PmWiki | Notes / FreeBSD

Notes

Ditched sendmail in favour of ssmtp using gmail - Install instructions

Mounting backup disk

 sudo mount -t ext2fs  /dev/da0s1 /mnt/backup

Disk MAY need to be turned off and on before this works
Note that it's actually an ext3 file system.
umount by regular means.

Fail2Ban install

Alternative to fail2ban: OSSEC

Manual - jail.conf options
Whitelisting

Enable:

   # vi /etc/rc.conf
   add line: fail2ban_enable="YES"

   # /usr/local/etc/rc.d/fail2ban start

Blade, adjust jail.conf to following:

   [ssh-ipfw]                                                                          

   enabled  = true                                                                     
   filter   = sshd
   action   = ipfw[localhost=192.168.0.1]
              sendmail-whois[name="SSH,IPFW", dest=wrijnders@gmail.com]                
   logpath  = /var/log/auth.log

This should block sshd login attempts

Test current log against given filter:

    sudo fail2ban-regex /var/log/auth.log /usr/local/etc/fail2ban/filter.d/sshd.conf | less

Ports

Complete update:

   portsnap fetch update
   portaudit -Fda
   pkgdb -Ff       # Fix corruption problems with: pkgdb -fu
   portsdb -Uu

To uninstall a port (example):

  cd /usr/ports/sysutils/screen
  make deinstall

Alternative:

  pkg_deinstall firefox

For good measure, do make clean after successful deinstall.

Upgrade port to a specific version:

 # portupgrade -o lang/python26 lang/python25

Where part after -o is the new version. Then:

 # cd /usr/ports/lang/python && make upgrade-site-packages

To assure that site-packages are made available to the new version (python in this case).

pkg

View:

  pkg_info

Remove (eg.):

  pkg_delete pkgname
  pkg_delete screen-4.0.3_6
  pkg_delete 'screen*'

FreeBSD