Re: debian friendly unmanaged hosting joints?

2003-02-17 Thread Tim Quinlan
Well, you have to commend Mark's honesty. He did say, I really didn't
want to use this excellent mailing list as a sales platform.  And he
answered the question.

It's better than being subversive and saying something like, I am a
_very_ _happy_ customer of company XYZ.  They rule


On Mon, 2003-02-17 at 20:16, Jason Lim wrote:
 Agree... let's try and keep this for a discussion about ISPs running
 Debian... not Sales  Marketing.
 
 We're pretty much all offering Debian here as part of our services,
 otherwise we wouldn't BE here to start with ;-)
 
 I don't think anyone minds a line or two mentioning your company, cool...
 but the whole email with paragraphs worth of promotions?
 
 - Original Message -
 From: Mark Lijftogt [EMAIL PROTECTED]
 To: Loopshot Operator [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Sent: Tuesday, 18 February, 2003 6:46 AM
 Subject: Re: debian friendly unmanaged hosting joints?
 
 
 
  You forgot about how your company is growing, the amount of job
 openings,
  the nice and bright future and stuff..
 
  naah.. nevermind..
 
 
  On Mon, Feb 17, 2003 at 02:27:00PM -0800, Loopshot Operator wrote:
   Old-Return-Path: [EMAIL PROTECTED]
   Subject: Re: debian friendly unmanaged hosting joints?
   Cc: [EMAIL PROTECTED]
   To: Jamie Penner [EMAIL PROTECTED]
   From: Loopshot Operator [EMAIL PROTECTED]
  
   I really didn't want to use this excellent mailing list as a sales
   platform, but it seems like there are several interested parties
   looking for Debian-specific dedicated/managed hosting stateside.
  
   Our firm does just that.  We are Debian-specific, in that we really
   don't promote other distros or OSes nearly as much (only if
 requested).
Pricing is $195/mo. for 30 GB of bandwidth.  Full data-center
   amenities, such as 10 day battery backup, diesel generator backup,
 dual
   DS-3 capacity, environmental control, etc.
  
   With our dedicated server packages, we also give you access to your
 own
   power control so you can power-cycle your server as you see fit.  We
   will also do full monitoring of ports/services/intrusion and nightly
   backup, if you so desire, (although most on this list seem like
 they're
   perfectly capable of doing that themselves.)
  
   So that aside, feel free to contact me off-list if you'd like more
   information.  Our web site is currently being revamped, so some of the
   info on there is out of date.  Here's the contact info:
  
   Eric Jennings
   [EMAIL PROTECTED]
   Loopshot, Inc.
   http://www.loopshot.com
   +1 (775) 856-3455
  
   Once again, my apologies for those who may not be interested, but I
   thought I'd mention it since several have asked about firms offering
   Debian servers in the U.S.
  
   Thanks-
   Eric
  
  
   On Monday, February 17, 2003, at 01:56  PM, Jamie Penner wrote:
  
   
   Wish they were in N. America!  (or someone like them!)
   
   At 12:46 PM 2/17/2003, you wrote:
   
   On Mon, 17 Feb 2003, Brett Parker wrote:
   
  http://www.positiveinternet.co.uk/
   
isn't that www.positive-internet.co.uk?
   
   The address works with or without the hyphen; with or without the
 www.
   (That's the sort of attention to little detail you get with them.)
   
 one of the maintainers of the debian packages for apache2 works
there, he has clue
   
   Not only that, but when chatting on #debian-uk one night, I got
   instant
   service from one of their employees for a question about their
   service I had,
   that just cropped up in the course of conversation.
   
   Very, very Debian, all round.
   
   
   
   
   --
   To UNSUBSCRIBE, email to [EMAIL PROTECTED]
   with a subject of unsubscribe. Trouble? Contact
   [EMAIL PROTECTED]
   
  
  
   --
   To UNSUBSCRIBE, email to [EMAIL PROTECTED]
   with a subject of unsubscribe. Trouble? Contact
   [EMAIL PROTECTED]
  
 
  --
 
 
  -- Mark Lijftogt
  -- http://www.qut.nl
  -- http://www.lijftogt.nl
 
 
  --
  To UNSUBSCRIBE, email to [EMAIL PROTECTED]
  with a subject of unsubscribe. Trouble? Contact
 [EMAIL PROTECTED]
 
 
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Being new to Debian...

2002-11-15 Thread Tim Quinlan
I agree.  If you are running in a production environment that is exposed
to the Internet definently stick with stable.  It's much easier to compile
a few latest and greatest programs that fit your needs than it is to
keep track of and compile all of the security updates.

On Fri, 15 Nov 2002, Robin Y. Millette wrote:

 Sonny Kupka wrote:
  Being new to Debian distro, I was just wondering what people's thoughts
  were on running testing in a ISP environment on a main server..
 
  I don't want bleeding edge I just want up to date software on my
  servers..
 
  Just curious to others thoughts on the matter..
 
  ---
  Sonny
 
 

 The moment you abandon the security of the stable distribution, you have
 to handle all security alerts manually. If you can live with the
 versions offered by the stable applications, but still find there are a
 few applications where you need a more current version, look into the
 pinning feature woody offers.

 --
 Robin Y. Millette (aka Lord D. Nattor)
 http://rym.waglo.com


 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Being new to Debian...

2002-11-15 Thread Tim Quinlan
I agree.  If you are running in a production environment that is exposed
to the Internet definently stick with stable.  It's much easier to compile
a few latest and greatest programs that fit your needs than it is to
keep track of and compile all of the security updates.

On Fri, 15 Nov 2002, Robin Y. Millette wrote:

 Sonny Kupka wrote:
  Being new to Debian distro, I was just wondering what people's thoughts
  were on running testing in a ISP environment on a main server..
 
  I don't want bleeding edge I just want up to date software on my
  servers..
 
  Just curious to others thoughts on the matter..
 
  ---
  Sonny
 
 

 The moment you abandon the security of the stable distribution, you have
 to handle all security alerts manually. If you can live with the
 versions offered by the stable applications, but still find there are a
 few applications where you need a more current version, look into the
 pinning feature woody offers.

 --
 Robin Y. Millette (aka Lord D. Nattor)
 http://rym.waglo.com


 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]






RE: Forced DHCP setup

2002-10-30 Thread Tim Quinlan
NoCatAuth (nocat.net) does exactly this.  Although I think NoCat is
designed with wireless in mind.  Not sure if it works with normal wired
network cards, but I can't see any reason why it wouldn't.

On Wed, 30 Oct 2002, C. R. Oldham wrote:

  I don't believe it's possible to have a user log in to get an IP.

 It is possible, in hotels that have broadband in rooms, and on some
 university campuses I've been too they have a DHCP server setup to serve
 addresses from a private block.  On that network there is a webserver
 setup to intercept any http request coming from a client in the private
 block and redirect the user to a page where he/she has to login.  On
 login a cgi (or some such) makes a change in the DHCP database to
 allocate the user a real IP.  The user gets instructions on the
 ensuing webpage to do a release/renew and boom they are setup.

 Sorry, I don't know of any opensource packages to do this, but it
 shouldn't be too hard.

 Of course, unless you setup your routers to block packets based on MAC
 address this won't prevent someone from guessing a valid IP and
 setting it up static.

 --
 C. R. Oldham
 Director of Technology
 NCA CASI


 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




RE: Forced DHCP setup

2002-10-30 Thread Tim Quinlan
NoCatAuth (nocat.net) does exactly this.  Although I think NoCat is
designed with wireless in mind.  Not sure if it works with normal wired
network cards, but I can't see any reason why it wouldn't.

On Wed, 30 Oct 2002, C. R. Oldham wrote:

  I don't believe it's possible to have a user log in to get an IP.

 It is possible, in hotels that have broadband in rooms, and on some
 university campuses I've been too they have a DHCP server setup to serve
 addresses from a private block.  On that network there is a webserver
 setup to intercept any http request coming from a client in the private
 block and redirect the user to a page where he/she has to login.  On
 login a cgi (or some such) makes a change in the DHCP database to
 allocate the user a real IP.  The user gets instructions on the
 ensuing webpage to do a release/renew and boom they are setup.

 Sorry, I don't know of any opensource packages to do this, but it
 shouldn't be too hard.

 Of course, unless you setup your routers to block packets based on MAC
 address this won't prevent someone from guessing a valid IP and
 setting it up static.

 --
 C. R. Oldham
 Director of Technology
 NCA CASI


 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]






Re: unstable is unstable; stable is outdated

2002-02-01 Thread Tim Quinlan


 kernel, etc... and as we all know, jumping from stable to unstable is
 problem-prone and doesn't worth flawlessly every time.

Why jump all the way to unstable, why not use testing?  Testing is
usually stable enough for most applications plus the various software
packages are pretty up to date.  


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: unstable is unstable; stable is outdated

2002-02-01 Thread Tim Quinlan

 kernel, etc... and as we all know, jumping from stable to unstable is
 problem-prone and doesn't worth flawlessly every time.

Why jump all the way to unstable, why not use testing?  Testing is
usually stable enough for most applications plus the various software
packages are pretty up to date.  




Fwd: scp, no ssh

2002-01-09 Thread Tim Quinlan

how about setting the user's shell to /bin/true.  this allows ftp, but no 
login shell.  so it may work for scp as well.

--  Forwarded Message  --
Subject: scp, no ssh
Date: Wed, 9 Jan 2002 09:49:10 +0100
From: Robert Janusz [EMAIL PROTECTED]
To: [EMAIL PROTECTED]


How to allow, for some users' IPs, only scp and no ssh?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
an.org
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

---


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Fwd: scp, no ssh

2002-01-09 Thread Tim Quinlan

On Wednesday 09 January 2002 21:23, Joel Michael wrote:
 On Thu, 2002-01-10 at 12:19, Tim Quinlan wrote:
  how about setting the user's shell to /bin/true.  this allows ftp, but no
  login shell.  so it may work for scp as well.

 This is true, but you can still (probably) use ssh to execute commands,
 like /bin/sh, and effectively get a shell.

you may be right, as i've never tried this with scp but what true does (as a 
shell) is log you out instantly.  so, in theory, you couldn't execute a 
command from ssh because as soon as you authenticate, true would log you out. 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Fwd: scp, no ssh

2002-01-09 Thread Tim Quinlan
how about setting the user's shell to /bin/true.  this allows ftp, but no 
login shell.  so it may work for scp as well.

--  Forwarded Message  --
Subject: scp, no ssh
Date: Wed, 9 Jan 2002 09:49:10 +0100
From: Robert Janusz [EMAIL PROTECTED]
To: debian-isp@lists.debian.org


How to allow, for some users' IPs, only scp and no ssh?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
an.org
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

---




Re: Fwd: scp, no ssh

2002-01-09 Thread Tim Quinlan
On Wednesday 09 January 2002 21:23, Joel Michael wrote:
 On Thu, 2002-01-10 at 12:19, Tim Quinlan wrote:
  how about setting the user's shell to /bin/true.  this allows ftp, but no
  login shell.  so it may work for scp as well.

 This is true, but you can still (probably) use ssh to execute commands,
 like /bin/sh, and effectively get a shell.

you may be right, as i've never tried this with scp but what true does (as a 
shell) is log you out instantly.  so, in theory, you couldn't execute a 
command from ssh because as soon as you authenticate, true would log you out.