From owner-freebsd-questions@freebsd.org Sun Aug 7 08:27:05 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B01C8BB1CA1; Sun, 7 Aug 2016 08:27:05 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from mx.box-hlm-02.niklaas.eu (box-hlm-02.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:feac:28f6]) by mx1.freebsd.org (Postfix) with ESMTP id 64AD917D0; Sun, 7 Aug 2016 08:27:05 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from box-hlm-03.niklaas.eu (box-hlm-03.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:feaa:e902]) by mx.box-hlm-02.niklaas.eu (Postfix) with ESMTPSA id ABDBA1C9782; Sun, 7 Aug 2016 10:26:56 +0200 (CEST) Date: Sun, 7 Aug 2016 10:26:52 +0200 From: Niklaas Baudet von Gersdorff To: freebsd-questions@freebsd.org, freebsd-pf@freebsd.org Subject: Re: Firewalling jails and lo0 Message-ID: <20160807082651.GA87754@box-hlm-03.niklaas.eu> Reply-To: stdin@niklaas.eu Mail-Followup-To: freebsd-questions@freebsd.org, freebsd-pf@freebsd.org References: <20160806155411.GA5289@len-t420.klaas> <3C1C4822-17C2-42D9-A9BE-C3549B9B6F25@lists.zabbadoz.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <3C1C4822-17C2-42D9-A9BE-C3549B9B6F25@lists.zabbadoz.net> User-Agent: Mutt/1.6.1 (2016-04-27) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 08:27:05 -0000 Bjoern A. Zeeb [2016-08-06 20:02 +0000] : > I am curious about this. Can you give me an (obfuscated) example? (if > you want in private email) -- $ jls -v JID Hostname Path Name State CPUSetID IP Address(es) [...] 7 mx.box-hlm-03.niklaas.eu /usr/local/jails/smtp1 smtp1 ACTIVE 8 10.3.8.1 fd16:dcc0:f4cc:3::8:1 [...] 24 proxy1.box-hlm-03.niklaas.eu /usr/local/jails/proxy1 proxy1 ACTIVE 5 10.3.2.1 10.77.2.1 fd16:dcc0:f4cc:3::2:1 fd16:dcc0:f4cc:77::2:1 [...] -- -- $ ifconfig lo1 lo1: flags=8049 metric 0 mtu 16384 options=600003 [...] inet 10.3.8.1 netmask 0xffff0000 inet6 fd16:dcc0:f4cc:3::8:1 prefixlen 64 [...] inet 10.3.2.1 netmask 0xffff0000 inet 10.77.2.1 netmask 0xffff0000 inet6 fd16:dcc0:f4cc:3::2:1 prefixlen 64 inet6 fd16:dcc0:f4cc:77::2:1 prefixlen 64 [...] nd6 options=21 -- The following is a /full/ output: -- $ ifconfig lo0 lo0: flags=8049 metric 0 mtu 16384 options=600003 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2 inet 127.0.0.1 netmask 0xff000000 nd6 options=21 -- So, as you can see, the jails only have IP addresses on lo1 and none of them has one on lo0. To make that clear: -- $ jexec smtp1 ifconfig [...] lo0: flags=8049 metric 0 mtu 16384 options=600003 nd6 options=21 lo1: flags=8049 metric 0 mtu 16384 options=600003 inet 10.3.8.1 netmask 0xffff0000 inet6 fd16:dcc0:f4cc:3::8:1 prefixlen 64 nd6 options=21 [...] -- In my pf.conf I have the following. This is a simplified extract: -- /etc/pf.conf 1 ext_if = vtnet0 2 jail_if = lo1 3 4 table persist 5 table persist 6 7 set skip on lo0 8 9 nat on $ext_if from { } to any -> 10 11 block log all 12 13 pass out all keep state 14 15 pass in on $jail_if proto tcp from to port { } -- As you can see I have a principal block in line 11, and skip is set on lo0 solely. That said, I block on lo1. Because of this, I pass on lo1 in line 19. I thought this is necessary. However, here comes the thing: Although the jails have IP addresses attached to lo1 only, I can see traffic like the following: -- $ tcpdump -nettti lo0 host 10.3.2.1 00:00:00.023424 AF IPv4 (2), length 64: 10.3.2.1.51096 > 10.3.8.1.9025: Flags [S], seq 4205430985, win 65535, options [mss 16344,nop,wscale 6,sackOK,TS val 349909592 ecr 0], length 0 00:00:00.000064 AF IPv4 (2), length 64: 10.3.8.1.9025 > 10.3.2.1.51096: Flags [S.], seq 3921176095, ack 4205430986, win 65535, options [mss 16344,nop,wscale 6,sackOK,TS val 3273771227 ecr 349909592], length 0 00:00:00.000023 AF IPv4 (2), length 56: 10.3.2.1.51096 > 10.3.8.1.9025: Flags [.], ack 1, win 1275, options [nop,nop,TS val 349909592 ecr 3273771227], length 0 -- -- $ tcpdump -nettti lo0 host fd16:dcc0:f4cc:3::8:1 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on lo0, link-type NULL (BSD loopback), capture size 65535 bytes 00:00:00.000000 AF IPv6 (28), length 84: fd16:dcc0:f4cc:3::2:1.35851 > fd16:dcc0:f4cc:3::8:1.25: Flags [S], seq 3339315349, win 65535, options [mss 16324,nop,wscale 6,sackOK,TS val 352469079 ecr 0], length 0 00:00:00.000035 AF IPv6 (28), length 84: fd16:dcc0:f4cc:3::8:1.25 > fd16:dcc0:f4cc:3::2:1.35851: Flags [S.], seq 3726000680, ack 3339315350, win 65535, options [mss 16324,nop,wscale 6,sackOK,TS val 306734766 ecr 352469079], length 0 00:00:00.000044 AF IPv6 (28), length 76: fd16:dcc0:f4cc:3::2:1.35851 > fd16:dcc0:f4cc:3::8:1.25: Flags [.], ack 1, win 1274, options [nop,nop,TS val 352469079 ecr 306734766], length 0 00:00:05.060320 AF IPv6 (28), length 107: fd16:dcc0:f4cc:3::8:1.25 > fd16:dcc0:f4cc:3::2:1.35851: Flags [P.], seq 1:32, ack 1, win 1274, options [nop,nop,TS val 306739827 ecr 352469079], length 31 00:00:00.000113 AF IPv6 (28), length 76: fd16:dcc0:f4cc:3::8:1.25 > fd16:dcc0:f4cc:3::2:1.35851: Flags [F.], seq 32, ack 1, win 1274, options [nop,nop,TS val 306739827 ecr 352469079], length 0 00:00:00.000025 AF IPv6 (28), length 76: fd16:dcc0:f4cc:3::2:1.35851 > fd16:dcc0:f4cc:3::8:1.25: Flags [.], ack 33, win 1273, options [nop,nop,TS val 352474140 ecr 306739827], length 0 00:00:00.000413 AF IPv6 (28), length 76: fd16:dcc0:f4cc:3::2:1.35851 > fd16:dcc0:f4cc:3::8:1.25: Flags [F.], seq 1, ack 33, win 1274, options [nop,nop,TS val 352474140 ecr 306739827], length 0 -- As you can see, this is on lo0 although the jails don't have an IP address on it. That said, restricting traffic on lo1 doesn't make any sense because the jails use lo0 anyway. > Are these ::1 connections, link-local addresses (unlikely as they should > not be visible to jails), or full IP? As you can see, they are full IP. > And what’s the routing table entry in the base system for them? Have a look at the following output of netstat (I removed some lines and cells): -- $ netstat -rn Routing tables Internet: Destination Gateway Flags Netif Expire default < > UGS vtnet0 10.0.0.0/8 link#4 U tap0 10.3.2.1 link#3 UH lo1 10.3.8.1 link#3 UH lo1 10.77.2.1 link#3 UH lo1 127.0.0.1 link#2 UH lo0 Internet6: Destination Gateway Flags Netif Expire ::/96 ::1 UGRS lo0 default < > UGS vtnet0 ::1 link#2 UH lo0 ::ffff:0.0.0.0/96 ::1 UGRS lo0 < > link#1 U vtnet0 < > link#1 UHS lo0 fd16:dcc0:f4cc:3::/64 link#3 U lo1 fd16:dcc0:f4cc:3::1 link#4 UHS lo0 fd16:dcc0:f4cc:3::2:1 link#3 UHS lo0 fd16:dcc0:f4cc:3::8:1 link#3 UHS lo0 fd16:dcc0:f4cc:77::/64 link#3 U lo1 fd16:dcc0:f4cc:77::2:1 link#3 UHS lo0 fe80::/10 ::1 UGRS lo0 fe80::%vtnet0/64 link#1 U vtnet0 fe80::< >%vtnet0 link#1 UHS lo0 fe80::%lo0/64 link#2 U lo0 fe80::1%lo0 link#2 UHS lo0 fe80::%tap0/64 link#4 U tap0 fe80::< >%tap0 link#4 UHS lo0 ff01::%vtnet0/32 < >%vtnet0 U vtnet0 ff01::%lo0/32 ::1 U lo0 ff01::%lo1/32 fd16:dcc0:f4cc:3::1:1 U lo1 ff01::%tap0/32 fd16:dcc0:f4cc:3::1 U tap0 ff02::/16 ::1 UGRS lo0 ff02::%vtnet0/32 < >%vtnet0 U vtnet0 ff02::%lo0/32 ::1 U lo0 ff02::%lo1/32 fd16:dcc0:f4cc:3::1:1 U lo1 ff02::%tap0/32 fd16:dcc0:f4cc:3::1 U tap0 -- > especially, do they have any IP address assigned to lo0 in them at all? No, they don't. Niklaas From owner-freebsd-questions@freebsd.org Sun Aug 7 14:20:25 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4A316BB1670; Sun, 7 Aug 2016 14:20:25 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mail-io0-x22b.google.com (mail-io0-x22b.google.com [IPv6:2607:f8b0:4001:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 0A6F61955; Sun, 7 Aug 2016 14:20:25 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mail-io0-x22b.google.com with SMTP id q83so338578116iod.1; Sun, 07 Aug 2016 07:20:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-transfer-encoding; bh=UYWCxp5yU7qfLIm6sHEWuF8W8vDCjNZ4lynM1EqfHoQ=; b=BzGtnGMBF4lekfBqyUWsnGpqo3gjwvDSIg+HDDqnWHYehCkW94C40pPg3hjpkGn6F4 v7B9izcxdRbNVeVALwUNTjpBmr+7yGMbr0tFICBXPrsa4G8r2iWjV48v/DRqwIZQ1R08 kSO1tz/oOjCsT0HWMm6fctLBy/X/Zfbzg7Uac+IXFIZTnhNBoRR7iHATnxX2KlBbP8im QBmzIAi78gYX9chkjSsnfNMQsVeo50X43gnIve/S0fYhlj0UjxHzQuFF4UCQIBzKKqYs tKXKRW8Xg2oJ1cKZ3jGvJo6JtsF+8wPlZ2ADr+wKEGbc8t8fMVH1EeD8svaRnupFCfl3 olgQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-transfer-encoding; bh=UYWCxp5yU7qfLIm6sHEWuF8W8vDCjNZ4lynM1EqfHoQ=; b=h2RENc0O74pzBR4hb8KzaqOepSZm/c9cgTBzTEbGOTFvVYATrTCXmqMgYF05VywOtg tmGSwLbRjiLvs2kF68cXZhq2NKxSL75MvZIJp4gO5CSZlR+puPm5Hckm2Fmvz3VHJBTg 5RB9sjzamczwXGuFgS05VlhHRZfyrUHfIoyM0PXY9X1u3CF2JmIEjNrtZI13Mm5UbErP FhyK1cKLPwwJiDabb8W2GzP7cMPjpyRUawbXDUosoCoOW2fbX5i3LzjooR6ng9VQxi7L RpC/ClGmvlp0g2X5zJQS4ZKoy+S87HbHq+x0rGOsuJTSleuGzCvt84RL0kHIZDHGHmj/ ml+Q== X-Gm-Message-State: AEkoouss2jT+puua5d6le+CJSjcUhhGycSnGoLk6daYL7j0sH1TFob3yxmmT7oIr6Fnidw== X-Received: by 10.107.134.145 with SMTP id q17mr90082517ioi.25.1470579623747; Sun, 07 Aug 2016 07:20:23 -0700 (PDT) Received: from [10.0.10.3] (cpe-24-165-196-54.neo.res.rr.com. [24.165.196.54]) by smtp.googlemail.com with ESMTPSA id o15sm10427392ith.2.2016.08.07.07.20.22 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 07 Aug 2016 07:20:22 -0700 (PDT) Message-ID: <57A743A8.10005@gmail.com> Date: Sun, 07 Aug 2016 10:20:24 -0400 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: freebsd-questions@freebsd.org, freebsd-pf@freebsd.org Subject: Re: Firewalling jails and lo0 References: <20160806155411.GA5289@len-t420.klaas> <3C1C4822-17C2-42D9-A9BE-C3549B9B6F25@lists.zabbadoz.net> <20160807082651.GA87754@box-hlm-03.niklaas.eu> In-Reply-To: <20160807082651.GA87754@box-hlm-03.niklaas.eu> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 14:20:25 -0000 Niklaas Baudet von Gersdorff wrote: > Bjoern A. Zeeb [2016-08-06 20:02 +0000] : > >> I am curious about this. Can you give me an (obfuscated) example? (if >> you want in private email) > > -- $ jls -v > JID Hostname Path > Name State > CPUSetID > IP Address(es) > [...] > 7 mx.box-hlm-03.niklaas.eu /usr/local/jails/smtp1 > smtp1 ACTIVE > 8 > 10.3.8.1 > fd16:dcc0:f4cc:3::8:1 > [...] > 24 proxy1.box-hlm-03.niklaas.eu /usr/local/jails/proxy1 > proxy1 ACTIVE > 5 > 10.3.2.1 > 10.77.2.1 > fd16:dcc0:f4cc:3::2:1 > fd16:dcc0:f4cc:77::2:1 > [...] > -- > > -- $ ifconfig lo1 > lo1: flags=8049 metric 0 mtu 16384 > options=600003 > [...] > inet 10.3.8.1 netmask 0xffff0000 > inet6 fd16:dcc0:f4cc:3::8:1 prefixlen 64 > [...] > inet 10.3.2.1 netmask 0xffff0000 > inet 10.77.2.1 netmask 0xffff0000 > inet6 fd16:dcc0:f4cc:3::2:1 prefixlen 64 > inet6 fd16:dcc0:f4cc:77::2:1 prefixlen 64 > [...] > nd6 options=21 > -- > > The following is a /full/ output: > > -- $ ifconfig lo0 > lo0: flags=8049 metric 0 mtu 16384 > options=600003 > inet6 ::1 prefixlen 128 > inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2 > inet 127.0.0.1 netmask 0xff000000 > nd6 options=21 > -- > > So, as you can see, the jails only have IP addresses on lo1 and > none of them has one on lo0. To make that clear: > > -- $ jexec smtp1 ifconfig > [...] > lo0: flags=8049 metric 0 mtu 16384 > options=600003 > nd6 options=21 > lo1: flags=8049 metric 0 mtu 16384 > options=600003 > inet 10.3.8.1 netmask 0xffff0000 > inet6 fd16:dcc0:f4cc:3::8:1 prefixlen 64 > nd6 options=21 > [...] > -- > > In my pf.conf I have the following. This is a simplified extract: > > -- /etc/pf.conf > 1 ext_if = vtnet0 > 2 jail_if = lo1 > 3 > 4 table persist > 5 table persist > 6 > 7 set skip on lo0 > 8 > 9 nat on $ext_if from { } to any -> > 10 > 11 block log all > 12 > 13 pass out all keep state > 14 > 15 pass in on $jail_if proto tcp from to port { } > -- > > As you can see I have a principal block in line 11, and skip is > set on lo0 solely. That said, I block on lo1. Because of this, > I pass on lo1 in line 19. I thought this is necessary. > > However, here comes the thing: Although the jails have IP addresses > attached to lo1 only, I can see traffic like the following: > > -- $ tcpdump -nettti lo0 host 10.3.2.1 > 00:00:00.023424 AF IPv4 (2), length 64: 10.3.2.1.51096 > 10.3.8.1.9025: Flags [S], seq 4205430985, win 65535, options [mss 16344,nop,wscale 6,sackOK,TS val 349909592 ecr 0], length 0 > 00:00:00.000064 AF IPv4 (2), length 64: 10.3.8.1.9025 > 10.3.2.1.51096: Flags [S.], seq 3921176095, ack 4205430986, win 65535, options [mss 16344,nop,wscale 6,sackOK,TS val 3273771227 ecr 349909592], length 0 > 00:00:00.000023 AF IPv4 (2), length 56: 10.3.2.1.51096 > 10.3.8.1.9025: Flags [.], ack 1, win 1275, options [nop,nop,TS val 349909592 ecr 3273771227], length 0 > -- > > -- $ tcpdump -nettti lo0 host fd16:dcc0:f4cc:3::8:1 > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on lo0, link-type NULL (BSD loopback), capture size 65535 bytes > 00:00:00.000000 AF IPv6 (28), length 84: fd16:dcc0:f4cc:3::2:1.35851 > fd16:dcc0:f4cc:3::8:1.25: Flags [S], seq 3339315349, win 65535, options [mss 16324,nop,wscale 6,sackOK,TS val 352469079 ecr 0], length 0 > 00:00:00.000035 AF IPv6 (28), length 84: fd16:dcc0:f4cc:3::8:1.25 > fd16:dcc0:f4cc:3::2:1.35851: Flags [S.], seq 3726000680, ack 3339315350, win 65535, options [mss 16324,nop,wscale 6,sackOK,TS val 306734766 ecr 352469079], length 0 > 00:00:00.000044 AF IPv6 (28), length 76: fd16:dcc0:f4cc:3::2:1.35851 > fd16:dcc0:f4cc:3::8:1.25: Flags [.], ack 1, win 1274, options [nop,nop,TS val 352469079 ecr 306734766], length 0 > 00:00:05.060320 AF IPv6 (28), length 107: fd16:dcc0:f4cc:3::8:1.25 > fd16:dcc0:f4cc:3::2:1.35851: Flags [P.], seq 1:32, ack 1, win 1274, options [nop,nop,TS val 306739827 ecr 352469079], length 31 > 00:00:00.000113 AF IPv6 (28), length 76: fd16:dcc0:f4cc:3::8:1.25 > fd16:dcc0:f4cc:3::2:1.35851: Flags [F.], seq 32, ack 1, win 1274, options [nop,nop,TS val 306739827 ecr 352469079], length 0 00:00:00.000025 AF IPv6 (28), length 76: fd16:dcc0:f4cc:3::2:1.35851 > fd16:dcc0:f4cc:3::8:1.25: Flags [.], ack 33, win 1273, options [nop,nop,TS val 352474140 ecr 306739827], length 0 00:00:00.000413 AF IPv6 (28), length 76: fd16:dcc0:f4cc:3::2:1.35851 > fd16:dcc0:f4cc:3::8:1.25: Flags [F.], seq 1, ack 33, win 1274, options [nop,nop,TS val 352474140 ecr 306739827], length 0 > -- > > As you can see, this is on lo0 although the jails don't have an > IP address on it. That said, restricting traffic on lo1 doesn't > make any sense because the jails use lo0 anyway. > >> Are these ::1 connections, link-local addresses (unlikely as they should >> not be visible to jails), or full IP? > > As you can see, they are full IP. > >> And what’s the routing table entry in the base system for them? > > Have a look at the following output of netstat (I removed some lines and cells): > > -- $ netstat -rn > Routing tables > > Internet: > Destination Gateway Flags Netif Expire > default < > UGS vtnet0 > 10.0.0.0/8 link#4 U tap0 > 10.3.2.1 link#3 UH lo1 > 10.3.8.1 link#3 UH lo1 > 10.77.2.1 link#3 UH lo1 > 127.0.0.1 link#2 UH lo0 > > Internet6: > Destination Gateway Flags Netif Expire > ::/96 ::1 UGRS lo0 > default < > UGS vtnet0 > ::1 link#2 UH lo0 > ::ffff:0.0.0.0/96 ::1 UGRS lo0 > < > link#1 U vtnet0 > < > link#1 UHS lo0 > fd16:dcc0:f4cc:3::/64 link#3 U lo1 > fd16:dcc0:f4cc:3::1 link#4 UHS lo0 > fd16:dcc0:f4cc:3::2:1 link#3 UHS lo0 > fd16:dcc0:f4cc:3::8:1 link#3 UHS lo0 > fd16:dcc0:f4cc:77::/64 link#3 U lo1 > fd16:dcc0:f4cc:77::2:1 link#3 UHS lo0 > fe80::/10 ::1 UGRS lo0 > fe80::%vtnet0/64 link#1 U vtnet0 > fe80::< >%vtnet0 link#1 UHS lo0 > fe80::%lo0/64 link#2 U lo0 > fe80::1%lo0 link#2 UHS lo0 > fe80::%tap0/64 link#4 U tap0 > fe80::< >%tap0 link#4 UHS lo0 > ff01::%vtnet0/32 < >%vtnet0 U vtnet0 > ff01::%lo0/32 ::1 U lo0 > ff01::%lo1/32 fd16:dcc0:f4cc:3::1:1 U lo1 > ff01::%tap0/32 fd16:dcc0:f4cc:3::1 U tap0 > ff02::/16 ::1 UGRS lo0 > ff02::%vtnet0/32 < >%vtnet0 U vtnet0 > ff02::%lo0/32 ::1 U lo0 > ff02::%lo1/32 fd16:dcc0:f4cc:3::1:1 U lo1 > ff02::%tap0/32 fd16:dcc0:f4cc:3::1 U tap0 > -- > >> especially, do they have any IP address assigned to lo0 in them at all? > > No, they don't. > > Niklaas I believe the loopback interface lo1 needs 127.0.0.0/8 ip address to enable loopback functionally, and the ip address has to be a different sub-net. IE 127.0.10.1 for lo1 while the hosts lo0 uses 127.0.0.1 From owner-freebsd-questions@freebsd.org Sun Aug 7 15:23:53 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 778CEBB07E1; Sun, 7 Aug 2016 15:23:53 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from mx.box-hlm-01.niklaas.eu (mx.box-hlm-01.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:fe1b:d1ad]) by mx1.freebsd.org (Postfix) with ESMTP id 48F2919E2; Sun, 7 Aug 2016 15:23:53 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from len-t420.klaas (unknown [IPv6:2a02:908:d722:7b00:224:d7ff:feec:38e0]) by mx.box-hlm-01.niklaas.eu (Postfix) with ESMTPSA id 6622F2C35B3; Sun, 7 Aug 2016 17:23:51 +0200 (CEST) Date: Sun, 7 Aug 2016 17:23:47 +0200 From: Niklaas Baudet von Gersdorff To: freebsd-pf@freebsd.org, freebsd-questions@freebsd.org Subject: Re: Firewalling jails and lo0 Message-ID: <20160807152347.GA9178@len-t420.klaas> Reply-To: stdin@niklaas.eu Mail-Followup-To: freebsd-pf@freebsd.org, freebsd-questions@freebsd.org References: <20160806155411.GA5289@len-t420.klaas> <3C1C4822-17C2-42D9-A9BE-C3549B9B6F25@lists.zabbadoz.net> <20160807082651.GA87754@box-hlm-03.niklaas.eu> <57A743A8.10005@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <57A743A8.10005@gmail.com> User-Agent: Mutt/1.6.0 (2016-04-01) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 15:23:53 -0000 Ernie Luzar [2016-08-07 10:20 -0400] : > I believe the loopback interface lo1 needs 127.0.0.0/8 ip address to enable > loopback functionally, and the ip address has to be a different sub-net. IE > 127.0.10.1 for lo1 while the hosts lo0 uses 127.0.0.1 Aha. So once I assigned those traffic from/to jails should go through lo1 solely? Niklaas From owner-freebsd-questions@freebsd.org Sun Aug 7 15:26:04 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 55EDCBB0944 for ; Sun, 7 Aug 2016 15:26:04 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) Received: from COL004-OMC3S12.hotmail.com (col004-omc3s12.hotmail.com [65.55.34.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 159F41B9D for ; Sun, 7 Aug 2016 15:26:03 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) Received: from EUR01-HE1-obe.outbound.protection.outlook.com ([65.55.34.136]) by COL004-OMC3S12.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Sun, 7 Aug 2016 08:24:57 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=dr6Qb8IdijGpq17t9+uvHX/mals+JbsL4KLtOLBR5vI=; b=UA6wtyeLaq05R5NdhGhNwoisPvUheLaYot5KLVf8AYqx/k97Z5hKF0h2Gd5uddH6q6ZrahqL0++umnt2+f0ZPMWymruP2HhmgXD7Fwql5T0rmRrGxu2iVdKqtX7XlZh4QAVEIPVKY6wRfEBbOR1xdvRSbsLL+ppn/G7YHgcGp1qsNg6boTRNx074d3vJJ7ikGRdl80ILa8QqyHOkq3RMEetX9o1rSbDc0X355iq5XAEhOmtAF6DmlELglhilHvkPsmU0pbXfl5TYRg/2Pe3Q//zd4L9FItRWA2whLTBiOcAXE1lClCRw+fGhwNDQdRao66p+TPFTlwz//BNfdw1OmQ== Received: from HE1EUR01FT030.eop-EUR01.prod.protection.outlook.com (10.152.0.57) by HE1EUR01HT178.eop-EUR01.prod.protection.outlook.com (10.152.1.118) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.557.8; Sun, 7 Aug 2016 15:24:50 +0000 Received: from VI1PR02MB0974.eurprd02.prod.outlook.com (10.152.0.53) by HE1EUR01FT030.mail.protection.outlook.com (10.152.0.170) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.567.7 via Frontend Transport; Sun, 7 Aug 2016 15:24:50 +0000 Received: from VI1PR02MB0974.eurprd02.prod.outlook.com ([10.163.162.28]) by VI1PR02MB0974.eurprd02.prod.outlook.com ([10.163.162.28]) with mapi id 15.01.0549.025; Sun, 7 Aug 2016 15:24:48 +0000 From: Manish Jain To: FreeBSD Questions Subject: Need advice for setting up mail server Thread-Topic: Need advice for setting up mail server Thread-Index: AQHR8L/VnSxkyBRLyE69ox/SSlCI1A== Date: Sun, 7 Aug 2016 15:24:48 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=softfail (sender IP is 10.152.0.53) smtp.mailfrom=hotmail.com; freebsd.org; dkim=none (message not signed) header.d=none;freebsd.org; dmarc=fail action=none header.from=hotmail.com; received-spf: SoftFail (protection.outlook.com: domain of transitioning hotmail.com discourages use of 10.152.0.53 as permitted sender) x-ms-exchange-messagesentrepresentingtype: 1 x-eopattributedmessage: 0 x-forefront-antispam-report: CIP:10.152.0.53; IPV:NLI; CTRY:; EFV:NLI; SFV:NSPM; SFS:(10019020)(98900003); DIR:OUT; SFP:1102; SCL:1; SRVR:HE1EUR01HT178; H:VI1PR02MB0974.eurprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; x-microsoft-exchange-diagnostics: 1; HE1EUR01HT178; 6:+bgfUdJC28O6kFR+9UCeLNtr7865EgzFZz6ifiKKnHZOrbd4ch8FYvfSWD2bv+w6KQV74duON00U+93nsMel9HRNO8a4aRLNYPr7euwlMylrlENZeDoOnFij50sCT/eUUkqB9bM6dTaQJXqRGg4k1iwwbqMMDgxh7bKHGFgwLsb6wZywB6DhX9Y7h4j8ooRiXG4UWiZCrZ0g69yjG2rnfhipabq2bK66pLHi+675g+xpOqygks+r8p0DBJ280txu0IswjHYT+THAVJnULaxVys5bbs7BYcJqPjv/j9KWQW9K8PXfSK59U9Mg4WnqC2HP; 5:g3FXRdNX7+egZwhsxqSeSQvd+iZP+V0yw4yI+eh6nnpPYVI+es+wRtX9iPIcFGc4tc0EaW3z/44nHEkWNvmL5VQpANVfHTY/JTiKFBqYhbnzmBKlXzyaSh0KfHzYup5O7ffB/WqFlbf6j9zm29nyBA==; 24:CPEMsRWM8aOKWUEi2nRbTWUDsFkOmXI1GdzxV48pz9v7ZsrhQzwABcgrnnu9aXsQtUz9OoMc7BknyhGFpnUtihBwWj8xPyASc7VCRHZ3n38=; 7:zNFJfkjlqCbys46Qc7sb+E5IFg0+KiN9TyxvWXu79axXYf61z71USYwgbkOpdpUqEXYZOa2IBJFH0mxyjzM1Y9YyOk0pi75sbdLcTkMzjXkKQNqU2g28yfmOXxbAHrHJvZ7S4V0pNP0Hw3zenqGfvO0iuWyFz5/kqHRyxYWVWOQ+FXTcBgyi8dh4NPmHRNfXdwYcRcUjNjlJdmGOcJzxMJgAHr551+3hjTLX2I1BHyQriqEA7zZ8G6AsMvQaM9qk x-ms-office365-filtering-correlation-id: d87ac823-74d4-48dc-0f86-08d3bed6f6ae x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(1601124038)(1601125047); SRVR:HE1EUR01HT178; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(432015012)(82015046); SRVR:HE1EUR01HT178; BCL:0; PCL:0; RULEID:; SRVR:HE1EUR01HT178; x-forefront-prvs: 0027ED21E7 spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Aug 2016 15:24:48.3181 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR01HT178 X-OriginalArrivalTime: 07 Aug 2016 15:24:57.0532 (UTC) FILETIME=[DB12D7C0:01D1F0BF] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 15:26:04 -0000 SGksIEEgZmV3IGRheXMgYmFjaywgSSBtaWdyYXRlZCBhIGZldyBXaW5kb3dzIHN5c3RlbXMgdG8g RnJlZUJTRCBhdCBhIGNvbXBhbnkgdGhhdCBiZWxvbmdzIHRvIGEgZnJpZW5kIG9mIG1pbmUuIE15 IGZyaWVuZCBsaWtlcyBGcmVlQlNEIHNvIG11Y2ggbm93IHRoYXQgaGUgaGFzIGFza2VkIG1lIHRv IHNlZSBpZiBJIGNhbiBtaWdyYXRlIGhpcyBETlMgYW5kIG1haWwgc2VydmVyIGluLWhvdXNlIG9u IGEgZGVkaWNhdGVkIEZyZWVCU0Qgc3lzdGVtLiBDdXJyZW50bHksIHRoZXNlIHNlcnZpY2VzIGFy ZSBiZWluZyBwcm92aWRlZCBieSBhbiBleHRlcm5hbCBhZ2VuY3kgKHVzaW5nIExpbnV4LCBJIGJl bGlldmUpLiBNeSBmcmllbmQgaGFzIGEgY291cGxlIG9mIHB1YmxpYyBJUCBhZGRyZXNzZXMgdG8g c3BhcmUuIEFib3V0IDEwIHllYXJzIGJhY2ssIEkgaGFkIHNldCB1cCBhIHFtYWlsIHNlcnZlciBv biBGcmVlQlNEIDUuNC4gVGhlcmUgd2FzIGEgdmVyeSBuaWNlIGhvdy10byBhdmFpbGFibGUsIGFu ZCBJIG1hbmFnZWQgdG8gZ2V0IHFtYWlsIHNlcnZpbmcgYWxsIG9uIG15IG93bi4gSSBoYXZlIG5v IGlkZWEgd2hhdCB0aGUgc2l0dWF0aW9uIGxvb2tzIGxpa2UgcmlnaHQgbm93IC0gYWJvdXQgYSB5 ZWFyIGJhY2ssIHRoaW5ncyB3ZXJlIGJhZCB3LnIudC4gcW1haWwgLSBhcyBwZXIgZGV2ZWxvcGVy cywgdGhlIHN5c3RlbSB3YXMgbm90IHdvcmtpbmcgYXMgaW50ZW5kZWQgb24gRnJlZUJTRC4gSSBh bSBsb29raW5nIGZvciBhIGdvb2QgYWR2aWNlIGZvciBzb21lIGVhc3ktdG8tc2V0dXAgbWFpbCBz ZXJ2ZXIgc29sdXRpb24gZm9yIEZyZWVCU0QgMTAuMy4gSXMgcW1haWwgc3RpbGwgdGhlIGVhc2ll c3QgdGhpbmcgdG8gc2V0IHVwIGZvciBtYWlsLCBvciB0aGVyZSBpcyBzb21ldGhpbmcgYmV0dGVy IHRoYW4gdGhhdCA/IEkga2VlcCBzZWN1cml0eSBjb25jZXJucyBmb3IgdGhlIG1haWwgc2VydmVy IHNvbHV0aW9uIGF0IGEgbG93IGxldmVsIC0gZm9yIG1lLCB0aGUgdGhpbmcgaGFzIHRvIGJlIGVh c3kgdG8gc2V0IHVwIGFuZCBtYWludGFpbiwgcmF0aGVyIHRoYW4gd29ycnkgdG9vIG11Y2ggYWJv dXQgZWF2ZXNkcm9wcGluZy9NSVRNLg0KVGhhbmtzIGZvciBhbnkgYWR2aWNlLiBNYW5pc2ggSmFp bg0K From owner-freebsd-questions@freebsd.org Sun Aug 7 15:30:34 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9F859BB0A72 for ; Sun, 7 Aug 2016 15:30:34 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from mx.box-hlm-02.niklaas.eu (box-hlm-02.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:feac:28f6]) by mx1.freebsd.org (Postfix) with ESMTP id 709F31CCB for ; Sun, 7 Aug 2016 15:30:34 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from len-t420.klaas (unknown [IPv6:2a02:908:d722:7b00:224:d7ff:feec:38e0]) by mx.box-hlm-02.niklaas.eu (Postfix) with ESMTPSA id 6C0801C9782 for ; Sun, 7 Aug 2016 17:30:33 +0200 (CEST) Date: Sun, 7 Aug 2016 17:30:32 +0200 From: Niklaas Baudet von Gersdorff To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-ID: <20160807153031.GB9178@len-t420.klaas> Reply-To: stdin@niklaas.eu Mail-Followup-To: freebsd-questions@freebsd.org References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.6.0 (2016-04-01) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 15:30:34 -0000 Manish Jain [2016-08-07 15:24 +0000] : > I am looking for a good advice for some easy-to-setup mail > server solution for FreeBSD 10.3. Is qmail still the easiest > thing to set up for mail, or there is something better than > that ? I keep security concerns for the mail server solution at > a low level - fo r me, the thing has to be easy to set up and > maintain, rather than worry too much about eavesdropping/MITM. I'm not a professional but was able to set-up a Postfix system with Dovecot IMAP and LMTP. I guess, it depends on what you need; maybe OpenSMTPD is a solution for you. I got quite interested into the project. As far as I can judge it's easy to set up for a simple set-up. However, I don't have a lot of experience i.e. I've never tried neither qmail nor the traditional sendmail. Niklaas From owner-freebsd-questions@freebsd.org Sun Aug 7 15:50:00 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 58EE3BB0D83 for ; Sun, 7 Aug 2016 15:50:00 +0000 (UTC) (envelope-from the.lists@mgm51.com) Received: from oneyou.mcmli.com (oneyou.mcmli.com [IPv6:2607:f2f8:af30::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "oneyou.mcmli.com", Issuer "RapidSSL SHA256 CA - G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 33967144E for ; Sun, 7 Aug 2016 15:50:00 +0000 (UTC) (envelope-from the.lists@mgm51.com) Received: from sentry.24cl.com (sentry.24cl.com [IPv6:2001:558:6017:94:4cfb:c574:24a0:7961]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "sentry.24cl.com", Issuer "Mike's Certificate Authority" (verified OK)) by oneyou.mcmli.com (Postfix) with ESMTPS id 3s6lNk75PZz4D01 for ; Sun, 7 Aug 2016 11:49:58 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mgm51.com; s=mgm51-02; t=1470584999; bh=n4LyXJkvL7oH1Td8V5F441uWbPfOo+ksR7h7bJrNU40=; h=Subject:To:From:Message-ID:Date; b=sUQJB4icnkWC+DIheJE50o7Yfza12K5hx6dSBiCJZ/WpVx3ggl0OkwW3X9vrHiiKz 8HEw+wtq+n2LwZ+MEfMeSVhViwuctBdSF0xnGq+CBzDaDaW5iKucxHITHT9XQAPbPi f8bbXsfChSDo7i53uQUMbChb51HtBGF/dpN9XUsoRl00oB0Mnx9PfbfMiMPhlNvM/p Of3FNXiqykJlxku6k2qQa4obXXD50KmZBG2/gT0PnO+t97rA+8yEW/MZkXrblud7at rmefqn4ZtSXTUhZMnBuhNITFQD1LCIPPK7fc3sbWTUB28zdvNr4S/5m5dEAs/PnQAy Ro3NTAK+2g7Ow== Received: from [IPv6:fdcf:b715:2f4d:1:2588:4576:7bf4:140e] (unknown [IPv6:fdcf:b715:2f4d:1:2588:4576:7bf4:140e]) by sentry.24cl.com (Postfix) with ESMTP id 3s6lNj6H16zGHHD for ; Sun, 7 Aug 2016 11:49:57 -0400 (EDT) Subject: Re: Need advice for setting up mail server To: freebsd-questions@freebsd.org References: <20160807153031.GB9178@len-t420.klaas> From: Mike Message-ID: <1629633b-c8a7-6181-446b-528b6357b262@mgm51.com> Date: Sun, 7 Aug 2016 11:49:57 -0400 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <20160807153031.GB9178@len-t420.klaas> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 15:50:00 -0000 On 8/7/2016 11:30 AM, Niklaas Baudet von Gersdorff wrote: > Manish Jain [2016-08-07 15:24 +0000] : > >> I am looking for a good advice for some easy-to-setup mail >> server solution for FreeBSD 10.3. Is qmail still the easiest >> thing to set up for mail, or there is something better than >> that ? I keep security concerns for the mail server solution at >> a low level - fo r me, the thing has to be easy to set up and >> maintain, rather than worry too much about eavesdropping/MITM. > > I'm not a professional but was able to set-up a Postfix system > with Dovecot IMAP and LMTP. I guess, it depends on what you need; > maybe OpenSMTPD is a solution for you. I got quite interested > into the project. As far as I can judge it's easy to set up for > a simple set-up. > > However, I don't have a lot of experience i.e. I've never tried > neither qmail nor the traditional sendmail. > I second Postfix as the MTA. Easy to set up and most excellent documentation, with a very helpful support mailing list. I use Dovecot for my personal email, and I found it relatively easy to set up and very flexible. From owner-freebsd-questions@freebsd.org Sun Aug 7 15:53:08 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 11135BB1220 for ; Sun, 7 Aug 2016 15:53:08 +0000 (UTC) (envelope-from steve@sohara.org) Received: from smtp3.irishbroadband.ie (smtp3.irishbroadband.ie [62.231.32.5]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id CFF281A00 for ; Sun, 7 Aug 2016 15:53:07 +0000 (UTC) (envelope-from steve@sohara.org) Received: from [89.127.62.20] (helo=smtp.lan.sohara.org) by smtp3.irishbroadband.ie with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.76) (envelope-from ) id 1bWQNl-0005do-AS for freebsd-questions@freebsd.org; Sun, 07 Aug 2016 16:52:57 +0100 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.86_2 (FreeBSD)) (envelope-from ) id 1bWQO5-000M7A-6p for freebsd-questions@freebsd.org; Sun, 07 Aug 2016 15:53:17 +0000 Date: Sun, 7 Aug 2016 16:52:56 +0100 From: Steve O'Hara-Smith To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-Id: <20160807165256.78074e54154e43d3a696b22d@sohara.org> In-Reply-To: References: X-Mailer: Sylpheed 3.5.0 (GTK+ 2.24.29; amd64-portbld-freebsd10.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 15:53:08 -0000 On Sun, 7 Aug 2016 15:24:48 +0000 Manish Jain wrote: > fo > r me, the thing has to be easy to set up and maintain, rather than worry > too much about eavesdropping/MITM. Thanks for any advice. Manish Jain I found it simplest to set up two MTAs (in jails) one for outgoing mail (allows relay from inside the LAN only, uses my ISPs SMTP server as a smarthost) running exim (I found it easy to configure) and one for incoming mail (sendmail delivering via procmail and spamassassin to dovecot for IMAP). Separating the two directions made it very easy to think about the security of the configuration. For DNS there are many alternatives, but for simplicity there's little to beat dnsmasq (perhaps not the most performant but good enough for a smallish network). I had unbound and nsd running for my DNS for a while, it was a *nightmare* that I never got working smoothly. -- Steve O'Hara-Smith From owner-freebsd-questions@freebsd.org Sun Aug 7 16:25:08 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 46AD6BB170C for ; Sun, 7 Aug 2016 16:25:08 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from zoom.lafn.org (zoom.lafn.org [108.92.93.123]) by mx1.freebsd.org (Postfix) with ESMTP id 30C7316E7 for ; Sun, 7 Aug 2016 16:25:07 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from [10.0.1.4] (unknown [71.177.216.148]) by zoom.lafn.org (Postfix) with ESMTPSA id 3781134AD8B; Sun, 7 Aug 2016 09:25:06 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Subject: Re: Need advice for setting up mail server From: Doug Hardie In-Reply-To: <20160807165256.78074e54154e43d3a696b22d@sohara.org> Date: Sun, 7 Aug 2016 09:25:06 -0700 Cc: freebsd-questions@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <20160807165256.78074e54154e43d3a696b22d@sohara.org> To: Steve O'Hara-Smith X-Mailer: Apple Mail (2.3124) X-Virus-Scanned: clamav-milter 0.98 at zoom.lafn.org X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 16:25:08 -0000 > On 7 August 2016, at 08:52, Steve O'Hara-Smith = wrote: >=20 > On Sun, 7 Aug 2016 15:24:48 +0000 > Manish Jain wrote: >=20 >> fo >> r me, the thing has to be easy to set up and maintain, rather than = worry >> too much about eavesdropping/MITM. Thanks for any advice. Manish Jain >=20 > I found it simplest to set up two MTAs (in jails) one for = outgoing > mail (allows relay from inside the LAN only, uses my ISPs SMTP server = as a > smarthost) running exim (I found it easy to configure) and one for = incoming > mail (sendmail delivering via procmail and spamassassin to dovecot for > IMAP). >=20 > Separating the two directions made it very easy to think about = the > security of the configuration. I recently switched a small business mail server from sendmail to = postfix with dovecot. It wasn't real simple, but it went together quite = easily. The wiki pages for both are extremely good. I used one = instantiation of postfix as it handles security quite well. You = designate which networks are trusted (local) and everything else is not. = You can set it up using dovecot's authentication so that remote users = can be trusted also. There apparently is also a tool to enable the user = to maintain their sieve configuration via a browser although I have not = tried that yet. =20 I found it best to use dovecot's MDA from postfix so that pigeon sieve = could be used during delivery. That gives you features like vacation = and automatic delivery to inboxes other than INBOX. I did the initial = setup one step at a time. Get it working then add the next feature. You do need to figure out which type of authentication you want at the = beginning. I used password file authentication as the number of users = and turnover was not enough to warrant any of the more flexible = approaches. Both postfix and dovecot are dependent on the = authentication. Using dovecot's authentication for postfix made the = setup a lot easier as you only have to get authentication working once. For machines other than the mail server, I used postfix setup to forward = all mail to a smart host. That way the log files are all in the same = format. You will want to decide how to store the log file on the MTA. = I went with syslog into the same file for both postfix and dovecot. = That makes it a bit easier to trace what happened to a particular = message. I did have to add additional fields into the logging format = for both though. That was probably the most difficult configuration = item. It took awhile to figure out which log format is used for which = situations. From owner-freebsd-questions@freebsd.org Sun Aug 7 16:29:40 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BD022BB1848 for ; Sun, 7 Aug 2016 16:29:40 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 55CBD190E for ; Sun, 7 Aug 2016 16:29:40 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: by mail-wm0-x22f.google.com with SMTP id q128so85313300wma.1 for ; Sun, 07 Aug 2016 09:29:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=date:from:to:subject:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=DbD8ml8Iok3op9akh0Mqjpx58/T1tCh8v8584bffOIQ=; b=tAoKKYxMR3hhFqqXyvuYKHRqBBnZdP+sBbL6e0e5jqWyHjZDcIMg+Tu+Oo57ePci/W 93nUoh5Txk8nsd8P3OlNQcnp04J5cVoZeWdnxNUeEIx7NcyX2GqtZnZk2YlXFTBDSr+Z Jhh/NCmkibZ7x7Jhe9rC5zYxUWFUh41Pm3Kl16WY6UD3ngQDfHgTICtQtIA7uwXt/N9x Q8z6U2FkDMHD9qM1xuk+CkiwfmRHzXm2NszdOapt6gIn0MyzzNOAS0LClGlwr0pUgDXn Pn7ywosfTZ1/W9cxz7ROzJxAhSialyYwaTBAtQQThV8QBtJ3KZBL/07xgCDTo2z0JrTO re8g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=DbD8ml8Iok3op9akh0Mqjpx58/T1tCh8v8584bffOIQ=; b=fjO81sCdrilRQvte86xMoRYqtEs6gApCwh909sijFgMSDWVbohmm2Z00AQz7ZptUAm WfaW9lr0UGGQ4rRRcblyXCVVPd6RlaWOnApYkNE2XX1QlnJ81WHu7LWewjOAOEsFCbZf Jk0oeXNyXKMoxLNGVjtE8rekpe9c0eh5O+JBSmk9DyexvRZddtO8hPvqDViz/oneNrH7 q7aqfoBQxYz/ZggW+K1vBj/HKD3kT/yTZYU74mGPHqrloc3pp76GdvD9kuw0zbIv8J19 qViud+0FMdpK2ouchBlQXsUfk5C0WQx7euQYklOiH0xiPPgaue7WnHAJn47KNCDyCDbC zbJw== X-Gm-Message-State: AEkoouvjaWKmdAN3tb6QvdgU8XCiYoZAxKEMYpsvY7lEz/tUHOxu4E0AN0Ih2XGtwV9EKQ== X-Received: by 10.28.4.194 with SMTP id 185mr12222120wme.91.1470587378188; Sun, 07 Aug 2016 09:29:38 -0700 (PDT) Received: from gumby.homeunix.com ([81.171.74.83]) by smtp.gmail.com with ESMTPSA id us9sm28381273wjb.43.2016.08.07.09.29.36 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sun, 07 Aug 2016 09:29:37 -0700 (PDT) Date: Sun, 7 Aug 2016 17:29:33 +0100 From: RW To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-ID: <20160807172933.33116306@gumby.homeunix.com> In-Reply-To: <20160807165256.78074e54154e43d3a696b22d@sohara.org> References: <20160807165256.78074e54154e43d3a696b22d@sohara.org> X-Mailer: Claws Mail 3.13.2 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 16:29:40 -0000 On Sun, 7 Aug 2016 16:52:56 +0100 Steve O'Hara-Smith wrote: > > For DNS there are many alternatives, but for simplicity > there's little to beat dnsmasq (perhaps not the most performant but > good enough for a smallish network). I had unbound and nsd running > for my DNS for a while, it was a *nightmare* that I never got working > smoothly. If you are running a mail server you shouldn't do DNSBL lookups through a shared ISP DNS cache because the lists have per IP address limits. This pretty much rules out dnsmasq since it can't do it's own lookups. From owner-freebsd-questions@freebsd.org Sun Aug 7 16:49:40 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 12A25BB1BF5 for ; Sun, 7 Aug 2016 16:49:40 +0000 (UTC) (envelope-from steve@sohara.org) Received: from smtp3.irishbroadband.ie (smtp3.irishbroadband.ie [62.231.32.5]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D0FA01FAA for ; Sun, 7 Aug 2016 16:49:39 +0000 (UTC) (envelope-from steve@sohara.org) Received: from [89.127.62.20] (helo=smtp.lan.sohara.org) by smtp3.irishbroadband.ie with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.76) (envelope-from ) id 1bWRGb-0003is-92; Sun, 07 Aug 2016 17:49:37 +0100 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.86_2 (FreeBSD)) (envelope-from ) id 1bWRGv-000MQ9-BH; Sun, 07 Aug 2016 16:49:57 +0000 Date: Sun, 7 Aug 2016 17:49:36 +0100 From: Steve O'Hara-Smith To: Doug Hardie Cc: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-Id: <20160807174936.90f2a2c2c2a3e1a3e84452cc@sohara.org> In-Reply-To: References: <20160807165256.78074e54154e43d3a696b22d@sohara.org> X-Mailer: Sylpheed 3.5.0 (GTK+ 2.24.29; amd64-portbld-freebsd10.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 16:49:40 -0000 On Sun, 7 Aug 2016 09:25:06 -0700 Doug Hardie wrote: > I found it best to use dovecot's MDA from postfix so that pigeon sieve > could be used during delivery. That gives you features like vacation and > automatic delivery to inboxes other than INBOX. I did the initial setup > one step at a time. Get it working then add the next feature. Hmm that's interesting I used procmail for that which involves fiddling with procmailrc which is fine for me but less so for others. Is it easy for users to set up the automatic delivery ? -- Steve O'Hara-Smith | Directable Mirror Arrays C:>WIN | A better way to focus the sun The computer obeys and wins. | licences available see You lose and Bill collects. | http://www.sohara.org/ From owner-freebsd-questions@freebsd.org Sun Aug 7 17:07:27 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4ECF1BB1001 for ; Sun, 7 Aug 2016 17:07:27 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from zoom.lafn.org (zoom.lafn.org [108.92.93.123]) by mx1.freebsd.org (Postfix) with ESMTP id 3806A1849 for ; Sun, 7 Aug 2016 17:07:26 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from [10.0.1.4] (unknown [71.177.216.148]) by zoom.lafn.org (Postfix) with ESMTPSA id 433BB34AA19; Sun, 7 Aug 2016 10:07:26 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Subject: Re: Need advice for setting up mail server From: Doug Hardie In-Reply-To: <20160807174936.90f2a2c2c2a3e1a3e84452cc@sohara.org> Date: Sun, 7 Aug 2016 10:07:26 -0700 Cc: FreeBSD Questions Content-Transfer-Encoding: quoted-printable Message-Id: <511A90F2-8BF1-4C6E-92DC-C442649B075B@mail.sermon-archive.info> References: <20160807165256.78074e54154e43d3a696b22d@sohara.org> <20160807174936.90f2a2c2c2a3e1a3e84452cc@sohara.org> To: Steve O'Hara-Smith X-Mailer: Apple Mail (2.3124) X-Virus-Scanned: clamav-milter 0.98 at zoom.lafn.org X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 17:07:27 -0000 > On 7 August 2016, at 09:49, Steve O'Hara-Smith = wrote: >=20 > On Sun, 7 Aug 2016 09:25:06 -0700 > Doug Hardie wrote: >=20 >> I found it best to use dovecot's MDA from postfix so that pigeon = sieve >> could be used during delivery. That gives you features like vacation = and >> automatic delivery to inboxes other than INBOX. I did the initial = setup >> one step at a time. Get it working then add the next feature. >=20 > Hmm that's interesting I used procmail for that which involves > fiddling with procmailrc which is fine for me but less so for others. = Is it > easy for users to set up the automatic delivery ? I found the sieve language a bit confusing at first. It took a few = tries to get one to compile without errors. One of the more interesting = aspects is that the sieve is not compiled when you save it. It is = compiled when the next message is processed. It will generate a log = file if an error is found. The error messages are actually helpful. = There is a way to manually force the compile, but I never can remember = it. I just send myself an email so I don't have to wait to find out if = the change was proper. Using the web interface might make it easier. I = have never bothered to install it to find out. Currently I am the only = one using that feature and vi is just fine for me. If one of the others = starts using it though I'll probably have to try that. I believe that freebsd 11 has two different sieve implementations = available for the dovecot MDA. I started this server on freebsd 9.3 and = it had only pigeonhole (I got the name wrong earlier). I am in the = midst of upgrading the machine to 11 so haven't investigated the other = implementation. I'll probably stick with pigeonhole as its working. From owner-freebsd-questions@freebsd.org Sun Aug 7 17:20:48 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 19859BB124F; Sun, 7 Aug 2016 17:20:48 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mail-it0-x235.google.com (mail-it0-x235.google.com [IPv6:2607:f8b0:4001:c0b::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DE2DC1E25; Sun, 7 Aug 2016 17:20:47 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mail-it0-x235.google.com with SMTP id f6so64569778ith.0; Sun, 07 Aug 2016 10:20:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-transfer-encoding; bh=OyXezNfgjsegxdPkMxf9QmC5mOusqWg5d3kQ9t0sJTQ=; b=cmWDO5xHcO2u4dYuK7VFC6kPdCarqPqfm7YBFeumMukwO8DZ9e1wyGxIVH4vcSvOeT QOqD/cT92DfHcya7Sf9eUDnagQJ1/m9yhZzxret4itlrmkFiYQJPHkOmqov2HzcDg5y/ hLGipVqDrUBdgRvq2tJd6jcuzOnsfCQEudJvgNhbX1oHLvNrMwhF3+J/lNdJgbvKHcmg Yu8S2WkYbDuqeac95ha5Q/rpMdrLFSs9rQGgSawWyyOpcZtyvwNYaGmyp0Ahp1fqHMWP 0hB8m8HZBUE5VBiyVigffZf1ViXpuA886MNlIKWv8hNFEmuOn6GQYqdYJrn6esboXYTA mm+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-transfer-encoding; bh=OyXezNfgjsegxdPkMxf9QmC5mOusqWg5d3kQ9t0sJTQ=; b=dFrRBStVqR9/rKHrRzXPtgtMjXtTF2GoQiwbamJ+qCdA6RoZQAoolCkKgenXgBRt1R 8Lvte7QoEBJ4xGO/5ZOF7c27/MxS2Z2MRor6X7Sy1wEthEL71xGbepnWN+zwZUHoB/vZ LaD++M0fue9wGbdj2J4/QjP8uH7Ufnwu0QMelMFajaFKbwp+qz1Q87ljDoX5tUOiH/e9 Nuxxf2cmtCNDFHGX9yaqhIyUfPal/DnqMGQ0dIPnWOFxOTQNRdCGbhsEyPKAmvHMc6tK aTFro1CmFjTBzA+nWr4qtwusmf2fG7KjK7Jq8JBpMqzWw14OiiprdWKdv+39VRG1DvHW LF0w== X-Gm-Message-State: AEkoouvz4cHttus1rlae8Cdm/C6+6aAiZ8lmHvp+4fo8L+ahEBnqbFAl118fAJpHhZSdsg== X-Received: by 10.36.82.81 with SMTP id d78mr13713774itb.65.1470590446990; Sun, 07 Aug 2016 10:20:46 -0700 (PDT) Received: from [10.0.10.3] (cpe-24-165-196-54.neo.res.rr.com. [24.165.196.54]) by smtp.googlemail.com with ESMTPSA id 4sm8368004itw.4.2016.08.07.10.20.46 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 07 Aug 2016 10:20:46 -0700 (PDT) Message-ID: <57A76DF6.6090905@gmail.com> Date: Sun, 07 Aug 2016 13:20:54 -0400 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: freebsd-pf@freebsd.org, freebsd-questions@freebsd.org Subject: Re: Firewalling jails and lo0 References: <20160806155411.GA5289@len-t420.klaas> <3C1C4822-17C2-42D9-A9BE-C3549B9B6F25@lists.zabbadoz.net> <20160807082651.GA87754@box-hlm-03.niklaas.eu> <57A743A8.10005@gmail.com> <20160807152347.GA9178@len-t420.klaas> In-Reply-To: <20160807152347.GA9178@len-t420.klaas> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 17:20:48 -0000 Niklaas Baudet von Gersdorff wrote: > Ernie Luzar [2016-08-07 10:20 -0400] : > >> I believe the loopback interface lo1 needs 127.0.0.0/8 ip address to enable >> loopback functionally, and the ip address has to be a different sub-net. IE >> 127.0.10.1 for lo1 while the hosts lo0 uses 127.0.0.1 > > Aha. So once I assigned those traffic from/to jails should go > through lo1 solely? > > Niklaas YES. I am still missing info on your jail.conf. Post the jail.conf file for the jails in question. Also what services are running on the host that you want to communicate with the smtp jail. You have to change the smtp config file to tell it to use the new lo1:127.0.10.2 ip address and you have to do the same thing for what ever host service will communicate with the smtp jail. They all have to be using the same lo1:127.0.10.2 ip. Most admin just keep those types of services on the host because its just easier. From owner-freebsd-questions@freebsd.org Sun Aug 7 17:23:00 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0A69ABB140C; Sun, 7 Aug 2016 17:23:00 +0000 (UTC) (envelope-from solene@perso.pw) Received: from bsd.zplay.eu (perso.pw [62.210.240.224]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "bsd.zplay.eu", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 518C51361; Sun, 7 Aug 2016 17:22:58 +0000 (UTC) (envelope-from solene@perso.pw) Received: from bsd.zplay.eu (localhost [127.0.0.1]) by bsd.zplay.eu (OpenSMTPD) with ESMTP id 86fa9ade; Sun, 7 Aug 2016 19:16:14 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=perso.pw; h=to:subject :mime-version:content-type:content-transfer-encoding:date:from :cc:in-reply-to:references:message-id; s=selector1; bh=4ZsK1c+bN f5Ooytwlf/CPfjI46w=; b=itYFVMkE83Y6l7QCHlsz/rXstAwcEazvjfpkGQ9iB K4xKa9n1dhrnlp0o5iw9YxZYAn40rQNeyN92dKxwx02ywPniN8UlHA5U9wRG0RKi I86UsXQwekO7g5NL0iZPcqr3ZgfcaqyHbTRmBmeqN7zyvRe0yU2rovVmD/a9Zsox nA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=perso.pw; h=to:subject :mime-version:content-type:content-transfer-encoding:date:from :cc:in-reply-to:references:message-id; q=dns; s=selector1; b=Ln0 PhmVMY4ecBGNUFOh2U7kSK6jWWfIXj9EGqNKZmeyDTUIummaVkPBbTe/hYIVcplW FUbBzDT2O0bXen4CazcIqIzZ4YKnZ5NgmCfsONxfA3qDBHUM+4GbeT18Jep9u54W DTlKt7TnV9rfOqIiv1lsvQLP2Fhc7ffzGHcQbSIg= Received: from localhost (bsd.zplay.eu [local]) by bsd.zplay.eu (OpenSMTPD) with ESMTPA id 472c5884; Sun, 7 Aug 2016 19:16:06 +0200 (CEST) To: Manish Jain Subject: Re: Need advice for setting up mail server X-PHP-Originating-Script: 0:rcube.php MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Sun, 07 Aug 2016 19:16:06 +0200 From: =?UTF-8?Q?Sol=C3=A8ne_Rapenne?= Cc: FreeBSD Questions , owner-freebsd-questions@freebsd.org In-Reply-To: References: Message-ID: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> X-Sender: solene@perso.pw User-Agent: Roundcube Webmail/1.2.0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 17:23:00 -0000 Le 2016-08-07 17:24, Manish Jain a écrit : > Hi, A few days back, I migrated a few Windows systems to FreeBSD at a > company that belongs to a friend of mine. My friend likes FreeBSD so > much now that he has asked me to see if I can migrate his DNS and mail > server in-house on a dedicated FreeBSD system. Currently, these > services are being provided by an external agency (using Linux, I > believe). My friend has a couple of public IP addresses to spare. > About 10 years back, I had set up a qmail server on FreeBSD 5.4. There > was a very nice how-to available, and I managed to get qmail serving > all on my own. I have no idea what the situation looks like right now > - about a year back, things were bad w.r.t. qmail - as per developers, > the system was not working as intended on FreeBSD. I am looking for a > good advice for some easy-to-setup mail server solution for FreeBSD > 10.3. Is qmail still the easiest thing to set up for mail, or there is > something better than that ? I keep security concerns for the mail > server solution at a low level - fo > r me, the thing has to be easy to set up and maintain, rather than > worry too much about eavesdropping/MITM. > Thanks for any advice. Manish Jain > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" Hello, you will need a SMTP server like Postfix or OpenSMTPD. You will also need to care with DKIM signing and SPF in your DNS. By running your own mail server you may also have problems to send mails to big companies like gmail, hotmail, yahoo etc... because they tend to blacklist large range of IP and it's hard to get removed on this list. Also, you will have to provide IMAP(S) (+ POP(S) if you want) with dovecot. If you need a webmail, see rainloop which is in PHP and act much like a dumb imap client from the web very little code on the server, or roundcube but this one needs more configuration and requires server side resources (caching, saving data etc..). Later you may need to fight against spam with greylisting and spamassassin. Running a mail server nowadays isn't very straightforward :( From owner-freebsd-questions@freebsd.org Sun Aug 7 17:25:58 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 450B0BB14C8 for ; Sun, 7 Aug 2016 17:25:58 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from mx.box-hlm-01.niklaas.eu (mx.box-hlm-01.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:fe1b:d1ad]) by mx1.freebsd.org (Postfix) with ESMTP id 1388314B0 for ; Sun, 7 Aug 2016 17:25:57 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from len-t420.klaas (unknown [IPv6:2a02:908:d722:7b00:224:d7ff:feec:38e0]) by mx.box-hlm-01.niklaas.eu (Postfix) with ESMTPSA id DE20C2C353F for ; Sun, 7 Aug 2016 19:25:55 +0200 (CEST) Date: Sun, 7 Aug 2016 19:25:51 +0200 From: Niklaas Baudet von Gersdorff To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-ID: <20160807172551.GA12411@len-t420.klaas> Reply-To: stdin@niklaas.eu Mail-Followup-To: freebsd-questions@freebsd.org References: <20160807165256.78074e54154e43d3a696b22d@sohara.org> <20160807174936.90f2a2c2c2a3e1a3e84452cc@sohara.org> <511A90F2-8BF1-4C6E-92DC-C442649B075B@mail.sermon-archive.info> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <511A90F2-8BF1-4C6E-92DC-C442649B075B@mail.sermon-archive.info> User-Agent: Mutt/1.6.0 (2016-04-01) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 17:25:58 -0000 Doug Hardie [2016-08-07 10:07 -0700] : > I found the sieve language a bit confusing at first. It took > a few tries to get one to compile without errors. One of the > more interesting aspects is that the sieve is not compiled when > you save it. It is compiled when the next message is > processed. It will generate a log file if an error is found. > The error messages are actually helpful. There is a way to > manually force the compile, but I never can remember it. > I just send myself an email so I don't have to wait to find out > if the change was proper. Using the web interface might make > it easier. I have never bothered to install it to find out. > Currently I am the only one using that feature and vi is just > fine for me. If one of the others starts using it though I'll > probably have to try that. mail/roundcube is a webmailer that has a managesieve plugin. You'd also need to activate managesieve in `mail_plugins` in Dovecot. See mail/managesieve for the plugin to (as it says) manage your sieve configuration remotely. Additionally you need sieve itself i.e., mail/dovecot2-pigeonhole. I would like to add that Postfix's documentation indeed is great. Have a look at http://www.postfix.org/documentation.html and especially http://www.postfix.org/STANDARD_CONFIGURATION_README.html for configuration examples for common use cases. Niklaas From owner-freebsd-questions@freebsd.org Sun Aug 7 17:27:30 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 90541BB156D for ; Sun, 7 Aug 2016 17:27:30 +0000 (UTC) (envelope-from carmel_ny@outlook.com) Received: from SNT004-OMC1S14.hotmail.com (snt004-omc1s14.hotmail.com [65.55.90.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 45EB415A8 for ; Sun, 7 Aug 2016 17:27:30 +0000 (UTC) (envelope-from carmel_ny@outlook.com) Received: from NAM03-BY2-obe.outbound.protection.outlook.com ([65.55.90.7]) by SNT004-OMC1S14.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Sun, 7 Aug 2016 10:26:23 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=s5U0KVPLMqi+PxbQVpme4lO/3tUHQCzPbbtlQnsP/OI=; b=U7VJxRP8MDOZlAtHYTS793fHdCh1qAofAhlSTmtBAJig1SNOT8ubs7hieULuy+AX/YXJeBgAm5DS3wY4y3f7Pzq+vA+bcSjyD7dkvi1GHy9rRrFTvFGSOPrD9FHne6be2iYMhRGPDiW2YzPgI5UWKD9TUdO26ku5rLTiJBJRCUD1kUXhGbUrp7j+nBe6EE9YLPV/sYM2oYtElKUDf9h/8D205SReRPVdrvhfCrPpAna0kqZKLqst82HFKzQVbvvSksV30bxSFAyRWGl5TOvWE+MOeMXsNVIOPYrzEwApEyPP1UxB9Q2+5kMb4FIpLeDHhkqfaYrRjvrYFxG3/0OCqg== Received: from CO1NAM03FT030.eop-NAM03.prod.protection.outlook.com (10.152.80.56) by CO1NAM03HT056.eop-NAM03.prod.protection.outlook.com (10.152.81.79) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.567.7; Sun, 7 Aug 2016 17:26:22 +0000 Received: from SN2PR20MB0845.namprd20.prod.outlook.com (10.152.80.53) by CO1NAM03FT030.mail.protection.outlook.com (10.152.80.169) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.567.7 via Frontend Transport; Sun, 7 Aug 2016 17:26:22 +0000 Received: from SN2PR20MB0845.namprd20.prod.outlook.com ([10.169.198.13]) by SN2PR20MB0845.namprd20.prod.outlook.com ([10.169.198.13]) with mapi id 15.01.0549.023; Sun, 7 Aug 2016 17:26:21 +0000 From: Gerard Seibert To: "freebsd-questions@freebsd.org" Subject: Re: Need advice for setting up mail server Thread-Topic: Need advice for setting up mail server Thread-Index: AQHR8NDQG9CVuBvqmUKm3+0L6tZSqQ== Date: Sun, 7 Aug 2016 17:26:21 +0000 Message-ID: References: <20160807165256.78074e54154e43d3a696b22d@sohara.org> <20160807174936.90f2a2c2c2a3e1a3e84452cc@sohara.org> <511A90F2-8BF1-4C6E-92DC-C442649B075B@mail.sermon-archive.info> In-Reply-To: <511A90F2-8BF1-4C6E-92DC-C442649B075B@mail.sermon-archive.info> Reply-To: "freebsd-questions@freebsd.org" Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=softfail (sender IP is 10.152.80.53) smtp.mailfrom=outlook.com; freebsd.org; dkim=none (message not signed) header.d=none;freebsd.org; dmarc=fail action=none header.from=outlook.com; received-spf: SoftFail (protection.outlook.com: domain of transitioning outlook.com discourages use of 10.152.80.53 as permitted sender) x-ms-exchange-messagesentrepresentingtype: 1 x-eopattributedmessage: 0 x-forefront-antispam-report: CIP:10.152.80.53; IPV:NLI; CTRY:; EFV:NLI; SFV:NSPM; SFS:(10019020)(98900003); DIR:OUT; SFP:1102; SCL:1; SRVR:CO1NAM03HT056; H:SN2PR20MB0845.namprd20.prod.outlook.com; FPR:; SPF:None; LANG:en; x-microsoft-exchange-diagnostics: 1; CO1NAM03HT056; 6:la/uikzelJfcXmmx65gHP0/Eaoo7HBPv4/6YJhuA8pbJ5dRyvcc6jql0wRzOhAdwIdVgzldc6QL5RN2nIfxBZPk7IxjMPV9vzKRv/cdanqSpoIKob35SK71nxb6ijPL77ERxCNQiDbaP4FZhV1AHV9sU52qIRoi1XgdEbmv/2kVf3kiY2rzUyDxQOeTOYSmCod5hyGLBJiZ45MVdm7BcFX6coy17DogcOR0WbPLQRL7US8dOnruVZsGTciyz0Nv/LEJnhqQTyCbXzP7sQHdELpW+N+GflbU+82fwUISYZoFYtf2L8cU5nfwrRokZUpIw; 5:oIC193AfFx8E5BDo1Wzhpr19YMjRBeOoQKaRcpmf37/1EDC6cpSjWp6Qxcq9tIee4A+rpE5u2BS2EOoRH2idqVnEmLf5LzlxgoNU4VbQrxP4fC+D8Kg45blnHEIYEXLynuIf0NOx62J3N8qI5PjVFA==; 24:ABZGiWU+sOLbKT9a7b6d9mPivuGUL5v5lH032jKmDBKlTaEldC9Le9Uv7V+nn3vGm0LJP+vXpVhY7svDZ0SdzAoEjK2ex2M6mxdEX2mrxOk=; 7:YqlYtLdxpPALl4/0FiQC2/DDprhq+C5LNe8iJ1MhpTsg8LXqyKtuIi6mU+EP5tkapaO1lWhUzNpjlIikpmUqlmhmpK3VnMPgcprVjGPwJFuJP/kwln5wsuP9ppQ6BmHBWqF9Ko6HMUcVNhSxefn0IRmGi9XACijX5bP5+qb7wK+mR11uypFKGfsggZIGxUKyMh0r/xGvEYn/jjh1c/ijlCxpyrZgiIs4yvke0rvJ+VicU7hZkgSYN9aSTtLbwWf6 x-ms-office365-filtering-correlation-id: 8b89de0f-1ead-4466-51c7-08d3bee7f242 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(1601124038)(1601125047); SRVR:CO1NAM03HT056; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(432015012)(82015046); SRVR:CO1NAM03HT056; BCL:0; PCL:0; RULEID:; SRVR:CO1NAM03HT056; x-forefront-prvs: 0027ED21E7 spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-ID: <98CB9E61DD90264598E70661940D6FE6@namprd20.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Aug 2016 17:26:21.2827 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1NAM03HT056 X-OriginalArrivalTime: 07 Aug 2016 17:26:23.0770 (UTC) FILETIME=[D20287A0:01D1F0D0] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 17:27:30 -0000 On Sun, 7 Aug 2016 10:07:26 -0700, Doug Hardie stated: >> On 7 August 2016, at 09:49, Steve O'Hara-Smith >> wrote: >>=20 >> On Sun, 7 Aug 2016 09:25:06 -0700 >> Doug Hardie wrote: >> =20 >>> I found it best to use dovecot's MDA from postfix so that pigeon >>> sieve could be used during delivery. That gives you features like >>> vacation and automatic delivery to inboxes other than INBOX. I did >>> the initial setup one step at a time. Get it working then add the >>> next feature. =20 >>=20 >> Hmm that's interesting I used procmail for that which >> involves fiddling with procmailrc which is fine for me but less so >> for others. Is it easy for users to set up the automatic delivery ? =20 > >I found the sieve language a bit confusing at first. It took a few >tries to get one to compile without errors. One of the more >interesting aspects is that the sieve is not compiled when you save >it. It is compiled when the next message is processed. It will >generate a log file if an error is found. The error messages are >actually helpful. There is a way to manually force the compile, but I >never can remember it. I just send myself an email so I don't have to >wait to find out if the change was proper. Using the web interface >might make it easier. I have never bothered to install it to find >out. Currently I am the only one using that feature and vi is just >fine for me. If one of the others starts using it though I'll >probably have to try that. man sievec sievec ./default.sieve >I believe that freebsd 11 has two different sieve implementations >available for the dovecot MDA. I started this server on freebsd 9.3 >and it had only pigeonhole (I got the name wrong earlier). I am in >the midst of upgrading the machine to 11 so haven't investigated the >other implementation. I'll probably stick with pigeonhole as its >working. dovecot2-2.2.25.3 dovecot-pigeonhole-0.4.15-1 --=20 Carmel From owner-freebsd-questions@freebsd.org Sun Aug 7 17:31:49 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2AFEDBB1845 for ; Sun, 7 Aug 2016 17:31:49 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id BD2261A01 for ; Sun, 7 Aug 2016 17:31:48 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: by mail-wm0-x22f.google.com with SMTP id p129so15442309wmp.0 for ; Sun, 07 Aug 2016 10:31:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=date:from:to:subject:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=Xd3IfjpVygVbJHQVpK7rsIWzU1oMoQWMYM5aEdMlPHs=; b=sCDzzudR3LGWPCI/eTRvjVwTUyuCa7QIFolmja+BB/j7T3lcNGarCu5u/DBnIEuinP KayuPu9E981SXSNrRErwAnUoiNgtDeRqIcNeh7cE4ZFBm4f+nbjuRBLUl7ttbRvNDwD0 seNg17FCykKa38dGrhK/dVDR7fEAv24f3NsVYHZWcCcIpuJRyhYxO1qyyy/Pzq/ckeOH FJrNXm1VtklrwlcJXa/p0TPAL3Ohq9g3wcMU1wfJF7945ndkALQ8HoPiueZoO+acLyu9 JaGsSqFd63sfV+iANAGsJlzwANjqHOzz9Zs8BXoXaYMrDT9dRqjdjip0OD5aJwlaNq8+ vqdA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=Xd3IfjpVygVbJHQVpK7rsIWzU1oMoQWMYM5aEdMlPHs=; b=IOHEX/1LqhjWVG/1Fuw8hxQa1Qlu2lz9BxHHLc5tPO03FlChzzyyUEtsuAwZSfqeu0 rTpIgNlse56zCnEgjIirZG+Um0wnbGgc5vFLsscmxe6ixKYrDX4zLwj/+iBUnzpKWi/K ZR9uawtGqTCO6liS7NqoBoVCUd6JaewrTT2uRunRjcRLKXT9OZvaR0m5fW4RCAwDXoaw +f7PIqzPj2uySmp+iQFxhQcb6GYm0NeDlZHo74ME9y6eMyJy5o2HUV1/W0QE/s4Cb5fv QqJU0YXQlDCmcFXaHUVCGb5CM+gToYqsk9Ju+2NdoLsUVcCpZigHq94YoXqbW2tkjDKc 8vNA== X-Gm-Message-State: AEkoout7W+kig3eAT0lJnNZ4s2JhLaeDa2KBo5tRBA4OxJ9CNenkhmr4rLeEtoSJfLTBYQ== X-Received: by 10.28.64.86 with SMTP id n83mr13000469wma.52.1470591106911; Sun, 07 Aug 2016 10:31:46 -0700 (PDT) Received: from gumby.homeunix.com ([81.171.74.83]) by smtp.gmail.com with ESMTPSA id r13sm19473238wmf.12.2016.08.07.10.31.45 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sun, 07 Aug 2016 10:31:46 -0700 (PDT) Date: Sun, 7 Aug 2016 18:31:44 +0100 From: RW To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-ID: <20160807183144.57237836@gumby.homeunix.com> In-Reply-To: <511A90F2-8BF1-4C6E-92DC-C442649B075B@mail.sermon-archive.info> References: <20160807165256.78074e54154e43d3a696b22d@sohara.org> <20160807174936.90f2a2c2c2a3e1a3e84452cc@sohara.org> <511A90F2-8BF1-4C6E-92DC-C442649B075B@mail.sermon-archive.info> X-Mailer: Claws Mail 3.13.2 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 17:31:49 -0000 On Sun, 7 Aug 2016 10:07:26 -0700 Doug Hardie wrote: > I believe that freebsd 11 has two different sieve implementations > available for the dovecot MDA. I started this server on freebsd 9.3 > and it had only pigeonhole (I got the name wrong earlier). I am in > the midst of upgrading the machine to 11 so haven't investigated the > other implementation. I'll probably stick with pigeonhole as its > working. I'm not certain, but I think the two versions are intended for Dovecot 1 and Dovecot 2. I doubt this has has anything to do with the FreeBSD version. In general ports work with any supported FreeBSD version unless a particular version breaks the port. From owner-freebsd-questions@freebsd.org Sun Aug 7 17:35:31 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 445F8BB19E7; Sun, 7 Aug 2016 17:35:31 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 0BA381F50; Sun, 7 Aug 2016 17:35:30 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-102-47.dynamic.qsc.de [92.195.102.47]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 233953CD85; Sun, 7 Aug 2016 19:35:21 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u77HZLjF001924; Sun, 7 Aug 2016 19:35:21 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Sun, 7 Aug 2016 19:35:21 +0200 From: Polytropon To: =?ISO-8859-1?Q?Sol=E8ne?= Rapenne Cc: Manish Jain , FreeBSD Questions , owner-freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-Id: <20160807193521.017dbbeb.freebsd@edvax.de> In-Reply-To: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 17:35:31 -0000 I think you mentioned a very important thing: On Sun, 07 Aug 2016 19:16:06 +0200, Sol=E8ne Rapenne wrote: > By running your=20 > own mail server you may also have problems to send mails to big=20 > companies like gmail, hotmail, yahoo etc... because they tend to=20 > blacklist large range of IP and it's hard to get removed on this list. Even though mail has been intended as a decentralized system, there is more and more "corporate centralism" making it hard for independent users to run their own mail infrastructure, simply because the "big ones" deny accepting and delivering mail from sources they consider "spam" (while their own addresses will often be found origins of spam). A static IP is of course a very good help (and if you don't have one, using your ISP's mail relay "smart host" solves most problems), but if that IP is already on one of their black lists, it's hard to get it "approved" so you can operate normally. And it will probably happen again and again. Sadly, the "general public" (educated users) seem to have lost the ability to normally operate their mail servers, or more precisely: it has been taken away... :-( --=20 Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sun Aug 7 17:51:28 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 492E9BB1DD9 for ; Sun, 7 Aug 2016 17:51:28 +0000 (UTC) (envelope-from oz1tmm@oz1tmm.dk) Received: from mail.oz1tmm.dk (93-166-252-34-static.dk.customer.tdc.net [93.166.252.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 07DC71CA3 for ; Sun, 7 Aug 2016 17:51:27 +0000 (UTC) (envelope-from oz1tmm@oz1tmm.dk) Received: from localhost (localhost [127.0.0.1]) by mail.oz1tmm.dk (Postfix) with ESMTP id 7BBCE46F3726 for ; Sun, 7 Aug 2016 19:44:35 +0200 (CEST) Received: from mail.oz1tmm.dk ([127.0.0.1]) by localhost (nexus.oz1tmm.dk [127.0.0.1]) (maiad, port 10024) with ESMTP id 30006-06 for ; Sun, 7 Aug 2016 19:44:35 +0200 (CEST) Received: from oz1tmm.dk (localhost [127.0.0.1]) (Authenticated sender: oz1tmm@oz1tmm.dk) by mail.oz1tmm.dk (Postfix) with ESMTPA id 2E6FD46F3721 for ; Sun, 7 Aug 2016 19:44:35 +0200 (CEST) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Sun, 07 Aug 2016 19:44:35 +0200 From: "OZ1TMM, Martin" To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server In-Reply-To: References: Message-ID: <05c53bc3700c56e1f0300ecfffd9a3a0@oz1tmm.dk> X-Sender: oz1tmm@oz1tmm.dk User-Agent: Roundcube Webmail/1.1.4 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 17:51:28 -0000 On 2016-08-07 17:24, Manish Jain wrote: > much now that he has asked me to see if I can migrate his DNS and mail > server in-house on a dedicated FreeBSD system. Currently, these > services are being provided by an external agency (using Linux, I > believe). > Thanks for any advice. Manish Jain Hello Manish. I recently set up my own mail-server with postfix, dovecot, roundcube and sieve, using this[1] guide I found There's quite some steps, but I think they're worth it. You get a postfix host with the comfort of a webbased admin interface for both user creating and spam/virus fighting. I am in no way affiliated with the site I found the guide at, just a happy user :) It worked a-ok for me on a 10.2-RELEASE, YMMV. Hope it helps. :) (Sorry for the off-list reply) [1]: http://www.purplehat.org/?page_id=4 -- 73 de OZ1TMM/OU1T, Martin From owner-freebsd-questions@freebsd.org Sun Aug 7 17:59:40 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EE01ABB1F9A; Sun, 7 Aug 2016 17:59:40 +0000 (UTC) (envelope-from solene@perso.pw) Received: from bsd.zplay.eu (perso.pw [62.210.240.224]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "bsd.zplay.eu", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 3395D1EAF; Sun, 7 Aug 2016 17:59:39 +0000 (UTC) (envelope-from solene@perso.pw) Received: from bsd.zplay.eu (localhost [127.0.0.1]) by bsd.zplay.eu (OpenSMTPD) with ESMTP id 52c532a7; Sun, 7 Aug 2016 19:59:37 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=perso.pw; h=to:subject :mime-version:content-type:content-transfer-encoding:date:from :cc:in-reply-to:references:message-id; s=selector1; bh=lqPzhPl1O pBRxzZYasKVVOr3nB0=; b=Ug3HPqOwuIu4HTL4q/+t16Pqlz6/8e8mgcpVpDuVX KdCvhPM1G6PvCdqeSeWtjrO2XAO6WwFiDEX5uEZzuJfJkcUfDWGfKtBPmpHlg8o9 JnGROsOkgEzbQWT7+BRon3RqTJvQPGjcL0B4M8b4cEdlPLMf+iaEgO2p/rrYleNb OA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=perso.pw; h=to:subject :mime-version:content-type:content-transfer-encoding:date:from :cc:in-reply-to:references:message-id; q=dns; s=selector1; b=XEq NKJRketxRcIcApjE3ggvkwtrLQoWSxuuW7u/c5qdtie3sV2kX8ODeZW/f2sOsRgk EUpjSF20V3vKWyP5+kHIPbZHnXW11ePAqUkbnA5rI46Msw2Lvz0h9iZdS5ICg7ju HiAlzxjj5W+c+p6trwRa6NeK8QfIWra2HK7J0zgE= Received: from localhost (bsd.zplay.eu [local]) by bsd.zplay.eu (OpenSMTPD) with ESMTPA id 56c60007; Sun, 7 Aug 2016 19:59:36 +0200 (CEST) To: Yuri Subject: Re: Any way to cache large /etc/hosts files? X-PHP-Originating-Script: 0:rcube.php MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Sun, 07 Aug 2016 19:59:36 +0200 From: =?UTF-8?Q?Sol=C3=A8ne_Rapenne?= Cc: FreeBSD Questions , owner-freebsd-questions@freebsd.org In-Reply-To: References: Message-ID: <960897ab9ef32afef1b38047bf284f3a@mail.zplay.eu> X-Sender: solene@perso.pw User-Agent: Roundcube Webmail/1.2.0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 17:59:41 -0000 Le 2016-08-05 20:33, Yuri a écrit : > Some people suggest using pre-compiled lists of ad and malware domains > and block them on DNS level. (ex. > https://github.com/StevenBlack/hosts) > > The resulting hosts file is about 1MB. nscd(8) caches DNS results, but > it does this on name by name basis. Every new domain name request, > even within the same process, causes /etc/hosts file to be reread > again. > > > Is there a way to cache /etc/hosts once and use it? > > > Yuri > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" Hello, Maybe adsuck would be a good tool for what you want. It original purpose it to use lists of blacklisted hosts to redirect them to 127.0.0.1 by using the dns system and stop ads in browing. adsuck uses files with the same syntax as /etc/hosts and then if it doesn't know the name if will pass the request to your DNS resolver. From owner-freebsd-questions@freebsd.org Sun Aug 7 18:01:59 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0EF2FBB1141 for ; Sun, 7 Aug 2016 18:01:59 +0000 (UTC) (envelope-from me@niklaas.eu) Received: from mx.box-hlm-03.niklaas.eu (box-hlm-03.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:feaa:e902]) by mx1.freebsd.org (Postfix) with ESMTP id D2C7211EB for ; Sun, 7 Aug 2016 18:01:58 +0000 (UTC) (envelope-from me@niklaas.eu) Received: from len-t420.klaas (unknown [IPv6:2a02:908:d722:7b00:224:d7ff:feec:38e0]) by mx.box-hlm-03.niklaas.eu (Postfix) with ESMTPSA id B3CF04F9999 for ; Sun, 7 Aug 2016 20:01:50 +0200 (CEST) Date: Sun, 7 Aug 2016 20:01:49 +0200 From: Niklaas Baudet von Gersdorff To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-ID: <20160807180149.GC12411@len-t420.klaas> Reply-To: Niklaas Baudet von Gersdorff Mail-Followup-To: freebsd-questions@freebsd.org References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> User-Agent: Mutt/1.6.0 (2016-04-01) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 18:01:59 -0000 Solène Rapenne [2016-08-07 19:16 +0200] : > Hello, you will need a SMTP server like Postfix or OpenSMTPD. > You will also need to care with DKIM signing and SPF in your > DNS. By running your own mail server you may also have problems > to send mails to big companies like gmail, hotmail, yahoo > etc... because they tend to blacklist large range of IP and > it's hard to get removed on this list. At this stage I neither have SPF nor DKIM implemented on one of my machines (this one I am actually sending you the mail from) and so far I had no problems sending mails to "bigger companies". I realised that Google started automatically guessing SPF and it works for my mail server at least. :-) > If you need a webmail, see rainloop which is in PHP and act > much like a dumb imap client from the web very little code on > the server, or roundcube but this one needs more configuration > and requires server side resources (caching, saving data > etc..). Once I intended to use Rainloop but the problem I see is that you need a license for using it commercially: http://www.rainloop.net/licensing/ So you should check whether that applies to you beforehand. > Later you may need to fight against spam with greylisting and > spamassassin. While greylisting is quite effective I had problems with it because "bigger companies" tend to send mail from different mail server i.e., greylisting won't work that well. I used spamassassin years ago and was not very happy with it because from my feeling it uses a lot of resources but still has difficulties marking spam properly. What I can highly recommend is mail/spamd. I learned about it in the FreeBSD Handbook. However, documentation there seems a bit old so it's not longer correct. Spamd offers greylisting too but, as mentioned above, there are reasons not to enable that. However, you can also run it in blocking mode solely. This way it collects updated entries on malicious hosts that you can pipe to PF and block with your firewall. Very resource-friendly. Read spamd(8) for how to configure it properly (and don't trust the handbook on it). Niklaas From owner-freebsd-questions@freebsd.org Sun Aug 7 18:10:09 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DB027BB1301; Sun, 7 Aug 2016 18:10:09 +0000 (UTC) (envelope-from solene@perso.pw) Received: from bsd.zplay.eu (perso.pw [62.210.240.224]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "bsd.zplay.eu", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 2956516B6; Sun, 7 Aug 2016 18:10:08 +0000 (UTC) (envelope-from solene@perso.pw) Received: from bsd.zplay.eu (localhost [127.0.0.1]) by bsd.zplay.eu (OpenSMTPD) with ESMTP id 823acdea; Sun, 7 Aug 2016 20:10:06 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=perso.pw; h=to:subject :mime-version:content-type:content-transfer-encoding:date:from :cc:in-reply-to:references:message-id; s=selector1; bh=vFiDzFWiJ tKKgBc6Dejm1WyQoOY=; b=tZrFS9pZ9LL7GSmX1Z7EX41EM8nTQmVobME6Padqc MAH9+772acp0E4IHEB8LwsCUct/XaDMa4eI2NquCrmGi7oeeCB5ME6l6YNp9zWmO 3eYtN5AIk0GmF1Igy5AlVYh5AnojNEWxZsa1Dv9k19F2uQoc4+Qm/Vpq/hTKvHbk 8Q= DomainKey-Signature: a=rsa-sha1; c=nofws; d=perso.pw; h=to:subject :mime-version:content-type:content-transfer-encoding:date:from :cc:in-reply-to:references:message-id; q=dns; s=selector1; b=fb9 3sKMOstuN8qRhINAxCUDbHbiCEGk4CxWWXRo+8siaOoAQBG/z/dLQXYy2pRjyvuF WX7IOiSUeNwM+whkDs8Ik4Tq19uPE1xmpwe28ZcxQF104zllt0UDtc9JjdgiloYA 0GtNBNyi5ybN5a75n52++f9atUN0CmkSZy0LxhDo= Received: from localhost (bsd.zplay.eu [local]) by bsd.zplay.eu (OpenSMTPD) with ESMTPA id fc2c2519; Sun, 7 Aug 2016 20:10:04 +0200 (CEST) To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server X-PHP-Originating-Script: 0:rcube.php MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Sun, 07 Aug 2016 20:10:04 +0200 From: =?UTF-8?Q?Sol=C3=A8ne_Rapenne?= Cc: owner-freebsd-questions@freebsd.org In-Reply-To: <20160807180149.GC12411@len-t420.klaas> References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> Message-ID: X-Sender: solene@perso.pw User-Agent: Roundcube Webmail/1.2.0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 18:10:10 -0000 Le 2016-08-07 20:01, Niklaas Baudet von Gersdorff a écrit : > Solène Rapenne [2016-08-07 19:16 +0200] : > >> Hello, you will need a SMTP server like Postfix or OpenSMTPD. >> You will also need to care with DKIM signing and SPF in your >> DNS. By running your own mail server you may also have problems >> to send mails to big companies like gmail, hotmail, yahoo >> etc... because they tend to blacklist large range of IP and >> it's hard to get removed on this list. > > At this stage I neither have SPF nor DKIM implemented on one of > my machines (this one I am actually sending you the mail from) > and so far I had no problems sending mails to "bigger companies". > I realised that Google started automatically guessing SPF and it > works for my mail server at least. :-) I have had issues with SPF since last year for a lot of servers (not necessaries one of big companies) and I have been rejected recently of some servers because I wasn't using DKIM. Even if it works without them, you need to be aware of their existence in case you are rejected. >> Later you may need to fight against spam with greylisting and >> spamassassin. > > While greylisting is quite effective I had problems with it > because "bigger companies" tend to send mail from different mail > server i.e., greylisting won't work that well. I used > spamassassin years ago and was not very happy with it because > from my feeling it uses a lot of resources but still has > difficulties marking spam properly. This is a problem with greylisting but this could be "fixed" with a script running every minute whitelisting servers of known domains checked by reverse dns resolving. It will still add delay because the server need to retry the sending but it works. From owner-freebsd-questions@freebsd.org Sun Aug 7 18:12:33 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 14422BB15D8 for ; Sun, 7 Aug 2016 18:12:33 +0000 (UTC) (envelope-from me@niklaas.eu) Received: from mx.box-hlm-01.niklaas.eu (mx.box-hlm-01.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:fe1b:d1ad]) by mx1.freebsd.org (Postfix) with ESMTP id D8AD11AA9 for ; Sun, 7 Aug 2016 18:12:32 +0000 (UTC) (envelope-from me@niklaas.eu) Received: from len-t420.klaas (unknown [IPv6:2a02:908:d722:7b00:224:d7ff:feec:38e0]) by mx.box-hlm-01.niklaas.eu (Postfix) with ESMTPSA id D66FD2C356A for ; Sun, 7 Aug 2016 20:12:31 +0200 (CEST) Date: Sun, 7 Aug 2016 20:12:30 +0200 From: Niklaas Baudet von Gersdorff To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-ID: <20160807181230.GD12411@len-t420.klaas> Reply-To: stdin@niklaas.eu Mail-Followup-To: freebsd-questions@freebsd.org References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20160807180149.GC12411@len-t420.klaas> User-Agent: Mutt/1.6.0 (2016-04-01) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 18:12:33 -0000 Niklaas Baudet von Gersdorff [2016-08-07 20:01 +0200] : > What I can highly recommend is mail/spamd. I learned about it in > the FreeBSD Handbook. However, documentation there seems a bit > old so it's not longer correct. Spamd offers greylisting too but, > as mentioned above, there are reasons not to enable that. > However, you can also run it in blocking mode solely. This way it > collects updated entries on malicious hosts that you can pipe to > PF and block with your firewall. Very resource-friendly. Read > spamd(8) for how to configure it properly (and don't trust the > handbook on it). I forgot to mention postscreen(8). For its functionality see http://www.postfix.org/POSTSCREEN_README.html I just learned about it some weeks ago, so I haven't tested it yet. Anyway, I guess it's a cleverer and less resource hungry solution than other anti-spam tool. Niklaas From owner-freebsd-questions@freebsd.org Sun Aug 7 18:15:12 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A2435BB174A; Sun, 7 Aug 2016 18:15:12 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from mx.box-hlm-02.niklaas.eu (box-hlm-02.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:feac:28f6]) by mx1.freebsd.org (Postfix) with ESMTP id 730BC1DB8; Sun, 7 Aug 2016 18:15:12 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from len-t420.klaas (unknown [IPv6:2a02:908:d722:7b00:224:d7ff:feec:38e0]) by mx.box-hlm-02.niklaas.eu (Postfix) with ESMTPSA id 653A71C9797; Sun, 7 Aug 2016 20:15:11 +0200 (CEST) Date: Sun, 7 Aug 2016 20:15:09 +0200 From: Niklaas Baudet von Gersdorff To: freebsd-questions@freebsd.org, owner-freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-ID: <20160807181509.GE12411@len-t420.klaas> Reply-To: stdin@niklaas.eu Mail-Followup-To: freebsd-questions@freebsd.org, owner-freebsd-questions@freebsd.org References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.6.0 (2016-04-01) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 18:15:12 -0000 Solène Rapenne [2016-08-07 20:10 +0200] : > I have had issues with SPF since last year for a lot of servers (not > necessaries one of big companies) and I have been rejected recently of some > servers because I wasn't using DKIM. Even if it works without them, you need > to be aware of their existence in case you are rejected. I guess I have been quite lucky so far. :-) You're right though, you need to know about it. > This is a problem with greylisting but this could be "fixed" with a script > running every minute whitelisting servers of known domains checked by > reverse dns resolving. It will still add delay because the server need to > retry the sending but it works. Just another resource about this: https://calomel.org/spamd_config.html Niklaas From owner-freebsd-questions@freebsd.org Sun Aug 7 21:10:14 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BDDB4BB1DA5 for ; Sun, 7 Aug 2016 21:10:14 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from zoom.lafn.org (zoom.lafn.org [108.92.93.123]) by mx1.freebsd.org (Postfix) with ESMTP id AAFB3113B for ; Sun, 7 Aug 2016 21:10:14 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from [10.0.1.4] (unknown [71.177.216.148]) by zoom.lafn.org (Postfix) with ESMTPSA id 9801D34A8B8 for ; Sun, 7 Aug 2016 14:10:12 -0700 (PDT) From: Doug Hardie Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Subject: 11.0 Core Dumps Message-Id: <15F7A361-B703-45B0-96A5-5B4157FEC8D0@mail.sermon-archive.info> Date: Sun, 7 Aug 2016 14:10:11 -0700 To: FreeBSD Questions Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) X-Virus-Scanned: clamav-milter 0.98 at zoom.lafn.org X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 21:10:14 -0000 I have been trying to get server processes to core dump. I have: kern.sugid_coredump=3D1 kern.corefile=3D"/var/crash/%N.core" mail# ulimit unlimited I see Segment Violations in messages, but no indication of core dumps = and no core files are created. There must be an additional setting = required for them now. =20 =E2=80=94 Doug From owner-freebsd-questions@freebsd.org Sun Aug 7 21:17:36 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EBAF6BB1039 for ; Sun, 7 Aug 2016 21:17:36 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from zoom.lafn.org (zoom.lafn.org [108.92.93.123]) by mx1.freebsd.org (Postfix) with ESMTP id D5FA116FB for ; Sun, 7 Aug 2016 21:17:36 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from [10.0.1.4] (unknown [71.177.216.148]) by zoom.lafn.org (Postfix) with ESMTPSA id B275734A8BF; Sun, 7 Aug 2016 14:17:35 -0700 (PDT) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Subject: Re: Need advice for setting up mail server From: Doug Hardie In-Reply-To: <20160807180149.GC12411@len-t420.klaas> Date: Sun, 7 Aug 2016 14:17:35 -0700 Cc: freebsd-questions@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <44D296EC-FA25-4279-9501-8BB6B2DD86A6@mail.sermon-archive.info> References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> To: Niklaas Baudet von Gersdorff X-Mailer: Apple Mail (2.3124) X-Virus-Scanned: clamav-milter 0.98 at zoom.lafn.org X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2016 21:17:37 -0000 > On 7 August 2016, at 11:01, Niklaas Baudet von Gersdorff = wrote: >=20 > What I can highly recommend is mail/spamd. I learned about it in > the FreeBSD Handbook. However, documentation there seems a bit > old so it's not longer correct. Spamd offers greylisting too but, > as mentioned above, there are reasons not to enable that. > However, you can also run it in blocking mode solely. This way it > collects updated entries on malicious hosts that you can pipe to > PF and block with your firewall. Very resource-friendly. Read > spamd(8) for how to configure it properly (and don't trust the > handbook on it). I am running spamd (obspamd last time I checked) on the mail server for = a medium sized ISP. It has never worked the way the documentation = describes. However, it has been useful. When I first installed it, = around 90% of the email being received was dropped. It blocks drive-by = spammers who don't queue and retry on TMP_FAILs. Unfortunately, it = appears that many spammers now can afford the disk and processor = resources to enable queueing and retrying so its usefulness is = diminishing. The issue that has bugged me with it is that it does not deliver the = email that causes the site to be whitelisted. You have to wait for it = to try yet another time to actually get it. The small business mail server does not have that implemented at this = time. I hope to avoid it, but will have to see what happens in the = future. From owner-freebsd-questions@freebsd.org Mon Aug 8 06:20:42 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B44C1BB13E2 for ; Mon, 8 Aug 2016 06:20:42 +0000 (UTC) (envelope-from michaelsprivate@gmail.com) Received: from mail-yw0-x22c.google.com (mail-yw0-x22c.google.com [IPv6:2607:f8b0:4002:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7249111E7 for ; Mon, 8 Aug 2016 06:20:42 +0000 (UTC) (envelope-from michaelsprivate@gmail.com) Received: by mail-yw0-x22c.google.com with SMTP id z8so299941369ywa.1 for ; Sun, 07 Aug 2016 23:20:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=1ZBpNRWscR1ytFdJWrFCMimI3dkNicbwfyBf/kdI8Ks=; b=ulBOP+s3atOzVPNkscf0qf4K8hobb2JASMPcTXAa7+OufbUufQ6iFnE5Gsd/V5+eag IGsqtk9Hs/jH2q5urLcbOWx/Jq8m0UDnfff8GNmFLTEQYoZG4Wze7bvVqt1mGjayiOdL TPSXUL0YvbYR+2/hRJeBZyg7CJGP6ghvU9XmXwvOGoQV58YxkQxdgu5jxM3ugxNTN8cA i9wK9SQwC77ZpjYU3OimK9QPs8p6v9gA073/l3x4q9TNslRrh4PjW2Vwz8QDdQ+pgvXB YSi8VtGbQRMgzvBE8vdv99OJ+T6MQsrylieMY5SMfV/VfeP83DLrMGR3TjwY7I5Gx989 xTjQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=1ZBpNRWscR1ytFdJWrFCMimI3dkNicbwfyBf/kdI8Ks=; b=P3h0I4SWzvUBoUE66zwxvPBXAOkiRCM/kHZoivTeuvpeoJC4uIf4yANMc1s7DFTYZU 0Vo5WuV0i+lGZkMJkqppv3PthxnJ5TpEyjGm8L0JAEp+g5CpoEwx0lc9Q2f9mzkNNn8j h2UC0veP/M/VocbRj/UJCohWeHEuR1t+xE2E1dARc8kXer024CNuSpfkm0/jEjBJL9/R F550b/kZzYs0wroV8tBojIza0BvOuemf5qeuZWL7eNvAfss+U5HZvh3QwfC3A7I/KAzi JdESwXaC2glqxAvcho0qNtpu7pOLqyw3e+2PsSX8kFGZK0+Tbdg+6Rzoi/UpT0uJtUnv wR2A== X-Gm-Message-State: AEkoouurqXz7M48arXj7AymF9SGgIp7gdqFIOsNjG7rnVaRLh1hu4qcVaMDAxdHBPQNPwlzVucogFkeHSvQBcQ== X-Received: by 10.13.218.65 with SMTP id c62mr75646976ywe.134.1470637241589; Sun, 07 Aug 2016 23:20:41 -0700 (PDT) MIME-Version: 1.0 Received: by 10.37.91.7 with HTTP; Sun, 7 Aug 2016 23:20:21 -0700 (PDT) In-Reply-To: <15F7A361-B703-45B0-96A5-5B4157FEC8D0@mail.sermon-archive.info> References: <15F7A361-B703-45B0-96A5-5B4157FEC8D0@mail.sermon-archive.info> From: Michael Schuster Date: Mon, 8 Aug 2016 08:20:21 +0200 Message-ID: Subject: Re: 11.0 Core Dumps To: Doug Hardie Cc: FreeBSD Questions Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 06:20:42 -0000 Does the process dumping core have write permission in /var/crash/ ? regards Michael On Sun, Aug 7, 2016 at 11:10 PM, Doug Hardie wrote: > I have been trying to get server processes to core dump. I have: > kern.sugid_coredump=3D1 > kern.corefile=3D"/var/crash/%N.core" > > mail# ulimit > unlimited > > I see Segment Violations in messages, but no indication of core dumps and > no core files are created. There must be an additional setting required > for them now. > > =E2=80=94 Doug > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org" --=20 Michael Schuster http://recursiveramblings.wordpress.com/ recursion, n: see 'recursion' From owner-freebsd-questions@freebsd.org Mon Aug 8 06:22:09 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 617B4BB1638 for ; Mon, 8 Aug 2016 06:22:09 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from zoom.lafn.org (zoom.lafn.org [108.92.93.123]) by mx1.freebsd.org (Postfix) with ESMTP id 4C5461500 for ; Mon, 8 Aug 2016 06:22:09 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from [10.0.1.4] (unknown [71.177.216.148]) by zoom.lafn.org (Postfix) with ESMTPSA id A7A2A34A882; Sun, 7 Aug 2016 23:22:08 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Subject: Re: 11.0 Core Dumps From: Doug Hardie In-Reply-To: Date: Sun, 7 Aug 2016 23:22:08 -0700 Cc: FreeBSD Questions Content-Transfer-Encoding: quoted-printable Message-Id: References: <15F7A361-B703-45B0-96A5-5B4157FEC8D0@mail.sermon-archive.info> To: Michael Schuster X-Mailer: Apple Mail (2.3124) X-Virus-Scanned: clamav-milter 0.98 at zoom.lafn.org X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 06:22:09 -0000 > On 7 August 2016, at 23:20, Michael Schuster = wrote: >=20 > Does the process dumping core have write permission in /var/crash/ ? >=20 > regards > Michael >=20 > On Sun, Aug 7, 2016 at 11:10 PM, Doug Hardie = wrote: > I have been trying to get server processes to core dump. I have: > kern.sugid_coredump=3D1 > kern.corefile=3D"/var/crash/%N.core" >=20 > mail# ulimit > unlimited >=20 > I see Segment Violations in messages, but no indication of core dumps = and no core files are created. There must be an additional setting = required for them now. >=20 > =E2=80=94 Doug I made the permission all rw (e.g., 777). That didn't help. Messages = gives no indication that it even tried to create a core dump.= From owner-freebsd-questions@freebsd.org Mon Aug 8 06:31:56 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E4FB8BB1F78 for ; Mon, 8 Aug 2016 06:31:56 +0000 (UTC) (envelope-from me@niklaas.eu) Received: from mx.box-hlm-03.niklaas.eu (box-hlm-03.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:feaa:e902]) by mx1.freebsd.org (Postfix) with ESMTP id B2C0114EA for ; Mon, 8 Aug 2016 06:31:56 +0000 (UTC) (envelope-from me@niklaas.eu) Received: from box-hlm-03.niklaas.eu (box-hlm-03.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:feaa:e902]) by mx.box-hlm-03.niklaas.eu (Postfix) with ESMTPSA id 00AC34F9A17 for ; Mon, 8 Aug 2016 08:31:54 +0200 (CEST) Date: Mon, 8 Aug 2016 08:31:49 +0200 From: Niklaas Baudet von Gersdorff To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-ID: <20160808063138.GA20037@box-hlm-03.niklaas.eu> Reply-To: stdin@niklaas.eu Mail-Followup-To: freebsd-questions@freebsd.org References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> <44D296EC-FA25-4279-9501-8BB6B2DD86A6@mail.sermon-archive.info> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <44D296EC-FA25-4279-9501-8BB6B2DD86A6@mail.sermon-archive.info> User-Agent: Mutt/1.6.1 (2016-04-27) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 06:31:57 -0000 Doug Hardie [2016-08-07 14:17 -0700] : > I am running spamd (obspamd last time I checked) on the mail It's mail/spamd in ports and `obspamd` in /etc/rc.d. > server for a medium sized ISP. It has never worked the way the > documentation describes. However, it has been useful. When > I first installed it, around 90% of the email being received > was dropped. It blocks drive-by spammers who don't queue and > retry on TMP_FAILs. Unfortunately, it appears that many > spammers now can afford the disk and processor resources to > enable queueing and retrying so its usefulness is diminishing. I also made bad experiences with its greylisting function. (I'm not a big fan of greylisting anyway.) That's why I use it's blocking function only: obspamd_enable="YES" obspamd_flags="-l 127.0.0.1 -b" And for PF I have table persist rdr pass on $ext_if inet proto tcp from to any port smtp -> 127.0.0.1 port spamd rdr pass on $ext_if inet6 proto tcp from to any port smtp -> ::ffff:127.0.0.1 port spamd In /usr/local/etc/spamd/spamd.conf I use two of the example lists: all:\ :uatraps:nixspam: # University of Alberta greytrap hits. # Addresses stay in it for 24 hours from time they misbehave. uatraps:\ :black:\ :msg="Your address %A has sent mail to a ualberta.ca spamtrap\n\ within the last 24 hours":\ :method=http:\ :file=www.openbsd.org/spamd/traplist.gz # Nixspam recent sources list. # Mirrored from http://www.heise.de/ix/nixspam nixspam:\ :black:\ :msg="Your address %A is in the nixspam list\n\ See http://www.heise.de/ix/nixspam/dnsbl_en/ for details":\ :method=http:\ :file=www.openbsd.org/spamd/nixspam.gz What I like about the concept is that false positives will get a reply that their mail was considered spam. This way they can try to contact me over a different channel. The problem I see with "traditional" spam checking (moving spam into a spam folder) is that the sender does not know whether their mail was classified as spam or not. And the other way I don't have to check a spam folder for false positives. I must confess though 1. I trust the quality of the blacklists. 2. The mail servers where I'm using mail/spamd at the moment don't get lots of traffic. So I can't really tell how efficient that is. I just started using postscreen(8) and will see whether the combination of mail/spamd and postscreen(8) is a good one. I hope that I don't have to opt for mail/spamassassin because I find it difficult to configure. Niklaas From owner-freebsd-questions@freebsd.org Mon Aug 8 06:56:59 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 569B7BB198B for ; Mon, 8 Aug 2016 06:56:59 +0000 (UTC) (envelope-from bsd@bontempi.net) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2E6951798 for ; Mon, 8 Aug 2016 06:56:58 +0000 (UTC) (envelope-from bsd@bontempi.net) Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.nyi.internal (Postfix) with ESMTP id 83EE120150 for ; Mon, 8 Aug 2016 02:56:57 -0400 (EDT) Received: from web6 ([10.202.2.216]) by compute2.internal (MEProxy); Mon, 08 Aug 2016 02:56:57 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=bontempi.net; h= content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=qMxUoCdkJ8YA9TIH+tVrNIWBCFE=; b=UeD1N+ 50U6gu5ux2lHr7/obnJUWoglewSHJu4yPjq2kFtyoce0u3MwIYHFaA+j38zDzyGo GaeJnrXOZywtaGodpQ6o3vNU2oMXZLS2huT3SsiOuU+MZXVdP+2J+KGu/sjaMy9z Zi2OG/0ximoFqBKjQ+uhvRBZAEiofa7oqiRIs= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=qMxUoCdkJ8YA9TI H+tVrNIWBCFE=; b=lOSVreHe2/1OZbM4dDEpEClX/RtYist3tyxWxf9m0Mf0Pv9 JilA/o4SNt5pEzLRAtTQs2YvgPdv2xVX475uVxV5e+URjhJLk3stBgl9BfgI6IXK jhj0vejTr8sYMvygIIHM8Qiy72htsL21cB+gOqVLXmgCoxmFZpCrKI862tvU= Received: by mailuser.nyi.internal (Postfix, from userid 99) id 4B4A41E380; Mon, 8 Aug 2016 02:56:57 -0400 (EDT) Message-Id: <1470639417.2243198.688841337.79572674@webmail.messagingengine.com> X-Sasl-Enc: cz+np5NHnBGbL5C9cX1AOe4AKH1Uzu9FrEk4x0hrrkrR 1470639417 From: Priyadarshan To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-b9085e99 Subject: Re: Need advice for setting up mail server Date: Mon, 08 Aug 2016 06:56:57 +0000 In-Reply-To: <20160808063138.GA20037@box-hlm-03.niklaas.eu> References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> <44D296EC-FA25-4279-9501-8BB6B2DD86A6@mail.sermon-archive.info> <20160808063138.GA20037@box-hlm-03.niklaas.eu> X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 06:56:59 -0000 We have had good results using the workflow used by Mail-in-a-box: https://github.com/mail-in-a-box/mailinabox I have been wishing to add FreeBSD platform to that, but right now it is not on top pf priorities. But it presents sensible choices, and it may be worth a look. Priyadarshan From owner-freebsd-questions@freebsd.org Mon Aug 8 07:48:15 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6597DBB25AF for ; Mon, 8 Aug 2016 07:48:15 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 0FB8B1310 for ; Mon, 8 Aug 2016 07:48:15 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 5D82FC4C5 for ; Mon, 8 Aug 2016 07:48:09 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/5D82FC4C5; dkim=none; dkim-atps=neutral Subject: Re: Need advice for setting up mail server To: freebsd-questions@freebsd.org References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> From: Matthew Seaman Message-ID: <0d47e714-53d0-24ab-2950-abb39a55a737@FreeBSD.org> Date: Mon, 8 Aug 2016 08:47:58 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <20160807180149.GC12411@len-t420.klaas> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Hmskj4OXOpWCXeJbvKnhs7C0KDaMpXb5N" X-Spam-Status: No, score=-1.2 required=5.0 tests=BAYES_00,SPF_SOFTFAIL autolearn=no autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 07:48:15 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Hmskj4OXOpWCXeJbvKnhs7C0KDaMpXb5N Content-Type: multipart/mixed; boundary="UTI18fhC7D3dxRqjBwIsgN3OOQVtveVx5" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: <0d47e714-53d0-24ab-2950-abb39a55a737@FreeBSD.org> Subject: Re: Need advice for setting up mail server References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> In-Reply-To: <20160807180149.GC12411@len-t420.klaas> --UTI18fhC7D3dxRqjBwIsgN3OOQVtveVx5 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 07/08/2016 19:01, Niklaas Baudet von Gersdorff wrote: > Sol=E8ne Rapenne [2016-08-07 19:16 +0200] : >=20 >> > Hello, you will need a SMTP server like Postfix or OpenSMTPD. >> > You will also need to care with DKIM signing and SPF in your >> > DNS. By running your own mail server you may also have problems >> > to send mails to big companies like gmail, hotmail, yahoo >> > etc... because they tend to blacklist large range of IP and >> > it's hard to get removed on this list. > At this stage I neither have SPF nor DKIM implemented on one of > my machines (this one I am actually sending you the mail from) > and so far I had no problems sending mails to "bigger companies". > I realised that Google started automatically guessing SPF and it > works for my mail server at least. :-) Spam classification systems by big mail handling sites are all different. However they are largely based on on-line reputation systems. These depend critically on the volume of e-mail sent. For the small volumes you'ld send via a personal or family server, basically you're assumed to be good unless you do anything to disabuse that assumption. Note that you also need take care of where -- IP-wise -- you're sending from. Most residential ISP netblocks are marked as such in DNSRBLs, and your terms of service will probably forbid you from running your own servers. Mail originating from those address blocks is generally assumed to be the result of spam-bots running on badly secured and compromised home systems. Avoiding this is a matter of choosing your ISP carefully, or buying a VPS or similar (which generally don't suffer from automatic RBL listing.) SPF and DKIM are aids to improving deliverability -- combined with DMARC they basically offer an online registry of where email can be sent from for which domain and a protection against forgery; pretending to send a massage from a valid sender. You don't need them, but implementing such things will mean receivers are better able to trust that any message apparently from your system really is. For getting a personal system up and running, you can ignore them in the first instance and then retrofit later if you find therm necessary. Cheers, Matthew --UTI18fhC7D3dxRqjBwIsgN3OOQVtveVx5-- --Hmskj4OXOpWCXeJbvKnhs7C0KDaMpXb5N Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJXqDk1XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATc3oQAKzb6eRuYeOX4uhEMU+gTe6B PgoPysR8X7wuifde4t0Ku30KOzsvBq3z7xHkWX7criGuZs/8Ef/gYe+2GdtA8wru amOdPCsNMfxzraL6vjn73vt1IEulUWWMQLhskOH6PafNgE61SGv7Msic77UBxynH 3J4+vhqQyLNcILu9jZMGwYk8FIkuCBbY5h5EuZSFf+sf+iZAt6fLY2i5VLsS8ew/ /9g5Z2Xz8DsDMmJURpVCaFdPF7ny2TrkubHyvlXvHRcmpC9CgKF0ljxVDAujza3k BlmrpAFRbAe8tPowZBAQjOJRjSZ6Lf/IzlA5JmOU0ky48pps0Q3M+AUqCfglkFpW bm+TpcWpZ+rxlRiBt2rpH+SOCz5gnj9qgiu7MLsW39BrMVIZWbSQqR8+LaFX8lWq eQCazRcmxULG2+bhgH96k3FMCn8PTcuJfkmdOhol0iMzoEDVP3YVnYJcPz40P/R3 i6AxY1gECCX0iPFt2jLjFtYzpgH8oVBup9V+9SJcq2kXV+oHndqEyqrU3gv4nHG9 m+AZSPT5SnoCWPIq+pAbbUliP1j4/Oo2lW6PWx9/i/dIV/SYIHiRZUbRJmxQcBRP 68guzRQlsrppMyEYqnm4pcrqPyG05ag1UQRHkL+7aJk56of44Y7wF0tRCt977t4/ +SUrjjY9ocmFVUXM/w1x =nx33 -----END PGP SIGNATURE----- --Hmskj4OXOpWCXeJbvKnhs7C0KDaMpXb5N-- From owner-freebsd-questions@freebsd.org Mon Aug 8 07:54:02 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7B15ABB2839 for ; Mon, 8 Aug 2016 07:54:02 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 11F401972 for ; Mon, 8 Aug 2016 07:54:02 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id EABD0C4CD for ; Mon, 8 Aug 2016 07:53:58 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/EABD0C4CD; dkim=none; dkim-atps=neutral Subject: Re: Need advice for setting up mail server To: freebsd-questions@freebsd.org References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> <20160807181230.GD12411@len-t420.klaas> From: Matthew Seaman Message-ID: <2c14614d-5f7a-9f5d-da79-d68372ab824d@FreeBSD.org> Date: Mon, 8 Aug 2016 08:53:58 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <20160807181230.GD12411@len-t420.klaas> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="53fERks7kUr1hNWwaMlL2XNS5WbsjQWxk" X-Spam-Status: No, score=-1.2 required=5.0 tests=BAYES_00,SPF_SOFTFAIL autolearn=no autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 07:54:02 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --53fERks7kUr1hNWwaMlL2XNS5WbsjQWxk Content-Type: multipart/mixed; boundary="9dl7al6Ww6ROC8IVedpknuUg3NfeR5oVS" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: <2c14614d-5f7a-9f5d-da79-d68372ab824d@FreeBSD.org> Subject: Re: Need advice for setting up mail server References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> <20160807181230.GD12411@len-t420.klaas> In-Reply-To: <20160807181230.GD12411@len-t420.klaas> --9dl7al6Ww6ROC8IVedpknuUg3NfeR5oVS Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 07/08/2016 19:12, Niklaas Baudet von Gersdorff wrote: > I forgot to mention postscreen(8). For its functionality see >=20 > http://www.postfix.org/POSTSCREEN_README.html >=20 > I just learned about it some weeks ago, so I haven't tested it > yet. Anyway, I guess it's a cleverer and less resource hungry > solution than other anti-spam tool. postscreen is cool. It's a single fairly small process that handles the initial connection for inbound mail and it runs a number of fast and cheap anti-spam measures, like verifying the forward and reverse lookups of the EHLO name and remote IP number in the TCP connection. Once the incoming connection as passed this pre-screen, it gets handed of to the normal postfix smtpd process for processing: it's only at this stage that you'ld run heuristic anti-spam rules that do detailed analysis of message content. Cheers, Matthew --9dl7al6Ww6ROC8IVedpknuUg3NfeR5oVS-- --53fERks7kUr1hNWwaMlL2XNS5WbsjQWxk Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJXqDqWXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATA6EP/1v3Y3PM+UAiEqxIVhX6YpMA l0PpRcwcwY427F4HmLHjSMc7JIPuqiIPvJcmGOX1AWadz6e8uVpudoY0heY7taHa ZLeVtHpySQO4mbb2GcqISvwC/cbppCRGHwyoXHVv9Px1li6fCqGB6J0Jo/PEcy72 4SHNtmFowJe0UjQXW9xzeKFkkBkgz63Bmvg8BcSDgMTQfo9VCEFlUMDoBAn+S3Kn pbFpvHqKmYUppyD2DOLT204PvpZgv60zBeLsPLsOc63ypN2BF7a1+hbqSDn+MCpN zKniR61pVP6gX7Gox24g7vrUgNM5KoH1tC2IzmZGPvHhR/vvMQSERN9hpgOwoTB4 WsA6r8N/Xv3T54GKL3rgI23yhMfXP6MsqDQ81i6sRcLaRcATK//1NF9DF49K2pBQ 6GeRkAW9H+Zn/ElaAeVbWyqnIEykKcT8dqZvWCdaaThDP7a69z3T28CenjY6j92C ERqEWJYXNyHMQqp8/Ytlf8OtS9N/ErstZVBPDhYjYP9zU47pZ5yEs3KS+LkZfIyF j+QkuDJ305MBP97DlD8lUFcBNq9QndYLfnidm2EENvKp8Hk8IqhNJ0xuM4rr/d+N cN+bsANNC9dqhBREsMwwIjOC+4Z6bG94o5Q6fAxHyUX+A0QJQ9j+CMJQYNLRt5HG OC3YCEMIIS93e0h+vl4j =g2d4 -----END PGP SIGNATURE----- --53fERks7kUr1hNWwaMlL2XNS5WbsjQWxk-- From owner-freebsd-questions@freebsd.org Mon Aug 8 08:19:19 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2D1A9BB1EBB; Mon, 8 Aug 2016 08:19:19 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from mx.box-hlm-02.niklaas.eu (box-hlm-02.niklaas.eu [84.22.107.175]) by mx1.freebsd.org (Postfix) with ESMTP id D41391BD8; Mon, 8 Aug 2016 08:19:17 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from box-hlm-03.niklaas.eu (box-hlm-03.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:feaa:e902]) by mx.box-hlm-02.niklaas.eu (Postfix) with ESMTPSA id C4E6E1C9797; Mon, 8 Aug 2016 10:19:15 +0200 (CEST) Date: Mon, 8 Aug 2016 10:19:10 +0200 From: Niklaas Baudet von Gersdorff To: freebsd-questions@freebsd.org, freebsd-pf@freebsd.org Subject: Re: Firewalling jails and lo0 Message-ID: <20160808081910.GA27370@box-hlm-03.niklaas.eu> Reply-To: stdin@niklaas.eu Mail-Followup-To: freebsd-questions@freebsd.org, freebsd-pf@freebsd.org References: <20160806155411.GA5289@len-t420.klaas> <3C1C4822-17C2-42D9-A9BE-C3549B9B6F25@lists.zabbadoz.net> <20160807082651.GA87754@box-hlm-03.niklaas.eu> <57A743A8.10005@gmail.com> <20160807152347.GA9178@len-t420.klaas> <57A76DF6.6090905@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <57A76DF6.6090905@gmail.com> User-Agent: Mutt/1.6.1 (2016-04-27) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 08:19:19 -0000 Ernie Luzar [2016-08-07 13:20 -0400] : > > Aha. So once I assigned those traffic from/to jails should go > > through lo1 solely? > > YES. Thank you for clarifying that and your help. So, I attached additional IP addresses on the jail host side accordingly: lo1: flags=8049 metric 0 mtu 16384 options=600003 [...] inet 127.77.0.1 netmask 0xff000000 inet6 ::77:0:0:0:1 prefixlen 128 nd6 options=21 However, I still see packets being transmitted over lo0. What I tried then was attaching loopback addresses to the jails, like 127.77.2.1/8 and ::77:0:0:2:1/128. I did that for two jails (each on a different subnet) and checked with telnet whether they would start communicating over lo1. They didn't though. > I am still missing info on your jail.conf. Post the jail.conf file for the > jails in question. The following is an extract of /etc/jail.conf. 1 $box = "box-hlm-03"; 2 $box_jail_net = "3"; 3 4 $private_ip4 = "10.$box_jail_net.$network.$id"; 5 $private_ip4_prefixlen = "16"; 6 $private_ip6 = "fd16:dcc0:f4cc:$box_jail_net::$network:$id"; 7 $private_ip6_prefixlen = "64"; 8 $local_ip4 = "10.77.$network.$id"; 9 $local_ip6 = "fd16:dcc0:f4cc:77::$network:$id"; 10 $loopback_ip4 = "127.77.$network.$id"; 11 $loopback_ip6 = "0:0:0:77::$network:$id"; 12 $loopback_ip4_prefixlen = "8"; 13 $loopback_ip6_prefixlen = "128"; 14 15 host.hostname = "$name.$box.klaas"; 16 path = "/usr/local/jails/$name"; 17 ip4.addr = "lo1|$private_ip4/$private_ip4_prefixlen"; 18 ip6.addr = "lo1|$private_ip6/$private_ip6_prefixlen"; 19 ip4.addr += "lo1|$local_ip4/$private_ip4_prefixlen"; 20 ip6.addr += "lo1|$local_ip6/$private_ip6_prefixlen"; 21 ip4.addr += "lo1|$loopback_ip4/$loopback_ip4_prefixlen"; 22 ip6.addr += "lo1|$loopback_ip6/$loopback_ip6_prefixlen"; 23 mount = "/usr/local/jails/templates/base-10.3-RELEASE /usr/local/jails/$name nullfs ro 0 0"; 24 mount += "/usr/local/jails/thinjails/$name /usr/local/jails/$name/jail nullfs rw 0 0"; 25 mount.devfs; 26 27 exec.start = "/bin/sh /etc/rc"; 28 exec.stop = "/bin/sh /etc/rc.shutdown"; 29 exec.clean; 30 31 exec.prestart = "pfctl -t $class -T add $private_ip4 $private_ip6 $local_ip6 $local_ip4"; 32 exec.prestop = "pfctl -t $class -T delete $private_ip4 $private_ip6 $local_ip6 $local_ip4"; 33 34 exec.consolelog = "/usr/local/jails/$name.log"; 35 36 proxy1 { 37 host.hostname = "$name.$box.niklaas.eu"; 38 $network = 2; 39 $id = 1; 40 $class = "proxy"; 41 exec.poststart += "echo 'rdr pass inet6 proto tcp to ( vtnet0 ) port { http https imaps submission smtp } -> $private_ip6' | pfctl -a 'jails/$name-ipv6' -f -"; 42 exec.poststart += "echo 'rdr pass inet proto tcp to ( vtnet0 ) port { http https imaps submission smtp } -> $private_ip4' | pfctl -a 'jails/$name-ipv4' -f -"; 43 exec.poststop += "pfctl -a jails/$name-ipv6 -F all"; 44 exec.poststop += "pfctl -a jails/$name-ipv4 -F all"; 45 } 46 47 smtp1 { 48 host.hostname = "mx.$box.niklaas.eu"; 49 $network = 8; 50 $id = 1; 51 $class = "mail"; 52 } > Also what services are running on the host that you want to > communicate with the smtp jail. You have to change the smtp > config file to tell it to use the new lo1:127.0.10.2 ip address > and you have to do the same thing for what ever host service > will communicate with the smtp jail. They all have to be using > the same lo1:127.0.10.2 ip. Most admin just keep those types of > services on the host because its just easier. I am not sure whether I really want to do what you think I want to. :-) I would like to restrict the jails to solely use the interface they have an IP address attached to -- regardless of the running services in them. The only reason why I intend such a restriction is to limit the damage a potentially malicious jail can cause to other jails. If I configured the services to listen on the address you described above -- while I might make them use lo1 exclusively -- this would not prevent any malicious program from using lo0. My issue can be reduced to the question: When using jails, to secure network traffic as best as I can, do I have to enable the firewall on lo0 or is enabling it on the interface they are attached to (in my case lo1) enough? And: What do I need to do to restrict jails from using lo0? Sorry, if I misunderstood you. Niklaas From owner-freebsd-questions@freebsd.org Mon Aug 8 09:44:36 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AC5D3BB2C5C for ; Mon, 8 Aug 2016 09:44:36 +0000 (UTC) (envelope-from entertaimentt@mail.ru) Received: from fallback5.mail.ru (fallback5.mail.ru [94.100.181.253]) by mx1.freebsd.org (Postfix) with ESMTP id 5CA64130A for ; Mon, 8 Aug 2016 09:44:35 +0000 (UTC) (envelope-from entertaimentt@mail.ru) Received: from f376.i.mail.ru (f376.i.mail.ru [217.69.141.18]) by fallback5.mail.ru (mPOP.Fallback_MX) with ESMTP id C41E7BA4B324 for ; Mon, 8 Aug 2016 12:40:24 +0300 (MSK) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mail.ru; s=mail2; h=Content-Type:Message-ID:Reply-To:Date:MIME-Version:Subject:To:From; bh=zS7fhx0cXKxybgTVezTgx2ZblZknuQlCjJmjo5b8Ruw=; b=hWklEyJa1V3gY8wOs6wKIrBi+pa8yqs43UDPq5s18M+S4Qs2mXKeKAB/7CNdmARBsj7DDgCfqbNJDr9oBpJzHzWVJiBRoeNtII6WqyVAf1KKCeyBJ5J05yP/1oCb7/oJmyQGzluZj1gw3ZLSYl7uv022H/UWgcIMtVkaZudFCdA=; Received: from [188.210.240.246] (ident=mail) by f376.i.mail.ru with local (envelope-from ) id 1bWh2T-0000I8-R4 for freebsd-questions@freebsd.org; Mon, 08 Aug 2016 12:40:05 +0300 Received: from [188.210.240.246] by e.mail.ru with HTTP; Mon, 08 Aug 2016 12:40:05 +0300 From: =?UTF-8?B?YWJkdWxvdiBlbnRlcnRhaW1lbnR0?= To: =?UTF-8?B?ZnJlZWJzZC1xdWVzdGlvbnM=?= Subject: =?UTF-8?B?cGhwNTI=?= MIME-Version: 1.0 X-Mailer: Mail.Ru Mailer 1.0 X-Originating-IP: [188.210.240.246] Date: Mon, 08 Aug 2016 12:40:05 +0300 Reply-To: =?UTF-8?B?YWJkdWxvdiBlbnRlcnRhaW1lbnR0?= X-Priority: 3 (Normal) Message-ID: <1470649205.240226424@f376.i.mail.ru> X-Mailru-Sender: 98409FA7163DE36764D7E713F90D5CC2F5609976F95CEB74F0537723A09491E4CCA64FD9A7E4381CA035D568507C15B2 X-Mras: OK X-Spam: undefined Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 09:44:36 -0000 IEkgbmVlZCB0byBpbnN0YWxsIGFuIG9sZGVyIHZlcnNpb24gb2YgcGhwNTIgLCBpdCBpcyBub3Qg aW4gdGhlIHBvcnRzICwgcGhwNTIgbmVlZCBmb3Igb2xkZXIgZW5naW5lcyBzaXRlICwgaG93IGRv IEkgaW5zdGFsbCB0aGlzIHZlcnNpb24gb2YgcGhwID/CoA== From owner-freebsd-questions@freebsd.org Mon Aug 8 09:52:40 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B0FEEBB2E40; Mon, 8 Aug 2016 09:52:40 +0000 (UTC) (envelope-from solene@perso.pw) Received: from bsd.zplay.eu (perso.pw [62.210.240.224]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "bsd.zplay.eu", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id E3EF117CE; Mon, 8 Aug 2016 09:52:39 +0000 (UTC) (envelope-from solene@perso.pw) Received: from bsd.zplay.eu (localhost [127.0.0.1]) by bsd.zplay.eu (OpenSMTPD) with ESMTP id b5c1e172; Mon, 8 Aug 2016 11:52:35 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=perso.pw; h=to:subject :mime-version:content-type:content-transfer-encoding:date:from :cc:in-reply-to:references:message-id; s=selector1; bh=WvNIiYqLO Sq3+WN164+639SXSAs=; b=hBGiRq2jejNZWvm+MhpYMkLZ9dy/IjoHauNBg9p5J cK0VCYHEgLzdCuAONCt2zwIxZdN9AX0KeeVi7FghmfsueolxoOKBazYwbPTFNy1h hA+cz8r1h4tm8Q1OwFuKA2ffcT02PLE7rbZRIAkYP8Ily5p6xA7DgLXjyFcW0v3E 6w= DomainKey-Signature: a=rsa-sha1; c=nofws; d=perso.pw; h=to:subject :mime-version:content-type:content-transfer-encoding:date:from :cc:in-reply-to:references:message-id; q=dns; s=selector1; b=kFG fIHw0Daw7pQuFHQ4j8AA0vBkFC1L7EDsM/rjn7z82n40evy1ws/qdM0vQhN6hFxr +kpJ4VHkFkG2EuCkaSaYu8tDxbTRVZyknYKStXZgeiKwXX7d0ccSxbp0oa7KAFSB 1OcxZ9qTSK+8e6Es6ArWnU9yFKvJ0D8GoLRrLi0M= Received: from localhost (bsd.zplay.eu [local]) by bsd.zplay.eu (OpenSMTPD) with ESMTPA id 77f1dc8a; Mon, 8 Aug 2016 11:52:34 +0200 (CEST) To: abdulov entertaimentt Subject: Re: php52 X-PHP-Originating-Script: 0:rcube.php MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Mon, 08 Aug 2016 11:52:34 +0200 From: =?UTF-8?Q?Sol=C3=A8ne_Rapenne?= Cc: freebsd-questions , owner-freebsd-questions@freebsd.org In-Reply-To: <1470649205.240226424@f376.i.mail.ru> References: <1470649205.240226424@f376.i.mail.ru> Message-ID: <41004e8b971128ab5edf35d427873780@mail.zplay.eu> X-Sender: solene@perso.pw User-Agent: Roundcube Webmail/1.2.0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 09:52:40 -0000 Le 2016-08-08 11:40, abdulov entertaimentt via freebsd-questions a écrit : > I need to install an older version of php52 , it is not in the ports , > php52 need for older engines site , how do I install this version of > php ?  > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" Hello, I have been in the same case as you but with php53. I would recommend you to set-up a poudriere environment and create within it a ports tree using svn and then change the revision of the svn ports. https://www.freshports.org/lang/php52/ lead to http://svnweb.freebsd.org/ports?view=revision&revision=346583 Checkout the revision 346582 (which is 346583 minus 1 to not have php52 removed) of the ports tree. You may encounter breakages because distfiles may not be available on the mirrors anymore, you may need to find them and put it in the distfiles folder. Also, I won't recommend using php52 websites available publicly on the Internet. From owner-freebsd-questions@freebsd.org Mon Aug 8 11:26:01 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 43A72BB2B21 for ; Mon, 8 Aug 2016 11:26:01 +0000 (UTC) (envelope-from Ben.Lavery@capita.co.uk) Received: from cluster-e.mailcontrol.com (cluster-e.mailcontrol.com [85.115.58.190]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.mailcontrol.com", Issuer "DigiCert SHA2 High Assurance Server CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6CD3113CE for ; Mon, 8 Aug 2016 11:25:59 +0000 (UTC) (envelope-from Ben.Lavery@capita.co.uk) Received: from CAPPRWMEEG01.capita.co.uk ([195.89.201.254]) by rly10e.srv.mailcontrol.com (MailControl) with ESMTPS id u78Ajpg1036790 (version=TLSv1 cipher=AES128-SHA bits=128 verify=FAIL) for ; Mon, 8 Aug 2016 11:48:35 +0100 Received: from CAPPRWMEHC01.central.ad.capita.co.uk (10.154.131.162) by CAPPRWMEEG01.capita.co.uk (10.154.64.241) with Microsoft SMTP Server (TLS) id 14.3.294.0; Mon, 8 Aug 2016 11:48:42 +0100 Received: from edge.capita.co.uk (10.154.64.241) by CAPPRWMEHC01.central.ad.capita.co.uk (10.154.131.162) with Microsoft SMTP Server (TLS) id 14.3.294.0; Mon, 8 Aug 2016 11:48:25 +0100 Received: from EUR02-HE1-obe.outbound.protection.outlook.com (213.199.180.182) by edge.capita.co.uk (10.154.64.241) with Microsoft SMTP Server (TLS) id 14.3.294.0; Mon, 8 Aug 2016 11:48:39 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=capita.onmicrosoft.com; s=selector1-capita-co-uk; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=9p3Hh0bVZKwh8RwADz3tLZkJLKwTdS2nF5ZDja8x7/k=; b=c9mW9keG0eQQb1uD7KgoVWLJCwVEiRFAvAGj+ydqym0Vq0uGbV/94giOTm6LOltcAjQNzB4B1bUD1orTY4vzOErQE9c4VLlmZxWLqmoNFHn2Pbh53B+6e3+s1YIsD2a3F8S5WK+apArOY3DW8lktnc/a7XV9rKy7BO1BbS24S2Q= Received: from AM3PR04MB1202.eurprd04.prod.outlook.com (10.163.6.148) by AM3PR04MB1202.eurprd04.prod.outlook.com (10.163.6.148) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.557.8; Mon, 8 Aug 2016 10:48:18 +0000 Received: from AM3PR04MB1202.eurprd04.prod.outlook.com ([fe80::6197:3592:b365:95ab]) by AM3PR04MB1202.eurprd04.prod.outlook.com ([fe80::6197:3592:b365:95ab%14]) with mapi id 15.01.0557.009; Mon, 8 Aug 2016 10:48:18 +0000 From: "Lavery, Benjamin (IT Enterprise Services)" To: "freebsd-questions@freebsd.org" Subject: FW: Serial redirection halts on Dell PowerEdge 1955 Blade (mfsBSD) Thread-Topic: Serial redirection halts on Dell PowerEdge 1955 Blade (mfsBSD) Thread-Index: AdHu+A/aAVoMm0dQTau1lXQn8/FjBwCahrWg Date: Mon, 8 Aug 2016 10:48:18 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Ben.Lavery@capita.co.uk; x-originating-ip: [82.203.17.6] x-ms-office365-filtering-correlation-id: c72a3a54-5350-4263-469f-08d3bf79826a x-microsoft-exchange-diagnostics: 1; AM3PR04MB1202; 20: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 x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AM3PR04MB1202; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(17755550239193); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046); SRVR:AM3PR04MB1202; BCL:0; PCL:0; RULEID:; SRVR:AM3PR04MB1202; x-forefront-prvs: 00286C0CA6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(66654002)(189002)(199003)(2351001)(86362001)(105586002)(7846002)(101416001)(106356001)(5640700001)(87936001)(66066001)(2900100001)(3280700002)(3660700001)(586003)(19580405001)(92566002)(3846002)(19580395003)(102836003)(54356999)(2501003)(7696003)(450100001)(5002640100001)(8676002)(81166006)(189998001)(50986999)(305945005)(8936002)(74316002)(9686002)(76576001)(110136002)(5250100002)(11100500001)(99936001)(68736007)(74482002)(5890100001)(81156014)(2906002)(33656002)(107886002)(6116002)(97736004)(7736002)(357404004); DIR:OUT; SFP:1102; SCL:1; SRVR:AM3PR04MB1202; H:AM3PR04MB1202.eurprd04.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:; received-spf: None (protection.outlook.com: capita.co.uk does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Aug 2016 10:48:18.6720 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 1edaad83-b2ef-483d-81f1-2c48682f40ec X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM3PR04MB1202 X-ExSBR-Organization: edge.capita.co.uk X-OriginatorOrg: capita.co.uk X-Scanned-By: MailControl 44278.1378 (www.mailcontrol.com) on 10.69.0.120 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 11:26:01 -0000 Good morning all, (Apologies, cross-posting from freebsd-hardware) I have been given an old Dell PowerEdge chassis filled with PowerEdge 1955 = blades. I also have a FreeNAS which I'm using to serve DHCP addresses and = TFTP for PXE booting. I can get the blades to PXE boot (I'm using pxelinux to load mfsbsd-10.3-RE= LEASE-amd64), but the serial redirection is only working for the first part= of the boot sequence. After select mfsBSD at the menu, I get the followin= g (verbose boot chosen at the boot menu): Loading memdisk... ok ok e820: 0000000000000000 00000000000a0000 1 e820: 0000000000100000 00000000cfea8000 1 e820: 00000000cffa8000 000000000000fc00 3 e820: 00000000cffb7c00 0000000000048400 2 Total size needed =3D 2513 bytes, allocating 3K Old dos memory at 0x8a000 (map says 0xa0000), loading at 0x89400 1588: 0xffff 15E801: 0x3c00 0xcbba INT 13 08: Success, count =3D 1, BPT =3D 0000:0000 Drive probing gives drive shift limit: 0x82 old: int13 =3D ca001da6 int15 =3D f000f859 int1e =3D f000efc7 new: int13 =3D 8940000a int15 =3D 894003ba int1e =3D f000efc7 Loading boot sector... booting... /boot/config: -D =20=20=20=20 FreeBSD/x86 boot Default: 0:ad(0p2)/boot/loader boot: BTX loader 1.00 BTX version is 1.02 console comconsole failed to initialize Consoles: internal video/keyboard serial port BIOS drive A: is disk0 BIOS drive C: is disk1 BIOS drive D: is disk2 BIOS 549kB/3353216kB available memory =20=20=20=20 FreeBSD/x86 bootstrap loader, Revision 1.1 (root@releng1.nyi.freebsd.org, Fri Mar 25 02:04:38 UTC 2016) \oading /boot/defaults/loader.conf lapic3: Routing NMI -> LINT1 lapic3: LINT1 trigger: edge lapic3: LINT1 polarity: high lapic7: Routing NMI -> LINT1 lapic7: LINT1 trigger: edge lapic7: LINT1 polarity: high MADT: Interrupt override: source 0, irq 2 ioapic0: Routing IRQ 0 -> intpin 2 MADT: Interrupt override: source 9, irq 9 ioapic0: intpin 9 trigger: level ioapic0 irqs 0-23 on motherboard ioapic1 irqs 32-55 on motherboard ioapic2 irqs 192-215 on motherboard cpu0 BSP: ID: 0x00000000 VER: 0x00050014 LDR: 0x00000000 DFR: 0xffffffff lint0: 0x00010700 lint1: 0x00000400 TPR: 0x00000000 SVR: 0x000001ff timer: 0x000100ef therm: 0x00010000 err: 0x000000f0 pmc: 0x00010400 wlan: <802.11 Link Layer> snd_unit_init() u=3D0x00ff8000 [512] d=3D0x00007c00 [32] c=3D0x000003ff= [1024] feeder_register: snd_unit=3D-1 snd_maxautovchans=3D16 latency=3D5 feede= r_rate_min=3D1 fe eder_rate_max=3D2016000 feeder_rate_round=3D25 null: nfslock: pseudo-device =91=91=91=91=91=91=91=91=91=91=91 The odd glitch (=91) is me trying to input after output stops. I'm accessi= ng the console by TELNETing to the blade chassis, and connecting to the bla= de console. I believe this runs at a baud rate of 57600. Because of this = I've modified the following files within mfsBSD: etc/ttys (from inside mfsroot.gz) # Serial terminals ttyu0 "/usr/libexec/getty std.57600" vt100 on secure ttyu1 "/usr/libexec/getty std.57600" dialup on secure ttyu2 "/usr/libexec/getty std.57600" vt100 off secure ttyu3 "/usr/libexec/getty std.57600" vt100 off secure # Dumb console dcons "/usr/libexec/getty std.9600" vt100 off secure boot/loader.conf boot_multicons=3D"YES" boot_serial=3D"YES" comconsole_speed=3D"57600" console=3D"comconsole" The Java console from the chassis web interface doesn't work on my laptop, = but via another server I've been able to grab the attached screenshot. It = states: getty[706]: open /dev/ttyu0: No such file or directory Unfortunately the Java console doesn't work well enough for me to use to lo= g in and get at any settings (getting it to load that far took 10 minutes..= .) The blades BIOS is set up to redirect to COM2 (it's either that or be disab= led) and to emulate vt100/vt200 (could also be ANSI, but this doesn't seem = to allow input). Would anyone have any ideas about how I can get console redirection working= past this point? Or where I can look to get more information? Many thanks, Ben This email is security checked and subject to the disclaimer on web-page: h= ttp://www.capita.co.uk/email-disclaimer.aspx From owner-freebsd-questions@freebsd.org Mon Aug 8 14:52:05 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1F8DABB26DB for ; Mon, 8 Aug 2016 14:52:05 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.70.90]) by mx1.freebsd.org (Postfix) with ESMTP id D44DE1513 for ; Mon, 8 Aug 2016 14:52:04 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id A7A9BCB8CA1; Mon, 8 Aug 2016 09:51:58 -0500 (CDT) Received: from 128.135.52.6 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Mon, 8 Aug 2016 09:51:58 -0500 (CDT) Message-ID: <33245.128.135.52.6.1470667918.squirrel@cosmo.uchicago.edu> In-Reply-To: <20160808063138.GA20037@box-hlm-03.niklaas.eu> References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> <44D296EC-FA25-4279-9501-8BB6B2DD86A6@mail.sermon-archive.info> <20160808063138.GA20037@box-hlm-03.niklaas.eu> Date: Mon, 8 Aug 2016 09:51:58 -0500 (CDT) Subject: Re: Need advice for setting up mail server From: "Valeri Galtsev" To: freebsd-questions@freebsd.org Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 14:52:05 -0000 On Mon, August 8, 2016 1:31 am, Niklaas Baudet von Gersdorff wrote: > Doug Hardie [2016-08-07 14:17 -0700] : > >> I am running spamd (obspamd last time I checked) on the mail > > It's mail/spamd in ports and `obspamd` in /etc/rc.d. > >> server for a medium sized ISP. It has never worked the way the >> documentation describes. However, it has been useful. When >> I first installed it, around 90% of the email being received >> was dropped. It blocks drive-by spammers who don't queue and >> retry on TMP_FAILs. Unfortunately, it appears that many >> spammers now can afford the disk and processor resources to >> enable queueing and retrying so its usefulness is diminishing. > > I also made bad experiences with its greylisting function. (I'm > not a big fan of greylisting anyway.) That's why I use it's > blocking function only: > > obspamd_enable="YES" > obspamd_flags="-l 127.0.0.1 -b" > > And for PF I have > > table persist > > rdr pass on $ext_if inet proto tcp from to any port smtp -> > 127.0.0.1 port spamd > rdr pass on $ext_if inet6 proto tcp from to any port smtp -> > ::ffff:127.0.0.1 port spamd > > In /usr/local/etc/spamd/spamd.conf I use two of the example > lists: > > all:\ > :uatraps:nixspam: > > # University of Alberta greytrap hits. > # Addresses stay in it for 24 hours from time they misbehave. > uatraps:\ > :black:\ > :msg="Your address %A has sent mail to a ualberta.ca spamtrap\n\ > within the last 24 hours":\ > :method=http:\ > :file=www.openbsd.org/spamd/traplist.gz > > # Nixspam recent sources list. > # Mirrored from http://www.heise.de/ix/nixspam > nixspam:\ > :black:\ > :msg="Your address %A is in the nixspam list\n\ > See http://www.heise.de/ix/nixspam/dnsbl_en/ for details":\ > :method=http:\ > :file=www.openbsd.org/spamd/nixspam.gz > > What I like about the concept is that false positives will get > a reply that their mail was considered spam. This way they can > try to contact me over a different channel. Hi Niklaas, quick question here. The alleged spam message was never accepted here, instead "SMTP error is generated" telling one of the reasons above, right? In other words, this will not be a source of "backscatter" (to the contrary to accepting message then sending non-delivery notification to sender whose address could have been forged). Thanks for this! Valeri > > The problem I see with "traditional" spam checking (moving spam > into a spam folder) is that the sender does not know whether > their mail was classified as spam or not. And the other way > I don't have to check a spam folder for false positives. > > I must confess though > > 1. I trust the quality of the blacklists. > > 2. The mail servers where I'm using mail/spamd at the moment > don't get lots of traffic. So I can't really tell how > efficient that is. > > I just started using postscreen(8) and will see whether the > combination of mail/spamd and postscreen(8) is a good one. I hope > that I don't have to opt for mail/spamassassin because I find it > difficult to configure. > > Niklaas > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Mon Aug 8 16:10:50 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C8E13BB2E9F; Mon, 8 Aug 2016 16:10:50 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from mx1.sbone.de (bird.sbone.de [46.4.1.90]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "mx1.sbone.de", Issuer "SBone.DE" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 88D9D175F; Mon, 8 Aug 2016 16:10:49 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from mail.sbone.de (mail.sbone.de [IPv6:fde9:577b:c1a9:31::2013:587]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mx1.sbone.de (Postfix) with ESMTPS id 2D39E25D3857; Mon, 8 Aug 2016 16:10:41 +0000 (UTC) Received: from content-filter.sbone.de (content-filter.sbone.de [IPv6:fde9:577b:c1a9:31::2013:2742]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.sbone.de (Postfix) with ESMTPS id 4B4D2D1F80E; Mon, 8 Aug 2016 16:10:40 +0000 (UTC) X-Virus-Scanned: amavisd-new at sbone.de Received: from mail.sbone.de ([IPv6:fde9:577b:c1a9:31::2013:587]) by content-filter.sbone.de (content-filter.sbone.de [fde9:577b:c1a9:31::2013:2742]) (amavisd-new, port 10024) with ESMTP id TTaw63xz81jh; Mon, 8 Aug 2016 16:10:38 +0000 (UTC) Received: from [10.248.105.13] (fresh-tun0-ula.sbone.de [IPv6:fde9:577b:c1a9:4920:2ef0:eeff:fe03:ee34]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mail.sbone.de (Postfix) with ESMTPSA id 1050AD1F7F9; Mon, 8 Aug 2016 16:10:37 +0000 (UTC) From: "Bjoern A. Zeeb" To: "Niklaas Baudet von Gersdorff" Cc: freebsd-questions@freebsd.org, freebsd-pf@freebsd.org Subject: Re: Firewalling jails and lo0 Date: Mon, 08 Aug 2016 16:10:36 +0000 Message-ID: <474892D3-A01C-43B2-AF07-E383CD81188E@lists.zabbadoz.net> In-Reply-To: <20160808081910.GA27370@box-hlm-03.niklaas.eu> References: <20160806155411.GA5289@len-t420.klaas> <3C1C4822-17C2-42D9-A9BE-C3549B9B6F25@lists.zabbadoz.net> <20160807082651.GA87754@box-hlm-03.niklaas.eu> <57A743A8.10005@gmail.com> <20160807152347.GA9178@len-t420.klaas> <57A76DF6.6090905@gmail.com> <20160808081910.GA27370@box-hlm-03.niklaas.eu> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (2.0BETAr6043) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Aug 2016 16:10:50 -0000 On 8 Aug 2016, at 8:19, Niklaas Baudet von Gersdorff wrote: > Ernie Luzar [2016-08-07 13:20 -0400] : > >>> Aha. So once I assigned those traffic from/to jails should go >>> through lo1 solely? >> >> YES. > > Thank you for clarifying that and your help. So, I attached > additional IP addresses on the jail host side accordingly: … > My issue can be reduced to the question: When using jails, to > secure network traffic as best as I can, do I have to enable the > firewall on lo0 or is enabling it on the interface they are > attached to (in my case lo1) enough? > > And: What do I need to do to restrict jails from using lo0? The problem I think is that the routes (see one of your earlier emails) for the jail loopback IP addresses are pointing to lo0 and not lo1. If you’d manually issue a route change -host -inet6 fd16:dcc0:f4cc:3::2:1 -iface lo1 Hmm probably not… root@rabbit4:~ # ifconfig lo1 create lo1: bpf attached root@rabbit4:~ # ifconfig lo1 inet6 fd16:dcc0:f4cc:3::2:1/128 alias root@rabbit4:~ # route get -inet6 fd16:dcc0:f4cc:3::2:1 route to: fd16:dcc0:f4cc:3::2:1 destination: fd16:dcc0:f4cc:3::2:1 fib: 0 interface: lo0 flags: recvpipe sendpipe ssthresh rtt,msec mtu weight expire 0 0 0 0 16384 1 0 root@rabbit4:~ # route change -host -inet6 fd16:dcc0:f4cc:3::2:1 -iface lo1 change host fd16:dcc0:f4cc:3::2:1: gateway lo1 fib 0 root@rabbit4:~ # route get -inet6 fd16:dcc0:f4cc:3::2:1 route to: fd16:dcc0:f4cc:3::2:1 destination: fd16:dcc0:f4cc:3::2:1 fib: 0 interface: lo0 flags: recvpipe sendpipe ssthresh rtt,msec mtu weight expire 0 0 0 0 16384 1 0 Still points to lo0. That is interesting. I think at this point you have to assume packets go over lo0 and firewall there. I wonder if this is a bug or a feature … /bz From owner-freebsd-questions@freebsd.org Tue Aug 9 10:12:43 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4B91DBB1190 for ; Tue, 9 Aug 2016 10:12:43 +0000 (UTC) (envelope-from taceant@gmail.com) Received: from mail-wm0-x234.google.com (mail-wm0-x234.google.com [IPv6:2a00:1450:400c:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E9B2C12E3 for ; Tue, 9 Aug 2016 10:12:42 +0000 (UTC) (envelope-from taceant@gmail.com) Received: by mail-wm0-x234.google.com with SMTP id f65so23299797wmi.0 for ; Tue, 09 Aug 2016 03:12:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=5ZgLTuiv3SQFMmGv/AQxu4M5dB0d3UH2VlCQ+S+qyTk=; b=gUdKNSL133XKtGMpyjf7y0oOmalwxl152Yyywy1XEfqtnh0OS45zkUpuEZRoEmtmkD SQSin+oqdYGP7DL+g50e0DEPb5w4CFSZKvvgQCPjYVoBw2TXVF8QIQJFQgEzUXrt73MC 22nHimnvTqytaKCQu9roM+0awE+Gsts0TXbAWBZJ0DcNWWN2cqFNU1fApmPkXaCnwcUi Sj090UyN3uoOHQU6hxi+xMZDf7aOvauh2j/b18zRQHr2A0wjHm1Ka6cfW2DKFRusXj0I IQaQ+tF2ranHaab6e/EgDRxiUWemtFYoYEjcG1psOnpo0vM0oTNqKNgevTJGHNitc7VR wzHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=5ZgLTuiv3SQFMmGv/AQxu4M5dB0d3UH2VlCQ+S+qyTk=; b=HquY0g7E99XB3D4WaolVx+qsrJKRNtm7tBJAwUfjvIZ5rkYh89JDIhW2234QaTIJtd sYqJYZQ+DVdCDpjrNgKzCdZ9AY3MChPd4KwRyEtVyu/W+YlpcP8XLcOWYyQv0M9nRURp X8K0rkzS+YHnK7bA3G0DnTXnJUoqleelcpvRSyyB8ER6roipaQFX4Wgf2QS0GEhAOeea tujkz16CSoRgWeW2NBlr4On8EP4G3AV1ADqho3Vq0mox1Wl9qDLQxj0oyBKk60KWlCTb 8siwWLBboQ0lvKZcJX1zmc3U/gM1yYgosyLV/lIcD/JYY3NnxP2vdyj50PnTwYZXOrhi wEqQ== X-Gm-Message-State: AEkooutDbZABth1BqJIcLooRx/+48lDzhkFxQ9yprNUpIK7P1ZkKvevJiVLjg7Qzdth0mgbuFdoBlda/Wdy5qQ== X-Received: by 10.28.0.203 with SMTP id 194mr21313119wma.29.1470737561156; Tue, 09 Aug 2016 03:12:41 -0700 (PDT) MIME-Version: 1.0 Received: by 10.195.13.99 with HTTP; Tue, 9 Aug 2016 03:12:40 -0700 (PDT) In-Reply-To: <20160802184142.GA45983@geeks.org> References: <20160802184142.GA45983@geeks.org> From: Taceant Omnes Date: Tue, 9 Aug 2016 11:12:40 +0100 Message-ID: Subject: Re: FreeBSD-10.3-RELEASE-amd64-memstick.img broken? To: Doug McIntyre Cc: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Aug 2016 10:12:43 -0000 On 2 August 2016 at 19:41, Doug McIntyre wrote: > I've tried multiple systems, multiple sticks and multiple machines to > burn it. For the life of me, I can not make 10.3 RELEASE amd64 > memstick boot, but I can for 10.2, 10.1 & 10.0 with no problems on any of > the cobinations of any of the hardware I have. > > Does anybody else have problems booting off this memory stick image? That image is fine, I have booted it several times on a old Dell PC. How did you burn it on the pen-drive? If you use dd it is good to run sync afterwards. From owner-freebsd-questions@freebsd.org Tue Aug 9 10:24:27 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 31821BB1729 for ; Tue, 9 Aug 2016 10:24:27 +0000 (UTC) (envelope-from tomek.cedro@gmail.com) Received: from mail-wm0-x244.google.com (mail-wm0-x244.google.com [IPv6:2a00:1450:400c:c09::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id BBE181AA2 for ; Tue, 9 Aug 2016 10:24:26 +0000 (UTC) (envelope-from tomek.cedro@gmail.com) Received: by mail-wm0-x244.google.com with SMTP id i138so2174135wmf.3 for ; Tue, 09 Aug 2016 03:24:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=xmXPe5aWPC990Sq7zqyRey/bs1lyfcLZv+GM3dJmiEA=; b=VcE7v2nYCHz7lJkJBhgQGI9yMZs6VHRBgbNcocSu0tcIInuc5po1F3BKwvBCNks88k K/ymwRzmCPKsL9FW6HX0WdiJl/2I28Xf2mHP9AFx+E4uNqlxZpfukqmEUr6pvlhPzOgS sd5+3g0s/M8HTxeUn/S/SzJtJMj6Lz9bkt93uM+C8fpdegj8nqgq/0ordqyUEft8OJMz KWsBTVK8EpIoCuJx4fuGreIh1tzbfdZoZARg8c/6EV8S8YGPr4uZYwDDGB0sH2ql/iyt Fz5Q/2LT3DwhiQ93T0V3fFykaUd2TJCKA9YA2h5nbvZbP1oEKYffC3EuXyFVQbK0XB/Z 6/yQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=xmXPe5aWPC990Sq7zqyRey/bs1lyfcLZv+GM3dJmiEA=; b=hw/6pO9Muezzwo2JQqrZCZy7PK9T5bTBnKop00NrSZNjbuuWU5AX0fd2bZD71YBNMi Io7WEc5zBLcTYVlCbN4Iyb7U5r10+FBaxEAWYNWN0TtpkOj56JjoMwbafbls8YkxpqLQ Qs0jkwsyHffxAYLPoaApyqNDCoL6NqADiOvlBDi/xwbr2l9RbdM4uuG+B3Az6KZQ8jpf IJDUCdPStVdpOgGGJc7/5F848WzeGQVOiWZiWurx3IfK9AwwRwyEoPo65EAUNlXx8ZMK ydcLPhiWDtsO1EVPtWg3JwcQtfHuZWQQoT32TJhxG2rA7LPs8rY6sShyjcjLQH2+Ki1U snBA== X-Gm-Message-State: AEkoousNG3/OMkmyj7u4o4dhkFPUtByOqan4/0b9IQ6sSDZTNt5tEiZKUhoYu7SneCG3LhuJFWOrizFje96WHA== X-Received: by 10.28.125.5 with SMTP id y5mr20956790wmc.103.1470738265197; Tue, 09 Aug 2016 03:24:25 -0700 (PDT) MIME-Version: 1.0 Sender: tomek.cedro@gmail.com Received: by 10.28.178.15 with HTTP; Tue, 9 Aug 2016 03:24:04 -0700 (PDT) In-Reply-To: References: <20160802184142.GA45983@geeks.org> From: CeDeROM Date: Tue, 9 Aug 2016 12:24:04 +0200 X-Google-Sender-Auth: Ui6mSpdvVjzqQfK5dCruKycxsOs Message-ID: Subject: Re: FreeBSD-10.3-RELEASE-amd64-memstick.img broken? To: Taceant Omnes Cc: Doug McIntyre , FreeBSD Questions Mailing List Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Aug 2016 10:24:27 -0000 On Tue, Aug 9, 2016 at 12:12 PM, Taceant Omnes wrote: > On 2 August 2016 at 19:41, Doug McIntyre wrote: > >> I've tried multiple systems, multiple sticks and multiple machines to >> burn it. For the life of me, I can not make 10.3 RELEASE amd64 >> memstick boot, but I can for 10.2, 10.1 & 10.0 with no problems on any of >> the cobinations of any of the hardware I have. >> >> Does anybody else have problems booting off this memory stick image? Some time ago I had problem to boot from USB IMG on a HP EliteBook, but that was some specific hardware/BIOS fault I did not track.. I used PXE instead.. maybe you got something similar. Have you tried booting from the same device on a different machine? Best regards :-) Tomek -- CeDeROM, SQ7MHZ, http://www.tomek.cedro.info From owner-freebsd-questions@freebsd.org Tue Aug 9 10:24:27 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 93E40BB1735 for ; Tue, 9 Aug 2016 10:24:27 +0000 (UTC) (envelope-from kraduk@gmail.com) Received: from mail-wm0-x233.google.com (mail-wm0-x233.google.com [IPv6:2a00:1450:400c:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1FED21AA3 for ; Tue, 9 Aug 2016 10:24:27 +0000 (UTC) (envelope-from kraduk@gmail.com) Received: by mail-wm0-x233.google.com with SMTP id o80so24604896wme.1 for ; Tue, 09 Aug 2016 03:24:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=jJtrv+DPQTvSxAmv8U2/HGzs8yreqqJ6R27HO82VJMw=; b=UFblnePoCNa43wBBhKd1PNnqJG+oJclAzjFCxdjYFCGjyyRMeBQlBZ6gYj70YERAGL eW1zmZrRuz0lVutdiokq/44iYq507If1eOJX7H0aHTDohMrsfNawQ4bd/XX+PjP5jWI9 tTqgB9VD4eykX+RAgYMdsTOzbpM1rjh+ICzROgbxCNwx2z+MtHat6O+uEZ+bs+zM9Q64 DcOtT7J5IxhZvDCjC5bduAIBO3P50RbwmGeCcoUO7zyBNu13xOxJV4eN58lopkwv6ivB Vk2U9wn32HCcPagTmGpipHsAYgf3+0Wun3bxK0PISImQ9o//0K5KfIdc+gSZIBi+7OGx bK0g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=jJtrv+DPQTvSxAmv8U2/HGzs8yreqqJ6R27HO82VJMw=; b=UbGcjovOdJ5RAVSideulEbiv1Wzae3T2HL9Sp5bG161HGVlnveDnwpQJ4zLopBLGiZ Zo6jieqzJZBRW3AgwkzvQxv4VsFk/Hj1mIGQEL8L9fz5n/bOwE+iKCaoIgANR7tVygCc a3OeFqNU6PPNbazG234rKdUq0j6pYzlKHlJ1xI6clUo3YUml1OBJioKeOHYyneeSqF7J gAqqmVZo+Cbx3SK/eY2XuOGgwnQmQ03s5XrxUN1Yll8/tg4kfmlt3/8vUIC+sHp2WuNq EUuuU8BhWiAqka/aCe0Bsb2VlQaWwDQBsOCZY+NXBwBYVs+BA+uF2IHuq1fm/a6SB6GB MIJg== X-Gm-Message-State: AEkoouvfm091fC4zH3VyARJbAnAmFO+KqoNT3Z3qLGkffSrGXqs7SWe2AVqI3BS2lmN0nVkrq0Kzth4LJwU+3w== X-Received: by 10.194.157.33 with SMTP id wj1mr34480395wjb.49.1470738265508; Tue, 09 Aug 2016 03:24:25 -0700 (PDT) MIME-Version: 1.0 Received: by 10.194.54.202 with HTTP; Tue, 9 Aug 2016 03:24:24 -0700 (PDT) In-Reply-To: <20160807165256.78074e54154e43d3a696b22d@sohara.org> References: <20160807165256.78074e54154e43d3a696b22d@sohara.org> From: krad Date: Tue, 9 Aug 2016 11:24:24 +0100 Message-ID: Subject: Re: Need advice for setting up mail server To: "Steve O'Hara-Smith" Cc: FreeBSD Questions Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Aug 2016 10:24:27 -0000 I would second exim, i have used it in big ISP installations so know it scales fairly well. Its config is also very human readable, and powerful. If your users are happy at the cli consider hooking procmail into the loop as well as that can do all sorts of funky things for sorting their mail. On the mailbox front make sure you use the maildir format, as its the simplest to manipulate/fix at the CLI and most reliable. On the dns side dnsmasq is good for small scale, and if it acts a dhcp it will also handle all you internal dynamic dns without to much hassle. I generally use it in conjunction with local_unbound as a forwarder, so I get some level of dns-sec support, even if its not end to end. It will also handle the ipv6 side of things as well if you have that available. If your isp doesnt provide ipv6 have a look at tunnelbroker.net. It's easy to setup (full instructions) On 7 August 2016 at 16:52, Steve O'Hara-Smith wrote: > On Sun, 7 Aug 2016 15:24:48 +0000 > Manish Jain wrote: > > > fo > > r me, the thing has to be easy to set up and maintain, rather than worry > > too much about eavesdropping/MITM. Thanks for any advice. Manish Jain > > I found it simplest to set up two MTAs (in jails) one for outgoing > mail (allows relay from inside the LAN only, uses my ISPs SMTP server as a > smarthost) running exim (I found it easy to configure) and one for incoming > mail (sendmail delivering via procmail and spamassassin to dovecot for > IMAP). > > Separating the two directions made it very easy to think about the > security of the configuration. > > For DNS there are many alternatives, but for simplicity there's > little to beat dnsmasq (perhaps not the most performant but good enough > for a smallish network). I had unbound and nsd running for my DNS for a > while, it was a *nightmare* that I never got working smoothly. > > -- > Steve O'Hara-Smith > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Tue Aug 9 14:07:44 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B913DBB428D for ; Tue, 9 Aug 2016 14:07:44 +0000 (UTC) (envelope-from mandrews@aimdigitalpros.com) Received: from mail-pf0-x22d.google.com (mail-pf0-x22d.google.com [IPv6:2607:f8b0:400e:c00::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 925DE150C for ; Tue, 9 Aug 2016 14:07:44 +0000 (UTC) (envelope-from mandrews@aimdigitalpros.com) Received: by mail-pf0-x22d.google.com with SMTP id x72so5522887pfd.2 for ; Tue, 09 Aug 2016 07:07:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aimdigitalpros-com.20150623.gappssmtp.com; s=20150623; h=to:subject:from:message-id:date:user-agent:mime-version; bh=TrTShzbXrDrZZ/LF1URduwdtomHXFRqI7KHil3ErdzQ=; b=fzEuvgCz7RGbOmZ5e23hsiynHTlmYMbuJeXVzDCHBFVJdZ7Zh13GuvdNOi9OXZYgw2 aglLIUSffsrqN/fin4FPs7ebIXeXUPzHhdFuzxSHwKtNtU30Sz7ogMoIxU9onuOiVzEI G7oVM52+AkmuUjxlBIY3RqVaMHrM5V9nVPPEKqw8IiaW1eSlOFiTQak+EUq/b6SChIjn y3+OUR7zW1OSYpzX1fi4Fk+jREIxaw0Op8U3+pbt3pxDolx9kIslikYGVQxz5wST7VdA P+sCEAvN+2r4z91fPh1pEwpZsJ76RxIv3L8DJNZEz1DnoRYfkJqaozN75NqqjKt1C2N/ USZw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:to:subject:from:message-id:date:user-agent :mime-version; bh=TrTShzbXrDrZZ/LF1URduwdtomHXFRqI7KHil3ErdzQ=; b=OdlOKSe5n6t1870vjsAgkKlb5CW+M6VXO4pAAHhY8F36rWf6aZjvwk/Zp2ur9Uw69a GNB5ujraruCIo2nQQNs/kDzxjj8JpUssT7A6sMtf5bU3zqAQjS4SYuyb6pt/7VLU7nIb 60v9x+oAHb5GWBicQ1z1MGkVStCQJGaCqXih7jp1Tk2qyIHyuB0sEG1cKcxAq6dwj/a2 4hg3A443jFKp0uSx1lvodHwstlLpomLQcHg3wylWaL6fX8KhImGZOmLz9hBEs6XQN4Sc p7J5RDB7OTRjRNWoRmevPARxpIy+AB98M5GF7cYSbk6uPBrOkLE2z1OtfITHWzY99m/q JoWw== X-Gm-Message-State: AEkooutM00W2mnE+1n+/HDXK0GtYJeWUhtPIRYknCEoMP1kdnRvQ7EyFo66jRb/JQKRPTw== X-Received: by 10.98.99.67 with SMTP id x64mr172903623pfb.26.1470751663873; Tue, 09 Aug 2016 07:07:43 -0700 (PDT) Received: from [127.0.0.1] ([103.6.157.158]) by smtp.gmail.com with ESMTPSA id s89sm56397490pfi.83.2016.08.09.07.07.41 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 09 Aug 2016 07:07:42 -0700 (PDT) To: freebsd-questions@freebsd.org Subject: Beer Enthusiasts List From: Mary Andrews Message-ID: <518575ab-3f95-3bca-87e1-c4c727f5e2ad@aimdigitalpros.com> Date: Tue, 9 Aug 2016 09:51:14 -0400 User-Agent: Mozilla/5.0 (Windows NT 6.3; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 X-Antivirus: avast! (VPS 160809-6, 08/09/2016), Outbound message X-Antivirus-Status: Clean Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Aug 2016 14:07:44 -0000 Hello, Hope my email finds you fine. A quick note to see if you would be interested in a discussion about *Beer Enthusiasts List* and the benefits it can bring your organization for your Marketing Initiatives. *Our Databases:-* *1.* Wine Enthusiasts *2.* Alcohol Enthusiasts *3.* Beverage Enthusiasts *4.* Liquor Enthusiasts *5.* Gift Buyers *6.* Food Enthusiasts *7.* Spa and Resort Visitors *8.* HNI List and more. *Information Fields:–* *Contact Name (First, Middle and Last Name), Mailing Address, List type and Opt-in email address.* We can also provide you with a sample list to check the fields available. Appreciate your quick response and thoughts. Thanks&Regards, Mary Andrews *Note:-* Please don't take this email as SPAM, as it has been sent by a real human being. The single purpose of this email is to extend the current offer about contributive guest posts. In case you are not interested, Just declare your refusal and we'll no longer bother you. . --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus From owner-freebsd-questions@freebsd.org Tue Aug 9 14:39:45 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6E81CBB4C58 for ; Tue, 9 Aug 2016 14:39:45 +0000 (UTC) (envelope-from afiskon@devzen.ru) Received: from relay11.nicmail.ru (relay11.nicmail.ru [195.208.3.7]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1939B1D2F for ; Tue, 9 Aug 2016 14:39:43 +0000 (UTC) (envelope-from afiskon@devzen.ru) Received: from [109.70.25.215] (port=51208 helo=e733) by f06.mail.nic.ru with esmtp (Exim 5.55) (envelope-from ) id 1bX7xg-000AvR-33 for freebsd-questions@freebsd.org; Tue, 09 Aug 2016 17:24:56 +0300 Received: from [93.174.131.138] (account afiskon@devzen.ru HELO e733) by proxy02.mail.nic.ru (Exim 5.55) with id 1bX7xf-00080z-0Q for freebsd-questions@freebsd.org; Tue, 09 Aug 2016 17:24:55 +0300 Date: Tue, 9 Aug 2016 17:23:45 +0300 From: Aleksander Alekseev To: freebsd-questions@freebsd.org Subject: Power consumption tuning Message-ID: <20160809172345.312117ac@e733> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Aug 2016 14:39:45 -0000 Hello. I'm exploring how power consumption could be tuned on FreeBSD 11.0. I discovered a few useful articles, for instance [1]. Also useful pieces of advice were given on IRC. Resulting list is for now like this: * Use lightweight software (i3, GTK based GUI applications, etc), turn off unused kernel modules, don't use full disc encryption, etc * Reduce CPU frequency (sysctl dev.cpu.0.freq), use powerd to do it automatically * Reduce display brightness (sudo pkg install intel-backlight) * Enable power save mode on NIC (sudo ifconfig wlan0 powersave) * Disable unused USB devices (sudo usbconfig -d X.Y power_off) * Reduce clock frequency (kern.hz = 100) * Make sure your kernel is built without INVARIANTS and WITNESS Perhaps there are other methods I didn't notice? For instance are there any other sysctl parameters or kernel configuration options worth trying? [1] https://wiki.freebsd.org/TuningPowerConsumption -- Best regards, Aleksander Alekseev From owner-freebsd-questions@freebsd.org Tue Aug 9 15:03:51 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 77D53BB441F; Tue, 9 Aug 2016 15:03:51 +0000 (UTC) (envelope-from solene@perso.pw) Received: from bsd.zplay.eu (perso.pw [62.210.240.224]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "bsd.zplay.eu", Issuer "StartCom Class 1 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id A1D6912E7; Tue, 9 Aug 2016 15:03:49 +0000 (UTC) (envelope-from solene@perso.pw) Received: from bsd.zplay.eu (localhost [127.0.0.1]) by bsd.zplay.eu (OpenSMTPD) with ESMTP id fdccff01; Tue, 9 Aug 2016 17:03:38 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=perso.pw; h=to:subject :mime-version:content-type:content-transfer-encoding:date:from :cc:in-reply-to:references:message-id; s=selector1; bh=PoxOtj/G/ vV3+QNkFFVIWOaJCFM=; b=IcCfQGWx8QpCCmup+b1UeUfAimyWIhTAJTrXOz1sN I+omkzcyHQvdl0VNBCuqr8DXv0gPrmNyh9fF3gNGFO7r56Rf1mg4Y5yJZLzICWKK YgAgmxOzxA64OsOxyIRkDFPFyaYTrVR8Ty5ey8sUK/pXQzEXHpdSRvasy39KCRd9 uU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=perso.pw; h=to:subject :mime-version:content-type:content-transfer-encoding:date:from :cc:in-reply-to:references:message-id; q=dns; s=selector1; b=pbM 9CWv9MtDZk2un0Vgg/oxhX72NOlcf/62V+/+J+7ScuHl/Uo/yBs9PeIvsTa8FBph UY6DnJf7k05U8FDsIsWdx+LCo8tuEOL+C/TAy0K+uhy9CtBJFji/RLLW1rScjq3R Co4zVNUJHsbKbkWVhBWw1hplPXMpXysgYaL0pRV8= Received: from localhost (bsd.zplay.eu [local]) by bsd.zplay.eu (OpenSMTPD) with ESMTPA id dbbce7df; Tue, 9 Aug 2016 17:03:36 +0200 (CEST) To: Aleksander Alekseev Subject: Re: Power consumption tuning X-PHP-Originating-Script: 0:rcube.php MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Tue, 09 Aug 2016 17:03:36 +0200 From: =?UTF-8?Q?Sol=C3=A8ne_Rapenne?= Cc: freebsd-questions@freebsd.org, owner-freebsd-questions@freebsd.org In-Reply-To: <20160809172345.312117ac@e733> References: <20160809172345.312117ac@e733> Message-ID: X-Sender: solene@perso.pw User-Agent: Roundcube Webmail/1.2.0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Aug 2016 15:03:51 -0000 Le 2016-08-09 16:23, Aleksander Alekseev a écrit : > Hello. > > I'm exploring how power consumption could be tuned on FreeBSD 11.0. I > discovered a few useful articles, for instance [1]. Also useful pieces > of advice were given on IRC. Resulting list is for now like this: > > * Use lightweight software (i3, GTK based GUI applications, etc), turn > off unused kernel modules, don't use full disc encryption, etc > * Reduce CPU frequency (sysctl dev.cpu.0.freq), use powerd to do it > automatically > * Reduce display brightness (sudo pkg install intel-backlight) > * Enable power save mode on NIC (sudo ifconfig wlan0 powersave) > * Disable unused USB devices (sudo usbconfig -d X.Y power_off) > * Reduce clock frequency (kern.hz = 100) > * Make sure your kernel is built without INVARIANTS and WITNESS > > Perhaps there are other methods I didn't notice? For instance are there > any other sysctl parameters or kernel configuration options worth > trying? > > [1] https://wiki.freebsd.org/TuningPowerConsumption Hello, Buying a device to measure the power consumption is also a good idea, so you can check your changes. It costs around 12€. Example http://www.ecvv.com/product/1000019919.html and better, it can be used to check everything at home after you're done with the computer :D From owner-freebsd-questions@freebsd.org Tue Aug 9 15:56:46 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9241BBB29BD for ; Tue, 9 Aug 2016 15:56:46 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wm0-x231.google.com (mail-wm0-x231.google.com [IPv6:2a00:1450:400c:c09::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 467D91235 for ; Tue, 9 Aug 2016 15:56:46 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: by mail-wm0-x231.google.com with SMTP id o80so44590149wme.1 for ; Tue, 09 Aug 2016 08:56:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=date:from:to:subject:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=JKc/4x+Tv6SHd9XqESJHTRTiiAjhGhAztas7Pi/sQmg=; b=wpS0+ewu6SgILgGxGfj8SbzdVK97kYYNChtqaHC70sKUzn2O0KakRSrvo8EceeR0GE cH615ZC3/zYCYASj/il5dX7QmIeAmPOuw01ZvBPBZQyn+x8n4N86JsREyFnxsAa2cH4g EiP9eoi4jDouWCWJtJn/XQ5LAHQ7dURIF633XLPTLm8ic1ltj43WDWVRjcTLwOUCDbym aOQracqgjR+lyTQ10f/AzDVoyIwoFSgVEM1WLV6pZwlOpHNlFd5hTKCnu2LI6B5zkcDJ F0uh11nSZv4VxjWseyNjOG53d1U2Ru4DE7VsFLwREicpIbPyVt0G3ZOa8zUKsZqRmaBn MglA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=JKc/4x+Tv6SHd9XqESJHTRTiiAjhGhAztas7Pi/sQmg=; b=ZmK/GgiqqqminwB/4iJrfciKdKknuDAtbULl1ZxiTRDKvNOm05UMsBsxD1seTnax/Q cQKkb4JtZ5YTo8QRJn6azAAGWsbmir4gfZSBHmB/Yql/jIDJ8puMAKrAu1gg/0F/RSZs D0TeDsegSuvS4S1pWW/nitgtOVbPC038SnXXAWudFjGrmWsbAlvUZwLqoQbp1LZUJyKT REtzajQkBXc4z9QuPH6/pFqS0mnbjhBvMiCuU6b6yA0fDR5Oco2FOeRroZouY92FR6N5 eSNnp6ywjTcFQqQtGbpL32+85VCETJsU1FSHho6xP9qx75m2E2cCDGGd8l6Kix+rmO8t X7qw== X-Gm-Message-State: AEkoouvRLpvqJccuGPhLg50PwXWRkaOAsfeZsP1yXN7SdsQ1v7DsiITKBPBq4rRzsOaexg== X-Received: by 10.194.80.104 with SMTP id q8mr97319113wjx.151.1470758204503; Tue, 09 Aug 2016 08:56:44 -0700 (PDT) Received: from gumby.homeunix.com ([81.171.97.93]) by smtp.gmail.com with ESMTPSA id bc10sm38608948wjc.32.2016.08.09.08.56.43 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Tue, 09 Aug 2016 08:56:43 -0700 (PDT) Date: Tue, 9 Aug 2016 16:56:40 +0100 From: RW To: freebsd-questions@freebsd.org Subject: Re: Power consumption tuning Message-ID: <20160809165640.5aa087c2@gumby.homeunix.com> In-Reply-To: References: <20160809172345.312117ac@e733> X-Mailer: Claws Mail 3.13.2 (GTK+ 2.24.29; amd64-portbld-freebsd10.2) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Aug 2016 15:56:46 -0000 On Tue, 09 Aug 2016 17:03:36 +0200 Sol=C3=A8ne Rapenne wrote: > Buying a device to measure the power consumption is also a good idea, > so you can check your changes. > It costs around 12=E2=82=AC. Example > http://www.ecvv.com/product/1000019919.html A lot of those cheap power meters will work with simple loads like heaters or fridges, but are very inaccurate with computers. I have one and I've heard a lot of bad reports about them. From owner-freebsd-questions@freebsd.org Tue Aug 9 16:22:54 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5206DBB37F8 for ; Tue, 9 Aug 2016 16:22:54 +0000 (UTC) (envelope-from freebsd@qeng-ho.org) Received: from bede.qeng-ho.org (bede.qeng-ho.org [217.155.128.241]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "fileserver.home.qeng-ho.org", Issuer "fileserver.home.qeng-ho.org" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id EB29C1D28 for ; Tue, 9 Aug 2016 16:22:53 +0000 (UTC) (envelope-from freebsd@qeng-ho.org) Received: from arthur.home.qeng-ho.org (arthur.home.qeng-ho.org [172.23.1.2]) by bede.home.qeng-ho.org (8.15.2/8.15.2) with ESMTP id u79GMjE4066291; Tue, 9 Aug 2016 17:22:45 +0100 (BST) (envelope-from freebsd@qeng-ho.org) Subject: Re: Power consumption tuning To: RW , freebsd-questions@freebsd.org References: <20160809172345.312117ac@e733> <20160809165640.5aa087c2@gumby.homeunix.com> From: Arthur Chance Message-ID: <8fd8eccc-aef7-eeaa-9851-b8ed03a6bfd8@qeng-ho.org> Date: Tue, 9 Aug 2016 17:22:45 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: <20160809165640.5aa087c2@gumby.homeunix.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Aug 2016 16:22:54 -0000 On 09/08/2016 16:56, RW via freebsd-questions wrote: > On Tue, 09 Aug 2016 17:03:36 +0200 > Solène Rapenne wrote: > > >> Buying a device to measure the power consumption is also a good idea, >> so you can check your changes. >> It costs around 12€. Example >> http://www.ecvv.com/product/1000019919.html > > A lot of those cheap power meters will work with simple loads like > heaters or fridges, but are very inaccurate with computers. I have one > and I've heard a lot of bad reports about them. Clip-on type meters you get for measuring mostly whole house consumption don't handle reactive loads (basically anything with a motor) well and measure high. All the plug in ones I've tried work well enough, 1-2% variation between units on realistic loads, near enough to the readings of the industrial grade load monitoring I have on all my power circuits at home(*), but they can fail in time if mistreated. They also can be not very good with harmonic power but modern switch mode power supplies are supposed to keep that to a minimum. (*) Long story short: my wife's an energy consultant, advises both government and industry and helps energy conservation charities, and if it measures electrical power we've either got or tested at least one, often more. -- Schrödinger's cat had 18 half lives. From owner-freebsd-questions@freebsd.org Wed Aug 10 00:10:10 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 54490BB4568 for ; Wed, 10 Aug 2016 00:10:10 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) Received: from SNT004-OMC3S3.hotmail.com (snt004-omc3s3.hotmail.com [65.55.90.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 15EB417A5 for ; Wed, 10 Aug 2016 00:10:09 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) Received: from EUR01-DB5-obe.outbound.protection.outlook.com ([65.55.90.135]) by SNT004-OMC3S3.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Tue, 9 Aug 2016 17:09:03 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=9tO82CxUrWVbedemdkqNj05S0BTUcB83T2r2AHMRCKs=; b=dy5tXBlJmQdj3If0wg7i+9CIG+qEHh3acAHuTO0RWYL7bTUqboRdy92Y6937yO1OBEAy1fvwJ7r9BRu9aWVD2Ninj3FYF0+kDm2R+3y6/YoxI1V8IW/4TumzoIMPJLUClk6rgRGOuxP4bBQB7Bzl2P/Keo7h48x7+7uIHoLzO5xAXvjjR3r4EXOUUm+g+0mSEXrXzYY5xaR5Q0NDTjlwprpj1sOWfEXlQa55x+tZmxRuv7p57DoDF5tGG5bHdC1++W9crPu9FzMADxye5w+xcRtcatAxpRYOTDcbwLOwwITL8CcauvUX6O6ZGaUloYa6JFUEEd8WxBO/raEfqH0tCg== Received: from DB5EUR01FT064.eop-EUR01.prod.protection.outlook.com (10.152.4.60) by DB5EUR01HT077.eop-EUR01.prod.protection.outlook.com (10.152.5.219) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.567.7; Wed, 10 Aug 2016 00:09:01 +0000 Received: from VI1PR02MB0974.eurprd02.prod.outlook.com (10.152.4.58) by DB5EUR01FT064.mail.protection.outlook.com (10.152.5.83) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.567.7 via Frontend Transport; Wed, 10 Aug 2016 00:09:01 +0000 Received: from VI1PR02MB0974.eurprd02.prod.outlook.com ([10.163.162.28]) by VI1PR02MB0974.eurprd02.prod.outlook.com ([10.163.162.28]) with mapi id 15.01.0549.025; Wed, 10 Aug 2016 00:08:58 +0000 From: Manish Jain To: "freebsd-questions@freebsd.org" Subject: Graphics problems on AMD A6-6400 processor + Asus A68HM motherboard Thread-Topic: Graphics problems on AMD A6-6400 processor + Asus A68HM motherboard Thread-Index: AQHR8ptkYqwz/nndy0mY+8Ux8KTn4g== Date: Wed, 10 Aug 2016 00:08:58 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=softfail (sender IP is 10.152.4.58) smtp.mailfrom=hotmail.com; freebsd.org; dkim=none (message not signed) header.d=none;freebsd.org; dmarc=fail action=none header.from=hotmail.com; received-spf: SoftFail (protection.outlook.com: domain of transitioning hotmail.com discourages use of 10.152.4.58 as permitted sender) x-ms-exchange-messagesentrepresentingtype: 1 x-eopattributedmessage: 0 x-forefront-antispam-report: CIP:10.152.4.58; IPV:NLI; CTRY:; EFV:NLI; SFV:NSPM; SFS:(10019020)(98900003); DIR:OUT; SFP:1102; SCL:1; SRVR:DB5EUR01HT077; H:VI1PR02MB0974.eurprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; x-microsoft-exchange-diagnostics: 1; DB5EUR01HT077; 6:ZzD5GPm0zLBNtB9ay6n9rYYLT0zdkwK5UWuHIPwOBbCAWUgahthkATUd9giedpLSfTmRyo/WtOiVVMS1twKqPYfJnObL/tricROIW8VT8U3JJM0lOWYYQHqlVblNGUO4jyhof6XyboONlf7/mEfdf9Cyh1t+AcMswOJavTNAwnxugxBNMK9YERhSDicGNiIuz5zs0UtXpgN3wLsDMx60oy8H1CiLmnqOTmYnEAWDDwNmVLvGRozO2B9z2sXi/iGRnnocs/vrAQuUz6lYzVbJZLvnZ7aA/C1D4mWsKWzEdyNup+mNI8PtYJvpRaqoGZTV; 5:QFICB9dKael4dWwIVQwuxEv1rzHKnm9EdxjHWneLQkmMBer/qJY26q/c90nFfUWhuAe6m+/nDMH8Fyd9bKIVWrpJ/lIYb4dnLgTJ1KqxRBHxbTr4+Weyxpq34frM7h7EgN8dNiVgYQqJ3L5ip1ph6Q==; 24:wakMJrp+6noj36LPbrS2Y6qvoYeCA4GCNw1O6u4QS15stYvvlOZ+oFuo50ieflORLJFtLECLCOUtRsgpW6L1TDdy6SeItDSOhoxetcNmToE=; 7:P4bmaAh7etSxxbvwh06TTdptP0+3EggFDkyI51+Nw2hnCjUbk2mkbrGuycuEkSrfbEK4ezNDx4DMEek4/V1/TshgxUIYtKWVSYvGvNEovsZTk23Hg6n8+9iMTPxb+T9Mz0YmR65N0srXCVqujjlS7i7gGa/veXNkrdMx/yIemwiKMJiHIpJiWPSL9nSgciSf/6YQ3IM+PwNIAioQP6nMIOJ/Jv5nZxFznhOrx6lOL6ZW5ugDJu+VNXVdybVCCbv+ x-ms-office365-filtering-correlation-id: 1b247bac-53df-48da-a797-08d3c0b2862f x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(1601124038)(1601125047); SRVR:DB5EUR01HT077; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(432015012)(82015046); SRVR:DB5EUR01HT077; BCL:0; PCL:0; RULEID:; SRVR:DB5EUR01HT077; x-forefront-prvs: 0030839EEE spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <7163F6545834FE40B0183B84988D355A@eurprd02.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Aug 2016 00:08:58.6621 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5EUR01HT077 X-OriginalArrivalTime: 10 Aug 2016 00:09:03.0352 (UTC) FILETIME=[6711AF80:01D1F29B] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 00:10:10 -0000 DQpIaSwNCg0KSSBqdXN0IGluc3RhbGxlZCBhIG5ldyBBc3VzIEE2OEhNIG1vdGhlcmJvYXJkIHdp dGggYW4gQU1EIEE2LTY0MDAgDQpwcm9jZXNzb3IuIFRoZSBib2FyZCBoYXMgb25ib2FyZCBBVEkg UmFkZW9uIDg0NzAgZ3JhcGhpY3MgYWRhcHRlciBjaGlwLg0KDQpJIGluc3RhbGxlZCBhIGZyZXNo IGNvcHkgb2YgRnJlZUJTRCAxMC4zIGFtZDY0LCB3aXRoIGdyZWF0IGhvcGVzIHRoYXQgDQpldmVy eXRoaW5nIHdvdWxkIHdvcmsgb3V0IG9mIHRoZSBib3guIEl0IGRpZCBub3QuIFRoZSBncmFwaGlj cyBvdXRwdXQgDQp1bmRlciBHbm9tZSBpcyBza2V3ZWQgLSBoYWxmIHRoZSB0ZXh0IG9mIEFwcGxp Y2F0aW9ucyBtZW51IGxpc3QgIGlzIA0KbWlzc2luZyBhbmQgc3RyYW5nZSBzdHJlYWtzIGFwcGVh ciBhdCBhIGZldyBwbGFjZXMgb24gdGhlIHNjcmVlbi4NCg0KVG8gY2hlY2sgd2hldGhlciB0aGVy ZSB3YXMgYW55IFJBTSBwcm9ibGVtLCBJIHJhbiBhIGNvdXBsZSBvZiBwYXNzZXMgDQp1bmRlciBt ZW10ZXN0ODYgd2l0aCBubyBlcnJvcnMuIFRoZXJlIGFyZSBubyBwYWdlIGZhdWx0IHJlcG9ydHMg YXQgDQpib290LXRpbWUgZWl0aGVyLg0KDQpJIHRoZW4gaW5zdGFsbGVkIE9wZW5TdXNlIDQyLjEg bGVhcCwgd2hlcmUgdGhlIGdyYXBoaWNzIG91dHB1dCBpcyANCm5vcm1hbC4gQnV0IEkgd2FudCB0 byBtb3ZlIGJhY2sgdG8gRnJlZUJTRCAtIHRoYXQgaXMgdGhlIG9ubHkgdGhpbmcgSSBsaWtlLg0K DQpDYW4gc29tZW9uZSBwbGVhc2UgaGVscCBtZSB0cnkgdG8gZ2V0IG5vcm1hbCBncmFwaGljcyB3 aXRoIHRoZSBuZXcgYm9hcmQgDQphbmQgQ1BVID8gSWYgaXQgaXMgbm90IHBvc3NpYmxlIHVuZGVy IDEwLjMsIEkgY2FuIHdhaXQgZm9yIGEgZnJlc2ggDQpyZWxlYXNlIGxpa2UgMTEuMC4gQnV0IEkg bXVzdCBnZXQgdGhpbmdzIHdvcmtpbmcgbm9ybWFsbHkgdW5kZXIgRnJlZUJTRCwgDQplbHNlIGFs bCBvZiBteSBtb25leSB3b3VsZCBoYXZlIGJlZW4gd2FzdGVkLg0KDQoNClRoYW5rcyBmb3IgYW55 IGhlbHAuDQpNYW5pc2ggSmFpbg0K From owner-freebsd-questions@freebsd.org Wed Aug 10 00:41:32 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BB165BB4E4F for ; Wed, 10 Aug 2016 00:41:32 +0000 (UTC) (envelope-from stoa@gmx.us) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass DE-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 0F32715F2 for ; Wed, 10 Aug 2016 00:41:31 +0000 (UTC) (envelope-from stoa@gmx.us) Received: from archlinux.localdomain ([97.66.215.44]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0LgZdt-1av9T513Zt-00o1yA for ; Wed, 10 Aug 2016 02:41:22 +0200 Date: Tue, 9 Aug 2016 19:41:19 -0500 From: Dutch Ingraham To: freebsd-questions@freebsd.org Subject: Re: Graphics problems on AMD A6-6400 processor + Asus A68HM motherboard Message-ID: <20160810004119.GC421@archlinux.localdomain> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.6.2 (2016-07-01) X-Provags-ID: V03:K0:2ex6Pu4FJZ9eIsdE578auwTmbXSOKiIbVwnDjFQpZhCwcuwAnjZ AGROEBkMIrXvu1r/yc5tFkbYP2l8F4xCHCwSr744vfoeLoSbuehn7VBl29FSU7Ur8L/VNXS LkKgGVhTn7LflkxIbCZ6y79uol0B9e7BkEZWWmJPXPtR+ZBKsoXs9+ScyPh0y6RnoQVHGYq CnRbgDSjUEOGcB7iXRBYQ== X-UI-Out-Filterresults: notjunk:1;V01:K0:dXLXrve+kuk=:u1e8ctS4Hgj745YFpcierG J0oAAdB45ZOvLuaYM0Juwa9Hq/XQsbkJ72wqrxxKToME+XvGvt11e/rIVNhvC+uk6UacgCoPm U1Flk8lnoGhxHhkVP7SwdXo2X9BDpk+5FpObKAa279xPdLTZQPhnQNUz5R1EpCHkk8W+kmDMC MggsQogJSL/cwAUIET7dqV/ew53xnQK4otdiJbvG7UjUWv61czTDsJeuXwYz7v689PA+bnLCB Gfg4ZItHYZrFVZ6ICvq28IqqZf/ILRwloW81avX3JBqn3sPnCKtOYRZqxMqum1MON1u8bVui6 XIF8NF2jZigJ0dAKqXzpga/u5jsQVdbo1xu+643SaihoVGkDydmVUIfx9gDdYi0jPc0Hov2n3 HkWSno8f1iNLKjCmlJ96mlSFID2ijGHUKgnUJ2Z8YFkE2rm4K0UMSgc+Hz1+P5JKqteENjYc6 I3vdta6/VeNet2O/HHvauTT16Wo8gBJNPZtCyUcSzEXryMQJIt6D1cE0LPU+TpFGGifDXboZk AK4XthttV4jaHO5GZx0+8d0f57ZAvxPlfmyv1Xi6P1IvSTmAMnybQMUG/HyCgZF81oNUlQIyL zkAcSu1J53DimBeIuptymHk/xUKLPVDQEqo0OBg69F+0luPOMcHGebilJktkS2pYrBb3OPJCO QJQVpkohdldfWjCtCYRn8kk57Ir8tXAundI960itpsBXd0hF4ciPbFvgv7l6flSENAexPEG1f Jp2/o7RVStL+p8kifJnz5QVlxndHRjvH9uD6HDuN730ARN1CETQ1iew8jrQ= X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 00:41:32 -0000 On Wed, Aug 10, 2016 at 12:08:58AM +0000, Manish Jain wrote: > > Hi, > > I just installed a new Asus A68HM motherboard with an AMD A6-6400 > processor. The board has onboard ATI Radeon 8470 graphics adapter chip. > > I installed a fresh copy of FreeBSD 10.3 amd64, with great hopes that > everything would work out of the box. It did not. The graphics output > under Gnome is skewed - half the text of Applications menu list is > missing and strange streaks appear at a few places on the screen. > > To check whether there was any RAM problem, I ran a couple of passes > under memtest86 with no errors. There are no page fault reports at > boot-time either. > > I then installed OpenSuse 42.1 leap, where the graphics output is > normal. But I want to move back to FreeBSD - that is the only thing I like. > > Can someone please help me try to get normal graphics with the new board > and CPU ? If it is not possible under 10.3, I can wait for a fresh > release like 11.0. But I must get things working normally under FreeBSD, > else all of my money would have been wasted. > > > Thanks for any help. > Manish Jain Check whether your card is supported here: https://wiki.freebsd.org/Graphics From owner-freebsd-questions@freebsd.org Wed Aug 10 00:56:49 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 01D67BB235B for ; Wed, 10 Aug 2016 00:56:49 +0000 (UTC) (envelope-from frank@woodcruft.co.uk) Received: from b.painless.aa.net.uk (b.painless.aa.net.uk [81.187.30.52]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C15151D77 for ; Wed, 10 Aug 2016 00:56:48 +0000 (UTC) (envelope-from frank@woodcruft.co.uk) Received: from woodcruft.co.uk ([81.187.49.114] helo=lime.woodcruft.co.uk) by b.painless.aa.net.uk with esmtp (Exim 4.77) (envelope-from ) id 1bXGrT-0003KA-HN; Wed, 10 Aug 2016 00:55:07 +0100 Received: by lime.woodcruft.co.uk (Postfix, from userid 1001) id 0C3C255629; Wed, 10 Aug 2016 00:55:06 +0100 (BST) Date: Wed, 10 Aug 2016 00:55:06 +0100 From: Frank Shute To: RW Cc: freebsd-questions@freebsd.org Subject: Re: Power consumption tuning Message-ID: <20160809235506.GA97161@lime.woodcruft.co.uk> Reply-To: Frank Shute Mail-Followup-To: RW , freebsd-questions@freebsd.org References: <20160809172345.312117ac@e733> <20160809165640.5aa087c2@gumby.homeunix.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20160809165640.5aa087c2@gumby.homeunix.com> X-Face: *}~{PHnDTzvXPe'wl_-f%!@+r5; VLhb':*DsX%wEOPg\fDrXWQJf|2\,92"DdS%63t*BHDyQ|OWo@Gfjcd72eaN!4%NE{0]p)ihQ1MyFNtWL X-Operating-System: FreeBSD 10.3-RELEASE-p4 amd64 X-Organisation: 'woodcruft.co.uk' User-Agent: Mutt/1.6.1 (2016-04-27) Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 00:56:49 -0000 On Tue, Aug 09, 2016 at 04:56:40PM +0100, RW via freebsd-questions wrote: > > On Tue, 09 Aug 2016 17:03:36 +0200 > Sol=C3=A8ne Rapenne wrote: >=20 >=20 > > Buying a device to measure the power consumption is also a good idea, > > so you can check your changes. > > It costs around 12=E2=82=AC. Example > > http://www.ecvv.com/product/1000019919.html >=20 > A lot of those cheap power meters will work with simple loads like > heaters or fridges, but are very inaccurate with computers. I have one > and I've heard a lot of bad reports about them. =20 If you've got a UPS (and you should have IMO) then you can get the power usage. Eg: $ apcaccess -p LOADPCT 33.0 Percent and: $ apcaccess -p NOMPOWER 210 Watts So I'm using ~70W ATM. Trivial to script a report maybe with the help of cron. I'd guess the accuracy is good enough for most purposes. I'm sure APC pub= lish such info on their website. Regards, --=20 Frank https://woodcruft.co.uk/ From owner-freebsd-questions@freebsd.org Wed Aug 10 03:20:12 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CD698BB4B05 for ; Wed, 10 Aug 2016 03:20:12 +0000 (UTC) (envelope-from sales12@meritvendor.com) Received: from mail-pf0-x246.google.com (mail-pf0-x246.google.com [IPv6:2607:f8b0:400e:c00::246]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id AD7C71DE0 for ; Wed, 10 Aug 2016 03:20:12 +0000 (UTC) (envelope-from sales12@meritvendor.com) Received: by mail-pf0-x246.google.com with SMTP id 63so59106283pfx.0 for ; Tue, 09 Aug 2016 20:20:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=meritvendor.com; s=google; h=mime-version:message-id:date:subject:from:to; bh=qM94GN6zMSgfwo1RevpUBFZHFhFlBr5M3xx43njJkPM=; b=hhp3hP7s7pdVtXqQCNvtLrSHczBxrwtCakI4J3cckRkVTwoOTkk0tasItLdvQXzkEk DeapyC7UaMyauXCWhCcx4PnnAjPTumgZkiJz/D//xVS5DPwvCdGcECA66/DYZ8XzmD6X 1j3uypX8zZgJS8Ek0J8/dziIa0fN+K4+Lne0k= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:message-id:date:subject:from:to; bh=qM94GN6zMSgfwo1RevpUBFZHFhFlBr5M3xx43njJkPM=; b=FZnhY8hU0L3Xakvwuvg2nnv5KJMlcLORg4su2TKjZIH0YUlZGOS2QPdQDrFjQgKINR zXmnmdNjlZWPVuLYPWmdalDbctD+FHiV8NX/cjnSPqD6CG9bPJ3ILmRdILu4X/Jqe9C6 CpFNZDOlD5vSq2gXhqEUCB6KuTXZfVdJ4eayOOKdligxy+e9JGNDD09C/4ZWqDFtW3Ff 99DqAeiU0rzKiNhfTNXLNQNKnJEmzOJic3HVwI7j0xlgvUX5drtuPt/ZF6ktlrvzkC/7 pJjeJ/M9Q4nqoSDGeQ321IDy3MansjtBrEqHYTVRbYJZ0/Pto7G1RBUM/5n7awhUaidT i/mw== X-Gm-Message-State: AEkoousRDH87m6N22Zwe9aeQfK0x26mgxJZBebYSD2LIONRshjwMWlc7bFVfpjlvq/7tBz4xxwhu3tFEYgwM4tPB MIME-Version: 1.0 X-Received: by 10.98.100.141 with SMTP id y135mr1281003pfb.6.1470799212167; Tue, 09 Aug 2016 20:20:12 -0700 (PDT) Message-ID: <94eb2c0a7bdc93cd8a0539af2078@google.com> Date: Wed, 10 Aug 2016 03:20:12 +0000 Subject: Attention required: Your website may be in trouble: Freebsd.org From: Lorenzo Tomacelli To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8; format=flowed; delsp=yes Content-Transfer-Encoding: base64 X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 03:20:12 -0000 DQoNCkhpIEZyZWVic2Qub3JnIFRlYW0sDQoNCg0KSSB0cnVzdCB5b3UgYXJlIGRvaW5nIHNwbGVu ZGlkbHkuDQoNCg0KTXkgdGVhbSBoYXMgZ29uZSB0aHJvdWdoIHlvdXIgd2Vic2l0ZSBhbmQgY29t cHJlaGVuZHMgdGhhdCBpdOKAmXMgd2VsbCBidWlsdC4NCk9mIGNvdXJzZSwgdGhlIHNpdGUgY2Fu IGJlIGltcHJvdmVkIGluIHNldmVyYWwgd2F5cyB0byBnZXQgYmV0dGVyIHNhbGVzIGFuZA0KcmV2 ZW51ZS4gSWYgeW91IHdvdWxkIGxpa2UsIEkgY2FuIHNlbmQgeW91IHRoZSBsaXN0IG9mIHVwZ3Jh ZGVzIGFuZA0KaW1wcm92ZW1lbnRzIG5lY2Vzc2FyeSBmb3IgeW91ciBzaXRlLiBBbmQgaWYgeW91 IHJlcXVpcmUsIEkgY2FuIHNlbmQgeW91DQp0aGUgYnJpZWYgcXVvdGF0aW9uIGZvciB5b3VyIHdl YnNpdGUuDQoNCg0KTXkgdGVhbSB0b29rIHRoZSBsaWJlcnR5IHRvIGFsc28gZG8gYW4gaW4tZGVw dGggcmVzZWFyY2ggb2YgeW91ciB3ZWJzaXRlIHRvDQp1bmRlcnN0YW5kIHRoZSB0YXJnZXRlZCBt YXJrZXQuIEZvciBidXNpbmVzcyB0byBwcmV2YWlsIHdpdGhpbiB0aGUgdGFyZ2V0ZWQNCm1hcmtl dCwgd2UgY2FuIGFsc28gZXhlY3V0ZSBlZmZlY3RpdmUgb25saW5lIG1hcmtldGluZyBjYW1wYWln bnMuIE91cg0KbWFya2V0aW5nIGNhbXBhaWducyB0YXJnZXQgbm90IG9ubHkgbG9jYWwgbWFya2V0 LCBidXQgYWxzbyBwcm92aW5jaWFsIGFuZA0KaW50ZXJuYXRpb25hbCBtYXJrZXRzIGFzIHdlbGwu DQoNCg0KV2UgY2FuIGhlbHAgaW5jcmVhc2UgdmlzaWJpbGl0eSBvZiB5b3VyIHdlYnNpdGUgaW4g YWxsIHRoZSBtYWpvciBzZWFyY2gNCmVuZ2luZXMuIEluZGVlZCwgeW91ciB3ZWJzaXRlIHdpbGwg YmUgcG9zaXRpb25lZCBwcm9wZXJseSBzbyB0aGF0IGl0IGNhbiBiZQ0KZm91bmQgYXQgdGhlIG1v c3QgY3JpdGljYWwgcG9pbnRzLiBPdXIgYWltIGlzIHRvIHByb3ZpZGUgeW91IHdpdGggY29tcGxl dGUNCndlYiBtYXJrZXRpbmcgc29sdXRpb25zIHRvIGhlbHAgeW91ciB3ZWJzaXRlIHJhbmsgaGln aCBvbiB0aGUgc2VhcmNoDQplbmdpbmVzLiBZb3Ugd2lsbCBiZSBnZXR0aW5nIGFsbC1pbi1vbmUg c2VydmljZXMgd2hlbiB5b3UgY29udGFjdCB1cy4NCg0KDQpJZiB5b3UgaGF2ZSBhbnkgcXVlc3Rp b25zLCBwbGVhc2Ugbm90IGhlc2l0YXRlIHRvIGNvbnRhY3QuIE15IHRlYW0gYW5kIEkNCmxvb2sg Zm9yd2FyZCB0byBoZWFyaW5nIGZyb20gYW5kIGJlIG9mIGhlbHAgdG8gaW1wcm92ZSB0aGUgdmlz aWJpbGl0eSBvZg0KeW91ciB3ZWJzaXRlLg0KDQoNCkJlc3QgUmVnYXJkcywNCipMb3JlbnpvIFRv bWFjZWxsaSoNCg== From owner-freebsd-questions@freebsd.org Wed Aug 10 05:25:12 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 30DBABB33D8 for ; Wed, 10 Aug 2016 05:25:12 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) Received: from COL004-OMC4S9.hotmail.com (col004-omc4s9.hotmail.com [65.55.34.211]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DD03811A7 for ; Wed, 10 Aug 2016 05:25:11 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) Received: from EUR01-DB5-obe.outbound.protection.outlook.com ([65.55.34.201]) by COL004-OMC4S9.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Tue, 9 Aug 2016 22:24:05 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=E0i72A+LkE6PdpAxQxdcetocN9K9M30RrsZJed0lrMI=; b=NrWBayY8cps9UGnllp/9eLv34snyKdbO295qEH91WA8xoY0qeC0tFQC2pTDYIiEadSTyRwrAF2jM7c/5wvm4ptDxt7UHY4e9Ck8Ue39bi47dXYPTb+IDFQoLIYuPZKLBofqM7FHlRQ2ZnpWCrC63OrNSdZZvvr2GiFYHfXfe/H/YpxRjYlOjtGXcBE28HuTeytRaAGNsFpWEsqghJr1pHXUw1xytdxq+sJp9WizS0f0ZtaQPDNORo5EfJJQxV2qnGWz8BfbidKeyYl3nHlKqVnZbVBvXt92VZZqZIqJzGnxF3+OD9BOMUEGVRBEyfzpZZm91xANYkFdGybrD9d/PJQ== Received: from HE1EUR01FT022.eop-EUR01.prod.protection.outlook.com (10.152.0.54) by HE1EUR01HT205.eop-EUR01.prod.protection.outlook.com (10.152.1.117) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.567.7; Wed, 10 Aug 2016 05:23:48 +0000 Received: from VI1PR02MB0974.eurprd02.prod.outlook.com (10.152.0.53) by HE1EUR01FT022.mail.protection.outlook.com (10.152.0.165) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.567.7 via Frontend Transport; Wed, 10 Aug 2016 05:23:48 +0000 Received: from VI1PR02MB0974.eurprd02.prod.outlook.com ([10.163.162.28]) by VI1PR02MB0974.eurprd02.prod.outlook.com ([10.163.162.28]) with mapi id 15.01.0549.025; Wed, 10 Aug 2016 05:23:41 +0000 From: Manish Jain To: "freebsd-questions@freebsd.org" Subject: Will installing a separate graphics card restore normal graphics ? Thread-Topic: Will installing a separate graphics card restore normal graphics ? Thread-Index: AQHR8sdbaN2uEk4UB0abK/I0cyWWDg== Date: Wed, 10 Aug 2016 05:23:41 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=softfail (sender IP is 10.152.0.53) smtp.mailfrom=hotmail.com; freebsd.org; dkim=none (message not signed) header.d=none;freebsd.org; dmarc=fail action=none header.from=hotmail.com; received-spf: SoftFail (protection.outlook.com: domain of transitioning hotmail.com discourages use of 10.152.0.53 as permitted sender) x-ms-exchange-messagesentrepresentingtype: 1 x-eopattributedmessage: 0 x-forefront-antispam-report: CIP:10.152.0.53; IPV:NLI; CTRY:; EFV:NLI; SFV:NSPM; SFS:(10019020)(98900003); DIR:OUT; SFP:1102; SCL:1; SRVR:HE1EUR01HT205; H:VI1PR02MB0974.eurprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; x-microsoft-exchange-diagnostics: 1; HE1EUR01HT205; 6:8gR4oq1qsJuUSqDXJewh4Vn/K59Cb4qOwd9L7+M8Pmp8DKVwZ5Avx/m9A2x7jEftsW9CAPVuKeAAzgDwaGe+Wwcwyd1I6/bwaO9FLAn6XxIN6cRpYgwa5E5sLLybkwvnQ8cZSVQTv5h/4YFyDxdm3kWgDvfyAXkfgeCFOOxfTfVE4C32UfxmvsuWqDc4JEOP+GRijtZrMsxLRgry4xVOCRdwFxZwWaIvZMRB1/Pm0BJkYsJaSwXQEO5imdv67G283Zt4TrfDaWK7RuD/TscExUVQLialqADUji4tik4y89/g/cfeK4l6wGyulOtT4PxJ; 5:lK7cRE8DAw3GEkshQJMXDXp7jQ4c7rkfNRrIjC3rkz18Tc6nchu97TFISkIV3cRYe9nhLAp/phHi9CaVRN0/lQgrgJaTD60jycfgLKPx8q/ulxkfKy9Nteo1fwbj7glizQfAiqNkWSaO9YcM8oIErA==; 24:GOM9AKscHPRa+hnQKmHfYeR/bsh8Ml3+ucTk23DT7Py0/zC0K+az/x+ErVJAZjq4OR0dljIrua9/aPc4pF/lvxs+1jnksMyjuqpyG8qIvvs=; 7:8ML1nBHT0vhTKchAw++QoaifjSzsz0xjRZ/N7IXwx/9LCJgKp1czlXBUfgXwmjsRG6CVYzUYfIPKhR11buMNR9mYN/5vXIKE8dKd6Zp5kMXjQR0kHZP2hYu4cZwkTNvOD493bmRxc9Eb3bFVktcaXhNYKPA2tcJwzNnLJLD4TlWDQXvJmGEDekzc0PpGDVI4XZvNXB6nkM0MeKbfaMal0OI2XVGnuXNZns205Y71jGvvdZJpmOp1MMAdvS7zP+Rc x-ms-office365-filtering-correlation-id: 1120028c-0d29-4cbd-291f-08d3c0de7d41 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(1601124038)(1601125047); SRVR:HE1EUR01HT205; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(432015012)(82015046); SRVR:HE1EUR01HT205; BCL:0; PCL:0; RULEID:; SRVR:HE1EUR01HT205; x-forefront-prvs: 0030839EEE spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Aug 2016 05:23:41.6905 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR01HT205 X-OriginalArrivalTime: 10 Aug 2016 05:24:05.0024 (UTC) FILETIME=[6957F200:01D1F2C7] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 05:25:12 -0000 SGksDQoNClRoZSBYIHNlcnZlciB1bmRlciBGcmVlQlNEIGlzIG5vdCBnaXZpbmcgbm9ybWFsIGdy YXBoaWNzIHdpdGggbXkgbmV3IEFNRCANCkE2LTY0MDBLIHByb2Nlc3NvciArIEFzdXMgQTY4SE0g bW90aGVyYm9hcmQgd2l0aCBvbmJvYXJkIEFUSSBSYWRlb24gODQ3MCANCmdyYXBoaWNzLiBBIGxv dCBvZiB0aGUgdGV4dCBvZiBHbm9tZSdzIEFwcGxpY2F0aW9ucyBtZW51IGxpc3QgIGlzIA0KbWlz c2luZyBhbmQgc3RyYW5nZSBzdHJlYWtzIGFwcGVhciBhdCBhIGZldyBwbGFjZXMgb24gdGhlIHNj cmVlbi4NCg0KV291bGQgaXQgaGVscCBpZiBJIHdlcmUgdG8gaW5zdGFsbCBhIHNlcGFyYXRlIGdy YXBoaWNzIGNhcmQgPyBJIGhhdmUgbm8gDQppZGVhIHdoZXRoZXIgaXQgaXMgcG9zc2libGUgdG8g ZGlzYWJsZSB0aGUgb25ib2FyZCBncmFwaGljcyBhZGFwdGVyLCBidXQgDQppZiB0aGF0IGlzIHBv c3NpYmxlLCBJIGNhbiB0cnkgdXNpbmcgYSBkZWRpY2F0ZWQgVkdBIGNhcmQuDQoNClRoYW5rcyBm b3IgYW55IGFkdmljZS4NCk1hbmlzaCBKYWluDQoNCg== From owner-freebsd-questions@freebsd.org Wed Aug 10 05:31:21 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 92F0ABB34DC for ; Wed, 10 Aug 2016 05:31:21 +0000 (UTC) (envelope-from merlyn@geeks.org) Received: from mail.geeks.org (mail.geeks.org [IPv6:2001:470:c2ca:1::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7787A1344 for ; Wed, 10 Aug 2016 05:31:21 +0000 (UTC) (envelope-from merlyn@geeks.org) Received: from mail.geeks.org (localhost [127.0.0.1]) by after-clamsmtpd.geeks.org (Postfix) with ESMTP id 2F28E110235; Wed, 10 Aug 2016 00:31:14 -0500 (CDT) Received: by mail.geeks.org (Postfix, from userid 1003) id 0FB58110234; Wed, 10 Aug 2016 00:31:14 -0500 (CDT) Date: Wed, 10 Aug 2016 00:31:14 -0500 From: Doug McIntyre To: abdulov entertaimentt Cc: freebsd-questions Subject: Re: php52 Message-ID: <20160810053113.GA1433@geeks.org> References: <1470649205.240226424@f376.i.mail.ru> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <1470649205.240226424@f376.i.mail.ru> User-Agent: Mutt/1.6.1 (2016-04-27) X-Virus-Scanned: ClamAV using ClamSMTP X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 05:31:21 -0000 On Mon, Aug 08, 2016 at 12:40:05PM +0300, abdulov entertaimentt via freebsd-questions wrote: > I need to install an older version of php52 , it is not in the ports , php52 need for older engines site , how do I install this version of php ?  Surely some 10-year-old way out of supported version is just an invitation for security disaster? You'll probably have to download it directly and compile it yourself, perhaps if having trouble, looking into the current ports for flags or methods to get it going? http://php.net/releases/ From owner-freebsd-questions@freebsd.org Wed Aug 10 06:06:06 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 82DB8BB3CFB for ; Wed, 10 Aug 2016 06:06:06 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx02.qsc.de (mx02.qsc.de [213.148.130.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3CB1E11B1 for ; Wed, 10 Aug 2016 06:06:05 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-102-47.dynamic.qsc.de [92.195.102.47]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx02.qsc.de (Postfix) with ESMTPS id A9DE7276A1; Wed, 10 Aug 2016 08:05:56 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u7A65tYe002091; Wed, 10 Aug 2016 08:05:55 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Wed, 10 Aug 2016 08:05:55 +0200 From: Polytropon To: Manish Jain Cc: "freebsd-questions@freebsd.org" Subject: Re: Will installing a separate graphics card restore normal graphics ? Message-Id: <20160810080555.3a86bf55.freebsd@edvax.de> In-Reply-To: References: Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 06:06:06 -0000 On Wed, 10 Aug 2016 05:23:41 +0000, Manish Jain wrote: > Hi, > > The X server under FreeBSD is not giving normal graphics with my new AMD > A6-6400K processor + Asus A68HM motherboard with onboard ATI Radeon 8470 > graphics. A lot of the text of Gnome's Applications menu list is > missing and strange streaks appear at a few places on the screen. CHeck the file /var/log/Xorg.0.log for any "EE" entries (errors). Also determine which driver X has actually loaded automatically. There are additional drivers in the ports collection which you might try (ati, radeon, radeonhd, if I remember correctly - long time no ATI card here). You can also force X to use a specific driver using the xorg.conf mechanism. In worst case, try VESA. It will not provide useful 3D results, but for desktop use, it should be sufficient until the problem is solved. Here is an example for an ATI Radeon 9600 (or 9200?): Section "Device" Identifier "Card0" Driver "ati" VendorName "ATI Technologies Inc" BoardName "Rage 128 Pro Ultra TF" BusID "PCI:1:5:0" VideoRam 32768 EndSection This specifies the "ati" driver (formerly part of XFree86, but in your case, "radeonhd" would probably be a better choice after you've installed the required port/package). Check the manual page supplied with the driver if your card is on the list of supported devices. Keep in mind you usually don't need a complete xorg.conf today; a partial file containing only those parts you wish to "hardcode" is sufficient. > Would it help if I were to install a separate graphics card ? If it is _possible_ to do so, then yes, as long as the following points are met: 1. The card mechanically fits to the mainboard. 2. The card is compatible with the mainboard and the power supply. 3. The card is supported by a driver available for FreeBSD. Additional point: 4. The driver supports all desired functionality of the card (3D). > I have no > idea whether it is possible to disable the onboard graphics adapter, but > if that is possible, I can try using a dedicated VGA card. It should be possible to do this in the BIOS/UEFI. In some cases, it happens automatically when a second GPU is detected. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Wed Aug 10 07:07:06 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 92BF2BB4C7E for ; Wed, 10 Aug 2016 07:07:06 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from mx.box-hlm-01.niklaas.eu (mx.box-hlm-01.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:fe1b:d1ad]) by mx1.freebsd.org (Postfix) with ESMTP id 1CC181CC4 for ; Wed, 10 Aug 2016 07:07:05 +0000 (UTC) (envelope-from stdin@niklaas.eu) Received: from box-hlm-03.niklaas.eu (box-hlm-03.niklaas.eu [IPv6:2a02:2770:15:0:21a:4aff:feaa:e902]) by mx.box-hlm-01.niklaas.eu (Postfix) with ESMTPSA id C49A22C35D8 for ; Wed, 10 Aug 2016 09:07:03 +0200 (CEST) Date: Wed, 10 Aug 2016 09:07:01 +0200 From: Niklaas Baudet von Gersdorff To: freebsd-questions@freebsd.org Subject: Re: Need advice for setting up mail server Message-ID: <20160810070701.GB36980@box-hlm-03.niklaas.eu> Reply-To: stdin@niklaas.eu Mail-Followup-To: freebsd-questions@freebsd.org References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> <44D296EC-FA25-4279-9501-8BB6B2DD86A6@mail.sermon-archive.info> <20160808063138.GA20037@box-hlm-03.niklaas.eu> <33245.128.135.52.6.1470667918.squirrel@cosmo.uchicago.edu> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Y7xTucakfITjPcLV" Content-Disposition: inline In-Reply-To: <33245.128.135.52.6.1470667918.squirrel@cosmo.uchicago.edu> User-Agent: Mutt/1.6.1 (2016-04-27) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 07:07:06 -0000 --Y7xTucakfITjPcLV Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Valeri Galtsev [2016-08-08 09:51 -0500] : > > In /usr/local/etc/spamd/spamd.conf I use two of the example > > lists: > > > > all:\ > > :uatraps:nixspam: > > > > # University of Alberta greytrap hits. > > # Addresses stay in it for 24 hours from time they misbehave. > > uatraps:\ > > :black:\ > > :msg="Your address %A has sent mail to a ualberta.ca spamtrap\n\ > > within the last 24 hours":\ > > :method=http:\ > > :file=www.openbsd.org/spamd/traplist.gz > > > > # Nixspam recent sources list. > > # Mirrored from http://www.heise.de/ix/nixspam > > nixspam:\ > > :black:\ > > :msg="Your address %A is in the nixspam list\n\ > > See http://www.heise.de/ix/nixspam/dnsbl_en/ for details":\ > > :method=http:\ > > :file=www.openbsd.org/spamd/nixspam.gz [...] > quick question here. The alleged spam message was never accepted here, > instead "SMTP error is generated" telling one of the reasons above, right? > In other words, this will not be a source of "backscatter" (to the > contrary to accepting message then sending non-delivery notification to > sender whose address could have been forged). spamd.conf(5) says: Each blacklist must include a message, specified in the msg capability as a string. If the msg string is enclosed in double quotes, the characters in the quoted string are escaped as specified in getcap(3) with the exception that a colon (:) is allowed in the quoted string. The resulting string is used as the mes- sage. Alternatively, if the msg string is not specified in quotes, it is assumed to be a local filename from which the message text may be read. The message is configured in spamd(8) to be displayed in the SMTP dialogue to any connections that match addresses in the blacklist. The sequence \" in the message will produce a double quote in the output. The sequence %% will produce a single % in the output, and the sequence %A will be expanded in the message by spamd(8) to display the connecting IP address in the output. Since the message is "to be displayed in the SMTP dialogue", I also think that backscatter isn't possible. As you said the message won't be accepted. In addition spamd(8) does the following: When a sending host talks to spamd, the reply will be stuttered. That is, the response will be sent back a character at a time, slowly. For blacklisted hosts, the entire dialogue is stuttered. For greylisted hosts, the default is to stutter for the first 10 seconds of dialogue only. So chances are quite high that a blacklisted malicious host will give up at some point (before getting the error) anyway. Niklaas --Y7xTucakfITjPcLV Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJXqtKPAAoJEG2fODeJrIU/g6cP+QF5pyucXbCqrR5eIN0s4lw/ KIBtRSae1EMW/dPBvfgIKU/C8IgiTSMvStetdhBdyIGOcuRAmYghxUAqqLKQinRd DOWRDcyM/xzE1YzLlGBrrjHWmdoibf7MTv1VWPsakaQRrbHnYjhooScXoIIdGPCQ cakurX9ncoo2pUKUUe9GFz79vjFk9pRe+pEXa/NmZyGX5rKvPqaFkvHy/TXDCmF4 OTtO86IqwKdAEzYNGMFB/mMD7+R8Wb0HDNV8p1oVLl6tXtPCuVY8ddJDUNq8dkb+ Ft2MmyrgMfFKoDqwMymT0MLRgLkHDeIdy1QDUgt/PWEyMPu5VQjgKQKdQEcjbhiQ q9creNJ43rRL/59cM0g4ATQbWNR0Sy0AjTG/hVHz2aihOmvxaFitm99VLHtSptNC wJAsELq80z8xrlIyrTB8c4JCil9cWsgQoALIhPl93+BgCVIYPKjKgNnuaYzltZDe q1GvBTvwFl6cisSS+YCtLhcclOO5vaqyYyVYGEYJOnfTx4u9BxQSMAFMGmR/tCp3 Yp638M+7xhIVqlYG7ScVLs56joxlu3O8hZGqe5ZUJnPT6zpysnclXm5uS3tPXiPq COPAl3JgUnnvwimh3paxHVWG6v6jgXM+7oDjWO1BegQEDsSea+COQfpvYDlVESOs e64HHAZKypNfOGCYFjtt =cV5Z -----END PGP SIGNATURE----- --Y7xTucakfITjPcLV-- From owner-freebsd-questions@freebsd.org Wed Aug 10 08:40:50 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 23176BB4EBD for ; Wed, 10 Aug 2016 08:40:50 +0000 (UTC) (envelope-from erichsfreebsdlist@alogt.com) Received: from alogt.com (alogt.com [69.36.191.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 029B51ED6 for ; Wed, 10 Aug 2016 08:40:49 +0000 (UTC) (envelope-from erichsfreebsdlist@alogt.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=alogt.com; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:References: In-Reply-To:Message-ID:Subject:Cc:To:From:Date:Sender:Reply-To:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=CQfAcA9bAwkbMc1s/hzUSq+KiRXh4zqKx9Zm+ONUUqg=; b=HD6YCr/1HEdhGAw2AF+WiydgK/ oMptCbN+ge+Jy8nZ35IlZ/g13IsQjA7Xpm3sXxo7LnXs3eAdsmFXdtBqQZNA9ME8AFOeT8FdWPFgP plYuW83JB+r5J/8Py1KcV/3syV98oEmO1mMQ8e8+QmOhRvE6fih2YAS6sBm4Z58bnQA0=; Received: from [114.120.232.86] (port=25324 helo=X220.alogt.com) by sl-508-2.slc.westdc.net with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.87) (envelope-from ) id 1bXOjJ-003Gzx-S2; Wed, 10 Aug 2016 02:19:14 -0600 Date: Wed, 10 Aug 2016 16:19:09 +0800 From: Erich Dollansky To: Manish Jain Cc: "freebsd-questions@freebsd.org" Subject: Re: Will installing a separate graphics card restore normal graphics ? Message-ID: <20160810161909.76c134af@X220.alogt.com> In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - sl-508-2.slc.westdc.net X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - alogt.com X-Get-Message-Sender-Via: sl-508-2.slc.westdc.net: authenticated_id: erichsfreebsdlist@alogt.com X-Authenticated-Sender: sl-508-2.slc.westdc.net: erichsfreebsdlist@alogt.com X-Source: X-Source-Args: X-Source-Dir: X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 08:40:50 -0000 Hi, On Wed, 10 Aug 2016 05:23:41 +0000 Manish Jain wrote: > The X server under FreeBSD is not giving normal graphics with my new > AMD A6-6400K processor + Asus A68HM motherboard with onboard ATI > Radeon 8470 graphics. A lot of the text of Gnome's Applications menu > list is missing and strange streaks appear at a few places on the > screen. > > Would it help if I were to install a separate graphics card ? I have > no idea whether it is possible to disable the onboard graphics > adapter, but if that is possible, I can try using a dedicated VGA > card. > I use the vesa driver for some machines. Did you try this one? Erich From owner-freebsd-questions@freebsd.org Wed Aug 10 11:02:35 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 08B8CBB4239 for ; Wed, 10 Aug 2016 11:02:35 +0000 (UTC) (envelope-from m.e.sanliturk@gmail.com) Received: from mail-oi0-x22b.google.com (mail-oi0-x22b.google.com [IPv6:2607:f8b0:4003:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id BED2B1686 for ; Wed, 10 Aug 2016 11:02:34 +0000 (UTC) (envelope-from m.e.sanliturk@gmail.com) Received: by mail-oi0-x22b.google.com with SMTP id l203so54473391oib.1 for ; Wed, 10 Aug 2016 04:02:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=gsmlJwh5YzoOpgYwDunvFFuTibuCfaYkHzBcMXq3gWA=; b=naXB6+18IAwgbsRf133kNFFRCx11ciW1c6YAv8Otq6UBCyKCDoBfta51va/fmL2z2L CSyTpEjptva3x/jTf/6W4/eKrzWEqZl445CGihVGfEkBxHa1ujlOc2ndCN8Z+2710QTb jMLGYLa6N0EEN8h8uTr7ZvFxa/ldj+2GMOsNOxyenF/nahGkTKpvOAv/GWYaueYpddEo b7+r0nj/ZVtwMC03uIeNlog5ZN/C6DjR8sTTpY0mODGEW5C80dxUmAKuDNeGwGbiEjYY vpk5fkX/Cbw4EOSDB/gW0/tmqxIxLfV5RMqbSizqly6+ty6H120CO2BfVcIXSrPri9U2 vIdQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=gsmlJwh5YzoOpgYwDunvFFuTibuCfaYkHzBcMXq3gWA=; b=V/uLPu8a9oWEjV/0XMfq87/enqgIvOaVQ/lBesxJ84K6l/MFDMwylXbSbNuj9a1vQf 48mHdOcbkwokFyP9QiwWUIn2uH4c4GYtHB0LolLgPAqU5CRNEL2kaFLXu6BXALff0eHa PFXb2qltSDSSQtecFcAQVJJwAJfVK+a32EyVtVdDMxXDehPAgvRmJA0phnnaG61eA1za iJ6o/7yaZs84yMH6I6mD7jVm4glK6ds2aeIYL78KNhGQ0Xl5dihG9V1YAHjC5M/x4t6b RoqHd1i725vPqrokgzvzSDbrQTtmAEbFRN+69Yb4hN+prjy69YXy+ZTQU8LrfYaOdkFX qBMA== X-Gm-Message-State: AEkoouvsQdte12UGLVElovjac5k44d9NKCqSXa/YBTKyvu8PMOsWIQ1x82p+WQruuijFkZu5+wBS4yW2H+Qrug== X-Received: by 10.202.72.71 with SMTP id v68mr1670009oia.70.1470826954011; Wed, 10 Aug 2016 04:02:34 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.44.182 with HTTP; Wed, 10 Aug 2016 04:02:33 -0700 (PDT) In-Reply-To: <20160810080555.3a86bf55.freebsd@edvax.de> References: <20160810080555.3a86bf55.freebsd@edvax.de> From: Mehmet Erol Sanliturk Date: Wed, 10 Aug 2016 04:02:33 -0700 Message-ID: Subject: Re: Will installing a separate graphics card restore normal graphics ? To: Polytropon Cc: Manish Jain , "freebsd-questions@freebsd.org" Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 11:02:35 -0000 On Tue, Aug 9, 2016 at 11:05 PM, Polytropon wrote: > On Wed, 10 Aug 2016 05:23:41 +0000, Manish Jain wrote: > > Hi, > > > > The X server under FreeBSD is not giving normal graphics with my new AMD > > A6-6400K processor + Asus A68HM motherboard with onboard ATI Radeon 8470 > > graphics. A lot of the text of Gnome's Applications menu list is > > missing and strange streaks appear at a few places on the screen. > > CHeck the file /var/log/Xorg.0.log for any "EE" entries (errors). > Also determine which driver X has actually loaded automatically. > There are additional drivers in the ports collection which you > might try (ati, radeon, radeonhd, if I remember correctly - long > time no ATI card here). You can also force X to use a specific > driver using the xorg.conf mechanism. In worst case, try VESA. > It will not provide useful 3D results, but for desktop use, it > should be sufficient until the problem is solved. > > Here is an example for an ATI Radeon 9600 (or 9200?): > > Section "Device" > Identifier "Card0" > Driver "ati" > VendorName "ATI Technologies Inc" > BoardName "Rage 128 Pro Ultra TF" > BusID "PCI:1:5:0" > VideoRam 32768 > EndSection > > This specifies the "ati" driver (formerly part of XFree86, but > in your case, "radeonhd" would probably be a better choice after > you've installed the required port/package). Check the manual > page supplied with the driver if your card is on the list of > supported devices. > > Keep in mind you usually don't need a complete xorg.conf today; > a partial file containing only those parts you wish to "hardcode" > is sufficient. > > > > > Would it help if I were to install a separate graphics card ? > > If it is _possible_ to do so, then yes, as long as the following > points are met: > > 1. The card mechanically fits to the mainboard. > > 2. The card is compatible with the mainboard and the power supply. > > 3. The card is supported by a driver available for FreeBSD. > > Additional point: > > 4. The driver supports all desired functionality of the card (3D). > > > > > I have no > > idea whether it is possible to disable the onboard graphics adapter, but > > if that is possible, I can try using a dedicated VGA card. > > It should be possible to do this in the BIOS/UEFI. In some cases, > it happens automatically when a second GPU is detected. > > > Read booklet of your main board . It is very likely that there is information about effect of using other graphics card in your mother board . For example , in my ASUS mother board ( Intel type ) , it is said that , approximately , "When a graphics card is used , mother board graphics ports are DISABLED ." If you can not information about this issue , you may ask to ASUS ( see global ASUS web site ) . > > > > > -- > Polytropon > Magdeburg, Germany > Happy FreeBSD user since 4.0 > Andra moi ennepe, Mousa, ... > _______________________________________________ > > Mehmet Erol Sanliturk From owner-freebsd-questions@freebsd.org Wed Aug 10 14:31:58 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 71569BB4C2E for ; Wed, 10 Aug 2016 14:31:58 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.70.90]) by mx1.freebsd.org (Postfix) with ESMTP id 327B81007 for ; Wed, 10 Aug 2016 14:31:57 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id AF859CB8CB0; Wed, 10 Aug 2016 09:31:50 -0500 (CDT) Received: from 128.135.52.6 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Wed, 10 Aug 2016 09:31:50 -0500 (CDT) Message-ID: <15992.128.135.52.6.1470839510.squirrel@cosmo.uchicago.edu> In-Reply-To: <20160810070701.GB36980@box-hlm-03.niklaas.eu> References: <2394887a809b4ad8e702d1d13bb1337c@mail.zplay.eu> <20160807180149.GC12411@len-t420.klaas> <44D296EC-FA25-4279-9501-8BB6B2DD86A6@mail.sermon-archive.info> <20160808063138.GA20037@box-hlm-03.niklaas.eu> <33245.128.135.52.6.1470667918.squirrel@cosmo.uchicago.edu> <20160810070701.GB36980@box-hlm-03.niklaas.eu> Date: Wed, 10 Aug 2016 09:31:50 -0500 (CDT) Subject: Re: Need advice for setting up mail server From: "Valeri Galtsev" To: freebsd-questions@freebsd.org Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 14:31:58 -0000 On Wed, August 10, 2016 2:07 am, Niklaas Baudet von Gersdorff wrote: > Valeri Galtsev [2016-08-08 09:51 -0500] : > >> > In /usr/local/etc/spamd/spamd.conf I use two of the example >> > lists: >> > >> > all:\ >> > :uatraps:nixspam: >> > >> > # University of Alberta greytrap hits. >> > # Addresses stay in it for 24 hours from time they misbehave. >> > uatraps:\ >> > :black:\ >> > :msg="Your address %A has sent mail to a ualberta.ca spamtrap\n\ >> > within the last 24 hours":\ >> > :method=http:\ >> > :file=www.openbsd.org/spamd/traplist.gz >> > >> > # Nixspam recent sources list. >> > # Mirrored from http://www.heise.de/ix/nixspam >> > nixspam:\ >> > :black:\ >> > :msg="Your address %A is in the nixspam list\n\ >> > See http://www.heise.de/ix/nixspam/dnsbl_en/ for details":\ >> > :method=http:\ >> > :file=www.openbsd.org/spamd/nixspam.gz > [...] >> quick question here. The alleged spam message was never accepted here, >> instead "SMTP error is generated" telling one of the reasons above, >> right? >> In other words, this will not be a source of "backscatter" (to the >> contrary to accepting message then sending non-delivery notification to >> sender whose address could have been forged). > > spamd.conf(5) says: > > Each blacklist must include a message, specified in the msg > capability as a string. If the msg string is enclosed in > double quotes, the characters in the quoted string are escaped > as specified in getcap(3) with the exception that a colon (:) > is allowed in the quoted string. The resulting string is used > as the mes- sage. Alternatively, if the msg string is not > specified in quotes, it is assumed to be a local filename from > which the message text may be read. > > The message is configured in spamd(8) to be displayed in the > SMTP dialogue to any connections that match addresses in the > blacklist. The sequence \" in the message will produce > a double quote in the output. The sequence %% will produce > a single % in the output, and the sequence %A will be expanded > in the message by spamd(8) to display the connecting IP address > in the output. > > Since the message is "to be displayed in the SMTP dialogue", > I also think that backscatter isn't possible. As you said the > message won't be accepted. > > In addition spamd(8) does the following: > > When a sending host talks to spamd, the reply will be > stuttered. That is, the response will be sent back a character > at a time, slowly. For blacklisted hosts, the entire dialogue > is stuttered. For greylisted hosts, the default is to stutter > for the first 10 seconds of dialogue only. > > So chances are quite high that a blacklisted malicious host will > give up at some point (before getting the error) anyway. > > Niklaas Thanks Niklaas! Both of your posts are very instructive. Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Wed Aug 10 15:21:16 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 05441BB5273 for ; Wed, 10 Aug 2016 15:21:16 +0000 (UTC) (envelope-from Ben.Lavery@capita.co.uk) Received: from cluster-b.mailcontrol.com (cluster-b.mailcontrol.com [85.115.56.190]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.mailcontrol.com", Issuer "DigiCert SHA2 High Assurance Server CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A00C41966 for ; Wed, 10 Aug 2016 15:21:15 +0000 (UTC) (envelope-from Ben.Lavery@capita.co.uk) Received: from CAPPRWMEEG01.capita.co.uk ([195.89.201.254]) by rly08b.srv.mailcontrol.com (MailControl) with ESMTPS id u7AESo3k042674 (version=TLSv1 cipher=AES128-SHA bits=128 verify=FAIL) for ; Wed, 10 Aug 2016 15:33:53 +0100 Received: from CAPPRWMEHC01.central.ad.capita.co.uk (10.154.131.162) by CAPPRWMEEG01.capita.co.uk (10.154.64.241) with Microsoft SMTP Server (TLS) id 14.3.294.0; Wed, 10 Aug 2016 15:33:50 +0100 Received: from edge.capita.co.uk (10.154.64.241) by CAPPRWMEHC01.central.ad.capita.co.uk (10.154.131.162) with Microsoft SMTP Server (TLS) id 14.3.294.0; Wed, 10 Aug 2016 15:33:29 +0100 Received: from EUR03-AM5-obe.outbound.protection.outlook.com (213.199.154.113) by edge.capita.co.uk (10.154.64.241) with Microsoft SMTP Server (TLS) id 14.3.294.0; Wed, 10 Aug 2016 15:33:48 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=capita.onmicrosoft.com; s=selector1-capita-co-uk; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=R27Bap80WaWLsYXCNrTMTCv5PAenCvonofV8B86zA7g=; b=bk31wlZN6RGRT8d+vF0HXD/8m1btsBz5DpdQpP3rxxkJIxwyBEI80hsxO0m957vfoDqSah06PO3XPp165UNdO7ejQplMAh+Zg+QyUgKtEOWCPOL0xWgBPghnCH27wZtpUp8ByUS/YjtIIng3DirVjY2lK7XvJ7U/+Z6OFKRycjA= Received: from AM3PR04MB1202.eurprd04.prod.outlook.com (10.163.6.148) by AM3PR04MB1202.eurprd04.prod.outlook.com (10.163.6.148) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.557.8; Wed, 10 Aug 2016 14:33:25 +0000 Received: from AM3PR04MB1202.eurprd04.prod.outlook.com ([fe80::6197:3592:b365:95ab]) by AM3PR04MB1202.eurprd04.prod.outlook.com ([fe80::6197:3592:b365:95ab%14]) with mapi id 15.01.0557.009; Wed, 10 Aug 2016 14:33:25 +0000 From: "Lavery, Benjamin (IT Enterprise Services)" To: "freebsd-questions@freebsd.org" Subject: RE: Serial redirection halts on Dell PowerEdge 1955 Blade (mfsBSD) Thread-Topic: Serial redirection halts on Dell PowerEdge 1955 Blade (mfsBSD) Thread-Index: AdHu+A/aAVoMm0dQTau1lXQn8/FjBwCahrWgAGx0ZiA= Date: Wed, 10 Aug 2016 14:33:25 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Ben.Lavery@capita.co.uk; x-originating-ip: [82.203.17.6] x-ms-office365-filtering-correlation-id: 1270d5d6-80cb-4d6e-4de3-08d3c12b499b x-microsoft-exchange-diagnostics: 1; AM3PR04MB1202; 20:uvVbg8pq6PguH6x22TALtO5+/f41pRV62ZU2H/tdWPjWAlym67ikLdUGMVl8OenQ3iBZ/dSV71l/cgncxM7eWllQz6cDb9Bjy3aX08bBE2RwmSCvjIbhCjS/QDWcu9LrEpqQQZ8NOWVQBQ1BmFYsYKjBJ6cDdSVIYU8GrNhG98XfmSWMirU8U1RFpUUKXu+ltOTIQYKuawtlrt4yLWpWwE0DblqVatodrHtkLCJwSBS7SnCyTzaqMiYdqYkyVOwbad8mZqKZvUbTVASnruiCVlhAn9OukNBrEoZTr+BosFq+N+E+/cbVP8qtmX86CxZYGQegSwqvDf3+gkacCCzfasmkaTLD+Q3kjFBK3L9QNRx5qabD65dt7PIjASrVPSmbAE/vUkzo+8nptwcS2PgA3hEgrM0UV+u9qtdNkS2+U6dvPu6s77El8JHkwdKRoi7e5mYRmQZDSkokOPtS1g8tkUnIb/tp5LKIBKbnjYPk1xMURj8V8SyHA+Cn08l3IYK8 x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AM3PR04MB1202; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(17755550239193); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040166)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046); SRVR:AM3PR04MB1202; BCL:0; PCL:0; RULEID:; SRVR:AM3PR04MB1202; x-forefront-prvs: 0030839EEE x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(189002)(13464003)(66654002)(199003)(2351001)(586003)(5640700001)(33656002)(7736002)(110136002)(50986999)(5002640100001)(54356999)(1720100001)(189998001)(450100001)(3660700001)(86362001)(3900700001)(2501003)(305945005)(74316002)(11100500001)(3280700002)(97736004)(7696003)(15975445007)(105586002)(2900100001)(106356001)(7846002)(66066001)(3846002)(76576001)(102836003)(101416001)(19580395003)(2906002)(87936001)(8676002)(8936002)(81156014)(107886002)(5890100001)(92566002)(68736007)(81166006)(5250100002)(74482002)(6116002)(19580405001)(9686002)(357404004); DIR:OUT; SFP:1102; SCL:1; SRVR:AM3PR04MB1202; H:AM3PR04MB1202.eurprd04.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: capita.co.uk does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Aug 2016 14:33:25.0960 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 1edaad83-b2ef-483d-81f1-2c48682f40ec X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM3PR04MB1202 X-ExSBR-Organization: edge.capita.co.uk X-OriginatorOrg: capita.co.uk X-Scanned-By: MailControl 44278.1378 (www.mailcontrol.com) on 10.66.0.118 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 15:21:16 -0000 Fixed, thanks to this thread: http://mailing.freebsd.questions.narkive.com/= 1jubDzGu/r220-s-with-serial Adding=20 hw.uart.console=3D"io:0x2f8,br:57600" to /boot/loader.conf seems to have fixed the issue. -----Original Message----- From: Lavery, Benjamin (IT Enterprise Services)=20 Sent: 08 August 2016 11:48 To: 'freebsd-questions@freebsd.org' Subject: FW: Serial redirection halts on Dell PowerEdge 1955 Blade (mfsBSD) Good morning all, (Apologies, cross-posting from freebsd-hardware) I have been given an old Dell PowerEdge chassis filled with PowerEdge 1955 = blades. I also have a FreeNAS which I'm using to serve DHCP addresses and = TFTP for PXE booting. I can get the blades to PXE boot (I'm using pxelinux to load mfsbsd-10.3-RE= LEASE-amd64), but the serial redirection is only working for the first part= of the boot sequence. After select mfsBSD at the menu, I get the followin= g (verbose boot chosen at the boot menu): Loading memdisk... ok ok e820: 0000000000000000 00000000000a0000 1 e820: 0000000000100000 00000000cfea8000 1 e820: 00000000cffa8000 000000000000fc00 3 e820: 00000000cffb7c00 0000000000048400 2 Total size needed =3D 2513 bytes, allocating 3K Old dos memory at 0x8a000 (map says 0xa0000), loading at 0x89400 1588: 0xffff 15E801: 0x3c00 0xcbba INT 13 08: Success, count =3D 1, BPT =3D 0000:0000 Drive probing gives drive shift limit: 0x82 old: int13 =3D ca001da6 int15 =3D f000f859 int1e =3D f000efc7 new: int13 =3D 8940000a int15 =3D 894003ba int1e =3D f000efc7 Loading boot sector... booting... /boot/config: -D =20=20=20=20 FreeBSD/x86 boot Default: 0:ad(0p2)/boot/loader boot: BTX loader 1.00 BTX version is 1.02 console comconsole failed to initialize Consoles: internal video/keyboard serial port BIOS drive A: is disk0 BIOS drive C: is disk1 BIOS drive D: is disk2 BIOS 549kB/3353216kB available memory =20=20=20=20 FreeBSD/x86 bootstrap loader, Revision 1.1 (root@releng1.nyi.freebsd.org, Fri Mar 25 02:04:38 UTC 2016) \oading /boot/defaults/loader.conf lapic3: Routing NMI -> LINT1 lapic3: LINT1 trigger: edge lapic3: LINT1 polarity: high lapic7: Routing NMI -> LINT1 lapic7: LINT1 trigger: edge lapic7: LINT1 polarity: high MADT: Interrupt override: source 0, irq 2 ioapic0: Routing IRQ 0 -> intpin 2 MADT: Interrupt override: source 9, irq 9 ioapic0: intpin 9 trigger: level ioapic0 irqs 0-23 on motherboard ioapic1 irqs 32-55 on motherboard ioapic2 irqs 192-215 on motherboard cpu0 BSP: ID: 0x00000000 VER: 0x00050014 LDR: 0x00000000 DFR: 0xffffffff lint0: 0x00010700 lint1: 0x00000400 TPR: 0x00000000 SVR: 0x000001ff timer: 0x000100ef therm: 0x00010000 err: 0x000000f0 pmc: 0x00010400 wlan: <802.11 Link Layer> snd_unit_init() u=3D0x00ff8000 [512] d=3D0x00007c00 [32] c=3D0x000003ff= [1024] feeder_register: snd_unit=3D-1 snd_maxautovchans=3D16 latency=3D5 feede= r_rate_min=3D1 fe eder_rate_max=3D2016000 feeder_rate_round=3D25 null: nfslock: pseudo-device =91=91=91=91=91=91=91=91=91=91=91 The odd glitch (=91) is me trying to input after output stops. I'm accessi= ng the console by TELNETing to the blade chassis, and connecting to the bla= de console. I believe this runs at a baud rate of 57600. Because of this = I've modified the following files within mfsBSD: etc/ttys (from inside mfsroot.gz) # Serial terminals ttyu0 "/usr/libexec/getty std.57600" vt100 on secure ttyu1 "/usr/libexec/getty std.57600" dialup on secure ttyu2 "/usr/libexec/getty std.57600" vt100 off secure ttyu3 "/usr/libexec/getty std.57600" vt100 off secure # Dumb console dcons "/usr/libexec/getty std.9600" vt100 off secure boot/loader.conf boot_multicons=3D"YES" boot_serial=3D"YES" comconsole_speed=3D"57600" console=3D"comconsole" The Java console from the chassis web interface doesn't work on my laptop, = but via another server I've been able to grab the attached screenshot. It = states: getty[706]: open /dev/ttyu0: No such file or directory Unfortunately the Java console doesn't work well enough for me to use to lo= g in and get at any settings (getting it to load that far took 10 minutes..= .) The blades BIOS is set up to redirect to COM2 (it's either that or be disab= led) and to emulate vt100/vt200 (could also be ANSI, but this doesn't seem = to allow input). Would anyone have any ideas about how I can get console redirection working= past this point? Or where I can look to get more information? Many thanks, Ben This email is security checked and subject to the disclaimer on web-page: h= ttp://www.capita.co.uk/email-disclaimer.aspx From owner-freebsd-questions@freebsd.org Wed Aug 10 16:55:10 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0A131BB51CF for ; Wed, 10 Aug 2016 16:55:10 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 652241A4E for ; Wed, 10 Aug 2016 16:55:08 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id u7AGsgKk006703; Thu, 11 Aug 2016 02:54:43 +1000 (EST) (envelope-from smithi@nimnet.asn.au) Date: Thu, 11 Aug 2016 02:54:42 +1000 (EST) From: Ian Smith To: Aleksander Alekseev cc: freebsd-questions@freebsd.org Subject: Re: Power consumption tuning In-Reply-To: Message-ID: <20160811015734.D79687@sola.nimnet.asn.au> References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 16:55:10 -0000 In freebsd-questions Digest, Vol 636, Issue 4, Message: 2 On Tue, 9 Aug 2016 17:23:45 +0300 Aleksander Alekseev wrote: > Hello. > > I'm exploring how power consumption could be tuned on FreeBSD 11.0. I > discovered a few useful articles, for instance [1]. Also useful pieces > of advice were given on IRC. Resulting list is for now like this: > > * Use lightweight software (i3, GTK based GUI applications, etc), turn > off unused kernel modules, don't use full disc encryption, etc You don't need to 'turn off' unused modules, just don't load what you don't need :) More a memory use than power consumption issue? > * Reduce CPU frequency (sysctl dev.cpu.0.freq), use powerd to do it > automatically Yes. Its default parameters are usually a useful starting point. > * Reduce display brightness (sudo pkg install intel-backlight) > * Enable power save mode on NIC (sudo ifconfig wlan0 powersave) Check that your particular NIC works well in powersave mode. > * Disable unused USB devices (sudo usbconfig -d X.Y power_off) This might not win much, at least my webcam device saved maybe 150mW, and it wasn't good through suspend / resume without some fiddling. > * Reduce clock frequency (kern.hz = 100) I'm not convinced this wins much, power-wise, any more. With modern event counters mechanism - here HPET, one-shot mode - and kern.hz=1000 I see no more than 65-75 clock interrupts/s when idle, 2-300/s busy .. and that's on FreeBSD 9.3. > * Make sure your kernel is built without INVARIANTS and WITNESS You haven't said if this is for a desktop or laptop machine, two very different power consumption scenarios. Mention of [1] would suggest a laptop as that's what mav@'s work was focussed on there. > Perhaps there are other methods I didn't notice? For instance are there > any other sysctl parameters or kernel configuration options worth > trying? Well [1] stresses the importance of using maximum available C-states on your hardware. But except for powerd and C-states where possible, I wouldn't bother with all that to save an extra few watts on a desktop. > [1] https://wiki.freebsd.org/TuningPowerConsumption > Best regards, > Aleksander Alekseev What hardware? What OS version? cheers, Ian From owner-freebsd-questions@freebsd.org Wed Aug 10 18:43:40 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B2045BB594B for ; Wed, 10 Aug 2016 18:43:40 +0000 (UTC) (envelope-from afiskon@devzen.ru) Received: from relay11.nicmail.ru (relay11.nicmail.ru [195.208.3.7]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6918412A6 for ; Wed, 10 Aug 2016 18:43:40 +0000 (UTC) (envelope-from afiskon@devzen.ru) Received: from [109.70.25.214] (port=57339 helo=e733) by f06.mail.nic.ru with esmtp (Exim 5.55) (envelope-from ) id 1bXYTT-0006l6-1p; Wed, 10 Aug 2016 21:43:31 +0300 Received: from [188.123.231.37] (account afiskon@devzen.ru HELO e733) by proxy01.mail.nic.ru (Exim 5.55) with id 1bXYTR-0008MZ-Hk; Wed, 10 Aug 2016 21:43:29 +0300 Date: Wed, 10 Aug 2016 21:42:18 +0300 From: Aleksander Alekseev To: Ian Smith Cc: freebsd-questions@freebsd.org Subject: Re: Power consumption tuning Message-ID: <20160810214218.6788f2c1@e733> In-Reply-To: <20160811015734.D79687@sola.nimnet.asn.au> References: <20160811015734.D79687@sola.nimnet.asn.au> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 18:43:40 -0000 Hello, Ian. Thanks for a detailed reply! > Well [1] stresses the importance of using maximum available C-states > on your hardware. But except for powerd and C-states where possible, > I wouldn't bother with all that to save an extra few watts on a > desktop. > > > [1] https://wiki.freebsd.org/TuningPowerConsumption Well, I took a look on /etc/defaults/rc.conf and discovered that default values are: ``` performance_cx_lowest="C2" economy_cx_lowest="Cmax" ``` Since article describes C3 as a pretty dangerous thing I doubt that these parameters are worth tuning in my case. > What hardware? What OS version? 11.0-beta4 on Fujitsu Lifebook E733 laptop. BTW it's a great laptop for FreeBSD. Works everything including Wi-Fi adapter and hibernation. I didn't check bluetooth, webcam and fingerprint scanner though. I disabled this stuff in BIOS a long time ago since I don't use it anyway. -- Best regards, Aleksander Alekseev From owner-freebsd-questions@freebsd.org Wed Aug 10 19:56:09 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4BBAABB410C for ; Wed, 10 Aug 2016 19:56:09 +0000 (UTC) (envelope-from javeria_jalal@mail.comsats.edu.pk) Received: from isbfil.comsats.net.pk (isbfil.comsats.net.pk [210.56.8.33]) by mx1.freebsd.org (Postfix) with ESMTP id E483D15CC for ; Wed, 10 Aug 2016 19:56:08 +0000 (UTC) (envelope-from javeria_jalal@mail.comsats.edu.pk) Received: from isbfil.comsats.net.pk (isbfil.comsats.net.pk [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id D355FF21BFA for ; Thu, 11 Aug 2016 00:56:05 +0500 (PKT) Received: from mail.comsats.edu.pk (mail.comsats.edu.pk [210.56.8.85]) by isbfil.comsats.net.pk (Postfix) with ESMTP id B83CDF21BEC for ; Thu, 11 Aug 2016 00:56:05 +0500 (PKT) Received: from h-64-105-80-110.lsan.ca.globalcapacity.com ([64.105.80.110] helo=DB1) by mail.comsats.edu.pk with esmtpa (Exim 4.63) (envelope-from ) id 1bXZPV-0002I7-CL for freebsd-questions@freebsd.org; Thu, 11 Aug 2016 00:43:30 +0500 From: "WeTransfer" Subject: PO#: 001238 To: freebsd-questions@freebsd.org MIME-Version: 1.0 Date: Wed, 10 Aug 2016 12:43:31 -0700 Message-Id: Sender: javeria_jalal@mail.comsats.edu.pk X-TM-AS-Product-Ver: IMSS-7.1.0.1224-8.0.0.1202-22506.001 X-TM-AS-Result: No--3.115-8.0-31-1 X-imss-scan-details: No--3.115-8.0-31-1 X-TM-AS-User-Approved-Sender: No X-TM-AS-User-Blocked-Sender: No X-TM-AS-Result-Xfilter: Match text exemption rules:No Content-Type: text/plain Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2016 19:56:09 -0000 - This mail is in HTML. Some elements may be ommited in plain text. - Hello, You have received PO#: 001238 from POSH COMPANY LLC, that were uploaded to you through the WeTransfer. use the link below t= o download the Purchase Order on Adobe Pdf. CLICK HERE WeTransfer Plus! From owner-freebsd-questions@freebsd.org Thu Aug 11 12:02:04 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 55771BB6BCE for ; Thu, 11 Aug 2016 12:02:04 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id BD59B1FD1 for ; Thu, 11 Aug 2016 12:02:02 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id u7BC1iKx047024; Thu, 11 Aug 2016 22:01:45 +1000 (EST) (envelope-from smithi@nimnet.asn.au) Date: Thu, 11 Aug 2016 22:01:44 +1000 (EST) From: Ian Smith To: Aleksander Alekseev cc: freebsd-questions@freebsd.org Subject: Re: Power consumption tuning In-Reply-To: <20160810214218.6788f2c1@e733> Message-ID: <20160811212417.V79687@sola.nimnet.asn.au> References: <20160811015734.D79687@sola.nimnet.asn.au> <20160810214218.6788f2c1@e733> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Aug 2016 12:02:04 -0000 On Wed, 10 Aug 2016 21:42:18 +0300, Aleksander Alekseev wrote: > Thanks for a detailed reply! Thanks for not quoting it all :) > > Well [1] stresses the importance of using maximum available C-states > > on your hardware. But except for powerd and C-states where possible, > > I wouldn't bother with all that to save an extra few watts on a > > desktop. > > > > > [1] https://wiki.freebsd.org/TuningPowerConsumption > > Well, I took a look on /etc/defaults/rc.conf and discovered that > default values are: > > ``` > performance_cx_lowest="C2" > economy_cx_lowest="Cmax" > ``` > > Since article describes C3 as a pretty dangerous thing I doubt that > these parameters are worth tuning in my case. Perhaps not, but these are 'conservative' defaults as _some_ systems don't like Cmax (usually C3) on AC power, but I'd encourage you to try Cmax on AC as well .. the worst likely to happen is that it won't work. Not sure about 10.x but on 9.3 and earlier, defaults were both "HIGH" ie C1 and you always had to update these in rc.conf for laptops. C3 works just fine on my X200, and even on my ancient IBM ThinkPad T23: smithi on t23% t23stat Thu Aug 11 21:40:00 EST 2016 dev.cpu.0.freq: 733 0.03% 24.97% 74.99% last 590us { 0.55 0.70 0.65 } [ C1 C2 C3 : percentage of idle (halt) cycles spent in each] > > What hardware? What OS version? > > 11.0-beta4 on Fujitsu Lifebook E733 laptop. BTW it's a great laptop for > FreeBSD. Works everything including Wi-Fi adapter and hibernation. > I didn't check bluetooth, webcam and fingerprint scanner though. I > disabled this stuff in BIOS a long time ago since I don't use it anyway. Fair enough; I like most Fujitsus I've seen, never owned one though. I include below the script I use on my Lenovo X200 to see how things are going; perhaps you'll find some of it useful, especially seeing what Cx state usage is with different loads and such, and for reporting power consumption while running on battery. cheers, Ian ======= root@x200:/usr/head/src # x200stat Thu Aug 11 21:31:50 AEST 2016 dev.cpu.0.freq: 800 0.00% 1.77% 98.22% last 312us { 0.06 0.02 0.00 } 0.00% 1.29% 98.69% last 197us { HPET one-shot } dev.acpi_ibm.0.thermal: 45 44 -1 44 35 -1 33 -1 hw.acpi.thermal.tz0.temperature: 45.0C tz1: 44.0C dev.acpi_ibm.0.fan_level: 0 _speed: 3778 high capacity: 96% time: unknown rate: 0 mW voltage: 12418 mV ======= #!/bin/sh # x200stat smithi freebsd 9+ 2 CPUs # polished 16-18/11/15 & 7/12/15 SN="sysctl -n"; t=' ' # tab # backtick haters need not apply [ `$SN kern.eventtimer.periodic` -eq 1 ] && p=periodic || p=one-shot echo -n "`date` "; sysctl dev.cpu.0.freq echo "`$SN dev.cpu.0.cx_usage`${t}`$SN vm.loadavg`" echo "`$SN dev.cpu.1.cx_usage`${t}{ `$SN kern.eventtimer.timer` $p }" sysctl dev.acpi_ibm.0.thermal echo -n "`sysctl hw.acpi.thermal.tz0.temperature`" echo "${t}tz1: `$SN hw.acpi.thermal.tz1.temperature`" echo -n "`sysctl dev.acpi_ibm.0.fan_level`" echo "${t}_speed: `$SN dev.acpi_ibm.0.fan_speed`" acpiconf -i0 | egrep 'State|Remain|Present' | xargs echo | \ ( next=0; rem=0; pre=0 for i in `cat -`; do # working if kinda ugly parsing .. if [ $next -gt 0 ]; then [ "$i" = "high" ] && i="high$t" # else {,dis}charging [ "$i" = "voltage:" ] && echo -n "$t" [ $next -eq 2 ] && [ $pre -eq 0 ] && echo -n "$t" echo -n "$i " [ "$i" = "critical" ] || next=$((next-1)) continue fi case $i in State:) next=1 ;; Remaining) [ $rem -eq 0 ] && rem=1 && echo -n " " next=2 ;; # capacity: nn% then time: hh:mm Present) [ $pre -eq 0 ] && pre=1 && echo next=3 ;; # rate: nnnnn mW then voltage: nn mV *) echo -n " unexpected!: $i " ;; esac done ) echo exit 0 From owner-freebsd-questions@freebsd.org Thu Aug 11 18:43:44 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B7DBEBB6A29 for ; Thu, 11 Aug 2016 18:43:44 +0000 (UTC) (envelope-from bsdports@cloudzeeland.nl) Received: from ares.cloudzeeland.nl (cloudzeeland.xs4all.nl [83.161.133.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "cloudzeeland.nl", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5520E1DDF for ; Thu, 11 Aug 2016 18:43:43 +0000 (UTC) (envelope-from bsdports@cloudzeeland.nl) Received: from ares.cloudzeeland.nl (ares.cloudzeeland.nl [10.10.10.32]) by ares.cloudzeeland.nl (Postfix) with ESMTP id C15CD4FAD4D1 for ; Thu, 11 Aug 2016 20:43:33 +0200 (CEST) Received: from [10.10.10.34] (daedalus.cloudzeeland.nl [10.10.10.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by ares.cloudzeeland.nl (Postfix) with ESMTPSA id 97BB74FAD4D0 for ; Thu, 11 Aug 2016 20:43:33 +0200 (CEST) To: "freebsd-questions@FreeBSD.org" From: JosC Subject: Upgrade Perl5.2.20 (vulnerable) Message-ID: Date: Thu, 11 Aug 2016 20:43:35 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 X-Virus-Scanned: ClamAV using ClamSMTP on ares.cloudzeeland.nl Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Aug 2016 18:43:44 -0000 Can someone tell me how to best upgrade from Perl5.20.x to the latest stable version? Tried to upgrade to Perl5.22 but got (also) the same issue while doing so: ===> Cleaning for perl5-5.20.3_14 ===> perl5-5.20.3_14 has known vulnerabilities: perl5-5.20.3_14 is vulnerable: p5-XSLoader -- local arbitrary code execution CVE: CVE-2016-6185 WWW: https://vuxml.FreeBSD.org/freebsd/3e08047f-5a6c-11e6-a6c3-14dae9d210b8.html perl5-5.20.3_14 is vulnerable: perl -- local arbitrary code execution CVE: CVE-2016-1238 WWW: https://vuxml.FreeBSD.org/freebsd/72bfbb09-5a6a-11e6-a6c3-14dae9d210b8.html 1 problem(s) in the installed packages found. => Please update your ports tree and try again. => Note: Vulnerable ports are marked as such even if there is no update available. => If you wish to ignore this vulnerability rebuild with 'make DISABLE_VULNERABILITIES=yes' *** Error code 1 Stop. make[1]: stopped in /usr/ports/lang/perl5.20 *** Error code 1 Stop. make: stopped in /usr/ports/lang/perl5.20 --- cut --- Thanks, Jos Chrispijn From owner-freebsd-questions@freebsd.org Thu Aug 11 19:17:43 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 56D84BB6159; Thu, 11 Aug 2016 19:17:43 +0000 (UTC) (envelope-from dweimer@dweimer.net) Received: from webmail.dweimer.net (24-240-198-188.static.stls.mo.charter.com [24.240.198.188]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2872412DC; Thu, 11 Aug 2016 19:17:42 +0000 (UTC) (envelope-from dweimer@dweimer.net) Received: from webmail.dweimer.local (localhost [10.9.5.2]) by webmail.dweimer.net (8.15.2/8.15.2) with ESMTPS id u7BIwqEG029425 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 11 Aug 2016 13:58:52 -0500 (CDT) (envelope-from dweimer@dweimer.net) Received: (from www@localhost) by webmail.dweimer.local (8.15.2/8.15.2/Submit) id u7BIwpgX029423; Thu, 11 Aug 2016 13:58:51 -0500 (CDT) (envelope-from dweimer@dweimer.net) X-Authentication-Warning: webmail.dweimer.local: www set sender to dweimer@dweimer.net using -f To: JosC Subject: Re: Upgrade Perl5.2.20 (vulnerable) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Thu, 11 Aug 2016 13:58:51 -0500 From: "Dean E. Weimer" Cc: "freebsd-questions@FreeBSD.org" , owner-freebsd-questions@freebsd.org Organization: dweimer.net Reply-To: dweimer@dweimer.net Mail-Reply-To: dweimer@dweimer.net In-Reply-To: References: Message-ID: <98acd0e6bcc55fb1140210c315c2e1e5@dweimer.net> X-Sender: dweimer@dweimer.net User-Agent: Roundcube Webmail/1.2.1 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Aug 2016 19:17:43 -0000 On 2016-08-11 1:43 pm, JosC wrote: > Can someone tell me how to best upgrade from Perl5.20.x to the latest > stable version? > > Tried to upgrade to Perl5.22 but got (also) the same issue while doing > so: > > > ===> Cleaning for perl5-5.20.3_14 > ===> perl5-5.20.3_14 has known vulnerabilities: > perl5-5.20.3_14 is vulnerable: > p5-XSLoader -- local arbitrary code execution > CVE: CVE-2016-6185 > WWW: > https://vuxml.FreeBSD.org/freebsd/3e08047f-5a6c-11e6-a6c3-14dae9d210b8.html > > perl5-5.20.3_14 is vulnerable: > perl -- local arbitrary code execution > CVE: CVE-2016-1238 > WWW: > https://vuxml.FreeBSD.org/freebsd/72bfbb09-5a6a-11e6-a6c3-14dae9d210b8.html > > 1 problem(s) in the installed packages found. > => Please update your ports tree and try again. > => Note: Vulnerable ports are marked as such even if there is no > update available. > => If you wish to ignore this vulnerability rebuild with 'make > DISABLE_VULNERABILITIES=yes' > *** Error code 1 > > Stop. > make[1]: stopped in /usr/ports/lang/perl5.20 > *** Error code 1 > > Stop. > make: stopped in /usr/ports/lang/perl5.20 > > --- cut --- > > > Thanks, > Jos Chrispijn Looks like they just updated all the perl ports to a release candidate version to fix this, as in 20 to 30 minutes ago. -- Thanks, Dean E. Weimer http://www.dweimer.net/ From owner-freebsd-questions@freebsd.org Thu Aug 11 22:28:23 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id ED44BBB751E for ; Thu, 11 Aug 2016 22:28:23 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.70.90]) by mx1.freebsd.org (Postfix) with ESMTP id D0263122A for ; Thu, 11 Aug 2016 22:28:23 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id 6F2CDCB8CB0; Thu, 11 Aug 2016 17:28:17 -0500 (CDT) Received: from 128.135.52.6 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Thu, 11 Aug 2016 17:28:17 -0500 (CDT) Message-ID: <33717.128.135.52.6.1470954497.squirrel@cosmo.uchicago.edu> Date: Thu, 11 Aug 2016 17:28:17 -0500 (CDT) Subject: script to make webpage snapshot From: "Valeri Galtsev" To: freebsd-questions@freebsd.org Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Aug 2016 22:28:24 -0000 Dear Experts, Could someone recommend a script or utility one can run from command line on Linux or UNIX machine to make a snapshot image of webpage? We have a signage (xibo) and whoever creates/changes content, likes to add URLs of some webpages there. All works well if these are webpages on our servers (which are pretty fast), but some external servers often take time to respond and take time to assemble the page, in addition these servers sometimes get really busy, and when response is longer than time devoted for that content in signage window, this window hangs forever with blank white field until you restart client. Trivial workaround: just to get snapshot image (as, say daily cron job), and point signage client to that snapshot definitely will solve it, and simultaneously we will stop bugging other people servers often without much need for it. I amd trying to avoid mirroring that URL content, hence I decided not to use wget or curl. But when I tried to search for some utility or script that makes webpage snapshot, I discovered that my ability to search degraded somehow... Thanks for all your pointers! Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Thu Aug 11 22:33:04 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 508E3BB76C4 for ; Thu, 11 Aug 2016 22:33:04 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2CEFF1715 for ; Thu, 11 Aug 2016 22:33:03 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id B4B0C20282 for ; Thu, 11 Aug 2016 18:33:02 -0400 (EDT) Received: from web4 ([10.202.2.214]) by compute7.internal (MEProxy); Thu, 11 Aug 2016 18:33:02 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:message-id:mime-version:subject:to:x-sasl-enc :x-sasl-enc; s=smtpout; bh=nVPwMvkdnefYIkgNU9G0pvvH8fc=; b=JAYEi vCDC8hPpjRUVlGRbxSYXTns2o23KC4GIP0fScESlyRlgtC7gaw/DQdnPvJ1cNZJn xwhkp/nauc8YFad3Jj/wOlwmQGa5o4EoP3vmQ565FRzzcVQXMmJFA7uzbHSkKgF6 qGQzygP8lQLM1EushunJq6VxCXDtXAHDlvttdc= Received: by mailuser.nyi.internal (Postfix, from userid 99) id 7C042CC742; Thu, 11 Aug 2016 18:33:02 -0400 (EDT) Message-Id: <1470954782.1073917.692948769.21D9FF94@webmail.messagingengine.com> X-Sasl-Enc: ehyKS6KTzf+7K2BewNpY/8/2E3ZOAQosDL0cXcKbVN6p 1470954782 From: Mark Felder To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-3a386667 Subject: Monitoring FreeBSD Base System Vulnerabilities Date: Thu, 11 Aug 2016 17:33:02 -0500 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Aug 2016 22:33:04 -0000 The FreeBSD base system has been difficult to monitor for published vulnerabilities for a very long time. This will improve drastically when we finally achieve a packaged base system, but that leaves users of currently supported -RELEASE systems without a standardized option. The freebsd-version(1) utility has existed since FreeBSD 10.0. This script is capable of correctly identifying the version of the FreeBSD kernel and the FreeBSD base system. It is an important step forward in helping users be confident in identifying the FreeBSD system's patch level. I do not like reinventing the wheel, and it occurred to me that for a long time the FreeBSD SA announcements were properly documented in vuxml. This provided an opportunity and scratched an itch I had at work, so here goes nothing: I am presenting here a useful albeit unsupported method of monitoring FreeBSD for base system vulnerabilities via the pkg(8) utility utilizing entries in the vuxml database. The pkg(8) utility as you probably know can check your system for known vulnerable packages. It does this with the "pkg audit" command. Additionally you can pass any package name and version string as an argument and it will check the database for results. It is possible to check your system against the vuxml database by converting the freebsd-version(1) output to the correct string and passing it to "pkg audit". Example of checking the base system (note, this is /bin/sh syntax): $ freebsd-version -u 10.3-RELEASE-p2 $ pkg audit $(freebsd-version -u | sed 's,-RELEASE-p,_,') FreeBSD-10.3_2 is vulnerable: FreeBSD -- Multiple vulnerabilities of ntp CVE: CVE-2016-4957 CVE: CVE-2016-4956 CVE: CVE-2016-4955 CVE: CVE-2016-4954 CVE: CVE-2016-4953 WWW: https://vuxml.FreeBSD.org/freebsd/7cfcea05-600a-11e6-a6c3-14dae9d210b8.html FreeBSD-10.3_2 is vulnerable: libarchive -- multiple vulnerabilities CVE: CVE-2015-2304 CVE: CVE-2013-0211 WWW: https://vuxml.FreeBSD.org/freebsd/7c63775e-be31-11e5-b5fe-002590263bf5.html FreeBSD-10.3_2 is vulnerable: FreeBSD -- Heap vulnerability in bspatch CVE: CVE-2014-9862 WWW: https://vuxml.FreeBSD.org/freebsd/7d4f4955-600a-11e6-a6c3-14dae9d210b8.html Now we have results for the base system! Let's check the kernel: $ pkg audit $(freebsd-version -k | sed 's,-RELEASE-p,_,') FreeBSD-kernel-10.3_2 is vulnerable: FreeBSD -- Buffer overflow in keyboard driver CVE: CVE-2016-1886 WWW: https://vuxml.FreeBSD.org/freebsd/7bbc0e8c-600a-11e6-a6c3-14dae9d210b8.html FreeBSD-kernel-10.3_2 is vulnerable: FreeBSD -- Kernel stack disclosure in 4.3BSD compatibility layer WWW: https://vuxml.FreeBSD.org/freebsd/7cad4795-600a-11e6-a6c3-14dae9d210b8.html FreeBSD-kernel-10.3_2 is vulnerable: FreeBSD -- Kernel stack disclosure in Linux compatibility layer WWW: https://vuxml.FreeBSD.org/freebsd/7c5d64dd-600a-11e6-a6c3-14dae9d210b8.html FreeBSD-kernel-10.3_2 is vulnerable: FreeBSD -- Incorrect argument handling in sendmsg(2) CVE: CVE-2016-1887 WWW: https://vuxml.FreeBSD.org/freebsd/7c0bac69-600a-11e6-a6c3-14dae9d210b8.html The results speak for themselves. I have recently finished adding all missing entries to the vuxml database that affect -RELEASE systems since 2013. This covers the tail end of 8.x, much of 9.x, and bleeds into the 10.x RELEASE lifetime. Systems older are End of Life and never supported the FreeBSD pkg(8) utility anyway, so I have not put in the effort to search out those missing entries. This method can be used on FreeBSD systems that do not have the freebsd-version(1) utility, but you will not have a reliable method to get the version of the FreeBSD base system. You can pull the kernel version from uname(1), but you will have to devise your own method of keeping track of the base system version. Beware of the leopard, etc. I hope you find this a valuable method for discovering vulnerabilities affecting your servers and help you assess risk and plan patch management. Please remember this is not endorsed by secteam and is liable to be full of errors or out of date. I would suggest using this as one several method of assessing your systems. Moving forward I hope to better coordinate with secteam to ensure we have new FreeBSD SA's entered in the vuxml database in a timely manner. -- Mark Felder ports-secteam member feld@FreeBSD.org From owner-freebsd-questions@freebsd.org Thu Aug 11 23:05:04 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9AD7ABB7FB0 for ; Thu, 11 Aug 2016 23:05:04 +0000 (UTC) (envelope-from gmx@ross.cx) Received: from www81.your-server.de (www81.your-server.de [213.133.104.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 65A631E93 for ; Thu, 11 Aug 2016 23:05:03 +0000 (UTC) (envelope-from gmx@ross.cx) Received: from [77.23.79.25] (helo=workstation) by www81.your-server.de with esmtpsa (TLSv1.2:DHE-RSA-AES128-GCM-SHA256:128) (Exim 4.85_2) (envelope-from ) id 1bXyez-0002vF-Ay; Fri, 12 Aug 2016 00:41:09 +0200 Content-Type: text/plain; charset=iso-8859-15; format=flowed; delsp=yes To: freebsd-questions@freebsd.org, "Valeri Galtsev" Subject: Re: script to make webpage snapshot References: <33717.128.135.52.6.1470954497.squirrel@cosmo.uchicago.edu> Date: Fri, 12 Aug 2016 00:41:09 +0200 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: "Michael Ross" Message-ID: In-Reply-To: <33717.128.135.52.6.1470954497.squirrel@cosmo.uchicago.edu> User-Agent: Opera Mail/1.0 (Win32) X-Authenticated-Sender: gmx@ross.cx X-Virus-Scanned: Clear (ClamAV 0.99.2/22069/Thu Aug 11 21:22:21 2016) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Aug 2016 23:05:04 -0000 Am .08.2016, 00:28 Uhr, schrieb Valeri Galtsev : > Dear Experts, > > Could someone recommend a script or utility one can run from command line > on Linux or UNIX machine to make a snapshot image of webpage? ports/lang/phantomjs. Can do PNG, GIF, JPG and PDF. Regards, Michael > > We have a signage (xibo) and whoever creates/changes content, likes to > add > URLs of some webpages there. All works well if these are webpages on our > servers (which are pretty fast), but some external servers often take > time > to respond and take time to assemble the page, in addition these servers > sometimes get really busy, and when response is longer than time devoted > for that content in signage window, this window hangs forever with blank > white field until you restart client. Trivial workaround: just to get > snapshot image (as, say daily cron job), and point signage client to that > snapshot definitely will solve it, and simultaneously we will stop > bugging > other people servers often without much need for it. I amd trying to > avoid > mirroring that URL content, hence I decided not to use wget or curl. > > But when I tried to search for some utility or script that makes webpage > snapshot, I discovered that my ability to search degraded somehow... > > Thanks for all your pointers! > > Valeri > > ++++++++++++++++++++++++++++++++++++++++ > Valeri Galtsev > Sr System Administrator > Department of Astronomy and Astrophysics > Kavli Institute for Cosmological Physics > University of Chicago > Phone: 773-702-4247 > ++++++++++++++++++++++++++++++++++++++++ > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" From owner-freebsd-questions@freebsd.org Fri Aug 12 01:08:39 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 10197BB68E7 for ; Fri, 12 Aug 2016 01:08:39 +0000 (UTC) (envelope-from cursos@barradecomercio.org) Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id ED1F31D00 for ; Fri, 12 Aug 2016 01:08:38 +0000 (UTC) (envelope-from cursos@barradecomercio.org) Received: by mailman.ysv.freebsd.org (Postfix) id E8CEBBB68E6; Fri, 12 Aug 2016 01:08:38 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E86A2BB68E5 for ; Fri, 12 Aug 2016 01:08:38 +0000 (UTC) (envelope-from cursos@barradecomercio.org) Received: from core-215-7-server.dyd.es (core-215-7-server.dyd.es [93.159.215.7]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 83E1A1CFF for ; Fri, 12 Aug 2016 01:08:38 +0000 (UTC) (envelope-from cursos@barradecomercio.org) To: From: "=?utf-8?Q?Capacitaci=C3=B3n?=" Reply-To: "=?utf-8?Q?Capacitaci=C3=B3n?=" Date: Fri, 12 Aug 2016 03:08:04 +0200 Message-ID: <57550d040002020606545501010a5a5d030202555708535502520d070753065855050506025f540756035003050650@barradecomercio_ip-zone_com-6> X-CcmId: 07004745525d55505f0b0440555b0e3a0b16181b5d5f533e505c540a040355535152020f08080904 Feedback-ID: 24833:24833-197:1:Mailrelay X-Report-Abuse: Please report abuse for this campaign here http://barradecomercio.mailrelay-ii.com/ccm/abuse?a=24833&m=197&s=890554 X-OriginalSender: cursos@barradecomercio.org Subject: Ultima semana de inscripciones DIPLOMADO 2016. Aplica 15% de descuento MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 01:08:39 -0000 =0AUltima semana de inscripciones DIPLOMADO 2016. Aplica 15% de descuento =C2=BFNo puedes ver el correo correctamente?=C2=A0Da click aqu=C3=AD para l= a versi=C3=B3n en internet =C3=9Altima semana de inscripciones para=0A Diplomado de Comercio Exterior =0A =C2=A0 El objetivo del Diplomado de Comercio Exterior es facilitar el estudio de l= as disposiciones aduaneras, a trav=C3=A9s de un m=C3=A9todo did=C3=A1ctico = en el cual se le permite el acceso al estudiante a las clases impartidas po= r los maestros o mediante sesiones en linea que puede consultar en cualquie= r momento, lecturas previas, pr=C3=A1cticas, y evaluaciones semanales con u= n sistema de calificaci=C3=B3n inmediata que permite medir el avance de for= ma clara y sencilla en un total de 20 sesiones. =0A=0A=0A=0A=0A Se incluyen salas virtuales de consulta con los profesores para aclarar dud= as que surjan sobre la aplicaci=C3=B3n de las disposiciones legales que rig= en nuestro sistema aduanero, con la certeza y precisi=C3=B3n que se requier= e para evitar problemas en el despacho de las mercanc=C3=ADas, visitas domi= ciliarias, revisi=C3=B3n de mercanc=C3=ADas en transporte y facultades de c= omprobaci=C3=B3n por parte de las autoridades fiscales y aduaneras.=0A=0A= =0A=0AIncluye mataerial de apoyo:=0A=0A Compendio de Comercio Exterior 2016 (2 tomos)=0A Libro R=C3=A9gimen Jur=C3=ADdico del IVA en Comercio Exterior=0A Material aprenda f=C3=A1cil para Emprendedores=0A=0A=0A =C2=A0 =0APromoci=C3=B3n por pago=C2=A0anticipado o una sola exhibici=C3=B3n=0A=0A= =0AInscripciones e informes:=0A=0ALic. Alejandra Hern=C3=A1ndez Mej=C3= =ADa (55) 57.61.64.06 / 01.800.823.95.64 ahernandez@barradecomercio.org.mx=0A=0A=0A=0ADescarga hoja de registro PROM= OCIONAL=0A=0AModalidad PRESENCIAL=0A=0AModalidad ONLINE=0A =C2=A0 =0A=0ABarra Nacional de Comercio Exterior=C2=AE 2016 Todos los derechos res= ervados =09=09=09 =09=09=09Eliminar Contacto =09=09 =09=09=09 =09=09=09Agregar Contacto =09=09=0A From owner-freebsd-questions@freebsd.org Fri Aug 12 01:23:57 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2A277BB6FF5 for ; Fri, 12 Aug 2016 01:23:57 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: from mail-io0-x232.google.com (mail-io0-x232.google.com [IPv6:2607:f8b0:4001:c06::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E653F184B for ; Fri, 12 Aug 2016 01:23:56 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: by mail-io0-x232.google.com with SMTP id q83so12484129iod.1 for ; Thu, 11 Aug 2016 18:23:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-transfer-encoding; bh=9rtkAAVCB71pPTs4cv+cllOkwH3n/YsNdg3YlLO2wQA=; b=kFnhoJ2VlrLv9OGtcmQBu2WgxAfUCJ4vRfC1u7DvxeOZRYF9VoV2OOMW15MnswWAXi Pc2LjKONOEs2wuB8WmTBcXJX3PmR3tqDbh2y04XzxO6rBGozlMAjLZcQo58Asjsm0xAT BFSVeF8Pekh8kzQMz2QAf50iejmbiD+2QWDQ4X7wiD//AcS6pDEt1hv7XjGKJ9Dn29Xp VGF3zkvTBLu5dB4PQg6fMFdLuDnWPmExRBlQLX4LrS+T6j/J0AF4NMWD5ujoKs7rjB08 IUxqkuz0ROsWadSu+G7pIGOvWkqbc3NKIXoGXdTjNW+OfN/kZ9Qa/sZbmsvvRLmrFYms XsOg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-transfer-encoding; bh=9rtkAAVCB71pPTs4cv+cllOkwH3n/YsNdg3YlLO2wQA=; b=VHJG53JHBA5yFaZfle6xrrSILMskSmZoWBPfZjCcCmxkXGctg9ahLeNdt2/j0v5Wsl 219HIEuV0PC/lfioPLTimYvc5ebGAqE9c3/miTz9rxIYZsS91y5XsTowpa2d/4yhQZRC CK60yqM6e0k5/7YDSbBaTtofUK+jep0+fg1CQsfrWzUJd2ub2DzgnOD79XASFJKnsxOe obxFD1yDdESJwRByNDp9Ptwc0IyIqWlsfyRMDQLeT59XK0sllt82hSksmKhJxnscskr4 P7rrWulJ5CRsB+SuBF33IaGs9UMlcD/sF3MBOSyJcpWx+BAYfzRm8gvpLliJl6t6Ga/z +3ZA== X-Gm-Message-State: AEkoouvBcygF9WacJcyubvRQ0F67JIvVL4jth74Y178ccdnE9lQiR27/d7cmmuUbmVsrfw== X-Received: by 10.107.47.22 with SMTP id j22mr12800ioo.21.1470965036102; Thu, 11 Aug 2016 18:23:56 -0700 (PDT) Received: from localhost.localdomain ([50.243.4.3]) by smtp.googlemail.com with ESMTPSA id o16sm94848itg.15.2016.08.11.18.23.55 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 11 Aug 2016 18:23:55 -0700 (PDT) Message-ID: <57AD251F.4030805@gmail.com> Date: Thu, 11 Aug 2016 19:23:43 -0600 From: jd1008 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: script to make webpage snapshot References: <33717.128.135.52.6.1470954497.squirrel@cosmo.uchicago.edu> In-Reply-To: <33717.128.135.52.6.1470954497.squirrel@cosmo.uchicago.edu> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 01:23:57 -0000 On Linux, I use mate-screenshot gdm-screenshot simplescreenrecorder (for saving as a movie file). gnome-screenshot On 08/11/2016 04:28 PM, Valeri Galtsev wrote: > Dear Experts, > > Could someone recommend a script or utility one can run from command line > on Linux or UNIX machine to make a snapshot image of webpage? > > We have a signage (xibo) and whoever creates/changes content, likes to add > URLs of some webpages there. All works well if these are webpages on our > servers (which are pretty fast), but some external servers often take time > to respond and take time to assemble the page, in addition these servers > sometimes get really busy, and when response is longer than time devoted > for that content in signage window, this window hangs forever with blank > white field until you restart client. Trivial workaround: just to get > snapshot image (as, say daily cron job), and point signage client to that > snapshot definitely will solve it, and simultaneously we will stop bugging > other people servers often without much need for it. I amd trying to avoid > mirroring that URL content, hence I decided not to use wget or curl. > > But when I tried to search for some utility or script that makes webpage > snapshot, I discovered that my ability to search degraded somehow... > > Thanks for all your pointers! > > Valeri > > ++++++++++++++++++++++++++++++++++++++++ > Valeri Galtsev > Sr System Administrator > Department of Astronomy and Astrophysics > Kavli Institute for Cosmological Physics > University of Chicago > Phone: 773-702-4247 > ++++++++++++++++++++++++++++++++++++++++ > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Fri Aug 12 02:09:44 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5FDC5BB7572 for ; Fri, 12 Aug 2016 02:09:44 +0000 (UTC) (envelope-from bounce@bounce.ipsy.hosted.strongview.com) Received: from sv030144.hosted.strongview.com (sv030144.hosted.strongview.com [23.253.30.144]) by mx1.freebsd.org (Postfix) with ESMTP id 3430E15DB for ; Fri, 12 Aug 2016 02:09:43 +0000 (UTC) (envelope-from bounce@bounce.ipsy.hosted.strongview.com) Received: from sv030144.hosted.strongview.com ([172.18.101.144]) by sv030144.hosted.strongview.com (-); Thu, 11 Aug 2016 19:09:30 -0700 X-VirtualServer: Default, sv030144.hosted.strongview.com, 172.18.101.144 X-VirtualServerGroup: Default X-MailingID: 16779407::9960::1465333777::437::0000::215933_24501573_0__215933 X-SMHeaderMap: mid="X-MailingID" X-Destination-ID: freebsd-questions@freebsd.org X-SMFBL: ZnJlZWJzZC1xdWVzdGlvbnNAZnJlZWJzZC5vcmc= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=marketing.ipsy.com; s=sv; i=@marketing.ipsy.com; h=Content-Transfer-Encoding: Content-Type:MIME-Version:Message-ID:X-ReportingKey:Subject:Date: To:Reply-To:From; bh=u+Itn2pqfwXOqo11+FPZ/5DEqpM=; b=VMSVwQmkPto pLgy2F9/Vn/7TXdPMRaFsk7/kJlolPhMsxN+4/LGbL8f+4TWcpPNHBO3Frscdp9f XG1DNgv1FHnlrR8okAV0t/D8JwGLbrk6lD4hXk4JyyKc+S2ER0PRrsG6r8hi8YCq xz329W7AFuIRJwr9W/bp+Np/3BiwiHeA= MIME-Version: 1.0 Message-ID: <16779407.215933@marketing.ipsy.com> X-ReportingKey: MJ18BN14J1C2F0C6QKK61PJJ1C92-J9H037S1C92-::freebsd-questions@freebsd.org:: Subject: I love ipsy, join now while there is no waitlist! Date: Thu, 11 Aug 2016 19:09:30 -0700 To: freebsd-questions@freebsd.org Reply-To: From: Michele Shifflett Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 02:09:44 -0000 U3Vic2NyaWJlIG5vdyBbTElOS10= From owner-freebsd-questions@freebsd.org Fri Aug 12 07:24:08 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C731FBB66A6 for ; Fri, 12 Aug 2016 07:24:08 +0000 (UTC) (envelope-from pipfstarrd@openmailbox.org) Received: from mail.openmailbox.org (mail.openmailbox.org [62.4.1.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8CFA6125A for ; Fri, 12 Aug 2016 07:24:08 +0000 (UTC) (envelope-from pipfstarrd@openmailbox.org) Received: by mail.openmailbox.org (Postfix, from userid 20002) id B842C20EC63; Fri, 12 Aug 2016 09:17:11 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=openmailbox.org; s=openmailbox; t=1470986231; bh=tjA0JhoUjhhLh1FO6Dq5W/lOMZaKutgS+DfQbGbmQqg=; h=Subject:To:References:From:Date:In-Reply-To:From; b=Q2sASqti6QOpyuQZTzX5rpIhu0CTqyskejMN5rBRHosBpApajtZnyj2KK+tmbFAcJ KkPlh5YAK0Nsh/aJ1DoU4pX560JwQAQ/uBOtBCY6yJGZn9/YR+2c63s1/pmwQzOmKk 5A7TPQ+zaCrT/iN+vAjaOWqZgiMKbzl9C4TFzbUU= X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on h3 X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=NO_RECEIVED,NO_RELAYS, T_DKIM_INVALID autolearn=no autolearn_force=no version=3.4.0 Subject: Re: script to make webpage snapshot DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=openmailbox.org; s=openmailbox; t=1470986231; bh=tjA0JhoUjhhLh1FO6Dq5W/lOMZaKutgS+DfQbGbmQqg=; h=Subject:To:References:From:Date:In-Reply-To:From; b=Q2sASqti6QOpyuQZTzX5rpIhu0CTqyskejMN5rBRHosBpApajtZnyj2KK+tmbFAcJ KkPlh5YAK0Nsh/aJ1DoU4pX560JwQAQ/uBOtBCY6yJGZn9/YR+2c63s1/pmwQzOmKk 5A7TPQ+zaCrT/iN+vAjaOWqZgiMKbzl9C4TFzbUU= To: galtsev@kicp.uchicago.edu, freebsd-questions@freebsd.org References: <33717.128.135.52.6.1470954497.squirrel@cosmo.uchicago.edu> From: twilight Message-ID: <890d5bba-9fd7-28d5-4800-5d4cc5b79865@openmailbox.org> Date: Fri, 12 Aug 2016 07:16:43 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <33717.128.135.52.6.1470954497.squirrel@cosmo.uchicago.edu> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 07:24:08 -0000 Hi, If I get your goal correctly, you could try to use wget(1) (wget -mk, see man(1) for extra options) or httrack(1). On 08/11/2016 22:28, Valeri Galtsev wrote: > Dear Experts, > > Could someone recommend a script or utility one can run from command line > on Linux or UNIX machine to make a snapshot image of webpage? > > We have a signage (xibo) and whoever creates/changes content, likes to add > URLs of some webpages there. All works well if these are webpages on our > servers (which are pretty fast), but some external servers often take time > to respond and take time to assemble the page, in addition these servers > sometimes get really busy, and when response is longer than time devoted > for that content in signage window, this window hangs forever with blank > white field until you restart client. Trivial workaround: just to get > snapshot image (as, say daily cron job), and point signage client to that > snapshot definitely will solve it, and simultaneously we will stop bugging > other people servers often without much need for it. I amd trying to avoid > mirroring that URL content, hence I decided not to use wget or curl. > > But when I tried to search for some utility or script that makes webpage > snapshot, I discovered that my ability to search degraded somehow... > > Thanks for all your pointers! > > Valeri > > ++++++++++++++++++++++++++++++++++++++++ > Valeri Galtsev > Sr System Administrator > Department of Astronomy and Astrophysics > Kavli Institute for Cosmological Physics > University of Chicago > Phone: 773-702-4247 > ++++++++++++++++++++++++++++++++++++++++ > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > -- Cheers~ PGP key fingerprint: 07B3 2177 3E27 BF41 DC65 CC95 BDA8 88F1 E9F9 CEEF You can retrieve my public key at pgp.mit.edu. From owner-freebsd-questions@freebsd.org Fri Aug 12 08:04:40 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DC26DBB7757 for ; Fri, 12 Aug 2016 08:04:40 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A667B1D8F for ; Fri, 12 Aug 2016 08:04:40 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-102-47.dynamic.qsc.de [92.195.102.47]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id D3B343CE40; Fri, 12 Aug 2016 10:04:31 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id u7C84VEL002344; Fri, 12 Aug 2016 10:04:31 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Fri, 12 Aug 2016 10:04:31 +0200 From: Polytropon To: galtsev@kicp.uchicago.edu Cc: freebsd-questions@freebsd.org Subject: Re: script to make webpage snapshot Message-Id: <20160812100431.8af84eeb.freebsd@edvax.de> In-Reply-To: <33717.128.135.52.6.1470954497.squirrel@cosmo.uchicago.edu> References: <33717.128.135.52.6.1470954497.squirrel@cosmo.uchicago.edu> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 08:04:41 -0000 On Thu, 11 Aug 2016 17:28:17 -0500 (CDT), Valeri Galtsev wrote: > Dear Experts, > > Could someone recommend a script or utility one can run from command line > on Linux or UNIX machine to make a snapshot image of webpage? When you say "snapshot", what exactly do you mean? I'm not sure I understand your description correctly. Is a snapshot (a) a _visual_ snapshot (image format or PDF) of how the web page renders inside a web browser, or (b) an exactl local _copy_ (files and directories) on your disk? For option (a), lang/phantomjs has been suggested. Check the mailing list archives - I've been asking that kind if question some years ago, but I cannot remember (or even find) the answers I got. ;-) For option (b), wget probably isn't bad, as long as you add some options to avoid unneeded traffic, such as % wget -r -l 0 -k -nc If you are interested only in a specific sub-path, or subset of file types (or want to reject them), use the -A or -R options. Use -U to set the user agent string to a "real" web browser if needed. See "man wget" for details. This set of options should provide the ability to only "snapshot" those elements of the web page content that have been changed. Things you already have on your local disk won't be downloaded. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Fri Aug 12 09:07:35 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2C9C0BB6CD2 for ; Fri, 12 Aug 2016 09:07:35 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id C53D01509 for ; Fri, 12 Aug 2016 09:07:34 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from ox-dell39.ox.adestra.com (unknown [85.199.232.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 0D323C972 for ; Fri, 12 Aug 2016 09:07:24 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/0D323C972; dkim=none; dkim-atps=neutral Subject: Re: Upgrade Perl5.2.20 (vulnerable) To: freebsd-questions@freebsd.org References: <98acd0e6bcc55fb1140210c315c2e1e5@dweimer.net> From: Matthew Seaman Message-ID: <8fbf7ee7-d94c-315d-9baf-56da27d5df9e@freebsd.org> Date: Fri, 12 Aug 2016 10:07:16 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <98acd0e6bcc55fb1140210c315c2e1e5@dweimer.net> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="7SxV9kUQmvv1cIPkbcEgQi4p4iWGJdBub" X-Spam-Status: No, score=-0.4 required=5.0 tests=BAYES_00,RDNS_NONE, SPF_SOFTFAIL autolearn=no autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 09:07:35 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --7SxV9kUQmvv1cIPkbcEgQi4p4iWGJdBub Content-Type: multipart/mixed; boundary="eohX0UfvdoLsmGSUbUPOWv5D50XcSbjJc" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: <8fbf7ee7-d94c-315d-9baf-56da27d5df9e@freebsd.org> Subject: Re: Upgrade Perl5.2.20 (vulnerable) References: <98acd0e6bcc55fb1140210c315c2e1e5@dweimer.net> In-Reply-To: <98acd0e6bcc55fb1140210c315c2e1e5@dweimer.net> --eohX0UfvdoLsmGSUbUPOWv5D50XcSbjJc Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 08/11/16 19:58, Dean E. Weimer wrote: > On 2016-08-11 1:43 pm, JosC wrote: >> Can someone tell me how to best upgrade from Perl5.20.x to the latest >> stable version? >> >> Tried to upgrade to Perl5.22 but got (also) the same issue while doing= >> so: >> >> >> =3D=3D=3D> Cleaning for perl5-5.20.3_14 >> =3D=3D=3D> perl5-5.20.3_14 has known vulnerabilities: >> perl5-5.20.3_14 is vulnerable: >> p5-XSLoader -- local arbitrary code execution >> CVE: CVE-2016-6185 >> WWW: >> https://vuxml.FreeBSD.org/freebsd/3e08047f-5a6c-11e6-a6c3-14dae9d210b8= =2Ehtml >> >> >> perl5-5.20.3_14 is vulnerable: >> perl -- local arbitrary code execution >> CVE: CVE-2016-1238 >> WWW: >> https://vuxml.FreeBSD.org/freebsd/72bfbb09-5a6a-11e6-a6c3-14dae9d210b8= =2Ehtml >> >> >> 1 problem(s) in the installed packages found. >> =3D> Please update your ports tree and try again. >> =3D> Note: Vulnerable ports are marked as such even if there is no >> update available. >> =3D> If you wish to ignore this vulnerability rebuild with 'make >> DISABLE_VULNERABILITIES=3Dyes' >> *** Error code 1 >> >> Stop. >> make[1]: stopped in /usr/ports/lang/perl5.20 >> *** Error code 1 >> >> Stop. >> make: stopped in /usr/ports/lang/perl5.20 >> >> --- cut --- >> >> >> Thanks, >> Jos Chrispijn >=20 > Looks like they just updated all the perl ports to a release candidate > version to fix this, as in 20 to 30 minutes ago. >=20 There seems to be a problem with the VuXML entry for p5-XSLoader, which also counts as a vulnerability against perl5, since XSLoader is a core perl module. The version numbers are apparently a bit too inclusive, so the fixed versions recently committed to the ports are still flagged as vulnerable. I just updated my desktop to the very latest and: # pkg audit -F [...] perl5-5.22.3.r2 is vulnerable: p5-XSLoader -- local arbitrary code execution CVE: CVE-2016-6185 WWW: https://vuxml.FreeBSD.org/freebsd/3e08047f-5a6c-11e6-a6c3-14dae9d210b8.ht= ml VuXML says this for p5-XSLoader: perl5 perl5.18 perl5.20 perl5.22 perl5.24 5.185.18.99 5.205.20.99 5.225.22.3 5.245.24.1 which is incorrect. Compare to what VuXML says for the other vulnerability the latest update fixed in perl5 itself: perl5 perl5.18 perl5.20 perl5.22 perl5.24 5.185.18.4_23 5.205.20.3_14 5.225.22.3.r2 5.245.24.1.r2 Cheers, Matthew --eohX0UfvdoLsmGSUbUPOWv5D50XcSbjJc-- --7SxV9kUQmvv1cIPkbcEgQi4p4iWGJdBub Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXrZHEAAoJEABRPxDgqeTnB8oP/1QwzkjAtlpZld8jEA5K2rPI gIYIZNziA/q4rcz1Ct6zb+PqtjUEhoGB4M5LX3+bwqI5NEn003qOGmXamEvQM292 tkU3pD+oh1MxRRsExCZbvzI6CZ79KyoEr1jkrAPvmY/b1eoUDrD11RIXyFY0MNbC 04S4ck4RZDs86ydgcy712+YBvUo6CsVt8+CWWW4UBtr4pWQKDq4Ime540wN6gatX vJL7kHPPgZXjvAisnJXCqrLfisfMkVcoJKvzlQfHb9Ql9XuyP8rcGVfsIzjOR2m3 1sWkMPeFV71G01oCR/mfqPcfW3Dr0IKGjG+SfHiYQUN1GaniByHgz4Z9J8X6gYAK lOHX0Rzw5Sd4mXODZOq6dNk7OfNrBRl+KuzXAJw6U+Y5GyyrtANa2RthAT7BVsWf u5NZWxWHvtVDg4Mmm4T770weP4LagBcvxvJBqCZs3XIBvh+b0177q6GwnUOV7SNf WIv5GIPUYmg/j47EiWWxbf1GwkuXWzeQmE9kgz5hijS/fQls08/zUC6ZFJtDKBx1 U3xHbRKRLqvUTXyPQ+JcucYxf6bmBAZacAw/lrO+e2UoDVGgYjtjRyiOsBJzLDQJ 5M6/43//vahs6Udfea3KF5L0sCfC98+bIofj6pVNQATsG4Pd8qbxXFZqK0N+rMLd 7h4IS5LDLVVSM7Tsy0Qm =qPh1 -----END PGP SIGNATURE----- --7SxV9kUQmvv1cIPkbcEgQi4p4iWGJdBub-- From owner-freebsd-questions@freebsd.org Fri Aug 12 10:47:33 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C6459BB74B8 for ; Fri, 12 Aug 2016 10:47:33 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 509F211EC for ; Fri, 12 Aug 2016 10:47:33 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from ox-dell39.ox.adestra.com (unknown [85.199.232.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 439FDC9C0 for ; Fri, 12 Aug 2016 10:47:28 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=infracaninophile.co.uk DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201601-infracaninophile; t=1470998848; bh=eOuFduNlZu+ygmW2GW0CRKsi45tmXQU2AY9g1jK3xwM=; h=Subject:To:References:From:Date:In-Reply-To; z=Subject:=20Re:=20Upgrade=20Perl5.2.20=20(vulnerable)|To:=20freebs d-questions@freebsd.org|References:=20=0D=0A=20<98acd0e6bcc55fb1140210c315c2e1 e5@dweimer.net>=0D=0A=20<8fbf7ee7-d94c-315d-9baf-56da27d5df9e@free bsd.org>|From:=20Matthew=20Seaman=20|Date:=20Fri,=2012=20Aug=202016=2011:47:27=20+0100|In-Reply-To: =20<8fbf7ee7-d94c-315d-9baf-56da27d5df9e@freebsd.org>; b=nhi42JYQJcH7itLn1ID8DamXisETW077vNuMS8e0j/6j+s2QxoH0F71JJl2eN/Ggd kEo68mGNFpZ42LN1RNjPNJQST8ydKTwQLhfqEcHh4MuLgI3P6CB8SvDR+0TKLFog/r ZyCs0sHfYy3FSwP8i178CSkvFfE/wVxKUTJatQ5A= Subject: Re: Upgrade Perl5.2.20 (vulnerable) To: freebsd-questions@freebsd.org References: <98acd0e6bcc55fb1140210c315c2e1e5@dweimer.net> <8fbf7ee7-d94c-315d-9baf-56da27d5df9e@freebsd.org> From: Matthew Seaman Message-ID: <028e220e-2015-8c95-d619-b5c871e294b6@infracaninophile.co.uk> Date: Fri, 12 Aug 2016 11:47:27 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <8fbf7ee7-d94c-315d-9baf-56da27d5df9e@freebsd.org> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="KV2Ql70OLhjn6tDvAX4IdUckN9L2QOhHm" X-Spam-Status: No, score=-1.2 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,RDNS_NONE,SPF_FAIL autolearn=no autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 10:47:33 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --KV2Ql70OLhjn6tDvAX4IdUckN9L2QOhHm Content-Type: multipart/mixed; boundary="tp91Tvh9SaTF6atqrgEJx942TJgEQibAb" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: <028e220e-2015-8c95-d619-b5c871e294b6@infracaninophile.co.uk> Subject: Re: Upgrade Perl5.2.20 (vulnerable) References: <98acd0e6bcc55fb1140210c315c2e1e5@dweimer.net> <8fbf7ee7-d94c-315d-9baf-56da27d5df9e@freebsd.org> In-Reply-To: <8fbf7ee7-d94c-315d-9baf-56da27d5df9e@freebsd.org> --tp91Tvh9SaTF6atqrgEJx942TJgEQibAb Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 08/12/16 10:07, Matthew Seaman wrote: > On 08/11/16 19:58, Dean E. Weimer wrote: >> On 2016-08-11 1:43 pm, JosC wrote: >>> Can someone tell me how to best upgrade from Perl5.20.x to the latest= >>> stable version? >>> >>> Tried to upgrade to Perl5.22 but got (also) the same issue while doin= g >>> so: >>> >>> >>> =3D=3D=3D> Cleaning for perl5-5.20.3_14 >>> =3D=3D=3D> perl5-5.20.3_14 has known vulnerabilities: >>> perl5-5.20.3_14 is vulnerable: >>> p5-XSLoader -- local arbitrary code execution >>> CVE: CVE-2016-6185 >>> WWW: >>> https://vuxml.FreeBSD.org/freebsd/3e08047f-5a6c-11e6-a6c3-14dae9d210b= 8.html >>> >>> >>> perl5-5.20.3_14 is vulnerable: >>> perl -- local arbitrary code execution >>> CVE: CVE-2016-1238 >>> WWW: >>> https://vuxml.FreeBSD.org/freebsd/72bfbb09-5a6a-11e6-a6c3-14dae9d210b= 8.html >>> >>> >>> 1 problem(s) in the installed packages found. >>> =3D> Please update your ports tree and try again. >>> =3D> Note: Vulnerable ports are marked as such even if there is no >>> update available. >>> =3D> If you wish to ignore this vulnerability rebuild with 'make >>> DISABLE_VULNERABILITIES=3Dyes' >>> *** Error code 1 >>> >>> Stop. >>> make[1]: stopped in /usr/ports/lang/perl5.20 >>> *** Error code 1 >>> >>> Stop. >>> make: stopped in /usr/ports/lang/perl5.20 >>> >>> --- cut --- >>> >>> >>> Thanks, >>> Jos Chrispijn >> >> Looks like they just updated all the perl ports to a release candidate= >> version to fix this, as in 20 to 30 minutes ago. >> >=20 > There seems to be a problem with the VuXML entry for p5-XSLoader, which= > also counts as a vulnerability against perl5, since XSLoader is a core > perl module. The version numbers are apparently a bit too inclusive, so= > the fixed versions recently committed to the ports are still flagged as= > vulnerable. >=20 > I just updated my desktop to the very latest and: >=20 > # pkg audit -F > [...] >=20 > perl5-5.22.3.r2 is vulnerable: > p5-XSLoader -- local arbitrary code execution > CVE: CVE-2016-6185 > WWW: > https://vuxml.FreeBSD.org/freebsd/3e08047f-5a6c-11e6-a6c3-14dae9d210b8.= html >=20 > VuXML says this for p5-XSLoader: >=20 > > perl5 > perl5.18 > perl5.20 > perl5.22 > perl5.24 > 5.185.18.99 > 5.205.20.99 > 5.225.22.3 > 5.245.24.1 > >=20 > which is incorrect. Compare to what VuXML says for the other > vulnerability the latest update fixed in perl5 itself: >=20 > > perl5 > perl5.18 > perl5.20 > perl5.22 > perl5.24 > 5.185.18.4_23 > 5.205.20.3_14 > 5.225.22.3.r2 > 5.245.24.1.r2 > On closer inspection it seems that both vulnerabilities CVE-2016-6185 (XSLoader local arbitrary code execution) and CVE-2016-1238 (perl local arbitrary code execution) have been addressed in the updates to perl5.22 and perl5.24 (which are the two versions still under development by the upstream perl project -- we've updated to release candidate versions until their next formal release comes out.) However, for perl5.18 and perl5.20 which are no longer being updated by the upstream perl5 project, a different fix has been applied which only addresses CVE-2016-1238. perl5.20 is the current default version of perl in the ports tree. Cheers, Matthew --tp91Tvh9SaTF6atqrgEJx942TJgEQibAb-- --KV2Ql70OLhjn6tDvAX4IdUckN9L2QOhHm Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXrak/AAoJEABRPxDgqeTnopoP/AzuDirOXDfq+FCFFFaNjW8A 0pO13OFryfkJtczc9KwW/x1aIBf9+fZONc62nxsw21BgFLzSVA73RRzqEpHIX2qM cfgyXvCJq9lwBFb7uUo17Zv0bBZN/8z4JJjau4PKrJIwCNhjs/q0mcai7rKMx8J6 2CCxGvhW7ZZ2NoZIyemj+tvwpawwyO52px+SPhcqIbG4Dpj0je7MClpoUIJUjfJT SCQtQg+I1boyfjnte3E+F5K13oRbL8haLGJW30mu98EI9fw5UAdGyf+IIrhu0Ybz XqtUVJcU2NTtpORYFelZ4TDTCWS5J84b9e2pdMGZYY3w5mrXv8hUari0hjP5MnNs iIkdLhlZzXEDlj54sbVmAhdpo08NJFze5m9S+Jfx8G72u6USpPC+9YWhawjusFdn VoQFI6XYKBqY695A1QVTCbCqJ72aNN9HUwklXqz2y/NVHk97cEBwRWyFVrrvGcQQ gy85AzShXZV/Fgt5vsxxSSzG6Q/umZgnFdKj27DMQB2BRkXG7IjuqkkZ1HskSNzf TEvqDr4cs5I4vHqUHndqPbXywuzLSSshbKf5Jw9AEIgv0a8VHFcLlrTBseXvBbRE LgMPhVl+XXIhRjoqE5QYVtUU+CfFeFNoXxc0n4rlRMcs0Ju/yx5kcthZsndsxudi 9MgWOUtRq7JJVdhjdyDA =sqsa -----END PGP SIGNATURE----- --KV2Ql70OLhjn6tDvAX4IdUckN9L2QOhHm-- From owner-freebsd-questions@freebsd.org Fri Aug 12 12:06:48 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 36B5ABB5786 for ; Fri, 12 Aug 2016 12:06:48 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 166E411B3 for ; Fri, 12 Aug 2016 12:06:48 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mailman.ysv.freebsd.org (Postfix) id 15B6CBB5783; Fri, 12 Aug 2016 12:06:48 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 155D2BB5781 for ; Fri, 12 Aug 2016 12:06:48 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mail-io0-x22d.google.com (mail-io0-x22d.google.com [IPv6:2607:f8b0:4001:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D37F611B2 for ; Fri, 12 Aug 2016 12:06:47 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mail-io0-x22d.google.com with SMTP id q83so22607546iod.1 for ; Fri, 12 Aug 2016 05:06:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject :content-transfer-encoding; bh=2Dm/Q87I9SjzcFv3xMBlN6JZ6VB7+O65Wg9UrAUAZWQ=; b=of0Zfq++E1vE1NW/qvd/0bNF1MBF5Lj1c0C3Py7CYvIrxyYVZT65Nk4K5i1ASPeLxc CYS2Hiz6RDNuHMIRbLTDmzH8LRbZ1pn8wQG59AaCsbCAMUxEODNRNqxtsXyLEcKwCQk8 sr4eNfWnm2fH8Ku2/hQmArr2JuVFbyXmftsp/0lQPdUVdwqCJJFeCNceqbbaErRlYsNA YTVqkN0zu5g+yNASsncrllxRTdRS7+BMW3wmNJLjfymOVde8z2hP/I699khdlusWDLkI d1Y0xIZAz2qGmpSGZhA788OvK16x5baCknRM9DkMRbEqHDPhW5Q7WT9MuQNtPvocdog7 QH+w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:content-transfer-encoding; bh=2Dm/Q87I9SjzcFv3xMBlN6JZ6VB7+O65Wg9UrAUAZWQ=; b=fPLFaed7LowmnbbO56OvtZAjxeQ6ZNbQj+RoNA02v3MkbGkuK0zOGgwSa/KeHT3/BK rZjXmliFzv3evXu/AcsrDid/6jTfsl2kSPMESmcZZ5icx8RmoLtvzOA3va/J4dxM10Zs 1J0pJf7KCuosBdgiaLVFWnnskItGzcUMYhC9DXrPS+NSxaUGgpPd4sGHn3BPROJ+5vkD 7nlD3xzJZOVBgkyY6GlXmqdKLPVhcidsn2nsbRUbIN5Ns7MkX8L3wgJlUBiUJMITnclS PCnEq6RlSiRaxgsmmt7P3Wkld7ngBJHYGE/2WE6wDN0ts9cpoEALxsiaFbHpcNHr8Hns dl8w== X-Gm-Message-State: AEkoousJ797diqbHscDU/LXJ3b5xDurdpeFdu4sLRGAmAQGUeIdWkRZ+CBS7n1xEBZhqDw== X-Received: by 10.107.205.72 with SMTP id d69mr17647868iog.23.1471003606962; Fri, 12 Aug 2016 05:06:46 -0700 (PDT) Received: from [10.0.10.3] (cpe-24-165-196-54.neo.res.rr.com. [24.165.196.54]) by smtp.googlemail.com with ESMTPSA id d67sm3366729ioe.5.2016.08.12.05.06.46 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 12 Aug 2016 05:06:46 -0700 (PDT) Message-ID: <57ADBBD5.8060304@gmail.com> Date: Fri, 12 Aug 2016 08:06:45 -0400 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: questions Subject: Best way to search questions list archives Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 12:06:48 -0000 The key word here is "search" everything or everything by selected year. Only thing I have found is manual selection by week showing all subjects posted in that week. What website has search ability? Thanks From owner-freebsd-questions@freebsd.org Fri Aug 12 12:18:35 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 72C63BB6004 for ; Fri, 12 Aug 2016 12:18:35 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id F22BC1A3D for ; Fri, 12 Aug 2016 12:18:34 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from ox-dell39.ox.adestra.com (unknown [85.199.232.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 6861ACA0F for ; Fri, 12 Aug 2016 12:18:30 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=infracaninophile.co.uk DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201601-infracaninophile; t=1471004310; bh=ZZdHcQeCyjWk7ZleJzSSEb4eWebYOBX3HHwGASrWvZA=; h=Subject:To:References:From:Date:In-Reply-To; z=Subject:=20Re:=20Best=20way=20to=20search=20questions=20list=20ar chives|To:=20freebsd-questions@freebsd.org|References:=20<57ADBBD5 .8060304@gmail.com>|From:=20Matthew=20Seaman=20|Date:=20Fri,=2012=20Aug=202016=2013:18:30=20+0100|I n-Reply-To:=20<57ADBBD5.8060304@gmail.com>; b=OGhFcv0jMPRD5NGf+nFS4bURkCJ3KSZuStJ0hSQgWkvb1/Q1Mx995T159o+lyTX6N Wyi3Y62kNNF6yLb7TO4T+J0bh+KCEf9aQ7sYS9GVeW0VC+RIfJddRUn6cneFohPnqx BbCAwUQeM71TuNPo15d24q2OFYU0co8ZcWojfOXY= Subject: Re: Best way to search questions list archives To: freebsd-questions@freebsd.org References: <57ADBBD5.8060304@gmail.com> From: Matthew Seaman Message-ID: <1d133cc6-943f-41b7-b959-973a036fc304@infracaninophile.co.uk> Date: Fri, 12 Aug 2016 13:18:30 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <57ADBBD5.8060304@gmail.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="1qmhr60oHBlPV6FSLUwFXSkr0VieHOJg6" X-Spam-Status: No, score=-1.2 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,RDNS_NONE,SPF_FAIL autolearn=no autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 12:18:35 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --1qmhr60oHBlPV6FSLUwFXSkr0VieHOJg6 Content-Type: multipart/mixed; boundary="DtqqKEhJTqrKd5svq3G6UJkUhN8bTHSJj" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: <1d133cc6-943f-41b7-b959-973a036fc304@infracaninophile.co.uk> Subject: Re: Best way to search questions list archives References: <57ADBBD5.8060304@gmail.com> In-Reply-To: <57ADBBD5.8060304@gmail.com> --DtqqKEhJTqrKd5svq3G6UJkUhN8bTHSJj Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 08/12/16 13:06, Ernie Luzar wrote: > The key word here is "search" everything or everything by selected year= =2E >=20 > Only thing I have found is manual selection by week showing all subject= s > posted in that week. >=20 > What website has search ability? >=20 I find asking Google for: site:lists.freebsd.org other search terms works quite well for finding most things. Cheers, Matthew --DtqqKEhJTqrKd5svq3G6UJkUhN8bTHSJj-- --1qmhr60oHBlPV6FSLUwFXSkr0VieHOJg6 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJXrb6WAAoJEABRPxDgqeTnrO0P/0d5r5cbeauPOV7roedtzQtn VFAeY/GTQH1bWEHNefM8ouZvAfuZze0pI3h9u0SBRWLlvjRTuErcg6Tses69tnce jVoInYJf/XFiPjeEEymimKU/SeLGZ2eiwoaKDWWjG2am+MajQDJuBz8eXKecaoCQ mjV4laYw0GEZTIznTsepZmqVZyHfbHl9G5M/a3azAiFdSBCW0ZIK0oX29uf8z6or ydnfWUo5w/qTYT3obgzG4dEfQAZtO2ZiGeViV0iYt6DfNKYhI/mE6FvyjNpWsBuY iVsK9kShciCCNJpMR8KgSR600ICJT6/lT1A1nQh39Xr3hw/cQ3qyciSO1qUDvRGS GuUvlvfzF0SsVBVl9pJr1XdSpZNCT4FagZzGRQau0yXjB7dGK4ynsDbXtjc3ug8E YeS0dcJAxZ084s8NwowOgD/XK1pVx7z102kQbf3rmMMn6fIbJOZwr8dczi4hm5NY g7MKHFhizdFwi9FKB4mNMDU6+O8yH8VmfIxJx0pEimcU4NrJoOISHudZg2i6/WKo H6WuiV7AqWx0qGcq19tRke2RHfgl3zCIq8eoGeFy5srR9oL3PYngZf1YRj77KD97 XB/sXlhYorkKwVGowcG8eAc0w4QjzNnm27KS9qZAbqfbxp/lUaxCVjs/nn2/vne5 NQsSRR+UTemPNIQXLoc5 =WlYh -----END PGP SIGNATURE----- --1qmhr60oHBlPV6FSLUwFXSkr0VieHOJg6-- From owner-freebsd-questions@freebsd.org Fri Aug 12 12:19:58 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AC239BB60D3 for ; Fri, 12 Aug 2016 12:19:58 +0000 (UTC) (envelope-from krislawson457@gmail.com) Received: from mail-qk0-x246.google.com (mail-qk0-x246.google.com [IPv6:2607:f8b0:400d:c09::246]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 692831B66 for ; Fri, 12 Aug 2016 12:19:58 +0000 (UTC) (envelope-from krislawson457@gmail.com) Received: by mail-qk0-x246.google.com with SMTP id t7so43401699qkh.2 for ; Fri, 12 Aug 2016 05:19:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:message-id:date:subject:from:to; bh=coNwF1vENSP22MeExtUJRAXcoVEEL8eJmjMhK4n4IUI=; b=S9IY5gTwp4nMeswPK8+VEs6HcfUe0Akh9CXGiMpB9DayyatGitQ/80T2qY9lf/eTAQ mWDZIWfYuN1IUxDtGiGeV81WOeoKgXAuyKy75NfAwp5JSoBH4/cmV++TPYntKJYtTDRh sL8nO8ug5txLci54v+n23Ti+8YeUB+iSsHQbdkQwV87ScY+TB1yo1tmLHc76jQr+d1gu F3hEGY/LdAzQ9dvp5n296datSaZKgqkH3omt7dTmqrpjKJ1n+Dmr/W0JXbow/j4CdAHY 62q5+csygfXLskraX44a+Z3ynSLZOMzGJ27rs5Ao+h9JnT+fTmlUGQwREmau2lXE1fkp iU2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:message-id:date:subject:from:to; bh=coNwF1vENSP22MeExtUJRAXcoVEEL8eJmjMhK4n4IUI=; b=dOntc40mthZcZSEDv1EOrfaJPLOQuLRWt9SQ8QjtsiX6Gu0K5w7e1BpPsl9ud+4158 sFWu3f/cjooI1lBtYMMuejnwUsMWfn/a28ogEVbCftYRYIIm2Z81M3/IS/KAoZylvEKl gT3uL3ppLWWPusvNAey5DSFDkg/B9z/644iz5Heg+S1J44z4AtGpxfEsSxeG2HonYq5i VNBkrTh20J4eXV4oCQltI+4/uSUaHIWU5O/Yxqjiv4gqia7x75EoC5V93otUoJo/54Ya /nMVOZSyejCzJGm8N/7B1JmMW9txA/A1rdsuPuZ8Bm8zgV9Q7iVJZjMqOYV3L4A3RGW9 rgIQ== X-Gm-Message-State: AEkoouupaOc5jhP169BRKl4MOkxH+Vw4Srm/akF29lYCnjU6PjH0JLemFlQv5Mkpyq+nkYB/h5kXsPtDO56BqQ== MIME-Version: 1.0 X-Received: by 10.129.40.198 with SMTP id o189mr10518576ywo.51.1471004397440; Fri, 12 Aug 2016 05:19:57 -0700 (PDT) Message-ID: <001a114043ca9297140539dee67a@google.com> Date: Fri, 12 Aug 2016 12:19:57 +0000 Subject: =?UTF-8?Q?Say_=22Bye=2DBye=22_to_Adwords_Budget_=E2=80=93_Grow_with_Our_Or?= =?UTF-8?Q?ganic_Listing_Plan?= From: Kris Lawson To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8; format=flowed; delsp=yes Content-Transfer-Encoding: base64 X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 12:19:58 -0000 DQoNCipEZWFyIGZyZWVic2Qub3JnIFRlYW0sKg0KDQoNCg0KSG9wZSB5b3UgYXJlIGRvaW5nIHdl bGwhIFdlIGNhbWUgdG8ga25vdyB0aGF0IHlvdSBhcmUgY29uY2VybmVkIG9uIGJyaW5naW5nDQpu ZXcgY3VzdG9tZXJzIHRocm91Z2ggeW91ciBkb29ycyBhbmQgZGV2ZWxvcGluZyB5b3VyIGJyYW5k DQpsb2NhbGx54oCmdWx0aW1hdGVseSBncm93aW5nIHlvdXIgYnVzaW5lc3MuIEFzIHlvdSBhbHJl YWR5IHJ1biBhIHNwb25zb3INCmxpc3Rpbmcgb24gR29vZ2xlIHRvIGNyZWF0ZSBhIGdsb2JhbCBp bWFnZSwgYnV0IOKAnCpTT1JSWSrigJkuLi4uIGl0IHdvbuKAmXQgaGVscA0KeW91IGluIHRoZSBs b25nIHJ1bi4NCg0KDQoNCkFzIG1vcmUgYnVzaW5lc3NlcyB0dXJuaW5nIHRvIHRoZSBJbnRlcm5l dCB0byBzZWxsIHRoZWlyIHNlcnZpY2VzIGFuZA0KcHJvZHVjdHMsIGl0IGJlY29tZXMgY3J1Y2lh bCB0byBicmFuZCBpdCBwcm9wZXJseSBpbiB0aGUgaW50ZXJuZXQgbWVkaXVtLg0KT3VyIGltcGVj Y2FibGUgb25saW5lIG1hcmtldGluZyB0ZWNobmlxdWUgaW1wcm92ZXMgeW91ciB3ZWJzaXRlIHJh bmsgaW4NCkdvb2dsZSdzIG9yZ2FuaWMgc2VhcmNoIHJlc3VsdHMuIE9yZ2FuaWMgKG5vbi1wYWlk KSByZXN1bHRzIGFyZSBzdXBlcmlvciB0bw0KcGFpZCByZXN1bHRzIGZyb20gR29vZ2xlIEFkd29y ZHMgaW4gYm90aCB0cmFmZmljIGFuZCBjb252ZXJzaW9uIGJlY2F1c2UNCnBlb3BsZSB0cnVzdCBv cmdhbmljIHJlc3VsdHMgbW9yZS4gVGhlcmVmb3JlLCBvdXIgd2ViLW1hcmtldGluZyBjYW4NCmdl bmVyYXRlICptb3JlIHRyYWZmaWMgYXQgYW4gYWZmb3JkYWJsZSBwcmljZSAqdGhhbiBwYXlpbmcg Zm9yIEFkd29yZHMuDQoNCg0KDQpEbyBsZXQgdXMga25vdywgaWYgeW91IGFyZSBpbnRlcmVzdGVk IHRvIGJvb3N0IHlvdXIgb25saW5lIHNhbGVzIGFuZCBicmluZw0KaHVnZSByZXZlbnVlLiBXZSBw cm92aWRlIFdFQlNJVEUgQU5BTFlTSVMgcmVwb3J0ICpmcmVlIG9mIGNoYXJnZS4qIFdlIGNhbg0K aGVscCB5b3UgaWRlbnRpZnkgdGhlIGdyZXkgYXJlYXMgd2hlcmUgeW91IGNhbiBpbXByb3ZlIG9u IHlvdXIgd2Vic2l0ZSB0bw0KcmFuayBoaWdoZXIgaW4gR29vZ2xlLiBPbiByZXF1ZXN0IHdlIGNh biBmb3J3YXJkIG91ciBjb3N0LWZyaWVuZGx5IHdlYnNpdGUNCm1hcmtldGluZyBwbGFucywgZnVs bHkgYmFzZWQgb24gbGF0ZXN0IHNlYXJjaCB1cGRhdGVzLg0KDQoNCkkgbG9vayBmb3J3YXJkIHRv IGhlYXIgZnJvbSB5b3UuDQoNCg0KQ2hlZXJzLA0KDQpLcmlzIExhd3Nvbg0KDQoNCkJ1c2luZXNz IENvbnN1bHRhbnQNCg0KTk9URTogKldlIGFyZSBub3QgU3BhbW1lcnMgYW5kIGFyZSBhZ2FpbnN0 IHNwYW1taW5nIG9mIGFueSBraW5kLiBJZg0KZm9yd2FyZGluZyB0aGlzIGVtYWlsIGhhcyBtYWRl IGFuIG9mZmVuc2UgdG8geW91IG9yIHRvIHlvdXIgY29tcGFueSwgdGhlbg0Kd2UgYXBvbG9naXpl IGZvciB0aGUgc2FtZS4gSW4gb3JkZXIgdG8gc3RvcCByZWNlaXZpbmcgc3VjaCBlbWFpbHMgZnJv bSB1cywNCnNpbXBsZSB0eXBlIOKAnE5P4oCdIGluIHRoZSBzdWJqZWN0IGxpbmUuDQo= From owner-freebsd-questions@freebsd.org Fri Aug 12 12:20:17 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 569B0BB613A for ; Fri, 12 Aug 2016 12:20:17 +0000 (UTC) (envelope-from afiskon@devzen.ru) Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 44F6C1C1A for ; Fri, 12 Aug 2016 12:20:17 +0000 (UTC) (envelope-from afiskon@devzen.ru) Received: by mailman.ysv.freebsd.org (Postfix) id 4447DBB6139; Fri, 12 Aug 2016 12:20:17 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 43F2DBB6138 for ; Fri, 12 Aug 2016 12:20:17 +0000 (UTC) (envelope-from afiskon@devzen.ru) Received: from relay11.nicmail.ru (relay11.nicmail.ru [195.208.3.7]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id F00FE1C16 for ; Fri, 12 Aug 2016 12:20:15 +0000 (UTC) (envelope-from afiskon@devzen.ru) Received: from [109.70.25.187] (port=57661 helo=e733) by f06.mail.nic.ru with esmtp (Exim 5.55) (envelope-from ) id 1bYBRY-000PsL-3D; Fri, 12 Aug 2016 15:20:09 +0300 Received: from [93.174.131.138] (account afiskon@devzen.ru HELO e733) by proxy08.mail.nic.ru (Exim 5.55) with id 1bYBRW-0006HY-JX; Fri, 12 Aug 2016 15:20:06 +0300 Date: Fri, 12 Aug 2016 15:18:57 +0300 From: Aleksander Alekseev To: Ernie Luzar Cc: questions Subject: Re: Best way to search questions list archives Message-ID: <20160812151857.4734f833@e733> In-Reply-To: <57ADBBD5.8060304@gmail.com> References: <57ADBBD5.8060304@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 12:20:17 -0000 Hello, Ernie. Apparently freebsd-questions@ archive is indexed by most search engines, including Google, Bing, Yandex and DuckDuckGo. Try following query: site:https://lists.freebsd.org/pipermail/freebsd-questions/ (request) Latest messages are indexed not fast enough though. And I'm not sure whether _all_ messages are indexed. I think I could index mailing lists archives and build a simple search engine if anyone would use it. It's not rockets science (PostgreSQL + GIN index OR Sphinx, simple import script in Python) and I have a spare server. -- Best regards, Aleksander Alekseev From owner-freebsd-questions@freebsd.org Fri Aug 12 12:31:36 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EB77ABB65A6 for ; Fri, 12 Aug 2016 12:31:36 +0000 (UTC) (envelope-from bah@bananmonarki.se) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5C6CB158C; Fri, 12 Aug 2016 12:31:33 +0000 (UTC) (envelope-from bah@bananmonarki.se) Received: from testbox.news4all.se (testbox.usenet4all.se [10.0.0.3]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id u7CC7mqN021136; Fri, 12 Aug 2016 14:07:49 +0200 (CEST) (envelope-from bah@bananmonarki.se) To: "freebsd-questions@freebsd.org" , jylefort@FreeBSD.org From: Bernt Hansson Subject: Build error (CGAL) Message-ID: <6f9b5641-a232-af6e-0e12-534f7d0fe613@bananmonarki.se> Date: Fri, 12 Aug 2016 14:07:49 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 12:31:37 -0000 Hello list! Getting this error building math/cgal -- Build files have been written to: /usr/ports/math/cgal/work/CGAL-4.8.1 ===> Building for cgal-4.8.1 Scanning dependencies of target CGAL [ 16%] Building CXX object src/CGAL/CMakeFiles/CGAL.dir/all_files.cpp.o [ 33%] Linking CXX shared library ../../lib/libCGAL.so [ 33%] Built target CGAL Scanning dependencies of target CGAL_Core [ 50%] Building CXX object src/CGAL_Core/CMakeFiles/CGAL_Core.dir/all_files.cpp.o Scanning dependencies of target CGAL_ImageIO [ 66%] Building CXX object src/CGAL_ImageIO/CMakeFiles/CGAL_ImageIO.dir/all_files.cpp.o In file included from /usr/ports/math/cgal/work/CGAL-4.8.1/src/CGAL_ImageIO/all_files.cpp:1: In file included from /usr/ports/math/cgal/work/CGAL-4.8.1/src/CGAL_ImageIO/ImageIO.cpp:25: /usr/ports/math/cgal/work/CGAL-4.8.1/include/CGAL/ImageIO_impl.h:1479:9: error: use of undeclared identifier 'createPgmFormat' f = createPgmFormat(); ^ /usr/ports/math/cgal/work/CGAL-4.8.1/include/CGAL/ImageIO_impl.h:1481:9: error: use of undeclared identifier 'createPgmAscIIFormat' f = createPgmAscIIFormat(); ^ /usr/ports/math/cgal/work/CGAL-4.8.1/include/CGAL/ImageIO_impl.h:1483:9: error: use of undeclared identifier 'createPpmFormat' f = createPpmFormat(); ^ 3 errors generated. --- src/CGAL_ImageIO/CMakeFiles/CGAL_ImageIO.dir/all_files.cpp.o --- *** [src/CGAL_ImageIO/CMakeFiles/CGAL_ImageIO.dir/all_files.cpp.o] Error code 1 make[4]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 1 error make[4]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 --- src/CGAL_ImageIO/CMakeFiles/CGAL_ImageIO.dir/all --- *** [src/CGAL_ImageIO/CMakeFiles/CGAL_ImageIO.dir/all] Error code 2 make[3]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 A failure has been detected in another branch of the parallel make make[4]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 --- src/CGAL_Core/CMakeFiles/CGAL_Core.dir/all --- *** [src/CGAL_Core/CMakeFiles/CGAL_Core.dir/all] Error code 2 make[3]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 2 errors make[3]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 *** [all] Error code 2 make[2]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 1 error make[2]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 ===> Compilation failed unexpectedly. Try to set MAKE_JOBS_UNSAFE=yes and rebuild before reporting the failure to the maintainer. *** Error code 1 Stop. make[1]: stopped in /usr/ports/math/cgal *** Error code 1 Stop. make: stopped in /usr/ports/math/cgal From owner-freebsd-questions@freebsd.org Fri Aug 12 12:43:47 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 341E3BB6B6C for ; Fri, 12 Aug 2016 12:43:47 +0000 (UTC) (envelope-from bah@bananmonarki.se) Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se [82.182.32.53]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A1CBC1DA4; Fri, 12 Aug 2016 12:43:46 +0000 (UTC) (envelope-from bah@bananmonarki.se) Received: from testbox.news4all.se (testbox.usenet4all.se [10.0.0.3]) by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id u7CChgN4021224; Fri, 12 Aug 2016 14:43:43 +0200 (CEST) (envelope-from bah@bananmonarki.se) Subject: Re: Build error (CGAL) To: "freebsd-questions@freebsd.org" , jylefort@freebsd.org References: <6f9b5641-a232-af6e-0e12-534f7d0fe613@bananmonarki.se> From: Bernt Hansson Message-ID: <3ee39839-0d5a-4765-c220-dbf5a29f0716@bananmonarki.se> Date: Fri, 12 Aug 2016 14:43:42 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <6f9b5641-a232-af6e-0e12-534f7d0fe613@bananmonarki.se> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 12:43:47 -0000 Sorry, this is the uname -a FreeBSD testbox.news4all.se 10.3-RELEASE-p4 FreeBSD 10.3-RELEASE-p4 #0: Sat May 28 12:23:44 UTC 2016 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 On 2016-08-12 14:07, Bernt Hansson wrote: > Hello list! > > Getting this error building math/cgal > > -- Build files have been written to: /usr/ports/math/cgal/work/CGAL-4.8.1 > ===> Building for cgal-4.8.1 > Scanning dependencies of target CGAL > [ 16%] Building CXX object src/CGAL/CMakeFiles/CGAL.dir/all_files.cpp.o > [ 33%] Linking CXX shared library ../../lib/libCGAL.so > [ 33%] Built target CGAL > Scanning dependencies of target CGAL_Core > [ 50%] Building CXX object > src/CGAL_Core/CMakeFiles/CGAL_Core.dir/all_files.cpp.o > Scanning dependencies of target CGAL_ImageIO > [ 66%] Building CXX object > src/CGAL_ImageIO/CMakeFiles/CGAL_ImageIO.dir/all_files.cpp.o > In file included from > /usr/ports/math/cgal/work/CGAL-4.8.1/src/CGAL_ImageIO/all_files.cpp:1: > In file included from > /usr/ports/math/cgal/work/CGAL-4.8.1/src/CGAL_ImageIO/ImageIO.cpp:25: > /usr/ports/math/cgal/work/CGAL-4.8.1/include/CGAL/ImageIO_impl.h:1479:9: > error: use of undeclared identifier 'createPgmFormat' > f = createPgmFormat(); > ^ > /usr/ports/math/cgal/work/CGAL-4.8.1/include/CGAL/ImageIO_impl.h:1481:9: > error: use of undeclared identifier 'createPgmAscIIFormat' > f = createPgmAscIIFormat(); > ^ > /usr/ports/math/cgal/work/CGAL-4.8.1/include/CGAL/ImageIO_impl.h:1483:9: > error: use of undeclared identifier 'createPpmFormat' > f = createPpmFormat(); > ^ > 3 errors generated. > --- src/CGAL_ImageIO/CMakeFiles/CGAL_ImageIO.dir/all_files.cpp.o --- > *** [src/CGAL_ImageIO/CMakeFiles/CGAL_ImageIO.dir/all_files.cpp.o] > Error code 1 > > make[4]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 > 1 error > > make[4]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 > --- src/CGAL_ImageIO/CMakeFiles/CGAL_ImageIO.dir/all --- > *** [src/CGAL_ImageIO/CMakeFiles/CGAL_ImageIO.dir/all] Error code 2 > > make[3]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 > A failure has been detected in another branch of the parallel make > > make[4]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 > --- src/CGAL_Core/CMakeFiles/CGAL_Core.dir/all --- > *** [src/CGAL_Core/CMakeFiles/CGAL_Core.dir/all] Error code 2 > > make[3]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 > 2 errors > > make[3]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 > *** [all] Error code 2 > > make[2]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 > 1 error > > make[2]: stopped in /usr/ports/math/cgal/work/CGAL-4.8.1 > ===> Compilation failed unexpectedly. > Try to set MAKE_JOBS_UNSAFE=yes and rebuild before reporting the > failure to > the maintainer. > *** Error code 1 > > Stop. > make[1]: stopped in /usr/ports/math/cgal > *** Error code 1 > > Stop. > make: stopped in /usr/ports/math/cgal > > From owner-freebsd-questions@freebsd.org Fri Aug 12 13:27:50 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1C05DBB76E1 for ; Fri, 12 Aug 2016 13:27:50 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id ECACF119A for ; Fri, 12 Aug 2016 13:27:49 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 9E77C2059B for ; Fri, 12 Aug 2016 09:27:43 -0400 (EDT) Received: from web4 ([10.202.2.214]) by compute7.internal (MEProxy); Fri, 12 Aug 2016 09:27:43 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=u59HbZ15pYO01Ha vPc3m9cyWMlw=; b=SM3FwwvY/U+YzcrC6cw1GzmoEN9bmJC2SjkoYzAw8eZRpjH n4lLxzzlGhq+dXPQ5ZV/dPuZXr4pYGOIJN6PBG5siWD7INbnhY5RsXMJkfss0c0N Xw/n4jKNkoOwdlxd1WZjfMAc/hcI/XDAJLr/JaWU9SqpOyzEx2Ipt2sWCfYs= Received: by mailuser.nyi.internal (Postfix, from userid 99) id 74335CC727; Fri, 12 Aug 2016 09:27:43 -0400 (EDT) Message-Id: <1471008463.1245253.693497881.1569BA91@webmail.messagingengine.com> X-Sasl-Enc: EQ4YYhKHToRGuNnrk3V6PDeglOO839NU0CQh59ALkr64 1471008463 From: Mark Felder To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain X-Mailer: MessagingEngine.com Webmail Interface - ajax-71d1d584 In-Reply-To: <1470954782.1073917.692948769.21D9FF94@webmail.messagingengine.com> References: <1470954782.1073917.692948769.21D9FF94@webmail.messagingengine.com> Subject: Re: Monitoring FreeBSD Base System Vulnerabilities Date: Fri, 12 Aug 2016 08:27:43 -0500 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 13:27:50 -0000 On Thu, Aug 11, 2016, at 17:33, Mark Felder wrote: > > $ pkg audit $(freebsd-version -u | sed 's,-RELEASE-p,_,') > > > $ pkg audit $(freebsd-version -k | sed 's,-RELEASE-p,_,') > I want to point out I made a mistake here in my email. The desired strings are "FreeBSD-XX_YY" and "FreeBSD-kernel-XX_YY", so the correct sed transformations of freebsd-version would be: freebsd-version -u | sed 's,^,FreeBSD-,;s,-RELEASE-p,_,' freebsd-version -k | sed 's,^,FreeBSD-kernel-,;s,-RELEASE-p,_,' My servers were patched, so I didn't have a live system to test on! :-) -- Mark Felder ports-secteam member feld@FreeBSD.org From owner-freebsd-questions@freebsd.org Fri Aug 12 14:24:11 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EE8FCBB756B for ; Fri, 12 Aug 2016 14:24:11 +0000 (UTC) (envelope-from robert@webtent.org) Received: from mx2.webtent.net (mx2.webtent.net [216.139.202.4]) by mx1.freebsd.org (Postfix) with ESMTP id CD47711AF for ; Fri, 12 Aug 2016 14:24:11 +0000 (UTC) (envelope-from robert@webtent.org) Received: from localhost (localhost [127.0.0.1]) by mx2.webtent.net (WebTent ESMTP Postfix Internet Mail Exchange) with ESMTP id 83F08D7D42 for ; Fri, 12 Aug 2016 10:17:02 -0400 (EDT) Received: from mx2.webtent.net ([127.0.0.1]) by localhost (mx2.webtent.net [127.0.0.1]) (maiad, port 10024) with ESMTP id 44570-01 for ; Fri, 12 Aug 2016 10:17:02 -0400 (EDT) Received: from [192.168.1.105] (unknown [96.254.71.164]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: robert@mx2.webtent.net) by mx2.webtent.net (WebTent ESMTP Postfix Internet Mail Exchange) with ESMTPSA id 2DB8FD7D1F for ; Fri, 12 Aug 2016 10:17:02 -0400 (EDT) Message-ID: <57ADDA5F.4000405@webtent.org> Date: Fri, 12 Aug 2016 10:17:03 -0400 From: Robert Fitzpatrick User-Agent: Postbox 4.0.8 (Windows/20151105) MIME-Version: 1.0 To: FreeBSD Subject: Monitoring server for crashes Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: WebTent Mailguard 1.0.3 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 14:24:12 -0000 We have a FreeBSD 10 server that keeps crashing every night. I have dumpdev set to AUTO in rc.conf, but I get nothing in the /var/crash folder, I don't have dumpdir defined. The messages log just cuts off with no evidence of kernel panic. Perhaps it is a memory or power issue, how can I monitor for the cause? -- Robert From owner-freebsd-questions@freebsd.org Fri Aug 12 14:51:07 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B5C36BB7ED5 for ; Fri, 12 Aug 2016 14:51:07 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.70.90]) by mx1.freebsd.org (Postfix) with ESMTP id 9739011D4 for ; Fri, 12 Aug 2016 14:51:07 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id 17E96CB8C8D; Fri, 12 Aug 2016 09:51:05 -0500 (CDT) Received: from 128.135.52.6 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Fri, 12 Aug 2016 09:51:05 -0500 (CDT) Message-ID: <61294.128.135.52.6.1471013465.squirrel@cosmo.uchicago.edu> In-Reply-To: <57ADDA5F.4000405@webtent.org> References: <57ADDA5F.4000405@webtent.org> Date: Fri, 12 Aug 2016 09:51:05 -0500 (CDT) Subject: Re: Monitoring server for crashes From: "Valeri Galtsev" To: "Robert Fitzpatrick" Cc: "FreeBSD" Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 14:51:07 -0000 On Fri, August 12, 2016 9:17 am, Robert Fitzpatrick wrote: > We have a FreeBSD 10 server that keeps crashing every night. I have > dumpdev set to AUTO in rc.conf, but I get nothing in the /var/crash > folder, I don't have dumpdir defined. The messages log just cuts off > with no evidence of kernel panic. Perhaps it is a memory or power issue, > how can I monitor for the cause? > Before doing such monitoring I would really do a good hardware test. Incidentally, who is hardware manufacturer (just for my curiosity). The usual suspects are: memory (poor/flaky memory, or combination of memory with slightly different specs; these even though they may work together can lead to failure sometimes very rarely, like once every 6 Months which is really hard to troubleshoot: just avoid this). Another possibility: tripping temperature threshold set in BIOS. (These, BTW will leave no tracks in crash, logs etc.) Check this and bring threshold some 15-20 F (7 - 10 C ) up. Incidentally: which CPU(s) do you have? (I'm used to think, AMD will withstand any abuse without failing: you almost can boil water on these, Intels are not as robust). What I would do is : open the box, leave minimal hardware (run with minimal amount of RAM, remove all extra cards etc) and see if you have problem with this minimal hardware configuration. If not, start adding hardware, install all RAM first, test if it doesn't crash. Run memtest96 at this point for at least 48 hours (or at the very minimum 2-3 full loops of test). In this configuration try to run system and create significant CPU load (several multi-thread "build world" can help do that), and simultaneously try to use all the RAM. Things are slightly different under heavy load. And so on - add the rest of hardware and test... One more thing: check if your PS provides at least 30% more power than all hardware may need. Marginally insufficient power may lead to unpredictable thing on PCI bus. Incidentally, how old is power supply (and the rest of hardware). Electrolytic capacitors may loose capacitance with age, thus not filtering well enough ripple on PS leads (capacitors inside PS), on CPU power leads and on PCI bus power lines (capacitors on system board - check if they do not showing traces of leakage). Good luck. Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Fri Aug 12 15:51:52 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B8CADBB67F6 for ; Fri, 12 Aug 2016 15:51:52 +0000 (UTC) (envelope-from robert@webtent.org) Received: from mx2.webtent.net (mx2.webtent.net [216.139.202.4]) by mx1.freebsd.org (Postfix) with ESMTP id 7657B11CB for ; Fri, 12 Aug 2016 15:51:51 +0000 (UTC) (envelope-from robert@webtent.org) Received: from localhost (localhost [127.0.0.1]) by mx2.webtent.net (WebTent ESMTP Postfix Internet Mail Exchange) with ESMTP id A8335D7DAE; Fri, 12 Aug 2016 11:51:50 -0400 (EDT) Received: from mx2.webtent.net ([127.0.0.1]) by localhost (mx2.webtent.net [127.0.0.1]) (maiad, port 10024) with ESMTP id 48582-09; Fri, 12 Aug 2016 11:51:50 -0400 (EDT) Received: from [192.168.1.105] (unknown [96.254.71.164]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: robert@mx2.webtent.net) by mx2.webtent.net (WebTent ESMTP Postfix Internet Mail Exchange) with ESMTPSA id C8A29D7DB3; Fri, 12 Aug 2016 11:51:49 -0400 (EDT) Message-ID: <57ADF096.8010608@webtent.org> Date: Fri, 12 Aug 2016 11:51:50 -0400 From: Robert Fitzpatrick User-Agent: Postbox 4.0.8 (Windows/20151105) MIME-Version: 1.0 To: galtsev@kicp.uchicago.edu CC: FreeBSD Subject: Re: Monitoring server for crashes References: <57ADDA5F.4000405@webtent.org> <61294.128.135.52.6.1471013465.squirrel@cosmo.uchicago.edu> In-Reply-To: <61294.128.135.52.6.1471013465.squirrel@cosmo.uchicago.edu> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: WebTent Mailguard 1.0.3 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 15:51:52 -0000 Valeri Galtsev wrote: > Before doing such monitoring I would really do a good hardware test. > Incidentally, who is hardware manufacturer (just for my curiosity). The > usual suspects are: memory (poor/flaky memory, or combination of memory > with slightly different specs; these even though they may work together > can lead to failure sometimes very rarely, like once every 6 Months which > is really hard to troubleshoot: just avoid this). Another possibility: > tripping temperature threshold set in BIOS. (These, BTW will leave no > tracks in crash, logs etc.) Check this and bring threshold some 15-20 F (7 > - 10 C ) up. Incidentally: which CPU(s) do you have? (I'm used to think, > AMD will withstand any abuse without failing: you almost can boil water on > these, Intels are not as robust). What I would do is : open the box, leave > minimal hardware (run with minimal amount of RAM, remove all extra cards > etc) and see if you have problem with this minimal hardware configuration. > If not, start adding hardware, install all RAM first, test if it doesn't > crash. Run memtest96 at this point for at least 48 hours (or at the very > minimum 2-3 full loops of test). In this configuration try to run system > and create significant CPU load (several multi-thread "build world" can > help do that), and simultaneously try to use all the RAM. Things are > slightly different under heavy load. And so on - add the rest of hardware > and test... One more thing: check if your PS provides at least 30% more > power than all hardware may need. Marginally insufficient power may lead > to unpredictable thing on PCI bus. Incidentally, how old is power supply > (and the rest of hardware). Electrolytic capacitors may loose capacitance > with age, thus not filtering well enough ripple on PS leads (capacitors > inside PS), on CPU power leads and on PCI bus power lines (capacitors on > system board - check if they do not showing traces of leakage). > Thanks for all the suggestions, will check temp and other info in BIOS tonight, I really can't have the server down for long memory test, will make sure all memory is the same. The server is IBM x3650 with 2 Quad Core Xeon L5420 a mixture of drives using hardware ServeRAID 8k and 12GB of RAM. I purchased second hand in 2011. I have a screenshot of the product data screen in the BIOS, it has a diagnostics date of Aug 2009 in the BIOS, all hardware should be original except drives and memory. The load comes from a PostgreSQL database primarily, also provides DNS and LDAP services. Not sure heat is the issue, mainly happens at the same general time at night, heaviest load is definitely during the day. I see now, most of the time it happens during dumping of the db each night, but it has happened once during the day and once a couple of hours before backup. I'm leaning toward a memory issue and will definitely visit the data center tonight and see the types. The db size has not changed much over time and this just started recently. It is a SpamAssassin/ClamAV db and purges, vacuums every night after dumping. I will disable and do dump manually tonight, 90% of the time it seems to be going down during backup of the largest db. Perhaps the crashes have caused a table to corrupt, I 'fsck -y' all mounts in single user mode after every crash. -- Robert From owner-freebsd-questions@freebsd.org Fri Aug 12 16:10:32 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 595EEBB6D87 for ; Fri, 12 Aug 2016 16:10:32 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.70.90]) by mx1.freebsd.org (Postfix) with ESMTP id 1FF361E90 for ; Fri, 12 Aug 2016 16:10:31 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id 3A634CB8CA9; Fri, 12 Aug 2016 11:10:31 -0500 (CDT) Received: from 128.135.52.6 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Fri, 12 Aug 2016 11:10:31 -0500 (CDT) Message-ID: <11590.128.135.52.6.1471018231.squirrel@cosmo.uchicago.edu> In-Reply-To: <57ADF096.8010608@webtent.org> References: <57ADDA5F.4000405@webtent.org> <61294.128.135.52.6.1471013465.squirrel@cosmo.uchicago.edu> <57ADF096.8010608@webtent.org> Date: Fri, 12 Aug 2016 11:10:31 -0500 (CDT) Subject: Re: Monitoring server for crashes From: "Valeri Galtsev" To: "Robert Fitzpatrick" Cc: galtsev@kicp.uchicago.edu, "FreeBSD" Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 16:10:32 -0000 On Fri, August 12, 2016 10:51 am, Robert Fitzpatrick wrote: > Valeri Galtsev wrote: >> Before doing such monitoring I would really do a good hardware test. >> Incidentally, who is hardware manufacturer (just for my curiosity). The >> usual suspects are: memory (poor/flaky memory, or combination of memory >> with slightly different specs; these even though they may work together >> can lead to failure sometimes very rarely, like once every 6 Months >> which >> is really hard to troubleshoot: just avoid this). Another possibility: >> tripping temperature threshold set in BIOS. (These, BTW will leave no >> tracks in crash, logs etc.) Check this and bring threshold some 15-20 F >> (7 >> - 10 C ) up. Incidentally: which CPU(s) do you have? (I'm used to think, >> AMD will withstand any abuse without failing: you almost can boil water >> on >> these, Intels are not as robust). What I would do is : open the box, >> leave >> minimal hardware (run with minimal amount of RAM, remove all extra cards >> etc) and see if you have problem with this minimal hardware >> configuration. >> If not, start adding hardware, install all RAM first, test if it doesn't >> crash. Run memtest96 at this point for at least 48 hours (or at the very >> minimum 2-3 full loops of test). In this configuration try to run system >> and create significant CPU load (several multi-thread "build world" can >> help do that), and simultaneously try to use all the RAM. Things are >> slightly different under heavy load. And so on - add the rest of >> hardware >> and test... One more thing: check if your PS provides at least 30% more >> power than all hardware may need. Marginally insufficient power may lead >> to unpredictable thing on PCI bus. Incidentally, how old is power supply >> (and the rest of hardware). Electrolytic capacitors may loose >> capacitance >> with age, thus not filtering well enough ripple on PS leads (capacitors >> inside PS), on CPU power leads and on PCI bus power lines (capacitors on >> system board - check if they do not showing traces of leakage). >> > > Thanks for all the suggestions, will check temp and other info in BIOS > tonight, I really can't have the server down for long memory test, will > make sure all memory is the same. The server is IBM x3650 with 2 Quad > Core Xeon L5420 a mixture of drives using hardware ServeRAID 8k and 12GB > of RAM. Sound like memory under heavy load. I definitely would: 1. re-seat all RAM modules. 2. While doing 1 check all modules are same brand same part number. I don't remember off hand if your CPU has its memory controller (like in AMD opterons) or it is older "memory bus" used by all CPUs, and memory controller sits on system board, In last case I would just stick extra FAN on that memory controller chip. If memory controllers are on CPU dies, the make sure that memory modules connected to given CPU are the same; they can be [somewhat] different from ones connected to different CPU. Basically: all RAM modules connected to the same memory controller should be teh same. Do I get it correctly: this machine (purchased used) originally run without problems for you (for multiple Months), right? One more thing I wouldn't exclude: used system board may have fried PCI-express slot, if you have something in it, the machine will be flaky. I had it once ;-( If you can remove everything, or just move extra cards to different slots, this may help you to test this. Good luck! > I purchased second hand in 2011. I have a screenshot of the > product data screen in the BIOS, it has a diagnostics date of Aug 2009 > in the BIOS, all hardware should be original except drives and memory. > The load comes from a PostgreSQL database primarily, also provides DNS > and LDAP services. Not sure heat is the issue, mainly happens at the > same general time at night, heaviest load is definitely during the day. > > I see now, most of the time it happens during dumping of the db each > night, but it has happened once during the day and once a couple of > hours before backup. I'm leaning toward a memory issue and will > definitely visit the data center tonight and see the types. The db size > has not changed much over time and this just started recently. It is a > SpamAssassin/ClamAV db and purges, vacuums every night after dumping. I > will disable and do dump manually tonight, 90% of the time it seems to > be going down during backup of the largest db. Perhaps the crashes have > caused a table to corrupt, I 'fsck -y' all mounts in single user mode > after every crash. > > -- > Robert > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Fri Aug 12 18:07:55 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3143BBB8D1A for ; Fri, 12 Aug 2016 18:07:55 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: from mail-yb0-x22f.google.com (mail-yb0-x22f.google.com [IPv6:2607:f8b0:4002:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E2C551578 for ; Fri, 12 Aug 2016 18:07:54 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: by mail-yb0-x22f.google.com with SMTP id w8so9909453ybe.0 for ; Fri, 12 Aug 2016 11:07:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:cc; bh=KAfp/g6xwZDFVgrg1DzRJoVP3WqFdw5q2Lemq7T67F4=; b=BAtagg9ifFWjjPQZWu/oq2Iy5+JftEoTfTn2+gBdg07aKIVIqbo/u2TFTX1fHt92XI 1guHCkV/UBsejFEzBDRglUowd5DxszQlGG2ZEr1LjxJiwYkhsf/p97UNcO1AufCbC6mb Yp8bNIgndjt/qyvN29SqVp0ttvkvAvDI9eell1n5sDGuItvuLQhCzHoDVdAhrkVJ0R0h Dt+2cu17wGuWQo5S0S344RZJ1TcZ/4T7kNEGKwLC30hg7WJZYaPrt33doez+kXZutlMU FNpvCqa9+sfo2/5CY7dEjunOpJUNuV2OaohN6BYm1MqkvZti+Rgdrc+mJxi6laBjve4c NjGw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:cc; bh=KAfp/g6xwZDFVgrg1DzRJoVP3WqFdw5q2Lemq7T67F4=; b=c/0e8IRXTqR1vfN4Le/qqCvkbKatnGEWH4l49bo+AKBCm68Dj6G8/yZoFsFV+sandA jpXZLHPYr3cYAgPT6VveR5adv5G2gtG0ImOM6ZeblOlpISb1s2cFWhG9+MW2S+S4w4KP ta1RNmhA0jTDycfZReh/Sp55XRgfF25N/nueimyHHx9iWI3kDqSeKdQQ9OhgNWoxE1GY J/6T3yshXAhGuyr86jf8c85bijegWH7wA4Qoyskzxmhw/txUB33jIyVeDl7rF/W0TPn4 bvNlhrAL4X4c0DHL//8rIWGDkl1KVxuUeIvq0EUNQTd+TvHZwqt6KW0UTMegBpFLgbar 6XpQ== X-Gm-Message-State: AEkoousI75GQgXwsDP3hrltXvENjBnCYR693L4BH8ZGns9PAsxexe/K6eF2htRRvqjkrvvMOmw8BJ/+iZd4yMQ== X-Received: by 10.37.207.80 with SMTP id f77mt6016882ybg.141.1471025274022; Fri, 12 Aug 2016 11:07:54 -0700 (PDT) MIME-Version: 1.0 Received: by 10.129.51.150 with HTTP; Fri, 12 Aug 2016 11:07:53 -0700 (PDT) In-Reply-To: <11590.128.135.52.6.1471018231.squirrel@cosmo.uchicago.edu> References: <57ADDA5F.4000405@webtent.org> <61294.128.135.52.6.1471013465.squirrel@cosmo.uchicago.edu> <57ADF096.8010608@webtent.org> <11590.128.135.52.6.1471018231.squirrel@cosmo.uchicago.edu> From: Ultima Date: Fri, 12 Aug 2016 14:07:53 -0400 Message-ID: Subject: Re: Monitoring server for crashes Cc: Robert Fitzpatrick , FreeBSD Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Aug 2016 18:07:55 -0000 Please provide exact version of FreeBSD, I recall an issue in 10.2, a cron job with exact symptoms and was fixed with updating. I doubt this is the problem however providing a more precise version information can help narrow down software related issues. On Fri, Aug 12, 2016 at 12:10 PM, Valeri Galtsev wrote: > > On Fri, August 12, 2016 10:51 am, Robert Fitzpatrick wrote: > > Valeri Galtsev wrote: > >> Before doing such monitoring I would really do a good hardware test. > >> Incidentally, who is hardware manufacturer (just for my curiosity). The > >> usual suspects are: memory (poor/flaky memory, or combination of memory > >> with slightly different specs; these even though they may work together > >> can lead to failure sometimes very rarely, like once every 6 Months > >> which > >> is really hard to troubleshoot: just avoid this). Another possibility: > >> tripping temperature threshold set in BIOS. (These, BTW will leave no > >> tracks in crash, logs etc.) Check this and bring threshold some 15-20 F > >> (7 > >> - 10 C ) up. Incidentally: which CPU(s) do you have? (I'm used to think, > >> AMD will withstand any abuse without failing: you almost can boil water > >> on > >> these, Intels are not as robust). What I would do is : open the box, > >> leave > >> minimal hardware (run with minimal amount of RAM, remove all extra cards > >> etc) and see if you have problem with this minimal hardware > >> configuration. > >> If not, start adding hardware, install all RAM first, test if it doesn't > >> crash. Run memtest96 at this point for at least 48 hours (or at the very > >> minimum 2-3 full loops of test). In this configuration try to run system > >> and create significant CPU load (several multi-thread "build world" can > >> help do that), and simultaneously try to use all the RAM. Things are > >> slightly different under heavy load. And so on - add the rest of > >> hardware > >> and test... One more thing: check if your PS provides at least 30% more > >> power than all hardware may need. Marginally insufficient power may lead > >> to unpredictable thing on PCI bus. Incidentally, how old is power supply > >> (and the rest of hardware). Electrolytic capacitors may loose > >> capacitance > >> with age, thus not filtering well enough ripple on PS leads (capacitors > >> inside PS), on CPU power leads and on PCI bus power lines (capacitors on > >> system board - check if they do not showing traces of leakage). > >> > > > > Thanks for all the suggestions, will check temp and other info in BIOS > > tonight, I really can't have the server down for long memory test, will > > make sure all memory is the same. The server is IBM x3650 with 2 Quad > > Core Xeon L5420 a mixture of drives using hardware ServeRAID 8k and 12GB > > of RAM. > > Sound like memory under heavy load. I definitely would: > > 1. re-seat all RAM modules. > > 2. While doing 1 check all modules are same brand same part number. I > don't remember off hand if your CPU has its memory controller (like in AMD > opterons) or it is older "memory bus" used by all CPUs, and memory > controller sits on system board, In last case I would just stick extra FAN > on that memory controller chip. If memory controllers are on CPU dies, the > make sure that memory modules connected to given CPU are the same; they > can be [somewhat] different from ones connected to different CPU. > Basically: all RAM modules connected to the same memory controller should > be teh same. > > Do I get it correctly: this machine (purchased used) originally run > without problems for you (for multiple Months), right? > > One more thing I wouldn't exclude: used system board may have fried > PCI-express slot, if you have something in it, the machine will be flaky. > I had it once ;-( If you can remove everything, or just move extra cards > to different slots, this may help you to test this. > > Good luck! > > > I purchased second hand in 2011. I have a screenshot of the > > product data screen in the BIOS, it has a diagnostics date of Aug 2009 > > in the BIOS, all hardware should be original except drives and memory. > > The load comes from a PostgreSQL database primarily, also provides DNS > > and LDAP services. Not sure heat is the issue, mainly happens at the > > same general time at night, heaviest load is definitely during the day. > > > > I see now, most of the time it happens during dumping of the db each > > night, but it has happened once during the day and once a couple of > > hours before backup. I'm leaning toward a memory issue and will > > definitely visit the data center tonight and see the types. The db size > > has not changed much over time and this just started recently. It is a > > SpamAssassin/ClamAV db and purges, vacuums every night after dumping. I > > will disable and do dump manually tonight, 90% of the time it seems to > > be going down during backup of the largest db. Perhaps the crashes have > > caused a table to corrupt, I 'fsck -y' all mounts in single user mode > > after every crash. > > > > -- > > Robert > > > > _______________________________________________ > > freebsd-questions@freebsd.org mailing list > > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to > > "freebsd-questions-unsubscribe@freebsd.org" > > > > > ++++++++++++++++++++++++++++++++++++++++ > Valeri Galtsev > Sr System Administrator > Department of Astronomy and Astrophysics > Kavli Institute for Cosmological Physics > University of Chicago > Phone: 773-702-4247 > ++++++++++++++++++++++++++++++++++++++++ > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Sat Aug 13 00:27:41 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 076E5BB7BAE for ; Sat, 13 Aug 2016 00:27:41 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from holgerdanske.com (holgerdanske.com [184.105.128.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.he.net", Issuer "GeoTrust SSL CA - G4" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id ECE3D1BA7 for ; Sat, 13 Aug 2016 00:27:40 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from ::ffff:99.100.19.101 ([99.100.19.101]) by holgerdanske.com for ; Fri, 12 Aug 2016 17:20:54 -0700 Subject: Re: Monitoring server for crashes To: freebsd-questions@freebsd.org References: <57ADDA5F.4000405@webtent.org> <61294.128.135.52.6.1471013465.squirrel@cosmo.uchicago.edu> <57ADF096.8010608@webtent.org> <11590.128.135.52.6.1471018231.squirrel@cosmo.uchicago.edu> From: David Christensen X-Enigmail-Draft-Status: N1110 Message-ID: Date: Fri, 12 Aug 2016 17:20:54 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.2.0 MIME-Version: 1.0 In-Reply-To: <11590.128.135.52.6.1471018231.squirrel@cosmo.uchicago.edu> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 00:27:41 -0000 On 08/12/2016 09:10 AM, Valeri Galtsev wrote: > > On Fri, August 12, 2016 10:51 am, Robert Fitzpatrick wrote: >> Valeri Galtsev wrote: >>> ... Run memtest96 at this point for at least 48 hours (or at the very >>> minimum 2-3 full loops of test). I use memtest86+: http://www.memtest.org/ > 1. re-seat all RAM modules. I would advise testing before changing anything. The strategy is: devise a reproducible test that invokes the bug, use the test to isolate the bug, fix the bug, re-run test to verify the bug is fixed, re-run the test periodically to verify that that bug has not returned. Also -- buy a power supply tester and use it. David From owner-freebsd-questions@freebsd.org Sat Aug 13 10:28:46 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5D1E4BB7395 for ; Sat, 13 Aug 2016 10:28:46 +0000 (UTC) (envelope-from vlad-fbsd@acheronmedia.com) Received: from mail.irealone.com (fawn.irealone.com [IPv6:2001:1af8:4010:a07b:10::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2A9BB1721 for ; Sat, 13 Aug 2016 10:28:46 +0000 (UTC) (envelope-from vlad-fbsd@acheronmedia.com) Received: by mail.irealone.com (Postfix, from userid 1002) id 2B64A60B4B; Sat, 13 Aug 2016 12:28:43 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=acheronmedia.com; s=mail; t=1471084123; bh=tvhHp6mQJ0TpTyl0LFgUyRT51CjvpYgV6N44iUJG9r0=; h=To:Subject:Date:From:From; b=YAt+UnLLwYKvyjlY1sqwTpjOlADi07k9x3yYbX7rTPNH2bH/dbABRdy4AKSvfWYLb Lyb4gbvVd0gGPylSkITJEoUDNEGxNeOEkTaBE0G0aeHPN/6N1PS+rAD2iHSecggux/ 9MEMgyN/0hwZtHn3EESjywRcO5UN2UXSn+CDnxiQ= To: freebsd-questions@freebsd.org Subject: freebsd-update's "Fetching patches" phase? X-PHP-Originating-Script: 0:rcube.php MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Sat, 13 Aug 2016 12:28:43 +0200 From: "Vlad K." Organization: Acheron Media Message-ID: <823dd643595a5be72671fd5d9c7199b0@acheronmedia.com> X-Sender: vlad-fbsd@acheronmedia.com User-Agent: Roundcube Webmail/1.1.5 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 10:28:46 -0000 Hello list, what's the freebsd-update "Fetching patches" phase for? I've set up a central reverse proxy cache for all my servers to speed things up, and looking at how it behaves I've noticed that the "Fetching patches" phase is resulting with 404s for each link attempted. Now, I don't know if this is because it's still not final -RELEASE version, but it does look incredibly inefficient. Upgrading from -BETA4 to -RC1 queried over 9000 (heh) URLs all of them returning 404s. I've configured my proxy to cache 404 too so the servers just blast through that local cache after the first server is done. -- Vlad K. From owner-freebsd-questions@freebsd.org Sat Aug 13 12:07:55 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 49ADEBB7F31 for ; Sat, 13 Aug 2016 12:07:55 +0000 (UTC) (envelope-from beigi.saeed@gmail.com) Received: from mail-wm0-x235.google.com (mail-wm0-x235.google.com [IPv6:2a00:1450:400c:c09::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D68E316C0 for ; Sat, 13 Aug 2016 12:07:54 +0000 (UTC) (envelope-from beigi.saeed@gmail.com) Received: by mail-wm0-x235.google.com with SMTP id q128so18858633wma.1 for ; Sat, 13 Aug 2016 05:07:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to; bh=2IHtWGVB5oQigfL/lsXWtHcG0HHdDdW53yEpZhjOQX0=; b=glUKaVbyikMtPiN0o5GweyBqCf6Ioim3Ecne2c3tkbf/6m6QjhUaYcAM6m+enWb/wt FZlsYlcp9By+CzjSe6siiOIIc6p3lupqjy8JopEjqI4Y9QNI/ggV8tZwsnkmuRkXeW+k YtyhSCMe4Hg6+2HVbp4hBDU3+rzlG2vAEVi7JDg3aCUQqRdEaoDFWLyFkkogyao0SRv8 uSB13+OTuGos3uHXzvSxL8GzuKxAqk+/ruI7idBbZhqcg/d1h67TcceoN8zqjgtrygq0 myowX4QsRQYzI4EDBMoXrZUqy52jGz3SQkj8+B0/oS5CVzAnT+dNnugt/Lq1Cv9xI5X8 Qsyg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=2IHtWGVB5oQigfL/lsXWtHcG0HHdDdW53yEpZhjOQX0=; b=csLp+h9dTYhev793PmVYOLzAn5BFyz2okU293Qv+j9dhB8F8myvYRdKjbG3McXd9H6 TkUnN/f1ItiZCjzUpaZBvvn1YFocwIpSunTY87cKT1R1ezDTC4AKFqQU9z+Yyq5bAbdI 4o1O04eY6sj8f8sWCkKd+ViVwhbK6cRt9Wqc0Y3QyBmc0QAxvwXh0THXInQNXFA5NQqN ylOM0BPpwj6g87FBpGn7KhKK9OUWCXdKN6BWbizELXWEkUvefD/If5JpPN6Bqfabwvla ivI8p7lfKiL05qJ2zdrMSnX45WNiQNmr3IepdRIdhQvpH8NqZYSR7OdEH17HdbOM0ZFa +bcA== X-Gm-Message-State: AEkoouvQjnMAq2BLIugxanBRmkJT8lce+8lW59zWF1/Ay0IAqT80IjJzMmytNEn4gEV9610MqUX0ZyBPUOlctg== X-Received: by 10.28.209.14 with SMTP id i14mr3346968wmg.35.1471090073234; Sat, 13 Aug 2016 05:07:53 -0700 (PDT) MIME-Version: 1.0 Received: by 10.194.91.167 with HTTP; Sat, 13 Aug 2016 05:07:32 -0700 (PDT) From: Saeed Beigi Rizi Date: Sat, 13 Aug 2016 16:37:32 +0430 Message-ID: Subject: few questions To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 12:07:55 -0000 dear sir or madam i just want to thank you your OS is so amazing recently i got familiar with Bhyve so i decided to change my network infrastructure from ESXI to Bhyve and i am really happy with this decision =E2=80=8B Sincerely Yours Saeed Beigi Rizi Business Technology Administrator .about.me. :-) one reason to SMILE (-: From owner-freebsd-questions@freebsd.org Sat Aug 13 13:20:30 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4473CBB8D8B for ; Sat, 13 Aug 2016 13:20:30 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wm0-x231.google.com (mail-wm0-x231.google.com [IPv6:2a00:1450:400c:c09::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E36741228 for ; Sat, 13 Aug 2016 13:20:29 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: by mail-wm0-x231.google.com with SMTP id i5so23684618wmg.0 for ; Sat, 13 Aug 2016 06:20:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=date:from:to:subject:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=w3jOj8JOzu1260oIh5HiuReOVKZSdq2LysUGfHJqdQ8=; b=UW4eCC8Xu7eBGwJaKbysSSdB3C4x/svfvPoK2JHAfc0L4U2CN1SmrJtKZlFZX/LwWS e0T8NQz3C3EyTRlmCZnaUa97b+y1dGxyzfkcvuZtsK92O+3b2D/dFe//bxzYqozPZlmb 1oi96yTm0Q3wpKe9HQbTM2nuwdNYXWXbBDdPM/Ue5XB50GAS3lm/Ji5lzl+dOLBBZiVs XaRSAUY3xnDOvTq3itfyuWoTXoQRJmLkYp1S32I0VV8TuoS1ugcrv9GfNpIXAARi2W9b Mte3hCVLgUMRTgRS1vJ5+144uDpm3WX5wN+XxgbJnO915CbirlYFBCXt8Pby/5VZwbNY P1NQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=w3jOj8JOzu1260oIh5HiuReOVKZSdq2LysUGfHJqdQ8=; b=YrrlL6ierd9RSYdM/1Xnf1b1hIutJSyWDXPFAchurRbGhpy1h31FKJUgVj93ox7MTp 4Ijwg8CPwE3nV3l8tlgqFM9C99UVGCPFavM7zAz/1MOZB3a6aVqHYf5DVBCh2lHuXw/j eBtBHo4Gp0WCy2w0dx9hMfOtmyeZjOaM3VvGdmh05PebLn4XmQVKX8fLfdrptBSBWq2O 3N4L9fIEL+oZSDg2ZQF8CY8I6f+vHWa3rnohBP/5p0tpnbVYbGd/Wgt80kLndvmwjmQd lRcgT3KlbxZYQr9+oLInsTvEdTwFxrcohj2PkkF+nwyYI+iwodmU2LGlo+/IN9sG04h7 mDEA== X-Gm-Message-State: AEkooutnZP6zIawQ6DExVSClWUIDcq1Ik4j2NF5QJCLQQy2OcNCLsZreduxfQI4w4/KmYA== X-Received: by 10.194.114.135 with SMTP id jg7mr20134715wjb.166.1471094427981; Sat, 13 Aug 2016 06:20:27 -0700 (PDT) Received: from gumby.homeunix.com ([81.171.97.93]) by smtp.gmail.com with ESMTPSA id c16sm7202668wme.4.2016.08.13.06.20.26 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sat, 13 Aug 2016 06:20:26 -0700 (PDT) Date: Sat, 13 Aug 2016 14:20:23 +0100 From: RW To: freebsd-questions@freebsd.org Subject: Re: freebsd-update's "Fetching patches" phase? Message-ID: <20160813142023.620de294@gumby.homeunix.com> In-Reply-To: <823dd643595a5be72671fd5d9c7199b0@acheronmedia.com> References: <823dd643595a5be72671fd5d9c7199b0@acheronmedia.com> X-Mailer: Claws Mail 3.14.0 (GTK+ 2.24.29; amd64-portbld-freebsd10.3) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 13:20:30 -0000 On Sat, 13 Aug 2016 12:28:43 +0200 Vlad K. wrote: > Hello list, > > what's the freebsd-update "Fetching patches" phase for? That's where the updates are downloaded. > I've set up a central reverse proxy cache for all my servers to speed > things up, See below. > and looking at how it behaves I've noticed that the > "Fetching patches" phase is resulting with 404s for each link > attempted. > > Now, I don't know if this is because it's still not final -RELEASE > version, It might be because of the MITM vulnerability in freebsd-update. > but it does look incredibly inefficient. Upgrading from > -BETA4 to -RC1 queried over 9000 (heh) URLs It is efficient because it's very heavily pipelined. If your proxy doesn't have good support for this it could slow things down when the patch files are first fetched. If you use a proxy each client should be have HTTP_PROXY set to the same thing as this is used the seed the random selection of origin servers. If you intercept the connections it wont cache well. From owner-freebsd-questions@freebsd.org Sat Aug 13 13:38:16 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A949FBB81E4 for ; Sat, 13 Aug 2016 13:38:16 +0000 (UTC) (envelope-from vlad-fbsd@acheronmedia.com) Received: from mail.irealone.com (fawn.irealone.com [IPv6:2001:1af8:4010:a07b:10::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 74AB51940 for ; Sat, 13 Aug 2016 13:38:16 +0000 (UTC) (envelope-from vlad-fbsd@acheronmedia.com) Received: by mail.irealone.com (Postfix, from userid 1002) id BFB1460F26; Sat, 13 Aug 2016 15:38:14 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=acheronmedia.com; s=mail; t=1471095494; bh=nUWIQPo/jCdFBBUev2EEK6y0xR40p9WBnG6FYrYRWl0=; h=To:Subject:Date:From:In-Reply-To:References:From; b=E2rcvohkUbElBdmrjmb+XFz+NG8jW7fGTrdNLuSQDTmNwxto0qmWRJLX3d48ZoZ09 ghlIfHrUA1jyZ6YLY6lk8tZfFkjup0VNHhhwZ7HjO28fF649l73Vgd6AtP9BiYurHy 0r3tPMA8R0xHKAqaxc4FZBUay4sOB4+2VgOtNhII= To: freebsd-questions@freebsd.org Subject: Re: freebsd-update's "Fetching patches" phase? X-PHP-Originating-Script: 0:rcube.php MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Sat, 13 Aug 2016 15:38:14 +0200 From: "Vlad K." Organization: Acheron Media In-Reply-To: <20160813142023.620de294@gumby.homeunix.com> References: <823dd643595a5be72671fd5d9c7199b0@acheronmedia.com> <20160813142023.620de294@gumby.homeunix.com> Message-ID: <0f41085ce2c14ad63627a3379dfaee5a@acheronmedia.com> X-Sender: vlad-fbsd@acheronmedia.com User-Agent: Roundcube Webmail/1.1.5 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 13:38:16 -0000 On 2016-08-13 15:20, RW via freebsd-questions wrote: > On Sat, 13 Aug 2016 12:28:43 +0200 > > That's where the updates are downloaded. Yes, but I mean specifically the patches, since this is binary upgrade, and is followed by "Fetching files" of equally large number of them. > It might be because of the MITM vulnerability in freebsd-update. Ah, that might explain it. But is that the case? > If you use a proxy each client should be have HTTP_PROXY set to the > same thing as this is used the seed the random selection of origin > servers. If you intercept the connections it wont cache well. Actually I'm not using HTTP_PROXY at all, but I've set ServerName in /etc/freebsd-update.conf to hostname where the rev proxy is. There nginx is running with proxy cache, including cached 404s. Thanks for your reply! -- Vlad K. From owner-freebsd-questions@freebsd.org Sat Aug 13 14:25:17 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DB6E8BB8BFE for ; Sat, 13 Aug 2016 14:25:17 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 6DFD01E13 for ; Sat, 13 Aug 2016 14:25:17 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (liminal.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3636:3bff:fed4:b0d6]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id D176D7239 for ; Sat, 13 Aug 2016 14:25:04 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/D176D7239; dkim=none; dkim-atps=neutral Subject: Re: freebsd-update's "Fetching patches" phase? To: freebsd-questions@freebsd.org References: <823dd643595a5be72671fd5d9c7199b0@acheronmedia.com> <20160813142023.620de294@gumby.homeunix.com> <0f41085ce2c14ad63627a3379dfaee5a@acheronmedia.com> From: Matthew Seaman Message-ID: <2a1d11d5-cd58-3b20-3fc3-bb8ebf2efa34@FreeBSD.org> Date: Sat, 13 Aug 2016 15:24:53 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <0f41085ce2c14ad63627a3379dfaee5a@acheronmedia.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="raOexCsBRWc2oprC2LXKddSX8A00pc4iN" X-Spam-Status: No, score=-1.2 required=5.0 tests=BAYES_00,SPF_SOFTFAIL autolearn=no autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 14:25:18 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --raOexCsBRWc2oprC2LXKddSX8A00pc4iN Content-Type: multipart/mixed; boundary="CKiRNDdjRl6dxnPcF7cFqLgVhHMrpGc0G" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: <2a1d11d5-cd58-3b20-3fc3-bb8ebf2efa34@FreeBSD.org> Subject: Re: freebsd-update's "Fetching patches" phase? References: <823dd643595a5be72671fd5d9c7199b0@acheronmedia.com> <20160813142023.620de294@gumby.homeunix.com> <0f41085ce2c14ad63627a3379dfaee5a@acheronmedia.com> In-Reply-To: <0f41085ce2c14ad63627a3379dfaee5a@acheronmedia.com> --CKiRNDdjRl6dxnPcF7cFqLgVhHMrpGc0G Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 13/08/2016 14:38, Vlad K. wrote: >> That's where the updates are downloaded. >=20 > Yes, but I mean specifically the patches, since this is binary upgrade,= > and is followed by "Fetching files" of equally large number of them. With freebsd-update, each of those patches is either a replacement file, or a binary patch to transform the old version of a file to the new version. For some updates, which will require updating most of the files on the system, yes, this will require downloading a large number of pretty small items, which does require the ability to pipeline HTTP requests for decent efficiency. Not sure why you're getting so many 404s for your update from 11.0-BETA4 to 11.0-RC1 -- probably I'd give it a day or so and then try again. Matthew --CKiRNDdjRl6dxnPcF7cFqLgVhHMrpGc0G-- --raOexCsBRWc2oprC2LXKddSX8A00pc4iN Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJXry28XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkAT/jMP/RsNxIOM9eR5QxyknCub5fKL 3m84LuThFaTSkTMkPLKR2k/80oQ3jI26VEOG97nVUEtY85Ds27vSwroMhHN+lA1T XBZ1lXabxL8Jv3i+WUzAG9ij1j5c2kaUm6abh9YC6EaAKnHCjAHmotjOzMdPfi3J W9u7QrlAofNzfsjopBj1Cy+YYuT2PpEpVTITuykFqfJt1tz26WWpd/dxA5iMkGMM VlxE+5eWh5pktcZc4n6skfV4kTwCsluB5eoTzOg4WCATIiqa7iUM9YJazOEt0uQR I5QSgr20PlnLh9VKt4XtK+0PrzvoaXp7Au70VurQVAZIjS/PUeOKXfYHvxsq7LgP OhbhHSZgzy0WyRSfYE9z8HwDV/iFNMOooxn+HNvCYjDeOXD/2X6k2ahjkyuNBJKy hegTH9yJxnrPwLWasPbtVY3TP8smQRcBjrhQ87dQkninFIYu41FMWV9M+1gdYZN+ 5xJP+lz1ioDUbxa+DFCtPOGA22XeRX+BqOnGY7WBOkC9EqDUuzRBytTMTYbo6THy rF7eI5sYgFnUo0Xhs1TBNQvYCnN44WB8TVSOlDxWQWJrRayC2iWSTJ6QvjMWYDXn UdG3X2hm3WctSp/O+PD4oxUgmNw79eRLMWd7IZHSY5J/0eQHIn5J4nz3fkT1GXyY QmTfRtJzHZSdZkKx1mUX =Y87v -----END PGP SIGNATURE----- --raOexCsBRWc2oprC2LXKddSX8A00pc4iN-- From owner-freebsd-questions@freebsd.org Sat Aug 13 14:27:46 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 25153BB8CE7 for ; Sat, 13 Aug 2016 14:27:46 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7692C1EF9 for ; Sat, 13 Aug 2016 14:27:44 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id u7DERWOj049088; Sun, 14 Aug 2016 00:27:33 +1000 (EST) (envelope-from smithi@nimnet.asn.au) Date: Sun, 14 Aug 2016 00:27:32 +1000 (EST) From: Ian Smith To: Robert Fitzpatrick cc: galtsev@kicp.uchicago.edu, freebsd-questions@freebsd.org Subject: Re: Monitoring server for crashes In-Reply-To: Message-ID: <20160813234226.N79687@sola.nimnet.asn.au> References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 14:27:46 -0000 In freebsd-questions Digest, Vol 636, Issue 7, Message: 10 On Fri, 12 Aug 2016 11:51:50 -0400 Robert Fitzpatrick wrote: > Valeri Galtsev wrote: > > Before doing such monitoring I would really do a good hardware test. > > Incidentally, who is hardware manufacturer (just for my curiosity). The > > usual suspects are: memory (poor/flaky memory, or combination of memory > > with slightly different specs; these even though they may work together > > can lead to failure sometimes very rarely, like once every 6 Months which > > is really hard to troubleshoot: just avoid this). Another possibility: > > tripping temperature threshold set in BIOS. (These, BTW will leave no > > tracks in crash, logs etc.) Check this and bring threshold some 15-20 F (7 > > - 10 C ) up. Incidentally: which CPU(s) do you have? (I'm used to think, > > AMD will withstand any abuse without failing: you almost can boil water on > > these, Intels are not as robust). What I would do is : open the box, leave > > minimal hardware (run with minimal amount of RAM, remove all extra cards > > etc) and see if you have problem with this minimal hardware configuration. > > If not, start adding hardware, install all RAM first, test if it doesn't > > crash. Run memtest96 at this point for at least 48 hours (or at the very > > minimum 2-3 full loops of test). In this configuration try to run system > > and create significant CPU load (several multi-thread "build world" can > > help do that), and simultaneously try to use all the RAM. Things are > > slightly different under heavy load. And so on - add the rest of hardware > > and test... One more thing: check if your PS provides at least 30% more > > power than all hardware may need. Marginally insufficient power may lead > > to unpredictable thing on PCI bus. Incidentally, how old is power supply > > (and the rest of hardware). Electrolytic capacitors may loose capacitance > > with age, thus not filtering well enough ripple on PS leads (capacitors > > inside PS), on CPU power leads and on PCI bus power lines (capacitors on > > system board - check if they do not showing traces of leakage). All good advice Valeri; not sure about messing with temps in BIOS though .. FreeBSD should be handling that ok via ACPI thermal Zones (versus _HOT and _CRT temperatures) which should cleanly shutdown at _CRT temp. That said, if it gets anywhere near that hot there's a serious issue .. > Thanks for all the suggestions, will check temp and other info in BIOS > tonight, I really can't have the server down for long memory test, will > make sure all memory is the same. The server is IBM x3650 with 2 Quad > Core Xeon L5420 a mixture of drives using hardware ServeRAID 8k and 12GB > of RAM. I purchased second hand in 2011. I have a screenshot of the > product data screen in the BIOS, it has a diagnostics date of Aug 2009 > in the BIOS, all hardware should be original except drives and memory. > The load comes from a PostgreSQL database primarily, also provides DNS > and LDAP services. Not sure heat is the issue, mainly happens at the > same general time at night, heaviest load is definitely during the day. I guess you've checked with ibm re a BIOS update .. 2009 is a while ago. Apart from RAM, which rarely just 'goes bad' esp. on server grade gear, but "rarely happens" happens too. First thing I'd suspect at that age would be the power supply - can you swap it with another? Quickest fix if it works - and it was needed. Second would be temperature, possibly fan/s - which is also the primary cause of blown P/S in my experience. Below is a script I run from cron from 02:59 through 3:09 to record load averages and temperatures through daily maintenance from 3:01, every 10 seconds - for debugging a load average issue, not relevant here. Or you can run it over SSH at home, and read the last entries over breakfast, whether it crashes or not .. The lack of any messages - and you should see one if ACPI thermal zone detection and forced shutdown is working properly - suggests more of a hardware seizure, but at 10 second testing you could see if temps (and load) were a problem prior to crash, at least if it happens in a window. > I see now, most of the time it happens during dumping of the db each > night, but it has happened once during the day and once a couple of > hours before backup. I'm leaning toward a memory issue and will > definitely visit the data center tonight and see the types. The db size > has not changed much over time and this just started recently. It is a > SpamAssassin/ClamAV db and purges, vacuums every night after dumping. I > will disable and do dump manually tonight, 90% of the time it seems to > be going down during backup of the largest db. Perhaps the crashes have > caused a table to corrupt, I 'fsck -y' all mounts in single user mode > after every crash. Do the fscks log success or any problems then? If not, might be worth doing manual fsck to check? /etc/crontab: 59 2 * * * root /root/bin/loadavg_daily /root/bin/loadavg_daily: ======= #!/bin/sh # 19Feb16 loadavg_daily .. every 10 seconds from 02:59 to 03:09 (run by cron) log='/root/loadavg_daily.log' secs=10 i=0 /root/bin/x200stat >> $log # or something else, or nothing .. while [ $i -lt 60 ]; do echo -n "`uptime` " >> $log echo "`sysctl -n hw.acpi.thermal.tz0.temperature`" \ "`sysctl -n hw.acpi.thermal.tz1.temperature`" >> $log sleep $secs i=$((i + 1)) done /root/bin/x200stat >> $log echo >> $log ======= Check sysctl hw.acpi.thermal for your thermal zones of interest. HTH, Ian From owner-freebsd-questions@freebsd.org Sat Aug 13 14:46:43 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B3EE2BAB319 for ; Sat, 13 Aug 2016 14:46:43 +0000 (UTC) (envelope-from vlad-fbsd@acheronmedia.com) Received: from mail.irealone.com (fawn.irealone.com [IPv6:2001:1af8:4010:a07b:10::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7E5A519E6 for ; Sat, 13 Aug 2016 14:46:43 +0000 (UTC) (envelope-from vlad-fbsd@acheronmedia.com) Received: by mail.irealone.com (Postfix, from userid 1002) id C814F6128D; Sat, 13 Aug 2016 16:46:41 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=acheronmedia.com; s=mail; t=1471099601; bh=ZLtD1v3NXveGt9dMf/Dg+H9h3XRwo0XReWjfIF+Mio0=; h=To:Subject:Date:From:In-Reply-To:References:From; b=tNPxqIjEEGqTpWL85hRaMTmuxhf6YeR9aQGvStM4yfxNzTGqRtNNBowKaga7niYoY 5mtaqqXtzUO3g1x/dWsFZ4/KeTOLj5HD4yhUCGJDTzS49GJCl21ZpLK/WJO+UuV6ku TTObLUNz7u/5pbJsiStcvBqa5qgtdNYUPEzSHJpQ= To: freebsd-questions@freebsd.org Subject: Re: freebsd-update's "Fetching patches" phase? X-PHP-Originating-Script: 0:rcube.php MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Sat, 13 Aug 2016 16:46:41 +0200 From: "Vlad K." Organization: Acheron Media In-Reply-To: <2a1d11d5-cd58-3b20-3fc3-bb8ebf2efa34@FreeBSD.org> References: <823dd643595a5be72671fd5d9c7199b0@acheronmedia.com> <20160813142023.620de294@gumby.homeunix.com> <0f41085ce2c14ad63627a3379dfaee5a@acheronmedia.com> <2a1d11d5-cd58-3b20-3fc3-bb8ebf2efa34@FreeBSD.org> Message-ID: X-Sender: vlad-fbsd@acheronmedia.com User-Agent: Roundcube Webmail/1.1.5 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 14:46:43 -0000 On 2016-08-13 16:24, Matthew Seaman wrote: > > Not sure why you're getting so many 404s for your update from > 11.0-BETA4 > to 11.0-RC1 -- probably I'd give it a day or so and then try again. It's actually been like this with B2 -> B3, B3 -> B4 and now B4 -> RC1. Otherwise freebsd-update does not error-out or anything. It just tries all those patches and continues with "Fetching files", and the rest of the process is normal. I've bumped several machines to 11.0-RC1 now (through B2, B3 and B4) and it all works fine. -- Vlad K. From owner-freebsd-questions@freebsd.org Sat Aug 13 18:26:45 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6C8F0BB809A for ; Sat, 13 Aug 2016 18:26:45 +0000 (UTC) (envelope-from wam@hiwaay.net) Received: from fly.hiwaay.net (fly.hiwaay.net [216.180.54.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id DFA401009 for ; Sat, 13 Aug 2016 18:26:44 +0000 (UTC) (envelope-from wam@hiwaay.net) Received: from kabini1.local (dynamic-216-186-209-65.knology.net [216.186.209.65] (may be forged)) (authenticated bits=0) by fly.hiwaay.net (8.13.8/8.13.8/fly) with ESMTP id u7DIQa5d021955 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Sat, 13 Aug 2016 13:26:37 -0500 Subject: Re: Monitoring server for crashes References: <20160813234226.N79687@sola.nimnet.asn.au> Cc: freebsd-questions@freebsd.org From: "William A. Mahaffey III" Message-ID: <398070bd-057f-55bb-2b17-4858f9450c5c@hiwaay.net> Date: Sat, 13 Aug 2016 13:32:05 -0453.75 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.1.0 MIME-Version: 1.0 In-Reply-To: <20160813234226.N79687@sola.nimnet.asn.au> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 18:26:45 -0000 On 08/13/16 09:33, Ian Smith wrote: > In freebsd-questions Digest, Vol 636, Issue 7, Message: 10 > On Fri, 12 Aug 2016 11:51:50 -0400 Robert Fitzpatrick wrote: > > Valeri Galtsev wrote: > > > Before doing such monitoring I would really do a good hardware test. > > > Incidentally, who is hardware manufacturer (just for my curiosity). The > > > usual suspects are: memory (poor/flaky memory, or combination of memory > > > with slightly different specs; these even though they may work together > > > can lead to failure sometimes very rarely, like once every 6 Months which > > > is really hard to troubleshoot: just avoid this). Another possibility: > > > tripping temperature threshold set in BIOS. (These, BTW will leave no > > > tracks in crash, logs etc.) Check this and bring threshold some 15-20 F (7 > > > - 10 C ) up. Incidentally: which CPU(s) do you have? (I'm used to think, > > > AMD will withstand any abuse without failing: you almost can boil water on > > > these, Intels are not as robust). What I would do is : open the box, leave > > > minimal hardware (run with minimal amount of RAM, remove all extra cards > > > etc) and see if you have problem with this minimal hardware configuration. > > > If not, start adding hardware, install all RAM first, test if it doesn't > > > crash. Run memtest96 at this point for at least 48 hours (or at the very > > > minimum 2-3 full loops of test). In this configuration try to run system > > > and create significant CPU load (several multi-thread "build world" can > > > help do that), and simultaneously try to use all the RAM. Things are > > > slightly different under heavy load. And so on - add the rest of hardware > > > and test... One more thing: check if your PS provides at least 30% more > > > power than all hardware may need. Marginally insufficient power may lead > > > to unpredictable thing on PCI bus. Incidentally, how old is power supply > > > (and the rest of hardware). Electrolytic capacitors may loose capacitance > > > with age, thus not filtering well enough ripple on PS leads (capacitors > > > inside PS), on CPU power leads and on PCI bus power lines (capacitors on > > > system board - check if they do not showing traces of leakage). > > All good advice Valeri; not sure about messing with temps in BIOS though > .. FreeBSD should be handling that ok via ACPI thermal Zones (versus > _HOT and _CRT temperatures) which should cleanly shutdown at _CRT temp. > That said, if it gets anywhere near that hot there's a serious issue .. > > > Thanks for all the suggestions, will check temp and other info in BIOS > > tonight, I really can't have the server down for long memory test, will > > make sure all memory is the same. The server is IBM x3650 with 2 Quad > > Core Xeon L5420 a mixture of drives using hardware ServeRAID 8k and 12GB > > of RAM. I purchased second hand in 2011. I have a screenshot of the > > product data screen in the BIOS, it has a diagnostics date of Aug 2009 > > in the BIOS, all hardware should be original except drives and memory. > > The load comes from a PostgreSQL database primarily, also provides DNS > > and LDAP services. Not sure heat is the issue, mainly happens at the > > same general time at night, heaviest load is definitely during the day. > > I guess you've checked with ibm re a BIOS update .. 2009 is a while ago. > > Apart from RAM, which rarely just 'goes bad' esp. on server grade gear, > but "rarely happens" happens too. > > First thing I'd suspect at that age would be the power supply - can you > swap it with another? Quickest fix if it works - and it was needed. > > Second would be temperature, possibly fan/s - which is also the primary > cause of blown P/S in my experience. Below is a script I run from cron > from 02:59 through 3:09 to record load averages and temperatures through > daily maintenance from 3:01, every 10 seconds - for debugging a load > average issue, not relevant here. Or you can run it over SSH at home, > and read the last entries over breakfast, whether it crashes or not .. > > The lack of any messages - and you should see one if ACPI thermal zone > detection and forced shutdown is working properly - suggests more of a > hardware seizure, but at 10 second testing you could see if temps (and > load) were a problem prior to crash, at least if it happens in a window. > > > I see now, most of the time it happens during dumping of the db each > > night, but it has happened once during the day and once a couple of > > hours before backup. I'm leaning toward a memory issue and will > > definitely visit the data center tonight and see the types. The db size > > has not changed much over time and this just started recently. It is a > > SpamAssassin/ClamAV db and purges, vacuums every night after dumping. I > > will disable and do dump manually tonight, 90% of the time it seems to > > be going down during backup of the largest db. Perhaps the crashes have > > caused a table to corrupt, I 'fsck -y' all mounts in single user mode > > after every crash. > > Do the fscks log success or any problems then? If not, might be worth > doing manual fsck to check? > > /etc/crontab: > 59 2 * * * root /root/bin/loadavg_daily > > /root/bin/loadavg_daily: > ======= > #!/bin/sh > # 19Feb16 loadavg_daily .. every 10 seconds from 02:59 to 03:09 (run by cron) > log='/root/loadavg_daily.log' > secs=10 > i=0 > /root/bin/x200stat >> $log # or something else, or nothing .. > while [ $i -lt 60 ]; do > echo -n "`uptime` " >> $log > echo "`sysctl -n hw.acpi.thermal.tz0.temperature`" \ > "`sysctl -n hw.acpi.thermal.tz1.temperature`" >> $log > sleep $secs > i=$((i + 1)) > done > /root/bin/x200stat >> $log > echo >> $log > ======= > > Check sysctl hw.acpi.thermal for your thermal zones of interest. > > HTH, Ian > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > Out of curiosity, I tried the above command under 9.3R: [wam@kabini1, ~, 1:30:25pm] 581 % sysctl -n hw.acpi.thermal.tz1.temperature sysctl: unknown oid 'hw.acpi.thermal.tz1.temperature' [wam@kabini1, ~, 1:30:46pm] 582 % uname -a FreeBSD kabini1.local 9.3-RELEASE-p33 FreeBSD 9.3-RELEASE-p33 #0: Wed Jan 13 17:55:39 UTC 2016 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 [wam@kabini1, ~, 1:31:58pm] 583 % When did it become available ? -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr. From owner-freebsd-questions@freebsd.org Sat Aug 13 20:00:32 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 16D6BBB9885 for ; Sat, 13 Aug 2016 20:00:32 +0000 (UTC) (envelope-from donna.jean.peters@outlook.com) Received: from BLU004-OMC1S11.hotmail.com (blu004-omc1s11.hotmail.com [65.55.116.22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "*.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A7C6011F2 for ; Sat, 13 Aug 2016 20:00:31 +0000 (UTC) (envelope-from donna.jean.peters@outlook.com) Received: from NAM02-SN1-obe.outbound.protection.outlook.com ([65.55.116.7]) by BLU004-OMC1S11.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008); Sat, 13 Aug 2016 12:59:24 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=qgAkKyDGprs4PqeaMeHdAawYAJk6tEjHM0dBU0Mbe/4=; b=OffgPCCe6QMSD4Oxr2gxm0wYwxsudWYjyha5Y6iEly8eyWmmEEz9GDBWkOY4zLmIIoKAn4KrX0ZQNuQuVJwbfg73IqcJXV6xiuliAjSZmYTBTQXy63qE+K78B4KOH47LTu/YjPepfPfqeeosVtk9N9l4UeaDhs5k4mBm6mfWmBpSDpFcwUCvPFnpP0Rh6MR68V5jD6JXmvMyVSFN0oyBUYjM82omu5XUjwNwSJHPIjL/Fx/6gT0E4IAXpWRGuHax4i5YeD7iP/wPCbsN+oENv1x8tUFQXlubgpSvQpmcdK9Cry33Oo6tRJeH0918VbP4PRiBbkf3cs9CXpcqIcgzyw== Received: from BL2NAM02FT056.eop-nam02.prod.protection.outlook.com (10.152.76.60) by BL2NAM02HT103.eop-nam02.prod.protection.outlook.com (10.152.77.110) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.567.7; Sat, 13 Aug 2016 19:59:23 +0000 Received: from YTOPR01MB0492.CANPRD01.PROD.OUTLOOK.COM (10.152.76.52) by BL2NAM02FT056.mail.protection.outlook.com (10.152.77.221) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.567.7 via Frontend Transport; Sat, 13 Aug 2016 19:59:23 +0000 Received: from YTOPR01MB0492.CANPRD01.PROD.OUTLOOK.COM ([10.166.148.148]) by YTOPR01MB0492.CANPRD01.PROD.OUTLOOK.COM ([10.166.148.148]) with mapi id 15.01.0549.026; Sat, 13 Aug 2016 19:59:18 +0000 From: Donna Peters To: "freebsd-questions@FreeBSD.org" Subject: Kernel call exit status Thread-Topic: Kernel call exit status Thread-Index: AQHR9Z0ss5ddAjiiwUaDfI4ZEkL29Q== Date: Sat, 13 Aug 2016 19:59:18 +0000 Message-ID: Accept-Language: en-CA, en-US Content-Language: en-CA X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=softfail (sender IP is 10.152.76.52) smtp.mailfrom=outlook.com; FreeBSD.org; dkim=none (message not signed) header.d=none;FreeBSD.org; dmarc=fail action=none header.from=outlook.com; received-spf: SoftFail (protection.outlook.com: domain of transitioning outlook.com discourages use of 10.152.76.52 as permitted sender) x-tmn: [pL2Dwq9L0VSgtsrrEaX/pV0UuUFfcYm8] x-eopattributedmessage: 0 x-forefront-antispam-report: CIP:10.152.76.52; IPV:NLI; CTRY:; EFV:NLI; SFV:NSPM; SFS:(10019020)(98900003); DIR:OUT; SFP:1102; SCL:1; SRVR:BL2NAM02HT103; H:YTOPR01MB0492.CANPRD01.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; x-microsoft-exchange-diagnostics: 1; BL2NAM02HT103; 6:cv2M5DkDFInuxa+7ptcjPElP+xJ1SUrns8/3fapXAiRhrzE4d9tNoIF23wPH94NztOuSKRII2QTd7483Y44KQwUC+Nv+Df14baTYls/Nl2W7Oo88oy6NQEzysNnC/CBfqDzYgaQfynD0/dv8tfnWEhQACjyP1UQiYFsuq6bZb4otFW5HChGC6EX9L2mGtC3AZ7lWgB74ox3/BJzC11CoraCyuUHH9Xx4vGk//FBLW8DTqlDumA4XPtr0Xsvgw0KtBqFGdkOBPu0N1sBzFKT2zqSAoSXvBphHYw0g0J4hFaHzjpMYl3JftuB9BZMhf8Ue; 5:p++5W8XQJZCbwnCfcqmoHlCmGRI88ohajy4ygKyB8b3SGdtf3/mryJJ+G09k2Q/0sFY+Vn0b0+CYw18oZmwgzx3FcDhfM/0V116/f42uE+h8N0WneG44vf4Joz0fbDvJFRfXah5vCOqVA5jf5ZqgFg==; 24:cwGKEdf8PIQna6tMxnQVSxOHZc00oKhb/w8FBMNn0bXN18vfhhNaJ3H4D02PAdkKFFlOV8+aurk7dTX9Br4+ko6X+8kT+08hD4e9zULdBQA=; 7:W848xo5Rl0Tp7cLwZtntLNRd59t+YoVI0JZTaypNmYl47bXsrXjlIVEs9EoeQaOhSp8AUjTl8QLHaPXQPybXJkACAb0CBFvUz+Fx5/fLIOB+ynKBb3rXM32lxd5m0FkCnmHmlGU3nLDs1hhtjCgg6omBsiF/rj/ynRysj0nK7Obe2NumK4DS+9c5yVVngIJ4Uy6Ajp47kYskNFG/5mOpKNdESjbs6lSm367BF+qIL5rVXCrrAQVrbRZnQ5pSVI7W x-ms-office365-filtering-correlation-id: 0a132785-3e27-4b3f-4b1d-08d3c3b44f9d x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(1601124038)(1601125047); SRVR:BL2NAM02HT103; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(432015012)(82015046); SRVR:BL2NAM02HT103; BCL:0; PCL:0; RULEID:; SRVR:BL2NAM02HT103; x-forefront-prvs: 0033AAD26D spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Aug 2016 19:59:18.4678 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL2NAM02HT103 X-OriginalArrivalTime: 13 Aug 2016 19:59:24.0418 (UTC) FILETIME=[3094BE20:01D1F59D] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 X-Content-Filtered-By: Mailman/MimeDel 2.1.22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 20:00:32 -0000 SEkuDQoNCknigJl2ZSBiZWVuIGZ1dHppbmcgaW4gYXNzZW1ibHkgd2l0aCBzb21lIHNpbXBsZSBr ZXJuZWwgc3lzdGVtIGNhbGxzIG9uIGRlYmlhbiBhbmQgaGF2ZSBmb3VuZCBpdCBuZWFyIGltcG9z c2libGUgdG8gZ2V0IGFueSBpbmZvcm1hdGlvbiBvbiBleGl0IHN0YXR1cyBjb2RlcyB3aGVuIHVz aW5nIGVheCwgZWJ4Li4gYW5kIDB4ODAuDQoNCkkgZm91bmQgeW91ciBkb2N1bWVudGF0aW9uIHJl ZnJlc2hpbmcgKEkgY29uZmVzcyBJIHdhcyB2aXNpdGluZyB0byBzd2l0Y2ggKSAgYW5kIHdhcyB3 b25kZXJpbmcgaWYgYW55IG9mIHlvdSBrbm93IHdldGhlciB0aGUgIGtlcm5lbCBwbGFjZXMgdGhl IGV4aXQgc3RhdHVzIG9mIHRoZSBpbnRlcnJ1cHQgY2FsbCAgaW4gYW4gYWNjZXNzaWJsZSByZWdp c3RlciBmb3IgdGhlIGNhbGxlciB0byBwaWNrIHVwPw0KDQpUaGFua3MgaW4gdGhpcyByZWdhcmQg KGFuZCBkb3dubG9hZGluZyBhbiBpc28gaW4gdGhlIG1lYW50aW1lKSwNCnNwDQoNClBTOiBJ4oCZ bSBTdGV2ZS4gRG9ubmEgSXMgbXkgY3VycmVudCBsYW5kbG9yZC4g8J+Yig0KDQoNClNlbnQgZnJv bSBNYWlsPGh0dHBzOi8vZ28ubWljcm9zb2Z0LmNvbS9md2xpbmsvP0xpbmtJZD01NTA5ODY+IGZv ciBXaW5kb3dzIDEwDQoNCg== From owner-freebsd-questions@freebsd.org Sat Aug 13 22:45:19 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2CC43BB8569 for ; Sat, 13 Aug 2016 22:45:19 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from zoom.lafn.org (zoom.lafn.org [108.92.93.123]) by mx1.freebsd.org (Postfix) with ESMTP id 19DB01CC8 for ; Sat, 13 Aug 2016 22:45:18 +0000 (UTC) (envelope-from doug@mail.sermon-archive.info) Received: from [10.0.1.4] (unknown [71.177.216.148]) by zoom.lafn.org (Postfix) with ESMTPSA id DA39634A885 for ; Sat, 13 Aug 2016 15:45:11 -0700 (PDT) From: Doug Hardie Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Subject: Non working NIC Message-Id: <224DCDD3-162F-4E67-8C1D-9332C85FC032@mail.sermon-archive.info> Date: Sat, 13 Aug 2016 15:45:10 -0700 To: FreeBSD Questions Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) X-Virus-Scanned: clamav-milter 0.98 at zoom.lafn.org X-Virus-Status: Clean X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 22:45:19 -0000 I just upgraded an older PC to 11.0-RC1. Everything went fine except = the msk0 device is not found. Neither is lo0. Its as if networks never = got started. However, running netif start does nothing. msk0 is found = in the hardware during boot and it appears to get all the proper values. =E2=80=94 Doug From owner-freebsd-questions@freebsd.org Sat Aug 13 23:47:10 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id ED88ABB92ED for ; Sat, 13 Aug 2016 23:47:10 +0000 (UTC) (envelope-from pipfstarrd@openmailbox.org) Received: from mail2.openmailbox.org (mail2.openmailbox.org [62.4.1.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B6E1B1A55 for ; Sat, 13 Aug 2016 23:47:10 +0000 (UTC) (envelope-from pipfstarrd@openmailbox.org) Received: by mail2.openmailbox.org (Postfix, from userid 1001) id 1D1DA1033C5; Sun, 14 Aug 2016 01:47:02 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=openmailbox.org; s=openmailbox; t=1471132022; bh=0IsWAy6KDtdIDiPvvI15hbrlaeDxMUm6zeEaXqy3UXE=; h=To:From:Subject:Date:From; b=RaTvSsyyXilEU2zEABFosTn/783rdGnwbrqUA6w9GC+gJm/lqajsOzOXRvCgggpVo thj3/JLIw9dTBBHVdFI2Jtd1r18uS+AE2nFg3She7qcTfcNCezGOAh9R8+liZc8Si2 /yavVzl1r+us8pdeVXRLhGXiroskpxDGwg7k9wrY= X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on h3 X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=NO_RECEIVED,NO_RELAYS, T_DKIM_INVALID autolearn=no autolearn_force=no version=3.4.0 To: freebsd-questions@freebsd.org DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=openmailbox.org; s=openmailbox; t=1471132021; bh=0IsWAy6KDtdIDiPvvI15hbrlaeDxMUm6zeEaXqy3UXE=; h=To:From:Subject:Date:From; b=HdqCdJ7/BYI05JxwAF9ses2Pc0bHs7FB/Ku+6Iv2gFuHcGhHni0+YtJ+ntuRXe13P ymuOSt1gSlnheuLDLEsUlov0Lq3HBMQR50tHVHsu+tbcuYJnJCG3w0R8J2BlpqjkXy C9FyXNS8XALn32d+updJaGoe4Yy8ymQzFanzsW8c= From: twilight Subject: uname -r gives -p4; freebsd-update says "no updates needed to update to -p7" Message-ID: <46db5e9f-d2da-3f32-bcd9-88966de60816@openmailbox.org> Date: Sat, 13 Aug 2016 23:46:54 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Aug 2016 23:47:11 -0000 Is it a bug or a feature? ~> uname -r 10.3-RELEASE-p4 ~> sudo freebsd-update fetch Looking up update.FreeBSD.org mirrors... none found. Fetching metadata signature for 10.3-RELEASE from update.FreeBSD.org... done. Fetching metadata index... done. Inspecting system... done. Preparing to download files... done. No updates needed to update system to 10.3-RELEASE-p7. ~> sudo freebsd-update install No updates are available to install. Run '/usr/sbin/freebsd-update fetch' first. -- Cheers~ PGP key fingerprint: 07B3 2177 3E27 BF41 DC65 CC95 BDA8 88F1 E9F9 CEEF You can retrieve my public key at pgp.mit.edu.