Re: Gutman Method on Empty Space

2008-01-17 Thread Marc Silver
Hi there,

Check out /usr/ports/security/wipe/  - It should meet your requirements.

Cheers,
Marc

On Thu, Jan 17, 2008 at 12:10:02AM -0800, Jason C. Wells wrote:
 Can anyone recommend a utility for the secure overwriting of unused
 disc space?  I am a satisfied customer of Eraser for Windows.  I'm
 looking for the same thing for FreeBSD.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Gutman Method on Empty Space

2008-01-17 Thread Marc Silver
Hi there,

On Thu, Jan 17, 2008 at 09:22:33AM +0100, Peter Boosten wrote:
 Or always 'rm -P' :-)

Nice... never knew about this.  

That said, this won't satisfy the Gutmann requirement as far as I
understand it and overwriting a file three times is not considered a
true secure wipe of data.  This data would still be theoretically
recoverable.

Cheers,
Marc
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Gutman Method on Empty Space

2008-01-17 Thread Marc Silver
Hi there,

On Thu, Jan 17, 2008 at 09:43:46AM +0100, Wojciech Puchar wrote:
 how? even single write is enough

Not according to the paper that Gutmann wrote:

http://www.usenix.org/publications/library/proceedings/sec96/full_papers/gutmann/

In short, he says that if you know how the data itself was overwritten
it can be recovered.  If I recall, the DoD standard for the deletion of
data is to overwrite it 3 times.  

Obviously it all comes down to how important the data is that you're
removing, but a single write is not enough if the data needs to be
disposed of 'securely'.

Cheers,
Marc
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Switching username using SFTP

2008-01-13 Thread Marc Silver
Hi there,

You can simply enter a command such as:

$ sftp [EMAIL PROTECTED]

Cheers,
Marc

On Sun, Jan 13, 2008 at 09:38:21AM -0500, [EMAIL PROTECTED] wrote:
 
 When I ssh into a system which has different login name from the
 system I'm on I use this syntax: ssh -l  host.domain.com.   
 
 How does one do this with SFTP on the command line?  The -l switch
 doesn't work.  The man pages on SFTP makes no mention of this.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Unable to unmount idle filesystem on 6.2

2008-01-11 Thread Marc Silver
Hi there,

Strange problem.  The only thing I could possibly think of is to try and
install lsof from the ports tree and see if that can identify what may
be using this particular mount.  

Short of that, dropping to single user mode/rebooting may be your only
other option as far as I am aware.

Cheers,
Marc

On Thu, Jan 10, 2008 at 11:18:46PM -0800, Darren Pilgrim wrote:
 I'm unable to unmount an idle filesystem (or even drop it to
 read-only):
 
 # mount
 /dev/da0s1a on / (ufs, local, noatime)
 devfs on /dev (devfs, local)
 /dev/da0s1d on /var (ufs, local, noatime, soft-updates)
 /dev/da0s1e on /usr (ufs, local, noatime, soft-updates)
 /dev/da0s1fp1 on /usr/obj (ufs, asynchronous, local, noatime)
 /dev/da0s1fp2 on /usr/ports (ufs, local, soft-updates)
 /dev/da0s1fp3 on /usr/src (ufs, local, soft-updates)
 /dev/da0s2d on /data (ufs, local, noatime, soft-updates)
 
 # fstat -f /usr/ports
 USER CMD  PID   FD MOUNT  INUM MODE SZ|DV R/W
 
 # umount /usr/ports
 umount: unmount of /usr/ports failed: Device busy
 
 # umount -f /usr/ports
 umount: unmount of /usr/ports failed: Device busy
 
 # mount -o ro /usr/ports
 mount: /dev/da0s1fp2: Operation not permitted
 
 # uname -r
 6.2-RELEASE-p8
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
Light up the Darkness.
  - Bob Marley
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Simplifying FreeBSD Installation

2004-03-08 Thread Marc Silver
Hi there,

I understand what you're getting at, but I think that you may be overlooking
one important fact:  FreeBSD is developed by people with a passion for the
operating system, who want nothing more than to make it the best they can.
They volunteer their time to the project, foregoing financial renumeration
and accolades, simply because they see potential in a project grown from the
ground up by people who love it.

You compare FreeBSD to Microsoft, but they're fundamentally different
operating systems.  I agree with you that perhaps the installation procedure
should be more user friendly, but there are other areas where FreeBSD is
MUCH stronger than Windows.  I have yet to see a Windows machine outperform
any of my FreeBSD servers under load...

That said, if you believe that FreeBSD needs work, why not get involved and
help to make it better?  I have no doubt that there are other people
interested in improving the same areas as you, so why not lend a hand and
improve FreeBSD, so that everyone can benefit?  :)

That's _my_ 2c,
Marc 

 -Original Message-
 From: Gerard Seibert [mailto:[EMAIL PROTECTED] 
 Sent: Monday, March 08, 2004 3:05 PM
 To: freebsd-questions
 Subject: Simplifying FreeBSD Installation
 
 I have read a few posting regarding the FreeBSD installation 
 procedure. I thought that I might as well weigh in with my 
 own comments since I am fairly new to FreBSD, although I have 
 been using computers since 1984 (good old DOS).
 
 1) The installation procedure is not as polished as say that 
 of WinXP, but that is to be expected. It has been pointed out 
 by others that while the routine does offer many useful 
 configuration options, it fail to fully explain them to the 
 user. The often-stated remark Read the Directions or words 
 to that effect are not truly germane to this issue.
 The average user simply wants to plunk a disc into his 
 computer and install an OS with minimum input.
 
 2) While network support is robust, it is not easily 
 configured within the OS. There are few if any wizards to 
 guide the user. I have a simple home networking system. Three 
 computers - 2 = WinXP  1 = FreeBSD
 5.2.1 - up and running. They are connected via a hub and then 
 to a router connected to a cable modem. It is not the most 
 modern setup I agree, but it is functional. Just to get 
 FreeBSD to do a correct DHCP took a custom script for the 
 dhclient.conf file that someone was kind enough to give me.
 Then getting the three computers to actually network together 
 is another story. Say what you want about networking, but 
 since MS is the most used OS available today, it would 
 behoove FreeBSD to have in place a system to routinely 
 network with MS and not have to install additional software 
 and then be forced to reconfigure all of the computers to 
 work with it. I can attest to the fact that most individuals 
 do not have the time or inclination to go about that chore.
 
 3) From what I have been able to deduce, the packages 
 available from FreeBSD are not as current as the ports 
 collection. Downloading something like Open Office or the 
 complete KDE 3.2 suite and then installing it from ports is 
 not something most users would envy. It is a time consuming 
 and possible tedious venture. The packages should be kept as 
 current as the ports.
 
 4) The installation procedure should offer the user a method 
 of starting KDE, Gnome or whatever automatically upon 
 boot-up. Having to do it all manually, whether adding the 
 commands to the proper files or simply using the command line 
 is not good enough. The average user has little time or 
 patience to read through the XFree86 literature in addition 
 to the KDE or Gnome paraphernalia then go through the 
 configuration process which requires him/her to know specific 
 monitor, and video card settings, etc to get the system up 
 and running. This does not even include the additional effort 
 of getting a 'wheel mouse' or 'optical mouse' properly configured.
 As we are all too well aware of, such problems rarely occur 
 in the Microsoft OS. In any case, at least the latest versions.
 
 5) Most non-Microsoft operating systems are three to five 
 years, if not more, behind in PNP technology. It is something 
 that all non Microsoft OS vendors should place greater effort 
 on improving.
 
 6) Greater effort should be put into getting the operating 
 systems more fully aware of various ACPI procedures used by 
 various vendors. I have seen when FreeBSD fails to use ACPI 
 on several models of Compaq computers even though MS has no 
 such deficiency. The often-stated remark that MS is simply 
 working around a bug in the code is a cop-out by the 
 developers. If MS can work around a bug, so can other vendors.
 
 7) The bottom line is that if FreeBSD or any other OS vendor 
 wants to become truly mainline, they have to get their 
 products to work on the same platform and perform as easily 
 as Microsoft's operating system does. 

RE: re:make world

2004-02-25 Thread Marc Silver
Tell IPFW that you want to allow packets.

You'll probably want something like:

 # ipfw add 00100 allow ip from any to any

This will allow ALL packets, so it's not really acting as a well
configured firewall, but it should fix your immediate problem.  Check
out rc.firewall and rc.conf for info on choosing something that may be
better suited to your needs, and take a look at the BSD handbook for
more information about firewalling in general.

Cheers,
Marc

 -Original Message-
 From: RYAN vAN GINNEKEN [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, February 25, 2004 12:20 PM
 To: [EMAIL PROTECTED]
 Subject: re:re:make world
 
 Firstly thanks for your reply, contents of /etc/resolv.conf 
 are as follows.
 
 search computerking.ca
 nameserver 192.168.0.202
 nameserver 24.71.223.144
 nameserver 24.71.223.144
 
  If i am not mistaken my server (192.168.0.202 or 
 computerking.ca) that runs FreeBSD as well provides that 
 information through the dhcpd?  I do not have named running 
 on that machine but instead on the fore mentioned server.  
 ipfw show outputs the following line what the ???
 
 65535  0  0  deny ip from any to any
 
 that doesn't look right does it???
 can you help me fix this???
 
 ___
 [EMAIL PROTECTED] mailing list 
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
 


smime.p7s
Description: S/MIME cryptographic signature


RE: Mail on FreeBSD

2004-02-23 Thread Marc Silver
Hi,

You should take a look at IMP (http://www.horde.org/imp/) or
Squirrelmail, both of which are webmail solutions, and both can be found
in the ports tree.  They do however, require either a POP3 or IMAP
server, and a server with PHP and a few other minor dependencies.

Alternatively, you could try neomail, which can access local mailspool
files using just perl.

Good luck.

Cheers,
Marc

 -Original Message-
 From: somatic [mailto:[EMAIL PROTECTED] 
 Sent: Monday, February 23, 2004 1:51 PM
 To: FreeBSD-questions
 Subject: Mail on FreeBSD
 
 Hi,
 I was wondering if there was a web based system to check mail 
 on a freebsd system.I wanted to setup a mail system for all 
 users on the intranet.I have successfully installed sendmail 
 and can send and receive mail on the system.(using pine).But 
 how do i go about setting up a system for external lan users 
 without them telnetting into the system?.Would i need a pop3 server?
 
 Thanks,
 akshay.
 
 ___
 [EMAIL PROTECTED] mailing list 
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
 


smime.p7s
Description: S/MIME cryptographic signature


Re: pkgs managing

2004-02-13 Thread Marc Silver
On Fri, Feb 13, 2004 at 03:23:50PM +0300, flux wrote:
 How do I know what package does the file belong?

If you have portupgrade installed (/usr/ports/sysutils/portupgrade) you
can use the pkg_which(1) command.  

For example:

14:32 (5)  pkg_which /usr/local/bin/animate 
ImageMagick-5.5.7.15_1

Cheers,
Marc
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: RSYNC Question; date/time restriction

2003-02-05 Thread Marc Silver
Hi there,

On Tue, Feb 04, 2003 at 11:43:39PM +0100, Boris K?ster wrote:
 I have setup a little mirror of about 15 gig about linux/freebsd
 software and my problem is that I only want to get the files dated
 after january 2003 with rsync after getting the whole bunch of
 software.
 
 Is this possible?

I believe that the find(1) command can do what you want by using the
'mtime' flag.  You can also use the 'delete' flag once you're sure it's
getting the right files directories, etc.

Something like:

'/usr/bin/find /your/mirror/dir -mtime +15 -delete'

Would delete all files that are older than fifteen days iirc (this is
all from memory)

Just 'man find' and that should give you what you want.

Good luck,
Marc

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: removing all users

2003-02-05 Thread Marc Silver
Hi there,

On Tue, Feb 04, 2003 at 02:31:55PM -0900, Jon Reynolds wrote:
 Probably a stupid question but I have a lot of users on a freebsd
 box and I want to remove them all at once. Is there any problem with
 just issueing this command in the /home directory: 'rm -i *'. Or is
 there a better way to do this?
 
 Thanks for any suggestions,

You could try something like:

cd /home/
for i in * ; do /usr/sbin/rmuser -y $i ; done

That should do what you're asking for, and will do a lot more than just
remove the directories.  Man rmuser(8) for more info on what it does if
you're interested.  :)

- Marc

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Buildworld Failing

2003-02-05 Thread Marc Silver
Kris,

On Tue, Feb 04, 2003 at 10:20:04AM -0800, Kris Kennaway wrote:
 You actually want 'make cleandir'

What is the technical difference between 'make clean' and 'make
cleandir'...?  Perhaps you can clear this up for me?

- Marc

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Buildworld Failing

2003-02-04 Thread Marc Silver
Hi there,

Did you clean out /usr/obj before you started the 'make buildworld'??
If you have previously compiled buildworld, then this is something you
should do.  To do this:

cd /usr/obj
chflags -R noschg *
rm -fr /usr/obj/usr

Then, 'make clean' in /usr/src and start again.  Hopefully that'll fix
it.

- Marc

On Tue, Feb 04, 2003 at 12:37:24AM -0500, Gerard Samuel wrote:
 I have a FreeBSD 4.7 p2 box, and Im trying to upgrade to p3.
 I just did a fresh cvsup, and cd to /usr/src
 Execute make buildworld, and its failing at -
 
 cc -O -pipe  
 -DINFODIR=\/usr/share/info:/usr/local/info:/usr/X11R6/info:.\ 
 -DHAVE_CONFIG_H -DLOCALEDIR=\/usr/share/locale\  
 -I/usr/src/gnu/usr.bin/texinfo/info/../../../../contrib/texinfo 
 -I/usr/src/gnu/usr.bin/texinfo/info/../../../../contrib/texinfo/lib
 -D__FBSDID=__RCSID  -static -o info dir.o display.o doc.o dribble.o 
 echo-area.o filesys.o footnotes.o gc.o indices.o info-utils.o info.o 
 infodoc.o infomap.o m-x.o man.o nodemenu.o nodes.o search.o session.o 
 signals.o terminal.o tilde.o variables.o window.o -ltermcap 
 /usr/obj/usr/src/i386/usr/src/gnu/usr.bin/texinfo/info/../libtxi/libtxi.a
 /usr/libexec/elf/ld: cannot find -ltermcap
 *** Error code 1
 
 Stop in /usr/src/gnu/usr.bin/texinfo/info.
 *** Error code 1
 
 Stop in /usr/src/gnu/usr.bin/texinfo.
 *** Error code 1
 
 Stop in /usr/src.
 *** Error code 1
 
 Stop in /usr/src.
 *** Error code 1
 
 Stop in /usr/src.
 gatekeeper#
 
 
 Any ideas what I can do to recitify this problem.
 Thanks.
 
 -- 
 Gerard Samuel
 http://www.trini0.org:81/
 http://dev.trini0.org:81/

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Upgrading kde with ports

2002-12-03 Thread Marc Silver
Hi there,

You could use /usr/ports/sysytils/portupgrade to do this... and as far
as I know it can use packages instead of source... :)

Good luck,
Marc

On Tue, Dec 03, 2002 at 05:42:08PM +1030, Ian Moore wrote:
 If I want to upgrade kde 3.0.3 to 3.0.5 using the packages, rather
 than compiling from ports, what is the best way to do it?  I've
 cvsup'ed my ports tree last night and downloaded all the packages from
 ftp.kde Is there some way to upgrade to the new packages and all their
 dependencies in the same way that the ports system would upgrade
 dependencies automatically?

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: PostNuke running slow on FreeBSD

2002-09-26 Thread Marc Silver

Hi there,

Out of interest, why are you using IPv6 support?  Are you actually using
it?  I've personally had no experience with this, but perhaps that's the
problem?

A few things I would check:

1)  See what the value for HostnameLookups is in httpd.conf -- I would
suggest setting this to Off, as leaving it on can cause issues if
your DNS server cannot resolve fast enough/at all.  Does
/usr/local/sbin/apachectl configtest show anything odd?

2)  Try running a tcpdump to see if traffic is actually flowing
freely... who knows, maybe you'll notice something odd.

3)  What's the httpd process doing when it's supposed to be serving this
page?  Is something using lots of CPU/RAM while you're waiting for
the page to load?  Perhaps look at using truss to find out?

4)  Have you looked at MySQL during this time?  Try outputting MySQL's
output/queries to a log file (--with-log=/tmp/mysql.log for eg iirc)
and see what's going on there.  'show status' within MySQL can
sometimes also provide good information.

Hope this helps in some way.
- Marc

On Thu, Sep 26, 2002 at 12:59:18PM +0200, Janine C. Buorditez wrote:
 Hi.
 
 I'm running PostNuke 0.72, Apache+IPv6 1.3.26, MySQL 3.23.49 and
 mod_php4 4.2.3.
 
 My machine is a Pentium 120 with 16 MB RAM, so I don't expect much
 from it.
 
 However I would expect it to take less than 15-20 minutes to serve me
 a website, in this case PostNuke (http://www.terrabionic.com/nma). I
 do not know what it is, nor does the PostNuke community.
 
 The installation went fair and fast enough. Once it was complete and I
 wanted to access it, I had to wait 16 minutes for just the topic to
 appear.
 
 
  tail /var/log/httpd-error.log

[snip]

 I haven't done much to configure Apache, MySQL or PHP. That should
 result in this should it?
 
 Thanks
 
 --janine

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Connecting to mysqld

2002-09-26 Thread Marc Silver

Hi there,

On Thu, Sep 26, 2002 at 03:15:28PM +0200, Carl-Johan Kihlbom wrote:
 It worked when i specified the host, as in: GRANT ALL ON *.* to 
 kihlbom@localhost. So now the user kihlbom can connect from localhost. 
 But I would prefer it if that user could connect from any host. How do 
 I do that?

This is a bit risky from a security standpoint, but you could do this
like so (for eg):

grant select on dbname.* to username@% identified by password;

OR

grant select on dbname.* to username@%.myisp.net identified by password;

Hope this helps,
Marc

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: port scanner found my SMTP / SSH is up and I didn't put them there!!!!

2002-07-24 Thread Marc Silver

Hi there,

On Wed, Jul 24, 2002 at 05:46:25AM -0600, Grant Cooper wrote:
 I used a port scanner on my server just to check things out. I wasn't
 expecting this. Port 22 (ssh) and port (25) SMTP are up. I looked in
 /etc/inetd.conf and SMTP is comented out.

SMTP is not controlled via /etc/inetd.conf.  See /etc/rc.conf (and
/etc/defaults/rc.conf) for more information on how to disable this.  You
can also disable ssh via this method.

 I created a webmailer and sure enough, all my e-mail was recieved but
 not sent out. If this isn't a default set up i've been compramised. :(
 I don't even know how to use ssh yet. The only reason I noticed this
 is because I was setting up my firewall using IPFW.

These services usually run by default on newly installed FreeBSD
machines.  Did you specifically disable them, or is this a newly
installed machine which you've now noticed has open ports?  :)  If it's
just a new install you have nothing to worry about, since these run by
default on most installations.

- Marc

-- 
Marc Silver - Systems Developer
http://www.easynet.net/ Phone: +44 20 7032 2064

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: MySQL Installation

2002-07-22 Thread Marc Silver

Hi there,

You can install this with ease using the FreeBSD ports tree.

Simply cd into /usr/ports/databases/mysql323-server 

and type make install  

that'll install it all for you... :)  Good luck.

You'll need to consult the MySQL documentation for information on
adding/creating databases etc, but this will install the actual server
binaries etc for you.

- Marc

On Mon, Jul 22, 2002 at 11:28:37AM -0400, MET wrote:
 I was wondering if someone could be so kind as to write up directions
 for installing MySQL that makes sense.  I've read all of the
 documentation from their site that I can handle, and can take no more.
 Simply put I'm a Unix newbie, and their directions are definitely for
 someone with more knowledge than I.  I've just installed FreeBSD 4.6,
 clean install, without any GUI interface, CLI strictly.  The purpose of
 MySQL is for nothing more than a mere web database (I've been doing PHP
 + MySQL for years and figured I'd give server technology a try).
  
 Thank yous to the daring.
  
  
 - Matthew Metnetsky

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message