system is under attack (what can I do more?)
Dear freebsd list, My server, which is a amd64 system running freebsd 8.0 is currently under attack from a botnet or something. Take a look at my /var/log/auth.log file: Jun 18 12:00:00 dual newsyslog[34486]: logfile turned over due to size100K Jun 18 12:00:44 dual sshd[34500]: Address 78.5.23.41 maps to 78-5-23-41-static.albacom.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 18 12:00:44 dual sshd[34500]: Invalid user po from 78.5.23.41 Jun 18 12:00:44 dual sshd[34500]: error: PAM: authentication error for illegal user po from 78.5.23.41 Jun 18 12:00:44 dual sshd[34500]: Failed keyboard-interactive/pam for invalid user po from 78.5.23.41 port 1 ssh2 Jun 18 12:02:17 dual sshd[34503]: Invalid user pol from 211.138.112.241 Jun 18 12:02:17 dual sshd[34503]: error: PAM: authentication error for illegal user pol from 211.138.112.241 Jun 18 12:02:17 dual sshd[34503]: Failed keyboard-interactive/pam for invalid user pol from 211.138.112.241 port 59172 ssh2 Jun 18 12:03:36 dual sshd[34506]: Invalid user polo from 210.59.145.5 Jun 18 12:03:36 dual sshd[34506]: error: PAM: authentication error for illegal user polo from 210.59.145.5 Jun 18 12:03:36 dual sshd[34506]: Failed keyboard-interactive/pam for invalid user polo from 210.59.145.5 port 56517 ssh2 Jun 18 12:04:34 dual sshd[34509]: Invalid user poning from 58.68.131.50 Jun 18 12:04:35 dual sshd[34509]: error: PAM: authentication error for illegal user poning from 58.68.131.50 Jun 18 12:04:35 dual sshd[34509]: Failed keyboard-interactive/pam for invalid user poning from 58.68.131.50 port 55580 ssh2 Jun 18 12:06:11 dual sshd[34514]: User pop from 220.191.131.209 not allowed because not listed in AllowUsers Jun 18 12:06:12 dual sshd[34514]: error: PAM: authentication error for illegal user pop from 220.191.131.209 Jun 18 12:06:12 dual sshd[34514]: Failed keyboard-interactive/pam for invalid user pop from 220.191.131.209 port 50786 ssh2 Jun 18 12:08:44 dual sshd[34517]: Invalid user popo from 92.79.130.80 Jun 18 12:08:44 dual sshd[34517]: error: PAM: authentication error for illegal user popo from 92.79.130.80 Jun 18 12:08:44 dual sshd[34517]: Failed keyboard-interactive/pam for invalid user popo from 92.79.130.80 port 34021 ssh2 Jun 18 12:08:51 dual sshd[34520]: User pop from 190.41.164.23 not allowed because not listed in AllowUsers Jun 18 12:08:52 dual sshd[34520]: error: PAM: authentication error for illegal user pop from 190.41.164.23 Jun 18 12:08:52 dual sshd[34520]: Failed keyboard-interactive/pam for invalid user pop from 190.41.164.23 port 26359 ssh2 Jun 18 12:10:30 dual sshd[34525]: Invalid user poppy from 222.68.200.116 Jun 18 12:10:31 dual sshd[34525]: error: PAM: authentication error for illegal user poppy from 222.68.200.116 Jun 18 12:10:31 dual sshd[34525]: Failed keyboard-interactive/pam for invalid user poppy from 222.68.200.116 port 56770 ssh2 Jun 18 12:11:56 dual sshd[34540]: Invalid user porno from 81.74.38.142 Jun 18 12:11:56 dual sshd[34540]: error: PAM: authentication error for illegal user porno from 81.74.38.142 Jun 18 12:11:56 dual sshd[34540]: Failed keyboard-interactive/pam for invalid user porno from 81.74.38.142 port 10478 ssh2 Jun 18 12:13:05 dual sshd[34543]: Invalid user port from 62.218.125.149 Jun 18 12:13:05 dual sshd[34543]: error: PAM: authentication error for illegal user port from 62.218.125.149 Jun 18 12:13:05 dual sshd[34543]: Failed keyboard-interactive/pam for invalid user port from 62.218.125.149 port 54959 ssh2 Jun 18 12:14:13 dual sshd[34546]: Invalid user portal from 195.5.12.170 Jun 18 12:14:13 dual sshd[34546]: error: PAM: authentication error for illegal user portal from 195.5.12.170 Jun 18 12:14:13 dual sshd[34546]: Failed keyboard-interactive/pam for invalid user portal from 195.5.12.170 port 59904 ssh2 Jun 18 12:15:53 dual sshd[34551]: Invalid user portal from 201.24.215.217 Jun 18 12:15:53 dual sshd[34551]: error: PAM: authentication error for illegal user portal from 201.24.215.217 Jun 18 12:15:53 dual sshd[34551]: Failed keyboard-interactive/pam for invalid user portal from 201.24.215.217 port 61107 ssh2 Jun 18 12:18:20 dual sshd[34554]: Invalid user pos from 211.97.71.218 Jun 18 12:18:21 dual sshd[34554]: error: PAM: authentication error for illegal user pos from 211.97.71.218 Jun 18 12:18:21 dual sshd[34554]: Failed keyboard-interactive/pam for invalid user pos from 211.97.71.218 port 53424 ssh2 Jun 18 12:19:28 dual sshd[34557]: Invalid user pos from 200.171.22.80 Jun 18 12:19:28 dual sshd[34557]: error: PAM: authentication error for illegal user pos from 200.171.22.80 Jun 18 12:19:28 dual sshd[34557]: Failed keyboard-interactive/pam for invalid user pos from 200.171.22.80 port 56309 ssh2 Jun 18 12:21:12 dual sshd[34562]: Invalid user postfix from 165.98.133.98 Jun 18 12:21:12 dual sshd[34562]: error: PAM: authentication error for illegal user postfix from up.upoli.edu.ni Jun 18 12:21:12 dual sshd[34562]: Failed keyboard-interactive/pam
Re: system is under attack (what can I do more?)
Hello, 1, maybe the line with the rule is in a bad place in the conf, but even if it's working it's possible that it wont be triggered. As far as I can see there are 30 sec interval pauses between attacks from one host. Your rule is looking for connections in 30 sec ranges. 2,You should use a program that monitors the logs, and then passes the ips after 3 unsuccessful logins to the bruteforce table. See bruteforceblocker, but there are a bunch of other programs for this. Regards, MB. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
On Friday 18 June 2010 13:23:27 Dino Vliet wrote: Dear freebsd list, My server, which is a amd64 system running freebsd 8.0 is currently under attack from a botnet or something. Take a look at my /var/log/auth.log file: [...] I looked at this and especially the way they seem to try different usernames (not fully random though) is quite clever. The postgres user they tried, worried me at first but fortunately I realized that postgres wasn't running on that server. I have configured the AllowUser directive in sshd_config and it only contains 2 usernames which can log in from sshd remotely. Another line of defence is my pf firewall config which has the following in it: pass in proto tcp from any to any port ssh keep state (max-src-conn 3, max-src-conn-rate 2/30, overload bruteforce flush global) However, almost none of the ip-addresses above end up in that bruteforce table. Now my questions are: 1) why doesn't ip-address 190.38.59.236 for instance isn't triggered by my pf rule? Is that because this connection stays within the limits? Should I change that, but then again, considering the attack ratewhat values would be suitable? 2) are there other things I could do? These types of ssh probes are common nowadays. Unless you have a misconfigured server you don't need to worry about users like postgres, uucp, games, bin, operator, daemon etc. because they won't have a shell configured and so won't be allowed to login. The attacks have recently started working around rate limits by only trying from a single address every few minutes. Since you're already using the AllowUsers directive I suspect you're not really at much risk, but there are a few things you could do: 1. Don't allow password authentication. It might be a bit of a hassle to set up, but it's so much simpler once it's running to authenticate via ssh keys and it stops the bots in their tracks. 2. Block IP ranges that you won't login from, or, if you know of places you will login from, only allow connections from those IP addresses. 3. Move sshd to a different port. I don't like this workaround since although it stops the attacks it's nonstandard and means you have to remember to specify the port each time you connect. -- Bruce Cran ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
On 6/18/2010 8:23 AM, Dino Vliet wrote: 2) are there other things I could do? Brgds Dino Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Jerry ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
[...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Jerry ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. A real problem with this kind of attack is that even though brute force in nature it can also work like a DoS if the server is having to handle X amount of break-ins per second and also if multiple people are trying to hack the system at the same time, it can steal bandwidth too as let's face it not everyone has high powered enterprise grade MetroEthernet or OC12+ Trunks WAN connectivity. A lot of people are still on ADSL or even Dial-Up. Regards, Kaya ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
Hi, On 6/18/10 11:29 AM, Kaya Saman wrote: [...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. security/py-fail2ban Regards, -- Glen Barber ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
On 18/06/2010 18:48, Glen Barber wrote: Hi, On 6/18/10 11:29 AM, Kaya Saman wrote: [...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. security/py-fail2ban Regards, Ah.. Thanks!! :-) Regards, Kaya ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
On Fri, Jun 18, 2010 at 11:48:25AM -0400, Glen Barber wrote: Hi, On 6/18/10 11:29 AM, Kaya Saman wrote: [...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. security/py-fail2ban Doesn't FreeBSD's version of pf support the overload feature? This is how we typically manage ssh bruteforce attempts in OpenBSD/pf-land. -- Jason Dixon OmniTI Computer Consulting, Inc. jdi...@omniti.com 443.325.1357 x.241 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kaya Saman wrote: On 18/06/2010 18:48, Glen Barber wrote: Hi, On 6/18/10 11:29 AM, Kaya Saman wrote: [...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. security/py-fail2ban Regards, Ah.. Thanks!! :-) Regards, Kaya The make search target is useful for finding ports when you only have a keyword or name to go on: # cd /usr/ports/ # make search The search target requires a keyword parameter or name parameter, e.g.: make search key=somekeyword ormake search name=somekeyword # make name=fail2ban search Port: py26-fail2ban-0.8.4 Path: /usr/ports/security/py-fail2ban Info: scans log files and bans IP that makes too many password failures. Maint: t...@pc-tony.com B-deps: python26-2.6.5 R-deps: python26-2.6.5 WWW:http://www.fail2ban.org/wiki/index.php/Main_Page Hope that helps, Greg - -- Greg Larkin http://www.FreeBSD.org/ - The Power To Serve http://www.sourcehosting.net/ - Ready. Set. Code. http://twitter.com/sourcehosting/ - Follow me, follow you -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iD8DBQFMG5fT0sRouByUApARArz0AJ9cAxdoR9jAXdmliiEECguLYDrDbgCeJjCP /2niys4x+eXgooHg3uOf1gw= =GycM -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
Am 18.06.10 17:55, schrieb Jason Dixon: Doesn't FreeBSD's version of pf support the overload feature? This is how we typically manage ssh bruteforce attempts in OpenBSD/pf-land. and what you want to do if a user connects authorizied very often in lets say 10 seconds? If you work e.g. with subversion or other tunneled connection 10 connections in 5 seconds is not seldom. On pf-level you are not able to distinquish between successfull or denied connection or? Bye, Matthias -- Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the universe trying to produce bigger and better idiots. So far, the universe is winning. -- Rich Cook ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/06/2010 16:55:14, Jason Dixon wrote: Doesn't FreeBSD's version of pf support the overload feature? This is how we typically manage ssh bruteforce attempts in OpenBSD/pf-land. Sure it does. pf in FreeBSD 7.2+ or 8.0+ is basically the same as in OpenBSD 4.3. Overload works pretty well against bruteforcing, but some of the bruteforcers are getting wise to that sort of protection and not hitting an individual machine frequently enough to trigger the lock-out. Of course, this does mean that they are going slowly enough that they aren't eating your bandwidth or flooding your log files quite so much, but it is still annoying. Cheers, Matthew - -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matt...@infracaninophile.co.uk Kent, CT11 9PW -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkwbrFsACgkQ8Mjk52CukIyE7QCeNnNAI7Mr5qMPJJVnlS+qeetA eIAAn1+KUuNHveo6E2Pcenvb8UQrrvVG =WMxd -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
On 06/18/2010 06:59 PM, Greg Larkin wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kaya Saman wrote: On 18/06/2010 18:48, Glen Barber wrote: Hi, On 6/18/10 11:29 AM, Kaya Saman wrote: [...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. security/py-fail2ban Regards, Ah.. Thanks!! :-) Regards, Kaya The make search target is useful for finding ports when you only have a keyword or name to go on: # cd /usr/ports/ # make search The search target requires a keyword parameter or name parameter, e.g.: make search key=somekeyword ormake search name=somekeyword # make name=fail2ban search Port: py26-fail2ban-0.8.4 Path: /usr/ports/security/py-fail2ban Info: scans log files and bans IP that makes too many password failures. Maint: t...@pc-tony.com B-deps: python26-2.6.5 R-deps: python26-2.6.5 WWW:http://www.fail2ban.org/wiki/index.php/Main_Page Hope that helps, Greg - -- Greg Larkin http://www.FreeBSD.org/ - The Power To Serve http://www.sourcehosting.net/ - Ready. Set. Code. http://twitter.com/sourcehosting/ - Follow me, follow you -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iD8DBQFMG5fT0sRouByUApARArz0AJ9cAxdoR9jAXdmliiEECguLYDrDbgCeJjCP /2niys4x+eXgooHg3uOf1gw= =GycM -END PGP SIGNATURE- Thanks Greg!! That is useful and will probably save me a lot of digging in the future when attempting to get other things migrated over from Linux and/or Solaris etc :-) Regards, Kaya ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: can I do away with most things-java?
On Tue, Feb 23, 2010 at 11:56:18PM +0100, Torgeir Hoffmann wrote: Hi Gary, On 23 February 2010 23:28, Gary Kline kl...@thought.org wrote: Some years ago I thought that future java tools would have BSD ports that did not demand that we fetch them ourselves? Now, among the few things left to rebuild/update is diablo-jdk16. The makefile sez to fetch tzupdater-1_3_25-2009u.zip. Can somebody please give me the exact URL that points to this file? More to the point, will a java port like openjdk free me from any Sun ports? Right now, a test pkg_delete of d-jdk16 gave me: t...@tao:/var/db/pkg# pkg_delete diablo-jdk-1.6.0.07.02_7/ pkg_delete: package 'diablo-jdk-1.6.0.07.02_7' is required by these other packages and may not be deinstalled: apache-ant-1.7.1 freemind-0.8.1_1,1 swt-3.5.1 Anybody? I simply use the package for 7 with compatibility. I have no idea what is going on with FreeBSD Foundation and why no new packages for 8-RELEASE have been built. OpenJDK will partially free you. I tried it too, but I recall correctly you cannot build it without bootstrapping it with the Diablo the first time (subsequently, it can be built with the old version of OpenJDK on each update - please correct me if this is wrong). However, I never succeeded in making any browser plugin for openjdk work. If you have a problem with 'tzupdater', download the latest one from Sun's site and alter the checksums in /usr/ports/java/diablo-jdk16/distinfo with the correct checksums and size. Hope this helps, It does help to the extent that I successfully built openjdk7. What I need to know, if you or anyone else know is, can I now pkg_delete diablo-jdk16 --- and still have tools like swt and freemind work? Still cannot find the Latest tzupdater; it's like 90 links to find the bloody thing. Aaarrrgh. Regards, //T -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix http://jottings.thought.org http://transfinite.thought.org The 7.79a release of Jottings: http://jottings.thought.org/index.php ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: can I do away with most things-java?
On Wed, 24 Feb 2010, Gary Kline wrote: Still cannot find the Latest tzupdater; it's like 90 links to find the bloody thing. Aaarrrgh. cd /usr/ports/java/jdk16 make config turn off TZUPDATE -Warren Block * Rapid City, South Dakota USA ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: can I do away with most things-java?
On Wed, Feb 24, 2010 at 07:29:22PM -0700, Warren Block wrote: On Wed, 24 Feb 2010, Gary Kline wrote: Still cannot find the Latest tzupdater; it's like 90 links to find the bloody thing. Aaarrrgh. cd /usr/ports/java/jdk16 make config turn off TZUPDATE Thanks very much for the datapoint! It worked. TAhis must be the 7th time I have had to search for that bloody file When the build finished I did a make deinstall and a pkgdb -Fa to straighten out the dependencies ... so I think I'm free of using any of these devel kits. Whoever wrote openjdk7 gets a gold star. -Warren Block * Rapid City, South Dakota USA -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix http://jottings.thought.org http://transfinite.thought.org The 7.79a release of Jottings: http://jottings.thought.org/index.php ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
can I do away with most things-java?
Some years ago I thought that future java tools would have BSD ports that did not demand that we fetch them ourselves? Now, among the few things left to rebuild/update is diablo-jdk16. The makefile sez to fetch tzupdater-1_3_25-2009u.zip. Can somebody please give me the exact URL that points to this file? More to the point, will a java port like openjdk free me from any Sun ports? Right now, a test pkg_delete of d-jdk16 gave me: t...@tao:/var/db/pkg# pkg_delete diablo-jdk-1.6.0.07.02_7/ pkg_delete: package 'diablo-jdk-1.6.0.07.02_7' is required by these other packages and may not be deinstalled: apache-ant-1.7.1 freemind-0.8.1_1,1 swt-3.5.1 Anybody? -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix http://jottings.thought.org http://transfinite.thought.org The 7.79a release of Jottings: http://jottings.thought.org/index.php ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: can I do away with most things-java?
Hi Gary, On 23 February 2010 23:28, Gary Kline kl...@thought.org wrote: Some years ago I thought that future java tools would have BSD ports that did not demand that we fetch them ourselves? Now, among the few things left to rebuild/update is diablo-jdk16. The makefile sez to fetch tzupdater-1_3_25-2009u.zip. Can somebody please give me the exact URL that points to this file? More to the point, will a java port like openjdk free me from any Sun ports? Right now, a test pkg_delete of d-jdk16 gave me: t...@tao:/var/db/pkg# pkg_delete diablo-jdk-1.6.0.07.02_7/ pkg_delete: package 'diablo-jdk-1.6.0.07.02_7' is required by these other packages and may not be deinstalled: apache-ant-1.7.1 freemind-0.8.1_1,1 swt-3.5.1 Anybody? I simply use the package for 7 with compatibility. I have no idea what is going on with FreeBSD Foundation and why no new packages for 8-RELEASE have been built. OpenJDK will partially free you. I tried it too, but I recall correctly you cannot build it without bootstrapping it with the Diablo the first time (subsequently, it can be built with the old version of OpenJDK on each update - please correct me if this is wrong). However, I never succeeded in making any browser plugin for openjdk work. If you have a problem with 'tzupdater', download the latest one from Sun's site and alter the checksums in /usr/ports/java/diablo-jdk16/distinfo with the correct checksums and size. Hope this helps, Regards, //T ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Can I do this?
Lisa Casey wrote: What's the quickest easiest way to change the IP address on the new 5.3 box? Should I do it via /stand/sysinstall or should I change it in /etc/rc.conf and /etc/hosts (or do I need to do something with ifconfig - which I'm least comfortable with). Update rc.conf - I doubt you have any changes to hosts? - then run /etc/rc.d/netif restart - this also assures you that network will be correctly configured on next boot. Regarding your previous questions: Are you installing bind from ports? bind9 is in base on 5.x. It has slightly different config syntax. Cheers, Erik -- Ph: +34.666334818 web: www.locolomo.org S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt Subject ID: 9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72 Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can I do this?
Hi Erik (and everyone else who has responded to this thread), Thanks for all the help. I think switching the boxes will go pretty smoothly. Erik asked: Regarding your previous questions: Are you installing bind from ports? bind9 is in base on 5.x. It has slightly different config syntax. Yes, I installed bind from the ports. I noticed the ports had bind8, bind84 and bind9. I thought about going with the 9, but since I'm currently running bind 8.2.5, I decided I'm making enough changes now as it is so I went with the bind84 in ports (still an upgrade to what I had, albeit a minor one). Thanks again, Lisa Casey -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.0/103 - Release Date: 9/15/2005 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Can I do this?
Hi, I want to replace a computer running FreeBSD 3.2 with one running FreeBSD 5.3. The 3.2 computer is currently used as a web server and a DNS server. I have installed FreeBSD 5.3 and am currently adding the Apache2.50 port. Once I add the Apache web server and Bind, can I then just copy config files from the old system to the new one? With Apache: can I copy httpd.conf from the old system to the new then move my htdocs directory to the new system? For Bind, could I just copy named.conf from the old system to the new then copy my zone files over to the new system? Thanks, Lisa Casey -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.11.0/103 - Release Date: 9/15/2005 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can I do this?
Hi, I want to replace a computer running FreeBSD 3.2 with one running FreeBSD 5.3. The 3.2 computer is currently used as a web server and a DNS server. I have installed FreeBSD 5.3 and am currently adding the Apache2.50 port. Once I add the Apache web server and Bind, can I then just copy config files from the old system to the new one? With Apache: can I copy httpd.conf from the old system to the new then move my htdocs directory to the new system? For Bind, could I just copy named.conf from the old system to the new then copy my zone files over to the new system? The htdocs and zone files you can copy straight over; the config files for both Bind and Apache will need some fixing. -- Matt Emmerton ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can I do this?
On Sep 15, 2005, at 11:47 AM, Lisa Casey wrote: Hi, I want to replace a computer running FreeBSD 3.2 with one running FreeBSD 5.3. The 3.2 computer is currently used as a web server and a DNS server. I have installed FreeBSD 5.3 and am currently adding the Apache2.50 port. Once I add the Apache web server and Bind, can I then just copy config files from the old system to the new one? With Apache: can I copy httpd.conf from the old system to the new then move my htdocs directory to the new system? For Bind, could I just copy named.conf from the old system to the new then copy my zone files over to the new system? Thanks, Lisa Casey I would think so if the hardware specs meet the minimum amount at least. As for the config files... if the versions you have running aren't too old, copying the config files would be trivial. Copying directories/files is of course trivial to accomplish, always, when upgrading a system. -Garrett ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can I do this?
Lisa Casey wrote: Hi, I want to replace a computer running FreeBSD 3.2 with one running FreeBSD 5.3. The 3.2 computer is currently used as a web server and a DNS server. I have installed FreeBSD 5.3 and am currently adding the Apache2.50 port. Once I add the Apache web server and Bind, can I then just copy config files from the old system to the new one? Sure, but see below. With Apache: can I copy httpd.conf from the old system to the new then move my htdocs directory to the new system? Sure, but see below. For Bind, could I just copy named.conf from the old system to the new then copy my zone files over to the new system? Sure, but see below. ... You forgot to ask, will the new server and software work as expected once these files are copied to the new machine's HDD? The answer there is, probably, but it depends. If the name daemon and the httpd daemon are the same version, and the information in the config files (paths, for example) are valid, I don't know of any reason why it shouldn't work. But I wouldn't dare to issue any kind of ironclad guarantee. That's why we have sysadmins ... because things do get a little screwed up sometimes. Good idea to test first ;-) Kevin Kinsey ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can I do this?
Hi, I want to replace a computer running FreeBSD 3.2 with one running FreeBSD 5.3. The 3.2 computer is currently used as a web server and a DNS server. I have installed FreeBSD 5.3 and am currently adding the Apache2.50 port. Once I add the Apache web server and Bind, can I then just copy config files from the old system to the new one? With Apache: can I copy httpd.conf from the old system to the new then move my htdocs directory to the new system? For Bind, could I just copy named.conf from the old system to the new then copy my zone files over to the new system? For the most part, yes. But, you might have to tweak some things. Some system config files have moved.You will want to read up on things before trying this. Note that Apache will probably install in a different place now than that old version did and the startup for utilities is now all in /usr/local/etc/rc.d. In addition, Perl is no longer installed by default. You will have to do it from ports. As long as you are completely redoing the machines, why not go with the most recent release of FreeBSD? That would be 5.4. It is an improvement over 5.3. jerry Thanks, Lisa Casey ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can I do this?
Hi, I posted earlier today about setting up a FreeBSD 5.3 box to replace a 3.2 box. I've got the 5.3 set up on a different IP address (for now) and apache and bind seem to be working OK. All the web sites and DNS zone files are transferred over. Tomorrow I need to change the IP address of this box to the IP that the 3.2 box is currently on, remove the 3.2 box from the network and make sure the new one actually does OK in production. What's the quickest easiest way to change the IP address on the new 5.3 box? Should I do it via /stand/sysinstall or should I change it in /etc/rc.conf and /etc/hosts (or do I need to do something with ifconfig - which I'm least comfortable with). Thanks, Lisa Casey ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can I do this?
On Thu, Sep 15, 2005 at 10:05:12PM -0400, Lisa Casey wrote: What's the quickest easiest way to change the IP address on the new 5.3 box? Should I do it via /stand/sysinstall or should I change it in /etc/rc.conf and /etc/hosts (or do I need to do something with ifconfig - which I'm least comfortable with). Make the changes in rc.conf so that the box will be configured correctly then next time it is rebooted. To change the address without rebooting, you'll have to use ifconfig. Do ifconfig -a to get the device, e.g. xl0. Then do ifconfig xl0 192.168.2.1 changing 'xl0' to your device and '192.168.2.1' to your address. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can I do this?
Lisa Casey wrote: Hi, I posted earlier today about setting up a FreeBSD 5.3 box to replace a 3.2 box. I've got the 5.3 set up on a different IP address (for now) and apache and bind seem to be working OK. All the web sites and DNS zone files are transferred over. Tomorrow I need to change the IP address of this box to the IP that the 3.2 box is currently on, remove the 3.2 box from the network and make sure the new one actually does OK in production. Glad to hear it. What's the quickest easiest way to change the IP address on the new 5.3 box? Should I do it via /stand/sysinstall or should I change it in /etc/rc.conf and /etc/hosts (or do I need to do something with ifconfig - which I'm least comfortable with). Thanks, Lisa Casey Let's say, for the sake of argument, that the boss is a cheapskate and we have a RealTek 8139 NIC (just one). As root, of course: $ifconfig rl0 down --- the interface is off. $ifconfig rl0 1.2.3.4 netmask 255.255.255.0 --- the interface is back up at the address 1.2.3.4. You'll want to use your assigned IP and netmask (your upstream should know what this is if you don't --- but of course, it's the same as the old box, right?) Also enter it in /etc/rc.conf in this format: ifconfig_rl0=1.2.3.4 netmask 255.255.255.0 You're good as gold at the next reboot. HTH, Kevin Kinsey ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Can I do this?
Bob Hall [EMAIL PROTECTED] writes: Make the changes in rc.conf so that the box will be configured correctly then next time it is rebooted. To change the address without rebooting, you'll have to use ifconfig. Do For some of the variables in rc.conf, you can reactivate changes using scripts in /etc/rc.d, but I'm sorry to say I don't know if this is the case here. Maybe: /etc/rc.d/netif ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Help: I think I've been hacked! what can I do??
Hi, Last night before this morning, I was browsing fine with kde's konqueror. I don't remember doing anything about my system rather than dialing through ppp. This morning, when I ppp to dial into internet... my external modem established a successful connection(because I can see the LED's are lightened up the way I usually see it). But when I launch the konqueror and typed something in the address bar and hit enter, it says Unknown Host Next, I tried browsing through Links in my shell but it still says Unknown Host. I even rebooted my machine and tried dialing again.. but still says unknown host whichever browser I use. I've tried to ping 127.0.0.1 and it replied. I've tried to ping http://www.google.com but it says there was an error. I've type ifconfig in the shell and it returned something like 198.0.2...198.3.4...(just an example) at the bottom which indicates that I have a successful connection with my isp and they have provided me with a public ip address. I'm sending this email to you from Windows and I'm pretty sure that my external modem is working fine. Question: Do you have any idea what could have happened with my pc? I honestly think that I've been hacked and I am being denied of service. Now, I only have one thing in my mind... to back up my files and reformat my freebsd partition. If you know something better than formatting my pc, please tell me where should I begin... One last thing... Other than those of recovered vi sessions, I can read some unusual mails about system occurances etc.. when I logged in as a root(but I dont know what they really mean) Looking forward to your kindness, -jay :=( __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Help: I think I've been hacked! what can I do??
Mark Jayson Alvarez wrote: Hi, Last night before this morning, I was browsing fine with kde's konqueror. I don't remember doing anything about my system rather than dialing through ppp. This morning, when I ppp to dial into internet... my external modem established a successful connection(because I can see the LED's are lightened up the way I usually see it). But when I launch the konqueror and typed something in the address bar and hit enter, it says Unknown Host Next, I tried browsing through Links in my shell but it still says Unknown Host. I even rebooted my machine and tried dialing again.. but still says unknown host whichever browser I use. I've tried to ping 127.0.0.1 and it replied. I've tried to ping http://www.google.com but it says there was an error. Does the error looks like that: ping: cannot resolve www.google.de: Unknown host I've type ifconfig in the shell and it returned something like 198.0.2...198.3.4...(just an example) at the bottom which indicates that I have a successful connection with my isp and they have provided me with a public ip address. I'm sending this email to you from Windows and I'm pretty sure that my external modem is working fine. Question: Do you have any idea what could have happened with my pc? I honestly think that I've been hacked and I am being denied of service. Now, I only have one thing in my mind... to back up my files and reformat my freebsd partition. It could be a DNS issue. Can you try to ping 69.57.142.26, 66.35.250.150, 216.239.37.99, 216.239.57.99 or 216.239.39.99? If you get a reply, try to enter them into your browser. If that works, try to get the DNS server address under windows and enter it in /etc/resolv.conf If you know something better than formatting my pc, please tell me where should I begin... One last thing... Other than those of recovered vi sessions, I can read some unusual mails about system occurances etc.. when I logged in as a root(but I dont know what they really mean) Looking forward to your kindness, -jay :=( Hendrik ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Help: I think I've been hacked! what can I do??
Out of the ether, Mark Jayson Alvarez spewed forth the following bitstream: But when I launch the konqueror and typed something in the address bar and hit enter, it says Unknown Host Google, CNN, and a bunch of Akamized services were (are?) having problems this morning. Please try your request again later. 8-) AlanC -- We have shared the incommunicable experience of war. We felt, we still feel, the passion of life to its top. In our youths, our hearts were touched by fire. -- Oliver Wendall Holmes pgpV5eyYmdCIG.pgp Description: PGP signature
How can I do this on DHCP server ?
Hi list, I've set up a DHCP server but I'd like to know which address (from address pool) hasn't assigned to any machine. Is there command line to accomplish this. PS. I use ISC-DHCP v.3 installed from ports. TIA, Pote Yahoo! Messenger - Communicate instantly...Ping your friends today! Download Messenger Now http://uk.messenger.yahoo.com/download/index.html ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Alcatel Speedtouch 330 using PPPOE, how can I do it on FreeBSD 4.9?
Hi, Is there anyone who has run with success the Modem Alcatel Speedtouch 330 (USB) using the PPPOE, for FreeBSD 4.9? Where can I find Alcatel Speedtouch 330 drivers or (ports) for FreeBSD 4.9 using the PPPOE? I'm trying to connect this kind of Modem in my system FreeBSD 4.9, but the only drivers I've found were for pppoa2 and pppoa3, and my ADSL Provider uses the pppoe. Please help me on this matter! Thanks CG ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Alcatel Speedtouch 330 using PPPOE, how can I do it on FreeBSD 4.9?
On Thu, Feb 19, 2004 at 12:01:29PM -, Godinho, Carla wrote: Hi, Is there anyone who has run with success the Modem Alcatel Speedtouch 330 (USB) using the PPPOE, for FreeBSD 4.9? Where can I find Alcatel Speedtouch 330 drivers or (ports) for FreeBSD 4.9 using the PPPOE? I'm trying to connect this kind of Modem in my system FreeBSD 4.9, but the only drivers I've found were for pppoa2 and pppoa3, and my ADSL Provider uses the pppoe. I'm not sure if the 330 is supported, but have you tried http://speedtouch.sourceforge.net/ ? Not sure if that's any good. -- Wayne Pascoe God gave you the power - Preacher on the Simpsons Hmm. You'd think he'd wanna... limit my power - Bart ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Alcatel Speedtouch 330 using PPPOE, how can I do it on FreeBSD 4.9?
On Thu, Feb 19, 2004 at 12:01:29PM -, Godinho, Carla wrote: Hi, Is there anyone who has run with success the Modem Alcatel Speedtouch 330 (USB) using the PPPOE, for FreeBSD 4.9? Where can I find Alcatel Speedtouch 330 drivers or (ports) for FreeBSD 4.9 using the PPPOE? I'm trying to connect this kind of Modem in my system FreeBSD 4.9, but the only drivers I've found were for pppoa2 and pppoa3, and my ADSL Provider uses the pppoe. I think the answer to your question is to look at Chapter 18 of the Handbook. Your local copy can be found in /usr/share/doc/. A summary of that chapter indicates that all you need to do is set up a ppp.conf and the necessary netgraph modules will be loaded. You can find some relevant examples in: /usr/share/examples -- Someone dial 911. My bling-bling was stolen and smuggled into Syria. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Alcatel Speedtouch 330 using PPPOE, how can I do it on FreeBSD 4.9?
On Thu, Feb 19, 2004 at 12:01:29PM -, Godinho, Carla wrote: Hi, Is there anyone who has run with success the Modem Alcatel Speedtouch 330 (USB) using the PPPOE, for FreeBSD 4.9? Where can I find Alcatel Speedtouch 330 drivers or (ports) for FreeBSD 4.9 using the PPPOE? I'm trying to connect this kind of Modem in my system FreeBSD 4.9, but the only drivers I've found were for pppoa2 and pppoa3, and my ADSL Provider uses the pppoe. Please help me on this matter! Thanks CG Dear CG, If I where you I would google for the option to tweak your modem. I did this with my Alcatel Speedtouch ADSL modum and now have a modem that knows how to connect to my ISP. I find this ideal. There's an option to use a natd router or you can just route packages though you Gateway. I did the later, but this is a bit difficult (if you don't know how). By the way I have no experiance with PPPOE and use PPTP instead. Alex ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Alcatel Speedtouch 330 using PPPOE, how can I do it on FreeBSD 4.9?
On Thu, Feb 19, 2004 at 03:53:13PM +, Wayne Pascoe wrote: On Thu, Feb 19, 2004 at 12:01:29PM -, Godinho, Carla wrote: Hi, Is there anyone who has run with success the Modem Alcatel Speedtouch 330 (USB) using the PPPOE, for FreeBSD 4.9? Where can I find Alcatel Speedtouch 330 drivers or (ports) for FreeBSD 4.9 using the PPPOE? I'm trying to connect this kind of Modem in my system FreeBSD 4.9, but the only drivers I've found were for pppoa2 and pppoa3, and my ADSL Provider uses the pppoe. I'm not sure if the 330 is supported, but have you tried http://speedtouch.sourceforge.net/ ? Not sure if that's any good. Is it necessary to use this type of driver because of the USB to ethernet? Does it perform some sort of translation, USB -- ethernet? Looking at the readme and faq, I see that a person will still have to set up ppp.conf and other generic stuff, like usb, resolv.conf, and ifconfig in /etc/rc.conf, for instance. -- Someone dial 911. My bling-bling was stolen and smuggled into Syria. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Alcatel Speedtouch 330 using PPPOE, how can I do it on FreeBSD 4.9?
]: tun0: Phase: bundle: Dead Feb 18 09:54:39 Nereus_teste ppp[2742]: tun0: Phase: PPP Terminated (normal). Feb 18 09:54:39 Nereus_teste ppp[2742]: tun0: Chat: Parent notified of failure Feb 18 09:54:39 Nereus_teste ppp[2741]: tun0: Phase: Parent: Child failed (errdead) P.S: I have to use the FreeBSD 4.9, the stable version, so I cannot upgrade or downgrade the SO system. Thanks CG -Original Message- From: Wayne Pascoe [mailto:[EMAIL PROTECTED] On Behalf Of Wayne Pascoe Sent: quinta-feira, 19 de Fevereiro de 2004 15:53 To: Godinho, Carla Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: Alcatel Speedtouch 330 using PPPOE, how can I do it on FreeBSD 4.9? On Thu, Feb 19, 2004 at 12:01:29PM -, Godinho, Carla wrote: Hi, Is there anyone who has run with success the Modem Alcatel Speedtouch 330 (USB) using the PPPOE, for FreeBSD 4.9? Where can I find Alcatel Speedtouch 330 drivers or (ports) for FreeBSD 4.9 using the PPPOE? I'm trying to connect this kind of Modem in my system FreeBSD 4.9, but the only drivers I've found were for pppoa2 and pppoa3, and my ADSL Provider uses the pppoe. I'm not sure if the 330 is supported, but have you tried http://speedtouch.sourceforge.net/ ? Not sure if that's any good. -- Wayne Pascoe God gave you the power - Preacher on the Simpsons Hmm. You'd think he'd wanna... limit my power - Bart ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Alcatel Speedtouch 330 using PPPOE, how can I do it on FreeBSD 4.9?
On Thu, Feb 19, 2004 at 07:34:37PM -, Godinho, Carla wrote: Yes did tried that link when installing de modem, but I get a protocol error when connecting to ADSL. See the details bellow: I'm having problems when trying to use the Modem Alcatel SpeedTouch 330 with the FreeBSD 4.9. Everytime I tried to start the ppp I get the following error: ppp[2742]: tun0: Phase: Unknown protocol 0x7075 (unrecognised protocol) I've done some research in the Internet and I'm aware that it is tuff to use this kind of Modem with FreeBSD 4.9. http://lists.freebsd.org/pipermail/freebsd-questions/2003-July/012224.html points toward pppoa3...while saying it may be as buggy as pppoa2. -- Someone dial 911. My bling-bling was stolen and smuggled into Syria. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Whan can I do if OS does not boot after makeworld
Hi Everybody , I heared in list and some sites that some times after makeworld system can't boot . I wonder What FreeBSD Admins make to solve this problem . Does possbile to prevent this problem ?! Any way ?! Vahric ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Whan can I do if OS does not boot after makeworld
On Tue, Jan 13, 2004 at 01:34:25PM +0200, Vahric MUHTARYAN typed: Hi Everybody , I heared in list and some sites that some times after makeworld system can't boot . I wonder What FreeBSD Admins make to solve this problem . Does possbile to prevent this problem ?! Any way ?! What exactly have you done to makeworld and what do you mean by system can't boot (error messages) ? Vahric ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Whan can I do if OS does not boot after makeworld
Hi , I did not make something now and I don't have a problem with makeworld. But I red something in FreeBSD from scratch and I saw that some problem can occur and after makeworld process OS is not openinig Vahric -Original Message- From: Ruben de Groot [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 13, 2004 2:24 PM To: Vahric MUHTARYAN Cc: [EMAIL PROTECTED] Subject: Re: Whan can I do if OS does not boot after makeworld On Tue, Jan 13, 2004 at 01:34:25PM +0200, Vahric MUHTARYAN typed: Hi Everybody , I heared in list and some sites that some times after makeworld system can't boot . I wonder What FreeBSD Admins make to solve this problem . Does possbile to prevent this problem ?! Any way ?! What exactly have you done to makeworld and what do you mean by system can't boot (error messages) ? Vahric ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Whan can I do if OS does not boot after makeworld
On Tuesday 13 January 2004 07:02 am, Vahric MUHTARYAN wrote: Hi , I did not make something now and I don't have a problem with makeworld. But I red something in FreeBSD from scratch and I saw that some problem can occur and after makeworld process OS is not openinig Vahric This is not going to sound very helpful; but if you're trying to be proactive...read the documentation thoroughly and follow the steps carefully. Don't cut corners or make mistakes. Unless you can predict the error, it's hard to predict the solution. Best regards, Andrew Gould ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Whan can I do if OS does not boot after makeworld
Did you ever have any problem about makeworld process ?! I afraid of one day will come and I can't boot my FreeBSD Vahric -Original Message- From: Andrew L. Gould [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 13, 2004 3:31 PM To: Vahric MUHTARYAN; 'Ruben de Groot' Cc: [EMAIL PROTECTED] Subject: Re: Whan can I do if OS does not boot after makeworld On Tuesday 13 January 2004 07:02 am, Vahric MUHTARYAN wrote: Hi , I did not make something now and I don't have a problem with makeworld. But I red something in FreeBSD from scratch and I saw that some problem can occur and after makeworld process OS is not openinig Vahric This is not going to sound very helpful; but if you're trying to be proactive...read the documentation thoroughly and follow the steps carefully. Don't cut corners or make mistakes. Unless you can predict the error, it's hard to predict the solution. Best regards, Andrew Gould ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Whan can I do if OS does not boot after makeworld
On Tuesday 13 January 2004 09:31 am, Vahric MUHTARYAN wrote: Did you ever have any problem about makeworld process ?! I afraid of one day will come and I can't boot my FreeBSD Vahric For me, the trickiest part was understanding and executing 'mergemaster -i' after 'make world'. Once I got a feel for it, updating my system has been a breeze. Best of luck, Andrew Gould ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Whan can I do if OS does not boot after makeworld
[EMAIL PROTECTED] wrote: Did you ever have any problem about makeworld process ?! I afraid of one day will come and I can't boot my FreeBSD Vahric This is why the recommended update process is (in part): # make buildworld # make buildkernel # make installkernel Followed by a reboot into single-user mode before doing the installworld. If the new kernel doesn't boot, you've still got the previous one in /kernel.old, so you can just boot from that one and carry on without having trashed any part of your system. If installworld somehow manages to make your system unbootable, you have a few options: - boot single-user and try to fix things with the tools in /stand (or /rescue on 5.x) - boot CD #2 and try to fix things with the tools in the live filesystem - restore from backups (you do have backups, right?) Personally, I've made plenty of unbootable kernels, and a few worlds that behaved strangely in places, but never an unusable system (fingers crossed :-) Scott ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Whan can I do if OS does not boot after makeworld
On Tuesday 13 January 2004 07:31 am, Vahric MUHTARYAN wrote: Did you ever have any problem about makeworld process ?! I afraid of one day will come and I can't boot my FreeBSD Go back and read the archive on problems updating from 5.1 to 5.2. The statfs problem would render your system unbootable if you did an installworld before you booted to an updated and installed kernel. Kent Vahric -Original Message- From: Andrew L. Gould [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 13, 2004 3:31 PM To: Vahric MUHTARYAN; 'Ruben de Groot' Cc: [EMAIL PROTECTED] Subject: Re: Whan can I do if OS does not boot after makeworld On Tuesday 13 January 2004 07:02 am, Vahric MUHTARYAN wrote: Hi , I did not make something now and I don't have a problem with makeworld. But I red something in FreeBSD from scratch and I saw that some problem can occur and after makeworld process OS is not openinig Vahric This is not going to sound very helpful; but if you're trying to be proactive...read the documentation thoroughly and follow the steps carefully. Don't cut corners or make mistakes. Unless you can predict the error, it's hard to predict the solution. Best regards, Andrew Gould ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- Kent Stewart Richland, WA http://users.owt.com/kstewart/index.html ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Whan can I do if OS does not boot after makeworld
On Tue, 2004-01-13 at 07:55, Scott Mitchell wrote: [EMAIL PROTECTED] wrote: Did you ever have any problem about makeworld process ?! I afraid of one day will come and I can't boot my FreeBSD Vahric This is why the recommended update process is (in part): # make buildworld # make buildkernel # make installkernel Followed by a reboot into single-user mode before doing the installworld. This is the place that I have been bitten. In 5.x (I don't know about 4.x off the top of my head) you have to type shutdown -r now and NOT shutdown now The later keeps using your old kernel which is what you are trying not to do. It was an new system in a huge mess so I just reinstalled instead of trying to fix the problems. Micheas If the new kernel doesn't boot, you've still got the previous one in /kernel.old, so you can just boot from that one and carry on without having trashed any part of your system. If installworld somehow manages to make your system unbootable, you have a few options: - boot single-user and try to fix things with the tools in /stand (or /rescue on 5.x) - boot CD #2 and try to fix things with the tools in the live filesystem - restore from backups (you do have backups, right?) Personally, I've made plenty of unbootable kernels, and a few worlds that behaved strangely in places, but never an unusable system (fingers crossed :-) Scott ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- Micheas Herman email: [EMAIL PROTECTED] Free Print Shop web: http://www.FreePrintShop.org phone: (415)648-3222fax: (415)648-4466 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Can I do that?
I acquired a Buslink 1394 Firewire 80GB hard drive, in which I would like to install FreeBSD, to try it out. So far, except for Mandrake 9.1, none of the other Linux distros have been able to find and install itself on the Firewire bus. So now, this would give me /dev/hda for WindowsXP Pro, /dev/hdb for Mandrake 9.1, and /dev/sda for (maybe?) FreeBSD. I am (was) reserving this extra drive to try different distros. My computer has 700+MB of ram, and it is a 3.06GHz hyperthreading chip. I would be using Mandrake's Lilo to boot into FreeBSD. Can your distro find and use, and install itself into a Firewire bus? Thanks ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
