howto kill x if x is running?

2013-09-15 Thread Gary Kline
Organization: Thought Unlimited.  Public service Unix since 1986.
Of_Interest: With 27 years  of service  to the  Unix  community.

guys, 

I've evidently had too many pain meds; this shelll script should 
be easy.  say that I have a utility xxx running sometimes.  xxx is
soaking up a chunk of my load.  I have to use top to find if
xxx is running, then kill -9 to kill xxx and have a steady load of,
say, between 0.10 and 0.15.  what's the script that can do this?

gary

-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
 Twenty-seven years of service to the Unix community.
http://www.thought.org/HOPE


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto kill x if x is running?

2013-09-15 Thread Polytropon
On Sat, 14 Sep 2013 23:20:46 -0700, Gary Kline wrote:
   say that I have a utility xxx running sometimes.  xxx is
   soaking up a chunk of my load.  I have to use top to find if
   xxx is running, then kill -9 to kill xxx and have a steady load of,
   say, between 0.10 and 0.15.  what's the script that can do this?

Quick and dirty, needs adjustments. Repeat the following
(endless loop, depending on the shell you're using):

top -n | awk '/%/ { load=$11; sub(%, , load); sub(\\., , load); 
if(load  1000  load  1500) print $1 }' | xargs kill -9

The margin is coded in the conditional: 1000 means 10.00% WCPU
(load 0.10), 1500 means 15.00% WCPU (load 0.15). You will have
to set the valid load accordingly.

Done some minor testing, killed my media player (as expected).
I'm sure someone will present a much better, less dirtier
approach to accomplish the requested task. :-)



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto kill x if x is running?

2013-09-15 Thread Matthew Seaman
On 15/09/2013 07:20, Gary Kline wrote:

   I've evidently had too many pain meds; this shelll script should 
   be easy.  say that I have a utility xxx running sometimes.  xxx is
   soaking up a chunk of my load.  I have to use top to find if
   xxx is running, then kill -9 to kill xxx and have a steady load of,
   say, between 0.10 and 0.15.  what's the script that can do this?

The classic answer to this is that you need to find the pid of your
'xxx' process, and then kill it using that.  Some combination of ps(1)
and grep(1) usually sufficed.

However nowadays there's the very handy pkill(1):

pkill -9 xxx

Tying that in with the trigger based on system load:

#!/bin/sh

load=$(sysctl vm.loadavg | cut -d ' ' -f 3)
too_high=$(bc -e $load  0.15  /dev/null)

if [ $too_high = '1' ]; then
pkill -9 xxx
fi

Note the use of bc(1) to compare floating point values -- the built-in
$((shell arithmetic)) or expr(1) only do integer arithmetic.

One final point -- instead of killing the xxx process when the load gets
too high, you could simply renice(1) it to very low priority.  Or even
better, use idprio(1).

This won't actually affect the system load values much as 'system load'
is an average of the number of processes requesting a CPU time slice.
What it does do is mean that your 'xxx' process is always pretty much
the last process to get any CPU time -- so everything else should remain
responsive, and your xxx process will only run when the system is
otherwise idle.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.

PGP: http://www.infracaninophile.co.uk/pgpkey
JID: matt...@infracaninophile.co.uk



signature.asc
Description: OpenPGP digital signature


Re: howto kill x if x is running?

2013-09-15 Thread Gary Kline
Organization: Thought Unlimited.  Public service Unix since 1986.
Of_Interest: With 27 years  of service  to the  Unix  community.

On Sun, Sep 15, 2013 at 07:56:17AM +0100, Matthew Seaman wrote:
 On 15/09/2013 07:20, Gary Kline wrote:
 
  I've evidently had too many pain meds; this shelll script should 
  be easy.  say that I have a utility xxx running sometimes.  xxx is
  soaking up a chunk of my load.  I have to use top to find if
  xxx is running, then kill -9 to kill xxx and have a steady load of,
  say, between 0.10 and 0.15.  what's the script that can do this?
 
 The classic answer to this is that you need to find the pid of your
 'xxx' process, and then kill it using that.  Some combination of ps(1)
 and grep(1) usually sufficed.
 
 However nowadays there's the very handy pkill(1):
 
 pkill -9 xxx
 
 Tying that in with the trigger based on system load:
 
 #!/bin/sh
 
 load=$(sysctl vm.loadavg | cut -d ' ' -f 3)
 too_high=$(bc -e $load  0.15  /dev/null)
 
 if [ $too_high = '1' ]; then
 pkill -9 xxx
 fi
 
 Note the use of bc(1) to compare floating point values -- the built-in
 $((shell arithmetic)) or expr(1) only do integer arithmetic.
 
 One final point -- instead of killing the xxx process when the load gets
 too high, you could simply renice(1) it to very low priority.  Or even
 better, use idprio(1).
 
 This won't actually affect the system load values much as 'system load'
 is an average of the number of processes requesting a CPU time slice.
 What it does do is mean that your 'xxx' process is always pretty much
 the last process to get any CPU time -- so everything else should remain
 responsive, and your xxx process will only run when the system is
 otherwise idle.
 
   Cheers,
 
   Matthew


thanks very much, gents.  no, it wasnt my med; it was that I slept
ttoo much:: Old age.  pkill -9 utility  works.  the 0.15 or 0.10
were arbitrrary.  the default load adverage should be even less
since the box is just sitting here!  ...well, it's replying to 
lookup, I suppose.  tx again, 

gary


 -- 
 Dr Matthew J Seaman MA, D.Phil.
 
 PGP: http://www.infracaninophile.co.uk/pgpkey
 JID: matt...@infracaninophile.co.uk
 



-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
 Twenty-seven years of service to the Unix community.
http://www.thought.org/HOPE


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO monitor changes in installed packages within jails?

2013-07-23 Thread Michael Grimm

On 20.07.2013, at 18:34, Michael Grimm trash...@odo.in-berlin.de wrote:

 On 20.07.2013, at 14:53, Matthew Seaman m.sea...@infracaninophile.co.uk 
 wrote:
 On 20/07/2013 12:09, Michael Grimm wrote:
 
 I did migrate to pkgng some month ago, and ever since I am curious
 how to monitor changes in installed packages within jails. I am
 looking for a functionality/port that works like 490.status-
 pkg-changes for my host.
 
 Question: is there any functionality within the periodic system or a
 port that I might have missed to find?
 
 You can't just run 490.status-pkg-changes directly in your jail?
 
 Yes, I can ;-) 
 
 But! I do have a lot of service jails running at my host, thus I would like 
 to omit modifying every jail's /etc/periodic.conf adding:
 
 | daily_status_pkg_changes_enable=YES# Show package changes
 | pkg_info=pkg info  # Use this program
 
 
 Try this patch:
 
 Thanks for that approach, namely adding pkg -j jailname info for every jail 
 running. Due to my amount of jails I might need to add some looping over jls 
 -N output instead of adding a lot of $daily_status_pkg_changes_flags.
 
 I was hoping that I could omit programming that functionality myself, but I 
 might need to do so.

I ended up in adding:
--- snip 
--- /usr/src/etc/periodic/daily/490.status-pkg-changes  2013-04-03 
17:59:35.894705550 +0200
+++ /etc/periodic/daily/490.status-pkg-changes  2013-07-23 20:19:27.833641916 
+0200
@@ -32,6 +32,24 @@
diff -U 0 $bak/pkg_info.bak2 $bak/pkg_info.bak \
| grep '^[-+][^-+]' | sort -k 1.2
fi
+
+# added jail(s) support
+#
+   for jname in `jls -N | grep -v JID | awk '{print $1}'`; do
+   if [ -f $bak/pkg_info_${jname}.bak ]; then
+   mv -f $bak/pkg_info_${jname}.bak 
$bak/pkg_info_${jname}.bak2
+   fi
+   jexec ${jname} ${pkg_info:-/usr/sbin/pkg_info}  
$bak/pkg_info_${jname}.bak
+
+   cmp -sz $bak/pkg_info_${jname}.bak 
$bak/pkg_info_${jname}.bak2
+   if [ $? -eq 1 ]; then
+   echo 
+   echo Changes in installed packages (jail 
${jname}):
+   diff -U 0 $bak/pkg_info_${jname}.bak2 
$bak/pkg_info_${jname}.bak \
+   | grep '^[-+][^-+]' | sort -k 1.2
+   fi
+   done
+
fi
;;
--- snip 

Not perfect, really, but working at my side.

Michael
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


HOWTO monitor changes in installed packages within jails?

2013-07-20 Thread Michael Grimm
Hi --

I did migrate to pkgng some month ago, and ever since I am curious how to 
monitor changes in installed packages within jails. I am looking for a 
functionality/port that works like 490.status-pkg-changes for my host.

Question: is there any functionality within the periodic system or a port that 
I might have missed to find?

Thanks in advance and with kind regards,
Michael
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO monitor changes in installed packages within jails?

2013-07-20 Thread Matthew Seaman
On 20/07/2013 12:09, Michael Grimm wrote:
 I did migrate to pkgng some month ago, and ever since I am curious
 how to monitor changes in installed packages within jails. I am
 looking for a functionality/port that works like 490.status-
 pkg-changes for my host.
 
 Question: is there any functionality within the periodic system or a
 port that I might have missed to find?

You can't just run 490.status-pkg-changes directly in your jail?

Try this patch:

lucid-nonsense:/tmp:% diff -u 490.status-pkg-changes{.orig,}
--- 490.status-pkg-changes.orig 2013-07-20 13:43:44.306303775 +0100
+++ 490.status-pkg-changes  2013-07-20 13:44:42.055327506 +0100
@@ -10,7 +10,7 @@

 case $daily_status_pkg_changes_enable in
[Yy][Ee][Ss])
-   pkgcmd=/usr/local/sbin/pkg
+   pkgcmd=/usr/local/sbin/pkg $daily_status_pkg_changes_flags

echo
echo 'Changes in installed packages:'

Then add something like the following to /etc/periodic.conf:

daily_status_pkg_changes_flags='-j jailname'

Of course, this only lets you monitor changes in one jail at a time.
You can cover more by copying the script and changing its name eg.

sed -e 's/daily_status_pkg_changes/daily_status_pkg_changes2/g' \
 490.status-pkg-changes  490.status-pkg-changes2

Then add appropriate daily_status_pkg_changes2_flags='-j otherjail'
settings to periodic.conf

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.

PGP: http://www.infracaninophile.co.uk/pgpkey
JID: matt...@infracaninophile.co.uk



signature.asc
Description: OpenPGP digital signature


Re: HOWTO monitor changes in installed packages within jails?

2013-07-20 Thread Michael Grimm
On 20.07.2013, at 14:53, Matthew Seaman m.sea...@infracaninophile.co.uk wrote:
 On 20/07/2013 12:09, Michael Grimm wrote:

 I did migrate to pkgng some month ago, and ever since I am curious
 how to monitor changes in installed packages within jails. I am
 looking for a functionality/port that works like 490.status-
 pkg-changes for my host.
 
 Question: is there any functionality within the periodic system or a
 port that I might have missed to find?
 
 You can't just run 490.status-pkg-changes directly in your jail?

Yes, I can ;-) 

But! I do have a lot of service jails running at my host, thus I would like to 
omit modifying every jail's /etc/periodic.conf adding:

| daily_status_pkg_changes_enable=YES# Show package changes
| pkg_info=pkg info  # Use this program


 Try this patch:

Thanks for that approach, namely adding pkg -j jailname info for every jail 
running. Due to my amount of jails I might need to add some looping over jls 
-N output instead of adding a lot of $daily_status_pkg_changes_flags.

I was hoping that I could omit programming that functionality myself, but I 
might need to do so.

Thanks for your input and with kind regards,
Michael


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


pkg version -L howto?

2013-05-18 Thread Leslie Jensen


I ran into a little problem with my old crontab scripts.

I do the following:

portsnap -I cron update

/usr/local/sbin/portmaster -y --clean-distfiles

/usr/local/sbin/portmaster -aF

pkg version -vIL


After changing to pkg the check for outdated ports fails on the -L flag

pkg version -vIL
pkg: option requires an argument -- L
usage: pkg version [-IPR] [-hoqv] [-l limchar] [-L limchar] [[-X] -s string]
   [-r reponame] [-O origin] [index]
   pkg version -t version1 version2
   pkg version -T pkgname pattern



According to pkg help version the -l -L should be followed by limchar.

Unfortunately it is not clear what limchar can be. Looking at the 
examples in help I drew the conclusion that limchar can be one of the 
following:

=   ? !


And in my case I would need the -L  to show which packages need to be 
updated. But that is not the case.


root@blj01~:pkg version -vIL=

root@blj01~:pkg version -vIL
Missing name for redirect.

root@blj01~:pkg version -vIL
Missing name for redirect.

root@blj01~:pkg version -vIL?
pkg: No match.

root@blj01~:pkg version -vIL!
Lists all installed packages


I would very much like a suggestion on how to get this right.

Thank you

/Leslie


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


pkg version -L howto?

2013-05-18 Thread Robert Huff

Leslie Jensen writes:
  pkg version -vIL
  pkg: option requires an argument -- L
  usage: pkg version [-IPR] [-hoqv] [-l limchar] [-L limchar] [[-X] -s string]
  [-r reponame] [-O origin] [index]
  pkg version -t version1 version2
  pkg version -T pkgname pattern
  
  According to pkg help version the -l -L should be followed by limchar.
  
  Unfortunately it is not clear what limchar can be. Looking at the 
  examples in help I drew the conclusion that limchar can be one of the 
  following:
  =   ? !

The limchar needs to be escaped, otherwise it gets picked off
by the shell.
Grepped for my crontab:

pkg version -vl \


Robert Huff  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: /usr/bin/find - binary operands howto

2012-06-05 Thread grarpamp
A single find already had the needed selection and execution ops.
So I was trying it first, before writing an external parser, etc.

It's still not clear to me how find is compiling the arguments
internally, but using -vv on the utils helped a lot. After adding
-false after all the -exec's, it now works as desired up against
my array of inodes. I also worked in a pre-change, select, ls.

The arbitrary format of gfind is interesting. It can maybe be
approximated in find with -exec ls someargs {} \+.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: /usr/bin/find - binary operands howto

2012-06-04 Thread Karl Vogel
 On Sun, 3 Jun 2012 19:10:00 -0400, 
 grarpamp grarp...@gmail.com said:

G Given a fs with millions of inodes, multiple find runs is expensive.  As
G is performing the ch* on more than the minimum required inodes, which
G also needlessly updates the inode ctime. So I want one find, doing the
G ch* only if necessary.  So how should I write this? Do I want to use
G -true/-false somehow?

   It might be more efficient to keep find output in either a flat file or DB,
   so you can avoid multiple walks over the filetree.  You'll need GNU find:

   #!/bin/sh
   export PATH=/usr/local/bin:/bin:/usr/bin
   test $1 || set .

   echo '#filetype|inode|links|uname|gname|mode|size|mtime|pathname'
   gfind $@ -printf '%y|%i|%n|%u|%g|%m|%s|%T@|%p\n'
   exit 0

   Sample output:

   root# chown 1234 stuff
   root# chgrp 5678 stuff

   me% ls -l
   drwxr-sr-x 3 kev   local512 04-Jun-2012 21:01:41 .
   drwxr-xr-x 2 kev   local512 04-Jun-2012 21:38:47 mail
   -rw-r--r-x 1 kev   local  47072 04-Jun-2012 19:34:26 mail/junk*
   -rw-r--r-- 1 1234   5678 85 19-May-2012 23:28:30 stuff
   -rw-r--r-- 1 kev   local   8104 04-Jun-2012 19:43:44 testing

   me% [run script]
   #filetype|inode|links|uname|gname|mode|size|mtime|pathname
   d|873603|3|kev|local|2755|512|1338858101|.
   d|1188634|2|kev|local|2755|512|1338860327|./mail
   f|1188649|1|kev|local|645|47072|1338852866|./mail/junk
   f|955452|1|1234|5678|644|85|1337484510|./stuff
   f|873708|1|kev|local|644|8104|1338853424|./testing

   Run this first, then look for the conditions you want using awk or perl.
   Advantages:

   * Doesn't change ctime, no additional filetree-walking.

   * You can use this to create your locate DB, if you want to avoid a
 second pass through the filesystem.

   * Gives you a point-in-time picture of ownership, mode, etc. in case
 you need to back out your changes.

-- 
Karl Vogel  I don't speak for the USAF or my company

When I read about the evils of drinking, I gave up reading.  --Henny Youngman
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


/usr/bin/find - binary operands howto

2012-06-03 Thread grarpamp
Given a fs with millions of inodes, multiple find runs is expensive.
As is performing the ch* on more than the minimum required inodes,
which also needlessly updates the inode ctime. So I want one find,
doing the ch* only if necessary.

I came up with this. But any true line short circuits the rest of
the -o's, which isn't desired. Using -a results similarly.

The man page says -exec returns true if util is true. ch* is usually
true unless the operation isn't permitted (file flags, read-only,
etc) or the node vanishes in a race.

The test[s] would keep -exec[s] from being always executed.

Then there is the problem of the full permutation of the initial
state of the owner and mode, say: 00, 01, 10, 11.

So how should I write this? Do I want to use -true/-false somehow?

# touch 1 ; chown 1:1 1 ; chmod 0666 1 ; ls -l 1

# find 1 \( \
\( \! \( -uid 0 -gid 0 \) -exec chown 0:0   {} \+ \) \
 -o \
\(-perm +0222 -exec chmod ugo-w {} \+ \) \
 -o \
...
 -o \
...
\)

# ls -l 1
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-07 Thread vermaden
 Good to see you've finally been burned.
 You'll never make that mistake again. :)

I liked that syntax:

ASD  {
  asd
} || {
  bsd
}

mostly because of syntax highlighting, to be precise highlighting
of the second bracket of a pair at editors, nor VIM neither GEANY
highlight if/then/elif/else/fi unfortunately, seems that I will have
to live with that ;p

 OK, I'll give that a try. Thanks for being persistent with me.

Did it worked?

Regards,
vermaden
--























...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-07 Thread Randal L. Schwartz
 vermaden == vermaden  verma...@interia.pl writes:

 Good to see you've finally been burned.
 You'll never make that mistake again. :)

vermaden I liked that syntax:

vermaden ASD  {
vermaden   asd
vermaden } || {
vermaden   bsd
vermaden }

vermaden mostly because of syntax highlighting, to be precise highlighting
vermaden of the second bracket of a pair at editors, nor VIM neither GEANY
vermaden highlight if/then/elif/else/fi unfortunately, seems that I will have
vermaden to live with that ;p

Emacs indents it nicely, and colorizes the keywords so that it stands out.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
mer...@stonehenge.com URL:http://www.stonehenge.com/merlyn/
Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc.
See http://methodsandmessages.posterous.com/ for Smalltalk discussion
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-07 Thread vermaden
 Emacs indents it nicely, and colorizes the
 keywords so that it stands out.

Indentification is not a problem, it work both
in geany and vim.

Probably I haven't made clear what I meant ;)

Take a look at this picture:
http://ompldr.org/vZG50bQ

The brackets in that specific section (asd) are
highlighted, other are not, its not possible with
if/then/fi, only the keywords are highlighted,
but they are highlighted for the whole script so ... ;)

With { } I can also (un)fold the section/function,
its not possible with if/then/fi.

Regards,
vermaden
-- 








































...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-05 Thread vermaden
 And no difference on 8.3 :(
 
 Should there have been a promote in there somewhere?  It looks like
 the boot env is still dependent on the very old zroot.

Hi,

I have just recreated from scratch Your zroot root
setup under VirtualBox and tested it deeply.

There was an interesting BUG in the *beadm* utility,
or maybe it is a BUG in sh(1), I do not have that
good knowledge of POSIX/sh(1) standards.

To the point, check these two code snippets, they should
do EXACLY the same, logic is the same, the differece is
only the syntax.

snippet 1:

[ ${MOUNT} -eq 0 ]  {
  zfs set mountpoint=${TMPMNT} ${POOL}/ROOT/${2}
  zfs mount ${POOL}/ROOT/${2}
} || {
  TMPMNT=${MOUNT}
}

snippet 2:

if [ ${MOUNT} -eq 0 ]; then
  zfs set mountpoint=${TMPMNT} ${POOL}/ROOT/${2}
  zfs mount ${POOL}/ROOT/${2}
else
  TMPMNT=${MOUNT}
fi

But unfortunately, it comes out that its not the same ...

[ ${MOUNT} -eq 0 ]  {
  zfs set mountpoint=${TMPMNT} ${POOL}/ROOT/${2}
  zfs mount ${POOL}/ROOT/${2}
  # IF THIS LINE ABOVE FAILS (NOT RETURN 0) THEN
  # TMPMNT=${MOUNT} BELOW WILL BE EXECUTED
} || {
  TMPMNT=${MOUNT}
}

The sollution can be put command that will always
work (return 0 on exit) like that:

[ ${MOUNT} -eq 0 ]  {
  zfs set mountpoint=${TMPMNT} ${POOL}/ROOT/${2}
  zfs mount ${POOL}/ROOT/${2}
  echo 1 /dev/null 2 /dev/null
} || {
  TMPMNT=${MOUNT}
}

... or to rewrite it under if/then/else which I did for the whole
*beadm* utility and I no longer use || and  syntax, anywhere.

As for Your problems, this worked for me on this VirtualBox test
environment.

# zfs promote zroot
# zfs rollback zpool@be
# zfs set mountpoint=/mnt zroot
[ set vfs.root.mountfrom=zfs:zroot in /mnt/boot/loader.conf ]
# zpool set bootfs=zroot zroot
# zfs set mountpoint=none zroot
# reboot

These above should bring back to the start point before
You entered my instructions to try *beadm* and BEs.

After reboot ...

# zfs destroy -R zroot/ROOT
# zfs create -o mountpoint=none zroot/ROOT
# zfs send zpool@be | zfs recv zroot/ROOT/be
# fetch https://raw.github.com/vermaden/beadm/master/beadm
# chmod +x beadm
# ./beadm list
# ./beadm activate be
# reboot

Now You should have a working system with boot environments.

Both GitHub and SourceForce have the latest fixed *beadm* version.

Regards,
vermaden
-- 








































...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-05 Thread Randal L. Schwartz
 vermaden == vermaden  verma...@interia.pl writes:


vermaden To the point, check these two code snippets, they should
vermaden do EXACLY the same, logic is the same, the differece is
vermaden only the syntax.

vermaden snippet 1:

vermaden [ ${MOUNT} -eq 0 ]  {
vermaden   zfs set mountpoint=${TMPMNT} ${POOL}/ROOT/${2}
vermaden   zfs mount ${POOL}/ROOT/${2}
vermaden } || {
vermaden   TMPMNT=${MOUNT}
vermaden }

vermaden snippet 2:

vermaden if [ ${MOUNT} -eq 0 ]; then
vermaden   zfs set mountpoint=${TMPMNT} ${POOL}/ROOT/${2}
vermaden   zfs mount ${POOL}/ROOT/${2}
vermaden else
vermaden   TMPMNT=${MOUNT}
vermaden fi

No, no and no.  I got burned by that about 30 years ago in shell
programming.  Every time I see someone use that, I shriek just a little
bit.

vermaden ... or to rewrite it under if/then/else which I did for the whole
vermaden *beadm* utility and I no longer use || and  syntax,
vermaden anywhere.

Good to see you've finally been burned.  You'll never make that mistake
again. :)

vermaden After reboot ...

vermaden # zfs destroy -R zroot/ROOT
vermaden # zfs create -o mountpoint=none zroot/ROOT
vermaden # zfs send zpool@be | zfs recv zroot/ROOT/be
vermaden # fetch https://raw.github.com/vermaden/beadm/master/beadm
vermaden # chmod +x beadm
vermaden # ./beadm list
vermaden # ./beadm activate be
vermaden # reboot

vermaden Now You should have a working system with boot environments.

OK, I'll give that a try. Thanks for being persistent with me.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
mer...@stonehenge.com URL:http://www.stonehenge.com/merlyn/
Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc.
See http://methodsandmessages.posterous.com/ for Smalltalk discussion
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-04 Thread vermaden
 I have zfs-on-root using the classical documentation (everything under
 zpool, possibly with some sub-mounts, but I've left those out lately).
 
 Is there a way to transition my system to a form that beadm expects?
 I tried just running it, and it's upset that zpool/ROOT doesn't exist.

Hi,

I would suggest using something like that:

# zfs create -o mountpoint=none zpool/ROOT
# zfs snapshot zpool@be
# zfs clone zpool@be zpool/ROOT/default
# fetch https://github.com/vermaden/beadm/blob/master/beadm
# chmod +x beadm
# ./beadm list
# ./beadm activate default
# reboot

Be sure to use the latest *beadm* from one of these:
https://raw.github.com/vermaden/beadm/master/beadm
https://sourceforge.net/projects/beadm/

Let me know how these instructions work, especially if You got any errors or an 
unbootable system.

It would be best if You would test this zpool root to sys/ROOT/be transition 
under VirtualBox for 100% safety ;)

Regards,
vermaden
-- 








































...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-04 Thread Randal L. Schwartz
 vermaden == vermaden  verma...@interia.pl writes:

vermaden # fetch https://github.com/vermaden/beadm/blob/master/beadm

Heh.  That's HTML.  I think you want

fetch https://raw.github.com/vermaden/beadm/master/beadm

vermaden # chmod +x beadm
vermaden # ./beadm list
vermaden # ./beadm activate default
vermaden # reboot

vermaden Be sure to use the latest *beadm* from one of these:
vermaden https://raw.github.com/vermaden/beadm/master/beadm
vermaden https://sourceforge.net/projects/beadm/

vermaden Let me know how these instructions work, especially if You got
vermaden any errors or an unbootable system.

Oh, that worked perfectly, except for an error message during the
create.

and after reboot, zfs set mountpoint=none zroot would also seem to
clean that up.

vermaden It would be best if You would test this zpool root to sys/ROOT/be 
transition under VirtualBox for 100% safety ;)

vermaden Regards,
vermaden vermaden
vermaden -- 








































vermaden ...
vermaden ___
vermaden freebsd-questions@freebsd.org mailing list
vermaden http://lists.freebsd.org/mailman/listinfo/freebsd-questions
vermaden To unsubscribe, send any mail to 
freebsd-questions-unsubscr...@freebsd.org



-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
mer...@stonehenge.com URL:http://www.stonehenge.com/merlyn/
Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc.
See http://methodsandmessages.posterous.com/ for Smalltalk discussion
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-04 Thread Randal L. Schwartz
 Randal == Randal L Schwartz mer...@stonehenge.com writes:

 vermaden == vermaden  verma...@interia.pl writes:
vermaden # fetch https://github.com/vermaden/beadm/blob/master/beadm

Randal and after reboot, zfs set mountpoint=none zroot would also seem to
Randal clean that up.

Oh wait, it looks like zroot is still holding 1.04G of data... will
that ever go away?  Shouldn't all the data be in the /ROOT/xxx items?

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
mer...@stonehenge.com URL:http://www.stonehenge.com/merlyn/
Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc.
See http://methodsandmessages.posterous.com/ for Smalltalk discussion
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-04 Thread Randal L. Schwartz
 Randal == Randal L Schwartz mer...@stonehenge.com writes:

Randal Oh wait, it looks like zroot is still holding 1.04G of data... will
Randal that ever go away?  Shouldn't all the data be in the /ROOT/xxx
Randal items?

And worse, the things from the readme don't work:

locohost# ./beadm create upgrade
cannot create 'zroot/ROOT/upgrade': invalid property ''
cannot open 'zroot/ROOT/upgrade': dataset does not exist
Created successfully

So, no joy on this yet.

This is FreeBSD 8.2.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
mer...@stonehenge.com URL:http://www.stonehenge.com/merlyn/
Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc.
See http://methodsandmessages.posterous.com/ for Smalltalk discussion
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-04 Thread Randal L. Schwartz
 Randal == Randal L Schwartz mer...@stonehenge.com writes:

Randal This is FreeBSD 8.2.

And no difference on 8.3 :(

Should there have been a promote in there somewhere?  It looks like
the boot env is still dependent on the very old zroot.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
mer...@stonehenge.com URL:http://www.stonehenge.com/merlyn/
Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc.
See http://methodsandmessages.posterous.com/ for Smalltalk discussion
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-04 Thread Bryan Drewery


On 5/4/2012 5:10 PM, Randal L. Schwartz wrote:
 Randal == Randal L Schwartz mer...@stonehenge.com writes:
 
 Randal Oh wait, it looks like zroot is still holding 1.04G of data... will
 Randal that ever go away?  Shouldn't all the data be in the /ROOT/xxx
 Randal items?
 
 And worse, the things from the readme don't work:
 
 locohost# ./beadm create upgrade
 cannot create 'zroot/ROOT/upgrade': invalid property ''
 cannot open 'zroot/ROOT/upgrade': dataset does not exist
 Created successfully
 
 So, no joy on this yet.
 
 This is FreeBSD 8.2.
 
Hi,

Those errors will be fixed in the next release, out in the next day or so.

Still testing it.

If you want to help test, it's out on vermaden's github right now.

An updated port will be available soon as well.

Regards,
Bryan Drewery
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-03 Thread vermaden
Hi,

 I just tested your tool the last few days and I must say I love
 it already. Though I can get one of the commands to work
 - might be me or the syntax
 
 beadm create [-e nonActiveBe | beName@snapshot] beName
 
 I read it as you can do the following
 
 beadm create beName@snapshot beName
 
 Is that correct or is it
 
 beadm create -e beName@snapshot beName
 
 Well neither of those seems to work for me, can you give an example of the 
 use?
 
 Thanks
 Kalle

There are only 3 possible ways:

1. beadm create beName - this will create BE beName from currently booted BE.

2. beadm create -e nonActiveBe beName - this will create BE beName from other 
BE called nonActiveBe

3. beadm create -e beName@snapshot beName - this will create BE beName from 
existing beName@snapshot snapshot

At least these are the same possibilities that beadm(1M) at Illumos/Solaris 
provides.

Hope that helps ;)

Regards,
vermaden

-- 








































...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-03 Thread vermaden
Kalle Møller freebsd-questi...@k-moeller.dk:
 And I forgot
 
 If I do a create and destroy, I would assume my system
 was back to same state, but you keep the snapshot
 when I destroy the clone, dont know if its working as
 intended (better safe to keep it than sorry) or you just
 didn't think of it :)

I added automatic deletion of snapshot origins at later
versions, the 0.1 is now in Ports, but at SourceForge [1]
or GitHub [2] there is 0.4 version already, so get the
latest one, test more and let me know how the latest
version works for You ;)

[1] https://sourceforge.net/projects/beadm/
[2] https://github.com/vermaden/beadm

Regards,
vermaden
-- 








































...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-02 Thread Kalle Møller
Hi vermaden

I just tested your tool the last few days and I must say I love it
already. Though I can get one of the commands to work - might be me or
the syntax

beadm create [-e nonActiveBe | beName@snapshot] beName

I read it as you can do the following

beadm create beName@snapshot beName

Is that correct or is it

beadm create -e beName@snapshot beName

Well neither of those seems to work for me, can you give an example of the use?

Thanks

Kalle

On Fri, Apr 27, 2012 at 1:08 AM, vermaden verma...@interia.pl wrote:
 Hi,

 I have just created new HOWTO [1] on how to use Boot Environments on
 FreeBSD with new created utility *beadm* that I put on SourceForge [2].

 Feel free to send Your ideas/critique about it.

 [1] http://forums.freebsd.org/showthread.php?t=31662
 [2] https://sourceforge.net/projects/beadm/

 Regards,
 vermaden






































 ...
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org



-- 

Med Venlig Hilsen

Kalle R. Møller
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-05-02 Thread Kalle Møller
And I forgot

If I do a create and destroy, I would assume my system was back to
same state, but you keep the snapshot when I destroy the clone, dont
know if its working as intended (better safe to keep it than sorry) or
you just didn't think of it :)

http://pastebin.com/XdYZ2eGR

main# zfs list -t all
NAME USED  AVAIL  REFER  MOUNTPOINT
sys 1.45G  6.36G31K  none
sys/ROOT 430M  6.36G31K  none
sys/ROOT/clean   430M  6.36G   430M  legacy
sys/swap1.03G  7.39G16K  -
main# beadm create main
Created successfully
main# zfs list -t all
NAME  USED  AVAIL  REFER  MOUNTPOINT
sys  1.45G  6.36G31K  none
sys/ROOT  430M  6.36G31K  none
sys/ROOT/clean430M  6.36G   430M  legacy
sys/ROOT/clean@main  0  -   430M  -
sys/ROOT/main   1K  6.36G   430M  none
sys/swap 1.03G  7.39G16K  -
main# beadm destroy main
Are you sure you want to destroy 'main'?
This action cannot be undone (y/[n]): y
Destroyed successfully
main# zfs list -t all
NAME  USED  AVAIL  REFER  MOUNTPOINT
sys  1.45G  6.36G31K  none
sys/ROOT  430M  6.36G31K  none
sys/ROOT/clean430M  6.36G   430M  legacy
sys/ROOT/clean@main  0  -   430M  -
sys/swap 1.03G  7.39G16K  -
main#

Kalle


On Wed, May 2, 2012 at 10:10 AM, Kalle Møller
freebsd-questi...@k-moeller.dk wrote:
 Hi vermaden

 I just tested your tool the last few days and I must say I love it
 already. Though I can get one of the commands to work - might be me or
 the syntax

 beadm create [-e nonActiveBe | beName@snapshot] beName

 I read it as you can do the following

 beadm create beName@snapshot beName

 Is that correct or is it

 beadm create -e beName@snapshot beName

 Well neither of those seems to work for me, can you give an example of the 
 use?

 Thanks

 Kalle

 On Fri, Apr 27, 2012 at 1:08 AM, vermaden verma...@interia.pl wrote:
 Hi,

 I have just created new HOWTO [1] on how to use Boot Environments on
 FreeBSD with new created utility *beadm* that I put on SourceForge [2].

 Feel free to send Your ideas/critique about it.

 [1] http://forums.freebsd.org/showthread.php?t=31662
 [2] https://sourceforge.net/projects/beadm/

 Regards,
 vermaden






































 ...
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org



 --

 Med Venlig Hilsen

 Kalle R. Møller



--

Med Venlig Hilsen

Kalle R. Møller
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-04-27 Thread vermaden
 Hi,
 
 do you know manageBE? Google for it, it is the first
 hit. This works for me like a charm since about a year.
 
 Bye,
 Alexander.

Hi,

yes I know and used manageBE for a while, I even mentioned it
in the HOWTO (quote below) but thought that making *beadm*
that is compatible with Illumos/Solaris version would be nice
idea, *beadm* is also more comfortable to use, at least for me.

Mine *beadm* has also a feature to activate BE's from other
machines.
 
 Illumos/Solaris has the beadm(1M) [4] utility and while
 Philipp Wuensche wrote the manageBE script as
 replacement [5], it uses older style used at times when
 OpenSolaris (and SUN) were still having a great time.
 I last couple of days writing an up-to-date replacement for
 FreeBSD compatible beadm utility, and with some tweaks
 from today I just made it available at SourceForge [6] if You
 wish to test it. Currently its about 200 lines long, so it should
 be pretty simple to take a look at it. I tried to make it as
 compatible as possible with the 'upstream' version, along
 with some small improvements, it currently supports basic
 functions like list, create, destroy and activate.

(...)

 There are several subtle differences between mine
 implementation and Philipp's one, he defines and then relies
 upon ZFS property called freebsd:boot-environment=1 for
 each boot environment, I do not set any other additional
 ZFS properties. There is already org.freebsd:swap property
 used for SWAP on FreeBSD, so we may use org.freebsd:be in
 the future, but is just a thought, right now its not used. My
 version also supports activating boot environments received
 with zfs recv command from other systems (it just updates
 appreciate /boot/zfs/zpool.cache file).

Regards,
vermaden





























...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


HOWTO: FreeBSD ZFS Madness (Boot Environments)

2012-04-26 Thread vermaden
Hi,

I have just created new HOWTO [1] on how to use Boot Environments on
FreeBSD with new created utility *beadm* that I put on SourceForge [2].

Feel free to send Your ideas/critique about it.

[1] http://forums.freebsd.org/showthread.php?t=31662
[2] https://sourceforge.net/projects/beadm/

Regards,
vermaden






































...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HowTo easy use IPFW

2012-02-05 Thread Коньков Евгений
Здравствуйте, Julian.

Вы писали 5 февраля 2012 г., 9:15:35:

JE On 2/4/12 10:53 PM, Julian Elischer wrote:
 On 2/2/12 1:33 AM, Коньков Евгений wrote:
 this is the mine script which helps me keep my firewall very clean 
 and safe.

 It is easy to understand even if you have a thousands ruBTWles, I 
 think =)

 please comment.

 PS. If anybody may, please put into ports tree. thank you.

 it would probably be get more response if it was in a file format we 
 had heard of.. like tar..

 WTF is a .rar  file?
JE BTW the  stuffit expander on a Mac seems to be able to handle it..

JE I can see that this would allow you to manage very complex rule sets 
JE while keeping errors under control.

JE I find the syntax hard to follow however
JE   I guess that comes from it being a relatively simple perl script 
JE doing the work.

JE it would be nice to get rid of the line numbers entirely in the 
JE specifications
JE and allow the program to completely specify them using symbolic 
JE definitions instead.

can you give an example how it whould be better?
a documentation is weak a bit, if you have question be free to ask.
I will clear that.

In tar format as you ask.


-- 
С уважением,
 Коньков  mailto:kes-...@yandex.ru___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: HowTo easy use IPFW

2012-02-04 Thread Julian Elischer

On 2/4/12 10:53 PM, Julian Elischer wrote:

On 2/2/12 1:33 AM, Коньков Евгений wrote:
this is the mine script which helps me keep my firewall very clean 
and safe.


It is easy to understand even if you have a thousands ruBTWles, I 
think =)


please comment.

PS. If anybody may, please put into ports tree. thank you.


it would probably be get more response if it was in a file format we 
had heard of.. like tar..


WTF is a .rar  file?

BTW the  stuffit expander on a Mac seems to be able to handle it..

I can see that this would allow you to manage very complex rule sets 
while keeping errors under control.


I find the syntax hard to follow however
 I guess that comes from it being a relatively simple perl script 
doing the work.


it would be nice to get rid of the line numbers entirely in the 
specifications
and allow the program to completely specify them using symbolic 
definitions instead.








___
freebsd-...@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


___
freebsd-...@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HowTo easy use IPFW

2012-02-04 Thread Julian Elischer

On 2/2/12 1:33 AM, Коньков Евгений wrote:

this is the mine script which helps me keep my firewall very clean and safe.

It is easy to understand even if you have a thousands rules, I think =)

please comment.

PS. If anybody may, please put into ports tree. thank you.


it would probably be get more response if it was in a file format we 
had heard of.. like tar..


WTF is a .rar  file?



___
freebsd-...@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HowTo easy use IPFW

2012-02-04 Thread Kevin Oberman
2012/2/4 Julian Elischer jul...@freebsd.org:
 On 2/2/12 1:33 AM, Коньков Евгений wrote:

 this is the mine script which helps me keep my firewall very clean and
 safe.

 It is easy to understand even if you have a thousands rules, I think =)

 please comment.

 PS. If anybody may, please put into ports tree. thank you.


 it would probably be get more response if it was in a file format we had
 heard of.. like tar..

 WTF is a .rar  file?

rar is a compression and archiving tool used commonly for bittorrent.
The tool to extract files is in port archivers/rar, but it's
commercial and a proprietary format. The free tool is only capable of
extracting, not compressing. It is reported that its compression is
very good, better than bzip2, xz and can even do a reasonable job of
compressing things like already compressed video formats. (Probably
why it became popular for bittorrent.)

R. Kevin Oberman, Network Engineer
E-mail: kob6...@gmail.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


HowTo easy use IPFW

2012-02-02 Thread Коньков Евгений
this is the mine script which helps me keep my firewall very clean and safe.

It is easy to understand even if you have a thousands rules, I think =)

please comment.

PS. If anybody may, please put into ports tree. thank you.


usr-local-etc-firewall.rar
Description: Binary data
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: HowTo easy use IPFW

2012-02-02 Thread Jason Hellenthal

You are welcome to create a port and submit it for reccomendation...

For that you should review the documents etc... at
http://freebsd.org/docs

Good Luck

On Thu, Feb 02, 2012 at 11:33:14AM +0200, Коньков Евгений wrote:
 this is the mine script which helps me keep my firewall very clean and safe.
 
 It is easy to understand even if you have a thousands rules, I think =)
 
 please comment.
 
 PS. If anybody may, please put into ports tree. thank you.


 ___
 freebsd-...@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-net
 To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


-- 
;s =;
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HowTo easy use IPFW

2012-02-02 Thread Jerry
On Thu, 2 Feb 2012 12:10:14 -0500
Jason Hellenthal articulated:

 For that you should review the documents etc... at
 http://freebsd.org/docs

Which will get you a big: 404 - Not Found

You could start here though:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-concepts.html

-- 
Jerry ♔

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the Reply-To header.
__

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: anybody know howto do eazy abbrevs?

2011-11-12 Thread Gary Kline
On Fri, Nov 11, 2011 at 08:15:24PM -0500, Mike Jeays wrote:
 Date: Fri, 11 Nov 2011 20:15:24 -0500
 From: Mike Jeays mike.je...@rogers.com
 Subject: Re: anybody know howto do eazy abbrevs?
 To: freebsd-questions@freebsd.org
 X-Mailer: Claws Mail 3.7.4 (GTK+ 2.20.1; i486-pc-linux-gnu)
 
 On Fri, 11 Nov 2011 16:40:23 -0800
 Chuck Swiger cswi...@mac.com wrote:
 
  On Nov 11, 2011, at 3:10 PM, Gary Kline wrote:
   hw r u gys dng?
   
   into:
   
   how are you guys doing?
  
  Assuming you've got emacs installed:
  
info emacs -s abbrev
  
  Regards,
  -- 
  -Chuck
  
sorry, i should have been more direct and asked 'whose code
should i steal'?  or should roll my own?  on my EEE-900A
I'Ve got 137 std abbrs and sevral custom abbreviations.
(since this is sound-only, 'thr' can mean 'there' or 'their'
or 'they're' ;_)



gary

  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
 
 The :ab command in vi will do this; you can build them into a .exrc file.
 
 See http://docstore.mik.ua/orelly/unix/upt/ch30_31.htm
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
   Journey Toward the Dawn, E-Book: http://www.thought.org
  The 8.57a release of Jottings: http://jottings.thought.org
 Twenty-five years of service to the Unix community.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


anybody know howto do eazy abbrevs?

2011-11-11 Thread Gary Kline

around thanksgiving in 1996 I began using//STUDYING the Xlib set
that is behing every other toolkit in the NIX world.  I eventually
moved to the Athena toolkit.  IIRC, there is a faily simple Xlib
editor.  it would save [or speed up] typing to use abbrevs.  without
too much effort, do any of you hackers see how it would work to
turn:

hw r u gys dng?

into:

how are you guys doing?

-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
The 7.98a release of Jottings: http://jottings.thought.org/index.php
   http://journey.thought.org
 ethic 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: anybody know howto do eazy abbrevs?

2011-11-11 Thread Chuck Swiger
On Nov 11, 2011, at 3:10 PM, Gary Kline wrote:
 hw r u gys dng?
 
 into:
 
 how are you guys doing?

Assuming you've got emacs installed:

  info emacs -s abbrev

Regards,
-- 
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: anybody know howto do eazy abbrevs?

2011-11-11 Thread Mike Jeays
On Fri, 11 Nov 2011 16:40:23 -0800
Chuck Swiger cswi...@mac.com wrote:

 On Nov 11, 2011, at 3:10 PM, Gary Kline wrote:
  hw r u gys dng?
  
  into:
  
  how are you guys doing?
 
 Assuming you've got emacs installed:
 
   info emacs -s abbrev
 
 Regards,
 -- 
 -Chuck
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

The :ab command in vi will do this; you can build them into a .exrc file.

See http://docstore.mik.ua/orelly/unix/upt/ch30_31.htm
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Dell PowerEdge 1950 with LSI SAS1068E/aka DeLL SAS-6 HBA: howto update firmware with FreeBSD?

2011-06-29 Thread O. Hartmann
We run a Dell PowerEdge 1950 Server which is equipted with a LSI Logic 
LSISAS1068E SAS HBA, branded as a Dell SAS-6 HBA (MPT). The firmware is 
dated to 2007 and is not capable of handling hard disks larger than 2 TB.


We got now a 3 TB SATA harddrive (WD WD30EZRX) which doesn't get 
recognized properly and is traeted as a 2TB disk.
I found at Dell's website a proper firmware for this type of SAS 
controller, but I wasn't able to flash a new firmware (firmware found at 
http://support.dell.com/support/downloads/format.aspx?c=uscs=19l=ens=dhsdeviceid=13856libid=46releaseid=R197383vercnt=3formatcnt=0SystemID=PWE_1950servicetag=os=WNETosl=encatid=-1dateid=-1typeid=-1formatid=-1impid=-1checkFormat=true).


This fails. The windows alternative is not applicable, how should it ... 
A FreeDOS solution - like LSI Logic offers - is obviously not in sight 
at Dell, the offer a RedHat only solution. I tried with a FedoraLive CD 
(Fedora15, 64Bit), but the process fails either with a non-found 
builVer.sh-error or, when using a emergency-Linux CD like Knoppix 6.4.4 
(famous in Germany), it's missing some utilities (rpm, stty or whatsoever).


So, I'm floating like a dead man in the water, having a full old 2 TB 
harddrive, an exchange 3TB harddrive which is recognized as 2 TB 
harddrive and no chance to update the controller's firmware.


Is anybody out here with a solution under FreeBSD?

The box is running FreeBSD 8.2-STABLE with a most recent buildworld.

Thanks in advance,

Oliver

P.S. Please CC me, I'm not subscribing list questions.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


FreeBSD CURRENT custom ISO install image: howto?

2011-03-16 Thread O. Hartmann
I'm desperately looking for howto creating my own FreeBSD 
9.0-CURRENT/amd64 custom installation DVD. Google delivers a lot of 
outdated stuff and I wasn't able to find some hints in the handbook, so 
maybe one here can help.


I've already all sources via 'svn' (no CVS) on the local box. The 
intention is to be able to use new bsdinstall instead of sysinstall for 
having GPT partitions.


Please set me CC if responding.

Thanks in advance,
Oliver
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD CURRENT custom ISO install image: howto?

2011-03-16 Thread O. Hartmann

On 03/16/11 19:10, Al Plant wrote:

O. Hartmann wrote:

I'm desperately looking for howto creating my own FreeBSD
9.0-CURRENT/amd64 custom installation DVD. Google delivers a lot of
outdated stuff and I wasn't able to find some hints in the handbook,
so maybe one here can help.

I've already all sources via 'svn' (no CVS) on the local box. The
intention is to be able to use new bsdinstall instead of sysinstall
for having GPT partitions.

Please set me CC if responding.

Thanks in advance,
Oliver
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
freebsd-questions-unsubscr...@freebsd.org


Aloha Oliver,

On the list is Manolis Kiagias. He makes install disks possible.

I also copied him on this reply. He helped me with making an install
disk for my projects and he can most likely point you to his how to
methods.



Hello out there.
Thank you very much.
The last time I tried making a install media from a local installation 
is quite a lot of years since. I found  man release(7) very helpful, 
but at the end it turns out that I didn't understood what is happening.


I tried to fullfill all prerequisites needed to make a release, i.e.

1) having a populated /usr/src (SVN managed), I recently made a 'make 
buildworld', I created  a suitable release-folder to chroot to for the 
release and I issued MAKE_DVD=yes and MAKE_ISOS=yes to ensure the build 
of ISO images for a DVD. I'll show the command issued at the end.


But the build-process seems to drop everything it builds into 
/usr/src/release (from where the commande 'make release' has to be 
issued as docuemnted in 'release (7)'.


Here's the command:

Folders /home/release and /usr/src exists, 'make buildworld' has been 
issued and successfully finished. The following commands are issued 
regarding the release (7) manpage:


cd /usr/src/release
make release SVNROOT=/usr/src NODOC=yes MAKE_DVD=yes MAKE_ISOS=yes\ 
CHROOTDIR=/home/release BUILDNAME=SOMETHING_NEW


I do not ommit TARGET_ARCH and TARGET since I do not crossbuild (I'm on 
amd64).
The outcome is that the make-release process seems to flood 
/usr/src/release as it never 'chroot' to the given CHROOTDIR. I'm not 
familiar with this and I exepct this to be a kind of mistake. Correct me 
if I'm wrong.


Regards,
Oliver
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


howto un-chmod 755 /usr/local?

2010-08-30 Thread Steve Franks
Would you believe me if I said a script I use daily went awry?

Is there a list of the proper permission modes for things in
/usr/local to get a working system back, aside of starting over?  Is
there a better way?  I've already tried and upgrade from the 8.1 cd,
which doesn't seem to have affected /usr/local permissions much (which
sort of makes sense), as well as a portupgrade -akfO, which didn't
seem to have much traction either.  Symptoms: XOrg gives some rather
uninteresting info and hangs while still in text mode.  Sudo compalins
about needing chroot, etc. etc.

Thanks,
Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto un-chmod 755 /usr/local?

2010-08-30 Thread Randal L. Schwartz
 Steve == Steve Franks bahamasfra...@gmail.com writes:

Steve Is there a list of the proper permission modes for things in
Steve /usr/local to get a working system back, aside of starting over?

I think you can use mtree(8) to repair your system, with the masters in
/etc/mtree/*.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
mer...@stonehenge.com URL:http://www.stonehenge.com/merlyn/
Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc.
See http://methodsandmessages.vox.com/ for Smalltalk and Seaside discussion
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Howto create FAT32 bootable USB device with gpart?

2010-08-27 Thread CyberLeo Kitsana
On 08/26/2010 10:34 AM, Hartmann, O. wrote:
  Trying to create a bootable USB device (memory stick) with gpart - and
 failed. I need those USB mem sticks for BIOS flashing purposes on an
 older main PCB, utilizing FreeDOS. The old BIOS is capable of booting
 off from USB mem sticks, since I booted and installed FreeBSD via this
 method. But the creation of a bootable FreeDOS USB mem stick failed.
 I have FreeBSD 9.0 as a mastering operating system and 8 GB sticks.
 These are the boundary conditions. Is there any way to perform this task
 with gpart?

Bootable FAT is sort of a strange thing. As such, I have written up a
few methods for producing FAT boot disks using either Win98 DOS and
DosBox or using FreeDOS and a perl script called 'sys-freedos.pl'.

http://wiki.cyberleo.net/wiki/KnowledgeBase/DOSBoot

It shouldn't be too difficult to use the instructions to produce a
bootable memstick; just keep in mind that you may have to slice it and
install an mbr, as so-called 'superfloppy' layout isn't always supported.

Hope this helps!

-- 
Fuzzy love,
-CyberLeo
Technical Administrator
CyberLeo.Net Webhosting
http://www.CyberLeo.Net
cyber...@cyberleo.net

Furry Peace! - http://.fur.com/peace/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Howto create FAT32 bootable USB device with gpart?

2010-08-26 Thread Hartmann, O.
 Trying to create a bootable USB device (memory stick) with gpart - and 
failed. I need those USB mem sticks for BIOS flashing purposes on an 
older main PCB, utilizing FreeDOS. The old BIOS is capable of booting 
off from USB mem sticks, since I booted and installed FreeBSD via this 
method. But the creation of a bootable FreeDOS USB mem stick failed.
I have FreeBSD 9.0 as a mastering operating system and 8 GB sticks. 
These are the boundary conditions. Is there any way to perform this task 
with gpart?


Thanks in advance.

Oliver
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD PXE installation howto

2010-04-29 Thread egoitz
Well finally... I have updated my pxe installation guide... reducing some
unnecessary steps...

here you are the updated howto :

http://postfixquotareject.ramattack.net/freebsdpxehowto.pdf

You know any doubts this is my mail :).

Bye!!

 Hi all,

 I have seen a way for reducing some steps...

 after installing dhcpd and active tftpd in inetd.conf and starting
 inetd... have just done :

 tar -C /expert


,

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD PXE installation howto

2010-04-16 Thread egoitz
Hi all,

I have seen a way for reducing some steps...

after installing dhcpd and active tftpd in inetd.conf and starting
inetd... have just done :

tar -C /expert/netboot/freebsd8 -pxvf 8.0-RELEASE-amd64-disc1.iso

(really it's an own release based on release plus security patches
RELENG_8_0 but for the example is the same...)

and after just entering the install.cfg in the mfsroot and after changing
in nfs-root-path/boot/loader.conf for having the line :

vfs.root.mountfrom=ufs:/dev/md0

it works the same way too...


Are the freebsd iso releases (either of the web or those made by make
release) shipped with all necessary for all boot modes (pxe, cd, hd...)..
without needing to do nothing for, for example making a freebsd
installation server?..

Thanks a lot for you're time.

Bye!!


 Hi,

 I'm working on a project for setting up a freebsd installation server with
 pxe. When I started I see the doc was a bit old-fashioned... so I started
 looking at some blogs... freebsd doc that could help me understanding the
 whole process and so on... finally I have ended looking at source code of
 some involved parts like sysintall, boot stages and so on for
 understanding all properly for setting up this service. I have written a
 documentation that if you see it to be ok... (it seems to be working fine)
 perhaps, would be nice to appear in handbook or in some official
 documentation site... So if you see something that should be done in
 another way... or some point wich you consider it's wrong... please make
 me know and I'll correct it. The url in wich you could fetch the pdf file
 is : http://postfixquotareject.ramattack.net/freebsdpxehowto.pdf

 Thank you very much.

 Bye!!___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 freebsd-questions-unsubscr...@freebsd.org



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


FreeBSD PXE installation howto

2010-04-11 Thread Egoitz Aurrekoetxea Aurre
Hi,

I'm working on a project for setting up a freebsd installation server with pxe. 
When I started I see the doc was a bit old-fashioned... so I started looking at 
some blogs... freebsd doc that could help me understanding the whole process 
and so on... finally I have ended looking at source code of some involved parts 
like sysintall, boot stages and so on for understanding all properly for 
setting up this service. I have written a documentation that if you see it to 
be ok... (it seems to be working fine) perhaps, would be nice to appear in 
handbook or in some official documentation site... So if you see something that 
should be done in another way... or some point wich you consider it's wrong... 
please make me know and I'll correct it. The url in wich you could fetch the 
pdf file is : http://postfixquotareject.ramattack.net/freebsdpxehowto.pdf

Thank you very much.

Bye!!___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD PXE installation howto

2010-04-11 Thread Diego F. Arias R.
Hello There:

I will read it, just found a mountpoint named puntodemontaje, that maybe you
forgot to translate.

Will check it out latter.

Diego Arias



On Sun, Apr 11, 2010 at 11:21 AM, Egoitz Aurrekoetxea Aurre 
ego...@ramattack.net wrote:

 Hi,

 I'm working on a project for setting up a freebsd installation server with
 pxe. When I started I see the doc was a bit old-fashioned... so I started
 looking at some blogs... freebsd doc that could help me understanding the
 whole process and so on... finally I have ended looking at source code of
 some involved parts like sysintall, boot stages and so on for
 understanding all properly for setting up this service. I have written a
 documentation that if you see it to be ok... (it seems to be working fine)
 perhaps, would be nice to appear in handbook or in some official
 documentation site... So if you see something that should be done in another
 way... or some point wich you consider it's wrong... please make me know and
 I'll correct it. The url in wich you could fetch the pdf file is :
 http://postfixquotareject.ramattack.net/freebsdpxehowto.pdf

 Thank you very much.

 Bye!!___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org




-- 
mmm, interesante.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: FreeBSD PXE installation howto

2010-04-11 Thread Chris Whitehouse

Egoitz Aurrekoetxea Aurre wrote:

Hi,

I'm working on a project for setting up a freebsd installation server with pxe. 
When I started I see the doc was a bit old-fashioned... so I started looking at 
some blogs... freebsd doc that could help me understanding the whole process 
and so on... finally I have ended looking at source code of some involved parts 
like sysintall, boot stages and so on for understanding all properly for 
setting up this service. I have written a documentation that if you see it to 
be ok... (it seems to be working fine) perhaps, would be nice to appear in 
handbook or in some official documentation site... So if you see something that 
should be done in another way... or some point wich you consider it's wrong... 
please make me know and I'll correct it. The url in wich you could fetch the 
pdf file is : http://postfixquotareject.ramattack.net/freebsdpxehowto.pdf

Thank you very much.

Bye!!___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Hi egoitz

s/wich/which/g

What is this line?
mkdir -p /usr/local/freebsd7/boot/defaults

Should it be
mkdir -p /expert/netboot/freebsd8/boot/defaults/
?

I think the line Let's copy device.hints for booting the kernel loaded 
by loader in this pxe boot. Let's copy too
some routine files for loader (and for forth shell) and a loader 
defaults config file. should be above the block of mkdir and cp 
commands above.


The phrase but really it's optional you may not specify -u probably 
should say but really it's optional, you don't have to specify -u. As 
written it means you are not allowed to :)


Could you have used ftpd in the base system instead of tftp in inedt.conf?

Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


bruteforce protection howto

2010-03-20 Thread Vadkan Jozsef
Two pc's:

1 - router
2 - logger

Situation: someone tries to bruteforce into a server, and the logger
get's a log about it [e.g.: ssh login failed].

What's the best method to ban that ip [what is bruteforcig a server]
what was logged on the logger?
I need to ban the ip on the router pc.

How can i send the bad ip to the router, to ban it?

Just run a cronjob, and e.g.: scp the list of ip's from the logger to
the router, then ban the ip from the list on the router pc?

Or is there any offical method for this?

I'm just asking for docs/howtos.. :\ to get started..

Thank you!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: bruteforce protection howto

2010-03-20 Thread Jamie Griffin
 
 Two pc's:
 
 1 - router
 2 - logger
 
 Situation: someone tries to bruteforce into a server, and the logger
 get's a log about it [e.g.: ssh login failed].
 
 What's the best method to ban that ip [what is bruteforcig a server]
 what was logged on the logger?
 I need to ban the ip on the router pc.
 
 How can i send the bad ip to the router, to ban it?

I was asking about this earlier, I went with pf which is already in the base 
system and also making sshd more secure by using the options in 
/etc/ssh/sshd_config.

Have a look at `man 5 sshd_config` and there is loads of stuff on goodgle about 
this. So far, I really like what pf can do, check it out. `man pf.conf` and 
again there are lots of old posts on google, and the OpenBSD pf guide is good 
too:

 https://calomel.org/pf_config.html
 http://www.freebsd.org/doc/handbook/firewalls-pf.html
 http://www.openbsd.org/faq/pf/

   Jamie
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: bruteforce protection howto

2010-03-20 Thread Erik Norgaard

On 20/03/10 23:17, Vadkan Jozsef wrote:


What's the best method to ban that ip [what is bruteforcig a server]
what was logged on the logger?
I need to ban the ip on the router pc.


Take your time to think about if this is indeed the right solution.

1st: You need to decide which is the right policy to deploy. Basically 
you can opt for a default deny or a default allow. With default deny you 
create white lists for the exceptions that should be allows. With 
default allow you create black lists. Default deny and default allow 
roughly corresponds to the policies of OpenBSD vs. Microsoft Windows.


So, when is white listing an option? When you have a limited set of 
exceptions, for example your local users that need ssh access. If this 
set is limited consider deploying default deny. On the other hand, this 
is not an option for your web service that you wish to provide for 
anyone anywhere.


Blacklisting is futile (think, did anti-virus solve the virus problem?). 
Intruders may attempt to connect from anywhere, blocking a single IP 
won't solve your problem, most likely the next attempt will not come 
from that IP. This is because these attacks may be launched from a 
number of compromised pc's and because the attacking pc may have 
dynamically assigned address. So you need to block entire ranges, but 
which?


I recently analysed my maillog to see where attempted spammers connected 
from. I found some 3500 hosts in 1600 ranges (using whois lookup). These 
ranges being typically /16. I haven't tried with ssh but I doubt it 
would be much different.


If on top of this you make some auto-respond system, you expose yourself 
to a denial of service attack, blindly blocking anything that creates a 
log entry.


Whether you use white or black listing this is effective only if you can 
make informed decisions. If you don't do business with say China and you 
know that 25% of all spam originates from China, it is only rational to 
block access from China.


But, whenever possible, use white listing.

BR, Erik

--
Erik Nørgaard
Ph: +34.666334818/+34.915211157  http://www.locolomo.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Howto run privileged commands on login/logout

2010-02-07 Thread Polytropon
On Sun, 07 Feb 2010 01:55:02 +0100, Erik Norgaard norga...@locolomo.org wrote:
 Hi:
 
 I'm playing around with diskless operation. I'd like to be able to run 
 privileged commands when a user logins or logs out:

You can handle this in two ways:

a) On a per-user basis, you can use the user's ~/.login and
   ~/.logout files; those are corresponding to the C Shell,
   and assuming that csh is the dialog shell for the user.

b) On an all-users basis, you can use /etc/csh.login and
   /etc/csh.logout to have all users perform the commands
   you want to run.



 - on login, nfs mount the user's home directory (ok, not critical, I can 
 mount /home)

As it has already been mentioned, it is easy to use amd
and / or automounter tool for that.



 - on logout a system reboot to clean up any temporary files left from 
 the session.

A system reboot? To clean up temporary files? Caused by
an ordinary user? Excuse me, Sir, what strange country
are you from? :-)

Honestly, that's not neccessary. If you want to make sure
that all temporary files belonging to a specific user are
deleted upon user logout, you can simply let him do it by
his ~/.logout script, e. g. using rm -rf /tmp; this might
sound very violent, but it will only delete the user's
files from the /tmp subtree.

There are very few occassions you HAVE to reboot a BSD machine.
Cleaning temporary files is *not* one of them, especially
if you don't have clear_tmp_enable set to YES in /etc/rc.conf.

If temporary files are left in other directories you know
of, you can clean them as well.



 Is this possible, without messing arround with sudo or adding users to 
 wheel or operator groups?

Of course. You can edit the permissions for the programs
you explicitely want to allow ordinary users to run,
e. g. the /sbin/shutdown binary.



A sidenote: If we're talking about X, the GiveConsole and
TakeConsole in /usr/local/lib/X11/xdm/ can be used. Those
are shell scripts that allow chown'ing and chmod'ing files
to specific users, as well as other things.

I know that a problem may occur when multiple users log in.



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Howto run privileged commands on login/logout

2010-02-06 Thread Erik Norgaard

Hi:

I'm playing around with diskless operation. I'd like to be able to run 
privileged commands when a user logins or logs out:


- on login, nfs mount the user's home directory (ok, not critical, I can 
mount /home)
- on logout a system reboot to clean up any temporary files left from 
the session.


Is this possible, without messing arround with sudo or adding users to 
wheel or operator groups?


Thanks, Erik

--
Erik Nørgaard
Ph: +34.666334818/+34.915211157  http://www.locolomo.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Howto run privileged commands on login/logout

2010-02-06 Thread Rob Farmer
On Sat, Feb 6, 2010 at 4:55 PM, Erik Norgaard norga...@locolomo.org wrote:
 Hi:

 I'm playing around with diskless operation. I'd like to be able to run
 privileged commands when a user logins or logs out:

 - on login, nfs mount the user's home directory (ok, not critical, I can
 mount /home)
 - on logout a system reboot to clean up any temporary files left from the
 session.

Not sure if it would work or not but you could try setting
/etc/csh.logout setuid root (or whatever). However, IIRC, there are
security concerns with setuid scripts (I remember previous list
discussions about setuid shell scripts but don't remember what the
verdict was).

-- 
Rob Farmer


 Is this possible, without messing arround with sudo or adding users to wheel
 or operator groups?

 Thanks, Erik

 --
 Erik Nørgaard
 Ph: +34.666334818/+34.915211157                  http://www.locolomo.org
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Howto run privileged commands on login/logout

2010-02-06 Thread Pieter de Goeje
On Sunday 07 February 2010 01:55:02 Erik Norgaard wrote:
 I'm playing around with diskless operation. I'd like to be able to run
 privileged commands when a user logins or logs out:

 - on login, nfs mount the user's home directory (ok, not critical, I can
 mount /home)

This can be done using amd(8). Check out the example section in amd.conf(5).

 - on logout a system reboot to clean up any temporary files left from
 the session.

Not sure why you would want to reboot the entire system but simply 
doing chmod +s /sbin/shutdown should give all users access to the 
shutdown(8) command.


 Is this possible, without messing arround with sudo or adding users to
 wheel or operator groups?

--
Pieter de Goeje
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Howto run privileged commands on login/logout

2010-02-06 Thread perryh
Erik Norgaard norga...@locolomo.org wrote:
 I'm playing around with diskless operation. I'd like to be able
 to run privileged commands when a user logins or logs out:

 - on login, nfs mount the user's home directory (ok, not critical,
 I can mount /home)

Or, better yet, use an automounter.

 - on logout a system reboot to clean up any temporary files left
 from the session.

I'm not aware of any existing, simple method to handle this part.
It might not be all that difficult to hack something into getty(8)
or init(8).  Another possibility would be to clean /tmp and /var/tmp
in the .logout script, which should not require any special privs.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto use https in favour of http

2009-10-28 Thread Scott Bennett
 On Tue, 27 Oct 2009 09:32:21 -0400 Michael Powell nightre...@hotmail.com
wrote:
Scott Bennett wrote:


 Alexander Best wrote:
 Hi,
 
 i've added the following line to my /etc/hosts:
 
 permail.uni-muenster.de:25  permail.uni-muenster.de:443
 
 so what i want is for freebsd to never use http, but https for that
 address.
[snip] 

Perhaps the easiest direct solution is to bookmark 

https://permail.uni-muenster.de/ in the browser bookmarks instead of

http://permail.uni-muenster.de/

 If he wants to apply the HTTPS requirement only to a particular page
(e.g., the home page) at a web site, that *might* work.  OTOH, there may
be points of failure, such as this example in the page whose URL is shown
above.

a href=http://www.permail.uni-muenster.de;
rel=subsection


Depending upon a bookmark would also fail to apply the restriction to any
links to other pages at the same site that the user might click on on the
page.  It also ignores the many dozens (hundreds?) of security problems
that are fixed/blocked by plug-ins like NoScript and Torbutton.
 Once NoScript has been installed, it is plenty easy, as I outlined
previously, to apply such a restriction to an entire web site or to all
web sites in a given domain.


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto use https in favour of http

2009-10-28 Thread Alexander Best
Scott Bennett schrieb am 2009-10-27:
  On Mon, 26 Oct 2009 23:40:48 -0400 Michael Powell
  nightre...@hotmail.com
 wrote:
 Steve Bertrand wrote:

  Alexander Best wrote:
  Olivier Nicole schrieb am 2009-10-27:
  Hi,

  i've added the following line to my /etc/hosts:

  permail.uni-muenster.de:25  permail.uni-muenster.de:443

  so what i want is for freebsd to never use http, but https for
  that
  address.
  unfortunately hosts doesn't seem to support this syntax.

 [snip]

  i'm not using a webserver or anything. i'm just a regular user.
  the point
  is: i often forget to specify https://... for that specific
  address in
  apps like lynx or firefox. that's why the non-ssl version of that
  site is
  being loaded. i'd like freebsd to take care of this so even if
  the app is
  trying to access the non-ssl version it should in fact be
  redirected to
  the ssl version by freebsd.

  I thought that this is what you were originally after.

  FreeBSD, in itself, can't do this... much like Mac OS or Windows
  can't
  do this.

  Most applications such as Firefox can't even do this (inherently).

  If you are trying to enforce this as a personal/company policy,
  you will
  need to write a 'wrapper' around your application (lynx/firefox)
  to do
  this.

  Note that your example was :25-:443, which implied SMTP over
  SSL...

  Nonetheless, FreeBSD can't make these decisions inherently
  (thankfully).

  Steve

 I think the OP does not have a clear grasp on how the various
 protocols
 operate. Evidenced by confusing http with mail services. Yes, I know
 there
 is 'web mail', but even web based mail is still a web server.

 It is up to the server operator to configure the services on the
 server end
 of things. Whether its SMTP with SSL/TLS, HTTP/HTTPS, pop3 or imap
 with SSL,
 etc., all of these things are made to work at the server end. True
 enough a
 client may need to be configured to talk on port 995 for pop3/SSL or
 port
 993 for IMAP/SSL but for the web a client shouldn't need to do
 anything.

 The web server operator configures which locations in his URI space
 should
 be served up on port 443, and the client's browser should
 automatically
 switch to HTTPS based upon this. The OP doesn't seem to understand
 that he
 doesn't need to make this happen on his end, at least as far as
 HTTP/HTTPS
 goes.

  All of this is true, but it is also true that many web sites
  offer part
 or all of their content pages by both protocols, which allows a
 client to
 fetch such pages by his/her choice of protocol.  For such sites, it
 can be
 quite helpful to have a way to tell the browser to prefer, or even
 require,
 one or the other.

 If he is actually trying to configure a mail client to talk TLS or
 SSL to an
 SMTP server, then he needs to tell the email client software this.
 E.g.,
 This connection requires encryption and whether it is SSL or TLS.
 Mail
 servers on port 25 do not use HTTP or HTTPS, but rather SMTP.

 So it seems as if he is just very confused.

  Definitely the case.  However, this list is intended to provide
  help
 to users at all levels of experience and understanding.
  What has been overlooked in all of the above discussion is that
  there
 *is* some help available for the OP.  A plug-in is available for
 Firefox
 that should *always* be installed ASAP after Firefox has been
 installed
 unless you don't give a rat's ass about browser security.  The
 plug-in is
 called NoScript.  (Other highly recommended Firefox security
 plug-ins
 include QuickJava, SafeCache, Torbutton, Better Privacy, etc.)
  Directions for the OP:  after installing NoScript and restarting
 Firefox, bring up the NoScript Options panel.  You can do this either
 by
 clicking on Tools in the Firefox menu bar at the top of the window
 and
 then on Add-ons or Plug-ins or some such, depending upon the
 Firefox
 version.  This will bring up a panel listing all installed plug-ins.
 Find
 the entry for NoScript, click on the entry (not a button, though) to
 select
 it, then click on its Preferences button.  Two alternative methods
 of
 getting to the same NoScript Options panel depend upon what you see
 at the
 bottom of the main Firefox window.  If you see a bar inside the
 window at
 the bottom that says something about scripts with an Options...
 button
 at the right, clock on the Options button and then on the
 Options...
 line at the top of the resulting menu.  The other alternative method
 is
 available when there is a capital letter S in a circle in the
 bottom
 Firefox status bar.  Right-click on this S, which may have a slash
 through
 it or other decorations, to get a slightly differently ordered menu.
 Click
 on the Options... line of this menu to get the NoScript Options
 panel.
  Once the NoScript Options panel is visible, click on the
  Advanced tab
 at the righthand end of the sequence of tabs.  This will display some
 subtabs below the main tabs.  Click again on the 

Re: howto use https in favour of http

2009-10-27 Thread Scott Bennett
 On Mon, 26 Oct 2009 23:40:48 -0400 Michael Powell nightre...@hotmail.com
wrote:
Steve Bertrand wrote:

 Alexander Best wrote:
 Olivier Nicole schrieb am 2009-10-27:
 Hi,
 
 i've added the following line to my /etc/hosts:
 
 permail.uni-muenster.de:25  permail.uni-muenster.de:443
 
 so what i want is for freebsd to never use http, but https for that
 address.
 unfortunately hosts doesn't seem to support this syntax.
 
[snip]
 
 i'm not using a webserver or anything. i'm just a regular user. the point
 is: i often forget to specify https://... for that specific address in
 apps like lynx or firefox. that's why the non-ssl version of that site is
 being loaded. i'd like freebsd to take care of this so even if the app is
 trying to access the non-ssl version it should in fact be redirected to
 the ssl version by freebsd.
 
 I thought that this is what you were originally after.
 
 FreeBSD, in itself, can't do this... much like Mac OS or Windows can't
 do this.
 
 Most applications such as Firefox can't even do this (inherently).
 
 If you are trying to enforce this as a personal/company policy, you will
 need to write a 'wrapper' around your application (lynx/firefox) to do
 this.
 
 Note that your example was :25-:443, which implied SMTP over SSL...
 
 Nonetheless, FreeBSD can't make these decisions inherently (thankfully).
 
 Steve

I think the OP does not have a clear grasp on how the various protocols 
operate. Evidenced by confusing http with mail services. Yes, I know there 
is 'web mail', but even web based mail is still a web server.

It is up to the server operator to configure the services on the server end 
of things. Whether its SMTP with SSL/TLS, HTTP/HTTPS, pop3 or imap with SSL, 
etc., all of these things are made to work at the server end. True enough a 
client may need to be configured to talk on port 995 for pop3/SSL or port 
993 for IMAP/SSL but for the web a client shouldn't need to do anything.

The web server operator configures which locations in his URI space should 
be served up on port 443, and the client's browser should automatically 
switch to HTTPS based upon this. The OP doesn't seem to understand that he 
doesn't need to make this happen on his end, at least as far as HTTP/HTTPS 
goes.

 All of this is true, but it is also true that many web sites offer part
or all of their content pages by both protocols, which allows a client to
fetch such pages by his/her choice of protocol.  For such sites, it can be
quite helpful to have a way to tell the browser to prefer, or even require,
one or the other.

If he is actually trying to configure a mail client to talk TLS or SSL to an 
SMTP server, then he needs to tell the email client software this. E.g., 
This connection requires encryption and whether it is SSL or TLS. Mail 
servers on port 25 do not use HTTP or HTTPS, but rather SMTP.

So it seems as if he is just very confused.

 Definitely the case.  However, this list is intended to provide help
to users at all levels of experience and understanding.
 What has been overlooked in all of the above discussion is that there
*is* some help available for the OP.  A plug-in is available for Firefox
that should *always* be installed ASAP after Firefox has been installed
unless you don't give a rat's ass about browser security.  The plug-in is
called NoScript.  (Other highly recommended Firefox security plug-ins
include QuickJava, SafeCache, Torbutton, Better Privacy, etc.)
 Directions for the OP:  after installing NoScript and restarting
Firefox, bring up the NoScript Options panel.  You can do this either by
clicking on Tools in the Firefox menu bar at the top of the window and
then on Add-ons or Plug-ins or some such, depending upon the Firefox
version.  This will bring up a panel listing all installed plug-ins.  Find
the entry for NoScript, click on the entry (not a button, though) to select
it, then click on its Preferences button.  Two alternative methods of
getting to the same NoScript Options panel depend upon what you see at the
bottom of the main Firefox window.  If you see a bar inside the window at
the bottom that says something about scripts with an Options... button
at the right, clock on the Options button and then on the Options...
line at the top of the resulting menu.  The other alternative method is
available when there is a capital letter S in a circle in the bottom
Firefox status bar.  Right-click on this S, which may have a slash through
it or other decorations, to get a slightly differently ordered menu.  Click
on the Options... line of this menu to get the NoScript Options panel.
 Once the NoScript Options panel is visible, click on the Advanced tab
at the righthand end of the sequence of tabs.  This will display some
subtabs below the main tabs.  Click again on the righthandmost tab, which
says, HTTPS.  A third line of tabs should appear, containing just two tabs:
Behavior and Cookies.  The Behavior tab is the one you want.  You
should 

Re: howto use https in favour of http

2009-10-27 Thread Michael Powell
Scott Bennett wrote:


 Alexander Best wrote:
 Hi,
 
 i've added the following line to my /etc/hosts:
 
 permail.uni-muenster.de:25  permail.uni-muenster.de:443
 
 so what i want is for freebsd to never use http, but https for that
 address.
[snip] 

Perhaps the easiest direct solution is to bookmark 

https://permail.uni-muenster.de/ in the browser bookmarks instead of

http://permail.uni-muenster.de/


-Mike
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto use https in favour of http

2009-10-27 Thread RW
On Tue, 27 Oct 2009 03:29:13 +0100 (CET)
Alexander Best alexbes...@math.uni-muenster.de wrote:


 i'm not using a webserver or anything. i'm just a regular user. the
 point is: i often forget to specify https://... for that specific
 address in apps like lynx or firefox. that's why the non-ssl version
 of that site is being loaded.

That's internal to the application.

 i'd like freebsd to take care of this
 so even if the app is trying to access the non-ssl version it should
 in fact be redirected to the ssl version by freebsd.

Why not just use bookmarks?

If you want to avoid unsecure connections to specific sites, you can do
it with a firewall, or you can install a proxy (such as squid) and use
ACLs. However some sites may not look quite the same due to insecure
links to graphics etc.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


howto use https in favour of http

2009-10-26 Thread Alexander Best
hi there,

i've added the following line to my /etc/hosts:

permail.uni-muenster.de:25  permail.uni-muenster.de:443

so what i want is for freebsd to never use http, but https for that address.
unfortunately hosts doesn't seem to support this syntax.

any advice on how to do this?

cheers.
alex

ps: i'm running FreeBSD otaku 9.0-CURRENT FreeBSD 9.0-CURRENT #7 r198330M: Thu
Oct 22 18:03:45 CEST 2009 r...@otaku:/usr/obj/usr/src/sys/ARUNDEL  i386
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto use https in favour of http

2009-10-26 Thread Steve Bertrand
Alexander Best wrote:
 hi there,
 
 i've added the following line to my /etc/hosts:
 
 permail.uni-muenster.de:25  permail.uni-muenster.de:443
 
 so what i want is for freebsd to never use http, but https for that address.
 unfortunately hosts doesn't seem to support this syntax.

It doesn't work that way.

The 'hosts' file resolves a name to an IP address.

I can see what you want to do here, but to get there, you must provide
in your own words what it is you want exactly...

Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto use https in favour of http

2009-10-26 Thread Olivier Nicole
Hi,

 i've added the following line to my /etc/hosts:
 
 permail.uni-muenster.de:25  permail.uni-muenster.de:443
 
 so what i want is for freebsd to never use http, but https for that address.
 unfortunately hosts doesn't seem to support this syntax.

De3finitely not. man hosts to see the syntax and meaning of the
/etc/hosts file.

 any advice on how to do this?

I am not sure what you want to do. You want to install a web server
that only serves https? then you configure your web server to only
serve https, in Apache configuration you would only have a 
VirtualHost: permail.uni-muenster.de:443
and none with port 80.

Best regards,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto use https in favour of http

2009-10-26 Thread Alexander Best
Olivier Nicole schrieb am 2009-10-27:
 Hi,

  i've added the following line to my /etc/hosts:

  permail.uni-muenster.de:25  permail.uni-muenster.de:443

  so what i want is for freebsd to never use http, but https for that
  address.
  unfortunately hosts doesn't seem to support this syntax.

 De3finitely not. man hosts to see the syntax and meaning of the
 /etc/hosts file.

  any advice on how to do this?

 I am not sure what you want to do. You want to install a web server
 that only serves https? then you configure your web server to only
 serve https, in Apache configuration you would only have a
 VirtualHost: permail.uni-muenster.de:443
 and none with port 80.

 Best regards,

 Olivier

sorry if i didn't specify my problem in detail.

i'm not using a webserver or anything. i'm just a regular user. the point is:
i often forget to specify https://... for that specific address in apps like
lynx or firefox. that's why the non-ssl version of that site is being loaded.
i'd like freebsd to take care of this so even if the app is trying to access
the non-ssl version it should in fact be redirected to the ssl version by
freebsd.

cheers.
alex
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto use https in favour of http

2009-10-26 Thread Olivier Nicole
Alex,

 i'm not using a webserver or anything. i'm just a regular user. the point is:
 i often forget to specify https://... for that specific address in apps like
 lynx or firefox. that's why the non-ssl version of that site is being loaded.
 i'd like freebsd to take care of this so even if the app is trying to access
 the non-ssl version it should in fact be redirected to the ssl version by
 freebsd.

I think it is the responsibility of the person in charge of the server
to decide whether non-ssl connections are allowed or not; and to
redirect non-ssl connections to ssl ones when needed. That should
never be a burden for the client.

Now on your client side what you can do is:

- set-up a firewall to forbid non-ssl connections to certain web
  sites: if you try a non-ssl connection, it will be refused; easy
  enough to set-up, but frustrating when you see that your connection
  is refused;

- set-up a proxy/redirector to change your non-ssl connections to ssl
  one: certainly an heavier thing to set-up, but would work
  transparently;

Good luck,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto use https in favour of http

2009-10-26 Thread Steve Bertrand
Alexander Best wrote:
 Olivier Nicole schrieb am 2009-10-27:
 Hi,
 
 i've added the following line to my /etc/hosts:
 
 permail.uni-muenster.de:25  permail.uni-muenster.de:443
 
 so what i want is for freebsd to never use http, but https for that
 address.
 unfortunately hosts doesn't seem to support this syntax.
 
 De3finitely not. man hosts to see the syntax and meaning of the
 /etc/hosts file.
 
 any advice on how to do this?
 
 I am not sure what you want to do. You want to install a web server
 that only serves https? then you configure your web server to only
 serve https, in Apache configuration you would only have a
 VirtualHost: permail.uni-muenster.de:443
 and none with port 80.
 
 Best regards,
 
 Olivier
 
 sorry if i didn't specify my problem in detail.
 
 i'm not using a webserver or anything. i'm just a regular user. the point is:
 i often forget to specify https://... for that specific address in apps like
 lynx or firefox. that's why the non-ssl version of that site is being loaded.
 i'd like freebsd to take care of this so even if the app is trying to access
 the non-ssl version it should in fact be redirected to the ssl version by
 freebsd.

I thought that this is what you were originally after.

FreeBSD, in itself, can't do this... much like Mac OS or Windows can't
do this.

Most applications such as Firefox can't even do this (inherently).

If you are trying to enforce this as a personal/company policy, you will
need to write a 'wrapper' around your application (lynx/firefox) to do this.

Note that your example was :25-:443, which implied SMTP over SSL...

Nonetheless, FreeBSD can't make these decisions inherently (thankfully).

Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto use https in favour of http

2009-10-26 Thread Michael Powell
Steve Bertrand wrote:

 Alexander Best wrote:
 Olivier Nicole schrieb am 2009-10-27:
 Hi,
 
 i've added the following line to my /etc/hosts:
 
 permail.uni-muenster.de:25  permail.uni-muenster.de:443
 
 so what i want is for freebsd to never use http, but https for that
 address.
 unfortunately hosts doesn't seem to support this syntax.
 
[snip]
 
 i'm not using a webserver or anything. i'm just a regular user. the point
 is: i often forget to specify https://... for that specific address in
 apps like lynx or firefox. that's why the non-ssl version of that site is
 being loaded. i'd like freebsd to take care of this so even if the app is
 trying to access the non-ssl version it should in fact be redirected to
 the ssl version by freebsd.
 
 I thought that this is what you were originally after.
 
 FreeBSD, in itself, can't do this... much like Mac OS or Windows can't
 do this.
 
 Most applications such as Firefox can't even do this (inherently).
 
 If you are trying to enforce this as a personal/company policy, you will
 need to write a 'wrapper' around your application (lynx/firefox) to do
 this.
 
 Note that your example was :25-:443, which implied SMTP over SSL...
 
 Nonetheless, FreeBSD can't make these decisions inherently (thankfully).
 
 Steve

I think the OP does not have a clear grasp on how the various protocols 
operate. Evidenced by confusing http with mail services. Yes, I know there 
is 'web mail', but even web based mail is still a web server.

It is up to the server operator to configure the services on the server end 
of things. Whether its SMTP with SSL/TLS, HTTP/HTTPS, pop3 or imap with SSL, 
etc., all of these things are made to work at the server end. True enough a 
client may need to be configured to talk on port 995 for pop3/SSL or port 
993 for IMAP/SSL but for the web a client shouldn't need to do anything.

The web server operator configures which locations in his URI space should 
be served up on port 443, and the client's browser should automatically 
switch to HTTPS based upon this. The OP doesn't seem to understand that he 
doesn't need to make this happen on his end, at least as far as HTTP/HTTPS 
goes.

If he is actually trying to configure a mail client to talk TLS or SSL to an 
SMTP server, then he needs to tell the email client software this. E.g., 
This connection requires encryption and whether it is SSL or TLS. Mail 
servers on port 25 do not use HTTP or HTTPS, but rather SMTP.

So it seems as if he is just very confused.

-Mike



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto use https in favour of http

2009-10-26 Thread jhell


On Mon, 26 Oct 2009 22:29, alexbestms@ wrote:

Olivier Nicole schrieb am 2009-10-27:

Hi,



i've added the following line to my /etc/hosts:



permail.uni-muenster.de:25  permail.uni-muenster.de:443



so what i want is for freebsd to never use http, but https for that
address.
unfortunately hosts doesn't seem to support this syntax.



De3finitely not. man hosts to see the syntax and meaning of the
/etc/hosts file.



any advice on how to do this?



I am not sure what you want to do. You want to install a web server
that only serves https? then you configure your web server to only
serve https, in Apache configuration you would only have a
VirtualHost: permail.uni-muenster.de:443
and none with port 80.



Best regards,



Olivier


sorry if i didn't specify my problem in detail.

i'm not using a webserver or anything. i'm just a regular user. the point is:
i often forget to specify https://... for that specific address in apps like
lynx or firefox. that's why the non-ssl version of that site is being loaded.
i'd like freebsd to take care of this so even if the app is trying to access
the non-ssl version it should in fact be redirected to the ssl version by
freebsd.

cheers.
alex
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org



Add some shell aliases to your shells rc's.

Bourne style shells:

alias your_name=lynx https://sub.domain.tld/;

Ill leave the c style shell syntax for you to figure out.

Now as long as you can remember your_name then you shouldn't have to much 
of a problem. ;)


Best regards,
PC Pro Sch00lz

--

 ;; dataix.net!jhell 2048R/89D8547E 2009-09-30
 ;; BSD since FreeBSD 4.2Linux since Slackware 2.1
 ;; 85EF E26B 07BB 3777 76BE  B12A 9057 8789 89D8 547E

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto install virtualbox

2009-10-14 Thread henter2009

anyone can give some references of this?
 any kind how to explanation will be more than welcome :D


Manolis Kiagias-2 wrote:
 
 Mark Stapper wrote:
 Hello,

 I'm currently migrating my home desktop from Gentoo linux to FreeBSD
 8.0(Beta but it'll be Stable soon. Using RELENG_8 btw).
 I'm kind of a OS collector/nut/geek/nerd. As such virtualization is
 quite important to me.
 I've been using VMware Server 2.x on Gentoo for quite some time and,
 apart from the new console *barf*, it's been working for me so far.
 So needless to say I was hoping for vmware support. Tough luck... Ow
 well, the handbook spoke of virtualbox support. Only OSE, but still,
 better than nothing.
 After trying virtualbox on windows(at work) I decided to give it a go on
 FreeBSD amd64...
 Issuing make install in the virtualbox directory complained about me not
 having any 32-bit libraries installed.
 My questions are two fold:
 1. Which options do I have when it comes to vritualization on FreeBSD 8
 amd64?
 2. How do I install virtualbox on amd64?

 Thanks,
 Mark

   
 I don't have a suitable amd64 system to test, but apparently virtualbox
 on amd64 requires this option to be built into the kernel:
 
 COMPAT_IA32
 
 for latest info check the wiki page, as virtualbox is under heavy
 development:
 
 http://wiki.freebsd.org/VirtualBox
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 freebsd-questions-unsubscr...@freebsd.org
 
 

-- 
View this message in context: 
http://www.nabble.com/howto-install-virtualbox-tp25001665p25889863.html
Sent from the freebsd-questions mailing list archive at Nabble.com.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Howto: ethernet card on dell M6300

2009-10-07 Thread Chris Stankevitz
I was saddened to find that my ethernet card did not work on my FreeBSD 7.2 
machine.  The bge driver in the kernel did not support the broadcom 5756ME.  
Here is how I got it to work:

1. Set my machine up to compile the kernel (see section 8.5 of manual)

2. Edit /usr/src/sys/dev/bge/if_bgereg.h.  Add a definition for 
BCOM_DEVICEID_BCM5756ME with the value 0x1674 after BCOM_DEVICEID_BCM5755M:
#define BCOM_DEVICEID_BCM5755M  0x1673
#define BCOM_DEVICEID_BCM5756ME 0x1674
#define BCOM_DEVICEID_BCM5780   0x166A

3. Edit /usr/src/sys/dev/bge/if_bge.c.  Add a reference to 
BCOM_DEVICEID_BCM5756ME after BCOM_DEVICEID_BCM5755M:
{ BCOM_VENDORID,BCOM_DEVICEID_BCM5755M },
{ BCOM_VENDORID,BCOM_DEVICEID_BCM5756ME },
{ BCOM_VENDORID,BCOM_DEVICEID_BCM5780 },

4. Compile and install the kernel, and reboot

5. Configure the card using sysinstall

Chris


  
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Howto: ethernet card on dell M6300

2009-10-07 Thread Oliver Fromme
Chris Stankevitz chrisstankev...@yahoo.com wrote:
  I was saddened to find that my ethernet card did not work on
  my FreeBSD 7.2 machine.  The bge driver in the kernel did not
  support the broadcom 5756ME.  Here is how I got it to work:
  
  1. Set my machine up to compile the kernel (see section 8.5
  of manual)
  
  2. Edit /usr/src/sys/dev/bge/if_bgereg.h.  Add a definition
  for BCOM_DEVICEID_BCM5756ME with the value 0x1674 after
  BCOM_DEVICEID_BCM5755M:
  
  #define BCOM_DEVICEID_BCM5755M  0x1673
  #define BCOM_DEVICEID_BCM5756ME 0x1674
  #define BCOM_DEVICEID_BCM5780   0x166A
  
  3. Edit /usr/src/sys/dev/bge/if_bge.c.  Add a reference to
  BCOM_DEVICEID_BCM5756ME after BCOM_DEVICEID_BCM5755M:
  
  { BCOM_VENDORID,BCOM_DEVICEID_BCM5755M },
  { BCOM_VENDORID,BCOM_DEVICEID_BCM5756ME },
  { BCOM_VENDORID,BCOM_DEVICEID_BCM5780 },
  
  4. Compile and install the kernel, and reboot
  
  5. Configure the card using sysinstall

Would you please send a problem report containing
your patches?  You can simply use the send-pr(1) tool,
or use the online web form.

That way your patches won't get lost.  I think that the
developers of the NIC drivers aren't always reading the
questions@ mailing list.

Thank you very much!

Best regards
   Oliver

-- 
Oliver Fromme, secnetix GmbH  Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606,  Geschäftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün-
chen, HRB 125758,  Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart

FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd

Share your knowledge.  It is a way to achieve immortality. -- The Dalai Lama
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto alias a stty erase?

2009-08-30 Thread Saifi Khan
On Tue, 25 Aug 2009, Gary Kline wrote:

 
   is there a way of setty'ing stty erase to [backspace key?
   pretty sure that is the delete key.  i'm tired of having to hand
   set it every time when i use the Konsole term.
 
   thanks,
   gary
 

to set this you need to specify command and key combination

command is : stty erase
keycomb is : CTRL+v then press backspace key once

overall it looks like

# stty erase ^? 

Hope this helps.


thanks
Saifi.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto alias a stty erase?

2009-08-30 Thread Gary Kline
On Mon, Aug 31, 2009 at 08:59:27AM +0530, Saifi Khan wrote:
 On Tue, 25 Aug 2009, Gary Kline wrote:
 
  
  is there a way of setty'ing stty erase to [backspace key?
  pretty sure that is the delete key.  i'm tired of having to hand
  set it every time when i use the Konsole term.
  
  thanks,
  gary
  
 
 to set this you need to specify command and key combination
 
 command is : stty erase
 keycomb is : CTRL+v then press backspace key once
 
 overall it looks like
 
 # stty erase ^? 
 
 Hope this helps.


What worked was a simple alias:

alias se=stty erase ^\?

but while this does save several keysttokes [ and hitting the ctrl key
with v ], now I often forget to type ``se'' before i use vi or vim...

:-)

oh well... .

gary


 
 
 thanks
 Saifi.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
http://jottings.thought.org   http://transfinite.thought.org
The 5.67a release of Jottings: http://jottings.thought.org/index.php

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


howto alias a stty erase?

2009-08-25 Thread Gary Kline

is there a way of setty'ing stty erase to [backspace key?
pretty sure that is the delete key.  i'm tired of having to hand
set it every time when i use the Konsole term.

thanks,

gary



-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
http://jottings.thought.org   http://transfinite.thought.org
The 5.67a release of Jottings: http://jottings.thought.org/index.php

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto alias a stty erase?

2009-08-25 Thread Scott Schappell

If you use sh or bash, you can add to .profile or .bash_profile:

stty erase ^h

That should do it. Type the caret (^) and (h).


On Aug 25, 2009, at 6:30 PM, Gary Kline wrote:



is there a way of setty'ing stty erase to [backspace key?
pretty sure that is the delete key.  i'm tired of having to hand
set it every time when i use the Konsole term.

thanks,

gary



--  
Gary Kline  kl...@thought.org  http://www.thought.org  Public  
Service Unix

   http://jottings.thought.org   http://transfinite.thought.org
   The 5.67a release of Jottings: http://jottings.thought.org/ 
index.php


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org 



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto install virtualbox

2009-08-18 Thread Mark Stapper
Gary Jennejohn wrote:
 On Mon, 17 Aug 2009 08:34:42 +0200
 Mark Stapper st...@mapper.nl wrote:

   
 I'm currently migrating my home desktop from Gentoo linux to FreeBSD
 8.0(Beta but it'll be Stable soon. Using RELENG_8 btw).
 I'm kind of a OS collector/nut/geek/nerd. As such virtualization is
 quite important to me.
 I've been using VMware Server 2.x on Gentoo for quite some time and,
 apart from the new console *barf*, it's been working for me so far.
 So needless to say I was hoping for vmware support. Tough luck... Ow
 well, the handbook spoke of virtualbox support. Only OSE, but still,
 better than nothing.
 After trying virtualbox on windows(at work) I decided to give it a go on
 FreeBSD amd64...
 Issuing make install in the virtualbox directory complained about me not
 having any 32-bit libraries installed.

 

 So, how did you install FreeBSD?  From an install image?

 You should have a /usr/lib32 by default, unless the image didn't contain
 it.  The 32-bit compatibilty libraries are automatically generated by
 make buildworld as long as MK_LIB32 is not set to no (which it is not,
 by default).

 Maybe you need to do make buildworld followed by make installworld,
 assuming you have the src tree installed.

   
 My questions are two fold:
 1. Which options do I have when it comes to vritualization on FreeBSD 8
 amd64?

 

 qemu works pretty well, but VirtualBox is the way to go.  I've been using
 it under 8-current for a few months and it beats the socks off of qemu
 performance-wise.

   
 2. How do I install virtualbox on amd64?

 

 See above.  It seems that having /usr/lib32 populated is a prerequisite.

 ---
 Gary Jennejohn
   
Thanks all for your reply's.
I was planning on doing a kernel/world upgrade anyway since that's what
I like doing :-) (need to test a patch from Junch-uk Kim anyway...)
Now I really have no more reason not to run FreeBSD as desktop... Maybe
except for good nvidia drivers.
thanks again.
Greetz,
Mark



signature.asc
Description: OpenPGP digital signature


Re: howto install virtualbox

2009-08-18 Thread lucian

Mark Stapper writes:


Gary Jennejohn wrote:

On Mon, 17 Aug 2009 08:34:42 +0200
Mark Stapper st...@mapper.nl wrote:

  

I'm currently migrating my home desktop from Gentoo linux to FreeBSD
8.0(Beta but it'll be Stable soon. Using RELENG_8 btw).
I'm kind of a OS collector/nut/geek/nerd. As such virtualization is
quite important to me.
I've been using VMware Server 2.x on Gentoo for quite some time and,
apart from the new console *barf*, it's been working for me so far.
So needless to say I was hoping for vmware support. Tough luck... Ow
well, the handbook spoke of virtualbox support. Only OSE, but still,
better than nothing.
After trying virtualbox on windows(at work) I decided to give it a go on
FreeBSD amd64...
Issuing make install in the virtualbox directory complained about me not
having any 32-bit libraries installed.




So, how did you install FreeBSD?  From an install image?

You should have a /usr/lib32 by default, unless the image didn't contain
it.  The 32-bit compatibilty libraries are automatically generated by
make buildworld as long as MK_LIB32 is not set to no (which it is not,
by default).

Maybe you need to do make buildworld followed by make installworld,
assuming you have the src tree installed.

  

My questions are two fold:
1. Which options do I have when it comes to vritualization on FreeBSD 8
amd64?




qemu works pretty well, but VirtualBox is the way to go.  I've been using
it under 8-current for a few months and it beats the socks off of qemu
performance-wise.

  

2. How do I install virtualbox on amd64?




See above.  It seems that having /usr/lib32 populated is a prerequisite.

---
Gary Jennejohn
  

Thanks all for your reply's.
I was planning on doing a kernel/world upgrade anyway since that's what
I like doing :-) (need to test a patch from Junch-uk Kim anyway...)
Now I really have no more reason not to run FreeBSD as desktop... Maybe
except for good nvidia drivers.


And Adobe Flash (tm) ;-)


thanks again.
Greetz,
Mark


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


howto install virtualbox

2009-08-17 Thread Mark Stapper
Hello,

I'm currently migrating my home desktop from Gentoo linux to FreeBSD
8.0(Beta but it'll be Stable soon. Using RELENG_8 btw).
I'm kind of a OS collector/nut/geek/nerd. As such virtualization is
quite important to me.
I've been using VMware Server 2.x on Gentoo for quite some time and,
apart from the new console *barf*, it's been working for me so far.
So needless to say I was hoping for vmware support. Tough luck... Ow
well, the handbook spoke of virtualbox support. Only OSE, but still,
better than nothing.
After trying virtualbox on windows(at work) I decided to give it a go on
FreeBSD amd64...
Issuing make install in the virtualbox directory complained about me not
having any 32-bit libraries installed.
My questions are two fold:
1. Which options do I have when it comes to vritualization on FreeBSD 8
amd64?
2. How do I install virtualbox on amd64?

Thanks,
Mark



signature.asc
Description: OpenPGP digital signature


Re: howto install virtualbox

2009-08-17 Thread Gary Jennejohn
On Mon, 17 Aug 2009 08:34:42 +0200
Mark Stapper st...@mapper.nl wrote:

 I'm currently migrating my home desktop from Gentoo linux to FreeBSD
 8.0(Beta but it'll be Stable soon. Using RELENG_8 btw).
 I'm kind of a OS collector/nut/geek/nerd. As such virtualization is
 quite important to me.
 I've been using VMware Server 2.x on Gentoo for quite some time and,
 apart from the new console *barf*, it's been working for me so far.
 So needless to say I was hoping for vmware support. Tough luck... Ow
 well, the handbook spoke of virtualbox support. Only OSE, but still,
 better than nothing.
 After trying virtualbox on windows(at work) I decided to give it a go on
 FreeBSD amd64...
 Issuing make install in the virtualbox directory complained about me not
 having any 32-bit libraries installed.


So, how did you install FreeBSD?  From an install image?

You should have a /usr/lib32 by default, unless the image didn't contain
it.  The 32-bit compatibilty libraries are automatically generated by
make buildworld as long as MK_LIB32 is not set to no (which it is not,
by default).

Maybe you need to do make buildworld followed by make installworld,
assuming you have the src tree installed.

 My questions are two fold:
 1. Which options do I have when it comes to vritualization on FreeBSD 8
 amd64?


qemu works pretty well, but VirtualBox is the way to go.  I've been using
it under 8-current for a few months and it beats the socks off of qemu
performance-wise.

 2. How do I install virtualbox on amd64?
 

See above.  It seems that having /usr/lib32 populated is a prerequisite.

---
Gary Jennejohn
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto install virtualbox

2009-08-17 Thread Manolis Kiagias
Mark Stapper wrote:
 Hello,

 I'm currently migrating my home desktop from Gentoo linux to FreeBSD
 8.0(Beta but it'll be Stable soon. Using RELENG_8 btw).
 I'm kind of a OS collector/nut/geek/nerd. As such virtualization is
 quite important to me.
 I've been using VMware Server 2.x on Gentoo for quite some time and,
 apart from the new console *barf*, it's been working for me so far.
 So needless to say I was hoping for vmware support. Tough luck... Ow
 well, the handbook spoke of virtualbox support. Only OSE, but still,
 better than nothing.
 After trying virtualbox on windows(at work) I decided to give it a go on
 FreeBSD amd64...
 Issuing make install in the virtualbox directory complained about me not
 having any 32-bit libraries installed.
 My questions are two fold:
 1. Which options do I have when it comes to vritualization on FreeBSD 8
 amd64?
 2. How do I install virtualbox on amd64?

 Thanks,
 Mark

   
I don't have a suitable amd64 system to test, but apparently virtualbox
on amd64 requires this option to be built into the kernel:

COMPAT_IA32

for latest info check the wiki page, as virtualbox is under heavy
development:

http://wiki.freebsd.org/VirtualBox
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Howto: To know whether the 3D accelerator works on my desktop with ATI Radeon 3450.

2009-08-15 Thread Ricky Tompu Breaky
Dear my friends,

please tell me how I know whether my FreeBSD can run the 3D Accelerator
with my current ATI Radeon 3450 graphic card.

Thank you very much in advance.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Howto: To know whether the 3D accelerator works on my desktop with ATI Radeon 3450.

2009-08-15 Thread Polytropon
On Sat, 15 Aug 2009 17:53:47 +0700, Ricky Tompu Breaky ricky.bre...@uni.de 
wrote:
 Dear my friends,
 
 please tell me how I know whether my FreeBSD can run the 3D Accelerator
 with my current ATI Radeon 3450 graphic card.

As far as I know, the glxgears program is a good indicator.
It can be installed via the mesa-demos port or package.
Furthermore, there's the glxinfo program.

-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Howto: To know whether the 3D accelerator works on my desktop with ATI Radeon 3450.

2009-08-15 Thread Roland Smith
On Sat, Aug 15, 2009 at 05:53:47PM +0700, Ricky Tompu Breaky wrote:
 Dear my friends,
 
 please tell me how I know whether my FreeBSD can run the 3D Accelerator
 with my current ATI Radeon 3450 graphic card.
 
The Radeon 3450 uses a RV620 chip
[http://cgit.freedesktop.org/xorg/driver/xf86-video-radeonhd/plain/README]. 

The radeonhd driver (x11-drivers/xf86-video-radeonhd) now supports 2D
accelleration for this chip.

3D hardware accelleration support for this chip (and indeed all R6xx chips) is
being worked on, but not ready for prime time. See
[http://www.x.org/wiki/radeonhd]

The Xorg server falls back to software 3D rendering through Mesa
[http://www.mesa3d.org/]. Depending on your application and CPU power this
might be fast enough.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpxUVLWk9esQ.pgp
Description: PGP signature


Re: Samba3 domain controller howto?

2009-06-08 Thread Mister Olli
hi,

 yes, you are mis-understanding
 
 samba itself is a NT4-type domain.
not quite right. It depends on the samba version your using.
- samba3 only provides NT4-type domains
- samba4 provides active directory domain types including GPO (I have
such a setup running in 7.SOMETHING with around 10 users. It works
quite good, beside the fact that samba segfaults from time to time
(which I covered by running samba4 in foreground within an endless
bash.-loop)).

there is even a new build-option that creates the 'samba franky' release
which uses samba3  samba4 at the same time to make nearly all samba3
feature in combination with AD environments available, but it didn't
have the time to look into that. But it sounds quite promising, since
samba4 lacks some features samba3 already has.


Regards,
---
Mr. Olli


 samba can use authentication backends that include passwd files, LDAP
 and kerberos.  Active directory is a requirement to use LDAP, whereas
 samba is offering it as a auth backend only.
 
 fine line, I know.
 
 IOW, whereas Active Directory - as a technology:
   Uses kerberos for authorization
   Uses LDAP for a storage backend for Kerberos
   Uses u...@domain logins (thanks to Kerberos),
   Uses other techs not related to this thread
 
 NT4-style domains - as a technology:
   Not using Kerberos
   Not using LDAP storage
 
 Samba allows it's authorization backend to offer more possibilities
 than NT4's own methods.  Such as passwd files, LDAP, Kerberos, etc.
 
 
 It's technology vs technology, not product vs product.
 
 
 On 6/7/09, Olivier Nicole o...@cs.ait.ac.th wrote:
  Hi,
 
  Samba is still only a NT4-type
  DC, no Active Directory type of function (Group Policies, u...@domain
  logins, kerberos, ldap, etc)
 
  I am not sure if I understand you well, but my samba is authenticating
  users agaiinst LDAP.
 
  Best regards,
 
  Olivier
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


RE: Samba3 domain controller howto?

2009-06-08 Thread Mister Olli
Hi,

I used the following procedure to install samba4 on a freebsd box:
http://wiki.samba.org/index.php/Samba4/HOWTO

in my current setup (which is about 4 months old) the following this do
not work:
- active directory groups did somehow not work as expected, but I didn't
had the time to look deeper into it
- updating DNS records within named, as the version freebsd comes with
does not support the GSSAPI. if someone finds a way to replace builtin
named with a newer version please drop me an email.
- stability (didn't had the time to examine the segfaults further.) I
already had contact about this issue with andrew bartlett from the
developer team and they are willing to fix this issues when they have
enough informations.

look here (http://wiki.samba.org/index.php/Franky) for informations
about the 'franky' release and how to compile it. seems to be simple if
you're a little bit familiar with samba.
I didn't had the time to look and test, and surely won't have any until
mid-august.

so it would be great to hear your experiences :-)

Regards,
---
Mr. Olli


On Mon, 2009-06-08 at 07:40 -0400, Dave wrote:
 Hi,
 Do you have a procedure for getting samba4 going? If it can do active
 directory i'd like to try it. And get it all going, with samba3 as well.
 Thanks.
 Dave.
  
 
 -Original Message-
 From: owner-freebsd-questi...@freebsd.org
 [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Mister Olli
 Sent: Monday, June 08, 2009 7:18 AM
 To: Tim Judd
 Cc: Olivier Nicole; freebsd-questions@freebsd.org; redt...@sbcglobal.net
 Subject: Re: Samba3 domain controller howto?
 
 hi,
 
  yes, you are mis-understanding
  
  samba itself is a NT4-type domain.
 not quite right. It depends on the samba version your using.
 - samba3 only provides NT4-type domains
 - samba4 provides active directory domain types including GPO (I have such a
 setup running in 7.SOMETHING with around 10 users. It works quite good,
 beside the fact that samba segfaults from time to time (which I covered by
 running samba4 in foreground within an endless bash.-loop)).
 
 there is even a new build-option that creates the 'samba franky' release
 which uses samba3  samba4 at the same time to make nearly all samba3
 feature in combination with AD environments available, but it didn't have
 the time to look into that. But it sounds quite promising, since
 samba4 lacks some features samba3 already has.
 
 
 Regards,
 ---
 Mr. Olli
 
 
  samba can use authentication backends that include passwd files, LDAP 
  and kerberos.  Active directory is a requirement to use LDAP, whereas 
  samba is offering it as a auth backend only.
  
  fine line, I know.
  
  IOW, whereas Active Directory - as a technology:
Uses kerberos for authorization
Uses LDAP for a storage backend for Kerberos
Uses u...@domain logins (thanks to Kerberos),
Uses other techs not related to this thread
  
  NT4-style domains - as a technology:
Not using Kerberos
Not using LDAP storage
  
  Samba allows it's authorization backend to offer more possibilities 
  than NT4's own methods.  Such as passwd files, LDAP, Kerberos, etc.
  
  
  It's technology vs technology, not product vs product.
  
  
  On 6/7/09, Olivier Nicole o...@cs.ait.ac.th wrote:
   Hi,
  
   Samba is still only a NT4-type
   DC, no Active Directory type of function (Group Policies, 
   u...@domain logins, kerberos, ldap, etc)
  
   I am not sure if I understand you well, but my samba is 
   authenticating users agaiinst LDAP.
  
   Best regards,
  
   Olivier
  
  ___
  freebsd-questions@freebsd.org mailing list 
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to
 freebsd-questions-unsubscr...@freebsd.org
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Samba3 domain controller howto?

2009-06-08 Thread Mister Olli
hi,



 Where did you get samba4? How did you download?
 How did you compile on FreeBSD? You can share your ./configure args?

have a look into the mail I just posted on freebsd-questions, it
includes links to the samba wiki where installation is explained in
detail.

 And your smb.conf and loop script?
the loop script is a bash with the following command running:
'while (true); do samba -i -M single; done'
this restarts samba4 whenever it crashes immediately.

my smb.conf is very simplistic as there aren't that may options you can
choose in samba4 (due to being in heavy development). 
maybe one thing that you should be aware of is, that UFS does not
support extend file attributes as linux does. so you need to save this
informations into a file. the correct procedure is described in the
samba4 howto article within the samba wiki
(http://wiki.samba.org/index.php/Samba4/HOWTO).

sorry for not providing my smb.conf, but the server is out of my reach
at the moment. If you have any questions about the setup drop me an
email, maybee I can help you.

Regards,
---
Mr. Olli


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Samba3 domain controller howto?

2009-06-07 Thread Dave
Hello,
I've found a lot of this for LInux, but am looking for something
FreeBSD specific. I'm wanting to set up a FreeBSD 7.2 machine, samba3,
dynamic dhcp and dns, to act as a domain controller. Has anyone done this
and do you have some notes or a howto?
Thanks.
Dave.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Samba3 domain controller howto?

2009-06-07 Thread Mark Busby



--- On Sun, 6/7/09, Dave dave.meh...@gmail.com wrote:

 From: Dave dave.meh...@gmail.com
 Subject: Samba3 domain controller howto?
 To: freebsd-questions@freebsd.org
 Date: Sunday, June 7, 2009, 6:28 AM
 Hello,
     I've found a lot of this for LInux, but
 am looking for something
 FreeBSD specific. I'm wanting to set up a FreeBSD 7.2
 machine, samba3,
 dynamic dhcp and dns, to act as a domain controller. Has
 anyone done this
 and do you have some notes or a howto?
 Thanks.
 Dave.


The samba howto's on the samba website cover this very well, the only step I 
can think of that is a bit diff on freebsd, is adding the $ to the machine 
account but it's stated on the website.
Dhcp is covered in the handbook on the freebsd website.


 
 ___
 freebsd-questions@freebsd.org
 mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Samba3 domain controller howto?

2009-06-07 Thread Tim Judd
On 6/7/09, Mark Busby redt...@sbcglobal.net wrote:



 --- On Sun, 6/7/09, Dave dave.meh...@gmail.com wrote:

 From: Dave dave.meh...@gmail.com
 Subject: Samba3 domain controller howto?
 To: freebsd-questions@freebsd.org
 Date: Sunday, June 7, 2009, 6:28 AM
 Hello,
 I've found a lot of this for LInux, but
 am looking for something
 FreeBSD specific. I'm wanting to set up a FreeBSD 7.2
 machine, samba3,
 dynamic dhcp and dns, to act as a domain controller. Has
 anyone done this
 and do you have some notes or a howto?
 Thanks.
 Dave.


 The samba howto's on the samba website cover this very well, the only step I
 can think of that is a bit diff on freebsd, is adding the $ to the machine
 account but it's stated on the website.
 Dhcp is covered in the handbook on the freebsd website.



dns/dnsmasq for DHCP and DNS (will provide dynamic DNS)
samba for windows networking shares.  Samba is still only a NT4-type
DC, no Active Directory type of function (Group Policies, u...@domain
logins, kerberos, ldap, etc)

Samba's own password db is quite advanced, but samba itself is still a
NT4-type of function.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Samba3 domain controller howto?

2009-06-07 Thread Olivier Nicole
Hi,

 Samba is still only a NT4-type
 DC, no Active Directory type of function (Group Policies, u...@domain
 logins, kerberos, ldap, etc)

I am not sure if I understand you well, but my samba is authenticating
users agaiinst LDAP.

Best regards,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Samba3 domain controller howto?

2009-06-07 Thread Tim Judd
yes, you are mis-understanding

samba itself is a NT4-type domain.

samba can use authentication backends that include passwd files, LDAP
and kerberos.  Active directory is a requirement to use LDAP, whereas
samba is offering it as a auth backend only.

fine line, I know.

IOW, whereas Active Directory - as a technology:
  Uses kerberos for authorization
  Uses LDAP for a storage backend for Kerberos
  Uses u...@domain logins (thanks to Kerberos),
  Uses other techs not related to this thread

NT4-style domains - as a technology:
  Not using Kerberos
  Not using LDAP storage

Samba allows it's authorization backend to offer more possibilities
than NT4's own methods.  Such as passwd files, LDAP, Kerberos, etc.


It's technology vs technology, not product vs product.


On 6/7/09, Olivier Nicole o...@cs.ait.ac.th wrote:
 Hi,

 Samba is still only a NT4-type
 DC, no Active Directory type of function (Group Policies, u...@domain
 logins, kerberos, ldap, etc)

 I am not sure if I understand you well, but my samba is authenticating
 users agaiinst LDAP.

 Best regards,

 Olivier

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto sidestep sysinstall during installation

2009-05-13 Thread Saifi Khan
On Mon, 11 May 2009, Vincent Hoffman wrote:
 
   Is there a way to sidestep the sysinstall during the
   installation process, beyond selecting the 'location' ?
  
 
  Since you are using the snapshot DVD you should have the live/fixit
  environment which is very handy for this.
  I would suggest a combination of LOTS of reading and understanding of
  the pages at
  http://typo.submonkey.net/articles/2006/04/13/installing-freebsd-on-usb-stick-episode-2
  (which goes though the steps for partitoning and installing using fdisk
  and bsdlabel, adjust paths to your dvd-rom)

Thanks Vince for the link that was a nice starting point.

Thanks to everybody who chipped in with pointers and help with
learning the various concepts.

Using the Fixit# console (LiveDVD) i could install FreeBSD 200905
snapshot (bypassed the sysinstall). i plan to write an article 
on the experience shortly.

Since then, i've installed the following software:
 . xorg X 7.4 meta port (complete)
 . postgresql 8.3.7
 . apache 2.2.11
 . diablo-jdk 1.6.0
 . opera 9.64
 . dwm
 + many others.

There were two errors/quirks that i noticed.
http://www.flickr.com/photos/saifi/sets/72157618010835543/

 1. crash encountered while running sysinstall from the booted 
up system.
 2. same crash encountered while running 'make fetch' for many 
of the ports. (rather random in occurence).

Anybody encountered this issue ?


thanks
Saifi.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: howto sidestep sysinstall during installation

2009-05-11 Thread Daniel O'Connor
On Mon, 11 May 2009, Saifi Khan wrote:
 Is there a way to sidestep the sysinstall during the
 installation process, beyond selecting the 'location' ?

 i'm using FreeBSD 8.0 200905 i386 snapshot DVD and looking
 for an approach to drive the entire installation from the
 Fixit# command line console.

 i'm a experienced Gentoo Linux user.

 Any suggestions, pointers or observations ?

You won't be able to partition the disk from the command line because 
the install MFS doesn't have any of the requisite tools to do so.

You could do it from a livefs disk however.

As for observations.. I think you're wasting your time :)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.


Re: howto sidestep sysinstall during installation

2009-05-11 Thread Vincent Hoffman
On 11/5/09 11:48, Saifi Khan wrote:
 Hi all:

 Is there a way to sidestep the sysinstall during the
 installation process, beyond selecting the 'location' ?

 i'm using FreeBSD 8.0 200905 i386 snapshot DVD and looking
 for an approach to drive the entire installation from the
 Fixit# command line console.

 i'm a experienced Gentoo Linux user.

 Any suggestions, pointers or observations ?

   
Since you are using the snapshot DVD you should have the live/fixit
environment which is very handy for this.
I would suggest a combination of LOTS of reading and understanding of
the pages at
http://typo.submonkey.net/articles/2006/04/13/installing-freebsd-on-usb-stick-episode-2
(which goes though the steps for partitoning and installing using fdisk
and bsdlabel, adjust paths to your dvd-rom)
and if you want zfs
http://lulf.geeknest.org/blog/freebsd/Setting_up_a_zfs-only_system/
(goes though using gpart instead of fdisk and bsdlabel if you want to
use zfs on root)
should be enough to get you started. I assume you dont need too much
hand holding since you want to install -CURRENT.


Vince

 thanks
 Saifi.
 ___
 freebsd-curr...@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-current
 To unsubscribe, send any mail to freebsd-current-unsubscr...@freebsd.org
   

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


  1   2   3   4   5   6   7   >