Re: pf seems to start late?

2005-03-17 Thread Jeff Penn
Volodymyr Kostyrko [EMAIL PROTECTED]:
Shouldn't PF start right after the interfaces come up? [...]

Guys, didn't you forgot that pf sometimes uses resolver to lookup 
 hostnames present in pf.conf? What happens if it should resole hostnames 
 with local named?

I noticed that openbsd does a two-stage startup if pf is enabled.
Rc initially defines rules for lo0,  ssh/dns/icmp/ etc from any
to any (also NFS if enabled).  After the network is started these rules
are replaced by loading pf.conf.

Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IPFW config

2005-03-06 Thread Jeff Penn
SigmaX [EMAIL PROTECTED]:
 I have a FreeBSD 5.3 server that I access over SSH.  I followed the 
 handbook guide to loading the ipfw kernel module to setup a firewall.  I 
 made the mistake the other day of loading the firewall, which defaults 
 to block all, and rebooting, so I couldn't get into the system again 
 (Had to drive in and fix it :-P).  Anyway, what I need to know is how to 

/usr/share/examples/ipfw/change_rules.sh:
# Change ipfw(8) rules with safety guarantees for remote operation
#
# Invoke this script to edit ${firewall_script}. It will call ${EDITOR},
# or vi(1) if the environment variable is not set, for you to edit
# ${firewall_script}, ask for confirmation, and then run
# ${firewall_script}. You can then examine the output of ipfw list and
# confirm whether you want the new version or not.
#
# If no answer is received in 30 seconds, the previous
# ${firewall_script} is run, restoring the old rules (this assumes ipfw
# flush is present in it).

Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Question about ipfw, natd and port forwarding.

2005-03-06 Thread Jeff Penn
Deling Ren [EMAIL PROTECTED]:
 Hi all, I am trying to setup a NAT box for my home network on freebsd 5.3.
 I am using ipfw and natd. I already got nat running but I am having
 problem with port forwarding. I am trying to forward port 80 on the nat
 box to an internal machine (192.168.0.7). I have the following as part of

 I have no problem connecting port 80 on the nat box from outside. But as I
 added stateful ipfw rules, it stops working. Running nmap from outside
 says port 80 is filtered. I am not sure how to configure the rules to
 enable port forwarding. Any help will be appreciated. Thanks.

 5 allow ip from any to any via $iif

This is a limitation of ipfw, nat cannot be used with keep-state rules.
If $iif above is ppp you can get around this by configuring ppp(8) to
perform nat.

Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: NAT rules in ppp

2005-02-27 Thread Jeff Penn
Warren [EMAIL PROTECTED]:
 This is the rule i presently have in my ppp.conf file  

 nat port tcp 10.100.6.10:6881-6999 6881-6999

 What im wanting to change without the need to use an actual FW is to have it 
 so those ports are forwaded across my entire local subnet rather then a 
 specific local IP.  Can this be done or am i limited to specific machine 
 IP's ?

You may be able to achieve this using the 'enable proxy' feature in ppp.

Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: postfix postmap, when to use

2004-07-04 Thread Jeff Penn
dave [EMAIL PROTECTED]:
 I've got a confusion issue, regarding postfix's postmap and when to use
 it. I've read some documentation that suggests you don't need to run it when
 making regexp or pcre map types such as in header_checks, yet the
 header_checks file supplied with postfix 2.1 suggests to run it. In addition
 hash and other types i'm similar confused. Has this changed from 2.0 to 2.1?

I believe you are correct, certainly pcre  possibly regexp do not
require postmap to be run.  Postfix has the tools to help you work this
out for yourself:

 believe you are correct, certainly pcre  possibly regexp do not
require postmap to be run.  Postfix has the tools to help you work this
out for yourself:

# cat /usr/local/etc/postfix/maps/helo_access.pcre
/^[0-9]+(\.[0-9]+){3}$/ REJECT Invalid hostname
# postmap -q 10.0.0.1 pcre:/usr/local/etc/postfix/maps/helo_access.pcre
REJECT Invalid hostname

# cat /usr/local/etc/postfix/maps/user_access
jeffOK
# postmap -q jeff hash:/usr/local/etc/postfix/maps/user_access
postmap: fatal: open database /usr/local/etc/postfix/maps/user_access.db
: No such file or directory
# postmap hash:/usr/local/etc/postfix/maps/user_access
# postmap -q jeff hash:/usr/local/etc/postfix/maps/user_access
OK

Use postconf -m to find out what databases your system supports.

jeff
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: constant tun interface

2004-07-04 Thread Jeff Penn
Lev Klimin [EMAIL PROTECTED]:
 I have little trouble. I have 4.10-release with ppp ant ipnat. On
 startup ipnat reload it's rules with interface tun0 in statments which
 is ppp's device. But before running ppp, there is no tun device in
 system

pppctl(8) includes some examples of how to achieve this.  You will also
need to configure rc.conf(5) to run the ppp daemon at start up.

The solution is straightforward, I answered a similar question with more
details on the newsgroup comp.unix.bsd.freebsd.misc.

 Because of lack of tun interface, further ipnat rules don't work. I
 can reload ipnat then ppp starting, and it's OK. Can I build my
 kernel to make tun interface on startup sach as ppp interface? I build
 my kernel with option
 pseudo-device   tun1 #Tunnel driver (ppp(8),
nos-tun(8))
 but after reboot I don't see tun interface in ifconfig output.

Building tun0 into the kernel will have no effect.  I prefer to use the
module that is automatically loaded.

jeff
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portsdb: Warning: Duplicate INDEX entry [SOLVED]

2004-03-01 Thread Jeff Penn
Kris Kennaway [EMAIL PROTECTED]:
 On Tue, Feb 24, 2004 at 09:32:15PM +, Jeff Penn wrote:
 * Kris Kennaway [EMAIL PROTECTED]:
  On Mon, 23 Feb 2004, Jeff Penn wrote:
 
  My ports system is in a bit of a mess.  The problems first surfaced
  after last weeks 'cvsup; portsdb -uU'.  This weeks cvsup did not
  improve the situation:
 
  Run 'make describe' on its own..it will give an error at some point,
  which should let us determine what is going wrong.

It was decided that my ports had to be rebuilt from scratch.  The likely
cause of the problem is failing to adobt my ports when I first
cvsupped. (details: http://www.cvsup.org/faq.html)
 
After deleting the ports tree  installing ports.tgz from my ver 4.4 
installation CDROM I cvsup'd using 'tag=RELEASE_4_4_0', then cvsup'd
again with 'tag=.'  However portsdb -uU still failed:

  make_index: fandango-0.2.5: no entry for /usr/ports/x11/kdelibs3
  Warning: Duplicate INDEX entry: *** Error code 1
  Warning: Duplicate INDEX entry:

 make description also failed:

  === chinese/abiword failed:
  zh-abiword-0.7.13: /usr/ports/editors/AbiWord non-existent --
  dependency list incomplete
  === chinese/acroread-chsfont
  *** Error code 1

I got around this by removing all the ports/* entries from my refuse
file so that I receive the full ports collection.

Jeff

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


[jeff@jrpenn.demon.co.uk: Re: portsdb: Warning: Duplicate INDEX entry]

2004-02-25 Thread Jeff Penn
Forgot to copy list.

- Forwarded message from Jeff Penn [EMAIL PROTECTED] -

From: Jeff Penn [EMAIL PROTECTED]
To: Kris Kennaway [EMAIL PROTECTED]
Subject: Re: portsdb: Warning: Duplicate INDEX entry
Date: Wed, 25 Feb 2004 18:36:57 +

On Tue, Feb 24, 2004 at 04:15:28PM -0800, Kris Kennaway wrote:
 On Tue, Feb 24, 2004 at 09:32:15PM +, Jeff Penn wrote:
  * Kris Kennaway [EMAIL PROTECTED]:
   On Mon, 23 Feb 2004, Jeff Penn wrote:
  
   My ports system is in a bit of a mess.  The problems first surfaced
   after last weeks 'cvsup; portsdb -uU'.  This weeks cvsup did not
   improve the situation:
  
   Run 'make describe' on its own..it will give an error at some point,
   which should let us determine what is going wrong.
  
  My system is running 4.9 release.  Output of make describe follows:
  
  kdeaccessibility-3.2.0: /usr/ports/x11-toolkits/qt32 non-existent -- d
  ependency list incomplete
  kdeaccessibility-3.2.0: /usr/ports/x11-toolkits/qt32 non-existent -- d
  ependency list incomplete
 
 That directory should exist if you have the complete ports collection. 
It does not exist.  Cvsup does not seem to be updating the ports tree to
current.  The last 3 cvsup's have had problems, twice using
cvsup.uk.FreeBSD.org,  the most recent from cvsup4.uk.FreeBSD.org.

ports/dns is missing:

#
# MOVED - a list of (recently) moved or removed ports
#
# $FreeBSD: ports/MOVED,v 1.341 2004/02/18 03:50:34 adamw Exp $
 === snip ===
net/bind8|dns/bind8|2003-09-05|moved to new dns category
net/bind84|dns/bind84|2003-09-05|moved to new dns category
net/bind9|dns/bind9|2003-09-05|moved to new dns category
net/bind9-dlz|dns/bind9-dlz|2003-09-05|moved to new dns category


# $FreeBSD: ports/Makefile,v 1.79 2004/01/22 09:16:59 marcus Exp $
#
 === snip ===
SUBDIR += dns


# $FreeBSD: ports/net/Makefile,v 1.914 2003/02/09 05:03:04 marcus Exp $
#
 === snip ===
SUBDIR += bind8
SUBDIR += bind9
SUBDIR += bind9-dlz


/usr/share/examples/cvsup/ports-supfile:
*default host=CHANGE_THIS.FreeBSD.org
*default base=/usr
*default prefix=/usr
*default release=cvs tag=.
*default delete use-rel-suffix
ports-all

/usr/sup/refuse:
contrib/bind
gnu/libexec/uucp
doc/de_*
doc/es_*
doc/el_*
doc/fr_*
doc/it_*
doc/ja_*
doc/nl_*
doc/no_*
doc/pl_*
doc/pt_*
doc/ru_*
doc/sr_*
doc/zh_*
ports/arabic
ports/chinese
ports/french
ports/german
ports/hebrew
ports/hungarian
ports/japanese
ports/korean
ports/polish
ports/portuguese
ports/russian
ports/ukrainian
ports/vietnamese
ports/INDEX
ports/INDEX-5
ports/INDEX.db

thanks
Jeff

- End forwarded message -
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


[jeff@jrpenn.demon.co.uk: [jeff@jrpenn.demon.co.uk: Re: portsdb: Warning: Duplicate INDEX entry]]

2004-02-25 Thread Jeff Penn
More information included at the end of this message which may be of
interest.

Jeff

- Forwarded message from Jeff Penn [EMAIL PROTECTED] -

From: Jeff Penn [EMAIL PROTECTED]
To: Kris Kennaway [EMAIL PROTECTED]
Subject: Re: portsdb: Warning: Duplicate INDEX entry
Date: Wed, 25 Feb 2004 18:36:57 +

On Tue, Feb 24, 2004 at 04:15:28PM -0800, Kris Kennaway wrote:
 On Tue, Feb 24, 2004 at 09:32:15PM +, Jeff Penn wrote:
  * Kris Kennaway [EMAIL PROTECTED]:
   On Mon, 23 Feb 2004, Jeff Penn wrote:
  
   My ports system is in a bit of a mess.  The problems first surfaced
   after last weeks 'cvsup; portsdb -uU'.  This weeks cvsup did not
   improve the situation:
  
   Run 'make describe' on its own..it will give an error at some point,
   which should let us determine what is going wrong.
  
  My system is running 4.9 release.  Output of make describe follows:
  
  kdeaccessibility-3.2.0: /usr/ports/x11-toolkits/qt32 non-existent -- d
  ependency list incomplete
  kdeaccessibility-3.2.0: /usr/ports/x11-toolkits/qt32 non-existent -- d
  ependency list incomplete
 
 That directory should exist if you have the complete ports collection. 
It does not exist.  Cvsup does not seem to be updating the ports tree to
current.  The last 3 cvsup's have had problems, twice using
cvsup.uk.FreeBSD.org,  the most recent from cvsup4.uk.FreeBSD.org.

ports/dns is missing:

#
# MOVED - a list of (recently) moved or removed ports
#
# $FreeBSD: ports/MOVED,v 1.341 2004/02/18 03:50:34 adamw Exp $
 === snip ===
net/bind8|dns/bind8|2003-09-05|moved to new dns category
net/bind84|dns/bind84|2003-09-05|moved to new dns category
net/bind9|dns/bind9|2003-09-05|moved to new dns category
net/bind9-dlz|dns/bind9-dlz|2003-09-05|moved to new dns category


# $FreeBSD: ports/Makefile,v 1.79 2004/01/22 09:16:59 marcus Exp $
#
 === snip ===
SUBDIR += dns


# $FreeBSD: ports/net/Makefile,v 1.914 2003/02/09 05:03:04 marcus Exp $
#
 === snip ===
SUBDIR += bind8
SUBDIR += bind9
SUBDIR += bind9-dlz

ttyp4[1]# ll /usr/ports/Mk
total 338
-rw-r--r--  1 root  wheel7905 24 Jan 22:33 bsd.emacs.mk
-rw-r--r--  1 root  wheel   22806  7 Feb 21:10 bsd.gnome.mk
-rw-r--r--  1 root  wheel6151 24 Jan 22:33 bsd.gnustep.mk
-rw-r--r--  1 root  wheel   17682 24 Jan 22:33 bsd.java.mk
-rw-r--r--  1 root  wheel5927 15 Feb 15:18 bsd.kde.mk
-rw-r--r--  1 root  wheel4300 24 Jan 22:33 bsd.openssl.mk
-rw-r--r--  1 root  wheel4587 15 Feb 15:18 bsd.php.mk
-rw-r--r--  1 root  wheel  173942  7 Feb 21:10 bsd.port.mk
-rw-r--r--  1 root  wheel 139 25 Aug  1999 bsd.port.post.mk
-rw-r--r--  1 root  wheel 140 25 Aug  1999 bsd.port.pre.mk
-rw-r--r--  1 root  wheel8439  7 Feb 21:10 bsd.port.subdir.mk
-rw-r--r--  1 root  wheel   13273 31 Jan 21:04 bsd.python.mk
-rw-r--r--  1 root  wheel   16617 28 Dec 20:08 bsd.ruby.mk
-rw-r--r--  1 root  wheel4076  7 Feb 21:10 bsd.sdl.mk
-rw-r--r--  1 root  wheel   42432 21 Feb 22:17 bsd.sites.mk

ttyp4[0]# head /usr/ports/Mk/bsd.port.mk
#-*- mode: makefile; tab-width: 4; -*-
# ex:ts=4
#
# $FreeBSD: ports/Mk/bsd.port.mk,v 1.484 2004/02/04 04:27:04 marcus Exp
$
#   $NetBSD: $
#
#   bsd.port.mk - 940820 Jordan K. Hubbard.
#   This file is in the public domain.
#
# Please view me with 4 column tabs!

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portsdb: Warning: Duplicate INDEX entry

2004-02-24 Thread Jeff Penn
* Kris Kennaway [EMAIL PROTECTED]:
 On Tue, Feb 24, 2004 at 03:28:32AM +, Robert Woolley wrote:
 On Mon, 23 Feb 2004, Jeff Penn wrote:

 My ports system is in a bit of a mess.  The problems first surfaced
 after last weeks 'cvsup; portsdb -uU'.  This weeks cvsup did not
 improve the situation:

 I don't have a solution, but I'm getting just the same problem with
 portsdb -uU; and it happened at the same time.

 Run 'make describe' on its own..it will give an error at some point,
 which should let us determine what is going wrong.

Thanks Kris,
My system is running 4.9 release.  Output of make describe follows:

ttyp5[-1]# make describe
=== accessibility
=== accessibility/at-spi
at-spi-1.3.12|/usr/ports/accessibility/at-spi|/usr/X11R6|An Assistive Te
chnology Service Provider Interface|/usr/ports/accessibility/at-spi/pkg-
descr|[EMAIL PROTECTED]|accessibility x11-toolkits|/usr/ports/accessibil
ity/atk /usr/ports/accessibility/gail /usr/ports/devel/ORBit2 /usr/ports
/devel/glib20 /usr/ports/devel/gmake /usr/ports/devel/libIDL /usr/ports/
devel/libbonobo /usr/ports/devel/libglade2 /usr/ports/devel/libtool13 /u
sr/ports/devel/pkgconfig /usr/ports/graphics/libart_lgpl2 /usr/ports/gra
phics/libgnomecanvas /usr/ports/textproc/intltool /usr/ports/textproc/li
bxml2 /usr/ports/x11-toolkits/gtk20 /usr/ports/x11-toolkits/pango /usr/p
orts/x11/XFree86-4-libraries|/usr/ports/accessibility/atk /usr/ports/acc
essibility/gail /usr/ports/devel/ORBit2 /usr/ports/devel/glib20 /usr/por
ts/devel/libIDL /usr/ports/devel/libbonobo /usr/ports/devel/libglade2 /u
sr/ports/devel/pkgconfig /usr/ports/graphics/libart_lgpl2 /usr/ports/gra
phics/libgnomecanvas /usr/ports/misc/gnomehier /usr/ports/textproc/libxm
l2 /usr/ports/x11-toolkits/gtk20 /usr/ports/x11-toolkits/pango /usr/port
s/x11/XFree86-4-libraries|http://www.gnome.org/
=== accessibility/atk
atk-1.4.1_2|/usr/ports/accessibility/atk|/usr/local|A GNOME accessibilit
y toolkit (ATK)|/usr/ports/accessibility/atk/pkg-descr|[EMAIL PROTECTED]
|accessibility devel|/usr/ports/devel/glib20 /usr/ports/devel/libtool13 
/usr/ports/devel/pkgconfig|/usr/ports/devel/glib20 /usr/ports/devel/pkgc
onfig|http://developer.gnome.org/projects/gap/
=== accessibility/dasher
dasher-3.2.3|/usr/ports/accessibility/dasher|/usr/X11R6|Information effi
cient text-entry interface|/usr/ports/accessibility/dasher/pkg-descr|pur
[EMAIL PROTECTED]|accessibility editors x11 gnome|/usr/ports/accessibility/a
tk /usr/ports/devel/ORBit2 /usr/ports/devel/gconf2 /usr/ports/devel/glib
20 /usr/ports/devel/gmake /usr/ports/devel/libIDL /usr/ports/devel/libgl
ade2 /usr/ports/devel/libtool13 /usr/ports/devel/pkgconfig /usr/ports/ne
t/linc /usr/ports/textproc/intltool /usr/ports/textproc/libxml2 /usr/por
ts/x11-toolkits/gtk20 /usr/ports/x11-toolkits/pango /usr/ports/x11/XFree
86-4-libraries|/usr/ports/accessibility/atk /usr/ports/devel/ORBit2 /usr
/ports/devel/gconf2 /usr/ports/devel/glib20 /usr/ports/devel/libIDL /usr
/ports/devel/libglade2 /usr/ports/devel/pkgconfig /usr/ports/misc/gnomeh
ier /usr/ports/net/linc /usr/ports/textproc/libxml2 /usr/ports/x11-toolk
its/gtk20 /usr/ports/x11-toolkits/pango /usr/ports/x11/XFree86-4-librari
es|http://www.inference.phy.cam.ac.uk/dasher/
=== accessibility/gail
gail-1.4.1_1|/usr/ports/accessibility/gail|/usr/X11R6|An implementation 
of the ATK interfaces for GTK+ widgets|/usr/ports/accessibility/gail/pkg
-descr|[EMAIL PROTECTED]|accessibility x11-toolkits|/usr/ports/accessibi
lity/atk /usr/ports/devel/glib20 /usr/ports/devel/gmake /usr/ports/devel
/libglade2 /usr/ports/devel/libtool13 /usr/ports/devel/pkgconfig /usr/po
rts/graphics/libart_lgpl2 /usr/ports/graphics/libgnomecanvas /usr/ports/
textproc/intltool /usr/ports/textproc/libxml2 /usr/ports/x11-toolkits/gt
k20 /usr/ports/x11-toolkits/pango /usr/ports/x11/XFree86-4-libraries|/us
r/ports/accessibility/atk /usr/ports/devel/glib20 /usr/ports/devel/libgl
ade2 /usr/ports/devel/pkgconfig /usr/ports/graphics/libart_lgpl2 /usr/po
rts/graphics/libgnomecanvas /usr/ports/textproc/libxml2 /usr/ports/x11-t
oolkits/gtk20 /usr/ports/x11-toolkits/pango /usr/ports/x11/XFree86-4-lib
raries|http://www.gnome.org/
=== accessibility/gnomemag
gnomemag-0.10.6|/usr/ports/accessibility/gnomemag|/usr/X11R6|GNOME scree
n magnifier|/usr/ports/accessibility/gnomemag/pkg-descr|[EMAIL PROTECTED]
g|accessibility x11 gnome|/usr/ports/accessibility/at-spi /usr/ports/acc
essibility/atk /usr/ports/accessibility/gail /usr/ports/devel/ORBit2 /us
r/ports/devel/glib20 /usr/ports/devel/gmake /usr/ports/devel/libIDL /usr
/ports/devel/libbonobo /usr/ports/devel/libglade2 /usr/ports/devel/libto
ol13 /usr/ports/devel/pkgconfig /usr/ports/graphics/libart_lgpl2 /usr/po
rts/graphics/libgnomecanvas /usr/ports/textproc/intltool /usr/ports/text
proc/libxml2 /usr/ports/x11-toolkits/gtk20 /usr/ports/x11-toolkits/pango
 /usr/ports/x11/XFree86-4-libraries|/usr/ports/accessibility/at-spi /usr
/ports/accessibility/atk /usr/ports/accessibility/gail /usr/ports/devel/
ORBit2 /usr/ports

portsdb: Warning: Duplicate INDEX entry

2004-02-23 Thread Jeff Penn
My ports system is in a bit of a mess.  The problems first surfaced
after last weeks 'cvsup; portsdb -uU'.  This weeks cvsup did not
improve the situation:

ttyp5[-1] portsdb -uU
Updating the ports index ... Generating INDEX.tmp - please wait..===
accessibility/kdeaccessibility failed:
kdeaccessibility-3.2.0: /usr/ports/x11-toolkits/qt32 non-existent --
dependency list incomplete
kdeaccessibility-3.2.0: /usr/ports/x11-toolkits/qt32 non-existent --
dependency list incomplete
make_index: atk-1.4.1_2: no entry for /usr/ports/devel/glib20
 cut
make_index: gnopernicus-0.7.1_1: no entry for /usr/ports/x11/libgnome
Warning: Duplicate INDEX entry: *** Error code 1
Warning: Duplicate INDEX entry:
 Done.
done
[Updating the portsdb format:bdb1_btree in /usr/ports ... - 15 port
entries found /usr/sup/INDEX:1:Port info line must consist of 10 fields.
/usr/sup/INDEX:2:Port info line must consist of 10 fields.
/usr/sup/INDEX:3:Port info line must consist of 10 fields.
/usr/sup/INDEX:4:Port info line must consist of 10 fields.
 . done]

Moving pkgdb.db, INDEX  INDEX.db out of the way  re-buiding did not
work,

I've noticed that the cvsup has moved some ports around.  Bind is under
net, instead of the new location dns.

My cvsup command is effectively:

cvsup -h cvsup.uk.FreeBSD.org /usr/share/examples/cvsup/ports-supfile

Any suggestions appreciated.
Jeff
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: hosts.allow not always working... misses some IPs

2003-12-03 Thread Jeff Penn
On Tue, Dec 02, 2003 at 12:54:32AM -0500, Kerry B. Rogers wrote:
 I received an e-mail with the following header fragment:
 
 ===V=== cut here ===V
 Received: from priv-edtnes11-hme0.telusplanet.net (outbound03.telus.net
 [199.185.220.222])
  by tinkertoys.net (8.12.10/8.11.6) with ESMTP id hANMNpKS021237;
  Sun, 23 Nov 2003 15:23:51 -0700 (MST)
 ===^=== cut here ===^
 
 In my hosts.allow file (which usually rejects domains just fine) I have:
 
 smtp : 199.185.220.0/255.255.251.0 : deny

---^^^

 The above listed e-mail should have been rejected but it wasn't. Is this a
 bug? Is a 975K host.allow file creating this problem? Please help...

I added your rule to my hosts.allow and tested it using:

tcpdmatch smtp 199.185.220.222

The rule was not triggered.  Changing the rule to a valid netmask 
(255.255.255.0) did trigger the rule  denied access.

Jeff
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



Re: FreeBSD, FHS, and /mnt/cdrom

2003-11-22 Thread Jeff Penn
On Fri, Nov 21, 2003 at 10:07:31AM -0500, Jerry McAllister wrote:
 Less Good:
  - All mount points in /mnt (e.g. /mnt/cdrom, /mnt/camera, /mnt/windows/C)
  - breaks
FreeBSD standard for an empty /mnt

/mnts 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ppp confusion

2003-10-10 Thread Jeff Penn
On Thu, Oct 09, 2003 at 05:20:11PM +1000, nevle wrote:
 I made the changes you suggested and seemed to be connected (full modem 
 lights) but couldn't log-on to any site(using Lynx),tried to ping -c 
 204.216.27.18 ,and got invalid count of packets to transmit...

 ##ppp.conf
etc ...
  add default HISADDR  # Add a (sticky) default route

I noticed in your original post you included the following details:

 my ppp.linkup file says
 MYADDR:
 delete ALL
 add 0 0 HISADDR

Try commenting out those last two lines in ppp.linkup.  You should only 
need 'add default HISADDR' in ppp.conf or ppp.linkup, not both.

Jeff
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Xfree86 debugging

2003-07-28 Thread Jeff Penn
I have been unable to run an X client+server on 4.8 release for several
weeks due to what appears to be a known issue.  The problem surfaced a 
few days after my weekly port upgrade (none of the upgrades were X 
related - the previous weeks upgrade did update an X port, but I'm not
certain which).

Google found two similar issues, one appears to be due to using -O2
optimisation with gcc3.3 to compile freetype on Debian.  The other 
message was in the xfree86 fonts mailing list archive:


  That's expected behaviour with current CVS, which is not internally
  consistent.  Both the freetype and the type1 backends register for
  PostScript fonts; whichever you get depends on the order they 
  register.

  Could you please try again after applying


  http://www.pps.jussieu.fr/~jch/software/files/
xfree86-fønts-þriøritý-2002¹025.þãtch

  Assuming it works today, it will cause the freetype backend to get
  Type 1 fonts, and the type1 backend to get CFF fonts.


The patch is no longer available,  the author of the above email did 
not respond to a request for more information.  I emailed the maintainer
of freetype2 a couple of weeks ago but have not yet had any response.

Up to now I have used packages for XFree86.  Last week I tried re-
installing X using the ports in a desperate attempt to resolve the 
issue.  I have also tried disabling some of the modules loaded by
/etc/XF86Config-4 to narrow down the problem.

Any suggestions what I should do next?.  Is there anything I can do to 
be more pro-active in resolving this issue, or do I assume that the 
problem is with freetype2  a patch is in the pipeline?.

thanks
Jeff
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sendmail version

2003-07-06 Thread Jeff Penn
On Sun, Jul 06, 2003 at 10:17:49AM +, DanB wrote:
 How do you find what sendmail version you have 4.8 stable?
 How do you turn off sendmail?

The sendmail version/config version is available in your email headers:

®eceiveð: frøm chãtusã.cøm (®205-sãtrtr.©hãtÛSÃ.©ØM [209.222.¹³7.205])
bý þðx.chãtusã.cøm (8.8.8/8.8.8) with ËSMTÞ ið àÃÃ0¹009
^^^

Jeff
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Wãrning: fønt renðerer før ??.þcf?? ãlreãðý registereð ãt þriøritý0

2003-07-01 Thread Jeff Penn
I'm having problems running XFree86 on 4.8 release with up to date 
ports.  I've tried running XFree86 using both xdm and startx.
'pkg_info -g' on XFree86 related ports does not indicate any corrupt 
files, reinstalling fontconfig  Xft also had no effect.

/var/log/XFree86.0.log:
XFree86 Version 4.3.0
Release Date: 27 February 2003
X Protocol Version 11, Revision 0, Release 6.6
Build Operating System: FreeBSD 4.8 i386 [ELF] 
Build Date: 06 June 2003
.
(**) Option Protocol auto
(**) Mouse0: Protocol: auto
(**) Option CorePointer
(**) Mouse0: Core Pointer
(**) Option Device /dev/mouse
(**) Option Emulate3Buttons
(**) Mouse0: Emulate3Buttons, Emulate3Timeout: 50
(==) Mouse0: Buttons: 3
(II) Keyboard Keyboard0 handled by legacy driver
(II) XINPUT: Adding extended input device Mouse0 (type: MOUSE)
(II) Mouse0: SetupAuto: hw.iftype is 4, hw.model is 0
(II) Mouse0: SetupAuto: protocol is SysMouse
Warning: font renderer for .pcf already registered at priority 0
Warning: font renderer for .pcf.Z already registered at priority 0
Warning: font renderer for .pcf.gz already registered at priority 0
Warning: font renderer for .snf already registered at priority 0
Warning: font renderer for .snf.Z already registered at priority 0
Warning: font renderer for .snf.gz already registered at priority 0
Warning: font renderer for .bdf already registered at priority 0
Warning: font renderer for .bdf.Z already registered at priority 0
Warning: font renderer for .bdf.gz already registered at priority 0
Warning: font renderer for .pmf already registered at priority 0

There is nothing useful in ~/.xsession-errors.

I've had a look on google and found similar issues related to using
-O2 optimisation with gcc3.3 /or freetype.  Has anyone else seen this
problem?.

Jeff
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Warning: font renderer for .pcf already registered at priority 0

2003-07-01 Thread Jeff Penn,,,
Resending...

I'm having problems running XFree86 on 4.8 release with up to date 
ports.  I've tried running XFree86 using both xdm and startx.
'pkg_info -g' on XFree86 related ports does not indicate any corrupt 
files, reinstalling fontconfig  Xft also had no effect.

/var/log/XFree86.0.log:
XFree86 Version 4.3.0
Release Date: 27 February 2003
X Protocol Version 11, Revision 0, Release 6.6
Build Operating System: FreeBSD 4.8 i386 [ELF] 
Build Date: 06 June 2003
.
(**) Option Protocol auto
(**) Mouse0: Protocol: auto
(**) Option CorePointer
(**) Mouse0: Core Pointer
(**) Option Device /dev/mouse
(**) Option Emulate3Buttons
(**) Mouse0: Emulate3Buttons, Emulate3Timeout: 50
(==) Mouse0: Buttons: 3
(II) Keyboard Keyboard0 handled by legacy driver
(II) XINPUT: Adding extended input device Mouse0 (type: MOUSE)
(II) Mouse0: SetupAuto: hw.iftype is 4, hw.model is 0
(II) Mouse0: SetupAuto: protocol is SysMouse
Warning: font renderer for .pcf already registered at priority 0
Warning: font renderer for .pcf.Z already registered at priority 0
Warning: font renderer for .pcf.gz already registered at priority 0
Warning: font renderer for .snf already registered at priority 0
Warning: font renderer for .snf.Z already registered at priority 0
Warning: font renderer for .snf.gz already registered at priority 0
Warning: font renderer for .bdf already registered at priority 0
Warning: font renderer for .bdf.Z already registered at priority 0
Warning: font renderer for .bdf.gz already registered at priority 0
Warning: font renderer for .pmf already registered at priority 0

There is nothing useful in ~/.xsession-errors.

I've had a look on google and found similar issues related to using
-O2 optimisation with gcc3.3 /or freetype, but haven't yet tracked down
all the details.  Has anyone else seen this problem?.

I am resending this due to problems with the subject line of my first
post.  I also forgot to mention that I install XFree86 using packages, 
but have not updated XFree86 recently.  My display card is:

nVidia Corporation NV11 [GeForce2 MX/MX 400] (rev b2)

Jeff
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: freebsd4.7 and Samba and OS X

2003-02-08 Thread Jeff Penn
On Thu, Feb 06, 2003 at 03:09:00PM -0900, [EMAIL PROTECTED] wrote:

Forgot to copy the list on this:

   We are having this issue with samba and OSX 10.2.3. We are using
 freebsd4.7 serving samba as a fileserver for our company, we have a
mix
 of windows and macs connecting to it. The windows machines work just
 fine the macs are another story.
 
I have narrowed it down to this: I can open a file/document from the
 fileserver on my mac and edit it but it tells me I dont have the
 permissions to copy it back. This is from a volume that I mounted on
the
 desktop using the 'apple+k' to mount it. When I mount it by command
line
 I can edit the file/document(anyfile) and copy it back with no problem
 
   I have also found this to be true on my linux system. Exact same

I don't claim to be an Apple expert, but I seem to remember that Apple
supports it's file naming conventions by creating an exta file on DOS
style partitions which maps the Apple filename to the DOS filename.

Maybe the Apple system has not got the necessary permissions to create
this extra file.  This could be way off the mark though :).

Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Ooops.

2003-02-02 Thread Jeff Penn
On Sun, Feb 02, 2003 at 05:39:09PM +1030, [EMAIL PROTECTED] wrote:
  The command I used to copy was:
 dump 0af - / | restore xf -
 Is it dump or restore that have been causing the problem?

Shouldn't that be:  dump 0af - / | restore rf -   ?

Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



linux_base upgrade problem

2003-01-20 Thread Jeff Penn
I'm having problems upgrading to linux_base-7.1_2 using portupgrade -rRa
with the package (pkgtools.conf USE_PKG_ONLY[]).

I had similar problems with the last upgrade, which I solved by 
removing all the ports with a dependency on linux_base before 
upgrading.

This time when the upgrade failed I ran pkgdb -F, removing dependencies 
for linux_base without understanding too much of what was going wrong.

pkg_info shows that linux_base is no longer installed.  In a attempt at 
fixing the problem I deinstalled 3 ports that I believe depend on 
linux_base (since 'pkg_info -R linux_base\*' no longer shows any 
dependencies):

acroread4, linux-openmotif 

But I still have 3 files hanging around:

/compat/linux/usr/X11R6/lib: libMrm.so.2 libUil.so.2 libXm.so.2

Moving these files out the way had no effect.

I noticed that the packages +INSTALL script did not have execute
permissions.  I re-packaged the tarball with the correct permissions, but
still no joy.

# portinstall -vf linux_base
---  Session started at: Mon, 20 Jan 2003 13:59:56 +
---  2 ports match the given pattern 'linux_base':
emulators/linux_base
emulators/linux_base-6
Install 'emulators/linux_base'? [yes] 
Install 'emulators/linux_base-6'? [yes] no
---  Fresh installation of emulators/linux_base started at: Mon, 20 Jan
2003 14:00:11 +
** The port 'emulators/linux_base' is held by user.
---  Forced by user
---  Checking the availability of the latest package of
'emulators/linux_base'
---  Found a package of 'emulators/linux_base':
/usr/ports/packages/All/linux_base-7.1_2.tgz
---  Installing 'linux_base-7.1_2' from a package
---  Installation of linux_base-7.1_2 started at: Mon, 20 Jan 2003
14:00:16 +
---  Installing the new version via the package
./+INSTALL: permission denied
pkg_add: install script returned error status
** Command failed [exit code 1]: /usr/bin/script -qa
/tmp/portinstall64871.0 /usr/sbin/pkg_add -f linux_base-7.1_2
** Fix the package's problem and try again.
---  Installation of linux_base-7.1_2 ended at: Mon, 20 Jan 2003
14:00:41 + (consumed 00:00:25)
---  Fresh installation of emulators/linux_base ended at: Mon, 20 Jan
2003 14:00:41 + (consumed 00:00:30)
---  Reporting the results (+:succeeded / -:ignored / *:skipped /
!:failed)
! emulators/linux_base  (pkg_add failed)
---  Session ended at: Mon, 20 Jan 2003 14:00:41 + (consumed
00:00:44)

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Resizing partitions for 5.0

2003-01-19 Thread Jeff Penn
I need to resize my root partition to prepare for 5.0 which requires 30M
of free space.

FilesystemSize   Used  Avail Capacity  Mounted on
/dev/ad0s4a61M40M16M71%/
/dev/ad0s4d   1.3G   788M   480M62%/opt
/dev/ad0s4h   2.1G   430M   1.6G21%/home
/dev/ad0s4e   244M20M   205M 9%/tmp
/dev/ad0s4g   2.4G   946M   1.3G42%/usr
/dev/ad0s4f61M15M41M27%/var

My BSD slice layout will enable me to steal space for root from swap  
tmp.

I am also considering using this as an excuse to change /usr, currently 
I have /usr/obj  /usr/src linked to directories on /opt.

I am fishing for wisdom on the worth of breaking up /usr.  Directories
I've considered moving around are:

158M/usr/X11R6
 91M/usr/compat
546M/usr/local

299M/usr/src/
 27M/usr/obj/

Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



libintl.so.2 not found

2003-01-14 Thread Jeff Penn
I had a problem where my system did not shutdown cleanly.

fsck has cleaned up most of the filesystems, but I have a problem
running mutt:

/usr/libexec/ld-elf.so.1: Shared object libintl.so.2 not found

This appears to be part of the base system.  Would a new build world 
fix this?.

Is there a quicker way to compile this missing files?.

thanks
Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Virtual interface support?

2002-12-31 Thread Jeff Penn
Does freebsd support virtual interfaces? (i.e. a network interface not 
associated with a hardware interface).

My system is running 4.7 release with only a dialup ppp POTS connection, 
which is a bit limiting if you want to learn about networking.  Ideally
I would like to set up a private network address on a virtual interface.

The html documentation supplied with apache2 appears to require the 
server to be running for browsing (many of the links appear broken).

If this support is provided by netgraph I would appreciate some pointers
on setting this up.

thanks
Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Log about named

2002-12-15 Thread Jeff Penn
On Sun, Dec 15, 2002 at 01:43:04PM +0700, 'budsz' wrote:
 Dec 15 13:42:00 router named[300]: omitting IPv4 interface wi0 from
 localnets ACL: address mask not contiguous
 
 What that's mean?, It's normally or some problem...? anyone can explain?

Probably an invalid address mask.

The bits defining an address mask must be contiguous and located at the
most significant bits of the host address.

i.e. 255.255.248.0 is valid, but 255.255.250.0 is invalid.
 ^^^ ^^^
   1000   1010
^
  non-contiguous bit
Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Multiple Gateways/Load Balancing?

2002-12-13 Thread Jeff Penn
On Wed, Dec 11, 2002 at 05:01:45PM -0800, Octavian Hornoiu wrote:
 What is the process to set up a FreeBSD server as a router to use two 
 internet connections and dynamically assign workstations to the two 
 internet connections depending on load so that neither of the 
 connections get overly saturated at the expense of not using the other?

You need OSPF to load balance over equal cost routes.  Use gated or
sebra.

Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



gnufpu kernel module

2002-12-06 Thread Jeff Penn
I'm messing around with my kernel, so don't want anyone to waste too
much time researching this.

Does gnufpu.ko replace kernel configuration option GPL_MATH_EMULATE?.

thanks
Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: AppleTalk addressing/routing question

2002-11-30 Thread Jeff Penn
On Fri, Nov 29, 2002 at 11:47:45AM -0800, paul beard wrote:
 I run netatalk here on my home network and I have noticed that my 
 netatalk-ers all grab addresses in the 65280 range (as well as I 
 
 [/usr/home/paul]:: nbplkup
 red:AFPServer   65280.153:132
 red:netatalk65280.153:4
 red:Workstation 65280.153:4
 pink:Darwin 65522.222:128
 pink:AFPServer  65522.222:129
 blue:AFPServer  65280.220:134
 blue:LaserWriter65280.220:132
 blue:Workstation65280.220:4
 blue:netatalk   65280.220:4
 
 My Darwin-based machines live in the 65522 range. It looks like 
 something is assuming a router. For example, I can use aecho to 

I only have an understanding of AppleTalk from the network perspective.

When MAC's boot they aquire a network in the range 65280-65534, and use
ZIP GetNetInfo to try  determine the correct network range  zone.  For
all your machines to learn the same network number you need to set up
one of the machines as a seed router, i.e. a with a cable number in the
range 1-65279.  This router also requires a default zone name.

Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Changing to/from user within script

2002-11-21 Thread Jeff Penn
Possibly a trivial question.

I want to run a cron job as a user on my system.  Once the job has
completed I need root privileges to power the system down.  I don't 
mind if the script has to run as a root cron job, but running the 
processing as a user will prevent against filling a partition. 

Can this be done without running two different cron jobs?.

thanks
Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Starting natd

2002-10-27 Thread Jeff Penn
On Sun, Oct 27, 2002 at 02:18:21PM -0500, Robert Hall wrote:
 I'm using kernel ppp (pppd). It is already set up and it runs. I have set 
 up FreeBSD boxes before with this configuration, and natd started 
 automatically and ran without any intervention on my part. For some reason, 
 it doesn't do that this time, and I have to start it manually. I'm hoping 
 someone can tell me why, so I can fix it.

I have a dialup workstation with no ethernet card  found that 
starting natd with tun0 down resulted in natd trying to contact ntp 
servers using a source address of 127.0.0.1.  It would not pick up 
tun0's address when tun0 was brought up. 

Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Problem with X-fonts

2002-10-25 Thread Jeff Penn
On Fri, Oct 25, 2002 at 07:25:37PM +0200, Pascal Giannakakis wrote:
 i installed all font-ports in /usr/ports/x11-fonts for XFree86-4. Now all
 fonts look crippled in KDE. What is the reason, and what ports should i
 (de)install, to get smooth fonts in all apps and in all sizes? The system
 should be usable for DTP.

I have recently been messing around with fonts, but am no expert.

Take at xfree86.org's documents.  There's a one entitled 'fonts in 
xfree86'.  It recommends ordering your font paths in XF86Config-4 with 
scalable fonts before bitmap fonts.  Xfree86 may perform 2 passes to 
match a font name.  The first for an exact match, the second for a 
best match.  Re-ordering you font paths will influence the font 
selected.  

Jeff

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message