Questions tagged [freebsd]

FreeBSD is an advanced operating system for a variety of architectures. It is derived from BSD, the version of UNIX® developed at the University of California, Berkeley; and is developed and maintained by a large team of individuals. It is a complete Operating System, including the kernel, drivers, and userland utilities such as shells.

265 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
10
votes
2answers
878 views

Freebsd change default Internet channel route

I have two Internet channel and Gateway on freebsd. When I switch channel with the command route change default chan2, the command netstat -nr shows changed default route. But traceroute shows that ...
9
votes
0answers
133 views

How much does FreeBSD accept_filter actually improve performance in a modern world?

I recently learned about FreeBSD's accept_filter socket option which can allow a worker process to avoid context switching by, for example, waiting until a full HTTP request is received with accf_http:...
8
votes
0answers
5k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
7
votes
0answers
3k views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
5
votes
0answers
975 views

pfSense Internal Traffic Policy Based Routing

What is the current and correct way to apply policy based routing to pfSense internal traffic (originating from the firewall itself)? Creating a floating rule with the WAN interfaces selected, ...
4
votes
0answers
907 views

Getting to enforcing google safe search using CNAME with unbound and nsd?

I am trying to implement this using Unbound and Nsd: https://support.google.com/websearch/answer/186669?hl=en To force SafeSearch for your network, you’ll need to update your DNS. configuration. ...
4
votes
1answer
357 views

Multi homed firewall with ipnat

i am trying (without success) to configure a ipnat/ipf box under FreeBSD 8.2, here is the scenario: outside inside +----+ ADSL 1.2.3.0/...
4
votes
0answers
2k views

FreeBSD ixgbe driver not working

I recently got a brand new Dell PowerEdge R610 server, I installed VMWare ESXi 5.0 on it and attempted to install FreeBSD as guest OS for squid caching. The server has a PCI-E Intel X520-T2 10Gig ...
3
votes
0answers
264 views

Force ZFS to ignore checksum errors without removing the offending disk

EDIT: (see the end of this question) after more digging this appears to be a system USB issue and not ZFS that's causing the drives to be kicked. I'll leave this question up for posterity, because I'...
3
votes
0answers
162 views

FreeBSD major update broke vpnc connectivity, incoming ESP traffic doesn't appear unencrypted on interfaces

I updated a FreeBSD box from 10.4 to 11.2-RELEASE-p4 recently and it seems to have broken the vpnc VPN connectivity. Here's the vpnc.conf: IPSec gateway 10.1.0.1 IPSec ID vpnuser IPSec secret ...
3
votes
1answer
100 views

How do I configure ZFS to panic on da (SCSI) disk failure?

Situation: two redundant FreeBSD machines using CARP to share a primary IP, running a frontend proxy (E.G. HAproxy or nginx) Primary machine experiences a loss of SCSI disk (E.G. disk failure, SAN ...
3
votes
0answers
105 views

Solaris fmadm equivalent for FreeBSD

I've been looking for the equivalent of fmadm, the fault management configuration tool of Solaris / illumos on FreeBSD. But I'm unable to find an equivalent or even a subset of tools that mimics the ...
3
votes
1answer
428 views

Search option in resolv.conf getting overwritten by prepend statement in dhclient.conf

I have setup a DNS server for my department which is running FreeBSD 10.2. It is currently connected to the campus internet and receiving its address via dhcp, so /etc/resolv.conf looks like this: #...
3
votes
1answer
629 views

FreeBSD 10.1 routing issues

I have FreeBSD based router in my campus. Trivial configuration for these types of routers: two interfaces, one of them looking to the outer internet, second - to the local net. In my local net ...
3
votes
0answers
754 views

Why can't I chown to nobody over nfsv4?

Server: FreeBSD 9.2-RC1, ZFS Client: FreeBSD 9.0-RELEASE-p3 Filesystem is exported with "alldirs,maproot=root". On the client, I can chown a file to any user but nobody. client# touch foo client# ls ...
3
votes
0answers
235 views

FreeBSD raid issue

One of my machines (FreeBSD) has lost its raid (0/ stripe). If I go [root@torry /usr/home/bclark]# gstripe list Geom name: st0 State: UP Status: Total=3, Online=3 Type: AUTOMATIC Stripesize: 65536 ...
3
votes
0answers
703 views

Can't remove zfs log device from pool

I run a FreeBSD 9.0 server with ZFS pool version 28 and ZFS version 5. I had two pools with a log on ssd's two partitions. These pools was created on FreeBSD 8.2 with ZFS pool version 15, and ZFS ...
2
votes
0answers
30 views

FreeBSD: redirect some UDP traffic from one port to another

I have some specialized DNS servers running on FreeBSD 11. A few people keep hammering on them and I would like to give them different answers. So I'd like to divert UDP traffic from those hosts from ...
2
votes
0answers
407 views

FreeBSD networking setup for multiple jails - interface clones or aliases

While setting up multiple jails on a FreeBSD machine, I also (naturally) need to set up the networking for each jail. It seems to me there are two ways of achieving the same goal - 1) setting up ...
2
votes
0answers
293 views

Access denied for all users after MariaDb upgrade

I discovered this morning that MariaDb had been removed from my server in the process of upgrading from FreeBSD 10.3 to 11.1. After getting the database engine reinstalled, and resolving the problems ...
2
votes
0answers
1k views

What to set uwsgi uid and gid to?

I'm trying to have nginx connect to a uwsgi socket on FreeBSD. I've set the socket to 666 but whenever I issue a request in my browser I can see the following in my nginx logs: 2017/12/12 11:34:04 [...
2
votes
0answers
275 views

Allowing Incoming Traffic over IPv6 with PF on FreeBSD

This is my current pf.conf on FreeBSD 11.1-RELEASE. It allows incoming connections from OpenVPN/UDP and SSH, as well as allows everything on the private/vpn networks (vtnet1 and tun0 respectively). ...
2
votes
0answers
217 views

Configure Munin to monitor multiple instances on one node

I need to configure Munin to monitor multiple instances of a server daemon that run on a single host. I've tried creating a different named symlink for each instance, but unless I also pass an env ...
2
votes
0answers
110 views

How can I apply security patches to an offline freebsd machine?

Synopsis: We would like to use FreeBSD (version 11.0) on one of our products. Once the product leaves the company, it will be disconnected from the Internet for good. However, as part of our support ...
2
votes
1answer
241 views

bind address of application on multihomed server

I have a multi-homed server running bgp via quagga If I fire up an application on this server that initiates a connection, by default it is going to choose the interface with the lowest metric, ie ...
2
votes
0answers
32 views

Files saved to Samba share are randomly differing from originals?

I manage a small network of windows clients and a BSD file server running Samba 4.6.x. We had some odd issues which led to the discovery that when users save files to the server, about 12% of the ...
2
votes
0answers
575 views

FreeBSD 10 unable to boot ZFS pool - “unknown file system”

I have a server with FreeBSD 10.3 that I am suddenly unable to reboot. The server has been working fine for over 6 months but it not rebooted it since about 5 months ago, until now. I end up in "...
2
votes
0answers
311 views

FreeBSD: How to extend an encrypted ZFS zroot pool

I installed a vanilla FreeBSD 11.0 (amd64) and chose the installation option "ZFS on / (encrypted)" (or however it is really called). Now I have a nice ZFS pool: root@storage:~ # zpool list NAME ...
2
votes
2answers
1k views

FreeBSD shows high load, cannot find bottleneck

So we have set up a server(11.0-RELEASE-p2) that hosts around 150-200 jails. The server has 24 cores and 192gb of ram. When using top it shows no sign of stress - except the high load. All jails ...
2
votes
0answers
591 views

How to use wildcards with pkg-upgrade?

As an example, when I want to list all installed packages of php70 I can just enter: pkg info php70\* But I cannot use the wildcard in this for pkg upgrade: pkg upgrade php70\* When I do get this ...
2
votes
1answer
239 views

NGINX PROXY 0000 1204 0000 0000 0000 0300 0000 8000

After last update of nginx all my pages are getting: 0000 1204 0000 0000 0000 0300 0000 8000 0400 0000 0000 0500 ffff ff00 0004 0800 0000 0000 7fff 0000 0000 0807 0000 0000 0000 0000 ...
2
votes
0answers
59 views

How do I make su wait before retries in freebsd?

I want to make attempts at using the su command timeout for 1 second between tries. Alas, the Google and StackExchange, and rtfm have not yielded results.
2
votes
0answers
185 views

libnss-mysql on freebsd 10.1

i have libnss-mysql installed on freebsd 10.1. Everything works except groups command. getent group - ok # getent group ....... froxlorlocal:*:1003:www <-- data from passwd vmail:*:2000 <...
2
votes
1answer
355 views

PF redirect rule: how to limit the rule to specific user

I was trying to setup a PF redirect rule to force all web traffic from a specific user account to go through a web filter on a shared computer. With iptables, I can use --uid-owner option to limit ...
2
votes
0answers
858 views

FreeBSD L2TP/IPsec not routing traffic to vpn server

I have configured a VPN server on my FreeBSD server, it all seems to be running, but the VPN traffic is not routing through to the local VPN server and I cannot figure out as to why. So my question is,...
2
votes
0answers
2k views

MySQL exits without any output

Having a strange issue. Some time ago MySQL exited suddenly when I was creating a table (I think), and I shelved the issue until now. It seems to start, but nothing happens and it exits: 141031 18:40:...
2
votes
1answer
170 views

Huge quantity of session files

I have: CPU: 2 x Intel(R) Xeon(R) CPU E5-2650 v2 @ 2.60GHz (2600.06-MHz K8-class CPU) 128 GB RAM FreeBSD OS session files stored in RAM each session file is 1...10 kb gc_maxlifetime = 1440 ...
2
votes
0answers
458 views

Load Average problems while serving 40M requests daily with php-fpm, nginx

I have server with FreeBSD (16 cores with HT, SSD, 32Gb RAM) which is getting about 40M http requests daily. All requests are served by nginx + php-fpm. At these graphs you see that we have a ...
2
votes
2answers
974 views

Redirection with natd flags on FreeBSD

I am trying to setup a basic NAT server. I want all traffic coming from the outside world to the NAT server to be redirected to another machine, where I have a lipcap service running to parse this ...
2
votes
0answers
615 views

Livestatus doesnt work with Nagios on FreeBSD

Im trying to use livestatus with nagios on FreeBSD. I've managed to compile and configure it, but Nagios doesnt seem to be loading the module and dont produce any errors. Other info: $ grep broker ...
2
votes
1answer
315 views

Is there an equivalent of LinuxIMQs in BSD?

Is there an equivalent of LinuxIMQs in BSD ? From linuximq.net: The imq device has two common usage cases: Ingress shaping: With linux only egress shaping is possible (except for the ingress ...
2
votes
0answers
903 views

FreeBSD istgt - how to limit iscsi target discoverability to IP address

How can I setup an ISCSI target that is only visible to a certain IP address? For example, if a client runs iscsiadm discover from 10.1.1.130, I only want target iqn.2011-03.domain.org.istgt.ded130 ...
2
votes
1answer
320 views

Is it possible to avoid umask 0002?

Is it possible to give an automatic ability to modify files(folders and all recursively) created by one user to another within one specified folder (let's say "shared") on the basis of both users ...
2
votes
1answer
451 views

Nginx: Tags in Syslog output on wrong position

I'm trying to output the logs of several Nginx servers in FreeBSD jails to the jails' host. I'm using FreeBSD 10 syslog and Nginx 1.7.10. In Nginx (in this case the hostname is web) I have set: ...
2
votes
1answer
1k views

Cluster-Shared Volume on Windows Server 2012 R2 drops off with minor iSCSI pauses

We are running into an issue here where the Cluster-Shared Volume attached to our Hyper-V 2012 R2 cluster is being dropped off / faulted with the slightest interruption from the iSCSI SAN connection ...
1
vote
0answers
21 views

Talking to NRPE2 clients from an NRPE3 server

I'm standing up a new Nagios server, and I have run into a bit of a snag. Our existing server is running FreeBSD 11 w/ Nagios 4.3.4 and nrpe2. It can communicate w/ the nrpe2 daemons on our various ...
1
vote
1answer
49 views

FreeBSD: system is sending mail for any user to an external smtp - why?

There is a problem with one of my jails. All Jails sending their mails for root to root, except one jail (nginx). This jail sends mails to root@jailname.domain.tld. My Postfix is configured to accept ...
1
vote
1answer
86 views

Forward traffic on same interface

I am operating a server hosting a set of services, each run in a separate Docker container. In addition, there is a KVM running pfSense acting as firewall. The firewall has a physical interface that ...
1
vote
0answers
116 views

Periodically 504 timeout with nginx and php-fpm

I have php-fpm 7.0 and nginx 1.11.6 in FreeBSD 10.3. Sometimes I get 504 timeout even when the server has a lot of free resources. Nginx waiting answer from php-fpm 30 seconds. I write application ...
1
vote
0answers
38 views

expect, mpd5 and dynamic config loading

I have a FreeBSD server that's connected to WAN using PPPoE. Iva esuccessfully set ip the L2TP and PPTP VPN ontop of this PPPoE WAN connection. The problem is that L2TP needs to call 'set lt2p self ` ...