From owner-freebsd-questions@freebsd.org Sun Aug 20 01:30:40 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 417EEDD1AE5 for ; Sun, 20 Aug 2017 01:30:40 +0000 (UTC) (envelope-from eduardo.lemosdesa@gmail.com) Received: from mail-qt0-x22a.google.com (mail-qt0-x22a.google.com [IPv6:2607:f8b0:400d:c0d::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 0717D6D2B3 for ; Sun, 20 Aug 2017 01:30:39 +0000 (UTC) (envelope-from eduardo.lemosdesa@gmail.com) Received: by mail-qt0-x22a.google.com with SMTP id x36so1218863qtx.2 for ; Sat, 19 Aug 2017 18:30:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=BsWuMwWCtqsG08Pykr1M1uV2HZVRCkYsKVgZcMX6kUk=; b=uwUIv2oMBK6V/J3n6QUQNm/l/elUTnvNTkSWL9mDV0L+PkIoVVkvLvjSMHdIm0uD/r ZdyLkEqmCghq8vlQpHh2eqSfqXLsFJ3NmBD+ifwUUC3WITrih+yJ+qrFgMLRQmLGZstP /Y7sYDqnzxJrOoTLb+MEoIqq+N3qfQpZmFshR9iGnJZ9qHXsx8ZrnRiX3BAuWCLnRI8n QwDFYltoZvr8NKZQB3IPgwd7vc8UfrE4g+UEc87kGWxo4qW+w4JWFyCXHRyvMfVZbHTQ /3zR5SoIjBDliqCC4emlPGP5Sdso4b4V02hmhfksMZLrsNZEoI51wAEORdgZW/W3C4Lj GPyA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=BsWuMwWCtqsG08Pykr1M1uV2HZVRCkYsKVgZcMX6kUk=; b=FeoQQBEHj/OlgXINIGL2fKsSe/0y6DYi4Zxwmeah5KAomv1GHavbe888+hkZMP6ymh 4IQTjEX9OKvm3dY78+TUAZkcv0ua8aqAGyJ8vEOjTVueyP02pGYEf/FD9Ht0dIM0VSXS MuvG0dRwwhCYoRX6lJ2h4KTwwuqHnhw67O5f7pnYOW1AkyyDCDXUlz+6MR8EXnlEPdud ssF/gr8QwEyxMFpYlBvOXeVZusti7R5nPXKYNG28mYEH6lyFSJ9QhYDKZhXXXD18fuU7 ats8QHdj8I2LQK7fu83y7jiz92Yv4/dzDI7/KbYx2WvZOh7P/9nDM1agWoMDe9fqkqlC m4zQ== X-Gm-Message-State: AHYfb5iaQUfUzfy6h9OfDCZnbJIGb1PBI+4rw1LtKaDoMTtx7e5tP+Ei FZ6zlrXL3+XeU3CHUML9JM2dhrw6a3zA X-Received: by 10.200.44.100 with SMTP id e33mr19454626qta.80.1503192638528; Sat, 19 Aug 2017 18:30:38 -0700 (PDT) MIME-Version: 1.0 Received: by 10.140.98.135 with HTTP; Sat, 19 Aug 2017 18:30:38 -0700 (PDT) From: Eduardo Lemos de Sa Date: Sat, 19 Aug 2017 22:30:38 -0300 Message-ID: Subject: Trying to recover data from a ZFS Hard disk which no zpool name To: freebsd-questions@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 01:30:40 -0000 Dear I loose my main hard disk this week. There is a secondary hard dish where I had created a zfs filesystem named zee-root at /dev/ada0p1. I replaced the main hard disk but I couldn't recover data from the working /dev/ada0p1. I read a lot, but I couldn't find a easy way, if there is one, to recreate zee-root and recover data. Here, the output from some commands; gpart status: Name Status Components ada0p1 OK ada0 <---- so, adaop1 is there ada1p1 OK ada1 ada1p2 OK ada1 ada1p3 OK ada1 ada1p4 OK ada1 gpart list: Geom name: ada0 modified: false state: OK fwheads: 16 fwsectors: 63 last: 976773134 first: 34 entries: 128 scheme: GPT Providers: 1. Name: ada0p1 Mediasize: 500106788864 (466G) Sectorsize: 512 Stripesize: 0 Stripeoffset: 1048576 Mode: r0w0e0 rawuuid: f1ba7289-40a0-11e7-b35b-40167ee6fc4f rawtype: 516e7cba-6ecf-11d6-8ff8-00022d09712b label: disk0 length: 500106788864 offset: 1048576 type: freebsd-zfs index: 1 end: 976773119 start: 2048 Consumers: 1. Name: ada0 Mediasize: 500107862016 (466G) Sectorsize: 512 Mode: r0w0e0 Geom name: ada1 modified: false state: OK fwheads: 16 fwsectors: 63 last: 1953523015 first: 40 entries: 152 scheme: GPT Providers: 1. Name: ada1p1 Mediasize: 819200 (800K) Sectorsize: 512 Stripesize: 0 Stripeoffset: 20480 Mode: r0w0e0 rawuuid: 7bc0df74-827e-11e7-a914-40167ee6fc4f rawtype: c12a7328-f81f-11d2-ba4b-00a0c93ec93b label: efiboot0 length: 819200 offset: 20480 type: efi index: 1 end: 1639 start: 40 2. Name: ada1p2 Mediasize: 524288 (512K) Sectorsize: 512 Stripesize: 0 Stripeoffset: 839680 Mode: r0w0e0 rawuuid: 7be10150-827e-11e7-a914-40167ee6fc4f rawtype: 83bd6b9d-7f41-11dc-be0b-001560b84f0f label: gptboot0 length: 524288 offset: 839680 type: freebsd-boot index: 2 end: 2663 start: 1640 3. Name: ada1p3 Mediasize: 17179869184 (16G) Sectorsize: 512 Stripesize: 0 Stripeoffset: 2097152 Mode: r1w1e0 rawuuid: 7c06e4ed-827e-11e7-a914-40167ee6fc4f rawtype: 516e7cb5-6ecf-11d6-8ff8-00022d09712b label: swap0 length: 17179869184 offset: 2097152 type: freebsd-swap index: 3 end: 33558527 start: 4096 4. Name: ada1p4 Mediasize: 983021125632 (916G) Sectorsize: 512 Stripesize: 0 Stripeoffset: 2097152 Mode: r1w1e1 rawuuid: 7c27f290-827e-11e7-a914-40167ee6fc4f rawtype: 516e7cba-6ecf-11d6-8ff8-00022d09712b label: zfs0 length: 983021125632 offset: 17181966336 type: freebsd-zfs index: 4 end: 1953521663 start: 33558528 Consumers: 1. Name: ada1 Mediasize: 1000203804160 (932G) Sectorsize: 512 Mode: r2w2e3 So, my main disk is working ... glabel status: Name Status Components gpt/disk0 N/A ada0p1 gpt/efiboot0 N/A ada1p1 msdosfs/EFI N/A ada1p1 gpt/gptboot0 N/A ada1p2 and, finally, zpool list and zpool status: NAME SIZE ALLOC FREE EXPANDSZ FRAG CAP DEDUP HEALTH ALTROOT zroot 912G 25.4G 887G - 1% 2% 1.00x ONLINE - pool: zroot state: ONLINE scan: none requested config: NAME STATE READ WRITE CKSUM zroot ONLINE 0 0 0 ada1p4 ONLINE 0 0 0 errors: No known data errors My main HD (/dev/ada1 =3D 912 GB) is working as /dev/ada0, but zpool only knows the first one. Please, could you advise me how to solve this problem? Thank you in advance for your attention My best wishes Eduardo --=20 Eduardo Lemos de Sa Professor Titular Dep. Quimica da Universidade Federal do Paran=C3=A1 fone: +55(41)3361-3300 fax: +55(41)3361-3186 From owner-freebsd-questions@freebsd.org Sun Aug 20 02:52:55 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 618B0DD78C1 for ; Sun, 20 Aug 2017 02:52:55 +0000 (UTC) (envelope-from FreeBSD@shaneware.biz) Received: from ipmail07.adl2.internode.on.net (ipmail07.adl2.internode.on.net [150.101.137.131]) by mx1.freebsd.org (Postfix) with ESMTP id E73186FB4E for ; Sun, 20 Aug 2017 02:52:54 +0000 (UTC) (envelope-from FreeBSD@shaneware.biz) Received: from unknown (HELO leader.local) ([118.211.113.221]) by ipmail07.adl2.internode.on.net with ESMTP; 20 Aug 2017 12:22:47 +0930 Subject: Re: Any reason to prefer 11.1 over 10.3 ? To: Manish Jain , "freebsd-questions@freebsd.org" References: <20170818074902.GA91334@gmail.com> From: Shane Ambler Message-ID: <1b3df6d2-a430-89d1-8b13-3353ab834844@ShaneWare.Biz> Date: Sun, 20 Aug 2017 12:22:45 +0930 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <20170818074902.GA91334@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-AU Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 02:52:55 -0000 On 18/08/2017 17:19, Matt Smith wrote: > On Aug 18 07:35, Manish Jain wrote: >> Hi, >> >> I am going to have to install FreeBSD again on a box on which 10.3R >> works well. Is there any reason I should prefer 11.1R ? >> >> Thanks for any tips. >> Manish Jain > > The main reason for 11.1 would be the expected end of life date when > 10.3 will no longer be supported. As you can see from > https://www.freebsd.org/security/security.html#sup that is April 30, > 2018 whereas 11.1 will be 3 months after the release of 11.2. > > Obviously you can upgrade from 10.3 to 10.4, or from 10.3 to 11.2, and > from 11.1 to 11.2 quite easily, but it's easier to start with 11 than it > is to start with 10 and do a major version upgrade. > > Unless there are any strange issues particular to your hardware 10 and > 11 should work identically really. > 11.1 includes bhyve improvements which include vnc support. That means you can get a gui connection to the bhyve instance during boot. I believe many other bhyve improvements are not being added to 10.x -- FreeBSD - the place to B...Software Developing Shane Ambler From owner-freebsd-questions@freebsd.org Sun Aug 20 08:04:11 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A3F6DDE6362 for ; Sun, 20 Aug 2017 08:04:11 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: from mail-wm0-x22e.google.com (mail-wm0-x22e.google.com [IPv6:2a00:1450:400c:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2C0117C489 for ; Sun, 20 Aug 2017 08:04:11 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: by mail-wm0-x22e.google.com with SMTP id t201so27393789wmt.1 for ; Sun, 20 Aug 2017 01:04:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=WJ/+Y+75rPrZ+HddgxfQIvyj+wFWpwMeutwetAGqfi4=; b=i2zfqasKdYTVDVjThx8COY34j/Bv1Faqa7zmqfvNBQyOeIeiqYioioJu/rJeJ25yOy 9sG7jUuG5urJruXAdDG9DMumhB75Jix9hgMX/YXne+74ojJQ1B1jcBThzpZLDKpJeXDp ZjC2l4nPmM2nNpp/2lZSgk0mQllIyQphq2+DTX7pBo2iqRwXWPGkDrNmzzVfpYKoskjw pv3zGhI3Y3XJ6P0LnUwsnoCz4jF2YGS6k5pNKi/5O7MqlDJuLFJkK88Vp90fwM9lAlwV 7ujA8AvYnqFFVqws6xYgO8ZXfqWmhz32t6hrJs8JUuiBWW0Y+w0lvA5yf/RbkmJpjlQv JIhQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=WJ/+Y+75rPrZ+HddgxfQIvyj+wFWpwMeutwetAGqfi4=; b=A3KISoBEx1xAyT8mrTQLsgnatjiI9ygX5y8h7bsF6Dpvkq+iVwgd4ku7or3OGbM4cd OfKQMfn1q8pIxFaqLrH27y24IjTS0AbntUtsLD9GCgV5B8mwgL3rHLPZia5XwXJWMzxW EOR3Pt0l7QKUMqnYXUxK+x2vIj36ZQ+OY0iXTHngwEsuyzc7JqLGtk1fcHuxwnLUDkgu f/X6vJdMC2cMtkb3AdBtSdtzn3ikT82HVp68ULH48lKxxC3fR4lkdCvUCzRsO95Fcn3t aVBjcIMl2QqTFBTyEOKyvI7Cf1kMUdbQGAHPDiV4g7IUs0tnoVt47iyRZCAz1SghM1oN Cd8Q== X-Gm-Message-State: AHYfb5ggXKIDTaLJGJ9GRwqtZm1eLMM39odQfF6x0p4IfQXUuZ6PkFuq HM3q49Ut0dH1NCFT X-Received: by 10.28.193.203 with SMTP id r194mr4117724wmf.85.1503216247950; Sun, 20 Aug 2017 01:04:07 -0700 (PDT) Received: from osk.homenet ([2001:470:196e:17:f2de:f1ff:fed1:783c]) by smtp.googlemail.com with ESMTPSA id 63sm2310483wra.30.2017.08.20.01.04.06 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 20 Aug 2017 01:04:07 -0700 (PDT) Subject: Re: Trying to recover data from a ZFS Hard disk which no zpool name To: freebsd-questions@freebsd.org References: From: Shamim Shahriar Message-ID: Date: Sun, 20 Aug 2017 09:04:05 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 08:04:11 -0000 On 20/08/2017 02:30, Eduardo Lemos de Sa wrote: > Dear > > I loose my main hard disk this week. There is a secondary hard dish where I > had created a zfs filesystem named zee-root at /dev/ada0p1. I replaced the > main hard disk but I couldn't recover data from the working /dev/ada0p1. I > read a lot, but I couldn't find a easy way, if there is one, to recreate > zee-root and recover data. > Here, the output from some commands; > > gpart status: > > Name Status Components > ada0p1 OK ada0 <---- so, adaop1 is there > ada1p1 OK ada1 > ada1p2 OK ada1 > ada1p3 OK ada1 > ada1p4 OK ada1 > > > gpart list: > > Geom name: ada0 > modified: false > state: OK > fwheads: 16 > fwsectors: 63 > last: 976773134 > first: 34 > entries: 128 > scheme: GPT > Providers: > 1. Name: ada0p1 > Mediasize: 500106788864 (466G) > Sectorsize: 512 > Stripesize: 0 > Stripeoffset: 1048576 > Mode: r0w0e0 > rawuuid: f1ba7289-40a0-11e7-b35b-40167ee6fc4f > rawtype: 516e7cba-6ecf-11d6-8ff8-00022d09712b > label: disk0 > length: 500106788864 > offset: 1048576 > type: freebsd-zfs > index: 1 > end: 976773119 > start: 2048 > Consumers: > 1. Name: ada0 > Mediasize: 500107862016 (466G) > Sectorsize: 512 > Mode: r0w0e0 > > Geom name: ada1 > modified: false > state: OK > fwheads: 16 > fwsectors: 63 > last: 1953523015 > first: 40 > entries: 152 > scheme: GPT > Providers: > 1. Name: ada1p1 > Mediasize: 819200 (800K) > Sectorsize: 512 > Stripesize: 0 > Stripeoffset: 20480 > Mode: r0w0e0 > rawuuid: 7bc0df74-827e-11e7-a914-40167ee6fc4f > rawtype: c12a7328-f81f-11d2-ba4b-00a0c93ec93b > label: efiboot0 > length: 819200 > offset: 20480 > type: efi > index: 1 > end: 1639 > start: 40 > 2. Name: ada1p2 > Mediasize: 524288 (512K) > Sectorsize: 512 > Stripesize: 0 > Stripeoffset: 839680 > Mode: r0w0e0 > rawuuid: 7be10150-827e-11e7-a914-40167ee6fc4f > rawtype: 83bd6b9d-7f41-11dc-be0b-001560b84f0f > label: gptboot0 > length: 524288 > offset: 839680 > type: freebsd-boot > index: 2 > end: 2663 > start: 1640 > 3. Name: ada1p3 > Mediasize: 17179869184 (16G) > Sectorsize: 512 > Stripesize: 0 > Stripeoffset: 2097152 > Mode: r1w1e0 > rawuuid: 7c06e4ed-827e-11e7-a914-40167ee6fc4f > rawtype: 516e7cb5-6ecf-11d6-8ff8-00022d09712b > label: swap0 > length: 17179869184 > offset: 2097152 > type: freebsd-swap > index: 3 > end: 33558527 > start: 4096 > 4. Name: ada1p4 > Mediasize: 983021125632 (916G) > Sectorsize: 512 > Stripesize: 0 > Stripeoffset: 2097152 > Mode: r1w1e1 > rawuuid: 7c27f290-827e-11e7-a914-40167ee6fc4f > rawtype: 516e7cba-6ecf-11d6-8ff8-00022d09712b > label: zfs0 > length: 983021125632 > offset: 17181966336 > type: freebsd-zfs > index: 4 > end: 1953521663 > start: 33558528 > Consumers: > 1. Name: ada1 > Mediasize: 1000203804160 (932G) > Sectorsize: 512 > Mode: r2w2e3 > > So, my main disk is working ... > > > glabel status: > > Name Status Components > gpt/disk0 N/A ada0p1 > gpt/efiboot0 N/A ada1p1 > msdosfs/EFI N/A ada1p1 > gpt/gptboot0 N/A ada1p2 > > > and, finally, zpool list and zpool status: > > NAME SIZE ALLOC FREE EXPANDSZ FRAG CAP DEDUP HEALTH ALTROOT > zroot 912G 25.4G 887G - 1% 2% 1.00x ONLINE - > pool: zroot > state: ONLINE > scan: none requested > config: > > NAME STATE READ WRITE CKSUM > zroot ONLINE 0 0 0 > ada1p4 ONLINE 0 0 0 > > errors: No known data errors > > > My main HD (/dev/ada1 = 912 GB) is working as /dev/ada0, but zpool only > knows the first one. Please, could you advise me how to solve this problem? > > Thank you in advance for your attention > > My best wishes > > Eduardo > > > > > Hi Eduardo I am getting slightly confused here. You said your main HDD was lost, was that not ada0? Because you mention that there was a second hdd where you had zee-root in ada0p1 -- generally the first HDD is ada0, second one is ada1. If you lost ada0, and then replaced that with a different drive/disk, then you have already replaced whatever contained your zee-root. But later you showed you have zroot in ada1 (p4), so maybe I am mistaken. But just to be clear, can you please post the result of zpool import and zfs list so a better picture can be obtaine? Thanks From owner-freebsd-questions@freebsd.org Sun Aug 20 11:30:45 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8FD08DCB261 for ; Sun, 20 Aug 2017 11:30:45 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mail-it0-x234.google.com (mail-it0-x234.google.com [IPv6:2607:f8b0:4001:c0b::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 542E483221 for ; Sun, 20 Aug 2017 11:30:45 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mail-it0-x234.google.com with SMTP id 76so22537732ith.0 for ; Sun, 20 Aug 2017 04:30:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-transfer-encoding; bh=a2WJEH3+eSUEA14wrZ1wUkcAp6izZhUjyMpo1hQtH/0=; b=JIvJWeO9E8e577vRQO9fIOuPiKpP69RHpQGXSx343FZq5cCjxTOwvtR0gyAI49Av7I 1KntkGWPbFEduG25DLpjvtXcSU775KkCau3jvIrDtNK+yXCMfhiMoJQ/UXu0Cbdo30B6 vznC3fWULV2yd7ASLwhfgDPPvk+7ddVTG8lxOrWKnSXRpWWsX0r5vquWSt2eN0070Fhl Z0NF6+RQSswPGRlyKYreQOG2k9RUxM6fRijmTFggwjWIIirG7yRw10a+m/g3ho8jepIP 6nu4mMBjR4knp76tQgibErMQPOLmcA733b5kZGqtWj5FA5LF9kPLQT4d0vqPFuVQI66r mgZQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:content-transfer-encoding; bh=a2WJEH3+eSUEA14wrZ1wUkcAp6izZhUjyMpo1hQtH/0=; b=UwA9G7jhlwcD4pPelyDWVL3aylJQKc/7rQgek7bxcIUd+wf4+0JGUa15QfaSg7J+FF ski7UUGjXu4isWGQm5hTK4ZTUg768o7E6fh0DjrZRmIibj/r7VP5OUn8E4dVrsFSM5VT PLQr3C+cbhs725DF9gq7hKIGWBuLznbJLSmhVvB4Km61G3KM5f4f3bXWLNEvHQUJ9oo8 LcK80E0QE+PyKXr9RTL9BOy0aAHhYOG3Qoz8p2KiBUi6U1QDoCwRF1qiwVjaIdXrveCk Tq7dNNvBnnRAe1waab2TjgrYQFzTvfpSLxroCkjU6nh5HZtOOU0J4VAaTFtnbh0vPtEP OTfQ== X-Gm-Message-State: AHYfb5i69UAqCz51g2YZg6Ztcrwo3AbHrhFeBTrNanhLQ5syCIO1epuo T2TyIHh+62Udw6fq X-Received: by 10.36.210.133 with SMTP id z127mr3248565itf.120.1503228644566; Sun, 20 Aug 2017 04:30:44 -0700 (PDT) Received: from [10.0.10.3] (cpe-74-141-88-147.neo.res.rr.com. [74.141.88.147]) by smtp.googlemail.com with ESMTPSA id g75sm2516558ita.4.2017.08.20.04.30.43 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 20 Aug 2017 04:30:44 -0700 (PDT) Message-ID: <599972E0.8080203@gmail.com> Date: Sun, 20 Aug 2017 07:30:40 -0400 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Polytropon CC: "freebsd-questions@freebsd.org" Subject: Re: How to block facebook access References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> <20170819225659.56c11983.freebsd@edvax.de> In-Reply-To: <20170819225659.56c11983.freebsd@edvax.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 11:30:45 -0000 Polytropon wrote: > On Sat, 19 Aug 2017 16:41:20 -0400, Ernie Luzar wrote: >>> On 8/19/2017 2:20 PM, Ernie Luzar wrote: >>>> Hello list; >>>> >>>> Running 11.1 & ipfilter with LAN behind the gateway server. LAN users >>>> are using their work PC's to access facebook during work. >>>> >>>> What method would recommend to block all facebook access? >>>> >> > Littlefield, Tyler wrote: >> > make your proxy just blacklist facebook.com and m.facebook.com? >> > Blocking it will just let them view it on their phones though, so >> > you're looking at a different issue altogether. >> >> Already blocking 15 facebook login ip address which can be added to or >> changes by FB anytime. > > Yes, that is one of the core problems: You do not have control > over Facebook's network configuration. :-) > > On the IP level, you can maintain a list of IPs to block. And > you could use resolver modification to do this for you, for > example when the IP for a certain Facebook service or page > changes, using the resolver its new IP will be added to the > block list. With this approach, you can block using both > numeric IPs and domain name strings (which of course resolve > to IPs, too). > > Maybe it would be a lot easier if you could just switch to > whitelisting - define the IPs _allowed_ for the users. This > will surely introduce new problems like "I cannot access a > web site which I need for work, please verify and whitelist", > which is something you cannot fully automate. > I am unfamiliar with the "resolver modification" you speak of. Is this a function in ipfilter firewall? Where and how is this done? From owner-freebsd-questions@freebsd.org Sun Aug 20 11:42:02 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8BBFEDCBC04 for ; Sun, 20 Aug 2017 11:42:02 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 029488383E for ; Sun, 20 Aug 2017 11:42:00 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id v7KBfO7k024192; Sun, 20 Aug 2017 21:41:24 +1000 (EST) (envelope-from smithi@nimnet.asn.au) Date: Sun, 20 Aug 2017 21:41:24 +1000 (EST) From: Ian Smith To: Manish Jain cc: Karl Vogel , "freebsd-questions@freebsd.org" Subject: Re: Anything specific to keep in mind restoring from rsync? In-Reply-To: Message-ID: <20170820202655.S19528@sola.nimnet.asn.au> References: <20170820001747.U98697@sola.nimnet.asn.au> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 11:42:02 -0000 On Sat, 19 Aug 2017 15:00:14 +0000, Manish Jain wrote: > > On 08/19/17 20:08, Ian Smith wrote: > > However, despite not having used it myself - and still assuming UFS - > > this seems a model job for growfs(8). The backup first is of course > > sensible, but by just resizing the partition with gpart and then using > > growfs, all that extra work should be obviated, if I'm reading it right. > > Hi Ian/others, > > That precisely was what I needed to do. Using MBR + UFS, I have : > > ada0s1 - Linux 30 GB -> 20 GB > ada0s2 - FreeBSD 30 GB -> 40 GB > > In effect the FreeBSD slice starts 10 GB to the left. Ah, if I'd not ASSumed you were just increasing its size upwards, to the right if you prefer, I wouldn't have mentioned growfs at all. > But I was unsure whether growfs has the capability to expand the root > filesystem in that manner (starting further to its left). So I just > rsynced my data to a backup. On the surface that'd seem difficult to impossible, as how would growfs find the original start of FS, apart from logistical difficulty (but not impossibility) of then shuffling blocks around to avoid clobbering unmoved data, however I skimmed the code and read its fairly detailed commentary, and finding no mention either way about such scenario I tend to conclude it's not mentioned because "who would even think you could do that!" .. but I've been wrong before, once or twice :) > Since the whole thing took just an hour or 2, I would not say there was > any inconvenience I faced anywhere : - ) Fair enough too, especially having to do it for the Linux partition also. One of the only? useful things about msdosfs was that - after a defrag - you could reduce the size of a partition to where data ended, which in the olden days was often suggested to make room for FreeBSD. cheers, Ian From owner-freebsd-questions@freebsd.org Sun Aug 20 11:44:21 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 08006DCBE35 for ; Sun, 20 Aug 2017 11:44:21 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mailrelay10.qsc.de (mailrelay10.qsc.de [212.99.163.152]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.antispameurope.com", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 826B983992 for ; Sun, 20 Aug 2017 11:44:20 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de ([213.148.129.14]) by mailrelay10.qsc.de; Sun, 20 Aug 2017 13:44:12 +0200 Received: from r56.edvax.de (port-92-195-91-117.dynamic.qsc.de [92.195.91.117]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 66D903C77D; Sun, 20 Aug 2017 13:44:09 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id v7KBi9P7002163; Sun, 20 Aug 2017 13:44:09 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Sun, 20 Aug 2017 13:44:09 +0200 From: Polytropon To: Ernie Luzar Cc: "freebsd-questions@freebsd.org" Subject: Re: How to block facebook access Message-Id: <20170820134409.825ed388.freebsd@edvax.de> In-Reply-To: <599972E0.8080203@gmail.com> References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> <20170819225659.56c11983.freebsd@edvax.de> <599972E0.8080203@gmail.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-cloud-security-sender: freebsd@edvax.de X-cloud-security-recipient: freebsd-questions@freebsd.org X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mailrelay10.qsc.de with AEFA5683445 X-cloud-security-connect: mx01.qsc.de[213.148.129.14], TLS=1, IP=213.148.129.14 X-cloud-security: scantime:.1369 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 11:44:21 -0000 On Sun, 20 Aug 2017 07:30:40 -0400, Ernie Luzar wrote: > Polytropon wrote: > > On Sat, 19 Aug 2017 16:41:20 -0400, Ernie Luzar wrote: > >>> On 8/19/2017 2:20 PM, Ernie Luzar wrote: > >>>> Hello list; > >>>> > >>>> Running 11.1 & ipfilter with LAN behind the gateway server. LAN users > >>>> are using their work PC's to access facebook during work. > >>>> > >>>> What method would recommend to block all facebook access? > >>>> > >> > Littlefield, Tyler wrote: > >> > make your proxy just blacklist facebook.com and m.facebook.com? > >> > Blocking it will just let them view it on their phones though, so > >> > you're looking at a different issue altogether. > >> > >> Already blocking 15 facebook login ip address which can be added to or > >> changes by FB anytime. > > > > Yes, that is one of the core problems: You do not have control > > over Facebook's network configuration. :-) > > > > On the IP level, you can maintain a list of IPs to block. And > > you could use resolver modification to do this for you, for > > example when the IP for a certain Facebook service or page > > changes, using the resolver its new IP will be added to the > > block list. With this approach, you can block using both > > numeric IPs and domain name strings (which of course resolve > > to IPs, too). > > > > Maybe it would be a lot easier if you could just switch to > > whitelisting - define the IPs _allowed_ for the users. This > > will surely introduce new problems like "I cannot access a > > web site which I need for work, please verify and whitelist", > > which is something you cannot fully automate. > > > > I am unfamiliar with the "resolver modification" you speak of. > Is this a function in ipfilter firewall? > Where and how is this done? It's a term I probably invented because I don't know the correct name - if it even has a specific name. :-) The idea is that IPs assigned to hosts may change, something you mentioned as a fully valid problem. Example: If you want to block login.example.com with the IP 123.456.789.100, you add that to your list - done. Now example.com changes it to 123.456.789.101, and in case you didn't block a full IP range (123.456.789.*), login.example.com can be reached again. So if you have a list of host names that you want to prohibit access to, put them into a list and let your resolver check them from time to time, for example using tools like dig, drill, or host, with a little postprocessing. If a new IP appears, just add it to the block list. In this example, 123.456.789.101 would be added, and login.example.com cannot be reached anymore. This approach is also helpful if example.com acquires a totally new IP range, for example now login.example.com becomes 123.987.258.654... ;-) Maybe the following resources will provide a good entry point: https://www.lifewire.com/what-is-the-ip-address-of-facebook-818152 https://stackoverflow.com/questions/11164672/list-of-ip-space-used-by-facebook -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sun Aug 20 12:02:39 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 11FF1DCD497 for ; Sun, 20 Aug 2017 12:02:39 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: from mail-wr0-x22e.google.com (mail-wr0-x22e.google.com [IPv6:2a00:1450:400c:c0c::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9CBF0A2D for ; Sun, 20 Aug 2017 12:02:38 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: by mail-wr0-x22e.google.com with SMTP id p14so8052684wrg.1 for ; Sun, 20 Aug 2017 05:02:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=yROmy0aw/lbCmpCn8D3AtbO+yV053dmluzAD9v1N0lE=; b=dV/cDsyh0n2p0DUJWqgtk2Ej9Pr89JWV3AWKBL8woM7WoMk0qvFd22tK4sckq6zaUG u+LOLwFz/lhEODHV5/q/Q5UM2//K0FXzWI6Zc/xpWvwRsoPmxpzqAJK5o+0WIE9Qr5ew g45SM3O60pe95va/8zv6j7Knko57RDYUzTgx+a96hcvUOvrFAUqOeYMlvOi8bPiGvPSe tc8XjWqOC73ENGbRYkZ2H4+KFNRmo7Z7cw+zigvZIIPJd7nIYmhBS74J1a9C7XvSG6fh Ij3h8hXDuAezY/0h4nnzo+ZytSrlJiLdYil+Gugon2kh0oeA9n/2rYe6CegK+e7t2UXM 2CjA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=yROmy0aw/lbCmpCn8D3AtbO+yV053dmluzAD9v1N0lE=; b=KkeEDYTVymR3HXZbh4HfwiWBBgiot46Pok+YZ3wfQT7VCqEMO3xlwEAyZRfMgazzzt NykIidYPh09MDlEa+GvB/cOo/DKOzRdPt4QxsS7QW+Cs2a6CPfoBaa8YIWtuiM3skh5n VfmodnhPMU/VIZm+GTt4MqO/UFRBa6tULnOdHKJTejdnyy/cABM0yagErvuubbcsY5bg lGgvea+MYzfVP1P7mfmv11n9IrQK2aj16KmI5vy6l4DlJn4I2yJtTxh2aB4J7UNKlQGJ E8NLPLC3QDAJHqnaQIvU469Quf/HGdwjbRaiS6lmxnw0dZu3ZE1pSfUWoIZ8k8pVSlxw +VJw== X-Gm-Message-State: AHYfb5he7abvtLmIO4vBcWxMfmO04oPC+pTDbrHozhTZoSwc+cLxbW+z b96ozARscobQ77Pg X-Received: by 10.28.22.143 with SMTP id 137mr4638003wmw.68.1503230556745; Sun, 20 Aug 2017 05:02:36 -0700 (PDT) Received: from osk.homenet ([2001:470:196e:17:f2de:f1ff:fed1:783c]) by smtp.googlemail.com with ESMTPSA id d10sm4857332wmh.4.2017.08.20.05.02.35 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 20 Aug 2017 05:02:35 -0700 (PDT) Subject: Re: How to block facebook access To: freebsd-questions@freebsd.org References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> <20170819225659.56c11983.freebsd@edvax.de> <599972E0.8080203@gmail.com> <20170820134409.825ed388.freebsd@edvax.de> From: Shamim Shahriar Message-ID: <4e86d0a7-fe65-f710-2176-3f80d7cd5b26@gmail.com> Date: Sun, 20 Aug 2017 13:02:35 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: <20170820134409.825ed388.freebsd@edvax.de> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 12:02:39 -0000 On 20/08/2017 12:44, Polytropon wrote: > On Sun, 20 Aug 2017 07:30:40 -0400, Ernie Luzar wrote: >> Polytropon wrote: >>> On Sat, 19 Aug 2017 16:41:20 -0400, Ernie Luzar wrote: >>>>> On 8/19/2017 2:20 PM, Ernie Luzar wrote: >>>>>> Hello list; >>>>>> >>>>>> Running 11.1 & ipfilter with LAN behind the gateway server. LAN users >>>>>> are using their work PC's to access facebook during work. >>>>>> >>>>>> What method would recommend to block all facebook access? >>>>>> >>>> > Littlefield, Tyler wrote: >>>> > make your proxy just blacklist facebook.com and m.facebook.com? >>>> > Blocking it will just let them view it on their phones though, so >>>> > you're looking at a different issue altogether. >>>> >>>> Already blocking 15 facebook login ip address which can be added to or >>>> changes by FB anytime. >>> Yes, that is one of the core problems: You do not have control >>> over Facebook's network configuration. :-) >>> >>> On the IP level, you can maintain a list of IPs to block. And >>> you could use resolver modification to do this for you, for >>> example when the IP for a certain Facebook service or page >>> changes, using the resolver its new IP will be added to the >>> block list. With this approach, you can block using both >>> numeric IPs and domain name strings (which of course resolve >>> to IPs, too). >>> >>> Maybe it would be a lot easier if you could just switch to >>> whitelisting - define the IPs _allowed_ for the users. This >>> will surely introduce new problems like "I cannot access a >>> web site which I need for work, please verify and whitelist", >>> which is something you cannot fully automate. >>> >> I am unfamiliar with the "resolver modification" you speak of. >> Is this a function in ipfilter firewall? >> Where and how is this done? > It's a term I probably invented because I don't know the correct > name - if it even has a specific name. :-) > > The idea is that IPs assigned to hosts may change, something you > mentioned as a fully valid problem. Example: If you want to block > login.example.com with the IP 123.456.789.100, you add that > to your list - done. Now example.com changes it to 123.456.789.101, > and in case you didn't block a full IP range (123.456.789.*), > login.example.com can be reached again. So if you have a list > of host names that you want to prohibit access to, put them into > a list and let your resolver check them from time to time, for > example using tools like dig, drill, or host, with a little > postprocessing. If a new IP appears, just add it to the block > list. In this example, 123.456.789.101 would be added, and > login.example.com cannot be reached anymore. This approach is > also helpful if example.com acquires a totally new IP range, > for example now login.example.com becomes 123.987.258.654... ;-) > > Maybe the following resources will provide a good entry point: > > https://www.lifewire.com/what-is-the-ip-address-of-facebook-818152 > > https://stackoverflow.com/questions/11164672/list-of-ip-space-used-by-facebook > > > > Even then there are ways of mitigating those -- for example, using some kind of ToR browser or most simply using google services. The only "slightly more effective" option I have come across so far is using squidguard or similar product, and forcing users to use squid (even with and specially for SSL connections) -- it involves installing your own CA to ALL the client machines, otherwise they will keep on getting error messages for all SSL sites. With squidguard you can also use regex or part of the URL and even that will be blocked, and you can redirect users to a notice page saying "this is forbidden from your work computer, your activity is being logged" :P Hope this helps. Regards From owner-freebsd-questions@freebsd.org Sun Aug 20 12:18:16 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DDFAFDCE242 for ; Sun, 20 Aug 2017 12:18:16 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 692E81048 for ; Sun, 20 Aug 2017 12:18:16 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (unknown [IPv6:2001:8b0:151:1:1c1d:86a1:a200:b700]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 10FFE2576 for ; Sun, 20 Aug 2017 12:18:07 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/10FFE2576; dkim=none; dkim-atps=neutral Subject: Re: How to block facebook access To: freebsd-questions@freebsd.org References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> <20170819225659.56c11983.freebsd@edvax.de> <599972E0.8080203@gmail.com> <20170820134409.825ed388.freebsd@edvax.de> From: Matthew Seaman Message-ID: Date: Sun, 20 Aug 2017 13:17:55 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <20170820134409.825ed388.freebsd@edvax.de> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="u4lD5PNh3WSpFoIqvf8OutpGqP3X6KWu4" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 12:18:17 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --u4lD5PNh3WSpFoIqvf8OutpGqP3X6KWu4 Content-Type: multipart/mixed; boundary="U5k4O1u26G7niOicQiQIWr3WVHuqI8JcU"; protected-headers="v1" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: Subject: Re: How to block facebook access References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> <20170819225659.56c11983.freebsd@edvax.de> <599972E0.8080203@gmail.com> <20170820134409.825ed388.freebsd@edvax.de> In-Reply-To: <20170820134409.825ed388.freebsd@edvax.de> --U5k4O1u26G7niOicQiQIWr3WVHuqI8JcU Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: quoted-printable On 20/08/2017 12:44, Polytropon wrote: >>> On the IP level, you can maintain a list of IPs to block. And >>> you could use resolver modification to do this for you, for >>> example when the IP for a certain Facebook service or page >>> changes, using the resolver its new IP will be added to the >>> block list. With this approach, you can block using both >>> numeric IPs and domain name strings (which of course resolve >>> to IPs, too). >> I am unfamiliar with the "resolver modification" you speak of. >> Is this a function in ipfilter firewall? >> Where and how is this done? > It's a term I probably invented because I don't know the correct > name - if it even has a specific name. :-) The term you're probably looking for 'RPZ' (Response Policy Zone) -- this is an extension that allows you to override what your recursive resolver will return for certain zones: http://www.zytrax.com/books/dns/ch7/rpz.html Effectively you can load a special zone file full of domains you want to return other than the standard response for. These zones can be AXFR'd between a cluster of resolvers for ease of administration. Implemented in bind -- this isn't an IETF specification, so may not be available in other brands of nameserver, or if it is, may not interoperate very well between different DNS software packages. Cheers, Matthew --U5k4O1u26G7niOicQiQIWr3WVHuqI8JcU-- --u4lD5PNh3WSpFoIqvf8OutpGqP3X6KWu4 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJZmX35XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATYHEP/0Xo/1kVVjRQy/MZmfcLyV7c UMx1ZN1/X5D8fMCDhyqlVTR/w08ZOcaKbNTSsgxkrYRC0AC1WmY5U/biGUe0EtAq g8HWeKFyCthYXC/ng8OdOXjI80d4FBnI+iRbK1bxo5De03PdeLrmnarj8z5+ewWk Y4ndnNoM8bVOiAiDRFvp/AB4phxNIdsyu/nswLe228jnfrlsT+U2w9Gl0JVNa8Dd oEx6Y1y77C/Y2QJo6WZLGE0iKYVRSZL6soTIpCPEEHwhTWF176yaLO2QGaO6aqXs IqagvCB90BPb3keiCePCP8j4lgqxNrjxkFQxmfLykF7+lsRm2MsxHBGUGaxExBHl 928ejcLqu9vPj+G1YkfmHsDdaGBDBZdTFehREyrusDG2S6ke9+pHFBT8pTuqGOBn XIkYrafJSkAhH51myx54n+bzhoaVn0S5F0nxlnt5fCa9CkYJxCaujb87XN714/I2 FPQkvRG7Y/5+D/olYVTY3bF8OaWTK79ezGeU0RLX55JAo/6bgsF8F/2Q6HsM1xfh yCPHaObJUlPiiIC3ayqiufqycXN7Dvx+9g8rOL5hu1uJhdJxYJwUZW5PWuYVyr5O +WdI98vI3DQwgFn/Bf7kzCFB1ZkqmFkzDY1Zd6WDMWYQkn6zR/5c7xlAx0uWwhGX pVMgGlZa7LWkclj0QqgT =gCd9 -----END PGP SIGNATURE----- --u4lD5PNh3WSpFoIqvf8OutpGqP3X6KWu4-- From owner-freebsd-questions@freebsd.org Sun Aug 20 13:57:50 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8117FDD460D for ; Sun, 20 Aug 2017 13:57:50 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4618D659D5 for ; Sun, 20 Aug 2017 13:57:50 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mail-io0-x233.google.com with SMTP id 1so10177239ioy.2 for ; Sun, 20 Aug 2017 06:57:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-transfer-encoding; bh=1SoSMzf1dv0Dw3BHf8DwIwm+8/Y4CBKmvxWaZVzRG5o=; b=OvjfzRlR54hR8+j/pQg3XTx0niZ3nAbjd7b7T5tML4uKz8QpKO44OQS7z3J1GybQbe 0ebFcXf+s7T6N7u/bnZ9iDHRlPMIJNkNTAdXbndq1ulqkBBvZgcsJfJBo8xUc2EDptfV Aw9p5GTL0dpEiKL0TR2XazLdlHhK8B64O5/JgXh+QLlxy27lxkLeAgcDRy1FzqtcDIj5 F9A5ionsRQxZkyYAEUcoECWirWuGl+lrkh7JmoCUIj6SGm4IRSKgvSyUP/2nwx6Zon3O NxGqtoU93ztWbsen6LAtrCN+u/Rc8rJaTyyhxLQi6pYBSholckg2wnYw5t8h2TIpOH5w APtw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:content-transfer-encoding; bh=1SoSMzf1dv0Dw3BHf8DwIwm+8/Y4CBKmvxWaZVzRG5o=; b=Bkhspi/B579uEFfLB+4Tj8zaogaf+i2t/KTRcYwUgIxq/PICRrxcoGlqNvCtf5wjQl u0mbKXRwRiqLpav7K737flrk8W+hXrjiz/i+zr90Agbu41my3q0j+ioYFkjFnuCT70+q HSULNheuCdy/C2yQBrip+/z1cfA7wzvP70FjkPkBLNSq12RhF+5EKy7X6HWwyZGiA2pW Zm++aoJ3FRMepcHdXNTZ0ZFb62dtE1Tyoemx/PfSM1nA2cvUQqk990uLMNvQhly9I5o6 ujbiGaIc2eXF1TkO17ldFbghEAkJTo6S+8V1OLALTJ8yrLZ5TyVZ7/E8kabw0htCwWqm liLw== X-Gm-Message-State: AHYfb5gdWH9tK8OMskBH0eu2NKW0bhoTnFctZSZunVJTtdDMTNncVRYh 605ST+u9UbbAabf0 X-Received: by 10.107.37.207 with SMTP id l198mr12985324iol.146.1503237469482; Sun, 20 Aug 2017 06:57:49 -0700 (PDT) Received: from [10.0.10.3] (cpe-74-141-88-147.neo.res.rr.com. [74.141.88.147]) by smtp.googlemail.com with ESMTPSA id u63sm4602847ioe.85.2017.08.20.06.57.48 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 20 Aug 2017 06:57:49 -0700 (PDT) Message-ID: <5999955C.9030601@gmail.com> Date: Sun, 20 Aug 2017 09:57:48 -0400 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Polytropon CC: "freebsd-questions@freebsd.org" Subject: Re: How to block facebook access References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> <20170819225659.56c11983.freebsd@edvax.de> <599972E0.8080203@gmail.com> <20170820134409.825ed388.freebsd@edvax.de> In-Reply-To: <20170820134409.825ed388.freebsd@edvax.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 13:57:50 -0000 What do you think about this method? Add entries into /etc/hosts file. 127.0.0.1 blacked www.facebook.com 127.0.0.1 blacked n.facebook.com 127.0.0.1 blacked facebook.com 127.0.0.1 blacked login.facebook.com From owner-freebsd-questions@freebsd.org Sun Aug 20 15:37:34 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 18739DDACA0 for ; Sun, 20 Aug 2017 15:37:34 +0000 (UTC) (envelope-from rsmith@xs4all.nl) Received: from lb1-smtp-cloud8.xs4all.net (lb1-smtp-cloud8.xs4all.net [194.109.24.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.xs4all.net", Issuer "RapidSSL SHA256 CA - G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A75CB68B3D for ; Sun, 20 Aug 2017 15:37:32 +0000 (UTC) (envelope-from rsmith@xs4all.nl) Received: from slackbox.erewhon.home ([83.162.243.5]) by smtp-cloud8.xs4all.net with ESMTPA id jSGzdUcamcQyLjSH0dWSnt; Sun, 20 Aug 2017 17:36:23 +0200 Received: from rsmith (uid 1001) (envelope-from rsmith@xs4all.nl) id 1238d by slackbox.erewhon.home (DragonFly Mail Agent v0.11+); Sun, 20 Aug 2017 17:36:21 +0200 Date: Sun, 20 Aug 2017 17:36:21 +0200 From: Roland Smith To: Ernie Luzar Cc: tyler@tysdomain.com, freebsd@edvax.de, "freebsd-questions@freebsd.org" Subject: Re: How to block facebook access Message-ID: <20170820153621.GA9420@slackbox.erewhon.home> Mail-Followup-To: Ernie Luzar , tyler@tysdomain.com, freebsd@edvax.de, "freebsd-questions@freebsd.org" References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="UugvWAfsgieZRqgk" Content-Disposition: inline In-Reply-To: <5998A270.9070907@gmail.com> X-GPG-Fingerprint: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 X-GPG-Key: http://www.xs4all.nl/~rsmith/pubkey.txt X-GPG-Notice: If this message is not signed, don't assume I sent it! User-Agent: Mutt/1.8.3 (2017-05-23) X-CMAE-Envelope: MS4wfDjw7oyvAlf4TJ7Vtis5jGairTRNIn4qeh3Es1fJib6jk/pYTKA9/cdFPO6+g3nEp7x5A9Sr0MZC+SJwzWSFDgUODMGX8BVe3gGLQpJfvmN55oCGMNdo o/5xXigChMWt6kqc2p9oiSq4z/6LXzNX3MqmroJ2LkOQ/V/wPyLeMLhwIInDvix/2hS0ji0/7Vmr5Q== X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 15:37:34 -0000 --UugvWAfsgieZRqgk Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Aug 19, 2017 at 04:41:20PM -0400, Ernie Luzar wrote: >=20 > > On 8/19/2017 2:20 PM, Ernie Luzar wrote: > >> Hello list; > >> > >> Running 11.1 & ipfilter with LAN behind the gateway server. LAN users > >> are using their work PC's to access facebook during work. > >> > >> What method would recommend to block all facebook access? > >> >=20 > > Littlefield, Tyler wrote: > > make your proxy just blacklist facebook.com and m.facebook.com? > > Blocking it will just let them view it on their phones though, so > > you're looking at a different issue altogether. > Already blocking 15 facebook login ip address which can be added to or > changes by FB anytime. Do not run a separate proxy on my server. Seems > like over kill just to block a single domain name. Any other suggestions? On my own network I block facebook.com, tfbnw.net, fbcdn.net, fbcdn.com, instagram.com and whatsapp.com on DNS level by returning NXDOMAIN. I would hazard a guess that *most* facebook users wouldn't be technically savvy enough to use an IP-adres. Roland --=20 R.F.Smith http://rsmith.home.xs4all.nl/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 5753 3324 1661 B0FE 8D93 FCED 40F6 D5DC A38A 33E0 (keyID: A38A33E0) --UugvWAfsgieZRqgk Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEV1MzJBZhsP6Nk/ztQPbV3KOKM+AFAlmZrGwACgkQQPbV3KOK M+DY9Q/8ClLvwppfPx8P2Wi3zZ3km+BrwddP91ZtJ8v9/gzu+4ArLQd9xwIZKO06 SOEKQQxG+Bp4FeSdKWO0T9pNq3cxB9/maG29oIqNmb1PbxksSZKPNjLseIPHiBOU SlZKQ97hV31cxeaHOSxsYNB1InYzF1nm7LnVF2GokZhx9vo9lI38hfNpOOdWh4Yu OCVXcJxkGlpOzgvT9fLNU82M+fp1CBlegot/vUk8fOAVQWyrH46CkIZ9FE1FIT7d qZ+eO6TyMX9fYqiHDGf1A+YuFQmUbEI2nMJeXLgA01FN6DZjB4zpRn9kXOeWYgYc KiKEs5Xw+6pPRl1AzjlMCQBWgK/CYTtroIpyqwGks618cKmFLu1A49atZlpi7slB RxZCHXhA2xuH9XybDh/XrqqOPn1Hvsy5RE9wcvdbaRe4nCpSOWazOtGD0ioIoRdX F7gTJG1L52bCj3OucYupF8+8MLxxQFXyXOMbmsGC39g2P69H4S23t3dUNOWQKYNF KFlbGl/UhtPUOi4AmwEuDLOPqST57u/nWruxMEYySjRIehzosJygmiiHQ7DdO/tn kg1RwL0F+eUVMBs+g2kHCy3FJIqcobyr5q2S/pFPUq+tnmipnnSMOgjzEq1iRTAk VN0Z7TyDIOxPn3WIh/Cnjl0WODp1FiLLJKxf33mFqITmcOsCNB4= =rV/A -----END PGP SIGNATURE----- --UugvWAfsgieZRqgk-- From owner-freebsd-questions@freebsd.org Sun Aug 20 16:42:01 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C65EDDDEC26 for ; Sun, 20 Aug 2017 16:42:01 +0000 (UTC) (envelope-from olivares14031@gmail.com) Received: from mail-ua0-x22d.google.com (mail-ua0-x22d.google.com [IPv6:2607:f8b0:400c:c08::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8108E6B01F for ; Sun, 20 Aug 2017 16:42:01 +0000 (UTC) (envelope-from olivares14031@gmail.com) Received: by mail-ua0-x22d.google.com with SMTP id k12so3206217uag.3 for ; Sun, 20 Aug 2017 09:42:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=8YlWt6Dp3+aaypsdbMBcVbR9SuhH0Zkv0MzLeQrpM9w=; b=hORf9G7/kPXvJ++RgZvTH3lQferFXoZ2XxtWHeZomUaC0/fSRNvSe/li+eKQR04Ot3 llUsy8aECwm3awRwwA9wQ1a1aIzPj7BSdfZAsXBDPs/5FtzkXYWLUT4PWgVaehwT8/P4 OkcdaFs7tVJhbmmhrJ4AYBAB2bngGXA2d9HrqqWoZebuCnUPjjsWr5V3bfa/NmysFzUK sc0OtQJfgfh9kY53BBBsj5QDd+WUOmajrwgF38Yj5mn4ISZEqorY+lONqueHn/1r+J82 gOMruo08cbtj4Bq9fbGIelbpO1rEzZ12UQkO5GsDk5j6uHcqpodS2gwu/ylV6TW3idb9 ksiw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=8YlWt6Dp3+aaypsdbMBcVbR9SuhH0Zkv0MzLeQrpM9w=; b=bQgQvBhVZVpZj+3AQ2SCEFoAAcg1L0N29hwn6hNeqrGAjBoe8qMxAp8dM0EyAXejw1 /MWnySdzhPjQOYOypAcY43SdJzIgyrXkUJG2FTimS98H6CsCBjivXCKH89CgNGbqYRUG 66tpCiY/Z2MgZEqjfqM4cGGNuGlJcrPCDhGqcUGq28LLNChUJhodJh1STdhwGPfSqetv g3U4clEfkwwVxKi9RUirpOIOYLwTVESaLktA5X0cFJKnKCzxEFG0cF5NNMlZtkv7QUVs BSxeNkrsPSlG3SKGOr15dHXHP/W+AIndL21E3Rh1IujxSvINoyakeryGiU/XVcdqjlws qqcA== X-Gm-Message-State: AHYfb5h2DfR73vMMCSt2iHDaMRPwIbZjJQ14c5qwEH9YHbKqvZqlZIVa Qmrrs1FLIgpafeP9SYAMhiEMX/zVlQ== X-Received: by 10.159.57.82 with SMTP id i18mr928208uag.98.1503247320174; Sun, 20 Aug 2017 09:42:00 -0700 (PDT) MIME-Version: 1.0 Received: by 10.159.33.199 with HTTP; Sun, 20 Aug 2017 09:41:59 -0700 (PDT) From: Antonio Olivares Date: Sun, 20 Aug 2017 11:41:59 -0500 Message-ID: Subject: Imposing a pdf/postscript on top of another one To: FreeBSD Questions Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 16:42:01 -0000 Dear FreeBSD users, Using only commands like psmerge, psnup, from psutils and a customized script with awk or sed is it possible to force a picture created using gnuplot as the background and impose a ps/pdf document created by tex/latex on top of it. No other packages/programs like background package in latex, or pdftk, are available. It is an old machine that is offline running 8.3-RELEASE amd64. The command psmerge does not work correctly. The files can be combined using ghostscript, but my goal is to use a graph from gnuplot output to postscript not eps, then process a tex file and output it to postscript with dvips. After this is done have a script that sets the postscript file from gnuplot as the background and puts the one created by dvips on top of that one. The postscript from gnuplot is fixed with fixbb and removes unnessary space, the other file postscript file is in letter format. Ideas, suggestions, advice are appreciated. Best Regards, Antonio From owner-freebsd-questions@freebsd.org Sun Aug 20 16:42:49 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8BB4DDDED4B for ; Sun, 20 Aug 2017 16:42:49 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: from mail-wr0-x233.google.com (mail-wr0-x233.google.com [IPv6:2a00:1450:400c:c0c::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1C56A6B14F for ; Sun, 20 Aug 2017 16:42:49 +0000 (UTC) (envelope-from shamim.shahriar@gmail.com) Received: by mail-wr0-x233.google.com with SMTP id z91so79052194wrc.4 for ; Sun, 20 Aug 2017 09:42:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=W8h6mbqw+gKMB5oVKpx8Yh2tbWAqFotJdw7GyGPbfb8=; b=oe3SOHckZpJH3zVAReSI3oSNlV+dXaA1+unUPGcPqSeU/PrlX5gTvmUw0Yb/WXoRWp enySn53bv0O6qhx2rEslFNanr9oB+L4CpalrNjnmJaAEDzePzVLg4GpkyzXoWWxmQk79 HblBILxDg26pjHFUzbxB4mIkLyqSoEX/LSw12+GG1m/hHjH/S6paJvmbvETe6IAx191S PeRwz4d1NZl5V7K9MXZlOJgC+d5clbDX/P2niQkaSLwkdKCqChXLDIJw8xlDt8lEOdat uM13G4E3hc5PKHCDT8l/jjhmXn2TWbnt6F6WXnzBnBTc9Jteww/BrWyhpRByIkp/nEIF L3Pw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=W8h6mbqw+gKMB5oVKpx8Yh2tbWAqFotJdw7GyGPbfb8=; b=V6Gmmx4ZwNt8Q3Cq15AxdiAGPS/RImbscTVQW0n7A6RzYDBXkynsbyJl+C20xlP4BG pOqzoRRdIhLBJNHGo6v9pa8lha72DbaRNkFloMTW4kzXBkU1iN2zJSfEvihO90zEl0++ 7VnrAx935LTlAi+jWx1Jc+lEdR85quRHtp+JpfBMyyS33GmJqLRE2Weh7zKNlG7rThJC yj6I5kSgX2c/Kws7knGfSwToNdS77nhWt55yRgMAhr/2Us8Lxue5+xxBSz1C1Z2Qx8tA foKGLj7Jn8Lrbq97V1RCLcbUm6DnomsRgQLWEdouWhvAvbHtMin3ExHJ3AtRx5+gxjyb i/tQ== X-Gm-Message-State: AHYfb5je5zR81NsFu2e66b6paTSSUw56jB7IfdoNS8rABdXWQ6EwLrzr eeiftLlJyLZy60+6 X-Received: by 10.223.175.21 with SMTP id z21mr10293762wrc.145.1503247366336; Sun, 20 Aug 2017 09:42:46 -0700 (PDT) Received: from osk.homenet ([2001:470:196e:17:f2de:f1ff:fed1:783c]) by smtp.googlemail.com with ESMTPSA id d17sm15287473wrc.78.2017.08.20.09.42.45 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 20 Aug 2017 09:42:45 -0700 (PDT) Subject: Re: How to block facebook access To: freebsd-questions@freebsd.org References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> <20170819225659.56c11983.freebsd@edvax.de> <599972E0.8080203@gmail.com> <20170820134409.825ed388.freebsd@edvax.de> <5999955C.9030601@gmail.com> From: Shamim Shahriar Message-ID: <57f0295f-8cd5-a10f-1096-7f428777b4af@gmail.com> Date: Sun, 20 Aug 2017 17:42:44 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: <5999955C.9030601@gmail.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 16:42:49 -0000 On 20/08/2017 14:57, Ernie Luzar wrote: > What do you think about this method? > > Add entries into /etc/hosts file. > > 127.0.0.1 blacked www.facebook.com > 127.0.0.1 blacked n.facebook.com > 127.0.0.1 blacked facebook.com > 127.0.0.1 blacked login.facebook.com > > > _______________________________________________ Let us run a test. You put those in your /etc/hosts, then browse to https://translate.googleusercontent.com/translate_c?act=url&depth=1&hl=en&ie=UTF8&prev=_t&rurl=translate.google.com&sl=fr&sp=nmt4&tl=en&u=https://www.facebook.com/&usg=ALkJrhgBj74P54T9TLbTH5lswBUic39_cg Did it work? Regards From owner-freebsd-questions@freebsd.org Sun Aug 20 17:11:34 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 54CF6DE0A95 for ; Sun, 20 Aug 2017 17:11:34 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: from mail-oi0-x22d.google.com (mail-oi0-x22d.google.com [IPv6:2607:f8b0:4003:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1F0756C04F for ; Sun, 20 Aug 2017 17:11:34 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: by mail-oi0-x22d.google.com with SMTP id g131so135499141oic.3 for ; Sun, 20 Aug 2017 10:11:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=UinU9KTDZJuqR7iigcYAYu8SLgs/b2MrNuA/i3RSxmw=; b=d60yNX1qjCU5pGoZJijTqhFnsrgTv/15pnq01FKJFqpx7c0QeHRwR7TyM946cTJOIH kOgTQmrCWQlzivMfLcWI6ptOh/K5Z5ZudcTV9rYkTjZHopERopXX7PgH9ZAgZ5LT3F4C Qy26oU6XTw40KMsiUsmNPHUEJzqRk2So4mscd50MuANn7HH0C0RCHrKKMBsjLT5wk+1S 0jknsXcus8r4wC+VJW0hZOgR1YjkwwNzijk80S2pSh47L/E6mQFjy0FwSYb7/fxgtfY5 J/tz8/+JlXoAUBmJF5vGahMdHdQ+HHI1HTsPocGlKv41Zqnc2S2uxXWc1jt803lX26Bb iz3A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=UinU9KTDZJuqR7iigcYAYu8SLgs/b2MrNuA/i3RSxmw=; b=n38NlOVCzA+YLhkZ5ylXspWOe1gOw5mpnafmGMg1nh1tHI9e267y/7yM91be7Yyr5V 1GYIis6awbYu3P4wCzXJae7mxWRKuxDjgZGx3mpp5eV+9ENxO7MwkUKO6UUBn96NY9lI kYuo73M97ZiDTHbXX6n7doaHVAqN6w+dBvxceWBcMcfnbSQ6GSR3YtMCmHYjbly18k4B P5QJCBb9Dr1CssTzAUflrHGZLOXq80fUbYIkjbxyPXxqL4dlJmoPwNjvjfieblbCt+9G WiwVJfXT/WZDHMwBVHwzOwF/ta3oADu4+3uvTDQlgIqGduSSSktptQpdOo3IZDzPet2T a+Ow== X-Gm-Message-State: AHYfb5hCpKhgUZd3cBH6pEZ6PgH1ePtoWsDMtbZCV+LgcL6KGws338om /xBVwMFrXuuN3b8dSNqsRTNhdtNhWA== X-Received: by 10.202.192.84 with SMTP id q81mr20652917oif.88.1503249093094; Sun, 20 Aug 2017 10:11:33 -0700 (PDT) MIME-Version: 1.0 Received: by 10.182.103.107 with HTTP; Sun, 20 Aug 2017 10:10:52 -0700 (PDT) In-Reply-To: <599972E0.8080203@gmail.com> References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> <20170819225659.56c11983.freebsd@edvax.de> <599972E0.8080203@gmail.com> From: Odhiambo Washington Date: Sun, 20 Aug 2017 20:10:52 +0300 Message-ID: Subject: Re: How to block facebook access To: Ernie Luzar Cc: "freebsd-questions@freebsd.org" Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 17:11:34 -0000 On 20 August 2017 at 14:30, Ernie Luzar wrote: > Polytropon wrote: > >> On Sat, 19 Aug 2017 16:41:20 -0400, Ernie Luzar wrote: >> >>> On 8/19/2017 2:20 PM, Ernie Luzar wrote: >>>> >>>>> Hello list; >>>>> >>>>> Running 11.1 & ipfilter with LAN behind the gateway server. LAN users >>>>> are using their work PC's to access facebook during work. >>>>> >>>>> What method would recommend to block all facebook access? >>>>> >>>>> > Littlefield, Tyler wrote: >>> > make your proxy just blacklist facebook.com and m.facebook.com? >>> > Blocking it will just let them view it on their phones though, so >>> > you're looking at a different issue altogether. >>> >>> Already blocking 15 facebook login ip address which can be added to or >>> changes by FB anytime. >>> >> >> Yes, that is one of the core problems: You do not have control >> over Facebook's network configuration. :-) >> >> On the IP level, you can maintain a list of IPs to block. And >> you could use resolver modification to do this for you, for >> example when the IP for a certain Facebook service or page >> changes, using the resolver its new IP will be added to the >> block list. With this approach, you can block using both >> numeric IPs and domain name strings (which of course resolve >> to IPs, too). >> >> Maybe it would be a lot easier if you could just switch to >> whitelisting - define the IPs _allowed_ for the users. This >> will surely introduce new problems like "I cannot access a >> web site which I need for work, please verify and whitelist", >> which is something you cannot fully automate. >> >> > I am unfamiliar with the "resolver modification" you speak of. > Is this a function in ipfilter firewall? > Where and how is this done? > > I use dnsmasq+Bind+PF for this. dnsmasq is set such that it listens on port 5353. It can be configured to read /etc/hosts first before querying bind. What it doesn't find in /etc/host, it asks BIND. My pf.conf redirects all DNS queries to dnsmasq running on port 5353. However, there are a few people I do not want to block. I assign their machines a range of static IPs (based on their MAC addresses) and I allow these IPs to access DNS directly via BIND: # Bypass DNS restrictions for some users. Allow DNS requests to the local BIND engine rdr pass on $int_if inet proto udp from { 192.168.54.23/32, 192.168.54.24/32, 192.168.54.104/32, 192.168.54.6/32 } to port 53 \ -> 192.168.55.254 port 53 # Redirect all other DNS requests to the dnsmasq instance rdr pass on $int_if inet proto udp from any to port 53 \ -> 192.168.55.254 port 5353 You can find the code for blocking Facebook hosts here -> http://geekussion.com/windows/block-facebook-hosts-file-windows-pc-99/ Just add those entries to /etc/hosts after you have configured dnsmasq. HTH -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft." From owner-freebsd-questions@freebsd.org Sun Aug 20 17:53:00 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7C78FDE2F29 for ; Sun, 20 Aug 2017 17:53:00 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mailrelay15.qsc.de (mailrelay15.qsc.de [212.99.187.254]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.antispameurope.com", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E42D26D4DD for ; Sun, 20 Aug 2017 17:52:59 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de ([213.148.129.14]) by mailrelay15.qsc.de; Sun, 20 Aug 2017 19:52:55 +0200 Received: from r56.edvax.de (port-92-195-91-117.dynamic.qsc.de [92.195.91.117]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 77CF43C77D; Sun, 20 Aug 2017 19:52:53 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id v7KHqqtu002117; Sun, 20 Aug 2017 19:52:53 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Sun, 20 Aug 2017 19:52:52 +0200 From: Polytropon To: Antonio Olivares Cc: FreeBSD Questions Subject: Re: Imposing a pdf/postscript on top of another one Message-Id: <20170820195252.51ddf82b.freebsd@edvax.de> In-Reply-To: References: Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-cloud-security-sender: freebsd@edvax.de X-cloud-security-recipient: freebsd-questions@freebsd.org X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mailrelay15.qsc.de with BC218683508 X-cloud-security-connect: mx01.qsc.de[213.148.129.14], TLS=1, IP=213.148.129.14 X-cloud-security: scantime:.1292 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 17:53:00 -0000 On Sun, 20 Aug 2017 11:41:59 -0500, Antonio Olivares wrote: > Dear FreeBSD users, > > Using only commands like psmerge, psnup, from psutils and a customized > script with awk or sed is it possible to force a picture created using > gnuplot as the background and impose a ps/pdf document created by tex/latex > on top of it. No other packages/programs like background package in latex, > or pdftk, are available. It is an old machine that is offline running > 8.3-RELEASE amd64. > The command psmerge does not work correctly. The files can be combined > using ghostscript, but my goal is to use a graph from gnuplot output to > postscript not eps, then process a tex file and output it to postscript > with dvips. After this is done have a script that sets the postscript file > from gnuplot as the background and puts the one created by dvips on top of > that one. The postscript from gnuplot is fixed with fixbb and removes > unnessary space, the other file postscript file is in letter format. > Ideas, suggestions, advice are appreciated. I think what you're describing is a good task for pdftk. You just need to provide the components to overlay in PDF format, which is not a problem with pdflatex and ps2pdf or convert (from ImageMagick) for the GNUplot output. See "man pdftk" for the "background" keyword. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sun Aug 20 18:48:22 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id ED7B1DE5CEA for ; Sun, 20 Aug 2017 18:48:22 +0000 (UTC) (envelope-from johnl@iecc.com) Received: from miucha.iecc.com (w6.iecc.com [IPv6:2001:470:1f07:1126::4945:4343]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "miucha.iecc.com", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 93C316EC87 for ; Sun, 20 Aug 2017 18:48:22 +0000 (UTC) (envelope-from johnl@iecc.com) Received: (qmail 10167 invoked from network); 20 Aug 2017 18:48:20 -0000 Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 20 Aug 2017 18:48:20 -0000 Date: 20 Aug 2017 18:47:58 -0000 Message-ID: <20170820184758.4848.qmail@ary.lan> From: "John Levine" To: freebsd-questions@freebsd.org Cc: luzar722@gmail.com Subject: Re: How to block facebook access In-Reply-To: <5999955C.9030601@gmail.com> Organization: X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 18:48:23 -0000 In article <5999955C.9030601@gmail.com> you write: >What do you think about this method? > >Add entries into /etc/hosts file. > >127.0.0.1 blacked www.facebook.com >127.0.0.1 blacked n.facebook.com >127.0.0.1 blacked facebook.com >127.0.0.1 blacked login.facebook.com Seemn like a fairly ineffective way to block users across a LAN most of whom are likely running Windows. You need to block the names they look up, not local lookups on the gateway. I do agree that the best way to block Facebook is via the DNS cache on your gateway, assuming that's how your LAN is set up. Bind and Unbound both have ways to add local overrides. RPZ is one possibility but for a short static list of names, there are easier ways. R's, John From owner-freebsd-questions@freebsd.org Sun Aug 20 18:49:29 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A8B57DE5E1D for ; Sun, 20 Aug 2017 18:49:29 +0000 (UTC) (envelope-from johnl@iecc.com) Received: from miucha.iecc.com (w6.iecc.com [IPv6:2001:470:1f07:1126::4945:4343]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "miucha.iecc.com", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7A0E06ED71 for ; Sun, 20 Aug 2017 18:49:29 +0000 (UTC) (envelope-from johnl@iecc.com) Received: (qmail 10222 invoked from network); 20 Aug 2017 18:49:28 -0000 Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 20 Aug 2017 18:49:28 -0000 Date: 20 Aug 2017 18:49:06 -0000 Message-ID: <20170820184906.4869.qmail@ary.lan> From: "John Levine" To: freebsd-questions@freebsd.org Cc: rsmith@xs4all.nl Subject: Re: How to block facebook access In-Reply-To: <20170820153621.GA9420@slackbox.erewhon.home> Organization: X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 18:49:29 -0000 In article <20170820153621.GA9420@slackbox.erewhon.home> you write: >I would hazard a guess that *most* facebook users wouldn't be technically >savvy enough to use an IP-adres. Even if they are, FB will redirect them to a name. They'd either have to use an external DNS cache or a VPN. I suppose one could preemptively block port 53 requests out to 8.8.8.8 and 8.8.4.4. R's, John From owner-freebsd-questions@freebsd.org Sun Aug 20 19:05:17 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7C014DE6C02 for ; Sun, 20 Aug 2017 19:05:17 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: from mail-yw0-x22c.google.com (mail-yw0-x22c.google.com [IPv6:2607:f8b0:4002:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 398A36F53A for ; Sun, 20 Aug 2017 19:05:17 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: by mail-yw0-x22c.google.com with SMTP id s143so81643135ywg.1 for ; Sun, 20 Aug 2017 12:05:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=ctraQ90zI841ylp/mSenQSKe0z1EFCFueFYeyjVQ/EY=; b=ZRLUNzYmpsiTw7FSq6Wt4qntrhGWs6C0RtpXljqC/P/25TkUNoWZumLUJ8tuZiHEYl LbQUkBFXFK8ElHqLIOpwNRhCpDCqo/ktfIKGe+eOPglsUfEmnkZX2URZbYJhyasdZTuG bqipC+oXnFZbZuUZDENLnpRivhBjw6WJ5OH8Xp4WEjUQtsC7v2+AdYl6dmckDYxpNEP3 vcEqI2MEJropKt4/JUnO2P//BW6TM04e6dwJ6SZBC7c3m82nRWsMFEm5h7BJ1VLL073k 2+gqBj/CeoQq6VrZLCPV7FtIzRXxkwdKo2SN6n6fSRlXpRgvaVmNOucLrAGhhgrWvNmq dCdg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=ctraQ90zI841ylp/mSenQSKe0z1EFCFueFYeyjVQ/EY=; b=IWcZ0AKrGPYOnPM9Y0eDq2MvLbefyyn5WcvawrzIdy9mncoIU6HvkPtNEcrjCQNy2S qB2H38ztGGV7oATxUaHwf/XIkxUTN18SOAUBNLFAUWha9dZAM8CaMvDq98sTc7b0c7cX 4x0UmZPjs0aA1eHVcrUTdiWeLfB7qVMesZi9AM9BaqyccxGynVSng9PTViRnWU7xSwIN 6+rnJbsoX+MHIK5zf2rDkv6GbnPxGZa8EpjRihg2r1BOA6gZZtcshrhTv+aYPvjsW0lv 0/JrR4rmrKvOscGFjtsCjOrdfnQeECI/MP6GpF0ZU/jvlhRBKTSRjNIj1FCIASANsH18 NWgA== X-Gm-Message-State: AHYfb5jt2SIZ3GymxDxUdhSd8VZ2b5OpcTprxOmv3TCGa2huKc+4RYEu i6UvHER4O5XzvAJQLIyA5KtawTZEWJuj0mU= X-Received: by 10.129.170.1 with SMTP id i1mr12355761ywh.253.1503255916109; Sun, 20 Aug 2017 12:05:16 -0700 (PDT) MIME-Version: 1.0 Received: by 10.13.231.71 with HTTP; Sun, 20 Aug 2017 12:05:15 -0700 (PDT) In-Reply-To: <20170820184906.4869.qmail@ary.lan> References: <20170820153621.GA9420@slackbox.erewhon.home> <20170820184906.4869.qmail@ary.lan> From: Ultima Date: Sun, 20 Aug 2017 12:05:15 -0700 Message-ID: Subject: Re: How to block facebook access To: John Levine Cc: FreeBSD Mailing List , rsmith@xs4all.nl Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 19:05:17 -0000 Can also redirect requests to port 53 to your dns resolver. This is a simple task on ipv4 but ipv6 is significantly more difficult to do so. Still haven't figured out how to do this properly on ipv6 but an easy solution is just blocking ipv6 dns requests. On Sun, Aug 20, 2017 at 11:49 AM, John Levine wrote: > In article <20170820153621.GA9420@slackbox.erewhon.home> you write: > >I would hazard a guess that *most* facebook users wouldn't be technically > >savvy enough to use an IP-adres. > > Even if they are, FB will redirect them to a name. They'd either have > to use an external DNS cache or a VPN. I suppose one could preemptively > block port 53 requests out to 8.8.8.8 and 8.8.4.4. > > R's, > John > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Sun Aug 20 19:15:41 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 77A2DDE757B for ; Sun, 20 Aug 2017 19:15:41 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from ms-10.1blu.de (ms-10.1blu.de [178.254.4.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 369066FA44 for ; Sun, 20 Aug 2017 19:15:40 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from [82.113.121.134] (helo=localhost.unixarea.de) by ms-10.1blu.de with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.86_2) (envelope-from ) id 1djUIl-0001qg-IV; Sun, 20 Aug 2017 19:46:19 +0200 Received: from localhost.my.domain (localhost [127.0.0.1]) by localhost.unixarea.de (8.15.2/8.14.9) with ESMTPS id v7KHkIHq036000 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Sun, 20 Aug 2017 19:46:18 +0200 (CEST) (envelope-from guru@unixarea.de) Received: (from guru@localhost) by localhost.my.domain (8.15.2/8.14.9/Submit) id v7KHkI4Z035999; Sun, 20 Aug 2017 19:46:18 +0200 (CEST) (envelope-from guru@unixarea.de) X-Authentication-Warning: localhost.my.domain: guru set sender to guru@unixarea.de using -f Date: Sun, 20 Aug 2017 19:46:18 +0200 From: Matthias Apitz To: freebsd-questions@freebsd.org Cc: Ernie Luzar , tyler@tysdomain.com, freebsd@edvax.de Subject: Re: How to block facebook access Message-ID: <20170820174618.GA35875@c720-r314251> Reply-To: Matthias Apitz Mail-Followup-To: Matthias Apitz , freebsd-questions@freebsd.org, Ernie Luzar , tyler@tysdomain.com, freebsd@edvax.de References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> <20170820153621.GA9420@slackbox.erewhon.home> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="bg08WKrSYDhXBjb5" Content-Disposition: inline In-Reply-To: <20170820153621.GA9420@slackbox.erewhon.home> X-Operating-System: FreeBSD 12.0-CURRENT r314251 (amd64) X-message-flag: Mails containing HTML will not be read! Please send only plain text. User-Agent: Mutt/1.8.0 (2017-02-23) X-Con-Id: 51246 X-Con-U: 0-guru X-Originating-IP: 82.113.121.134 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 19:15:41 -0000 --bg08WKrSYDhXBjb5 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable El d=C3=ADa domingo, agosto 20, 2017 a las 05:36:21p. m. +0200, Roland Smit= h escribi=C3=B3: > On my own network I block facebook.com, tfbnw.net, fbcdn.net, fbcdn.com, > instagram.com and whatsapp.com on DNS level by returning NXDOMAIN. Shouldn't the latter not be spelled as What's-Ape.com? (sorry, could not resist) > I would hazard a guess that *most* facebook users wouldn't be technically > savvy enough to use an IP-adres. True. To drive a car, one needs (at least in Europe) a driving license, And a car has much less buttons than a computer. One should need courses and a Internet license to use it. matthias --=20 Matthias Apitz, =E2=9C=89 guru@unixarea.de, =E2=8C=82 http://www.unixarea.d= e/ =E2=98=8E +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub 8. Mai 1945: Wer nicht feiert hat den Krieg verloren. 8 de mayo de 1945: Quien no festeja perdi=C3=B3 la Guerra. May 8, 1945: Who does not celebrate lost the War. --bg08WKrSYDhXBjb5 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEXmn7rBYYViyzy/vBR8z35Hb+nREFAlmZyuMACgkQR8z35Hb+ nRGKphAAoyUS3d0IfR68aapfKHSNe9JdqLEEORdDzjYiuXvccrCSoHf0kdYnSULH NSXk4MfddbbpxJT1XO4XGOQq9dZADZsvku0DqzNqQfkcBd1VQc5c+11kop2pnbCR RUZaGX12+XRFPnW6H3QCuEz/x2at6ULddVrwSGZKJWycJi6qCqVnTYBoOKB2R9ri ngU00rSu0knGFyz2xdkNcg85zAFo+wFEYCOUxbT5jSYni59c+coydTi1NwSX6n4z xHbgdDlSOhTSdf62c7hTyO+XtesfplM+klNLqM2i8DAhnncFRfkFMKXdugZ0ZqFf zNX/63hMbfSU5BWxOuXFemr1F2QrVEFDTA8oixOdmRYC9SRja/x+ngfQzZljXKvd GAyhlC/YRHtwyjPHP387rtEdEePO04ReXtfcrNwvhZlJF8aGqhRnrw3xWsLeByA2 aEKIK0vZ53W0zGl9BTPHQg8gnwYwp8s2P2BxtIQdWLI4KJlOY2TDw/byDeU9r7B8 yd7oSSV41Wb5BTXotayjQQ7L0WIZ4l1FMrXD935Yfc4ozlpweYh4bo4PYTu2moa1 Smu4lmyUGNx/gCBc3qYdsE6pHvNW9zy9VhEubLqu+pYutFxU18rc1noDXJ6Pnyrv eYgByQAAGAx4mVU2arewycOktxqWNS70627KpauDW3e7Quh/pNk= =YBn9 -----END PGP SIGNATURE----- --bg08WKrSYDhXBjb5-- From owner-freebsd-questions@freebsd.org Sun Aug 20 23:53:49 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 92D4ADD6B0E for ; Sun, 20 Aug 2017 23:53:49 +0000 (UTC) (envelope-from olivares14031@gmail.com) Received: from mail-ua0-x22e.google.com (mail-ua0-x22e.google.com [IPv6:2607:f8b0:400c:c08::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4FE9F7C927 for ; Sun, 20 Aug 2017 23:53:49 +0000 (UTC) (envelope-from olivares14031@gmail.com) Received: by mail-ua0-x22e.google.com with SMTP id i3so21306940uad.1 for ; Sun, 20 Aug 2017 16:53:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=T2l5qLpoC47Uq/pRaIGqTzIO1NfsXvP7U4kgMNfCrMg=; b=bfpM59+SNfnofxa7FdWsbV4VvaASpC9ya2lIN0MG6Q3w+ruOMrEcdLzOKMx2gf0fvk cSyg9ORl/w1li/IbHZ/uOs2dQEHkATpsoPY0yA/XmJNsH3sRX4BRrMXrW4CZea8uexz/ QqRokCsn0m1noyufxM28JJSaVXkpqd31EZN/+FlwU6FkBLLlTFlLgUUvCoeEYV+uPLRo 8xRr2Pcdur/0TUGsfzpm8LTT5iWeEmYx0qkDH16DHuZrZdg+5JdM/KJNZReYOU96xuZS YryvsK+bApZ3Wd+HcMNzjONOfzm4/viXrdqJt2w4mbQ9uwGH6gYRw0o81oC2wuN3PCFS EVrw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=T2l5qLpoC47Uq/pRaIGqTzIO1NfsXvP7U4kgMNfCrMg=; b=iHnLoyEcjdwhqEkgjB93wlV1mE2Jiit3QYWVkMmJ26YFtqUxMbAcD5QPJEyIx+3JIb HtITm2DCaw7NFPLInhqDebNN4gxR+mtQuti7LT8Rvutiv9SFs9HsubavrMOK8BouOHEq pfkf4DsXma7UQYwXBgciw4Z5wi4XS/tpw15SgX6m4s6FVxkAfBzkpLGUplq9PGUSIMJ/ 5lfJLmSPtJckvHVbT11lIyXCCGH6bO5YpJPNHiG/sXNfOxahTzQQrWTXGPBD6UEqJdYT RK6TbdadcU7HrnNsvdxIj7zbkmkirvQLGlDv22VAH7+91hevU2TevsbJl+P0nbbVjdNJ IjVw== X-Gm-Message-State: AHYfb5jJldadz3sQUzHyGY8kuXrvgbGfbiDNo4Zym5GY+0QbdQbKKDnU Ug3oNw0Rk/b9+ei9+XG/z66mHsXQEw== X-Received: by 10.176.5.230 with SMTP id e93mr10809729uae.30.1503273228103; Sun, 20 Aug 2017 16:53:48 -0700 (PDT) MIME-Version: 1.0 Received: by 10.159.33.199 with HTTP; Sun, 20 Aug 2017 16:53:47 -0700 (PDT) In-Reply-To: <20170820195252.51ddf82b.freebsd@edvax.de> References: <20170820195252.51ddf82b.freebsd@edvax.de> From: Antonio Olivares Date: Sun, 20 Aug 2017 18:53:47 -0500 Message-ID: Subject: Imposing a pdf/postscript on top of another one To: Polytropon Cc: FreeBSD Questions Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 23:53:49 -0000 On Sunday, August 20, 2017, Polytropon > wrote: > On Sun, 20 Aug 2017 11:41:59 -0500, Antonio Olivares wrote: > > Dear FreeBSD users, > > > > Using only commands like psmerge, psnup, from psutils and a customized > > script with awk or sed is it possible to force a picture created using > > gnuplot as the background and impose a ps/pdf document created by > tex/latex > > on top of it. No other packages/programs like background package in > latex, > > or pdftk, are available. It is an old machine that is offline running > > 8.3-RELEASE amd64. > > The command psmerge does not work correctly. The files can be combined > > using ghostscript, but my goal is to use a graph from gnuplot output to > > postscript not eps, then process a tex file and output it to postscript > > with dvips. After this is done have a script that sets the postscript > file > > from gnuplot as the background and puts the one created by dvips on top > of > > that one. The postscript from gnuplot is fixed with fixbb and removes > > unnessary space, the other file postscript file is in letter format. > > Ideas, suggestions, advice are appreciated. > > I think what you're describing is a good task for pdftk. > You just need to provide the components to overlay in > PDF format, which is not a problem with pdflatex and > ps2pdf or convert (from ImageMagick) for the GNUplot > output. > > See "man pdftk" for the "background" keyword. > > > > -- > Polytropon > Magdeburg, Germany > Happy FreeBSD user since 4.0 > Andra moi ennepe, Mousa, ... > The stackexchange page has pdftk as its first choice https://stackoverflow.com/questions/501723/overlay-one- pdf-or-ps-file-on-top-of-another However, my machine which has the postscript files is offline (no internet connection) and no pdftk is available to do this :( The psmerge utility part of psutils is available but does not work. It is referenced here https://stackoverflow.com/questions/3444931/how-to-merge-two-postscript-files-together Thanks for your input. I may have to copy the files and take them to another machine so I can try to use pdftk or maybe use a command from imagemagick which can do the job? Best Regards, Antonio From owner-freebsd-questions@freebsd.org Mon Aug 21 06:03:20 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CFB40DEABB9 for ; Mon, 21 Aug 2017 06:03:20 +0000 (UTC) (envelope-from hs.fy@163.com) Received: from m13-167.163.com (m13-167.163.com [220.181.13.167]) by mx1.freebsd.org (Postfix) with ESMTP id 4F6EB1BE6 for ; Mon, 21 Aug 2017 06:03:19 +0000 (UTC) (envelope-from hs.fy@163.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com; s=s110527; h=Date:From:Subject:MIME-Version:Message-ID; bh=9XZEs 3nqkNx+q4hLtIKk/jK9WJ0KvclcR12devoJ4wY=; b=KTBpdFnr3NWoH+ZBFpvpa hSjGUW90YJZpTYjfrktzwJAOjPty5khtO2Jipa9hCBZ6IktIiPwZCKQMEu5KyeEV 70hZgdZDWg06U+PesWqrNU+huCph2x4AllDkbiUDn7p+DAC/FXWjPs9Q9+JRTSAw pkT6W12jwSd1M0a7g2J0A4= Received: from hs.fy$163.com ( [175.167.136.184] ) by ajax-webmail-wmsvr167 (Coremail) ; Mon, 21 Aug 2017 13:47:21 +0800 (GMT+08:00) X-Originating-IP: [175.167.136.184] Date: Mon, 21 Aug 2017 13:47:21 +0800 (GMT+08:00) From: =?UTF-8?B?6buE6Zuq?= To: "freebsd-questions@FreeBSD.org" Subject: Cousulting about GNU GPL X-Priority: 3 X-Mailer: Coremail Webmail Server Version SP_ntes V3.5 build 20150911(74783.7961) Copyright (c) 2002-2017 www.mailtech.cn 163com MIME-Version: 1.0 Message-ID: <17ad3e77.2044.15e0354c9d3.Coremail.hs.fy@163.com> X-CM-TRANSID: p8GowAA3adLpc5pZF3QUAA--.62004W X-CM-SenderInfo: tkvow5i6rwjhhfrp/1tbiRAE7ZVSITlWKewABss X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU== Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 06:03:20 -0000 SGksCgogCgpJJ20gRWx2YSBmcm9tIGFuIElUIGNvbnN1bHRpbmcgY29tcGFueSBpbiBDaGluYS4K CldlIGFyZSBnb2luZyB0byBzdW1tYXJpemUgdGhlIGxpc3Qgb2Ygb3BlbiBzb3VyY2UgbGljZW5z ZSB3ZSBhcmUgZ29pbmcgdG8gdXNlLgoKCgoKSSd2ZSBub3RpY2VkIHRoYXQgdGhlcmUgYXJlIGRp ZmZlcmVudCBraW5kcyBvZiBCU0QgbGljZW5zZSwgc3VjaCBhcyAyLWNsYXVzZSBCU0QgbGljZW5z ZSwgMy1jbGF1c2UgQlNEIGxpY2Vuc2UgYW5kIHNvIG9uLgoKU28gSSBoYXZlIGEgY29uY2VybiBh Ym91dCBjb3N0IG9mIHRoZSBCU0QgbGljZW5zZS4gRG8gd2UgbmVlZCB0byBwYXkgZm9yIGl0PyBB bmQgYXJlIHRoZXNlIEJTRCBsaWNlbnNlIGZyZWUgKE5vIGNvc3QpPyAKCgoKCkNvdWxkIHlvdSBw bGVhc2UgZ2l2ZSBtZSBmZWVkYmFjayBhYm91dCB0aGUgcXVlc3Rpb25zIGFzIGFib3ZlPwoKCgoK VGhhbmsgeW91IHZlcnkgbXVjaCEKCgoKCgoKCkJlc3QgcmVnYXJkcywKCkVsdmEgSHVhbmcKCgo= From owner-freebsd-questions@freebsd.org Mon Aug 21 06:32:04 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5C07DDEB822 for ; Mon, 21 Aug 2017 06:32:04 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [IPv6:2001:8b0:151:1:c4ea:bd49:619b:6cb3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id DEE242840 for ; Mon, 21 Aug 2017 06:32:03 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (unknown [IPv6:2001:8b0:151:1:1c1d:86a1:a200:b700]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 2FBE32692 for ; Mon, 21 Aug 2017 06:32:01 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/2FBE32692; dkim=none; dkim-atps=neutral Subject: Re: Cousulting about GNU GPL To: freebsd-questions@freebsd.org References: <17ad3e77.2044.15e0354c9d3.Coremail.hs.fy@163.com> From: Matthew Seaman Message-ID: <75099d30-9cef-5500-84fe-3816a4816042@FreeBSD.org> Date: Mon, 21 Aug 2017 07:31:54 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <17ad3e77.2044.15e0354c9d3.Coremail.hs.fy@163.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="hqSN0pWxEk0kfkNQQ9nnqIvIiAFFxPEtU" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 06:32:04 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --hqSN0pWxEk0kfkNQQ9nnqIvIiAFFxPEtU Content-Type: multipart/mixed; boundary="JOhSuMEgOA46EV5IMe4PfTbfIOT0E0MAb"; protected-headers="v1" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: <75099d30-9cef-5500-84fe-3816a4816042@FreeBSD.org> Subject: Re: Cousulting about GNU GPL References: <17ad3e77.2044.15e0354c9d3.Coremail.hs.fy@163.com> In-Reply-To: <17ad3e77.2044.15e0354c9d3.Coremail.hs.fy@163.com> --JOhSuMEgOA46EV5IMe4PfTbfIOT0E0MAb Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: quoted-printable On 21/08/2017 06:47, =E9=BB=84=E9=9B=AA wrote: > We are going to summarize the list of open source license we are going = to use. >=20 > I've noticed that there are different kinds of BSD license, such as > 2-clause BSD license, 3-clause BSD license and so on. >=20 > So I have a concern about cost of the BSD license. Do we need to pay > for it? And are these BSD license free (No cost)? >=20 > Could you please give me feedback about the questions as above? No, there is no requirement to pay for any of the products of the FreeBSD project. Those are mostly licensed under the 2-clause BSD license, but some parts of the sources are licensed differently, including 3-clause BSD, 4-clause BSD, GPLv2 and CDDL, and the ports collection includes all sorts of software and all sorts of licenses, including some with rather more restrictive terms. If you have any further questions about FreeBSD licensing, please contact the FreeBSD Foundation (info@freebsdfoundation.org) as this is one of their areas of responsibility. Cheers, Matthew --JOhSuMEgOA46EV5IMe4PfTbfIOT0E0MAb-- --hqSN0pWxEk0kfkNQQ9nnqIvIiAFFxPEtU Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJZmn5hXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATya0QAINJ5aOH4J6A5sYDe+1dd+1v cve+SzpDy9GDC2JyWcUfLtKS2JAc8E3MtZ33neA5GEVfqGzkx+gC/xozRGZacccO O+1+fi0f8aCJiaBe0dod3ez90QnWBBumu4UInZt27s2BW6ks9UZz5g47JQVCeD0W 2vPuDbgPvJzShS2mCO4kzOq2itKitAlj9XmQgBEoIpRAnK0ufT7u2P/+P+osVSZX exdFqNhDnycO4fO1vQqmgGipVT+qIH1hz+ELyAuIPs8KnJloY3fdvVUQ68kowChm oA4B9+b1hOwTQNxlN2tKhJs41H3Du4aOYyRw/qiOVeCTwOO85INMXQP3jhA8CGUQ pmlR9ZlSHcTxr8b8ejIq9+skllBj5vUXk8sy04+bCAV4aMzKZ86t7YqxVzx/PrDy yRVEuS2mJkcEdSkgiL9FtPukptj+QtV/bRNR5e+3JlQ3vpNaoFO1lOmSNgdeSbbi +REP7fRPnIuof/Y1u+H+xSvUp8BJmHNqpWbgDI4s/hVpp0XiSjxIFjIG350JlJyD dFiNV52HI8NmACc3pjd7yVoKMmYxZcBlBKzeEHUh6Te+Tvr3V2I7F4GVQFjo8STf YiJZZFKTIx5XNTgjVP6jGQCSRkAqX/zCZajhnTvT/pJkQHcrpl+7adVAZvjmIAdd H4mCViFxgEBS/tNWj0BU =4TXq -----END PGP SIGNATURE----- --hqSN0pWxEk0kfkNQQ9nnqIvIiAFFxPEtU-- From owner-freebsd-questions@freebsd.org Mon Aug 21 09:20:25 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5E81DDC8EAB for ; Mon, 21 Aug 2017 09:20:25 +0000 (UTC) (envelope-from irco46@mail.ru) Received: from fallback.mail.ru (fallback14.m.smailru.net [94.100.179.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 01AC566442 for ; Mon, 21 Aug 2017 09:20:24 +0000 (UTC) (envelope-from irco46@mail.ru) Received: from [10.161.22.25] (port=38744 helo=smtp55.i.mail.ru) by fallback14.m.smailru.net with esmtp (envelope-from ) id 1djisd-0008Fh-Ad for freebsd-questions@freebsd.org; Mon, 21 Aug 2017 12:20:19 +0300 Received: by smtp55.i.mail.ru with esmtpa (envelope-from ) id 1djisT-0003Cg-PN for freebsd-questions@freebsd.org; Mon, 21 Aug 2017 12:20:10 +0300 Date: Mon, 21 Aug 2017 11:19:01 +0200 From: irco To: freebsd-questions@freebsd.org Subject: Re: Imposing a pdf/postscript on top of another one Message-ID: <20170821091900.GA82688@mail.ru> Mail-Followup-To: freebsd-questions@freebsd.org References: <20170820195252.51ddf82b.freebsd@edvax.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Info: Per pacienco kaj fervoro =?utf-8?Q?sukcesa?= =?utf-8?B?cyDEiWl1?= laboro. X-Operating-System: FreeBSD User-Agent: mutt X-7FA49CB5: 0D63561A33F958A5C273D69CE9DA138D3ED13F48D2EBF16C1FC1111E996C4D37725E5C173C3A84C3BFED8EC40EBB00D79547F711E8B92131D246AA24B5346CFAC4224003CC836476C0CAF46E325F83A50BF2EBBBDD9D6B0F2AF38021CC9F462D574AF45C6390F7469DAA53EE0834AAEE X-Mailru-Sender: 1368609B42AAB414A8ED96B6C975987A05B1F728A5EDAE2385BEC98129131C827EA7566AF994CE3FD47A4F02F8643FBA49DA2CB244E35F839DD3F3D3D034A88362D6326658BE8B780072334ED39DD1B505AC0025324757053453F38A29522196 X-Mras: OK X-7FA49CB5: 0D63561A33F958A5AEAC2F5583D2859E05AF8A19AB5C2BB32020EA71CFA3BF37462275124DF8B9C99B0B8D173C204012BD9CCCA9EDD067B1EDA766A37F9254B7 X-Mailru-Sender: A5480F10D64C9005EBA3FDA8F7473FBD3F1CB268CFA8ED67AABE14E948EAEB63A033CBB7CDB34F379FF0D70FA88AD21C8B67290C0B8F2C0DEFD52652F427C9CEFE6F7CB4AD2B83C25C7BABE31C8308F3F1A123E9671213B467EA787935ED9F1B X-Mras: OK X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 09:20:25 -0000 On Sun, Aug 20, 2017 at 06:53:47PM -0500, Antonio Olivares wrote: > Thanks for your input. I may have to copy the files and take them to > another machine so I can try to use pdftk or maybe use a command from > imagemagick which can do the job? Polytropon gave you a hint: On Sunday, August 20, 2017, Polytropon See "man pdftk" for the "background" keyword. You may need to render the background of the background image transparent. This can be done using convert from imagemagick with the transparent option. The GIMP can do this too. From owner-freebsd-questions@freebsd.org Mon Aug 21 09:55:26 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8CB74DCD177 for ; Mon, 21 Aug 2017 09:55:26 +0000 (UTC) (envelope-from andrea.jones@informativerankingresults.com) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 77F5F67972 for ; Mon, 21 Aug 2017 09:55:26 +0000 (UTC) (envelope-from andrea.jones@informativerankingresults.com) Received: by mailman.ysv.freebsd.org (Postfix) id 7422FDCD176; Mon, 21 Aug 2017 09:55:26 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 73A47DCD175 for ; Mon, 21 Aug 2017 09:55:26 +0000 (UTC) (envelope-from andrea.jones@informativerankingresults.com) Received: from ab.uthara.zzux.com (ab.uthara.zzux.com [209.58.140.12]) by mx1.freebsd.org (Postfix) with ESMTP id 5188067970 for ; Mon, 21 Aug 2017 09:55:25 +0000 (UTC) (envelope-from andrea.jones@informativerankingresults.com) Received: from WS99 (unknown [117.96.233.93]) by ab.uthara.zzux.com (Postfix) with ESMTPA id D459D2371F for ; Mon, 21 Aug 2017 09:55:07 +0000 (UTC) From: "Andrea Jones" To: Subject: =?us-ascii?Q?Re:_Pay_only_when_you_get_Results.?= Date: Mon, 21 Aug 2017 15:16:51 +0530 Message-ID: <404201d31a63$8f1af770$ad50e650$@informativerankingresults.com> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdMaXS/izdFcp8ZORxa3n/DVRbBroA== Content-Language: en-us Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 09:55:26 -0000 Hi, Greetings for the day, I hope this email finds you in good health J Do you want to see your website in Top 10 positions in Google or other major search engines? Do you want more targeted visitors on your website? You probably want all of it right now: search engine rankings, Relevant traffic and a lot of customers. ResultFirst helps you make all that possible. So that you can do more of your SEO budget than simply justify it. We work on a pay-for-performance model. Which, means you pay us only when we deliver! Plus we provide Free Website Analysis Report. A brief about us: * Powered by 250+ full-time SEO experts * 10+ years of experience * Featured on IBtimes, Search Engine Journal, SEMrush, InstantShift, ProBlogger & Business2Community * Recommended by TopSEOs.com We offer following Services at Affordable Price: SEO (with plan & activity) SMO (LinkedIn, Facebook etc.) PPC (Pay Per Click) Website Designing Technical Content Writing E-Commerce Solution To turn the table around for your website, simply reply to this email. Looking forward to talk to you soon and get your website back to the top! Warm Regards, Andrea Jones Business Development Manager Phone Number : 1-888-512-1890 ResultFirst Inc. Head Office: San Jose, CA 95120 -------------------------------- In case you are not interested in receiving these emails then you have the option to stop receiving them. To unsubscribe just write "REMOVE" and for report abuse just write "ABUSE" and reply to this email. From owner-freebsd-questions@freebsd.org Mon Aug 21 10:20:17 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D24D6DCF998 for ; Mon, 21 Aug 2017 10:20:17 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mailrelay10.qsc.de (mailrelay10.qsc.de [212.99.163.152]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.antispameurope.com", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 438D06885A for ; Mon, 21 Aug 2017 10:20:16 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de ([213.148.129.14]) by mailrelay10.qsc.de; Mon, 21 Aug 2017 12:20:13 +0200 Received: from r56.edvax.de (port-92-195-91-117.dynamic.qsc.de [92.195.91.117]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 4EBF73CC42; Mon, 21 Aug 2017 12:20:12 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id v7LAKBgP002283; Mon, 21 Aug 2017 12:20:11 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Mon, 21 Aug 2017 12:20:11 +0200 From: Polytropon To: Antonio Olivares Cc: FreeBSD Questions Subject: Re: Imposing a pdf/postscript on top of another one Message-Id: <20170821122011.3bd9e8bd.freebsd@edvax.de> In-Reply-To: References: <20170820195252.51ddf82b.freebsd@edvax.de> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-cloud-security-sender: freebsd@edvax.de X-cloud-security-recipient: freebsd-questions@freebsd.org X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mailrelay10.qsc.de with 9A358683478 X-cloud-security-connect: mx01.qsc.de[213.148.129.14], TLS=1, IP=213.148.129.14 X-cloud-security: scantime:.1300 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 10:20:17 -0000 On Sun, 20 Aug 2017 18:53:47 -0500, Antonio Olivares wrote: > On Sunday, August 20, 2017, Polytropon > wrote: Erm... I'm not Mister Javascript Underscore Percent Percent. You are probably using a webmailer with a slight hickup.. ;-) > The stackexchange page has pdftk as its first choice > > https://stackoverflow.com/questions/501723/overlay-one- > pdf-or-ps-file-on-top-of-another > > However, my machine which has the postscript files is offline (no internet > connection) and no pdftk is available to do this :( Okay, so you have to stick with the installed tools. I can fully relate to this very special kind of situation ("use what you have, not what you don't have"). Of course, that doesn't make things easier. A solution that I would have in mind is to do the whole work in LaTeX, but you said you don't want to do that. You _could_, however, create the gnuplot output with a white / transparent background and either use it in EPS format, or use convert (from ImageMagic) to turn it into a PNG file; then use \includegraphics{} with the package inclusion \usepackage[pdftex]{graphicx} to include the image into the file. With \usepackage[absolute]{textpos}, put it into a "textblock" environment (to position it at the desired location of the page) _before_ you add the actual content; e. g., \begin{textblock}{width}(pos,pos) \includegraphics[width/height=,keepaspectratio]{backgr.png} \end{textblock} - and _now_ your text. With pdflatex, the output will be a PDF file, as desired. > Thanks for your input. I may have to copy the files and take them to > another machine so I can try to use pdftk or maybe use a command from > imagemagick which can do the job? I think ImageMagick's ability to process PS or PDF is quite limited, but you could - attention! stupid idea ahead! - turn the PDF file's pages into images, the background GNUplot out- put too, then overlay them with convert's -composite option, and finally turn the result back into a PDF file; of course now all text information will be lost, as there is only the image of text, which might reduce the usability of the result. But I said it's a stupid idea. :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Mon Aug 21 14:00:19 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D8551DDD55F for ; Mon, 21 Aug 2017 14:00:19 +0000 (UTC) (envelope-from kayasaman@gmail.com) Received: from mail-wr0-x235.google.com (mail-wr0-x235.google.com [IPv6:2a00:1450:400c:c0c::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6B64770FC7 for ; Mon, 21 Aug 2017 14:00:19 +0000 (UTC) (envelope-from kayasaman@gmail.com) Received: by mail-wr0-x235.google.com with SMTP id k46so25219135wre.2 for ; Mon, 21 Aug 2017 07:00:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding:content-language; bh=dsBTvBvm25UA0C7wXZMG2PRpdmOXrn12jhuMVSMdHqY=; b=nmZ1fu6aEKFtUbA8lKcqgbMHfBNLsBUhNZjb16qE7dy0NzfTPysKHrZwnBk8HfNGRs D9lekpO569NCI0B3SFxOOqLS4igXEfNerZkJE8QUFSXdaVYLTQrVISJdlOjjZC57UP31 cxDI9ilHn3duSwHsAUO50IM4y/OISco8OOFnR8HcHZ2jhbNUOuq/owJCcq0QnIqbBxB4 QQ6wzsWYRPXCIHVk2TWn8WpAgvLjxKHHxoNNaky8tU+2kjwAz33UIWYzX3fxc4NGffAg +V4n9INKTNDmJaOqCcIqrKnVZ2+LSxLttLs6VNkHe36XqFiI99rXIlL3fL0Kzyo3M4JR bzuA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=dsBTvBvm25UA0C7wXZMG2PRpdmOXrn12jhuMVSMdHqY=; b=hQnEs9mVHgY9KE7eTI23/UpJnCpuFL5bWhZnlYH0VenlNvIvxaP3xsVwDDao9cX7sl UzxwMQDlseaq7zAHlvOr//ZCYz1kumgxB6MyXfYQ7rClbYID0s0KBudN54QswKn3x+RH qIuq3qBPCpu0D5JzhdIUIQAbNVL+0PZeoxzjYTTZZR/t0Cjo01ewv1Fvz9Q7hpbHt2rS jTz6ZMetDXihptXrRBn6SHlvKLxTgapS7rrlkoeum3cVig9pNDnF1x+o6gNH98lAHFd6 MpxIAPMrxNnHJCfy35m7DBXFgxoc6uVFsOos915IBaS/KrlPJjWScFxszfD79T/Mlgd5 +jKA== X-Gm-Message-State: AHYfb5iFsHX9CQMqM27MlG0t07m/07KCt00zq8c+vs0sRqbe4epEFPxN VMZW8Rjey0V4TLNH+Fc= X-Received: by 10.223.183.35 with SMTP id l35mr630025wre.266.1503324017351; Mon, 21 Aug 2017 07:00:17 -0700 (PDT) Received: from x220.optiplex-networks.com (optiplexnetworks.plus.com. [212.159.80.17]) by smtp.gmail.com with ESMTPSA id e21sm9057117wme.17.2017.08.21.07.00.15 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 21 Aug 2017 07:00:15 -0700 (PDT) To: freebsd-questions From: Kaya Saman Subject: NFS home directory performance tuning for Linux client Message-ID: <30d13a2b-0813-9686-3841-b24051fa3e0e@gmail.com> Date: Mon, 21 Aug 2017 15:00:14 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 14:00:20 -0000 Hi, I'm testing an Arch Linux client with my FreeBSD server which has recently been updated to 11.1. The server runs a zpool spread over 15x disks with SSD L2ARC and also just as another test point I am using a separate SSD (zpool over 1x disk) in the server to compare and contrast with. For non-home NFS mounts I found Version4 to have good performance however, when increasing the MTU size in the network: NIC's, switches, routing etc... to 9000 ; I tend to see a lot of server timeouts, even with rsize and wsize increased to 8192. Hard setting the Linux clients to vers=3 in fstab sees stability, as in no timeouts, and with no apparent decrease in performance either. What is odd however, is that FreeBSD to FreeBSD will just work without any issues at all, so I'm wondering if the NFS implementation on Linux is slightly different causing these issues?? To the main question/issue however, when using as NFS home directory setting vers=3 on the client makes the system unuseable. It takes roughly 5-10 mins after login for anything to appear on screen then again after clicking somewhere another 5-10mins for the response. - setting to vers=4 improves things significantly but still if trying to use an application like Chromium then the system will hang upon browsing for 5-10 mins then come alive again?? I have set the server up as follows in rc.conf: nfs_server_flags="-t -n 128 -h " nfs_server_enable="YES" nfsv4_server_enable="YES" nfsuserd_enable="YES" nfsuserd_flags="-domain domian.com" rpc_statd_enable="YES" rpc_lockd_enable="YES" rpcbind_enable="YES" rpcbind_flags="-h " mountd_enable="YES" mountd_flags="-r -n -l -h " I've even tried to increase the sysctl variable: vfs.nfs.iodmax from 20 to 60 On the client side the fstab entry contains the following options: vers=4,defaults,auto,tcp,retrans=10,timeo=30,rsize=8192,wsize=8192,noatime and gets mounted to /mnt/home. I realize the 'tcp' flag doesn't need to be there as v4 by default uses 'tcp' however, it is there when testing with v3. nfsstat command on server gives: Client Info: Rpc Counts: Getattr Setattr Lookup Readlink Read Write Create Remove 139585 0 399150 0 137485 0 0 0 Rename Link Symlink Mkdir Rmdir Readdir RdirPlus Access 0 0 0 0 0 138482 0 393052 Mknod Fsstat Fsinfo PathConf Commit 0 94496 4 0 0 Rpc Info: TimedOut Invalid X Replies Retries Requests 0 0 0 0 1302226 Cache Info: Attr Hits Misses Lkup Hits Misses BioR Hits Misses BioW Hits Misses 16703860 139581 13000702 399150 667954 139782 0 0 BioRLHits Misses BioD Hits Misses DirE Hits Misses Accs Hits Misses 0 0 116186 116459 94263 0 13744785 393052 Server Info: Getattr Setattr Lookup Readlink Read Write Create Remove 3200367 39011 89025 41 203807584 806982 410 7656 Rename Link Symlink Mkdir Rmdir Readdir RdirPlus Access 6383 101 2 6 1 2880 265953 1643074 Mknod Fsstat Fsinfo PathConf Commit 0 94770 30 15 18370 Server Ret-Failed 0 Server Faults 0 Server Cache Stats: Inprog Idem Non-idem Misses 0 0 0 209101544 Server Write Gathering: WriteOps WriteRPC Opsaved 806982 806982 0 And nfsstat on client: Client rpc stats: calls retrans authrefrsh 327404 1293 327395 Client nfs v3: null getattr setattr lookup access 0 0% 367 49% 0 0% 3 0% 3 0% readlink read write create mkdir 0 0% 0 0% 0 0% 0 0% 0 0% symlink mknod remove rmdir rename 0 0% 0 0% 0 0% 0 0% 0 0% link readdir readdirplus fsstat fsinfo 0 0% 0 0% 1 0% 363 49% 2 0% pathconf commit 1 0% 0 0% Client nfs v4: null read write commit open 0 0% 16452 5% 169214 51% 6150 1% 17026 5% open_conf open_noat open_dgrd close setattr 11 0% 0 0% 4 0% 12719 3% 19691 6% fsinfo renew setclntid confirm lock 12 0% 480 0% 6 0% 6 0% 11578 3% lockt locku access getattr lookup 35 0% 10085 3% 5545 1% 24591 7% 17443 5% lookup_root remove rename link symlink 3 0% 1612 0% 4266 1% 31 0% 15 0% create pathconf statfs readlink readdir 105 0% 9 0% 7093 2% 4 0% 398 0% server_caps delegreturn getacl setacl fs_locations 21 0% 0 0% 0 0% 0 0% 0 0% rel_lkowner secinfo fsid_present exchange_id create_session 2051 0% 0 0% 0 0% 0 0% 0 0% destroy_session sequence get_lease_time reclaim_comp layoutget 0 0% 0 0% 0 0% 0 0% 0 0% getdevinfo layoutcommit layoutreturn secinfo_no test_stateid 0 0% 0 0% 0 0% 0 0% 0 0% free_stateid getdevicelist bind_conn_to_ses destroy_clientid seek 0 0% 0 0% 0 0% 0 0% 0 0% allocate deallocate layoutstats clone 0 0% 0 0% 0 0% 0 0% The server isn't loaded at all, load is around 0.40 and the network is also pretty free as the system has 4x NIC's in lagg with current throughput under 10Mb/s. Would anyone be able to offer any advice? Many thanks. From owner-freebsd-questions@freebsd.org Mon Aug 21 18:17:26 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8D5BCDEC68B for ; Mon, 21 Aug 2017 18:17:26 +0000 (UTC) (envelope-from cynthia@adwordbillboard.com) Received: from a2nlsmtp01-04.prod.iad2.secureserver.net (a2nlsmtp01-04.prod.iad2.secureserver.net [198.71.225.38]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4B0DC7EE71 for ; Mon, 21 Aug 2017 18:17:25 +0000 (UTC) (envelope-from cynthia@adwordbillboard.com) Received: from a2plcpnl0940.prod.iad2.secureserver.net ([107.180.121.56]) by : HOSTING RELAY : with SMTP id jrFKdThiaggvVjrFKdiGg9; Mon, 21 Aug 2017 11:16:18 -0700 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=adwordbillboard.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:Message-ID:Subject:Reply-To:From:To:Date:Sender:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=BUisaMsi/BFZV98tgKuddmaGnzx/PNItwVeqnWmT/bE=; b=bLZrPdCEBWDoqcM7WP/fKfPuiN eRoDdT/vkkW5D4xbMGhexU3fGcTBH9n7tCEwruGhQCjqZ8Kc0327U5TG53xUKAVAsLaFitot6Q9ax TLHVGU3PaLY4jq1bk7YKDroc5L4z6/++JUPUayiv+B72U25pzxWKLo2VmERiAhov0ubBmqPzFNBQ5 6oC8jktqQnMz6S7yw8wvd1rWspEBYgFiXHnF4/1IEyiCErX44/N+xh/MBf6bT9ZEqaw1tVPmqnYCB AOoMqQaiABKI1s6IWYwAWdYg8Q7AI/2FWG/mk8BZDArGOApsF0pH+FEoBjrCR3Psy5tzEzwG26TpL 753IOWQQ==; Received: from [127.0.0.1] (port=40216 helo=adwordbillboard.com) by a2plcpnl0940.prod.iad2.secureserver.net with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.88) (envelope-from ) id 1djrFK-004N6e-8d for freebsd-questions@freebsd.org; Mon, 21 Aug 2017 11:16:18 -0700 Date: Mon, 21 Aug 2017 18:16:13 +0000 To: "freebsd-questions@freebsd.org" From: "cynthia@adwordbillboard.com" Reply-To: "cynthia@adwordbillboard.com" Subject: Freebsd-questions, Guaranteed choice of website optimization Message-ID: <97cb6bf1dce7fbfcf4032d3f8b40c371@adwordbillboard.com> X-Mailer: PHPMailer 5.2.22 (https://github.com/PHPMailer/PHPMailer) MIME-Version: 1.0 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - a2plcpnl0940.prod.iad2.secureserver.net X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - adwordbillboard.com X-Get-Message-Sender-Via: a2plcpnl0940.prod.iad2.secureserver.net: authenticated_id: cynthia@adwordbillboard.com X-Authenticated-Sender: a2plcpnl0940.prod.iad2.secureserver.net: cynthia@adwordbillboard.com X-Source: X-Source-Args: X-Source-Dir: X-CMAE-Envelope: MS4wfNWdg6zXEkKwOV25P4L7t4MjFX12psbyr1QfoeIZQECmb7fHamU/cvkbEDKQgP2epkWm+bXX5cuCrGAv07h/eST/EIQw/vJk0JghUL4LT86OSwuLtCAu E4C8gVldnXd4rxN9HstTgZbsqPCkECZXv99amvS8xHoc0ldWQFjnYJwHG2YebhGD9EiwFsJ1aA7KhRrhx9uvqUGaGCugHZ+e7tVLULo8X03wOzuNNu+7kjYx Content-Type: text/plain; charset=us-ascii X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 18:17:26 -0000 Hi Freebsd-questions! The reason of failure in web page optimization is the millions of competitors fighting and struggling for the first places on top of search engine results. And such a situation has its consequences. Chances are small for those who always dismisses the necessity in attributing the true knowledge of website optimization process. Web page optimization requires specific technical expertise. For this reason, we can show you the new technology for your web page optimization. This technology can place your web page on the top portion of search engine results during the whole year. First, just go to our website and you can see for yourself how it works. Second, click on the website's DEMO page, Third, type your website freebsd org and keywords in form and feel free to enjoy the results. Yours Really, Cynthia Juarez From owner-freebsd-questions@freebsd.org Mon Aug 21 18:47:09 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 04297DEE103 for ; Mon, 21 Aug 2017 18:47:09 +0000 (UTC) (envelope-from kayasaman@gmail.com) Received: from mail-wr0-x22f.google.com (mail-wr0-x22f.google.com [IPv6:2a00:1450:400c:c0c::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9328F7FCAB for ; Mon, 21 Aug 2017 18:47:08 +0000 (UTC) (envelope-from kayasaman@gmail.com) Received: by mail-wr0-x22f.google.com with SMTP id z91so104869014wrc.4 for ; Mon, 21 Aug 2017 11:47:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:references:to:from:message-id:date:user-agent:mime-version :in-reply-to:content-language; bh=2KgJB+xW6P9uaHGPNhQryVuHjPKKarA7yuHPOacpGo0=; b=DekELU0kI4i/qxjPNBb5yPxRST4tE2pHIXOOQnd5BZHAk36g1REQ83oqtiGQkYJJmF o8bJXERezTwk2fWdKU8OXaN6WHMmUvFOhHrG7ux/Mwq1kK8io8EuZibCjDDD/VEDWqOf 5ep9bFMg2wOGWpwnfec5S8ogN9/+xRWCZTVlDv8ocooVICnRmkSWa/3sRvcMFwjka+cR RImTE1aD4U9dUfwPF7uZEkmwkJLTldXk0abxW+ozy634TeoPQti4EXfn0H2JTicgcrsu lUqWh6xxjQz8vYZdAzR8WSRruqVHCiv+spt7H3xKILkBwKz8jntxDf7hiwQm8dmMJaQH FeDw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:references:to:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=2KgJB+xW6P9uaHGPNhQryVuHjPKKarA7yuHPOacpGo0=; b=RLb8xv6XC/CgId8TPnpQCv13sZvRHgR6v9M34843k6WbpxyUqkoDA5b7eY6KZFmW2A D7w5LddVnJzJwmpgqEyh9wP1hbykCDCLiIX6WusxOUpOQhve51W/vbHpzR9SDPKR4KVF wQxJFOYzIHJeiLBhttxZrbgM5D66rKyffQ7uPEqxwDSKR50mWGGErN3iee0XKaNdguyz Hri/6mmzroNcRbC3QMLwUCUhRJPP7XfEysAiu5uxjoFiscqzEFhcK+n6DVNM4VvQlc8j R7nd5L4Xxz38vKzOdaUm+p2HsFKARHifE1+hyAFthrlC1qFlPrOQyn0Oax6qALDFoExZ 3ERw== X-Gm-Message-State: AHYfb5jX+7zJkTi4TDjg11gI9ne0uiYnSv5zIG5hQpdwjX8RNIzhqGBB YWEkF8TitZGALrRaCY0= X-Received: by 10.223.133.140 with SMTP id 12mr12269994wrt.102.1503341226112; Mon, 21 Aug 2017 11:47:06 -0700 (PDT) Received: from Sting-Ray.optiplex-networks.com (optiplexnetworks.plus.com. [212.159.80.17]) by smtp.gmail.com with ESMTPSA id y127sm9815566wmd.3.2017.08.21.11.47.05 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 21 Aug 2017 11:47:05 -0700 (PDT) Subject: NFS home directory performance tuning for Linux client References: <30d13a2b-0813-9686-3841-b24051fa3e0e@gmail.com> To: freebsd-questions@freebsd.org From: Kaya Saman X-Forwarded-Message-Id: <30d13a2b-0813-9686-3841-b24051fa3e0e@gmail.com> Message-ID: Date: Mon, 21 Aug 2017 19:47:04 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <30d13a2b-0813-9686-3841-b24051fa3e0e@gmail.com> Content-Language: en-US Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 18:47:09 -0000 So, currently I've tried doing something a little different which worked out well. I moved away from NFS and setup a ZVOL on the spare SSD mentioned below then set the server up as an iscsi target. With the Linux machine running as the iscsi initiator then creating a partition and filesystem <- went with JFS which is my preffered on Linux ; it's running quite smoothly at present. The bottleneck was definitely caused by NFS and I think it was the write behaviour for small files, with the limited options available though I have no idea what could be causing the issues or how to get round them?? -------- Forwarded Message -------- Subject: NFS home directory performance tuning for Linux client Date: Mon, 21 Aug 2017 15:00:14 +0100 From: Kaya Saman To: freebsd-questions Hi, I'm testing an Arch Linux client with my FreeBSD server which has recently been updated to 11.1. The server runs a zpool spread over 15x disks with SSD L2ARC and also just as another test point I am using a separate SSD (zpool over 1x disk) in the server to compare and contrast with. For non-home NFS mounts I found Version4 to have good performance however, when increasing the MTU size in the network: NIC's, switches, routing etc... to 9000 ; I tend to see a lot of server timeouts, even with rsize and wsize increased to 8192. Hard setting the Linux clients to vers=3 in fstab sees stability, as in no timeouts, and with no apparent decrease in performance either. What is odd however, is that FreeBSD to FreeBSD will just work without any issues at all, so I'm wondering if the NFS implementation on Linux is slightly different causing these issues?? To the main question/issue however, when using as NFS home directory setting vers=3 on the client makes the system unuseable. It takes roughly 5-10 mins after login for anything to appear on screen then again after clicking somewhere another 5-10mins for the response. - setting to vers=4 improves things significantly but still if trying to use an application like Chromium then the system will hang upon browsing for 5-10 mins then come alive again?? I have set the server up as follows in rc.conf: nfs_server_flags="-t -n 128 -h " nfs_server_enable="YES" nfsv4_server_enable="YES" nfsuserd_enable="YES" nfsuserd_flags="-domain domian.com" rpc_statd_enable="YES" rpc_lockd_enable="YES" rpcbind_enable="YES" rpcbind_flags="-h " mountd_enable="YES" mountd_flags="-r -n -l -h " I've even tried to increase the sysctl variable: vfs.nfs.iodmax from 20 to 60 On the client side the fstab entry contains the following options: vers=4,defaults,auto,tcp,retrans=10,timeo=30,rsize=8192,wsize=8192,noatime and gets mounted to /mnt/home. I realize the 'tcp' flag doesn't need to be there as v4 by default uses 'tcp' however, it is there when testing with v3. nfsstat command on server gives: Client Info: Rpc Counts: Getattr Setattr Lookup Readlink Read Write Create Remove 139585 0 399150 0 137485 0 0 0 Rename Link Symlink Mkdir Rmdir Readdir RdirPlus Access 0 0 0 0 0 138482 0 393052 Mknod Fsstat Fsinfo PathConf Commit 0 94496 4 0 0 Rpc Info: TimedOut Invalid X Replies Retries Requests 0 0 0 0 1302226 Cache Info: Attr Hits Misses Lkup Hits Misses BioR Hits Misses BioW Hits Misses 16703860 139581 13000702 399150 667954 139782 0 0 BioRLHits Misses BioD Hits Misses DirE Hits Misses Accs Hits Misses 0 0 116186 116459 94263 0 13744785 393052 Server Info: Getattr Setattr Lookup Readlink Read Write Create Remove 3200367 39011 89025 41 203807584 806982 410 7656 Rename Link Symlink Mkdir Rmdir Readdir RdirPlus Access 6383 101 2 6 1 2880 265953 1643074 Mknod Fsstat Fsinfo PathConf Commit 0 94770 30 15 18370 Server Ret-Failed 0 Server Faults 0 Server Cache Stats: Inprog Idem Non-idem Misses 0 0 0 209101544 Server Write Gathering: WriteOps WriteRPC Opsaved 806982 806982 0 And nfsstat on client: Client rpc stats: calls retrans authrefrsh 327404 1293 327395 Client nfs v3: null getattr setattr lookup access 0 0% 367 49% 0 0% 3 0% 3 0% readlink read write create mkdir 0 0% 0 0% 0 0% 0 0% 0 0% symlink mknod remove rmdir rename 0 0% 0 0% 0 0% 0 0% 0 0% link readdir readdirplus fsstat fsinfo 0 0% 0 0% 1 0% 363 49% 2 0% pathconf commit 1 0% 0 0% Client nfs v4: null read write commit open 0 0% 16452 5% 169214 51% 6150 1% 17026 5% open_conf open_noat open_dgrd close setattr 11 0% 0 0% 4 0% 12719 3% 19691 6% fsinfo renew setclntid confirm lock 12 0% 480 0% 6 0% 6 0% 11578 3% lockt locku access getattr lookup 35 0% 10085 3% 5545 1% 24591 7% 17443 5% lookup_root remove rename link symlink 3 0% 1612 0% 4266 1% 31 0% 15 0% create pathconf statfs readlink readdir 105 0% 9 0% 7093 2% 4 0% 398 0% server_caps delegreturn getacl setacl fs_locations 21 0% 0 0% 0 0% 0 0% 0 0% rel_lkowner secinfo fsid_present exchange_id create_session 2051 0% 0 0% 0 0% 0 0% 0 0% destroy_session sequence get_lease_time reclaim_comp layoutget 0 0% 0 0% 0 0% 0 0% 0 0% getdevinfo layoutcommit layoutreturn secinfo_no test_stateid 0 0% 0 0% 0 0% 0 0% 0 0% free_stateid getdevicelist bind_conn_to_ses destroy_clientid seek 0 0% 0 0% 0 0% 0 0% 0 0% allocate deallocate layoutstats clone 0 0% 0 0% 0 0% 0 0% The server isn't loaded at all, load is around 0.40 and the network is also pretty free as the system has 4x NIC's in lagg with current throughput under 10Mb/s. Would anyone be able to offer any advice? Many thanks. From owner-freebsd-questions@freebsd.org Mon Aug 21 19:26:17 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E8633DC83FD for ; Mon, 21 Aug 2017 19:26:17 +0000 (UTC) (envelope-from byrnejb@harte-lyne.ca) Received: from inet08.hamilton.harte-lyne.ca (inet08.hamilton.harte-lyne.ca [216.185.71.28]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "inet08.hamilton.harte-lyne.ca", Issuer "CA_HLL_ISSUER_2016" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id B67BB8151B for ; Mon, 21 Aug 2017 19:26:17 +0000 (UTC) (envelope-from byrnejb@harte-lyne.ca) Received: from localhost (localhost [127.0.0.1]) by inet08.hamilton.harte-lyne.ca (Postfix) with ESMTP id D9246622A5; Mon, 21 Aug 2017 15:26:09 -0400 (EDT) X-Virus-Scanned: amavisd-new at harte-lyne.ca Received: from inet08.hamilton.harte-lyne.ca ([127.0.0.1]) by localhost (inet08.hamilton.harte-lyne.ca [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B3Qh1gQtG9FI; Mon, 21 Aug 2017 15:26:06 -0400 (EDT) Received: from webmail.harte-lyne.ca (inet04.hamilton.harte-lyne.ca [216.185.71.24]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by inet08.hamilton.harte-lyne.ca (Postfix) with ESMTPSA id 1EE426123B; Mon, 21 Aug 2017 15:26:06 -0400 (EDT) Received: from 216.185.71.22 (SquirrelMail authenticated user byrnejb_hll) by webmail.harte-lyne.ca with HTTP; Mon, 21 Aug 2017 15:26:06 -0400 Message-ID: <558837c28f2185328e739b965ea30440.squirrel@webmail.harte-lyne.ca> In-Reply-To: <20170817235414.a0eef6462b2ec2b2d3385884@mail.ru> References: <7eeceea605f1c7e5d4a786822268e86d.squirrel@216.185.71.106> <20170817235414.a0eef6462b2ec2b2d3385884@mail.ru> Date: Mon, 21 Aug 2017 15:26:06 -0400 Subject: Re: FreeBSD-11 - local_unbound logging From: "James B. Byrne" To: "Datasmurf" Cc: freebsd-questions@freebsd.org, byrnejb@harte-lyne.ca Reply-To: byrnejb@harte-lyne.ca User-Agent: SquirrelMail/1.4.22-5.el6 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 19:26:18 -0000 On Thu, August 17, 2017 17:54, Datasmurf wrote: > > Hello James, > > i'm sure not an expert on unbound and dns/dnssec stuff. > But on the Workstation on which unbound misbehaves could it be that > the system clock is not set correct? > ntpd is running on that workstation and the time is correct. However at the moment it is resolving DNS correctly. If or when the resolver next stops functioning then I will test your hypothesis. Thanks, -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3 From owner-freebsd-questions@freebsd.org Mon Aug 21 21:27:26 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 747ACDD4164 for ; Mon, 21 Aug 2017 21:27:26 +0000 (UTC) (envelope-from sara.riebe@worldonlinetech.com) Received: from IND01-BO1-obe.outbound.protection.outlook.com (mail-bo1ind01hn0232.outbound.protection.outlook.com [104.47.101.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8E97C283A for ; Mon, 21 Aug 2017 21:27:24 +0000 (UTC) (envelope-from sara.riebe@worldonlinetech.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=NETORGFT1177539.onmicrosoft.com; s=selector1-worldonlinetech-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Yjtr/n7T2tl3c2zK+FsyZuTlWUbACFn8AOQfjFLaKNg=; b=tXcdYyMvsh0VE0SsVECb+eCqhl6TlnWqCJ6fmz7Y4sWyFG5MWv+Y+2kM4h8QM+CnQB5GABEQGk3iZzl9C3yBg+OXzczDD9LA/RIklmKxAWQP+FJQImMRNwfApH1BnKXK4ZjlfMTFEg/eYjbT+/ZcGgq0CmTCsIohFwpDdKOpXVc= Received: from PN1PR01MB0830.INDPRD01.PROD.OUTLOOK.COM (10.174.146.140) by PN1PR01MB0173.INDPRD01.PROD.OUTLOOK.COM (10.164.139.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1362.18; Mon, 21 Aug 2017 21:27:20 +0000 Received: from PN1PR01MB0830.INDPRD01.PROD.OUTLOOK.COM ([10.174.146.140]) by PN1PR01MB0830.INDPRD01.PROD.OUTLOOK.COM ([10.174.146.140]) with mapi id 15.01.1362.019; Mon, 21 Aug 2017 21:27:21 +0000 From: Sara Riebe To: "freebsd-questions@freebsd.org" Subject: Cloud Security Users List Thread-Topic: Cloud Security Users List Thread-Index: AdMaxEXucmJFE00oRf6RAN+/csFkrQ== Date: Mon, 21 Aug 2017 21:27:20 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=sara.riebe@worldonlinetech.com; x-originating-ip: [49.207.63.156] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; PN1PR01MB0173; 6:WssTg98R1ekAsYo7r4hJ5QdvG6/wU9cm+7FSVUIG/LVuBsmJUl8BrkJr9hKMTUr5J+FyCOAhTErIttvgGWmbA8sMofsLUf36Hvmd9E1l9hK3c3x4bxZLeP/KYIDwvVkaefhXljXFo/2ee3GPNdPn61/B+eTthyfRVZy41jORQC+IT1imXicvbtmmOvWlLjdd3EdpAKH1u22K9ewao6MQVBopUCfaXLL7yY3ZpMM/ETYCkcmhuvxOLZp1biK1nxbohln+gQ0Q5bCSGtUYOMhOUzCN/LwxhnkhzmxZNbX0zX98xL0iSD4/psg5gCyf1ec7848NvyitAyBrCAltaP+l6Q==; 5:G5/8SAzS0QkKnisgX1RsjxEoOPptuEBljou3vDIqeFxJw80+JC1JteH/71Cci7oyPFO7A6hc5B7Dd9xM/vHRN2Vv4D4A10pFG8rmc1oQ6vbX+4899+GaBnY+8IytdTzXr97JL3BgVj7Ow5RVJZDlIw==; 24:0NDgOffg8K0+bYVmS5kPnGbmE6fQmZR4DqN1YEzrhDEBJNNENDLntTHJ6cab4IhQSxiCcImfHEVHrXL3lyrTTg==; 7:M5i+EWUgZu0HMtChu+lqK0M37z2D5po2bKbjWOIj3PbG0ZPLzC61hjJjiqV3aEJU72k+7l5uunYn+LO8fD1+AQImxBme0vfZgpd3Kt/dK7ltRl0YpJPeDxMMI0tRqgocnJwz979ij3MbhA5izmvM5VmV9OHFFKRuUOb3gJeEfJY/c1ChubFrPpqfc/dS1OTa8kwlRNiDkgotv+4FwZYFC+a8osqQoBFmdKXRloxKVS8= x-ms-office365-filtering-correlation-id: 2e7a3d8d-33f1-40d7-cd21-08d4e8db6848 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(2017082002075)(300000503095)(300135400095)(2017052603031)(201703131423075)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:PN1PR01MB0173; x-ms-traffictypediagnostic: PN1PR01MB0173: x-exchange-antispam-report-test: UriScan:(192374486261705)(21748063052155); x-microsoft-antispam-prvs: x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(10201501046)(100000703101)(100105400095)(93006095)(93001095)(3002001)(6041248)(20161123562025)(20161123560025)(20161123558100)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(2016111802025)(20161123555025)(6072148)(6043046)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:PN1PR01MB0173; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:PN1PR01MB0173; x-forefront-prvs: 040655413E x-forefront-antispam-report: SFV:SPM; SFS:(10009020)(6009001)(189002)(199003)(81166006)(8676002)(790700001)(6116002)(74316002)(81156014)(3846002)(33656002)(102836003)(15650500001)(5630700001)(9686003)(53936002)(189998001)(7110500001)(25786009)(6306002)(2420400007)(106356001)(54896002)(2351001)(8936002)(97736004)(7696004)(5660300001)(478600001)(9326002)(3480700004)(7736002)(101416001)(3660700001)(68736007)(66066001)(5640700003)(54356999)(86362001)(6916009)(50986999)(14454004)(3280700002)(110136004)(2501003)(10710500007)(105586002)(55016002)(2900100001)(6506006)(6436002)(2906002)(77096006)(56090200001)(19870200002); DIR:OUT; SFP:1501; SCL:5; SRVR:PN1PR01MB0173; H:PN1PR01MB0830.INDPRD01.PROD.OUTLOOK.COM; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: worldonlinetech.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:22 MIME-Version: 1.0 X-OriginatorOrg: worldonlinetech.com X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Aug 2017 21:27:21.0072 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 40e9ea0d-94bc-4216-99c9-a53b82937ddf X-MS-Exchange-Transport-CrossTenantHeadersStamped: PN1PR01MB0173 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 21:27:26 -0000 Hi, We have the new updated Cloud Security Users Lists with emails and complete= contact information for your business leads. If you looking for particular titles from your target geography please let = me know and I will get back to you with more information regarding the same= . We also have other technology users like: Amazon EC2 users, Citrix users, RackSpace users, SoftLayer users, SalesForc= e users, VMware users and many more... We provide data across the globe - North America, EMEA, Asia Pacific and LA= TAM. Note: If Cloud Computing Users is not relevant to you please reply back wit= h your Criteria or Industry you are looking to target for your marketing ca= mpaign, we have all types of target market available. Await your response! Thanks, Sara Data Specialist To opt out please response Remove From owner-freebsd-questions@freebsd.org Mon Aug 21 21:29:59 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0EAA3DD43F4 for ; Mon, 21 Aug 2017 21:29:59 +0000 (UTC) (envelope-from tyler@tysdomain.com) Received: from mail-qt0-x229.google.com (mail-qt0-x229.google.com [IPv6:2607:f8b0:400d:c0d::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id BBFE82965 for ; Mon, 21 Aug 2017 21:29:58 +0000 (UTC) (envelope-from tyler@tysdomain.com) Received: by mail-qt0-x229.google.com with SMTP id 16so88556349qtz.4 for ; Mon, 21 Aug 2017 14:29:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tysdomain-com.20150623.gappssmtp.com; s=20150623; h=reply-to:subject:to:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding:content-language; bh=ntZtenv4GFyf9txvHBi/JrPeZ3gZ9SxgKdv8TIYDjVM=; b=L7yvid52KIcBUf4De5A2uEdzw9M1vq4kilY6qG0GUmgfSkExo7YV23VGGHBkPbw3LA aO84qilRoaeBLTBP3x7Myfc9xlOz43yZeezGWqCQ9mzvWbUeSB55a2+HVsKy5cMIP/90 54Sk8qxtlVC0E7XCsT8z0zTXyO1Tvyw8P56CAaqDinfHlY3EygGHmTLMxcpLiWpBNb07 PFfQMKACiZdn2iQGXCopjAVHdC6rM3wfo4yDu0XXEszV/bxWujxPpxziarzIbE6nol3l BkvE3PoddcuE2vnaA6QWCOWdzDRXeKzapVxFIWQNKLMjAENNAXvCuadDhZg7z2YSKIVa tUBQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:reply-to:subject:to:references:from:message-id :date:user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=ntZtenv4GFyf9txvHBi/JrPeZ3gZ9SxgKdv8TIYDjVM=; b=WEOuQ/yHMSDiW2UsoPnepPl+yc/dQmkinAoSXo9QpPTh4mJzsUMDg4s6LtHrld1uFT 60BJPUkVcbSf0aKvKmxNCLLFO9WNA784Te74zVED/e4fYUpxnNZVfyBFCILrT74HTp7q SLJZhthRjmIc6StanIqkq6LccuRZ6qtP9rrnOHVV6GkBIRnLwC1Bqs8sh6x6WLXOl1HZ TDnGR1WB3OR7+TrP92ZP1/m446c5YDpHb0Z24MP2rlekVj3s3VP47663YznW+r/ld7VV +lmsF0bhkSSUBqhpCrqnXQgDZdApCld8sq2bD9cPGeJQVCqE3PkmN5Dw7pyMorZaY/xk wdkQ== X-Gm-Message-State: AHYfb5iw9yEowfPTnJlWXXxQePeuv2wZShBR6vvi6SiKJmRzYn1y9bTM sDdT6gWq1I4cXC7/lUO6yQ== X-Received: by 10.200.63.148 with SMTP id d20mr27888660qtk.288.1503350997846; Mon, 21 Aug 2017 14:29:57 -0700 (PDT) Received: from [192.168.88.101] (c-98-229-109-58.hsd1.ma.comcast.net. [98.229.109.58]) by smtp.gmail.com with ESMTPSA id 22sm9105384qto.36.2017.08.21.14.29.57 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 21 Aug 2017 14:29:57 -0700 (PDT) Reply-To: tyler@tysdomain.com Subject: Re: Cloud Security Users List To: Sara Riebe , "freebsd-questions@freebsd.org" References: From: "Littlefield, Tyler" Message-ID: <1bea02ab-57dd-6d17-e14f-f3985c3d7665@tysdomain.com> Date: Mon, 21 Aug 2017 17:29:54 -0400 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Content-Language: en-US X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 21:29:59 -0000 Who were the people that said Freebsd doesn't get much spam? Can we start forwarding these messages to them? On 8/21/2017 5:27 PM, Sara Riebe wrote: ...spam... From owner-freebsd-questions@freebsd.org Mon Aug 21 21:40:45 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C218BDD5018 for ; Mon, 21 Aug 2017 21:40:45 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: from mail-io0-x22e.google.com (mail-io0-x22e.google.com [IPv6:2607:f8b0:4001:c06::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8D0AD320B for ; Mon, 21 Aug 2017 21:40:45 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: by mail-io0-x22e.google.com with SMTP id g71so56176682ioe.5 for ; Mon, 21 Aug 2017 14:40:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=pn4jWO41UkTtgnonpmFUvUNJMGVTrXTFa5GR6kxGAAY=; b=nz1HIWfkvU9kk9Lvi80ajzEovZC7R6vAZSXQDqKG1NOHs1ONU4LrTZofmgp7fUyDgq sEh8bBxm50jgnQUCiEOQpuCIHZpcCBQKv3g2L6DyvIaTfr4olAvqxiHOQxUt5w1dYBl8 +ksfluNgLdrQX++xv0puVFTpidkCR7SQgvYT5fkGKpjzm9wAIxzvjLZ91jnCcJjFj0X0 alYLGs2JzpW6ThUSQMTha/0viE0i2D8oIt08X11YiOUidWHn+ebIhkAOekDZwEdGSlPS n7yAWnemnKwxzpyLqQ4FuNDj17gH+X5rQjgNW16+F4gnziYhsgopKuyJmLUVKc8MpMXM Y+8w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=pn4jWO41UkTtgnonpmFUvUNJMGVTrXTFa5GR6kxGAAY=; b=XEh7YJBYYvgKee8whXnCXF+B1P8I1CODUJUnrPJm6wURQGHsEzdcgeGdHfjv5rx+uL 6nhiG75WE100q72hn9/dvKZaZp3gmqfPfvuvd/AN3obhDFV/4Vg9UL8uEVgtKYq4PEc9 fadlN08n1W/zPacZPcpEPb6hz9/IC6ByPD5kMTrR/sVINqr5iaCbhOAAC48CGkXTnmP+ 9jYX65K4hi6LZXFQDJfUfVXRX+ITemcM//zcU9jE+d3xldaPDleyTj7Ewz42ZlrJiAdW arKV7vqPOQpe6KImMj0q5TEU06vDBNJhYDXZPGClLwO5wBLLEr0nJkvbJb4jfeafZNrG 4vkw== X-Gm-Message-State: AHYfb5gtF31rsYVcJ5bjW0igNhnzXwa4bXqz/LrlDPtFN/nJCI0FbR/3 079XCWITqpU8uz68 X-Received: by 10.107.3.10 with SMTP id 10mr3142041iod.28.1503351644676; Mon, 21 Aug 2017 14:40:44 -0700 (PDT) Received: from localhost.localdomain (50-243-4-3-static.hfc.comcastbusiness.net. [50.243.4.3]) by smtp.googlemail.com with ESMTPSA id w134sm557748ita.0.2017.08.21.14.40.43 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 21 Aug 2017 14:40:43 -0700 (PDT) Subject: Re: Cloud Security Users List To: freebsd-questions@freebsd.org References: <1bea02ab-57dd-6d17-e14f-f3985c3d7665@tysdomain.com> From: JD Message-ID: <599B535B.5080808@gmail.com> Date: Mon, 21 Aug 2017 15:40:43 -0600 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.0.1 MIME-Version: 1.0 In-Reply-To: <1bea02ab-57dd-6d17-e14f-f3985c3d7665@tysdomain.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 21:40:45 -0000 On 08/21/2017 03:29 PM, Littlefield, Tyler wrote: > Who were the people that said Freebsd doesn't get much spam? Can we > start forwarding these messages to them? > > On 8/21/2017 5:27 PM, Sara Riebe wrote: > ...spam... > _______________________________________________ After having been on this list for quite a while, I can see that there is no effort made to filter out spam. As many as spam filters are available, seems like the list server does not appear to be making use of any of them. From owner-freebsd-questions@freebsd.org Mon Aug 21 23:16:14 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 25471DDA9FB for ; Mon, 21 Aug 2017 23:16:14 +0000 (UTC) (envelope-from lobo@bsd.com.br) Received: from mail-qk0-x233.google.com (mail-qk0-x233.google.com [IPv6:2607:f8b0:400d:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DEDCB657A6 for ; Mon, 21 Aug 2017 23:16:13 +0000 (UTC) (envelope-from lobo@bsd.com.br) Received: by mail-qk0-x233.google.com with SMTP id u139so89682668qka.1 for ; Mon, 21 Aug 2017 16:16:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bsd.com.br; s=capeta; h=date:from:to:subject:message-id:organization:mime-version :content-transfer-encoding; bh=UH9woS137gfjUMWpF81K6FQapPLG7Sy2M+P3XoZHoP0=; b=GpqrHX58KVs/DklbfRUjW0hMoYStVcAWbly8mjf6kaoDyP9wShAKhXrUbex6hFiABo vaPOzf5o0aM+iGW6OcCh3iQ1QfAvOpv82AaT/3xRLVcxbch7BhG4IXI0ZiLAt0qs7Rux 6g6N9oi53R7qiQ75famlxbeIfvqldPu/Q7rJU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:organization :mime-version:content-transfer-encoding; bh=UH9woS137gfjUMWpF81K6FQapPLG7Sy2M+P3XoZHoP0=; b=SaohP9G6TffEsi+CXe5JOsgtXvUYNLkn4N4SDdR9Ab3uwNqUqJULu7S2E/cYeYsZbA rKzK0LycatLOJFZMTASyNtXQIWVBDc4kOEN8a07zU1rg/HkklpbHgc/+/h2E/3uXN2Ln ToxufZM9Z3YPskvJATUHF0DpYfrgoTAWgtZRZVNXyrPjFYAA+9PsIBnIXsjo5TmNJfMx ykq11Na9eP4fa2WRjE2y7sbdCqcR2vAAL+TWW1+bUGS9MK2cgSx8ujExwnXJACUuKCSR dg3Oo8+hhx4/NVrdCbuJxWlHKvMfGMfRJum+3Qmc01c/sAM3yRJmZY0yabCnicP7UMVB MXaw== X-Gm-Message-State: AHYfb5hurHQuBVbXSrndwqry4MeWnNFVbE1G49CqxXBdgfkyNRjr7dqU 0K+fFVieaOx6mOs4psE= X-Received: by 10.55.142.197 with SMTP id q188mr24095272qkd.203.1503357372645; Mon, 21 Aug 2017 16:16:12 -0700 (PDT) Received: from Papi ([187.112.3.213]) by smtp.gmail.com with ESMTPSA id o67sm5861649qte.71.2017.08.21.16.16.11 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Mon, 21 Aug 2017 16:16:12 -0700 (PDT) Date: Mon, 21 Aug 2017 20:17:46 -0300 From: Mario Lobo To: "freebsd-questions@freebsd.org" Subject: Error compiling a qt5 application Message-ID: <20170821201746.59796aba@Papi> Organization: BSD X-Mailer: Claws Mail 3.15.0 (GTK+ 2.24.29; amd64-portbld-freebsd11.0) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 23:16:14 -0000 Hi there; I'm trying to compile a qt5 application. OS: reeBSD 11.1-STABLE #0 r321652: Sat Jul 29 10:49:43 BRT 2017 clang -v clang version 4.0.1 (tags/RELEASE_401/final) Target: x86_64-unknown-freebsd11.1 Thread model: posix InstalledDir: /usr/local/llvm40/bin When I compile, I get this: Compiling C++... In file included from ../../../../../contrib/gtqtc/gtqtc1.cpp:48: In file included from ../../../../../contrib/gtqtc/gtqtc.h:53: In file included from /usr/local/include/qt5/QtCore/QThread:1: In file included from /usr/local/include/qt5/QtCore/qthread.h:43: In file included from /usr/local/include/qt5/QtCore/qobject.h:46: In file included from /usr/local/include/qt5/QtCore/qobjectdefs.h:48: In file included from /usr/local/include/qt5/QtCore/qnamespace.h:43: In file included from /usr/local/include/qt5/QtCore/qglobal.h:83: /usr/local/include/qt5/QtCore/qcompilerdetection.h:563:6: error: Qt requires a C++11 compiler and yours does not seem to be that. # error Qt requires a C++11 compiler and yours does not seem to be that. I tried this in make.conf: CC=clang CXX=clang++ CXXFLAGS+=-std=c++11 and export CXXFLAGS=-std=c++11 and nothing seems to work. It seems to me that my clang is new enough to support that standard. What am i missing here? Thanks, -- Mario Lobo http://www.mallavoodoo.com.br FreeBSD since 2.2.8 [not Pro-Audio.... YET!!] "UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things." From owner-freebsd-questions@freebsd.org Mon Aug 21 23:36:49 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5C961DDBF8A for ; Mon, 21 Aug 2017 23:36:49 +0000 (UTC) (envelope-from chris@monochrome.org) Received: from mail.monochrome.org (host-209-190-254-14.client.atlantech.net [209.190.254.14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail", Issuer "mail" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 0DF2E6617D for ; Mon, 21 Aug 2017 23:36:48 +0000 (UTC) (envelope-from chris@monochrome.org) Received: from [192.168.1.11] (tripel [192.168.1.11]) by mail.monochrome.org (8.14.9/8.14.9) with ESMTP id v7LNAVGh023307; Mon, 21 Aug 2017 19:10:31 -0400 (EDT) (envelope-from chris@monochrome.org) Date: Mon, 21 Aug 2017 19:10:26 -0400 (EDT) From: Chris Hill To: JD cc: freebsd-questions@freebsd.org Subject: Re: Cloud Security Users List In-Reply-To: <599B535B.5080808@gmail.com> Message-ID: References: <1bea02ab-57dd-6d17-e14f-f3985c3d7665@tysdomain.com> <599B535B.5080808@gmail.com> User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2017 23:36:49 -0000 On Mon, 21 Aug 2017, JD wrote: > On 08/21/2017 03:29 PM, Littlefield, Tyler wrote: >> Who were the people that said Freebsd doesn't get much spam? Can we >> start forwarding these messages to them? >> >> On 8/21/2017 5:27 PM, Sara Riebe wrote: >> ...spam... >> _______________________________________________ > > After having been on this list for quite a while, I can see that there > is no effort made to filter out spam. Au contraire. The spam mitigation measures in use on this list have been discussed and disclosed many, many times. And it seems to me they are quite effective. For example: today (21 August 2017) there have been, if I recall, two spams that appeared on the list. There have been two (now three) replies. In contrast, my stupid little home mail server has received 91 spams today so far. Two came in while I was typing this. > As many as spam filters are available, seems like the list server does > not appear to be making use of any of them. -- Chris Hill chris@monochrome.org ** [ Busy Expunging ] From owner-freebsd-questions@freebsd.org Tue Aug 22 06:00:28 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 90E3EDD10A0 for ; Tue, 22 Aug 2017 06:00:28 +0000 (UTC) (envelope-from ftp51246-2575596@sh4-5.1blu.de) Received: from sh4-5.1blu.de (sh4-5.1blu.de [178.254.11.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5B8DF736E3 for ; Tue, 22 Aug 2017 06:00:28 +0000 (UTC) (envelope-from ftp51246-2575596@sh4-5.1blu.de) Received: from ftp51246-2575596 by sh4-5.1blu.de with local (Exim 4.86_2) (envelope-from ) id 1dk1aR-0001xm-BZ for freebsd-questions@freebsd.org; Tue, 22 Aug 2017 07:18:47 +0200 Date: Tue, 22 Aug 2017 07:18:47 +0200 From: Matthias Apitz To: freebsd-questions@freebsd.org Subject: Re: Cloud Security Users List Message-ID: <20170822051847.GA6482@sh4-5.1blu.de> Reply-To: Matthias Apitz Mail-Followup-To: Matthias Apitz , freebsd-questions@freebsd.org References: <1bea02ab-57dd-6d17-e14f-f3985c3d7665@tysdomain.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <1bea02ab-57dd-6d17-e14f-f3985c3d7665@tysdomain.com> X-Operating-System: FreeBSD 12.0-CURRENT r314251 (amd64) X-message-flag: Mails containing HTML will not be read! Please send only plain text. User-Agent: Mutt/1.5.24 (2015-08-30) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Aug 2017 06:00:28 -0000 El día Monday, August 21, 2017 a las 05:29:54PM -0400, Littlefield, Tyler escribió: > Who were the people that said Freebsd doesn't get much spam? Can we > start forwarding these messages to them? This is how this thread looks like until now (mine reply not yet included) in my MUA: 16 D Aug 21 Sara Riebe (8,5K) Cloud Security Users List 17 D Aug 21 Littlefield, Ty (5,1K) `-> 18 D Aug 21 JD (5,4K) `-> 19 D Aug 21 Chris Hill (4,2K) `-> i.e. ONE spammer, THREE replies to the list. matthias -- Matthias Apitz | /"\ ASCII Ribbon Campaign: E-mail: guru@unixarea.de | \ / - No HTML/RTF in E-mail WWW: http://www.unixarea.de/ | X - No proprietary attachments phone: +49-176-38902045 | / \ - Respect for open standards | en.wikipedia.org/wiki/ASCII_Ribbon_Campaign From owner-freebsd-questions@freebsd.org Tue Aug 22 18:37:18 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5E2E8DDB461 for ; Tue, 22 Aug 2017 18:37:18 +0000 (UTC) (envelope-from hugh.wooller@gmail.com) Received: from mail-lf0-x235.google.com (mail-lf0-x235.google.com [IPv6:2a00:1450:4010:c07::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 879C86FFD8 for ; Tue, 22 Aug 2017 18:37:17 +0000 (UTC) (envelope-from hugh.wooller@gmail.com) Received: by mail-lf0-x235.google.com with SMTP id l137so7831321lfg.3 for ; Tue, 22 Aug 2017 11:37:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=W0noSj8jg1nA0qyggxrufXO4zkNQu6Em+f9kysMufvM=; b=VG5Tn+2VyNUunPdgWVDnzuq7xGBpuIouJKkHHXH6sDwPyDmTqizEVtCFe5feIyI0Ef wY1uTZGlFC8siTSzC7viXfvCC6vAFbKVyqJYyJaE4H257DHACNrYBBfMb7fKixbcrcm1 fAYPQ1wTZBtR4C3LyLyAD3YxYk7q/HOK0Vg5hR9cEkiQGSar8DZ2CpRMy2w1y2d+VpEB XEfpIX0mAHWZKS62iJZEkQIqdtQdvyOJHHrGDEKb0qA9qtxTdXdCGIz+MH9n4S4ddbHH 9RM3+EWOYYnllx/nlxtkIhP+KZF33MAVVljHpd5hgDWEjESiU+dWedJC6+4hDyabTwr2 a0RQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=W0noSj8jg1nA0qyggxrufXO4zkNQu6Em+f9kysMufvM=; b=fLas2u6ClItXT5jKcZXR2KnChFWI5H/xpZqjOkxKA+E+QJTb0t4xFnNnPxxMDFArlA jP6Hz3hk8P1xb2LU8rvNAbIlWty2pOuVMjgiadoaCx4o40gjAETbg4Z9sGR+x9wvPvpi 89v38VeHCHpV0fT8O1mD0pA7V2MI3JRZTxocT5SVP2jImp71u/yc07TshQWCQoZG7w04 u2HKyAe0G4DZKknfR3ouWzdFSTVLAuo1bkS6W+4ZOqgPUJWbWmuZYiLnlZKgji+tROwA HCWocRD3E6eG3MmnfiIYQITJQWfshFkYR2+SxiWiCY6nxzb7564LcKfJsPOMk5DR0XNS WzYg== X-Gm-Message-State: AHYfb5gV76yj/0ymQ5xQ2vvsDOhByyv6woBJjYdjOIEB7bJVS/sd4E+Y IQbWfnRpoADsYzyjlZPa0QRNCshvaUKD X-Received: by 10.25.83.145 with SMTP id h17mr29037lfl.202.1503427035388; Tue, 22 Aug 2017 11:37:15 -0700 (PDT) MIME-Version: 1.0 Received: by 10.25.33.201 with HTTP; Tue, 22 Aug 2017 11:37:14 -0700 (PDT) Received: by 10.25.33.201 with HTTP; Tue, 22 Aug 2017 11:37:14 -0700 (PDT) From: Hugh Wooller Date: Tue, 22 Aug 2017 19:37:14 +0100 Message-ID: Subject: Stop To: freebsd-questions@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Aug 2017 18:37:18 -0000 On 22 Aug 2017 1:01 p.m., wrote: > Send freebsd-questions mailing list submissions to > freebsd-questions@freebsd.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > or, via email, send a message with subject or body 'help' to > freebsd-questions-request@freebsd.org > > You can reach the person managing the list at > freebsd-questions-owner@freebsd.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of freebsd-questions digest..." > > > Today's Topics: > > 1. NFS home directory performance tuning for Linux client > (Kaya Saman) > 2. Freebsd-questions, Guaranteed choice of website optimization > (cynthia@adwordbillboard.com) > 3. NFS home directory performance tuning for Linux client > (Kaya Saman) > 4. Re: FreeBSD-11 - local_unbound logging (James B. Byrne) > 5. Cloud Security Users List (Sara Riebe) > 6. Re: Cloud Security Users List (Littlefield, Tyler) > 7. Re: Cloud Security Users List (JD) > 8. Error compiling a qt5 application (Mario Lobo) > 9. Re: Cloud Security Users List (Chris Hill) > 10. Re: Cloud Security Users List (Matthias Apitz) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 21 Aug 2017 15:00:14 +0100 > From: Kaya Saman > To: freebsd-questions > Subject: NFS home directory performance tuning for Linux client > Message-ID: <30d13a2b-0813-9686-3841-b24051fa3e0e@gmail.com> > Content-Type: text/plain; charset=utf-8; format=flowed > > Hi, > > > I'm testing an Arch Linux client with my FreeBSD server which has > recently been updated to 11.1. The server runs a zpool spread over 15x > disks with SSD L2ARC and also just as another test point I am using a > separate SSD (zpool over 1x disk) in the server to compare and contrast > with. > > > For non-home NFS mounts I found Version4 to have good performance > however, when increasing the MTU size in the network: NIC's, switches, > routing etc... to 9000 ; I tend to see a lot of server timeouts, even > with rsize and wsize increased to 8192. > > > Hard setting the Linux clients to vers=3 in fstab sees stability, as in > no timeouts, and with no apparent decrease in performance either. > > > What is odd however, is that FreeBSD to FreeBSD will just work without > any issues at all, so I'm wondering if the NFS implementation on Linux > is slightly different causing these issues?? > > > To the main question/issue however, when using as NFS home directory > setting vers=3 on the client makes the system unuseable. It takes > roughly 5-10 mins after login for anything to appear on screen then > again after clicking somewhere another 5-10mins for the response. > > - setting to vers=4 improves things significantly but still if trying to > use an application like Chromium then the system will hang upon browsing > for 5-10 mins then come alive again?? > > > I have set the server up as follows in rc.conf: > > > nfs_server_flags="-t -n 128 -h " > nfs_server_enable="YES" > nfsv4_server_enable="YES" > nfsuserd_enable="YES" > nfsuserd_flags="-domain domian.com" > rpc_statd_enable="YES" > rpc_lockd_enable="YES" > rpcbind_enable="YES" > rpcbind_flags="-h " > mountd_enable="YES" > mountd_flags="-r -n -l -h " > > > I've even tried to increase the sysctl variable: vfs.nfs.iodmax from 20 > to 60 > > > On the client side the fstab entry contains the following options: > > > vers=4,defaults,auto,tcp,retrans=10,timeo=30,rsize=8192,wsize=8192,noatime > > > and gets mounted to /mnt/home. I realize the 'tcp' flag doesn't need to > be there as v4 by default uses 'tcp' however, it is there when testing > with v3. > > > > nfsstat command on server gives: > > > Client Info: > Rpc Counts: > Getattr Setattr Lookup Readlink Read Write Create > Remove > 139585 0 399150 0 137485 0 0 0 > Rename Link Symlink Mkdir Rmdir Readdir RdirPlus > Access > 0 0 0 0 0 138482 0 > 393052 > Mknod Fsstat Fsinfo PathConf Commit > 0 94496 4 0 0 > Rpc Info: > TimedOut Invalid X Replies Retries Requests > 0 0 0 0 1302226 > Cache Info: > Attr Hits Misses Lkup Hits Misses BioR Hits Misses BioW Hits > Misses > 16703860 139581 13000702 399150 667954 139782 > 0 0 > BioRLHits Misses BioD Hits Misses DirE Hits Misses Accs Hits > Misses > 0 0 116186 116459 94263 0 13744785 > 393052 > > Server Info: > Getattr Setattr Lookup Readlink Read Write Create > Remove > 3200367 39011 89025 41 203807584 806982 410 7656 > Rename Link Symlink Mkdir Rmdir Readdir RdirPlus > Access > 6383 101 2 6 1 2880 265953 > 1643074 > Mknod Fsstat Fsinfo PathConf Commit > 0 94770 30 15 18370 > Server Ret-Failed > 0 > Server Faults > 0 > Server Cache Stats: > Inprog Idem Non-idem Misses > 0 0 0 209101544 > Server Write Gathering: > WriteOps WriteRPC Opsaved > 806982 806982 0 > > > And nfsstat on client: > > > Client rpc stats: > calls retrans authrefrsh > 327404 1293 327395 > > Client nfs v3: > null getattr setattr lookup access > 0 0% 367 49% 0 0% 3 0% 3 0% > readlink read write create mkdir > 0 0% 0 0% 0 0% 0 0% 0 0% > symlink mknod remove rmdir rename > 0 0% 0 0% 0 0% 0 0% 0 0% > link readdir readdirplus fsstat fsinfo > 0 0% 0 0% 1 0% 363 49% 2 0% > pathconf commit > 1 0% 0 0% > > Client nfs v4: > null read write commit open > 0 0% 16452 5% 169214 51% 6150 1% 17026 5% > open_conf open_noat open_dgrd close setattr > 11 0% 0 0% 4 0% 12719 3% > 19691 6% > fsinfo renew setclntid confirm lock > 12 0% 480 0% 6 0% 6 0% 11578 3% > lockt locku access getattr lookup > 35 0% 10085 3% 5545 1% 24591 7% > 17443 5% > lookup_root remove rename link symlink > 3 0% 1612 0% 4266 1% 31 0% 15 0% > create pathconf statfs readlink readdir > 105 0% 9 0% 7093 2% 4 0% 398 0% > server_caps delegreturn getacl setacl fs_locations > 21 0% 0 0% 0 0% 0 0% 0 0% > rel_lkowner secinfo fsid_present exchange_id > create_session > 2051 0% 0 0% 0 0% 0 0% 0 0% > destroy_session sequence get_lease_time reclaim_comp layoutget > 0 0% 0 0% 0 0% 0 0% 0 0% > getdevinfo layoutcommit layoutreturn secinfo_no > test_stateid > 0 0% 0 0% 0 0% 0 0% 0 0% > free_stateid getdevicelist bind_conn_to_ses destroy_clientid seek > 0 0% 0 0% 0 0% 0 0% 0 0% > allocate deallocate layoutstats clone > 0 0% 0 0% 0 0% 0 0% > > > > The server isn't loaded at all, load is around 0.40 and the network is > also pretty free as the system has 4x NIC's in lagg with current > throughput under 10Mb/s. > > > Would anyone be able to offer any advice? > > > Many thanks. > > > > > ------------------------------ > > Message: 2 > Date: Mon, 21 Aug 2017 18:16:13 +0000 > From: "cynthia@adwordbillboard.com" > To: "freebsd-questions@freebsd.org" > Subject: Freebsd-questions, Guaranteed choice of website optimization > Message-ID: <97cb6bf1dce7fbfcf4032d3f8b40c371@adwordbillboard.com> > Content-Type: text/plain; charset=us-ascii > > Hi Freebsd-questions! > > The reason of failure in web page optimization is the millions of > competitors fighting and struggling for the first places on top of search > engine results. And such a situation has its consequences. Chances are > small for those who always dismisses the necessity in attributing the > true knowledge of website optimization process. > > Web page optimization requires specific technical expertise. For this > reason, we can show you the new technology for your web page optimization. > This technology can place your web page on the top portion of search > engine results during the whole year. > > First, just go to our website and you can see for yourself how it works. > Second, click on the website's DEMO page, > Third, type your website freebsd org and keywords in form and feel free to > enjoy the results. > > > Yours Really, > Cynthia Juarez > > > > ------------------------------ > > Message: 3 > Date: Mon, 21 Aug 2017 19:47:04 +0100 > From: Kaya Saman > To: freebsd-questions@freebsd.org > Subject: NFS home directory performance tuning for Linux client > Message-ID: > Content-Type: text/plain; charset=utf-8; format=flowed > > So, currently I've tried doing something a little different which worked > out well. > > > I moved away from NFS and setup a ZVOL on the spare SSD mentioned below > then set the server up as an iscsi target. > > > With the Linux machine running as the iscsi initiator then creating a > partition and filesystem <- went with JFS which is my preffered on Linux > ; it's running quite smoothly at present. > > > The bottleneck was definitely caused by NFS and I think it was the write > behaviour for small files, with the limited options available though I > have no idea what could be causing the issues or how to get round them?? > > > > -------- Forwarded Message -------- > Subject: NFS home directory performance tuning for Linux client > Date: Mon, 21 Aug 2017 15:00:14 +0100 > From: Kaya Saman > To: freebsd-questions > > > > Hi, > > > I'm testing an Arch Linux client with my FreeBSD server which has > recently been updated to 11.1. The server runs a zpool spread over 15x > disks with SSD L2ARC and also just as another test point I am using a > separate SSD (zpool over 1x disk) in the server to compare and contrast > with. > > > For non-home NFS mounts I found Version4 to have good performance > however, when increasing the MTU size in the network: NIC's, switches, > routing etc... to 9000 ; I tend to see a lot of server timeouts, even > with rsize and wsize increased to 8192. > > > Hard setting the Linux clients to vers=3 in fstab sees stability, as in > no timeouts, and with no apparent decrease in performance either. > > > What is odd however, is that FreeBSD to FreeBSD will just work without > any issues at all, so I'm wondering if the NFS implementation on Linux > is slightly different causing these issues?? > > > To the main question/issue however, when using as NFS home directory > setting vers=3 on the client makes the system unuseable. It takes > roughly 5-10 mins after login for anything to appear on screen then > again after clicking somewhere another 5-10mins for the response. > > - setting to vers=4 improves things significantly but still if trying to > use an application like Chromium then the system will hang upon browsing > for 5-10 mins then come alive again?? > > > I have set the server up as follows in rc.conf: > > > nfs_server_flags="-t -n 128 -h " > nfs_server_enable="YES" > nfsv4_server_enable="YES" > nfsuserd_enable="YES" > nfsuserd_flags="-domain domian.com" > rpc_statd_enable="YES" > rpc_lockd_enable="YES" > rpcbind_enable="YES" > rpcbind_flags="-h " > mountd_enable="YES" > mountd_flags="-r -n -l -h " > > > I've even tried to increase the sysctl variable: vfs.nfs.iodmax from 20 > to 60 > > > On the client side the fstab entry contains the following options: > > > vers=4,defaults,auto,tcp,retrans=10,timeo=30,rsize=8192,wsize=8192,noatime > > > and gets mounted to /mnt/home. I realize the 'tcp' flag doesn't need to > be there as v4 by default uses 'tcp' however, it is there when testing > with v3. > > > > nfsstat command on server gives: > > > Client Info: > Rpc Counts: > Getattr Setattr Lookup Readlink Read Write Create > Remove > 139585 0 399150 0 137485 0 0 0 > Rename Link Symlink Mkdir Rmdir Readdir RdirPlus > Access > 0 0 0 0 0 138482 0 > 393052 > Mknod Fsstat Fsinfo PathConf Commit > 0 94496 4 0 0 > Rpc Info: > TimedOut Invalid X Replies Retries Requests > 0 0 0 0 1302226 > Cache Info: > Attr Hits Misses Lkup Hits Misses BioR Hits Misses BioW Hits > Misses > 16703860 139581 13000702 399150 667954 139782 > 0 0 > BioRLHits Misses BioD Hits Misses DirE Hits Misses Accs Hits > Misses > 0 0 116186 116459 94263 0 13744785 > 393052 > > Server Info: > Getattr Setattr Lookup Readlink Read Write Create > Remove > 3200367 39011 89025 41 203807584 806982 410 7656 > Rename Link Symlink Mkdir Rmdir Readdir RdirPlus > Access > 6383 101 2 6 1 2880 265953 > 1643074 > Mknod Fsstat Fsinfo PathConf Commit > 0 94770 30 15 18370 > Server Ret-Failed > 0 > Server Faults > 0 > Server Cache Stats: > Inprog Idem Non-idem Misses > 0 0 0 209101544 > Server Write Gathering: > WriteOps WriteRPC Opsaved > 806982 806982 0 > > > And nfsstat on client: > > > Client rpc stats: > calls retrans authrefrsh > 327404 1293 327395 > > Client nfs v3: > null getattr setattr lookup access > 0 0% 367 49% 0 0% 3 0% 3 0% > readlink read write create mkdir > 0 0% 0 0% 0 0% 0 0% 0 0% > symlink mknod remove rmdir rename > 0 0% 0 0% 0 0% 0 0% 0 0% > link readdir readdirplus fsstat fsinfo > 0 0% 0 0% 1 0% 363 49% 2 0% > pathconf commit > 1 0% 0 0% > > Client nfs v4: > null read write commit open > 0 0% 16452 5% 169214 51% 6150 1% 17026 5% > open_conf open_noat open_dgrd close setattr > 11 0% 0 0% 4 0% 12719 3% > 19691 6% > fsinfo renew setclntid confirm lock > 12 0% 480 0% 6 0% 6 0% 11578 3% > lockt locku access getattr lookup > 35 0% 10085 3% 5545 1% 24591 7% > 17443 5% > lookup_root remove rename link symlink > 3 0% 1612 0% 4266 1% 31 0% 15 0% > create pathconf statfs readlink readdir > 105 0% 9 0% 7093 2% 4 0% 398 0% > server_caps delegreturn getacl setacl fs_locations > 21 0% 0 0% 0 0% 0 0% 0 0% > rel_lkowner secinfo fsid_present exchange_id > create_session > 2051 0% 0 0% 0 0% 0 0% 0 0% > destroy_session sequence get_lease_time reclaim_comp layoutget > 0 0% 0 0% 0 0% 0 0% 0 0% > getdevinfo layoutcommit layoutreturn secinfo_no > test_stateid > 0 0% 0 0% 0 0% 0 0% 0 0% > free_stateid getdevicelist bind_conn_to_ses destroy_clientid seek > 0 0% 0 0% 0 0% 0 0% 0 0% > allocate deallocate layoutstats clone > 0 0% 0 0% 0 0% 0 0% > > > > The server isn't loaded at all, load is around 0.40 and the network is > also pretty free as the system has 4x NIC's in lagg with current > throughput under 10Mb/s. > > > Would anyone be able to offer any advice? > > > Many thanks. > > > > > ------------------------------ > > Message: 4 > Date: Mon, 21 Aug 2017 15:26:06 -0400 > From: "James B. Byrne" > To: "Datasmurf" > Cc: freebsd-questions@freebsd.org, byrnejb@harte-lyne.ca > Subject: Re: FreeBSD-11 - local_unbound logging > Message-ID: > <558837c28f2185328e739b965ea30440.squirrel@webmail.harte-lyne.ca> > Content-Type: text/plain;charset=iso-8859-1 > > > On Thu, August 17, 2017 17:54, Datasmurf wrote: > > > > > Hello James, > > > > i'm sure not an expert on unbound and dns/dnssec stuff. > > But on the Workstation on which unbound misbehaves could it be that > > the system clock is not set correct? > > > > ntpd is running on that workstation and the time is correct. However > at the moment it is resolving DNS correctly. If or when the resolver > next stops functioning then I will test your hypothesis. > > Thanks, > > -- > *** e-Mail is NOT a SECURE channel *** > Do NOT transmit sensitive data via e-Mail > Do NOT open attachments nor follow links sent by e-Mail > > James B. Byrne mailto:ByrneJB@Harte-Lyne.ca > Harte & Lyne Limited http://www.harte-lyne.ca > 9 Brockley Drive vox: +1 905 561 1241 > Hamilton, Ontario fax: +1 905 561 0757 > Canada L8E 3C3 > > > > ------------------------------ > > Message: 5 > Date: Mon, 21 Aug 2017 21:27:20 +0000 > From: Sara Riebe > To: "freebsd-questions@freebsd.org" > Subject: Cloud Security Users List > Message-ID: > INDPRD01.PROD.OUTLOOK.COM> > > Content-Type: text/plain; charset="us-ascii" > > > > Hi, > > We have the new updated Cloud Security Users Lists with emails and > complete contact information for your business leads. > > If you looking for particular titles from your target geography please let > me know and I will get back to you with more information regarding the same. > > We also have other technology users like: > > Amazon EC2 users, Citrix users, RackSpace users, SoftLayer users, > SalesForce users, VMware users and many more... > > We provide data across the globe - North America, EMEA, Asia Pacific and > LATAM. > > Note: If Cloud Computing Users is not relevant to you please reply back > with your Criteria or Industry you are looking to target for your marketing > campaign, we have all types of target market available. > > Await your response! > > > Thanks, > Sara > Data Specialist > > To opt out please response Remove > > > > ------------------------------ > > Message: 6 > Date: Mon, 21 Aug 2017 17:29:54 -0400 > From: "Littlefield, Tyler" > To: Sara Riebe , > "freebsd-questions@freebsd.org" > Subject: Re: Cloud Security Users List > Message-ID: <1bea02ab-57dd-6d17-e14f-f3985c3d7665@tysdomain.com> > Content-Type: text/plain; charset=utf-8 > > Who were the people that said Freebsd doesn't get much spam? Can we > start forwarding these messages to them? > > On 8/21/2017 5:27 PM, Sara Riebe wrote: > ...spam... > > > ------------------------------ > > Message: 7 > Date: Mon, 21 Aug 2017 15:40:43 -0600 > From: JD > To: freebsd-questions@freebsd.org > Subject: Re: Cloud Security Users List > Message-ID: <599B535B.5080808@gmail.com> > Content-Type: text/plain; charset=windows-1252; format=flowed > > > > On 08/21/2017 03:29 PM, Littlefield, Tyler wrote: > > Who were the people that said Freebsd doesn't get much spam? Can we > > start forwarding these messages to them? > > > > On 8/21/2017 5:27 PM, Sara Riebe wrote: > > ...spam... > > _______________________________________________ > > After having been on this list for quite a while, I can see that > there is no effort made to filter out spam. > > As many as spam filters are available, seems like the list server > does not appear to be making use of any of them. > > > > ------------------------------ > > Message: 8 > Date: Mon, 21 Aug 2017 20:17:46 -0300 > From: Mario Lobo > To: "freebsd-questions@freebsd.org" > Subject: Error compiling a qt5 application > Message-ID: <20170821201746.59796aba@Papi> > Content-Type: text/plain; charset=US-ASCII > > Hi there; > > I'm trying to compile a qt5 application. > > OS: reeBSD 11.1-STABLE #0 r321652: Sat Jul 29 10:49:43 BRT 2017 > > clang -v > clang version 4.0.1 (tags/RELEASE_401/final) > Target: x86_64-unknown-freebsd11.1 > Thread model: posix > InstalledDir: /usr/local/llvm40/bin > > When I compile, I get this: > > Compiling C++... > In file included from ../../../../../contrib/gtqtc/gtqtc1.cpp:48: > In file included from ../../../../../contrib/gtqtc/gtqtc.h:53: > In file included from /usr/local/include/qt5/QtCore/QThread:1: > In file included from /usr/local/include/qt5/QtCore/qthread.h:43: > In file included from /usr/local/include/qt5/QtCore/qobject.h:46: > In file included from /usr/local/include/qt5/QtCore/qobjectdefs.h:48: > In file included from /usr/local/include/qt5/QtCore/qnamespace.h:43: > In file included from /usr/local/include/qt5/QtCore/qglobal.h:83: > /usr/local/include/qt5/QtCore/qcompilerdetection.h:563:6: error: Qt > requires a C++11 compiler and yours does not seem to be that. # > error Qt requires a C++11 compiler and yours does not seem to be that. > > I tried this in make.conf: > > CC=clang > CXX=clang++ > CXXFLAGS+=-std=c++11 > > and export CXXFLAGS=-std=c++11 > > and nothing seems to work. > > It seems to me that my clang is new enough to support that standard. > > What am i missing here? > > Thanks, > > -- > Mario Lobo > http://www.mallavoodoo.com.br > FreeBSD since 2.2.8 [not Pro-Audio.... YET!!] > > "UNIX was not designed to stop you from doing stupid things, > because that would also stop you from doing clever things." > > > ------------------------------ > > Message: 9 > Date: Mon, 21 Aug 2017 19:10:26 -0400 (EDT) > From: Chris Hill > To: JD > Cc: freebsd-questions@freebsd.org > Subject: Re: Cloud Security Users List > Message-ID: > > Content-Type: text/plain; format=flowed; charset=US-ASCII > > On Mon, 21 Aug 2017, JD wrote: > > > On 08/21/2017 03:29 PM, Littlefield, Tyler wrote: > >> Who were the people that said Freebsd doesn't get much spam? Can we > >> start forwarding these messages to them? > >> > >> On 8/21/2017 5:27 PM, Sara Riebe wrote: > >> ...spam... > >> _______________________________________________ > > > > After having been on this list for quite a while, I can see that there > > is no effort made to filter out spam. > > Au contraire. The spam mitigation measures in use on this list have been > discussed and disclosed many, many times. And it seems to me they are > quite effective. > > For example: today (21 August 2017) there have been, if I recall, two > spams that appeared on the list. There have been two (now three) > replies. In contrast, my stupid little home mail server has received 91 > spams today so far. Two came in while I was typing this. > > > As many as spam filters are available, seems like the list server does > > not appear to be making use of any of them. > > -- > Chris Hill chris@monochrome.org > ** [ Busy Expunging ] > > > ------------------------------ > > Message: 10 > Date: Tue, 22 Aug 2017 07:18:47 +0200 > From: Matthias Apitz > To: freebsd-questions@freebsd.org > Subject: Re: Cloud Security Users List > Message-ID: <20170822051847.GA6482@sh4-5.1blu.de> > Content-Type: text/plain; charset=utf-8 > > El d?a Monday, August 21, 2017 a las 05:29:54PM -0400, Littlefield, Tyler > escribi?: > > > Who were the people that said Freebsd doesn't get much spam? Can we > > start forwarding these messages to them? > > This is how this thread looks like until now (mine reply not yet > included) in my MUA: > > 16 D Aug 21 Sara Riebe (8,5K) Cloud Security Users List > 17 D Aug 21 Littlefield, Ty (5,1K) `-> > 18 D Aug 21 JD (5,4K) `-> > 19 D Aug 21 Chris Hill (4,2K) `-> > > i.e. ONE spammer, THREE replies to the list. > > matthias > -- > Matthias Apitz | /"\ ASCII Ribbon Campaign: > E-mail: guru@unixarea.de | \ / - No HTML/RTF in E-mail > WWW: http://www.unixarea.de/ | X - No proprietary attachments > phone: +49-176-38902045 | / \ - Respect for open standards > | en.wikipedia.org/wiki/ASCII_Ribbon_Campaign > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org" > > ------------------------------ > > End of freebsd-questions Digest, Vol 690, Issue 2 > ************************************************* > From owner-freebsd-questions@freebsd.org Tue Aug 22 19:26:04 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3DF99DDE4B9 for ; Tue, 22 Aug 2017 19:26:04 +0000 (UTC) (envelope-from ralf.mardorf@rocketmail.com) Received: from nm3-vm4.bullet.mail.ir2.yahoo.com (nm3-vm4.bullet.mail.ir2.yahoo.com [212.82.96.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B148771A35 for ; Tue, 22 Aug 2017 19:26:03 +0000 (UTC) (envelope-from ralf.mardorf@rocketmail.com) Received: from [212.82.98.58] by nm3.bullet.mail.ir2.yahoo.com with NNFMP; 22 Aug 2017 19:23:50 -0000 Received: from [46.228.39.70] by tm11.bullet.mail.ir2.yahoo.com with NNFMP; 22 Aug 2017 19:23:50 -0000 Received: from [127.0.0.1] by smtp107.mail.ir2.yahoo.com with NNFMP; 22 Aug 2017 19:23:50 -0000 X-Yahoo-Newman-Id: 710180.88381.bm@smtp107.mail.ir2.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: nHufbDQVM1nED6zDozw8edNUgxyO2OgThfcbaEB95JNFoNK bGpDid1nczW70KY_3eRGQObHdTI1DPklI4Knt5BVQmOyJzbsYhjU5qc8To_i T9i0RZ_CdqfYh5Owu3rI.RZMQU__Mc3ZwIZDS2ojYSC.wjKuFyNW.lwlEuGO cHEc_yGjvg_CZfmzsQ.w.f_.Q14sDjmKHKs8ww8V2awpI5ysK7GwY595p4f_ 5VzuJUjB2_I5TmtTwK3Zv7mSOTzDYgU_t5kqCjHexODzz9N0_M2Jsaw4UA55 8QhDln57wZpdWzbsgNnEYdvIgV_A7Tp404hxh_Wil6lUbNkhZFbCaPiPBmRd r3iEFhvuu4047DPa.XPlxOYpYdmjPSJfmRLXTxrKENJOrtGvGgiygX2HgbWr tNUa1Il3LjVO.rMexiEKs5u4Qjp3hDl9TIuQwCjlXfEHPYyMEt8tMxJqQGK2 Kfle4XYNP8EzpZNECzeaOhtpCsHsKKkpnHye09KkUgSBpRQJC4neAaSL5igI AKJPd_HLsWT8TEVPDBzKlhvi.wDNtNoU- X-Yahoo-SMTP: BeMCPs2swBABTJ3kAeEiC_hE0mz8jRexLddJfD8pI2j32fOacjBmXg-- Date: Tue, 22 Aug 2017 21:23:49 +0200 From: Ralf Mardorf To: Hugh Wooller Cc: freebsd-questions@freebsd.org Subject: Re: Stop Message-ID: <20170822212349.7e1fc256@archlinux.localdomain> In-Reply-To: References: X-Mailer: Claws Mail 3.15.0git72 (GTK+ 2.24.31; x86_64-arch-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Aug 2017 19:26:04 -0000 On Tue, 22 Aug 2017 19:37:14 +0100, Hugh Wooller wrote: >> To subscribe or unsubscribe via the World Wide Web, visit >> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >> or, via email, send a message with subject or body 'help' to >> freebsd-questions-request@freebsd.org Apart from the wrong command "Stop", don't confuse "freebsd-questions@freebsd.org" with "freebsd-questions-request@freebsd.org" . I'm sure somebody subscribed you against your will, confirmed the subscription using your email account and chose digest to spam you. You are not alone, this happens at least once a year for at least one mailing list. FWIW regarding those basics all mailman mailing lists work in the same way. To follow the link to unsubscribe, you even don't need to know a password, you only need to reply to a confirmation mail to unsubscribe. If you shouldn't receive such an email, check your spam folders first, and if needed get in contact with freebsd-questions-owner@freebsd.org . From owner-freebsd-questions@freebsd.org Tue Aug 22 19:30:54 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C9ADCDDE977 for ; Tue, 22 Aug 2017 19:30:54 +0000 (UTC) (envelope-from ralf.mardorf@rocketmail.com) Received: from nm33-vm8.bullet.mail.ir2.yahoo.com (nm33-vm8.bullet.mail.ir2.yahoo.com [212.82.97.113]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 48F8271CE2 for ; Tue, 22 Aug 2017 19:30:53 +0000 (UTC) (envelope-from ralf.mardorf@rocketmail.com) Received: from [212.82.98.124] by nm33.bullet.mail.ir2.yahoo.com with NNFMP; 22 Aug 2017 19:27:34 -0000 Received: from [46.228.39.90] by tm17.bullet.mail.ir2.yahoo.com with NNFMP; 22 Aug 2017 19:27:34 -0000 Received: from [127.0.0.1] by smtp127.mail.ir2.yahoo.com with NNFMP; 22 Aug 2017 19:27:34 -0000 X-Yahoo-Newman-Id: 273123.31193.bm@smtp127.mail.ir2.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: x7dtxEYVM1kpaILY918LRJUNeDpDKlv_DEb6Lj9mRbVV50l fV8p2LvnUUs9bjHqheAitJz3VI4aoKaFn_KK6UEZ6L0s1vxFYm9tAgV_179. QpVcrz18hAvTi6CJ1yii6AXvStL2.Zb1KtbjU3Xj2zYBAApJwOYKNQiJWdEi bFeaTAiy5hveSI3LdFD_bTeDJNpFlzKP2CBxp2VU1cxLJzwrAdogcPETXi7j RN5gNBXa0DmkS3ew_3rklgDHyA46y38jQW9HmUATgAvzDDsEld_Pv0IQ7Sos U1s4XwE6tBege2rqnXfkKJvycyYQ0skJdqrPjRc5TWhJgZciD_eQ01QfavhB lNVTn04_9axdf0cqxcLzTC3j0Rgf7n0tV1NZKswntJPJHxHM2DLfe8OzISQQ iOIn7Zc5inAEMnFytcc25SVtQ4a4MYly7nMze2cr8PM06MmVDAdHw89TlxU2 ErZnvVjiaYD2Csk_RnDvphU6skbB5GPCfkv1D7ruVUkg0Rx9Am53CFo0vnAW orYnFN_Gj6xuIVARfmO41mI42YiyUT7o- X-Yahoo-SMTP: BeMCPs2swBABTJ3kAeEiC_hE0mz8jRexLddJfD8pI2j32fOacjBmXg-- Date: Tue, 22 Aug 2017 21:27:33 +0200 From: Ralf Mardorf To: Hugh Wooller Cc: freebsd-questions@freebsd.org Subject: Re: Stop Message-ID: <20170822212733.15458fc3@archlinux.localdomain> In-Reply-To: <20170822212349.7e1fc256@archlinux.localdomain> References: <20170822212349.7e1fc256@archlinux.localdomain> X-Mailer: Claws Mail 3.15.0git72 (GTK+ 2.24.31; x86_64-arch-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Aug 2017 19:30:54 -0000 On Tue, 22 Aug 2017 21:23:49 +0200, Ralf Mardorf wrote: >On Tue, 22 Aug 2017 19:37:14 +0100, Hugh Wooller wrote: >>> To subscribe or unsubscribe via the World Wide Web, visit >>> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >>> or, via email, send a message with subject or body 'help' to >>> freebsd-questions-request@freebsd.org > >Apart from the wrong command "Stop", don't confuse >"freebsd-questions@freebsd.org" with >"freebsd-questions-request@freebsd.org" . I'm sure somebody subscribed >you against your will, confirmed the subscription using your email >account and chose digest to spam you. You are not alone, this happens >at least once a year for at least one mailing list. > >FWIW regarding those basics all mailman mailing lists work in the >same way. To follow the link to unsubscribe, you even don't need to >know a password, you only need to reply to a confirmation mail to >unsubscribe. If you shouldn't receive such an email, check your spam >folders first, and if needed get in contact with >freebsd-questions-owner@freebsd.org . PS: If you should know your password, and you only want to "stop" delivery. but stay subscribed, you could send a mail with the body set authenticate your_password set delivery off to ...request@lists... of any mailman mailing list. From owner-freebsd-questions@freebsd.org Tue Aug 22 22:58:17 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7B9E6DEA4BC for ; Tue, 22 Aug 2017 22:58:17 +0000 (UTC) (envelope-from frank@woodcruft.co.uk) Received: from b-painless.mh.aa.net.uk (b-painless.mh.aa.net.uk [81.187.30.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 419707CD50 for ; Tue, 22 Aug 2017 22:58:16 +0000 (UTC) (envelope-from frank@woodcruft.co.uk) Received: from woodcruft.co.uk ([81.187.27.248] helo=lime.woodcruft.co.uk) by b-painless.mh.aa.net.uk with esmtp (Exim 4.84_2) (envelope-from ) id 1dkI7h-0003YQ-Sw; Tue, 22 Aug 2017 23:58:13 +0100 Received: by lime.woodcruft.co.uk (Postfix, from userid 1001) id 711CC7CF9C; Tue, 22 Aug 2017 23:58:07 +0100 (BST) Date: Tue, 22 Aug 2017 23:58:07 +0100 From: Frank Shute To: Ernie Luzar Cc: "freebsd-questions@freebsd.org" Subject: Re: How to block facebook access Message-ID: <20170822225807.GA97221@woodcruft.co.uk> Reply-To: Frank Shute Mail-Followup-To: Ernie Luzar , "freebsd-questions@freebsd.org" References: <59988180.7020301@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Qxx1br4bt0+wmkIi" Content-Disposition: inline In-Reply-To: <59988180.7020301@gmail.com> X-Face: *}~{PHnDTzvXPe'wl_-f%!@+r5; VLhb':*DsX%wEOPg\fDrXWQJf|2\,92"DdS%63t*BHDyQ|OWo@Gfjcd72eaN!4%NE{0]p)ihQ1MyFNtWL X-Operating-System: FreeBSD 11.1-RC1 amd64 X-Organisation: 'woodcruft.co.uk' User-Agent: Mutt/1.8.3 (2017-05-23) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Aug 2017 22:58:17 -0000 --Qxx1br4bt0+wmkIi Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Aug 19, 2017 at 02:20:48PM -0400, Ernie Luzar wrote: > > Hello list; >=20 > Running 11.1 & ipfilter with LAN behind the gateway server. LAN users=20 > are using their work PC's to access facebook during work. >=20 > What method would recommend to block all facebook access? >=20 =20 Hi Ernie, My recommendation would be to set up unbound(8) on your 11.1 machine (or setup another) and configure everything on the LAN to use it for name service. You can then shove some local records in unbound.conf(5), such as: local-zone: "facebook.com" refuse local-zone: "doubleclick.net" refuse =2E.. etc. If you then do a lookup from the LAN: $ host facebook.com Host facebook.com not found: 5(REFUSED) Firefox and Chrome seem to handle that gracefully. To stop any muppets who decide to use alternative name service ie. Google, OpenDNS etc. Configure ipfilter to drop any outgoing to 53 except from your unbound machine. Of course, other benefits are:=20 1). You can cutdown on all sorts of additional superfluous traffic which improves all sorts of things: contention, less bandwidth & quota needed etc. 2). Lookups are a lot quicker if they're cached on the LAN; which your users will appreciate. This all somewhat depends on how computer savvy your users are and how locked down their PCs are. If they know what they're doing then they will find away around it and nothing short of nuking all of Facebook's DCs will stop it. Now there's an idea.... Regards, --=20 Frank --Qxx1br4bt0+wmkIi Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEXRpQZWMUMC1nxphkORvOAPtvi1oFAlmctvsACgkQORvOAPtv i1rRaw/7BEEmBeGqbEEJ0BvrSkctnffD2lJ6ZIBaHBp/owGDFvnj9+FO077rUDl5 oodODgyHETVMkVS/Zu1dpkZip8rDQNsd8Idl77WKjqwqa7bJTWfZv9A67rEkaMyL FYBIVk/FJjvOQVbK5eTlWQkLI4DmDWuXVPPCvDWWle8Gp7+J+RZj2bfn6J16sH6t Z80uInCQCDIWlFWPcAR/XwSaPkyrd+LinJMEu+Acx/qBtIFtQu72tSnBv+KXOyMn ZsWu0vLYKwQIoIcCjx0YA6Z6njRB0LvH7ZjwRUO7/qVfWKYg7cE0xsjRWV/HW1Zb AyQl9w8cVYDaGR5xKSKtNGFIABAVa2Wxslobbau6jVTmvsT9EutkaAnB2SSI0YmC SO4DEM5wns3YXXvuJyBe2EpEqZrdLHO3sPedw1nnXOMxZI5cu0zYNrFpFZZm7Zz/ kLpRDWxqPsW0qOuSwQDr/mwYHvCqa7cu7VA8EQlZG7ZMi9V8WaL5+Ao18f9d+0cV JWWkweB0+BSEfHjXdIhOlZ7LtF9p35EORj/xJYXqZLVIWxwgaId2+CCi1jC4onwU 6wO0MZ1S3NaeULPCcJGUwHUlr0joTEqta7ufgCEkxiK2SOr6wzW8Y3+0ESpEbzXf js/vvsVjodxL5s0/3JYOFhQzLd/1G8utOGqwPZH2QAcz8lDbJq8= =b/Uf -----END PGP SIGNATURE----- --Qxx1br4bt0+wmkIi-- From owner-freebsd-questions@freebsd.org Wed Aug 23 00:08:29 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DCF39DEDF00 for ; Wed, 23 Aug 2017 00:08:29 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: from mail-wm0-x22e.google.com (mail-wm0-x22e.google.com [IPv6:2a00:1450:400c:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 71E397EEC7 for ; Wed, 23 Aug 2017 00:08:29 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: by mail-wm0-x22e.google.com with SMTP id r187so2764631wma.1 for ; Tue, 22 Aug 2017 17:08:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=OJljP/pENPJ+aMh6M+1TNEwhMmu3Nc0FSnMBaee/Wko=; b=b5xMQWzz1ofaH6SGe8RHp7Pop0sWIQyC4bTsfg2JxvEdyGkvf5NsXzJad+Q9LDQQd1 uPAd8uMOCUk3LNwn2aOj3HYtl3LN0hIULLl2sbKWjMTI+bC64/dIfPyMlNMuRDsb3iXI ATLcn+ceZOQcKYOh6OSKsX/I62j25JQS1izdd0TOYe9NkKg7Sb2aVp0NSFFuF6DxKOQo TQbnlWpSwvA6GrFm8ydXhLEH7eVs2rtoIJHs9EIlY2kc8NOp7JubXdPjf1oFVUrOMiYx RpnSluAl9tIMzvNjLhvM8iHfKZQR7crow/CKQhEKwYIEtAG271IjxVzZcb19X1ob+scT TDOg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=OJljP/pENPJ+aMh6M+1TNEwhMmu3Nc0FSnMBaee/Wko=; b=fEvyt30b85OzTKUSJdKcwssrR+JZ2NBBNGjEK43QgecYd843Su9SIYFOqZj14Virfx r7QxnDUyMFbImaM5l4osGYgxb0KJD9pnmfOqQyomIrzKuSGhkmfNMNshs0HZim3rMV0l s3yOZg2094LqMEQ0cA5yi7zObCAESs5ARpE31ZGa/5qj5IiUtr7dnqLG4xeicJhafyFH n9H4ez9ctHY9LGmUV1Gu1nPb81LQfCA1+2r68HoSxsgwdf0vrCmT7DmjgkvVY4ss6Tlr ZpKw2FIG3bRDe6HfVQd0Mppex9Tg9cPdEPm0UlwgzfsOuffG65N2XozPdxVRBtA9qWCW Y1fg== X-Gm-Message-State: AHYfb5hP2lpGjjSxgYePAMVEhkfZMKDJI83CnwHGRUxN6GMPa7o6bzsB apLV/b5S3VYP4EQMVSa6ZE+F88CFMg== X-Received: by 10.80.224.135 with SMTP id f7mr1408234edl.202.1503446907549; Tue, 22 Aug 2017 17:08:27 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.192.138 with HTTP; Tue, 22 Aug 2017 17:08:27 -0700 (PDT) In-Reply-To: <59988180.7020301@gmail.com> References: <59988180.7020301@gmail.com> From: Adam Vande More Date: Tue, 22 Aug 2017 19:08:27 -0500 Message-ID: Subject: Re: How to block facebook access To: Ernie Luzar Cc: "freebsd-questions@freebsd.org" Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Aug 2017 00:08:30 -0000 On Sat, Aug 19, 2017 at 1:20 PM, Ernie Luzar wrote: > Hello list; > > Running 11.1 & ipfilter with LAN behind the gateway server. LAN users are > using their work PC's to access facebook during work. > > What method would recommend to block all facebook access? > Personally I would setup a transparent proxy eg squid and block it using that. DNS solutions are too fragile and something like squid can generate comprehensive reports. -- Adam From owner-freebsd-questions@freebsd.org Wed Aug 23 05:04:08 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B1992DDC3A6 for ; Wed, 23 Aug 2017 05:04:08 +0000 (UTC) (envelope-from bumblebritches57@gmail.com) Received: from mail-lf0-x229.google.com (mail-lf0-x229.google.com [IPv6:2a00:1450:4010:c07::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3AEB52DC3 for ; Wed, 23 Aug 2017 05:04:08 +0000 (UTC) (envelope-from bumblebritches57@gmail.com) Received: by mail-lf0-x229.google.com with SMTP id f7so2574351lfg.4 for ; Tue, 22 Aug 2017 22:04:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=iSutCTYQrrMiXhjXm4rWvMs6rMSUJqN9toJz7cYOfeo=; b=nLbsxbQIS1DMuMrRCbLNqwOXuIsBMRyKwgsco2DpkjSoaFazAnmTuwe4/tahdCsLmv v/B3ZpY8j/WHBSMAkanSp9lEeYAhpzsLZZcyUicyBUIoEILyxcg6jftGxBi3CzzsRJOx l4mZEgBWW44ZbAdM4fKQhqxASDvjGcucmOolr3AUTl6PY+fYo93SpzszvTsum9OjjixF xe2KnyM8d1jq2nj3B+iaZRyTHBBpmPVgpXVFPmkuYoqSmwSMzPYGe+2mY14bnXoSr+IR 7gqC6B4Ypjjv/8kOOVA0Soj2cMqo50/BDqOpCSZQfueVGPIpWac1guvBNuq2xJrkqM28 GI/Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=iSutCTYQrrMiXhjXm4rWvMs6rMSUJqN9toJz7cYOfeo=; b=sMo8tj71lLoFtifdHtm5UJ/lkfxt/NU4KQXTX8lVBSruuXCzlcOW14qZOjb0pziUMV t7ZrZx6FiFhOSAyhh5lPY3iCe9RHoqHxmhd4kvHLjTy9h6kgznz6TBnSYzZycjNF5ULF HP32+nTUJMCXl6ocBA+98ro27+4YjxWmfcF2/Yj5m1SjyNdhg7ZavTlMjPV8xwT88Uzk yei5wGuvz3/BKQcKvgExB8dZIKSNyF54sL3n5cV3CgWxXoLCCLrGl02/nQY6xu4/3nYH 54UjXUG2w0ygYkH9Ey2rN0qtKd/a0zVHWDneSuPwtwg5yXaoBChr//ch/FGUEhvI7Tax D8iA== X-Gm-Message-State: AHYfb5hYdl617OUgAmVKp2+W8uNaeIfAhcgxxyS5qACtwt0Pn9BqmkgH oajXoztShsYlGt9lmkHik8lM/xQyQg== X-Received: by 10.46.20.28 with SMTP id u28mr499978ljd.143.1503464645588; Tue, 22 Aug 2017 22:04:05 -0700 (PDT) MIME-Version: 1.0 Received: by 10.46.87.83 with HTTP; Tue, 22 Aug 2017 22:03:44 -0700 (PDT) From: Marcus Johnson Date: Wed, 23 Aug 2017 01:03:44 -0400 Message-ID: Subject: FreeBSD Make To: freebsd-questions@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Aug 2017 05:04:08 -0000 Does the FreeBSD make utility include support for `:=` or `::=`, and if so, when was it added? From owner-freebsd-questions@freebsd.org Wed Aug 23 11:29:42 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A2578DE487B for ; Wed, 23 Aug 2017 11:29:42 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mailrelay14.qsc.de (mailrelay14.qsc.de [212.99.163.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.antispameurope.com", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 116316C109 for ; Wed, 23 Aug 2017 11:29:40 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de ([213.148.129.14]) by mailrelay14.qsc.de; Wed, 23 Aug 2017 13:29:32 +0200 Received: from r56.edvax.de (port-92-195-85-107.dynamic.qsc.de [92.195.85.107]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id DA1993CBF9; Wed, 23 Aug 2017 13:29:30 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id v7NBTUjD002050; Wed, 23 Aug 2017 13:29:30 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Wed, 23 Aug 2017 13:29:30 +0200 From: Polytropon To: Marcus Johnson Cc: freebsd-questions@freebsd.org Subject: Re: FreeBSD Make Message-Id: <20170823132930.b2457806.freebsd@edvax.de> In-Reply-To: References: Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-cloud-security-sender: freebsd@edvax.de X-cloud-security-recipient: freebsd-questions@freebsd.org X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mailrelay14.qsc.de with 284CA683434 X-cloud-security-connect: mx01.qsc.de[213.148.129.14], TLS=1, IP=213.148.129.14 X-cloud-security: scantime:.1219 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Aug 2017 11:29:42 -0000 On Wed, 23 Aug 2017 01:03:44 -0400, Marcus Johnson wrote: > Does the FreeBSD make utility include support for `:=` or `::=`, and if so, > when was it added? As you can see from the manual "man make", both are currently supported. I know that := (assign with expansion; variable assignment modifier) has been there for many years, and the current make manual lists ::= (assign after substitution; variable modifier) as available, too. You can find the manual online: https://www.freebsd.org/cgi/man.cgi?make(1) Just search for := and ::= to check. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Wed Aug 23 12:29:32 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5880ADE6215 for ; Wed, 23 Aug 2017 12:29:32 +0000 (UTC) (envelope-from eduardo.lemosdesa@gmail.com) Received: from mail-qt0-x233.google.com (mail-qt0-x233.google.com [IPv6:2607:f8b0:400d:c0d::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 145366E07B for ; Wed, 23 Aug 2017 12:29:32 +0000 (UTC) (envelope-from eduardo.lemosdesa@gmail.com) Received: by mail-qt0-x233.google.com with SMTP id 57so6806386qtu.5 for ; Wed, 23 Aug 2017 05:29:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=aBo+kyP9b/y6kjnTNk+rnx+DfLxbEQBcZZeVfgfRbkA=; b=OgPxF9YWLCNV6D5m14Pt0veNXwaTivT47LMcvz3xJcHgSJalRr82LrPQkUe8z68BRN bnjKpI5MsVoSUf3+fl35ueo0ED576RL8QgmhKRxXJC9jx3utWbtsrnR3QUwOr0z5Q/Mt MQJ9Kn2W3UTuTjgqfzYX/RCDDXoGHeohAbHlkqfDQdu55r98kHGnVJ1Tp8SzihC236E1 LVWedrQ1ktPG6wiQqM9YetcPt0mdGnLEOz2iyoDP3QlBCb254EYXDM6+5f/mLcjpk3y+ aPcGf1iAYJ68LK/lZu1MovWLBTOI0QhSdcyMmAXscfQ596AwdBXx/TT5F52clOits8+I oZGw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=aBo+kyP9b/y6kjnTNk+rnx+DfLxbEQBcZZeVfgfRbkA=; b=A6X6fbwGamu2nCYcMsdEhplRLCbchk2O6MGwqAHzCaLw+sc2WT4IxESVDQG4aEiwn0 0GdRzot1hS4QWbqOGnIU7jhUk46toRMvB+UFG1dTMqmm0BZEcRTNwEUEzq/aYmM0NBAQ kUu8x+M68Tusllc9faw/vvm0zDoEGNrm8iLQ6ZSfLLLgM+zVDPy0ZwJtk0W30V3hEmm9 1hY2C9PuMawfxMb2eZQsTJX1FZnX45YT/IaE3rxWjHULGHAJGw/XwjRija0QpRFDCvSz YOUeMfRD9ziWXkKHbbO+CYfQGg0bcnwMsirpIf71hvK+VoIdMY+rTlQp+jozskny9fzF E/5A== X-Gm-Message-State: AHYfb5i2yeezWBflDm52rO+71GptXBjJVtkl0+xZMDqQJSFdD8U7G+Rn MYiwwNAUdRBoPl60pIITvqXMKmeYceHB X-Received: by 10.200.9.43 with SMTP id t40mr3075320qth.237.1503491370838; Wed, 23 Aug 2017 05:29:30 -0700 (PDT) MIME-Version: 1.0 Received: by 10.140.98.135 with HTTP; Wed, 23 Aug 2017 05:29:30 -0700 (PDT) From: Eduardo Lemos de Sa Date: Wed, 23 Aug 2017 09:29:30 -0300 Message-ID: Subject: How to boot from a zfs external disk? To: freebsd-questions@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Aug 2017 12:29:32 -0000 Dear A year ago, I installed 10.3-RELEASE in a internal notebook hard-drive (zfs formated, with pool named "zeeroot"). Now, I moved this hard drive to a case intending use it as a portable FreeBSD machine. In past, this hard disk was a /dev/ada0 device and now, of course, it assumes a name /dev/da0. When I tried to boot, the initial process is ok, but when partitions and filesystem are supposed to be mounted, I got a error and a request to specify from where I want to boot. When I typed "?" to see avaliable options, I got the result ( a photo took from my cell phone): http://www.quimica.ufpr.br/edulsa/fig-boot-externalharddisk.jpg I tried several of them including: zfs:zeeroot Please, could you give some hint about to procedure? Thanks in advance for your attention Eduardo PS.: /dev/ada0 is the actual internal hard disk on the machine wheres I tried to boot. So, it is not a option --=20 Eduardo Lemos de Sa Professor Titular Dep. Quimica da Universidade Federal do Paran=C3=A1 fone: +55(41)3361-3300 fax: +55(41)3361-3186 From owner-freebsd-questions@freebsd.org Wed Aug 23 13:27:01 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id ED4F7DE70E0 for ; Wed, 23 Aug 2017 13:27:01 +0000 (UTC) (envelope-from bsam@passap.ru) Received: from forward101o.mail.yandex.net (forward101o.mail.yandex.net [IPv6:2a02:6b8:0:1a2d::601]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Yandex CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9B66A6FD82 for ; Wed, 23 Aug 2017 13:27:01 +0000 (UTC) (envelope-from bsam@passap.ru) Received: from mxback1j.mail.yandex.net (mxback1j.mail.yandex.net [IPv6:2a02:6b8:0:1619::10a]) by forward101o.mail.yandex.net (Yandex) with ESMTP id 7AC8F1341DB4; Wed, 23 Aug 2017 16:26:57 +0300 (MSK) Received: from smtp1j.mail.yandex.net (smtp1j.mail.yandex.net [2a02:6b8:0:801::ab]) by mxback1j.mail.yandex.net (nwsmtp/Yandex) with ESMTP id GoaZDQqCxs-QnoWYr2E; Wed, 23 Aug 2017 16:26:49 +0300 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=passap.ru; s=mail; t=1503494809; bh=auN/sNzwIyDb31i5gkS1pMCB8DWVvQ9ySmxZvnk6KAA=; h=Subject:To:References:From:Message-ID:Date:In-Reply-To; b=N7lYafpSGju7kTHye/uWqP47bcYZ9spw4AznZB/Z8G2ZoYKZGGjuH3J2CGpIQyQaV l8kojdZnl64QRxykMcaX3BBwur12KLmwDDVUB1n4C/yUt2W0zl/AvX9cNnWc5WJRPj Qzo46Nvk98I5HOxdgISOb23GWv82ONhlHynXaYL8= Received: by smtp1j.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id QutoRU1ZgR-Qm7SC8ti; Wed, 23 Aug 2017 16:26:48 +0300 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=passap.ru; s=mail; t=1503494808; bh=auN/sNzwIyDb31i5gkS1pMCB8DWVvQ9ySmxZvnk6KAA=; h=Subject:To:References:From:Message-ID:Date:In-Reply-To; b=m+F9+N3gVQ6/+mScNs4eg7fKt6rUrAR2mEM+WHpLdKBQ4NfuoLFAnJXijNa/lowRN hnTmTI8UcnZCVZ2nLiEimp2z4TLFlolJPdOGE4YzRmZsWIl3YusH35wKqrMkpvrfXT t9t+8CyVwf1tOaSDo4dVEJ8MJf+1CoHH78ygKfRU= Authentication-Results: smtp1j.mail.yandex.net; dkim=pass header.i=@passap.ru Subject: Re: How to boot from a zfs external disk? To: Eduardo Lemos de Sa , freebsd-questions@freebsd.org References: From: Boris Samorodov Message-ID: <528042d9-0915-8940-753a-3c21fde92d79@passap.ru> Date: Wed, 23 Aug 2017 16:26:48 +0300 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Aug 2017 13:27:02 -0000 23.08.2017 15:29, Eduardo Lemos de Sa пишет: > Dear > > A year ago, I installed 10.3-RELEASE in a internal notebook hard-drive (zfs > formated, with pool named "zeeroot"). Now, I moved this hard drive to a > case intending use it as a portable FreeBSD machine. In past, this hard > disk was a /dev/ada0 device and now, of course, it assumes a name /dev/da0. > When I tried to boot the initial process is ok, but when partitions an > filesystem are supposed to be mounted, I got a error and a request to > specify from where I want to boot. > When I typed "?" to see avaliable options, I got the result ( a photo took > from my cell phone): > > http://www.quimica.ufpr.br/edulsa/fig-boot-externalharddisk.jpg There is no zfs remnants there. Seems you lack zfs kernel loadable modules. You may add following lines to /boot/loader.conf: --- zfs_load="YES" vfs.root.mountfrom="zfs:zeeroot" --- Or do the same from boot command line. > I tried several of them including: > > zfs:zeeroot > > Please, could you give some hint about to procedure? > > Thanks in advance for your attention > > Eduardo > > PS.: /dev/ada0 is the actual internal hard disk on the machine wheres I > tried to boot. So, it is not a option HTH -- WBR, Boris Samorodov (bsam) FreeBSD Committer, http://www.FreeBSD.org The Power To Serve From owner-freebsd-questions@freebsd.org Wed Aug 23 23:16:44 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C33AEDF0989; Wed, 23 Aug 2017 23:16:44 +0000 (UTC) (envelope-from tomek.cedro@gmail.com) Received: from mail-vk0-x233.google.com (mail-vk0-x233.google.com [IPv6:2607:f8b0:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7C83DEC6; Wed, 23 Aug 2017 23:16:44 +0000 (UTC) (envelope-from tomek.cedro@gmail.com) Received: by mail-vk0-x233.google.com with SMTP id s199so5284953vke.1; Wed, 23 Aug 2017 16:16:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:from:date:message-id:subject:to; bh=UVBHVIvfLqTHNtu+HX3JRZKKpwgGOXnNyFUnmDnFv6Y=; b=hExP1rKwIuDHKHqBiTNd1FXhIxYJM8vIaSY3xiC7+425UWj+bvo2j1OJk/y6bOawXt I/DubXCmOie3V+Ib/FOYbj8Si7TSWGGTvF/9BKPnJVEY+rciW/hjMpyITUVY08IoXyXE oJkq/RkgBiDRCCB29PUf7bxLiA4/ENEPDM61huqRzmG7NTDJe40U9DEiVr4luyAh//b1 P95RY2K5JZGhfKhyQqD13DaZgtCiq3AGFKEj2L0JGOzGsHiK/36eAc0M2JNYJ3ppc1eW ivA9n61ubpQGuMMUhMTM61CWkyihb9sH96MVWRSFT8P3M2l4RAwAP8+Oy0lVdTLd92zP GmWg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:from:date:message-id:subject :to; bh=UVBHVIvfLqTHNtu+HX3JRZKKpwgGOXnNyFUnmDnFv6Y=; b=mCK27WnLFiM4YRFENI0BmOiDVs9X4I3933ewbjhugK0Urs7COxkIkaU9NfCX1JNiDH RVUEUh473RzBt1WJ0gr7kQq4VTw6AAVgx9/p8fJcnIEcnAhDVzXqOGfLfIP9cme+gUZy KrytvVC+fiThdKtKcEowH7jpiZQ1LAIGI8p4zCiBEEPuBbn2/SxUo0QOwPgd7WCxs9KD eVa1k/2/jz1j21C6cqFOiN3Z2GjLj5n+NwVSPr38USqWOL0udR6Xgy92MJjXVW/XXa9S 5uOI6jrHtZVm7MsCt0LEaBjgL3AFIkuVKQ2CMfMTDurdpJ9Ec+jkVryyQQ8uOqht2MJD dh9g== X-Gm-Message-State: AHYfb5j0zkpkxAICdrh58cgiEXT3BbjNcD1wsODX6XARwXvlPt2jkSLH jkzdqKfGhsCqCKHqnoGpLSR9GZ1d4NFS X-Received: by 10.31.54.215 with SMTP id d206mr3047299vka.24.1503530203267; Wed, 23 Aug 2017 16:16:43 -0700 (PDT) MIME-Version: 1.0 Sender: tomek.cedro@gmail.com Received: by 10.176.20.17 with HTTP; Wed, 23 Aug 2017 16:16:22 -0700 (PDT) From: Tomasz CEDRO Date: Thu, 24 Aug 2017 01:16:22 +0200 X-Google-Sender-Auth: 05Gib6TNxXZPZ-oTvXcZS23Gngw Message-ID: Subject: FreeBSD's USBDUMP on macOS to dump USB traffic To: weongyo@freebsd.org, Hans Petter Selasky , "freebsd-usb@FreeBSD.org" , FreeBSD Questions Mailing List Content-Type: text/plain; charset="UTF-8" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Aug 2017 23:16:44 -0000 Hello! It looks that I need to dump USB traffic on macOS.. and it looks its not that easy.. there is no usbmon module and the old Mac tools got obsolete long ago. Searching for anything USB related I have found USBDUMP manual page as part of the XCode CommandLineTools.. but there is no binary.. So my question is did anyone make it to dump USB traffic on macOS or knows how to do it without hardware analyzer? Where did the usbdump man page come from on macOS without a binary? Any hints appreciated :-) Tomek -- CeDeROM, SQ7MHZ, http://www.tomek.cedro.info From owner-freebsd-questions@freebsd.org Wed Aug 23 23:59:16 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A70D0DF146C for ; Wed, 23 Aug 2017 23:59:16 +0000 (UTC) (envelope-from greg.marsh@gmail.com) Received: from mail-wm0-x235.google.com (mail-wm0-x235.google.com [IPv6:2a00:1450:400c:c09::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 40E9D1EDD for ; Wed, 23 Aug 2017 23:59:16 +0000 (UTC) (envelope-from greg.marsh@gmail.com) Received: by mail-wm0-x235.google.com with SMTP id x128so9328466wmg.1 for ; Wed, 23 Aug 2017 16:59:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=LFS+ER7UPIETc3LhQ8P5sFpeAi41EbXgZuKlS1L66Qs=; b=KA3LVwKK+vtMp75PScYdVvmPDYFdixYZy8GmK5S4EYXmcBYTAf82YR3A5nk1NE8n15 0O84svSQIhF9d3FR4/cHmC6PNC1tNfSIT6SvzsV5ygP036XfOaep3i8a6j6klqp3kGnR bVvmUZxyN2KuxFtuzBIR5DjmGX1W3UnhFqSEPqeSSJjHGu9lkylb4xegJHtxj6ZkmRbt jM3EYuQ/VKh060hv7bbt3thH/P81XNr908eqHwHEhntM7KvshDuNgGfDqDT1yqsZs3iF 0u7JYKLQstpWi78TOq8pFF2BFbr8ulK4g4/D5xGTIMruetwQBxq1vkZMbQ1ch08OHMxS 26/g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=LFS+ER7UPIETc3LhQ8P5sFpeAi41EbXgZuKlS1L66Qs=; b=RXwnNZgnJO82y5+Y8uWM6BpcGmYffPiE8n5R2Y4wVQRq/IGoT9KBMIDOc2mueSQThI +dTnkTL32ULCjWFh4c7Xn38DPPAmjMkiYTWTT8FKTiYkQDN+IXJGWECwdwcHJNWUkXVX QRdiSrnb/dYPYRe7CvPgXItmh//LOh5moMuQ2s9NZwuUvJaAH1DozoZqivtFAW04+9lW Ug1gclEF3An5XxaVcPq8qHUtVpf+vn8sqvSqy7joYZfbn4zcBwYwJ7w9lO2VeJPsW6+u sMqAxUvqPw6/kCvkz1Dy+GJAcZVEpRS7JLCnML+p+HCIYwzkVT7FJ6yHMsFEZt9LfgNU KzFQ== X-Gm-Message-State: AHYfb5hSnbWYK/FKMvCyEpucBCpMLNqrZx4ItPVDv4TwmM5jTf4pZdQV JsSC/CZdvUYhb5M28x6B44rUKw6G3A== X-Received: by 10.28.149.9 with SMTP id x9mr2715381wmd.100.1503532754429; Wed, 23 Aug 2017 16:59:14 -0700 (PDT) MIME-Version: 1.0 Received: by 10.223.178.10 with HTTP; Wed, 23 Aug 2017 16:58:54 -0700 (PDT) From: Greg Marsh Date: Wed, 23 Aug 2017 19:58:54 -0400 Message-ID: Subject: ZFS question re: deletion during compression To: freebsd-questions@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Aug 2017 23:59:16 -0000 Hello & good day to anyone reading this :) I have a question about how ZFS should react to a very particular situation. This is not life or death nor costing anyone money. I'm just curious. I was gzipping a 1TB file. I accidentally rm'd it as I thought the gzip had finished - it had been about 8 hours. I didn't notice the gzip process still going until after I attempted to delete the file (multiple xterms for the lose). After a couple minutes, the free space hadn't reflected the file deletion. It was only then I realised that gzip was still churning. It continued running for a few more hours. Eventually gzip did finish and left me with a 416gb file, roughly the size I expected. The initial file being a disk image, half of which was empty space. I'm curious if ZFS didn't allow the file to be deleted while gzip was working on it. Merely removing it from the directory listing. Meaning my compressed file is fine. I still have the original file and will take the time to be more careful about my backup when I redo it. I'm just curious as to if ZFS was protecting me from my own impetuousness. I am unzipping the first attempt to see what it looks like, but I don't trust the file regardless. If you've read this far, thank you very much for your time and consideration. If you are a FreeBSD and/or ZFS developer reading this, you have my eternal gratitude and awe towards your generosity and skills. I adore what FreeBSD is capable of and how well it works. I've been a 'digital janitor' for more than half of my life and want people to know just how much I appreciate their expertise. Cheers, Greg From owner-freebsd-questions@freebsd.org Thu Aug 24 02:24:21 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 86FEFDD1402 for ; Thu, 24 Aug 2017 02:24:21 +0000 (UTC) (envelope-from johnl@iecc.com) Received: from miucha.iecc.com (w6.iecc.com [IPv6:2001:470:1f07:1126::4945:4343]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "miucha.iecc.com", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 13863661FC for ; Thu, 24 Aug 2017 02:24:20 +0000 (UTC) (envelope-from johnl@iecc.com) Received: (qmail 13641 invoked from network); 24 Aug 2017 02:24:19 -0000 Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 24 Aug 2017 02:24:19 -0000 Date: 24 Aug 2017 02:23:56 -0000 Message-ID: <20170824022356.19730.qmail@ary.lan> From: "John Levine" To: freebsd-questions@freebsd.org Cc: greg.marsh@gmail.com Subject: Re: ZFS question re: deletion during compression In-Reply-To: Organization: X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 02:24:21 -0000 In article you write: >I'm curious if ZFS didn't allow the file to be deleted while gzip was >working on it. Merely removing it from the directory listing. Meaning my >compressed file is fine. This isn't ZFS, this is the way Unix works. So long as a file has a link in any directory or is open, it's still live. It's only deleted and its space reclaimed when it has no names and is not open. Look at the library routine tmpfile() which returns a FILE pointer to a freshly created file with no name. You can write stuff to it, rewind it, read it, seek around, read or write, just like any other file. It goes away and its space is reclaimed when the it's closed, either explicitly or automatically when your program exits. R's, John From owner-freebsd-questions@freebsd.org Thu Aug 24 09:23:48 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 124E7DDAA37 for ; Thu, 24 Aug 2017 09:23:48 +0000 (UTC) (envelope-from olivier@mauras.ch) Received: from smtp.mauras.ch (smtp.mauras.ch [163.172.199.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id CCD557118B for ; Thu, 24 Aug 2017 09:23:47 +0000 (UTC) (envelope-from olivier@mauras.ch) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mauras.ch; s=20160502; h=Content-Type:Mime-Version:Message-Id:Subject:To:From:Date: Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=pYCzbl22JzROejj5NleD3GY8k9uPA2NeQGya8Wz8PHk=; b=U2UafTFYNKqPhWqatY6Zzqg31G Ms3atNwPUgjUIS2Vp36pF0QcHODjjsfyHTrRWP0bu7MTG5ONZO74W+GP7xaTeErSYkdMCxD8poYF6 JPm4FAJxeTXUVyhOXnBEufeDQ3VuS28HWYU55vT4Q/h7+gNyNwT+mgv7YCIUVSqEcQkg=; Received: from 109-203-40-206.static.jp-net.net ([109.203.40.206] helo=tiptop) by smtp.mauras.ch with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from ) id 1dko34-00066N-Q4 for freebsd-questions@freebsd.org; Thu, 24 Aug 2017 11:03:35 +0200 Date: Thu, 24 Aug 2017 11:03:13 +0200 From: Olivier Mauras To: freebsd-questions@freebsd.org Subject: [Crosspost] Host losing network connectivity when jail is up after 21 minutes Message-Id: <20170824110313.677fac26fcc6537499aeafbb@mauras.ch> X-Mailer: Sylpheed 3.5.1 (GTK+ 2.24.31; x86_64-unknown-linux-gnu) Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="PGP-SHA256"; boundary="Signature=_Thu__24_Aug_2017_11_03_14_+0200_hxq=gzBGgH5V1hkq" X-Authenticated-Sender: olivier@mauras.ch X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 09:23:48 -0000 --Signature=_Thu__24_Aug_2017_11_03_14_+0200_hxq=gzBGgH5V1hkq Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Sorry for crossposting from https://groups.google.com/a/hardenedbsd.org/for= um/#!topic/users/tADY5vVqxew I hope it's acceptable Hello, I have HardenedBSD 11.1 installed as a KVM guest with static route and a si= ngle public IP directly routed to internet by my provider's gateway. I have two jails running on this guest, one running an sshd instance the ot= her one a powerdns-recursor instance. Both jails are on a private subnet NA= Ted by PF and running HBSD 11.1 as well. If any of the jail is running, the host will lose network connectivity afte= r ~21 minutes, and there is no relevant event in the logs - like really not= hing - that could help pinpoint where the issue is coming from.=20 When I stop the jail service, network connectivity gets back immediately. W= hen I start the jail service again, network is still up for the next 21 min= utes... I've tried switching network interface driver from virtio to e1000 without = any success as the behaviour is still the same. Would someone have an idea to help tracking down this issue? Thanks, -O. --Signature=_Thu__24_Aug_2017_11_03_14_+0200_hxq=gzBGgH5V1hkq Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhdCcMcx2wDxNPQTeldDBUc+t03wFAlmellIACgkQldDBUc+t 03xwrQ//d+Y1JgSik26lDIRVDVeAaJ/FtkvHBHyEGvA+GPs3NY1rtIDzpuVgcuHZ 7VcUu+2nzOkcDVhxDhmdZZbUbDfKbTAm9gGU8c+TpmPEawoSd21zYTewEd01y1BO y8tYH2C/PJDTt81FkE/HJwyR6qrwIpsA8GcUeHZkdn9AD1TnK27YWfkqcQ3Aa7A9 ryF9I6XpqkrvW7oLpnmZ66CuW13Y+IVHxq6WbITKkP53xAi1wjI/MGOrEsQb0Zxd x2B44GH36qzsktfvoMU1TYNZ1IO6WkiojXHkpsNVjqap+tjSMGU61kLdZEKEutGz YFr8BcTEG/9hfZJwB02Heyd7iVWKLy+LxGfOREBF/aLwrkhe88SP7XyOC2sTX8jS dJPCILx+I5bsyOD8u+SYS8m4RJwzUH9wv6IyIqdXS85cwA2cRN4TWZ60YxzTv+MA /L/NjUyBOL0Twt1F0KFjEY4GbPyKJbx9RKbyIsm23BibpLN8/96fRyEccSK5Z5bV JS4Oe/F3HtKJfGNc6jcvbAxKQEB+/P6e6HD4K5MwnkBd/X9DBLK0ASeNeMk42vtE m5cciSLDpJ/RmTgKeZKPfAn7wITtWYSbkgKjNd689dSJwX0w8LIDgf8AKpPSAFfX j0FS5IwomSypZydrh1zHdVnWPNHljClOV5kj8QDsYVH7Rdj1HvE= =HWuZ -----END PGP SIGNATURE----- --Signature=_Thu__24_Aug_2017_11_03_14_+0200_hxq=gzBGgH5V1hkq-- From owner-freebsd-questions@freebsd.org Thu Aug 24 09:40:42 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AE298DDB130 for ; Thu, 24 Aug 2017 09:40:42 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from bs1.fjl.org.uk (bs1.fjl.org.uk [84.45.41.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "bs1.fjl.org.uk", Issuer "bs1.fjl.org.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 632E271A14 for ; Thu, 24 Aug 2017 09:40:41 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from [192.168.1.35] (host86-191-18-76.range86-191.btcentralplus.com [86.191.18.76]) (authenticated bits=0) by bs1.fjl.org.uk (8.14.4/8.14.4) with ESMTP id v7O9ecJk072893 for ; Thu, 24 Aug 2017 10:40:38 +0100 (BST) (envelope-from frank2@fjl.co.uk) Subject: Re: ZFS question re: deletion during compression To: freebsd-questions@freebsd.org References: <20170824022356.19730.qmail@ary.lan> From: Frank Leonhardt Message-ID: <8628b50b-68d8-49f8-6f3e-83a372a05884@fjl.co.uk> Date: Thu, 24 Aug 2017 10:40:38 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <20170824022356.19730.qmail@ary.lan> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 09:40:42 -0000 On 24/08/2017 03:23, John Levine wrote: > In article you write: >> I'm curious if ZFS didn't allow the file to be deleted while gzip was >> working on it. Merely removing it from the directory listing. Meaning my >> compressed file is fine. > This isn't ZFS, this is the way Unix works. So long as a file has a > link in any directory or is open, it's still live. It's only deleted > and its space reclaimed when it has no names and is not open. > > Look at the library routine tmpfile() which returns a FILE pointer to > a freshly created file with no name. You can write stuff to it, > rewind it, read it, seek around, read or write, just like any other > file. It goes away and its space is reclaimed when the it's closed, > either explicitly or automatically when your program exits. > WHS and remember that a directory entry is just a pointer to the inode. The inode controls the file. Each inode has a reference count telling it how many directory entries point to it. When this drops to zero, the file is deleted. (There are in-memory and on-disk inodes but I'm keeping it simple). The file is opened using the directory to get the inode number of the file. After this you can do what you like with the directory entry, including deleting it, moving it to another place (on the same FS), rename it, link it. You can also rename/move the output file while it's being written. Windoze heads freak when they come across this. To Microsoft is to Limit. Regards, Frank. From owner-freebsd-questions@freebsd.org Thu Aug 24 09:42:47 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AF689DDB3BB for ; Thu, 24 Aug 2017 09:42:47 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from bs1.fjl.org.uk (bs1.fjl.org.uk [84.45.41.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "bs1.fjl.org.uk", Issuer "bs1.fjl.org.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 57ED571DE6 for ; Thu, 24 Aug 2017 09:42:46 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from [192.168.1.35] (host86-191-18-76.range86-191.btcentralplus.com [86.191.18.76]) (authenticated bits=0) by bs1.fjl.org.uk (8.14.4/8.14.4) with ESMTP id v7O9WrCL071233 for ; Thu, 24 Aug 2017 10:32:53 +0100 (BST) (envelope-from frank2@fjl.co.uk) To: freebsd-questions@freebsd.org From: Frank Leonhardt Subject: VPS that will run xBSD Message-ID: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> Date: Thu, 24 Aug 2017 10:32:53 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 09:42:47 -0000 There are a load of cheap VPS services out there; so cheap I decided to give one a go to run a backup NS. Then when I looked closer they all offer Windoze or some Linux or other. Does anyone know of a VPS provider that can do any OS I like? Or do I need to create my own VPS provider :-) Note that I'm looking for cheap to begin with - bare minimum; enough to run BIND. e.g. OVH charge £2.50/month for minimum spec if you like their choice of Linux (I don't). Thanks, Frank. From owner-freebsd-questions@freebsd.org Thu Aug 24 09:44:19 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 47026DDB4B2 for ; Thu, 24 Aug 2017 09:44:19 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from bs1.fjl.org.uk (bs1.fjl.org.uk [84.45.41.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "bs1.fjl.org.uk", Issuer "bs1.fjl.org.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id EDB8B71ECC for ; Thu, 24 Aug 2017 09:44:18 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from [192.168.1.35] (host86-191-18-76.range86-191.btcentralplus.com [86.191.18.76]) (authenticated bits=0) by bs1.fjl.org.uk (8.14.4/8.14.4) with ESMTP id v7O9iGru073701 for ; Thu, 24 Aug 2017 10:44:16 +0100 (BST) (envelope-from frank2@fjl.co.uk) Subject: Re: Error compiling a qt5 application To: freebsd-questions@freebsd.org References: <20170821201746.59796aba@Papi> From: Frank Leonhardt Message-ID: <76784b86-4550-2ef9-21b1-5fc178e326a6@fjl.co.uk> Date: Thu, 24 Aug 2017 10:44:16 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <20170821201746.59796aba@Papi> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 09:44:19 -0000 Can't fix this but I had grief with a qt5 not compiling (virtualbox IIRC), so switched to qt4 and everything was fine. QT not really my bag. On 22/08/2017 00:17, Mario Lobo wrote: > Hi there; > > I'm trying to compile a qt5 application. > > OS: reeBSD 11.1-STABLE #0 r321652: Sat Jul 29 10:49:43 BRT 2017 > > clang -v > clang version 4.0.1 (tags/RELEASE_401/final) > Target: x86_64-unknown-freebsd11.1 > Thread model: posix > InstalledDir: /usr/local/llvm40/bin > > When I compile, I get this: > > Compiling C++... > In file included from ../../../../../contrib/gtqtc/gtqtc1.cpp:48: > In file included from ../../../../../contrib/gtqtc/gtqtc.h:53: > In file included from /usr/local/include/qt5/QtCore/QThread:1: > In file included from /usr/local/include/qt5/QtCore/qthread.h:43: > In file included from /usr/local/include/qt5/QtCore/qobject.h:46: > In file included from /usr/local/include/qt5/QtCore/qobjectdefs.h:48: > In file included from /usr/local/include/qt5/QtCore/qnamespace.h:43: > In file included from /usr/local/include/qt5/QtCore/qglobal.h:83: > /usr/local/include/qt5/QtCore/qcompilerdetection.h:563:6: error: Qt > requires a C++11 compiler and yours does not seem to be that. # > error Qt requires a C++11 compiler and yours does not seem to be that. > > I tried this in make.conf: > > CC=clang > CXX=clang++ > CXXFLAGS+=-std=c++11 > > and export CXXFLAGS=-std=c++11 > > and nothing seems to work. > > It seems to me that my clang is new enough to support that standard. > > What am i missing here? > > Thanks, > From owner-freebsd-questions@freebsd.org Thu Aug 24 10:05:30 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 98244DDBA7E for ; Thu, 24 Aug 2017 10:05:30 +0000 (UTC) (envelope-from tom.browder@gmail.com) Received: from mail-lf0-x22b.google.com (mail-lf0-x22b.google.com [IPv6:2a00:1450:4010:c07::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1F12372708 for ; Thu, 24 Aug 2017 10:05:30 +0000 (UTC) (envelope-from tom.browder@gmail.com) Received: by mail-lf0-x22b.google.com with SMTP id i188so702184lfg.2 for ; Thu, 24 Aug 2017 03:05:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=jCv9YfFtWjj6MepdlC/uQeJIypBCJS9VvuVQGKZO7MQ=; b=neJTft4VBuyjXCYs0bgqAtreHw/+rMTQsVe7xYbCLHiWPd9FFDnwKR4mvGqy76X5Tk imtihB/tOlB+DPOhaeBbP1FJWM6JFbu9Z+fJqK35LEOePDukb8Q1/IhmjdXJuVxSCLXa AchTRvObBJisZjPQqJ35LTurUD/MWZNcR9iUWKzudBc0MGBEG4Wos8yGroI52hKXYdYx Apn5O4JvMfjwXe2byPEj6JloUYefbYG/TFUBd+3TX3qfBSxEn9XFaYrw/k/WJZoIyAx9 6hE83rMcNFhJCrrm2AV+v3MENEdyzRntaTyaFY8payrNaLPGrYleOYw9rck4qQzMbgNW Zf9A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=jCv9YfFtWjj6MepdlC/uQeJIypBCJS9VvuVQGKZO7MQ=; b=eTPZAAATFi5mM1Now6m34mwd5RIg8H1prmcz0S5bbFT2T10loiWoHadErNotEQdA1n mmeEIl91qiU+OB3KF8yb5Qa3EilwwhU8JdPiRXuiEQAWuUfeX2DFIQC4fSU4XsSTQYIA heJxe823Xxf569RGW8D14+PzB5SB9stSTKOXAE/Gs9VlH6266TSWqx8jwIEMZ+n8J9dV lkHuNUl/VwkM/ME4AxVgd4dNZbg93nUvh6go+ov0NimgZb2Pp8C1b2Z3KHKe4G6hIFNj m5kxabiF51duoFooexWb0pVr0vCpc6N0Sa5fIuoR3pJe/2G9ek5z/db/9CIGArSFsR87 /5Ew== X-Gm-Message-State: AHYfb5jVbHWKYmBAlGtceU8krI334ZjazCqSk4uer9meeBvaPUBz+bkJ 2muyiD4ycfLUrH+BsItTnLD7hKSpqbMz X-Received: by 10.25.168.3 with SMTP id r3mr2243941lfe.111.1503569128152; Thu, 24 Aug 2017 03:05:28 -0700 (PDT) MIME-Version: 1.0 References: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> In-Reply-To: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> From: Tom Browder Date: Thu, 24 Aug 2017 10:05:17 +0000 Message-ID: Subject: Re: VPS that will run xBSD To: Frank Leonhardt , freebsd-questions@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 10:05:30 -0000 On Thu, Aug 24, 2017 at 04:42 Frank Leonhardt wrote: > There are a load of cheap VPS services out there; so cheap I decided to > give one a go to run a backup NS. > Try vultr.com or digitalocean.com. -Tom From owner-freebsd-questions@freebsd.org Thu Aug 24 10:10:25 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E202CDDBBF9 for ; Thu, 24 Aug 2017 10:10:25 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from bs1.fjl.org.uk (bs1.fjl.org.uk [84.45.41.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "bs1.fjl.org.uk", Issuer "bs1.fjl.org.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 605A272840 for ; Thu, 24 Aug 2017 10:10:25 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from [192.168.1.35] (host86-191-18-76.range86-191.btcentralplus.com [86.191.18.76]) (authenticated bits=0) by bs1.fjl.org.uk (8.14.4/8.14.4) with ESMTP id v7OAAN9v079355 for ; Thu, 24 Aug 2017 11:10:23 +0100 (BST) (envelope-from frank2@fjl.co.uk) Subject: Re: FreeBSD 11.1 xen trying to create linux domU instance To: freebsd-questions@freebsd.org References: From: Frank Leonhardt Message-ID: Date: Thu, 24 Aug 2017 11:10:23 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 10:10:26 -0000 Hi James, As you might have discovered, the handbook article is wrong on a few points (mainly omissions I think). Hang in there; it does actually work. I'm running Windoze using it perfectly well. First question - I thought that too. Every time it boots you look to check the setting and it's turned of "off", right? Well it isn't. Unless you look. It boots the xen kernel anyway if you just leave it. I think the 4th stuff loads defaults when you open that options menu. The handbook tells you to create a ZFS zvol for the virtual HD. I'm not keen on that idea for all sorts of reasons (mainly CoW) and use a file instead. I can't see anything wrong with your config assuming the specific stuff is correct. To help in debugging, comment out (with a #) the vif line. You DON'T need this for the VNC viewer to connect. (And you may have noticed that the autobridge stuff in rc.conf doesn't play anyway). The disk definition is very flexible. I think your way of doing it is fine, except that you're re-specifying some default values for no reason. xl barfs at the slightest problem, so the syntax is probably good. The next I'd try would be to use a straightforward file instead of the zvol. I just create them using dd to the size I want and it "just works". One non-obvous thing is that "hda" means Hard Disk 'A'. hdc means C. What about hdb? It doesn't matter if you leave a gap, but unless you realise this you'll have chaos and confusion when to define extra disks. You ARE running xl as root, aren't you? Regards, Frank. On 18/08/2017 23:34, James E. Pace wrote: > Hi, > > I have a couple questions about running xen with FreeBSD 11.1 (amd64) as > Dom0. I am pretty new to this whole concept, so it is very likely I am not > understanding something. > > First, each time I boot the (physical) system, I have to tell the FreeBSD > boot loader to turn on xen. (That is, hit 6 to set options, then 7 to > enable xen, then 1 to return to the main menu, then 1 to boot). Is there a > way to make this the default behavior? > > Second, I want to create a Linux domU instance. I have been successful in > getting a FreeBSD 11.1 domU running, but changing that config file to use a > Linux CD doesn't boot (or crashes on boot?). > > Here's my xen config file: > > builder = "hvm" > name = "xen-ubuntu" > memory = 1024 > vcpus = 1 > vif = [ 'bridge=bridge0' ] > disk = [ > '/dev/zvol/pool/xen-ubuntu,,hda,rw', > '/pool/Downloads/ubuntu-15.10-desktop-amd64.iso,raw,hdc:cdrom,r' > ] > vnc = 1 > vnclisten = "0.0.0.0" > serial = "pty" > > I created the backing filesystem with: > zfs create -V20G -o volmode=dev pool/xen-ubuntu > > "xl create foo.cfg" returns fine, and "xl list" shows the instance, but the > running instance (in vncviewer) eventually spits out: > > 4.130084] vbd vbd-5632: 19 xenbus_dev_probe on device/vbd/5632 > 4.130956] vbd vbd-5632: failed to write error node for device > device/vbd/5632 (19 xenbus_dev_probe on device/vbd/5632) > > I suspect the linux kernel isn't booting because it can't figure out > something about the zfs volume. But I'm not sure, and I don't know how to > work around it. > > Google has been pretty unhelpful... > > Thanks for help, tips, or pointers to info! > > James > From owner-freebsd-questions@freebsd.org Thu Aug 24 10:19:23 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9023CDDBF73 for ; Thu, 24 Aug 2017 10:19:23 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from bs1.fjl.org.uk (bs1.fjl.org.uk [84.45.41.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "bs1.fjl.org.uk", Issuer "bs1.fjl.org.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 2BC2372C2F for ; Thu, 24 Aug 2017 10:19:22 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from [192.168.1.35] (host86-191-18-76.range86-191.btcentralplus.com [86.191.18.76]) (authenticated bits=0) by bs1.fjl.org.uk (8.14.4/8.14.4) with ESMTP id v7OAJKFk081251; Thu, 24 Aug 2017 11:19:20 +0100 (BST) (envelope-from frank2@fjl.co.uk) Subject: Re: VPS that will run xBSD To: Tom Browder , freebsd-questions@freebsd.org References: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> From: Frank Leonhardt Message-ID: <780f7ea4-7ecf-d47d-abb5-d2272f99540f@fjl.co.uk> Date: Thu, 24 Aug 2017 11:19:20 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 10:19:23 -0000 On 24/08/2017 11:05, Tom Browder wrote: > > On Thu, Aug 24, 2017 at 04:42 Frank Leonhardt > wrote: > > There are a load of cheap VPS services out there; so cheap I > decided to > give one a go to run a backup NS. > > > Try vultr.com or digitalocean.com > . > > Thanks! just what I was looking for (I think). From owner-freebsd-questions@freebsd.org Thu Aug 24 10:41:27 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 77FD0DDC64B for ; Thu, 24 Aug 2017 10:41:27 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from bs1.fjl.org.uk (bs1.fjl.org.uk [84.45.41.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "bs1.fjl.org.uk", Issuer "bs1.fjl.org.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 1CE63734B0 for ; Thu, 24 Aug 2017 10:41:26 +0000 (UTC) (envelope-from frank2@fjl.co.uk) Received: from [192.168.1.35] (host86-191-18-76.range86-191.btcentralplus.com [86.191.18.76]) (authenticated bits=0) by bs1.fjl.org.uk (8.14.4/8.14.4) with ESMTP id v7OAfKAA085559 for ; Thu, 24 Aug 2017 11:41:21 +0100 (BST) (envelope-from frank2@fjl.co.uk) Subject: Re: Any reason to prefer 11.1 over 10.3 ? To: freebsd-questions@freebsd.org References: From: Frank Leonhardt Message-ID: Date: Thu, 24 Aug 2017 11:41:20 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 10:41:27 -0000 On 18/08/2017 08:35, Manish Jain wrote: > Hi, > > I am going to have to install FreeBSD again on a box on which 10.3R > works well. Is there any reason I should prefer 11.1R ? > To state the obvious, it depends if any of the new features are useful. I didn't like 10.x so stuck with 9.4 for a long time. The main things I like about 11.1 are the improved ZFS, including zfsd (a bit love-hate with that), compressed ARC, lz4. As Shane pointed out, virtualisation has improved and you can run Xen Dom0. These are both a big plus for me, but I do weird stuff in my spare time. Regards, Frank. From owner-freebsd-questions@freebsd.org Thu Aug 24 13:25:21 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 30AE2DDF5C9 for ; Thu, 24 Aug 2017 13:25:21 +0000 (UTC) (envelope-from mgamsjager@gmail.com) Received: from mail-ua0-x22a.google.com (mail-ua0-x22a.google.com [IPv6:2607:f8b0:400c:c08::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DC5CB77B0C for ; Thu, 24 Aug 2017 13:25:20 +0000 (UTC) (envelope-from mgamsjager@gmail.com) Received: by mail-ua0-x22a.google.com with SMTP id g36so2085335uaa.0 for ; Thu, 24 Aug 2017 06:25:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=xG4SOOqhA+VRRUs71wdkg/3FoUPldNKs7Vf/Aw8MWyw=; b=t1IWRF06z79DZxGBixQ2RJBh9GM12MF/EsdvmQ+8gmvocmN2/QRgx0ZZOc2ohaAr+d 6QqFu4QjDqNW4XrqrR1cWCL7VjfsHSzkqta/3xTk6k4LuL9l1zblZGXSi7ZANdX7jZ7C XI+BRCZnwHkFPogwxBM95rESBRsUPRuN6FdJ75xDm/IFil6V2w4dqbom+az46cZ3H4wc ydCmzInMWWsqw7y2nREgdag/p2EN1ZnopD3we2YpCmi0lQq8zFOdPOPEMRiVTpcQnlTH t9Viw/HqV98ErWdbWmXQr6IiDsu7GaMyf0aAf+xckTjTCzNzXh8GRz04284S/YyGQIFm XLqA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=xG4SOOqhA+VRRUs71wdkg/3FoUPldNKs7Vf/Aw8MWyw=; b=lnMyEsh0rJq+UOuuf+L74j3ankQuWBJPMqwT6SSlFToST15DLByHI9Md42lmhISbA1 5S7KM6iMgUFGz7Mt98YcetIqJq/S/OQ3JmwLguWuqTieGHKSJweVkMdoiAOKa+3a4CrJ 8k2sgkI0QFdQx2PQxXdZTMElZsNK91UgzI6mCkyxi52dOIl2ve5oeRBtMVNHrZC8GKbA t3SwFPb3hcimwywCZKGBsdU1ONfM9efaUzlVWEWlNeGcOCsMxX2VY8rLvBF+GKoBO+lG GbNJUzNE6oen3nau0Qr76vOc46OAfRnXBIYpaE84gVvQQW+7UFE3guWCzNA1yqP/ZNX7 cNHw== X-Gm-Message-State: AHYfb5iA34ABFkSqb6Zv49wE19sllCmpu1QiXXxqp6pGFaRu+WkbnREH lCmpogj6FLRqhGhOPwGjtv9q+go4juIC X-Received: by 10.176.80.193 with SMTP id d1mr4730450uaa.124.1503581119676; Thu, 24 Aug 2017 06:25:19 -0700 (PDT) MIME-Version: 1.0 Received: by 10.176.75.97 with HTTP; Thu, 24 Aug 2017 06:24:49 -0700 (PDT) In-Reply-To: <780f7ea4-7ecf-d47d-abb5-d2272f99540f@fjl.co.uk> References: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> <780f7ea4-7ecf-d47d-abb5-d2272f99540f@fjl.co.uk> From: Matthias Gamsjager Date: Thu, 24 Aug 2017 15:24:49 +0200 Message-ID: Subject: Re: VPS that will run xBSD To: "freebsd-questions@freebsd.org" Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 13:25:21 -0000 transip.nl On 24 August 2017 at 12:19, Frank Leonhardt wrote: > On 24/08/2017 11:05, Tom Browder wrote: > >> >> On Thu, Aug 24, 2017 at 04:42 Frank Leonhardt > frank2@fjl.co.uk>> wrote: >> >> There are a load of cheap VPS services out there; so cheap I >> decided to >> give one a go to run a backup NS. >> >> >> Try vultr.com or digitalocean.com < >> http://digitalocean.com>. >> >> >> > Thanks! just what I was looking for (I think). > > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe > @freebsd.org" > From owner-freebsd-questions@freebsd.org Thu Aug 24 13:25:44 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9F417DDF631 for ; Thu, 24 Aug 2017 13:25:44 +0000 (UTC) (envelope-from edgar@pettijohn-web.com) Received: from mail.pettijohn-web.com (pettijohn-web.com [108.61.222.55]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.pettijohn-web.com", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 54D4077BB0 for ; Thu, 24 Aug 2017 13:25:43 +0000 (UTC) (envelope-from edgar@pettijohn-web.com) Received: from [10.67.118.226] (mobile-107-107-188-76.mycingular.net [107.107.188.76]) by mail.pettijohn-web.com (OpenSMTPD) with ESMTPSA id a74d4c7f TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO; Thu, 24 Aug 2017 08:25:35 -0500 (CDT) Date: Thu, 24 Aug 2017 08:25:35 -0500 From: edgar To: Frank Leonhardt , freebsd-questions Message-ID: <75a3b043-11ad-4137-86fa-48f99db34795@localhost> In-Reply-To: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> Subject: Re: VPS that will run xBSD MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 13:25:44 -0000 =20 =20 I use vultr. They offer freebsd as an auto install. Don't do it. Mount t= he iso and run through the installation yourself. =20 =20 =20 =20 =20 =20 =20 > =20 > On Aug 24, 2017 at 4:32 AM, <=46rank Leonhardt> wrote: > =20 > =20 > There are a load of cheap VPS services out there; so cheap I decided t= o give one a go to run a backup NS. Then when I looked closer they all of= fer Windoze or some Linux or other. Does anyone know of a VPS provider th= at can do any OS I like=3F Or do I need to create my own VPS provider :-)= Note that I'm looking for cheap to begin with - bare minimum; enough to = run BIND. e.g. OVH charge =C2=A32.50/month for minimum spec if you like t= heir choice of Linux (I don't). Thanks, =46rank. =5F=5F=5F=5F=5F=5F=5F=5F= =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F= =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F freebsd-questions=40freebsd.or= g mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-questio= ns To unsubscribe, send any mail to =22freebsd-questions-unsubscribe=40fr= eebsd.org=22 =20 > =20 From owner-freebsd-questions@freebsd.org Thu Aug 24 13:33:21 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0B443DDFA1F for ; Thu, 24 Aug 2017 13:33:21 +0000 (UTC) (envelope-from srs0=yiec=72=sigsegv.be=kristof@codepro.be) Received: from venus.codepro.be (venus.codepro.be [IPv6:2a01:4f8:162:1127::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.codepro.be", Issuer "Gandi Standard SSL CA 2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id B87257C262 for ; Thu, 24 Aug 2017 13:33:20 +0000 (UTC) (envelope-from srs0=yiec=72=sigsegv.be=kristof@codepro.be) Received: from [169.254.194.118] (vega.codepro.be [IPv6:2a01:4f8:162:1127::3]) (Authenticated sender: kp) by venus.codepro.be (Postfix) with ESMTPSA id 4BEE536972; Thu, 24 Aug 2017 15:33:17 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sigsegv.be; s=mail; t=1503581597; bh=rYNAksH27JNVbuI29hQmS1gGTWVWsSSIaIiZL5oBVPw=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=dyGXBNjKualY9YsPfxaP+3sh00frJld22ZrJOHejQMHPB9kZnt/UuF8mwT1pcHFYk rsd3iZp65qhPEn75NDj/1LD5dNb4+cuZh6CNDTwXTeOxlf9fwIjOuzVTI4ayTQuPrS mZCg5WQv+dWb9abVFQwu5KIm5pMo4VovJqNC8B3E= From: "Kristof Provost" To: "Frank Leonhardt" Cc: freebsd-questions@freebsd.org Subject: Re: VPS that will run xBSD Date: Thu, 24 Aug 2017 15:33:58 +0200 Message-ID: <031E40A6-0C53-47B2-BA86-E9932E02000B@sigsegv.be> In-Reply-To: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> References: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (2.0BETAr6090) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 13:33:21 -0000 On 24 Aug 2017, at 11:32, Frank Leonhardt wrote: > There are a load of cheap VPS services out there; so cheap I decided > to give one a go to run a backup NS. > > Then when I looked closer they all offer Windoze or some Linux or > other. > > Does anyone know of a VPS provider that can do any OS I like? Or do I > need to create my own VPS provider :-) > RootBSD (https://www.rootbsd.net) are nice people. I use Gandi (https://www.gandi.net/) myself. Regards, Kristof From owner-freebsd-questions@freebsd.org Thu Aug 24 14:34:06 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7FBE6DE0DF5 for ; Thu, 24 Aug 2017 14:34:06 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 065C57F062 for ; Thu, 24 Aug 2017 14:34:05 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id v7OEXTNk069141; Fri, 25 Aug 2017 00:33:29 +1000 (EST) (envelope-from smithi@nimnet.asn.au) Date: Fri, 25 Aug 2017 00:33:29 +1000 (EST) From: Ian Smith To: Ralf Mardorf cc: freebsd-questions@freebsd.org Subject: Re: Stop In-Reply-To: Message-ID: <20170825001959.N76324@sola.nimnet.asn.au> References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 14:34:06 -0000 In freebsd-questions Digest, Vol 690, Issue 3, Message: 2 On Tue, 22 Aug 2017 21:23:49 +0200 Ralf Mardorf wrote: > On Tue, 22 Aug 2017 19:37:14 +0100, Hugh Wooller wrote: > >> To subscribe or unsubscribe via the World Wide Web, visit > >> https://lists.freebsd.org/mailman/listinfo/freebsd-questions > >> or, via email, send a message with subject or body 'help' to > >> freebsd-questions-request@freebsd.org Thanks heaps for chomping the whole earler digest, Rolf. > Apart from the wrong command "Stop", don't confuse > "freebsd-questions@freebsd.org" with > "freebsd-questions-request@freebsd.org" . I'm sure somebody subscribed > you against your will, confirmed the subscription using your email > account and chose digest to spam you. You are not alone, this happens > at least once a year for at least one mailing list. I don't see how someone could confirm the subscription using the OP's email address, without having read/write access to that mail account? > FWIW regarding those basics all mailman mailing lists work in the > same way. To follow the link to unsubscribe, you even don't need to know > a password, you only need to reply to a confirmation mail to > unsubscribe. If you shouldn't receive such an email, check your spam > folders first, and if needed get in contact with > freebsd-questions-owner@freebsd.org . All good advice. cheers, Ian From owner-freebsd-questions@freebsd.org Thu Aug 24 15:28:34 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2D2DBDE1D92 for ; Thu, 24 Aug 2017 15:28:34 +0000 (UTC) (envelope-from ralf.mardorf@rocketmail.com) Received: from nm39-vm6.bullet.mail.ir2.yahoo.com (nm39-vm6.bullet.mail.ir2.yahoo.com [212.82.97.165]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 9B0B580819 for ; Thu, 24 Aug 2017 15:28:32 +0000 (UTC) (envelope-from ralf.mardorf@rocketmail.com) Received: from [212.82.98.126] by nm39.bullet.mail.ir2.yahoo.com with NNFMP; 24 Aug 2017 15:26:04 -0000 Received: from [46.228.39.93] by tm19.bullet.mail.ir2.yahoo.com with NNFMP; 24 Aug 2017 15:26:04 -0000 Received: from [127.0.0.1] by smtp130.mail.ir2.yahoo.com with NNFMP; 24 Aug 2017 15:26:04 -0000 X-Yahoo-Newman-Id: 752809.12411.bm@smtp130.mail.ir2.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: aQNaoTYVM1kPw0S_WpjfM9Tka5HiRZ_0wCFOg9fsy4Aju6o .onmST7H1L49aVFgHSc5XwpStIA52jQiQBQR4MQsfY7qQCLJyuv8zgil2ltI Gf8eRvIHt35EEWcU3ZXjhGAHPKoZFYyJT5jcouBsNUcGKl1s8bwDrKTPrm_u R261C3ZExcfQv26_FsX_i7nSDVLZ18IjsVtOzg3X8krIZDFEybdnBUkFHp1N i5tS7Obcz0KbJ1HF3VQ.JIvXgQ_1W.9nvnD0LRy9SyUSY3XqkJaDOd0JLICK g.LpdNzgtpoF1a8g8e4I6tObLqJQqXvJ0AV..7Uee5jloG6FAt4OlDv6fDL9 O8ErNRiPQO8O.o3hLAkSBikXzwg0LG8O9BSzBGQqeYyI1XqFfJtyTsaECPJN D1dPu6k3zF6HIceo04U_fGML0mNxzX6ZMArBdKDmo4BQ2UZp5M6NeXn9ETE2 fjTOmZD4dqAjnG.xBiUSjHJmuvhabOKBKzc34fI6cFCoSR2eczQ5KtO8VZJm Hy1EiKPWTsiGKAUB_qb.e6JPafunjLqY- X-Yahoo-SMTP: BeMCPs2swBABTJ3kAeEiC_hE0mz8jRexLddJfD8pI2j32fOacjBmXg-- Date: Thu, 24 Aug 2017 17:26:03 +0200 From: Ralf Mardorf To: freebsd-questions@freebsd.org Subject: Re: Stop Message-ID: <20170824172603.731f230d@archlinux.localdomain> In-Reply-To: <20170825001959.N76324@sola.nimnet.asn.au> References: <20170825001959.N76324@sola.nimnet.asn.au> X-Mailer: Claws Mail 3.15.0git72 (GTK+ 2.24.31; x86_64-arch-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 15:28:34 -0000 On Fri, 25 Aug 2017 00:33:29 +1000 (EST), Ian Smith wrote: >I don't see how someone could confirm the subscription using the OP's >email address, without having read/write access to that mail account? Neither do I, but I'm a subscriber of several mailman mailing lists were for mysterious reasons this happens at least one time a year. It happens for at least 6 times a year that somebody does confuse the address to post a message to all the list members, with the "request" address. It doesn't help that all list mails have a footer, or start digest mails with short, but complete explanations or that MUAs provide a menu entry for mailing lists, so that nobody needs to care about the headers or anything else, but get all options provided by the GUI, for direct mouse usage. For the mail I'm replying at the moment Claws provides the menu Message > Mailing-List with the options Post Help Subscribe Unsubscribe View archive Just "Contact owner" is shadowed. :) From owner-freebsd-questions@freebsd.org Thu Aug 24 15:32:25 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8199CDE1FE8 for ; Thu, 24 Aug 2017 15:32:25 +0000 (UTC) (envelope-from yuripv@gmx.com) Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DDAFC80B8B for ; Thu, 24 Aug 2017 15:32:24 +0000 (UTC) (envelope-from yuripv@gmx.com) Received: from [192.168.1.2] ([37.78.8.110]) by mail.gmx.com (mrgmx002 [212.227.17.184]) with ESMTPSA (Nemesis) id 0LrNIC-1dYZq82G32-0135wx for ; Thu, 24 Aug 2017 17:32:17 +0200 Subject: Re: Stop To: freebsd-questions@freebsd.org References: <20170825001959.N76324@sola.nimnet.asn.au> <20170824172603.731f230d@archlinux.localdomain> From: Yuri Pankov Message-ID: <41219041-155a-1e22-5c2e-67281eac7811@gmx.com> Date: Thu, 24 Aug 2017 18:32:18 +0300 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <20170824172603.731f230d@archlinux.localdomain> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:tJvpixjyE8uSL7OU9Wo4Wnh2kvsJAIb5JvNBM9KdCpATpiz34kq 36EOZcksztGRrAKjGrlPGV9UEmAxoEcb0cLMqmEnf8K83kZDaPOtLX8kJthjWnIJmgxQNyM D5AK7F5wXvJR1QgrWISgCuR8ihTVFFJ0V3dZzh8nhXRJ1C4Rr1D5rNiTn2VIyGds1CSJCwA fvEW2FTLuElh+joSgVppQ== X-UI-Out-Filterresults: notjunk:1;V01:K0:U/xjWNfXpGw=:/NHCRRWqAQweo3/2tWz8XN 932Aq3VsFRmYvAUa48FLbMQrtdknLGKzX0ZrDP2ZqKLremERzC1j2dW2iVhlzWMsyqBTCRC1s H4hkj1Q7JuPYfn5F98JIr7AZxPh8iTKqI6eR1g/r25cYrkEDxmFbQH516Mvl6lLg5WlLmq1IA a9sNWOMssXNCGQhyXdtSnbBGtSDKuJphqBJbwFm47TSNZW4GSef1VAgDGh5l0YTSJIjQwff5x b5gcWEeg4pJ+ovB63FrDAIop/fpvRuO1uW4NGK/jFEeiKx80AHBrsHVyFTjt7Oc6Q2rZ0R4Ze /jjTNB5A3RanWkjmxH94kUtRKYF2X2HaqMopL7T4WmFpdpDmQykElqEpiTSEZ5gph8Y/USlL4 XqnoTq7kmYYQR+tWbYLn1LcL/Wq/X8TRa2tbut1GSRtSJPzlxcKCa9LY7ODRFHfBzJEqP+pEM b9aisseKP4TyiKPQzrFCZRgRtGjk5xEc9JBoAl3ZziU1AfFLaCpvlZRpGE1RlDNYNMsU5XEg/ 2XuOjOdf1JpCMpqE/EUOQW5JBp11cJAqbdAKnL28TliLew7FfKkn2TaQ2QR8Ri+M7TiwW1R7C FDiubh6MzlMDL6NzXf3CUXr/B6jkc3XFQ9NUvuWboDXVHG3WT6RPEeKg3q1kxvn4wFPO4LshL LtA9cLVARIdmWNTIv2xSIakqS2HOAJkcYpi8keR32cg77T/oboG2ypxQfr+Mu583WqqvIVNoO CL7VNyBPLJSH1gCryCAS0PKFA619kMAe+rFBTLlNd2oEJivYvui5fmk0DpY41vxXT/ntxnXwT VIwDKjnQnbJH+qb93abU3Y3IHcX5NNL36GM1qpjCgxXrdiumGs= X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 15:32:25 -0000 On Thu, 24 Aug 2017 17:26:03 +0200, Ralf Mardorf Via Freebsd-questions wrote: > On Fri, 25 Aug 2017 00:33:29 +1000 (EST), Ian Smith wrote: >> I don't see how someone could confirm the subscription using the OP's >> email address, without having read/write access to that mail account? > > Neither do I, but I'm a subscriber of several mailman mailing lists > were for mysterious reasons this happens at least one time a year. It > happens for at least 6 times a year that somebody does confuse the > address to post a message to all the list members, with the "request" > address. It doesn't help that all list mails have a footer, or start > digest mails with short, but complete explanations or that MUAs provide > a menu entry for mailing lists, so that nobody needs to care about the > headers or anything else, but get all options provided by the GUI, for > direct mouse usage. > > For the mail I'm replying at the moment Claws provides the menu > > Message > Mailing-List > > with the options > > Post > Help > Subscribe > Unsubscribe > View archive > > Just "Contact owner" is shadowed. > > :) This is a nice one. About 10 years ago I got a very hot hate mail after replying to questions@, asking me and everyone else to stop spamming him. Some pour soul just didn't know how to unsubscribe (despite the links given at the bottom). From owner-freebsd-questions@freebsd.org Thu Aug 24 15:46:05 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3BE1DDE243D for ; Thu, 24 Aug 2017 15:46:05 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.20.71]) by mx1.freebsd.org (Postfix) with ESMTP id 1F8178115C for ; Thu, 24 Aug 2017 15:46:04 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id F3A3ECB8CDE; Thu, 24 Aug 2017 10:23:31 -0500 (CDT) Received: from 128.135.52.6 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Thu, 24 Aug 2017 10:23:31 -0500 (CDT) Message-ID: <39344.128.135.52.6.1503588211.squirrel@cosmo.uchicago.edu> In-Reply-To: <031E40A6-0C53-47B2-BA86-E9932E02000B@sigsegv.be> References: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> <031E40A6-0C53-47B2-BA86-E9932E02000B@sigsegv.be> Date: Thu, 24 Aug 2017 10:23:31 -0500 (CDT) Subject: Re: VPS that will run xBSD From: "Valeri Galtsev" To: "Kristof Provost" Cc: "Frank Leonhardt" , freebsd-questions@freebsd.org Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 15:46:05 -0000 On Thu, August 24, 2017 8:33 am, Kristof Provost wrote: > On 24 Aug 2017, at 11:32, Frank Leonhardt wrote: >> There are a load of cheap VPS services out there; so cheap I decided >> to give one a go to run a backup NS. >> >> Then when I looked closer they all offer Windoze or some Linux or >> other. >> >> Does anyone know of a VPS provider that can do any OS I like? Or do I >> need to create my own VPS provider :-) >> > RootBSD (https://www.rootbsd.net) are nice people. > I use Gandi (https://www.gandi.net/) myself. I had one user in the departmen who had hos private server at gandi.net, and that as mail server was misconfigured (fell under several definitions in http://rfcignorant.net/). I don't know whose fault was that, the user or that of provider. If you are going to use gandi.net, check what DNS settings will be for your mail server, so you will not end up as my user. I hope, this helps. Valeri > > Regards, > Kristof > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Thu Aug 24 15:50:16 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B2C07DE2726 for ; Thu, 24 Aug 2017 15:50:16 +0000 (UTC) (envelope-from srs0=yiec=72=sigsegv.be=kristof@codepro.be) Received: from venus.codepro.be (venus.codepro.be [IPv6:2a01:4f8:162:1127::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.codepro.be", Issuer "Gandi Standard SSL CA 2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 72C28814CF for ; Thu, 24 Aug 2017 15:50:15 +0000 (UTC) (envelope-from srs0=yiec=72=sigsegv.be=kristof@codepro.be) Received: from [169.254.194.118] (vega.codepro.be [IPv6:2a01:4f8:162:1127::3]) (Authenticated sender: kp) by venus.codepro.be (Postfix) with ESMTPSA id 6B5B036B80; Thu, 24 Aug 2017 17:50:11 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sigsegv.be; s=mail; t=1503589811; bh=hE/oBkBV9V49LhXTIKG5SNum0D2tdxQv7HmUhC2ZUAc=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=M0iyOohCaOnW8ffSOuSWgANMiyyYD4Ya69BEiYDi/jpe4vlYh1gYI7Cz6qScYum3C Qg6yKtU9BVIwqdlJzy0Z6Nh3qHbSM87/KGY+3NUyFM4IXO0bvRzDEDKYsaGfG+acHY Vc4gvWCjK5WIbnkeLDuKpDfl58TOtRshIATEf0UQ= From: "Kristof Provost" To: "Valeri Galtsev" Cc: "Frank Leonhardt" , freebsd-questions@freebsd.org Subject: Re: VPS that will run xBSD Date: Thu, 24 Aug 2017 17:50:53 +0200 Message-ID: <2AAABF31-720D-49FF-9866-DD0A745FED46@sigsegv.be> In-Reply-To: <39344.128.135.52.6.1503588211.squirrel@cosmo.uchicago.edu> References: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> <031E40A6-0C53-47B2-BA86-E9932E02000B@sigsegv.be> <39344.128.135.52.6.1503588211.squirrel@cosmo.uchicago.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (2.0BETAr6090) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 15:50:16 -0000 On 24 Aug 2017, at 17:23, Valeri Galtsev wrote: > On Thu, August 24, 2017 8:33 am, Kristof Provost wrote: >> I use Gandi (https://www.gandi.net/) myself. > > I had one user in the departmen who had hos private server at > gandi.net, > and that as mail server was misconfigured (fell under several > definitions > in http://rfcignorant.net/). I don't know whose fault was that, the > user > or that of provider. If you are going to use gandi.net, check what DNS > settings will be for your mail server, so you will not end up as my > user. > I’m going to blame your user for that one. If you rent an unmanaged machine (virtual or otherwise) the management and configuration of that machine is up to you. It’s perfectly possible to register a domain with company A, host the DNS with B and point it at a machine with company C. There’s no way for either A, B or C to ensure that your overall configuration is correct. That’s on you. Regards, Kristof From owner-freebsd-questions@freebsd.org Thu Aug 24 16:28:59 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 41AF1DE35C5 for ; Thu, 24 Aug 2017 16:28:59 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (wonkity.com [67.158.26.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "wonkity.com", Issuer "wonkity.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 1361E82CB3 for ; Thu, 24 Aug 2017 16:28:58 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (localhost [127.0.0.1]) by wonkity.com (8.15.2/8.15.2) with ESMTPS id v7OGSvDG049441 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 24 Aug 2017 10:28:57 -0600 (MDT) (envelope-from wblock@wonkity.com) Received: from localhost (wblock@localhost) by wonkity.com (8.15.2/8.15.2/Submit) with ESMTP id v7OGSvv7049438; Thu, 24 Aug 2017 10:28:57 -0600 (MDT) (envelope-from wblock@wonkity.com) Date: Thu, 24 Aug 2017 10:28:57 -0600 (MDT) From: Warren Block To: Manish Jain cc: Matt Smith , "freebsd-questions@freebsd.org" Subject: Re: Anything specific to keep in mind restoring from rsync ? (Re: Any reason to prefer 11.1 over 10.3 ?) In-Reply-To: Message-ID: References: <20170818074902.GA91334@gmail.com> User-Agent: Alpine 2.21 (BSF 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.6.2 (wonkity.com [127.0.0.1]); Thu, 24 Aug 2017 10:28:57 -0600 (MDT) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 16:28:59 -0000 On Fri, 18 Aug 2017, Manish Jain wrote: > > > On 08/18/17 13:19, Matt Smith wrote: >> On Aug 18 07:35, Manish Jain wrote: >>> Hi, >>> >>> I am going to have to install FreeBSD again on a box on which 10.3R >>> works well. Is there any reason I should prefer 11.1R ? >>> >>> Thanks for any tips. >>> Manish Jain >> >> The main reason for 11.1 would be the expected end of life date when >> 10.3 will no longer be supported. As you can see from >> https://www.freebsd.org/security/security.html#sup that is April 30, >> 2018 whereas 11.1 will be 3 months after the release of 11.2. >> >> Obviously you can upgrade from 10.3 to 10.4, or from 10.3 to 11.2, and >> from 11.1 to 11.2 quite easily, but it's easier to start with 11 than it >> is to start with 10 and do a major version upgrade. >> >> Unless there are any strange issues particular to your hardware 10 and >> 11 should work identically really. >> > > Hi Matt/Others, > > I decided that a fresh install would be too much effort considering the > ease of rsync to back up existing data. > > The primary reason I am in the current muddle is that the / partition > has to be made bigger ( 30G -> 40G ). What I have done is rsynced (with > some exclusions) / to /mnt/backup > > I have actually never restored data with rsync earlier. Precisely what > should I be doing to return copy out /mnt/backup over / ? > > This is what I actually intend : if anyone spots something stupid, > please chime in now : - ) > > 1) Install 10.3 again on the larger root partition > > 2) Reboot with the optical media and drop into a fixit shell > > 3) Mount the intended slash at /tmp and the partition holding the > rsynced backup at /mnt > > 4) rsync from /mnt to /tmp > > Is the above a decent approach ? > Thanks for any insight/suggestions. Don't use rsync for this. If you do, be sure to add the half-dozen options that preserve hard links and keep the /rescue directory from growing unexpectedly. The preferred methods are dump/restore for UFS (http://www.wonkity.com/~wblock/docs/html/backup.html) and zfs send | zfs recv for ZFS. From owner-freebsd-questions@freebsd.org Thu Aug 24 19:28:26 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7271ADE6932 for ; Thu, 24 Aug 2017 19:28:26 +0000 (UTC) (envelope-from lobo@bsd.com.br) Received: from mail-yw0-x234.google.com (mail-yw0-x234.google.com [IPv6:2607:f8b0:4002:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3A7F6633BB for ; Thu, 24 Aug 2017 19:28:25 +0000 (UTC) (envelope-from lobo@bsd.com.br) Received: by mail-yw0-x234.google.com with SMTP id h127so2421814ywf.3 for ; Thu, 24 Aug 2017 12:28:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bsd.com.br; s=capeta; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=9jO9g7zBa5r0UXldkzrld3rFjbFcXXkpJ7geFqeOp/c=; b=PGbl2NRglvJNS/B6X8WPo7oehyPplqBAUHv2zUYOsFo3x9CXOyexUJYvj3gdHa79mi IEX7jlQjViEsZ1//Xf4/L/H26SkNBu8ODrKxalz95TQ5Xr3AAnVWG0tUqASrCP3rc0if J10G8biIpTYHOCSlgTy9tUtlITzqGs442eMNw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=9jO9g7zBa5r0UXldkzrld3rFjbFcXXkpJ7geFqeOp/c=; b=degjaknjrsxtGK/4Iy56tuk2qXVTEtIB4M0CjpsZsQ9AQ6XSpb9KiNmqpR5YTzTcwD slyAWjbpQkzX4Bm/fIz9fQ+QjN6vERfwwhnnu9He1ROIVZmLqYNBdfuXC2NqecZzaaLA D1eT++7vkfG5nd7kmOdDZ5PDq0S6TJQF7hCel9VWbvfO5iC6eUZiW0PIvTPOPYF4kjDX 1kMDN7hX3FZdX6Xqo5Lki4ws2JmX0QelZd8nYufXC1YzabXN/HW6/Xd7IfcN/vZAR1NQ 57C463dgAeeODkNeyTtNpJfHcv1ZRjHIDm+kwYQG4y9jhtQOMljzCNRYAwMC2FKy1VNH iUiA== X-Gm-Message-State: AHYfb5gURHRQkfgyZbhNuiVgm9iFv0YGu9wDq2bkkE6a3VFVkxGQbqSu 7GiwyFFmy1yMKRi6StLtrrnETbp++O+M X-Received: by 10.13.220.6 with SMTP id f6mr5780591ywe.338.1503602904521; Thu, 24 Aug 2017 12:28:24 -0700 (PDT) MIME-Version: 1.0 Received: by 10.37.119.1 with HTTP; Thu, 24 Aug 2017 12:28:24 -0700 (PDT) In-Reply-To: <76784b86-4550-2ef9-21b1-5fc178e326a6@fjl.co.uk> References: <20170821201746.59796aba@Papi> <76784b86-4550-2ef9-21b1-5fc178e326a6@fjl.co.uk> From: Mario Lobo Date: Thu, 24 Aug 2017 16:28:24 -0300 Message-ID: Subject: Re: Error compiling a qt5 application To: Frank Leonhardt Cc: "freebsd-questions@freebsd.org" Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2017 19:28:26 -0000 Thanks for the reply, Frank. I managed to get it right from inside the app structure. 2017-08-24 6:44 GMT-03:00 Frank Leonhardt : > Can't fix this but I had grief with a qt5 not compiling (virtualbox IIRC), > so switched to qt4 and everything was fine. QT not really my bag. > > > On 22/08/2017 00:17, Mario Lobo wrote: > >> Hi there; >> >> I'm trying to compile a qt5 application. >> >> OS: reeBSD 11.1-STABLE #0 r321652: Sat Jul 29 10:49:43 BRT 2017 >> >> clang -v >> clang version 4.0.1 (tags/RELEASE_401/final) >> Target: x86_64-unknown-freebsd11.1 >> Thread model: posix >> InstalledDir: /usr/local/llvm40/bin >> >> When I compile, I get this: >> >> Compiling C++... >> In file included from ../../../../../contrib/gtqtc/gtqtc1.cpp:48: >> In file included from ../../../../../contrib/gtqtc/gtqtc.h:53: >> In file included from /usr/local/include/qt5/QtCore/QThread:1: >> In file included from /usr/local/include/qt5/QtCore/qthread.h:43: >> In file included from /usr/local/include/qt5/QtCore/qobject.h:46: >> In file included from /usr/local/include/qt5/QtCore/qobjectdefs.h:48: >> In file included from /usr/local/include/qt5/QtCore/qnamespace.h:43: >> In file included from /usr/local/include/qt5/QtCore/qglobal.h:83: >> /usr/local/include/qt5/QtCore/qcompilerdetection.h:563:6: error: Qt >> requires a C++11 compiler and yours does not seem to be that. # >> error Qt requires a C++11 compiler and yours does not seem to be that. >> >> I tried this in make.conf: >> >> CC=clang >> CXX=clang++ >> CXXFLAGS+=-std=c++11 >> >> and export CXXFLAGS=-std=c++11 >> >> and nothing seems to work. >> >> It seems to me that my clang is new enough to support that standard. >> >> What am i missing here? >> >> Thanks, >> >> > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe > @freebsd.org" > -- Mario Lobo http://www.mallavoodoo.com.br FreeBSD since version 2.2.8 [not Pro-Audio.... YET!!] (99,7% winfoes FREE) From owner-freebsd-questions@freebsd.org Fri Aug 25 00:13:41 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E4C15DEB580 for ; Fri, 25 Aug 2017 00:13:41 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-oln040092070038.outbound.protection.outlook.com [40.92.70.38]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6626C6BAEB for ; Fri, 25 Aug 2017 00:13:40 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Mi4V+fbhxi6H7QfUOF45eRh/L7h8Dm1phYOc4pmpDOY=; b=r9eHXkBY4wzx1JMJGjmy1hrfIMKq2YvunuYhM37OGbJtgjjl/Kn79SHqjwBrhEN7vRjpUArxnZCz19GmE4E6st6gHOjGDVa2JKVhJ7U/obd79t2isGd1XmEyAI+zbQq6unZYP7LzxPSfmrd2eKEOz1P+vML+lPPO/ZgG0srhKVHu5RClPp90gu1IYCT1wRmLsxKupozDUpCUinDiVHQNwolYCqcL4gIgOSAtK0JExVUfP2e58UX/fiSy2nK0jNUxgwJnuhBYICn4aERJC9EsfMD7amsiB2pgAkMF2TtKkaGKK49whPY+h32hXkfaDYCMBk8O454FFOzMbuuf7S8IXw== Received: from AM5EUR03FT056.eop-EUR03.prod.protection.outlook.com (10.152.16.52) by AM5EUR03HT173.eop-EUR03.prod.protection.outlook.com (10.152.16.189) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1341.15; Fri, 25 Aug 2017 00:13:38 +0000 Received: from VI1PR02MB1200.eurprd02.prod.outlook.com (10.152.16.53) by AM5EUR03FT056.mail.protection.outlook.com (10.152.17.224) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1341.15 via Frontend Transport; Fri, 25 Aug 2017 00:13:38 +0000 Received: from VI1PR02MB1200.eurprd02.prod.outlook.com ([fe80::60cb:ba4f:60e1:a1b8]) by VI1PR02MB1200.eurprd02.prod.outlook.com ([fe80::60cb:ba4f:60e1:a1b8%13]) with mapi id 15.01.1385.010; Fri, 25 Aug 2017 00:13:38 +0000 From: Manish Jain To: Warren Block CC: Matt Smith , "freebsd-questions@freebsd.org" Subject: Re: Anything specific to keep in mind restoring from rsync ? Thread-Topic: Anything specific to keep in mind restoring from rsync ? Thread-Index: AQHTHTb/5ESQGW1VrkKdGIw1W6aHvg== Date: Fri, 25 Aug 2017 00:13:38 +0000 Message-ID: References: <20170818074902.GA91334@gmail.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: wonkity.com; dkim=none (message not signed) header.d=none;wonkity.com; dmarc=none action=none header.from=hotmail.com; x-incomingtopheadermarker: OriginalChecksum:34E8FAA19B72DC7C5ACD53263835A58A8C436D17E76FE91752FFD965091D9528; UpperCasedChecksum:470C4D1AE5385F4A0201DBAD353635250E13A212C8801BD3F2876758963183BD; SizeAsReceived:7394; Count:47 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [JdFCzv2woWoMySIH0z78QkFN7gRSnQj9] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM5EUR03HT173; 6:2wNIwaHfkNQnuYfSRaBmVx/90/N40rSCaHkfv/f23CY0GChSvdOhPJaeSw2du5AMRzVIddy7ppq9uAJXcCOiJAz09IL+ImfBnTZYJxtC34CWuWguTVWIbQ8MOqDNXYuVbPyCRUY7JxjuH1sSa1pMrbq9BhjQUcdqFvqOXDvZjxIbcTSRjZX/Xtlvh6OlGYOWgySs3u+J2mHtDnbH9UWat/e5oMcdf4PgOmHWC7CRxrNOuSYCBE6caLLCh649xCDjN8LY0MYnCb/21lfkLJGsv8rOo9kJhfCPG1gTKruWwhXaEElY+U3FWUxCRiH+8VaGcshCgZ9tQAcAF8Zpg2M/dg==; 5:YWsZqeaMPIXJw5KkhUEIs7rq6lPmkBWJG4xHEoWpRmIeRIvzFYszZxUkg6iZIZeZPYGU/ITFASEWqvHNT/o3BPXAOAWtEui/usap96cRrceScXYnHOmhQS44LmX6RCOPpCZoA6LJzb0NFsh4XV0xKw==; 24:H0iTzwFmLyhOEeiucJbeedAaGXl+TzAx2UEUtaW59wNRSTMpdjg+Ug/LkPC9m/aFuoPF1rO9iUCqJc1GJq94QW8HtFhPjG+7CaIKkZcULyU=; 7:KiotB2WA9Pgg0kpEAeb+W3zJIGa1ZyT+NJ3cAtcS8Y0wUJRGoCFHxLcoL1Ey0XZfPHVSx5FudttrPDelRybTZcoi6dGOjKx8WRWXDoR/Rzp60sQpWvIQBnaBLy3oyT3b3JFPwQj5aV39PemibVfGKXw8Tg/hHRZ6IF3+9isut0MxurCDSsEAIe8gBx0FMlWTeWicPTzP0OmKhTdRQ8G3A9QqSkQ97Rx/nttW9MRF4/Y= x-incomingheadercount: 47 x-eopattributedmessage: 0 x-forefront-antispam-report: EFV:NLI; SFV:NSPM; SFS:(7070007)(98901004); DIR:OUT; SFP:1901; SCL:1; SRVR:AM5EUR03HT173; H:VI1PR02MB1200.eurprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; x-ms-office365-filtering-correlation-id: 6da9fa38-51c8-4aab-5e54-08d4eb4e21c6 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(300000503095)(300135400095)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322404)(1601125374)(1603101448)(1701031045)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:AM5EUR03HT173; x-ms-traffictypediagnostic: AM5EUR03HT173: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444000031); SRVR:AM5EUR03HT173; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:AM5EUR03HT173; x-forefront-prvs: 041032FF37 spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <02AF6D6AD99FB048B9FA668C8F5D68DD@eurprd02.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Aug 2017 00:13:38.0988 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT173 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 00:13:42 -0000 DQoNCk9uIDA4LzI0LzE3IDIxOjU4LCBXYXJyZW4gQmxvY2sgd3JvdGU6DQo+IERvbid0IHVzZSBy c3luYyBmb3IgdGhpcy4gIElmIHlvdSBkbywgYmUgc3VyZSB0byBhZGQgdGhlIGhhbGYtZG96ZW4g DQo+IG9wdGlvbnMgdGhhdCBwcmVzZXJ2ZSBoYXJkIGxpbmtzIGFuZCBrZWVwIHRoZSAvcmVzY3Vl IGRpcmVjdG9yeSBmcm9tIA0KPiBncm93aW5nIHVuZXhwZWN0ZWRseS4gIFRoZSBwcmVmZXJyZWQg bWV0aG9kcyBhcmUgZHVtcC9yZXN0b3JlIGZvciBVRlMgDQo+IChodHRwOi8vd3d3LndvbmtpdHku Y29tL353YmxvY2svZG9jcy9odG1sL2JhY2t1cC5odG1sKSBhbmQNCj4gemZzIHNlbmQgfCB6ZnMg cmVjdiBmb3IgWkZTLg0KDQpUaGFua3MgV2FycmVuLCBidXQgdG9vIGxhdGUgIDogLSApDQoNCiAg SSBkaWQgYW4gcnN5bmMgKC1hQVh2IC0tZXhjbHVkZS1mcm9tIC4vZXhjbHVkZXMpIHRvIGJhY2t1 cCwgYW5kIHRoZW4gYSANCnJldmVyc2UgcnN5bmMgKC1hSCkgdG8gcmVzdG9yZS4gSXQgd29ya2Vk IHZlcnkgd2VsbCBmb3IgbWUgLSBib3RoIGZvciANCkxpbnV4IGFuZCBGcmVlQlNELg0KDQpCdXQg dGhlcmUgaGF2ZSBiZWVuIGEgZmV3IHJlc3BvbnNlcyBhdCBmcmVlYnNkLXF1ZXN0aW9ucyB0aGF0 IA0KZHVtcC9yZXN0b3JlIHNob3VsZCBiZSB0aGUgcHJlZmVycmVkIHNvbHV0aW9uIGZvciB0aGlz ICh3aGVuIC8gaGFzIHRvIGJlIA0KYmFja2VkIHVwLCBtYWlubHkgb3dpbmcgdG8gaGFyZCBsaW5r cykuIE5leHQgdGltZSBJIG5lZWQgYSBiYWNrdXAsIEkgDQp3aWxsIHVzZSBkdW1wK3Jlc3RvcmUu DQoNCkJ1dCBJIGFtIGluY2xpbmVkIHRvIGFzayBvbmUgcXVlc3Rpb24gaGVyZSA6IGRvZXMgRnJl ZUJTRCBhY3R1YWxseSBoYXZlIA0KYW55IHN5c3RlbS1pbnN0YWxsZWQgaGFyZCBsaW5rcyAob3Ro ZXIgdGhhbiAuIGFuZCAuLikgPw0KDQpSZWdhcmRzDQpNYW5pc2ggSmFpbg0K From owner-freebsd-questions@freebsd.org Fri Aug 25 00:33:06 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1046FDEBB78 for ; Fri, 25 Aug 2017 00:33:06 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mailrelay11.qsc.de (mailrelay11.qsc.de [212.99.187.252]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.antispameurope.com", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 704F66C4AB for ; Fri, 25 Aug 2017 00:33:04 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de ([213.148.129.14]) by mailrelay11.qsc.de; Fri, 25 Aug 2017 02:32:39 +0200 Received: from r56.edvax.de (port-92-195-85-107.dynamic.qsc.de [92.195.85.107]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 942AA3C77D; Fri, 25 Aug 2017 02:32:38 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id v7P0WbFB003476; Fri, 25 Aug 2017 02:32:37 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Fri, 25 Aug 2017 02:32:37 +0200 From: Polytropon To: Manish Jain Cc: "freebsd-questions@freebsd.org" Subject: Re: Anything specific to keep in mind restoring from rsync ? Message-Id: <20170825023237.9b6b22b2.freebsd@edvax.de> In-Reply-To: References: <20170818074902.GA91334@gmail.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-cloud-security-sender: freebsd@edvax.de X-cloud-security-recipient: freebsd-questions@freebsd.org X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mailrelay11.qsc.de with EDE216A3560 X-cloud-security-connect: mx01.qsc.de[213.148.129.14], TLS=1, IP=213.148.129.14 X-cloud-security: scantime:.1413 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 00:33:06 -0000 On Fri, 25 Aug 2017 00:13:38 +0000, Manish Jain wrote: > But I am inclined to ask one question here : does FreeBSD actually have > any system-installed hard links (other than . and ..) ? Several. A good example is the content of /rescue, where all programs are in fact the same (one) binary, hardlinked to several names. Use "ls -i" to verify - they all have the same inode number. Furthermore, /bin/test and /bin/[; /bin/rm and /bin/unlink; /bin/ln and /bin/link. There are even more in /usr/bin. Several ports also install hardlinked files, and it's not entirely uncommon that they also exist at user level, inside a user's home directory. Here's a sh one-liner where you can set $SP ("search path") and see which hard links do exist, sorted by inode number. SP="/usr/bin"; for INODE in `ls -i ${SP} | sort -n | awk '{ print $1 }' | uniq -d`; do ls -i ${SP} | grep ${INODE}; echo ""; done Additionally, dump | restore handles special flags in the desired manner (such as the schg flag; see "man chflags" for details). That's why it's the preferred method to make 1:1 file system content copies on UFS (not _clone_ whole disks and partitions, though). -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Fri Aug 25 00:37:37 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 72C94DEBD60 for ; Fri, 25 Aug 2017 00:37:37 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (wonkity.com [67.158.26.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "wonkity.com", Issuer "wonkity.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 43F8E6C682 for ; Fri, 25 Aug 2017 00:37:36 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (localhost [127.0.0.1]) by wonkity.com (8.15.2/8.15.2) with ESMTPS id v7P0bT0J085305 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 24 Aug 2017 18:37:29 -0600 (MDT) (envelope-from wblock@wonkity.com) Received: from localhost (wblock@localhost) by wonkity.com (8.15.2/8.15.2/Submit) with ESMTP id v7P0bTON085287; Thu, 24 Aug 2017 18:37:29 -0600 (MDT) (envelope-from wblock@wonkity.com) Date: Thu, 24 Aug 2017 18:37:29 -0600 (MDT) From: Warren Block To: Manish Jain cc: Matt Smith , "freebsd-questions@freebsd.org" Subject: Re: Anything specific to keep in mind restoring from rsync ? In-Reply-To: Message-ID: References: <20170818074902.GA91334@gmail.com> User-Agent: Alpine 2.21 (BSF 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.6.2 (wonkity.com [127.0.0.1]); Thu, 24 Aug 2017 18:37:29 -0600 (MDT) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 00:37:37 -0000 On Fri, 25 Aug 2017, Manish Jain wrote: > On 08/24/17 21:58, Warren Block wrote: >> Don't use rsync for this. If you do, be sure to add the half-dozen >> options that preserve hard links and keep the /rescue directory from >> growing unexpectedly. The preferred methods are dump/restore for UFS >> (http://www.wonkity.com/~wblock/docs/html/backup.html) and >> zfs send | zfs recv for ZFS. > > Thanks Warren, but too late : - ) > > I did an rsync (-aAXv --exclude-from ./excludes) to backup, and then a > reverse rsync (-aH) to restore. It worked very well for me - both for > Linux and FreeBSD. > > But there have been a few responses at freebsd-questions that > dump/restore should be the preferred solution for this (when / has to be > backed up, mainly owing to hard links). Next time I need a backup, I > will use dump+restore. > > But I am inclined to ask one question here : does FreeBSD actually have > any system-installed hard links (other than . and ..) ? Yes: % du -hd1 /rescue 9.6M /rescue % rsync -a /rescue/ /tmp/rescue/ % du -hd1 /tmp/rescue 1.3G /tmp/rescue There might be others, but those are the ones that always get me. From owner-freebsd-questions@freebsd.org Fri Aug 25 01:58:09 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BB3E7DECF84 for ; Fri, 25 Aug 2017 01:58:09 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-oln040092070054.outbound.protection.outlook.com [40.92.70.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2DC876E6FF for ; Fri, 25 Aug 2017 01:58:08 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=PEK4IcH93bsNmfaOU0cVQVkersBpnng4r2oH7EVM6R0=; b=MivEjAD203/Ml94C1WWruLwScM4FpkHt9zfV+HEEMhAoTy0utGxOUobVZ+kjzkMAdtUJZxBHRJtUDrBTV0A7QcLV7gLEgCo3wohB9g9j5P+xVE7IdQOGjM2ECt+6U6+Xo/kjUIeBaeaS2gwVzO6tMUARYVN0IUVWXnNIU8pF7l9TT43an1RkLS7+G4hgP0y+mWTqyub5dk+Eluo4/tZEMS4N7KAL3j+ldcxpPWECCxIOZKnWHY5xUGr9xKPVK80jTcexoMUK0JW/Y4MbrAXX394GGQEZwWs3SwIOq3iIgof2RCXp1BdB75HrVR8nlyjNNA2bXJJE6nMuCw5u3UrdlA== Received: from AM5EUR03FT003.eop-EUR03.prod.protection.outlook.com (10.152.16.60) by AM5EUR03HT188.eop-EUR03.prod.protection.outlook.com (10.152.16.231) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1341.15; Fri, 25 Aug 2017 01:58:05 +0000 Received: from VI1PR02MB1200.eurprd02.prod.outlook.com (10.152.16.55) by AM5EUR03FT003.mail.protection.outlook.com (10.152.16.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1341.15 via Frontend Transport; Fri, 25 Aug 2017 01:58:06 +0000 Received: from VI1PR02MB1200.eurprd02.prod.outlook.com ([fe80::60cb:ba4f:60e1:a1b8]) by VI1PR02MB1200.eurprd02.prod.outlook.com ([fe80::60cb:ba4f:60e1:a1b8%13]) with mapi id 15.01.1385.010; Fri, 25 Aug 2017 01:58:05 +0000 From: Manish Jain To: Polytropon CC: "freebsd-questions@freebsd.org" , "Warren Block" Subject: Re: Anything specific to keep in mind restoring from rsync ? Thread-Topic: Anything specific to keep in mind restoring from rsync ? Thread-Index: AQHTHTb/5ESQGW1VrkKdGIw1W6aHvqKUON+AgAAXogA= Date: Fri, 25 Aug 2017 01:58:05 +0000 Message-ID: References: <20170818074902.GA91334@gmail.com> <20170825023237.9b6b22b2.freebsd@edvax.de> In-Reply-To: <20170825023237.9b6b22b2.freebsd@edvax.de> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: edvax.de; dkim=none (message not signed) header.d=none;edvax.de; dmarc=none action=none header.from=hotmail.com; x-incomingtopheadermarker: OriginalChecksum:FAA66D282165E40DEA5B6FC9279789E98B602D3ACD440F8AF377562DE5C4AC3B; UpperCasedChecksum:105396FCA4381E089F29E04062F1039B541D5918EC15CA17BF6987ED635FDDD3; SizeAsReceived:7511; Count:47 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [39TBtU6bxJqwJcu7lrc5SKMLWG5isGpS] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM5EUR03HT188; 6:FEnUh+NUPPI09t+11RBwKsnsvH1MSWFFV0pujJPr43Z9oTy98W0CHhJNoikphWJZFwbytKmjWLIuONLm+c1i3hh7dOYbA2cGpHyQJHAC7CSvCT0gLorOLT2P7XwmxC7FqFc9J6ikfB/PufomcAQAaTlXgAKWTSryDOQ7UF+q0VeJ/+67uP9GUUyHbL3LFAJM03pztmfXNArK2WQNJ5VdlDRRNC7+fOfbE+8GyKDK5rkXo6nG5bwc1RffoQGzAIw/P1A2CbsldjubA8q3OF6+CxFqBWUQLlZhM+kK02/Vbp/qwVQb5W8mK4NQqOCFv2aMPyDAWMuUEd50rprwDwy2yQ==; 5:6ZfgGOXyc0NQh7RS3Iu9AxJGBldQSG2UtzLsr77gFtUHe//eHEOAIevkAlZRiDyNYoJJKrYL1fD0PdtGlEGnEYpFryX11irkKO1O5oRD2Vz8BBJw8GphaxIe55+pGIAfNimlv8Z5Hs8XM0ws0gAmhw==; 24:xnHfiXBIulRw/4DCEIAEtSVbAWeZwbK4IANQm5rHZAB6FGXdlv2RFHTIeTBwEEy8eeAgzTMMa7rD4GkIReyKDUhC0uudXs43prYnBKKqV9Y=; 7:tqTZkbXD9n1DkNRjP3GDtlu5S/MfmqTl+PycsWRlvlnY7a7eIAKa0r3fV+MdoV7k/bXqbjQ2DgtjE3/KVKKdhnr/8tcrcCqI4ATUNJyiSmcH22xqw3InICvRGTIAtmTtXfkXGefNHADBgCAOWNqJjdyh62eFlCaR+glMXyTq7sufIhfQJ2ztXhS7+yHKl+sCFjjEBtL0KQLLVQ/AK12j9qllmjRfmSSS8d5gX5OAAEc= x-incomingheadercount: 47 x-eopattributedmessage: 0 x-forefront-antispam-report: EFV:NLI; SFV:NSPM; SFS:(7070007)(98901004); DIR:OUT; SFP:1901; SCL:1; SRVR:AM5EUR03HT188; H:VI1PR02MB1200.eurprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; x-ms-office365-filtering-correlation-id: 28ef6c92-ed1f-4e3c-e439-08d4eb5cb9d2 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(300000503095)(300135400095)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322404)(1603101448)(1601125374)(1701031045)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:AM5EUR03HT188; x-ms-traffictypediagnostic: AM5EUR03HT188: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444000031); SRVR:AM5EUR03HT188; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:AM5EUR03HT188; x-forefront-prvs: 041032FF37 spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Aug 2017 01:58:05.9144 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT188 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 01:58:09 -0000 DQoNCk9uIDA4LzI1LzE3IDA2OjAyLCBQb2x5dHJvcG9uIHdyb3RlOg0KPiBPbiBGcmksIDI1IEF1 ZyAyMDE3IDAwOjEzOjM4ICswMDAwLCBNYW5pc2ggSmFpbiB3cm90ZToNCj4+IEJ1dCBJIGFtIGlu Y2xpbmVkIHRvIGFzayBvbmUgcXVlc3Rpb24gaGVyZSA6IGRvZXMgRnJlZUJTRCBhY3R1YWxseSBo YXZlDQo+PiBhbnkgc3lzdGVtLWluc3RhbGxlZCBoYXJkIGxpbmtzIChvdGhlciB0aGFuIC4gYW5k IC4uKSA/DQo+IA0KPiBTZXZlcmFsLiBBIGdvb2QgZXhhbXBsZSBpcyB0aGUgY29udGVudCBvZiAv cmVzY3VlDQoNCg0KU28gSSBsZWFybiBmcm9tIHlvdS9XQiB0aGF0IEkgZ29vZmVkIHVwICA6IC0g KQ0KDQpNeSAvcmVzY3VlIGluZGVlZCBub3cgaGFzIGFsbCBmaWxlcyB0aGVyZWluIGFzIHNlcGFy YXRlIGZpbGVzICh1bmlxdWUgDQppbm9kZXMpLiBJZiB0aGUgc3lzdGVtIGhhcyBhbnkgbW9yZSBo YXJkIGxpbmtzLCB0aGVuIG15IGJveCB3b3VsZCBiZSANCmhvc3RpbmcgdGhlbSBhcyBzZXBhcmF0 ZSBmaWxlcy4NCg0KSXMgaXQgb2theSBpZiBJIGtlZXAgdXNpbmcgdGhpcyBib3ggYXMtaXMtbm93 IChubyBoYXJkIGxpbmtzKSA/IFRoZSBib3ggDQpydW5zIGZhbnRhc3RpY2FsbHkgd2VsbC4NCg0K VGhhbmtzDQpNYW5pc2ggSmFpbg0K From owner-freebsd-questions@freebsd.org Fri Aug 25 02:17:01 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DE724DED31B for ; Fri, 25 Aug 2017 02:17:01 +0000 (UTC) (envelope-from FreeBSD@shaneware.biz) Received: from ipmail02.adl2.internode.on.net (ipmail02.adl2.internode.on.net [150.101.137.139]) by mx1.freebsd.org (Postfix) with ESMTP id 6183C6ED3C for ; Fri, 25 Aug 2017 02:17:00 +0000 (UTC) (envelope-from FreeBSD@shaneware.biz) Received: from unknown (HELO leader.local) ([118.211.113.221]) by ipmail02.adl2.internode.on.net with ESMTP; 25 Aug 2017 11:46:58 +0930 Subject: Re: VPS that will run xBSD To: Frank Leonhardt Cc: freebsd-questions@freebsd.org References: <673b7208-c0d9-5179-407a-2cf9d276e1a8@fjl.co.uk> <031E40A6-0C53-47B2-BA86-E9932E02000B@sigsegv.be> From: Shane Ambler Message-ID: Date: Fri, 25 Aug 2017 11:46:56 +0930 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <031E40A6-0C53-47B2-BA86-E9932E02000B@sigsegv.be> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-AU Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 02:17:02 -0000 On 24/08/2017 23:03, Kristof Provost wrote: > On 24 Aug 2017, at 11:32, Frank Leonhardt wrote: >> There are a load of cheap VPS services out there; so cheap I decided >> to give one a go to run a backup NS. >> >> Then when I looked closer they all offer Windoze or some Linux or other. >> >> Does anyone know of a VPS provider that can do any OS I like? Or do I >> need to create my own VPS provider :-) >> > RootBSD (https://www.rootbsd.net) are nice people. > I use Gandi (https://www.gandi.net/) myself. If you look at the release notes you will find info on pre-installed images for aws and google compute. While aws may not be what you call a "cheap" provider it can have lower prices, a t2.nano on demand will cost 4.39 a month, but it can get as low as 1.92 a month if you pay upfront to reserve it for 3 years - thats 69 for 3 years. So you may pay a few bucks more to test it out but for a final setup it can be cheaper. -- FreeBSD - the place to B...Software Developing Shane Ambler From owner-freebsd-questions@freebsd.org Fri Aug 25 03:03:36 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 24681DEDD6E for ; Fri, 25 Aug 2017 03:03:36 +0000 (UTC) (envelope-from mikhailg@webanoide.org) Received: from msa.san.navalradio.net (msa.san.navalradio.net [206.251.255.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 00D6E703EA for ; Fri, 25 Aug 2017 03:03:35 +0000 (UTC) (envelope-from mikhailg@webanoide.org) Received: from [192.168.0.121] ([172.18.128.200]) (authenticated bits=0) by msa.san.navalradio.net (8.15.2/8.15.2) with ESMTPA id v7P31Pve003596 for ; Fri, 25 Aug 2017 03:01:25 GMT (envelope-from mikhailg@webanoide.org) X-Authentication-Warning: msa.san.navalradio.net: Host [172.18.128.200] claimed to be [192.168.0.121] Subject: Re: Anything specific to keep in mind restoring from rsync ? To: freebsd-questions@freebsd.org References: <20170818074902.GA91334@gmail.com> From: Mikhail Goriachev Message-ID: Date: Fri, 25 Aug 2017 00:02:20 -0300 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 03:03:36 -0000 On 24/08/2017 21:37, Warren Block wrote: > On Fri, 25 Aug 2017, Manish Jain wrote: > >> On 08/24/17 21:58, Warren Block wrote: >>> Don't use rsync for this. If you do, be sure to add the half-dozen >>> options that preserve hard links and keep the /rescue directory from >>> growing unexpectedly. The preferred methods are dump/restore for UFS >>> (http://www.wonkity.com/~wblock/docs/html/backup.html) and >>> zfs send | zfs recv for ZFS. >> >> Thanks Warren, but too late : - ) >> >> I did an rsync (-aAXv --exclude-from ./excludes) to backup, and then a >> reverse rsync (-aH) to restore. It worked very well for me - both for >> Linux and FreeBSD. >> >> But there have been a few responses at freebsd-questions that >> dump/restore should be the preferred solution for this (when / has to be >> backed up, mainly owing to hard links). Next time I need a backup, I >> will use dump+restore. >> >> But I am inclined to ask one question here : does FreeBSD actually have >> any system-installed hard links (other than . and ..) ? > > Yes: > > % du -hd1 /rescue > 9.6M /rescue > % rsync -a /rescue/ /tmp/rescue/ > % du -hd1 /tmp/rescue > 1.3G /tmp/rescue Nice one! I got into habit of the following, which "passes" that test: # du -hd1 /rescue 7.7M /rescue # tar -cf - -C / rescue | tar -xf - -C /tmp # du -hd1 /tmp/rescue 7.7M /tmp/rescue Cheers, Mikhail. -- Mikhail Goriachev Webanoide From owner-freebsd-questions@freebsd.org Fri Aug 25 10:35:24 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 57F82DD47AF for ; Fri, 25 Aug 2017 10:35:24 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (wonkity.com [67.158.26.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "wonkity.com", Issuer "wonkity.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 1BBA38066F for ; Fri, 25 Aug 2017 10:35:23 +0000 (UTC) (envelope-from wblock@wonkity.com) Received: from wonkity.com (localhost [127.0.0.1]) by wonkity.com (8.15.2/8.15.2) with ESMTPS id v7PAZHVd051676 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 25 Aug 2017 04:35:17 -0600 (MDT) (envelope-from wblock@wonkity.com) Received: from localhost (wblock@localhost) by wonkity.com (8.15.2/8.15.2/Submit) with ESMTP id v7PAZHcL051673; Fri, 25 Aug 2017 04:35:17 -0600 (MDT) (envelope-from wblock@wonkity.com) Date: Fri, 25 Aug 2017 04:35:17 -0600 (MDT) From: Warren Block To: Manish Jain cc: Polytropon , "freebsd-questions@freebsd.org" Subject: Re: Anything specific to keep in mind restoring from rsync ? In-Reply-To: Message-ID: References: <20170818074902.GA91334@gmail.com> <20170825023237.9b6b22b2.freebsd@edvax.de> User-Agent: Alpine 2.21 (BSF 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.6.2 (wonkity.com [127.0.0.1]); Fri, 25 Aug 2017 04:35:18 -0600 (MDT) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 10:35:24 -0000 On Fri, 25 Aug 2017, Manish Jain wrote: > > > On 08/25/17 06:02, Polytropon wrote: >> On Fri, 25 Aug 2017 00:13:38 +0000, Manish Jain wrote: >>> But I am inclined to ask one question here : does FreeBSD actually have >>> any system-installed hard links (other than . and ..) ? >> >> Several. A good example is the content of /rescue > > > So I learn from you/WB that I goofed up : - ) > > My /rescue indeed now has all files therein as separate files (unique > inodes). If the system has any more hard links, then my box would be > hosting them as separate files. > > Is it okay if I keep using this box as-is-now (no hard links) ? The box > runs fantastically well. I don't know what problems that might cause down the line. Another option would be to use rsync to re-sync at least the known problem directories. Some time back, I wrote a script to do a "slow mirror" of filesystems on an SSD to a hard disk. Here are the rsync options that seemed to get everything, as far as I could tell: -axHAXS --delete --fileflags --force-change Be careful, of course, with a backup first. --delete deletes files on the target that are not present on the source. Using that and running rsync from the original /rescue to the new target one ought to fix the problem. Like: rsync -axHAXS --delete --fileflags --force-change original/rescue/ /rescue/ Note the magic trailing slashes on the directories, meaning "do what I want". The last two options should be able to overwrite files with the schg flag set. A couple of years back, I submitted a bug report for rsync, and for a few happy months it was fixed. Then it broke again and has been that way ever since. So the few files in /usr/bin with that flag will show errors and possibly stop the copy (I forget now). From owner-freebsd-questions@freebsd.org Fri Aug 25 10:49:03 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4D1F5DD4C35 for ; Fri, 25 Aug 2017 10:49:03 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mailrelay11.qsc.de (mailrelay11.qsc.de [212.99.187.252]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.antispameurope.com", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id AB3D380BEF for ; Fri, 25 Aug 2017 10:49:02 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de ([213.148.129.14]) by mailrelay11.qsc.de; Fri, 25 Aug 2017 12:48:58 +0200 Received: from r56.edvax.de (port-92-195-85-107.dynamic.qsc.de [92.195.85.107]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 672283C77D; Fri, 25 Aug 2017 12:48:57 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id v7PAmu4n002032; Fri, 25 Aug 2017 12:48:56 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Fri, 25 Aug 2017 12:48:56 +0200 From: Polytropon To: Manish Jain Cc: "freebsd-questions@freebsd.org" , "Warren Block" Subject: Re: Anything specific to keep in mind restoring from rsync ? Message-Id: <20170825124856.a1e4436a.freebsd@edvax.de> In-Reply-To: References: <20170818074902.GA91334@gmail.com> <20170825023237.9b6b22b2.freebsd@edvax.de> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-cloud-security-sender: freebsd@edvax.de X-cloud-security-recipient: freebsd-questions@freebsd.org X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mailrelay11.qsc.de with B84AF6A3706 X-cloud-security-connect: mx01.qsc.de[213.148.129.14], TLS=1, IP=213.148.129.14 X-cloud-security: scantime:.1469 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 10:49:03 -0000 On Fri, 25 Aug 2017 01:58:05 +0000, Manish Jain wrote: > My /rescue indeed now has all files therein as separate files (unique > inodes). If the system has any more hard links, then my box would be > hosting them as separate files. > > Is it okay if I keep using this box as-is-now (no hard links) ? The box > runs fantastically well. It should be no problem. When you do a system update, files get overwritten (unlinked) and re-instantiated, so the original hardlinks should be back in place. The key idea behind hardlinks will of course still work. A program can decide upon the value of argv[0], which is the name it is called by. For example, the programs in /rescue behave totally different depending on that name, even though it is _the same_ program whenever you execute it. This mechanism does not change when they are individual binaries. For example, I have a script in ~/bin with several symlinks pointing to it, and depending on the name, the script's behaviour changes. It's a "mass image converter" conv_, and it is called conv_png2jpg, conv_dicom2jpg, conv_gif2png and so on, and whenever I need another conv_2, I just add a new symlink. The same would work with hardlinks. A sh shell script can use `basename $0` for this decision. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Fri Aug 25 12:08:57 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A94A0DD6F30 for ; Fri, 25 Aug 2017 12:08:57 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-oln040092072023.outbound.protection.outlook.com [40.92.72.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 15BA982E54 for ; Fri, 25 Aug 2017 12:08:56 +0000 (UTC) (envelope-from bourne.identity@hotmail.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=eUXWiYGIKJaZdTaQzdU6xWAgPzP/y/AdSsW8qsVX/LI=; b=UyQdmAkoQDTMCsO/zxfDhOzQT3IBeTS2CjowZAfFQ3beQLYQ978G7hrFj4QRqkphvJlIQNbewzW6EFxfvBlVKF+XQzbRWjzOwGc0r0e+6fQhdw8bY9/a6EVdLcK++dcv7fmol2Eznf7cIZCLNqG+MUerHiUfi8yz96/K89q+Zo0fKl8KyRt9Ba6I6UTRjkLVb7/7bmSiCeSr4wEY2EiAUmVLGnpCuwqzAnAARCHbo5A30UYktdsjm75DGn5MrsnICfYX63MwqJMSmUSBF89VOaBrqUqNs0uEQdq1cg1iWF3MDbLquUwQDK7bmkDqQxZ9aiGwk6wRD7K1Jhvo96TEWg== Received: from AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com (10.152.16.58) by AM5EUR03HT178.eop-EUR03.prod.protection.outlook.com (10.152.17.101) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1341.15; Fri, 25 Aug 2017 12:08:54 +0000 Received: from VI1PR02MB1200.eurprd02.prod.outlook.com (10.152.16.58) by AM5EUR03FT014.mail.protection.outlook.com (10.152.16.130) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1341.15 via Frontend Transport; Fri, 25 Aug 2017 12:08:54 +0000 Received: from VI1PR02MB1200.eurprd02.prod.outlook.com ([fe80::60cb:ba4f:60e1:a1b8]) by VI1PR02MB1200.eurprd02.prod.outlook.com ([fe80::60cb:ba4f:60e1:a1b8%13]) with mapi id 15.01.1385.010; Fri, 25 Aug 2017 12:08:54 +0000 From: Manish Jain To: Polytropon CC: "freebsd-questions@freebsd.org" , "Warren Block" Subject: Re: Anything specific to keep in mind restoring from rsync ? Thread-Topic: Anything specific to keep in mind restoring from rsync ? Thread-Index: AQHTHTb/5ESQGW1VrkKdGIw1W6aHvqKUON+AgAAXogCAAJSQAIAAFh2A Date: Fri, 25 Aug 2017 12:08:54 +0000 Message-ID: References: <20170818074902.GA91334@gmail.com> <20170825023237.9b6b22b2.freebsd@edvax.de> <20170825124856.a1e4436a.freebsd@edvax.de> In-Reply-To: <20170825124856.a1e4436a.freebsd@edvax.de> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: edvax.de; dkim=none (message not signed) header.d=none;edvax.de; dmarc=none action=none header.from=hotmail.com; x-incomingtopheadermarker: OriginalChecksum:770D8D7C15D256653DC58E16E60653DAF05CF4E9B37DD8E4B5F70D6DD9602387; UpperCasedChecksum:165109FA301D8B7BD3D40FB5B1B6ED82FF76ECF02F92455D1FA1B6D334558C23; SizeAsReceived:7664; Count:47 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [hNroeema2uiNF7SpQ+xtJdpwvWspC8lo] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM5EUR03HT178; 6:d7bgQ7BY73pYIFHGmJ3bLbgZLY2j4ZeN0ev9nlFsuitLiBAyrKtNlse23Bw1PbfHglPcL3G8TX8xOJSImxHvebkc5E3ARzU+AzuxDCbBYuNCw1i7yRUbZkngeCifz5GB3LmrzVVSdA5LMeUg0zmX0EaUrmP+NYF+NgM8G4n45JA1vdtc46jzZXOyRoHh/TKosJ8oEWXsjq0U+hmyOyI1UlReNIn0pKH/0wMjUgNSVNoL2KmWOrepQHJ805D+P6DY6lU0lvJutRWwZFd1IZp7HE+k5L6/7IbLGsUXhB3Mi+rnFOc7oKxP7M+53hm7Zf05dh42sjfzokG8p+CyDHRdTQ==; 5:LPCRHSkkBZZvZwvCYoq+IKoIHKsPLfT8K3ezjkwQJhzWnUqrW8FurpKsOVcVM6KHXk1wqvV0aYGMy9m8q4pwZEtdCVCjbee2WhZ1rT1jgYXPMNtXiT29vmdXJ598355NL0UTvBv47UZ9/I8//pSyog==; 24:SoTRtJDu/QlFHG16gD4E1zOJPRfp+By6W43vQk+DqTv8LlDX/ZlMaSTE0Sg9zrQyJaa9Sxhg4GMKVTwJZRxjAx62nUHmaXzsDA0aguuMAlY=; 7:Rm5qlVeVSJtZ/RxkvZhr0XKFiHZXUoI5qBp7+eD7VxMErlGrP5KPDdXCNIynKRKVewAysf5u6MeGE0NWlEG4+K3+WdKl7wb0/LBeLcWDgPWALxi4VEUgM8DAw1/yCA8HOPSOl2fJrpLg5LN8viHX8LuUDQ6appgzK+MMMpghxhJUZ/uHpG81FFxG4RHH2UPRcCUYbsDNqiqO2RwKZ1fEWJLDs8+fw70fPo27j6y3ebQ= x-incomingheadercount: 47 x-eopattributedmessage: 0 x-forefront-antispam-report: EFV:NLI; SFV:NSPM; SFS:(7070007)(98901004); DIR:OUT; SFP:1901; SCL:1; SRVR:AM5EUR03HT178; H:VI1PR02MB1200.eurprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; x-ms-office365-filtering-correlation-id: 8a9dd4b3-d0ec-4676-ec61-08d4ebb20dc3 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(300000503095)(300135400095)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322404)(1601125374)(1603101448)(1701031045)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:AM5EUR03HT178; x-ms-traffictypediagnostic: AM5EUR03HT178: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444000031); SRVR:AM5EUR03HT178; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:AM5EUR03HT178; x-forefront-prvs: 041032FF37 spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <9E071A1D535BAC4DBF5581CEB7AACB37@eurprd02.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Aug 2017 12:08:54.1545 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT178 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 12:08:57 -0000 DQoNCk9uIDA4LzI1LzE3IDE2OjE4LCBQb2x5dHJvcG9uIHdyb3RlOg0KPiBPbiBGcmksIDI1IEF1 ZyAyMDE3IDAxOjU4OjA1ICswMDAwLCBNYW5pc2ggSmFpbiB3cm90ZToNCj4+IE15IC9yZXNjdWUg aW5kZWVkIG5vdyBoYXMgYWxsIGZpbGVzIHRoZXJlaW4gYXMgc2VwYXJhdGUgZmlsZXMgKHVuaXF1 ZQ0KPj4gaW5vZGVzKS4gSWYgdGhlIHN5c3RlbSBoYXMgYW55IG1vcmUgaGFyZCBsaW5rcywgdGhl biBteSBib3ggd291bGQgYmUNCj4+IGhvc3RpbmcgdGhlbSBhcyBzZXBhcmF0ZSBmaWxlcy4NCj4+ DQo+PiBJcyBpdCBva2F5IGlmIEkga2VlcCB1c2luZyB0aGlzIGJveCBhcy1pcy1ub3cgKG5vIGhh cmQgbGlua3MpID8gVGhlIGJveA0KPj4gcnVucyBmYW50YXN0aWNhbGx5IHdlbGwuDQo+IA0KPiBJ dCBzaG91bGQgYmUgbm8gcHJvYmxlbS4gV2hlbiB5b3UgZG8gYSBzeXN0ZW0gdXBkYXRlLCBmaWxl cw0KPiBnZXQgb3ZlcndyaXR0ZW4gKHVubGlua2VkKSBhbmQgcmUtaW5zdGFudGlhdGVkLCBzbyB0 aGUgb3JpZ2luYWwNCj4gaGFyZGxpbmtzIHNob3VsZCBiZSBiYWNrIGluIHBsYWNlLg0KPiANCj4g VGhlIGtleSBpZGVhIGJlaGluZCBoYXJkbGlua3Mgd2lsbCBvZiBjb3Vyc2Ugc3RpbGwgd29yay4g QQ0KPiBwcm9ncmFtIGNhbiBkZWNpZGUgdXBvbiB0aGUgdmFsdWUgb2YgYXJndlswXSwgd2hpY2gg aXMgdGhlDQo+IG5hbWUgaXQgaXMgY2FsbGVkIGJ5LiBGb3IgZXhhbXBsZSwgdGhlIHByb2dyYW1z IGluIC9yZXNjdWUNCj4gYmVoYXZlIHRvdGFsbHkgZGlmZmVyZW50IGRlcGVuZGluZyBvbiB0aGF0 IG5hbWUsIGV2ZW4gdGhvdWdoDQo+IGl0IGlzIF90aGUgc2FtZV8gcHJvZ3JhbSB3aGVuZXZlciB5 b3UgZXhlY3V0ZSBpdC4gVGhpcw0KPiBtZWNoYW5pc20gZG9lcyBub3QgY2hhbmdlIHdoZW4gdGhl eSBhcmUgaW5kaXZpZHVhbCBiaW5hcmllcy4NCj4gDQo+IEZvciBleGFtcGxlLCBJIGhhdmUgYSBz Y3JpcHQgaW4gfi9iaW4gd2l0aCBzZXZlcmFsIHN5bWxpbmtzDQo+IHBvaW50aW5nIHRvIGl0LCBh bmQgZGVwZW5kaW5nIG9uIHRoZSBuYW1lLCB0aGUgc2NyaXB0J3MNCj4gYmVoYXZpb3VyIGNoYW5n ZXMuIEl0J3MgYSAibWFzcyBpbWFnZSBjb252ZXJ0ZXIiIGNvbnZfLCBhbmQNCj4gaXQgaXMgY2Fs bGVkIGNvbnZfcG5nMmpwZywgY29udl9kaWNvbTJqcGcsIGNvbnZfZ2lmMnBuZyBhbmQNCj4gc28g b24sIGFuZCB3aGVuZXZlciBJIG5lZWQgYW5vdGhlciBjb252Xzxmcm9tPjI8dG8+LCBJIGp1c3QN Cj4gYWRkIGEgbmV3IHN5bWxpbmsuIFRoZSBzYW1lIHdvdWxkIHdvcmsgd2l0aCBoYXJkbGlua3Mu IEEgc2gNCj4gc2hlbGwgc2NyaXB0IGNhbiB1c2UgYGJhc2VuYW1lICQwYCBmb3IgdGhpcyBkZWNp c2lvbi4NCj4gDQoNClRoYW5rcywgUG9seS4gTXkgb3duIGZlZWxpbmcgaW4gdGhpcyByZWdhcmQg aXMgcHJldHR5IG11Y2ggc2FtZSBhcyB5b3VycyANCi0gJ3VubGlua2VkJyBmaWxlcyBzaG91bGQg YmVoYXZlIHRoZSBzYW1lIGFzIGJlZm9yZS4NCg0KQXMgZm9yIHlvdXIgc3ltbGlua3MsIExpbnV4 IHVzZWQgdG8gLSBhbmQgcGVyaGFwcyBzdGlsbCBkb2VzIC0gc2hpcCBzaCANCigtPmJhc2gpIGFu ZCB2aSAoLT52aW0pLg0KDQpSZWdhcmRzDQpNYW5pc2ggSmFpbg0K From owner-freebsd-questions@freebsd.org Fri Aug 25 14:23:38 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9E91DDD981C for ; Fri, 25 Aug 2017 14:23:38 +0000 (UTC) (envelope-from aimass@yabarana.com) Received: from mail-vk0-x242.google.com (mail-vk0-x242.google.com [IPv6:2607:f8b0:400c:c05::242]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 658393007 for ; Fri, 25 Aug 2017 14:23:38 +0000 (UTC) (envelope-from aimass@yabarana.com) Received: by mail-vk0-x242.google.com with SMTP id z187so995680vkd.4 for ; Fri, 25 Aug 2017 07:23:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yabarana-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=nQFlNJvhavqMBk8uG9EZc5Tkra5EKZ+EK4tRdW71lvs=; b=rMmnG+Z1OZPLuKwsqg3LIHGEZupTdXd/XNB0kblP1IOL7njyuB1LZcnWvKMJYt+tzd z+fZ70wg/Rw8vdbbD14DEEYviFCl6pdH0M6VHOJxhWDfHfJ+qgp7WZKANBuPVCeBaR/y bY7g2R6MOuwh3FYzJnR0WlzP90ysdq4jQpikRJiSRKgOrDZZoa0rdQo3+Kexuajiyfks ZtmvVat0XzY5rUNSm3ts/BC91y4y0Wp4nQqDTuB9WNv5zZKlGGXCg0anv5ISgVuHOrQy 6fNw1IPzjaNDtT72li4lQwa62NPt+lm1KiQ1MJGH0TK3n8pIj/9g3FR3YiTnsMr0m+ex Q5YA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=nQFlNJvhavqMBk8uG9EZc5Tkra5EKZ+EK4tRdW71lvs=; b=EuM27nJRB58Z403Ic5WyuBDWMcXb1FfoGXGRkzWLmGN/TwjwVVaR//yYy7OhzngzZz F/vmcqvIvjDBQw5ADxAjkiGXnLzsna/JNt5kLpAx8lzcjF2aRol03Jp/46dugPz8aYZA ZOsTrslzezWnIL+mg1vBXPfxjQ0B33HsOeMj+op1uT02BthxIel4yuy2ytUyrF572+nC dAk6Pz0qpWhi8E2pLFfYHayf/KnPb7NQGPbsdgcYcpEf23YcuXxucUMlobO2eicT9Okg odXU+DLycymb8ZPuzqHWT/xpg5DTUeChga9uEt2CsK2wdAuBPX1KSRbJXtUsRy0n5xUe nv3w== X-Gm-Message-State: AHYfb5hczBMeIssyGhhFYKVULMEdifKmBuAjipupnsyyB1x5mnqPjDCa pv3peEKRfHTXlNe4jG/QDy+dyF4OVq7A X-Received: by 10.31.214.131 with SMTP id n125mr7101241vkg.198.1503671017182; Fri, 25 Aug 2017 07:23:37 -0700 (PDT) MIME-Version: 1.0 Received: by 10.103.53.148 with HTTP; Fri, 25 Aug 2017 07:23:36 -0700 (PDT) In-Reply-To: <20170816021959.R12950@sola.nimnet.asn.au> References: <20170816021959.R12950@sola.nimnet.asn.au> From: Alejandro Imass Date: Fri, 25 Aug 2017 10:23:36 -0400 Message-ID: Subject: Re: [OT] two birds with one stone :) To: FreeBSD Questions Content-Type: text/plain; charset="UTF-8" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 14:23:38 -0000 On Tue, Aug 15, 2017 at 12:27 PM, Ian Smith wrote: > In freebsd-questions Digest, Vol 689, Issue 2 > > > Message: 1 > > Date: Mon, 14 Aug 2017 12:22:52 -0300 > > From: SOUL_OF_ROOT 55 > > Subject: The history show that Theo de Raadt was right about > > virtualization? > > > https://marc.info/?l=openbsd-misc&m=119318909016582 > [..] > > The history show that Theo de Raadt was right about virtualization? > > What do you reckon, ten years less two months later? > > > Message: 8 > > Date: Tue, 15 Aug 2017 06:50:41 -0400 (EDT) > > From: "Sedo :: Customer Support" > > Subject: Re: 111 > > > --------------------------------------------------------------- > > No Value > > --------------------------------------------------------------- > > Sure got that right .. > > [Sorry folks, couldn't resist ..] > I am amazed at how large companies have blindly bought into Amazon AWS and don't even realize how outrageously expensive it becomes when you actually do scale. Orders of magnitude higher than the cost and risk of real sysadmins and real hardware. Most applications are being developed around RDS, SQS and all the other packaged services that AWS offers, and certified AWS TechOps dudes are becoming evermore stupid Amazon drones.... which is getting these companies in a vendor lock situation that I hadn't seen since the 80's. It's like Microsoft all over again but now using the very same Open Source technology that we helped build all these years. Not sure if AWS is even fully legal, for example is RDS technology Open Source too even though it wraps MySQL and PostgreSQL ? Is there a technicality they are exploiting ? What's the MQ technology around SQS, are they releasing that ? Scary stuff when you see how much of the Internet is on AWS.... From owner-freebsd-questions@freebsd.org Fri Aug 25 18:16:46 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CD218DDE2B9 for ; Fri, 25 Aug 2017 18:16:46 +0000 (UTC) (envelope-from frank@woodcruft.co.uk) Received: from a-painless.mh.aa.net.uk (a-painless.mh.aa.net.uk [81.187.30.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 93A1B6A8B8 for ; Fri, 25 Aug 2017 18:16:46 +0000 (UTC) (envelope-from frank@woodcruft.co.uk) Received: from woodcruft.co.uk ([81.187.27.248] helo=lime.woodcruft.co.uk) by a-painless.mh.aa.net.uk with esmtp (Exim 4.84_2) (envelope-from ) id 1dlJ9v-00061u-AY; Fri, 25 Aug 2017 19:16:43 +0100 Received: by lime.woodcruft.co.uk (Postfix, from userid 1001) id E2679624F4; Fri, 25 Aug 2017 19:16:35 +0100 (BST) Date: Fri, 25 Aug 2017 19:16:35 +0100 From: Frank Shute To: Ernie Luzar , "freebsd-questions@freebsd.org" Subject: Re: How to block facebook access Message-ID: <20170825181635.GA39216@woodcruft.co.uk> Reply-To: Frank Shute Mail-Followup-To: Ernie Luzar , "freebsd-questions@freebsd.org" References: <59988180.7020301@gmail.com> <20170822225807.GA97221@woodcruft.co.uk> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="4Ckj6UjgE2iN1+kY" Content-Disposition: inline In-Reply-To: <20170822225807.GA97221@woodcruft.co.uk> X-Face: *}~{PHnDTzvXPe'wl_-f%!@+r5; VLhb':*DsX%wEOPg\fDrXWQJf|2\,92"DdS%63t*BHDyQ|OWo@Gfjcd72eaN!4%NE{0]p)ihQ1MyFNtWL X-Operating-System: FreeBSD 11.1-RELEASE-p1 amd64 X-Organisation: 'woodcruft.co.uk' X-PGP-Key: http://woodcruft.co.uk/misc/pubkey.asc User-Agent: Mutt/1.8.3 (2017-05-23) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 18:16:46 -0000 --4Ckj6UjgE2iN1+kY Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Aug 22, 2017 at 11:58:07PM +0100, Frank Shute wrote: > > On Sat, Aug 19, 2017 at 02:20:48PM -0400, Ernie Luzar wrote: > > > > Hello list; > >=20 > > Running 11.1 & ipfilter with LAN behind the gateway server. LAN users= =20 > > are using their work PC's to access facebook during work. > >=20 > > What method would recommend to block all facebook access? > >=20 > =20 > Hi Ernie, >=20 >=20 > My recommendation would be to set up unbound(8) on your 11.1 machine (or > setup another) and configure everything on the LAN to use it for name > service. >=20 > You can then shove some local records in unbound.conf(5), such as: >=20 > local-zone: "facebook.com" refuse > local-zone: "doubleclick.net" refuse > ... > etc. >=20 > If you then do a lookup from the LAN: >=20 > $ host facebook.com > Host facebook.com not found: 5(REFUSED) >=20 > Firefox and Chrome seem to handle that gracefully. >=20 > To stop any muppets who decide to use alternative name service ie. Google, > OpenDNS etc. Configure ipfilter to drop any outgoing to 53 except from > your unbound machine. >=20 > Of course, other benefits are:=20 >=20 > 1). You can cutdown on all sorts of additional superfluous traffic which > improves all sorts of things: contention, less bandwidth & quota needed > etc. >=20 > 2). Lookups are a lot quicker if they're cached on the LAN; which your > users will appreciate. >=20 > This all somewhat depends on how computer savvy your users are and how > locked down their PCs are. >=20 > If they know what they're doing then they will find away around it and > nothing short of nuking all of Facebook's DCs will stop it. Now there's > an idea.... Not long after I wrote the above, I came across: dns/void-zones-tools on Freshports. It s/refuse/static/ and pulls in ~50,000 domains which are associated with evil into unbound.conf. Read the blurb for it: https://github.com/cyclaero/void-zones-tools It takes it's data from half a dozen maintained lists and converts them into the format unbound understands. You can also whitelist/blacklist other domains/IPs. I've only been running it for a couple of days with Adblock Plus turned off and it seems to work fine. Definitely a win if you maintain a LAN/VLANs with Windows clients, especially Windows 10, as one of the lists it sucks in lists where Windows 10 builtin spywar...telemetry goes to. My informants, who reside not a million miles from Redmond, tell me that MS are doing "significant work" on improving their "customer experience" of Windows 10 Telemetry. They're not changing the code in anyway but rebranding it to: "Visual Studio Telemetry .Net Agile" You read it here first. I can't tell you how proud it made me as a Brit to hear that nugget of news. My tax pounds at work I thought, employing clueless and incompetent Americans in a tax dodging American company's margeting department. Life surely does not get a lot sweeter.... But then I remembered, we've got a Microsoftie on core@ and some others slaving away in the code mines of Redmond with commit bits to src. Yes! I was wrong, life does get even sweeter! Regards, --=20 Frank --4Ckj6UjgE2iN1+kY Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEXRpQZWMUMC1nxphkORvOAPtvi1oFAlmgaXMACgkQORvOAPtv i1rllBAAphnVNYIxvjhBVuo2ikERuQ+LowkzAcE6+txM+glvRM8JamBX1uUxGKFU wMcAw64IjAti/dDZtyz7ZWNCMy//Z0yESWEMGO+n5dExEjSUMGZ0gxY5rz1Y3bgA ScTnT3l32r/zA4tNfL7F/L1uECUzuouGtUcl4ekhQILpCSQmyfMAviZ76uzIgoK6 r9I/95Of0UIAyLvFNTdxxs5MUu7ze6j/jvkVFpv8uWVWm1lC22wxjj4Z9nMqxdaI 4qpOGr/N4BTryOK9uGg4uf6KbNYkrqgOiTNKkafA8DjTwWAMkhKuDdGgPhJZ2sdb X1hO65RUScNmqPw2CCINz/FAky2sN3ZA8j3oqmQwPjdCzdVyFfKyAvdhFU9uCvgC CPNr3fjvxB5PZ3LnhZTgGy0EB+fmEySWTW22cC2DT6IyJKHS7E7okmZOjoKG7WmA w4PhiGXqIH+6DFTbRMvnxZnNjdt4Je0HB7jECK8RVeX6yjRWZGIMTy3ee5llH+Di Wa6LByJL6TYn1wwr39g3StnM+M2S0S667Tv0kUvdnQMzsoKVdd55unPL73tvl4op FS7YoyHS2zLBBfQ4yZ4V4EAhKSPE8QvmGuONXh3md0sgHsoq3cWJ2yJ422Yz/6IB lbZPC+YB077PgpEgy1nwrKumftIvYqLrcvfbEjGCSvqnKHEheMA= =18g8 -----END PGP SIGNATURE----- --4Ckj6UjgE2iN1+kY-- From owner-freebsd-questions@freebsd.org Fri Aug 25 18:38:32 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BB1B6DDEB6A for ; Fri, 25 Aug 2017 18:38:32 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mailrelay15.qsc.de (mailrelay15.qsc.de [212.99.187.254]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.antispameurope.com", Issuer "TeleSec ServerPass DE-2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2CB926BDFB for ; Fri, 25 Aug 2017 18:38:31 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de ([213.148.129.14]) by mailrelay15.qsc.de; Fri, 25 Aug 2017 20:38:22 +0200 Received: from r56.edvax.de (port-92-195-85-107.dynamic.qsc.de [92.195.85.107]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id ED48E3C77D; Fri, 25 Aug 2017 20:38:21 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id v7PIcKC4002042; Fri, 25 Aug 2017 20:38:21 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Fri, 25 Aug 2017 20:38:20 +0200 From: Polytropon To: Alejandro Imass Cc: FreeBSD Questions Subject: Re: [OT] two birds with one stone :) Message-Id: <20170825203820.34094965.freebsd@edvax.de> In-Reply-To: References: <20170816021959.R12950@sola.nimnet.asn.au> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-cloud-security-sender: freebsd@edvax.de X-cloud-security-recipient: freebsd-questions@freebsd.org X-cloud-security-Virusscan: CLEAN X-cloud-security-disclaimer: This E-Mail was scanned by E-Mailservice on mailrelay15.qsc.de with 6686968351C X-cloud-security-connect: mx01.qsc.de[213.148.129.14], TLS=1, IP=213.148.129.14 X-cloud-security: scantime:.1328 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 18:38:32 -0000 On Fri, 25 Aug 2017 10:23:36 -0400, Alejandro Imass wrote: > I am amazed at how large companies have blindly bought into Amazon AWS > and don't even realize how outrageously expensive it becomes when you > actually do scale. It isn't obvious in regards of management and decision skills, and it doesn't matter in the _current_ quarter. Additionally, paying qualified and motivated system operations personnel (like system administrators or programmers) costs the "wrong" kind of money. That's why it matters what you spend money on. Expensive stuff "as a service" - material costs, they send us an invoice, and we can deduct it from our taxes, or we simply raise our prices and let the stupid consumer pay the price. Employees - personnel costs, no no, that just pollutes our balance and lets us look as if we can't deal with money. And we are a growth-oriented startup with $500M investment, so it doesn't really matter... That's why paying money for expensive services that do not scale is "money well spent". :-) > Orders of magnitude higher than the cost and risk > of real sysadmins and real hardware. But that forces a company to deal with real assets which do physically exist, and it forces them to recognize their social responsibilities regarding their workforce. > Most applications are being > developed around RDS, SQS and all the other packaged services that AWS > offers, and certified AWS TechOps dudes are becoming evermore stupid > Amazon drones.... which is getting these companies in a vendor lock > situation that I hadn't seen since the 80's. Correct! This creates a new kind of "certified consultants" who firstly make the big bucks, but then, the price declines until they become a cheap commodity, but there is no way back. > It's like Microsoft all > over again but now using the very same Open Source technology that we > helped build all these years. But it comes with lots of marketing-speak BS and green traffic lights, so it must be the only way to go, right? ;-) > Scary stuff when you see how much of the Internet is on AWS.... And AWS failures make you actually _realize_ this scary tendency... -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Fri Aug 25 19:38:53 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2A311DDFF7C for ; Fri, 25 Aug 2017 19:38:53 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.20.71]) by mx1.freebsd.org (Postfix) with ESMTP id E84C46E1D7 for ; Fri, 25 Aug 2017 19:38:52 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id DD03ECB8CEE; Fri, 25 Aug 2017 14:38:44 -0500 (CDT) Received: from 128.135.52.6 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Fri, 25 Aug 2017 14:38:44 -0500 (CDT) Message-ID: <60546.128.135.52.6.1503689924.squirrel@cosmo.uchicago.edu> Date: Fri, 25 Aug 2017 14:38:44 -0500 (CDT) Subject: Re: [OT] two birds with one stone :) From: "Valeri Galtsev" To: "Polytropon" Cc: "Alejandro Imass" , "FreeBSD Questions" Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal References: <20170816021959.R12950@sola.nimnet.asn.au> <20170825203820.34094965.freebsd@edvax.de> In-Reply-To: <20170825203820.34094965.freebsd@edvax.de> X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 19:38:53 -0000 On Fri, August 25, 2017 1:38 pm, Polytropon wrote: > On Fri, 25 Aug 2017 10:23:36 -0400, Alejandro Imass wrote: >> I am amazed at how large companies have blindly bought into Amazon AWS and don't even realize how outrageously expensive it becomes when you actually do scale. > > It isn't obvious in regards of management and decision skills, > and it doesn't matter in the _current_ quarter. Additionally, > paying qualified and motivated system operations personnel > (like system administrators or programmers) costs the "wrong" > kind of money. That's why it matters what you spend money on. > Expensive stuff "as a service" - material costs, they send us > an invoice, and we can deduct it from our taxes, or we simply > raise our prices and let the stupid consumer pay the price. > Employees - personnel costs, no no, that just pollutes our > balance and lets us look as if we can't deal with money. And > we are a growth-oriented startup with $500M investment, so > it doesn't really matter... > > That's why paying money for expensive services that do not > scale is "money well spent". :-) > > > >> Orders of magnitude higher than the cost and risk >> of real sysadmins and real hardware. > > But that forces a company to deal with real assets which do > physically exist, and it forces them to recognize their > social responsibilities regarding their workforce. > Well, outsourcing services to external companies is very familiar trend wherever Microsoft brew bunch takes over top IT positions in the organization... > > >> Most applications are being >> developed around RDS, SQS and all the other packaged services that AWS offers, and certified AWS TechOps dudes are becoming evermore stupid Amazon drones.... which is getting these companies in a vendor lock situation that I hadn't seen since the 80's. > > Correct! This creates a new kind of "certified consultants" who > firstly make the big bucks, but then, the price declines until > they become a cheap commodity, but there is no way back. > > > >> It's like Microsoft all >> over again but now using the very same Open Source technology that we helped build all these years. > > But it comes with lots of marketing-speak BS and green traffic > lights, so it must be the only way to go, right? ;-) > This thread chimes in unison with what was implied in one thread on another mail list where someone mentioned mariadb fork and similar... Valeri > > >> Scary stuff when you see how much of the Internet is on AWS.... > > And AWS failures make you actually _realize_ this scary tendency... > > > > -- > Polytropon > Magdeburg, Germany > Happy FreeBSD user since 4.0 > Andra moi ennepe, Mousa, ... > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Fri Aug 25 20:42:07 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 624D8DE1116 for ; Fri, 25 Aug 2017 20:42:07 +0000 (UTC) (envelope-from duane@nofroth.com) Received: from mail-it0-x22a.google.com (mail-it0-x22a.google.com [IPv6:2607:f8b0:4001:c0b::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 31F346FFF4 for ; Fri, 25 Aug 2017 20:42:07 +0000 (UTC) (envelope-from duane@nofroth.com) Received: by mail-it0-x22a.google.com with SMTP id f1so170118ith.0 for ; Fri, 25 Aug 2017 13:42:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nofroth.com; s=google; h=cc:subject:to:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=eYr+LyjTMkzFk4d3PJGDx5n0ZcFZqfbbC3GB6JEak1c=; b=l3hd0HM1IRvCqYhe0+lSATSx+G5Bibrl+t5UNb9UqFojogoLpivYJkwLBYw/UMg8eT SwLIGO23UeEhSzeP+Sa65Yv8+RedatL+UyUR5u5+BqomeubT04bhbEQ2x+9kma9QDFwX AKKjxMaSkAS65Xkg9iXT778nWKxabFFCGQODxib43jV7krXlISBqTrufiwwwjS36pXxO wgMyd8snSNzalB3KIFupTItbp9Ml9CUTUGCcLQdL9Q3o07B48aXZBB4JfXBjKZKc8PmP rlDdW4/s+XWBE73g2S+9xFxOL9K4+uorU4JtXQVs5WvTDwvWxwPTEojRN3Fj6HVK2eUB g+nQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:cc:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=eYr+LyjTMkzFk4d3PJGDx5n0ZcFZqfbbC3GB6JEak1c=; b=U0UR6IynIPju81SS2XsnH2Ge02HKEoQwMvTr2bfEnvbzXPOIR0i44XYRuYRvzZEDkb bNzJlBYLmFGTzCX0yOFRi9A/hYuP0jFd0DhtRnunCdA+BQ41y9ZKhzhNa2YGhhAED6hO qefOmEWDkR5O9qATdVGM3WXjss5g9LJNiZO3XaXfjD5vSHjc2div1/oVWV1FPztcOvNQ GytxbjAsW+UkB3gHjpzIzLUFeyxcct30xHK0PXmlGFD9jHNQQXV43SS2enknbKxyqVKB V9KjlqmSJG6KV6ziObcu1tCyXGdU59ZDKF+7ed5qM9rjUgCeP3pHEIobTbJzVeEA9Uxr jpFw== X-Gm-Message-State: AHYfb5ikGWlkVvTWJYTuR5BUdYH1nhBqEJTkkcmjUCSZ2ioVWfUlpp0z f8aD1Nqr61dzAaFm X-Received: by 10.36.55.145 with SMTP id r139mr741534itr.79.1503693726263; Fri, 25 Aug 2017 13:42:06 -0700 (PDT) Received: from [10.8.8.76] ([184.75.212.77]) by smtp.gmail.com with ESMTPSA id 126sm1087353itw.20.2017.08.25.13.42.04 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 25 Aug 2017 13:42:05 -0700 (PDT) Cc: duane@nofroth.com Subject: Re: How to block facebook access To: freebsd-questions@freebsd.org References: <59988180.7020301@gmail.com> From: Duane Whitty Message-ID: <4c9d24fc-021b-cde6-babc-a1c34d770c53@nofroth.com> Date: Fri, 25 Aug 2017 17:41:59 -0300 User-Agent: Mozilla/5.0 (X11; Linux i686; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <59988180.7020301@gmail.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 20:42:07 -0000 On 17-08-19 03:20 PM, Ernie Luzar wrote: > Hello list; > > Running 11.1 & ipfilter with LAN behind the gateway server. LAN users > are using their work PC's to access facebook during work. > > What method would recommend to block all facebook access? > > ` > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" Not sure if I missed this but did you say whether the users on you LAN are tech savvy? If they understand networking which of the above solutions, other than white-listing, would prevent one of them from setting up a web proxy at an address they control? Maybe they might even be really clever/motivated and take turns running a proxy at different addresses :-) Best Regards, Duane -- Duane Whitty duane@nofroth.com From owner-freebsd-questions@freebsd.org Fri Aug 25 20:59:52 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 330A4DE14E9 for ; Fri, 25 Aug 2017 20:59:52 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from cosmo.uchicago.edu (cosmo.uchicago.edu [128.135.20.71]) by mx1.freebsd.org (Postfix) with ESMTP id 162CA70688 for ; Fri, 25 Aug 2017 20:59:51 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: by cosmo.uchicago.edu (Postfix, from userid 48) id 3A675CB8CEE; Fri, 25 Aug 2017 15:59:50 -0500 (CDT) Received: from 128.135.52.6 (SquirrelMail authenticated user valeri) by cosmo.uchicago.edu with HTTP; Fri, 25 Aug 2017 15:59:50 -0500 (CDT) Message-ID: <56596.128.135.52.6.1503694790.squirrel@cosmo.uchicago.edu> In-Reply-To: <4c9d24fc-021b-cde6-babc-a1c34d770c53@nofroth.com> References: <59988180.7020301@gmail.com> <4c9d24fc-021b-cde6-babc-a1c34d770c53@nofroth.com> Date: Fri, 25 Aug 2017 15:59:50 -0500 (CDT) Subject: Re: How to block facebook access From: "Valeri Galtsev" To: "Duane Whitty" Cc: freebsd-questions@freebsd.org, duane@nofroth.com Reply-To: galtsev@kicp.uchicago.edu User-Agent: SquirrelMail/1.4.8-5.el5.centos.7 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 20:59:52 -0000 On Fri, August 25, 2017 3:41 pm, Duane Whitty wrote: > > > On 17-08-19 03:20 PM, Ernie Luzar wrote: >> Hello list; >> >> Running 11.1 & ipfilter with LAN behind the gateway server. LAN users >> are using their work PC's to access facebook during work. >> >> What method would recommend to block all facebook access? >> >> ` >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to >> "freebsd-questions-unsubscribe@freebsd.org" > > Not sure if I missed this but did you say whether the users on you LAN > are tech savvy? If they understand networking which of the above > solutions, other than white-listing, would prevent one of them from > setting up a web proxy at an address they control? Maybe they might > even be really clever/motivated and take turns running a proxy at > different addresses :-) And/or go through tor network ;-) Valeri > > > Best Regards, > Duane > > -- > Duane Whitty > duane@nofroth.com > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Fri Aug 25 21:06:12 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C218BDE1728 for ; Fri, 25 Aug 2017 21:06:12 +0000 (UTC) (envelope-from tundra@tundraware.com) Received: from oceanview.tundraware.com (oceanview.tundraware.com [45.55.60.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mailman.tundraware.com", Issuer "mailman.tundraware.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 8AEB370A09 for ; Fri, 25 Aug 2017 21:06:12 +0000 (UTC) (envelope-from tundra@tundraware.com) Received: from [192.168.0.2] (ozzie.tundraware.com [75.145.138.73]) (authenticated bits=0) by oceanview.tundraware.com (8.15.2/8.15.2) with ESMTPSA id v7PKxgCH090934 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Fri, 25 Aug 2017 15:59:42 -0500 (CDT) (envelope-from tundra@tundraware.com) Subject: Re: How to block facebook access References: <59988180.7020301@gmail.com> <4c9d24fc-021b-cde6-babc-a1c34d770c53@nofroth.com> From: Tim Daneliuk To: FreeBSD Mailing List Message-ID: <39cf20a1-a45e-808f-77cd-9a6b7a3364f3@tundraware.com> Date: Fri, 25 Aug 2017 15:59:37 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <4c9d24fc-021b-cde6-babc-a1c34d770c53@nofroth.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.2 (oceanview.tundraware.com [45.55.60.57]); Fri, 25 Aug 2017 15:59:43 -0500 (CDT) X-TundraWare-MailScanner-Information: Please contact the ISP for more information X-TundraWare-MailScanner-ID: v7PKxgCH090934 X-TundraWare-MailScanner: Found to be clean X-TundraWare-MailScanner-SpamCheck: not spam (whitelisted), SpamAssassin (not cached, score=-0.928, required 1, autolearn=not spam, ALL_TRUSTED -1.00, AWL 0.07, RP_MATCHES_RCVD -0.00) X-TundraWare-MailScanner-From: tundra@tundraware.com X-Spam-Status: No X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 21:06:12 -0000 On 08/25/2017 03:41 PM, Duane Whitty wrote: > > > On 17-08-19 03:20 PM, Ernie Luzar wrote: >> Hello list; >> >> Running 11.1 & ipfilter with LAN behind the gateway server. LAN users >> are using their work PC's to access facebook during work. >> >> What method would recommend to block all facebook access? >> >> ` >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to >> "freebsd-questions-unsubscribe@freebsd.org" > > Not sure if I missed this but did you say whether the users on you LAN > are tech savvy? If they understand networking which of the above > solutions, other than white-listing, would prevent one of them from > setting up a web proxy at an address they control? Maybe they might > even be really clever/motivated and take turns running a proxy at > different addresses :-) A number of my corporate clients have very strict regulatory requirements. They have significant concerns about data leakage to machines outside their control solve this problem on their own networks by: - Assigning non-routable IPs to their hosts, whether server or desktop. To make these nonrepudiable, the smarter customers use MAC-based DHCP to keep the same non-routable associated with a specific host. - Closing every outbound port at the NATing firewall except 80 and 443 which they ... - Run through a proxy server which also acts as a man-in-the-middle SSL intruder so they can look at the content of encrypted connection. - Very tight policies about what part of the web anyone can even go to, typically controlled on a per LDAP or AD group basis. Among things routinely blocked are entertainment sites like FaceBook and YouTube (but there are many others). - Deep inspection of all outbound emails for signs of leakage. - Shutting off and alarming any attempt to use the USB ports to plug things in ... even just for charging. It works remarkably well. What NO one can stop is: - A user's own device and wireless bandwidth (unless you run a cell jammer) and/or user connectivity to a nearby WiFi hotspot. But even in that case, there is still an airgap between the users' devices and the corporate machinery. - A user taking photographs of a screen with their cell phone thereby removing data. This is essentially impossible to catch 100% of the time. The clients that are in Financial Services therefore require all employees and consultants to agree to realtime access to their retirement and trading accounts to defend against insider trading. That's all it takes :) ---------------------------------------------------------------------------- Tim Daneliuk tundra@tundraware.com PGP Key: http://www.tundraware.com/PGP/ From owner-freebsd-questions@freebsd.org Fri Aug 25 21:41:18 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CC135DE209C for ; Fri, 25 Aug 2017 21:41:18 +0000 (UTC) (envelope-from duane@nofroth.com) Received: from mail-it0-x234.google.com (mail-it0-x234.google.com [IPv6:2607:f8b0:4001:c0b::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9AAB771C55 for ; Fri, 25 Aug 2017 21:41:18 +0000 (UTC) (envelope-from duane@nofroth.com) Received: by mail-it0-x234.google.com with SMTP id n5so815782itb.1 for ; Fri, 25 Aug 2017 14:41:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nofroth.com; s=google; h=cc:subject:to:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=uSfWLpkzH5z7GRXq+GCPr9nLAdhtPNEIpkkgjzaNBpo=; b=Uce2PKa2sGczYAHu4UUx8vvAaMq+QPkME2s+KIWOnpW5Q7EQhHdyljcK+zprnL/IXl F4nyWepcrY8v8d+4rEMDkG9q7GGF1Ew4pcdRkZQl4MGGPZlRuczMQOJ+TG9vjYR3+11g ls4Ph7loLgQIPyj08l42BhclrBtrYlwnDZ3Ip7zWBo4hz26EqBD23kcUzrhwj8gWM5Uw M6OTLny0s3jEWxvU0avSlMtP1jX3RSMtzx10AT7kcIFZNwClZJbB0KLt04sBtgPV1t8m 3xejtPMjyCbAsMAVX6ce1EivIfO3ibcrOBeS/jPs2YilAemHYuSiDxB7SQFP2EHnAOxF cGDw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:cc:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=uSfWLpkzH5z7GRXq+GCPr9nLAdhtPNEIpkkgjzaNBpo=; b=nzkABFamKMIJw9f+LIonGFEKlBdFK4qMUZqrfHd39XlyP/2G0maGiiXehH12FvLRR7 kys5wrzOod6fbUEEZglJ1SgdlbGZ/wRHZZU1AUBtjtZdEBaXhKkproVbYPJAuRu/LjJd fb8RW61JSbHBzFJ/rAO3t4eOL/jeIc/3QTSj7+4tHRh5vOuM39SyZ5iEa3zU+42lfiOT SCk1QQLso3flk/F8qM27go9SbZ08Xkt5bo6IYza0gjHLm0mp69n54hodkE0k48wz6Z/v CFYSQheOw5320PiFSPnj040AbbxtrfUXK6ONk/jGsZOCseh8pepv4Dhtbmu+HgRRIsd6 hRSg== X-Gm-Message-State: AHYfb5h/cPBMV7XCRdVVB+PpydUkfy03wrebbuQTLQ7hq020WR89xuyI 1qMhh4ZXitvFJL+34WgwOA== X-Received: by 10.36.209.133 with SMTP id w127mr862564itg.124.1503697277762; Fri, 25 Aug 2017 14:41:17 -0700 (PDT) Received: from [10.8.8.76] ([184.75.212.77]) by smtp.gmail.com with ESMTPSA id s26sm3242663ioe.56.2017.08.25.14.41.16 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 25 Aug 2017 14:41:17 -0700 (PDT) Cc: duane@nofroth.com Subject: Re: How to block facebook access To: freebsd-questions@freebsd.org References: <59988180.7020301@gmail.com> <4c9d24fc-021b-cde6-babc-a1c34d770c53@nofroth.com> <39cf20a1-a45e-808f-77cd-9a6b7a3364f3@tundraware.com> From: Duane Whitty Message-ID: Date: Fri, 25 Aug 2017 18:41:12 -0300 User-Agent: Mozilla/5.0 (X11; Linux i686; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <39cf20a1-a45e-808f-77cd-9a6b7a3364f3@tundraware.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Aug 2017 21:41:18 -0000 On 17-08-25 05:59 PM, Tim Daneliuk wrote: > On 08/25/2017 03:41 PM, Duane Whitty wrote: >> >> >> On 17-08-19 03:20 PM, Ernie Luzar wrote: >>> Hello list; >>> >>> Running 11.1 & ipfilter with LAN behind the gateway server. LAN users >>> are using their work PC's to access facebook during work. >>> >>> What method would recommend to block all facebook access? >>> >>> ` >>> _______________________________________________ >>> freebsd-questions@freebsd.org mailing list >>> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >>> To unsubscribe, send any mail to >>> "freebsd-questions-unsubscribe@freebsd.org" >> >> Not sure if I missed this but did you say whether the users on you LAN >> are tech savvy? If they understand networking which of the above >> solutions, other than white-listing, would prevent one of them from >> setting up a web proxy at an address they control? Maybe they might >> even be really clever/motivated and take turns running a proxy at >> different addresses :-) > A number of my corporate clients have very strict regulatory > requirements. They have significant concerns about data leakage to > machines outside their control solve this problem on their own networks by: > > - Assigning non-routable IPs to their hosts, whether server or desktop. > To make these nonrepudiable, the smarter customers use MAC-based > DHCP to keep the same non-routable associated with a specific host. > > - Closing every outbound port at the NATing firewall except 80 and 443 > which they ... > > - Run through a proxy server which also acts as a man-in-the-middle SSL > intruder so they can look at the content of encrypted connection. > > - Very tight policies about what part of the web anyone can even go to, > typically controlled on a per LDAP or AD group basis. Among things > routinely blocked are entertainment sites like FaceBook and YouTube > (but there are many others). > > - Deep inspection of all outbound emails for signs of leakage. > > - Shutting off and alarming any attempt to use the USB ports to plug > things in ... even just for charging. > > It works remarkably well. What NO one can stop is: > > - A user's own device and wireless bandwidth (unless you run a cell > jammer) and/or user connectivity to a nearby WiFi hotspot. But even > in that case, there is still an airgap between the users' devices > and the corporate machinery. > > - A user taking photographs of a screen with their cell phone thereby > removing data. This is essentially impossible to catch 100% of the > time. The clients that are in Financial Services therefore require > all employees and consultants to agree to realtime access to their > retirement and trading accounts to defend against insider trading. > > > That's all it takes :) > > ---------------------------------------------------------------------------- > Tim Daneliuk tundra@tundraware.com > PGP Key: http://www.tundraware.com/PGP/ > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > Yup, that sounds about right. Don't forget audits as well to make sure there are no "rogue" web/network engineers running their own proxies so that they can get around these measures. Best Regards, Duane -- Duane Whitty duane@nofroth.com From owner-freebsd-questions@freebsd.org Sat Aug 26 10:20:14 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 11822DF2F66 for ; Sat, 26 Aug 2017 10:20:14 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: from mail-oi0-x235.google.com (mail-oi0-x235.google.com [IPv6:2607:f8b0:4003:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id CB95C65F42 for ; Sat, 26 Aug 2017 10:20:13 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: by mail-oi0-x235.google.com with SMTP id g127so1478241oic.1 for ; Sat, 26 Aug 2017 03:20:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=7llS2A7kOqRmqEgt9yOok9LzqWGb3owjRhu66MMCYWg=; b=EVFetZfx2mm5PWSYTF7gZbDTpkERon8BFv1jUpcXMvNECftMF6V9lBTdhe2IZqsI6w eWzIxgpSYsHq6uyU5KsL2ghcSBVw1t/JsFK18Pqc/Est9uXOOJMBHsf66cYlFW1RcFLY 8c1cafFF4xSoeTlCAML7Dzq1Quebj6jGGTdXxzJ/3QTMJ2bh6mCj2vAyCyqAW5Jc1zGp 2DbKbuC0ilBdIEUoZBo5Jsvj8BcjwY9JtMp+rqBEMJZj/sijzz2HtHIDh0Q1y1Ngonc3 qq41YZbzk6hikVO1zceUP9PkEAhxzY4dedFL3ZgI22CFB7NdG8hztvbly0W3Fknz7GtU o9qQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=7llS2A7kOqRmqEgt9yOok9LzqWGb3owjRhu66MMCYWg=; b=N9QpYhKjNCPg8Kl3EikrQpIPe7Dy03iGHifmhknTujZuKwoDiO8OD6GfZ2BLSbRse2 mj4EeeluvS3VxfW/XlZQN/evBM9loveh/P/Df3QrIpiji0vynlgImCb13DP4udRqwTHb y0oaDrAlwR80HuddVDWqEnncBUT57XMOqbRgRUY13yqks6UJRAopc8ysiGQZoHicWa0u kCSRoAY+LF/wDK53i2sCgZfzP3lLjgQq306S9+pbWva2cGsW/pgo+5sgi1sB+X4u5hSa sPoy7lcd4K7Jq4mKFnDw3yjP/r6ZqU4h8sN1EJ4MsgxCz5Fhu6WudCnBr/hePPc7ylYa w/tg== X-Gm-Message-State: AHYfb5hGwet8iRrr3BUeNr57bkSIloHufcLQJmho4eWunCm1HcoIBdwx n3B8Uq5deHV6fS9LS0R+aPEu3cSQGw== X-Received: by 10.202.231.138 with SMTP id e132mr1823101oih.200.1503742812890; Sat, 26 Aug 2017 03:20:12 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.41.238 with HTTP; Sat, 26 Aug 2017 03:19:32 -0700 (PDT) In-Reply-To: References: <59988180.7020301@gmail.com> From: Odhiambo Washington Date: Sat, 26 Aug 2017 13:19:32 +0300 Message-ID: Subject: Re: How to block facebook access To: Adam Vande More Cc: Ernie Luzar , "freebsd-questions@freebsd.org" Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 10:20:14 -0000 On 23 August 2017 at 03:08, Adam Vande More wrote: > On Sat, Aug 19, 2017 at 1:20 PM, Ernie Luzar wrote: > > > Hello list; > > > > Running 11.1 & ipfilter with LAN behind the gateway server. LAN users are > > using their work PC's to access facebook during work. > > > > What method would recommend to block all facebook access? > > > > Personally I would setup a transparent proxy eg squid and block it using > that. DNS solutions are too fragile and something like squid can generate > comprehensive reports. > > -- > Adam > In line with the KISS (Keep It Simple Stupid) principle, I beg to differ with you! Using Squid in transparent mode is not the easiest way to block HTTPS traffic. Think about setting up ssl_bump and all those certificates you have to import on all the computers so that the cert is 'trusted', and the pain you have to go through with the different browsers. I have been there and found it too much complex work. I use dnsmasq+PF+BIND+DHCP (or unbound) to achieve this, but only that I have to exempt some users from the blockage. If it was a blanket block, the unbound REFUSE option is dandy - K.I.S.S - as detailed by Frank Shute. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft." From owner-freebsd-questions@freebsd.org Sat Aug 26 12:14:48 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CFCFDDF5414 for ; Sat, 26 Aug 2017 12:14:48 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wr0-x244.google.com (mail-wr0-x244.google.com [IPv6:2a00:1450:400c:c0c::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5D87C6A014 for ; Sat, 26 Aug 2017 12:14:48 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: by mail-wr0-x244.google.com with SMTP id o76so1310525wrb.5 for ; Sat, 26 Aug 2017 05:14:48 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=X0wFa8/O0KyxWUpYJHD27sBs3gUpsn88Gnn9nvLZhXc=; b=fC0vAr7MI9tVy3bqHBKkLEV932xI66tBMLe8J+lvfskE7kE+ubNnlwhnZFu8qtx+Xg mqUGVsQiPpnk/8WhZmQgtOJNzbTQQo2I4wfEPKrP5qKUoemn4u+SRF1s5NFCJ3ff54z+ 8ALOSSB4QgoZ8+lpynN9DsDqtJNrjD31E5iqglsJ7zzDT12hksFcQgJ/iBiAV1Xue7xE 4dF7UpXJxPQWSOFOpLekO5pZ76pAIax4TY4Odyqi9TQcXzakfDQPnpQQQAzwH3wDSp8a KrJ7NRCSjZW9TJS5lmD43LuHbSTxx/KOMHoXM9CyDkO8zGcy0ANOKg4t0JtgigOrfGIN Aedw== X-Gm-Message-State: AHYfb5jixSeQvBqvvBbJi8VlUMJ/zkTcj1Scd2/PiysWIB2vveGLkgVh dhEjVLi2gKzS0twW X-Received: by 10.223.143.102 with SMTP id p93mr1011255wrb.120.1503749686542; Sat, 26 Aug 2017 05:14:46 -0700 (PDT) Received: from gumby.homeunix.com ([81.17.24.158]) by smtp.gmail.com with ESMTPSA id 9sm5982382wrl.57.2017.08.26.05.14.44 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sat, 26 Aug 2017 05:14:45 -0700 (PDT) Date: Sat, 26 Aug 2017 13:14:42 +0100 From: RW To: freebsd-questions@freebsd.org Subject: Re: Anything specific to keep in mind restoring from rsync ? Message-ID: <20170826131442.4bf050e9@gumby.homeunix.com> In-Reply-To: References: <20170818074902.GA91334@gmail.com> X-Mailer: Claws Mail 3.15.0 (GTK+ 2.24.31; amd64-portbld-freebsd10.3) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 12:14:48 -0000 On Thu, 24 Aug 2017 18:37:29 -0600 (MDT) Warren Block wrote: > On Fri, 25 Aug 2017, Manish Jain wrote: > > But I am inclined to ask one question here : does FreeBSD actually > > have any system-installed hard links (other than . and ..) ? > > Yes: > > % du -hd1 /rescue > 9.6M /rescue > % rsync -a /rescue/ /tmp/rescue/ > % du -hd1 /tmp/rescue > 1.3G /tmp/rescue > > There might be others, but those are the ones that always get me. There are some common binaries where variants of the same program are implemented as the the same binary. e.g. less/more, csh/tcsh, *grep From owner-freebsd-questions@freebsd.org Sat Aug 26 13:10:33 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 267D3DF6363 for ; Sat, 26 Aug 2017 13:10:33 +0000 (UTC) (envelope-from freebsd@fongaboo.com) Received: from h4lix.wtfayla.net (helix.wtfayla.net [64.246.134.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id ED8066B7E2 for ; Sat, 26 Aug 2017 13:10:31 +0000 (UTC) (envelope-from freebsd@fongaboo.com) Received: from localhost (localhost [127.0.0.1]) by h4lix.wtfayla.net (Postfix) with ESMTP id F247C7CE15B for ; Sat, 26 Aug 2017 09:03:07 -0400 (EDT) Received: from h4lix.wtfayla.net ([127.0.0.1]) by localhost (h4lix.wtfayla.net [127.0.0.1]) (maiad, port 10024) with ESMTP id 85360-09 for ; Sat, 26 Aug 2017 09:03:07 -0400 (EDT) Received: from h4lix.wtfayla.net (h4lix.wtfayla.net [64.246.134.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by h4lix.wtfayla.net (Postfix) with ESMTPS id 76CA07CE159 for ; Sat, 26 Aug 2017 09:03:07 -0400 (EDT) Date: Sat, 26 Aug 2017 09:03:07 -0400 (EDT) From: Fongaboo X-X-Sender: fongaboo@h4lix.wtfayla.net To: freebsd-questions@freebsd.org Subject: STUMPED: Setting up OpenVPN server on FreeBSD (self.freebsd) Message-ID: User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 13:10:33 -0000 I'm following this tutorial: https://www.digitalocean.com/community/tutorials/how-to-configure-and-connect-to-a-private-openvpn-server-on-freebsd-10-1 Trying this on an AWS instance first and then planning to try on a bare metal colo server. OpenVPN client and daemon seem to be working, in terms of handshaking and connecting with each other. Problem is, no matter what I do, connected clients can't get out to the Internet through the server's gateway interface. I've tried setting up NATD, like the tutorial instructs. I've tried enabling ipfw_nat as described in this comment: https://www.digitalocean.com/community/tutorials/how-to-configure-and-connect-to-a-private-openvpn-server-on-freebsd-10-1?comment=40498 rc.conf (for NATD): #enable firewall firewall_enable="YES" firewall_script="/usr/local/etc/ipfw.rules" firewall_type="open" gateway_enable="YES" natd_enable="YES" natd_interface="xn0" natd_flags="-dynamic -m" rc.conf (revised for ipfw_nat): #enable firewall firewall_enable="YES" firewall_script="/usr/local/etc/ipfw.rules" firewall_type="open" firewall_nat_enable="YES" firewall_nat_interface="xn0" gateway_enable="YES" #natd_enable="YES" #natd_interface="xn0" #natd_flags="-dynamic -m" *xn0 = external interface of the server Neither config allows Internet access. I have this line enabled in /usr/local/etc/openvpn/openvpn.conf: push "redirect-gateway def1 bypass-dhcp" Perhaps this is part of the solution?: # Configure server mode for ethernet bridging # using a DHCP-proxy, where clients talk # to the OpenVPN server-side DHCP server # to receive their IP address allocation # and DNS server addresses. You must first use # your OS's bridging capability to bridge the TAP # interface with the ethernet NIC interface. # Note: this mode only works on clients (such as # Windows), where the client-side TAP adapter is # bound to a DHCP client. ;server-bridge Any advice would be appreciated. I'm willing to try any combination of ipfw vs. pf or natd vs. ipfw_nat or whatever if it will allow clients to see the WAN. TIA! From owner-freebsd-questions@freebsd.org Sat Aug 26 13:52:36 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F0352DF6DBE for ; Sat, 26 Aug 2017 13:52:36 +0000 (UTC) (envelope-from carlopmart@gmail.com) Received: from mail-lf0-x229.google.com (mail-lf0-x229.google.com [IPv6:2a00:1450:4010:c07::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 70DF16CA02 for ; Sat, 26 Aug 2017 13:52:36 +0000 (UTC) (envelope-from carlopmart@gmail.com) Received: by mail-lf0-x229.google.com with SMTP id z12so4869218lfd.3 for ; Sat, 26 Aug 2017 06:52:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=date:from:to:subject:message-id:mime-version:content-disposition :user-agent; bh=L+Jf4VdXS8A+eHlAn0ixcc7ejd+3YJnSge6J6wN5f0I=; b=oaMbhE+zoF2Q5wZXI//bCgf7natbfU3vrPLhCXuWM2Zdun1KKZriw1Ypd/vWwtKRgJ hvwmt/vBU3bk2jf+Z0rsKizdgjn9TEpIriYa8u3cep2OHjjh6hede76uyCtyrnY9D2X8 Qdg/kDmgAMPbc4hU+GYOfDEpPl3wdS59+hsnOQBFQtFqxmi49lm1m0pioelmAiPa/pz4 yGpBOp9Po+uQ4Xc4O1NUivT1YpCWNQlBTQaGWv6Ct6N7oeq1RLZY0nAEQPBCGrszbwcd nLCHeEBIomuGp5JUxUVyLef0jpgfubh4N7EkdndyEqb6DmHlk/aJtdpUGjKX74wL3zOD mnjQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:mime-version :content-disposition:user-agent; bh=L+Jf4VdXS8A+eHlAn0ixcc7ejd+3YJnSge6J6wN5f0I=; b=DVD44xw3GpMmU74RFN4jTHRDHnuSeFSzGzvbMaJVpVX0dFI12lqzUzTKfK4TxsMswO IFsAWbOK3MSUDU2juxvG55a9du0joTe7nj1b1A5geSaxbR35UDpzVO8vzSd4Oh7bhbZK WmD4dFWPaOZi3pxYfjfMDZaYMoNdugwsad4mrb4t8Qvf1liHFWe8x09LucgnBFrx3Tb6 8Wm1ZwuR5ttS5z7NpOuIHIOhb+MIiJVxcsASi413sWCviILwzPID2BNQNOmDhPsnGhTx U6SBZcGCdLwAkKqp2G0TVCej5+WOu9G5DLcO+gLiR4SwE5bWLBS4BqLY+CO08tmBLhZE 4R6g== X-Gm-Message-State: AHYfb5jaL58t2iwJCUVet/Wl+e/8DRuUtz8lZFIOv46/bBhbU9IkPNBp ewmtRCFO4EY3Zv5J/y4= X-Received: by 10.46.77.208 with SMTP id c77mr876557ljd.92.1503755554439; Sat, 26 Aug 2017 06:52:34 -0700 (PDT) Received: from localhost ([185.86.10.202]) by smtp.gmail.com with ESMTPSA id n127sm1525337lfn.10.2017.08.26.06.52.33 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sat, 26 Aug 2017 06:52:33 -0700 (PDT) Date: Sat, 26 Aug 2017 13:24:04 +0000 From: "C. L. Martinez" To: freebsd-questions@freebsd.org Subject: Scripting wifi connections Message-ID: <20170826132404.mpvknkgxl26t5c43@tesla.lab.uxdom.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline User-Agent: NeoMutt/20170609 (1.8.3) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 13:52:37 -0000 Hi all, Sometimes I need to use two wifi connections at the same time. Actually, my FreeBSD laptop is configured to use source routing (via setfib+pf rules) to accomplish this. But I need more flexibility: choose how many connections to use, setup a wpa_spplicant.conf's file "on the fly", etc. My current config in rc.conf is: dhclient_fib="1" wlans_ath0="wlan0" wlans_urtwn0="wlan1" ifconfig_wlan0="country ES WPA SYNCDHCP fib 1 group egress" As you can see, I can only have one wlan interface properly configured. And my idea is to build a script to setup configurations "on the fly". Any tip or idea? Thanks. -- Greetings, C. L. Martinez From owner-freebsd-questions@freebsd.org Sat Aug 26 14:16:02 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 54F97DF7239 for ; Sat, 26 Aug 2017 14:16:02 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: from mail-wm0-x234.google.com (mail-wm0-x234.google.com [IPv6:2a00:1450:400c:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DCDFF6D1DF for ; Sat, 26 Aug 2017 14:16:01 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: by mail-wm0-x234.google.com with SMTP id w3so479055wmf.0 for ; Sat, 26 Aug 2017 07:16:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=5NrekEC//FK2iPu3M2jrX/zsPi61NtbgpKv/owSHJ38=; b=HQo50FbyC2YQDCAgwb0EcGYIK1RBBw7FFqlrnQYSI3s9BfNIs1zTiVZFj6tMsqqR8+ h1QiICYcqGKqm17jIcj3MuM+WzuFT5nJkkYXDaWv/KiEyY6G/wR8nb3suKY8zaObGegn fpyaTSg8yLlTH8VClDfKxb+dMqBqNlxsOXP7Ru9tOSMd5N5yOjQy6lnYxO4A6Cekqzdv 2lUdUa5Bf7n097zEoaStZiKofg20sIu1JGVK+hcCtHFvOUbH0AmXhP7rNoopgZjo+GXY VTjyg+3KQQEwcFXfrnlmX7LReRhcPI3xbewYrjAXrGxqSkiDWe1UhEpMFPN9zMMdA6Xa DN2g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=5NrekEC//FK2iPu3M2jrX/zsPi61NtbgpKv/owSHJ38=; b=XVo6WQD6eNzTKC/Fo2WLW3e7WrlbTTAclv65LqUVeX/YfaKTuPuh8TtyuUdfEn+Fkg EXyUTZzG9tsGmU/MoAXHlMP6eZxMwH0/jp1hYMlMbg3OubKjuVNWkJ/qd5xA4k3VYk0t 2jbkcBsRXvoakbP34+IOCLZbYRWg2wEjTP6VwtX810nmkzl4cJYVzgbI7+GF85EdkQMj m/raSOSacP9NN1Cx/EEdQpV8jZuN+QnRbCR+bLFL8S5dAChAMQoVP0d9wfFMSFkyzmQ7 Cy2JdatgCxTICMNx5gjY27AfdcizDQkuHMHZAyM61TSNhsgYjwZL9eEfUiKUnWJCiDPj IQsQ== X-Gm-Message-State: AHYfb5j/FVN72qm6YyCAZF6eByekPDhXwsZNjslmmdcV09TQ5ES5CKxx n64TnZFwGBU+c4zvT+3M/4lF0CtwHQ== X-Received: by 10.80.136.129 with SMTP id d1mr1640755edd.130.1503756959983; Sat, 26 Aug 2017 07:15:59 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.192.138 with HTTP; Sat, 26 Aug 2017 07:15:59 -0700 (PDT) In-Reply-To: References: <59988180.7020301@gmail.com> From: Adam Vande More Date: Sat, 26 Aug 2017 09:15:59 -0500 Message-ID: Subject: Re: How to block facebook access To: Odhiambo Washington Cc: Ernie Luzar , "freebsd-questions@freebsd.org" Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 14:16:02 -0000 On Sat, Aug 26, 2017 at 5:19 AM, Odhiambo Washington wrote: > In line with the KISS (Keep It Simple Stupid) principle, I beg to differ > with you! Using Squid in transparent mode is not the easiest way to block > HTTPS traffic. Think about setting up ssl_bump and all those certificates > you have to import on all the computers so that the cert is 'trusted', and > the pain you have to go through with the different browsers. I have been > there and found it too much complex work. > Configuration management. KISS -- Adam From owner-freebsd-questions@freebsd.org Sat Aug 26 14:44:52 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 720BBDF7AB3 for ; Sat, 26 Aug 2017 14:44:52 +0000 (UTC) (envelope-from duane@nofroth.com) Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3C9C56DCF6 for ; Sat, 26 Aug 2017 14:44:52 +0000 (UTC) (envelope-from duane@nofroth.com) Received: by mail-io0-x233.google.com with SMTP id g33so5246843ioj.3 for ; Sat, 26 Aug 2017 07:44:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nofroth.com; s=google; h=cc:subject:to:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=/R+FU8iO78MKEYRcafAdi2QoixiMjHq4zaA5JopsrLs=; b=OufT99Hsc6Zxgf1PIvd3W1hKR6qvE70EE5GVa3CQlcch5wzfazqIhTGfsu5O0dP8Dm BLXVn3zWUdBgX0qCp9w3VHZoV7tqwNjYG4t1BZsLwCg4ZqU/3wOze2L9R9/rQaddn6nP t+D/M6Mp2P/EcJP8Fivbgob/NaBAfSbHtpbwJrIpEZoDWgAIG+pjW+uY1dq02hwQVJmi mBq7V+gVDALgKjdg4dbER7IZjEKkHwoQUAEzkk5oseMdX3ryry9OAW6lGLj/h0KrN1LL lq9688993TFl/Ue/+4Jy6ZIXhJwNzEmPgToMtcjneDymWKJ6L+megg/HPZl0XeGDRVja +DIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:cc:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=/R+FU8iO78MKEYRcafAdi2QoixiMjHq4zaA5JopsrLs=; b=WhfGVPS/XgOFz6CJLYRc31oeaTEosqyxl0d+cyCh3QceZCQMnX0okp2ib1XVGk0Yvk omilwIBYBNrjo9r1e0JcX2JkUGX0YBb0Q74YxCRSRT/Nla5JGAav5eWm8RQL0eAgGLtu J63cCJZGc/dwMfAanw6Fn/EOYv4aF09jASEkjQxJbx2t5tJHCkX8yGR5oS0A6MRcCPOy PGGokI6h6u9LLn64Ce/ncP0g/kRuD6IputoLIRMPMZXhkRKz5c88AgLZp4Z0hQLSrfF3 GxNCJHmptoalrk2c9RS7I5U0oFN6SZO6aq7WlLzV+AX0hey7WXys/QNXamQ0ySIFKiCi JTDQ== X-Gm-Message-State: AHYfb5iS9qSYZtxV7eMo72hfYPVf67ZB/U+DyRQyzQ5pJ0riCjCvEo0U vDEWP9tL79heuEaUQC6bqQ== X-Received: by 10.107.12.160 with SMTP id 32mr1350196iom.207.1503758691385; Sat, 26 Aug 2017 07:44:51 -0700 (PDT) Received: from [10.8.8.76] ([184.75.212.77]) by smtp.gmail.com with ESMTPSA id y1sm1871226itd.8.2017.08.26.07.44.50 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 26 Aug 2017 07:44:50 -0700 (PDT) Cc: duane@nofroth.com Subject: Re: STUMPED: Setting up OpenVPN server on FreeBSD (self.freebsd) To: freebsd-questions@freebsd.org References: From: Duane Whitty Message-ID: Date: Sat, 26 Aug 2017 11:44:45 -0300 User-Agent: Mozilla/5.0 (X11; Linux i686; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 14:44:52 -0000 On 17-08-26 10:03 AM, Fongaboo wrote: > > I'm following this tutorial: > > https://www.digitalocean.com/community/tutorials/how-to-configure-and-connect-to-a-private-openvpn-server-on-freebsd-10-1 > > > Trying this on an AWS instance first and then planning to try on a bare > metal colo server. > > OpenVPN client and daemon seem to be working, in terms of handshaking > and connecting with each other. Problem is, no matter what I do, > connected clients can't get out to the Internet through the server's > gateway interface. > > I've tried setting up NATD, like the tutorial instructs. I've tried > enabling ipfw_nat as described in this comment: > > https://www.digitalocean.com/community/tutorials/how-to-configure-and-connect-to-a-private-openvpn-server-on-freebsd-10-1?comment=40498 > > > rc.conf (for NATD): > > #enable firewall > firewall_enable="YES" > firewall_script="/usr/local/etc/ipfw.rules" > firewall_type="open" > > gateway_enable="YES" > natd_enable="YES" > natd_interface="xn0" > natd_flags="-dynamic -m" > > rc.conf (revised for ipfw_nat): > > #enable firewall > firewall_enable="YES" > firewall_script="/usr/local/etc/ipfw.rules" > firewall_type="open" > firewall_nat_enable="YES" > firewall_nat_interface="xn0" > > gateway_enable="YES" > #natd_enable="YES" > #natd_interface="xn0" > #natd_flags="-dynamic -m" > > *xn0 = external interface of the server > > Neither config allows Internet access. I have this line enabled in > /usr/local/etc/openvpn/openvpn.conf: > > push "redirect-gateway def1 bypass-dhcp" > > Perhaps this is part of the solution?: > > # Configure server mode for ethernet bridging > # using a DHCP-proxy, where clients talk > # to the OpenVPN server-side DHCP server > # to receive their IP address allocation > # and DNS server addresses. You must first use > # your OS's bridging capability to bridge the TAP > # interface with the ethernet NIC interface. > # Note: this mode only works on clients (such as > # Windows), where the client-side TAP adapter is > # bound to a DHCP client. > ;server-bridge > > Any advice would be appreciated. I'm willing to try any combination of > ipfw vs. pf or natd vs. ipfw_nat or whatever if it will allow clients to > see the WAN. TIA! > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" I would try this on bare metal first. It will be much simpler. Once you have a VPN server you know works on bare metal then you can concentrate on making sure you have the correct setup on your AWS instance. Get as many layers as possible out of the way for your first try. I would personally try this on a private LAN first with no firewalls or proxies or anything else in the way. Get the server configured and have one client, also on the same private LAN, connect to it successfully. Taking this approach, let's say you have problems getting the one client to successfully connect to the VPN, people from this list may be able to help you to determine if it's your FreeBSD config or your OpenVPN config. Best Regards, Duane -- Duane Whitty duane@nofroth.com From owner-freebsd-questions@freebsd.org Sat Aug 26 16:13:43 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AB689DD5308 for ; Sat, 26 Aug 2017 16:13:43 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: from mail-wm0-x22b.google.com (mail-wm0-x22b.google.com [IPv6:2a00:1450:400c:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 457CA70359 for ; Sat, 26 Aug 2017 16:13:43 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: by mail-wm0-x22b.google.com with SMTP id y71so8908864wmd.0 for ; Sat, 26 Aug 2017 09:13:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=bGTknzOgw0WA/W8uafnfhEMKdf0Vm3hb+C/dOOaY2dE=; b=UcpP0H3VcuhulK0bUTnAAQLw70VdXMumgdrNHv8LJiWlV2fu7SjQ5KhWCwpo7A5uAj 4FNnk9xpPHS5QQdK0LTA4o9EJ21tUKx9Ng6VuTMWJlNc8J42tjql+xmGRqrQTjlixDkZ H9JVrYmvBzsD+eSOlAazRC19Py3+w+Ni5JvQE9e0fT5uAw39E4eTOLzq1g6Jxmpia8lx kdGe6F15N0TFVxOo5yfYypNhBwdY8rpF8+9bH97dEM6fIjzYq5Pq5HpZPrluoCYK0vV9 2IduHKvbpVux1smzuM8Sixjd4ZmOHsEZCLCz/rozobZ5aIuFbzVI1OxFl5Htg8cw5FqY wKaw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=bGTknzOgw0WA/W8uafnfhEMKdf0Vm3hb+C/dOOaY2dE=; b=OfpHChWVIamOPNlam0nPnmmEN+lzds6qq2zlLUNbtZVbXrjZHIxrDYQVMPcl8LRSC3 VOvoE2ITtmdx1ItlXDip9TwGbQtWSMrIOKnn7ad+ZtTuDQP1Ng8XeGy0la7mapLfVhyV oytFP5ohiNIMz0a+LlDsjrU6+xCe1vFmRYoVbIQrE57Vr9UtZMi2M8boexcap7P4yNyG FUPc6VdddGlwwSKh60zs4CS+fSszm0P7IlPYeS9iwSBYQHMjw+L9HbhbsTE4yMBUDHOi x3zwMe6GoOG6zfBFZIkI5X+ZvLlekpGSaJaKDeiQgAjdcHY+wOCemf3xGE3XJyj1Fcpl y4mA== X-Gm-Message-State: AHYfb5icll1k85T9F0GNlJfx6PQ2Xdh10Vl/tBX/p2zyGFMcJnULXCzM mpw7QxaKZRalFrUHt+o1BnLY2C6vjA== X-Received: by 10.80.144.90 with SMTP id z26mr1918100edz.290.1503764021317; Sat, 26 Aug 2017 09:13:41 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.192.138 with HTTP; Sat, 26 Aug 2017 09:13:40 -0700 (PDT) In-Reply-To: References: From: Adam Vande More Date: Sat, 26 Aug 2017 11:13:40 -0500 Message-ID: Subject: Re: STUMPED: Setting up OpenVPN server on FreeBSD (self.freebsd) To: Fongaboo Cc: FreeBSD Questions Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 16:13:43 -0000 On Sat, Aug 26, 2017 at 8:03 AM, Fongaboo wrote: > > I'm following this tutorial: > > https://www.digitalocean.com/community/tutorials/how-to-conf > igure-and-connect-to-a-private-openvpn-server-on-freebsd-10-1 > > Trying this on an AWS instance first and then planning to try on a bare > metal colo server. > > OpenVPN client and daemon seem to be working, in terms of handshaking and > connecting with each other. Problem is, no matter what I do, connected > clients can't get out to the Internet through the server's gateway > interface. > > I've tried setting up NATD, like the tutorial instructs. I've tried > enabling ipfw_nat as described in this comment: > > https://www.digitalocean.com/community/tutorials/how-to-conf > igure-and-connect-to-a-private-openvpn-server-on-freebsd-10- > 1?comment=40498 > > rc.conf (for NATD): > > #enable firewall > firewall_enable="YES" > firewall_script="/usr/local/etc/ipfw.rules" > firewall_type="open" > > gateway_enable="YES" > natd_enable="YES" > natd_interface="xn0" > natd_flags="-dynamic -m" > > rc.conf (revised for ipfw_nat): > > #enable firewall > firewall_enable="YES" > firewall_script="/usr/local/etc/ipfw.rules" > firewall_type="open" > firewall_nat_enable="YES" > firewall_nat_interface="xn0" > > gateway_enable="YES" > #natd_enable="YES" > #natd_interface="xn0" > #natd_flags="-dynamic -m" > > *xn0 = external interface of the server > > Neither config allows Internet access. I have this line enabled in > /usr/local/etc/openvpn/openvpn.conf: > > push "redirect-gateway def1 bypass-dhcp" > > Perhaps this is part of the solution?: > > # Configure server mode for ethernet bridging > # using a DHCP-proxy, where clients talk > # to the OpenVPN server-side DHCP server > # to receive their IP address allocation > # and DNS server addresses. You must first use > # your OS's bridging capability to bridge the TAP > # interface with the ethernet NIC interface. > # Note: this mode only works on clients (such as > # Windows), where the client-side TAP adapter is > # bound to a DHCP client. > ;server-bridge > > Any advice would be appreciated. I'm willing to try any combination of > ipfw vs. pf or natd vs. ipfw_nat or whatever if it will allow clients to > see the WAN. TIA! > tcpdump and ipfw logs. -- Adam From owner-freebsd-questions@freebsd.org Sat Aug 26 20:12:34 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6FB29DDA117 for ; Sat, 26 Aug 2017 20:12:34 +0000 (UTC) (envelope-from freebsd@fongaboo.com) Received: from h4lix.wtfayla.net (helix.wtfayla.net [64.246.134.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 493B07C183 for ; Sat, 26 Aug 2017 20:12:33 +0000 (UTC) (envelope-from freebsd@fongaboo.com) Received: from localhost (localhost [127.0.0.1]) by h4lix.wtfayla.net (Postfix) with ESMTP id 327367C847B for ; Sat, 26 Aug 2017 16:12:31 -0400 (EDT) Received: from h4lix.wtfayla.net ([127.0.0.1]) by localhost (h4lix.wtfayla.net [127.0.0.1]) (maiad, port 10024) with ESMTP id 94505-09 for ; Sat, 26 Aug 2017 16:12:30 -0400 (EDT) Received: from h4lix.wtfayla.net (h4lix.wtfayla.net [64.246.134.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by h4lix.wtfayla.net (Postfix) with ESMTPS id 8796A7C8478 for ; Sat, 26 Aug 2017 16:12:30 -0400 (EDT) Date: Sat, 26 Aug 2017 16:12:30 -0400 (EDT) From: Fongaboo X-X-Sender: fongaboo@h4lix.wtfayla.net To: FreeBSD Questions Subject: Re: STUMPED: Setting up OpenVPN server on FreeBSD (self.freebsd) In-Reply-To: Message-ID: References: User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 20:12:34 -0000 I switched from IPFW to PF to try the config described here: https://forums.freebsd.org/threads/59223/#post-339781 /var/log/pflog is a tcpdump file. If I run tcpdump -r /var/log/pflog, I get: tcpdump -r /var/log/pflog reading from file /var/log/pflog, link-type PFLOG (OpenBSD pflog file) 18:06:01.613027 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:06:03.971339 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:06:08.675294 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:06:17.278446 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:06:33.344992 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:12:02.691919 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:12:05.261983 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:12:08.931149 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:12:17.402740 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:12:32.635587 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:22:20.921185 IP ip-aws-private-ip.ec2.internal.smtp > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 4035284244, ack 1027120871, win 65535, length 0 18:23:24.940182 IP ip-aws-private-ip.ec2.internal.smtp > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 18:24:28.983673 IP ip-aws-private-ip.ec2.internal.smtp > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 18:25:33.030676 IP ip-aws-private-ip.ec2.internal.smtp > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 18:26:37.046672 IP ip-aws-private-ip.ec2.internal.smtp > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 18:27:41.086657 IP ip-aws-private-ip.ec2.internal.smtp > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 18:28:45.098661 IP ip-aws-private-ip.ec2.internal.smtp > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 18:29:49.131903 IP ip-aws-private-ip.ec2.internal.smtp > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 18:30:53.149655 IP ip-aws-private-ip.ec2.internal.smtp > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [R.], seq 1, ack 1, win 65535, length 0 18:33:50.511601 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2[|icmp6], length 28 18:33:50.723636 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2[|icmp6], length 28 18:33:51.148137 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2[|icmp6], length 48 18:33:53.262119 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2[|icmp6], length 48 18:54:37.515017 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:54:39.561270 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:54:43.638084 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:54:52.017993 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:55:08.264719 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:55:42.101742 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:55:44.380150 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:55:47.824354 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:55:56.645017 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 18:56:11.651346 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 19:03:15.099495 IP ip-aws-private-ip.ec2.internal.smtp > 190.67.161.242.61885: Flags [F.], seq 1970151435, ack 1289455849, win 1041, length 0 19:04:19.102813 IP ip-aws-private-ip.ec2.internal.smtp > 190.67.161.242.61885: Flags [F.], seq 0, ack 1, win 1041, length 0 19:05:23.117498 IP ip-aws-private-ip.ec2.internal.smtp > 190.67.161.242.61885: Flags [F.], seq 0, ack 1, win 1041, length 0 Running tcpdump then connecting client: tcpdump | grep openvpn tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on xn0, link-type EN10MB (Ethernet), capture size 65535 bytes 20:04:17.710245 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 509 20:04:18.553458 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 20:04:18.553557 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 53 20:04:18.618648 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 109 20:04:18.675979 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 20:04:18.681394 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 109 20:04:18.761257 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 20:04:18.809412 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 20:04:19.175102 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 20:04:19.409976 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 20:04:19.409994 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 20:04:19.410001 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 20:04:19.410081 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 20:04:19.410084 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 20:04:19.410085 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 20:04:19.410106 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 20:04:19.802659 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 85 20:04:22.129320 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 20:04:22.129470 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 26 20:04:22.177060 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 20:04:22.182265 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 203 20:04:22.189218 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 126 20:04:22.189240 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 20:04:22.189249 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 20:04:22.189276 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 20:04:22.233404 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 20:04:22.233419 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 20:04:22.233603 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 20:04:22.237922 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 20:04:22.237927 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 20:04:22.237964 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 20:04:22.237977 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 20:04:22.237987 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 20:04:22.271936 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 20:04:22.272042 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 20:04:22.276420 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 On Sat, 26 Aug 2017, Adam Vande More wrote: > On Sat, Aug 26, 2017 at 8:03 AM, Fongaboo wrote: > >> >> I'm following this tutorial: >> >> https://www.digitalocean.com/community/tutorials/how-to-conf >> igure-and-connect-to-a-private-openvpn-server-on-freebsd-10-1 >> >> Trying this on an AWS instance first and then planning to try on a bare >> metal colo server. >> >> OpenVPN client and daemon seem to be working, in terms of handshaking and >> connecting with each other. Problem is, no matter what I do, connected >> clients can't get out to the Internet through the server's gateway >> interface. >> >> I've tried setting up NATD, like the tutorial instructs. I've tried >> enabling ipfw_nat as described in this comment: >> >> https://www.digitalocean.com/community/tutorials/how-to-conf >> igure-and-connect-to-a-private-openvpn-server-on-freebsd-10- >> 1?comment=40498 >> >> rc.conf (for NATD): >> >> #enable firewall >> firewall_enable="YES" >> firewall_script="/usr/local/etc/ipfw.rules" >> firewall_type="open" >> >> gateway_enable="YES" >> natd_enable="YES" >> natd_interface="xn0" >> natd_flags="-dynamic -m" >> >> rc.conf (revised for ipfw_nat): >> >> #enable firewall >> firewall_enable="YES" >> firewall_script="/usr/local/etc/ipfw.rules" >> firewall_type="open" >> firewall_nat_enable="YES" >> firewall_nat_interface="xn0" >> >> gateway_enable="YES" >> #natd_enable="YES" >> #natd_interface="xn0" >> #natd_flags="-dynamic -m" >> >> *xn0 = external interface of the server >> >> Neither config allows Internet access. I have this line enabled in >> /usr/local/etc/openvpn/openvpn.conf: >> >> push "redirect-gateway def1 bypass-dhcp" >> >> Perhaps this is part of the solution?: >> >> # Configure server mode for ethernet bridging >> # using a DHCP-proxy, where clients talk >> # to the OpenVPN server-side DHCP server >> # to receive their IP address allocation >> # and DNS server addresses. You must first use >> # your OS's bridging capability to bridge the TAP >> # interface with the ethernet NIC interface. >> # Note: this mode only works on clients (such as >> # Windows), where the client-side TAP adapter is >> # bound to a DHCP client. >> ;server-bridge >> >> Any advice would be appreciated. I'm willing to try any combination of >> ipfw vs. pf or natd vs. ipfw_nat or whatever if it will allow clients to >> see the WAN. TIA! >> > > tcpdump and ipfw logs. > > -- > Adam > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Sat Aug 26 21:00:44 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5A868DDAE51 for ; Sat, 26 Aug 2017 21:00:44 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: from mail-yw0-x229.google.com (mail-yw0-x229.google.com [IPv6:2607:f8b0:4002:c05::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 13B1C7D305 for ; Sat, 26 Aug 2017 21:00:44 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: by mail-yw0-x229.google.com with SMTP id s143so13784239ywg.0 for ; Sat, 26 Aug 2017 14:00:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=uD95t+yq7tESg6c4CIUZS15113UaA40u51jElYYvcx8=; b=ELX2gwS7DnOwIjuTHmrxE+qIMUP411+HUdETeMgIdYApXDGoZ94F3dNgmPKf7r4i1n GFuOGHM3sPTvj7HptEssyjUn5NgfFuayua+9OCkT8t9BAQf+p6XeoBgpmUaC1+LZVnyU 7EsKlcR+vlcUXkmvzAqtEILVuIjigELINu+cFXsax/UgFrF6+YLzKPRQutmS3YXfDp7N 93dsnGC6y717dxLkpjMI8ymFsOqL/Wvjn7oJ/UQ1MQKVaLmJjPGtUinVfajlb35juLn0 OOXOipTYQMO3FJ8r1aGoK6akbL8vMI/eEeLR74ha83Ps8/YV3lQV7Cwp3rVYiHRR+j3O EXPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=uD95t+yq7tESg6c4CIUZS15113UaA40u51jElYYvcx8=; b=f07qGNFJMj8aGq3P8xEQPGlEVx4onY6CiRXnG3WhhWIppz9QpYqtcQ2SJGqZh3qr/T xWCPtq2bDR2F29P63DVzril6BQoTtQTseltJfzfjfJEZO044is5376Z+mqyACzVgHhtb Hdofqyr9ZXJWaoxxOug8T4120vBc+dYVwFm3gxksY7/Ywy1zezxSM4kSiz5ialauSYpH Hu37EBUxa3HN5HcnGCQoUiESsZN2xIWPfex5lHzI5OQHhVu3XMbZKqiS+hDMWZEkKM8h UMbbQJZYn0/bKcqltWKrLf79g5L/8AhrynkzNxTBt8tRSyrywV/o1W1TO06jHKK6VjYi 227Q== X-Gm-Message-State: AHYfb5hUNOXDKnyzIXdDREG0F30rJR2DvtbH1W6m/DUP4IaY/SCQMspH hSQA3Nhb0yXUmnFVLuERSqxAdm2MYkb0hyc= X-Received: by 10.37.45.93 with SMTP id s29mr2194286ybe.321.1503781242836; Sat, 26 Aug 2017 14:00:42 -0700 (PDT) MIME-Version: 1.0 Received: by 10.13.231.71 with HTTP; Sat, 26 Aug 2017 14:00:42 -0700 (PDT) In-Reply-To: References: From: Ultima Date: Sat, 26 Aug 2017 14:00:42 -0700 Message-ID: Subject: Re: STUMPED: Setting up OpenVPN server on FreeBSD (self.freebsd) To: Fongaboo Cc: FreeBSD Questions Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 21:00:44 -0000 Please post the following which will help debug this, obscure public ip/macs as needed. ifconfig netstat -nr openvpn.log (verb=1 should be good enough may, need higher later) openvpn.conf tcpdump -i xn0 tcpdump -i tun0 rc.conf This information should be enough to figure out the issue you are having. If you have listed some of this information previously, still please dump it in the same email as you keep changing your configuration. On Sat, Aug 26, 2017 at 1:12 PM, Fongaboo wrote: > > I switched from IPFW to PF to try the config described here: > > https://forums.freebsd.org/threads/59223/#post-339781 > > > /var/log/pflog is a tcpdump file. If I run tcpdump -r /var/log/pflog, I > get: > > tcpdump -r /var/log/pflog > > reading from file /var/log/pflog, link-type PFLOG (OpenBSD pflog file) > 18:06:01.613027 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:06:03.971339 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:06:08.675294 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:06:17.278446 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:06:33.344992 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:12:02.691919 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:12:05.261983 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:12:08.931149 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:12:17.402740 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:12:32.635587 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:22:20.921185 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: > Flags [F.], seq 4035284244, ack 1027120871, win 65535, length 0 > 18:23:24.940182 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: > Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:24:28.983673 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: > Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:25:33.030676 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: > Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:26:37.046672 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: > Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:27:41.086657 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: > Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:28:45.098661 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: > Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:29:49.131903 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: > Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:30:53.149655 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: > Flags [R.], seq 1, ack 1, win 65535, length 0 > 18:33:50.511601 IP6 :: > ff02::16: HBH ICMP6, multicast listener report > v2[|icmp6], length 28 > 18:33:50.723636 IP6 :: > ff02::16: HBH ICMP6, multicast listener report > v2[|icmp6], length 28 > 18:33:51.148137 IP6 :: > ff02::16: HBH ICMP6, multicast listener report > v2[|icmp6], length 48 > 18:33:53.262119 IP6 :: > ff02::16: HBH ICMP6, multicast listener report > v2[|icmp6], length 48 > 18:54:37.515017 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:54:39.561270 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:54:43.638084 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:54:52.017993 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:55:08.264719 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:55:42.101742 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:55:44.380150 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:55:47.824354 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:55:56.645017 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:56:11.651346 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 19:03:15.099495 IP ip-aws-private-ip.ec2.internal.smtp > > 190.67.161.242.61885: Flags [F.], seq 1970151435, ack 1289455849, win 1041, > length 0 > 19:04:19.102813 IP ip-aws-private-ip.ec2.internal.smtp > > 190.67.161.242.61885: Flags [F.], seq 0, ack 1, win 1041, length 0 > 19:05:23.117498 IP ip-aws-private-ip.ec2.internal.smtp > > 190.67.161.242.61885: Flags [F.], seq 0, ack 1, win 1041, length 0 > > > Running tcpdump then connecting client: > > tcpdump | grep openvpn > > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on xn0, link-type EN10MB (Ethernet), capture size 65535 bytes > 20:04:17.710245 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 509 > 20:04:18.553458 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:18.553557 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 53 > 20:04:18.618648 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 109 > 20:04:18.675979 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:18.681394 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 109 > 20:04:18.761257 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:18.809412 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:19.175102 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:19.409976 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:19.409994 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:19.410001 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:19.410081 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:19.410084 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:19.410085 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:19.410106 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:19.802659 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 85 > 20:04:22.129320 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 20:04:22.129470 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 26 > 20:04:22.177060 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.182265 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 203 > 20:04:22.189218 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 126 > 20:04:22.189240 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.189249 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.189276 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.233404 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.233419 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.233603 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.237922 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.237927 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.237964 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.237977 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.237987 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.271936 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.272042 IP ip-aws-private-ip.ec2.internal.openvpn > > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.276420 IP my-home-ip.nycap.res.rr.com.openvpn > > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > > > > On Sat, 26 Aug 2017, Adam Vande More wrote: > > On Sat, Aug 26, 2017 at 8:03 AM, Fongaboo wrote: >> >> >>> I'm following this tutorial: >>> >>> https://www.digitalocean.com/community/tutorials/how-to-conf >>> igure-and-connect-to-a-private-openvpn-server-on-freebsd-10-1 >>> >>> Trying this on an AWS instance first and then planning to try on a bare >>> metal colo server. >>> >>> OpenVPN client and daemon seem to be working, in terms of handshaking and >>> connecting with each other. Problem is, no matter what I do, connected >>> clients can't get out to the Internet through the server's gateway >>> interface. >>> >>> I've tried setting up NATD, like the tutorial instructs. I've tried >>> enabling ipfw_nat as described in this comment: >>> >>> https://www.digitalocean.com/community/tutorials/how-to-conf >>> igure-and-connect-to-a-private-openvpn-server-on-freebsd-10- >>> 1?comment=40498 >>> >>> rc.conf (for NATD): >>> >>> #enable firewall >>> firewall_enable="YES" >>> firewall_script="/usr/local/etc/ipfw.rules" >>> firewall_type="open" >>> >>> gateway_enable="YES" >>> natd_enable="YES" >>> natd_interface="xn0" >>> natd_flags="-dynamic -m" >>> >>> rc.conf (revised for ipfw_nat): >>> >>> #enable firewall >>> firewall_enable="YES" >>> firewall_script="/usr/local/etc/ipfw.rules" >>> firewall_type="open" >>> firewall_nat_enable="YES" >>> firewall_nat_interface="xn0" >>> >>> gateway_enable="YES" >>> #natd_enable="YES" >>> #natd_interface="xn0" >>> #natd_flags="-dynamic -m" >>> >>> *xn0 = external interface of the server >>> >>> Neither config allows Internet access. I have this line enabled in >>> /usr/local/etc/openvpn/openvpn.conf: >>> >>> push "redirect-gateway def1 bypass-dhcp" >>> >>> Perhaps this is part of the solution?: >>> >>> # Configure server mode for ethernet bridging >>> # using a DHCP-proxy, where clients talk >>> # to the OpenVPN server-side DHCP server >>> # to receive their IP address allocation >>> # and DNS server addresses. You must first use >>> # your OS's bridging capability to bridge the TAP >>> # interface with the ethernet NIC interface. >>> # Note: this mode only works on clients (such as >>> # Windows), where the client-side TAP adapter is >>> # bound to a DHCP client. >>> ;server-bridge >>> >>> Any advice would be appreciated. I'm willing to try any combination of >>> ipfw vs. pf or natd vs. ipfw_nat or whatever if it will allow clients to >>> see the WAN. TIA! >>> >>> >> tcpdump and ipfw logs. >> >> -- >> Adam >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to "freebsd-questions-unsubscribe >> @freebsd.org" >> >> _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe > @freebsd.org" > From owner-freebsd-questions@freebsd.org Sat Aug 26 21:02:55 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BFB4EDDB081 for ; Sat, 26 Aug 2017 21:02:55 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: from mail-yw0-x22b.google.com (mail-yw0-x22b.google.com [IPv6:2607:f8b0:4002:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7883B7D5FF for ; Sat, 26 Aug 2017 21:02:55 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: by mail-yw0-x22b.google.com with SMTP id h127so13678675ywf.3 for ; Sat, 26 Aug 2017 14:02:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=bdbmSd/F/+TnSD+kmtS+ehyxGVB7qWmCJv2rMUp7A0c=; b=IxfMgicjjNQYvJ3cZHvjfZhoKaz1DHnAYdejXYVqOAj1vUdD893dkm0bxw3oW7tdiS lRlX8deGVK5bXFVDl9cULp1goBAbhtNmUOcdc0CdAvB0yV/+VDhPYRXR9Iyg1tiAR+E8 vbnWlt8H06xW+HDNi6uRD6JOzqyhw9A8qjBB8eC1/GTJ75RMr6fsJvrWQdAmhukXf6Ki DyDNAnPB7rITFYR7T+CJDT3yyvKMBrFmtTsr7vD+4lWo2fTX16ud9u047nYQrxkA+Adz EEMDQ1nJf6G+FT9nu9blMehL0zVQw1PEsSf93yOzYhLNEL3Mti0tUjT4OlMNbaE5YAHF jlOg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=bdbmSd/F/+TnSD+kmtS+ehyxGVB7qWmCJv2rMUp7A0c=; b=RLM/6kvcrq6N2cGZj/OY2KC4JllvPNRNo8f5bip3u8Elazo5fhB1ACyNjjayUfINaI ZJHhUpIE2XQb1OBlNyZygF1VksSt/Y7CIFw1QbcONTzhwNSTSKkRA5O2l7YRu2OsNafx Sp4kxlnnYbR5OQlmqXCSD0H+6/6a1oWJ+ayicgpns3D9i0nPduxaUzkN/HXJeqjGvDQJ S4lkonJi0J8DE/FKsoN0saDbou+pjXIXdqt7KpD8HeJFkEWz4y3XCaHW6gpAEV7DR7y8 qnz3iXFTcd0m4X7k7s0bF7i58ihr1ZlqR9CK4bVpC6gfxMC6ujtjD9gl0Ze3rxaonmcZ GY8A== X-Gm-Message-State: AHYfb5iO5q2e+5o5QlVyCNZ5fIyYM3ObXVAf127sJNMedGFH74qenMic JCsS+TqUi3UILEOfVWKFMSRvHuutm7uB X-Received: by 10.37.79.69 with SMTP id d66mr2133541ybb.122.1503781374486; Sat, 26 Aug 2017 14:02:54 -0700 (PDT) MIME-Version: 1.0 Received: by 10.13.231.71 with HTTP; Sat, 26 Aug 2017 14:02:54 -0700 (PDT) In-Reply-To: References: From: Ultima Date: Sat, 26 Aug 2017 14:02:54 -0700 Message-ID: Subject: Re: STUMPED: Setting up OpenVPN server on FreeBSD (self.freebsd) To: Fongaboo Cc: FreeBSD Questions Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 21:02:55 -0000 Also, I forgot to add, pf.conf or ipfw.conf. On Sat, Aug 26, 2017 at 2:00 PM, Ultima wrote: > Please post the following which will help debug this, obscure public > ip/macs as needed. > ifconfig > netstat -nr > openvpn.log (verb=1 should be good enough may, need higher later) > openvpn.conf > tcpdump -i xn0 > tcpdump -i tun0 > rc.conf > > This information should be enough to figure out the issue you are having. > If you have listed some of this information previously, still please dump > it in the same email as you keep changing your configuration. > > On Sat, Aug 26, 2017 at 1:12 PM, Fongaboo wrote: > >> >> I switched from IPFW to PF to try the config described here: >> >> https://forums.freebsd.org/threads/59223/#post-339781 >> >> >> /var/log/pflog is a tcpdump file. If I run tcpdump -r /var/log/pflog, I >> get: >> >> tcpdump -r /var/log/pflog >> >> reading from file /var/log/pflog, link-type PFLOG (OpenBSD pflog file) >> 18:06:01.613027 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:06:03.971339 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:06:08.675294 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:06:17.278446 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:06:33.344992 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:12:02.691919 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:12:05.261983 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:12:08.931149 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:12:17.402740 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:12:32.635587 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:22:20.921185 IP ip-aws-private-ip.ec2.internal.smtp > >> ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: >> Flags [F.], seq 4035284244, ack 1027120871, win 65535, length 0 >> 18:23:24.940182 IP ip-aws-private-ip.ec2.internal.smtp > >> ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: >> Flags [F.], seq 0, ack 1, win 65535, length 0 >> 18:24:28.983673 IP ip-aws-private-ip.ec2.internal.smtp > >> ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: >> Flags [F.], seq 0, ack 1, win 65535, length 0 >> 18:25:33.030676 IP ip-aws-private-ip.ec2.internal.smtp > >> ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: >> Flags [F.], seq 0, ack 1, win 65535, length 0 >> 18:26:37.046672 IP ip-aws-private-ip.ec2.internal.smtp > >> ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: >> Flags [F.], seq 0, ack 1, win 65535, length 0 >> 18:27:41.086657 IP ip-aws-private-ip.ec2.internal.smtp > >> ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: >> Flags [F.], seq 0, ack 1, win 65535, length 0 >> 18:28:45.098661 IP ip-aws-private-ip.ec2.internal.smtp > >> ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: >> Flags [F.], seq 0, ack 1, win 65535, length 0 >> 18:29:49.131903 IP ip-aws-private-ip.ec2.internal.smtp > >> ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: >> Flags [F.], seq 0, ack 1, win 65535, length 0 >> 18:30:53.149655 IP ip-aws-private-ip.ec2.internal.smtp > >> ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: >> Flags [R.], seq 1, ack 1, win 65535, length 0 >> 18:33:50.511601 IP6 :: > ff02::16: HBH ICMP6, multicast listener report >> v2[|icmp6], length 28 >> 18:33:50.723636 IP6 :: > ff02::16: HBH ICMP6, multicast listener report >> v2[|icmp6], length 28 >> 18:33:51.148137 IP6 :: > ff02::16: HBH ICMP6, multicast listener report >> v2[|icmp6], length 48 >> 18:33:53.262119 IP6 :: > ff02::16: HBH ICMP6, multicast listener report >> v2[|icmp6], length 48 >> 18:54:37.515017 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:54:39.561270 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:54:43.638084 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:54:52.017993 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:55:08.264719 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:55:42.101742 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:55:44.380150 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:55:47.824354 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:55:56.645017 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 18:56:11.651346 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 19:03:15.099495 IP ip-aws-private-ip.ec2.internal.smtp > >> 190.67.161.242.61885: Flags [F.], seq 1970151435, ack 1289455849, win 1041, >> length 0 >> 19:04:19.102813 IP ip-aws-private-ip.ec2.internal.smtp > >> 190.67.161.242.61885: Flags [F.], seq 0, ack 1, win 1041, length 0 >> 19:05:23.117498 IP ip-aws-private-ip.ec2.internal.smtp > >> 190.67.161.242.61885: Flags [F.], seq 0, ack 1, win 1041, length 0 >> >> >> Running tcpdump then connecting client: >> >> tcpdump | grep openvpn >> >> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode >> listening on xn0, link-type EN10MB (Ethernet), capture size 65535 bytes >> 20:04:17.710245 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 509 >> 20:04:18.553458 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 >> 20:04:18.553557 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 53 >> 20:04:18.618648 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 109 >> 20:04:18.675979 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 >> 20:04:18.681394 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 109 >> 20:04:18.761257 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 >> 20:04:18.809412 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 >> 20:04:19.175102 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 >> 20:04:19.409976 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 >> 20:04:19.409994 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 >> 20:04:19.410001 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 >> 20:04:19.410081 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 >> 20:04:19.410084 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 >> 20:04:19.410085 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 >> 20:04:19.410106 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 >> 20:04:19.802659 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 85 >> 20:04:22.129320 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 >> 20:04:22.129470 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 26 >> 20:04:22.177060 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 >> 20:04:22.182265 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 203 >> 20:04:22.189218 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 126 >> 20:04:22.189240 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 >> 20:04:22.189249 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 >> 20:04:22.189276 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 >> 20:04:22.233404 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 >> 20:04:22.233419 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 >> 20:04:22.233603 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 >> 20:04:22.237922 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 >> 20:04:22.237927 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 >> 20:04:22.237964 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 >> 20:04:22.237977 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 >> 20:04:22.237987 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 >> 20:04:22.271936 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 >> 20:04:22.272042 IP ip-aws-private-ip.ec2.internal.openvpn > >> my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 >> 20:04:22.276420 IP my-home-ip.nycap.res.rr.com.openvpn > >> ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 >> >> >> >> On Sat, 26 Aug 2017, Adam Vande More wrote: >> >> On Sat, Aug 26, 2017 at 8:03 AM, Fongaboo wrote: >>> >>> >>>> I'm following this tutorial: >>>> >>>> https://www.digitalocean.com/community/tutorials/how-to-conf >>>> igure-and-connect-to-a-private-openvpn-server-on-freebsd-10-1 >>>> >>>> Trying this on an AWS instance first and then planning to try on a bare >>>> metal colo server. >>>> >>>> OpenVPN client and daemon seem to be working, in terms of handshaking >>>> and >>>> connecting with each other. Problem is, no matter what I do, connected >>>> clients can't get out to the Internet through the server's gateway >>>> interface. >>>> >>>> I've tried setting up NATD, like the tutorial instructs. I've tried >>>> enabling ipfw_nat as described in this comment: >>>> >>>> https://www.digitalocean.com/community/tutorials/how-to-conf >>>> igure-and-connect-to-a-private-openvpn-server-on-freebsd-10- >>>> 1?comment=40498 >>>> >>>> rc.conf (for NATD): >>>> >>>> #enable firewall >>>> firewall_enable="YES" >>>> firewall_script="/usr/local/etc/ipfw.rules" >>>> firewall_type="open" >>>> >>>> gateway_enable="YES" >>>> natd_enable="YES" >>>> natd_interface="xn0" >>>> natd_flags="-dynamic -m" >>>> >>>> rc.conf (revised for ipfw_nat): >>>> >>>> #enable firewall >>>> firewall_enable="YES" >>>> firewall_script="/usr/local/etc/ipfw.rules" >>>> firewall_type="open" >>>> firewall_nat_enable="YES" >>>> firewall_nat_interface="xn0" >>>> >>>> gateway_enable="YES" >>>> #natd_enable="YES" >>>> #natd_interface="xn0" >>>> #natd_flags="-dynamic -m" >>>> >>>> *xn0 = external interface of the server >>>> >>>> Neither config allows Internet access. I have this line enabled in >>>> /usr/local/etc/openvpn/openvpn.conf: >>>> >>>> push "redirect-gateway def1 bypass-dhcp" >>>> >>>> Perhaps this is part of the solution?: >>>> >>>> # Configure server mode for ethernet bridging >>>> # using a DHCP-proxy, where clients talk >>>> # to the OpenVPN server-side DHCP server >>>> # to receive their IP address allocation >>>> # and DNS server addresses. You must first use >>>> # your OS's bridging capability to bridge the TAP >>>> # interface with the ethernet NIC interface. >>>> # Note: this mode only works on clients (such as >>>> # Windows), where the client-side TAP adapter is >>>> # bound to a DHCP client. >>>> ;server-bridge >>>> >>>> Any advice would be appreciated. I'm willing to try any combination of >>>> ipfw vs. pf or natd vs. ipfw_nat or whatever if it will allow clients to >>>> see the WAN. TIA! >>>> >>>> >>> tcpdump and ipfw logs. >>> >>> -- >>> Adam >>> _______________________________________________ >>> freebsd-questions@freebsd.org mailing list >>> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >>> To unsubscribe, send any mail to "freebsd-questions-unsubscribe >>> @freebsd.org" >>> >>> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to "freebsd-questions-unsubscribe >> @freebsd.org" >> > > From owner-freebsd-questions@freebsd.org Sat Aug 26 23:05:36 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E59F1DDCF82 for ; Sat, 26 Aug 2017 23:05:36 +0000 (UTC) (envelope-from freebsd@fongaboo.com) Received: from h4lix.wtfayla.net (helix.wtfayla.net [64.246.134.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8172080104 for ; Sat, 26 Aug 2017 23:05:35 +0000 (UTC) (envelope-from freebsd@fongaboo.com) Received: from localhost (localhost [127.0.0.1]) by h4lix.wtfayla.net (Postfix) with ESMTP id 644A8810822 for ; Sat, 26 Aug 2017 19:05:32 -0400 (EDT) Received: from h4lix.wtfayla.net ([127.0.0.1]) by localhost (h4lix.wtfayla.net [127.0.0.1]) (maiad, port 10024) with ESMTP id 98640-07 for ; Sat, 26 Aug 2017 19:05:31 -0400 (EDT) Received: from h4lix.wtfayla.net (h4lix.wtfayla.net [64.246.134.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by h4lix.wtfayla.net (Postfix) with ESMTPS id 6F4EE810814 for ; Sat, 26 Aug 2017 19:05:31 -0400 (EDT) Date: Sat, 26 Aug 2017 19:05:31 -0400 (EDT) From: Fongaboo X-X-Sender: fongaboo@h4lix.wtfayla.net To: FreeBSD Questions Subject: Re: STUMPED: Setting up OpenVPN server on FreeBSD (self.freebsd) In-Reply-To: Message-ID: References: User-Agent: Alpine 2.20 (BSF 67 2015-01-07) MIME-Version: 1.0 Content-Type: multipart/mixed; BOUNDARY="1512028668-487803783-1503788731=:50226" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Aug 2017 23:05:37 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --1512028668-487803783-1503788731=:50226 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8BIT Thank you so much! See files attached. The tcpdump for xn0 has smtp, DNS, ICMP traffic grepped out. The one for tun0 is not grepped. For both dumps, I connected my client and then tried to browse to http://176.58.123.25. It's an Android client, so in the tun0 dump you can see a lot of services attempting to connect. On Sat, 26 Aug 2017, Ultima wrote: > Also, I forgot to add, pf.conf or ipfw.conf. > > On Sat, Aug 26, 2017 at 2:00 PM, Ultima wrote: > Please post the following which will help debug this, obscure public ip/macs as needed.ifconfig > netstat -nr > openvpn.log (verb=1 should be good enough may, need higher later) > openvpn.conf > tcpdump -i xn0 > tcpdump -i tun0 > rc.conf > > This information should be enough to figure out the issue you are having. If you have listed some of this information previously, > still please dump it in the same email as you keep changing your configuration. > > On Sat, Aug 26, 2017 at 1:12 PM, Fongaboo wrote: > > I switched from IPFW to PF to try the config described here: > > https://forums.freebsd.org/threads/59223/#post-339781 > > > /var/log/pflog is a tcpdump file. If I run tcpdump -r /var/log/pflog, I get: > > tcpdump -r /var/log/pflog > > reading from file /var/log/pflog, link-type PFLOG (OpenBSD pflog file) > 18:06:01.613027 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:06:03.971339 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:06:08.675294 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:06:17.278446 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:06:33.344992 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:12:02.691919 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:12:05.261983 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:12:08.931149 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:12:17.402740 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:12:32.635587 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:22:20.921185 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 4035284244, ack 1027120871, win > 65535, length 0 > 18:23:24.940182 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:24:28.983673 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:25:33.030676 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:26:37.046672 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:27:41.086657 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:28:45.098661 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:29:49.131903 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [F.], seq 0, ack 1, win 65535, length 0 > 18:30:53.149655 IP ip-aws-private-ip.ec2.internal.smtp > > ge-0-4.customer-gw-rangewave-consulting.es-28-jnb.za.seacomnet.com.28964: Flags [R.], seq 1, ack 1, win 65535, length 0 > 18:33:50.511601 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2[|icmp6], length 28 > 18:33:50.723636 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2[|icmp6], length 28 > 18:33:51.148137 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2[|icmp6], length 48 > 18:33:53.262119 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2[|icmp6], length 48 > 18:54:37.515017 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:54:39.561270 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:54:43.638084 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:54:52.017993 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:55:08.264719 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:55:42.101742 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:55:44.380150 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:55:47.824354 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:55:56.645017 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 18:56:11.651346 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 19:03:15.099495 IP ip-aws-private-ip.ec2.internal.smtp > 190.67.161.242.61885: Flags [F.], seq 1970151435, ack 1289455849, > win 1041, length 0 > 19:04:19.102813 IP ip-aws-private-ip.ec2.internal.smtp > 190.67.161.242.61885: Flags [F.], seq 0, ack 1, win 1041, length > 0 > 19:05:23.117498 IP ip-aws-private-ip.ec2.internal.smtp > 190.67.161.242.61885: Flags [F.], seq 0, ack 1, win 1041, length > 0 > > > Running tcpdump then connecting client: > > tcpdump | grep openvpn > > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on xn0, link-type EN10MB (Ethernet), capture size 65535 bytes > 20:04:17.710245 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 509 > 20:04:18.553458 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:18.553557 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 53 > 20:04:18.618648 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 109 > 20:04:18.675979 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:18.681394 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 109 > 20:04:18.761257 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:18.809412 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:19.175102 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:19.409976 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:19.409994 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:19.410001 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:19.410081 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 93 > 20:04:19.410084 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:19.410085 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:19.410106 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 101 > 20:04:19.802659 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 85 > 20:04:22.129320 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 14 > 20:04:22.129470 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 26 > 20:04:22.177060 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.182265 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 203 > 20:04:22.189218 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 126 > 20:04:22.189240 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.189249 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.189276 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.233404 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.233419 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.233603 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.237922 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.237927 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.237964 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.237977 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.237987 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.271936 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > 20:04:22.272042 IP ip-aws-private-ip.ec2.internal.openvpn > my-home-ip.nycap.res.rr.com.openvpn: UDP, length 114 > 20:04:22.276420 IP my-home-ip.nycap.res.rr.com.openvpn > ip-aws-private-ip.ec2.internal.openvpn: UDP, length 22 > > > On Sat, 26 Aug 2017, Adam Vande More wrote: > > On Sat, Aug 26, 2017 at 8:03 AM, Fongaboo wrote: > > > I'm following this tutorial: > > https://www.digitalocean.com/community/tutorials/how-to-conf > igure-and-connect-to-a-private-openvpn-server-on-freebsd-10-1 > > Trying this on an AWS instance first and then planning to try on a bare > metal colo server. > > OpenVPN client and daemon seem to be working, in terms of handshaking and > connecting with each other. Problem is, no matter what I do, connected > clients can't get out to the Internet through the server's gateway > interface. > > I've tried setting up NATD, like the tutorial instructs. I've tried > enabling ipfw_nat as described in this comment: > > https://www.digitalocean.com/community/tutorials/how-to-conf > igure-and-connect-to-a-private-openvpn-server-on-freebsd-10- > 1?comment=40498 > > rc.conf (for NATD): > > #enable firewall > firewall_enable="YES" > firewall_script="/usr/local/etc/ipfw.rules" > firewall_type="open" > > gateway_enable="YES" > natd_enable="YES" > natd_interface="xn0" > natd_flags="-dynamic -m" > > rc.conf (revised for ipfw_nat): > > #enable firewall > firewall_enable="YES" > firewall_script="/usr/local/etc/ipfw.rules" > firewall_type="open" > firewall_nat_enable="YES" > firewall_nat_interface="xn0" > > gateway_enable="YES" > #natd_enable="YES" > #natd_interface="xn0" > #natd_flags="-dynamic -m" > > *xn0 = external interface of the server > > Neither config allows Internet access. I have this line enabled in > /usr/local/etc/openvpn/openvpn.conf: > > push "redirect-gateway def1 bypass-dhcp" > > Perhaps this is part of the solution?: > > # Configure server mode for ethernet bridging > # using a DHCP-proxy, where clients talk > # to the OpenVPN server-side DHCP server > # to receive their IP address allocation > # and DNS server addresses.  You must first use > # your OS's bridging capability to bridge the TAP > # interface with the ethernet NIC interface. > # Note: this mode only works on clients (such as > # Windows), where the client-side TAP adapter is > # bound to a DHCP client. > ;server-bridge > > Any advice would be appreciated. I'm willing to try any combination of > ipfw vs. pf or natd vs. ipfw_nat or whatever if it will allow clients to > see the WAN. TIA! > > > tcpdump and ipfw logs. > > -- > Adam > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > > > > > --1512028668-487803783-1503788731=:50226 Content-Type: text/plain; charset=US-ASCII; name=netstat Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: Content-Disposition: attachment; filename=netstat Um91dGluZyB0YWJsZXMNCg0KSW50ZXJuZXQ6DQpEZXN0aW5hdGlvbiAgICAg ICAgR2F0ZXdheSAgICAgICAgICAgIEZsYWdzICAgICAgTmV0aWYgRXhwaXJl DQpkZWZhdWx0ICAgICAgICAgICAgMTcyLjMxLjE2LjEgICAgICAgIFVHUyAg ICAgICAgIHhuMA0KMTAuOC4wLjAvMjQgICAgICAgIDEwLjguMC4yICAgICAg ICAgICBVR1MgICAgICAgIHR1bjANCjEwLjguMC4xICAgICAgICAgICBsaW5r IzQgICAgICAgICAgICAgVUhTICAgICAgICAgbG8wDQoxMC44LjAuMiAgICAg ICAgICAgbGluayM0ICAgICAgICAgICAgIFVIICAgICAgICAgdHVuMA0KMTI3 LjAuMC4xICAgICAgICAgIGxpbmsjMSAgICAgICAgICAgICBVSCAgICAgICAg ICBsbzANCjE3Mi4zMS4xNi4wLzIwICAgICBsaW5rIzIgICAgICAgICAgICAg VSAgICAgICAgICAgeG4wDQoxNzIuMzEuMjYuMTc4ICAgICAgbGluayMyICAg ICAgICAgICAgIFVIUyAgICAgICAgIGxvMA0KDQpJbnRlcm5ldDY6DQpEZXN0 aW5hdGlvbiAgICAgICAgICAgICAgICAgICAgICAgR2F0ZXdheSAgICAgICAg ICAgICAgICAgICAgICAgRmxhZ3MgICAgICBOZXRpZiBFeHBpcmUNCjo6Lzk2 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA6OjEgICAgICAgICAgICAg ICAgICAgICAgICAgICBVR1JTICAgICAgICBsbzANCjo6MSAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBsaW5rIzEgICAgICAgICAgICAgICAgICAg ICAgICBVSCAgICAgICAgICBsbzANCjo6ZmZmZjowLjAuMC4wLzk2ICAgICAg ICAgICAgICAgICA6OjEgICAgICAgICAgICAgICAgICAgICAgICAgICBVR1JT ICAgICAgICBsbzANCmZlODA6Oi8xMCAgICAgICAgICAgICAgICAgICAgICAg ICA6OjEgICAgICAgICAgICAgICAgICAgICAgICAgICBVR1JTICAgICAgICBs bzANCmZlODA6OiVsbzAvNjQgICAgICAgICAgICAgICAgICAgICBsaW5rIzEg ICAgICAgICAgICAgICAgICAgICAgICBVICAgICAgICAgICBsbzANCmZlODA6 OjElbG8wICAgICAgICAgICAgICAgICAgICAgICBsaW5rIzEgICAgICAgICAg ICAgICAgICAgICAgICBVSFMgICAgICAgICBsbzANCmZlODA6OiV0dW4wLzY0 ICAgICAgICAgICAgICAgICAgICBsaW5rIzQgICAgICAgICAgICAgICAgICAg ICAgICBVICAgICAgICAgIHR1bjANCmZlODA6OmE0MjA6Mjk5Yzo4ZTk6ZTJm ZSV0dW4wICAgICBsaW5rIzQgICAgICAgICAgICAgICAgICAgICAgICBVSFMg ICAgICAgICBsbzANCmZmMDE6OiVsbzAvMzIgICAgICAgICAgICAgICAgICAg ICA6OjEgICAgICAgICAgICAgICAgICAgICAgICAgICBVICAgICAgICAgICBs bzANCmZmMDE6OiV0dW4wLzMyICAgICAgICAgICAgICAgICAgICBmZTgwOjph NDIwOjI5OWM6OGU5OmUyZmUldHVuMCBVICAgICAgICAgIHR1bjANCmZmMDI6 Oi8xNiAgICAgICAgICAgICAgICAgICAgICAgICA6OjEgICAgICAgICAgICAg ICAgICAgICAgICAgICBVR1JTICAgICAgICBsbzANCmZmMDI6OiVsbzAvMzIg ICAgICAgICAgICAgICAgICAgICA6OjEgICAgICAgICAgICAgICAgICAgICAg ICAgICBVICAgICAgICAgICBsbzANCmZmMDI6OiV0dW4wLzMyICAgICAgICAg ICAgICAgICAgICBmZTgwOjphNDIwOjI5OWM6OGU5OmUyZmUldHVuMCBVICAg ICAgICAgIHR1bjANCg== --1512028668-487803783-1503788731=:50226 Content-Type: text/plain; charset=US-ASCII; name=openvpn-status.log Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: Content-Disposition: attachment; filename=openvpn-status.log T3BlblZQTiBDTElFTlQgTElTVA0KVXBkYXRlZCxTYXQgQXVnIDI2IDIyOjEw OjM3IDIwMTcNCkNvbW1vbiBOYW1lLFJlYWwgQWRkcmVzcyxCeXRlcyBSZWNl aXZlZCxCeXRlcyBTZW50LENvbm5lY3RlZCBTaW5jZQ0Kc2VydmVyLWhvc3Ru YW1lLmRvbWFpbi50bGQsbXktaG9tZS1pcDoxMTk0LDM1MDIwLDExMjQ5LFNh dCBBdWcgMjYgMjI6MDY6MDUgMjAxNw0KUk9VVElORyBUQUJMRQ0KVmlydHVh bCBBZGRyZXNzLENvbW1vbiBOYW1lLFJlYWwgQWRkcmVzcyxMYXN0IFJlZg0K MTAuOC4wLjYsc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQsbXktaG9tZS1p cDoxMTk0LFNhdCBBdWcgMjYgMjI6MDk6NTAgMjAxNw0KR0xPQkFMIFNUQVRT DQpNYXggYmNhc3QvbWNhc3QgcXVldWUgbGVuZ3RoLDANCkVORA0K --1512028668-487803783-1503788731=:50226 Content-Type: text/plain; charset=US-ASCII; name=openvpn.conf Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: Content-Disposition: attachment; filename=openvpn.conf IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMj IyMjIw0KIyBTYW1wbGUgT3BlblZQTiAyLjAgY29uZmlnIGZpbGUgZm9yICAg ICAgICAgICAgIw0KIyBtdWx0aS1jbGllbnQgc2VydmVyLiAgICAgICAgICAg ICAgICAgICAgICAgICAgIw0KIyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIw0KIyBUaGlzIGZpbGUgaXMgZm9yIHRo ZSBzZXJ2ZXIgc2lkZSAgICAgICAgICAgICAgIw0KIyBvZiBhIG1hbnktY2xp ZW50cyA8LT4gb25lLXNlcnZlciAgICAgICAgICAgICAgIw0KIyBPcGVuVlBO IGNvbmZpZ3VyYXRpb24uICAgICAgICAgICAgICAgICAgICAgICAgIw0KIyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Iw0KIyBPcGVuVlBOIGFsc28gc3VwcG9ydHMgICAgICAgICAgICAgICAgICAg ICAgICAgIw0KIyBzaW5nbGUtbWFjaGluZSA8LT4gc2luZ2xlLW1hY2hpbmUg ICAgICAgICAgICAgIw0KIyBjb25maWd1cmF0aW9ucyAoU2VlIHRoZSBFeGFt cGxlcyBwYWdlICAgICAgICAgIw0KIyBvbiB0aGUgd2ViIHNpdGUgZm9yIG1v cmUgaW5mbykuICAgICAgICAgICAgICAgIw0KIyAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIw0KIyBUaGlzIGNvbmZp ZyBzaG91bGQgd29yayBvbiBXaW5kb3dzICAgICAgICAgICAgIw0KIyBvciBM aW51eC9CU0Qgc3lzdGVtcy4gIFJlbWVtYmVyIG9uICAgICAgICAgICAgIw0K IyBXaW5kb3dzIHRvIHF1b3RlIHBhdGhuYW1lcyBhbmQgdXNlICAgICAgICAg ICAgIw0KIyBkb3VibGUgYmFja3NsYXNoZXMsIGUuZy46ICAgICAgICAgICAg ICAgICAgICAgIw0KIyAiQzpcXFByb2dyYW0gRmlsZXNcXE9wZW5WUE5cXGNv bmZpZ1xcZm9vLmtleSIgIw0KIyAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIw0KIyBDb21tZW50cyBhcmUgcHJlY2Vk ZWQgd2l0aCAnIycgb3IgJzsnICAgICAgICAgIw0KIyMjIyMjIyMjIyMjIyMj IyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIw0KDQojIFdoaWNo IGxvY2FsIElQIGFkZHJlc3Mgc2hvdWxkIE9wZW5WUE4NCiMgbGlzdGVuIG9u PyAob3B0aW9uYWwpDQo7bG9jYWwgYS5iLmMuZA0KDQojIFdoaWNoIFRDUC9V RFAgcG9ydCBzaG91bGQgT3BlblZQTiBsaXN0ZW4gb24/DQojIElmIHlvdSB3 YW50IHRvIHJ1biBtdWx0aXBsZSBPcGVuVlBOIGluc3RhbmNlcw0KIyBvbiB0 aGUgc2FtZSBtYWNoaW5lLCB1c2UgYSBkaWZmZXJlbnQgcG9ydA0KIyBudW1i ZXIgZm9yIGVhY2ggb25lLiAgWW91IHdpbGwgbmVlZCB0bw0KIyBvcGVuIHVw IHRoaXMgcG9ydCBvbiB5b3VyIGZpcmV3YWxsLg0KcG9ydCAxMTk0DQoNCiMg VENQIG9yIFVEUCBzZXJ2ZXI/DQo7cHJvdG8gdGNwDQpwcm90byB1ZHANCg0K IyAiZGV2IHR1biIgd2lsbCBjcmVhdGUgYSByb3V0ZWQgSVAgdHVubmVsLA0K IyAiZGV2IHRhcCIgd2lsbCBjcmVhdGUgYW4gZXRoZXJuZXQgdHVubmVsLg0K IyBVc2UgImRldiB0YXAwIiBpZiB5b3UgYXJlIGV0aGVybmV0IGJyaWRnaW5n DQojIGFuZCBoYXZlIHByZWNyZWF0ZWQgYSB0YXAwIHZpcnR1YWwgaW50ZXJm YWNlDQojIGFuZCBicmlkZ2VkIGl0IHdpdGggeW91ciBldGhlcm5ldCBpbnRl cmZhY2UuDQojIElmIHlvdSB3YW50IHRvIGNvbnRyb2wgYWNjZXNzIHBvbGlj aWVzDQojIG92ZXIgdGhlIFZQTiwgeW91IG11c3QgY3JlYXRlIGZpcmV3YWxs DQojIHJ1bGVzIGZvciB0aGUgdGhlIFRVTi9UQVAgaW50ZXJmYWNlLg0KIyBP biBub24tV2luZG93cyBzeXN0ZW1zLCB5b3UgY2FuIGdpdmUNCiMgYW4gZXhw bGljaXQgdW5pdCBudW1iZXIsIHN1Y2ggYXMgdHVuMC4NCiMgT24gV2luZG93 cywgdXNlICJkZXYtbm9kZSIgZm9yIHRoaXMuDQojIE9uIG1vc3Qgc3lzdGVt cywgdGhlIFZQTiB3aWxsIG5vdCBmdW5jdGlvbg0KIyB1bmxlc3MgeW91IHBh cnRpYWxseSBvciBmdWxseSBkaXNhYmxlDQojIHRoZSBmaXJld2FsbCBmb3Ig dGhlIFRVTi9UQVAgaW50ZXJmYWNlLg0KO2RldiB0YXANCmRldiB0dW4NCg0K IyBXaW5kb3dzIG5lZWRzIHRoZSBUQVAtV2luMzIgYWRhcHRlciBuYW1lDQoj IGZyb20gdGhlIE5ldHdvcmsgQ29ubmVjdGlvbnMgcGFuZWwgaWYgeW91DQoj IGhhdmUgbW9yZSB0aGFuIG9uZS4gIE9uIFhQIFNQMiBvciBoaWdoZXIsDQoj IHlvdSBtYXkgbmVlZCB0byBzZWxlY3RpdmVseSBkaXNhYmxlIHRoZQ0KIyBX aW5kb3dzIGZpcmV3YWxsIGZvciB0aGUgVEFQIGFkYXB0ZXIuDQojIE5vbi1X aW5kb3dzIHN5c3RlbXMgdXN1YWxseSBkb24ndCBuZWVkIHRoaXMuDQo7ZGV2 LW5vZGUgTXlUYXANCg0KIyBTU0wvVExTIHJvb3QgY2VydGlmaWNhdGUgKGNh KSwgY2VydGlmaWNhdGUNCiMgKGNlcnQpLCBhbmQgcHJpdmF0ZSBrZXkgKGtl eSkuICBFYWNoIGNsaWVudA0KIyBhbmQgdGhlIHNlcnZlciBtdXN0IGhhdmUg dGhlaXIgb3duIGNlcnQgYW5kDQojIGtleSBmaWxlLiAgVGhlIHNlcnZlciBh bmQgYWxsIGNsaWVudHMgd2lsbA0KIyB1c2UgdGhlIHNhbWUgY2EgZmlsZS4N CiMNCiMgU2VlIHRoZSAiZWFzeS1yc2EiIGRpcmVjdG9yeSBmb3IgYSBzZXJp ZXMNCiMgb2Ygc2NyaXB0cyBmb3IgZ2VuZXJhdGluZyBSU0EgY2VydGlmaWNh dGVzDQojIGFuZCBwcml2YXRlIGtleXMuICBSZW1lbWJlciB0byB1c2UNCiMg YSB1bmlxdWUgQ29tbW9uIE5hbWUgZm9yIHRoZSBzZXJ2ZXINCiMgYW5kIGVh Y2ggb2YgdGhlIGNsaWVudCBjZXJ0aWZpY2F0ZXMuDQojDQojIEFueSBYNTA5 IGtleSBtYW5hZ2VtZW50IHN5c3RlbSBjYW4gYmUgdXNlZC4NCiMgT3BlblZQ TiBjYW4gYWxzbyB1c2UgYSBQS0NTICMxMiBmb3JtYXR0ZWQga2V5IGZpbGUN CiMgKHNlZSAicGtjczEyIiBkaXJlY3RpdmUgaW4gbWFuIHBhZ2UpLg0KY2Eg Y2EuY3J0DQpjZXJ0IG9wZW52cG4tc2VydmVyLmNydA0Ka2V5IG9wZW52cG4t c2VydmVyLmtleSAgIyBUaGlzIGZpbGUgc2hvdWxkIGJlIGtlcHQgc2VjcmV0 DQoNCiMgRGlmZmllIGhlbGxtYW4gcGFyYW1ldGVycy4NCiMgR2VuZXJhdGUg eW91ciBvd24gd2l0aDoNCiMgICBvcGVuc3NsIGRocGFyYW0gLW91dCBkaDIw NDgucGVtIDIwNDgNCmRoIGRoMjA0OC5wZW0NCg0KIyBOZXR3b3JrIHRvcG9s b2d5DQojIFNob3VsZCBiZSBzdWJuZXQgKGFkZHJlc3NpbmcgdmlhIElQKQ0K IyB1bmxlc3MgV2luZG93cyBjbGllbnRzIHYyLjAuOSBhbmQgbG93ZXIgaGF2 ZSB0bw0KIyBiZSBzdXBwb3J0ZWQgKHRoZW4gbmV0MzAsIGkuZS4gYSAvMzAg cGVyIGNsaWVudCkNCiMgRGVmYXVsdHMgdG8gbmV0MzAgKG5vdCByZWNvbW1l bmRlZCkNCjt0b3BvbG9neSBzdWJuZXQNCg0KIyBDb25maWd1cmUgc2VydmVy IG1vZGUgYW5kIHN1cHBseSBhIFZQTiBzdWJuZXQNCiMgZm9yIE9wZW5WUE4g dG8gZHJhdyBjbGllbnQgYWRkcmVzc2VzIGZyb20uDQojIFRoZSBzZXJ2ZXIg d2lsbCB0YWtlIDEwLjguMC4xIGZvciBpdHNlbGYsDQojIHRoZSByZXN0IHdp bGwgYmUgbWFkZSBhdmFpbGFibGUgdG8gY2xpZW50cy4NCiMgRWFjaCBjbGll bnQgd2lsbCBiZSBhYmxlIHRvIHJlYWNoIHRoZSBzZXJ2ZXINCiMgb24gMTAu OC4wLjEuIENvbW1lbnQgdGhpcyBsaW5lIG91dCBpZiB5b3UgYXJlDQojIGV0 aGVybmV0IGJyaWRnaW5nLiBTZWUgdGhlIG1hbiBwYWdlIGZvciBtb3JlIGlu Zm8uDQpzZXJ2ZXIgMTAuOC4wLjAgMjU1LjI1NS4yNTUuMA0KDQojIE1haW50 YWluIGEgcmVjb3JkIG9mIGNsaWVudCA8LT4gdmlydHVhbCBJUCBhZGRyZXNz DQojIGFzc29jaWF0aW9ucyBpbiB0aGlzIGZpbGUuICBJZiBPcGVuVlBOIGdv ZXMgZG93biBvcg0KIyBpcyByZXN0YXJ0ZWQsIHJlY29ubmVjdGluZyBjbGll bnRzIGNhbiBiZSBhc3NpZ25lZA0KIyB0aGUgc2FtZSB2aXJ0dWFsIElQIGFk ZHJlc3MgZnJvbSB0aGUgcG9vbCB0aGF0IHdhcw0KIyBwcmV2aW91c2x5IGFz c2lnbmVkLg0KaWZjb25maWctcG9vbC1wZXJzaXN0IGlwcC50eHQNCg0KIyBD b25maWd1cmUgc2VydmVyIG1vZGUgZm9yIGV0aGVybmV0IGJyaWRnaW5nLg0K IyBZb3UgbXVzdCBmaXJzdCB1c2UgeW91ciBPUydzIGJyaWRnaW5nIGNhcGFi aWxpdHkNCiMgdG8gYnJpZGdlIHRoZSBUQVAgaW50ZXJmYWNlIHdpdGggdGhl IGV0aGVybmV0DQojIE5JQyBpbnRlcmZhY2UuICBUaGVuIHlvdSBtdXN0IG1h bnVhbGx5IHNldCB0aGUNCiMgSVAvbmV0bWFzayBvbiB0aGUgYnJpZGdlIGlu dGVyZmFjZSwgaGVyZSB3ZQ0KIyBhc3N1bWUgMTAuOC4wLjQvMjU1LjI1NS4y NTUuMC4gIEZpbmFsbHkgd2UNCiMgbXVzdCBzZXQgYXNpZGUgYW4gSVAgcmFu Z2UgaW4gdGhpcyBzdWJuZXQNCiMgKHN0YXJ0PTEwLjguMC41MCBlbmQ9MTAu OC4wLjEwMCkgdG8gYWxsb2NhdGUNCiMgdG8gY29ubmVjdGluZyBjbGllbnRz LiAgTGVhdmUgdGhpcyBsaW5lIGNvbW1lbnRlZA0KIyBvdXQgdW5sZXNzIHlv dSBhcmUgZXRoZXJuZXQgYnJpZGdpbmcuDQo7c2VydmVyLWJyaWRnZSAxMC44 LjAuNCAyNTUuMjU1LjI1NS4wIDEwLjguMC41MCAxMC44LjAuMTAwDQoNCiMg Q29uZmlndXJlIHNlcnZlciBtb2RlIGZvciBldGhlcm5ldCBicmlkZ2luZw0K IyB1c2luZyBhIERIQ1AtcHJveHksIHdoZXJlIGNsaWVudHMgdGFsaw0KIyB0 byB0aGUgT3BlblZQTiBzZXJ2ZXItc2lkZSBESENQIHNlcnZlcg0KIyB0byBy ZWNlaXZlIHRoZWlyIElQIGFkZHJlc3MgYWxsb2NhdGlvbg0KIyBhbmQgRE5T IHNlcnZlciBhZGRyZXNzZXMuICBZb3UgbXVzdCBmaXJzdCB1c2UNCiMgeW91 ciBPUydzIGJyaWRnaW5nIGNhcGFiaWxpdHkgdG8gYnJpZGdlIHRoZSBUQVAN CiMgaW50ZXJmYWNlIHdpdGggdGhlIGV0aGVybmV0IE5JQyBpbnRlcmZhY2Uu DQojIE5vdGU6IHRoaXMgbW9kZSBvbmx5IHdvcmtzIG9uIGNsaWVudHMgKHN1 Y2ggYXMNCiMgV2luZG93cyksIHdoZXJlIHRoZSBjbGllbnQtc2lkZSBUQVAg YWRhcHRlciBpcw0KIyBib3VuZCB0byBhIERIQ1AgY2xpZW50Lg0KO3NlcnZl ci1icmlkZ2UNCg0KIyBQdXNoIHJvdXRlcyB0byB0aGUgY2xpZW50IHRvIGFs bG93IGl0DQojIHRvIHJlYWNoIG90aGVyIHByaXZhdGUgc3VibmV0cyBiZWhp bmQNCiMgdGhlIHNlcnZlci4gIFJlbWVtYmVyIHRoYXQgdGhlc2UNCiMgcHJp dmF0ZSBzdWJuZXRzIHdpbGwgYWxzbyBuZWVkDQojIHRvIGtub3cgdG8gcm91 dGUgdGhlIE9wZW5WUE4gY2xpZW50DQojIGFkZHJlc3MgcG9vbCAoMTAuOC4w LjAvMjU1LjI1NS4yNTUuMCkNCiMgYmFjayB0byB0aGUgT3BlblZQTiBzZXJ2 ZXIuDQo7cHVzaCAicm91dGUgMTkyLjE2OC4xMC4wIDI1NS4yNTUuMjU1LjAi DQo7cHVzaCAicm91dGUgMTkyLjE2OC4yMC4wIDI1NS4yNTUuMjU1LjAiDQoN CiMgVG8gYXNzaWduIHNwZWNpZmljIElQIGFkZHJlc3NlcyB0byBzcGVjaWZp Yw0KIyBjbGllbnRzIG9yIGlmIGEgY29ubmVjdGluZyBjbGllbnQgaGFzIGEg cHJpdmF0ZQ0KIyBzdWJuZXQgYmVoaW5kIGl0IHRoYXQgc2hvdWxkIGFsc28g aGF2ZSBWUE4gYWNjZXNzLA0KIyB1c2UgdGhlIHN1YmRpcmVjdG9yeSAiY2Nk IiBmb3IgY2xpZW50LXNwZWNpZmljDQojIGNvbmZpZ3VyYXRpb24gZmlsZXMg KHNlZSBtYW4gcGFnZSBmb3IgbW9yZSBpbmZvKS4NCg0KIyBFWEFNUExFOiBT dXBwb3NlIHRoZSBjbGllbnQNCiMgaGF2aW5nIHRoZSBjZXJ0aWZpY2F0ZSBj b21tb24gbmFtZSAiVGhlbG9uaW91cyINCiMgYWxzbyBoYXMgYSBzbWFsbCBz dWJuZXQgYmVoaW5kIGhpcyBjb25uZWN0aW5nDQojIG1hY2hpbmUsIHN1Y2gg YXMgMTkyLjE2OC40MC4xMjgvMjU1LjI1NS4yNTUuMjQ4Lg0KIyBGaXJzdCwg dW5jb21tZW50IG91dCB0aGVzZSBsaW5lczoNCjtjbGllbnQtY29uZmlnLWRp ciBjY2QNCjtyb3V0ZSAxOTIuMTY4LjQwLjEyOCAyNTUuMjU1LjI1NS4yNDgN CiMgVGhlbiBjcmVhdGUgYSBmaWxlIGNjZC9UaGVsb25pb3VzIHdpdGggdGhp cyBsaW5lOg0KIyAgIGlyb3V0ZSAxOTIuMTY4LjQwLjEyOCAyNTUuMjU1LjI1 NS4yNDgNCiMgVGhpcyB3aWxsIGFsbG93IFRoZWxvbmlvdXMnIHByaXZhdGUg c3VibmV0IHRvDQojIGFjY2VzcyB0aGUgVlBOLiAgVGhpcyBleGFtcGxlIHdp bGwgb25seSB3b3JrDQojIGlmIHlvdSBhcmUgcm91dGluZywgbm90IGJyaWRn aW5nLCBpLmUuIHlvdSBhcmUNCiMgdXNpbmcgImRldiB0dW4iIGFuZCAic2Vy dmVyIiBkaXJlY3RpdmVzLg0KDQojIEVYQU1QTEU6IFN1cHBvc2UgeW91IHdh bnQgdG8gZ2l2ZQ0KIyBUaGVsb25pb3VzIGEgZml4ZWQgVlBOIElQIGFkZHJl c3Mgb2YgMTAuOS4wLjEuDQojIEZpcnN0IHVuY29tbWVudCBvdXQgdGhlc2Ug bGluZXM6DQo7Y2xpZW50LWNvbmZpZy1kaXIgY2NkDQo7cm91dGUgMTAuOS4w LjAgMjU1LjI1NS4yNTUuMjUyDQojIFRoZW4gYWRkIHRoaXMgbGluZSB0byBj Y2QvVGhlbG9uaW91czoNCiMgICBpZmNvbmZpZy1wdXNoIDEwLjkuMC4xIDEw LjkuMC4yDQoNCiMgU3VwcG9zZSB0aGF0IHlvdSB3YW50IHRvIGVuYWJsZSBk aWZmZXJlbnQNCiMgZmlyZXdhbGwgYWNjZXNzIHBvbGljaWVzIGZvciBkaWZm ZXJlbnQgZ3JvdXBzDQojIG9mIGNsaWVudHMuICBUaGVyZSBhcmUgdHdvIG1l dGhvZHM6DQojICgxKSBSdW4gbXVsdGlwbGUgT3BlblZQTiBkYWVtb25zLCBv bmUgZm9yIGVhY2gNCiMgICAgIGdyb3VwLCBhbmQgZmlyZXdhbGwgdGhlIFRV Ti9UQVAgaW50ZXJmYWNlDQojICAgICBmb3IgZWFjaCBncm91cC9kYWVtb24g YXBwcm9wcmlhdGVseS4NCiMgKDIpIChBZHZhbmNlZCkgQ3JlYXRlIGEgc2Ny aXB0IHRvIGR5bmFtaWNhbGx5DQojICAgICBtb2RpZnkgdGhlIGZpcmV3YWxs IGluIHJlc3BvbnNlIHRvIGFjY2Vzcw0KIyAgICAgZnJvbSBkaWZmZXJlbnQg Y2xpZW50cy4gIFNlZSBtYW4NCiMgICAgIHBhZ2UgZm9yIG1vcmUgaW5mbyBv biBsZWFybi1hZGRyZXNzIHNjcmlwdC4NCjtsZWFybi1hZGRyZXNzIC4vc2Ny aXB0DQoNCiMgSWYgZW5hYmxlZCwgdGhpcyBkaXJlY3RpdmUgd2lsbCBjb25m aWd1cmUNCiMgYWxsIGNsaWVudHMgdG8gcmVkaXJlY3QgdGhlaXIgZGVmYXVs dA0KIyBuZXR3b3JrIGdhdGV3YXkgdGhyb3VnaCB0aGUgVlBOLCBjYXVzaW5n DQojIGFsbCBJUCB0cmFmZmljIHN1Y2ggYXMgd2ViIGJyb3dzaW5nIGFuZA0K IyBhbmQgRE5TIGxvb2t1cHMgdG8gZ28gdGhyb3VnaCB0aGUgVlBODQojIChU aGUgT3BlblZQTiBzZXJ2ZXIgbWFjaGluZSBtYXkgbmVlZCB0byBOQVQNCiMg b3IgYnJpZGdlIHRoZSBUVU4vVEFQIGludGVyZmFjZSB0byB0aGUgaW50ZXJu ZXQNCiMgaW4gb3JkZXIgZm9yIHRoaXMgdG8gd29yayBwcm9wZXJseSkuDQpw dXNoICJyZWRpcmVjdC1nYXRld2F5IGRlZjEgYnlwYXNzLWRoY3AiDQoNCiMg Q2VydGFpbiBXaW5kb3dzLXNwZWNpZmljIG5ldHdvcmsgc2V0dGluZ3MNCiMg Y2FuIGJlIHB1c2hlZCB0byBjbGllbnRzLCBzdWNoIGFzIEROUw0KIyBvciBX SU5TIHNlcnZlciBhZGRyZXNzZXMuICBDQVZFQVQ6DQojIGh0dHA6Ly9vcGVu dnBuLm5ldC9mYXEuaHRtbCNkaGNwY2F2ZWF0cw0KIyBUaGUgYWRkcmVzc2Vz IGJlbG93IHJlZmVyIHRvIHRoZSBwdWJsaWMNCiMgRE5TIHNlcnZlcnMgcHJv dmlkZWQgYnkgb3BlbmRucy5jb20uDQpwdXNoICJkaGNwLW9wdGlvbiBETlMg bXktZG5zLXNlcnZlci1pcCINCnB1c2ggImRoY3Atb3B0aW9uIEROUyAyMDgu NjcuMjIyLjIyMiINCjtwdXNoICJkaGNwLW9wdGlvbiBETlMgMjA4LjY3LjIy Mi4yMjIiDQo7cHVzaCAiZGhjcC1vcHRpb24gRE5TIDIwOC42Ny4yMjAuMjIw Ig0KDQojIFVuY29tbWVudCB0aGlzIGRpcmVjdGl2ZSB0byBhbGxvdyBkaWZm ZXJlbnQNCiMgY2xpZW50cyB0byBiZSBhYmxlIHRvICJzZWUiIGVhY2ggb3Ro ZXIuDQojIEJ5IGRlZmF1bHQsIGNsaWVudHMgd2lsbCBvbmx5IHNlZSB0aGUg c2VydmVyLg0KIyBUbyBmb3JjZSBjbGllbnRzIHRvIG9ubHkgc2VlIHRoZSBz ZXJ2ZXIsIHlvdQ0KIyB3aWxsIGFsc28gbmVlZCB0byBhcHByb3ByaWF0ZWx5 IGZpcmV3YWxsIHRoZQ0KIyBzZXJ2ZXIncyBUVU4vVEFQIGludGVyZmFjZS4N CjtjbGllbnQtdG8tY2xpZW50DQoNCiMgVW5jb21tZW50IHRoaXMgZGlyZWN0 aXZlIGlmIG11bHRpcGxlIGNsaWVudHMNCiMgbWlnaHQgY29ubmVjdCB3aXRo IHRoZSBzYW1lIGNlcnRpZmljYXRlL2tleQ0KIyBmaWxlcyBvciBjb21tb24g bmFtZXMuICBUaGlzIGlzIHJlY29tbWVuZGVkDQojIG9ubHkgZm9yIHRlc3Rp bmcgcHVycG9zZXMuICBGb3IgcHJvZHVjdGlvbiB1c2UsDQojIGVhY2ggY2xp ZW50IHNob3VsZCBoYXZlIGl0cyBvd24gY2VydGlmaWNhdGUva2V5DQojIHBh aXIuDQojDQojIElGIFlPVSBIQVZFIE5PVCBHRU5FUkFURUQgSU5ESVZJRFVB TA0KIyBDRVJUSUZJQ0FURS9LRVkgUEFJUlMgRk9SIEVBQ0ggQ0xJRU5ULA0K IyBFQUNIIEhBVklORyBJVFMgT1dOIFVOSVFVRSAiQ09NTU9OIE5BTUUiLA0K IyBVTkNPTU1FTlQgVEhJUyBMSU5FIE9VVC4NCjtkdXBsaWNhdGUtY24NCg0K IyBUaGUga2VlcGFsaXZlIGRpcmVjdGl2ZSBjYXVzZXMgcGluZy1saWtlDQoj IG1lc3NhZ2VzIHRvIGJlIHNlbnQgYmFjayBhbmQgZm9ydGggb3Zlcg0KIyB0 aGUgbGluayBzbyB0aGF0IGVhY2ggc2lkZSBrbm93cyB3aGVuDQojIHRoZSBv dGhlciBzaWRlIGhhcyBnb25lIGRvd24uDQojIFBpbmcgZXZlcnkgMTAgc2Vj b25kcywgYXNzdW1lIHRoYXQgcmVtb3RlDQojIHBlZXIgaXMgZG93biBpZiBu byBwaW5nIHJlY2VpdmVkIGR1cmluZw0KIyBhIDEyMCBzZWNvbmQgdGltZSBw ZXJpb2QuDQprZWVwYWxpdmUgMTAgMTIwDQoNCiMgRm9yIGV4dHJhIHNlY3Vy aXR5IGJleW9uZCB0aGF0IHByb3ZpZGVkDQojIGJ5IFNTTC9UTFMsIGNyZWF0 ZSBhbiAiSE1BQyBmaXJld2FsbCINCiMgdG8gaGVscCBibG9jayBEb1MgYXR0 YWNrcyBhbmQgVURQIHBvcnQgZmxvb2RpbmcuDQojDQojIEdlbmVyYXRlIHdp dGg6DQojICAgb3BlbnZwbiAtLWdlbmtleSAtLXNlY3JldCB0YS5rZXkNCiMN CiMgVGhlIHNlcnZlciBhbmQgZWFjaCBjbGllbnQgbXVzdCBoYXZlDQojIGEg Y29weSBvZiB0aGlzIGtleS4NCiMgVGhlIHNlY29uZCBwYXJhbWV0ZXIgc2hv dWxkIGJlICcwJw0KIyBvbiB0aGUgc2VydmVyIGFuZCAnMScgb24gdGhlIGNs aWVudHMuDQo7dGxzLWF1dGggdGEua2V5IDAgIyBUaGlzIGZpbGUgaXMgc2Vj cmV0DQoNCiMgU2VsZWN0IGEgY3J5cHRvZ3JhcGhpYyBjaXBoZXIuDQojIFRo aXMgY29uZmlnIGl0ZW0gbXVzdCBiZSBjb3BpZWQgdG8NCiMgdGhlIGNsaWVu dCBjb25maWcgZmlsZSBhcyB3ZWxsLg0KO2NpcGhlciBCRi1DQkMgICAgICAg ICMgQmxvd2Zpc2ggKGRlZmF1bHQpDQo7Y2lwaGVyIEFFUy0xMjgtQ0JDICAg IyBBRVMNCjtjaXBoZXIgREVTLUVERTMtQ0JDICAjIFRyaXBsZS1ERVMNCg0K IyBFbmFibGUgY29tcHJlc3Npb24gb24gdGhlIFZQTiBsaW5rLg0KIyBJZiB5 b3UgZW5hYmxlIGl0IGhlcmUsIHlvdSBtdXN0IGFsc28NCiMgZW5hYmxlIGl0 IGluIHRoZSBjbGllbnQgY29uZmlnIGZpbGUuDQo7Y29tcC1sem8NCg0KIyBU aGUgbWF4aW11bSBudW1iZXIgb2YgY29uY3VycmVudGx5IGNvbm5lY3RlZA0K IyBjbGllbnRzIHdlIHdhbnQgdG8gYWxsb3cuDQo7bWF4LWNsaWVudHMgMTAw DQoNCiMgSXQncyBhIGdvb2QgaWRlYSB0byByZWR1Y2UgdGhlIE9wZW5WUE4N CiMgZGFlbW9uJ3MgcHJpdmlsZWdlcyBhZnRlciBpbml0aWFsaXphdGlvbi4N CiMNCiMgWW91IGNhbiB1bmNvbW1lbnQgdGhpcyBvdXQgb24NCiMgbm9uLVdp bmRvd3Mgc3lzdGVtcy4NCjt1c2VyIG5vYm9keQ0KO2dyb3VwIG5vYm9keQ0K DQojIFRoZSBwZXJzaXN0IG9wdGlvbnMgd2lsbCB0cnkgdG8gYXZvaWQNCiMg YWNjZXNzaW5nIGNlcnRhaW4gcmVzb3VyY2VzIG9uIHJlc3RhcnQNCiMgdGhh dCBtYXkgbm8gbG9uZ2VyIGJlIGFjY2Vzc2libGUgYmVjYXVzZQ0KIyBvZiB0 aGUgcHJpdmlsZWdlIGRvd25ncmFkZS4NCnBlcnNpc3Qta2V5DQpwZXJzaXN0 LXR1bg0KDQojIE91dHB1dCBhIHNob3J0IHN0YXR1cyBmaWxlIHNob3dpbmcN CiMgY3VycmVudCBjb25uZWN0aW9ucywgdHJ1bmNhdGVkDQojIGFuZCByZXdy aXR0ZW4gZXZlcnkgbWludXRlLg0Kc3RhdHVzIG9wZW52cG4tc3RhdHVzLmxv Zw0KDQojIEJ5IGRlZmF1bHQsIGxvZyBtZXNzYWdlcyB3aWxsIGdvIHRvIHRo ZSBzeXNsb2cgKG9yDQojIG9uIFdpbmRvd3MsIGlmIHJ1bm5pbmcgYXMgYSBz ZXJ2aWNlLCB0aGV5IHdpbGwgZ28gdG8NCiMgdGhlICJcUHJvZ3JhbSBGaWxl c1xPcGVuVlBOXGxvZyIgZGlyZWN0b3J5KS4NCiMgVXNlIGxvZyBvciBsb2ct YXBwZW5kIHRvIG92ZXJyaWRlIHRoaXMgZGVmYXVsdC4NCiMgImxvZyIgd2ls bCB0cnVuY2F0ZSB0aGUgbG9nIGZpbGUgb24gT3BlblZQTiBzdGFydHVwLA0K IyB3aGlsZSAibG9nLWFwcGVuZCIgd2lsbCBhcHBlbmQgdG8gaXQuICBVc2Ug b25lDQojIG9yIHRoZSBvdGhlciAoYnV0IG5vdCBib3RoKS4NCjtsb2cgICAg ICAgICBvcGVudnBuLmxvZw0KO2xvZy1hcHBlbmQgIG9wZW52cG4ubG9nDQps b2cJL3Zhci9sb2cvb3BlbnZwbi5sb2cNCg0KIyBTZXQgdGhlIGFwcHJvcHJp YXRlIGxldmVsIG9mIGxvZw0KIyBmaWxlIHZlcmJvc2l0eS4NCiMNCiMgMCBp cyBzaWxlbnQsIGV4Y2VwdCBmb3IgZmF0YWwgZXJyb3JzDQojIDQgaXMgcmVh c29uYWJsZSBmb3IgZ2VuZXJhbCB1c2FnZQ0KIyA1IGFuZCA2IGNhbiBoZWxw IHRvIGRlYnVnIGNvbm5lY3Rpb24gcHJvYmxlbXMNCiMgOSBpcyBleHRyZW1l bHkgdmVyYm9zZQ0KdmVyYiAzDQoNCiMgU2lsZW5jZSByZXBlYXRpbmcgbWVz c2FnZXMuICBBdCBtb3N0IDIwDQojIHNlcXVlbnRpYWwgbWVzc2FnZXMgb2Yg dGhlIHNhbWUgbWVzc2FnZQ0KIyBjYXRlZ29yeSB3aWxsIGJlIG91dHB1dCB0 byB0aGUgbG9nLg0KO211dGUgMjANCg== --1512028668-487803783-1503788731=:50226 Content-Type: text/plain; charset=US-ASCII; name=openvpn.log Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: Content-Disposition: attachment; filename=openvpn.log U2F0IEF1ZyAyNiAyMjoxNDowMSAyMDE3IE9wZW5WUE4gMi4zLjcgYW1kNjQt cG9ydGJsZC1mcmVlYnNkMTAuMSBbU1NMIChPcGVuU1NMKV0gW0xaT10gW01I XSBbSVB2Nl0gYnVpbHQgb24gSnVsIDMwIDIwMTUNClNhdCBBdWcgMjYgMjI6 MTQ6MDEgMjAxNyBsaWJyYXJ5IHZlcnNpb25zOiBPcGVuU1NMIDEuMC4xcC1m cmVlYnNkIDkgSnVsIDIwMTUsIExaTyAyLjA5DQpTYXQgQXVnIDI2IDIyOjE0 OjAxIDIwMTcgRGlmZmllLUhlbGxtYW4gaW5pdGlhbGl6ZWQgd2l0aCAyMDQ4 IGJpdCBrZXkNClNhdCBBdWcgMjYgMjI6MTQ6MDEgMjAxNyBTb2NrZXQgQnVm ZmVyczogUj1bNDIwODAtPjY1NTM2XSBTPVs5MjE2LT42NTUzNl0NClNhdCBB dWcgMjYgMjI6MTQ6MDEgMjAxNyBST1VURV9HQVRFV0FZIDE3Mi4zMS4xNi4x DQpTYXQgQXVnIDI2IDIyOjE0OjAxIDIwMTcgVFVOL1RBUCBkZXZpY2UgL2Rl di90dW4wIG9wZW5lZA0KU2F0IEF1ZyAyNiAyMjoxNDowMSAyMDE3IGRvX2lm Y29uZmlnLCB0dC0+aXB2Nj0wLCB0dC0+ZGlkX2lmY29uZmlnX2lwdjZfc2V0 dXA9MA0KU2F0IEF1ZyAyNiAyMjoxNDowMSAyMDE3IC9zYmluL2lmY29uZmln IHR1bjAgMTAuOC4wLjEgMTAuOC4wLjIgbXR1IDE1MDAgbmV0bWFzayAyNTUu MjU1LjI1NS4yNTUgdXANClNhdCBBdWcgMjYgMjI6MTQ6MDEgMjAxNyAvc2Jp bi9yb3V0ZSBhZGQgLW5ldCAxMC44LjAuMCAxMC44LjAuMiAyNTUuMjU1LjI1 NS4wDQphZGQgbmV0IDEwLjguMC4wOiBnYXRld2F5IDEwLjguMC4yDQpTYXQg QXVnIDI2IDIyOjE0OjAxIDIwMTcgVURQdjQgbGluayBsb2NhbCAoYm91bmQp OiBbdW5kZWZdDQpTYXQgQXVnIDI2IDIyOjE0OjAxIDIwMTcgVURQdjQgbGlu ayByZW1vdGU6IFt1bmRlZl0NClNhdCBBdWcgMjYgMjI6MTQ6MDEgMjAxNyBN VUxUSTogbXVsdGlfaW5pdCBjYWxsZWQsIHI9MjU2IHY9MjU2DQpTYXQgQXVn IDI2IDIyOjE0OjAxIDIwMTcgSUZDT05GSUcgUE9PTDogYmFzZT0xMC44LjAu NCBzaXplPTYyLCBpcHY2PTANClNhdCBBdWcgMjYgMjI6MTQ6MDEgMjAxNyBp ZmNvbmZpZ19wb29sX3JlYWQoKSwgaW49J3NlcnZlci1ob3N0bmFtZS5kb21h aW4udGxkLDEwLjguMC40JywgVE9ETzogSVB2Ng0KU2F0IEF1ZyAyNiAyMjox NDowMSAyMDE3IHN1Y2NlZWRlZCAtPiBpZmNvbmZpZ19wb29sX3NldCgpDQpT YXQgQXVnIDI2IDIyOjE0OjAxIDIwMTcgSUZDT05GSUcgUE9PTCBMSVNUDQpT YXQgQXVnIDI2IDIyOjE0OjAxIDIwMTcgc2VydmVyLWhvc3RuYW1lLmRvbWFp bi50bGQsMTAuOC4wLjQNClNhdCBBdWcgMjYgMjI6MTQ6MDEgMjAxNyBJbml0 aWFsaXphdGlvbiBTZXF1ZW5jZSBDb21wbGV0ZWQNClNhdCBBdWcgMjYgMjI6 MTQ6MTMgMjAxNyBteS1ob21lLWlwOjExOTQgVExTOiBJbml0aWFsIHBhY2tl dCBmcm9tIFtBRl9JTkVUXW15LWhvbWUtaXA6MTE5NCwgc2lkPWIxYjVlNTZm IDQyYjMyNThmDQpTYXQgQXVnIDI2IDIyOjE0OjE0IDIwMTcgbXktaG9tZS1p cDoxMTk0IFZFUklGWSBPSzogZGVwdGg9MSwgQz1VUywgU1Q9bXktc3RhdGUs IEw9bXktY2l0eSwgTz1Pcmdhbml6YXRpb24sIE9VPW15LW9yZ2FuaXphdGlv biwgQ049c2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQsIG5hbWU9bXktb3Jn YW5pemF0aW9uLCBlbWFpbEFkZHJlc3M9cG9zdG1hc3RlckBkb21haW4udGxk DQpTYXQgQXVnIDI2IDIyOjE0OjE0IDIwMTcgbXktaG9tZS1pcDoxMTk0IFZF UklGWSBPSzogZGVwdGg9MCwgQz1VUywgU1Q9bXktc3RhdGUsIEw9bXktY2l0 eSwgTz1Pcmdhbml6YXRpb24sIE9VPW15LW9yZ2FuaXphdGlvbiwgQ049c2Vy dmVyLWhvc3RuYW1lLmRvbWFpbi50bGQsIG5hbWU9bXktb3JnYW5pemF0aW9u LCBlbWFpbEFkZHJlc3M9cG9zdG1hc3RlckBkb21haW4udGxkDQpTYXQgQXVn IDI2IDIyOjE0OjE0IDIwMTcgbXktaG9tZS1pcDoxMTk0IERhdGEgQ2hhbm5l bCBFbmNyeXB0OiBDaXBoZXIgJ0JGLUNCQycgaW5pdGlhbGl6ZWQgd2l0aCAx MjggYml0IGtleQ0KU2F0IEF1ZyAyNiAyMjoxNDoxNCAyMDE3IG15LWhvbWUt aXA6MTE5NCBEYXRhIENoYW5uZWwgRW5jcnlwdDogVXNpbmcgMTYwIGJpdCBt ZXNzYWdlIGhhc2ggJ1NIQTEnIGZvciBITUFDIGF1dGhlbnRpY2F0aW9uDQpT YXQgQXVnIDI2IDIyOjE0OjE0IDIwMTcgbXktaG9tZS1pcDoxMTk0IERhdGEg Q2hhbm5lbCBEZWNyeXB0OiBDaXBoZXIgJ0JGLUNCQycgaW5pdGlhbGl6ZWQg d2l0aCAxMjggYml0IGtleQ0KU2F0IEF1ZyAyNiAyMjoxNDoxNCAyMDE3IG15 LWhvbWUtaXA6MTE5NCBEYXRhIENoYW5uZWwgRGVjcnlwdDogVXNpbmcgMTYw IGJpdCBtZXNzYWdlIGhhc2ggJ1NIQTEnIGZvciBITUFDIGF1dGhlbnRpY2F0 aW9uDQpTYXQgQXVnIDI2IDIyOjE0OjE0IDIwMTcgbXktaG9tZS1pcDoxMTk0 IENvbnRyb2wgQ2hhbm5lbDogVExTdjEuMiwgY2lwaGVyIFRMU3YxL1NTTHYz IERIRS1SU0EtQUVTMjU2LUdDTS1TSEEzODQsIDIwNDggYml0IFJTQQ0KU2F0 IEF1ZyAyNiAyMjoxNDoxNCAyMDE3IG15LWhvbWUtaXA6MTE5NCBbc2VydmVy LWhvc3RuYW1lLmRvbWFpbi50bGRdIFBlZXIgQ29ubmVjdGlvbiBJbml0aWF0 ZWQgd2l0aCBbQUZfSU5FVF1teS1ob21lLWlwOjExOTQNClNhdCBBdWcgMjYg MjI6MTQ6MTQgMjAxNyBzZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZC9teS1o b21lLWlwOjExOTQgTVVMVElfc3ZhOiBwb29sIHJldHVybmVkIElQdjQ9MTAu OC4wLjYsIElQdjY9KE5vdCBlbmFibGVkKQ0KU2F0IEF1ZyAyNiAyMjoxNDox NCAyMDE3IHNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkL215LWhvbWUtaXA6 MTE5NCBNVUxUSTogTGVhcm46IDEwLjguMC42IC0+IHNlcnZlci1ob3N0bmFt ZS5kb21haW4udGxkL215LWhvbWUtaXA6MTE5NA0KU2F0IEF1ZyAyNiAyMjox NDoxNCAyMDE3IHNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkL215LWhvbWUt aXA6MTE5NCBNVUxUSTogcHJpbWFyeSB2aXJ0dWFsIElQIGZvciBzZXJ2ZXIt aG9zdG5hbWUuZG9tYWluLnRsZC9teS1ob21lLWlwOjExOTQ6IDEwLjguMC42 DQpTYXQgQXVnIDI2IDIyOjE0OjE1IDIwMTcgc2VydmVyLWhvc3RuYW1lLmRv bWFpbi50bGQvbXktaG9tZS1pcDoxMTk0IFBVU0g6IFJlY2VpdmVkIGNvbnRy b2wgbWVzc2FnZTogJ1BVU0hfUkVRVUVTVCcNClNhdCBBdWcgMjYgMjI6MTQ6 MTUgMjAxNyBzZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZC9teS1ob21lLWlw OjExOTQgc2VuZF9wdXNoX3JlcGx5KCk6IHNhZmVfY2FwPTk0MA0KU2F0IEF1 ZyAyNiAyMjoxNDoxNSAyMDE3IHNlcnZlci1ob3N0bmFtZS5kb21haW4udGxk L215LWhvbWUtaXA6MTE5NCBTRU5UIENPTlRST0wgW3NlcnZlci1ob3N0bmFt ZS5kb21haW4udGxkXTogJ1BVU0hfUkVQTFkscmVkaXJlY3QtZ2F0ZXdheSBk ZWYxIGJ5cGFzcy1kaGNwLGRoY3Atb3B0aW9uIEROUyBteS1kbnMtc2VydmVy LWlwLGRoY3Atb3B0aW9uIEROUyAyMDguNjcuMjIyLjIyMixyb3V0ZSAxMC44 LjAuMSx0b3BvbG9neSBuZXQzMCxwaW5nIDEwLHBpbmctcmVzdGFydCAxMjAs aWZjb25maWcgMTAuOC4wLjYgMTAuOC4wLjUnIChzdGF0dXM9MSkNClNhdCBB dWcgMjYgMjI6MTg6MzIgMjAxNyBzZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRs ZC9teS1ob21lLWlwOjExOTQgW3NlcnZlci1ob3N0bmFtZS5kb21haW4udGxk XSBJbmFjdGl2aXR5IHRpbWVvdXQgKC0tcGluZy1yZXN0YXJ0KSwgcmVzdGFy dGluZw0KU2F0IEF1ZyAyNiAyMjoxODozMiAyMDE3IHNlcnZlci1ob3N0bmFt ZS5kb21haW4udGxkL215LWhvbWUtaXA6MTE5NCBTSUdVU1IxW3NvZnQscGlu Zy1yZXN0YXJ0XSByZWNlaXZlZCwgY2xpZW50LWluc3RhbmNlIHJlc3RhcnRp bmcNCg== --1512028668-487803783-1503788731=:50226 Content-Type: text/plain; charset=US-ASCII; name=pf.conf Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: Content-Disposition: attachment; filename=pf.conf IyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSBzaW1wbGUgc2VydmVyIHBmLmNv bmYgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBGb3IgRnJlZUJTRCA5LjEN CiMgajY1bmtvIDIwMTEsIDIwMTIsIDIwMTMNCiMNCiMgSWYgeW91IGFkYXB0 IHRoaXMgcnVsZXNldCBmb3IgYSByZXNvbHZpbmcgY2FjaGluZyBuYW1lIHNl cnZlciBwbGVhc2UNCiMgbWFrZSBzdXJlIHlvdSBkb24ndCBhbGxvdyB0aGUg d2hvbGUgd29ybGQgdG8gdXNlIHlvdXIgbmFtZSBzZXJ2ZXINCiMgQ3JlYXRp bmcgYW4gb3BlbiByZXNvbHZpbmcgbmFtZSBzZXJ2ZXIgY2FuIGFsbG93IHRo ZSBiYWQgZ3V5cyB0byB1c2UgeW91ciBuYW1lc2VydmVyDQojIGluIGFuIERO UyBhbXBsaWZpY2F0aW9uIGF0dGFjaw0KDQojIG1hY3JvcyBmb3IgbmV0d29y ayBpbnRlcmZhY2VzDQpleHRfaWY9InhuMCINCmludF9pZj0idHVuMCINCg0K IyBkZWZpbmUgTkFUIGdhdGV3YXkgcm91dGluZw0KbG9jYWxuZXQgPSAkaW50 X2lmOm5ldHdvcmsNCm5hdCBvbiAkZXh0X2lmIGZyb20gJGxvY2FsbmV0IHRv IGFueSAtPiAoJGV4dF9pZikNCnBhc3MgZnJvbSB7IGxvMCwgJGxvY2FsbmV0 IH0gdG8gYW55IGtlZXAgc3RhdGUNCg0KaWNtcF90eXBlcz0iZWNob3JlcSIN Cg0KIyBDdXN0b20gcG9ydCBmb3Igc3NoDQpTU0hfQ1VTVE9NID0gMjINCg0K c2NydWIgaW4gb24gJGV4dF9pZiBhbGwgZnJhZ21lbnQgcmVhc3NlbWJsZQ0K DQpzZXQgc2tpcCBvbiBsbzANCiNzZXQgc2tpcCBvbiBsbzENCg0KYW50aXNw b29mIGZvciAkZXh0X2lmDQoNCiMgLS0tIEVYVEVSTkFMIElOVEVSRkFDRQ0K IyAtLS0gSU5DT01JTkcgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQojIC0t LSBUQ1ANCnBhc3MgaW4gIHF1aWNrIG9uICRleHRfaWYgaW5ldCBwcm90byB0 Y3AgZnJvbSBteS1ob21lLWlwIHRvIGFueQ0KcGFzcyBpbiAgcXVpY2sgb24g JGV4dF9pZiBpbmV0IHByb3RvIHRjcCBmcm9tIGFueSB0byAkZXh0X2lmICBw b3J0IGh0dHANCnBhc3MgaW4gIHF1aWNrIG9uICRleHRfaWYgaW5ldCBwcm90 byB0Y3AgZnJvbSBhbnkgdG8gJGV4dF9pZiAgcG9ydCBodHRwcw0KcGFzcyBp biAgcXVpY2sgb24gJGV4dF9pZiBpbmV0IHByb3RvIHRjcCBmcm9tIGFueSB0 byAkZXh0X2lmICBwb3J0ICRTU0hfQ1VTVE9NDQpwYXNzIGluICBxdWljayBv biAkZXh0X2lmIGluZXQgcHJvdG8gdGNwIGZyb20gYW55IHRvICRleHRfaWYg IHBvcnQgMTE5NA0KDQojIC0tLSBmb3IgYXV0aG9yaXRhdGl2ZSBETlMgc2Vy dmVyDQpwYXNzIGluICBxdWljayBvbiAkZXh0X2lmIGluZXQgcHJvdG8gdWRw IGZyb20gYW55IHRvICRleHRfaWYgIHBvcnQgZG9tYWluDQoNCiMgLS0tIFVE UA0KIyAtLS0gZm9yIGF1dGhvcml0YXRpdmUgRE5TIHNlcnZlcg0KI3Bhc3Mg aW4gIHF1aWNrIG9uICRleHRfaWYgaW5ldCBwcm90byB1ZHAgZnJvbSBhbnkg dG8gJGV4dF9pZiAgcG9ydCBkb21haW4NCg0KIyAtLS0gSUNNUA0KcGFzcyBp biAgcXVpY2sgb24gJGV4dF9pZiBpbmV0IHByb3RvIGljbXAgZnJvbSBhbnkg dG8gJGV4dF9pZiBpY21wLXR5cGUgJGljbXBfdHlwZXMNCg0KIyAtLS0gRVhU RVJOQUwgSU5URVJGQUNFDQojIC0tLSBPVVRHT0lORyAtLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KDQphbmNob3IgVE1QDQoNCiMgLS0tIFRDUA0KI3Bhc3Mg IG91dCBxdWljayBsb2cgb24gJGV4dF9pZiBpbmV0IHByb3RvIHRjcCBmcm9t ICRleHRfaWYgdG8gYW55IHBvcnQgc210cA0KI3Bhc3MgIG91dCBxdWljayAg ICAgb24gJGV4dF9pZiBpbmV0IHByb3RvIHRjcCBmcm9tICRleHRfaWYgdG8g YW55IHBvcnQgZG9tYWluDQojcGFzcyAgb3V0IHF1aWNrICAgICBvbiAkZXh0 X2lmIGluZXQgcHJvdG8gdGNwIGZyb20gJGV4dF9pZiB0byBhbnkgcG9ydCBo dHRwDQojcGFzcyAgb3V0IHF1aWNrICAgICBvbiAkZXh0X2lmIGluZXQgcHJv dG8gdGNwIGZyb20gJGV4dF9pZiB0byBhbnkgcG9ydCBodHRwcw0KI3Bhc3Mg IG91dCBxdWljayAgICAgb24gJGV4dF9pZiBpbmV0IHByb3RvIHRjcCBmcm9t ICRleHRfaWYgdG8gYW55IHBvcnQgd2hvaXMNCiNwYXNzICBvdXQgcXVpY2sg ICAgIG9uICRleHRfaWYgaW5ldCBwcm90byB0Y3AgZnJvbSAkZXh0X2lmIHRv IGFueSBwb3J0ICRTU0hfQ1VTVE9NDQoNCiMgLS0tIFVEUA0KI3Bhc3MgIG91 dCBxdWljayBvbiAkZXh0X2lmIGluZXQgcHJvdG8gdWRwIGZyb20gJGV4dF9p ZiB0byBhbnkgcG9ydCBkb21haW4NCiNwYXNzICBvdXQgcXVpY2sgb24gJGV4 dF9pZiBpbmV0IHByb3RvIHVkcCBmcm9tICRleHRfaWYgdG8gYW55IHBvcnQg bnRwDQoNCiMgLS0tIElDTVANCnBhc3MgIG91dCBxdWljayBvbiAkZXh0X2lm IGluZXQgcHJvdG8gaWNtcCAgZnJvbSAkZXh0X2lmIHRvIGFueQ0KDQojIC0t LSBBTExPVyBBTEwgT1VUQk9VTkQgVFJBRkZJQw0KcGFzcyBvdXQgcXVpY2sg b24gJGV4dF9pZiBpbmV0IGtlZXAgc3RhdGUNCg0KIyAtLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMg LS0tIERFRkFVTFQgUE9MSUNZDQojIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KYmxvY2sgbG9nIGFs bA0KDQojIC0tLS0tIGVuZCBvZiBwZi5jb25mDQo= --1512028668-487803783-1503788731=:50226 Content-Type: text/plain; charset=US-ASCII; name=rc.conf Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: Content-Disposition: attachment; filename=rc.conf ZWMyX2NvbmZpZ2luaXRfZW5hYmxlPVlFUw0KZWMyX2ZldGNoa2V5X2VuYWJs ZT1ZRVMNCmVjMl9lcGhlbWVyYWxzd2FwX2VuYWJsZT1ZRVMNCmVjMl9sb2do b3N0a2V5X2VuYWJsZT1ZRVMNCmZpcnN0Ym9vdF9mcmVlYnNkX3VwZGF0ZV9l bmFibGU9WUVTDQpmaXJzdGJvb3RfcGtnc19lbmFibGU9WUVTDQpncm93ZnNf ZW5hYmxlPSJZRVMiDQppZmNvbmZpZ19ERUZBVUxUPSJTWU5DREhDUCINCnNz aGRfZW5hYmxlPSJZRVMiDQpmaXJzdGJvb3RfcGtnc19saXN0PSJhd3NjbGki DQoNCmhvc3RuYW1lPSJteS1zZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZCIN Cg0KbnRwZF9lbmFibGU9IllFUyINCiMgU2V0IGR1bXBkZXYgdG8gIkFVVE8i IHRvIGVuYWJsZSBjcmFzaCBkdW1wcywgIk5PIiB0byBkaXNhYmxlDQpkdW1w ZGV2PSJBVVRPIg0KDQojZW5hYmxlIGluZXRkIGZvciB5dGFsaw0KaW5ldGRf ZW5hYmxlPSJZRVMiDQoNCiNlbmFibGUgZmlyZXdhbGwNCiNmaXJld2FsbF9l bmFibGU9IllFUyINCiNmaXJld2FsbF9zY3JpcHQ9Ii91c3IvbG9jYWwvZXRj L2lwZncucnVsZXMiDQojZmlyZXdhbGxfdHlwZT0ib3BlbiINCiNmaXJld2Fs bF9uYXRfZW5hYmxlPSJZRVMiDQoNCiNlbmFibGUgcGYNCnBmX2VuYWJsZT0i WUVTIg0KcGZfcnVsZXM9Ii9ldGMvcGYuY29uZiINCnBmbG9nX2VuYWJsZT0i WUVTIg0KcGZsb2dfbG9nZmlsZT0iL3Zhci9sb2cvcGZsb2ciDQojZ2F0ZXdh eV9lbmFibGU9IllFUyINCg0KI2Rpc2FibGUgc3RvY2sgRlRQDQpmdHBfZW5h YmxlPSJOTyINCg0KI2VuYWJsZSBhcGFjaGUNCmFwYWNoZTI0X2VuYWJsZT0i eWVzIg0KDQojZW5hYmxlIG15c3FsDQpteXNxbF9lbmFibGU9InllcyINCg0K I2VuYWJsZSBwb3N0Zml4DQpwb3N0Zml4X2VuYWJsZT0ieWVzIg0KDQojYWN0 aXZhdGUgU1NIR1VBUkQNCiNzc2hndWFyZF9lbmFibGU9InllcyINCg0KI2Vu YWJsZSBXRUJNSU4NCndlYm1pbl9lbmFibGU9IllFUyINCg0KI2FsbG93IFBy b2Z0cGQNCiNwcm9mdHBkX2VuYWJsZT0ieWVzIg0KDQojZW5hYmxlIG1haWxt YW4NCm1haWxtYW5fZW5hYmxlPSJ5ZXMiDQoNCiNlbmFibGUgT3BlblZQTg0K b3BlbnZwbl9lbmFibGU9IllFUyINCm9wZW52cG5fY29uZmlnZmlsZT0iL3Vz ci9sb2NhbC9ldGMvb3BlbnZwbi9vcGVudnBuLmNvbmYiDQo= --1512028668-487803783-1503788731=:50226 Content-Type: text/plain; charset=US-ASCII; name=tcpdump_tun0 Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: Content-Disposition: attachment; filename=tcpdump_tun0 MjI6NDU6NDMuNTcwNDYyIElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4z MTA1NCA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDk1NTgrIEE/ IHMubWFwcy5tZS4gKDI3KQ0KMjI6NDU6NDMuNzA3MjgwIElQIGlwLTEwLTgt MC02LmVjMi5pbnRlcm5hbC4xMzQwNCA+IHJlc29sdmVyMS5vcGVuZG5zLmNv bS5kb21haW46IDEzMzQrIEE/IG10YWxrLmdvb2dsZS5jb20uICgzNCkNCjIy OjQ1OjQzLjk0NTkwNCBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMjUy MTYgPiByZXNvbHZlcjEub3BlbmRucy5jb20uZG9tYWluOiA2NzEwKyBBPyBt eS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuICgzNSkNCjIyOjQ1 OjQ0LjI0NjU4NSBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMTQzNjcg PiByZXNvbHZlcjEub3BlbmRucy5jb20uZG9tYWluOiAxMzA4NisgQT8gcnls b2JvYWd1cC4gKDI4KQ0KMjI6NDU6NDQuMjUxMzU3IElQIGlwLTEwLTgtMC02 LmVjMi5pbnRlcm5hbC40MTc3ID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRv bWFpbjogMjM3OTYrIEE/IGZvcWV6aWdocy4gKDI3KQ0KMjI6NDU6NDQuMjUx MzY5IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yOTIyOSA+IHJlc29s dmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDE4ODQ1KyBBPyBobm5uY2R5c2Fz aW9iLiAoMzEpDQoyMjo0NTo0Ny4xNDgwMjEgSVAgaXAtMTAtOC0wLTYuZWMy LmludGVybmFsLjMyMDk0ID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFp bjogMTgzNysgQT8gcG9vbC5udHAub3JnLiAoMzApDQoyMjo0NTo0Ny4zMTEy NDAgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjEyMzU2ID4gcmVzb2x2 ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjogMjQwOTUrIEE/IGxvZ3gub3B0aW1p emVseS5jb20uICgzNykNCjIyOjQ1OjQ4LjU3NjE4NSBJUCBpcC0xMC04LTAt Ni5lYzIuaW50ZXJuYWwuMzI2OTcgPiBteS1kbnMtc2VydmVyLWhvc3RuYW1l LmRvbWFpbi50bGQuZG9tYWluOiA5NTU4KyBBPyBzLm1hcHMubWUuICgyNykN CjIyOjQ1OjQ4LjcxNTQ3NCBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwu ODU0MSA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21h aW46IDEzMzQrIEE/IG10YWxrLmdvb2dsZS5jb20uICgzNCkNCjIyOjQ1OjQ4 Ljk1MTAzOSBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMTk5OTIgPiBt eS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9tYWluOiA2NzEw KyBBPyBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuICgzNSkN CjIyOjQ1OjQ5LjI3MDg0NyBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwu MTg4NDIgPiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9t YWluOiAxMzA4NisgQT8gcnlsb2JvYWd1cC4gKDI4KQ0KMjI6NDU6NDkuMjcw ODU5IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yMDE0MSA+IG15LWRu cy1zZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21haW46IDE4ODQ1KyBB PyBobm5uY2R5c2FzaW9iLiAoMzEpDQoyMjo0NTo0OS4yNzA4NjcgSVAgaXAt MTAtOC0wLTYuZWMyLmludGVybmFsLjcwODggPiBteS1kbnMtc2VydmVyLWhv c3RuYW1lLmRvbWFpbi50bGQuZG9tYWluOiAyMzc5NisgQT8gZm9xZXppZ2hz LiAoMjcpDQoyMjo0NTo1Mi4xNjAxNDEgSVAgaXAtMTAtOC0wLTYuZWMyLmlu dGVybmFsLjIxNjM5ID4gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5kb21haW4u dGxkLmRvbWFpbjogMTgzNysgQT8gcG9vbC5udHAub3JnLiAoMzApDQoyMjo0 NTo1Mi4zMTg4NzggSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjI4NDY4 ID4gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLmRvbWFpbjog MjQwOTUrIEE/IGxvZ3gub3B0aW1pemVseS5jb20uICgzNykNCjIyOjQ1OjUz LjUyMDE1NyBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuNDg5NTkgPiBl ZGdlLXN0YXItc2h2LTAxLXNlYTEuZmFjZWJvb2suY29tLmh0dHA6IEZsYWdz IFtTXSwgc2VxIDE3MzUxMDc3OSwgd2luIDY1NTM1LCBvcHRpb25zIFttc3Mg MTM2OSxzYWNrT0ssVFMgdmFsIDQwODAyMiBlY3IgMCxub3Asd3NjYWxlIDhd LCBsZW5ndGggMA0KMjI6NDU6NTMuNTI1NjkyIElQIGlwLTEwLTgtMC02LmVj Mi5pbnRlcm5hbC4yNjI0NCA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9t YWluLnRsZC5kb21haW46IDIwNjQrIEE/IHBvcnRhbC5mYi5jb20uICgzMSkN CjIyOjQ1OjUzLjU4MDk1MyBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwu MzI2OTcgPiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9t YWluOiA5NTU4KyBBPyBzLm1hcHMubWUuICgyNykNCjIyOjQ1OjUzLjcyMDA3 NCBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuODU0MSA+IG15LWRucy1z ZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21haW46IDEzMzQrIEE/IG10 YWxrLmdvb2dsZS5jb20uICgzNCkNCjIyOjQ1OjUzLjk2NDkzNSBJUCBpcC0x MC04LTAtNi5lYzIuaW50ZXJuYWwuMTk5OTIgPiBteS1kbnMtc2VydmVyLWhv c3RuYW1lLmRvbWFpbi50bGQuZG9tYWluOiA2NzEwKyBBPyBteS1kbnMtc2Vy dmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuICgzNSkNCjIyOjQ1OjU0LjI3MDc3 MSBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMTg4NDIgPiBteS1kbnMt c2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9tYWluOiAxMzA4NisgQT8g cnlsb2JvYWd1cC4gKDI4KQ0KMjI6NDU6NTQuMjcwNzg0IElQIGlwLTEwLTgt MC02LmVjMi5pbnRlcm5hbC4yMDE0MSA+IG15LWRucy1zZXJ2ZXItaG9zdG5h bWUuZG9tYWluLnRsZC5kb21haW46IDE4ODQ1KyBBPyBobm5uY2R5c2FzaW9i LiAoMzEpDQoyMjo0NTo1NC4yNzA3OTIgSVAgaXAtMTAtOC0wLTYuZWMyLmlu dGVybmFsLjcwODggPiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50 bGQuZG9tYWluOiAyMzc5NisgQT8gZm9xZXppZ2hzLiAoMjcpDQoyMjo0NTo1 NC41MTIyNDggSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjQ4OTU5ID4g ZWRnZS1zdGFyLXNodi0wMS1zZWExLmZhY2Vib29rLmNvbS5odHRwOiBGbGFn cyBbU10sIHNlcSAxNzM1MTA3NzksIHdpbiA2NTUzNSwgb3B0aW9ucyBbbXNz IDEzNjksc2Fja09LLFRTIHZhbCA0MDgxMjMgZWNyIDAsbm9wLHdzY2FsZSA4 XSwgbGVuZ3RoIDANCjIyOjQ1OjU1LjA1OTEyOCBJUCBpcC0xMC04LTAtNi5l YzIuaW50ZXJuYWwuNDY5MDggPiBsaTUyNS0yNS5tZW1iZXJzLmxpbm9kZS5j b20uaHR0cDogRmxhZ3MgW1NdLCBzZXEgMjg2ODQ1MDIxMCwgd2luIDY1NTM1 LCBvcHRpb25zIFttc3MgMTM2OSxzYWNrT0ssVFMgdmFsIDQwODE3NiBlY3Ig MCxub3Asd3NjYWxlIDhdLCBsZW5ndGggMA0KMjI6NDU6NTUuMjk3Njg0IElQ IGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC40NjkxMCA+IGxpNTI1LTI1Lm1l bWJlcnMubGlub2RlLmNvbS5odHRwOiBGbGFncyBbU10sIHNlcSA4ODU3NTc2 NTYsIHdpbiA2NTUzNSwgb3B0aW9ucyBbbXNzIDEzNjksc2Fja09LLFRTIHZh bCA0MDgyMDEgZWNyIDAsbm9wLHdzY2FsZSA4XSwgbGVuZ3RoIDANCjIyOjQ1 OjU2LjA0MzAyOCBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuNDY5MDgg PiBsaTUyNS0yNS5tZW1iZXJzLmxpbm9kZS5jb20uaHR0cDogRmxhZ3MgW1Nd LCBzZXEgMjg2ODQ1MDIxMCwgd2luIDY1NTM1LCBvcHRpb25zIFttc3MgMTM2 OSxzYWNrT0ssVFMgdmFsIDQwODI3NiBlY3IgMCxub3Asd3NjYWxlIDhdLCBs ZW5ndGggMA0KMjI6NDU6NTYuMjkwMTQyIElQIGlwLTEwLTgtMC02LmVjMi5p bnRlcm5hbC40NjkxMCA+IGxpNTI1LTI1Lm1lbWJlcnMubGlub2RlLmNvbS5o dHRwOiBGbGFncyBbU10sIHNlcSA4ODU3NTc2NTYsIHdpbiA2NTUzNSwgb3B0 aW9ucyBbbXNzIDEzNjksc2Fja09LLFRTIHZhbCA0MDgzMDEgZWNyIDAsbm9w LHdzY2FsZSA4XSwgbGVuZ3RoIDANCjIyOjQ1OjU2LjUxMjQ5NSBJUCBpcC0x MC04LTAtNi5lYzIuaW50ZXJuYWwuNDg5NTkgPiBlZGdlLXN0YXItc2h2LTAx LXNlYTEuZmFjZWJvb2suY29tLmh0dHA6IEZsYWdzIFtTXSwgc2VxIDE3MzUx MDc3OSwgd2luIDY1NTM1LCBvcHRpb25zIFttc3MgMTM2OSxzYWNrT0ssVFMg dmFsIDQwODMyMyBlY3IgMCxub3Asd3NjYWxlIDhdLCBsZW5ndGggMA0KMjI6 NDU6NTcuMTcwNDM0IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yMTYz OSA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21haW46 IDE4MzcrIEE/IHBvb2wubnRwLm9yZy4gKDMwKQ0KMjI6NDU6NTcuMzI3Njgw IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4xMjM1NiA+IHJlc29sdmVy MS5vcGVuZG5zLmNvbS5kb21haW46IDI0MDk1KyBBPyBsb2d4Lm9wdGltaXpl bHkuY29tLiAoMzcpDQoyMjo0NTo1OC4wMzA4NjEgSVAgaXAtMTAtOC0wLTYu ZWMyLmludGVybmFsLjQ2OTA4ID4gbGk1MjUtMjUubWVtYmVycy5saW5vZGUu Y29tLmh0dHA6IEZsYWdzIFtTXSwgc2VxIDI4Njg0NTAyMTAsIHdpbiA2NTUz NSwgb3B0aW9ucyBbbXNzIDEzNjksc2Fja09LLFRTIHZhbCA0MDg0NzYgZWNy IDAsbm9wLHdzY2FsZSA4XSwgbGVuZ3RoIDANCjIyOjQ1OjU4LjI4NTI0OCBJ UCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuNDY5MTAgPiBsaTUyNS0yNS5t ZW1iZXJzLmxpbm9kZS5jb20uaHR0cDogRmxhZ3MgW1NdLCBzZXEgODg1NzU3 NjU2LCB3aW4gNjU1MzUsIG9wdGlvbnMgW21zcyAxMzY5LHNhY2tPSyxUUyB2 YWwgNDA4NTAxIGVjciAwLG5vcCx3c2NhbGUgOF0sIGxlbmd0aCAwDQoyMjo0 NTo1OC40MDY3ODkgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjI3MDMx ID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjogMjY0MzArIEE/IHBu cC5hcHRvaWRlLmNvbS4gKDMzKQ0KMjI6NDU6NTguNTAwNzExIElQIGlwLTEw LTgtMC02LmVjMi5pbnRlcm5hbC4yMTU0ID4gcmVzb2x2ZXIxLm9wZW5kbnMu Y29tLmRvbWFpbjogMjA2NCsgQT8gcG9ydGFsLmZiLmNvbS4gKDMxKQ0KMjI6 NDU6NTguNTg3MjMxIElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4xMDQ1 MyA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDkyMjkrIEE/IHMu bWFwcy5tZS4gKDI3KQ0KMjI6NDU6NTguNzIwNTE1IElQIGlwLTEwLTgtMC02 LmVjMi5pbnRlcm5hbC4yNDgzNCA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5k b21haW46IDE0NjM3KyBBPyBtdGFsay5nb29nbGUuY29tLiAoMzQpDQoyMjo0 NTo1OC45NjAyNjcgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjIwODU3 ID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjogMjQ2NCsgQT8gbXkt ZG5zLXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLiAoMzUpDQoyMjo0NTo1 OC45NjAyODAgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjM2MTggPiBy ZXNvbHZlcjEub3BlbmRucy5jb20uZG9tYWluOiAyMDU3MCsgQT8gbXktZG5z LXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLiAoMzUpDQoyMjo0NTo1OS4y NjAyOTMgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjIwMjI5ID4gcmVz b2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjogNTAxMSsgQT8gaG5ubmNkeXNh c2lvYi4gKDMxKQ0KMjI6NDU6NTkuMjYwMzA1IElQIGlwLTEwLTgtMC02LmVj Mi5pbnRlcm5hbC4zMjU4MiA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5kb21h aW46IDY5MDQrIEE/IHJ5bG9ib2FndXAuICgyOCkNCjIyOjQ1OjU5LjI2MDMx MyBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMTc2MjkgPiByZXNvbHZl cjEub3BlbmRucy5jb20uZG9tYWluOiAxMDg0NCsgQT8gcnlsb2JvYWd1cC4g KDI4KQ0KMjI6NDU6NTkuMjYwMzIxIElQIGlwLTEwLTgtMC02LmVjMi5pbnRl cm5hbC4xMTkwNCA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDE2 MjIzKyBBPyBobm5uY2R5c2FzaW9iLiAoMzEpDQoyMjo0NTo1OS4yNzM5MDQg SVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjE5MzIyID4gcmVzb2x2ZXIx Lm9wZW5kbnMuY29tLmRvbWFpbjogMTU2MjYrIEE/IGZvcWV6aWdocy4gKDI3 KQ0KMjI6NDU6NTkuMjczOTE1IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5h bC43MzQwID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjogMTQzMDgr IEE/IGZvcWV6aWdocy4gKDI3KQ0KMjI6NDY6MDAuNTI0MDEyIElQIGlwLTEw LTgtMC02LmVjMi5pbnRlcm5hbC40ODk1OSA+IGVkZ2Utc3Rhci1zaHYtMDEt c2VhMS5mYWNlYm9vay5jb20uaHR0cDogRmxhZ3MgW1NdLCBzZXEgMTczNTEw Nzc5LCB3aW4gNjU1MzUsIG9wdGlvbnMgW21zcyAxMzY5LHNhY2tPSyxUUyB2 YWwgNDA4NzI0IGVjciAwLG5vcCx3c2NhbGUgOF0sIGxlbmd0aCAwDQoyMjo0 NjowMi4wNTY5MjUgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjQ2OTA4 ID4gbGk1MjUtMjUubWVtYmVycy5saW5vZGUuY29tLmh0dHA6IEZsYWdzIFtT XSwgc2VxIDI4Njg0NTAyMTAsIHdpbiA2NTUzNSwgb3B0aW9ucyBbbXNzIDEz Njksc2Fja09LLFRTIHZhbCA0MDg4NzcgZWNyIDAsbm9wLHdzY2FsZSA4XSwg bGVuZ3RoIDANCjIyOjQ2OjAyLjE1NTE4OSBJUCBpcC0xMC04LTAtNi5lYzIu aW50ZXJuYWwuMzA0NjMgPiByZXNvbHZlcjEub3BlbmRucy5jb20uZG9tYWlu OiA2MDk0KyBBPyBwb29sLm50cC5vcmcuICgzMCkNCjIyOjQ2OjAyLjI5MTI2 NCBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuNDY5MTAgPiBsaTUyNS0y NS5tZW1iZXJzLmxpbm9kZS5jb20uaHR0cDogRmxhZ3MgW1NdLCBzZXEgODg1 NzU3NjU2LCB3aW4gNjU1MzUsIG9wdGlvbnMgW21zcyAxMzY5LHNhY2tPSyxU UyB2YWwgNDA4OTAyIGVjciAwLG5vcCx3c2NhbGUgOF0sIGxlbmd0aCAwDQoy Mjo0NjowMi4zMzAwNTkgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjI4 NDY4ID4gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLmRvbWFp bjogMjQwOTUrIEE/IGxvZ3gub3B0aW1pemVseS5jb20uICgzNykNCjIyOjQ2 OjAzLjQyNzY0MiBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMjk2OTkg PiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9tYWluOiAy NjQzMCsgQT8gcG5wLmFwdG9pZGUuY29tLiAoMzMpDQoyMjo0NjowMy41MDI0 MzggSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjI2MjQ0ID4gbXktZG5z LXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLmRvbWFpbjogMjA2NCsgQT8g cG9ydGFsLmZiLmNvbS4gKDMxKQ0KMjI6NDY6MDMuNTg3NzYyIElQIGlwLTEw LTgtMC02LmVjMi5pbnRlcm5hbC4zMzc4MSA+IG15LWRucy1zZXJ2ZXItaG9z dG5hbWUuZG9tYWluLnRsZC5kb21haW46IDkyMjkrIEE/IHMubWFwcy5tZS4g KDI3KQ0KMjI6NDY6MDMuNzMwMzYyIElQIGlwLTEwLTgtMC02LmVjMi5pbnRl cm5hbC4xMjA4NiA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRs ZC5kb21haW46IDE0NjM3KyBBPyBtdGFsay5nb29nbGUuY29tLiAoMzQpDQoy Mjo0NjowMy45NzE0MjYgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjMy NTQ3ID4gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLmRvbWFp bjogMjA1NzArIEE/IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRs ZC4gKDM1KQ0KMjI6NDY6MDMuOTcxNDM5IElQIGlwLTEwLTgtMC02LmVjMi5p bnRlcm5hbC4zMDY0NCA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9tYWlu LnRsZC5kb21haW46IDI0NjQrIEE/IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUu ZG9tYWluLnRsZC4gKDM1KQ0KMjI6NDY6MDQuMjgyMzk0IElQIGlwLTEwLTgt MC02LmVjMi5pbnRlcm5hbC4xNDc5NiA+IG15LWRucy1zZXJ2ZXItaG9zdG5h bWUuZG9tYWluLnRsZC5kb21haW46IDY5MDQrIEE/IHJ5bG9ib2FndXAuICgy OCkNCjIyOjQ2OjA0LjI4MjQxNiBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJu YWwuMjU3NTUgPiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQu ZG9tYWluOiA1MDExKyBBPyBobm5uY2R5c2FzaW9iLiAoMzEpDQoyMjo0Njow NC4yODI0MjQgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjE4NzMgPiBt eS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9tYWluOiAxMDg0 NCsgQT8gcnlsb2JvYWd1cC4gKDI4KQ0KMjI6NDY6MDQuMjgyNDMyIElQIGlw LTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yNTcxID4gbXktZG5zLXNlcnZlci1o b3N0bmFtZS5kb21haW4udGxkLmRvbWFpbjogMTYyMjMrIEE/IGhubm5jZHlz YXNpb2IuICgzMSkNCjIyOjQ2OjA0LjI4MjQzOSBJUCBpcC0xMC04LTAtNi5l YzIuaW50ZXJuYWwuMjk1MTMgPiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRv bWFpbi50bGQuZG9tYWluOiAxNDMwOCsgQT8gZm9xZXppZ2hzLiAoMjcpDQoy Mjo0NjowNC4yODI0NDcgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjMz MzA0ID4gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLmRvbWFp bjogMTU2MjYrIEE/IGZvcWV6aWdocy4gKDI3KQ0KMjI6NDY6MDcuMTcwMjcw IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC43OTQ0ID4gbXktZG5zLXNl cnZlci1ob3N0bmFtZS5kb21haW4udGxkLmRvbWFpbjogNjA5NCsgQT8gcG9v bC5udHAub3JnLiAoMzApDQoyMjo0NjowNy4zNDAzNzMgSVAgaXAtMTAtOC0w LTYuZWMyLmludGVybmFsLjE0ODY2ID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29t LmRvbWFpbjogMTIyMDIrIEE/IGxvZ3gub3B0aW1pemVseS5jb20uICgzNykN CjIyOjQ2OjA4LjQzNDI5MyBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwu MjcwMzEgPiByZXNvbHZlcjEub3BlbmRucy5jb20uZG9tYWluOiAyNjQzMCsg QT8gcG5wLmFwdG9pZGUuY29tLiAoMzMpDQoyMjo0NjowOC41MTAzOTMgSVAg aXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjEzNDU3ID4gcmVzb2x2ZXIxLm9w ZW5kbnMuY29tLmRvbWFpbjogMjE1MjcrIEE/IHBvcnRhbC5mYi5jb20uICgz MSkNCjIyOjQ2OjA4LjUzMTE4MiBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJu YWwuNDg5NTkgPiBlZGdlLXN0YXItc2h2LTAxLXNlYTEuZmFjZWJvb2suY29t Lmh0dHA6IEZsYWdzIFtTXSwgc2VxIDE3MzUxMDc3OSwgd2luIDY1NTM1LCBv cHRpb25zIFttc3MgMTM2OSxzYWNrT0ssVFMgdmFsIDQwOTUyNiBlY3IgMCxu b3Asd3NjYWxlIDhdLCBsZW5ndGggMA0KMjI6NDY6MDguNTkxMTM4IElQIGlw LTEwLTgtMC02LmVjMi5pbnRlcm5hbC4xMDQ1MyA+IHJlc29sdmVyMS5vcGVu ZG5zLmNvbS5kb21haW46IDkyMjkrIEE/IHMubWFwcy5tZS4gKDI3KQ0KMjI6 NDY6MDguNzI5NjIyIElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yNDgz NCA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDE0NjM3KyBBPyBt dGFsay5nb29nbGUuY29tLiAoMzQpDQoyMjo0NjowOC45ODMwNTkgSVAgaXAt MTAtOC0wLTYuZWMyLmludGVybmFsLjM2MTggPiByZXNvbHZlcjEub3BlbmRu cy5jb20uZG9tYWluOiAyMDU3MCsgQT8gbXktZG5zLXNlcnZlci1ob3N0bmFt ZS5kb21haW4udGxkLiAoMzUpDQoyMjo0NjowOC45ODMwNzMgSVAgaXAtMTAt OC0wLTYuZWMyLmludGVybmFsLjIwODU3ID4gcmVzb2x2ZXIxLm9wZW5kbnMu Y29tLmRvbWFpbjogMjQ2NCsgQT8gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5k b21haW4udGxkLiAoMzUpDQoyMjo0NjowOS4yODg2ODggSVAgaXAtMTAtOC0w LTYuZWMyLmludGVybmFsLjMyNTgyID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29t LmRvbWFpbjogNjkwNCsgQT8gcnlsb2JvYWd1cC4gKDI4KQ0KMjI6NDY6MDku Mjg4NzAwIElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yMDIyOSA+IHJl c29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDUwMTErIEE/IGhubm5jZHlz YXNpb2IuICgzMSkNCjIyOjQ2OjA5LjI5MzU0NiBJUCBpcC0xMC04LTAtNi5l YzIuaW50ZXJuYWwuMTE5MDQgPiByZXNvbHZlcjEub3BlbmRucy5jb20uZG9t YWluOiAxNjIyMysgQT8gaG5ubmNkeXNhc2lvYi4gKDMxKQ0KMjI6NDY6MDku MjkzNTU2IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4xNzYyOSA+IHJl c29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDEwODQ0KyBBPyByeWxvYm9h Z3VwLiAoMjgpDQoyMjo0NjowOS4yOTM1NzEgSVAgaXAtMTAtOC0wLTYuZWMy LmludGVybmFsLjczNDAgPiByZXNvbHZlcjEub3BlbmRucy5jb20uZG9tYWlu OiAxNDMwOCsgQT8gZm9xZXppZ2hzLiAoMjcpDQoyMjo0NjowOS4yOTM1Nzkg SVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjE5MzIyID4gcmVzb2x2ZXIx Lm9wZW5kbnMuY29tLmRvbWFpbjogMTU2MjYrIEE/IGZvcWV6aWdocy4gKDI3 KQ0KMjI6NDY6MTAuMDc4Mzk1IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5h bC40NjkwOCA+IGxpNTI1LTI1Lm1lbWJlcnMubGlub2RlLmNvbS5odHRwOiBG bGFncyBbU10sIHNlcSAyODY4NDUwMjEwLCB3aW4gNjU1MzUsIG9wdGlvbnMg W21zcyAxMzY5LHNhY2tPSyxUUyB2YWwgNDA5NjgwIGVjciAwLG5vcCx3c2Nh bGUgOF0sIGxlbmd0aCAwDQoyMjo0NjoxMC4zMjEyNjIgSVAgaXAtMTAtOC0w LTYuZWMyLmludGVybmFsLjQ2OTEwID4gbGk1MjUtMjUubWVtYmVycy5saW5v ZGUuY29tLmh0dHA6IEZsYWdzIFtTXSwgc2VxIDg4NTc1NzY1Niwgd2luIDY1 NTM1LCBvcHRpb25zIFttc3MgMTM2OSxzYWNrT0ssVFMgdmFsIDQwOTcwNCBl Y3IgMCxub3Asd3NjYWxlIDhdLCBsZW5ndGggMA0KMjI6NDY6MTIuMDgyMjMx IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4zMDg2ID4gcmVzb2x2ZXIx Lm9wZW5kbnMuY29tLmRvbWFpbjogMzI3MDkrIEE/IGV2ZW50cy5tYXBib3gu Y29tLiAoMzUpDQoyMjo0NjoxMi4xNjMxOTcgSVAgaXAtMTAtOC0wLTYuZWMy LmludGVybmFsLjMwNDYzID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFp bjogNjA5NCsgQT8gcG9vbC5udHAub3JnLiAoMzApDQoyMjo0NjoxMi4zMzk1 MzAgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjE3MTQ3ID4gbXktZG5z LXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLmRvbWFpbjogMTIyMDIrIEE/ IGxvZ3gub3B0aW1pemVseS5jb20uICgzNykNCjIyOjQ2OjEzLjQ0MDA4MiBJ UCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMjk2OTkgPiBteS1kbnMtc2Vy dmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9tYWluOiAyNjQzMCsgQT8gcG5w LmFwdG9pZGUuY29tLiAoMzMpDQoyMjo0NjoxMy41MDk0MjQgSVAgaXAtMTAt OC0wLTYuZWMyLmludGVybmFsLjI5ODY2ID4gbXktZG5zLXNlcnZlci1ob3N0 bmFtZS5kb21haW4udGxkLmRvbWFpbjogMjE1MjcrIEE/IHBvcnRhbC5mYi5j b20uICgzMSkNCjIyOjQ2OjEzLjU5MTgyNiBJUCBpcC0xMC04LTAtNi5lYzIu aW50ZXJuYWwuMzM3ODEgPiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFp bi50bGQuZG9tYWluOiA5MjI5KyBBPyBzLm1hcHMubWUuICgyNykNCjIyOjQ2 OjEzLjczNTg2MiBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMTIwODYg PiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9tYWluOiAx NDYzNysgQT8gbXRhbGsuZ29vZ2xlLmNvbS4gKDM0KQ0KMjI6NDY6MTMuOTgx MDQyIElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4zMjU0NyA+IG15LWRu cy1zZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21haW46IDIwNTcwKyBB PyBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuICgzNSkNCjIy OjQ2OjEzLjk4MTA1NCBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMzA2 NDQgPiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9tYWlu OiAyNDY0KyBBPyBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQu ICgzNSkNCjIyOjQ2OjE0LjI4MDAyMSBJUCBpcC0xMC04LTAtNi5lYzIuaW50 ZXJuYWwuMTQ3OTYgPiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50 bGQuZG9tYWluOiA2OTA0KyBBPyByeWxvYm9hZ3VwLiAoMjgpDQoyMjo0Njox NC4yODAwMzMgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjI1NzEgPiBt eS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9tYWluOiAxNjIy MysgQT8gaG5ubmNkeXNhc2lvYi4gKDMxKQ0KMjI6NDY6MTQuMjgwMDQxIElQ IGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yNTc1NSA+IG15LWRucy1zZXJ2 ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21haW46IDUwMTErIEE/IGhubm5j ZHlzYXNpb2IuICgzMSkNCjIyOjQ2OjE0LjI4MDA0OCBJUCBpcC0xMC04LTAt Ni5lYzIuaW50ZXJuYWwuMTg3MyA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUu ZG9tYWluLnRsZC5kb21haW46IDEwODQ0KyBBPyByeWxvYm9hZ3VwLiAoMjgp DQoyMjo0NjoxNC4yODQ3OTEgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFs LjI5NTEzID4gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLmRv bWFpbjogMTQzMDgrIEE/IGZvcWV6aWdocy4gKDI3KQ0KMjI6NDY6MTQuMjg0 Nzk5IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4zMzMwNCA+IG15LWRu cy1zZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21haW46IDE1NjI2KyBB PyBmb3FlemlnaHMuICgyNykNCjIyOjQ2OjE3LjA5NzU4MiBJUCBpcC0xMC04 LTAtNi5lYzIuaW50ZXJuYWwuMzMwMzAgPiBteS1kbnMtc2VydmVyLWhvc3Ru YW1lLmRvbWFpbi50bGQuZG9tYWluOiAzMjcwOSsgQT8gZXZlbnRzLm1hcGJv eC5jb20uICgzNSkNCjIyOjQ2OjE3LjE2ODMxNSBJUCBpcC0xMC04LTAtNi5l YzIuaW50ZXJuYWwuNzk0NCA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9t YWluLnRsZC5kb21haW46IDYwOTQrIEE/IHBvb2wubnRwLm9yZy4gKDMwKQ0K MjI6NDY6MTcuMzQxMjMzIElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4x NDg2NiA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDEyMjAyKyBB PyBsb2d4Lm9wdGltaXplbHkuY29tLiAoMzcpDQoyMjo0NjoxOC40NDUxMDYg SVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjEyNjE0ID4gcmVzb2x2ZXIx Lm9wZW5kbnMuY29tLmRvbWFpbjogMTU2MzIrIEE/IHBucC5hcHRvaWRlLmNv bS4gKDMzKQ0KMjI6NDY6MTguNTE1NTIzIElQIGlwLTEwLTgtMC02LmVjMi5p bnRlcm5hbC4xMzQ1NyA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46 IDIxNTI3KyBBPyBwb3J0YWwuZmIuY29tLiAoMzEpDQoyMjo0NjoxOC43NjE5 MTYgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjI0NDEgPiByZXNvbHZl cjEub3BlbmRucy5jb20uZG9tYWluOiAyOTQ3KyBBPyBhbHQzLW10YWxrLmdv b2dsZS5jb20uICgzOSkNCjIyOjQ2OjE4Ljk4NTc5NCBJUCBpcC0xMC04LTAt Ni5lYzIuaW50ZXJuYWwuMjcwMjcgPiByZXNvbHZlcjEub3BlbmRucy5jb20u ZG9tYWluOiAxNzc5NisgQT8gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5kb21h aW4udGxkLiAoMzUpDQoyMjo0NjoxOS4yOTg0NDMgSVAgaXAtMTAtOC0wLTYu ZWMyLmludGVybmFsLjIzNDU4ID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRv bWFpbjogMzI3MDgrIEE/IHJ5bG9ib2FndXAuICgyOCkNCjIyOjQ2OjE5LjI5 ODQ1NiBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMjk0MSA+IHJlc29s dmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDMwOTUyKyBBPyByeWxvYm9hZ3Vw LiAoMjgpDQoyMjo0NjoxOS4yOTg0NjQgSVAgaXAtMTAtOC0wLTYuZWMyLmlu dGVybmFsLjMxOTM5ID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjog NjM1NisgQT8gaG5ubmNkeXNhc2lvYi4gKDMxKQ0KMjI6NDY6MTkuMjk4NDcx IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yMjAzNSA+IHJlc29sdmVy MS5vcGVuZG5zLmNvbS5kb21haW46IDMwNDY4KyBBPyBobm5uY2R5c2FzaW9i LiAoMzEpDQoyMjo0NjoxOS4zMDM5MjkgSVAgaXAtMTAtOC0wLTYuZWMyLmlu dGVybmFsLjMyMjI1ID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjog MTU2NTcrIEE/IGZvcWV6aWdocy4gKDI3KQ0KMjI6NDY6MTkuMzAzOTU2IElQ IGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yOTExNCA+IHJlc29sdmVyMS5v cGVuZG5zLmNvbS5kb21haW46IDI5NzEyKyBBPyBmb3FlemlnaHMuICgyNykN CjIyOjQ2OjIyLjEwNTk4NyBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwu MzA4NiA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDMyNzA5KyBB PyBldmVudHMubWFwYm94LmNvbS4gKDM1KQ0KMjI6NDY6MjIuMzUzNDA0IElQ IGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4xNzE0NyA+IG15LWRucy1zZXJ2 ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21haW46IDEyMjAyKyBBPyBsb2d4 Lm9wdGltaXplbHkuY29tLiAoMzcpDQoyMjo0NjoyMy40NTMxMTYgSVAgaXAt MTAtOC0wLTYuZWMyLmludGVybmFsLjIxMTc1ID4gbXktZG5zLXNlcnZlci1o b3N0bmFtZS5kb21haW4udGxkLmRvbWFpbjogMTU2MzIrIEE/IHBucC5hcHRv aWRlLmNvbS4gKDMzKQ0KMjI6NDY6MjMuNTIyMTM0IElQIGlwLTEwLTgtMC02 LmVjMi5pbnRlcm5hbC4yOTg2NiA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUu ZG9tYWluLnRsZC5kb21haW46IDIxNTI3KyBBPyBwb3J0YWwuZmIuY29tLiAo MzEpDQoyMjo0NjoyMy43NzA3MTQgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVy bmFsLjExMDczID4gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxk LmRvbWFpbjogMjk0NysgQT8gYWx0My1tdGFsay5nb29nbGUuY29tLiAoMzkp DQoyMjo0NjoyMy45OTMzNDcgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFs LjMxMzgxID4gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLmRv bWFpbjogMTc3OTYrIEE/IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9tYWlu LnRsZC4gKDM1KQ0KMjI6NDY6MjQuMjk4NzI4IElQIGlwLTEwLTgtMC02LmVj Mi5pbnRlcm5hbC4yMTI1NyA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9t YWluLnRsZC5kb21haW46IDMyNzA4KyBBPyByeWxvYm9hZ3VwLiAoMjgpDQoy Mjo0NjoyNC4yOTg3NDUgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjMw MzY4ID4gbXktZG5zLXNlcnZlci1ob3N0bmFtZS5kb21haW4udGxkLmRvbWFp bjogMzA5NTIrIEE/IHJ5bG9ib2FndXAuICgyOCkNCjIyOjQ2OjI0LjI5ODc1 NSBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuOTg4MyA+IG15LWRucy1z ZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21haW46IDYzNTYrIEE/IGhu bm5jZHlzYXNpb2IuICgzMSkNCjIyOjQ2OjI0LjI5ODc2MyBJUCBpcC0xMC04 LTAtNi5lYzIuaW50ZXJuYWwuMTk3NDcgPiBteS1kbnMtc2VydmVyLWhvc3Ru YW1lLmRvbWFpbi50bGQuZG9tYWluOiAzMDQ2OCsgQT8gaG5ubmNkeXNhc2lv Yi4gKDMxKQ0KMjI6NDY6MjQuMjk4NzcwIElQIGlwLTEwLTgtMC02LmVjMi5p bnRlcm5hbC4xMjc4MyA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9tYWlu LnRsZC5kb21haW46IDE1NjU3KyBBPyBmb3FlemlnaHMuICgyNykNCjIyOjQ2 OjI0LjI5ODc3NyBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMjQxMzUg PiBteS1kbnMtc2VydmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuZG9tYWluOiAy OTcxMisgQT8gZm9xZXppZ2hzLiAoMjcpDQoyMjo0NjoyNi4xNTM3NjggSVAg aXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjEyNDQgPiByZXNvbHZlcjEub3Bl bmRucy5jb20uZG9tYWluOiAyMDI1MSsgQT8gd3d3Lmdvb2dsZWFwaXMuY29t LiAoMzYpDQoyMjo0NjoyNi4xODI2MzQgSVAgaXAtMTAtOC0wLTYuZWMyLmlu dGVybmFsLjMwMTAyID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjog MTY0ODkrIEE/IHBvb2wubnRwLm9yZy4gKDMwKQ0KMjI6NDY6MjcuMTA3NDQz IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4zMzAzMCA+IG15LWRucy1z ZXJ2ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21haW46IDMyNzA5KyBBPyBl dmVudHMubWFwYm94LmNvbS4gKDM1KQ0KMjI6NDY6MjguNDYwMTE5IElQIGlw LTEwLTgtMC02LmVjMi5pbnRlcm5hbC4xMjYxNCA+IHJlc29sdmVyMS5vcGVu ZG5zLmNvbS5kb21haW46IDE1NjMyKyBBPyBwbnAuYXB0b2lkZS5jb20uICgz MykNCjIyOjQ2OjI4Ljc3MzI5MCBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJu YWwuMjQ0MSA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDI5NDcr IEE/IGFsdDMtbXRhbGsuZ29vZ2xlLmNvbS4gKDM5KQ0KMjI6NDY6MjguOTk2 NTg5IElQIGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yNzAyNyA+IHJlc29s dmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDE3Nzk2KyBBPyBteS1kbnMtc2Vy dmVyLWhvc3RuYW1lLmRvbWFpbi50bGQuICgzNSkNCjIyOjQ2OjI5LjI5OTcy MiBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMjM0NTggPiByZXNvbHZl cjEub3BlbmRucy5jb20uZG9tYWluOiAzMjcwOCsgQT8gcnlsb2JvYWd1cC4g KDI4KQ0KMjI6NDY6MjkuMjk5NzM3IElQIGlwLTEwLTgtMC02LmVjMi5pbnRl cm5hbC4yOTQxID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjogMzA5 NTIrIEE/IHJ5bG9ib2FndXAuICgyOCkNCjIyOjQ2OjI5LjI5OTc0NSBJUCBp cC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMzE5MzkgPiByZXNvbHZlcjEub3Bl bmRucy5jb20uZG9tYWluOiA2MzU2KyBBPyBobm5uY2R5c2FzaW9iLiAoMzEp DQoyMjo0NjoyOS4yOTk3NTMgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFs LjIyMDM1ID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjogMzA0Njgr IEE/IGhubm5jZHlzYXNpb2IuICgzMSkNCjIyOjQ2OjI5LjMwNDU2NyBJUCBp cC0xMC04LTAtNi5lYzIuaW50ZXJuYWwuMzIyMjUgPiByZXNvbHZlcjEub3Bl bmRucy5jb20uZG9tYWluOiAxNTY1NysgQT8gZm9xZXppZ2hzLiAoMjcpDQoy Mjo0NjoyOS4zMDQ1NzUgSVAgaXAtMTAtOC0wLTYuZWMyLmludGVybmFsLjI5 MTE0ID4gcmVzb2x2ZXIxLm9wZW5kbnMuY29tLmRvbWFpbjogMjk3MTIrIEE/ IGZvcWV6aWdocy4gKDI3KQ0KMjI6NDY6MzEuMTc3NDMyIElQIGlwLTEwLTgt MC02LmVjMi5pbnRlcm5hbC4xMTE3ID4gbXktZG5zLXNlcnZlci1ob3N0bmFt ZS5kb21haW4udGxkLmRvbWFpbjogMjAyNTErIEE/IHd3dy5nb29nbGVhcGlz LmNvbS4gKDM2KQ0KMjI6NDY6MzEuMTkwNDcxIElQIGlwLTEwLTgtMC02LmVj Mi5pbnRlcm5hbC4zMTMyMCA+IG15LWRucy1zZXJ2ZXItaG9zdG5hbWUuZG9t YWluLnRsZC5kb21haW46IDE2NDg5KyBBPyBwb29sLm50cC5vcmcuICgzMCkN CjIyOjQ2OjMyLjA5OTExMSBJUCBpcC0xMC04LTAtNi5lYzIuaW50ZXJuYWwu NDMyNSA+IHJlc29sdmVyMS5vcGVuZG5zLmNvbS5kb21haW46IDIwMTk1KyBB PyBldmVudHMubWFwYm94LmNvbS4gKDM1KQ0KMjI6NDY6MzMuNDQ3NjYwIElQ IGlwLTEwLTgtMC02LmVjMi5pbnRlcm5hbC4yMTE3NSA+IG15LWRucy1zZXJ2 ZXItaG9zdG5hbWUuZG9tYWluLnRsZC5kb21haW46IDE1NjMyKyBBPyBwbnAu YXB0b2lkZS5jb20uICgzMykNCjIyOjQ2OjMzLjgyOTI0MCBJUCBpcC0xMC04 LTAtNi5lYzIuaW50ZXJuYWwuMTEwNzMgPiBteS1kbnMtc2VydmVyLWhvc3Ru YW1lLmRvbWFpbi50bGQuZG9tYWluOiAyOTQ3KyBBPyBhbHQzLW10YWxrLmdv b2dsZS5jb20uICgzOSkNCjIyOjQ2OjMzLjk5NDE2MCBJUCBpcC0xMC04LTAt Ni5lYzIuaW50ZXJuYWwuMzEzODEgPiBteS1kbnMtc2VydmVyLWhvc3RuYW1l LmRvbWFpbi50bGQNCg== --1512028668-487803783-1503788731=:50226 Content-Type: text/plain; charset=US-ASCII; name=tcpdump_xn0 Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: Content-Disposition: attachment; filename=tcpdump_xn0 MjI6MzU6MTcuNjUzOTkzIElQIGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1p cC5lYzIuaW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21lLWlwLm55Y2Fw LnJlcy5yci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggNTMNCjIyOjM1OjI2 LjEyODg0NiBBUlAsIFJlcXVlc3Qgd2hvLWhhcyBpcC1teS1zZXJ2ZXItYXdz LXByaXZhdGUtaXAuZWMyLmludGVybmFsIHRlbGwgaXAtMTcyLTMxLTE2LTEu ZWMyLmludGVybmFsLCBsZW5ndGggNDINCjIyOjM1OjI2LjEyODg1OCBBUlAs IFJlcGx5IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJu YWwgaXMtYXQgMGE6Zjk6NGI6ZTg6NmU6YmUgKG91aSBVbmtub3duKSwgbGVu Z3RoIDI4DQoyMjozNToyNy44MTYwMTMgSVAgaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuID4gY3BlLW15LWhvbWUt aXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuOiBVRFAsIGxlbmd0aCA1Mw0K MjI6MzU6MjguMDgyMjQzIEFSUCwgUmVxdWVzdCB3aG8taGFzIGlwLW15LXNl cnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwgdGVsbCBpcC0xNzIt MzEtMTYtMS5lYzIuaW50ZXJuYWwsIGxlbmd0aCA0Mg0KMjI6MzU6MjguMDgy MjUzIEFSUCwgUmVwbHkgaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVj Mi5pbnRlcm5hbCBpcy1hdCAwYTpmOTo0YjplODo2ZTpiZSAob3VpIFVua25v d24pLCBsZW5ndGggMjgNCjIyOjM1OjQxLjI1ODA3MSBJUCBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm50cCA+IDQuNTMuMTYw Ljc1Lm50cDogTlRQdjQsIENsaWVudCwgbGVuZ3RoIDQ4DQoyMjozNTo0MS4y ODIxNDggSVAgNC41My4xNjAuNzUubnRwID4gaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5udHA6IE5UUHY0LCBTZXJ2ZXIsIGxl bmd0aCA0OA0KMjI6MzU6NDMuMzcwNjAyIElQIGNwZS1teS1ob21lLWlwLm55 Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJp dmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTQN CjIyOjM1OjQzLjM3MTAwOSBJUCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNh cC5yZXMucnIuY29tLm9wZW52cG46IFVEUCwgbGVuZ3RoIDI2DQoyMjozNTo0 My40MjEzMTYgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5v cGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRl cm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAyMg0KMjI6MzU6NDMuNDI2OTk3 IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+ IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3Bl bnZwbjogVURQLCBsZW5ndGggMjAzDQoyMjozNTo0My40MzUxODMgSVAgaXAt bXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBu ID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuOiBV RFAsIGxlbmd0aCAxMjYNCjIyOjM1OjQzLjQzNTIwMSBJUCBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG4gPiBjcGUt bXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG46IFVEUCwgbGVu Z3RoIDExNA0KMjI6MzU6NDMuNDM1MjA5IElQIGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21l LWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggMTE0 DQoyMjozNTo0My40MzUyMzUgSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRl LWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnlj YXAucmVzLnJyLmNvbS5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMTQNCjIyOjM1 OjQzLjQ3NTc1NSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29t Lm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmlu dGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0My40NzU4 NDggSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5v cGVudnBuOiBVRFAsIGxlbmd0aCAxMTQNCjIyOjM1OjQzLjQ4MTY1MSBJUCBj cGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1t eS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46 IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0My40ODE2NTUgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCAyMg0KMjI6MzU6NDMuNDgxNjcwIElQIGNwZS1teS1ob21lLWlwLm55 Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJp dmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMjIN CjIyOjM1OjQzLjQ4MTY5OCBJUCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNh cC5yZXMucnIuY29tLm9wZW52cG46IFVEUCwgbGVuZ3RoIDExNA0KMjI6MzU6 NDMuNDgxNzEwIElQIGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5y ci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggMTE0DQoyMjozNTo0My40ODE3 MTggSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5v cGVudnBuOiBVRFAsIGxlbmd0aCAxMTQNCjIyOjM1OjQzLjUyNzE0OSBJUCBj cGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1t eS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46 IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0My41MjcxNjggSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCAyMg0KMjI6MzU6NDMuNTI3MTgwIElQIGNwZS1teS1ob21lLWlwLm55 Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJp dmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMjIN CjIyOjM1OjQzLjUyNzIwOCBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMu cnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAu ZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0 My41MjcyNjAgSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJy LmNvbS5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMTQNCjIyOjM1OjQzLjUyNzI5 NSBJUCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFs Lm9wZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9w ZW52cG46IFVEUCwgbGVuZ3RoIDExNA0KMjI6MzU6NDMuNTI3MzIxIElQIGlw LW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZw biA+IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbjog VURQLCBsZW5ndGggMTE0DQoyMjozNTo0My41MjczNDUgSVAgaXAtbXktc2Vy dmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuID4gY3Bl LW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuOiBVRFAsIGxl bmd0aCAxMTQNCjIyOjM1OjQzLjU3MDc4OSBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIy DQoyMjozNTo0My41NzA4MDQgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVz LnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlw LmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAyMg0KMjI6MzU6 NDMuNTcwODEwIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20u b3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50 ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMjINCjIyOjM1OjQzLjU3MDgy NCBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4g PiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9w ZW52cG46IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0My41NzA4OTYgSVAgaXAt bXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBu ID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuOiBV RFAsIGxlbmd0aCAxMTQNCjIyOjM1OjQzLjU3MDkxOCBJUCBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG4gPiBjcGUt bXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG46IFVEUCwgbGVu Z3RoIDExNA0KMjI6MzU6NDMuNTcwOTQ5IElQIGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21l LWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggMTE0 DQoyMjozNTo0My41NzA5NjYgSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRl LWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnlj YXAucmVzLnJyLmNvbS5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMTQNCjIyOjM1 OjQzLjYxNjM3NyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29t Lm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmlu dGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0My42MTYz OTAgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBu ID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5v cGVudnBuOiBVRFAsIGxlbmd0aCAyMg0KMjI6MzU6NDMuNjE2NDExIElQIGNw ZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15 LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjog VURQLCBsZW5ndGggMjINCjIyOjM1OjQzLjYxNjQzOSBJUCBjcGUtbXktaG9t ZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXIt YXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVu Z3RoIDIyDQoyMjozNTo0My42MTY0NTUgSVAgaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuID4gY3BlLW15LWhvbWUt aXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMTQN CjIyOjM1OjQzLjYxNjQ4MyBJUCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNh cC5yZXMucnIuY29tLm9wZW52cG46IFVEUCwgbGVuZ3RoIDExNA0KMjI6MzU6 NDMuNjE2NTAyIElQIGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5y ci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggMTE0DQoyMjozNTo0My42MTY1 MTkgSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5v cGVudnBuOiBVRFAsIGxlbmd0aCAxMTQNCjIyOjM1OjQzLjY2MTU3MiBJUCBj cGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1t eS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46 IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0My42NjE1ODggSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCAyMg0KMjI6MzU6NDMuNjYxNTkwIElQIGNwZS1teS1ob21lLWlwLm55 Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJp dmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMjIN CjIyOjM1OjQzLjY2MTU5MSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMu cnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAu ZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0 My42NjE2NzQgSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJy LmNvbS5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMTQNCjIyOjM1OjQzLjY2MTY5 NCBJUCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFs Lm9wZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9w ZW52cG46IFVEUCwgbGVuZ3RoIDExNA0KMjI6MzU6NDMuNjYxNzA3IElQIGlw LW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZw biA+IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbjog VURQLCBsZW5ndGggMTE0DQoyMjozNTo0My42NjE3MjAgSVAgaXAtbXktc2Vy dmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuID4gY3Bl LW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuOiBVRFAsIGxl bmd0aCAxMTQNCjIyOjM1OjQzLjcwNDg0MSBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIy DQoyMjozNTo0My43MDQ4NTUgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVz LnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlw LmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAyMg0KMjI6MzU6 NDMuNzA0ODYzIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20u b3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50 ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMjINCjIyOjM1OjQzLjcwNDg5 OSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4g PiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9w ZW52cG46IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0My43MDQ5NDYgSVAgaXAt bXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBu ID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuOiBV RFAsIGxlbmd0aCAxMTQNCjIyOjM1OjQzLjcwNDk2NyBJUCBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG4gPiBjcGUt bXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG46IFVEUCwgbGVu Z3RoIDExNA0KMjI6MzU6NDMuNzA0OTkzIElQIGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21l LWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggMTE0 DQoyMjozNTo0My43MDUwMTQgSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRl LWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnlj YXAucmVzLnJyLmNvbS5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMTQNCjIyOjM1 OjQzLjc1MDM2OSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29t Lm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmlu dGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0My43NTAz ODMgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBu ID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5v cGVudnBuOiBVRFAsIGxlbmd0aCAyMg0KMjI6MzU6NDMuNzUwNDA3IElQIGNw ZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15 LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjog VURQLCBsZW5ndGggMjINCjIyOjM1OjQzLjc1MDQzMiBJUCBjcGUtbXktaG9t ZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXIt YXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVu Z3RoIDIyDQoyMjozNTo0My43NTA1MDQgSVAgaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuID4gY3BlLW15LWhvbWUt aXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMTQN CjIyOjM1OjQzLjc1MDUyNCBJUCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNh cC5yZXMucnIuY29tLm9wZW52cG46IFVEUCwgbGVuZ3RoIDExNA0KMjI6MzU6 NDMuNzUwNTgxIElQIGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5y ci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggMTE0DQoyMjozNTo0My43NTA2 MDIgSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5v cGVudnBuOiBVRFAsIGxlbmd0aCAxMTQNCjIyOjM1OjQzLjc5NjEwNyBJUCBj cGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1t eS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46 IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0My43OTYxMTggSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCAyMg0KMjI6MzU6NDMuNzk2MTMyIElQIGNwZS1teS1ob21lLWlwLm55 Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJp dmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMjIN CjIyOjM1OjQzLjc5NjE2MSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMu cnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAu ZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0 My43OTYyMzQgSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJy LmNvbS5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMTQNCjIyOjM1OjQzLjc5NjI1 NCBJUCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFs Lm9wZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9w ZW52cG46IFVEUCwgbGVuZ3RoIDExNA0KMjI6MzU6NDMuNzk2MjgyIElQIGlw LW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZw biA+IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbjog VURQLCBsZW5ndGggMTE0DQoyMjozNTo0My43OTYzMDQgSVAgaXAtbXktc2Vy dmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuID4gY3Bl LW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuOiBVRFAsIGxl bmd0aCAxMTQNCjIyOjM1OjQzLjgzNzgwMyBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIy DQoyMjozNTo0My44Mzc4MTkgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVz LnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlw LmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAyMg0KMjI6MzU6 NDMuODM3OTI0IElQIGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5y ci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggMTE0DQoyMjozNTo0My44Mzc5 NTMgSVAgaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5v cGVudnBuOiBVRFAsIGxlbmd0aCAyOA0KMjI6MzU6NDMuODU1ODQ4IElQIGNw ZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15 LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjog VURQLCBsZW5ndGggMjINCjIyOjM1OjQzLjg1NTg1NSBJUCBjcGUtbXktaG9t ZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXIt YXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVu Z3RoIDIyDQoyMjozNTo0My44ODEzNzUgSVAgY3BlLW15LWhvbWUtaXAubnlj YXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2 YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAyMg0K MjI6MzU6NDQuMDY3MjcwIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5y ci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5l YzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTIwMA0KMjI6MzU6 NDQuMDY3Mjg0IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20u b3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50 ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTE4OA0KMjI6MzU6NDQuMDY3 MzczIElQIGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJu YWwub3BlbnZwbiA+IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20u b3BlbnZwbjogVURQLCBsZW5ndGggMjINCjIyOjM1OjQ0LjA2NzQwMiBJUCBp cC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52 cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG46 IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0NC4wODI0MTMgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCA4NjcNCjIyOjM1OjQ0LjA4ODY5MCBJUCBpcC1teS1zZXJ2ZXItYXdz LXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG4gPiBjcGUtbXktaG9t ZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG46IFVEUCwgbGVuZ3RoIDc3 DQoyMjozNTo0NC4xMzUwNjAgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVz LnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlw LmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA0MTUNCjIyOjM1 OjQ0LjEzNTM5NSBJUCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMy LmludGVybmFsLm9wZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMu cnIuY29tLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEyNg0KMjI6MzU6NDQuMTM1 NDEwIElQIGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJu YWwub3BlbnZwbiA+IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20u b3BlbnZwbjogVURQLCBsZW5ndGggMTE0DQoyMjozNTo0NC4xMzU0MTYgSVAg aXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVu dnBuID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBu OiBVRFAsIGxlbmd0aCAzNQ0KMjI6MzU6NDQuMTg1MTMyIElQIGNwZS1teS1o b21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZl ci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBs ZW5ndGggMjINCjIyOjM1OjQ0LjE4NTE1MSBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIy DQoyMjozNTo0NC4xODUyMjYgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVz LnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlw LmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAyMg0KMjI6MzU6 NDUuNDE1OTY2IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20u b3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50 ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggNTYNCjIyOjM1OjQ1LjQxNjEz NiBJUCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFs Lm9wZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9w ZW52cG46IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0NS40MTYxNTMgSVAgaXAt bXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBu ID4gY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuOiBV RFAsIGxlbmd0aCAxMTQNCjIyOjM1OjQ1LjQxNjE2MCBJUCBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG4gPiBjcGUt bXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG46IFVEUCwgbGVu Z3RoIDExNA0KMjI6MzU6NDUuNDE2MTY2IElQIGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21l LWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggMzIN CjIyOjM1OjQ1LjUwNzc1NyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMu cnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAu ZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDIyDQoyMjozNTo0 NS41MDc3NzMgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5v cGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRl cm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAyMg0KMjI6MzU6NDUuNTc3MjM5 IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+ IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3Bl bnZwbjogVURQLCBsZW5ndGggMjINCjIyOjM1OjQ1LjY0ODU4OCBJUCBjcGUt bXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1z ZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVE UCwgbGVuZ3RoIDkzDQoyMjozNTo0NS42NDg2MDYgSVAgY3BlLW15LWhvbWUt aXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3 cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0 aCA5Mw0KMjI6MzU6NDUuNjQ4NjMxIElQIGNwZS1teS1ob21lLWlwLm55Y2Fw LnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0 ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggNjI5DQoy MjozNTo0NS42NDg2NDYgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJy LmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVj Mi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAzMDkNCjIyOjM1OjQ1 LjY0ODY2NiBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9w ZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVy bmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDI4NQ0KMjI6MzU6NDUuNjgwMzU2 IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+ IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3Bl bnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM1OjQ1LjY4MDM3MiBJUCBjcGUt bXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1z ZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVE UCwgbGVuZ3RoIDI5Mw0KMjI6MzU6NDUuNjgwMzc3IElQIGNwZS1teS1ob21l LWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1h d3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5n dGggOTMNCjIyOjM1OjQ1LjY4NTU4MyBJUCBjcGUtbXktaG9tZS1pcC5ueWNh cC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZh dGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDI5Mw0K MjI6MzU6NDUuNzIyNTMxIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5y ci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5l YzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMjg1DQoyMjozNTo0 NS43NTk0MTQgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5v cGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRl cm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDkNCjIyOjM1OjQ1Ljg1MDE4 MSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4g PiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9w ZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNTo0NS45MTIzMTIgSVAgY3Bl LW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXkt c2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBV RFAsIGxlbmd0aCA2MjkNCjIyOjM1OjQ1Ljk1NzIwOCBJUCBjcGUtbXktaG9t ZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXIt YXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVu Z3RoIDI5Mw0KMjI6MzU6NDUuOTYxMTQ0IElQIGNwZS1teS1ob21lLWlwLm55 Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJp dmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggNTA5 DQoyMjozNTo0NS45NjExNTQgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVz LnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlw LmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAyOTMNCjIyOjM1 OjQ2LjE1MjM1MyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29t Lm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmlu dGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDYyOQ0KMjI6MzU6NDYuMjI5 NzIzIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw biA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwu b3BlbnZwbjogVURQLCBsZW5ndGggMjkzDQoyMjozNTo0Ni4yMzkzNDUgSVAg Y3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAt bXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBu OiBVRFAsIGxlbmd0aCAyOTMNCjIyOjM1OjQ2LjQ2NjgzMSBJUCBjcGUtbXkt aG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwg bGVuZ3RoIDUwOQ0KMjI6MzU6NDYuNDkwMDE2IElQIGNwZS1teS1ob21lLWlw Lm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGgg MTAxDQoyMjozNTo0Ni41MjQxNTMgSVAgY3BlLW15LWhvbWUtaXAubnljYXAu cmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRl LWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6 MzU6NDYuNTI0MTcyIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5j b20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjozNTo0Ni41 MjQxNzggSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVu dnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzU6NDYuNTQ5NjAzIElQ IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlw LW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZw bjogVURQLCBsZW5ndGggOTMNCjIyOjM1OjQ2LjYzODM2MSBJUCBjcGUtbXkt aG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwg bGVuZ3RoIDkzDQoyMjozNTo0Ni42NDMzNDIgSVAgY3BlLW15LWhvbWUtaXAu bnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5 Mw0KMjI6MzU6NDYuNjUzODI1IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJl cy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1p cC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggNjI5DQoyMjoz NTo0Ni42Nzk5NjQgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNv bS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzU6NDYuNjg1 MjQxIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw biA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwu b3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM1OjQ2Ljc5MjkyNiBJUCBj cGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1t eS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46 IFVEUCwgbGVuZ3RoIDI5Mw0KMjI6MzU6NDYuODAwMzcyIElQIGNwZS1teS1o b21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZl ci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBs ZW5ndGggMjkzDQoyMjozNTo0Ny40MTk4MzUgSVAgY3BlLW15LWhvbWUtaXAu bnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA1 MDkNCjIyOjM1OjQ3LjY2MDY1NCBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDYyOQ0KMjI6 MzU6NDcuOTEwNzYzIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5j b20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMjkzDQoyMjozNTo0Ny45 MjA0ODcgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVu dnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuOiBVRFAsIGxlbmd0aCAyOTMNCjIyOjM1OjQ4Ljc0MzA3MSBJ UCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBp cC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52 cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNTo0OC43NDMwODkgSVAgY3BlLW15 LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2Vy dmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAs IGxlbmd0aCA5Mw0KMjI6MzU6NDguNzQzMDk4IElQIGNwZS1teS1ob21lLWlw Lm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGgg OTMNCjIyOjM1OjQ4Ljc0MzExNSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjoz NTo0OS4zNDgxMDMgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNv bS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA1MDkNCjIyOjM1OjQ5LjY3 MDE3MyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52 cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFs Lm9wZW52cG46IFVEUCwgbGVuZ3RoIDYyOQ0KMjI6MzU6NTAuMTY4NDk2IElQ IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlw LW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZw bjogVURQLCBsZW5ndGggMjkzDQoyMjozNTo1MC4xNjg1MTQgSVAgY3BlLW15 LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2Vy dmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAs IGxlbmd0aCAyOTMNCjIyOjM1OjUwLjgyNTg4NCBJUCBjcGUtbXktaG9tZS1p cC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdz LXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3Ro IDEwOQ0KMjI6MzU6NTAuODUzMzQ5IElQIGNwZS1teS1ob21lLWlwLm55Y2Fw LnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0 ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIy OjM1OjUxLjI0MjI5NyBJUCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAu ZWMyLmludGVybmFsLm50cCA+IDE3OC4yMzYuMjkuMTEzLm50cDogTlRQdjQs IENsaWVudCwgbGVuZ3RoIDQ4DQoyMjozNTo1MS4zODY1NzcgSVAgMTc4LjIz Ni4yOS4xMTMubnRwID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVj Mi5pbnRlcm5hbC5udHA6IE5UUHY0LCBTZXJ2ZXIsIGxlbmd0aCA0OA0KMjI6 MzU6NTEuNTA5NjE1IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5j b20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjozNTo1MS41 MjM2ODcgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVu dnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM1OjUxLjUyODg3MyBJ UCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBp cC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52 cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNTo1MS41Mjg4ODcgSVAgY3BlLW15 LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2Vy dmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAs IGxlbmd0aCA5Mw0KMjI6MzU6NTEuNTUyMTA2IElQIGNwZS1teS1ob21lLWlw Lm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGgg OTMNCjIyOjM1OjUyLjc1NjA4MiBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjoz NTo1Mi43NTYxMDMgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNv bS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzU6NTIuNzU2 MTI5IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw biA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwu b3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM1OjUyLjc1NjE1NSBJUCBj cGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1t eS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46 IFVEUCwgbGVuZ3RoIDkzDQoyMjozNTo1My4yMTA0NjkgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCA1MDkNCjIyOjM1OjUzLjY3Nzc3MCBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDYy OQ0KMjI6MzU6NTQuNjU1NDA3IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJl cy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1p cC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMjkzDQoyMjoz NTo1NC42NTU0MjYgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNv bS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAyOTMNCjIyOjM1OjU1LjY3 ODI4NiBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52 cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFs Lm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzU6NTUuNjc4MzkzIElQ IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3Bl bnZwbiA+IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw bjogVURQLCBsZW5ndGggNTMNCjIyOjM1OjU1LjcwOTA5NCBJUCBjcGUtbXkt aG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwg bGVuZ3RoIDkzDQoyMjozNTo1NS43NTIwMTcgSVAgY3BlLW15LWhvbWUtaXAu bnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAx MDENCjIyOjM1OjU1Ljc1Njk2MCBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjoz NTo1NS43NjY4ODMgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNv bS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDkNCjIyOjM1OjU1Ljg1 NzQ0MyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52 cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFs Lm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNTo1Ni41MTAzNzYgSVAg Y3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAt bXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBu OiBVRFAsIGxlbmd0aCAxMDENCjIyOjM1OjU2LjUyODU1NCBJUCBjcGUtbXkt aG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwg bGVuZ3RoIDEwMQ0KMjI6MzU6NTYuNTMzNTI5IElQIGNwZS1teS1ob21lLWlw Lm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGgg OTMNCjIyOjM1OjU2LjUzMzU0MyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjoz NTo1Ni41NTE5MDQgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNv bS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzU6NTYuNzUw Mzg0IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw biA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwu b3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjozNTo1Ny4yNDg5NzUgSVAg aXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5udHAg PiBlYzItMTMtNTktMTU2LTEwNi51cy1lYXN0LTIuY29tcHV0ZS5hbWF6b25h d3MuY29tLm50cDogTlRQdjQsIENsaWVudCwgbGVuZ3RoIDQ4DQoyMjozNTo1 Ny4yNjExNjAgSVAgZWMyLTEzLTU5LTE1Ni0xMDYudXMtZWFzdC0yLmNvbXB1 dGUuYW1hem9uYXdzLmNvbS5udHAgPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZh dGUtaXAuZWMyLmludGVybmFsLm50cDogTlRQdjQsIFNlcnZlciwgbGVuZ3Ro IDQ4DQoyMjozNTo1OC43NTAzNjQgSVAgY3BlLW15LWhvbWUtaXAubnljYXAu cmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRl LWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDENCjIy OjM2OjAwLjY4NDg2NSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIu Y29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMy LmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MDAu NjkwNDUzIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3Bl bnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJu YWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjAwLjY5MDQ2OSBJ UCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBp cC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52 cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjowMC42OTA1MDIgSVAgY3BlLW15 LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2Vy dmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAs IGxlbmd0aCA5Mw0KMjI6MzY6MDAuNjkwNTM4IElQIGNwZS1teS1ob21lLWlw Lm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGgg OTMNCjIyOjM2OjAwLjcxMTkxOSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjoz NjowMC43NTI0MjUgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNv bS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MDAuNzY5 NDk4IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw biA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwu b3BlbnZwbjogVURQLCBsZW5ndGggMTA5DQoyMjozNjowMC44NTk4MTkgSVAg Y3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAt bXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBu OiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MDAuOTAwNzk3IElQIGNwZS1teS1o b21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZl ci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBs ZW5ndGggNTA5DQoyMjozNjowMS41MDcyNDEgSVAgY3BlLW15LWhvbWUtaXAu bnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAx MDENCjIyOjM2OjAxLjUzMTA0NiBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6 MzY6MDEuNTM3NjA4IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5j b20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjAxLjU0 Mzk3NyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52 cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFs Lm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjowMS41NTU4OTQgSVAg Y3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAt bXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBu OiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MDEuNjgyODUwIElQIGNwZS1teS1o b21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZl ci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBs ZW5ndGggNjI5DQoyMjozNjowMi43NzQ3NzEgSVAgY3BlLW15LWhvbWUtaXAu bnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAx MDENCjIyOjM2OjAzLjY0MzA3NiBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDI5Mw0KMjI6 MzY6MDMuNjQzMDkzIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5j b20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMjkzDQoyMjozNjowNS42 OTI3MjMgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVu dnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjA1LjY5MzE1MSBJ UCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9w ZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52 cG46IFVEUCwgbGVuZ3RoIDUzDQoyMjozNjowNS43MTgzMjggSVAgY3BlLW15 LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2Vy dmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAs IGxlbmd0aCA5Mw0KMjI6MzY6MDUuNzYwMDkzIElQIGNwZS1teS1ob21lLWlw Lm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGgg OTMNCjIyOjM2OjA1Ljc4MjMzOSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwOQ0KMjI6 MzY6MDUuODY1OTU0IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5j b20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjA2LjUx NDMxMCBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52 cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFs Lm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MDYuNTM3Njc1IElQ IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlw LW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZw bjogVURQLCBsZW5ndGggMTAxDQoyMjozNjowNi41Mzc2ODcgSVAgY3BlLW15 LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2Vy dmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAs IGxlbmd0aCAxMDENCjIyOjM2OjA2LjU0Mjk4OSBJUCBjcGUtbXktaG9tZS1p cC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdz LXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3Ro IDEwMQ0KMjI6MzY6MDYuNTQ5MTE0IElQIGNwZS1teS1ob21lLWlwLm55Y2Fw LnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0 ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIy OjM2OjA2LjU0OTExOSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIu Y29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMy LmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjowNi41 NDkxMjggSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVu dnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MDYuNTQ5MTQxIElQ IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlw LW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZw bjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjA2LjU0OTE2NSBJUCBjcGUtbXkt aG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwg bGVuZ3RoIDkzDQoyMjozNjowNi41NDkxNzkgSVAgY3BlLW15LWhvbWUtaXAu bnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5 Mw0KMjI6MzY6MDYuNTYzMjYyIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJl cy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1p cC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2 OjEwLjcwNTQwNSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29t Lm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmlu dGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MTAuNzIz NjQwIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw biA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwu b3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjEwLjc1OTc0NCBJUCBj cGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1t eS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46 IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjoxMC43Nzg5OTMgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCAxMDENCjIyOjM2OjEwLjc4MzkxMCBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEw OQ0KMjI6MzY6MTAuODY5NDg5IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJl cy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1p cC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2 OjExLjUxOTkwNSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29t Lm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmlu dGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MTEuNTQz ODYxIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw biA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwu b3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjozNjoxMS41NDM4ODAgSVAg Y3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAt bXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBu OiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjExLjU0OTE5NCBJUCBjcGUtbXkt aG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwg bGVuZ3RoIDEwMQ0KMjI6MzY6MTEuNTQ5MjA1IElQIGNwZS1teS1ob21lLWlw Lm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGgg OTMNCjIyOjM2OjExLjU0OTIwOSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjoz NjoxMS41NDkyMTIgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNv bS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MTEuNTU0 MzkzIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw biA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwu b3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjExLjU1NDQwMyBJUCBj cGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1t eS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46 IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjoxMS41NTQ0MDcgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCA5Mw0KMjI6MzY6MTEuNTY4MjQ1IElQIGNwZS1teS1ob21lLWlwLm55 Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJp dmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMN CjIyOjM2OjE0Ljg0MjAwMiBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMu cnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAu ZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6 MTQuODkzMzYzIEFSUCwgUmVxdWVzdCB3aG8taGFzIGlwLW15LXNlcnZlci1h d3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwgdGVsbCBpcC0xNzItMzEtMTYt MS5lYzIuaW50ZXJuYWwsIGxlbmd0aCA0Mg0KMjI6MzY6MTQuODkzMzc0IEFS UCwgUmVwbHkgaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRl cm5hbCBpcy1hdCAwYTpmOTo0YjplODo2ZTpiZSAob3VpIFVua25vd24pLCBs ZW5ndGggMjgNCjIyOjM2OjE1LjY5NjM5NSBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEw MQ0KMjI6MzY6MTUuNjk2NDk5IElQIGlwLW15LXNlcnZlci1hd3MtcHJpdmF0 ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21lLWlwLm55 Y2FwLnJlcy5yci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggNTMNCjIyOjM2 OjE1LjcyNjA2OSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29t Lm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmlu dGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjoxNS43NjQ0 NTMgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBu ID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5v cGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MTUuNzg1ODYxIElQIGNw ZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15 LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjog VURQLCBsZW5ndGggMTA5DQoyMjozNjoxNS44ODA4MDAgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCA5Mw0KMjI6MzY6MTYuMDA2NTA3IElQIGNwZS1teS1ob21lLWlwLm55 Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJp dmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTAx DQoyMjozNjoxNi4zMTc0NDEgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVz LnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlw LmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA1MDkNCjIyOjM2 OjE2LjUxMTg0NSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29t Lm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmlu dGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MTYuNTUw MjI1IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw biA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwu b3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjozNjoxNi41NTYwNTQgSVAg Y3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAt bXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBu OiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjE2LjU1NjA2MCBJUCBjcGUtbXkt aG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwg bGVuZ3RoIDEwMQ0KMjI6MzY6MTYuNTU2MDgzIElQIGNwZS1teS1ob21lLWlw Lm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3Mt cHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGgg OTMNCjIyOjM2OjE2LjU1NjExMiBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjoz NjoxNi41NTYxNDIgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNv bS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MTYuNTYx NDQ1IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZw biA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwu b3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjE2LjU2MTQ2MyBJUCBj cGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1t eS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46 IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjoxNi41NjE0OTkgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCA5Mw0KMjI6MzY6MTYuNTc0ODQ5IElQIGNwZS1teS1ob21lLWlwLm55 Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJp dmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMN CjIyOjM2OjE2LjYzNzk0OSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMu cnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAu ZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjox Ni42NDMwMTYgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5v cGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRl cm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MTYuNjc4NTA5 IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+ IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3Bl bnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjE2LjY3ODUyNSBJUCBjcGUt bXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1z ZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVE UCwgbGVuZ3RoIDkzDQoyMjozNjoxNy43MjY1MjIgSVAgY3BlLW15LWhvbWUt aXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3 cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0 aCA2MjkNCjIyOjM2OjE4LjQ0NzgxOSBJUCBjcGUtbXktaG9tZS1pcC5ueWNh cC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZh dGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0K MjI6MzY6MTguNzAwNzA2IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5y ci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5l YzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjozNjox OS40NjQ1MTQgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5v cGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRl cm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjE5LjcwOTAw MyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4g PiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9w ZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MTkuODMwNjA2IElQIGNw ZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15 LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjog VURQLCBsZW5ndGggMTAxDQoyMjozNjoyMC43MDUyNzkgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCAxMDENCjIyOjM2OjIwLjczMDg2MCBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkz DQoyMjozNjoyMC43NzEzODAgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVz LnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlw LmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6 MjAuNzkxODU0IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20u b3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50 ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTA5DQoyMjozNjoyMC44ODQ2 MzggSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBu ID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5v cGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MjEuMDExNjM2IElQIGNw ZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15 LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjog VURQLCBsZW5ndGggMTAxDQoyMjozNjoyMS40NTkwMDIgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCAxMDENCjIyOjM2OjIxLjUxNjk1NCBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEw MQ0KMjI6MzY6MjEuNTU1NzkzIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJl cy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1p cC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjoz NjoyMS41NTU4MTEgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNv bS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5p bnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjIxLjU1 NTgxNyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52 cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFs Lm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MjEuNTYwOTkyIElQ IGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlw LW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZw bjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjIxLjU2MTAwMiBJUCBjcGUtbXkt aG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2 ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwg bGVuZ3RoIDkzDQoyMjozNjoyMS41NjEwMDYgSVAgY3BlLW15LWhvbWUtaXAu bnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5 Mw0KMjI6MzY6MjEuNTYxMDM2IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJl cy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1p cC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2 OjIxLjU2MTA2MyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29t Lm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmlu dGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjoyMS41NjEw OTEgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBu ID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5v cGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MjEuNTc4OTc1IElQIGNw ZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15 LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjog VURQLCBsZW5ndGggMjkzDQoyMjozNjoyMS41ODQyMjggSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCAyOTMNCjIyOjM2OjIxLjU4NDIzMyBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkz DQoyMjozNjoyMS43MDA0MDUgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVz LnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlw LmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2 OjIyLjQ0ODI2MiBBUlAsIFJlcXVlc3Qgd2hvLWhhcyBpcC1teS1zZXJ2ZXIt YXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsIHRlbGwgaXAtMTcyLTMxLTE2 LTEuZWMyLmludGVybmFsLCBsZW5ndGggNDINCjIyOjM2OjIyLjQ0ODI3NCBB UlAsIFJlcGx5IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50 ZXJuYWwgaXMtYXQgMGE6Zjk6NGI6ZTg6NmU6YmUgKG91aSBVbmtub3duKSwg bGVuZ3RoIDI4DQoyMjozNjoyMy40OTg5MjQgSVAgY3BlLW15LWhvbWUtaXAu bnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1w cml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAx MDENCjIyOjM2OjI0LjQ4OTczMyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5y ZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUt aXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6 MzY6MjQuODU0MzM3IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5j b20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIu aW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjozNjoyNS40 NzQ5MjAgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVu dnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjI1LjQ3NTAyMCBJ UCBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9w ZW52cG4gPiBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52 cG46IFVEUCwgbGVuZ3RoIDUzDQoyMjozNjoyNS42OTYzNDUgSVAgY3BlLW15 LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2Vy dmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAs IGxlbmd0aCAxMDENCjIyOjM2OjI1LjcxMDc2OCBJUCBjcGUtbXktaG9tZS1p cC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdz LXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3Ro IDEwMQ0KMjI6MzY6MjUuNzQzODQxIElQIGNwZS1teS1ob21lLWlwLm55Y2Fw LnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0 ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIy OjM2OjI1Ljc4Mjc5MCBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIu Y29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMy LmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjoyNi4w MjIxMzYgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVu dnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5h bC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjI2LjQ4NjEzMiBJ UCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBp cC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52 cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MjYuNTI5MTc2IElQIGNwZS1t eS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNl cnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQ LCBsZW5ndGggMTAxDQoyMjozNjoyNi41NTk3MjAgSVAgY3BlLW15LWhvbWUt aXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3 cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0 aCA5Mw0KMjI6MzY6MjYuNTY0Njc3IElQIGNwZS1teS1ob21lLWlwLm55Y2Fw LnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0 ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIy OjM2OjI2LjU2NDY4NiBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIu Y29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMy LmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MjYu NTY0NzA0IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3Bl bnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJu YWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjI2LjU2NDcyMiBJ UCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBp cC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52 cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MjYuNTY0NzQwIElQIGNwZS1t eS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNl cnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQ LCBsZW5ndGggOTMNCjIyOjM2OjI5Ljg1NTcwMSBJUCBjcGUtbXktaG9tZS1p cC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdz LXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3Ro IDEwMQ0KMjI6MzY6MjkuODYxNzgxIElQIGNwZS1teS1ob21lLWlwLm55Y2Fw LnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0 ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTA5DQoy MjozNjozMC41MDM1MzEgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJy LmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVj Mi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjMw LjU5NTAxNiBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9w ZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVy bmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjozMC43MDU5Mzgg SVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4g aXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVu dnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjMwLjc0MjEzNCBJUCBjcGUt bXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1z ZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVE UCwgbGVuZ3RoIDkzDQoyMjozNjozMC43Nzk3MDUgSVAgY3BlLW15LWhvbWUt aXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3 cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0 aCA5Mw0KMjI6MzY6MzEuMDE5NTI1IElQIGNwZS1teS1ob21lLWlwLm55Y2Fw LnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0 ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoy MjozNjozMS41NDg0NTkgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJy LmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVj Mi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjMx LjU3MjQ5MyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9w ZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVy bmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkzDQoyMjozNjozMS41NzI1MTEg SVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4g aXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVu dnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MzEuNTcyNTEzIElQIGNwZS1t eS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNl cnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQ LCBsZW5ndGggMTAxDQoyMjozNjozMS41NzI1NDIgSVAgY3BlLW15LWhvbWUt aXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3 cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0 aCA5Mw0KMjI6MzY6MzEuNTc2NzY0IElQIGNwZS1teS1ob21lLWlwLm55Y2Fw LnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0 ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoy MjozNjozMS41NzY3NjggSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJy LmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVj Mi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6MzMu NDc4MTU3IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3Bl bnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJu YWwub3BlbnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjozNjozMy43NTg3MzEg SVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4g aXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVu dnBuOiBVRFAsIGxlbmd0aCAxMDENCjIyOjM2OjM0Ljg2MDczNyBJUCBjcGUt bXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1z ZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVE UCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MzQuODYwNzU1IElQIGNwZS1teS1ob21l LWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1h d3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5n dGggMTA5DQoyMjozNjozNS42MjAzNDQgSVAgY3BlLW15LWhvbWUtaXAubnlj YXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2 YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0K MjI6MzY6MzUuNjIwNDQ4IElQIGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1p cC5lYzIuaW50ZXJuYWwub3BlbnZwbiA+IGNwZS1teS1ob21lLWlwLm55Y2Fw LnJlcy5yci5jb20ub3BlbnZwbjogVURQLCBsZW5ndGggNTMNCjIyOjM2OjM1 Ljc4Nzg1OSBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9w ZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVy bmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MzYuMDI3NzMx IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+ IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3Bl bnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjozNjozNi41Njk4ODIgSVAgY3Bl LW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXkt c2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBV RFAsIGxlbmd0aCAxMDENCjIyOjM2OjM2LjU2OTg5OSBJUCBjcGUtbXktaG9t ZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXIt YXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVu Z3RoIDkzDQoyMjozNjozNi41NzU2MjMgSVAgY3BlLW15LWhvbWUtaXAubnlj YXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2 YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0K MjI6MzY6MzYuNTc1NjMxIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5y ci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5l YzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjM2 LjU3NTY2MCBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9w ZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVy bmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6MzYuNTgwNjI4 IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+ IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3Bl bnZwbjogVURQLCBsZW5ndGggMTAxDQoyMjozNjozNi41ODA2NDAgSVAgY3Bl LW15LWhvbWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXkt c2VydmVyLWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBV RFAsIGxlbmd0aCA5Mw0KMjI6MzY6MzguNTE3NTIxIElQIGNwZS1teS1ob21l LWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15LXNlcnZlci1h d3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjogVURQLCBsZW5n dGggMTAxDQoyMjozNjozOS44NjM2MTAgSVAgY3BlLW15LWhvbWUtaXAubnlj YXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2 YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCAxMDEN CjIyOjM2OjM5Ljg3MjA2MiBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMu cnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAu ZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDEwOQ0KMjI6MzY6 NDAuNjI5MDM0IElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20u b3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50 ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjQwLjc4MTk1 NCBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4g PiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9w ZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6NDEuMDQ3NDg0IElQIGNw ZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15 LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjog VURQLCBsZW5ndGggMTAxDQoyMjozNjo0MS41NjM2MDIgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCAxMDENCjIyOjM2OjQxLjU4NDA4OSBJUCBjcGUtbXktaG9tZS1pcC5u eWNhcC5yZXMucnIuY29tLm9wZW52cG4gPiBpcC1teS1zZXJ2ZXItYXdzLXBy aXZhdGUtaXAuZWMyLmludGVybmFsLm9wZW52cG46IFVEUCwgbGVuZ3RoIDkz DQoyMjozNjo0MS41ODQxMDUgSVAgY3BlLW15LWhvbWUtaXAubnljYXAucmVz LnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVyLWF3cy1wcml2YXRlLWlw LmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxlbmd0aCA5Mw0KMjI6MzY6 NDEuNTg0MTExIElQIGNwZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20u b3BlbnZwbiA+IGlwLW15LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50 ZXJuYWwub3BlbnZwbjogVURQLCBsZW5ndGggOTMNCjIyOjM2OjQxLjU4NDEz NyBJUCBjcGUtbXktaG9tZS1pcC5ueWNhcC5yZXMucnIuY29tLm9wZW52cG4g PiBpcC1teS1zZXJ2ZXItYXdzLXByaXZhdGUtaXAuZWMyLmludGVybmFsLm9w ZW52cG46IFVEUCwgbGVuZ3RoIDEwMQ0KMjI6MzY6NDEuNTg5OTQwIElQIGNw ZS1teS1ob21lLWlwLm55Y2FwLnJlcy5yci5jb20ub3BlbnZwbiA+IGlwLW15 LXNlcnZlci1hd3MtcHJpdmF0ZS1pcC5lYzIuaW50ZXJuYWwub3BlbnZwbjog VURQLCBsZW5ndGggMTAxDQoyMjozNjo0MS41OTcwNjcgSVAgY3BlLW15LWhv bWUtaXAubnljYXAucmVzLnJyLmNvbS5vcGVudnBuID4gaXAtbXktc2VydmVy LWF3cy1wcml2YXRlLWlwLmVjMi5pbnRlcm5hbC5vcGVudnBuOiBVRFAsIGxl bmd0aCA5Mw0KMjI6MzY6NDQuODczMTM5IElQIGNwZS1teS1ob21lLWlwLg0K --1512028668-487803783-1503788731=:50226--