possible that the computer is turned off, or does not
have a mail system running right now.
Your message was not delivered within 4 days:
Server 56.77.194.162 is not responding.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org
Hey there,
Can people confirm some brokenness to me?
When I'm on a system over SSH, I find that doing the following:
cd /usr/ports/mail/alpine; make config
looks fine, but
cd /usr/ports/mail/opendkim; make config
seems to corrupt the headings and not display correctly, the OK/Cancel
the dependent port.
Finally, I just applied -r, which should update all dependent packages,
but it seems to upgrade them unconditionally.
Ergo, I've since built a new version of perl, a new verion of python,
rebuilt every perl module on the system, am presently rebuilding apache22,
and I'm sure
Hey there,
I recently discovered that the vmware-tools package is compiled against
libintl.so.8 -- yes, this is probably something that should be fixed at
the vmware level, but VMware's love for FreeBSD isn't there.
As a workaround, it might be useful to have a port which compiles an older
Attention: freebsd-questions@freebsd.org
A policy-violation was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching its destination.
The policy-violation was reported to be:
SCR files not allowed per Company security policy
Please
On Wed, 29 Jul 2009, Doug Barton wrote:
Mel Flynn wrote:
On Tuesday 28 July 2009 20:24:27 Dan Mahoney, System Admin wrote:
make: don't know how to make
/usr/ports/dns/bind96/work/.build_done.bind96._usr_local. Stop
*** Error code 2
Someone else had the same problem, and they also chose
On Wed, 29 Jul 2009, Doug Barton wrote:
Dan Mahoney, System Admin wrote:
I believe Mel is right here. 'make clean ; make config ; make' worked
for me.
As does a second make after getting this error, but it's nonintuitive,
and probably a ports bug.
I'm not sure why 'make clean
On Wed, 29 Jul 2009, Doug Barton wrote:
Mel Flynn wrote:
On Wednesday 29 July 2009 10:57:05 Doug Barton wrote:
Dan Mahoney, System Admin wrote:
I believe Mel is right here. 'make clean ; make config ; make' worked
for me.
As does a second make after getting this error, but it's nonintuitive
On Wed, 29 Jul 2009, Doug Barton wrote:
Dan Mahoney, System Admin wrote:
The fact that the error occurs AT ALL is the bug and what is
counterintuitive, and many people would not think to try typing make
again, and instead would just assume the thing's broken.
Ok, I actually misunderstood
Hey all,
I'm having a problem on multiple systems:
With a clean port, in dns/bind96:
I get the options screen, I select only overwrite base in addition to
the defaults:, and after, I get this:
make: don't know how to make
/usr/ports/dns/bind96/work/.build_done.bind96._usr_local. Stop
***
On Sun, 8 Mar 2009, Polytropon wrote:
On Sat, 7 Mar 2009 23:04:45 -0500 (EST), Dan Mahoney, System Admin
d...@prime.gushi.org wrote:
Hey all,
I've got a dell 600SC in a remote location, and it's started freezing up
(I'm thinking I've got a dying fan).
I'm not familiar with this special
On Sun, 8 Mar 2009, Tim Judd wrote:
On Sun, Mar 8, 2009 at 2:02 AM, Dan Mahoney, System Admin
d...@prime.gushi.org wrote:
On Sun, 8 Mar 2009, Polytropon wrote:
On Sat, 7 Mar 2009 23:04:45 -0500 (EST), Dan Mahoney, System Admin
d...@prime.gushi.org wrote
Hey all,
I've got a dell 600SC in a remote location, and it's started freezing up
(I'm thinking I've got a dying fan).
I've seen a thread from this user:
http://lists.freebsd.org/pipermail/freebsd-hardware/2004-September/001883.html
But seem to recall that non of this worked for me either.
Okay, new problem with regard to netgroups, NIS, and Pam:
Given the following situation:
* I want to be able to have su work normally in the event of an NIS
disconnect, since I will likely need to su to fix said disconnect.
* The wheel group needs to stay local
* I want su to still use
Hello all,
I'm noticing that when following the directions given here:
http://www.freebsd.org/doc/en/books/handbook/network-nis.html
For how to disable logins, the recommended action is to set the shell to
/sbin/nologin.
However, this is sloppy as it allows the user to log in, get the motd,
On Wed, 10 Dec 2008, Dan Nelson wrote:
In the last episode (Dec 10), Dan Mahoney, System Admin said:
I'm noticing that when following the directions given here:
http://www.freebsd.org/doc/en/books/handbook/network-nis.html
For how to disable logins, the recommended action is to set the shell
On Wed, 10 Dec 2008, Dan Nelson wrote:
In the last episode (Dec 10), Dan Mahoney, System Admin said:
On Wed, 10 Dec 2008, Dan Nelson wrote:
In the last episode (Dec 10), Dan Mahoney, System Admin said:
I'm noticing that when following the directions given here:
http://www.freebsd.org/doc/en
Hello all...
I searched for this everywhere and I guess it's a question that's never
been asked.
What's the syntax under FreeBSD for ipv6 addresses in securenets?
Please reply off-list.
-Dan Mahoney
--
Dan Mahoney
Techie, Sysadmin, WebGeek
Gushi on efnet/undernet IRC
Hey all,
I have the following rule set up in ipfw to limit the exposure of bad php
scripts and trojans that try to send mail directly.
allow tcp from any to any dst-port 25 uid root
deny log tcp from any to any dst-port 25 out
However, the log messages I get look like this:
Sep 8 13:21:11
On Mon, 8 Sep 2008, Dan Nelson wrote:
In the last episode (Sep 08), Dan Mahoney, System Admin said:
I have the following rule set up in ipfw to limit the exposure of bad
php scripts and trojans that try to send mail directly.
allow tcp from any to any dst-port 25 uid root
deny log tcp from
On Sat, 21 Jun 2008, Kris Kennaway wrote:
Dan Mahoney, System Admin wrote:
Hello all,
I know it was a long time ago, but I was talking with a co-worker about why
perl was removed from the base in v5 -- I seem to recall a discussion on
some mailing list about either the number of arguments
about either the number of arguments or the format of the
arguments and/or output of a base perl function having changed between
5.005 and 5.6.1.
because it's not needed for programs in base system, but you have ports and
always can install it.
the rule is keep base system simple and small
changed between
5.005 and 5.6.1.
Thing is, that's a very vague thing to try to google for, and I can't seem
to find it. Are there any old-timers who remember the system call in
question?
Please let me know,
-Dan Mahoney
--
Dan Mahoney
Techie, Sysadmin, WebGeek
Gushi
Hello all,
There's apparently an RFC-standard file called /etc/mailcap (as well as
.mailcap), but I can't find any docs on this file.
Would it be worthwhile to rework the RFC into a manpage (I am willing to
do it), or should I bother the providers of ports that use it (such as,
say, alpine
With all the recent changeover in namespace for rpc/yp stuff, there's been
a lot moved around, but in all my searches, the ypd.upupdated daemon is
completely undocumented. (even with a grep through the rest of the man
directories provides no mention).
Near as I can tell, it allows nis
Hello all,
I'd like to have a shell menu on my system that gives them available
programs they can learn, but that also learns from ports/packages which
options are available. (I.e. it won't list every branch port, but will
list things from, say, editors, games, and possibly only certain
Hello All,
I have a digiboard classic PCI, and I am trying to build a system to
monitor many serial systems (UPSes) using FreeBSD.
I cannot find any documentation referring to this driver -- it seems that
everything digi related in the BSD tree refers to the intelligent
cards, whereas
Maybe I'm just doing this completely wrong:
prime# portsnap update
Ports tree is already up to date.
prime# portsnap fetch
Looking up portsnap.FreeBSD.org mirrors... 4 mirrors found.
Fetching snapshot tag from portsnap3.FreeBSD.org... done.
Fetching snapshot metadata... done.
Updating from Mon
On Tue, 25 Dec 2007, Jay Chandler wrote:
Dan Mahoney, System Admin wrote:
Maybe I'm just doing this completely wrong:
prime# portsnap update
Ports tree is already up to date.
prime# portsnap fetch
Looking up portsnap.FreeBSD.org mirrors... 4 mirrors found.
Fetching snapshot tag from portsnap3
All,
I am thinking of doing a quick port of the zsu zone file serial number
bumper for FreeBSD.
However, I have a couple of questions regarding ports that aren't clear to
me, nor do they seem to be in the porter's handbook.
1) What provision is made for when a port's distsite is simply
Hello all,
In looking through some pam stuff I find that there's a pam_passwdqc
module to do password quality control.
However, in reading the passwd man page, NO mention is made of either pam,
or /etc/pam.d/passwd
Is passwd a legacy tool which doesn't support this pam feature?
-Dan
--
Hello all,
I secure my outbound e-mail with SPF. One of the ports maintainers
([EMAIL PROTECTED]) also secures his INBOUND e-mail with SPF.
I tried to e-mail garga about a minor doc-bug, and got a bounce, since his
mailserver didn't recognize mx2.freebsd.org as a valid MX for
[EMAIL
But why is it that portupgrade feels the need to upgrade gpg to gpg2, when
gpg is still in the tree?
I'm running a portupgrade -rf gettext, and didn't previously have gpg2
installed.
-Dan
--
this is too stupid even for irc
-mtreal, EFnet #macintosh, 09/15/2K, 12:33 AM
Dan
Hey all,
It seems most of the things I want to do under freeBSD have been turned
into nice KLD modules. However, I'm still forced to do a kernel recompile
for QUOTA support.
Is there some major reason it cannot be made into a KLD as well?
-Dan Mahoney
--
It would be bad.
-Egon Spengler,
Hey all.
I see i386-unknown as a build target all the time.
So my (possibly silly) question is: what's the unknown variable here? And
why isn't it?
-Dan
--
Dan Mahoney
Techie, Sysadmin, WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144 AIM: LarpGM
Site:
On Tue, 20 Nov 2007, Jerry McAllister wrote:
Apache2 is a complete piece of crap. Portable Runtime my ass. Was
there something so wrong with APACI? Apache1.3 built out of the box on
every system in the world.
Using ports is no better. And again, I'll take anything anyone can offer
On Tue, 20 Nov 2007, Philip M. Gollucci wrote:
This allowed apache2-non-ports to compile. However the question in my
mind that still bears answering is: why apr would FIND such a library as
installed (i.e. not fail at configure-time) but then fail to compile.
I.e. why does the APR not set
:
Hello,
First and foremost: I assume you're both reasonably busy professionals.
That said, I believe there's either a bug in the core operating system
here, or a bug in the way some of the critical ports are built, and I
cannot figure it out alone. It is enough of a problem that it has
confused
On Mon, 19 Nov 2007, Jerry McAllister wrote:
On Mon, Nov 19, 2007 at 07:19:34PM -0500, Dan Mahoney, System Admin wrote:
All,
I'm of the realization that FreeBSD is a volunteer project, but there's a
recent issue I've hit, and I've contacted nearly EVERYONE I can think of
about it to try
On Mon, 19 Nov 2007, Jerry McAllister wrote:
You can tell ports where to install something. We used to install
all of Apache in its own directory to make it easy to manipulate
in a system we were installing in a lot of places. Check the ports
doc and such.
Actually, I just tried
Hey All,
I recently CVSUPPED to what I thought would be 6.2-STABLE but instead got
6.3-PRERELEASE.
However, I look at www.freebsd.org/releng and I see no reference to the
release cycle of 6.3.
Was this a mistake of some sort?
-Dan
--
Man, this is such a trip
-Dan Mahoney, October 25,
On Tue, 13 Nov 2007, Tino Engel wrote:
No, I wanted to track the 6-release chain, but was just a little
surprised...I thought this kind of CVS naming scheme didn't take place
till much later in the release engineering process.
-Dan
Dan Mahoney, System Admin schrieb:
Hey All,
I recently
I recently noticed that Apple's new OS, Leopard, is Unix certified.
I'd imagine that the big reason that FreeBSD hasn't done this yet is: It
costs a lot of money.
That said, if in theory one were to try to get the operating system
certified (say, to increase awareness and market share versus
On Thu, 18 Oct 2007, Aryeh M. Friedman wrote:
Dan Mahoney, System Admin wrote:
I recently noticed that Apple's new OS, Leopard, is Unix certified.
UNIX Certified what the [EMAIL PROTECTED]@ does that mean as far I know no
one is
in a position to make such a statement except maybe
Hey all,
Has anyone found a way to have ipfw work with a DNS blocklist?
I realize the core functionality is not in IPFW, but I am thinking
somehow, of having a table dynamically maintained by some kind of divert
daemon?
Couple this with some kind of a connection delay (perhaps also in the
On Tue, 16 Jan 2007, Kevin Kobb wrote:
I have found that when I do an install with an install.cfg file on a floppy,
I must insert the floppy right after the system begins to boot from CD. If I
don't when I tell sysinstall to read the floppy I get an error.
As a work around, if I go
tried multiple drives, cables, and disks.
It's on a tyan dual opteron system.
Help much appreciated -- next plan is to create a scratch SATA volume to
play host to the raid card, but I would like to fix this somehow.
-Dan
--
I love you forever eternally.
-Connaian Expression
Dan
Hello,
I am encountering a bug with named-9.4.1-P1 that I am attempting to work
with ISC on, that I have built from ports (dns/bind94). However, I need a
non-stripped version of the binary to get a backtrace. I can't roll my
own binary because it may be related to some way that the port is
/mixed;
boundary==_NextPart_000_0016=_NextPart_000_0016
X-Priority: 3
X-MSMail-Priority: Normal
---
The original message is kept in:
astaroth:/usr/local/qmailscan/quarantine/new/astaroth11813592015123565
where the System Anti-Virus Administrator can further diagnose
=multipart/alternative;
boundary==_NextPart_000_001B_01C0CA80.6B015D10
X-Priority: 3
X-MSMail-Priority: Normal
---
The original message is kept in:
astaroth:/usr/local/qmailscan/quarantine/new/astaroth118066837051248880
where the System Anti-Virus Administrator can further diagnose
On Thu, 15 Feb 2007, Christian Walther wrote:
Aah, that's right, threads. Forgot about those.
-Dan
On 15/02/07, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote:
Hey all,
I'm getting about a hundred more processes reported by ps aux|wc -l versus
the total number of processes in top
Hey all,
I'm getting about a hundred more processes reported by ps aux|wc -l versus
the total number of processes in top. Is this a normal thing? My
system's been under some heavy load in the past couple days, but it's all
presumably stable now.
-Dan
--
Man, this is such a trip
-Dan
Hey all,
Back in 4.x, LINT was a fully-commented entity. Now it appears to be
built-on-the-fly, which is great for being sure every-option is in in a
programmatic manner, but bad as far as being able to look at LINT for
syntax or notes as to which options need to be added together (or are
?
-Dan
Re: freebsd-questions Digest, Vol 162, Issue 11
Message: 31
On Wed, 24 Jan 2007 19:20:47 -0500 (EST), Dan Mahoney wrote:
On Wed, 24 Jan 2007, Kevin Kinsey wrote:
Dan Mahoney, System Admin wrote:
Hey all.
In trying to tweak my firewall setup I'm using a file called
/etc
Hey all.
In trying to tweak my firewall setup I'm using a file called
/etc/ipfw.rules
However, it seems even though I copy my rules perfectly to that file, the
system freezes up and locks me out when I do:
ipfw -f flush; ipfw /etc/ipfw.rules
I've also tried doing it as
ipfw -f flush
On Thu, 25 Jan 2007, [EMAIL PROTECTED] wrote:
In trying to tweak my firewall setup I'm using a file called
/etc/ipfw.rules
However, it seems even though I copy my rules perfectly to that file, the
system freezes up and locks me out when I do:
ipfw -f flush; ipfw /etc/ipfw.rules
I've also
On Wed, 24 Jan 2007, Kevin Kinsey wrote:
Dan Mahoney, System Admin wrote:
Hey all.
In trying to tweak my firewall setup I'm using a file called
/etc/ipfw.rules
However, it seems even though I copy my rules perfectly to that file, the
system freezes up and locks me out when I do:
/usr
On Wed, 17 Jan 2007, Ted Mittelstaedt wrote:
yes, but guess what - FBSD 6.2 is now released, so just install that and
the updated driver is already in the kernel
You were just waiting to say that weren't you :)
-Dan
Ted
- Original Message -
From: Dan Mahoney, System Admin [EMAIL
On Wed, 17 Jan 2007, Ted Mittelstaedt wrote:
Dan,
You do realize, don't you, that since both of these hosts are on a switch,
and are using unicast traffic to communicate with each other, that they
cannot be sniffed, don't you?
That implies trust of the switch, trust against arp-cache
On Thu, 18 Jan 2007, Andrew Pantyukhin wrote:
On 1/18/07, Dan Mahoney, System Admin [EMAIL PROTECTED] wrote:
It's not that simple. The difficulty is in key exchange,
and it stays. I can show you how to implement it with
static keys:
As I read through the article
(http://www.freebsd.org/doc
Hey all,
In dummynet, what's an appropriate queue size for a 50 Megabit pipe?
And is there a general rule-of-thumb or calcluation I should be doing
(i.e. limitation size times some number or something?)
-Dan
--
Hitler, Satan, those Hanson kids, anything. Just not the curious
anteater.
Hey all,
I see the handbook has a nice howto on tunnel mode ipsec. I just want to
protect my NFS/NIS traffic between two hosts on a switch (neither NAT'd)
-- is there a reference as to transport-mode ipsec anywhere, or has anyone
done it that can outline it? I would imagine it would be
On Tue, 16 Jan 2007, Kevin Kobb wrote:
I have found that when I do an install with an install.cfg file on a floppy,
I must insert the floppy right after the system begins to boot from CD. If I
don't when I tell sysinstall to read the floppy I get an error.
I've found the floppy works okay
Hey all,
Note: I'm cc'ing Luigi Rizzo because, well, he's authoritative. This is
NOT the same issue I asked about a couple years ago (which related to
vlans, and bridging -- there is no bridge in play here).
Anyway...
We have a machine playing vlan aggregator. Gigabit nics (intels).
em0
I know it's probably off-topic, but I've searched google for a bit with no
results, and because I'm curious:
Does anyone (maybe one of the old guard) know the origin of the term
lint for the all-inclusive feature set. I know SpamAssassin uses it as
well (it's the command line argument to
to your src/sys/dev/bge/
directory and
recompile your 6.1-release kernel with no problems. I did.
Look carefully at the chip on your MB and post the BCM model number on it
if this doesen't work.
Ted
- Original Message -
From: Dan Mahoney, System Admin [EMAIL PROTECTED]
To: Ted Mittelstaedt
: network, ethernet at device 4.1 (no driver attached)
Also, I'm running 6.1-RELEASE, will the cvs drivers from CURRENT work?
-Dan
Ted
- Original Message -
From: Dan Mahoney, System Admin [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, January 12, 2007 5:02 PM
Subject: Broadcom Nics
On Sat, 13 Jan 2007, Erik Trulsson wrote:
On Thu, Jan 11, 2007 at 12:01:48PM -0500, Dan Mahoney, System Admin wrote:
yOn Wed, 10 Jan 2007, Erik Trulsson wrote:
On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote:
On Wed, 3 Jan 2007, John Nielsen wrote:
Apologies
Hey all,
I'm getting the message when I try to load a KLD in Sysinstall, even
though I KNOW my floppy drive works. In fact, I can load the KLD from the
loader prompt just fine.
Is there a difference/advantage to one way of doing this over the other?
-Dan Mahoney
--
Hitler, Satan, those
Hey all, I have a Transport GT24 (B3992 Motherboard), and while it has one
intel nic which works well, I'd like to be able to use the onboard
broadcom network cards. Is there a known way of making them work? I seem
to recall some dealy where you could use a windows driver?
-Dan
--
I love
yOn Wed, 10 Jan 2007, Erik Trulsson wrote:
On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote:
On Wed, 3 Jan 2007, John Nielsen wrote:
Apologies for top-posting.
I've made some progress with this, but as I suspected, I'm screwed on
namespace collision. I.e. I am
On Wed, 10 Jan 2007, Peter Giessel wrote:
On Wednesday, January 10, 2007, at 01:22AM, Dan Mahoney, System Admin [EMAIL
PROTECTED] wrote:
I am unable to load a version of twa.ko that
supports my 3ware card because a previous version of twa.ko that does not
support it is already in the generic
you'd also need to manually copy the vendor driver and
modify /boot/loader.conf on the newly installed system so it could actually
boot.. you could easily take care of that from the fixit mode shell after the
installation, though.
--
And, a special guest, from the future, miss Ria Pischell. Miss
On Wed, 10 Jan 2007, Erik Trulsson wrote:
On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote:
On Wed, 3 Jan 2007, John Nielsen wrote:
Apologies for top-posting.
I've made some progress with this, but as I suspected, I'm screwed on
namespace collision. I.e. I am unable
On Wed, 10 Jan 2007, Dimitar Vasilev wrote:
Dan,
comment out the twa lines in the kernel.
Rebuild it and include the new modules.
should be easy.
the module in the kernel it's conflicting with is on an INSTALL CD.
But I don't think I'll have the namespace conflicts with the NEW module.
-Dan
On Wed, 10 Jan 2007, Peter Giessel wrote:
On Wednesday, January 10, 2007, at 01:22AM, Dan Mahoney, System Admin [EMAIL
PROTECTED] wrote:
I am unable to load a version of twa.ko that
supports my 3ware card because a previous version of twa.ko that does not
support it is already in the generic
==_NextPart_000_0016=_NextPart_000_0016
X-Priority: 3
X-MSMail-Priority: Normal
---
The original message is kept in:
mail.bootham.com:/var/spool/qmailscan/quarantine/new/mail.bootham.com1168246945469948
where the System Anti-Virus Administrator can further diagnose it.
The Email scanner reported
Hey all,
I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's
a 1u system -- sticking extra things into PCI slots as a workaround is
likely to be impossible.
I found this document on how to get it installed, in theory:
http://www.3ware.com/kb/article.aspx?id=14850
On Wed, 3 Jan 2007, [EMAIL PROTECTED] wrote:
I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550
card. It's a 1u system -- sticking extra things into PCI slots
as a workaround is likely to be impossible.
Any possibility of using a USB floppy drive?
Will the BSD installer
On Wed, 3 Jan 2007, Per olof Ljungmark wrote:
Dan Mahoney, System Admin wrote:
Hey all,
I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's
a 1u system -- sticking extra things into PCI slots as a workaround is
likely to be impossible.
I don't think you need
On Wed, 3 Jan 2007, Tom Judge wrote:
Dan Mahoney, System Admin wrote:
Hi Dan,
I have installed FreeBSD on several systems with 9550 controllers. The
driver is available in sysinstall from 6.1 Release. (I installed from a 6.1
Release CD)
This was the 9650, actually.
-Dan
--
It would
According to the 3ware site this card is supported as of FreeBSD 6.1. I
previously posted with it as the 9550, but the end result is I hadn't
slept enough, it's the 9650SE-4LPML.
I checked the CVS sources for the twa driver, they haven't been touched in
many months so I don't feel it's
be included in newer versions of FreeBSD.
Forgot to mention you'd also need to manually copy the vendor driver and
modify /boot/loader.conf on the newly installed system so it could actually
boot.. you could easily take care of that from the fixit mode shell after the
installation, though.
Yup
On Wed, 3 Jan 2007, Mike Tancsa wrote:
On Wed, 3 Jan 2007 02:56:40 -0500 (EST), in
sentex.lists.freebsd.questions you wrote:
4) Allowing non-standard modules to reside on the CD, instead of loading
from floppy (i.e. I see there's a twa module in the base system, why
aren't the .ko's sitting
Hey all, I'm experimenting with ipfw as means of controlling some
interesting anomalies like with portsenty or some ssh anti-brute-force
scripts (i.e. adding bad hosts to tables, adding deny rules
for certain hosts, etc), and I was wondering if there was (either in the
form of a script, or a
Hey all, the ipfw man page says rules can be deleted individually or in
groups, but I don't see (other than the sets) an easy way to craft
deletion of rules in a range (for example, 500-550).
As the system I'm using crafts client rules by client numbers, this is a
kinda useful feature
Hey all,
Are there any supported methods for enabling multipath routing under
FreeBSD. I currently have a couple BSD boxes which potentially have two
default gateways to our two core routers, and I'd like to be able to
load-balance. Doing it in IPFW or DUMMYNET would seem to break OSPF
=multipart/alternative;
boundary==_NextPart_000_001B_01C0CA80.6B015D10
X-Priority: 3
X-MSMail-Priority: Normal
---
The original message is kept in:
mail.uefiscsu.ro:/var/spool/qmailscan/quarantine/new/mail.uefiscsu.ro116125549647916424
where the System Anti-Virus Administrator can
On Wed, 20 Sep 2006, Erik Norgaard wrote:
Dan Mahoney, System Admin wrote:
On Tue, 19 Sep 2006, Erik Norgaard wrote:
Along with some good advice. First of all: ssh is not a public service
like http or smtp where you need anyone to be able to connect. So don't
let them in the first place
Hey all,
I've looked around and found several linux-centric things designed to
block brute-force SSH attempts. Anyone out there know of something a bit
more BSD savvy?
My best attempt will be to get this:
http://www.csc.liv.ac.uk/~greg/sshdfilter/index_15.html
running and adapt it.
I've
On Tue, 19 Sep 2006, Erik Norgaard wrote:
Along with some good advice. First of all: ssh is not a public service like
http or smtp where you need anyone to be able to connect. So don't let them
in the first place.
It is in this case. It's a web server that allows shell usage (and
On Tue, 19 Sep 2006, backyard wrote:
In reality using passwords with SSH kinda defeats the
purpose of SSH.
Keeping passwords from being sent across the network as cleartext?
-Dan
--
Of course she's gonna be upset! You're dealing with a woman here Dan,
what the hell's wrong with you?
-S.
Hey all,
Are there any supported formats for INCLUDES in /etc/rc.conf such that I
can drop default configs into /etc/rc.conf and then have files in a
certain directory (ala includerc) override them? Basically, I'd like to
do mass-updates of several dozen machines' configs normally found in
Hey all,
I've got a file that I just synced from a major RBL, and I'd like to just
use it to globally deny access to my system. Is there an easy way to do
this within ipfw -- the file is about 3 *million* lines, and is from
cbl.abuseat.org.
-Dan
--
SOY BOMB!
-The Chest of the nameless
. on the hosts that your MX records point to.
Which I take to mean, yeah, if you're using it on sendmail, you allow SMTP
AUTH to override blacklists (this is the case by default.)
Whereas my intention would be to use it to block ports such as 80 and 22.
Every system I've found trying to brute-force
Hey all,
I have caching DNS servers running on two BSD 5.4 machines, and what
happens on both of them is that the processes will just lock up, and while
they may still answer some queries, they don't refresh or update, or
respond to proper signals.
For example:
s2# sh /etc/rc.d/named stop
I got FreeBSD 5.3 release installed on my Server but its hard disk and
mainboard are too old and i want to upgrade to FreeBSD 6.0 with new hard
disk on the same PC how can i do this?
is it necessary to install any third-party hardware or software?
Rithy Ray
System Engineer
KhmerServer.NET
I got FreeBSD 5.3 release installed on my Server but its hard disk and
mainboard are too old and i want to upgrade to FreeBSD 6.0 with new hard
disk on the same PC how can i do this?
is it necessary to install any third-party hardware or software?
Rithy Ray
System Engineer
KhmerServer.NET
Hey all,
this is sort of a wierd question, but bear with me. I notice that
pam_securetty has a function that allows people to have to be secure
before it will let them do something (for example, use login as root).
I've recently enabled telnetd on my system because of people trapped
behind
Hey all,
In BSD 4.x, there was a section in the make.conf manpage that said you
could define WITHOUT_X11 and ports would build without it (for things like
ghostscript, cvsup, etc, which have distinctly different ports)
For some reason this is gone in 5.x -- what's the appropriate way to do
1 - 100 of 158 matches
Mail list logo