Delivery Failure

2013-09-02 Thread System Administrator
possible that the computer is turned off, or does not have a mail system running right now. Your message was not delivered within 4 days: Server 56.77.194.162 is not responding. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org

Dialog on some ports looks odd

2012-12-13 Thread Dan Mahoney, System Admin
Hey there, Can people confirm some brokenness to me? When I'm on a system over SSH, I find that doing the following: cd /usr/ports/mail/alpine; make config looks fine, but cd /usr/ports/mail/opendkim; make config seems to corrupt the headings and not display correctly, the OK/Cancel

portupgrade -- is there a way to only build and update ports that actually NEED it?

2012-06-25 Thread Dan Mahoney, System Admin
the dependent port. Finally, I just applied -r, which should update all dependent packages, but it seems to upgrade them unconditionally. Ergo, I've since built a new version of perl, a new verion of python, rebuilt every perl module on the system, am presently rebuilding apache22, and I'm sure

possbility of a port for older versions of libintl?

2012-06-11 Thread Dan Mahoney, System Admin
Hey there, I recently discovered that the vmware-tools package is compiled against libintl.so.8 -- yes, this is probably something that should be fixed at the vmware level, but VMware's love for FreeBSD isn't there. As a workaround, it might be useful to have a port which compiles an older

policy-violation found in sent message

2009-09-08 Thread System Anti-Virus Administrator
Attention: freebsd-questions@freebsd.org A policy-violation was found in an Email message you sent. This Email scanner intercepted it and stopped the entire message reaching its destination. The policy-violation was reported to be: SCR files not allowed per Company security policy Please

Re: Don't know how to make /usr/ports/dns/bind96/work/.build....

2009-07-29 Thread Dan Mahoney, System Admin
On Wed, 29 Jul 2009, Doug Barton wrote: Mel Flynn wrote: On Tuesday 28 July 2009 20:24:27 Dan Mahoney, System Admin wrote: make: don't know how to make /usr/ports/dns/bind96/work/.build_done.bind96._usr_local. Stop *** Error code 2 Someone else had the same problem, and they also chose

Re: Don't know how to make /usr/ports/dns/bind96/work/.build....

2009-07-29 Thread Dan Mahoney, System Admin
On Wed, 29 Jul 2009, Doug Barton wrote: Dan Mahoney, System Admin wrote: I believe Mel is right here. 'make clean ; make config ; make' worked for me. As does a second make after getting this error, but it's nonintuitive, and probably a ports bug. I'm not sure why 'make clean

Re: Don't know how to make /usr/ports/dns/bind96/work/.build....

2009-07-29 Thread Dan Mahoney, System Admin
On Wed, 29 Jul 2009, Doug Barton wrote: Mel Flynn wrote: On Wednesday 29 July 2009 10:57:05 Doug Barton wrote: Dan Mahoney, System Admin wrote: I believe Mel is right here. 'make clean ; make config ; make' worked for me. As does a second make after getting this error, but it's nonintuitive

Re: Don't know how to make /usr/ports/dns/bind96/work/.build....

2009-07-29 Thread Dan Mahoney, System Admin
On Wed, 29 Jul 2009, Doug Barton wrote: Dan Mahoney, System Admin wrote: The fact that the error occurs AT ALL is the bug and what is counterintuitive, and many people would not think to try typing make again, and instead would just assume the thing's broken. Ok, I actually misunderstood

Don't know how to make /usr/ports/dns/bind96/work/.build....

2009-07-28 Thread Dan Mahoney, System Admin
Hey all, I'm having a problem on multiple systems: With a clean port, in dns/bind96: I get the options screen, I select only overwrite base in addition to the defaults:, and after, I get this: make: don't know how to make /usr/ports/dns/bind96/work/.build_done.bind96._usr_local. Stop ***

Re: Health Monitoring on Dell 600SC

2009-03-08 Thread Dan Mahoney, System Admin
On Sun, 8 Mar 2009, Polytropon wrote: On Sat, 7 Mar 2009 23:04:45 -0500 (EST), Dan Mahoney, System Admin d...@prime.gushi.org wrote: Hey all, I've got a dell 600SC in a remote location, and it's started freezing up (I'm thinking I've got a dying fan). I'm not familiar with this special

Re: Health Monitoring on Dell 600SC

2009-03-08 Thread Dan Mahoney, System Admin
On Sun, 8 Mar 2009, Tim Judd wrote: On Sun, Mar 8, 2009 at 2:02 AM, Dan Mahoney, System Admin d...@prime.gushi.org wrote: On Sun, 8 Mar 2009, Polytropon wrote: On Sat, 7 Mar 2009 23:04:45 -0500 (EST), Dan Mahoney, System Admin d...@prime.gushi.org wrote

Health Monitoring on Dell 600SC

2009-03-07 Thread Dan Mahoney, System Admin
Hey all, I've got a dell 600SC in a remote location, and it's started freezing up (I'm thinking I've got a dying fan). I've seen a thread from this user: http://lists.freebsd.org/pipermail/freebsd-hardware/2004-September/001883.html But seem to recall that non of this worked for me either.

(no subject)

2008-12-11 Thread Dan Mahoney, System Admin
Okay, new problem with regard to netgroups, NIS, and Pam: Given the following situation: * I want to be able to have su work normally in the event of an NIS disconnect, since I will likely need to su to fix said disconnect. * The wheel group needs to stay local * I want su to still use

How to block NIS logins via ssh?

2008-12-10 Thread Dan Mahoney, System Admin
Hello all, I'm noticing that when following the directions given here: http://www.freebsd.org/doc/en/books/handbook/network-nis.html For how to disable logins, the recommended action is to set the shell to /sbin/nologin. However, this is sloppy as it allows the user to log in, get the motd,

Re: How to block NIS logins via ssh?

2008-12-10 Thread Dan Mahoney, System Admin
On Wed, 10 Dec 2008, Dan Nelson wrote: In the last episode (Dec 10), Dan Mahoney, System Admin said: I'm noticing that when following the directions given here: http://www.freebsd.org/doc/en/books/handbook/network-nis.html For how to disable logins, the recommended action is to set the shell

Re: How to block NIS logins via ssh?

2008-12-10 Thread Dan Mahoney, System Admin
On Wed, 10 Dec 2008, Dan Nelson wrote: In the last episode (Dec 10), Dan Mahoney, System Admin said: On Wed, 10 Dec 2008, Dan Nelson wrote: In the last episode (Dec 10), Dan Mahoney, System Admin said: I'm noticing that when following the directions given here: http://www.freebsd.org/doc/en

/var/yp/securenets and ipv6?

2008-12-09 Thread Dan Mahoney, System Admin
Hello all... I searched for this everywhere and I guess it's a question that's never been asked. What's the syntax under FreeBSD for ipv6 addresses in securenets? Please reply off-list. -Dan Mahoney -- Dan Mahoney Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC

IPFW uid logging...

2008-09-08 Thread Dan Mahoney, System Admin
Hey all, I have the following rule set up in ipfw to limit the exposure of bad php scripts and trojans that try to send mail directly. allow tcp from any to any dst-port 25 uid root deny log tcp from any to any dst-port 25 out However, the log messages I get look like this: Sep 8 13:21:11

Re: IPFW uid logging...

2008-09-08 Thread Dan Mahoney, System Admin
On Mon, 8 Sep 2008, Dan Nelson wrote: In the last episode (Sep 08), Dan Mahoney, System Admin said: I have the following rule set up in ipfw to limit the exposure of bad php scripts and trojans that try to send mail directly. allow tcp from any to any dst-port 25 uid root deny log tcp from

Re: Circumstance leading up to removal of perl from base?

2008-06-21 Thread Dan Mahoney, System Admin
On Sat, 21 Jun 2008, Kris Kennaway wrote: Dan Mahoney, System Admin wrote: Hello all, I know it was a long time ago, but I was talking with a co-worker about why perl was removed from the base in v5 -- I seem to recall a discussion on some mailing list about either the number of arguments

Re: Circumstance leading up to removal of perl from base?

2008-06-21 Thread Dan Mahoney, System Admin
about either the number of arguments or the format of the arguments and/or output of a base perl function having changed between 5.005 and 5.6.1. because it's not needed for programs in base system, but you have ports and always can install it. the rule is keep base system simple and small

Circumstance leading up to removal of perl from base?

2008-06-20 Thread Dan Mahoney, System Admin
changed between 5.005 and 5.6.1. Thing is, that's a very vague thing to try to google for, and I can't seem to find it. Are there any old-timers who remember the system call in question? Please let me know, -Dan Mahoney -- Dan Mahoney Techie, Sysadmin, WebGeek Gushi

mailcap documentation?

2008-05-01 Thread Dan Mahoney, System Admin
Hello all, There's apparently an RFC-standard file called /etc/mailcap (as well as .mailcap), but I can't find any docs on this file. Would it be worthwhile to rework the RFC into a manpage (I am willing to do it), or should I bother the providers of ports that use it (such as, say, alpine

Manpage for rpc.ypupdated?

2008-04-26 Thread Dan Mahoney, System Admin
With all the recent changeover in namespace for rpc/yp stuff, there's been a lot moved around, but in all my searches, the ypd.upupdated daemon is completely undocumented. (even with a grep through the rest of the man directories provides no mention). Near as I can tell, it allows nis

Shell Menu that populates from /var/db/pkg

2008-01-10 Thread Dan Mahoney, System Admin
Hello all, I'd like to have a shell menu on my system that gives them available programs they can learn, but that also learns from ports/packages which options are available. (I.e. it won't list every branch port, but will list things from, say, editors, games, and possibly only certain

DigiBoard Classic

2008-01-01 Thread Dan Mahoney, System Admin
Hello All, I have a digiboard classic PCI, and I am trying to build a system to monitor many serial systems (UPSes) using FreeBSD. I cannot find any documentation referring to this driver -- it seems that everything digi related in the BSD tree refers to the intelligent cards, whereas

Portsnap -- update claims up to date but it's not.

2007-12-25 Thread Dan Mahoney, System Admin
Maybe I'm just doing this completely wrong: prime# portsnap update Ports tree is already up to date. prime# portsnap fetch Looking up portsnap.FreeBSD.org mirrors... 4 mirrors found. Fetching snapshot tag from portsnap3.FreeBSD.org... done. Fetching snapshot metadata... done. Updating from Mon

Re: Portsnap -- update claims up to date but it's not.

2007-12-25 Thread Dan Mahoney, System Admin
On Tue, 25 Dec 2007, Jay Chandler wrote: Dan Mahoney, System Admin wrote: Maybe I'm just doing this completely wrong: prime# portsnap update Ports tree is already up to date. prime# portsnap fetch Looking up portsnap.FreeBSD.org mirrors... 4 mirrors found. Fetching snapshot tag from portsnap3

Notes for a first-time porter

2007-12-19 Thread Dan Mahoney, System Admin
All, I am thinking of doing a quick port of the zsu zone file serial number bumper for FreeBSD. However, I have a couple of questions regarding ports that aren't clear to me, nor do they seem to be in the porter's handbook. 1) What provision is made for when a port's distsite is simply

Passwd and pam?

2007-12-14 Thread Dan Mahoney, System Admin
Hello all, In looking through some pam stuff I find that there's a pam_passwdqc module to do password quality control. However, in reading the passwd man page, NO mention is made of either pam, or /etc/pam.d/passwd Is passwd a legacy tool which doesn't support this pam feature? -Dan --

FreeBSD mail forwarder and SPF

2007-12-10 Thread Dan Mahoney, System Admin
Hello all, I secure my outbound e-mail with SPF. One of the ports maintainers ([EMAIL PROTECTED]) also secures his INBOUND e-mail with SPF. I tried to e-mail garga about a minor doc-bug, and got a bounce, since his mailserver didn't recognize mx2.freebsd.org as a valid MX for [EMAIL

Maybe this is a bug, should I report it?

2007-12-04 Thread Dan Mahoney, System Admin
But why is it that portupgrade feels the need to upgrade gpg to gpg2, when gpg is still in the tree? I'm running a portupgrade -rf gettext, and didn't previously have gpg2 installed. -Dan -- this is too stupid even for irc -mtreal, EFnet #macintosh, 09/15/2K, 12:33 AM Dan

viability of QUOTA support as a KLD?

2007-12-03 Thread Dan Mahoney, System Admin
Hey all, It seems most of the things I want to do under freeBSD have been turned into nice KLD modules. However, I'm still forced to do a kernel recompile for QUOTA support. Is there some major reason it cannot be made into a KLD as well? -Dan Mahoney -- It would be bad. -Egon Spengler,

What's unknown about i386-unknown?

2007-11-20 Thread Dan Mahoney, System Admin
Hey all. I see i386-unknown as a build target all the time. So my (possibly silly) question is: what's the unknown variable here? And why isn't it? -Dan -- Dan Mahoney Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Site:

Re: Build Frustrations

2007-11-20 Thread Dan Mahoney, System Admin
On Tue, 20 Nov 2007, Jerry McAllister wrote: Apache2 is a complete piece of crap. Portable Runtime my ass. Was there something so wrong with APACI? Apache1.3 built out of the box on every system in the world. Using ports is no better. And again, I'll take anything anyone can offer

Re: Build Frustrations

2007-11-20 Thread Dan Mahoney, System Admin
On Tue, 20 Nov 2007, Philip M. Gollucci wrote: This allowed apache2-non-ports to compile. However the question in my mind that still bears answering is: why apr would FIND such a library as installed (i.e. not fail at configure-time) but then fail to compile. I.e. why does the APR not set

Build Frustrations

2007-11-19 Thread Dan Mahoney, System Admin
: Hello, First and foremost: I assume you're both reasonably busy professionals. That said, I believe there's either a bug in the core operating system here, or a bug in the way some of the critical ports are built, and I cannot figure it out alone. It is enough of a problem that it has confused

Re: Build Frustrations

2007-11-19 Thread Dan Mahoney, System Admin
On Mon, 19 Nov 2007, Jerry McAllister wrote: On Mon, Nov 19, 2007 at 07:19:34PM -0500, Dan Mahoney, System Admin wrote: All, I'm of the realization that FreeBSD is a volunteer project, but there's a recent issue I've hit, and I've contacted nearly EVERYONE I can think of about it to try

Re: Build Frustrations

2007-11-19 Thread Dan Mahoney, System Admin
On Mon, 19 Nov 2007, Jerry McAllister wrote: You can tell ports where to install something. We used to install all of Apache in its own directory to make it easy to manipulate in a system we were installing in a lot of places. Check the ports doc and such. Actually, I just tried

6.3-PRERELEASE

2007-11-12 Thread Dan Mahoney, System Admin
Hey All, I recently CVSUPPED to what I thought would be 6.2-STABLE but instead got 6.3-PRERELEASE. However, I look at www.freebsd.org/releng and I see no reference to the release cycle of 6.3. Was this a mistake of some sort? -Dan -- Man, this is such a trip -Dan Mahoney, October 25,

Re: 6.3-PRERELEASE

2007-11-12 Thread Dan Mahoney, System Admin
On Tue, 13 Nov 2007, Tino Engel wrote: No, I wanted to track the 6-release chain, but was just a little surprised...I thought this kind of CVS naming scheme didn't take place till much later in the release engineering process. -Dan Dan Mahoney, System Admin schrieb: Hey All, I recently

Two questions about UNIX(r) certification.

2007-10-18 Thread Dan Mahoney, System Admin
I recently noticed that Apple's new OS, Leopard, is Unix certified. I'd imagine that the big reason that FreeBSD hasn't done this yet is: It costs a lot of money. That said, if in theory one were to try to get the operating system certified (say, to increase awareness and market share versus

Re: Two questions about UNIX(r) certification.

2007-10-18 Thread Dan Mahoney, System Admin
On Thu, 18 Oct 2007, Aryeh M. Friedman wrote: Dan Mahoney, System Admin wrote: I recently noticed that Apple's new OS, Leopard, is Unix certified. UNIX Certified what the [EMAIL PROTECTED]@ does that mean as far I know no one is in a position to make such a statement except maybe

IPFW with DNSBL

2007-09-25 Thread Dan Mahoney, System Admin
Hey all, Has anyone found a way to have ipfw work with a DNS blocklist? I realize the core functionality is not in IPFW, but I am thinking somehow, of having a table dynamically maintained by some kind of divert daemon? Couple this with some kind of a connection delay (perhaps also in the

Re: Sysinstall: No Floppy Devices Found

2007-09-03 Thread Dan Mahoney, System Admin
On Tue, 16 Jan 2007, Kevin Kobb wrote: I have found that when I do an install with an install.cfg file on a floppy, I must insert the floppy right after the system begins to boot from CD. If I don't when I tell sysinstall to read the floppy I get an error. As a work around, if I go

Floppy IO Errors

2007-08-30 Thread Dan Mahoney, System Admin
tried multiple drives, cables, and disks. It's on a tyan dual opteron system. Help much appreciated -- next plan is to create a scratch SATA volume to play host to the raid card, but I would like to fix this somehow. -Dan -- I love you forever eternally. -Connaian Expression Dan

Building UNSTRIPPED binaries in ports?

2007-08-21 Thread Dan Mahoney, System Admin
Hello, I am encountering a bug with named-9.4.1-P1 that I am attempting to work with ISC on, that I have built from ports (dns/bind94). However, I need a non-stripped version of the binary to get a backtrace. I can't roll my own binary because it may be related to some way that the port is

problem found in sent message Re: Your document

2007-06-08 Thread System Anti-Virus Administrator
/mixed; boundary==_NextPart_000_0016=_NextPart_000_0016 X-Priority: 3 X-MSMail-Priority: Normal --- The original message is kept in: astaroth:/usr/local/qmailscan/quarantine/new/astaroth11813592015123565 where the System Anti-Virus Administrator can further diagnose

problem found in sent message Mail Delivery (failure [EMAIL PROTECTED])

2007-05-31 Thread System Anti-Virus Administrator
=multipart/alternative; boundary==_NextPart_000_001B_01C0CA80.6B015D10 X-Priority: 3 X-MSMail-Priority: Normal --- The original message is kept in: astaroth:/usr/local/qmailscan/quarantine/new/astaroth118066837051248880 where the System Anti-Virus Administrator can further diagnose

Re: number of processes reported by top versus ps

2007-02-15 Thread Dan Mahoney, System Admin
On Thu, 15 Feb 2007, Christian Walther wrote: Aah, that's right, threads. Forgot about those. -Dan On 15/02/07, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote: Hey all, I'm getting about a hundred more processes reported by ps aux|wc -l versus the total number of processes in top

number of processes reported by top versus ps

2007-02-14 Thread Dan Mahoney, System Admin
Hey all, I'm getting about a hundred more processes reported by ps aux|wc -l versus the total number of processes in top. Is this a normal thing? My system's been under some heavy load in the past couple days, but it's all presumably stable now. -Dan -- Man, this is such a trip -Dan

commented LINT?

2007-01-27 Thread Dan Mahoney, System Admin
Hey all, Back in 4.x, LINT was a fully-commented entity. Now it appears to be built-on-the-fly, which is great for being sure every-option is in in a programmatic manner, but bad as far as being able to look at LINT for syntax or notes as to which options need to be added together (or are

Re: Problem with ipfw flush

2007-01-25 Thread Dan Mahoney, System Admin
? -Dan Re: freebsd-questions Digest, Vol 162, Issue 11 Message: 31 On Wed, 24 Jan 2007 19:20:47 -0500 (EST), Dan Mahoney wrote: On Wed, 24 Jan 2007, Kevin Kinsey wrote: Dan Mahoney, System Admin wrote: Hey all. In trying to tweak my firewall setup I'm using a file called /etc

Problem with ipfw flush

2007-01-24 Thread Dan Mahoney, System Admin
Hey all. In trying to tweak my firewall setup I'm using a file called /etc/ipfw.rules However, it seems even though I copy my rules perfectly to that file, the system freezes up and locks me out when I do: ipfw -f flush; ipfw /etc/ipfw.rules I've also tried doing it as ipfw -f flush

Re: Problem with ipfw flush

2007-01-24 Thread Dan Mahoney, System Admin
On Thu, 25 Jan 2007, [EMAIL PROTECTED] wrote: In trying to tweak my firewall setup I'm using a file called /etc/ipfw.rules However, it seems even though I copy my rules perfectly to that file, the system freezes up and locks me out when I do: ipfw -f flush; ipfw /etc/ipfw.rules I've also

Re: Problem with ipfw flush

2007-01-24 Thread Dan Mahoney, System Admin
On Wed, 24 Jan 2007, Kevin Kinsey wrote: Dan Mahoney, System Admin wrote: Hey all. In trying to tweak my firewall setup I'm using a file called /etc/ipfw.rules However, it seems even though I copy my rules perfectly to that file, the system freezes up and locks me out when I do: /usr

Re: Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-18 Thread Dan Mahoney, System Admin
On Wed, 17 Jan 2007, Ted Mittelstaedt wrote: yes, but guess what - FBSD 6.2 is now released, so just install that and the updated driver is already in the kernel You were just waiting to say that weren't you :) -Dan Ted - Original Message - From: Dan Mahoney, System Admin [EMAIL

Re: Transport Mode IPSEC

2007-01-18 Thread Dan Mahoney, System Admin
On Wed, 17 Jan 2007, Ted Mittelstaedt wrote: Dan, You do realize, don't you, that since both of these hosts are on a switch, and are using unicast traffic to communicate with each other, that they cannot be sniffed, don't you? That implies trust of the switch, trust against arp-cache

Re: Transport Mode IPSEC

2007-01-18 Thread Dan Mahoney, System Admin
On Thu, 18 Jan 2007, Andrew Pantyukhin wrote: On 1/18/07, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote: It's not that simple. The difficulty is in key exchange, and it stays. I can show you how to implement it with static keys: As I read through the article (http://www.freebsd.org/doc

Dummynet howto?

2007-01-18 Thread Dan Mahoney, System Admin
Hey all, In dummynet, what's an appropriate queue size for a 50 Megabit pipe? And is there a general rule-of-thumb or calcluation I should be doing (i.e. limitation size times some number or something?) -Dan -- Hitler, Satan, those Hanson kids, anything. Just not the curious anteater.

Transport Mode IPSEC

2007-01-17 Thread Dan Mahoney, System Admin
Hey all, I see the handbook has a nice howto on tunnel mode ipsec. I just want to protect my NFS/NIS traffic between two hosts on a switch (neither NAT'd) -- is there a reference as to transport-mode ipsec anywhere, or has anyone done it that can outline it? I would imagine it would be

Re: Sysinstall: No Floppy Devices Found

2007-01-16 Thread Dan Mahoney, System Admin
On Tue, 16 Jan 2007, Kevin Kobb wrote: I have found that when I do an install with an install.cfg file on a floppy, I must insert the floppy right after the system begins to boot from CD. If I don't when I tell sysinstall to read the floppy I get an error. I've found the floppy works okay

Dummynet with vlans

2007-01-16 Thread Dan Mahoney, System Admin
Hey all, Note: I'm cc'ing Luigi Rizzo because, well, he's authoritative. This is NOT the same issue I asked about a couple years ago (which related to vlans, and bridging -- there is no bridge in play here). Anyway... We have a machine playing vlan aggregator. Gigabit nics (intels). em0

Origin of LINT?

2007-01-16 Thread Dan Mahoney, System Admin
I know it's probably off-topic, but I've searched google for a bit with no results, and because I'm curious: Does anyone (maybe one of the old guard) know the origin of the term lint for the all-inclusive feature set. I know SpamAssassin uses it as well (it's the command line argument to

Re: Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-15 Thread Dan Mahoney, System Admin
to your src/sys/dev/bge/ directory and recompile your 6.1-release kernel with no problems. I did. Look carefully at the chip on your MB and post the BCM model number on it if this doesen't work. Ted - Original Message - From: Dan Mahoney, System Admin [EMAIL PROTECTED] To: Ted Mittelstaedt

Re: Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-13 Thread Dan Mahoney, System Admin
: network, ethernet at device 4.1 (no driver attached) Also, I'm running 6.1-RELEASE, will the cvs drivers from CURRENT work? -Dan Ted - Original Message - From: Dan Mahoney, System Admin [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 12, 2007 5:02 PM Subject: Broadcom Nics

Re: Easier way to install on 3ware 9550 card?

2007-01-13 Thread Dan Mahoney, System Admin
On Sat, 13 Jan 2007, Erik Trulsson wrote: On Thu, Jan 11, 2007 at 12:01:48PM -0500, Dan Mahoney, System Admin wrote: yOn Wed, 10 Jan 2007, Erik Trulsson wrote: On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote: On Wed, 3 Jan 2007, John Nielsen wrote: Apologies

Sysinstall: No Floppy Devices Found

2007-01-12 Thread Dan Mahoney, System Admin
Hey all, I'm getting the message when I try to load a KLD in Sysinstall, even though I KNOW my floppy drive works. In fact, I can load the KLD from the loader prompt just fine. Is there a difference/advantage to one way of doing this over the other? -Dan Mahoney -- Hitler, Satan, those

Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-12 Thread Dan Mahoney, System Admin
Hey all, I have a Transport GT24 (B3992 Motherboard), and while it has one intel nic which works well, I'd like to be able to use the onboard broadcom network cards. Is there a known way of making them work? I seem to recall some dealy where you could use a windows driver? -Dan -- I love

Re: Easier way to install on 3ware 9550 card?

2007-01-11 Thread Dan Mahoney, System Admin
yOn Wed, 10 Jan 2007, Erik Trulsson wrote: On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote: On Wed, 3 Jan 2007, John Nielsen wrote: Apologies for top-posting. I've made some progress with this, but as I suspected, I'm screwed on namespace collision. I.e. I am

Re: Easier way to install on 3ware 9550 card?

2007-01-11 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Peter Giessel wrote: On Wednesday, January 10, 2007, at 01:22AM, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote: I am unable to load a version of twa.ko that supports my 3ware card because a previous version of twa.ko that does not support it is already in the generic

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
you'd also need to manually copy the vendor driver and modify /boot/loader.conf on the newly installed system so it could actually boot.. you could easily take care of that from the fixit mode shell after the installation, though. -- And, a special guest, from the future, miss Ria Pischell. Miss

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Erik Trulsson wrote: On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote: On Wed, 3 Jan 2007, John Nielsen wrote: Apologies for top-posting. I've made some progress with this, but as I suspected, I'm screwed on namespace collision. I.e. I am unable

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Dimitar Vasilev wrote: Dan, comment out the twa lines in the kernel. Rebuild it and include the new modules. should be easy. the module in the kernel it's conflicting with is on an INSTALL CD. But I don't think I'll have the namespace conflicts with the NEW module. -Dan

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Peter Giessel wrote: On Wednesday, January 10, 2007, at 01:22AM, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote: I am unable to load a version of twa.ko that supports my 3ware card because a previous version of twa.ko that does not support it is already in the generic

Disallowed attachment type found in sent message Re: details

2007-01-08 Thread System Anti-Virus Administrator
==_NextPart_000_0016=_NextPart_000_0016 X-Priority: 3 X-MSMail-Priority: Normal --- The original message is kept in: mail.bootham.com:/var/spool/qmailscan/quarantine/new/mail.bootham.com1168246945469948 where the System Anti-Virus Administrator can further diagnose it. The Email scanner reported

Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
Hey all, I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's a 1u system -- sticking extra things into PCI slots as a workaround is likely to be impossible. I found this document on how to get it installed, in theory: http://www.3ware.com/kb/article.aspx?id=14850

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, [EMAIL PROTECTED] wrote: I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's a 1u system -- sticking extra things into PCI slots as a workaround is likely to be impossible. Any possibility of using a USB floppy drive? Will the BSD installer

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, Per olof Ljungmark wrote: Dan Mahoney, System Admin wrote: Hey all, I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's a 1u system -- sticking extra things into PCI slots as a workaround is likely to be impossible. I don't think you need

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, Tom Judge wrote: Dan Mahoney, System Admin wrote: Hi Dan, I have installed FreeBSD on several systems with 9550 controllers. The driver is available in sysinstall from 6.1 Release. (I installed from a 6.1 Release CD) This was the 9650, actually. -Dan -- It would

3ware 9650 Support

2007-01-03 Thread Dan Mahoney, System Admin
According to the 3ware site this card is supported as of FreeBSD 6.1. I previously posted with it as the 9550, but the end result is I hadn't slept enough, it's the 9650SE-4LPML. I checked the CVS sources for the twa driver, they haven't been touched in many months so I don't feel it's

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
be included in newer versions of FreeBSD. Forgot to mention you'd also need to manually copy the vendor driver and modify /boot/loader.conf on the newly installed system so it could actually boot.. you could easily take care of that from the fixit mode shell after the installation, though. Yup

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, Mike Tancsa wrote: On Wed, 3 Jan 2007 02:56:40 -0500 (EST), in sentex.lists.freebsd.questions you wrote: 4) Allowing non-standard modules to reside on the CD, instead of loading from floppy (i.e. I see there's a twa module in the base system, why aren't the .ko's sitting

Command to dump firewall rules to be persistent across reboots.

2006-11-29 Thread Dan Mahoney, System Admin
Hey all, I'm experimenting with ipfw as means of controlling some interesting anomalies like with portsenty or some ssh anti-brute-force scripts (i.e. adding bad hosts to tables, adding deny rules for certain hosts, etc), and I was wondering if there was (either in the form of a script, or a

IPFW: delete range of rules?

2006-11-29 Thread Dan Mahoney, System Admin
Hey all, the ipfw man page says rules can be deleted individually or in groups, but I don't see (other than the sets) an easy way to craft deletion of rules in a range (for example, 500-550). As the system I'm using crafts client rules by client numbers, this is a kinda useful feature

MultiPath routing support

2006-10-23 Thread Dan Mahoney, System Admin
Hey all, Are there any supported methods for enabling multipath routing under FreeBSD. I currently have a couple BSD boxes which potentially have two default gateways to our two core routers, and I'd like to be able to load-balance. Doing it in IPFW or DUMMYNET would seem to break OSPF

problem found in sent message Mail Delivery (failure [EMAIL PROTECTED])

2006-10-19 Thread System Anti-Virus Administrator
=multipart/alternative; boundary==_NextPart_000_001B_01C0CA80.6B015D10 X-Priority: 3 X-MSMail-Priority: Normal --- The original message is kept in: mail.uefiscsu.ro:/var/spool/qmailscan/quarantine/new/mail.uefiscsu.ro116125549647916424 where the System Anti-Virus Administrator can

Re: sshd brute force attempts?

2006-09-20 Thread Dan Mahoney, System Admin
On Wed, 20 Sep 2006, Erik Norgaard wrote: Dan Mahoney, System Admin wrote: On Tue, 19 Sep 2006, Erik Norgaard wrote: Along with some good advice. First of all: ssh is not a public service like http or smtp where you need anyone to be able to connect. So don't let them in the first place

sshd brute force attempts?

2006-09-19 Thread Dan Mahoney, System Admin
Hey all, I've looked around and found several linux-centric things designed to block brute-force SSH attempts. Anyone out there know of something a bit more BSD savvy? My best attempt will be to get this: http://www.csc.liv.ac.uk/~greg/sshdfilter/index_15.html running and adapt it. I've

Re: sshd brute force attempts?

2006-09-19 Thread Dan Mahoney, System Admin
On Tue, 19 Sep 2006, Erik Norgaard wrote: Along with some good advice. First of all: ssh is not a public service like http or smtp where you need anyone to be able to connect. So don't let them in the first place. It is in this case. It's a web server that allows shell usage (and

Re: sshd brute force attempts?

2006-09-19 Thread Dan Mahoney, System Admin
On Tue, 19 Sep 2006, backyard wrote: In reality using passwords with SSH kinda defeats the purpose of SSH. Keeping passwords from being sent across the network as cleartext? -Dan -- Of course she's gonna be upset! You're dealing with a woman here Dan, what the hell's wrong with you? -S.

include format for /etc/rc.conf

2006-08-30 Thread Dan Mahoney, System Admin
Hey all, Are there any supported formats for INCLUDES in /etc/rc.conf such that I can drop default configs into /etc/rc.conf and then have files in a certain directory (ala includerc) override them? Basically, I'd like to do mass-updates of several dozen machines' configs normally found in

Deny large number of IPs via ipfw

2006-06-11 Thread Dan Mahoney, System Admin
Hey all, I've got a file that I just synced from a major RBL, and I'd like to just use it to globally deny access to my system. Is there an easy way to do this within ipfw -- the file is about 3 *million* lines, and is from cbl.abuseat.org. -Dan -- SOY BOMB! -The Chest of the nameless

RE: Deny large number of IPs via ipfw

2006-06-11 Thread Dan Mahoney, System Admin
. on the hosts that your MX records point to. Which I take to mean, yeah, if you're using it on sendmail, you allow SMTP AUTH to override blacklists (this is the case by default.) Whereas my intention would be to use it to block ports such as 80 and 22. Every system I've found trying to brute-force

named/bind hangup

2006-05-11 Thread Dan Mahoney, System Admin
Hey all, I have caching DNS servers running on two BSD 5.4 machines, and what happens on both of them is that the processes will just lock up, and while they may still answer some queries, they don't refresh or update, or respond to proper signals. For example: s2# sh /etc/rc.d/named stop

Re: freebsd-questions Digest, Vol 121, Issue 28

2006-01-17 Thread Rithy- System Engineer
I got FreeBSD 5.3 release installed on my Server but its hard disk and mainboard are too old and i want to upgrade to FreeBSD 6.0 with new hard disk on the same PC how can i do this? is it necessary to install any third-party hardware or software? Rithy Ray System Engineer KhmerServer.NET

Re: freebsd-questions Digest, Vol 121, Issue 28

2006-01-17 Thread Rithy- System Engineer
I got FreeBSD 5.3 release installed on my Server but its hard disk and mainboard are too old and i want to upgrade to FreeBSD 6.0 with new hard disk on the same PC how can i do this? is it necessary to install any third-party hardware or software? Rithy Ray System Engineer KhmerServer.NET

PAM and OPIE and su

2005-12-16 Thread Dan Mahoney, System Admin
Hey all, this is sort of a wierd question, but bear with me. I notice that pam_securetty has a function that allows people to have to be secure before it will let them do something (for example, use login as root). I've recently enabled telnetd on my system because of people trapped behind

build ports without X -- make.conf

2005-11-07 Thread Dan Mahoney, System Admin
Hey all, In BSD 4.x, there was a section in the make.conf manpage that said you could define WITHOUT_X11 and ports would build without it (for things like ghostscript, cvsup, etc, which have distinctly different ports) For some reason this is gone in 5.x -- what's the appropriate way to do

  1   2   >