From owner-freebsd-isp Sun Apr 5 16:41:08 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id QAA24025 for freebsd-isp-outgoing; Sun, 5 Apr 1998 16:41:08 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from shell.futuresouth.com (shell.futuresouth.com [207.141.254.20]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id QAA24003 for ; Sun, 5 Apr 1998 16:41:05 -0700 (PDT) (envelope-from fullermd@futuresouth.com) Received: from shell.futuresouth.com (mail.futuresouth.com [207.141.254.21]) by shell.futuresouth.com (8.8.8/8.8.8) with SMTP id SAA08767; Sun, 5 Apr 1998 18:40:39 -0500 (CDT) Date: Sun, 5 Apr 1998 18:40:39 -0500 (CDT) From: "Matthew D. Fuller" To: Ronald Wiplinger cc: FreeBSD-isp , List linux-isp Subject: Re: Internet games In-Reply-To: <199804050636.OAA10269@mail.trace.com.tw> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sun, 5 Apr 1998, Ronald Wiplinger wrote: > Does anybody know of a game that you can use via the Internet? > > What experience have you got with it, reguarding: > > 1. bandwidth > 2. modems (bandwidth) > 3. memory > 4. harddisk > 5. security > > 6. What does the user need? > > > I would like to change the text from English (??) or German (??) to Chinese (!!) > > Which game can you recomend? How 'bout a plain old basic MUD? Merc, ROM, Circle, Envy, Smaug, whatever code base you want. Getting it into Chinese would have to be rather magic, tho. ftp.game.org has code bases for most muds. I'm partial to ROM, but that's just me. > > bye > > Ronald Wiplinger > Gen. Manager of Wang's Trace Technology Co., Ltd. > (Taiwan: Taipei, Touyuan, Taichong, Kaohsiung) > Tel: +886 2 2609-0652, Handy: +886 932 251430, Fax: +886 2 2600-0132 > Interphone (G.723.1 as e.g., used in Netmeeting): 203.67.189.35 > http://www.trace.net.tw > *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* | FreeBSD; the way computers were meant to be | * "The only reason I'm burning my candle at both ends, is * | that I haven't figured out how to light the middle yet."| * fullermd@futuresouth.com :-} MAtthew Fuller * | http://keystone.westminster.edu/~fullermd | *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sun Apr 5 20:11:36 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id UAA07810 for freebsd-isp-outgoing; Sun, 5 Apr 1998 20:11:36 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from ns1.knight-trosoft.com ([198.247.204.60]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA07688 for ; Sun, 5 Apr 1998 20:10:01 -0700 (PDT) (envelope-from johnp@knight-trosoft.com) Received: (from johnp@localhost) by ns1.knight-trosoft.com (8.8.7/8.8.5) id WAA06989 for freebsd-isp@FreeBSD.ORG; Sun, 5 Apr 1998 22:08:09 -0500 (CDT) Date: Sun, 5 Apr 1998 22:08:09 -0500 (CDT) From: John Prince Message-Id: <199804060308.WAA06989@ns1.knight-trosoft.com> To: freebsd-isp@FreeBSD.ORG Subject: Service Agreement Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Does anyone have any GENERIC service agreement examples available.. I am currently creating a new agreement, and thought I might see if there were any reusable agreements available first.. Thanks.. --John Prince To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 02:22:55 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id CAA27150 for freebsd-isp-outgoing; Mon, 6 Apr 1998 02:22:55 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from npc.haplink.com.cn ([202.96.192.53]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id CAA27145 for ; Mon, 6 Apr 1998 02:22:53 -0700 (PDT) (envelope-from xiyuan@npc.haplink.com.cn) Received: (from xiyuan@localhost) by npc.haplink.com.cn (8.8.8/8.8.8) id RAA02350 for freebsd-isp@freebsd.org; Mon, 6 Apr 1998 17:30:18 GMT Date: Mon, 6 Apr 1998 17:30:18 GMT From: xiyuan qian Message-Id: <199804061730.RAA02350@npc.haplink.com.cn> To: freebsd-isp@FreeBSD.ORG Subject: host die and reboot after enlarge the memory to 64M Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi, I am running a IBM PC Server 325 host with 32M memory. Now I buy the second 32M memory and install it on the host. The host boot ok but when I enter too many commands, it will suddenly die and reboot. I have checked the memory itself, no problem. Then I install a WindowsNT4.0, everything works ok. What is the most reason? --xiyuan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 04:11:48 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id EAA08449 for freebsd-isp-outgoing; Mon, 6 Apr 1998 04:11:48 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from petar.warpnet.ro (ppp-petar.warpnet.ro [193.230.201.62]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id EAA08432 for ; Mon, 6 Apr 1998 04:11:16 -0700 (PDT) (envelope-from dan@petar.warpnet.ro) Received: from petar.warpnet.ro (dan.warpnet.ro [193.230.201.244]) by petar.warpnet.ro (8.8.8/8.8.8) with ESMTP id OAA01725 for ; Mon, 6 Apr 1998 14:10:09 +0300 (EEST) (envelope-from dan@petar.warpnet.ro) Message-ID: <3528BCA8.3AC74C2A@petar.warpnet.ro> Date: Mon, 06 Apr 1998 14:29:44 +0300 From: Dan Petruc X-Mailer: Mozilla 4.04 [en] (Win95; I) MIME-Version: 1.0 To: freebsd-isp@FreeBSD.ORG Subject: User accounting software ??? Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org We are using a FreeBsd box for our clients PPP access on Internet (2 phone lines). I could not find an user accounting and monitoring program designed for FreeBSD. Any ideas ? Thanks in advance. Dan Petruc. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 08:49:49 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA09996 for freebsd-isp-outgoing; Mon, 6 Apr 1998 08:49:49 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from commander.simoco.com ([193.150.150.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA09991 for ; Mon, 6 Apr 1998 08:49:47 -0700 (PDT) (envelope-from Anthony.Barlow@europe.simoco.com) Received: from comms01.simoco (comms01.simoco.com [193.150.132.21]) by commander.simoco.com with SMTP id QAA02632 for (2.2-8.8.5/3.1.16); Mon, 6 Apr 1998 16:48:14 +0100 (BST) Received: by comms01.simoco with SMTP (Microsoft Exchange Server Internet Mail Connector Version 4.0.993.5) id <01BD617B.C8A4D800@comms01.simoco>; Mon, 6 Apr 1998 16:48:11 +0100 Message-ID: From: Anthony Barlow To: "'freebsd-isp@freebsd.org'" Subject: Bandwidth limiter for services? Date: Mon, 6 Apr 1998 16:48:10 +0100 X-Mailer: Microsoft Exchange Server Internet Mail Connector Version 4.0.993.5 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi everyone Is there any software/hardware that will allow me to limit the bandwith that a partiuclar service users. We currently have a slow 128Kb link linking our Cambridge office to our Derby office and we would like to limit the bandwidth that people use for web browsing. - Can it be done without affecting any other services? Regards, Anthony To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 11:15:46 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA29849 for freebsd-isp-outgoing; Mon, 6 Apr 1998 11:15:46 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from smtp.plinet.com (root@flattened.plinet.com [206.168.149.8]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA29844 for ; Mon, 6 Apr 1998 11:15:43 -0700 (PDT) (envelope-from freebsd@plinet.com) Received: from system-admin (me.plinet.com [206.168.149.220]) by smtp.plinet.com (8.8.5/8.8.5) with SMTP id MAA14931; Mon, 6 Apr 1998 12:15:28 -0600 (envelope-from freebsd@plinet.com) Message-Id: <199804061815.MAA14931@smtp.plinet.com> X-Sender: freebsd@pop.plinet.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0 Date: Mon, 06 Apr 1998 12:16:41 -0600 To: Anthony Barlow , "'freebsd-isp@freebsd.org'" From: Ben Schumacher Subject: Re: Bandwidth limiter for services? In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Anthony, Here is something I stumbled upon while investigating the T1 cards for FreeBSD. Check out Emerging Technologies Bandwidth Manager. URL: http://www.etinc.com/ This is something my company has been looking for as well and this looks like a good product for that. Hope this is what you are looking for. - Ben Schumacher At 04:48 PM 4/6/98 +0100, Anthony Barlow wrote: >Hi everyone > >Is there any software/hardware that will allow me to limit the bandwith >that a partiuclar service users. We currently have a slow 128Kb link >linking our Cambridge office to our Derby office and we would like to >limit the bandwidth that people use for web browsing. - Can it be done >without affecting any other services? > >Regards, >Anthony > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 14:08:58 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA13891 for freebsd-isp-outgoing; Mon, 6 Apr 1998 14:08:58 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from mail.keyworld.net (root@mail.keyworld.net [194.21.164.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA13885 for ; Mon, 6 Apr 1998 14:08:52 -0700 (PDT) (envelope-from chrism@keyworld.net) Received: from chrism (ppp71.keyworld.net [194.21.164.134]) by mail.keyworld.net (8.8.5/8.8.4) with ESMTP id XAA27968; Mon, 6 Apr 1998 23:04:17 +0200 Message-Id: <199804062104.XAA27968@mail.keyworld.net> From: "Christopher Martin at Home" To: "Anthony Barlow" , "'freebsd-isp@freebsd.org'" , "Ben Schumacher" Subject: Re: Bandwidth limiter for services? Date: Mon, 6 Apr 1998 23:08:02 +0200 X-MSMail-Priority: Normal X-Priority: 3 X-Mailer: Microsoft Internet Mail 4.70.1155 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > Here is something I stumbled upon while investigating the T1 cards for > FreeBSD. Check out Emerging Technologies Bandwidth Manager. URL: > http://www.etinc.com/ > > This is something my company has been looking for as well and this looks > like a good product for that. Hope this is what you are looking for. > > - Ben Schumacher > > > At 04:48 PM 4/6/98 +0100, Anthony Barlow wrote: > >Hi everyone > > > >Is there any software/hardware that will allow me to limit the bandwith > >that a partiuclar service users. We currently have a slow 128Kb link > >linking our Cambridge office to our Derby office and we would like to > >limit the bandwidth that people use for web browsing. - Can it be done > >without affecting any other services? I suggest that you check it out though. I think it works by dropping packets. If it does the pipe might be filled by stuff that is already downloaded. This might result in unaccepttable amount of retransmissions from source. So you would not be really saving bandwidth... Chris To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 14:47:17 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA19001 for freebsd-isp-outgoing; Mon, 6 Apr 1998 14:47:17 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from biggusdiskus.flyingfox.com (biggusdiskus.flyingfox.com [205.162.1.28]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA18996 for ; Mon, 6 Apr 1998 14:47:16 -0700 (PDT) (envelope-from jas@flyingfox.com) Received: (from jas@localhost) by biggusdiskus.flyingfox.com (8.8.5/8.8.5) id OAA02358; Mon, 6 Apr 1998 14:46:21 -0700 (PDT) Date: Mon, 6 Apr 1998 14:46:21 -0700 (PDT) From: Jim Shankland Message-Id: <199804062146.OAA02358@biggusdiskus.flyingfox.com> To: Anthony.Barlow@europe.simoco.com, chrism@keyworld.net, freebsd-isp@FreeBSD.ORG, freebsd@plinet.com Subject: Re: Bandwidth limiter for services? Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org "Christopher Martin at Home" writes: [Re: ET's bandwidth limiter] > I suggest that you check it out though. I think it works by dropping > packets. If it does the pipe might be filled by stuff that is already > downloaded. This might result in unaccepttable amount of retransmissions > from source. > > So you would not be really saving bandwidth... I'm sure Dennis will be heard from, and will bring his customary diplomatic balm to bear on this matter, but: note that this is no different from what happens when packets leave your 10- or 100-Megabit-connected workstation and are routed over a T-1 or slower WAN line. TCP already deals with this, using slow start, congestion avoidance, etc. to deduce the amount of bandwidth actually available to it, and throttle itself back accordingly. Your notion that a bandwidth limiter like ET's will cause increased retransmissions is unfounded. Jim Shankland Flying Fox Computer Systems, Inc. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 14:53:14 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA20094 for freebsd-isp-outgoing; Mon, 6 Apr 1998 14:53:14 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from gfoster.intr.net (gfoster.intr.net [207.32.93.21]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA20085 for ; Mon, 6 Apr 1998 14:53:10 -0700 (PDT) (envelope-from gfoster@gfoster.intr.net) Received: (from gfoster@localhost) by gfoster.intr.net (8.8.8/8.8.6) id RAA10319; Mon, 6 Apr 1998 17:52:44 -0400 (EDT) Date: Mon, 6 Apr 1998 17:52:44 -0400 (EDT) Message-Id: <199804062152.RAA10319@gfoster.intr.net> From: Glen Foster To: chrism@keyworld.net CC: Anthony.Barlow@europe.simoco.com, freebsd-isp@FreeBSD.ORG, freebsd@plinet.com In-reply-to: <199804062104.XAA27968@mail.keyworld.net> (chrism@keyworld.net) Subject: Re: Bandwidth limiter for services? Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Is this really the case? Dennis has been reluctant to describe the mechanism of his bandwidth manager but hints he has dropped on this and other FreeBSD lists indicate that they use a "strategically-timed ACK delay" mechanism to limit bandwidth rather than dropping packets. Basically, they ack as fast as the bandwidth limit allows given the size of the associated queue. Obviously, this adds a little or a lot of latency, more when the bandwidth limit is approaching, but this is not unlike the way a partially-meshed network "looks" to a sender as it approachs saturation and it conserves aggregate bandwidth better than an aggressive discard strategy does (at least as long as the ACK delay is shorter than the retransmission timeout). This is speculation on my part based on scanty evidence. I wish Dennis would 'fess up and describe the logic behind his code in this forum. Glen Foster >From: "Christopher Martin at Home" >Date: Mon, 6 Apr 1998 23:08:02 +0200 > >I suggest that you check it out though. I think it works by dropping >packets. If it does the pipe might be filled by stuff that is already >downloaded. This might result in unaccepttable amount of retransmissions >from source. > >So you would not be really saving bandwidth... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 15:15:42 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA22977 for freebsd-isp-outgoing; Mon, 6 Apr 1998 15:15:42 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from mail.keyworld.net (root@mail.keyworld.net [194.21.164.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA22970 for ; Mon, 6 Apr 1998 15:15:30 -0700 (PDT) (envelope-from chrism@keyworld.net) Received: from chrism (ppp71.keyworld.net [194.21.164.134]) by mail.keyworld.net (8.8.5/8.8.4) with ESMTP id AAA31376; Tue, 7 Apr 1998 00:11:12 +0200 Message-Id: <199804062211.AAA31376@mail.keyworld.net> From: "Christopher Martin at Home" To: "Jim Shankland" , , , Subject: Re: Bandwidth limiter for services? Date: Tue, 7 Apr 1998 00:14:17 +0200 X-MSMail-Priority: Normal X-Priority: 3 X-Mailer: Microsoft Internet Mail 4.70.1155 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > I'm sure Dennis will be heard from, and will bring his customary > diplomatic balm to bear on this matter, but: note that this is > no different from what happens when packets leave your 10- or > 100-Megabit-connected workstation and are routed over a T-1 or slower > WAN line. TCP already deals with this, using slow start, congestion > avoidance, etc. to deduce the amount of bandwidth actually available > to it, and throttle itself back accordingly. Your notion that > a bandwidth limiter like ET's will cause increased retransmissions > is unfounded. > > Jim Shankland > Flying Fox Computer Systems, Inc. How about setting throttles on the hosts from the start in order to avoid interim congestion prior to the normal TCP cutback... Do anyone of you live in places where a T1 costs USD 500,000 per annum? -- Christopher Martin BDM -KeyWORLD http://www.keyworld.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 15:15:44 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA22992 for freebsd-isp-outgoing; Mon, 6 Apr 1998 15:15:44 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from mail.keyworld.net (root@mail.keyworld.net [194.21.164.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA22972 for ; Mon, 6 Apr 1998 15:15:39 -0700 (PDT) (envelope-from chrism@keyworld.net) Received: from chrism (ppp71.keyworld.net [194.21.164.134]) by mail.keyworld.net (8.8.5/8.8.4) with ESMTP id AAA31285; Tue, 7 Apr 1998 00:10:45 +0200 Message-Id: <199804062210.AAA31285@mail.keyworld.net> From: "Christopher Martin at Home" To: "Glen Foster" Cc: , , Subject: Re: Bandwidth limiter for services? Date: Tue, 7 Apr 1998 00:10:07 +0200 X-MSMail-Priority: Normal X-Priority: 3 X-Mailer: Microsoft Internet Mail 4.70.1155 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > > This is speculation on my part based on scanty evidence. I wish > Dennis would 'fess up and describe the logic behind his code in this > forum. > > Glen Foster > I wish he would too. -- Christopher Martin BDM -KeyWORLD http://www.keyworld.net ---------- > From: Glen Foster > To: chrism@keyworld.net > Cc: Anthony.Barlow@europe.simoco.com; freebsd-isp@FreeBSD.ORG; freebsd@plinet.com > Subject: Re: Bandwidth limiter for services? > Date: Monday, April 06, 1998 11:52 PM > > Is this really the case? Dennis has been reluctant to describe the > mechanism of his bandwidth manager but hints he has dropped on this > and other FreeBSD lists indicate that they use a "strategically-timed > ACK delay" mechanism to limit bandwidth rather than dropping packets. > Basically, they ack as fast as the bandwidth limit allows given the > size of the associated queue. > > Obviously, this adds a little or a lot of latency, more when the > bandwidth limit is approaching, but this is not unlike the way a > partially-meshed network "looks" to a sender as it approachs > saturation and it conserves aggregate bandwidth better than an > aggressive discard strategy does (at least as long as the ACK delay is > shorter than the retransmission timeout). > > This is speculation on my part based on scanty evidence. I wish > Dennis would 'fess up and describe the logic behind his code in this > forum. > > Glen Foster > > >From: "Christopher Martin at Home" > >Date: Mon, 6 Apr 1998 23:08:02 +0200 > > > >I suggest that you check it out though. I think it works by dropping > >packets. If it does the pipe might be filled by stuff that is already > >downloaded. This might result in unaccepttable amount of retransmissions > >from source. > > > >So you would not be really saving bandwidth... > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 15:26:59 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA24461 for freebsd-isp-outgoing; Mon, 6 Apr 1998 15:26:59 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from panda.hilink.com.au (panda.hilink.com.au [203.8.15.25]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA24452 for ; Mon, 6 Apr 1998 15:26:54 -0700 (PDT) (envelope-from danny@panda.hilink.com.au) Received: (from danny@localhost) by panda.hilink.com.au (8.8.5/8.8.5) id IAA04666; Tue, 7 Apr 1998 08:26:24 +1000 (EST) Date: Tue, 7 Apr 1998 08:26:23 +1000 (EST) From: "Daniel O'Callaghan" To: Glen Foster cc: chrism@keyworld.net, Anthony.Barlow@europe.simoco.com, freebsd-isp@FreeBSD.ORG, freebsd@plinet.com Subject: Re: Bandwidth limiter for services? In-Reply-To: <199804062152.RAA10319@gfoster.intr.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, 6 Apr 1998, Glen Foster wrote: > This is speculation on my part based on scanty evidence. I wish > Dennis would 'fess up and describe the logic behind his code in this > forum. I've written a bandwidth limiter which works fairly basically. Unfortunately I lost it and have not had time to rewrite it. I'll describe *my* logic and maybe someone will pick it up and run with it. * A 64 kbps line has a throughput of 8 kBytes/second, thus each packet will take packet_len/8192 seconds to traverse the link. A 1024 byte packet will take 125 ms to traverse the link. * Since a packet takes < 1 ms to traverse a decent FreeBSD box with ethernet cards on each side, a packet which is to travel at a notional 64 kbps must be delayed in transit by (packet_len/8.192 - 1) ms, if the queue is empty. * If there is already a packet in the queue, the newly arrived packet must be scheduled for transmission (packet_len/8.192 - 1) ms after the last packet in the queue is due to be sent. You can see that the above effectively simulates what actually happens in a router which converts from your ISPs backbone ethernet/whatever to your 64 kbps ISDN link. My bandd used divert sockets, so traffic of a certain type could be sent through it - anything ipfw can test for. It should be noted that the system above will work best when there is a separate instance of bandd limiting traffic in the opposite direction, as per real life 64k lines. The above example is for 64kbps. Adjust accordingly. Danny To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 16:23:36 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id QAA02414 for freebsd-isp-outgoing; Mon, 6 Apr 1998 16:23:36 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from biggusdiskus.flyingfox.com (biggusdiskus.flyingfox.com [205.162.1.28]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id QAA02409 for ; Mon, 6 Apr 1998 16:23:32 -0700 (PDT) (envelope-from jas@flyingfox.com) Received: (from jas@localhost) by biggusdiskus.flyingfox.com (8.8.5/8.8.5) id QAA03414; Mon, 6 Apr 1998 16:23:01 -0700 (PDT) Date: Mon, 6 Apr 1998 16:23:01 -0700 (PDT) From: Jim Shankland Message-Id: <199804062323.QAA03414@biggusdiskus.flyingfox.com> To: Anthony.Barlow@europe.simoco.com, chrism@keyworld.net, freebsd-isp@FreeBSD.ORG, freebsd@plinet.com, jas@flyingfox.com Subject: Re: Bandwidth limiter for services? Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org "Christopher Martin at Home" writes: > How about setting throttles on the hosts from the start in order to avoid > interim congestion prior to the normal TCP cutback... This is called "slow start"; it's included in the price of your TCP stack. Jim Shankland Flying Fox Computer Systems, Inc. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 18:11:31 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id SAA17424 for freebsd-isp-outgoing; Mon, 6 Apr 1998 18:11:31 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from super-g.inch.com (super-g.com [207.240.140.161]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA17413 for ; Mon, 6 Apr 1998 18:11:29 -0700 (PDT) (envelope-from spork@super-g.com) Received: from localhost (localhost [127.0.0.1]) by super-g.inch.com (8.8.8/8.8.5) with SMTP id VAA15693; Mon, 6 Apr 1998 21:10:40 -0400 (EDT) Date: Mon, 6 Apr 1998 21:10:40 -0400 (EDT) From: spork X-Sender: spork@super-g.inch.com To: Christopher Martin at Home cc: Anthony Barlow , "'freebsd-isp@freebsd.org'" , Ben Schumacher Subject: Re: Bandwidth limiter for services? In-Reply-To: <199804062104.XAA27968@mail.keyworld.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org How does this all relate to "altq"? I saw a notice of a new version on -hackers today: A new release of ALTQ (finally version 1.0.1!) is available from http://www.csl.sony.co.jp/person/kjc/software.html or ftp://ftp.csl.sony.co.jp/pub/kjc/altq-1.0.1.tar.gz The release includes: alternate queueing support for FreeBSD-2.2.[1256]R kernel. CBQ, WFQ, RED, and FIFOQ implementations tools for CBQ RSVP stubs for CBQ ECN (for IPv4) support in RED and TCP Charles Sprickman spork@super-g.com ---- "I'm not a prophet or a stone-age man Just a mortal with potential of a superman I'm living on" -DB On Mon, 6 Apr 1998, Christopher Martin at Home wrote: > > > Here is something I stumbled upon while investigating the T1 cards for > > FreeBSD. Check out Emerging Technologies Bandwidth Manager. URL: > > http://www.etinc.com/ > > > > This is something my company has been looking for as well and this looks > > like a good product for that. Hope this is what you are looking for. > > > > - Ben Schumacher > > > > > > At 04:48 PM 4/6/98 +0100, Anthony Barlow wrote: > > >Hi everyone > > > > > >Is there any software/hardware that will allow me to limit the bandwith > > >that a partiuclar service users. We currently have a slow 128Kb link > > >linking our Cambridge office to our Derby office and we would like to > > >limit the bandwidth that people use for web browsing. - Can it be done > > >without affecting any other services? > > I suggest that you check it out though. I think it works by dropping > packets. If it does the pipe might be filled by stuff that is already > downloaded. This might result in unaccepttable amount of retransmissions > from source. > > So you would not be really saving bandwidth... > > Chris > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 18:53:04 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id SAA25504 for freebsd-isp-outgoing; Mon, 6 Apr 1998 18:53:04 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from marlin.corp.gulf.net (root@marlin.corp.gulf.net [198.69.72.17]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA25345; Mon, 6 Apr 1998 18:51:55 -0700 (PDT) (envelope-from tbackman@corp.gulf.net) Received: from marlin.corp.gulf.net (tbackman@marlin.corp.gulf.net [206.105.61.2]) by marlin.corp.gulf.net (8.8.8/8.8.5) with SMTP id UAA15423; Mon, 6 Apr 1998 20:50:19 -0500 (CDT) Date: Mon, 6 Apr 1998 20:50:18 -0500 (CDT) From: Todd Backman To: freebsd-questions@FreeBSD.ORG cc: freebsd-isp@FreeBSD.ORG, freebsd-hardware@FreeBSD.ORG Subject: SDL N2dds Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Does anyone use the SDL N2dds successfully with FreeBSD? I am trying two set up two machines with the cards w/2.2.5 and am having a hell of a time. device sr0 at isa? port 0x340 net irq 11 iomem 0xd0000 vector srintr network_interfaces="sr0 ed1 lo0" ifconfig_sr0="inet xxx.xxx.xx.xxx xxx.xxx.xx.xxx flags 0x1 netmask 255.... ^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^ ^^^^^^^ local IP Remote IP subnet Kernel sppp The kernel sees it correctly with no conflicts. When I bring up the interface I get odd recurring errors (I cant remember exactly and it is off site) the error includes something like: ST01 TR05 DG07 (again I did not write the errors down like a dumbass) The boxen also have Genius NIC in them with different IPs. location A setup: csu/dsu feeds a 8 port hub. freebsd box connects to port on hub through NIC. Cable from SDL card to 56k line that runs to location B (150 yards) location B setup: line from 56k line to SDL card on second machine. cable from freebsd box to main port on hub to serve 6 machines at that location. SDL has NO support for FreeBSD. Thanks in advance for any help. ===================================================================== Todd Backman (tbackman@corp.gulf.net) Network Engineering Systems/POP Administration Gulf Coast Internet Company 1-800-444-INET To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Apr 6 23:28:20 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA01592 for freebsd-isp-outgoing; Mon, 6 Apr 1998 23:28:20 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from parkplace.cet.co.jp (parkplace.cet.co.jp [202.32.64.1]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA01567 for ; Mon, 6 Apr 1998 23:28:17 -0700 (PDT) (envelope-from michaelh@cet.co.jp) Received: from localhost (michaelh@localhost) by parkplace.cet.co.jp (8.8.8/CET-v2.2) with SMTP id GAA02012 for ; Tue, 7 Apr 1998 06:27:31 GMT Date: Tue, 7 Apr 1998 15:27:31 +0900 (JST) From: Michael Hancock To: freebsd-isp@FreeBSD.ORG Subject: PM3 and /usr/ports/net/radius Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Anyone using this combination with kerberos. I noticed that by default -DASCEND is defined. Does the PM3 require any diffs to MERIT radius. Regards, Mike Hancock To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 00:03:40 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id AAA08307 for freebsd-isp-outgoing; Tue, 7 Apr 1998 00:03:40 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from ha1.rdc1.sfba.home.com (siteadm@ha1.rdc1.sfba.home.com [24.0.0.66]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id AAA08298 for ; Tue, 7 Apr 1998 00:03:38 -0700 (PDT) (envelope-from ludwigp@bigfoot.com) Received: from speedy.plstn1.sfba.home.com ([24.1.82.47]) by ha1.rdc1.sfba.home.com (Netscape Mail Server v2.02) with SMTP id AAA25799; Tue, 7 Apr 1998 00:03:32 -0700 Message-Id: <3.0.3.32.19980407000131.00735330@mail.plstn1.sfba.home.com> X-Sender: ludwigp@mail.plstn1.sfba.home.com X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.3 (32) Date: Tue, 07 Apr 1998 00:01:31 -0700 To: "Christopher Martin at Home" , From: Ludwig Pummer Subject: Re: Bandwidth limiter for services? In-Reply-To: <199804062211.AAA31376@mail.keyworld.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 12:14 AM 4/7/98 +0200, Christopher Martin at Home wrote: >Do anyone of you live in places where a T1 costs USD 500,000 per annum? It's about USD 16800 per year from Pacific Bell in the San Francisco Bay Area, not including setup fees and stuff (not that i have one, i just checked prices today). --Ludwig Pummer ludwigp@bigfoot.com ludwigp@chipweb.ml.org ICQ UIN: 692441 http://chipweb.home.ml.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 00:17:43 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id AAA10269 for freebsd-isp-outgoing; Tue, 7 Apr 1998 00:17:43 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from cor.oz.cc.utah.edu (rpr1@cor.oz.cc.utah.edu [155.99.2.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id AAA10264 for ; Tue, 7 Apr 1998 00:17:42 -0700 (PDT) (envelope-from R.Ricci@m.cc.utah.edu) Received: from localhost (rpr1@localhost) by cor.oz.cc.utah.edu (8.8.7/8.8.7) with SMTP id BAA26254 for ; Tue, 7 Apr 1998 01:17:39 -0600 (MDT) Date: Tue, 7 Apr 1998 01:17:38 -0600 (MDT) From: R Ricci X-Sender: rpr1@cor To: freebsd-isp@FreeBSD.ORG Subject: VERY strange network(?) problem Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I'm having a very strange problem with our web/mail server (running 2.2.1), and I'd appreciate any pointers any of you could give me. Part of my problem is that I'm not sure exaclty what methods I can use for tracking down the source of my difficulties. Often, during TCP connections to the server, the connection will "stall", ie. I get no data for several seconds/minutes. This causes huge problems, of course, when it comes to checking mail, retrieving web pages, etc. At frist, I suspected disk problems, but experimentation has pretty much ruled this out. Doing a 'ps' on the server while one of these stalls is occuring reveals that the offending process is just in state S or I, not waiting on the disk. The only clue I have (and it may not be relevant) is the following message, which keeps showing up in /var/log/messages/ : arplookup 207.201.65.2 failed: host is not on local network This IP is on our gateway. It's another interface on that gateway, but not on our local network. (Our server sees the gateway as 207.201.125.65). I'm not sure what I need to do do fix this. Any help, and/or suggestions of additional things to try will be very welcome! Robert Ricci R.Ricci@m.cc.utah.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 00:54:19 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id AAA13415 for freebsd-isp-outgoing; Tue, 7 Apr 1998 00:54:19 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from implode.root.com (implode.root.com [198.145.90.17]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id AAA13410 for ; Tue, 7 Apr 1998 00:54:17 -0700 (PDT) (envelope-from root@implode.root.com) Received: from implode.root.com (localhost [127.0.0.1]) by implode.root.com (8.8.5/8.8.5) with ESMTP id AAA07571; Tue, 7 Apr 1998 00:53:04 -0700 (PDT) Message-Id: <199804070753.AAA07571@implode.root.com> To: R Ricci cc: freebsd-isp@FreeBSD.ORG Subject: Re: VERY strange network(?) problem In-reply-to: Your message of "Tue, 07 Apr 1998 01:17:38 MDT." From: David Greenman Reply-To: dg@root.com Date: Tue, 07 Apr 1998 00:53:04 -0700 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >I'm having a very strange problem with our web/mail server (running >2.2.1), and I'd appreciate any pointers any of you could give me. Part of >my problem is that I'm not sure exaclty what methods I can use for >tracking down the source of my difficulties. > >Often, during TCP connections to the server, the connection will "stall", >ie. I get no data for several seconds/minutes. This causes huge problems, >of course, when it comes to checking mail, retrieving web pages, etc. At >frist, I suspected disk problems, but experimentation has pretty much >ruled this out. Doing a 'ps' on the server while one of these stalls is >occuring reveals that the offending process is just in state S or I, not >waiting on the disk. > >The only clue I have (and it may not be relevant) is the following >message, which keeps showing up in /var/log/messages/ : > >arplookup 207.201.65.2 failed: host is not on local network > >This IP is on our gateway. It's another interface on that gateway, but not >on our local network. (Our server sees the gateway as 207.201.125.65). I'm >not sure what I need to do do fix this. > >Any help, and/or suggestions of additional things to try will be very >welcome! Sounds like you might be running out of mbuf clusters. Have you specified an amount with the NMBCLUSTERS kernel option? If not, what do you have maxusers set to in your config file? Also, about how many simultaneous TCP connections do you expect have at any time? A rough number of http hits/day might also be useful in calculating an appropriate number of buffers. To confirm this is the cause, you might also look for the message "Out of mbuf clusters" in your /var/log/messages file. -DG David Greenman Core-team/Principal Architect, The FreeBSD Project To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 08:11:18 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA06757 for freebsd-isp-outgoing; Tue, 7 Apr 1998 08:11:18 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from ns0.fast.net.uk (ns0.fast.net.uk [194.207.104.1]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA06749 for ; Tue, 7 Apr 1998 08:11:13 -0700 (PDT) (envelope-from netadmin@fastnet.co.uk) Received: from ns0.fast.net.uk (ns0.fast.net.uk [194.207.104.1]) by ns0.fast.net.uk (8.8.8/8.8.7) with SMTP id QAA22697 for ; Tue, 7 Apr 1998 16:08:29 +0100 (BST) Date: Tue, 7 Apr 1998 16:08:29 +0100 (BST) From: Jay Tribick X-Sender: netadmin@ns0.fast.net.uk To: freebsd-isp@FreeBSD.ORG Subject: Virus checking e-mail attachments Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi There seems to be a lot of products available for Windoze NT etc. that run on a mail server and scan e-mails (or their attachments) for viruses. Is their anything available for FreeBSD that does this (or any other flavour of UN*X) ? What I'm looking for is something that, if it detects a virus can encapsulate an e-mail and warn the user that they should check it. Regards, Jay Tribick | Network Administrator FastNet International Ltd | http://www.fastnet.co.uk/ PGP Key Available | Finger netadmin@fastnet.co.uk : Tel: +44 (0)1273 677633 . Fax: +44 (0)1273 621631 FastNet International Ltd - The User-Friendly Internet Provider To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 08:17:53 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA07518 for freebsd-isp-outgoing; Tue, 7 Apr 1998 08:17:53 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from bobo.oz.cc.utah.edu (rpr1@bobo.oz.cc.utah.edu [155.99.2.4]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA07513 for ; Tue, 7 Apr 1998 08:17:50 -0700 (PDT) (envelope-from R.Ricci@m.cc.utah.edu) Received: from localhost (rpr1@localhost) by bobo.oz.cc.utah.edu (8.8.7/8.8.7) with SMTP id JAA26072 for ; Tue, 7 Apr 1998 09:17:47 -0600 (MDT) Date: Tue, 7 Apr 1998 09:17:47 -0600 (MDT) From: R Ricci X-Sender: rpr1@bobo To: freebsd-isp@FreeBSD.ORG Subject: Re: VERY strange network(?) problem In-Reply-To: <199804070753.AAA07571@implode.root.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Looking through the messages files, there are no messags about mbuf cluseters. This kernel was not compiled with NMBCLUSTERS, and maxusers is set at 50. Our webserver is relatively low-volume, serving only a few thousand hits/day, and supplying mail and DNS for about two hundred people. I would happily recompile the kernel (in fact, I'm doing so right now ith 75 maxusers) it it will solve this problem. Here's another tidbit to add to the confusion: I can telnet in and `cat /var/log/maillog`, which is pretty long, without a problem, but if I try to cat my mail file, it stalls after about a dozen lines. Even if I move this mail file into the /var/log directory, so that it is on the same drive as the mailllog, it still stalls in almost exactly the same place. Robert Ricci rricci@theonlynet.com On Tue, 7 Apr 1998, David Greenman wrote: > >I'm having a very strange problem with our web/mail server (running > >2.2.1), and I'd appreciate any pointers any of you could give me. Part of > >my problem is that I'm not sure exaclty what methods I can use for > >tracking down the source of my difficulties. > > > >Often, during TCP connections to the server, the connection will "stall", > >ie. I get no data for several seconds/minutes. This causes huge problems, > >of course, when it comes to checking mail, retrieving web pages, etc. At > >frist, I suspected disk problems, but experimentation has pretty much > >ruled this out. Doing a 'ps' on the server while one of these stalls is > >occuring reveals that the offending process is just in state S or I, not > >waiting on the disk. > > > >The only clue I have (and it may not be relevant) is the following > >message, which keeps showing up in /var/log/messages/ : > > > >arplookup 207.201.65.2 failed: host is not on local network > > > >This IP is on our gateway. It's another interface on that gateway, but not > >on our local network. (Our server sees the gateway as 207.201.125.65). I'm > >not sure what I need to do do fix this. > > > >Any help, and/or suggestions of additional things to try will be very > >welcome! > > Sounds like you might be running out of mbuf clusters. Have you specified > an amount with the NMBCLUSTERS kernel option? If not, what do you have > maxusers set to in your config file? Also, about how many simultaneous > TCP connections do you expect have at any time? A rough number of http > hits/day might also be useful in calculating an appropriate number of > buffers. > To confirm this is the cause, you might also look for the message "Out of > mbuf clusters" in your /var/log/messages file. > > -DG > > David Greenman > Core-team/Principal Architect, The FreeBSD Project > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 08:23:50 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA08251 for freebsd-isp-outgoing; Tue, 7 Apr 1998 08:23:50 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from agora.rdrop.com (0@agora.rdrop.com [199.2.210.241]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA08246 for ; Tue, 7 Apr 1998 08:23:47 -0700 (PDT) (envelope-from batie@agora.rdrop.com) Received: (from batie@localhost) by agora.rdrop.com (8.8.5/8.8.5) id IAA22544; Tue, 7 Apr 1998 08:23:10 -0700 (PDT) Message-ID: <19980407082310.44016@agora.rdrop.com> Date: Tue, 7 Apr 1998 08:23:10 -0700 From: Alan Batie To: R Ricci Cc: freebsd-isp@FreeBSD.ORG Subject: Re: VERY strange network(?) problem References: <199804070753.AAA07571@implode.root.com> Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-md5; boundary=IJpNTDwzlM2Ie8A6 X-Mailer: Mutt 0.88 In-Reply-To: ; from R Ricci on Tue, Apr 07, 1998 at 09:17:47AM -0600 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --IJpNTDwzlM2Ie8A6 Content-Type: text/plain; charset=us-ascii On Tue, Apr 07, 1998 at 09:17:47AM -0600, R Ricci wrote: > Even if I move > this mail file into the /var/log directory, so that it is on the same > drive as the mailllog, it still stalls in almost exactly the same place. Use "less" on it --- I'll bet you have a large section of null characters in it, corruption from somewhere... -- Alan Batie ______ www.rdrop.com/users/batie Me batie@agora.rdrop.com \ / www.qrd.org The Triangle PGPFP DE 3C 29 17 C0 49 7A \ / www.pgpi.com The Weird Numbers 27 40 A5 3C 37 4A DA 52 B9 \/ www.anti-spam.net NO SPAM! --IJpNTDwzlM2Ie8A6 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBNSpE3Yv4wNua7QglAQFUkQQAjXtsa95RuSLXI4E8QsMi8m8OMBmGLt1B rZ4etTWDNdonP8JA1rPevWALzMwMFmef4/rloSdLqP8qa71pHxOaPHoyp+9wrRRY cIeA2+HwyzuSXAKI6m5jESXNG0zl+hYwjEoaVuhZC8Wiw/dz+Qslpk5EmKMr3u0Z mzEXAiempKA= =zcjF -----END PGP SIGNATURE----- --IJpNTDwzlM2Ie8A6-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 09:22:31 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA14384 for freebsd-isp-outgoing; Tue, 7 Apr 1998 09:22:31 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from gos.oz.cc.utah.edu (rpr1@gos.oz.cc.utah.edu [155.99.2.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA14377 for ; Tue, 7 Apr 1998 09:22:30 -0700 (PDT) (envelope-from R.Ricci@m.cc.utah.edu) Received: from localhost (rpr1@localhost) by gos.oz.cc.utah.edu (8.8.7/8.8.7) with SMTP id KAA15245 for ; Tue, 7 Apr 1998 10:22:20 -0600 (MDT) Date: Tue, 7 Apr 1998 10:22:19 -0600 (MDT) From: R Ricci X-Sender: rpr1@gos To: freebsd-isp@FreeBSD.ORG Subject: Re: VERY strange network(?) problem In-Reply-To: <19980407082310.44016@agora.rdrop.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I still hangs with less: I get a screenfull, then no response to my keystrokes. Robert Ricci R.Ricci@m.cc.utah.edu On Tue, 7 Apr 1998, Alan Batie wrote: > On Tue, Apr 07, 1998 at 09:17:47AM -0600, R Ricci wrote: > > Even if I move > > this mail file into the /var/log directory, so that it is on the same > > drive as the mailllog, it still stalls in almost exactly the same place. > > Use "less" on it --- I'll bet you have a large section of null characters > in it, corruption from somewhere... > > -- > Alan Batie ______ www.rdrop.com/users/batie Me > batie@agora.rdrop.com \ / www.qrd.org The Triangle > PGPFP DE 3C 29 17 C0 49 7A \ / www.pgpi.com The Weird Numbers > 27 40 A5 3C 37 4A DA 52 B9 \/ www.anti-spam.net NO SPAM! > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 09:25:43 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA14634 for freebsd-isp-outgoing; Tue, 7 Apr 1998 09:25:43 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from alcatel.fr (news.alcatel.fr [194.133.58.131]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA14609 for ; Tue, 7 Apr 1998 09:25:31 -0700 (PDT) (envelope-from THIERRY.HERBELOT@telspace.alcatel.fr) From: THIERRY.HERBELOT@telspace.alcatel.fr Received: from alcatel.fr (gatekeeper-ssn.alcatel.fr [155.132.180.244]) by mailgate.alcatel.fr (ALCANET/SMTP.9.9.9) with ESMTP id SAA04122; Tue, 7 Apr 1998 18:29:14 +0200 Received: from aifhs1.alcatel.fr (aifhs1.alcatel.fr [155.132.180.86]) by aifhs2.alcatel.fr (ALCANET/SMTP2) with ESMTP id SAA00413; Tue, 7 Apr 1998 18:20:30 +0200 (MET DST) Received: from aifhs2.alcatel.fr (localhost [127.0.0.1]) by aifhs1.alcatel.fr (8.8.8/8.8.8) with ESMTP id SAA09431; Tue, 7 Apr 1998 18:22:28 +0200 (MET DST) Received: from lune.telspace.alcatel.fr (lune.telspace.alcatel.fr [155.132.144.65]) by aifhs2.alcatel.fr (ALCANET/SMTP2) with ESMTP id SAA00282; Tue, 7 Apr 1998 18:20:06 +0200 (MET DST) Received: from telss1 (telss1.telspace.alcatel.fr [155.132.51.4]) by lune.telspace.alcatel.fr (8.7.6/8.7.3) with SMTP id SAA13994; Tue, 7 Apr 1998 18:20:50 +0200 (MET DST) Received: from eole.telspace.alcatel.fr by telss1 (4.1/SMI-4.1) id AA13354; Tue, 7 Apr 98 18:11:12 +0200 Received: from localhost by eole.telspace.alcatel.fr with SMTP (1.40.112.12/16.2) id AA052045324; Tue, 7 Apr 1998 18:08:44 +0200 X-Openmail-Hops: 1 Date: Tue, 7 Apr 98 18:08:36 +0200 Message-Id: In-Reply-To: Subject: =?ISO-8859-1?Q?R=E9p_:_Virus_checking_e-mail_attachments?= Mime-Version: 1.0 To: netadmin@fastnet.co.uk Cc: freebsd-isp@FreeBSD.ORG Content-Type: text/plain; charset=ISO-8859-1; name="Virus" Content-Disposition: inline; filename="Virus" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by hub.freebsd.org id JAA14630 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org hello If I remember correctly, there was such an extension for the Firewall-1 product from Checkpoint (ckeck it on www.checkpoint.com) There has been recently (I can't find the refernce now) a merger beetween a firewall company and a virus checking company ("total security solutions") All depends on the quality of the virus database (and the marketing hype to sell it) T. Herbelot ____________________________ Séparateur Réponse ________________________________ Objet : Virus checking e-mail attachments Auteur : netadmin@fastnet.co.uk Date : 07/04/98 17:08 Hi There seems to be a lot of products available for Windoze NT etc. that run on a mail server and scan e-mails (or their attachments) for viruses. Is their anything available for FreeBSD that does this (or any other flavour of UN*X) ? What I'm looking for is something that, if it detects a virus can encapsulate an e-mail and warn the user that they should check it. Regards, Jay Tribick | Network Administrator FastNet International Ltd | http://www.fastnet.co.uk/ PGP Key Available | Finger netadmin@fastnet.co.uk : Tel: +44 (0)1273 677633 . Fax: +44 (0)1273 621631 FastNet International Ltd - The User-Friendly Internet Provider To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 09:39:31 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA16732 for freebsd-isp-outgoing; Tue, 7 Apr 1998 09:39:31 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from gill.netrail.net (gill.netrail.net [205.215.10.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA16727 for ; Tue, 7 Apr 1998 09:39:26 -0700 (PDT) (envelope-from jonz@netrail.net) Received: from localhost (jonz@localhost) by gill.netrail.net (8.8.6/8.8.6) with SMTP id MAA29463 for ; Tue, 7 Apr 1998 12:39:30 -0400 (EDT) Date: Tue, 7 Apr 1998 12:39:30 -0400 (EDT) From: "Jonathan A. Zdziarski" To: freebsd-isp@FreeBSD.ORG Subject: Radius Giving me Hell Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I'm trying to set up Radius to work off of the raddb/users file, but can't get it to work right. In 'authfile' I have ... groupname FILE and all the correct users entries (Auth Type Realm, etc) But the authentication still fails when I do a radpwtst. If I switch it to Unix-PW and put it in the password file it works fine.. I've tried replacing FILE with a filename, putting it after it, etc...but nothing work. Thank you, Jonathan A. Zdziarski Systems Administrator Netrail Incorporated 888-NETRAIL jonz@netrail.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 09:48:20 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA18061 for freebsd-isp-outgoing; Tue, 7 Apr 1998 09:48:20 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from merit.edu (merit.edu [198.108.1.42]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA18053 for ; Tue, 7 Apr 1998 09:48:16 -0700 (PDT) (envelope-from web@merit.edu) Received: from ohm.merit.edu (ohm.merit.edu [198.108.60.65]) by merit.edu (8.8.7/8.8.5) with ESMTP id MAA03703; Tue, 7 Apr 1998 12:48:06 -0400 (EDT) From: William Bulley Received: (web@localhost) by ohm.merit.edu (8.6.9/8.6.5) id MAA25771; Tue, 7 Apr 1998 12:49:13 -0400 Message-Id: <199804071649.MAA25771@ohm.merit.edu> Subject: Re: Radius Giving me Hell To: jonz@netrail.net (Jonathan A. Zdziarski) Date: Tue, 7 Apr 1998 12:49:13 -0400 (EDT) Cc: freebsd-isp@FreeBSD.ORG In-Reply-To: from "Jonathan A. Zdziarski" at Apr 7, 98 12:39:30 pm X-Mailer: ELM [version 2.4 PL25] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org According to Jonathan A. Zdziarski: > > I'm trying to set up Radius to work off of the raddb/users file, but can't > get it to work right. In 'authfile' I have ... > > groupname FILE > > and all the correct users entries (Auth Type Realm, etc) > > But the authentication still fails when I do a radpwtst. If I switch it > to Unix-PW and put it in the password file it works fine.. I've tried > replacing FILE with a filename, putting it after it, etc...but nothing > work. This is our server which we call the Merit AAA Server (speaks RADIUS). We have a support mailing address and a set of WWW pages to support it: aaa-support@merit.edu http://www.merit.edu/aaa/ We offer two versions a freely available one called "basic" and a for-fee version called "enhanced". Why am I telling you all of this? Only the enhanced Merit AAA Server support the FILE authentication type and I believe you have the freely available "basic" version. Regards, web... -- William Bulley Senior Systems Research Programmer Merit Network, Inc. Email: web@merit.edu 4251 Plymouth Road, Suite C Phone: (734) 764-9993 Ann Arbor, Michigan 48105-2785 Fax: (734) 647-3185 [ Reuters, London, February 29, 1998: Scientists have announced discovering ] [ a meteorite which will strike the earth in March, 2028. Millions of UNIX ] [ coders expressed relief for being spared the UNIX epoch "crisis" of 2038. ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 10:31:31 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA24861 for freebsd-isp-outgoing; Tue, 7 Apr 1998 10:31:31 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from gill.netrail.net (gill.netrail.net [205.215.10.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA24827 for ; Tue, 7 Apr 1998 10:31:23 -0700 (PDT) (envelope-from jonz@netrail.net) Received: from localhost (jonz@localhost) by gill.netrail.net (8.8.6/8.8.6) with SMTP id NAA04686 for ; Tue, 7 Apr 1998 13:31:25 -0400 (EDT) Date: Tue, 7 Apr 1998 13:31:25 -0400 (EDT) From: "Jonathan A. Zdziarski" To: freebsd-isp@FreeBSD.ORG Subject: Radius 970424 Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Just installed Ascend Radius 970424 and am having one problem; No authfile was provided with the package, so I experimented. No matter whether I use my own or don't use one at all, I get this error when I try and radpwtst: "jonz" authentication failed(RC=-1): Couldn't find server in "/usr/local/etc/raddb/clients": "radius1.merit.edu" Which means it's apparently not finding an authfile or finding one somewhere it shouldnt. How can I tell it to either 'just use the users file' or 'use a specific authfile' ? Thank you, Jonathan A. Zdziarski Systems Administrator Netrail Incorporated 888-NETRAIL jonz@netrail.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 10:42:55 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA27676 for freebsd-isp-outgoing; Tue, 7 Apr 1998 10:42:55 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from merit.edu (merit.edu [198.108.1.42]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA27658 for ; Tue, 7 Apr 1998 10:42:46 -0700 (PDT) (envelope-from web@merit.edu) Received: from ohm.merit.edu (ohm.merit.edu [198.108.60.65]) by merit.edu (8.8.7/8.8.5) with ESMTP id NAA04686; Tue, 7 Apr 1998 13:42:43 -0400 (EDT) From: William Bulley Received: (web@localhost) by ohm.merit.edu (8.6.9/8.6.5) id NAA25899; Tue, 7 Apr 1998 13:43:51 -0400 Message-Id: <199804071743.NAA25899@ohm.merit.edu> Subject: Re: Radius 970424 To: jonz@netrail.net (Jonathan A. Zdziarski) Date: Tue, 7 Apr 1998 13:43:51 -0400 (EDT) Cc: freebsd-isp@FreeBSD.ORG In-Reply-To: from "Jonathan A. Zdziarski" at Apr 7, 98 01:31:25 pm X-Mailer: ELM [version 2.4 PL25] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org According to Jonathan A. Zdziarski: > > Just installed Ascend Radius 970424 and am having one problem; No authfile > was provided with the package, so I experimented. No matter whether I use > my own or don't use one at all, I get this error when I try and radpwtst: > > "jonz" authentication failed(RC=-1): Couldn't find server in > "/usr/local/etc/raddb/clients": "radius1.merit.edu" > > Which means it's apparently not finding an authfile or finding one > somewhere it shouldnt. How can I tell it to either 'just use the users > file' or 'use a specific authfile' ? This is a problem with the sample clients file we release (or used to) as part of our Merit AAA Server. I don't know why our clients file examples are coming up with an Ascend RADIUS server package (unless you forget to delete your configuration files and start over with the ones from Ascend!) The intention for our clients file is to comment out or remove the examples and use them to craft your own clients file entries. BTW the support mailing address for the Merit AAA Server is: aaa-support@merit.edu Regards, web... -- William Bulley Senior Systems Research Programmer Merit Network, Inc. Email: web@merit.edu 4251 Plymouth Road, Suite C Phone: (734) 764-9993 Ann Arbor, Michigan 48105-2785 Fax: (734) 647-3185 [ Reuters, London, February 29, 1998: Scientists have announced discovering ] [ a meteorite which will strike the earth in March, 2028. Millions of UNIX ] [ coders expressed relief for being spared the UNIX epoch "crisis" of 2038. ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 10:45:06 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA28176 for freebsd-isp-outgoing; Tue, 7 Apr 1998 10:45:06 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from gill.netrail.net (gill.netrail.net [205.215.10.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA28170 for ; Tue, 7 Apr 1998 10:45:04 -0700 (PDT) (envelope-from jonz@netrail.net) Received: from localhost (jonz@localhost) by gill.netrail.net (8.8.6/8.8.6) with SMTP id NAA05470; Tue, 7 Apr 1998 13:45:01 -0400 (EDT) Date: Tue, 7 Apr 1998 13:45:01 -0400 (EDT) From: "Jonathan A. Zdziarski" To: William Bulley cc: freebsd-isp@FreeBSD.ORG Subject: Re: Radius 970424 In-Reply-To: <199804071743.NAA25899@ohm.merit.edu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I did not, nor do I plan on purchasing the merit server; I'm talking about the ascend radius that comes with the freebsd package; Please stop pushing unsolicited email on me. Thank you, Jonathan A. Zdziarski Systems Administrator Netrail Incorporated 888-NETRAIL jonz@netrail.net On Tue, 7 Apr 1998, William Bulley wrote: :According to Jonathan A. Zdziarski: :> :> Just installed Ascend Radius 970424 and am having one problem; No authfile :> was provided with the package, so I experimented. No matter whether I use :> my own or don't use one at all, I get this error when I try and radpwtst: :> :> "jonz" authentication failed(RC=-1): Couldn't find server in :> "/usr/local/etc/raddb/clients": "radius1.merit.edu" :> :> Which means it's apparently not finding an authfile or finding one :> somewhere it shouldnt. How can I tell it to either 'just use the users :> file' or 'use a specific authfile' ? : :This is a problem with the sample clients file we release (or used to) :as part of our Merit AAA Server. : :I don't know why our clients file examples are coming up with an :Ascend RADIUS server package (unless you forget to delete your :configuration files and start over with the ones from Ascend!) : :The intention for our clients file is to comment out or remove :the examples and use them to craft your own clients file entries. : :BTW the support mailing address for the Merit AAA Server is: : : aaa-support@merit.edu : :Regards, : :web... : :-- :William Bulley Senior Systems Research Programmer :Merit Network, Inc. Email: web@merit.edu :4251 Plymouth Road, Suite C Phone: (734) 764-9993 :Ann Arbor, Michigan 48105-2785 Fax: (734) 647-3185 : :[ Reuters, London, February 29, 1998: Scientists have announced discovering ] :[ a meteorite which will strike the earth in March, 2028. Millions of UNIX ] :[ coders expressed relief for being spared the UNIX epoch "crisis" of 2038. ] : To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 11:11:29 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA03965 for freebsd-isp-outgoing; Tue, 7 Apr 1998 11:11:29 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from mail.capnet.state.tx.us (mail.capnet.state.tx.us [204.65.39.249]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA03959 for ; Tue, 7 Apr 1998 11:11:26 -0700 (PDT) (envelope-from Bryan.Bradsby@capnet.state.tx.us) Received: from mail.capnet.state.tx.us (mail.capnet.state.tx.us [204.65.39.249]) by mail.capnet.state.tx.us (8.8.8/8.8.8) with SMTP id NAA07419; Tue, 7 Apr 1998 13:15:47 -0500 (CDT) Date: Tue, 7 Apr 1998 13:15:47 -0500 (CDT) From: Bryan Bradsby To: "Jonathan A. Zdziarski" cc: William Bulley Subject: Re: Radius 970424 In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hey, cool it, Jonathan Mr Bulley didn't spam or UCE you. He tried to answer your question, within the guidelines (likely) imposed on him by the people who pay him. I am irritated that Merit decided to take the source code developed by a group of students and charge (what I consider to be) an exorbitant amount for an improved version. If you don't like the current situation, get together with some other BSD folks on this list and help develop a really good GPL BSD port of RADIUS. If you're not a coder, you can offer to test. -bryan -------- On Tue, 7 Apr 1998, Jonathan A. Zdziarski wrote: > I did not, nor do I plan on purchasing the merit server; I'm talking about > the ascend radius that comes with the freebsd package; Please stop > pushing unsolicited email on me. > > Thank you, > > Jonathan A. Zdziarski > Systems Administrator > Netrail Incorporated > 888-NETRAIL > jonz@netrail.net > > On Tue, 7 Apr 1998, William Bulley wrote: > > :According to Jonathan A. Zdziarski: > :> > :> Just installed Ascend Radius 970424 and am having one problem; No authfile > :> was provided with the package, so I experimented. No matter whether I use > :> my own or don't use one at all, I get this error when I try and radpwtst: > :> > :> "jonz" authentication failed(RC=-1): Couldn't find server in > :> "/usr/local/etc/raddb/clients": "radius1.merit.edu" > :> > :> Which means it's apparently not finding an authfile or finding one > :> somewhere it shouldnt. How can I tell it to either 'just use the users > :> file' or 'use a specific authfile' ? > : > :This is a problem with the sample clients file we release (or used to) > :as part of our Merit AAA Server. > : > :I don't know why our clients file examples are coming up with an > :Ascend RADIUS server package (unless you forget to delete your > :configuration files and start over with the ones from Ascend!) > : > :The intention for our clients file is to comment out or remove > :the examples and use them to craft your own clients file entries. > : > :BTW the support mailing address for the Merit AAA Server is: > : > : aaa-support@merit.edu > : > :Regards, > : > :web... > : > :-- > :William Bulley Senior Systems Research Programmer > :Merit Network, Inc. Email: web@merit.edu > :4251 Plymouth Road, Suite C Phone: (734) 764-9993 > :Ann Arbor, Michigan 48105-2785 Fax: (734) 647-3185 > : > :[ Reuters, London, February 29, 1998: Scientists have announced discovering ] > :[ a meteorite which will strike the earth in March, 2028. Millions of UNIX ] > :[ coders expressed relief for being spared the UNIX epoch "crisis" of 2038. ] > : > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 11:18:20 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA05930 for freebsd-isp-outgoing; Tue, 7 Apr 1998 11:18:20 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from gos.oz.cc.utah.edu (rpr1@gos.oz.cc.utah.edu [155.99.2.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA05924 for ; Tue, 7 Apr 1998 11:18:17 -0700 (PDT) (envelope-from R.Ricci@m.cc.utah.edu) Received: from localhost (rpr1@localhost) by gos.oz.cc.utah.edu (8.8.7/8.8.7) with SMTP id MAA25357 for ; Tue, 7 Apr 1998 12:18:13 -0600 (MDT) Date: Tue, 7 Apr 1998 12:18:12 -0600 (MDT) From: R Ricci X-Sender: rpr1@gos To: freebsd-isp@FreeBSD.ORG Subject: File Cleaning, WAS: Strange Network(?) problem Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Thanks to suggestions people have given me, it seems like the problems I reported earlier are not due to network errors, but instead to some kind of corruption of people's mail files, probably lots of null characters embedded in these files. I have just two more questions: 1) What could causes null characters to appear in these files? 2) Is there some way I could "filter" out these characters, with a perl script, or something? Thanks for all your help. Robert Ricci R.Ricci@m.cc.utah.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 11:46:38 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA13179 for freebsd-isp-outgoing; Tue, 7 Apr 1998 11:46:38 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from smtp.triax.com (smtp.triax.com [206.58.96.12]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA13171 for ; Tue, 7 Apr 1998 11:46:36 -0700 (PDT) (envelope-from joer@triax.com) Received: from joe.triax.com (joe.triax.com [206.58.99.200]) by smtp.triax.com (8.8.7/8.8.7) with SMTP id LAA29407; Tue, 7 Apr 1998 11:46:10 -0700 (PDT) Message-Id: <199804071846.LAA29407@smtp.triax.com> X-Sender: joer@mail.triax.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0 Date: Tue, 07 Apr 1998 11:43:30 -0700 To: Bryan Bradsby From: Joe Read Subject: Re: Radius 970424 Cc: freebsd-isp@FreeBSD.ORG In-Reply-To: References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 01:15 PM 4/7/98 -0500, you wrote: >If you don't like the current situation, get together with some other BSD >folks on this list and help develop a really good GPL BSD port of RADIUS. > >If you're not a coder, you can offer to test. I like that idea. I offer to test with a somewhat large user base if anyone's interested in developing a GPL port... Hmm.. Maybe MySQL support and NIS support... Joe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 12:00:30 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA15985 for freebsd-isp-outgoing; Tue, 7 Apr 1998 12:00:30 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from aldhfn.aldhfn.org (root@aldhfn.aldhfn.org [198.17.116.1]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA15907 for ; Tue, 7 Apr 1998 12:00:22 -0700 (PDT) (envelope-from ciaran@phoenix.aldhfn.org) Received: from phoenix (phoenix.aldhfn.org [198.17.116.15]) by aldhfn.aldhfn.org (8.8.8/8.8.8) with SMTP id OAA05143 for ; Tue, 7 Apr 1998 14:53:06 -0400 (EDT) (envelope-from ciaran@phoenix.aldhfn.org) Received: by phoenix.aldhfn.org (Amiga SMTPpost 1.04 December 9, 1994) id AA01; Tue, 7 Apr 98 14:59:52 EST From: ciaran@phoenix.aldhfn.org (Skip Watson) Message-Id: <261e0063.u8t20e.a2c38-ciaran@phoenix.aldhfn.org> Subject: Re: Radius 970424 In-Reply-To: (from Bryan Bradsby ) (at Tue, 7 Apr 1998 13:15:47 -0500 (CDT)) MIME-Version: 1.0 Content-Type: text/plain To: freebsd-isp@FreeBSD.ORG Date: Tue, 7 Apr 98 14:59:52 EST Organization: Auldhaefen Associates Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by hub.freebsd.org id MAA15956 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi Bryan (Bryan Bradsby), in on Apr 7 you wrote: [snip] > If you don't like the current situation, get together with some other BSD > folks on this list and help develop a really good GPL BSD port of RADIUS. > > If you're not a coder, you can offer to test. > > -bryan > -------- If it includes "simultaneous-use" and a daily session limit I'd be more than happy to test it ;-). Skip To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 12:09:56 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA18287 for freebsd-isp-outgoing; Tue, 7 Apr 1998 12:09:56 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from rocksalt.mui.net ([207.12.13.235]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA18267 for ; Tue, 7 Apr 1998 12:09:53 -0700 (PDT) (envelope-from ken@mui.net) From: ken@mui.net Received: from lihing.mui.net (lihing.mui.net [207.12.13.237]) by rocksalt.mui.net (8.8.8/8.8.7) with SMTP id JAA19411 for ; Tue, 7 Apr 1998 09:09:47 -1000 (HST) (envelope-from ken@mui.net) Message-Id: <199804071909.JAA19411@rocksalt.mui.net> Comments: Authenticated sender is To: freebsd-isp@FreeBSD.ORG Date: Tue, 7 Apr 1998 09:08:31 +0000 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Radius 970424 In-reply-to: <261e0063.u8t20e.a2c38-ciaran@phoenix.aldhfn.org> References: (from Bryan Bradsby ) (at Tue, 7 Apr 1998 13:15:47 -0500 (CDT)) X-mailer: Pegasus Mail for Win32 (v2.54) Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > Hi Bryan (Bryan Bradsby), in on Apr 7 you wrote: > > [snip] > > > If you don't like the current situation, get together with some other BSD > > folks on this list and help develop a really good GPL BSD port of RADIUS. > > > > If you're not a coder, you can offer to test. > > > > -bryan how about an offer to test and provide some documentation? since I have no concept of "radius", but will probably have to use it, I wouldn't mind doing a thing where as I go along, I write up various stuff about it. The best time for writing info is when you are a novice -- so I've been trying to do that with other bsd stuff. I'm offering. ken To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 13:27:08 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA04882 for freebsd-isp-outgoing; Tue, 7 Apr 1998 13:27:08 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from gill.netrail.net (gill.netrail.net [205.215.10.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA04862 for ; Tue, 7 Apr 1998 13:27:03 -0700 (PDT) (envelope-from jonz@netrail.net) Received: from localhost (jonz@localhost) by gill.netrail.net (8.8.6/8.8.6) with SMTP id QAA12739 for ; Tue, 7 Apr 1998 16:26:52 -0400 (EDT) Date: Tue, 7 Apr 1998 16:26:52 -0400 (EDT) From: "Jonathan A. Zdziarski" To: freebsd-isp@FreeBSD.ORG Subject: Unix-PW Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Is there any way to get ascend-radius to work w/Unix-PW? I noticed there's no authfile or anything to set it up with. I'd like to have the system use the users file for one realm and the password file for another realm, or have it check users, then fallback to the unix password file. Thank you, Jonathan A. Zdziarski Systems Administrator Netrail Incorporated 888-NETRAIL jonz@netrail.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 13:42:11 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA09457 for freebsd-isp-outgoing; Tue, 7 Apr 1998 13:42:11 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from smtp.plinet.com (root@flattened.plinet.com [206.168.149.8]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA09375 for ; Tue, 7 Apr 1998 13:42:04 -0700 (PDT) (envelope-from freebsd@plinet.com) Received: from system-admin (me.plinet.com [206.168.149.220]) by smtp.plinet.com (8.8.5/8.8.5) with SMTP id OAA25282; Tue, 7 Apr 1998 14:41:39 -0600 (envelope-from freebsd@plinet.com) Message-Id: <199804072041.OAA25282@smtp.plinet.com> X-Sender: freebsd@pop.plinet.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0 Date: Tue, 07 Apr 1998 14:43:02 -0600 To: "Jonathan A. Zdziarski" , freebsd-isp@FreeBSD.ORG From: Ben Schumacher Subject: Re: Unix-PW In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Did you try an entry like this: DEFAULT Password="UNIX" User-Service = Login-User, Login-Service = Telnet, Login-Host = server.domain.com This makes it so that anybody who is not in the RADIUS file gets compared against the Unix password file and if they are authenticated, they are automatically telnet'd to server.domain.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 14:35:02 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA22455 for freebsd-isp-outgoing; Tue, 7 Apr 1998 14:35:02 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from smtp.triax.com (smtp.triax.com [206.58.96.12]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA22439 for ; Tue, 7 Apr 1998 14:35:00 -0700 (PDT) (envelope-from jim@triax.com) Received: from admin.triax.com (jim.triax.com [206.58.99.205]) by smtp.triax.com (8.8.7/8.8.7) with SMTP id OAA00850 for ; Tue, 7 Apr 1998 14:35:01 -0700 (PDT) Message-Id: <199804072135.OAA00850@smtp.triax.com> X-Sender: jim@mail.triax.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0 Date: Tue, 07 Apr 1998 14:37:21 -0700 To: freebsd-isp@FreeBSD.ORG From: Jim Mock Subject: frontpage extension headache Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by hub.freebsd.org id OAA22440 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This one's got me stumped so I figured I'd see if anyone else has any ideas.. we've got multiple vhosts set up on one of our web servers with frontpage extensions working fine on all but one of them. The one that I'm having problems with is trying to read from we80.cnf instead of www.domain.com:80.cnf as the others do and I have NO idea why. I've installed/uninstalled the extensions about 20 times, upgraded them, chowned the web, rmuser'd the acct, deleted the vhost, rebooted the machine.. everything.. and I still get the same error message. If anyone has any help/info/advice/etc it'd be much appreciated.. I've been screwin around with this for 4 hrs today and I think it's starting to make me crazy. Thanks in advance.. Jim +===============================================+   Jim Mock | System Administrator | Webmaster   Triax Internet Services | Portland, OR  USA   e-Mail:  jim@triax.com | webmaster@triax.com   WWW:  http://www.triax.com/   Phone: (503)403-4311 | Fax: (503)403-4317 +===============================================+   Love is composed of a single soul inhabiting   two bodies. --Aristotle +===============================================+ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 16:47:17 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id QAA21846 for freebsd-isp-outgoing; Tue, 7 Apr 1998 16:47:17 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from allegro.lemis.com (allegro.lemis.com [192.109.197.134]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id QAA21838 for ; Tue, 7 Apr 1998 16:47:14 -0700 (PDT) (envelope-from grog@lemis.com) Received: from freebie.lemis.com (freebie.lemis.com [192.109.197.137]) by allegro.lemis.com (8.8.7/8.8.5) with ESMTP id JAA13426; Wed, 8 Apr 1998 09:16:56 +0930 (CST) Received: (from grog@localhost) by freebie.lemis.com (8.8.8/8.8.7) id JAA10687; Wed, 8 Apr 1998 09:16:55 +0930 (CST) (envelope-from grog) Message-ID: <19980408091654.32792@freebie.lemis.com> Date: Wed, 8 Apr 1998 09:16:54 +0930 From: Greg Lehey To: Jay Tribick , freebsd-isp@FreeBSD.ORG Subject: Re: Virus checking e-mail attachments References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.89i In-Reply-To: ; from Jay Tribick on Tue, Apr 07, 1998 at 04:08:29PM +0100 WWW-Home-Page: http://www.lemis.com/~grog Organization: LEMIS, PO Box 460, Echunga SA 5153, Australia Phone: +61-8-8388-8286 Fax: +61-8-8388-8725 Mobile: +61-41-739-7062 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 7 April 1998 at 16:08:29 +0100, Jay Tribick wrote: > > Hi > > There seems to be a lot of products available for Windoze NT etc. that > run on a mail server and scan e-mails (or their attachments) for > viruses. > > Is their anything available for FreeBSD that does this (or any > other flavour of UN*X) ? No. What would it do? I don't know of any UNIX viruses. Greg To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Apr 7 16:55:46 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id QAA23749 for freebsd-isp-outgoing; Tue, 7 Apr 1998 16:55:46 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from super-g.inch.com (super-g.com [207.240.140.161]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id QAA23720 for ; Tue, 7 Apr 1998 16:55:43 -0700 (PDT) (envelope-from spork@super-g.com) Received: from localhost (localhost [127.0.0.1]) by super-g.inch.com (8.8.8/8.8.5) with SMTP id TAA29789; Tue, 7 Apr 1998 19:53:31 -0400 (EDT) Date: Tue, 7 Apr 1998 19:53:30 -0400 (EDT) From: spork X-Sender: spork@super-g.inch.com To: "Jonathan A. Zdziarski" cc: William Bulley , freebsd-isp@FreeBSD.ORG Subject: Re: Radius 970424 In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Merit AAA is free for the taking, and they do solicit requests for help on the free version as well as the "enhanced" one. Take it easy on Mr. Bulley, he's a programmer, not a suit. Charles Sprickman spork@super-g.com ---- "I'm not a prophet or a stone-age man Just a mortal with potential of a superman I'm living on" -DB On Tue, 7 Apr 1998, Jonathan A. Zdziarski wrote: > I did not, nor do I plan on purchasing the merit server; I'm talking about > the ascend radius that comes with the freebsd package; Please stop > pushing unsolicited email on me. > > Thank you, > > Jonathan A. Zdziarski > Systems Administrator > Netrail Incorporated > 888-NETRAIL > jonz@netrail.net > > On Tue, 7 Apr 1998, William Bulley wrote: > > :According to Jonathan A. Zdziarski: > :> > :> Just installed Ascend Radius 970424 and am having one problem; No authfile > :> was provided with the package, so I experimented. No matter whether I use > :> my own or don't use one at all, I get this error when I try and radpwtst: > :> > :> "jonz" authentication failed(RC=-1): Couldn't find server in > :> "/usr/local/etc/raddb/clients": "radius1.merit.edu" > :> > :> Which means it's apparently not finding an authfile or finding one > :> somewhere it shouldnt. How can I tell it to either 'just use the users > :> file' or 'use a specific authfile' ? > : > :This is a problem with the sample clients file we release (or used to) > :as part of our Merit AAA Server. > : > :I don't know why our clients file examples are coming up with an > :Ascend RADIUS server package (unless you forget to delete your > :configuration files and start over with the ones from Ascend!) > : > :The intention for our clients file is to comment out or remove > :the examples and use them to craft your own clients file entries. > : > :BTW the support mailing address for the Merit AAA Server is: > : > : aaa-support@merit.edu > : > :Regards, > : > :web... > : > :-- > :William Bulley Senior Systems Research Programmer > :Merit Network, Inc. Email: web@merit.edu > :4251 Plymouth Road, Suite C Phone: (734) 764-9993 > :Ann Arbor, Michigan 48105-2785 Fax: (734) 647-3185 > : > :[ Reuters, London, February 29, 1998: Scientists have announced discovering ] > :[ a meteorite which will strike the earth in March, 2028. Millions of UNIX ] > :[ coders expressed relief for being spared the UNIX epoch "crisis" of 2038. ] > : > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 01:18:18 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id BAA15826 for freebsd-isp-outgoing; Wed, 8 Apr 1998 01:18:18 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from gras-varg.worldgate.com (skafte@gras-varg.worldgate.com [198.161.84.12]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA15616 for ; Wed, 8 Apr 1998 01:16:53 -0700 (PDT) (envelope-from skafte@worldgate.com) Received: (from skafte@localhost) by gras-varg.worldgate.com (8.8.8/8.6.12) id CAA11465; Wed, 8 Apr 1998 02:16:51 -0600 (MDT) Message-ID: <19980408021650.34468@worldgate.com> Date: Wed, 8 Apr 1998 02:16:50 -0600 From: Greg Skafte To: Anthony Barlow Cc: "'freebsd-isp@freebsd.org'" Subject: Re: Bandwidth limiter for services? References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.88 In-Reply-To: ; from Anthony Barlow on Mon, Apr 06, 1998 at 04:48:10PM +0100 Organization: WorldGate Inc. X-PGP-Fingerprint: 42 9C 2C A8 4D 2B C9 C4 7D B6 00 B0 50 47 20 97 X-URL: http://gras-varg.worldgate.com/~skafte Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org there is a "free"ish product called Altq a new version was released and a notice was in one of the other freebsd lists .... search the archive .... Quoting Anthony Barlow (Anthony.Barlow@europe.simoco.com) On Subject: Bandwidth limiter for services? Date: Mon, Apr 06, 1998 at 04:48:10PM +0100 > Hi everyone > > Is there any software/hardware that will allow me to limit the bandwith > that a partiuclar service users. We currently have a slow 128Kb link > linking our Cambridge office to our Derby office and we would like to > limit the bandwidth that people use for web browsing. - Can it be done > without affecting any other services? > > Regards, > Anthony > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message -- Email: skafte@worldgate.com Voice: +403 413 1910 Fax: +403 421 4929 #575 Sun Life Place * 10123 99 Street * Edmonton, AB * Canada * T5J 3H1 -- -- When things can't get any worse, they simplify themselves by getting a whole lot worse then complicated. A complete and utter disaster is the simplest thing in the world; it's preventing one that's complex. (Janet Morris) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 01:44:16 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id BAA21714 for freebsd-isp-outgoing; Wed, 8 Apr 1998 01:44:16 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from ns0.fast.net.uk (ns0.fast.net.uk [194.207.104.1]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA21708 for ; Wed, 8 Apr 1998 01:44:13 -0700 (PDT) (envelope-from netadmin@fastnet.co.uk) Received: from ns0.fast.net.uk (ns0.fast.net.uk [194.207.104.1]) by ns0.fast.net.uk (8.8.8/8.8.7) with SMTP id JAA14411; Wed, 8 Apr 1998 09:40:45 +0100 (BST) Date: Wed, 8 Apr 1998 09:40:45 +0100 (BST) From: Jay Tribick X-Sender: netadmin@ns0.fast.net.uk To: Greg Lehey cc: freebsd-isp@FreeBSD.ORG Subject: Re: Virus checking e-mail attachments In-Reply-To: <19980408091654.32792@freebie.lemis.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi | > There seems to be a lot of products available for Windoze NT etc. that | > run on a mail server and scan e-mails (or their attachments) for | > viruses. | > | > Is their anything available for FreeBSD that does this (or any | > other flavour of UN*X) ? | | No. What would it do? I don't know of any UNIX viruses. I don't mean scanning for UN*X viruses, I mean scanning people's e-mails for any Windows 95 / DOS viruses etc. Basically so that people who pick up their mail from us have the reassurances that their e-mail attachments don't contain viruses. Their are products available for NT that do this so I don't see why UN*X wouldn't have a product that does this. Jay Tribick | Network Administrator FastNet International Ltd | http://www.fastnet.co.uk/ PGP Key Available | Finger netadmin@fastnet.co.uk : Tel: +44 (0)1273 677633 . Fax: +44 (0)1273 621631 FastNet International Ltd - The User-Friendly Internet Provider To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 01:57:07 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id BAA23637 for freebsd-isp-outgoing; Wed, 8 Apr 1998 01:57:07 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from ultra.ultra.net.au (avatar@ultra.ultra.net.au [203.20.237.5]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA23627 for ; Wed, 8 Apr 1998 01:57:02 -0700 (PDT) (envelope-from avatar@ultra.ultra.net.au) Received: from localhost (avatar@localhost) by ultra.ultra.net.au (8.8.8/8.8.8) with SMTP id TAA10393; Wed, 8 Apr 1998 19:02:08 +1000 (EST) Date: Wed, 8 Apr 1998 19:02:08 +1000 (EST) From: Karl Hanmore To: Jay Tribick cc: Greg Lehey , freebsd-isp@FreeBSD.ORG Subject: Re: Virus checking e-mail attachments In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org G'day, I am probably stateing the obvious here, but in the Security section of the ports collection there is vscan-1.0.2, which will scan files. If you wanted to, you could probably write a script to un-mime or un-uuencode files from email, and then check them. Sure seems like lot of effort, but hey.... Regards, Karl ********************************************************** * Karl Hanmore * #include * * avatar@ultra.net.au * * ********************************************************** * Insanity is a perfectly rational adaptation to an * * insane world. * ********************************************************** On Wed, 8 Apr 1998, Jay Tribick wrote: > > Hi > > | > There seems to be a lot of products available for Windoze NT etc. that > | > run on a mail server and scan e-mails (or their attachments) for > | > viruses. > | > > | > Is their anything available for FreeBSD that does this (or any > | > other flavour of UN*X) ? > | > | No. What would it do? I don't know of any UNIX viruses. > > I don't mean scanning for UN*X viruses, I mean scanning people's > e-mails for any Windows 95 / DOS viruses etc. Basically so that > people who pick up their mail from us have the reassurances that > their e-mail attachments don't contain viruses. Their are > products available for NT that do this so I don't see why > UN*X wouldn't have a product that does this. > > Jay Tribick | Network Administrator > FastNet International Ltd | http://www.fastnet.co.uk/ > PGP Key Available | Finger netadmin@fastnet.co.uk > : > Tel: +44 (0)1273 677633 . Fax: +44 (0)1273 621631 > FastNet International Ltd - The User-Friendly Internet Provider > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 01:59:18 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id BAA24059 for freebsd-isp-outgoing; Wed, 8 Apr 1998 01:59:18 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from ns0.fast.net.uk (ns0.fast.net.uk [194.207.104.1]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA24038 for ; Wed, 8 Apr 1998 01:59:16 -0700 (PDT) (envelope-from netadmin@fastnet.co.uk) Received: from ns0.fast.net.uk (ns0.fast.net.uk [194.207.104.1]) by ns0.fast.net.uk (8.8.8/8.8.7) with SMTP id JAA21452 for ; Wed, 8 Apr 1998 09:56:39 +0100 (BST) Date: Wed, 8 Apr 1998 09:56:39 +0100 (BST) From: Jay Tribick X-Sender: netadmin@ns0.fast.net.uk To: freebsd-isp@FreeBSD.ORG Subject: Re: Virus checking e-mail attachments Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org | > There seems to be a lot of products available for Windoze NT etc. that | > run on a mail server and scan e-mails (or their attachments) for | > viruses. | > | > Is their anything available for FreeBSD that does this (or any | > other flavour of UN*X) ? | > | > What I'm looking for is something that, if it detects a virus can | > encapsulate an e-mail and warn the user that they should check it. | | McAffee has a version of VirusScan for Linux and Solaris.. If you wrote a | script to take each mail spool file and unencode the attachments, you | could scan them. Unfortunately, you can't just scan the spool itself, | you have to scan the binary itself. It just uses the same virus files | that the PC version have, so it will only protect you from PC viruses. Trouble is, a lot of people send attachments mime encoded and theres no simple way to decode it (correct me if i'm wrong..) I know the package your talking about and I have actually used it on another machine but I was looking more for a dedicated solution - writing my own isn't a problem, it's just a pain in the ass and I'd prefer to just buy a dedicated solution. | Food for thought.. Yummy.. ;) Jay Tribick | Network Administrator FastNet International Ltd | http://www.fastnet.co.uk/ PGP Key Available | Finger netadmin@fastnet.co.uk : Tel: +44 (0)1273 677633 . Fax: +44 (0)1273 621631 FastNet International Ltd - The User-Friendly Internet Provider To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 02:08:20 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id CAA25212 for freebsd-isp-outgoing; Wed, 8 Apr 1998 02:08:20 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from ultra.ultra.net.au (avatar@ultra.ultra.net.au [203.20.237.5]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id CAA25207 for ; Wed, 8 Apr 1998 02:08:16 -0700 (PDT) (envelope-from avatar@ultra.ultra.net.au) Received: from localhost (avatar@localhost) by ultra.ultra.net.au (8.8.8/8.8.8) with SMTP id TAA11034; Wed, 8 Apr 1998 19:13:32 +1000 (EST) Date: Wed, 8 Apr 1998 19:13:32 +1000 (EST) From: Karl Hanmore To: Jay Tribick cc: freebsd-isp@FreeBSD.ORG Subject: Re: Virus checking e-mail attachments In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi Jay, Correction forthcomming :) Try mimencode, you will have to hunt for it probably, we have it on our BSDi system here, but I suspect it was sourced from archie or FreeBSD :) Regards, Karl ********************************************************** * Karl Hanmore * #include * * avatar@ultra.net.au * * ********************************************************** * Insanity is a perfectly rational adaptation to an * * insane world. * ********************************************************** On Wed, 8 Apr 1998, Jay Tribick wrote: > > | > There seems to be a lot of products available for Windoze NT etc. that > | > run on a mail server and scan e-mails (or their attachments) for > | > viruses. > | > > | > Is their anything available for FreeBSD that does this (or any > | > other flavour of UN*X) ? > | > > | > What I'm looking for is something that, if it detects a virus can > | > encapsulate an e-mail and warn the user that they should check it. > | > | McAffee has a version of VirusScan for Linux and Solaris.. If you wrote a > | script to take each mail spool file and unencode the attachments, you > | could scan them. Unfortunately, you can't just scan the spool itself, > | you have to scan the binary itself. It just uses the same virus files > | that the PC version have, so it will only protect you from PC viruses. > > Trouble is, a lot of people send attachments mime encoded and theres > no simple way to decode it (correct me if i'm wrong..) > > I know the package your talking about and I have actually used it > on another machine but I was looking more for a dedicated solution - > writing my own isn't a problem, it's just a pain in the ass and I'd > prefer to just buy a dedicated solution. > > | Food for thought.. > > Yummy.. ;) > > Jay Tribick | Network Administrator > FastNet International Ltd | http://www.fastnet.co.uk/ > PGP Key Available | Finger netadmin@fastnet.co.uk > : > Tel: +44 (0)1273 677633 . Fax: +44 (0)1273 621631 > FastNet International Ltd - The User-Friendly Internet Provider > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 05:11:26 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id FAA23054 for freebsd-isp-outgoing; Wed, 8 Apr 1998 05:11:26 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from Radford.i-Plus.net (root@NS.i-Plus.net [208.24.67.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id FAA23049 for ; Wed, 8 Apr 1998 05:11:23 -0700 (PDT) (envelope-from rewt@i-Plus.net) Received: from abyss (old@b.nu [208.24.67.58]) by Radford.i-Plus.net (8.8.8/8.8.5) with SMTP id IAA11398; Wed, 8 Apr 1998 08:11:01 -0400 (EDT) Message-ID: <01b701bd62e8$593cbf50$3a4318d0@abyss.b.nu> From: "Troy Settle" To: "Jonathan A. Zdziarski" , Subject: Re: Unix-PW Date: Wed, 8 Apr 1998 08:17:49 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Johnathan: It seems that you are indeed having a hellish time with Radius. I don't know how hacked up the FreeBSD port is, as I'm using my own hacked up version of Ascend's Radius, but here's what works for me: In the clients file: 10.0.0.1 SharedKeyPasswordThingie In the users file: DEFAULT Password="UNIX" Framed-Protocol=PPP , Framed-Routing=None , Ascend-Maximum-Time=28800 , Ascend-Idle-Limit=1800 , Ascend-Assign-IP-Pool=1 , Ascend-Menu-Item="rlogin 10.0.0.15;Change Password" , Ascend-Menu-Item="ppp;Start PPP" , Ascend-Menu-Item="telnet 10.0.0.13;Unix Shell" , Ascend-Menu-Item="quit;Logout" , Ascend-Menu-Selector=" Option: " Of course, I have the authtype in my maxen set to PAP, which makes it so that almost nobody ever needs that menu, but it makes it nice for anyone who wants a scripted login (trumpet winsock, some unix weenies, etc). -- Troy Settle Network Administrator, iPlus Internet Services http://www.i-Plus.net -----Original Message----- From: Jonathan A. Zdziarski To: freebsd-isp@FreeBSD.ORG Date: Tuesday, April 07, 1998 4:35 PM Subject: Unix-PW >Is there any way to get ascend-radius to work w/Unix-PW? I noticed >there's no authfile or anything to set it up with. I'd like to have the >system use the users file for one realm and the password file for another >realm, or have it check users, then fallback to the unix password file. > >Thank you, > >Jonathan A. Zdziarski >Systems Administrator >Netrail Incorporated >888-NETRAIL >jonz@netrail.net > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 05:29:15 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id FAA26443 for freebsd-isp-outgoing; Wed, 8 Apr 1998 05:29:15 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from Radford.i-Plus.net (root@NS.i-Plus.net [208.24.67.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id FAA26437 for ; Wed, 8 Apr 1998 05:29:11 -0700 (PDT) (envelope-from rewt@i-Plus.net) Received: from abyss (old@b.nu [208.24.67.58]) by Radford.i-Plus.net (8.8.8/8.8.5) with SMTP id IAA11743 for ; Wed, 8 Apr 1998 08:29:02 -0400 (EDT) Message-ID: <01c201bd62ea$dd3836c0$3a4318d0@abyss.b.nu> From: "Troy Settle" To: "(ML) FreeBSD ISP" Subject: Re: Radius 970424 Date: Wed, 8 Apr 1998 08:35:50 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org From: Joe Read >At 01:15 PM 4/7/98 -0500, you wrote: >>If you don't like the current situation, get together with some other BSD >>folks on this list and help develop a really good GPL BSD port of RADIUS. >> >>If you're not a coder, you can offer to test. > >I like that idea. I offer to test with a somewhat large user base if anyone's >interested in developing a GPL port... Hmm.. Maybe MySQL support and >NIS support... NIS support is already there, ala whatever library functions handle that sort of thing, at least the Ascend radius I use doesn't try to take /etc/*passwd on it's own. There is a patch for logging to MySQL already, having radius authenticate against MySQL would be nice too. I've often thought about how nice it would be to have an enhanced radius server available. Unfortunately, I don't have the coding skills, or the time needed to figure it all out. Anyone out there looking for a project? Other nice features, would include: * group authentication (I've hardcoded my radius to deny logins to members of certain groups already) * authentication times - useful for setting up a 9-5 account or similar. * ability to detect and deny multiple logins * authentication against an SQL database * radius proxy * ability to provide auth services for a unix machine, serving up passwd information. Would work like NIS or some such, requiring modifications to the current password authentication stuff. -- Troy Settle Network Administrator, iPlus Internet Services http://www.i-Plus.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 07:03:19 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA06094 for freebsd-isp-outgoing; Wed, 8 Apr 1998 07:03:19 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from rfcnet.com (mattc@[207.227.20.207]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA06082 for ; Wed, 8 Apr 1998 07:03:15 -0700 (PDT) (envelope-from mattc@rfcnet.com) Received: (from mattc@localhost) by rfcnet.com (8.8.8/8.8.8) id JAA23949; Wed, 8 Apr 1998 09:03:08 -0500 (CDT) (envelope-from mattc) Message-ID: <19980408090308.47020@rfcnet.com> Date: Wed, 8 Apr 1998 09:03:08 -0500 From: Matthew Cashdollar To: freebsd-isp@FreeBSD.ORG Subject: Re: =?iso-8859-1?Q?R=E9p_=3A_Virus_checking_e-mail_attachments?= References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.89i In-Reply-To: ; from THIERRY.HERBELOT@telspace.alcatel.fr on Tue, Apr 07, 1998 at 06:08:36PM +0200 x-no-archive: yes Organization: RF Communications, Inc. http://www.rfcinc.com Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, Apr 07, 1998 at 06:08:36PM +0200, THIERRY.HERBELOT@telspace.alcatel.fr wrote: > hello > > If I remember correctly, there was such an extension for the > Firewall-1 product from Checkpoint (ckeck it on www.checkpoint.com) The NT version of this product is very slow and somewhat unstable-- I would recommend avoiding it at all costs :) There is a Solaris version which is supposed to be better but that is probably only because the Sparc is faster. Also, it is commercialware. > > There has been recently (I can't find the refernce now) a merger > beetween a firewall company and a virus checking company ("total > security solutions") > > All depends on the quality of the virus database (and the marketing > hype to sell it) > You might be able to do something with VirusScan (/usr/ports/security/vscan).. get sendmail to invoke it on incoming messages or something like that. VirusScan scans for most DOS/Windows viruses. -- Matthew Cashdollar /|\ RF Communications, Inc. -- http://www.rfcinc.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 07:04:21 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA06318 for freebsd-isp-outgoing; Wed, 8 Apr 1998 07:04:21 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from freefall.pipeline.ch (freefall.pipeline.ch [195.134.128.40]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA06303 for ; Wed, 8 Apr 1998 07:04:16 -0700 (PDT) (envelope-from andre@pipeline.ch) Received: from pipeline.ch ([195.134.128.41]) by freefall.pipeline.ch (Netscape Mail Server v2.02) with ESMTP id AAA345 for ; Wed, 8 Apr 1998 16:02:40 +0200 Message-ID: <352B8396.92B325D2@pipeline.ch> Date: Wed, 08 Apr 1998 16:03:02 +0200 From: "IBS / Andre Oppermann" Organization: Internet Business Solutions Ltd. (AG) X-Mailer: Mozilla 4.03 [en] (WinNT; U) MIME-Version: 1.0 To: "freebsd-isp@FreeBSD.ORG" Subject: TCP slow start bug in FreeBSD? Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Is this still true for FreeBSD 2.2.x or 3.0? http://www.sun.com/sun-on-net/performance/tcp.slowstart.html -- Andre Oppermann CEO / Geschaeftsfuehrer Internet Business Solutions Ltd. (AG) Hardstrasse 235, 8005 Zurich, Switzerland Fon +41 1 277 75 75 / Fax +41 1 277 75 77 http://www.pipeline.ch ibs@pipeline.ch To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 07:26:46 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA09471 for freebsd-isp-outgoing; Wed, 8 Apr 1998 07:26:46 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from mailgate22.a001.sprintmail.com (mailgate22-hme0.a001.sprintmail.com [205.137.196.54]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id HAA09464 for ; Wed, 8 Apr 1998 07:26:44 -0700 (PDT) (envelope-from bminazzi@w3page.com) Received: by mailgate22.a001.sprintmail.com (SMI-8.6/SMI-SVR4) id HAA28169; Wed, 8 Apr 1998 07:26:06 -0700 X-Complaints-To: abuse@sprintmail.com Received: from sdn-ts-007coaurop07.dialsprint.net(206.133.160.122) by mailfep3-hme1 via dsmap-1.22 id Q_10.1.1.8/Q_25051_1_352b88c6; Wed, 8 Apr 1998 07:25:10 -0700 Message-ID: <352B8952.6708877E@w3page.com> Date: Wed, 08 Apr 1998 08:27:30 -0600 From: Blaine Minazzi Organization: What, me organized? X-Mailer: Mozilla 3.01 (X11; I; Linux 2.0.32 i486) MIME-Version: 1.0 To: isp@FreeBSD.ORG Subject: Re: Virus checking e-mail attachments References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Nice Idea on the surface, but I can see a potential problem. 1: It encourages the end user to be lax. I don't need to scan for viruses... My ISP does it for me. _IM PROTECTED_. 2: So when your whizbang virus scanning program misses one, then you end up taking blame for not catching the thing in the first place. 3: Misunderstanding of the software. User downloads a file from net, and gets virus... _ HEY! YOU SAID YOU SCANNED FOR VIRUSES, I GOT ONE, AND IT'S YOUR FAULT! ( Some users just don't see a difference between FTP, e-mail, or anything else.... to them, its just "internet". ) Yeah, I know that all this really should fall to the end user, but in todays world, everyone blames everyone else. Methinks it would be better to teach people to be responsible for their own security. Simply make recommendations as to basic security precautions that end users might want to consider. The Winblows system will have the same failing, because the problem is mostly in human nature, not a lack of technology. Anyway, just my random opine... Blaine To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 08:41:09 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA23294 for freebsd-isp-outgoing; Wed, 8 Apr 1998 08:41:09 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from merit.edu (merit.edu [198.108.1.42]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA23285 for ; Wed, 8 Apr 1998 08:41:06 -0700 (PDT) (envelope-from web@merit.edu) Received: from ohm.merit.edu (ohm.merit.edu [198.108.60.65]) by merit.edu (8.8.7/8.8.5) with ESMTP id LAA22504; Wed, 8 Apr 1998 11:41:01 -0400 (EDT) From: William Bulley Received: (web@localhost) by ohm.merit.edu (8.6.9/8.6.5) id LAA27373; Wed, 8 Apr 1998 11:42:09 -0400 Message-Id: <199804081542.LAA27373@ohm.merit.edu> Subject: Re: Radius 970424 To: jonz@netrail.net (Jonathan A. Zdziarski) Date: Wed, 8 Apr 1998 11:42:08 -0400 (EDT) Cc: freebsd-isp@FreeBSD.ORG In-Reply-To: from "Jonathan A. Zdziarski" at Apr 7, 98 01:45:01 pm X-Mailer: ELM [version 2.4 PL25] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org According to Jonathan A. Zdziarski: > > I did not, nor do I plan on purchasing the merit server; I'm talking about > the ascend radius that comes with the freebsd package; Please stop > pushing unsolicited email on me. I think you have mis-understood me. I am not trying to sell you anything -- I am trying to help you! :-) You asked the list about a problem which was uniquely Merit related (see below). I was the logical person to answer the question since I know a little bit about this stuff... ;^) We have always had (for as long as I've been here) a freely available version of the Merit AAA Server (which I believe is where you started) and this has been the case for the past four years and it will continue. Your second problem (seemingly Ascend RADIUS related) was still worth my answering since you were complaining about the message which stated something like "radius1.merit.edu not found". There is only one piece of code in the entire world with that string built into it and that is our radpwtst utility. Not Ascend's, but Merit's. If you forget to include the "-s host" option on the radpwtst command, you may end up with this message, since radpwtst assumes radius1.merit.edu when you omit the -s option. I've only been trying to be helpful, and you seem to be asking me to stop trying to help you. So, okay, if that's the way you want it, I'm sorry to have bothered you. Regards, web... -- William Bulley Senior Systems Research Programmer Merit Network, Inc. Email: web@merit.edu 4251 Plymouth Road, Suite C Phone: (734) 764-9993 Ann Arbor, Michigan 48105-2785 Fax: (734) 647-3185 [ Reuters, London, February 29, 1998: Scientists have announced discovering ] [ a meteorite which will strike the earth in March, 2028. Millions of UNIX ] [ coders expressed relief for being spared the UNIX epoch "crisis" of 2038. ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 09:14:08 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA29652 for freebsd-isp-outgoing; Wed, 8 Apr 1998 09:14:08 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from merit.edu (merit.edu [198.108.1.42]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA29647 for ; Wed, 8 Apr 1998 09:14:06 -0700 (PDT) (envelope-from web@merit.edu) Received: from ohm.merit.edu (ohm.merit.edu [198.108.60.65]) by merit.edu (8.8.7/8.8.5) with ESMTP id MAA23212; Wed, 8 Apr 1998 12:14:04 -0400 (EDT) From: William Bulley Received: (web@localhost) by ohm.merit.edu (8.6.9/8.6.5) id MAA27630; Wed, 8 Apr 1998 12:15:11 -0400 Message-Id: <199804081615.MAA27630@ohm.merit.edu> Subject: Re: Unix-PW To: jonz@netrail.net (Jonathan A. Zdziarski) Date: Wed, 8 Apr 1998 12:15:11 -0400 (EDT) Cc: freebsd-isp@FreeBSD.ORG In-Reply-To: from "Jonathan A. Zdziarski" at Apr 7, 98 04:26:52 pm X-Mailer: ELM [version 2.4 PL25] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org According to Jonathan A. Zdziarski: > > Is there any way to get ascend-radius to work w/Unix-PW? I noticed > there's no authfile or anything to set it up with. I'd like to have the > system use the users file for one realm and the password file for another > realm, or have it check users, then fallback to the unix password file. I don't believe that older version of Ascend's RADIUS server has any concept of realms. That concept is unique to the Merit AAA Server. The Merit AAA Server was NOT written by any "group of students" BTW! :-) Regards, web... -- William Bulley Senior Systems Research Programmer Merit Network, Inc. Email: web@merit.edu 4251 Plymouth Road, Suite C Phone: (734) 764-9993 Ann Arbor, Michigan 48105-2785 Fax: (734) 647-3185 [ Reuters, London, February 29, 1998: Scientists have announced discovering ] [ a meteorite which will strike the earth in March, 2028. Millions of UNIX ] [ coders expressed relief for being spared the UNIX epoch "crisis" of 2038. ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 09:28:30 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA04236 for freebsd-isp-outgoing; Wed, 8 Apr 1998 09:28:30 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from merit.edu (merit.edu [198.108.1.42]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA04221 for ; Wed, 8 Apr 1998 09:28:18 -0700 (PDT) (envelope-from web@merit.edu) Received: from ohm.merit.edu (ohm.merit.edu [198.108.60.65]) by merit.edu (8.8.7/8.8.5) with ESMTP id MAA23428; Wed, 8 Apr 1998 12:28:13 -0400 (EDT) From: William Bulley Received: (web@localhost) by ohm.merit.edu (8.6.9/8.6.5) id MAA27714; Wed, 8 Apr 1998 12:29:21 -0400 Message-Id: <199804081629.MAA27714@ohm.merit.edu> Subject: Re: Radius 970424 To: spork@super-g.com (spork) Date: Wed, 8 Apr 1998 12:29:21 -0400 (EDT) Cc: jonz@netrail.net, freebsd-isp@FreeBSD.ORG In-Reply-To: from "spork" at Apr 7, 98 07:53:30 pm X-Mailer: ELM [version 2.4 PL25] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org According to spork: > > Merit AAA is free for the taking, and they do solicit requests for help on > the free version as well as the "enhanced" one. Take it easy on Mr. > Bulley, he's a programmer, not a suit. Thank you! :-) I have worn a suit maybe once in the last six years (at some job interview, perhaps)... ;^) Regards, web... -- William Bulley Senior Systems Research Programmer Merit Network, Inc. Email: web@merit.edu 4251 Plymouth Road, Suite C Phone: (734) 764-9993 Ann Arbor, Michigan 48105-2785 Fax: (734) 647-3185 [ Reuters, London, February 29, 1998: Scientists have announced discovering ] [ a meteorite which will strike the earth in March, 2028. Millions of UNIX ] [ coders expressed relief for being spared the UNIX epoch "crisis" of 2038. ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 10:09:21 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA13138 for freebsd-isp-outgoing; Wed, 8 Apr 1998 10:09:21 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from alcatel.fr (news.alcatel.fr [194.133.58.131]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA13122 for ; Wed, 8 Apr 1998 10:09:12 -0700 (PDT) (envelope-from THIERRY.HERBELOT@telspace.alcatel.fr) From: THIERRY.HERBELOT@telspace.alcatel.fr Received: from alcatel.fr (gatekeeper-ssn.alcatel.fr [155.132.180.244]) by mailgate.alcatel.fr (ALCANET/SMTP.9.9.9) with ESMTP id TAA09101; Wed, 8 Apr 1998 19:12:55 +0200 Received: from aifhs1.alcatel.fr (aifhs1.alcatel.fr [155.132.180.86]) by aifhs2.alcatel.fr (ALCANET/SMTP2) with ESMTP id TAA20219; Wed, 8 Apr 1998 19:04:16 +0200 (MET DST) Received: from aifhs2.alcatel.fr (localhost [127.0.0.1]) by aifhs1.alcatel.fr (8.8.8/8.8.8) with ESMTP id TAA20036; Wed, 8 Apr 1998 19:06:17 +0200 (MET DST) Received: from lune.telspace.alcatel.fr (lune.telspace.alcatel.fr [155.132.144.65]) by aifhs2.alcatel.fr (ALCANET/SMTP2) with ESMTP id TAA20210; Wed, 8 Apr 1998 19:04:14 +0200 (MET DST) Received: from telss1 (telss1.telspace.alcatel.fr [155.132.51.4]) by lune.telspace.alcatel.fr (8.7.6/8.7.3) with SMTP id SAA27069; Wed, 8 Apr 1998 18:04:08 +0200 (MET DST) Received: from eole.telspace.alcatel.fr by telss1 (4.1/SMI-4.1) id AA22262; Wed, 8 Apr 98 17:54:30 +0200 Received: from localhost by eole.telspace.alcatel.fr with SMTP (1.40.112.12/16.2) id AA239690720; Wed, 8 Apr 1998 17:52:00 +0200 X-Openmail-Hops: 1 Date: Wed, 8 Apr 98 17:51:49 +0200 Message-Id: In-Reply-To: <352B8952.6708877E@w3page.com> Subject: =?ISO-8859-1?Q?R=E9p_:_Re:_Virus_checking_e-mail_attachments?= Mime-Version: 1.0 To: bminazzi@w3page.com Cc: isp@FreeBSD.ORG Content-Type: text/plain; charset=ISO-8859-1; name="Re:" Content-Disposition: inline; filename="Re:" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by hub.freebsd.org id KAA13132 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org So, go to more secure option : let's use a normal Operating System (FreeBSD or even Linux) running programs as a non-privileged user : let's kill Lose95 TfH ____________________________ Séparateur Réponse ________________________________ Objet : Re: Virus checking e-mail attachments Auteur : bminazzi@w3page.com Date : 08/04/98 16:27 Nice Idea on the surface, but I can see a potential problem. 1: It encourages the end user to be lax. I don't need to scan for viruses... My ISP does it for me. _IM PROTECTED_. 2: So when your whizbang virus scanning program misses one, then you end up taking blame for not catching the thing in the first place. 3: Misunderstanding of the software. User downloads a file from net, and gets virus... _ HEY! YOU SAID YOU SCANNED FOR VIRUSES, I GOT ONE, AND IT'S YOUR FAULT! ( Some users just don't see a difference between FTP, e-mail, or anything else.... to them, its just "internet". ) Yeah, I know that all this really should fall to the end user, but in todays world, everyone blames everyone else. Methinks it would be better to teach people to be responsible for their own security. Simply make recommendations as to basic security precautions that end users might want to consider. The Winblows system will have the same failing, because the problem is mostly in human nature, not a lack of technology. Anyway, just my random opine... Blaine To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 11:50:08 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA29944 for freebsd-isp-outgoing; Wed, 8 Apr 1998 11:50:08 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from actcom.co.il (baum@actcom.co.il [192.114.47.1]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA29882; Wed, 8 Apr 1998 11:49:54 -0700 (PDT) (envelope-from baum@actcom.co.il) Received: from localhost by actcom.co.il with SMTP (8.8.6/actcom-0.2) id VAA01772; Wed, 8 Apr 1998 21:49:00 +0300 (EET DST) (rfc931-sender: baum@localhost) Date: Wed, 8 Apr 1998 21:49:00 +0300 (EET DST) From: Alexander Indenbaum To: "Vladimir N. Kovalev" cc: freebsd-qwestion@FreeBSD.ORG, freebsd-isp@FreeBSD.ORG, freebsd-hackers@FreeBSD.ORG Subject: Re: FreeBSD 2.2.5R and PPPD 2.2.3 .... In-Reply-To: <35244A26.435FE673@scn.ru> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, 3 Apr 1998, Vladimir N. Kovalev wrote: > Hello ! > Anybody know how to install PPPD 2.3.3 from > ftp://cs.anu.edu.au/pub/software/ppp/ on FreeBSD 2.2.5R ? > I can compile user-level PPPD code, but cannot rebuild the kernel after > update. I compiled a few months ago pppd 2.3 ( the latest betta ) since I had to dial to NT RAS and needed suport for MS CHAP and CBCP ( RAS callback protocol ). I did not touch kernel at all and tracing weekly -stable. In pppd I took kernel related files from pppd in -current. In any case, it works just fine ( I'm heavy ppp user :{) ). I can send you binary if you want. > > Thanks in advance. > > Vladimir N. Kovalev > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-hackers" in the body of the message > Alexander Indenbaum baum@actcom.co.il To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 12:34:45 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA06490 for freebsd-isp-outgoing; Wed, 8 Apr 1998 12:34:45 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from artorius.sunflower.com (artorius.sunflower.com [24.124.0.6]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA06482 for ; Wed, 8 Apr 1998 12:34:38 -0700 (PDT) (envelope-from bsd-isp@artorius.sunflower.com) Received: from artorius.sunflower.com (artorius.sunflower.com [24.124.0.6]) by artorius.sunflower.com (8.8.8/8.8.7) with SMTP id OAA12233 for ; Wed, 8 Apr 1998 14:34:03 -0500 (CDT) (envelope-from bsd-isp@artorius.sunflower.com) Date: Wed, 8 Apr 1998 14:34:03 -0500 (CDT) From: "Stephen D. Spencer" To: freebsd-isp@FreeBSD.ORG Subject: searching for FreeBSD news admins for hardware advice Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Greetings, We are currently [running/walking/kicking down the street] INND on an SGI Indy running Irix 6.2--192 megs, 31 gigs of hdd space. With its average uptime currently at about 3.5 days, we are considering moving to a differnet platform for INND. I am curious as to specifics, namely regarding FreeBSD version and motherboard manufacture/model that others are using on their INND machines. We are currently using FreeBSD 2.2.6 for an MSQL/secondary web server and for secondary DNS and am personally running 3.0 031298 at home. Any informational offerings will be greatly appreciated. Regards, Stephen --------------------------------------------------------------------- - Stephen Spencer finger gladiatr@artorius.sunflower.com for - - administrator PGP key. - - Sunflower Datavision http://www.sunflower.com - --------------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 13:03:00 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA09360 for freebsd-isp-outgoing; Wed, 8 Apr 1998 13:03:00 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from veronet.net (ns.veronet.net [199.227.78.226]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA09354 for ; Wed, 8 Apr 1998 13:02:58 -0700 (PDT) (envelope-from mmoran@veronet.net) Received: from hawk.veronet.net (pm1-34.veronet.net [199.227.78.234]) by veronet.net (8.8.5/8.8.5) with SMTP id QAA12038 for ; Wed, 8 Apr 1998 16:05:26 -0400 (EDT) Message-Id: <3.0.2.32.19980408160243.00888e00@veronet.net> X-Sender: mmoran@veronet.net X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.2 (32) Date: Wed, 08 Apr 1998 16:02:43 -0400 To: freebsd-isp@FreeBSD.ORG From: Michael Moran Subject: How to prevent multi-logins? Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi to all ISP sysadmins who worshipping FreeBSD :) I would like to know is there any (simple?) scripts to detect and kick the user out when user log in twice at same time. I have several users logged in twice at same time so often. I kicked some out and they came back all over again at different times. I looked at Merit's AAA and Cistron's. I'm not sure if both REALLY care about limit the users' login to one a time at same time? I know Livingston's Radius 2.0 version don't have that feature yet. :::sigh::: I use Portmaster box and Radius 1.16 running on FreeBSD box. Thank you, - Michael Moran To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 14:10:42 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA18693 for freebsd-isp-outgoing; Wed, 8 Apr 1998 14:10:42 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from dt050n33.san.rr.com (@dt050n33.san.rr.com [204.210.31.51]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA18687 for ; Wed, 8 Apr 1998 14:10:39 -0700 (PDT) (envelope-from Studded@san.rr.com) Received: from san.rr.com (Studded@localhost [127.0.0.1]) by dt050n33.san.rr.com (8.8.8/8.8.8) with ESMTP id OAA09836; Wed, 8 Apr 1998 14:10:34 -0700 (PDT) (envelope-from Studded@san.rr.com) Message-ID: <352BE7CA.69C668BC@san.rr.com> Date: Wed, 08 Apr 1998 14:10:34 -0700 From: Studded Organization: Triborough Bridge & Tunnel Authority X-Mailer: Mozilla 4.05 [en] (X11; I; FreeBSD 2.2.6-STABLE-0325 i386) MIME-Version: 1.0 To: "Stephen D. Spencer" CC: freebsd-isp@FreeBSD.ORG Subject: Re: searching for FreeBSD news admins for hardware advice References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Stephen D. Spencer wrote: > I am curious as to specifics, namely regarding FreeBSD version and > motherboard manufacture/model that others are using on their INND > machines. I am sure that you will get a lot of good responses here, however to jump start your search you should take a look at our mail archives and search for posts by a guy named Joe Greco. He runs several of the top 10 news servers in the world and has posted extensively on the topic. The archives are at http://www.freebsd.org/search.html. I'd search -questions and -isp for something like 'news and machine and greco' to start (no quotes of course). Good luck, Doug -- *** Chief Operations Officer, DALnet IRC network *** *** Proud operator, designer and maintainer of the world's largest *** Internet Relay Chat server. 5,328 clients and still growing. *** Try spider.dal.net on ports 6662-4 (Powered by FreeBSD) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 15:28:43 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA02562 for freebsd-isp-outgoing; Wed, 8 Apr 1998 15:28:43 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from news.cioe.com (news.cioe.com [204.248.219.34]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA02541 for ; Wed, 8 Apr 1998 15:28:40 -0700 (PDT) (envelope-from steve@news.cioe.com) Received: (from steve@localhost) by news.cioe.com (8.8.8/8.8.5) id RAA27712; Wed, 8 Apr 1998 17:28:50 -0500 (EST) Date: Wed, 8 Apr 1998 17:28:50 -0500 (EST) From: Steven Ames Message-Id: <199804082228.RAA27712@news.cioe.com> To: freebsd-isp@FreeBSD.ORG, mmoran@veronet.net Subject: Re: How to prevent multi-logins? Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > I looked at Merit's AAA and Cistron's. I'm not sure if both REALLY care > about limit the users' login to one a time at same time? I know > Livingston's Radius 2.0 version don't have that feature yet. :::sigh::: Both Merit and Cistron support this. Another radius called evla does also. Not sure about the others. -Steve To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Apr 8 19:28:27 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA02403 for freebsd-isp-outgoing; Wed, 8 Apr 1998 19:28:27 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from keep.scn.ru (keep.scn.ru [195.151.16.41]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA02192; Wed, 8 Apr 1998 19:27:01 -0700 (PDT) (envelope-from smith@keep.scn.ru) Received: from quick.scn.ru (quick.scn.ru [195.151.16.33]) by keep.scn.ru (8.8.7/8.8.7) with SMTP id KAA29960; Thu, 9 Apr 1998 10:26:45 +0800 (KRSS) (envelope-from smith@keep.scn.ru) Message-Id: <199804090226.KAA29960@keep.scn.ru> Comments: Authenticated sender is From: "Vladimir N. Kovalev" To: Alexander Indenbaum Date: Thu, 9 Apr 1998 09:21:40 +0800 Subject: Re: FreeBSD 2.2.5R and PPPD 2.2.3 .... CC: freebsd-qwestion@FreeBSD.ORG, freebsd-isp@FreeBSD.ORG, freebsd-hackers@FreeBSD.ORG References: <35244A26.435FE673@scn.ru> In-reply-to: X-mailer: Pegasus Mail for Windows (v2.54) Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > On Fri, 3 Apr 1998, Vladimir N. Kovalev wrote: > > > Hello ! > > Anybody know how to install PPPD 2.3.3 from > > ftp://cs.anu.edu.au/pub/software/ppp/ on FreeBSD 2.2.5R ? > > I can compile user-level PPPD code, but cannot rebuild the kernel after > > update. > > I compiled a few months ago pppd 2.3 ( the latest betta ) since I had > to dial to NT RAS and needed suport for MS CHAP and CBCP ( RAS callback > protocol ). > > I did not touch kernel at all and tracing weekly -stable. > In pppd I took kernel related files from pppd in -current. > > > In any case, it works just fine ( I'm heavy ppp user :{) ). > I can send you binary if you want. Many thanks ! > > Alexander Indenbaum > baum@actcom.co.il > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-hackers" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Apr 9 17:09:36 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA07598 for freebsd-isp-outgoing; Thu, 9 Apr 1998 17:09:36 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from Radford.i-Plus.net (root@NS.i-Plus.net [208.24.67.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA07593 for ; Thu, 9 Apr 1998 17:09:33 -0700 (PDT) (envelope-from rewt@i-Plus.net) Received: from abyss (old@b.nu [208.24.67.58]) by Radford.i-Plus.net (8.8.8/8.8.5) with SMTP id UAA03346 for ; Thu, 9 Apr 1998 20:09:12 -0400 (EDT) Message-ID: <01ba01bd6415$d1d37930$3a4318d0@abyss.b.nu> From: "Troy Settle" To: "(ML) FreeBSD ISP" Subject: Speaking of radius - mine doesn't behave properly at startup Date: Thu, 9 Apr 1998 20:15:50 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I've been running radius for over a year now, and one thing that's always bugged me (though not enough to drive me crazy), is that I use the following code in /etc/rc.local to start radiusd at boot. It doesn't give me any errors, no core dumps, it just exits as if that's what it's supposed to do. if [ -f /usr/local/sbin/radiusd ] ; then /usr/local/sbin/radiusd ; echo -n ' radiusd' fi If anyone has any idea why radiusd won't hang around to authenticate my users, I would sure appreciate the help. -- Troy Settle Network Administrator, iPlus Internet Services http://www.i-Plus.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Apr 9 17:42:15 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA10578 for freebsd-isp-outgoing; Thu, 9 Apr 1998 17:42:15 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from voltage.net (voltage.net [208.15.104.65]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA10573 for ; Thu, 9 Apr 1998 17:42:12 -0700 (PDT) (envelope-from sward@voltage.net) Received: from arky.voltage.net (arkylady@arky.voltage.net [208.15.104.72]) by voltage.net (8.8.8/8.8.8) with SMTP id TAA24728 for ; Thu, 9 Apr 1998 19:38:23 -0500 (CDT) Message-Id: <3.0.32.19980409194530.006be410@mail.voltage.net> X-Sender: sward@mail.voltage.net X-Mailer: Windows Eudora Pro Version 3.0 (32) Date: Thu, 09 Apr 1998 19:45:30 -0500 To: freebsd-isp@FreeBSD.ORG From: Susie Ward Subject: passwd to .htpasswd script Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Does anyone know of a script to convert the passwd file into an .htpasswd file for securing a web directory? Thanks, Susie To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Apr 9 17:51:18 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA12122 for freebsd-isp-outgoing; Thu, 9 Apr 1998 17:51:18 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from arh0300.urh.uiuc.edu (arh0300.urh.uiuc.edu [130.126.72.10]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA12115 for ; Thu, 9 Apr 1998 17:51:15 -0700 (PDT) (envelope-from dannyman@arh0300.urh.uiuc.edu) Received: (from dannyman@localhost) by arh0300.urh.uiuc.edu (8.8.8/8.8.5) id TAA05362; Thu, 9 Apr 1998 19:51:16 -0500 (CDT) Message-ID: <19980409195116.25787@urh.uiuc.edu> Date: Thu, 9 Apr 1998 19:51:16 -0500 From: dannyman To: Susie Ward , freebsd-isp@FreeBSD.ORG Subject: Re: passwd to .htpasswd script Mail-Followup-To: Susie Ward , freebsd-isp@FreeBSD.ORG References: <3.0.32.19980409194530.006be410@mail.voltage.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.89.1i In-Reply-To: <3.0.32.19980409194530.006be410@mail.voltage.net>; from Susie Ward on Thu, Apr 09, 1998 at 07:45:30PM -0500 X-Loop: djhoward@uiuc.edu X-URL: http://www.uiuc.edu/ph/www/djhoward/ Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, Apr 09, 1998 at 07:45:30PM -0500, Susie Ward wrote: > Does anyone know of a script to convert the passwd file into an .htpasswd > file for securing a web directory? I don't believe that such a thing would be possible ... There is documentation at apache.org on how to link authentification directly to passwd, but it is stated that this is not too desireable. -dan -- // dannyman yori aiokomete || Our Honored Symbol deserves \\/ http://www.dannyland.org/~dannyman/ || an Honorable Retirement (UIUC) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Apr 9 17:53:25 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA12721 for freebsd-isp-outgoing; Thu, 9 Apr 1998 17:53:25 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from makai.maui.net (makai.maui.net [206.154.205.5]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA12713 for ; Thu, 9 Apr 1998 17:53:20 -0700 (PDT) (envelope-from langfod@makai.maui.net) Received: (from langfod@localhost) by makai.maui.net (8.8.8/8.8.5) id OAA00299; Thu, 9 Apr 1998 14:53:15 -1000 (HST) Message-Id: <199804100053.OAA00299@makai.maui.net> Subject: Re: passwd to .htpasswd script In-Reply-To: <3.0.32.19980409194530.006be410@mail.voltage.net> from Susie Ward at "Apr 9, 98 07:45:30 pm" To: sward@voltage.net (Susie Ward) Date: Thu, 9 Apr 1998 14:53:14 -1000 (HST) Cc: freebsd-isp@FreeBSD.ORG From: "David Langford" X-blank-line: This space intentionaly left blank. X-Mailer: ELM [version 2.4ME+ PL31H (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Susie Ward >Does anyone know of a script to convert the passwd file into an .htpasswd >file for securing a web directory? > >Thanks, > >Susie ummm awk -F: '{print $1":"$2} < /etc/master.passwd ?? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Apr 9 18:50:20 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id SAA25024 for freebsd-isp-outgoing; Thu, 9 Apr 1998 18:50:20 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from voltage.net (voltage.net [208.15.104.65]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA25018 for ; Thu, 9 Apr 1998 18:50:15 -0700 (PDT) (envelope-from sward@voltage.net) Received: from arky.voltage.net (arkylady@arky.voltage.net [208.15.104.72]) by voltage.net (8.8.8/8.8.8) with SMTP id UAA25582 for ; Thu, 9 Apr 1998 20:46:21 -0500 (CDT) Message-Id: <3.0.32.19980409205329.006e157c@mail.voltage.net> X-Sender: sward@mail.voltage.net X-Mailer: Windows Eudora Pro Version 3.0 (32) Date: Thu, 09 Apr 1998 20:53:29 -0500 To: freebsd-isp@FreeBSD.ORG From: Susie Ward Subject: Thanks (Was: Re: passwd to .htpasswd script) Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 07:45 PM 4/9/98 -0500, Susie Ward wrote: >Does anyone know of a script to convert the passwd file into an .htpasswd >file for securing a web directory? Thanks for all the responses (especially Alex Nash & Troy Settle :) got all I need to get it going now! If anyone lurking would like a copy of the finished product, just let me know :) Susie To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Apr 9 19:02:19 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA28104 for freebsd-isp-outgoing; Thu, 9 Apr 1998 19:02:19 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from mercury.jorsm.com (mercury.jorsm.com [207.112.128.9]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA28098 for ; Thu, 9 Apr 1998 19:02:13 -0700 (PDT) (envelope-from jeff@mercury.jorsm.com) Received: from localhost (jeff@localhost) by mercury.jorsm.com (8.8.7/8.8.7) with SMTP id VAA00248; Thu, 9 Apr 1998 21:02:02 -0500 (CDT) Date: Thu, 9 Apr 1998 21:02:02 -0500 (CDT) From: Jeff Lynch To: Susie Ward cc: freebsd-isp@FreeBSD.ORG Subject: Re: passwd to .htpasswd script In-Reply-To: <3.0.32.19980409194530.006be410@mail.voltage.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 9 Apr 1998, Susie Ward wrote: > Does anyone know of a script to convert the passwd file into an .htpasswd > file for securing a web directory? > > Thanks, > > Susie Sure, cat /etc/master.passwd | awk -F: {printf("%s:%s\n", $1, $2)} But I wouldn't necessarily recommend it. At the very least delete your system and "important" logins. It is discouraged to use of the same passwords in .htpasswd files that protect meaningful or priveledged shell accounts because rouge server cgi's can get stored passwords from the password cache. ========================================================================= Jeffrey A. Lynch JORSM Internet email: jeff@jorsm.com Northwest Indiana's Full-Service Provider Voice: (219)322-2180 927 Sheffield Avenue, Dyer, IN 46311 Autoresponse: info@jorsm.com http://www.jorsm.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Apr 9 19:39:35 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA05759 for freebsd-isp-outgoing; Thu, 9 Apr 1998 19:39:35 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from gras-varg.worldgate.com (skafte@gras-varg.worldgate.com [198.161.84.12]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA05754 for ; Thu, 9 Apr 1998 19:39:33 -0700 (PDT) (envelope-from skafte@worldgate.com) Received: (from skafte@localhost) by gras-varg.worldgate.com (8.8.8/8.6.12) id UAA23197; Thu, 9 Apr 1998 20:39:13 -0600 (MDT) Message-ID: <19980409203912.60474@worldgate.com> Date: Thu, 9 Apr 1998 20:39:12 -0600 From: Greg Skafte To: Jay Tribick Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Virus checking e-mail attachments References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.88 In-Reply-To: ; from Jay Tribick on Wed, Apr 08, 1998 at 09:56:39AM +0100 Organization: WorldGate Inc. X-PGP-Fingerprint: 42 9C 2C A8 4D 2B C9 C4 7D B6 00 B0 50 47 20 97 X-URL: http://gras-varg.worldgate.com/~skafte Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Quoting Jay Tribick (netadmin@fastnet.co.uk) On Subject: Re: Virus checking e-mail attachments Date: Wed, Apr 08, 1998 at 09:56:39AM +0100 > > | > There seems to be a lot of products available for Windoze NT etc. that > | > run on a mail server and scan e-mails (or their attachments) for > | > viruses. > | > > | > Is their anything available for FreeBSD that does this (or any > | > other flavour of UN*X) ? > | > > | > What I'm looking for is something that, if it detects a virus can > | > encapsulate an e-mail and warn the user that they should check it. > | > | McAffee has a version of VirusScan for Linux and Solaris.. If you wrote a > | script to take each mail spool file and unencode the attachments, you > | could scan them. Unfortunately, you can't just scan the spool itself, > | you have to scan the binary itself. It just uses the same virus files > | that the PC version have, so it will only protect you from PC viruses. > > Trouble is, a lot of people send attachments mime encoded and theres > no simple way to decode it (correct me if i'm wrong..) exactly ... for guys using the symantic anti-virus email gateway the machine decodes each mime attachment and scans it .... then decides what to do with the message .... unfortunately this is a winbloze product .... > > I know the package your talking about and I have actually used it > on another machine but I was looking more for a dedicated solution - > writing my own isn't a problem, it's just a pain in the ass and I'd > prefer to just buy a dedicated solution. > > | Food for thought.. > > Yummy.. ;) > > Jay Tribick | Network Administrator > FastNet International Ltd | http://www.fastnet.co.uk/ > PGP Key Available | Finger netadmin@fastnet.co.uk > : > Tel: +44 (0)1273 677633 . Fax: +44 (0)1273 621631 > FastNet International Ltd - The User-Friendly Internet Provider > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message -- Email: skafte@worldgate.com Voice: +403 413 1910 Fax: +403 421 4929 #575 Sun Life Place * 10123 99 Street * Edmonton, AB * Canada * T5J 3H1 -- -- When things can't get any worse, they simplify themselves by getting a whole lot worse then complicated. A complete and utter disaster is the simplest thing in the world; it's preventing one that's complex. (Janet Morris) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Apr 9 20:42:11 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id UAA18081 for freebsd-isp-outgoing; Thu, 9 Apr 1998 20:42:11 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from panda.hilink.com.au (panda.hilink.com.au [203.8.15.25]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA18072 for ; Thu, 9 Apr 1998 20:42:04 -0700 (PDT) (envelope-from danny@panda.hilink.com.au) Received: (from danny@localhost) by panda.hilink.com.au (8.8.5/8.8.5) id NAA12872; Fri, 10 Apr 1998 13:41:34 +1000 (EST) Date: Fri, 10 Apr 1998 13:41:34 +1000 (EST) From: "Daniel O'Callaghan" To: Susie Ward cc: freebsd-isp@FreeBSD.ORG Subject: Re: passwd to .htpasswd script In-Reply-To: <3.0.32.19980409194530.006be410@mail.voltage.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 9 Apr 1998, Susie Ward wrote: > Does anyone know of a script to convert the passwd file into an .htpasswd > file for securing a web directory? #!/usr/bin/perl # # I don't like to include users with uid < 100 in .htpasswd file. # In reality, httpd and apache should be taught to terminate the # encrypted passwd at its ':'. # while(<>) { ($uname, $passwd, $uid)=split(':'); print "$uname:$passwd\n" if ( $uid > 100 ); } To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Apr 9 21:16:44 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id VAA26826 for freebsd-isp-outgoing; Thu, 9 Apr 1998 21:16:44 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from servidor.exsocom.com.mx (servidor.exsocom.com.mx [200.34.46.130]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id VAA26764 for ; Thu, 9 Apr 1998 21:16:30 -0700 (PDT) (envelope-from agalindo@servidor.exsocom.com.mx) Received: from servidor.exsocom.com.mx (servidor.exsocom.com.mx [200.34.46.130]) by servidor.exsocom.com.mx (8.8.7/8.8.5) with SMTP id XAA25517; Thu, 9 Apr 1998 23:22:11 -0500 (CDT) Date: Thu, 9 Apr 1998 23:22:11 -0500 (CDT) From: Alejandro Galindo Chairez AGALINDO To: Susie Ward cc: freebsd-isp@FreeBSD.ORG Subject: Re: Thanks (Was: Re: passwd to .htpasswd script) In-Reply-To: <3.0.32.19980409205329.006e157c@mail.voltage.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Please send me a reply of the final product Thanks Saludos Alejandro ---------------------------------------------------------------------------- | , , | | /( )` | | \ \___ / | | | /- _ `-/ ' | | (/\/ \ \ /\ | | ExSoCom Dgo. MEXICO / / | ` \ | | O O ) / | | | `-^--'`< ' | | (_.) _ ) / | | Alejandro Galindo Chairez `.___/` / | | Tel: (18) 179177 `-----' / | | Fax: (18) 179177 <----. __ / __ \ | | <----|====O)))==) \) /==== | | e-mail alejandro.galindo@exsocom.com.mx <----' `--' `.__,' \ | | | | | | http://www.exsocom.com.mx \ / /\| | ______( (_ / \______/ | | ,' ,-----' | | | a FreeBSD user `--{__________) | ---------------------------------------------------------------------------- On Thu, 9 Apr 1998, Susie Ward wrote: > At 07:45 PM 4/9/98 -0500, Susie Ward wrote: > >Does anyone know of a script to convert the passwd file into an .htpasswd > >file for securing a web directory? > > Thanks for all the responses (especially Alex Nash & Troy Settle :) got all > I need to get it going now! If anyone lurking would like a copy of the > finished product, just let me know :) > > Susie > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Apr 9 23:05:01 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA28613 for freebsd-isp-outgoing; Thu, 9 Apr 1998 23:05:01 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from super-g.inch.com (super-g.com [207.240.140.161]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA28593 for ; Thu, 9 Apr 1998 23:04:59 -0700 (PDT) (envelope-from spork@super-g.com) Received: from localhost (localhost [127.0.0.1]) by super-g.inch.com (8.8.8/8.8.5) with SMTP id CAA06053; Fri, 10 Apr 1998 02:04:08 -0400 (EDT) Date: Fri, 10 Apr 1998 02:04:08 -0400 (EDT) From: spork X-Sender: spork@super-g.inch.com To: Troy Settle cc: "(ML) FreeBSD ISP" Subject: Re: Speaking of radius - mine doesn't behave properly at startup In-Reply-To: <01ba01bd6415$d1d37930$3a4318d0@abyss.b.nu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org What's the last thing you see in the logfile (not the accounting stuff)? I'm just starting to play with the new version, and I worked through about 4 problems in a row with info I gleamed from the logs. If all else fails, you can add "-xxx" to the command line and you should get a radius.debug file in the radius directory... Charles Charles Sprickman spork@super-g.com ---- "I'm not a prophet or a stone-age man Just a mortal with potential of a superman I'm living on" -DB On Thu, 9 Apr 1998, Troy Settle wrote: > I've been running radius for over a year now, and one thing that's always > bugged me (though not enough to drive me crazy), is that I use the > following code in /etc/rc.local to start radiusd at boot. It doesn't > give me any errors, no core dumps, it just exits as if that's what it's > supposed to do. > > if [ -f /usr/local/sbin/radiusd ] ; then > /usr/local/sbin/radiusd ; echo -n ' radiusd' > fi > > If anyone has any idea why radiusd won't hang around to authenticate my > users, I would sure appreciate the help. > > -- > Troy Settle > Network Administrator, iPlus Internet Services > http://www.i-Plus.net > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Apr 10 06:21:09 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA04882 for freebsd-isp-outgoing; Fri, 10 Apr 1998 06:21:09 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from Radford.i-Plus.net (root@NS.i-Plus.net [208.24.67.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA04876 for ; Fri, 10 Apr 1998 06:21:04 -0700 (PDT) (envelope-from rewt@i-Plus.net) Received: from abyss (old@b.nu [208.24.67.58]) by Radford.i-Plus.net (8.8.8/8.8.5) with SMTP id JAA18177; Fri, 10 Apr 1998 09:20:22 -0400 (EDT) Message-ID: <006501bd6484$5c602f30$3a4318d0@abyss.b.nu> From: "Troy Settle" To: "Alejandro Galindo Chairez AGALINDO" Cc: Subject: Re: Thanks (Was: Re: passwd to .htpasswd script) Date: Fri, 10 Apr 1998 09:27:07 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hmmm... dunno if Susie ended up changing what I had, but here's what I came up with. You may need to adjust the '14' to skip all the system accounts at the top of the passwd file. Another option, is using grep to get all users with a specific GID. For example, all my dialup users are GID 10000. #!/bin/sh count=`/usr/bin/wc -l /etc/master.passwd | awk '{ print $1}'` numusers=`/bin/expr ${count} - 14` /usr/bin/tail -n ${numusers} /etc/master.passwd | /usr/bin/cut -f 1,2 -d : for greping... #!/bin/sh grep ${GID} /etc/master.passwd | /usr/bin/cut -f 1,2 -d : To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Apr 10 09:16:56 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA07079 for freebsd-isp-outgoing; Fri, 10 Apr 1998 09:16:56 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from merit.edu (merit.edu [198.108.1.42]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA07073 for ; Fri, 10 Apr 1998 09:16:55 -0700 (PDT) (envelope-from web@merit.edu) Received: from ohm.merit.edu (ohm.merit.edu [198.108.60.65]) by merit.edu (8.8.7/8.8.5) with ESMTP id MAA05833; Fri, 10 Apr 1998 12:16:46 -0400 (EDT) From: William Bulley Received: (web@localhost) by ohm.merit.edu (8.6.9/8.6.5) id MAA03378; Fri, 10 Apr 1998 12:17:55 -0400 Message-Id: <199804101617.MAA03378@ohm.merit.edu> Subject: Re: Speaking of radius - mine doesn't behave properly at startup To: rewt@i-Plus.net (Troy Settle) Date: Fri, 10 Apr 1998 12:17:55 -0400 (EDT) Cc: isp@FreeBSD.ORG In-Reply-To: <01ba01bd6415$d1d37930$3a4318d0@abyss.b.nu> from "Troy Settle" at Apr 9, 98 08:15:50 pm X-Mailer: ELM [version 2.4 PL25] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org According to Troy Settle: > > I've been running radius for over a year now, and one thing that's always > bugged me (though not enough to drive me crazy), is that I use the > following code in /etc/rc.local to start radiusd at boot. It doesn't > give me any errors, no core dumps, it just exits as if that's what it's > supposed to do. > > if [ -f /usr/local/sbin/radiusd ] ; then > /usr/local/sbin/radiusd ; echo -n ' radiusd' > fi > > If anyone has any idea why radiusd won't hang around to authenticate my > users, I would sure appreciate the help. What version are you using? If you execute ./radiusd -v and the word Merit pops out, it most likely is ours. If so, send email to: aaa-support@merit.edu and I'll be glad to help you out. :-) Regards, web... -- William Bulley Senior Systems Research Programmer Merit Network, Inc. Email: web@merit.edu 4251 Plymouth Road, Suite C Phone: (734) 764-9993 Ann Arbor, Michigan 48105-2785 Fax: (734) 647-3185 [ Reuters, London, February 29, 1998: Scientists have announced discovering ] [ a meteorite which will strike the earth in March, 2028. Millions of UNIX ] [ coders expressed relief for being spared the UNIX epoch "crisis" of 2038. ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Apr 10 11:22:38 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA28303 for freebsd-isp-outgoing; Fri, 10 Apr 1998 11:22:38 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from mail.cybernautics.com (6.marin.usweb.com [157.22.203.6]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA28199 for ; Fri, 10 Apr 1998 11:22:29 -0700 (PDT) (envelope-from aturitz@cybernautics.com) Received: from aturitz.cybernautics.com ([157.22.203.134]) by mail.cybernautics.com (Post.Office MTA v3.1.2 release (PO205-101c) ID# 0-42675U100L100S0) with SMTP id AAA381 for ; Fri, 10 Apr 1998 11:25:52 -0700 Message-Id: <3.0.32.19980410112210.00912e60@mail.cybernautics.com> X-Sender: aturitz@mail.cybernautics.com X-Mailer: Windows Eudora Pro Version 3.0 (32) Date: Fri, 10 Apr 1998 11:22:11 -0700 To: freebsd-isp@FreeBSD.ORG From: Andrew Turitz Subject: Short Survey for FREEBSD-ISP list members Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Dear FREEBSD-ISP List members, I am conducting market research for a company that has created wireless networks for small businesses and home offices. This product has greatly expanded bandwidth, which will provide users with capabilities that extend far beyond typical networks. Before the product is released, we are attempting to measure the importance of certain features for various members of our target market. It is also crucial to get feedback from technical experts, like the ones that subscribe to FREEBSD-ISP. For this reason, I am distributing the following survey to members of the FREEBSD-ISP mailing list. It is only a few questions, so as to minimize bandwidth. Similarly, I ask that any responses are sent directly to me at the email address below so as not to interfere with any discussion beyond this initial message. Thank you for your time. Andrew Turitz USWeb em: aturitz@marin.usweb.com * * * * * * * 1) Where do you access your network from? Home____ Office _____ Home Office _____ 2) How many people are currently on your network? 3) Does your current network meet all your needs? If not, what would you change about your network (e.g. improved scalability, greater bandwidth, multimedia capabilities, etc.)? 4) Is your network currently wireless? If not, would you consider switching to a wireless network? Why or why not? 5) Assuming that a wireless network costs $250 with two nodes, how much above your current premium would you be willing to spend for a wireless network with expanded multimedia capability? 25 - 50% ($60 - $125) 50 - 75% ($125 - $200) 75 - 100% ($200+) 6) Are there any additional devices you would be interested in linking to your network (e.g. an alarm system, lighting, TV)? How valuable would this be to you? Thank you for your time! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Apr 10 17:21:43 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA22495 for freebsd-isp-outgoing; Fri, 10 Apr 1998 17:21:43 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from ymris.ddm.on.ca (p37a.neon.sentex.ca [207.245.212.230]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA22481 for ; Fri, 10 Apr 1998 17:21:30 -0700 (PDT) (envelope-from dchapes@ddm.on.ca) Received: from squigy.ddm.on.ca (squigy.ddm.on.ca [209.47.139.138]) by ymris.ddm.on.ca (8.8.8/8.8.8) with ESMTP id UAA06897; Fri, 10 Apr 1998 20:21:22 -0400 (EDT) (envelope-from dchapes@ymris.ddm.on.ca) From: Dave Chapeskie Received: (from dchapes@localhost) by squigy.ddm.on.ca (8.8.8/8.8.7) id UAA11480; Fri, 10 Apr 1998 20:21:20 -0400 (EDT) Message-ID: <19980410202120.13093@ddm.on.ca> Date: Fri, 10 Apr 1998 20:21:20 -0400 To: Troy Settle Cc: freebsd-isp@FreeBSD.ORG Subject: Re: passwd to .htpasswd script Mail-Followup-To: Troy Settle , freebsd-isp@FreeBSD.ORG References: <006501bd6484$5c602f30$3a4318d0@abyss.b.nu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.89i In-Reply-To: <006501bd6484$5c602f30$3a4318d0@abyss.b.nu>; from Troy Settle on Fri, Apr 10, 1998 at 09:27:07AM -0400 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, Apr 10, 1998 at 09:27:07AM -0400, Troy Settle wrote: > #!/bin/sh > count=`/usr/bin/wc -l /etc/master.passwd | awk '{ print $1}'` > numusers=`/bin/expr ${count} - 14` > /usr/bin/tail -n ${numusers} /etc/master.passwd | /usr/bin/cut -f 1,2 -d : This is VERY inefficient. It involves two passes over the file one of which needs to buffer almost the whole file! Also it makes assumptions about the number of system accounts, if you add a new system account (majordomo, postgres, etc) you have to find and change your script. A MUCH better solution would be: awk -F: '$3 >= 1000 {print $1 ":" $2}' /etc/master.passwd One command, one pass, one assumption. You replace 1000 with the starting UID of real users (as opposed to system accounts). Any smart sysadmin keeps all system account UIDs bellow a certain value so this is not as bad of an assumption. (BTW, if you want this one command as a script use something like: #!/bin/sh exec awk -F: '$3 >= 1000 {print $1 ":" $2}' /etc/master.passwd I dislike it when people forget the exec.) Please refrain from posting scripts or answers to the mailing lists unless you know what you are doing. (Not to single you out, but I've seen a lot of very poor or wrong answers posted to lists and it annoys me sometimes). IMHO bad answers/examples are worse than no answers/examples. -- Dave Chapeskie, DDM Consulting E-Mail: dchapes@ddm.on.ca To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Apr 10 17:23:26 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA22810 for freebsd-isp-outgoing; Fri, 10 Apr 1998 17:23:26 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from IAEhv.nl (root@iaehv.IAEhv.nl [194.151.64.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA22803 for ; Fri, 10 Apr 1998 17:23:24 -0700 (PDT) (envelope-from wjw@surf.IAEhv.nl) Received: from surf.IAEhv.nl (root@surf.IAEhv.nl [194.151.66.2]) by IAEhv.nl (8.8.7/8.8.7) with ESMTP id CAA03231; Sat, 11 Apr 1998 02:23:21 +0200 (CEST) Received: (from wjw@localhost) by surf.IAEhv.nl (8.8.7/8.8.7) id CAA28430; Sat, 11 Apr 1998 02:23:20 +0200 (MET DST) Date: Sat, 11 Apr 1998 02:23:20 +0200 (MET DST) From: Willem Jan Withagen Message-Id: <199804110023.CAA28430@surf.IAEhv.nl> To: jeff@mercury.jorsm.com Subject: Re: passwd to .htpasswd script X-Newsgroups: list.freebsd.isp In-Reply-To: References: <3.0.32.19980409194530.006be410@mail.voltage.net> Organization: Internet Access Eindhoven, the Netherlands Cc: isp@FreeBSD.ORG Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >> Does anyone know of a script to convert the passwd file into an .htpasswd >> file for securing a web directory? I've changed the way to go at it. We also run a chrooted env for most of the servers. So I needed a special way to get authentication with the regular passwd file. So I made a mod_authPOP module. It uses POP3 for authentication. It's still in a very rough format and has very little(none) documentation. I you still want it, mail me. -_WjW -- Internet Access Eindhoven BV., voice: +31-40-2 393 393, data: +31-40-2 439 436 P.O. 928, 5600 AX Eindhoven, The Netherlands Full Internet connectivity for only fl 12.95 a month. Call now, and login as 'new'. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Apr 10 18:31:45 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id SAA06353 for freebsd-isp-outgoing; Fri, 10 Apr 1998 18:31:45 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from Radford.i-Plus.net (root@NS.i-Plus.net [208.24.67.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id SAA06324 for ; Fri, 10 Apr 1998 18:31:37 -0700 (PDT) (envelope-from rewt@i-Plus.net) Received: from abyss (old@b.nu [208.24.67.58]) by Radford.i-Plus.net (8.8.8/8.8.5) with SMTP id VAA05810; Fri, 10 Apr 1998 21:31:15 -0400 (EDT) Message-ID: <015a01bd64ea$79d048a0$3a4318d0@abyss.b.nu> From: "Troy Settle" To: "Dave Chapeskie" Cc: Subject: Re: passwd to .htpasswd script Date: Fri, 10 Apr 1998 21:38:05 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Dave: I appreciate the feedback. I've only been working out on shell utilities for a while now, and am still quite green. However, I think that it should be noted that there is (almost) always more than one way to do things. I came up with a solution that worked, ignore the fact that your's is far more efficient. For doing what needs to be done, I would have used a perl script, however, Susie (the person who asked for my help), didn't want to mess with it that way. In a hurry, I came up with the script I posted. It's good that you've posted a more efficient method, but the tone of your post was quite rude. Perhaps it would have been better to start it out with "Yeah, that works, but this is more efficient:" -- Troy Settle Network Administrator, iPlus Internet Services http://www.i-Plus.net -----Original Message----- From: Dave Chapeskie To: Troy Settle Cc: freebsd-isp@FreeBSD.ORG Date: Friday, April 10, 1998 8:21 PM Subject: Re: passwd to .htpasswd script >On Fri, Apr 10, 1998 at 09:27:07AM -0400, Troy Settle wrote: >> #!/bin/sh >> count=`/usr/bin/wc -l /etc/master.passwd | awk '{ print $1}'` >> numusers=`/bin/expr ${count} - 14` >> /usr/bin/tail -n ${numusers} /etc/master.passwd | /usr/bin/cut -f 1,2 -d : > >This is VERY inefficient. It involves two passes over the file one of >which needs to buffer almost the whole file! Also it makes assumptions >about the number of system accounts, if you add a new system account >(majordomo, postgres, etc) you have to find and change your script. A >MUCH better solution would be: > >awk -F: '$3 >= 1000 {print $1 ":" $2}' /etc/master.passwd > >One command, one pass, one assumption. > >You replace 1000 with the starting UID of real users (as opposed to >system accounts). Any smart sysadmin keeps all system account UIDs >bellow a certain value so this is not as bad of an assumption. > >(BTW, if you want this one command as a script use something like: > #!/bin/sh > exec awk -F: '$3 >= 1000 {print $1 ":" $2}' /etc/master.passwd >I dislike it when people forget the exec.) > > >Please refrain from posting scripts or answers to the mailing lists >unless you know what you are doing. (Not to single you out, but >I've seen a lot of very poor or wrong answers posted to lists and it >annoys me sometimes). IMHO bad answers/examples are worse than no >answers/examples. > >-- >Dave Chapeskie, DDM Consulting >E-Mail: dchapes@ddm.on.ca > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Apr 11 23:41:35 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA28171 for freebsd-isp-outgoing; Sat, 11 Apr 1998 23:41:35 -0700 (PDT) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from pinky.junction.net (pinky.junction.net [199.166.227.12]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id XAA28155 for ; Sat, 11 Apr 1998 23:41:27 -0700 (PDT) (envelope-from michael@memra.com) Received: from sidhe.memra.com (sidhe.memra.com [199.166.227.105]) by pinky.junction.net (8.6.12/8.6.12) with ESMTP id XAA24844; Sat, 11 Apr 1998 23:41:14 -0700 Received: from localhost (michael@localhost) by sidhe.memra.com (8.6.12/8.6.12) with SMTP id XAA27473; Sat, 11 Apr 1998 23:39:28 -0700 Date: Sat, 11 Apr 1998 23:39:26 -0700 (PDT) From: Michael Dillon To: inet-access@earth.com cc: freebsd-isp@FreeBSD.ORG, linuxisp@friendly.jeffnet.org Subject: Is your IP 203.64.x.x ???? Message-ID: Organization: Memra Software Inc. MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org If your IP address blocks are in 203.64.x.x then you will find yourself cut off from a large and growing portion of the Internet. The message below explains why. You can fix this problem by fixing your router configuration and by demanding (yes I said DEMANDING) that your upstream provider fix their router configuration. Karl is publishing the list of networks that he blocks so that other providers can also block traffic from these rogue providers. Here are some relevant URLS http://www.argo.es/~jcea/artic/cisco.htm http://www.math.ucla.edu/misc/smurf.html http://www.cs.sfu.ca/CC/Hypermail/cmpt-471/0008.html http://www.landfield.com/rfcs/rfc2267.html http://www.ers.ibm.com/tech-info/advisories/oar/1998/ERS-OAR-E01-1998:001.1.txt ---------- Forwarded message ---------- Date: Sun, 12 Apr 1998 00:36:30 -0500 From: Karl Denninger To: Jon Lewis Cc: Al Reuben , nanog@merit.edu Subject: Re: SMURF amplifier block list On Sun, Apr 12, 1998 at 01:20:02AM -0400, Jon Lewis wrote: > On Sun, 12 Apr 1998, Karl Denninger wrote: > > > And you think they don't already HAVE the list? > > > > Where do you think WE got it from? From people smurfing us! > > > > The vandals ALREADY HAVE the list. I know this because we were attacked > > But posting the list of blackholed sites publicly gives the attackers a > list of sites not to bother trying to use...so they keep coming out with > new&improved versions of smurf using networks that actually work. The goal is to make the number of possible sources ZERO. If ISPs around the world refuse to forward directed broadcasts, it WILL be zero. If a provider loses connectivity to significant parts of the network, they'll fix their fscking routers. I'll note that one of the worst offenders right now, and the biggest sources, is APNIC's netblocks. There are huge, multi-T3-connected, smurf amplifiers on some of those network numbers. You'll find that in 203.64 there are multiple high-bandwidth sources with ENABLED directed broadcasts. Guess what? That entire /16 can't talk to us any more. I've tried talking to APNIC with no response. I've emailed every contact I can think of - nothing. Now I've told them to fsck off. They can either fix the damn thing or they can stuff connectivity to us up their behinds. I did this to huge parts of UUNET's infrastructure a few months ago. It *DID* get their attention, and smartly. At one time, not long back, their entire New York POP was one huge smurf amplifier of the worst kind - multiple MAX TNTs on 100BaseTX, all with directed broadcasts possible into their NICs. Ouch. We saw *sustained* loads in excess of 100Mbps coming from there. I blocked a /16, and two days later their CUSTOMERS started calling us asking why they couldn't talk to us any more. We told them why. Less than a week later it magically "fixed itself", although UUNET denied that they changed anything or that it was ever broken. Yeah, right. At least the problem got solved. Bluntly, I've had enough and so have my customers. Our IRC server is the recipient of daily attacks. Our *customers* DS1s are getting hit as well. While I can fix the IRC server problem by putting it on a Switched 100BaseTX port, that's not really a fix -- that's just making the firehose big enough that the jerks can't fill it. No more Mr. Nice Guy. I don't like getting paged at 3:00 AM because some two-bit punk got Klined off our IRC server for running clonebots and decided to smurf us in retaliation. My fix is to render all connectivity to and from the offending netblocks VOID until the owners fix their routers. These folks, by the way, are NOT clueless - they are DELIBERATELY ignoring the problem. The folks who can source significant smurfs today are NOT Joe's T1 and Grill. They are NATIONAL and INTERNATIONAL ISPs who damn well ought to know how to prevent this and why they should. The guy with a T1 can't hit us hard enough to even show up on our monitors. To make my blacklist you have to hit me with enough bandwidth that we *see* the problem, and that means you're at least mid-fractional-DS3 connected. If they're permitting this kind of behavior to take place *IT IS THEIR FAULT*, and has to be due to either deliberate lack of action or gross negligence. I'll KEEP adding netblocks to that access group as required, and keep posting the list. And I won't remove a single network from there until I've VERIFIED that they can no longer be used for this kind of vandalism. -- -- Karl Denninger (karl@MCS.Net)| MCSNet - Serving Chicagoland and Wisconsin http://www.mcs.net/ | T1's from $600 monthly / All Lines K56Flex/DOV | NEW! Corporate ISDN Prices dropped by up to 50%! Voice: [+1 312 803-MCS1 x219]| EXCLUSIVE NEW FEATURE ON ALL PERSONAL ACCOUNTS Fax: [+1 312 803-4929] | *SPAMBLOCK* Technology now included at no cost To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message