ezjail

2010-03-20 Thread Aiza
I don't have sources installed on my system. Just use the binary Freebsd-update function. At new releases I do a clean install. I only have a single public IP address. Now I would like to play with jails. One for postfix, apache, and ftp. My reading of EZJAIL and the jails section of the handboo

Re: freenas-like solution for aoe?

2010-03-20 Thread Dan Nelson
In the last episode (Mar 20), Vadkan Jozsef said: > Does anybody know a FreeNAS-like solution, that supports AoE? - Ata over > Ethernet? You can get iSCSI with the net/istgt port, which should perform better than AoE. -- Dan Nelson dnel...@allantgroup.com

Re: Copying mirrored partitions - will this work?

2010-03-20 Thread Modulok
How valuable is your data? I recommend you make an offline backup. There's a lot of steps in your procedure which introduce room for error. You could perhaps disconnect one of the hard drive's data cable (same thing). Also, make a backup copy of your geom meta data somewhere. Other than that, you

Re: bruteforce protection howto

2010-03-20 Thread Erik Norgaard
On 20/03/10 23:17, Vadkan Jozsef wrote: What's the best method to ban that ip [what is bruteforcig a server] what was logged on the logger? I need to ban the ip on the router pc. Take your time to think about if this is indeed the right solution. 1st: You need to decide which is the right pol

Re: securing sshd

2010-03-20 Thread Peter
> Jamie Griffin writes: > >> Hello >> >> I've been reading up on securing sshd after being bombarded with >> attempted logins. >> >> The steps i've taken so far to make things more secure are: >> >> * changed the encryption method for passwords in /etc/login.conf from >> md5 to blowfish and change

Re: confirm 0e468fd0cede091de70f462228a30f3c07dd71fa

2010-03-20 Thread Jerry
On Sat, 20 Mar 2010 21:34:27 + freebsd-questions-requ...@freebsd.org freebsd-questions-requ...@freebsd.org articulated: > Mailing list subscription confirmation notice for mailing list > freebsd-questions > > We have received a request for subscription of your email address, > "freebsd.u...@

Re: bruteforce protection howto

2010-03-20 Thread Jamie Griffin
> Two pc's: > 1 - router > 2 - logger > Situation: someone tries to bruteforce into a server, and the logger > get's a log about it [e.g.: ssh login failed]. > What's the best method to ban that ip [what is bruteforcig a server] > what was logged on the logger? > I need to ban the ip on the

bruteforce protection howto

2010-03-20 Thread Vadkan Jozsef
Two pc's: 1 - router 2 - logger Situation: someone tries to bruteforce into a server, and the logger get's a log about it [e.g.: ssh login failed]. What's the best method to ban that ip [what is bruteforcig a server] what was logged on the logger? I need to ban the ip on the router pc. How can

net-snmp pass scripts

2010-03-20 Thread krad
Hi, I know this isn't the ideal, place but im not having much joy on the net-snmp users mailing list. Does anyone have any good guides for writing or examples of snmp pass scripts? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/

Re: AMD 64 X2 - Dual Core?

2010-03-20 Thread krad
I totally disagree with using the 32bit unless you have a specific need or potentially if you are running it as a desktop. 64 everytime for servers for loads of reasons. If you are running less than 4 gig their is a fair chance you will in the next few years On 3/20/10, Gene wrote: > Hi - > I jus

Re: AMD 64 X2 - Dual Core?

2010-03-20 Thread Mike Tancsa
At 02:46 PM 3/20/2010, Gene wrote: Hi - I just got a board with an AMD Athlon 64 X2 cpu. I was wondering - 1) Is the amd64 8.0 release the fbsd of choice here? Yes. 8.0R is the way to go. However, you might want to bring it upto date after installing it as there are a number of bug fixes and

RE: How do I fix the broken python26 port in 7.2-RELEASE ?

2010-03-20 Thread Michael Powell
George Sanders wrote: > > >> Virgin 7.2-RELEASE install. >> >> I run: >> >> csup -h cvsup4.freebsd.org -i ports/lang/python26 -g -L 2 >> /usr/share/examples/cvsup/ports-supfile > >> >> and now I have a /usr/ports/lang/python26/distinfo

RE: How do I fix the broken python26 port in 7.2-RELEASE ?

2010-03-20 Thread George Sanders
> Virgin 7.2-RELEASE install. > > I run: > > csup -h cvsup4.freebsd.org -i ports/lang/python26 -g -L 2 > /usr/share/examples/cvsup/ports-supfile > > and now I have a /usr/ports/lang/python26/distinfo that looks like: > > MD5 (python/Pyt

Re: securing sshd

2010-03-20 Thread Jamie Griffin
> In that case, the best thing you can do is figure out the IP ranges of > either location. Definately a good idea, thanks Eric. > Btw. I found two articles on securityfocus.com, the first is analysis > using a honeypot, as you see these attacks are pretty lame: > http://www.symantec.com

Re: API to find the memory usage of a process.

2010-03-20 Thread Pieter de Goeje
On Thursday 18 March 2010 18:28:48 Jayadev Kumar wrote: > Hi, > > I need to find the memory usage of a process, from inside the process. > Is there any system call > do this ? I was trying to find it from 'top' utility source code. I > couldn't find the port which it is coming > from yet. > >

AMD 64 X2 - Dual Core?

2010-03-20 Thread Gene
Hi - I just got a board with an AMD Athlon 64 X2 cpu. I was wondering - 1) Is the amd64 8.0 release the fbsd of choice here? and 2) Does it take advantage of the athlon's dual cores? Thanks, IHN, Gene -- To everything there is a season, And a time to every purpose under heaven.

Re: securing sshd

2010-03-20 Thread Erik Norgaard
On 20/03/10 18:23, Jamie Griffin wrote: The reason I went with that decision is because I only expect to be logging in to the server from two locations: at home or from a computer at my university In that case, the best thing you can do is figure out the IP ranges of either location. Check

Re: Trouble Installing JKD15 On A Vanilla 8.0 Installation

2010-03-20 Thread Tom Purl
On Fri, Mar 19, 2010 at 10:03 AM, Warren Block wrote: > On Fri, 19 Mar 2010, Tom Purl wrote: >> First, after the port had compiled on my system for many hours, it >> crashed with an error message stating that I was "out of swap space". I >> had only devoted 128 MB of RAM to the VM at this point (

Re: securing sshd

2010-03-20 Thread Jamie Griffin
I think on reflection I might have been a little over the top with blocking password logins and I think the point about carrying a key on a usb stick, etc, is a very good one. The reason I went with that decision is because I only expect to be logging in to the server from two locations: at hom

Re: securing sshd

2010-03-20 Thread Leonidas Tsampros
Jamie Griffin writes: > Hello > > I've been reading up on securing sshd after being bombarded with attempted > logins. > > The steps i've taken so far to make things more secure are: > > * changed the encryption method for passwords in /etc/login.conf from md5 to > blowfish and changed all the

Re: securing sshd

2010-03-20 Thread Erik Norgaard
On 20/03/10 17:14, Jerry wrote: Seriously, disabling password log-ins and using key authentication is extremely secure. Do make sure that you password protect your keys however. In any event, if you laptop or whatever is stolen, you have more than just one problem to contend with anyway. I don

Re: securing sshd

2010-03-20 Thread Elias Chrysocheris
On Saturday 20 of March 2010 18:14:17 Jerry wrote: > On Sat, 20 Mar 2010 16:32:28 +0100 > > Erik Norgaard articulated: > > > * Disabled password logins completely, and to only allow public key > > > authentication > > > > This seems good for security, but not always practical. Now you have > > to

Re: securing sshd

2010-03-20 Thread Jerry
On Sat, 20 Mar 2010 16:32:28 +0100 Erik Norgaard articulated: > > * Disabled password logins completely, and to only allow public key > > authentication > > This seems good for security, but not always practical. Now you have > to walk around with a USB or have keys on your laptop and if you >

Copying mirrored partitions - will this work?

2010-03-20 Thread Mike Clarke
I'm currently running 8.0-RELEASE and am considering experimenting with 8.0-STABLE. I'd like to preserve my existing system in case things go pear-shaped so I'll copy the entire system onto a spare slice and then use csup to upgrade the copy to STABLE. Normally I'd go through the steps of bsdl

Re: securing sshd

2010-03-20 Thread Erik Norgaard
On 20/03/10 14:18, Jamie Griffin wrote: I've been reading up on securing sshd after being bombarded with attempted logins. Hi! First step to ssh security is: Don't panic! Take your time to read the logs and understand what's going on. So, you've got bombarded with login attempts, but they

securing sshd

2010-03-20 Thread Jamie Griffin
Hello I've been reading up on securing sshd after being bombarded with attempted logins. The steps i've taken so far to make things more secure are: * changed the encryption method for passwords in /etc/login.conf from md5 to blowfish and changed all the passwords to ridiculously obscure ones

GBDE and fixit.iso

2010-03-20 Thread Aiza
Does the fixit.iso file include the GBDE application? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: FreeBSD 8.0 Booting Problem on ZV5320US Laptop

2010-03-20 Thread Anoop Kumar Narayanan
wrote: > Are you able to get to the FreeBSD splash screen (where you get a countdown > to startup with a menu of 6 selections)? Yes, It doesn't go beyond that selection most of the time. > > One of the choices there is boot w/o ACPI; you could try that if you get > that far. That is exactly wher

freenas-like solution for aoe?

2010-03-20 Thread Vadkan Jozsef
Does anybody know a FreeNAS-like solution, that supports AoE? - Ata over Ethernet? Thank you! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-

Re: Samba read speed performance tuning

2010-03-20 Thread Dan Naumov
On Sat, Mar 20, 2010 at 3:49 AM, Gary Gatten wrote: > It MAY make a big diff, but make sure during your tests you use unique files > or flush the cache or you'll me testing cache speed and not disk speed. Yeah I did make sure to use unique files for testing the effects of prefetch. This is Atom

Re: GBDE encryped File system

2010-03-20 Thread Adam PAPAI
On 3/20/10 6:29 AM, Aiza wrote: In release 8.0 is GBDE now part of the base system? If not what is the /boot/loader.conf command to add to enable it? You don't have to enable it. Nothing to add to the loader.conf. But if you want to mount the partitions during the boot: 18.16.1.2.1 Automatica

GBDE encryped File system

2010-03-20 Thread Aiza
In release 8.0 is GBDE now part of the base system? If not what is the /boot/loader.conf command to add to enable it? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail