Sendmail masquerading breaks local mail delivery

2005-05-03 Thread Paul A. Hoadley
Hello,

Because of a bizarre email topology that exists at an office I have a
5.3 machine installed at, I have recently configured sendmail to
masquerade the hostname of outgoing mail to drop the machine name
part.  This is in bert.coremedicalsolutions.com.submit.mc:

divert(-1)
# Comments...
divert(0)dnl
VERSIONID(`$FreeBSD: src/etc/sendmail/freebsd.submit.mc,v 1.1 2003/10/19 
00:03:13 gshapiro Exp $')
define(`confCF_VERSION', `Submit')dnl
define(`__OSTYPE__',`')dnl dirty hack to keep proto.m4 from complaining
define(`_USE_DECNET_SYNTAX_', `1')dnl support DECnet
define(`confTIME_ZONE', `USE_TZ')dnl
define(`confDONT_INIT_GROUPS', `True')dnl
define(`confBIND_OPTS', `WorkAroundBroken')dnl
dnl
dnl If you use IPv6 only, change [127.0.0.1] to [IPv6:::1]
MASQUERADE_AS(coremedicalsolutions.com)dnl
FEATURE(`masquerade_envelope')dnl
FEATURE(`msp', `[127.0.0.1]')dnl

As a result of this, though, all the periodic mails and the output
from cron are now (I gather) having the local hostname stripped, and
being sent off to the MX-listed mailer for the wider domain at an ISP.
How do I get local mail delivered locally, while still masquerading
the domain name for non-local mail?


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpWvXb9rn6qy.pgp
Description: PGP signature


Re: Sendmail masquerading breaks local mail delivery

2005-05-03 Thread Paul A. Hoadley
Hi Charles,

On Tue, May 03, 2005 at 10:53:55PM -0400, Charles Swiger wrote:
 On May 3, 2005, at 10:36 PM, Paul A. Hoadley wrote:
  This is in bert.coremedicalsolutions.com.submit.mc:
 
 I'm not convinced it's a good idea to do MASQUERADE'ing in the
 submit.mc, use the normal sendmail.mc file for the MTA, not the MSA.

Every time I think I have a handle on Sendmail, I go and do something
like this.  Moving the masquerading to the local version of
sendmail.mc was sufficient to fix the problem.  Thanks.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgph3BexgPzKo.pgp
Description: PGP signature


Re: Using PPPoE

2005-04-14 Thread Paul A. Hoadley
Hello,

On Wed, Apr 13, 2005 at 10:04:14AM -0300, Alexandre Vasconcelos wrote:

 default:
  set log phase chat connect lcp ipcp tun command
  set ifaddr 10.0.0.140/32 0.0.0.0/0
 
 brtelecom:
 set device PPPoE:sis0
 set authname myusername
 set authkey mypassword
 set dial
 set login
 add default HISADDR

Presumably this is a cut-and-paste artefact, but the space in column
one of non-label lines is significant.  I assume it's correct in
/etc/ppp/ppp.conf, since you seem to be getting somewhere according to
ppp.log.  Also, some ISPs need a 'provider' name after the interface
name (e.g. ' set device PPPoE:sis0:internode').  Again, this may not
be your problem, but might be worth checking.

 When I run ppp -ddial brt modem lights start to blink, but ifconfig
 shows interface tun0 without any IP address and /var/log/ppp.log
 shows:

Again, presumably just a typo, but you'd need to run 'ppp -ddial
brtelecom'.  Anyway, start with interactive mode.  Just run 'ppp' and
then 'dial brtelecom' at the prompt.  'man ppp' describes how the
prompt changes to indicate how far you're getting in the connection
process.

 [EMAIL PROTECTED] ppp]# tail -f /var/log/ppp.log
 Apr 12 01:13:01 alex ppp[9723]: tun0: IPCP: deflink: Oops, RCR in Initial.
 Apr 12 01:13:04 alex ppp[9723]: tun0: IPCP: deflink:
 RecvConfigReq(112) state = Initial
 Apr 12 01:13:04 alex ppp[9723]: tun0: IPCP:  IPADDR[6] 200.103.98.174
 Apr 12 01:13:04 alex ppp[9723]: tun0: IPCP: deflink: Oops, RCR in Initial.
 Apr 12 01:13:07 alex ppp[9723]: tun0: IPCP: deflink:

I presume this means you're getting as far as IPCP.  Can you post a
log for a whole connection attempt?


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpr3s2LyUbJ0.pgp
Description: PGP signature


Re: Using PPPoE

2005-04-14 Thread Paul A. Hoadley
On Wed, Apr 13, 2005 at 09:28:11AM -0400, [EMAIL PROTECTED] wrote:

 This is described in detail in the FreeBSD Install book at
 
 http://freebsd.easyasthat.co.uk/

Do you mean here?

http://freebsd.easyasthat.co.uk/05.08-PPPoE_ppp.htm

The content there looks only marginally different to the Handbook
which the OP has already read.  (In fact, some of the text looks even
less than marginally different to the Handbook---for example, start
reading at, Sometimes it will be necessary to use a)

Is that you, Joe?


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpWlSoOhCnmw.pgp
Description: PGP signature


Re: Using PPPoE

2005-04-14 Thread Paul A. Hoadley
On Thu, Apr 14, 2005 at 08:40:18AM -0300, Alexandre Vasconcelos wrote:

 It's working now!  Commenting 'set ifaddr' line and seting
 ifconfig_ppp0=DHCP,

This surprises me, since you shouldn't have a ppp0 interface, and
PPPoE doesn't use DHCP to supply IP addresses.

 ppp_enable, ppp_mode, ppp_profile on /etc/rc.conf did the job.

And this should only affect automatic startup at boot-time.
Everything you've changed here should have no effect on running ppp
from the command line.

But I'm glad it worked.  :-)


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpMouEooXBaq.pgp
Description: PGP signature


Re: hyper threading.

2005-03-26 Thread Paul A. Hoadley
On Sat, Mar 26, 2005 at 11:45:21PM +0100, Anthony Atkielski wrote:

 Where can I see the measurements?

Here are some measurements.  A few weeks ago I ran Unixbench 4.1.0
(/usr/ports/benchmarks/unixbench) on a P4 2.8GHz with and without
hyperthreading enabled.  I note a slight difference in the 10 minute
load average in favour of the uniprocessor run (0.00 vs 0.10 in the
hyperthreading run), though I doubt this alone could account for a 15%
difference in total score.


Uniprocessor run:
-
  BYTE UNIX Benchmarks (Version 4.1.0)
  System -- bigbird.logicsquad.net
  Start Benchmark Run: Sun Feb 20 08:23:08 CST 2005
   14 interactive users.
   8:23AM  up 3 days, 14:37, 14 users, load averages: 0.00, 0.00, 0.00
  -r-xr-xr-x  1 root  wheel  105624 Feb 12 00:09 /bin/sh
  /bin/sh: ELF 32-bit LSB executable, Intel 80386, version 1 (FreeBSD), for 
FreeBSD 5.3-CURRENT (rev 1), dynamically linked (uses shared libs), stripped
  /dev/mirror/gm0s1f 164607432 5190146 146248692 3%/usr
Dhrystone 2 using register variables 4438000.0 lps   (10.0 secs, 10 samples)
Double-Precision Whetstone  786.2 MWIPS (10.4 secs, 10 samples)
System Call Overhead 387391.7 lps   (10.0 secs, 10 samples)
Pipe Throughput  595757.1 lps   (10.0 secs, 10 samples)
Pipe-based Context Switching  94343.7 lps   (10.0 secs, 10 samples)
Process Creation   5143.3 lps   (30.0 secs, 3 samples)
Execl Throughput   1127.4 lps   (29.9 secs, 3 samples)
File Read 1024 bufsize 2000 maxblocks637932.0 KBps  (30.0 secs, 3 samples)
File Write 1024 bufsize 2000 maxblocks86241.0 KBps  (30.0 secs, 3 samples)
File Copy 1024 bufsize 2000 maxblocks 84790.0 KBps  (30.0 secs, 3 samples)
File Read 256 bufsize 500 maxblocks  182188.0 KBps  (30.0 secs, 3 samples)
File Write 256 bufsize 500 maxblocks  83127.0 KBps  (30.0 secs, 3 samples)
File Copy 256 bufsize 500 maxblocks   53860.0 KBps  (30.0 secs, 3 samples)
File Read 4096 bufsize 8000 maxblocks1662218.0 KBps  (30.0 secs, 3 samples)
File Write 4096 bufsize 8000 maxblocks47821.0 KBps  (30.0 secs, 3 samples)
File Copy 4096 bufsize 8000 maxblocks 47003.0 KBps  (30.0 secs, 3 samples)
Shell Scripts (1 concurrent)   2584.9 lpm   (60.0 secs, 3 samples)
Shell Scripts (8 concurrent)353.3 lpm   (60.0 secs, 3 samples)
Shell Scripts (16 concurrent)   177.0 lpm   (60.0 secs, 3 samples)
Arithmetic Test (type = short)   687842.3 lps   (10.0 secs, 3 samples)
Arithmetic Test (type = int) 697114.1 lps   (10.0 secs, 3 samples)
Arithmetic Test (type = long)697313.5 lps   (10.0 secs, 3 samples)
Arithmetic Test (type = float)   658678.8 lps   (10.0 secs, 3 samples)
Arithmetic Test (type = double)  658663.3 lps   (10.0 secs, 3 samples)
Arithoh  14359071.4 lps   (10.0 secs, 3 samples)
C Compiler Throughput  1373.3 lpm   (60.0 secs, 3 samples)
Dc: sqrt(2) to 99 decimal places 161336.3 lpm   (30.0 secs, 3 samples)
Recursion Test--Tower of Hanoi98086.8 lps   (20.0 secs, 3 samples)


 INDEX VALUES
TESTBASELINE RESULT  INDEX

Dhrystone 2 using register variables116700.0  4438000.0  380.3
Double-Precision Whetstone  55.0  786.2  142.9
Execl Throughput43.0 1127.4  262.2
File Copy 1024 bufsize 2000 maxblocks 3960.084790.0  214.1
File Copy 256 bufsize 500 maxblocks   1655.053860.0  325.4
File Copy 4096 bufsize 8000 maxblocks 5800.047003.0   81.0
Pipe Throughput  12440.0   595757.1  478.9
Pipe-based Context Switching  4000.094343.7  235.9
Process Creation   126.0 5143.3  408.2
Shell Scripts (8 concurrent) 6.0  353.3  588.8
System Call Overhead 15000.0   387391.7  258.3
 =
 FINAL SCORE 270.4


Hyperthreading run:
---
  BYTE UNIX Benchmarks (Version 4.1.0)
  System -- bigbird.logicsquad.net
  Start Benchmark Run: Sun Feb 20 17:22:33 CST 2005
   2 interactive users.
   5:22PM  up 2 mins, 2 users, load averages: 0.31, 0.23, 0.10
  -r-xr-xr-x  1 root  wheel  105624 Feb 12 00:09 /bin/sh
  /bin/sh: ELF 32-bit LSB executable, Intel 80386, version 1 (FreeBSD), for 
FreeBSD 5.3-CURRENT (rev 1), dynamically linked (uses shared libs), stripped
  /dev/mirror/gm0s1f 164607432 5264584 146174254 3%/usr
Dhrystone 2 using register variables 4463262.0 lps   (10.0 secs, 10 samples)
Double-Precision Whetstone  785.8 MWIPS 

Re: hyper threading.

2005-03-26 Thread Paul A. Hoadley
Hello,

On Sat, Mar 26, 2005 at 03:54:06PM -0800, John Pettitt wrote:
 
 Paul A. Hoadley wrote:
 
 I note a slight difference in the 10 minute load average in favour
 of the uniprocessor run (0.00 vs 0.10 in the hyperthreading run),
 though I doubt this alone could account for a 15% difference in
 total score.

 Notice the HT run had load on the box (0.31) when it started.  If
 you're going to run benchmarks you need to start with a clean reboot
 before each run and make sure all the background daemons have been
 killed and and the load is zero.

You are absolutely right, and I did note the difference in load
averages.  I'm not making any claims---someone asked for measurements,
and I happened to have these handy.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpvaZGNUOBes.pgp
Description: PGP signature


Re: First Time Experience-FreeBSD/i368 login:

2005-03-22 Thread Paul A. Hoadley
On Wed, Mar 23, 2005 at 04:02:03PM +1100, Johaness Terra wrote:

 The server, I understand is a proxy mail server running on
 FreeBSD/i386. I am new and the management wants me to add a new
 email account user on the server. I am really having a hard time and
 would very much appreciate any simple assistance.

 I am now stucked at FreeBSD/i386 (proxy.mrdc.com.pg) (ttyvo)
 Login:
  
 Please assist. I would very much appreciate 

The system is waiting for you to type a username.  If you have one,
type it in and hit Return.  The system will then prompt you for your
password.  Again, type it in (it won't appear on the screen) and press
Return.  If you don't have one, you can't proceed any further.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpJ6qkd1TdOe.pgp
Description: PGP signature


Re: Setting up own domain and mailserver

2005-02-15 Thread Paul A. Hoadley
On Mon, Feb 14, 2005 at 08:56:01PM -0800, Luke wrote:

 On Sat, 12 Feb 2005, RL wrote:
 
 1. I have adelphia cable internet.  I would like to get a dyndns or
 no-ip.com account to have a static IP for my new godaddy domain.
 Simple enough.  However, I would like to also do my own DNS to
 learn more about it.  Will I be able to do this if I set my
 nameserver on godaddy to my box's dyndns address?  And from there
 can I set up A records, MX Records, etc and all that good stuff?

 For a domain name to be effective, you need a public and highly
 referenced source to map your name to your IP address.

You certainly need a DNS server.

 That's what these public registrars do.

The registrar certainly puts an NS record in the top-level zone file.
Beyond that, some of them no doubt provide nameservice for an extra
fee, or are associated with some DNS provider.  But registration of
the name and provision of DNS are separate issues.

 You want them to map your name to your address.  You can't move that
 service to your own box because... well.. how would anybody find you
 in the first place?

While your conclusion might be true for the OP (we have established
elsewhere that he almost certainly can't do what he was hoping he
could), it's not about being able to find his machine.  If he
fulfilled the technical requirements (static IP addresses, more than
one host providing DNS), he certainly could point the world at his own
box by nominating it, and another, as the namerservers with his
registrar.

 Technically you can do SOME of the domain service yourself if you're
 running a network.  Public DNS servers might get them to
 yourdomain.com, and then you could direct them to
 machine1.yourdomain.com, machine2.yourdomain.com, etc.  but you
 probably don't have any need for something like that at home.

Unless you're describing port redirection of some kind, you're
describing the OP doing his own DNS.  I think we've ruled that out.

 You can run your own DNS service to do lookups for yourself though,
 and it's a fun way to learn about how the global system works.
 Check out the sections of the FreeBSD Handbook on BIND.  Running DNS
 for a small network in my home was pretty educational for me.

I agree.  Running BIND on your own network is a good exercise.

 3. I would also like to run my own mailserver for that domain
 (again to learn).  Would I be able to do this and send receive
 email from/to [EMAIL PROTECTED]  I know most ISPs block port 25
 and no-ip.com has a pay service called mail reflector that can get
 around this.  Is this necessary?  Why couldn't I just set up
 sendmail to use a port other than 25 like 8080?
 
 Sending isn't the problem.  You can send from just about any port
 you want.  It's receiving that's the problem.  When a mail server
 tries to deliver mail to mynewdomain.com, it's going to be looking
 for your mail server on port 25, because that's the standard.  It's
 just like how your web browser always goes looking for a web server
 on port 80 when you contact another machine.  Unless there's some
 trick you can do with the MX records for your domain to advertise to
 the world that your mail server is running on a nonstandard port,

There is no such trick.

 I don't know how you could get around the receiving problem if your
 ISP blocks incoming connections to port 25, short of having some
 external service like those you've mentioned cache the mail for you.

As an aside, are there still ISPs that do this?  How draconian.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgplm4gSER3KN.pgp
Description: PGP signature


Re: Setting up own domain and mailserver

2005-02-12 Thread Paul A. Hoadley
On Sat, Feb 12, 2005 at 07:52:08PM -0500, RL wrote:

 1. I have adelphia cable internet.  I would like to get a dyndns or
 no-ip.com account to have a static IP for my new godaddy domain.

I assume both of those services are dynamic DNS providers, and I'll
assume your cable provider gives you a dynamic IP address.  Dynamic
DNS providers don't provide you with a static IP, but rather
nameservice for your domain.  The provider will nominate some subset
of their nameservers for you to register (with the registrar that sold
you the domain name) as providing DNS for your new domain.  The idea
is that whenever your IP address changes, you contact the dynamic DNS
provider (in some provider-specific way---e.g., a web form, a local
script) to update your A record.

 Simple enough.  However, I would like to also do my own DNS to learn
 more about it.  Will I be able to do this if I set my nameserver on
 godaddy to my box's dyndns address?

Almost certainly not, for two reasons.  You need a static IP address
to lodge with your registrar.  (I guess it would be _possible_ to
manually update the address with your registrar every time it changes,
but quite impractical.)  Further, you need to provide at least two
nameservers for your domain.  Again, it is _possible_ that you could
personally provide one, and use a DNS provider as a secondary.

 2.  What about reverse DNS?  Could I possibly do that on my box?  

Not unless you solve all of the problems above, and then discuss the
issue with your ISP---since they own the IP address, they run the
corresponding part of the in-addr.arpa zone, and the specific PTR
record you will require.

 3. I would also like to run my own mailserver for that domain (again
 to learn).  Would I be able to do this and send receive email
 from/to [EMAIL PROTECTED]

This you'll be able to do.  You need to add an MX record to your zone
file at the dynamic DNS provider.  You would want mail sent to the
host named in the A record.

 I know most ISPs block port 25 and no-ip.com has a pay service
 called mail reflector that can get around this.  Is this necessary?

If _your_ ISP blocks port 25, then you'll have to do _something_ to
get around that, but I don't know if that particular service is the
right solution.

 Why couldn't I just set up sendmail to use a port other than 25 like
 8080?

There's certainly nothing _intrinsically_ special about port 25.
However, it's the port that everyone's agreed to send mail to.  If
your sendmail was listening on port 8080, how would my sendmail know?


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpR2UnYYJN77.pgp
Description: PGP signature


Silicon Image SiI 3114 SATA RAID on ASUS P5GD2 Deluxe

2005-02-05 Thread Paul A. Hoadley
Hello,

Is anyone using the Silicon Image SiI 3114 controller on an ASUS P5GD2
Deluxe motherboard?  AFAICS, FreeBSD 5.3 supports the controller, but
I can't seem to get the installer to see the SATA RAID 1 array that I
set up using the BIOS.  The only disks in the system are two identical
200G Seagate drives, and I used the in-ROM Silicon Image setup utility
to create a RAID 1 array with them.  When I boot using a 5.3
installation CD, it sees the SiI 3114 controller, but then presents me
with ad4 and ad6 as separate drives.  It seems my problem is much like
the one described here:

http://lists.freebsd.org/pipermail/freebsd-amd64/2004-September/002082.html

However, despite using atacontrol as described, I could not get ar0 to
persist across a reboot.

Is anyone using this particular motherboard?


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpbT8J1TTzpG.pgp
Description: PGP signature


Onboard GigE on ASUS P5GD2 Deluxe

2005-02-05 Thread Paul A. Hoadley
Hello,

My ASUS P5GD2 Deluxe has an onboard GigE NIC:

Marvell 88E8053 PCI Express Gigabit LAN controller

I have installed 5.3-RELEASE from an installation CD, and the supplied
GENERIC kernel does not seem to detect it.  Shouldn't the sk driver
handle this NIC?

Does anyone else have this motherboard?  (I am starting to regret the
purchase, as I am still struggling with the Silicon Image SATA RAID
controller.)


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpZ6qso19bX7.pgp
Description: PGP signature


Re: Sendmail: host name lookup failure

2005-01-24 Thread Paul A. Hoadley
[I didn't realise Joe's question was Cc'd to the list.  I replied
privately days ago.]

On Thu, Jan 20, 2005 at 09:28:43PM +, Joe Kraft wrote:

 have you found out any more about why it's not working?  I'm also
 curious about the entry in mailertable because my feeble attempt
 didn't work.

Adding this to /etc/mail/mailertable:

coremedicalsolutions.comesmtp:[192.168.10.70]

and running 'make maps' was all I needed to do.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpAiiADn60Dg.pgp
Description: PGP signature


Re: Sendmail: host name lookup failure

2005-01-24 Thread Paul A. Hoadley
On Thu, Jan 20, 2005 at 05:03:05PM -0500, Niy wrote:

 Just a quick thought, I had a similar problem on my LAN. I set up
 /etc/hosts files, and that did the trick for me.

This was one of the first things I tried.  It didn't work in the
particular situation I described.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpwfqeVUuTP2.pgp
Description: PGP signature


Re: Sendmail: host name lookup failure

2005-01-24 Thread Paul A. Hoadley
Hi,

Firstly, thanks for the comprehensive reply.

On Fri, Jan 21, 2005 at 04:06:32AM +0100, J65nko BSD wrote:

 It could be that the MS Windows DNS server, which is derived
 from/patterned after named or however you want to call it, suffers
 from a similar defect. Being not familiar with the MS DNS server,
 you could find out whether it it possible to disable IPV6. BIND has
 this option.

Interesting.  I did wonder whether disabling IPv6 in the Windows DNS
server was possible---it was going to be something I looked at, but I
stopped investigating once I found a workaround.

 RE: resolving unqualified hostnames

Thanks for the information and examples.

 RE: .ns.chariot.net.au. and ns2.chariot.net.au.

Thanks for the information.  The problem I originally described, of
course, is unrelated to these nameservers.  I never made it quite
clear enough in my original post, but the trouble I was having was
with an internal view of our domain namespace.  I'll let Chariot know
their nameservers are broken.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgppmCLCVN78n.pgp
Description: PGP signature


Re: Sendmail: host name lookup failure

2004-12-20 Thread Paul A. Hoadley
Hi Chuck,

On Sun, Dec 19, 2004 at 03:57:58PM -0500, Chuck Swiger wrote:

 That hostname gets an NXDOMAIN failure from here:

Sorry, I should have been more explicit in the original: the
nameserver in question is serving a private LAN in the 192.168 space.

I have actually solved the problem.  I intend to post a summary for
the archive when I return to the site later in the week, at which time
I'll be able to identify the OS/nameserver combination at fault.
Here's a teaser, though: it's a Microsoft product (I just don't know
which), and it's returing SERVFAIL status for a  record query.
Curiously, sendmail's WorkAroundBroken option did not help, and I
don't know why.  Daryl Tester suggested using a mailertable entry, and
this worked.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpPZIlteEIvd.pgp
Description: PGP signature


Re: Sendmail: host name lookup failure

2004-12-18 Thread Paul A. Hoadley
Hello,

On Thu, Dec 16, 2004 at 11:32:58AM +1030, Paul A. Hoadley wrote:

 I have a series of mails in the queue, failing on delivery attempts
 like this:
 
 Dec 16 11:19:08 bert sendmail[1043]: iBF403Wb004664:
 to=[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],
 ctladdr=[EMAIL PROTECTED] (1001/1001),
 delay=20:49:05, xdelay=00:00:00, mailer=esmtp, pri=4770661,
 relay=tsb.coremedicalsolutions.com., dsn=4.0.0, stat=Deferred: Name
 server: tsb.coremedicalsolutions.com.: host name lookup failure

I remain stumped here.  The sending host, the LAN's DNS server and the
LAN's mail hub all have forward and reverse DNS entries.  It's not at
all clear to me what sendmail is complaining about.

I had hoped to give sendmail another try after many years, but in
desperation I am compiling qmail as I type this...  :-)


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Sendmail: host name lookup failure

2004-12-15 Thread Paul A. Hoadley
Hi Robert,

On Wed, Dec 15, 2004 at 08:27:40PM -0500, Robert Huff wrote:

 I was totally confused ... until I did ps -ax | grep named and
 found an unrequested -t /var/named at the end of the command line.
 So what's that about?  -t causes named to run chrooted, per entry
 20040928.  That's not according to spec.  My spec, anyway.  Killed
 named, restarted with only approved command line, restarted all
 affected programs ... and life was good again.

Thanks for the suggestion.  The name server is running on a different
machine on the LAN, though.  It's not FreeBSD, and (AFAIK) no change
since the upgrade to the problem machine.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpHk9HFJCvsM.pgp
Description: PGP signature


Sendmail: host name lookup failure

2004-12-15 Thread Paul A. Hoadley
Hello,

I have just upgraded a machine from 5.2.1 to 5.3, and I think I _may_
have stomped on something in /etc/mail during mergemaster.  The
symptom is this: mail to other machines on the LAN worked yesterday,
and is broken after the upgrade.  Mail to the wider Internet continues
to work.

I have a series of mails in the queue, failing on delivery attempts
like this:

Dec 16 11:19:08 bert sendmail[1043]: iBF403Wb004664:
to=[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],
ctladdr=[EMAIL PROTECTED] (1001/1001),
delay=20:49:05, xdelay=00:00:00, mailer=esmtp, pri=4770661,
relay=tsb.coremedicalsolutions.com., dsn=4.0.0, stat=Deferred: Name
server: tsb.coremedicalsolutions.com.: host name lookup failure

Running sendmail on the queue in verbose mode gives this:

Running /var/spool/mqueue/iBG097Eq000666 (sequence 1 of 118)
[EMAIL PROTECTED]... Connecting to
tsb.coremedicalsolutions.com. via esmtp...

[long pause]

[EMAIL PROTECTED]... Deferred: Name server:
tsb.coremedicalsolutions.com.: host name lookup failure

Running /var/spool/mqueue/iBFNpkMQ052047 (sequence 2 of 118)
[EMAIL PROTECTED]... Deferred: Name server:
tsb.coremedicalsolutions.com.: host name lookup failure

[...]

There are numerous hits from Google on very similar issues, but almost
all the solutions point at DNS problems.  If there is a local DNS
issue, I can't find it.

 dig coremedicalsolutions.com. mx
[...]
coremedicalsolutions.com. 3600  IN  MX  10 tsb.coremedicalsolutions.com.
[...]
tsb.coremedicalsolutions.com. 900 INA   192.168.10.69

 dig -x 192.168.10.69
[...]
69.10.168.192.in-addr.arpa. 900 IN  PTR tsb.coremedicalsolutions.com.

 dig bert.coremedicalsolutions.com.
[...]
bert.coremedicalsolutions.com. 900 IN   A   192.168.10.78

 dig -x 192.168.10.78
[...]
78.10.168.192.in-addr.arpa. 900 IN  PTR bert.coremedicalsolutions.com.

That is, both the originating machine (bert) and the receiver (tsb)
have forward and backward DNS entries.

Can anyone suggest the next step in diagnosing this?


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpqiM3FS72gp.pgp
Description: PGP signature


Re: Creating CHM files

2004-10-25 Thread Paul A. Hoadley
On Mon, Oct 25, 2004 at 08:00:10PM +0800, h0444lp6 wrote:

 I am desperately searching for a tool to create CHM Help Files.

The only HTML Help compiler that I know of is Microsoft's own:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/htmlhelp/html/hworiHTMLHelpStartPage.asp

or:

http://tinyurl.com/6ejdu

 Does there exist an Open Source tool?

Not that I know of.  The Microsoft compiler is a free download,
though.  Naturally, it's a Windows application.  Did you post to this
list because you need to run it under FreeBSD?


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpk9kZIQJzfm.pgp
Description: PGP signature


Re: find -exec surprisingly slow

2004-08-16 Thread Paul A. Hoadley
On Sun, Aug 15, 2004 at 02:22:02PM -0700, Pat Lashley wrote:

 Could you create a user to get them; and give that user a procmail
 (or similar) delivery-time script to file them into subdirs based on
 some arbitrary characteristic?

Sounds feasible.  The sheer volume has overwhelmed me, though, and now
I'm just throwing them out.

 Just FYI, Exim, with the ExiScan patches, can reject at SMTP time;
 and also has a 'fakereject' capability which tells the sender that
 the message has been rejected; but actually delivers it.

Thanks for the info.  I have been thinking of changing MTAs for a
while.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpHzYz6Anj4V.pgp
Description: PGP signature


Re: find -exec surprisingly slow

2004-08-16 Thread Paul A. Hoadley
Hello,

On Sun, Aug 15, 2004 at 11:56:10AM +0100, Scott Mitchell wrote:

 I don't know how committed to qmail you are, but Exim will do this
 out of the box.  I'm pretty sure it's part of the default config
 file.  With the exim+exiscan patches (available from ports) you can
 get even more creative and integrate virus scanning, SpamAssassin,
 etc. with very little effort.

Thanks.  I have been thinking of changing MTAs for a while.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpABygqhYvTm.pgp
Description: PGP signature


find -exec surprisingly slow

2004-08-14 Thread Paul A. Hoadley
Hello,

I'm in the process of cleaning a Maildir full of spam.  It has
somewhere in the vicinity of 400K files in it.  I started running
this yesterday:

find . -atime +1 -exec mv {} /home/paulh/tmp/spam/sne/ \;

It's been running for well over 12 hours.  It certainly is
working---the spams are slowly moving to their new home---but it is
taking a long time.  It's a very modest system, running 4.8-R on a
P2-350.  I assume this is all overhead for spawning a shell and
running mv 400K times.  Is there a better way to move all files based
on some characteristic of their date stamp?  Maybe separating the find
and the move, piping it through xargs?  It's mostly done now, but I
will know better for next time.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpSUuXfsftAF.pgp
Description: PGP signature


Re: find -exec surprisingly slow

2004-08-14 Thread Paul A. Hoadley
On Sun, Aug 15, 2004 at 01:32:35AM +0200, Erik Trulsson wrote:

 You seem to have missed the fact that operations on very large
 directories (which a directory with 400K files in it certainly
 qualifies as) simply are slow.

Good point.  I had overlooked that.

 Reducing the number of processes spawned will certainly help some,
 but a better idea is to not have so many files in a single directory
 - that is just asking for trouble.

I'm not sure that I can make qmail do anything else.  These are spams
sent to non-existent addresses at my domain, being caught by
.qmail-default.  What I am going to do is clear out the Maildir daily
instead of monthly, though.  Collecting them has become a significant
drain on disk space---the 400K spams are the result of about a month
and a half of collection.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: find -exec surprisingly slow

2004-08-14 Thread Paul A. Hoadley
On Sun, Aug 15, 2004 at 12:39:33AM +0100, Matthew Seaman wrote:

 find . -atime +1 -print0 | xargs -0 -J % mv % /home/paulh/tmp/spam/sne/
 
 xargs defaults to taking up to 5,000 arguments from it's stdin to
 generate the mv commands (or up to ARG_MAX - 4096 = 61440 bytes), so
 that would have done the job with only 8 or so invocations of mv.

Thanks for that.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: find -exec surprisingly slow

2004-08-14 Thread Paul A. Hoadley
On Sat, Aug 14, 2004 at 08:11:54PM -0400, Garance A Drosihn wrote:

 Where is '.' in the above `find .' command?  Is it is on the same
 partition as /home/paulh/tmp/spam/sne/ ?
 
 You may find it much faster to do something like:
 mkdir usermail.new
 chown user:group usermail.new
 mv usermail usermail.bigspam
 mv usermail.new usermail
 cd usermail.bigspam
 find . \! -atime +1 -exec mv {} ../usermail \;
 
 My assumption there is that you have a LOT fewer good files than
 you have bad files, so there will be fewer files to move.  But I
 am also making the assumption that all your files are in a single
 directory (and not a tree of directories), which may be a bad
 assumption.

All assumptions correct, and that is what I should have done.

 The thing to use is the '-J' option of xargs.  That way you can have
 the destination-directory be the last argument in the command that
 gets executed, and yet you're still moving as many files in a single
 `mv' command as possible.  E.g., change my earlier `find' command
 to:
 find . \! -atime +1 -print0 | xargs -0J[] mv [] ../usermail
 
 Check the man page for xargs for a description of -J

Will do.  Thanks for the tip.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgp2CrTPBrx7j.pgp
Description: PGP signature


Re: find -exec surprisingly slow

2004-08-14 Thread Paul A. Hoadley
Hello,

On Sat, Aug 14, 2004 at 09:13:32PM -0500, Gary wrote:

 P I'm not sure that I can make qmail do anything else.  These are spams
 P sent to non-existent addresses at my domain, being caught by
 P .qmail-default.
 
 Question... why do you have a .qmail-default file to begin with? If
 you have proper namespace or .qmail- files for your users, it is not
 necessary at all... all would then be bounced. Or if you wish just
 to drop mail coming in to .qmail-default, just put a # in it...

Good question---without context, my claim that I can do nothing else
seems wrong.  What I should have said is given I have an interest in
collecting all the spams to non-existent addresses, I don't think I
can make qmail do anything other than deliver it to the new/ subdir of
a Maildir.

The original problem was that _bouncing_ these messages is
fruitless---they almost invariably have a forged From address.  I'm
getting on average about 10,000 of them per day, so there were
constantly several thousand messages in my queue, as well as several
thousand bounced bounces and failures in my postmaster mailbox every
day.

IMHO, these messages should be _rejected_ at the SMTP session, though
(AFAICS) qmail won't do this (without being patched).  (I am sure I
once read a security justification for this behaviour, though I
can't seem to find any justification for it at all now.  I am willing
to be convinced otherwise, but IMHO, accepting these messages is bogus
behaviour.)  Anyway, I was about to embark on tracking down a patch to
do SMTP-level rejection, when I decided I would just funnel them into
a Maildir and use them later to train Bogofilter, or whatever.

 P  What I am going to do is clear out the Maildir daily
 P instead of monthly, though.  Collecting them has become a significant
 P drain on disk space---the 400K spams are the result of about a month
 P and a half of collection.
 
 I would never think of collecting them at all, not even allow them
 in.

I may soon change my mind, though my original plan was to put the spam
to use.  The sheer volume looks like making that plan unworkable.  :-)

 There are several techniques just to block them at SMTP negotiation
 all together, so they don't even enter your system...

Techniques for qmail?  Without patching it?  I thought I had RTFMd
pretty thoroughly, but I am willing to be enlightened.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpddP9ABOTcL.pgp
Description: PGP signature


Re: Re[2]: find -exec surprisingly slow

2004-08-14 Thread Paul A. Hoadley
On Sat, Aug 14, 2004 at 10:27:29PM -0400, Bill Moran wrote:

 I have to second this.  You should never accept email destin for
 users that don't exist, you should bounce it with a 5xx error prior
 to even accepting the data portion of the SMTP transmission.

I agree completely.  I can't see how to make qmail do this,
though---have I overlooked something?


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpb5BPEDk8I7.pgp
Description: PGP signature


Re: [OT] Re: find -exec surprisingly slow

2004-08-14 Thread Paul A. Hoadley
Hello,

On Sat, Aug 14, 2004 at 08:01:47PM -0700, stheg olloydson wrote:

 What I would do is avoid the problem in the first place by not
 having a .qmail-default.

Without a .qmail-default, qmail's default behaviour is to _accept_ the
message and then _bounce_ it.  IMHO, this is _worse_ than (a) saving
the spam (which (I had hoped!) might be useful in other contexts), or
(b) piping it to the bit bucket.  Both (a) and (b) require a
.qmail-default.

Have I overlooked something really obvious here?  Is there a way
(preferably without patching it) to get qmail to _reject_ the mail
sent to non-existent addresses?


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgpm0Fusalxmw.pgp
Description: PGP signature


Re: find -exec surprisingly slow

2004-08-14 Thread Paul A. Hoadley
Hi Gary,

On Sat, Aug 14, 2004 at 10:25:46PM -0500, Gary wrote:

 Most are patches, and very good. I use Eben Pratt's goodrcptto
 personally on my own server, and some that I have built for others
 (gives me control for accepting mail from lists only for those lists
 that do not subscribe via envelope sender, such as this
 one)... there are several to choose from
 
 http://lifewithqmail.org/lwq.html#smtp-reject
 
 which will lead you here..
 
 http://netdevice.com/qmail/rcptck/

Thanks.  I was fairly sure it couldn't be done without patching.


-- 
Paul.

w  http://logicsquad.net/
h  http://paul.hoadley.name/


pgp2BwCrcOiIX.pgp
Description: PGP signature


Re: Some Simple Questions

2004-06-14 Thread Paul A. Hoadley
On Sun, Jun 13, 2004 at 09:28:16PM -0700, Spuds wrote:

 1) Is FreeBSD truly free, as in I don't have to pay for it and can
 download it at no charge or is FreeBSD just a name?

Yes, it is truly free.  You can download it at no charge.

 3) Is FreeBSD compatible with Linux software? I believe I read that
 somewhere.

Yes, you can run Linux binaries.

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/linuxemu.html

 4) Can FreeBSD run on a laptop that is hardware compatible, as I
 know some OS's cannot run on laptops but can on desktops?

FreeBSD runs on laptops.

I skipped the SCO question.  I've lost interest.  Greg Lehey has a
comprehensive page on the issue:

http://www.lemis.com/grog/sco.html


-- 
Paul.

mailto:[EMAIL PROTECTED]


pgpxSKq9kmaD9.pgp
Description: PGP signature


Re: GPL: implications for FreeBSD-on-hardware for sale?

2004-04-11 Thread Paul A. Hoadley
On Sun, Apr 11, 2004 at 07:58:15AM -0700, Gary W. Swearingen wrote:
 Paul A. Hoadley [EMAIL PROTECTED] writes:
 
  Maybe some more specifics would be helpful.  The application is a
  web application.  It may or may not end up open source, but it
  will be for sale, and I don't want it to inherit a restrictive
  license.
 
 Even BSD licenses are restrictive,

By restrictive, I mean a license that forces itself onto other code,
whether by way of the other code being a derivative work, using the
licensed code, or just sitting on the same distribution medium.

The main issue here is simply that I don't _necessarily_ want to
distribute source code to the application.  (Of course, if the code
remains largely PHP, I'll essentially be doing that anyway.)  I don't
want the decision to be pre-made just by interacting with other
software.


-- 
Paul.

mailto:[EMAIL PROTECTED]


pgp0.pgp
Description: PGP signature


GPL: implications for FreeBSD-on-hardware for sale?

2004-04-10 Thread Paul A. Hoadley
Hello,

For a certain niche market, I am considering selling a software
application by pre-installing it on a small machine running FreeBSD,
and then selling the whole thing.  Are there any implications arising
from the GPL (or other more-restrictive-than-BSD licensed) code in the
tree?  Would it be arguable that I was, in fact, selling only the
hardware and my own software application, and giving away the (GPL-
and BSD-licensed) open source software for free?  I presume that the
GPL would require me to at least make the source code of the
GPL-covered parts of FreeBSD available on request (Section 3(b)),
given that I would not be including the FreeBSD source code (it simply
wouldn't be required) in the installation.

This bridge must have been crossed before.  Does anyone have any
experience here?


-- 
Paul.

mailto:[EMAIL PROTECTED]


pgp0.pgp
Description: PGP signature


Re: GPL: implications for FreeBSD-on-hardware for sale?

2004-04-10 Thread Paul A. Hoadley
On Sat, Apr 10, 2004 at 09:46:29AM +0100, Matthew Seaman wrote:

 There's no problem with selling GPL'd programs for money.  As the
 cant goes Free speech, not free beer.

I guess I'm interpreting Section 1 too restrictively then.  I took
You may charge a fee for the physical act of transferring a copy to
be fairly limiting on the magnitude of this fee.  I guess it's not
then.

 All you have to do to comply with the GPL is make available the
 sources to the software you're using to your customers, or let them
 know how they can retrieve them from a third party.  In this case,
 probably just pointing them in the direction of the FreeBSD servers
 would be sufficient.

OK.

 If you're dead against redistributing GPL'd stuff, you'll find it
 difficult to produce a completely GPL-free setup: removing things
 like the C compiler and gdb and texinfo is easy enough, but such
 things as readline and the regex libraries are harder to deal with.

I'm not against it.  I just want to make sure I get the specifics of
the license exactly right.  :-)

Thanks a lot for your input, Matthew.


-- 
Paul.

mailto:[EMAIL PROTECTED]


pgp0.pgp
Description: PGP signature


Re: GPL: implications for FreeBSD-on-hardware for sale?

2004-04-10 Thread Paul A. Hoadley
On Sat, Apr 10, 2004 at 01:55:23AM -0700, Cory Petkovsek wrote:

 Your own proprietary binaries you can distribute along side the GPL
 and BSD code, provided you don't have GPL code within your programs.
 It can all be bundled together as long as you have licensing,
 copyrights and required source as part of the package (or possibly
 available, but not part of the package).

Thanks for that.  Again, then, I think I was interpreting the text of
the license too restrictively---obviously my own code does not become
a derivative work just because it's sitting on the same disk.  (Not
sure why I thought it would.)

Thanks for the input, Cory.


-- 
Paul.

mailto:[EMAIL PROTECTED]


pgp0.pgp
Description: PGP signature


Re: GPL: implications for FreeBSD-on-hardware for sale?

2004-04-10 Thread Paul A. Hoadley
On Sat, Apr 10, 2004 at 11:04:46AM -0700, Gary W. Swearingen wrote:

 We all use loose language like that, but a software seller should
 keep in mind that usually he's really doing two things: publishing
 (or at least distributing) copies of the software and licensing use
 of the software.  The GPL seems to permit charging anything for the
 publishing (but see clause 3b for an exception) while prohibiting
 any charge for the licensing (but see the clauses which require fees
 in the form of cross-licensing some derivative works).  I have no
 idea how it's legally permissible to say that your one bundle
 price only applies to the publishing and not the licensing, but I've
 never heard that any publishers or licensors worry about it.

Now this is more like the kind of complexity I was expecting.  :-)

 Also remember that not only the chunks of software like readline
 carry licensed and sub-licensable copyrights, but that your
 arrangment of the chunks as the collection that you publish (your
 product) is copyrightable, and a careful buyer will want a license
 for that too, which must (per the GPL) be compatible with the GPL.
 (The GPL does, of course, allow distribution with closed-source
 software.  I think the GPL's further restrictions clause should be
 a problem here, but I'm not aware that any GPL licensor has
 complained about any further restrictions in such kinds of GPL
 derivatives as your product will be.)

Maybe some more specifics would be helpful.  The application is a web
application.  It may or may not end up open source, but it will be for
sale, and I don't want it to inherit a restrictive license.

It uses some PHP (Open Publication License), is served by Apache
(Apache Software License), and is backed by PostgreSQL (BSD license).
Currently I'm using a PHP template engine called Smarty (LGPL).  Here,
my application would be a 'work that uses the library'.

So I don't think my application is a derivative work of any of these.

  Would it be arguable that I was, in fact, selling only the
  hardware and my own software application, and giving away the
  (GPL- and BSD-licensed) open source software for free?
 
 I'll have to refer you to a lawyer.  Maybe it depends upon what the
 sales contract says.  Maybe not.  Or maybe if you have no right to
 sell licenses for a fee, then it's implied that you're not selling
 it.

I'll have to look into it further.

 But it's easy to get too wrapped up in worrying about technicalities
 that most people seem happy to ignore.

Excellent point.  :-)  (But, then, I don't want to be a test case
either.  :-)

 Good question; I've not seen this bundling issued discussed before.

It must have arisen somewhere---people have done this before.  I'll
search harder...  Thanks for the input, Gary.


-- 
Paul.

mailto:[EMAIL PROTECTED]


pgp0.pgp
Description: PGP signature


Re: 'Partial' X upgrade, now locked out of X server

2004-03-31 Thread Paul A. Hoadley
On Wed, Mar 31, 2004 at 05:03:09PM +0200, Peter Ulrich Kruppa wrote:
 On Wed, 31 Mar 2004, Paul A. Hoadley wrote:

  It looks like I have upgraded parts of XFree86 while installing some
  other ports, and I now seem unable to make even local connections to
  my X server.  I must admit, X is something I set up years ago on this
  machine, and have just set and forgot---as such, I do not even have a
  good appreciation for what information might be useful for people to
  help me debug this.

 I guess the best idea would be to have a look at
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/x11.html
 and try how far you get on your own.
 Also you should save your old XF86Config somewhere. It's syntax
 has changed from XFree86-3 to XFree86-4, but probably you will be
 able to recognize most important settings.

Thanks.  I did bite the bullet and make the XFree86-4 port.  I had
originally wondered whether I could get away with the hybrid, but
there didn't seem to be much point.

  While I am keen to get suggestions on how to correct this access
  control glitch, I would be happy to fully upgrade X if that's
  recommended.  Somewhat embarrassingly, I'm not even sure how this
  should be done---via ports?

 Either via /usr/ports/x11/XFree86-4 or pkg_add -r XFree86-4

Thanks Uli.  I wasn't sure whether that port would install everything
correctly in the standard places, but, of course, it does.


-- 
Paul.

mailto:[EMAIL PROTECTED]


pgp0.pgp
Description: PGP signature


'Partial' X upgrade, now locked out of X server

2004-03-30 Thread Paul A. Hoadley
Hello,

It looks like I have upgraded parts of XFree86 while installing some
other ports, and I now seem unable to make even local connections to
my X server.  I must admit, X is something I set up years ago on this
machine, and have just set and forgot---as such, I do not even have a
good appreciation for what information might be useful for people to
help me debug this.

The machine was originally running one of the early 4.X releases, and
that is when X was installed.  It's now running 4.8.  The following
have been installed recently:

drwxr-xr-x  2 root  wheel   512 Feb 26 01:28 XFree86-clients-4.3.0_6/
drwxr-xr-x  2 root  wheel   512 Feb 26 01:29 XFree86-fontEncodings-4.3.0/
drwxr-xr-x  2 root  wheel   512 Feb 26 01:30 XFree86-fontScalable-4.3.0/
drwxr-xr-x  2 root  wheel   512 Mar 28 19:36 XFree86-libraries-4.3.0_6/

I usually login via xdm, started as root with 'xdm -nodaemon '.  I am
currently unable to log in as a non-root user, and I get the following
in ~/.xsession-errors when I try:

Xlib: connection to :0.0 refused by server
Xlib: Client is not authorized to connect to Server
twm:  unable to open display :0

I presume this has something to do with access control, but I've never
needed to set up anything for local access before.

While I am keen to get suggestions on how to correct this access
control glitch, I would be happy to fully upgrade X if that's
recommended.  Somewhat embarrassingly, I'm not even sure how this
should be done---via ports?


-- 
Paul.

mailto:[EMAIL PROTECTED]


pgp0.pgp
Description: PGP signature


Re: Anti Virus Software

2004-03-18 Thread Paul A. Hoadley
On Thu, Mar 18, 2004 at 01:11:59PM +0800, [EMAIL PROTECTED] wrote:

 also i was wondering too if there are any recommendations for a good
 AV/spam combo for email running qmail  courier/imap?

Have a look at this article:

http://logicsquad.net/freebsd/qmail-scanner-how-to.html

It was getting old (describing some installation procedures for
applications which, at the time, had no ports) and I updated it just a
few days ago.  I removed the parts describing manual installation and
replaced them with pointers to the various ports.  I have not actually
tested the current version of the article from top to bottom, so I
would be interested to hear about bugs if you try it.


-- 
Paul.

mailto:[EMAIL PROTECTED]


pgp0.pgp
Description: PGP signature


Re: Logitech Quickcam Express USB

2004-02-18 Thread Paul A. Hoadley
On Wed, Feb 18, 2004 at 06:11:40AM -0500, Osmany Guirola Cruz wrote:

 i expect that FreeBSD team do something about this I think that its
 a bad idea try to find the solution with Linux reverse engineering

The problem is that Logitech hasn't released the details on how to
communicate with the device.  There's not much anyone can do about
that.  I suspect the difficulty you'll have in getting the 'FreeBSD
team [to] do something about this' is that it's just not a very
interesting problem---there are other cameras around with open
specifications.  Certainly I gave up on the QuickCam in pretty short
order and just got another camera.


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Logitech Quickcam Express USB

2004-02-17 Thread Paul A. Hoadley
On Wed, Feb 18, 2004 at 12:00:21AM -0500, Osmany Guirola Cruz wrote:

 I have installed FreeBSD 5.2 release in my PC and i need to know if
 exist a port that let me use my quickcam. cqcam and gnomemeeting
 don't work. what should i do?

Last time I checked (over 12 months ago, admittedly) the short answer
was no.  There were some Linux reverse engineering attempts (the
interface is not public), and reports scattered about the web
regarding limited success with these drivers under NetBSD and FreeBSD,
but I personally never got anything working.  Check Google---things
may have changed.


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: spam removal

2004-02-16 Thread Paul A. Hoadley
On Mon, Feb 16, 2004 at 04:44:25AM -0500, matthew wrote:

  I recommend bogofilter for per-user filtering.  Spamassassin is
  also highly recommended for site use.  I tend to dislike DNS-based
  filtering because it has a high rate of false positives, and it
  causes your users to lose legitimate mail if it's rejected at the
  mail server.
 
 As far as I understand it, one does not lose email using dns-based
 blacklists.

Sure you can.  If Alice wants to legitimately contact Bob from a
blacklisted IP (whether the blacklisting is actually Alice's fault, or
she's just fallen under an excessively large blanket), and Bob is
running DNS-based filtering, Bob's MTA blocks Alice based on her IP.
Bob loses legitimate mail.  Admittedly you provided a counterexample,
but it is not always so easy.


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: spam removal

2004-02-16 Thread Paul A. Hoadley
On Mon, Feb 16, 2004 at 01:33:32AM -0800, Kris Kennaway wrote:

 I recommend bogofilter for per-user filtering.  Spamassassin is also
 highly recommended for site use.

I'll second both.  SpamAssassin worked well for me for several years,
but I recently changed from SA to bogofilter because SA just wasn't
keeping up with the latest craze of random word spams.  Fortunately, I
had a 26,000-spam corpus with which to train bogofilter, so it's
already working quite well.  It seems to be learning the random word
spams gradually.


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: spam removal

2004-02-16 Thread Paul A. Hoadley
On Mon, Feb 16, 2004 at 05:57:29AM -0500, matthew wrote:
 
 On Mon, 16 Feb 2004, Paul A. Hoadley wrote:
 
  On Mon, Feb 16, 2004 at 04:44:25AM -0500, matthew wrote:
 
I recommend bogofilter for per-user filtering.  Spamassassin is
also highly recommended for site use.  I tend to dislike DNS-based
filtering because it has a high rate of false positives, and it
causes your users to lose legitimate mail if it's rejected at the
mail server.
  
   As far as I understand it, one does not lose email using dns-based
   blacklists.
 
  Sure you can.  If Alice wants to legitimately contact Bob from a
  blacklisted IP (whether the blacklisting is actually Alice's fault, or
  she's just fallen under an excessively large blanket), and Bob is
  running DNS-based filtering, Bob's MTA blocks Alice based on her IP.
  Bob loses legitimate mail.
 
 We have different opinions on what it means to lose email.

Perhaps.

 An email is lost when no error message is returned to the sender and
 the email never gets to its intended recipient.

The latter may occur whether the former occurs or not.  Charles wants
to email Bob about something that's, say, important to Bob but not
that important to Charles.  Bob's MTA has Charles as blacklisted.
Let's imagine that Charles gets a bounce notification, but it doesn't
reach his threshold for doing anything more about it.  Bob loses
legitimate mail.

 So Alice knows the email was not lost.

Sure.  But the intended recipient doesn't have any information at all.

 She is now aware of why, hence the http://url in the error mesg. And
 now Alice can contact her admin, and figure out why that ip/block is
 spewing spam at me/us/blacklist users.

Sure.  Alice _could_ do that.  But if she doesn't, Bob loses
legitimate mail.

 So in summary, dns blacklists do not lose email.  The email was
 never sent by Alice's email server and she is aware why.

Bob didn't receive the mail.  He isn't aware why.  Bob loses
legitimate mail.


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Automated web page builder

2004-02-04 Thread Paul A. Hoadley
On Tue, Feb 03, 2004 at 09:38:53PM -0500, JJB wrote:

 I have an need to build an web page environment which could look
 just like the FBSD online handbook. An document index page with
 links into the big document, and each displayed page having
 previous, home, and next links at both the top and bottom of the
 page. Was some kind of tool used to build the FBSD handbook that
 automatically builds all the links for you, or was all that done by
 hand?

The Handbook (and the rest of the documentation) is authored in
DocBook SGML.  If you want something just like the online Handbook,
you might try DocBook SGML or XML, or for a more web-centric output,
even the DocBook Website system.  You can get information on all of
them from here:

http://www.docbook.org/


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: about logo

2004-01-30 Thread Paul A. Hoadley
On Thu, Jan 29, 2004 at 10:56:05PM -0800, Bubble Gum wrote:

 I just want to ask (i'm sorry if it's a silly question),why freebsd
 logo use devil character?

It's not a devil.  It's a daemon.

http://www.freebsd.org/copyright/daemon.html


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Web Editing?

2004-01-19 Thread Paul A. Hoadley
On Mon, Jan 19, 2004 at 09:54:35AM -0600, Kirk Strauser wrote:
 At 2004-01-19T14:25:28Z, Eric F Crist [EMAIL PROTECTED] writes:
 
  What do people here use to edit HTML documents?
 
 Emacs.

Are you using PSGML's xml-mode?  I find it's not indenting my XHTML
documents too well (for example, it seems to assume something like
'div' is an inline rather than a block level element, and then won't
indent the closing tag properly if I move it onto a new line), though
I haven't tried to debug it too extensively.


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Web Editing?

2004-01-19 Thread Paul A. Hoadley
On Tue, Jan 20, 2004 at 10:35:14AM +1100, [EMAIL PROTECTED] wrote:

 i seriouslly cant understand how people can develop via a terminal
 especially for speed and efficiency when edit, moving , selecting
 etc. .

I don't really find anything speedy or efficient about the 'click,
drag, select, menu, select, dialog-box, click-button, are-you-sure,
confirm' paradigm myself.  I guess everyone's mileage varies.


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Ogg encoding

2003-09-15 Thread Paul A. Hoadley
On Sun, Sep 14, 2003 at 10:41:52PM -0400, Todd Stephens wrote:

 I found a port for mp32ogg to convert mp3 to ogg format, but is
 there a program to convert wav to ogg format?  I like the ogg
 format, but it seems to me that there will be some data loss going
 from wav to mp3 and then to ogg.

As someone else suggested, you want /usr/ports/audio/vorbis-tools.  I
wrote a brief how-to for ripping from audio CD to Ogg Vorbis:

http://logicsquad.net/freebsd/audio-rip-how-to.html

It includes automatic download of the track list, transforming the XML
received and adding the appropriate metadata to each track.  It could
be automated further---suggestions welcome.


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


HP ScanJet 2300c with SANE

2003-01-22 Thread Paul A. Hoadley
Hello,

I have a HP ScanJet 2300c USB scanner.  It's not listed as supported
by the SANE hp backend.  I see there's work in progress for the 2200c,
but no mention anywhere of the 2300c.  Just in case I've missed
something glaringly obvious: does anyone on the list have a 2300c, and
have you got it going under FreeBSD?


-- 
Paul.

mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED]

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



System-wide virus and spam scanning with qmail-scanner

2002-10-27 Thread Paul A. Hoadley
A How-To describing the setup of system-wide virus and spam scanning
of incoming email using qmail-scanner is now available here:

http://logicsquad.net/freebsd/qmail-scanner-how-to.html

The setup described uses qmail-scanner to filter incoming mail through
Clam AntiVirus's clamscan and SpamAssassin's spamd.  Email flagged by
clamscan is quarantined in a separate Maildir, while procmail can be
used to divert email flagged by spamd.

Comments and corrections are sought.  :-)


-- 
Paul.

mailto:paulh;logicsquad.net
mailto:paul.hoadley;student.adelaide.edu.au

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message