From owner-freebsd-isp Sun Nov 21 6: 5:47 1999 Delivered-To: freebsd-isp@freebsd.org Received: from ttemail.com (users.wow.net [196.3.138.20]) by hub.freebsd.org (Postfix) with ESMTP id CD48414EFC for ; Sun, 21 Nov 1999 06:05:43 -0800 (PST) (envelope-from sweaver@st-anthonys.edu.tt) Received: from mail.st-anthonys.edu.tt (209.198.198.158) by ttemail.com with ESMTP (Eudora Internet Mail Server 2.2.2); Sun, 21 Nov 1999 10:05:35 -0400 Received: by mail.st-anthonys.edu.tt from localhost (router,SLMail V3.2); Sun, 21 Nov 1999 10:28:51 -0400 Received: from st-anthonys.edu.tt [196.3.147.91] by mail.st-anthonys.edu.tt [209.198.198.158] (SLmail 3.2.3113) with ESMTP id A48F1E848F1B11D3B78100600867478A for ; Sun, 21 Nov 1999 10:28:46 -0400 Message-ID: <3837FC41.C46F32AF@st-anthonys.edu.tt> Date: Sun, 21 Nov 1999 10:05:53 -0400 From: "Stephan Weaver" X-Mailer: Mozilla 4.61 [en] (X11; I; FreeBSD 3.3-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-isp@FreeBSD.ORG Subject: cable modem Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-SLUIDL: AD726E21-8F1B11D3-B7810060-0867478A Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org hey! does anyone know where i can get a cable modem? NOT the service. and whats the price look like? thnx To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sun Nov 21 14:47:24 1999 Delivered-To: freebsd-isp@freebsd.org Received: from pericles.IPAustralia.gov.au (pericles.IPAustralia.gov.au [202.14.186.30]) by hub.freebsd.org (Postfix) with ESMTP id 3E34214C2E for ; Sun, 21 Nov 1999 14:47:18 -0800 (PST) (envelope-from Stanley.Hopcroft@ipaustralia.gov.au) Received: (from smap@localhost) by pericles.IPAustralia.gov.au (8.9.3/8.9.3) id JAA78229; Mon, 22 Nov 1999 09:46:46 +1100 (EST) (envelope-from Stanley.Hopcroft@ipaustralia.gov.au) X-Authentication-Warning: pericles.IPAustralia.gov.au: smap set sender to using -f Received: from noteshub01.aipo.gov.au(10.0.100.21) by pericles.IPAustralia.gov.au via smap (V2.0) id xma078217; Mon, 22 Nov 99 09:46:28 +1100 Received: by noteshub01.aipo.gov.au(Lotus SMTP MTA v4.6.3 (778.2 1-4-1999)) id 4A256830.0082A8BF ; Mon, 22 Nov 1999 09:47:08 +1000 X-Lotus-FromDomain: IP_AUSTRALIA From: Stanley.Hopcroft@ipaustralia.gov.au To: freebsd-isp@freebsd.org Cc: Fred.Schelb@ipaustralia.gov.au, carl@xena.aipo.gov.au, Doug.Jackson@ipaustralia.gov.au Message-ID: <4A256830.0082A772.00@noteshub01.aipo.gov.au> Date: Mon, 22 Nov 1999 09:47:12 +1000 Subject: Juniper M40 router (FreeBSD based kernel) wins Data Communications high end router comparison Mime-Version: 1.0 Content-type: text/plain; charset=us-ascii Content-Disposition: inline Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org To: freebsd-isp@freebsd.org cc: Fred Schelb, carl@xena.aipo.gov.au, Doug Jackson Dear Ladies and Gentlemen, I am writing to say that the Asia Pacific September edition of "Data Communications" carried a review of high end routers in which the Juniper networks M40 was not only the winner by default but earned the respect of the testers (Mandeville & Nrewamn ?) for it's . forwarding rates . recovery from route flap . scalability The ariticle expected about a dozen vendors of high end (multiple OC-48 interfaces) routers from vendors such as Cisco Torrent N-Base etc to supply product; they allocated almost a column to describing how Cisco wimped out of testing the GSR 1200. The M40 uses custom ASIC for forwarding and FreeBSD variant for running the routing protocols and box management. Thank you, Yours sincerely. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Nov 22 2:15:39 1999 Delivered-To: freebsd-isp@freebsd.org Received: from cronus.medianetwork.se (cronus.medianetwork.se [193.14.204.1]) by hub.freebsd.org (Postfix) with ESMTP id B62D714D2C for ; Mon, 22 Nov 1999 02:15:31 -0800 (PST) (envelope-from dl@tyfon.net) Received: from junglenote.com (digital30.medianetwork.se [193.14.204.248]) by cronus.medianetwork.se (8.9.3/8.7) with ESMTP id LAA02967 for ; Mon, 22 Nov 1999 11:15:27 +0100 Received: from enigmatic [127.0.0.1] by junglenote.com [localhost] with SMTP (MDaemon.v2.84.R) for ; Mon, 22 Nov 1999 11:25:59 +0100 Received: by localhost with Microsoft MAPI; Mon, 22 Nov 1999 11:25:47 +0100 Message-ID: <01BF34DC.52C7AB90.dl@tyfon.net> From: Dan Larsson To: "[FreeBSD-ISP-List] (E-post)" , "[FreeBSD-Questions-List] (E-post)" Subject: email-to-sms gateway Date: Mon, 22 Nov 1999 11:25:46 +0100 Organization: Network Operations - Tyfon Internet Services X-Mailer: Microsoft Internet-e-post/MAPI - 8.0.0.4211 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-MDaemon-Deliver-To: freebsd-isp@freebsd.org X-Return-Path: dl@tyfon.net Reply-To: dl@tyfon.net Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org My aim is to provide my customers with an email-to-sms gateway. Are there any ready-to-go solutions available for sendmail or any equiv mta? Regards ------------ Dan Larsson To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Nov 22 3:47:56 1999 Delivered-To: freebsd-isp@freebsd.org Received: from iserver.itworks.com.au (iserver.itworks.com.au [203.32.61.10]) by hub.freebsd.org (Postfix) with SMTP id 9209F14C48 for ; Mon, 22 Nov 1999 03:47:47 -0800 (PST) (envelope-from gavin@itworks.com.au) Received: (qmail 43252 invoked from network); 22 Nov 1999 11:47:43 -0000 Received: from maybe.itworks.com.au (203.36.209.235) by iserver.itworks.com.au with SMTP; 22 Nov 1999 11:47:43 -0000 Received: (qmail 78917 invoked from network); 22 Nov 1999 11:47:43 -0000 Received: from gav-home.itworks.com.au (HELO chip) (203.36.209.125) by maybe.itworks.com.au with SMTP; 22 Nov 1999 11:47:43 -0000 Message-ID: <005501bf34df$62e7c110$0101a8c0@itworks.com.au> From: "Gavin Cameron" To: , "[FreeBSD-ISP-List] (E-post)" , "[FreeBSD-Questions-List] (E-post)" References: <01BF34DC.52C7AB90.dl@tyfon.net> Subject: Re: email-to-sms gateway Date: Mon, 22 Nov 1999 22:47:41 +1100 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hylafax will probably do what you need. http://www.hylafax.org/ Cheers Gavin ----- Original Message ----- From: Dan Larsson To: [FreeBSD-ISP-List] (E-post) ; [FreeBSD-Questions-List] (E-post) Sent: Monday, 22 November 1999 21:25 Subject: email-to-sms gateway > My aim is to provide my customers with an email-to-sms > gateway. Are there any ready-to-go solutions available for > sendmail or any equiv mta? > > Regards > ------------ > Dan Larsson > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Nov 22 7:31: 3 1999 Delivered-To: freebsd-isp@freebsd.org Received: from relay05.indigo.ie (relay05.indigo.ie [194.125.133.229]) by hub.freebsd.org (Postfix) with SMTP id 2C21E1595E for ; Mon, 22 Nov 1999 07:30:56 -0800 (PST) (envelope-from judgea@indigo.ie) Received: (qmail 1113 messnum 1191993 invoked from network[194.125.133.235/relay-mgr.indigo.ie]); 22 Nov 1999 15:30:13 -0000 Received: from relay-mgr.indigo.ie (HELO indigo.ie) (194.125.133.235) by relay05.indigo.ie (qp 1113) with SMTP; 22 Nov 1999 15:30:13 -0000 To: freebsd-isp@freebsd.org Subject: Re: FreeBSD NFS vs. a NetApp server? In-reply-to: Message from Tom dated Tuesday at 20:24. From: Alan Judge Date: Mon, 22 Nov 1999 15:30:13 +0000 Message-Id: <19991122153057.2C21E1595E@hub.freebsd.org> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Tom> Anyone using FreeBSD to NFS mount filesystems from a NetApp filer? Tom> How well is this solution working for you? Do you use NFSv2 or NFSv3? Yep, we've been doing this for around 2 years with various versions of FreeBSD 2.2.x and 3.x. V3/UDP, almost all the time, but I think V2 works OK as well (unless you have UIDs > 64K). Works perfectly. We're happy. -- Alan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Nov 22 14:22:42 1999 Delivered-To: freebsd-isp@freebsd.org Received: from tahiti.oss.uswest.net (tahiti.oss.uswest.net [204.147.85.151]) by hub.freebsd.org (Postfix) with ESMTP id 89C0F14CC8 for ; Mon, 22 Nov 1999 14:22:36 -0800 (PST) (envelope-from pmckenna@uswest.net) Received: from uswest.net (otto.oss.uswest.net [204.147.85.81]) by tahiti.oss.uswest.net (8.9.2/8.9.2) with ESMTP id QAA73976 for ; Mon, 22 Nov 1999 16:20:26 -0600 (CST) (envelope-from pmckenna@uswest.net) Message-ID: <3839C26F.216C2A71@uswest.net> Date: Mon, 22 Nov 1999 16:23:43 -0600 From: Pete Mckenna X-Mailer: Mozilla 4.61 [en] (X11; U; FreeBSD 3.2-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-isp@freebsd.org Subject: IP - Fax solutions using cisco 5300's Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Anyone using the IP - FAX or Voice features of the Cisco 5300's with Freebsd ? Pete To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Nov 22 15:45:53 1999 Delivered-To: freebsd-isp@freebsd.org Received: from ms.securenet.net (ms.securenet.net [205.236.147.20]) by hub.freebsd.org (Postfix) with ESMTP id E39EB1537E for ; Mon, 22 Nov 1999 15:45:47 -0800 (PST) (envelope-from vandj@securenet.net) Received: from office (office.securenet.net [205.236.147.3]) by ms.securenet.net (8.9.3/8.9.3) with ESMTP id SAA22228 for ; Mon, 22 Nov 1999 18:43:42 -0500 (EST) Message-Id: <4.2.0.58.19991122182643.00cf4210@ms.securenet.net> X-Sender: vandj@ms.securenet.net X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.58 Date: Mon, 22 Nov 1999 18:43:41 -0500 To: freebsd-isp@FreeBSD.ORG From: "Jean M. Vandette" Subject: IP or packet Accounting Software for burst connections. Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Greetings all, I was wondering if any one would know of a software that would do packet or bandwidth accounting for billing a burstable connection, and also something that would keep track of how many bytes a client consumed during the period (month). I require something for our accounting department that would produce or send a report monthly. I already know about MRTG however it gives the monthly average and max whereas the norm for a burstable is billed based on samples are taken every 5 min and the 95 percentile level is used to bill the client. Regards Jean M. Vandette **John M. Vandette, Consultant vandj@securenet.net** **SecureNet Information Services Inc. Internet Providers** **100 Alexis Nihon Blvd #283 St. Laurent, Quebec, Canada** **"Who does BSD Unix....?" "We do Chucky... We do..."** To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 0:33:44 1999 Delivered-To: freebsd-isp@freebsd.org Received: from cronus.medianetwork.se (cronus.medianetwork.se [193.14.204.1]) by hub.freebsd.org (Postfix) with ESMTP id 7613F14C09 for ; Tue, 23 Nov 1999 00:33:40 -0800 (PST) (envelope-from dl@tyfon.net) Received: from junglenote.com (digital15.medianetwork.se [193.14.204.233]) by cronus.medianetwork.se (8.9.3/8.7) with ESMTP id JAA00456 for ; Tue, 23 Nov 1999 09:33:02 +0100 Received: from enigmatic [127.0.0.1] by junglenote.com [localhost] with SMTP (MDaemon.v2.84.R) for ; Tue, 23 Nov 1999 09:39:09 +0100 Received: by localhost with Microsoft MAPI; Tue, 23 Nov 1999 09:38:56 +0100 Message-ID: <01BF3596.8F9F6DE0.dl@tyfon.net> From: Dan Larsson To: "'vandj@securenet.net'" , "freebsd-isp@FreeBSD.ORG" Subject: SV: IP or packet Accounting Software for burst connections. Date: Tue, 23 Nov 1999 09:38:55 +0100 Organization: Network Operations - Tyfon Internet Services X-Mailer: Microsoft Internet-e-post/MAPI - 8.0.0.4211 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-MDaemon-Deliver-To: freebsd-isp@FreeBSD.ORG X-Return-Path: dl@tyfon.net Reply-To: dl@tyfon.net Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Take a look at Emerging Technologies Bandwidth Manager at = http://www.etinc.com And IP Meter at http://www.ipmeter.com Regards ------------ Dan Larsson Tyfon Internet Services Portabla Datorer AB http://tyfon.net : http://pod.nu >=20 >=20 > -----Ursprungligt meddelande----- > Fr=E5n: Jean M. Vandette [SMTP:vandj@securenet.net] > Skickat: den 23 november 1999 00:44 > Till: freebsd-isp@FreeBSD.ORG > =C4mne: IP or packet Accounting Software for burst connections. >=20 > Greetings all, >=20 > I was wondering if any one would know of a software that would > do packet or bandwidth accounting for billing a burstable connection, > and also something that would keep track of how many bytes a > client consumed during the period (month). >=20 > I require something for our accounting department that would produce > or send a report monthly. I already know about MRTG however it gives > the monthly average and max whereas the norm for a burstable is > billed based on samples are taken every 5 min and the 95 percentile = level > is used to bill the client. >=20 > Regards >=20 > Jean M. Vandette >=20 > **John M. Vandette, Consultant vandj@securenet.net** > **SecureNet Information Services Inc. Internet Providers** > **100 Alexis Nihon Blvd #283 St. Laurent, Quebec, Canada** > **"Who does BSD Unix....?" "We do Chucky... We do..."** >=20 >=20 > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 1:17:42 1999 Delivered-To: freebsd-isp@freebsd.org Received: from complx.LF.net (complx.LF.net [212.118.160.200]) by hub.freebsd.org (Postfix) with ESMTP id C567A14BE2 for ; Tue, 23 Nov 1999 01:17:38 -0800 (PST) (envelope-from pi@complx.LF.net) Received: by complx.LF.net (Smail3.2.0.106/complx.LF.net) via LF.net GmbH Internet Services from pi for freebsd-isp@FreeBSD.ORG for host hub.FreeBSD.ORG id m11qC3g-000zzTC; Tue, 23 Nov 1999 10:16:20 +0100 (CET) Message-Id: Subject: Re: IP or packet Accounting Software for burst connections. To: vandj@securenet.net (Jean M. Vandette) Date: Tue, 23 Nov 1999 10:16:20 +0100 (CET) From: "Kurt Jaeger" Cc: freebsd-isp@FreeBSD.ORG In-Reply-To: <4.2.0.58.19991122182643.00cf4210@ms.securenet.net> from "Jean M. Vandette" at Nov 22, 1999 06:43:41 PM X-NCC-RegID: de.lfnet MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi! > I was wondering if any one would know of a software that would > do packet or bandwidth accounting for billing a burstable connection, > and also something that would keep track of how many bytes a > client consumed during the period (month). I modified tcpdump to do bean, ehr, packet/byte counting. ftp://ftp.LF.net/pub/unix/systems/FreeBSD/sw/ipcount-19991106.tgz It also requires sleepycat's/berkely DB, some 2.7.x version. Basically, it will add up the bytes that match a given tcpdump expression, over a configurable interval. After the end of each interval, it will dump a traffic matrix with into a plain ascii file. On our 2mbit link, the files for one month add up to approx. 120 MByte. Send a mail if you questions about it. -- MfG/Best regards, Kurt Jaeger 21 years to go ! LF.net GmbH pi@LF.net Oberon.net GmbH pi@oberon.net Vor dem Lauch 23 fon +49 711 90074-23 Friedrich-Ebert-Str.1 D-70567 Stuttgart fax +49 711 7289041 40210 Duesseldorf fon +49 211 179253-11 For Redmond: "nuke the site from orbit -- it's the only way to be sure." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 6: 2:54 1999 Delivered-To: freebsd-isp@freebsd.org Received: from cscfx.sytex.com (cscfx.sytex.com [205.147.190.131]) by hub.freebsd.org (Postfix) with SMTP id 2CA121525D for ; Tue, 23 Nov 1999 06:02:46 -0800 (PST) (envelope-from rwc@sytex.net) Received: (from rwc@localhost) by cscfx.sytex.com (8.6.12/8.6.9) id JAA02120 for freebsd-isp@freebsd.org; Tue, 23 Nov 1999 09:01:47 -0500 Message-Id: <199911231401.JAA02120@cscfx.sytex.com> Subject: Cisco AGS+ and Y2K ? To: freebsd-isp@freebsd.org Date: Tue, 23 Nov 1999 09:01:46 -0500 (EST) From: rcramer@sytex.net X-Mailer: ELM [version 2.4 PL24] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Length: 664 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hello to the list, I was just asked by a friend of mind, in our business in Michigan, whether there were Y2K issues with the AGS+. It has been so long since I have used one I had no answer. Is anyone still using one that has looked into this issue. (Cisco's web site says will not be tested.) Last year I also I remember reading an email that someone was successful in upgrading memory beyond 32KB. Does anyone recall having seen the same message? Thanks for any info and Happy Thanksgiving! Dick -- Richard Cramer rcramer@sytex.net Phone: 703-425-2515 President Fax: 703-425-4585 SytexNet(tm) Sytex Access Ltd. POB 2385, Fairfax, VA 22031-0385 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 7:17: 5 1999 Delivered-To: freebsd-isp@freebsd.org Received: from boofura.swcp.com (boofura.swcp.com [198.59.115.28]) by hub.freebsd.org (Postfix) with ESMTP id 363D215089 for ; Tue, 23 Nov 1999 07:16:47 -0800 (PST) (envelope-from deichert@wrench.com) Received: from localhost (deichert@localhost) by boofura.swcp.com (8.8.5/8.8.0) with SMTP id IAA07230 for ; Tue, 23 Nov 1999 08:15:25 -0700 (MST) X-Authentication-Warning: boofura.swcp.com: deichert owned process doing -bs Date: Tue, 23 Nov 1999 08:15:25 -0700 (MST) From: Diana Eichert X-Sender: deichert@boofura.swcp.com To: "freebsd-isp@FreeBSD.ORG" Subject: Re: SV: IP or packet Accounting Software for burst connections. In-Reply-To: <01BF3596.8F9F6DE0.dl@tyfon.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Transfer-Encoding: QUOTED-PRINTABLE Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org this works with ipfilter http://www2.empnet.com/ipacct/ diana On Tue, 23 Nov 1999, Dan Larsson wrote: > Take a look at Emerging Technologies Bandwidth Manager at http://www.etin= c.com > And IP Meter at http://www.ipmeter.com >=20 > Regards > ------------ > Dan Larsson > Tyfon Internet Services > Portabla Datorer AB > http://tyfon.net : http://pod.nu > >=20 > >=20 > > -----Ursprungligt meddelande----- > > Fr=E5n:=09Jean M. Vandette [SMTP:vandj@securenet.net] > > Skickat:=09den 23 november 1999 00:44 > > Till:=09freebsd-isp@FreeBSD.ORG > > =C4mne:=09IP or packet Accounting Software for burst connections. > >=20 > > Greetings all, > >=20 > > I was wondering if any one would know of a software that would > > do packet or bandwidth accounting for billing a burstable connection, > > and also something that would keep track of how many bytes a > > client consumed during the period (month). > >=20 > > I require something for our accounting department that would produce > > or send a report monthly. I already know about MRTG however it gives > > the monthly average and max whereas the norm for a burstable is > > billed based on samples are taken every 5 min and the 95 percentile lev= el > > is used to bill the client. > >=20 > > Regards > >=20 > > Jean M. Vandette > >=20 > > **John M. Vandette, Consultant vandj@securenet.net** > > **SecureNet Information Services Inc. Internet Providers** > > **100 Alexis Nihon Blvd #283 St. Laurent, Quebec, Canada** > > **"Who does BSD Unix....?" "We do Chucky... We do..."** > >=20 > >=20 > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message >=20 >=20 >=20 > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message >=20 Diana Eichert VP Technical Services Nothing in Particular at the Moment, Inc. deichert@wrench.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 7:23:24 1999 Delivered-To: freebsd-isp@freebsd.org Received: from devsys.jaguNET.com (devsys.jaguNET.com [206.156.208.6]) by hub.freebsd.org (Postfix) with ESMTP id 2859515083 for ; Tue, 23 Nov 1999 07:23:10 -0800 (PST) (envelope-from jim@jaguNET.com) Received: (from jim@localhost) by devsys.jaguNET.com (8.9.3/jag-2.6) id KAA26520; Tue, 23 Nov 1999 10:22:17 -0500 (EST) From: Jim Jagielski Message-Id: <199911231522.KAA26520@devsys.jaguNET.com> Subject: Re: Cisco AGS+ and Y2K ? To: rcramer@sytex.net Date: Tue, 23 Nov 1999 10:22:17 -0500 (EST) Cc: freebsd-isp@FreeBSD.ORG Reply-To: jim@jaguNET.com In-Reply-To: <199911231401.JAA02120@cscfx.sytex.com> from "rcramer@sytex.net" at Nov 23, 1999 09:01:46 AM X-Mailer: ELM [version 2.5 PL2] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org It's possible that the AGS+ (and the latest IOS that it runs) may not be fully Y2K aware, but there is no need for it to know what date is is anyway. When it reboots, it generally resets itself to it's own epoch :) rcramer@sytex.net wrote: > > Hello to the list, > > I was just asked by a friend of mind, in our business in Michigan, whether > there were Y2K issues with the AGS+. It has been so long since I have used > one I had no answer. Is anyone still using one that has looked into this > issue. (Cisco's web site says will not be tested.) > > Last year I also I remember reading an email that someone was successful > in upgrading memory beyond 32KB. Does anyone recall having seen the same > message? > > Thanks for any info and Happy Thanksgiving! > > Dick > > -- > Richard Cramer rcramer@sytex.net Phone: 703-425-2515 > President Fax: 703-425-4585 > SytexNet(tm) Sytex Access Ltd. POB 2385, Fairfax, VA 22031-0385 > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > -- =========================================================================== Jim Jagielski [|] jim@jaguNET.com [|] http://www.jaguNET.com/ "Are you suggesting coconuts migrate??" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 8:28:31 1999 Delivered-To: freebsd-isp@freebsd.org Received: from dns.sonntag.org (dns.sonntag.org [216.140.186.114]) by hub.freebsd.org (Postfix) with ESMTP id 3E84715284; Tue, 23 Nov 1999 08:27:27 -0800 (PST) (envelope-from aaron@sonntag.org) Received: from WIN2K1 (st84042.nobell.com [216.140.184.42]) by dns.sonntag.org (8.9.3/8.9.3) with SMTP id KAA22245; Tue, 23 Nov 1999 10:26:59 -0600 (CST) (envelope-from aaron@sonntag.org) From: "Aaron Sonntag" To: "zshack" , , Subject: arpresolve: can't allocate llinfo for 127.0.0.1rt Date: Tue, 23 Nov 1999 10:31:13 -0600 Message-ID: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_002E_01BF359D.DDCFBD60" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.5600 In-Reply-To: Importance: Normal Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_002E_01BF359D.DDCFBD60 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit This one fell through the cracks on the questions list… probably cause its not a simple question… or at least I would like to think so ;-) It is regarding an error occurring in the route table on various machines under various configurations. The one similarity is dhclient. Read below… I was fairly detailed with the description of the problem… thanks! Aaron Sonntag -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Aaron Sonntag Sent: Monday, November 22, 1999 10:08 AM To: zshack; FreeBSD-questions@FreeBSD.ORG Subject: RE: slight problem I HAVE THIS PROBLEM TOO… I am not sure what causes it… but if you do a netstat –rn I am sure you will see that the route to your nic interface address is pointing to 127.0.0.1 instead of a mac address (as show below under [BEFORE]). Do a ‘route delete [interface address]’… for instance in the example below… I type ‘route delete 216.140.184.45’. Then ping the interface and run netstat –rn again and you will see (as shown below under [AFTER]) that the mac addy will appear and the machine will be happy. Temporarily :-( [BEFORE] Internet: Destination Gateway Flags Refs Use Netif Expire default 216.140.184.33 UGSc 11 2528899 rl0 10.0.1/24 link#3 UC 0 0 mx1 127.0.0.1 127.0.0.1 UH 2 80 lo0 216.140.184.32/27 link#1 UC 0 0 rl0 216.140.184.45 127.0.0.1 UGHS 0 232 rl0 [AFTER] Internet: Destination Gateway Flags Refs Use Netif Expire default 216.140.184.33 UGSc 11 2528999 rl0 10.0.1/24 link#3 UC 0 0 mx1 127.0.0.1 127.0.0.1 UH 1 80 lo0 216.140.184.32/27 link#1 UC 0 0 rl0 216.140.184.45 0:4f:4e:1:1a:88 UHLW 0 2 lo0 A friend/coworker of mine helped me with this temporary fix (THANKS DAVID!). But he seemed to think it was a larger issue with the dhclient script. I have had this problem on three different 3.3 machines on three COMPLETELY different networks and the one similarity between them was dhclient. Two of them were nat boxes on RR and one is a workstation. To reinforce this theory… on the nat boxes that have the problem… its only the interfaces that are getting dhcp via dhclient that have the problem. My point is… the above is a temporary solution. The following message will completely flood my dmesg buffer until the machine stops responding… arplookup 127.0.0.1 failed: could not allocate llinfo arpresolve: can't allocate llinfo for 127.0.0.1rt anybody have any permanent solutions?? Thanks Aaron Sonntag -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of zshack Sent: Monday, November 22, 1999 9:40 AM To: FreeBSD-questions@FreeBSD.ORG Subject: slight problem I just installed freebsd 3.3 stable and i keep getting this message: /kernet: arplookup 127.0.0.1 failed: can't allocate llinfo /kernet arpresolve can't allocate llinfo for 127.0.0.1 any idea what is causing this and how i can fix it? Thanks zshack ------=_NextPart_000_002E_01BF359D.DDCFBD60 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

This one fell through the cracks on the questions list… = probably cause its not a simple question… or at least I would like to think so = ;-)

It is regarding an error occurring in the route table on various machines under various configurations.  The one similarity is = dhclient.

Read below… I was fairly detailed with the description of = the problem…

 

thanks!

 

Aaron Sonntag

 

 

-----Original Message-----
From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Aaron Sonntag
Sent: Monday, November = 22, 1999 10:08 AM
To: zshack; FreeBSD-questions@FreeBSD.ORG
Subject: RE: slight = problem

 

I HAVE THIS PROBLEM = TOO…

I am not sure what causes it… but if you = do a netstat –rn I am sure you will see that the route to your nic interface = address is pointing to 127.0.0.1 instead of a mac address (as show below under [BEFORE]).  Do a = ‘route delete [interface address]’… for instance in the example = below… I type ‘route delete 216.140.184.45’.  = Then ping the interface and run netstat –rn again and you will see (as shown = below under [AFTER]) that the mac addy will appear and the machine will be = happy.  Temporarily = L

 

[BEFORE]

Internet:

Destination        Gateway            Flags     Refs     Use     = Netif Expire

default            216.140.184.33     UGSc       11  2528899      = rl0

10.0.1/24          = link#3           &n= bsp; UC          0        0      = mx1

127.0.0.1          127.0.0.1          = UH          2       80      lo0

216.140.184.32/27  link#1           &n= bsp; UC          0        0      = rl0

216.140.184.45     127.0.0.1          = UGHS        0    =   232      = rl0

 

[AFTER]

Internet:

Destination        Gateway            Flags     Refs     Use     = Netif Expire

default            216.140.184.33     UGSc       11  2528999      = rl0

10.0.1/24          = link#3           &n= bsp; UC          = 0        0      mx1

127.0.0.1          127.0.0.1          = UH          1       80      lo0

216.140.184.32/27  link#1           &n= bsp; UC          0        0      = rl0

216.140.184.45     0:4f:4e:1:1a:88    UHLW        0        2      lo0

 

 A friend/coworker of mine helped me with this temporary fix (THANKS = DAVID!).  But he seemed to think it was = a larger issue with the dhclient script.  = I have had this problem on three different 3.3 machines on three = COMPLETELY different networks and the one similarity between them was = dhclient.  Two of them were nat boxes on = RR and one is a workstation.  To = reinforce this theory… on the nat boxes that have the problem… its = only the interfaces that are getting dhcp via dhclient that have the = problem.

My point is… the above is a temporary = solution.

The following message will completely flood my = dmesg buffer until the machine stops = responding…

 

arplookup 127.0.0.1 failed: could not allocate = llinfo

arpresolve: can't allocate llinfo for = 127.0.0.1rt

 

anybody have any permanent = solutions??

 

Thanks

 

Aaron = Sonntag

 

-----Original Message-----
From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of zshack
Sent: Monday, November = 22, 1999 9:40 AM
To: = FreeBSD-questions@FreeBSD.ORG
Subject: slight = problem<= /p>

 <= /p>

 I just installed freebsd 3.3 stable and i keep getting this = message:<= /p>

 <= /p>

/kernet: arplookup 127.0.0.1 failed: can't allocate llinfo<= /p>

/kernet arpresolve can't allocate llinfo for 127.0.0.1<= /p>

 <= /p>

 <= /p>

any idea what is causing this and how i can fix it?<= /p>

 <= /p>

 <= /p>

Thanks<= /p>

zshack<= /p>

------=_NextPart_000_002E_01BF359D.DDCFBD60-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 8:30: 3 1999 Delivered-To: freebsd-isp@freebsd.org Received: from epic.purefusion.com (core.fedz.org [216.94.188.115]) by hub.freebsd.org (Postfix) with ESMTP id 2D38B15284 for ; Tue, 23 Nov 1999 08:29:09 -0800 (PST) (envelope-from relapz@purefusion.com) Received: from localhost (relapz@localhost) by epic.purefusion.com (8.9.3/8.9.3) with ESMTP id LAA04488 for ; Tue, 23 Nov 1999 11:28:11 -0500 (EST) Date: Tue, 23 Nov 1999 11:28:10 -0500 (EST) From: relapz To: freebsd-isp@FreeBSD.ORG Subject: Best Network Monitor Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hello, I making the arrangements to monitor our servers and was curious what the 'best' freebsd tool would be. I've seen netconsole in use and had a look at www.netsaint.org, but can't seem to find them in the ports collection. Is there a recommended too for this task that comes with the ports? DJM:> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 9:29:28 1999 Delivered-To: freebsd-isp@freebsd.org Received: from smtp.interact.se (smtp1.interact.se [193.15.98.9]) by hub.freebsd.org (Postfix) with ESMTP id 108B815356 for ; Tue, 23 Nov 1999 09:29:02 -0800 (PST) (envelope-from je@interact.se) Received: from wolfie.interact.se (wolfie.interact.se [193.15.98.202]) by smtp.interact.se (InterACT Mailer) with ESMTP id SAA24889; Tue, 23 Nov 1999 18:30:00 +0100 (CET) Date: Tue, 23 Nov 1999 18:28:25 +0100 (CET) From: Jonas Eriksson To: relapz Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Best Network Monitor In-Reply-To: Message-ID: X-Mascot: Homer Simpson MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 23 Nov 1999, relapz wrote: > Hello, > > I making the arrangements to monitor our servers and was curious what the > 'best' freebsd tool would be. I've seen netconsole in use and had a look > at www.netsaint.org, but can't seem to find them in the ports collection. > > Is there a recommended too for this task that comes with the ports? > What about sending all info to an loghost via syslogd(8) and use http://www.psionic.com/abacus/logcheck to check the logs? -- Jonas Eriksson To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 9:55:32 1999 Delivered-To: freebsd-isp@freebsd.org Received: from showcase.pdsys.com (showcase.pdsys.com [207.167.12.13]) by hub.freebsd.org (Postfix) with ESMTP id E61A815347 for ; Tue, 23 Nov 1999 09:55:18 -0800 (PST) (envelope-from jim@pdsys.com) Received: from whitelaw ([207.153.0.122]) by showcase.pdsys.com (Post.Office MTA v3.5.3 release 223 ID# 0-56457U100L100S0V35) with SMTP id com; Tue, 23 Nov 1999 10:55:17 -0700 From: "Jim Whitelaw" To: "relapz" Cc: "freebsd-isp@FreeBSD.ORG" Date: Tue, 23 Nov 1999 10:53:26 -0700 Reply-To: "Jim Whitelaw" X-Mailer: PMMail 2000 Professional (2.10.2000) For Windows NT (4.0.1381;5) In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: Re: Best Network Monitor Message-ID: <19991123175517437.AAA47@showcase.pdsys.com@whitelaw> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Not sure exactly what kind of monitoring you're needing, but perhaps BigBrother will work for you. The version in the ports collection isn't quite the latest, but it works fine. BB's home is here: http://MacLawran.ca/bb-dnld/ On Tue, 23 Nov 1999 11:28:10 -0500 (EST), relapz wrote: >Hello, > >I making the arrangements to monitor our servers and was curious what the >'best' freebsd tool would be. I've seen netconsole in use and had a look >at www.netsaint.org, but can't seem to find them in the ports collection. > >Is there a recommended too for this task that comes with the ports? > >DJM:> > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message ========================================================================= Jim Whitelaw tel: +1.780.975.1534 jim-at-pdsys-dot-com fax: +1.403.484.9239 Pathways Data Systems Inc. http://www.pdsys.com ========================================================================= "It is best to assume that the network is filled with malevolent entities that will send packets designed to have the worst possible effect." - F.Baker, RFC1812 -----BEGIN PGP SIGNATURE----- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. iQA/AwUBODrUlio2mWE/JSfJEQIbbACgnfYGFxuEdNq7jlO84cuF+6gG2rIAn3ZS Wgki8ThQyQ3smhymm2qxs6K8 =QxQ+ -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 12:34:36 1999 Delivered-To: freebsd-isp@freebsd.org Received: from ns.nobell.com (ns.nobell.com [216.140.184.2]) by hub.freebsd.org (Postfix) with ESMTP id 713BC14CB4; Tue, 23 Nov 1999 12:34:25 -0800 (PST) (envelope-from aaron@nobell.com) Received: from WIN2K1 (st84042.nobell.com [216.140.184.42]) by ns.nobell.com (8.9.3/8.9.3) with SMTP id OAA59111; Tue, 23 Nov 1999 14:34:16 -0600 (CST) (envelope-from aaron@nobell.com) From: "Aaron Sonntag" To: , , Cc: Subject: arpresolve: can't allocate llinfo for 127.0.0.1rt [PLAIN TEXT] Date: Tue, 23 Nov 1999 14:38:30 -0600 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.5600 Importance: Normal Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Ok... my apologies to all those whose email clients are not capable of parsing html emails... my settings indicated that my email was to be sent plain text... this was apparently not the case as someone was kind enough to point out... thanks! Aaron Sonntag -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Aaron Sonntag Sent: Monday, November 22, 1999 10:08 AM To: zshack; FreeBSD-questions@FreeBSD.ORG Subject: RE: slight problem I HAVE THIS PROBLEM TOO... I am not sure what causes it... but if you do a netstat -rn I am sure you will see that the route to your nic interface address is pointing to 127.0.0.1 instead of a mac address (as show below under [BEFORE]). Do a 'route delete [interface address]'... for instance in the example below... I type 'route delete 216.140.184.45'. Then ping the interface and run netstat -rn again and you will see (as shown below under [AFTER]) that the mac addy will appear and the machine will be happy. Temporarily L [BEFORE] Internet: Destination Gateway Flags Refs Use Netif Expire default 216.140.184.33 UGSc 11 2528899 rl0 10.0.1/24 link#3 UC 0 0 mx1 127.0.0.1 127.0.0.1 UH 2 80 lo0 216.140.184.32/27 link#1 UC 0 0 rl0 216.140.184.45 127.0.0.1 UGHS 0 232 rl0 [AFTER] Internet: Destination Gateway Flags Refs Use Netif Expire default 216.140.184.33 UGSc 11 2528999 rl0 10.0.1/24 link#3 UC 0 0 mx1 127.0.0.1 127.0.0.1 UH 1 80 lo0 216.140.184.32/27 link#1 UC 0 0 rl0 216.140.184.45 0:4f:4e:1:1a:88 UHLW 0 2 lo0 A friend/coworker of mine helped me with this temporary fix (THANKS DAVID!). But he seemed to think it was a larger issue with the dhclient script. I have had this problem on three different 3.3 machines on three COMPLETELY different networks and the one similarity between them was dhclient. Two of them were nat boxes on RR and one is a workstation. To reinforce this theory... on the nat boxes that have the problem... its only the interfaces that are getting dhcp via dhclient that have the problem. My point is... the above is a temporary solution. The following message will completely flood my dmesg buffer until the machine stops responding... arplookup 127.0.0.1 failed: could not allocate llinfo arpresolve: can't allocate llinfo for 127.0.0.1rt anybody have any permanent solutions?? Thanks Aaron Sonntag -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of zshack Sent: Monday, November 22, 1999 9:40 AM To: FreeBSD-questions@FreeBSD.ORG Subject: slight problem I just installed freebsd 3.3 stable and i keep getting this message: /kernet: arplookup 127.0.0.1 failed: can't allocate llinfo /kernet arpresolve can't allocate llinfo for 127.0.0.1 any idea what is causing this and how i can fix it? Thanks zshack To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 13:30:35 1999 Delivered-To: freebsd-isp@freebsd.org Received: from proteus.eclipse.net.uk (proteus.eclipse.net.uk [195.188.32.118]) by hub.freebsd.org (Postfix) with ESMTP id 7B02D153D9; Tue, 23 Nov 1999 13:30:21 -0800 (PST) (envelope-from sh@eclipse.net.uk) Received: from eclipse.net.uk (elara.eclipse.net.uk [195.188.32.31]) by proteus.eclipse.net.uk (Postfix) with ESMTP id F05F29B17; Tue, 23 Nov 1999 21:30:14 +0000 (GMT) Message-ID: <383B078A.384782E9@eclipse.net.uk> Date: Tue, 23 Nov 1999 21:30:50 +0000 From: Stuart Henderson Organization: Eclipse Networking X-Mailer: Mozilla 4.7 [en] (WinNT; U) X-Accept-Language: en-GB MIME-Version: 1.0 To: Aaron Sonntag Cc: freebsd-hackers@freebsd.org, freebsd-isp@freebsd.org, zshack@alliancelink.com Subject: Re: arpresolve: can't allocate llinfo for 127.0.0.1rt [PLAIN TEXT] References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org See PR bin/12136. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 16:40:55 1999 Delivered-To: freebsd-isp@freebsd.org Received: from vinyl.sentex.ca (vinyl.sentex.ca [209.112.4.14]) by hub.freebsd.org (Postfix) with ESMTP id 19F8A15485 for ; Tue, 23 Nov 1999 16:40:50 -0800 (PST) (envelope-from mike@sentex.net) Received: from granite.sentex.net (granite-atm.sentex.ca [209.112.4.1]) by vinyl.sentex.ca (8.9.3/8.9.3) with ESMTP id TAA75735; Tue, 23 Nov 1999 19:40:50 -0500 (EST) (envelope-from mike@sentex.net) Received: from ospf-mdt.sentex.net (ospf-mdt.sentex.net [205.211.164.81]) by granite.sentex.net (8.8.8/8.6.9) with SMTP id TAA21528; Tue, 23 Nov 1999 19:40:49 -0500 (EST) From: mike@sentex.net (Mike Tancsa) To: relapz@purefusion.com (relapz) Cc: freebsd-isp@freebsd.org Subject: Re: Best Network Monitor Date: Wed, 24 Nov 1999 00:40:48 GMT Message-ID: <383b33a5.158786963@mail.sentex.net> References: In-Reply-To: X-Mailer: Forte Agent .99e/32.227 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 23 Nov 1999 11:44:19 -0500, in sentex.lists.freebsd.isp you wrote: >Hello, > >I making the arrangements to monitor our servers and was curious what the >'best' freebsd tool would be. I've seen netconsole in use and had a look >at www.netsaint.org, but can't seem to find them in the ports collection. I dont know about the 'best', but you might try big brother... /usr/ports/net/bb It in conjunction with /usr/ports/net/ucd-snmp can cover most of the bases. Another handy one is to use the Threshold facility in /usr/ports/net/mrtg. ---Mike Mike Tancsa (mdtancsa@sentex.net) Sentex Communications Corp, Waterloo, Ontario, Canada "Given enough time, 100 monkeys on 100 routers could setup a national IP network." (KDW2) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Nov 23 22:19:36 1999 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [204.244.213.49]) by hub.freebsd.org (Postfix) with ESMTP id 489281512D for ; Tue, 23 Nov 1999 22:19:26 -0800 (PST) (envelope-from tom@sdf.com) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 11qUG6-0003jz-00; Tue, 23 Nov 1999 20:42:22 -0800 Date: Tue, 23 Nov 1999 20:42:16 -0800 (PST) From: Tom To: Kurt Jaeger Cc: "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 23 Nov 1999, Kurt Jaeger wrote: > Hi! > > > I was wondering if any one would know of a software that would > > do packet or bandwidth accounting for billing a burstable connection, > > and also something that would keep track of how many bytes a > > client consumed during the period (month). > > I modified tcpdump to do bean, ehr, packet/byte counting. > > ftp://ftp.LF.net/pub/unix/systems/FreeBSD/sw/ipcount-19991106.tgz > > It also requires sleepycat's/berkely DB, some 2.7.x version. > > Basically, it will add up the bytes that match a given tcpdump expression, > over a configurable interval. That seems rather silly, since ipfw can do that already. Tom To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 2:37: 4 1999 Delivered-To: freebsd-isp@freebsd.org Received: from complx.LF.net (complx.LF.net [212.118.160.200]) by hub.freebsd.org (Postfix) with ESMTP id E379E150BF for ; Wed, 24 Nov 1999 02:37:01 -0800 (PST) (envelope-from pi@complx.LF.net) Received: by complx.LF.net (Smail3.2.0.106/complx.LF.net) via LF.net GmbH Internet Services from pi for freebsd-isp@FreeBSD.ORG for host hub.FreeBSD.ORG id m11qZnF-000zzVC; Wed, 24 Nov 1999 11:36:57 +0100 (CET) Message-Id: Subject: Re: IP or packet Accounting Software for burst connections. To: tom@sdf.com (Tom) Date: Wed, 24 Nov 1999 11:36:57 +0100 (CET) From: "Kurt Jaeger" Cc: vandj@securenet.net (Jean M. Vandette), freebsd-isp@FreeBSD.ORG In-Reply-To: from "Tom" at Nov 23, 1999 08:42:16 PM X-NCC-RegID: de.oberon MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi! > > > I was wondering if any one would know of a software that would > > > do packet or bandwidth accounting for billing a burstable connection, > > > and also something that would keep track of how many bytes a > > > client consumed during the period (month). > > I modified tcpdump to do bean, ehr, packet/byte counting. > > ftp://ftp.LF.net/pub/unix/systems/FreeBSD/sw/ipcount-19991106.tgz > > It also requires sleepycat's/berkely DB, some 2.7.x version. > > Basically, it will add up the bytes that match a given tcpdump expression, > > over a configurable interval. > That seems rather silly, since ipfw can do that already. My bean-count-list is roughly 3000 records large. Will ipfw scale to that number of rules ? For 2-3 times 34mbit/sec ? Did it do that in 1996, when I first did this modification ? -- MfG/Best regards, Kurt Jaeger 21 years to go ! LF.net GmbH pi@LF.net Oberon.net GmbH pi@oberon.net Vor dem Lauch 23 fon +49 711 90074-23 Friedrich-Ebert-Str.1 D-70567 Stuttgart fax +49 711 7289041 40210 Duesseldorf fon +49 211 179253-11 For Redmond: "nuke the site from orbit -- it's the only way to be sure." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 2:59:59 1999 Delivered-To: freebsd-isp@freebsd.org Received: from alpo.whistle.com (alpo.whistle.com [207.76.204.38]) by hub.freebsd.org (Postfix) with ESMTP id 9D39A15001 for ; Wed, 24 Nov 1999 02:59:56 -0800 (PST) (envelope-from julian@whistle.com) Received: from current1.whiste.com (current1.whistle.com [207.76.205.22]) by alpo.whistle.com (8.9.1a/8.9.1) with ESMTP id CAA84493; Wed, 24 Nov 1999 02:59:42 -0800 (PST) Date: Wed, 24 Nov 1999 02:59:42 -0800 (PST) From: Julian Elischer To: Kurt Jaeger Cc: Tom , "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, 24 Nov 1999, Kurt Jaeger wrote: > Hi! > > > > > I was wondering if any one would know of a software that would > > > > do packet or bandwidth accounting for billing a burstable connection, > > > > and also something that would keep track of how many bytes a > > > > client consumed during the period (month). > > > > I modified tcpdump to do bean, ehr, packet/byte counting. > > > > ftp://ftp.LF.net/pub/unix/systems/FreeBSD/sw/ipcount-19991106.tgz > > > > It also requires sleepycat's/berkely DB, some 2.7.x version. > > > > Basically, it will add up the bytes that match a given tcpdump expression, > > > over a configurable interval. > > > That seems rather silly, since ipfw can do that already. > > My bean-count-list is roughly 3000 records large. Will ipfw scale to > that number of rules ? For 2-3 times 34mbit/sec ? > > Did it do that in 1996, when I first did this modification ? ipfw will not count bytes, just packets as for performance. you can branch using skipto so that you split your search list in binary manner and thus do 4096 different addresses while only actually running 13 rules. You'd have to have a program to generate the ipfw ruleset. > > -- > MfG/Best regards, Kurt Jaeger 21 years to go ! > LF.net GmbH pi@LF.net Oberon.net GmbH pi@oberon.net > Vor dem Lauch 23 fon +49 711 90074-23 Friedrich-Ebert-Str.1 > D-70567 Stuttgart fax +49 711 7289041 40210 Duesseldorf fon +49 211 179253-11 > For Redmond: "nuke the site from orbit -- it's the only way to be sure." > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 3: 4:22 1999 Delivered-To: freebsd-isp@freebsd.org Received: from complx.LF.net (complx.LF.net [212.118.160.200]) by hub.freebsd.org (Postfix) with ESMTP id BB6EB15001 for ; Wed, 24 Nov 1999 03:04:17 -0800 (PST) (envelope-from pi@complx.LF.net) Received: by complx.LF.net (Smail3.2.0.106/complx.LF.net) via LF.net GmbH Internet Services from pi for freebsd-isp@Freebsd.org for host hub.Freebsd.org id m11qaCT-000zzSC; Wed, 24 Nov 1999 12:03:01 +0100 (CET) Message-Id: Subject: Re: IP or packet Accounting Software for burst connections. To: freebsd-isp@Freebsd.org Date: Wed, 24 Nov 1999 12:03:01 +0100 (CET) From: "Kurt Jaeger" In-Reply-To: from "Julian Elischer" at Nov 24, 1999 02:59:42 AM X-NCC-RegID: de.oberon MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi! > > > > > I was wondering if any one would know of a software that would > > > > > do packet or bandwidth accounting for billing a burstable connection, > > > > > and also something that would keep track of how many bytes a > > > > > client consumed during the period (month). > > > > I modified tcpdump to do bean, ehr, packet/byte counting. > > > > > > ftp://ftp.LF.net/pub/unix/systems/FreeBSD/sw/ipcount-19991106.tgz > > > That seems rather silly, since ipfw can do that already. > > My bean-count-list is roughly 3000 records large. Will ipfw scale to > > that number of rules ? For 2-3 times 34mbit/sec ? > > Did it do that in 1996, when I first did this modification ? > ipfw will not count bytes, just packets > as for performance. I see. Bascially, we need it to count bytes. Ah, there is another way of doing it: www.ipmeter.com. > you can branch using skipto > so that you split your search list in binary manner and thus do 4096 > different addresses while only actually running 13 rules. You'd have to > have a program to generate the ipfw ruleset. It's not addresses, it's different networks. Some are /27, some /29, some /24, etc. -- MfG/Best regards, Kurt Jaeger 21 years to go ! LF.net GmbH pi@LF.net Oberon.net GmbH pi@oberon.net Vor dem Lauch 23 fon +49 711 90074-23 Friedrich-Ebert-Str.1 D-70567 Stuttgart fax +49 711 7289041 40210 Duesseldorf fon +49 211 179253-11 For Redmond: "nuke the site from orbit -- it's the only way to be sure." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 3:22: 5 1999 Delivered-To: freebsd-isp@freebsd.org Received: from alpo.whistle.com (alpo.whistle.com [207.76.204.38]) by hub.freebsd.org (Postfix) with ESMTP id F171814FC2 for ; Wed, 24 Nov 1999 03:22:02 -0800 (PST) (envelope-from julian@whistle.com) Received: from current1.whiste.com (current1.whistle.com [207.76.205.22]) by alpo.whistle.com (8.9.1a/8.9.1) with ESMTP id DAA86984; Wed, 24 Nov 1999 03:20:09 -0800 (PST) Date: Wed, 24 Nov 1999 03:20:09 -0800 (PST) From: Julian Elischer To: Kurt Jaeger Cc: freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, 24 Nov 1999, Kurt Jaeger wrote: > Hi! > > > > > > > I was wondering if any one would know of a software that would > > > > > > do packet or bandwidth accounting for billing a burstable connection, > > > > > > and also something that would keep track of how many bytes a > > > > > > client consumed during the period (month). > > > > > > I modified tcpdump to do bean, ehr, packet/byte counting. > > > > > > > > ftp://ftp.LF.net/pub/unix/systems/FreeBSD/sw/ipcount-19991106.tgz > > > > > That seems rather silly, since ipfw can do that already. > > > > My bean-count-list is roughly 3000 records large. Will ipfw scale to > > > that number of rules ? For 2-3 times 34mbit/sec ? > > > > Did it do that in 1996, when I first did this modification ? > > > ipfw will not count bytes, just packets > > as for performance. > > I see. Bascially, we need it to count bytes. > > Ah, there is another way of doing it: www.ipmeter.com. bpf basically copies packets but it is possible that it can just return the length and not all he data.(i'd have to check) > > > you can branch using skipto > > so that you split your search list in binary manner and thus do 4096 > > different addresses while only actually running 13 rules. You'd have to > > have a program to generate the ipfw ruleset. > > It's not addresses, it's different networks. Some are /27, some /29, some > /24, etc. that would still be splitable in a binary tree fashion.. > > -- > MfG/Best regards, Kurt Jaeger 21 years to go ! > LF.net GmbH pi@LF.net Oberon.net GmbH pi@oberon.net > Vor dem Lauch 23 fon +49 711 90074-23 Friedrich-Ebert-Str.1 > D-70567 Stuttgart fax +49 711 7289041 40210 Duesseldorf fon +49 211 179253-11 > For Redmond: "nuke the site from orbit -- it's the only way to be sure." > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 4:22:30 1999 Delivered-To: freebsd-isp@freebsd.org Received: from lucifer.bart.nl (lucifer.bart.nl [194.158.168.74]) by hub.freebsd.org (Postfix) with ESMTP id 717E114F62 for ; Wed, 24 Nov 1999 04:22:26 -0800 (PST) (envelope-from asmodai@lucifer.bart.nl) Received: (from asmodai@localhost) by lucifer.bart.nl (8.9.3/8.9.3) id NAA68357; Wed, 24 Nov 1999 13:21:21 +0100 (CET) (envelope-from asmodai) Date: Wed, 24 Nov 1999 13:21:21 +0100 From: Jeroen Ruigrok van der Werven To: Kurt Jaeger Cc: Tom , "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. Message-ID: <19991124132121.E68066@lucifer.bart.nl> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: ; from pi@complx.LF.net on Wed, Nov 24, 1999 at 11:36:57AM +0100 Organisation: bART Internet Services B.V. Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org www.ipmeter.com -- Jeroen Ruigrok van der Werven Network- and systemadministrator bART Internet Services / Tel: +31 - (0) 10 - 240 39 70 VIA NET.WORKS Netherlands To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 7: 5:58 1999 Delivered-To: freebsd-isp@freebsd.org Received: from federation.addy.com (federation.addy.com [208.11.142.20]) by hub.freebsd.org (Postfix) with ESMTP id 81CF814FDC for ; Wed, 24 Nov 1999 07:05:53 -0800 (PST) (envelope-from jim@federation.addy.com) Received: from localhost (jim@localhost) by federation.addy.com (8.8.5/8.6.12) with SMTP id KAA12414 for ; Wed, 24 Nov 1999 10:05:21 -0500 (EST) Date: Wed, 24 Nov 1999 10:05:21 -0500 (EST) From: Jim Sander Reply-To: Jim Sander To: freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > > ipfw will not count bytes, just packets `man ifpw` - I assume I'm not missing anything in this sentence... "All rules have two associated counters, a packet count and a byte count." -=Jim=- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 8: 0:11 1999 Delivered-To: freebsd-isp@freebsd.org Received: from salmon.hei.net (gw-trans.hei.net [209.222.163.129]) by hub.freebsd.org (Postfix) with ESMTP id 4845B14E7C for ; Wed, 24 Nov 1999 07:59:25 -0800 (PST) (envelope-from john@hei.net) Received: from trout (trout.hei.net [209.222.163.131]) by salmon.hei.net (8.8.8/8.8.5) with SMTP id HAA16174 for ; Wed, 24 Nov 1999 07:58:23 -0800 (PST) Message-ID: <000c01bf3695$84311760$83a3ded1@hei.net> From: "John A. Hengstler" To: Subject: Network Questions Date: Wed, 24 Nov 1999 08:03:58 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0009_01BF3652.75EC45A0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2615.200 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_0009_01BF3652.75EC45A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Greetings, I have been noticing this message in /var/log/messages for some time, = and have still not figured out why it is popping up, or how to get rid = of the message: > arplookup 209.222.163.141 failed: host is not on local network > arpresolve: can't allocate llinfo for 209.222.163.141 The address in questions, is on a dial up port assigned to a Portmaster = 2e. (Yes each of the address in the pool shows up in these messages as = well) . Any suggestions on how to correct this and/or remove these messages from = the message log. Thanks in advance. John Hengstler =20 ------=_NextPart_000_0009_01BF3652.75EC45A0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Greetings,
 
I have been noticing this message in=20 /var/log/messages for some time, and have still not figured out why it = is=20 popping up, or how to get rid of the message:
 
> arplookup 209.222.163.141 failed: = host is not=20 on local network
> arpresolve: can't allocate llinfo for=20 209.222.163.141
 
The address in questions, is on a = dial up port=20 assigned to a Portmaster 2e.  (Yes each of the address in the = pool=20 shows up in these messages as well) .
 
Any suggestions on how to correct = this and/or=20 remove these messages from the message log.
 
Thanks in advance.
 
 
John=20 Hengstler          &nbs= p;            = ;=20
------=_NextPart_000_0009_01BF3652.75EC45A0-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 8:55:21 1999 Delivered-To: freebsd-isp@freebsd.org Received: from post.mail.areti.net (meteora.areti.com [193.118.189.10]) by hub.freebsd.org (Postfix) with ESMTP id B07121525E for ; Wed, 24 Nov 1999 08:55:07 -0800 (PST) (envelope-from ndear@areti.net) Received: from acropolis (ndear@acropolis.noc.areti.net [193.118.189.102]) by post.mail.areti.net (8.9.3/8.9.3/Areti-2.0.0) with ESMTP id QAA16999 for ; Wed, 24 Nov 1999 16:54:47 GMT Message-Id: <199911241654.QAA16999@post.mail.areti.net> From: "Nicholas J. Dear" Organization: Areti Internet Ltd. To: freebsd-isp@FreeBSD.ORG Date: Wed, 24 Nov 1999 16:53:25 -0000 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Network Questions Reply-To: ndear@areti.net X-mailer: Pegasus Mail for Win32 (v3.12b) Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 24 Nov 99, at 8:03, John A. Hengstler wrote: > Greetings, > > I have been noticing this message in /var/log/messages for some time, and > have still not figured out why it is popping up, or how to get rid of the > message: > > > arplookup 209.222.163.141 failed: host is not on local network > > arpresolve: can't allocate llinfo for 209.222.163.141 > > The address in questions, is on a dial up port assigned to a Portmaster 2e. > (Yes each of the address in the pool shows up in these messages as well) . > > Any suggestions on how to correct this and/or remove these messages from the message log. This may be wrong, but the answer I was given some months ago (many months ago), is that if your gate way is 194.207.26.1 for example, but you have an IP bound that is not part of that same block (194.207.188.100 eg) you get that message. You can comment it out of the kernel code IIRC - but I didn't bother, it doesn't affect anything, it just looks messy. N. ------- End of forwarded message ------- -- Nicholas J. Dear Mail: ndear@areti.net Tel: +44 (0)20-8402-4041 Areti Internet Ltd., http://www.areti.co.uk/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 11: 7:33 1999 Delivered-To: freebsd-isp@freebsd.org Received: from mail.toplink.net (mail.toplink.net [195.2.171.8]) by hub.freebsd.org (Postfix) with ESMTP id 0D73B14DF2 for ; Wed, 24 Nov 1999 11:07:29 -0800 (PST) (envelope-from ck@toplink.net) Received: from babylon.toplink.net (babylon.toplink.net [195.2.171.90]) by mail.toplink.net (8.9.3/8.9.3) with ESMTP id UAA14974; Wed, 24 Nov 1999 20:06:58 +0100 (CET) Received: from localhost (ck@localhost) by babylon.toplink.net (8.9.3/8.9.3) with ESMTP id UAA42814; Wed, 24 Nov 1999 20:06:50 +0100 (CET) Date: Wed, 24 Nov 1999 20:06:50 +0100 (CET) From: Christian Kratzer To: Tom Cc: Kurt Jaeger , "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: X-NCC-RegID: de.toplink X-Spammer-Kill-Ratio: 75% X-Jihad: Will hunt down all cases of Spam and Net abuse. MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi, > > Basically, it will add up the bytes that match a given tcpdump expression, > > over a configurable interval. > > That seems rather silly, since ipfw can do that already. ipfw only counts bytes and packets. It does not log touples of (src ip,dst ip,byte count, packet count) which is what is required for full ip accounting. ipfw is basically the wrong tool for accounting ... Greetings Christian -- TopLink Internet Services GmbH ck@171.2.195.in-addr.arpa Christian Kratzer http://www.toplink.net/ Phone: +49 7032 2701-0 Fax: +49 7032 2701-19 FreeBSD spoken here! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 11:40: 4 1999 Delivered-To: freebsd-isp@freebsd.org Received: from alpo.whistle.com (alpo.whistle.com [207.76.204.38]) by hub.freebsd.org (Postfix) with ESMTP id 276FB15438 for ; Wed, 24 Nov 1999 11:40:00 -0800 (PST) (envelope-from julian@whistle.com) Received: from current1.whiste.com (current1.whistle.com [207.76.205.22]) by alpo.whistle.com (8.9.1a/8.9.1) with ESMTP id LAA46944; Wed, 24 Nov 1999 11:39:12 -0800 (PST) Date: Wed, 24 Nov 1999 11:39:11 -0800 (PST) From: Julian Elischer To: Jim Sander Cc: freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I stand corrected. On Wed, 24 Nov 1999, Jim Sander wrote: > > > ipfw will not count bytes, just packets > > `man ifpw` - I assume I'm not missing anything in this sentence... > > "All rules have two associated counters, a packet count and a byte count." > > -=Jim=- > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 15:33:39 1999 Delivered-To: freebsd-isp@freebsd.org Received: from freja.webgiro.com (freja.webgiro.com [212.209.29.10]) by hub.freebsd.org (Postfix) with ESMTP id 71F6D15063 for ; Wed, 24 Nov 1999 15:33:34 -0800 (PST) (envelope-from abial@webgiro.com) Received: by freja.webgiro.com (Postfix, from userid 1001) id 245161933; Thu, 25 Nov 1999 00:34:08 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by freja.webgiro.com (Postfix) with ESMTP id 233C549EC; Thu, 25 Nov 1999 00:34:08 +0100 (CET) Date: Thu, 25 Nov 1999 00:34:08 +0100 (CET) From: Andrzej Bialecki To: Kurt Jaeger Cc: freebsd-isp@Freebsd.org Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, 24 Nov 1999, Kurt Jaeger wrote: > Hi! > > > > > > > I was wondering if any one would know of a software that would > > > > > > do packet or bandwidth accounting for billing a burstable connection, > > > > > > and also something that would keep track of how many bytes a > > > > > > client consumed during the period (month). > > > > > > I modified tcpdump to do bean, ehr, packet/byte counting. > > > > > > > > ftp://ftp.LF.net/pub/unix/systems/FreeBSD/sw/ipcount-19991106.tgz > > > > > That seems rather silly, since ipfw can do that already. > > > > My bean-count-list is roughly 3000 records large. Will ipfw scale to > > > that number of rules ? For 2-3 times 34mbit/sec ? > > > > Did it do that in 1996, when I first did this modification ? > > > ipfw will not count bytes, just packets > > as for performance. > > I see. Bascially, we need it to count bytes. > > Ah, there is another way of doing it: www.ipmeter.com. > > > you can branch using skipto > > so that you split your search list in binary manner and thus do 4096 > > different addresses while only actually running 13 rules. You'd have to > > have a program to generate the ipfw ruleset. > > It's not addresses, it's different networks. Some are /27, some /29, some > /24, etc. Please take a look at NeTraMet. It's very sophisticated and reliable tool, written exactly for this purpose. Exact URL escapes me, but you can start at www.caida.org.You can also search by author: Nevil Brownlee. I was using this software for a couple of years, and it's stable and mature. You can configure the detail level and type of traffic by almost any rule - it has its own programming language to construct procedures that match and count packets/bytes. There are additional tools available that help processing the logs. Using FreeBSD on a Pentium 133MHz I was abl to properly count ca. 3500 packets/s, for a couple hundred different subnets. Andrzej Bialecki // WebGiro AB, Sweden (http://www.webgiro.com) // ------------------------------------------------------------------- // ------ FreeBSD: The Power to Serve. http://www.freebsd.org -------- // --- Small & Embedded FreeBSD: http://www.freebsd.org/~picobsd/ ---- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 16: 6:21 1999 Delivered-To: freebsd-isp@freebsd.org Received: from ring.vpop.net (ring.vpop.net [206.117.147.5]) by hub.freebsd.org (Postfix) with ESMTP id 1390D14BEF for ; Wed, 24 Nov 1999 16:06:16 -0800 (PST) (envelope-from joe@vpop.net) Received: from ntmama (www.vpop.net [206.117.147.11]) by ring.vpop.net (8.9.1/8.9.1) with SMTP id QAA19938 for ; Wed, 24 Nov 1999 16:04:37 -0800 (PST) From: "Joe McDonald" To: Subject: RE: IP or packet Accounting Software for burst connections. Date: Wed, 24 Nov 1999 16:04:36 -0800 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 In-reply-to: Importance: Normal Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org NetraMet is at: = http://www.auckland.ac.nz/net/Accounting/ntm.Release.note.html > Please take a look at NeTraMet. It's very sophisticated and reliable = tool, > written exactly for this purpose. Exact URL escapes me, but you can = start > at www.caida.org.You can also search by author: Nevil Brownlee. regards, -joe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 17:10:29 1999 Delivered-To: freebsd-isp@freebsd.org Received: from vinyl.sentex.ca (vinyl.sentex.ca [209.112.4.14]) by hub.freebsd.org (Postfix) with ESMTP id 2AFDF14F35 for ; Wed, 24 Nov 1999 17:10:25 -0800 (PST) (envelope-from mike@sentex.net) Received: from granite.sentex.net (granite-atm.sentex.ca [209.112.4.1]) by vinyl.sentex.ca (8.9.3/8.9.3) with ESMTP id UAA05080; Wed, 24 Nov 1999 20:10:06 -0500 (EST) (envelope-from mike@sentex.net) Received: from ospf-mdt.sentex.net (ospf-mdt.sentex.net [205.211.164.81]) by granite.sentex.net (8.8.8/8.6.9) with SMTP id UAA01685; Wed, 24 Nov 1999 20:10:05 -0500 (EST) From: mike@sentex.net (Mike Tancsa) To: john@hei.net ("John A. Hengstler") Cc: freebsd-isp@freebsd.org Subject: Re: Network Questions Date: Thu, 25 Nov 1999 01:10:04 GMT Message-ID: <383c8bdb.246915035@mail.sentex.net> References: In-Reply-To: X-Mailer: Forte Agent .99e/32.227 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 24 Nov 1999 11:00:54 -0500, in sentex.lists.freebsd.isp you wrote: >I have been noticing this message in /var/log/messages for some time, = >and have still not figured out why it is popping up, or how to get rid = >of the message: > >> arplookup 209.222.163.141 failed: host is not on local network >> arpresolve: can't allocate llinfo for 209.222.163.141 My immediate _guess_ is a netmask routing issue. Please provide a little more info. On the PM2, show ether0 show route On your freebsd box, ifconfig -a netstat -nr ---Mike Mike Tancsa (mdtancsa@sentex.net) Sentex Communications Corp, Waterloo, Ontario, Canada "Given enough time, 100 monkeys on 100 routers could setup a national IP network." (KDW2) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 20:36:45 1999 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [204.244.213.49]) by hub.freebsd.org (Postfix) with ESMTP id 3287D14C37 for ; Wed, 24 Nov 1999 20:36:27 -0800 (PST) (envelope-from tom@sdf.com) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 11qp6Y-0004v4-00; Wed, 24 Nov 1999 18:57:54 -0800 Date: Wed, 24 Nov 1999 18:57:52 -0800 (PST) From: Tom To: Kurt Jaeger Cc: "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, 24 Nov 1999, Kurt Jaeger wrote: > Hi! > > > > > I was wondering if any one would know of a software that would > > > > do packet or bandwidth accounting for billing a burstable connection, > > > > and also something that would keep track of how many bytes a > > > > client consumed during the period (month). > > > > I modified tcpdump to do bean, ehr, packet/byte counting. > > > > ftp://ftp.LF.net/pub/unix/systems/FreeBSD/sw/ipcount-19991106.tgz > > > > It also requires sleepycat's/berkely DB, some 2.7.x version. > > > > Basically, it will add up the bytes that match a given tcpdump expression, > > > over a configurable interval. > > > That seems rather silly, since ipfw can do that already. > > My bean-count-list is roughly 3000 records large. Will ipfw scale to > that number of rules ? For 2-3 times 34mbit/sec ? Well, think about it, how could it be any slower? Are bpf rules more efficient than ipfw rules since they have to be evaluated at the same layer? Tom To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 20:38:27 1999 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [204.244.213.49]) by hub.freebsd.org (Postfix) with ESMTP id 9882B14D07 for ; Wed, 24 Nov 1999 20:38:21 -0800 (PST) (envelope-from tom@sdf.com) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 11qp8r-0004vJ-00; Wed, 24 Nov 1999 19:00:17 -0800 Date: Wed, 24 Nov 1999 19:00:17 -0800 (PST) From: Tom To: Julian Elischer Cc: Kurt Jaeger , "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, 24 Nov 1999, Julian Elischer wrote: > ipfw will not count bytes, just packets No. Look at the output of "ipfw -a list". There are columns for packets and bytes. Tom To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 20:40:45 1999 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [204.244.213.49]) by hub.freebsd.org (Postfix) with ESMTP id 5085A14C85 for ; Wed, 24 Nov 1999 20:40:40 -0800 (PST) (envelope-from tom@sdf.com) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 11qpBz-0004vY-00; Wed, 24 Nov 1999 19:03:31 -0800 Date: Wed, 24 Nov 1999 19:03:30 -0800 (PST) From: Tom To: Christian Kratzer Cc: Kurt Jaeger , "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, 24 Nov 1999, Christian Kratzer wrote: > Hi, > > > Basically, it will add up the bytes that match a given tcpdump expression, > > > over a configurable interval. > > > > That seems rather silly, since ipfw can do that already. > > ipfw only counts bytes and packets. It does not log touples of > (src ip,dst ip,byte count, packet count) which is what is required > for full ip accounting. > > ipfw is basically the wrong tool for accounting ... > > Greetings > Christian Yes, but you can specify the tuples that are significant. I doubt that anyone wants every possible combination. Tom To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 20:48: 7 1999 Delivered-To: freebsd-isp@freebsd.org Received: from casper.spirit.net.au (cas240.act.spirit.net.au [203.63.240.3]) by hub.freebsd.org (Postfix) with ESMTP id B341114C13 for ; Wed, 24 Nov 1999 20:48:03 -0800 (PST) (envelope-from bryan@casper.spirit.net.au) Received: (from bryan@localhost) by casper.spirit.net.au (8.9.3/8.8.5) id PAA44195; Thu, 25 Nov 1999 15:45:01 +1100 (EST) From: Bryan Collins Message-Id: <199911250445.PAA44195@casper.spirit.net.au> Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: from Tom at "Nov 24, 1999 07:03:30 pm" To: tom@sdf.com (Tom) Date: Thu, 25 Nov 1999 15:45:00 +1100 (EST) Cc: ck@toplink.net (Christian Kratzer), pi@complx.LF.net (Kurt Jaeger), vandj@securenet.net (Jean M. Vandette), freebsd-isp@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > Yes, but you can specify the tuples that are significant. I doubt that > anyone wants every possible combination. > Do you not require the IP stream to be routed 'thru' the box running ipfw? Another point of failure in a network... ipfw isnt promiscuous, tcpdump is/canbe. Bry To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 20:49:20 1999 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [204.244.213.49]) by hub.freebsd.org (Postfix) with ESMTP id 767CC14BC7 for ; Wed, 24 Nov 1999 20:49:16 -0800 (PST) (envelope-from tom@sdf.com) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 11qpKF-0004wD-00; Wed, 24 Nov 1999 19:12:03 -0800 Date: Wed, 24 Nov 1999 19:12:03 -0800 (PST) From: Tom To: Bryan Collins Cc: Christian Kratzer , Kurt Jaeger , "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: <199911250445.PAA44195@casper.spirit.net.au> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 25 Nov 1999, Bryan Collins wrote: > > Yes, but you can specify the tuples that are significant. I doubt that > > anyone wants every possible combination. > > Do you not require the IP stream to be routed 'thru' the box running ipfw? > Another point of failure in a network... It is logical to do this kind of accounting on the gateway. If SPOFs are on issue, use multiple gateways. > ipfw isnt promiscuous, tcpdump is/canbe. And therefore won't work on switched networks either, unless you configure it on a "shared" port, which limits how much traffic you will be able to handle. > Bry Tom To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 21: 9:41 1999 Delivered-To: freebsd-isp@freebsd.org Received: from casper.spirit.net.au (cas240.act.spirit.net.au [203.63.240.3]) by hub.freebsd.org (Postfix) with ESMTP id 242B614BD6 for ; Wed, 24 Nov 1999 21:09:34 -0800 (PST) (envelope-from bryan@casper.spirit.net.au) Received: (from bryan@localhost) by casper.spirit.net.au (8.9.3/8.8.5) id QAA45460; Thu, 25 Nov 1999 16:05:58 +1100 (EST) From: Bryan Collins Message-Id: <199911250505.QAA45460@casper.spirit.net.au> Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: from Tom at "Nov 24, 1999 07:12:03 pm" To: tom@sdf.com (Tom) Date: Thu, 25 Nov 1999 16:05:57 +1100 (EST) Cc: ck@toplink.net (Christian Kratzer), pi@complx.LF.net (Kurt Jaeger), vandj@securenet.net (Jean M. Vandette), freebsd-isp@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > > Do you not require the IP stream to be routed 'thru' the box running ipfw? > > Another point of failure in a network... > > It is logical to do this kind of accounting on the gateway. > > If SPOFs are on issue, use multiple gateways. > > > ipfw isnt promiscuous, tcpdump is/canbe. > > And therefore won't work on switched networks either, unless you > configure it on a "shared" port, which limits how much traffic you will be > able to handle. you'd still need to pass the IP traffic thru your accounting box on a switch 'monitoring' port I've actually used a few different methods of IP accounting, ranging from hacked tcpdumps, hacked netramet, a custom BPF perl5 capture, and what I'm using right now, which is snmp to cisco IP accounting... tcpdump worked as an interim, but being promiscuous, we couldnt guarantee all packets be counted. The custom bpf system that we wrote was rather sweet, it had process pools and so on, so that once a given ammount of traffic was counted, that process went off to aggregate it, while another capture process started. But by far the easiest and cleanest is our snmp queries to cisco's IP accounting (and checkpoint IP accounting) on both border routers and access servers. nothing gets missed now. Bry To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 22:26:33 1999 Delivered-To: freebsd-isp@freebsd.org Received: from complx.LF.net (complx.LF.net [212.118.160.200]) by hub.freebsd.org (Postfix) with ESMTP id 9508B14CEC for ; Wed, 24 Nov 1999 22:26:29 -0800 (PST) (envelope-from pi@complx.LF.net) Received: by complx.LF.net (Smail3.2.0.106/complx.LF.net) via LF.net GmbH Internet Services from pi for freebsd-isp@FreeBSD.ORG for host hub.FreeBSD.ORG id m11qsM4-000zzTC; Thu, 25 Nov 1999 07:26:08 +0100 (CET) Message-Id: Subject: Re: IP or packet Accounting Software for burst connections. To: freebsd-isp@FreeBSD.ORG Date: Thu, 25 Nov 1999 07:26:08 +0100 (CET) From: "Kurt Jaeger" In-Reply-To: from "Tom" at Nov 24, 1999 07:03:30 PM X-NCC-RegID: de.oberon MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi! > > > > Basically, it will add up the bytes that match a given tcpdump expression, > > > > over a configurable interval. > > > That seems rather silly, since ipfw can do that already. > > ipfw only counts bytes and packets. It does not log touples of > > (src ip,dst ip,byte count, packet count) which is what is required > > for full ip accounting. > Yes, but you can specify the tuples that are significant. I doubt that > anyone wants every possible combination. There are interesting results if one does the full walk. e.G. just using the size variation of hourly/daily/etc matrices lets you detect in- and outgoing network scans. And yes, there are customers that want us to be able to track every pair. This is Europe, where IP traffic until very recently was more expensive than disk space. -- MfG/Best regards, Kurt Jaeger 21 years to go ! LF.net GmbH pi@LF.net Oberon.net GmbH pi@oberon.net Vor dem Lauch 23 fon +49 711 90074-23 Friedrich-Ebert-Str.1 D-70567 Stuttgart fax +49 711 7289041 40210 Duesseldorf fon +49 211 179253-11 For Redmond: "nuke the site from orbit -- it's the only way to be sure." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Nov 24 22:28: 2 1999 Delivered-To: freebsd-isp@freebsd.org Received: from complx.LF.net (complx.LF.net [212.118.160.200]) by hub.freebsd.org (Postfix) with ESMTP id DEBE814CEC for ; Wed, 24 Nov 1999 22:27:58 -0800 (PST) (envelope-from pi@complx.LF.net) Received: by complx.LF.net (Smail3.2.0.106/complx.LF.net) via LF.net GmbH Internet Services from pi for freebsd-isp@FreeBSD.ORG for host hub.FreeBSD.ORG id m11qsNn-000zzTC; Thu, 25 Nov 1999 07:27:55 +0100 (CET) Message-Id: Subject: Re: IP or packet Accounting Software for burst connections. To: freebsd-isp@FreeBSD.ORG Date: Thu, 25 Nov 1999 07:27:55 +0100 (CET) From: "Kurt Jaeger" In-Reply-To: from "Tom" at Nov 24, 1999 06:57:52 PM X-NCC-RegID: de.oberon MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi! > > > > I modified tcpdump to do bean, ehr, packet/byte counting. > > > That seems rather silly, since ipfw can do that already. > > My bean-count-list is roughly 3000 records large. Will ipfw scale to > > that number of rules ? For 2-3 times 34mbit/sec ? > Well, think about it, how could it be any slower? Are bpf rules more > efficient than ipfw rules since they have to be evaluated at the same > layer? Basically, bpf is pretty efficient if you use only a "get all" rule. Packet loss under 0.5 per tousand, right now. We only store them away for later/distributed processing. -- MfG/Best regards, Kurt Jaeger 21 years to go ! LF.net GmbH pi@LF.net Oberon.net GmbH pi@oberon.net Vor dem Lauch 23 fon +49 711 90074-23 Friedrich-Ebert-Str.1 D-70567 Stuttgart fax +49 711 7289041 40210 Duesseldorf fon +49 211 179253-11 For Redmond: "nuke the site from orbit -- it's the only way to be sure." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Nov 25 4:32: 5 1999 Delivered-To: freebsd-isp@freebsd.org Received: from mail.toplink.net (mail.toplink.net [195.2.171.8]) by hub.freebsd.org (Postfix) with ESMTP id A896814D1F for ; Thu, 25 Nov 1999 04:32:01 -0800 (PST) (envelope-from ck@toplink.net) Received: from babylon.toplink.net (babylon.toplink.net [195.2.171.90]) by mail.toplink.net (8.9.3/8.9.3) with ESMTP id NAA13093; Thu, 25 Nov 1999 13:31:56 +0100 (CET) Received: from localhost (ck@localhost) by babylon.toplink.net (8.9.3/8.9.3) with ESMTP id NAA50627; Thu, 25 Nov 1999 13:31:43 +0100 (CET) Date: Thu, 25 Nov 1999 13:31:43 +0100 (CET) From: Christian Kratzer To: Bryan Collins Cc: Tom , Kurt Jaeger , "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: <199911250505.QAA45460@casper.spirit.net.au> Message-ID: X-NCC-RegID: de.toplink X-Spammer-Kill-Ratio: 75% X-Jihad: Will hunt down all cases of Spam and Net abuse. MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi, On Thu, 25 Nov 1999, Bryan Collins wrote: > > > Do you not require the IP stream to be routed 'thru' the box running ipfw? > > > Another point of failure in a network... > > > > It is logical to do this kind of accounting on the gateway. > > > > If SPOFs are on issue, use multiple gateways. > > > > > ipfw isnt promiscuous, tcpdump is/canbe. > > > > And therefore won't work on switched networks either, unless you > > configure it on a "shared" port, which limits how much traffic you will be > > able to handle. > > you'd still need to pass the IP traffic thru your accounting box on > a switch 'monitoring' port > > I've actually used a few different methods of IP accounting, > ranging from hacked tcpdumps, hacked netramet, a custom BPF perl5 capture, > and what I'm using right now, which is snmp to cisco IP accounting... > > tcpdump worked as an interim, but being promiscuous, we couldnt > guarantee all packets be counted. > > The custom bpf system that we wrote was rather sweet, it had process pools > and so on, so that once a given ammount of traffic was counted, that process > went off to aggregate it, while another capture process started. we ran Kurts hacked tcpdump (ipcount) successfully for several years on our then gated based freebsd border router. We ran it on the external interface going to our bean counting upstream. Never had a problem with it. E1 bandwith at 3 locations. We have since switched to cisco ip accounting now that we have ciscos all over the place and E3 bandwith. > But by far the easiest and cleanest is our snmp queries to cisco's > IP accounting (and checkpoint IP accounting) on > both border routers and access servers. nothing gets missed now. beware of snmp queries of any bulk data (ip accounting, routing tables). This will easily blow the cpu on your cisco. We use a small c programm that grabs the data by telnneting to the cisco and doing a clear ip accounting show ip accounting checkpoint This all goes in one short tcp telnet session and does not require loads of small udp sessions like snmp does. Snmp is again the wrong hammer for bulk transfers... Greetings Christian -- TopLink Internet Services GmbH ck@171.2.195.in-addr.arpa Christian Kratzer http://www.toplink.net/ Phone: +49 7032 2701-0 Fax: +49 7032 2701-19 FreeBSD spoken here! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Nov 25 5: 8:23 1999 Delivered-To: freebsd-isp@freebsd.org Received: from va.com.au (va.com.au [203.15.106.1]) by hub.freebsd.org (Postfix) with ESMTP id 193F814D4E for ; Thu, 25 Nov 1999 05:08:12 -0800 (PST) (envelope-from jesse@va.com.au) Received: from [1.1.1.3] (203.108.23.199) by va.com.au with ESMTP (Eudora Internet Mail Server 2.2); Thu, 25 Nov 1999 23:38:06 +1030 Mime-Version: 1.0 X-Sender: jesse@mail.va.com.au Message-Id: In-Reply-To: <199911250505.QAA45460@casper.spirit.net.au> References: <199911250505.QAA45460@casper.spirit.net.au> Date: Thu, 25 Nov 1999 23:51:54 +1100 To: Bryan Collins , tom@sdf.com (Tom) From: jesse reynolds Subject: Re: IP or packet Accounting Software for burst connections. Cc: ck@toplink.net (Christian Kratzer), pi@complx.LF.net (Kurt Jaeger), vandj@securenet.net (Jean M. Vandette), freebsd-isp@FreeBSD.ORG Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 4:05 PM +1100 25/11/1999, Bryan Collins wrote: >I've actually used a few different methods of IP accounting, >ranging from hacked tcpdumps, hacked netramet, a custom BPF perl5 capture, >and what I'm using right now, which is snmp to cisco IP accounting... > >tcpdump worked as an interim, but being promiscuous, we couldnt >guarantee all packets be counted. > >The custom bpf system that we wrote was rather sweet, it had process pools >and so on, so that once a given ammount of traffic was counted, that process >went off to aggregate it, while another capture process started. > >But by far the easiest and cleanest is our snmp queries to cisco's >IP accounting (and checkpoint IP accounting) on >both border routers and access servers. nothing gets missed now. What about netramet? I've just been reading the docs at the aforementioned URL and it looks pretty sophisticated. How did it work for you? Does it just work in promiscuous mode? Also, why do you separate the listener from the bean counter??? Cheers Jesse -- Jesse Reynolds - Virtual Artists Pty Ltd - http://www.va.com.au Email: jesse (at) va.com.au - http://virtual.artists To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Nov 25 9:20:25 1999 Delivered-To: freebsd-isp@freebsd.org Received: from dark.abyss.net (dark.abyss.net [216.42.72.51]) by hub.freebsd.org (Postfix) with ESMTP id 35FC714A23 for ; Thu, 25 Nov 1999 09:19:53 -0800 (PST) (envelope-from ksb@abyss.net) Received: from nightmare.abyss.net (ksb@nightmare.abyss.net [216.42.78.195]) by dark.abyss.net (8.9.2/8.9.2) with ESMTP id MAA00694 for ; Thu, 25 Nov 1999 12:02:21 -0500 (EST) (envelope-from ksb@abyss.net) Date: Thu, 25 Nov 1999 12:20:23 -0500 (EST) From: "Kevin S. Brackett" To: freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org If anyone else hasn't suggested ipfilter+ipaccounting, check out http://www2.empnet.com/ipacct/. - kevin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Nov 25 19: 2:36 1999 Delivered-To: freebsd-isp@freebsd.org Received: from blackbird.lonetree.com (blackbird.lonetree.com [207.141.55.3]) by hub.freebsd.org (Postfix) with ESMTP id E4F6114E33 for ; Thu, 25 Nov 1999 19:02:34 -0800 (PST) (envelope-from wolfman@csocs.com) Received: from csocs.com [209.64.46.23] by blackbird.lonetree.com with ESMTP (SMTPD32-5.01) id A82DE9030124; Thu, 25 Nov 1999 20:02:05 mdt Message-ID: <383DF8DD.C22B381C@csocs.com> Date: Thu, 25 Nov 1999 20:05:02 -0700 From: "J.C. Frazier" X-Mailer: Mozilla 4.7 [en] (X11; I; FreeBSD 3.3-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-isp@freebsd.org Subject: Problems with apache, frontpage, and vhosts Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I am running FreeBSD 3.3-stable, apache+php+mod_ssl-1.3.9+3.0.12+2.4.8, and frontpage extensions version 4.0 (not the module). It was set up exactly as specified at www.freebsdzine.org in their FP article, if you'd like full details on the setup. Two days ago this system was broken into. Someone got in through frontpage and changed the account password. After a lot of investigating and testing I found that my vhosts listed in apache.conf aren't abiding by the default settings for 's in the file. Hence no overrides and my .htaccess files are being ignored, leaving me wide open. I am running a mixed named/ip based vhost system (8 named based hosts on one IP and 2 named based hosts on another IP). Because my .htaccess files aren't being read, the FP extensions aren't working correctly either. When a customer tries to GET, POST, etc...it won't accept any passwords. My log files give no clues to what is wrong other then a password mismatch on those functions, even though the passwords have been checked and rechecked and are correct. So for now I have uninstalled the frontpage extensions all together temporarily because of the security implecations until I can find out how to solve these problems. I've searched the mailing lists and read the apache documentation site and can't find any other instance of this type of incident happening or any corrective actions. I've tried a few different versions of apache including 1.3.3 and 1.3.6-php, both with the same results. frontpage extensions version 3.0 also gave the same results. Any help or advice would be greatly appreciated. Thank you for your time. J.C. Frazier To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Nov 25 20:25:36 1999 Delivered-To: freebsd-isp@freebsd.org Received: from guardian.fortress.org (guardian-ext.fortress.org [199.202.137.242]) by hub.freebsd.org (Postfix) with ESMTP id EFAB014BDC for ; Thu, 25 Nov 1999 20:25:32 -0800 (PST) (envelope-from andrew@pubnix.net) Received: from pubnix.net (guardian.fortress.org [198.168.253.52]) by guardian.fortress.org (8.9.3/8.8.8) with ESMTP id XAA02013 for ; Thu, 25 Nov 1999 23:25:28 -0500 (EST) (envelope-from andrew@pubnix.net) Message-ID: <383E0BB8.55FF63FA@pubnix.net> Date: Thu, 25 Nov 1999 23:25:28 -0500 From: Andrew Organization: PubNIX Inc. X-Mailer: Mozilla 4.61 [en] (X11; U; FreeBSD 3.3-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-isp@freebsd.org Subject: Comments / thoughts on nntpcache Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi, Does anyone have any comments, good or bad on NNTPCache. If so, what is a good recommended hardware platform & recommended disk space for this type of system. Thanks! Andrew To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Nov 25 20:49: 9 1999 Delivered-To: freebsd-isp@freebsd.org Received: from cliff.i-plus.net (cliff.i-plus.net [209.100.20.42]) by hub.freebsd.org (Postfix) with ESMTP id B09BE14C36 for ; Thu, 25 Nov 1999 20:48:48 -0800 (PST) (envelope-from st@i-plus.net) Received: from ARCADIA (arcadia.i-plus.net [209.100.20.198]) by cliff.i-plus.net (8.9.3/8.9.3) with SMTP id XAA52283; Thu, 25 Nov 1999 23:48:32 -0500 (EST) From: "Troy Settle" To: "Andrew" , Subject: RE: Comments / thoughts on nntpcache Date: Thu, 25 Nov 1999 23:48:33 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) In-Reply-To: <383E0BB8.55FF63FA@pubnix.net> X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.5600 Importance: Normal Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org While I was using it (for a 3k user ISP), it worked great, though it started puking after it filled up it's filesystem. I'm sure this was a mis-configuration on my part, but at the time I couldn't figure out a cure for this behavior. -Troy ** -----Original Message----- ** From: owner-freebsd-isp@FreeBSD.ORG ** [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Andrew ** Sent: Thursday, November 25, 1999 11:25 PM ** To: freebsd-isp@FreeBSD.ORG ** Subject: Comments / thoughts on nntpcache ** ** ** Hi, ** ** Does anyone have any comments, good or bad on NNTPCache. ** ** If so, what is a good recommended hardware platform & recommended disk ** space for this type of system. ** ** Thanks! ** ** Andrew ** ** ** ** ** To Unsubscribe: send mail to majordomo@FreeBSD.org ** with "unsubscribe freebsd-isp" in the body of the message ** To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Nov 26 3:43:44 1999 Delivered-To: freebsd-isp@freebsd.org Received: from smtp.wirehub.nl (smtp.wirehub.nl [195.86.25.80]) by hub.freebsd.org (Postfix) with ESMTP id 014E114BDB for ; Fri, 26 Nov 1999 03:43:35 -0800 (PST) (envelope-from Ben.Grimm@wirehub.net) Received: from ben.wirehub.nl (ben.wirehub.nl [195.86.25.13]) by smtp.wirehub.nl (8.9.3/8.9.3) with SMTP id MAA25049 for ; Fri, 26 Nov 1999 12:43:34 +0100 (CET) From: "Ben C. O. Grimm" To: freebsd-isp@freebsd.org Subject: Re: Comments / thoughts on nntpcache Date: Fri, 26 Nov 1999 12:43:33 +0100 Organization: Wirehub! Internet Engineering Message-ID: References: <383E0BB8.55FF63FA@pubnix.net> In-Reply-To: X-Mailer: Forte Agent 1.7/32.534 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 26 Nov 1999 07:58:31 +0200, "Troy Settle" wrote: > > While I was using it (for a 3k user ISP), it worked great, though it started > puking after it filled up it's filesystem. I'm sure this was a > mis-configuration on my part, but at the time I couldn't figure out a cure > for this behavior. Try to set minBlocksFree (in nntpcache.config) to a larger value than your history size. It solved the incredible slowness of expiring for me. -- - Ben C. O. Grimm ----------------- Ben.Grimm@wirehub.net - - Wirehub! Internet Engineering - http://www.wirehub.net/ - - Wirehub! Backbone --- http://doema.wirehub.net/wirehub/ - - Private Ponderings ------- http://libertas.wirehub.net/ - To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Nov 26 4:38: 0 1999 Delivered-To: freebsd-isp@freebsd.org Received: from host1.premier-hosting.com (host1.premier-hosting.com [206.47.86.2]) by hub.freebsd.org (Postfix) with ESMTP id 080D014D68 for ; Fri, 26 Nov 1999 04:37:56 -0800 (PST) (envelope-from paul@premier-networks.com) Received: from premier-networks.com (internal-admin.premier-hosting.com [206.47.86.6]) by host1.premier-hosting.com (8.9.3/8.8.7) with ESMTP id HAA60265; Fri, 26 Nov 1999 07:49:23 GMT Message-ID: <383E7BB2.A148E293@premier-networks.com> Date: Fri, 26 Nov 1999 07:23:14 -0500 From: "Paul Stewart (Premier Networks)" X-Mailer: Mozilla 4.6 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: Troy Settle Cc: Andrew , freebsd-isp@FreeBSD.ORG Subject: Re: Comments / thoughts on nntpcache References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org We ran it at an ISP I used to work at and it puked there as well.. the cache directory would never purge itself automatically... we had to go in and manually destroy the cache directory about once a day... Other than that it worked great..:) Paul Troy Settle wrote: > > While I was using it (for a 3k user ISP), it worked great, though it started > puking after it filled up it's filesystem. I'm sure this was a > mis-configuration on my part, but at the time I couldn't figure out a cure > for this behavior. > > -Troy > > ** -----Original Message----- > ** From: owner-freebsd-isp@FreeBSD.ORG > ** [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Andrew > ** Sent: Thursday, November 25, 1999 11:25 PM > ** To: freebsd-isp@FreeBSD.ORG > ** Subject: Comments / thoughts on nntpcache > ** > ** > ** Hi, > ** > ** Does anyone have any comments, good or bad on NNTPCache. > ** > ** If so, what is a good recommended hardware platform & recommended disk > ** space for this type of system. > ** > ** Thanks! > ** > ** Andrew > ** > ** > ** > ** > ** To Unsubscribe: send mail to majordomo@FreeBSD.org > ** with "unsubscribe freebsd-isp" in the body of the message > ** > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Nov 26 7:16:17 1999 Delivered-To: freebsd-isp@freebsd.org Received: from proteus.eclipse.net.uk (proteus.eclipse.net.uk [195.188.32.118]) by hub.freebsd.org (Postfix) with ESMTP id 5A23214C9C for ; Fri, 26 Nov 1999 07:16:14 -0800 (PST) (envelope-from sh@eclipse.net.uk) Received: from eclipse.net.uk (elara.eclipse.net.uk [195.188.32.31]) by proteus.eclipse.net.uk (Postfix) with ESMTP id A9B6E9B46; Fri, 26 Nov 1999 15:16:12 +0000 (GMT) Message-ID: <383EA45F.BD29D28@eclipse.net.uk> Date: Fri, 26 Nov 1999 15:16:47 +0000 From: Stuart Henderson Organization: Eclipse Networking X-Mailer: Mozilla 4.7 [en] (WinNT; U) X-Accept-Language: en-GB MIME-Version: 1.0 To: "Paul Stewart (Premier Networks)" Cc: Troy Settle , Andrew , freebsd-isp@FreeBSD.ORG Subject: Re: Comments / thoughts on nntpcache References: <383E7BB2.A148E293@premier-networks.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > We ran it at an ISP I used to work at and it puked there as well.. the > cache directory would never purge itself automatically... we had to go > in and manually destroy the cache directory about once a day... There's a signal you can send it to ask it to expire. Split it over ports and then you can expire binaries differently. Another alternative is newscache. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Nov 26 9:14:50 1999 Delivered-To: freebsd-isp@freebsd.org Received: from etinc.com (et-gw.etinc.com [207.252.1.2]) by hub.freebsd.org (Postfix) with ESMTP id 1563415095 for ; Fri, 26 Nov 1999 09:14:33 -0800 (PST) (envelope-from dennis@etinc.com) Received: from dbsys (dbsys.etinc.com [207.252.1.18]) by etinc.com (8.9.3/8.9.3) with SMTP id MAA10373; Fri, 26 Nov 1999 12:15:27 -0500 (EST) Message-Id: <199911261715.MAA10373@etinc.com> X-Sender: dennis@etinc.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0 Date: Fri, 26 Nov 1999 12:11:42 -0500 To: Julian Elischer , Kurt Jaeger From: Dennis Subject: Re: IP or packet Accounting Software for burst connections. Cc: Tom , "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG In-Reply-To: References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Try the ET/BWMGR for FreeBSD...our hashed rule indexing can handle thousands of IP addresses or traffic type measurements with integrated graphing and bandwidth management. HTML management interface also. www.etinc.com/bwmgr.htm Dennis At 02:59 AM 11/24/99 -0800, Julian Elischer wrote: > > >On Wed, 24 Nov 1999, Kurt Jaeger wrote: > >> Hi! >> >> > > > I was wondering if any one would know of a software that would >> > > > do packet or bandwidth accounting for billing a burstable connection, >> > > > and also something that would keep track of how many bytes a >> > > > client consumed during the period (month). >> >> > > I modified tcpdump to do bean, ehr, packet/byte counting. >> >> > > ftp://ftp.LF.net/pub/unix/systems/FreeBSD/sw/ipcount-19991106.tgz >> >> > > It also requires sleepycat's/berkely DB, some 2.7.x version. >> >> > > Basically, it will add up the bytes that match a given tcpdump expression, >> > > over a configurable interval. >> >> > That seems rather silly, since ipfw can do that already. >> >> My bean-count-list is roughly 3000 records large. Will ipfw scale to >> that number of rules ? For 2-3 times 34mbit/sec ? >> >> Did it do that in 1996, when I first did this modification ? > >ipfw will not count bytes, just packets >as for performance. >you can branch using skipto >so that you split your search list in binary manner and thus do 4096 >different addresses while only actually running 13 rules. You'd have to >have a program to generate the ipfw ruleset. > > >> >> -- >> MfG/Best regards, Kurt Jaeger 21 years to go ! >> LF.net GmbH pi@LF.net Oberon.net GmbH pi@oberon.net >> Vor dem Lauch 23 fon +49 711 90074-23 Friedrich-Ebert-Str.1 >> D-70567 Stuttgart fax +49 711 7289041 40210 Duesseldorf fon +49 211 179253-11 >> For Redmond: "nuke the site from orbit -- it's the only way to be sure." >> >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> with "unsubscribe freebsd-isp" in the body of the message >> > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Nov 26 10:58:46 1999 Delivered-To: freebsd-isp@freebsd.org Received: from iohost.com (io001.iohost.com [209.189.124.99]) by hub.freebsd.org (Postfix) with ESMTP id 54E01154D3 for ; Fri, 26 Nov 1999 10:58:29 -0800 (PST) (envelope-from randyk@iohost.com) Received: (from randyk@localhost) by iohost.com (8.9.3/8.9.3) id MAA01709; Fri, 26 Nov 1999 12:10:47 -0800 Date: Fri, 26 Nov 1999 12:10:47 -0800 From: Randy Katz To: Dennis Cc: Julian Elischer , Kurt Jaeger , Tom , "Jean M. Vandette" , freebsd-isp@FreeBSD.ORG, Randy Katz Subject: Re: IP or packet Accounting Software for burst connections. Message-ID: <19991126121047.A1697@ccsales.com> Reply-To: Randy Katz References: <199911261715.MAA10373@etinc.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.4us In-Reply-To: <199911261715.MAA10373@etinc.com>; from Dennis on Fri, Nov 26, 1999 at 12:11:42PM -0500 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Dennis, Your stuff runs circles around the rest...did you get the gift basket? On Fri, Nov 26, 1999 at 12:11:42PM -0500, Dennis wrote: > Try the ET/BWMGR for FreeBSD...our hashed rule indexing can handle > thousands of IP addresses or traffic type measurements with integrated > graphing and bandwidth management. HTML management interface also. > > > www.etinc.com/bwmgr.htm > > Dennis > > At 02:59 AM 11/24/99 -0800, Julian Elischer wrote: > > > > > >On Wed, 24 Nov 1999, Kurt Jaeger wrote: > > > >> Hi! > >> > >> > > > I was wondering if any one would know of a software that would > >> > > > do packet or bandwidth accounting for billing a burstable connection, > >> > > > and also something that would keep track of how many bytes a > >> > > > client consumed during the period (month). > >> > >> > > I modified tcpdump to do bean, ehr, packet/byte counting. > >> > >> > > ftp://ftp.LF.net/pub/unix/systems/FreeBSD/sw/ipcount-19991106.tgz > >> > >> > > It also requires sleepycat's/berkely DB, some 2.7.x version. > >> > >> > > Basically, it will add up the bytes that match a given tcpdump > expression, > >> > > over a configurable interval. > >> > >> > That seems rather silly, since ipfw can do that already. > >> > >> My bean-count-list is roughly 3000 records large. Will ipfw scale to > >> that number of rules ? For 2-3 times 34mbit/sec ? > >> > >> Did it do that in 1996, when I first did this modification ? > > > >ipfw will not count bytes, just packets > >as for performance. > >you can branch using skipto > >so that you split your search list in binary manner and thus do 4096 > >different addresses while only actually running 13 rules. You'd have to > >have a program to generate the ipfw ruleset. > > > > > >> > >> -- > >> MfG/Best regards, Kurt Jaeger 21 years > to go ! > >> LF.net GmbH pi@LF.net Oberon.net GmbH pi@oberon.net > >> Vor dem Lauch 23 fon +49 711 90074-23 Friedrich-Ebert-Str.1 > >> D-70567 Stuttgart fax +49 711 7289041 40210 Duesseldorf fon +49 211 > 179253-11 > >> For Redmond: "nuke the site from orbit -- it's the only way to be sure." > >> > >> > >> To Unsubscribe: send mail to majordomo@FreeBSD.org > >> with "unsubscribe freebsd-isp" in the body of the message > >> > > > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org > >with "unsubscribe freebsd-isp" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Nov 26 11:37:13 1999 Delivered-To: freebsd-isp@freebsd.org Received: from florence.pavilion.net (florence.pavilion.net [194.242.128.25]) by hub.freebsd.org (Postfix) with ESMTP id 5DF53150A4 for ; Fri, 26 Nov 1999 11:37:05 -0800 (PST) (envelope-from joe@florence.pavilion.net) Received: (from joe@localhost) by florence.pavilion.net (8.9.3/8.8.8) id TAA50038; Thu, 25 Nov 1999 19:04:05 GMT (envelope-from joe) Date: Thu, 25 Nov 1999 19:04:05 +0000 From: Josef Karthauser To: "Kevin S. Brackett" Cc: freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. Message-ID: <19991125190404.H93499@florence.pavilion.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0pre2i In-Reply-To: X-NCC-RegID: uk.pavilion Organisation: Pavilion Internet plc, Lees House, 21-23 Dyke Road, Brighton, England Phone: +44-845-333-5000 Fax: +44-845-333-5001 Mobile: +44-403-596893 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, Nov 25, 1999 at 12:20:23PM -0500, Kevin S. Brackett wrote: > If anyone else hasn't suggested ipfilter+ipaccounting, check out > http://www2.empnet.com/ipacct/. Any suggestions for if you _also_ want to traffic shape as well as monitor? Joe -- Josef Karthauser FreeBSD: How many times have you booted today? Technical Manager Viagra for your server (http://www.uk.freebsd.org) Pavilion Internet plc. [joe@pavilion.net, joe@uk.freebsd.org, joe@tao.org.uk] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Nov 26 14:11:11 1999 Delivered-To: freebsd-isp@freebsd.org Received: from boofura.swcp.com (boofura.swcp.com [198.59.115.28]) by hub.freebsd.org (Postfix) with ESMTP id 975B114C07 for ; Fri, 26 Nov 1999 14:11:06 -0800 (PST) (envelope-from deichert@wrench.com) Received: from localhost (deichert@localhost) by boofura.swcp.com (8.8.5/8.8.0) with SMTP id PAA15500; Fri, 26 Nov 1999 15:10:45 -0700 (MST) X-Authentication-Warning: boofura.swcp.com: deichert owned process doing -bs Date: Fri, 26 Nov 1999 15:10:45 -0700 (MST) From: Diana Eichert X-Sender: deichert@boofura.swcp.com To: Josef Karthauser Cc: "Kevin S. Brackett" , freebsd-isp@FreeBSD.ORG Subject: Re: IP or packet Accounting Software for burst connections. In-Reply-To: <19991125190404.H93499@florence.pavilion.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org ALT-Q http://www.csl.sony.co.jp/person/kjc/programs.html#ALTQ diana On Thu, 25 Nov 1999, Josef Karthauser wrote: > On Thu, Nov 25, 1999 at 12:20:23PM -0500, Kevin S. Brackett wrote: > > If anyone else hasn't suggested ipfilter+ipaccounting, check out > > http://www2.empnet.com/ipacct/. > > Any suggestions for if you _also_ want to traffic shape as well as > monitor? > > Joe > -- > Josef Karthauser FreeBSD: How many times have you booted today? > Technical Manager Viagra for your server (http://www.uk.freebsd.org) > Pavilion Internet plc. [joe@pavilion.net, joe@uk.freebsd.org, joe@tao.org.uk] > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > Diana Eichert VP Technical Services Nothing in Particular at the Moment, Inc. deichert@wrench.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 7:10:37 1999 Delivered-To: freebsd-isp@freebsd.org Received: from ns2.jjsoft.com (fig2.figdav.com [208.152.114.19]) by hub.freebsd.org (Postfix) with ESMTP id 38B2415628 for ; Sat, 27 Nov 1999 07:10:05 -0800 (PST) (envelope-from jahanur@jjsoft.com) Received: from localhost (jahanur@localhost) by ns2.jjsoft.com (8.9.0/8.9.0) with SMTP id JAA00483 for ; Sat, 27 Nov 1999 09:10:03 -0600 (CST) Date: Sat, 27 Nov 1999 09:10:03 -0600 (CST) From: jahanur To: freebsd-isp@freebsd.org Subject: unsolicited mail Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org HI folks, Holiday greetings to you all. I have been receiving unsolicited e-mail to one of my virtual e-mail domain which does not exist. It looks like that somebody who used to own this domain(iant.com) had a user called "david" and this person put his email address to some big sales email lists companies ( I think its all of the lists in the world). And listed himself as "david@iant.com". We host the virtual site "www.iant.com" since the beginning of this year. Since I up the Virtual DNS before I had any user added for this organization, the emails for david@iant.com was hitting our server and keeping my server busy. Ofcourse I (the admin) gets the returned mail message from the sendmail. I ignored it for 3 months and thought that the email listing companies will take care of it when they get the message not sent to david@iant.com. But I see that it is increasing more and more everyday, about 10 to 15 messages sometimes. Actions that I took against it is 1) I tried to send warnig e-mail to the dns it was comming from.(did not work). I get returned mail from that. 2) I tried to creat the user and send the "unsubscribe messge to particular list" as david, as they curtiously suggest the serder to do so at the bottom of the email. It looks like that also does not work. I dont what to do now. Please help me. I know this is your holiday time so I can wait. Thank you in Advance. Jahanur To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 7:15: 9 1999 Delivered-To: freebsd-isp@freebsd.org Received: from mail.toplink.net (mail.toplink.net [195.2.171.8]) by hub.freebsd.org (Postfix) with ESMTP id 6A1F714A13 for ; Sat, 27 Nov 1999 07:15:04 -0800 (PST) (envelope-from ck@toplink.net) Received: from babylon.toplink.net (babylon.toplink.net [195.2.171.90]) by mail.toplink.net (8.9.3/8.9.3) with ESMTP id QAA27192; Sat, 27 Nov 1999 16:15:00 +0100 (CET) Received: from localhost (ck@localhost) by babylon.toplink.net (8.9.3/8.9.3) with ESMTP id QAA72177; Sat, 27 Nov 1999 16:14:31 +0100 (CET) Date: Sat, 27 Nov 1999 16:14:31 +0100 (CET) From: Christian Kratzer To: "J.C. Frazier" Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Problems with apache, frontpage, and vhosts In-Reply-To: <383DF8DD.C22B381C@csocs.com> Message-ID: X-NCC-RegID: de.toplink X-Spammer-Kill-Ratio: 75% X-Jihad: Will hunt down all cases of Spam and Net abuse. MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi, frontpage 98 likes to write Options None into .htaccess files. I have not yet checked frontpage 2000. This forces one to leave AllowOverride Any on the document directories. We patched apache to allow an Options None even though everything else is forbidden by AllowOverride Auth ... etc... Else anybody can set Options ExecCGI in a document directory and proceeed with local system exploits.... Greetings Christian On Thu, 25 Nov 1999, J.C. Frazier wrote: > I am running FreeBSD 3.3-stable, apache+php+mod_ssl-1.3.9+3.0.12+2.4.8, > and frontpage extensions version 4.0 (not the module). It was set up > exactly as specified at www.freebsdzine.org in their FP article, if > you'd like full details on the setup. Two days ago this system was > broken into. Someone got in through frontpage and changed the account > password. After a lot of investigating and testing I found that my > vhosts listed in apache.conf aren't abiding by the default settings for > 's in the file. Hence no overrides and my .htaccess files > are being ignored, leaving me wide open. I am running a mixed named/ip > based vhost system (8 named based hosts on one IP and 2 named based > hosts on another IP). Because my .htaccess files aren't being read, the > FP extensions aren't working correctly either. When a customer tries to > GET, POST, etc...it won't accept any passwords. My log files give no > clues to what is wrong other then a password mismatch on those > functions, even though the passwords have been checked and rechecked and > are correct. So for now I have uninstalled the frontpage extensions all > together temporarily because of the security implecations until I can > find out how to solve these problems. I've searched the mailing lists > and read the apache documentation site and can't find any other instance > of this type of incident happening or any corrective actions. I've > tried a few different versions of apache including 1.3.3 and 1.3.6-php, > both with the same results. frontpage extensions version 3.0 also gave > the same results. Any help or advice would be greatly appreciated. > Thank you for your time. > > J.C. Frazier > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > -- TopLink Internet Services GmbH ck@171.2.195.in-addr.arpa Christian Kratzer http://www.toplink.net/ Phone: +49 7032 2701-0 Fax: +49 7032 2701-19 FreeBSD spoken here! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 7:25:32 1999 Delivered-To: freebsd-isp@freebsd.org Received: from s01.arpa-canada.net (s01.arpa-canada.net [209.104.122.2]) by hub.freebsd.org (Postfix) with ESMTP id C1F4114F8F for ; Sat, 27 Nov 1999 07:25:29 -0800 (PST) (envelope-from matt@BabCom.ORG) Received: by s01.arpa-canada.net (Postfix, from userid 1001) id CD313B885; Sat, 27 Nov 1999 10:25:28 -0500 (EST) Received: from localhost (localhost [127.0.0.1]) by s01.arpa-canada.net (Postfix) with ESMTP id B7B56E; Sat, 27 Nov 1999 10:25:28 -0500 (EST) Date: Sat, 27 Nov 1999 10:25:28 -0500 (EST) From: matt X-Sender: matt@s01.arpa-canada.net To: jahanur Cc: FreeBSD-ISP Subject: Re: unsolicited mail In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Make an e-mail alias that pipes all mail to david@iant.com to /dev/null. I'm not sure how to do that with sendmail, but I did it with qmail. I'm sure one would be able to do this with sendmail or postfix as well. This can be a big help if the user recieving all the spam is not a real user on your site. I also have been getting increased amounts of email spam, it would seem these idiots increase their spamming around the holidays. Hope this helps. Matt On Sat, 27 Nov 1999, jahanur wrote: : HI folks, : Holiday greetings to you all. : I have been receiving unsolicited e-mail to one of my virtual e-mail : domain which does not exist. It looks like that somebody who used to own : this domain(iant.com) had a user called "david" and this person put his : email address to some big sales email lists companies ( I think its all of : the lists in the world). And listed himself as "david@iant.com". We host : the virtual site "www.iant.com" since the beginning of this year. Since I : up the Virtual DNS before I had any user added for this organization, the : emails for david@iant.com was hitting our server and keeping my server : busy. Ofcourse I (the admin) gets the returned mail message from the : sendmail. : I ignored it for 3 months and thought that the email listing companies : will take care of it when they get the message not sent to david@iant.com. : But I see that it is increasing more and more everyday, about 10 to 15 : messages sometimes. : Actions that I took against it is : 1) I tried to send warnig e-mail to the dns it was comming from.(did not : work). I get returned mail from that. : 2) I tried to creat the user and send the "unsubscribe messge to : particular list" as david, as they curtiously suggest the serder to do so : at the bottom of the email. It looks like that also does not work. : : I dont what to do now. Please help me. : I know this is your holiday time so I can wait. : : Thank you in Advance. : : Jahanur : : : : To Unsubscribe: send mail to majordomo@FreeBSD.org : with "unsubscribe freebsd-isp" in the body of the message : -- "If the primates that we came from had known that someday politicians would come out of the...the gene pool, they'd a stayed up in the trees and written evolution off as a bad idea. Hell, I always thought the opposable thumb was overrated." -Sheridan, "A Distant Star" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 7:47: 6 1999 Delivered-To: freebsd-isp@freebsd.org Received: from cutter.wantabe.com (cutter.wantabe.com [209.16.8.8]) by hub.freebsd.org (Postfix) with ESMTP id 082F914DAE for ; Sat, 27 Nov 1999 07:46:47 -0800 (PST) (envelope-from jeffrl@wantabe.com) Received: from localhost (jeffrl@localhost) by cutter.wantabe.com (8.9.3/8.9.3) with ESMTP id JAA14767; Sat, 27 Nov 1999 09:46:18 -0600 (CST) (envelope-from jeffrl@wantabe.com) Date: Sat, 27 Nov 1999 09:46:18 -0600 (CST) From: "Jeffrey J. Libman" To: matt Cc: jahanur , FreeBSD-ISP Subject: Re: unsolicited mail In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org i have an alias for this purpose (in /etc/aliases): bitbucket: "|cat >/dev/null" then any address i want to so handle, i either put a .forward file in place or another alias entry, pointing to bitbucket. cheers, jeff -- | |\ +------------------------------+ Jeffrey J. Libman, ops. mgr. | \ | Wantabe Internet Services | Wantabe, Inc. |__\ +------------------------------+ jeffrl@wantabe.com <-----|------> | access web cgi ftp news mail | (281) 493-0718 __,.-=\'`^`'~=-../__,.-= +------------------------------+ On Sat, 27 Nov 1999, matt wrote: > > Make an e-mail alias that pipes all mail to david@iant.com to /dev/null. > I'm not sure how to do that with sendmail, but I did it with qmail. I'm > sure one would be able to do this with sendmail or postfix as well. > > This can be a big help if the user recieving all the spam is not a real > user on your site. I also have been getting increased amounts of email > spam, it would seem these idiots increase their spamming around the > holidays. Hope this helps. > > Matt > > On Sat, 27 Nov 1999, jahanur wrote: > > : HI folks, > : Holiday greetings to you all. > : I have been receiving unsolicited e-mail to one of my virtual e-mail > : domain which does not exist. It looks like that somebody who used to own > : this domain(iant.com) had a user called "david" and this person put his > : email address to some big sales email lists companies ( I think its all of > : the lists in the world). And listed himself as "david@iant.com". We host > : the virtual site "www.iant.com" since the beginning of this year. Since I > : up the Virtual DNS before I had any user added for this organization, the > : emails for david@iant.com was hitting our server and keeping my server > : busy. Ofcourse I (the admin) gets the returned mail message from the > : sendmail. > : I ignored it for 3 months and thought that the email listing companies > : will take care of it when they get the message not sent to david@iant.com. > : But I see that it is increasing more and more everyday, about 10 to 15 > : messages sometimes. > : Actions that I took against it is > : 1) I tried to send warnig e-mail to the dns it was comming from.(did not > : work). I get returned mail from that. > : 2) I tried to creat the user and send the "unsubscribe messge to > : particular list" as david, as they curtiously suggest the serder to do so > : at the bottom of the email. It looks like that also does not work. > : > : I dont what to do now. Please help me. > : I know this is your holiday time so I can wait. > : > : Thank you in Advance. > : > : Jahanur > : > : > : > : To Unsubscribe: send mail to majordomo@FreeBSD.org > : with "unsubscribe freebsd-isp" in the body of the message > : > > -- > "If the primates that we came from had known that someday politicians > would come out of the...the gene pool, they'd a stayed up in the trees > and written evolution off as a bad idea. Hell, I always thought the > opposable thumb was overrated." > -Sheridan, "A Distant Star" > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 8:32: 9 1999 Delivered-To: freebsd-isp@freebsd.org Received: from ns2.jjsoft.com (fig2.figdav.com [208.152.114.19]) by hub.freebsd.org (Postfix) with ESMTP id 3C76314C5A for ; Sat, 27 Nov 1999 08:31:53 -0800 (PST) (envelope-from jahanur@jjsoft.com) Received: from localhost (jahanur@localhost) by ns2.jjsoft.com (8.9.0/8.9.0) with SMTP id KAA00595; Sat, 27 Nov 1999 10:31:37 -0600 (CST) Date: Sat, 27 Nov 1999 10:31:37 -0600 (CST) From: jahanur To: "Jeffrey J. Libman" Cc: matt , FreeBSD-ISP Subject: Re: unsolicited mail In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Thank you very much. I think that is great idea. I will probably end up doing the same. Thanks to both of you. On Sat, 27 Nov 1999, Jeffrey J. Libman wrote: > i have an alias for this purpose (in /etc/aliases): > > bitbucket: "|cat >/dev/null" > > then any address i want to so handle, i either put a .forward file in > place or another alias entry, pointing to bitbucket. > > cheers, > jeff > > -- > | > |\ +------------------------------+ > Jeffrey J. Libman, ops. mgr. | \ | Wantabe Internet Services | > Wantabe, Inc. |__\ +------------------------------+ > jeffrl@wantabe.com <-----|------> | access web cgi ftp news mail | > (281) 493-0718 __,.-=\'`^`'~=-../__,.-= +------------------------------+ > > On Sat, 27 Nov 1999, matt wrote: > > > > > Make an e-mail alias that pipes all mail to david@iant.com to /dev/null. > > I'm not sure how to do that with sendmail, but I did it with qmail. I'm > > sure one would be able to do this with sendmail or postfix as well. > > > > This can be a big help if the user recieving all the spam is not a real > > user on your site. I also have been getting increased amounts of email > > spam, it would seem these idiots increase their spamming around the > > holidays. Hope this helps. > > > > Matt > > > > On Sat, 27 Nov 1999, jahanur wrote: > > > > : HI folks, > > : Holiday greetings to you all. > > : I have been receiving unsolicited e-mail to one of my virtual e-mail > > : domain which does not exist. It looks like that somebody who used to own > > : this domain(iant.com) had a user called "david" and this person put his > > : email address to some big sales email lists companies ( I think its all of > > : the lists in the world). And listed himself as "david@iant.com". We host > > : the virtual site "www.iant.com" since the beginning of this year. Since I > > : up the Virtual DNS before I had any user added for this organization, the > > : emails for david@iant.com was hitting our server and keeping my server > > : busy. Ofcourse I (the admin) gets the returned mail message from the > > : sendmail. > > : I ignored it for 3 months and thought that the email listing companies > > : will take care of it when they get the message not sent to david@iant.com. > > : But I see that it is increasing more and more everyday, about 10 to 15 > > : messages sometimes. > > : Actions that I took against it is > > : 1) I tried to send warnig e-mail to the dns it was comming from.(did not > > : work). I get returned mail from that. > > : 2) I tried to creat the user and send the "unsubscribe messge to > > : particular list" as david, as they curtiously suggest the serder to do so > > : at the bottom of the email. It looks like that also does not work. > > : > > : I dont what to do now. Please help me. > > : I know this is your holiday time so I can wait. > > : > > : Thank you in Advance. > > : > > : Jahanur > > : > > : > > : > > : To Unsubscribe: send mail to majordomo@FreeBSD.org > > : with "unsubscribe freebsd-isp" in the body of the message > > : > > > > -- > > "If the primates that we came from had known that someday politicians > > would come out of the...the gene pool, they'd a stayed up in the trees > > and written evolution off as a bad idea. Hell, I always thought the > > opposable thumb was overrated." > > -Sheridan, "A Distant Star" > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 8:51:42 1999 Delivered-To: freebsd-isp@freebsd.org Received: from metva.com.au (metva.metva.com.au [202.0.82.1]) by hub.freebsd.org (Postfix) with ESMTP id 7D9F91562B for ; Sat, 27 Nov 1999 08:51:25 -0800 (PST) (envelope-from enno.davids@metva.com.au) Received: (from enno@localhost) by metva.com.au id DAA22663; Sun, 28 Nov 1999 03:50:22 +1100 (EST) From: Enno Davids Message-Id: <199911271650.DAA22663@metva.com.au> Subject: Re: unsolicited mail In-Reply-To: from jahanur at "Nov 27, 99 10:31:37 am" To: jahanur@jjsoft.com (jahanur) Date: Sun, 28 Nov 1999 03:50:21 +1100 (EST) Cc: jeffrl@wantabe.com, matt@BabCom.ORG, isp@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL39 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org | On Sat, 27 Nov 1999, Jeffrey J. Libman wrote: | | > i have an alias for this purpose (in /etc/aliases): | > | > bitbucket: "|cat >/dev/null" | > | > then any address i want to so handle, i either put a .forward file in | > place or another alias entry, pointing to bitbucket. if you just name the file it just redirects doesn't it? Why the extra 'cat'. For what its worth I'm using smtpd to block mail to some recipients to a VH I keep here for a domain thats similar in spelling to an ISP on the far side of this continent. They seem to have a whole slew of bozo users who send me their email. smtpd can be configured to reject or accept email with pretty much any policy you want. In my case I send a 500 error code as soon as it sees a forbidden TO address in the smtp envelope. The only problem is with broken MTAs, one of which likes to retry immediately, forever. You'll never guess which company (based in the US Pacific northwest I believe) is responsible for that bit of aberrant behaviour either. Happily most lists seem to use more dependable OS platforms. Enno. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 9: 5:41 1999 Delivered-To: freebsd-isp@freebsd.org Received: from quaggy.ursine.com (lambda.blueneptune.com [209.133.45.179]) by hub.freebsd.org (Postfix) with ESMTP id 4A32214D14 for ; Sat, 27 Nov 1999 09:05:29 -0800 (PST) (envelope-from fbsd-isp@ursine.com) Received: from michael (lambda.ursine.com [209.133.45.69]) by quaggy.ursine.com (8.9.3/8.9.3) with ESMTP id JAA36252 for ; Sat, 27 Nov 1999 09:05:22 -0800 (PST) Message-ID: <199911270905270460.32B90139@quaggy.ursine.com> In-Reply-To: References: X-Mailer: Calypso Version 3.00.00.13 (2) Date: Sat, 27 Nov 1999 09:05:27 -0800 From: "Michael Bryan" To: "FreeBSD-ISP" Subject: Re: unsolicited mail Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Another option, if you're using a recent version of sendmail, is to put something like the following line in /etc/mail/access: david@iant.com 550 Invalid username Then remake access.db: makemap hash /etc/mail/access.db i have an alias for this purpose (in /etc/aliases): > > bitbucket: "|cat >/dev/null" > >then any address i want to so handle, i either put a .forward file in >place or another alias entry, pointing to bitbucket. > >cheers, >jeff > >-- > | > |\= +------------------------------+ >Jeffrey J. Libman, ops. mgr. | \ | Wantabe Internet Services= | >Wantabe, Inc. |__\= +------------------------------+ >jeffrl@wantabe.com <-----|------> | access web cgi ftp news= mail | >(281) 493-0718 __,.-=3D\'`^`'~=3D-../__,.-=3D= +------------------------------+ > >On Sat, 27 Nov 1999, matt wrote: > >> >> Make an e-mail alias that pipes all mail to david@iant.com to /dev/null. >> I'm not sure how to do that with sendmail, but I did it with qmail. I'm >> sure one would be able to do this with sendmail or postfix as well. >> >> This can be a big help if the user recieving all the spam is not a real >> user on your site. I also have been getting increased amounts of email >> spam, it would seem these idiots increase their spamming around the >> holidays. Hope this helps. >> >> Matt >> >> On Sat, 27 Nov 1999, jahanur wrote: >> >> : HI folks, >> : Holiday greetings to you all. >> : I have been receiving unsolicited e-mail to one of my virtual e-mail >> : domain which does not exist. It looks like that somebody who used to= own >> : this domain(iant.com) had a user called "david" and this person put= his >> : email address to some big sales email lists companies ( I think its= all of >> : the lists in the world). And listed himself as "david@iant.com". We= host >> : the virtual site "www.iant.com" since the beginning of this year.= Since I >> : up the Virtual DNS before I had any user added for this organization,= the >> : emails for david@iant.com was hitting our server and keeping my server >> : busy. Ofcourse I (the admin) gets the returned mail message from the >> : sendmail. >> : I ignored it for 3 months and thought that the email listing companies >> : will take care of it when they get the message not sent to= david@iant.com. >> : But I see that it is increasing more and more everyday, about 10 to 15 >> : messages sometimes. >> : Actions that I took against it is >> : 1) I tried to send warnig e-mail to the dns it was comming from.(did= not >> : work). I get returned mail from that. >> : 2) I tried to creat the user and send the "unsubscribe messge to >> : particular list" as david, as they curtiously suggest the serder to do= so >> : at the bottom of the email. It looks like that also does not work. >> : >> : I dont what to do now. Please help me. >> : I know this is your holiday time so I can wait. >> : >> : Thank you in Advance. >> : >> : Jahanur >> : >> : >> : >> : To Unsubscribe: send mail to majordomo@FreeBSD.org >> : with "unsubscribe freebsd-isp" in the body of the message >> : >> >> -- >> "If the primates that we came from had known that someday politicians >> would come out of the...the gene pool, they'd a stayed up in the trees >> and written evolution off as a bad idea. Hell, I always thought the >> opposable thumb was overrated." >> -Sheridan, "A Distant Star" >> >> >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> with "unsubscribe freebsd-isp" in the body of the message >> > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message Michael Bryan fbsd-isp@ursine.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 9:18:14 1999 Delivered-To: freebsd-isp@freebsd.org Received: from ns2.jjsoft.com (fig2.figdav.com [208.152.114.19]) by hub.freebsd.org (Postfix) with ESMTP id D8CC914C36 for ; Sat, 27 Nov 1999 09:18:04 -0800 (PST) (envelope-from jahanur@jjsoft.com) Received: from localhost (jahanur@localhost) by ns2.jjsoft.com (8.9.0/8.9.0) with SMTP id LAA00702; Sat, 27 Nov 1999 11:17:46 -0600 (CST) Date: Sat, 27 Nov 1999 11:17:45 -0600 (CST) From: jahanur To: Michael Bryan Cc: FreeBSD-ISP Subject: Re: unsolicited mail In-Reply-To: <199911270905270460.32B90139@quaggy.ursine.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I think this is good. I wanted to get those ppl somehow. Thanks Jahanur On Sat, 27 Nov 1999, Michael Bryan wrote: > > Another option, if you're using a recent version of sendmail, > is to put something like the following line in /etc/mail/access: > > david@iant.com 550 Invalid username > > Then remake access.db: > > makemap hash /etc/mail/access.db > The benefit here is that the message itself is not delivered to your > mail system. Instead it is rejected during the initial "MAIL FROM:" > "RCPT TO:" phase of the SMTP transfer. It also has the benefit of > returning a bounce message to the sender, on the off chance they'll > actually process it. It does -not- send a message to your postmaster > account, even if the return address on the spam is bogus. > > > On 11/27/99 at 9:46 AM Jeffrey J. Libman wrote: > >i have an alias for this purpose (in /etc/aliases): > > > > bitbucket: "|cat >/dev/null" > > > >then any address i want to so handle, i either put a .forward file in > >place or another alias entry, pointing to bitbucket. > > > >cheers, > >jeff > > > >-- > > | > > |\ +------------------------------+ > >Jeffrey J. Libman, ops. mgr. | \ | Wantabe Internet Services | > >Wantabe, Inc. |__\ +------------------------------+ > >jeffrl@wantabe.com <-----|------> | access web cgi ftp news mail | > >(281) 493-0718 __,.-=\'`^`'~=-../__,.-= +------------------------------+ > > > >On Sat, 27 Nov 1999, matt wrote: > > > >> > >> Make an e-mail alias that pipes all mail to david@iant.com to /dev/null. > >> I'm not sure how to do that with sendmail, but I did it with qmail. I'm > >> sure one would be able to do this with sendmail or postfix as well. > >> > >> This can be a big help if the user recieving all the spam is not a real > >> user on your site. I also have been getting increased amounts of email > >> spam, it would seem these idiots increase their spamming around the > >> holidays. Hope this helps. > >> > >> Matt > >> > >> On Sat, 27 Nov 1999, jahanur wrote: > >> > >> : HI folks, > >> : Holiday greetings to you all. > >> : I have been receiving unsolicited e-mail to one of my virtual e-mail > >> : domain which does not exist. It looks like that somebody who used to own > >> : this domain(iant.com) had a user called "david" and this person put his > >> : email address to some big sales email lists companies ( I think its all of > >> : the lists in the world). And listed himself as "david@iant.com". We host > >> : the virtual site "www.iant.com" since the beginning of this year. Since I > >> : up the Virtual DNS before I had any user added for this organization, the > >> : emails for david@iant.com was hitting our server and keeping my server > >> : busy. Ofcourse I (the admin) gets the returned mail message from the > >> : sendmail. > >> : I ignored it for 3 months and thought that the email listing companies > >> : will take care of it when they get the message not sent to david@iant.com. > >> : But I see that it is increasing more and more everyday, about 10 to 15 > >> : messages sometimes. > >> : Actions that I took against it is > >> : 1) I tried to send warnig e-mail to the dns it was comming from.(did not > >> : work). I get returned mail from that. > >> : 2) I tried to creat the user and send the "unsubscribe messge to > >> : particular list" as david, as they curtiously suggest the serder to do so > >> : at the bottom of the email. It looks like that also does not work. > >> : > >> : I dont what to do now. Please help me. > >> : I know this is your holiday time so I can wait. > >> : > >> : Thank you in Advance. > >> : > >> : Jahanur > >> : > >> : > >> : > >> : To Unsubscribe: send mail to majordomo@FreeBSD.org > >> : with "unsubscribe freebsd-isp" in the body of the message > >> : > >> > >> -- > >> "If the primates that we came from had known that someday politicians > >> would come out of the...the gene pool, they'd a stayed up in the trees > >> and written evolution off as a bad idea. Hell, I always thought the > >> opposable thumb was overrated." > >> -Sheridan, "A Distant Star" > >> > >> > >> > >> To Unsubscribe: send mail to majordomo@FreeBSD.org > >> with "unsubscribe freebsd-isp" in the body of the message > >> > > > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org > >with "unsubscribe freebsd-isp" in the body of the message > > > Michael Bryan > fbsd-isp@ursine.com > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 10:18:38 1999 Delivered-To: freebsd-isp@freebsd.org Received: from arnold.neland.dk (mail.neland.dk [194.255.12.232]) by hub.freebsd.org (Postfix) with ESMTP id 2481B14C36 for ; Sat, 27 Nov 1999 10:18:33 -0800 (PST) (envelope-from leif@neland.dk) Received: from gina (gina.neland.dk [192.168.0.14]) by arnold.neland.dk (8.9.3/8.9.3) with SMTP id TAA66593; Sat, 27 Nov 1999 19:18:28 +0100 (CET) (envelope-from leif@neland.dk) Message-ID: <00c501bf3903$ef33d5a0$0e00a8c0@neland.dk> From: "Leif Neland" To: "jahanur" Cc: References: Subject: Sv: Sv: unsolicited mail Date: Sat, 27 Nov 1999 19:15:17 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org ----- Original Message -----=20 From: jahanur To: Leif Neland Sent: Saturday, November 27, 1999 5:34 PM Subject: Re: Sv: unsolicited mail > Yes I do have that. But that does not help. > I mean I dont want them and I want to stop them. >=20 Let me ask my question again:=20 You do not have any valid mail-recipients for iant.com; a mail sent to = david bounces with "Mail loops back to myself", which means you have not = set your server to recieve mail for that domain. I noticed iant.com and www.iant.com has the same ip-adress. You also does not have a mx-record for it, which appearently means that = mailers try to deliver to to the ip-adress. If you assign a mx record for the domain, either 127.0.0.1, 0.0.0.0 or = no.mail.server. (I'm not sure if bind will accept a non-resolvable = name), you won't get the mail for the domain at all. > >=20 > > > HI folks, > > > Holiday greetings to you all. > > > I have been receiving unsolicited e-mail to one of my virtual = e-mail > > > domain which does not exist. It looks like that somebody who used = to own > > > this domain(iant.com) had a user called "david" and this person = put his > > > email address to some big sales email lists companies ( I think = its all of > > > the lists in the world). And listed himself as "david@iant.com". = We host > > > the virtual site "www.iant.com" since the beginning of this year. = Since I To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 11:41:14 1999 Delivered-To: freebsd-isp@freebsd.org Received: from dns.sonntag.org (dns.sonntag.org [216.140.186.114]) by hub.freebsd.org (Postfix) with ESMTP id BBFCC14D74 for ; Sat, 27 Nov 1999 11:41:00 -0800 (PST) (envelope-from aaron@sonntag.org) Received: from aaron (cs2744-250.austin.rr.com [24.27.44.250]) by dns.sonntag.org (8.9.3/8.9.3) with SMTP id NAA13644 for ; Sat, 27 Nov 1999 13:40:49 -0600 (CST) (envelope-from aaron@sonntag.org) From: "Aaron Sonntag" To: Subject: user accounts, permissions, ftp, mail Date: Sat, 27 Nov 1999 13:58:15 -0600 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) In-Reply-To: <00c501bf3903$ef33d5a0$0e00a8c0@neland.dk> Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I know I am not the first person to ponder the best way to set up user accounts. I am doing virtual hosting for several domains and have a variety of usability I would like to provide to remote users. So my concerns really lie in security mixed with functionality and the ability to limit bandwidth usage. Email accounts with POP access and the ability to telnet in and change password... no more than that Ftp accounts with the ablity to ftp in to upload files to a website and ability to change password... no more than that I am sure I will run across more unique situations which will require more fooling around... The point is that I know there are nifty ways to play with password files so that users have a very limited password shell or just an ftp shell etc etc etc. Anybody have any URL's they can point me to where practices like this are reviewed? Along the same lines are questions I have about what is the difference between a 'client' and a 'guest' and a 'user'. What does it mean to put a bunch of 'guest's in a single 'group' vs each having their own group. I want to run a secure server... or rather I would like to be able to pretend that my server is safe ;-) Any recommendations on a good ftp server that would allow me to limit bandwidth usage for downloads? I am sharing a fast backbone and don't have the right to swamp it when a few cable users get download happy. IE: bandwidth per instance and total bandwidth for all instances. I have also glanced at the httpd.conf file on a Cobalt server an noticed some very very complicated VirtualHost entries that defined permissions down to a fine point... any thoughts? Please assume that I have made regular use of the following resources: Deja.com Altavista.com Freebsd.org Apache.org The FreeBSD book we all own ;-) Various orielly books on sendmail and unix and security and dns and other such things. Thank you, Aaron To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 12:23:54 1999 Delivered-To: freebsd-isp@freebsd.org Received: from angelsguardian.netquick.net (angelsguardian.netquick.net [199.72.47.239]) by hub.freebsd.org (Postfix) with ESMTP id D558D15319 for ; Sat, 27 Nov 1999 12:23:42 -0800 (PST) (envelope-from trouble@netquick.net) Received: from netquick.net (localhost [127.0.0.1]) by localhost.localdomain (Postfix) with ESMTP id AADB2386C; Sat, 27 Nov 1999 14:53:22 -0500 (EST) Message-ID: <384036B1.8771925@netquick.net> Date: Sat, 27 Nov 1999 19:53:22 +0000 From: TrouBle Reply-To: trouble@netquick.net X-Mailer: Mozilla 4.61 [en] (X11; I; Linux 2.2.13-7mdk i686) X-Accept-Language: en MIME-Version: 1.0 To: Aaron Sonntag Cc: freebsd-isp@FreeBSD.ORG Subject: Re: user accounts, permissions, ftp, mail References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org BOY, have i developed just what your looking for... a complete turn-key virtual hosting system based on freebsd, that has a web interface that your customers can use to manage their accounts and their virtual domains under them also.... : )) and it is SECURE!! very secure!!! Aaron Sonntag wrote: > I know I am not the first person to ponder the best way to set up user > accounts. I am doing virtual hosting for several domains and have a variety > of usability I would like to provide to remote users. So my concerns really > lie in security mixed with functionality and the ability to limit bandwidth > usage. > > Email accounts with POP access and the ability to telnet in and change > password... no more than that > Ftp accounts with the ablity to ftp in to upload files to a website and > ability to change password... no more than that > I am sure I will run across more unique situations which will require more > fooling around... > The point is that I know there are nifty ways to play with password files so > that users have a very limited password shell or just an ftp shell etc etc > etc. > > Anybody have any URL's they can point me to where practices like this are > reviewed? > Along the same lines are questions I have about what is the difference > between a 'client' and a 'guest' and a 'user'. > What does it mean to put a bunch of 'guest's in a single 'group' vs each > having their own group. > I want to run a secure server... or rather I would like to be able to > pretend that my server is safe ;-) > > Any recommendations on a good ftp server that would allow me to limit > bandwidth usage for downloads? > I am sharing a fast backbone and don't have the right to swamp it when a few > cable users get download happy. > IE: bandwidth per instance and total bandwidth for all instances. > > I have also glanced at the httpd.conf file on a Cobalt server an noticed > some very very complicated VirtualHost entries that defined permissions down > to a fine point... any thoughts? > > Please assume that I have made regular use of the following resources: > Deja.com > Altavista.com > Freebsd.org > Apache.org > The FreeBSD book we all own ;-) > Various orielly books on sendmail and unix and security and dns and other > such things. > > Thank you, > > Aaron > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Nov 27 14:49:55 1999 Delivered-To: freebsd-isp@freebsd.org Received: from angelsguardian.netquick.net (angelsguardian.netquick.net [199.72.47.239]) by hub.freebsd.org (Postfix) with ESMTP id 0C11C14C03 for ; Sat, 27 Nov 1999 14:49:51 -0800 (PST) (envelope-from trouble@netquick.net) Received: from netquick.net (localhost [127.0.0.1]) by angelsguardian.netquick.net (Postfix) with ESMTP id 0E5CE386A; Sat, 27 Nov 1999 17:45:23 -0500 (EST) Message-ID: <38405F03.31F040B5@netquick.net> Date: Sat, 27 Nov 1999 22:45:23 +0000 From: TrouBle Reply-To: trouble@netquick.net X-Mailer: Mozilla 4.61 [en] (X11; I; Linux 2.2.13-7mdk i686) X-Accept-Language: en MIME-Version: 1.0 To: Paul Stewart Cc: Aaron Sonntag , freebsd-isp@FreeBSD.ORG Subject: Re: user accounts, permissions, ftp, mail References: <384036B1.8771925@netquick.net> <3840529E.9F41A4CA@premier-networks.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org We believe it will be a commercial product in direct competition with NetMax, we have taken their idea about 10 steps further then they did, and have started to finalize the package. we currently have it running in 5 production sites, carrying about 13 servers. Yet seeing as its in development still also, we might be inclined to allow a co-operative development to be done, basically you get the whole system, with a non-=disclosure, and the "promise" you plan to actively participate in the developement. yet it runs on everything, even Tru64 and Solaris Paul Stewart wrote: > Please send information... will this be GPL'ed or commercial? :) > > Paul > > TrouBle wrote: > > > BOY, have i developed just what your looking for... a complete turn-key virtual > > hosting system based on freebsd, that has a web interface that your customers > > can use to manage their accounts and their virtual domains under them also.... > > : )) and it is SECURE!! very secure!! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message