From owner-freebsd-isp  Sun Jan 13  6:41:45 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from umail.ru (umail.mtu.ru [195.34.32.101])
	by hub.freebsd.org (Postfix) with ESMTP id 37ADE37B404
	for <freebsd-isp@freebsd.org>; Sun, 13 Jan 2002 06:41:38 -0800 (PST)
Received: from [62.5.184.178] (HELO mx2.mail.yahoo.com)
  by umail.ru (CommuniGate Pro SMTP 3.5.1)
  with ESMTP id 18749757; Sun, 13 Jan 2002 17:38:48 +0300
Message-ID: <00004e9f0db4$000061b3$00000ec2@mx2.mail.yahoo.com>
To: <Undisclosed Recipients@FreeBSD.ORG>
From: americanherogirls20022003@yahoo.com
Subject: fw:                                                                                                 -            G
Date: Sun, 13 Jan 2002 09:41:36 -1700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Reply-To: americanherogirls20022003@yahoo.com
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

American Hero Girls Calendar 2002

A Salute to the Honor, Bravery, Sacrifice, Dedication and Pride of 
our American Heroes: Firefighters, Police, Navy, Teachers, 
Air Force, Marines, Army, etc...

For every calendar sold, a donation is made to a leading national
charity.

Just visit us online at:
http://www.freehosting2001.com/FLORIDA2/MIAMI334/

==========================================================

You are receiving this email as a subscriber to the Double-Opt-In Standard
Affiliate Mailing List.
To remove yourself from all related maillists, just click here:
<mailto:pacserver@btamail.net.cn?Subject=REMOVE>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13  7:32: 2 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mgw1.MEIway.com (mgw1.meiway.com [212.73.210.75])
	by hub.freebsd.org (Postfix) with ESMTP id 5033737B417
	for <Freebsd-isp@freebsd.org>; Sun, 13 Jan 2002 07:31:52 -0800 (PST)
Received: from mail.Go2France.com (ms1.meiway.com [212.73.210.73])
	by mgw1.MEIway.com (Postfix Relay Hub) with ESMTP id 5DA3116B13
	for <Freebsd-isp@freebsd.org>; Sun, 13 Jan 2002 16:31:50 +0100 (CET)
Received: from LenConrad.Go2France.com [66.64.14.18] by mail.Go2France.com with ESMTP
  (SMTPD32-6.06) id AC5F6C401E8; Sun, 13 Jan 2002 16:48:47 +0100
Message-Id: <5.1.0.14.2.20020113090238.01f03ff8@mail.Go2France.com>
X-Sender: LConrad@Go2France.com@mail.Go2France.com
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Sun, 13 Jan 2002 09:31:47 -0600
To: Freebsd-isp@freebsd.org
From: Len Conrad <LConrad@Go2France.com>
Subject: tuning syslog.conf
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

We've got a gateway machine to which we're adding Bennett Todd's 
pop-before-smtp dynamic really access control.

The mailboxes and pop logins are on an Imail machine whose pop daemon is 
logging to the syslog server on FreeBSD4.4R running postfix (IMGate).  To 
use the smallest possible  file for tailing, we've set up a !POP3D section 
in syslog.conf and log Imail POP3D to a file (successfully), but the POP3D 
messages are also logged to /var/log/messages.  I can't see by what 
facility that's happening and so can't turn it off.  Here's the -d output:

# syslogd -d -4
listening on inet and/or inet6 socket
sending on inet and/or inet6 socket
off & running....
init
cfline("*.err;kern.debug;auth.notice;mail.crit          /dev/console", f, 
"*", "*")
cfline("*.notice;kern.debug;lpr.info;mail.crit;news.err; 
/var/log/messages", f, "*", "*")
cfline("security.*                                      /var/log/security", 
f, "*", "*")
cfline("mail.info                                       /var/log/maillog", 
f, "*", "*")
cfline("lpr.info                                        /var/log/lpd-errs", 
f, "*", "*")
cfline("cron.*                                          /var/log/cron", f, 
"*", "*")
cfline("*.err                                           root", f, "*", "*")
cfline("*.notice;news.err                               root", f, "*", "*")
cfline("*.alert                                         root", f, "*", "*")
cfline("*.emerg                                         *", f, "*", "*")
cfline("*.*                                             /var/log/slip.log", 
f, "startslip", "*")
cfline("*.*                                             /var/log/ppp.log", 
f, "ppp", "*")
cfline("*.*                                             /var/log/poplog", 
f, "POP3D", "*")
cfline("*.none                                          /var/log/messages", 
f, "POP3D", "*")
7 3 2 3 5 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 X CONSOLE: /dev/console
7 5 2 5 5 5 6 3 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 X FILE: /var/log/messages
X X X X X X X X X X X X X 8 X X X X X X X X X X X FILE: /var/log/security
X X 6 X X X X X X X X X X X X X X X X X X X X X X FILE: /var/log/maillog
X X X X X X 6 X X X X X X X X X X X X X X X X X X FILE: /var/log/lpd-errs
X X X X X X X X X 8 X X X X X X X X X X X X X X X FILE: /var/log/cron
3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 X USERS: root,
5 5 5 5 5 5 5 3 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 X USERS: root,
1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 X USERS: root,
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 X WALL:
8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 X FILE: /var/log/slip.log 
(startslip)
8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 X FILE: /var/log/ppp.log (ppp)
8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 X FILE: /var/log/poplog (POP3D)
X X X X X X X X X X X X X X X X X X X X X X X X X FILE: /var/log/messages 
(POP3D)

logmsg: pri 56, flags 4, from lc2, msg syslogd: restart
syslogd: restarted
logmsg: pri 166, flags 17, from lc2, msg Jan 13 09:11:55 lc2 syslogd: 
exiting on signal 2
cvthname(212.73.210.73)
logmsg: pri 15, flags 0, from ms1.meiway.com, msg POP3D (000001D7) logon 
success for LConrad mail.Go2France.com from 66.64.14.18
Logging to FILE /var/log/messages
Logging to USERS
Logging to FILE /var/log/poplog

How do we stop POP3D from going to messages?

2.  For a little ACL, when I add an "allowed peer" option ( 
ipaddr/masklen[:service] ) to the above syslog command "-a 
212.73.210.73/24", the -d output becomes:

# syslogd -d -4 -a 212.73.210.73
allowaddr: rule 0: numeric, addr = 212.73.210.0, mask = 255.255.255.0; port 
= 514
listening on inet and/or inet6 socket
sending on inet and/or inet6 socket
off & running....

and all syslog messages from 212.73.210.73 get this treatment:

cvthname(212.73.210.73)
validate: dgram from IP 212.73.210.73, port 3506, name ms1.meiway.com;
rejected in rule 0 due to port mismatch.

ok, so we use "-a 212.73.210.73/24:*" and get:

# syslogd -d -4 -a 212.73.210.73:*
syslogd: No match.

I've been all over man 3 and man 8 for syslogd, syslog, syslcon.conf and 
can't figure out what we're doing wrong in 2., or how to do 1.

Thanks
Len


http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
http://IMGate.MEIway.com  : Build free, hi-perf, anti-abuse mail gateways


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13  7:46: 5 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from thor.ghim.org (thor.ghim.org [209.249.182.115])
	by hub.freebsd.org (Postfix) with ESMTP id CBD4037B416
	for <Freebsd-isp@FreeBSD.ORG>; Sun, 13 Jan 2002 07:46:02 -0800 (PST)
Received: from aegle (aegle.nexus [192.168.1.128])
	by thor.ghim.org (8.11.3/8.11.3) with SMTP id g0DFiLc24185;
	Sun, 13 Jan 2002 15:44:21 GMT
Received: by aegle (sSMTP sendmail emulation); Sun, 13 Jan 2002 15:44:15 +0000
Date: Sun, 13 Jan 2002 15:44:15 +0000
From: George Lewis <schvin@schvin.net>
To: Len Conrad <LConrad@Go2France.com>
Cc: Freebsd-isp@FreeBSD.ORG
Subject: Re: tuning syslog.conf
Message-ID: <20020113154415.GN12373@schvin.net>
References: <5.1.0.14.2.20020113090238.01f03ff8@mail.Go2France.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <5.1.0.14.2.20020113090238.01f03ff8@mail.Go2France.com>
User-Agent: Mutt/1.3.24i
X-PGP-Fingerprint: 3D79 875A 9E33 E7BE E868 7EFA A703 5DDA A7C0 9E2C
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

> 2.  For a little ACL, when I add an "allowed peer" option ( 
> ipaddr/masklen[:service] ) to the above syslog command "-a 
> 212.73.210.73/24", the -d output becomes:
> 
> # syslogd -d -4 -a 212.73.210.73
> allowaddr: rule 0: numeric, addr = 212.73.210.0, mask = 255.255.255.0; port 
> = 514
> listening on inet and/or inet6 socket
> sending on inet and/or inet6 socket
> off & running....
> 
> and all syslog messages from 212.73.210.73 get this treatment:
> 
> cvthname(212.73.210.73)
> validate: dgram from IP 212.73.210.73, port 3506, name ms1.meiway.com;
> rejected in rule 0 due to port mismatch.
> 
> ok, so we use "-a 212.73.210.73/24:*" and get:
> 
> # syslogd -d -4 -a 212.73.210.73:*
> syslogd: No match.
> 
> I've been all over man 3 and man 8 for syslogd, syslog, syslcon.conf and 
> can't figure out what we're doing wrong in 2., or how to do 1.

Perhaps your shell is expanding the * for you? Have you by chance
tried:

	syslogd -d -4 -a 212.73.210.73:\*

HTH,

George

> 
> Thanks
> Len
> 
> 
> http://MenAndMice.com/DNS-training
> http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
> http://IMGate.MEIway.com  : Build free, hi-perf, anti-abuse mail gateways
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message

-- 
http://schvin.net/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13  9:17:44 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mgw1.MEIway.com (mgw1.meiway.com [212.73.210.75])
	by hub.freebsd.org (Postfix) with ESMTP id 289EC37B416
	for <freebsd-isp@freebsd.org>; Sun, 13 Jan 2002 09:17:42 -0800 (PST)
Received: from mail.Go2France.com (ms1.meiway.com [212.73.210.73])
	by mgw1.MEIway.com (Postfix Relay Hub) with ESMTP id 28E9F16B13
	for <freebsd-isp@freebsd.org>; Sun, 13 Jan 2002 18:17:40 +0100 (CET)
Received: from LenConrad.Go2France.com [66.64.14.18] by mail.Go2France.com with ESMTP
  (SMTPD32-6.06) id A52D5EA401F0; Sun, 13 Jan 2002 18:34:37 +0100
Message-Id: <5.1.0.14.2.20020113105640.01f03ff8@mail.Go2France.com>
X-Sender: LConrad@Go2France.com@mail.Go2France.com
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Sun, 13 Jan 2002 11:17:37 -0600
To: freebsd-isp@freebsd.org
From: Len Conrad <LConrad@Go2France.com>
Subject: Re: tuning syslog.conf
In-Reply-To: <20020113154415.GN12373@schvin.net>
References: <5.1.0.14.2.20020113090238.01f03ff8@mail.Go2France.com>
 <5.1.0.14.2.20020113090238.01f03ff8@mail.Go2France.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


>Perhaps your shell is expanding the * for you? Have you by chance
>tried:
>
>         syslogd -d -4 -a 212.73.210.73:\*
>
>HTH,

great, it did:

syslogd -4 -d -a 212.73.210.73/32:\*
allowaddr: rule 0: numeric, addr = 212.73.210.73, mask = 255.255.255.255; 
port = 0

and now the ACL works:

validate: dgram from IP 212.73.210.73, port 4049, name ms1.meiway.com;
accepted in rule 0.
logmsg: pri 15, flags 0, from ms1.meiway.com, msg POP3D (00000072) logon 
success for LConrad mail.Go2France.com from 66.64.14.18
Logging to FILE /var/log/messages
Logging to USERS
Logging to FILE /var/log/poplog

Thanks, George.

Now please do your HTH thing on problem 1.  :))

Len



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13 11:35:31 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from xela.oopz.com (xela.oopz.com [209.20.244.131])
	by hub.freebsd.org (Postfix) with ESMTP id C515D37B404
	for <Freebsd-isp@freebsd.org>; Sun, 13 Jan 2002 11:35:09 -0800 (PST)
Subject: RE: tuning syslog.conf
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Sun, 13 Jan 2002 11:35:04 -0800
content-class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft Exchange V6.0.4712.0
Message-ID: <A6A82340FB3DB643A0678E3B10CD5AC1062FD8@xela.oopz.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: tuning syslog.conf
Thread-Index: AcGcR33QaHmcBxPgTqKVunaQLIUW9AAIQRtQ
From: "Noah Davidson" <Noah@oopz.com>
To: "Len Conrad" <LConrad@Go2France.com>, <Freebsd-isp@freebsd.org>
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

If you are referring to Ipswich's imail I would strongly recommend
something else.  We have just moved off of imail due to security
reasons.  For example all user names and passwords are kept in the
registry with the passwords kept in the HEX representation of the
password.  So as you can imagine all the passwords were very easy to
retrieve to move onto a UNIX system.  We are now using sendmail.  It
also turned out that many people (mainly spamers) have a full list of
all of our users email addresses from our old imail server.  If you are
interested in this let me know I have many perl scripts that I wrote on
windows to get all of the users and mail off of the imail server onto a
FreeBSD sendmail box.  Good luck.

Thanks
Noah

-----Original Message-----
From: Len Conrad [mailto:LConrad@Go2France.com]
Sent: Sunday, January 13, 2002 7:32 AM
To: Freebsd-isp@freebsd.org
Subject: tuning syslog.conf


We've got a gateway machine to which we're adding Bennett Todd's=20
pop-before-smtp dynamic really access control.

The mailboxes and pop logins are on an Imail machine whose pop daemon is

logging to the syslog server on FreeBSD4.4R running postfix (IMGate).
To=20
use the smallest possible  file for tailing, we've set up a !POP3D
section=20
in syslog.conf and log Imail POP3D to a file (successfully), but the
POP3D=20
messages are also logged to /var/log/messages.  I can't see by what=20
facility that's happening and so can't turn it off.  Here's the -d
output:

# syslogd -d -4
listening on inet and/or inet6 socket
sending on inet and/or inet6 socket
off & running....
init
cfline("*.err;kern.debug;auth.notice;mail.crit          /dev/console",
f,=20
"*", "*")
cfline("*.notice;kern.debug;lpr.info;mail.crit;news.err;=20
/var/log/messages", f, "*", "*")
cfline("security.*
/var/log/security",=20
f, "*", "*")
cfline("mail.info
/var/log/maillog",=20
f, "*", "*")
cfline("lpr.info
/var/log/lpd-errs",=20
f, "*", "*")
cfline("cron.*                                          /var/log/cron",
f,=20
"*", "*")
cfline("*.err                                           root", f, "*",
"*")
cfline("*.notice;news.err                               root", f, "*",
"*")
cfline("*.alert                                         root", f, "*",
"*")
cfline("*.emerg                                         *", f, "*", "*")
cfline("*.*
/var/log/slip.log",=20
f, "startslip", "*")
cfline("*.*
/var/log/ppp.log",=20
f, "ppp", "*")
cfline("*.*
/var/log/poplog",=20
f, "POP3D", "*")
cfline("*.none
/var/log/messages",=20
f, "POP3D", "*")
7 3 2 3 5 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 X CONSOLE: /dev/console
7 5 2 5 5 5 6 3 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 X FILE:
/var/log/messages
X X X X X X X X X X X X X 8 X X X X X X X X X X X FILE:
/var/log/security
X X 6 X X X X X X X X X X X X X X X X X X X X X X FILE: /var/log/maillog
X X X X X X 6 X X X X X X X X X X X X X X X X X X FILE:
/var/log/lpd-errs
X X X X X X X X X 8 X X X X X X X X X X X X X X X FILE: /var/log/cron
3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 X USERS: root,
5 5 5 5 5 5 5 3 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 X USERS: root,
1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 X USERS: root,
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 X WALL:
8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 X FILE:
/var/log/slip.log=20
(startslip)
8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 X FILE: /var/log/ppp.log
(ppp)
8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 X FILE: /var/log/poplog
(POP3D)
X X X X X X X X X X X X X X X X X X X X X X X X X FILE:
/var/log/messages=20
(POP3D)

logmsg: pri 56, flags 4, from lc2, msg syslogd: restart
syslogd: restarted
logmsg: pri 166, flags 17, from lc2, msg Jan 13 09:11:55 lc2 syslogd:=20
exiting on signal 2
cvthname(212.73.210.73)
logmsg: pri 15, flags 0, from ms1.meiway.com, msg POP3D (000001D7) logon

success for LConrad mail.Go2France.com from 66.64.14.18
Logging to FILE /var/log/messages
Logging to USERS
Logging to FILE /var/log/poplog

How do we stop POP3D from going to messages?

2.  For a little ACL, when I add an "allowed peer" option (=20
ipaddr/masklen[:service] ) to the above syslog command "-a=20
212.73.210.73/24", the -d output becomes:

# syslogd -d -4 -a 212.73.210.73
allowaddr: rule 0: numeric, addr =3D 212.73.210.0, mask =3D =
255.255.255.0;
port=20
=3D 514
listening on inet and/or inet6 socket
sending on inet and/or inet6 socket
off & running....

and all syslog messages from 212.73.210.73 get this treatment:

cvthname(212.73.210.73)
validate: dgram from IP 212.73.210.73, port 3506, name ms1.meiway.com;
rejected in rule 0 due to port mismatch.

ok, so we use "-a 212.73.210.73/24:*" and get:

# syslogd -d -4 -a 212.73.210.73:*
syslogd: No match.

I've been all over man 3 and man 8 for syslogd, syslog, syslcon.conf and

can't figure out what we're doing wrong in 2., or how to do 1.

Thanks
Len


http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
http://IMGate.MEIway.com  : Build free, hi-perf, anti-abuse mail
gateways


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13 12:18: 1 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from pitr.tuxinternet.com (pitr.tuxinternet.com [208.32.175.113])
	by hub.freebsd.org (Postfix) with ESMTP id 06F8E37B400
	for <freebsd-isp@freebsd.org>; Sun, 13 Jan 2002 12:17:58 -0800 (PST)
Received: (from hugme@localhost)
	by pitr.tuxinternet.com (8.11.0/8.11.0) id g0DKP8i19558;
	Sun, 13 Jan 2002 15:25:08 -0500 (EST)
	(envelope-from hugme)
Date: Sun, 13 Jan 2002 15:25:08 -0500
From: Hug Me <hugme@hugme.org>
To: root@se2600.org
Cc: freebsd-isp@freebsd.org
Subject: e-mail client
Message-ID: <20020113152508.F19327@pitr.tuxinternet.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


I am looking for a GUI e-mail client, I have tried several but every
one I try eats TONS of memory. I am going to have around 150 copies
of this running at the same time so it using a small amount of memory
is important.. these are the ones I have tried so far:

  PID USERNAME PRI NICE  SIZE    RES STATE    TIME   WCPU    CPU COMMAND
11832 hugme      2   0  9840K  8296K poll     0:02  0.00%  0.00% arrow
11830 hugme      2   0  8084K  7120K select   0:01  0.00%  0.00% postilion.exec
11794 hugme      2   0  7276K  5896K poll     0:01  0.00%  0.00% sylpheed


running in top. as you can see the smallest so far is sylpheed it's it's 
7.2 meg running in momory.. thats 11.8 gig of memory, just to run MAIL,
that is INSTANE. the only thing taking up more than that is windowmaker
but that is expected.

anyone have any Ideas?



-- 


	*************************************************

	hugme				  hugme@hugme.org
	http://www.hugme.org	http://www.atlantacon.org

	PGP Public key:
		http://www.hugme.org/mykey.pgp

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13 12:29:26 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from albatross.prod.itd.earthlink.net (albatross.mail.pas.earthlink.net [207.217.120.120])
	by hub.freebsd.org (Postfix) with ESMTP id B85D137B417
	for <freebsd-isp@freebsd.org>; Sun, 13 Jan 2002 12:29:23 -0800 (PST)
Received: from dhcp151-67-151-24.nt01-c3.cpe.charter-ne.com ([24.151.67.151] helo=there)
	by albatross.prod.itd.earthlink.net with smtp (Exim 3.33 #1)
	id 16PrFg-0005s5-00; Sun, 13 Jan 2002 12:29:12 -0800
Content-Type: text/plain;
  charset="iso-8859-1"
From: Dylan Carlson <absinthe@pobox.com>
Reply-To: absinthe@pobox.com
Organization: r e t r o v e r t i g o
To: Hug Me <hugme@hugme.org>, root@se2600.org
Subject: Re: e-mail client
Date: Sun, 13 Jan 2002 15:29:11 -0500
X-Mailer: KMail [version 1.3]
Cc: freebsd-isp@freebsd.org
References: <20020113152508.F19327@pitr.tuxinternet.com>
In-Reply-To: <20020113152508.F19327@pitr.tuxinternet.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-Id: <E16PrFg-0005s5-00@albatross.prod.itd.earthlink.net>
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Sunday 13 January 2002 15:25, Hug Me wrote:
>
> anyone have any Ideas?

http://www.crucial.com/

-- 
Dylan Carlson [absinthe@pobox.com]

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13 13:39:22 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from Thanatos.Shenton.Org (a3.ebbed1.client.atlantech.net [209.190.235.163])
	by hub.freebsd.org (Postfix) with SMTP id 4A08637B432
	for <freebsd-isp@freebsd.org>; Sun, 13 Jan 2002 13:39:10 -0800 (PST)
Received: (qmail 95043 invoked by uid 1000); 13 Jan 2002 21:39:09 -0000
To: freebsd-isp@freebsd.org
Subject: Who's saturating outbound link (Cisco 2620, IOS 12.1(1))
From: Chris Shenton <chris@shenton.org>
Date: 13 Jan 2002 16:39:09 -0500
In-Reply-To: <1241681557.20010725114735@buz.ch>
Message-ID: <87g05a2ao2.fsf_-_@thanatos.shenton.org>
Lines: 18
User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.1
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

An ISP I support has FreeBSD servers and a bunch of LAN- and
ISDN-connected clients.  Its remote so I can't get to it physically.

In the past couple days, the 256Kbps link has been totally saturated,
MRTG tells me it's outbound traffic.   How can I determine which
system is causing the traffic?

I'm not a Cisco expert, but hoped "show ip accounting" would help, but
it only appears to show me *inbound* traffic from all outside
addresses to my internal addresses.  I need the opposite.  Is there
some IOS command I'm just not clued into? 

I'm working with the remote admin to see if I can get a hub put
between the router and other ISP gear, then put a FreeBSD box on that
so I can use tcpdump or others to sniff the traffic.  Until then, I'm
blind unless there's some cisco voodoo I can use.

Any ideas? Thanks.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13 15: 3:15 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from home.cg.nu (home.cg.nu [213.196.2.115])
	by hub.freebsd.org (Postfix) with ESMTP
	id 7639A37B419; Sun, 13 Jan 2002 15:03:12 -0800 (PST)
Received: from wevers.org (netfreak.xs4all.nl [213.84.69.96])
	by home.cg.nu (Postfix) with ESMTP
	id C4F56158E8C; Mon, 14 Jan 2002 00:03:05 +0100 (CET)
Message-ID: <3C421228.9060904@wevers.org>
Date: Mon, 14 Jan 2002 00:03:04 +0100
From: Henk Wevers <henk@wevers.org>
Reply-To: henk@wevers.org
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:0.9.4) Gecko/20011019 Netscape6/6.2
X-Accept-Language: en-us
MIME-Version: 1.0
To: freebsd-isp@freebsd.org, freebsd-stable@freebsd.org
Subject: jail() management scripts
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi,

I have added some perl scripts to make management to a multiple jail 
enviorement somewhat more easy.
http://jailnotes.cg.nu/scripts/

If you have some scripts please mail me, then i will add then to the site.

Henk Wevers


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13 16:26: 2 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from alpha.xerox.com (alpha.Xerox.COM [13.1.64.93])
	by hub.freebsd.org (Postfix) with SMTP
	id AB69437B405; Sun, 13 Jan 2002 16:25:52 -0800 (PST)
Received: from louise.parc.xerox.com ([13.2.118.28]) by alpha.xerox.com with SMTP id <128648(1)>; Sun, 13 Jan 2002 16:25:37 PST
Received: from dilbert.homenat.farrar.org ([13.1.100.39]) by louise.parc.xerox.com with SMTP id <357674>; Sun, 13 Jan 2002 16:25:24 PST
Date: Sun, 13 Jan 2002 16:25:35 PST
From: Keith Farrar <farrar@parc.xerox.com>
To: Henk Wevers <henk@wevers.org>
Cc: freebsd-isp@freebsd.org, <freebsd-stable@freebsd.org>
Subject: Re: jail() management scripts
In-Reply-To: <3C421228.9060904@wevers.org>
Message-ID: <Pine.WNT.4.41.0201131606510.1352-100000@dilbert.homenat.farrar.org>
X-X-Sender: farrar@[127.0.0.1]
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Sun, 13 Jan 2002, Henk Wevers wrote:
>
> I have added some perl scripts to make management to a multiple jail
> enviorement somewhat more easy.
> http://jailnotes.cg.nu/scripts/
>
> If you have some scripts please mail me, then i will add then to the site.
>
> Henk Wevers

#!/bin/sh
## @(#) Startup a jail chroot environment -Keith Farrar <farrar@parc.xerox.com>
## @(#)  jailbait.parc.xerox.com:/usr/local/etc/rc.d/jail-script.sh
## Conventions:
## My jails have neither console nor network logins, so I feed the
##  shell argument of this script to manage jailed accounts and services.
## In normal usage, I create one instance of this script per jailed
##  service, named /usr/local/etc/rc.d/jail-${JAILIPPADDR}.sh
## Each jail file system is rooted at /local/jail/${JAILIPPADR}/
##	-keith


JAILHOSTNAME="jailbait.parc.xerox.com"
JAILIPPADDR="10.10.10.11"
JAILTOPDIR="/local/jail"

case "$1" in
start)
        echo  Starting jail-${JAILIPPADDR}
        /usr/sbin/jail ${JAILTOPDIR}/${JAILIPPADDR} \
		${JAILHOSTNAME} ${JAILIPPADDR} \
                   /bin/sh /etc/rc
        ;;

shell)
        echo  Starting jail-${JAILIPPADDR}
        /usr/sbin/jail ${JAILTOPDIR}/${JAILIPPADDR} \
		${JAILHOSTNAME} ${JAILIPPADDR} \
                   /bin/tcsh
        ;;

##      Jailed procs are in the output of the command:
##      "egrep $JAILHOSTNAME /proc/*/status | awk -F/ '{print $3}'"

list)
        pids=`/usr/bin/egrep $JAILHOSTNAME /proc/*/status | /usr/bin/awk -F/ '{print $3}'`
        echo Jailed process PIDs: $pids
        ;;

stop)
        echo  Stopping jail-${JAILIPPADDR}
        pids=`/usr/bin/egrep $JAILHOSTNAME /proc/*/status | /usr/bin/awk -F/ '{print $3}'`
        /bin/kill -TERM $pids
        ;;

restart)
        /bin/sh $0 stop
        sleep 1
        /bin/sh $0 start
        ;;

*)
        echo "Usage: `basename $0` {start|stop|restart|shell|list}" >&2
        ;;
esac

exit 0


| Keith Farrar | Xerox Palo Alto Research Center (PARC) | Palo Alto, CA |


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13 18:46:53 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from cutter.wantabe.com (cutter.wantabe.com [204.2.6.8])
	by hub.freebsd.org (Postfix) with ESMTP id 7D5E137B417
	for <freebsd-isp@FreeBSD.ORG>; Sun, 13 Jan 2002 18:46:50 -0800 (PST)
Received: from cutter.wantabe.com (cutter.wantabe.com [204.2.6.8])
	by cutter.wantabe.com (8.10.1/8.10.1) with ESMTP id g0E2kUY60941;
	Sun, 13 Jan 2002 20:46:31 -0600 (CST)
Date: Sun, 13 Jan 2002 20:46:29 -0600 (CST)
From: "Jeffrey J. Libman" <jeffrl@wantabe.com>
To: Hug Me <hugme@hugme.org>
Cc: root@se2600.org, <freebsd-isp@FreeBSD.ORG>
Subject: Re: e-mail client
In-Reply-To: <20020113152508.F19327@pitr.tuxinternet.com>
Message-ID: <Pine.BSF.4.43.0201132045320.60427-100000@cutter.wantabe.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

try a web based solution? i run twig (http://twig.screwdriver.net/) which
uses php and imap services to deliver mail. run it under ssl and it is
secure enough.

ymmv.

jeff

--
                                |
                                |\            +------------------------------+
Jeffrey J. Libman, ops. mgr.    | \           |  Wantabe Internet Services   |
Wantabe, Inc.                   |__\          +------------------------------+
jeffrl@wantabe.com        <-----|------>
(281) 493-0718       __,.-=\'`^`'~=-../__,.-=

On Sun, 13 Jan 2002, Hug Me wrote:

>
> I am looking for a GUI e-mail client, I have tried several but every
> one I try eats TONS of memory. I am going to have around 150 copies
> of this running at the same time so it using a small amount of memory
> is important.. these are the ones I have tried so far:
>
>   PID USERNAME PRI NICE  SIZE    RES STATE    TIME   WCPU    CPU COMMAND
> 11832 hugme      2   0  9840K  8296K poll     0:02  0.00%  0.00% arrow
> 11830 hugme      2   0  8084K  7120K select   0:01  0.00%  0.00% postilion.exec
> 11794 hugme      2   0  7276K  5896K poll     0:01  0.00%  0.00% sylpheed
>
>
> running in top. as you can see the smallest so far is sylpheed it's it's
> 7.2 meg running in momory.. thats 11.8 gig of memory, just to run MAIL,
> that is INSTANE. the only thing taking up more than that is windowmaker
> but that is expected.
>
> anyone have any Ideas?
>
>
>
> --
>
>
> 	*************************************************
>
> 	hugme				  hugme@hugme.org
> 	http://www.hugme.org	http://www.atlantacon.org
>
> 	PGP Public key:
> 		http://www.hugme.org/mykey.pgp
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13 23:20:47 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from net2.dinoex.sub.org (net2.dinoex.de [212.184.201.182])
	by hub.freebsd.org (Postfix) with ESMTP
	id 9BC9B37B41D; Sun, 13 Jan 2002 23:20:39 -0800 (PST)
Received: from gate.dinoex.sub.org (dinoex@localhost)
	by net2.dinoex.sub.org (8.11.6/8.11.6) with BSMTP id g0E7K3i20244; Mon, 14 Jan 2002 08:20:03 +0100 (CET)
	(envelope-from dirk.meyer@dinoex.sub.org)
To: henk@wevers.org, freebsd-isp@freebsd.org,
	freebsd-stable@freebsd.org
Message-ID: <AcJiXyzW83@dmeyer.dinoex.sub.org>
From: dirk.meyer@dinoex.sub.org (Dirk Meyer)
Organization: privat
Subject: Re: jail() management scripts
Date: Mon, 14 Jan 2002 08:18:15 +0100
X-Mailer: Dinoex 1.77
References: <3C421228.9060904@wevers.org>
X-Gateway: ZCONNECT gate.dinoex.sub.org [UNIX/Connect 0.93]
X-PGP-Fingerprint: 44 16 EC 0A D3 3A 4F 28  8A 8A 47 93 F1 CF
	2F 12
X-ZC-TELEFON: V+49-5606-6512Q F+49-5606-55023
X-Copyright: (C) Copyright 2001 by Dirk Meyer -- All rights reserved.
X-ZC-POST: Im Grund 4;34317 Habichtswald;Germany
X-PGP-Key-Avail: mailto:pgp-public-keys@keys.de.pgp.net Subject:GET
	0x331CDA5D
X-ZC-VIA: 20020114000000W+1@dinoex.sub.org
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi Henk Wevers,

> If you have some scripts please mail me, then i will add then to the site.

you asked :)

I use some more jails, and create them in a configuration file.

kind regards Dirk

- Dirk Meyer, Im Grund 4, 34317 Habichtswald, Germany

#
# /usr/local/etc/jail.conf
#
# Format:
# dir		hostname		IP-Addr
#
jail1		name1.do.main      	10.6.200.201
#jail2		inaktiv.do.main		10.6.200.202
#
# eof

/usr/local/etc/rc.d/jail.sh:

#!/bin/sh
#	(c) 2002 Dirk Meyer, under FreeBSD License
#
#	Thanks to:
#	- Gregory Neil Shapiro for the "killjail" function.
#	- Keith Farrar for the "list" and "restart" target.
#
case $1 in
start)
	grep -v "^#" /usr/local/etc/jail.conf |
	while read dir name ip
	do
		echo "starting ... ${ip} ${name}"
		jail "${dir}" "${name}" "${ip}" /bin/sh /etc/rc
	done
	exit 0
	;;
stop)
	grep -v "^#" /usr/local/etc/jail.conf |
	while read dir name ip
	do
		echo "stopping ... ${ip} ${name}"
		pids=`grep -l " ${name}\$" /proc/*/status |
			awk -F/ '{print $3}'`
		kill -TERM $pids
	done
	exit 0
        ;;
list)
	grep -v "^#" /usr/local/etc/jail.conf |
	while read dir name ip
	do
		pids=`grep -l " ${name}\$" /proc/*/status |
			awk -F/ '{print $3}'`
		echo "processes for ${ip} ${name}:" $pids
	done
	exit 0
        ;;
restart)
	sh $0 stop
	seep 1
	sh $0 start
	;;
*)
	echo "usage: `basename $0` {start|stop|list|restart}" >&2
	exit 64
	;;
esac
#
# eof

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13 23:56:54 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from workhorse.iMach.com (workhorse.iMach.com [206.127.77.89])
	by hub.freebsd.org (Postfix) with ESMTP id C23B337B402
	for <freebsd-isp@FreeBSD.ORG>; Sun, 13 Jan 2002 23:56:46 -0800 (PST)
Received: from localhost (forrestc@localhost)
	by workhorse.iMach.com (8.9.3/8.9.3) with ESMTP id AAA22687;
	Mon, 14 Jan 2002 00:52:27 -0700 (MST)
Date: Mon, 14 Jan 2002 00:52:27 -0700 (MST)
From: "Forrest W. Christian" <forrestc@imach.com>
To: Hug Me <hugme@hugme.org>
Cc: root@se2600.org, freebsd-isp@FreeBSD.ORG
Subject: Re: e-mail client
In-Reply-To: <20020113152508.F19327@pitr.tuxinternet.com>
Message-ID: <Pine.BSF.4.21.0201132350410.22567-100000@workhorse.iMach.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Sun, 13 Jan 2002, Hug Me wrote:

> I am going to have around 150 copies of this running at the same time so
> it using a small amount of memory is important..
...
> 7.2 meg running in momory.. thats 11.8 gig of memory, just to run MAIL,

Your memory math is broken.  But not because you can't do regular math -
but instead that memory math is different.

  PID USERNAME PRI NICE  SIZE    RES STATE    TIME   WCPU    CPU COMMAND
11832 hugme      2   0  9840K  8296K poll     0:02  0.00%  0.00% arrow
11830 hugme      2   0  8084K  7120K select   0:01  0.00%  0.00%
postilion.exec
11794 hugme      2   0  7276K  5896K poll     0:01  0.00%  0.00% sylpheed

Although each of these do require the size indicated for the first
instance, the second instance in a lot of cases takes a lot less.

The reason for this is that the FreeBSD system can share common code
between the processes.   The only real way to tell how much these take on
a per-instance case is to load up say 10 and look at the total memory
usage.

Also, if you have a single app like this which you are going to be running
a LOT of copies of, it is in a lot of cases better if the binary is
statically linked.  This helps with the code sharing as it helps the VM
subsystem not dirty code pages.   In addition, setting the H option for
malloc might be a good idea (YMMV).  To do this:

   ln -s 'H' /etc/malloc.conf

This tells the memory allocator to provide hints to the vm subsystem about
free pages so that the vm subsystem can better handle freeing up dirty
pages which don't contain anything at all.

BYW, are you trying to say that you are going to have 150 clients running
X apps on this box?   This seems kinda scary.   I would seriously look at
a web-based mail app.  I personally recommend IMP
(http://www.horde.org/imp) or if you need scheduling, look at twig.

The real advantage of a web based app is that one web server instance can
actually handle many clients.   If you compile apache with php support
built in and run IMP, there is virtually no per-process startup penalty
and 10 processes or so should be able to handle the 100-150 users you are
talking about.

- Forrest W. Christian (forrestc@imach.com) AC7DE
----------------------------------------------------------------------
The Innovation Machine Ltd.                              P.O. Box 5749
http://www.imach.com/                                Helena, MT  59604
Home of PacketFlux Technogies and BackupDNS.com         (406)-442-6648
----------------------------------------------------------------------
      Protect your personal freedoms - visit http://www.lp.org/



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sun Jan 13 23:59:32 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from workhorse.iMach.com (workhorse.iMach.com [206.127.77.89])
	by hub.freebsd.org (Postfix) with ESMTP id C220D37B43A
	for <freebsd-isp@FreeBSD.ORG>; Sun, 13 Jan 2002 23:59:13 -0800 (PST)
Received: from localhost (forrestc@localhost)
	by workhorse.iMach.com (8.9.3/8.9.3) with ESMTP id AAA22698;
	Mon, 14 Jan 2002 00:54:59 -0700 (MST)
Date: Mon, 14 Jan 2002 00:54:58 -0700 (MST)
From: "Forrest W. Christian" <forrestc@imach.com>
To: Dylan Carlson <absinthe@pobox.com>
Cc: Hug Me <hugme@hugme.org>, root@se2600.org,
	freebsd-isp@FreeBSD.ORG
Subject: Re: e-mail client
In-Reply-To: <E16PrFg-0005s5-00@albatross.prod.itd.earthlink.net>
Message-ID: <Pine.BSF.4.21.0201140052510.22567-100000@workhorse.iMach.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Sun, 13 Jan 2002, Dylan Carlson wrote:
> On Sunday 13 January 2002 15:25, Hug Me wrote:
> >
> > anyone have any Ideas?
> 
> http://www.crucial.com/

I'm sorry I normally don't reply to these, but this was one of the best
replies I've seen in a long time.  You made *this* system administrator
have a good laugh (even if I DO know that that is probably going to be
part of the solution).

- Forrest W. Christian (forrestc@imach.com) AC7DE
----------------------------------------------------------------------
The Innovation Machine Ltd.                              P.O. Box 5749
http://www.imach.com/                                Helena, MT  59604
Home of PacketFlux Technogies and BackupDNS.com         (406)-442-6648
----------------------------------------------------------------------
      Protect your personal freedoms - visit http://www.lp.org/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Jan 14  0: 8: 9 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from workhorse.iMach.com (workhorse.iMach.com [206.127.77.89])
	by hub.freebsd.org (Postfix) with ESMTP id 9CCDA37B400
	for <freebsd-isp@FreeBSD.ORG>; Mon, 14 Jan 2002 00:08:05 -0800 (PST)
Received: from localhost (forrestc@localhost)
	by workhorse.iMach.com (8.9.3/8.9.3) with ESMTP id BAA22729;
	Mon, 14 Jan 2002 01:03:51 -0700 (MST)
Date: Mon, 14 Jan 2002 01:03:51 -0700 (MST)
From: "Forrest W. Christian" <forrestc@imach.com>
To: Chris Shenton <chris@shenton.org>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: Who's saturating outbound link (Cisco 2620, IOS 12.1(1))
In-Reply-To: <87g05a2ao2.fsf_-_@thanatos.shenton.org>
Message-ID: <Pine.BSF.4.21.0201140103030.22567-100000@workhorse.iMach.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On 13 Jan 2002, Chris Shenton wrote:

> I'm not a Cisco expert, but hoped "show ip accounting" would help, but
> it only appears to show me *inbound* traffic from all outside
> addresses to my internal addresses.  I need the opposite.  Is there
> some IOS command I'm just not clued into? 

Perhaps you could look at the *outbound* traffic on the customer-facing
interfaces?

- Forrest W. Christian (forrestc@imach.com) AC7DE
----------------------------------------------------------------------
The Innovation Machine Ltd.                              P.O. Box 5749
http://www.imach.com/                                Helena, MT  59604
Home of PacketFlux Technogies and BackupDNS.com         (406)-442-6648
----------------------------------------------------------------------
      Protect your personal freedoms - visit http://www.lp.org/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Jan 14  6:30: 0 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from smtp.kka.com (smtp.kka.com [63.141.65.2])
	by hub.freebsd.org (Postfix) with ESMTP id B5AE537B42F
	for <freebsd-isp@freebsd.org>; Mon, 14 Jan 2002 06:29:38 -0800 (PST)
Subject: Re: tuning syslog.conf
To: freebsd-isp@freebsd.org
X-Mailer: Lotus Notes Release 5.0.8  June 18, 2001
Message-ID: <OFD2BE3ADD.536936DE-ON86256B41.004F1AFD@kka.com>
From: Eric_Stanfield@kenokozie.com
Date: Mon, 14 Jan 2002 08:26:08 -0600
X-MIMETrack: Serialize by Router on Notes1st/Keno(Release 5.0.4 |June 8, 2000) at 01/14/2002
 08:26:15 AM
MIME-Version: 1.0
Content-type: text/plain; charset=us-ascii
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


Had the same problems.  The trick was putting ' ' around the -a flag
argument.  ie:

syslog -a '4.13.14.15/27:*'

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Eric Stanfield, K2Access
Keno Kozie Associates
222 N LaSalle #1500
Chicago, IL 60606
(312) 332-3000




                                                                                          
                    George Lewis                                                          
                    <schvin@schvin.net>        To:     Len Conrad <LConrad@Go2France.com> 
                    Sent by:                   cc:     Freebsd-isp@FreeBSD.ORG            
                    owner-freebsd-isp@F        Subject:     Re: tuning syslog.conf        
                    reeBSD.ORG                                                            
                                                                                          
                                                                                          
                    01/13/2002 09:44 AM                                                   
                                                                                          
                                                                                          



> 2.  For a little ACL, when I add an "allowed peer" option (
> ipaddr/masklen[:service] ) to the above syslog command "-a
> 212.73.210.73/24", the -d output becomes:
>
> # syslogd -d -4 -a 212.73.210.73
> allowaddr: rule 0: numeric, addr = 212.73.210.0, mask = 255.255.255.0;
port
> = 514
> listening on inet and/or inet6 socket
> sending on inet and/or inet6 socket
> off & running....
>
> and all syslog messages from 212.73.210.73 get this treatment:
>
> cvthname(212.73.210.73)
> validate: dgram from IP 212.73.210.73, port 3506, name ms1.meiway.com;
> rejected in rule 0 due to port mismatch.
>
> ok, so we use "-a 212.73.210.73/24:*" and get:
>
> # syslogd -d -4 -a 212.73.210.73:*
> syslogd: No match.
>
> I've been all over man 3 and man 8 for syslogd, syslog, syslcon.conf and
> can't figure out what we're doing wrong in 2., or how to do 1.

Perhaps your shell is expanding the * for you? Have you by chance
tried:

           syslogd -d -4 -a 212.73.210.73:\*

HTH,

George

>
> Thanks
> Len
>
>
> http://MenAndMice.com/DNS-training
> http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
> http://IMGate.MEIway.com  : Build free, hi-perf, anti-abuse mail gateways
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message

--
http://schvin.net/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Jan 14  6:35:54 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mgw1.MEIway.com (mgw1.meiway.com [212.73.210.75])
	by hub.freebsd.org (Postfix) with ESMTP id B444A37B425
	for <freebsd-isp@freebsd.org>; Mon, 14 Jan 2002 06:35:52 -0800 (PST)
Received: from mail.Go2France.com (ms1.meiway.com [212.73.210.73])
	by mgw1.MEIway.com (Postfix Relay Hub) with ESMTP id 136CC16B25
	for <freebsd-isp@freebsd.org>; Mon, 14 Jan 2002 15:35:51 +0100 (CET)
Received: from LenConrad.Go2France.com [66.64.14.18] by mail.Go2France.com with ESMTP
  (SMTPD32-6.06) id A0BF13030232; Mon, 14 Jan 2002 15:52:47 +0100
Message-Id: <5.1.0.14.2.20020114083445.02488008@mail.Go2France.com>
X-Sender: LConrad@Go2France.com@mail.Go2France.com
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Mon, 14 Jan 2002 08:35:47 -0600
To: freebsd-isp@freebsd.org
From: Len Conrad <LConrad@Go2France.com>
Subject: External app logging to syslog
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


We have Imail's POP service logging to a FreeBSD4.4 machine.  The app is 
seen in the syslog lines as "POP3D".  It is being written to messages file 
with this as-installed syslog.conf line:

*.notice;kern.debug;lpr.info;mail.crit;news.err; /var/log/messages

How do we stop it from being logged there? under which facility.level is it 
being caught?

We have it also logging as a app like this:

!POP3D
*.*    /var/log/poplog
*.none /var/log/messages

and so want to remove it from messages.   (2nd line doesn't "none" it out 
of messages)

Running "syslog -d" gave lotsa of info but we still can't see specifically 
how POP3D is winding up in messages.

thanks
Len


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Jan 14 12:13:40 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from ra.upan.org (ra.upan.org [204.107.76.19])
	by hub.freebsd.org (Postfix) with ESMTP
	id 7890037B404; Mon, 14 Jan 2002 12:13:37 -0800 (PST)
Received: from ocsinternet.com ([10.0.0.102])
	by ra.upan.org (8.11.6/8.11.6) with ESMTP id g0EKE7D87946;
	Mon, 14 Jan 2002 15:14:07 -0500 (EST)
	(envelope-from mikel@ocsinternet.com)
Message-ID: <3C433BCE.8080402@ocsinternet.com>
Date: Mon, 14 Jan 2002 15:13:02 -0500
From: Mikel King <mikel@ocsinternet.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.4) Gecko/20011019 Netscape6/6.2
X-Accept-Language: en-us
MIME-Version: 1.0
To: freebsd-questions@FreeBSD.ORG
Cc: freebsd-isp@FreeBSD.ORG
Subject: sendmail w/ maildirectory
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Per chance does anyone know if there is a way to over ride sendmail's 
default mail box behavior and have it use the mail directory structure 
instead?

Cheers,
Mikel


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Jan 14 12:43:54 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from ra.upan.org (ra.upan.org [204.107.76.19])
	by hub.freebsd.org (Postfix) with ESMTP
	id AB68737B419; Mon, 14 Jan 2002 12:43:50 -0800 (PST)
Received: from ocsinternet.com ([10.0.0.102])
	by ra.upan.org (8.11.6/8.11.6) with ESMTP id g0EKiKD88029;
	Mon, 14 Jan 2002 15:44:20 -0500 (EST)
	(envelope-from mikel@ocsinternet.com)
Message-ID: <3C4342E3.9010007@ocsinternet.com>
Date: Mon, 14 Jan 2002 15:43:15 -0500
From: Mikel King <mikel@ocsinternet.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.4) Gecko/20011019 Netscape6/6.2
X-Accept-Language: en-us
MIME-Version: 1.0
To: freebsd-questions <freebsd-questions@FreeBSD.ORG>
Cc: freebsd-isp <freebsd-isp@FreeBSD.ORG>
Subject: redundant POP
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Does anyone have a good recommendation on how to create redundant pop3 
servers?

Cheers,
Mikel


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Mon Jan 14 12:55:56 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from relay04.roc.frontiernet.net (alteon01e.roc.frontiernet.net [66.133.130.235])
	by hub.freebsd.org (Postfix) with SMTP id 5171A37B41D
	for <freebsd-isp@FreeBSD.ORG>; Mon, 14 Jan 2002 12:55:46 -0800 (PST)
Received: (qmail 7041 invoked from network); 14 Jan 2002 20:55:45 -0000
Received: from unknown (HELO nothingness.loophole.org) ([66.133.130.247]) (envelope-sender <ksb@loophole.org>)
          by relay04.roc.frontiernet.net (qmail-ldap-1.03) with SMTP
          for <mikel@ocsinternet.com>; 14 Jan 2002 20:55:45 -0000
Date: Mon, 14 Jan 2002 16:09:39 -0500 (EST)
From: "Kevin S. Brackett" <ksb@loophole.org>
To: Mikel King <mikel@ocsinternet.com>
Cc: <freebsd-questions@FreeBSD.ORG>, <freebsd-isp@FreeBSD.ORG>
Subject: Re: sendmail w/ maildirectory
In-Reply-To: <3C433BCE.8080402@ocsinternet.com>
Message-ID: <20020114160419.M91005-100000@nothingness.loophole.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Mon, 14 Jan 2002, Mikel King wrote:

> Per chance does anyone know if there is a way to over ride sendmail's
> default mail box behavior and have it use the mail directory structure
> instead?
>
> Cheers,
> Mikel
>

Yes, with the use of procmail... it's in the ports. You'll need to
remake your sendmail cf to use procmail as the delivery agent (by
adding "FEATURE(local_procmail)" to your .mc), then it's as
easy as adding a few lines to your /usr/local/etc/procmailrc :

PATH=/bin:/usr/bin:/usr/local/bin
MAILDIR=$HOME
DEFAULT=$MAILDIR/Maildir/

and ... tada :)

- kevin


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Jan 15  3:39:18 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from arena.delfi.lv (mail.parks.lv [195.2.96.15])
	by hub.freebsd.org (Postfix) with ESMTP id 6A6EB37B41A
	for <freebsd-isp@freebsd.org>; Tue, 15 Jan 2002 03:39:15 -0800 (PST)
Received: from matiss ([195.2.113.18])
	by arena.delfi.lv (8.9.3/8.9.1/OL.cf-3.1) with SMTP id NAA22274
	for <freebsd-isp@freebsd.org>; Tue, 15 Jan 2002 13:39:12 +0200
From: "Matiss Elsbergs" <matiss@bkc.lv>
To: <freebsd-isp@freebsd.org>
Subject: Jail quota
Date: Tue, 15 Jan 2002 13:40:04 +0200
Message-ID: <FOEJJHFHNBIAKMKHNKLIOEFLCJAA.matiss@bkc.lv>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="koi8-r"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
Importance: Normal
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello there, fellow owners of all system processes,

I believe, that this question has been discussed, and not once.

But - here it goes again..

How to limit disk usage, when running jail environment?

Do I need to setup an user x, set a quota for him, and run a jail as this
user?
Are there any other ways?

rgds, Matis





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Jan 15  3:45:46 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from axis.tdd.lt (axis.tdd.lt [213.197.128.94])
	by hub.freebsd.org (Postfix) with ESMTP id 7AB4337B417
	for <freebsd-isp@FreeBSD.ORG>; Tue, 15 Jan 2002 03:45:43 -0800 (PST)
Received: from localhost (midom@localhost)
	by axis.tdd.lt (8.11.6/8.11.6) with ESMTP id g0FBkQr60226;
	Tue, 15 Jan 2002 13:46:26 +0200 (EET)
	(envelope-from midom@delfi.lt)
X-Authentication-Warning: axis.tdd.lt: midom owned process doing -bs
Date: Tue, 15 Jan 2002 13:46:26 +0200 (EET)
From: Domas Mituzas <midom@delfi.lt>
X-X-Sender:  <midom@axis.tdd.lt>
To: Matiss Elsbergs <matiss@bkc.lv>
Cc: <freebsd-isp@FreeBSD.ORG>
Subject: Re: Jail quota
In-Reply-To: <FOEJJHFHNBIAKMKHNKLIOEFLCJAA.matiss@bkc.lv>
Message-ID: <20020115134344.G58690-100000@axis.tdd.lt>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


Hi there,

> Hello there, fellow owners of all system processes,
> I believe, that this question has been discussed, and not once.
> But - here it goes again..
> How to limit disk usage, when running jail environment?
> Do I need to setup an user x, set a quota for him, and run a jail as this
> user?
> Are there any other ways?
> rgds, Matis

actually in normal file system quotas are mapped to user ID's. In order to
have separate quotas for jails, you should:

a) Either to have separate vnode based file system for each jail.
b) Try to find jailfs extension to nullfs (some guy on IRC told he
developed it :) Then you'd be able to have separate quotas for distinct
parts of one filesystem.
c) Have different uid spaces for each jail (10000-10999,11000-11999,...)
and set quotas from master system.

Regards,
Domas Mituzas
DELFI Internet, UAB


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Jan 15  3:47: 0 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from ns.ulstu.ru (ns.ulstu.ru [62.76.34.36])
	by hub.freebsd.org (Postfix) with ESMTP id 70C8B37B400
	for <freebsd-isp@freebsd.org>; Tue, 15 Jan 2002 03:46:56 -0800 (PST)
Received: by ns.ulstu.ru (Postfix-ULSTU, from userid 3909)
	id EC00E107886; Tue, 15 Jan 2002 14:46:49 +0300 (MSK)
Date: Tue, 15 Jan 2002 14:46:49 +0300
From: zhuravlev alexander <zaa@ulstu.ru>
To: freebsd-isp@freebsd.org
Subject: Re: Jail quota
Message-ID: <20020115144649.A14664@ulstu.ru>
Reply-To: zhuravlev alexander <zaa@ulstu.ru>
Mail-Followup-To: freebsd-isp@freebsd.org
References: <FOEJJHFHNBIAKMKHNKLIOEFLCJAA.matiss@bkc.lv>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0pre2i
In-Reply-To: <FOEJJHFHNBIAKMKHNKLIOEFLCJAA.matiss@bkc.lv>
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Tue, Jan 15, 2002 at 01:40:04PM +0200, Matiss Elsbergs wrote:
> Hello there, fellow owners of all system processes,
> 
> I believe, that this question has been discussed, and not once.
> 
> But - here it goes again..
> 
> How to limit disk usage, when running jail environment?
> 
> Do I need to setup an user x, set a quota for him, and run a jail as this
> user?
> Are there any other ways?
> 
> rgds, Matis
>
	
	Simpler install jail 
	in dedicated partition with desired amount of free space

> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
--
zhuravlev alexander
 u l s t u  c t c
e-mail:zaa@ulstu.ru

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Jan 15 10: 0:41 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from nlaredo.globalpc.net (nld2.globalpc.net [207.193.206.189])
	by hub.freebsd.org (Postfix) with ESMTP id 03D2637B402
	for <freebsd-isp@FreeBSD.ORG>; Tue, 15 Jan 2002 10:00:35 -0800 (PST)
Received: from ds9 (ds9.globalpc.net [207.193.204.57])
	by nlaredo.globalpc.net (8.9.3/8.9.3) with SMTP id MAA32031;
	Tue, 15 Jan 2002 12:08:32 -0600 (CST)
	(envelope-from adrianbsd@globalpc.net)
Message-Id: <3.0.6.32.20020115120220.00fc9ae8@globalpc.net>
X-Sender: adrianbsd@globalpc.net (Unverified)
X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.6 (32)
Date: Tue, 15 Jan 2002 12:02:20 -0600
To: Chris Shenton <chris@shenton.org>, freebsd-isp@FreeBSD.ORG
From: Adrian Gonzalez <adrianbsd@globalpc.net>
Subject: Re: Who's saturating outbound link (Cisco 2620, IOS 12.1(1))
In-Reply-To: <87g05a2ao2.fsf_-_@thanatos.shenton.org>
References: <1241681557.20010725114735@buz.ch>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


Try this on your cisco:

Set up an access list entry that matches the traffic you want to monitor.
Enter config mode, then something like:

access-list 10 permit 192.168.0.0 0.0.0.255

This example would match outgoing traffic from any host on the 192.168.0.x
network.  Make sure you pick an access list number you're not using for
something else, of course.  Note that the last set of numbers is not a
netmask, it's wildcard bits.  So, 0.0.255.255 matches a whole class B net,
0.0.0.15 matches a /28, etc.

Then you can exit config mode and debug:

debug ip packet 10

Since it's a 256k link, be prepared to be flooded with output.  There's
probably a way to limit this but I haven't bothered to look it up.  You
should get a good idea what's causing the traffic by looking at the output.
 You should get something like:

20w1d: IP: s=192.168.0.2 (Ethernet0/0), d=10.0.0.1 (BRI1/3), g=10.0.0.1,
len 136, forward
20w1d: IP: s=192.168.0.2 (Ethernet0/0), d=10.0.0.1 (BRI1/3), g=10.0.0.1,
len 122, forward

Not quite tcpdump, but should be enough.  If you don't get any output, type

term monitor

So that debugging messages get sent to your terminal.  Once you find what
you're looking for, you can stop debugging:

no debug ip packet
term no mon

remove the access-list too or save it for later :)

I'm almost willing to bet you have a guy or two sharing their entire mp3
and avi collection with a Kazaa/Morpheus/etc client :)

Hope this helps

-Adrian



At 04:39 PM 1/13/2002 -0500, Chris Shenton wrote:
>An ISP I support has FreeBSD servers and a bunch of LAN- and
>ISDN-connected clients.  Its remote so I can't get to it physically.
>
>In the past couple days, the 256Kbps link has been totally saturated,
>MRTG tells me it's outbound traffic.   How can I determine which
>system is causing the traffic?
>
>I'm not a Cisco expert, but hoped "show ip accounting" would help, but
>it only appears to show me *inbound* traffic from all outside
>addresses to my internal addresses.  I need the opposite.  Is there
>some IOS command I'm just not clued into? 
>
>I'm working with the remote admin to see if I can get a hub put
>between the router and other ISP gear, then put a FreeBSD box on that
>so I can use tcpdump or others to sniff the traffic.  Until then, I'm
>blind unless there's some cisco voodoo I can use.
>
>Any ideas? Thanks.
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-isp" in the body of the message
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Tue Jan 15 12:32:19 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from ns1.infowest.com (ns1.infowest.com [204.17.177.10])
	by hub.freebsd.org (Postfix) with ESMTP id D076637B41D
	for <freebsd-isp@FreeBSD.ORG>; Tue, 15 Jan 2002 12:32:11 -0800 (PST)
Received: from there (208.186.107.222.dsl.infowest.net [208.186.107.222])
	by ns1.infowest.com (Postfix) with SMTP
	id F38D2218A9; Tue, 15 Jan 2002 13:29:30 -0700 (MST)
Content-Type: text/plain;
  charset="iso-8859-1"
From: Samuel J.Greear <dragonk@evilcode.net>
Organization: GetMegabits, Inc.
To: Domas Mituzas <midom@delfi.lt>, Matiss Elsbergs <matiss@bkc.lv>
Subject: Re: Jail quota
Date: Wed, 16 Jan 2002 13:24:37 -0700
X-Mailer: KMail [version 1.3]
Cc: <freebsd-isp@FreeBSD.ORG>
References: <20020115134344.G58690-100000@axis.tdd.lt>
In-Reply-To: <20020115134344.G58690-100000@axis.tdd.lt>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-Id: <20020115202931.F38D2218A9@ns1.infowest.com>
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Tuesday 15 January 2002 04:46 am, Domas Mituzas wrote:
> Hi there,
>
> > Hello there, fellow owners of all system processes,
> > I believe, that this question has been discussed, and not once.
> > But - here it goes again..
> > How to limit disk usage, when running jail environment?
> > Do I need to setup an user x, set a quota for him, and run a jail as this
> > user?
> > Are there any other ways?
> > rgds, Matis
>
> actually in normal file system quotas are mapped to user ID's. In order to
> have separate quotas for jails, you should:
>
> a) Either to have separate vnode based file system for each jail.
> b) Try to find jailfs extension to nullfs (some guy on IRC told he
> developed it :) Then you'd be able to have separate quotas for distinct
> parts of one filesystem.


Yeah, probably me....
I finished a..  shall we say..  proof-of-concept jailfs.  It was functional,
but extremely evil in the most evil of evil ways.  ..  And didn't do any
locking, either.   :)   --  At the moment I'm in the design phase of getting 
this directly into the FFS quota code.   Not as difficult as it might sound 
at first, as you're basically just instrumenting the quota code to check 
whether you're in a jail or not, and responding appropriately.   Don't hold
your breath, though.

The best way's to do jailquot's that I've so far seen are to either partition
the physical disk to accomodate.  Yeah, lame.   Or use the uber-cool
vn/md devices.  Which has its drawbacks, but works pretty well on systems
that aren't running a ton of jails.   You can also grow these with growfs 
should you want to raise the quota limit, but shrinking is a bit of a problem.

ISPServer.com does jail hosting and uses union mounts with some success
it seems.   You may want to check out their free 30 minute trial to get some
idea of what they're doing.   Then again, union mounts have some issues
which their head jail developer just seems to shrug off.  (yes, i've spoken 
with him).

So, what I'm saying is.  There is no good solution at the moment, but you
may find something that works for you.   :)


> c) Have different uid spaces for each jail (10000-10999,11000-11999,...)
> and set quotas from master system.
>
> Regards,
> Domas Mituzas
> DELFI Internet, UAB
>
>


Lates,
Sam

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16  2:25:47 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mgw1.MEIway.com (mgw1.meiway.com [212.73.210.75])
	by hub.freebsd.org (Postfix) with ESMTP id 20E4037B402
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 02:25:45 -0800 (PST)
Received: from mail.Go2France.com (ms1.meiway.com [212.73.210.73])
	by mgw1.MEIway.com (Postfix Relay Hub) with ESMTP id 6265D16B16
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 11:25:43 +0100 (CET)
Received: from LenConrad.Go2France.com [66.64.14.18] by mail.Go2France.com with ESMTP
  (SMTPD32-6.06) id A9196C2501F0; Wed, 16 Jan 2002 11:42:33 +0100
Message-Id: <5.1.0.14.2.20020116034908.02899890@mail.Go2France.com>
X-Sender: LConrad@Go2France.com@mail.Go2France.com
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Wed, 16 Jan 2002 04:25:38 -0600
To: freebsd-isp@freebsd.org
From: Len Conrad <LConrad@Go2France.com>
Subject: mobo with 64-bit / 66 MHz PCI for FreeBSD
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

We're looking at megaraid elite 1600 or 3ware 7800 controllers.

Suggestions for mobo's happy under fbsd?  mono-processor is fine.


thanks,
Len


http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
http://IMGate.MEIway.com  : Build free, hi-perf, anti-abuse mail gateways


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16  2:47:22 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from trinity.jamiesdomain.org.uk (trinity.jamiesdomain.org.uk [62.49.217.114])
	by hub.freebsd.org (Postfix) with ESMTP id 0959D37B402
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 02:47:19 -0800 (PST)
Received: from [194.207.93.61] (jamie@mail.trident-uk.co.uk [195.166.16.10])
	by trinity.jamiesdomain.org.uk (8.11.4/8.11.4) with ESMTP id g0GAgja73165
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 10:42:45 GMT
	(envelope-from jamie@jamiesdomain.org.uk)
From: Jamie Heckford <jamie@jamiesdomain.org.uk>
To: <freebsd-isp@freebsd.org>
Date: Wed, 16 Jan 2002 10:47:19 +0000
Message-Id: <20020116104720.21507@mail.jamiesdomain.org.uk>
X-Mailer: CTM PowerMail 3.1 carbon <http://www.ctmdev.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

subscribe freebsd-isp

-- 
Jamie Heckford
http://jamiesdomain.org.uk/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16  7:54:49 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from cody.jharris.com (cody.jharris.com [205.238.128.83])
	by hub.freebsd.org (Postfix) with ESMTP id 1697B37B400
	for <freebsd-isp@FreeBSD.ORG>; Wed, 16 Jan 2002 07:54:44 -0800 (PST)
Received: from localhost (nick@localhost)
	by cody.jharris.com (8.11.1/8.9.3) with ESMTP id g0GFtHg12888;
	Wed, 16 Jan 2002 09:55:17 -0600 (CST)
	(envelope-from nick@rogness.net)
Date: Wed, 16 Jan 2002 09:55:16 -0600 (CST)
From: Nick Rogness <nick@rogness.net>
X-Sender: nick@cody.jharris.com
To: Chris Shenton <chris@shenton.org>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: Who's saturating outbound link (Cisco 2620, IOS 12.1(1))
In-Reply-To: <87g05a2ao2.fsf_-_@thanatos.shenton.org>
Message-ID: <Pine.BSF.4.21.0201160954460.12818-100000@cody.jharris.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On 13 Jan 2002, Chris Shenton wrote:


	Search cisco's site on enabling NetFlow statistics.

> An ISP I support has FreeBSD servers and a bunch of LAN- and
> ISDN-connected clients.  Its remote so I can't get to it physically.
> 
> In the past couple days, the 256Kbps link has been totally saturated,
> MRTG tells me it's outbound traffic.   How can I determine which
> system is causing the traffic?
> 
> I'm not a Cisco expert, but hoped "show ip accounting" would help, but
> it only appears to show me *inbound* traffic from all outside
> addresses to my internal addresses.  I need the opposite.  Is there
> some IOS command I'm just not clued into? 
> 
> I'm working with the remote admin to see if I can get a hub put
> between the router and other ISP gear, then put a FreeBSD box on that
> so I can use tcpdump or others to sniff the traffic.  Until then, I'm
> blind unless there's some cisco voodoo I can use.
> 
> Any ideas? Thanks.
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 

Nick Rogness <nick@rogness.net>
 - Don't mind me...I'm just sniffing your packets


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16  8:59:14 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mail4.cableaz.com (mail4.cableaz.com [63.241.150.20])
	by hub.freebsd.org (Postfix) with ESMTP id 1C35737B416
	for <isp@FreeBSD.ORG>; Wed, 16 Jan 2002 08:59:04 -0800 (PST)
Received: from caz ([63.241.154.14])
	by mail4.cableaz.com (8.11.3/8.11.3) with SMTP id g0GGom061241;
	Wed, 16 Jan 2002 09:50:49 -0700 (MST)
	(envelope-from jeremy@cableaz.com)
Message-ID: <001b01c19eae$c6acdc40$0e9af13f@caz>
From: "Jeremy Buckner" <jeremy@cableaz.com>
To: "Chris Shenton" <chris@shenton.org>
Cc: <isp@FreeBSD.ORG>
References: <87g05a2ao2.fsf_-_@thanatos.shenton.org>
Subject: Re: Who's saturating outbound link (Cisco 2620, IOS 12.1(1))
Date: Wed, 16 Jan 2002 09:56:43 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Well in my experience with that I will tell you that a virus will definitely cause that kind of
traffic. Code Red or Nimda type viruses have killed our bandwidth before. Also some P2P file sharing
software will do that too if it not setup correctly. If you know it's not a virus and you have P2P
stuff flowing through your system, try putting an access list on your router blocking ports 1214,
6346, 6347, and 6348. See if your outbound dies down. Obviously the sky's the limit with the number
of reasons why you have that problem, but that's what has happened to us in the past.

Jeremy

----- Original Message -----
From: "Chris Shenton" <chris@shenton.org>
To: <freebsd-isp@FreeBSD.ORG>
Sent: Sunday, January 13, 2002 2:39 PM
Subject: Who's saturating outbound link (Cisco 2620, IOS 12.1(1))


> An ISP I support has FreeBSD servers and a bunch of LAN- and
> ISDN-connected clients.  Its remote so I can't get to it physically.
>
> In the past couple days, the 256Kbps link has been totally saturated,
> MRTG tells me it's outbound traffic.   How can I determine which
> system is causing the traffic?
>
> I'm not a Cisco expert, but hoped "show ip accounting" would help, but
> it only appears to show me *inbound* traffic from all outside
> addresses to my internal addresses.  I need the opposite.  Is there
> some IOS command I'm just not clued into?
>
> I'm working with the remote admin to see if I can get a hub put
> between the router and other ISP gear, then put a FreeBSD box on that
> so I can use tcpdump or others to sniff the traffic.  Until then, I'm
> blind unless there's some cisco voodoo I can use.
>
> Any ideas? Thanks.
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16  9: 6:25 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from ns1.cksoft.de (ns1.cksoft.de [62.111.66.1])
	by hub.freebsd.org (Postfix) with ESMTP id 0D95B37B416
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 09:06:17 -0800 (PST)
Received: from localhost (localhost [127.0.0.1])
	by ns1.cksoft.de (Postfix) with ESMTP
	id 88D6B14FAA; Wed, 16 Jan 2002 18:06:15 +0100 (CET)
Received: by ns1.cksoft.de (Postfix, from userid 66)
	id 53F7B14FA5; Wed, 16 Jan 2002 18:06:14 +0100 (CET)
Received: by hirvi.cksoft.de (Postfix, from userid 1000)
	id D72261B65E; Wed, 16 Jan 2002 18:02:36 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
	by hirvi.cksoft.de (Postfix) with ESMTP
	id D404E18E88; Wed, 16 Jan 2002 18:02:36 +0100 (CET)
Date: Wed, 16 Jan 2002 18:02:36 +0100 (CET)
From: Christian Kratzer <ck@cksoft.de>
To: Chris Shenton <chris@shenton.org>
Cc: <freebsd-isp@freebsd.org>
Subject: Re: Who's saturating outbound link (Cisco 2620, IOS 12.1(1))
In-Reply-To: <87g05a2ao2.fsf_-_@thanatos.shenton.org>
Message-ID: <Pine.LNX.4.33.0201161800220.1448-100000@hirvi.cksoft.de>
X-Spammer-Kill-Ratio: 75%
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Virus-Scanned: by AMaViS perl-11
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi,

On 13 Jan 2002, Chris Shenton wrote:

> An ISP I support has FreeBSD servers and a bunch of LAN- and
> ISDN-connected clients.  Its remote so I can't get to it physically.
> 
> In the past couple days, the 256Kbps link has been totally saturated,
> MRTG tells me it's outbound traffic.   How can I determine which
> system is causing the traffic?
> 
> I'm not a Cisco expert, but hoped "show ip accounting" would help, but
> it only appears to show me *inbound* traffic from all outside
> addresses to my internal addresses.  I need the opposite.  Is there
> some IOS command I'm just not clued into? 

check that there is "ip accounting output-packets" on every interface
of the router. Especially the one towards your network and the one towards
the isp.  

Then let the accounting accumulate for a while and dump it to a file. 

If a single ip is causing you the traffic you will propably find it just
by sorting for the last column 

	sort -n +4 < accountingdata | tail

or something of the sort should do the job.

Greetings
Christian

-- 
CK Software GmbH
Christian Kratzer,		Schwarzwaldstr. 31, 71131 Jettingen
Email:	ck@cksoft.de
Phone: 	+49 7452 889-135	Open Software Solutions, Network Security
Fax: 	+49 7452 889-136	FreeBSD spoken here!



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16  9:31:39 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from hotmail.com (oe28.pav1.hotmail.com [64.4.30.85])
	by hub.freebsd.org (Postfix) with ESMTP
	id E598037B404; Wed, 16 Jan 2002 09:31:29 -0800 (PST)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Wed, 16 Jan 2002 09:31:29 -0800
X-Originating-IP: [216.95.234.92]
From: "jack xiao" <jack_xiao99@hotmail.com>
To: <net@freebsd.org>, <freebsd-isp@freebsd.org>
Subject: pppd with radius
Date: Wed, 16 Jan 2002 12:21:19 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_008F_01C19E88.4D9F2220"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <OE28h6KffKd8uJolHi200016384@hotmail.com>
X-OriginalArrivalTime: 16 Jan 2002 17:31:29.0779 (UTC) FILETIME=[A2070C30:01C19EB3]
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

This is a multi-part message in MIME format.

------=_NextPart_000_008F_01C19E88.4D9F2220
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi,

I am using pppd for some application and also need radius function to =
communicate with the remote radius server. In the FreeBSD man page of =
pppd, I could not get anything about radius. As far as I know, in Linux =
there are some radius patch for pppd, but in FreeBSD, I found nothing. =
Does anybody has such experience or any idea.=20

Thanks in advance.

Jack

------=_NextPart_000_008F_01C19E88.4D9F2220
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2600.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Hi,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>I am using pppd for some application =
and also need=20
radius function to communicate with the remote radius server. In the =
FreeBSD man=20
page of pppd, I could not get anything about radius.&nbsp;As far as I =
know, in=20
Linux there are some radius patch for pppd, but in FreeBSD, I found =
nothing.=20
Does anybody has such experience or any idea. </FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Thanks in advance.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Jack</FONT></DIV></BODY></HTML>

------=_NextPart_000_008F_01C19E88.4D9F2220--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16 14:36:50 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from dpbox.dhs.org (dsl-216-227-100-85.telocity.com [216.227.100.85])
	by hub.freebsd.org (Postfix) with ESMTP id 147E837B417
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 14:36:47 -0800 (PST)
Received: from vector.usa.net ([192.168.0.50])
	by dpbox.dhs.org (8.11.2/8.11.2) with ESMTP id g0GLqIe13800
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 15:52:18 -0600
Message-Id: <5.1.0.14.0.20020116164458.03538e80@pop.netaddress.com>
X-Sender: dpuryear@pop.netaddress.com
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Wed, 16 Jan 2002 16:46:14 -0600
To: freebsd-isp@freebsd.org
From: Dustin Puryear <dpuryear@usa.net>
Subject: Webalizer and Apache on a cluster
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Apparently Webalizer cannot be used to provide statistics for more than one 
web server. We are running a cluster of web servers hosting the same sites 
for redundancy and performance, and would like to provide data on web site 
hits via a tool such as Webalizer. However, I'm a bit stumped. Has anyone 
been able to tweak Webalizer or a similar tool to provide stats when there 
are several servers involved?

We are running FreeBSD with Apache and Webalizer from the ports tree. Any 
help, leads, or patches  would be appreciated!

Regards, Dustin

PS This post might appear twice. I subscribed to the list as a newsgroup 
(sol.lists.freebsd.isp), but the group doesn't appear to allow me to post. 
Is there a way for me to do that? Perhaps another newsgroup is open to 
posting and not read-only?
---
Dustin Puryear <dpuryear@usa.net>
Information Systems Consultant
http://members.telocity.com/~dpuryear
In the beginning the Universe was created.
This has been widely regarded as a bad move. - Douglas Adams


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16 14:37:15 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from dpbox.dhs.org (dsl-216-227-100-85.telocity.com [216.227.100.85])
	by hub.freebsd.org (Postfix) with ESMTP id B98EA37B416
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 14:37:10 -0800 (PST)
Received: from vector.usa.net ([192.168.0.50])
	by dpbox.dhs.org (8.11.2/8.11.2) with ESMTP id g0GLqge13804
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 15:52:42 -0600
Message-Id: <5.1.0.14.0.20020116164616.03528248@pop.netaddress.com>
X-Sender: dpuryear@pop.netaddress.com
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Wed, 16 Jan 2002 16:46:38 -0600
To: freebsd-isp@freebsd.org
From: Dustin Puryear <dpuryear@usa.net>
Subject: Firewall logs non-existent?
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

I am running a FreeBSD based firewall using ipfw. For some reason denies 
are not being reported to /var/log/security. I am still a bit new to ipfw 
so it is entirely possible I have goofed somewhere, but I am still looking 
for a bit of help. Naturally, it is very hard to diagnose firewall issues 
when I can't tell if my firewall is dropping the packets.

Currently, we have:

# Reject&Log all setup of incoming connections from the outside
ipfw add deny log tcp from any to any in via rl0 setup

At the end of our rules. Is tihs correct? rl0 is our external interface. 
Also, what about logging udp denies?

Regards, Dustin
---
Dustin Puryear <dpuryear@usa.net>
Information Systems Consultant
http://members.telocity.com/~dpuryear
In the beginning the Universe was created.
This has been widely regarded as a bad move. - Douglas Adams


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16 15:56:57 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from femail4.sdc1.sfba.home.com (femail4.sdc1.sfba.home.com [24.0.95.84])
	by hub.freebsd.org (Postfix) with ESMTP id 69EF637B442
	for <freebsd-isp@FreeBSD.ORG>; Wed, 16 Jan 2002 15:56:38 -0800 (PST)
Received: from veager.jwweeks.com ([65.14.122.116])
          by femail4.sdc1.sfba.home.com
          (InterMail vM.4.01.03.20 201-229-121-120-20010223) with ESMTP
          id <20020116235633.VFHG25672.femail4.sdc1.sfba.home.com@veager.jwweeks.com>;
          Wed, 16 Jan 2002 15:56:33 -0800
Date: Wed, 16 Jan 2002 18:56:26 -0500 (EST)
From: Jim Weeks <jim@siteplus.net>
X-Sender: jim@veager.jwweeks.com
To: Dustin Puryear <dpuryear@usa.net>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: Webalizer and Apache on a cluster
In-Reply-To: <5.1.0.14.0.20020116164458.03538e80@pop.netaddress.com>
Message-ID: <Pine.BSF.4.21.0201161850380.1405-100000@veager.jwweeks.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Dustin,

I have done this with two servers logging to the same file through NFS
mount.  I don't see why you couldn't do it with several.  You could also
write a script to fetch and merge log files from the other machines to one
central machine running webalizer.

Hope this helps,

--
Jim Weeks


On Wed, 16 Jan 2002, Dustin Puryear wrote:

> Apparently Webalizer cannot be used to provide statistics for more than one 
> web server. We are running a cluster of web servers hosting the same sites 
> for redundancy and performance, and would like to provide data on web site 
> hits via a tool such as Webalizer. However, I'm a bit stumped. Has anyone 
> been able to tweak Webalizer or a similar tool to provide stats when there 
> are several servers involved?
> 
> We are running FreeBSD with Apache and Webalizer from the ports tree. Any 
> help, leads, or patches  would be appreciated!
> 
> Regards, Dustin
> 
> PS This post might appear twice. I subscribed to the list as a newsgroup 
> (sol.lists.freebsd.isp), but the group doesn't appear to allow me to post. 
> Is there a way for me to do that? Perhaps another newsgroup is open to 
> posting and not read-only?
> ---
> Dustin Puryear <dpuryear@usa.net>
> Information Systems Consultant
> http://members.telocity.com/~dpuryear
> In the beginning the Universe was created.
> This has been widely regarded as a bad move. - Douglas Adams
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16 17:45:52 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mail.sheltonbbs.com (216-41-130-114.semo.net [216.41.130.114])
	by hub.freebsd.org (Postfix) with SMTP id 4AA8637B404
	for <freebsd-isp@FreeBSD.ORG>; Wed, 16 Jan 2002 17:45:45 -0800 (PST)
Received: (qmail 17311 invoked from network); 17 Jan 2002 01:52:39 -0000
Received: from unknown (HELO 216-41-137-20.semo.net) (216.41.137.20)
  by 216-41-130-114.semo.net with SMTP; 17 Jan 2002 01:52:39 -0000
Date: Wed, 16 Jan 2002 19:45:50 -0600 (CST)
From: Butch Evans <butch@sheltonbbs.com>
X-X-Sender:  <root@216-41-137-20.semo.net>
To: Len Conrad <LConrad@Go2France.com>
Cc: <freebsd-isp@FreeBSD.ORG>
Subject: Re: External app logging to syslog
In-Reply-To: <5.1.0.14.2.20020114083445.02488008@mail.Go2France.com>
Message-ID: <Pine.BSF.4.33.0201161943530.49171-100000@216-41-137-20.semo.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Mon, 14 Jan 2002, Len Conrad wrote:

>How do we stop it from being logged there? under which facility.level is it
>being caught?
>

add "-v -v" to syslogd's invocation.  That will log the
facility.level along with the message.  (that will probably work
with "-vv", but my "DOS" days are haunting sometimes.)


-- 
Butch Evans
http://www.ChristInVerse.com/
http://www.HeIsComingSoon.com/ (in the works)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16 18:50:23 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from priv-edtnes11-hme0.telusplanet.net (fepout3.telus.net [199.185.220.238])
	by hub.freebsd.org (Postfix) with ESMTP id C3E8737B419
	for <freebsd-isp@FreeBSD.ORG>; Wed, 16 Jan 2002 18:50:17 -0800 (PST)
Received: from FRED ([142.173.43.70]) by priv-edtnes11-hme0.telusplanet.net
          (InterMail vM.5.01.04.01 201-253-122-122-101-20011014) with ESMTP
          id <20020117025017.YYCP3650.priv-edtnes11-hme0.telusplanet.net@FRED>;
          Wed, 16 Jan 2002 19:50:17 -0700
Date: Wed, 16 Jan 2002 18:59:47 -0800
From: Sean Ellis <sellis@telus.net>
X-Mailer: The Bat! (v1.51)
Reply-To: Sean Ellis <sellis@telus.net>
Organization: yes
X-Priority: 3 (Normal)
Message-ID: <141945878404.20020116185947@telus.net>
To: Dustin Puryear <dpuryear@usa.net>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: Webalizer and Apache on a cluster
In-Reply-To: <Pine.BSF.4.21.0201161850380.1405-100000@veager.jwweeks.com>
References: <Pine.BSF.4.21.0201161850380.1405-100000@veager.jwweeks.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello,

Wednesday, January 16, 2002, 3:56:26 PM, you wrote:

> Dustin,

>  You could also
> write a script to fetch and merge log files from the other machines to one
> central machine running webalizer.

this might get you part of the way there,

http://64.69.77.155/caveat_emptor/weblog-merge

or not. If you can use it, let me know, send improvements etc,

> Hope this helps,

> --
> Jim Weeks

>>. However, I'm a bit stumped. Has anyone
>> been able to tweak Webalizer or a similar tool to provide stats when there 
>> are several servers involved?

>> Dustin Puryear <dpuryear@usa.net>

-- 
Regards,
 Sean                            mailto:sellis@telus.net



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Wed Jan 16 21:23: 2 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from dpbox.dhs.org (dsl-216-227-100-85.telocity.com [216.227.100.85])
	by hub.freebsd.org (Postfix) with ESMTP id A7A8B37B404
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 21:22:59 -0800 (PST)
Received: from vector.usa.net ([192.168.0.50])
	by dpbox.dhs.org (8.11.2/8.11.2) with ESMTP id g0H4cXe14185
	for <freebsd-isp@freebsd.org>; Wed, 16 Jan 2002 22:38:33 -0600
Message-Id: <5.1.0.14.0.20020116233108.03704d50@pop.netaddress.com>
X-Sender: dpuryear@pop.netaddress.com
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Wed, 16 Jan 2002 23:32:26 -0600
To: freebsd-isp@freebsd.org
From: Dustin Puryear <dpuryear@usa.net>
Subject: Re: Webalizer and Apache on a cluster
In-Reply-To: <20020117130337.M13438@webjump.national.com.au>
References: <5.1.0.14.0.20020116200338.0363a008@pop.netaddress.com>
 <20020117124833.L13438@webjump.national.com.au>
 <5.1.0.14.0.20020116200338.0363a008@pop.netaddress.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Thanks to everyone that helped with the Webalizer consolidated log issue. 
By using Sean Ellis' weblog-merge script I was able to setup Webalizer for 
use within our cluster. Anyway, I appreciate all of the information.

Regards, Dustin

At 01:03 PM 1/17/2002 +1100, you wrote:
>On Wed, Jan 16, 2002 at 08:03:48PM -0600, Dustin Puryear wrote:
>|At 12:48 PM 1/17/2002 +1100, you wrote:
>|>This bounced when I replied to the list, so I thought I'd at least get it
>|>to you...
>|
>|I had read somewhere that merging the log files wouldn't work. So you are
>|saying there is no real problem in doing that? Cool.
>
>The only real problem webalizer has is that it can't 'go back' and update
>stats its already emitted when it sees the next log record timestamp is
>before something its already seen. (The only fix for webalizer would be
>to hold everything in memory or a database till it exhausts all its logs.)
>So, so long as everything gets sorted nicely, there are no problems.
>
>We've been running this way for 3 years now and our logs now run to around
>4Gb/day.
>
>
>Cheers,
>
>Enno.

---
Dustin Puryear <dpuryear@usa.net>
Information Systems Consultant
http://members.telocity.com/~dpuryear
In the beginning the Universe was created.
This has been widely regarded as a bad move. - Douglas Adams


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17  1:23:32 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from web20106.mail.yahoo.com (web20106.mail.yahoo.com [216.136.226.43])
	by hub.freebsd.org (Postfix) with SMTP id ADE2537B405
	for <freebsd-isp@freebsd.org>; Thu, 17 Jan 2002 01:23:30 -0800 (PST)
Message-ID: <20020117092330.80644.qmail@web20106.mail.yahoo.com>
Received: from [193.227.212.160] by web20106.mail.yahoo.com via HTTP; Thu, 17 Jan 2002 10:23:30 CET
Date: Thu, 17 Jan 2002 10:23:30 +0100 (CET)
From: =?iso-8859-1?q?Fabrizio=20Ravazzini?= <freefabri@yahoo.it>
Subject: HP Netserver E-200 & FreeBSD
To: freebsd-isp@freebsd.org
Cc: freebsd-newbies@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hello, anyone installed succesfully FreeBSD 4.x on HP
Netserver E-200?
I've to buy it to make two firewalls.
The installation with the booting cd-rom?

______________________________________________________________________

Iscriviti al gruppo ufficiale di Tomb Raider:
http://it.groups.yahoo.com/group/gruppoufficiale_tombraider/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17  9:35:32 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mta7.pltn13.pbi.net (mta7.pltn13.pbi.net [64.164.98.8])
	by hub.freebsd.org (Postfix) with ESMTP id 0E96037B402
	for <freebsd-isp@freebsd.org>; Thu, 17 Jan 2002 09:35:31 -0800 (PST)
Received: from desire ([66.125.90.177])
 by mta7.pltn13.pbi.net (iPlanet Messaging Server 5.1 (built May  7 2001))
 with SMTP id <0GQ300DG0FJ54T@mta7.pltn13.pbi.net> for freebsd-isp@freebsd.org;
 Thu, 17 Jan 2002 09:35:30 -0800 (PST)
Date: Thu, 17 Jan 2002 09:35:29 -0800
From: Andrew Houghton <aah@acm.org>
Subject: How to secure telnet?
To: freebsd-isp@freebsd.org
Message-id: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4807.1700
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7BIT
Importance: Normal
X-Priority: 3 (Normal)
X-MSMail-priority: Normal
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

I have a server for shell accounts, and up to now the only way people have
been able to access it is via SSH.  One of the users is leaving for a
year-long, round-the-world jaunt.

SSH is pretty much out of the question for him -- if he can find an internet
cafe in some of the places he's going, he won't be able to install new
software, it would probably take years just to download a client over a 56K
link, etc. etc.

I'd like to support him by making telnet available to him.  Any thoughts on
the best/most secure way to do this?

- a.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17  9:38:34 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.dev.itouchnet.net (devco.net [196.15.188.2])
	by hub.freebsd.org (Postfix) with ESMTP id DF1F537B416
	for <freebsd-isp@freebsd.org>; Thu, 17 Jan 2002 09:38:30 -0800 (PST)
Received: from nobody by mx1.dev.itouchnet.net with scanned_ok (Exim 3.33 #2)
	id 16RGWQ-000NWY-00
	for freebsd-isp@freebsd.org; Thu, 17 Jan 2002 19:40:18 +0200
Received: from shell.devco.net ([196.15.188.7])
	by mx1.dev.itouchnet.net with esmtp (Exim 3.33 #2)
	id 16RGWP-000NWK-00; Thu, 17 Jan 2002 19:40:17 +0200
Received: from bvi by shell.devco.net with local (Exim 3.33 #4)
	id 16RGZw-000Cwx-00; Thu, 17 Jan 2002 19:43:56 +0200
Date: Thu, 17 Jan 2002 19:43:56 +0200
From: Barry Irwin <bvi@itouchlabs.com>
To: Andrew Houghton <aah@acm.org>
Cc: freebsd-isp@freebsd.org
Subject: Re: How to secure telnet?
Message-ID: <20020117194356.V32746@itouchlabs.com>
References: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>; from aah@acm.org on Thu, Jan 17, 2002 at 09:35:29AM -0800
X-Checked: This message has been scanned for any virusses and unauthorized attachments.
X-iScan-ID: 90426-1011289217-53830@mx1.dev.itouchnet.net version $Name: REL_2_0_2 $
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Have you had a look at a Java SSH client such as mindterm This runs as an
applet in most modern browers and is tiny (sub 100K iirc). As a bonus it has
really great terminal emulation.

http://www.mindbrigt.se/mindterm


Barry


On Thu 2002-01-17 (09:35), Andrew Houghton wrote:
> I have a server for shell accounts, and up to now the only way people have
> been able to access it is via SSH.  One of the users is leaving for a
> year-long, round-the-world jaunt.
> 
> SSH is pretty much out of the question for him -- if he can find an internet
> cafe in some of the places he's going, he won't be able to install new
> software, it would probably take years just to download a client over a 56K
> link, etc. etc.
> 
> I'd like to support him by making telnet available to him.  Any thoughts on
> the best/most secure way to do this?
> 
> - a.
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17  9:38:56 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from ext-ch1gw-2.online-age.net (ext-ch1gw-2.online-age.net [216.34.191.36])
	by hub.freebsd.org (Postfix) with ESMTP id 6AF5437B416
	for <freebsd-isp@FreeBSD.ORG>; Thu, 17 Jan 2002 09:38:50 -0800 (PST)
Received: from int-ch1gw-4.online-age.net (int-ch1gw-4 [3.159.232.68])
	by ext-ch1gw-2.online-age.net (8.9.3+Sun/8.9.1/990426-RLH) with ESMTP id MAA09047;
	Thu, 17 Jan 2002 12:37:33 -0500 (EST)
Received: from crdns.crd.ge.com (localhost [127.0.0.1])
	by int-ch1gw-4.online-age.net (8.9.3+Sun/8.9.1/990426-RLH) with ESMTP id MAA01365;
	Thu, 17 Jan 2002 12:37:32 -0500 (EST)
Received: from exc01crdge.crd.ge.com (exc01crdge.crd.ge.com [3.1.116.47])
	by crdns.crd.ge.com (8.11.6/8.11.6) with ESMTP id g0HHbSm05863;
	Thu, 17 Jan 2002 12:37:28 -0500 (EST)
Received: by exc01crdge.crd.ge.com with Internet Mail Service (5.5.2653.19)
	id <D11A6AXW>; Thu, 17 Jan 2002 12:37:27 -0500
Message-ID: <E4AAC34FE3CF564D8AE89EB8AC333FD702E72D78@XMB03CRDGE>
From: "Lapinski, Michael (CRD)" <lapinski@crd.ge.com>
To: "'Andrew Houghton'" <aah@acm.org>, freebsd-isp@FreeBSD.ORG
Subject: RE: How to secure telnet?
Date: Thu, 17 Jan 2002 12:37:26 -0500
X-Mailer: Internet Mail Service (5.5.2653.19)
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

putty.exe is free, small and easy to find.

-mtl
--------------------------------------------------
Michael Lapinski
Computer Scientist
GE Corporate Research & Development 


"I think there is a world market for maybe five computers."
            - IBM Chairman Thomas Watson, 1943


-----Original Message-----
From: Andrew Houghton [mailto:aah@acm.org] 
Sent: Thursday, January 17, 2002 12:35 PM
To: freebsd-isp@FreeBSD.ORG
Subject: How to secure telnet?

I have a server for shell accounts, and up to now the only way people have
been able to access it is via SSH.  One of the users is leaving for a
year-long, round-the-world jaunt.

SSH is pretty much out of the question for him -- if he can find an internet
cafe in some of the places he's going, he won't be able to install new
software, it would probably take years just to download a client over a 56K
link, etc. etc.

I'd like to support him by making telnet available to him.  Any thoughts on
the best/most secure way to do this?

- a.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17  9:51:20 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from smtp05.retemail.es (smtp05.iddeo.es [62.81.186.15])
	by hub.freebsd.org (Postfix) with ESMTP id DE94037B416
	for <freebsd-isp@freebsd.org>; Thu, 17 Jan 2002 09:51:16 -0800 (PST)
Received: from mailscan ([62.81.202.67]) by smtp05.retemail.es
          (InterMail vM.5.01.03.02 201-253-122-118-102-20010403) with SMTP
          id <20020117175109.IRUJ1011.smtp05.retemail.es@mailscan>
          for <freebsd-isp@freebsd.org>; Thu, 17 Jan 2002 18:51:09 +0100
Received: FROM svrcitrix.sadiel.es BY mailscan ; Thu Jan 17 18:49:20 2002 +0100
Received: from CORREO.sadiel.es ([62.81.202.90]) by svrcitrix.sadiel.es with Microsoft SMTPSVC(5.0.2195.2966);
	 Thu, 17 Jan 2002 18:51:14 +0100
Received: from svrldap.sadiel.es ([172.18.1.41]) by CORREO.sadiel.es with Microsoft SMTPSVC(5.0.2195.2966);
	 Thu, 17 Jan 2002 18:45:55 +0100
Date: Thu, 17 Jan 2002 18:41:28 +0100
From: Jorge Bianquetti de las Heras <jbianquetti@sadiel.es>
To: Andrew Houghton <aah@acm.org>
Cc: freebsd-isp@freebsd.org
Subject: Re: How to secure telnet?
Message-Id: <20020117184128.49689153.jbianquetti@sadiel.es>
In-Reply-To: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
References: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
X-Mailer: Sylpheed version 0.6.6 (GTK+ 1.2.10; i386--freebsd4.4)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-OriginalArrivalTime: 17 Jan 2002 17:45:55.0522 (UTC) FILETIME=[D076B220:01C19F7E]
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Thu, 17 Jan 2002 09:35:29 -0800
Andrew Houghton <aah@acm.org> wrote:

Telnet is NOT secure. But you can use S/KEY

> I have a server for shell accounts, and up to now the only way people have
> been able to access it is via SSH.  One of the users is leaving for a
> year-long, round-the-world jaunt.
> 
> SSH is pretty much out of the question for him -- if he can find an internet
> cafe in some of the places he's going, he won't be able to install new
> software, it would probably take years just to download a client over a 56K
> link, etc. etc.
> 
> I'd like to support him by making telnet available to him.  Any thoughts on
> the best/most secure way to do this?
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17  9:52:55 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from hindenburg.eboai.org (hindenburg.eboai.org [206.183.134.245])
	by hub.freebsd.org (Postfix) with ESMTP id 443F337B41A
	for <freebsd-isp@freebsd.org>; Thu, 17 Jan 2002 09:52:39 -0800 (PST)
Received: by hindenburg.eboai.org (Postfix, from userid 1000)
	id 66EF45E2DF; Thu, 17 Jan 2002 12:52:38 -0500 (EST)
Date: Thu, 17 Jan 2002 12:52:38 -0500
From: Chip Marshall <chip@setzer.chocobo.cx>
To: Barry Irwin <bvi@itouchlabs.com>
Cc: Andrew Houghton <aah@acm.org>, freebsd-isp@freebsd.org
Subject: Re: How to secure telnet?
Message-ID: <20020117125238.B30218@setzer.chocobo.cx>
Reply-To: chip@chocobo.cx
Mail-Followup-To: Barry Irwin <bvi@itouchlabs.com>,
	Andrew Houghton <aah@acm.org>, freebsd-isp@freebsd.org
References: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org> <20020117194356.V32746@itouchlabs.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20020117194356.V32746@itouchlabs.com>
User-Agent: Mutt/1.3.20i
X-URL: http://www.chocobo.cx/chip/
X-OS: FreeBSD 4.2-RELEASE i386  up 102 days,  11:16
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

I was just about to suggest that. I've used MindTerm from all sorts of
places to check my mail, including silly little pay-by-the-minute
kiosks in airports, and demo stuff at CompUSA and in the mall. Works
nicely.

On January 17, 2002, Barry Irwin sent me the following:
> Have you had a look at a Java SSH client such as mindterm This runs as
> an applet in most modern browers and is tiny (sub 100K iirc). As a
> bonus it has really great terminal emulation.
> 
> http://www.mindbrigt.se/mindterm
> 
> On Thu 2002-01-17 (09:35), Andrew Houghton wrote:
> > I have a server for shell accounts, and up to now the only way
> > people have been able to access it is via SSH. One of the users is
> > leaving for a year-long, round-the-world jaunt.
> > 
> > SSH is pretty much out of the question for him -- if he can find an
> > internet cafe in some of the places he's going, he won't be able to
> > install new software, it would probably take years just to download
> > a client over a 56K link, etc. etc.
> > 
> > I'd like to support him by making telnet available to him. Any
> > thoughts on the best/most secure way to do this?

-- 
Chip Marshall <chip@chocobo.cx>               http://www.chocobo.cx/chip/
GCM/CS d+(-) s+:++ a20>? C++ UB++++$ P+++$ L- E--- W++ N@ o K- w O M+ V--
PS+ PE Y+ PGP+ t+@ 5 X R@ tv+() b++>+++ DI++++ D(-) G++ e>++ h->++ r++ y-

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17  9:54: 6 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from indigo.quadrant.net (indigo.quadrant.net [207.195.92.9])
	by hub.freebsd.org (Postfix) with ESMTP id 6FCA437B41A
	for <freebsd-isp@FreeBSD.ORG>; Thu, 17 Jan 2002 09:54:00 -0800 (PST)
Received: from git2000 (56K79.quadrant.net [207.195.92.79])
	by indigo.quadrant.net (8.9.1/8.9.1) with SMTP id LAA16121;
	Thu, 17 Jan 2002 11:44:55 -0600 (CST)
From: "Scott Gerhardt" <scott@gerhardt-it.com>
To: "Lapinski, Michael (CRD)" <lapinski@crd.ge.com>,
	"'Andrew Houghton'" <aah@acm.org>, <freebsd-isp@FreeBSD.ORG>
Subject: RE: How to secure telnet?
Date: Thu, 17 Jan 2002 11:46:49 -0600
Message-ID: <KPEMLBLEMPMHGLJOCDEGOEBEDJAA.scott@gerhardt-it.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <E4AAC34FE3CF564D8AE89EB8AC333FD702E72D78@XMB03CRDGE>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Importance: Normal
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

The Putty executable runs standalone and is only 220KB in size.  Stick it
on a and that's all you need.

	- Scott


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17  9:58:11 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from nts.umd.edu (nts.umd.edu [128.8.5.5])
	by hub.freebsd.org (Postfix) with ESMTP id 9CCC937B416
	for <freebsd-isp@FreeBSD.ORG>; Thu, 17 Jan 2002 09:58:07 -0800 (PST)
Received: from localhost (missing@localhost)
	by nts.umd.edu (8.11.3/8.11.3) with ESMTP id g0HHvg522181;
	Thu, 17 Jan 2002 12:57:42 -0500 (EST)
	(envelope-from missing@nts.umd.edu)
Date: Thu, 17 Jan 2002 12:57:42 -0500 (EST)
From: Tony <missing@nts.umd.edu>
To: "Lapinski, Michael (CRD)" <lapinski@crd.ge.com>
Cc: "'Andrew Houghton'" <aah@acm.org>, <freebsd-isp@FreeBSD.ORG>
Subject: RE: How to secure telnet?
In-Reply-To: <E4AAC34FE3CF564D8AE89EB8AC333FD702E72D78@XMB03CRDGE>
Message-ID: <20020117124821.N9875-100000@nts.umd.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


On Thu, 17 Jan 2002, Lapinski, Michael (CRD) wrote:

> putty.exe is free, small and easy to find.

and doesn't require a typical M$ installation.
The binary can be copied from the website to anywhere the user
has permission to write to ( ie Desktop, C:/tmp , etc ...)

-T

>
> -mtl
> --------------------------------------------------
> Michael Lapinski
> Computer Scientist
> GE Corporate Research & Development
>
>
> "I think there is a world market for maybe five computers."
>             - IBM Chairman Thomas Watson, 1943
>
>
> -----Original Message-----
> From: Andrew Houghton [mailto:aah@acm.org]
> Sent: Thursday, January 17, 2002 12:35 PM
> To: freebsd-isp@FreeBSD.ORG
> Subject: How to secure telnet?
>
> I have a server for shell accounts, and up to now the only way people have
> been able to access it is via SSH.  One of the users is leaving for a
> year-long, round-the-world jaunt.
>
> SSH is pretty much out of the question for him -- if he can find an internet
> cafe in some of the places he's going, he won't be able to install new
> software, it would probably take years just to download a client over a 56K
> link, etc. etc.
>
> I'd like to support him by making telnet available to him.  Any thoughts on
> the best/most secure way to do this?
>
> - a.
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17 10:15:31 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from support.euronet.nl (support.euronet.nl [194.134.32.134])
	by hub.freebsd.org (Postfix) with ESMTP id 8E20D37B417
	for <freebsd-isp@FreeBSD.ORG>; Thu, 17 Jan 2002 10:15:28 -0800 (PST)
Received: from localhost (franst@localhost)
	by support.euronet.nl (8.11.3/8.11.0) with ESMTP id g0HIFO694093;
	Thu, 17 Jan 2002 19:15:25 +0100 (CET)
X-Authentication-Warning: support.euronet.nl: franst owned process doing -bs
Date: Thu, 17 Jan 2002 19:15:24 +0100 (CET)
From: Frans ter Borg <frans@quanza.net>
X-X-Sender: franst@support.euronet.nl
To: Andrew Houghton <aah@acm.org>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: How to secure telnet?
In-Reply-To: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
Message-ID: <20020117190829.V88380-100000@support.euronet.nl>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Thu, 17 Jan 2002, Andrew Houghton wrote:

> I have a server for shell accounts, and up to now the only way people
> have been able to access it is via SSH.  One of the users is leaving for
> a year-long, round-the-world jaunt.
>
> SSH is pretty much out of the question for him -- if he can find an
> internet cafe in some of the places he's going, he won't be able to
> install new software, it would probably take years just to download a
> client over a 56K link, etc. etc.
>
> I'd like to support him by making telnet available to him.  Any thoughts
> on the best/most secure way to do this?

I've just come from a year round the world (eastern and southern africa,
india, southeast asia). There's many places that are a pain if it comes to
shell-sessions, since latencies are just too high.

If the shell account is mainly for e-mail, forwarding to a hotmail/yahoo
account has worked pretty well for me... There's places with decent
connectivity, I used those to download putty and get myself organised on
the shell (organise my mail in pine-folders) front again... both hotmail
and yahoo allow you to set Reply-to if I'm not mistaken.



Frans


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17 10:26:17 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mail11.speakeasy.net (mail11.speakeasy.net [216.254.0.211])
	by hub.freebsd.org (Postfix) with ESMTP id 0D02737B416
	for <freebsd-isp@FreeBSD.ORG>; Thu, 17 Jan 2002 10:26:16 -0800 (PST)
Received: (qmail 14068 invoked from network); 17 Jan 2002 18:26:14 -0000
Received: from unknown (HELO ?192.168.1.5?) ([64.81.163.89]) (envelope-sender <drakFB@drak.com>)
          by mail11.speakeasy.net (qmail-ldap-1.03) with SMTP
          for <freebsd-isp@FreeBSD.ORG>; 17 Jan 2002 18:26:14 -0000
Mime-Version: 1.0
X-Sender:  (Unverified)
Message-Id: <a05100305b86cc64bdb3f@[192.168.1.5]>
In-Reply-To: <20020117190829.V88380-100000@support.euronet.nl>
References: <20020117190829.V88380-100000@support.euronet.nl>
Date: Thu, 17 Jan 2002 10:26:13 -0800
To: freebsd-isp@FreeBSD.ORG
From: Andrew Matheson <drakFB@drak.com>
Subject: Re: How to secure telnet?
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

>If the shell account is mainly for e-mail, forwarding to a hotmail/yahoo
>account has worked pretty well for me... There's places with decent
>connectivity, I used those to download putty and get myself organised on
>the shell (organise my mail in pine-folders) front again... both hotmail
>and yahoo allow you to set Reply-to if I'm not mistaken.

A friend of mine is travelling now and uses www.mail2web.com to connect to their POP account--it works well for them.  Another consideration to take into account if this is the purpose is to allow them to delete their mail willy-nilly to keep their connect times low and email management simple and still allow them to save email.  For this, you can store & forward mail to another account or you can probably simply spool a copy to a file.

Andrew

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17 10:49:40 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from lily.ezo.net (lily.ezo.net [206.102.130.13])
	by hub.freebsd.org (Postfix) with ESMTP id 566B437B41D
	for <freebsd-isp@FreeBSD.ORG>; Thu, 17 Jan 2002 10:49:37 -0800 (PST)
Received: from openwebmail (newpeony.ezo.net [206.102.130.9])
	by lily.ezo.net (8.11.6/8.11.6) with ESMTP id g0HInAV01755;
	Thu, 17 Jan 2002 13:49:10 -0500 (EST)
	(envelope-from jflowers@cantoncommerce.com)
Date: Thu, 17 Jan 2002 13:49:10 -0500 (EST)
Message-Id: <200201171849.g0HInAV01755@lily.ezo.net>
From: "Jim Flowers" <jflowers@cantoncommerce.com>
To: Andrew Houghton <aah@acm.org>, freebsd-isp@FreeBSD.ORG
Subject: Re: How to secure telnet?
In-Reply-To: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
References: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
X-Mailer: Open WebMail 1.53 20020107
X-OriginatingIP: 66.19.185.154 (jflowers)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

set up a sacrificial host and allow only telnet through your firewall to it.  
Allow only ssh -2 from it to your server that has the shell accounts and 
firewall out access from it to any of your other machines.  Optionally 
include a portsentry scanner and keep an eye on the logs.
   
> I have a server for shell accounts, and up to now the only way people have
> been able to access it is via SSH.  One of the users is leaving for a
> year-long, round-the-world jaunt.
> 
> SSH is pretty much out of the question for him -- if he can find an internet
> cafe in some of the places he's going, he won't be able to install new
> software, it would probably take years just to download a client over a 56K
> link, etc. etc.
> 
> I'd like to support him by making telnet available to him.  Any thoughts on
> the best/most secure way to do this?
> 
> - a.
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message


--
Jim Flowers<jflowers@ezo.net>

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17 11: 7:13 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from router.windsormachine.com (windsormachine.com [206.48.122.28])
	by hub.freebsd.org (Postfix) with ESMTP id 8D41D37B404
	for <freebsd-isp@FreeBSD.ORG>; Thu, 17 Jan 2002 11:07:09 -0800 (PST)
Received: from localhost (mdresser_b@localhost)
	by router.windsormachine.com (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id OAA26356;
	Thu, 17 Jan 2002 14:07:02 -0500
Date: Thu, 17 Jan 2002 14:07:02 -0500 (EST)
From: Mike Dresser <mdresser_b@windsormachine.com>
To: Jim Flowers <jflowers@cantoncommerce.com>
Cc: Andrew Houghton <aah@acm.org>, <freebsd-isp@FreeBSD.ORG>
Subject: Re: How to secure telnet?
In-Reply-To: <200201171849.g0HInAV01755@lily.ezo.net>
Message-ID: <Pine.LNX.4.33.0201171400410.22240-100000@router.windsormachine.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Thu, 17 Jan 2002, Jim Flowers wrote:

> set up a sacrificial host and allow only telnet through your firewall to it.
> Allow only ssh -2 from it to your server that has the shell accounts and
> firewall out access from it to any of your other machines.  Optionally
> include a portsentry scanner and keep an eye on the logs.

One problem is if you're using telnet and then ssh, and type your
passphrase or password in, if someone is sniffing the line at this point
they now have access to the shell server using your account.

Additionally, I haven't seen anyone touch on the fact the machine the user
connects from may be compromised already, giving an attacker your
passwords/passphrases/email to your loved ones from a keylogger or
similar.

Mike


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17 11:13:36 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mailout04.sul.t-online.com (mailout04.sul.t-online.com [194.25.134.18])
	by hub.freebsd.org (Postfix) with ESMTP
	id F020737B417; Thu, 17 Jan 2002 11:13:32 -0800 (PST)
Received: from fwd09.sul.t-online.de 
	by mailout04.sul.t-online.com with smtp 
	id 16RHyc-0008Fd-03; Thu, 17 Jan 2002 20:13:30 +0100
Received: from there (520075190812-0001@[217.4.236.87]) by fwd09.sul.t-online.com
	with smtp id 16RHyW-0D14XgC; Thu, 17 Jan 2002 20:13:24 +0100
Content-Type: text/plain;
  charset="iso-8859-1"
From: stefan.sonnenberg-carstens@t-online.de (Stefan Sonnenberg-Carstens)
To: Fabrizio Ravazzini <freefabri@yahoo.it>, freebsd-isp@freebsd.org
Subject: Re: HP Netserver E-200 & FreeBSD
Date: Thu, 17 Jan 2002 20:14:24 +0100
X-Mailer: KMail [version 1.3.1]
Cc: freebsd-newbies@freebsd.org
References: <20020117092330.80644.qmail@web20106.mail.yahoo.com>
In-Reply-To: <20020117092330.80644.qmail@web20106.mail.yahoo.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-ID: <16RHyW-0D14XgC@fwd09.sul.t-online.com>
X-Sender: 520075190812-0001@t-dialin.net
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Am Donnerstag, 17. Januar 2002 10:23 schrieb Fabrizio Ravazzini:
> Hello, anyone installed succesfully FreeBSD 4.x on HP
> Netserver E-200?
> I've to buy it to make two firewalls.
> The installation with the booting cd-rom?
>
> ______________________________________________________________________
>
> Iscriviti al gruppo ufficiale di Tomb Raider:
> http://it.groups.yahoo.com/group/gruppoufficiale_tombraider/
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
We have several HP servers and workstations running from Brio,Vectra, 
E-200,E-800 to LHR4 and never had problems with them.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17 13:49: 6 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from gizmo.internode.com.au (gizmo.internode.com.au [192.83.231.115])
	by hub.freebsd.org (Postfix) with ESMTP id 551B437B419
	for <freebsd-isp@FreeBSD.ORG>; Thu, 17 Jan 2002 13:49:02 -0800 (PST)
Received: (from newton@localhost)
	by gizmo.internode.com.au (8.11.0/8.9.3) id g0HLm9803498;
	Fri, 18 Jan 2002 08:18:09 +1030 (CST)
	(envelope-from newton)
Date: Fri, 18 Jan 2002 08:18:09 +1030
From: Mark Newton <newton@internode.com.au>
To: Andrew Houghton <aah@acm.org>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: How to secure telnet?
Message-ID: <20020118081809.A3463@internode.com.au>
References: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0pre3i
In-Reply-To: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
X-PGP-Key: http://www.on.net/~newton/pgpkey.txt
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Thu, Jan 17, 2002 at 09:35:29AM -0800, Andrew Houghton wrote:

 > I have a server for shell accounts, and up to now the only way people have
 > been able to access it is via SSH.  One of the users is leaving for a
 > year-long, round-the-world jaunt.
 > SSH is pretty much out of the question for him -- if he can find an internet
 > cafe in some of the places he's going, he won't be able to install new
 > software, it would probably take years just to download a client over a 56K
 > link, etc. etc.
 
Do a google search for "Mindterm".  It's a Java SSH client which happily
runs in a web browser.  Only takes a few minutes to download at 56k
too.  It supports an excellent VT100-style terminal emulation, ssh
port forwarding (so your friend can read his email securely while
he's gone), etc.

Due to JVM security restrictions in most web browsers, it's necessary
to install it on a web server which the user actually has an account
on (because Java applets can only make connections back to the host
they were downloaded from).  

It's been an excellent addition to my personal home page for years.
The ability to ssh-on-the-run is actually pretty brilliant.

   - mark

-- 
Mark Newton                               Email:  newton@internode.com.au (W)
Network Engineer                          Email:  newton@atdot.dotat.org  (H)
Internode Systems Pty Ltd                 Desk:   +61-8-82232999
"Network Man" - Anagram of "Mark Newton"  Mobile: +61-416-202-223

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17 14: 0:27 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from reiters.org (reiters.org [64.40.73.246])
	by hub.freebsd.org (Postfix) with ESMTP id D653637B405
	for <freebsd-isp@freebsd.org>; Thu, 17 Jan 2002 14:00:20 -0800 (PST)
Received: by reiters.org (Postfix, from userid 1001)
	id 5F049D64C; Thu, 17 Jan 2002 16:00:18 -0600 (CST)
Date: Thu, 17 Jan 2002 16:00:18 -0600
From: Dennis Reiter <denny@reiters.org>
To: Andrew Houghton <aah@acm.org>
Cc: freebsd-isp@freebsd.org
Subject: Re: How to secure telnet?
Message-ID: <20020117220018.GC96343@reiters.org>
References: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <DFEBLBPNIMCBCMIBDEOACELFEAAA.aah@acm.org>
User-Agent: Mutt/1.3.25i
X-Uptime: 3:58PM  up 125 days, 18 mins, 9 users, load averages: 0.08, 0.08, 0.29
X-Pooftas: No
X-PGP-Key: http://pgp.dtype.org:11371/pks/lookup?op=get&search=0x997F9D70
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Putty should be able to fit onto a floppy disk for SSH.

I have no clue how you'd implement it, but something like
pop-before-telnet would be kind of neat.

On Thu, Jan 17, 2002 at 09:35:29AM -0800, Andrew Houghton wrote:
> I have a server for shell accounts, and up to now the only way people have
> been able to access it is via SSH.  One of the users is leaving for a
> year-long, round-the-world jaunt.
> 
> SSH is pretty much out of the question for him -- if he can find an internet
> cafe in some of the places he's going, he won't be able to install new
> software, it would probably take years just to download a client over a 56K
> link, etc. etc.
> 
> I'd like to support him by making telnet available to him.  Any thoughts on
> the best/most secure way to do this?
> 
> - a.
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message

-- 
Denny Reiter                               denny@reiters.org
So I don't hurt your feelings:        happydenny@reiters.org
                       www.scapegoats.org
    "The network is not down.  We're just experiencing 100% packet loss."

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17 14:51:46 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from knight.astranet.lv (knight.astranet.lv [62.85.45.36])
	by hub.freebsd.org (Postfix) with ESMTP id 42BC437B43D
	for <freebsd-isp@FreeBSD.ORG>; Thu, 17 Jan 2002 14:51:25 -0800 (PST)
Received: from weird ([159.148.83.150])
	by knight.astranet.lv (8.11.3/8.11.3) with SMTP id g0HMo2m00479
	for <freebsd-isp@FreeBSD.ORG>; Fri, 18 Jan 2002 00:50:04 +0200 (EET)
	(envelope-from matiss@astranet.lv)
Message-ID: <007601c19fa9$ac69aa60$0300a8c0@weird>
From: "Matiss Elsbergs" <matiss@astranet.lv>
To: <freebsd-isp@FreeBSD.ORG>
Subject: strange NAT problem
Date: Fri, 18 Jan 2002 00:52:36 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="koi8-r"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

well hello there again,

and get introduced to another wierd question of the day :

i have a following freebsd router setup:

rl0 - internal NAT
rl1 - my network with public IP adresses
ed0 - external interface to uplink.

everything worked fine almost out of the box, with few options in kernel.

now i'm introduced to a weird problem: any protocol, that somehow requires
authentication, lags abnormal, when logging in from NAT to machines
connected to rl1. there is no other problems. I can login very well to
machines anywhere on the internet but the few ones on rl1. From outside,
there is no problem logging in to rl1 machines.

any ideas why this is happening? Tried passing almost every option to natd,
tried to change firewall rules, flushed them. Still nothing.

With best regards -
Matiss Elsbergs,
Astranet IS Hostmaster
+371 6435911



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17 21:33:42 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from backup.dagupan.com (www.psysc.org.ph [206.101.69.5])
	by hub.freebsd.org (Postfix) with ESMTP id 531C237B402
	for <freebsd-isp@freebsd.org>; Thu, 17 Jan 2002 21:33:39 -0800 (PST)
Received: by apmail.dagupan.com with Internet Mail Service (5.5.2653.19)
	id <YZLBWA1B>; Fri, 18 Jan 2002 13:34:07 +0800
Message-ID: <10F29E27A956D511B0940050DA8D86A9340DE1@apmail.dagupan.com>
From: francisv@dagupan.com
To: freebsd-isp@freebsd.org
Subject: shared memory and jailed systems
Date: Fri, 18 Jan 2002 13:34:06 +0800
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi,

How do I enable shared memory in a jailed system?

---
 francis a. vidal [bitstop network services] | http://www.dagupan.com
 streaming media + web hosting               | http://www.keystone.ph
 v(02)330-2871,(02)330-2872; f(02)330-2873   | http://www.kuro.ph 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Thu Jan 17 23:34:13 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.dev.itouchnet.net (devco.net [196.15.188.2])
	by hub.freebsd.org (Postfix) with ESMTP id 5F3A237B425
	for <freebsd-isp@freebsd.org>; Thu, 17 Jan 2002 23:34:05 -0800 (PST)
Received: from nobody by mx1.dev.itouchnet.net with scanned_ok (Exim 3.33 #2)
	id 16RTZ1-0003in-00
	for freebsd-isp@freebsd.org; Fri, 18 Jan 2002 09:35:51 +0200
Received: from shell.devco.net ([196.15.188.7])
	by mx1.dev.itouchnet.net with esmtp (Exim 3.33 #2)
	id 16RTYy-0003iF-00; Fri, 18 Jan 2002 09:35:48 +0200
Received: from bvi by shell.devco.net with local (Exim 3.33 #4)
	id 16RTcW-000EvA-00; Fri, 18 Jan 2002 09:39:28 +0200
Date: Fri, 18 Jan 2002 09:39:28 +0200
From: Barry Irwin <bvi@itouchlabs.com>
To: Mike Dresser <mdresser_b@windsormachine.com>
Cc: Jim Flowers <jflowers@cantoncommerce.com>,
	Andrew Houghton <aah@acm.org>, freebsd-isp@FreeBSD.ORG
Subject: Re: How to secure telnet?
Message-ID: <20020118093928.Y32746@itouchlabs.com>
References: <200201171849.g0HInAV01755@lily.ezo.net> <Pine.LNX.4.33.0201171400410.22240-100000@router.windsormachine.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <Pine.LNX.4.33.0201171400410.22240-100000@router.windsormachine.com>; from mdresser_b@windsormachine.com on Thu, Jan 17, 2002 at 02:07:02PM -0500
X-Checked: This message has been scanned for any virusses and unauthorized attachments.
X-iScan-ID: 14305-1011339351-57797@mx1.dev.itouchnet.net version $Name: REL_2_0_2 $
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Thu 2002-01-17 (14:07), Mike Dresser wrote:
> 
> One problem is if you're using telnet and then ssh, and type your
> passphrase or password in, if someone is sniffing the line at this point
> they now have access to the shell server using your account.
> 
> Additionally, I haven't seen anyone touch on the fact the machine the user
> connects from may be compromised already, giving an attacker your
> passwords/passphrases/email to your loved ones from a keylogger or
> similar.

To go to the paranoid side......
SSK keys, although this requires the user carrying a disk arround, not all
cyber cafes  or net access consoles allow you to stick disks in. 

How about using S/Key  Can either use a java OTP calculator, or get the user
a hardware token.

I think in the end you need to weigh up the risks between providing access,
and what your risk of being hacked is.

Barry


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Jan 18  2:27:35 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from kermit.netivity.nl (wc-68.r-195-85-144.essentkabel.com [195.85.144.68])
	by hub.freebsd.org (Postfix) with ESMTP id 5045937B400
	for <freebsd-isp@FreeBSD.ORG>; Fri, 18 Jan 2002 02:27:23 -0800 (PST)
Received: by KERMIT with Internet Mail Service (5.5.2653.19)
	id <DA1ZBXM8>; Fri, 18 Jan 2002 11:27:16 +0100
Message-ID: <510EAC2065C0D311929200A02472526237A7B4@NETIVITY-FS>
From: Enriko Groen <enriko.groen@netivity.nl>
To: 'Matiss Elsbergs' <matiss@astranet.lv>, freebsd-isp@FreeBSD.ORG
Subject: RE: strange NAT problem
Date: Fri, 18 Jan 2002 11:27:16 +0100
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain;
	charset="koi8-r"
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Lag...

Hmmm... name resolving problems... for 99% sure...



> -----Original Message-----
> From: Matiss Elsbergs [mailto:matiss@astranet.lv]
> Sent: Thursday, January 17, 2002 11:53 PM
> To: freebsd-isp@FreeBSD.ORG
> Subject: strange NAT problem
> 
> 
> well hello there again,
> 
> and get introduced to another wierd question of the day :
> 
> i have a following freebsd router setup:
> 
> rl0 - internal NAT
> rl1 - my network with public IP adresses
> ed0 - external interface to uplink.
> 
> everything worked fine almost out of the box, with few 
> options in kernel.
> 
> now i'm introduced to a weird problem: any protocol, that 
> somehow requires
> authentication, lags abnormal, when logging in from NAT to machines
> connected to rl1. there is no other problems. I can login very well to
> machines anywhere on the internet but the few ones on rl1. 
> From outside,
> there is no problem logging in to rl1 machines.
> 
> any ideas why this is happening? Tried passing almost every 
> option to natd,
> tried to change firewall rules, flushed them. Still nothing.
> 
> With best regards -
> Matiss Elsbergs,
> Astranet IS Hostmaster
> +371 6435911
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Jan 18  2:45:32 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from trinity.jamiesdomain.org.uk (trinity.jamiesdomain.org.uk [62.49.217.114])
	by hub.freebsd.org (Postfix) with ESMTP id 5971737B400
	for <freebsd-isp@freebsd.org>; Fri, 18 Jan 2002 02:45:29 -0800 (PST)
Received: from [194.207.93.61] (jamie@mail.trident-uk.co.uk [195.166.16.10])
	by trinity.jamiesdomain.org.uk (8.11.4/8.11.4) with ESMTP id g0IAeha77105
	for <freebsd-isp@freebsd.org>; Fri, 18 Jan 2002 10:40:43 GMT
	(envelope-from jamie@jamiesdomain.org.uk)
From: Jamie Heckford <jamie@jamiesdomain.org.uk>
To: FreeBSD ISP Mailing List <freebsd-isp@freebsd.org>
Subject: Restricting DHCPd
Date: Fri, 18 Jan 2002 10:45:26 +0000
Message-Id: <20020118104526.2971@mail.jamiesdomain.org.uk>
X-Mailer: CTM PowerMail 3.1 carbon <http://www.ctmdev.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Hi,

Does anyone know of a way to restrict DHCP giving out addresses? I know
you can specify MAC addresses, but can you restrict it by client-
hostname? (Windows workstations identify this bit as the computer
(NetBIOS?) name not the DNS name)

What I want to do is only allow machines who have the computer name set
to TMSXXXX to be given an IP address.

Does anyone know if this is possible? 

Thanks in advance ;)  

-- 
Jamie Heckford
http://jamiesdomain.org.uk/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Jan 18  8:11:53 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from www.cs-edu.net (www.cs-edu.net [217.118.32.217])
	by hub.freebsd.org (Postfix) with ESMTP id AA0E337B400
	for <freebsd-isp@freebsd.org>; Fri, 18 Jan 2002 08:11:46 -0800 (PST)
Received: from cp6 ([192.168.1.6])
	by www.cs-edu.net (8.11.6/8.11.6) with SMTP id g0GKwbD68963;
	Wed, 16 Jan 2002 21:58:38 +0100 (CET)
	(envelope-from freemind@zappa.halden.net)
Message-Id: <3.0.6.32.20020116195531.0099f8a0@zappa.halden.net>
X-Sender: 
X-Mailer: 
Date: Wed, 16 Jan 2002 19:55:31 +0000
To: "jack xiao" <jack_xiao99@hotmail.com>
From: "zappa support    ( Freemind )" <freemind@zappa.halden.net>
Subject: Re: pppd with radius
Cc: freebsd-isp@freebsd.org
In-Reply-To: <OE28h6KffKd8uJolHi200016384@hotmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

At 12:21 PM 1/16/02 -0500 , jack xiao wrote:
   
<x-html><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2600.0" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>I am using pppd for some application and also
need 
radius function to communicate with the remote radius server. In the
FreeBSD man 
page of pppd, I could not get anything about radius.&nbsp;As far as I know,
in 
Linux there are some radius patch for pppd, but in FreeBSD, I found nothing. 
Does anybody has such experience or any idea. </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>Thanks in advance.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>Jack</FONT></DIV></BODY></HTML>
</x-html>

---


Please dont send HTML mails like this..!




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Fri Jan 18 10:51:29 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from gray.impulse.net (gray.impulse.net [207.154.64.174])
	by hub.freebsd.org (Postfix) with ESMTP id EB78237B416
	for <freebsd-isp@freebsd.org>; Fri, 18 Jan 2002 10:51:24 -0800 (PST)
Received: by gray.impulse.net (Postfix, from userid 1000)
	id 7B506375EE; Fri, 18 Jan 2002 10:51:24 -0800 (PST)
To: Jamie Heckford <jamie@jamiesdomain.org.uk>
Cc: FreeBSD ISP Mailing List <freebsd-isp@freebsd.org>
Subject: Re: Restricting DHCPd
References: <20020118104526.2971@mail.jamiesdomain.org.uk>
From: Ted Cabeen <secabeen@pobox.com>
Date: 18 Jan 2002 10:51:24 -0800
In-Reply-To: Jamie Heckford's message of "Fri, 18 Jan 2002 10:45:26 +0000"
Message-ID: <87u1tjlcgj.fsf@gray.impulse.net>
Lines: 22
User-Agent: Gnus/5.0807 (Gnus v5.8.7) XEmacs/21.1 (Cuyahoga Valley)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Jamie Heckford <jamie@jamiesdomain.org.uk> writes:

> Does anyone know of a way to restrict DHCP giving out addresses? I know
> you can specify MAC addresses, but can you restrict it by client-
> hostname? (Windows workstations identify this bit as the computer
> (NetBIOS?) name not the DNS name)
> 
> What I want to do is only allow machines who have the computer name set
> to TMSXXXX to be given an IP address.
> 
> Does anyone know if this is possible? 

Yes, but you have to hack the source code for DHCP to support
allocation by hostname.  It's not a trivial hack, but it shouldn't
take more than a few days.  Once you've done that, you can then deny
unknown clients.

-- 
Ted Cabeen           http://www.pobox.com/~secabeen            ted@impulse.net 
Check Website or Keyserver for PGP/GPG Key BA0349D2         secabeen@pobox.com
"I have taken all knowledge to be my province." -F. Bacon  secabeen@cabeen.org
"Human kind cannot bear very much reality."-T.S.Eliot        cabeen@netcom.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sat Jan 19  1:26:58 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from beastie.saturn-tech.com (beastie.saturn-tech.com [207.229.19.136])
	by hub.freebsd.org (Postfix) with ESMTP id BEA6937B41A
	for <freebsd-isp@FreeBSD.ORG>; Sat, 19 Jan 2002 01:26:50 -0800 (PST)
Received: from localhost (drussell@localhost)
	by calvin.saturn-tech.com (8.8.8/8.8.8) with SMTP id AAA28507;
	Fri, 18 Jan 2002 00:43:55 -0700 (MST)
	(envelope-from drussell@saturn-tech.com)
Date: Fri, 18 Jan 2002 00:43:55 -0700 (MST)
From: Doug Russell <drussell@saturn-tech.com>
To: Barry Irwin <bvi@itouchlabs.com>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: How to secure telnet?
In-Reply-To: <20020118093928.Y32746@itouchlabs.com>
Message-ID: <Pine.BSF.3.96.1020118004212.19929I-100000@calvin.saturn-tech.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


On Fri, 18 Jan 2002, Barry Irwin wrote:

> On Thu 2002-01-17 (14:07), Mike Dresser wrote:
> > 
> > One problem is if you're using telnet and then ssh, and type your
> > passphrase or password in, if someone is sniffing the line at this point
> > they now have access to the shell server using your account.
> > 
> > Additionally, I haven't seen anyone touch on the fact the machine the user
> > connects from may be compromised already, giving an attacker your
> > passwords/passphrases/email to your loved ones from a keylogger or
> > similar.
> 
> To go to the paranoid side......
> SSK keys, although this requires the user carrying a disk arround, not all
> cyber cafes  or net access consoles allow you to stick disks in. 

One-time passwords are handy for some of these purposes.  You may have to
carry around a list of passwords, but at least someone can't use them
again.

Later......						<Doug><


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sat Jan 19  8:39: 3 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from relay2.agava.net.ru (ofc.agava.net [217.106.235.141])
	by hub.freebsd.org (Postfix) with ESMTP id AB91B37B405
	for <freebsd-isp@freebsd.org>; Sat, 19 Jan 2002 08:39:00 -0800 (PST)
Received: from hellbell.domain (hellbell.domain [192.168.1.12])
	by relay2.agava.net.ru (Postfix) with ESMTP
	id A66FD66B0C; Sat, 19 Jan 2002 19:38:54 +0300 (MSK)
Received: from localhost (localhost [127.0.0.1])
	by hellbell.domain (Postfix) with ESMTP
	id 2129CCD10; Sat, 19 Jan 2002 19:38:53 +0300 (MSK)
Date: Sat, 19 Jan 2002 19:38:53 +0300 (MSK)
From: Alexey Zakirov <frank@agava.com>
X-X-Sender:  <frank@hellbell.domain>
To: <francisv@dagupan.com>
Cc: <freebsd-isp@freebsd.org>
Subject: Re: shared memory and jailed systems
In-Reply-To: <10F29E27A956D511B0940050DA8D86A9340DE1@apmail.dagupan.com>
Message-ID: <Pine.BSF.4.32.0201191938110.27958-100000@hellbell.domain>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

On Fri, 18 Jan 2002 francisv@dagupan.com wrote:

> How do I enable shared memory in a jailed system?

You should include "jail.sysvipc_allowed=1" in your /etc/sysctl.conf

*** WBR, Alexey Zakirov (frank@agava.com)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sat Jan 19 11:33:57 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mail.day-light.net (dle.day-light.net [64.37.72.2])
	by hub.freebsd.org (Postfix) with ESMTP id E840237B417
	for <freebsd-isp@FreeBSD.ORG>; Sat, 19 Jan 2002 11:33:55 -0800 (PST)
Received: from w1 (118-203.bestdsl.net [216.162.118.203])
	by mail.day-light.net (Postfix) with SMTP id 4313743E52
	for <freebsd-isp@FreeBSD.ORG>; Sat, 19 Jan 2002 13:33:55 -0600 (CST)
Reply-To: <john@day-light.com>
From: "John Brooks" <john@day-light.com>
To: <freebsd-isp@FreeBSD.ORG>
Subject: OT Gateway IP is Broadcast IP
Date: Sat, 19 Jan 2002 13:31:13 -0600
Message-ID: <000b01c1a11f$defc0140$1505010a@daylight.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
Importance: Normal
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

The other day I came across a Win2k network that has assigned their gateway
IP to their broadcast IP. Seemed strange to me. Is this normal in a windows
environment?

network:  x.x.x.96/29
gateway:  x.x.x.103
broadcast:  x.x.x.103

The users are complaining about "slowness" out through their dsl. Could that
be part of the cause?

--
John Brooks
Email:  john@stlbsd.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sat Jan 19 11:50: 9 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from samuel.interplex.ca (abi.ca [216.18.127.185])
	by hub.freebsd.org (Postfix) with ESMTP id 52BBC37B41C
	for <freebsd-isp@freebsd.org>; Sat, 19 Jan 2002 11:49:57 -0800 (PST)
Received: from interplex.ca (smart-x.ctlc.interplex.ca [209.71.202.73])
	by samuel.interplex.ca (8.11.3/8.11.3) with ESMTP id g0JJqMf10786
	for <freebsd-isp@freebsd.org>; Sat, 19 Jan 2002 14:52:22 -0500 (EST)
	(envelope-from db@interplex.ca)
Message-ID: <3C49CEA9.3040308@interplex.ca>
Date: Sat, 19 Jan 2002 14:53:13 -0500
From: Dominic Blais <db@interplex.ca>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:0.9.7) Gecko/20020111
X-Accept-Language: en-us
MIME-Version: 1.0
To: freebsd-isp@freebsd.org
Subject: Setup...
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


Hi!

I have an link with the following specs:

2.5Mbps downlink  ~266KB/s
                    uplink  ~  70KB/s
This is an adsl link..

I have many users behind my freebsd router and I would like to set it in 
order to don't have anybody using all the uplink cuz
I get some 4000ms ping when it's fully used...  vs ~14ms when unused.....

I would like it to be the same bw for each user...

I guess it would be possible with dummynet's pipes limitations but I 
don't know what would be a good configuration...
Could anybody help me?

Thanks!

Write me back on my email address plz, I'm not on the mailing list..

-- 
Dominic Blais
Administrateur reseau
Interplex telecom -=[ http://www.interplex.ca ]=-
Email: db@interplex.ca



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sat Jan 19 12: 8:42 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from proverbs.outreachnetworks.com (proverbs.outreachnetworks.com [65.196.249.4])
	by hub.freebsd.org (Postfix) with SMTP id 65B5B37B402
	for <freebsd-isp@freebsd.org>; Sat, 19 Jan 2002 12:08:30 -0800 (PST)
Received: (qmail 21214 invoked from network); 19 Jan 2002 20:08:29 -0000
Received: from unknown (HELO phoncella.outreachnetworks.com) (64.108.62.145)
  by proverbs.outreachnetworks.com with SMTP; 19 Jan 2002 20:08:29 -0000
Received: (from elh@localhost)
	by phoncella.outreachnetworks.com (8.11.6/8.11.6) id g0JK8N010065
	for freebsd-isp@freebsd.org; Sat, 19 Jan 2002 15:08:23 -0500
X-Authentication-Warning: phoncella.outreachnetworks.com: elh set sender to elh@outreachnetworks.com using -f
Date: Sat, 19 Jan 2002 15:08:22 -0500
From: "Eric L. Howard" <elh@outreachnetworks.com>
To: freebsd-isp@freebsd.org
Subject: Re: OT Gateway IP is Broadcast IP
Message-ID: <20020119150822.B9510@outreachnetworks.com>
Mail-Followup-To: freebsd-isp@freebsd.org
References: <000b01c1a11f$defc0140$1505010a@daylight.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <000b01c1a11f$defc0140$1505010a@daylight.net>; from john@day-light.com on Sat, Jan 19, 2002 at 01:31:13PM -0600
Favorite-Scripture: Romans 8:18
Theocratic-Rule-Advocate: http://www.crossmovement.com
Registered-Secret-Agent: Agent Double-Naught Seven
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

At a certain time, now past, John Brooks spake thusly:
> The other day I came across a Win2k network that has assigned their gateway
> IP to their broadcast IP. Seemed strange to me. Is this normal in a windows
> environment?
> 
> network:  x.x.x.96/29
> gateway:  x.x.x.103
> broadcast:  x.x.x.103

I'd say that setup isn't normal anywhere.

> The users are complaining about "slowness" out through their dsl. Could that
> be part of the cause?

Yes...fix the network setup and they should see an improvement.

       ~elh
-- 
Eric L. Howard           e l h @ o u t r e a c h n e t w o r k s . c o m
------------------------------------------------------------------------
www.OutreachNetworks.com                                    313.297.9900
------------------------------------------------------------------------
                    Advocate of the Theocratic Rule

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message


From owner-freebsd-isp  Sat Jan 19 12: 9:11 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from misery.sdf.com (misery.sdf.com [207.200.153.226])
	by hub.freebsd.org (Postfix) with ESMTP id DF45737B400
	for <freebsd-isp@freebsd.org>; Sat, 19 Jan 2002 12:09:05 -0800 (PST)
Received: from tom (helo=localhost)
	by misery.sdf.com with local-esmtp (Exim 2.12 #1)
	id 16S1Bg-000281-00; Sat, 19 Jan 2002 11:30:00 -0800
Date: Sat, 19 Jan 2002 11:29:59 -0800 (PST)
From: Tom Samplonius <tom@sdf.com>
To: John Brooks <john@day-light.com>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: OT Gateway IP is Broadcast IP
In-Reply-To: <000b01c1a11f$defc0140$1505010a@daylight.net>
Message-ID: <Pine.BSF.4.05.10201191124200.9032-100000@misery.sdf.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org


On Sat, 19 Jan 2002, John Brooks wrote:

> The other day I came across a Win2k network that has assigned their gateway
> IP to their broadcast IP. Seemed strange to me. Is this normal in a windows
> environment?
> 
> network:  x.x.x.96/29
> gateway:  x.x.x.103
> broadcast:  x.x.x.103

  Usually Windows systems with messed up gateways default to using proxy
arp.  For instance many sites deliberately set the hosts own IP and the
gateway IP to be the same.  This means they send ARP requests for every
non local IP.  Hopefully, the border router is set to handle proxy arp.  
Proxy arp generates a lot of broadcast traffic.  On a DSL network,
broadcasts may be flooded to lots of other areas, so you don't necessarily
know which router is responding.  

Tom



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message