Re: best spam filter port(s) for postfix?

2007-10-01 Thread Philip Hallstrom

By far the best anti-spam tool I've used with Postfix is policyd-weight.
mail/postfix-policyd-weight


Agreed. +1. Me too.

:)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: question about Postfix

2007-10-02 Thread Philip Hallstrom

I have a quick question about Postfix.
When I install Free BSD and have it
include Postfix  from packages, does
the install process completely replace
Sendmail with Postfix, or do I still have
to replace Sendmail with Postfix separately?
Thanks in advance
Jeff K


The package install of postfix does nothing to sendmail. It's not like the 
MTA switch utility found in some linux distros. Just turn off the various 
bits of sendmail in /etc/rc.conf and start postfix.


Postfix does include an executable named "sendmail" that directly replaces 
some of the "old" sendmail capability.


This is what is confusing me some. I have a text from SAMS on Postfix and it 
talks about renaming several
sendmail related files and removing the suid permissions on them. Because 
both Sendmail and Postfix are
extensive systems, getting all the cogs and gears together looks like a real 
challenge to me.


It's easy.  If you install using the port it will ask you what you'd like 
to do.  Typically you'd tell it to use mailer.conf to use postfix instead 
of sendmail and leave it at that.  man mailer.conf for more info, but the 
port will take care of it for you (or at least tell you what to do, it's 
been awhile since I set it up)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: BASH as root shell (static linking)

2007-10-05 Thread Philip Hallstrom

On 06/10/2007, at 5:45 AM, RW wrote:


On Sat, 6 Oct 2007 04:54:26 +1000
Jerahmy Pocott <[EMAIL PROTECTED]> wrote:


Hello,

I'm wanting to use BASH as my root shell, so I compiled a statically
linked


I would suggest using bash as your toor shell instead. toor exist
precisely for this purpose.


Yeah, I'v done that in the past, but I really dislike csh, I don't want to 
use

it EVER =p


Use sudo... and alias 'su' to 'sudo -H bash'.

That's what I do... but can always fall back to the default if necessary.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: vim doesn't preserve the terminal content

2007-11-02 Thread Philip Hallstrom

I use vim both on Linux and FreeBSD.
On Linux after I exit vim original screen content is restored.
On FreeBSD vim leaves the last content viewed in vim.

How do I make vim preserve the screen?


I don't know how to do that, but it is one Lunix (bash?) feature
that I hate and would like to know how to change it to function
the way it does under FreeBSD (tcsh).


I hate it when it restores my screen and to prevent that in linux I added 
this to my .vimrc:


set t_ti =
set t_te =

So read about whatever those options mean and set them accordingly...

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


How to stop screen from resizing my window??

2007-12-03 Thread Philip Hallstrom

Hi all -

I connect to a FreeBSD server from OSX (via iTerm).  I then start up 
screen.


And it resizes my windows to 80 characters wide.  This doesn't happen on 
linux.


My understanding is this has something to do with the termcap entry and 
'WS', but as far as I can tell that isn't being set anywhere.


Also the -A option to screen doesn't seem to do anything either.

Anyone have any ideas?  Googling for "screen resize window" doesn't get me 
very far :(


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to stop screen from resizing my window??

2007-12-03 Thread Philip Hallstrom

I connect to a FreeBSD server from OSX (via iTerm).  I then start up
screen.

And it resizes my windows to 80 characters wide.  This doesn't happen on
linux.

My understanding is this has something to do with the termcap entry and
'WS', but as far as I can tell that isn't being set anywhere.

Also the -A option to screen doesn't seem to do anything either.

Anyone have any ideas?  Googling for "screen resize window" doesn't get me
very far :(


In iTerm, select Bookmarks > Manage Profiles.  In the Terminal Profile you 
are using to connect, check the Disable session-initiated window resizing 
checkbox.


Woot!  I would never have thought to look there... you've made my day. 
Thanks Jim!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Webmail

2007-12-14 Thread Philip Hallstrom
Can anyone who had experience running a web-based e-mail give suggestion 
what package to use? I will only use it for study purpose, so I need one 
that easy to configure and help me understand the big picture about 
mailserver.. Thank you very much..


Roundcube is pretty slick... acts more like a real app than most of the 
others...


http://roundcube.net/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Anyone using a SOYO KT600 Dragon motherboard?

2003-11-06 Thread Philip Hallstrom
Hi all -
Looking at building a new system and was wondering if anyone is
using one of the SOYO KT600 Dragon motherboards (either the plus or ultra
platinum)?

http://www.soyo.com.tw/products/proddesc.php?id=257
http://www.soyo.com.tw/products/proddesc.php?id=256

I've searched, but haven't found these specific models.  Their site says
it's supported under FreeBSD, but I'd like someone to confirm that :-)
I'll be emailing SOYO as well, but figured I'd get this out there in case
they take awhile to respond.

I'm most interested in knowing if the audio/lan is supported.

Both boards use the VIA KT600 / 8237 chipset.

The ultra uses CMI 8738 for audio which is listed on freebsd.org as
supported.

The plus uses VIA 1616 which isn't listed, but Via VT82C686A is... but I
can't find any info on that latter chip on Via's site.

I also can't find any information on beyond "VIA MAC 10/100 Ethernet" for
the VIA KT600.

Any info/stories on this board would be appreciated.

Thanks!

-philip
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


FreeBSD Motherboard survey...

2003-11-21 Thread Philip Hallstrom
Hi all -

I'm wanting to build my own computer to run FreeBSD, but don't
have the slightest idea (well, maybe the slightest :) what motherboard to
buy.  I'd like one that has built-in lan/audio that works in FreeBSD, but
in my searching efforts I've turned up very little.

I know the handbook lists chip sets and whatnot, but trying to figure out
what chip set is on a given board isn't always easy -- at least not for me.

So... I wrote a survey app that I'm hoping lots of you will fill out.  It
let's you pick the brand/model of motherboard, then indicate what onboard
features work (lan, audio, video, usb, firewire, ide, sata, scsi, raid,
smp), lets you provide some overall "satisfaction" ratings, and then
provide any additional comments.

As a side effect you can input your laptop information which seems to be a
frequently asked source of questions.

If I get enough responses I'd like to expand this to include other things
such as DVD players, USB peripherals, etc. that have varying levels of
support in FreeBSD.  Perhaps turn it into a companion to the HARDWARE.TXT
document...

Anyway.. here it is:

http://www.eilio.com/freebsd-motherboards/

Thanks!

-philip
(please cc me on any replies)
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD Motherboard survey...

2003-11-21 Thread Philip Hallstrom
> On Nov 21, 2003, at 9:53 AM, Philip Hallstrom wrote:
>
> > Hi all -
> >
> > So... I wrote a survey app that I'm hoping lots of you will fill out.
> > It let's you pick the brand/model of motherboard, then indicate what
> > onboard features work (lan, audio, video, usb, firewire, ide, sata,
> > scsi, raid, smp), lets you provide some overall "satisfaction"
> > ratings, and then provide any additional comments.
> >
> > As a side effect you can input your laptop information which seems to
> > be a frequently asked source of questions.
> >
> > If I get enough responses I'd like to expand this to include other
> > things such as DVD players, USB peripherals, etc. that have varying
> > levels of support in FreeBSD.  Perhaps turn it into a companion to the
> > HARDWARE.TXT document...
> >
> > Anyway.. here it is:
> >
> > http://www.eilio.com/freebsd-motherboards/
> >
>
> This is very nice, and I think it will be helpful to a lot of people
> who want to move to FreeBSD. I especially like the idea of laptop users
> being able to contribute. This is a topic that has come up many times
> on the mobile@ list and I think a structured form where components can
> be detailed (works/broken) is a great idea.

I'm glad you like it.  And thanks for cc'ing the mobile group.  Completely
spaced on that.

If any of you have any comments on other features you'd like to see
(infrared just came to mind) please by all means send me an email with
your thoughts.  I've got pretty limited hardware and haven't used FreeBSD
on a laptop ever so might be missing things.

I'd love for this to take off and become a repository of sorts...

-philip
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


List of absolutely required files for FreeBSD?

2003-12-31 Thread Philip Hallstrom
Hi -
I was wondering if there is a list of absolutely required files
for FreeBSD?  I'm trying to trim an installation down as small as possible
(to put on Compact Flash).

If I start out with just the 'bin' directory for the release there's
around 100megs of files.  Obviously a lot of them like ipfw I don't need.

However, what about things like awk? I won't use it, but are there other
parts of FreeBSD (ie /etc/rc.* files)?

Is there a list somewhere that would help determine what files are used by
FreeBSD for normal operation?

Thanks!

-philip
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: List of absolutely required files for FreeBSD?

2003-12-31 Thread Philip Hallstrom
256mb, but I'd like some extra room for some data files.

If I could get it down to say 80mb then I could use a 128mb card...

On Wed, 31 Dec 2003, Sean Hafeez wrote:

> what size flash?
>
> i have 4.9 down to 220mb for a 256mb flash.
>
>
>
> Philip Hallstrom wrote:
>
> > Hi -
> > I was wondering if there is a list of absolutely required files
> > for FreeBSD?  I'm trying to trim an installation down as small as possible
> > (to put on Compact Flash).
> >
> > If I start out with just the 'bin' directory for the release there's
> > around 100megs of files.  Obviously a lot of them like ipfw I don't need.
> >
> > However, what about things like awk? I won't use it, but are there other
> > parts of FreeBSD (ie /etc/rc.* files)?
> >
> > Is there a list somewhere that would help determine what files are used by
> > FreeBSD for normal operation?
> >
> > Thanks!
> >
> > -philip
> > ___
> > [EMAIL PROTECTED] mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> >
> >
>
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Upgrading a remote box from 5.3 to 6-stable....

2006-01-11 Thread Philip Hallstrom

Hi all -

I recently got a leased server that's running 5.3.  It's in Texas.  I'm in 
Washington.  I want to upgrade it to 6-STABLE.  In the update docs it says 
that "when doing a major release upgrade, it is required that you boot 
into single user mode to do the installworld."


Which obviously is a problem.  And I find it hard to believe it's really 
necessary as this is going to be an issue for a lot of people.  Is this 
similar to the old recommendation of doing this "unless your system is 
relatively quiet"?


I also read about needing to build a kernel with COMPAT_FREEBSD5 in order for 
the new kernel to boot and be able to installworld.


Anything else?  And anyone know if the boot into single user mode is really 
necessary?


Can't really test it on my remote box

Thanks!

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Looking for SW Firewall

2006-01-12 Thread Philip Hallstrom

I am interested implementing a firewall in SW that has similar
features as a Cisco PIX firewall. But, I don't want to roll
my own ipfw statements. A nice gui would be nice. From the
ports index I see things like:


dante-1.1.15  A circuit-level firewall/proxy
cp2fwb-0.6Checkpoint FW1 to Firewall Builder ruleset converter
fwbuilder-2.0.10  Firewall Builder GUI and policy compilers
hlfl-0.60.1   High Level Firewall Language
libfwbuilder-2.0.10_1 Firewall Builder API
pfw-0.6.2 A web frontend for the pf firewall

I'm basically looking for a good firewall that has an easy administration
interface.

Can someone who has experience with this suggest a fw I should try?


Never used it, but seems monowall comes up a lot...

http://www.m0n0.ch/wall/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


How to boot from a slice other than "a"?

2006-01-12 Thread Philip Hallstrom

Hi all -

I've got a remote server and for one reason or another have it setup like 
this:


Filesystem SizeUsed   Avail Capacity  Mounted on
/dev/da0s1a248M180M 48M79%/
/dev/da0s1h 14G496M 13G 4%/mnt

/dev/da0s1h has an exact copy of /dev/da0s1a using dump/restore.

I want to configure things so that the next time I reboot it will 
automatically boot from /dev/da0s1h without me having to do anything 
(since it's remote I can't interrupt the boot process).


I know I need to modify fstab on da0s1h.  And if I was on the console I'd 
interrupt the boot process and type in 0:da(0,h)/boot/loader, but I'm not.


And I'm not entirely sure what files to tweak to make that happen.  I've 
read the boot/loader manpages, but am just not getting it today.


Anyone know what files to tweak?

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to boot from a slice other than "a"?

2006-01-12 Thread Philip Hallstrom

Filesystem SizeUsed   Avail Capacity  Mounted on
/dev/da0s1a248M180M 48M79%/
/dev/da0s1h 14G496M 13G 4%/mnt

/dev/da0s1h has an exact copy of /dev/da0s1a using dump/restore.

I want to configure things so that the next time I reboot it will 
automatically boot from /dev/da0s1h without me having to do anything (since 
it's remote I can't interrupt the boot process).


I know I need to modify fstab on da0s1h.  And if I was on the console I'd 
interrupt the boot process and type in 0:da(0,h)/boot/loader, but I'm not.


are you actually interested of running /boot/loader from partition h or 
mounting root at /dev/da0s1h


Hmm... guess I didn't realize there was a difference :)

I want the OS to "run" from /dev/da0s1h so that I can then completely wipe 
and replace /dev/da0s1a [1].



if second - add:

vfs.root.mountfrom="ufs:da0s1h"


to which file?

Thanks!
-philip

[1] The box is a new 5.3 install.  My thought was to boot from da0s1h, 
buildworld/kernel for 6 with a DESTDIR pointing to the original / 
(da0s1a). Then reboot and have a clean install of 6.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Remote backups, reading from and writing to the same file

2006-01-12 Thread Philip Hallstrom
For a while I have been doing remote backups from my little server at home 
(which hosts some personal websites and also serves as my testing webserver) 
by tarring everything I wanted to be backed up and piping it to another 
machine on my network with nc(1), for example:


On the recieving machine: nc -l 1 > backup-`date +%Y-%m-%d`.tar.gz

On my server: tar -c -z --exclude /mnt* -f - / | nc -w 5 -o aphax 1

(Some excludes for tar(1) are left out for simplicity's sake)

Among the things being backed up are my mysql database tables. This made me 
wonder wether the backup could possibly get borked when mysql writes to any 
of the mysql tables while tar is reading from them.


Do I really have to use MySQL's tools to do a proper SQL dump or stop MySQL 
(and any other services that may write to files included in my backup) before 
doing a backup? Do any of the more involved remote-backup solutions have ways 
of working around this? Or is it simply not possible to write to a file while 
it is being read?


The short answer is yes.  The medium answer is I would if I were you :-)

The long answer (at least to the extent I know it) is...

You might be able to take a snapshot of the filesystem mysql's files are 
on and back those up as they'd be consistent to themselves.  But 
everything I've read about backing up a database suggests that doing a 
proper backup is the way to go.


If you really don't want to do that you might also be able to use one of 
the various LOCK commands in Mysql to block all writes until you've copied 
them over.


But really a mysqldump ... | gzip > file should result in a very very 
small file.  And you could pipe that over the network (or even start 
mysqldump on your backup machine) if you didn't want the temp file issue.


You might also consider rsync.  That would only copy files that have 
changed.  Might be handy if bandwidth is an issue.  You can set it up to 
keep backup copies of files that have changed as well.  And it can run 
over ssh.


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD vs Linux

2006-01-17 Thread Philip Hallstrom

The computer is currently without keyboard, mouse or monitor.  I am
adding applications to the computer via ssh while I work.  As soon as I
get openbox and tightvnc installed, I'll switch to tightvnc so I can
disconnect without disrupting jobs.  (Hmm, I wonder if I'll have to add
a mouse or keyboard at that point.)


/usr/ports/sysutils/screen

Screen is a full-screen window manager that multiplexes a physical 
terminal between several processes (typically interactive shells). Each 
virtual terminal provides the functions of a DEC VT100 terminal and, in 
addition, several control functions from the ANSI X3.64 (ISO 6429) and ISO 
2022 standards (e.g. insert/delete line and support for multiple character 
sets). There is a scrollback history buffer for each virtual terminal and 
a copy-and-paste mechanism that allows moving text regions between 
windows.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: generating new passwords

2006-01-17 Thread Philip Hallstrom
Is there a command in FreeBSD 5.4 that will assign a specified user a new 
password without having to create one manually using passwd?  Is there also a 
way to generate new passwords for multiple users at once?


man pw

...

 -h fd This option provides a special interface by which interac-
   tive scripts can set an account password using pw.  Because
   the command line and environment are fundamentally insecure
   mechanisms by which programs can accept information, pw
   will only allow setting of account and group passwords via
   a file descriptor (usually a pipe between an interactive
   script and the program).  sh, bash, ksh and perl all pos-
   sess mechanisms by which this can be done.  Alternatively,
   pw will prompt for the user's password if -h 0 is given,
   nominating stdin as the file descriptor on which to read
   the password.  Note that this password will be read only
   once and is intended for use by a script rather than for
   interactive use.  If you wish to have new password confir-
   mation along the lines of passwd(1), this must be imple-
   mented as part of an interactive script that calls pw.

   If a value of `-' is given as the argument fd, then the
   password will be set to `*', rendering the account inacces-
   sible via password-based login.

 -H fd Read an encrypted password string from the specified file
   descriptor.  This is like -h, but the password should be
   supplied already encrypted in a form suitable for writing
   directly to the password database.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Apache not included

2006-01-25 Thread Philip Hallstrom
I'm a bit of a new user to BSD from Windows/Linux.  But I recently went 
thru the 5.4 version installer and was pleased at how simple it was to 
install the Apache web server thru the sysinstall menus.  After 
reinstalling with 6.0 I was surprised to find that apache wasn't an 
option from this menu.


 Any ideas if this is an omission or intentional?  I would think a 
webserver would definitely be included in the basic config.


I'm guessing it was intentional.  I can think of a lot of reasons I 
wouldn't want a webserver on my box (desktop, mail server, database 
server, chat server, etc...)


Easy to add though via ports or packages.

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: rm - Argument list too long

2006-01-27 Thread Philip Hallstrom

I am getting error "Argument list too long." when deleting files from
/tmp directory.


server20# pwd
/tmp
server20# ls -l sess*
/bin/ls: Argument list too long.
server20# rm -f sess*
/bin/rm: Argument list too long.
server20#


Any idea how to correct this ?


find /tmp -type f -name 'sess*' -delete

Probably worth adding a "-mtime +1" in there to only delete files that 
haven't been modified in 1 day...


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: freebsd hosting

2006-01-29 Thread Philip Hallstrom

www.LayeredTech.com is good for FreeBSD servers, they are flexable and
offers any version of FreeBSD you need.


They might. But by default they install 5.3.  I just signed up with them 
and that's what they gave me...


I upgraded to 6 though and so far have been happy with them.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to get latest and greatest FAMP

2006-01-31 Thread Philip Hallstrom

I wanted to do a quick test of Apache21, MySQL5 and PHP5
I tried a minimal install of FreeBSD 6.0 then pkg_add -r which
worked fine up until PHP5 where I was told that Apache21
conflicted with Apache13 that was to be installed as aPHP5
dependancy. I pkg_delete and went ahead with installing
PHP5 then Apache13 but when I tried to pkg_delete Apache13
so I could install Apache21 was told that I coudl not remove it ?


If you're talking about /usr/ports/lang/php5, then it's Makefile has this:

.if defined(WITH_APACHE)
.if ${APACHE_VERSION} > 13
CONFIGURE_ARGS+=--with-apxs2=${APXS}
.else
CONFIGURE_ARGS+=--with-apxs=${APXS}
.endif
.endif


I haven't done it, but I'm guessing if you install apache21 first, then 
set APACHE_VERSION = 21 in your environment, then make, it would do what 
you wanted.


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Freebsd kernel guide

2006-02-02 Thread Philip Hallstrom

hi all,
Is anyone aware of a good book that teaches the internals of
freebsd kernel? ie. books for understanding kernel internals,
kernel module programming and kernel source (tree)guide.


I'm sure there are more, but here's some...

http://www.freebsd.org/doc/en_US.ISO8859-1/books/arch-handbook/index.html
http://www.freebsd.org/doc/en_US.ISO8859-1/books/design-44bsd/index.html

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


How to share directories b/n jails on 6.0?

2006-02-03 Thread Philip Hallstrom

Hi -

I've got a new 6.0 box and have setup some jails.  I'd like to share 
/usr/ports from the host, to each of the jails.


I tried mount_unionfs and while it worked, the box would crash if I did 
anything intensive (ie. compile a port).


Googling around and people say they are using nullfs okay, but the manpage 
ends with:


THIS FILE SYSTEM TYPE IS NOT YET FULLY SUPPORTED (READ: IT DOESN'T WORK)
AND USING IT MAY, IN FACT, DESTROY DATA ON YOUR SYSTEM.  USE AT YOUR OWN
RISK.  BEWARE OF DOG.  SLIPPERY WHEN WET.

But then I also some some posts suggesting this no longer applied to 6.0.

Advice?

Thanks!

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to share directories b/n jails on 6.0?

2006-02-03 Thread Philip Hallstrom

On Fri, Feb 03, 2006 at 07:02:43PM -0600, Philip Hallstrom wrote:

Hi -

I've got a new 6.0 box and have setup some jails.  I'd like to share
/usr/ports from the host, to each of the jails.

I tried mount_unionfs and while it worked, the box would crash if I did
anything intensive (ie. compile a port).

Googling around and people say they are using nullfs okay, but the manpage
ends with:

THIS FILE SYSTEM TYPE IS NOT YET FULLY SUPPORTED (READ: IT DOESN'T
WORK)
AND USING IT MAY, IN FACT, DESTROY DATA ON YOUR SYSTEM.  USE AT YOUR
OWN
RISK.  BEWARE OF DOG.  SLIPPERY WHEN WET.


nullfs is fine in 6.0, and the warning has been removed.


Good to know it's cool.  I'll start playing with it.  The warning is still 
there though... in both 6-stable and 7-current.


http://www.freebsd.org/cgi/man.cgi?query=mount_nullfs&apropos=0&sektion=0&manpath=FreeBSD+6.0-stable&format=html
http://www.freebsd.org/cgi/man.cgi?query=mount_nullfs&apropos=0&sektion=0&manpath=FreeBSD+7.0-current&format=html

Thanks!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to share directories b/n jails on 6.0?

2006-02-03 Thread Philip Hallstrom

On Fri, Feb 03, 2006 at 08:53:58PM -0600, Philip Hallstrom wrote:

On Fri, Feb 03, 2006 at 07:02:43PM -0600, Philip Hallstrom wrote:

Hi -

I've got a new 6.0 box and have setup some jails.  I'd like to share
/usr/ports from the host, to each of the jails.

I tried mount_unionfs and while it worked, the box would crash if I did
anything intensive (ie. compile a port).

Googling around and people say they are using nullfs okay, but the manpage
ends with:

THIS FILE SYSTEM TYPE IS NOT YET FULLY SUPPORTED (READ: IT DOESN'T
WORK)
AND USING IT MAY, IN FACT, DESTROY DATA ON YOUR SYSTEM.  USE AT YOUR
OWN
RISK.  BEWARE OF DOG.  SLIPPERY WHEN WET.


nullfs is fine in 6.0, and the warning has been removed.


Good to know it's cool.  I'll start playing with it.  The warning is still
there though... in both 6-stable and 7-current.

http://www.freebsd.org/cgi/man.cgi?query=mount_nullfs&apropos=0&sektion=0&manpath=FreeBSD+6.0-stable&format=html
http://www.freebsd.org/cgi/man.cgi?query=mount_nullfs&apropos=0&sektion=0&manpath=FreeBSD+7.0-current&format=html


Those manpages are out of date.

http://www.freebsd.org/cgi/cvsweb.cgi/src/sbin/mount_nullfs/mount_nullfs.8


Sweet!

MFC: Remove big scary warning about nullfs state

:-)

I've set it up already and it works great.

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to share directories b/n jails on 6.0?

2006-02-03 Thread Philip Hallstrom

I've got a new 6.0 box and have setup some jails.  I'd like to share
/usr/ports from the host, to each of the jails.

I tried mount_unionfs and while it worked, the box would crash if I did
anything intensive (ie. compile a port).

Googling around and people say they are using nullfs okay, but the 
manpage

ends with:

THIS FILE SYSTEM TYPE IS NOT YET FULLY SUPPORTED (READ: IT DOESN'T
WORK)
AND USING IT MAY, IN FACT, DESTROY DATA ON YOUR SYSTEM.  USE AT 
YOUR

OWN
RISK.  BEWARE OF DOG.  SLIPPERY WHEN WET.



nullfs is fine in 6.0, and the warning has been removed.



Good to know it's cool.  I'll start playing with it.  The warning is 
still

there though... in both 6-stable and 7-current.

http://www.freebsd.org/cgi/man.cgi?query=mount_nullfs&apropos=0&sektion=0&manpath=FreeBSD+6.0-stable&format=html 
http://www.freebsd.org/cgi/man.cgi?query=mount_nullfs&apropos=0&sektion=0&manpath=FreeBSD+7.0-current&format=html 



Those manpages are out of date.

http://www.freebsd.org/cgi/cvsweb.cgi/src/sbin/mount_nullfs/mount_nullfs.8 



Sweet!

MFC: Remove big scary warning about nullfs state

:-)

I've set it up already and it works great.


On Fri, 3 Feb 2006, Tim Traver wrote:


How did you set it up specifically ?

and is it just fixed in 6.0 ? or does it also work in 5.4 ?


No idea about 5.4...

For 6...

/etc/rc.conf:

jail_sandbox_rootdir="/local/jails/sandbox/"
jail_sandbox_hostname="sandbox.pjkh.com"
jail_sandbox_ip="123.123.123.123"
jail_sandbox_exec="/bin/sh /etc/rc"
jail_sandbox_devfs_enable="YES"
jail_sandbox_mount_enable="YES"

/etc/fstab.sandbox:

/usr/ports /local/jails/sandbox/usr/ports nullfs rw 0 0


Then once started with /etc/rc.d/jail start sandbox I have this:

% df -h
Filesystem SizeUsed   Avail Capacity  Mounted on

devfs  1.0K1.0K  0B   100%/local/jails/sandbox/dev
/usr/ports 3.9G1.9G1.7G52%/local/jails/sandbox/usr/ports

I also came across this afterward... which I might give a go...

http://www.freebsd.org/cgi/url.cgi?ports/sysutils/ezjail/pkg-descr

Looks like it null mounts a lot more (ie /bin /sbin, /usr/lib, etc.)

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: IP Banning (Using IPFW)

2006-02-05 Thread Philip Hallstrom
I was wondering if there's some sort of port available that can actively ban 
IPs that try and bruteforce a service such as SSH or Telnet, by scanning the 
/var/log/auth.log log for Regex such as "Illegal User" or "LOGIN FAILURES", 
and then using IPFW to essentially deny (ban) that IP for a certain period of 
time or possibly forever.


I've seen a very useful one that works for linux (fail2ban), and was 
wondering if one exists for FreeBSD's IPFW?


There are some in the ports, but you can write your own pretty easy too. 
The one thing I didn't like about the ones in the ports is the app was 
responsible for removing the rules after a set amount of time.  Which 
could be a problem if that app crashed for some reason.  You could lock 
yourself out permanently...


Here's a quick perl script I wrote that does what you want...

http://pastebin.com/540575

Combine that with these two crontab entries:

0-59/4 * * * * /sbin/ipfw delete 501 >/dev/null 2>&1
2-59/4 * * * * /sbin/ipfw delete 500 >/dev/null 2>&1

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: incorrect logins

2006-02-11 Thread Philip Hallstrom

 I see many records as
Feb 10 21:08:55 sstand sshd[84600]: Failed password for root from 61.218.130.20 
port 46356 ssh2

How can i block these IP, who try "root" as login?
Have any soft in ports?


There are some ports that do it.  One thing I didn't like about the ports 
(at least the ones I looked at) was that the app managed removing the 
firewall rules itself.  Which means that if the app crashes right after 
you lock yourself out for some reason, thoes firewall rules are never 
going to get reset.


http://www.pjkh.com/wiki/ssh_monitor

Is my own little perl script and associated crontab entries to get around 
it.


But if it were me, I'd check the ports out too as some of them do more 
than what I wanted to do.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: horde on freebsd6

2006-02-13 Thread Philip Hallstrom

Hello,
  I've got php4 and apache installed on freebsd6 with several php4 
extensions. Now i want to install horde and imp to test them out while 
atempting to decide if horde would be suitable as a webmail solution. I try 
the install via ports, but pear always stops saying the port requires the cli 
or cgi version of php, but i have a conflicting port installed. I've already 
got php4 installed, does anyone have a workaround for this?

Thanks.


Not that I've done it, but /usr/ports/devel/pear/Makefile has this in it:

WANT_PHP_SCR=   yes

And in /usr/ports/Mk/bsd.php.mk there are these:

# WANT_PHP_CLI=yes  - Want the CLI version of PHP.
# WANT_PHP_CGI=yes  - Want the CGI version of PHP.
# WANT_PHP_MOD=yes  - Want the Apache Module for PHP.
# WANT_PHP_SCR=yes  - Want the CLI or the CGI version of PHP.
# WANT_PHP_WEB=yes  - Want the Apache Module or the CGI version of PHP.
# You may combine multiple WANT_PHP_* knobs.

So maybe it's as simple as:

make install WANT_PHP_MOD=yes

Maybe...

good luck!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Blocking an individual email address

2006-02-15 Thread Philip Hallstrom
I am running a FreeBSD 5.4p10 machine at my office.  It functions as our 
firewall and mailserver.  I am running Mailscanner, which invokes 
sendmail when necessary to process mail.  Sendmail is not started by 
defaultMailscanner invokes individual instances of it when it needs 
to.


Here is my problem.  I have an employee at my office that is sending 
work email to her home email address.  I need to find a way to block her 
email address, whether To, From, Cc, Bcc, or whatever, from passing 
through my mailserver.  I have already added a line to /etc/mail/access 
(in the format [EMAIL PROTECTED] REJECT), and have run makemap hash 
/etc/mail/access.db < /etc/mail/access.  I tested this with my personal 
email address (external to my network), and it had the effect of 
blocking any email orginating from my personal email to any address at 
my work, however it does not prevent me from sending emails to this 
address from a work address, which is the whole point.


I doubt we know the whole story, but even if you do find a way to make 
this work what stops her from...


- emailing her work to her gmail/hotmail/yahoo account?
- copying her email and putting it on a thumb drive?
- printing it out and taking it home?

If you are trying to stop her from taking "work material" home then you've 
got a much bigger problem.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: pop3 server recommendation (APOP/TLS)

2006-02-16 Thread Philip Hallstrom

John wrote:

On Wed, Feb 15, 2006 at 06:08:10AM -0600, J.D. Bronson wrote:

I am looking for a recommendation for a pop3 server
that can do APOP and TLS on port 110.

Qpopper was a disaster and I am not interested in cyrus (and dealing with 
maildirs)...


Is there any other option?

Qpopper worked with some of the clients (like eudora) but then had issues 
with  Thunderbird or Pegasus..


Coming in a bit late...

I use uw-imap with TSL and have Outlook and Thunderbird clients.  Works 
fine.  Not sure what APOP is so can't comment there...


There's also dovecot which I'm looking at moving too (mostly for virtual 
user support)...


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Odd file created in /

2006-02-18 Thread Philip Hallstrom

Check to see if anything has it open currently.  "netstat -a -f unix"
will do that for you.  Then rename it.  Then wait a week before
unlinking it.

Ceri


Nothing had it open.  Took me a second to figure out the "--" option so that
mv would rename it.  :)

How do I unlink it?


unlink is another way of saying remove...

rm -- ./-P

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: limiting brute force attacks

2006-02-28 Thread Philip Hallstrom

I've seen some efforts from the netfilter community on Linux to provide a
means to limit brute-force attacks via firewall rules. Can anyone suggest a
way to do the same on FreeBSD?

I'm primarily interested in limiting attacks on sshd. I already use RSA auth,
but I like defense-in-depth.


http://www.pjkh.com/wiki/ssh_monitor
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Trying to build for apache 2 not apache 1

2006-03-01 Thread Philip Hallstrom
I am having trouble installing a port/package because it wants to use Apache 
1.3 whereas I am running Apache 2 on the server in question.


As far as I can tell, I should install by building the port rather than using 
the package because the package is obviously pre-compiled for Apache 1.3. 
Fair enough, but how can I build the port for apache 2 if there aren't any 
makefile options regarding apache? The port in question is php4-mysql.


Skim through /usr/ports/Mk/bsd.apache.mk and look at some of the 
variables... WITH_APACHE2, USE_APACHE, APACHE_PORT, etc...


I haven't done it with php4-mysql, but with php5-extensions setting some 
of the above did the trick (in my case I wanted www/apache13-modssl).


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: question on leaf ports

2006-03-02 Thread Philip Hallstrom

On 3/2/06, Peter <[EMAIL PROTECTED]> wrote:

Hi gang.  Does a leaf port have no build dependants or
no run dependants?  I want to be assured that I can
remove a leaf port but not have to put it back in
order to upgrade another port.  Utilities such as
portmaster show leaf ports and I'm not sure what it's
really telling me.


I think the traditional sense of a leaf means no run
dependants, as this seems to be the only kind of
dependency registered in pkgdb. Consult the docs
of your particular port management app.


Just be sure to look through the list of leafs though.  gmake for example 
isn't required by any port to run (at least none of mine) but a lot of 
ports need it to build.  So removing it would be kind of pointless.


Also, I use pkg_rmleaves and it offers to remove ports like vim, screen, 
and rsync, which I obviously want, but nothing else relies on.


Anyway, just saying to double check before letting it do it's thing.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: To track or not to track

2006-03-08 Thread Philip Hallstrom
I just wanted to get pros and cons for tracking the whole port tree on a 
production server.


Any opinions?


Tracking it isn't going to take a lot of space.  Although if it's a 
serious production server (as opposed to my "home" production server :-) I 
don't know if I'd install ports on it before I'd done it somewhere else 
first.


For me... I've found having a jail 'sandbox' setup is a great way to 
install ports, test, make packages, then install those packages on my 
production box.


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /usr/local/etc/rc.d not running for jail

2006-03-08 Thread Philip Hallstrom


I have a jail, running in FreeBSD 6, which starts sshd and syslogd, but 
doesn't start any of the programs from /usr/local/etc/rc.d


All the appropriate variables are in /etc/rc.conf for the various programs 
(postfix, spamd, clamsmtp, freshclam). I am able to run the programs manually 
by going to /usr/local/rc.d and doing "./

Re: coming back up after power failure (UPS)

2006-03-08 Thread Philip Hallstrom

On an updated 5.4 box I am using Network UPS Tools (NUT) with an APC
Smart-UPS.

All is going very well but I cannot bring my box back up after
simulating a power failure.  At the end of the shutdown the screen
shows:

"Press any key to reboot"

Obviously this is not the desired outcome.

How can I get my system to go down completely?  Beyond this I
understand there may be some BIOS adjustments to be made.


man shutdown...

 -p  The system is halted and the power is turned off (hardware
 support required) at the specified time.

for starters... but yeah, you might need some BIOS changes...



I thought ACPI might have something to do with this.  The next time
around I booted with this disabled but this lead to another problem.
My network could not be initialized.  I got this message a few times
during startup and then the boot sequence continued with networking
disabled:

"sk0: watchdog timeout"

I rebooted again, this time with ACPI enabled, and all was well again.

--
Peter

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: deleting files not releasing space

2006-03-08 Thread Philip Hallstrom
i just deleted 100 megs of files out of my temp dir and df -h doesn't show 
the space freed yet.  it has done this in the past and a reboot will always 
give me my space back, but why doesn't it do it immediatly?


http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/disks.html#DU-VS-DF
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Jails third party services initialization

2006-03-10 Thread Philip Hallstrom


I'm not sure if this is the right forum for this subject, but here it goes.

I've been using ezjail tool to deploy some jails on a server but I've
noticed that the /usr/local/etc/rc.d/* scripts aren't executed at each
jail startup, despite all jails are started normally. On the other hand,
the /etc/rc.d/* scripts are executed normally and base system
services - like sshd - are started without problems.

Do someone has some tip about where should I look to verify and
correct this?


Add this to your /etc/rc.conf for the jail.

early_late_divider="NETWORKING"


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Packets v.s. Bytes

2006-03-13 Thread Philip Hallstrom

Dear list,

`netstat -i' returns _packets_, how can I get statistics using _bytes_?

Any suggestions or hints? Thanks!


netstat -i -b

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to Stop Bruit Force ssh Attempts?

2006-03-18 Thread Philip Hallstrom
In my auth log I see alot of bruit force attempts to login via ssh.  Is there 
a way I can have the box automatically kill any tcp/ip connectivity to hosts 
that try and fail a given number of times?  Is there a port or something that 
I can install to give this kind of protection.  I'm still kind of a FreeBSD 
newbie.


http://www.pjkh.com/wiki/ssh_monitor

Among a lot of others...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: System administration question

2006-03-18 Thread Philip Hallstrom
Is there a port or utility that allows you to monitor system stats by (either 
interactively or periodically) reading the various stat utilities (fstat, 
iostat, pstat or swapinfo, systat, top, vmstat, etc.) and sending a report to 
root that summarizes system condition?


if you want graphs (of historical data) most apps seem to use rrdtool.  I 
find this page to be useful in looking at the available options...


http://people.ee.ethz.ch/~oetiker/webtools/rrdtool/rrdworld/index.en.html

-p
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: php dependency hell

2006-03-22 Thread Philip Hallstrom


I'm trying to install Cacti, and it builds and installs fine. But, it's
looking for the php command-line binary as well, which the port did not pull
in for some reason.

So, I go to build php-cli, and install it.

[EMAIL PROTECTED] php4-cli]$ sudo make install
===>  Installing for php4-cli-4.4.2_1

===>  php4-cli-4.4.2_1 conflicts with installed package(s):
 mod_php4-4.4.1,1

 They install files into the same place.
 Please remove them first with pkg_delete(1).
*** Error code 1

Stop in /usr/ports/lang/php4-cli.

But I need mod_php4 for apache. What guarantee do I have that php4-cli will
provide the same functionality?


install /usr/ports/lang/php4 which installs both the apache module and the 
cli.



Plus, this...

[EMAIL PROTECTED] php4-cli]$ sudo pkg_delete -n mod_php4-4.4.1,1
pkg_delete: package 'mod_php4-4.4.1,1' is required by these other packages
and may not be deinstalled:
cacti-0.8.6h_41
php4-ctype-4.4.1
php4-extensions-1.0
php4-mysql-4.4.1
php4-overload-4.4.1
php4-pcre-4.4.1
php4-posix-4.4.1
php4-session-4.4.1
php4-tokenizer-4.4.1
php4-xml-4.4.1
php4-zlib-4.4.1
pkg_delete: 1 package deletion(s) failed

How do I resolve this? This looks like a huge mess.


If it were me, I'd remove all of those and start over.  Otherwise add a -f 
option to pkg_delete to forcibly remove mod_php4.


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Cheap FreeBSD hosting?

2006-03-24 Thread Philip Hallstrom

On Fri, 24 Mar 2006, RJ wrote:


 http://www.layeredtech.com/layer1.php?g=13


I've got their L2-AMD-BARTON-3000-A (with a scsi drive)...  they've been 
great for me so far...


% uname -a
FreeBSD bravo.pjkh.com 6.0-STABLE FreeBSD 6.0-STABLE #1: Wed Jan 25 
11:10:27 CST 2006 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/ALPHA  i386
[EMAIL PROTECTED]:~/tmp 
% uptime

 4:58PM  up 48 days, 19:39, 1 user, load averages: 0.00, 0.00, 0.00



- Original Message -
From: "Scott I. Remick" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, March 22, 2006 3:08 PM
Subject: Cheap FreeBSD hosting?



Well it seems my "perfect" FreeBSD webhost, which had great service, great
features, and a great support community has been sold-out to a large
webhost consolidation company with a reputation for ruining every company
they buy. They'll also be switching from FreeBSD to Linux.

Since I desire to "eat my own dogfood" and continue to have my sites and
pages "Powered by FreeBSD" I am back in the market looking for a new
webhost.

Currently I pay about $8/month for 12GB of storage, 300GB of
bandwidth/month, and 5 MySQL databases. I need at least 4 databases
(preferably more), and currently average 200-300MB/month transfer
(although I peaked last year one month at 6GB for the month, but that's
rare). I currently use 2.5GB but my space needs will gradually increase.

I'd like to find a comparable plan at a webhost that uses FreeBSD servers.
Pair is out of my league. I've had bad previous experience with iPowerWeb.
Any others?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to

"[EMAIL PROTECTED]"



--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.2.6/287 - Release Date: 21/03/2006






--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.3.0/290 - Release Date: 23/03/2006

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Why are so many people using 4.x?

2006-03-28 Thread Philip Hallstrom

I notice a lot of references to version 4.x.  Is there any overwhelming reason
why its use seems to be still popular.  I'm wanting to set up a server (just
for play) on my home network using a PII machine.  Am I better off using an
older version for such old equipment?  If so, do any particular versions
stand out?


A lot changed b/n 4.x and 5.x (and 6.x).  Enough that a lot of people 
haven't upgraded because what they have works, they know it, and upgrading 
might break an app/system of theirs that isn't broken.


That said, I've gone from 4.x straight to 6.x with my last round of 
servers.  Granted I was starting from scratch and I didn't mind the 
adjustment time (by adjustment I mean getting used to /etc/rc.d/* instead 
of /etc/rc.xyz*, etc.)


If I were you, I'd go with 6.x.

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Apache config question

2006-03-29 Thread Philip Hallstrom

Greetings,
I have a Freebsd 6.0-Release system that I just
installed.  I have installed Apache 1.3.33 from the
ports system.

I can see the index.html file when I point my browser
to the server.  What I can't do is :

browse to : http://server/cgi-bin/cscripts/myscript.cgi

I get a 404 Not found.
The requested URL /cgi-bin/myscript.cgi was not found
on this server.

The file myscript.cgi is located in the /usr/local/www/cgi-bin
directory.  I verified this.

I have added:

deny from all
Options ExecCGI
AllowOverride AuthConfig
Order deny,allow


to the http.conf file.
I did /usr/local/sbin/apachectl stop
/usr/local/sbin/apachectl start.

of course /usr/local/sbin/apachectl configtest says the config file is OK.

What am I missing here ?


deny from all.

Unless I'm reading it wrong, you're denying access to that directory for 
everyone.  There's no "allow from ..." statement.


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: web / php based collaboration

2006-04-08 Thread Philip Hallstrom
This might be a little off the exact topic of this list, so I ask your 
patience in advance.


 I am looking for collaboration software that is PHP based and has the 
following features:


 1 - Ease of config & Maint.
 2 - E-Mail
 3 - Work Flow
 4 - Contact management
 5 - Task List


www.opensourcecms.com

info, demos, etc... lots of choices.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mailgraph install on Freebsd 5.4 help

2006-04-14 Thread Philip Hallstrom

I went and installed the mailgraph-1.12_1 from a newly cvsup'd ports
collection ..it installed fine BUT im running into to things
when i try to start mailgraph from the rc scripts this is what i get

loqtis# cd /usr/local/etc/rc.d/
loqtis# ./mailgraph.sh start
net.inet.tcp.blackhole: 2 -> 2
net.inet.udp.blackhole: 1 -> 1
Starting mailgraph.
/usr/local/sbin/mailgraph.pl: not found

but i do a ls -al of the mailgraph.pl and IT IS there

loqtis# ls -la /usr/local/sbin/mailgraph.pl
-r-xr-xr-x  1 root  wheel  25164 Apr 14 11:49 /usr/local/sbin/mailgraph.pl

Id really like to start this via the rc script ...but how ?


So i try to run it by hand by doing;
perl /usr/local/sbin/mailgraph.pl --logfile /var/log/maillog
--daemon-rrd=/var/db/mailgraph --daemon-pid=/var/db/mailgraph/mailgraph.pid
--daemon

it does start but how do i access the info ?  i tried accessing it at


Where is perl installed?  Check the first line of 
/usr/local/sbin/mailgraph.pl and see if that agrees with where you really 
have perl installed.


Same for the cgi scripts...

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: how to be a freeBSD mirror

2005-04-05 Thread Philip Hallstrom
http://www.freebsd.org/doc/en_US.ISO8859-1/articles/hubs/index.html
On Tue, 5 Apr 2005, Rakotomandimby (R12y) Mihamina wrote:
Hello,
We're the stuff of the free software department at the university of
Orléans (France)
We'd like to be a mirror of freee BSD (all arches, all branches)
What documentation would you recommend us to read about technical tips
and admnistrative request to the FreeBSD project team?
The  server is running Debian/Linux.
--
Get a fully managed dedicated server for ¤200/month ($257/month)
No time limit for taking care of your server.
You keep the "root" acces if you want. Billing periods are 3 months.
See the conditions at http://aspo.rktmb.org/activities/managed_servers
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: too many illegal connection attempts through ssh

2005-04-06 Thread Philip Hallstrom
shown below is snapshot of too many illegal attempts to login to
my server from a suspicious hacker. this is taken from the
"/var/log/auth.log". my question is, how do i automatically block
an IP address if it is attempting to guess my login usernames?
can i configure the firewall to check the instances a certain IP
has attempted to access/ssh the sevrer, and if it has failed to
login for about "x" number of attempts, it will be blocked
automatically?
This question is asked on the list ever so often - see the archives
for suggestions. These are automated attacks, they come regularly
as crackers, black hats or script kidies scan across the net.
Does anybody know what robots beeing used? And on what systems? All
you mention later in your posting is true of course and I needn't
care about these logs, but it's like like somebody unknown puts 10
flyers in your letterbox every night. I'm sure, one night you'll hide
and build a trap for that person. I'm too lazy to enter those
net-circles for finding these robots, but maybe some other has
already done that?
I haven't done that, but if you don't like them you can block them fairly 
easily... I wrote a little script in PHP (not that it would be hard to 
re-write in perl or whatever) that watches /var/log/auth.log and if it 
sees an invalid login, it adds a firewall rule to block that IP.

Then I've got a separate cronjob that removes those firewall rules a 
couple minutes later.

Yes, I have locked myself out of my own server when I mistype my password, 
but I just wait a minute and it lets me back in.

I thought about modifying it so instead of outright blocking it, it put 
it into a pipe that limited it's bandwidth to almost nil just to hold the 
thing up a bit, but this works for me..

http://www.pjkh.com/sshmonitor/
-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Recommended search engine for web pages and maybe email?

2005-04-06 Thread Philip Hallstrom
Hi all -
	Recently I've found myself searching the freebsd ports web site 
quite frequently as well as some other online documentation (php, mysql, 
postgresql, freebsd faq/handbook) and it always bothers me because I know 
I can mirror that stuff and search it locally and in general cut down on 
their load.

It's been a long time since I've setup any search engines/spiders to do 
this sort of thing.  In the past I've used htdig and mnogosearch.

I was hoping someone out there could tell me which one of those (or a 
third such as openfts?) I should install and get going to save me some 
time trying them all out.

I think the only feature I really care about is being able to limit the 
search to a particular collection (freebsd ports, php manual, etc.)

As an aside, I've got about 60mb (~ 5,000 messages) stored in pine's mbox 
format that I occasionally grep through, but would be nice if it was 
little more advanced...

I've also thought maybe I should just host it on an external server, and 
only allow my hosts and google's indexer to crawl it and just rely on 
google.

Suggestions?  recommendations?
Thanks!
-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Installing PCI modem in machine with 4 serial ports (HELP!)

2004-01-05 Thread Philip Hallstrom
Hi -
I've got a little computer that has four serial ports built-in to
the motherboard.  I want to add a PCI modem (USR 5610B) and am having a
devil of a time.  I know this modem works since I've used it (well,
another one just like it) in another machine no problem.

Here's the computer's board:
http://www.orbitmicro.com/products/embedded%20boards/via/EBC-569.htm

The last time I did this it just worked.  However, this bit from the
Handbook has me concerned:

---
These are the four serial ports referred to as COM1 through COM4 in the
MS-DOS/Windows world.

Note: If you have an internal modem on COM4 and a serial port at COM2,
you will have to change the IRQ of the modem to 2 (for obscure technical
reasons, IRQ2 = IRQ 9) in order to access it from FreeBSD. If you have a
multiport serial card, check the manual page for sio(4) for more
information on the proper values for these lines. Some video cards
(notably those based on S3 chips) use IO addresses in the form of 0x*2e8,
and since many cheap serial cards do not fully decode the 16-bit IO
address space, they clash with these cards making the COM4 port
practically unavailable.

Each serial port is required to have a unique IRQ (unless you are
using one of the multiport cards where shared interrupts are supported),
so the default IRQs for COM3 and COM4 cannot be used.
---

I rarely use modems, and am even less proficient at messing around with
IRQ stuff.  What I'm concerned about is that it seems to say you can only
have 4 serial ports (COM1 -> COM4) total... which means I'm kind of
screwed.

I've tried disabling all of the serial ports via the BIOS, but it doesn't
help...

If anyone out there has any light to shed on how to get this working I'd
appreciate it.

Thanks!

-philip
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Installing PCI modem in machine with 4 serial ports (HELP!)

2004-01-05 Thread Philip Hallstrom
Oops... you're right.  FreeBSD 4.9-RELEASE.  Never tried it with windows.
However, I've put this exact card into a different server (with only two
serial ports) and it is found as sio4 and works perfectly.

In the broken machine the boot message says what you have below, that it's
moving it to sio4, and I did make the devices (did the same things I did
for the machine that works) but still nothing.

For now I'll just use the other machine, but it's irksome...

-philip

> To start with you are very light with details about your
> environment, like what version of FBSD you are running and when you
> say the modem works, you failed to say if it worked in an FBSD
> system or MS/Windows system.
>
>
> For your info many of the PCI modems on the market are manufactured
> specially for MS/windows and are missing the onboard controller. The
> controller function is performed by the modem driver you have to
> load into MS/windows. If you have one of those winmodems but it back
> in your windows box where it belongs.
>
> Lets assume your modem has the onboard controller.
> Have you reviewed the boot log  /var/run/dmesg.boot file?
> It may be found as (unknown) in that case it may be an winmodem for
> sure, or you have installed FBSD on an pre Y2K PC and it's bio's are
> giving FBSD problems.
> Adding  device puc  to your kernel source and recompiling your
> kernel will fix this problem.
>
> The other condition is the your modem is found at boot time and is
> moved to sio4 which is really com5 which in not defined in the 4.x
> versions of FBSD.
>
>   sio0:  port
> 0xe400-0xe407,0xe000-0xe0ff,0xdc00-0xdcff mem 0xe200-
>   sio0: moving to sio4
>   sio4: type 16550A
>
>Sio4 is internal device cuaa4.
>For some unknown reason this device is not in the device table
> for 4.x versions
>You have to create it manually by doing the following commands.
>
>   cd /dev
>   ls -l /dev/cuaa4shows as not found
>   sh MAKEDEV cuaa4run script to make the device.
> MAKEDEV must be in caps.
>   ls -l /dev/cuaa4now shows it's there
>
>   Device cuaa4 is the device you tell user ppp to use to connect with
> your PIC modem.
>
> If you are running 5.x version of FBSD then you do not have to
> makedev it auto in 5.x.
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Philip
> Hallstrom
> Sent: Monday, January 05, 2004 1:03 PM
> To: [EMAIL PROTECTED]
> Subject: Installing PCI modem in machine with 4 serial ports (HELP!)
>
> Hi -
> I've got a little computer that has four serial ports
> built-in to
> the motherboard.  I want to add a PCI modem (USR 5610B) and am
> having a
> devil of a time.  I know this modem works since I've used it (well,
> another one just like it) in another machine no problem.
>
> Here's the computer's board:
> http://www.orbitmicro.com/products/embedded%20boards/via/EBC-569.htm
>
> The last time I did this it just worked.  However, this bit from the
> Handbook has me concerned:
>
> 
> ---
> These are the four serial ports referred to as COM1 through COM4 in
> the
> MS-DOS/Windows world.
>
> Note: If you have an internal modem on COM4 and a serial port at
> COM2,
> you will have to change the IRQ of the modem to 2 (for obscure
> technical
> reasons, IRQ2 = IRQ 9) in order to access it from FreeBSD. If you
> have a
> multiport serial card, check the manual page for sio(4) for more
> information on the proper values for these lines. Some video cards
> (notably those based on S3 chips) use IO addresses in the form of
> 0x*2e8,
> and since many cheap serial cards do not fully decode the 16-bit IO
> address space, they clash with these cards making the COM4 port
> practically unavailable.
>
> Each serial port is required to have a unique IRQ (unless you
> are
> using one of the multiport cards where shared interrupts are
> supported),
> so the default IRQs for COM3 and COM4 cannot be used.
> 
> ---
>
> I rarely use modems, and am even less proficient at messing around
> with
> IRQ stuff.  What I'm concerned about is that it seems to say you can
> only
> have 4 serial ports (COM1 -> COM4) total... which means I'm kind of
> screwed.
>
> I've tried disabling all of the serial ports via the BIOS, but it
> doesn't
> help...
>
> If anyone out there has any light to shed on how to get this working
> I'd
> appreciate it.
>
> Thanks!
>
> -philip
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Random complete lockups while writing to compact flash...

2004-01-26 Thread Philip Hallstrom
Hi -
I have an EBS-1569PS system...

http://www.orbitmicro.com/products/embedded%20systems/EBS-1569PS.htm

... that has an onboard compact flash slot.  The BIOS sees the card as
ad2.  It's also got a hard drive in there that I've installed 4.9 on.

I'm getting random lockups while writing to that flash card.  Here's what
I'm doing:

fdisk -BI ad2
disklabel -Bw ad2s1 auto
disklabel -e ad2s1 (creating a single a partition)
newfs /dev/ad2s1a
mount /dev/ad2s1a /mnt
setenv DESTDIR /mnt
cd /path/to/4.9-RELEASE/bin
sh install.sh

This then copies over all those files onto /mnt.  Sometimes it works fine,
but most of the time I get a complete lockup somewhere through the
process.  Never happens at the same file, never happens at the same time
(sometimes very early, sometimes very late).

No logs.  Can't ping.  CTRL-ALT-DEL doesn't work. Nothing.

I'm going to go buy another flash card and give that a try since maybe
I've just got a bad one, but if anyone has any other ideas (like perhaps
the computer hardware is just broken when it comes to writing to that
flash card) I'd appreciate hearing about it before I tear all my hair out.

Thanks!

-philip
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Any experience with iPowerWeb.com's dedicated FreeBSD server package?

2004-02-07 Thread Philip Hallstrom
Hi -
I was wondering if any of you have used iPowerWeb.com's dedicated
server package that runs on FreeBSD?

Seems like a good deal.  For $50/mo you get full root access on your own
box and can do whatever you want.

http://www.ipowerweb.com/products/dedicatedserver/index.html

If anyone has used this service and has any insights into how good it
really is, please let me know.  Or, if you've done something similar with
someone else...

Thanks!

-philip
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


ppp -auto dials immediately? (already tried the usual things)

2003-09-12 Thread Philip Hallstrom
Hi -
I'm setting up ppp for the first time and it works with one
exception.  It always dials immediately.  I've done the usual things and
stopped all the processes, etc...  What's weird is that logging seems to
indicate that this is causing it:

tun0: TCP/IP: OUT <0>: fe80::230:1bff:feae:22e7 ---> ff02::1:ffae:22e7 (72)

which looks like ipv6 which I'm *not* using... which makes me, well, very
confused.

The entire log snippet (about 4k) is at the url below.

http://www.adhesivemedia.com/~philip/ppp.log

Anyone have any ideas as to what is causing it to dialup?

thanks -philip

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ppp -auto dials immediately? (already tried the usual things)

2003-09-12 Thread Philip Hallstrom
> On Fri, Sep 12, 2003 at 03:29:21PM -0700, Philip Hallstrom wrote:
> > Hi -
> > I'm setting up ppp for the first time and it works with one
> > exception.  It always dials immediately.  I've done the usual things and
> > stopped all the processes, etc...  What's weird is that logging seems to
> > indicate that this is causing it:
> >
> > tun0: TCP/IP: OUT <0>: fe80::230:1bff:feae:22e7 ---> ff02::1:ffae:22e7 (72)
> >
> > which looks like ipv6 which I'm *not* using... which makes me, well, very
> > confused.
>
> You may not be using it, but the log shows that it is configured.
> Disable it in your kernel.

Seriously?  There's no other way around it?
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: system cloning

2005-06-10 Thread Philip Hallstrom

Here's my scenario:

I have a system that we are running in production that there was an oversight 
on, and it has a single hard drive installed (32GB SCSI I believe), rather 
than a 3 drive raid5 array.  We would like to correct this, but we have all 
sorts of up-to-date packages and config files that we've tweaked that we 
would hate to just start over on it.


There's a tool for OSX called "Carbon Copy Cloner" that would take care of 
this for me, which is basically a series of copy commands that takes the 
filesystem from one drive to another, preserving EVERYTHING important, and 
then bless the boot volume.


Is there anything similar I can do on FreeBSD?  My boss thinks I should be 
able to tar up the entire filesystem, create the raid array, and untar the 
whole thing on the new array.  I seem to think this will fail due to block 
devices that have changed, fstab entries that have changed (though this is 
correctable), and symlinks that don't nicely come across.


Not that I do this a lot, but I think you'll run into problems using tar, 
cp, and rsync when it comes to various special files or files with holes 
in them (sparse files).  I've always read that dump/restore is the safest 
way to do something like this.


When I have done it, I boot off of a live CD on the server in question.

Then somewhere else I have an NFS server running.  Mount the share on your 
live CD box.  dump each partition to the share.


Then install the new hard disks...

Then boot the box off the live cd again, mount the share, do whatever 
fdisk'ing and disklabel'ing and newfs'ing is necessary to get the 
partitions you want and restore each of the dumps (in the right order of 
course).


It's worked for me...

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: system cloning

2005-06-13 Thread Philip Hallstrom
I have a system that we are running in production that there was an 
oversight on, and it has a single hard drive installed (32GB SCSI I 
believe), rather than a 3 drive raid5 array.  We would like to correct 
this, but we have all sorts of up-to-date packages and config files that 
we've tweaked that we would hate to just start over on it.


There's a tool for OSX called "Carbon Copy Cloner" that would take care of 
this for me, which is basically a series of copy commands that takes the 
filesystem from one drive to another, preserving EVERYTHING important, and 
then bless the boot volume.


If you want two more identical drives then use dump, not tar, but you'd have 
to have them sliced/partitioned up the same beforehand and it wouldn't do 
bootblocks.


You would?  Why?  restore doesn't care where you're restoring to... you'd 
just need to make sure you were in / before restoring and then tweak 
/etc/fstab to suit...


right?

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: df: root partition at 108% capacity! Can't find why...

2005-06-15 Thread Philip Hallstrom

Hi All,

df: root partition at 108% capacity! Can't find why...

After searching google freebsd.org I am no nearing to figuring this out, 
other than this is a "known" problem. Either I or the system managed to get 
the root partition back to under 100% but only just... I have looked for any 
large files that might be taking up space but have yet to locate anything 
over 3meg.


Any suggestions, ideas, thoughts gratefully received.


cd /
du -hsx *

-h  "Human-readable" output.  Use unit suffixes: Byte, Kilobyte,
 Megabyte, Gigabyte, Terabyte and Petabyte

-s  Display an entry for each specified file.  (Equivalent to -d 0)

-x  File system mount points are not traversed.

Look for the largest directly, cd into that and repeat until you get down 
far enough to find the offender.


Works for me...

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Running Programs from CRON as root

2005-06-29 Thread Philip Hallstrom

On Wed, 29 Jun 2005, Gerard Seibert wrote:


I am not sure how to go about this. If I do not want to touch the system
CRON, is it possible to create a personal CRON that could  run two
programs, both at the super user level"

Example:

I want to update the ports tree and then run portmanager to install the
updates. These obviously have to be run as root. Is there a way I can
force this to happen without actually leaving the system logged in as
root?


Sure... as root, type "crontab -e" and put in your entries according to 
the crontab format.  This will store the entries in root's personal cron 
file.  Not /etc/crontab...


Save the file.

Logout.

I find it helpful to paste this at the top of my crontab files to help me 
remember the format...



##
#
# field allowed values
# - --
# minute0-59
# hour  0-23
# day of month  1-31
# month 1-12 (or names, see below)
# day of week   0-7 (0 or 7 is Sun, or use names)
# command   /path/to/cmd arg1 arg2
#
##
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: recommended behaviour for "example" configuration files

2005-06-30 Thread Philip Hallstrom

Kindly advice what is recommended actions for the "example"
configuration files after the port application install.

From the point of package database the removing or moving those files
will cause database inconsistency.

From the point of administrator to have a lot of useless files in
configuration directories is unwanted .

Example: after installations of amavis-new port there was 3 sample
files in /usr/local/etc/ directory:

*amavisd.conf-default
*amavisd.conf-dist
*amavisd.conf-sample


I tend to leave them there unless it's an application I'm really familiar 
with as I find the samples tend to have pretty good comments and I might 
want to go back and look at them.


I agree though, they do get in the way at times, but when I have removed 
them, I don't remember pkg_delete every complaining about it... maybe a 
warning that it couldn't find the file (which might be a problem if you 
for other pkg_* commands)...


-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: VNC multiplexer

2005-06-30 Thread Philip Hallstrom

On 6/26/05, Anthony Chavez <[EMAIL PROTECTED]> wrote:

I've got a client that would like to be able to connect to VNC servers
behind a FreeBSD gateway.  Said servers are assigned dynamic IPs via
DHCP, so port mapping (via pf) is not an option (AFAIK).  However, we
intend to make use of dynamic DNS, so they will at least have hostnames.


I missed the first part of this, but would proxying the VNC connections 
through an intermediate SSH server help at all?


http://www.pjkh.com/wiki/vnc_through_an_ssh_proxy

You could setup individual SSH tunnels for each machine in question.  The 
tunnel would stay the same regardless of the IP... and the VNC viewer 
would connect to localhost so you'd never really need the server IP.


Anyway, just a thought...

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: OT: Shell script

2005-07-11 Thread Philip Hallstrom

All,

I am trying to write an SH script that i need some functionality.

I want it to be able to get a filename without the extention on the end.

for example.

file.mp3

i would like it to return 'file'.


Probably lots of ways.

Use sed in a pipe...

sed 's/\$//'

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: OT: Shell script

2005-07-11 Thread Philip Hallstrom

I am trying to write an SH script that i need some functionality.

I want it to be able to get a filename without the extention on the end.

for example.

file.mp3

i would like it to return 'file'.


basename(1); it's even POSIX, so it's pretty portable.


But only if he knows the file extension before hand...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Using Multiple Internet Connections with FreeBSD

2005-07-13 Thread Philip Hallstrom

To start off, I have a FreeBSD router running Nat and dhcp, it is
currently the router for my LAN.

I was wondering if there was a way to aggregate more then one internet
connection using FreeBSD?

That is, have 2 or 3 internet connections coming in on seperate NICs,
and being able to have the box route and nat the packets accordingly to
the lan, thus giving the experience of more bandwidth. Is it even possible?

Has someone done it before? and if you have, do you have a webpage that
you followed instructions from?


I haven't done it, but I've saved the following email/posts that talked 
about this...  I've left them intact so you can see the context...


good luck!


From [EMAIL PROTECTED] Wed Dec 24 09:35:16 2003

Date: Fri,  3 Nov 2000 18:46:34 -0600
From: Gerd Knops <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: Simon Nielsen <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Subject: Re: Two ISP's. Two IP. One default route...

Simon Nielsen wrote:

Hello

I currently have two internet connections though two different ISP's.
One is a ADSL and another is shared with the rest of my dorm. The
shared line is rather slow because many people are using it.

I must have an IP on the shared connection since that's the only
place where I can be sure to have a non changing IP for my DNS. But
the ADSL is much faster so I would like to use that as much as
possible.

I can give my machine an IP on each connection but I can of course
only set one default route. The default route is currently set to the
ADSL. The problem is that when a connection is made to IP on the
shared connection my computer uses the ADSL IP to respond and that
does not work.

Is there a solution to this? I thought about maybe it is possible to
route differently when a connection is made on the shared connection
but I can't find out how to do it.

Yes, it can be done (though I have not found it documented anywhere). 
I really think there should be separate routing tables for each 
interface, but I don't know of any such feature in any Unix.


However ipfw can be abused for the above task. Assuming:

- ipfw is set to pass on default
- your ADSL IP/network is a.a.a.a/aa
- your shared IP/network is s.s.s.s/ss
- your ADSL gateway is set as default route
- your shared gateway is s.s.s.gw

the following ipfw rules do the trick:

# Pass anything that should go via normal routes
# This rule is really just to speed up the bulk
# of the packets
add 1000 allow all from a.a.a.a to any
# Pass anything to local addresses on ADSL network
add 1010 allow all from any to a.a.a.a/aa
# Pass anything to local addesses on shared network
add 1020 allow all from any to s.s.s.s/ss
# And here the trick: if the source address is the one
# from the shared network, pass packets to the
# gateway on the shared network
add 1030 fwd s.s.s.gw all from s.s.s.s to any

With the above connections will leave your system on the same route 
they entered it. Great for redundant mail and dns setup!


If you already use ipfw you need to adapt the above rules accordingly. 
The important part is that packets coming from your host's shared 
address going to the 'outside' (and only those packets) are forwarded 
to the shared networks gateway.


Gerd



From [EMAIL PROTECTED] Wed Dec 24 09:35:23 2003

Date: Sat, 4 Nov 2000 09:34:48 -0600 (CST)
From: Mike Meyer <[EMAIL PROTECTED]>
To: Simon Nielsen <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Subject: Re: Two ISP's. Two IP. One default route...
Resent-Date: Wed, 24 Dec 2003 10:35:16 -0800 (PST)
Resent-From: Philip Hallstrom <[EMAIL PROTECTED]>
Resent-To: Philip Hallstrom <[EMAIL PROTECTED]>
Resent-Subject: Re: Two ISP's. Two IP. One default route...

Simon Nielsen <[EMAIL PROTECTED]> types:

I currently have two internet connections though two different ISP's.
One is a ADSL and another is shared with the rest of my dorm. The shared
line is rather slow because many people are using it.

I must have an IP on the shared connection since that's the only place
where I can be sure to have a non changing IP for my DNS. But the ADSL
is much faster so I would like to use that as much as possible.


Question: what are you using the static IP for? I.e. - who connects to
it, and vice versa?


I can give my machine an IP on each connection but I can of course only
set one default route. The default route is currently set to the ADSL.
The problem is that when a connection is made to IP on the shared
connection my computer uses the ADSL IP to respond and that does not
work.

Is there a solution to this? I thought about maybe it is possible to
route differently when a connection is made on the shared connection but
I can't find out how to do it.


Well, if you can narrow down who connect on the shared connection, you
can add a route for those addresses pointing to the shared
connection. It's been a

Re: OT: Helpdesk/Call tracking software

2005-07-20 Thread Philip Hallstrom

Never used it, but RT always seems to get good praise...

http://www.bestpractical.com/rt/

On Thu, 21 Jul 2005, Cezar Fistik wrote:


Dear group,

Sorry for OT, but I'm sure someone in this group can help me. I'm
looking for an open source helpdesk/call tracking application for use
in an ISP customer support dept. We need something that will allow us
to register all incomming calls, to assign tasks to different
admnis/engineers according to customer's problem, to be able to see
the status of each opened issue and so on. Nothing unusual.

I made a search and found a number of such applications, but there are
so many...it wouldn't be possible to test all of them. So please just
tell me what you are using and how would you rate it.

Thank you very much.
--
Best regards,
Cezar  mailto:[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: First post

2005-07-22 Thread Philip Hallstrom

Dears,
I'm newbie.I believe that "BSD as server & Linux as desktop".
Now,I have a machine that i wanna install FreeBSD5.4,Slackware10.1,Debian
Sarge & windows on it.
Of course,I installed slackware & WinXP on it.
Please explian me on multiboot process.
Yours,Mohsen.


Hi -

Installing and Using FreeBSD With Other Operating Systems
http://www.freebsd.org/doc/en_US.ISO8859-1/articles/multi-os/index.html

FYI - it helps to use a subject that is relevant to the question you're 
asking.  A lot of people won't even look at this because it isn't obvious 
what you want.  Something like "can I run multiple OS's on the same 
computer" would be better.


Good luck!

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Determine processing holding open a 52+Gig file ...

2005-07-28 Thread Philip Hallstrom
'k, this is the second time its happened ... on a file system that is 
currently 35% full (52G free), all the disk space disappeared ...


Is there a way of finding out what process is holding open this "immense" 
file?


I'm pretty sure lsof can tell you...

either just plain "lsof" or maybe with the directory name...

# lsof +D /tmp
COMMANDPID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
postgres 66218 postgres5u  unix 0xd9c93680  0t0  /tmp/.s.PGSQL.5432
sshd 66325 greg7u  unix 0xd9d02800  0t0  
/tmp/ssh-xIDIHoLn/agent.66325

+D D This  option  causes  lsof to search for all open instances of
directory D and all the files and directories it  contains  to its
complete depth.

Processing  of  the  +D  option does not follow symbolic links within D
unless the -x or -x  l option is also specified.  Nor does  it  search
for open files on file system mount points on subdirectories of D unless
the -x or  -x   f  option  is  also specified.

Note:  the  authority  of the user of this option limits it to searching
for files that the user has  permission  to  examine with the system
stat(2) function.

Further  note: lsof may process this option slowly and require a large
amount of dynamic memory to do it.  This is because it must  descend
the entire directory tree, rooted at D, calling stat(2) for each file
and directory, building a  list  of  all the  files  it finds, and
searching that list for a match with every open file.  When directory D
is large, these  steps  can take a long time, so use this option
prudently.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: 6.0, lighttpd not starting up on boot

2005-11-19 Thread Philip Hallstrom

On 19 Nov 2005 08:39:19 -0500, Lowell Gilbert
<[EMAIL PROTECTED]> wrote:

Pat Maddox <[EMAIL PROTECTED]> writes:


I've got a 6.0 system with lighttpd installed.  I have a
lighttpd_enable="YES" line in /etc/rc.conf, but lighttpd doesn't start
up when the machine boots.  I have another machine with the same
config (though apparently not exactly the same), and lighttpd starts
up with it.  There's nothing in the lighttpd error log, and if I use
the rc script to start it up it starts fine.  How do I find out why
it's not starting on boot, and how do I make it start on boot?


Is it executable?

Try putting an echo or touch command early in the script to see if
it's getting run at boot at all.


It's definitely executable..it's getting run when I run
/etc/rc.d/localpkgs, so it really just makes no sense.


Might have already tried this, but...

What is the value of PATH when you run it manually vs. on boot?

That's what always gets me...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD Stability

2003-01-03 Thread Philip Hallstrom
> On Thu, Jan 02, 2003 at 06:09:11PM -0600, Dave Uhring said:
> > You do realize, I hope, that Linux and Solaris roll over their uptimes
> > at something like 492 days.
>
> from http://uptime.netcraft.com/up/accuracy.html#whichos
> --
> Additionally HP-UX, Linux, Solaris and recent releases of FreeBSD cycle
> back to zero after 497 days, exactly as if the machine had been rebooted
> at that precise point. Thus it is not possible to see a HP-UX, Linux or
> Solaris system with an uptime measurement above 497 days.
> --

It's been years since I've used solaris, but if this is really the case
then how come there's this entry:

26   www.cravath.com   102 ok892   939   940   Solaris 8
Apache/1.3.27 (Unix) PHP/4.2.3

That's certainly more than 492 days... so even if they do reboot, netcraft
is ignoring it or accomodating it seems like.

-philip


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: ZIP Drive

2003-01-17 Thread Philip Hallstrom
Read...

http://www.freebsd.org/doc/en_US.ISO8859-1/articles/zip-drive/x86.html

On Fri, 17 Jan 2003, Schrodinger wrote:

> I'm looking for help with mounting a zip drive under FreeBSD. I have
> Googled around on this but haven't found anyone with the same problem or
> even better a solution.
> I leave the ZIP disk in the drive before booting the kernel like all the
> help files say and it picks it up:
> da0 at vpo0 bus 0 target 6 lun 0
> da0:  Removable Direct Access SCSI-2 device
> da0: 96MB (196608 512 byte sectors: 64H 32S/T 96C)
> But when I try to mount it:
> mount -t msdos /dev/da0 /mnt
> it gives me :
> msdos: /dev/da0: Invalid argument
> Why does this keep happening?? What am I doing wrong?
>
> --
> It takes two to lie Marge, one to lie and one to listen.
> PGP Public Key: http://konundrum.org/schrodinger.asc
>
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: chown and chmod using crontab?

2003-01-27 Thread Philip Hallstrom
Try using the full paths... /bin/chmod and /usr/sbin/chown

On 27 Jan 2003, Jon Reynolds wrote:

> I have a directory that 2 different groups have access to. When one
> group writes to the folder it retains the permissions of that group. I
> need the permissions to change to the permissions of the directory.
>
> I thought I could add a crontab in and run a little script every 1
> minute to set the correct permissions. The script does what it should
> when ran by the cmdline but not when I try to run it from the crontab.
>
> Is it not possible to run chmod and chown on a folder by using a
> crontab?
>
> The entry into my /etc/crontab file looks like this:
>
> 0 *   *   *   root/bin/fixperms
>
> My fixperms file looks like this:
>
> #!/bin/sh
>
> chmod -R 777 /usr/local/ServerFiles
> chown -R staff /usr/local/ServerFiles
>
> Am I doing this right?
>
> Jon
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Deleted files not releasing their space (was Re: syslog messagewrt inodes)

2003-01-28 Thread Philip Hallstrom
(skip down)

On Tue, 28 Jan 2003, Bill Moran wrote:

> David Bear wrote:
> > I'm getting messages like below that I'm out of inodes on /var.
> >
> > asu.edu kernel log messages:
> >
> >>id 25 on /var: out of inodes
> >>  syslogd: /var/log/auth.log: No such file or directory
> >>  syslogd: /var/log/maillog: No such file or directory
> >>  syslogd: /var/log/cron: No such file or directory
> >>  syslogd: /var/log/auth.log: No such file or directory
> >>  syslogd: /var/log/maillog: No such file or directory
> >>  syslogd: /var/log/cron: No such file or directory
> >>  syslogd: /var/log/auth.log: No such file or directory
> >>  syslogd: /var/log/maillog: No such file or directory
> >>  syslogd: /var/log/cron: No such file or directory
> >>  syslogd: /var/log/auth.log: No such file or directory
> >>  syslogd: /var/log/maillog: No such file or directory
> >>  syslogd: /var/log/cron: No such file or directory
> >
> >
> > Filesystem  1K-blocks   Used   Avail Capacity iused  ifree %iused  Mounted on
> > /dev/ad0s1a128990  37232   8144031%1316  149388%   /
> > /dev/ad0s1f257998  4  237356 0%   2  325080%   /tmp
> > /dev/ad0s1g   2341102 508366 164544824%   37711 256175   13%   /usr
> > /dev/ad0s1e257998  25572  21178811%8298  24212   26%   /var
> > procfs  4  4   0   100%  255075%   /proc
> >
> > Last week my var volume did run out of inodes.  I erase some
> > snort logs to free up the inodes.  But it appears the kernel or
> > syslogd doesn't know about it.
> >
> > any pointers on letting the kernel know I have enough inodes?
>
> Let's see if I remember the details on this.
> I believe this happens when a file is deleted, but another program still holds
> a filehandle? to it.  Thus, if you delete Apache's log file (for example) but
> don't restart Apache, the space the logfile is using isn't truely freed.
> (This is why newsyslog.conf has a column for the PID of a process to restart).
>
> So ... if you know which process had the files open, restart it (probably by
> sending it a -HUP).
>
> If you don't know, you can probably cheat and just reboot the machine, but that
> shouldn't be necessary.

lsof can tell you what files are open... and includes the process/pids
that have it open.

-philip


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Need helping lengthening timeouts for sendmail...

2003-01-29 Thread Philip Hallstrom
Hi all -
Two weeks ago nwlink.com upgraded it's mail servers.  Ever since
that time I can not email anyone whose email is handled by those servers.
What's even more frustrating is that my home server, same setup, same DSL
(through nwlink.com even), but on a different subnet cause it's in a
different city, has no problems whatsoever.

The messages I get back from processing the queue manually with a lot of
debugging are:

Running /var/spool/mqueue/h0THo5Sc018988 (sequence 2 of 11)
dowork(/var/spool/mqueue/h0THo5Sc018988)
<[EMAIL PROTECTED]>... Connecting to mx1.pacifier.net. via esmtp...
<[EMAIL PROTECTED]>... Connecting to mx3.pacifier.net. via esmtp...
<[EMAIL PROTECTED]>... Connecting to mx2.pacifier.net. via esmtp...
<[EMAIL PROTECTED]>... Connecting to mx4.pacifier.net. via esmtp...

If I telnet to those IP's above on port 25, it does take about 60-90
seconds to connect, but it does connect.  I've fiddled with the various
Timeout paramaters in my sendmail.cf and submit.cf, but without any luck.

I'm running sendmail 8.12.3 on FreeBSD 4.5-stable.

I've gone round and round with them (for two weeks now) and they agree
there's something wrong, and are now looking into their network issues,
but in the meantime, I need help getting mail to send?

So... is there anyway to get sendmail to just wait and wait and wait for
that connection to appear?  Or is there an easy way to tell it that intead
of trying mx#.pacifier.net to use smtp.nwlink.com instead?

Thanks folks...

this is driving me nuts.

-philip


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Need helping lengthening timeouts for sendmail...

2003-01-29 Thread Philip Hallstrom
I found a temporary hack that solves my most immediate problem of sending
mail to @nwlink.com addresses by adding the following to
/etc/mail/mailertable

nwlink.com  smtp:[smtp.nwlink.com]

Of course any other domains hosted at nwlink.com still fail, but this will
get me by till they fix it.

What would be really cool is if I could add:

mx:mx1.pacifier.net smtp:[smtp.nwlink.com]

and have it redirect all mail that would have gone to mx1.pacifier.net to
smtp.nwlink.com :-)

-philip

On Wed, 29 Jan 2003, Philip Hallstrom wrote:

> Hi all -
>   Two weeks ago nwlink.com upgraded it's mail servers.  Ever since
> that time I can not email anyone whose email is handled by those servers.
> What's even more frustrating is that my home server, same setup, same DSL
> (through nwlink.com even), but on a different subnet cause it's in a
> different city, has no problems whatsoever.
>
> The messages I get back from processing the queue manually with a lot of
> debugging are:
>
> Running /var/spool/mqueue/h0THo5Sc018988 (sequence 2 of 11)
> dowork(/var/spool/mqueue/h0THo5Sc018988)
> <[EMAIL PROTECTED]>... Connecting to mx1.pacifier.net. via esmtp...
> <[EMAIL PROTECTED]>... Connecting to mx3.pacifier.net. via esmtp...
> <[EMAIL PROTECTED]>... Connecting to mx2.pacifier.net. via esmtp...
> <[EMAIL PROTECTED]>... Connecting to mx4.pacifier.net. via esmtp...
>
> If I telnet to those IP's above on port 25, it does take about 60-90
> seconds to connect, but it does connect.  I've fiddled with the various
> Timeout paramaters in my sendmail.cf and submit.cf, but without any luck.
>
> I'm running sendmail 8.12.3 on FreeBSD 4.5-stable.
>
> I've gone round and round with them (for two weeks now) and they agree
> there's something wrong, and are now looking into their network issues,
> but in the meantime, I need help getting mail to send?
>
> So... is there anyway to get sendmail to just wait and wait and wait for
> that connection to appear?  Or is there an easy way to tell it that intead
> of trying mx#.pacifier.net to use smtp.nwlink.com instead?
>
> Thanks folks...
>
> this is driving me nuts.
>
> -philip
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Make Apache case incensitive

2003-01-30 Thread Philip Hallstrom
you might try the mod_speling module...

On Thu, 30 Jan 2003, Jonas Fornander wrote:

>
> Is it possible to make apache case-insensitive so an image called
> myimage.JPG will be found even if the link is MyImage.jpg?
>
> Jonas Fornander - System Administrator
> Netwood Communications, LLC - www.netwood.net
> Find out why we're better - 310-442-1530
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Samba and XP?

2003-01-31 Thread Philip Hallstrom
If you don't want to install samba, find a windows ftp client that is easy
to use... seems I've seen some that pretend to be hard drives on your
desktop... can't remember the name, but the friend that had it seemed to
like it.

-philip

On Fri, 31 Jan 2003, John Wilson wrote:

> Good Day,
>
> I am currently seeking advice in regard to allowing an XP Home Edition
> machine to have access to a FreeBSD mount.  I've looked over Samba, and not
> only have I seen references to XP's inability to join a 'domain
> based-network', but also don't really like the idea of installing Samba as
> it's a rather large package (relatively speaking) for what it simply does.
>
> My only other alternative, if I am correct, is trying to obtain an NFS
> client for the XP machine and simply serve NFS mounts on the FBSD host.  The
> downside to this is the cost of the NFS clients for the XP machine. :)
>
> Are there any other alternatives available here?  If not, which of the above
> two 'solutions' would be best?  I only have one BSD machine and one XP
> machine, and I'd like to allow read/write access to a FBSD mount from the XP
> machine.
>
> Any help or suggestions would be appreciated.
>
> - John
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: FBSD firewall in front of windows IIS servers HOW

2003-02-03 Thread Philip Hallstrom
You could do natd it or use a bridged firewall so to everyone else it
would appear that the Windows box is on the net.  The other nice thing
about the bridge is that you can set it up so that it doesn't have an IP
address at all... which makes it pretty hard to break into :)

Sometimes that can get around some of the issues with self-referencing
urls (whether they are private or public) that happens with natd and proxy
servers...

On Mon, 3 Feb 2003, Peter wrote:

> Hello,
>   Just wondering what would be the best way to do this...
>
>
>   INTERNETFBSD FIREWALLWINDOWS IIS SERVER
>
>
> Basically what would be the best way to have freebsd accept incoming
> connections, run them thru the firewall, and all the packets that pass
> forward them to internal windows machines.  I dont' want the windows
> boxen directly on the net, I want to put a FBSD firewall in front of
> them, and so far the best option I've found on how to do this is to have
> the windows boxen be 192.168.x.x and have the fbsd boxen forward all
> connections to "public_ip" to the windows box via natd.  Does this seem
> like a good plan? Or anyone know of another better way to do this?
>
> --
> Innovation is hard to schedule.
>   -- Dan Fylstra
>
> ---FreeBSD The Power To Serve---
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: building a VPN with FreeBSD 4.7p3

2003-02-04 Thread Philip Hallstrom
http://stuff.adhesivemedia.com/freebsd/vtund.php

is what I use... also check onlamp.com for one of dru's articles about
ipsec.

On Tue, 4 Feb 2003, Marcel Stangenberger wrote:

> Hi everybody,
>
> Does anyone know where i can find some good documentation on building a
> VPN between 2 systems running FreeBSD 4.7p3 ?
>
> Thanks in advance,
>
> Marcel
> --
> It's no surprise that things are so screwed up: everyone that knows how
> to run a government is either driving taxicabs or cutting hair.
> -- George Burns
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Does spamd use Razor?

2003-02-06 Thread Philip Hallstrom
> > Spamd might not be running as root so it may not have write access to
> > /var/log/razor-agent.log.
>
> Indeed, I have spamd running as the special, unprivileged user "spamd". But
> you were right: spamd did not have access to /var/log/razor-agent.log. I
> could have sworn that I had done a "chown spamd:spamd
> /var/log/razor-agent.log" on it. But when I checked it again, it was owned
> by "root:wheel". I must be going senile. :)

Maybe newsyslog (/etc/newsyslog.conf) is changing it when it rotates the
file?

-philip


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Are there Console Based MP3 Players ?

2002-07-25 Thread Philip Hallstrom

Take a look at:

http://www.freebsd.org/ports/audio.html

there are several listed.

On Thu, 25 Jul 2002, MET wrote:

> Are there Console Based MP3 Players ?
>
> I've got a bunch of MP3's neatly organized into folders and was
> wondering if you could just the player to play selected folder's
> contents, if they meet the mp3 criteria.
>
>
> Any ideas?
>
> P.S.  That machine doesn't have X installed, but if I have to I will.
>
> P.P.S Thanks for all the FreeBSD as Desktop replies.
>
> - Matthew
>
>
> /**
>
>   Matthew Metnetsky
>
>   [EMAIL PROTECTED]
>
> **/
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: VPN between 2 FreeBSD servers

2002-07-25 Thread Philip Hallstrom

http://stuff.adhesivemedia.com/freebsd/vtund.php

On Thu, 25 Jul 2002, Lee wrote:

> Hello,
>
> Can anyone point me in the right direction of a tutorial on setting up a VPN
> between 2 FreeBSD 4.6 servers.
>
> I cannot find much in the handbook or on search engines, although I have
> found references to either PPTP or vpnd.
>
> Cheers for your help.
>
> Lee
>
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Company mail system question...

2002-09-19 Thread Philip Hallstrom

Your best bet would be to search these mailing lists for the following
words (not necessarily in the same search).

uw-imap
qpopper
courier
cyrus
postfix
qmail

that will turn up a lot of information on what other people are
recommending.  I myself use uw-imap, but our company is only 7 people so I
don't have any capacity issues to deal with.

On Thu, 19 Sep 2002, Michael Pelletier wrote:

> I am reseaching for a mail system for my company. I would like some
> information for my research. Basically, I would need POP3, IMAP, etc support
> ans many of the client are windoze based. Thanks in advance.
>
> Michael Pelletier
>
>
>
> _
> Chat with friends online, try MSN Messenger: http://messenger.msn.com
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Limit Network Traffic APACHE 1.3

2002-09-23 Thread Philip Hallstrom

There are some apache modules that can do this to various extents, and I
think you could use ipfw's dummynet as well.

On Mon, 23 Sep 2002, Christopher J. Umina wrote:

> Hey peoples,
>
>   How can I limit Apache's use of network traffic?  I want to limit
> it to somewhere around 50 Kb/s because it's a small server on a cable
> connection.  Is that possible?  If so, how can I get it done?
>
>
>   Thanks,
>   Christopher J. Umina
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Limit Network Traffic APACHE 1.3

2002-09-23 Thread Philip Hallstrom

you might try mod_throttle

http://modules.apache.org/search?id=123

as for dummynet, read the ipfw man page.  I think it's a two part
process.. first passing things off to a pipe and then defining the pipe.
So in the first part you'd specify the port.  Never used it though so I
could be wrong.


On Mon, 23 Sep 2002, Christopher J. Umina wrote:

> hmm..
> mod_bandwidth sounds pretty wierd, and people are saying it doesn't work,
> but nowhere can I find how to set a port in a pipe with dummynet..
> Anybody know how to use it?
>
> Do I have to rebuild my kernel?
>
>
> On 24 Sep 2002, Duncan Anker wrote:
>
> > On Tue, 2002-09-24 at 09:14, Christopher J. Umina wrote:
> > > Does anybody know of these modules?  The ipfw thing would limit bandwidth
> > > on the whole server unless I have a tun device, which I don't.  I want it
> > > to be fast in the internal network, but not use too much of the speed
> > > serving to the internet.
> >
> > Doesn't DummyNet allow you to specify which port to limit?
> >
> > Anyway, I think the module you want is (drum roll) mod_bandwidth
> >
> >
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Need a solution

2002-09-26 Thread Philip Hallstrom

There's a tutorial on LDAP which I found interesting at:

http://www.bsdforums.org/forums/showthread.php?threadid=3177

On Wed, 25 Sep 2002, Brian McCann wrote:

>   I've got a slight quandary.  I need a FreeBSD/*nix solution to a
> Microsoft Exchange server.  Basically...Exchange server is what we need
> as far as functionality, but it's way to expensive, and...well...I
> really try not to use M$FT products when it comes to servers.  So...I
> need something that does a directory of contacts (LDAP I assume will
> work), something that will share schedules, and something that will act
> as a mail server and a "public folder" server.  I'm told IMAP CAN do
> this...but is this really the best "groupware" for FreeBSD solution?
> Any suggestions?
>
> Thanks,
> --Brian
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: buried in spams, recommendation?

2002-10-03 Thread Philip Hallstrom

I use spamassassin which is nice since it doesn't send back those
challenge emails (which for whatever reason I just can't do) but every
once in awhile it does flag legit email as spam, so I find once a day I
skim my spam folder for legit stuff...  still cuts down on the INBOX stuff
though.

mwm uses tdma (or tmda - can't remember which way it's spelled :)

-philip

On Thu, 3 Oct 2002, Peter Leftwich wrote:

> Can someone on the list PLEASE recommend a good quarantining filter app?
>
> I know mwm (Mike Someone) out there uses one that issues a challenge via
> reply or reply to all.  Thanks!!
>
> --
> Peter Leftwich
> President & Founder
> Video2Video Services
> Box 13692, La Jolla, CA, 92039 USA
> +1-413-403-9555
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: OT: Looking for command-line jpg editor that could be modified

2002-10-24 Thread Philip Hallstrom
netpbm can do more than convert formats...

jpegtopnm foo.jpeg | pnmscale -width 200 | pnmtojpeg -quality=80 > thumb.jpeg

is perfectly valid...

It's been a long time (maybe a year ago) since I did the test, but
netpbm's output is a lot better and file size is a lot smaller than
ImageMagick... worth checking them both out though.

-philip

On Thu, 24 Oct 2002, Adam Weinberger wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> netpbm is more for converting images to different formats. The
> originator is looking for ImageMagick, which is in the ports tree.
> Install the port and read the manpage for convert(1) and mogrify(1).
>
> You're on your own for making the CGI script. Check out www/gallery if
> you want something that will autogenerate an entire image gallery
> website. Tonight I'm going to commit www/kallery, which has a spiffy KDE
> frontend.
>
> - -Adam
>
>
> >> (10.24.2002 @ 1703 PST): Philip Hallstrom said, in 1.4K: <<
> > take a look at the netpbm package... you'll probably want to pre-generate
> > the thumbnails as it's not super fast (ie, not fast enough to power a
> > website, but fast enough)...
> >
> > -philip
> >
> > On Thu, 24 Oct 2002, Nathan Vidican wrote:
> >
> > > I am looking to try and make a CGI application which can take in a single
> > > argument (the particular image to open), and return an image after scaling
> > > it down to a specific size. All images are the same size, and will all be
> > > scaled down proportionally. Here's the scenario:
> > >
> > > We've got a website, where a lot of pictures are frequently posted from one
> > > of about ten digital cameras. Fortunately all pictures are of the same size,
> > > but unfortunately that's 2048x1563 pixels and around 2Mb jpg to begin with.
> > > We'd like the viewers of the site to be able to selectively download any one
> > > of these high-res pictures, but generate thumbnails of each of the images
> > > and send them out on the pages. So basically I need a program which can
> > > proportionally scale down and return an image (in jpg format). I'd like to
> > > find something preferably written in either C/C++ or PERL. Any ideas or
> > > suggestions would be greatly appreciated.
> >> end of "Re: OT: Looking for command-line jpg editor that could be modified" from 
>Philip Hallstrom <<
>
>
> - --
> Adam Weinberger
> [EMAIL PROTECTED]
> [EMAIL PROTECTED]
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.2.0 (FreeBSD)
>
> iD8DBQE9uJRxo8KM2ULHQ/0RAjWRAJ9ZszJzdBccZ+y3/f5qBwHz9uyrKQCgyA4C
> gBODGzv5W6//4csZuNNiSgM=
> =eWl4
> -END PGP SIGNATURE-
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: OT: Looking for command-line jpg editor that could be modified

2002-10-24 Thread Philip Hallstrom
take a look at the netpbm package... you'll probably want to pre-generate
the thumbnails as it's not super fast (ie, not fast enough to power a
website, but fast enough)...

-philip

On Thu, 24 Oct 2002, Nathan Vidican wrote:

> I am looking to try and make a CGI application which can take in a single
> argument (the particular image to open), and return an image after scaling
> it down to a specific size. All images are the same size, and will all be
> scaled down proportionally. Here's the scenario:
>
> We've got a website, where a lot of pictures are frequently posted from one
> of about ten digital cameras. Fortunately all pictures are of the same size,
> but unfortunately that's 2048x1563 pixels and around 2Mb jpg to begin with.
> We'd like the viewers of the site to be able to selectively download any one
> of these high-res pictures, but generate thumbnails of each of the images
> and send them out on the pages. So basically I need a program which can
> proportionally scale down and return an image (in jpg format). I'd like to
> find something preferably written in either C/C++ or PERL. Any ideas or
> suggestions would be greatly appreciated.
>
> --
> Nathan Vidican
> [EMAIL PROTECTED]
>
>
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: dhcp option to *not* overwrite /etc/resolv.conf

2002-10-28 Thread Philip Hallstrom
Never tried it, but you could look for the spot in the various rc* files
that setup dhcp and once it's done re-write /etc/resolv.conf with what you
want it to be...

?

On Mon, 28 Oct 2002, Paulo Roberto wrote:

> Hi,
>
> I have read the man pages, searched a few forums, but I did not found a
> way to prevent dhcp to do not change my /etc/resolv.conf. I do not have
> access to the dhcp server configuration, so I need to change it on my
> client. I also tried to chmod it to only read mode, but that did not
> work out. Any tips?
>
> thanks
>
> Paulo
>
> __
> Do you Yahoo!?
> Y! Web Hosting - Let the expert host your web site
> http://webhosting.yahoo.com/
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Separating the OS from the data - tough to do?

2002-10-31 Thread Philip Hallstrom
> -- Problem:
> Separating OS from underlying data. Which parts of the BSD OS are not part
> of the initial, never modified OS? Or, which pieces of the OS change due to
> useage.
>
> -- Goal:
> To have a slightly modified BSD OS structure where the OS can be upgraded,
> yet the variable data remains the untouched (DNS, websites, mail etc), on
> another partition or disk, allowing an OS upgrade that can be as "plug &
> play" as possible.
>
>
> -- THEORY --
>
> At first glance it looks like I can just move and soft link a few
> directories, /etc, /usr/local, /usr/home (websites) and /var. However if one
> upgrades the OS, is it possible to have all the installed apps separate?
>
> For example, I have Apache, MySQL and PHP installed. By moving/linking
> /usr/local to another partition or disk, is it possible that these apps will
> run properly once the OS is upgraded and the soft link re-setablished? Will
> /var still function properly? Will MySQL re-write the DB files somewhere
> else next time it is optimized or repaired?
>
> All thoughts, ideas and input gratefully received. Hopefully this discussion
> will be of use to a few more people that just me :)

What I've done which has worked for me so far is to create /usr/local and
/local as separate partitions.

FreeBSD doesn't use /usr/local by default, so everything that's in there
is stuff I built from ports (vim, netpbm, etc...), but aren't *critical*
in the sense that Apache is critical on my webserver.

I then create:

/local/home
/local/www/apache_1.2.27
/local/www/apache (symlink to above)
/local/www/sites
/local/www/sites/site_one
/local/www/sites/site_two
/local/tmp
/local/db/
local/db/mysql...
...



Then everything I build (apache, php, mysql, etc.) I put into /local.
This does require changing ld_config in /etc/rc.conf to look for libraries
and includes in the right places, but that's no big deal.

And all application specific logging (ie. apache) goes in /local/ not in
/var.

This way I can backup /local and /usr/local (or just /usr/local/etc if I
remember what ports I've installed) and I'm done.

The other nice thing about the above setup is you can install a new
version of apache, configure it to run on say port 81, and test it out
using your existing sites.  Once you're happy, tweak the config, repoint
the symlink and you're done.

And it's nice because if you decide you don't want apache anymore just rm
-rf /local/www/apache* and it's *all* gone.  No guessing where things are.

just my 2 cents.

-philip



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Apache,PHP and FreeBSD

2002-11-01 Thread Philip Hallstrom
In addition to the other comments, it would be worth your time to browse
the following sites (some PHP, some general freebsd tutorials that have
apache/php stuff on them)

www.freebsddiary.org
www.zend.com
www.php.net
www.phpbuilder.com

have fun!

On Fri, 1 Nov 2002, Bryan Cassidy wrote:

> Hello everyone. I have been messing around with html lately and think its pretty 
>cool. I want to start using PHP with apache and buy my own domain. My question is 
>this: What is a good site to get domains from that has a reasonable amount of space 
>and doesnt cost too much? Does anyone know of any good tutorials online for 
>PHP,Apache and FreeBSD? Of course I will be using this on my freebsd machine so docs 
>or tutorials about this related to freebsd would be nice. I am going to start working 
>on this tomorrow sometime so I would appreciate some info. thanks
>
> ---
> E-Mail: Bryan Cassidy <[EMAIL PROTECTED]>
> Operating System: FreeBSD 4.6.2
> Gaim: bsdsys
> Yahoo Messenger: bsdsys
>
> Please do not simply Reply-To: Bryan Cassidy
> <[EMAIL PROTECTED]> It is OK to Cc: me as long as you send the
> Reply back To: the original mailing lists. I have put alot of time in
> setting up filters so please don't simply reply to me unless I tell
> you to or send you one directly.
>
>_     
>   |  ___| __ ___  ___| __ ) ___||  _ \
>   | |_ | '__/ _ \/ _ \  _ \___ \| | | |
>   |  _|| | |  __/  __/ |_) |__) | |_| |
>   |_|  |_|  \___|\___|//|/
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Phoenix does nothing

2002-11-04 Thread Philip Hallstrom
Is this the first time you've installed it?  If I remember right they said
that going from .3 to .4 meant completely removing your .phoenix
directory.

The linux-phoenix has worked fine for me... (on 4.6)

On Tue, 5 Nov 2002, Richard Tobin wrote:

> I just built phoenix from the ports, having cvsup'd ports
> immediately before.  It compiles and installs, but when I run it
> nothing happens.  It just exits after a few seconds, without putting
> up any windows or printing anything.  Nothing on the console or in
> /var/log.  It has created a .phoenix directory full of mozilla-y
> stuff.
>
> I'm running 4.7-RELEASE.  Mozilla 1.1 works.
>
> Any suggestions?
>
> -- Richard
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Port managment

2002-11-07 Thread Philip Hallstrom
Not specific answers, but take a look at the portupgrade and porteasy
ports... they do port management and might be able to answer your
questions.

-philip

On Fri, 8 Nov 2002, Lefteris Tsintjelis wrote:

> Hi,
>
> I would like some help with port/file managment. I am trying to figure
> out a way of how to clean a system from any unused ports/files or have
> some knowledge of what is going on.
>
> I have acrually a few questions:
>
> 1)How can I find ports that do not depend in any other ports?
> 2)How can I find files that are unused by any port?
> 3)How can I find modified files?
> 4)How can I find missing port files?
> 5)_AND_ (yes finally) How can I find missing port dependencies?
>
> I hope I am not asking for too much now, am I? :)
>
> Thanks,
>
> Lefteris
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Re: Monitor tools

2002-11-11 Thread Philip Hallstrom
snmp for reporting all kinds of things and mrtg to graph it.

for cpu temp take a look at the xmbmon, healthd, and lmmon ports (depends
on your board)

On Mon, 11 Nov 2002, Mark wrote:

> Hi
>
> Soon I will be running a (new) FreeBSD 4.7 server. I was wondering whether
> there are tools available to monitor critical server statistics (such as
> status of RAID, CPU temp, etc), via a remote client machine in the network
> (like Windoze XP)?
>
> Thanks!
>
> - Mark
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



Complete lockup when using Compact Flash via ATA mode.

2002-11-11 Thread Philip Hallstrom
Hi -
I'm not sure I've got my terminology exactly right, but here's my
problem.  I've got a small server that has a compact flash card slot
built-in so that it appears as a standard hard drive (the BIOS sees it as
HDD2 and FreeBSD as /dev/ad2).  I'm trying to install FreeBSD onto this
drive from source cvsupped a day or two ago.

However, part way through (and it's never at the same place) the entire
machine completely locks up.  No messages to the console, nothing in log
files, zip.  But the entire machine is completely frozen.

Once I had it happen while doing a "rm -rf *" in the directory I'd mounted
it to.

However, I've also used rawio to write a 220 meg file (the card is 256 and
freebsd says there's 222 available) without problems and set it to
randomly write 1 meg files all night long and it was still up in the
morning.

So my question is do I have a flaky flash card?  Or a bad controller of
some sort?  Or something else?

And is there any way to figure out what it is (without purchasing more
cards :) or map around the "bad spot" or?

Server info: http://www.nexcom.com/product/ebc/ebs1569/1569ps.htm

Thanks all!

-philip


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message



  1   2   3   >