Re: question on porting

On 10/06/2020 15:51, Donald Wilde wrote: Okay, it didn't work, but discovered INDEX-12 in /usr/ports, so ' grep gcc INDEX-12 | wc -l ' worked. Such an interesting file, INDEX-12. More research needed. Is it not INDEX-13 because I did ' make index' instead of ' make fetchindex ' ? You should

Re: CFT: FreeBSD Package Base

On 29/04/2019 11:52, Christoph Moench-Tegeder wrote: This situation should be improved. Given that etcupdate is in all supported releases, we can even update UPDATING and the Handbook. So, does anyone have a pointer to the official procedure? Basically run: # etcupdate towards the end of

Re: Pkg dependency strangeness

On 27/12/2018 01:45, Walter Parker wrote: > I've just upgraded an existing FreeBSD 11.1 system with php56 to FreeBSD > 11.2 and php72. > > In order to do this, I used a mix of ports and packages to delete php56 and > all of the php56 extensions and replace them with php72 and php72 > extensions.

Re: Upgrade to FreeBSD 12.0 breaks SSHD

On 21/12/2018 17:10, Andrea Brancatelli wrote: > Hello. > > Just a quick head up Today we update a FreeBSD 11.2 to 12.0 machine > and our SSHD got broken. > > The problem is with HMAC line in the config file, specifically the > hmac-ripemd160 value. It was legit in 11.2 (and I suspect >

Re: 10.4 release - is the binary update corrupt?

On 08/10/2017 11:27, Dr. Nikolaus Klepp wrote: > Hi! > > My notes suggest for this case: > > pkg clean # cleans /var/cache/pkg/ > rm -rf /var/cache/pkg/* # just remove it all > pkg update -f # forces update of repository catalog > rm

Re: ABI changes within stable branch

On 19/09/2017 09:32, Aristedes Maniatis wrote: > On 19/9/17 6:15PM, Kurt Jaeger wrote: >> Hi! >> >>> Now that we are on a faster upgrade policy for minor branches, it is >>> expected that we'll upgrade from 11.0 to 11.1 to 11.2 much faster than in >>> the old days. I can cope with that, but it

Re: update /usr/ports to same version as pkg upgrade?

On 2017/02/01 11:19, Ronald Klop wrote: > Is it possible to update the /usr/ports tree to the same version as is > used by the default pkg repositories? > I use some ports which are not distributed as pkgs. When I 'portsnap > auto' the ports tree gets new updates which are not in the pkgs yet and

Re: pkg upgrade problem with Perl 5.24

On 2017/01/13 16:31, Chris H wrote: > As a general rule: > install from pkg(8) remove with pkg(8) > install from ports(7), remove with ports(7) > Sorry -- this is completely bogus. You can freely mix and match either way. Just make sure that the package names match up. In fact the ports

Re: pkg upgrade problem with Perl 5.24

On 2017/01/13 15:43, Holger Kipp wrote: > so currently via pkg upgrade I got perl5-5.24.1.r4_1, which perl itself > confirms: ^ > ===> Installing for perl5.24-5.24.1.r5_1 Notice the difference in package names. One is

Re: Dying jail

On 10/26/16 09:09, Eugene Grosbein wrote: > Recently I've upgraded one of my server running 9.3-STABLE with jail > containing 4.11-STABLE system. > The host was source-upgraded upto 10.3-STABLE first and next to 11.0-STABLE > and jail configuration migrated to /etc/jail.conf. The jail kept

Re: zfs, a directory that used to hold lot of files and listing pause

On 2016/10/21 13:47, Pete French wrote: >> In bad case metadata of every file will be placed in random place of disk. >> ls need access to metadata of every file before start of output listing. > > Umm, are we not talkong abut an issue where the directoyr no longer contains > any files. It used

Re: 11.0 Install Question

On 2016/10/19 09:55, Matt Smith wrote: > On Oct 19 10:38, Miroslav Lachman wrote: >> Jonathan Haack wrote on 2016/10/19 10:09: >>> Awe geez ... pkg won't work ... says "shared object "libssl.so.7" not >>> found, required by "pkg" >> >> Do not panic, just run pkg-static to upgrade pkg it-self >> >>

Re: Failing to upgrade from 10.1-RELEASE to 10.3-STABLE

On 09/10/2016 23:56, George Mitchell wrote: > On 10/09/16 15:57, Kurt Jaeger wrote: >> Hi! >> >>> What am I doing wrong? (I get the same failure attempting to upgrade >>> to 10.1-RELEASE and 10.2-RELEASE.) -- George >> >> Ah, one thing: >> >> Please do update to the latest

Re: zvol clone diffs

On 22/09/2016 13:56, Eugene M. Zheganin wrote: > Is there any way to figure out what these writes are ? Because I cannot > propose any simple enough method. Given you're using volumes for datasets where ZFS knows nothing about the contained filesystem structure, about the only way to proceed is

Re: lots of security advisories rehashed

On 08/12/16 12:23, Kurt Jaeger wrote: > Hi! > >> I subscribe to the RSS feed of FreeBSD security advisories >> (http://vuxml.freebsd.org/freebsd/rss.xml). Today, it told me that there >> were forty-something advisories. I went to the VuXML site and saw that a >> stack of old entries have been

Re: freebsd-update from 9.3 to 11.0

On 08/07/16 06:55, Doug Hardie wrote: > Is there any information available on when freebsd-update might be > corrected to upgrade some 9.3 systems to 11.0? I have tried all the > beta's and none of them will do the upgrade even with the EN applied. > Bug 211398 has the details. According to the

Re: pkg(8) still not part of stable/11 (yet)???

On 28/07/2016 18:52, Harry Schmalzbauer wrote: > Most of the machines I'm responsible for don't have internet access – > and won't ever have. > Currently, I don't have a 11-machine for building pkg(8) handy. > How Do I get pkg(8) the official way (for machines without internet access)? > Are there

Re: FreeBSD 11.0-BETA2 Now Available

On 25/07/2016 07:36, Marko Cupać wrote: > On Sun, 24 Jul 2016 19:25:23 + > Glen Barber wrote: > >> Note to freebsd-update(8) consumers: An EN for earlier FreeBSD >> releases is required before upgrading to 11.0-BETA2 will work >> properly, so it is advised to wait until the

Re: new certificate for svn.freebsd.org?

On 18/06/2016 05:40, Ben Steel via freebsd-stable wrote: > It's not just you, Wolfgang. See bug 210332 at bugs.freebsd.org. > The new certificate is in place on the 4 mirrors that I found (US East, > US West, UK, Russia) but didn't verify cleanly and wasn't in the > documentation. > > For me, the

Re: new certificate for svn.freebsd.org?

On 17/06/2016 00:21, Wolfgang Zenker wrote: > I'm getting presented a new SSL certificate for svn.freebsd.org. > Like the previous one, it can not be verified by svnlite on any > of my 10-STABLE machines, though ca_root_nss is installed. But > the previous certificate at least matched the

Re: Problems with unbound

On 03/15/16 11:28, Andrea Brancatelli wrote: > Hello everybody, > > we're suddenly having problems with unbound on almost all of our servers > and I cannot really understand why. > > To make a long story short, we use this forward.conf: > > root@dbengine-ent-rm-01:/var/unbound # cat

Re: 10.2: ntp update breaks DCF77 clock

On 15/08/2015 16:46, Christian Weisgerber wrote: The ntp code is not very transparent, but I think the root cause are the ntp/config.h changes that came with the 4.2.8p3 update. A number of previously disabled obscure clock drivers were enabled, but crucially CLOCK_RAWDCF was disabled, and

Re: (once again) freebsd-update cron and man whatis

On 08/11/15 08:21, Marko Cupać wrote: - Next morning I get notification from freebsd-cron for the same update I installed yesterday, but only for /usr/share/man/whatis. (not ok) Did you by any chance happend to run the weekly/320.makewhatis periodic script that night? It is enabled by

Re: 10.2-Beta i386..what's wrong..?

On 07/24/15 07:58, Holm Tiffe wrote: ..interrestingly people here seem to focus my problem to ZFS.. but my problem was to build an raid over 4 disks on my old i386 machine and that failed with 2 different approaches. I'm accepting that ZFS is a too big thing for the i386 architecture and I

Re: 10.2-Beta i386..what's wrong..?

On 07/24/15 07:58, Holm Tiffe wrote: ..interrestingly people here seem to focus my problem to ZFS.. but my problem was to build an raid over 4 disks on my old i386 machine and that failed with 2 different approaches. I'm accepting that ZFS is a too big thing for the i386 architecture and I

Re: rather old regression: unability to search for reboot times

On 09/07/2015 23:35, Dmitry Morozovsky wrote: after transition to utx.log (actually, long enough ago, but quick googling does not show reports), there are no simple way to query 'last' for crash/reboot times: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=168844 Cheers,

Re: [FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-15:08.sendmail

On 06/18/15 13:54, Royce Williams wrote: Did you (re)generate your dh.params file as noted in the Workaround section? There isn't a default dh.param file. The suggested work-around in the EN is to generate one. On my systems, I had to do this to support the actual patch (not to perform the

Re: Sendmail problem after upgrade to r284296

On 14/06/2015 10:57, Frank Seltzer wrote: Because of a recent alert I updated both of my FreeBSD computers (both running 10.1-STABLE and built from /etc/src) to r284296 and am having a problem with sendmail. Sendmail is giving me the following error every 30 minutes: Jun 14 09:50:04 Ace

Re: Please help with cleaning up an accident on 9.0 release

On 05/19/15 16:15, Ulrich Drolshagen wrote: I brought myself in real trouble with a really important 9.0 release system (9.0-RELEASE-p4). It's amd64. By accident I deleted the following binaries from /bin: cat, chflags, chio, chmod and cp Does anybody still have an old iso from which he can

Re: zfs, cam sticking on failed disk

On 05/07/15 14:32, Steven Hartland wrote: On 07/05/2015 14:29, Ronald Klop wrote: On Thu, 07 May 2015 15:23:58 +0200, Steven Hartland kill...@multiplay.co.uk wrote: On 07/05/2015 14:10, Slawa Olhovchenkov wrote: On Thu, May 07, 2015 at 02:05:11PM +0100, Steven Hartland wrote: On

Re: pkg problem

On 12/10/2013 17:36, Zoran Kolic wrote: I binary upgraded to 9.2 and installed pkg, made pkg2ng. Finally I did pkg update and pkg upgrade. Now, I have old binaries, instead of new ones. I tried to issue freebsd-update install the last time and it refused to do anything, since there is nothing

Re: 9.2-PRE: switch off that stupid Nakatomi Socrates

On 28/09/2013 10:44, Boris Samorodov wrote: 28.09.2013 02:06, David Demelier пишет: On 21.09.2013 12:40, Matthew Seaman wrote: On 21/09/2013 11:31, O. Hartmann wrote: I'd like to switch off this silly Nakatomi Socrates message which reminds me on Linux and their childish naming schemes

Re: 9.2-PRE: switch off that stupid Nakatomi Socrates

On 28/09/2013 11:32, Phil Regnauld wrote: To the offended poster: read the last line of tunefs(8) - there's probably many more places you could use serious time looking for deviations from corporate correctnes. There used to be a function in the shutdown utility called

Re: 9.2-PRE: switch off that stupid Nakatomi Socrates

On 21/09/2013 11:31, O. Hartmann wrote: I'd like to switch off this silly Nakatomi Socrates message which reminds me on Linux and their childish naming schemes. It is only cosmetics, but it bothers me whenever I switch on the laptop. I guess there is a switch already prsent to have in the

Re: 9.2 or 10.0 and txz packages

On 19/09/2013 17:04, Zoran Kolic wrote: Is there a plan to have repo for files, used by pkgng on upcomming releases? Yes, and the implementation of that plan is advancing well. Hardware is up and running, and the build system is pretty much ready to go. Most of the action at the moment is

Re: FeeBSD 9.2-RC1 sendmail alisases.db missing

On Mon, Aug 12, 2013 at 02:29:01PM +0200, Florent Peterschmitt wrote: Le 12/08/2013 14:27, CeDeROM a écrit : Hello :-) On a fresh install of FreeBSD 9.2-RC1 I get this warning: sm-mta[]: SYSERR(root): hash map Alias0: missing map file /etc/mail/aliases.db: No such file or directory.

Re: ZFS in jails 9.2-RC1 permission denied

On 08/08/2013 13:05, Mark Felder wrote: On Thu, Aug 8, 2013, at 6:59, Trond Endrestøl wrote: I'm just guessing, but I doubt a jail would be able to create new ZFS filesystems outside its own structure, if at all able. A jail would however be allowed to (un)mount already existing filesystems

Re: FreeBSD-Update + Sendmail

On 07/08/2013 15:19, Panagiotis Christias wrote: On Tue, Aug 06, 2013 at 10:43:49PM +0100, Matthew Seaman wrote: On 06/08/2013 22:28, Thomas Laus wrote: I like the 'sendmail from ports' suggestion a little better. Going this route, I only need to make configuration changes to /etc/mail

Re: FreeBSD-Update + Sendmail

On 06/08/2013 14:45, Thomas Laus wrote: I have been updating my FreeBSD systems for many years by updating and building from source. For the FreeBSD 9.2 cycle, I decided to use freebsd-update for binary update instead. I use Sendmail + Cyrus-SASL and the freebsd-update process only

Re: FreeBSD-Update + Sendmail

On 06/08/2013 22:28, Thomas Laus wrote: I like the 'sendmail from ports' suggestion a little better. Going this route, I only need to make configuration changes to /etc/mail/mailer.conf once. All subsequent freebsd-update operations won't require rebuilding sendmail and it's tools. Any

Re: Strange sendmail behaviour after upgrade to 9.1-BETA2

On 01/08/2013 08:41, Pavel Timofeev wrote: Or I did it wrong? Yes. This: ip6addrctl_enable=NO You need to turn the ip6addrctl function *on* before you can set the policy to prefer ipv4. Cheers, Matthew ___

Re: Strange sendmail behaviour after upgrade to 9.1-BETA2

On 01/08/2013 09:41, Pavel Timofeev wrote: to Matthew Seaman No luck root@test:/etc/mail # grep ip /etc/rc.conf #ipv6_activate_all_interfaces=NO #ipv6_network_interfaces=none ip6addrctl_enable=YES ip6addrctl_policy=ipv4_prefer root@test:/etc/mail # ip6addrctl Prefix

Re: Strange sendmail behaviour after upgrade to 9.1-BETA2

On 31/07/2013 13:24, Pavel Timofeev wrote: I wanted to say that sendmail asks only (IPv6) record of mx server, but not A (IPv4). Any ideas? ip6addrctl(8) perhaps? Also check /etc/rc.d/ip6addrctl and the variables used by that script in /etc/defaults/rc.conf which you can use to set

Re: Command line not responding

On 17/05/2013 18:56, Michael Gass wrote: Running 9.0-Stable on an i386. Whenever I type a command at the prompt I get the output /usr/local/lib/libintl.so.9: Undefined symbol _ThreadRuneLocale and nothing else - the command will not run. Just the above output. Commands like ls and

Re: Unable to get sendmail submission port to listen on IPv6

On 20/04/2013 19:15, Beat Siegenthaler wrote: On 19.04.13 16:00, Jeremy Chadwick wrote: Hi all, I did not recognize that 587 is only listening onIy on IPv4. Maybe it's new, maybe it was alltime so. sendmail 25090 root 4u IPv4 0xfe01e810f3d0 0t0 TCP *:25 (LISTEN) sendmail

Re: Why does poudriere always rebuild nginx and GraphicsMagick13?

On 15/02/2013 01:27, Rainer Duffner wrote: OK, another issue crept up. I started to build www/rt40 and it worked - until I updated it to the latest commit. Now I get: [02] Finished build of www/rt40: Ignored: please select one of AP_MODPERL, AP_MODFASTCGI, LIGHTTPD, SPAWN_FCGI or

Re: svn - but smaller?

On 25/01/2013 13:38, Ian Smith wrote: I'm trying to work out exactly when support for checking out 9-STABLE CVS sources - and I'm only talking about system sources here - will end? The date that CVS for src will cease to be kept in sync with SVN and when cvsup etc. are officially withdrawn for

Re: svn - but smaller?

On 24/01/2013 11:30, John Mehr wrote: I'm working on writing a lightweight, dependency-free, BSD licensed program to pull source using the svn protocol (not using the aforementioned svnsup code). I've only got a few more pieces of the puzzle to sort out and some code cleanup and it should be

Re: Does / Is anyone maintaining CVS for FreeBSD?

On 04/01/2013 09:52, Patrick M. Hausen wrote: So - this is definitely no simple plug-in replacement for csup. And is there a Components ports? Doesn't look like it. No. You'ld use portsnap(8) for ports. It's very similar to freebsd-update(8) from a user perspective but apparently quite

Re: Does / Is anyone maintaining CVS for FreeBSD?

On 03/01/2013 17:48, Patrick M. Hausen wrote: I'm a bit reluctant to installing svn on every system that needs source updates. Are there more lightweight ways? freebsd-update(8) which is what 'make update' will run by default and in the absence of any configuration to use other mechanisms.

Re: Does / Is anyone maintaining CVS for FreeBSD?

On 03/01/2013 18:57, Lee Dilkie wrote: On 1/3/2013 1:21 PM, Matthew Seaman wrote: On 03/01/2013 17:48, Patrick M. Hausen wrote: I'm a bit reluctant to installing svn on every system that needs source updates. Are there more lightweight ways? freebsd-update(8) which is what 'make update

Re: Does / Is anyone maintaining CVS for FreeBSD?

On 03/01/2013 19:56, Lev Serebryakov wrote: Hello, Matthew. You wrote 3 января 2013 г., 22:21:16: I'm a bit reluctant to installing svn on every system that needs source updates. Are there more lightweight ways? MS freebsd-update(8) It says (on 9-STABLE): The freebsd-update tool

Re: Does / Is anyone maintaining CVS for FreeBSD?

On 03/01/2013 21:04, Lev Serebryakov wrote: Hello, Matthew. You wrote 4 января 2013 г., 0:39:33: MS Ah. Yes, you are right. You can't track a stable branch with MS freebsd-update. In that case, svn is the way to go. And even as developer I don't like this situation. My developer

Re: Upgrade of RELENG_8 ZFS boot pool leads to unbootable system

On 02/01/2013 17:49, Paul Mather wrote: Yesterday, I updated my RELENG_8 ZFS-only system that has worked like a champ for ages. After a successful install{kernel,world} and reboot, I noticed the 20121130 entry in /usr/src/UPDATING and upgraded my ZFS pool via zfs upgrade -a. I also

Re: Anothe pkgng question: signing a repository

On 27/12/2012 21:01, Garrett Wollman wrote: I'm creating my own repository and have created a key for it. [...] What does pkg expect to be in this file? A public key. It does not use X.509 (nor is there any reason why it should, although I suppose it could be made to at the cost of

Re: Question: /usr/sbin/pkg vs /usr/local/sbin/pkg in 9.1

On 27/12/2012 09:44, Rainer Duffner wrote: as I see it, pkgng is actually included in 9.1 as /usr/sbin/pkg, right? /usr/sbin/pkg and /usr/local/sbin/pkg are very different. /usr/local/sbin/pkg is a binary package management system. /usr/sbin/pkg is a shim that can bootstrap the installation of

Re: Question: /usr/sbin/pkg vs /usr/local/sbin/pkg in 9.1

On 27/12/2012 10:38, Dimitry Andric wrote: On 2012-12-27 11:35, David Demelier wrote: On 27/12/2012 11:02, Matthew Seaman wrote: pkgng is not in base and there are no plans to import it. If you are going to use pkgng then you need to install it, either from ports or by using the /usr/sbin

Re: Will we get a RELEASE-9.1 for Christmas?

On 21/12/2012 14:12, Walter Hurry wrote: Before I had a chance to try the git version, pkg-1.0.4 turned up in the ports. Good work! Hmm... $ pkg info pkg pkg-1.0.4 New generation package manager $ pkg -v 1.0.3 $ Forgotten (by bapt I assume) again? No, actually

Re: Will we get a RELEASE-9.1 for Christmas?

On 21/12/2012 18:01, Walter Hurry wrote: On Fri, 21 Dec 2012 17:13:56 +, Matthew Seaman wrote: Could you show me the output from: ldd /usr/local/bin/VBoxBalloonCtrl objdump -p /usr/local/bin/VBoxBalloonCtrl Thank you for that. [...] Dynamic Section: NEEDED VBoxRT.so

Re: repo.txz missong on packages-9-stable for pkg

On 20/12/2012 13:06, CeDeROM wrote: Hello :-) I want to test new pkg tool, but it complains that there is no repo.txz file on the repository: # pkg install libreoffice Updating repository catalogue pkg: ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9-stable/All//repo.txz:

Re: Will we get a RELEASE-9.1 for Christmas?

On 13/12/2012 08:29, Matthew Seaman wrote: (On 'pkg check -Ba' producing 'shared library not found' errors for some packages) Unfortunately it seems to be a fairly common effect in some large projects. Other packages showing the same symptoms: thunderbird (yeah -- that one

Re: Will we get a RELEASE-9.1 for Christmas?

On 20/12/2012 23:55, Bas Smeelen wrote: On 12/21/12 00:40, Matthew Seaman wrote: On 13/12/2012 08:29, Matthew Seaman wrote: (On 'pkg check -Ba' producing 'shared library not found' errors for some packages) Unfortunately it seems to be a fairly common effect in some large projects. Other

Re: Will we get a RELEASE-9.1 for Christmas?

On 13/12/2012 07:37, Scot Hetzel wrote: This same issue with firefox was reported in this PR: http://www.freebsd.org/cgi/query-pr.cgi?pr=131237 And included a simple fix which was rejected by the firefox maintainer due to firefox sets LD_LIBRARY_PATH at runtime to find its share

Re: Will we get a RELEASE-9.1 for Christmas?

On 12/12/2012 17:38, Kevin Oberman wrote: If you use pkgng, please try editing /usr/local/sbin/pkg_libchk to replace pkg_info with pkg info in all locations and let me know how it works, . I'm hoping that will make it work with pkgng, but I have no way to check as I can't currently use pkgng

Re: Will we get a RELEASE-9.1 for Christmas?

On 12/12/2012 23:17, Walter Hurry wrote: That looks like a useful feature. But why is it saying this? pkg: (firefox-17.0.1,1) shared library libxpcom.so not found pkg: (firefox-17.0.1,1) shared library libmozalloc.so not found (lots more output snipped) $ locate libxpcom.so

Re: How to update ports tree indexes when using svn

On 10/12/2012 14:39, S.N.Grigoriev wrote: after the security announcement (http://www.freebsd.org/news/2012-compromise.html) I use svn to update my local ports tree. I've found out that the port index is not updated. What is the preferred/recommended way to update port indexes when using svn?

Re: confirm that csup is still usable fos the new 9.1

On 26/11/2012 08:07, Perry Hutchison wrote: Once csup goes away, how will a base-only system update the sources, e.g. to follow a security branch? freebsd-update(8) Cheers, Matthew ___ freebsd-stable@freebsd.org mailing list

Re: buildworld with clang breaks because no cc

On 24/11/2012 13:18, Beeblebrox wrote: 5. You should save the entire log I don't know how to do this. See script(1) Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. PGP: http://www.infracaninophile.co.uk/pgpkey signature.asc Description: OpenPGP digital signature

Re: how to update ports while using pkgng?

On 16/09/2012 22:24, Andreas Nilsson wrote: Since no one asked: Why would you want to do it this way? If you are using pkgng updating is as easy as: pkg upgrade. Actually, we (the pkgng developers) think this is a perfectly valid use case, and we'd like to have it as a standard choice available

Re: how to update ports while using pkgng?

On 16/09/2012 21:10, Marcelo Gondim wrote: Em 16/09/2012 14:42, Sergey V. Dyatko escreveu: On Sat, 15 Sep 2012 08:48:09 -0300 Marcelo Gondim gon...@bsdinfo.com.br wrote: Em 15/09/2012 01:41, Mike Manilone escreveu: Hi, I'm using ports with pkgng enabled. But I found that portmaster won't

Re: Get ports tree of the current pkgng repository

On 16/08/2012 20:56, Michael Schnell wrote: Hi, I don't know if this came up already, but not as far as I know. So, I was thinking it would be nice to add a mechanism to pkgng, which enables the user to get the ports tree corresponding to the current repository. At least I've the problem

Re: Regression with jails/IPv6/pf

On 01/08/2012 18:13, Bjoern A. Zeeb wrote: Any of you who are expereincing problems with packets dropped due to invalid checksums with IPv6 and pf after the recent merges, can you report back if you also see this without modulate state in your pf.conf (if you have 'modulate' in there, can you

Re: OpenSSL from Ports

On 30/07/2012 21:38, Chuck Burns wrote: On Mon, 30 Jul 2012 21:01:23 +0200 Beat Siegenthaler beat.siegentha...@beatsnet.com wrote: It seems to be important to know, what build from port means. There is still some tweaking necessary. Is it possible that openssl in base is just left over from

Regression with jails/IPv6/pf

So, I tried to do a routine update to the latest stable/9 yesterday (r238771), and I found that access to the jail on my server had stopped working. Everything else seemed to be fine, and reverting to the previous system (r237456 from 2012-06-22 (Boot Environments FTW)) bought it all back to

Re: Regression with jails/IPv6/pf

On 26/07/2012 21:51, Mike Andrews wrote: Sounds like what I hit and filed kern/170070 on -- basically a host not being able to talk to itself on IPv6, except on the ::1 address. Workaround: ifconfig lo0 -txcsum6 -rxcsum6 or in /etc/rc.conf: ifconfig_lo0=inet 127.0.0.1/8 -txcsum6

Re: USE PF to Prevent SMTP Brute Force Attacks - Resolved !!!

On 16/06/2012 21:03, Shiv. Nath wrote: Dear Metthew, Matthew, one a, one e. first thanks for assisting to secure 22/25 ports from brute force attack. i wish to consult if the following white list looks fine to exclude trusted networks (own network) int0=em0

Re: PF to Preventing SMTP Brute Force Attacks

On 15/06/2012 17:17, Shiv. Nath wrote: Hi FreeBSD Gurus, i want to use PF to Preventing SMTP Brute Force Attacks. i need some help to understand correct syntax. URL Explaining this: http://www.openbsd.org/faq/pf/filter.html#stateopts i expect the following behavior from the PF rule

Re: PF to Preventing SMTP Brute Force Attacks

On 15/06/2012 17:55, Shiv. Nath wrote: Limiting yourself to 200 states won't protect you very much -- you tend to get a whole series of attacks from the same IP, and that just uses one state at a time. Instead, look at the frequency with which an attacker tries to connect to you.

Re: Why Are You NOT Using FreeBSD?

On 04/06/2012 00:30, Mark Andrews wrote: The ports system defaults are to use a common build/runtime tree but at the cost of a little more disk space each major application could have its own build/runtime tree. This is a tradeoff. Most of the time having a shared set of libraries is a win,

Implications of pkgng, was Re: Why Are You NOT Using FreeBSD ?

On 03/06/2012 02:21, Erich wrote: 2. No decent packet manager (I hope pkgng will make life easier). You can't just upgrade this and that packet and see what's new, and rollback if you don't like somthing . I really hope this will never come. Why? It will kill make install. Make install is

Re: Why Are You Using FreeBSD?

On 01/06/2012 09:16, Damien Fleuriot wrote: The reason I rebuild the ports last is because, unless I'm wrong, any port that's statically linked to a system library would be linked to the old library from the old world. Uh -- if it's statically linked, then the object code is copied from the

Re: Why Are You Using FreeBSD?

On 31/05/2012 16:41, Damien Fleuriot wrote: You missed the bit about 3 reboots, while these don't take 15 mins each, they're still time consuming and disruptive. 1/ reboot after installing new kernel 2/ reboot after installing new world 3/ reboot after rebuilding ports If you rebuilt the

Re: clang tautology

On 29/05/2012 04:47, Randy Bush wrote: is the clang build for releng_9 for amd64 in good enough shape that i can simply csup hack make.conf make buildworld make kernel boot single make installworld mergemaster -cviFU reboot as if life was normal? Pace Doug's comments

Re: FreeBSD_9.0_Port_Upgrade

On 23/04/2012 18:08, Prabhpal S. Mavi wrote: i want to know the advice from experts, what is best? is it really important to update the system to new ports available. Or once i have no issue, i should follow golden rule. don't fix if not broken. i personally want my system to update at all

Re: FreeBSD 8.3-R sysinstall does not see disks that are recognized during boot

On 17/04/2012 23:02, Andy Dills wrote: However, once the system finishes booting and loads into sysinstall, and I go to partition the drives, I get No disks found! Please verify that your disk controller is being properly loaded at boot time. If you boot into 'Live CD' rather than the

Re: Support for releases

On 27/03/2012 19:25, Brett Glass wrote: I've just noted that as of this month, there is no release of FreeBSD -- on any branch -- whose EOL is less than a year away. Should there not be at least one release with extended support? ITYM 'more than a year away' there... 8.3 is due, in fact,

Re: Too many open files

On 26/03/2012 09:56, Kurt Jaeger wrote: From knowing that you have too many files open you can increase the maxfile numbers - but if you want to know what uses them try this - lsof -n | awk '{print $2 \t $1}' | sort | uniq -c | sort On my system, it shows interesting numbers for

Re: Debugging periodic scripts

On 23/03/2012 11:08, Jeremy Chadwick wrote: On 2 of the systems, /etc/periodic/security/510.ipfdenied gets run during periodic security even though it's explicitly shut off in periodic.conf. Thus on these 2 systems, our security mails contain this line: ipfstat: not found Are you sure that's

Re: ports usable or not [was: flowtable usable or not]

On 02/03/2012 16:45, Mark Linimon wrote: Other ports aren't supported on certain target architectures but the build doesn't tell you that until after it has run for a couple of hours Those are also bugs. Please send PRs for those, as well. I am particularly concerned about amd64 in this

Re: zpool detach pool device

On 24/01/2012 14:01, Johann Hugo wrote: Is there any way to recover data from a (good) disk that was detached from a zpool ? Possibly, but not necessarily easily. It depends on how much of your pool that disk represents. If it's one half of a mirror, then sure -- easy. You just need a

Re: ZFS: i/o error - all block copies unavailable on large disk number machines

On 23/01/2012 18:06, Chuck Swiger wrote: On Jan 23, 2012, at 9:04 AM, Steven Hartland wrote: After some digging we discovered that this was likely due to the fact that the BIOS only enumerates the first 12 disks and this machine has more than that in the root zpool which was a striped raidz2

Re: ZFS: i/o error - all block copies unavailable on large disk number machines

On 23/01/2012 19:29, Steven Hartland wrote: Initially the zpool was just the first raidz2. Only after install was the second raidz2 added to increase capacity. So what I believe has happened is the new kernel when installed happens to have data be located on the second raidz2 which consists

Re: ZFS: i/o error - all block copies unavailable on large disk number machines

On 23/01/2012 20:47, Steven Hartland wrote: In my case, I fixed it by having a separate /boot on some USB sticks -- this was only ever accessed to read the kernel, kernel modules and bootloader at boot time, so no worries over performance. Out of interest whats the procedure you used for

Re: buildworld: don't know how to make iterator.cc

On 22/01/2012 05:32, Jeremy Chadwick wrote: csup then pulls down src/some/Makefile (for RELENG_9), where the version number is different; say, version 1.14.3.0. Note that the version number is not higher (larger) than the previous (1.14.12.3). Thus /usr/src/some/Makefile doesn't get

Re: GENERIC make buildkernel error / fails - posix_fadvise

On 22/01/2012 19:00, clift...@volcano.org wrote: If rm had an option to take files from standard input, or if there's another program I'm not aware of which does this, it could serve as the right-hand side of this. xargs(1) -- generic solution to taking a list of command arguments from a file

Re: dumpdev default

On 17/01/2012 08:43, Aristedes Maniatis wrote: The dumpon utility will refuse to enable a dump device which is smaller than the total amount of physical memory as reported by the hw.physmem sysctl(8) variable. However, I have found that # dumpon -v /dev/ad4s1b kernel

Re: FreeBSD 9 recompile ports

On 13/01/2012 22:57, Andriy Gapon wrote: But if the appropriate misc/compatX port is installed, then those libraries do actually exist and the system should be fully usable... Modulo the compat libraries not working with the new kernel as Kostik has pointed out. As soon as you update or

Re: gmirror not synced

On 04/01/2012 19:43, Gareth de Vaux wrote: Hi all, I've noticed that the md5 hashes of a couple of files on a gmirror change when I recalculate the hashes. The output usually cycles between 2 hashes per file. I'm guessing this is because each calculation reads the file randomly from 1

Re: FTPS Server?

On 05/01/2012 12:47, Karl Denninger wrote: Not SFTP (which is supported by the sshd) but FTPS is it supported by FreeBSD? No, not supported in the base system. This question may belong on the ports list, but a quick perusal there didn't find anything particularly interesting (one

Re: FTPS Server?

On 05/01/2012 14:09, Karl Denninger wrote: So if I want to do anything other than transfer to a Windows machine (barf!) I am stuck with either FTP (no encryption at all and subject to be picked off via trivial means while the data is in flight) or FTPS (which has its own set of issues.) Does

  1   2   3   >