Re: tar -u adds all files regardless of mod date
Hi Tim, 5-STABLE is sufficiently different that the patch doesn't apply, unfortunately. It will take me a few days to figure out whether it's best to work up a different patch for 5-STABLE or whether I should MFC a lot of work from 6-STABLE to 5-STABLE. Unfortunately our server is also on the 5 stable branch. Please check that the following does work (without the leading '/'): tar -cf foo.tar usr/dir_a/dir_b tar -uvf foo.tar usr/dir_a/dir_b This works just fine. Thank you for response and suggested workarounds. Gareth Bailey ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: tar -u adds all files regardless of mod date
Just to add, I seem to be experiencing similar behaviour using the -P option: # tar -P -cvf archive.tar /usr/archive/Pimani/ .. files get added # tar -P -uvf archive.tar /usr/archive/Pimani/ a /usr/archive/Pimani/Pimani Presentation/multimedia/August 2005/LM_001_PRINT_050119/Thumbs.db a /usr/archive/Pimani/Pimani Presentation/multimedia/August 2005/26 August/t-shirtlogomany.gif Result: Directory structure was static but two files were added again. The non-absolute path workaround worked fine: # cd / # tar -cvf archive.tar usr/archive/Pimani/ .. files added # tar -uvf archive.tar usr/archive/Pimani/ Result: No files were added again (good). Just to bring to your attention. Gareth Bailey On 9/27/05, Gareth Bailey [EMAIL PROTECTED] wrote: Hi Tim, 5-STABLE is sufficiently different that the patch doesn't apply, unfortunately. It will take me a few days to figure out whether it's best to work up a different patch for 5-STABLE or whether I should MFC a lot of work from 6-STABLE to 5-STABLE. Unfortunately our server is also on the 5 stable branch. Please check that the following does work (without the leading '/'): tar -cf foo.tar usr/dir_a/dir_b tar -uvf foo.tar usr/dir_a/dir_b This works just fine. Thank you for response and suggested workarounds. Gareth Bailey ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
tar -u adds all files regardless of mod date
Hi there, I have a directory I want to backup at /usr/dir_a/dir_b. I want to back the content of this dir to /usr/backups/dir_b so I tried the following: # cd /usr/backups/dir_b # tar -cf dir_b.tar /usr/dir_a/dir_b Now I have dir_b.tar which is 65MB in size. If i then try to update modified files by doing this: # tar -uf dir_b.tar /usr/dir_a/dir_b and I end up with dir_b.tar being 130MB (double size) which should not be the case since no files have been modified in /usr/dir_a/dir_b. I do not get this problem if I do the same in the /usr/dir_a directory. In the /usr/dir_a dir the tar file remains the same size. I would much appreciate some input! Thanks, Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Creating standalone passwords in /etc/passwd format
I have had a look at crypt (enigma), but it doesn't appear to use the same algorithm? I need the same as that used in passwd! Thanks On 8/15/05, Gareth Bailey [EMAIL PROTECTED] wrote: Hi there, I am using pserver for authentication on CVS. Rather than use the same passwords as in /etc/passwd, I'd rather create different ones for users. How would I output a password to, for example, a text file in the same format as that of /etc/passwd. i.e: # xxx mynewpassword encrypted_password.txt Thanks! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Creating standalone passwords in /etc/passwd format
Hi there, I am using pserver for authentication on CVS. Rather than use the same passwords as in /etc/passwd, I'd rather create different ones for users. How would I output a password to, for example, a text file in the same format as that of /etc/passwd. i.e: # xxx mynewpassword encrypted_password.txt Thanks! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
LAN FTP problem with sample PF ruleset
Hi all,
My LAN doesn't have FTP access using the sample PF ruleset from the openbsd
site.
My rules are as follows, any help as to where I'm going wrong would be
great, thanks!
RULESET:
# macros
int_if = xl0
ext_if = rl0
# tcp_services = { 22, 113 }
icmp_types = echoreq
priv_nets = { 127.0.0.0/8 http://127.0.0.0/8, 0.0.0.0/8http://0.0.0.0/8,
192.168.0.0/16 http://192.168.0.0/16, 172.16.0.0/12 http://172.16.0.0/12,
10.0.0.0/8 http://10.0.0.0/8 }
# options
set block-policy return
set loginterface $ext_if
# scrub
scrub in all
# nat/rdr
nat on $ext_if from $int_if:network to any - ($ext_if)
rdr on $int_if proto tcp from any to any port 21 -
127.0.0.1http://127.0.0.1port 8021
# filter rules
block all
pass quick on lo0 all
block drop in quick on $ext_if from $priv_nets to any
block drop out quick on $ext_if from any to $priv_nets
# pass in on $ext_if proto tcp from any to $comp3 port 80 flags S/SA
synproxy state
pass in on $ext_if inet proto tcp from port 20 to ($ext_if) user proxy flags
S/SA keep state
pass in inet proto icmp all icmp-type $icmp_types keep state
pass in on $int_if from $int_if:network to any keep state
pass out on $int_if from any to $int_if:network keep state
pass out on $ext_if proto tcp all modulate state flags S/SA
pass out on $ext_if proto { udp, icmp } all keep state
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Dump Restore to smaller partition
Hello, Does anyone know if the dump and restore method for moving a partition to a new disk requires the destination partition to be as big or bigger that the source? From my understanding, the whole partition, including blank space will be dumped and restored. If this is the case then the destination will need to be at least as big. My situation is as follows: I have a 30GB usr partition with about 10GB of data in it. I want to move this data (flags and all!) to a new 20GB usr partition. Will dump/restore do this? .. or what should i use? Thanks! Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Vinum subdisk crash
Hello, It appears that one of the vinum subdisks on my server has crashed. On rebooting I get the following message: -- start message -- Warning: defective objects V usr State:down Plexes:2 Size:37GB P usr.p0 C State:faulty Subdisks:1 Size:37GB P usr.p1 C State:faulty Subdisks:1 Size:37GB S usr.p0.s0 State:crashed P0:0 B Size:37GB S usr.p1.s0 State:stale P0:0 B Size:37GB [some fsck messages] Can't open /dev/vinum/usr: Input/output error [some more fsck messages] THE FOLLOWING FILE SYSTEM HAD AN UNEXPEXTED INCONSISTENCY: /dev/vinum/usr (/usr) Automatic file system checj failed . . . help! Enter full pathname of shell -- end message -- I have a straight forward configuration based on the Bootstrapping Vinum: A Foundation for Reliable Servers article by Robert Van Valzah. What could have caused this? The disks are pretty new. Please advise on the quickest route to getting our server back online. Much appreciated, Gareth Bailey ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Vinum subdisk crash
Hello everyone, Just to add, I had to type out the above message manually since I can't get access to anything with the crashed subdisk on /usr. With regard to Greg's requests for information when reporting vinum problems as stated on vinumvm.org http://vinumvm.org's website, I can provide the following info: What problems are you having? My usr.p0.s0 subdisk reports a 'crashed' status Which version of FreeBSD are you running? 4.10 Stable Have you made any changes to the system sources, including Vinum? No Supply the output of the *vinum list* command. If you can't start Vinum, supply the on-disk configuration, as described below. If you can't start Vinum, then (and only then) send a copy of the configuration file. I can't get anything off the system, and its too long to type out! (I have the same layout as in the Van Valzah article.) Supply an *extract* of the Vinum history file. Unless you have explicitly renamed it, it will be */var/log/vinum_history*. This file can get very big; please limit it to the time around when you have the problems. Each line contains a timestamp at the beginning, so you will have no difficulty in establishing which data is of relevance. I will summarise the tail of vinum_history (doesn't seem to provide any interesting info): 30 Jun 2005 ***vinum started*** 30 Jun 2005 list 30 Jun 2005 ***vinum started*** 30 Jun 2005 dumpconfig Supply an *extract* of the file */var/log/messages*. Restrict the extract to the same time frame as the history file. Again, each line contains a timestamp at the beginning, so you will have no difficulty in establishing which data is of relevance. Again, I will summarise the tail contents of messages: 30 Jun server /kernel: ad0s1h: hard error reading fsbn 59814344 of 29126985-29127080 (ad0s1 bn 59814344; cn 3723 tn 69 sn 2) trying PIO mode 30 Jun server /kernel: ad0s1h: hard error reading fsbn 59814344 of 29126985-29127080 (ad0s1 bn 59814344; cn 3723 tn 69 sn 2) status=59 error=40 30 Jun server /kernel: vinum: usr.p0.s0 is crashed by force 30 Jun server /kernel: vinum: usr.p0 is faulty 30 Jun server /kernel: vinum: usr is down 30 Jun server /kernel: fatal:usr.p0.s0 read error, block 29126985 for 49152 bytes 30 Jun server /kernel: usr.p0.s0: user buffer block 28102720 for 49152 bytes If you have a crash, please supply a backtrace from the dump analysis as discussed below under Kernel Panics. Please don't delete the crash dump; it may be needed for further analysis. I'm not sure if a kernel panic occurred? I hope this information helps, and that someone can give me some advice! Cheers, Gareth On 6/30/05, Gareth Bailey [EMAIL PROTECTED] wrote: Hello, It appears that one of the vinum subdisks on my server has crashed. On rebooting I get the following message: -- start message -- Warning: defective objects V usr State:down Plexes:2 Size:37GB P usr.p0 C State:faulty Subdisks:1 Size:37GB P usr.p1 C State:faulty Subdisks:1 Size:37GB S usr.p0.s0 State:crashed P0:0 B Size:37GB S usr.p1.s0 State:stale P0:0 B Size:37GB [some fsck messages] Can't open /dev/vinum/usr: Input/output error [some more fsck messages] THE FOLLOWING FILE SYSTEM HAD AN UNEXPEXTED INCONSISTENCY: /dev/vinum/usr (/usr) Automatic file system checj failed . . . help! Enter full pathname of shell -- end message -- I have a straight forward configuration based on the Bootstrapping Vinum: A Foundation for Reliable Servers article by Robert Van Valzah. What could have caused this? The disks are pretty new. Please advise on the quickest route to getting our server back online. Much appreciated, Gareth Bailey ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Power cut during portupgrade -NRP kde
Hi all, I believe that a kde install using packages where possible is the quickest route. I started the kde install using portupgrade -NRP kde, but had a power cut half way through :-( How might i continue where I left off? Thanks for your help, Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
portupgrade -NRP interrupted, now what?
Hi there, A power cut interrupted my portupgrade -NRP kde task. I ran pkgdb -Fu as i thought that it would fix any inconsistencies i might have. I then ran portupgrade -NRP kde in an attempt to continue my package install of kde. The install is failing with the following sample error messages: pkg_add: can't open dependency file '/var/db/pkg/kdepim-3.4.0/+REQUIRED_BY'! dependency registration is incomplete pkg_add: can't open dependency file '/var/db/pkg/kdesdk-3.4.0/+REQUIRED_BY'! dependency registration is incomplete pkg_add: can't open dependency file '/var/db/pkg/kdeutils-3.4.0 /+REQUIRED_BY'! dependency registration is incomplete pkg_add: can't open dependency file '/var/db/pkg/kdeartwork-3.4.0 /+REQUIRED_BY'! dependency registration is incomplete Please advise on what i should do to complete the kde install. Thanks, Kind regards, Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Sendmail - massive logs
Hi All, I have found that my /var dir is filling up with logs caused by sendmail. I have no desire to use sendmail at the moment, and would like to turn it off completely (including logs). How might i do this. Presently, I have the following line in my rc.conffile. sendmail_enable=NONE Please advise, Thanks Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
IPF Firewall Rules... help!
We have a freebsd gateway server for windows clients. We use IPF with nat. What ipf rules and ipnat rules are required on the gateway for Limewire peer-to-peer to connect on the clients. If you can help, please do... i'm doing something wrong! Thanks Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Fwd: IPF Firewall Rules... help!
Hi Bob, Thanks, I have read the handbook and a couple of other articles. I have attached my ipf and ipnat rule lists. Please advise on the commented out Bit torrent sections. The windows clients want to run Limewire. WRT the LAN environment, we have a couple of Windows XP SP2 clients, and the freeBSD gateway. The external connection from the gateway runs upstairs into the block's router, which is connected to an ADSL router (no static IP). Thanks for your help! Gareth On Apr 8, 2005 2:51 PM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Read the official FreeBSD handbook firewall section. It has working examples. Any more help can only be offered if you post your rules and give details of your LAN environment. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Gareth Bailey Sent: Friday, April 08, 2005 8:16 AM To: freebsd-questions Subject: IPF Firewall Rules... help! We have a freebsd gateway server for windows clients. We use IPF with nat. What ipf rules and ipnat rules are required on the gateway for Limewire peer-to-peer to connect on the clients. If you can help, please do... i'm doing something wrong! Thanks Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ipf.rules Description: Binary data ipnat.rules Description: Binary data ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Copying files off Samba Server - freezes/very slow
Hi Ed, What version of FreeBSD are you running ? I'm running the i386 4.11 stable release What are you hardware specs? Gigabyte K8VM800M MB, 512 DDR 400 Memory, AMD Sempron Socket 754 2600+, 3com managed NIC (uses xl0 driver) What version of windows is running on your clients? Win XP SP2 do you use dynamic dns and or wins? Ok.. i'm not too clued up with this response, but i have nothing fancy going on here - std settings (..let me know if you need more info!) Thanks for your help, Regards, Gareth On Apr 7, 2005 2:38 AM, Ed Stover [EMAIL PROTECTED] wrote: I don't see any thing that would cause the slowness you described earlier. What version of FreeBSD are you running ? What are you hardware specs? What version of windows is running on your clients? do you use dynamic dns and or wins? On Wed, 2005-04-06 at 09:41 +0200, Gareth Bailey wrote: Hi Ed, My smb.conf file follows: Please let me know if you see anything that could be causing this behaviour. I'm running 4.11 release and samba-2.2.8a_2 Cheers. # start # This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options (perhaps too # many!) most of which are not shown in this example # # Any line which starts with a ; (semi-colon) or a # (hash) # is a comment and is ignored. In this example we will use a # # for commentry and a ; for parts of the config file that you # may wish to enable # # NOTE: Whenever you modify this file you should run the command testparm # to check that you have not many any basic syntactic errors. # #=== Global Settings = [global] # workgroup = NT-Domain-Name or Workgroup-Name, eg: REDHAT4 workgroup = GREENHOUSE log level = 10 # server string is the equivalent of the NT Description field server string = UberBSD Server # This option is important for security. It allows you to restrict # connections to machines which are on your local network. The # following example restricts access to two C class networks and # the loopback interface. For more examples of the syntax see # the smb.conf man page hosts allow = 192.168.0. 127. # If you want to automatically load your printer list rather # than setting them up individually then you'll need this load printers = no # you may wish to override the location of the printcap file ; printcap name = /etc/printcap # on SystemV system setting printcap name to lpstat should allow # you to automatically obtain a printer list from the SystemV spool # system ; printcap name = lpstat # It should not be necessary to specify the print system type unless # it is non-standard. Currently supported print systems include: # bsd, sysv, plp, lprng, aix, hpux, qnx ; printing = bsd # Uncomment this if you want a guest account, you must add this to /etc/passwd # otherwise the user nobody is used ; guest account = pcguest # this tells Samba to use a separate log file for each machine # that connects log file = /var/log/log.%m # Put a capping on the size of the log files (in Kb). max log size = 50 # Security mode. Most people will want user level security. See # security_level.txt for details. security = user # Use password server option only with security = server # The argument list may include: # password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name] # or to auto-locate the domain controller/s # password server = * ; password server = NT-Server-Name # Note: Do NOT use the now deprecated option of domain controller # This option is no longer implemented. # You may wish to use password encryption. Please read # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation. # Do not enable this option unless you have read those documents encrypt passwords = yes # null passwords = true # Using the following line enables you to customise your configuration # on a per machine basis. The %m gets replaced with the netbios name # of the machine that is connecting ; include = /usr/local/etc/smb.conf.%m # Most people will find that this option gives better performance. # See speed.txt and the manual pages for details # You may want to add the following on a Linux system: # SO_RCVBUF=8192 SO_SNDBUF=8192 socket options = TCP_NODELAY # Configure Samba to use multiple interfaces # If you have multiple network interfaces then you must list them # here. See the man page for details. ; interfaces = 192.168.12.2/24 192.168.13.2/24 # Browser Control Options: # set local master to no if you don't want Samba to become a master # browser on your network. Otherwise the normal election rules apply local master = yes # i turned this on # OS Level
Copying files off Samba Server - freezes/very slow
I have just upgraded the hardware of our development server. I thought that our file server used to be slow due to slow hardware, but now that we have upgraded I am a bit puzzled. Samba seems to slow or hang (top reports smbd CPU usage as 40%) when files are copied off the server using windows explorer on the client. Can anyone sugeest a reason for this behaviour? Thanks, Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Will Sempron 754 run with FreeBSD i386?
I just got a Sempron 754, will it run under FreeBSD 4.11 i386? I don't have time to reinstall the OS, so if the 754 doesn't run on i386 i'll swop the chip for a socket A. ... or will the 754 be substantially quicker that the equivalent speed Socket A? The machine is being used as a development server. Thanks for your advice Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Will Sempron 754 run with FreeBSD i386?
Thanks for the info Andrew. Much appreciated, Gareth On Apr 4, 2005 3:33 PM, Andrew P. [EMAIL PROTECTED] wrote: Gareth Bailey wrote: Thanks. Can anyone else comment on the following points?: The 754 Sempron: - Will run in FreeBSD 4.11 i386? - Will not be faster than Sempron socket A? Thanks Gareth I think you forgot to cc this message to freebsd-questions. Anyways, to further comment on these issues: Sempron cores are identical in Socket A and Socket 754 versions. Both support only 32-bit instruction sets (i686 in terms of CPUTYPE and i386 in terms of MACHINE). Any x86 OS will run on Sempron/754 smoothly. Personally, I think it's a much better choice than Celeron D. Sempron/754 might be a little faster than it's Socket A version - but that's _only_ because of the chipsets for Socket 754 are more advanced than Socket A ones. I would generally recommend using Sempron/754, as you could upgrade to Athlon 64 later and FreeBSD/x64 then. On the other hand, s754 will be deprecated in a few years in favour of s939. Best wishes, Andrew P. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
File permissions
Hi there, I need to set permissions on the /www/data-dist directory such that when samba users create new files in it the ownership of the files will automatically be set to www. How might i do this. I've had a look at the chmod and sticky manpages with no luck. Thanks, Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
PHP installation woes
Hi there, Could someone please give the low down on installing and configuring php on freebsd? I am running the 4.10 release as our development server with apache 1.3, php 4 and mysql 4. Up until now, the only way i have got php to work is to extract the php tarball, configure (with the switches below), make and make install from source. ./configure '--with-apxs=/usr/local/sbin/apxs' '--enable-versioning' '--with-gd' '--with-mysql' '--with-jpeg-dir=/usr/local/bin' '--with-zlib' '--with-mysql=/usr/local' '--prefix=/usr/local' '--with-mime-magic=/usr/share/misc/magic.mime' '--enable-sockets' '--enable-memory-limit' '--disable-all' The problem with this method is that it doesn't seem to install module libaries, and i'm just not convinced that i am going about it correctly. I also at some stage tried installing from ports (/usr/ports/lang/php4) with: # make 'insert switches from above here' build # make 'insert switches from above here' install None of the switches were acknowledged, as phpinfo() showed no support for the switches i required. I would really appreciate it if someone could recommend a way to install php with control over modules that are supported. Thanking you in adv, Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
A simple CGI question
Hi there, I have what i think is a really simple question regarding cgi scripts. I have an apache chpasswd cgi script that i want to make available so that users can browse to the url and change their own passwords. If a cgi script is in my /usr/local/www/cgi-bin directory, what url would i use to access the cgi from the web. Would i need to copy the cgi into my data directory? - i tried this and the browser treated it as a download. Please advise. Thanks! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Internet sharing authentication
Greetings, I have set up a FreeBSD gateway/firewall with ipf and ipnat in the past, but I am now confronted with a new challenge. I need to setup the firewall to only allow internet (www) access to users who successfully authenticate themselves with a username/password combination. Ideally, a user will open their web browser and be confronted with a authentication popup before gaining access to browse the web. Users should be able to access mail without authentication. Please advise on what I might use to do this. Thanks, Gareth ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Samsung ML-1510 under FreeBSD
Hello all, I am trying to set up a Samsung ML-1510 on my 4.10 release server. I've had a look at linuxprinting.org and it is supported but i'm not clear on what i need to install/do to get it working on FreeBSD. Can i use cups? I see there is cups and cups-lpr in ports. Could anyone give some advice on an easy way to get this up-and-running? Thanks, Gareth Bailey ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Courier-imap + Postfix problem
Hi Martin, That worked for me! Thanks for the late post anyway. Gareth - Original Message - From: Martin Hudec [EMAIL PROTECTED] To: Brent Wiese [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; 'Gareth Bailey' [EMAIL PROTECTED] Sent: Thursday, July 29, 2004 10:15 AM Subject: Re: Courier-imap + Postfix problem ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Starting portmap and fam on startup
Thanks Joey, i saw that after posting. In the future i'll make sure i read the pkg messages ;-) Ciao On Thu, 24 Jun 2004 13:37:25 -0300 Joey Mingrone [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gareth, /usr/ports/devel/fam/pkg-message says: 1. In order to run this port, please add the following line to /etc/rpc if it is not already there: ==8888888888== sgi_fam 391002 ==8888888888== 2. To run fam from inetd (the recommended method), then please add the following lines to /etc/inetd.conf if they are not already there: ==8888888888== # FAM: File Alteration Monitor [devel/fam] sgi_fam/1-2 stream rpc/tcp wait root /usr/local/bin/fam fam ==8888888888== After modifying /etc/inetd.conf, you must (as root) run: killall -HUP inetd Fam also requires that portmapper is running. Add the appropriate entry to /etc/rc.conf: For 4.x: Add portmap_enable=YES and either reboot or run /usr/sbin/portmap. For 5.x: Add rpcbind_enable=YES and either reboot or run /usr/sbin/rpcbind. Joey On June 24, 2004 04:49, Gareth Bailey wrote: Hi there, I have realised that courier-imap needs fam to be running to be happy. Fam, in turn needs portmap. I know that portmap can be started at boot time by using portmap_enable=YES in rc.conf, but how might one start fam at boot time? Regards, Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFA2wNM0NQPEWppBZsRAjWcAJ4w0ux8Ci9YS95FakH2n/IAloUaVQCfYtpb Bv752swV57KpzK7JDN5gnJw= =jXzf -END PGP SIGNATURE- _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Ipmon security log rotation
I start ipmon at boot time with /sbin/ipmon -D /var/log/security. Ipmon works fine but seems to stop logging entries to the security logfile when it is rotated. newsyslog.conf sets mode to 700, which should be fine since ipmon is run as root (i think?) How could i correct this? Thanks Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Ipmon security log rotation
The -D flag tells it to run as daemon. Starting ipmon with ipmon_flags=-D /var/log/security in rc.conf works fine. It logs to security as required. The problem comes in when the /var/log/security file is rotated by newsyslog. After this occurs, logging stop all together even though ipmon is still running! Thanks Gareth On Fri, 25 Jun 2004 08:52:40 -0400 JJB [EMAIL PROTECTED] wrote: If you are saying that you have /sbin/ipmon -D /var/log/security on the rc.conf statement, then you are telling it to do 2 conflicting things. The /var/log/security part needs to be removed. It's telling ipmon to use manual log file after you tell with -d to use syslog log function. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Gareth Bailey Sent: Friday, June 25, 2004 8:16 AM To: [EMAIL PROTECTED] Subject: Ipmon security log rotation I start ipmon at boot time with /sbin/ipmon -D /var/log/security. Ipmon works fine but seems to stop logging entries to the security logfile when it is rotated. newsyslog.conf sets mode to 700, which should be fine since ipmon is run as root (i think?) How could i correct this? Thanks Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Ipmon security log rotation
Thanks Dick, Giving ipmon -Ds flags and directing messages to the security file using local0.* seems to be the answer. Specifying a pid file in newsyslog.conf gave errors about not being able to HUP ipmon. Cheers, Gareth On Fri, 25 Jun 2004 14:24:41 +0100 Dick Davies [EMAIL PROTECTED] wrote: You need to either tell newsyslog the pidfile, so it can HUP ipmon, or just get it to use syslog (in which case newsyslog doesn't need to HUP it at all). * Gareth Bailey [EMAIL PROTECTED] [0616 14:16]: The -D flag tells it to run as daemon. Starting ipmon with ipmon_flags=-D /var/log/security in rc.conf works fine. It logs to security as required. The problem comes in when the /var/log/security file is rotated by newsyslog. After this occurs, logging stop all together even though ipmon is still running! Thanks Gareth On Fri, 25 Jun 2004 08:52:40 -0400 JJB [EMAIL PROTECTED] wrote: If you are saying that you have /sbin/ipmon -D /var/log/security on the rc.conf statement, then you are telling it to do 2 conflicting things. The /var/log/security part needs to be removed. It's telling ipmon to use manual log file after you tell with -d to use syslog log function. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Gareth Bailey Sent: Friday, June 25, 2004 8:16 AM To: [EMAIL PROTECTED] Subject: Ipmon security log rotation I start ipmon at boot time with /sbin/ipmon -D /var/log/security. Ipmon works fine but seems to stop logging entries to the security logfile when it is rotated. newsyslog.conf sets mode to 700, which should be fine since ipmon is run as root (i think?) How could i correct this? Thanks Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- A straw vote only shows which way the hot air blows. -- O'Henry Rasputin :: Jack of All Trades - Master of Nuns _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Courier-imap + Postfix problem
Hello Brent, I did a straight fowrard 'make install' for courier-imap in the ports directory. I configured it to use SSL. I have never installed fam manually, although it is possible that it got installed as a dependency with another port. So, i don't know why i'm the only one having issues :-) Thanks for your response. Google found a couple of articles in which ppl compained about fam errors in their maillogs. Apparently, fam (for some reason on my system, and theirs) needs to be running for use by courier-imap. Furthermore, for fam to be happy, portmap needs to be running. On starting these two services, the errors magically dissappeared. I would still like to know how i got into this situation though! All i got to do now, it seems, is start portmap and fam on system boot. I know portmap_enable=YES in rc.conf does the trick, but what about starting fam? Thanks, Gareth On Wed, 23 Jun 2004 12:33:31 -0700 Brent Wiese [EMAIL PROTECTED] wrote: Thanks. But now i'm back in the dark. Does anyone have any idea what the source of my errors in maillog could be? To recap, i'm running postfix and courier-imap and i'm getting errors as follows: maillog: Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). Any info would be great! I don't have the file your log describes. I don't think its part of courier. At least not if you installed it from the ports. Or, maybe its only written temporarily if someone is using imap via ssl (my mail server isn't active enough on imap-ssl to watch for that). It looks like maybe you have the File Access Monitor installed (/usr/ports/devel/fam)... I know nothing about it, but its likely something misconfigured on it that isn't allowing courier to write the file or something. _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Starting portmap and fam on startup
Hi there, I have realised that courier-imap needs fam to be running to be happy. Fam, in turn needs portmap. I know that portmap can be started at boot time by using portmap_enable=YES in rc.conf, but how might one start fam at boot time? Regards, Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Courier-imap + Postfix problem
Ok, i haven't got any responses regarding this post, but i have found what i think might be causing the problem. I setup my server with the hostname berkeley and installed everything i needed including postfix and courier-imap. I have since changed the hostname to server which was the name of my previous 5.2 release server (i had problems with the new berkeley hostname.) Anyway, i see in the output of postconf that there are two settings that appear to be dependent on the hostname, namely: berkeley_db_create_buffer_size=16777216 and berkeley_db_read_buffer_size=131072 Since the hostname changed to server, shouldn't these now be server_db_create_buffer_size=16777216 and server_db_read_buffer_size=131072?? If so: 1:)Could this be the source of my errors appearing in maillog(see below)? 2:)What do i need to do? - Reinstall postfix? Please advise, King regards Gareth Hi all, This problem has to do with my mail setup. I'm running postfix MTA and courier-imap server. My maillog file is filled with messages like the following: Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). I'm not too sure where to start - i suspect that whatever is trying to create the cache file doesn't have the neccesary permissions. If so, what is the location of this cache file? Otherwise, any other suggestions would be most welcome. Thanks, Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Courier-imap + Postfix problem
Thanks. But now i'm back in the dark. Does anyone have any idea what the source of my errors in maillog could be? To recap, i'm running postfix and courier-imap and i'm getting errors as follows: maillog: Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). Any info would be great! Thanks Gareth On Tue, 22 Jun 2004 08:12:44 -0400 Andy Harrison [EMAIL PROTECTED] wrote: On Tue, 22 Jun 2004 13:27:52 +0200, Gareth Bailey [EMAIL PROTECTED] wrote: Ok, i haven't got any responses regarding this post, but i have found what i think might be causing the problem. I setup my server with the hostname berkeley and installed everything i needed including postfix and courier-imap. I have since changed the hostname to server which was the name of my previous 5.2 release server (i had problems with the new berkeley hostname.) Anyway, i see in the output of postconf that there are two settings that appear to be dependent on the hostname, namely: berkeley_db_create_buffer_size=16777216 and berkeley_db_read_buffer_size=131072 Since the hostname changed to server, shouldn't these now be server_db_create_buffer_size=16777216 and server_db_read_buffer_size=131072?? If so: 1:)Could this be the source of my errors appearing in maillog(see below)? 2:)What do i need to do? - Reinstall postfix? Please advise, King regards Gareth Hi all, This problem has to do with my mail setup. I'm running postfix MTA and courier-imap server. My maillog file is filled with messages like the following: Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). I'm not too sure where to start - i suspect that whatever is trying to create the cache file doesn't have the neccesary permissions. If so, what is the location of this cache file? Otherwise, any other suggestions would be most welcome. berkeley is also a database file format... -- Andy Harrison _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Courier-imap + Postfix problem
Hi all, This problem has to do with my mail setup. I'm running postfix MTA and courier-imap server. My maillog file is filled with messages like the following: Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). I'm not too sure where to start - i suspect that whatever is trying to create the cache file doesn't have the neccesary permissions. If so, what is the location of this cache file? Otherwise, any other suggestions would be most welcome. Thanks, Gareth _ _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Mail problem - famd?
Hi all, I've recently converted our company server from 5.2 release to 4.10 stable. I'm in the process of ironing out last little issues i'm having. This problem has to do with my mail setup. I'm running postfix MTA and courier-imap server. My maillog file is filled with messages like the following: Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). Jun 20 15:47:05 server imapd-ssl: Failed to create cache file: maildirwatch (fre Jun 20 15:47:05 server imapd-ssl: Error: Input/output error Jun 20 15:47:05 server imapd-ssl: Check for proper operation and configuration Jun 20 15:47:05 server imapd-ssl: of the File Access Monitor daemon (famd). I'm not too sure where to start - i suspect that whatever is trying to create the cache file doesn't have the neccesary permissions. If so, what is the location of this cache file? Otherwise, any other suggestions would be most welcome. Thanks, Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Starting Apache on 4.10 stable at boot time
Hi all, I moved our work server over from 5.2 release to 4.10 stable. All seems fine except for some reason apache (apache-1.3.31_2) doesn't sart automatically at boot time. Does starting apache at boot time differ on 4.10 to 5.2? I have the apache.sh script in rc.d/ and it has correct privileges. What am in missing? Thanks, Gareth __ Herbalife Independent Distributor http://www.healthiest.co.za ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
IPF, IPNAT rules for dc++
Hi all, Does anyone have ipf and ipnat rules to allow Lan users to use dc++ through a fbsd gateway? I am trying to get it to work, with partial success? Thanks Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: help me make a Mail Server choice
Perica Veljanovski wrote: Hi, I have some trouble choosing between postfix and qmail for the new corporate mail server I'll be making. I'm looking for the one with least administrative overhead (since I run a one man show) and security is a big issue. Also, I'm looking for some guidance (choices) for POP, IMAP and webMail interface as well as Virus and SPAM (preferably free) protection. My mail setup is Postfix with amavisd-new, spamassasin(built into amavisd-new) and clamav antivirus. It was quite easy to setup, and its stable. For IMAP and POP i use Courier-Imap with SSL, and for webmail i use SquirrelMail. The admin is low (although i only have about 5 LAN users). I would recommend my mail setup anyday. If you like i can mail some resources that i used in setting up our server. Another issue is the FreeBSD version. Should I stay with the 4.x-STABLE or should I go with the 5.x. If I set up a 5.2-Release, will the upgrade to 5.3-STABLE be enough, or is there a possibility that I will have to reformat and do a clean 5.3 install. I would stay with the 4.x-STABLE branch (4.10) but get others' input on this. Cheers, Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Samba slow to start on bootup
Hi there, Recently, Samba has started to take about 30secs to start on system boot. Output to console says: ... SambaStarting ... The 30 (or more) second break takes place between the Samba and Starting output. What could this be?, it never used to take so long. I have recently upgraded to version samba-2.2.8a_2 on my 5.2 Release server. Is it possible that something else is causing the pause? There aren't any error messages. Thanks, Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Samba slow to start on bootup
I stopped samba using samba.sh stop, then started it again with samba.sh start. You are correct as far as the output goes, only Samba is written to console. But Samba took 30 - 40 seconds to load! It seems Samba is actually causing the pause. Why would this be? Thanks Gareth On Mon, 17 May 2004 11:43:58 +0200 Nelis Lamprecht [EMAIL PROTECTED] wrote: On Mon, 2004-05-17 at 10:48, Gareth Bailey wrote: Hi there, Recently, Samba has started to take about 30secs to start on system boot. Output to console says: ... SambaStarting ... The 30 (or more) second break takes place between the Samba and Starting output. What could this be?, it never used to take so long. I have recently upgraded to version samba-2.2.8a_2 on my 5.2 Release server. Is it possible that something else is causing the pause? There aren't any error messages. Hi, I doubt it is samba that is the cause of your problem. The reason I say this is because you mention the 30 sec break between Samba and Starting and the latest Samba script doesn't echo Starting. You should be able to tell by running the script manually. /usr/local/etc/rc.d/samba.sh stop/start I suggest you look at what loads after Samba. Check the above directory. Cheers, -- Nelis Lamprecht PGP: http://www.8ball.co.za/pgpkey/nelis.asc Unix IS user friendly.. It's just selective about who its friends are. _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Samba slow to start on bootup
Aah! Thanks for pointing me in the right direction. In debug mode the problem was revealed: Unable to connect to CUPS server localhost - Operation timed out Cheers, Gareth On Mon, 17 May 2004 12:30:56 +0200 Nelis Lamprecht [EMAIL PROTECTED] wrote: On Mon, 2004-05-17 at 11:56, Gareth Bailey wrote: I stopped samba using samba.sh stop, then started it again with samba.sh start. You are correct as far as the output goes, only Samba is written to console. But Samba took 30 - 40 seconds to load! It seems Samba is actually causing the pause. Why would this be? Thanks Gareth Try running smbd in debug mode smbd -F -S -d3 and see if anything stands out. Perhaps a server you have specified in your configuration file is unavailable or not responding. Do the same for nmbd. Cheers, -- Nelis Lamprecht PGP: http://www.8ball.co.za/pgpkey/nelis.asc Unix IS user friendly.. It's just selective about who its friends are. _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
ipmon logs to messages AND security
I have just installed IPFILTER as a replacement for IPFW. All is great besides the fact that ipf logs are being stored not only in /etc/security, but also /etc/messages. I don't want ipf logs in /etc/messages. In rc.conf, after enabling ipfilter i have the following lines: ipmon_enable=YES#Start ip monitor log ipmon_flags=-Ds #s=log to syslog, D=start as daemon Then in syslogd.conf i have: *.notice;authpriv.none;local0.none;mail.crit var/log/messages local0.* /var/log/security Shouldn't the local0.none prevent ipf logs from being entered in messages? Where am i going wrong? Thanks Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ipmon logs to messages AND security
Hi there, thanks for the sample rules and help in setting up IPF. I have restarted since making the changes to syslogd.conf. I HUP'd syslogd anyway, still no luck. All ipf logs go to security and messages! Can you think of anything else that i might do? Thanks Gareth On Mon, 17 May 2004 07:43:34 -0400 JJB [EMAIL PROTECTED] wrote: Changes to /etc/syslog.conf do not take effect until you tell the syslog task to re-read the conf file. You do that be issuing an HUP signal to the syslog task. Kill -HUP PID where PID is the task number from the ps ax command. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Gareth Bailey Sent: Monday, May 17, 2004 6:55 AM To: [EMAIL PROTECTED] Subject: ipmon logs to messages AND security I have just installed IPFILTER as a replacement for IPFW. All is great besides the fact that ipf logs are being stored not only in /etc/security, but also /etc/messages. I don't want ipf logs in /etc/messages. In rc.conf, after enabling ipfilter i have the following lines: ipmon_enable=YES#Start ip monitor log ipmon_flags=-Ds #s=log to syslog, D=start as daemon Then in syslogd.conf i have: *.notice;authpriv.none;local0.none;mail.crit var/log/messages local0.* /var/log/security Shouldn't the local0.none prevent ipf logs from being entered in messages? Where am i going wrong? Thanks Gareth _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ipmon logs to messages AND security
Thanks for the advice ;-), changing the ipmon_flags did the trick. Regards, Gareth On Mon, 17 May 2004 14:39:44 +0200 Nelis Lamprecht [EMAIL PROTECTED] wrote: On Mon, 2004-05-17 at 14:11, JJB wrote: Your solution of not using the syslog function does not answer his question. This is bad advice. Quoted Can you think of anything else that i might do? and answered: Rather use: ipmon_flags=-Dn /var/log/security This is not bad advice, I was offering a solution to his problem. -- Nelis Lamprecht PGP: http://www.8ball.co.za/pgpkey/nelis.asc Unix IS user friendly.. It's just selective about who its friends are. _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Mail list - problems receiving
I am now using free webmail to post to the list, since for
some reason i cannot post to the list from my real email
address (freebsd at ubersoft.co.za), i can only receive
mail messages. mailq has this to say:
{D3EBF4E3377 Sun May 9 16:31:31
[EMAIL PROTECTED]
(host mx1.freebsd.org[216.136.204.125] said: 450 Client
host rejected: cannot find your hostname, [xxx.x.xx.xx] (in
reply to RCPT TO command))
[EMAIL PROTECTED]
What should i do?
Many thanks
Gareth
_
For super low premiums ,click here http://www.dialdirect.co.za/quote
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Mail list - problems receiving
Thanks. Do i need to get my ISP to make this reverse entry?
- Gareth
On Thu, 13 May 2004 21:38:04 +0900
Luke Kearney [EMAIL PROTECTED] wrote:
On Thu, 13 May 2004 14:43:29 +0200
Gareth Bailey [EMAIL PROTECTED] granted us these
pearls of wisdom:
I am now using free webmail to post to the list, since
for
some reason i cannot post to the list from my real
email
address (freebsd at ubersoft.co.za), i can only receive
mail messages. mailq has this to say:
{D3EBF4E3377 Sun May 9 16:31:31
[EMAIL PROTECTED]
(host mx1.freebsd.org[216.136.204.125] said: 450 Client
host rejected: cannot find your hostname, [xxx.x.xx.xx]
(in
reply to RCPT TO command))
[EMAIL PROTECTED]
What should i do?
Many thanks
Gareth
fixing up your reverse dns will clear this up very
quickly
HTH
LukeK
--
Luke Kearney [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]
_
For super low premiums ,click here http://www.dialdirect.co.za/quote
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FTP problem with IPFW
Thank you. Please do send the sample ipfilter rules. I am very keen on getting all my services working properly with a solid firewall, and if IPFILTER is the only way then so be it. What changes to the kernel will IPFILTER require? At the moment i have the following kernel options for IPFW and nat: options IPFIREWALL options IPDIVERT options IPFIREWALL_DEFAULT_TO_ACCEPT options IPFIREWALL_VERBOSE To give you an idea about my requirements, my complete IPFW ruleset is attached. It is, ironically, based on an article by Marty Schlacter titled How to Build a FreeBSD-STABLE Firewall with IPFILTER (http://www.schlacter.net/public/FreeBSD-STABLE_and_IPFILTER.html) Many thanks for your response, Gareth On Tue, 11 May 2004 12:00:52 -0400 JJB [EMAIL PROTECTED] wrote: You have fallen into an IPFW bug. IPFW with an nated lan does not work with keep state rules. Your other Lan functions to public internet should not be working either. Their must be other ipfw rules which are allowing the other lan function to get through. IPFW is not the correct solution. You really need to use ipfilter the other builtin firewall that is delivered with the FBSD install. Ipfilter uses an stand-a-lone ipnat function instead of an subroutine call launched by an rule. It has keep-state rules also for the max in protection. I have sample ipfilter rules file I can send you if you are interested. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Gareth Bailey Sent: Tuesday, May 11, 2004 11:13 AM To: [EMAIL PROTECTED] Subject: FTP problem with IPFW I have recently setup IPFW on my FreeBSD 5.2 Release server. I am running natd to provide inet to 5 LAN users. It also runs mail, apache web server amongst others. All seems to be working fine, except for FTP. The first two lines of my firewall file are: add 1000 allow tcp from any to any via ed0 out keep-state add 1100 allow udp from any to any via ed0 out keep-state ... then later in the file: add 3600 allow tcp from any to me dst-port 21 in via ed0 setup keep-state I thought this would be sufficient to establish and maintain FTP connections. I read through the mailing lists and it seems that FTP is tricky with IPFW and natd. Is there a simple solution to this problem? Can i just add some other rule to my firewall? I read something about natd punching through IPFW, is this the answer? Any information will be mouch appreciated. Thanks, Gareth (IPFW newbie) _ For super low premiums ,click here http://www.dialdirect.co.za/quote add 00050 divert 8668 ip from any to any via ed0 # Outside Interface #--- # Allow out all TCP, UDP, and ICMP traffic keep state on it # so that it's allowed back in #--- add 1000 allow tcp from any to any via ed0 out keep-state add 1100 allow udp from any to any via ed0 out keep-state add 1200 allow icmp from any to any via ed0 out keep-state add 1300 deny IP from any to any via ed0 out #--- # Block all inbound traffic from non-routable or reserved address (paranoid) # spaces #--- add 2000 deny IP from 192.168.0.0/16 to any via ed0 in #RFC 1918 private IP add 2100 deny IP from 172.16.0.0/12 to any via ed0 in #RFC 1918 private IP add 2200 deny IP from 10.0.0.0/8 to any via ed0 in #RFC 1918 private IP add 2300 deny IP from 127.0.0.0/8 to any via ed0 in #loopback add 2400 deny IP from 0.0.0.0/8 to any via ed0 in #loopback add 2500 deny IP from 169.254.0.0/16 to any via ed0 in #DHCP auto-config add 2600 deny IP from 192.0.2.0/24 to any via ed0 in#reserved for doc's add 2700 deny IP from 204.152.64.0/23 to any via ed0 in #Sun cluster interconnect add 2800 deny IP from 224.0.0.0/3 to any via ed0 in #Class D E multicast #--- # Allow external access to services #--- add 3000 allow tcp from any to me dst-port 80 in via ed0 setup keep-state #HTTP add 3100 allow tcp from any to me dst-port 22 in via ed0 setup keep-state #SSH add 3200 allow tcp from any to me dst-port 143 in via ed0 setup keep-state #Webmail add 3300 allow tcp from any to me dst-port 993 in via ed0 setup keep-state #Courier IMAP - POP add 3400 allow tcp from
FTP problem with IPFW
I have recently setup IPFW on my FreeBSD 5.2 Release server. I am running natd to provide inet to 5 LAN users. It also runs mail, apache web server amongst others. All seems to be working fine, except for FTP. The first two lines of my firewall file are: add 1000 allow tcp from any to any via ed0 out keep-state add 1100 allow udp from any to any via ed0 out keep-state ... then later in the file: add 3600 allow tcp from any to me dst-port 21 in via ed0 setup keep-state I thought this would be sufficient to establish and maintain FTP connections. I read through the mailing lists and it seems that FTP is tricky with IPFW and natd. Is there a simple solution to this problem? Can i just add some other rule to my firewall? I read something about natd punching through IPFW, is this the answer? Any information will be mouch appreciated. Thanks, Gareth (IPFW newbie) _ For super low premiums ,click here http://www.dialdirect.co.za/quote ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
MYSQL startup error
I am running 5.2 Release, and have recently installed mysql-4.0.18 server. I first made a default install by issuing the following commands in the port: $ make # make install $ cd /var/db/mysql mysql_db_install Worked perfectly when i started up with: $ mysqld_safe Then i decided i wanted to reinstall with DB_DIR=/usr/db/mysql I made deinstall and clean in the port. I removed the /var/db directory manually. I then did the following in an attempt to install the DB_DIR in /usr/db/mysql: # mkdir /usr/db/mysql # chown -R mysql /usr/db #chgrp -R mysql /usr/db $ make DB_DIR=/usr/db/mysql # make DB_DIR=/usr/db/mysql install I encountered the following two problems: 1. Crontab complained with the following message: mkdir: /var/db/entropy: Permission denied /usr/libexec/save-entropy[45954]: The entropy directory /var/db/entropy does not exist, and cannot be created. Therefore no entropy can be saved. I solved this by creating /var/db/entropy and chowned and chgrped to mysql (don't know if that was right.) 2. I can't start mysqld_safe using command 'mysqld_safe '. I get the following errors... when i try as normal user: /usr/local/bin/mysqld_safe: cannot create /usr/db/mysql/server.err: Permission denied when i try from root: server# Starting mysqld daemon with databases from /usr/db/mysql 040318 09:51:58 mysqld ended I had a look at server.err in /usr/db/mysql and i found the following line: 040318 9:51:56 Fatal error: Can't open privilege tables: Can't find file: './mysql/host.frm' (errno: 13) Please advise. Any assistance will be very much appreciated. Thank you Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Recommended GUI manager for MYSQL
Can anyone recommend a good GUI manager for MYSQL? Thanks gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
mysql.host table not exist
I have just installed mysql. I have found the following error message in server.err: mysql.host table does not exist What do i need to do? Thanks Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Reverse DNS - mail error
My postfix seems to be running just fine, but i recently had a problem sending mail to a particular address. The message sent to me, the postmaster, was: host IP Number said: The server sending your mail [IP Number] does not have a reverse DNS entry. Connection Rejected. Please contact your Dial-Up/DSL/Network ISP Provider. Default Reject! (in reply to end of DATA command) What does this mean and what do i need to do? Any info will be much appreciated Thanks Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
amavisd - virusalert@example.com in maillog
I've got the following message appearing in my maillog over and over: maillog:4050:Mar 11 16:54:04 server postfix/smtp[7103]: D892D434C: to=[EMAIL PROTECTED], relay=none, delay=255114, status=deferred (connect to example.com[192.0.34.166]: Operation timed out) I can't seem to find where in the config file (amavisd.conf) it is specified. I've set the $mydomain variable and my notification reports in the same config file are as follows: # whom notification reports are sent from (ENVELOPE SENDER); # may be a null reverse path, or a fully qualified address: # (admin and recip sender addresses default to $mailfrom # for compatibility, which in turn defaults to undef (empty) ) # If using strings in double quotes, don't forget to quote @, i.e. \@ # $mailfrom_notify_admin = [EMAIL PROTECTED]; $mailfrom_notify_recip = [EMAIL PROTECTED]; $mailfrom_notify_spamadmin = [EMAIL PROTECTED]; I don't know where theis action is originating from. Any info will be much appreciated. Thanks Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Amavisd and clamd startup on boot
I have recently installed postfix, amavisd-new, clamd. I have amavisd.sh, clamav-clamd.sh and clamav-freshcalm.sh in my /usr/local/etc/rc.d directory. Neither clamd nor amavisd seem to start on boot. Please let me know what i am doing wrong? Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Postfix, amavisd-new, clamav, spamassasin
I believe Amavisd-new is a good interface for postfix and virus/spam scanners. I am not sure, however, whether amavisd-new comes with spamassasin or whether i need to install spamd from the freebsd ports collection. I see there is a hook in the amavisd-new config file for hooking up to a virus scanner, but the spam section seems to just use spamassasin without me having to specify the program to run. Is SA included in amavisd-new? Thanks Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
USB printer setup
Ok. I read through the handbook pages on printing and it doesn't have too much on usb printers. Can anyone suggest where i might start with setting up my USB Samsung laser printer? (My system loads it on ulpt0 so kernel is fine!) Thanks Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Email client SSL certificate storage
I've installed postfix and courier-imap. How do i stop my outlook client from warning about a root certificate that is self-issued. Do i need to install the certificate on the clients? How do i do this since the certficates are in .pem format? Thanks Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Courier-Imap authentication
I recently installed Postfix MTA and Courier-Imap. Postfix is working correctly. I configured Courier-Imap, all seems well except i get a message when trying to connect from client saying Fatal error: /home/barry/Maildir: Permission denied I have created /usr/local/etcuserdb and run pw2userdb. I chmod 700 /usr/local/etc/userdb I created /home/barry/Maildir I ran userdb [EMAIL PROTECTED] set home=/home/barry mail=/home/barry/Maildir uid=x gid=x Then i ran userdbpw | userdb [EMAIL PROTECTED] set systempw .. and finally ran makeuserdb I think maybe i got the uid and gid incorrect. I thought that these were the values are stated in /etc/passwd (but maybe not?). What else could it be? Thank you Gareth __ http://www.webmail.co.za/dialup Webmail ISP - Cool Connection, Cool Price ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Sysinstall XF86Config
I was wondering why sysinstall /Config/XFree86Config only lists some of the graphics drivers available. After some time i found the correct driver from additional drivers that appeared when i ran xf86config from the command line. Cheers Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Wireless USB Adapter
I have an X-Micro wireless USB Adapter that prints ugen0: vendor 0x0ace USB WLAN, rev 1.10/1.01, addr 2 when i plug it in. Is there any way i can get this device to work under FreeBSD? Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
XF86Config - ProSavage DDR 8D04
X server message generated is (WW) Savage: Chipset ProSavage DDR in Device section Card0 isn't valid for this driver After experiencing difficulty configuring X Server for use with the above graphics hardware, i downloaded a new savage_drv.o file and replaced the original. No joy. Has anyone had any success with this hardware? Please advise. Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Preferred MTA and mail configuration
I'm new to email on FreeBSD. Could someone please advise at what MTA i should use. I thought courier might be a good choice since it has integrated POP3 and IMAP servers (bearing in mind i have to serve Outlook clients). I want simple install. Thank you Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Mail storage in Postfix
Where is mail actually stored under Postfix MTA? Thanks -Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
XF86Config - ProSavage DDR 8DO4
X server message generated is (WW) Savage: Chipset ProSavage DDR in Device section Card0 isn't valid for this driver After experiencing difficulty configuring X Server for use with the above graphics hardware, i downloaded a new savage_drv.o file and replaced the original. No joy. Has anyone had any success with this hardware? Please advise. Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Sendmail and imap server config
Hello I want to set up 5.2 Release as an email server. I have performed basic configuration of the sendmail config files as outlined in the handbook I installed cyrus imapd. I'm battling. Can't seem to find a straight forward setup guide. I installed it using passwd password authentication. I enabled IMAP4 in inetd. Thats how far i am at the mo. I need outlook and outlook express clients to download messages and send mail through the server. How am i to configure the clients? Perhaps there is a simpler pop3 or IMAP server (preferably) that i can use. Any advice will be much appreciated. Gareth __ http://www.webmail.co.za/dialup Webmail ISP - Cool Connection, Cool Price ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Wireless USB Adapter
Does anyone know how to configure FreeBSD to use a wireless USB WLAN adapter. The adapter is a X-Micro WLAN USB adapter. When i plug it into FreeBSD i get a ugen0 device loaded message. I understand this means that the OS doesn't specifically recognise it as a WIFI adapter, treating it as a generic USB device. I'm not sure what chipset it is based on. I checked on the vendor's site with no joy. I tried configuring the kernel to include wireless network support and the wi driver. But still no joy. How would i begin to set up this piece of hardware for FreeBSD? I'm running 5.1 Release. Any advice would be appreciated. Thanks Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Windows client - internet connection sharing
Thank you Matthew. a big help! On Tue, 16 Dec 2003 15:18:08 + Matthew Seaman [EMAIL PROTECTED] wrote: On Mon, Dec 15, 2003 at 07:40:14PM +0200, Gareth Bailey wrote: Is it possible to set up a freebsd server connected to an ADSL line to provide internet access via LAN to a number of Windows clients. I don't know where to start. Any information in this regard will be greatly appreciated. Yes, absolutely. However, there are such a huge number of variations on possible ways of doing that that it's impossible to describe everything you'ld need to know in a simple e-mail. Lets look at a few questions you'ld need to answer: 1) ADSL router or modem? This is all about how you interface your FreeBSD system to ADSL -- the basic choice is between a router: a standalone unit which you plug the phone line into one side of, and an ethernet cable into the other -- or a modem: this is a device that plugs into a serial or USB port on your FreeBSD box. Routers will work entirely independently of your FreeBSD machine. Since your connection to them is via ethernet, there's practically no compatibility problems. Depending on how much money you spend, your can get routers which provide packet filtering, network and port address translation, DNS, DHCP and various other capabilities -- although if you go to the expense of buying a really capable router there's not much left to do for your FreeBSD box. Modems are the other end of this scale: you need to find a device for which appropriate drivers are available under FreeBSD. Once you've got the modem connected up, you'll need to use the attached FreeBSD box to provide appropriate functionality to make a practicable ADSL connection. This includes running PPPoA or PPPoE (A = ATM, E = Ethernet: all ADSL in the UK is PPPoA, other countries do things differently) to establish networking into your service provider. You would use the standard FreeBSD stuff to do NAT and firewall packet filtering, and you can install DHCP servers and so forth. Effectively the FreeBSD box + modem takes the place of the standalone router above. 2) What sort of address space do you want to have assigned to you from your ISP? The cheapest ADSL accounts give you a single Internet-routable IP number, usually assigned via DHCP. There can be an implicit assumption that you've basically got just one machine you want to have net access, although this is becoming less common nowadays. Lots of ISPs will give you two addresses: this is intended to give you an address for the router box, plus an address for a real PC. Next step up is to get that one or two addresses permanently assigned to you. Beyond that, you can get a routed connection -- you get a small net block permanently assigned to you, as well as the single IP used for the WAN side of your router. This enables you to set up a 'DMZ' network, and for instance have several servers visible on the Internet. Many ISPs will have local policies forbidding you from running servers of various sorts, mostly as a way of protecting the ISP from the awful consequences of allowing Windoze machines out on the open Internet in the hands of the clueless. 3) A consequential decision related to the above: do you want some or all of your Windows (or other) LAN machines to have Internet routable addresses or to run Internet visible services? There's several ways of doing this: DMZ network -- classic firewall design. Here the Internet accessible machines are kept on a separate small sub-net, and you have a second packet-filtering router (generally a machine with a couple of network cards, running natd and ipfw or similar) between that and your private internal network. Packet filtering bridge -- similar to the above, except that the DMZ is and the internal private stuff are now technically on the same subnet, and your packet filter serves to separate public and private parts of the subnet. This is a much harder setup to get working effectively and securely than either of the other two, so use only as a last resort. NAT address proxying -- your NAT gateway has one or more IP addresses assigned and the NAT gateway knows how to forward incoming connections to an internal server. Or you run proxy servers on the Internet visible addresses which will accept incoming connections and relay them to the real servers on the internal network. Taken to the extreme, you could use this sort of setup to do load balancing and other fancy networking tricks, but you'ld probably have to spend $$$ to by the right sort of hardware load balancing kit needed. 4) From
Windows client - internet connection sharing
Is it possible to set up a freebsd server connected to an ADSL line to provide internet access via LAN to a number of Windows clients. I don't know where to start. Any information in this regard will be greatly appreciated. Thanks Gareth Bailey ___ Look Good, Feel Good www.healthiest.co.za ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Can't mount UFS in KNOPPIX
Is it possible to mount freebsd native partitions in Knoppix? How can this be done? - i have tried 'mount -t ufs' and 'mount -t ufs -o ufstype=44bsd' BUT Knoppix doesn't want to know about it. GJ Bailey ___ Look Good, Feel Good www.healthiest.co.za ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
