Two questions about UNIX(r) certification.

2007-10-18 Thread Dan Mahoney, System Admin
I recently noticed that Apple's new OS, Leopard, is Unix certified. I'd imagine that the big reason that FreeBSD hasn't done this yet is: It costs a lot of money. That said, if in theory one were to try to get the operating system certified (say, to increase awareness and market share versus

Re: Two questions about UNIX(r) certification.

2007-10-18 Thread Dan Mahoney, System Admin
On Thu, 18 Oct 2007, Aryeh M. Friedman wrote: Dan Mahoney, System Admin wrote: I recently noticed that Apple's new OS, Leopard, is Unix certified. "UNIX Certified" what the [EMAIL PROTECTED]@ does that mean as far I know no one is in a position to make such a statement e

6.3-PRERELEASE

2007-11-12 Thread Dan Mahoney, System Admin
Hey All, I recently CVSUPPED to what I thought would be 6.2-STABLE but instead got 6.3-PRERELEASE. However, I look at www.freebsd.org/releng and I see no reference to the release cycle of 6.3. Was this a mistake of some sort? -Dan -- "Man, this is such a trip" -Dan Mahoney, October 25,

Re: 6.3-PRERELEASE

2007-11-12 Thread Dan Mahoney, System Admin
On Tue, 13 Nov 2007, Tino Engel wrote: No, I wanted to track the 6-release chain, but was just a little surprised...I thought this kind of CVS naming scheme didn't take place till much later in the release engineering process. -Dan Dan Mahoney, System Admin schrieb: Hey All, I rec

Build Frustrations

2007-11-19 Thread Dan Mahoney, System Admin
All, I'm of the realization that FreeBSD is a volunteer project, but there's a recent issue I've hit, and I've contacted nearly EVERYONE I can think of about it to try and fix, and the response I've gotten has been a deafening silence. I'm having trouble building apache2.2.6, it relates I fe

Re: Build Frustrations

2007-11-19 Thread Dan Mahoney, System Admin
On Mon, 19 Nov 2007, Jerry McAllister wrote: On Mon, Nov 19, 2007 at 07:19:34PM -0500, Dan Mahoney, System Admin wrote: All, I'm of the realization that FreeBSD is a volunteer project, but there's a recent issue I've hit, and I've contacted nearly EVERYONE I can think of

Re: Build Frustrations

2007-11-19 Thread Dan Mahoney, System Admin
On Mon, 19 Nov 2007, Jerry McAllister wrote: You can tell ports where to install something. We used to install all of Apache in its own directory to make it easy to manipulate in a system we were installing in a lot of places. Check the ports doc and such. Actually, I just tried this. This

What's "unknown" about i386-unknown?

2007-11-20 Thread Dan Mahoney, System Admin
Hey all. I see i386-unknown as a build target all the time. So my (possibly silly) question is: what's the unknown variable here? And why isn't it? -Dan -- Dan Mahoney Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Site: http://www.gush

Re: Build Frustrations

2007-11-20 Thread Dan Mahoney, System Admin
On Tue, 20 Nov 2007, Jerry McAllister wrote: Apache2 is a complete piece of crap. "Portable Runtime" my ass. Was there something so wrong with APACI? Apache1.3 built out of the box on every system in the world. Using ports is no better. And again, I'll take anything anyone can offer to expl

Re: Build Frustrations

2007-11-20 Thread Dan Mahoney, System Admin
On Tue, 20 Nov 2007, Philip M. Gollucci wrote: This allowed apache2-non-ports to compile. However the question in my mind that still bears answering is: why apr would FIND such a library as installed (i.e. not fail at configure-time) but then fail to compile. I.e. why does the APR not set CFLAG

viability of QUOTA support as a KLD?

2007-12-03 Thread Dan Mahoney, System Admin
Hey all, It seems most of the things I want to do under freeBSD have been turned into nice KLD modules. However, I'm still forced to do a kernel recompile for QUOTA support. Is there some major reason it cannot be made into a KLD as well? -Dan Mahoney -- "It would be bad." -Egon Spengler

Maybe this is a bug, should I report it?

2007-12-04 Thread Dan Mahoney, System Admin
But why is it that portupgrade feels the need to upgrade gpg to gpg2, when gpg is still in the tree? I'm running a portupgrade -rf gettext, and didn't previously have gpg2 installed. -Dan -- "this is too stupid even for irc" -mtreal, EFnet #macintosh, 09/15/2K, 12:33 AM Dan Mahone

FreeBSD mail forwarder and SPF

2007-12-10 Thread Dan Mahoney, System Admin
Hello all, I secure my outbound e-mail with SPF. One of the ports maintainers ([EMAIL PROTECTED]) also secures his INBOUND e-mail with SPF. I tried to e-mail garga about a minor doc-bug, and got a bounce, since his mailserver didn't recognize mx2.freebsd.org as a valid MX for [EMAIL PROTECT

Passwd and pam?

2007-12-14 Thread Dan Mahoney, System Admin
Hello all, In looking through some pam stuff I find that there's a pam_passwdqc module to do password quality control. However, in reading the passwd man page, NO mention is made of either pam, or /etc/pam.d/passwd Is "passwd" a legacy tool which doesn't support this pam feature? -Dan --

Cisco-like ping?

2003-12-02 Thread Dan Mahoney, System Admin
I was wondering if anyone knew of an alternate ping utility, notably one that can print things in the cisco "!" and "." format for doing extended line tests? I've gotten one installed under FreeBSD before, but have NO IDEA where I found it now. (I recall the -k option was the one that did the cis

Manpage for rpc.ypupdated?

2008-04-26 Thread Dan Mahoney, System Admin
With all the recent changeover in namespace for rpc/yp stuff, there's been a lot moved around, but in all my searches, the ypd.upupdated daemon is completely undocumented. (even with a grep through the rest of the man directories provides no mention). Near as I can tell, it allows nis client

mailcap documentation?

2008-05-01 Thread Dan Mahoney, System Admin
Hello all, There's apparently an RFC-standard file called /etc/mailcap (as well as .mailcap), but I can't find any docs on this file. Would it be worthwhile to rework the RFC into a manpage (I am willing to do it), or should I bother the providers of ports that use it (such as, say, alpine (

possbility of a port for older versions of libintl?

2012-06-10 Thread Dan Mahoney, System Admin
Hey there, I recently discovered that the vmware-tools package is compiled against libintl.so.8 -- yes, this is probably something that should be fixed at the vmware level, but VMware's love for FreeBSD isn't there. As a workaround, it might be useful to have a port which compiles an older v

portupgrade -- is there a way to only build and update ports that actually NEED it?

2012-06-25 Thread Dan Mahoney, System Admin
Hey there, I'm presently in the process of trying to do a portupgrade from rt-3.8.8 to 3.8.13. By all estimations, this is a minor bump. Already, I've encountered several annoyances due to ABI changes, such as the libtool2.4 fun. With normal portupgrade, this forces you to go fix the depen

CVS Questions

2004-08-06 Thread Dan Mahoney, System Admin
I was contemplating banging together a quick script to find the fastest CVS mirrors which essentially tries to retrieve a small distribution from all the available CVS servers. Does this seem like the type of thing that would be well-recieved into the base-distro or ports? Or would it simply

RE: CVS Questions

2004-08-06 Thread Dan Mahoney, System Admin
On Fri, 6 Aug 2004 [EMAIL PROTECTED] wrote: Can you use ports/sysutils/fastest_cvsup? Thanks, all, for pointing that out to me. Clearly, I wasn't the first to have this idea. -Dan -- "I can feel it, comin' back again...Like a rolling thunder chasin' the wind..." -Dan Mahoney, JS, JB & SL, May 10th,

Question on odd acl/permissions.

2005-01-02 Thread Dan Mahoney, System Admin
Hey all, I'd like to make a "live" backup of a file system on a regular basis, and maintain permissions, but have such a thing be only writable by root at any given time. (i.e. I keep a backup drive unmounted, and mount it read-only when users need their data). The thing is, I have to mount i

bundled openssh version

2005-06-19 Thread Dan Mahoney, System Admin
Hey all, couple quick questions. ' Is freeBSD ever going to update the "contributed" version of openssh to something more recent? I'm particularly interested in the DNS SSHFP support, and I'm unsure of the differences between the "base" version, the one in ports, and the "portable" version in

Re: bundled openssh version

2005-07-01 Thread Dan Mahoney, System Admin
On Sun, 19 Jun 2005, [ISO-8859-1] Björn König wrote: Dan Mahoney, System Admin wrote: Is freeBSD ever going to update the "contributed" version of openssh to something more recent? Yes. Currently OpenSSH 4.1p1 is part of 6-CURRENT developent branch. An update in 5-STABLE may h

Questions on termcap suggestions

2005-07-24 Thread Dan Mahoney, System Admin
Hey all, Apologies. Long. Late. (Early). I just spent a few hours longer than I feel I should have had to learning about ANSI escape sequences and the raw unadulterated line-noise-like readability of the system termcap file. Here's the basics: I use pine's "print" command, which works fin

Re: Questions on termcap suggestions

2005-07-24 Thread Dan Mahoney, System Admin
On Sun, 24 Jul 2005, Gary W. Swearingen wrote: I'm sending this through so someone may find it in the future and save themself some effort. Good of you to try to document it; I wish I knew where else it could go. I wonder if there should be a wiki-type knowledge base for things like that. Re

Custom Sendmail through /etc/make.conf

2005-08-01 Thread Dan Mahoney, System Admin
Hey all... I'm building a new box and thinking I'd like to stick with the "base" sendmail instead of building my own as I've traditionally been doing. Here is my devtools/Site/site.config.m4 file APPENDDEF(`confENVDEF', `-DSASL -DNETINET6') APPENDDEF(`confLIBDIRS', `-L/usr/local/lib') APPENDDE

BSDPAN versus CPAN

2005-08-03 Thread Dan Mahoney, System Admin
Hey all, I'm under the understanding that it's somehow preferable to install perl modules via the ports system, rather than the straight off perl -MCPAN -e shell system I normally use. Apparently the only advantage is this avoids the "no origin recorded" errors (although portupgrade can't han

build ports without X -- make.conf

2005-11-07 Thread Dan Mahoney, System Admin
Hey all, In BSD 4.x, there was a section in the make.conf manpage that said you could define WITHOUT_X11 and ports would build without it (for things like ghostscript, cvsup, etc, which have distinctly different ports) For some reason this is gone in 5.x -- what's the appropriate way to do t

Re: build ports without X -- make.conf

2005-11-07 Thread Dan Mahoney, System Admin
On Mon, 7 Nov 2005, Paul Waring wrote: On Mon, Nov 07, 2005 at 01:16:27PM -0500, Dan Mahoney, System Admin wrote: In BSD 4.x, there was a section in the make.conf manpage that said you could define WITHOUT_X11 and ports would build without it (for things like ghostscript, cvsup, etc, which

PAM and OPIE and su

2005-12-16 Thread Dan Mahoney, System Admin
Hey all, this is sort of a wierd question, but bear with me. I notice that pam_securetty has a function that allows people to have to be "secure" before it will let them do something (for example, use login as root). I've recently enabled telnetd on my system because of people trapped behin

default directory for certs

2004-09-08 Thread Dan Mahoney, System Admin
Hey all, I recently upgraded my mail server using sendmail to use full StartTLS/SSL, using a "real" (geotrust) certificate. However, pine complains loudly at me that it cannot verify the certificate. A quick google search on the error yielded this page: https://email.mtu.edu/docs/public/pine_ss

cleaner handling of mount point disappearance

2004-09-09 Thread Dan Mahoney, System Admin
Hey guys, Assume I have a USB hard drive attached to my machine. Is there any way to make it so that, in the event the drive is mounted and disappears (i.e. is unplugged), the system doesn't vomit on itself (i.e. kernel panic?) I can deal with the fact that data may not be written cleanly to the

SATA under 4.10

2004-09-17 Thread Dan Mahoney, System Admin
The hardware notes aren't too clear on this, but does anyone know the model of card I would have to buy to make SATA work under 4.10? I think the hardware notes refer to chipsets, and I don't know of the correlations. -Dan -- "When I'm lost, and confused, and trying to make a U-turn, nothing a

[no subject]

2004-09-23 Thread Dan Mahoney, System Admin
After recently upgrading to 4.10, on a machine that's known for getting 100+ days uptime, I got the following error on an unexpected reboot: Sep 23 15:09:43 prime /kernel: kernel trap 12 with interrupts disabled Sep 23 15:09:43 prime /kernel: Sep 23 15:09:43 prime /kernel: Sep 23 15:09:43 prime /

BEEP on halt?

2004-09-26 Thread Dan Mahoney, System Admin
Hey all, I've seen this addressed in various places, and I can't find a solid answer. Is there some way to make a FreeBSD system beep when it's been successfully shut down. -Dan -- Hate fedora with a white hot burning passion right now though ... damn thing is Linux-XP(tm) -Bill Nolan 2/24/04

"Dialog" on some ports looks odd

2012-12-13 Thread Dan Mahoney, System Admin
Hey there, Can people confirm some brokenness to me? When I'm on a system over SSH, I find that doing the following: cd /usr/ports/mail/alpine; make config looks fine, but cd /usr/ports/mail/opendkim; make config seems to corrupt the headings and not display correctly, the OK/Cancel buttons

Sendmail rebuilds on a make world?

2002-11-16 Thread Dan Mahoney, System Admin
Hi. I don't like the FreeBSD sendmail build. To this end I have put NO_SENDMAIL=true (copied verbatim from /etc/defaults/make.conf and uncommented). So then when I make installworld, it STILL touches my /usr/sbin/sendmail and installs a default sendmail, breaking my milters and sasl support. H

DNS Proxying based on source address

2003-03-14 Thread Dan Mahoney, System Admin
Hi all, I'm doing a project where I want users on a wireless lan to be routed to a single, wildcard A record, where they will be forced to input some registration information, and then allowed out into the real world. Some nice folks at southwestern university have already written a project that

sshd brute force attempts?

2006-09-19 Thread Dan Mahoney, System Admin
Hey all, I've looked around and found several linux-centric things designed to block brute-force SSH attempts. Anyone out there know of something a bit more BSD savvy? My best attempt will be to get this: http://www.csc.liv.ac.uk/~greg/sshdfilter/index_15.html running and adapt it. I've f

Re: sshd brute force attempts?

2006-09-19 Thread Dan Mahoney, System Admin
On Tue, 19 Sep 2006, Erik Norgaard wrote: Along with some good advice. First of all: ssh is not a public service like http or smtp where you need anyone to be able to connect. So don't let them in the first place. It is in this case. It's a web server that allows shell usage (and encourages

Re: sshd brute force attempts?

2006-09-19 Thread Dan Mahoney, System Admin
On Tue, 19 Sep 2006, backyard wrote: In reality using passwords with SSH kinda defeats the purpose of SSH. Keeping passwords from being sent across the network as cleartext? -Dan -- "Of course she's gonna be upset! You're dealing with a woman here Dan, what the hell's wrong with you?" -S.

Re: sshd brute force attempts?

2006-09-20 Thread Dan Mahoney, System Admin
On Wed, 20 Sep 2006, Erik Norgaard wrote: Dan Mahoney, System Admin wrote: On Tue, 19 Sep 2006, Erik Norgaard wrote: Along with some good advice. First of all: ssh is not a public service like http or smtp where you need anyone to be able to connect. So don't let them in the first

MultiPath routing support

2006-10-23 Thread Dan Mahoney, System Admin
Hey all, Are there any supported methods for enabling multipath routing under FreeBSD. I currently have a couple BSD boxes which potentially have two default gateways to our two core routers, and I'd like to be able to load-balance. Doing it in IPFW or DUMMYNET would seem to break OSPF reco

Building UNSTRIPPED binaries in ports?

2007-08-21 Thread Dan Mahoney, System Admin
Hello, I am encountering a bug with named-9.4.1-P1 that I am attempting to work with ISC on, that I have built from ports (dns/bind94). However, I need a non-stripped version of the binary to get a backtrace. I can't "roll my own" binary because it may be related to some way that the port is

Floppy IO Errors

2007-08-30 Thread Dan Mahoney, System Admin
All, I am trying to load a kernel module from a floppy disk (ms dos formatted). Is there anything "special" I have to do to format these disks, or make them readable? I can boot from an MS DOS startup disk (as generated by XP) but BSD returns an IO error when trying to read any floppy. I've

Re: Sysinstall: No Floppy Devices Found

2007-09-03 Thread Dan Mahoney, System Admin
On Tue, 16 Jan 2007, Kevin Kobb wrote: I have found that when I do an install with an install.cfg file on a floppy, I must insert the floppy right after the system begins to boot from CD. If I don't when I tell sysinstall to read the floppy I get an error. As a work around, if I go into the o

IPFW with DNSBL

2007-09-25 Thread Dan Mahoney, System Admin
Hey all, Has anyone found a way to have ipfw work with a DNS blocklist? I realize the core functionality is not in IPFW, but I am thinking somehow, of having a table dynamically maintained by some kind of divert daemon? Couple this with some kind of a connection delay (perhaps also in the d

number of processes reported by top versus ps

2007-02-14 Thread Dan Mahoney, System Admin
Hey all, I'm getting about a hundred more processes reported by ps aux|wc -l versus the total number of processes in top. Is this a "normal" thing? My system's been under some heavy load in the past couple days, but it's all presumably stable now. -Dan -- "Man, this is such a trip" -Dan

Re: number of processes reported by top versus ps

2007-02-15 Thread Dan Mahoney, System Admin
On Thu, 15 Feb 2007, Christian Walther wrote: Aah, that's right, threads. Forgot about those. -Dan On 15/02/07, Dan Mahoney, System Admin <[EMAIL PROTECTED]> wrote: Hey all, I'm getting about a hundred more processes reported by ps aux|wc -l versus the total number of proce

Command to "dump" firewall rules to be persistent across reboots.

2006-11-29 Thread Dan Mahoney, System Admin
Hey all, I'm experimenting with ipfw as means of controlling some interesting anomalies like with portsenty or some ssh anti-brute-force scripts (i.e. adding bad hosts to tables, adding deny rules for certain hosts, etc), and I was wondering if there was (either in the form of a script, or a bu

IPFW: delete range of rules?

2006-11-29 Thread Dan Mahoney, System Admin
Hey all, the ipfw man page says rules can be deleted individually or in groups, but I don't see (other than the sets) an easy way to craft deletion of rules in a range (for example, 500-550). As the system I'm using crafts client rules by client numbers, this is a kinda useful feature, is it a

Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
Hey all, I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's a 1u system -- sticking extra things into PCI slots as a workaround is likely to be impossible. I found this document on how to get it installed, in theory: http://www.3ware.com/kb/article.aspx?id=14850 But

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, [EMAIL PROTECTED] wrote: I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's a 1u system -- sticking extra things into PCI slots as a workaround is likely to be impossible. Any possibility of using a USB floppy drive? Will the BSD installer recogniz

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, Per olof Ljungmark wrote: Dan Mahoney, System Admin wrote: Hey all, I have a new system with NO FLOPPY CONTROLLER and a 3ware 9550 card. It's a 1u system -- sticking extra things into PCI slots as a workaround is likely to be impossible. I don't think

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, Tom Judge wrote: Dan Mahoney, System Admin wrote: Hi Dan, I have installed FreeBSD on several systems with 9550 controllers. The driver is available in sysinstall from 6.1 Release. (I installed from a 6.1 Release CD) This was the 9650, actually. -Dan -- "It

3ware 9650 Support

2007-01-03 Thread Dan Mahoney, System Admin
According to the 3ware site this card is supported as of FreeBSD 6.1. I previously posted with it as the "9550", but the end result is I hadn't slept enough, it's the 9650SE-4LPML. I checked the CVS sources for the twa driver, they haven't been touched in many months so I don't feel it's like

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, John Nielsen wrote: 1) Boot to complete install CD 2) Go into "Fixit" mode (not just the emergency shell) 3) # sysctl kern.module_path="/dist/boot/kernel" 4) # kldload twa 5) # exit 6) proceed with installation This shouldn't be necessary though, since twa is included in GEN

Re: Easier way to install on 3ware 9550 card?

2007-01-03 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, Mike Tancsa wrote: On Wed, 3 Jan 2007 02:56:40 -0500 (EST), in sentex.lists.freebsd.questions you wrote: 4) Allowing non-standard modules to reside on the CD, instead of loading from floppy (i.e. I see there's a twa module in the base system, why aren't the .ko's sitting ar

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 3 Jan 2007, John Nielsen wrote: Apologies for top-posting. I've made some progress with this, but as I suspected, I'm screwed on "namespace collision". I.e. I am unable to load a version of twa.ko that supports my 3ware card because a previous version of twa.ko that does not support

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Erik Trulsson wrote: On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote: On Wed, 3 Jan 2007, John Nielsen wrote: Apologies for top-posting. I've made some progress with this, but as I suspected, I'm screwed on "namespace collisi

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Dimitar Vasilev wrote: Dan, comment out the twa lines in the kernel. Rebuild it and include the new modules. should be easy. the module in the kernel it's conflicting with is on an INSTALL CD. But I don't think I'll have the namespace conflicts with the NEW module. -Dan

Re: Easier way to install on 3ware 9550 card?

2007-01-10 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Peter Giessel wrote: On Wednesday, January 10, 2007, at 01:22AM, "Dan Mahoney, System Admin" <[EMAIL PROTECTED]> wrote: I am unable to load a version of twa.ko that supports my 3ware card because a previous version of twa.ko that does not support it i

Re: Easier way to install on 3ware 9550 card?

2007-01-11 Thread Dan Mahoney, System Admin
yOn Wed, 10 Jan 2007, Erik Trulsson wrote: On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote: On Wed, 3 Jan 2007, John Nielsen wrote: Apologies for top-posting. I've made some progress with this, but as I suspected, I'm screwed on "namespace collisi

Re: Easier way to install on 3ware 9550 card?

2007-01-11 Thread Dan Mahoney, System Admin
On Wed, 10 Jan 2007, Peter Giessel wrote: On Wednesday, January 10, 2007, at 01:22AM, "Dan Mahoney, System Admin" <[EMAIL PROTECTED]> wrote: I am unable to load a version of twa.ko that supports my 3ware card because a previous version of twa.ko that does not support it i

Sysinstall: No Floppy Devices Found

2007-01-12 Thread Dan Mahoney, System Admin
Hey all, I'm getting the message when I try to load a KLD in Sysinstall, even though I KNOW my floppy drive works. In fact, I can load the KLD from the loader prompt just fine. Is there a difference/advantage to one way of doing this over the other? -Dan Mahoney -- "Hitler, Satan, those H

Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-12 Thread Dan Mahoney, System Admin
Hey all, I have a Transport GT24 (B3992 Motherboard), and while it has one intel nic which works well, I'd like to be able to use the onboard broadcom network cards. Is there a known way of making them work? I seem to recall some dealy where you could use a windows driver? -Dan -- "I love

Re: Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-13 Thread Dan Mahoney, System Admin
river attached) Also, I'm running 6.1-RELEASE, will the cvs drivers from CURRENT work? -Dan Ted - Original Message ----- From: "Dan Mahoney, System Admin" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 12, 2007 5:02 PM Subject: Broadcom Nics in Ty

Re: Easier way to install on 3ware 9550 card?

2007-01-13 Thread Dan Mahoney, System Admin
On Sat, 13 Jan 2007, Erik Trulsson wrote: On Thu, Jan 11, 2007 at 12:01:48PM -0500, Dan Mahoney, System Admin wrote: yOn Wed, 10 Jan 2007, Erik Trulsson wrote: On Wed, Jan 10, 2007 at 05:24:26AM -0500, Dan Mahoney, System Admin wrote: On Wed, 3 Jan 2007, John Nielsen wrote: Apologies for

Re: Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-15 Thread Dan Mahoney, System Admin
es to your src/sys/dev/bge/ directory and recompile your 6.1-release kernel with no problems. I did. Look carefully at the chip on your MB and post the BCM model number on it if this doesen't work. Ted - Original Message ----- From: "Dan Mahoney, System Admin" <[EMA

Re: Sysinstall: No Floppy Devices Found

2007-01-16 Thread Dan Mahoney, System Admin
On Tue, 16 Jan 2007, Kevin Kobb wrote: I have found that when I do an install with an install.cfg file on a floppy, I must insert the floppy right after the system begins to boot from CD. If I don't when I tell sysinstall to read the floppy I get an error. I've found the floppy works okay whe

Dummynet with vlans

2007-01-16 Thread Dan Mahoney, System Admin
Hey all, Note: I'm cc'ing Luigi Rizzo because, well, he's authoritative. This is NOT the same issue I asked about a couple years ago (which related to vlans, and bridging -- there is no bridge in play here). Anyway... We have a machine playing vlan aggregator. Gigabit nics (intels). em0

Origin of LINT?

2007-01-16 Thread Dan Mahoney, System Admin
I know it's probably off-topic, but I've searched google for a bit with no results, and because I'm curious: Does anyone (maybe one of the old guard) know the origin of the term "lint" for the all-inclusive feature set. I know SpamAssassin uses it as well (it's the command line argument to ju

Transport Mode IPSEC

2007-01-17 Thread Dan Mahoney, System Admin
Hey all, I see the handbook has a nice howto on tunnel mode ipsec. I just want to protect my NFS/NIS traffic between two hosts on a switch (neither NAT'd) -- is there a reference as to transport-mode ipsec anywhere, or has anyone done it that can outline it? I would imagine it would be drast

Re: Broadcom Nics in Tyan Transport GT24 (B3992)

2007-01-18 Thread Dan Mahoney, System Admin
On Wed, 17 Jan 2007, Ted Mittelstaedt wrote: yes, but guess what - FBSD 6.2 is now released, so just install that and the updated driver is already in the kernel You were just waiting to say that weren't you :) -Dan Ted - Original Message - From: "Dan Mahoney, Sy

Re: Transport Mode IPSEC

2007-01-18 Thread Dan Mahoney, System Admin
On Wed, 17 Jan 2007, Ted Mittelstaedt wrote: Dan, You do realize, don't you, that since both of these hosts are on a switch, and are using unicast traffic to communicate with each other, that they cannot be sniffed, don't you? That implies trust of the switch, trust against arp-cache poison

Re: Transport Mode IPSEC

2007-01-18 Thread Dan Mahoney, System Admin
On Thu, 18 Jan 2007, Andrew Pantyukhin wrote: On 1/18/07, Dan Mahoney, System Admin <[EMAIL PROTECTED]> wrote: It's not that simple. The difficulty is in key exchange, and it stays. I can show you how to implement it with static keys: As I read through the article (http://www.

Dummynet howto?

2007-01-18 Thread Dan Mahoney, System Admin
Hey all, In dummynet, what's an appropriate queue size for a 50 Megabit pipe? And is there a general rule-of-thumb or calcluation I should be doing (i.e. limitation size times some number or something?) -Dan -- "Hitler, Satan, those Hanson kids, anything. Just not the curious anteater." -

Problem with "ipfw flush"

2007-01-24 Thread Dan Mahoney, System Admin
Hey all. In trying to tweak my firewall setup I'm using a file called /etc/ipfw.rules However, it seems even though I copy my rules perfectly to that file, the system freezes up and locks me out when I do: ipfw -f flush; ipfw /etc/ipfw.rules I've also tried doing it as ipfw -f flush && ip

Re: Problem with "ipfw flush"

2007-01-24 Thread Dan Mahoney, System Admin
On Thu, 25 Jan 2007, [EMAIL PROTECTED] wrote: In trying to tweak my firewall setup I'm using a file called /etc/ipfw.rules However, it seems even though I copy my rules perfectly to that file, the system freezes up and locks me out when I do: ipfw -f flush; ipfw /etc/ipfw.rules I've also t

Re: Problem with "ipfw flush"

2007-01-24 Thread Dan Mahoney, System Admin
On Wed, 24 Jan 2007, Kevin Kinsey wrote: Dan Mahoney, System Admin wrote: Hey all. In trying to tweak my firewall setup I'm using a file called /etc/ipfw.rules However, it seems even though I copy my rules perfectly to that file, the system freezes up and locks me out when I do:

Re: Problem with "ipfw flush"

2007-01-25 Thread Dan Mahoney, System Admin
niversal "reset EVERYTHING" command? -Dan Re: freebsd-questions Digest, Vol 162, Issue 11 > Message: 31 On Wed, 24 Jan 2007 19:20:47 -0500 (EST), Dan Mahoney wrote: > On Wed, 24 Jan 2007, Kevin Kinsey wrote: > > > Dan Mahoney, System Admin wrote: > >> Hey all. >

commented LINT?

2007-01-27 Thread Dan Mahoney, System Admin
Hey all, Back in 4.x, LINT was a fully-commented entity. Now it appears to be built-on-the-fly, which is great for being sure every-option is in in a programmatic manner, but bad as far as being able to look at LINT for syntax or notes as to which options need to be added together (or are mu

5.4 -- bridging, ipfw, dot1q

2005-08-11 Thread Dan Mahoney, System Admin
Okay, here's the situation. PLEASE let me know if there's a better place to ask. (isp@, kernel@, something) I'm setting up a bridging firewall where the packets are passing through on dot1q trunks. The bridge works. Packet counts work (so I assume the bridge at least sees the packets).

Re: 5.4 -- bridging, ipfw, dot1q

2005-08-11 Thread Dan Mahoney, System Admin
On Thu, 11 Aug 2005, Glenn Dawson wrote: At 09:08 PM 8/11/2005, Dan Mahoney, System Admin wrote: Okay, here's the situation. PLEASE let me know if there's a better place to ask. (isp@, kernel@, something) I'm setting up a bridging firewall where the packets are passing th

preexec function in tcsh

2005-08-25 Thread Dan Mahoney, System Admin
Hey all, I'm reading here that a certain version of tcsh (starting with 6.09) has support for a "preexec" function. I'm not seeing this in the source or manpage. Is there any way to upgrade the tcsh version in FreeBSD? -Dan -- "Station!" -Bill & Ted's Bogus Journey Dan Mahoney--

ssh behavior changes after upgrade to 4.1-portable

2005-08-30 Thread Dan Mahoney, System Admin
Hey all, I just upgraded to the latest 4.1-portable openssh, and now when trying to log into my system I get the following: [EMAIL PROTECTED]:/etc/ssh$ ssh [EMAIL PROTECTED] WARNING: DSA key found for host prime.gushi.org in /home/danm/.ssh/known_hosts:1 DSA key fingerprint d9:07:d0:eb:89:3d:04:

building parallel builds of mysql40 and mysql41

2005-09-12 Thread Dan Mahoney, System Admin
Hey all, I'm presently running mysql40-server from ports. I'd like to jump up to mysql41-server. However, Ive tried to build the port for the new one before the old one is deinstalled (just so the dbs dont have to be down during a long build) and the ports tree doesn't seem to like this. I

Generic Session-Limiting firewall rule.

2005-04-29 Thread Dan Mahoney, System Admin
Is there any way to do session limiting in ipfw? I can limit connections between any specific src and dst easy...what I'd like to do is just (either by some standard I don't get, or dynamic rules) limit between ANY given hosts Does anyone know a way of doing this? -Dan Mahoney -- "It doesn't m

Notes for a first-time porter

2007-12-19 Thread Dan Mahoney, System Admin
All, I am thinking of doing a quick port of the "zsu" zone file serial number bumper for FreeBSD. However, I have a couple of questions regarding ports that aren't clear to me, nor do they seem to be in the porter's handbook. 1) What provision is made for when a port's "distsite" is simply

Portsnap -- update claims "up to date" but it's not.

2007-12-25 Thread Dan Mahoney, System Admin
Maybe I'm just doing this completely wrong: prime# portsnap update Ports tree is already up to date. prime# portsnap fetch Looking up portsnap.FreeBSD.org mirrors... 4 mirrors found. Fetching snapshot tag from portsnap3.FreeBSD.org... done. Fetching snapshot metadata... done. Updating from Mon No

Re: Portsnap -- update claims "up to date" but it's not.

2007-12-25 Thread Dan Mahoney, System Admin
On Tue, 25 Dec 2007, Jay Chandler wrote: Dan Mahoney, System Admin wrote: Maybe I'm just doing this completely wrong: prime# portsnap update Ports tree is already up to date. prime# portsnap fetch Looking up portsnap.FreeBSD.org mirrors... 4 mirrors found. Fetching snapshot tag from port

DigiBoard Classic

2008-01-01 Thread Dan Mahoney, System Admin
Hello All, I have a digiboard classic PCI, and I am trying to build a system to monitor many serial systems (UPSes) using FreeBSD. I cannot find any documentation referring to this driver -- it seems that everything "digi" related in the BSD tree refers to the "intelligent" cards, whereas th

Shell Menu that populates from /var/db/pkg

2008-01-10 Thread Dan Mahoney, System Admin
Hello all, I'd like to have a shell menu on my system that gives them available programs they can learn, but that also "learns" from ports/packages which options are available. (I.e. it won't list every "branch" port, but will list things from, say, editors, games, and possibly only "certain"

telnetd without inetd

2003-06-05 Thread Dan Mahoney, System Admin
Is there a way to run telnetd in "standalone" mode, i.e. without inetd? We have a system that we sometimes need to connect to from within a cisco router, which can't do ssh (and not from anywhere else, we've firewalled it as such). -Dan Mahoney -- "If you aren't going to try something, then we m

Re: telnetd without inetd

2003-06-05 Thread Dan Mahoney, System Admin
On Wed, 4 Jun 2003, Doug Silver wrote: Oh no I was just wondering about the need for an "internet super-server" to essentially serve one daemon. > On Wednesday 04 June 2003 12:19 pm, Dan Mahoney, System Admin wrote: > > Is there a way to run telnetd in "standalone&q

FreeBSD Router and ARP

2003-07-09 Thread Dan Mahoney, System Admin
I have a lan of maybe 200 nodes where a BSD box is performing as the core router (with cisco's doing line-connectivity). It is all switched, with no VLAN in place. Each machine (in general) has its own subnet. Most are /29's, some are as large as a /25. Each subnet has a single gateway ip confi

ipfw and MAC Addresses

2003-07-11 Thread Dan Mahoney, System Admin
Hi, I'm running 4.7-Release, and I have compiled the firewall into the kernel but I can't seem to figure out the syntax for mac address based firewalls . I'm trying: box#ipfw add 5 allow ip from any to any in mac any any ipfw: unknown argument ``mac'' If there's some secret to getting this

NFS Question

2004-11-04 Thread Dan Mahoney, System Admin
Is there any way of knowing who is actively using NFS shares, or who has mounted partitions from it? -Dan -- Christ almighty... my EYES! They're melting! -Zaren, Efnet #macintosh, in response to: www.geocities.com/CollegePark/Classroom/1944 The WEBSITE DESIGN class that gave my fiancee a D. --

Moving quotas from partition to partition

2004-11-11 Thread Dan Mahoney, System Admin
Hey all, I'm about to move my server up to a larger drive, and I'd like to know if it's possible to use an existing quota file, or migrate the quota file somehow onto the new drive? Otherwise, it's going to be a LOT of work by hand. -Dan Mahoney PS, is this question better asked in -hackers? -

  1   2   >