problem with vasftpd server

I have installed vsftpd server v. 2.0.3 I have also this server on linux server. I try to make this to work on freebsd now, but i can't login. My configurations is: vsftpd.conf located at /usr/local/etc/ and looks like this: vsftpd.conf local_enable=YES local_umask=022 dirmessage_enable=YES

Re: problem with vasftpd server

Now work. I can login and upload files without any problem. But now i want to permit and anonymous connections, without upload, to same directories that have acces with login users. When i try to login anonymously receive this: 500 OOPS: vsftpd: refusing to run with writable anonymous root

error with squid: Page faults with physical i/o: 0

I have installed squid from ports and i try to build the cache: #: /usr/local/sbin/squid -z and receive: FATAL: Could not determine fully qualified hostname. Please set 'visible_hostname' Squid Cache (Version 2.5.STABLE10): Terminated abnormally. CPU Usage: 0.006 seconds = 0.006 user + 0.000

Re: error with squid: Page faults with physical i/o: 0

Sorry all! First i think that is something more complicated! Now swap is created succesfull! Thanks! ___ freebsd-questions@freebsd.org mailing list

sshd prompt for password very slow

When i try to login remote on my server, receive very quickly prompt for login as: After insert my username, promt for password, is avaible after aproximatively 10s. This is happend in local network. Why is so slowly? My system: FreeBsd 5.4 release video 64mb memory 256 mb

Re[2]: sshd prompt for password very slow

Hello jdyke, this is an DNS problem. its trying to lookup the address of the host that is connecting to it. you can turn these off in /etc/ssh/sshd_config or ensure that you're comning from somewhere that has a valid DNS assocaited and update /etc/resolv.conf with a valid nameserver for

Re[2]: SSH

!! -- Best regards, vladonemailto:[EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

DoS prevention .Sysctl parameters to prevent this?

Recently i have in gateway freebsd that go down due to an DoS attack. I dont know exactly what is (i dont have experience), but is useful if someone, with more wiyh more experience, can give some parameters for sysctl to prevent Dos an flood problem. Or perhaps with ipfw rules. Any help will be

force use proxy server

Hi! How i can redirect web traffic from my lan, throught my proxy server? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

promiscuous mode enabled

Hi! I see this in dmesg.today: rl0: promiscuous mode enabled rl0: promiscuous mode disabled rl0: promiscuous mode enabled rl0: promiscuous mode disabled rl0: promiscuous mode enabled rl0: promiscuous mode disabled I dont understand, way my network card enter and out from promiscuous mode. My card

Fwd: RE: promiscuous mode enabled

I dont have dhcp daemon, but i use sometime tcpdump. Thanks! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

about VPN solution

Hi! I have an private network, that acces the internet via an freebsd gateway. I want to buil some authentication for my users, to prevent ilegal connections. When an user want to connect to my gateway (to acces the internet), require to enter user and password. My questions is: What solution, is

ipnat and MAC filter

I run for a while ipfw with natd. Now i work with ipfw and ipnat, but i dont count any traffic by MAC address. This is an example: 000300 0 count ip from any to any MAC any any via fxp0 00050 378 274434 allow ip from 192.168.101.0/24 to 192.168.101.0/24 via fxp0 It's

pptp on freebsd

Hi! I have an gateway freebsd that make nat with ipnat and traffic shaping with ipfw + dummynet. I want to require for my users authentication to access the internet via my gateway. I want to use pptp because is supported by most version of windows operating systems. My questions is about traffic

Re: about VPN solution

Thanks all for reply. I read some about openvpn. Look good but, if i understand corectly, this not support pptp (that is default for VPN connections under Windows OS) and need an client aplication tu be installed on client machine. This is suported only on Win2000 and XP. I have an clients with

monitor bandwith realtime per IP

Hi! Know somebody an aplication who can monitor bandwith (real time) per IP? Something like bwm-ng but per IP? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to

many packets dropped by kernel

Hi! I want to capture some traffic with tcpdump. After i run the commnad i see an greatly number of packets dropped by kernel. I flush all ipfw rules but nothing. Example: [EMAIL PROTECTED] #] tcpdump -i fxp0 out tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

Re: about VPN solution

IPSEC not work on Win98 systems, and is not a very apreciated solution! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

strange problem with ipfw and some IP

Hi! I have this problem: i see in my traffic, ip's who in via private interface, and is not from my network class. Packets sended are less. When i try to block this traffic, after aprximatively 5-10 min. my internal interface stop responding. This is an example from ipfw queue show for in private

Re: Stranges with ARP

I dont understand. U want to block users that not have corect MAC address?. Then permit only corect MAC and deny any else. Problem with illegal connected users is not very easy to resolv. Any guy that have some ability, can change MAC address with one that exist in network and voila! Solutions for

Re[2]: Reset root password...HOW?

If u dont want too permit change root password by procedure presented, u can this. Open /etc/ttys and modify line: console noneunknown off secure to be console noneunknown off insecure :) ___

i can't block win98 computers

Hi! I try to block some computers to acces my gateway based on MAC address. I use this ipfw rule: ipfw add 100 deny mac any xx:yy:aa:bb:cc:dd in via $private_interface With this i can block XP computers but not work with Win98. I dont understand what is happened! I try against different computer

Re[2]: i can't block win98 computers

Thanks all for reply! Now: 1. i try to permit only good mac and deny any else but not work. Win98 still have internet. 2. one solution is probably to block acces for win98 computers to any on port 53 and block in this mode DNS service, but is a little strange this solution. 3. i dont understand

Re[2]: i can't block win98 computers

My server has an Athlon XP CPU at 1.6 Ghz with 256 mb ram. Don't believe that this is the reason for which don't goes tcpdump. Every client has his ip, but i want to prevent illegal connections, and this can be changed. ___ freebsd-questions@freebsd.org

Re[2]: i can't block win98 computers

Problem solved. I have two rules that refer at MAC. 1. allow arp traffic 2. block illegal mac If i put first rule 1 and then rule 2 i can block only XP computers. If inverse this order can block any computer. If anyone can explain this :). But work in this mode. P.S. I can't put an rule to deny

Re: Aggregated bandwidth

I read some about route multipath. But i dont test anything. This is what i read, is from linux but can use on freebsd without any problem. http://www.linux.org/docs/ldp/howto/Adv-Routing-HOWTO/lartc.rpdb.multiple-links.html ___

Re[4]: i can't block win98 computers

This is true with posibility to change MAC address. Will try to implement some pppoe solutions for that. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL

problem with vsftpd. filesystem full

I have an user, that can acces ftp throught user and pass. (real user not virtual). after i upload some file to ftp server i receive this error in console: pid 12372 (vsftpd), uid 1005 inumber 8413 on /: filesystem full uid 1005 is id number for this user. I can't upload anything. My upload stop

Re[2]: problem with vsftpd. filesystem full

# du -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad1s1a248M228M200K 100%/ devfs 1.0K1.0K 0B 100%/dev /dev/ad1s1e248M 12K228M 0%/tmp /dev/ad1s1f 36G1.4G 32G 4%/usr /dev/ad1s1d248M 35M

Re[2]: problem with vsftpd. filesystem full

Thank! This is done! But if i want to modify size of partitions in the same slice? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

problem when starting mysql

Hi! I have installed mysql 4.1 from ports. After i run /usr/local/bin/mysql_install_db, i try to start server with: /usr/local/bin/mysqld_safe but i receive this error in host.err: [ERROR] Fatal error: Can't open privilege tables: Table 'mysql.host' doesn't exist How i can resolv this?

Re: problem when starting mysql

Sorry. Resolved. I dont have right owner for /var/db/mysql ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

i can't connect remote to my mysql server

I have instaled mysql server succcesfull and started. I set root password, i can login to my server from console but i can't login remote (i use Mysql Control Center for win, for quickly management). I receive this error: host 192.168.100.4 is not allowed to connect to this Mysql server I dont

Re[2]: i can't connect remote to my mysql server

Thanks all! Work. Problem is resolved how present jdyke. (with identifed not work :)) Usefull is and solution for my.cnf. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any

help with pppoed

Hi! I want to setup an freebsd server that support authentication via pppoe conexion. I make this steps: 1.I have compiled kernel with needed options 2. i modify rc.conf to include this: pppoed_enable=YES pppoed_flags=-d -P /var/run/pppoed.pid -l default pppoed_interface=fxp0

only five tun interface

Hi! I have setup an pppoe concentrator on freebsd 5.4 machine. Now i see, on testing with ifconfig only 5 tun interface. This mean that only 5 users can connect at time, or, if is needed then are created more tun interface? If no, how i can create more tun interface, setting probably ppp.conf?

not permit login simultaneously pppoe

Hi! I have instaled pppoed, and work well. But i want to know how is possibil to not permit simultaneously logins? What parameter need te setup in ppp.conf? ___ freebsd-questions@freebsd.org mailing list

Re[2]: only five tun interface

I dont test yet, about number of users. But probably this day or tomorow. Will see. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

Re[2]: error when use table option with ipfw

Thanks! Work! :) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

error when use table option with ipfw

Hi! I try to use table option but not work. First, i use Freebsd 5.4 release. In short i have: cmd=ipfw -q $cmd table 1 add 192.168.0.0/24 $cmd table 1 add 192.168.2.0/24 $cmd table 1 add 192.168.3.0/24 $cmd table 1 add 192.168.4.0/24 $cmd add 700 count ip from table(1) to any via $lif When i

Re[2]: not permit login simultaneously pppoe

I know about radius, but is a little complicate, and i dont want to use an server for an situation seeming to be simple. I dont see any ppp chat script. If have some, please! ___ freebsd-questions@freebsd.org mailing list

how to enable altq to use with ipfw

Hi! I want to enable altq to use in conjunction with ipfw. How can do that? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

Re[2]: how to enable altq to use with ipfw

Thanks! And pf how it's enabled? I think need some device in /dev This is created when compiling kernel with these options or need to compile and options for pf? ___ freebsd-questions@freebsd.org mailing list

Re[2]: mime contents thru ipfw

U are funny (sorry). Use Freebsd for firewall and microsoft for proxy? If u want an easy solution with microsoft try Windows2003 server (that have route and NAT options) and Sygate at firewall. Or any version of Windows with winroute for nat/proxy. I recommend u oldies versions like 4.x for

how to know if i'm under flood?

Hi! How i can verify if i'm under flood atack? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

Re[2]: how to know if i'm under flood?

And how exactly use netstat for this purpose? I see many options in man pages. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

Re[4]: how to know if i'm under flood?

Thanks for reply! If u have more experience, please give some example about what sysctl variable to set, and wich ipfw rules can prevent DoS. P.S. I use ipfw. ___ freebsd-questions@freebsd.org mailing list

challenge with dummynet+ipfw

Hi! I want to organize my bandwith in this mode # download section 1000kbit/s | | || || || hight low

Re[2]: challenge with dummynet+ipfw

I know about pf+altq. I can use even ipfw+altw. But i'm fun dummynet, and i want to use'it. :) My work at moment is: #download total $cmd pipe 1 config bw 1000kbits/s #download agregate (low pri. 300kbits/s agregate) $cmd pipe 2 config bw 300kbits/s $cmd queue 2 config weight 1 pipe 1 $cmd

Re: traffic accounting.

U can use ipfw+ipa+mrtg Can visit http://www.kruijff.org/ but for moment, probably, the author make some changes. Idea is that ipa read count traffic from ipfw rules, wich can be read with scripts and generate traffic with mrtg. ___

Re: Monitoring network connections recomendations please

Ntop, traffic, bwm-ng. U can find more in ports at /net/ location. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]