Help Plz... Cron Job question....hellp...
Hello Gurus…. I am running a status script written in Perl (*status.pl*) and want to have it *Always Running*. How can I check through CRON that "status.pl" is running and if NO, then start the script execution again? Please help and advise… With a bundle of thanks! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help with Cron pleazzzzzzzzzzzz
Hello Gurus…. I am running a status script written in Perl (*status.pl*) and want to have it *Always Running*. How can I check through CRON that "status.pl" is running and if NO, then start the script execution again? Please help and advise… With a bundle of thanks! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
How to select/choose new NIC under FreeBSD?
Hello there, At my work, I have a Dell PowerEdge2950 running FreeBSD 7.0, Webserver. This server has onboard Broadcom NetXtreme II BCM5708 1000Base-T with 2 ports. But we have faced watchdog timeouts and after googling and getting help on this great forum, we were able to figure out that this is Broadcom incompatibilty. So, we have bought Intel Pro 1000PT Single Port Gigabit PCIe Cu now. Which I am going to install in the server but before; I need some information, where I seek you guys help??? 1. How to tell FreeBSD to which NIC to use? 2. Where else I should make changes under /etc folder? I will aprecaite your help! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How to select/choose new NIC under FreeBSD?
thanks Guys really good help! Cheers! VJ On Fri, Sep 26, 2008 at 1:49 PM, VeeJay <[EMAIL PROTECTED]> wrote: > Hello there, > > At my work, I have a Dell PowerEdge2950 running FreeBSD 7.0, Webserver. > This server has onboard Broadcom NetXtreme II BCM5708 1000Base-T with 2 > ports. But we have faced watchdog timeouts and after googling and getting > help on this great forum, we were able to figure out that this is Broadcom > incompatibilty. > So, we have bought Intel Pro 1000PT Single Port Gigabit PCIe Cu now. Which > I am going to install in the server but before; > I need some information, where I seek you guys help??? > > 1. How to tell FreeBSD to which NIC to use? > 2. Where else I should make changes under /etc folder? > > I will aprecaite your help! > -- > Thanks! > > BR / vj > -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Any help about FreeBSD & Dell's Troubleshooting Tool DSET
Hello Jeremy,
Thanks for the feedback... here is the configuration of server:
*2 x PE2950 III Quad Core Xeon E5450 3.0GHz,2x6MB,1333FSB
*Riser with PCI Express Support (2x PCIe x8 slots; 1x PCIe x4 slot)
PE2950 English rack power cord
PE2950 Bezel Assembly
*16GB (8x2GB Dual Rank DIMMs) 667MHz FBD
6 x 450GB SAS 15k 3.5" HD Hot Plug
*PE2950 III - Chassis 3.5HDD x6 Backplane
*PERC 6/i, Integrated Controller Card x6 backplane
*CD/DVD Drive Cable
8X DVD-ROM Drive IDE
PE2950 III Redundant Power Supply No Power Cord
Rack Power Distribution Unit Power Cord
TCP/IP Offload Engine 2P
Broadcom TCP/IP Offload Engine functionality (TOE) Not Enabled
Drac 5 Card
*PE2950 III C5 MSS R10 Add-in PERC 5/i / 6/i*
Attached is also screen dump from the server:
I would apprecaite any help
VJ
--
Hello Guys
I am in a situation here. I am running couple of Dell 2950 Servers with
FreeBSD 7.0 amd. There seemed to be a problem related to RAID controller on
one server. From Dell support, I was told to download a troubleshooting tool
called DSET. (
http://support.dell.com/support/topics/global.aspx/support/en/dell_system_tool?c=us&l=en&s=gen)
But that is for Linux distributions.
So, I am just in middle of no where :(
Could you guys guide me that how to install and run this tool on my server
in order to diagnose problem?
--
Thanks!
BR / vj
--
This question should have gone to -hardware or -stable.
It depends on what RAID controller is installed in the box, and what
problem you're actually having ("There seemed to be a problem with the
RAID controller" tells us nothing).
I believe others have some experience with PERC controllers, but as I
said, we don't know what hardware you have.
--
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking http://www.parodius.com/ |
| UNIX Systems Administrator Mountain View, CA, USA |
| Making life hard for others since 1977. PGP: 4BD6C0CB |
Hello Guys
I am in a situation here. I am running couple of Dell 2950 Servers with
FreeBSD 7.0 amd. There seemed to be a problem related to RAID controller on
one server. From Dell support, I was told to download a troubleshooting tool
called DSET. (
http://support.dell.com/support/topics/global.aspx/support/en/dell_system_tool?c=us&l=en&s=gen)
But that is for Linux distributions.
So, I am just in middle of no where :(
Could you guys guide me that how to install and run this tool on my server
in order to diagnose problem?
--
Thanks!
BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Any Help about Dell PERC 6/i, FreeBSD and DSET troubleshooting tool???
Hello Jeremy,
Thanks for the feedback... here is the configuration of server:
*2 x PE2950 III Quad Core Xeon E5450 3.0GHz,2x6MB,1333FSB
*Riser with PCI Express Support (2x PCIe x8 slots; 1x PCIe x4 slot)
PE2950 English rack power cord
PE2950 Bezel Assembly
*16GB (8x2GB Dual Rank DIMMs) 667MHz FBD
6 x 450GB SAS 15k 3.5" HD Hot Plug
*PE2950 III - Chassis 3.5HDD x6 Backplane
*PERC 6/i, Integrated Controller Card x6 backplane
*CD/DVD Drive Cable
8X DVD-ROM Drive IDE
PE2950 III Redundant Power Supply No Power Cord
Rack Power Distribution Unit Power Cord
TCP/IP Offload Engine 2P
Broadcom TCP/IP Offload Engine functionality (TOE) Not Enabled
Drac 5 Card
*PE2950 III C5 MSS R10 Add-in PERC 5/i / 6/i
*Attached is also screen dump from the server:
I would apprecaite any help
VJ
--
Hello Guys
I am in a situation here. I am running couple of Dell 2950 Servers with
FreeBSD 7.0 amd. There seemed to be a problem related to RAID controller on
one server. From Dell support, I was told to download a troubleshooting tool
called DSET. (
http://support.dell.com/support/topics/global.aspx/support/en/dell_system_tool?c=us&l=en&s=gen)
But that is for Linux distributions.
So, I am just in middle of no where :(
Could you guys guide me that how to install and run this tool on my server
in order to diagnose problem?
--
Thanks!
BR / vj
--
This question should have gone to -hardware or -stable.
It depends on what RAID controller is installed in the box, and what
problem you're actually having ("There seemed to be a problem with the
RAID controller" tells us nothing).
I believe others have some experience with PERC controllers, but as I
said, we don't know what hardware you have.
--
| Jeremy Chadwickjdc at parodius.com |
| Parodius Networking http://www.parodius.com/ |
| UNIX Systems Administrator Mountain View, CA, USA |
| Making life hard for others since 1977. PGP: 4BD6C0CB |
- Show quoted text -
Hello Guys
I am in a situation here. I am running couple of Dell 2950 Servers with
FreeBSD 7.0 amd. There seemed to be a problem related to RAID controller on
one server. From Dell support, I was told to download a troubleshooting tool
called DSET. (
http://support.dell.com/support/topics/global.aspx/support/en/dell_system_tool?c=us&l=en&s=gen)
But that is for Linux distributions.
So, I am just in middle of no where :(
Could you guys guide me that how to install and run this tool on my server
in order to diagnose problem?
--
Thanks!
BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Any help about FreeBSD & Dell's Troubleshooting Tool DSET
Hello Guys I am in a situation here. I am running couple of Dell 2950 Servers with FreeBSD 7.0 amd. There seemed to be a problem related to RAID controller on one server. From Dell support, I was told to download a troubleshooting tool called DSET. ( http://support.dell.com/support/topics/global.aspx/support/en/dell_system_tool?c=us&l=en&s=gen ) But that is for Linux distributions. So, I am just in middle of no where :( Could you guys guide me that how to install and run this tool on my server in order to diagnose problem? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Any help about FreeBSD & Dell's Troubleshooting Tool DSET
Hi Guys I am running RAID 10. Here is the dmesg output: $ dmesg Copyright (c) 1992-2008 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 7.1-PRERELEASE #0: Fri Aug 29 13:42:13 CEST 2008 [EMAIL PROTECTED]:/usr/src/sys/amd64/compile/KERNEL Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel(R) Xeon(R) CPU E5450 @ 3.00GHz (2995.54-MHz K8-class CPU) Origin = "GenuineIntel" Id = 0x10676 Stepping = 6 Features=0xbfebfbff Features2=0xce3bd> AMD Features=0x20100800 AMD Features2=0x1 Cores per package: 4 usable memory = 17166688256 (16371 MB) avail memory = 16619601920 (15849 MB) ACPI APIC Table: FreeBSD/SMP: Multiprocessor System Detected: 8 CPUs cpu0 (BSP): APIC ID: 0 cpu1 (AP): APIC ID: 1 cpu2 (AP): APIC ID: 2 cpu3 (AP): APIC ID: 3 cpu4 (AP): APIC ID: 4 cpu5 (AP): APIC ID: 5 cpu6 (AP): APIC ID: 6 cpu7 (AP): APIC ID: 7 ioapic0: Changing APIC ID to 8 ioapic0 irqs 0-23 on motherboard kbd1 at kbdmux0 acpi0: on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 pcib1: at device 2.0 on pci0 pci4: on pcib1 pcib2: at device 0.0 on pci4 pci5: on pcib2 pcib3: at device 0.0 on pci5 pci6: on pcib3 pcib4: at device 0.0 on pci6 pci7: on pcib4 bce0: mem 0xf400-0xf5ff irq 16 at device 0.0 on pci7 miibus0: on bce0 brgphy0: PHY 1 on miibus0 brgphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto bce0: Ethernet address: 00:1e:c9:d5:88:f0 bce0: [ITHREAD] bce0: ASIC (0x57081020); Rev (B2); Bus (PCI-X, 64-bit, 133MHz); F/W (0x04000305); Flags( MFW MSI ) pcib5: at device 1.0 on pci5 pci8: on pcib5 pcib6: at device 0.3 on pci4 pci9: on pcib6 pcib7: at device 3.0 on pci0 pci1: on pcib7 mfi0: port 0xec00-0xecff mem 0xfc68-0xfc6b,0xfc64-0xfc67 irq 16 at device 0.0 on pci1 mfi0: Megaraid SAS driver Ver 2.00 mfi0: 2145 (279883150s/0x0020/info) - Shutdown command received from host mfi0: 2146 (boot + 3s/0x0020/info) - Firmware initialization started (PCI ID 0060/1000/1f0c/1028) mfi0: 2147 (boot + 3s/0x0020/info) - Firmware version 1.11.52-0396 mfi0: 2148 (boot + 3s/0x0008/info) - Battery Present mfi0: 2149 (boot + 3s/0x0020/info) - Package version 6.0.2-0002 mfi0: 2150 (boot + 21s/0x0004/info) - Enclosure (SES) discovered on PD 20(c None/p0) mfi0: 2151 (boot + 21s/0x0002/info) - Inserted: Encl PD 20 mfi0: 2152 (boot + 21s/0x0002/info) - Inserted: PD 20(c None/p0) Info: enclPd=20, scsiType=d, portMap=09, sasAddr=5001e0f03d0c6f00, mfi0: 2153 (boot + 21s/0x0002/info) - Inserted: PD 00(e0x20/s0) mfi0: 2154 (boot + 21s/0x0002/info) - Inserted: PD 00(e0x20/s0) Info: enclPd=20, scsiType=0, portMap=00, sasAddr=5000cca00904b705, mfi0: 2155 (boot + 21s/0x0002/info) - Inserted: PD 01(e0x20/s1) mfi0: 2156 (boot + 21s/0x0002/info) - Inserted: PD 01(e0x20/s1) Info: enclPd=20, scsiType=0, portMap=01, sasAddr=5000cca009024231, mfi0: 2157 (boot + 21s/0x0002/info) - Inserted: PD 02(e0x20/s2) mfi0: 2158 (boot + 21s/0x0002/info) - Inserted: PD 02(e0x20/s2) Info: enclPd=20, scsiType=0, portMap=02, sasAddr=5000cca00904d92d, mfi0: 2159 (boot + 21s/0x0002/info) - Inserted: PD 03(e0x20/s3) mfi0: 2160 (boot + 21s/0x0002/info) - Inserted: PD 03(e0x20/s3) Info: enclPd=20, scsiType=0, portMap=03, sasAddr=5000cca009048865, mfi0: 2161 (boot + 21s/0x0002/info) - Inserted: PD 04(e0x20/s4) mfi0: 2162 (boot + 21s/0x0002/info) - Inserted: PD 04(e0x20/s4) Info: enclPd=20, scsiType=0, portMap=04, sasAddr=5000cca009048d2d, mfi0: 2163 (boot + 21s/0x0002/info) - Inserted: PD 05(e0x20/s5) mfi0: 2164 (boot + 21s/0x0002/info) - Inserted: PD 05(e0x20/s5) Info: enclPd=20, scsiType=0, portMap=05, sasAddr=5000cca009048f31, mfi0: 2165 (279879506s/0x0020/info) - Time established as 11/13/08 8:18:26; (26 seconds since power on) mfi0: 2166 (279879548s/0x0008/info) - Battery temperature is normal mfi0: [ITHREAD] pcib8: at device 4.0 on pci0 pci10: on pcib8 pcib9: at device 5.0 on pci0 pci11: on pcib9 pcib10: at device 6.0 on pci0 pci12: on pcib10 em0: port 0xdce0-0xdcff mem 0xfc3e-0xfc3f,0xfc3c-0xfc3d irq 16 at device 0.0 on pci12 em0: Using MSI interrupt em0: [FILTER] em0: Ethernet address: 00:15:17:8f:f5:0f pcib11: at device 7.0 on pci0 pci13: on pcib11 pcib12: at device 28.0 on pci0 pci2: on pcib12 pcib13: at device 0.0 on pci2 pci3: on pcib13 bce1: mem 0xf800-0xf9ff irq 16 at device 0.0 on pci3 miibus1: on bce1 brgphy1: PHY 1 on miibus1 brgphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto bce1: Ethernet address: 00:
Re: Any help about FreeBSD & Dell's Troubleshooting Tool DSET
If it looks healthy, why there are these errors on the screen? Is it controller problem or disk? Regards VJ On Thu, Nov 13, 2008 at 9:49 AM, VeeJay <[EMAIL PROTECTED]> wrote: > Hi Guys > > I am running RAID 10. > > Here is the dmesg output: > > $ dmesg > Copyright (c) 1992-2008 The FreeBSD Project. > Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 > The Regents of the University of California. All rights reserved. > FreeBSD is a registered trademark of The FreeBSD Foundation. > FreeBSD 7.1-PRERELEASE #0: Fri Aug 29 13:42:13 CEST 2008 > [EMAIL PROTECTED]:/usr/src/sys/amd64/compile/KERNEL > Timecounter "i8254" frequency 1193182 Hz quality 0 > CPU: Intel(R) Xeon(R) CPU E5450 @ 3.00GHz (2995.54-MHz K8-class > CPU) > Origin = "GenuineIntel" Id = 0x10676 Stepping = 6 > > Features=0xbfebfbff > > Features2=0xce3bd> > AMD Features=0x20100800 > AMD Features2=0x1 > Cores per package: 4 > usable memory = 17166688256 (16371 MB) > avail memory = 16619601920 (15849 MB) > ACPI APIC Table: > FreeBSD/SMP: Multiprocessor System Detected: 8 CPUs > cpu0 (BSP): APIC ID: 0 > cpu1 (AP): APIC ID: 1 > cpu2 (AP): APIC ID: 2 > cpu3 (AP): APIC ID: 3 > cpu4 (AP): APIC ID: 4 > cpu5 (AP): APIC ID: 5 > cpu6 (AP): APIC ID: 6 > cpu7 (AP): APIC ID: 7 > ioapic0: Changing APIC ID to 8 > ioapic0 irqs 0-23 on motherboard > kbd1 at kbdmux0 > acpi0: on motherboard > acpi0: [ITHREAD] > acpi0: Power Button (fixed) > Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 > acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0 > pcib0: port 0xcf8-0xcff on acpi0 > pci0: on pcib0 > pcib1: at device 2.0 on pci0 > pci4: on pcib1 > pcib2: at device 0.0 on pci4 > pci5: on pcib2 > pcib3: at device 0.0 on pci5 > pci6: on pcib3 > pcib4: at device 0.0 on pci6 > pci7: on pcib4 > bce0: mem > 0xf400-0xf5ff irq 16 at device 0.0 on pci7 > miibus0: on bce0 > brgphy0: PHY 1 on miibus0 > brgphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, > 1000baseT-FDX, auto > bce0: Ethernet address: 00:1e:c9:d5:88:f0 > bce0: [ITHREAD] > bce0: ASIC (0x57081020); Rev (B2); Bus (PCI-X, 64-bit, 133MHz); F/W > (0x04000305); Flags( MFW MSI ) > pcib5: at device 1.0 on pci5 > pci8: on pcib5 > pcib6: at device 0.3 on pci4 > pci9: on pcib6 > pcib7: at device 3.0 on pci0 > pci1: on pcib7 > mfi0: port 0xec00-0xecff mem > 0xfc68-0xfc6b,0xfc64-0xfc67 irq 16 at device 0.0 on pci1 > mfi0: Megaraid SAS driver Ver 2.00 > mfi0: 2145 (279883150s/0x0020/info) - Shutdown command received from host > mfi0: 2146 (boot + 3s/0x0020/info) - Firmware initialization started (PCI > ID 0060/1000/1f0c/1028) > mfi0: 2147 (boot + 3s/0x0020/info) - Firmware version 1.11.52-0396 > mfi0: 2148 (boot + 3s/0x0008/info) - Battery Present > mfi0: 2149 (boot + 3s/0x0020/info) - Package version 6.0.2-0002 > mfi0: 2150 (boot + 21s/0x0004/info) - Enclosure (SES) discovered on PD 20(c > None/p0) > mfi0: 2151 (boot + 21s/0x0002/info) - Inserted: Encl PD 20 > mfi0: 2152 (boot + 21s/0x0002/info) - Inserted: PD 20(c None/p0) Info: > enclPd=20, scsiType=d, portMap=09, sasAddr=5001e0f03d0c6f00, > mfi0: 2153 (boot + 21s/0x0002/info) - Inserted: PD 00(e0x20/s0) > mfi0: 2154 (boot + 21s/0x0002/info) - Inserted: PD 00(e0x20/s0) Info: > enclPd=20, scsiType=0, portMap=00, sasAddr=5000cca00904b705, > mfi0: 2155 (boot + 21s/0x0002/info) - Inserted: PD 01(e0x20/s1) > mfi0: 2156 (boot + 21s/0x0002/info) - Inserted: PD 01(e0x20/s1) Info: > enclPd=20, scsiType=0, portMap=01, sasAddr=5000cca009024231, > mfi0: 2157 (boot + 21s/0x0002/info) - Inserted: PD 02(e0x20/s2) > mfi0: 2158 (boot + 21s/0x0002/info) - Inserted: PD 02(e0x20/s2) Info: > enclPd=20, scsiType=0, portMap=02, sasAddr=5000cca00904d92d, > mfi0: 2159 (boot + 21s/0x0002/info) - Inserted: PD 03(e0x20/s3) > mfi0: 2160 (boot + 21s/0x0002/info) - Inserted: PD 03(e0x20/s3) Info: > enclPd=20, scsiType=0, portMap=03, sasAddr=5000cca009048865, > mfi0: 2161 (boot + 21s/0x0002/info) - Inserted: PD 04(e0x20/s4) > mfi0: 2162 (boot + 21s/0x0002/info) - Inserted: PD 04(e0x20/s4) Info: > enclPd=20, scsiType=0, portMap=04, sasAddr=5000cca009048d2d, > mfi0: 2163 (boot + 21s/0x0002/info) - Inserted: PD 05(e0x20/s5) > mfi0: 2164 (boot + 21s/0x0002/info) - Inserted: PD 05(e0x20/s5) Info: > enclPd=20, scsiType=0, portMap=05, sasAddr=5000cca009048f31, > mfi0: 2165 (279879506s/0x0020/info) - Time established as 11/13/08 > 8:18:26; (26 seconds since power on) > mfi0: 2166 (279879548s/0x0008
Re: Any help about FreeBSD & Dell's Troubleshooting Tool DSET
Thanks guys... I have forwarded the comments from Scott to the Dell and hope
for the best
Thank you again.
VJ
On Thu, Nov 13, 2008 at 2:51 PM, Scott Long <[EMAIL PROTECTED]> wrote:
> The sense data in the screen shot boils down to an ASC/ASCQ pair of
> 0x35/0x05. Looking this up in the ASC table found at t10.org gives
> the following:
>
> 35h/05h ENCLOSURE SERVICES CHECKSUM ERROR
>
> What this basically means is that the disk enclosure that you're using
> has some sort of an unknown defect or failure. It has nothing to do with
> the OS. Dell needs to send you a new enclosure, plain and simple.
>
> Scott
>
>
>
> Jeremy Chadwick wrote:
>
>> On Thu, Nov 13, 2008 at 02:16:58PM +0100, VeeJay wrote:
>>
>>> I have asked the system manufacturers (Dell) but they don't provide
>>> support
>>> for FreeBSD based systems [?]
>>> Thats why I have only hope here with FreeBSD List...
>>>
>>
>> I've CC'd Scott Long, who is the author of the mfi(4) driver. He should
>> be able to explain what the error messages mean.
>>
>> Scott, check out the URL below.
>>
>>
>> On Thu, Nov 13, 2008 at 1:41 PM, Jeremy Chadwick <[EMAIL PROTECTED]>
>>> wrote:
>>>
>>> On Thu, Nov 13, 2008 at 01:29:11PM +0100, VeeJay wrote:
>>>>
>>>>> If it looks healthy, why there are these errors on the screen? Is it
>>>>> controller problem or disk?
>>>>>
>>>> SCSI normally reports 3 things when it encounters an error (particularly
>>>> disk errors): Sense Key (SK), Additional Sense Code (ASC), and
>>>> Additional Sense Code Qualifier (ASCQ).
>>>>
>>>> What appears in the below screenshot is a large amount of sense data,
>>>> but I can't make heads or tails out of it, because it's written in a
>>>> driver-centric manner ("Encl PD" means nothing to me). I can read part
>>>> of the CDB data, but it doesn't tell me much. Scott Long might know.
>>>>
>>>> http://digitalfreaks.org/~lavalamp/20081023_server3_screen_dump.png
>>>>
>>>> You should try asking the system manufacturer if they know what any
>>>> of the data means.
>>>>
>>>
>>
>
--
Thanks!
BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Any help about FreeBSD & Dell's Troubleshooting Tool DSET
I have asked the system manufacturers (Dell) but they don't provide support
for FreeBSD based systems [?]
Thats why I have only hope here with FreeBSD List...
On Thu, Nov 13, 2008 at 1:41 PM, Jeremy Chadwick <[EMAIL PROTECTED]> wrote:
> On Thu, Nov 13, 2008 at 01:29:11PM +0100, VeeJay wrote:
> > If it looks healthy, why there are these errors on the screen? Is it
> > controller problem or disk?
>
> SCSI normally reports 3 things when it encounters an error (particularly
> disk errors): Sense Key (SK), Additional Sense Code (ASC), and
> Additional Sense Code Qualifier (ASCQ).
>
> What appears in the below screenshot is a large amount of sense data,
> but I can't make heads or tails out of it, because it's written in a
> driver-centric manner ("Encl PD" means nothing to me). I can read part
> of the CDB data, but it doesn't tell me much. Scott Long might know.
>
> http://digitalfreaks.org/~lavalamp/20081023_server3_screen_dump.png
>
> You should try asking the system manufacturer if they know what any
> of the data means.
>
> --
> | Jeremy Chadwickjdc at parodius.com |
> | Parodius Networking http://www.parodius.com/ |
> | UNIX Systems Administrator Mountain View, CA, USA |
> | Making life hard for others since 1977. PGP: 4BD6C0CB |
>
>
--
Thanks!
BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
OMSA Live CD, DSET and FreeBSD based Dell 2950 Server?
Hello there, To diagnose and solve a Disk Encluser issue, I am advised to run two tools 1. Run OMSA live CD on the Server? Since, OMSA Live CD is linux based, I am just wondering if it will work or not? 2. Run Dell's DSET Tool, which is also for Linux systems And seeking your comments in this regards: *Server Configuration with FreeBSD 7.0* ** *2 x PE2950 III Quad Core Xeon E5450 3.0GHz,2x6MB,1333FSB *Riser with PCI Express Support (2x PCIe x8 slots; 1x PCIe x4 slot) PE2950 English rack power cord PE2950 Bezel Assembly *16GB (8x2GB Dual Rank DIMMs) 667MHz FBD 6 x 450GB SAS 15k 3.5" HD Hot Plug* PE2950 III - Chassis 3.5HDD x6 Backplane *PERC 6/i, Integrated Controller Card x6 backplane *CD/DVD Drive Cable 8X DVD-ROM Drive IDE PE2950 III Redundant Power Supply No Power Cord Rack Power Distribution Unit Power Cord TCP/IP Offload Engine 2P Broadcom TCP/IP Offload Engine functionality (TOE) Not Enabled Drac 5 Card *PE2950 III C5 MSS R10 Add-in PERC 5/i / 6/i * -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re:FreeBSD, OMSA Live CD and DSET tools for Dell 2950 Server?
Any help??? On Tue, Nov 18, 2008 at 4:41 PM, VeeJay <[EMAIL PROTECTED]> wrote: > Hello there, > > To diagnose and solve a Disk Encluser issue, I am advised to run two > tools > > 1. Run OMSA live CD on the Server? Since, OMSA Live CD is linux based, I am > just wondering if it will work or not? > 2. Run Dell's DSET Tool, which is also for Linux systems > > And seeking your comments in this regards: > > > *Server Configuration with FreeBSD 7.0* > ** > *2 x PE2950 III Quad Core Xeon E5450 3.0GHz,2x6MB,1333FSB > *Riser with PCI Express Support (2x PCIe x8 slots; 1x PCIe x4 slot) > PE2950 English rack power cord > PE2950 Bezel Assembly > *16GB (8x2GB Dual Rank DIMMs) 667MHz FBD > 6 x 450GB SAS 15k 3.5" HD Hot Plug* > PE2950 III - Chassis 3.5HDD x6 Backplane > *PERC 6/i, Integrated Controller Card x6 backplane > *CD/DVD Drive Cable > 8X DVD-ROM Drive IDE > PE2950 III Redundant Power Supply No Power Cord > Rack Power Distribution Unit Power Cord > TCP/IP Offload Engine 2P > Broadcom TCP/IP Offload Engine functionality (TOE) Not Enabled > Drac 5 Card > *PE2950 III C5 MSS R10 Add-in PERC 5/i / 6/i > * > > -- > Thanks! > > BR / vj > -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: FreeBSD, OMSA Live CD and DSET tools for Dell 2950 Server?
Any Help??? On Tue, Nov 18, 2008 at 10:15 PM, VeeJay <[EMAIL PROTECTED]> wrote: > Any help??? > > On Tue, Nov 18, 2008 at 4:41 PM, VeeJay <[EMAIL PROTECTED]> wrote: > >> Hello there, >> >> To diagnose and solve a Disk Encluser issue, I am advised to run two >> tools >> >> 1. Run OMSA live CD on the Server? Since, OMSA Live CD is linux based, I >> am just wondering if it will work or not? >> 2. Run Dell's DSET Tool, which is also for Linux systems >> >> And seeking your comments in this regards: >> >> >> *Server Configuration with FreeBSD 7.0* >> ** >> *2 x PE2950 III Quad Core Xeon E5450 3.0GHz,2x6MB,1333FSB >> *Riser with PCI Express Support (2x PCIe x8 slots; 1x PCIe x4 slot) >> PE2950 English rack power cord >> PE2950 Bezel Assembly >> *16GB (8x2GB Dual Rank DIMMs) 667MHz FBD >> 6 x 450GB SAS 15k 3.5" HD Hot Plug* >> PE2950 III - Chassis 3.5HDD x6 Backplane >> *PERC 6/i, Integrated Controller Card x6 backplane >> *CD/DVD Drive Cable >> 8X DVD-ROM Drive IDE >> PE2950 III Redundant Power Supply No Power Cord >> Rack Power Distribution Unit Power Cord >> TCP/IP Offload Engine 2P >> Broadcom TCP/IP Offload Engine functionality (TOE) Not Enabled >> Drac 5 Card >> *PE2950 III C5 MSS R10 Add-in PERC 5/i / 6/i >> * >> >> -- >> Thanks! >> >> BR / vj >> > > > > -- > Thanks! > > BR / vj > -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Need your Advice for New Dell Servers in connection to FreeBSD?
Hi guys, I need your advice: I am IT manager with a company who is running couple of websites having 2-3 million hits per month each. Present configuratoins is: Dell PowerEdge 2950 (2 processors) 4GB RAM 4 discs (15000rpm SAS 146GB) RAID10 Operating System: FreeBSD Actually, company is planning to buy couple of Dell server. 1. Is Dell is good choice? And which model is the best? 2. How much RAM should be on each machine? How much memory FreeBSD can access and use? 2.1 Company also wants to make Video Clips availible on website, Could it be possible with Apache running on FreeBSD? 3. Which processors should be on the machine? 4. Is 15000rpm SAS is good choice? (Because, websites are using MySQL database too) 5. Which RAID configuration is most secure and fast? I will really appreciate your suggestions With bundle of thanks! VJ -- BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Which System-board and Processor is best for FreeBSD AMD64 7.0-RELEASE?
Hello Friends Which System-board and Processor is BEST for FreeBSD AMD64 7.0-RELEASE? RAM will be used around 8GB - 16GB. -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Your suggestions about this Dell configuration?
Hello friends, My employer is buying this Dell server and I would like to have your opinion about the configuration. Requirements are: 2 Websites with 3-4 million hits per month with video ads. Operating System: *FreeBSD AMD647-STABBLE* Database: *PHP+MySQL with Apache* Server Configuration: *PowerEdge™ 6850 SCSI* Dual Core Intel(R) Xeon(R) Processor 7130M, 3.2GHz, 8MB L3 Cache, 800Mhz FSB 1x Additional Dual Core Intel(R) Xeon(R) Processor 7130M, 3.2GHz, 8MB L3 Cache, 800MHz FSB 16GB 400MHz Dual Rank DDR2 Memory (8X2GB) C5 Drives attached to embedded PERC4ei, RAID 10 PERC 4/DC RAID controller (128MB cache) (1 intern and 1 extern Channel) (Should I use controller with Both Internal or Both External Channel? What they do?) 5 x 146GB SCSI Ultra320 (15000rpm) 1'' 80 pin harddrives Chassis with support for 3.5'' SCSI Hard Drives Dell Remote Access Card 4 SERVER MANAGEMENT CARD (I will have hot swappable drives & chassis) Thank you in advance. -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Your suggestions about this Dell configuration?
Yes, but its 4 million each.. so its 8 million hits per day Just a hint VJ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Your suggestions about this Dell configuration?
Hello Frank Really good points. I am really glad to have your thoughts. Regarding your questions and comments, I have given some answers and a couple of questions in *RED* colour. Please comment if you happen to manage some time during weekend, Thanks! *Please continue...* On Thu, May 22, 2008 at 4:01 AM, Frank Shute <[EMAIL PROTECTED]> wrote: > On Wed, May 21, 2008 at 08:49:51AM +0200, VeeJay wrote: > > > > Hello friends, > > > > My employer is buying this Dell server and I would like to have your > opinion > > about the configuration. > > > > Requirements are: > > 2 Websites with 3-4 million hits per month with video ads. > > If it's "3-4 million hits per month" as you've stated twice now, then > your hardware is complete overkill. > > So I'll assume you mean 3-4 million hits a day for each site. *No, its 3-4 million each site per month and we are having problem. Because, either Apache or MySQL stops responding. I have following settings as Performance:* ** *# = # Performance settings # = Timeout 300 KeepAlive On MaxKeepAliveRequests 100 KeepAliveTimeout 15 MinSpareServers 5 MaxSpareServers 10 StartServers 5 MaxClients 256 MaxRequestsPerChild 0* > > > > > Operating System: > > *FreeBSD AMD647-STABBLE* > > I'd use 7.0-RELEASE. > > > > > Database: > > *PHP+MySQL with Apache* > > No problem. You should use Apache 2.*. *We will use Apache 2.** > > > > > > > Server Configuration: > > *PowerEdge? 6850 SCSI* > > > > Dual Core Intel(R) Xeon(R) Processor 7130M, 3.2GHz, 8MB L3 Cache, 800Mhz > FSB > > 1x Additional Dual Core Intel(R) Xeon(R) Processor 7130M, 3.2GHz, 8MB L3 > Cache, > > 800MHz FSB > > Slow FSB. I suppose they hope you hit the cache. Shouldn't matter > because your server is more likely to be disk bound rather than bus > bound. Changed Processor to: *PE 2950 III Quad Core Xeon X5450 (3.0GHz, 2x6MB, 1333MHz FSB)* *what do you think about E5450?* > > > > > 16GB 400MHz Dual Rank DDR2 Memory (8X2GB) > > Slow memory, to match the slow FSB :) But you've got >250MB per hit. > So use the excess to cache frequently accessed content. *We have changed it to:* *16GB (8x2GB Dual Rank DIMMs) 667MHz FBD* > > > C5 Drives attached to embedded PERC4ei, RAID 10 > > > > PERC 4/DC RAID controller (128MB cache) (1 intern and 1 extern Channel) > > (Should I use controller with Both Internal or Both External Channel? > What > > they do?) > > Supported according to a quick Google search. > > > > > 5 x 146GB SCSI Ultra320 (15000rpm) 1'' 80 pin harddrives > > "No name" or a brand? *We have changed the disks to :* *6 x 450GB SAS 15k 3.5" HD Hot Plug, (Hitachi Japan)* > > > > > > Chassis with support for 3.5'' SCSI Hard Drives > > > > Dell Remote Access Card 4 SERVER MANAGEMENT CARD > > Don't know if this will work. Most guys use a serial console/ssh for > management. > > > > > (I will have hot swappable drives & chassis) > > > > Thank you in advance. > > The performance of this hardware will depend on what *sort* of hits > you get. Are a lot of them just for the homepage? Then just cache it. > > Is it static content? *No, its dynamic contents, data is coming form Database.* > > > If you're getting lots of ad-hoc database queries and fetches/writes > from/to disk, then your disks could get a thrashing. > > How big's your database? Being read from more than written to? How > precious is the data? > *More than 20 million records and more than 1000 Tables.* *And of course, data is always preciouse. :)* > > How many of these hits are reading video ads? All of them? How many > KBs are these awful ads? > *50% of users are going to see the Video Ads.* ** *Size would vary between 100KB to 2MB. * What bandwidth do you have to these servers? *100 Mbps* How you are going to get the best out of your hardware depends on questions like these, so you have to analyse your Apache logs and tune appropriately. Tuning Apache, mysql and PHP are all subjects in their own right. For FreeBSD, read tuning(7). Are you running FreeBSD ATM? Then some numbers from iostat, top etc. would be useful in analysing how your new server is going to cope and how much spare capacity you'll have, but the numbers are dependent on how you've tuned it (if at all). Hope I've given you something to think about. Regards, -- Frank Contact info: http://www.shute.org.uk/misc/contact.html -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Does FreeBSD supports TCP Offload Engine (TOE) from Broadcom in Dell PE2950?
Hi guys Any clue? Does FreeBSD supports TCP Offload Engine (TOE) from Broadcom in Dell PE2950? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
FreeBSD 7.0 Kernel + Dell PE2950 III ?
Hi guys I am going to install a Web Server (apache+mysql+php) at my work place. To boost performance, I am just thinking that should I configure and rebuild FreeBSD KERNEL for this hardware? And if so, what paramters I should follow? Any help would be highly appreciated. Server's hardware configuration is as follow: 2 x Quad Core Xeon E5450 3.0GHz,2x6MB,1333FSB 16GB (8x2GB Dual Rank DIMMs) 667MHz FBD 6 x 450GB SAS 15k 3.5" HD Hot Plug PERC 6/i, Integrated Controller Card x6 backplane PE2950 III C5 MSS R10 Add-in PERC 5/i / 6/i 1 S TCP/IP Offload Engine 2P Broadcom TCP/IP Offload Engine functionality (TOE) Not Enabled Thank you guys. VJ -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
FreeBSD MySQL Performance Tunning suggestions???
Hi Guys
I need some performance tuning suggestions/help from you.
At my job, I am going to build a Web Server with
1. FreeBSD 7.0-RELEASE amd64
2. Apache 2.2.8
3. PHP 4.4.8 (or may be PHP5, what do you suggest?)
Server's hardware configuration is as follow:
2 x Quad Core Xeon E5450 3.0GHz,2x6MB,1333FSB
16GB (8x2GB Dual Rank DIMMs) 667MHz FBD
6 x 450GB SAS 15k 3.5" HD Hot Plug
PERC 6/i, Integrated Controller Card x6 backplane
PE2950 III C5 MSS R10 Add-in PERC 5/i / 6/i 1 S
TCP/IP Offload Engine 2P
Broadcom TCP/IP Offload Engine functionality (TOE) Not Enabled
For FreeBSD 7.0-RELEASE amd64 Which MySQL 5.0 would be used ?
1. FreeBSD 7.x (x86_64)
or
2. FreeBSD 6.x (x86)
I have done some googling and made these configuration files for Apache and
MySQL?
Apache:
httpd.conf-start
# =
# Basic settings
# =
ServerType standalone
ServerRoot "/usr/local/apache"
PidFile /usr/local/apache/logs/httpd.pid
ScoreBoardFile /usr/local/apache/logs/httpd.scoreboard
ResourceConfig /dev/null
AccessConfig /dev/null
# =
# Performance settings
# =
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 256
MaxRequestsPerChild 0
# =
# Apache modules
# =
ClearModuleList
AddModule mod_log_config.c
AddModule mod_mime.c
AddModule mod_dir.c
AddModule mod_access.c
AddModule mod_auth.c
AddModule mod_php4.c
AddModule mod_rewrite.c
AddModule mod_security.c
AddModule mod_setenvif.c
# =
# General settings
# =
Port 80
User apache
Group apache
ServerAdmin [EMAIL PROTECTED]
UseCanonicalName Off
ServerSignature Off
HostnameLookups Off
ServerTokens Prod
DirectoryIndex index.html
DocumentRoot "/home/apache/www"
# =
# Access control
# =
Options None
AllowOverride None
Order deny,allow
Deny from all
Order allow,deny
Allow from all
Order allow,deny
Allow from all
# =
# MIME encoding
# =
TypesConfig /usr/local/apache/conf/mime.types
DefaultType text/plain
AddEncoding x-compress Z
AddEncoding x-gzip gz tgz
AddType application/x-tar .tgz
AddType application/x-httpd-php .html
# =
# Logs
# =
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
ErrorLog /var/apache/logs/error_log
CustomLog /var/apache/logs/access_log combined
# =
# Virtual hosts
# =
NameVirtualHost *
DocumentRoot "/home/apache/www/vhosts/mydomain.com/public_html"
ServerName "www.mydomain.com"
ServerAlias "mydomain.com"
ErrorLog /var/apache/logs/vhosts/mydomain.com/error_log
CustomLog /var/apache/logs/vhosts/mydomain.com/access_log combined
RewriteEngine on
RewriteRule ^/([a-z]{2})/index.html$ /index.html?topicid=$1
ErrorDocument 400 /page_error.html
ErrorDocument 401 /page_error.html
ErrorDocument 403 /page_error.html
ErrorDocument 404 /page_error.html
ErrorDocument 500 /page_error.html
#
# Logging GET/POST requests, defending against
# Cross-Site-Scripting (XSS) and SQL Injection attacks
#
AddHandler application/x-httpd-php .html
#Turn the filtering engine On or Off
SecAuditEngine On
# Only log suspicious requests
SecAuditEngine RelevantOnly
SecAuditLog /var/apache/logs/audit_log
SecFilterScanPOST On
SecFilterEngine On
SecFilterDefaultAction "deny,log,status:500"
SecFilter "\""
#generic bogus path sigs
SecFilterSelective THE_REQUEST "\.\.\./"
"id:36,rev:1,severity:2,msg:'Bogus Path denied'"
SecFilterSelective POST_PAYLOAD "[[:space:]]+\.\.\.+\;"
"id:37,rev:1,severity:2,msg:'Bogus Path denied'"
#XCC:Signatures for XSS
SecFilter "/((\%3D)|(=))[^\n]*((\%3C)|<)[^\n]+((\%3E)|>)"
#XCC:Regex for simple CSS attack
SecFilter "/((\%3C)|<)((\%2F)|\/)*[a-z0-9\%]+((\%3E)|>)/ix"
#XCC:Rege
New Kernel with Dell PE2950
Hi guys I am going to install a Web Server (apache+mysql+php) at my work place. To boost performance, I am just thinking that should I configure and rebuild FreeBSD KERNEL for this hardware? And if so, what paramters I should follow? Any help would be highly appreciated. Server's hardware configuration is as follow: 2 x Quad Core Xeon E5450 3.0GHz,2x6MB,1333FSB 16GB (8x2GB Dual Rank DIMMs) 667MHz FBD 6 x 450GB SAS 15k 3.5" HD Hot Plug PERC 6/i, Integrated Controller Card x6 backplane PE2950 III C5 MSS R10 Add-in PERC 5/i / 6/i 1 S TCP/IP Offload Engine 2P Broadcom TCP/IP Offload Engine functionality (TOE) Not Enabled Thank you guys. VJ BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Please Help AMD, mysql, FreeBSD 64
Hello Just wondering if I can get an advice from this forum? What kind of hardware i.e.(Processor, RAM) I need to accomplish following jobs on a FreeBSD plateform: I have some mysql dumps around 2 GB eachwith each record is 100 KB... 1. What is the best method to import them into a mysql database without getting any "Out of Memory" Error? or freezing MySQL? 2. If I run a little Perl script and read a mysql record per iteration, how can I avoid "illigle memory address" access errors? Somebody talked about AMD 64 processor with FreeBSD 64 version, etc? I will be really grateful for your kind advices/suggestions.... Regards VeeJay -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
HELP! Installation Questions
Hello There, I wonder if someone from you could spare few minutes and share your knowledge with me. I love FreeBSD and use it time to time but I think I am still novice. I have got an assignment to build a Multi-Task web server. GOALS: A Multi Task Web Server for Virtual Hosting running Apache, MySQL, ProFTP, Mail Program, etc. All on this server. Traffic expected 100,000 visits a day. .Ideal Space required for MySQL DBs: 140GB. (Contents: Many MySQL databases backing name based virtual websites) .Ideal Space required for Virtual Hosted Websites: 140GB (Contents: HTML, PHP, Images, Mail, Logs, Sites Backups, etc) Maximum space required for SWAP to get high performance. HARDWARE: 1 dell rack server with: 2 x Dual Core Intel(r) Xeon(r) 5160, 4MB Cache, 3.0GHz, 1333FSB 4 GB FB 533MHz Memory (4x1GB dual rank DIMMs) 4 x 146GB, SAS, 3.5-inch, 15.000 rpm Hard Drives (hot plug) RAID 10 using PERC 5/i, x6 Backplane, Integrated RAID Controller Card Intel(r) PRO 1000PT Dual Port Server Adapter, Gigabit NIC, Cu, PCIe x4 etc. Questions: 1. Which Version of FreeBSD will be the best choice and would be 32bit or 64bit? 2. How can I get required Space when doing partition during installation? 3. What would be ideal SWAP space to get performance? 4. Which Mail Program is secure and easy to configure for Virtual Hosting? 5. What is the flow of installation when preparing a machine for Virtual Hosting? I mean which program should be installed first and how should they setup (apache, ftp, mysql, mail) to talk with each other for a specific virtual name-based host? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
FreeBSD 6.1 i386 Installation Questions!
I am installing FreeBSD 6.1 i386 on my Web Server: Could you guys advise that 1. What should be the minimum / (Root) Partition Size? (So, I don't waste lot of space just for Root) 2. What should be the minimum /usr Partition Size? 3. For a FreeBSD Web Server (with mysql), what should be ideal BLOCK and FRAGMENT sizes? 4. Which shell is best to use and secure? is it BASH or TCSH? 5. Network Confirgruations: a. host is just a machine unique name, to see/access on LAN, right? b. If I don't have a domain name, so what "domain" I should give? could it be just the ip address? c. can I change the LAN ip address which was given during installation with WAN ip address when server is up and running with direct connection to world? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: FreeBSD 6.1 i386 Installation Questions!
On 11/16/06, Chuck Swiger <[EMAIL PROTECTED]> wrote: On Nov 16, 2006, at 2:46 PM, VeeJay wrote: > Could you guys advise that > > 1. What should be the minimum / (Root) Partition Size? (So, I don't > waste > lot of space just for Root) It would help to mention which version of the OS you have: 128MB is probably a reasonable minimum, I tend to use 256MB. > 2. What should be the minimum /usr Partition Size? This depends on whether you are installing the ports tree and/or rebuilding /usr/src to update the OS. 2 GB is probably a reasonable low end, but 4GB would be much better. > 3. For a FreeBSD Web Server (with mysql), what should be ideal > BLOCK and > FRAGMENT sizes? The defaults are fine, unless you have unusual requirements or huge (terabyte-size) disk volumes. > 4. Which shell is best to use and secure? is it BASH or TCSH? A matter of personal preference. Note that /bin/sh is not BASH on FreeBSD, but a classic version of the original Bourne shell. > 5. Network Confirgruations: >a. host is just a machine unique name, to see/access on LAN, right? The hostname can be relevant over WAN. Depends on getting your DNS configured. >b. If I don't have a domain name, so what "domain" I should > give? could > it be just the ip address? Some people use hostname.local or hostname.localdomain if they don't have DNS available. >c. can I change the LAN ip address which was given during > installation > with WAN ip address when server is up and running with direct > connection to > world? Of course. Change /etc/rc.conf, or re-run sysinstall. -- -Chuck Hello Guys Thanks for your reply. I will use around 256 MB for Root Partition and 4 GB for /usr Partition. Regarding Block Size, see the quote below from a Book, i.e. and pleae comment... * Block Size * This section contains options that can really impair system performance. If you're new to FreeBSD, take the defaults! This is for experienced UNIX administrators who know *exactly *what they're doing. Block size refers to the minimum size of a file. If you have a file that contains just one tiny character, it uses one whole block, even if it barely fills that block. By the same token, if your file is just over the block size, it takes up one block and a fragment of another. Each block can be divided into fragments, so that multiple, slightly oversized files can use one block to store their extra tidbits. FreeBSD defaults to 8KB blocks. If you're creating a large partition―say, 1GB or more―use 16KB blocks. When you do this, you also need to change your fragment size. The FreeBSD file system (UFS, or UNIX File System) works best with fragments one−eighth the size of a block. This would be 16,384−byte blocks and 2,048−bit fragments. Set the block size with the newfs program. From the Disklabel screen, press *N *while on a partition to display a pop−up dialog box containing newfs options. To use 16KB blocks and 2KB fragments, enter newfs −f 2048 −b 16384 -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Block Size (FreeBSD File System)
* Hello there I am building a Web Server with 4 x 146GB SAS disks (using RAID 10) with FreeBSD 6.1, Apache 2 & MySQL. I have read this below quoted information that to increase performance, one can set a Block Size. If so, how much? Could some genius advise what to do? I am having over 100GB for /var, 100GB for /home, 256MB for /root, 16GB for /swap, 4GB for /usr, etc. Block Size This section contains options that can really impair system performance. If you're new to FreeBSD, take the defaults! This is for experienced UNIX administrators who know exactly what they're doing. Block size refers to the minimum size of a file. If you have a file that contains just one tiny character, it uses one whole block, even if it barely fills that block. By the same token, if your file is just over the block size, it takes up one block and a fragment of another. Each block can be divided into fragments, so that multiple, slightly oversized files can use one block to store their extra tidbits. FreeBSD defaults to 8KB blocks. If you're creating a large partition―say, 1GB or more―use 16KB blocks. When you do this, you also need to change your fragment size. The FreeBSD file system (UFS, or UNIX File System) works best with fragments one−eighth the size of a block. This would be 16,384−byte blocks and 2,048−bit fragments. Set the block size with the newfs program. From the Disklabel screen, press N while on a partition to display a pop−up dialog box containing newfs options. To use 16KB blocks and 2KB fragments, enter newfs −f 2048 −b 16384 -- Thanks! BR / vj * ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help...Shell Scripts for Virtual Hosting
Hello Guys I am new to Web Hosting Would someone like to share Shell Scripts for Virtual Hosting i.e. To create Virtual Hosts under Apache, Setup Email and FTP, etc? I will be really very greatful Best Regards -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help: Suitable Version for Web Server?
Can someone working in Web Hosting suggest that which versions of the following software are more secure & relaiable for a Busy Web Server? OS: FreeBSD 6.1 Apache ??? MySQL ??? PHP ??? QMail Thanks a Lot -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Fresh System: Kernel should be Rebuilded FIRST or cvsup should be Run FIRST?
Hello On a freshly installed FreeBSD System, what step should be taken first? Kernel should be Rebuilded FIRST or cvsup should be Run FIRST? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Installworld Problem... Please help!!!
Hello, Please help!!! I have CVSup'ed my 6.1 Fresh Install. No problems with buildworld or kernel build, but I am getting failures during installworld. When I give this command in single user mode: # make installworld A Partial output of the Screen Dump cd /usr/src/etc; make distrib-dirs mtree -eU -f /usr/src/etc/mtree/BSD.root.dist -p / mtree -eU -f /usr/src/etc/mtree/BSD.var.dist -p /var mtree -eU -f /usr/src/etc/mtree/BSD.usr.dist -p /usr mtree -eU -f /usr/src/etc/mtree/BSD.include.dist -p /usr/include mtree -deU -f /usr/src/etc/mtree/BIND.chroot.dist -p /var/named mtree -deU -f /usr/src/etc/mtree/BSD.sendmail.dist -p / cd /; rm -f /sys; ln -s usr/src/sys sys rm: /sys: Read-only file system *** Error code 1 Stop in /usr/src/etc. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. *** Error code 1 Stop in /usr/src. # Information about my FSTAB: # cat /etc/fstab # DeviceMountpoint FStype Options Dump Pass# /dev/mfid0s1b none swapsw 00 /dev/mfid0s1a / ufsrw 1 1 /dev/mfid0s1g /home ufs rw 2 2 /dev/mfid0s1e /tmp ufs rw 2 2 /dev/mfid0s1f /usr ufs rw 2 2 /dev/mfid0s1d /var ufs rw 2 2 /dev/acd0/cdromcd9660 ro, noauto 0 0 -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
How to install security patches from http://www.freebsd.org/security?
Hi How to install security patches from http://www.freebsd.org/security? Thanks for your time... -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
maxusers ??? (Building Kernel)
Hi I am just building Kernel for my Web Server which do have a pretty heavy traffic. Just wondering that what should I set MAXUSERS in Kernel config file? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Password Security
Hi I need to secure my data and server. Any advice will be highly appreciated. I am going to place my FreeBSD server at a shared place? I am just afraid that any unauthorized person might boot machine in single user mode and steal the data? How can I make my Server secure that if if boots in single user mode, it still demands the password and without password one cannot do anything? or make it possible that booting in Single user mode, doesn't provide any shell? Thanks in advance -- BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
To which port GPG belongs?
Hi If I want to run commands like # gpg httpd-2.0.49.tar.gz.asc Which port one should install, becasue there are many... 1. /usr/ports/security/gnome-gpg 2. /usr/ports/security/gpgme03 3. /usr/ports/security/kgpg 4. /usr/ports/security/nofgpg 5. /usr/ports/security/ruby-gpgme And with which options one should install to have maximum security measure i.e. LDAP, CURL, etc -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: To which port GPG belongs?
Thanks for your quick thoughts... I am still unable to verify Key I have got this key from Apache site -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (GNU/Linux) iQEVAwUARMj7lvcTqHkQ/eB1AQKApAgAjnO4vMS0hmJc7FI/X/qT5L9ZmwZpZFLW uFFlLCOlRNluQ4e+Y+a9lIlbvkhGATWC4ukDSa4EEuVa/Bs6rgDFm0jJW8c+pjG7 NybvXIfVl2bmUI2LJPAJsAYm3vhThvPROVLuTg6FawCTAdjGrMli2gJQmNdw++Lk CzntFbrQajaZCV2Tc1wMOOzKFM7jPvgxAla9vd0tfRVAdMZQfz2BXGF0Nis7cd7i QmgdeExfKlQehJ3kf09z8td07IuXmxxg5Z3ktB3SNnKo8MclNcbUlDwiAM8ePieG pfGV1TQqHd+CvfRn/MoS5Sl74GtpXw0vgr4/A1ZjoTw3OM9x+cYHSQ== =JQal -END PGP SIGNATURE- but how to verify because When I give this command # gpg httpd-2.0.59.tar.gz.asc gpg: Signature made Thu Jul 27 19:44:54 2006 CEST using RSA key ID 10FDE075 gpg: Can't check signature: public key not found # What to do... please help!!! On 11/22/06, Karol Kwiatkowski <[EMAIL PROTECTED]> wrote: On 22/11/2006 14:53, VeeJay wrote: > Hi > > If I want to run commands like > > > # gpg httpd-2.0.49.tar.gz.asc > > Which port one should install, becasue there are many... /usr/ports/security/gnupg Btw, there's excellent documentation at http://www.gnupg.org/ > And with which options one should install to have maximum security measure > i.e. LDAP, CURL, etc Take the defaults. You can add some functionality later, if required. HTH. Karol -- Karol Kwiatkowski OpenPGP: http://www.orchid.homeunix.org/carlos/gpg/0x06E09309.asc -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: To which port GPG belongs?
I have this Help Instructions from a Step-by-Step for Apache installation lynx http://httpd.apache.org/download.cgi gpg --import KEYS gpg httpd-2.0.49.tar.gz.asc gpg: Good signature from "Sander Striker <[EMAIL PROTECTED]>" tar zxvf httpd-2.0.49.tar.gz this doesn't work either gpg --import KEYS On 11/22/06, Karol Kwiatkowski <[EMAIL PROTECTED]> wrote: On 22/11/2006 14:53, VeeJay wrote: > Hi > > If I want to run commands like > > > # gpg httpd-2.0.49.tar.gz.asc > > Which port one should install, becasue there are many... /usr/ports/security/gnupg Btw, there's excellent documentation at http://www.gnupg.org/ > And with which options one should install to have maximum security measure > i.e. LDAP, CURL, etc Take the defaults. You can add some functionality later, if required. HTH. Karol -- Karol Kwiatkowski OpenPGP: http://www.orchid.homeunix.org/carlos/gpg/0x06E09309.asc -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Does disk encryption causes a performance penalty for Data Access/Read/Write, etc
Hi Does *disk encryption* causes a *performance* penalty for Data Access/Read/Write, etc? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Password Security
So, does it mean that Windows 2003 Server provides more Password Level Security with Unauthorized Access? And how can one into the System by booting from a CD if it still requires the Password even in Single User mode? On 11/22/06, Jerry McAllister <[EMAIL PROTECTED]> wrote: On Wed, Nov 22, 2006 at 04:41:37AM +0100, VeeJay wrote: > Hi > > I need to secure my data and server. Any advice will be highly appreciated. > > I am going to place my FreeBSD server at a shared place? > > I am just afraid that any unauthorized person might boot machine in single > user mode and steal the data? > How can I make my Server secure that if if boots in single user mode, it > still demands the password and without password one cannot do anything? > or make it possible that booting in Single user mode, doesn't provide any > shell? Lock it in a box. Anyone who can put their hands physically can get in to the machine with a little tinkering even if you disable lots of software. I think you can get rid of the single user option in the boot, but anyone with a CD can defeat that if they want to. It would make things harder for yourself in managing the system, but it would slow a person down from casual interference. Also, many machines have BIOS level boot passwords that can be turned on. Using that would slow a person down, but be annoying for youself, especially in times such as power failures - the system would not come back up automatically without someone entering the BIOS password. Plus, if a person is determined enough, they can defeat that as well by removing the battery backup for the MB or the flash memory. But, it would stop casual tinkering. jerry > > Thanks in advance > > -- > > BR / vj > ___ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " [EMAIL PROTECTED]" -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: To which port GPG belongs?
On 11/22/06, Svein Halvor Halvorsen <[EMAIL PROTECTED]> wrote: VeeJay wrote: > I have this Help Instructions from a Step-by-Step for Apache installation On a side note, you would probably want to install Apache via ports. Svein Halvor If I will install from the Port, how can I configure to add module or disable modules? Like if I want to enable following modules, how can I do them VIA Ports? I Just copy the part of text from this Step-by-Step guide I am using - Compiling and installing the software In this step we will configure, compile, and install the Apache web server as follows: ./configure \ --prefix=/usr/local/apache2 \ --with-mpm=prefork \ --disable-charset-lite \ --disable-include \ --disable-env \ --disable-setenvif \ --disable-status \ --disable-autoindex \ --disable-asis \ --disable-cgi \ --disable-negotiation \ --disable-imap \ --disable-actions \ --disable-userdir \ --disable-alias \ --disable-so make su umask 022 make install chown -R root:sys /usr/local/apache2 - If we can configure in Port, so where it could be done and how? and if its in a file, where it would be placed? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Password Security
On 11/23/06, Olivier Nicole <[EMAIL PROTECTED]> wrote: > And how can one into the System by booting from a CD if it still > requires the Password even in Single User mode? Booting from CD, floppy or hard disk is slected at BIOS level. Booting in single or multi user mode is at Operating system level. Booting is in the following order: 1) BIOS select what medium to boot from 2) the operating system boot from the selected medium So when it comes to the Single user password, itis already at stage 2) it has passed the stage 1 (booting from hard disk ofr CD) without password. Olivier So, it means, that I should take the following steps 1. Password on BIOS 2. Change the order of booting i.e. When system is installed and working once, then I just the change the Booting FIRST from HardDisk. 3. Put the password on Single User mode. So, what more? Do you people think that I have got somehow security barrier for unauthorized access? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help... Installing from Port
Hi If I will install Apache2 from the Port, how can I configure to add module or disable modules? Like if I want to enable following modules, how can I do them VIA Ports? Please find below the text from this Step-by-Step guide I am using. But that procedure is for manually downloading the archive, checking signatures and then configuring But how can I use Port system to get the same results? - Compiling and installing the software In this step we will configure, compile, and install the Apache web server as follows: ./configure \ --prefix=/usr/local/apache2 \ --with-mpm=prefork \ --disable-charset-lite \ --disable-include \ --disable-env \ --disable-setenvif \ --disable-status \ --disable-autoindex \ --disable-asis \ --disable-cgi \ --disable-negotiation \ --disable-imap \ --disable-actions \ --disable-userdir \ --disable-alias \ --disable-so make su umask 022 make install chown -R root:sys /usr/local/apache2 - If we can configure in Port, so where it could be done and how? and if its in a file, where it would be placed? -- -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Password Security
On 11/23/06, Bill Moran <[EMAIL PROTECTED]> wrote: On Thu, 23 Nov 2006 10:45:19 +0100 VeeJay <[EMAIL PROTECTED]> wrote: > On 11/23/06, Olivier Nicole <[EMAIL PROTECTED]> wrote: > > > > > And how can one into the System by booting from a CD if it still > > > requires the Password even in Single User mode? > > > > Booting from CD, floppy or hard disk is slected at BIOS level. > > > > Booting in single or multi user mode is at Operating system level. > > > > Booting is in the following order: > > > > 1) BIOS select what medium to boot from > > > > 2) the operating system boot from the selected medium > > > > So when it comes to the Single user password, itis already at stage 2) > > it has passed the stage 1 (booting from hard disk ofr CD) without > > password. > > > > Olivier > > > > So, it means, that I should take the following steps > > 1. Password on BIOS > 2. Change the order of booting i.e. When system is installed and working > once, then I just the change the Booting FIRST from HardDisk. > 3. Put the password on Single User mode. > > So, what more? Do you people think that I have got somehow security barrier > for unauthorized access? Physically _LOCK_ the server up. Anyone who can get physical access to the unit can remove the drive and access it from another machine, bypassing all this stuff. Another option is to encrypt the hard drives, but this will require you (or someone else) to enter the password for the encrypted drives every time the system boots up, so it's generally a maintenance nightmare. Well, I am not an expert on FreeBSD. And thats why I don't know that how it works that If 4 Disks of same size for example 146GB each and they are configured with RAID 10, and Root, SWAP, /usr, /var File systems have been created on them. And if one takes one or two harddisks and how come he would be able to read the data when data is splited on 4 disks? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Help... Installing from Port
On 11/23/06, Frank Staals <[EMAIL PROTECTED]> wrote: VeeJay wrote: > Hi > > If I will install Apache2 from the Port, how can I configure to add > module > or disable modules? > Like if I want to enable following modules, how can I do them VIA Ports? > Please find below the text from this Step-by-Step guide I am using. > But that > procedure is for manually downloading the archive, checking signatures > and > then configuring > > But how can I use Port system to get the same results? > > make install > > chown -R root:sys /usr/local/apache2 > > > - > > If we can configure in Port, so where it could be done and how? and if > its > in a file, where it would be placed? > go to the apache2 dir in your portstree ( generally /usr/ports/www/apache2/ ) run 'make config' to set options, if the specific options aren't there: copy the Makefile to Makefile.orig and add the '--enable-OPTION' and '--disable-OPTION' with the other compile options. Not sure though: but aren't a lot of those options also settable in the apache config file ? it might be a better idea to check that out first, so if you ever change your mind about a setting you don't have to recompile your intire apache2 port. -- -Frank Staals ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Hi When I give "make config" command I get error as follow: # make config ===> No options to configure I have also tried --enable-OPTION and --disable-OPTION... but didn't had any luck :( -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
How 2 Configure Makefile before "make install clean" from the ports?
Hi I want to install apache20 from the ports. But before installing, I want to enable/disable some of the modules as follow ./configure \ --prefix=/usr/local/apache2 \ --with-mpm=prefork \ --disable-charset-lite \ --disable-include \ --disable-env \ --disable-setenvif \ --disable-status \ --disable-autoindex \ --disable-asis \ --disable-cgi \ --disable-negotiation \ --disable-imap \ --disable-actions \ --disable-userdir \ --disable-alias \ But I have tried many different ways to configure before giving command "make install clean". But haven't had any luck. Could you please guide me that How can I configure the Makefile before installing apache? For example When I give "make config" command I get error as follow: # make config ===> No options to configure I have also tried --enable-OPTION and --disable-OPTION... in Makefile. but didn't had any luck :( Could you attache a Makefile showing places where to put these switches and how? I will be really very gratefull -- Thanks! BR / vj -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Password Security
On 11/24/06, RW <[EMAIL PROTECTED]> wrote: On Friday 24 November 2006 05:37, Norberto Meijome wrote: > Precisely - MS makes a very strong (and valid) point of saying that once > 'the bad guys' have physical access to your box, the machine is owned. > > The was a (very cool) presentation in Ruxcon (ruxcon.org) this year about > hacking into someone's machine via Firewire. And even if it was an exploit, > neither the researcher/hacker nor MS would consider it "security issue", > because to use this FW attack you need physical access... ie, you've lost > the battle already, it's just a matter of picking your method of breaking > in. I think that's a bit complacent of MS, given that most instances of their OS don't run on servers. If a desktop machine has encrypted partitions, it is protected against someone stealing it and breaking in at their convenience. Reading data from a running machine, shouldn't be as convenient and inconspicuous as plugging-in a cable. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to " [EMAIL PROTECTED]" But what about database encryption? Is it possible to encrypt mySQL database and what is the best method to encrypt which does not affect the performance? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How 2 Configure Makefile before "make install clean" from the ports?
On 11/24/06, Gerard Seibert <[EMAIL PROTECTED]> wrote: On Fri, 24 Nov 2006, K�vesd�n G�bor wrote: > VeeJay escribi�: >> Hi >> >> >> >> I want to install apache20 from the ports. But before installing, I want to >> enable/disable some of the modules as follow >> >> >> >> ./configure \ >> >> --prefix=/usr/local/apache2 \ >> >> --with-mpm=prefork \ >> >> --disable-charset-lite \ >> >> --disable-include \ >> >> --disable-env \ >> >> --disable-setenvif \ >> >> --disable-status \ >> >> --disable-autoindex \ >> >> --disable-asis \ >> >> --disable-cgi \ >> >> --disable-negotiation \ >> >> --disable-imap \ >> >> --disable-actions \ >> >> --disable-userdir \ >> >> --disable-alias \ >> >> >> >> But I have tried many different ways to configure before giving >> command "make install clean". But haven't had any luck. >> >> Could you please guide me that How can I configure the Makefile before >> installing apache? >> >> For example >> >> When I give "make config" command I get error as follow: >> >> >> >> # make config >> ===> No options to configure >> >> >> >> >> >> I have also tried --enable-OPTION and --disable-OPTION... in Makefile. >> >> >> but didn't had any luck :( >> >> Could you attache a Makefile showing places where to put these switches and >> how? I will be really very gratefull >> > When you try to install it, it prints a bunch of knobs, you can use, e.g . > WITH_SSL_MODULES, etc. You can set such in this way: > make WITH_SSL_MODULES=yes install clean I think the easiest method is to determine exactly what knobs you want to employ, then place them in the /etc/make.conf file. /etc/make.conf # Apache 2.2.2. section .if $(.CURDIR:M*/www/apache22) WITH_DBM=bdb WITH_BERKELEYDB=db42 .endif Obviously, you enter the knobs you want to use. An advantage to this method is that should you update Apache at some point, these knobs will be used by the newer version. -- Gerard [EMAIL PROTECTED] Mike: "The Fourth Dimension is a shambles?" Bernie: "Nobody ever empties the ashtrays. People are SO inconsiderate." Gary Trudeau, "Doonesbury" How about to write like this? make WITHOUT_MODULES="charset-lite include env setenvif status autoindex asis cgi negotiation imap actions userdir alias so" WITH_MODULES="mpm=prefork access auth log_config mime dir" -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How 2 Configure Makefile before "make install clean" from the ports?
On 11/24/06, Gerard Seibert <[EMAIL PROTECTED]> wrote: On Fri, 24 Nov 2006, K�vesd�n G�bor wrote: > VeeJay escribi�: >> Hi >> >> >> >> I want to install apache20 from the ports. But before installing, I want to >> enable/disable some of the modules as follow >> >> >> >> ./configure \ >> >> --prefix=/usr/local/apache2 \ >> >> --with-mpm=prefork \ >> >> --disable-charset-lite \ >> >> --disable-include \ >> >> --disable-env \ >> >> --disable-setenvif \ >> >> --disable-status \ >> >> --disable-autoindex \ >> >> --disable-asis \ >> >> --disable-cgi \ >> >> --disable-negotiation \ >> >> --disable-imap \ >> >> --disable-actions \ >> >> --disable-userdir \ >> >> --disable-alias \ >> >> >> >> But I have tried many different ways to configure before giving >> command "make install clean". But haven't had any luck. >> >> Could you please guide me that How can I configure the Makefile before >> installing apache? >> >> For example >> >> When I give "make config" command I get error as follow: >> >> >> >> # make config >> ===> No options to configure >> >> >> >> >> >> I have also tried --enable-OPTION and --disable-OPTION... in Makefile. >> >> >> but didn't had any luck :( >> >> Could you attache a Makefile showing places where to put these switches and >> how? I will be really very gratefull >> > When you try to install it, it prints a bunch of knobs, you can use, e.g . > WITH_SSL_MODULES, etc. You can set such in this way: > make WITH_SSL_MODULES=yes install clean I think the easiest method is to determine exactly what knobs you want to employ, then place them in the /etc/make.conf file. /etc/make.conf # Apache 2.2.2. section .if $(.CURDIR:M*/www/apache22) WITH_DBM=bdb WITH_BERKELEYDB=db42 .endif Obviously, you enter the knobs you want to use. An advantage to this method is that should you update Apache at some point, these knobs will be used by the newer version. -- Gerard [EMAIL PROTECTED] Mike: "The Fourth Dimension is a shambles?" Bernie: "Nobody ever empties the ashtrays. People are SO inconsiderate." Gary Trudeau, "Doonesbury" How about to write like this? make WITHOUT_MODULES="charset-lite include env setenvif status autoindex asis cgi negotiation imap actions userdir alias so" WITH_MODULES="mpm=prefork access auth log_config mime dir" And after compiling with above command, I am getting this error when running apache # /usr/local/sbin/apachectl start Syntax error on line 41 of /usr/local/etc/apache2/httpd.conf: Invalid command 'Order', perhaps mis-spelled or defined by a module not included in the server configuration Even though I have added access, auth modules already in the make command... Please help!!! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How 2 Configure Makefile before "make install clean" from the ports?
On 11/24/06, Gerard Seibert <[EMAIL PROTECTED]> wrote: On Fri, 24 Nov 2006, K�vesd�n G�bor wrote: > VeeJay escribi�: >> Hi >> >> >> >> I want to install apache20 from the ports. But before installing, I want to >> enable/disable some of the modules as follow >> >> >> >> ./configure \ >> >> --prefix=/usr/local/apache2 \ >> >> --with-mpm=prefork \ >> >> --disable-charset-lite \ >> >> --disable-include \ >> >> --disable-env \ >> >> --disable-setenvif \ >> >> --disable-status \ >> >> --disable-autoindex \ >> >> --disable-asis \ >> >> --disable-cgi \ >> >> --disable-negotiation \ >> >> --disable-imap \ >> >> --disable-actions \ >> >> --disable-userdir \ >> >> --disable-alias \ >> >> >> >> But I have tried many different ways to configure before giving >> command "make install clean". But haven't had any luck. >> >> Could you please guide me that How can I configure the Makefile before >> installing apache? >> >> For example >> >> When I give "make config" command I get error as follow: >> >> >> >> # make config >> ===> No options to configure >> >> >> >> >> >> I have also tried --enable-OPTION and --disable-OPTION... in Makefile. >> >> >> but didn't had any luck :( >> >> Could you attache a Makefile showing places where to put these switches and >> how? I will be really very gratefull >> > When you try to install it, it prints a bunch of knobs, you can use, e.g . > WITH_SSL_MODULES, etc. You can set such in this way: > make WITH_SSL_MODULES=yes install clean I think the easiest method is to determine exactly what knobs you want to employ, then place them in the /etc/make.conf file. /etc/make.conf # Apache 2.2.2. section .if $(.CURDIR:M*/www/apache22) WITH_DBM=bdb WITH_BERKELEYDB=db42 .endif Obviously, you enter the knobs you want to use. An advantage to this method is that should you update Apache at some point, these knobs will be used by the newer version. -- Gerard [EMAIL PROTECTED] Mike: "The Fourth Dimension is a shambles?" Bernie: "Nobody ever empties the ashtrays. People are SO inconsiderate." Gary Trudeau, "Doonesbury" Hi How about to write like this? make WITHOUT_MODULES="charset-lite include env setenvif status autoindex asis cgi negotiation imap actions userdir alias so" WITH_MODULES="mpm=prefork access auth log_config mime dir" And after compiling with above command, I am getting this error when running apache # /usr/local/sbin/apachectl start Syntax error on line 41 of /usr/local/etc/apache2/httpd.conf: Invalid command 'Order', perhaps mis-spelled or defined by a module not included in the server configuration Even though I have added access, auth modules already in the make command... Please help!!! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Help... Installing from Port
On 11/23/06, VeeJay <[EMAIL PROTECTED]> wrote: On 11/23/06, Frank Staals <[EMAIL PROTECTED]> wrote: > > VeeJay wrote: > > Hi > > > > If I will install Apache2 from the Port, how can I configure to add > > module > > or disable modules? > > Like if I want to enable following modules, how can I do them VIA > Ports? > > Please find below the text from this Step-by-Step guide I am using. > > But that > > procedure is for manually downloading the archive, checking signatures > > and > > then configuring > > > > But how can I use Port system to get the same results? > > > > > make install > > > > chown -R root:sys /usr/local/apache2 > > > > > > - > > > > If we can configure in Port, so where it could be done and how? and if > > its > > in a file, where it would be placed? > > > > go to the apache2 dir in your portstree ( generally > /usr/ports/www/apache2/ ) run 'make config' to set options, if the > specific options aren't there: copy the Makefile to Makefile.orig and > add the '--enable-OPTION' and '--disable-OPTION' with the other compile > > options. > > Not sure though: but aren't a lot of those options also settable in the > apache config file ? it might be a better idea to check that out first, > so if you ever change your mind about a setting you don't have to > recompile your intire apache2 port. > > -- > -Frank Staals > > > ___ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > [EMAIL PROTECTED] > Hi When I give "make config" command I get error as follow: # make config ===> No options to configure I have also tried --enable-OPTION and --disable-OPTION... but didn't had any luck :( -- Thanks! BR / vj Hi How about to write like this? make WITHOUT_MODULES="charset-lite include env setenvif status autoindex asis cgi negotiation imap actions userdir alias so" WITH_MODULES="mpm=prefork access auth log_config mime dir" And after compiling with above command, I am getting this error when running apache # /usr/local/sbin/apachectl start Syntax error on line 41 of /usr/local/etc/apache2/httpd.conf: Invalid command 'Order', perhaps mis-spelled or defined by a module not included in the server configuration Even though I have added access, auth modules already in the make command... Please help!!! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Apache port compile error
Hi When compiling apache20 from ports and enabling/diabling knobs, I am writing the make command as follow; #make WITHOUT_MODULES="charset-lite include env setenvif status autoindex asis cgi negotiation imap actions userdir alias so" WITH_MODULES="mpm=prefork access auth log_config mime dir" #make install And after compiling with above command, I am getting this error when running apache # /usr/local/sbin/apachectl start Syntax error on line 41 of /usr/local/etc/apache2/httpd.conf: Invalid command 'Order', perhaps mis-spelled or defined by a module not included in the server configuration Even though I have added "access, auth" modules already in the make command... Please help!!! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help! make syntax errors
Hi When compiling apache20 from ports and enabling/diabling knobs, I am writing the make command as follow; #make WITHOUT_MODULES=" charset-lite include env setenvif status autoindex asis cgi negotiation imap actions userdir alias so" WITH_MODULES="mpm=prefork access auth log_config mime dir" #make install And after compiling with above command, I am getting this error when running apache # /usr/local/sbin/apachectl start Syntax error on line 41 of /usr/local/etc/apache2/httpd.conf: Invalid command 'Order', perhaps mis-spelled or defined by a module not included in the server configuration Even though I have added "access, auth" modules already in the make command... Please help!!! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Help! make syntax errors
On 11/25/06, VeeJay <[EMAIL PROTECTED]> wrote: Hi When compiling apache20 from ports and enabling/diabling knobs, I am writing the make command as follow; #make WITHOUT_MODULES=" charset-lite include env setenvif status autoindex asis cgi negotiation imap actions userdir alias so" WITH_MODULES="mpm=prefork access auth log_config mime dir" #make install And after compiling with above command, I am getting this error when running apache # /usr/local/sbin/apachectl start Syntax error on line 41 of /usr/local/etc/apache2/httpd.conf: Invalid command 'Order', perhaps mis-spelled or defined by a module not included in the server configuration Even though I have added "access, auth" modules already in the make command... Please help!!! -- Thanks! BR / vj When I give this command so, I DON'T get required modules in the list, see results: # httpd -l Compiled in modules: core.c prefork.c http_core.c mod_so.c # Thanks for your time -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help Plz! Post Install question
Hi fellows I have two computers with FreeBSD 6.2 with minimum installation. (Without Ports distribution in /usr). I don't have any "/usr/ports" But if I want to install mysql or Perl, what method I should use, in absence of ports directory? How can I install mysql or Perl on my two computers? Please Help! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help Pleasee: How to check FreeBSD's system characterset? How to change it to UTF-8?
Hello fellows How to check FreeBSD's system characterset? How to change it to UTF-8? I am unable to type a Ø Å Æ character Please help! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help Pleasee: How to check FreeBSD's system characterset? How to change it to UTF-8?
Hello fellows How to check FreeBSD's system characterset? How to change it to UTF-8? I am unable to type a Ø Å Æ character Please help! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help....How to set FreeBSD to handle UTF8 characters?
FreeBSD 6.2 Please help! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Help....How to set FreeBSD to handle UTF8 characters?
Thanks Matthias I appreciate your help! Actually, I have a problem. I am running MySQL, Apache on freebsd server. First, I am unable to type the scandinavian characters even I have tried to set the keyboard to danish/swedish etc, etc,... but no luck... but when I give these commands $ export LC_CTYPE=en_US.UTF-8 $ export LC_COLLATE=POSIX then I am able to type in the shell but not correctly, if I press one key for example ø, it types two... that is the problem... Then then problem comes with MYSQL(I don't know if you have some hands on mysql?) I have a database in utf encoding. I can get results * from the database and characters are shown correct formate in the IE browser with utf-8 encoding. BUT When I try to select some names starting with extra alphabets (Å Æ Ä Ö, etc), I simply don't get required results i.e., if I give a select command like: select * from employees where fname LIKE 'Å%'; I get results starting with English alphabet 'A' but not with 'Å'. Which also exist in database. It happens same with Ä... Surprisingly, for Ø I can retreive data but not for Ö. For Ö, I get results starting with english O... :( Here is the output of database characterset: mysql> SHOW VARIABLES LIKE 'character_set%'; +--++ | Variable_name| Value | +--++ | character_set_client | utf8 | | character_set_connection | utf8 | | character_set_database | utf8 | | character_set_filesystem | binary | | character_set_results| utf8 | | character_set_server | utf8 | | character_set_system | utf8 | | character_sets_dir | /usr/local/mysql/share/mysql/charsets/ | +--++ 8 rows in set (0.00 sec) Operating system is FreeBSD 6.2. MySQL 5.0 Thanks for your kind help! On 8/15/07, Matthias Apitz <[EMAIL PROTECTED]> wrote: > > El día Wednesday, August 15, 2007 a las 09:04:58AM +0200, VeeJay escribió: > > > FreeBSD 6.2 > > > > Please help! > > It depends what you exactly want and you should ask with more > details; > > When I need UTF-8 support to edit files or view them I use: > > $ LANG=es_ES.UTF-8 xterm -T utf8 -fn 10x20 > > and run for example 'vim' in the new xterm window; > >matthias > > -- > Matthias Apitz > Manager Technical Support - OCLC PICA GmbH > Gruenwalder Weg 28g - 82041 Oberhaching - Germany > t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211 > e <[EMAIL PROTECTED]> - w http://www.oclcpica.org/ > http://www.UnixArea.de/ > b http://gurucubano.blogspot.com/ > OCLC PICA GmbH, Geschaeftsfuehrer: Christine Magin-Weeger, Norbert > Weinberger > Sitz der Gesellschaft: Oberhaching, HRB Muenchen: 113261 > -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Plz, Help! /usr/sbin/sendmail: No such file or directory
Hi there I have some weird problems in running Postfix. I have installed it on my FreeBSD 6.2 Box. Postfix starts normally as shown from maillog: Sep 13 16:28:37 veejay postfix/postfix-script[18197]: starting the Postfix mail system Sep 13 16:28:37 veejay postfix/master[18198]: daemon started -- version 2.4.0, configuration /usr/local/etc/postfix But I am unable to send an email from the command prompt as shown here: veejay# mail Mail version 8.1 6/6/93. Type ? for help. "/var/mail/christensen": 0 messages & m [EMAIL PROTECTED] Subject: Test message it is workinng . EOT & mail: /usr/sbin/sendmail: No such file or directory q veejay# I thought its path/configuration problem but veejay# /usr/local/sbin/postconf –nshows settings as follow, which seems to be OK? I don't know L command_directory = /usr/local/sbin config_directory = /usr/local/etc/postfix daemon_directory = /usr/local/libexec/postfix debug_peer_level = 2 html_directory = no mail_owner = postfix mailq_path = /usr/local/bin/mailq manpage_directory = /usr/local/man mynetworks_style = host newaliases_path = /usr/local/bin/newaliases queue_directory = /var/spool/postfix readme_directory = no sample_directory = /usr/local/etc/postfix sendmail_path = /usr/local/sbin/sendmail setgid_group = maildrop unknown_local_recipient_reject_code = 550 Could you please help to discover problem? What is wrong? Why this Error "& mail: /usr/sbin/sendmail: No such file or directory " keeps coming? Thank you very much! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
parameter setgid_group: unknown group name: postdrop
Hello there Could anyone help me? I have installed Postfix on my freebsd 6.2 box but still not able to make it work after spending whole day and night I have added a group with name "postdrop" but when I try to send a mail, I get this error logged in maillog: #pw groupadd postfix #pw useradd postfix -c "Postfix SMTP Server" -d /dev/null -g postfix -s /sbin/nologin *#pw groupadd postdrop * # tail /var/log/maillog *Sep 13 20:54:35 veejay postfix/sendmail[1315]: fatal: file /usr/local/etc/postfix/main.cf: parameter setgid_group: unknown group name: postdrop* #ll /etc/group shows *-rw-r- 1 root wheel 582 Sep 13 19:13 /etc/group* Is there pemission problem? I have run set-permissions command too but still no luck! :( *#/usr/local/sbin/postfix set-permissions * why it is not able to find the group in the /etc/group? Any help will be really apprecaited! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
fatal: Recipient addresses must be specified on the command line or via the -t option
Hello there
Could someone help me? I am really tired now spending 24 hours continously
makeing it work...
I have installed Postfix on my 6.2 freebsd box. Now, whenever, I try to run
a php script to send mail out, this error is logged into /var/log/maillog
*Sep 13 21:17:28 veejay postfix/sendmail[1396]: fatal: Recipient addresses
must be specified on the command line or via the -t option*
What is wrong there? Here is the php script. there is address:
$to = "[EMAIL PROTECTED]";
$from = "[EMAIL PROTECTED]";
$subject = "Hi!";
$from_header = "From: $from";
$contents = "this is email test\n\nDoes it work?";
if (mail($to, $subject, $contents, $from_header)) {
echo("Message successfully sent!");
} else {
echo("Message delivery failed...");
}
--
Thanks!
BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help! User Permission
Hello friends How can I restrict a user from getting in to an "Unauthorized folder" and getting directory list with using "ls" command? If he tries to cd to the unauthorized folder or tries to get directory listing so he gets "Permission denied" message? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Please HELP!
Hi
I am sorry to post this question here but I am desparet to get my freebsd
box work soonest possible.
I have installed apache20 on my freebsd box but am unable to run with new
httpd.conf changes
When I run the apache, with command:
# /usr/local/sbin/apachectl restart
I get this message:
httpd not running, trying to start
#
In the error log error is like this:
[Sun Dec 03 01:29:59 2006] [warn] pid file /var/apache/logs/httpd.pid
overwritten -- Unclean shutdown of previous Apache run?
Even I delete the pid file, but it still doesnt work...
Please HELP!
my httpd.conf is mentioned below;
# =
# Basic settings
# =
Listen 0.0.0.0:80
User apache
Group apache
ServerAdmin [EMAIL PROTECTED]
UseCanonicalName Off
ServerSignature Off
HostnameLookups Off
ServerTokens Prod
ServerRoot "/usr/local"
DocumentRoot "/home/apache"
PidFile /var/apache/logs/httpd.pid
ScoreBoardFile /var/apache/logs/httpd.scoreboard
DirectoryIndex index.html
# =
# HTTP and performance settings
# =
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 150
MaxRequestsPerChild 0
# =
# Load Module Section; Dynamic Shared Object (DSO) Support
# =
LoadModule access_module libexec/apache2/mod_access.so
LoadModule auth_module libexec/apache2/mod_auth.so
LoadModule log_config_module libexec/apache2/mod_log_config.so
LoadModule mime_module libexec/apache2/mod_mime.so
LoadModule dir_module libexec/apache2/mod_dir.so
LoadModule rewrite_module libexec/apache2/mod_rewrite.so
# Other required modules are compiled such as Compiled in modules: core.c
prefork.c http_core.c mod_so.c
# =
# Access control
# =
Options None
AllowOverride None
Order deny,allow
Deny from all
Order allow,deny
Allow from all
# =
# MIME encoding
# =
TypesConfig /usr/local/etc/apache2/mime.types
DefaultType text/plain
AddEncoding x-compress .Z
AddEncoding x-gzip .gz .tgz
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddType application/x-tar .tgz
# =
# Logs
# =
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
ErrorLog /var/apache/logs/error_log
CustomLog /var/apache/logs/access_log combined
# =
# Virtual hosts
# =
NameVirtualHost *
DocumentRoot "/home/apache/domain1.com/public_html"
ServerName "www.domain1.com"
ErrorLog /var/apache/logs/domain1.com/error_log
CustomLog /var/apache/logs/domain1.com/access_log combined
DocumentRoot "/home/apache/domain2.com/public_html"
ServerName "www.domain2.com"
ErrorLog /var/apache/logs/domain2.com/error_log
CustomLog /var/apache/logs/domain2.com/access_log combined
--
Thanks!
BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Please HELP!
Hi
Thanks you. But it does not work?
I have spend whole night to solve this problem... but still haven't had it
work
On 12/3/06, Per olof Ljungmark <[EMAIL PROTECTED]> wrote:
VeeJay wrote:
> Hi
>
> I am sorry to post this question here but I am desparet to get my
freebsd
> box work soonest possible.
>
> I have installed apache20 on my freebsd box but am unable to run with
new
> httpd.conf changes
>
> When I run the apache, with command:
>
> # /usr/local/sbin/apachectl restart
>
> I get this message:
>
> httpd not running, trying to start
> #
> In the error log error is like this:
>
> [Sun Dec 03 01:29:59 2006] [warn] pid file /var/apache/logs/httpd.pid
> overwritten -- Unclean shutdown of previous Apache run?
>
> Even I delete the pid file, but it still doesnt work...
>
> Please HELP!
>
> my httpd.conf is mentioned below;
>
>
> # =
> # Basic settings
> # =
> Listen 0.0.0.0:80
> User apache
> Group apache
> ServerAdmin [EMAIL PROTECTED]
> UseCanonicalName Off
> ServerSignature Off
> HostnameLookups Off
> ServerTokens Prod
> ServerRoot "/usr/local"
> DocumentRoot "/home/apache"
> PidFile /var/apache/logs/httpd.pid
> ScoreBoardFile /var/apache/logs/httpd.scoreboard
>
>DirectoryIndex index.html
>
>
> # =
> # HTTP and performance settings
> # =
> Timeout 300
> KeepAlive On
> MaxKeepAliveRequests 100
> KeepAliveTimeout 15
>
>MinSpareServers 5
>MaxSpareServers 10
>StartServers 5
>MaxClients 150
>MaxRequestsPerChild 0
>
>
> # =
> # Load Module Section; Dynamic Shared Object (DSO) Support
> # =
> LoadModule access_module libexec/apache2/mod_access.so
> LoadModule auth_module libexec/apache2/mod_auth.so
> LoadModule log_config_module libexec/apache2/mod_log_config.so
> LoadModule mime_module libexec/apache2/mod_mime.so
> LoadModule dir_module libexec/apache2/mod_dir.so
> LoadModule rewrite_module libexec/apache2/mod_rewrite.so
> # Other required modules are compiled such as Compiled in modules:
core.c
> prefork.c http_core.c mod_so.c
>
> # =
> # Access control
> # =
>
> Options None
>AllowOverride None
>Order deny,allow
>Deny from all
>
>
>Order allow,deny
>Allow from all
>
>
> # =
> # MIME encoding
> # =
>
>TypesConfig /usr/local/etc/apache2/mime.types
>
> DefaultType text/plain
>
>AddEncoding x-compress .Z
>AddEncoding x-gzip .gz .tgz
>AddType application/x-compress .Z
>AddType application/x-gzip .gz .tgz
>AddType application/x-tar .tgz
>
>
> # =
> # Logs
> # =
> LogLevel warn
> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
> combined
> LogFormat "%h %l %u %t \"%r\" %>s %b" common
> LogFormat "%{Referer}i -> %U" referer
> LogFormat "%{User-agent}i" agent
> ErrorLog /var/apache/logs/error_log
> CustomLog /var/apache/logs/access_log combined
>
> # =
> # Virtual hosts
> # =
> NameVirtualHost *
>
>DocumentRoot "/home/apache/domain1.com/public_html"
>ServerName "www.domain1.com"
>ErrorLog /var/apache/logs/domain1.com/error_log
>CustomLog /var/apache/logs/domain1.com/access_log combined
>
>
>DocumentRoot "/home/apache/domain2.com/public_html"
>ServerName "www.domain2.com"
>ErrorLog /var/apache/logs/domain2.com/error_log
>CustomLog /var/apache/logs/domain2.com/access_log combined
>
>
Try
less /usr/local/etc/rc.d/apache2
Does that answer your question?
--
Thanks!
BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
FreeBSD Port Question
Hi guys
How can one find the location of the URL/FTP site where FreeBSD 6.1 fetches
the Source of a Distribution for example, mysql50???
I am trying to compile and install mysql50 at my freebsd61 web server from
source. I can install it from the ports easily and have done twice.
(location: /usr/ports/databases/mysql50-server/)
But I want to change the location of installation for "chroot" reason and
wanna configure with some paraments before compilation too. So, I have tried
A LOT to find the source distribution of mysql-50 for freebsd6x from
dev.mysql.com website or other mirros but with NO luck.
They only have the binary distribution of mysql50 for FreeBSD 6x.
My question is that how can I find the location of the site/ftp where from
FreeBSD61 fetches? I have tried to go through the "Makefile". But since I am
a novice, I cannot understand a bit what it says?
a snipt from Makefile:
PORTNAME?= mysql
PORTVERSION=5.0.2
PORTREVISION?= 0
CATEGORIES= databases
MASTER_SITES= ${MASTER_SITE_MYSQL}
MASTER_SITE_SUBDIR= MySQL-5.0
PKGNAMESUFFIX?= -server
DISTNAME= ${PORTNAME}-${PORTVERSION}-alpha
MAINTAINER= [EMAIL PROTECTED]
COMMENT?= Multithreaded SQL database (server)
WRKSRC= ${WRKDIR}/${PORTNAME}-${PORTVERSION}-alpha
SLAVEDIRS= databases/mysql50-client
PKGINSTALL?=${WRKDIR}/pkg-install
DB_DIR?=/var/db/mysql
USE_LIBTOOL_VER=15
USE_REINPLACE= yes
USE_RC_SUBR=yes
--
Thanks!
BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: FreeBSD Port Question
Thanks Julian
But it is still compiled distribution "
mysql-standard-5.0.27-freebsd6.0-i386.tar.gz" I have tried to download it
and tar it
Like there is a Source distribution is also availible for Windows plateform:
"mysql-5.0.24a-win-src.tar.gz"
I wonder if I can get Source Distribution for FreeBSD 6.x :o(
Brgds
VJ
On 12/5/06, Julian D. Seifert <[EMAIL PROTECTED]> wrote:
On Tue, Dec 05, 2006 at 10:38:30AM +0100, VeeJay wrote:
> a snipt from Makefile:
>
> PORTNAME?= mysql
> PORTVERSION=5.0.2
> PORTREVISION?= 0
> CATEGORIES= databases
> MASTER_SITES= ${MASTER_SITE_MYSQL}
# grep -nie master.*site.*mysql /usr/ports/Mk/*
/usr/ports/Mk/bsd.sites.mk:661:.if !defined(IGNORE_MASTER_SITE_MYSQL)
/usr/ports/Mk/bsd.sites.mk:662:MASTER_SITE_MYSQL+= \
After looking into the file /usr/ports/Mk/bsd.sites.mk we see for example:
ftp://ftp.easynet.be/mysql/Downloads/%SUBDIR%/ \
so what about subdir?
/usr/ports/databases/mysql50-server]# grep -ie subdir= Make
MASTER_SITE_SUBDIR= MySQL-5.0
so we have:
ftp://ftp.easynet.be/mysql/Downloads/MySQL-5.0/
tada :)
cya,
Julian D. `alamar` Seifert
--
If the truth is in your favor no one will believe you.
gpg fingerprint:
435D DDDA 251B 9D70 2F72 78E0 AA5F 11F4 A4ED 451E
--
Thanks!
BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Makefile question... please help...
Hi there,
Is it possible to make configuration changes in Makefile to install a port
as per one's requirments?
I want to accomplish two tasks
1. I want to configure mysql port before installation with following
parameters: Could someone tell me that where in the Makefile, I need to put
these paramenters in order to get my required results? Makefile is at the
end of my message.
Required Configuration paramenters:
--prefix=/usr/local/mysql
--with-mysqld-user=mysql
--with-unix-socket-path=/tmp/mysql.sock
--with-mysqld-ldflags=-all-static
2. I want to install mysql at my given path, so I could be able to assign
the path to mysql user and chroot it PLEASE HELP!!!
Becuase, with default Makefile configuration, mysql installs all scripts
under /usr/local/sbin folder which other deamons also access for example
apache. so, if I alow the access only for mysql ... then other deamons will
not have any access...
chown -R root /usr/local/bin/mysql
chown -R mysql /usr/local/mysql/var
chgrp -R mysql /usr/local/mysql
# New ports collection makefile for:MySQL-server
# Date created: Fri Apr 11 10:06:26 CET 2003
# Whom: Alex Dupre <[EMAIL PROTECTED]>
#
# $FreeBSD: ports/databases/mysql50-server/Makefile,v 1.188 2005/03/21
14:08:49 pav Exp $
#
PORTNAME?= mysql
PORTVERSION=5.0.2
PORTREVISION?= 0
CATEGORIES= databases
MASTER_SITES= ${MASTER_SITE_MYSQL}
MASTER_SITE_SUBDIR= MySQL-5.0
PKGNAMESUFFIX?= -server
DISTNAME= ${PORTNAME}-${PORTVERSION}-alpha
MAINTAINER= [EMAIL PROTECTED]
COMMENT?= Multithreaded SQL database (server)
WRKSRC= ${WRKDIR}/${PORTNAME}-${PORTVERSION}-alpha
SLAVEDIRS= databases/mysql50-client
PKGINSTALL?=${WRKDIR}/pkg-install
DB_DIR?=/var/db/mysql
USE_LIBTOOL_VER=15
USE_REINPLACE= yes
USE_RC_SUBR=yes
CONFIGURE_TARGET=--build=${MACHINE_ARCH}-portbld-freebsd${OSREL}
CONFIGURE_ARGS= --localstatedir=${DB_DIR} \
--without-debug \
--without-readline \
--without-libedit \
--without-bench \
--without-extra-tools \
--with-libwrap \
--with-mysqlfs \
--with-vio \
--with-low-memory \
--with-comment='FreeBSD port: ${PKGNAME}' \
--enable-thread-safe-client
.ifdef USE_MYSQL
.error You have `USE_MYSQL' variable defined either in environment or in
make(1) arguments. Please undefine and try again.
.endif
.if defined(WITH_CHARSET) && ${WITH_CHARSET} != ""
CONFIGURE_ARGS+=--with-charset=${WITH_CHARSET}
.endif
.if defined(WITH_XCHARSET) && ${WITH_XCHARSET} != ""
CONFIGURE_ARGS+=--with-extra-charsets=${WITH_XCHARSET}
.endif
.if defined(WITH_OPENSSL)
USE_OPENSSL=yes
CONFIGURE_ARGS+=--with-openssl=${OPENSSLBASE}
.endif
.if defined(BUILD_STATIC)
CONFIGURE_ARGS+=--with-mysqld-ldflags=-all-static
.endif
.if defined(WITHOUT_INNODB)
CONFIGURE_ARGS+=--without-innodb
.endif
.if defined(WITH_NDB)
CONFIGURE_ARGS+=--with-ndbcluster
.endif
.if defined(WITH_COLLATION) && ${WITH_COLLATION} != ""
CONFIGURE_ARGS+=--with-collation=${WITH_COLLATION}
.endif
.include
.if ${ARCH} == "i386"
CONFIGURE_ARGS+=--enable-assembler --with-berkeley-db
.endif
.if defined(WITH_LINUXTHREADS)
CONFIGURE_ARGS+=--with-named-thread-libs='-DHAVE_GLIBC2_STYLE_GETHOSTBYNAME_R
CONFIGURE_ARGS+=-D_THREAD_SAFE -I${LOCALBASE}/include/pthread/linuxthreads
CFLAGS+=-D__USE_UNIX98 -D_REENTRANT -D_THREAD_SAFE
CFLAGS+=-I${LOCALBASE}/include/pthread/linuxthreads
.if ${OSVERSION} > 50
LIB_DEPENDS+= lthread.[35]:${PORTSDIR}/devel/linuxthreads
CONFIGURE_ARGS+=-L${LOCALBASE}/lib -llthread -llgcc_r -llstdc++ -llsupc++'
.else
LIB_DEPENDS+= lthread.[24]:${PORTSDIR}/devel/linuxthreads
CONFIGURE_ARGS+=-L${LOCALBASE}/lib -llthread -llgcc_r'
.endif
.else
CONFIGURE_ARGS+=--with-named-thread-libs=${PTHREAD_LIBS}
CFLAGS+=${PTHREAD_CFLAGS}
.endif
.if ${OSVERSION} < 50
CXX=${CC}
.endif
.if defined(BUILD_OPTIMIZED)
CFLAGS+=-O3 -fno-omit-frame-pointer
.if ${OSVERSION} > 50 || (defined(USE_GCC) && (${USE_GCC} == 3.0 ||
${USE_GCC} == 3.1 || ${USE_GCC} == 3.2 || ${USE_GCC} == 3.3))
CFLAGS+=-fno-gcse
.endif
.endif
CXXFLAGS+= ${CFLAGS} -felide-constructors -fno-rtti
.if ${OSVERSION} >= 42
CXXFLAGS+= -fno-exceptions
.endif
# MySQL-Server part
.if !defined(CLIENT_ONLY) && !defined(SCRIPTS_ONLY)
USE_MYSQL= yes
WANT_MYSQL_VER= 50
LATEST_LINK=mysql50-server
CONFLICTS= mysql-server-3.* mysql-server-4.*
PLIST_SUB= DB_DIR=${DB_DIR} \
VER=${PORTVERSION}-alpha
.if defined(WITH_NDB)
PLIST_SUB+= NDB=""
.else
PLIST_SUB+= NDB="@comment "
.endif
MAN1= isamchk.1 isamlog.1 mysqld.1 \
mysqld_safe.1 perror.1 replace.1
.if !defined(NOPORTDOCS)
PORTDOCS= manual.html manual.txt manual_toc.html
.endif
INFO= mysql
pre-fetch:
@${ECHO} ""
Re: Makefile question... please help...
Thanks
Where can I make above mentioned required changes... can you please give me
a little hint... since I am novice to Unix
Thanks...
VJ
On 12/6/06, VeeJay <[EMAIL PROTECTED]> wrote:
Hi there,
Is it possible to make configuration changes in Makefile to install a port
as per one's requirments?
I want to accomplish two tasks
1. I want to configure mysql port before installation with following
parameters: Could someone tell me that where in the Makefile, I need to put
these paramenters in order to get my required results? Makefile is at the
end of my message.
Required Configuration paramenters:
--prefix=/usr/local/mysql
--with-mysqld-user=mysql
--with-unix-socket-path=/tmp/mysql.sock
--with-mysqld-ldflags=-all-static
2. I want to install mysql at my given path, so I could be able to assign
the path to mysql user and chroot it PLEASE HELP!!!
Becuase, with default Makefile configuration, mysql installs all scripts
under /usr/local/sbin folder which other deamons also access for example
apache. so, if I alow the access only for mysql ... then other deamons will
not have any access...
chown -R root /usr/local/bin/mysql
chown -R mysql /usr/local/mysql/var
chgrp -R mysql /usr/local/mysql
# New ports collection makefile for:MySQL-server
# Date created: Fri Apr 11 10:06:26 CET 2003
# Whom: Alex Dupre <[EMAIL PROTECTED]
>
#
# $FreeBSD: ports/databases/mysql50-server/Makefile,v 1.188 2005/03/21
14:08:49 pav Exp $
#
PORTNAME?= mysql
PORTVERSION=5.0.2
PORTREVISION?= 0
CATEGORIES= databases
MASTER_SITES= ${MASTER_SITE_MYSQL}
MASTER_SITE_SUBDIR= MySQL-5.0
PKGNAMESUFFIX?= -server
DISTNAME= ${PORTNAME}-${PORTVERSION}-alpha
MAINTAINER= [EMAIL PROTECTED]
COMMENT?= Multithreaded SQL database (server)
WRKSRC= ${WRKDIR}/${PORTNAME}-${PORTVERSION}-alpha
SLAVEDIRS= databases/mysql50-client
PKGINSTALL?=${WRKDIR}/pkg-install
DB_DIR?=/var/db/mysql
USE_LIBTOOL_VER=15
USE_REINPLACE= yes
USE_RC_SUBR=yes
CONFIGURE_TARGET=--build=${MACHINE_ARCH}-portbld-freebsd${OSREL}
CONFIGURE_ARGS= --localstatedir=${DB_DIR} \
--without-debug \
--without-readline \
--without-libedit \
--without-bench \
--without-extra-tools \
--with-libwrap \
--with-mysqlfs \
--with-vio \
--with-low-memory \
--with-comment='FreeBSD port: ${PKGNAME}' \
--enable-thread-safe-client
.ifdef USE_MYSQL
.error You have `USE_MYSQL' variable defined either in environment or in
make(1) arguments. Please undefine and try again.
.endif
.if defined(WITH_CHARSET) && ${WITH_CHARSET} != ""
CONFIGURE_ARGS+=--with-charset=${WITH_CHARSET}
.endif
.if defined(WITH_XCHARSET) && ${WITH_XCHARSET} != ""
CONFIGURE_ARGS+=--with-extra-charsets=${WITH_XCHARSET}
.endif
.if defined(WITH_OPENSSL)
USE_OPENSSL=yes
CONFIGURE_ARGS+=--with-openssl=${OPENSSLBASE}
.endif
.if defined(BUILD_STATIC)
CONFIGURE_ARGS+=--with-mysqld-ldflags=-all-static
.endif
.if defined(WITHOUT_INNODB)
CONFIGURE_ARGS+=--without-innodb
.endif
.if defined(WITH_NDB)
CONFIGURE_ARGS+=--with-ndbcluster
.endif
.if defined(WITH_COLLATION) && ${WITH_COLLATION} != ""
CONFIGURE_ARGS+=--with-collation=${WITH_COLLATION}
.endif
.include
.if ${ARCH} == "i386"
CONFIGURE_ARGS+=--enable-assembler --with-berkeley-db
.endif
.if defined(WITH_LINUXTHREADS)
CONFIGURE_ARGS+=--with-named-thread-libs='-DHAVE_GLIBC2_STYLE_GETHOSTBYNAME_R
CONFIGURE_ARGS+=-D_THREAD_SAFE -I${LOCALBASE}/include/pthread/linuxthreads
CFLAGS+=-D__USE_UNIX98 -D_REENTRANT -D_THREAD_SAFE
CFLAGS+=-I${LOCALBASE}/include/pthread/linuxthreads
.if ${OSVERSION} > 50
LIB_DEPENDS+= lthread.[35]:${PORTSDIR}/devel/linuxthreads
CONFIGURE_ARGS+=-L${LOCALBASE}/lib -llthread -llgcc_r -llstdc++ -llsupc++'
.else
LIB_DEPENDS+= lthread.[24]:${PORTSDIR}/devel/linuxthreads
CONFIGURE_ARGS+=-L${LOCALBASE}/lib -llthread -llgcc_r'
.endif
.else
CONFIGURE_ARGS+=--with-named-thread-libs=${PTHREAD_LIBS}
CFLAGS+=${PTHREAD_CFLAGS}
.endif
.if ${OSVERSION} < 50
CXX=${CC}
.endif
.if defined(BUILD_OPTIMIZED)
CFLAGS+=-O3 -fno-omit-frame-pointer
.if ${OSVERSION} > 50 || (defined(USE_GCC) && (${USE_GCC} == 3.0 ||
${USE_GCC} == 3.1 || ${USE_GCC} == 3.2 || ${USE_GCC} == 3.3))
CFLAGS+=-fno-gcse
.endif
.endif
CXXFLAGS+= ${CFLAGS} -felide-constructors -fno-rtti
.if ${OSVERSION} >= 42
CXXFLAGS+= -fno-exceptions
.endif
# MySQL-Server part
.if !defined(CLIENT_ONLY) && !defined(SCRIPTS_ONLY)
USE_MYSQL= yes
WANT_MYSQL_VER= 50
LATEST_LINK=mysql50-server
CONFLICTS= mysql-server-3.* mysql-server-4.*
PLIST_SUB= DB_DIR=${DB_DIR} \
VE
Please help*
I am a novice with Unix and user of MySQL on windows….. I have a problem, i.e. I want to install MySQL5.0 at my FreeBSD 6.1 box with following configurations: --prefix=/usr/local/mysql --with-mysqld-user=mysql --with-unix-socket-path=/tmp/mysql.sock --with-mysqld-ldflags=-all-static How and at What place, can I configure the Makefile under /usr/ports/databases/mysql50-server/ to have MySQL server working with above mentioned configurations? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
libmap.conf file????
Hi, I am running a FreeBSD6.1 Webserver with mysql but having problems I found below mentioned quote on the net? But I don't know where to find this "libmap.conf" file? -quote from the NET For FreeBSD 6 tests show that using "libthr" gives the best performance (search on the net for some benchmarks). To use libthr, just download the precompiled mysql for FreeBSD 6, and add the following lines to your /etc/libmap.conf : [mysqld] libpthread.so.2 libthr.so.2 libpthread.so libthr.so After that restart your mysqld, and from then on it should be using libthr. --end of quote... While, it says that one has to download precompiled mysql. But I installed the mysql50-server from the FreeBSD ports collection. 1. I wonder, that would I have to create /etc/libmap.conf file by myself? Or 2. Do I need to install another port to have it work? 3. If I make the file by myself and restart the server, how could I know that mySQL is using now "libthr" library? Thanks for your help -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help, FreeBSd ...PHP installation problem...
Hello Can someone help me? I am trying to install PHP 4.4 on my freeBSD box. I have installed apache20 already and its working perfect. But when I want to install PHP, I get compilation error. 1. first I give this command: ./configure --prefix=/usr/local/apache2/php --with-mysql=/usr/local/mysql --with-apxs2=/usr/local/apache2/sbin/apxs --enable-safe-mode 2. then I give make command localhost# make 3. Then I get this error: /bin/sh /home/localuser/temp/php-4.4.4/libtool --silent --preserve-dup-deps --mode=compile gcc -Iext/standard/ -I/home/localuser/temp/php-4.4.4/ext/standard/ -DPHP_ATOM_INC -I/home/localuser/temp/php-4.4.4/include -I/home/localuser/temp/php-4.4.4/main -I/home/localuser/temp/php-4.4.4-I/usr/local/mysql/include/mysql -I/home/localuser/temp/php- 4.4.4/ext/xml/expat -I/home/localuser/temp/php-4.4.4/TSRM -I/home/localuser/temp/php-4.4.4/Zend-g -O2 -prefer-non-pic -c /home/localuser/temp/php-4.4.4/ext/standard/info.c -o ext/standard/info.lo /bin/sh /home/localuser/temp/php-4.4.4/libtool --silent --preserve-dup-deps --mode=compile gcc -Imain/ -I/home/localuser/temp/php-4.4.4/main/ -DPHP_ATOM_INC -I/home/localuser/temp/php-4.4.4/include -I/home/localuser/temp/php-4.4.4/main -I/home/localuser/temp/php-4.4.4-I/usr/local/mysql/include/mysql -I/home/localuser/temp/php- 4.4.4/ext/xml/expat -I/home/localuser/temp/php-4.4.4/TSRM -I/home/localuser/temp/php-4.4.4/Zend-g -O2 -prefer-non-pic -c main/internal_functions.c -o main/internal_functions.lo /bin/sh /home/localuser/temp/php-4.4.4/libtool --silent --preserve-dup-deps --mode=link gcc -g -O2 -prefer-non-pic -rpath /home/localuser/temp/php- 4.4.4/libs -avoid-version -module -L/usr/local/mysql/lib/mysql -R /usr/local/mysql/lib/mysql ext/pcre/pcrelib/pcre_chartables.lo ext/pcre/pcrelib/pcre_ucp_searchfuncs.lo ext/pcre/pcrelib/pcre_compile.lo ext/pcre/pcrelib/pcre_config.lo ext/pcre/pcrelib/pcre_dfa_exec.lo ext/pcre/pcrelib/pcre_exec.lo ext/pcre/pcrelib/pcre_fullinfo.lo ext/pcre/pcrelib/pcre_get.lo ext/pcre/pcrelib/pcre_globals.lo ext/pcre/pcrelib/pcre_info.lo ext/pcre/pcrelib/pcre_maketables.lo ext/pcre/pcrelib/pcre_ord2utf8.lo ext/pcre/pcrelib/pcre_refcount.lo ext/pcre/pcrelib/pcre_study.lo ext/pcre/pcrelib/pcre_tables.lo ext/pcre/pcrelib/pcre_try_flipped.lo ext/pcre/pcrelib/pcre_valid_utf8.lo ext/pcre/pcrelib/pcre_version.lo ext/pcre/pcrelib/pcre_xclass.lo ext/pcre/php_pcre.lo ext/ctype/ctype.lo ext/mysql/php_mysql.lo ext/overload/overload.lo ext/posix/posix.lo ext/session/session.lo ext/session/mod_files.lo ext/session/mod_mm.lo ext/session/mod_user.lo regex/regcomp.lo regex/regexec.lo regex/regerror.lo regex/regfree.lo ext/standard/array.lo ext/standard/base64.lo ext/standard/basic_functions.lo ext/standard/browscap.lo ext/standard/crc32.lo ext/standard/crypt.lo ext/standard/cyr_convert.lo ext/standard/datetime.lo ext/standard/dir.lo ext/standard/dl.lo ext/standard/dns.lo ext/standard/exec.lo ext/standard/file.lo ext/standard/filestat.lo ext/standard/flock_compat.lo ext/standard/formatted_print.lo ext/standard/fsock.lo ext/standard/head.lo ext/standard/html.lo ext/standard/image.lo ext/standard/info.lo ext/standard/iptc.lo ext/standard/lcg.lo ext/standard/link.lo ext/standard/mail.lo ext/standard/math.lo ext/standard/md5.lo ext/standard/metaphone.lo ext/standard/microtime.lo ext/standard/pack.lo ext/standard/pageinfo.lo ext/standard/parsedate.lo ext/standard/quot_print.lo ext/standard/rand.lo ext/standard/reg.lo ext/standard/soundex.lo ext/standard/string.lo ext/standard/scanf.lo ext/standard/syslog.lo ext/standard/type.lo ext/standard/uniqid.lo ext/standard/url.lo ext/standard/url_scanner.lo ext/standard/var.lo ext/standard/versioning.lo ext/standard/assert.lo ext/standard/strnatcmp.lo ext/standard/levenshtein.lo ext/standard/incomplete_class.lo ext/standard/url_scanner_ex.lo ext/standard/ftp_fopen_wrapper.lo ext/standard/http_fopen_wrapper.lo ext/standard/php_fopen_wrapper.lo ext/standard/credits.lo ext/standard/css.lo ext/standard/var_unserializer.lo ext/standard/ftok.lo ext/standard/aggregation.lo ext/standard/sha1.lo ext/tokenizer/tokenizer.lo ext/xml/xml.lo ext/xml/expat/xmlparse.lo ext/xml/expat/xmlrole.lo ext/xml/expat/xmltok.lo TSRM/TSRM.lo TSRM/tsrm_strtok_r.lo TSRM/tsrm_virtual_cwd.lo main/main.lo main/snprintf.lo main/spprintf.lo main/php_sprintf.lo main/safe_mode.lo main/fopen_wrappers.lo main/alloca.lo main/php_scandir.lo main/php_ini.lo main/SAPI.lo main/rfc1867.lo main/php_content_types.lo main/strlcpy.lo main/strlcat.lo main/mergesort.lo main/reentrancy.lo main/php_variables.lo main/php_ticks.lo main/streams.lo main/network.lo main/php_open_temporary_file.lo main/php_logos.lo main/output.lo main/memory_streams.lo main/user_streams.lo Zend/zend_language_parser.lo Zend/zend_language_scanner.lo Zend/zend_ini_parser.lo Zend/zend_ini_scanner.lo Zend/zend_alloc.lo Zend/zend_compile.lo Zend/zend_constants.lo Zend/zend_dynamic_array.lo Zend/zend_execute_API.lo Zend/zend_highlight.lo Zend/zend_llist.lo Zend/zend_opcode.
chroot, performance & security
Hi I have made partations on my web server like at very outer edges of the disks, I have /, then /var, /tmp, /usr and in the end /home. Since I read that Data modified & used often should be placed at close to outer edges as possible. So, I am having all logs (apache, ftp, mysql and other logs) under /var/logs I have all my mysql DBs under /var/mysql/db But if for Security reseasons, I want to chroot apache, mysql and ftp under /home, then along with all executables and liberaries I have to move all logs, DBs under /home/chroot But then I think, If I move all these data from /var... I miss performance? Please comment? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
how to fetch again a port from port distribution (ftp site)?
Hi I was trying to install mysql from port collection. But during downloading port from port distribution, my internet connection got broken for few minuts... now when I run make again... it tries to compile uncomplete downloaded src how can I get rid of this pre-fetched src, remove it and how to fetch again a port from port distribution (ftp site) when src is already downloaded once? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
FreeBSD chroot problem...Please help!!!
Hello there I was wondering if someone having great knowledge of FreeBSD chroot system could give me some help. I trying to run MySQL and Apache under a chroot envoirnment. But I am getting these errors. Could you please help me to solve these problems. I have googled a lot but did't find any solution. Please help! 1. When running MySQL 5.0 in a chroot envoirnment, I get following error: # chrootuid /chroot/mysql mysql /usr/local/mysql/libexec/mysqld & [1] 599 # /usr/local/mysql/libexec/mysqld: Can't create/write to file '/var/tmp/ibPM3e0d' (Errcode: 13) 070107 10:43:49 InnoDB: Error: unable to create temporary file; errno: 13 070107 10:43:49 [Note] /usr/local/mysql/libexec/mysqld: ready for connections. Version: '5.0.27' socket: '/tmp/mysql.sock' port: 0 FreeBSD port: mysql-server-5.0.27 2. When running Apache in chroot envoirnment, I get following error: # chroot /chroot/httpd /usr/local/apache/bin/httpd fopen: Operation not supported httpd: could not open document config file /dev/null I will really appreciate your kind help! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
rc.conf Where to put DNS Servers addresses
Hello friends During installation, we provide DNS server address, Defaultrouter address, machin's IP address and Netmask address. I can find and change the IP, Netmask and Defaultrouter addresses in /etc/rc.conf. But where to find & change DNS1 & DNS2 servers IP's? In which file and what location, I can find the DNS Server IP address I gave during installation? Thanks for the help! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
FreeBSD File System, please help
Hello my friends 1. How to get the Files listing of "Recently Changed" files under a File System based on date... for example Root / 2. How to see that how many Users are created on a FreeBSD System.. meaning how to get All Users/Groups list on a FreeBSD Server? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
User Security Question?
Hello Friends Just had a debate with a collegue at office, but still lack knowledge on FreeBSD security :( I have few questions. 1. What previligies a "standard" user (NOT member of Wheel Group) has on a FreeBSD Box? 2. How can he/she damages the systems or make a breach? 3. If that particular user is willing to damage the FreeBSD box, so which "locations" OR "files" are more likely to be damaged or affected? 4. How dangerous a Standard User could be to a FreeBSD box? 5. What sort of possible methods he/she can apply to hack the system and create a breach into the system? 6. How can we check that if a system is affected by a Bad User? I would really appreciate your comments in this regard Cheers!!! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: User Security Question?
On 1/9/07, VeeJay <[EMAIL PROTECTED]> wrote: Hello Friends Just had a debate with a collegue at office, but still lack knowledge on FreeBSD security :( I have few questions. 1. What previligies a "standard" user (NOT member of Wheel Group) has on a FreeBSD Box? 2. How can he/she damages the systems or make a breach? 3. If that particular user is willing to damage the FreeBSD box, so which "locations" OR "files" are more likely to be damaged or affected? 4. How dangerous a Standard User could be to a FreeBSD box? 5. What sort of possible methods he/she can apply to hack the system and create a breach into the system? 6. How can we check that if a system is affected by a Bad User? I would really appreciate your comments in this regard Cheers!!! -- Thanks! BR / vj -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
How can we check that if a system is affected by a Bad User?
Hello Friends How can we check that if a system is affected by a Bad User? -- Thanks! BR / vj -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
How to check how many prcesses/dæmons are runni ng?
Hallo there How to check how many prcesses/dæmons are running? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
How dangerous a Standard User could be to a FreeBSD box?
Hi How dangerous a Standard User could be to a FreeBSD box? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Process List & Security??
Hi Can some good one at security side look into these running process? And see if there is a Process some is dangerous/ security breach which a Bad User has put? Thanks $ ps xa PID TT STAT TIME COMMAND 0 ?? WLs0:00.00 [swapper] 1 ?? ILs0:00.00 /sbin/init -- 2 ?? DL 0:02.90 [g_event] 3 ?? DL 0:02.87 [g_up] 4 ?? DL 0:03.04 [g_down] 5 ?? DL 0:00.00 [thread taskq] 6 ?? DL 0:00.00 [acpi_task_0] 7 ?? DL 0:00.00 [acpi_task_1] 8 ?? DL 0:00.00 [acpi_task_2] 9 ?? DL 0:00.00 [kqueue taskq] 10 ?? RL 2775:10.56 [idle] 11 ?? WL 0:59.34 [swi4: clock sio] 12 ?? WL 0:00.00 [swi3: vm] 13 ?? WL 0:00.10 [swi1: net] 14 ?? DL 0:02.65 [yarrow] 15 ?? WL 0:00.00 [swi5: +] 16 ?? WL 0:00.00 [swi2: cambio] 17 ?? WL 0:00.00 [swi6: task queue] 18 ?? WL 0:00.00 [swi6: Giant taskq] 19 ?? WL 0:00.00 [irq9: acpi0] 20 ?? WL 0:00.22 [irq16: bce0 em0+] 21 ?? WL 0:00.32 [irq78: mfi0] 22 ?? WL 0:00.00 [irq17: em1] 23 ?? WL 0:00.00 [irq21: uhci0 uhci+] 24 ?? DL 0:00.01 [usb0] 25 ?? DL 0:00.00 [usbtask] 26 ?? WL 0:00.00 [irq20: uhci1] 27 ?? DL 0:00.01 [usb1] 28 ?? DL 0:00.01 [usb2] 29 ?? DL 0:00.01 [usb3] 30 ?? WL 0:00.00 [irq14: ata0] 31 ?? WL 0:00.00 [irq15: ata1] 32 ?? WL 0:00.00 [swi0: sio] 33 ?? WL 0:00.00 [irq1: atkbd0] 34 ?? DL 0:00.07 [pagedaemon] 35 ?? DL 0:00.00 [vmdaemon] 36 ?? DL 0:01.11 [pagezero] 37 ?? DL 0:00.30 [bufdaemon] 38 ?? DL 0:59.50 [syncer] 39 ?? DL 0:00.29 [vnlru] 40 ?? DL 0:00.43 [softdepflush] 41 ?? DL 0:01.41 [schedcpu] 151 ?? Is 0:00.00 adjkerntz -i 644 ?? Is 0:00.00 /sbin/devd 688 ?? Ss 0:00.14 /usr/sbin/syslogd -s 761 ?? Ss 0:00.09 /usr/sbin/usbd 809 ?? Is 0:00.06 /usr/sbin/sshd 815 ?? Ss 0:00.90 sendmail: accepting connections (sendmail) 819 ?? Is 0:00.02 sendmail: Queue [EMAIL PROTECTED]:30:00 for /var/spool/clientmqueue (sendmail) 825 ?? Is 0:00.22 /usr/sbin/cron -s 1007 ?? Ss 0:01.10 /usr/local/apache/bin/httpd 1008 ?? I 0:00.00 /usr/local/apache/bin/httpd 1009 ?? I 0:00.00 /usr/local/apache/bin/httpd 1010 ?? I 0:00.00 /usr/local/apache/bin/httpd 1011 ?? I 0:00.00 /usr/local/apache/bin/httpd 1012 ?? I 0:00.00 /usr/local/apache/bin/httpd 1037 ?? I 0:00.00 /usr/local/apache/bin/httpd 7862 ?? Is 0:00.01 sshd: digill7b [priv] (sshd) 7866 ?? S 0:00.01 sshd: [EMAIL PROTECTED] (sshd) 866 v0 Is+0:00.00 /usr/libexec/getty Pc ttyv0 867 v1 Is+0:00.00 /usr/libexec/getty Pc ttyv1 868 v2 Is+0:00.00 /usr/libexec/getty Pc ttyv2 869 v3 Is+0:00.00 /usr/libexec/getty Pc ttyv3 870 v4 Is+0:00.00 /usr/libexec/getty Pc ttyv4 871 v5 Is+0:00.00 /usr/libexec/getty Pc ttyv5 872 v6 Is+0:00.00 /usr/libexec/getty Pc ttyv6 873 v7 Is+0:00.00 /usr/libexec/getty Pc ttyv7 7867 p0 Ss 0:00.00 -sh (sh) 7928 p0 R+ 0:00.00 ps xa 1015 p2- I 0:00.00 /bin/sh /usr/local/mysql/bin/mysqld_safe 1033 p2- S 0:11.97 /usr/local/mysql/libexec/mysqld --basedir=/usr/local/mysql --datadir=/var/db/mysql --user=mysql --pid-file=/var/db/mysql/localhost.maanjee.pid --port=33 $ -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Is there a way to get List of Only those files in a filesystem which are modified on a specifict date?
Hi Is there a way to get List of Only those files in a filesystem which are modified on a specifict date? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Are there any log files which shows who is logging to a FreeBSD box and when?
Hi Can anyone tell? Are there any log files which shows who is logging to a FreeBSD box and when? If yes, where can one find them? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Please Help! How to STOP them...
I am reading many hundred lines similar to below mentioned? Could you please advise me what to do and how can I make my box more secure? Jan 9 17:54:42 localhost sshd[5130]: reverse mapping checking getaddrinfo for bbs-83-179.189.218.on-nets.com [218.189.179.83] failed - POSSIBLE BREAK-IN ATTEMPT! Jan 9 17:54:42 localhost sshd[5130]: Invalid user sysadmin from 218.189.179.83 -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
What to write in a secure hosts.allow file? Please advise
This is a sample file... What to REMOVE and What to ADD or KEEP? # cat /etc/hosts.allow # # hosts.allow access control file for "tcp wrapped" applications. # $FreeBSD: src/etc/hosts.allow,v 1.19.8.1 2006/02/19 14:57:01 ume Exp $ # # NOTE: The hosts.deny file is deprecated. # Place both 'allow' and 'deny' rules in the hosts.allow file. # See hosts_options(5) for the format of this file. # hosts_access(5) no longer fully applies. #_ _ _ # | | __ __ __ _ _ __ ____ __ | | ___ | | # | _| \ \/ / / _` | | '_ ` _ \ | '_ \ | | / _ \ | | # | |___ > < | (_| | | | | | | | | |_) | | | | __/ |_| # |_| /_/\_\ \__,_| |_| |_| |_| | .__/ |_| \___| (_) # |_| # !!! This is an example! You will need to modify it for your specific # !!! requirements! # Start by allowing everything (this prevents the rest of the file # from working, so remove it when you need protection). # The rules here work on a "First match wins" basis. ALL : ALL : allow # Wrapping sshd(8) is not normally a good idea, but if you # need to do it, here's how #sshd : .evil.cracker.example.com : deny # Protect against simple DNS spoofing attacks by checking that the # forward and reverse records for the remote host match. If a mismatch # occurs, access is denied, and any positive ident response within # 20 seconds is logged. No protection is afforded against DNS poisoning, # IP spoofing or more complicated attacks. Hosts with no reverse DNS # pass this rule. ALL : PARANOID : RFC931 20 : deny # Allow anything from localhost. Note that an IP address (not a host # name) *MUST* be specified for rpcbind(8). ALL : localhost 127.0.0.1 : allow # Comment out next line if you build libwrap with NO_INET6=yes. ALL : [::1] : allow ALL : my.machine.example.com 192.0.2.35 : allow # To use IPv6 addresses you must enclose them in []'s ALL : [fe80::%fxp0]/10 : allow ALL : [fe80::]/10 : deny ALL : [2001:db8:2:1:2:3:4:3fe1] : deny ALL : [2001:db8:2:1::]/64 : allow # Sendmail can help protect you against spammers and relay-rapers sendmail : localhost : allow sendmail : .nice.guy.example.com : allow sendmail : .evil.cracker.example.com : deny sendmail : ALL : allow # Exim is an alternative to sendmail, available in the ports tree exim : localhost : allow exim : .nice.guy.example.com : allow exim : .evil.cracker.example.com : deny exim : ALL : allow # Rpcbind is used for all RPC services; protect your NFS! # (IP addresses rather than hostnames *MUST* be used here) rpcbind : 192.0.2.32/255.255.255.224 : allow rpcbind : 192.0.2.96/255.255.255.224 : allow rpcbind : ALL : deny # NIS master server. Only local nets should have access ypserv : localhost : allow ypserv : .unsafe.my.net.example.com : deny ypserv : .my.net.example.com : allow ypserv : ALL : deny # Provide a small amount of protection for ftpd ftpd : localhost : allow ftpd : .nice.guy.example.com : allow ftpd : .evil.cracker.example.com : deny ftpd : ALL : allow # You need to be clever with finger; do _not_ backfinger!! You can easily # start a "finger war". fingerd : ALL \ : spawn (echo Finger. | \ /usr/bin/mail -s "tcpd\: [EMAIL PROTECTED] fingered me!" root) & \ : deny # The rest of the daemons are protected. ALL : ALL \ : severity auth.info \ : twist /bin/echo "You are not welcome to use %d from %h." -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Please Help! How to STOP them...
Thanks Reko Just couple of more questions... On 1/12/07, Reko Turja <[EMAIL PROTECTED]> wrote: From: "VeeJay" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; "FreeBSD-Questions" Sent: Friday, January 12, 2007 11:43 PM Subject: Please Help! How to STOP them... >I am reading many hundred lines similar to below mentioned? > > Could you please advise me what to do and how can I make my box more > secure? > > Jan 9 17:54:42 localhost sshd[5130]: reverse mapping checking > getaddrinfo > for bbs-83-179.189.218.on-nets.com [218.189.179.83] failed - > POSSIBLE > BREAK-IN ATTEMPT! > Jan 9 17:54:42 localhost sshd[5130]: Invalid user sysadmin from > 218.189.179.83 It's basically just script kiddies trying to get in using some ready made user/password pairs. Lots of info covering this has been posted in these newsgroups previously, but some things you might consider Moving your sshd port somewhere else than 22 - the prepackaged "cracking" programs don't scan ports, just blindly try out the default port - with determined/skilled attacker it's different matter entirely though. How to change the port from 22 to something other and in what range should I choose a number? Use some kind of portblocker (lots in ports tree) which closes the port after predetermined number of attempts - or as an alternative, use PF to close the port for IP's in question after predetermined number of connection attempts in given time. Can you suggest such port which I should install to block these attempts? Use key based authentication and stop using passwords altogether. What do you mean here? Remember to keep ssh1 disabled as well as direct root access into ssh from the ssh config file. How to disable SSH1 and How to stop direct root access into ssh, where to change? -Reko -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Please Help! How to STOP them...
What should be ENABLED and what should be DISABLED? # $OpenBSD: sshd_config,v 1.74 2006/07/19 13:07:10 dtucker Exp $ # $FreeBSD: src/crypto/openssh/sshd_config,v 1.42.2.4 2006/11/11 00:51:28 des Exp $ # This is the sshd server system-wide configuration file. See # sshd_config(5) for more information. # This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin # The strategy used for options in the default sshd_config shipped with # OpenSSH is to specify options with their default value where # possible, but leave them commented. Uncommented options change a # default value. # Note that some of FreeBSD's defaults differ from OpenBSD's, and # FreeBSD has a few additional options. #VersionAddendum FreeBSD-20061110 #Port 22 #Protocol 2 #AddressFamily any #ListenAddress 0.0.0.0 #ListenAddress :: # HostKey for protocol version 1 #HostKey /etc/ssh/ssh_host_key # HostKeys for protocol version 2 #HostKey /etc/ssh/ssh_host_dsa_key # Lifetime and size of ephemeral version 1 server key #KeyRegenerationInterval 1h #ServerKeyBits 768 # Logging # obsoletes QuietMode and FascistLogging #SyslogFacility AUTH #LogLevel INFO # Authentication: #LoginGraceTime 2m #PermitRootLogin no #StrictModes yes #MaxAuthTries 6 #RSAAuthentication yes #PubkeyAuthentication yes #AuthorizedKeysFile .ssh/authorized_keys # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts #RhostsRSAAuthentication no # similar for protocol version 2 #HostbasedAuthentication no # Change to yes if you don't trust ~/.ssh/known_hosts for # RhostsRSAAuthentication and HostbasedAuthentication #IgnoreUserKnownHosts no # Don't read the user's ~/.rhosts and ~/.shosts files #IgnoreRhosts yes # Change to yes to enable built-in password authentication. #PasswordAuthentication no #PermitEmptyPasswords no # Change to no to disable PAM authentication #ChallengeResponseAuthentication yes # Kerberos options #KerberosAuthentication no #KerberosOrLocalPasswd yes #KerberosTicketCleanup yes #KerberosGetAFSToken no # GSSAPI options #GSSAPIAuthentication no #GSSAPICleanupCredentials yes # Set this to 'no' to disable PAM authentication, account processing, # and session processing. If this is enabled, PAM authentication will # be allowed through the ChallengeResponseAuthentication and # PasswordAuthentication. Depending on your PAM configuration, # PAM authentication via ChallengeResponseAuthentication may bypass # the setting of "PermitRootLogin without-password". # If you just want the PAM account and session checks to run without # PAM authentication, then enable this but set PasswordAuthentication # and ChallengeResponseAuthentication to 'no'. #UsePAM yes #AllowTcpForwarding yes #GatewayPorts no #X11Forwarding yes #X11DisplayOffset 10 #X11UseLocalhost yes #PrintMotd yes #PrintLastLog yes #TCPKeepAlive yes #UseLogin no #UsePrivilegeSeparation yes #PermitUserEnvironment no #Compression delayed #ClientAliveInterval 0 #ClientAliveCountMax 3 #UseDNS yes #PidFile /var/run/sshd.pid #MaxStartups 10 #PermitTunnel no # no default banner path #Banner /some/path # override default of no subsystems Subsystem sftp/usr/libexec/sftp-server # Example of overriding settings on a per-user basis #Match User anoncvs # X11Forwarding no # AllowTcpForwarding no # ForceCommand cvs server What steps need to follow? On 1/12/07, VeeJay <[EMAIL PROTECTED]> wrote: Thanks Reko Just couple of more questions... On 1/12/07, Reko Turja <[EMAIL PROTECTED]> wrote: > > From: "VeeJay" <[EMAIL PROTECTED]> > To: < [EMAIL PROTECTED]>; "FreeBSD-Questions" > > Sent: Friday, January 12, 2007 11:43 PM > Subject: Please Help! How to STOP them... > > > >I am reading many hundred lines similar to below mentioned? > > > > Could you please advise me what to do and how can I make my box more > > secure? > > > > Jan 9 17:54:42 localhost sshd[5130]: reverse mapping checking > > getaddrinfo > > for bbs-83-179.189.218.on-nets.com [218.189.179.83] failed - > > POSSIBLE > > BREAK-IN ATTEMPT! > > Jan 9 17:54:42 localhost sshd[5130]: Invalid user sysadmin from > > 218.189.179.83 > > It's basically just script kiddies trying to get in using some ready > made user/password pairs. > > Lots of info covering this has been posted in these newsgroups > previously, but some things you might consider > > Moving your sshd port somewhere else than 22 - the prepackaged > "cracking" programs don't scan ports, just blindly try out the default > port - with determined/skilled attacker it's different matter entirely > though. How to change the port from 22 to something other and in what range should I choose a number? Use some kind of portblocker (lots in ports tree) which closes t
SSH2 question?
Hello I have two questions, please comment... 1. Can one user have more than one public_keys i.e. multiple public_keys? If yes to above, would all be stored at users path like /home/username/.ssh If yes, to above, would all public keys be written at the same line for option in ssh_config file "AuthorizedKeysFile"? AuthorizedKeysFile .ssh/user_authorized_keys 2. What about other users who also have SSH account, How to indentify in ssh_config file that which public_key belongs to which user? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: SSH2 question?
Hello friends... I really appreciate for your kind help having one more question... can I jail a user being login via SSH/SFTP to an other location/directory than user's $HOME directory? meaing if users $HOME directory is like this /home/alex and user is able to chdir to upward... but I want to limit/chroot user to some other location like /home/temp and don't want to have user chdir upward... . Thanks... VJ On 1/20/07, Derek Ragona <[EMAIL PROTECTED]> wrote: Yes different keys for different hosts, stored below their home directory. -Derek At 01:20 AM 1/20/2007, VeeJay wrote: Hello I have two questions, please comment... 1. Can one user have more than one public_keys i.e. multiple public_keys? If yes to above, would all be stored at users path like /home/username/.ssh If yes, to above, would all public keys be written at the same line for option in ssh_config file "AuthorizedKeysFile"? AuthorizedKeysFile .ssh/user_authorized_keys 2. What about other users who also have SSH account, How to indentify in ssh_config file that which public_key belongs to which user? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to " [EMAIL PROTECTED]" -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. -- This message has been scanned for viruses and dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is believed to be clean. MailScanner thanks transtec Computers <http://www.transtec.co.uk/> for their support. -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: SSH2 question?
Right...
But I am not running any FTP server. user is getting login by
SSH/SFTP.
would i have to change the user's login configruation or what?
Thanks
/VJ
On 1/20/07, Matthew Seaman <[EMAIL PROTECTED]> wrote:
VeeJay wrote:
> Hello
>
> I have two questions, please comment...
>
> 1. Can one user have more than one public_keys i.e. multiple
public_keys?
Yes.
> If yes to above, would all be stored at users path like
/home/username/.ssh
That would be the usual way of doing things, but there is no restriction
on where you can put keys, other than the requirement that the location
is sufficiently well secured that keys cannot be modified by anyone other
than the owner or root.
Note that ssh will by default look for private keys in ${HOME}/.ssh/id_dsa
and ${HOME}/.ssh/id_rsa -- if you keep private keys in other files,
you'll need to tell ssh that by using the '-I' flag on the command line
*public* keys are different. Public keys and the authorized_keys
file must be stored relative to the home directory of the account they
are being used to access. Well, you generally keep a copy of the public
key with the corresponding private key for reference -- unless it is
in the authorized_keys file it doesn't have any effect. The restrictions
on who can modify the authorized_keys file are strict.
> If yes, to above, would all public keys be written at the same line
> for option in ssh_config file "AuthorizedKeysFile"?
You can certainly add as many public keys as you want to an authorized
keys file. Basically that says that the owner of the public key
corresponding to one of those public keys is permitted to log into that
account.
> AuthorizedKeysFile .ssh/user_authorized_keys
Note that this location is relative to the home directory of the account
that is being logged into. The assumption is that each userid has a
separate home directory. If you made a number of accounts and had them
all share the same home directory, then the authorized keys file would
permit login to any of the accounts using that home directory (assuming
you could satisfy sshd's requirements about filesystem permissions)
> 2. What about other users who also have SSH account, How to indentify in
> ssh_config file that which public_key belongs to which user?
You wouldn't use the ssh_config file for that. There's a comment field
at the end of a SSH public key which you can set to whatever value you
want. ssh-keygen defaults to [EMAIL PROTECTED], but you can just edit
the file and change it to whatever you want, so long as it is all on one
line.
Cheers,
Matthew
--
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
Kent, CT11 9PW
--
Thanks!
BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
JAIL/CHROOT question?
hello guys I am having one question... can I jail a user being login via SSH to another location/directory than user's $HOME directory? meaing if users $HOME directory is like this /home/alex and user is able to chdir to upward... but I don't want user go to user's $HOME directory. I want to limit to some other location like /home/temp and don't want to have user chdir upward... .wanna have chroot limits... -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Help, please ....Port Install Problem, Google didn't help!
Hello I am trying to run a perl script connecting a mysql50 database on a freebsd61 box. But I get this error: Can't locate Mysql.pm in @INC (@INC contains: /usr/local/lib/perl5/5.8.8/BSDPAN /usr/local/lib/perl5/site_perl/5.8.8/mach /usr/local/lib/perl5/site_perl/5.8.8 /usr/local/lib/perl5/site_perl /usr/local/lib/perl5/5.8.8/mach /usr/local/lib/perl5/5.8.8 .) at.. But when I want to install perl database driver, I get this error: localhost# make install clean ===> p5-DBD-mysql50-4. depends on file: /usr/local/lib/perl5/site_perl/5.8.8/mach/DBI.pm - found ===> p5-DBD-mysql50-4. depends on file: /usr/local/bin/perl5.8.8 - found ===> p5-DBD-mysql50-4. depends on shared library: mysqlclient.15 - not found ===>Verifying install for mysqlclient.15 in /usr/ports/databases/mysql50-client ===> Installing for mysql-client-5.0.27 ===> Generating temporary packing list ===> Checking if databases/mysql50-client already installed ===> mysql-client-5.0.27 is already installed You may wish to ``make deinstall'' and install this port again by ``make reinstall'' to upgrade it properly. If you really wish to overwrite the old port of databases/mysql50-client without deleting it first, set the variable "FORCE_PKG_REGISTER" in your environment or the "make install" command line. *** Error code 1 Stop in /usr/ports/databases/mysql50-client. *** Error code 1 Stop in /usr/ports/databases/p5-DBD-mysql50. localhost# Please help and advise, what should I do? I have tried to google allready but could not find any solution -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
How to disable command prompt history?
Hello there Could someone would like to describe that how we can disable to show last executed commands by pressing Up Arrow? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How to disable command prompt history?
Thank you guys, Actually, it was for the security reason that if somebody breaks in the server then he/she doesn't see what commands are being executed, etc, etc and I am using /bin/sh any more comments? thanks, VJ On 6/2/07, Kevin Hunter <[EMAIL PROTECTED]> wrote: At 1:56p -0400 on 02 Jun 2007, sac wrote: > On 6/2/07, Christopher Hilton <[EMAIL PROTECTED]> wrote: >> VeeJay wrote: >>> Could someone would like to describe that how we can disable to show >>> last executed commands by pressing Up Arrow? >>> >> >> That would depend on which shell you are running. Can you run the >> following command and post the results here? >> >> echo $SHELL > > By default most of the shells like bash, zsh, ksh have history option. > But you can avoid writing the history of the current session to the > history file by unsetting the HISTFILE environment variable. > So next time when you login the history of the previous session will > not be shown. I'd be curious as to the underlying "why?". Having a history of what you've done is generally a Good Thing. The only reason that I personally have ever come across to necessitate not storing my actions is when I'm playing a prank on one of my friends. Other than that, having the ability to go see what commands I was executing three years ago comes in awful handy. I /could/ recreate that arcane command sequence for that one-off job I needed 1,237 days ago, or I could do a history | grep 'substring I remember in command' | less And, if you're worried about the space it takes to store the history, don't. It's extremely negligible. Kevin -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Server getting crashed, any helpful comments?
Hello I am running a Freebsd server: 1. Software: Apache 1.3 mysql 5.0.27 php 4.4 2. Hardware: 2 intel procerssors 4 gb ram RAID 10 with hard drives 15K rpm I am having this problem quite often now. Apache stops responding due to mysql (my guess). And I cannot connect to mysql server: /usr/local/mysql/bin/mysqladmin: connect to server at 'localhost' failed error: 'Out of memory; check if mysqld or some other process uses all available memory; if not, you may have to use 'ulimit' to allow mysqld to use more memory or you can add more swap space' There is following configuration for mysql: # The following options will be passed to all MySQL clients [client] port= 3306 socket = /tmp/mysql.sock default-character-set=utf8 # Here follows entries for some specific programs # The MySQL server [mysqld] port= 3306 socket = /tmp/mysql.sock skip-locking skip-networking skip-name-resolve server-id=1 max_connections=1000 key_buffer = 1024M max_allowed_packet = 16M table_cache = 512K sort_buffer_size = 4M net_buffer_length = 64K read_buffer_size = 4M read_rnd_buffer_size = 4M join_buffer_size=4M myisam_sort_buffer_size = 128M # increase until threads_created doesnt grow anymore thread_cache=512 query_cache_type=1 query_cache_limit=2M query_cache_size=64M # Try number of CPU's*2 for thread_concurrency thread_concurrency=4 set-variable=local-infile=0 init_connect='SET collation_connection = utf8_unicode_ci' init_connect='SET NAMES utf8' default-character-set=utf8 character-set-server=utf8 collation-server=utf8_unicode_ci ft_min_word_len=2 ft_max_word_len=15 log-bin=mysql-bin server-id = 1 [mysqldump] quick max_allowed_packet = 16M [mysql] no-auto-rehash default-character-set=utf8 [isamchk] key_buffer = 256M sort_buffer_size = 256M read_buffer = 2M write_buffer = 2M [myisamchk] key_buffer = 256M sort_buffer_size = 256M read_buffer = 2M write_buffer = 2M [mysqlhotcopy] interactive-timeout ANY COMMENTS WILL BE WELCOMED, thanks!!! -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Help: Novice - Hardware Advice!
Thanks for your advice. Almost all pages will be generated dynamically (php). Bandwidth is ADSL with 1Mb Upstream and 24Mb Downstream. (Don't know if it is enough?) Traffic is like going to grow upto 5 hits or more a day. Since I am building an article liberary. How can I implement Apache Proxy or Squid Proxy? How can I make the server more robust? Looking forward for your comments... VJ On 6/3/06, Erik Nørgaard <[EMAIL PROTECTED]> wrote: Maan Jee wrote: > Hello friends and fellows > > Today, I wanna have some hardware advice: > > I wanna build A super duper FreeBSD Web Server Box with apache2, mysql5, > php, etc. > > But I am just unsure about what kind of hardware I should buy since I am > not > having a big budget but do have a reasonable > > There gonna be many database queries load fetching data from mysql-server. > > What kind of Hardware I should buy? > > 1. Motherboad? > > 2. Processor? > > 3. RAM? > (What kind of and how much should be reasonable enough) > > 4. Storage System? > > I am looking for a solution with very reasonable cost and best efficiency > :o) How much traffic will you serve? This is also limited by the bandwidth you have - if you have an adsl connection usually downstream is higher than up stream, but serving pages go mostly upstream. How much work will the server do to generate pages? If everything is dynamic and you have a badly coded site it costs. You can get much efficiency with good code and/or apache proxy, or a squid proxy. I bought a mini-itx with 1Ghz Via chip and 256MB ram, 60GB IDE disk. Should I buy a new system today I would go for a fanless slower version. It serves just fine, not only web pages but also mail, database, ldap, dns, dhcp, imap as well as being firewall/router for the local network. It seems that most resources are consumed by the smtp server blocking spam. It's also reasonable cheap, around 400 euros, and consumes only around 30W. Cheers, Erik -- Ph: +34.666334818 web: http://www.locolomo.org X.509 Certificate: http://www.locolomo.org/crt/8D03551FFCE04F0C.crt Key ID: 69:79:B8:2C:E3:8F:E7:BE:5D:C3:C3:B1:74:62:B8:3F:9F:1F:69:B9 -- Thanks! BR / mj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
System crashed.... any help?
Hi, Due to power faliure... my system was crashed... now I am unable to start it... getting this on consol...please see attached screen dump... Any help will be very appreciated to fix the problem -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
kern.maxfiles limit exceeded... what to do?
Hi there I am keep getting this error on the screen. I have tried to solve this problem by myself but still no luck. Could anyone guide what to do to increase the limit and avoid this error? kern.maxfiles limit exceeded by uid 1003, please see tuning(7) kern.maxfiles limit exceeded by uid 1003, please see tuning(7) kern.maxfiles limit exceeded by uid 1003, please see tuning(7) kern.maxfiles limit exceeded by uid 1003, please see tuning(7) Apr 14 11:08:08 server2 postfix/pickup[25022] : fatal : kqueue : Too many files open in the system Apr 14 11:08:08 server2 postfix/pickup[25023] : fatal : kqueue : Too many files open in the system kern.maxfiles limit exceeded by uid 1003, please see tuning(7) kern.maxfiles limit exceeded by uid 1003, please see tuning(7) kern.maxfiles limit exceeded by uid 1003, please see tuning(7) kern.maxfiles limit exceeded by uid 1003, please see tuning(7) Then I am unable to login on the server by consol or ssh. what to do? -- Thanks! BR / vj ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
