Re: Can't fmirror security.debian.org

2003-05-05 Thread kynn


   X-Original-To: [EMAIL PROTECTED]
   Date: Mon, 5 May 2003 12:33:58 -0400
   From: Phillip Hofmeister <[EMAIL PROTECTED]>
   Cc: debian-security@lists.debian.org
   Mail-Followup-To: [EMAIL PROTECTED], debian-security@lists.debian.org
   Content-Disposition: inline


   --BOKacYhQ+x31HxR3
   Content-Type: text/plain; charset=us-ascii
   Content-Disposition: inline
   Content-Transfer-Encoding: quoted-printable

   On Mon, 05 May 2003 at 11:57:53AM -0400, [EMAIL PROTECTED] wrote:
   > I have no problem ftp'ing to security.debian.org anonymously, but all
   > my attempts to fmirror a directory there fail with
   >=20
   >   $ fmirror -f ~/security.fmirror
   >   11:38:51 Connecting to security.debian.org...
   >   11:38:51 Connected.
   >   11:39:52 Dir listing failed, exiting. (425 Failed to establish connecti=
   on.)


   Have you considered trying to use rsync?  AFAIK, security.debian.org runs
   an rsync server which may do what you are looking form more easily.

I already tried that, but I can't get rsync to work:

$ rsync -avz security.debian.org::debian-security .
rsync: read error: Connection reset by peer
rsync error: error in rsync protocol data stream (code 12) at io.c(162)

kynn



Can't fmirror security.debian.org

2003-05-05 Thread kynn



I have no problem ftp'ing to security.debian.org anonymously, but all
my attempts to fmirror a directory there fail with

  $ fmirror -f ~/security.fmirror
  11:38:51 Connecting to security.debian.org...
  11:38:51 Connected.
  11:39:52 Dir listing failed, exiting. (425 Failed to establish connection.)

What am I doing wrong?

Here's my fmirror input file (~/security.fmirror):

username: anonymous
# also tried username: ftp
password: [EMAIL PROTECTED]
host: security.debian.org
remotedir: debian-security/dists/stable/updates
localdir: /home/my_home_directory/security
include: p updates/[^/]+/binary-i386
exclude: p binary-
exclude: p debian-security/dists/[^/]+/updates/[^/]+/source

Thanks!

    kynn

P.S.  Please Cc: me in your replies to the list



[Q] How to keep Debian system secure: automation?

2003-03-03 Thread Kynn Jones





apt-get update/upgrade is good enough for me as a way to keep up with
security updates at the binary level, but what's the best way to keep
up with source-level security updates (e.g. patches to the kernel or
to compiled-in modules)?

[Since applying these patches can be very inconvenient, it would be
good to know what packages I really use, so I can safely ignore
patches that do not affect these packages.]

Thanks!

Kynn



[Q] How to keep Debian system secure: automation?

2003-03-03 Thread Kynn Jones





apt-get update/upgrade is good enough for me as a way to keep up with
security updates at the binary level, but what's the best way to keep
up with source-level security updates (e.g. patches to the kernel or
to compiled-in modules)?

[Since applying these patches can be very inconvenient, it would be
good to know what packages I really use, so I can safely ignore
patches that do not affect these packages.]

Thanks!

Kynn



[Q] How to keep Debian system secure: automation?

2003-03-03 Thread Kynn Jones





apt-get update/upgrade is good enough for me as a way to keep up with
security updates at the binary level, but what's the best way to keep
up with source-level security updates (e.g. patches to the kernel or
to compiled-in modules)?

[Since applying these patches can be very inconvenient, it would be
good to know what packages I really use, so I can safely ignore
patches that do not affect these packages.]

Thanks!

Kynn


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



[Q] How to keep Debian system secure: automation?

2003-03-03 Thread Kynn Jones





apt-get update/upgrade is good enough for me as a way to keep up with
security updates at the binary level, but what's the best way to keep
up with source-level security updates (e.g. patches to the kernel or
to compiled-in modules)?

[Since applying these patches can be very inconvenient, it would be
good to know what packages I really use, so I can safely ignore
patches that do not affect these packages.]

Thanks!

Kynn


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: How to get the current security updates on CD?

2003-01-06 Thread kynn


   Date: Sat, 4 Jan 2003 20:43:10 -0600
   From: Mike Renfro <[EMAIL PROTECTED]>
   Cc: debian-security@lists.debian.org

   On Sat, Jan 04, 2003 at 05:20:46PM -0500, [EMAIL PROTECTED] wrote:

   > Hi.  I'm doing a fresh Woody installation, and I want it to include
   > a reasonably current set of security updates, but I also want to do
   > the installation offline.  How can I get the security updates in CD
   > form?  I went to http://www.debian.org/security, but I couldn't find
   > anything like CD images.

   Options include:

   ...

   2) Set up a private ftp/http mirror of security.debian.org and update
  the system from there before connecting it to the internet...

Yes, this is what I would like to do, but I'm not clear on the
mechanics of doing it.  Does any Howto describe how to do this?  Do I
need root access for the mirror site?  Where can I find instructions?

The "Securing Debian" guide says:

 ...it is best to install without connection to the Internet,
 using a local packages mirror for both the Debian package sources
 and the security updates.  You can set up package mirrors by
 using another system connected to the Internet with
 Debian-specific tools (if it's a Debian system) like `apt-move'
 or `apt-proxy', or other common mirroring tools, to provide the
 archive to the installed system.

I can imagine of only two ways for me to do this.  Either set up the
mirror on CD-ROM, or else set up an sftp mirror on a machine where
(unfortunately) I don't have root access.  It seems to me that the
CD-ROM approach should be easier, but I have not found out a way to
generate a CD mirror from http://security.debian.org.  Is it even
doable?

TIA,

KJ



Re: How to get the current security updates on CD?

2003-01-06 Thread kynn


   Date: Sat, 4 Jan 2003 20:43:10 -0600
   From: Mike Renfro <[EMAIL PROTECTED]>
   Cc: [EMAIL PROTECTED]

   On Sat, Jan 04, 2003 at 05:20:46PM -0500, [EMAIL PROTECTED] wrote:

   > Hi.  I'm doing a fresh Woody installation, and I want it to include
   > a reasonably current set of security updates, but I also want to do
   > the installation offline.  How can I get the security updates in CD
   > form?  I went to http://www.debian.org/security, but I couldn't find
   > anything like CD images.

   Options include:

   ...

   2) Set up a private ftp/http mirror of security.debian.org and update
  the system from there before connecting it to the internet...

Yes, this is what I would like to do, but I'm not clear on the
mechanics of doing it.  Does any Howto describe how to do this?  Do I
need root access for the mirror site?  Where can I find instructions?

The "Securing Debian" guide says:

 ...it is best to install without connection to the Internet,
 using a local packages mirror for both the Debian package sources
 and the security updates.  You can set up package mirrors by
 using another system connected to the Internet with
 Debian-specific tools (if it's a Debian system) like `apt-move'
 or `apt-proxy', or other common mirroring tools, to provide the
 archive to the installed system.

I can imagine of only two ways for me to do this.  Either set up the
mirror on CD-ROM, or else set up an sftp mirror on a machine where
(unfortunately) I don't have root access.  It seems to me that the
CD-ROM approach should be easier, but I have not found out a way to
generate a CD mirror from http://security.debian.org.  Is it even
doable?

TIA,

KJ


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




How to get the current security updates on CD?

2003-01-04 Thread kynn




Hi.  I'm doing a fresh Woody installation, and I want it to include a
reasonably current set of security updates, but I also want to do the
installation offline.  How can I get the security updates in CD form?
I went to http://www.debian.org/security, but I couldn't find anything
like CD images.

Thanks,

KJ



How to get the current security updates on CD?

2003-01-04 Thread kynn




Hi.  I'm doing a fresh Woody installation, and I want it to include a
reasonably current set of security updates, but I also want to do the
installation offline.  How can I get the security updates in CD form?
I went to http://www.debian.org/security, but I couldn't find anything
like CD images.

Thanks,

KJ


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]