Re: CMS [Scanned]

2004-11-22 Thread Debian ISP
David Thurman wrote:
On 11/22/04 8:46 AM, Ross, Chris wrote:
 

1. Access control that would allow someone access to areas that they
have been allowed to work and no other area.
2. Web browser accessible.  GUI editor.
3. EASY to use for non technical folks!
4. Little modification needed.
   

Look at MamboServer.Com
 

We are using Mambo on a few projects. Have you found any good user 
documentation? The technical/administrative information is pretty good 
but to walk a user through the basic content creation process seems a 
little daunting.

Hal
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: CMS [Scanned]

2004-11-22 Thread Debian ISP
Ross, Chris wrote:
My recollection was that the you could set up a user then grant
them an access level.  At that point, the access level applied to the
entire Mambo site.  There was not a way to set up an area for each user
then grant that user access only to that area.
If you were granted the ability to create new items, you could
do that anywhere is the site.  If you had edit rites, you could edit
anywhere in that site (or virtual site).
-Original Message-
From: David Thurman [mailto:[EMAIL PROTECTED] 
Sent: Monday, November 22, 2004 11:02 AM
To: [EMAIL PROTECTED]
Subject: Re: CMS [Scanned]

On 11/22/04 9:17 AM, Ross, Chris wrote:
 

We did not see a way to get very granular with Mambo.
   

What do you mean by granular?
 

I recall seeing a module that allowed for such controls. I would send a 
link from mosforge but it looks like they are experiencing technical 
difficulties this afternoon.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Virus intercepted

2004-08-02 Thread debian-isp
A message you sent to
[EMAIL PROTECTED]
contained Worm.Mydoom.I and has not been delivered.

The message was received by s5.iti.lt from [EMAIL PROTECTED] via iu66-4.iti 
[10.4.66.4]

For your information, the original message headers were:

From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Test
Date: Mon, 2 Aug 2004 11:34:41 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary==_NextPart_000_0011_7AB046C4.6DFAA7ED
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Virus intercepted

2004-08-02 Thread debian-isp
A message you sent to
[EMAIL PROTECTED]
contained Worm.Mydoom.I and has not been delivered.

The message was received by s5.iti.lt from [EMAIL PROTECTED] via iu66-4.iti 
[10.4.66.4]

For your information, the original message headers were:

From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: 
Date: Mon, 2 Aug 2004 13:21:36 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary==_NextPart_000_0013_B13FF8A7.ED131BE8
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



OpenVPN auf Debian unstable - wie?

2004-04-19 Thread debian
Hallo Leute,

wir wollten unsere Server, welche an physikalisch verschiedenen Standorten
stehen, untereinander mit OpenVPN vernetzen. Roadwarrior Access ist nicht
geplant, aber evtl. bald auch einmal denkbar. Hat schon jemand von euch
Erfahrung mit OpenVPN? Wenn ja, wäre ich um ein bisschen Hilfe sehr
dankbar.

MfG Tim Korves


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: new suid-perl debian security update breaks qmail-scanner!

2004-04-19 Thread Debian
El lun, 19-04-2004 a las 19:58, David Wilk escribió:
 Howdy,
 
 I noticed that qmail-scanner-queue refuses to run after the last debian
 perl update.  I tried to install the latest qmail-scanner, but
 unfortunately the ./configure fails reporting:
 
 snip
 Testing suid nature of /usr/bin/suidperl...
 Whoa - broken perl install found.
 Cannot even run a simple script setuid
 
 Installation of Qmail-Scanner FAILED
 
 Error was:
 suidperl needs fd script
 snip
 
 I verified that suidperl is indeed suid root.  Not sure what's going on.
 anyone have any ideas?
 
 thanks,
 Dave
 -- 
 ***
 David Wilk
 System Administrator
 Community Internet Access, Inc.
[EMAIL PROTECTED]

Hi all,

this update fixes a security hole in suid-perl and now you cannot exec
it directly from /usr/bin/suidperl, u must call it from perl executable.
So to fix the problem with qmail-scanner u must edit the qmail-scanner's
configure script and replace suidperl with perl in the line where the
variable SUIDEPERL is defined (SUIDPERL=${SUIDPERL:-$dir/perl}).
That's the line 650 in qmail-scanner-1.21st.

This has fixed the problem for me.

Greetings

-- 
Carlos Solano Lisa


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



OpenVPN auf Debian unstable - wie?

2004-04-19 Thread debian
Hallo Leute,

wir wollten unsere Server, welche an physikalisch verschiedenen Standorten
stehen, untereinander mit OpenVPN vernetzen. Roadwarrior Access ist nicht
geplant, aber evtl. bald auch einmal denkbar. Hat schon jemand von euch
Erfahrung mit OpenVPN? Wenn ja, wäre ich um ein bisschen Hilfe sehr
dankbar.

MfG Tim Korves




Re: new suid-perl debian security update breaks qmail-scanner!

2004-04-19 Thread Debian
El lun, 19-04-2004 a las 19:58, David Wilk escribió:
 Howdy,
 
 I noticed that qmail-scanner-queue refuses to run after the last debian
 perl update.  I tried to install the latest qmail-scanner, but
 unfortunately the ./configure fails reporting:
 
 snip
 Testing suid nature of /usr/bin/suidperl...
 Whoa - broken perl install found.
 Cannot even run a simple script setuid
 
 Installation of Qmail-Scanner FAILED
 
 Error was:
 suidperl needs fd script
 snip
 
 I verified that suidperl is indeed suid root.  Not sure what's going on

Re: Starting isp and going to use Debian

2004-02-28 Thread ivan-debian-isp
On Sat, Feb 21, 2004 at 01:27:56PM -0600, Chris Hoover wrote:
 However, what do most of you use for:
 
 1. Webmail

Squirrelmail

 2. Imap/pop access

Dovecot.  Courier-IMAP is also a popular choice.

Also recommended: your choice of amavis implementations and clamav.

 3. User management

MySQL or PostgreSQL backend for RADIUS.  For small sites, normal UNIX
accounts for mail/web, for large sites, LDAP.

 4. Accounting/Finances

Freeside http://www.sisd.com/freeside.  Insert standard disclaimer
here.

 5. Drive usage control (i.e. user only get 10M for mail and 15M for web)

Normal old UNIX quotas.

-- 
_ivan


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Courier-imap Outlook problem - RE: Imap imap-ssl pop3-ssl

2004-02-12 Thread Debian ISP
We are using courier-imap in the configuration outlined on the marlow.dk
website.

One problem we keep having involves M$ Outlook clients. It seems that
something breaks with the communication between the server and Outlook
clients (or posssible corrupts the pst files created for each maildir).

Has anyone else been faced with this problem? Since we are unable to
convince our clients to move to Debian desktops with KMail or some other OSS
alternative, some workaround for this issue would be greatly appreciated!

Googling has not proven very helpful (only confirmed this as a problem).

Thanks in advance,

Hal

-Original Message-
From: Jose Alberto Guzman [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 12, 2004 8:16 PM
To: Jonathan Matthews
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: Imap  imap-ssl  pop3-ssl


Jonathan Matthews wrote:
 [Sorry for the cross-post - I think it's applicable to both -isp and
 -user.]

 I need to offer imap, imapssl and pop3ssl services. FWIW, imap would be
 localhost only, but -ssl services would be publically accessible.

 My reading thus far leads me towards Courier-imap with Exim 4
 backported to stable so I can interface with ClamAV, but feel free to
 point out something important that I've missed.

 Do I need to have a different instance of the server running for each
 protocol?  i.e. one listening on each port that the three services use
 as standard?

 Is there a server that would do the job with just one instance listening
 on all three ports?  Would there be any advantages or disadvantages to
 this?  I'm thinking locking/concurrency/that-sorta-thing.

 How do you deal with this situation?  Are there any gotchas I need to
 know about?  I'm guessing that using Maildirs will alleviate many of the
 problems that mboxes would create ...

 Any pointers/suggestions/cluebats appreciated!

 jc



  What we run here, is standard uw-imap and popa3d, with stunnel. Works
like a charm.

  I know courier could handle everything with a single hand and half the
overhead, maybe someday I'll migrate every mbox into maildir and set
that up, but in the mean time, it does a pretty job.


  José

PS
  please reply to debian-isp


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Courier-imap Outlook problem - RE: Imap imap-ssl pop3-ssl

2004-02-12 Thread Debian ISP
We are using courier-imap in the configuration outlined on the marlow.dk
website.

One problem we keep having involves M$ Outlook clients. It seems that
something breaks with the communication between the server and Outlook
clients (or posssible corrupts the pst files created for each maildir).

Has anyone else been faced with this problem? Since we are unable to
convince our clients to move to Debian desktops with KMail or some other OSS
alternative, some workaround for this issue would be greatly appreciated!

Googling has not proven very helpful (only confirmed this as a problem).

Thanks in advance,

Hal

-Original Message-
From: Jose Alberto Guzman [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 12, 2004 8:16 PM
To: Jonathan Matthews
Cc: debian-user@lists.debian.org; debian-isp@lists.debian.org
Subject: Re: Imap  imap-ssl  pop3-ssl


Jonathan Matthews wrote:
 [Sorry for the cross-post - I think it's applicable to both -isp and
 -user.]

 I need to offer imap, imapssl and pop3ssl services. FWIW, imap would be
 localhost only, but -ssl services would be publically accessible.

 My reading thus far leads me towards Courier-imap with Exim 4
 backported to stable so I can interface with ClamAV, but feel free to
 point out something important that I've missed.

 Do I need to have a different instance of the server running for each
 protocol?  i.e. one listening on each port that the three services use
 as standard?

 Is there a server that would do the job with just one instance listening
 on all three ports?  Would there be any advantages or disadvantages to
 this?  I'm thinking locking/concurrency/that-sorta-thing.

 How do you deal with this situation?  Are there any gotchas I need to
 know about?  I'm guessing that using Maildirs will alleviate many of the
 problems that mboxes would create ...

 Any pointers/suggestions/cluebats appreciated!

 jc



  What we run here, is standard uw-imap and popa3d, with stunnel. Works
like a charm.

  I know courier could handle everything with a single hand and half the
overhead, maybe someday I'll migrate every mbox into maildir and set
that up, but in the mean time, it does a pretty job.


  José

PS
  please reply to debian-isp


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]





doubt about CONFIG_RTNETLINK option on kernel 2.4.18

2003-11-28 Thread debian
According description of iproute, the options CONFIG_NETLINK and 
CONFIG_RTNETLINK must be compiled in the running kernel. I have a kernel 
2.4.18 and on the config-2.4.18 I can see:
CONFIG_NETLINK_DEV=m 

but I can't see any line relative to CONFIG_RTNETLINK. I have downladed 
kernel-image-2.4.22-i386.deb, and here you can't see it either. 

Perhaps CONFIG_RTNETLINK is an option which has been addeed on 
CONFIG_NETLINK option on these kernels or something like this... 

I have a debian stable distro. 

Could you help me with this doubt? 

Thanks you very much in advance. 

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


doubt about CONFIG_RTNETLINK option on kernel 2.4.18

2003-11-28 Thread debian
According description of iproute, the options CONFIG_NETLINK and 
CONFIG_RTNETLINK must be compiled in the running kernel. I have a kernel 
2.4.18 and on the config-2.4.18 I can see:
CONFIG_NETLINK_DEV=m 

but I can't see any line relative to CONFIG_RTNETLINK. I have downladed 
kernel-image-2.4.22-i386.deb, and here you can't see it either. 

Perhaps CONFIG_RTNETLINK is an option which has been addeed on 
CONFIG_NETLINK option on these kernels or something like this... 

I have a debian stable distro. 

Could you help me with this doubt? 

Thanks you very much in advance. 




unsubscribe

2003-11-26 Thread debian


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


bandwidht restricted.

2003-11-25 Thread debian
I´m ask my self if there is an utility to resctrict the bandwidht consumed 
by services. The problem is that when someone use ftp service or smtp 
service with a important size of byte, others can´t use services on our 
little network. 

Is There any utility which allows me restrict the use of bandwidht? It´s 
possible restrict by service and or by IP, users etc... 

Could anyone help me to solve this problem? 

Thanks you in advance. 



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Unidentified subject!

2003-06-27 Thread bounce-debian-isp=archive=jab . org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Unidentified subject!

2003-06-27 Thread bounce-debian-isp=archive=jab . org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



radiusd-freeradius

2003-05-30 Thread ivan-debian-isp
Can anyone briefly summarize the current state of the radiusd-freeradius
packages?  From what I can tell, the packages were withdrawn for
some combination of immaturity/stability/maintainer interest, but there
was also an issue with the rlm_pgsql module linking with SSL - was that
ever resolved?

I'm probably interested in reviving radiusd-freeradius if I'm not
stepping on anyone's toes.

Or have folks switched to other RADIUS servers?  Is there anything else
that authenticates from and logs to MySQL/PgSQL databases?  using the
same schema or a different schema?

-- 
_ivan


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



radiusd-freeradius

2003-05-30 Thread ivan-debian-isp
Can anyone briefly summarize the current state of the radiusd-freeradius
packages?  From what I can tell, the packages were withdrawn for
some combination of immaturity/stability/maintainer interest, but there
was also an issue with the rlm_pgsql module linking with SSL - was that
ever resolved?

I'm probably interested in reviving radiusd-freeradius if I'm not
stepping on anyone's toes.

Or have folks switched to other RADIUS servers?  Is there anything else
that authenticates from and logs to MySQL/PgSQL databases?  using the
same schema or a different schema?

-- 
_ivan




Firewall on compac flash

2003-05-23 Thread debian-isp
Hi ! 
We are just considering if we should try to set up our firewall on a 
Rackmountsystem with only 
Compac flash card and onboard cpu. Which would reduce a least the possibility 
of a harddisk crash, and would provide an easy possiblity to swap cards when 
there is a problem. 
The compac flash card (available also with 512MB is acting like a harddisk... 
Any experience with that kind of hardware ? 


__
Nik Engel NETWAYS GmbH
Senior Systems Engineer   Deutschherrnstr. 47a
Fon.0911/92885-13 D-90429 Nürnberg
Fax.0911/92885-33
[EMAIL PROTECTED] www.netways.de

 Wir stellen aus ==

Nicht auf der CeBIT, sondern auf der noris.tech Hausmesse
am 04.06.2003 zum Thema Datenmanagement. Weitere Infos und 
Anmeldung unter http://www.netways.de/hausmesse.html

 Wir stellen aus == 




Re: DNS cpu utilization

2003-05-20 Thread debian
I would suggest you setup some sort of monitoring on the bind process. I 
personally use mrtg to graph the output of rndc stats. The main dns 
server I am responsible for runs about 12k-15k dns queries per 5 minutes 
and has just about zero load. It's running on a slowish (aren't they 
all) sparc.

I think your bind process is probably not configured optimally for your 
machine. You might want to increase the amount of ram available to the 
bind process (max-cache-size 50M;) and setup some server-side monitoring 
so you can see what the machine is actually doing.

Is the machine hitting the swap at all? You DON'T want a dns server 
swapping out to the disk all the time.
Is the machine running any other services? You said dns was this 
machine's primary service, but what else is running? Close down all of 
the services except ssh and bind and see how it runs.

If you push a machine too hard you should not have ANY stability 
problems. If you have stability problems anytime, you have faulty 
hardware. If you start running the limit of your hardware, the machine 
will let you know by dropping dns requests and being overall unresponsive.

-jason

peace bwitchu wrote:
These two bind servers are authoritative for 200 zones
and as far as clients go that's a hard one.  Because
of the way everything snowballed before I got ahold of
it it could be as many as  10,000 this is a best
guess of course.  Once I prove that debian is the way
to go with this I plan to implement the split dns
topology.  I don't have any statistics yet but plan to
have some by week end.
Peace
--- Russell Coker [EMAIL PROTECTED] wrote:
 

On Thu, 8 May 2003 03:08, peace bwitchu wrote:
   

this box working too hard or is the normal.  Since
this box is dedicated solely to dns I just want to
make sure that I'm not pushing bind too hard and
 

end
   

up with stability problems.
 

Without knowing how many machines are using this
box as a DNS proxy or how 
important the domain(s) it serves are how can we
determine if it's normal 
load?

Some DNS servers I've run have used 1% CPU time on a
Pentium-166, some have 
used 50% on a P3-1200.

--
http://www.coker.com.au/selinux/   My NSA Security
Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard
drive benchmark
http://www.coker.com.au/postal/Postal SMTP/POP
benchmark
http://www.coker.com.au/~russell/  My home page
   


__
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo.
http://search.yahoo.com
 





Re: using spamassassin in an isp environment ?

2003-04-08 Thread debian
If you have external MX boxes that are not your main mail server, 
through dns you can ponit the domains you want filtered to the mx hosts, 
and the other non-filtered domains to the main mail server.

I currently run a mail system somewhat like that and we use qmail with 
spamassassin combined with several dnsbl lists like the one spamcop 
offers (www.spamcop.net).

I would not use only spamassassin. Since it is public information, 
spammers use this to avoid getting caught by it. It works great for 
virus scanning, but it does not catch too much spam. I do have ours 
turned down, but you will have to do that if you are scanning mail for 
clients.

What do you mean 15GB mail traffic / server? Mine currently handles 
about 300k pieces of mail, and it's load balanced over two dual piii-733 
dell power edges running debian. They run about 75% loaded all day, with 
a load of about 1.5. CPU speed is important, but don't forget about ram. 
The machines would not handle the load with 256 megs of ram (random 
crashing).

-Jason
Markus Welsch wrote:
hi all,
does any of you use latest version of spamassassin in your isp 
environment? i'm considering installing it as content-filter (Postfix 
2.07 as MTA) on both mx servers ... the only thing that holds me back 
is how it responses to performance for 15 GB mail traffic / server. 
how are your experiences with it?

since it's written in perl it will be a huge performance decrease, right?
would it be possible to do filtering just for specified domains ?

greetings,
markus





Unidentified subject!

2003-03-31 Thread bounce-debian-isp=archive=jab . org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Unidentified subject!

2003-03-30 Thread bounce-debian-isp=archive=jab . org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



AW: AW: Installing Mailman

2003-03-27 Thread debian-isp
Hi ! 

I'm a newbie when it comes to the more complex aspects of 
debian, so if you 
could send me step by step instructions on getting my install 
to work, that 
would be really appreciated.  I haven't tried anything that I 
didn't know 
how to undo.  I would like to get Mailman running Postfix if 
that makes a 
difference.

Actually it was very easy, as most installs with deb. Packages are, to install 
mailman. 
For the : 
Apt-get install mailman worked out of the box. 
I am also running postfix and I have set up mailman with a couple of list under 
different domains. You don´t need to run
./configure anywhere  The only thing I had to do was setting an alias for die 
mailman cgis .
Anyway I don´t know if this is OT here ... 

__
Nik Engel NETWAYS GmbH
Senior Systems Engineer   Deutschherrnstr. 47a
Fon.0911/92885-13 D-90429 Nürnberg
Fax.0911/92885-33
[EMAIL PROTECTED] www.netways.de 


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



AW: AW: Installing Mailman

2003-03-27 Thread debian-isp
Hi ! 

I'm a newbie when it comes to the more complex aspects of 
debian, so if you 
could send me step by step instructions on getting my install 
to work, that 
would be really appreciated.  I haven't tried anything that I 
didn't know 
how to undo.  I would like to get Mailman running Postfix if 
that makes a 
difference.

Actually it was very easy, as most installs with deb. Packages are, to install 
mailman. 
For the : 
Apt-get install mailman worked out of the box. 
I am also running postfix and I have set up mailman with a couple of list under 
different domains. You don´t need to run
./configure anywhere  The only thing I had to do was setting an alias for 
die mailman cgis .
Anyway I don´t know if this is OT here ... 

__
Nik Engel NETWAYS GmbH
Senior Systems Engineer   Deutschherrnstr. 47a
Fon.0911/92885-13 D-90429 Nürnberg
Fax.0911/92885-33
[EMAIL PROTECTED] www.netways.de 




AW: Installing Mailman

2003-03-26 Thread debian-isp
Any help on this would be great, thanks

What are your problems ? I just finnished an installation ... 

Alex



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact 
[EMAIL PROTECTED]






Re: have I been rooted?

2003-03-19 Thread debian
 On Sat, 2003-03-15 at 06:04, David H. Clymer wrote:
  I just ran chkrootkit,and it at one point, indicates that I may have an
  LKM rootkit installed on my box (see output below). I then downloaded
  and installed sash, and when I run chkrootkit as sashroot, It doesnt
  detect anything (also see output below). Which should I believe? Is
  there any way to determine if there is indeed a LKM rootkit installed
  without downtime (or at least a minimum). This box serves as mailserver
  for approximatly 600 users, has no backup or secondary server (all very
  bad things, i know, but cash is very, very short) and is administered
  remotely, so and taking it down, wiping/reinstalling, is not an option
  at this point. 
 
 I had a similar scare with chkrootkit when I first started using it. It
 turns out that it can occasionally give false positives. Something to
 do with processes completing and vanishing in the middle of checking if
 processes are trying to hide themselves.
 


Once you are content that you are not rooted (and I don't have an opinion on 
that), there are some measure you can take for hardening.

1. Install bastille linux. It's not a Linux distro, it's a hardening toolkit.
2. Install, setup, learn and use some software such as tripwire, that you can 
use to see whether there are unauthorised changes to system files.
3. Consider mounting /usr ro. One way that appeals to me, but I've no actually 
tried it, is to make an ISO of it and mount it on loopback. If you can have / 
ro, so much the better.
4. Make sure that writable partitions are mounted noexec. If someone breaks, 
say Apache as was a possibility a few months ago, you don't want them running 
their cracker kit on your box. Note that this is not perfect, '/bin/bash -c 
source ./kit' can still do some damage.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: have I been rooted?

2003-03-19 Thread debian
 On Sat, 2003-03-15 at 06:04, David H. Clymer wrote:
  I just ran chkrootkit,and it at one point, indicates that I may have an
  LKM rootkit installed on my box (see output below). I then downloaded
  and installed sash, and when I run chkrootkit as sashroot, It doesnt
  detect anything (also see output below). Which should I believe? Is
  there any way to determine if there is indeed a LKM rootkit installed
  without downtime (or at least a minimum). This box serves as mailserver
  for approximatly 600 users, has no backup or secondary server (all very
  bad things, i know, but cash is very, very short) and is administered
  remotely, so and taking it down, wiping/reinstalling, is not an option
  at this point. 
 
 I had a similar scare with chkrootkit when I first started using it. It
 turns out that it can occasionally give false positives. Something to
 do with processes completing and vanishing in the middle of checking if
 processes are trying to hide themselves.
 


Once you are content that you are not rooted (and I don't have an opinion on 
that), there are some measure you can take for hardening.

1. Install bastille linux. It's not a Linux distro, it's a hardening toolkit.
2. Install, setup, learn and use some software such as tripwire, that you can 
use to see whether there are unauthorised changes to system files.
3. Consider mounting /usr ro. One way that appeals to me, but I've no actually 
tried it, is to make an ISO of it and mount it on loopback. If you can have / 
ro, so much the better.
4. Make sure that writable partitions are mounted noexec. If someone breaks, 
say Apache as was a possibility a few months ago, you don't want them running 
their cracker kit on your box. Note that this is not perfect, '/bin/bash -c 
source ./kit' can still do some damage.





Re: calculation of mail traffic

2003-03-19 Thread debian

[EMAIL PROTECTED] said:
 Well.. I can also grep From: to see wich addresses are sending more
 mails  than usual, don't I? 

You're joking, right? From: is easily faked, and any bulk spammer fakes it.

Unless you block your clients from sending on port 25, you can't tell what 
mail they're sending.

If you do block port 25, I wouldn't expect your commercial clients to be happy.

If you force (by firewall rules or otherwise) them to use mail.bigisp.com as 
their outgoing relay, they might feel you're invading their privacy. Would you 
want someone checking your phone calls (for other than billing purposes)?








Vserver

2003-03-13 Thread debian-isp
Hi all ! 
I just came across the vserver project... Sounds really good, if you have different 
costommers with differnt needs. 
http://www.solucorp.qc.ca/miscprj/s_context.hc
Anyone experience with it ? 


__
Nik Engel NETWAYS GmbH
Senior Systems Engineer   Deutschherrnstr. 47a
Fon.0911/92885-13 D-90429 Nürnberg
Fax.0911/92885-33
[EMAIL PROTECTED] www.netways.de 


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Vserver

2003-03-13 Thread debian-isp
Hi all ! 
I just came across the vserver project... Sounds really good, if you have 
different costommers with differnt needs. 
http://www.solucorp.qc.ca/miscprj/s_context.hc
Anyone experience with it ? 


__
Nik Engel NETWAYS GmbH
Senior Systems Engineer   Deutschherrnstr. 47a
Fon.0911/92885-13 D-90429 Nürnberg
Fax.0911/92885-33
[EMAIL PROTECTED] www.netways.de 




AW: 400 000 mails in 12 Hours

2003-02-28 Thread debian-isp
Hi all ! 
Thanks very much, for all the help. As soon as the project starts, 
and we have accomplished the task; I´ll let you know how we did it. 

Thanks very much 



Nik,

If you cannot find a solution to your mail delivery challenge 
using commodity MTAs such as postfix, my company has an opt-in 
mail delivery service which can meet your needs if you want to 
outsource.  Obviously there would be bandwidth, etc. costs 
involved, which would depend largely upon the total number of 
recipients you have, concentration of recipients on domains 
with aggressive spam filters (e.g. aol.com) that require 
messages to be individually delivered, etc; and how often you 
need to send these messages with large attachments.

I hope your commodity solution pans out, but if you need to go 
to the expense of outsourcing, our company has custom delivery 
software that can most certainly meet your needs.  We have 
plenty of transit available to meet the lofty 100Mbit/sec 
projection that another debian-isp poster made based on 100% 
individual deliveries, as well.

--
Jeff S Wheeler [EMAIL PROTECTED]

On Thu, 2003-02-27 at 06:10, debian-isp wrote:
 Hi all !
 I have the task of setting up a mailserver capabel of 
sending 400 000 mail in a max time of 12 hours. 
 All mails have an attachment of 1 mb. The system should be a 
mailer for a newsletter system. As I made quite a couple of 
things with postfix, my concern is the amount and 
considerations which have to be made when handling such an amount. 
 





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



AW: 400 000 mails in 12 Hours

2003-02-28 Thread debian-isp
Hi all ! 
Thanks very much, for all the help. As soon as the project starts, 
and we have accomplished the task; I´ll let you know how we did it. 

Thanks very much 



Nik,

If you cannot find a solution to your mail delivery challenge 
using commodity MTAs such as postfix, my company has an opt-in 
mail delivery service which can meet your needs if you want to 
outsource.  Obviously there would be bandwidth, etc. costs 
involved, which would depend largely upon the total number of 
recipients you have, concentration of recipients on domains 
with aggressive spam filters (e.g. aol.com) that require 
messages to be individually delivered, etc; and how often you 
need to send these messages with large attachments.

I hope your commodity solution pans out, but if you need to go 
to the expense of outsourcing, our company has custom delivery 
software that can most certainly meet your needs.  We have 
plenty of transit available to meet the lofty 100Mbit/sec 
projection that another debian-isp poster made based on 100% 
individual deliveries, as well.

--
Jeff S Wheeler [EMAIL PROTECTED]

On Thu, 2003-02-27 at 06:10, debian-isp wrote:
 Hi all !
 I have the task of setting up a mailserver capabel of 
sending 400 000 mail in a max time of 12 hours. 
 All mails have an attachment of 1 mb. The system should be a 
mailer for a newsletter system. As I made quite a couple of 
things with postfix, my concern is the amount and 
considerations which have to be made when handling such an amount. 
 







400 000 mails in 12 Hours

2003-02-27 Thread debian-isp
Hi all ! 
I have the task of setting up a mailserver capabel of sending 400 000 mail in a 
max time of 12 hours. 
All mails have an attachment of 1 mb. The system should be a mailer for a 
newsletter system. As I made quite a couple of things with postfix, my concern 
is the amount and considerations which have to be made when handling such an 
amount. 

__
Nik Engel NETWAYS GmbH
Senior Systems Engineer   Deutschherrnstr. 47a
Fon.0911/92885-13 D-90429 Nürnberg
Fax.0911/92885-33
[EMAIL PROTECTED] www.netways.de 




AW: Apache Virtual Hosts Chroot ?

2003-02-25 Thread debian-isp

How about running PHP in safe mode?  In safe mode (as far as I
understand) user scripts can only access files with the same uid.

Hm but they do have the same uid as they are uploaded via http and under the webserver 
user ... 


On Tue, 2003-02-25 at 20:15, debian-isp wrote:
 Hi all !
 
 I am just asking myself how to secure our webserver with a couple of 
 virtual hosts.
 Currently we have a large installation of typo3 running. It 
has a feature called fileadmin with which you can easily 
upload files. As it is thereby possible to upload php scripts 
and execute via the browser it is to my opionion possible to 
access other users files. As the webserver and the files all 
have the same user, needed by the system. 
 Is there a way to secure this: 
 
 - chrooting virtual hosts in apache ?
 - running multiple instances of apache 
 - some kind of security system with users and groups 
 - using directory settings ? 
 
 Any ideas
 
 __
 Nik Engel NETWAYS GmbH
 Senior Systems Engineer   Deutschherrnstr. 47a
 Fon.0911/92885-13 D-90429 Nürnberg
 Fax.0911/92885-33
 [EMAIL PROTECTED] www.netways.de
 




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Apache Virtual Hosts Chroot ?

2003-02-25 Thread debian-isp
Hi all ! 

I am just asking myself how to secure our webserver with a couple of virtual 
hosts. 
Currently we have a large installation of typo3 running. It has a feature 
called fileadmin with which you can easily upload files. As it is thereby 
possible to upload php scripts and execute via the browser it is to my opionion 
possible to access other users files. As the webserver and the files all have 
the same user, needed by the system. 
Is there a way to secure this: 

- chrooting virtual hosts in apache ? 
- running multiple instances of apache 
- some kind of security system with users and groups 
- using directory settings ? 

Any ideas

__
Nik Engel NETWAYS GmbH
Senior Systems Engineer   Deutschherrnstr. 47a
Fon.0911/92885-13 D-90429 Nürnberg
Fax.0911/92885-33
[EMAIL PROTECTED] www.netways.de 




AW: Apache Virtual Hosts Chroot ?

2003-02-25 Thread debian-isp

How about running PHP in safe mode?  In safe mode (as far as I
understand) user scripts can only access files with the same uid.

Hm but they do have the same uid as they are uploaded via http and under the 
webserver user ... 


On Tue, 2003-02-25 at 20:15, debian-isp wrote:
 Hi all !
 
 I am just asking myself how to secure our webserver with a couple of 
 virtual hosts.
 Currently we have a large installation of typo3 running. It 
has a feature called fileadmin with which you can easily 
upload files. As it is thereby possible to upload php scripts 
and execute via the browser it is to my opionion possible to 
access other users files. As the webserver and the files all 
have the same user, needed by the system. 
 Is there a way to secure this: 
 
 - chrooting virtual hosts in apache ?
 - running multiple instances of apache 
 - some kind of security system with users and groups 
 - using directory settings ? 
 
 Any ideas
 
 __
 Nik Engel NETWAYS GmbH
 Senior Systems Engineer   Deutschherrnstr. 47a
 Fon.0911/92885-13 D-90429 Nürnberg
 Fax.0911/92885-33
 [EMAIL PROTECTED] www.netways.de
 






Re: Weakest point of a server?

2003-02-06 Thread Debian User
On Fri, 07 Feb 2003 07:32, Rich Puhek wrote:
 Jason Lim wrote:
  But how about the motherboards themselves? Is it often for something on
  the motherboard to fail, after 3-4 years continuous operation without
  failure?

 Normally, I'd say no on this point, particularly if the server is
 continuously running. 

I would agree most solid state components like motherboards should last 
years, I would suggest the weakest point would be cheap capacitors, just how 
you research a board to avoid this I dont know.

  Or is there some other part(s) we should look out for instead... would
  the CPU itself die after 3 years continuous operation? Or maybe RAM? Or
  even the LAN cards?

no, solid state.

The biggest risk is mechanical failure. The two mechanical parts are Hard 
drives and fans. Failure of the cooling fans allowing parts to overheat has 
to be watched for One of the weakest ones seems to be the nasty little fans 
on the high end graphics cards, ive had enough pack up to be concerned. So 
when picking parts look for static heat sinks and good cases where possible I 
would suggest.

For hard drives, hardware raid mirror the boot disks and at the very least 
raid5 the data disks, if you have the $ then RAID1+0.

Given the life of a server is probably 3 to 4 years I dont know that there is 
really any PPM (planned preventative maintenance) possible. I would suggest 
the most likey areas to spend money on are external, 1) A good UPS 2) a clean 
environment 3) Air con / air tempering ie keep the box below 24 Deg C

regards

Thing







-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Gaming server

2003-01-20 Thread Debian User
yes

From limited experience a linux game server is way faster and more stable 
than a win2k one (are we surprised). The slowest Athlon you can buy today 
(2000XP?)  combined with 512meg of ram will support 64 clients easily on Q2 
and Q3  for instance, with both games running at once. The only time it might 
falter is if lots of clients have bfg fireballs in the air at once  (must be 
due to the calcs these must need) 

The smallest cpu Ive run on is a p2-300 with 256M of ram and that ran 16 ppl 
on a lan fine in Q2 with someting like a 0.2 ~ 0.3 load.

Most clients were/are optimised to run on what a standard modem can provide, 
so if you have a good  make of 100 Meg card and a switch network should not 
be an issue. eepro's, 3com 905s, Dec tulips, all have low cpu requirements 
and work well.

regards,

Thing

On Tue, 21 Jan 2003 04:15, Todd Charron wrote:
 Hi,

 I was wondering if any of you have any experience running a game server
 under Debian.  Also wondering if you know the CPU/memory/bandwidth
 requirements of such a project.  Thanks,

 Todd


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Compaq Proliant DL320 installation.

2003-01-20 Thread Debian User
Yes Im not impressed either, Ive had words with  HP/Compaq reps over the 
crappy support for Debian, indeed I think the RH support is half hearted at 
best. Ive tried running rpm under debian with this compaq stuff and it failed 
miserably, but this was on a 1600R. Ive had woody and rh 7.2 ~ 8.0 on these 
dl320 machines fine, but of course software raid is a joke

If appropriate and your budget will stand it I'd suggest hwraid, so thats the 
dl360, or look at a dell which is what Im doing at present.

regards

Thing

On Mon, 20 Jan 2003 22:28, [EMAIL PROTECTED] wrote:
 Hi all,
 I am just installing Woody on a Compaq Proliant DL320 server (PIII
 1.13GHz), and the various Compaq Agents drivers are avaiable for
 different releases of RedHat, SuSE and some other distros except Debian.
 I wonder if I'd just `apt-get install rpm` and try to install one of the
 rpm'ed packages avaiable on the official site or there is a better
 solution (e.g. alien or whatever). If someone have experienced with
 Debian on those server, some help is appreciated :)

   Thanks.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Compaq Proliant DL320 installation.

2003-01-20 Thread Debian User
The 5500 is a bigger version (4 ppro cpus?) of the 2500 I believe, I dont see 
it being a problem, what I had to do is start with the 2 compact boot 
floppies, then switch to the cdrom later.

This is due to problems with the compaq scsi raid controller not being seen 
in a standard boot kernel and /or a prob with the onboard ncr scsi controller.

As for diagnostics u can get bootable floppies to check stuff out on 
hp/compaq's web site. As far as I know they will work with the 5500, they 
certainly do with the 2500.

My understanding would be that the latest smarctstart cd is backwards 
compatible with the older kit. The utilities were just updated over the years 
to reflect new hardware as it came along, reading the compaq revision data 
suggests this anyway. Certainly my ver 5.40 dl320 smartstart cds work in the 
1600r's and 2500r's i have.

regards

Thing

On Tue, 21 Jan 2003 11:17, Toni Mueller wrote:
 Hi,

 On Mon, Jan 20, 2003 at 07:16:38PM +0100, Tomasz Papszun wrote:
  On Mon, 20 Jan 2003 at 10:28:03 +0100, [EMAIL PROTECTED] wrote:
   I am just installing Woody on a Compaq Proliant DL320 server (PIII

 I'm trying to get an old proliant 5500 up as well ;-)

   1.13GHz), and the various Compaq Agents drivers are avaiable for
   different releases of RedHat, SuSE and some other distros except
   Debian.

 having a hand would be nice...

  I haven't tried any Compaq agents on it though. I have tried
  lm-sensors but I haven't succeeded, even with some help from lm-sensors
  people. Maybe Compaq has modified the hardware in some not typical
  way...

 You can bet on that. Compaqs seem to have many functions not in
 hardware but in software in a hidden disk partition, including
 disk partitioning software *eek*. My best bet so far is to find
 the right SmartStart CD (how?) and go from there. Afterwards,
 there are allegedly a number of Linux programs that can do
 hardware diagnosis and such... but I didn't find those yet.


 Good luck,
 --Toni++


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Apt-proxy with cdrom

2003-01-04 Thread debian
I wonder if, it's possible to install packages with cdrom (apt-cdrom) through 
apt-proxy to another machine. How it is possible to install packages through 
network. I only have a set of 7 cd's... and my internet connection is to slow.

Happy new year

Regards, 

Robert

---
http://www.email.si


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: DNS servers

2002-11-19 Thread debian
On Tue, 19 Nov 2002, Russell Coker wrote:

 So this leaves DNS caching as the only reason for BIND.  Is there a DNS server 
 that does caching better than BIND?

This will probably appeal:
[root@gw log]# rpm -qip 
/var/ftp/pub/linux/ClarkConnect/0.9.1/dist/RedHat/RPMS/dnsmasq-1.0-1.i386.rpm
Name: dnsmasq  Relocations: (not relocateable)
Version : 1.0   Vendor: Simon Kelley
Release : 1 Build Date: Wed 05 Dec 2001 05:12:28 AM WST
Install date: (not installed)   Build Host: tempy
Group   : System Environment/DaemonsSource RPM: dnsmasq-1.0-1.src.rpm
Size: 63048License: GPL
Packager: Simon Kelley
URL : http://thekelleys.org.uk
Summary : A lightweight caching nameserver
Description :
Dnsmasq is lightweight, easy to configure DNS forwarder designed to provide DNS 
(domain name) services to a small network where using BIND would be overkill. It can 
be have its DNS servers automatically configured by PPP or DHCP, and it can serve the 
names of local machines which are not in the global DNS. It is ideal for networks 
behind NAT routers and connected via modem, ISDN, ADSL, or cable-modem connections.
[root@gw log]#

I'm sure it's on my Debian CD collection.

I don't think these are grom Glenrowan though.
 
 

-- 

Cheers
John Summerfield

Please, no off-list mail at all at all. This address accepts mail only from Debian 
lists.




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: DNS servers

2002-11-19 Thread debian
On Tue, 19 Nov 2002, Russell Coker wrote:

 So this leaves DNS caching as the only reason for BIND.  Is there a DNS 
 server 
 that does caching better than BIND?

This will probably appeal:
[EMAIL PROTECTED] log]# rpm -qip 
/var/ftp/pub/linux/ClarkConnect/0.9.1/dist/RedHat/RPMS/dnsmasq-1.0-1.i386.rpm
Name: dnsmasq  Relocations: (not relocateable)
Version : 1.0   Vendor: Simon Kelley
Release : 1 Build Date: Wed 05 Dec 2001 
05:12:28 AM WST
Install date: (not installed)   Build Host: tempy
Group   : System Environment/DaemonsSource RPM: dnsmasq-1.0-1.src.rpm
Size: 63048License: GPL
Packager: Simon Kelley
URL : http://thekelleys.org.uk
Summary : A lightweight caching nameserver
Description :
Dnsmasq is lightweight, easy to configure DNS forwarder designed to provide DNS 
(domain name) services to a small network where using BIND would be overkill. 
It can be have its DNS servers automatically configured by PPP or DHCP, and it 
can serve the names of local machines which are not in the global DNS. It is 
ideal for networks behind NAT routers and connected via modem, ISDN, ADSL, or 
cable-modem connections.
[EMAIL PROTECTED] log]#

I'm sure it's on my Debian CD collection.

I don't think these are grom Glenrowan though.
 
 

-- 

Cheers
John Summerfield

Please, no off-list mail at all at all. This address accepts mail only from 
Debian lists.






email account and dns

2002-11-01 Thread Debian User

Hi,

I have a user that has one of his domains, user1.com, pointing his
other domain, user2.com via the dns zone file.  He asked me to redirect
his user1.com domain to
his new domain user3.com.  I changed the entry in his user1.com zone file
to point to the new user3.com domain, which is up.  I also up dated the
serial and then ran a rndc reload.  I did this to both the primairy and
secondary dns servers and user1.com still point to user2.com.  I did a dig
for the information and the ip address for user1.com still comes up as the
ip of user2.com.  I thought maybe it was cached information so I then ran
a rndc flush and it still comes up wrong.

I also have had a few email accounts disappear and was wondering if anyone
had a similar issue.  I did a search in the archive for dns redirect and
accounts disappearing but could not find anything.  Any input would be
appreciated.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: email account and dns

2002-11-01 Thread Debian User

Thank you for the reply.  The dns zone problem has been fixed by removing
the zone
file, running rndc reload, recreating the zone file (exactly), and then
running rndc reload again.  It worked for some strange reason.  I
normally would use the real domains but the customer wanted to remain
anonymous.  Sorry I was not more descriptive with the other concern.  It
looks like someone completely removed two accounts.  That's the only
way I can explain it.  I think it is an internal problem unless someone
has heard of something like that before.  I appreciate the concern though.

Chet

On Fri, 1 Nov 2002, Jeremy C. Reed wrote:

 On Fri, 1 Nov 2002, Debian User wrote:

 
  his new domain user3.com.  I changed the entry in his user1.com zone file
  to point to the new user3.com domain, which is up.  I also up dated the

 Show us.

 Also what type of record (A, MX)?

 And it is helpful to use real hostnames, so we can help.

  I also have had a few email accounts disappear and was wondering if anyone

 What does that mean?

 Did the users get removed from your passwd file?

 Or did the mailbox get removed?

 I am sure we can help, but we need more information.

   Jeremy C. Reed
 ...
  BSD software, documentation, resources, news...
  http://bsd.reedmedia.net/


 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: email account and dns

2002-11-01 Thread Debian User

Thank you for the reply.  The dns zone problem has been fixed by removing
the zone
file, running rndc reload, recreating the zone file (exactly), and then
running rndc reload again.  It worked for some strange reason.  I
normally would use the real domains but the customer wanted to remain
anonymous.  Sorry I was not more descriptive with the other concern.  It
looks like someone completely removed two accounts.  That's the only
way I can explain it.  I think it is an internal problem unless someone
has heard of something like that before.  I appreciate the concern though.

Chet

On Fri, 1 Nov 2002, Jeremy C. Reed wrote:

 On Fri, 1 Nov 2002, Debian User wrote:

 
  his new domain user3.com.  I changed the entry in his user1.com zone file
  to point to the new user3.com domain, which is up.  I also up dated the

 Show us.

 Also what type of record (A, MX)?

 And it is helpful to use real hostnames, so we can help.

  I also have had a few email accounts disappear and was wondering if anyone

 What does that mean?

 Did the users get removed from your passwd file?

 Or did the mailbox get removed?

 I am sure we can help, but we need more information.

   Jeremy C. Reed
 ...
  BSD software, documentation, resources, news...
  http://bsd.reedmedia.net/


 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]






New series of UDP attacks?

2002-08-20 Thread Debian

Has anyone noticed a rash of scans and UDP attacks coming from Level3.net?
I've seen a high number of them, all directed UDP attacks.  Is this a new
DOS or other attack?

Joe




unsubscribe

2002-08-15 Thread Debian User



unsubscribe

2002-08-15 Thread Debian User



RES: Network Proxy Recommendation Needed

2002-06-23 Thread debian

 What package would be simplest to set up and maintain for general
 proxy/firewall purposes?
squid and iptables 'a kernel+app resource'.

 One of the major concerns for them is restricting unauthorized downloads
and
 allowing Internet access to a database system using the server version of
 FileMaker Pro (hosted on an NT machine).
squid and iptbles can do this very fine.

 Also, while I am thinking of it, can anyone tell me if the Network
 Everywhere NC100 FastEthernet 10/100 Network Card is Linux compatible and
 what kernal module to use for it?
ne2k-pci
# modprobe ne2k-pci
or
# modprobe ne
For most card's NC is 'NetWare Card'.

You can use a comercial solution to do this work, but, if you have some
time you can configure you firewall and gateway with only this resource,
and can do all you need and can have total control of the network.



wendel/arcl.com.br


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




RES: Network Proxy Recommendation Needed

2002-06-23 Thread debian
 What package would be simplest to set up and maintain for general
 proxy/firewall purposes?
squid and iptables 'a kernel+app resource'.

 One of the major concerns for them is restricting unauthorized downloads
and
 allowing Internet access to a database system using the server version of
 FileMaker Pro (hosted on an NT machine).
squid and iptbles can do this very fine.

 Also, while I am thinking of it, can anyone tell me if the Network
 Everywhere NC100 FastEthernet 10/100 Network Card is Linux compatible and
 what kernal module to use for it?
ne2k-pci
# modprobe ne2k-pci
or
# modprobe ne
For most card's NC is 'NetWare Card'.

You can use a comercial solution to do this work, but, if you have some
time you can configure you firewall and gateway with only this resource,
and can do all you need and can have total control of the network.



wendel/arcl.com.br


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Software for www portal management

2002-04-09 Thread debian-user

 Does anybody know a software (open source of cause) for portal management ?

You can add phpwebsite to the list.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: webhosting

2002-02-25 Thread Debian Usera

El lun, 25-02-2002 a las 15:48, Michal Novotny escribió:
 There  is a couple of interesting answers, but nothing to help me with
 my  imagine, but I am (maybe) too exacting to find a real (little more
 described) way to setup the webhosting with my needs.
 Anyway,  is  there  any  doc  or  something  what  can  help  me setup
 webhosting  by my imagine ? Below is copy of my original mail. I think
 here  must be  a lot of admins with  this type of  hosting, share your
 practice... maybe private?

Dudethere are like 4 howtos in linuxdoc.org and linuxdocs.org
real easy what you are asking for.,..its a classic case of RTFHTs answer

Now, the only shakey part is that one dns per virtual host thingyou
dont need a whole server for each. Just a zone for each of them...
again, refer to the HOWTOS


Alex


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: webhosting

2002-02-25 Thread Debian Usera
El lun, 25-02-2002 a las 15:48, Michal Novotny escribió:
 There  is a couple of interesting answers, but nothing to help me with
 my  imagine, but I am (maybe) too exacting to find a real (little more
 described) way to setup the webhosting with my needs.
 Anyway,  is  there  any  doc  or  something  what  can  help  me setup
 webhosting  by my imagine ? Below is copy of my original mail. I think
 here  must be  a lot of admins with  this type of  hosting, share your
 practice... maybe private?

Dudethere are like 4 howtos in linuxdoc.org and linuxdocs.org
real easy what you are asking for.,..its a classic case of RTFHTs answer

Now, the only shakey part is that one dns per virtual host thingyou
dont need a whole server for each. Just a zone for each of them...
again, refer to the HOWTOS


Alex




Re: webhosting

2002-02-24 Thread Debian Usera
Um...this here is the ISP listaint there a users lista around
somewhere?
real easy...

By default, debian's apache comes with ~username directories enabled
you can start there www.yourserver.com/~dude1/ should bring up
/home/dude1/public_html/index.htmlthats there for free...in default

About giving hosting as per domainname, the easy way to do this is to go
and dl webmin from webmin.com, install it and go to the apache
moduleits pretty much self explanatory after that... Okay...go to
the bottom and put the name of the host (dude1.yourserver.com) and your
own ip address (you want name based virtual hosting since its easyer).
In that servers document root, there should be the web directory that
will be accesed by said dude1/home/dude1/public_html

php is enabled by simply apt-get install php4 and uncommenting the
corresponding AddModule directive in /etc/apache/httpd.conf

perl is somehow the same but its a little bit different and i wont get
myself into it now (STFW?, RTFM?)

ftp is installed by doing apt-get install proftpd and presto, each user
has an ftp account by default...you just tell them tu upload to
public_html dir.

Mail is much different with virtual hosts and i wont go into that (see
above)

Thank you for any message.

Im surprised you got one but heyim in the mood

Alex





Re: webhosting

2002-02-23 Thread Debian Usera

Um...this here is the ISP listaint there a users lista around
somewhere?
real easy...

By default, debian's apache comes with ~username directories enabled
you can start there www.yourserver.com/~dude1/ should bring up
/home/dude1/public_html/index.htmlthats there for free...in default

About giving hosting as per domainname, the easy way to do this is to go
and dl webmin from webmin.com, install it and go to the apache
moduleits pretty much self explanatory after that... Okay...go to
the bottom and put the name of the host (dude1.yourserver.com) and your
own ip address (you want name based virtual hosting since its easyer).
In that servers document root, there should be the web directory that
will be accesed by said dude1/home/dude1/public_html

php is enabled by simply apt-get install php4 and uncommenting the
corresponding AddModule directive in /etc/apache/httpd.conf

perl is somehow the same but its a little bit different and i wont get
myself into it now (STFW?, RTFM?)

ftp is installed by doing apt-get install proftpd and presto, each user
has an ftp account by default...you just tell them tu upload to
public_html dir.

Mail is much different with virtual hosts and i wont go into that (see
above)

Thank you for any message.

Im surprised you got one but heyim in the mood

Alex



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: TNT+FreeRadius+-Debian

2002-02-20 Thread Debian Usera

Hallo,

Thanks for the previus prompt and great answers. I guess i should
elaborate just one little bit on this.

The TNT is a lucent terminal server product listed as Ascend Radius
compliant or Extended Radius Protocol compliant.

So im wondering if anyone has had any troubles with that on Cistron
Ive free radius here on my laptop and on
/usr/share/doc/radiusd-freeradius/ there is a file (ascend) where it
lists how to get such a protocol working finesays you have to set it
tu VSA's instead of the normal way to handle itit says Ascend's a
bunch of jerks for not following the protocol but its, lamefully, all
ive got (the lucent tnt is an ascend NAS).

So.. anyone has such a beast (ascend/lucent TS/NAS)?? working on
Cistron I see freeradius works with it. Does cistron work with it?

Alex



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: TNT+FreeRadius+-Debian

2002-02-20 Thread Debian Usera

Hallo,

Thanks for the previus prompt and great answers. I guess i should
elaborate just one little bit on this.

The TNT is a lucent terminal server product listed as Ascend Radius
compliant or Extended Radius Protocol compliant.

So im wondering if anyone has had any troubles with that on Cistron
Ive free radius here on my laptop and on
/usr/share/doc/radiusd-freeradius/ there is a file (ascend) where it
lists how to get such a protocol working finesays you have to set it
tu VSA's instead of the normal way to handle itit says Ascend's a
bunch of jerks for not following the protocol but its, lamefully, all
ive got (the lucent tnt is an ascend NAS).

So.. anyone has such a beast (ascend/lucent TS/NAS)?? working on
Cistron I see freeradius works with it. Does cistron work with it?

Alex



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




RADIUS benchmarking???

2002-02-20 Thread Debian Usera

Hulo debian loving isp crowd,

Any ideas where i could find a non-to-complex and free benchamrking
suite for RADIUS servers...Ive seen bonnie++'s father talking about some
benchmarks he did (I know you are out here somwhere) and I was just
curious if the scripts you used are shareable (cant buy me2cheap)...
if they aint i guess its okay.

If the case is such that there are no freely available test scripts out
there, id settle for encouragment on building my own and perhaps a few
pointers on the subject (say something likeIt can be done by
tweaking or playing with bash and portslave).

I can do with maximum authetication hits per minute, i dont think I need
more than this to make up my mind. (farely simple and small setup
anyways) Then maybe id load the diferent servers with cron calls to
radiuskill and such, just to aproach a little to a live setup, and run
the tests again.

 
Alex

  





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: TNT+FreeRadius+-Debian

2002-02-20 Thread Debian Usera
Hallo,

Thanks for the previus prompt and great answers. I guess i should
elaborate just one little bit on this.

The TNT is a lucent terminal server product listed as Ascend Radius
compliant or Extended Radius Protocol compliant.

So im wondering if anyone has had any troubles with that on Cistron
Ive free radius here on my laptop and on
/usr/share/doc/radiusd-freeradius/ there is a file (ascend) where it
lists how to get such a protocol working finesays you have to set it
tu VSA's instead of the normal way to handle itit says Ascend's a
bunch of jerks for not following the protocol but its, lamefully, all
ive got (the lucent tnt is an ascend NAS).

So.. anyone has such a beast (ascend/lucent TS/NAS)?? working on
Cistron I see freeradius works with it. Does cistron work with it?

Alex





Re: TNT+FreeRadius+-Debian

2002-02-20 Thread Debian Usera
Hallo,

Thanks for the previus prompt and great answers. I guess i should
elaborate just one little bit on this.

The TNT is a lucent terminal server product listed as Ascend Radius
compliant or Extended Radius Protocol compliant.

So im wondering if anyone has had any troubles with that on Cistron
Ive free radius here on my laptop and on
/usr/share/doc/radiusd-freeradius/ there is a file (ascend) where it
lists how to get such a protocol working finesays you have to set it
tu VSA's instead of the normal way to handle itit says Ascend's a
bunch of jerks for not following the protocol but its, lamefully, all
ive got (the lucent tnt is an ascend NAS).

So.. anyone has such a beast (ascend/lucent TS/NAS)?? working on
Cistron I see freeradius works with it. Does cistron work with it?

Alex





RADIUS benchmarking???

2002-02-20 Thread Debian Usera
Hulo debian loving isp crowd,

Any ideas where i could find a non-to-complex and free benchamrking
suite for RADIUS servers...Ive seen bonnie++'s father talking about some
benchmarks he did (I know you are out here somwhere) and I was just
curious if the scripts you used are shareable (cant buy me2cheap)...
if they aint i guess its okay.

If the case is such that there are no freely available test scripts out
there, id settle for encouragment on building my own and perhaps a few
pointers on the subject (say something likeIt can be done by
tweaking or playing with bash and portslave).

I can do with maximum authetication hits per minute, i dont think I need
more than this to make up my mind. (farely simple and small setup
anyways) Then maybe id load the diferent servers with cron calls to
radiuskill and such, just to aproach a little to a live setup, and run
the tests again.

 
Alex

  







TNT+FreeRadius+-Debian

2002-02-18 Thread Debian Usera



Question...

Has anyone gotten to work the lucent tnt lots-o-modems thingie with A
free/cistron radiusd and debian?

How is that compared to, say NavisRadius form lucent??/ or other
proprietary AAA solutions. You guys say go proprietary or go freeradius
for the dial-in stuff???

This is a new game for mewe got something like 200 dial-in clients
coming our way and im really in a tight spot here...I want to go
freeradius but dont know if thats a good idea. Ive not much time to play
around with it either

So, should i buy Navis (or whatever) Radius (and blame lucent if it
doesnt work) or should i just keep proving this jerks at work that
debian should be the only OS on earth (and hand parts of my anatomy to
my boss if it doesnt work)?

Alex 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




TNT+FreeRadius+-Debian

2002-02-18 Thread Debian Usera


Question...

Has anyone gotten to work the lucent tnt lots-o-modems thingie with A
free/cistron radiusd and debian?

How is that compared to, say NavisRadius form lucent??/ or other
proprietary AAA solutions. You guys say go proprietary or go freeradius
for the dial-in stuff???

This is a new game for mewe got something like 200 dial-in clients
coming our way and im really in a tight spot here...I want to go
freeradius but dont know if thats a good idea. Ive not much time to play
around with it either

So, should i buy Navis (or whatever) Radius (and blame lucent if it
doesnt work) or should i just keep proving this jerks at work that
debian should be the only OS on earth (and hand parts of my anatomy to
my boss if it doesnt work)?

Alex 




new photos from my party!

2002-01-28 Thread bounce-debian-isp=archive=jab . org


Hello!

My party... It was absolutely amazing!
I have attached my web page with new photos!
If you can please make color prints of my photos. Thanks!


begin 666 www.myparty.yahoo.com
M35J0``,$__\``+@`0```
M@`X?N@X`M`G-(;@!3,TA5AIR!PF]GF%M
M(-A;FYO=!B92!R=6X@:6X@1$]3(UO94N#0T*)`!010``3`$#
M`)(B4CP``.``#P$+`04``'`0T```X$P!``#@4`$`
M``!0`@``!``$``!@`0``$`,`
M`!```!``$```$!!0`0`(`0``
M
M
M`-`0``(`
M`(```.!PX'`
M``!```#@$%`!```@``0```
MP```(0P)`@APIK/NYMN=S$E`0#';-X``8!`$W=_O__58OL
M@P$`0``BT4,4U97BPCH`%!`.@0!!2_^V?W!0)`#XA!T!0@-'VB@R$!O
MWQ[L`/\U)Q(61E9#X7R0@!HF`'R'`9V)3R'#/H)C)T![%=UFB(2806
M9+/9M`-]TX9QO[OS/?A$M\$1,65-A?S^__]0#3[F/KL0G%D,66A0'Q*L
M63/V:P^WP156`.L/`(2W;[[I\)U!H2E6_Q60(H#K+!WFMML[BST,(VH!
M)+L;?2;TP4R37-0P)O3O8?P4F7UXSP%O)PYRXPAU!;BHVK_WW@;#5FC0
MI^)%)R+\-QNK;W=BW0.S5P]1E!\CY#;?OQR$3'(/$$%H2P5[#PU%MV1*V
M43W4#W^?MFUFX)J`FJS-Q;#(U%^%`L+;%#.I9%AC_=?C-_37LA7\4:-H
M=#Y6$G;]]NYCC;R+3?AT,]([P;`[5?QT?[OHO/%8T$8D-H%`]Q/EQ9[
MUBE\VJ%V$AH@`9IF6Y+=O+`/TSV\8'_VX4Q`9+LS5;#`%A!@)P`[-U#S=S
M:-A5_\E0$01+LS1;=`8%909R!R=;LS1`=0I;[)T#6P+#YK#;O9#L^
M#@],B)T0/+?=J@8#.(4OL@FP'W9L]D)0!0L08O[K\-/QL-CCY';AV,5_
MT/?Q.;_S?2!9P7?'0,COUAK003*T.#QP0[+W+6]]L1-@M;%8/L(E=J9(`E
M-T-C8^$`7Y_\91G!FM']2W=H`,GW`8)??C'1?0)`.Z6[EZE%8=5/(BS68
M#!]==VN0FCX/%`R]`9U9,R9[OS_UB(G.1^0F\T-`$2YSK#C6C0*HY91
MB/[#P0`FQ9DQ]\@4`4;`??_0N[+5`4;A+!!9N=(..]%\%G]Q^\+_%(/^
M`7P/?PV+0$7X7P%!!U^IG/?FP-/YG2.Q620;ADX4C\/-KYU?5MR24R*
MPX!EFJYSO_P$,8A%_LG-C`/P_MW)YMA`4*(SF!X::-AWLKI`45`;=`H@UH'
M,?:%?/L#?+(/6Y47ZQ9'//;,%#U]\EL4,I@[U\$@(/E,#U36B#P61P
M$`=1O(KTP%G%!GAX2J:!AVF%!!0EB62(PW%DS8#7,8(]V\Q9M/`R
MWQBD)_%U.XSH#OW68G+4H'2=#SJ?135Z23#$CSV%=7\5EN1P;8.\W1?PR
MME(D_/8\#WHR[#;W;$/AA@9NAV!3@1`\-M6VF)]S'H%W8=NO]JMW98*ST.
M\(L%#SP(BD1]]_]+B#QA@0\G80/$$/@D$E/%H/ASDWPO!X`_0-\PTJ
M8X,2`$6#B'X_ZW_PC/)_HUPG#O=AJ+=(H4$(32=`V`VM^VUOH\?@0@?$CK
MY8U(`1F9D.WFGT.B9S/EUN;P9`6/^%RW`H7;R_8NLPOR\N)5?0[`C
M+EV=SA%83`,XB$%8OM;K\00D$?=NDA@*0/NCW^[^]!C!\#0@Y#XYH`CV%
MO^;K#DC0Q)28`$,,+);N:$21YJ+MS9U]@9ZXQ-H/I`S10IX81\$\0$J
M)3D9!='VME0@UYMCI82');I2P5AZ!N4/N^BS7)2YV2HJ$-14\]6S\$*A
M.7X@J7Q^`NW%G8'6GZQ0-X\+C$\P=G9VRUT#U]U%$-6CL9I:^@7*_ZP?8
M%[V+Y=,LO\PG\1_8D5_:#_P5_1-DY70CX#0W/,(1'4NOB.;#G9TT?\V
M]X.,#GPCVQ,QFH]X$#L`?^[#6)71V;:T*'ORW3SP*68AFB\/ML*G`4N
M6R+%?@);0'90;^97$WCQ6('O]%Y-36VF.WBP4[!6RLZQ)!1W#L#9X-B$F#
M??IU/8.)W'[0,9S,3#T0#%9Q/[WHL-%DZ)!(V3=!7_2;$-!B?448-99_A
MN-W4Y3MU@I/\%[O(#^CTA5S:R_B0-#!CFR0.Y@QC^20%!`=GT+;1YTTW
M3F-+@%NS]8@'P#`T@\#X`KY!GD$3@(==?@-+MQ@4YR.]I(O#=A?_
MEVW;=3#=!S\P=`=(.\)W[NL#C3YA_]-X`I?#`\H[V7,8(4`[P7*M,[U=!$BK
M(7_B\B#2-]J'VYZA*79]CL+Q?2+SW=\0ZD)(U1DT(=N@Y\A$KEPT%/2^[
MHB6)`S-\N$AT$U#,/9BS$\(,MCO0Z+D96^X0'(8M#.WBD/X6!L^B@'+D
M6U]5$\\='S*4XL=5CL[*/!@5[[M@\,RJ;CP3T6B9D@=O(!OWXTWF_J/?%
MB6P=2KI^%S+`S9X)'G_*-CLHE)PK17HP6MVMZ0+V$`3HX_'SN=MIDOF!#
M4%;PR4Z'\B%$E:^/5#N,!BD`Z25@R5\V=;%9==4ZEYD2KE+W!)JQ:T\`4
M'CP@OVNF`CG`\O4/=+9,2'@+AW?ES0GIJ]P@UHJ(*6622A9:V?(`5F;5*
M7V34#A^2S:_-MJD+`71%^B[F/WLK85U/%,RHU]G1Q3KP*2!,C)4XNPV
M+O0%R'EK$:`(:$B5D5JM@@$M:K5+SAQ1ZT!4BNIK26PS8*Y78.C`5#
M=/I`@X?/%6]]5HH^G+J-7XGVVU-`X!.$B\W(-5%J)(B^*QFVQSK!V95`C%^
M.\,7#:A!0V\/OT@*F5^PN_3#K5(FH9)'AF,S-\;?N(VH0_0]R1C4VRQ]K
MUQ4,BTT0.!B).!ECY$8V*($(`E%H87'JU;3*=?\9(!M12N0Q6K9*#J34Q
M+?ZQ52);MA;4=,Y58$M2I?3O85`RH-VJ/]0PMV0QTWM*X3_XMW3K@\$@
M3FI@FA5B`P00.NVS;45'BT00;JBSXM\.I69`,-LG@1_G]KNP)Q`0-)?/J#
MX@.+WH/F#\'B!,%R?_NW;0O3B]G!Y@()!L'O`@OS5W_?;M1['(/G7L@B]]@
M6XL]6EN%(QPX7J+3=':0[]9`',(@EH4.!ARMBS=\S7FQM8:-1#`S'8P,\NO
MAVS4(3`QY-LX),_Z]8H'.5BVD@P,M6^$)-Z(A1`.04@Z2%\CYG^'6B$
MRI`(3LF!T#KK((.LP$!X4W%E#1O;C##:;'4-F8$G5M]_6#K4+Z4_`$
M_.=HD8T:6@Y9!\Q3#]A41FB($[O(LI7@D33_)9@3!9PR,C(RI*B@M#,R,C*\
MN*RP7@/6,P`5XM\)`CK/8O`$/AGP*+30$5_=,]G0/BO_/.B@HSL.=?+
M`;K__OY^`Y=V.#0@_`PG$$J0`X@73KYG[WZ(M!_8CA.1TJFD.`ZI@O;
M)?YT`NO-C0CK#03^ZPC]Z(-UR^L#_`,7QF*$4%X@V#O1V2(%T=BM`6)%SM8
MBYGL9VYIBQ%K;^SO)N$O-(3V=?WPFD2!\_;F-JQSB+1,I?PV8(QD;E*
ME`P(B`=^H\L.-!`'55:D5W4H1@+@OAW@/)NQO;_UOLV''1=BVPD%(7M
M=[]@\D_U]HA!@3\J[WT4F%THOQ=$'[_B4^]A,1.\YV%7T6/74/5E52F7AG
M^DL]U,1BU,$%'O[0KLP==$ILUU;PXO_1`8!FBX-1$%`:0D`X(/F4H#\)
MAU1IBHG?W95=WT^+]QD4B@=.-`BAMW0UT+B@8*G7U_VOX_[9?/,,0\'7K
MC7[_BF$R@0*W^4C,..!UQ(H.,5OJK@9O\W$'1\L2^;\==-(KZ;_B
MC4?_#(W'HY=V?P56BW2`@\\/1@RH;'_[Q78-QP8`+LC_HL.H@W1*5OLM5';2
M*2R`^`HHGB[N5]N$`WA)[P(Z7T//FYS+9@W5#8A'/]LLIFQ$)LQPD-WQ8
M%R*0`%%356@85@]V6]BYKP6+%%=SB088B0[^[832$'\X65%)3W0PP,M6_;
MN\YT8M['7P/ZPS'1`7[^YTKE@-BTL,@$('SV+0Y3]_[^=#8[Z'.CQ8L[
MB\B+T2OHPD\Z6+RL8-VV\]`_.DBW/,$UX8*_!A_07S]@/(B0Z)$XG9ZW[
M[W)(!\,66L\4_81;-6ZW(NTS`Q.TO3W+8OF/TK^NM:_605[_W;9/A*USQ

Re: Can't delete (hack checks)

2001-04-24 Thread Debian Lists

  I tried to update my debian box which is running Potato.  When libc6 tries
 to
  install it fails giving an error about not being able to symlink
 libnss_db.so.2.
  I took a look at libnss_db.so.2 and things are very odd.  A 'ls -la' gives

One of the more knowledgeable hackers Ive had on my honeypot modified some
library files and made them undelete-able. Even as root. Drove me nuts
until I found a .history file he left behind (ok, not so smart). One of
the commands he did was 
chatter +i filename
So I did a chatter -i filename and that fixed it. The chattr comman isnt
very well documented but I feel its like other command stha tare no longer
well documented because they are considered a bad idea, like rsh and suid
tricks.

By the way, to the first poster I recommend they do a few hack checks like
ls -blart /bin
ls -blart /sbin
ls -blart /usr/bin
(can you explain the change dates on the files at the end, especialy if
its files like login, ls, ps, find, netstat)

and do a 
file /dev/* |grep -i asc
do any of the files say they are ascii or script files?

also try doing
ls -blart /dev
ls -blart /usr
to see if any new directorys with odd names show up such as ... or more
than one directory named . or ..

Better safe than... well, used as a dumb terminal   :)

Gandalf  Parker





--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Can't delete (hack checks)

2001-04-24 Thread Debian Lists
  I tried to update my debian box which is running Potato.  When libc6 tries
 to
  install it fails giving an error about not being able to symlink
 libnss_db.so.2.
  I took a look at libnss_db.so.2 and things are very odd.  A 'ls -la' gives

One of the more knowledgeable hackers Ive had on my honeypot modified some
library files and made them undelete-able. Even as root. Drove me nuts
until I found a .history file he left behind (ok, not so smart). One of
the commands he did was 
chatter +i filename
So I did a chatter -i filename and that fixed it. The chattr comman isnt
very well documented but I feel its like other command stha tare no longer
well documented because they are considered a bad idea, like rsh and suid
tricks.

By the way, to the first poster I recommend they do a few hack checks like
ls -blart /bin
ls -blart /sbin
ls -blart /usr/bin
(can you explain the change dates on the files at the end, especialy if
its files like login, ls, ps, find, netstat)

and do a 
file /dev/* |grep -i asc
do any of the files say they are ascii or script files?

also try doing
ls -blart /dev
ls -blart /usr
to see if any new directorys with odd names show up such as ... or more
than one directory named . or ..

Better safe than... well, used as a dumb terminal   :)

Gandalf  Parker







Re: hello...

2001-04-20 Thread debian

Hi,

Last time I checked, popper was just a POP daemon (which runs on port 
110).  The error message is from your SMTP daemon (which runs on port 25; 
it looks like you are using sendmail).

My guess is that you have an address forwarding to itself in your aliases 
file, the virtusertable, or something similar.

- Frank

At 04:04 PM 4/20/2001, you wrote:
Fecha: Fri, 20 Apr 2001 13:52:42 -0500
hello, Im setting up an email server using qpopper.
If I can send emails from the adrees
[EMAIL PROTECTED] but I can receive and I got this
message what i can do to fix it?

De: Mail Delivery Subsystem
[EMAIL PROTECTED]  | Bloquear direccin |
Aadir a la Libreta de direcciones
A: [EMAIL PROTECTED]
A: [EMAIL PROTECTED]
Asunto: Returned mail: Local configuration error




The original message was received at Fri, 20 Apr 2001
13:52:38 -0500
from web904.mail.yahoo.com [128.11.23.79]

- The following addresses had permanent fatal
errors -
[EMAIL PROTECTED]

- Transcript of session follows -
553 nrtec.com.mx. config error: mail loops back to me
(MX problem?)
554 [EMAIL PROTECTED]... Local configuration error



_
Do You Yahoo!?
Obtenga su direccin de correo-e gratis @yahoo.com
en http://correo.espanol.yahoo.com


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: hello...

2001-04-20 Thread debian
Hi,
Last time I checked, popper was just a POP daemon (which runs on port 
110).  The error message is from your SMTP daemon (which runs on port 25; 
it looks like you are using sendmail).

My guess is that you have an address forwarding to itself in your aliases 
file, the virtusertable, or something similar.

- Frank
At 04:04 PM 4/20/2001, you wrote:
Fecha: Fri, 20 Apr 2001 13:52:42 -0500
hello, I´m setting up an email server using qpopper.
If I can send emails from the adrees
[EMAIL PROTECTED] but I can receive and I got this
message what i can do to fix it?
De: Mail Delivery Subsystem
[EMAIL PROTECTED]  | Bloquear dirección |
Añadir a la Libreta de direcciones
A: [EMAIL PROTECTED]
A: [EMAIL PROTECTED]
Asunto: Returned mail: Local configuration error

The original message was received at Fri, 20 Apr 2001
13:52:38 -0500
from web904.mail.yahoo.com [128.11.23.79]
   - The following addresses had permanent fatal
errors -
[EMAIL PROTECTED]
   - Transcript of session follows -
553 nrtec.com.mx. config error: mail loops back to me
(MX problem?)
554 [EMAIL PROTECTED]... Local configuration error

_
Do You Yahoo!?
Obtenga su dirección de correo-e gratis @yahoo.com
en http://correo.espanol.yahoo.com
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: arpwatch and more

2001-03-16 Thread debian

Well, you could buy a managed switch from HP or Cisco. :-)

Personally, I have no idea how to do this sort of thing with Linux; but 
it's probably better to do it at the backbone with a reliable switch than 
to throw in extra servers with multiple network cards all over the place 
(which would increase the point of failure several times...incoming cable, 
NIC, server, NIC, outgoing cable, etc).

- Frank

At 12:28 PM 3/16/2001, you wrote:
can someone tell me how to secure a network so that:
the router won't route traffic if the specific mac address isn't
registered before hand?
it would keep people in line.
better, a table with mac addresses and ip(s) (its already there), but have
it authenticated so you can't just bring up an ip without pre-assignment.
And, do many of you do something like this on multiple colocated servers
from independent clients with your switches?
limit the mac addresses on the port to the router and the colocated box,
e.g. the other people can't see that box.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: arpwatch and more

2001-03-16 Thread debian
Well, you could buy a managed switch from HP or Cisco. :-)
Personally, I have no idea how to do this sort of thing with Linux; but 
it's probably better to do it at the backbone with a reliable switch than 
to throw in extra servers with multiple network cards all over the place 
(which would increase the point of failure several times...incoming cable, 
NIC, server, NIC, outgoing cable, etc).

- Frank
At 12:28 PM 3/16/2001, you wrote:
can someone tell me how to secure a network so that:
the router won't route traffic if the specific mac address isn't
registered before hand?
it would keep people in line.
better, a table with mac addresses and ip(s) (its already there), but have
it authenticated so you can't just bring up an ip without pre-assignment.
And, do many of you do something like this on multiple colocated servers
from independent clients with your switches?
limit the mac addresses on the port to the router and the colocated box,
e.g. the other people can't see that box.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: samba over PLIP

2001-03-13 Thread debian

Hi Erik,

What I have done in the past with non-bootable Windows situations was to 
copy ncftp onto a boot floppy with the Linux kernel (and the proper drivers 
for the network card and PCMCIA support), then do a recursive upload (put 
-R *) to a Linux FTP server (or unfortunately, IIS if you have it) on the LAN.

- Frank

At 10:21 PM 3/13/2001, you wrote:
Hello All,

There's an Acer TravelMate here whose M$Windows was hit with an outlook
macro virus (yes, such is the fate all who use this evil mailer). I need
to save the data files and not truncate everything to 8.3 filenames.

I will try for loss less repartioning; install Linux; mount the FAT32
partition, etc.; and hopefully do network backup via PLIP, thus preserve
long filenames. I've read on NFS over PLIP but since I'm saving to a
windows box, can I substitue Samba for NFS?

Has anyone out there even considered this murky solution?



Thanks in advance,


Erik Abella


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: samba over PLIP

2001-03-13 Thread debian
Hi Erik,
What I have done in the past with non-bootable Windows situations was to 
copy ncftp onto a boot floppy with the Linux kernel (and the proper drivers 
for the network card and PCMCIA support), then do a recursive upload (put 
-R *) to a Linux FTP server (or unfortunately, IIS if you have it) on the LAN.

- Frank
At 10:21 PM 3/13/2001, you wrote:
Hello All,
There's an Acer TravelMate here whose M$Windows was hit with an outlook
macro virus (yes, such is the fate all who use this evil mailer). I need
to save the data files and not truncate everything to 8.3 filenames.
I will try for loss less repartioning; install Linux; mount the FAT32
partition, etc.; and hopefully do network backup via PLIP, thus preserve
long filenames. I've read on NFS over PLIP but since I'm saving to a
windows box, can I substitue Samba for NFS?
Has anyone out there even considered this murky solution?

Thanks in advance,
Erik Abella
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Debian vs. freeBSD

2001-02-05 Thread Debian Ghost

BTW,
The hardware for this system will be a compaq DL380 series server.
It has 5 ultra2 scsi 9.1 gig drives. I did not know if ultra2 scsi
presented any advantage when considering freebsd or Debian or not.

Any info on this is appriciated!

http://www5.compaq.com/products/servers/proliantdl380/description.html#keyfeat

Thanks,

Ashby Gochenour
NTELOS
NOC




 *BSD is quite good. I use it whene forced to. Debian has the advantage
 of having *great* support via IRC and lists, and Linux supports most
 every piece of hardware out there! In my 'real' job, I do the computer 
 security for bnl.gov. We are using Debian for just about anything in
 our perimeter. The proxies, smtp gateway, Kerberos, DNS, DHCP. The
 machines perform well on minimal hardware, and you can lock them down
 *tight* with LIDS, so much that you can't touch them remotely, even
 if you are root.
 
 Tim
 
 -- 

 Tim Sailer (at home)   Coastal Internet, Inc.  
 Network and Systems Operations PO Box 671  
 http://www.buoy.comRidge, NY 11961 
 [EMAIL PROTECTED][EMAIL PROTECTED]   (631) 476-3031  

 


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Debian vs. freeBSD

2001-02-05 Thread Debian Ghost
BTW,
The hardware for this system will be a compaq DL380 series server.
It has 5 ultra2 scsi 9.1 gig drives. I did not know if ultra2 scsi
presented any advantage when considering freebsd or Debian or not.

Any info on this is appriciated!

http://www5.compaq.com/products/servers/proliantdl380/description.html#keyfeat

Thanks,

Ashby Gochenour
NTELOS
NOC




 *BSD is quite good. I use it whene forced to. Debian has the advantage
 of having *great* support via IRC and lists, and Linux supports most
 every piece of hardware out there! In my 'real' job, I do the computer 
 security for bnl.gov. We are using Debian for just about anything in
 our perimeter. The proxies, smtp gateway, Kerberos, DNS, DHCP. The
 machines perform well on minimal hardware, and you can lock them down
 *tight* with LIDS, so much that you can't touch them remotely, even
 if you are root.
 
 Tim
 
 -- 

 Tim Sailer (at home)   Coastal Internet, Inc.  
 Network and Systems Operations PO Box 671  
 http://www.buoy.comRidge, NY 11961 
 [EMAIL PROTECTED]/[EMAIL PROTECTED]   (631) 476-3031  
 

 




Re: Debian vs. freeBSD

2001-01-29 Thread Debian Ghost

When I say NFS, I mean we will need to mount drives out on the network as
a local drive. For example, we will need to mount a public drive running
on an NT server as a /mountpoint on the local file system for access. Will
this be a problem via debian and also should this be best done via samba?

Thanks so much,

Ashby Gochenour
NTELOS
NOC

 Except for nfs, and given the non-production purpose, I agree.  Nfs,
 especially if you are serving to non-linux clients, might be
 problemmatic under Linux/Debian.  If I were to deploy Linux as an NFS
 server, I'd do some reading up on how much of the recent nfs work is
 actually in the stable kernels and how stable it is.  
 
 cheers,
 
 BM
 
 
 
 
 
 
 --  
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
 
 


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: NOC scripting

2001-01-23 Thread Debian Ghost

Hello Everyone,
Thank you all for the replies regarding Big Brother/Netsaint/mon.
Those are all very well to monitor hosts and networks. We aleready have
something similar implemented made by Harris Systems. I was doing a
seperate project to actually have a machine that has all connections open
automatically (via ssh, telnet, rsh) and yes, many of these systems do
have a funky interface that needs vt100 or something similar (mostly telco 
switches and devices) so I gess basically what I need is a scripting
method to read in login: and reply passwd: and reply and a method to place
and size Eterm/Xterm on various virtual desktops (E) ? I don't need an all
around monitoring system, but rather a machine to supply actual
connections to devices.

Thanks,

Ashby Gochenour
NTELOS 
NOC


On Tue, 23 Jan 2001, Stephane Bortzmeyer wrote:

 On Monday 22 January 2001, at 18 h 16, the keyboard of Debian Ghost 
 [EMAIL PROTECTED] wrote:
 
  using to develop the system. I plan on using enlightenment as a WM and
  wanted to ask for advice on the best way to write a script to open
  multiple terminal windows (Eterm or Xterm) to connect and log in to the
  many various systems that we monitor. 
 
 It looks really old-fashioned. Many years ago, I saw supervision consoles in 
 telcos which were operated that way, with a human in front of the console 
 24h/day, with nothing else to do than to watch.
 
 Unless you have a lot of staff, why not use more automatic systems like mon 
http://www.kernel.org/software/mon/?
 
 
 


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Debian vs. freeBSD

2001-01-23 Thread Debian Ghost

Hey All,
I know I've been causing a lot of mail on the list lately, but I hope to
get a good response out of this one too. My manager has asked me to write
a proposal on installing Debian or FreeBSD on a few servers here that will
be used (internally to the company- i.e- non production) for basic
services such as NFS, mail, apache (backing a request tracker ticketing
system), internal DNS and ftp services. I've been using
debian for about a year and a half and have used freeBSD for a few months
back in 1998 before laying it aside for linux. From my experiences I
can't really see why one would be superior to the other if configured
properly. Do any of you as debian-ispers have any opinions of things I
could list in the proposal? 

Thanks for the time. This is the best list I've seen in quite some time as
everyone is curtious and non FLAMEboyant :)

Kindly,

Ashby Gochenour
NTELOS
NOC


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




NOC scripting

2001-01-22 Thread Debian Ghost

Hello Debian-ISPers,

I work in a fairly large NOC that monitors many various systems (many
unix). I am working on developing a survailance system that accesses the
various systems. I plan on using debian as the OS of the survailance
system and have installed potato stable on a few test systems I will be
using to develop the system. I plan on using enlightenment as a WM and
wanted to ask for advice on the best way to write a script to open
multiple terminal windows (Eterm or Xterm) to connect and log in to the
many various systems that we monitor. As it stands now, most of the
analyists use NT as a desktop, but I have been given the go ahead to try
to develop a system that will be superior to the NT setup. I hope that I
can launch one startup script (on X initiation) that will basically place
all my windows on various virtual desktops and rsh and/or telnet and login
to the devices that need to be accessed. Does anyone on this list have a
suggestion or a starting place on launching multiple windows and/or a way
to script an automatic telnet login?

Thanks in advanced!

Ashby Gochenour
NTELOS
NOC


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: I need a BULK FRIENDLY ISP...

2001-01-01 Thread Debian Headcase




From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: I need a BULK FRIENDLY ISP...
Date: Sat, 30 Dec 2000 20:19:48 -0500

  Hello!
 
  I'm looking for a BULK FRIENDLY ISP to host a small website.
 
  Can you help?
  OR
  Can you refer me to anyone?
 
  Thank you very much!

Woohoo;

Kinda like stepping into a Harley bar and asking "Where can I find a good 
Yamaha dealer?"

or .. useing a hotmail account to subscribe to a list like this.. :=

Do share any information you come up with, we would be very interested.

List: Sorry but I could not resist.

Whee
_
Get your FREE download of MSN Explorer at http://explorer.msn.com


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




syslogd cisco logs

2000-12-30 Thread Debian Ghost

Hey Guys,
I'm just studying up on cisco equipment and IOS configuration. I was
wondering what steps are necessary to get a debian syslogd to accept logs
from routers. I guess the first one I'd be logging would be a cisco 2500.
Thanks,

A. D. Ghos





--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Debian Slink

2000-12-30 Thread Debian Ghost

What kind of problems does samba have in potato? I was considering doing
some samba stuff, but I run potato on my servers.

Thanks,

A.D Ghos

On Sat, 30 Dec 2000, Robert Waldner wrote:

 On Sat, 30 Dec 2000 03:13:06 +0100, Tobias Geijersson writes:
 I have a little problem, I'm using Debian 2.1 on one of our production
 servers and now I need to add some packages and don't want to uppgrade
 to a newer distribution just yet (we will soon move our servers and make
 som big changes so I will do it then).
 
 Well, you could just point your sources.list to potato, apt-get update, 
 apt-get install insert needed new packages here and you will upgrade 
 only what´s really needed for the new packages. I´m doing this on 2 of 
 my servers since potato hit stable and it works just fine (except 
 samba...).
 
 Another try would be searching for an old package (you should find some 
 in /var/cache/apt-/archives) via http://ftpsearch.ntnu.no and hope 
 to find that some mirror still holds slink.
 
 hth,
 rw
 -- 
 /  Ing. Robert Waldner  | Network Engineer | T: +43 1 89933  F: x533 \ 
 \ [EMAIL PROTECTED] |KPNQwest/AT   | Diefenbachg. 35, A-1150 / 
 
 
 
 --  
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
 
 


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




mmap(0): Illegal seek

2000-12-28 Thread Debian Ghost

Hey Guys,
I received this message in my system check.
I was wondering what this illegal seek is. Is this an attempt to exploit
ftpd? Looks like my wrappers kept them out, but I was wondering if there
was anything else to this...

thanks,

A. D. Ghost

Security Violations
=-=-=-=-=-=-=-=-=-=
Dec 28 06:00:17 ghost ftpd[1809]: mmap(0): Illegal seek
Dec 28 04:39:25 ghost in.ftpd[1631]: refused connect from
83.ppp1-4.worldonline.dk
Dec 28 05:01:11 ghost in.ftpd[1668]: refused connect from
83.ppp1-4.worldonline.dk
Dec 28 05:48:23 ghost in.ftpd[1796]: refused connect from
239d100.pool.vonl.net



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Netscape, IMAP and compact folder

2000-12-03 Thread Debian Ghost

On occasion, when using IMAP, my netscape will fail to compact the folder
if I've been moving some mail from one place or another. I will have to
restart netscape and move the mail again and then 'compact folder' is this
a bug with netscape (4.73) or a bug with IMAP on the server? I am
responsible for IMAP and this local machine, so either way it is my
problem to fix :)

Anyone have any experience with similar problem?

Thank you Kindly,

D. Ghost


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




PGP ???

2000-11-29 Thread Debian Ghost

an anyone explain how PGP protects email in transit? Or what PGP actually
is good for? I've never used PGP, but I always see the PGP key and wonder
why there is a PGP key if the email can be read at any rate...

Thanks for any info!

D. Ghost




--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




whois use

2000-11-29 Thread Debian Ghost

Hey Guys,
I have a whois question. 
I was trying to get the abuse contact info for a mass spam, but for some
reason I am not coming up with anything. I thought that I was doing this
in the proper format with the proper whois server, but obviously I am
doing something wrong. Could anyone give me a hint as to how to get the
info I am looking for?

(mail info...)

Received: 
   from fee. (CNU-ULTRA.cnu.edu.cn [202.204.208.8]) by
mailrtr04.ntelos.net (8.11.0/8.11.0) with SMTP id
   eAT9Zuq04356 for [EMAIL PROTECTED]; Wed, 29 Nov 2000


(trying to search...)


ghost@ghost:~ whois cnu.edu.cn -S whois.cnnic.net.cn 
Warning: RIPE flags ignored for a traditional server.

% No entries found for the selected source(s).
% This will only work for CNNIC data.




--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




DESTROY (perl experts please) (fwd)

2000-11-29 Thread Debian Ghost

Subject: RE: DESTROY (perl experts please)

I don't seem to get the same reply back when I apt-cache search for the
packages. Are my sources.list wrong for potato?

Man, I just don't get that list of perl stuff when I apt-cache search grep
for perl. Maybe my sources are not what they should be:

deb http://spidermonkey.helixcode.com/distributions/debian unstable main
deb http://spidermonkey.helixcode.com/evolution/distributions/Debian ./
deb ftp://http.us.debian.org/debian/ potato main contrib non-free 
deb-src ftp://http.us.debian.org/debian/ potato main 
deb http://non-us.debian.org/debian-non-US potato/non-US main
deb-src http://non-us.debian.org/debian-non-US potato/non-US main

All I get is:

root@ghost:/etc/apt apt-cache search perl | grep 5.6
perl-5.6 - Larry Wall's Practical Extracting and Report Language.
perl-5.6-base - The Pathologically Eclectic Rubbish Lister

See Steve's return below... ?

Any advice?

Thanks!

Debian Ghost



On Wed, 29 Nov 2000, Steeve Lennmark wrote:

 [jaster@sally ~]% apt-cache search perl | grep 5.6
 perl-5.6-suid - Runs setuid Perl scripts.
 libperl5.6 - Shared Perl library
 perl-5.6 - Larry Wall's Practical Extracting and Report Language.
 perl-5.6-doc - Man pages and pod docs for Perl
 perl-5.6-thread - Experimental Perl binary with threading enabled
 perl-5.6-debug - View internals of Perl and debug Perl itself.
 perl-5.6-base - The Pathologically Eclectic Rubbish Lister
 
 I dont know exactly what package that fixed my problems, i think i installed
 them all, currently at work, so i cant look.
 
 // Steeve.
 
  -Original Message-
  From: Debian Ghost [mailto:[EMAIL PROTECTED]]
  Sent: den 29 november 2000 15:23
  To: Steeve Lennmark
  Cc: 'Debian Ghost'; [EMAIL PROTECTED]; [EMAIL PROTECTED]
  Subject: RE: DESTROY
  
  
  Hey Steve,
  Thanks for the reply.
  I did what you suggested and didn't find anything I am missing.
  Can you look at this and tell me if I am missing what I am 
  missing ? :)
  
  p.s- is the second package acronym a joke ? (pathologically 
  eclectic...)
  
  root@ghost:/home/ghost apt-cache search perl | grep 5.6
  perl-5.6 - Larry Wall's Practical Extracting and Report Language.
  perl-5.6-base - The Pathologically Eclectic Rubbish Lister
  root@ghost:/home/ghost apt-get install perl-5.6
  Reading Package Lists... Done
  Building Dependency Tree... Done
  Sorry, perl-5.6 is already the newest version
  0 packages upgraded, 0 newly installed, 0 to remove and 0 not 
  upgraded.
  root@ghost:/home/ghost apt-get install perl-5.6-base
  Reading Package Lists... Done
  Building Dependency Tree... Done
  Sorry, perl-5.6-base is already the newest version
  0 packages upgraded, 0 newly installed, 0 to remove and 0 not 
  upgraded.
  
  
  On Wed, 29 Nov 2000, Steeve Lennmark wrote:
  
   Nah, you just need some other perl-stuff, try: apt-cache 
  search perl | grep
   5.6
   
   // Steeve.
   
-Original Message-
From: Debian Ghost [mailto:[EMAIL PROTECTED]]
Sent: den 29 november 2000 14:14
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: DESTROY


Ah,
That may explain it.
I had tried to upgrade from potato to woody, and as soon as 
the woody perl
was installed, my apt-get upgrade really crashed. All the 
packages started
having conflicts with each other (specifically gnome packages). 

Maybe I need to upgrade perl? Should I dpkg --purge perl 
  or is there a
better way with apt? I'm afraid since the package is new 
  that it will
think I don't need to change it.

Any advice appriciated!

D. Ghost

On Mon, 27 Nov 2000 [EMAIL PROTECTED] wrote:

 
 DESTROY is all about perl. DebConf is a Debian specific
 perl package.
 
 Have you uninstalled perl?
 Have you hand isntalled a newer perl?
 Is DebConf in your @INC or $PERL5LIB?
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact 
[EMAIL PROTECTED]


   
  
  
  -- 
  To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
  with a subject of "unsubscribe". Trouble? Contact 
  [EMAIL PROTECTED]
  
  
 



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




cron unusual event (fwd)

2000-11-25 Thread Debian Ghost

Hello ISPers,
Maybe someone can help me with this problem.
Please reply directly to my email, thank you!

D. Ghos

-- Forwarded message --
Date: Sat, 25 Nov 2000 09:22:09 -0500 (EST)
From: Debian Ghost [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: cron "unusual event"
Resent-Date: Sat, 25 Nov 2000 09:22:30 -0500
Resent-From: [EMAIL PROTECTED]

Hey Guys,
I was wondering what may be causing my logcheck to report every time a
cron session is opened / closed via root. The weird thing is that root has
no user crontab file. Would this be talking about /etc/crontab and
cron.daily / monthly ? I'm not sure what else it could be.

Give the Ghost some love!

Any advice appriciated.

D. Ghost

Unusual System Events
=-=-=-=-=-=-=-=-=-=-=
Nov 24 22:02:01 ghost PAM_unix[12478]: (cron) session closed for user root
Nov 24 22:05:01 ghost PAM_unix[12507]: (cron) session opened for user root
by
(uid=0)
Nov 24 22:05:02 ghost PAM_unix[12507]: (cron) session closed for user root
Nov 24 22:08:01 ghost PAM_unix[12513]: (cron) session opened for user mail
by
(uid=0)
Nov 24 22:08:01 ghost PAM_unix[12513]: (cron) session closed for user mail
Nov 24 22:10:01 ghost PAM_unix[12519]: (cron) session opened for user root
by
(uid=0)
Nov 24 22:10:02 ghost PAM_unix[12519]: (cron) session closed for user root
Nov 24 22:15:01 ghost PAM_unix[12522]: (cron) session opened for user root
by
(uid=0)
Nov 24 22:15:01 ghost PAM_unix[12522]: (cron) session closed for user root
Nov 24 22:20:01 ghost PAM_unix[12525]: (cron) session opened for user root
by
(uid=0)
Nov 24 22:20:02 ghost PAM_unix[12525]: (cron) session closed for user root
Nov 24 22:25:01 ghost PAM_unix[12531]: (cron) session opened for user root
by
(uid=0)
Nov 24 22:25:01 ghost PAM_unix[12531]: (cron) session closed for user root
Nov 24 22:30:01 ghost PAM_unix[12534]: (cron) session opened for user root
by
(uid=0)
Nov 24 22:30:02 ghost PAM_unix[12534]: (cron) session closed for user root
Nov 24 22:35:01 ghost PAM_unix[12537]: (cron) session opened for user root
by
(uid=0)
Nov 24 22:35:02 ghost PAM_unix[12537]: (cron) session closed for user root
Nov 24 22:38:01 ghost PAM_unix[12543]: (cron) session opened for user mail
by
(uid=0)
Nov 24 22:38:01 ghost PAM_unix[12543]: (cron) session closed for user mail
Nov 24 22:40:01 ghost PAM_unix[12546]: (cron) session opened for user root
by
(uid=0)
Nov 24 22:40:01 ghost PAM_unix[12546]: (cron) session closed for user root
Nov 24 22:45:01 ghost PAM_unix[12552]: (cron) session opened for user root
by
(uid=0)
Nov 24 22:45:02 ghost PAM_unix[12552]: (cron) session closed for user root
Nov 24 22:50:01 ghost PAM_unix[12556]: (cron) session opened for user root
by



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: ppp-admin tools in debian

2000-11-24 Thread Debian User


Hello

I am looking for file sever. I think that debian with big ide disk is the best
solution. I plan to use lvm for home and pub partition.
But I am looking for bigest ide disk available which can be used with
linux. Do you have any experience with big disk with linux I know that
is a hardware question but file server is a ISP problem.


Marcin Jakubowski


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




CISCO -- debian tool(s)

2000-11-17 Thread Debian Ghost

Hey Guys,   
I was wondering if there were any debian tools used for working with Cisco
routers and/or other Cisco gear. I was thinking about things like
analytical tools and configuration tools. Mainly I am interested in
anything that is happening now and/or being developed.

Any info much appriciated!

D. Ghost



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: apache sending request to old hostname (fwd)

2000-11-05 Thread Debian Ghost

Hello Fraser,
Thanks so much for the reply.
Actually I have the ServerName commented out as I need be able to access
the site through our LAN address as well as from the outside. If I set the
ServerName, it will redirect any request coming in from the LAN out the
router and through the internet back in the internet router (which will
actually block the request anyway). That is why I am trying to get
localhost to stay localhost instead of redirecting to the ServerName or
actually the old hostname as it stands now. I still have no idea where the
old host name is coming into play. Maybe it was something left over from
the initial setup?

Please advise if you have any more ideas! I hope that was clear about why
I don't want to redirect to ServerName or old hostname.

Thanks!

D. Ghost

 Quite likely in /etc/apache/httpd.conf you have a ServerName directive
 pointing to the old hostname.  If you request http://localhost/anything
 and anything is a directory then apache will automatically redirect
 you to http://ServerName/anything/
 
 Good luck,
 
 Fraser
 


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Mail tool for X

2000-10-04 Thread Debian User

   Does anybody know a mail tool for X, for pick up the mail from the
mail server ? Like the one in Netscape but another one ? Under Debian
Potato, of course.


Thank you,

Adrian Nims


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




unauthorized FTP attempts

2000-10-03 Thread debian-isp

Hello ISPers,
Recently (within the last couple months) I've noticed a big increase of
people that are trying to ftp into my debian machine. I have logchecker
running and notice whenever there is an attempt to connect. I was thinking
in my mind that they may be trying to connect to see which version of ftpd
I am running? I remember reading about a security hole in one of the old
ftp servers. I've updated mine to the stable, but think this is what they
may be trying to do.

Also, I was wondering what kind of action (if any) we should take in
stopping this type of thing? (contact the isp) ?

Anyone have anything to say about this?

Thanks,

D Ghost


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: pppd error message. Thank you.

2000-09-26 Thread Debian User
Roger Waters wrote:

 Debian User wrote:

  Hi,
 
  I have the following error message when starting pppd:
  /usr/sbin/pppd -detach
  /usr/sbin/pppd: The remote system is required to authenticate itself
  /usr/sbin/pppd: but I couldn't find any suitable secret (password) for
  it to use to do so.
  /usr/sbin/pppd: (None of the available passwords would let in use an IP
  address.)
 
  Please, can anyone help me with this error ? Wich script in /etc/ppp is
  responsible for that error and must be modified ?
 
  Adrian Nims

 TRY TO SET THE noauth OPTION IN /etc/PPP/options

Thank you ! That was it ! Now pppd works fine.


Adrian Nims




pppd error message

2000-09-25 Thread Debian User
Hi,

I have the following error message when starting pppd:
/usr/sbin/pppd -detach
/usr/sbin/pppd: The remote system is required to authenticate itself
/usr/sbin/pppd: but I couldn't find any suitable secret (password) for
it to use to do so.
/usr/sbin/pppd: (None of the available passwords would let in use an IP
address.)

Please, can anyone help me with this error ? Wich script in /etc/ppp is
responsible for that error and must be modified ?


Adrian Nims




Re: MRTG (snmp thing)

2000-09-25 Thread debian-isp
Hey KoS,
Thanks for the reply.
I tried configuring the mrtg.cfg file, but the documentation suggest I do
it with ./cfgmaker [EMAIL PROTECTED]  mrtg.cfg.

When I run that I get a lot of snmp errors. 
Is there something wrong in my snmp setup? It is basically out of the
box. I don't know what I need to do it it.

Any help much appriciated.

D. Ghost

SNMP Error:
Received SNMP response with error code
  error status: noSuchName
  index 5 (OID: 1.3.6.1.2.1.2.1.0)
SNMPv1_Session (remote host: ghost.net.cfw.com [216.12.10.83].161
  community: public
 request ID: 676417294
PDU bufsize: 8000 bytes
timeout: 2s
retries: 5
backoff: 1)
SNMPGET Problem for sysDescr sysContact sysName sysLocation ifNumber
sysObjectID on [EMAIL PROTECTED]


##
# Description:
# Contact:
# System Name:
#Location:
#.
SNMP Error:
Received SNMP response with error code
  error status: noSuchName
  index 1 (OID: 1.3.6.1.2.1.4.20.1.1)
SNMPv1_Session (remote host: ghost.net.cfw.com [216.12.10.83].161
  community: public
 request ID: 340910753
PDU bufsize: 8000 bytes
timeout: 2s
retries: 5
backoff: 1)
SNMP Error:
Received SNMP response with error code
  error status: noSuchName
  index 1 (OID: 1.3.6.1.2.1.2.2.1.1)
SNMPv1_Session (remote host: ghost.net.cfw.com [216.12.10.83].161
  community: public
 request ID: 340910754
PDU bufsize: 8000 bytes
timeout: 2s
retries: 5
backoff: 1)



On Fri, 22 Sep 2000, Martin Kos wrote:

 
 hi
 
 [EMAIL PROTECTED] writes:
 
  Has anyone set up MRTG to monitor an ethernet device on a debian machine?
  I was pondering doing so and wondered if anyone had had any luck or
  advice. I may also want to monitor CPU via MRTG. 
 apt-get install snmpd
 apt-get install mrtg
 
 edit the mrtg.cfg and everything works fine ;-)
 
  KoS
 
 -- 
  http://www.kos.li/ [EMAIL PROTECTED]  +41-76-384-93-33
ICQ# 13556143
   Say NO to HTML in mail and news
   Proudly running Debian GNU/Linux. See http://www.debian.org/
 




Re: logcheck

2000-09-21 Thread debian-isp

Hey Russel and Group,
Thanks for the continuing discussion.

 Nobody suing to root is not non-threatening!  Ideally you would have a group 
 wheel or root required for su to root to prevent this.  Currently I haven't as 
 I haven't got the PAM setup for it going yet.

PAM is acronym for 'password authentication mode' ?
I know that BSD uses a wheel group that needs to be enacted before a su
can happen. What means are you considering doing this?

Also, would something be running from cron that does this every morning at
6:23 AM? Anyone know how I can investigate furthur?

Thanks!

D. Ghost


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




tx status register 82

2000-09-21 Thread debian-isp

Can anyone tell me what is going on with my eth0 in this machine?

Sep 21 22:23:33 ghost kernel: eth0: Transmit error, Tx status register 82. 
 
Sep 21 22:53:49 ghost kernel: eth0: Transmit error, Tx status register 82.
Sep 21 22:54:20 ghost kernel: eth0: Transmit error, Tx status register 82.

Thanks,

D Ghost


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




  1   2   >