Re: Network Monitor?

2007-08-12 Thread Kelly D. Grills
On Sun, Aug 12, 2007 at 06:54:57PM -0500, Jack Barnett wrote:
 
 Is there a way to monitor what traffic is coming in/out of my network?
 For example: so me how much bandwidth emails are taking, how much http 
 traffic (both in and outgoing), etc.
 I'd like a report broken down by traffic type like in windows.
 
 FreeBSD-6.2 x86


MRTG is in the ports collection, /usr/ports/net-mgmt/mrtg
  
[EMAIL PROTECTED]/usr/ports/net-mgmt/mrtg $ cat pkg-descr
The Multi Router Traffic Grapher (MRTG) is a tool to monitor the
traffic
load on network-links. MRTG generates HTML pages containing PNG
images which
provide a LIVE visual representation of this traffic. Check

WWW: http://oss.oetiker.ch/mrtg/

for an example. MRTG is based on Perl and C and works under UNIX and
Windows
NT.

MRTG is being successfully used on many sites around the net.
Check the MRTG-Site-Map, which is at:
http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/users.html

-- 
Kelly D. Grills
[EMAIL PROTECTED]




pgpxE9EkKJxdG.pgp
Description: PGP signature


Re: sample cds

2007-03-26 Thread Kelly D. Grills
On Tue, Mar 27, 2007 at 12:25:15AM +0200, stefan broos wrote:
 
 I'm organising a linux/opensource day in my school. Is it possible to 
 get some saple freeBSD cds for those who want to try it?
 
 Stefan

As others have noted, you can download and burn the ISO's.
Another option is a live CD, such as FreeSBIE.
See http://www.freesbie.org for all the details.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgp5SxgCeRQqy.pgp
Description: PGP signature


Re: Have screwed up my longin and password

2007-03-14 Thread Kelly D. Grills
On Wed, Mar 14, 2007 at 03:21:04PM -0500, Roger Scow wrote:
 
 I am totally new to FreeBSD, and have installed it and Gnome2/X11.   
 Somewhere in the process I have either corrupted or lost my password  
 and user name access.  When I try to log into Gnome, either as root  
 or as username, it is a no go.
 
 I know that I set up myself as a user, and set a root password when I  
 was installing.
 
 What do I do now?  Can I restart from the install CD and go back into  
 Sysinstall?
 

You're not the first, see:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/admin.html#FORGOT-ROOT-PW


-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpBmILTvTbu0.pgp
Description: PGP signature


Re: DHCP Server V3.0.5 No BPF under chroot. Works normally otherwise.

2007-03-06 Thread Kelly D. Grills
On Tue, Mar 06, 2007 at 07:03:35PM -0600, Martin McCormick wrote:
 
   I found some cook-book instructions for running dhcpd in
 a chroot environment.  The article is 4 years old and appears to
 be set up for FreeBSD5x, but it isn't far off for FreeBSD6.2
 which is what I need dhcpd to run on.
 

I run isc-dhcp3-server-3.0.5 from ports, started from /etc/rc.conf with the
following options:

dhcpd_enable=YES  # dhcpd enabled?
dhcpd_flags=-q# command option(s)
dhcpd_conf=/usr/local/etc/dhcpd.conf  # configuration file
dhcpd_ifaces= # ethernet interface(s)
dhcpd_withumask=022   # file creation mask

dhcpd_chuser_enable=YES   # runs w/o privileges?
dhcpd_withuser=dhcpd  # user name to run as
dhcpd_withgroup=dhcpd # group name to run as
dhcpd_chroot_enable=YES   # runs chrooted?
dhcpd_devfs_enable=YES# use devfs if available?
dhcpd_rootdir=/var/db/dhcpd   # directory to run in
dhcpd_includedir= # directory with config-

Here's the full pkg-message:

[EMAIL PROTECTED]/usr/ports/net/isc-dhcp3-server $ make display-message

  To setup dhcpd, you may have to copy /usr/local/etc/dhcpd.conf.sample
  to /usr/local/etc/dhcpd.conf for editing.

  This port installs dhcp daemon, but don't invokes dhcpd by default. If
  you want to invoke dhcpd at startup, put these lines into /etc/rc.conf.

dhcpd_enable=YES  # dhcpd enabled?
dhcpd_flags=-q# command option(s)
dhcpd_conf=/usr/local/etc/dhcpd.conf  # configuration file
dhcpd_ifaces= # ethernet interface(s)
dhcpd_withumask=022   # file creation mask

  If compiled with paranoia support (the default), the following lines
  are also supported:

dhcpd_chuser_enable=YES   # runs w/o privileges?
dhcpd_withuser=dhcpd  # user name to run as
dhcpd_withgroup=dhcpd # group name to run as
dhcpd_chroot_enable=YES   # runs chrooted?
dhcpd_devfs_enable=YES  # use devfs if available?
dhcpd_makedev_enable=YES# use MAKEDEV instead?
dhcpd_rootdir=/var/db/dhcpd   # directory to run in
dhcpd_includedir=some_dir   # directory with config-
  files to include
dhcpd_flags=-early_chroot # needs full root

  WARNING: -early_chroot requires a jail(8) like environment to work.

  WARNING: dhcpd_devfs_enable and dhcpd_makedev_enable are mutually
   exclusive
   dhcpd_makedev_enable make NO sense on FreeBSD 5.x and up!

  If compiled with jail support (the default), the following lines are
  also supported (-early_chroot and dhcpd_chroot_enable=YES are implied):

dhcpd_jail_enable=YES # runs imprisoned?
dhcpd_hostname=hostname # jail hostname
dhcpd_ipaddress=ip address  # jail ip address

  WARNING: dhcpd_rootdir needs to point to a full jail(8) environment.

  WARNING: never edit the chrooted or jailed dhcpd.conf file but
  /usr/local/etc/dhcpd.conf instead which is always copied where
  needed upon startup.

  WARNING: /usr/local/etc/rc.isc-dhcpd.conf is obsolete.  rc.conf like
  variables are still read there but should be moved /etc/rc.conf or
  /etc/rc.conf.d/dhcpd instead.  Also, the dhcpd_options variable must
  be renamed dhcpd_flags if any.


-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpuJ4kh8oKPm.pgp
Description: PGP signature


Re: Fwd: IPF (ftp - pkg_add) help requested

2007-03-04 Thread Kelly D. Grills
On Fri, Mar 02, 2007 at 09:12:31AM -0500, Don Munyak wrote:
 
 How do I set|view env for root?..., specifically FTP_PASSIVE_MODE=YES

See su(1), specifically the -l option. See the man page for whatever
shell you run as root.

 OT... Kelley, btw...Baxter is cool :) I had a Pekingese once. For
 Halloween, I shaved off all her hair except for a 2 mohawk
 head-2-tail. I'll have to find the picture to send you some day.

Yeah, he's a good pup, my daughter dressed him up for the superbowl.
I bet your peek wasn't real happy with you. g

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpnMiIhhf1x9.pgp
Description: PGP signature


Re: Fwd: IPF (ftp - pkg_add) help requested

2007-03-01 Thread Kelly D. Grills
On Thu, Mar 01, 2007 at 04:10:11PM -0500, Don Munyak wrote:
 
 My server was opening an additional session using ports  1024, which
 I was not initially allowing.  ipf was blocking outbound due to this
 rule. This is a known issue with ftp client sessions using active mode
 when behind a firewall.
 

As I hinted at in my original response, If you'd rather keep your
firewall rules tighter, pkg_add(1) says:

Note: If you wish to use passive mode ftp in such transfers, set
the variable FTP_PASSIVE_MODE to some value in your environment.

Otherwise, the more standard ACTIVE mode may be used.  If pkg_add
consistently fails to fetch a package from a site known to work,
it may be because you have a firewall that demands the usage of
passive mode ftp.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpzSYEkjLW0T.pgp
Description: PGP signature


Re: pkg_add problems

2007-02-28 Thread Kelly D. Grills
On Wed, Feb 28, 2007 at 12:02:30PM +0100, Wojciech Puchar wrote:
 
 there is no such package bash. there's only bash-someversionofbashport

Au contraire:

[EMAIL PROTECTED]/ $ pkg_add -r bash
Fetching
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.2-release/Latest/bash.tbz...
Done. pkg_add: package 'bash-3.1.17' or its older version already installed

[EMAIL PROTECTED]/ $ uname -v
FreeBSD 6.2-RELEASE #0: Sun Jan 28 15:04:56 CST 2007
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/SRV2

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpn99V5gUFSo.pgp
Description: PGP signature


Re: pkg_add problems

2007-02-27 Thread Kelly D. Grills
On Tue, Feb 27, 2007 at 02:26:30PM -0500, Don Munyak wrote:
 
 I am having trouble using pkg_add -r some package. I keep getting
 the following error.
 ---
 p0069# pkg_add -r bash
 Error: FTP Unable to get
 ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.1-release/Latest/bash.tbz:
 Network is unreachable
 pkg_add: unable to fetch
 'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.1-release/Latest/bash.tbz'
 by URL
 p0069#
 -

 I don't know if this has anything to do with it, but
 - I have rebuilt the kernel successfully
 -
 p0069# uname -a
 FreeBSD p0069.bm.local 6.1-RELEASE-p12 FreeBSD 6.1-RELEASE-p12 #0: Thu
 Feb  8 13:55:26 EST 2007
 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/WEBSERVER  i386
 
 - And there is no ports tree installed.. ie /usr/ports does not exist.
 - I can ping ftp.freebsd.org
 - I can also ftpopen ftp.freebsd.org
 
 Any thoughts on trouble shooting this would be appreciated.
 

Perhaps verbose output (-v argument) might yield a clue: pkg_add -rv some_pkg

Are you behind a firewall? You might try using passive mode ftp. See
pkg_add(1) 

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpnYSzxg8GLO.pgp
Description: PGP signature


Re: Can't install win32-codecs

2007-02-23 Thread Kelly D. Grills
On Fri, Feb 23, 2007 at 06:32:15PM -0800, Dr. Jennifer Nussbaum wrote:
 
 Im trying to get a new install going, and it wont let me install
 win32-codecs (and therefor mplayer and xine and everything i
 need to watch multimedia). Its marked as forbidden: remote
 code execution. The URL it gives just shows why it can be
 dangerous.
 
 Is there any workaround, or a way to force this? Im willing to
 take the chance and i never view quicktime websites anyway,
 and its hard not to watch movies on this new machine!
 

make NO_IGNORE=yes

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpGOW0nq4pw1.pgp
Description: PGP signature


Re: User Monitoring

2007-02-06 Thread Kelly D. Grills
On Tue, Feb 06, 2007 at 02:09:55PM +0800, David Schulz wrote:
 
 Without a doubt i will get the one or the other trying to do  
 something nasty to the Box, so my question is how to keep track of  
 what Users are doing? Using process accounting as described http:// 
 www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security- 
 accounting.html in the handbook?
 
 Can you share some easy to implement tricks to keep the worst from  
 happening to my Machine?

See the man page for WATCH(8),  watch -- snoop on another tty line

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpaXr6MzmShj.pgp
Description: PGP signature


Re: User Monitoring

2007-02-06 Thread Kelly D. Grills
On Tue, Feb 06, 2007 at 06:31:40PM -0600, Kelly D. Grills wrote:
 
 On Tue, Feb 06, 2007 at 02:09:55PM +0800, David Schulz wrote:
  
  Without a doubt i will get the one or the other trying to do  
  something nasty to the Box, so my question is how to keep track of  
  what Users are doing? Using process accounting as described http:// 
  www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security- 
  accounting.html in the handbook?
  
  Can you share some easy to implement tricks to keep the worst from  
  happening to my Machine?
 
 See the man page for WATCH(8),  watch -- snoop on another tty line
 

And be sure to let your users know that you are keeping track of them.

Sorry for the multi-reply, fingers got ahead of brain.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpuoDabjsSAC.pgp
Description: PGP signature


Re: going back in time with the ports tree

2007-01-14 Thread Kelly D. Grills
On Sun, Jan 14, 2007 at 04:48:33PM -0600, Jonathan Horne wrote:

 im trying to figure out how to go back in time on my ports tree.  im sure ive 
 seen instructions on how to do this before, but for the life of me, i cant 
 find the doc now.  i would like to get a copy of ports from right before 
 php-5.2.0 was committed.
 
 can anyone point me in the right direction?

sysutils/portdowngrade

http://www.freebsd.org/cgi/url.cgi?ports/sysutils/portdowngrade/pkg-descr

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpivcmt5hM7N.pgp
Description: PGP signature


Re: cap_mkdb login.conf.db

2006-11-13 Thread Kelly D. Grills
On Mon, Nov 13, 2006 at 03:01:17PM -0800, T. Fields wrote:
 
 So sorry to bother. But I have been looking through the extensive 
 documentation provided with freeBSD and can't find the answer, so I thought 
 I would ask for help.
 
 I am trying to set the path variable upon boot-up. I have altered the 
 /etc/login.conf  as well as the global /etc/profile but the path is being 
 set via /etc/login.conf.db so my question.
 
 When the system is installed and the installation scripts are run what is 
 the command line for
 
 cap_mkdb ?
 
 I would like to alter /etc/login.conf.db but I don't know which files other 
 than /etc/login.conf to include in the invocation of the command and I 
 don't want to muck the works.

See section 13.7 of the handbook:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/users-limiting.html

Also the man pages for login.conf and cap_mkdb:
LOGIN.CONF(5), CAP_MKDB(1)

The short answer is: cap_mkdb /etc/login.conf

-- 
Kelly D. Grills
[EMAIL PROTECTED]




pgpTalV5jxnPh.pgp
Description: PGP signature


Re: downgrade from php5.2 to php5.1

2006-11-08 Thread Kelly D. Grills
On Wed, Nov 08, 2006 at 03:36:51PM +, Marwan Sultan wrote:
 
   Im Sure many around has few problems with php5.2
   Well simple question!
   After i updated my ports tree, and installed php5 from ports,
   now I want to downgrade from php5.2 to php5.1 how to do this
   with new port installed?
   any speciall configuration that downgrade a certain port?

Have a look at /usr/ports/sysutils/portdowngrade

-- 
Kelly D. Grills
[EMAIL PROTECTED]




pgpU23ESydm0f.pgp
Description: PGP signature


Re: denying a user access from the internet

2006-11-07 Thread Kelly D. Grills
On Tue, Nov 07, 2006 at 03:54:00PM -0500, Dave wrote:
 
 Hello,
I've got a FreeBSD box that i have a user on who needs special console 
 access. I've given him access to what is required, but i do not want him to 
 be able to log in from the internet via ssh, telnet, or even a serial 
 terminal if possible. Basically if this user isn't right in front of the 
 box i don't want him accessing it. Is it possible to lock a user out to 
 this extent, i know with ssh i can do an AllowGroup option and not put him 
 in the group that would work?
 Thanks.
 Dave.

I've never personally used it, but /etc/login.access looks to be
what you're looking for. The man page is login.access(5).

-- 
Kelly D. Grills
[EMAIL PROTECTED]




pgphvOckDInJt.pgp
Description: PGP signature


Re: default umask for Apache

2006-07-09 Thread Kelly D. Grills
On Sun, Jul 09, 2006 at 01:19:47PM -0700, jekillen wrote:
 
 Hello;
 I've not had to do this on a Unix system before. But now I have Apache 
 running as nobody and
 have php scripts creating and writing to directories. The files it 
 creates have the default mask
 rw-r-r and I want to change it to rw-rw-- so I can remove the files and 
 dirs with group write permissions
 via ftp.

Could you not chmod the files / directories via your php script? See:
http://php.net/manual/en/function.chmod.php

 question
 How do you change the default mask for a user like Apache on a Unix 
 system?
 /question

I believe you can set this via envvars

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgppItvhPmZUY.pgp
Description: PGP signature


Re: force lease renewal from dhcpd

2006-05-01 Thread Kelly D. Grills
On Mon, May 01, 2006 at 09:45:57AM -0400, fbsd wrote:
 
 Is there some way to force all leases under dhcpd to perform lease
 renewal routine?


Shorten the lease time? See dhcpd.conf(5), max-lease-time  default-lease-time 
parameters.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpQfepZ9Dxqm.pgp
Description: PGP signature


Re: Mail service principles: can I have the second mailbox

2006-03-27 Thread Kelly D. Grills
On Mon, Mar 27, 2006 at 09:28:55AM +0300, User Elisej wrote:
 
 Yes, sir, I will provide any information you need.
 

I could be a maam, you never can tell ;=)

 I want to have two mailboxes with two addresses (for one account) 
 on my computer. These different mailboxes I mean to use for different sources 
 of incoming mail. So I need two real mailboxes, not two aliases 
 for one mailbox. Then I can give my different address to different senders.
 
 Although, I can make all mail going to one address and then filter incoming
 mail, I think it is a wrong way, because of superfluous action.
 

Well, there goes my plan. I'd think an alias along with a procmail recipe
to filter into separate mbox's would be a simple and effective solution.
Not sure what you mean by superfluous action.

 One mailbox I have since account creation. Its address is account name.
 The sendmail sends a mail to this address to /var/mail/account_name.
 How to make the second mailbox?
 
 I have installed FreeBSD 6.0 and Sendmail 8.13.5.
 

I run Qmail. Hopefully someone with Sendmail knowledge will chime in
and provide the assistance you need.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpElFgGNNqe6.pgp
Description: PGP signature


Re: Mail service principles: can I have the second mailbox

2006-03-26 Thread Kelly D. Grills
On Sun, Mar 26, 2006 at 04:19:21PM +0300, User Elisej wrote:
 
 Can a user have two mailboxes (and two addresses, of course)?
 

Yes.

Perhaps you could provide a bit more information?

http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-questions/x114.html

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpIlXprWCpmI.pgp
Description: PGP signature


Re: Tightening up ssh

2006-03-26 Thread Kelly D. Grills
On Sun, Mar 26, 2006 at 11:52:11AM -0800, Graham North wrote:
 
 Does this mean that there is a way to run ssh, but only allow certain users 
 to use it.   My default seems to have been that if someone has a username 
 and password they can access ssh (except root as PermitRootLogin no is 
 the default).   The ssh port seems to be the most heavily attacked one on 
 my machine and so I recently took to blocking port 22.   My preference 
 would be to enable it to only one user and give them an obscure username 
 and strong password.  Root is not currently allowed access by default in 
 the setup.
 
 Is this the approach that you alluded to above?   Can you point me to some 
 information or provide some tips.
 Thanks,  Graham/
 

See SSHD_CONFIG(5), specifically the AllowUsers keyword.

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpMMo0VvT01U.pgp
Description: PGP signature


Re: Apache

2006-03-06 Thread Kelly D. Grills
On Mon, Mar 06, 2006 at 10:09:30PM -0200, Pgold wrote:
 
 Performing sanity check on apache22 configuration:
 Syntax OK
 Starting apache22.
 
 Then, apache will run for a moment, as I can see using ps -ax | grep httpd.
 
 But, in a question of a second or two it isn't running.
 
 What else can I do?
 

Checking the error log would be a good place to start.

In order to find your log:
grep ErrorLog /path/to/httpd.conf

You may get better help on the Apache list:
http://httpd.apache.org/userslist.html

-- 
Kelly D. Grills
[EMAIL PROTECTED]





pgpNoxZ2S6VUJ.pgp
Description: PGP signature


Re: How to figure out who shutdown box

2006-03-04 Thread Kelly D. Grills
On Sat, Mar 04, 2006 at 10:24:17AM -0500, Jon Poland wrote:
 
 Hi,
   I operate a colo box running FreeBSD 6.0-SECURITY.  Yesterday the box
 shutdown and powered off.  I didn't execute shutdown or halt, and I'm the
 only user who can.  Here's what the logs tell me:
 
 /var/log/console.log:
 Mar  3 11:24:29 kmart kernel: Shutting down daemon processes:
 
 /var/log/messages:
 Mar  3 11:24:38 kmart syslogd: exiting on signal 15
 
 last: (the important lines)
 reboot   ~ Fri Mar  3 13:10
 shutdown ~ Fri Mar  3 11:24
 
 I don't see anything in any of the logs like rebooted by X, etc.
 
 I'm not exactly sure how this can happen and looking for ideas.
 

Where are you logging security messages? I believe the default is to
/var/log/security

Have a look at /etc/syslog.conf and syslog.conf(5)

You should see messages such as this in your security log:
Mar  1 15:21:38 srv1 shutdown: reboot by kdgrills:

-- 
Kelly D. Grills
[EMAIL PROTECTED]





pgpTjj9CYyMxk.pgp
Description: PGP signature


Re: How to figure out who shutdown box

2006-03-04 Thread Kelly D. Grills
On Sat, Mar 04, 2006 at 11:42:49AM -0600, Kelly D. Grills wrote:
 
 Where are you logging security messages? I believe the default is to
 /var/log/security

Sorry, meant to say auth

 
 Have a look at /etc/syslog.conf and syslog.conf(5)
 
 You should see messages such as this in your security log:

Again, auth

 Mar  1 15:21:38 srv1 shutdown: reboot by kdgrills:
 
-- 
Kelly D. Grills
[EMAIL PROTECTED]




pgprHNOHkXDZf.pgp
Description: PGP signature


cvsup6.us.freebsd.org / /sysutils/fastest_cvsup

2006-01-21 Thread Kelly D. Grills

Greetings,

Recently there was a thread regarding cvsup6.us.freebsd.org
accepting connections, and offering no content, which breaks
fastest_cvsup.

I've done a little hacking on fastest_cvsup version 0.2.9
to enable verification of the desired collections existence.

Please see attached patch

--
Kelly D. Grills
[EMAIL PROTECTED]

*** old/fastest_cvsup   Sat Jan 21 21:12:05 2006
--- new/fastest_cvsup   Sat Jan 21 21:52:31 2006
***
*** 8,13 
--- 8,34 
  
#-#
  #
  # Changes:
+ # 0.2.9.1 - [EMAIL PROTECTED], Jan, 2006:
+ #   added a -v command line argument to enable verification of the
+ #   collections existence on the server. We create a dummy cvsup
+ #   configuration with a refuse file which refuses everything,
+ #   in order to check the server. If the server is accepting
+ #   connections but doesn't carry our collection we'll get an error,
+ #   and can discard the server. This has been the case with
+ #   cvsup6.us.freebsd.org for a while now:
+ #
+ #   Connecting to cvsup6.us.freebsd.org
+ #   Connected to cvsup6.us.freebsd.org
+ #   Server software version: SNAP_16_1h
+ #   Negotiating file attribute support
+ #   Exchanging collection information
+ #   Server message: Collection ports-all release cvs is not 
available here
+ #   Establishing multiplexed-mode data connection
+ #   Running
+ #   Skipping collection ports-all/cvs
+ #   Shutting down connection to server
+ #   Finished successfully
+ #
  # 0.2.9  - added 'us' country code for USA hosts and 'tld' for top-level
  #  domain machines (can be in any country)
  # 0.2.8  - fixed the progress meter, timestamped %FREEBSD_SERVERS
***
*** 71,76 
--- 92,119 
 # in the online Handbook? (only root can do this)
  
  
#-#
+ # [EMAIL PROTECTED], Variables for verification
+ 
#-#
+ 
+ # User Configurable Variables (you can change these):
+ # Set either ports or src, not both
+ 
+ my $CVSUP_CMD = /usr/local/bin/cvsup -g -L 2;  # cvsup command line
+ my $CVSUP_BASE = /tmp/fastest_cvsup;   # directory for our dummy 
cvsup configuration
+ 
+ my $COLLECTION = ports-all;# check for the ports 
collection
+ my $PREFIX = /ports;   # ports would go here, cvsup 
won't run without it
+ my $TAG = .;   # tag for ports-* collection
+ 
+ #my $COLLECTION = src-all;  # check for the source 
collection
+ #my $PREFIX = /src; # source would go here, 
cvsup won't run without it
+ #my $TAG = RELENG_6_0;  # tag for release branch
+ 
+ 
#-#
+ # End [EMAIL PROTECTED] modifications
+ 
#-#
+ 
+ 
#-#
  # Other variables
  
  # How many FreeBSD CVSup servers has each country got? (well, not strictly
***
*** 179,184 
--- 222,228 
  
  
#-#
  # Usage() sub
+ # [EMAIL PROTECTED], added -v option
  
  sub Usage {
my $error = shift;
***
*** 189,194 
--- 233,239 
   -q   quiet mode, only outputs fastest server\n,
   -Q   very quiet mode, no progress meter\n,
   -r   uses remote server list from FreeBSD 
Handbook\n,
+  -v   verifies existence of the collection on 
server\n,
   -c aa,bb,cc  queries servers in countries aa,bb,cc\n,
  tld   queries servers in the top level domain\n,
  local queries servers set as local in the script\n,
***
*** 201,209 
  # get user supplied options
  
  # we need the ':' to store the actual values of the -c switch
  
  my %opt = ();
! getopts(hrqQc:, \%opt);
  
  # if no args given, or help page requested
  
--- 246,255 
  # get user supplied options
  
  # we need the ':' to store the actual values of the -c switch
+ # [EMAIL PROTECTED], added -v option
  
  my %opt = ();
! getopts(hrqQvc:, \%opt);
  
  # if no args given, or help page requested
  
***
*** 222,227 
--- 268,284 
  my $REMOTE_SERVERLIST = 0;# default is no, use internal list
  if ( $opt{'r'} ) { $REMOTE_SERVERLIST = 1; }
  
+ 
#-#
+ # [EMAIL PROTECTED], check for verification argument

Re: NFS connection dropping

2005-10-17 Thread Kelly D. Grills
On Mon, Oct 17, 2005 at 01:53:25AM -0700, Alex Teslik wrote:
 
 All power-saving features are disabled on this box as well - it is a server. I
 then run rsync on the FBSD box to backup a local disk to the mounted nfs disk.
 Everything works great for about 5-10 minutes, and then the rsync freezes and
 issues the message:
 
 nfs server 192.168.4.200:/Volumes/BackupDrive: not responding

Just a stab in the dark, see section 24.3.5 of the handbook:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-nfs.html

The -r / -w options cured my NFS problems.

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpIfiFbnfk2u.pgp
Description: PGP signature


Re: Setting up routes correctly for FBSD box to access WAN

2005-09-18 Thread Kelly D. Grills
On Sun, Sep 18, 2005 at 11:24:36AM -0700, Garrett Cooper wrote:

 So my question is, how do I properly set the value for gateway  
 for the FBSD machine or use the route command to create a static  
 route for all IP values not 192.168.1.0/20?

You need set the default router in /etc/rc.conf :

defaultrouter=NO  # Set to default gateway (or NO).

See rc.conf(5)

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpIadPkkeq3j.pgp
Description: PGP signature


Re: Command to trace a route?

2005-08-30 Thread Kelly D. Grills
On Fri, Aug 26, 2005 at 04:50:43PM -0500, Efren Bravo wrote:
 Hi, 
  
  What's the name of the command to trace a route to a host, on windows 
 is tracert. 
  
  Thanks 
  

As others have pointed out it's traceroute.
apropos may help the next time you're looking for a command:

$ apropos route | grep trace
traceroute(8)- print the route packets take to network host
traceroute6(8)   - print the route IPv6 packets will take to a network 
node

The you can:

$ man 8 traceroute

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpe3M6e5adta.pgp
Description: PGP signature


Re: Unstable NFS mount from shared Solaris filesystem?

2005-07-13 Thread Kelly D. Grills
On Wed, Jul 13, 2005 at 10:33:15AM -0400, Louis LeBlanc wrote:
 
 I know this has been asked before, but I can't find the answer through
 searches.  I don't remember if this was a FreeBSD or a Solaris related
 issue, either, so I'm sorry of I'm getting too far OT.
 
 I'm trying to mount an NFS share from a Solaris 10 (x86) system to a
 FreeBSD (5.3-RELEASE-p4) system.  For some reason, working in the NFS
 filesystem on the FreeBSD system meets with annoyingly frequent
 lockups of the terminal, particularly when editing files or executing
 df or du.
 
 If there's a configuration somewhere that fixes this, I can't find it.
 
 My /etc/fstab entry on the FreeBSD box is:
 sol:/export/home  /sol/home  nfs  rw,noauto,bg,soft 0 0
 
 /etc/dfs/dfstab on the Solaris box contains:
 share  -F nfs  -o rw  -d home dirs  /export/home
 
 and /etc/dfs/sharetab contains:
 /export/home-   nfs rw  home dirs
 
 I don't think I'm missing anything, but I'm sure NFS isn't supposed to
 be this unstable either.
 
 Any suggestions would be welcome.

See FAQ 12.12 and section 23.3.5 of the handbook.
The -r=1024 parameter solved my problems.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpNH9IXRR8U5.pgp
Description: PGP signature


Re: Dynamic Hosting Recommendation

2005-05-28 Thread Kelly D. Grills
On Sat, May 28, 2005 at 08:33:29PM -0400, Gerard Seibert wrote:
 
 My cable company wants $25. a month just for a static IP address. 
 Personally, I think that is ridiculous.
 
 I have been looking for a solution. One I found was TZO, 
  http://www.tzo.com . I was wondering if anyone had any experience with 
 them?
 
 If someone can recommend another service, I would be glad to look into it.

I've been very satisfied with http://zoneedit.com for several years now.

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpKUTUj20hWw.pgp
Description: PGP signature


Re: NFS freeze

2005-05-12 Thread Kelly D. Grills
On Thu, May 12, 2005 at 09:21:39PM +0200, Pietro Cerutti wrote:

 I have a problem with a NFS exports: the client freezes while transfering 
 large amount of data.

snippage

Have a look at section 23.3.5 of the handbook. -r=1024 cured my
problems.

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpaKQeWryObu.pgp
Description: PGP signature


Re: NFS freeze

2005-05-12 Thread Kelly D. Grills
On Fri, May 13, 2005 at 02:52:52AM +0200, Pietro Cerutti wrote:
 
 Kelly D. Grills wrote:
 
 Have a look at section 23.3.5 of the handbook. -r=1024 cured my
 problems.
 
 
 Thank you, this solves the problem when mounting manually.
 What if I used amd to automatically mount the NFS share?
 I didn't find how to set mount specific options in amd.
 

Well, I've no experience with amd. I took a quick look at amd.conf(5),
the selectors_on_default parameter looks like it may be relevant.

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpCijlvHkuza.pgp
Description: PGP signature


Re: Syncing 3 Freebsd servers' accounts Question

2005-01-27 Thread Kelly D. Grills
On Thu, Jan 27, 2005 at 02:23:53PM -0500, Jason Lieurance wrote:
 
 I have 3 freebsd servers(4.7,4.9,5.3) and would like to have 1 set of 
 user/group
 accounts instead of 3. I don't know very much about NIS or LDAP which come up 
 when I
 researched the topic. So what is the easiest, cheapest(free), and best way to
 accomplish this???
 

NIS works well on my home network. As for easiest / best, you'll
have to evaluate your particular needs. Some links to NIS docs:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-nis.html
yp(8)
ypserv(8)

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpT4V44yrjz6.pgp
Description: PGP signature