From owner-freebsd-isp Sun Aug 12 2:55: 4 2001 Delivered-To: freebsd-isp@freebsd.org Received: from elm.phenome.org (elm.phenome.org [194.153.169.3]) by hub.freebsd.org (Postfix) with ESMTP id 70A8437B40A for ; Sun, 12 Aug 2001 02:55:01 -0700 (PDT) (envelope-from joshua@roughtrade.net) Received: from localhost (joshua@localhost [127.0.0.1]) by localhost (8.12.0.Beta7/8.12.0.Beta7/Debian 8.12.0.Beta7-1) with ESMTP id f7C9t0CC016159; Sun, 12 Aug 2001 10:55:00 +0100 Date: Sun, 12 Aug 2001 10:55:00 +0100 (BST) From: Joshua Goodall X-X-Sender: To: Corey Ralph Cc: Fabrizio Ravazzini , Subject: Re: SMTP very very slow! In-Reply-To: <20010810103918.A7971@corey.datafast.net.au> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, 10 Aug 2001, Corey Ralph wrote: [snip] > Alternately, make sure that you aren't blocking the ident lookup with a > firewall. It is 113/udp. [snip] minor nit: ident (aka auth) is 113/tcp Joshua To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Aug 13 11:12: 9 2001 Delivered-To: freebsd-isp@freebsd.org Received: from dns.unimayab.edu.mx (dns.unimayab.edu.mx [148.230.236.5]) by hub.freebsd.org (Postfix) with ESMTP id E200337B40C for ; Mon, 13 Aug 2001 11:12:03 -0700 (PDT) (envelope-from dperez@unimayab.edu.mx) Received: from exchange.unimayab.edu.mx ([172.21.14.24]) by dns.unimayab.edu.mx (8.11.3/8.11.3) with ESMTP id f7DIDCk13933 for ; Mon, 13 Aug 2001 13:13:12 -0500 (CDT) (envelope-from dperez@unimayab.edu.mx) Received: by EXCHANGE with Internet Mail Service (5.5.2653.19) id ; Mon, 13 Aug 2001 13:11:55 -0500 Message-ID: <81C8CA3C286FD511A959000102C9B2CE0F0C24@EXCHANGE> From: "A. David Perez Marfil" To: isp@FreeBSD.ORG Subject: sendmail relay by domain sender address Date: Mon, 13 Aug 2001 13:11:53 -0500 Importance: high X-Priority: 1 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="ISO-8859-1" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, i have a FreeBSD 4.3 with Sendmail 8.11.3/8.11.3 in the mailer table i have this line .unimayab.edu.mx smtp:[172.21.14.24] the server is use to protect of spam the server 172.21.14.24 that is an Exchange 5.5(MS) the firewall and NAT that only let in smtp for 172.21.14.5 (FreeBSD). Every works just fine but with some domain i got this problem. Aug 13 08:21:09 dns sendmail[12926]: f7DDL8p12926: ruleset=check_mail, arg1=, relay=reduno.reduno.com.mx [192.100.183.178], reject=451 4.1.8 ... Domain of sender address jcastill@reduno.com.mx does not resolve but if i do a nslookup... > set type=mx > reduno.com.mx Server: dns.unimayab.edu.mx Address: 172.21.14.5 Non-authoritative answer: reduno.com.mx preference = 30, mail exchanger = dns.reduno.com.mx reduno.com.mx preference = 10, mail exchanger = reduno.reduno.com.mx reduno.com.mx preference = 40, mail exchanger = dns.tij.reduno.com.mx Authoritative answers can be found from: dns.reduno.com.mx internet address = 200.4.144.117 reduno.reduno.com.mx internet address = 192.100.183.178 dns.tij.reduno.com.mx internet address = 200.4.145.50 and the problem is the same with other domains. what could be the problem? Thanks in advance. David Perez To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Aug 13 13:50:42 2001 Delivered-To: freebsd-isp@freebsd.org Received: from bilver.wjv.com (dhcp-1-3.n01.orldfl01.us.ra.verio.net [157.238.210.3]) by hub.freebsd.org (Postfix) with ESMTP id F1AC037B407 for ; Mon, 13 Aug 2001 13:50:37 -0700 (PDT) (envelope-from bill@bilver.wjv.com) Received: (from bill@localhost) by bilver.wjv.com (8.11.1/8.11.1) id f7DKm7278974; Mon, 13 Aug 2001 16:48:07 -0400 (EDT) (envelope-from bill) Date: Mon, 13 Aug 2001 16:48:06 -0400 From: Bill Vermillion To: "A. David Perez Marfil" Cc: isp@FreeBSD.ORG Subject: Re: sendmail relay by domain sender address Message-ID: <20010813164806.B76788@wjv.com> Reply-To: bv@wjv.com References: <81C8CA3C286FD511A959000102C9B2CE0F0C24@EXCHANGE> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <81C8CA3C286FD511A959000102C9B2CE0F0C24@EXCHANGE>; from dperez@unimayab.edu.mx on Mon, Aug 13, 2001 at 01:11:53PM -0500 Organization: W.J.Vermillion / Orlando - Winter Park Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, Aug 13, 2001 at 01:11:53PM -0500, A. David Perez Marfil thus sprach: > Every works just fine but with some domain i got this problem. > > Aug 13 08:21:09 dns sendmail[12926]: f7DDL8p12926: ruleset=check_mail, > arg1=, relay=reduno.reduno.com.mx [192.100.183.178], > reject=451 4.1.8 > ... Domain of sender address jcastill@reduno.com.mx > does not resolve > but if i do a nslookup... > > set type=mx > > reduno.com.mx > Server: dns.unimayab.edu.mx > Address: 172.21.14.5 Do an nslookup on the IP. It's trying to resolve the IP to a name. Bet someone left out some reverse mapping. Does nslookup 172.21.14.5 give a result? -- Bill Vermillion - bv @ wjv . com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Aug 13 14:11:33 2001 Delivered-To: freebsd-isp@freebsd.org Received: from db.nexgen.com (db.nexgen.com [66.92.98.149]) by hub.freebsd.org (Postfix) with SMTP id E250337B40A for ; Mon, 13 Aug 2001 14:11:26 -0700 (PDT) (envelope-from ml@db.nexgen.com) Received: (qmail 25880 invoked from network); 13 Aug 2001 21:11:11 -0000 Received: from localhost.nexgen.com (HELO alexus) (root@127.0.0.1) by localhost.nexgen.com with SMTP; 13 Aug 2001 21:11:11 -0000 Message-ID: <001301c1243c$8321c270$0d00a8c0@alexus> From: "alexus" To: , "A. David Perez Marfil" Cc: References: <81C8CA3C286FD511A959000102C9B2CE0F0C24@EXCHANGE> <20010813164806.B76788@wjv.com> Subject: Re: sendmail relay by domain sender address Date: Mon, 13 Aug 2001 17:11:25 -0400 Organization: NexGen MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2526.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2526.0000 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org reduno.com.mx itself must be resolving i think what the problem is your domain is in cache as unsolved domain, try to restart your named ----- Original Message ----- From: "Bill Vermillion" To: "A. David Perez Marfil" Cc: Sent: Monday, August 13, 2001 4:48 PM Subject: Re: sendmail relay by domain sender address > On Mon, Aug 13, 2001 at 01:11:53PM -0500, A. David Perez Marfil thus sprach: > > > Every works just fine but with some domain i got this problem. > > > > Aug 13 08:21:09 dns sendmail[12926]: f7DDL8p12926: ruleset=check_mail, > > arg1=, relay=reduno.reduno.com.mx [192.100.183.178], > > reject=451 4.1.8 > > ... Domain of sender address jcastill@reduno.com.mx > > does not resolve > > > but if i do a nslookup... > > > > set type=mx > > > reduno.com.mx > > Server: dns.unimayab.edu.mx > > Address: 172.21.14.5 > > Do an nslookup on the IP. It's trying to resolve the IP to a > name. Bet someone left out some reverse mapping. > Does nslookup 172.21.14.5 give a result? > > > -- > Bill Vermillion - bv @ wjv . com > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Aug 13 16:59:53 2001 Delivered-To: freebsd-isp@freebsd.org Received: from dns.unimayab.edu.mx (dns.unimayab.edu.mx [148.230.236.5]) by hub.freebsd.org (Postfix) with ESMTP id 05AE937B407 for ; Mon, 13 Aug 2001 16:59:49 -0700 (PDT) (envelope-from dperez@unimayab.edu.mx) Received: (from nobody@localhost) by dns.unimayab.edu.mx (8.11.3/8.11.3) id f7E00N315249; Mon, 13 Aug 2001 19:00:23 -0500 (CDT) (envelope-from dperez@unimayab.edu.mx) X-Authentication-Warning: dns.unimayab.edu.mx: nobody set sender to dperez@unimayab.edu.mx using -f To: bv@wjv.com, Bill Vermillion Subject: Re: sendmail relay by domain sender address Message-ID: <997747222.3b786a166c71f@mail.unimayab.edu.mx> Date: Mon, 13 Aug 2001 19:00:22 -0500 (CDT) From: dperez@unimayab.edu.mx Cc: isp@FreeBSD.ORG References: <20010813164806.B76788@wjv.com> In-Reply-To: <20010813164806.B76788@wjv.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: IMP/PHP IMAP webmail program 2.2.5 X-Originating-IP: 172.21.14.11 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Mensaje citado por: Bill Vermillion : > On Mon, Aug 13, 2001 at 01:11:53PM -0500, A. David Perez Marfil thus > sprach: > > > Every works just fine but with some domain i got this problem. > > > > Aug 13 08:21:09 dns sendmail[12926]: f7DDL8p12926: > ruleset=check_mail, > > > arg1=, relay=reduno.reduno.com.mx > [192.100.183.178], > > reject=451 4.1.8 > > ... Domain of sender address > jcastill@reduno.com.mx > > does not resolve > > > but if i do a nslookup... > > > > set type=mx > > > reduno.com.mx > > Server: dns.unimayab.edu.mx > > Address: 172.21.14.5 > > Do an nslookup on the IP. It's trying to resolve the IP to a > name. Bet someone left out some reverse mapping. > Does nslookup 172.21.14.5 give a result? %nslookup 172.21.14.5 Server: dns.unimayab.edu.mx Address: 172.21.14.5 Name: dns.unimayab.edu.mx Address: 172.21.14.5 %nslookup 192.100.183.178 Server: dns.unimayab.edu.mx Address: 172.21.14.5 Name: reduno.reduno.com.mx Address: 192.100.183.178 more info from the sendmail -bp %sendmail -bp /var/spool/mqueue (2 requests) ----Q-ID---- --Size-- -----Q-Time----- ------------Sender/Recipient------------ f7DLl4k14756 302 Mon Aug 13 16:47 (host map: lookup (reduno.com.mx): deferred) the email is valid and the domain too, any idea? David Perez > > > -- > Bill Vermillion - bv @ wjv . com > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Aug 13 17:16:29 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mndr.com (dsl081-091-099.lax1.dsl.speakeasy.net [64.81.91.99]) by hub.freebsd.org (Postfix) with ESMTP id B26C937B40D for ; Mon, 13 Aug 2001 17:16:25 -0700 (PDT) (envelope-from torqumada@paladincorp.com.au) Received: from debussy.paladincorp.com.au (co3007888-a.blktn1.nsw.optushome.com.au [203.164.10.230]) by mndr.com (Postfix) with ESMTP id 66B5A1F1F2F; Tue, 14 Aug 2001 00:16:23 +0000 (GMT) Received: from wagner.paladincorp.com.au (wagner.paladincorp.com.au [192.168.0.6]) by debussy.paladincorp.com.au (8.11.4/8.10.1) with ESMTP id f7E0GMf59228; Tue, 14 Aug 2001 10:16:22 +1000 (EST) Date: Tue, 14 Aug 2001 10:16:22 +1000 (EST) From: To: dperez@unimayab.edu.mx Cc: bv@wjv.com, Bill Vermillion , isp@FreeBSD.ORG Subject: Re: sendmail relay by domain sender address In-Reply-To: <997747222.3b786a166c71f@mail.unimayab.edu.mx> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 13 Aug 2001 dperez@unimayab.edu.mx wrote: nope it looks like you've got a dns problem.. host 172.21.14.5 Host not found. > ----Q-ID---- --Size-- -----Q-Time----- ------------Sender/Recipient------------ > f7DLl4k14756 302 Mon Aug 13 16:47 > (host map: lookup (reduno.com.mx): deferred) > > > the email is valid and the domain too, any idea? > David Perez > > > > > > > -- > > Bill Vermillion - bv @ wjv . com > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > Peace, 3B)+< /Torqumada -- As a computing professional, I believe it would be unethical for me to advise, recommend, or support the use (save possibly for personal amusement) of any product that is or depends on any Microsoft product. Paladin Corporation Pty Ltd. Ph:+612 9835-4782 Fax:+612 9864-0487 Software Engineering: c/c++/perl/sql/eiffel/pascal/haskell/php/java Powered by FreeBSD/SMP http://www.paladincorp.com.au/ The lyf so short, the craft so long to lerne - Chaucer This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended addressee, or the person responsible for delivering it to them, you may not copy, forward disclose or otherwise use it or any part of it in any way. To do so may be unlawful. If you receive this e-mail by mistake, please advise the sender immediately. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Aug 13 17:38:50 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mail2.mediadesign.nl (md2.mediadesign.nl [212.19.205.67]) by hub.freebsd.org (Postfix) with SMTP id DAFF237B401 for ; Mon, 13 Aug 2001 17:38:40 -0700 (PDT) (envelope-from alson@mediadesign.nl) Received: (qmail 13400 invoked by uid 1002); 14 Aug 2001 00:38:38 -0000 Date: Tue, 14 Aug 2001 02:38:38 +0200 From: Alson van der Meulen To: isp@FreeBSD.ORG Subject: Re: sendmail relay by domain sender address Message-ID: <20010814023838.A10482@md2.mediadesign.nl> Mail-Followup-To: isp@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.3.18i Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, Aug 14, 2001 at 10:16:22AM +1000, torqumada@paladincorp.com.au wrote: > On Mon, 13 Aug 2001 dperez@unimayab.edu.mx wrote: > > nope it looks like you've got a dns problem.. > > host 172.21.14.5 > Host not found. 172.21.14.5 is in the arnge 172.16.0.0/255.240.0.0, so it's non-routable just like 192.168.0.0/16 and 10.0.0.0/8 it won't have a public reverse dns :) > > the email is valid and the domain too, any idea? > > David Perez > > > > > > > > > > > -- > > > Bill Vermillion - bv @ wjv . com > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-isp" in the body of the message > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > > Peace, 3B)+< > /Torqumada > > -- > As a computing professional, I believe it would be unethical for me to > advise, recommend, or support the use (save possibly for personal > amusement) of any product that is or depends on any Microsoft product. > > > Paladin Corporation Pty Ltd. Ph:+612 9835-4782 Fax:+612 9864-0487 > Software Engineering: c/c++/perl/sql/eiffel/pascal/haskell/php/java > Powered by FreeBSD/SMP http://www.paladincorp.com.au/ > The lyf so short, the craft so long to lerne - Chaucer > > > > This e-mail and any files transmitted with it are confidential and intended > solely for the use of the individual or entity to whom they are addressed. > If you are not the intended addressee, or the person responsible for > delivering it to them, you may not copy, forward disclose or otherwise use > it or any part of it in any way. To do so may be unlawful. If you receive > this e-mail by mistake, please advise the sender immediately. > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message -- ,-------------------------------------------. > Name: Alson van der Meulen < > Personal: alson@flutnet.org < > School: alson@gymnasiumleiden.nl < `-------------------------------------------' Say, What does "Superblock Error" mean, anyhow? --------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Aug 13 19:11:33 2001 Delivered-To: freebsd-isp@freebsd.org Received: from apotheosis.org.za (apotheosis.org.za [137.158.128.27]) by hub.freebsd.org (Postfix) with ESMTP id 6929D37B407 for ; Mon, 13 Aug 2001 19:11:29 -0700 (PDT) (envelope-from mwest@uct.ac.za) Date: Tue, 14 Aug 2001 04:11:21 +0200 From: Matthew West To: Steven Ames Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Apache mod_auth_pam Message-ID: <20010814041121.A46591@apotheosis.org.za> References: <20010727182009.A33792@virtual-voodoo.com> <01ae01c11abf$5e7cd6c0$28d90c42@eservoffice.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <01ae01c11abf$5e7cd6c0$28d90c42@eservoffice.com>; from "Steven Ames" on Wed, Aug 01, 2001 at 02:22:55PM Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, Aug 01, 2001 at 02:22:55PM -0500, Steven Ames wrote: > The reason is that pam_unix.so makes a call to getpwnam. getpwnam > won't return a password unless the effective UID of the caller is 0 > (aka root). I had much the same problem. > So... anyone know how to get apache to auth using the unix passwd file? I ended up using ports/www/mod_auth_external; seems to work perfectly. You'll want to compile and install "pwauth" from the distfile by hand, as the port skeleton doesn't do this for you. -- mwest@uct.ac.za To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Aug 13 20:12:49 2001 Delivered-To: freebsd-isp@freebsd.org Received: from wari.semo.net (216-41-128-73.semo.net [216.41.128.73]) by hub.freebsd.org (Postfix) with SMTP id 81EA637B40A for ; Mon, 13 Aug 2001 20:12:45 -0700 (PDT) (envelope-from butch@sheltonbbs.com) Received: (qmail 20085 invoked from network); 14 Aug 2001 03:10:12 -0000 Received: from mail.sheltonbbs.com (206.196.109.2) by 216-41-128-73.semo.net with SMTP; 14 Aug 2001 03:10:12 -0000 Received: (qmail 26423 invoked from network); 14 Aug 2001 03:12:25 -0000 Received: from unknown (HELO 216-41-137-20.semo.net) (216.41.137.20) by mail.sheltonbbs.com with SMTP; 14 Aug 2001 03:12:25 -0000 Date: Mon, 13 Aug 2001 22:12:53 -0500 (CDT) From: Butch Evans X-Sender: root@216-41-137-20.semo.net To: Freebsd-ISP Subject: sendmail question Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I have a FreeBSD box at home that is running fetchmail delivering to sendmail (version 8.9.3). I am getting the following error in my logs and would like to turn off this behavior: reject=501 5.1.8 ... Sender domain must exist I know why it is in the .cf, but I am the only user on this box, and am running procmail to filter the mail, so don't need sendmail to do it for me. I found the following 2 lines in the /etc/mail/sendmail.cf that I think I can delete (comment), but not very versed in sendmail. R $* < @ $+ > $* $: $) > $1 < @ $2 > $3 R $* $#error $@ 5.1.8 $: "501 Sender domain must exist" They are not together in the sendmail.cf file. Can I just comment these lines and not break sendmail? Will this fix this issue? -- Butch Evans http://www.ChristInVerse.com/ http://www.HeIsComingSoon.com/ (in the works) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Aug 13 22:50:39 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mndr.com (dsl081-091-099.lax1.dsl.speakeasy.net [64.81.91.99]) by hub.freebsd.org (Postfix) with ESMTP id A295937B446 for ; Mon, 13 Aug 2001 22:50:25 -0700 (PDT) (envelope-from torqumada@paladincorp.com.au) Received: from debussy.paladincorp.com.au (co3007888-a.blktn1.nsw.optushome.com.au [203.164.10.230]) by mndr.com (Postfix) with ESMTP id CFF371F1F2F; Tue, 14 Aug 2001 05:50:23 +0000 (GMT) Received: from wagner.paladincorp.com.au (wagner.paladincorp.com.au [192.168.0.6]) by debussy.paladincorp.com.au (8.11.4/8.10.1) with ESMTP id f7E5oMf65163; Tue, 14 Aug 2001 15:50:22 +1000 (EST) Date: Tue, 14 Aug 2001 15:50:23 +1000 (EST) From: To: Butch Evans Cc: Freebsd-ISP Subject: Re: sendmail question In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 13 Aug 2001, Butch Evans wrote: no do not comment them out ! > R $* < @ $+ > $* $: $) > $1 < @ $2 > $3 > > R $* $#error $@ 5.1.8 $: "501 Sender domain must exist" > > They are not together in the sendmail.cf file. Can I just comment > these lines and not break sendmail? Will this fix this issue? Peace, 3B)+< /Torqumada -- As a computing professional, I believe it would be unethical for me to advise, recommend, or support the use (save possibly for personal amusement) of any product that is or depends on any Microsoft product. Paladin Corporation Pty Ltd. Ph:+612 9835-4782 Fax:+612 9864-0487 Software Engineering: c/c++/perl/sql/eiffel/pascal/haskell/php/java Powered by FreeBSD/SMP http://www.paladincorp.com.au/ The lyf so short, the craft so long to lerne - Chaucer This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended addressee, or the person responsible for delivering it to them, you may not copy, forward disclose or otherwise use it or any part of it in any way. To do so may be unlawful. If you receive this e-mail by mistake, please advise the sender immediately. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Aug 14 9:50:47 2001 Delivered-To: freebsd-isp@freebsd.org Received: from java2.dpcsys.com (java2.dpcsys.com [206.16.184.5]) by hub.freebsd.org (Postfix) with ESMTP id 67F5437B40A for ; Tue, 14 Aug 2001 09:50:43 -0700 (PDT) (envelope-from dan@dpcsys.com) Received: from localhost (localhost [127.0.0.1]) by java2.dpcsys.com (8.11.1/8.11.1) with ESMTP id f7EGnmK44976; Tue, 14 Aug 2001 09:49:48 -0700 (PDT) Date: Tue, 14 Aug 2001 09:49:48 -0700 (PDT) From: Dan Busarow To: Butch Evans Cc: Freebsd-ISP Subject: Re: sendmail question In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Aug 13, Butch Evans wrote: > I have a FreeBSD box at home that is running fetchmail delivering to > sendmail (version 8.9.3). I am getting the following error in my > logs and would like to turn off this behavior: > > reject=501 5.1.8 ... Sender domain must exist > > I know why it is in the .cf, but I am the only user on this box, and > am running procmail to filter the mail, so don't need sendmail to do > it for me. I found the following 2 lines in the > /etc/mail/sendmail.cf that I think I can delete (comment), but not > very versed in sendmail. Add FEATURE(accept_unresolvable_domains) to your sendmail.mc and rebuild sendmail.cf This will allow a lot of spam through though. Dan -- Dan Busarow 949 443 4172 Dana Point Communications, Inc. dan@dpcsys.com Dana Point, California 83 09 EF 59 E0 11 89 B4 8D 09 DB FD E1 DD 0C 82 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Aug 14 22: 0:23 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mail.plug.cx (kypo.alfred.cx [150.101.93.134]) by hub.freebsd.org (Postfix) with ESMTP id 7BFF237B40B for ; Tue, 14 Aug 2001 22:00:15 -0700 (PDT) (envelope-from andrew.reid@plug.cx) Received: from percible.alfred.cx (percible.alfred.cx [150.101.93.190]) by mail.plug.cx (Postfix) with ESMTP id 215212B97D for ; Thu, 16 Aug 2001 00:23:36 +0930 (CST) Subject: RADIUS Accounting with SQUID From: Andrew Reid To: freebsd-isp@freebsd.org Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Evolution/0.12.99 (Preview Release) Date: 16 Aug 2001 09:28:28 +0930 Message-Id: <997919908.1446.1202.camel@localhost> Mime-Version: 1.0 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Following some thinking coupled with a chat with a person or too, I've become slightly interested in the posibility of a SQUID plugin that sent a RADIUS accounting packet whenever a request is returned. I've looked around and have managed to find RADIUS Authentication, but not much in the way of RADIUS Accounting. Has anyone heard of such a thing? Any links or information would be greatly appreciated. - andrew -- void signature () { cout << "Andrew Reid -- andrew.reid@plug.cx" << endl ; cout << "Cell: +61 401 946 813" << endl; cout << "Quidquid latine dictum sit, altum viditur" << endl; } To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Aug 15 1:43:57 2001 Delivered-To: freebsd-isp@freebsd.org Received: from jake.akitanet.co.uk (jake.akitanet.co.uk [212.1.130.131]) by hub.freebsd.org (Postfix) with ESMTP id 94E7D37B407 for ; Wed, 15 Aug 2001 01:43:51 -0700 (PDT) (envelope-from wiggy@wopr.akitanet.co.uk) Received: from dsl-212-135-208-201.dsl.easynet.co.uk ([212.135.208.201] helo=wopr.akitanet.co.uk) by jake.akitanet.co.uk with esmtp (Exim 3.13 #3) id 15WwGp-000DMM-00; Wed, 15 Aug 2001 09:43:23 +0100 Received: from wiggy by wopr.akitanet.co.uk with local (Exim 3.21 #2) id 15WwGx-0003pd-00; Wed, 15 Aug 2001 09:43:31 +0100 Date: Wed, 15 Aug 2001 09:43:31 +0100 From: Paul Robinson To: Andrew Reid Cc: freebsd-isp@freebsd.org Subject: Re: RADIUS Accounting with SQUID Message-ID: <20010815094331.B12922@jake.akitanet.co.uk> References: <997919908.1446.1202.camel@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <997919908.1446.1202.camel@localhost>; from andrew.reid@plug.cx on Thu, Aug 16, 2001 at 09:28:28AM +0930 X-Scanner: exiscan *15WwGp-000DMM-00*$AK$WmIDUQrW6gtA43vVTTnU00* Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Aug 16, Andrew Reid wrote: > I've looked around and have managed to find RADIUS Authentication, but > not much in the way of RADIUS Accounting. > > Has anyone heard of such a thing? Any links or information would be > greatly appreciated. RFC2866 and you might want RFC2882. I'm rather confused how you are going to integrate this with Squid... what were you thinking of exactly? -- Paul Robinson ,--------------------------------------- Technical Director @ Akita | A computer lets you make more mistakes PO Box 604, Manchester, M60 3PR | than any other invention with the T: +44 (0) 161 228 6388 (F:6389)| possible exceptions of handguns and | Tequila - Mitch Ratcliffe `----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Aug 15 15:59:15 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mail.plug.cx (kypo.alfred.cx [150.101.93.134]) by hub.freebsd.org (Postfix) with ESMTP id 0927037B40C for ; Wed, 15 Aug 2001 15:59:12 -0700 (PDT) (envelope-from andrew.reid@plug.cx) Received: from percible.alfred.cx (percible.alfred.cx [150.101.93.190]) by mail.plug.cx (Postfix) with ESMTP id AB7302B97D; Thu, 16 Aug 2001 18:22:55 +0930 (CST) Subject: Re: RADIUS Accounting with SQUID From: Andrew Reid To: Paul Robinson Cc: freebsd-isp@freebsd.org In-Reply-To: <20010815094331.B12922@jake.akitanet.co.uk> References: <997919908.1446.1202.camel@localhost> <20010815094331.B12922@jake.akitanet.co.uk> Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Evolution/0.12.99 (Preview Release) Date: 17 Aug 2001 03:27:00 +0930 Message-Id: <997984620.1446.2253.camel@localhost> Mime-Version: 1.0 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On 15 Aug 2001 09:43:31 +0100, Paul Robinson wrote: > RFC2866 and you might want RFC2882. > > I'm rather confused how you are going to integrate this with Squid... what > were you thinking of exactly? Well, we (Glenunga International High School, Adelaide, South Australia) have written an Internet Quota system to stop students using too much of our bandwidth. This was a requirement of us getting a nice 11Mbps Wireless link, as the increased bandwidth would most certainly put us in the financial poo if it went unchecked. So, we've got something, working and I'm happy. I've decided that I want to be able to get some more information. Things like per-user MRTG-ish graphs and the like would be great. I've not had much to do with RADIUS, but I know that it provides some accounting functionality. I thought that the two (SQUID and RADIUS) could be mushed together somehow to provide a slightly more workable solution to Internet Quota. Does that provide a reasonably useful picture? - andrew -- void signature () { cout << "Andrew Reid -- andrew.reid@plug.cx" << endl ; cout << "Cell: +61 401 946 813" << endl; cout << "Quidquid latine dictum sit, altum viditur" << endl; } To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Aug 15 22:49:44 2001 Delivered-To: freebsd-isp@freebsd.org Received: from java2.dpcsys.com (java2.dpcsys.com [206.16.184.5]) by hub.freebsd.org (Postfix) with ESMTP id 9C51D37B406 for ; Wed, 15 Aug 2001 22:49:42 -0700 (PDT) (envelope-from dan@dpcsys.com) Received: from localhost (localhost [127.0.0.1]) by java2.dpcsys.com (8.11.1/8.11.1) with ESMTP id f7G5nXX83791 for ; Wed, 15 Aug 2001 22:49:33 -0700 (PDT) Date: Wed, 15 Aug 2001 22:49:33 -0700 (PDT) From: Dan Busarow To: freebsd-isp@freebsd.org Subject: IBM x330 Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Can anyone confirm that an IBM xSeries 330 will run FreeBSD 4.3? I'm just looking at the standard config with 1 SCSI drive and host adapter. Thanks, Dan -- Dan Busarow 949 443 4172 Dana Point Communications, Inc. dan@dpcsys.com Dana Point, California 83 09 EF 59 E0 11 89 B4 8D 09 DB FD E1 DD 0C 82 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Aug 16 6:13:34 2001 Delivered-To: freebsd-isp@freebsd.org Received: from jake.akitanet.co.uk (jake.akitanet.co.uk [212.1.130.131]) by hub.freebsd.org (Postfix) with ESMTP id 6BA0737B407 for ; Thu, 16 Aug 2001 06:13:18 -0700 (PDT) (envelope-from wiggy@wopr.akitanet.co.uk) Received: from dsl-212-135-208-201.dsl.easynet.co.uk ([212.135.208.201] helo=wopr.akitanet.co.uk) by jake.akitanet.co.uk with esmtp (Exim 3.13 #3) id 15XMxH-000CQm-00; Thu, 16 Aug 2001 14:12:59 +0100 Received: from wiggy by wopr.akitanet.co.uk with local (Exim 3.21 #2) id 15XMxi-00056h-00; Thu, 16 Aug 2001 14:13:26 +0100 Date: Thu, 16 Aug 2001 14:13:26 +0100 From: Paul Robinson To: Andrew Reid Cc: freebsd-isp@freebsd.org Subject: Re: RADIUS Accounting with SQUID Message-ID: <20010816141325.C19104@jake.akitanet.co.uk> References: <997919908.1446.1202.camel@localhost> <20010815094331.B12922@jake.akitanet.co.uk> <997984620.1446.2253.camel@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <997984620.1446.2253.camel@localhost>; from andrew.reid@plug.cx on Fri, Aug 17, 2001 at 03:27:00AM +0930 X-Scanner: exiscan *15XMxH-000CQm-00*$AK$XjdW0qwNRGu7M2/oonnDO1* Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Aug 16, Andrew Reid wrote: > Well, we (Glenunga International High School, Adelaide, South Australia) > have written an Internet Quota system to stop students using too much of > our bandwidth. This was a requirement of us getting a nice 11Mbps > Wireless link, as the increased bandwidth would most certainly put us in > the financial poo if it went unchecked. I am assuming that a bandwidth cap would be out of the question, or perhaps even the use of something like dummynet or whatever to do bandwidth 'shaping'? (I love the 'phrase' shaping when used to mean 'restriction'. :) ). > So, we've got something, working and I'm happy. I've decided that I want > to be able to get some more information. Things like per-user MRTG-ish > graphs and the like would be great. Personally, if there was more than just a few students, I'd find this horrendous to look at, but each to their own. :-) > I've not had much to do with RADIUS, but I know that it provides some > accounting functionality. I thought that the two (SQUID and RADIUS) > could be mushed together somehow to provide a slightly more workable > solution to Internet Quota. Well. Hmph. OK, this might be quite awkward. The only way I can think of getting an Accounting-Start is with munging some sort of proxy authentication. However, you will get a start saying 'this kid has just started' but will get no more further information until they de-authenticate, or log-off, thereby causing an accounting-stop which contains all the information like how long they were logged in for, amount of data moved, etc. This is because RADIUS is meant for dial-up work - the fact that people have just managed to make it work elsewhere, particularly for authentication doesn't mean to say it's the best way to handle this sort of thing. The only other thing I can think of is you were doing Rad-acct update packets, but that gets messy. There is a need for this sort of stuff, but in an ISP context, you're going to be able to get it off the RADIUS accounting from the dial-up port. In this context there is a clear start and end to a session. In the situation you're talking about, we're talking more 'hot-desking', and users may share machines, or the end of a session might not be as easily visible to the proxy. The only way I can think of reliably doing this is to take a list of network login/logoff times and your bandwidth figures taken off the switch, or whatever, and consider correlating the two - a Perl script to do this shouldn't be more than an afternoon's work. :-) In fact, I'm relatively new to Squid, but having just looked around the logging it does, you could actually correlate the Squid logs with the user login/logoff logs quite successfully. As to how you then stop a user leeching bandwidth automatically, is another question... You might however want to take a look at: http://www.cineca.it/~nico/squidclients.html ... which I found from digging around some squid mailing lists and web site. If I think of any other way of doing this, I'll post back, but I'm sure there are others around here that will have ideas. -- Paul Robinson ,--------------------------------------- Technical Director @ Akita | A computer lets you make more mistakes PO Box 604, Manchester, M60 3PR | than any other invention with the T: +44 (0) 161 228 6388 (F:6389)| possible exceptions of handguns and | Tequila - Mitch Ratcliffe `----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Aug 16 7:59:15 2001 Delivered-To: freebsd-isp@freebsd.org Received: from guard.polynet.lviv.ua (Guard.PolyNet.Lviv.UA [217.9.2.1]) by hub.freebsd.org (Postfix) with SMTP id DC32E37B40C for ; Thu, 16 Aug 2001 07:59:04 -0700 (PDT) (envelope-from pam@polynet.lviv.ua) Received: (qmail 21162 invoked from network); 16 Aug 2001 14:59:00 -0000 Received: from postoffice.lp.Lviv.ua (HELO polynet.lviv.ua) (192.168.0.6) by 192.168.0.1 with SMTP; 16 Aug 2001 14:59:00 -0000 Received: (qmail 29212 invoked by uid 0); 16 Aug 2001 14:59:00 -0000 Received: (ofmipd ghost.lp.lviv.ua); 16 Aug 2001 14:58:38 -0000 Received: (qmail 4637 invoked by uid 1000); 16 Aug 2001 14:59:00 -0000 Date: 16 Aug 2001 17:59:00 +0300 Message-ID: <20010816175859.E528@polynet.lviv.ua> From: "Adrian Pavlykevych" Mail-Followup-To: freebsd-isp@polynet.lviv.ua To: freebsd-isp@freebsd.org Subject: Re: RADIUS Accounting with SQUID References: <997919908.1446.1202.camel@localhost> <20010815094331.B12922@jake.akitanet.co.uk> <997984620.1446.2253.camel@localhost> <20010816141325.C19104@jake.akitanet.co.uk> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="E39vaYmALEf/7YXx" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010816141325.C19104@jake.akitanet.co.uk>; from paul@akita.co.uk on Thu, Aug 16, 2001 at 02:13:26PM +0100 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --E39vaYmALEf/7YXx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Aug 16, 2001 at 02:13:26PM +0100, Paul Robinson wrote: > On Aug 16, Andrew Reid wrote: > > I've not had much to do with RADIUS, but I know that it provides some > > accounting functionality. I thought that the two (SQUID and RADIUS) > > could be mushed together somehow to provide a slightly more workable > > solution to Internet Quota. >=20 > Well. Hmph. OK, this might be quite awkward. The only way I can think of > getting an Accounting-Start is with munging some sort of proxy > authentication. However, you will get a start saying 'this kid has just > started' but will get no more further information until they > de-authenticate, or log-off, thereby causing an accounting-stop which > contains all the information like how long they were logged in for, amount > of data moved, etc. This is because RADIUS is meant for dial-up work - the > fact that people have just managed to make it work elsewhere, particularly > for authentication doesn't mean to say it's the best way to handle this s= ort > of thing. Well, it depends. Squid has no other notion of user session as HTTP session= s (every request or, in case of HTTP 1.1 persistant connection, several req= uests). So, user authentication is done on per connection basis (modulo cac= hing). If we cloud get Squid to call function on every disconnect (same as = access log entry is written), we could get nice sequence of RADIUS accounti= ng Start and Stop packets. =20 > There is a need for this sort of stuff, but in an ISP context, you're goi= ng > to be able to get it off the RADIUS accounting from the dial-up port. In > this context there is a clear start and end to a session. In the situation > you're talking about, we're talking more 'hot-desking', and users may sha= re > machines, or the end of a session might not be as easily visible to the > proxy. You don't have any long living session in Squid, see above. Problems with "= hot-desking" are organizational - same as someone going away from logged in= computer or terminal, and should be handled as such (e.g. administratively= ). Besides, if someone is sloppy or "kind" enough to let others eat his sha= re of network resources, it is his fault and problem. Regards, --=20 Adrian Pavlykevych email: System Administrator phone/fax: +380 (322) 742041 Lviv Polytechnic National University --E39vaYmALEf/7YXx Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjt737MACgkQdWQndLibxtDibgCgt7zrbDImrlUkHIfFEJ1xJMdf guEAoI3TQVfllDPRZZ0hpaKT2mHV9Cz8 =CbCZ -----END PGP SIGNATURE----- --E39vaYmALEf/7YXx-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Aug 16 8:31:11 2001 Delivered-To: freebsd-isp@freebsd.org Received: from jake.akitanet.co.uk (jake.akitanet.co.uk [212.1.130.131]) by hub.freebsd.org (Postfix) with ESMTP id 6D05E37B407 for ; Thu, 16 Aug 2001 08:31:05 -0700 (PDT) (envelope-from wiggy@wopr.akitanet.co.uk) Received: from dsl-212-135-208-201.dsl.easynet.co.uk ([212.135.208.201] helo=wopr.akitanet.co.uk) by jake.akitanet.co.uk with esmtp (Exim 3.13 #3) id 15XP6V-000HQK-00; Thu, 16 Aug 2001 16:30:39 +0100 Received: from wiggy by wopr.akitanet.co.uk with local (Exim 3.21 #2) id 15XP6y-0005CI-00; Thu, 16 Aug 2001 16:31:08 +0100 Date: Thu, 16 Aug 2001 16:31:08 +0100 From: Paul Robinson To: Adrian Pavlykevych Cc: freebsd-isp@freebsd.org Subject: Re: RADIUS Accounting with SQUID Message-ID: <20010816163108.A19902@jake.akitanet.co.uk> References: <997919908.1446.1202.camel@localhost> <20010815094331.B12922@jake.akitanet.co.uk> <997984620.1446.2253.camel@localhost> <20010816141325.C19104@jake.akitanet.co.uk> <20010816175859.E528@polynet.lviv.ua> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable In-Reply-To: <20010816175859.E528@polynet.lviv.ua>; from pam@polynet.lviv.ua on Thu, Aug 16, 2001 at 05:59:00PM +0300 X-Scanner: exiscan *15XP6V-000HQK-00*$AK$jTARf3K2ubTZ2VdIvq19F1* Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Aug 16, Adrian Pavlykevych wrote: Note 1: Please set the wrap on your mailer properly - this one came in with all your paragraphs on the same line... > Well, it depends. Squid has no other notion of user session as HTTP > sessions (every request or, in case of HTTP 1.1 persistant connection, > several requests). So, user authentication is done on per connection basis > (modulo caching). If we cloud get Squid to call function on every=20 > disconnect (same as access log entry is written), we could get nice > sequence of RADIUS accounting Start and Stop packets. Ummm... RADIUS really wasn't meant for that sort of (ab)use. You're going to get a lot of UDP traffic flying over your network if you do this, but if you think you can scale it OK - so that you generate several hundred bytes of UDP traffic on _every_single_ HTTP request - then good luck to you. > > There is a need for this sort of stuff, but in an ISP context, you're g= oing > > to be able to get it off the RADIUS accounting from the dial-up port. In > > this context there is a clear start and end to a session. In the situat= ion > > you're talking about, we're talking more 'hot-desking', and users may s= hare > > machines, or the end of a session might not be as easily visible to the > > proxy. =20 > You don't have any long living session in Squid, see above. Problems with > "hot-desking" are organizational - same as someone going away from logged > in computer or terminal, and should be handled as such=20 > (e.g. administratively). Besides, if someone is sloppy or "kind" enough to > let others eat his share of network resources, it is his fault and=20 > problem. I think the point I was trying to make seems to have skipped well over your head on this one - I know HTTP and Squid has no long sessions - that's my point. That's _why_ RADIUS is probably a bad choice for this. RADIUS stands for Remote Authentication Dial-In User Service and the name in itself tells you what it is best at handling - 'long' user sessions that last at least a few seconds, probably 30 or more (30seconds is a long time at this level). You are talking about transactions that last milliseconds. I would STRONGLY advise you read very carefully RFC2866 and maybe even preceeding RADIUS Accounting RFCs to make sure you really know what you're doing. Of course, if you want to implement this, nobody is going to stop you. I just don't think I'd want it on _my_ network... :-) There are other projects underway it would seem, as well, to actually handle what you're talking about in a far easier manner through log file parsing and the like.=20 --=20 Paul Robinson ,--------------------------------------- Technical Director @ Akita | A computer lets you make more mistakes PO Box 604, Manchester, M60 3PR | than any other invention with the=20 T: +44 (0) 161 228 6388 (F:6389)| possible exceptions of handguns and | Tequila - Mitch Ratcliffe `----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Aug 16 16:31:45 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mail.plug.cx (kypo.alfred.cx [150.101.93.134]) by hub.freebsd.org (Postfix) with ESMTP id 2897637B40D for ; Thu, 16 Aug 2001 16:31:41 -0700 (PDT) (envelope-from andrew.reid@plug.cx) Received: from percible.alfred.cx (percible.alfred.cx [150.101.93.190]) by mail.plug.cx (Postfix) with ESMTP id 2FFED2B97D; Fri, 17 Aug 2001 18:56:16 +0930 (CST) Subject: Re: RADIUS Accounting with SQUID From: Andrew Reid To: Paul Robinson Cc: Adrian Pavlykevych , freebsd-isp@freebsd.org In-Reply-To: <20010816163108.A19902@jake.akitanet.co.uk> References: <997919908.1446.1202.camel@localhost> <20010815094331.B12922@jake.akitanet.co.uk> <997984620.1446.2253.camel@localhost> <20010816141325.C19104@jake.akitanet.co.uk> <20010816175859.E528@polynet.lviv.ua> <20010816163108.A19902@jake.akitanet.co.uk> Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Evolution/0.12.99 (Preview Release) Date: 17 Aug 2001 09:01:53 +0930 Message-Id: <998004714.4120.67.camel@localhost> Mime-Version: 1.0 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On 16 Aug 2001 16:31:08 +0100, Paul Robinson wrote: > I think the point I was trying to make seems to have skipped well over your > head on this one - I know HTTP and Squid has no long sessions - that's my > point. That's _why_ RADIUS is probably a bad choice for this. RADIUS stands > for Remote Authentication Dial-In User Service and the name in itself tells > you what it is best at handling - 'long' user sessions that last at least a > few seconds, probably 30 or more (30seconds is a long time at this level). > You are talking about transactions that last milliseconds. I would STRONGLY > advise you read very carefully RFC2866 and maybe even preceeding RADIUS > Accounting RFCs to make sure you really know what you're doing. [ Crosses RADIUS off the list ] Thanks for the explanation :-) > There are other projects underway it would seem, as well, to actually handle > what you're talking about in a far easier manner through log file parsing > and the like. That's how our current system works. The problem that I see is the fact that currently, it re-reads the entire log file when the process (squidhelper) is restarted. This causes the Internet to "die" (the cache server doesn't respond during this time). I'm trying to work out a more logical way of tackling this. Possibly a rewrite is in order, but I'm not entirely sure yet. - andrew -- void signature () { cout << "Andrew Reid -- andrew.reid@plug.cx" << endl ; cout << "Cell: +61 401 946 813" << endl; cout << "Quidquid latine dictum sit, altum viditur" << endl; } To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Aug 16 23:33:41 2001 Delivered-To: freebsd-isp@freebsd.org Received: from db.nexgen.com (db.nexgen.com [66.92.98.149]) by hub.freebsd.org (Postfix) with SMTP id 43EA437B40B for ; Thu, 16 Aug 2001 23:33:32 -0700 (PDT) (envelope-from ml@db.nexgen.com) Received: (qmail 23093 invoked from network); 17 Aug 2001 06:33:08 -0000 Received: from localhost.nexgen.com (HELO alexus) (127.0.0.1) by localhost.nexgen.com with SMTP; 17 Aug 2001 06:33:08 -0000 Message-ID: <002801c126e7$026467c0$0100a8c0@alexus> From: "alexus" To: =?windows-1257?Q?Mat=EEss_Elsbergs?= , , References: <005101c12735$f1087da0$9653949f@lv> Subject: Re: multiple default route Date: Fri, 17 Aug 2001 02:36:29 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1257" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2479.0006 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2479.0006 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org can you implement some sort of fail over with this? if one nic went bad, it'd use second nic w/ second gateway ----- Original Message ----- From: "Matīss Elsbergs" To: ; Sent: Friday, August 17, 2001 12:01 PM Subject: Re: multiple default route > > Is it possible for freebsd to have 2 or more default route? > > It is not possible for one network interface. TCP/IP interface can have only > one default gateway. > > If several netcards are installed, you can have as many gateways as you > like. > > Rgds, > Mathis Elsberg > Technical Director > Astranet IS > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Aug 16 23:45:46 2001 Delivered-To: freebsd-isp@freebsd.org Received: from ns.morning.ru (ns.morning.ru [195.161.98.5]) by hub.freebsd.org (Postfix) with ESMTP id D050237B403; Thu, 16 Aug 2001 23:45:40 -0700 (PDT) (envelope-from root@ns.morning.ru) Received: (from root@localhost) by ns.morning.ru (8.11.5/8.11.5) id f7H6jaT64891; Fri, 17 Aug 2001 14:45:36 +0800 (KRAST) Date: Fri, 17 Aug 2001 14:45:36 +0800 From: Hostmaster To: =?koi8-r?Q?Mat=EEss_Elsbergs?= Cc: freebsd-security@FreeBSD.ORG, freebsd-isp@FreeBSD.ORG Subject: Re: multiple default route Message-ID: <20010817144536.A64780@ns.morning.ru> References: <005101c12735$f1087da0$9653949f@lv> Mime-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.2.5i In-Reply-To: <005101c12735$f1087da0$9653949f@lv>; from matiss@bkc.lv on Fri, Aug 17, 2001 at 09:01:35AM -0700 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, Aug 17, 2001 at 09:01:35AM -0700, Matīss Elsbergs wrote: > > Is it possible for freebsd to have 2 or more default route? > > It is not possible for one network interface. TCP/IP interface can have only > one default gateway. man ipfw, then look for fwd... > > If several netcards are installed, you can have as many gateways as you > like. > > Rgds, > Mathis Elsberg > Technical Director > Astranet IS > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message -- Igor M Podlesny Morning Network hostmaster http://good.morning.ru phone: +7 3912 296962 mailto:hostmaster@morning.ru To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 0:37:40 2001 Delivered-To: freebsd-isp@freebsd.org Received: from digitaldaemon.com (digitaldaemon.com [63.105.9.34]) by hub.freebsd.org (Postfix) with SMTP id 1AE1A37B40A for ; Fri, 17 Aug 2001 00:37:35 -0700 (PDT) (envelope-from jan@digitaldaemon.com) Received: (qmail 33669 invoked from network); 17 Aug 2001 07:35:15 -0000 Received: from unknown (HELO digitaldaemon.com) (192.168.0.73) by digitaldaemon.com with SMTP; 17 Aug 2001 07:35:15 -0000 Message-ID: <3B7CC92A.6020801@digitaldaemon.com> Date: Fri, 17 Aug 2001 03:35:06 -0400 From: Jan Knepper User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.2) Gecko/20010726 Netscape6/6.1 X-Accept-Language: en-us MIME-Version: 1.0 To: FreeBSD Questions , FreeBSD ISP Subject: Killing TCP/IP connection. Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, is there a way to force and end to a TCP/IP connection that shows with netstat -na ? Something like kill -HUP or -kill -TERM, but then on a socket? Thanks! Jan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 1: 3:25 2001 Delivered-To: freebsd-isp@freebsd.org Received: from guard.polynet.lviv.ua (Guard.PolyNet.Lviv.UA [217.9.2.1]) by hub.freebsd.org (Postfix) with SMTP id CD87137B407 for ; Fri, 17 Aug 2001 01:03:18 -0700 (PDT) (envelope-from pam@polynet.lviv.ua) Received: (qmail 57310 invoked from network); 17 Aug 2001 08:03:07 -0000 Received: from postoffice.lp.Lviv.ua (HELO polynet.lviv.ua) (192.168.0.6) by 192.168.0.1 with SMTP; 17 Aug 2001 08:03:07 -0000 Received: (qmail 46059 invoked by uid 0); 17 Aug 2001 08:03:07 -0000 Received: (ofmipd ghost.lp.lviv.ua); 17 Aug 2001 08:02:45 -0000 Received: (qmail 5900 invoked by uid 1000); 17 Aug 2001 08:03:07 -0000 Date: 17 Aug 2001 11:03:07 +0300 Message-ID: <20010817110307.F528@polynet.lviv.ua> From: "Adrian Pavlykevych" Mail-Followup-To: freebsd-isp@polynet.lviv.ua To: freebsd-isp@freebsd.org Subject: Re: RADIUS Accounting with SQUID References: <997919908.1446.1202.camel@localhost> <20010815094331.B12922@jake.akitanet.co.uk> <997984620.1446.2253.camel@localhost> <20010816141325.C19104@jake.akitanet.co.uk> <20010816175859.E528@polynet.lviv.ua> <20010816163108.A19902@jake.akitanet.co.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010816163108.A19902@jake.akitanet.co.uk>; from paul@akita.co.uk on Thu, Aug 16, 2001 at 04:31:08PM +0100 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thu, Aug 16, 2001 at 04:31:08PM +0100, Paul Robinson wrote: > On Aug 16, Adrian Pavlykevych wrote: > > Ummm... RADIUS really wasn't meant for that sort of (ab)use. You're going to > get a lot of UDP traffic flying over your network if you do this, but if you > think you can scale it OK - so that you generate several hundred bytes of > UDP traffic on _every_single_ HTTP request - then good luck to you. I would agree with you, if that was a cause where Internet bandwidth is comparative to local network capacity. But in such case there is no reason for very rigorous bandwidth tracking - some more coarse bandwith limiting methods could be implemented. On other hand, when Internet bandwith is scarce (or _very_ expensive like bidirectional satelite feeds), one can easily add overhead of 20-30 percent of outgoing Internet traffic to the local network which has at least magnitude larger capacity. > I think the point I was trying to make seems to have skipped well over your > head on this one - I know HTTP and Squid has no long sessions - that's my > point. That's _why_ RADIUS is probably a bad choice for this. RADIUS stands > for Remote Authentication Dial-In User Service and the name in itself tells > you what it is best at handling - 'long' user sessions that last at least a > few seconds, probably 30 or more (30seconds is a long time at this level). > You are talking about transactions that last milliseconds. I would STRONGLY > advise you read very carefully RFC2866 and maybe even preceeding RADIUS > Accounting RFCs to make sure you really know what you're doing. > > Of course, if you want to implement this, nobody is going to stop you. I > just don't think I'd want it on _my_ network... :-) I bet in first place it is economicaly unresonable to do such strict bandwith checking on _your_ network. You'd spend way more on number crunching, than save in bandwidth ;-) Your argument also applies exactly the same to any remote logging, e.g. to SQL database. If have to store per user statistics with more data, then just daily/monthly agregates, you'll have to feed data about every such transaction to the logging machine. Speaking about millisecond long transactions: if your squid cache is coping with processing user request at such pace, RADIUS server can do that easilly (it has _much_ shorter codepath and no TCP handshakes in the process). > There are other projects underway it would seem, as well, to actually handle > what you're talking about in a far easier manner through log file parsing > and the like. As to log parsers, I have personal experience with such setup. I would not call that an "easier manner". Computational expensive realtime log parsing, database reconnection logic, etc... Anyway, as in Perl "there is always more then one way to do this". Regards, -- Adrian Pavlykevych email: System Administrator phone/fax: +380 (322) 742041 Lviv Polytechnic National University To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 1:31:13 2001 Delivered-To: freebsd-isp@freebsd.org Received: from falcon.mail.pas.earthlink.net (falcon.mail.pas.earthlink.net [207.217.120.74]) by hub.freebsd.org (Postfix) with ESMTP id D604737B408; Fri, 17 Aug 2001 01:31:08 -0700 (PDT) (envelope-from cjc@earthlink.net) Received: from blossom.cjclark.org (pool0642.cvx20-bradley.dialup.earthlink.net [209.179.252.132]) by falcon.mail.pas.earthlink.net (EL-8_9_3_3/8.9.3) with ESMTP id BAA15904; Fri, 17 Aug 2001 01:30:59 -0700 (PDT) Received: (from cjc@localhost) by blossom.cjclark.org (8.11.4/8.11.3) id f7H8UsG08422; Fri, 17 Aug 2001 01:30:54 -0700 (PDT) (envelope-from cjc) Date: Fri, 17 Aug 2001 01:30:54 -0700 From: "Crist J. Clark" To: =?iso-8859-1?Q?Mat=EEss_Elsbergs?= Cc: freebsd-security@FreeBSD.ORG, freebsd-isp@FreeBSD.ORG Subject: Re: multiple default route Message-ID: <20010817013054.R4232@blossom.cjclark.org> Reply-To: cjclark@alum.mit.edu References: <005101c12735$f1087da0$9653949f@lv> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.2.5i In-Reply-To: <005101c12735$f1087da0$9653949f@lv>; from matiss@bkc.lv on Fri, Aug 17, 2001 at 09:01:35AM -0700 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, Aug 17, 2001 at 09:01:35AM -0700, Matīss Elsbergs wrote: > > Is it possible for freebsd to have 2 or more default route? > > It is not possible for one network interface. TCP/IP interface can have only > one default gateway. If you are saying that having one default route is a limitation of TCP/IP, you are incorrect. Actually, RFC1122 says, When there is no route cache entry for the destination host address (and the destination is not on the connected network), the IP layer MUST pick a gateway from its list of "default" gateways. The IP layer MUST support multiple default gateways. Note the last sentence. This is one of the few places where I've seen FreeBSD to be non-compliant with STD RFCs. -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 1:40:22 2001 Delivered-To: freebsd-isp@freebsd.org Received: from coconut.itojun.org (coconut.itojun.org [210.160.95.97]) by hub.freebsd.org (Postfix) with ESMTP id 720D237B410; Fri, 17 Aug 2001 01:40:16 -0700 (PDT) (envelope-from itojun@itojun.org) Received: from itojun.org (localhost [127.0.0.1]) by coconut.itojun.org (Postfix) with ESMTP id 6BA254B21; Fri, 17 Aug 2001 17:40:13 +0900 (JST) To: cjclark@alum.mit.edu Cc: =?iso-8859-1?Q?Mat=EEss_Elsbergs?= , freebsd-security@FreeBSD.ORG, freebsd-isp@FreeBSD.ORG In-reply-to: cristjc's message of Fri, 17 Aug 2001 01:30:54 MST. <20010817013054.R4232@blossom.cjclark.org> X-Template-Reply-To: itojun@itojun.org X-Template-Return-Receipt-To: itojun@itojun.org X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD 90 5F B4 60 79 54 16 E2 Subject: Re: multiple default route From: itojun@iijlab.net Date: Fri, 17 Aug 2001 17:40:13 +0900 Message-ID: <6998.998037613@itojun.org> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >> > Is it possible for freebsd to have 2 or more default route? KAME/NetBSD has an experiental support for multipath FIB. you can have multiple default routes. it would be a bit hard to port, and it needs some more stabilization. ftp://ftp.kame.net/pub/kame/snap/ itojun To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 4:41:23 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mail4.txucom.net (mail4.txucom.net [207.70.175.17]) by hub.freebsd.org (Postfix) with SMTP id 087A137B410 for ; Fri, 17 Aug 2001 04:41:14 -0700 (PDT) (envelope-from bob@buckhorn.net) Received: (qmail 16812 invoked from network); 17 Aug 2001 11:41:12 -0000 Received: from lfkn-adsl-dhcp-net1-159.txucom.net (HELO buckhorn.net) ([207.70.145.159]) (envelope-sender ) by mail4.txucom.net (qmail-ldap-1.03) with SMTP for ; 17 Aug 2001 11:41:12 -0000 Message-ID: <3B7D02DC.546A2E50@buckhorn.net> Date: Fri, 17 Aug 2001 06:41:16 -0500 From: Bob Martin X-Mailer: Mozilla 4.77 [en] (X11; U; Linux 2.2.12 i386) X-Accept-Language: en MIME-Version: 1.0 To: Jan Knepper Cc: FreeBSD Questions , FreeBSD ISP Subject: Re: Killing TCP/IP connection. References: <3B7CC92A.6020801@digitaldaemon.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Jan Knepper wrote: > > Hi, is there a way to force and end to a TCP/IP connection that shows > with netstat -na ? > Something like kill -HUP or -kill -TERM, but then on a socket? > > Thanks! > Jan > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message Use sockstat -4. It will give you the PID of the offending connection. Then you can kill it. Bob Martin -- But in our enthusiasm, we could not resist a radical overhaul of the system, in which all of its major weaknesses have been exposed, analyzed, and replaced with new weaknesses. -- Bruce Leverett, "Register Allocation in Optimizing Compilers" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 5:24:36 2001 Delivered-To: freebsd-isp@freebsd.org Received: from verdi.nethelp.no (verdi.nethelp.no [158.36.41.162]) by hub.freebsd.org (Postfix) with SMTP id 62BE937B413 for ; Fri, 17 Aug 2001 05:24:28 -0700 (PDT) (envelope-from sthaug@nethelp.no) Received: (qmail 54709 invoked by uid 1001); 17 Aug 2001 12:23:23 +0000 (GMT) To: bob@buckhorn.net Cc: jan@digitaldaemon.com, FreeBSD-Questions@FreeBSD.org, FreeBSD-ISP@FreeBSD.org Subject: Re: Killing TCP/IP connection. From: sthaug@nethelp.no In-Reply-To: Your message of "Fri, 17 Aug 2001 06:41:16 -0500" References: <3B7D02DC.546A2E50@buckhorn.net> X-Mailer: Mew version 1.05+ on Emacs 19.34.2 Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Date: Fri, 17 Aug 2001 14:23:23 +0200 Message-ID: <54706.998051003@verdi.nethelp.no> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > > Hi, is there a way to force and end to a TCP/IP connection that shows > > with netstat -na ? > > Something like kill -HUP or -kill -TERM, but then on a socket? > > > Use sockstat -4. It will give you the PID of the offending connection. > Then you can kill it. Unfortunately, you *don't* always want to kill the process - think of a server process handling many clients connections. You want to kill the connection to *one* client, but not the rest. Steinar Haug, Nethelp consulting, sthaug@nethelp.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 5:45: 2 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mail4.txucom.net (mail4.txucom.net [207.70.175.17]) by hub.freebsd.org (Postfix) with SMTP id 13D7D37B40F for ; Fri, 17 Aug 2001 05:44:56 -0700 (PDT) (envelope-from bob@buckhorn.net) Received: (qmail 28227 invoked from network); 17 Aug 2001 12:44:55 -0000 Received: from lfkn-adsl-dhcp-net1-159.txucom.net (HELO buckhorn.net) ([207.70.145.159]) (envelope-sender ) by mail4.txucom.net (qmail-ldap-1.03) with SMTP for ; 17 Aug 2001 12:44:55 -0000 Message-ID: <3B7D11CB.3728823C@buckhorn.net> Date: Fri, 17 Aug 2001 07:44:59 -0500 From: Bob Martin X-Mailer: Mozilla 4.77 [en] (X11; U; Linux 2.2.12 i386) X-Accept-Language: en MIME-Version: 1.0 To: sthaug@nethelp.no Cc: jan@digitaldaemon.com, FreeBSD-Questions@FreeBSD.org, FreeBSD-ISP@FreeBSD.org Subject: Re: Killing TCP/IP connection. References: <3B7D02DC.546A2E50@buckhorn.net> <54706.998051003@verdi.nethelp.no> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org sthaug@nethelp.no wrote: > > > > Hi, is there a way to force and end to a TCP/IP connection that shows > > > with netstat -na ? > > > Something like kill -HUP or -kill -TERM, but then on a socket? > > > > > Use sockstat -4. It will give you the PID of the offending connection. > > Then you can kill it. > > Unfortunately, you *don't* always want to kill the process - think of > a server process handling many clients connections. You want to kill > the connection to *one* client, but not the rest. > > Steinar Haug, Nethelp consulting, sthaug@nethelp.no Since each connection gets it's own pid, this isn't a problem. You can kill a single ftp session or http session without interfering with the rest. Bob -- But in our enthusiasm, we could not resist a radical overhaul of the system, in which all of its major weaknesses have been exposed, analyzed, and replaced with new weaknesses. -- Bruce Leverett, "Register Allocation in Optimizing Compilers" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 5:52:44 2001 Delivered-To: freebsd-isp@freebsd.org Received: from verdi.nethelp.no (verdi.nethelp.no [158.36.41.162]) by hub.freebsd.org (Postfix) with SMTP id 2793B37B408 for ; Fri, 17 Aug 2001 05:52:40 -0700 (PDT) (envelope-from sthaug@nethelp.no) Received: (qmail 55980 invoked by uid 1001); 17 Aug 2001 12:52:37 +0000 (GMT) To: bob@buckhorn.net Cc: jan@digitaldaemon.com, FreeBSD-Questions@FreeBSD.org, FreeBSD-ISP@FreeBSD.org Subject: Re: Killing TCP/IP connection. From: sthaug@nethelp.no In-Reply-To: Your message of "Fri, 17 Aug 2001 07:44:59 -0500" References: <3B7D11CB.3728823C@buckhorn.net> X-Mailer: Mew version 1.05+ on Emacs 19.34.2 Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Date: Fri, 17 Aug 2001 14:52:37 +0200 Message-ID: <55978.998052757@verdi.nethelp.no> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > > Unfortunately, you *don't* always want to kill the process - think of > > a server process handling many clients connections. You want to kill > > the connection to *one* client, but not the rest. > > Since each connection gets it's own pid, this isn't a problem. You can > kill a single ftp session or http session without interfering with the > rest. That's fine for the one process per client case. But I'm talking about the general case where *one* process handles the connections to many clients, and you specifically *don't* have a separate process per client. In such cases it would be very useful to have a command line facility to kill *one* connection without interfering with the other connections handled by the same process. Steinar Haug, Nethelp consulting, sthaug@nethelp.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 6: 8:35 2001 Delivered-To: freebsd-isp@freebsd.org Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by hub.freebsd.org (Postfix) with ESMTP id DE6BE37B401; Fri, 17 Aug 2001 06:08:19 -0700 (PDT) (envelope-from fgleiser@cactus.fi.uba.ar) Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by cactus.fi.uba.ar (8.11.3/8.9.3) with ESMTP id f7HD6dE10181; Fri, 17 Aug 2001 10:06:44 -0300 (ART) (envelope-from fgleiser@cactus.fi.uba.ar) Date: Fri, 17 Aug 2001 10:06:39 -0300 (ART) From: Fernando Gleiser To: Cc: Subject: Re: Killing TCP/IP connection. In-Reply-To: <55978.998052757@verdi.nethelp.no> Message-ID: <20010817095635.E9633-100000@cactus.fi.uba.ar> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, 17 Aug 2001 sthaug@nethelp.no wrote: > That's fine for the one process per client case. But I'm talking about > the general case where *one* process handles the connections to many > clients, and you specifically *don't* have a separate process per client. > In such cases it would be very useful to have a command line facility > to kill *one* connection without interfering with the other connections > handled by the same process. If you are using TCP and the clients are on a remote machine, there is no standard way to shutdown a connection from an external process. You would need to sniff the net to know the sequence numbers involved and then send a RST. What you can do is modify the server to use some kind of IPC in which you tell it "I want to shutdown the socket connectod from ip,port to ip,port" and the server then shutown(2)s the socket. Fer > > Steinar Haug, Nethelp consulting, sthaug@nethelp.no > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 6:16:53 2001 Delivered-To: freebsd-isp@freebsd.org Received: from smtp.kka.com (smtp.kka.com [63.141.65.2]) by hub.freebsd.org (Postfix) with ESMTP id 6C7A537B40E for ; Fri, 17 Aug 2001 06:16:47 -0700 (PDT) (envelope-from Eric_Stanfield@kenokozie.com) Subject: Re: Killing TCP/IP connection. To: FreeBSD-ISP@FreeBSD.ORG X-Mailer: Lotus Notes Release 5.0.2a November 23, 1999 Message-ID: From: Eric_Stanfield@kenokozie.com Date: Fri, 17 Aug 2001 08:15:02 -0500 X-MIMETrack: Serialize by Router on Notes1st/Keno(Release 5.0.4 |June 8, 2000) at 08/17/2001 08:15:04 AM MIME-Version: 1.0 Content-type: text/plain; charset=us-ascii Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Wasn't there an app called tcpkill in the ports? I just looked and didn't see it but I could have sworn it was there in the past and was supposed to be able to nuke individual tcp sessions. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Eric Stanfield, K2Access Keno Kozie Associates 222 N LaSalle #1500 Chicago, IL 60606 (312) 332-3000 Fernando Gleiser .uba.ar> cc: Sent by: Subject: Re: Killing TCP/IP connection. owner-freebsd-isp@F reeBSD.ORG 08/17/01 08:36 AM On Fri, 17 Aug 2001 sthaug@nethelp.no wrote: > That's fine for the one process per client case. But I'm talking about > the general case where *one* process handles the connections to many > clients, and you specifically *don't* have a separate process per client. > In such cases it would be very useful to have a command line facility > to kill *one* connection without interfering with the other connections > handled by the same process. If you are using TCP and the clients are on a remote machine, there is no standard way to shutdown a connection from an external process. You would need to sniff the net to know the sequence numbers involved and then send a RST. What you can do is modify the server to use some kind of IPC in which you tell it "I want to shutdown the socket connectod from ip,port to ip,port" and the server then shutown(2)s the socket. Fer > > Steinar Haug, Nethelp consulting, sthaug@nethelp.no > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 7: 4:24 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mail2.mediadesign.nl (md2.mediadesign.nl [212.19.205.67]) by hub.freebsd.org (Postfix) with SMTP id 225F737B403 for ; Fri, 17 Aug 2001 07:04:22 -0700 (PDT) (envelope-from alson@mediadesign.nl) Received: (qmail 1048 invoked by uid 1002); 17 Aug 2001 14:04:05 -0000 Date: Fri, 17 Aug 2001 16:04:05 +0200 From: Alson van der Meulen To: FreeBSD-ISP@FreeBSD.ORG Subject: Re: Killing TCP/IP connection. Message-ID: <20010817160404.F28712@md2.mediadesign.nl> Mail-Followup-To: FreeBSD-ISP@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.3.18i Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, Aug 17, 2001 at 08:15:02AM -0500, Eric_Stanfield@kenokozie.com wrote: > > Wasn't there an app called tcpkill in the ports? I just looked and didn't > see it but I could have sworn it was there in the past and was supposed to > be able to nuke individual tcp sessions. it's in the dsniff port (/usr/ports/security/dsniff) use it like tcpkill -9 host 1.2.3.4 (or any bpf expression) Alson To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 12:45: 3 2001 Delivered-To: freebsd-isp@freebsd.org Received: from web11607.mail.yahoo.com (web11607.mail.yahoo.com [216.136.172.59]) by hub.freebsd.org (Postfix) with SMTP id 0DF1937B40C for ; Fri, 17 Aug 2001 12:45:00 -0700 (PDT) (envelope-from holtor@yahoo.com) Message-ID: <20010817194448.15858.qmail@web11607.mail.yahoo.com> Received: from [24.190.128.182] by web11607.mail.yahoo.com; Fri, 17 Aug 2001 12:44:48 PDT Date: Fri, 17 Aug 2001 12:44:48 -0700 (PDT) From: Holtor Subject: virtusertable To: freebsd-isp@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hello all, Does anyone know of a good way to give web hosting customers access to modify their own e-mail aliases for their domain using virtusertable? I was thinking something like /etc/mail/virtusertable: @domain.com /usr/home/$user/.aliases Then in .aliases user1 user@hotmail.com user4 user@yahoo.com Of course this does not work .. any ideas? TIA Holt __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 12:52:17 2001 Delivered-To: freebsd-isp@freebsd.org Received: from cody.jharris.com (cody.jharris.com [205.238.128.83]) by hub.freebsd.org (Postfix) with ESMTP id 652D537B40E for ; Fri, 17 Aug 2001 12:52:10 -0700 (PDT) (envelope-from nick@rogness.net) Received: from localhost (nick@localhost) by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f7HJq6m64138; Fri, 17 Aug 2001 14:52:06 -0500 (CDT) (envelope-from nick@rogness.net) Date: Fri, 17 Aug 2001 14:52:06 -0500 (CDT) From: Nick Rogness X-Sender: nick@cody.jharris.com To: Holtor Cc: freebsd-isp@FreeBSD.ORG Subject: Re: virtusertable In-Reply-To: <20010817194448.15858.qmail@web11607.mail.yahoo.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, 17 Aug 2001, Holtor wrote: > Hello all, > > Does anyone know of a good way to give web hosting > customers access to modify their own e-mail aliases > for their domain using virtusertable? > > I was thinking something like > > /etc/mail/virtusertable: > @domain.com /usr/home/$user/.aliases In /etc/mail/virtusertable: @domain useralias Then in /etc/mail/aliases useralias: :include:/usr/home/$user/.aliases > > Then in .aliases > user1 user@hotmail.com > user4 user@yahoo.com > > Of course this does not work .. any ideas? > > TIA > > Holt > > __________________________________________________ > Do You Yahoo!? > Make international calls for as low as $.04/minute with Yahoo! Messenger > http://phonecard.yahoo.com/ > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > Nick Rogness - Keep on Routing in a Free World... "FreeBSD: The Power to Serve!" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 12:52:34 2001 Delivered-To: freebsd-isp@freebsd.org Received: from inu.net (mail.inu.net [63.151.4.24]) by hub.freebsd.org (Postfix) with ESMTP id 7C58537B409; Fri, 17 Aug 2001 12:52:21 -0700 (PDT) (envelope-from bob@buckhorn.net) Received: from buckhorn.net [63.151.3.239] by inu.net with ESMTP (SMTPD32-5.05) id A5EFA300136; Fri, 17 Aug 2001 14:52:18 -0500 Message-ID: <3B7D75CD.6A02B579@buckhorn.net> Date: Fri, 17 Aug 2001 14:51:41 -0500 From: Bob Martin X-Mailer: Mozilla 4.73 [en] (X11; U; FreeBSD 4.4-PRERELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: sthaug@nethelp.no Cc: FreeBSD-Questions@FreeBSD.org, FreeBSD-ISP@FreeBSD.org Subject: Re: Killing TCP/IP connection. References: <3B7D11CB.3728823C@buckhorn.net> <55978.998052757@verdi.nethelp.no> Content-Type: text/plain; charset=iso-8859-15 Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org sthaug@nethelp.no wrote: > > > > Unfortunately, you *don't* always want to kill the process - think of > > > a server process handling many clients connections. You want to kill > > > the connection to *one* client, but not the rest. > > > > Since each connection gets it's own pid, this isn't a problem. You can > > kill a single ftp session or http session without interfering with the > > rest. > > That's fine for the one process per client case. But I'm talking about > the general case where *one* process handles the connections to many > clients, and you specifically *don't* have a separate process per client. > In such cases it would be very useful to have a command line facility > to kill *one* connection without interfering with the other connections > handled by the same process. > I agree, but for the life of me, I can't think of a single program that does that. The ones that give me greif are things like IMAP and FTP that open a half dozen connections for one remote client. Bob Martin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 12:53: 4 2001 Delivered-To: freebsd-isp@freebsd.org Received: from nyc.rr.com (nycsmtp2fb.rdc-nyc.rr.com [24.29.99.78]) by hub.freebsd.org (Postfix) with ESMTP id 839A337B403 for ; Fri, 17 Aug 2001 12:52:58 -0700 (PDT) (envelope-from jslivko@4evermail.com) Received: from equinox ([24.168.44.136]) by nyc.rr.com with Microsoft SMTPSVC(5.5.1877.357.35); Fri, 17 Aug 2001 15:52:39 -0400 Message-ID: <008f01c12756$4a48cbc0$8701a8c0@equinox> From: "Jonathan M. Slivko" To: "Holtor" , References: <20010817194448.15858.qmail@web11607.mail.yahoo.com> Subject: Re: virtusertable Date: Fri, 17 Aug 2001 15:53:30 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4807.1700 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Best way I can think of doing it is via qmail and qmailadmin (a web based e-mail tool) with vpopmail acting as the mail agent. It's what I use, and it works :) -- Jonathan -- Jonathan M. Slivko 4EverMail Hosting Services http://www.4evermail.com "Are YOU ready for the new Internet?" -- ----- Original Message ----- From: "Holtor" To: Sent: Friday, August 17, 2001 3:44 PM Subject: virtusertable Hello all, Does anyone know of a good way to give web hosting customers access to modify their own e-mail aliases for their domain using virtusertable? I was thinking something like /etc/mail/virtusertable: @domain.com /usr/home/$user/.aliases Then in .aliases user1 user@hotmail.com user4 user@yahoo.com Of course this does not work .. any ideas? TIA Holt __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 12:54:24 2001 Delivered-To: freebsd-isp@freebsd.org Received: from virtual-voodoo.com (bdsl.66.12.217.106.gte.net [66.12.217.106]) by hub.freebsd.org (Postfix) with ESMTP id B85B137B408 for ; Fri, 17 Aug 2001 12:54:12 -0700 (PDT) (envelope-from steve@virtual-voodoo.com) Received: from inlafrec (bdsl.66.12.217.40.gte.net [66.12.217.40]) (authenticated) by virtual-voodoo.com (8.11.5/8.11.5) with ESMTP id f7HJsAR50514; Fri, 17 Aug 2001 14:54:10 -0500 (EST) (envelope-from steve@virtual-voodoo.com) Message-ID: <01db01c12755$dee00010$28d90c42@eservoffice.com> From: "Steven Ames" To: "Holtor" , References: <20010817194448.15858.qmail@web11607.mail.yahoo.com> Subject: Re: virtusertable Date: Fri, 17 Aug 2001 14:50:29 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4807.1700 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hrm... the clever way would be to use a directory or database instead of virtusertable. The kludge would be to tell your users to have a file in their home directory (call it aliases for sake of argument) and then write a quick shell script to grab these files, combine them all into one virtusertable and then run makemap on them. Either force the user to use a format such as 'bob@domain.com joe@aol.com' or better (and safer because you really don't want them putting in a domain that isn't theirs) tell them to use a format of 'bob joe@aol.com' and then your script puts the domain name on. Set the default '@domain.com' to go to the first user in the file or something. A config file that says 'domain_name username' would allow you to set things up and keep it simple. -Steve ----- Original Message ----- From: "Holtor" To: Sent: Friday, August 17, 2001 2:44 PM Subject: virtusertable > Hello all, > > Does anyone know of a good way to give web hosting > customers access to modify their own e-mail aliases > for their domain using virtusertable? > > I was thinking something like > > /etc/mail/virtusertable: > @domain.com /usr/home/$user/.aliases > > Then in .aliases > user1 user@hotmail.com > user4 user@yahoo.com > > Of course this does not work .. any ideas? > > TIA > > Holt > > __________________________________________________ > Do You Yahoo!? > Make international calls for as low as $.04/minute with Yahoo! Messenger > http://phonecard.yahoo.com/ > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 13:51:13 2001 Delivered-To: freebsd-isp@freebsd.org Received: from web11606.mail.yahoo.com (web11606.mail.yahoo.com [216.136.172.58]) by hub.freebsd.org (Postfix) with SMTP id D9F5137B40D for ; Fri, 17 Aug 2001 13:51:08 -0700 (PDT) (envelope-from holtor@yahoo.com) Message-ID: <20010817205103.15956.qmail@web11606.mail.yahoo.com> Received: from [24.190.128.182] by web11606.mail.yahoo.com; Fri, 17 Aug 2001 13:51:03 PDT Date: Fri, 17 Aug 2001 13:51:03 -0700 (PDT) From: Holtor Subject: Re: virtusertable To: Nick Rogness Cc: freebsd-isp@FreeBSD.ORG In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org This seems like the easiest and most clean idea so far but what should the format of the .aliases file be? If i make it like so: user1: user@hotmail.com user2: user@yahoo.com And I send email to user1@domain.com both user1 and user2 still get the e-mail. Am I missing something? Thanks for all the help!! Holt --- Nick Rogness wrote: > On Fri, 17 Aug 2001, Holtor wrote: > > > Hello all, > > > > Does anyone know of a good way to give web hosting > > customers access to modify their own e-mail > aliases > > for their domain using virtusertable? > > > > I was thinking something like > > > > /etc/mail/virtusertable: > > @domain.com /usr/home/$user/.aliases > > > In /etc/mail/virtusertable: > > @domain useralias > > Then in /etc/mail/aliases > > useralias: :include:/usr/home/$user/.aliases > > > > > > Then in .aliases > > user1 user@hotmail.com > > user4 user@yahoo.com > > > > Of course this does not work .. any ideas? > > > > TIA > > > > Holt > > > > __________________________________________________ > > Do You Yahoo!? > > Make international calls for as low as $.04/minute > with Yahoo! Messenger > > http://phonecard.yahoo.com/ > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the > message > > > > Nick Rogness > - Keep on Routing in a Free World... > "FreeBSD: The Power to Serve!" > __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 14: 1:32 2001 Delivered-To: freebsd-isp@freebsd.org Received: from monster.abyss.net (gateway.abyss.net [216.42.72.51]) by hub.freebsd.org (Postfix) with ESMTP id E411837B407 for ; Fri, 17 Aug 2001 14:01:27 -0700 (PDT) (envelope-from ksb@abyss.net) Received: from localhost (ksb@localhost) by monster.abyss.net (8.11.3/8.11.3) with ESMTP id f7HKCDE26043; Fri, 17 Aug 2001 16:12:13 -0400 (EDT) (envelope-from ksb@abyss.net) Date: Fri, 17 Aug 2001 16:12:13 -0400 (EDT) From: "Kevin S. Brackett" To: Holtor Cc: Subject: Re: virtusertable In-Reply-To: <20010817205103.15956.qmail@web11606.mail.yahoo.com> Message-ID: <20010817161057.N20754-100000@monster.abyss.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, 17 Aug 2001, Holtor wrote: > This seems like the easiest and most clean idea so > far but what should the format of the .aliases file > be? > > If i make it like so: > > user1: user@hotmail.com > user2: user@yahoo.com > > And I send email to user1@domain.com both user1 and > user2 still get the e-mail. Have you tried running "newaliases" after adding them to the .alias file? - kevin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 14: 7: 0 2001 Delivered-To: freebsd-isp@freebsd.org Received: from web11602.mail.yahoo.com (web11602.mail.yahoo.com [216.136.172.54]) by hub.freebsd.org (Postfix) with SMTP id DA02137B40B for ; Fri, 17 Aug 2001 14:06:53 -0700 (PDT) (envelope-from holtor@yahoo.com) Message-ID: <20010817210653.42359.qmail@web11602.mail.yahoo.com> Received: from [24.190.128.182] by web11602.mail.yahoo.com; Fri, 17 Aug 2001 14:06:53 PDT Date: Fri, 17 Aug 2001 14:06:53 -0700 (PDT) From: Holtor Subject: Re: virtusertable To: "Kevin S. Brackett" Cc: freebsd-isp@FreeBSD.ORG In-Reply-To: <20010817161057.N20754-100000@monster.abyss.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --- "Kevin S. Brackett" wrote: > On Fri, 17 Aug 2001, Holtor wrote: > > > This seems like the easiest and most clean idea so > > far but what should the format of the .aliases > file > > be? > > > > If i make it like so: > > > > user1: user@hotmail.com > > user2: user@yahoo.com > > > > And I send email to user1@domain.com both user1 > and > > user2 still get the e-mail. > > Have you tried running "newaliases" after adding > them to the .alias file? Yes I have. It seems to want to send a copy of the e-mail to all addresses in my test .aliases file. I then thought I would need something like @domain.com %1@/path/to/.aliases But i haven't been able to figure anything out. The %1 so it would pass on the username from virtusertable. I'm sure its possible but it takes some thinking which isn't comming to mind. I'm also unable to find any useful samples about what can go into the virtusertable and aliases file. > > - kevin > __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 14:19: 2 2001 Delivered-To: freebsd-isp@freebsd.org Received: from java2.dpcsys.com (java2.dpcsys.com [206.16.184.5]) by hub.freebsd.org (Postfix) with ESMTP id 2D01537B408 for ; Fri, 17 Aug 2001 14:19:00 -0700 (PDT) (envelope-from dan@dpcsys.com) Received: from localhost (localhost [127.0.0.1]) by java2.dpcsys.com (8.11.1/8.11.1) with ESMTP id f7HLNKQ17008; Fri, 17 Aug 2001 14:23:20 -0700 (PDT) Date: Fri, 17 Aug 2001 14:23:20 -0700 (PDT) From: Dan Busarow To: Holtor Cc: freebsd-isp@FreeBSD.ORG Subject: Re: virtusertable In-Reply-To: <20010817210653.42359.qmail@web11602.mail.yahoo.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Aug 17, Holtor wrote: > --- "Kevin S. Brackett" wrote: > > On Fri, 17 Aug 2001, Holtor wrote: > > > > > This seems like the easiest and most clean idea so > > > far but what should the format of the .aliases > > file > > > be? > > > > > > If i make it like so: > > > > > > user1: user@hotmail.com > > > user2: user@yahoo.com > > > > > > And I send email to user1@domain.com both user1 > > and > > > user2 still get the e-mail. > > > > Have you tried running "newaliases" after adding > > them to the .alias file? > > Yes I have. It seems to want to send a copy of the > e-mail to all addresses in my test .aliases file. I have to ask. What's a .alias file? Add this to virtusertable and run make user1@domain.com user@hotmail.com user2@domain.com user@yahoo.com @domain.com default_user Dan -- Dan Busarow 949 443 4172 Dana Point Communications, Inc. dan@dpcsys.com Dana Point, California 83 09 EF 59 E0 11 89 B4 8D 09 DB FD E1 DD 0C 82 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 14:22: 5 2001 Delivered-To: freebsd-isp@freebsd.org Received: from virtual-voodoo.com (bdsl.66.12.217.106.gte.net [66.12.217.106]) by hub.freebsd.org (Postfix) with ESMTP id 42E0F37B409 for ; Fri, 17 Aug 2001 14:22:02 -0700 (PDT) (envelope-from steve@virtual-voodoo.com) Received: from inlafrec (bdsl.66.12.217.40.gte.net [66.12.217.40]) (authenticated) by virtual-voodoo.com (8.11.5/8.11.5) with ESMTP id f7HLLu449536; Fri, 17 Aug 2001 16:21:56 -0500 (EST) (envelope-from steve@virtual-voodoo.com) Message-ID: <024901c12762$21bac0d0$28d90c42@eservoffice.com> From: "Steven Ames" To: "Dan Busarow" , "Holtor" Cc: References: Subject: Re: virtusertable Date: Fri, 17 Aug 2001 16:18:15 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4807.1700 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > I have to ask. What's a .alias file? > > Add this to virtusertable and run make > > user1@domain.com user@hotmail.com > user2@domain.com user@yahoo.com > @domain.com default_user The original question was how to let his customers manage their own entries within virtusertable... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 14:40:13 2001 Delivered-To: freebsd-isp@freebsd.org Received: from monster.abyss.net (gateway.abyss.net [216.42.72.51]) by hub.freebsd.org (Postfix) with ESMTP id 376E837B416 for ; Fri, 17 Aug 2001 14:39:58 -0700 (PDT) (envelope-from ksb@abyss.net) Received: from localhost (ksb@localhost) by monster.abyss.net (8.11.3/8.11.3) with ESMTP id f7HKpPP26210; Fri, 17 Aug 2001 16:51:25 -0400 (EDT) (envelope-from ksb@abyss.net) Date: Fri, 17 Aug 2001 16:51:25 -0400 (EDT) From: "Kevin S. Brackett" To: Holtor Cc: Subject: Re: virtusertable In-Reply-To: <20010817210653.42359.qmail@web11602.mail.yahoo.com> Message-ID: <20010817164730.Q26179-100000@monster.abyss.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, 17 Aug 2001, Holtor wrote: > --- "Kevin S. Brackett" wrote: > > Have you tried running "newaliases" after adding > > them to the .alias file? > > Yes I have. It seems to want to send a copy of the > e-mail to all addresses in my test .aliases file. > > I then thought I would need something like > @domain.com %1@/path/to/.aliases > I just thought of a very big flaw with this anyway, by doing this wouldn't the users have to be different then what is already in the aliases file? or you'd have duplicates. I'd suggest getting courier-imap and use procmail to make sendmail deliver to Maildir format mailboxes (which courier needs...) or look at qmail which does this very easily as well. - kevin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Aug 17 14:49:27 2001 Delivered-To: freebsd-isp@freebsd.org Received: from cody.jharris.com (cody.jharris.com [205.238.128.83]) by hub.freebsd.org (Postfix) with ESMTP id BB2D437B407 for ; Fri, 17 Aug 2001 14:49:23 -0700 (PDT) (envelope-from nick@rogness.net) Received: from localhost (nick@localhost) by cody.jharris.com (8.11.1/8.9.3) with ESMTP id f7HLmNB64996; Fri, 17 Aug 2001 16:48:23 -0500 (CDT) (envelope-from nick@rogness.net) Date: Fri, 17 Aug 2001 16:48:23 -0500 (CDT) From: Nick Rogness X-Sender: nick@cody.jharris.com To: Holtor Cc: freebsd-isp@FreeBSD.ORG Subject: Re: virtusertable In-Reply-To: <20010817205103.15956.qmail@web11606.mail.yahoo.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, 17 Aug 2001, Holtor wrote: > This seems like the easiest and most clean idea so > far but what should the format of the .aliases file > be? > > If i make it like so: > > user1: user@hotmail.com > user2: user@yahoo.com > > And I send email to user1@domain.com both user1 and > user2 still get the e-mail. > > Am I missing something? Thanks for all the help!! Ahhh, this setup will not work for that. You need a different tool to do what you want...like procmail. Install procmail, then in /etc/mail/virtusertable: @domain.com user Then in user's home directory, make a file called .forward. In it put this exact line: "|/usr/local/bin/procmail -m .procmailrc" In .procmailrc, add rules to inspect the TO: part of the message and send it to the appropriate real account. See procmail help for more info. Of course, there are other tools to do it as well. Nick Rogness - Keep on Routing in a Free World... "FreeBSD: The Power to Serve!" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 9: 7:14 2001 Delivered-To: freebsd-isp@freebsd.org Received: from digitaldaemon.com (digitaldaemon.com [63.105.9.34]) by hub.freebsd.org (Postfix) with SMTP id 226A837B411 for ; Sat, 18 Aug 2001 09:07:07 -0700 (PDT) (envelope-from jan@digitaldaemon.com) Received: (qmail 23330 invoked from network); 18 Aug 2001 16:04:46 -0000 Received: from unknown (HELO digitaldaemon.com) (192.168.0.73) by digitaldaemon.com with SMTP; 18 Aug 2001 16:04:46 -0000 Message-ID: <3B7E9205.7010604@digitaldaemon.com> Date: Sat, 18 Aug 2001 12:04:21 -0400 From: Jan Knepper User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.2) Gecko/20010726 Netscape6/6.1 X-Accept-Language: en-us MIME-Version: 1.0 To: FreeBSD ISP Subject: slashdotted: /kernel: xl0: no memory for rx list -- packet dropped! Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi! Last Thursday one of the sites I host got slashdotted (http://www.slashdot.com/) and amazingly FreeBSD 4.3 on PIII 600 Mhz with 128 MB RAM took the load gracefully. I.e. until around 5 PM EST when I got messages like: /kernel: xl0: no memory for rx list -- packet dropped! at the console... So what I did is, I terminated some of the daemon's that were not really used as a couple of httpd server, etc. This seemed to solve the problem, however... When I run a netstat -na right now I get the impression that there is still some garbadge in memory from this experience: As: tcp4 0 15360 63.105.9.61.20 217.80.179.220.2822 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.219.43.81.2591 LAST_ACK tcp4 0 15360 63.105.9.61.20 200.11.220.5.2535 LAST_ACK tcp4 0 15360 63.105.9.61.20 200.11.220.5.1736 LAST_ACK tcp4 0 15360 63.105.9.61.20 200.11.220.5.1735 LAST_ACK tcp4 0 15360 63.105.9.61.20 202.133.131.44.3651 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.4486 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.4338 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.3452 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.3449 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.1825 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.2922 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.2390 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.2310 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.1598 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.1597 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.1556 LAST_ACK tcp4 0 15360 63.105.9.61.20 193.124.148.213.1553 LAST_ACK tcp4 0 15360 63.105.9.61.20 203.195.181.4.1440 LAST_ACK I am sure this has been in there the last at least 24 hours and I can see nothing is happening. I suspect that this is because of the no memory for rx list, but I am not quite sure. I was kinda a cool feeling though that FreeBSD didn't give up, but still runs!!! Is there anyway to clean this up without having to reboot the system? Thanks! Jan To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 9:23:18 2001 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [204.244.213.49]) by hub.freebsd.org (Postfix) with ESMTP id C52EC37B401 for ; Sat, 18 Aug 2001 09:23:14 -0700 (PDT) (envelope-from tom@sdf.com) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 15Y8XC-0005Sx-00; Sat, 18 Aug 2001 09:01:14 -0700 Date: Sat, 18 Aug 2001 09:01:12 -0700 (PDT) From: Tom Samplonius To: Jan Knepper Cc: FreeBSD ISP Subject: Re: slashdotted: /kernel: xl0: no memory for rx list -- packet dropped! In-Reply-To: <3B7E9205.7010604@digitaldaemon.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Sat, 18 Aug 2001, Jan Knepper wrote: > /kernel: xl0: no memory for rx list -- packet dropped! You need more mbufs. Use "netstat -m". ... > Is there anyway to clean this up without having to reboot the system? Seems to be FTP connections. Try stopping and then starting your FTP service. > > Thanks! > Jan Tom To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 9:45:25 2001 Delivered-To: freebsd-isp@freebsd.org Received: from digitaldaemon.com (digitaldaemon.com [63.105.9.34]) by hub.freebsd.org (Postfix) with SMTP id EB85837B40D for ; Sat, 18 Aug 2001 09:45:13 -0700 (PDT) (envelope-from jan@digitaldaemon.com) Received: (qmail 24776 invoked from network); 18 Aug 2001 16:42:58 -0000 Received: from unknown (HELO digitaldaemon.com) (192.168.0.73) by digitaldaemon.com with SMTP; 18 Aug 2001 16:42:58 -0000 Message-ID: <3B7E9B0A.9030506@digitaldaemon.com> Date: Sat, 18 Aug 2001 12:42:50 -0400 From: Jan Knepper User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.2) Gecko/20010726 Netscape6/6.1 X-Accept-Language: en-us MIME-Version: 1.0 To: Tom Samplonius Cc: FreeBSD ISP Subject: Re: slashdotted: /kernel: xl0: no memory for rx list -- packet dropped! References: Content-Type: multipart/alternative; boundary="------------090803070905090503000808" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --------------090803070905090503000808 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Tom Samplonius wrote: >On Sat, 18 Aug 2001, Jan Knepper wrote: > >>/kernel: xl0: no memory for rx list -- packet dropped! >> >You need more mbufs. Use "netstat -m". > netstat -m 641/1792/4096 mbufs in use (current/peak/max): 603 mbufs allocated to data 38 mbufs allocated to packet headers 601/1024/1024 mbuf clusters in use (current/peak/max) 2496 Kbytes allocated to network (81% of mb_map in use) 26608 requests for memory denied 18 requests for memory delayed 0 calls to protocol drain routines >... > >>Is there anyway to clean this up without having to reboot the system? >> >Seems to be FTP connections. Try stopping and then starting your FTP >service. > Tried that... Didn't make any difference... Jan --------------090803070905090503000808 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit Tom Samplonius wrote:
On Sat, 18 Aug 2001, Jan Knepper wrote:
/kernel: xl0: no memory for rx list -- packet dropped!
You need more mbufs.  Use "netstat -m".
netstat -m
641/1792/4096 mbufs in use (current/peak/max):
        603 mbufs allocated to data
        38 mbufs allocated to packet headers
601/1024/1024 mbuf clusters in use (current/peak/max)
2496 Kbytes allocated to network (81% of mb_map in use)
26608 requests for memory denied
18 requests for memory delayed
0 calls to protocol drain routines

...
Is there anyway to clean this up without having to reboot the system?
Seems to be FTP connections.  Try stopping and then starting your FTP
service.
Tried that... Didn't make any difference...

Jan

--------------090803070905090503000808-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 9:48: 6 2001 Delivered-To: freebsd-isp@freebsd.org Received: from digitaldaemon.com (digitaldaemon.com [63.105.9.34]) by hub.freebsd.org (Postfix) with SMTP id 9B52B37B409 for ; Sat, 18 Aug 2001 09:48:01 -0700 (PDT) (envelope-from jan@digitaldaemon.com) Received: (qmail 24799 invoked from network); 18 Aug 2001 16:45:46 -0000 Received: from unknown (HELO digitaldaemon.com) (192.168.0.73) by digitaldaemon.com with SMTP; 18 Aug 2001 16:45:46 -0000 Message-ID: <3B7E9BB2.4040709@digitaldaemon.com> Date: Sat, 18 Aug 2001 12:45:38 -0400 From: Jan Knepper User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.2) Gecko/20010726 Netscape6/6.1 X-Accept-Language: en-us MIME-Version: 1.0 To: "Michael C. Wu" Cc: FreeBSD ISP Subject: Re: slashdotted: /kernel: xl0: no memory for rx list -- packet dropped! References: Content-Type: multipart/alternative; boundary="------------080205020404080505060208" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --------------080205020404080505060208 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit > > >>tcp4 0 15360 63.105.9.61.20 193.124.148.213.1598 LAST_ACK >>tcp4 0 15360 63.105.9.61.20 193.124.148.213.1597 LAST_ACK >>tcp4 0 15360 63.105.9.61.20 193.124.148.213.1556 LAST_ACK >>tcp4 0 15360 63.105.9.61.20 193.124.148.213.1553 LAST_ACK >>tcp4 0 15360 63.105.9.61.20 203.195.181.4.1440 LAST_ACK >> >>I am sure this has been in there the last at least 24 hours and I can >>see nothing is happening. I suspect that this is because of the no >>memory for rx list, but I am not quite sure. I was kinda a cool feeling >>though that FreeBSD didn't give up, but still runs!!! >> >I think you might have been attacked by a well-known attack, simply named >the LAST_ACK attack. It puts our TCP state machine into whack by not >sending the proper TCP states. There is no way around it. > It there a way to find out when these connections where setup? Or how long they have been open? >>Is there anyway to clean this up without having to reboot the system? >> >I don't know. :) > Is there somebody who does/might? Jan --------------080205020404080505060208 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit
tcp4       0  15360  63.105.9.61.20         193.124.148.213.1598   LAST_ACK
tcp4 0 15360 63.105.9.61.20 193.124.148.213.1597 LAST_ACK
tcp4 0 15360 63.105.9.61.20 193.124.148.213.1556 LAST_ACK
tcp4 0 15360 63.105.9.61.20 193.124.148.213.1553 LAST_ACK
tcp4 0 15360 63.105.9.61.20 203.195.181.4.1440 LAST_ACK

I am sure this has been in there the last at least 24 hours and I can
see nothing is happening. I suspect that this is because of the no
memory for rx list, but I am not quite sure. I was kinda a cool feeling
though that FreeBSD didn't give up, but still runs!!!
I think you might have been attacked by a well-known attack, simply named
the LAST_ACK attack. It puts our TCP state machine into whack by not
sending the proper TCP states. There is no way around it.
<grrr>
It there a way to find out when these connections where setup? Or how long they have been open?
Is there anyway to clean this up without having to reboot the system?
I don't know. :)
Is there somebody who does/might?

Jan

--------------080205020404080505060208-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 10:20:39 2001 Delivered-To: freebsd-isp@freebsd.org Received: from misery.sdf.com (misery.sdf.com [204.244.213.49]) by hub.freebsd.org (Postfix) with ESMTP id EF33937B406 for ; Sat, 18 Aug 2001 10:20:31 -0700 (PDT) (envelope-from tom@sdf.com) Received: from tom (helo=localhost) by misery.sdf.com with local-esmtp (Exim 2.12 #1) id 15Y9Qd-0005c9-00; Sat, 18 Aug 2001 09:58:31 -0700 Date: Sat, 18 Aug 2001 09:58:30 -0700 (PDT) From: Tom Samplonius To: Jan Knepper Cc: FreeBSD ISP Subject: Re: slashdotted: /kernel: xl0: no memory for rx list -- packet dropped! In-Reply-To: <3B7E9B0A.9030506@digitaldaemon.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Sat, 18 Aug 2001, Jan Knepper wrote: > Tom Samplonius wrote: > > >On Sat, 18 Aug 2001, Jan Knepper wrote: > > > >>/kernel: xl0: no memory for rx list -- packet dropped! > >> > >You need more mbufs. Use "netstat -m". > > > netstat -m > 641/1792/4096 mbufs in use (current/peak/max): > 603 mbufs allocated to data > 38 mbufs allocated to packet headers > 601/1024/1024 mbuf clusters in use (current/peak/max) > 2496 Kbytes allocated to network (81% of mb_map in use) > 26608 requests for memory denied > 18 requests for memory delayed > 0 calls to protocol drain routines It looks like you need more mbuf clusters. 1024 isn't enough for most servers. You should build a new kernel. If you increase MAXUSERS, you will get more mbufs too. A fairly busy web server can require an easy 8000 mbuf clusters, but make sure you put more RAM in your system first, and you recompile Apache to support more than 1024 processes. Tom To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 12:11:21 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mail11.speakeasy.net (mail11.speakeasy.net [216.254.0.211]) by hub.freebsd.org (Postfix) with ESMTP id 2859537B406 for ; Sat, 18 Aug 2001 12:11:09 -0700 (PDT) (envelope-from drakFB@drak.com) Received: (qmail 75057 invoked from network); 18 Aug 2001 19:11:08 -0000 Received: from unknown (HELO ?192.168.1.5?) ([64.81.163.89]) (envelope-sender ) by mail11.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 18 Aug 2001 19:11:08 -0000 Mime-Version: 1.0 X-Sender: (Unverified) Message-Id: In-Reply-To: References: Date: Sat, 18 Aug 2001 12:11:06 -0700 To: Nick Rogness From: Andrew Matheson Subject: Re: virtusertable Cc: freebsd-isp@FreeBSD.ORG Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > In .procmailrc, add rules to inspect the TO: part of the message > and send it to the appropriate real account. See procmail help > for more info. Is this sufficient to redirect email that's to a mailing list, such as this one? The only place I see my address appear in freebsd-isp email is up in the top-most "Received:" header. The "^TO" regular expression variations in procmail (man procmailrc) don't look sophisticated enough to extract that address, but I'm not very familiar with procmail. Andrew To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 13:44:26 2001 Delivered-To: freebsd-isp@freebsd.org Received: from java2.dpcsys.com (java2.dpcsys.com [206.16.184.5]) by hub.freebsd.org (Postfix) with ESMTP id A816037B407 for ; Sat, 18 Aug 2001 13:44:23 -0700 (PDT) (envelope-from dan@dpcsys.com) Received: from localhost (localhost [127.0.0.1]) by java2.dpcsys.com (8.11.1/8.11.1) with ESMTP id f7IL2SQ91777; Sat, 18 Aug 2001 14:02:28 -0700 (PDT) Date: Sat, 18 Aug 2001 14:02:28 -0700 (PDT) From: Dan Busarow To: Andrew Matheson Cc: Nick Rogness , freebsd-isp@FreeBSD.ORG Subject: Re: virtusertable In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Aug 18, Andrew Matheson wrote: > > In .procmailrc, add rules to inspect the TO: part of the message > > and send it to the appropriate real account. See procmail help > > for more info. > > Is this sufficient to redirect email that's to a mailing list, such as this one? The only place I see my address appear in freebsd-isp email is up in the top-most "Received:" header. The "^TO" regular expression variations in procmail (man procmailrc) don't look sophisticated enough to extract that address, but I'm not very familiar with procmail. In your virtusertable entry use the form @example.com user_id+%1 Then in the .procmailrc for user_id DOMAIN=example.com ENV_TO=$1 :0f * ENV_TO ?? . | formail -i "X-Envelope-To: "$ENV_TO@$DOMAIN Then filter based on the X-Envelope-To: header Dan -- Dan Busarow 949 443 4172 Dana Point Communications, Inc. dan@dpcsys.com Dana Point, California 83 09 EF 59 E0 11 89 B4 8D 09 DB FD E1 DD 0C 82 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 15: 1:52 2001 Delivered-To: freebsd-isp@freebsd.org Received: from workhorse.iMach.com (workhorse.iMach.com [206.127.77.89]) by hub.freebsd.org (Postfix) with ESMTP id 0575C37B40C for ; Sat, 18 Aug 2001 15:01:50 -0700 (PDT) (envelope-from forrestc@imach.com) Received: from localhost (forrestc@localhost) by workhorse.iMach.com (8.9.3/8.9.3) with ESMTP id PAA05716; Sat, 18 Aug 2001 15:59:29 -0600 (MDT) Date: Sat, 18 Aug 2001 15:59:28 -0600 (MDT) From: "Forrest W. Christian" To: Jan Knepper Cc: Tom Samplonius , FreeBSD ISP Subject: Re: slashdotted: /kernel: xl0: no memory for rx list -- packet dropped! In-Reply-To: <3B7E9B0A.9030506@digitaldaemon.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Sat, 18 Aug 2001, Jan Knepper wrote: > >You need more mbufs. Use "netstat -m". > 603 mbufs allocated to data > 38 mbufs allocated to packet headers > 601/1024/1024 mbuf clusters in use (current/peak/max) Yep, definately more mbufs. See the tuning man page on how to increase this... > >>Is there anyway to clean this up without having to reboot the system? > >> > >Seems to be FTP connections. Try stopping and then starting your FTP > >service. > > > Tried that... Didn't make any difference... Try doing a sockstat to see what owns it... - Forrest W. Christian (forrestc@imach.com) AC7DE ---------------------------------------------------------------------- The Innovation Machine Ltd. P.O. Box 5749 http://www.imach.com/ Helena, MT 59604 Home of PacketFlux Technogies and BackupDNS.com (406)-442-6648 ---------------------------------------------------------------------- Protect your personal freedoms - visit http://www.lp.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 15:28:58 2001 Delivered-To: freebsd-isp@freebsd.org Received: from www.musicman.com (musicman.com [139.171.64.4]) by hub.freebsd.org (Postfix) with ESMTP id 7680C37B40C for ; Sat, 18 Aug 2001 15:28:53 -0700 (PDT) (envelope-from johng@musicman.com) Received: from localhost (johng@localhost) by www.musicman.com (8.9.3/8.9.3) with ESMTP id SAA99640 for ; Sat, 18 Aug 2001 18:28:53 -0400 (EDT) (envelope-from johng@musicman.com) Date: Sat, 18 Aug 2001 18:28:53 -0400 (EDT) From: john To: freebsd-isp@freebsd.org Subject: Drive Configuration Problem Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Help! I tried to use sysinstall to partition and label a RAID 1 drive (adaptec, scsi), and sysinstall would not let me write out the partitions. The error message was "device not configured". I don't know what to do to "configure" this drive. The output from newfs and fdisk are given below. This computer is booting from a third IDE drive, FreeBSD 4.2. Thanks to anyone who knows John newfs da0 newfs: da0: `0' partition is unavailable newfs da0s1a newfs: da0s1a: `a' partition is unavailable ******* Working on device /dev/da0 ******* parameters extracted from in-core disklabel are: cylinders=5219 heads=227 sectors/track=33 (7491 blks/cyl) Figures below won't work with BIOS for partitions not in cyl 1 parameters to be used for BIOS calculations are: cylinders=5219 heads=227 sectors/track=33 (7491 blks/cyl) Media sector size is 512 Warning: BIOS sector numbering starts with sector 1 Information from DOS bootblock is: The data for partition 1 is: sysid 165,(FreeBSD/NetBSD/386BSD) start 0, size 39100416 (19092 Meg), flag 80 (active) beg: cyl 0/ sector 1/ head 0; end: cyl 1023/ sector 33/ head 226 The data for partition 2 is: The data for partition 3 is: The data for partition 4 is: newfs da0 newfs: da0: `0' partition is unavailable newfs da0s1a newfs: da0s1a: `a' partition is unavailable ******* Working on device /dev/da0 ******* parameters extracted from in-core disklabel are: cylinders=5219 heads=227 sectors/track=33 (7491 blks/cyl) Figures below won't work with BIOS for partitions not in cyl 1 parameters to be used for BIOS calculations are: cylinders=5219 heads=227 sectors/track=33 (7491 blks/cyl) Media sector size is 512 Warning: BIOS sector numbering starts with sector 1 Information from DOS bootblock is: The data for partition 1 is: sysid 165,(FreeBSD/NetBSD/386BSD) start 0, size 39100416 (19092 Meg), flag 80 (active) beg: cyl 0/ sector 1/ head 0; end: cyl 1023/ sector 33/ head 226 The data for partition 2 is: The data for partition 3 is: The data for partition 4 is: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 17: 7:17 2001 Delivered-To: freebsd-isp@freebsd.org Received: from digitaldaemon.com (digitaldaemon.com [63.105.9.34]) by hub.freebsd.org (Postfix) with SMTP id 5FE0037B408 for ; Sat, 18 Aug 2001 17:06:57 -0700 (PDT) (envelope-from jan@digitaldaemon.com) Received: (qmail 40051 invoked from network); 19 Aug 2001 00:04:41 -0000 Received: from unknown (HELO digitaldaemon.com) (192.168.0.73) by digitaldaemon.com with SMTP; 19 Aug 2001 00:04:41 -0000 Message-ID: <3B7F0291.8040708@digitaldaemon.com> Date: Sat, 18 Aug 2001 20:04:33 -0400 From: Jan Knepper User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.2) Gecko/20010726 Netscape6/6.1 X-Accept-Language: en-us MIME-Version: 1.0 To: "Forrest W. Christian" Cc: Tom Samplonius , FreeBSD ISP Subject: Re: slashdotted: /kernel: xl0: no memory for rx list -- packet dropped! References: Content-Type: multipart/alternative; boundary="------------060306000004090003030500" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --------------060306000004090003030500 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Forrest W. Christian wrote: >On Sat, 18 Aug 2001, Jan Knepper wrote: > >>>You need more mbufs. Use "netstat -m". >>> >> 603 mbufs allocated to data >> 38 mbufs allocated to packet headers >>601/1024/1024 mbuf clusters in use (current/peak/max) >> > >Yep, definately more mbufs. See the tuning man page on how to increase >this... > I'll get more memory first and than on the next upgrade to 4.4 take care of this... >>>>Is there anyway to clean this up without having to reboot the system? >>>> >>>Seems to be FTP connections. Try stopping and then starting your FTP >>>service. >>> >>Tried that... Didn't make any difference... >> > >Try doing a sockstat to see what owns it... > I don't think they show there... I must be blind... Jan sockstat | grep "63.105.9.61" http httpd 40029 16 tcp4 63.105.9.61:80 *:* news nnrpd 39747 0 tcp4 63.105.9.61:119 63.168.39.174:1431 news nnrpd 39747 1 tcp4 63.105.9.61:119 63.168.39.174:1431 news nnrpd 39747 2 tcp4 63.105.9.61:119 63.168.39.174:1431 news nnrpd 39746 0 tcp4 63.105.9.61:119 65.3.181.59:62907 news nnrpd 39746 1 tcp4 63.105.9.61:119 65.3.181.59:62907 news nnrpd 39746 2 tcp4 63.105.9.61:119 65.3.181.59:62907 news nnrpd 39623 0 tcp4 63.105.9.61:119 154.33.254.5:63743 news nnrpd 39623 1 tcp4 63.105.9.61:119 154.33.254.5:63743 news nnrpd 39623 2 tcp4 63.105.9.61:119 154.33.254.5:63743 news nnrpd 39326 0 tcp4 63.105.9.61:119 154.33.254.2:63741 news nnrpd 39326 1 tcp4 63.105.9.61:119 154.33.254.2:63741 news nnrpd 39326 2 tcp4 63.105.9.61:119 154.33.254.2:63741 http httpd 95822 16 tcp4 63.105.9.61:80 *:* http httpd 95818 3 tcp4 63.105.9.61:80 62.100.1.107:1386 http httpd 95818 16 tcp4 63.105.9.61:80 *:* http httpd 95814 3 tcp4 63.105.9.61:80 202.83.72.3:30317 http httpd 95814 16 tcp4 63.105.9.61:80 *:* http httpd 95811 16 tcp4 63.105.9.61:80 *:* news innd 878 4 tcp4 63.105.9.61:119 *:* root httpd 822 16 tcp4 63.105.9.61:80 *:* --------------060306000004090003030500 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit Forrest W. Christian wrote:
On Sat, 18 Aug 2001, Jan Knepper wrote:

You need more mbufs.  Use "netstat -m".
        603 mbufs allocated to data
38 mbufs allocated to packet headers
601/1024/1024 mbuf clusters in use (current/peak/max)

Yep, definately more mbufs. See the tuning man page on how to increase
this...
I'll get more memory first and than on the next upgrade to 4.4 take care of this...
Is there anyway to clean this up without having to reboot the system?

Seems to be FTP connections.  Try stopping and then starting your FTP
service.

Tried that... Didn't make any difference...

Try doing a sockstat to see what owns it...
I don't think they show there... I must be blind...

Jan



sockstat | grep "63.105.9.61"
http     httpd    40029   16 tcp4   63.105.9.61:80        *:*
news     nnrpd    39747    0 tcp4   63.105.9.61:119       63.168.39.174:1431
news     nnrpd    39747    1 tcp4   63.105.9.61:119       63.168.39.174:1431
news     nnrpd    39747    2 tcp4   63.105.9.61:119       63.168.39.174:1431
news     nnrpd    39746    0 tcp4   63.105.9.61:119       65.3.181.59:62907
news     nnrpd    39746    1 tcp4   63.105.9.61:119       65.3.181.59:62907
news     nnrpd    39746    2 tcp4   63.105.9.61:119       65.3.181.59:62907
news     nnrpd    39623    0 tcp4   63.105.9.61:119       154.33.254.5:63743
news     nnrpd    39623    1 tcp4   63.105.9.61:119       154.33.254.5:63743
news     nnrpd    39623    2 tcp4   63.105.9.61:119       154.33.254.5:63743
news     nnrpd    39326    0 tcp4   63.105.9.61:119       154.33.254.2:63741
news     nnrpd    39326    1 tcp4   63.105.9.61:119       154.33.254.2:63741
news     nnrpd    39326    2 tcp4   63.105.9.61:119       154.33.254.2:63741
http     httpd    95822   16 tcp4   63.105.9.61:80        *:*
http     httpd    95818    3 tcp4   63.105.9.61:80        62.100.1.107:1386
http     httpd    95818   16 tcp4   63.105.9.61:80        *:*
http     httpd    95814    3 tcp4   63.105.9.61:80        202.83.72.3:30317
http     httpd    95814   16 tcp4   63.105.9.61:80        *:*
http     httpd    95811   16 tcp4   63.105.9.61:80        *:*
news     innd       878    4 tcp4   63.105.9.61:119       *:*
root     httpd      822   16 tcp4   63.105.9.61:80        *:*

--------------060306000004090003030500-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 20:53: 1 2001 Delivered-To: freebsd-isp@freebsd.org Received: from mailsrv.otenet.gr (mailsrv.otenet.gr [195.170.0.5]) by hub.freebsd.org (Postfix) with ESMTP id 3011937B412 for ; Sat, 18 Aug 2001 20:52:53 -0700 (PDT) (envelope-from keramida@ceid.upatras.gr) Received: from hades.hell.gr (patr530-b073.otenet.gr [195.167.121.201]) by mailsrv.otenet.gr (8.11.1/8.11.1) with ESMTP id f7J3qmb28348; Sun, 19 Aug 2001 06:52:49 +0300 (EEST) Received: (from charon@localhost) by hades.hell.gr (8.11.4/8.11.4) id f71DG0Z14358; Wed, 1 Aug 2001 16:16:00 +0300 (EEST) (envelope-from keramida@ceid.upatras.gr) Date: Wed, 1 Aug 2001 16:16:00 +0300 From: Giorgos Keramidas To: alexus Cc: "Forrest W. Christian" , Bob Martin , freebsd-isp@FreeBSD.ORG Subject: Re: IPs/VHOST/ALIAS/IDENTd/IRC Message-ID: <20010801161600.A9846@hades.hell.gr> References: <000001c1133d$e8ccc030$0100a8c0@alexus> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <000001c1133d$e8ccc030$0100a8c0@alexus>; from ml@db.nexgen.com on Mon, Jul 23, 2001 at 01:47:32AM -0400 X-PGP-Fingerprint: 3A 75 52 EB F1 58 56 0D - C5 B8 21 B6 1B 5E 4A C2 X-URL: http://students.ceid.upatras.gr/~keramida/index.html Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org From: alexus Subject: Re: IPs/VHOST/ALIAS/IDENTd/IRC Date: Mon, Jul 23, 2001 at 01:47:32AM -0400 > well ... let's see > > uiu Connecting to port 6667 of server irc.lightning.net [refnum 0] > [lightning] *** Looking up your hostname... > [lightning] *** Found your hostname, cached > [lightning] *** Checking Ident > [lightning] *** Banned: Install Identd for access (2001/4/18 09.20) > uiu Closing Link: a1exus[alexus@255.255.255.255] (Banned) > uiu Connection closed from irc.lightning.net: Undefined error: 0 See that a1exus[alexus@255.255.255.255] thing? This is an address that uniquely identifies you as far as the IRC server is concerned. The parts of this address are nickname[ident@hostname.or.ip.address]. Your nickname is a1exus. Your ident server works perfectly, replying 'alexus' when asked. Your host is oddly set to 255.255.255.255! It's not identd that you're having problems with. Look elsewhere. -giorgos PS: For goodness' shake, trim your quotes. It's *very* ugly having to go through a message with more than 10 levels of nested quotations to find what you are replying to! This is also a question that has little or nothing to do with the freebsd-isp list. There is -questions for this type of stuff. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Aug 18 21:22:56 2001 Delivered-To: freebsd-isp@freebsd.org Received: from odin.wrath.net (068up241.chartermi.net [24.247.68.241]) by hub.freebsd.org (Postfix) with ESMTP id 9AEED37B408 for ; Sat, 18 Aug 2001 21:22:43 -0700 (PDT) (envelope-from ircd@wrath.com) Received: from danrc ([192.168.1.2]) by odin.wrath.net with Microsoft SMTPSVC(5.0.2195.2966); Sun, 19 Aug 2001 00:33:03 -0400 Message-ID: <005b01c12866$8a35a030$0201a8c0@fear.wrath.net> From: "Brian" To: Cc: "alexus" References: <000001c1133d$e8ccc030$0100a8c0@alexus> <20010801161600.A9846@hades.hell.gr> Subject: Re: IPs/VHOST/ALIAS/IDENTd/IRC Date: Sun, 19 Aug 2001 00:22:21 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 X-OriginalArrivalTime: 19 Aug 2001 04:33:03.0974 (UTC) FILETIME=[093C4860:01C12868] Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org ----- Original Message ----- From: "Giorgos Keramidas" To: "alexus" Cc: "Forrest W. Christian" ; "Bob Martin" ; Sent: Wednesday, August 01, 2001 9:16 AM Subject: Re: IPs/VHOST/ALIAS/IDENTd/IRC > From: alexus > Subject: Re: IPs/VHOST/ALIAS/IDENTd/IRC > Date: Mon, Jul 23, 2001 at 01:47:32AM -0400 > > > well ... let's see > > > > uiu Connecting to port 6667 of server irc.lightning.net [refnum 0] > > [lightning] *** Looking up your hostname... > > [lightning] *** Found your hostname, cached > > [lightning] *** Checking Ident > > [lightning] *** Banned: Install Identd for access (2001/4/18 09.20) > > uiu Closing Link: a1exus[alexus@255.255.255.255] (Banned) > > uiu Connection closed from irc.lightning.net: Undefined error: 0 > > See that a1exus[alexus@255.255.255.255] thing? This is an address > that uniquely identifies you as far as the IRC server is concerned. > > The parts of this address are nickname[ident@hostname.or.ip.address]. > Your nickname is a1exus. > Your ident server works perfectly, replying 'alexus' when asked. > Your host is oddly set to 255.255.255.255! On kill it's quite common for the kill to show 255.* or 0.*. Since I can't get on the server to see what daemon is being run, I can only point you in the right direction. Do you have this problem on other networks? Try connecting to several servers on the network that produces your daemon. Is identd replying reasonably? If you're using bahamut, you can subscribe to dalnet-src@ using majordomo@dal.net or slagle's http://mailman.bahamut.net/mailman/listinfo/bahamut for bahamut.net and ask questions. you can get on DALnet and ask in #ircdev or in #bahamut (but you might get shot at in the process) IRCnet has a list also majordomo@irc.org. I'm not involved in any of the other flavors out there. In any event, it's probably true that this doesn't belong here. > It's not identd that you're having problems with. > Look elsewhere. > > -giorgos To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message