Re: Acronyms: was Should beginners work with WSL?

[Michael Tewner]

After all of these emails, I still don't know what WSL is *shrug*

On Sun, Feb 6, 2022 at 2:46 PM Shachar Shemesh  wrote:

>
> On 06/02/2022 14:03, Mark E. Fuller wrote:
>
> I'm new here, but I find LMGTFY and similar responses (like RTFM) to be
> generally unwelcome and inappropriate. Whether or not they are part of the
> culture of a listserv or forum, I do not respond in that manner for the
> simple reason that if I have time to respond, then I have time to respond
> constructively.
>
> Let me just go on record to say I agree. My email referred to my original
> question, not to Aviram's answer.
>
>
> Shachar
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: OT: looking for a job

[Michael Tewner]

I understand your dislike for Social Networks, but as a hiring manager at
my current position, the first thing I did was try to find you on LinkedIn.
Not having a LinkedIn profile is going to make it unnecessarily more
difficult to find a position. You don't need to post anything, you don't
need to read anyone's else's posts; I do highly recommend, though, that you
have a well thought-out (and updated) profile on LinkedIn.


On Wed, Jan 12, 2022 at 1:40 PM Maayan Eshed  wrote:

> Hi Didi and Micha
> Your reply is kind and valid. And you made RedHat sound like a good
> workplace. I remember them fondly so I don't mind (:
>
> I guess I asked about LinkedIn not just to make sure its not a PR/HR waste
> of time nowadays, but also because of an inherent dislike for social
> networks.
> If non of the offers this list has suggested will work out, I'll reopen
> the account there with less reluctance.
>
> Cordial thank you all who has already sent offers.
> I'm going through them and considering and slowly replying.
>
> You are all much appreciated, it makes it actually nice to be back (:
>
> Ma'ayan
>
>
> On Wed, Jan 12, 2022 at 11:55 AM Yedidyah Bar David 
> wrote:
>
>> Hi Maayan,
>>
>> Not sure why you think you must choose between posting to this list
>> and searching LinkedIn.
>> Why not both?
>>
>> I am by no means a LinikedIn fan, but it's definitely a real thing,
>> and I wouldn't be surprised if I
>> heard that tens of percents of all tech job assignments in Israel are
>> through/thanks to it. I have
>> absolutely no idea about real numbers and/or deeper implications (such
>> as job retention when
>> through LinkedIn vs otherwise, etc.).
>>
>> I personally work for Red Hat, for 8+ years now. No idea if we have
>> jobs that can suit
>> you, but you are welcome to have a look. The Israeli office has ~ 500
>> people now and is
>> growing quite quickly.
>>
>> Incidentally, I also got this job thanks to linkedin - I noticed there
>> that some old acquaintance
>> moved to Red Hat and thought it might be a good idea for me as well...
>>
>> To the rest of the list: I hope this doesn't sound like an
>> advertisement for Red Hat. I
>> considered replying in private and decided it's ok as-is. I hope that's
>> ok...
>>
>> Good luck and best regards,
>> --
>> Didi
>>
>> On Tue, Jan 11, 2022 at 2:55 PM Maayan Eshed 
>> wrote:
>> >
>> > Hello guys and girls
>> > I apoiogize if this isn't the place for it, but I've been offline for a
>> long time, and this seems to be the only israeli-tech-list still active in
>> my mailbox. You are more than wellcome to redirect me to a propper channle
>> (is LinkedIn a real thing?)
>> >
>> > As the headline says - i'm in the market for a job. Been happily doing
>> non-tech stuff for the last few years, but with Obiquitus Omicron, here I
>> am. So:
>> >
>> > C.V will be sent per request, here is my general direction, both ways:
>> >
>> > Desired job includes mainly getting paid for being useful without
>> catching COVID (I'm at risk if I catch it.)
>> > I would like to do something that I think is cool, but thats really
>> just a wish and not a demand.
>> > Anything from a short gig to a full time long term at something you
>> teach me from scratch may be fine.
>> >
>> > Skills: nothing unusual:
>> > I can Bash, I can Vi.
>> > git, Apache and SQL are no strangers though may need some reminding.
>> > I can install stuff (OS's, servers, stuff) I can even uninstall stuff
>> sometimes (;
>> > I have in my past academic programing courses which I enjoyed but never
>> deployed on a job.
>> > I've been a linux user since the late 90's both for work and personal
>> purposes.
>> > I have a general understanding of how the internet was said to work
>> before street lamp posts started double as amazon-anywhere spyware hotspots
>> (generic term, not updated on their trademarks and specks).
>> >
>> > Am I embarrasing myself right now? Probably (:
>> > But I think you get the idea.
>> > Old Knowledge, but I can and like to learn and expand. Especially if
>> you teach well and pay well for it.
>> >
>> > I currently live in the north, I have a car and am not afraid to use it.
>> > Would rather not be obligated to be exposed to offices at all, but
>> would sit with careful and vaccinated bunch in a not-stuffy place, with
>> masks fully on. Maybe. Depends.
>> >
>> > Thanx for reading, thanx for linuxing, lemme know if you have something
>> relevant.
>> > Cheers
>> > Ma'ayan.
>> >
>> >
>> > ___
>> > Linux-il mailing list
>> > Linux-il@cs.huji.ac.il
>> > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: UGLY OFFTOPIC (Re: Fwd: Weird 'free' output)

[Michael Tewner]

I don't get it - Why shouldn't even a convicted criminal be able to answer
a question about Linux FREE(1)   ?

On Tue, May 4, 2021 at 10:29 PM Omer Zak  wrote:

> May I suggest that Diego Iastrubni be removed from this mailing list
> due to potential future disruption of public peace by asking for
> removal of people, who have been framed by powerful business
> competitors?
>
> --- Omer Zak
>
>
> On Tue, 2021-05-04 at 22:06 +0300, Shay Gover wrote:
> > Please do not assume that you can speak for the community based on an
> > article at Ynet.
> > There is no verdict in that case, not even a complaint (Checked on
> > Nevo now). Just a rumor and someone wealthy enough to post it on
> > Ynet.
> >
> >
> > -- Forwarded message -
> > From: Ori Idan 
> > Date: Tue, May 4, 2021 at 9:49 PM
> > Subject: Re: Weird 'free' output
> > To: Diego Iastrubni 
> > Cc: IGLU Mailing list 
> >
> >
> > Sorry, I am not a convicted criminal.
> > If you believe what is written in Yediot, that is your problem.
> >
> > --
> > Ori Idan CEO Helicon Books
> > http://www.heliconbooks.com
> >
> >
> >
> >
> >
> > On Tue, May 4, 2021 at 9:21 PM Diego Iastrubni 
> > wrote:
> > > Ori,
> > >
> > > You are not welcome here. Please unsubscribe.
> > >
> > > Admins - please remove this convicted criminal from this list. This
> > > man is a stain on our community.
> > >
> > >
> > >
> > > On Tue, May 4, 2021, 7:53 PM Ori Idan  wrote:
> > > > Note that Linux tries to use available memory for cache, that is
> > > > why free memory seems small.
> --
> Philip Machanick: "caution: if you write code like this, immediately
> after you are fired the person assigned to maintaining your code after
> you leave will resign"
> My own blog is at https://tddpirate.zak.co.il/
>
> My opinions, as expressed in this E-mail message, are mine alone.
> They do not represent the official policy of any organization with
> which I may be affiliated in any way.
> WARNING TO SPAMMERS:  at https://www.zak.co.il/spamwarning.html
>
>
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: New Modem Router Recommendations?

[Michael Tewner]

In addition to everything Yuval said, especially about putting the modem
into "bridge" mode -
OpenWRT is a great choice. Alternately, I've been using a Ubiquiti
EdgeRouter-X to do PPPoE. The ER-X is a ~200 NIS Gigabit router with
integrated switch chip. I love these little Ubiquiti devices!
DataSheet: https://dl.ubnt.com/datasheets/edgemax/EdgeRouter_X_DS.pdf
-mike


On Thu, May 21, 2020 at 7:21 PM Yuval Adam <_...@yuv.al> wrote:

> Definitely the TP-Link, they have great hardware and that device works
> great as an xDSL modem.
>
> Furthermore, D-Link devices tend to run on outdated kernels.
>
>
> Put the TP-Link in bridge mode to minimize attack surface, use it just as
> a dumb modem, and put a proper OpenWrt box behind it.
>
>
> On 5/21/20 6:59 PM, vordoo wrote:
>
> Hi,
>
>
> Think I'm down to: TP-Link TD-W9970 vs D-Link DSL-224. Any
> recommendations/thoughts/war-story's are highly appreciated. Sadly they
> both do not support dd-wrt or open-wrt, it looks like no ADSL modem does
> these days, so that will need an extra box.
>
>
> Thanks!
>
>
>
> ___
> Linux-il mailing 
> listlinux...@cs.huji.ac.ilhttp://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: strange ping and traceroute results

[Michael Tewner]

Heh - You _learn_ that Anycast isn't good for TCP, but LinkedIn proved
differently. Their website uses TCP (obviously), works almost always, and
gracefully recovers when Anycast throws a curve.

There's a great interview on Packet Pushers with LinkedIn Global
Engineering:

Packet Pushers: Show 286: Busting Anycast TCP Myths
http://packetpushers.net/podcast/podcasts/show-286-busting-anycast-tcp-myths/

...and a blog post:
https://engineering.linkedin.com/network-performance/tcp-over-ip-anycast-pipe-dream-or-reality

-Mike Tewner



On Fri, Nov 25, 2016 at 12:14 AM, Amos Shapira 
wrote:

> Anycast is not suitable for TCP.
> It IS fantastic for DNS (which uses UDP), which is the first thing a
> client does most of the time to find the server.
> Akamai control server groups by allocating per-customer per-object host
> names, then these can be resolved using their very highly customised DNS
> servers to the right server (also taking into account dynamic changes like
> server cluster load or failure).
> Since DNS uses UDP and the traffic consists on one packet in each
> direction, Anycast is ideal for that scenario.
> The actual content transfer (e.g. move streams, which is where I with
> Akamai for stan.com.au) doesn't use Anycast.
>
> On 24 November 2016 at 04:06, Shachar Shemesh  wrote:
>
>> On 22/11/16 02:19, Amos Shapira wrote:
>>
>> On 21 November 2016 at 18:20, Shachar Shemesh 
>> wrote:
>>
>>> The DNS resolving google.com guesses your gegraphical location, and
>>> gives you an answer that is nearest where you are. If you use another DNS
>>> to query the domain, you will get a different IP:
>>>
>>
>> It's not always a "guess your geographic location". The smarter ones use
>> Anycast to advertise the same IP address from multiple locations on the
>> Internet and let BGP do its magic to route your packets to the nearest
>> server, taking into account any congestion or other transient connection
>> speed changes. This is how Google's DNS 8.8.8.8 works, or Akamai's CDN. The
>> nice thing about it is that you get optimal response even at the host
>> resolution stage. The DNS server can then take its knowledge of the DNS
>> query source address into account when it decides which IP address to
>> resolve to.
>>
>> It's pretty neat, personally I find it a fascinating trick:
>> https://en.wikipedia.org/wiki/Anycast
>>
>> It is, quite fascinating. It is not, unfortunately, as useful as you make
>> it out to be. Neither Google nor Akamai use it for web traffic, for example.
>>
>> The reason is twofold. First, anycast is poorly equipted to handle TCP
>> connections. There is a (remote) possibility that the handler of your IP
>> would change mid-request, which would not play nice with your connection.
>>
>> The second, more pertinent, reason is that , at least for Akamai, they
>> would like to be able to control which server you reach when you make a
>> request. The would like to be able to re-route your in case something bad
>> happens to that server. DNS TTL can be set as low as 30 or 60 seconds. BGP
>> routes have much longer settle times.
>>
>> Shachar
>>
>
>
>
> --
> 
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

[JOB] Scene53 is Looking for a Junior DevOps Engineer

[Michael Tewner]

Hi Guys!

Our company, Scene53, is looking for a Junior DevOps engineer.
Specifically, we're looking to hire a bright, challenge-driven, Linux user
to join our small team; We'll be happy to bring you up-to-speed on the
world of DevOps (for various definitions of "DevOps")!

Besides the standard DevOps fare, our team is responsible for all
infrastructure (Production and Dev), networking, and designing and
implementing new technical solutions as required. We are often involved
with working with the developers to tailor solutions which are scalable,
resilient, and self-healing.

Scene53 is an established startup in Tel Aviv (near Nachalat Binyamin); I
like to call it "A Silicon Valley Startup in Tel Aviv". We won TechCrunch
Disrupt a few years back for our Virtual Bar "Shaker" and have since
pivot'ed into other markets. We have a friendly and enjoyable work
environment. There are dogs, and lots of 'em, so keep that in mind if
you're interested in joining us!

Full disclosure: Being a small start-up, our team is also responsible for
all of the company's Windows-based infrastructure, including Active
Directory and desktop PC's. There will be a minimal amount of helping out
the other teams with PC issues, troubleshooting, and maintenance.

If you have a sincere, passionate desire to learn about the world of CI/CD,
NoSQL, Amazon cloud, and infrastructure, this is for you!

For anyone interested, please send over a CV and a short introduction!

Thank you, all!
-Mike
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: OT: SSL certificates

[Michael Tewner]

As far as I know, letsencrypt.org certs are only good for 90 days, and
you'll want to have a script automatically renew and replace the cert in
the background all the time.
I like https://www.namecheap.com , as it helps you find the cheapest
between different CA's.
CACert is worthy of this community's support, but as you mentioned, their
certs aren't included in any browsers or OS's.



On Tue, Mar 8, 2016 at 7:24 AM, Baruch Siach  wrote:

> Hi Gabor,
>
> On Tue, Mar 08, 2016 at 07:05:03AM +0200, Gabor Szabo wrote:
> > A found plenty of companies offering SSL certificates. One of them
> > https://www.ssl.com/
> > that was recommended by the domain registrar I am using had
> > $177 / year for the first 3 hostname and then $49 / year for each
> > additional hostname and $129/year for each wildcard domain.
> >
> > Is that a reasonable price? Any suggestions?
>
> How about https://letsencrypt.org/ free certs?
>
> baruch
>
> --
>  http://baruch.siach.name/blog/  ~. .~   Tk Open
> Systems
> =}ooO--U--Ooo{=
>- bar...@tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Seeking Recommendations for a Good Outgoing SMTP Service

[Michael Tewner]

I can recommend SendGrid - They have Free Tier, Pay-as-you-go Lite Tiers,
and low-cost regular Tiers. We've been using them for a bunch of years,
now. They have great support; I had a Romania-based support guy help me
this morning, Israel time, who didn't just tell me call us later.

-Mike


On Tue, Jul 28, 2015 at 5:14 PM, Shlomi Fish shlo...@gmail.com wrote:

 Hi Rabin,

 On Tue, Jul 28, 2015 at 4:55 PM, Rabin Yasharzadehe ra...@rabin.io
 wrote:

 If you ask for JUST for a smtp server to send out email, i don't see any
 reason why not to setup it your self, it is not that complicated. And from
 my experience, I rarely need to do any configuration/changes after the
 first setup.

 You can try using a VM/Droplet on DigitalOcean to test it,
 The only problem I can think of, is the IP reputation in spam list.


 Like we say in Hebrew, he who proliferates possessions, proliferates
 worries.. Assuming I had the technical know-how for how to setup a
 reliable SMTP server on a VM of my own (which I don't really), I will then
 have to maintain both the VM and the SMTP server, install updates, etc. And
 I'm not good at doing stuff like that.

 I asked for a paid SMTP service and that's what I want.

 Regards,

 — Shlomi Fish




 --
 --
 Shlomi Fish http://www.shlomifish.org/

 Chuck Norris helps the gods that help themselves.

 Please reply to list if it's a mailing list post - http://shlom.in/reply .

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Something is injecting malware into my HTTP traffic

[Michael Tewner]

I'm seeing the same thing, that is, the downloaded files start to differ at
byte #4101

   - The HTTPS version downloaded quite fast on my 5Mbps connection. The
   HTTP one is taking forever, quite literally; it's stalled
   - I've tried adding Cache-Control: no-cache and Pragma: no-cache,
   but still getting the alternate file.

tcptraceroute shows that the HTTP is most probably being cached; First
using HTTP, then using HTTPS:

MacBook-Air:tmp $ tcptraceroute nodejs.org 80
Selected device en0, address 192.168.1.107, port 57585 for outgoing packets
Tracing the path to nodejs.org (165.225.133.150) on TCP port 80 (http), 30
hops max
 1  192.168.1.1  4.144 ms  1.739 ms  1.139 ms
 2  lo10.cab2.hfa.nv.net.il (212.143.205.233)  15.141 ms  12.162 ms  11.659
ms
 3  core1-cab1-hfa.hfa.nv.net.il (212.143.207.16)  15.204 ms  13.932 ms
 12.857 ms
 4  gw2-0-2-0-1-core1.hfa.nv.net.il (212.143.7.25)  11.599 ms  12.655 ms
 16.048 ms
 5  165.225.133.150 [open]  157.406 ms  157.195 ms  168.028 ms

MacBook-Air:tmp $ tcptraceroute nodejs.org 443
Selected device en0, address 192.168.1.107, port 57586 for outgoing packets
Tracing the path to nodejs.org (165.225.133.150) on TCP port 443 (https),
30 hops max
 1  192.168.1.1  3.398 ms  1.755 ms  1.230 ms
 2  lo10.cab2.hfa.nv.net.il (212.143.205.233)  11.704 ms  16.318 ms  11.138
ms
 3  core1-cab1-hfa.hfa.nv.net.il (212.143.207.16)  14.981 ms  13.580 ms
 17.064 ms
 4  gw2-0-3-0-0-core1.hfa.nv.net.il (212.143.7.53)  12.450 ms  14.393 ms
 10.653 ms
 5  10.10.40.1  12.454 ms  18.778 ms  14.951 ms
 6  gw2-fra-0-3-0-3-200-gw2.hfa.nv.net.il (212.143.12.12)  67.772 ms
 68.099 ms  110.025 ms
 7  10.10.70.1  70.582 ms  76.711 ms  66.120 ms
 8  xe-4-3-2-302.fra23.ip4.gtt.net (77.67.94.5)  67.824 ms  66.694 ms
 97.753 ms
 9  xe-1-2-3.was14.ip4.gtt.net (89.149.180.198)  154.917 ms  167.244 ms
 168.940 ms
10  internap-gw.ip4.gtt.net (77.67.69.254)  164.903 ms  175.436 ms  158.257
ms
11  border10.pc2-bbnet2.wdc002.pnap.net (216.52.127.73)  156.724 ms
 153.793 ms  164.227 ms
12  joyent-3.border10.wdc002.pnap.net (64.94.31.202)  166.082 ms  163.434
ms  163.415 ms
13  165.225.143.105  163.860 ms  169.177 ms  154.384 ms
14  165.225.143.15  178.280 ms  152.575 ms  159.958 ms
15  165.225.133.150 [open]  157.337 ms  162.811 ms  164.262 ms



On Sat, Mar 21, 2015 at 7:48 PM, E.S. Rosenberg esr+linux...@g.jct.ac.il
wrote:

 Depending on the version of windows and it's network environment you
 freshly installed rootkits could be likely, but that is OT here.

 Note that different ISP in Israel is a fairly relative statement since
 there are basically just a few major players who own a bunch of the smaller
 ISPs and could have caching proxies on their international lines...

 Did you traceroute the connection both from working and non-working
 settings?

 Regards,
 Eliyahu - אליהו

 2015-03-21 8:30 GMT+02:00 Amos Shapira amos.shap...@gmail.com:

 Just speculating, but could it be that your ISP uses a caching
 transparent proxy (which would explain why it doesn't happen on SSL) and
 its cache got corrupted?
 The other ISP case could be explained if it's actually
 upstream/downstream from your ISP, or they share a proxy cache for other
 reasons.


 On 21 March 2015 at 04:07, Roman Ovseitsev rom...@gmail.com wrote:

 Please forgive the slight off-topic, but I am experiencing a rather
 strange issue while downloading a certain file over HTTP.

 Instead of getting node.js installer as expected from here
 http://nodejs.org/dist/v0.12.0/node-v0.12.0-x86.msi I am receiving a
 completely different executable - an installer for Elcomsoft's Advanced EFS
 Password Recovery whatever that is.

 Both files are exactly the same size but SHA sums obviously don't match.

 SSL version of the link -
 https://nodejs.org/dist/v0.12.0/node-v0.12.0-x86.msi works as expected.
 i.e. downloads the correct node.js installer.


 I have verified this on three different machines running Fedora, CentOS,
 and Windows. None of these machines ever exchanged any files or used
 anything else but the default repos. In fact the windows machine is a 13
 years old pc with a freshly installed OS. So presumably that dismisses any
 possibility of rootkits.

 It doesn't seems to be due to my router or ISP either. I am getting the
 wrong executable on two of my neighbours' Wi-Fi networks and at least one
 of them seems to be using a different ISP.
 However it doesn't happen on another Israeli nor a couple of US and UK
 servers I've tried so far.
 I am not using any proxies either.

 nodejs.org domain on all of the above resolves to the same IP.


 What's going on?
 Could be that the ISPs are the culprit?

 Considering that the application is relatively popular and I am the only
 one experiencing this issue it doesn't seem to be the case of nodejs.org
 server doing this on purpose (knowingly or not).

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: OT: Invoice sites in English

[Michael Tewner]

Does this do what you want? I know a few people on the team there:
https://www.invoiceninja.com/about

On Thu, Jan 15, 2015 at 1:12 AM, Geoff Shang ge...@quitelikely.com wrote:

 Hi,

 Please forgive the offtopic post, but I figure someone here would know.

 I was recently told by my new accountant that I need to provide invoices
 ina form the Israeli government will approve, and not as text files as I've
 been doing so far (hey I'm a traditionalist).

 They pointed me to iCount.co.il and greenInvoice.co.il.  Unfortunately
 both of these sites are in Hebrew, and while GreenInvoice at least will
 allow me to produce invoices in English, the UI isn't and my Hebrew isn't
 good enough to use it.

 So I wondered if anyone else knew of somewhere that fits the Israeli
 government's requirements whilst having an English UI.

 Please feel free to reply off-list.

 Cheers,
 Geoff.


 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: [YBA] High-end DSL modem

[Michael Tewner]

Shavua Tov!

This may not be in the spirit of Linux-IL, but I was able to solve a lot of
DSL annoyances by moving our small office to a Cisco 800-series ADSL+WiFi
(provided as part of their BizNet service). The router performs rock-solid
with uptime measure in years (assuming you never update it...) and routing
works exactly as you'd expect, no-nonsense. If you don't have someone
on-site with Cisco experience, Bezeq will manage it for you as part of the
BizNet service (which also has faster upload-speed options than otherwise
available).
I'm not saying that this is an equivalent solution to DD-WRT (especially as
concerning Free as in Beer/Speech), but if you have a client experiencing
networking issues, as one professional to another, this may be a possible
solution.

Please don't throw any open-source tomatoes.
-Mike


On Sun, Dec 8, 2013 at 1:09 AM, E.S. Rosenberg esr+linux...@g.jct.ac.ilwrote:

 What do you mean by in-progress support? Recent routers that are
 supported generally get the latest builds too...

 I used to have a 841ND running OpenWRT until I bricked it with a
 botched upgrade and though it has recovery options as documented in
 the wiki I never had the time so I bought a 1043ND, with which I was
 pretty happy with stock so so far I have only made sure it's stock is
 up to date and not yet upgraded to openwrt.

 The 740N also supports OpenWRT and seemingly has some pretty cool
 features (for it's really low price) if your are willing to solder,
 but due to low memory you may not be able to have a Web interface with
 OpenWRT (at least not on initial flash, you can install it
 afterwards).

 Those are the models I have touched (and are widely available here in
 Israel), have a look here:
 http://wiki.openwrt.org/toh/tp-link/start

 Regards,
 Eliyahu - אליהו


 2013/12/8 Jonathan Ben Avraham y...@tkos.co.il:
  Hi Eliyahu,
  Do you have a model number? The only one I could find was the TD-W8970
 with
  in-progress OpenWRT support.
  Thanks,
 
   - yba
 
 
  On Sun, 8 Dec 2013, E.S. Rosenberg wrote:
 
  Date: Sun, 8 Dec 2013 00:02:14 +0200
  From: E.S. Rosenberg esr+linux...@g.jct.ac.il
  To: Jonathan Ben Avraham y...@tkos.co.il
  Cc: ILUG linux-il@cs.huji.ac.il
  Subject: Re: [YBA] High-end DSL modem
 
 
  Use a simple 1-port ethernet modem with a decent router attached to
  it, for instance a TP-Link which is sold in most computer stores here
  and most models have support ranging from decent to excellent of
  openwrt.
 
  Regards,
  Eliyahu - אליהו
 
  2013/12/7 Jonathan Ben Avraham y...@tkos.co.il:
 
  Dear colleagues,
  I am looking for a good quality DSL modem or WAP with DSL modem that
  supports OpenWRT in Israel. Any suggestions? Price is not an issue.
 
  The problem that I am trying to solve is PPTP client connections from
  behind
  the modem being blocked because the cheaper DSL modem that I am using
  (D-Link DSL-2500U Russian version) does not seem to be able to forward
  GRE
  (only TCP, USD or both) in virtual server mode and cannot NAT GRE in
  DMZ
  mode.
  Shavua tov and TIA,
 
   - yba
 
 
  --
   EE 77 7F 30 4A 64 2E C5  83 5F E7 49 A6 82 29 BA~. .~   Tk Open
  Systems
 
 
 =}ooO--U--Ooo{=
   - y...@tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -
 
  ___
  Linux-il mailing list
  Linux-il@cs.huji.ac.il
  http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
 
 
 
  --
   EE 77 7F 30 4A 64 2E C5  83 5F E7 49 A6 82 29 BA~. .~   Tk Open
 Systems
 
 =}ooO--U--Ooo{=
   - y...@tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: [OT] Self-employed's office

[Michael Tewner]

Can you please share the helpful responses?
-Mike

On Thursday, September 29, 2011, Daniel Shahaf d...@daniel.shahaf.name
wrote:
 I got a few replies off-list, one of them in particular seems very
 promising; thanks to all who responded.

 Daniel Shahaf wrote on Sun, Sep 25, 2011 at 04:44:20 +0300:
 [ Hopefully this isn't too off-topic for this list. ]

 I'm located in the Tel-Aviv area.  These days I'm working remotely
 (under several different hats), but working from home is getting a bit
 long in the tooth, so I've been wondering what other options I have.

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: wiping files

[Michael Tewner]

2011/2/9 shimi linux...@shimi.net


 On Wed, Feb 9, 2011 at 9:50 PM, Uri Even-Chen u...@speedy.net wrote:

 Thank you.

 Wiping files is part of pretty good privacy (PGP) - if you want
 privacy you need to wipe your deleted files.



 I would trust having them all at encrypted-state at all times (and avoiding 
 using swap) to be a must better approach.

 I couldn't care less if someone takes my random data which he has no key for, 
 and read it for fun... I suspect this is not too different than reading 
 /dev/random.

 -- Shimi


That's the concept for ZFS secure deletion. As per
http://www.c0t0d0s0.org/archives/5793-Secure-Deletion-with-ZFS.html :
snip
 Use encryption and when you want to delete the data throw away the
matching key.
snip
And this is exactly the way, secure deletion will be done with ZFS.
It´s done by encryption. You will be able to define an encryption key
by dataset and when you want to delete a dataset securely just throw a
way the key. Remember that creating a dataset is as easy as creating a
directory in ZFS. ZFS Crypto will be the solution for the secure
delete challenge.



 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Networking: How to add another router

[Michael Tewner]

Hi -
Shimi's solution will work - use a cross-over cable, though, in order to
connect the switches together.

Hypothetically, you should be able to connect multiple computers to the same
network cable - that is, wire 2 connectors, in series, at one end. This
would give you a hub on that segment, and the network cards should manage
the collisions themselves. I wouldn't recommend this, though, and I present
it strictly as a thought experiment.

-Mike


2011/2/13 shimi linux...@shimi.net


 On Sun, Feb 13, 2011 at 6:47 PM, Geoff Shang ge...@quitelikely.comwrote:

 Hi,

 I find myself with the need to connect 5 ethernet devices to 4 available
 ports.

 I'm running an ADSL modem/router with a 192.168.2.x network (for
 historical reasons) and have allocated static addresses to all of the static
 devices, and a pool of DHCP addresses for devices which ask for it.

 Right now the fifth device is running on wireless but I want to plug it in
 if I can.

 A quick Google tells me that there's no kind of double adaptor available
 to help solve my problem.  The closest I've seen is a way to send two 10/100
 mbps Ethernet feeds down the one ethernet cable, but you still need two
 ports at each end.  I only have one so that's no good.

 Assuming that there is no such double adaptor device that I can use to get
 me a fifth port, the only solution I can see is to drag out the Edimax
 router I have here which is no longer being used.

 Assuming I do this, I'm wondering how to configure it.

 I'm guessing that it will actually have to route.  I can't see myself
 doing bridging because there'll have to be two devices on it (the router
 will need to take up one of the 4 ports on the modem/router so this then
 leaves 5 devices and only 3 other ports,).

 Presumably I need to configure the WAN port so that it connects to the
 existing network.  Do I need to set aside a subnet of the 192.168.2.x
 network specifically for the second router, or can I just enlarge the entire
 network and have it all just cope, with the right packets going to the right
 places?

 My preference would be to be able to keep it all as one big network, as
 I'd rather not have to reallocate static addresses if I can help it, which
 I'm guessing I'd have to do if I had to make the second router have its own
 subnet of the 192.168.2.x network.

 Netmasks and such tend to confuse me a little and I'm not sure what I
 should be doing here, so any suggestions would be helpful.


 Take the un-used router; Go into its configuration; Disable the Internal
 DHCP server; Verify that the router does not have an IP address which
 already belongs to any other device in your LAN (if it does, change it to
 something else. best something on a different netmask altogether...);

 Then, disconnect one of the devices on your currently active 4 port router;
 Connect a cable between the now vacant port to one of the LAN (note: NOT the
 WAN!) ports of the un-used router. Then you can use the extra vacant ports
 of the previously un-used router as an extension to your existing network.
 (The 4 ports in any common router are actually a switch...)

 Good luck,

 -- Shimi


 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Networking: How to add another router

[Michael Tewner]

On Sun, Feb 13, 2011 at 9:28 PM, Michael Tewner tew...@gmail.com wrote:

 Hi -
 Shimi's solution will work - use a cross-over cable, though, in order to
 connect the switches together.

 Hypothetically, you should be able to connect multiple computers to the
 same network cable - that is, wire 2 connectors, in series, at one end. This
 would give you a hub on that segment, and the network cards should manage
 the collisions themselves. I wouldn't recommend this, though, and I present
 it strictly as a thought experiment.

 -Mike

 (although, the 2 computers on the same cable probably won't be able to talk
to each other :-) )


 2011/2/13 shimi linux...@shimi.net


 On Sun, Feb 13, 2011 at 6:47 PM, Geoff Shang ge...@quitelikely.comwrote:

 Hi,

 I find myself with the need to connect 5 ethernet devices to 4 available
 ports.

 I'm running an ADSL modem/router with a 192.168.2.x network (for
 historical reasons) and have allocated static addresses to all of the static
 devices, and a pool of DHCP addresses for devices which ask for it.

 Right now the fifth device is running on wireless but I want to plug it
 in if I can.

 A quick Google tells me that there's no kind of double adaptor available
 to help solve my problem.  The closest I've seen is a way to send two 10/100
 mbps Ethernet feeds down the one ethernet cable, but you still need two
 ports at each end.  I only have one so that's no good.

 Assuming that there is no such double adaptor device that I can use to
 get me a fifth port, the only solution I can see is to drag out the Edimax
 router I have here which is no longer being used.

 Assuming I do this, I'm wondering how to configure it.

 I'm guessing that it will actually have to route.  I can't see myself
 doing bridging because there'll have to be two devices on it (the router
 will need to take up one of the 4 ports on the modem/router so this then
 leaves 5 devices and only 3 other ports,).

 Presumably I need to configure the WAN port so that it connects to the
 existing network.  Do I need to set aside a subnet of the 192.168.2.x
 network specifically for the second router, or can I just enlarge the entire
 network and have it all just cope, with the right packets going to the right
 places?

 My preference would be to be able to keep it all as one big network, as
 I'd rather not have to reallocate static addresses if I can help it, which
 I'm guessing I'd have to do if I had to make the second router have its own
 subnet of the 192.168.2.x network.

 Netmasks and such tend to confuse me a little and I'm not sure what I
 should be doing here, so any suggestions would be helpful.


 Take the un-used router; Go into its configuration; Disable the Internal
 DHCP server; Verify that the router does not have an IP address which
 already belongs to any other device in your LAN (if it does, change it to
 something else. best something on a different netmask altogether...);

 Then, disconnect one of the devices on your currently active 4 port
 router; Connect a cable between the now vacant port to one of the LAN (note:
 NOT the WAN!) ports of the un-used router. Then you can use the extra vacant
 ports of the previously un-used router as an extension to your existing
 network. (The 4 ports in any common router are actually a switch...)

 Good luck,

 -- Shimi


 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Linux firewall vs appliance

[Michael Tewner]

2011/1/24 Hetz Ben Hamo het...@gmail.com

 Hi,

 I was wondering about the following scenario:

 I have 2 lines coming from 2 carriers, each line is 2 Gbit internet
 connection. They go to a router, and then there should be a firewall..

 Here I have 2 choices:

 1. Take a Cisco/Fortigate/Juniper/Whatever box, throw it in, configure it,
 and be done with it, while I need to pay some yearly license for updates.
 2. Stick some serious Linux server that it will become the firewall.

 My question: based on whats available for Linux today (iptables, APF, BFD,
 you-name-it..) - could Linux be trusted as a very good firewall for data
 center (as an example)? (I know that Checkpoint is using Linux, but they
 wrote some additional closed source modules, and I haven't heard any
 alternatives of those modules in open source version)

 I have read articles with people swear that Linux box should suite it while
 other highly recommended the appliances..

 Whats your opinion?
 Hetz


 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


1. If you ever plan on hitting 2 Gbit on a Cisco, you'll need some
heavy-duty firewalls (
http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html )
running you  $20,000
2. On the other hand, I don't know how much you're paying for 2 2Gbit links,
so heavy-duty firewalls might be just a drop in the bucket...
3. I would recommend an appropriately scaled firewall appliance
4. If you plan to go with Linux, make sure IPtables can actually handle that
much bandwidth.

-Mike
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Linux firewall vs appliance

[Michael Tewner]

On Mon, Jan 24, 2011 at 10:19 PM, Michael Tewner tew...@gmail.com wrote:

 2011/1/24 Hetz Ben Hamo het...@gmail.com

 Hi,

 I was wondering about the following scenario:

 I have 2 lines coming from 2 carriers, each line is 2 Gbit internet
 connection. They go to a router, and then there should be a firewall..

 Here I have 2 choices:

 1. Take a Cisco/Fortigate/Juniper/Whatever box, throw it in, configure it,
 and be done with it, while I need to pay some yearly license for updates.
 2. Stick some serious Linux server that it will become the firewall.

 My question: based on whats available for Linux today (iptables, APF, BFD,
 you-name-it..) - could Linux be trusted as a very good firewall for data
 center (as an example)? (I know that Checkpoint is using Linux, but they
 wrote some additional closed source modules, and I haven't heard any
 alternatives of those modules in open source version)

 I have read articles with people swear that Linux box should suite it
 while other highly recommended the appliances..

 Whats your opinion?
 Hetz


 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


 1. If you ever plan on hitting 2 Gbit on a Cisco, you'll need some
 heavy-duty firewalls (
 http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html )
 running you  $20,000
 2. On the other hand, I don't know how much you're paying for 2 2Gbit
 links, so heavy-duty firewalls might be just a drop in the bucket...
 3. I would recommend an appropriately scaled firewall appliance
 4. If you plan to go with Linux, make sure IPtables can actually handle
 that much bandwidth.

 -Mike

Also -
Many firewall appliances come with Active/Active and Active/Passive
configurations. If you roll-your-own linux firewall, you'll need to mess
with HSRP, VRRP, syncing configurations, syncing open connections,
monitoring your connections, and a myriad of other things which a company
who specializes in this sort of thing has already solved.
-Mike
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Linux firewall vs appliance

[Michael Tewner]

On Tue, Jan 25, 2011 at 12:46 AM, Hetz Ben Hamo het...@gmail.com wrote:

 Hi Michael,

 1. If you ever plan on hitting 2 Gbit on a Cisco, you'll need some
 heavy-duty firewalls (
 http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html )
 running you  $20,000


 4 Gbit, not 2 :)

Sorry - Assumed those were 2 links for failover.



 2. On the other hand, I don't know how much you're paying for 2 2Gbit
 links, so heavy-duty firewalls might be just a drop in the bucket...


 $20k a drop in a bucket? how much you really think the cost of 2X2Gbit
 cost? not that much ;)

2X2Gbit _reliable_ symmetric bandwidth from a Tier IV datacenter? That would
cover the $20k within 2-3 months - at least in my experience. I would sooner
get the datacenter to give me 2 separate IP downlinks , each with the
required bandwidth, from their routing mesh (covering the same IP space) and
have them manage the failover for me (at least on the uplink side. Some
switching magic required here, again, by the dacenter). You'll end up with
the redundancy of the datacenter (who probably have multiple carriers
through opposite ends of the building) and paying for just one link instead
of two. Again, don't reinvent the wheel.



 3. I would recommend an appropriately scaled firewall appliance


 There used to be a time where you could buy a firewall, do some updated
 periodically and be done with it. Today it's more about contracts. You buy
 the boxes, you pay a contractor to do the job for you (if you don't know how
 to do this), and then there's this yearly update service which costs you an
 arm and a leg and if something goes wrong with the vendor, you're left with
 an expensive brick. See my post here http://benhamo.org/wp/?p=2256 for
 example.

I work mostly with Cisco - It's pretty intuitive and upgrades are pretty
painless. While Cisco might not be as reliable (as far as vendor support)
as Linux, I have faith that Cisco will be around for at least the life of my
firewalls. Yes, again, you would want support contracts for the Cisco's,
but:
1. You might want to get RedHat/your-favorite-distribution support for
software stability of such a critical piece of your network
2. You would definitely need hardware support anyway on your Linux servers

4. If you plan to go with Linux, make sure IPtables can actually handle that
 much bandwidth.


 I will check that. I'll also check pfsense.


As we're already talking about closed-source Cisco FW's in this thread,
please don't lynch me for suggesting:
Solaris 11.
evangelism
1. Especially the new flows feature which will dedicate kernel resource to
specific flows - http://blogs.sun.com/JeffV/entry/virtual_networks
2. IPFilter was added in Solaris 10, and expanded in Solaris 11:
http://www.homepage.montana.edu/~unixuser/031705/create_solaris_ipf.html
3. Solaris comes with a built-in L3/L4 load balancer, should you need it:
http://www.oracle.com/technetwork/articles/servers-storage-admin/solaris11enetwork-186212.pdf
4. And finally, on the correct hardware - 10Gbit interfaces support
_controlled the CPU itself_.
/evangelism


 Also -
 Many firewall appliances come with Active/Active and Active/Passive
 configurations. If you roll-your-own linux firewall, you'll need to mess
 with
 HSRP, VRRP, syncing configurations, syncing open connections, monitoring
 your connections, and a myriad of other things which a company
 who specializes in this sort of thing has already solved.

 True, but when the cisco/other boxed solution costs $20K, it might be a
 better idea to look for alternatives, maybe a distribution which has this or
 a solution that is based on Linux and has this solution covered. 2 HP G6
 servers with dual Xeon costs about $6k which can handle this traffic easily,
 and if I add a contractor+solution costs, I could go about $10k, that 50%
 from Cisco offer..


Correct - The Open-Source solution is generally going to be less expensive.
But unless you get enterprise support (which you did not include in your
estimate), YOU will be providing the enterprise support. Make sure that
assuring 99.999% uptime to your customers is something you are able to
provide (if required/possible) and work out how much of *your* resources
will be taken up writing all those failover scripts, testing them Ad Nauseum
on your identical LAB environment, etc.

I'm not saying not to go with Linux - just offering alternatives. Good luck!



Hetz

 -Mike
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: small linux hardware

[Michael Tewner]

2011/1/10 Erez D erez0...@gmail.com

 I am looking for a linux hardware which would be small, low power and cheep

 I found the telit GE863-PRO (pdf:
 http://www.telit.com/module/infopool/download.php?id=725 )
 which is actually a gprs module + linux on arm9. it is 41.4x31.4x3.6 mm in
 size and i can get it in 50$ (in quantities)

 however as i do not need the gprs module, i thought i could find something
 smaller and cheaper...


 anyone knows of such a hardware ?

 thanks,
 erez.

 Have you looked into Gumstix?
http://www.gumstix.com/

-Mike
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: OT: PHP 32 bit numbers security issue

[Michael Tewner]

2011/1/5 shimi linux...@shimi.net


 On Wed, Jan 5, 2011 at 1:52 PM, shimi linux...@shimi.net wrote:


 It has something to do with the precision attempting algorithm of floating
 point numbers, and the way it is done on fpu87 in 32bit processors. It tries
 to get close to the number below a certain point which is impossible, and
 the algorithm does not check to see if it is not actually progressing in
 getting closer to the minimal precision error. Hence it's an infinite loop.

 Compiling with -mfpmath=sse will also solve the problem.


 And a more thorough explanation:

 http://gcc.gnu.org/bugzilla/show_bug.cgi?id=323#c109

  -- Shimi


Hi all -

A really great paper concerning floating point representation can be found
at http://docs.sun.com/source/806-3568/ncg_goldberg.html - What Every
Computer Scientist Should Know About Floating-Point Arithmetic

-Mike
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Apple Slim USB Keyboard

[Michael Tewner]

I have it set up.
Works great - Ubuntu got the volume keys set up automatically (after
selecting the keyboard type).
On the one I got (iDigital with the number pad), I often accidentally hit
the eject button, so I disabled it in Linux. I seem to remember a problem
with using the function keys, but I haven't used that computer in some
time...
The enter key is smaller than a standard keyboard - at least on mine. That
took some getting used to.

Keep in mind that as cool as they look, they keyboard feels different - I
still type slower and with more errors on my apple keyboard than on my
standard IBM keyboard.

Also notice that the smaller keyboard (without the number pad) has the
ctrl key *not* in the corner. That makes writing in terminals a tad weird
for me. The large keyboard doesn't have this problem.

-Mike

2010/10/14 Steve G. word...@gmail.com

 Out of the country for a while... Maybe someone else can try and report?

 THX


 On Wed, Oct 13, 2010 at 9:15 PM, Marc Volovic marcvolo...@me.com wrote:

 I have one - you are welcome to try.

 M

 On Oct 14, 2010, at 3:56 AM, Steve G. wrote:

 Has anyone successfully connected the Apple brushed aluminum keyboard (I
 am thinking the USB one, not the bluetooth) to a linux box?

 I tried it at an apple store, and liked the feel of the keys, but a search
 suggests the issue is iffy.

 Thanks,

 Z.
 --
 Check out my web site - www.words2u.net
  ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


  ---MAV
 Marc A Volovic marcvolo...@me.com
   +972-54-467-6764




 --
 Check out my web site - www.words2u.net

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Apple Slim USB Keyboard

[Michael Tewner]

Just to clear up the comment - I have both the large keyboard (connected to
Linux) and a small keyboard (BlueTooth, connected to a mac).

-MIke


On Thu, Oct 14, 2010 at 6:35 AM, Michael Tewner tew...@gmail.com wrote:

 I have it set up.
 Works great - Ubuntu got the volume keys set up automatically (after
 selecting the keyboard type).
 On the one I got (iDigital with the number pad), I often accidentally hit
 the eject button, so I disabled it in Linux. I seem to remember a problem
 with using the function keys, but I haven't used that computer in some
 time...
 The enter key is smaller than a standard keyboard - at least on mine. That
 took some getting used to.

 Keep in mind that as cool as they look, they keyboard feels different - I
 still type slower and with more errors on my apple keyboard than on my
 standard IBM keyboard.

 Also notice that the smaller keyboard (without the number pad) has the
 ctrl key *not* in the corner. That makes writing in terminals a tad weird
 for me. The large keyboard doesn't have this problem.

 -Mike

 2010/10/14 Steve G. word...@gmail.com

 Out of the country for a while... Maybe someone else can try and report?

 THX


 On Wed, Oct 13, 2010 at 9:15 PM, Marc Volovic marcvolo...@me.com wrote:

 I have one - you are welcome to try.

 M

 On Oct 14, 2010, at 3:56 AM, Steve G. wrote:

 Has anyone successfully connected the Apple brushed aluminum keyboard (I
 am thinking the USB one, not the bluetooth) to a linux box?

 I tried it at an apple store, and liked the feel of the keys, but a
 search suggests the issue is iffy.

 Thanks,

 Z.
 --
 Check out my web site - www.words2u.net
  ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


  ---MAV
 Marc A Volovic marcvolo...@me.com
   +972-54-467-6764




 --
 Check out my web site - www.words2u.net

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: CPU RAM in a storage box

[Michael Tewner]

Have you seen this?

http://www.backblaze.com/petabytes-on-a-budget-how-to-build-cheap-cloud-storage.html

At Backblaze, we provide unlimited storage to our customers for only $5 per
 month, so we had to figure out how to store hundreds of petabytes of
 customer data in a reliable, scalable way—and keep our costs low. After
 looking at several overpriced commercial solutions, we decided to build our
 own custom Backblaze Storage Pods: 67 terabyte 4U servers for $7,867.


Cute.

-Mike


2010/9/9 Hetz Ben Hamo het...@gmail.com

 Hi people,
 I'm planning to add some big storage solution to my VPS 
 businesshttp://hetz.biz.
 I did some checking and calculated the costs, and figured out that if I want
 to have a decent 12TB solution NAS box, it would be best if I would roll my
 own. (12 TB before all the RAID stuff, after that it would lot less). All
 other solutions are very expensive (example: IBM EXP 3000 costs here 6K nis
 without a single hard disk).

 I'm planning to use hardware based RAID card, minimal Linux distribution
 and have some offers like iSCSI, NFS, CIFS - the usual suspects.

 My question is: since I'll use hardware RAID card, which processor and how
 much RAM should I put in such a machine? Xeon is overkill IIRC.

 What do you suggest?

 Thanks and Shana Tova
 Hetz

 --
 my blog (hebrew): http://benhamo.org
 Skype: heunique
 MSN: hetz-b...@benhamo.org

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: platform for number crunching

[Michael Tewner]

Hi Shimon -

I would like to point out that (as Nadav did already) that perhaps (if this
is early enough in the development cycle), a GPU might be a good choice.
Even your *current* off-the-shelf graphics card might be faster that your
4-core CPU for certain types of computations. For only a few hundred
shekels, you can get a MUCH faster GPU, and for a few thousand shekels, you
can get a whole rack's worth of x86 compute power in a 1U case.
Perhaps you will save money now if you have someone who is familiar with
number crunching hardware take a look.

-MIke


On Wed, Jun 16, 2010 at 1:23 PM, Shimon Panfil i...@industrialphys.comwrote:


 Hi folks,
 I'm looking for affordable workstation for heavy number crunching, not
 x86-64 multicore. It seems that multicore systems have problems with cooling
 (physically it is pretty clear). My current amd-64 4-core machine works fine
 only if less than 2 cores have 100% load. Rougly 2*100 work 20 min before
 temperature becomes high, 4*100 can last couple of minuts only. Last year I
 have already burned  processor and do not want repeat the experience.

 I'll be glad to know my options other than open the box and add fans or set
 air conditioner in my working place to very low temperature.

 --
 Shimon Panfil: Industrial Physics and Simulations
 http://industrialphys.com


 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Free version of NoteWorthy Composer

[Michael Tewner]

You can check out http://www.linux-sound.org/notation.html

For music notation typesetting, nothing in linux beats Lillypond.

-Mike


On Sat, Dec 26, 2009 at 4:46 AM, Uri Even-Chen u...@speedy.net wrote:

 Hi People,

 When working on my automatic melody composing project 10 years ago, I
 used a program called NoteWorthy Composer (
 http://www.noteworthysoftware.com/composer/ ).  It's a good program,
 it lets you save melodies in a readable format and then you can play
 them, convert them to MIDI etc.  I paid for the program about $39 10
 years ago, but I didn't keep the program on my computer (I bought new
 computers twice since then).  I checked their website now, and it is
 possible to download only an evaluation version - if I want the full
 version then I have to pay $49 (after I already paid once).  I was
 thinking, is there a free software which is recommended and does
 something similar?  Of course I will also have to convert my .nwc
 files, or maybe the free program can read it?  Also, NoteWorthy
 Composer works on Microsoft Windows - I don't think there are versions
 for Linux and Mac.  This is another problem with Linux - many
 softwares don't run on Linux.  Do you know any alternative?

 Thanks,
 Uri Even-Chen
 Mobile Phone: +972-50-9007559
 E-mail: u...@speedy.net
 Blog: http://www.speedy.net/uri/blog/

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Modifying Javascript on-the-fly is Firefox

[Michael Tewner]

I think Google Chrome Developer Tools lets you mess with things on-the-fly.

On Mon, Nov 23, 2009 at 11:13 AM, Shlomi Fish shlo...@iglu.org.il wrote:

 On Monday 23 Nov 2009 10:42:21 Dave Stav wrote:
  Hi Baruch,
 
  I needed a similar thing about a year ago. I used a perl tcp proxy.

 I published this Perl HTTP proxy for fixing the old yjobs on Firefox:

 http://www.shlomifish.org/open-source/projects/yjobs-on-mozilla/

 It's licensed under the MIT-X11. I tried using greasemonkey instead, but
 gave
 up because I could not find an easy way to do it and no one on the
 Greasemonkey mailing list could give me some guidance on how to do it (and
 some people implied it was impossible). Maybe you'll have better luck.

  Also, maybe Firebug can assist you.
 

 Regards,

Shlomi Fish

   - Dave
 

 --
 -
 Shlomi Fish   http://www.shlomifish.org/
 Star Trek: We, the Living Dead - http://shlom.in/st-wtld

 Chuck Norris read the entire English Wikipedia in 24 hours. Twice.

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: [OT] Power over radio is it a true thing or just a myth ?

[Michael Tewner]

On Tue, Aug 25, 2009 at 11:25 AM, Oleg Goldshmidt p...@goldshmidt.orgwrote:

 On Tue, Aug 25, 2009 at 10:40 AM, Gilad Ben-Yossefgi...@codefidence.com
 wrote:
  Oleg Goldshmidt wrote:
 
  Once you have satisfied yourself that N=3, you can derive R^-2 easily
  from flux considerations.
 
 
  Until, of course, the invention of the flux capacitor...
 
   http://en.wikipedia.org/wiki/DeLorean_time_machine

 Oh, anything is possible if you travel through space-time in a
 DeLorean... In particular, when you travel close to the speed of light
 you emit mostly in the forward direction, not isotropically...

 ;-)

when you travel close to the speed of light

88 Miles per hour?


 --
 Oleg Goldshmidt | o...@goldshmidt.org

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Suggestion for a webmail application with good Hebrew Support

[Michael Tewner]

2009/8/18 Danny Lieberman dan...@software.co.il

 Shachar

 On the Internet - size is not an indication of threat surface. Ability to
 provision and maintain is more important.

 You have to engineer your solution to your needs.

 For us - the combination of Google Apps, slicehost (for smaller projects) /
 rackspace (for big projects) rocks.

 Google Apps Mail and Calendar are amazing applications especially if you
 have colleagues in 5 or 6 time zones  and people with iphones and
 blackberries like we do

 I can't believe that there are people on Linux-IL who seriously consider
 Squirrel Mail a competitor.


There you go again with the Don't even think about hosting your own
Webmail

Danny - There are companies out there which consider internal mail as
classified - Hosting the emails on third-party servers, even encrypted
versions of the emails, is simply a security threat. It's called keeping
your data close to home, and it's quite important, especially when your
content might be problematic in other jurisdictions.

And anyway - no one outside of my company network/VPN should have IMAP/POP3
access to the mail server. With Google Apps you carefully craft your office
firewall rules, then move mailbox access to *outside* of the network??!!

-mike



 d


 On Tue, Aug 18, 2009 at 5:44 PM, Shachar Shemesh shac...@shemesh.bizwrote:

  Amos Shapira wrote:

 2009/8/18 Danny Lieberman dan...@software.co.il dan...@software.co.il:


  d) We deploy security countermeasures to protect assets:
 0) We don't use Google docs, Never.
 1) None of our really sensitive assets are on Google Apps and that includes
 Calendar and Mail


  So what's left from your use of Google?

 BTW - do you (the plural you to the entire list) consider mail
 hosting by other companies besides Google as more secure?


  In most aspects, yes.

 First, another provider will likely be a smaller target (security by
 anonymity).
 Second, another provider are not cross linking your emails with other
 things they know about you. Granted, that's mostly because they don't have
 that other info, but whatever the reason - it works.

 As for traditional security - Google's extra size is a mixed blessing. I
 wouldn't work with someone small using a tailor made solution, but someone
 using a standard solution is likely, in the long run, to provide comparable
 security level to those Google provide (theoretical more chance of being
 vulnerable is offset by less chance of being exploited).

 Shachar

 --
 Shachar Shemesh
 Lingnu Open Source Consulting Ltd.http://www.lingnu.com




 --
 Danny Lieberman

 -
 Protect your data: http://www.software.co.il
 Twitter:  http://twitter.com/onlyjazz
 Skype:  dannyl50
 Warsaw:+48-79-609-5964
 Israel:   +972 8 9701485
 Mobile: +972 - 54 447 1114

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Kingle/Reader on Linux in IL (WAS: Re: Linux / Computer Books in Israel)

[Michael Tewner]

Thank you, Dotan!
Will both devices read project Gutenberg files?

-Mike


On Wed, Aug 5, 2009 at 9:13 AM, Dotan Cohen dotanco...@gmail.com wrote:

  Hi all -
  I read a few reviews of the Kindle2 vs. Sony Reader -
  Anyone out there have either of those and use it with Linux? AFAIK, I'll
 see
  the storage as a USB device on either device - But what about purchasing
  books, etc?


 Download from Project Gutenberg only. Renting books from Amazon is not
 a good idea:

 http://yro.slashdot.org/story/09/07/17/2138213/Amazon-Pulls-Purchased-E-Book-Copies-of-1984-and-Animal-Farm?art_pos=3

 --
 Dotan Cohen

 http://what-is-what.com
 http://gibberish.co.il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Kingle/Reader on Linux in IL (WAS: Re: Linux / Computer Books in Israel)

[Michael Tewner]

On Thu, Jul 16, 2009 at 11:36 AM, Maxim Veksler hq4e...@gmail.com wrote:

 2009/7/15 Shlomo Dubrowin dubrowin.l...@gmail.com:
  I live and work in the Jerusalem area.  Generally, when I want Linux
 and/or
  other types of computer books (right now I'm learning Perl), I wait till
 we
  have family coming from the US and force them to bring the books to me
 here.
 
  I keep saying there must be a better way to get good books here in
 Israel.
  Is there a bookstore somewhere that already imports these kinds of books,
 or
  that can order them for me and deliver them to me via IL Post or where I
 can
  pick them up somewhere local in this part of the country?
 
  I have ordered books through a previous employer from Amazon.co.uk, but
 I
  remember it being much more expensive than getting them in the US.  What
 are
  your experiences.  Thank you.
 

 How about purchasing a Kindle and then ordering nothing but electronic
 books?
 I seems that in the long run it might turn out to be more beneficial
 then buying batches of printed books.


Hi all -

I read a few reviews of the Kindle2 vs. Sony Reader -
Anyone out there have either of those and use it with Linux? AFAIK, I'll see
the storage as a USB device on either device - But what about purchasing
books, etc?

-Mike
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Looking for advice about selecting hardware for graphics and data visualization

[Michael Tewner]

Have you looked into Nvidia Tesla? I think the grid.org.il people can get
you more info - I think I remember someone selling these in Israel. They
also have Linux drivers.

On Fri, Jul 24, 2009 at 3:57 AM, Omer Zak w...@zak.co.il wrote:

 I am looking for advice about selecting motherboard and graphic card/s
 for a new PC which I plan to acquire; and about suppliers available to
 Israelis (whereas in Israel or abroad).

 My requirement for the new PC is that it is to render quickly graphics
 and data visualizations of large data sets, and to run under Linux with
 as little non-Free software as possible.  Ability to number-crunch would
 be nice, as well.

 The budget allows me to afford an high-end system (but not a
 supercomputer).

 If you have experience in the above, please write to the mailing list or
 contact me in private.

--- Omer
 --
 We will only have peace with the Arabs when they love their children
 more than they hate us.
   Golda Meir (Israeli Prime Minister between 1969-1974)
 My own blog is at http://www.zak.co.il/tddpirate/

 My opinions, as expressed in this E-mail message, are mine alone.
 They do not represent the official policy of any organization with which
 I may be affiliated in any way.
 WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html


 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Looking for advice about selecting hardware for graphics and data visualization

[Michael Tewner]

...Or maybe Nvidia Quadro Pro? http://www.nvidia.com/page/workstation.html

On Fri, Jul 24, 2009 at 4:10 PM, Michael Tewner tew...@gmail.com wrote:

 Have you looked into Nvidia Tesla? I think the grid.org.il people can get
 you more info - I think I remember someone selling these in Israel. They
 also have Linux drivers.

 On Fri, Jul 24, 2009 at 3:57 AM, Omer Zak w...@zak.co.il wrote:

 I am looking for advice about selecting motherboard and graphic card/s
 for a new PC which I plan to acquire; and about suppliers available to
 Israelis (whereas in Israel or abroad).

 My requirement for the new PC is that it is to render quickly graphics
 and data visualizations of large data sets, and to run under Linux with
 as little non-Free software as possible.  Ability to number-crunch would
 be nice, as well.

 The budget allows me to afford an high-end system (but not a
 supercomputer).

 If you have experience in the above, please write to the mailing list or
 contact me in private.

--- Omer
 --
 We will only have peace with the Arabs when they love their children
 more than they hate us.
   Golda Meir (Israeli Prime Minister between 1969-1974)
 My own blog is at http://www.zak.co.il/tddpirate/

 My opinions, as expressed in this E-mail message, are mine alone.
 They do not represent the official policy of any organization with which
 I may be affiliated in any way.
 WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html


 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: High availability virtual ip

[Michael Tewner]

Hi all -

If all you want to do is float an IP, Linux-HA will work, but a simpler
solution could be, say, keepalived and vrrpd.

I you would like to also manage cluster resources, Linux-HA is your best
solution. I would agree that it has a steep learning curve, and it's a pain,
but it does exactly what you want, and more. It will handle all of your
cluster resources - We've used it for MySQL, DRBD, OCFS2, Asterisk, and
others.

Other options include virtualMonkey and/or Linux Virtual Server

...But I would NOT agree with Itay's I would recommend not using Linux-HA
for any means. Linux-HA is the PROPER open solution to clustering, and just
'cause it's hard to figure out doesn't mean that you should choose a less
appropriate product.

Check:
http://www.ntua.gr/lvsp/Joseph.Mack/HOWTO/LVS-HOWTO.failover.html

-Mike


On Tue, Jun 23, 2009 at 5:04 PM, Maxim Veksler hq4e...@gmail.com wrote:

 On Tue, Jun 23, 2009 at 9:01 AM, Itay Donenhirsch i...@bazoo.org wrote:
 
  Hi Folks,
 
  I would recommend not using Linux-HA for any means. I had very bitter
  experience with it. It is implemented in a very complicated and hard
  to debug and configure. It's also very poorly tested. I first didn't
  believe it myself and thought I was doing something wrong, but after
  some email exchanges with its developer it became apparent that it
  fails some very basic scenarios (like switch power-down for instance).
  Moreover, the linux-ha people themselves will confuse you with which
  version to use (2.99/2.1.4, heartbeat or pacemaker, etc).
 
  If you'd like more detailed explanation, or had different experience,
  you are more than welcome to email me.
 

 Heartbeat has 2 faces, It can work great or it can fail bitterly.
 It has a very steep learning curse before something useful begins to
 happen.

 cibadmin -Q, crm_attribute are your friends.

 I agree with Itay, from our experience it is indeed buggy but working.


 Maxim.

  Itay
 
  On Tue, Jun 16, 2009 at 9:55 PM, Oleg Goldshmidtp...@goldshmidt.org
 wrote:
   Marc Volovic marcvolo...@me.com writes:
  
   Hi
  
   First, the problem is not an IP, but the mac-ip mapping and ARP
   caching strategies.
  
   Second, don't use ping.
  
   Third, do use project 'heartbeat' and 'fake'. They provide what you
   need.
  
   Heartbeat is a component of Linux-HA, which is why I pointed to the
   latter ;-)
  
   http://www.linux-ha.org/Heartbeat
  
   --
   Oleg Goldshmidt | p...@goldshmidt.org
  
   ___
   Linux-il mailing list
   Linux-il@cs.huji.ac.il
   http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
  
 
  ___
  Linux-il mailing list
  Linux-il@cs.huji.ac.il
  http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il



 --
 Cheers,
 Maxim Veksler

 Free as in Freedom - Do u GNU ?

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Computer recommendation for Linux server.

[Michael Tewner]

hi!

We don't know what your other requirements are, but are you sure that a
desktop machine will be stable enough? If the single second-rate power
supply toasts (and probably fries a disk and the controller with it), can
you afford the 1 week downtime? What about backups?

-Mike

On Fri, May 8, 2009 at 9:29 AM, nir grinberg n...@grinberg.org wrote:

 I second this.  your demands are outside of your budget (by far)



 --
 Regards,

 Nir Grinberg
 I.T.C. IP Technologies Ltd.
 n...@israelnumber.com
 www.IsraelNumber.com
 972.3.9707000


 2009/5/7 Marc Volovic marcvolo...@me.com:
  Hi
  Can't be done.
  You're (to put it candidly) saying - what DESKTOP machine with lotsa
 disks
  be cheap!
  The answer - with your budget - none. Five 1TB disks will cost you some
 2K
  ILS. A RAID controller will cost another 600-1500 ILS, say 1K. This is
 your
  budget and no desktop yet.
  Either reduce capacity oir increase cost.
  M
  On May 7, 2009, at 8:40 PM, Josh Roden wrote:
 
  Hi,
 
  I need to setup a Linux Centos Samba file server.
  The server should have Raid 1 or 5 with a high storage capability (up to
 4
  or 8 TB).
  The budget is around 3,000 shekels so an HP or IBM machine probably won't
  be relevant.
  Last, but not least, the machine should be Linux compatible at least from
  your
  experiences if not in writing.
 
  Thank you very much,
 
  Josh
 
  __ Information from ESET NOD32 Antivirus, version of virus
 signature
  database 4060 (20090507) __
 
  The message was checked by ESET NOD32 Antivirus.
 
  http://www.eset.com
  ___
  Linux-il mailing list
  Linux-il@cs.huji.ac.il
  http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
 
 
  ___
  Linux-il mailing list
  Linux-il@cs.huji.ac.il
  http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
 
 

 ___
 Linux-il mailing list
 Linux-il@cs.huji.ac.il
 http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: 3D Apache?

[Michael Tewner]

Hey Hetz!

The application you're referring to is VisitorVille - It's cute, but
expensive.
-mike


On Fri, Nov 21, 2008 at 10:21 PM, Hetz Ben Hamo [EMAIL PROTECTED] wrote:

 Nope, not that. it was 3D, with buildings etc..

 Hetz

 On Fri, Nov 21, 2008 at 10:15 PM, Alex Alexander
 [EMAIL PROTECTED] wrote:
  http://dev.squarecows.com/ApacheMap/
 
  That one looks interesting. Google is your friend =)
 
  |
  | Alex Alexander
  | There's a way to do it better - find it.
  |
  | Gentoo'd
  | http://linuxized.blogspot.com
  \
 
 
  On Fri, Nov 21, 2008 at 19:39, Hetz Ben Hamo [EMAIL PROTECTED] wrote:
 
  Hi,
 
  Few months ago I've seen some really cute application that connects to
  Apache server and based on the logs it shows you some virtual city
  with people based on their IP address, and you could do some really
  nice stuff there.
 
  Unfortunately, I forgot the program name. Does anyone knows the
  application name?
 
  Thanks,
  Hetz
  --
  Skepticism is the lazy person's default position.
  my blog (Hebrew): http://benhamo.org
 
  =
  To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe | mail [EMAIL PROTECTED]
 
 
 



 --
 Skepticism is the lazy person's default position.
 my blog (hebrew): http://benhamo.org

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]

Re: Clustering/Failover Project

[Michael Tewner]

I've set up a system just like this and it's been up for over a year happily
chugging along...

On Mon, Sep 22, 2008 at 12:44 AM, Oleg Goldshmidt [EMAIL PROTECTED]wrote:

 Noam Rathaus [EMAIL PROTECTED] writes:

  I'm also not interested in replies telling me there's a project that
  does exactly that (and only requires a few tiny customizations that
  will take days).

 Well, how about a couple of hours, including RTFM? LinuxHA (heartbeat,
 http://www.linux-ha.org) + DRBD (http://www.drbd.org,
 http://linux-ha.org/DRBD) is the most common linux HA solution, works
 great with MySQL (http://www.mysql.com/products/enterprise/drbd.html),
 comes with most linux distros [1,2], and thus is likely already
 installed on your system.

 Anyway, I am not available for this gig, so feel free to pay whoever
 does this for you. If I were you, I would insist on hearing real hard
 arguments before deciding on a competing solution.

 One such argument may be we absolutely cannot move MySQL data onto a
 separate partition, because (a really good argument goes here).

 [1] Debian included
 [2] RedHat is the only exception I know of, I suppose because they
have their own clustering product - of course RPMs are there.

 Hope this helps,

 --
 Oleg Goldshmidt | [EMAIL PROTECTED]

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]

Re: [JOB] Linux/unix sys-admin

[Michael Tewner]

Hi -

I'm sorry all - seems like my mobile client sent the email a bit early
(before I finished it) without telling me :-)

Either way, We're a company based in Tel Aviv - I don't think any of you
have heard of us. I'm looking for someone who can help me take care of Linux
and Solaris issues, day-to-day tasks, etc.

We're looking for people who learn really fast and know a lot. More than a
Jr. Sys-admin. We're talking Apache, Postfix, MySQL. Cisco. Networking.
Samba. Sun Hardware. Plone. Perl. Bash. Web apps. Oracle. Server hardware.
Perhaps some programming experience. We're looking for an all-around expert.

No windows knowledge required!

Email Resumes to [EMAIL PROTECTED]

-Mike

On Sat, Aug 2, 2008 at 10:35 PM, Michael Tewner [EMAIL PROTECTED] wrote:

 Hi all!

 Medium-sized established company ISO a sys-admin:

  3 years linux or Unix administration experience

 --
 Sent from Gmail for mobile | mobile.google.com

[JOB] Linux/unix sys-admin

[Michael Tewner]

Hi all!

Medium-sized established company ISO a sys-admin:

 3 years linux or Unix administration experience

-- 
Sent from Gmail for mobile | mobile.google.com

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Good corporate intranet site software?

[Michael Tewner]

don't forget Plone. it's a great CMS  system...

On 7/13/08, Sagi Bashari [EMAIL PROTECTED] wrote:
 On Sun, Jul 13, 2008 at 10:39 AM, Amos Shapira [EMAIL PROTECTED]
 wrote:

 Thanks. I had Twiki in the previous workplace and didn't like it so
 much but will give it a try if/when it comes to that.
 Alfresco also sounds interesting.
 For Drupal I suspect it might take more time to setup than the others
 but will look into it.

 My main focus about this is mostly about GUI interface (e.g. tables) -
 that's what the users care about.



 If all you want is a Wiki, then perhaps you should give MoinMoin (
 http://moinmo.in/) a try.

 It has a full blown WYSIWYG editor (based on FCKEditor) that lets users
 format their documents just like they do in other programs (including
 tables, images, etc).

 It also has fairly good RTL support.


 Cheers,

 --Amos


 Sagi


-- 
Sent from Gmail for mobile | mobile.google.com

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: I need your addvice on ISP troubleshooting.

[Michael Tewner]

I've talked to the highest up network engineers at Netvision about 30%
packet loss on their vl100 router and I've consistently received the It's
normal answer. They claim it's part of their anti-Denial-Of-Service system.
I see it as 30% of my company's monthly fee down the drain.

On Fri, Jul 4, 2008 at 12:57 PM, dani [EMAIL PROTECTED] wrote:

 Dotan,

 Our servers support both pptp and l2tp, which you can use directly from
 Linux.

 If you have service problems while connected to the Technion, why don't you
 open an helpdesk case?

 Dani



 Dotan Cohen wrote:

  2008/7/4 sara fink [EMAIL PROTECTED]:


 Technion web site doesn't support ping not in and not out. So don't be
 surprised if you get the ???.




 No, but it supports http traffic and that often goes very slow.
 Amazingly, it does so at the same time as Slashdot and Google. And no
 one else on the interwebs noticed except me.



 Try a ftp transfer from technion and see the speed.




 The problem is intermittent.



 About the router, try the same thing without router. If the problem
 persists, you can tell them.



 I cannot connect with Linux without a router because their 'dialer'
 only runs on Windows.



 For
 http://dotancohen.com/images/examples/bezeq.html
  I can't see anything written. It's 1k. I saw the images from the
 examples
 directory.
 I saw similar patterns with bezeqint in my neighborhood.




 So, the mtr results are normal, or we both are getting bad service?



 Only a couple of the support people know what is mtr. From all my talks
 with
 support at 012, only 1 knew about mtr.  You need to reach to higher
 levels
 of support.  At 012 it's called network department. They support if you
 have
 few pc at home. Their level is higher than others who read from the page.




 In Hebrew would that be מחלקת הרשת?



 My brother has windows, when he had problems with internet, they had the
 famous sentence Something on your pc is blocking. go to restore. If that
 doesn't help, format the hd. And you know what else, they told him to
 use
 the microsoft built in firewall, nothing else.

 Here are some dns lists of all isp in israel
 http://www.petri.co.il/dns_ip_addresses_for_israeli_isps_he.htm
 try this also https://www.opendns.com/start




 I had considered opendns. Is it recommended? Was Israeli DNS _is_
 recommended? Thanks.

 Dotan Cohen

 http://what-is-what.com
 http://gibberish.co.il
 א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת

 A: Because it messes up the order in which people normally read text.
 Q: Why is top-posting such a bad thing?




 --
 

 Dr. Daniel Arbel[EMAIL PROTECTED]
 Network Manager tel:   972-4-8294992
 Technion Computer Centerfax:   972-4-8129418

 
 If this e-mail can't be sent, please return to sender


 =

 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]

Re: Email-to-MMS gateway?

[Michael Tewner]

I was in a bind in the US - I needed a way for people to get ahold of
me during my visit without having to call my roaming IL cellphone.

I set up a local US SkypeIN number to my Skype account.  then I
configured auto-forwarding of all my Skype calls to my CellPhone. It's
not the cheapest option, but it worked in a pinch...

-mike

On 6/16/08, Arik Baratz [EMAIL PROTECTED] wrote:
 On Sun, Jun 15, 2008 at 6:52 AM, Ira Abramov
 [EMAIL PROTECTED] wrote:
 A friend of mine is moving abroad, and wanted to keep in cheap contact
 with his friends and fanily in Israel. He tried talking me into
 installing Asterisk at my home for him to be able to do that, but I
 don't want to diving into the maintenance of more equipment and software
 (though he was more than willing to donate all the hardware needed,
 etc). Question is, if there's an Israeli company that provides Packet8
 or Vonage-like service with an Israeli local line and number?

 Hi Ira,

 I have moved to the US 3 years ago, and I have a system in place that
 I believe accomplishes what he wants.

 I've been using www.didww.com successfully for a few years now as a
 DID in Israel. Friends and family call my Israeli number and the call
 gets routed to my Asterisk box in the US. The cost is very reasonable
 (an 077 number is $3/month) and it's a flat rate for up to two
 simultaneous calls.

 My termination service for the box is voipjet.com which has a very
 reasonable rate for Israel (2c/min LL, 10c/min cell). They say that
 they don't want end users to use their services, only carriers; they
 didn't kick me out though so I guess that as long as everything is
 okay they won't care.

 As for the asterisk box, I'm hosting it on the cheapest Linux VPS
 server from www.vpslink.com, and it costs $8/month. I can't run
 anything else when the asterisk process is running (it has only 64M
 RAM), but it's working like a charm for over two years now. Plus, an
 extra box to SSH to in times of need is always nice. I use it to
 tunnel out of tough spots on occasion (ssh -N -n -f -D 1080 host)

 My setup allows the following:

 1. People dialling the DID in Israel, France and the US (coming soon:
 Australia) get routed to both my softphone and my US cellphone
 (whichever answers first)

 2. Whenever I dial my own US DID (caller ID...) I get a second dial
 tone and after punching a code I can dial anywhere in the world, like
 a calling card.

 Downside: I get calls in the middle of the night from MILUIM... don't ask.

 -- Arik

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



-- 
Sent from Gmail for mobile | mobile.google.com

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: batch dispatcher - what do I really need?

[Michael Tewner]

Condor?

On Sun, Jun 1, 2008 at 6:19 PM, Ira Abramov
[EMAIL PROTECTED] wrote:
 my client here is developping VLSI hardware (Cadence tools,
 compilation-verification-simulation, and so on). they want to utilize a
 new monster CPU machine we just bought as the first of maybe many
 machines, as well as use the two existing VNC servers they work on
 during the day as compilation machines at night.

 I saw OSCAR uses TORQUE as well as Maui, though from their descriptions
 I could swear they were giving the same basic functionality. Which one
 should I install?

 Batch dispatcher would be running on a CentOS5, the two current VNC
 servers and future CPU monsters are going to be RHEL4 and CentOS4 (to
 comply with Cadence's requirements, blech!). I also wonder if I should
 just save myself the headache and install the full OSCAR and have it
 take care of more things for me.

 Recommendations?

 Thanks,
 Ira.

 --
 The man with the golden bun
 Ira Abramov
 http://ira.abramov.org/email/

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

[JOB] Seeking Plone 3 programmers

[Michael Tewner]

Forwarding for a friend:

Hi,
 A Tel-Aviv based company is looking to hire Plone programmers (or
experts if you're out there) to help in development of in-house
Plone-based websites.  You'd be tweaking Plone-the-product and
developing new features using Plone-The-Platform.  We have immediate
vacancies, and if you're good enough, we'll happily wait for you.
We're not looking for contractors right now (sorry folks).

Please send CVs + cover letter to [EMAIL PROTECTED] and feel free
to spread this post to other mailing lists that might be appropriate.

All the best,
 Issac

Requirements:
* Good Python skills
* Basic Zope 2 skills
* Previous experience with Plone 3
* HTML/CSS/JavaScript skills

Recommended:
* Experience with Zope 2  Five as a platform (outside of Plone)
* Experience with ZEO
* Experience with Varnish
* Graphic Art capabilities (cutting up photoshop page layouts into HTML, etc)
* PHP

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Multiple penguins on boot

[Michael Tewner]

to keep a process on a specific CPU, look up processor affinity.

Meanwhile, dmesg reports as it bring up each CPU the physical # and Core #.
[   88.931544] CPU: Physical Processor ID: 0
[   88.931545] CPU: Processor Core ID: 2

And, if you have multiple physical processors, it assigns each core to
a scheduling domain for each Physical CPU (from a dual-xuad-xeon):

[   80.251504] Brought up 8 CPUs
[   80.251546] CPU0 attaching sched-domain:
[   80.251548]  domain 0: span 03
[   80.251549]   groups: 01 02
[   80.251552]   domain 1: span ff
[   80.251553]groups: 03 0c 30 c0
[   80.251556] CPU1 attaching sched-domain:
[   80.251557]  domain 0: span 03
[   80.251558]   groups: 02 01
[   80.251560]   domain 1: span ff
[   80.251561]groups: 03 0c 30 c0
[   80.251563] CPU2 attaching sched-domain:
[   80.251564]  domain 0: span 0c
[   80.251566]   groups: 04 08
[   80.251567]   domain 1: span ff
[   80.251568]groups: 0c 30 c0 03
[   80.251571] CPU3 attaching sched-domain:
[   80.251572]  domain 0: span 0c
[   80.251573]   groups: 08 04
[   80.251575]   domain 1: span ff
[   80.251576]groups: 0c 30 c0 03
[   80.251579] CPU4 attaching sched-domain:
[   80.251580]  domain 0: span 30
[   80.251581]   groups: 10 20
[   80.251583]   domain 1: span ff
[   80.251584]groups: 30 c0 03 0c
[   80.251586] CPU5 attaching sched-domain:
[   80.251587]  domain 0: span 30
[   80.251588]   groups: 20 10
[   80.251590]   domain 1: span ff
[   80.251591]groups: 30 c0 03 0c
[   80.251594] CPU6 attaching sched-domain:
[   80.251595]  domain 0: span c0
[   80.251596]   groups: 40 80
[   80.251598]   domain 1: span ff
[   80.251599]groups: c0 03 0c 30
[   80.251601] CPU7 attaching sched-domain:
[   80.251602]  domain 0: span c0
[   80.251604]   groups: 80 40
[   80.251605]   domain 1: span ff
[   80.251607]groups: c0 03 0c 30


On Fri, May 9, 2008 at 12:10 PM, Moshe Gorohovsky [EMAIL PROTECTED] wrote:
 Hi,

 Tzafrir Cohen wrote:
 On Thu, May 08, 2008 at 12:59:59PM +0300, Shlomi Fish wrote:
 On Thursday 08 May 2008, Moshe Gorohovsky wrote:
 Hi linux-il,

 Hag Sameah!

 I recently set up a linux PC with Intel Core2 Duo CPU.

 I had started the PC up from a knoppix v5.3.1 DVD.
 Linux kernel on this DVD uses graphical framebuffer console and
 shows two penguin images on start-up. My previous machine
 showed a single penguin image. It was AMD K7 CPU (single core).

 Why linux kernel shows two penguin images on boot?
 Does it count CPU cores?

 In a way. The number of penguins is indicative of the number of processors 
 the
 machine has. I'm getting two processors on my relatively old P4-2.4GHz
 machine which just has the so-called Hyper-Threading feature.

 As far as Linux is concerened, those are two separate processors, for
 the most part.

 e.g: you'll see two CPUs in /proc/cpuinfo .

 Indeed, cat /proc/cpuinfo shows two processors:
 processor   : 0
 .
 processor   : 1
 .

 Is there a Linux tool to start and run a program till it exits
 on specific processor or core?

 Moshe.


 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: crash with no log entry

[Michael Tewner]

What about myADSLcheck?

On Fri, May 9, 2008 at 4:54 PM, Shlomo Solomon [EMAIL PROTECTED] wrote:
 On Friday 09 May 2008, Valery Reznic wrote:
 Why you don't put this cron jobs to run say every 1 hour, so it'll not to
 took your months for debugging ?

 That might be a good idea, but I haven't done it for 2 reasons:
 1 - I don't want to crash my system at a random time. At least, now that I
 know the problem always occurs at 2:02 in the morning, I can make sure I have
 an up-to-date backup before the crash
 2 - I'm not sure if running some of these daily jobs on an hourly basis might
 cause unforseen problems. I'm including the list again, in case anyone can
 comment on the dangers, if any.


 [EMAIL PROTECTED] cron.daily]$ ls -l
 total 56
 -rwxr-xr-x 1 root root  276 2007-08-17 02:56 0anacron*
 -rwxr-xr-x 1 root root 2575 2007-09-01 13:56 awffull*
 -rwxr-xr-x 1 root root  396 2007-11-16 23:00 getskyepg*
 -rwxr-xr-x 1 root root  400 2007-08-28 21:44 hylafax*
 -rwxr-xr-x 1 root root   37 2007-01-28 19:59 logcheck*
 -rwxr-xr-x 1 root root  180 2007-07-19 23:57 logrotate*
 -rwxr-xr-x 1 root root  410 2007-08-31 01:48 makewhatis.cron*
 -rwxr-xr-x 1 root root  137 2007-09-24 17:26 mlocate.cron*
 lrwxrwxrwx 1 root root   27 2008-01-02 05:56
 msec - /usr/share/msec/security.sh*
 -rwxr-xr-x 1 root root  431 2006-02-05 22:56 my-aa-findlargefiles*
 lrwxrwxrwx 1 root root   26 2008-01-02 20:16
 myRPMlist - /data1/myscripts/myRPMlist*
 -rwxr-xr-x 1 root root  167 2005-01-10 12:51 reoback*
 -rwxr-xr-x 1 root root  118 2007-10-02 12:09 rpm*
 -rwxr-xr-x 1 root root  101 2007-11-20 19:55 tetex.cron*
 -rwxr-xr-x 1 root root  371 2007-08-08 18:35 tmpwatch*
 -rwxr-xr-x 1 root root  315 2007-09-05 13:24 tripwire-check*


 --
 Shlomo Solomon
 http://the-solomons.net
 Sent by KMail (KDE 3.5.7) on LINUX Mandriva 2008.0


 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Multiple penguins on boot

[Michael Tewner]

A recent version of the Linux kernel will see two CPU's but know
they're on the same physical processor. This is important especially
when you have multiple physical multi-core processors.

Multiple cores share text segments- the kernel will try to keep
multiple threads of the same process on the same physical CPU.

On 5/8/08, Shlomi Fish [EMAIL PROTECTED] wrote:
 On Thursday 08 May 2008, Moshe Gorohovsky wrote:
 Hi linux-il,

 Hag Sameah!

 I recently set up a linux PC with Intel Core2 Duo CPU.

 I had started the PC up from a knoppix v5.3.1 DVD.
 Linux kernel on this DVD uses graphical framebuffer console and
 shows two penguin images on start-up. My previous machine
 showed a single penguin image. It was AMD K7 CPU (single core).

 Why linux kernel shows two penguin images on boot?
 Does it count CPU cores?


 In a way. The number of penguins is indicative of the number of processors
 the
 machine has. I'm getting two processors on my relatively old P4-2.4GHz
 machine which just has the so-called Hyper-Threading feature.

 Regards,

   Shlomi Fish

 -
 Shlomi Fish   http://www.shlomifish.org/
 Parody on The Fountainhead - http://xrl.us/bjria

 The bad thing about hardware is that it sometimes work and sometimes
 doesn't.
 The good thing about software is that it's consistent: it always does not
 work, and it always does not work in exactly the same way.

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: IR Receiver

[Michael Tewner]

I have a friend that has built a BUNCH of LIRC receivers. IIRC, he got
the parts at kashing(???) - Jerusalem, King George street - near the
bell-tower building (less than one block from Yaffo). Downstairs. They
have EVERYTHING.

On Tue, Apr 29, 2008 at 3:58 PM, Geoffrey S. Mendelson
[EMAIL PROTECTED] wrote:
 On Tue, Apr 29, 2008 at 03:08:09PM +0300, Noam Rathaus wrote:

   I don't have Cables or Satelite - who needs it actually ?
  
   LIRC is a good site, but it mentions components that need to be bought - no
   clue where to get them - anyone that has experience building one?

  I've built the transmitters. I was able to buy a premade remote control,
  but it uses a serial port, which is now a rare item.

  On the other hand, Office Depot has a Microsoft Optical keyboard and
  mouse for about 230 NIS. It plugs into a USB port and looks to the
  computer like a keyboard and mouse, as opposed to the more expensive
  wireless devices that look like a bluetooth dongle.

  For about the same price, you can get a cheap TV tuner with remote control
  and sensor.

  It depends upon what you want to use a real remote control.

  If you decide to use KnoppMyth, which I think is really nice, be aware the
  latest version has problems with some analog TV cards.

  Geoff.

  --
  Geoffrey S. Mendelson, Jerusalem, Israel [EMAIL PROTECTED]  N3OWJ/4X1GM



  =
  To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Interrups statistic - sar vs. mstat

[Michael Tewner]

Yeah - that's standard behavior to print the average since boot when
running these commands without an interval, and the first line of
output when specifying an interval.

On Wed, Dec 26, 2007 at 5:18 PM, Tom Rosenfeld [EMAIL PROTECTED] wrote:
 I have seen the same with all the *stat commands (iostat, vmstat, etc). You
 should ignore the output for the 1st interval.

 -tom


 On Dec 26, 2007 12:32 PM, Imri Zvik  [EMAIL PROTECTED] wrote:


  I'm guessing that without an interval (or if with interval - the first
  output), it is an average since boot.
 
 
 
 
 
   -Original Message-
   From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] On Behalf Of
   Vitaly
   Sent: Wednesday, December 26, 2007 11:29 AM
   To: linux-il@cs.huji.ac.il
   Subject: Re: Interrups statistic - sar vs. mstat
  
On Dec 26, 2007 10:04 AM, Vitaly Karasik [EMAIL PROTECTED] wrote:
Probaly it is trivial, but I don't understand why I see different
   statistics regarding interrups into mstat and sar output. There is
   15997 against 92 !!!
Can someone explain it?
   
[root]# sar -I SUM |head
Linux 2.4.21-47.ELsmp 12/25/2007
   
12:00:01 AM INTR intr/s
12:10:01 AM sum 15997.32
   
[ root]# mpstat
Linux 2.4.21-47.ELsmp 12/25/2007
   
11:14:07 AM CPU %user %nice %system %iowait %irq %soft %idle intr/s
11:14:07 AM all 2.40 0.00 7.41 0.05 1.97 10.78 77.39 92.36
   
  
   The answer was simple - mpstat provides wrong interup statistics
   when called without interval parameter. I mean, mpstat 1 is OK,
   but mpstat will tell you wrong numbers. I don't understand yet, if
   this a feature or a bug.
  
   =
   To unsubscribe, send mail to [EMAIL PROTECTED] with
   the word unsubscribe in the message body, e.g., run the command
   echo unsubscribe | mail [EMAIL PROTECTED]
 
  To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe | mail [EMAIL PROTECTED]
 
 



 --
 -tom
 054-244-8025

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: major packet loss at hot server

[Michael Tewner]

BTW,

Top Netvision support people have claimed that it's an anti-DDOS mechanism

But that seems strange - I mean, filtering legitimate TCP web requests
(tcptracroute) - 20% of the packets over just a few requests?

Can anyone on Netvision try a simple web request with a sniffer and
see if there are any packet re-requests? (I would, but I'm our of
town)


On Sat, Apr 5, 2008 at 8:51 PM, Michael Tewner [EMAIL PROTECTED] wrote:
 Yeah - I seem to be getting 20-30% loss on TCP packets to www.cnn.com
 on the same router that was dropping the ICMP packets. (#4 below)

 Selected device eth0, address 10.1.1.193, port 38669 for outgoing packets
 Tracing the path to www.cnn.com (64.236.29.120) on TCP port 80 (www),
 30 hops max
  1  10.1.1.254  0.514 ms  0.974 ms  0.985 ms
  2  X  0.986 ms  0.988 ms  0.983 ms
  3  xxx.ser.netvision.net.il ()  9.403 ms  11.062 ms  12.373 ms
  4  vl100.coresw2.hfa.nv.net.il (212.143.8.69)  13.803 ms * 10.785 ms
  5  ge0-1.gw2.hfa.nv.net.il (212.143.8.212)  9.913 ms  9.894 ms  26.442 ms
  6  pos1-0.brdr1.nyc.nv.net.il (212.143.12.13)  255.455 ms  247.516 ms


 On Fri, Apr 4, 2008 at 11:30 PM, Amos Shapira [EMAIL PROTECTED] wrote:
  On Fri, Apr 4, 2008 at 10:35 PM, Michael Tewner [EMAIL PROTECTED] wrote:
 
   Just talked to Netvision Asakim support -
   He was knowlegable  - ran `mtr` on his workstation and saw the packet
  loss.
  
   He explained that there is no problem and that the core routers are
   dropping the ping packets based on the amount of load on the router.
   He explained that the router should only be dropping ICMP packets.
 
  I didn't read all the messages on this thread but maybe if you could run the
  same tests with tcptraceroute you could see weather the packet drop happens
  to TCP packets or not?
 
  --Amos
 
 


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Why can't I connect to a local service ?

[Michael Tewner]

Centos comes with iptables pre-configured to block almost everything.
There is a tool to configure it - system-config-firewall
or just /etc/init.d/iptables stop :-)



On Tue, Apr 15, 2008 at 12:49 AM, Yedidyah Bar-David
[EMAIL PROTECTED] wrote:
 On Tue, Apr 15, 2008 at 07:30:18AM +0300, Oded Arbel wrote:
   I have a really weird problem - maybe it was always like that or it only
   happened since I upgraded, I'm not sure -

  Works for me (on CentOS 5.1).


  
   I have a CentOS 5.1 box and for some weird reason I can't connect using
   TCP to a server running on the same machine, either through localhost or
   through the eth0 IP address. Connections from outside work great and the
   httpd is happily serving users across the network.
  
   When I try to connect, even something simple such as
   telnet localhost 80
   I get a timeout:
   # strace -f telnet localhost 80
...
   connect(3, {sa_family=AF_INET, sin_port=htons(80),
   sin_addr=inet_addr(127.0.0.1)}, 16) = -1 ETIMEDOUT (Connection timed
   out)
   write(2, telnet: connect to address 127.0..., 59) = 59
   close(3)= 0
   write(2, telnet: Unable to connect to rem..., 63
  
   /etc/hosts.deny was the immediate suspect, but its empty. IPTables was
   on, but is set to always allow lo (and port 80 among others) and
   turning it off didn't help. So what can I check next ?

  How about
  tcpdump -n -i lo
  ?

  Also strace httpd?
  --
  Didi


  =
  To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Why can't I connect to a local service ?

[Michael Tewner]

..or perhaps, I should read your entire email before replying...

netstat -an | grep LISTENING shows that the service is listening on 0.0.0.0:80 ?


On Tue, Apr 15, 2008 at 1:12 AM, Michael Tewner [EMAIL PROTECTED] wrote:
 Centos comes with iptables pre-configured to block almost everything.
  There is a tool to configure it - system-config-firewall
  or just /etc/init.d/iptables stop :-)





  On Tue, Apr 15, 2008 at 12:49 AM, Yedidyah Bar-David
  [EMAIL PROTECTED] wrote:
   On Tue, Apr 15, 2008 at 07:30:18AM +0300, Oded Arbel wrote:
 I have a really weird problem - maybe it was always like that or it only
 happened since I upgraded, I'm not sure -
  
Works for me (on CentOS 5.1).
  
  

 I have a CentOS 5.1 box and for some weird reason I can't connect using
 TCP to a server running on the same machine, either through localhost or
 through the eth0 IP address. Connections from outside work great and the
 httpd is happily serving users across the network.

 When I try to connect, even something simple such as
 telnet localhost 80
 I get a timeout:
 # strace -f telnet localhost 80
  ...
 connect(3, {sa_family=AF_INET, sin_port=htons(80),
 sin_addr=inet_addr(127.0.0.1)}, 16) = -1 ETIMEDOUT (Connection timed
 out)
 write(2, telnet: connect to address 127.0..., 59) = 59
 close(3)= 0
 write(2, telnet: Unable to connect to rem..., 63

 /etc/hosts.deny was the immediate suspect, but its empty. IPTables was
 on, but is set to always allow lo (and port 80 among others) and
 turning it off didn't help. So what can I check next ?
  
How about
tcpdump -n -i lo
?
  
Also strace httpd?
--
Didi
  
  
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
  
  


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: major packet loss at hot server

[Michael Tewner]

I'm in conversation with Netvision about this issue - sending
diagnostic information.

On Sat, Apr 5, 2008 at 2:14 PM, Michael Tewner [EMAIL PROTECTED] wrote:
 Wow -
  A post from December 2006 in a gaming forum shows major packet loss
  from the same router:
  http://forums.guru3d.com/showthread.php?t=208330

  C:\Documents and Settings\Administratortracert ablpls-01-02.planetside.com

  Tracing route to ablpls-01-02.planetside.com [199.108.204.34]
  over a maximum of 30 hops:

  1 18 ms 19 ms 19 ms lo0.lns13.hfa.nv.net.il [212.143.205.170]
  2 19 ms 19 ms 19 ms vl102.agr01.hfa.netvision.net.il [212.143.210.25
  3]
  3 * * 19 ms vl100.coresw2.hfa.nv.net.il [212.143.8.69]
  4 28 ms 19 ms 19 ms ge5-0.core2.hfa.nv.net.il [212.143.8.210]
  5 99 ms 99 ms 99 ms pos2-3.brdr1.lnd.nv.net.il [212.143.12.57]
  6 108 ms 99 ms 99 ms ge9-1.br02.ldn01.pccwbtn.net [63.218.52.13]
  7 * * * Request timed out.
  8 179 ms 179 ms 179 ms vl46.ashaens-1.sonyonline.net [64.37.144.177]
  9 189 ms 179 ms 169 ms ablpls-01-02.planetside.com [199.108.204.34]




  On Sat, Apr 5, 2008 at 9:18 PM, Jonathan Ben Avraham [EMAIL PROTECTED] 
 wrote:
   Hi Michael et al,
I have been watching vl100.coresw2.hfa.nv.net.il for the past month for a
   customer of mine and have seem roughly the same TCP packet loss going into
   it on port 80. (It turned out that the customer's problem was not that but 
 a
   configuration error on a different, internal Netvision router. FYI,
  
 - yba
  
  
On Sat, 5 Apr 2008, Michael Tewner wrote:
  
  
Date: Sat, 5 Apr 2008 20:51:06 +0300
From: Michael Tewner [EMAIL PROTECTED]
To: Amos Shapira [EMAIL PROTECTED]
Cc: IGLU Mailing list linux-il@cs.huji.ac.il
   
Subject: Re: major packet loss at hot server
   
   
   
   
Yeah - I seem to be getting 20-30% loss on TCP packets to www.cnn.com
on the same router that was dropping the ICMP packets. (#4 below)
   
Selected device eth0, address 10.1.1.193, port 38669 for outgoing packets
Tracing the path to www.cnn.com (64.236.29.120) on TCP port 80 (www),
30 hops max
1  10.1.1.254  0.514 ms  0.974 ms  0.985 ms
2  X  0.986 ms  0.988 ms  0.983 ms
3  xxx.ser.netvision.net.il ()  9.403 ms  11.062 ms  12.373 
 ms
4  vl100.coresw2.hfa.nv.net.il (212.143.8.69)  13.803 ms * 10.785 ms
5  ge0-1.gw2.hfa.nv.net.il (212.143.8.212)  9.913 ms  9.894 ms  26.442 ms
6  pos1-0.brdr1.nyc.nv.net.il (212.143.12.13)  255.455 ms  247.516 ms
   
On Fri, Apr 4, 2008 at 11:30 PM, Amos Shapira [EMAIL PROTECTED]
   wrote:
   
 On Fri, Apr 4, 2008 at 10:35 PM, Michael Tewner [EMAIL PROTECTED]
   wrote:


  Just talked to Netvision Asakim support -
  He was knowlegable  - ran `mtr` on his workstation and saw the packet
 
 loss.

 
  He explained that there is no problem and that the core routers are
  dropping the ping packets based on the amount of load on the router.
  He explained that the router should only be dropping ICMP packets.
 

 I didn't read all the messages on this thread but maybe if you could 
 run
   the
 same tests with tcptraceroute you could see weather the packet drop
   happens
 to TCP packets or not?

 --Amos



   
   
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
   
   
   
  
--
  
 EE 77 7F 30 4A 64 2E C5  83 5F E7 49 A6 82 29 BA~. .~   Tk Open
   Systems

 =}ooO--U--Ooo{=
- [EMAIL PROTECTED] - tel: +972.2.679.5364, http://www.tkos.co.il -
  


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: major packet loss at hot server

[Michael Tewner]

Yeah - I seem to be getting 20-30% loss on TCP packets to www.cnn.com
on the same router that was dropping the ICMP packets. (#4 below)

Selected device eth0, address 10.1.1.193, port 38669 for outgoing packets
Tracing the path to www.cnn.com (64.236.29.120) on TCP port 80 (www),
30 hops max
 1  10.1.1.254  0.514 ms  0.974 ms  0.985 ms
 2  X  0.986 ms  0.988 ms  0.983 ms
 3  xxx.ser.netvision.net.il ()  9.403 ms  11.062 ms  12.373 ms
 4  vl100.coresw2.hfa.nv.net.il (212.143.8.69)  13.803 ms * 10.785 ms
 5  ge0-1.gw2.hfa.nv.net.il (212.143.8.212)  9.913 ms  9.894 ms  26.442 ms
 6  pos1-0.brdr1.nyc.nv.net.il (212.143.12.13)  255.455 ms  247.516 ms

On Fri, Apr 4, 2008 at 11:30 PM, Amos Shapira [EMAIL PROTECTED] wrote:
 On Fri, Apr 4, 2008 at 10:35 PM, Michael Tewner [EMAIL PROTECTED] wrote:

  Just talked to Netvision Asakim support -
  He was knowlegable  - ran `mtr` on his workstation and saw the packet
 loss.
 
  He explained that there is no problem and that the core routers are
  dropping the ping packets based on the amount of load on the router.
  He explained that the router should only be dropping ICMP packets.

 I didn't read all the messages on this thread but maybe if you could run the
 same tests with tcptraceroute you could see weather the packet drop happens
 to TCP packets or not?

 --Amos



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: major packet loss at hot server

[Michael Tewner]

Wow -
A post from December 2006 in a gaming forum shows major packet loss
from the same router:
http://forums.guru3d.com/showthread.php?t=208330

C:\Documents and Settings\Administratortracert ablpls-01-02.planetside.com

Tracing route to ablpls-01-02.planetside.com [199.108.204.34]
over a maximum of 30 hops:

1 18 ms 19 ms 19 ms lo0.lns13.hfa.nv.net.il [212.143.205.170]
2 19 ms 19 ms 19 ms vl102.agr01.hfa.netvision.net.il [212.143.210.25
3]
3 * * 19 ms vl100.coresw2.hfa.nv.net.il [212.143.8.69]
4 28 ms 19 ms 19 ms ge5-0.core2.hfa.nv.net.il [212.143.8.210]
5 99 ms 99 ms 99 ms pos2-3.brdr1.lnd.nv.net.il [212.143.12.57]
6 108 ms 99 ms 99 ms ge9-1.br02.ldn01.pccwbtn.net [63.218.52.13]
7 * * * Request timed out.
8 179 ms 179 ms 179 ms vl46.ashaens-1.sonyonline.net [64.37.144.177]
9 189 ms 179 ms 169 ms ablpls-01-02.planetside.com [199.108.204.34]


On Sat, Apr 5, 2008 at 9:18 PM, Jonathan Ben Avraham [EMAIL PROTECTED] wrote:
 Hi Michael et al,
  I have been watching vl100.coresw2.hfa.nv.net.il for the past month for a
 customer of mine and have seem roughly the same TCP packet loss going into
 it on port 80. (It turned out that the customer's problem was not that but a
 configuration error on a different, internal Netvision router. FYI,

   - yba


  On Sat, 5 Apr 2008, Michael Tewner wrote:


  Date: Sat, 5 Apr 2008 20:51:06 +0300
  From: Michael Tewner [EMAIL PROTECTED]
  To: Amos Shapira [EMAIL PROTECTED]
  Cc: IGLU Mailing list linux-il@cs.huji.ac.il
 
  Subject: Re: major packet loss at hot server
 
 
 
 
  Yeah - I seem to be getting 20-30% loss on TCP packets to www.cnn.com
  on the same router that was dropping the ICMP packets. (#4 below)
 
  Selected device eth0, address 10.1.1.193, port 38669 for outgoing packets
  Tracing the path to www.cnn.com (64.236.29.120) on TCP port 80 (www),
  30 hops max
  1  10.1.1.254  0.514 ms  0.974 ms  0.985 ms
  2  X  0.986 ms  0.988 ms  0.983 ms
  3  xxx.ser.netvision.net.il ()  9.403 ms  11.062 ms  12.373 ms
  4  vl100.coresw2.hfa.nv.net.il (212.143.8.69)  13.803 ms * 10.785 ms
  5  ge0-1.gw2.hfa.nv.net.il (212.143.8.212)  9.913 ms  9.894 ms  26.442 ms
  6  pos1-0.brdr1.nyc.nv.net.il (212.143.12.13)  255.455 ms  247.516 ms
 
  On Fri, Apr 4, 2008 at 11:30 PM, Amos Shapira [EMAIL PROTECTED]
 wrote:
 
   On Fri, Apr 4, 2008 at 10:35 PM, Michael Tewner [EMAIL PROTECTED]
 wrote:
  
  
Just talked to Netvision Asakim support -
He was knowlegable  - ran `mtr` on his workstation and saw the packet
   
   loss.
  
   
He explained that there is no problem and that the core routers are
dropping the ping packets based on the amount of load on the router.
He explained that the router should only be dropping ICMP packets.
   
  
   I didn't read all the messages on this thread but maybe if you could run
 the
   same tests with tcptraceroute you could see weather the packet drop
 happens
   to TCP packets or not?
  
   --Amos
  
  
  
 
 
  =
  To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe | mail [EMAIL PROTECTED]
 
 
 

  --

   EE 77 7F 30 4A 64 2E C5  83 5F E7 49 A6 82 29 BA~. .~   Tk Open
 Systems
  =}ooO--U--Ooo{=
  - [EMAIL PROTECTED] - tel: +972.2.679.5364, http://www.tkos.co.il -


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: major packet loss at hot server

[Michael Tewner]

OK - I decided to give this a look, because I'm not happy with my
transfer speeds -

I ran mtr from work (Netvision 5Mbit(?) ) to my home IP (Hot+Netvision):
4. vl100.coresw1.hfa.nv.net.il
 23.0%   279   10.7  15.2   8.2 172.4  15.2
 5. ge1-7.coresw1.ptk.nv.net.il
  17.2%   279   10.8  16.1  10.6  98.1  12.1
 6. clr1.cab01.ptk.nv.net.il
   0.0%   279   12.8  18.9  10.5 109.8  16.4
 7. ???


That vl100.coresw1.hfa.nv.net.il  router is causing loss for every
host I've tried. www.cnn.com (~15%).

www.yahoo.com it's giving ~20% loss, and pos2-13.brdr1.lnd.nv.net.il
is giving another 10%.
www.google.com - vl100 is giving 16%, pos2-9.brdr1.lnd.nv.net.il  is
giving 26% loss.

Is this on purpose, or is this some type of shaping/QOS?

-mike
On Sat, Mar 22, 2008 at 2:02 AM, Hetz Ben Hamo [EMAIL PROTECTED] wrote:
 I use ADSL (5Mbit). My ISP: Netvision.

  It seems that they also have some serious packet drops even from my
  machine to Netvision! check this out: (problems are marked with
  arrows)

  /mtr -c 10 -r netvision.net.il
  HOST: witch.dyndns.orgLoss%   Snt   Last   Avg  Best  Wrst StDev
   1. 192.168.1.1   0.0%101.3   0.9   0.7   1.4   0.3
   2. lo0.lns05.hfa.nv.net.il   0.0%10   11.4  26.6  11.4 147.4  42.5
  --  3. vl201.coresw1.hfa.nv.net.il  30.0%10   30.6  16.3  12.0
  30.6   6.4 ---
   4. po41.srvc4.hfa.nv.net.il  0.0%10   30.5  16.6  11.7  30.5   7.4
   5. ???  100.0100.0   0.0   0.0   0.0   0.0

  /mtr -c 10 -r www.ynet.co.il
  HOST: witch.dyndns.orgLoss%   Snt   Last   Avg  Best  Wrst StDev
   1. 192.168.1.1   0.0%100.8   0.9   0.7   1.4   0.2
   2. lo0.lns05.hfa.nv.net.il   0.0%10   11.5  11.6  11.3  12.1   0.2
  --  3. vl201.coresw1.hfa.nv.net.il  40.0%10   12.1  14.6  11.8
  27.1   6.1 --
   4. po41.srvc4.hfa.nv.net.il  0.0%10   11.6  12.9  11.6  17.9   2.1
   5. 212.143.162.136   0.0%10   14.2  13.2  11.4  16.3   1.6

  Hmm, I wonder if Netvision knows about this..

  Hetz



  On Fri, Mar 21, 2008 at 10:10 PM, sara fink [EMAIL PROTECTED] wrote:
   Hello Everyone
  
I am having major problem with packet loss at some hot server that
sits in tel aviv. www.dnsstuff.com revealed this info.
  
I would like to know how many people suffer from this problem.
  
For this task mtr program is needed. The program can be downloaded at
http://www.bitwizard.nl/mtr/ .
  
The description of  the program is mtr  combines  the  functionality
of the traceroute and ping programs in a single network diagnostic
tool.
  
  As mtr starts, it investigates the network connection between the
host mtr runs on and HOSTNAME.  by sending  packets  with  purposly
low  TTLs.  It  continues to send packets with low TTL, noting the
response time of the intervening routers.  This allows mtr to print
the  response  percentage  and response  times of the internet route
to HOSTNAME.  A sudden increase in packetloss or response time
is often an indication of a bad (or simply overloaded) link.
  
After installing this program please run the command mtr google.com or
even mtr walla.co.il mtr ynet.co.il
  
I got in all 3 urls ~75% packet loss at ip 213.57.43.199 and at
213.57.43.22 (or 14) another ~20% packet loss.
  
Please inform me how many people suffer from this problem and who is
their isp. Mine is 012. but the ips mentioned belong to hot.
  
I already talked with a nice technician at hot and he promissed to
give me an answer. Meanwhile at 012 tried to help me and in the end he
told me it's a operating sytem problem. I just hate to hear such
stupid excuses. I tried bot with and without iptables and it's the
same. Instead of solving the problem they blame the OS. And all this
happens with router or without.
  
Besides that, the first IP is actually border gateway.
  
Thanks for your help
  
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
  
  



  --
  Skepticism is the lazy person's default position.
  my blog (hebrew): http://benhamo.org



  =
  To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: major packet loss at hot server

[Michael Tewner]

Just talked to Netvision Asakim support -
He was knowlegable  - ran `mtr` on his workstation and saw the packet loss.

He explained that there is no problem and that the core routers are
dropping the ping packets based on the amount of load on the router.
He explained that the router should only be dropping ICMP packets.

I got to them by calling support (  04-856-0550 ?) and telling them
that there is a problem with their core network.

On Fri, Apr 4, 2008 at 2:12 PM, Michael Tewner [EMAIL PROTECTED] wrote:
 OK - I decided to give this a look, because I'm not happy with my
  transfer speeds -

  I ran mtr from work (Netvision 5Mbit(?) ) to my home IP (Hot+Netvision):
  4. vl100.coresw1.hfa.nv.net.il
  23.0%   279   10.7  15.2   8.2 172.4  15.2
   5. ge1-7.coresw1.ptk.nv.net.il
   17.2%   279   10.8  16.1  10.6  98.1  12.1
   6. clr1.cab01.ptk.nv.net.il
0.0%   279   12.8  18.9  10.5 109.8  16.4
   7. ???


  That vl100.coresw1.hfa.nv.net.il  router is causing loss for every
  host I've tried. www.cnn.com (~15%).

  www.yahoo.com it's giving ~20% loss, and pos2-13.brdr1.lnd.nv.net.il
  is giving another 10%.
  www.google.com - vl100 is giving 16%, pos2-9.brdr1.lnd.nv.net.il  is
  giving 26% loss.

  Is this on purpose, or is this some type of shaping/QOS?

  -mike

 On Sat, Mar 22, 2008 at 2:02 AM, Hetz Ben Hamo [EMAIL PROTECTED] wrote:


  I use ADSL (5Mbit). My ISP: Netvision.
  
It seems that they also have some serious packet drops even from my
machine to Netvision! check this out: (problems are marked with
arrows)
  
/mtr -c 10 -r netvision.net.il
HOST: witch.dyndns.orgLoss%   Snt   Last   Avg  Best  Wrst 
 StDev
 1. 192.168.1.1   0.0%101.3   0.9   0.7   1.4   
 0.3
 2. lo0.lns05.hfa.nv.net.il   0.0%10   11.4  26.6  11.4 147.4  
 42.5
--  3. vl201.coresw1.hfa.nv.net.il  30.0%10   30.6  16.3  12.0
30.6   6.4 ---
 4. po41.srvc4.hfa.nv.net.il  0.0%10   30.5  16.6  11.7  30.5   
 7.4
 5. ???  100.0100.0   0.0   0.0   0.0   
 0.0
  
/mtr -c 10 -r www.ynet.co.il
HOST: witch.dyndns.orgLoss%   Snt   Last   Avg  Best  Wrst 
 StDev
 1. 192.168.1.1   0.0%100.8   0.9   0.7   1.4   
 0.2
 2. lo0.lns05.hfa.nv.net.il   0.0%10   11.5  11.6  11.3  12.1   
 0.2
--  3. vl201.coresw1.hfa.nv.net.il  40.0%10   12.1  14.6  11.8
27.1   6.1 --
 4. po41.srvc4.hfa.nv.net.il  0.0%10   11.6  12.9  11.6  17.9   
 2.1
 5. 212.143.162.136   0.0%10   14.2  13.2  11.4  16.3   
 1.6
  
Hmm, I wonder if Netvision knows about this..
  
Hetz
  
  
  
On Fri, Mar 21, 2008 at 10:10 PM, sara fink [EMAIL PROTECTED] wrote:
 Hello Everyone

  I am having major problem with packet loss at some hot server that
  sits in tel aviv. www.dnsstuff.com revealed this info.

  I would like to know how many people suffer from this problem.

  For this task mtr program is needed. The program can be downloaded at
  http://www.bitwizard.nl/mtr/ .

  The description of  the program is mtr  combines  the  functionality
  of the traceroute and ping programs in a single network diagnostic
  tool.

As mtr starts, it investigates the network connection between the
  host mtr runs on and HOSTNAME.  by sending  packets  with  purposly
  low  TTLs.  It  continues to send packets with low TTL, noting the
  response time of the intervening routers.  This allows mtr to print
  the  response  percentage  and response  times of the internet route
  to HOSTNAME.  A sudden increase in packetloss or response time
  is often an indication of a bad (or simply overloaded) link.

  After installing this program please run the command mtr google.com or
  even mtr walla.co.il mtr ynet.co.il

  I got in all 3 urls ~75% packet loss at ip 213.57.43.199 and at
  213.57.43.22 (or 14) another ~20% packet loss.

  Please inform me how many people suffer from this problem and who is
  their isp. Mine is 012. but the ips mentioned belong to hot.

  I already talked with a nice technician at hot and he promissed to
  give me an answer. Meanwhile at 012 tried to help me and in the end he
  told me it's a operating sytem problem. I just hate to hear such
  stupid excuses. I tried bot with and without iptables and it's the
  same. Instead of solving the problem they blame the OS. And all this
  happens with router or without.

  Besides that, the first IP is actually border gateway.

  Thanks for your help

  =
  To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe

Re: SSHD for Windows

[Michael Tewner]

We're using sshwindows.sourceforge.net


On Wed, Mar 12, 2008 at 5:43 PM, Tomer Cohen [EMAIL PROTECTED] wrote:
 At my workplace we found that currently cygwin isn't working well on Vista
 (and Windows 2008 server). Therefore we use copsshd, which is just another
 cygwin-based sshd, but packed with a nice Windows GUI.






 On Wed, Mar 12, 2008 at 11:02 PM, Alex Alexander [EMAIL PROTECTED]
 wrote:
  Here are some free ssh implementations for winblows... er... windows =)
  The first seems to be a native app, the others are cygwin based but don't
 require cygwin to be installed (they come with the necessary files bundled
 in their package).
 
  http://www.freesshd.com/
 
 http://www.itefix.no/phpws/index.php?module=pagemasterPAGE_user_op=view_pagePAGE_id=12MMN_position=149:149
  http://sshwindows.sourceforge.net/
 
  Alex
 
 
 
 
 
 
  On Wed, Mar 12, 2008 at 10:36 PM, Gil Freund [EMAIL PROTECTED] wrote:
 
   Hi,
  
   I am looking for an SSHD implementation on Windows, prefreably one that
   does not depend on an installation of cygwin or SFU, and will use
   Windows authentication and command prompt.
  
   Any ideas?
  
   Thanks
  
   Gil
  
   =
   To unsubscribe, send mail to [EMAIL PROTECTED] with
   the word unsubscribe in the message body, e.g., run the command
   echo unsubscribe | mail [EMAIL PROTECTED]
  
  
 
 
 
  --
  |
  | Alex Alexander
  | http://linuxized.blogspot.com
  | http://www.nerd.gr
  \



 --
 Tomer

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: NIC replacement

[Michael Tewner]

Bonding MAC addresses to interfaces is a lifesaver when you have multiple NIC's

Imagine writing up a bunch of iptables rules. Then upgrade your
kernel. Suddenly, all of your interfaces are assigned to different
NICs and you can't access anything!

On Wed, Mar 12, 2008 at 6:20 AM, Avraham Rosenberg [EMAIL PROTECTED] wrote:
 On Wed, Mar 12, 2008 at 11:43:47AM +0200, Meir Kriheli wrote:
   Avraham Rosenberg wrote:
   Hi,
   Something is rotten in the kindom of Danemark.
  ..

  To complete the mistery. After reset to factory defaults, the router worked
   again as new. An this morning, after reactivating the on-board NIC,
   everything works.
   Any hint will be most welcome. Cheers, Avraham
   
  
   udev has a rule which binds MAC addresses to interfaces (prevents the
   annoyance of having interfaces names changed on machines with several
   similar NICs after kernel upgrades). The downside: changing NICS
   requires modification of that rule.
  
   If you have udev installed, look for the file:
  
   /etc/udev/rules.d/z25_persistent-net.rules
  
  
   If you have it, you'll need to change the MAC address for eth0 to the
   new one (or remove that rule).
  
   HTH
   --
   Meir Kriheli
  

  Hi,
  Thanks a lot Geoff and Meir.
  If I undertood Geoff correctly, it pays to avoid using the on-board NIC
  (this time it recovered), as next time, the misbehaviour of the router
  might damage the motherboard.
  I changed therefore the line in /etc/udev/rules.d/z25_persistent-net.rules
  as recommended by Meir and everything works.
  I just returned from town with a EDIMAX NIC, as I do not rely on that old
  card (I used it only, because, following Murphy, the trouble started late
  in the evening). It happens to be based on a RTL8139 chip.
  Thanks again, Avraham

 --
  Please avoid sending to this address Excell or Powerpoint attachments.

  =


 To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Connecting more than one display to the same PC

[Michael Tewner]

I had 4 displays connected to my linux machine - unfortunately, they
were 4 not-so-good PCI video cards, and my computer spent all its time
writing to the PCI bus - Usable, but slow.

So, I dedicated the linux machine to just managing the displays, and I
worked using XDMCP from a different server. That worked great.

Again, that was with bad video cards and a not-so-powerful computer.
Your mileage may vary.

-mike

On Sat, Mar 8, 2008 at 11:54 PM, Omer Zak [EMAIL PROTECTED] wrote:
 After reading the article in http://www.linux.com/articles/113516 about
  this subject and seeing how simple it is to configure X-Window to handle
  two displays, I would like to do this in my PC.

  * What is your experience with driving 2-3 displays from your Linux PC?
  * Given the following situation, what would you recommend/keep away
  from?

  Hardware:
  My PC currently has the nVidia Corporation NV34 [GeForce FX 5200] (rev
  a1) (according to lspci) video card in an AGP slot.
  It also has two free PCI slots.

  Installation:
  Linux flavor being used - Debian Etch, updated packages.
  X-Window: Xorg version: 7.1.0-19.
  Video driver being used: /usr/lib/xorg/modules/drivers/nv_drv.so
  From /var/log/Xorg.0.log:
   (II) Module nv: vendor=X.Org Foundation
   compiled for 7.1.1, module version = 1.2.0
   Module class: X.Org Video Driver

  * Specific issues and questions:

  1. What is the best video card nowadays, by the following criteria:
  - Linux support
  - Support for OpenGL in Linux
  - Support for 3D effects in Linux
  - On the other hand, I am not a gamer and don't expect to play games on
  it.
  - I need it to be a PCI card, as the AGP slot is already occupied.
  However if an AGP card is much better, please let me know about it as
  well.

  2. Is there any problem using two different video cards (say, nVidia and
  ATI) in the same PC?

  3. Not directly related to the above, but insights would be helpful:

  I have a problem with the gspca Webcam driver - when trying to use any
  application using a Webcam, the process gets stuck and cannot be killed
  (i.e. the problem is in the driver).  The problem seems to be associated
  with the video card/driver, because in another PC (with an ATI driver),
  the gspca driver and Webcam work OK.

  Does anyone know anything about this problem?  I already asked the gspca
  developer and in some IRC forums - but found no help there.

  --- Omer
  --
  Delay is the deadliest form of denial.C. Northcote Parkinson
  My own blog is at http://www.zak.co.il/tddpirate/

  My opinions, as expressed in this E-mail message, are mine alone.
  They do not represent the official policy of any organization with which
  I may be affiliated in any way.
  WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html


  =
  To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Large scale DNS

[Michael Tewner]

Hasn't tinyDNS been used for super-large installations?

On Feb 8, 2008 4:31 PM, Oren Held [EMAIL PROTECTED] wrote:
 Maybe you should read about Dynamic DNS: it's a protocol extension (bind  MS
 DNS support it for years).
 When enabled, bind actually uses journal (.jnl) files for each zone, and
 synchronises the text files only when requested to (i.e. when doing service
 named stop). In this mode you shouldn't edit the text files manually when
 bind is alive!

 Dynamic DNS lets you make changes live, forgetting that these text files
 exist. It's simply a protocol extension which allows sending updates (i.e.
 add this record, remove that, etc).

 'nsupdate' is bind's not-too-friendly tool for doing these updates,
 Perl's Net::DNS allows you to write your customised stuff. I once wrote
 http://hostupd.sf.net to ease this task, although keep in mind it's not
 maintained anymore.

 I don't see why you dislike text files so much. This simplicity has many
 advantages. As I see it, the big disadvantages of dns-zones-as-text-files are
 in the EDITING process (multiple edits at once, locking, mistakes which ruin
 the whole zone). These disadvantages are solved by using Dynamic DNS. As for
 storage in text files, sounds cool to me, even for big zones.

 Peace Sabbath,

  - Oren


 On Thursday, 7 February 2008 14:51:06 David L. Smith wrote:
  Does anybody know how one goes about managing a DNS server with tens or
  hundreds of thousands of addresses ?
 
  From searching around I get the impression that everybody re-invents the
 
  wheel for themselves, and either manually edit text files, or
  dynamically generate them. All solutions based on more scalable
  technologies than textfiles seem to be either immature (eg bind-dlz),
  limited in features(long list) or not widely used.
 
  It seems unimaginable that a technology so established and widespread
  would be lacking what I would see as a sensible scalable implementation.
  Am I missing something ?
 
  David
 
  =
  To unsubscribe, send mail to [EMAIL PROTECTED] with
  the word unsubscribe in the message body, e.g., run the command
  echo unsubscribe | mail [EMAIL PROTECTED]



 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Easiest way to install an asterisk system

[Michael Tewner]

You can have ubuntu running asterisk in less than an hour.
I bought a generic-brand compatible modem for $15 on ebay. Installed
it and drivers.

This gave me one physical line, and as many SIP devices as the
computer could handle.


On Dec 24, 2007 4:56 AM, sammy ominsky [EMAIL PROTECTED] wrote:
 On 24/12/2007, at 10:06, Geoffrey S. Mendelson wrote:

  What is the easiest way to install an Asterisk system?

 Do you want this system to run physical phones or as a registration
 server for sip devices?  The former is more difficult than the
 latter.  You need hardware!

 As for the latter, I'd recommend Debian and apt-get.

  Is there a cheap source of FXO (not modem) PCI cards in Israel?

 Somehow I really doubt it.  if you find one, let me know!

 ---sambo


 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Fedora 7 -- Fedora 8

[Michael Tewner]

Make sure you're using the proper X driver in your /etc/X11/Xorg.conf
file - a driver like vesa would probably bring up X, but react
double-plus slow.

On Dec 6, 2007 4:55 AM, Dan Kenigsberg [EMAIL PROTECTED] wrote:
 Thanks for your replies. They did not really help, as my problem magically
 disappeared after a couple of days (and after merging seemingly unrelated
 rpmnew files)

 For ther record:

 On Tue, Dec 04, 2007 at 09:31:39AM +0200, Noam Meltzer wrote:
  Hi,
  Please check that the process of your X server is not Xgl.
  Had the same problem problem with kubuntu gutsy.

 I don't have Xgl,

  A. what's the output of:
  $ rpm -qa --queryformat %{name}-%{version}-%{release}.%{arch}\n | grep
  fc7

 There are some of those, but so is the fact with
 http://download.fedora.redhat.com/pub/fedora/linux/releases/8/Everything/x86_64/os/Packages/

  B. What's your hardware/Xorg configuration? Are you using compiz 
  friends?

 I'm not using any fancy visual effects (and no compiz). just plain gnome.

  C. Are you using gnome or KDE? If you create a new user and login into
  the new account - are you hitting the same problem?
 

 I did not manage to check this.

 Thanks for your attemps!

 --

 Dan Kenigsberghttp://www.cs.technion.ac.il/~dankenICQ 
 162180901

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: recommended web development environment?

[Michael Tewner]

I saw Joomla mentioned - so I thought I would plug Plone - a great CMS
built on Zope.

It's super cool. It has a large user base. It has a large developer
base. It's fun. It's well documented. It even has KSS - an AJAX
library. It's robus. It's Python. It has a Cheese Shop. It has
conferences. It's open source.

It's an option worth looking into. Check them out at plone.org

-mike


On Nov 13, 2007 8:57 PM, Amos Shapira [EMAIL PROTECTED] wrote:
 On 14/11/2007, Gilad Ben-Yossef [EMAIL PROTECTED] wrote:

  When creating a SMALL BUSINESS WEB SITE (which is what the question was
  about), coding HTML and CSS by hand is a gross mistake. I know because I
  did it twice already.

 Now with the context of I did it twice already it adds some more weight to
 your opinion (besides your reputation not to bullshit most of the time :). I
 already installed WP on my desktop right after reading your recommendation
 but haven't got around to play with it. We already have a colour scheme and
 some fonts defined by a graphics designer for other promotional stuff
 (business cards, flyers we are going to distribute, the huge sticker all
 over the back windows of our car) so I'll have to learn how to teach
 whatever I use to comply with that.

 That aside, I find it pretty frustrating not to be able to fully follow web
 site designs so I figured it could be a good, justifiable opportunity to
 learn this stuff (a bit like playing with assembly language, UNIX kernel
 internals and the network stack from the ethernet layer up almost two
 decades ago still helps me connect things together even when dealing with
 much higher technologies like Java, web apps, databases, or even foreign
 technologies like Windows since they all eventually have to work in the same
 framework).

 Thanks,

 --Amos



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: You ain't paranoid if people really are out to get you!

[Michael Tewner]

Hear, Hear!

On 10/26/07, Nadav Har'El [EMAIL PROTECTED] wrote:
 On Thu, Oct 25, 2007, Geoffrey S. Mendelson wrote about You ain't paranoid 
 if people really are out to get you!:
  Since the topic came up earlier today, I thought this might be relevant:
 
http://www.guardian.co.uk/technology/2007/oct/25/google.israel
 
  What was attributed to government paranoia or greed turns out to be
  good defense.

 Forgive me for saying this, but this piece of news, which was also
 published in all major Hebrew newspaper, is one of the worst pieces of crap
 that was published in the last year.

 A good journalist should know that reporting a fact is not the same as
 reporting the whole truth. For example, a journalist might report that
 Nadav Har'El was not found guilty of a murder, which is technically true
 (I really haven't been found guilty of any murder), but incorrectly implies
 that I have been suspected of some murder, and might cause readers to wrongly
 associate me with some murder or some suspicion, that never existed in the
 first place.

 In the case of the story you quoted, the papers basically quoted a fact: that
 the Hamas was using Google Earth to see maps of Israel to decide where to
 launch their rockets to. But quoting this fact as a piece of news *implies*
 to the average reader that the Hamas are somehow dependent on Google Earth
 for their targeting Israel, and if Google Earth did not exist (or was
 somehow blocked by Israel) - the rockets would immediately stop.

 But the plain truth is that Google Earth doesn't give Hamas much beyond
 what a plain printed map - of the type you can buy in any bookstore or gas
 station - could give them. They are probably using Google instead of the
 printed map because of the same reason we use it - convenience - not 
 necessity.
 Similarly, I am guessing that the Hamas are writing their terrorism plans
 on a computer with Microsoft Word, not on pieces of paper. So, why not publish
 a piece of news saying that

 Microsoft Word Used to Plan Terror Attacks!

 After which surely many readers will want to block Microsoft sales in the
 Gaza strip, and many readers might start believing that Microsoft is evil
 and must be boycotted...


 --
 Nadav Har'El| Friday, Oct 26 2007, 14 Heshvan 5768
 [EMAIL PROTECTED] |-
 Phone +972-523-790466, ICQ 13349191 |What's tiny, yellow and very dangerous? A
 http://nadav.harel.org.il   |canary with the super-user password.

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Petition to ask MainConcept to release MainActor as Open Source software

[Michael Tewner]

MasterType's Writer for the C64 would take so long to load, well more
than 5 minutes - First one side of the disk, then the other. It was a
very rich-featured word processor.


On 10/2/07, Nadav Har'El [EMAIL PROTECTED] wrote:
 On Tue, Oct 02, 2007, Dan Kenigsberg wrote about Re: Petition to ask 
 MainConcept to release MainActor as Open Source software:
  On Tue, Oct 02, 2007 at 07:14:07PM +0200, Nadav Har'El wrote:
   [1] On the first computer I ever used, the Commodore 64, a diskette held
   around 160 KB (if I remember correctly). My new hard disk will contain
   320 GB, the equivalent of 2 million (!!) such diskettes.
 
  But boot time was shorter!

 Boot time, yes, but when you actually wanted to run a program, you'd often
 sit as much as 5 minutes (!) waiting for for it to load (though there were
 load speedup utilities that sped this up to just one minute).

 By the way, today, with the advent of hibernate (suspend to disk), boot time
 is actually very short. I rarely ever boot my computer from scratch these
 days - except when I want to change the kernel. Rather I use the hibernate
 feature. Booting up the next time takes about 10 seconds, and I get
 everything exectly like I left it.

 --
 Nadav Har'El| Tuesday, Oct  2 2007, 21 Tishri 5768
 [EMAIL PROTECTED] |-
 Phone +972-523-790466, ICQ 13349191 |Business jargon is the art of saying
 http://nadav.harel.org.il   |nothing while appearing to say a lot.

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: PC router distro?

[Michael Tewner]

How about shorewall/shoreline?
http://www.shorewall.net/

I looked into this a few months ago, and realized that it was easier
for me to set up a CentOS box with webmin's IPtables module.


On 10/17/07, Geoffrey S. Mendelson [EMAIL PROTECTED] wrote:
 I there any distro of Linux specifically to turn a PC into a router?

 What I am looking for is something that runs on a PC, either from
 a floppy, hard drive, USB memory stick, etc, that turns a PC into
 a full function router. Similar in function to the SVEASoft package
 or Tomato for the Linksys routers.

 The person who would be using it is not technically able to run or configure
 a Linux system as a router. they could only do it if it has a web interface,
 and then they would need some coaching.

 They have an aDSL line if it matters and currently use a Windows XP
 dialer.

 The choice of a PC is that they have several PIII class computers sitting
 around and no money for a router.

 Thanks in advance,

 Geoff.

 --
 Geoffrey S. Mendelson, Jerusalem, Israel [EMAIL PROTECTED]  N3OWJ/4X1GM
 IL Voice: (07)-7424-1667 U.S. Voice: 1-215-821-1838
 Visit my 'blog at http://geoffstechno.livejournal.com/

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Do you know anyone CentOS (www.shiny.co.il) ?

[Michael Tewner]

Another mirror
centos.spd.co.il

On 10/2/07, Web Master [EMAIL PROTECTED] wrote:


 Hi list members,

 I do not like Debian and Ubuntu distribution,

 so I am looking for a distribution, which RPM-based, but provide me

 - a Postfix smtp server (with amavis virusscanner and spamassassin 
 spamfilter),
 - an imap/pop server (daemon),
 - a Samba server with swat,
 - an Apache webserver,
 - a Squid proxy,
 - an Iptables firewall,
 - a BIND dns server,
 - and an ISC DHCP server

 I heard that CentOS is downloadable for comletely free,
 and it is a perfect duplication of the Red Hat Linux Enterprise Server.

 Do you know anybody the CentOS distribution?

 nmap -A www.shiny.co.il


 Interesting ports on liqui.pnc.co.il (199.203.55.209):
 Not shown: 1685 filtered ports
 PORT STATE  SERVICE VERSION
 20/tcp   closed ftp-data
 21/tcp   open   ftp?
 22/tcp   open   ssh?
 53/tcp   open   domain?
 80/tcp   open   httpApache httpd 2.2.3 ((CentOS))
 89/tcp   closed su-mit-tg
 443/tcp  open   ssl OpenSSL
 993/tcp  open   imaps?
 995/tcp  open   pop3s?
 1720/tcp closed H.323/Q.931
 4662/tcp closed edonkey
 8080/tcp open   http-proxy?

 Running (JUST GUESSING) : Linux 2.6.X|2.4.X (86%)





  telnet www.shiny.co.il 8080

 Trying 199.203.55.209...
 Connected to www.shiny.co.il.

 HEAD / HTTP/1.0


 HTTP/1.1 403 Forbidden
 Date: Tue, 02 Oct 2007 20:27:00 GMT
 Server: Apache/2.2.3 (CentOS)
 Accept-Ranges: bytes
 Content-Length: 5044
 Connection: close
 Content-Type: text/html

 Connection closed by foreign host.













 Utazások Erotikában - Férfiszemmel a nőkről. Megjelent Vámos Miklós új 
 regénye.http://ad.adverticum.net/b/cl,1,6022,208916,259647/click.prm


 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]

Re: Nostalgia is not what it used to be (was: Petition to ask MainConcept)

[Michael Tewner]

I remember when the C128 came out with Sprites - efficient basic animations.
Ah... Those were the days.

On 10/3/07, Nadav Har'El [EMAIL PROTECTED] wrote:
 On Wed, Oct 03, 2007, Shachar Shemesh wrote about Nostalgia is not what it 
 used to be (was: Petition to ask MainConcept):
  Which means it all comes down to this. Why? Why do things take more space?
 
  Part of it is understandable. The C64 had a 160x200 with 16 possible
  colors screen, with not all combination of colors possible in each
 ...
  But picture sizes aren't everything. Appleworks was a two sided program
  that gave you a word processor, spreadsheet and a database, including OS
  (Apple ProDOS) all in less than 290KB. How? I find it extremely unlikely
  that the entire program was written in Assembly. It was, probably,
  written in C or Pascal, and compiled.
 ...

 I think your analysis is right on the money.
 There indeed seem to be two issues. The first issue, as you said, is that on 
 the
 C64, there were a lot of things you couldn't do: you couldn't play recorded
 music (just synthesised music, which was considered a marvel at the time),
 you couldn't play video. Heck, with the lousy resolution and number of colors
 you couldn't even display a realistic image (I remember when the Amiga came
 out, with its 4096 colors, everyone made a fuss about being able to show a
 realistic image). So if now my hard-disk contains (for example) 5 GB of music
 and 5 GB of photos, none of this was even possible in the C64 days, so the
 space wasn't needed. Let alone video, which is the only thing that could
 possibly fill up my new 320 GB disk.

 The second reason is, of course, bloat. On the C64 I had one diskette with
 a C compiler, editor, and a simplified Unix-like shell, all in 160 KB on disk
 (and only 50 KB of memory to use). Today, on Linux, just bash takes quadruple
 that space, and even ls comes close to filling such a diskette!
 *Everything* got bloated - software got more and more options, code got less
 efficient (with people caring less about efficiency), libraries got bigger
 too, the executable contains a lot of cruft. The funniest waste of space I
 can think of is the COPYING file, which my computer has 374 (!) copies of
 which installed, totalling 7.7 MB. That's 47 Commodore-64 diskettes... ;-)

  pixel. I'd say this means that an uncompressed picture took (if I
  understand the graphic encoding correctly) about 9.3KB in full color
  mode, a little less (8.8KB) in sorta color mode (reason being that mode

 While 9 KB might sound a little, actually a lot lot less was used for doing
 animation on the C64. There were two issues: First, the tiny memory (around
 50 KB available to the application) and absurdly slow disk drive, even in that
 time's standards (300 bytes per second!), didn't allow you to animate more
 than 5 of this frames. Second, the CPU was so slow, that just painting one
 frame would easily take more than a second (in BASIC, it could take you a
 minute...). So the favorite option for animation on the C64 were sprites.
 These were small (12x21 pixel) animations drawn by the video hardware, and
 used to move around game characters and the likes. So the game never contained
 animations of whole frames, but rather of the tiny sprites that moved around -
 and this took very little space.

  I think a lot of it has to do with when need must. You only had 128KB
  of RAM, you only had so many floppy sides you could use, you had no
  choice but to make do. Programming was centered around making things
  fit, just as it was about making things spry.

 There's a famous paper on the design of the Unix spell program, which
 ran (if I remember correctly) on some PDP 10 with 65 KB of memory. Much
 of the work involved in fitting all the words in less than that memory.
 When I started working on Hspell, it was obvious that nobody really cared
 about how much memory it would take. When it ended up taking 100 KB of disk
 space and 4 MB of memory, everyone thought it was perfectly acceptable (and
 even small if you compare it, for example, to aspell).


 --
 Nadav Har'El|   Wednesday, Oct  3 2007, 21 Tishri 5768
 [EMAIL PROTECTED] |-
 Phone +972-523-790466, ICQ 13349191 |Share your knowledge. It's a way to
 http://nadav.harel.org.il   |achieve immortality.

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Providing precompleted PDF forms in Linux

[Michael Tewner]

I doubt this would fit your requirements - being a windows tool and
all- but perhaps someone else will stumble over this thread...

If anyone out there is interested, there is a microsoft tool called
InfoPath that does something similar to this. You build a form, it
creates the database behind it automatically. Forms can then be
published and permissions set.


On 9/18/07, Gadi Cohen [EMAIL PROTECTED] wrote:
 Shachar Shemesh wrote:

  I have to admit that I have never came across the term PDF form, and
  so I have little idea what that entails.
 
 It's kind of like a regular HTML form in PDF format...  it's a PDF
 document with text input fields, select boxes, etc, that can either be
 printed or submitted online.  Don't feel bad, I also only came across
 one for the first time a few months ago.
  How about storing the plain file as an open document text template with
  fields, and then using OpenOffice in automation mode to fill out the
  fields and generate the resulting PDF?
 
 Thought about that, but there is alot of formatting in the documents,
 designed usually in MS Word or CorelDraw... when they're opened in OO
 they split over multiple pages and generally look bad...  took me long
 enough to convince the movement to move to PDF :)

 Geoffrey S. Mendelson wrote:

  You might want to look at the U.S. State Department's page for the
  form to renew a passort by mail. They have you fill out an online
  form, and them when you ok it, a PDF file is created fully filled in
  complete with a barcode containing everything in the form in a way that
  the computer can read it.
 
  It may be too sophisticated for your needs/budget, but the concepts
  will still apply.
 
 Yes actually that's exactly what I'm trying to do :)  thanks for finding
 me an example online...

 Meir Kriheli wrote:

  PDF has the notion of forms, FDF[1].
 
  Linux.com published few months ago an article about pdftk[2]. In that
  article, under Filling out forms, pdftk is used to fill the form fields.
 
  [1] http://www.planetpdf.com/developer/article.asp?ContentID=6623
  [2] http://www.linux.com/articles/53701
 
 Amazing... that's exactly the info I was looking for... thanks for
 saving me alot of unecessary searching.

 Gadi

 --
 Gadi Cohen aka Kinslayer [EMAIL PROTECTED] www.wastelands.net
 Freelance admin/coding/design HABONIM DROR linux/fantasy enthusiast
 KeyID 0x93F26EF5: 256A 1FC7 AA2B 6A8F 1D9B 6A5A 4403 F34B 93F2 6EF5


 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: question about mailing list

[Michael Tewner]

That sounds like a scary command...

step 1: Sign up for moderated list
step 2: Get email addresses of all users
step 3: Profit!

On 9/4/07, sara fink [EMAIL PROTECTED] wrote:

 I lost an email of someone. What is the command in this list to
 retrieve all the emails of the users in the list.

 Thanks in advance

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]

Re: Webmail like Gmail + encryption

[Michael Tewner]

How about GPG, or PGP?

On 8/13/07, Danny Lieberman [EMAIL PROTECTED] wrote:
 Kfir

 What exactly are you trying to achieve by encrypting email - are you trying
 to encrypt business communications between employees and vendors/customers
 to protect from eavesdroppers or do you want to encrypt the message
 repository and protect it from attackers?

 Before you start applying encryption as a panacea do a little threat
 analysis first.  Ask yourself - what assets are you trying to protect, what
 are the threats and what are your vulnerabilities.

 My experience with extrusion prevention with a fair number of customers has
 shown the following:

 a. It's  better to use outgoing email in clear text because 1) you can
 monitor what people are doing  and 2) having  a business partner
 decrypt/encrypt is generally a pain in the ass that is greater than the
 value of the business transaction.


 b. If you have high-value business communications between your company and
 vendors - you are better off just encrypting  the file (for example a
 sensitive contract or product design doc) and sending  the encrypted
 attachment.  This will enable you to monitor who is sending and who is
 receiving and with the right monitoring system - you will be able to detect
 that an encrypted file was sent which is interesting information in it's own
 right.

 Read my blog entry on this topic
 http://www.software.co.il/blog/2007/06/secure_communications_without_1.html

 Best regards
 Danny



 On 8/10/07, Kfir Lavi [EMAIL PROTECTED] wrote:
  Danny,
  Google apps is exactly what I'm trying to avoid :-)
  What did you mean by You don't want to get involved in encrypted mail on
 your lonesome.?
 
 
  On 8/10/07, Danny Lieberman [EMAIL PROTECTED] wrote:
   Kfir
  
   The best bet for you is Google Applications - surf to www.google.com/a
  
   You don't want to get involved in encrypted mail on your lonesome.
  
   danny
  
  
   On 8/9/07, Kfir Lavi [EMAIL PROTECTED] wrote:
  
Hi,
I would like to keep company emails secure and encrypted.
I'm looking for a webmail program that is similar to Gmail. It don't
 have to own all the stuff, just to be productive.
I would also want encryption. I want all the emails be encrypted
 automatically.
What is the procedure for a user? should he take with him a usb
 private key?
I'm looking for your comments on the idea.
   
Tnx,
Kfir
   
  
  
  
   --
   Danny Lieberman
   Reduce risk with practical threat analysis- visit us at
 www.ptatechnologies.com
   All things being equal, the simplest solution tends to be the best
 one. Occam's razor
  
 
   www.software.co.il/blog   - Israeli software, music and mountain biking
   www.software.co.il/pta - Download a free copy of the PTA-Practical
 threat analysis tool
  
 
   Tel Aviv   + 972  3 610-9750
   US + 1-301-841-7122
   Cell + 972 54 447-1114
 
 



 --
 Danny Lieberman
 Reduce risk with practical threat analysis- visit us at
 www.ptatechnologies.com
 All things being equal, the simplest solution tends to be the best one.
  Occam's razor
 
 www.software.co.il/blog  - Israeli software, music and mountain biking
  www.software.co.il/pta - Download a free copy of the PTA-Practical
 threat analysis tool
 
 Tel Aviv   + 972  3 610-9750
 US + 1-301-841-7122
 Cell + 972 54 447-1114

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: System resource monitoring and reporting utility ?

[Michael Tewner]

SNMP in Solaris is pain.
Installation is a pain.
Configuration is a pain.
Maintenance is less of a pain.


On 8/9/07, Amos Shapira [EMAIL PROTECTED] wrote:
 On 09/08/07, Mike Tewner [EMAIL PROTECTED] wrote:
  I've worked with tons of programs that do this - none of them have
  filled all my requirements. One thing, though - I didin't want to rely
  on SNMP - My ultimate solution would be a system that will ssh to a
  machine and run commands, process the output.

 Why not SNMP? With SNMP v3 there is adequate authentication/encryption, the
 standard snmp daemon on linux makes it very easy to add SNMP interface in
 front of any new measure you want to watch, snmp traps can serve the purpose
 of alerts and the standard protocol means that you can access the info using
 a multitude of tools.

 So why not?

 --Amos



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Memory undectable on Intel server board S5000VCL

[Michael Tewner]

isnt' there a bigmem kernel for situations just like these?


On 8/9/07, Muli Ben-Yehuda [EMAIL PROTECTED] wrote:
 On Thu, Aug 09, 2007 at 02:59:02PM +0300, Ira Abramov wrote:
  Quoting Muli Ben-Yehuda, from the post of Thu, 09 Aug:
  
   Because some PCI devices cannot deal with addresses over 4G. To be
   able to map the RAM that has physical address over 4G in the CPU's
   page tables, you need a PAE kernel. As for the penalty on speed, I
   doubt you'll be able to measure it, and it will be offset by the extra
   RAM.
 
  According to Marc (who is a man I don't like to disagree with) it's
  a hit of 3-5% on average on grid machines if I recall.

 I would like to understand this better, if you or Marc could shed more
 details? In general, I believe you know what they say about lies,
 damn lies, and performance numbers. See some numbers from Ingo Molnar
 which give the PAE overhead at a round 0.0% here:
 http://kerneltrap.org/node/2891. YMMV.

100Hz100.00%
100Hz + PAE:   0.00%

1000Hz:   -1.08%
1000Hz + PAE: -1.08%

 Cheers,
 Muli

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: [Israel.pm] Re: [hackers-il] Need Personal Loans so I can Collect Online Donations

[michael tewner]

I don't understand why we're giving Shlomi here a hard time. This is to
benefit all of us. Good. Some (most?) of us can't help with the money, but
that doesn't mean we can be rude.

-mike


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]