doh, installing perl returning error
when I see it’s message, principally tell about time
let’s check :
pctjambi# date
Tue Jan 1 16:03:23 WIT 2002
need quick action to fix it.
pctjambi# date 0712141357
Fri Dec 14 13:57:00 WIT 2007
explanation :
date yymmddhhss
07 = year 2007
mm = month 12
dd = day 14
hh = hour 13
ss = minute 57
try again installing and it work smoothly 
I’m FreeBSD addict, use ports everyday and can’t live without port
Today, one of our server don’t seem hit firewall restriction and I nothing I can do .
I see INDEX-6 everytime I try to issue command : make fetchindex but nothing show up.
After scp INDEX-6 from other server I can update the ports.
ftp# cd /usr/ports
ftp# make fetchindex
^Cfetch: transfer interrupted
ftp# portversion -v | grep ‘<’
Fetching the ports index …
^Cfetch: transfer interrupted
failed to fetch INDEX!
Updating the ports index … failed to generate INDEX!
index generation error
database file error
mail# scp /usr/ports/INDEX-6 mother@172.88.1.3:/home/mother
Password:
INDEX-6
100% 22MB 21.8MB/s 00:00
ftp# pwd
/usr/ports
ftp# mv /home/mother/INDEX-6 /usr/ports/
ftp# portversion -v | grep ‘<’
[Updating the portsdb <format:bdb_btree> in /usr/ports ... - 17745 port
entries found
.........1000.........2000....
11000.........12000........
..... done]
mysql-client-5.0.45_1 < needs updating (port has 5.0.51)
mysql-server-5.0.45_1 < needs updating (port has 5.0.51)
phpMyAdmin-2.11.2.1 < needs updating (port has 2.11.2.2)
png-1.2.22 < needs updating (port has 1.2.23)
rsync-2.6.9_1 < needs updating (port has 2.6.9_2)
ruby-1.8.6.111,1 < needs updating (port has 1.8.6.111_1,1)
squid-2.6.16 < needs updating (port has 2.6.17)
ftp#
great, I can see listing ports needed to update
My friend got suprised when he see login page on phpmyadmin. It’s not usual form for login as he used to login for.
Well, another postfixadmin admin page also show login page. He ask me to list all tutorial around .htaccess to show for his learning study.
Like I did in Cisco Lab Topology, Cisco Resources or Ipfw Resources , I think I search google too for existing tutorial, Learning On Demand rules
Here’s what I found so far :
last update : November 22 2007
"Which firewall do you like most in FreeBSD?", my friend ask me.
Hmmm….
Not sure, at first time I use ipfw and already put some collection of useful link, in my bookmark
Since pfsense use pf and freebsd itself include pf in native make me think to recall the link into of ipfw for this blog 
I’ll add more link, maybe you can share your fav
Updated : November 22 2007
tp# top
last pid: 23639; load averages: 0.00, 0.00, 0.00
up 13+06:57:13 13:53:54
65 processes: 1 running, 63 sleeping, 1 zombie
CPU states: 0.0% user, 0.0% nice, 0.0% system, 0.0% interrupt, 100% idle
Mem: 181M Active, 1535M Inact, 199M Wired, 79M Cache, 112M Buf, 4008K Free
Swap: 4096M Total, 88K Used, 4096M Free
wow, 1 zombie
first time I see this ‘zombie’
further work to see that zombie
ftp# ps -aux | grep Z
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
root 24487 0.0 0.0 0 0 ?? Z 2:00PM 0:00.00 <defunct>
<defunct>
what was thta?
from here :
http://www.cts.wustl.edu/
Defunct processes are processes that have become corrupted in such a
way the no long can communicate (not really the right word, like
signal each other) with their parent or child process. So kill the
parent or child and 99% of the time (around here at least) the defunct
process will go away! No parent or child, your out of luck, or look
for a stuck automount.
Hmm….
When doing updating ports every 3 days I see this in this morning :
ftp# cvsup -g -L2 ports-supfile
Parsing supfile "ports-supfile"
Connecting to cvsup12.FreeBSD.org
Connected to cvsup12.FreeBSD.org
Server software version: SNAP_16_1h
Negotiating file attribute support
Exchanging collection information
Establishing multiplexed-mode data connection
Running
Updating collection ports-all/cvs
Server warning: Cannot open "/cvs/cvsupd/prefixes/FreeBSD.cvs/ports/Tools/portbuild/2.2/bindist/README,v": No such file or directory
Server warning: Cannot open "/cvs/cvsupd/prefixes/FreeBSD.cvs/ports/Tools/portbuild/2.2/bindist/delete,v": No such file or directory
Server warning: Cannot open "/cvs/cvsupd/prefixes/FreeBSD.cvs/ports/Tools/portbuild/2.2/bindist/dirlist,v": No such file or directory
Server warning: Cannot open "/cvs/cvsupd/prefixes/FreeBSD.cvs/ports/Tools/portbuild/2.2/bindist/files/usr/bin/uname,v": No such file or directory
……………………
Wow, after see my ports-supfile nothing changed :
*default host=cvsup12.FreeBSD.org
*default base=/var/db
*default prefix=/usr
*default release=cvs tag=.
*default delete use-rel-suffix*default compress
ports-all
Hmmm….
Ok, try another server
ftp# cvsup -g -L2 ports-supfile -h cvsup10.freebsd.org
Parsing supfile "ports-supfile"
Connecting to cvsup10.freebsd.org
Connected to cvsup10.freebsd.org
Server software version: SNAP_16_1h
Negotiating file attribute support
Exchanging collection information
Establishing multiplexed-mode data connection
Running
Updating collection ports-all/cvs
Checkout ports/audio/xmms2/files/patch-src_clients_lib_python_xmmsapi.pyx
Edit ports/databases/mysql-query-browser/Makefile
Add delta 1.10 2007.11.12.23.43.33 pav
Edit ports/databases/oracle8-client/Makefile
Add delta 1.4 2007.11.13.20.25.46 fjoe
Edit ports/databases/oracle8-client/distinfo
Add delta 1.3 2007.11.13.20.25.46 fjoe
Edit ports/databases/py-tada/Makefile
Add delta 1.5 2007.11.14.22.53.57 pav
…………………….
Fiuh, it seem problem occur in cvsup12.freebsd.org
I hope it will fix immediately
Pfsense 1.2-RC3 has been released! Here are just a few of the new improvements and features that have made their way into this new version:
1.2-RC3 will appear at a mirror near you very soon. Please let us know what you think on the forum or mailing list.
Update: more than half of the mirrors have these files now, if you try one that doesn’t have the files, try another. They’ll all be updated within 24 hours.
Location for download : Loquefaltaba
Recent electric failure result make my mail server down. After reboot, doing fsck -y and so on. Restart again email still down.
After see the log, action taken to make mail server up as fast as I can.
mail# tail -f /var/log/maillog
Nov 7 08:01:18 mail postfix/smtpd[6714]: lost connection after RCPT from 125-26-188-139.adsl.totbb.net[125.26.188.139]
Nov 7 08:01:18 mail postfix/smtpd[6714]: disconnect from 125-26-188-139.adsl.totbb.net[125.26.188.139]
Nov 7 08:01:19 mail postfix/smtpd[6693]: disconnect from mx42.publicitycountry.com[66.90.82.42]
Nov 7 08:01:20 mail amavis[6519]: (06519-02) ClamAV-clamd av-scanner FAILED: Too many retries to talk to
/var/run/clamav/clamd (Can’t connect to UNIX socket
/var/run/clamav/clamd: Permission denied) at (eval 56) line 257.
Nov 7 08:01:20 mail amavis[6519]: (06519-02) WARN: all primary virus scanners failed,
considering backups
Nov 7 08:01:20 mail postfix/smtpd[6647]: connect from
mx42.publicitycountry.com[66.90.82.42]
Nov 7 08:01:21 mail postfix/smtpd[6711]: warning: 133.23.189.81.list.dsbl.org: RBL lookup
error: Host or domain name not found. Name service error for
name=133.23.189.81.list.dsbl.org type=A: Host not found, try again
Nov 7 08:01:21 mail amavis[6544]: (06544-02) ClamAV-clamd av-scanner FAILED: Too many
retries to talk to /var/run/clamav/clamd (Can’t connect to UNIX socket
/var/run/clamav/clamd: Permission denied) at (eval 56) line 257.
Nov 7 08:01:21 mail amavis[6544]: (06544-02) WARN: all primary virus scanners failed,
considering backups
Nov 7 08:01:22 mail postfix/smtpd[6711]: DC0E24112DF:
client=dsl-23-133.utaonline.at[ 81.189.23.133]
Nov 7 08:01:22 mail postfix/smtpd[6711]: lost connection after RCPT from
dsl-23-133.utaonline.at[81.189.23.133]
Nov 7 08:01:22 mail postfix/smtpd[6711]: disconnect from
dsl-23-133.utaonline.at[81.189.23.133]
try to start manually.
mail# /usr/local/etc/rc.d/clamav
clamav_clamd not running? (check /var/run/clamav/clamd.pid).
Starting clamav_clamd.
mail# /usr/local/etc/rc.d/clamav
clamav_clamd not running? (check /var/run/clamav/clamd.pid).
Starting clamav_clamd.
Change ownership of clamav to vscan
mail# chown vscan:vscan clamav
mail# ls -l
total 36
-rw——- 1 root wheel 0 Nov 7 04:11 accept.lock.967
drwxr-x— 2 vscan vscan 512 Nov 7 07:59 clamav
mail# /usr/local/etc/rc.d/clamav
clamav_clamd not running? (check /var/run/clamav/clamd.pid).
Starting clamav_clamd.
testing
mail# /usr/local/etc/rc.d/clamav
Stopping clamav_clamd.
Waiting for PIDS: 7074.
Starting clamav_clamd.
mail# chown vscan:vscan /var/log/clamav/clamd.log
mail# chown vscan:vscan /var/log/clamav/freshclam.log
mail# /usr/local/etc/rc.d/clamav
Stopping clamav_clamd.
Waiting for PIDS: 7092.
Starting clamav_clamd.
mail# /usr/local/etc/rc.d/clamav
clamav_freshclam not running? (check /var/run/clamav/freshclam.pid).
Starting clamav_freshclam.
mail# /usr/local/sbin/amavisd start
Done, permission error.
Once again in server
Log is your friend.
The 7.0-BETA2 builds have completed and are on many of the FreeBSD
mirror sites. If you want to update an existing machine using cvsup use
RELENG_7 as the branch tag. Instructions on using FreeBSD Update to
perform a binary upgrade from FreeBSD 6.x to 7.0-BETA2 will be provided
via the freebsd-stable list when available.
Download for i386 :
Subject: In Memoriam: Jun-ichiro Hagino
Date: Tue, 30 Oct 2007 14:10:58 -0700
From: Dragos Ruiu <dr@kyx.net>
Organization: All Terrain Ninjas
To: bugtraq@securityfoc
With great sadness, I regret to inform you that Itojun
will not be presenting his great knowledge of IPv6 at
PacSec. I have been informed by several sources
that he passed away yesterday.
Funeral services will be held on Nov 7th at Rinkai-Saijo
in Tokyo. There aren’t many details of his passing,
so please let his family and relatives mourn in peace
for now. My heartfelt condolances go out to them,
and all of his many friends.
I knew Itojun as one of the smartest and kindest people
I have ever met. He helped everyone around him. He
graciously hosted and assisted many foreigners new
to Japan at the PacSec conferences, and was a good
friend to all. He would go to extraordinary lengths to
help anyone around him. We will all miss him – and
his work on IPv6 will continue to help us for a long
time..
He once said to me, "When a professional race car
driver races, his pulse gets lower and he relaxes.
When I code it is the same thing." I’ll miss him
driving around in his prized Fiat 500… and I hope
we can all proceed to help fix our V6 networks
without his gentle and insistent coaching.
We will announce a replacement talk shortly.
If you knew or respected him, he would have
wanted any energy you put towards grief to
be spent on speeding the adoption and the
robustness of the version 6 internet which
he devoted so much of his extraordinary
life to.
Some more information in Japanese
at http://www.hoge.
May he rest in peace,
–dr
–
World Security Pros. Cutting Edge Training, Tools, and Techniques
Tokyo, Japan November 29/30 – 2007 http://pacsec.
pgpkey http://dragos.
After read this article I try to practice in other server that has gigabit ethernet card .
I have download opensuse 10.3 in Gnome and KDE version and use it as sample stuff for sending via scp.
sending before tuning :
monitor# scp openSUSE-10.3-GM-GNOME-i386.iso mother@172.88.1.3:/home/mother
Password:
openSUSE-10.3-GM-GNOME-i386.iso 100% 665MB 10.2MB/s 01:05
ftp# sysctl kern.ipc.maxsockbuf=262144
ftp# sysctl net.inet.tcp.sendspace=65536
ftp# sysctl net.inet.tcp.recvspace=65536
ftp# sysctl net.inet.tcp.rfc1323=1
monitor# scp openSUSE-10.3-GM-GNOME-i386.iso mother@172.88.1.3:/home/mother
Password:
openSUSE-10.3-GM-GNOME-i386.iso 100% 665MB 10.4MB/s 01:04
tuning the values in ‘mother’
====================================================
testing transfer data to ‘mother’
monitor# ls
openSUSE-10.3-GM-GNOME-i386.iso openSUSE-10.3-GM-KDE-i386.iso
monitor# scp openSUSE-10.3-GM-GNOME-i386.iso mother@172.88.1.3:/home/mother
Password:
openSUSE-10.3-GM-GNOME-i386.iso 100% 665MB 10.4MB/s 01:04
====================================================
tuning the values to monitor
monitor# sysctl kern.ipc.maxsockbuf=262144
kern.ipc.maxsockbuf: 262144 -> 262144
monitor# sysctl net.inet.tcp.sendspace=65536
net.inet.tcp.sendspace: 32768 -> 65536
monitor# sysctl net.inet.tcp.recvspace=65536
net.inet.tcp.recvspace: 65536 -> 65536
testing again ::
monitor# scp openSUSE-10.3-GM-GNOME-i386.iso mother@172.88.1.3:/home/mother
Password:
openSUSE-10.3-GM-GNOME-i386.iso 100% 665MB 10.2MB/s 01:05o
speed decrease? from 10.4 to 10.2 MB/s with same time.
when I try this
ftp# sysctl kern.ipc.nmbclusters=32768
kern.ipc.nmbclusters: 33792
sysctl: kern.ipc.nmbclusters: Invalid argument
Gee, I must read sysctl manual first before try again
About