get those when someone nmaps you. What I do aside from FreeBSD's
builtin anti-DOS stuff is;
1. Blackholeing
2.portsentry (it is kinda a honey pot but has some pretty neat features)
> 
> Is this an OS response to an attempted attack, limiting potential DDOS
> damage? 
yes it is. How heavily loaded is your server?
>That's how I'm reading it, but of course I'm guessing. If that
> *is* so, what mechanism is doing this?
Others have answered this question allready ;)
> 
> FreeBSD 4.11 STABLE
> 
> Regards & TIA
> -Colin
> 
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Slow DNS

2005-05-15 Thread Ed Stover
Xian wrote:
> I have just set up a router and would like DNS caching on it. I have tried to 
> set it up an it kind of works, just computer using it as their nameserver 
> take ages on DNS queries, up to 4-5 seconds.
> 
> To set up the DNS caching I added the ip of another DNS server 
> to /etc/resolv.conf and added namd_enable="YES" to /etc/rc.conf.
> I also tweaked the following lines in /var/named/etc/namedb/named.conf: 
> listen-on   { "any"; };
> forwarders {
>192.168.0.1;
> };
> query-source address * port 53;
> 
> Any ideas on how to make it run better? The DNS server at 192.168.0.1 answers 
> DNS queries in a few milliseconds.
> 
Put an entry for your upstream DNS/DNSes as well... That will speed
things up.
<--quote
// In addition to the "forwarders" clause, you can force your name
// server to never initiate queries of its own, but always ask its
// forwarders only, by enabling the following line:
//
//  forward only;

// If you've got a DNS server around at your upstream provider, enter
// its IP address here, and enable the line below.  This will make you
// benefit from its cache, thus reduce overall DNS traffic in the Internet.
/*
forwarders {
127.0.0.1;
};
*/
-->
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreebSD 5.3

2005-05-15 Thread Ed Stover
Richard Verwayen wrote:
> Am Mittwoch, den 11.05.2005, 16:53 -0700 schrieb Dixit, Viraj:
> 
>>Folks,
>>
>>I have accidentally changed the permissions to my directories on my test 
>>system. Now I cannot login either on console using root or any other login 
>>account. I simply cannot login, the permissions change has done it. I get the 
>>login prompt but this is the message I get from the system when I log in. 
>>Help 
>>Thanks,
>>An Idiot
>>
>>Here is the message:
>>login: invalid script: /usr/libexec/login_krb-or-pwd
>>Login incorrect
> 
> What about single-user mode?
> 
> RIchard
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 

Look in the archives of this mailing list going back for 5 years.. You
will find a bazillion howto's on logging in , in  single user mode and
mounting the stuff you need to fix. ;) good luck!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ps: bad namelist

2005-05-15 Thread Ed Stover
Jerry Bell wrote:
> Typically this is caused by a kernel and utilities (like ps and w) being
> out of sync.  It sounds like you don't think that is the case, though.  I
> suppose it could be a problem with your procfs, but I'm not sure that
> would cause this kind of symptom.  My suspicion is still on
> inconsistencies between the kernel and "world".
> 
>>ps: bad namelist
>>w: bad namelist
> 
> 
> 
> Jerry
> http://www.syslog.org
> 
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 
Ok, try the command "uptime" as well, I bet it will error too. It was a
while ago I have had this same problem. I remember I had to remake a
 /dev/file ... maybe it was /dev/null ... remake /dev/null and see if
that clears it up.
Try this ..
# cd /dev
# rm null
# mknod null c 2 2
# chmod 666 null
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: monitoring and alerting software ????

2005-05-14 Thread Ed Stover
Chuck Swiger wrote:
> Ed Stover wrote:
> [ ... ]
> 
>> I know some people that run big brother and are satisfied by it.
>> http://www.bb4.org/
> 
> 
> I would second this recommendation.  Big brother is relatively simple to
> configure, although it is by design more of a monitoring tool, and is
> less active about responding to changes, although it does support lots
> and lots of types of notifications.
> 
> BB is also not open source, although the source code is available and
> you are welcome to use it for yourself or your business for free.  But
> they want you to buy a license if you sell BB's monitoring to other
> people-- ie, an ISP and clients...
> 
You know, I think there was an open source clone of this some where...
If i find it, I will post it and see if it in ports as well...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: monitoring and alerting software ????

2005-05-14 Thread Ed Stover
Warren Block wrote:
> On Thu, 12 May 2005, Duane Winner wrote:
> 
>> Does anybody have recommendations for a good solution to alert me
>> while I am not at work if something goes wrong with my
>> infrastucture/network/servers?
>> In other words, if I am at home, I need to be alerted if one of my
>> FreeBSD servers go down, but also if the router, firewall or switches
>> go haywire.
> 
> 
> Here's something I wrote recently on setting up Nagios on FreeBSD:
> 
> http://www.wonkity.com/~wblock/nagios.pdf
> 
> -Warren Block * Rapid City, South Dakota USA
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
I know some people that run big brother and are satisfied by it.
http://www.bb4.org/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Box Mysteriously Rebooting?

2005-05-13 Thread Ed Stover
Jeff Bethke wrote:
> Hi All,
>   I have a  host that has been super relilable without issues.  Then, I
> had a power outage. After that, the host has stayed stable for anywhere
> from 6 to 48 hours... Then the host mysteriously reboots itself.   I
> swapped out the power supply (figuring a fried power supply could
> possibly be the culprit) and yet the problem persist.   Where do I look
> to figure out what's broke? Nothing in the logs. The console log doesn't
> show anything. dmesg looks kosher.   Its as if someone hits the power
> switch!  Anyone have any suggestions on what tools I could use to
> pinpoint what is causing the reboots?
> 
> Help?
> 
> Thanks!
> -jeff
> 
Ok, from my experience this is a power supply issue. monitor your heat
specs as well. Sorry I can't be of any more help. Good Luck~!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Box Mysteriously Rebooting?

2005-05-13 Thread Ed Stover
Subhro wrote:
> On 5/13/2005 8:28, Jeff Bethke wrote:
> 
>> Hi All,
>>   I have a  host that has been super relilable without issues.  Then,
>> I had a power outage. After that, the host has stayed stable for
>> anywhere from 6 to 48 hours... Then the host mysteriously reboots
>> itself.   I swapped out the power supply (figuring a fried power
>> supply could possibly be the culprit) and yet the problem persist.  
>> Where do I look to figure out what's broke? Nothing in the logs. The
>> console log doesn't show anything. dmesg looks kosher.
>>
> The first thing I would do is run memtest on the box overnight and check
> if that fails. Maybe the power outage destroyed the memory?
> 
> Regards
> S.
> 
> 
> 
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
are you running any pf ? i read somewhere in the archives about pf doing
that
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: heavy load proxy+nat server with ipfw ?

2005-05-10 Thread Ed Stover
Abu Khaled wrote:
> On 5/10/05, Ed Stover <[EMAIL PROTECTED]> wrote:
> 
>>S t i n g r a y wrote:
>>
>>>i want to replace my microsoft based firewall with a
>>>freebsd based firewall + proxy + NAt server based on
>>>ipfw , with internet users approx upto 800-1000
>>>simaltanious . i already have the internet link +
>>>hardware to support it ,
>>>do you guys think ipfw + squid with freebsd will be
>>>able to handle such loads ?
>>>
>>>
>>>thanks
>>>
>>>
>>>*º¤., ¸¸,.¤º*¨¨¨*¤ Stingray *º¤., ¸¸,.¤º*¨¨*¤
>>>
>>
>>Yes very much so. At a local college they have over 700 PCs surfing the
>>net constintly through a P3 700Mhz 512MB Ram and 10Gb HDD. The machine
>>is running FreeBSD 4.5, squid, squidGuard, ipfw, natd. Transparent
>>content filtering and nat. Simple sweet and fast...
> 
> 
> I use FreeBSD 5 STABLE as a Router with IPFW, DUMMYNET, Squid,
> DansGuardian and Bind as a forwarding DNS cache for 100 users. All
> this is running on an old PIII 500Mhz with 128MB ram and 20GB HDD. 100
> users may not be much but I guess with more RAM The FreeBSD box well
> handle more clients.
> I only use the BOX to test FreeBSD 5 performance for future plans and
> so far it rocks except for a few problems (sure thats what STABLE is
> for).
> 
> Ed, can you please tell me more about "Transparent content filtering".
> Sounds intresting
> 

Ooo yea, this is a good one taught to me by guru master BB of the black
hills. Ok all web requests are on port 80 right? I am going to use
psuedo commands to try and get this accross.
#from natbox
1 allow all traffic on port 80 from localhost out
2 forward all incoming port 80 requests to 8080 or what ever port you
run squid on.

3. squidguard or dansguardian server as the content filering.

No one can opt out of having there web access content filtered by not
using the caching system. They have to use the caching system.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: is 4.11 still a good idea?

2005-05-09 Thread Ed Stover
Glenn Dawson wrote:
> At 06:26 PM 5/9/2005, Ed Stover wrote:
> 
>> When, I am waiting to get the official release " none of this release
>> candidate stuff" but they wont release the turd yet. I like 4.x but 5.4
>> is hopefully going to guide me into the new millennium of FreeBSD
>> computing ;)
> 
> 
> It's was released about 5 hours ago.
> 
> -Glenn
> 
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to
>> "[EMAIL PROTECTED]"
> 
> 
> 
YAY!, hip hip hoorah! DL iso now.. must install 5.4    ... I
checked this morning  Yay! ooo  oo.. mmMMMmmmMm
aaarrrlll mmmMMmm FreeBSD 5.4..
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: heavy load proxy+nat server with ipfw ?

2005-05-09 Thread Ed Stover
S t i n g r a y wrote:
> i want to replace my microsoft based firewall with a
> freebsd based firewall + proxy + NAt server based on
> ipfw , with internet users approx upto 800-1000
> simaltanious . i already have the internet link +
> hardware to support it , 
> do you guys think ipfw + squid with freebsd will be
> able to handle such loads ?
> 
> 
> thanks
>  
> 
> *º¤., ¸¸,.¤º*¨¨¨*¤ Stingray *º¤., ¸¸,.¤º*¨¨*¤
> 

Yes very much so. At a local college they have over 700 PCs surfing the
net constintly through a P3 700Mhz 512MB Ram and 10Gb HDD. The machine
is running FreeBSD 4.5, squid, squidGuard, ipfw, natd. Transparent
content filtering and nat. Simple sweet and fast...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: OT how to register with google ?

2005-05-09 Thread Ed Stover
Fabian Keil wrote:
> S t i n g r a y <[EMAIL PROTECTED]> wrote:
> 
> 
>>Well i have a opensource softwares website which i use
>>to promote open software such as freebsd in my region,
>>i have registered with google so many time sine soo
>>long time , stil
> 

Google uses dmoz alot for it's spidering, get your site listed there.
Good META Tags are a good idea as well.
Here is a tutorial i snapped off of google real quick.
http://searchenginewatch.com/webmasters/article.php/2167931
Making your site and index page with your robots.txt file is a good idea
too Here is a tutorial for that too.
http://www.searchengineworld.com/robots/robots_tutorial.htm

Most of all like google says is that it takes a little while to get into
there spidering list...


PS use your robots.txt to block microsoft's spider it can easily consume
every ounce of your bandwidth on any type of interactive pages
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: is 4.11 still a good idea?

2005-05-09 Thread Ed Stover
Garance A Drosihn wrote:
> At 12:02 PM +0800 5/9/05, Foo Ji-Haw wrote:
> 
>>
>> Can I get some feedback on whether development and/ or support
>> on 4.11 is still active and updated? I've spent quite some time
>> on the 4.x series, so I am quite comfortable with it.
> 
> 
> Let me also mention that 5.3-release was a little rocky for some
> users, but works well for most people.  And, more importantly, we
> are a very few days away from 5.4-release.  5.4-release includes
> many fixes over 5.3-release.
> 
When, I am waiting to get the official release " none of this release
candidate stuff" but they wont release the turd yet. I like 4.x but 5.4
is hopefully going to guide me into the new millennium of FreeBSD
computing ;)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: *_enable = "YES" for FreeBSD

2005-05-09 Thread Ed Stover
Foo Ji-Haw wrote:
> Last time I used FreeBSD (4.3), I can start services with just
> apache2.sh start. Now everything needs to be explicitly turned on via
> rc.conf (apache2_enable="YES"). Is this rcNG as mentioned in the
> handbook? Where can I find documentation for this?
> 
> Is there any way I can still turn start/ stop the services at rc.d/ ?
> 
> Sorry, one last question: if I changed rc.conf, how can I get the system
> to reload this script without rebooting?
I am not a big fan of rcsubr but every one else likes it lol
I thinkhow it is done is
1. modify rc.conf ( add program_enable="YES" )
2. then run /usr/local/etc/rc.d/program.sh start
3. done, with none of that nasty rebooting too. rebooting is for wimps ;)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Spontaneous reboots

2005-05-08 Thread Ed Stover
Mac Mason wrote:
> Have you considered hardware issues? Random reboots might be caused by cooling
> issues, or other such things.
> 
> --Mac
> 
I have had a number FreeBSD servers do this when HD gets hot. Kinda
strange when you see it even in the 4.x branch.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dynamically limit ip connections to ports over time?

2005-05-05 Thread Ed Stover
Alex Teslik wrote:
> Hi all,
> 
> I have been running a FreeBSD box for a few years. Over this time spammers
> and other unfriendlies have found my box and have been attacking at a slowly
> increasing rate. Every night the daily periodic scripts run and report to me
> the number of rejected mail hosts. Last week, one of the rejected mail hosts
> had the number of rejections listed at 3000. My hard drive has been getting
> louder and louder as it gets busier rejecting and logging all of these and now
> I would like to do something about it... but I'm not sure what I can do. When
> the hard drive is at its busiest I see mail being virus and spam scanned at a
> dizzying rate (tail -f /var/log/maillog), hence the hard drive grinding.
> What I would LIKE to do is allow any ip to connect to a port for a
> specified number of times per minute.  If they connect too many times than I
> would like to freeze them out for a specified amount of time. This solution
> should be dynamic so that I don't need to constantly monitor the offending ip
> addresses.



Here is an idea, try grey listing for denying spam and portsentry to
keep the un-friendlies blocked. Both programs are fairly simple to setup
and maintain. Greylisting will deny incoming email for a set amount of
retries and time, thus you only get mail from real mail servers because
spammers don't usually try resending the spam after the initially list
has run. Portsentry is designed to detect incoming scans and block deny
the IP afterwards. It is kinda like a honey pot but funner  ;)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: installing big qmail server ... where to start?

2005-05-05 Thread Ed Stover
Matthias F. Brandstetter wrote:
> Hi all,
> 
> I have to plan and setup a mail solution for about 50.000 users, here are 
> some key features requested by our customer:
> 
>  - self coded webfrontend w/ webmail and administration (filter, alias etc)
>  - 100MB quota per user
>  - autoresponder
>  - about 50.000 user
>  - online backup of data
>  - some more featuers for web frontend
> 
> Since I happily use qmail for some other (but smaller) installations, I 
> want to try it with qmail here for this project as well. My only problem 
> is, I have no clue where to start ... beginning from "should I use 2 
> redundant and really strong or some more but cheaper servers?" to "which 
> qmail distributions and patches should I use (ldap, mysql, ...)?" and "how 
> to store data (mails) and do online backup w/o downtime?".


Some possible tutorials to help you on your way are:

QMR (qmail rocks) FreeBSD
http://freebsd.qmailrocks.org/
( Has Mysql, vpopmail, clam-av, spamassin,  )

Mail Toaster
http://www.tnpi.biz/internet/mail/toaster/index.shtml
(has mysql)

An honest 50,000 users an mysql implementation might be a little more
hardware intensive then an ldap in the long run so you might want to
drop a mail to freebsd-isp mailing list and ask around there too for
ldap stuff.

Dont forget to if you plan on using maildir as a mail storage solution
then remember that inodes become very important because you WILL run out
of them. A solution can be found in the existing man pages, read "man
tuning" before proceeding onto building your server. You might want to
stay away from old school imap software like imap-uw because they lack
the advanced features like quota support that you will need to enforce
quotas for your users.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: My BIND is tWisted!!!

2005-05-01 Thread Ed Stover
On Sun, 2005-05-01 at 05:32 -0500, Fafa Diliha Romanova wrote:
> I haven't done anything out of the ordinary.
> 
> /etc/rc.d/named reload (or stop or start)
> 
> doesn't say anything weird.
> 
> Thanks,
> -- Fafa
> 
> - Original Message -
> From: "Ed Stover" <[EMAIL PROTECTED]>
> To: "Fafa Diliha Romanova" <[EMAIL PROTECTED]>
> Subject: Re: My BIND is tWisted!!!
> Date: Sat, 30 Apr 2005 20:11:28 -0600
> 
> > 
> > On Sat, 2005-04-30 at 09:19 -0500, Fafa Diliha Romanova wrote:
> > > hey!
> > >
> > > My BIND just stopped working!
> > >
> > > 1) My domain is still registered
> > > 2) My configuration hasn't changed since it stopped working.
> > >prior to that, it has been running flawlessly for months.
> > >
> > > There is nothing in my /var/named/log, so I am totally
> > > clueless. /etc/rc.conf contains named_enable="YES"
> > >
> > > Since my /var/named/etc/namedb configuration is in fact
> > > 100% operational, I've decided to rule that out in this
> > > plea for help. The problem must lie elsewhere.
> > >
> > > Anyone able to help?
> > >
> > > All the best,
> > > -- Fafa
> > >
> > First off, what have you done with that machine before it stopped
> > working? when you try to start named does it produce any error
> > messages?
> 
You are not being helpful. lol, try this
/usr/local/etc/rc.d/bind start
ps -ax |grep named
 Now is there a named running?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: My BIND is tWisted!!!

2005-04-30 Thread Ed Stover
On Sat, 2005-04-30 at 09:19 -0500, Fafa Diliha Romanova wrote:
> hey!
> 
> My BIND just stopped working!
> 
> 1) My domain is still registered
> 2) My configuration hasn't changed since it stopped working.
>prior to that, it has been running flawlessly for months.
> 
> There is nothing in my /var/named/log, so I am totally
> clueless. /etc/rc.conf contains named_enable="YES"
> 
> Since my /var/named/etc/namedb configuration is in fact
> 100% operational, I've decided to rule that out in this
> plea for help. The problem must lie elsewhere.
> 
> Anyone able to help?
> 
> All the best,
> -- Fafa
> 
First off, what have you done with that machine before it stopped
working? when you try to start named does it produce any error
messages? 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Moving /var

2005-04-30 Thread Ed Stover
Hi
On Sat, 2005-04-30 at 06:28 +0200, Christian Hiris wrote:
> On Saturday 30 April 2005 01:59:01, Lisa Casey wrote:
> > Hi,
> >
> > I could have sworn I've seen some info on moving var onto it's own hard
> > drive but I vcan't  seem to find it now.
> >
> > Would anyone happen to know a url?
> >
> > Thanks,
> >
> > Lisa
> 
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/disks.html#NEW-HUGE-DISK
> 
> Cheers,
> ch
> 

Hi, How I put various partitions on larger drives is
1.format the drive (some times /stand/sysintall, sometimes by hand)
2.mount the new drive some where as what ever. (mount /dev/ad3s1e /mnt)
3.Copy over the data from the folder ( usually use cpio)
4. change fstab to fit 
5. reboot
 as far as I know that is KISS (keep it simple stupid)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: longest uptime

2005-04-29 Thread Ed Stover
Hi all,
On Thu, 2005-04-28 at 22:26 +0200, Nico Meijer wrote:
> Hi Stevan,
> 
> > Question: Is there a possiblity to run the system inclusive patching
> > it, without rebooting? Goal is to run a system maybe longer than a
> > year!!!
> 
> Short answer: no.
> 
> Long answer: don't think like that. Uptime is not important. It is not
> a pissing contest.
> 
> Bye... Nico
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
What is every very cool is that the top 25 longest uptime on netcraft
are of BSD origin and that thirteen of which are FreeBSD. With proper
power conditioning I get around 2 years of uptime before rebooting a
firewall. Usually the only reason I reboot is to completely roll to the
a later production release.  

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: building good custom kernel

2005-04-25 Thread Ed Stover
On Thu, 2005-04-21 at 14:48 +0500, [EMAIL PROTECTED] wrote:
>   
> 
> hi ,
> i tried building the freebsd 5.3 kernel and it works
> fine, but can u people give me some tips regarding 
> optimizing kernel during build, even saving a single
> cpu cycle would mean a lot. i would like to have a 
> kernel that is really optimized. And what do you
> people do to fine tune the kernel? 
> 
> thanks,
> ananth.g
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Depends on what you are fine tuning a kernel for. 
Like for a firewall nat box i do things like turn up the HZ 
and for mail servers I increase the max users? What is your
machine's intended application? A good reference is "man tuning"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: how to enable the root in telnet

2005-04-24 Thread Ed Stover
um hi
On Sun, 2005-04-24 at 18:53 +0800, kylin wrote:
> thank u for your advise! but now i am in a very save local network
> ,and the su return sorry  in my telnet,
> so is that mean i have to go to ssh? or can i chage some file to enable it 
> thank u and best wishes
> 
> On 4/24/05, Roland Smith <[EMAIL PROTECTED]> wrote:
> > On Sun, Apr 24, 2005 at 06:09:38PM +0800, kylin wrote:
> > > i find it difficult to use root account when i telnet to freebsd 5.3
> > > release , anything need to change?
> > 
> > You're not supposed to log in as root over telnet. It would expose the root
> > password to anybody intercepting your IP traffic.
> > 
> > It would be advisable to log in as a normal user via ssh (secure shell)
> > and then su to root. Even if your ssh keys were compromised, an attacker
> > would only gain access as a normal user. And since all communications
> > are encrypted, it would be hard for an listener to get the root password.
> > 
> > Roland
> > --
> > R.F. Smith   /"\ASCII Ribbon Campaign
> > r s m i t h @ x s 4 a l l . n l  \ /No HTML/RTF in e-mail
> > http://www.xs4all.nl/~rsmith/ X No Word docs in e-mail
> > public key: http://www.keyserver.net / \Respect for open standards
> > 
> > 
> > 
> 
> 
Ok, I would advise you to not use telnet to login as root as others have
said previously. If you absolutely have to log in has root use secure
shell. If you have ssh running already then uncomment and change the
"#PermitRootLogin no" line to "PermitRootLogin yes" in
your /etc/ssh/sshd_config file and restart secure shell. I tend to
change the port that secure shell runs on as well to provide an
additional level of security.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: unclean filesystem refusing to salvage

2005-04-24 Thread Ed Stover
Is this on one computer or across multiple machines running 5.4? My
first thought is of a dying hard drive. Run low level disk repair tools
from your hard drives' manufacturer. 
On Thu, 2005-04-21 at 15:28 +1000, Warren wrote:
> im running FreeBSD 5.4 and have /var as well as all the other filesystems not 
> clean and when going to single user mode mounting all and running fsck -y ... 
> it refuses to slvage anything and is causing multiple hassles with my 
> computers stablity and running.
> 
> How do i fix this or what  may  be causing this ?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: what kind of BBS software on freebsd work well

2005-04-24 Thread Ed Stover
What ever happend to the old telnet style bb shells? I would much rather
run one of those ;)
On Wed, 2005-04-20 at 11:08 +0400, Andrew P. wrote:
> Graham Bentley wrote:
> >>And has more security problems than Carter has liver pills
> > 
> > 
> > If more people are using a project like phpBB surely there
> > is more chance that bugs / problems will be sorted out
> > i.e. more 'reporters'
> > 
> > If you have had problems with phpBB surely its better to
> > submit them to the phpBB team rather than complain
> > about them on a list - thats how things get better
> > isnt it ?
> > 
> > I would be interested to hear about the security problems
> > you are referring to ?
> 
> 
> I think Paul was right about poor security of
> phpbb. It's just that there are no alternatives
> now.
> 
> I wonder if we should move to -chat...
> 
> 
> Best wishes,
> Andrew P.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: 5.4-RC2: Unexpected reboots

2005-04-24 Thread Ed Stover
Hi

On Sat, 2005-04-23 at 12:39 +0200, Erik NÃrgaard wrote:
> Hi,
> 
> I have had problems recently keeping my 5.3 up, then I upgraded to 
> 5.4-RC2. Things seemed stable, but then I just ran last:
> 
> norgaard ttyp1charmSat 23 Apr 12:05   still 
> logged in
> norgaard ttyp0charmSat 23 Apr 11:57   still 
> logged in
> norgaard ttyp0charmSat 23 Apr 00:39 - 00:57  (00:17)
> reboot   ~ Fri 22 Apr 22:36
> reboot   ~ Fri 22 Apr 21:03
> reboot   ~ Fri 22 Apr 20:59
> reboot   ~ Fri 22 Apr 20:52
> reboot   ~ Fri 22 Apr 20:33
> reboot   ~ Fri 22 Apr 20:30
> reboot   ~ Fri 22 Apr 20:07
> reboot   ~ Fri 22 Apr 19:17
> reboot   ~ Fri 22 Apr 18:00
> reboot   ~ Fri 22 Apr 17:57
> reboot   ~ Fri 22 Apr 17:00
> norgaard ttyp0xxx.xxx.xxx.xxx  Fri 22 Apr 14:44 - 15:17  (00:32)
> reboot   ~ Fri 22 Apr 14:16
> norgaard ttyp0xxx.xxx.xxx.xxx  Fri 22 Apr 12:35 - 14:05  (01:30)
> reboot   ~ Fri 22 Apr 12:24
> norgaard ttyp0xxx.xxx.xxx.xxx  Fri 22 Apr 12:05 - crash  (00:18)
> reboot   ~ Fri 22 Apr 10:56
> reboot   ~ Fri 22 Apr 10:27
> reboot   ~ Fri 22 Apr 10:00
> norgaard ttyp0xxx.xxx.xxx.xxx  Fri 22 Apr 09:57 - crash  (00:03)
> reboot   ~ Fri 22 Apr 09:55
> norgaard ttyp0xxx.xxx.xxx.xxx  Fri 22 Apr 09:27 - 09:48  (00:20)
> reboot   ~ Thu 21 Apr 23:09
> reboot   ~ Thu 21 Apr 22:03
> reboot   ~ Thu 21 Apr 18:41
> norgaard ttyp0xxx.xxx.xxx.xxx  Thu 21 Apr 17:52 - 18:04  (00:12)
> reboot   ~ Thu 21 Apr 17:18
> reboot   ~ Thu 21 Apr 17:11
> norgaard ttyp0xxx.xxx.xxx.xxx  Thu 21 Apr 16:55 - crash  (00:16)
> reboot   ~ Thu 21 Apr 16:10
> norgaard ttyp0xxx.xxx.xxx.xxx  Thu 21 Apr 15:38 - crash  (00:32)
> 
> I didn't realise the crashes while locked in with ssh, I thought it was 
> due to an unstable DSL. But even disregarding crashes, I have no idea 
> why all these reboots, there is no hint in /var/log/critical, 
> /var/log/kernel, /var/log/console.log, /var/log/auth.log or others.
> 
> The only thing I have noticed is a new error message in 
> /var/log/messages, happening regularly every 9 minutes:
> 
> Apr 22 15:08:14 top postfix/smtpd[874]: warning: TLS library problem: \
> 874:error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown \
> protocol:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_srvr.c:585:
> 
> However, it does not seem to sync with the reboots, and I think this is 
> due to postfix being built on the 5.3.
> 
> Any ideas what causes this? Any ideas how I can tune syslog to grap the 
> events?
> 
> Thanks, Erik
> 
Just a thought, but check your power supply fan ;) 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: NATD server problem on 5.3 ?

2005-04-19 Thread Ed Stover
And I would like to add these questions to
On Tue, 2005-04-19 at 07:44 -0400, [EMAIL PROTECTED] wrote:
> Saying it's not working is way to vague.
> You need to post more details about what is not working.
> Like can the 5.3 server ping the public internet?
> Can it ping PCs on the LAN?
> Can a win LAN PC ping the server?
> What does the firewall log contain?
Does nat start up? do a ps -ax |grep nat
Are you sure your natd.conf is correctly formatted?
> Have you tested with firewall out of the way by having only single
> rule to pass all packets?
> /sbin/ipfw -f flush
> /sbin/ipfw add allow all from any to any
Generally if it is your first firewall try the rc.conf option of 
firewall_type="OPEN" 
and here is what my /etc/natd.cf looks like.
##/etc/natd.cf
log yes
deny_incoming   no
use_sockets yes
same_ports  yes
verbose no
port8668
interface   ep0
unregistered_only   yes
##EOF
> 
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of faisal
> gillani
> Sent: Tuesday, April 19, 2005 4:08 AM
> To: freebsd-questions@freebsd.org
> Subject: NATD server problem on 5.3 ?
> 
> 
> Well i recently installed my first natd server on
> freebsd 5.3, but its not working ?
> 
>  here is wat i did ..
> 
> 1. compiles kernal with the following options
> 
> options IPFIREWALL
> options IPV6FIREWALL
> options IPDIVERT
> 
> 2. made the following entries in rc.conf
> 
> defaultrouter="10.0.0.1"
> gateway_enable="YES"
> hostname="natserver"
> ifconfig_fxp0="inet 192.168.0.1  netmask
> 255.255.255.0"
> ifconfig_xl0="inet 10.0.0.5  netmask 255.255.255.0"
> firewall_enable="yes"
> natd_enable="yes"
> natd_interface="xl0"
> natd_flags="-f /etc/natd.conf"
> 
> 3. made the following entries in rc.firewall
> 
> 
> /sbin/ipfw -f flush
> /sbin/ipfw add allow all from any to any via fxp0
> /sbin/ipfw add allow icmp from  any to any out via xl0
> /sbin/ipfw add allow all from any to any via lo0
> /sbin/ipfw add divert natd ip from any to any via xl0
> /sbin/ipfw add allow ip from any to 10.0.0.5 in recv
> xl0
> /sbin/ipfw add allow ip from 10.0.0.5 to any out xmit
> xl0
> 
> 4. configure the windows clients as follows
> 
> ipaddress = 192.168.0.3
> subnet   = 255.255.255.0
> gateway  = 192.168.0.1
> dns server = 192.168.0.2 "dns server capable of
> resolving internet & local address"
> 
> this is all that i have done but still interet is not
> working on clients , what should i do now ?
> 
> 
> 
> 
> *:$., 88,.$:*(((*$ Allah-hu-Akber*:$., 88,.$:*((*$
> God is the Greatest
> 
> 
> 
> 
> __
> Do you Yahoo!?
> Make Yahoo! your home page
> http://www.yahoo.com/r/hs
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: squid + antivirus plugin

2005-04-19 Thread Ed Stover
Hi, 
On Tue, 2005-04-19 at 19:01 +0400, Vyacheslav Druzhinin wrote:
> Hello freebsd-questions,
> 
>   I have a problem to scan all http proxy traffic for a viruses. Does
>   exist some open source antivirus plugin for squid? I have been
>   checked the ports collection and I can't find any solution.
> 
> With best regards,  [MCP, MCSD]
> Vyacheslav  mailto:[EMAIL PROTECTED]
> Origin: <--=<< DVG_Lab >>=-->   
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Check out http://www.clamav.net/3rdparty.html  and find "Web/FTP Proxy +
ClamAV" on the pages and it will list several of the type of programs
that you are  looking for.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: cd-rom sysinstall fixit utility

2005-04-18 Thread Ed Stover
On Mon, 2005-04-18 at 13:05 -0400, Darrel wrote:
> Having mistyped changes with the 'pw' command, giving my User and Root a
> bad path to their shells might required a new installation.  I can not log
> in at all.
> 
> Is there actually a way to change the shell of root while logged in with
> the fixit utility on the cd-rom?

Just boot into single user mode, mount root, use vipw to fix the path,
and then reboot. done.

> 
> Darrel
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: How to interpret ipfw log?

2005-04-13 Thread Ed Stover
On Tue, 2005-04-12 at 23:28 -0400, [EMAIL PROTECTED] wrote:
> Your ipfw rule 2500 is denying those outbound packets
> 192.168.0.200:65117  is your ip address: port number
> 65.87.165.45:5800 is the remote target ip address and port number
> and this is leaving your pc on NIC  named tx0
> 
> 
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Sergei
> Gnezdov
> Sent: Tuesday, April 12, 2005 11:08 PM
> To: freebsd-questions@freebsd.org
> Subject: How to interpret ipfw log?
> 
> The following firewall log seems to make very little sense to me.
> What could it possibly mean?
> 
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:65117
> 65.87.165.45:5800 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:49761
> 65.87.165.45:1003 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:50116
> 65.87.165.45:1362 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:50055
> 65.87.165.45:6101 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:62352
> 65.87.165.45:888 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:61272
> 65.87.165.45:969 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:58267
> 65.87.165.45:471 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:54164
> 65.87.165.45:1496 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:61306
> 65.87.165.45:5716 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:64970
> 65.87.165.45:281 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:64115
> 65.87.165.45:106 out via tx0
> Apr 11 04:27:05 name kernel: ipfw: 2500 Deny TCP 192.168.0.200:62007
> 65.87.165.45:284 out via tx0
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
looks like nmap ;)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: too many illegal connection attempts through ssh

2005-04-13 Thread Ed Stover
Forgive the top posting (long message) ;)
A quick way to make that crap go away is to run your ssh on a  different
port. quick, simple, effective. I used to have those "brute force"
attacks every day and fill my logs and I would go in and create and
entry that that entire Netmask in the ipfw and hosts.allow files but
that got tedious real quick. Changing the port made my life easier.
ssh -p 99 -l yournamehere 192.168.1.10

On Wed, 2005-04-06 at 07:15 +, Edwin D. Vinas wrote:
> hello,
> 
> shown below is snapshot of too many illegal attempts to login to my
> server from a suspicious hacker. this is taken from the
> "/var/log/auth.log". my question is, how do i automatically block an
> IP address if it is attempting to guess my login usernames? can i
> configure the firewall to check the instances a certain IP has
> attempted to access/ssh the sevrer, and if it has failed to login for
> about "x" number of attempts, it will be blocked automatically?
> 
> thank you in advance!
> 
> -edwin
> 
> 
> Mar 26 05:00:00 pawikan newsyslog[11879]: logfile turned over due to size>100K
> Mar 26 22:49:29 pawikan sshd[66637]: Illegal user test from 211.176.33.46
> Mar 26 22:49:32 pawikan sshd[66639]: Illegal user guest from 211.176.33.46
> Mar 26 22:49:35 pawikan sshd[66641]: Illegal user admin from 211.176.33.46
> Mar 26 22:49:37 pawikan sshd[66643]: Illegal user admin from 211.176.33.46
> Mar 26 22:49:40 pawikan sshd[66645]: Illegal user user from 211.176.33.46
> Mar 26 22:49:50 pawikan sshd[66654]: Illegal user test from 211.176.33.46
> Mar 27 02:50:12 pawikan sshd[69369]: Illegal user test from 210.0.141.89
> Mar 27 02:50:14 pawikan sshd[69463]: Illegal user guest from 210.0.141.89
> Mar 27 02:50:15 pawikan sshd[69650]: Illegal user admin from 210.0.141.89
> Mar 27 02:50:17 pawikan sshd[69745]: Illegal user admin from 210.0.141.89
> Mar 27 02:50:18 pawikan sshd[69858]: Illegal user user from 210.0.141.89
> Mar 27 02:50:24 pawikan sshd[70319]: Illegal user test from 210.0.141.89
> Mar 27 04:10:58 pawikan sshd[5171]: Illegal user test from 218.188.9.202
> Mar 27 04:10:59 pawikan sshd[5173]: Illegal user guest from 218.188.9.202
> Mar 27 04:11:00 pawikan sshd[5175]: Illegal user admin from 218.188.9.202
> Mar 27 04:11:01 pawikan sshd[5190]: Illegal user admin from 218.188.9.202
> Mar 27 04:11:02 pawikan sshd[5192]: Illegal user user from 218.188.9.202
> Mar 27 04:11:07 pawikan sshd[5200]: Illegal user test from 218.188.9.202
> Mar 27 12:13:21 pawikan sshd[9236]: Did not receive identification
> string from 61.59.143.27
> Mar 27 12:23:03 pawikan sshd[13482]: Illegal user jordan from 61.59.143.27
> Mar 27 12:23:07 pawikan sshd[13484]: Illegal user michael from 61.59.143.27
> Mar 27 12:23:11 pawikan sshd[13486]: Illegal user nicole from 61.59.143.27
> Mar 27 12:23:14 pawikan sshd[13488]: Illegal user daniel from 61.59.143.27
> Mar 27 12:23:18 pawikan sshd[13490]: Illegal user andrew from 61.59.143.27
> Mar 27 12:23:21 pawikan sshd[13492]: Illegal user nathan from 61.59.143.27
> Mar 27 12:23:25 pawikan sshd[13494]: Illegal user matthew from 61.59.143.27
> Mar 27 12:23:29 pawikan sshd[13496]: Illegal user magic from 61.59.143.27
> Mar 27 12:23:33 pawikan sshd[13498]: Illegal user lion from 61.59.143.27
> Mar 27 12:23:37 pawikan sshd[13500]: Illegal user david from 61.59.143.27
> Mar 27 12:23:41 pawikan sshd[13502]: Illegal user jason from 61.59.143.27
> Mar 27 12:23:45 pawikan sshd[13504]: Illegal user ben from 61.59.143.27
> Mar 27 12:23:49 pawikan sshd[13506]: Illegal user carmen from 61.59.143.27
> Mar 27 12:23:53 pawikan sshd[13510]: Illegal user justin from 61.59.143.27
> Mar 27 12:23:57 pawikan sshd[13512]: Illegal user charlie from 61.59.143.27
> Mar 27 12:24:02 pawikan sshd[13514]: Illegal user steven from 61.59.143.27
> Mar 27 12:24:06 pawikan sshd[13517]: Illegal user brandon from 61.59.143.27
> Mar 27 12:24:09 pawikan sshd[13519]: Illegal user brian from 61.59.143.27
> Mar 27 12:24:13 pawikan sshd[13521]: Illegal user stephen from 61.59.143.27
> Mar 27 12:24:17 pawikan sshd[13523]: Illegal user william from 61.59.143.27
> Mar 27 12:24:21 pawikan sshd[13525]: Illegal user angel from 61.59.143.27
> Mar 27 12:24:27 pawikan sshd[13527]: Illegal user emily from 61.59.143.27
> Mar 27 12:24:31 pawikan sshd[13529]: Illegal user eric from 61.59.143.27
> Mar 27 12:24:36 pawikan sshd[13531]: Illegal user joe from 61.59.143.27
> Mar 27 12:24:39 pawikan sshd[13533]: Illegal user tom from 61.59.143.27
> Mar 27 12:24:43 pawikan sshd[13535]: Illegal user billy from 61.59.143.27
> Mar 27 12:24:47 pawikan sshd[13537]: Illegal user buddy from 61.59.143.27
> Mar 27 12:24:50 pawikan sshd[13540]: Illegal user jeremy from 61.59.143.27
> Mar 27 12:24:54 pawikan sshd[13542]: Illegal user vampire from 61.59.143.27
> Mar 27 12:24:57 pawikan sshd[13544]: Illegal user betty from 61.59.143.27
> Mar 27 12:25:00 pawikan sshd[13546]: Illegal user henry from 61.59.143.27
> Mar 27 12:25:04 pawikan sshd[13749]: Illegal user max fro

Re: Which mail server is the best for me?

2005-04-12 Thread Ed Stover
On Sat, 2005-04-02 at 11:09 +0200, Kiffin Gish wrote:
> I would like to setup a mail server but am a little confused about whether
> to use sendmail, qmail, postfix or whatever. Basically my web server is a
> simple one to be used for personal use with maybe no more than a 10-20 mail
> accounts.
> 
> What are the advantages and/or disadvantages of each choice, and where can I
> find more information comparing them?
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
For my home stuff and a couple of production servers I use Sendmail
+imap-uw (imap, pop)+squirrelmail+popassd+clamav_milter+spamassasin. I
is very simple and fast to setup, plus easy to trouble shoot. If the MX
is pointing at the address already it might take me about 20 minutes to
make it start accepting and sending mail. One of these days I want to
release a small tutorial on how to do this. 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Can't control PostgreSQL with RC scripts

2005-04-12 Thread Ed Stover
On Fri, 2005-04-08 at 10:59 +0300, Volodymyr Kostyrko wrote:
> Pat Maddox wrote:
> > I installed PostgreSQL 8.0.1 from ports, and now I'd like to control
> > it with the RC scripts.  I wasn't able to run initdb with the scripts,
> > I had to do that manually with the regular initdb command.  Now I've
> > got the db dir as /usr/local/pgsql/data, which is what it looks like
> > pgsql expects, but the scripts still won't start it or stop it.  They
> > don't produce any output either.  Any ideas on what to do?
> 
> echo 'postgresql_enable="YES"' >> /etc/rc.conf
> 
that Darn rcsubr again ;) 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: all ports open ?

2005-04-12 Thread Ed Stover

On Tue, 2005-04-12 at 08:26 -0700, faisal gillani wrote:
> Well i port scanned couple of internet websites & got
> all ports open from that site , is that a security
> measure ?
> if yes how can i do that ?
> 
> 
> :)
> thanks
> Faisal
> 
> 
> *., ,.** Allah-hu-Akber*., ,.**
> God is the Greatest
> 
> 
> __
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
portsentry is the program you are looking for.
It is in ports and fairly simple to setup, it has some really nice
features as well.

cd /usr/ports/security/portsentry/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: weird problem with ipfw and ftp

2005-04-12 Thread Ed Stover
On Tue, 2005-04-12 at 09:05 +0200, Clement Twine wrote:
> hi freebsd users,
> 
> i have a problem with users accessing my ftp service from the
> internet. everything was working well until i changed from
> Linux/shorewall to freebsd/ipfw as my firewall.
> 
> my setup is briefly as follows:
> 
> FTP_Server (10.0.0.1) --- Firewall (IPFW) - INTERNET
> 
> The linux rules were just two (and were working):
> 
>   allow tcp from any to 10.0.0.1 21
>   allow tcp from 10.0.0.1 21 to any
> 
> I have the following in ipfw but they have refused to work!
> 
>   ipfw add 00010 allow tcp from any to 10.0.0.1 21
>   ipfw add 00011 allow tcp from 10.0.0.1 21 to any
> 
> 
> The problem is that an ftp session is established, but when the
> session enters passive mode, the ftp session hangs. Are there any
> other ports that need to be opened? Has anyone had such a problem
> before? I can see in the logs that unprivileged ports are
> responding from the ftp server to the requestor - but have tried
> all combinations of rules to no avail!
> 
> Please help!
> 
> Regards,
> 
> Clem.
> 
> 
I usually do port forwarding from my natd.cf on my open type firewalls
and it works fine. 
#/etc/natd.cf
log yes
deny_incoming   no
use_sockets yes
same_ports  yes
verbose no
port8668
interface   xl1
unregistered_only   no
redirect_port  tcp 10.1.1.1:20 20
redirect_port  udp 10.1.1.1:20 20
redirect_port  tcp 10.1.1.1:21 21
redirect_port  udp 10.1.1.1:21 21
#EOF

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: help

2005-04-11 Thread Ed Stover
On Sun, 2005-04-10 at 22:46 -0700, angelito munez wrote:
> Hi,.
> i have a quick question. i have a 4.9 box running as gateway. as well as 
> domain controller windows on the network. now can anybody help  how i can see 
> the domain controller from remote desktop? thnks 
> 
>   
> -
> Do you Yahoo!?
>  Yahoo! Small Business - Try our new resources site! 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"


So you want to be able to remote desktop in from outside the gateway to
access your domain controller? Are you running nat on your gateway? do
you use ipfw for firewalling on your gateway? 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Creating a socket file by hand

2005-04-11 Thread Ed Stover
On Mon, 2005-04-11 at 15:03 -0700, Joshua Lewis wrote:
> Dear list,
> 
> I am setting up a Mail Server with postfix and trying to add spam filtering
> and anti virus filtering. The ClamAV program is trying to read
> /var/run/clamav/clamd. The directory is there but the socket file is not.
> How do I create a socket file by hand/
> 
> Thanks
> Joshua
> ___
> freebsd-questions@freebsd.org mailing list

Make sure your permisions are ok on your /var/run/clamav/ directory,
clam av usually creates it's own sock file. Check the path specified in
you clam conf as well.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Hyperthreading not working on my 5.3 FreeBSD

2005-04-05 Thread Ed Stover
don't you need apic as well ?
device  apic# I/O APIC
On Sun, 2005-04-03 at 13:42 +0200, Anthony Atkielski wrote:
> faisal gillani writes:
> 
> > Well the output of my dmesg command is only showing 1
> > processor , HT is enabled in bios , & working on
> > windows XP on the same PC.
> > what can be wrong ? is there anyway to enable it ?
> 
> Recompile the kernel with
> 
> options   SMP
> 
> You should then see the second logical processor come online with no
> problems after installing the new kernel and rebooting.
> 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Copying files off Samba Server - freezes/very slow

2005-04-05 Thread Ed Stover
Let us take a look at you smbd.conf, that might help.

On Tue, 2005-04-05 at 12:13 +0200, Gareth Bailey wrote:
> I have just upgraded the hardware of our development server. I thought
> that our file server used to be slow due to slow hardware, but now
> that we have upgraded I am a bit puzzled.
> 
> Samba seems to slow or hang (top reports smbd CPU usage as 40%) when
> files are copied off the server using windows explorer on the client.
> 
> Can anyone sugeest a reason for this behaviour?
> 
> Thanks,
> Gareth
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: question about mysql-server.sh

2005-04-05 Thread Ed Stover
rcsubr is the culprit, when you added the line in the rc.conf then all
was well. You can add a line in the rc.conf and then run
the /usr/local/etc/rc.d/mysql-server.sh start command with out having to
reboot.
Personally I really dislike rcsubr, makes me think that FreeBSD is
drifting toward linux's overly comlexness... a script to start a script
that starts a script that starts a script, blah blah blah

On Tue, 2005-04-05 at 10:36 -0400, Christopher Lane wrote:
> Hi,
> 
> Long story made short:  The mysql-server.sh that came with 
> mysql-server-4.1.10a (installed from cvsup'ed ports) wouldn't work until 
> after I rebooted the server.  It's working now, so I know I shouldn't 
> complain, but anyone know what happened?
> 
> Long story: 
> 1. Minimum installation, added ports distribution, cvsup to latest ports.
> 2. cd /usr/ports/mysql41-server; make install
> 3. '/usr/local/etc/rc.d/mysql-server.sh start' does nothing.
> 4. I noticed that rc_subr wasn't installed, even though freshports says 
> it is required.  So I installed rc_subr from ports, but still no love.
> 5. I put mysql_enable="YES" in rc.conf (since I would soon want it there 
> anyway) and restarted the server.
> 6. mysql-server.sh works like a charm now.
> 
> Thanks in advance to anyone who can help shine some light on what might 
> have changed that made mysql-server.sh work.
> 
> Chris
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: sendmail

2005-04-04 Thread Ed Stover
Ok, you could try something like this ;)
#
# cat movie.mpg | mail [EMAIL PROTECTED] -s "This wont work ;)"
#
On Fri, 2005-04-01 at 02:47 +0200, Gert Cuykens wrote:
> i want to send a movie to a friend ? How do you do that with sendmail
> ? I know i know i read the man but its like this
> [] long
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Trouble Compiling courier-authlib-0.55

2005-03-31 Thread Ed Stover
I can't get courier-authlib-0.55 from source package to compile on
FreeBSD4.11 any have any pointers? Your time and help is appreciated.

./configure --prefix=/usr/local --exec-prefix=/usr/local\
--with-authvchkpw --without-authldap --without-authmysql \
--disable-root-check --with-ssl \
--with-authchangepwdir=/usr/local/libexec/authlib 

courier-authlib-0.55 source package error on make:
HAVE_CONFIG_H -I. -I. -I.  -g -O2 -c -o testbdb.o testbdb.C
Linking testbdb
rm -f libshbdbobj.a
cd .libs && ar rl ../libshbdbobj.a bdbobj.$(OBJEXT) bdbobj2.$(OBJEXT)
bdbobj3.$(OBJEXT)
OBJEXT: not found
OBJEXT: not found
OBJEXT: not found
/usr/libexec/elf/ar: bdbobj.: No such file or directory
*** Error code 1

It also fails in ports.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"