Re: disaster recovery - did I do the right thing?

2007-05-07 Thread Jeff Palmer

At 07:05 PM 5/5/2007, Ray wrote:

Hello all,
I did something stupid the other day (sleep deprivation combined with
a clever hack were the main reasons), and I'm just curious if I did the
right thing afterwards.

The mistake:
/usr/local/# rm -f *
note that root was running bash as a shell at the time, found
in /usr/local/bin or something.

What I did was to start over, reinstall from scratch.
my question, was there an easier way?
thanks,
Ray



Ray,

Good quality backups are a must.  Even a filesystem snapshot would 
have helped in the above scenario.


http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/snapshots.html
The link above has great info about creating and using filesystem 
snapshots.   If you had one,  you could have just mounted the 
snapshot,  and copied over the files/folders you accidentally removed.


Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Anyone dual booted freebsd/vista yet?

2007-05-04 Thread Jeff Palmer

At 03:26 PM 5/4/2007, Jonathan Horne wrote:

Has anyone successful configured a freebsd/vista dual boot, and if so, how
did you get around this issue?

Thanks,
--
Jonathan Horne
[EMAIL PROTECTED]
http://dfwlpiki.dfwlp.org



Jonathan,

you may want to search the archives.   I posed this same question a 
while back,  and then found a working solution.   It involved getting 
rid of the freebsd boot manager,  and migrating to grub 0.94


Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Time changed back to old daylight savings

2007-03-28 Thread Jeff Palmer



 It was installed from a snapshot ISO last summer.

OK, so you're running an 8 month stale snapshot and you wonder why you
don't have the recent timezone updates?  What is wrong with this
picture? :-)

Kris


Not to be a smartass,  but the energy conservation act was passed in 
2005,   so one would think an 8 month old snapshot would include a 
fix that has been known about for 2 years ;)


Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Question about a specific ISP: Amen/Amenworld

2007-03-05 Thread Jeff Palmer

At 02:31 PM 3/2/2007, Alexandre Vieira wrote:

Hello folks,

I'm interested in a dedicated server plan from a somewhat big company called
Amenworld (www.amenworld.com) but the sales technician is telling me that
amen technicians can't install freebsd on the machines. After some googling
I found that they are hosting some freebsd machines (if this counts for
anything).

Is there anyone here that by any change is a client on this company and runs
freebsd?

Thanks in advance
Regards
--
Alexandre Vieira - [EMAIL PROTECTED]


Alexandre,

I know nothing about this company..  but just because a few boxes 
have FreeBSD doesn't mean they necessarily support it.   It's 
possible to change from linux to FreeBSD on remote machine using 
utilities like: http://www.daemonology.net/depenguinator/


Hope that helps,

Jeff

P.S.  Be warned,  that utility re-images the disk,  and can leave the 
machine in non-bootable state. Possibly forcing you to incur support 
fees from the ISP/Datacenter.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Future of FreeBSD 7.0 and up

2007-02-28 Thread Jeff Palmer

At 02:26 PM 2/28/2007, Dwight Smith wrote:

Good morning,

My name is Dwight Smith, and I only had a question or two in terms 
of the future useability of FreeBSD. I have used it on and off and 
found it to be a great UNIX operating system for servers, but my 
only major concern was the amount of time it takes to prepare a 
server such as an Apache Server with PHP and MySQL support as 
opposed to a Linux system which is what I am currently using now as 
well as my company. I guess my question is that will the ease of 
building or installing software for FreeBSD ever streamline to where 
you do not have to do as many steps and text config file entries? 
What had me curious to asking this is this article I read about a 
review on FreeBSD 6.2 
(http://www.softwareinreview.com/cms/content/view/67/) The reviewer 
had a lot of criticisms that seemed harsh, but at the same time 
raised some valid points. I only ask this question as I would like 
to see FreeBSD get the same recognition as Linux as FreeBSD is a 
powerful OS that should not be overshadowed and I hope it doesn't 
cause it saved my IT job many a times when a server crashes and I 
have to piece together an old PII with 32 MB RAM and install FreeBSD 
with Samba. So thanks in advance for your attention in this and I 
wish all of you the best.


Sincerely,

Dwight Smith
Computer Coordinator
Christ Second Baptist Church


Dwight,

That review was from a person who obviously is very inexperienced 
with FreeBSD in general.  Please read my thread discussion with him 
found here: http://www.tjrforum.com/showthread.php?t=3067  As 
mentioned in the thread,  I'm done replying to it.  The guy is very 
inexperienced,  and writes technical reviews that are completely 
inaccurate.   when questioned about it (on technical merit) he has no 
good responses.


As for your actual question,   installing the software is simple if 
you use the ports (cd /usr/ports/foo/bar; make install clean)  So to 
be honest, I'm not sure what streamlining you'd need, want, or 
expect..   16,000 3rd party applications able to be installed with a 
make install command seems pretty streamlined to me ;)



- Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: problems with jail

2007-02-23 Thread Jeff Palmer

At 08:22 PM 2/22/2007, you wrote:

I'd like to get Apache running in jail, but I can't seem to get
network working in jail.
..snip..
Anyway, when I go to jail, running csh (as root) in jail, I try/get:
   %ping 192.168.1.1
   ping: socket: Operation not permitted


You can't ping from a jail unless you set the 
security.jail.allow_raw_sockets sysctl on the host OS.


- Jeff


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: problems with jail

2007-02-23 Thread Jeff Palmer

At 02:07 PM 2/23/2007, Jim Stapleton wrote:

Jail:
[EMAIL PROTECTED] 14:04:11 (0) ~   sudo jail /jail/ legolas 192.168.1.85 
/bin/csh
%telnet 192.168.1.4 25


..snip..


[EMAIL PROTECTED] 14:02:11 (0) ~   ifconfig -a
nve0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
   inet 192.168.1.84 netmask 0xff00 broadcast 192.168.1.255
   ether 00:13:d4:2e:2f:62
   media: Ethernet autoselect (100baseTX full-duplex)
   status: active
plip0: flags=108810POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT mtu 1500
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
   inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
   inet6 ::1 prefixlen 128
   inet 127.0.0.1 netmask 0xff00
[EMAIL PROTECTED] 14:04:08 (0) ~   jls
  JID  IP Address  Hostname  Path
1  192.168.1.85legolas   /jail



Is that what you needed

Thanks,
-Jim Stapleton


I don't see where you have 192.168.1.85 as an alias on the host OS.


ifconfig nve0 alias 192.168.1.85 netmask 255.255.255.255

then launch the jail

- Jeff 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: problems with jail

2007-02-23 Thread Jeff Palmer

At 02:38 PM 2/23/2007, Jim Stapleton wrote:

new host rc.conf:

hostname=elrond.ameritech.net
#ifconfig_nve0=inet 192.168.1.84 netmask 255.255.255.0
ipv4_addrs_nve0=192.168.1.84-85/24 netmask 255.255.255.0
defaultrouter=192.168.1.1
#ifconfig_nve0=DHCP
usbd_enable=YES
linux_enable=YES
sshd_enable=YES

sendmail_enable=NO
inetd_flags=-wW -a 192.168.1.84
rpcbind_enable=NO



Jim:  try the following:

hostname=elrond.ameritech.net
ifconfig_nve0=inet 192.168.1.84 netmask 255.255.255.0
ifconfig_nve0_alias0=192.168.1.85 netmask 255.255.255.255
defaultrouter=192.168.1.1
#ifconfig_nve0=DHCP
usbd_enable=YES
linux_enable=YES
sshd_enable=YES

- Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: server issues

2007-02-21 Thread Jeff Palmer

At 12:00 PM 2/21/2007, drewshen wrote:


I am having a problem with my apache in freebsd.  i set up two virtual hosts,
..snip..
when i try to start apache it says httpd not running, trying to start . . .
and on the broswer i get an internal server error.  does anyone know how i
could fix this? thanks alot!



What do the apache error logs say?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 64-bits platform question

2007-02-21 Thread Jeff Palmer

At 02:35 PM 2/21/2007, you wrote:
Hi list, as far as I know Intel 64 architecture (formerly known as 
Intel Extended Memory 64 Technology, or Intel EM64T) enables 64-bit 
computing on desktop when combined with supporting software. If I am 
right, 64-bit computing (on Intel architecture) requires a computer 
system with a processor, chipset, BIOS, operating system, device 
drivers and applications enabled for Intel EM64T architecture. So I 
bought an ASUS P4P800-VM with a 3.0GHz processor that supports Intel 
EM64T and 1Gb of Infineon PC3200 RAM memory. The system is ok...so 
why I can't install BSD 64 bits with my system ???


Any clues, thanks in advance.


You've given us no indication as to what errors you are getting.  It 
appears by the motherboard specs (that I looked up) you probably need 
to be trying FreeBSD/amd64.   Feel free to try that (I've noticed a 
lot of people misunderstand the i386/amd64/ia64 names, and try to 
install ia64 on the wrong hardware) If that doesn't resolve the 
issue, please give us something to work with.


P.S.  for the record,  I hate the architecture names amd64/ia64 ;)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 64-bits platform question

2007-02-21 Thread Jeff Palmer




On a side note -- a LOT of people have been making this mistake recently.
Can anyone think of a way to make it more obvious that people are downloading
the wrong isos?

--
Bill Moran
Collaborative Fusion Inc.



Short of renaming the architectures from amd64/ia64,   it's 
doubtful.   a lot of people go directly tot he ftp server or torrent 
sites to get the ISO,   so they would never see the big warning on 
the freebsd.org homepage  (and even fewer would read it in a ftp motd)


Of course,  my two cents.

Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Onpening and Closing ports

2007-02-12 Thread Jeff Palmer

..snip..



If you use good passwords, the SSH dictionary attacks are not a great
concern.  ..snip
-Chuck

..snip..

Or better yet, disable username/password authentication,  and just 
use ssh keys.   it's more secure,  and they can bruteforce it all day 
long. Even if you had a password of a  they'd be denied.



-Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: APC SMART-UPS 750 VA

2006-11-13 Thread Jeff Palmer

At 09:45 AM 11/13/2006, you wrote:

On Mon, Nov 13, 2006 at 02:20:33PM +, Mark wrote:
 
  Could someone tell me whether I can use the
  APC SMART-UPS 750 VA for my FreeBSD 4.11
  installation?

 Anyone? Please?


When I originally ported apcupsd (The actual application,  not the 
FreeBSD port) over to *BSD,  I was using a Smart-UPS 1000 on the test 
machine.   The 750 should work well.


Jeff Palmer 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: What's so compelling about FreeBSD?

2006-10-16 Thread Jeff Palmer

At 01:45 PM 10/16/2006, Simon Gao wrote:

I have a few FreeBSD machine from 4.x to 5.x. I have asked people how to
upgrade them to latest version 6.x cleanly. All I was told is that I
need to wipe them out and reinstall. However, this is not the case with
Gentoo Linux. With Gentoo, version release does not matter that much,
you can always keep your system up to date if you like. Of cause, you
can also choose staying at a certain version.

Linux supports more devices than FreeBSD, especially new devices.


Whoever gave you the 'wipe and reinstall' advice for the 5.x to 6.x 
migration was insane.


4.x to 6.x is a pain, due to major changes in /dev (5.x and later use 
devfs, 4.x doesn't)   but can still be done.
but the 5.6 to 6.x migration is fairly straight forward with a 
buildworld and a couple minor caveats as noticed in UPDATING.


Jeff

P.S.  while 4.x to 5.x is possible,  I'd still personally do a 
wipe/reinstall.5.x to 6.x,  I'd build world.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: installing ports

2006-10-03 Thread Jeff Palmer
snipped out the original email


You may want to try using portsnap.


pkg_add -r portsnap

then
portsnap fetch extract


BTW:  This sounds like one of the etnic (sp?) bandwidth manager boxes.
Would that happen to be the case?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Squid +pf +if_bridge

2006-09-14 Thread Jeff Palmer
Hello all,

I'm using freebsd 6.1 as a bridge (if_bridge)
The interfaces are vr0 (plugged into the DSL modem)
and rl0 (plugged into the switch, to the rest of the network

On the bridge,  I'm attempting to use pf to rdr all http requests from
my lan,   to squid (actually dansguardian)

I have squid configured correctly..  and it was working fine.
I *had* pf working correctly,  and redirecting the requests.

Last night,  I re-IP'd my network.  it used to be 192.168.1.*   now it's
10.23.230.*  (this was done for different reasons)

I made the appropriate changes in pf.conf,  and rc.conf to set the new IP
on the bridge.

Problem:
all attempts to browse the web, simply time out.   tcpdump shows:
000874 rule 6/0(match): pass in on vr0: 10.23.230.254  10.23.230.5: ICMP
net 10.23.230.26 unreachable, length 36
05 rule 6/0(match): pass in on bridge0: 10.23.230.254  10.23.230.5:
ICMP net 10.23.230.26 unreachable, length 36
22 rule 7/0(match): pass out on rl0: 64.233.179.99  10.23.230.5: ICMP
net 64.233.179.99 unreachable, length 36

However,  this only occurs with the redirect.   if I insert the proxy
IP/port in my web browser,  it works fine.

Diagnostics:
10.23.230.254 is DSL modem
10.23.230.26 is the bridge/squid box
10.23.230.5 is the workstation trying to browse the net.

from th bridge,  I can ping all internal IP's,  and external (internet)
IP's with no problem.   From the DSL modem,  I can ping all machines on
the internet,  and also all machines behind the bridge.
from the workstation,  I can ping the bridge, the DSL modem,  and all
internet hosts..
I see no apparent reason that the tcpdump output shows ICMP unreachable
between *.254  and *.5


Has anyone run into this before?  if so,  any idea how to resolve it?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Geli questions.. ponderings..

2006-08-23 Thread Jeff Palmer
Hello,


Let me preface the email by saying I'm not overly familiar with geli,  and
it may already have the ability to do what I'm about to describe.

The scenario:   A FreeBSD based appliance at a customer premise.  The
customer really can't be trusted not to disasemble the box,  and gain
knowledge about the box configuration, software, and design.

The idea:  I'd like to use geli to encrypt *everything* on the disk.  So
if someone (a competitor maybe) removes the disk from the machine,   he
can't gain any data off of it easily.  I know nothing is 100%,  but why
make the process easy for him?

The problem:  I don't want the end user to have to do anything to the box,
  to have it come back up after a reboot/power failure.   The goal is an
appliance that the client just plugs in,  and forgets about it.

The plan:  the appliance would be persistantly connected to an SSL based
VPN server at my central office. (Think OpenVPN server)  I'd like a way
for geli to encrypt the entire disk,  but fetch the key from a server
located on the VPN.  this would require the appliance to boot up,  access
the internet (static IP), access the VPN (ssl key'd) and fetch the key
that geli needs.

Is this currently possible using geli (or even other software that I may
not have heard of)  or if not,   would it be overly difficult to
implement?


Any feedback or brainstorming would be GREATLY appreciated.


DrkShdw @ freenode (##FreeBSD)





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: a good www/picture management port?

2006-07-22 Thread Jeff Palmer

www/gallery

http://www.gallery.org


- Original Message - 
From: Jonathan Horne [EMAIL PROTECTED]

To: freebsd-questions@freebsd.org
Sent: Saturday, July 22, 2006 5:42 PM
Subject: a good www/picture management port?


anyone know of good picture management application that can be found 
within

ports, to manage and organize pics that i upload?

right now, my management system is to:
1) open my folder on my local KDE workstation.  create image gallery using 
the

built in tool.
2) upload the entire folder under a master folder on my web host.

im not looking for sometnig that i can try to complete with imageshack or
anything, but if there is something out there that can help me out with 
the
thumbnailing and organization of the tons of pics im accumulating these 
days,

i would appreciate anyones input.

thanks a bunch,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


IPFW fwd doesn't seem to work

2002-10-27 Thread Jeff Palmer
Hello,


I run a small ISP in florida,  and have decided to implement a squid proxy.

I've got everything configured except the ipfw forward rule on the 
bridge/firewall.

The basic layout isrouter ---  bridge/firewall -- switch to other 
servers


I've added a rule to allow traffic from the proxy machine, out to the internet.

ipfw add pass tcp from 123.123.123.123 to any 80

I then have a rule that is supposed to forward the other port 80 requests 
to another ip/port.

ipfw add fwd 123.123.123.124,3128 log tcp from 123.123.123.0/24 to any 80

Now,   /var/log/security shows the rule as matching but the proxy machine 
never see's the traffic.


Any ideas on what I'm doing wrong?

Jeff Palmer
http://www.pci2.net
http://boards.pci2.net






To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message