From owner-freebsd-questions Sat May 27 20:50:11 2000 Delivered-To: freebsd-questions@freebsd.org Received: from hotmail.com (f328.law8.hotmail.com [216.33.240.203]) by hub.freebsd.org (Postfix) with SMTP id 30C6A37B626 for ; Sat, 27 May 2000 20:50:06 -0700 (PDT) (envelope-from jmd526@hotmail.com) Received: (qmail 32722 invoked by uid 0); 28 May 2000 03:50:05 -0000 Message-ID: <20000528035005.32721.qmail@hotmail.com> Received: from 209.220.228.2 by www.hotmail.com with HTTP; Sat, 27 May 2000 20:50:05 PDT X-Originating-IP: [209.220.228.2] From: "John Daniels" To: freebsd-questions@freebsd.org, freebsd-stable@freebsd.org Subject: 4.0-RELEASE to 4.0-STABLE upgrade Date: Sat, 27 May 2000 23:50:05 EDT Mime-Version: 1.0 Content-Type: text/plain; format=flowed Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi: I just did an upgrade to STABLE. I just wanted to check what I did was OK. First, the handbook says to do the following order: 1. backup 2. CVsup 3. check /etc/make.conf and /etc/group 4. drop to single-user mode 5. remove /usr/obj 6. make world (or make buildworld and make installworld) 7. update /etc, /dev, (and optionally /stand) 8. compile and install a new kernel 9. reboot (with fastboot) ****** WHAT I DID DIFFERENTLY ******** 1. I used mergemaster for updating /etc. 2. www.freebsddiary.com has description of going from 4.0-RELEASE to STABLE and provides a script for doing so. The description and script shows that compiling and installing a new kernel (#8 above) comes *AFTER* make world (#6 above) - and *BEFORE* updating /etc. Thus, according to them, #8 comes before #7 in the above list. 3. Oops! I removed /usr/obj *AFTER* the make world, not before. I tried to redo make world but after a few messages (which seemed unimportant) it told me that the proc tables were full. I then compiled and installed a new kernel without any noticeable problems. 4. NOTE: For me, /etc/make.conf has only one line: "USA_RESIDENT=YES". Apparantly /etc/defaults/make.conf is what needs to be edited (after being copied to /etc.) Since I had not figured this out beforehand, I was unable to uncomment out CFLAGS and NOPROFILE as instructed in the Handbook. I have booted into, and am writing to you from, STABLE. Whatever I may have done wrong, so far I have not seen any (noticeable) problems. QUESTION: Will my system be OK? Will any of the above cause any problems (especially removing /usr/obj before making and installing the kernel) FOLLOWUP: Now that I have gone through the process of upgrading, I am looking into security. What is the easiest, most obvious (as in "duh!, why didn't you ...") steps to take to guard security. My setup is very simple: my home PC connected to a router with DSL service. I am the only user. I would like to use this machine as a web server and mail server, but I don't have anyone ftp-ing in (but I need to ftp out to retrieve files from time to time), logging in remotely, telnet-ing in, etc. Do I just modify inet.conf and/or hosts.allow to deny those services? How difficult is it to add a firewall like IPfilter? I will look into security in the handbook, of course, but all comments are welcome. Thanks in advance for all replies. John PS *THANKS* to all the FreeBSD developers who have contributed to this awesome system. The more I learn about it the more I am impressed. ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message