Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
Absorbs Quickly
Jan 6, 2005

And then the ArchAngel descended from heaven.

uksheep posted:

I guess you can sorta trust the one that FreeBSD.org runs

Another vote for vsftpd.

If you're making a jail, look at ezjail, it does some nifty stuff like mount the whole base system read-only (enforced by the host, not the jail), and makes upgrading your jails a significantly less painful experience.

Adbot
ADBOT LOVES YOU

HATE TROLL TIM
Dec 14, 2006
Just a reminder to those wanting an easy upgrade path to 7.1:

FreeBSD Update posted:

The freebsd-update(8) utility supports binary upgrades of i386 and amd64 systems running earlier FreeBSD releases. Systems running 7.0-RELEASE, 7.1-BETA, 7.1-BETA2, 7.1-RC1, or 7.1-RC2 can upgrade as follows:

# freebsd-update upgrade -r 7.1-RELEASE

During this process, FreeBSD Update may ask the user to help by merging some configuration files or by confirming that the automatically performed merging was done correctly.

# freebsd-update install

The system must be rebooted with the newly installed kernel before continuing.

# shutdown -r now

After rebooting, freebsd-update needs to be run again to install the new userland components, and the system needs to be rebooted again:

# freebsd-update install

# shutdown -r now

Users of Intel network interfaces which are changing their name from "em" to "igb" should make necessary changes to configuration files BEFORE running freebsd-update, since otherwise the network interface will not be configured appropriately after rebooting for the first time.

Users of earlier FreeBSD releases (FreeBSD 6.x) can also use freebsd-update to upgrade to FreeBSD 7.1, but will be prompted to rebuild all third-party applications (e.g., anything installed from the ports tree) after the second invocation of "freebsd-update install", in order to handle differences in the system libraries between FreeBSD 6.x and FreeBSD 7.x.

For more information, see:

http://www.daemonology.net/blog/2007-11-11-freebsd-major-version-upgrade.html

LooseChanj
Feb 17, 2006

Logicaaaaaaaaal!

timb posted:

Just a reminder to those wanting an easy upgrade path to 7.1:

quote:

During this process, FreeBSD Update may ask the user to help by merging some configuration files or by confirming that the automatically performed merging was done correctly.

Is that any less annoying than it used to be? I remember going through it once many many moons ago and good Christ did it ask about Every. Single. Line. in Every. Single. File.

In other news, I took the parts from my old computer, the one I couldn't get freebsd's Xorg to run in anything but 640x480 and built a new box for OpenBSD and I have the same drat trouble. I guess my radeon 9600 is just a piece of poo poo.

JamesOff
Dec 12, 2002

What a frightening beast!
Sure you're not thinking of mergemaster? freebsd-update is reasonably new and does things slightly differently. Mergemaster does now have a couple of options that try to make it ask about less stuff, have a look in its -h output.

LooseChanj
Feb 17, 2006

Logicaaaaaaaaal!

JamesOff posted:

Sure you're not thinking of mergemaster? freebsd-update is reasonably new and does things slightly differently. Mergemaster does now have a couple of options that try to make it ask about less stuff, have a look in its -h output.

Yeah, mergemaster. That thing is so drat annoying you're better off just wiping everything and redoing what you need.

CrzyDTpBoy
Aug 5, 2003

997...998...999......GAMETIME

Absorbs Quickly posted:

If you're making a jail, look at ezjail, it does some nifty stuff like mount the whole base system read-only (enforced by the host, not the jail), and makes upgrading your jails a significantly less painful experience.

Jails are amazing. ezjail3's archive & restore options are going to make my life a thousand times easier.

Now to get rid of the .sh on the rc script...

LooseChanj posted:

In other news, I took the parts from my old computer, the one I couldn't get freebsd's Xorg to run in anything but 640x480 and built a new box for OpenBSD and I have the same drat trouble. I guess my radeon 9600 is just a piece of poo poo.

You've got a problem somewhere else. I've got those cards all over the place with no problems.

LooseChanj posted:

Yeah, mergemaster. That thing is so drat annoying you're better off just wiping everything and redoing what you need.

That's not at all viable in a corporate environment. Just look for the file location and repeatedly hit "i" for anything in /etc/defaults/ or /etc/rc.d/. Since it's alphabetical, you'll know when you're getting to the end of the directory. I can pound out a 6.3 -> 7.1 mergemaster in about 2 minutes.

LooseChanj
Feb 17, 2006

Logicaaaaaaaaal!

CrzyDTpBoy posted:

You've got a problem somewhere else. I've got those cards all over the place with no problems.

It's my second 9600, and the second one to have the tv tuner die an early, grisly death. I highly suspect Xorg suckiness as well.

HATE TROLL TIM
Dec 14, 2006

timb posted:

freebsd-update

Yea, they only have one mirror, and it's getting raped. Hard. I'd advise waiting at least a week.

The server that hosts that content is on a 10 Mbps link. Yea.

feld
Feb 11, 2008

Out of nowhere its.....

Feldman

timb posted:

Yea, they only have one mirror, and it's getting raped. Hard. I'd advise waiting at least a week.

The server that hosts that content is on a 10 Mbps link. Yea.

That explains it...

Why don't they have it spread out on more mirrors? :(

Only Shallow
Nov 12, 2005

show
Maybe they expect most people to still use csup/cvsup. There are plenty of mirrors for that.

feld
Feb 11, 2008

Out of nowhere its.....

Feldman

jnr posted:

Maybe they expect most people to still use csup/cvsup. There are plenty of mirrors for that.

That would only be necessary if you aren't using the generic kernel.

Anyway, it worked today.

EvilMoFo
Jan 1, 2006

an ever so slightly off topic cross post from yospos ... figured that it should appear here

:nws: https://wi.somethingawful.com/cd/cd4ace410862b31871f01973b9e2500e4695df4b.jpg

SmirkingJack
Nov 27, 2002
I am trying to increase the number of semaphores for postgres and can not figure it out. I am running FreeBSD 6.1. In /boot/loader.conf I have 'kern.ipc.semmns=120' but when I check it after a reboot sysctl is still reporting 60. I am not even sure loader.conf is being read, even though loader.rc has both 'include /boot/loader.4th' and 'start.' I tried setting shmmax in loader.conf too, but that value didn't change either.

Any thoughts? I only barely know what I am doing at this level.

feld
Feb 11, 2008

Out of nowhere its.....

Feldman

SmirkingJack posted:

I am trying to increase the number of semaphores for postgres and can not figure it out. I am running FreeBSD 6.1. In /boot/loader.conf I have 'kern.ipc.semmns=120' but when I check it after a reboot sysctl is still reporting 60. I am not even sure loader.conf is being read, even though loader.rc has both 'include /boot/loader.4th' and 'start.' I tried setting shmmax in loader.conf too, but that value didn't change either.

Any thoughts? I only barely know what I am doing at this level.

I'm not a super BSD nerd but can't this be changed on the fly? I know you can in Linuxland and I thought these settings were modifiable on demand i most *nix OSes these days.

SmirkingJack
Nov 27, 2002

feld posted:

I'm not a super BSD nerd but can't this be changed on the fly? I know you can in Linuxland and I thought these settings were modifiable on demand i most *nix OSes these days.

Some of them can, like shmmax but others lik semmns have to be set at boot.

complex
Sep 16, 2003

This probably doesn't help you, but I put
code:
kern.ipc.semmns=120
in my /boot/loader.conf on my FreeBSD 7.1 box and it works like a charm.

SmirkingJack
Nov 27, 2002

complex posted:

This probably doesn't help you, but I put
code:
kern.ipc.semmns=120
in my /boot/loader.conf on my FreeBSD 7.1 box and it works like a charm.

Yeah, I don't think /boot/loader.conf is being read. For kicks I broke the rules and changed /boot/defaults/loader.conf and that did the trick. I would like to do it the right way, but at least it works now. Thanks for testing that though.

DeciusMagnus
Mar 16, 2004

Seven times five
They were livin' creatures
Watch 'em come to life
Right before your eyes
My motherboard has an onboard GeForce 8200. In the past I have been able to get Xorg to work with full resolution and bit depth. I have recently upgraded Xorg only to find that it no longer will start up. I just get an error about the card not being supported. I don't have any older logs so I can't see what configuration it was using that worked before. Isn't there a way to fallback? I just need 2D capabilities for desktop applications (web, email, etc). Is there someway to get this to work again?

FreeBSD 7.0 amd64
Xorg 7.4

CrzyDTpBoy
Aug 5, 2003

997...998...999......GAMETIME

DeciusMagnus posted:

I just need 2D capabilities for desktop applications (web, email, etc). Is there someway to get this to work again?

Do you know which driver you're running? If you don't know how to find out, post the output of `pkg_info | grep xf86`.

It wouldn't hurt to go to 7.2 (current 7-STABLE) since there are a bunch of drm/dri fixes.

DeciusMagnus
Mar 16, 2004

Seven times five
They were livin' creatures
Watch 'em come to life
Right before your eyes

CrzyDTpBoy posted:

Do you know which driver you're running? If you don't know how to find out, post the output of `pkg_info | grep xf86`.

It wouldn't hurt to go to 7.2 (current 7-STABLE) since there are a bunch of drm/dri fixes.

Right now no driver is being used. Xorg won't use any of the one's built. I would be using xf86-video-nv though. I can't use x11/nvidia-driver because it only works on i386. I will upgrade at one point but not until I've run out of other options.

code:
libXxf86dga-1.0.2   X DGA Extension
libXxf86misc-1.0.1  X XF86-Misc Extension
libXxf86vm-1.0.2    X Vidmode Extension
xf86-input-keyboard-1.3.2_1 X.Org keyboard input driver
xf86-input-mouse-1.4.0_5 X.Org mouse input driver
xf86-video-ati-6.12.2 X.Org ati display driver
xf86-video-dummy-0.3.1 X.Org dummy display driver
xf86-video-fbdev-0.4.0_1 X.Org fbdev display driver
xf86-video-mach64-6.8.0_2 X.Org mach64 display driver
xf86-video-nv-2.1.13 X.Org nv display driver
xf86-video-r128-6.8.0_2 X.Org r128 display driver
xf86-video-radeonhd-1.2.5 X.Org ati RadeonHD display driver
xf86-video-vesa-2.1.0_1 X.Org vesa display driver
xf86bigfontproto-1.1.2 XFree86-Bigfont extension headers
xf86dga-1.0.2_1     Test program for the XFree86-DGA extension
xf86dgaproto-2.0.3  XFree86-DGA extension headers
xf86driproto-2.0.4  XFree86-DRI extension headers
xf86miscproto-0.9.2 XFree86-Misc extension headers
xf86rushproto-1.1.2 XFree86-Rush extension headers
xf86vidmodeproto-2.2.2 XFree86-VidModeExtension extension headers
edit: Just upgraded to 7.1-RELEASE.

DeciusMagnus fucked around with this message at 19:55 on Apr 24, 2009

CrzyDTpBoy
Aug 5, 2003

997...998...999......GAMETIME

DeciusMagnus posted:

Right now no driver is being used.

Are you trying to do the automatic configuration (with no xorg.conf)?

LooseChanj
Feb 17, 2006

Logicaaaaaaaaal!

CrzyDTpBoy posted:

Are you trying to do the automatic configuration (with no xorg.conf)?

I don't know about him, but Xorg just seems to ignore that file over here since 7.3 I think. I had to stick an xrandr command in xinitrc just to get the resolution I wanted.

DeciusMagnus
Mar 16, 2004

Seven times five
They were livin' creatures
Watch 'em come to life
Right before your eyes
Got it fixed now. I eventually got the server to run but I wasn't aware that the default background was now a solid black, instead of the grey/black checkered pattern, so I didn't think it was working. Oh well, at least the card I got now is officially supported. I don't know if it's making any use of acceleration or on-board memory though.

CrzyDTpBoy
Aug 5, 2003

997...998...999......GAMETIME

LooseChanj posted:

I don't know about him, but Xorg just seems to ignore that file over here since 7.3 I think. I had to stick an xrandr command in xinitrc just to get the resolution I wanted.

Well, mine definitely uses the xorg.conf. It's the only way I can set the virtual desktop size for xrandr-based dual screen that's required in xorg 7.x.

DeciusMagnus posted:

I don't know if it's making any use of acceleration or on-board memory though.

Use glxinfo. If you don't have it, it's part of graphics/mesa-demos.

LooseChanj
Feb 17, 2006

Logicaaaaaaaaal!

CrzyDTpBoy posted:

Well, mine definitely uses the xorg.conf. It's the only way I can set the virtual desktop size for xrandr-based dual screen that's required in xorg 7.x.

I have no idea what's going on with it, but no amount of screwing with it will allow me to set a resolution and have it work.

DeciusMagnus
Mar 16, 2004

Seven times five
They were livin' creatures
Watch 'em come to life
Right before your eyes

CrzyDTpBoy posted:

Use glxinfo. If you don't have it, it's part of graphics/mesa-demos.

It looks like I'm using software rendering with Mesa. I am currently using a GeForce 8400 GS. Is there any way to get hardware OpenGL support with it on amd64? From my initial searches on Google, it doesn't appear so.

Combat Pretzel
Jun 23, 2004

No, seriously... what kurds?!
Is there a reason why there's still no 64bit NVidia driver?

CrzyDTpBoy
Aug 5, 2003

997...998...999......GAMETIME

DeciusMagnus posted:

It looks like I'm using software rendering with Mesa. I am currently using a GeForce 8400 GS. Is there any way to get hardware OpenGL support with it on amd64? From my initial searches on Google, it doesn't appear so.

Have you tried the nouveau driver?

Combat Pretzel posted:

Is there a reason why there's still no 64bit NVidia driver?

Well, it's proprietary and I guess Nvidia just doesn't feel the need to do it. I don't know if this completely anecdotal evidience means anything, but I've had nothing but stability problems running Xorg on amd64.

falz
Jan 29, 2005

01100110 01100001 01101100 01111010

Combat Pretzel posted:

Is there a reason why there's still no 64bit NVidia driver?
Nvidia simply doesn't make them, not listed here. On a somewhat related subject, didn't AMD/ATI open up the specs to all of their video hardware 18ish months ago? I was under the impression that this would generally eventually result in good open free drivers for ATI GPU's. Anyone know the progress or status of this?

Edit: Also, read the mailing list thread at the bottom of that nvidia link, it directly addresses AMD64 issues on FreeBSD from Nvidia's perspective (and is 3 years old)

Only Shallow
Nov 12, 2005

show
There is a wiki article as well.

CrzyDTpBoy
Aug 5, 2003

997...998...999......GAMETIME

falz posted:

On a somewhat related subject, didn't AMD/ATI open up the specs to all of their video hardware 18ish months ago? I was under the impression that this would generally eventually result in good open free drivers for ATI GPU's. Anyone know the progress or status of this?

As far as I can tell, the result was ATOM BIOS, which is essentially an API that can be common across different chipsets. It's working reasonably well, but not completed. 3D rendering is only done up to RV5xx and my 2400XT at work just(!) received DRI support in xf86-video-ati 6.12.2. I believe the closest they're coming to a true open driver is providing support for Novell's development of radeonhd.

juggalol
Nov 28, 2004

Rock For Sustainable Capitalism
My question could reasonably go under the "Home Networking Megathread", the "Packrats Unite" NAS thread *or* a generic BSD thread. So I'll start here, and if my question should be elsewhere, I'll move it.

I have a small embedded server running pfSense. It has two network interfaces I use, the WAN interface connects to my cable modem and the LAN interface (192.168.1.1) connects to my switch (and everything else connects to the switch).

Behind this pfSense box, I have another server running FreeNAS (192.168.1.5). The FreeNAS server runs two webservers, one for general user login and one for administration. The standard user login webserver accepts HTTPS only, and runs on port 443. The administration webserver also accepts HTTPS only, and runs on port 8043 (since 443 is in use).

Within the local network, I have no problems accessing either of these webservers. From my desktop (192.168.1.10, same network) I can get to either of these without issue.

nmap output:

code:
# nmap 192.168.1.5
Starting Nmap 4.76 ( [url]http://nmap.org[/url] ) at 2009-04-28 16:54 EDT
Interesting ports on [hostname removed] (192.168.1.5):
Not shown: 990 closed ports
PORT      STATE SERVICE
111/tcp   open  rpcbind
139/tcp   open  netbios-ssn
443/tcp   open  https
445/tcp   open  microsoft-ds
993/tcp   open  imaps
2049/tcp  open  nfs
2222/tcp  open  unknown
3689/tcp  open  rendezvous
5001/tcp  open  commplex-link
49152/tcp open  unknown
First weirdness: port 8043 isn't listed in the scan, though I think it's within the default scan range. If I tell nmap to scan for that port range, it does appear to be open:

code:
#nmap -p 8042-8044 192.168.1.5

Starting Nmap 4.76 ( [url]http://nmap.org[/url] ) at 2009-04-28 16:57 EDT
Interesting ports on [hostname removed] (192.168.1.5):
PORT     STATE  SERVICE
8042/tcp closed unknown
8043/tcp open   unknown
8044/tcp closed unknown
So, ports 443 and 8043 are open on 192.168.1.5. From my desktop (on the same 192.168.1 network), I can access either of these servers and have no issues.

Within pfSense, I've added a few NAT rules for traffic forwarding. Port 443 is being forwarded to 192.168.1.5 (general user login), and so is port 8043.

Screenshot of NAT rules is attached to this post. Looking them over, I can't figure out what the hell the problem is. Forwarding port 443 to 192.168.1.5 works without issues, but port 8043 isn't working.

Any ideas?

Only registered members can see post attachments!

falz
Jan 29, 2005

01100110 01100001 01101100 01111010

juggalol posted:

port 8043
Is FreeNAS's default gateway set? If not it would work locally but not from the internet. Also simply telnetting to the port from the outside is probably the easiest test.

juggalol
Nov 28, 2004

Rock For Sustainable Capitalism

falz posted:

Is FreeNAS's default gateway set? If not it would work locally but not from the internet.

I'm pretty rusty with BSD, but from what I recall, that ought to be set in /etc/rc.conf , and it looks like it's already there:

code:
defaultrouter="192.168.1.1"

quote:

Also simply telnetting to the port from the outside is probably the easiest test.

Nothing at all happens. Using putty, choosing telnet, specifying the right hostname/port just sits at a blank screen until it times out (what happens if I try and use the webserver on 8043 as well).

Kreeblah
May 17, 2004

INSERT QUACK TO CONTINUE


Taco Defender
Just a wild stab in the dark (because I have no experience with FreeNAS and your port forwarding settings look right), but does FreeNAS have any restrictions on what address ranges can access the admin interface?

JHVH-1
Jun 28, 2002

juggalol posted:

I'm pretty rusty with BSD, but from what I recall, that ought to be set in /etc/rc.conf , and it looks like it's already there:

code:
defaultrouter="192.168.1.1"
Nothing at all happens. Using putty, choosing telnet, specifying the right hostname/port just sits at a blank screen until it times out (what happens if I try and use the webserver on 8043 as well).

I think you need to set that to the public gateway, the gateway of whatever you need to connect to the outside world. You should try pinging out from the machine too, to a machine like 4.2.2.2 or google.com. Then you can tell if traffic even leaves the box.

juggalol
Nov 28, 2004

Rock For Sustainable Capitalism

Kreeblah posted:

Just a wild stab in the dark (because I have no experience with FreeNAS and your port forwarding settings look right), but does FreeNAS have any restrictions on what address ranges can access the admin interface?

I don't think this is the case. When I first set up the FreeNAS box, I had only the admin login webserver enabled, and that was running on 443 by default. I could forward that port no problem, but I wanted the default HTTPS port to be used for the user login, so anyone using the FreeNAS server externally just had to type https://myurl , not having to add a port number at the end. That all worked nicely, but when I switched it to 8043, it stopped working (externally, still works internally).

JHVH-1 posted:

I think you need to set that to the public gateway, the gateway of whatever you need to connect to the outside world. You should try pinging out from the machine too, to a machine like 4.2.2.2 or google.com. Then you can tell if traffic even leaves the box.

I can ping google.com from the FreeNAS box, so it's definitely getting out to the net.

As for the public gateway setting, is that literally "publicgateway=192.168.1.1" in rc.conf? I looked through the rc.conf man page here and I didn't see any mention of a publicgateway setting.

falz
Jan 29, 2005

01100110 01100001 01101100 01111010

juggalol posted:

I can ping google.com from the FreeNAS box, so it's definitely getting out to the net.
Your defaultrouter line is fine. You pinging google confirms this. The only other thing I can think of, as someone else mentioned, is firewall rules on the FreeNAS to only permit the local subnet to connect to its admin interface.

juggalol
Nov 28, 2004

Rock For Sustainable Capitalism

falz posted:

Your defaultrouter line is fine. You pinging google confirms this. The only other thing I can think of, as someone else mentioned, is firewall rules on the FreeNAS to only permit the local subnet to connect to its admin interface.

Understood, but like I said, when I had the admin webserver running on port 443, I was able to connect to it from the outside world without issues. Only when I switched it to port 8043 did it start having trouble (only from the outside).

I'm thinking that there's a problem with my firewall, not FreeNAS. I can't explain why, but suddenly the SSH forwarding to the .10 box has stopped working (but SSH on port 2222 to the FreeNAS box still works - and from the FreeNAS box, I can SSH to .10 without any issues also).

Adbot
ADBOT LOVES YOU

complex
Sep 16, 2003

FreeBSD 7.2 RELEASE Release Notes http://www.freebsd.org/releases/7.2R/relnotes-detailed.html

Hope I can sneak it off a mirror this weekend...

  • Locked thread