From owner-freebsd-stable Sun May 28 11:48:16 2000 Delivered-To: freebsd-stable@freebsd.org Received: from hotmail.com (f201.law8.hotmail.com [216.33.241.201]) by hub.freebsd.org (Postfix) with SMTP id A323D37B6D3 for ; Sun, 28 May 2000 11:48:11 -0700 (PDT) (envelope-from jmd526@hotmail.com) Received: (qmail 46910 invoked by uid 0); 28 May 2000 18:48:08 -0000 Message-ID: <20000528184808.46909.qmail@hotmail.com> Received: from 209.220.228.2 by www.hotmail.com with HTTP; Sun, 28 May 2000 11:48:08 PDT X-Originating-IP: [209.220.228.2] From: "John Daniels" To: cjclark@home.com Cc: freebsd-questions@freebsd.org, freebsd-stable@freebsd.org Subject: Re: 4.0-RELEASE to 4.0-STABLE upgrade Date: Sun, 28 May 2000 14:48:08 EDT Mime-Version: 1.0 Content-Type: text/plain; format=flowed Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Thanks for your reply. I just wanted to clarify a point or two. You wrote: > > 2. www.freebsddiary.com has description of going from 4.0-RELEASE > > to STABLE and provides a script for doing so. The description and > > script shows that compiling and installing a new kernel (#8 above) > > comes *AFTER* make world (#6 above) - and *BEFORE* updating /etc. > > Thus, according to them, #8 comes before #7 in the above list. > >Not a big deal. > I had another response to my post that also said that this would not be a problem. The reasoning was that the kernel doesn't change until reboot. > > 3. Oops! I removed /usr/obj *AFTER* the make world, not before. > > I tried to redo make world but after a few messages (which seemed > > unimportant) it told me that the proc tables were full. I then > > compiled and installed a new kernel without any noticeable > > problems. > >If you'd never made world before, there probably was nothing in >/usr/obj to delete before you got started. > Well that's true. This was the first time that I was making world! Any possible problems from restarting the make world? Later, you wrote: >If you made the kernel after _installing_ the world (after a 'make >world' or 'make installworld'), the presence of /usr/obj makes no >difference. In sum, it seems that everything is OK, and the upgrade to -STABLE was successful. Hurrah! That's good news, but in my newbie ignorance, I was thinking that the kernel may need some of the /etc, /dev, or /usr/obj files when it is compiled. Are the linkages to the userland stuff dynamic? (or, perhaps vis-a-versa: dyanamic links *from* userland to the kernel?) >Do NOT edit /etc/defaults/make.conf. Instead, put entries like, > > CFLAGS=-O -pipe > NOPROFILE=true > >In /etc/make.conf. My post did propose _copying_ make.conf from /etc/defaults to /etc, since my /etc/make.conf was esstentially empty. (heh, you are not alone: I had another reply warning against editing /etc/default files) Basically, my complaint was that the handbook says to edit /etc/make.conf (specifically to enable options by removing the comment character), but doesn't state that the file may need to be copied over. I figured this out only *after* I finished, so I didn't have the options you listed above (which the handbook states should be there). Simple things like this can cause newbies (like myself) some trouble, and generate "stupid" questions on mailing lists. Should this be a problem report (PR)? (I have never used send-PR, maybe I should try) > >firewalling is quite easy... figuring out how to make a useful >ruleset is non-trivial. Right now I have a simple system and simple needs. (That will probably change, though) I just have a single PC connected to a Netopia router, and I just want to serve web pages, browse the net, send and receive email, and occasionally download files with ftp. I don't need other services. Do I really need a firewall? or do I just need to deny all ports and connections except what I need? In any case, it seems that a firewall is still a good idea if only because I can learn (it's becoming kind of standard operating procedure). It also seems that it's necessary for instituting more advanced safety measures like guarding against possible DOS attacks. What I am trying to decide now is if ipfw would be sufficient or if I should use IPfilter (or both - is that possible?). I am thinking that ipfw is probably enough for now. Once again, thanks for your help! John ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message