Strange behavior of MTU on loopback interfaces.

Hello all! I'm testing setting lower MTU on loopback interfaces to avoid some MTU problems with IPSEC in a path of traffic. ifconfig lo1 create ifconfig lo1 mtu 1300 ifconfig lo1 5.5.5.5/32 # ifconfig lo1 lo1: flags=8049 metric 0 mtu 1300 inet 5.5.5.5 netmask 0x #ifconfig em0 em

Re: Strange behavior of MTU on loopback interfaces.

2011/2/25 Nikos Vassiliadis : > On 2/25/2011 9:29 AM, c0re wrote: >> >> Hello all! >> >> I'm testing setting lower MTU on loopback interfaces to avoid some MTU >> problems with IPSEC in a path of traffic. >> >> ifconfig lo1 create &

Re: / file system is full, but du does not show that it's full

2011/1/6 Matthew Seaman : > On 06/01/2011 11:26, c0re wrote: >> # df -h >> Filesystem     Size    Used   Avail Capacity  Mounted on >> /dev/ad0s1a    496M    466M   -9.8M   102%    / >> >> So it's full. >> >> But by du it's not appeared to b

Re: / file system is full, but du does not show that it's full

2011/2/28 Robert Bonomi : >> From owner-freebsd-questi...@freebsd.org  Mon Feb 28 05:31:46 2011 >> Date: Mon, 28 Feb 2011 14:24:30 +0300 >> From: c0re >> To: Matthew Seaman >> Cc: FreeBSD >> Subject: Re: / file system is full, but du does not show that it&

Re: Portupgrade and "Updating the portsdb"

2011/2/11 ill...@gmail.com : > On 10 February 2011 08:33, c0re wrote: >> Hello all! >> >> I've got set of servers that uses NFS mounted /usr/ports. When I use >> "portupgrade samba" on 1st server it says >> [/usr/ports/INDEX-7.db: unexpected file

Optimizing pam_ldap and nss_ldap

Hello freebsd users! I've got Openldap 2.4.23 that used as authentication and authorization server for about 40-50 servers. OS - FreeBSD 8.1. It's not heavy loaded. openldap# top -SP last pid: 45647; load averages: 0.15, 0.15, 0.07 up 81+22:29:21 15:18:57 99 processes: 3 running, 80 sleep

/usr/ports via NFS on several servers adn parralell portupgrade

Hello all! I found one problem using portupgrade on a number of servers, that has NFS mounter /usr/ports from one server. On one server portupgrade sometimes want to rebuild /usr/ports/INDEX-7.db. While it rebuilds, another portupgrade running on second server suddenly wants to rebuild INDEX-7.db

Upgrading to higher major version directly or via small steps?

Hello all! I'm interested in 2 updates: - from 6.2 to 7.3 and - from 6.2 to 8.1 Can I update directly from 6.2 to 7.3? like set RELENG_7_3 in supfile and make csup. Or I should update to 6.4, then to 7.0, and then to 7.3? And same question about upgrading from 6.2 to 8.1 - can i csup directly t

Re: Upgrading to higher major version directly or via small steps?

gton : > > > On Mon, Oct 4, 2010 at 4:47 PM, c0re wrote: >> >> Hello all! >> >> >> I'm interested in 2 updates: >> - from 6.2 to 7.3 >> and >> - from 6.2 to 8.1 >> >> Can I update directly from 6.2 to 7.3? like set RELEN

openssl version - how to verify

Hey all! If I look at base openssl in 7.3-RELEASE-p3 sys# openssl version -a OpenSSL 0.9.8e 23 Feb 2007 built on: Mon Sep 27 11:54:36 MSD 2010 platform: FreeBSD-i386 options: bn(64,32) md2(int) rc4(idx,int) des(ptr,risc1,16,long) blowfish(idx) compiler: cc OPENSSLDIR: "/etc/ssl" but at www.ope

Re: openssl version - how to verify

2010/11/15 Jerry : > On Mon, 15 Nov 2010 16:17:10 +0300 > c0re articulated: > >> If I look at base openssl in 7.3-RELEASE-p3 >> >> sys# openssl version -a >> OpenSSL 0.9.8e 23 Feb 2007 >> built on: Mon Sep 27 11:54:36 MSD 2010 >> platform: FreeBSD-i38

Re: openssl version - how to verify

not vulnerable. 2010/11/15 Jerry : > On Mon, 15 Nov 2010 18:40:27 +0300 > c0re articulated: > >> There are still too many broken ports with openssl from ports, I do >> not like debug it and really like to use base openssl, almost no >> difference. > > Might I sugges

Re: openssl version - how to verify

2010/11/16 Adam Vande More : > On Tue, Nov 16, 2010 at 1:28 AM, c0re wrote: >> >> Jerry, I'm not about that :) base openssl are OK. But I need proves >> that it has got no security problems - it's external IT auditors >> request. >> And I'm interes

Re: openssl version - how to verify

2010/11/16 Dennis Glatting : > On Tue, 2010-11-16 at 10:28 +0300, c0re wrote: >> Jerry, I'm not about that :) base openssl are OK. But I need proves >> that it has got no security problems - it's external IT auditors >> request. >> And I'm interested ho

Re: openssl version - how to verify

2010/11/15 Jerry : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Tue, 16 Nov 2010 00:41:32 +1030 > Indexer articulated: > >> It breaks alot, and causes you to need to rebuild some parts of the >> base system. The most notable, is SSHD, which whenever I install the >> openssl from ports,

Want sendmail applying aliases to 'cc:' field too

Hey all! I've got /etc/mail/aliases file like user: u...@site1.domain.com user2: us...@site1.domain.com user3: us...@site2.domain.com When someone from Internet send email to u...@domain.com with cc: to us...@domain.com sendmail send mail to user and user3 normaly, they recieve their mail. But

Re: Want sendmail applying aliases to 'cc:' field too

2010/12/10 tomasz dereszynski : > > Generally reading documentation helps. > then google... > > http://www.google.co.uk/search?source=ig&hl=en&rlz=1G1GGLQ_ENUK294&=&q=sendmail+aliases&btnG=Google+Search&aq=f&oq= > > first URL... > http://www.feep.net/sendmail/tutorial/intro/aliases.html > > t > >>

Re: do i need a dedicated ip address for https?

2010/12/22 S Mathias : > http://help.godaddy.com/article/1054 > > "# Set up SSL protection on your website." > > is it an inescapable requirement to have a dedicated [not fix] ip address, > when i want to use ssl on my domain? > > thank you > > happy Christmas! :) > > > > _

/ file system is full, but du does not show that it's full

# df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/ad0s1a496M466M -9.8M 102%/ So it's full. But by du it's not appeared to be full # du -hxd 1 / 2.0K/.snap 512B/dev 2.0K/tmp 2.0K/usr 2.0K/var 1.9M/etc 2.0K/cdrom 2.0K/dist 1.0M

Re: / file system is full, but du does not show that it's full

2011/1/6 Ryan Coleman : > What about filehandlers? > > On Jan 6, 2011, at 5:26 AM, c0re wrote: > >> # df -h >> Filesystem     Size    Used   Avail Capacity  Mounted on >> /dev/ad0s1a    496M    466M   -9.8M   102%    / >> >> So it's full. >> &g

Re: / file system is full, but du does not show that it's full

2011/1/6 Matthew Seaman : > On 06/01/2011 11:26, c0re wrote: >> # df -h >> Filesystem     Size    Used   Avail Capacity  Mounted on >> /dev/ad0s1a    496M    466M   -9.8M   102%    / >> >> So it's full. >> >> But by du it's not appeared to b

Re: / file system is full, but du does not show that it's full

> why not to restart your httpd and mysqld? > This may release your unused filehandles. As I said I've restarted whole server, so nothing there to release at all. > Another place to look for wasted space is filesystem snapshots, if any. They > can be created implicitly, e. g., by fsck. Yeah, I che

Portupgrade and "Updating the portsdb"

Hello all! I've got set of servers that uses NFS mounted /usr/ports. When I use "portupgrade samba" on 1st server it says [/usr/ports/INDEX-7.db: unexpected file type or format -- Invalid argument] [Updating the portsdb in /usr/ports ... - 22601 port entries found error] Remove and try again. [U

freebsd-update 8.1 to 8.1-p1

Hello freebsd-questions! I've installed freebsd 8.1 and made freebsd-update fetch freebsd-update install reboot And in uname -a I still see 8.1-RELEASE, but I want to see 8.1-RELEASE-p1. In /usr/src/sys/conf/newvers.sh I see that it is 8.1-p1 REVISION="8.1" BRANCH="RELEASE-p1" Why is it so? I

Re: freebsd-update 8.1 to 8.1-p1

But freebsd-update should do it. Rebuilding kernel will prevent from further freebsd-update patches to rebuilded GENERIC. 2010/9/27 Phan Quoc Hien : > Try rebuild your kernel and get 8.1-RELEASE-p1! I did it! > > On Mon, Sep 27, 2010 at 3:29 PM, c0re wrote: >> >> He

Re: freebsd-update 8.1 to 8.1-p1

+0700, Phan Quoc Hien thus spake: >> >> Try rebuild your kernel and get 8.1-RELEASE-p1! I did it! >> >> On Mon, Sep 27, 2010 at 3:29 PM, c0re wrote: >> >>> Hello freebsd-questions! >>> >>> I've installed freebsd 8.1 and made >>> freebsd