Posts tagged ‘FreeBSD’

Qmail-tls notes

I am using Bill Shuff's toaster patch ( thanks bill , you rule ! ) , for some reason make cert did not work.

I create the certs manually :

CODE:
  1. openssl req -newkey rsa:1024 -x509 -nodes -days 3650 -out servercert.pem -keyout servercert.pem

qmail did show TLS up but i got an error :

CODE:
  1. #openssl s_client -debug -crlf -starttls smtp -connect localhost:25
  2. 50883:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_clnt.c:562:

scratching my head around the net I found this and run :

CODE:
  1. #openssl ciphers> /var/qmail/control/tlsclientciphers
  2. #openssl ciphers> /var/qmail/control/tlsserverciphers

which fixed it all.

CODE:
  1. #openssl s_client -crlf -starttls smtp -connect localhost:25
  2. <strong>CONNECTED(00000003)</strong>

FreeBSD, Thinkpad X40, Intel 2200BG and WPA

I have the intel 2200bg wirelss card and used the iwi-firmware .

Load modules at boot :

vi /boot/loader.conf
if_iwi_load="YES"
wlan_load="YES"
firmware_load="YES"
legal.intel_iwi.license_ack=1

configure iwi network options :

vi /etc/rc.conf
ifconfig_iwi0="WPA DHCP"

configure WPA settings :

vi /etc/wpa_supplicant.conf
ctrl_interface_group=0
network={
ssid="ssid"
key_mgmt=WPA-PSK
psk="shared-key"
}

MacFusion - Mount SSH/FTP folders on your Mac

My journey as a mac newbie continues, this open source tools allows me to share my FreeBSD virtual machine folder with my mac without configuring nfs or anything fancy.
best of all , its opensource ...

http://www.macfusionapp.org/

Macfusion on my finder

Vi tips

Replace char with newline :

:s/X/^M/

^M = ctrl-V + m

FreeBSD - Setup Link Aggregation ( LAGG ) in failover mode

Load drivers on boot

echo "if_lagg_load=\"YES\"" >> /boot/loader.conf

Add to rc.conf

ifconfig_em0="UP" ifconfig_em1="UP" cloned_interfaces="lagg0" ifconfig_lagg0="laggproto failover laggport em0 laggport em1 ip.ad.dr.ess netmask net.ma.sk"

probably good idea to turn on spanning tree on your port .