Intel 2U server 4GB RAM showing only 3GB

2005-09-28 Thread Nelis Lamprecht
Hi,

I have a new dual Xeon Intel 2U server which I'm configuring with
FreeBSD 5.4 and I can't get it to see more than 3GB RAM. If I try use
the MAXMEM=(4096*1024) option it fails to boot up and just resets
itself. Do I need to use the PAE option ? ..I wouldn't think so as
this is meant for >4GB.

Any suggestions would be appreciated.

Thanks.

Regards,
Nelis


dmesg.boot
Description: Binary data
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: i can't connect remote to my mysql server

2005-08-18 Thread Nelis Lamprecht
On 8/18/05, vladone <[EMAIL PROTECTED]> wrote:
> I have instaled mysql server succcesfull and started. I set root
> password, i can login to my server from console but i can't login
> remote (i use Mysql Control Center for win, for quickly management).
> I receive this error: "host 192.168.100.4 is not allowed to connect to
> this Mysql server"
> I dont know why, server is up and running.

> 
> Another question is about config files. I dont know where is config
> file for mysql on freebsd. In linux exist mysql.cnf but here ... i
> dont see anything.
> 

Sample config files can be found in /usr/local/share/mysql. MySQL will
run fine with it's default settings but depending on your requirements
you may need to change them. You can copy one of the suitable sample
files to /var/db/mysql/my.cnf and change it according to your
requirements. You might also want to look at the phpMyAdmin port
/usr/ports/databases/phpmyadmin for a web gui front-end to MySQL where
you can add users and assign permissions with a click of a button.
Otherwise you'll have to do it manually as a previous post mentioned.

Cheers,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: problem when starting mysql

2005-08-18 Thread Nelis Lamprecht
On 8/18/05, vladone <[EMAIL PROTECTED]> wrote:
> Sorry. Resolved. I dont have right owner for /var/db/mysql
> 

If you used the script that the port installed in /usr/local/etc/rc.d
to start mysql you wouldn't have had any problems. The startup script
would have run mysql_install_db and set the correct permissions. To
use the script(which starts up mysql on boot) add mysql_enable="YES"
to /etc/rc.conf

Cheers,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: undelete in FreeBSD?

2005-07-21 Thread Nelis Lamprecht
On 7/21/05, Xu Qiang <[EMAIL PROTECTED]> wrote:
> Hi, all:
> 
> I mis-deleted /usr/local/bin directory in my FreeBSD. How can I restore it?
> 

There isn't a way to restore unless you have a backup. However, most
of the binary files in /usr/local/bin are from packages/ports you have
installed on your system. So you may be able to get away with using
portupgrade(/usr/ports/sysutils/portupgrade) to re-install those
packages and therefore "restoring" some if not all of /usr/local/bin.
Do a portupgrade -f -a which forces portupgrade to re-install all
packages/ports you have currently installed.

Good luck.

Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Continuation of support for FreeBSD 4.x ?

2005-07-18 Thread Nelis Lamprecht
Greetings all,

Could somebody please clarify for me what will happen to FreeBSD 4.x
support with regards to patches and or security updates in the future
? I've heard that when version 6 becomes RELEASE there will be no more
security updates to version 4.x, is this true ?

I work at a University where we have approximately 30 x FreeBSD
servers of which half run 4.x and are used for routing IPX and
connecting to Netware shares, running various Netware related
applications etc so the above is of importance to me. FreeBSD 5.x was
slow to adopt IPX support and it has never been stable enough to use
in a production enviroment.

Thanks for your reply.

Regards,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: using -t option with unix sort ?

2005-07-14 Thread Nelis Lamprecht
On 7/14/05, Nelis Lamprecht <[EMAIL PROTECTED]> wrote:
> On 7/14/05, Daniel Malaby <[EMAIL PROTECTED]> wrote:
> > Hi All,
> >
> > I am trying to sort a tab delimited file with sort. The problem I am
> > having is with the -t option. I do not know how to pass a tab.
> 
> 
> 
> > sort -t \t
> 
> 
> 
> >
> > Any suggestions would be much appreciated.
> 
> remove the space between -t and \t and it should work

actually scratch that, it works either way. can you give a sample of the data ?

Regards,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: using -t option with unix sort ?

2005-07-14 Thread Nelis Lamprecht
On 7/14/05, Daniel Malaby <[EMAIL PROTECTED]> wrote:
> Hi All,
> 
> I am trying to sort a tab delimited file with sort. The problem I am
> having is with the -t option. I do not know how to pass a tab.



> sort -t \t



> 
> Any suggestions would be much appreciated.

remove the space between -t and \t and it should work

Regards,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: why CDROM operations cause system to be slow and HD operations do not

2005-07-13 Thread Nelis Lamprecht
On 7/13/05, Yuri <[EMAIL PROTECTED]> wrote:
> When I read something from CDROM my system gets visibly slow and HD
> reads/writes do not have the same effect.
> 
> I think they both should have similar effect on system performance since
> multiple requests should just wait till completion interrupt and other
> processes shouldn't be affected.
> 

Is the CDROM attached to the same cable as your hard drive ? If so try
putting it on it's own seperate cable using your secondary channel and
see if that makes a difference.

Regards,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Port upgrade error

2005-07-13 Thread Nelis Lamprecht
On 7/13/05, Beecher Rintoul <[EMAIL PROTECTED]> wrote:
> While trying to update phpMyAdmin I get the following error:


> ===>Verifying install for /usr/local/lib/php/20041030/mysqli.so in
> /usr/ports/databases/php5-mysqli
> ===>  php5-mysqli-5.0.4_2 Doesn't work with MySQL version : 50
> (Doesn't support MySQL 323 40 50).
> *** Error code 1


> 
> I have upgraded php and tried building that extension separately. No
> joy. Anyone have a suggestion?
> 

Either remove php5-mysqli from /var/db/ports/phpMyAdmin/options or run
MySQL 4.1 Server.

Regards,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Who can help me with ISO's

2005-07-11 Thread Nelis Lamprecht
On 7/11/05, Gavin McDougall <[EMAIL PROTECTED]> wrote:
> Hi there,
> 
> I am based in Johannesburg, South Africa and would like to know if there
> is anyone lurking in this list that could help me with making copies of
> the FreeBSD 5.4 ISO's.
> 
> We suffer serious telecoms (bandwidth) disabilities in this country so
> its a bit of a mission downloading these files.
> 

Hi Gavin,

Checkout http://www.freedomtoaster.org/?q=node/21
You should be able to take a couple of CDR's over and burn your own.

Regards,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD 5 - What Options for SMP Kernel?

2005-07-10 Thread Nelis Lamprecht
On 7/11/05, Drew Tomlinson <[EMAIL PROTECTED]> wrote:
> I just built my first 5.4-RELEASE system.  I want a SMP kernel.  The
> GENERIC kernel conf file contains this line:
> 
> device  apic# I/O apic
> 
> According to NOTES, this is all that's required to build an SMP kernel.

I don't see any mention of "this is all that's required" ?

> However my dmesg does not indicate that both processors are being used.
> In version 4, these two lines were required:
> 
> optionsSMP # Symmetric MultiProcessor Kernel
> optionsAPIC_IO # Symmetric (APIC) I/O
> 
> I've searched Google but haven't found any definitive answers.  Exactly
> what lines do I need in my kernel conf and how can I verify both
> processors are being used?

If you look in the usual place /usr/src/sys/i386/conf you will see a
SMP file that includes the option SMP for the default SMP enabled
GENERIC kernel. It would make sense to put that option along with apic
in your custom SMP kernel.

To verify after rebooting do a 'dmesg |grep CPU' and it should show
something along the lines of:

CPU: Intel(R) Xeon(TM) CPU 3.06GHz (3056.82-MHz 686-class CPU)
  Hyperthreading: 2 logical CPUs
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs

Regards,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Procedure for migrating user accounts to new system ?

2005-07-06 Thread Nelis Lamprecht
To answer my own posting. Simply copy(keeping correct permissions)
/etc/passwd, /etc/master.passwd and /etc/group to the new system
making sure you have a backup of the original if anything goes wrong.
Then run pwd_mkdb -p /etc/passwd which will update /etc/pwd.db,
spwd.db. I then rsync'ed all home directories and all is well.

Nelis

On 7/5/05, Nelis Lamprecht <[EMAIL PROTECTED]> wrote:
> Hi,
> 
> What is the correct procedure to follow for migrating user accounts
> from one FreeBSD 4.x system to a new FreeBSD 4.x system ? We're
> sticking to 4.x due to legacy issues(Netware) in case I get asked.
> Didn't see answer to this in the FAQ's or Handbook and google answers
> seem sketchy.
> 
> Thanks.
> 
> Nelis
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Procedure for migrating user accounts to new system ?

2005-07-05 Thread Nelis Lamprecht
On 7/5/05, Antony Mawer <[EMAIL PROTECTED]> wrote:
> On 6/07/2005 12:26 AM, Nelis Lamprecht wrote:
> > Hi,
> >
> > What is the correct procedure to follow for migrating user accounts
> > from one FreeBSD 4.x system to a new FreeBSD 4.x system ? We're
> > sticking to 4.x due to legacy issues(Netware) in case I get asked.
> > Didn't see answer to this in the FAQ's or Handbook and google answers
> > seem sketchy.
> 
> Hi there,
> 
> I noticed you mentioned "legacy issues - Netware" as your reason for
> sticking with 4.x. Do you have any more information on why it's
> necessary to stick with 4.x for this? We currently run a large number of
> production systems on 4.x and rely heavily on Netware support; if it's
> no longer functional in FreeBSD 5.x/6.x then that's a serious
> show-stopper for us!
> 
Last time I tried using NWFS, NCP and friends on FreeBSD 5.x it didn't
work. It was a known problem but after doing some googling I came
across this:

http://lists.freebsd.org/pipermail/freebsd-current/2005-January/044838.html

Unfortunately I need to know that it WILL work and not maybe. When I
have time I will do some tests with FreeBSD 5.x again. Also, even if
it did work I doubt it would be stable enough yet to put in a
production enviroment.

Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Procedure for migrating user accounts to new system ?

2005-07-05 Thread Nelis Lamprecht
On 05 Jul 2005 16:44:02 -0400, Lowell Gilbert
<[EMAIL PROTECTED]> wrote:
> Nelis Lamprecht <[EMAIL PROTECTED]> writes:
> 
> > What is the correct procedure to follow for migrating user accounts
> > from one FreeBSD 4.x system to a new FreeBSD 4.x system ? We're
> > sticking to 4.x due to legacy issues(Netware) in case I get asked.
> > Didn't see answer to this in the FAQ's or Handbook and google answers
> > seem sketchy.
> 
> The FAQ entry titled "How do I move my system over to my huge new
> disk?" should be apropos.
> 

Unfortunately it doesn't. I specifically said "user accounts" because
that's the only thing I want to move over to the new system. Using
dump and restore wouldn't be applicable in this scenario as many
things in the file systems are different. I was thinking more along
the lines of copying over the password files and using pwd_mkdb to
rebuild the db's but wasn't entirely sure about the whole process. For
the home directories I'm just using rsync to copy over the data to the
new system.

Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Procedure for migrating user accounts to new system ?

2005-07-05 Thread Nelis Lamprecht
Hi,

What is the correct procedure to follow for migrating user accounts
from one FreeBSD 4.x system to a new FreeBSD 4.x system ? We're
sticking to 4.x due to legacy issues(Netware) in case I get asked.
Didn't see answer to this in the FAQ's or Handbook and google answers
seem sketchy.

Thanks.

Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: PHP on freebsd ports not working

2005-06-06 Thread Nelis Lamprecht
On 6/6/05, Philip Wege <[EMAIL PROTECTED]> wrote:
> Unable to get php to work through ports system:
> 
> Php5 and Apache2 is being used.
> 
> The test script looks like this :
> 
> 
> Hello World
> 
> 
>  echo "Hello World";
> ?>
> 
> 
> 
> Logs only says :
> 
> [Mon Jun 06 07:50:48 2005] [notice] caught SIGTERM, shutting down
> [Mon Jun 06 07:53:12 2005] [notice] Apache/2.0.54 (FreeBSD) PHP/5.0.4
> configured -- resuming normal operations
> 
> The following was added to httpd.conf :
> 
> LoadModule php5_modulelibexec/apache2/libphp5.so
> 
> When the one open machineip/test.php , it displayes the empty webpage
> and its title.
> 
> I got a feeling im missing config lines that needs to be added to
> httpd.conf , can anyone help ?
> 

I assume you added the following which would have displayed after your
php5 installation:

[EMAIL PROTECTED]>$ pkg_info -D php5-5.0.4_1
Information for php5-5.0.4_1:

Install notice:
***

Make sure index.php is part of your DirectoryIndex.

You should add the following to your Apache configuration file:

AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps

***

Also, it's probably best to test your php5 installation using phpinfo();
Just add  to a filename.php and access it via your web browser.

Regards,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Lost /etc/group after installing mtools installed

2005-05-23 Thread Nelis Lamprecht
On 5/24/05, Paul Dufresne <[EMAIL PROTECTED]> wrote:

> 
> I am still looking for a default /etc/group file.
> 

If you have the source installed.

/usr/src/etc/group

nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: portupgrade weirdness

2005-04-05 Thread Nelis Lamprecht
Replying to my own message.

For the archives, the problem below was caused because my local cvsup
mirror was not in sync with the INDEX file I downloaded from the main
FreeBSD site. Sorry, should have checked a specific port version
Makefile before posting the question.

Nelis

On Apr 5, 2005 1:17 PM, Nelis Lamprecht <[EMAIL PROTECTED]> wrote:
> Hi,
> 
> I seem to be having some difficulty upgrading some of my packages
> using portupgrade. Here is an example:
> 
> medusa# portversion -vl "<" | grep m4
> m4-1.4.1<  needs updating (port has 1.4.3)
> 
> medusa# portupgrade m4
> medusa#
> 
> Basically it's doing nothing as if it thinks the port is already
> updated ? This happens with my php4 port as well as the quagga port
> and one or two others. Some update fine, some don't. If I do a
> portupgrade -f it installs the same version currently installed and
> still doesn't install the new port.
> 
> Any ideas ?
> 
> Thanks.
> 
> Nelis
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


portupgrade weirdness

2005-04-05 Thread Nelis Lamprecht
Hi,

I seem to be having some difficulty upgrading some of my packages
using portupgrade. Here is an example:

medusa# portversion -vl "<" | grep m4
m4-1.4.1<  needs updating (port has 1.4.3)

medusa# portupgrade m4
medusa#
 
Basically it's doing nothing as if it thinks the port is already
updated ? This happens with my php4 port as well as the quagga port
and one or two others. Some update fine, some don't. If I do a
portupgrade -f it installs the same version currently installed and
still doesn't install the new port.

Any ideas ?

Thanks.

Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Cleaning /tmp on boot

2005-02-24 Thread Nelis Lamprecht
On Thu, 24 Feb 2005 12:42:17 +, Paul Richards
<[EMAIL PROTECTED]> wrote:
> Hi,
> Is there an easy way to have FreeBSD (RELEASE-5.3) clean /tmp on boot
> by means of setting a flag or something in /etc/rc.conf?  I'd like to
> check before I start manually hacking up my boot scripts to get this
> done.

I believe it's: clear_tmp_enable="YES"


Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How change the FTP_PASSIVE_MODE?

2005-02-18 Thread Nelis Lamprecht
On Thu, 17 Feb 2005 15:25:13 -0800, perikillo <[EMAIL PROTECTED]> wrote:
>   Hi, i have been around reading docs about the problem we have a lot
> of people went we try to access one ftp server on the Internet,
> normally the (Passive servers), in the past i was using rules on
> IPFILTER(freebsd 4.10 p5, think is the 3.4.31??  the one it cames
> with), my rule was:
> 
>   To block all that arrives to my tun0(IN), and let out all the
> packets of my internal cients  over tun0 and keep state. it was easy,
> only let my users go to outside world. My ipnat it was simply, only:
> 
> map tun0 198.168.1.0/24 -> 0/32
> 
>With this all my clients(win2k, win98, Freebsd, win XP) where happy
> and secure.
> 
>Them i decide to change my rules be more define, i read the
> handbook, and start making changes:
> 
> Block in all over my tun0 and let out any package over my tun0 only to:
> port 21, 53, 80, 443, 5999, all the handbook say, services that i know
> that normally went someone surf the web he is going to connect to
> those services.
> 
>I change my nat:
> 
>map tun0 198.168.1.0//24 -> proxy port 21 ftp/tcp
>map tun0 192.168.1.0/24 -> 0/32 portmap tcp/udp 2:6
>map tun0 192.168.1.0/24 -> 0/32
> 
>Is ok, i can surf the web, but went i went to the freebsd server,
> what happend:
> 
>ftp: ls
>entering passive mode(bla, bla, bla)
>ftp: connect no route to host
> 

hi,

to solve your problem or you should need to do is add another rule for
the actual freebsd server:

map tun0 198.168.1.1/32 -> 198.168.1.1/32 proxy port ftp ftp/tcp

the above rule assumes 198.168.1.1 is your freebsd server. this rule
should be placed first. you should also have a rule to pass out
traffic, something along the lines of:

pass out quick on tun0 proto tcp from 198.168.1.0/24 to any port = 21
flags S keep state

that should do the trick.

cheers,
nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mystery /var space usage

2005-01-28 Thread Nelis Lamprecht
On Thu, 27 Jan 2005 07:29:30 -0800, joseph kacmarcik
<[EMAIL PROTECTED]> wrote:
> 
> > /dev/amrd0s1e   9.8G   4.8G   4.2G53%/var
> >
> > A du -h of /var shows a total of 616M data only. First thing that came
> > to mind is some process which is holding onto data so I tried
> > restarting various daemons - cyrus, imapd, exim, apache and still no
> > change. I've checked with fstat and lsof to see if I can see anything
> > suspicious but nothing out of the ordinary shows up.
> 
> sounds like the maillog. have you tried restarting syslogd or whatever process
> you have that writes to your maillog?
> 

syslogd was the first process I restarted amongst all the others to
see if the problem could be solved. after doing some googling i came
across this same problem mentioned before.

http://lists.freebsd.org/pipermail/freebsd-questions/2003-June/010764.html
and another maybe not freebsd related
http://lists.gnu.org/archive/html/bug-fileutils/2002-10/msg00042.html

I have exactly the same problem which leads me to think that this may
be some sort of bug with softupdares ?

mail:/var# du -hs /var
621M/var

mail:/var# df -h /var
Filesystem  Size   Used  Avail Capacity  Mounted on
/dev/amrd0s1e   9.8G   5.4G   3.7G59%/var

the usage for /var is growing all the time so I'm going to have to
take the machine down this weekend which I'm sure will solve the
problem for now but I'd sure like to know what causes this.

Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


mystery /var space usage

2005-01-27 Thread Nelis Lamprecht
Hi,

This is not one of those "I've run out of space on /var issues" but
rather "what the hell is using up the space" issue.

My /var file system shows:

/dev/amrd0s1e   9.8G   4.8G   4.2G53%/var

A du -h of /var shows a total of 616M data only. First thing that came
to mind is some process which is holding onto data so I tried
restarting various daemons - cyrus, imapd, exim, apache and still no
change. I've checked with fstat and lsof to see if I can see anything
suspicious but nothing out of the ordinary shows up.

Baring in mind this is a production mail server with about 60 000
accounts, does anyone have any other suggestions which I might try ? I
could just boot into single user mode and back out which will probably
solve my problem now but for obvious reasons I would like to know what
is causing the added usage of /var. I'm running 4.10 currently but
plan to update that to 4.11 if I have to reboot.

Thanks for your reply.

Regards,
Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: anyone using Putty and ssh-agent?

2005-01-13 Thread Nelis Lamprecht
On Thu, 13 Jan 2005 08:26:43 -0500, Dan Langille <[EMAIL PROTECTED]> wrote:
> I'm trying to get putty and ssh-agent working under 5.3-stable.
> Anyone succeeded?
> 
> I have plain ssh working with ssh-agent, but not putty. The issue is
> just putty, not ssh-agent.
> --

Similiar problems have been noted on this list before with putty, the
solution was to set PasswordAuthentication to yes in your sshd_config
which is disabled by default in 5.3

Nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: i'm lost in named trouble.

2004-12-29 Thread Nelis Lamprecht
On Wed, 29 Dec 2004 14:39:44 +0100 (MET), Mipam <[EMAIL PROTECTED]> wrote:
> On Wed, 29 Dec 2004, Nelis Lamprecht wrote:
> 
> > On Wed, 29 Dec 2004 14:00:04 +0100 (MET), Mipam <[EMAIL PROTECTED]> wrote:
> >
> > >
> > > controls {
> > > inet 127.0.0.1 port 953
> > > allow { 127.0.0.1; } keys { "bla"; };
> > > };
> >
> > perhaps this should be:
> >
> > controls {
> >  inet 127.0.0.1 port 953
> >  allow { localhost; } keys { "bla"; };
> >  };
> 
> I just tried it, same result. :-(
> Any other hints?

I see you also have not set a query option ?

eg.
allow-query { any; };

..under options.

nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: i'm lost in named trouble.

2004-12-29 Thread Nelis Lamprecht
On Wed, 29 Dec 2004 14:00:04 +0100 (MET), Mipam <[EMAIL PROTECTED]> wrote:

> 
> controls {
> inet 127.0.0.1 port 953
> allow { 127.0.0.1; } keys { "bla"; };
> };

perhaps this should be:

controls {
 inet 127.0.0.1 port 953
 allow { localhost; } keys { "bla"; };
 };

nelis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


swapfile

2004-12-14 Thread Nelis Lamprecht
Hi,

Checked the manual but couldn't find anything regarding this. If you
have created more than one swap file how do you specify them in your
rc.conf file ? Manually it works fine but obviously when the machine
boots I want them both to be used again.

swapfile="/mailstore/swap1"
swapfile="/mailstore/swap2"

The above doesn't work, only the first one is used.

Thanks.

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ax88790 chipset 100mbit/s support

2004-12-08 Thread Nelis Lamprecht
On Thu, 09 Dec 2004 02:25:30 +0100, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> hello,
> 
> i have a 10/100 fast ethernet pccard labeled "sitecom".
> it is built around the asix ax88790 chipset and runs
> at 10 mbit using the ed driver.
> 
> is 10 mbit/sec the maximum transfer rate the ed driver
> supports?
> 

If I'm not mistaken the ed driver is for isa cards and 100mbit is not
achievable on the isa bus. What happens when you type 'ifconfig ed0
media 100BaseTX mediaopt full-duplex' ?

nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: problem with net-snmp while installing ethereal from ports

2004-12-03 Thread Nelis Lamprecht
On Thu, 2 Dec 2004 19:34:26 -0500, Brian Barto <[EMAIL PROTECTED]> wrote:
> Hi all, i'm trying to install ethereal from ports. It says it depends
> on shared library netsnmp.6 and the make shortly fails after with the
> following error: shared library "netsnmp.6" does not exist
> 
> The net-snmp web site says the latest is 5.2
> 
> My ports tree was updated two days ago. What am I not getting here?
> 

Based on what information you have provided I can offer you the
following advice:

Either build the ethereal port with the following argument 'make
WITHOUT_SNMP=yes'
OR
install /usr/ports/net-mgmt/net-snmp[1] first

[1] usually this is done automatically but something may be borked in
the port so try doing it manually.

nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Exim and FBSD 5.3

2004-12-01 Thread Nelis Lamprecht
On Wed, 1 Dec 2004 21:19:19 +0100, Kees Plonsz
<[EMAIL PROTECTED]> wrote:

> I am running freebsd 5.3 release
> I compiled it from the original source, not from the ports tree.
> It gives me a lot of extra compiling options wich was not
> available otherwise. ( Like running as user "mailnull" ).

Actually the default user/group for the port install is mailnull:mail
There are many configuration options(if not all) which can be
added/tweaked simply by editing the Makefile in the port directory(or
via the command line). The best part is it sets up all the directory
permissions user/group etc for you and generally just works. Trust in
the ports, it will save you a lot of headaches in the long run
especially when it comes to upgrading.

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problems logging w/ IPF on FreeBSD 5.3-STABLE

2004-12-01 Thread Nelis Lamprecht
On Mon, 29 Nov 2004 18:28:06 -0800, FMorales <[EMAIL PROTECTED]> wrote:

> bash-2.05b$ cat /etc/rc.conf | grep "ip"
> ipfilter_enable="YES"
> ipfilter_rules="/etc/ipf.rules"
> ipmon_enable="YES"
> ipmon_flags="-Ds"
> 

change the above to read something along the lines of:

ipmon_flags="-Dn /var/log/ipfilter.log"

remove the "s" in other words and put in the path to your log file to
output the data.

nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: squid

2004-11-19 Thread Nelis Lamprecht
On Fri, 19 Nov 2004 17:04:27 +0300 (MSK), dextermetall
<[EMAIL PROTECTED]> wrote:
> 
> 
> how can i deny websites  in squid?
> for example: i don`t want that clients could connect to www.example.com
> how can i do this?

http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.23

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: syslog imapd pop3d

2004-11-12 Thread Nelis Lamprecht
On Thu, 11 Nov 2004 19:21:13 +0100, Mark Frasa <[EMAIL PROTECTED]> wrote:
> Hello,
> 
> I was wondering wheter it's possible that pop3d and imapd don't log to
> maillog
> 
> My syslog.conf is like this:
> 
> mail.info   /var/log/maillog
> !imapd
> *.* /var/log/imapd.log
> !pop3d
> *.* /var/log/imapd.log
> 
> So every pop3 and imap (Couriers) connection made are logged to
> imapd.log
> 
> The problem is that i don't want it logged to /var/log/maillog but it
> does.
> How can i stop syslog from doing that, but leave the normal mail
> information to log towards /var/log/maillog?
> 

I don't think this is possible with syslog but I may be wrong. I think
you would probably need something more like multilog here for this to
work which is a part of D.J. Bernstein's daemontools available in
ports.

http://cr.yp.to/daemontools/multilog.html

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Slowish 5.3 network throughput (LAN)

2004-11-11 Thread Nelis Lamprecht
On Thu, 11 Nov 2004 14:38:48 -0600 (CST), [EMAIL PROTECTED]
<[EMAIL PROTECTED]> wrote:
> Hi list,
> 
> About 4 days ago I downloaded 5.3-RELEASE (.iso) from ftp.nl. at about
> 6mB/s from a server I have on a .nl provider. Today I wanted to do some
> testing, and while downloading that same ISO (which I downloaded at 6
> megabytes/s) from two different servers on the same subnet, the best I got
> was 130kB/s.
> 
> My outgoing port 80 pipe on the server allows up to 40mbits, so this rate
> is incredibly low, and the servers are all on the same subnet!
> 
> The clients are downloading the .iso from an apache 1.3.33 server with a
> basic configuration. I didn't have time to test over NFS, to check if it
> would be any faster..
> 
> What's happening here? I can download at 1mBps from my crappy P200 MMX w/
> freebsd 4.10 at my lan. This server is a Dual Xeon 2.4Ghz w/ 2GB ram and a
> decent hdd. It should saturate the 100mbps, but won't go past 130kB/s.
> 
> Could this be because the server NIC is an em(4) ? I heard there are some
> problems with the em driver under 5.3.
> 
> Here are some specs:
> 
> CPU: Intel(R) Xeon(TM) CPU 2.40GHz (2399.33-MHz 686-class CPU)
>   Hyperthreading: 2 logical CPUs
> FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
> SMP: AP CPU #3 Launched!
> SMP: AP CPU #1 Launched!
> SMP: AP CPU #2 Launched!
> 
> em0:  port
> 0x3000-0x303f mem 0xfc20-0xfc21 irq 54 at device 3.0 on pci2
> 
> 487 mbufs in use
> 270/32768 mbuf clusters in use (current/max)
> 0/4/6656 sfbufs in use (current/peak/max)
> 661 KBytes allocated to network
> 0 requests for sfbufs denied
> 0 requests for sfbufs delayed
> 0 requests for I/O initiated by sendfile
> 28 calls to protocol drain routines
> 
> FreeBSD celestia.celeritystorm.com 5.3-RELEASE FreeBSD 5.3-RELEASE #0: Mon
> Nov 1 22:21:19 UTC 2004
> [EMAIL PROTECTED]:/usr/obj/usr/src/sys/celestia i386
> 
> I don't have polling enabled. sacks on, delayed acks on.
> 
> the PF queue:
> 
> queue  http_out bandwidth 40Mb priority 5
>   [ pkts:  59257  bytes:   88471020  dropped pkts:  0 bytes:  0 ]
>   [ qlength:   0/ 50  borrows:  0  suspends:177 ]
> 
> Any ideas of what might be causing the tremendous slowdown ?
> 

We have several machines which use the em driver but I haven't used
5.3 with them yet. What I did notice though that when I set the
managed switch and the interface to full duplex instead of letting it
auto sense it made a noticable difference in speed. I would be
interested to know if 5.3 has the same effect.

ifconfig em0 media 100baseTX mediaopt full-duplex

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Thru a 'nasty' proxy

2004-11-11 Thread Nelis Lamprecht
On Thu, 11 Nov 2004 13:55:43 +, Vittorio <[EMAIL PROTECTED]> wrote:
> Old linux user now moving gradually to freebsd 5.2.1, at office we have
> a lan
> 1) with an http proxy for which authentication via userid & passwd is
> needed AND
> 2) ftp is blocked, not permitted.
> 
> I want to use the ports and compile my programs. I have already tried to
> set the http proxy (as under linux, by the way!)  issuing:
> 
> env HTTP_PROXY="http://userid:[EMAIL PROTECTED]:8080"
> 
> to no avail; freebsd complains endlessly that
> ...
> fetch: ftp://: Host not found
> .

Try putting in the following in /etc/make.conf

FETCH_ENV=  FTP_PROXY=http://userid:[EMAIL PROTECTED]:8080
FETCH_ENV=  HTTP_PROXY=http://userid:[EMAIL PROTECTED]:8080

To be honest, haven't tried it with authentication but the above would
be the correct way to make use of a proxy for ports.

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /dev/io problem in 5.3

2004-11-10 Thread Nelis Lamprecht
On Wed, 10 Nov 2004 23:22:59 -0500, Gerard Samuel
<[EMAIL PROTECTED]> wrote:
> Louis LeBlanc wrote:
> 
> 
> 
> >Just got through buildworld/kernel on 5.3.  Strange problem I can't
> >find the solution to.
> >
> >Xorg won't start:
> >
> >Fatal server error:
> >xf86EnableIO: Failed to open /dev/io for extended I/O
> >
> >Please consult the The x.org Foundation support at http://wiki.X.org
> >for help.
> >Yada Yada Yada.
> >
> >Only one hit on Google, and it's just a bug report.  Anyone else have
> >any ideas?  I know /dev/is supposed to be more dynamic in 5.3, but
> >this isn't working.
> >
> Make sure your kernel has "device   io".
> X needs it in 5.3.
> 

Out of curiosity does 5.3 have this in the Generic kernel ? I don't
have a copy installed yet to check but if it doesn't then it certainly
should IMO. I've seen this problem reported a few times already.

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Installation problem/question -- duplicate sent to support@freebsdmall

2004-11-10 Thread Nelis Lamprecht
On Wed, 10 Nov 2004 23:05:06 -0600, Jeff Hobson <[EMAIL PROTECTED]> wrote:
> I have a machine running win 2000. I want to completely convert the machine 
> to FreeBSD (not run anything else), I boot from the 5.2 cd and choose use all 
> the disk and choose automatic to have the system decide what to place where. 
> I creates the necessary partitions/filesystems (/, var,swap and /usr) on what 
> I assume to be the 4 windows partitions already existing. It then proceeds to 
> install the system and I answer all the questions and the disk flashes and 
> the cdrom blinks for about an hour. It finally finishes and returns to the 
> sysinstall screen. I exit and it says it will now reboot. It does. INTO THE 
> WINDOWS 2000 SYSTEM!. I took a look at the disks and there is not a trace of 
> the FreeBSD filestructure or files. ANYWHERE!!. I am very puzzled. It looked 
> like all was going just fine. but for some reason, the filesystem was written 
> to some other planet or the installation aborted and restored all the 
> previous filesystem (there was no message to indicate that happened). I am, 
> what I consider, a very experienced computer systems analyst. Up until this 
> time, I have never seen this happen with any install before. I am sure that I 
> have done/overlooked some critical step that somehow bypassed the system 
> install and never made the machine into the FreeBSD box I wanted.
> 
> Any ideas? Any further information I can provide to investigate this? Thank 
> you for your help and attention.
> 

Very odd. If you run fdisk on Windows2000 do you not see a non-dos
partition anywhere where perhaps FreeBSD was installed ? Did you
remember to set your partition as bootable  by FreeBSD when you
selected to use all disk space ? You could always try using fdisk to
delete any/all partitions first then install FreeBSD.

Good luck.

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: BIND9 on 4.10: couldn't open pid file: permission denied

2004-11-10 Thread Nelis Lamprecht
On Wed, 10 Nov 2004 13:29:23 +0100, Erik Norgaard <[EMAIL PROTECTED]> wrote:
> Nelis Lamprecht wrote:
> 
> > Shouldn't you be using the command named -g bind -u bind -t /var/named  
> > ?
> 
> No, that's bind8. On bind9 '-u bind' sets user _and_ group. -g is
> foreground to catch the output.
> 

Oops my bad. The only other explanation I can think of then is that
the path for the pid file may be specified incorrectly in your
named.conf in relation to your chroot ?

Good luck.

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: BIND9 on 4.10: couldn't open pid file: permission denied

2004-11-10 Thread Nelis Lamprecht
On Wed, 10 Nov 2004 12:29:59 +0100, Erik Norgaard <[EMAIL PROTECTED]> wrote:
> Hi,
> 
> I had a working BIND9 running but needed to restart after updating the
> zone file with the following command:
> 
> # /usr/local/sbin/named -g -u bind -t /var/named -c /etc/named.conf
> 
> But this failed:
> 

Shouldn't you be using the command named -g bind -u bind -t /var/named  ?

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: make buildworld failed at suidperl

2004-11-10 Thread Nelis Lamprecht
On Wed, 10 Nov 2004 10:26:51 +0100, Matthias Teege
<[EMAIL PROTECTED]> wrote:
> Moin,
> 
> I try a cd /usr/src && make buildworld.
> 
> It fails with:
> 
> cc -O -pipe -I/usr/src/gnu/usr.bin/perl/suidperl/../../../../contrib/perl5 
> -I/usr/obj/usr/src/gnu/usr.bin/perl/suidperl -DIAMSUID-c sperl.c
> Global symbol "$dir" requires explicit package name at 
> /usr/obj/usr/src/gnu/usr.bin/perl/suidperl/lib/ExtUtils/MM_Unix.pm line 128.
> BEGIN not safe after errors--compilation aborted at 
> /usr/obj/usr/src/gnu/usr.bin/perl/suidperl/lib/ExtUtils/MM_Unix.pm line 242.
> BEGIN failed--compilation aborted at Makefile.PL line 1.
> *** Error code 255

Hi,

Have you tried cvsuping from another source ?

Otherwise..

I'm guessing that this is version 4.x of FreeBSD based on the fact
it's using perl5. To bypass the building of perl in the base system
you can add the following to /etc/make.conf

NOPERL=true

You can then build perl5.8 from ports afterwards and run use.perl ports.


Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Do you need to dismount /usr to dump it?

2004-11-09 Thread Nelis Lamprecht
On Tue, 09 Nov 2004 21:21:42 -0800, Matt Staroscik <[EMAIL PROTECTED]> wrote:
> 
> If I boot to single-user mode (reboot, hit space, do boot -s) and dump /usr
> to a file, I get read errors on a couple of blocks.
> 
> Running fsck -y (also in single user of course) did not show a problem, but
> it did not clear up the errors when I tried the dump again.
> 
> I thought it was safe to dump /usr in single-user mode. Will I need to boot
> off a CD or try another trick to get a clean dump of /usr? Or perhaps I am
> not using the right fsck options?
> 
> the dump command I used is:
> dump 0af /someotherplace/filename.dump /usr
> 

Try running the command: dump -0 -a -f /someplace/filedump /dev/ad0s1g
(or whatever your /usr partition uses for /dev)

I recall there also being a -L flag for live systems which you may
want to try though I think it is only available in 5.x ? ...not to
sure.

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: 5.3 amd64 release

2004-11-09 Thread Nelis Lamprecht
On Mon, 8 Nov 2004 19:12:24 -0800 (PST), ann kok <[EMAIL PROTECTED]> wrote:
> Hi all
> 
> I tried the new release and have the problem
> 
> - I can't use the secureCRT to connect the box
> - I used the putty but suddenly timeout always
> 
> how can I fix the both problems?
> 

Sounds to me like you having a DNS problem. Try adding the hostname/ip
of the machines connecting using secureCRT/putty to the servers
/etc/hosts file.

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ad0: WRITE command timeout...

2004-11-04 Thread Nelis Lamprecht
On Thu, 4 Nov 2004 16:55:30 +0100 (CET), Are Bryne
<[EMAIL PROTECTED]> wrote:
> On Thu, 4 Nov 2004, Nelis Lamprecht wrote:
> 
> > On Thu, 4 Nov 2004 14:10:42 +0100 (CET), Are Bryne
> > <[EMAIL PROTECTED]> wrote:
> [...]
> >> After upgrading a computer from FreeBSD 4.8-something to 4.10-RELEASE-p3,
> >> I'm getting lots of the following:
> >>
> >> ad0: WRITE command timeout tag=0 serv=0 - resetting
> >> ata0: resetting devices .. done
> 
> The disk in question is a
> FUJITSU MPC3043AT/6018 using ATA/ATAPI rev 3 according to atacontrol.
> It is master on its controller and uses UDMA33 transfers, and has an idle
> PIO4 cd-rom player as a slave.

The cdrom drive may be forcing your hard drive to use a much slower
UDMA. If I were you I would connect the cd-rom player on your
secondary channel or at the very least disconnect it and see if your
problem persists and you might even find you get better tranfer rates.

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ad0: WRITE command timeout...

2004-11-04 Thread Nelis Lamprecht
On Thu, 4 Nov 2004 14:10:42 +0100 (CET), Are Bryne
<[EMAIL PROTECTED]> wrote:
> 
> 
> Hello,
> 
> After upgrading a computer from FreeBSD 4.8-something to 4.10-RELEASE-p3,
> I'm getting lots of the following:
> 
> ad0: WRITE command timeout tag=0 serv=0 - resetting
> ata0: resetting devices .. done
> 

Hi,

Seen this once before and in my case it was a faulty hard drive cable.
Check to see whether your cable is not loose or incorrectly inserted
and perhaps try a new one. It may also be caused by an incorrect DMA
setting if memory serves me correct.

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD 5.3 and XFree86

2004-11-03 Thread Nelis Lamprecht
On Wed, 03 Nov 2004 09:32:07 -0500, Gerard Samuel
<[EMAIL PROTECTED]> wrote:
> I just upgraded from 5.2.1 to 5.3.  When running startx, it ends up with
> this error ->
> 
> Fatal server error:
> xf86EnableIO: Failed to open /dev/io for extended I/O
> 

Does /dev/io exist ? Have you got Xwrapper installed
(/usr/ports/x11/wrapper) ?  Only other cause for this is if your
kern.securelevel is set above 1

A quick google would have given you several clues :)

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ipnat.rules

2004-11-03 Thread Nelis Lamprecht
On Tue, 2 Nov 2004 17:25:42 -0800 (PST), sonjaya <[EMAIL PROTECTED]> wrote:
> dear all
> 
> after i finish add in my kernel ipnat , i use this
> sample script :
> /etc/ipnat.rules :
> map rl0 172.18.5.11/255.255.0.0  -> 0.0.0.0/32 proxy
> port ftp ftp/tcp ssh
> map rl0 172.18.5.11/255.255.0.0 -> 0.0.0.0/32 portmap
> tcp/udp auto
> 
> in here my net :
> 
> lan--NAT server---internet
> 
> my question is :
> 
> 1.how i must set ipnat.rules only some ip get nat
> other can not user .
> because if some pc station use the gateway my server
> that pcstation get nat .
> 
> may be like this :
> lan(non-nat)-|
> lan(nat)-|---NAT Server---INternet

You need a rule with something like:

map rl0 from $natnetwork ! to $pubnetwork -> $natserver

> 
> 2. how i set the map rule in ipnat.rules , that lan do
> not  have righ to nat to directly to proxy .

add a block rule for the proxy ip from lan but pass the nat server ?
not quite sure what you want..

> 
> i'm so sory if my question is basic , because i new in
> freebsd
> thx
> 

No problem even though it's more IP Filter than FreeBSD related. For
further information see http://www.obfuscation.org/ipf/ipf-howto.html

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Upgrading 5.2.1 to 5.3R2

2004-11-03 Thread Nelis Lamprecht
On Tue, 02 Nov 2004 21:01:35 -0500, Gerard Samuel
<[EMAIL PROTECTED]> wrote:
> Ok, so I upgraded, ran mergemaster, and merged /etc/group (and
> /etc/master.passwd I think) via mergemaster.
> I merged those files to retain my non root user account.
> I rebooted, and I haven't been able to log into my non root account.
> I tried to readd the account via adduser, but it says that the user
> already exists.
> So I tried rmuser, and it says that the user doesn't exist.
> So I manually removed the account name from /etc/group,
> /etc/master.passwd, /etc/passwd,
> and tried to add the user, via adduser.
> When it tries to add the user, it fails (dont remember the message right
> now).
> Anyone has any suggestions on how I can get the old user account back??
> N.B. I did back up /etc before mergemaster...
> Thanks

What is the result of pwd_mkdb -C /etc/master.passwd ? Perhaps copy
your backup copy of master.passwd and then regenerate your passwd file
via pwd_mkdb -p
See pwd_mkdb(8) for more info

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problem with mount_smbfs (not working for me)

2004-11-03 Thread Nelis Lamprecht
On Wed, 3 Nov 2004 08:41:24 +0100, Axel S. Gruner
<[EMAIL PROTECTED]> wrote:
> Hi.
> 
> I run into a problem with "mount_smbfs".
> Trying to mount a SMB-share on a AS/400 from a FreeBSD 4.10 or FreeBSD
> 5.3-RC1 gives me the error:
> 
> mount_smbfs: unable to open connection: syserr = Connection reset by
> peer
> 
> Well, i dont like Mr. Peer, and, trying to reach the SMB-share via
> "smbclient" works perfectly (but i need a mount on my FreeBSD-System, so
> thats no choice).
> 
> Also if i try to mount the SMB-share from a SuSE Linux Box (with mount
> -t smbfs) it will work, as a result, i think the problem is not the
> share, it must be "mount_smbfs".
> 
> The syntax i tried was:
> mount_smbfs -I 10.4.1.222 //[EMAIL PROTECTED]/sfimages /mnt
> also with the FQDN:
> mount_smbfs -I suedzwo.suedfac.com //[EMAIL PROTECTED]/sfimages /mnt
> 

You have to use the netbios name of your samba server. Change
10.4.1.222 to the netbios name.

mount_smbfs -I 10.4.1.222 //[EMAIL PROTECTED]/sfimages /mnt
or
mount_smbfs -I suedzwo.suedfac.com //[EMAIL PROTECTED]/sfimages /mnt

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Hostname

2004-10-29 Thread Nelis Lamprecht
On Fri, 29 Oct 2004 10:05:05 +0100, Mick Walker <[EMAIL PROTECTED]> wrote:
> On Fri, 2004-10-29 at 00:25, Kris Kennaway wrote:
> 
> 
> 
> > On Fri, Oct 29, 2004 at 12:19:01AM +0100, Mick Walker wrote:
> > > Hi,
> > >
> > > I recently (today) upgraded to 5.3-STABLE.
> > > I am wondering why I cant set my hostname.
> > > It works if I issue the command hostname whatever.com, but on reboot it
> > > is reset to nothing.
> > > I have it set up in my /etc/rc.conf so it applies at boot time.
> > >
> > > Does anyone know how I can fix this?
> >
> > Show us what you've done first, don't describe what you think you did :-)
> >
> > Kris
> 
> 
> $ hostname
> 
> $
> $ hostname laptop.codegurus.org
> $ hostname
> laptop.codegurus.org
> $
> 
> And in my /etc/rc.conf file I have:
> hostname="laptop.codegurus.org"
> 

Perhaps you have conflicting information in /etc/hosts ?

Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: portupgrade and pkgtools.conf

2004-10-28 Thread Nelis Lamprecht
On Thu, 28 Oct 2004 11:55:06 +0200, Uros <[EMAIL PROTECTED]> wrote:
> Hello!
> 
> I'm trying to update subversion from ports and I have
> WITH parameters in my pkgtools.conf
> 
> 'devel/subversion' => [
> 'WITHOUT_NEON=1',
> 'WITH_APACHE2_APR=1',
> 'WITH_BERKELEYDB=42'
> ]
> 

Hi,

Not sure if above was a typo but you seem to be missing a , or two:

 'devel/subversion' => [
 'WITHOUT_NEON=1',
 'WITH_APACHE2_APR=1',
 'WITH_BERKELEYDB=42',
],
  
  
Regards,
Nelis
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Apache2 + SSL

2004-10-19 Thread Nelis Lamprecht
Sorry about the top posting but the person who replied to my question
was rejected( black listed by combined.njabl.org ) by our server and I
found his message below via the web archives.

In reference to the below message.

Putting  instead of  in my httpd.conf
which Includes ssl.conf causes Apache to complain about all SSL type
commands. eg.

Syntax error on line 76 of /usr/local/etc/apache2/ssl.conf:
Invalid command 'SSLPassPhraseDialog', perhaps mis-spelled or defined by
a module not included in the server configuration

Which leads me to think that perhaps the SSL portion of Apache2 is
faulty ? 

httpd -S -DSSL returns the same thing as httpd -S and shows only the
httpd.conf virtual hosts on port 80.

Thanks.

Nelis
 

* Nelis Lamprecht <[EMAIL PROTECTED]> [1041 11:41]:
> Hi,
> 
> I've recently just installed apache-2.0.52_1 from ports on a new system.
> I've taken an already working configuration from an older machine and
> transferred it to the new server. No matter what I do I can't get SSL
> working even though it shows up as being used.
> 
> www  54695  0.0  0.4 14256 9024  ??  I12:25PM   0:00.00
> /usr/local/sbin/httpd -DSSL
> 
> It's as if anything I put between  and 
> gets totally ignored.
> 
> 
> Include etc/apache2/ssl.conf
> 

Try 


 Include etc/apache2/ssl.conf



> httpd -S shows only the virtual hosts in httpd.conf and nothing from
> ssl.conf 

httpd -S -DSSL



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Apache2 + SSL

2004-10-19 Thread Nelis Lamprecht
Hi,

I've recently just installed apache-2.0.52_1 from ports on a new system.
I've taken an already working configuration from an older machine and
transferred it to the new server. No matter what I do I can't get SSL
working even though it shows up as being used.

www  54695  0.0  0.4 14256 9024  ??  I12:25PM   0:00.00
/usr/local/sbin/httpd -DSSL

It's as if anything I put between  and 
gets totally ignored.


Include etc/apache2/ssl.conf


The worst part is there is no logging of any sort to tell me otherwise
and I've run out of ideas on how to debug this. I've even tried
compiling in SSL statically but it didn't make any difference. I've used
certificates already in use and created my own but Apache will still not
listen on port 443( and nothing else is ) no matter what I do. I've
tried various ssl configurations but they all seem to be ignored. Even
httpd -S shows only the virtual hosts in httpd.conf and nothing from
ssl.conf 

Has anybody got any other ideas on how to debug this problem ? How can I
determine whether SSL is being used ?

By the way, I've also installed openssl from ports and recompiled apache
but still no luck. I've tried everything! ;) I think..

Thanks.

Nelis


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Apaching binding to *:* ?? (Weirdness)

2004-07-26 Thread Nelis Lamprecht
On Mon, 2004-07-26 at 01:04, Bill Moran wrote:

> I'm having some weird action from Apache.  It seems that every apache process
> binds to *:* twice, in addition to IP:80 and IP:443.  Has anyone seen this
> before?  This is Apache 1.3.28 (although an upgrade is on the schedule)  I
> had _wanted_ to test the new version of Apache in the jail prior to upgrading,
> but I'm not so sure that's going to work.
> 
> Anyone seen this before?

Are you not confusing local addresses to foreign ? Each local address
will have a foreign address as far as I understand it. What is the
output of sockstat -4l ?

From sockstat(1)

LOCAL ADDRESS For Internet sockets, this is the address the local end
of the socket is bound to (see getsockname(2)).  For bound UNIX sockets,
it is the socket's filename.  For other UNIX sockets, it is a right
arrow followed by the endpoint's filename, or ``??'' if the endpoint
could not be
determined. 
FOREIGN ADDRESS (Internet sockets only) The address the foreign end of
the socket is bound to (see getpeername(2)).

-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Best way to limit SSH to LAN IP's only ?

2004-07-23 Thread Nelis Lamprecht
On Fri, 2004-07-23 at 14:20, Graham Bentley wrote:
> Hi All,
> 
> Wondered what is the best way to do this ?
> 
> Do I have to get involved with host.allow / deny
> or better to use the sshd config ?
> 

If this system has 2 interfaces, one LAN and one Internet then all you
need to do is configure sshd to listen on the LAN interface.

in sshd_config:

ListenAddress your.lan.interface.ip

Regards,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: SSH Client - OpenSSH dependency problem

2004-07-23 Thread Nelis Lamprecht
On Fri, 2004-07-23 at 08:26, Bryce wrote:

> Dependency warning: used OpenSSL version contains
> known vulnerabilities
> Please update or define either WITH_OPENSSL_BASE or
> WITH_OPENSSL_PORT
> 
> Can anyone throw some light on how to fix this?
> 

As already mentioned you can just use the base system ssh. If however
you want to upgrade it to a newer version ( advisable if this machine is
accessible to the public ) then you will have to do as the above says.

By default the base system contains openssl in /usr/bin and the openssl
port installs to /usr/local/bin. This is why you're given the option
WITH_OPENSSL_BASE, meaning /usr/bin/openssl or WITH_OPENSSL_PORT,
meaning /usr/local/bin/openssl. Basically it's saying, if you already
have an updated version in base or ports then tell me where it is.

The above is also applicable to openssh. To prevent yourself from
getting confused you could always do the following to both openssl and
openssh after installing/upgrading them from ports:

cd /usr/bin; mv openssl openssl.base; ln -s /usr/local/bin/openssl
openssl

..and the same with ssh which will make sure you always use the latest
version. By default your $PATH is set to use the base version. If you
are going to use the ports then you may also want to ensure the
following are defined in /etc/make.conf

NO_OPENSSH= true
NO_OPENSSL= true


Regards,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: How to send attached files on sendmail with mail tool?

2004-07-23 Thread Nelis Lamprecht
On Fri, 2004-07-23 at 08:07, Murray Taylor wrote:

> This works with winblows  - I use it in production here
> 
> cat file | uuencode tgt_filname | mail -s "subject" [EMAIL PROTECTED]
>   ^ ^
>   | +--- attachment FILENAME for the target host to
> use
>   +--- attachment CONTENT from the source host
> 

May I suggest an alternative - /usr/ports/mail/p5-Mail-Sender

Install this perl module and then you can easily write a simple script
to handle your attachments. Something like the following:

#!/usr/local/bin/perl -w
use Mail::Sender;
 
$to  = $ARGV [0];
$replyto = "[EMAIL PROTECTED]";
$subject = $ARGV [1];
$file= $ARGV [2];
$mesg= $ARGV [3];
$from= "[EMAIL PROTECTED]";
 
if (! $file )
{
PrintUsage();
die "\n";
}
 
else
{
 
$sender = new Mail::Sender
 {smtp => 'your.smtp.server.ip', from => $from};
 
$sender->MailFile({ to  => $to,
replyto => $replyto,
subject => $subject,
msg => $mesg,
file=> $file});
 
print "The file $file has been sent to $to\n";
};
 
sub PrintUsage
{
print "Usage: mailfile.pl";

};

Not tested but should work, just alter to suit your needs.

Regards,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Random Freeze

2004-07-21 Thread Nelis Lamprecht
On Wed, 2004-07-21 at 15:41, Cedric GROSS wrote:
> Hello,
> 
> I'm running an AMD Duron 700 Box with freeBSD 5.2.1 - RELEASE, and
> sometimes the system freeze so I must reboot. I haven't anything in log.
> So, What could be the problem ? 
> How could I obtain some clue of the problem (debug flag, something like
> that..) ?
> 
Hi,

Are you using any sort of traffic shaping( dummynet ) with ipfw ? Had a
similar problem and solved it by setting the timer granularity ( options
HZ=1000 ) in the kernel which is strongly recommended. The machine also
gave me no clue as to why it froze. Checking your memory as already
suggested is also a good idea. You can use the memory test located in 
/usr/ports/sysutils/memtest86 which is a great tool. You might also want
to upgrade to the latest source for that particular RELEASE as bugs are
constantly found and corrected.

 
Regards,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Re[2]: How to configure PHP build?

2004-07-20 Thread Nelis Lamprecht
On Tue, 2004-07-20 at 15:37, Gabriel Ambuehl wrote:
> Hello Andrew,
> 
> Tuesday, July 20, 2004, 3:36:53 PM, you wrote:
> 
> > On Tuesday 20 July 2004 08:17 am, Gabriel Ambuehl wrote:
> >> Hi,
> >> after the last PHP commits, I can't seem to be able to configure my
> >> PHP builds anymore. It keeps on telling me
> >> ===>  Found saved configuration for mod_php4-4.3.8_1,1
> >> and subsequently starts to build right away.
> >>
> >> Is there any way to get it to behave like in the past, specifically
> >> asking me what libs it should compile in?
> >>
> >> Any help would be greatly appreciated.
> >>
> >> Regards,
> >> Gabriel
> 
> > Have you executed "make clean"?
> 
> More than once. And also make distclean.
> 
> Here's what happens:
> [EMAIL PROTECTED] 15:36:28 /usr/ports/www/mod_php4 # make clean
> ===>  Cleaning for libiconv-1.9.2
> ===>  Cleaning for bison-1.75_2
> ===>  Cleaning for gettext-0.13.1_1
> ===>  Cleaning for libtool-1.3.5_2
> ===>  Cleaning for libtool-1.5.6_1
> ===>  Cleaning for m4-1.4.1
> ===>  Cleaning for perl-5.6.1_15
> ===>  Cleaning for rc_subr-1.29
> ===>  Cleaning for expat-1.95.7
> ===>  Cleaning for apache-1.3.31_2
> ===>  Cleaning for mod_php4-4.3.8_1,1
> [EMAIL PROTECTED] 15:36:41 /usr/ports/www/mod_php4 # make
> ===>  Vulnerability check disabled
> ===>  Found saved configuration for mod_php4-4.3.8_1,1
> ===>  Extracting for mod_php4-4.3.8_1,1
> >> Checksum OK for php-4.3.8.tar.bz2.
> ===>  Patching for mod_php4-4.3.8_1,1
> ===>  Applying FreeBSD patches for mod_php4-4.3.8_1,1
> ===>   mod_php4-4.3.8_1,1 depends on file: /usr/local/sbin/apxs - found
> ===>   mod_php4-4.3.8_1,1 depends on executable: bison - found
> ===>  Configuring for mod_php4-4.3.8_1,1
> 

Try doing a 'make reinstall' Failing which you could also try build php
from /usr/ports/lang/php4. Use the WITH_APACHE2 argument if you are
using Apache2 or add it to /etc/make.conf

WITH_APACHE2=   yes

Regards,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Routing issue

2004-07-19 Thread Nelis Lamprecht
On Mon, 2004-07-19 at 11:12, Web Walrus (Robert Wall) wrote:
> I just installed a secondary internet connection at my office, and I'm
> having a bizarre issue...
> 
> I have a network card - dc0
> 
> That network card has a config roughly like
> 
> ifconfig_dc0 inet 1.2.3.4 netmask 255.255.255.248
> ifconfig_dc0_alias0 inet 2.3.4.5 netmask 255.255.255.248
> defaultrouter="1.2.3.1"
> 

Read this page regarding adding aliases:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/configtuning-virtual-hosts.html

You need to change your netmask for the alias to 255.255.255.255 if it's
on the same network.

Regards,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: changed hostname, what else shoud I change ?

2004-07-13 Thread Nelis Lamprecht
On Tue, 2004-07-13 at 12:22, Ion-Mihai Tetcu wrote:

>  % startx
> xauth: (argv):1:  bad display name "old_host_name.tld.ro:0" in "list" com
> mand
> Using authority file /home/itetcu/.Xauthority
> xauth: (stdin):1:  bad display name "old_host_name.tld.ro:0" in "add" com
> mand

Hi!

What happens when you remove the file .Xauthority ? You need to change
the hostname in both /etc/hosts and /etc/rc.conf

Regards,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: XFree86 configure question

2004-06-11 Thread Nelis Lamprecht
On Fri, 2004-06-11 at 08:05, LW Ellis wrote:

> Having some difficulty setting up the XFree86 Server.
> I did like it said in the handbook, but when I 
> ee XF86Config.new, I get a blank file.
> If I use the configure tool in the sysinstall, it fails to save the file.
> I am logged on as 'root'

The first thing I would do before trying to configure your XFree86
Server is to find out exactly what Video card( Part 2 ) you are using.
You can do this usually by going through your system message buffer from
kernel startup. Edit the file /var/run/dmesg.boot and look for
information which would indicate your VGA chipset, it usually starts
with pci0: In some cases where your Video card is not recognised by the
kernel you may need to identify the chipset in another way. Try opening
the computer and looking at the chipset on the video card itself.

Once you have this information you can then run the command xf86config
from the command line, it is usually located in /usr/X11R6/bin.
If you lucky your card will be automatically detected otherwise you will
manually have to put in the options. After running through the
configuration check the XF86Config file it creates and adjust if
necessary to your liking.

Also, take a look at the FAQ's regarding the X Window System which can
be found at:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/x.html

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Modem configuration

2004-06-10 Thread Nelis Lamprecht
On Thu, 2004-06-10 at 06:34, miguel calvo wrote:
>Hi:
> 
>I have installed FreeBSD 5.2 in my notebook (Compaq Evo N800v).
> 
>The modem is a Agere Win Modem. It is possible that it can configure
>and use the modem to create a dial up Internet connection?
> 
Hi!

No, unfortunately FreeBSD does not support winmodems as their
functionality is generally implemented via software drivers only
available for Windows.

See http://www.freebsd.org/doc/en_US.ISO8859-1/articles/laptop/x52.html

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: gnome problems

2004-06-08 Thread Nelis Lamprecht
On Tue, 2004-06-08 at 09:40, n3rdBoy . wrote:

>  When I am logged in as root X11 and gnome start fine when I type 
> 'startx', when I am logged in as a normal user I type 'startx' and only X11 
> starts. I have followed the instructions in the handbook and modified 
> /root/.xsession. any help or direction to other resources would be great.
> 

Hi!

Just copy your .xsession file for root into the home folder of the user
you want to use Gnome for or use gdm. Having said that there is a lot of
information regarding updating Gnome which you can find at
http://www.freebsd.org/gnome/. It would be wise of you to check the
FAQ's at this site for important information.

The Gnome mailing list is [EMAIL PROTECTED] where all questions
regarding Gnome on FreeBSD should be posted.

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: 4.10 Release & Exim 4.32

2004-06-07 Thread Nelis Lamprecht
On Mon, 2004-06-07 at 09:17, Lonnie Santella wrote:

> I need to add some build-time settings beyond the defaults in order to run 
> Exim on my system. I'm thinking that I'm making a fundemental mistake here, 
> but I can't figure out what it is.
> 

Hi!

Generally, all build-time settings are done from the command line in the
ports directory. It's wise to first check the Makefile in the ports
directory to see a list of options you can build with that particular
port. For example, to build Exim with the Cyrus SASL authentication
daemon one would issue the command:

make WITH_SASLAUTHD=yes install

or

make -DWITH_SASLAUTHD

You can naturally add as many options one after the other.

The Makefile already contains a bunch of default settings which you can
enable or disable but you shouldn't make these changes to the actual
Makefile as this will just be overwritten on your next ports update. You
may also wish to make a note of all your build-time settings and add
them to /usr/local/etc/pkgtools.conf so the next time you update Exim
the same settings will be used. The pkgtools.conf file is the
configuration file that comes with portupgrade (
/usr/ports/sysutils/portupgrade )


Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: ipnat and ipfw dummynet

2004-06-04 Thread Nelis Lamprecht
Sorry, I failed to point out my current network configuration.

I have 2 internal networks which use NAT, one class C ( 192.96.48.0/24 )
and one rfc1918 ( 192.168.1.0/24 ).

The internal interface(bge1) is configured with the class c network and
I have added a route to bge1 for 192.168.1.0/24. All traffic on the
192.96.48.0/24 network internally is routed via the gateway to get to
the 192.168.1.0 network.

Hope that makes sense.

Nelis

On Fri, 2004-06-04 at 14:43, Nelis Lamprecht wrote:
> Hi,
> 
> I'm interested to hear how people utilise dummynet in a NAT environment.
> How does one create a pipe for a NAT network without effecting the
> actual LAN speed ? For example, on the gateway:
> 
> $fwcmd add pipe 1 ip from 192.168.1.0/24 to any out
> $fwcmd add pipe 2 ip from any to 192.168.1.0/24 in
> $fwcmd pipe 1 config bw 128Kbit/s
> $fwcmd pipe 2 config bw 128Kbit/s
> 
> The above example would be fine if 192.168.1.0/24 were only talking to
> the internet but unfortunately it also effects the machines from talking
> to each other internally. The only interface you can specify is the
> internal interface(bge1) because this is the only time that ipfw will
> see the addresses before they are passed to NAT(ipnat) and will not be
> seen on the external interface(bge0). So basically the above example
> should be written as:
> 
> $fwcmd add pipe 1 ip from 192.168.1.0/24 to any out via bge1
> $fwcmd add pipe 2 ip from any to 192.168.1.0/24 in via bge1
> 
> This however will also give 192.168.1.0/24 an internal LAN speed of
> 128Kbit/s which is to say quite humorous ;-)
> 
> What is the solution to this ? ..I'm obviously missing something. The
> internal interface is not firewalled.
> 
> 
> Many thanks,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


ipnat and ipfw dummynet

2004-06-04 Thread Nelis Lamprecht
Hi,

I'm interested to hear how people utilise dummynet in a NAT environment.
How does one create a pipe for a NAT network without effecting the
actual LAN speed ? For example, on the gateway:

$fwcmd add pipe 1 ip from 192.168.1.0/24 to any out
$fwcmd add pipe 2 ip from any to 192.168.1.0/24 in
$fwcmd pipe 1 config bw 128Kbit/s
$fwcmd pipe 2 config bw 128Kbit/s

The above example would be fine if 192.168.1.0/24 were only talking to
the internet but unfortunately it also effects the machines from talking
to each other internally. The only interface you can specify is the
internal interface(bge1) because this is the only time that ipfw will
see the addresses before they are passed to NAT(ipnat) and will not be
seen on the external interface(bge0). So basically the above example
should be written as:

$fwcmd add pipe 1 ip from 192.168.1.0/24 to any out via bge1
$fwcmd add pipe 2 ip from any to 192.168.1.0/24 in via bge1

This however will also give 192.168.1.0/24 an internal LAN speed of
128Kbit/s which is to say quite humorous ;-)

What is the solution to this ? ..I'm obviously missing something. The
internal interface is not firewalled.


Many thanks,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Periodic configuration

2004-06-02 Thread Nelis Lamprecht
On Wed, 2004-06-02 at 10:45, Edd wrote:
> Hi,
> I am trying to cut down on the amount of mail I recieve in my root
> mailbox. I kno this could be done by turning off the periodic tasks. I
> am happy to tuen off the status daily, but would still like to recieve
> the security mail ONLY when something is out of the norm. I have looked
> at making a periodic.conf, but dont really know how to go about this.
> Can anyone help?

Hi!

Copy the periodic.conf file from your /etc/defaults directory to /etc
and then edit to your liking. You can also turn off the default to mail
the output and have it log to a file instead.

eg. daily_output="/var/log/daily.log"

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Repeated connections to port 25 with firewall

2004-05-26 Thread Nelis Lamprecht
On Wed, 2004-05-26 at 14:27, Jonathon McKitrick wrote:
> : When local processes want to mail, they fork n exec a sendmail binary 
> : themselves.
> : 
> : You shouldn't need a sendmail server running for that.
> 
> Here is what I have/had in rc.conf
> 
> #sendmail_enable="no"
> #sendmail_submit_enable="no"
> #sendmail_outbound_enable="no"
> #sendmail_msp_queue_enable="no"
> 
> And as soon as I restarted after commenting out these lines, root's mailbox
> got filled with megs of mail from cron.  I want the minimum I need to get
> system mail without leaving an instance of sendmail vulnerable to attack or
> eating up resources.
> 

You can replace all of the above with sendmail_enable="NONE"

Not sure if it has already been pointed out to you but you can change
the behaviour of periodic jobs on your system. By default all the jobs
are mailed to root but you can have those jobs logged to a file instead.
Simply copy the periodic.conf file from /etc/defaults to /etc and change
it to your liking eg. instead of having daily_output="root" which sends
a mail to root you can have it log to a file
daily_output="/var/log/daily.log" Same apply's for weekly and monthly
jobs.

Personally I find it annoying when it sends out a mail for each job so I
change it to log to a file instead which I can check periodically (
excuse the pun ;)

As a side note if you don't want your cron jobs to output anything add
a  > /dev/null 2>&1 at the end of them.

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


RE: Help with a routing issue

2004-05-26 Thread Nelis Lamprecht
On Wed, 2004-05-26 at 12:28, Leon Botes wrote:

> The below is only sections of the output. Most of the individual hosts have
> been removed. Just a few examples left.
> 10.5/16192.168.254.29 UGSc0   11   fxp1
> 10.6/16192.168.254.12 UGSc00   fxp1
> 10.7/16192.168.254.12 UGSc00   fxp1
> 10.8/16192.168.254.12 UGSc00   fxp1
> 10.9/16192.168.254.27 UGSc00   fxp1
> 10.11/16   192.168.254.28 UGSc00   fxp1
> 10.12/16   192.168.254.33 UGSc00   fxp1
> 10.13/16   192.168.254.34 UGSc00   fxp1
> 10.14/16   192.168.252.23 UGSc00   fxp1
> 127.0.0.1  127.0.0.1  UH  0 2214lo0
> 192.168.0  192.168.254.23 UGSc00   fxp1
> 192.168.2  192.168.254.24 UGSc00   fxp1
> 192.168.7  192.168.254.31 UGSc00   fxp1
> 192.168.60 192.168.254.22 UGSc00   fxp1
> 192.168.252192.168.254.12 UGSc8  161   fxp1
> 192.168.253192.168.254.12 UGSc   13  212   fxp1
> 192.168.254link#2 UC 340   fxp1
> 192.168.254.1  00:20:ed:11:00:e9  UHLW2 1425lo0
> 192.168.254.22 00:02:6f:32:27:6b  UHLW1 1032   fxp1116
> 192.168.254.23 00:50:bf:97:e4:9d  UHLW1 2292   fxp1777
> 192.168.254.24 00:50:bf:43:2c:16  UHLW3 3476   fxp1421
> 192.168.254.25 00:a0:cc:db:03:75  UHLW1  836   fxp1   1117
> 192.168.254.27 00:02:6f:07:86:5b  UHLW1  224   fxp1878
> 192.168.254.28 link#2 UHLW10   fxp1
> 192.168.254.29 00:02:6f:07:86:57  UHLW1  139   fxp1924
> 192.168.254.30 00:02:6f:07:86:6a  UHLW0  779   fxp1741
> 192.168.254.31 00:02:6f:08:9f:a6  UHLW1  161   fxp1936
> 192.168.254.32 00:02:6f:04:7a:1e  UHLW0  165   fxp1 59
> 192.168.254.33 link#2 UHLW1   92   fxp1
> 192.168.255192.168.254.21 UGSc337107   fxp1
> 196.25.37.16/29link#1 UC  40   fxp0
> 196.25.37.17   00:e0:fc:0c:be:d9  UHLW   29  230   fxp0790
> 196.25.37.18   00:20:ed:11:00:e8  UHLW1 2127lo0
> 196.25.37.19   00:20:ed:11:00:e8  UHLW1  370lo0 =>
> 196.25.37.19/32link#1 UC  10   fxp0
> 196.25.37.20   00:0c:f1:ae:c6:99  UHLW144305   fxp0908
> 196.25.37.22   00:09:5b:3f:2f:63  UHLW111942   fxp0910

Can't see any peculiarities. Try adding the following route on the
client machine:

route add -host 196.25.37.18 192.168.254.1 255.255.255.255

See if that helps.

-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Help with a routing issue

2004-05-26 Thread Nelis Lamprecht
On Wed, 2004-05-26 at 10:55, Leon Botes wrote:
> I have a freebsd 4.7 box at a client.
> The box has an ip of 192.168.254.22
> The default gateway is 192.168.254.1 which is the inside interface of the
> gateway. The outside interface of the gateway is 196.25.37.18 and it also
> has an alias of 196.25.37.19.

Can you show us the routing on the server please rather than the client
? What is the subnet mask of the alias 196.25.37.19 ? It should have a
subnet of 255.255.255.255 as it's on the same network as 196.25.37.18.

Your /etc/rc.conf file should look something like this:

ifconfig_rl0="inet 196.25.37.18 netmask 255.255.255.0"
ifconfig_rl0_alias0="inet 196.25.37.19 netmask 255.255.255.255"

Your subnet in the above example may differ according to what block your
ISP has provided you.

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: portupgrade configuration

2004-05-26 Thread Nelis Lamprecht
On Wed, 2004-05-26 at 00:50, Robin Becker wrote:

> Is there a way to list all of my exceptional port settings? Can I make 
> these available to portupgrade automatically somehow?

portupgrade port settings can be set in the /usr/local/etc/pkgtools.conf
file.
See MAKE_ARGS in this file.

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: named in sandbox

2004-05-21 Thread Nelis Lamprecht
On Fri, 2004-05-21 at 13:16, Matthew Seaman wrote:

> However, remember that's written netbsd-centrically, and you'll have
> to adapt the instructions for use under FreeBSD -- use ports instead
> of pkgsrc, and you'll need to investigate what to do to make devfs(8)
> create the requited device nodes under the chroot, rather than using
> mknod.
> 

You can simply symlink the device nodes:

guardian# ls -la /var/chroot/named/dev/
total 4
drwxr-xr-x  2 bind  bind  512 Mar  3 11:21 .
drwx--  5 bind  bind  512 Mar  3 11:18 ..
lrwxr-xr-x  1 root  bind9 Mar  3 11:21 null -> /dev/null
lrwxr-xr-x  1 root  bind   11 Mar  3 11:21 random -> /dev/random
lrwxr-xr-x  1 root  bind9 Mar  3 11:21 zero -> /dev/zero

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Why has cvsup quit working for me?

2004-05-20 Thread Nelis Lamprecht
On Thu, 2004-05-20 at 04:10, Jonathon McKitrick wrote:
> I don't get it.  It was working last week.  Here's what I get now:
> 
> root:~# cvsup /usr/share/examples/cvsup/ports-supfile 
> Cannot get IP address of my own host -- is its hostname correct?
> root:~# 
> 

Try typing "hostname" from the command line. Then make sure that the
returned name has an ip address associated with it in /etc/hosts

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Special Keys in less

2004-05-19 Thread Nelis Lamprecht
On Wed, 2004-05-19 at 09:27, Volker Lieder wrote:
> Hello,
> i have a Freebsd 4.9 installed and have the following wish/problem.
> I want to use the Pos1 and End-Keys in less.
> For Pos1 the beginning of the file should be shown and for "End" the end.
> Has anybody an idea how to configure less so that this could work?
> 
> Volker

Hi,

I'm not sure what you mean by Pos1 key ? On my machine from both console
and gnome-terminal I can use the "Home" and "End" key to get to the
beginning and end of the file using versions 358 and 371 of less. It
works on both FreeBSD 4.x and 5.x in my case.

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: racoon and openssl

2004-05-17 Thread Nelis Lamprecht
On Mon, 2004-05-17 at 15:42, xavier collot wrote:
> Hi!!
>  
> I want use openssl but I don't find the directory where I can create my 
> authority of certification (in this directory we can find scripts to 
> allow the automation of the command of openssl). I have read that it is 
> in /usr/local/openssl/misc but I haven't this directory (I have freebsd 
> 5.2).

If you install openssl via ports ( /usr/ports/security/openssl/ ) you
will get the directory as described above. Remember to exclude openssl
from /etc/make.conf ( NO_OPENSSL=true ) if you decide to use the port.

>  
> Moreover I have an other problem: I can't install racoon.
> When I want to make the installation there is an "error 1".
>  

You will have to be more specific here and provide us with a little more
information.


Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


RE: ipmon logs to messages AND security

2004-05-17 Thread Nelis Lamprecht
On Mon, 2004-05-17 at 14:11, JJB wrote:
> Your solution of not using the syslog function does not answer his
> question. This is bad advice.

Quoted "Can you think of anything else that i might do?" 

and answered:

> Rather use:
> 
> ipmon_flags="-Dn /var/log/security"
> 

This is not bad advice, I was offering a solution to his problem.

-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Disk full / NFS, df, and du

2004-05-17 Thread Nelis Lamprecht
On Mon, 2004-05-17 at 05:04, Eric Anderson wrote:

> The problem I'm having is, after they do the rm's, it doesn't free the 
> disk space.  df shows it still being used, but du claims their 
> directories are empty. 

Please see 

http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/disks.html#DU-VS-DF

..regarding this. Maybe a kill -HUP nfsd might help ?

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: ipmon logs to messages AND security

2004-05-17 Thread Nelis Lamprecht
On Mon, 2004-05-17 at 13:53, Gareth Bailey wrote:
> Hi there, thanks for the sample rules and help in setting
> up IPF.
> 
> I have restarted since making the changes to syslogd.conf.
> I HUP'd syslogd anyway, still no luck. All ipf logs go to
> security and messages!
> 
> Can you think of anything else that i might do?
> 

Rather use:

ipmon_flags="-Dn /var/log/security"


Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Samba slow to start on bootup

2004-05-17 Thread Nelis Lamprecht
On Mon, 2004-05-17 at 11:56, Gareth Bailey wrote:
> I stopped samba using samba.sh stop, then started it again
> with samba.sh start. You are correct as far as the output
> goes, only "Samba" is written to console. But Samba took 30
> - 40 seconds to load! It seems Samba is actually causing
> the pause.
> 
> Why would this be?
> 
> Thanks
> Gareth

Try running smbd in debug mode smbd -F -S -d3 and see if anything stands
out. Perhaps a server you have specified in your configuration file is
unavailable or not responding. Do the same for nmbd.

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Samba slow to start on bootup

2004-05-17 Thread Nelis Lamprecht
On Mon, 2004-05-17 at 10:48, Gareth Bailey wrote:
> Hi there,
> 
> Recently, Samba has started to take about 30secs to start
> on system boot. Output to console says:
> ...
> SambaStarting
> ...
> The 30 (or more) second break takes place between the
> "Samba" and "Starting" output. What could this be?, it
> never used to take so long. 
> 
> I have recently upgraded to version samba-2.2.8a_2 on my
> 5.2 Release server. Is it possible that something else is
> causing the pause? There aren't any error messages.

Hi,

I doubt it is samba that is the cause of your problem. The reason I say
this is because you mention the 30 sec break between Samba and Starting
and the latest Samba script doesn't echo Starting. You should be able to
tell by running the script manually.

/usr/local/etc/rc.d/samba.sh stop/start

I suggest you look at what loads after Samba. Check the above directory. 

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: ICQ question

2004-05-13 Thread Nelis Lamprecht
On Thu, 2004-05-13 at 10:59, Stephen Liu wrote:
> Hi folks,
> 
> FreeBSD 5.2
> 
> Has any folk run 'Kxicq' on FreeBSD before.  Can I
> talk to my friend if he runs MSN on Windows?  If NO
> kindly advise what will be the solution.
> 

you may want to try Gaim http://gaim.sourceforge.net/ for MSN support
and others.


/usr/ports/net/gaim


Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: bge0 Watchdog timeout

2004-04-05 Thread Nelis Lamprecht
On Mon, 2004-04-05 at 13:52, Frank Bonnet wrote:
> Hi
> 
> I've recently installed a 5.2.1 on a HP box that use a Broadcom BCM570x 
> gigabit ethernet controller chips
> 
> When booting up the machine I have the following error message
> to the console
> 
> bge0 Watchdog timeout

I know the BCM5704 had a problem with it's mbuf space,
see http://unix.derkeiler.com/Mailing-Lists/FreeBSD/net/2003-08/0096.html
but this has since been fixed. I'm curious as to which version you have ?

guardian# grep bge /var/run/dmesg.boot
bge0:  mem 0xf5fe-0xf5fe 
irq 28 at device 4.0 on pci0
bge0: Ethernet address: 00:0b:cd:cc:79:d5
miibus0:  on bge0
bge1:  mem 0xf7ff-0xf7ff 
irq 22 at device 1.0 on pci5
bge1: Ethernet address: 00:08:02:91:3a:fd
miibus1:  on bge1

Mine are all working fine on 5.2.1

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Mozilla -- No running window.

2004-04-05 Thread Nelis Lamprecht
On Mon, 2004-04-05 at 12:59, Malcolm Kay wrote:
> Today I installed FreeBSD4.9 from an ISO release
> recorded on a CD; together with X windows (4.3).
> 
> I've set ctwm as my windows manager via ports. And all appears
> to be working well.
> 
> I installed mozilla-gtk2-1.4 from the packages on the
> distribution disk. This appeared to proceed OK. But when I attempt
> to run mozilla from an xterm:
>   QuoVadis:> mozilla

Last I checked mozilla-gtk2 uses it's own startup script
/usr/X11R6/bin/mozilla-gtk2 which points it's lib path to
/usr/X11R6/lib/mozilla-gtk2 instead of the usual /usr/X11R6/lib/mozilla

Try starting it with QuoVadis:>mozilla-gtk2 about:blank

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: changing root password

2004-04-05 Thread Nelis Lamprecht
On Mon, 2004-04-05 at 12:37, Richard P. Williamson wrote:

> The behavior I'm seeing is that the /original/ /etc/ password 
> files and databases are updated, and not the [/mnt]/etc/ password
> files.

if you have access to mount_null then _maybe_ you can mount_null
/mnt/etc /original/etc and then try change passwd ?

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: opie

2004-04-05 Thread Nelis Lamprecht
On Mon, 2004-04-05 at 12:06, Albert Shih wrote:

> But how can I do that if i want do a make buildworld and run regulary a
> cvsup for /usr/src. 
> 

Not sure I understand you but once you build the binary/s it's not going
to be overwritten by a buildworld as it's not part of the base system,
at least not since I last checked. Any new versions that come out of
your cvsup then you just simply rebuild the binaries from the source
directory overwriting your currently installed version. You can also do
a "make uninstall" if you encounter any problems.

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: opie

2004-04-05 Thread Nelis Lamprecht
On Mon, 2004-04-05 at 11:33, Albert Shih wrote:
> Hi
> 
> How can I enable opie telnetd in my FreeBSD telnetd ?
> 
> I've put only
> 
>   deny my_ip_class
>   deny 0.0.0.0 0.0.0.0
> 
> in the /etc/opieaccess
> 
> but I always can login into whitout any opie key.

did you configure opie to use a access list ( not used by default ) ?

sh configure --enable-access-file=/etc/opieaccess

from /usr/src/contrib/opie; read the INSTALL file for further info.

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: phpmyadmin - users not seeing specific database

2004-04-05 Thread Nelis Lamprecht
On Mon, 2004-04-05 at 10:21, Noah wrote:

> I was assuming with the
> multiuser functionality that users could only view databases for which they
> have granted access to.  is there something else i need to configure here?

Correct but you obviously have to setup each users permissions
correctly. Login as root and verify that your users do not have any
"Global Privileges" set and only privileges for the databases you have
specified. My guess is they all have at least the "Select" privilege.


Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Upgrading Perl within 5.2

2004-04-02 Thread Nelis Lamprecht
On Thu, 2004-04-01 at 17:05, Jesse Sheidlower wrote:
> I'm sure this is a silly question, but. I know about use.perl and
> so forth for the 4.x series.
> 
> Yesterday I installed FreeBSD 5.2.1, and the active Perl port
> is /usr/ports/lang/perl, which is v. 5.6.1. I'd like to upgrade
> to 5.8.2, which is in /usr/ports/lang/perl5.8 and thus I can't
> just do "portupgrade perl".
> 
> Exactly what do I have to do to accomplish this? "portinstall
> perl5.8" doesn't work ("No such installed package nor such port..."),
> nor does "portinstall perl-5.8.2_2" (which is said to be the
> package name in the README file). The PORTNAME given in the 5.8
> Makefile is just "perl".
> 
> I assume I could just do a make install from the perl5.8 
> directory, but how do I do it with portupgrade? And then how
> do I get rid of the 5.6 version and rebuild things with 5.8?

Correct. Just run a make install from perl5.8 directory and it will
install it to a new location without interfering with the "base" install
of perl. Is it really necessary to upgrade ? There is nothing in ports
that I know of that will not work with perl5.6
 
There is no need to remove the 5.6 version. The installation will add
some information to your /etc/make.conf as well as make other changes
when you run use.perl port which will tell any future installations that
require perl which version to use. If you have to remove perl then cd
into /usr/local/lib/perl5 and remove the 5.6 directory as well as the
one under site_perl but not recommended. 


Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


RE: Apache dies for the second night in a row at the same time.

2004-04-01 Thread Nelis Lamprecht
On Thu, 2004-04-01 at 10:46, Kevin Greenidge wrote:
> I was running Perl 5.8.0 before the upgrade. I think I will try to
> install Cwd.pm from CPAN since I don't think I can downgrade Perl
> easily.

Or you could just symlink your older version to the newer.

ln -s /usr/local/lib/perl5/5.8.2 /usr/local/lib/perl5/5.8.0

and

ln -s /usr/local/lib/perl5/site_perl/5.8.2
/usr/local/lib/perl5/site_perl/5.8.0

If you haven't got that many programs/modules that rely on perl then you
would be better off just re-installing those programs.


>  
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Wayne Pascoe
> Sent: Thursday, April 01, 2004 2:29 AM
> To: Kevin Greenidge
> Cc: [EMAIL PROTECTED]
> Subject: Re: Apache dies for the second night in a row at the same time.
> 
> On Thu, Apr 01, 2004 at 01:47:37AM -0600, Kevin Greenidge wrote:
> 
> > System: FreeBSD 4.9
> > Current Perl Version: 5.8.2
> 
> What was your version of perl before the port upgrade ? You might just
> be better off going back to whatever it was
> 
> > Can't locate Cwd.pm in @INC (@INC contains:
> > /usr/local/lib/perl5/site_perl/5.8.0/mach
> > /usr/local/lib/perl5/site_perl/5.8.0 /usr/local/lib/perl5/site_perl
> > /usr/local/lib/perl5/5.8.0/BSDPAN /usr/local/lib/perl5/5.8.0/mach
> > /usr/local/lib/perl5/5.8.0 .) at (eval 2) line 1.
> 
> Try installing Cwd from CPAN. Then do a perl -c on whatever script is
> running from cron at this time and find out what other modules it
> requires.
> 
> HTH.
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: Apache2 crashing

2004-03-31 Thread Nelis Lamprecht
On Thu, 2004-04-01 at 08:05, Nelis Lamprecht wrote:
> Hi,
> 
> After upgrading to Apache 2.0.49 and PHP4.3.5_7, Apache now crashes
> every time I do a graceful restart or if I send it a kill 1. I first
> noticed this last night after the upgrade during log rotation when I got
> this error message:
> 
> [Thu Apr 01 00:00:20 2004] [notice] seg fault or similar nasty error detected in the 
> parent process
> 
> My guess is this is a PHP bug or a really bad April fools joke ;-)
> Anybody else have the same problem ?

Damn, I was hoping I was wrong. Apparently the fix is in cvs and
hopefully we can get this port updated.

http://bugs.php.net/bug.php?id=27810

Regards,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Apache2 crashing

2004-03-31 Thread Nelis Lamprecht
Hi,

After upgrading to Apache 2.0.49 and PHP4.3.5_7, Apache now crashes
every time I do a graceful restart or if I send it a kill 1. I first
noticed this last night after the upgrade during log rotation when I got
this error message:

[Thu Apr 01 00:00:20 2004] [notice] seg fault or similar nasty error detected in the 
parent process

My guess is this is a PHP bug or a really bad April fools joke ;-)
Anybody else have the same problem ?

Cheers,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: How To Upgrade to Perl 5.8 on 4.9 System?

2004-03-24 Thread Nelis Lamprecht
On Wed, 2004-03-24 at 03:41, Chuck Swiger wrote:
> Drew Tomlinson wrote:
> > I'm using 4.9-RELEASE.  Is is possible to upgrade Perl from the default 
> > 5.005 version to 5.8.2?
> 
> Yes.
> 
> > Are there any steps required beyond installing the port?
> 
> Try:
> 
> cd /usr/ports/lang/perl5.8
> make install
> use.perl port

Be warned. After you have upgraded perl you will be required to
re-install any programs/modules that depend on it eg. Apache
You will receive a location error pointing to your previous perl version
if you don't.

Regards,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Slow transfer speeds with U320 drives and HP Smart Array 641

2004-03-24 Thread Nelis Lamprecht
Hi,

I posted this to freebsd-hardware but haven't received a response so thought I'd
try this list. Please excuse the cross-posting.

With the ciss driver on my HP ProLiant ML350 I've noticed the transfer
speed on my RAID controller is only 135.168MB/s.

da0 at ciss0 bus 0 target 0 lun 0
da0:  Fixed Direct Access SCSI-0 device
da0: 135.168MB/s transfers
da0: 69459MB (142253280 512 byte sectors: 255H 32S/T 17433C)

Both my drives on the RAID controller are U320 72GB pluggable SCSI's.
The RAID card has the optional 64MB battery backed cache enabler installed.
I also have a AIC 50/100 Tape Drive in the machine which is connected to the
onboard SCSI interface.

ahc0:  
aic7899: Ultra160 Wide Channel A, SCSI Id=7, 32/253 SCBs
ahc1:  
aic7899: Ultra160 Wide Channel B, SCSI Id=7, 32/253 SCBs

sa0 at ahc1 bus 0 target 6 lun 0
sa0:  Removable Sequential Access SCSI-2 device
sa0: 40.000MB/s transfers (20.000MHz, offset 7, 16bit)

My question is why the slow transfer speed of the RAID controller ? Does this
have anything to do with the slower SCSI Tape Drive/U160 channels or is this a 
limitation of the ciss driver ? The U320 drives are not in any way connected to
the slower drive so it shouldn't effect the speed or should it ?

Hopefully someone here has a similar system and can offer me some insight. 
Thanks for your reply.

Kind Regards,
Nelis



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


using ipfw and ipf/ipnat together

2004-02-16 Thread Nelis Lamprecht
Hi,

I would like to make use of ipfw/dummynet traffic shaper and use it
together with ipnat/ipf's filtering. Hope this is possible ? This is a
personal preference so no need to tell me why I should just use ipfw
etc. 

Can someone suggest what I would or would not need to use in my rc.conf
and kernel please. I have selected the following ( FreeBSD 5.2R ):

rc.conf:

ipfilter_enable="YES"
ipfilter_program="/sbin/ipf"
ipfilter_rules="/etc/ipf.rules"
ipfilter_flags=""
ipnat_enable="YES"
ipnat_program="/sbin/ipnat"
ipnat_rules="/etc/ipnat.rules"
ipmon_enable="YES"
ipmon_program="/sbin/ipmon"
ipmon_flags="-Dsvn"
ipnat_enable="YES"

kernel config:

options IPFILTER#ipfilter support
options IPFILTER_LOG#ipfilter logging
options PFIL_HOOKS  #required by IPFILTER
options IPFILTER_DEFAULT_BLOCK  #block all packets by default
options IPFIREWALL  #firewall
options IPFIREWALL_DEFAULT_TO_ACCEPT#allow everything by default
options DUMMYNET#bandwidth limiter
options IPSTEALTH   #support for stealth forwarding

Seeing as though I'm not using ipfw filtering I thought I could just
allow everything through by default. Will dummynet still work if
IPFIREWALL_DEFAULT_TO_ACCEPT is set ?

Any suggestions appreciated.

Thanks.

-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


MASTER_SITE_OVERRIDE make.conf variables in 5.x ?

2004-02-10 Thread Nelis Lamprecht
Hi,

In 4.x you can use variables such as MASTER_SITE_OVERRIDE to add in your
local mirrors for the distribution files. Where in 5.x do you put these
? I copied my usual make.conf settings across to a 5.x machine and it
doesn't seem to be working.

Thanks.

-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


disabling nfs in 5.2R-p2 ?

2004-02-10 Thread Nelis Lamprecht
Hi,

Out of curiosity how do you disable local NFS asynchronous I/O server/s
in 5.2 ?

I thought a simple..

nfs_server_enable="NO"
nfs_client_enable="NO"

in rc.conf would disable it completely but after rebooting I still see:

guardian# ps -aux | grep nfs
root 97  0.0  0.0 0   12  ??  IL3:39PM   0:00.00  (nfsiod 0)
root 98  0.0  0.0 0   12  ??  IL3:39PM   0:00.00  (nfsiod 1)
root 99  0.0  0.0 0   12  ??  IL3:39PM   0:00.00  (nfsiod 2)
root100  0.0  0.0 0   12  ??  IL3:39PM   0:00.00  (nfsiod 3)

thanks.
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


Re: builworld failure after cvsup on 4.9

2004-02-09 Thread Nelis Lamprecht
To follow up on my original posting:

Buildworld appears to fail with the below error when one of the
following is omitted from the base system:

NO_BIND=true# do not build BIND
NO_OPENSSH= true# do not build OpenSSH
NO_OPENSSL= true# do not build OpenSSL (implies NO_OPENSSH)
NO_SENDMAIL=true# do not build sendmail and related programs
NOGAMES=true# do not build games (games/ subdir)

Unfortunately I do not have the time to go through each to find out
which is the cause of the problem, all I can say is when I commented out
all so everything was included buildworld was successful.

Regard,
Nelis

On Mon, 2004-02-09 at 11:12, Nelis Lamprecht wrote:
> Hi,
> 
> I am busy setting up a new dual HP server ( ML350 Xeon 2.8ghz ) and have
> cvsup the latest source and compiling just the basic options to get SMP
> working so I can continue my work. Make buildworld is failing with the
> following error which makes no sense to me. ( using FreeBSD 4.9 -
> RELENG_4 )
> 
> ===> usr.bin
> "/usr/src/share/mk/bsd.subdir.mk", line 60: Inconsistent operator for
> ftp
> make: fatal errors encountered -- cannot continue
> *** Error code 1
>  
> Stop in /usr/src.
> *** Error code 1
>  
> Stop in /usr/src.
> *** Error code 1
>  
> Stop in /usr/src.
> 
> The line/s in question:
> 
> ${SUBDIR}::
> @if test -d ${.TARGET}.${MACHINE_ARCH}; then \
> cd ${.CURDIR}/${.TARGET}.${MACHINE_ARCH}; \
> else \
> cd ${.CURDIR}/${.TARGET}; \
> fi; \
> ${MAKE} all
> 
> 
> Any idea's ?
> 
> Below is my kernel config:
> 
> machine i386
> cpu I686_CPU
> ident   GUARDIAN
> maxusers0
>  
>
> options INET#InterNETworking
> options FFS #Berkeley Fast Filesystem
> options FFS_ROOT#FFS usable as root device [keep
> this!]
> options SOFTUPDATES #Enable FFS soft updates support
> options UFS_DIRHASH #Improve performance on big
> directories
> options MFS #Memory Filesystem
> options MD_ROOT #MD is a potential root device
> options NFS #Network Filesystem
> options NFS_ROOT#NFS usable as root device, NFS
> required
> options MSDOSFS #MSDOS Filesystem
> options CD9660  #ISO 9660 Filesystem
> options CD9660_ROOT #CD-ROM usable as root, CD9660
> required
> options PROCFS  #Process filesystem
> options COMPAT_43   #Compatible with BSD 4.3 [KEEP
> THIS!]
> options SCSI_DELAY=5000 #Delay (in ms) before probing
> SCSI
> options UCONSOLE#Allow users to grab the console
> options USER_LDT#allow user-level control of
> i386 ldt
> options USERCONFIG  #boot -c editor
> options VISUAL_USERCONFIG   #visual boot -c editor
> options KTRACE  #ktrace(1) support
> options SYSVSHM #SYSV-style shared memory
> options SYSVMSG #SYSV-style message queues
> options SYSVSEM #SYSV-style semaphores
> options P1003_1B#Posix P1003_1B real-time
> extensions
> options _KPOSIX_PRIORITY_SCHEDULING
> options ICMP_BANDLIM#Rate limit bad replies
> options KBD_INSTALL_CDEV# install a CDEV entry in /dev
> options AHC_REG_PRETTY_PRINT# Print register bitfields in
> debug
>  
> # Firewall support.
> #options IPFILTER
> #options IPFILTER_LOG
> #options IPFILTER_DEFAULT_BLOCK
>  
> # To make an SMP kernel, the next two are needed
> options SMP # Symmetric MultiProcessor
> Kernel
> options APIC_IO # Symmetric (APIC) I/O
>  
> device  isa
> device  pci
>  
> # Floppy drives
> device  fdc0at isa? port IO_FD1 irq 6 drq 2
> device  fd0 at fdc0 drive 0
> device  fd1 at fdc0 drive 1
>  
> # ATA and ATAPI devices
> device  ata
> device  atadisk # ATA disk drives
> device  atapicd # ATAPI CDROM drives
> device  atapifd # ATAPI floppy drives
> device  atapist # ATAPI tape drives
> options ATA_STATIC_ID 

Re: builworld failure after cvsup on 4.9

2004-02-09 Thread Nelis Lamprecht
On Mon, 2004-02-09 at 14:45, Kent Stewart wrote:
> On Monday 09 February 2004 01:12 am, Nelis Lamprecht wrote:
> > Hi,
> >
> > I am busy setting up a new dual HP server ( ML350 Xeon 2.8ghz ) and
> > have cvsup the latest source and compiling just the basic options to
> > get SMP working so I can continue my work. Make buildworld is failing
> > with the following error which makes no sense to me. ( using FreeBSD
> > 4.9 - RELENG_4 )
> 
> Are you using one of the versions of bash for your shell? Someone had a 
> problem like that before and people running csh didn't.

I use bash ( bash-2.05b.007 off the cd ) as a user, csh for root. Still busy
downloading src from a local mirror after which I'll do a quick cvsup from the 
main freebsd server, hopefully I'll have no more problems.

Nelis




signature.asc
Description: This is a digitally signed message part


Re: builworld failure after cvsup on 4.9

2004-02-09 Thread Nelis Lamprecht
On Mon, 2004-02-09 at 13:32, Kris Kennaway wrote:

> 
> Please post your supfile; it's possible you have updated to the wrong
> version.

I'm using *default release=cvs tag=RELENG_4 as mentioned. I have several
servers using the same but I suspect the src distribution on the disk to
be at fault and am now downloading the entire set. I first tried
removing the src and then re-installing from the cd, then I upgraded it
( tried 2 diff cvsup mirrors )which gave me the same error. I'll post my
result after cvsup of the entire src.

thanks,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


builworld failure after cvsup on 4.9

2004-02-09 Thread Nelis Lamprecht
   at isa? disable port IO_COM3 irq 5
#device sio3at isa? disable port IO_COM4 irq 9
 
# Parallel port
device  ppc0at isa? irq 7
device  ppbus   # Parallel port bus (required)
device  lpt # Printer
device  plip# TCP/IP over parallel
device  ppi # Parallel port interface device
 
# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these
NICs!
device  miibus  # MII bus support
device  bge # Broadcom BCM570x (``Tigon III'')
 
# Pseudo devices - the number indicates how many units to allocate.
pseudo-device   loop# Network loopback
pseudo-device   ether   # Ethernet support
pseudo-device   sl  1   # Kernel SLIP
pseudo-device   ppp 1   # Kernel PPP
pseudo-device   tun # Packet tunnel.
pseudo-device   pty # Pseudo-ttys (telnet etc)
pseudo-device   md  # Memory "disks"
pseudo-device   gif # IPv6 and IPv4 tunneling
pseudo-device   faith   1   # IPv6-to-IPv4 relaying (translation)
 
# The `bpf' pseudo-device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
pseudo-device   bpf #Berkeley packet filter
 
# USB support
device  ohci# OHCI PCI->USB interface
device  usb # USB Bus (required)
device  ugen# Generic
device  uhid# "Human Interface Devices"
device  ukbd# Keyboard
device  ulpt# Printer
device  umass       # Disks/Mass storage - Requires scbus
and da

Thanks,
-- 
Nelis Lamprecht
PGP: http://www.8ball.co.za/pgpkey/nelis.asc
"Unix IS user friendly.. It's just selective about who its friends are."


signature.asc
Description: This is a digitally signed message part


  1   2   >