Re: pkgng package repository tracking security updates

2013-01-15 Thread n j
On Tue, Jan 15, 2013 at 10:13 AM, Matthew Seaman matt...@freebsd.orgwrote: On 14/01/2013 22:44, n j wrote: One thing to think about would be the option of port maintainers uploading the pre-compiled package of the updated port (or if the size of the upload is an issue then just the hash

pkgng package repository tracking security updates

2013-01-14 Thread n j
Hi, One of my primary concerns when managing a system is its security. In the interest of security, I usually hold to that patch early, patch often. Ports are kept well up-to-date and with portmaster it is not a problem to keep updating the ports. However, as Ivan [1] pointed out on his blog on

Re: pkgng package repository tracking security updates

2013-01-14 Thread n j
On Mon, Jan 14, 2013 at 2:10 PM, Andrei Brezan andrei...@gmail.com wrote: On 1/14/2013 1:07 PM, n j wrote: Hi, One of my primary concerns when managing a system is its security. In the interest of security, I usually hold to that patch early, patch often. Ports are kept well up-to-date

Re: pkgng package repository tracking security updates

2013-01-14 Thread n j
On Mon, Jan 14, 2013 at 3:15 PM, Matthew Seaman matt...@freebsd.org wrote: On 14/01/2013 13:10, Andrei Brezan wrote: I thing that it's good to wait for ports to compile and to be able to chose your configure options for the packages you install. It's good to know what options you need and

Re: pkgng package repository tracking security updates

2013-01-14 Thread n j
On Mon, Jan 14, 2013 at 3:43 PM, Matthew Seaman m.sea...@infracaninophile.co.uk wrote: On 14/01/2013 14:36, n j wrote: The point of my question was exactly if it was possible to elaborate on the pre-compiled packages from FreeBSD official repositories part. Would it be possible to have

Re: FreeBSD Release Date Challenge, plus other stuff the project needs

2012-12-11 Thread n j
On Tue, Dec 11, 2012 at 8:17 AM, Stephen Cook scli...@gmail.com wrote: On 12/11/2012 1:52 AM, Anonymous wrote: We, the users of FreeBSD, *do hereby challenge* the FreeBSD project to meet its future release dates. Similarly, I'm a bit concerned that 9.0 loses support at the end of January,

Re: Somewhat OT: Is Full Command Logging Possible?

2012-12-06 Thread n j
On Thu, Dec 6, 2012 at 12:47 AM, Tim Daneliuk tun...@tundraware.com wrote: ... Well ... does auditd provide a record of every command issued within a script? I was under the impression (and I may well be wrong) that it noted only the name of the script being executed. Even if you configured

Re: Becoming a Mirror

2012-08-28 Thread n j
Hello Justin, On Mon, Aug 27, 2012 at 2:25 AM, Justin Dorfman jdorf...@netdna.com wrote: Hello, I was wondering how our company can provide a mirror for the FreeBSD project? Thanks. Have a look at http://www.freebsd.org/doc/en_US.ISO8859-1/articles/hubs/article.html. HTH, -- Nino

Re: anyone here use poudriere ?

2012-07-14 Thread n j
On Sat, Jul 14, 2012 at 9:59 AM, Christopher J. Ruwe c...@cruwe.de wrote: On Fri, 13 Jul 2012 12:32:48 +0100 Vincent Hoffman vi...@unsane.co.uk wrote: I've been playing with poudriere and pkg as per ... Btw, is there any chance poudriere (or sth like it) will one day work on UFS, not just

Re: ports vs packages

2012-01-10 Thread n j
On Mon, Jan 9, 2012 at 8:36 PM, Alejandro Imass a...@p2ee.org wrote: On Mon, Jan 9, 2012 at 1:19 PM, Devin Teske devin.te...@fisglobal.com wrote: Of course, this is explicit to rather serious production environments. Desktop and casual usage ... ports may serve you better if you like to stay

Re: Two Networks on one System

2011-06-21 Thread n j
I can't really say I understand the exact problem the OP has, but if it's anything similar to asymmetrical/source-based routing problems I was having some time ago, pf and reply-to is probably the best way to do it. However, I'd also like to point out setfib(1), as it seems no-one has brought it

Re: Coldfusion, Postgres and Java under FreeBSD

2011-03-07 Thread n j
Java works very well for me under FreeBSD; I have not had a single problem with Java on FreeBSD. To install java, you can either install a pre-compiled JDK (called diablo-jdk) or compile all the JDK sources from scratch using the ports system.  If you compile yourself from ports, you can

Re: Coldfusion, Postgres and Java under FreeBSD

2011-03-07 Thread n j
On Tue, Mar 8, 2011 at 2:13 AM, b. f. bf1...@googlemail.com wrote: Why not now? (Or anytime this past year or more?): Hmm, good point :-). I was misled by the ports page (e.g. http://www.freebsd.org/cgi/ports.cgi?query=openjdkstype=all) which used to have a different entry if a port had a

Re: IPFilter and IPMon logging to syslog

2011-03-02 Thread n j
On Tue, Mar 1, 2011 at 8:38 PM, Dean E. Weimer dwei...@dweimer.net wrote: I have been doing some work with cleaning up my log files to make them easier to read, and for the life of me can't figure out how to get my IPFilter logs to stop going into the /var/log/messages log.  I have a syslog

Re: Date of a FreeBSD installation

2011-01-14 Thread n j
I'm just guessing if there is a way to know a FreeBSD installation date. We can't look after the uname -a ident since an update of the FreeBSD kernel is possible. How about looking at /proc or /mnt? On a couple of my boxes that I checked, those files came up being the oldest and probably

Re: Any recommendations for FreeBSD VPS hosting?

2011-01-10 Thread n j
On Mon, Jan 10, 2011 at 9:21 AM, Usman wajdan...@gmail.com wrote: http://www.ajkservers.co.uk They support FreeBSD :) FreeBSD is indeed listed as supported OS, but for every hosting plan, the virtualization is stated as OpenVZ. To my understanding, you can't run FreeBSD on OpenVZ. BTW, in the

Any recommendations for FreeBSD VPS hosting?

2010-12-29 Thread n j
Hello, I'm looking for inexpensive but reliable FreeBSD VPS hosting. Any input coming from a positive personal experience will be most appreciated. So far the most likely candidate seems to be http://www.nqhost.com/unmetered-xen-vds.html. If anyone ever dealt with them, please share. TIA, --

Re: Any recommendations for FreeBSD VPS hosting?

2010-12-29 Thread n j
Thanks for the input, I'll look into the suggested options: http://arpnetworks.com/vps http://www.rootbsd.net/virtual-hosting/ http://www.johncompanies.com/jc_bsd.html If you know of any other FreeBSD VPS providers, please share. Thanks, -- Nino ___

Superfluous ACK and RST packets after terminating connection

2010-02-11 Thread n j
Hi all, I was debugging some problems with an application and noticed some strange behavior that I can only attribute to possible problems in TCP/IP stack which OTOH I consider unlikely. I'd appreciate any pointers towards why are there extra packets? - in case of successful connection:

Re: When a System Dies; Getting back in operation again.

2009-05-06 Thread n j
... What is the best way to restore the full system? Can I use the FreeBSD installation disk in rescue mode? I experienced such a situation just 2 weeks ago. My primary problem was that I had to do restore over the network (no attached tape drives, no external HDDs). I wanted to use ssh to grab

fixit console with sshd

2009-04-28 Thread n j
I was just wondering if someone could give me a quick advice on how (or at least confirm it's possible) to start sshd in fixit console i.e. how to boot FreeBSD off the CD1 (6.4-RELEASE) and enable SSH access to it. What I have tried (unsuccessfully) so far is: 1) copying sshd startup script (and

Re: new package system proposal

2009-04-09 Thread n j
I'd like to use this opportunity to generally support this and any other ideas taking direction of making binary installs and upgrades easier and more manageable. I recognize the need for people to configure custom options and compile from ports (that is why any new system *must* be compatible

Re: Logcheck dependency hell

2009-02-25 Thread n j
Hey Greg, perhaps you might want to know about this. Sorry for using the list for unicast mail, but (as seen below) I obviously can't contact you directly. Regards, -- Nino -- Forwarded message -- ...                   The mail system i...@sourcehosting.net: host

Re: Logcheck dependency hell

2009-02-24 Thread n j
Hi Greg, On Mon, Feb 23, 2009 at 10:13 PM, Greg Larkin glar...@freebsd.org wrote: I'm the maintainer of security/logcheck, and I apologize for not catching up with my inbox sooner.  I just saw your message, and the same issue was reported by someone else a couple of weeks ago. sorry if the

Re: Logcheck dependency hell

2009-02-17 Thread n j
The Makefile says: ... So I'll bet some money that it's docbook. Correct. Does it improve if you add these to /etc/make.conf: ... No, the result is exactly the same. # finddep.php security/logcheck x11/xorg-libraries /usr/ports/textproc/docbook-to-man: /usr/local/libdata/xorg/libraries

Re: Logcheck dependency hell

2009-02-17 Thread n j
(sorry for the previous mail) The Makefile says: ... So I'll bet some money that it's docbook. Correct. Does it improve if you add these to /etc/make.conf: ... No, the result is exactly the same. # finddep.php security/logcheck x11/xorg-libraries /usr/ports/textproc/docbook-to-man:

Logcheck dependency hell

2009-02-12 Thread n j
Hello, could anyone help me what command should I use to find out which logcheck-required port _exactly_ is trying to install half of the X libraries? The logcheck port lists the following build depends (output of pretty-print-build-depends-list): This port requires package(s)

Re: apt of freebsd

2009-02-03 Thread n j
Or you can try Debian GNU/kFreeBSD (http://www.debian.org/ports/kfreebsd-gnu/) to get the best(?) of both worlds - FreeBSD kernel and GNU userland (aka use apt to install deb packages). -- Nino ___ freebsd-questions@freebsd.org mailing list

Re: KDE: What a monster!

2009-01-26 Thread n j
Linus Torvalds on KDE4... [quote] Q: Another open source project that underwent a big change was KDE with version 4.0. They released a lot of fundamental architectural changes with 4.0 and it received some negative reviews. As a KDE user how has this impacted you? A: I used to be a KDE user. I

Re: [freebsd-questions] Looking @ upgrades mechanisms...

2008-12-07 Thread n j
versions. The packages for a particular branch tend to lag the updates by up to a couple of weeks although they are built continually. If you want to stay really up to date you need to keep your tree updated with portsnap or csup (part of the base system) and compile them yourself. Another

Re: Ipfw forward

2008-11-25 Thread n j
I'd like to have a clarification about the forward command in ipfw. From what I read in the man, I understand that on hitting a fwd rule, the lookup in the routing table will be done according to the IP address in the fwd rule, and not according to the IP destination address of the packet.

Can't get in-kernel IPFW NAT (libalias) to work

2008-10-05 Thread n j
Hello all, I resolved my earlier problem (ipfw: getsockopt(IP_FW_ADD): Invalid argument when trying ipfw add nat) by upgrading to 7.1-BETA which includes ipfw_nat as a kernel module; however, it still doesn't seem to work. When I'm directly ping'ing another box, I can see packets arriving at the

Re: nat and firewall

2008-10-02 Thread n j
This is no longer true; he did indeed find firewall_nat_enable in /etc/defaults/rc.conf. The knob seems to have first appeared in February in HEAD and I'm guessing it cues the system to use a new kernel-based nat rather than natd(8), but I've not read anything further about this, as my

Re: Recompile kernel or module for ipfw+nat?

2008-09-30 Thread n j
however, there is a kernel module called ipdivert.ko Is it still necessary to recompile the kernel in order to use nat with ipfw? Or, to put it another way, is there a possibility to use nat and keep the generic kernel? You can choose to use the modules or make it static by recompile the

Recompile kernel or module for ipfw+nat?

2008-09-23 Thread n j
Hello everyone, I have a quick question regarding the setup of nat with ipfw. According to the handbook: The following options must be in the kernel configuration file: options IPFIREWALL options IPDIVERT however, there is a kernel module called ipdivert.ko similar to ipfw.ko for the firewall.

Re: Free Graphical Netflow Analyzer for FreeBSD / Windows

2008-08-21 Thread n j
I would like to know seek any advices from all people here about any free tools for analyzing netflow data which can generate nice management report (chart, graph) like SolarWinds/any commercial products, that can be run either or Windows or FreeBSD (prefer). Not sure if that's what you're

Makefile OPTIONS (was: Re: Apache 2.2.8 + mod_authnz_ldap)

2008-05-09 Thread n j
What are you using for apr? The one that comes with apache itself, or the devel/apr port? AFAICT, the one that comes with Apache itself. It would seem that mod_authnz_ldap required mod_ldap to be compiled in Apache to work. Having little or no experience at all with Apache + LDAP combination

Re: Makefile OPTIONS (was: Re: Apache 2.2.8 + mod_authnz_ldap)

2008-05-09 Thread n j
If this is a fixed dependency, then it's a bug in the port's Makefile. If it's not set in stone (i.e.: mod_authnz_ldap could also work with mod_fictional_3rdparty_ldap), then applying the logic you suggest, would kill the option to use mod_fictional_3rdparty_ldap. Set in stone would

Apache 2.2.8 + mod_authnz_ldap

2008-05-08 Thread n j
Hello, did anyone experience any problems trying to install mod_authnz_ldap with Apache 2.2.8 on FreeBSD 6.3? I ran into the following trouble: mod_authnz_ldap.c:41:2: #error mod_authnz_ldap requires APR-util to have LDAP support built in. To fix add --with-ldap to ./configure which caused Stop

Re: FreeBSD crashes

2008-04-07 Thread n j
Yep, it's definitely a NMI (interleaved from several CPUs at once) which most likely means hardware failure. Hello Kris, thanks for confirming my doubts! Regards, -- Nino ___ freebsd-questions@freebsd.org mailing list

FreeBSD crashes

2008-04-01 Thread n j
Hello everyone, I hope someone can help me. I have started to experience seemingly random crashes causing FreeBSD to shutdown and power off the machine. The only trace I can find as far as the reason for the crash is concerned are the following excerpts from /var/log/messages: Mar 23 11:52:36

Re: FreeBSD crashes

2008-04-01 Thread n j
I hope someone can help me. I have started to experience seemingly random crashes causing FreeBSD to shutdown and power off the machine. The only trace I can find as far as the reason for the crash is concerned are the following excerpts from /var/log/messages: Mar 23 11:52:36 myhostname

Re: FreeBSD crashes

2008-04-01 Thread n j
I suspect you're going to have to get crash dumps in order to get any real answers: http://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/kerneldebug.html I already started digging through this part of handbook, though I'm not sure I'll be able to read anything useful from the

Re: FreeBSD crashes

2008-04-01 Thread n j
Even if it doesn't help you, it will provide details that you can post with your question so that people can help you more effectively. True. In the meantime, I've started reading the temperature sensors with freeipmi and graphing them with munin. On a side note, the hardware in question is

Re: Deb archives

2008-03-05 Thread n j
Yes you did! Interesting enough thought, I would like to see how one might config apt-get to be used w/FreeBSD and the packages (I assume?). You might want to have a look at Debian GNU/kFreeBSD (http://www.debian.org/ports/kfreebsd-gnu/). Regards, -- Nino

Re: starting a program at boot time

2008-03-05 Thread n j
how do i start a program at boot time? I found the following threads helpful: script to be executed on system startup http://docs.freebsd.org/cgi/getmsg.cgi?fetch=116+0+archive/2008/freebsd-questions/20080210.freebsd-questions /usr/local/etc/rc.d/ scripts and non-root user

Re: freebsd-update and mergemaster

2008-03-03 Thread n j
Who is working on FreeBSD update? Maybe I can make a feature request. Or, even better, make a patch - FreeBSD is open source, everyone can work on it! Sorry, couldn't resist :-). I know the above remark is generally not very helpful for an average user; however, I was surprised to find out

Truss and procfs

2008-01-26 Thread n j
Hello everyone, just a short question regarding truss - I did some googling and found a reference to a conversation with proposed (working?) patch to eliminate dependency on procfs. That was in April 2007: http://lists.freebsd.org/pipermail/freebsd-current/2007-April/070574.html Does anybody

Re: Where is the next uid from adduser pulled from?

2007-12-17 Thread n j
Tried looking for the adduser program, but could not find adduser.c Just to point out that adduser is a shell script, as witnessed by: # file /usr/sbin/adduser /usr/sbin/adduser: Bourne shell script text executable and the response to the original question - how does the system generate new

Re: Unexpected shutdown

2007-11-23 Thread n j
Just to wrap this thread up, as I was out of town last couple of days: According to shutdown(8) there should be a message in the log stating when the system went down, who did it and why. There should be... but there isn't :-). The only thing that went to /var/log/messages is syslogd exiting

Unexpected shutdown

2007-11-18 Thread n j
Hello, my FreeBSD (6.2 release) box shut down at approximately 3 AM with no apparent reason whatsoever. I'm looking for any hints/pointers that would help me detect why the box decided to shutdown. Perhaps someone with similar experience? This is from 'last' command: shutdown ~

Re: Unexpected shutdown

2007-11-18 Thread n j
Does it happened before, or does it happened everyday at 3 am, or is this the first time your box shutdown without explaination? No, this is the first time this has occurred, that is what makes it completely unexpected. If this is the first time, I would say there are many possibilities. Say

Re: Unexpected shutdown

2007-11-18 Thread n j
Hello Randy, Roland, Gary, This is all ancedotal since I don't have any hard evidence to point to exactly one thing since I also swapped out a fan and reinserted connectors in the process. My feeling is that it was hard drive heat-related so my suggestion is to do some poking around for hot

Re: ipfw -- why need to let icmp out that I already let in?

2007-10-31 Thread n j
add 10510 allow icmp from any to any out via oif() keep-state I don't think ICMP is stateful :) You need both in and out rules for ICMP because the logical responses to packets can't be reliably connected into a single communication. Actually, I disagree. True, ICMP is not a stateful

Gmirror on a partition of a slice

2007-09-12 Thread n j
Hello, this question is somewhat related to my earlier question regarding gstripe during install where the common conclusion was to gmirror the root partition and gstripe the rest as you can't boot from a gstripe'd volume (which I later confirmed in

Re: Gstripe during install

2007-09-07 Thread n j
John, thank you very much for your detailed input. If it were me, I would a small (for some definition of small considering your disk space and software needs) partition on the first disk and install everything to that. After the system is up, create an identical partition on the second disk

Gstripe during install

2007-09-07 Thread n j
Hello, I have a machine which has 2 (identical) hard disks. I would like to create RAID-0 GEOM stripe (gstripe(8)) to merge these 2 disks into 1 disk with larger capacity and install FreeBSD on it. There is this article (http://www.onlamp.com/pub/a/bsd/2005/11/10/FreeBSD_Basics.html) which shows

Re: awk question

2007-07-27 Thread n j
awk '{print $(NF-1)}' user.csv Yup, those blank lines will kill it for sure. A sed filter to remove blank lines ahead of the awk statement should allow it to work properly. Or awk only i.e. no sed: awk '!(/^$/) { print $(NF-1) }' user.csv -- Nino

freebsd-update question

2007-07-18 Thread n j
Hello, while updating my FreeBSD box, freebsd-update reported: Looking up update.FreeBSD.org mirrors... 1 mirrors found. Fetching metadata signature from update1.FreeBSD.org... done. ... No updates needed to update system to 6.2-RELEASE-p6. However, uname -a reveals: FreeBSD my.hostname.here

Re: freebsd-update question

2007-07-18 Thread n j
The cause for this confusion is the fact that patches 5 and 6 were for a userland utility (file) and a library (libarchive), not for the kernel. So for these patches, the kernel (which contains the release-level string) isn't rebuilt and so it isn't updated. 1) change the update mechanism to

Re: sftp and tab completion

2007-06-21 Thread n j
On 6/18/07, Lowell Gilbert [EMAIL PROTECTED] wrote: I've got a simple question. Does sftp, the one that comes with FreeBSD 6.2's openssh, do tab completion? I've read that it could, but Use lftp (/usr/ports/ftp/lftp). Lftp supports sftp protocol and does tab completion. Regards, -- Nino

Re: Java on the BSD Desktop?

2007-05-30 Thread n j
I guess if everyone here on this list gives his/her two cents to this topic we're having a nice java advocacy flame war. ;-) The main characteristic of a flame war is to disparage other people's arguments while maintaining that your arguments are the best, no? That's why I'm not going to try

Re: Java on the BSD Desktop?

2007-05-29 Thread n j
I am wanting to write a gui frontend to pkg_cutleaves. I see that it is just a simple perl script so, it would be quite simple to just put a gtk frontend on it and call it a day. However, I am starting to write a good amount of code in java and was wondering what others think about java as the

postfix question

2007-04-25 Thread n j
Hello, does anybody know is it possible with Postfix to route e-mail based on either the inet interface message came from or the sender of a message? I'm using Postfix v.2.3.8 on a multihomed machine and have two smtpd's defined in master.cf. What I would like is that mail submitted through

Re: postfix question

2007-04-25 Thread n j
Hello Oliver, Would it help to pimp your transport map? #In the case of delivery via SMTP, one may specify host- #name:service instead of just a host: # # example.com smtp:bar.example:2025 You can replace bar.example with the IP address of the other

Re: postfix question

2007-04-25 Thread n j
You would probably get better assistance if you asked this question on the Postfix forum. True. However, I did google through a lot of Postfix resources (documentation, forums, mailing lists...) and didn't find what I was looking for. I posted this question here hoping that someone already ran

Re: [Fwd: Re: I like Ubuntu]

2007-04-17 Thread n j
Hopefully that helps answer some of your questions. Overall, I find the FreeBSD ports system to be more flexible, but an acceptable runner-up for purposes of binary package-based OSes in my opinion is Debian. Just to add my .02$ to this topic, speaking from a perspective of a FreeBSD lover in

portmanager or portupgrade?

2007-03-21 Thread n j
Hello, first off, I'm looking for a ports upgrading solution on my box, not trying to start a religious debate over which one is better. I'm interested in hearing what other FreeBSD admins are using and, if possible, why they prefer one over the other. I have some experience with portupgrade

IPFW rule syntax

2007-02-28 Thread n j
Hello, I have observed the following behavior in IPFW (note the asterisks): ipfw add 1000 allow tcp from 10.1.2.3 to 10.3.2.1 ** in gets added to the rule list as: 01000 allow tcp from 10.1.2.3 to 10.3.2.1 *dst-port * in? Why does IPFW convert my to dst-port and

Re: Sun jdk 1.6? Any port?

2007-02-21 Thread n j
Is there any plan to port Sun JDK 1.6 to FreeBSD? FYI, I'm running JDK6 in Linux compatibility mode for an application that uses RMI, JDBC, threads and runs as a daemon (24/7) and I had no problems so far, the setup looks very stable. Hope it helps, -- Nino

Re: Best partitioning scheme for my HDD? Please advise.

2007-02-21 Thread n j
What would be the best sizes for the disk partitions so that I don't run out of space on any of them while also leaving the maximum amount of space possible for the future software to be installed? While I'd certainly go with a single partition as a solution for your setup, if you really

Makefile knobs

2007-02-06 Thread n j
Hello, I have a question regarding the various knobs one can set while building a port. The problem as I see it is that the user usually has to be a makefile lingo expert (okay, not an expert, but you catch my drift) to decipher all the various options and set perhaps only the one he really

Re: Legato Client for freeBSD.

2006-12-18 Thread n j
One is to enable FreeBSD's Linux Compatibility and use Letgato's Linux client (I suppose they have one?) I actually tried this. And the client actually works. However, I haven't found a way to escape Linux compatibility chroot - i.e. backing up /usr actually backs up /compat/linux/usr. Of

Re: Legato Client for freeBSD

2006-12-15 Thread n j
6.0.2 Legato client that used(?) to be in the ports works fine for me on a 6.1 box, while 5.5.2 works fine on my 4.9 box. I'm quite certain we are using current 7.x Legato server. As far as security is concerned, local users are not a problem, while firewall takes care of remote problems. Of

Netflow sensor/generator for Freebsd

2006-10-31 Thread n j
Hello everyone, I'd like to inspect the flows in and out of my fbsd boxes. In order to closely simulate a true netflow-capable router, I found out I need three components: flow sensors, flow collector and flow analyzer. There are quite a few solutions for collecting and analyzing flows, even