FW: Woody and HP DL320G2

2004-08-02 Thread IT-at-Challenge
 
[This was sent to debian-user but as I am running ISP-like services for
about 200 users so I think I sh ould have sent it to this list.  Please let
me know if this was incorrect]

Hi,

I am preparing to buy a new HP server, a HP DL320G2, and would like to
install Woody onto it.

The questions I have relate to the:
- On-board NICs, given on the HP site as "Two NC7760 PCI Gigabit Server
Adapters (embedded)" 
- the ATA RAID controller, given as "Integrated Dual Channel Ultra ATA/100
Adapter with Integrated ATA RAID 0, 1"
- video, given as "Integrated ATI RAGE XL Video Controller with 8-MB SDRAM
Video Memory"

Will woody with the standard bf2.4 kernel detect the NIC's and RAID
controller?
Will I need to compile my own kernel to do this?

Or, should I try to use Sarge?

Thanks,
Adrian




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



LILO & Software RAID1 boot= & raid-boot-extra

2004-08-02 Thread Clayton Russell
Hi,
I am currently looking into a problem I have with LILO & Software RAID.
When upgrading a kernel, with boot=/dev/md0 in lilo.conf, running lilo
succeeds, but reboot fails with LI 40 40 type errors.  The workaround I
have used for this in the past is to change boot= to /dev/hda, then run
lilo, then change to /dev/hdb then run lilo and all is fine.
I realise that this is because when it is set to /dev/md0 it inserts the
boot code into the md0 partiition (hda1 + hdb1) and not the drive(s) mbr(s).
I have found 1 reference on the web to a lilo option raid-boot-extra which
looks like exactly what I want to fix my problem.  i.e.
raid-boot-extra=/dev/hda,/dev/hdb. The only thing is when I insert this
into lilo.conf and run lilo it doesn't like this entry.  Does anybody know
if this option is actually real and if so which versions of lilo support
it?  If not has anybody dealt with this in another way which they could
share?
Thanks,
Clayton

Reference: www.linux-magazine.com/issue/33/Software_RAID.pdf


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



IDS for high bandwidth?

2004-08-02 Thread Christian Hammers
Hello

Has anybody here ideas or experience in building an Intrusion Detection
System for a big network i.e. at least several hundred MBit/s with focus on
detection of (D)DoS and worm attacks (e.g. sudden activity peaks towards one
system or well known worm patterns from systems)?

Last time I checked "snort", it seems it could only handle some ten MBit/s
even on a good hardware so I wonder if such a thing can be implemented with
a (or a cluster of?) PCs and free software at all.

bye,

-christian-

P.S.: Recommendations for hardware appliances and non-free software are
  welcome, too, of course, but maybe per mail if they are too off-topic.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



File was infected with a virus

2004-08-02 Thread KDDI-INFO

Note: JP stands for Japanese.

ALERT!!
This e-mail contained one or more virus-infected files and have been rejected.
(JP:コンピュータウィルスを発見しましたので、メールの送信を中止しました。)

The following attachments were infected:
(JP:[EMAIL PROTECTED]<$N$H$*$j!#) 
file=message.zip,status=deleted,virus-id=36326,[EMAIL PROTECTED]

Thank you,

KDDI Corporation <[EMAIL PROTECTED]>

-- Original message text follows ---
Subject:  Re: Extended Mail
Message-ID:  <[EMAIL PROTECTED]>
Date: 2004/08/03
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: IpSec with Debian "woody" and kernel 2.6.6

2004-08-02 Thread Arnt Karlsen
On Mon, 02 Aug 2004 15:36:25 +0200, Jarle wrote in message 
<[EMAIL PROTECTED]>:

> Hi,
> 
> I needed to use kernel 2.6.* on a new firewall machine (to handle the
> hardware). I've used FreeS/WAN for IPSec over the past years, but it
> seems like I have to use the new Linux kernel support for IPSec on
> this machine. It will use VPN to other Linux based firewalls, and some
> Cisco routers. 
> 
> What packages do I need in order to get ipsec up and running on kernel
> 2.6.6, and where can I get them? (I found no match on "ipsec" on
> backports.org). Also - where do I find documentation for the new
> kernel based IPSec?
> 
> Jarle

..first cat /etc/apt/sources.list |grep ^deb 
# your site is different, I run off my own mirrors. 
deb http://192.168.2.222/debian/ stable main non-free contrib
deb http://192.168.2.222/debian-backports/debian stable all  
# "all" for _everything_ in backports.
deb http://192.168.2.222/debian-non-US/ stable/non-US  main \
non-free contrib 
deb http://security.debian.org stable/updates main contrib non-free 
[EMAIL PROTECTED]:~ #

..then apt-get update ;apt-cache search ipsec
kernel-patch-usagi - Another IPv6 implementation for Linux
shorewall-doc - Shoreline Firewall (Shorewall) Documentation
freeswan - IPSEC utilities for FreeSWan
freeswan-modules-source - IPSEC kernel modules source for FreeSWan
kernel-patch-freeswan - IPSEC kernel support for FreeSWan
shorewall - Shoreline Firewall (Shorewall)

..this is also relevant to backport'ers, so I cc.

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: IpSec with Debian "woody" and kernel 2.6.6

2004-08-02 Thread Andraz Sraka
re

On Mon, 2004-08-02 at 15:36, Jarle Aase wrote:

> What packages do I need in order to get ipsec up and running on kernel
> 2.6.6, and where can I get them? (I found no match on "ipsec" on
> backports.org). Also - where do I find documentation for the new kernel
> based IPSec?

Use native ipsec in 2.6.x kernel and openswan (for woody you might need
to backport package or rebuild openswan (ipsec-tools) package for
woody), but at least you won't have to patch the kernel.

regards, 
 Andraz

-- 
BOFH excuse #316:

Elves on strike. (Why do they call EMAG Elf Magic)


signature.asc
Description: This is a digitally signed message part


IpSec with Debian "woody" and kernel 2.6.6

2004-08-02 Thread Jarle Aase
Hi,

I needed to use kernel 2.6.* on a new firewall machine (to handle the
hardware). I've used FreeS/WAN for IPSec over the past years, but it
seems like I have to use the new Linux kernel support for IPSec on this
machine. It will use VPN to other Linux based firewalls, and some Cisco
routers. 

What packages do I need in order to get ipsec up and running on kernel
2.6.6, and where can I get them? (I found no match on "ipsec" on
backports.org). Also - where do I find documentation for the new kernel
based IPSec?

Jarle
-- 
Jarle Aase  email: [EMAIL PROTECTED]
Author of freeware. http://www.jgaa.com
news:alt.comp.jgaa

War FTP Daemon: http://www.warftp.org
War FTP Daemon FAQ: http://www.warftp.org/faq/warfaq.htm
Jgaa's PGP key: http://war.jgaa.com/pgp
NB: If you reply to this message, please include all relevant
information from the conversation in your reply. Thanks.
<<< no need to argue - just kill'em all! >>>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Virus intercepted

2004-08-02 Thread debian-isp
A message you sent to
<[EMAIL PROTECTED]>
contained Worm.Mydoom.I and has not been delivered.

The message was received by s5.iti.lt from <[EMAIL PROTECTED]> via iu66-4.iti 
[10.4.66.4]

For your information, the original message headers were:

From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: 
Date: Mon, 2 Aug 2004 13:21:36 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0013_B13FF8A7.ED131BE8"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Virus intercepted

2004-08-02 Thread vilnius
A message you sent to
<[EMAIL PROTECTED]>
contained Worm.Mydoom.I and has not been delivered.

The message was received by s5.iti.lt from <[EMAIL PROTECTED]> via iu66-4.iti 
[10.4.66.4]

For your information, the original message headers were:

From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Returned mail: Data format error
Date: Mon, 2 Aug 2004 12:49:11 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000__2DA9CC0C.8E691E9A"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: mysql refusing access from other machines

2004-08-02 Thread Shannon R.
aaagh! i sure did miss that.

many thanks achim!


shannon



--- Achim Schmidt <[EMAIL PROTECTED]> wrote:

> You are sure mysql is listening on all interfaces
> and not only lo ?
> 
> perhaps take a look to my.cnf and check if
> "skip-networking" is active -
> if yes simply comment it and restart mysqld.
> 
> -achim
> 
> Am Mo, 2004-08-02 um 11.47 schrieb Shannon R.:
> > good day all!
> > 
> > 
> > i'm getting really confused with how to properly
> allow
> > users to access mysql from other machines. (on
> debian
> > woody, using all stable packages)
> > 
> > that is, i tried this as mysql root user:
> > 
> > 
> > GRANT SELECT, INSERT, UPDATE, DELETE ON
> my_sql_db.* TO
> > [EMAIL PROTECTED] IDENTIFIED BY 'password';
> > 
> > 
> > after this, i can access mysql as 'dbuser' from
> the
> > localhost. the mysql servers ip add by the way is
> > 192.168.1.1, and since i also want that user to be
> > able to access from 192.168.1.2, i also did this
> > command:
> > 
> > 
> > GRANT SELECT, INSERT, UPDATE, DELETE ON
> my_sql_db.* TO
> > [EMAIL PROTECTED] IDENTIFIED BY 'password';
> > 
> > 
> > that should have been it but whenever i try to
> access
> > mysql from 192.168.1.2, i keep getting an "Can't
> > connect to MySQL server" error.
> > 
> > im pretty sure i did this right, but it just wont
> > work. did i do anything wrong? what could i
> possible
> > have overlooked?
> > 
> > i even tried installing phpmyadmin and using it to
> add
> > users, even going as far as adding users with host
> '%'
> > but i just can't connect to mysql from another
> > machine.
> > 
> > anybody have any idea what could be going on here?
> > 
> > 
> > thanks!
> > shannon
> > 
> > 
> > 
> > 
> > __
> > Do you Yahoo!?
> > Yahoo! Mail is new and improved - Check it out!
> > http://promotions.yahoo.com/new_mail
> 




__
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: mysql refusing access from other machines

2004-08-02 Thread Achim Schmidt
You are sure mysql is listening on all interfaces and not only lo ?

perhaps take a look to my.cnf and check if "skip-networking" is active -
if yes simply comment it and restart mysqld.

-achim

Am Mo, 2004-08-02 um 11.47 schrieb Shannon R.:
> good day all!
> 
> 
> i'm getting really confused with how to properly allow
> users to access mysql from other machines. (on debian
> woody, using all stable packages)
> 
> that is, i tried this as mysql root user:
> 
> 
> GRANT SELECT, INSERT, UPDATE, DELETE ON my_sql_db.* TO
> [EMAIL PROTECTED] IDENTIFIED BY 'password';
> 
> 
> after this, i can access mysql as 'dbuser' from the
> localhost. the mysql servers ip add by the way is
> 192.168.1.1, and since i also want that user to be
> able to access from 192.168.1.2, i also did this
> command:
> 
> 
> GRANT SELECT, INSERT, UPDATE, DELETE ON my_sql_db.* TO
> [EMAIL PROTECTED] IDENTIFIED BY 'password';
> 
> 
> that should have been it but whenever i try to access
> mysql from 192.168.1.2, i keep getting an "Can't
> connect to MySQL server" error.
> 
> im pretty sure i did this right, but it just wont
> work. did i do anything wrong? what could i possible
> have overlooked?
> 
> i even tried installing phpmyadmin and using it to add
> users, even going as far as adding users with host '%'
> but i just can't connect to mysql from another
> machine.
> 
> anybody have any idea what could be going on here?
> 
> 
> thanks!
> shannon
> 
> 
> 
>   
> __
> Do you Yahoo!?
> Yahoo! Mail is new and improved - Check it out!
> http://promotions.yahoo.com/new_mail


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



mysql refusing access from other machines

2004-08-02 Thread Shannon R.
good day all!


i'm getting really confused with how to properly allow
users to access mysql from other machines. (on debian
woody, using all stable packages)

that is, i tried this as mysql root user:


GRANT SELECT, INSERT, UPDATE, DELETE ON my_sql_db.* TO
[EMAIL PROTECTED] IDENTIFIED BY 'password';


after this, i can access mysql as 'dbuser' from the
localhost. the mysql servers ip add by the way is
192.168.1.1, and since i also want that user to be
able to access from 192.168.1.2, i also did this
command:


GRANT SELECT, INSERT, UPDATE, DELETE ON my_sql_db.* TO
[EMAIL PROTECTED] IDENTIFIED BY 'password';


that should have been it but whenever i try to access
mysql from 192.168.1.2, i keep getting an "Can't
connect to MySQL server" error.

im pretty sure i did this right, but it just wont
work. did i do anything wrong? what could i possible
have overlooked?

i even tried installing phpmyadmin and using it to add
users, even going as far as adding users with host '%'
but i just can't connect to mysql from another
machine.

anybody have any idea what could be going on here?


thanks!
shannon




__
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Virus intercepted

2004-08-02 Thread debian-isp
A message you sent to
<[EMAIL PROTECTED]>
contained Worm.Mydoom.I and has not been delivered.

The message was received by s5.iti.lt from <[EMAIL PROTECTED]> via iu66-4.iti 
[10.4.66.4]

For your information, the original message headers were:

From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Test
Date: Mon, 2 Aug 2004 11:34:41 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0011_7AB046C4.6DFAA7ED"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Virus intercepted

2004-08-02 Thread noreply
A message you sent to
<[EMAIL PROTECTED]>
contained Worm.Mydoom.I and has not been delivered.

The message was received by s5.iti.lt from <[EMAIL PROTECTED]> via iu66-4.iti 
[10.4.66.4]

For your information, the original message headers were:

From: "Returned mail" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Message could not be delivered
Date: Mon, 2 Aug 2004 11:15:52 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0012_F474B1DE.D0597C8E"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]