re:whats the point in a small network envir

2005-05-31 Thread Jayton Garnett
Thanks Scott, I have since installed AbiWord but will still need to install Java for those silly java applets on some websites, this is a single user workstation so the vulnerability wont affect me because i dont allow anyone in. Thats what the server next to the desk is for :-D. Regards, Jayton

RE: DELL PowerEdge 2850 and FreeBSD 5.4

2005-05-31 Thread Vinny Abello
What BIOS revision are you running in your 2850? Make sure all your firmware is up to date. I had problems with an slightly older Dell 2650 trying to install FreeBSD until I flashed the latest RAID controller firmware. If this doesn't help, try running some diagnostics on the hardware. Dell has

Re: asr ( 2015S ) support in 5.4 amd64?

2005-05-31 Thread Jonathan Noack
On 05/31/05 18:36, Bruce Burden wrote: On Tue, May 31, 2005 at 11:51:57PM +0100, Steven Hartland wrote: There's no mention of in release notes but its in the source tree. Does anyone know the current state of play? Last I heard, it hadn't been 64 bit proofed, and the primary person was swamped

Re: 5.4-RC2 freezing - ATA related?

2005-05-31 Thread Steve Watt
In <[EMAIL PROTECTED]>, [EMAIL PROTECTED] writes: >From: "Peter Jeremy" <[EMAIL PROTECTED]> >> On Wed, 2005-May-18 06:43:37 -0600, Elliot Finley wrote: >> >Had the system lock up again. This is with the new ATA mkIII patches on >> >http://people.freebsd.org/~sos/ATA. >> > >> >I didn't get the cras

Re: asr ( 2015S ) support in 5.4 amd64?

2005-05-31 Thread Bruce Burden
On Tue, May 31, 2005 at 11:51:57PM +0100, Steven Hartland wrote: > There's no mention of in release notes but its in the source > tree. Does anyone know the current state of play? > Last I heard, it hadn't been 64 bit proofed, and the primary person was swamped, and asking for help.

asr ( 2015S ) support in 5.4 amd64?

2005-05-31 Thread Steven Hartland
There's no mention of in release notes but its in the source tree. Does anyone know the current state of play? Steve This e.mail is private and confidential between Multiplay (UK) Ltd. and the person or entity to whom it is addressed. In t

Re: stack backtrace

2005-05-31 Thread Sven Willenberger
On Sun, 2005-05-29 at 11:29 -0700, Derek KuliƄski wrote: > Hello, > > Today I noticed following message in the log: > > > KDB: stack backtrace: > > kdb_backtrace(c07163b8,2,c661994c,0,22) at kdb_backtrace+0x2e > > getdirtybuf(d109ebac,0,1,c661994c,1) at getdirtybuf+0x2b > > flush_deplist(c282f4cc

ATA DMA timeouts

2005-05-31 Thread Martin
Hi, I've read about some ATA DMA timeout problems recently here. I just want to tell you, I've got same problems recently. I had to install the kernel.old back to get rid of severe problems. Affected kernel version: FreeBSD 5.4-STABLE #0: Tue May 31 00:19:34 CEST 2005 Last known working version

Re: jdk security vuln?

2005-05-31 Thread Marc Santhoff
Am Dienstag, den 31.05.2005, 20:22 +0100 schrieb Jayton Garnett: > How do I go about compiling these now? I only need it for openoffice and > unfortunately there are no packages for openoffice and dont want to > install it without java as i am not sure what the out come will be :-s Look there: h

Re: Weird NFS problems

2005-05-31 Thread Skylar Thompson
Jon Dama wrote: Yes, but surely you weren't bridging gigabit and 100Mbit before? Did you try my suggestion about binding the IP address of the NFS server to the 100Mbit side? Yeah. Unfortunately networking on the server fell apart when I did that. Traffic was still passed and I could g

Re: Weird NFS problems

2005-05-31 Thread Skylar Thompson
Jon Dama wrote: Yes, but surely you weren't bridging gigabit and 100Mbit before? Did you try my suggestion about binding the IP address of the NFS server to the 100Mbit side? Yeah. Unfortunately networking on the server fell apart when I did that. Traffic was still passed and I could g

Re: DELL PowerEdge 2850 and FreeBSD 5.4

2005-05-31 Thread Claus Guttesen
> Firewire, usb all the NIC's except em and removed all RAID and SCSI > controllers to make sure nothing would interfere. Yes, but if you do not change the usbd_enable="YES" to "NO" in /etc/rc.conf, it will load a kernel module which may trigger the panic. > I tried to boot with the AMD64 CD but

Re: jdk security vuln?

2005-05-31 Thread Scott Robbins
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, May 31, 2005 at 08:22:00PM +0100, Jayton Garnett wrote: > Hello, > > I have recently installed freebsd 5.4 and tried many times to install > the native freebsd jdk (1.4 & 1.5) and wont install as there is a > security vulnerability in the lin

jdk security vuln?

2005-05-31 Thread Jayton Garnett
Hello, I have recently installed freebsd 5.4 and tried many times to install the native freebsd jdk (1.4 & 1.5) and wont install as there is a security vulnerability in the linux jdk's and other jdk's. How do I go about compiling these now? I only need it for openoffice and unfortunately there a

Re: Weird NFS problems

2005-05-31 Thread Jon Dama
Yes, but surely you weren't bridging gigabit and 100Mbit before? Did you try my suggestion about binding the IP address of the NFS server to the 100Mbit side? -Jon On Tue, 31 May 2005, Skylar Thompson wrote: > Jon Dama wrote: > > >Try switching to TCP NFS. > > > >a 100MBit interface cannot keep

Re: Weird NFS problems

2005-05-31 Thread Jon Dama
Yes, but surely you weren't bridging gigabit and 100Mbit before? Did you try my suggestion about binding the IP address of the NFS server to the 100Mbit side? -Jon On Tue, 31 May 2005, Skylar Thompson wrote: > Jon Dama wrote: > > >Try switching to TCP NFS. > > > >a 100MBit interface cannot keep

Re: IP Firewalling by DNS name

2005-05-31 Thread Lowell Gilbert
Lowell Gilbert <[EMAIL PROTECTED]> writes: > Oliver Fromme <[EMAIL PROTECTED]> writes: > > > I assume he's not using inetd(8) for ssh (which is not a > > good ide ain general, and it's not the default anyway). > > Note that sshd(8) supports hosts_access(3) directly without > > the help of inetd(8

Re: IP Firewalling by DNS name

2005-05-31 Thread Lowell Gilbert
Oliver Fromme <[EMAIL PROTECTED]> writes: > I assume he's not using inetd(8) for ssh (which is not a > good ide ain general, and it's not the default anyway). > Note that sshd(8) supports hosts_access(3) directly without > the help of inetd(8). I thought someone had specified inetd, but looking a

Re: IP Firewalling by DNS name

2005-05-31 Thread Ivan Voras
[EMAIL PROTECTED] wrote: Access control based on the reverse lookup of an IP address is a dangerous idea in general. Anyone who manages their own reverse DNS could bypass the security simply by creating a DNS entry. If someone controls the in-addr.arpa zone for a particular IP range, they can ma

Re: IP Firewalling by DNS name

2005-05-31 Thread bruce
On Tue, May 31, 2005 at 04:43:16PM +0200, Ivan Voras wrote: > Is it possible to use ipfw to filter packets by domain name? > > What I need it for: I'd like to allow ssh logins only from a specific > TLD (by reverse lookup...) - maybe there's another way? Access control based on the reverse looku

xffm - xfsamba4 broken in 5-stable?

2005-05-31 Thread Andriy Gapon
I've had the same problem and I think everybody using recent FreeBSD has it. The culprit seems to be the following line in tubo.c: if (kill(PID,SIGCONT) == 0) return TRUE; I am not sure about other OS's and what POSIX mandates in this case, but FreeBSD 5.4 allows to send signals to child process

Re: IP Firewalling by DNS name

2005-05-31 Thread Oliver Fromme
Lowell Gilbert <[EMAIL PROTECTED]> wrote: > Oliver Fromme <[EMAIL PROTECTED]> writes: > > Ivan Voras <[EMAIL PROTECTED]> wrote: > > > As I understand it, sshd actually accepts connections > > > prior to checking hosts.allow? > > > > Yes, the connection is accepted first, because there is >

Re: IP Firewalling by DNS name

2005-05-31 Thread David Wolfskill
On Tue, May 31, 2005 at 11:54:25AM -0400, Lowell Gilbert wrote: > Oliver Fromme <[EMAIL PROTECTED]> writes: > > > Ivan Voras <[EMAIL PROTECTED]> wrote: > > > > As I understand it, sshd actually accepts connections > > > prior to checking hosts.allow? > > > > Yes, the connection is accepted fi

Re: IP Firewalling by DNS name

2005-05-31 Thread Lowell Gilbert
Oliver Fromme <[EMAIL PROTECTED]> writes: > Ivan Voras <[EMAIL PROTECTED]> wrote: > > As I understand it, sshd actually accepts connections > > prior to checking hosts.allow? > > Yes, the connection is accepted first, because there is > no information available about it before it is accepted.

RE: DELL PowerEdge 2850 and FreeBSD 5.4

2005-05-31 Thread Danny Cooper
With the kernel I removed all non-required devices Firewire, usb all the NIC's except em and removed all RAID and SCSI controllers to make sure nothing would interfere. I tried to boot with the AMD64 CD but with no success, the machine just hangs when it tries to load the CD, still trying to work

Re: Weird NFS problems

2005-05-31 Thread Skylar Thompson
Jon Dama wrote: Try switching to TCP NFS. a 100MBit interface cannot keep up with a 1GBit interface in a bridge configuration. Therefore, in the long run, at full-bore you'd expect to drop 9 out of every 10 ethernet frames. MTU is 1500 therefore 1K works (it fits in one frame), 2K doesn't (yo

Re: Weird NFS problems

2005-05-31 Thread Skylar Thompson
Jon Dama wrote: Try switching to TCP NFS. a 100MBit interface cannot keep up with a 1GBit interface in a bridge configuration. Therefore, in the long run, at full-bore you'd expect to drop 9 out of every 10 ethernet frames. MTU is 1500 therefore 1K works (it fits in one frame), 2K doesn't (yo

Re: IP Firewalling by DNS name

2005-05-31 Thread Oliver Fromme
Ivan Voras <[EMAIL PROTECTED]> wrote: > Igor Robul wrote: > > Ivan Voras wrote: > > > What I need it for: I'd like to allow ssh logins only from a specific > > > TLD (by reverse lookup...) - maybe there's another way? > > > > /etc/hosts.allow > > man 5 hosts_access > > How safe is it?

Re: IP Firewalling by DNS name

2005-05-31 Thread Daniel Gerzo
Hello Ivan, Tuesday, May 31, 2005, 4:43:16 PM, si pisal: > Is it possible to use ipfw to filter packets by domain name? > What I need it for: I'd like to allow ssh logins only from a specific > TLD (by reverse lookup...) - maybe there's another way? you can use AllowUsers sshd_config directive

Re: libpthread problem (segfaults)

2005-05-31 Thread Brent Casavant
On Mon, 30 May 2005, Benjamin Lutz wrote: > I've run into an issue that has me stumped. Anything that I link against > libpthread on my FreeBSD-5.4-RELEASE/i386 installation will segfault as > soon as it tries making use of the threads. I may be hitting a manifestation of the same problem. With

Re: DELL PowerEdge 2850 and FreeBSD 5.4

2005-05-31 Thread Claus Guttesen
> I have installed FreeBSD 5.4 RELEASE and upgraded to -STABLE on a DELL > PE2850. > > FreeBSD 5.4-STABLE #1: Wed May 25 23:43:12 BST 2005 > CPU: Intel(R) Xeon(TM) CPU 3.20GHz (3192.22-MHz 686-class CPU) > real memory = 5100273664 (4864 MB) > avail memory = 4189892608 (3995 MB) > MPTable: > Free

Re: IP Firewalling by DNS name

2005-05-31 Thread Oliver Fromme
Ivan Voras <[EMAIL PROTECTED]> wrote: > Is it possible to use ipfw to filter packets by domain name? No. That would required the IPFW code to perform reverse DNS lookups, which isn't really feasable. (In theory you could write a small filter program that receives the ssh setup packets via an IP

Re: IP Firewalling by DNS name

2005-05-31 Thread Ivan Voras
Igor Robul wrote: Ivan Voras wrote: What I need it for: I'd like to allow ssh logins only from a specific TLD (by reverse lookup...) - maybe there's another way? /etc/hosts.allow man 5 hosts_access How safe is it? As I understand it, sshd actually accepts connections prior to checking hos

Re: IP Firewalling by DNS name

2005-05-31 Thread Igor Robul
Ivan Voras wrote: Is it possible to use ipfw to filter packets by domain name? What I need it for: I'd like to allow ssh logins only from a specific TLD (by reverse lookup...) - maybe there's another way? /etc/hosts.allow man 5 hosts_access ___ fre

IP Firewalling by DNS name

2005-05-31 Thread Ivan Voras
Is it possible to use ipfw to filter packets by domain name? What I need it for: I'd like to allow ssh logins only from a specific TLD (by reverse lookup...) - maybe there's another way? ___ freebsd-stable@freebsd.org mailing list http://lists.freeb

Re[2]: port-problem: apache2.0.54 mod_perl2 no Modules!!

2005-05-31 Thread Daniel Gerzo
Hello Florian, Tuesday, May 31, 2005, 9:18:33 AM, you made these points: > Sorry, my mistake we misunderstood: > installed the mod_perl2 port. > And I added to the httpd.conf: > LoadModule perl_module libexec/apache2/mod_perl.so > PerlModule Apache2 ^^ - remove this line, this is obsoleted

DELL PowerEdge 2850 and FreeBSD 5.4

2005-05-31 Thread Danny Cooper
I have installed FreeBSD 5.4 RELEASE and upgraded to -STABLE on a DELL PE2850. FreeBSD 5.4-STABLE #1: Wed May 25 23:43:12 BST 2005 CPU: Intel(R) Xeon(TM) CPU 3.20GHz (3192.22-MHz 686-class CPU) real memory = 5100273664 (4864 MB) avail memory = 4189892608 (3995 MB) MPTable: FreeBSD/SMP: Mult

DELL PowerEdge 2850 and FreeBSD 5.4

2005-05-31 Thread Danny Cooper
I have installed FreeBSD 5.4 RELEASE and upgraded to -STABLE on a DELL PE2850. FreeBSD 5.4-STABLE #1: Wed May 25 23:43:12 BST 2005 CPU: Intel(R) Xeon(TM) CPU 3.20GHz (3192.22-MHz 686-class CPU) real memory = 5100273664 (4864 MB) avail memory = 4189892608 (3995 MB) MPTable: FreeBSD/SMP: Multiproc

Re: port-problem: apache2.0.54 mod_perl2 no Modules!!

2005-05-31 Thread Florian Prester
Sorry, my mistake we misunderstood: installed the mod_perl2 port. And I added to the httpd.conf: LoadModule perl_module libexec/apache2/mod_perl.so PerlModule Apache2 Alias /perl/ /data/chroot/www/perl/ SetHandler perl-script PerlResponseHandler ModPerl::Registry PerlOptions +ParseHeaders

Do you want to know the secret of success in sexual life?

2005-05-31 Thread Owen
Healthy living for everyday life. http://tpb.s7v3ebslpka0eta.visional72d3.com It is easier to believe than to doubt. Love is my Sword, Goodness my Armor, And Humor my Shield. All professions are conspiracies against the laity. ___ free

Re: heavy named problems

2005-05-31 Thread Mark Sergeant
31-May-2005 13:23:51.045 general: error: /usr/src/lib/bind/ dns/../../../contrib/bind9/lib/dns/adb.c:1439: unexpected error: 31-May-2005 13:23:51.045 general: error: isc_mutex_init failed in new_adbfind() 31-May-2005 13:23:51.891 general: error: /usr/src/lib/bind/ dns/../../../contrib/bind9/lib/dn

Re: heavy named problems

2005-05-31 Thread Mark Andrews
> On 31/05/2005, at 3:08 PM, Mark Andrews wrote: > > > > > > >> 31-May-2005 13:23:51.045 general: error: /usr/src/lib/bind/ > >> dns/../../../contrib/bind9/lib/dns/adb.c:1439: unexpected error: > >> 31-May-2005 13:23:51.045 general: error: isc_mutex_init failed in > >> new_adbfind() > >> 31-May-2