iwi-firmware port
Hey all, I installed the iwi-firmware and iwi-firmware-kmod ports and I am now trying to load specific firmware on the iwi adapter but it keeps failing. The port installs fine and puts the firmware to /boot/firmware. The docs for iwicontrol state to load firmware for a specific function issue a: iwicontrol -i iwi0 -d /boot/firmware -m bss Every time I issue that command I get an error saying it cannot load firmware: Invalid argument. The system is FreeBSD 6.2 with an Intel PRO Wireless 2200BG adapter. I have the most up to date stable source and ports tree. I also tried the ipw-firmware port but that did not pick up my adapter when I loaded the kernel module. Any ideas? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Kerberos Question
I am having trouble getting Samba 3 to compile with ADS support and I have narrowed the problem down to Kerberos. I have been told previously to NOT install the security/krb5 port when installing Samba 3 with ADS support, but I had already done that. After removing the security/krb5 port, it leaves no trace of Kerberos on the system, not even the base version of Kerberos that comes when FreeBSD is installed. My question, is there a way to rebuild the version that comes with FreeBSD and install it? Would a make buildworld and a make installworld solve my woes? Any help would be appreciated. Tim ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Samba 3.0.23c
I've been fighting with recompiling Samba 3 for some time now. I keep getting undefined references to Kerberos libraries during build. I am trying to build it with ADS support and I have tried it with the base version of Kerberos that comes with FreeBSD, as well as with the security/krb5 port and I am unable to get it to compile. Anyone have any ideas? Here is the output from the build: - Start of Output - [EMAIL PROTECTED] make === Building for samba-3.0.23c_2,1 Using FLAGS = -O2 -fno-strict-aliasing -pipe -D_SAMBA_BUILD_ -I/usr/ports/net/samba3/work/samba-3.0.23c/source/iniparser/src -Iinclude -I/usr/ports/net/samba3/work/samba-3.0.23c/source/include -I/usr/ports/net/samba3/work/samba-3.0.23c/source/tdb -I. -DHAVE_CONFIG_H -I/usr/local/include -DLDAP_DEPRECATED -I/usr/ports/net/samba3/work/samba-3.0.23c/source -D_SAMBA_BUILD_ LIBS = -lcrypt -liconv LDSHFLAGS = -shared -L/usr/local/lib LDFLAGS = -L/usr/local/lib PIE_CFLAGS = -fPIE PIE_LDFLAGS = -pie Linking bin/smbd libsmb/clikrb5.o(.text+0x1060): In function `smb_krb5_get_keyinfo_from_ap_req': : undefined reference to `krb5_decode_ap_req' libsmb/clikrb5.o(.text+0x13d1): In function `smb_krb5_principal_compare_any_realm': : undefined reference to `krb5_principal_compare_any_realm' libsmb/clikrb5.o(.text+0x179a): In function `smb_krb5_free_error': : undefined reference to `krb5_free_error_contents' libads/kerberos_keytab.o(.text+0x1cc): In function `smb_krb5_kt_add_entry': : undefined reference to `krb5_kt_compare' /usr/lib/libgssapi.so: undefined reference to `krb5_rd_cred2' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_destroy' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_address' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_data' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_keyblock' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremotesubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_data_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_get_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalsubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_generatelocalsubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_sockaddr2address' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_get_ops' /usr/lib/libgssapi.so: undefined reference to `krb5_get_default_principal' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_copy_cache' /usr/lib/libasn1.so: undefined reference to `init_error_table' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setkey' /usr/lib/libgssapi.so: undefined reference to `krb5_get_forwarded_creds' /usr/lib/libgssapi.so: undefined reference to `krb5_get_err_text' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_h_addr2sockaddr' /usr/lib/libgssapi.so: undefined reference to `krb5_build_authenticator' /usr/lib/libgssapi.so: undefined reference to `krb5_build_ap_req' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_getremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_data_zero' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_free_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_create_checksum' /usr/lib/libgssapi.so: undefined reference to `krb5_generate_random_block' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_init' /usr/lib/libgssapi.so: undefined reference to `krb5_enctype_to_keytype' /usr/lib/libgssapi.so: undefined reference to `krb5_free_creds_contents' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_from_mem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_address' /usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec' /usr/lib/libasn1.so: undefined reference to `initialize_error_table_r' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_match' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_encrypt_ivec' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_emem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_data' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_get_realm' /usr/lib/libgssapi.so: undefined reference to `krb5_set_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_make_principal' /usr/lib/libgssapi.so: undefined reference to
RE: Spam on the list
I have to agree. I thought my spam filtering rules got messed up in my mail client, but after further investigation I noticed that they were fine. Any thoughts? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter Thoenen Sent: Thursday, March 16, 2006 10:03 AM To: freebsd-questions@freebsd.org Subject: Spam on the list Lately I have noticed a massive increase in SPAM on various FBSD lists. Do we not have some sort of filter? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: whi?
That's because you selected packages to install that were located on the 2nd CD. If you have an internet connection, I would just install the Ports tree and after the initial installation is complete, install the applications through the ports and download the sources as you need them. It's a lot easier that way instead of switching the CD 1000 times. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of kresimirmirkovic Sent: Tuesday, November 22, 2005 3:07 PM To: freebsd-questions@FreeBSD.org Subject: whi? i can believet that i must 1000 time switching the dis cd-1 and cd-2,to be able install free bsd! whi? -- XXLadsl ponuda do 15.01.2006.- veće brzine, iste cijene, a uz priključak dobivate i DVD player. Uz XXLadsl surfajte i dalje 60 dana neograničeno za samo 1 kunu! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Boot Device Question
Hi all, Just got done installing FreeBSD 5.4 on a Compaq DL380. The issue I am having is that when the server reboots, it tries device ad(0,a) and fails. This is because the root partition is on ad(1,a). How do I tell FreeBSD to use ad(1,a) instead of ad(0,a)? Tim ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Samba 3.0.14a with AD Support
Hi all, I've been trying to build Samba 3.0.14a for 2 days now. I have exhausted all of the resources I could find to help resolve this issue but to no avail. I am currently trying to attach my Samba server running FreeBSD 5.3 to a functioning Windows Server 2003 domain. I have installed the krb5 package from the ports as well as the openldap-client-2.2.24 package. Whenever I run a 'make install' from /usr/ports/net/samba3, it runs the configure script find and starts compiling. When it gets to compile the kerebos section, I keep getting the following errors: Linking bin/smbd /usr/local/lib/libkrb5.so: warning: warning: mktemp() possibly used unsafely; co nsider using mkstemp() libads/kerberos_keytab.o(.text+0x7e9): In function `ads_keytab_add_entry': : undefined reference to `krb5_kt_compare' /usr/lib/libgssapi.so: undefined reference to `krb5_rd_cred2' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_destroy' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_address' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_data' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_keyblock' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremotesubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_data_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_get_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalsubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_generatelocalsubkey ' /usr/lib/libgssapi.so: undefined reference to `krb5_sockaddr2address' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_get_ops' /usr/lib/libgssapi.so: undefined reference to `krb5_get_default_principal' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_copy_cache' /usr/lib/libasn1.so: undefined reference to `init_error_table' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setkey' /usr/lib/libgssapi.so: undefined reference to `krb5_get_forwarded_creds' /usr/lib/libgssapi.so: undefined reference to `krb5_get_err_text' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_h_addr2sockaddr' /usr/lib/libgssapi.so: undefined reference to `krb5_build_authenticator' /usr/lib/libgssapi.so: undefined reference to `krb5_build_ap_req' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_getremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_data_zero' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_free_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_create_checksum' /usr/lib/libgssapi.so: undefined reference to `krb5_generate_random_block' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_init' /usr/lib/libgssapi.so: undefined reference to `krb5_enctype_to_keytype' /usr/lib/libgssapi.so: undefined reference to `krb5_free_creds_contents' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_from_mem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_address' /usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec' /usr/lib/libasn1.so: undefined reference to `initialize_error_table_r' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_match' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data' /usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec' /usr/lib/libasn1.so: undefined reference to `initialize_error_table_r' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_match' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_encrypt_ivec' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_emem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_data' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_get_realm' /usr/lib/libgssapi.so: undefined reference to `krb5_set_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_make_principal' /usr/lib/libgssapi.so: undefined reference to `krb5_store_keyblock' *** Error code 1 Stop in /usr/ports/net/samba3/work/samba-3.0.14a/source. *** Error code 1 ** Has
RE: Samba 3.0.14a with AD Support
I am in the process of building another Samba server as we speak. I will try to get it functioning without installing the MIT krb5 package and see if I can't get the machine to join the domain without it. Thanks for the input, I'll give it a try. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Kobb Sent: Friday, April 22, 2005 12:42 PM To: freebsd-questions@freebsd.org Subject: Re: Samba 3.0.14a with AD Support Timothy Radigan wrote: Hi all, I've been trying to build Samba 3.0.14a for 2 days now. I have exhausted all of the resources I could find to help resolve this issue but to no avail. I am currently trying to attach my Samba server running FreeBSD 5.3 to a functioning Windows Server 2003 domain. I have installed the krb5 package from the ports as well as the openldap-client-2.2.24 package. Whenever I run a 'make install' from /usr/ports/net/samba3, it runs the configure script find and starts compiling. When it gets to compile the kerebos section, I keep getting the following errors: Linking bin/smbd /usr/local/lib/libkrb5.so: warning: warning: mktemp() possibly used unsafely; co nsider using mkstemp() libads/kerberos_keytab.o(.text+0x7e9): In function `ads_keytab_add_entry': : undefined reference to `krb5_kt_compare' /usr/lib/libgssapi.so: undefined reference to `krb5_rd_cred2' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_destroy' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_address' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_data' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_keyblock' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setremotesubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_data_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_get_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalsubkey' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_generatelocalsubkey ' /usr/lib/libgssapi.so: undefined reference to `krb5_sockaddr2address' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_get_ops' /usr/lib/libgssapi.so: undefined reference to `krb5_get_default_principal' /usr/lib/libgssapi.so: undefined reference to `krb5_cc_copy_cache' /usr/lib/libasn1.so: undefined reference to `init_error_table' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setkey' /usr/lib/libgssapi.so: undefined reference to `krb5_get_forwarded_creds' /usr/lib/libgssapi.so: undefined reference to `krb5_get_err_text' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_h_addr2sockaddr' /usr/lib/libgssapi.so: undefined reference to `krb5_build_authenticator' /usr/lib/libgssapi.so: undefined reference to `krb5_build_ap_req' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_getremoteseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_data_zero' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_free' /usr/lib/libgssapi.so: undefined reference to `krb5_config_free_strings' /usr/lib/libgssapi.so: undefined reference to `krb5_create_checksum' /usr/lib/libgssapi.so: undefined reference to `krb5_generate_random_block' /usr/lib/libgssapi.so: undefined reference to `krb5_crypto_init' /usr/lib/libgssapi.so: undefined reference to `krb5_enctype_to_keytype' /usr/lib/libgssapi.so: undefined reference to `krb5_free_creds_contents' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_from_mem' /usr/lib/libgssapi.so: undefined reference to `krb5_store_address' /usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec' /usr/lib/libasn1.so: undefined reference to `initialize_error_table_r' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_match' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data' /usr/lib/libgssapi.so: undefined reference to `krb5_decrypt_ivec' /usr/lib/libasn1.so: undefined reference to `initialize_error_table_r' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_ret_int16' /usr/lib/libgssapi.so: undefined reference to `krb5_get_error_string' /usr/lib/libgssapi.so: undefined reference to `krb5_principal_match' /usr/lib/libgssapi.so: undefined reference to `krb5_auth_con_setlocalseqnumber' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_to_data' /usr/lib/libgssapi.so: undefined reference to `krb5_store_int32' /usr/lib/libgssapi.so: undefined reference to `krb5_encrypt_ivec' /usr/lib/libgssapi.so: undefined reference to `krb5_storage_emem' /usr/lib/libgssapi.so: undefined
RE: Prevent DHCP from changing resolv.conf
Or, if you don't feel like editing your dhclient.conf, in your /etc/resolv.conf the first line usually reads: search thisdomain.com nameserver xxx.xxx.xxx.xxx nameserver xxx.xxx.xxx.yyy If you change the first line to read: domain thisdomain.com nameserver xxx.xxx.xxx.xxx nameserver xxx.xxx.xxx.yyy If you change the word search to domain, when the link comes up, dhclient will not search for upstream domain servers and it won't replace your hard-coded DNS server list -- Tim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Luke Dean Sent: Friday, April 22, 2005 11:35 AM To: Fabian Anklam Cc: freebsd-questions@freebsd.org Subject: Re: Prevent DHCP from changing resolv.conf I have a minor problem regarding my network configuration, specifically that the external interface on my router gets it's IP via DHCP from the ISP, so in rc.conf ifconfig_xl0=DHCP is set. This leads to the single entry in resolv.conf that I want to be there, namely nameserver 127.0.0.1 being replaced with my ISP's nameservers, which in return makes resolving of LAN IPs or even localhost via the installed BIND difficult for the machine. I don't want dhclient to change the resolv.conf. I checked the man pages for resolv.conf, rc.conf and dhclient but couldn't find anything there relating to my problem. Thanks, Fabian In dhclient.conf, put: prepend domain-name-servers 127.0.0.1; This keeps the DNS that DHCP gives you, but it puts your local one first so you'll be able to find your local domains. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Vinum
I know this topic has come up before, but how in the world do you get vinum to load AND start itself at boot time so I don't have to repair my mirrored volumes every reboot? I have tried to add start_vinum=YES to /etc/rc.conf but that ends in a 'panic dangling node' error. I also tried to add vinum_load=YES to /boot/loader.conf and that will load vinum at boot without panicing on me, but it doesn't start vinum and bring the mirrored devices up. I have to physically log into the server and type vinum start to bring up vinum. What I want, is that on a reboot, vinum is loaded at boot and is started so that I can mount my vinum drive through /etc/fstab Any ideas/suggestions? --Tim ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Vinum (Again)
Hi all, Ok, I'm still having trouble with vinum, I got it to load at start, but the vinum.autostart=YES in /boot/loader.conf returns a vinum: no drives found message. I had the mirrored set up and running before the reboot and the file system was mounted and everything, I even made sure to issue a saveconfig in vinum to make sure the configuration was written to the drives. There is no mention of anything else in the Handbook or in the Complete FreeBSD chapter on Vinum that describes how to get the configured drives loaded at boot up. Am I missing something? Here is my /etc/vinum.conf: drive a device /dev/ad1 drive b device /dev/ad2 volume mirror plex org concat sd length 38146m drive a plex org concat sd length 38146m drive b ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Traffic Shapping (IPFW + DUMMYNET) Question
Hi all, I'm new to the entire idea of traffic shaping and I came up with some rules for my BSD firewall/router/VoIP gateway and I just wanted to make sure that what I am trying to accomplish is actually going to happen with these rules in place. Currently, my broadband connection is a 4Mb down and 384Mb up pipe. My VoIP service requires 90Kb up and down. I have 3 separate internal networks at my house. I have my wired 100Mb switched LAN (192.168.15.0/24), I have my IPSec enabled Wireless LAN (192.168.20.0/24), and I have my VoIP LAN (192.168.10.0/30). What I want to do with these traffic shaping rules, is dedicate 100Kb up and down to the VoIP LAN, and then I want to have equally shared bandwidth (the remaining speeds of my broadband connection) for the wired and wireless LANs. Here are the rules I have come up with so far: --- (START) /etc/ipfw.rules # flush all rules ipfw -f flush # configure the pipe main pipes - have 4000kbits/s down 384kbits/s up # define 200kbits/s for the voip pipes ipfw pipe 1 config bw 100Kbits/s ipfw pipe 2 config bw 100Kbits/s # wired / wifi lans - get all but 100kbits/s for both up and down ipfw pipe 3 config bw 3900Kbits/s ipfw pipe 4 config bw 284Kbits/s # wired/wifi LAN internal transmission ipfw pipe 5 config bw 100Mbits/s mask dst-ip 0x ipfw pipe 6 config bw 100Mbits/s mask dst-ip 0x ipfw pipe 7 config bw 100Mbits/s mask dst-ip 0x ipfw pipe 8 config bw 100Mbits/s mask dst-ip 0x # make sure the voip gets all of the bandwidth for the pipes ipfw add 1 pipe 1 ip from 192.168.10.2 to any ipfw add 1 pipe 2 ip from any to 192.168.10.2 # make sure the wired and wifi lans get all of the bandwidth for those pipes ipfw add 2 pipe 5 ip from 192.168.15.0/24 to 192.168.0.0/16 ipfw add 2 pipe 6 ip from 192.168.0.0/16 to 192.168.15.0/24 ipfw add 3 pipe 7 ip from 192.168.20.0/24 to 192.168.0.0/16 ipfw add 3 pipe 8 ip from 192.168.0.0/16 to 192.168.20.0/24 # the wired / wifi lans will split the up and down pipes ipfw queue 3 config weight 50 pipe 3 mask dst-ip 0x00ff ipfw queue 4 config weight 50 pipe 3 mask dst-ip 0x00ff ipfw queue 5 config weight 50 pipe 4 mask dst-ip 0x00ff ipfw queue 6 config weight 50 pipe 4 mask dst-ip 0x00ff # add inbound/outbound queues for the wired lan ipfw add 100 queue 3 ip from any to 192.168.15.0/24 ipfw add 105 queue 5 ip from 192.168.15.0/24 to any # add inbound/outbound queues for the wifi lan ipfw add 200 queue 4 ip from any to 192.168.20.0/24 ipfw add 205 queue 6 ip from 192.168.20.0/24 to any (END) /etc/ipfw.rules - Does this seem like it will perform as I am thinking it will? Thanks --Tim ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
network: not found messages
Hey all, I've been running into some issues booting up and starting certain services. During boot up, I see a lot of network: not found messages. Also, when I try to start samba, I get that message and even though smbd starts, nmbd does not start and gives me the error described above. I also see it when starting ProFTPd as well as some other services. I've checked and double checked my rc.conf and don't see anything wrong with it. Anyone have any ideas? I'll post any configuration files that people would like to see. Thanks! Tim ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Highly Available Print Servers
Is there a way to have a highly available print server using FreeBSD? I've looked into SAMBA, but it doesn't look like it supports a form of clustering SAMBA servers at this time. Pretty much what I need is to cluster some print servers so that all printers are available even if a server goes down. I have Windows clients so I would need to have some form of connectivity for the Windows clients. Any ideas? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Setting upFreeBSD with D-Link Wireless Router
If you have a wireless-AP you can hook that directly into a standard PCI nic on the BSD machine. I have a similar setup where I'm at. I'm letting the BSD do dhcp/firewall/nat/router/dns for each of my LANs. The AP is doing WEP but for added security I have an encrypted VPN for the wireless LAN with the BSD box doing IPSec for that. I combined 2 how-to's I found online. Here are the URLs if you want to take a look. http://www.freebsddiary.org/ipsec-wireless.php http://ezine.daemonnews.org/200401/wifi-ipsec.html Tim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of rizazoe Sent: Wednesday, February 16, 2005 12:37 AM To: freebsd-questions@freebsd.org Subject: Setting upFreeBSD with D-Link Wireless Router I'm newbie and I'm trying to set up a test network than isn't connected to Internet on FreeBSD 4.7 I was wondering if it is possible to set up my FreeBSD 4.7 as a authentication server for 802.1x security using D-Link 624 Wireless Router. 1 more stupid question do I need a wireless NIC for the FreeBSD box? __ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
IPSec and Racoon Question
Hey all,
I have a question or two regarding IPSec and the Racoon port. I have a
wired LAN and a wireless LAN in my house. The BSD box acts as the primary
gateway/firewall/router. For the wireless LAN, the AP has WEP enabled with
a 128-bit key. Of course, with all of the nifty WEP cracking tools out
there I definitely want more protection, so I found a wireless networking
how-to using FreeBSD with IPSec and Racoon.
The initial configuration went very well and I am able to use IPSec between
the Windows XP wireless clients and the FreeBSD box. However, the
connection seems to time out from time to time. It's not the wireless
network because if I don't use IPSec I get an occasional time out due to
signal loss, but nothing near as much when I'm using IPSec.
It seems as though when the client(s) are idle for a period of time, they
loose their connection with the server and can no longer communicate. When
I ping the BSD box from an XP client, it just states Negotiating Security
forever until I stop the IPSec service, wait a few minutes, and restart it.
Obviously I do not want to do this for each and every client when they drop
their wireless connection due to something with IPSec and/or Racoon.
Again, I do NOT have this problem when I take IPSec out of the picture. I
never drop connections when I'm a floor away or on the same floor as the AP.
It's only an anomaly when I'm using IPSec.
Below are the following configuration files: racoon.conf, psk.txt, and
ipsec.conf.
If anyone has any ideas on why these connections are dropping, any help
would be appreciated. Maybe there is another method of creating a VPN
tunnel for the wireless LAN?
Thanks,
Tim
** /usr/local/etc/racoon/racoon.conf **
path include /usr/local/etc/racoon ;
path pre_shared_key /usr/local/etc/racoon/psk.txt ;
path certificate /usr/local/etc/cert ;
log debug;
padding
{
maximum_length 20; # maximum padding length.
randomize off; # enable randomize length.
strict_check off; # enable strict check.
exclusive_tail off; # extract last one octet.
}
listen
{
isakmp 192.168.20.1 [500];
}
timer
{
counter 5; # maximum trying count to send.
interval 20 sec;# maximum interval to resend.
persend 1; # the number of packets per a send.
phase1 30 sec;
phase2 15 sec;
}
remote anonymous
{
exchange_mode aggressive,main;
doi ipsec_doi;
situation identity_only;
my_identifier user_fqdn [EMAIL PROTECTED];
peers_identifier user_fqdn [EMAIL PROTECTED];
nonce_size 16;
lifetime time 1 min;# sec,min,hour
initial_contact on;
support_mip6 on;
proposal_check obey;# obey, strict or claim
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method pre_shared_key ;
dh_group 2 ;
}
}
remote ::1 [8000]
{
exchange_mode aggressive,main;
doi ipsec_doi;
situation identity_only;
my_identifier user_fqdn [EMAIL PROTECTED];
peers_identifier user_fqdn [EMAIL PROTECTED];
nonce_size 16;
lifetime time 1 min;# sec,min,hour
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method pre_shared_key ;
dh_group 2 ;
}
}
sainfo anonymous
{
pfs_group 1;
lifetime time 30 sec;
encryption_algorithm 3des ;
authentication_algorithm hmac_sha1;
compression_algorithm deflate ;
}
sainfo address ::1 icmp6 address ::1 icmp6
{
pfs_group 1;
lifetime time 60 sec;
encryption_algorithm 3des, cast128, blowfish 448, des ;
authentication_algorithm hmac_sha1, hmac_md5 ;
compression_algorithm deflate ;
}
** /usr/local/etc/racoon/racoon.conf **
** /usr/local/etc/racoon/psk.txt **
192.168.20.3pre shared key 1
192.168.20.4pre shared key 2
** /usr/local/etc/racoon/psk.txt **
** /etc/ipsec.conf **
flush;
spdflush;
spdadd 192.168.20.3/32 0.0.0.0/0 any -P in ipsec
esp/tunnel/192.168.20.3-192.168.20.1/use;
spdadd 0.0.0.0/0 192.168.20.3/32 any -P out ipsec
esp/tunnel/192.168.20.1-192.168.20.3/use;
spdadd 192.168.20.4/32 0.0.0.0/0 any -P in ipsec
esp/tunnel/192.168.20.4-192.168.20.1/use;
spdadd 0.0.0.0/0 192.168.20.4/32 any -P out ipsec
esp/tunnel/192.168.20.1-192.168.20.4/use;
** /etc/ipsec.conf **
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
