Re: presentacions sobre Debian
On Tue, Apr 24, 2012 at 11:17 AM, Josep Sanchez papa...@gmx.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Al 24/04/12 10:06, En/na a...@probeta.net ha escrit: Hola, ahir em van passar un gran poster informatiu sobre el projecte Debian, que semblava prou interessant: http://claudiocomputing.wordpress.com/infografico-del-debian/ (Quan l'anava a traduir al català m'he adonat que el fitxer de traducció estava en format Excel, i que l'autor no dona les fonts del seu gràfic perquè els usuaris no el puguin adaptar a les seves necessitats. Llàstima ) Bones, Li he demanat en un comentari a veure si seria possible obrir la llicència per a poder admetre treballs derivats. M'és incomprensible que algú faci un treball just sobre Debian i apliqui aquestes restriccions, sincerament... I el tema xls també té delicte.../me no entén. Es tot un culebron el tema que s'ha muntat amb aquesta infografia: http://lists.debian.org/debian-publicity/2012/04/msg00032.html Sembla ser que l'autor no està massa d'acord amb la substitució d'ooo per libreoffice i no vol que ningú actualitzi el logo a la seva estimada infografia. -- Marc -- To UNSUBSCRIBE, email to debian-user-catalan-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/ca+dcn_uib2wyeo8vmjcvvxaxxfflpub+cvrsidjefv9qb+s...@mail.gmail.com
[Wheezy AMD64] skype sources.list
bonjour, qu'elle est la bonne syntaxe pour une MAJ de skype, j'ai une erreur dans la prise en compte du sources.list mauvaise syntaxe: ## skype deb http://download.skype.com/linux/repos/debian/ stable non-free à vous lire, bonne journée A+ JB1 -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/1335423111.4506.42.ca...@alpha30.bohain.org
Re: Probleme WI-FI sur un ACER Aspire 7250
On 23/04/12 06:14, Rene Mages wrote: Bonjour, Sous Squeeze le WI-FI ne fonctionne pas sur un laptop ACER Aspire 7250 bien que le pilote http://wiki.debian.org/ath9k de la carte wi-fi ( une Atheros AR9485 ) soit installé. Dans l'output de lspci ( Capabilities:access denied ) il y a bien une piste mais je n'arrive pas à l'exploiter : lspci -v | grep Atheros 06:00.0 Network controller: Atheros Communications Inc. Device 0032 (rev 01) Subsystem: Lite-On Communications Inc Device 6617 Flags: bus master, fast devsel, latency 0, IRQ 10 Memory at f020 (64-bit, non-prefetchable) [size=512K] Expansion ROM at f050 [disabled] [size=64K] Capabilities:access denied Que donne lspci -vvv sous root ? -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/4f98f22a.2080...@free.fr
Re: Probleme WI-FI sur un ACER Aspire 7250
On 26/04/12 08:58, deb-account wrote: Que donne lspci -vvv sous root ? Mince, je n'avais pas vu que le pb était résolu... -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/4f98fce3.90...@free.fr
iwconfig wlan0 txpower off et led toujours allumée
Bonjour à tous, Depuis que j'ai fait une mise à jour de mon système, iwconfig wlan0 txpower off la led du wifi reste toujours allumée. # iwconfig wlan0 IEEE 802.11bg ESSID:off/any Mode:Managed Access Point: Not-Associated Tx-Power=0 dBm Retry long limit:7 RTS thr:off Fragment thr:off Encryption key:off Power Management:on En tout cas la led reste allumée alors que iwconfig indique bien : Tx-Power=0 dBm Si j'indique auto # iwconfig wlan0 txpower auto lan0 IEEE 802.11bg ESSID:off/any Mode:Managed Access Point: Not-Associated Tx-Power=20 dBm Retry long limit:7 RTS thr:off Fragment thr:off Encryption key:off Power Management:on D'autre part si je réinstalle network-manager : # aptitude reinstall network-manager . Paramétrage de network-manager (0.9.4.0-3) ... Reloading system message bus config...done. insserv: Script wifi is broken: incomplete LSB comment. insserv: missing `Required-Start:' entry: please add even if empty. insserv: missing `Required-Stop:' entry: please add even if empty. insserv: Script wifi is broken: incomplete LSB comment. insserv: missing `Required-Start:' entry: please add even if empty. insserv: missing `Required-Stop:' entry: please add even if empty. Stopping network connection manager: NetworkManager. Starting network connection manager: NetworkManager. Quelqu'un a une idée ? Merci d'avance. -- Benoît -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/CAK_7-eSt=SuzexZuiAD4sx0jB=DqMOt753KXnERih=oc_qs...@mail.gmail.com
Probleme avec postfix.
Bonjour. Depuis 2 jours. Toutes les 12 minutes, j'ai ceci dans /var/log/syslog Apr 26 15:33:20 corellia postfix/cleanup[32114]: BCEF2280238: message-id=20120426133320.bcef2280...@keitai.dumpsize.com Apr 26 15:33:20 corellia postfix/qmgr[3515]: BCEF2280238: from=double-bou...@dumpsize.com, size=1055, nrcpt=1 (queue active) Apr 26 15:33:20 corellia postfix/smtpd[32204]: disconnect from px548-fe.multiply.com[38.126.198.31] Apr 26 15:33:20 corellia postfix/smtp[32115]: BCEF2280238: to=postmas...@corellia.dumpsize.com, orig_to=postmaster, relay=none, delay=0.07, delays=0.07/0/0/0, dsn=5.4.6, status=bounced (mail for corellia.dumpsize.com loops back to myself) Apr 26 15:33:20 corellia postfix/cleanup[32114]: DB55828023F: message-id=20120426133320.db558280...@keitai.dumpsize.com Apr 26 15:33:20 corellia postfix/bounce[32116]: BCEF2280238: sender non-delivery notification: DB55828023F Apr 26 15:33:20 corellia postfix/qmgr[3515]: DB55828023F: from=, size=2992, nrcpt=1 (queue active) Apr 26 15:33:20 corellia postfix/qmgr[3515]: DB55828023F: to=double-bou...@dumpsize.com, relay=none, delay=0.05, delays=0.05/0/0/0, dsn=2.0.0, status=sent (undeliverable postmaster notification discarded) Apr 26 15:33:20 corellia postfix/qmgr[3515]: DB55828023F: removed Apr 26 15:33:20 corellia postfix/qmgr[3515]: BCEF2280238: removed Le problème, c'est que je vois nulle trace de ces mails. double-bou...@dumpsize.com n'existe pas. Et la boite de postmaster est vide. Je capte pas ce qu'il se passe... -- -- Olivier Pavilla http://www.linux-squad.com Les fautes d'orthographes de mes propos sont sous licence Ane bâté 1.0 signature.asc Description: OpenPGP digital signature
Re: Probleme avec postfix.
Un fichier transport erronné pourrait faire quelque chose comme cela. On 26/04/2012 15:39, Olivier Pavilla wrote: Bonjour. Depuis 2 jours. Toutes les 12 minutes, j'ai ceci dans /var/log/syslog Apr 26 15:33:20 corellia postfix/cleanup[32114]: BCEF2280238: message-id=20120426133320.bcef2280...@keitai.dumpsize.com Apr 26 15:33:20 corellia postfix/qmgr[3515]: BCEF2280238: from=double-bou...@dumpsize.com, size=1055, nrcpt=1 (queue active) Apr 26 15:33:20 corellia postfix/smtpd[32204]: disconnect from px548-fe.multiply.com[38.126.198.31] Apr 26 15:33:20 corellia postfix/smtp[32115]: BCEF2280238: to=postmas...@corellia.dumpsize.com, orig_to=postmaster, relay=none, delay=0.07, delays=0.07/0/0/0, dsn=5.4.6, status=bounced (mail for corellia.dumpsize.com loops back to myself) Apr 26 15:33:20 corellia postfix/cleanup[32114]: DB55828023F: message-id=20120426133320.db558280...@keitai.dumpsize.com Apr 26 15:33:20 corellia postfix/bounce[32116]: BCEF2280238: sender non-delivery notification: DB55828023F Apr 26 15:33:20 corellia postfix/qmgr[3515]: DB55828023F: from=, size=2992, nrcpt=1 (queue active) Apr 26 15:33:20 corellia postfix/qmgr[3515]: DB55828023F: to=double-bou...@dumpsize.com, relay=none, delay=0.05, delays=0.05/0/0/0, dsn=2.0.0, status=sent (undeliverable postmaster notification discarded) Apr 26 15:33:20 corellia postfix/qmgr[3515]: DB55828023F: removed Apr 26 15:33:20 corellia postfix/qmgr[3515]: BCEF2280238: removed Le problème, c'est que je vois nulle trace de ces mails. double-bou...@dumpsize.com n'existe pas. Et la boite de postmaster est vide. Je capte pas ce qu'il se passe... -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/jnbjnr$cc0$1...@dough.gmane.org
Re: Probleme avec postfix.
Le 26/04/2012 15:39, Olivier Pavilla a écrit : Bonjour. Bonjour Depuis 2 jours. Toutes les 12 minutes, j'ai ceci dans /var/log/syslog Apr 26 15:33:20 corellia postfix/cleanup[32114]: BCEF2280238: message-id=20120426133320.bcef2280...@keitai.dumpsize.com Apr 26 15:33:20 corellia postfix/qmgr[3515]: BCEF2280238: from=double-bou...@dumpsize.com, size=1055, nrcpt=1 (queue active) Apr 26 15:33:20 corellia postfix/smtpd[32204]: disconnect from px548-fe.multiply.com[38.126.198.31] Apr 26 15:33:20 corellia postfix/smtp[32115]: BCEF2280238: to=postmas...@corellia.dumpsize.com, orig_to=postmaster, relay=none, delay=0.07, delays=0.07/0/0/0, dsn=5.4.6, status=bounced (mail for corellia.dumpsize.com loops back to myself) Apr 26 15:33:20 corellia postfix/cleanup[32114]: DB55828023F: message-id=20120426133320.db558280...@keitai.dumpsize.com Apr 26 15:33:20 corellia postfix/bounce[32116]: BCEF2280238: sender non-delivery notification: DB55828023F Apr 26 15:33:20 corellia postfix/qmgr[3515]: DB55828023F: from=, size=2992, nrcpt=1 (queue active) Apr 26 15:33:20 corellia postfix/qmgr[3515]: DB55828023F: to=double-bou...@dumpsize.com, relay=none, delay=0.05, delays=0.05/0/0/0, dsn=2.0.0, status=sent (undeliverable postmaster notification discarded) Apr 26 15:33:20 corellia postfix/qmgr[3515]: DB55828023F: removed Apr 26 15:33:20 corellia postfix/qmgr[3515]: BCEF2280238: removed Le problème, c'est que je vois nulle trace de ces mails. double-bou...@dumpsize.com n'existe pas. Et la boite de postmaster est vide. Je capte pas ce qu'il se passe... keitai.dumpsize.com est un CNAME de corellia.dumpsize.com et les deux ont le même MX. Postfix essaye d'avertir l'expéditeur double-bou...@dumpsize.com de la non délivrance du message et se rend compte que le compte destinataire est lui même. Et comme double-bounce n'existe pas ... -- Daniel double-bou...@dumpsize.com n'existe pas double-bou...@dumpsize.com n'existe pas double-bou...@dumpsize.com n'existe pas -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/4f9953d5.3010...@tootai.net
Re: Probleme avec postfix.
On Thu, 26 Apr 2012 15:39:07 +0200 Olivier Pavilla olivier.pavi...@linux-squad.com wrote: Jette un œil là-dessus: http://www.cyberciti.biz/faq/postfix-mail-for-domaincom-loops-back-to-myself-error-and-solution/ http://forums.gplhost.com/phpBB2/image-vp13318.html Apr 26 15:33:20 corellia postfix/qmgr[3515]: DB55828023F: from=, size=2992, nrcpt=1 (queue active) Mais avec un from=, ça m'étonnerai qu'il passe de toute façon... -- God must have loved calories, she made so many of them. -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/20120426160216.6ef52337@anubis.defcon1
Re: [Wheezy AMD64] skype sources.list
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26/04/2012 08:51, JB wrote: bonjour, Bonjour qu'elle est la bonne syntaxe pour une MAJ de skype, j'ai une erreur dans la prise en compte du sources.list Qu'elle erreur as tu exactement ? (essaye un apt-get update | grep -i skype) mauvaise syntaxe: ## skype deb http://download.skype.com/linux/repos/debian/ stable non-free Je viens de tester, sur ma configuration, je n'ai pas d'erreur de syntaxe, mais des erreurs de type 404. W: Impossible de récupérer http://download.skype.com/linux/repos/debian/dists/stable/non-free/binary-amd64/Packages 404 Not Found [IP : 80.239.228.16 80] Pour ma part, je l'installe en direct : (source : http://wiki.debian.org/skype) Cela fonctionne bien, même si je dois re télécharger le package, pour toute mise à jour. à vous lire, bonne journée A+ JB1 Librement, Guillaume - -- Guillaume Seren - -- Non seulement Dieu joue aux dés mais il les jette parfois là où on ne peut les voir. Stephen Hawking - -- FAQ : http://wiki.debian.org/fr/FrenchLists - -- -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJPmWd1AAoJEB8oWtIhEKr3HMYH/0TH9gRP2Gb5z2GkwaKYXI7l J3VE0k+/vodENA/64bX1Zf2CSbVkwbmkDooep2/aZgNrsa3mr+2a4+IuYQxs6z60 mS/dhvyLzp4kwpnEuVC1wh4JEmoLgiHoKRPSG7pD7jsS6Kd2yoEsdNdFzjpQIo+b CiLvRr79J1poGgVSLy4J94XSyCfeQTLxdOyw/wa8Dlbfib2qrD66yLBDaO0i7DMw RSJkxP2gGyugNW0f1EQy4CAjNKL+YOMrugh5E89ROr8BjQW648vloWIAwSfQ7ZWd i4pHnnEkVCZ0E/1h/2UmrxN3aL2u6UGuTeeeBZFC27RKVNuJVIR94Xtcx9x6KAg= =SJGw -END PGP SIGNATURE- -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/4f996775.3030...@gmail.com
Re: [Wheezy AMD64] skype sources.list
Le jeudi 26 avril 2012 à 17:19 +0200, Guillaume Seren a écrit : On 26/04/2012 08:51, JB wrote: bonjour, Bonjour qu'elle est la bonne syntaxe pour une MAJ de skype, j'ai une erreur dans la prise en compte du sources.list Qu'elle erreur as tu exactement ? (essaye un apt-get update | grep -i skype) mauvaise syntaxe: ## skype deb http://download.skype.com/linux/repos/debian/ stable non-free Je viens de tester, sur ma configuration, je n'ai pas d'erreur de syntaxe, mais des erreurs de type 404. W: Impossible de récupérer http://download.skype.com/linux/repos/debian/dists/stable/non-free/binary-amd64/Packages 404 Not Found [IP : 80.239.228.16 80] Pour ma part, je l'installe en direct : (source : http://wiki.debian.org/skype) Cela fonctionne bien, même si je dois re télécharger le package, pour toute mise à jour. à vous lire, bonne journée A+ JB1 Librement, Guillaume bonsoir, j'ai le même type d'erreur, j'ai installé skype à partir du .deb, c'est à moitié OK, -le test call se déroule bien, -le test video est non OK, la caméra Labtec est bien reconnu mais pas d'images l'utilisation de l'outil Studio Webcam Cheese fonctionne trés bien Bonne soirée A+ JB1 -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/1335454872.4506.51.ca...@alpha30.bohain.org
Re: [Wheezy AMD64] skype sources.list
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26/04/2012 17:41, JB wrote: bonsoir, j'ai le même type d'erreur, Ok, donc leur dépôt est soit offline, soit à changé d'url, je ne trouve pas d'url alternative. j'ai installé skype à partir du .deb, c'est à moitié OK, -le test call se déroule bien, -le test video est non OK, la caméra Labtec est bien reconnu mais pas d'images Pour ma part, j'ai pu tester, le paquet fournit, sur plusieurs configuration (2/3), et cela fonctionne, autant la vidéo, que l'audio, donc je pense qu'il doit te manquer quelque chose. l'utilisation de l'outil Studio Webcam Cheese fonctionne trés bien Je ne connais pas cet outil, mais j'ai l’habitude de tester, les webcam, avec luvcview. Dans le menu d'option vidéos de skype, dans la liste sous 'Choisissez une webcam', as tu quelque chose ? Bonne soirée A+ JB1 Librement, Guillaume. - -- Guillaume Seren - -- Non seulement Dieu joue aux dés mais il les jette parfois là où on ne peut les voir. Stephen Hawking - -- FAQ : http://wiki.debian.org/fr/FrenchLists - -- -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJPmXDWAAoJEB8oWtIhEKr3VuMH/3wMnsQ1uuVQaAQdqKWzVI7z 4H86XtwmZqBkHGGeg3WPuMbNo9ZDmjbsIhLLXQxUFD3PIagJZGeRvVAvUrVwp/O6 GkLE0I+nCOyzGU0eWqUrw9GdEI8hebJwih05IsAjAvTU6xsGwnn6FYK0djS+Yk55 tIlsJJMtxceZGX8uvx35oFkYC9PvasduNRDxX4jnfbZcz35xKlURdNG0qioZxOF9 +6fECW8iUs+jEmC/BlqWHSjGv/zxXhHCNUEzFF1RL7ZpDb8JuUQ8q49pG/OqyAOw rhjhRRt/+wOEzrEmTavGsBJ+nCsd5+kzj1ocVNrRJgrblQ6jfNyjjWxFIM42JG0= =OfuS -END PGP SIGNATURE- -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/4f9970d6.6030...@gmail.com
Re: [Wheezy AMD64] skype sources.list
Le jeudi 26 avril 2012 à 17:59 +0200, Guillaume Seren a écrit : On 26/04/2012 17:41, JB wrote: bonsoir, Dans le menu d'option vidéos de skype, dans la liste sous 'Choisissez une webcam', as tu quelque chose ? oui avec /dev/video0 et le pétigré de la Labtec (code etc..) JB1 Bonne soirée A+ JB1 Librement, Guillaume. -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/1335458134.4506.57.ca...@alpha30.bohain.org
Re: [Wheezy AMD64] skype sources.list
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26/04/2012 18:35, JB wrote: Le jeudi 26 avril 2012 à 17:59 +0200, Guillaume Seren a écrit : On 26/04/2012 17:41, JB wrote: Dans le menu d'option vidéos de skype, dans la liste sous 'Choisissez une webcam', as tu quelque chose ? oui avec /dev/video0 et le pétigré de la Labtec (code etc..) JB1 Quel est le comportement lorsque tu lance le test vidéo ? - -- Guillaume Seren - -- Non seulement Dieu joue aux dés mais il les jette parfois là où on ne peut les voir. Stephen Hawking - -- FAQ : http://wiki.debian.org/fr/FrenchLists - -- -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJPmX71AAoJEB8oWtIhEKr3BBcH/0cUmsixVM1alXU0pOkcrY00 f/Qfh9/lbAr2cyPy+IjVgXI7ERfgwB0hjcxFdY5XEX16Vc11AY7jrUjQyfV0GunA XR5Cf3j49bBFeIoEpI8pz0LbUAi9g7S5xYIW+m+JNTwEbLX57j219r7C/z9quxlg 2RaOIqihV0Tgvg+0efF/rdpcuwyChkAq83K5WuXr+nbFMz6QPmWnvCQ2YK75Jm1I oeVkpwILWz9QN+PnM8uVECaNEPTHuwiHO6voH8DLeWkmDRzrsk336TIAT+XPP8E4 UaJYN8TXbbo/Fhca9ulOBbaE1SG34EK5WUNpxfYfQv/dVW1AOU3HBQ7TZNfRC1g= =/dWe -END PGP SIGNATURE- -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/4f997ef5.50...@gmail.com
Re: [Wheezy AMD64] skype sources.list
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Merci de répondre sur la liste, pour les autres utilisateurs. On 26/04/2012 18:33, JB wrote: Le jeudi 26 avril 2012 à 17:59 +0200, Guillaume Seren a écrit : On 26/04/2012 17:41, JB wrote: bonsoir, autant la vidéo, que l'audio, donc je pense qu'il doit te manquer quelque chose. je pense que oui, le ldd /usr/bin/skype me parrait OK mais avec le mélange skype 32 bits OS 64 bits! Pour ma part j'ai aussi un os (Debian SID) 64b, et pourtant cela fonctionne. l'utilisation de l'outil Studio Webcam Cheese fonctionne trés bien Je ne connais pas cet outil, mais j'ai l’habitude de tester, les webcam, avec luvcview. j'ai installé le produit mais je ne trouve rien dans les menus déroulants Il faut le lancer en shell, en tapant luvcview dans un terminal. Dans le menu d'option vidéos de skype, dans la liste sous 'Choisissez une webcam', as tu quelque chose ? Bonne soirée A+ JB1 Librement, Guillaume. - -- Guillaume Seren - -- Non seulement Dieu joue aux dés mais il les jette parfois là où on ne peut les voir. Stephen Hawking - -- FAQ : http://wiki.debian.org/fr/FrenchLists - -- -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJPmYcSAAoJEB8oWtIhEKr3s88H/Rmzbn0cFUbEiRmt26Izzg6z YCHBz4xwUc7RmtlNeXfUhNGKAVPVseJ4AFcmy89AF+eEn8+LAd/DBVyiK0Gz6i4N 5MsJmd40S58IEc25uBfwbdATOZeSUbjGJaXkswjW8nw5XGHJccONCWIKingV0j4p YiPKSPFymF5UtnkT+e1MJHntPD+JPlm22FWYOiskiVQrs4+4sEpKo2eIlz2NmXDb NLiV0dzpfHxdFmK2bHdzkhwNQcuQxNlSWU+B/AilT8P244n/ogKJhbJ5b1CAGhxD JmEunQNiACjddmwn0jFBWypPJLO+MjJTCuZry3qUcO65e1tBQMIn/OYoJkUhXTs= =+V8s -END PGP SIGNATURE- -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/4f998712.6080...@gmail.com
[no subject]
Bonjour, j ai besoin de votre aide svp. je viens de faire un disque de Debian 6.04 remasterisé. en live fonctionne très bien mais je désire l installer sur mon disque dure mais je ne trouve pas le boutton ou la commande debian2HD ou debian-installer. merci. christian. -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/1335461125.4f99850590...@webmail.aliceadsl.fr
Re: [testing] nautilus recherche
Le Sat, 21 Apr 2012 14:37:08 +0200 Jérôme jer...@aranha.fr a écrit: Le mercredi 18 avril 2012 à 23:25 +0200, Gaëtan PERRIER a écrit : Salut, C'est moi qui ne sait pas faire ou bien la recherche dans nautilus ne fonctionne pas ? Gaëtan A priori, c'est toi. Ceci dit, vérifie en manuel que ça marche et qu'il ne te manque pas un paquet ou une mise à jour. Ce n'est pas que moi. Effectivement sur une autre machine ça fonctionne mais j'en ai une ou ça ne fonctionne pas ... Si tu n'es pas écologique, tu peux aussi installer tracker qui peut aussi être lançé depuis Nautilus. Toutefois si la recherche dans les documents et le language d'interrogation sont intéressants, ça plombe le système au moment de l'indexation. Ça peut être génial si tu travaille intensivement avec des documents (je serais avocat ou un truc comme ça je n'hésiterais pas). C'est préférable de n'indexer que ce qui est utile pour éviter de bouffer trop de temps d'indexation. tracker fonctionne sur les medias amovibles, voir avec le compte google grâce au paquet gnome-documents. Non je n'ai pas besoin d'une usine à gaz juste une recherche toute bête. Gaëtan -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/20120426194802.97a0420512553a5925b9d...@neuf.fr
[HS] : HTTPLib2 et 2 way SSL Authentification
Bonjour,
!!! Ce mail est HS car, il parle d'une application python tournant !!!
!!! actuellement sous Windows mais conçue pour fonctionner également !!!
!!! sous Linux !!!
--- Il a également été posté sur une mailing-liste python ---
Je tente de réaliser un gateway SOAP qui utilise une authentification 2 way SSL
pour se connecter à un organisme mettant à disposition des webservices.
J'ai reçu de mon organisme certificateur (l'état belge) :
- Mon certificat.
- Ma clé privée.
- 2 certificats, dans un format binaire avec l'extension cer, pour le chainage.
J'ai commencé par utiliser wget pour effectuer mes tests.
Après plusieurs essais, j'ai reçu logiquement une erreur 500, en utilisant les
options suibantes certifile, private-key et no-check-certificate (1).
j'ai déjà réalisé la permière version de ce gateway qui utilise une simple
connection SSL (one way), j'ai repris le code (HTTPLib2), j'en ai extrait la
partie utile à l'envois de la requête et je l'ai adapté pour faire du 2 way
SSL.(2)
Comme vous povez le voir dans le code, j'ai utilisé les même paramètres que
pour le wget qui a réussi.
Parcontre sortie(3), je retrouve avec même code d'erreur que si j'ai reçu avec
wget sans certificat ni clé(4) !!
J'avoue que j'ai un peu de mal à comprendre le pourquoi du comment.
Donc quelqu'un a-t-il une idée comment :
- Intégrer le chaining et éventuellement le trouver. Pour vérifier le certif du
serveur ?
- Résoudre le problème de HTTPLib2 ?
- Une autre solution.
Attention, mon développement est sous Windows.
Merci
Thierry
(1)Wget: Avec certif. et sans verification du certif..
C:\Program Files\GNU\wgetwget https://b2b-test.webserv.fgov.be:4520 --certific
ate=C:\SOA CA\CERTIF\20120405 c-b2b-test.dosz-ossom.fgov.be.crt --private-
key=
C:\SOA CA\KEYS\c-b2b-test.dosz-ossom.fgov.be.key --no-check-certificate
--2012-04-26 11:48:28-- https://b2b-test.webserv.fgov.be:4520/
Resolving b2b-test.webserv.fgov.be... 85.91.184.96
Connecting to b2b-test.webserv.fgov.be|85.91.184.96|:4520... connected.
WARNING: cannot verify b2b-test.webserv.fgov.be's certificate, issued by `/C=BE
/CN=Government CA/serialNumber=2010':
Self-signed certificate encountered.
WARNING: certificate common name `b2b-test.ksz.bcss.fgov.be' doesn't match
reque
sted host name `b2b-test.webserv.fgov.be'.
HTTP request sent, awaiting response... 500 Error
2012-04-26 11:48:28 ERROR 500: Error.
(2)Le code python
#! /usr/bin/env python
import sys, httplib2
import urllib
import ssl
filin = open(C:\\Python\\SOAP\\files\\EdessaRequest.rqst,'r')
SOAPRequest=filin.read()
filin.close()
filin = open(C:\\SOA CA\\KEYS\\c-b2b-test.me.fgov.be.key,'r')
tmpKey=filin.read()
filin.close()
print --- RESULT ---
httplib2.debuglevel = 1
h = httplib2.Http(.cache/EdessaCache, timeout=30,
disable_ssl_certificate_validation=True)
h.add_certificate(tmpKey, tmpCert, 'b2b-test.webserv.fgov.be')
SOAPServerResponse, SOAPResponseContent = h.request(https://b2b-
test.webserv.fgov.be:4520/TestConnectionServiceService/sendTestMessage,POST,
body=SOAPRequest, headers={'content-type':'text/plain; charset=utf-8' ,
'SOAPAction':'http://soap.fgov.be/TestConnectionServiceService/sendTestMessage'}
)
(3)HTTPLib2 avec certifs et sans verification du certif
--- RESULT ---
Traceback (most recent call last):
File C:\Python\SOAP\bin\test.py, line 35, in module
SOAPServerResponse, SOAPResponseContent = h.request(https://b2b-test.ksz-
bc
ss.fgov.be:4520/TestConnectionServiceService/sendTestMessage,POST,
body=SOAPR
equest, headers={'content-type':'text/plain; charset=utf-8' ,
'SOAPAction':'ht
tp://kszbcss.fgov.be/TestConnectionServiceService/sendTestMessage'} )
File D:\Python27\lib\site-packages\httplib2\__init__.py, line 1544, in
reque
st
(response, content) = self._request(conn, authority, uri, request_uri,
metho
d, body, headers, redirections, cachekey)
File D:\Python27\lib\site-packages\httplib2\__init__.py, line 1294, in
_requ
est
(response, content) = self._conn_request(conn, request_uri, method, body,
he
aders)
File D:\Python27\lib\site-packages\httplib2\__init__.py, line 1230, in
_conn
_request
conn.connect()
File D:\Python27\lib\site-packages\httplib2\__init__.py, line 1005, in
conne
ct
raise SSLHandshakeError(e)
httplib2.SSLHandshakeError: [Errno 1] _ssl.c:504: error:14094410:SSL
routines:SS
L3_READ_BYTES:sslv3 alert handshake failure
(4)Wget : Sans Certif
C:\Program Files\GNU\wgetwget https://b2b-test.webserv.fgov.be:4520
--2012-04-26 11:41:39-- https://b2b-test.webserv.fgov.be:4520/
Resolving b2b-test.webserv.fgov.be... 85.91.184.96
Connecting to b2b-test.webserv.fgov.be|85.91.184.96|:4520... connected.
OpenSSL: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake
failu
re
Unable to establish SSL connection.
--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists
Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers
resolusi monitor di debian 6.0.4 amd64 (vga amd radeon)
ane mau tanya ubah resolusi ni di debian 604 udah cari2 dimana2 tetep ng ada solusi ane pake vga amd 6670 driver 12.3 udah terinstal hasil fglrxinfo : display: :0.0 screen: 0 OpenGL vendor string: Advanced Micro Devices, Inc. OpenGL renderer string: AMD Radeon HD 6670 OpenGL version string: 4.2.11566 Compatibility Profile Context tp pas mau ubah resolusi mentok di 1024x768 sedangkan monitor ane 1280x1024 (17punya) udah coba xorg.conf tetep ng bisa force dari xrandr ng bisa jg -- To UNSUBSCRIBE, email to debian-user-indonesian-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cag-f1ypcnwr8vcmrurq7epmeusi-mafjb8ftoy+nbin3ads...@mail.gmail.com
Re: Se busca partición Ext3
El día 26 de abril de 2012 07:27, julio jul...@escomposlinux.org escribió: El jue, 26-04-2012 a las 02:16 +0200, J. OCTAVIO Avalos escribió: Ya está solucionado. Lo arreglé con testdisk ahí estaba la partición en Ext3. Me la recuperó íntegra sin ningún problema aparente. Todo lo que había subido, afortunadamente volvió a su sitio ;-) Pues ahora viene la segunda parte... que es cuando te das cuenta de la importancia de tener backup de las cosas que importa conservar :) Es que este era el backup, estaba restaurando los datos. El principal lo tenía a reparar y me lo tienen que enviar para poder extraer el disco duro. Aún tengo un tercer disco con una copia integra de los datos, pero a fecha de noviembre 2011. Por eso decía que no me encontraba en la mejor situación binaria. Me temo que perdió la partición por una subida de corriente, ya me cascó el ordenador y me vi obligado a comprar otro debido al coste de reparación-sustitución de como poco la pantalla. Pero ya tengo encargado un SAI - Estabilizador de corriente. Un saludo y os reitero mi agradecimiento -- Octavio Ávalos -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cac+uy7geqwtd+3knzyxui8y-sj40omxx-u252wosg8ko4dq...@mail.gmail.com
RE: Roundcube con vacation
-Mensaje original- De: Francesc Guitart [mailto:fguit...@gmail.com] Enviado el: martes, 24 de abril de 2012 23:23 Para: debian-user-spanish@lists.debian.org Asunto: RE: Roundcube con vacation El mar, 24-04-2012 a las 18:11 +0200, Gorka escribió: -Mensaje original- De: Francesc Guitart [mailto:fguit...@gmail.com] Enviado el: lunes, 23 de abril de 2012 19:58 Para: debian-user-spanish@lists.debian.org Asunto: RE: Roundcube con vacation El vie, 20-04-2012 a las 08:50 +0200, Gorka escribió: Empecé con este ... http://www.notestic.com/missatge-de-vacances-amb-roundcube/ Hasta aquí muy bien, pero es que no te explica cómo hacer funcionar uno de los múltiples drivers. Y al ver que no funcionaba por sí solo (no tengo FTP al servidor) he tratado de buscar cómo configurarlo con el driver virtual SQL (que creo que es la opción más profesional) siguiendo este y otros tutoriales como este ... http://www.ipsure.com/blog/2011/roundcube-setup-by-also-fixing - vacatio n-and-quota-warning-issues-on-freebsd/ Pero en los primeros pasos ya veo que no tengo esas rutas de carpetas porque es para FreeBSD. ¿Que rutas son las que no existen en Debian? Aunque las rutas no sean las mismas en FreeBSD que en Debian los ficheros que se editan/modifican deben existir igual. Usa find o locate para dar con ellos. Donde pone ... # cd /usr/ports/mail/p5-MIME-EncWords/ # make install clean # cd /usr/ports/mail/p5-Email-Valid/ # make install clean # cd /usr/ports/mail/p5-Mail-Sender/ # make install clean # cd /usr/ports/devel/p5-Log-Log4perl/ # make install clean # cd /usr/ports/devel/p5-Log-Dispatch/ ... no tengo ninguna de esas rutas. Ni siquiera tengo ports bajo usr. He buscado con find p5-MIME-EncWords, p5-Mail-Sender, ... y no están ni en servidor web (donde tengo roundcube) ni en el servidor de correo (donde está postfix), que por cierto no sé en cual de ellos he de instalarlos, creo que en el de correo ¿no?. Creo que son módulos de Perl. Algunos los encontraras en los repositorios, pero mejor que los bajes todos con CPAN. Creo que los paquetes necesarios para Debian podrían ser estos: # libmail-sender-perl # libdbd-pg-perl # libemail-valid-perl # libmime-perl # liblog-log4perl-perl # liblog-dispatch-perl # libgetopt-argvfile-perl # libmime-charset-perl (currently in testing, see instructions below) # libmime-encwords-perl (currently in testing, see instructions below) Pero ... ¿los insalo en el servidor de correo o en el servidor web donde está todo lo de roundcube? Yo diría que donde tienes RoundCube Supongo que tras instalarlos ya me aparecerán las rutas anteriores que no veía, pero el caso es que a la hora de modificar el config siguiente (en mi caso no se llama tampoco como en el tutorial, pero por lógica supongo que es el /opt/roundcubemail-0.7.2/plugins/vacation/config.ini ) con un montón de líneas de script (que no sé si hay que añadir a lo que ya existe en el fichero, o hay que sustituir lo que ya hay). Me dice que puedo usar la clave anterior de postfix (supongo que se refiere a esta línea del script, que va después): No, se refiere a esta base datos: http://www.ipsure.com/blog/2011/postfixadmin-setup-with-correct- vacation-settings-on-freebsd/ La utiliza para Postfixadmin y el plugin vacation. $rcmail_config['vacation_sql_dsn'] = 'mysql://postfix:postfix-mysql-password@localhost/postfix'; Si, la linea de color azul. Yo no tengo ningún usuario postfix; ni en el mysql del servidor web, donde tengo la base de datos de roundcube, ni en el mysql de postfix, donde tengo la base de datos mailserver Luego dice que espera que haya añadido autoreply.yourdomain.com a mi servidor de correo pero no explica cómo. No dice eso. Dice que espera que hayas añadido en tu servidor DNS un registro que resuelva el nombre autoreply.tudominio.com con la IP de tu servidor de correo. Luego dice que añada otro script a la queries del plugin, pero no dice en qué archivo. ¿En que fichero se configura el/los plugin/s? Creo que se refiere a ese fichero. En fin, tengo demasiadas lagunas. Tengo que recordar que en mi caso la cosa igual se complica un poco, porque mi servidor de correo está en un Etch (configurado mediantes el ISP Mail Tutorial de Workaround) y el servidor web con roundcube está en otra máquina distinta. Es decir, que no están en la misma máquina. Pues sí, eso sin duda complica más las cosas. Para empezar la base de datos postfix tiene que ser accesible por los dos equipos... ¿Y si instalo un nuevo servidor de correo ... porque creo
Tutorial Postfix con usuarios virtuales
Buenas tardes. Creo que Christoph Haas ha dejado de mantener sus tutoriales por falta de tiempo. ¿Qué tutorial es el más empleado actualmente para postfix con usuarios virtuales en Debian? Un saludo. -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/018801cd2399$1903f2b0$4b0bd810$@yahoo.es
Re: Tutorial Postfix con usuarios virtuales
El 2012-04-26 12:41, Gorka escribió: Buenas tardes. Creo que Christoph Haas ha dejado de mantener sus tutoriales por falta de tiempo. ¿Qué tutorial es el más empleado actualmente para postfix con usuarios virtuales en Debian? Un saludo. -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/018801cd2399str_replacement[3]## Si sólo quieres un servidor de correo: http://www.howtoforge.com/virtual-users-and-domains-with-postfix-courier-mysql-and-squirrelmail-debian-squeeze Ese tuto es bastante bueno. Si lo vas a poner hacia el exterior, tendrás que agregar parámetros al fichero de configuración main.cf de postfix para evitar spam mirando en listas, comprobando los mx o comprobando ciertos requisitos... Si quieres un panel de control para poder administrarlo, puedes agregar postfixadmin al tutorial. Si quieres poder administrar el servidor de correo de manera más fácil y sencilla, te aconsejo la instalación de ISPCONFIG 3.0 sobre debian o inclusive zimbra es buena opción(aunque pesa mucho). Saludos.
Herramienta para confeccionar/diseñar Boletines, Plegables, etc.
Hola Lista, Saludos. Amigos con que herramientas específicas contamos en debian squeeze, que ayude en la confección de plegables, boletines, etc. gracias de antemano, saludos, -- Comp∴M∴:liuber's hdez. «Cuba» -- Este mensaje le ha llegado mediante el servicio de correo electronico que ofrece Infomed para respaldar el cumplimiento de las misiones del Sistema Nacional de Salud. La persona que envia este correo asume el compromiso de usar el servicio a tales fines y cumplir con las regulaciones establecidas Infomed: http://www.sld.cu/ -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1335438059.1817.4.ca...@infobiblio.fts.local
Algun programa para conectarme a vnc,ssh,etc
Buenos dias, estoy buscando algun programa grafico que pueda poner varias ip con algun icono cada uno y que permita clickeando supongamos el boton derecho y que me pueda conectar por ssh, vnc, samba,etc. Saludos Marcos -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAEP330zV3jQ2rmqOQwkrhR_6DZsMpdxKR31MMHWZ9bMkp=4...@mail.gmail.com
Re: Herramienta para confeccionar/diseñar Boletines, Plegables, etc.
Amigos con que herramientas específicas contamos en debian squeeze, que ayude en la confección de plegables, boletines, etc. LaTeX no te sirve? por lo general viene instalado, al menos el base. -- Darío |-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-| Por favor, no utilice formatos de archivo propietarios para el intercambio de documentos, como ser DOC, XLS, BMP, PPT, RAR, MP3, DWG, MOV, FLV, WMV, etc. sino ODT, ODS, DJVU, PDF, TXT, CSV, PNG, FLAC, OGV, GZ o cualquier otro que no obligue a utilizar un programa de un fabricante concreto. Info: http://www.gnu.org/philosophy/no-word-attachments.es.html http://www.vaslibre.org.ve/publicaciones/odfvsooxml-es.pdf |-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-|-| , , / \ ((__-^^-,-^^-__)) `-_---' `---_-' `--|o` 'o|--' \ ` / ): :( :o_o: - -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cabbn1rx3jshtqhpmszdk+w36ceawdbmxxvxfrq5cgoxmmpy...@mail.gmail.com
Re: Algun programa para conectarme a vnc,ssh,etc
On 04/26/2012 02:45 PM, Marcos Russo wrote: Buenos dias, estoy buscando algun programa grafico que pueda poner varias ip con algun icono cada uno y que permita clickeando supongamos el boton derecho y que me pueda conectar por ssh, vnc, samba,etc. aptitude install remmina Saludos, Toote -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f998b3e.10...@gmail.com
Re: Herramienta para confeccionar/diseñar Boletines, Plegables, etc.
On Thu, Apr 26, 2012 at 12:47 PM, Darío dario...@gmail.com wrote: Amigos con que herramientas específicas contamos en debian squeeze, que ayude en la confección de plegables, boletines, etc. LaTeX no te sirve? por lo general viene instalado, al menos el base. -- Darío scribus creo que sirve para eso -- Cada cual según sus fuerzas, cada quien según sus necesidades... -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAF=btg71n6c_vc172uk6p2iozpv_haw9et-owemlej9u1sy...@mail.gmail.com
Re: Herramienta para confeccionar/diseñar Boletines, Plegables, etc.
El jue, 26-04-2012 a las 13:00 +0200, Liuber's Hdez∴ escribió: Hola Lista, Saludos. Amigos con que herramientas específicas contamos en debian squeeze, que ayude en la confección de plegables, boletines, etc. gracias de antemano, saludos, -- Comp∴M∴:liuber's hdez. «Cuba» apt-cache search publishing apt-cache show [algun(os) paquete(s) de la lista anterior] apt-get install [paquete elegido después de ver las descripciones] no se necesita internet para eso -- (-.(-.(-.(-.(-.(-.-).-).-).-).-).-) -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1335465878.1591.11.ca...@eeepc.ucasal.ar
Re: Herramienta para confeccionar/diseñar Boletines, Plegables, etc.
El jue, 26-04-2012 a las 13:00 +0200, Liuber's Hdez∴ escribió: Hola Lista, Saludos. Amigos con que herramientas específicas contamos en debian squeeze, que ayude en la confección de plegables, boletines, etc. gracias de antemano, saludos, -- Comp∴M∴:liuber's hdez. «Cuba» Libre Office Writer. En las opciones de impresión, uno puede dar el formato de libro o de boletín plegado. (Imprimr, Diseño de Página) JAP -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1335465978.4627.8.ca...@ibbaw250.rina.armada
Leído: Herramienta para confeccionar/diseñar Boletines, Plegables, etc.
Su mensaje Para: debian-user-spanish@lists.debian.org Asunto: Re: Herramienta para confeccionar/diseñar Boletines, Plegables, etc. Enviado: 26/04/2012 01:46 p.m. fue leído el 26/04/2012 02:56 p.m.. binH2aZ1eTZoN.bin Description: message/disposition-notification
Re: Dúvidas sobre Roteador com Iptables
bom dia 80) - Mensagem original - De: Moksha Tux gova...@gmail.com Para: Forum Debian debian-user-portuguese@lists.debian.org Enviadas: Quarta-feira, 25 de Abril de 2012 22:56:02 Assunto: Dúvidas sobre Roteador com Iptables Boa noite queridos amigos! Estou construindo um roteador com iptables para o trabalho mas antes estou colhendo bastante informações pois não considero esta ferramenta fácil mas já estou tendo algum exito a miha dúvida é a seguinte... por ser um roteador devo prestar atenção nas regras INPUT que no caso seria relacionado ao próprio host (sistema) e FORWARD que trataria dos pacotes vão atravessar este host, sendo assim, as regras de proteção eu devo implementá-las tanto em INPUT quanto em FARWARD ex: #== # REGRAS PARA PROTEÇÃO #== ## INPUT # CONTRA PING DA MORTE iptables -A INPUT -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO iptables -A INPUT -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A INPUT -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT ## FORWARD # CONTRA PING DA MORTE iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A FORWARD -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT #== # FIM DAS REGRAS PARA PROTEÇÃO #== Estaria eu tendo uma dúvida relevante ou simplesmente viajando literalmente na maionese pergunto isto pois concluí que existe a proteção tanto para o host quanto para a rede. Agradeço desde já que puder me orientar a respeito. Grande abraço, em se tratando de segurança vc tem que prestar atençao não só as regras de INPUT/OUTPUT como tambem nas regras de FORWARD. Como vc mesmo disse as regras de INPUT/OUTPUT tem a ver com o roteador/firewall, ou seja ele contra o mundo. Imagine por um instante que vc descuide destas regras e um atacante acesse o seu roteador/firewall. De nada adianta ter as melhores regras de FORWARD do mundo, pois o atacante terá o dominio do seu firewaçll/roteador e poderá mudar todas as regras que ele quizer. POr outro lado tambem de nada adianta ter um firewall/roteador que só consegue se proteger do mundo se vc deixars a rede de sua empresa aberta nas regras de FORWARD. Se vc quer mesmo construir um bom roteador/firewall para sua empresa tem uma leitura que vc DEVE ler OBRIGATORIAMENTE. Neste ponto é a melhor documentação de firewall que eu já lí e figura no 1 lugar na lista do netfilter: http://www.frozentux.net/documents/iptables-tutorial/ creio que depois de ler a doc acima ficara tudo mais claro para vc. boa leitura e depois poste suas duvidas aqui...80) []s Moksha -- Paulo Ricardo Bruck Consultor Linux cel 011 9235-4327 tel 011 3596-4881/4882 http://www.contatogs.com.br skype: suportecontatogs -- To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1508555165.1550.1335436651358.javamail.r...@mercurio.contatogs.com.br
Re: Dúvidas sobre Roteador com Iptables
Muito obrigado Paulo Ricardo pela sua resposta, então o que me parece é que não estou tão errado assim no meu raciocínio? Pela lógica devemos realmente implementar as políticas em cada chain? Obrigado pela indicação de leitura, vou iniciar hoje mesmo. Abraços, Moksha Em 26 de abril de 2012 07:37, Paulo Ricardo Bruck paulo...@contatogs.com.br escreveu: bom dia 80) - Mensagem original - De: Moksha Tux gova...@gmail.com Para: Forum Debian debian-user-portuguese@lists.debian.org Enviadas: Quarta-feira, 25 de Abril de 2012 22:56:02 Assunto: Dúvidas sobre Roteador com Iptables Boa noite queridos amigos! Estou construindo um roteador com iptables para o trabalho mas antes estou colhendo bastante informações pois não considero esta ferramenta fácil mas já estou tendo algum exito a miha dúvida é a seguinte... por ser um roteador devo prestar atenção nas regras INPUT que no caso seria relacionado ao próprio host (sistema) e FORWARD que trataria dos pacotes vão atravessar este host, sendo assim, as regras de proteção eu devo implementá-las tanto em INPUT quanto em FARWARD ex: #== # REGRAS PARA PROTEÇÃO #== ## INPUT # CONTRA PING DA MORTE iptables -A INPUT -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO iptables -A INPUT -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A INPUT -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT ## FORWARD # CONTRA PING DA MORTE iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A FORWARD -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT #== # FIM DAS REGRAS PARA PROTEÇÃO #== Estaria eu tendo uma dúvida relevante ou simplesmente viajando literalmente na maionese pergunto isto pois concluí que existe a proteção tanto para o host quanto para a rede. Agradeço desde já que puder me orientar a respeito. Grande abraço, em se tratando de segurança vc tem que prestar atençao não só as regras de INPUT/OUTPUT como tambem nas regras de FORWARD. Como vc mesmo disse as regras de INPUT/OUTPUT tem a ver com o roteador/firewall, ou seja ele contra o mundo. Imagine por um instante que vc descuide destas regras e um atacante acesse o seu roteador/firewall. De nada adianta ter as melhores regras de FORWARD do mundo, pois o atacante terá o dominio do seu firewaçll/roteador e poderá mudar todas as regras que ele quizer. POr outro lado tambem de nada adianta ter um firewall/roteador que só consegue se proteger do mundo se vc deixars a rede de sua empresa aberta nas regras de FORWARD. Se vc quer mesmo construir um bom roteador/firewall para sua empresa tem uma leitura que vc DEVE ler OBRIGATORIAMENTE. Neste ponto é a melhor documentação de firewall que eu já lí e figura no 1 lugar na lista do netfilter: http://www.frozentux.net/documents/iptables-tutorial/ creio que depois de ler a doc acima ficara tudo mais claro para vc. boa leitura e depois poste suas duvidas aqui...80) []s Moksha -- Paulo Ricardo Bruck Consultor Linux cel 011 9235-4327 tel 011 3596-4881/4882 http://www.contatogs.com.br skype: suportecontatogs -- To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1508555165.1550.1335436651358.javamail.r...@mercurio.contatogs.com.br
Re: Dúvidas sobre Roteador com Iptables
Bom dia ... Se o Sr. considera difícil o uso direto do iptables, o Sr. poderia considerar um front-end ! Eu uso o shorewall : http://shorewall.net/ http://people.connexer.com/~roberto/debian/ um simples apt-get install shorewall-perl e já estará instalado . E para manter um número muito grande de regras, ele é uma verdadeira mão na massa !!! Fábio Rabelo Em 25 de abril de 2012 22:56, Moksha Tux gova...@gmail.com escreveu: Boa noite queridos amigos! Estou construindo um roteador com iptables para o trabalho mas antes estou colhendo bastante informações pois não considero esta ferramenta fácil mas já estou tendo algum exito a miha dúvida é a seguinte... por ser um roteador devo prestar atenção nas regras INPUT que no caso seria relacionado ao próprio host (sistema) e FORWARD que trataria dos pacotes vão atravessar este host, sendo assim, as regras de proteção eu devo implementá-las tanto em INPUT quanto em FARWARD ex: *#== # REGRAS PARA PROTEÇÃO #== ## INPUT # CONTRA PING DA MORTE iptables -A INPUT -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO iptables -A INPUT -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A INPUT -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT ## FORWARD # CONTRA PING DA MORTE iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES* * iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO* * iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A FORWARD -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES* * iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT **#== # FIM DAS REGRAS PARA PROTEÇÃO #==* * * Estaria eu tendo uma dúvida relevante ou simplesmente viajando literalmente na maionese pergunto isto pois concluí que existe a proteção tanto para o host quanto para a rede. Agradeço desde já que puder me orientar a respeito. Grande abraço, Moksha
Re: Dúvidas sobre Roteador com Iptables
Muito obrigado Fábio pela resposta! Eu já andei considerando sim alguns appliance como o próprio Untangle que já é Debian, o endian e o pfsense, mas tenho o desejo de dominar a administração e implementação de roteadores/firewalls em iptables na mão mesmo mas confesso que essas soluções não estão descartadas. Será que para uma rede de aproximadamente 2500 usuários e mais de 3000 pontos de rede e com um link de internet de 1Gb o shorewall suportaria numa boa sem pedir arrego? Claro, considerando que ele será instalado em um servidor robusto também. O shorewall é um appliance também? Baseado em que distribuição? Moksha Em 26 de abril de 2012 10:40, Fábio Rabelo fa...@fabiorabelo.wiki.brescreveu: Bom dia ... Se o Sr. considera difícil o uso direto do iptables, o Sr. poderia considerar um front-end ! Eu uso o shorewall : http://shorewall.net/ http://people.connexer.com/~roberto/debian/ um simples apt-get install shorewall-perl e já estará instalado . E para manter um número muito grande de regras, ele é uma verdadeira mão na massa !!! Fábio Rabelo Em 25 de abril de 2012 22:56, Moksha Tux gova...@gmail.com escreveu: Boa noite queridos amigos! Estou construindo um roteador com iptables para o trabalho mas antes estou colhendo bastante informações pois não considero esta ferramenta fácil mas já estou tendo algum exito a miha dúvida é a seguinte... por ser um roteador devo prestar atenção nas regras INPUT que no caso seria relacionado ao próprio host (sistema) e FORWARD que trataria dos pacotes vão atravessar este host, sendo assim, as regras de proteção eu devo implementá-las tanto em INPUT quanto em FARWARD ex: *#== # REGRAS PARA PROTEÇÃO #== ## INPUT # CONTRA PING DA MORTE iptables -A INPUT -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO iptables -A INPUT -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A INPUT -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT ## FORWARD # CONTRA PING DA MORTE iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES* * iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO* * iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A FORWARD -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES* * iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT **#== # FIM DAS REGRAS PARA PROTEÇÃO #==* * * Estaria eu tendo uma dúvida relevante ou simplesmente viajando literalmente na maionese pergunto isto pois concluí que existe a proteção tanto para o host quanto para a rede. Agradeço desde já que puder me orientar a respeito. Grande abraço, Moksha
Re: Dúvidas sobre Roteador com Iptables
Não, o Shorewall não é um apliance, é um front-end . Ele fica entre o iptables e o administrador da rede, facilita em muito a administração qdo existem muitas regras do iptables . Eu uso geralmente o webmin para gerenciar o shorewall . O Shorewall pode ser instalado em qualquer distribuição ! Fábio Rabelo Em 26 de abril de 2012 11:19, Moksha Tux gova...@gmail.com escreveu: Muito obrigado Fábio pela resposta! Eu já andei considerando sim alguns appliance como o próprio Untangle que já é Debian, o endian e o pfsense, mas tenho o desejo de dominar a administração e implementação de roteadores/firewalls em iptables na mão mesmo mas confesso que essas soluções não estão descartadas. Será que para uma rede de aproximadamente 2500 usuários e mais de 3000 pontos de rede e com um link de internet de 1Gb o shorewall suportaria numa boa sem pedir arrego? Claro, considerando que ele será instalado em um servidor robusto também. O shorewall é um appliance também? Baseado em que distribuição? Moksha Em 26 de abril de 2012 10:40, Fábio Rabelo fa...@fabiorabelo.wiki.brescreveu: Bom dia ... Se o Sr. considera difícil o uso direto do iptables, o Sr. poderia considerar um front-end ! Eu uso o shorewall : http://shorewall.net/ http://people.connexer.com/~roberto/debian/ um simples apt-get install shorewall-perl e já estará instalado . E para manter um número muito grande de regras, ele é uma verdadeira mão na massa !!! Fábio Rabelo Em 25 de abril de 2012 22:56, Moksha Tux gova...@gmail.com escreveu: Boa noite queridos amigos! Estou construindo um roteador com iptables para o trabalho mas antes estou colhendo bastante informações pois não considero esta ferramenta fácil mas já estou tendo algum exito a miha dúvida é a seguinte... por ser um roteador devo prestar atenção nas regras INPUT que no caso seria relacionado ao próprio host (sistema) e FORWARD que trataria dos pacotes vão atravessar este host, sendo assim, as regras de proteção eu devo implementá-las tanto em INPUT quanto em FARWARD ex: *#== # REGRAS PARA PROTEÇÃO #== ## INPUT # CONTRA PING DA MORTE iptables -A INPUT -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO iptables -A INPUT -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A INPUT -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT ## FORWARD # CONTRA PING DA MORTE iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES* * iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO* * iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A FORWARD -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES* * iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT **#== # FIM DAS REGRAS PARA PROTEÇÃO #==* * * Estaria eu tendo uma dúvida relevante ou simplesmente viajando literalmente na maionese pergunto isto pois concluí que existe a proteção tanto para o host quanto para a rede. Agradeço desde já que puder me orientar a respeito. Grande abraço, Moksha
Re: Dúvidas sobre Roteador com Iptables
Ah! Sim agora entendi, ele é um pacote cujo a finalidade é trabalhar entre o iptables e o admin como o senhor mesmo explicou e possui uma interface que torna tanto a dministração quanto a implementação do firewall mais amigável. Não seria isso então? Moksha Em 26 de abril de 2012 12:19, Fábio Rabelo fa...@fabiorabelo.wiki.brescreveu: Não, o Shorewall não é um apliance, é um front-end . Ele fica entre o iptables e o administrador da rede, facilita em muito a administração qdo existem muitas regras do iptables . Eu uso geralmente o webmin para gerenciar o shorewall . O Shorewall pode ser instalado em qualquer distribuição ! Fábio Rabelo Em 26 de abril de 2012 11:19, Moksha Tux gova...@gmail.com escreveu: Muito obrigado Fábio pela resposta! Eu já andei considerando sim alguns appliance como o próprio Untangle que já é Debian, o endian e o pfsense, mas tenho o desejo de dominar a administração e implementação de roteadores/firewalls em iptables na mão mesmo mas confesso que essas soluções não estão descartadas. Será que para uma rede de aproximadamente 2500 usuários e mais de 3000 pontos de rede e com um link de internet de 1Gb o shorewall suportaria numa boa sem pedir arrego? Claro, considerando que ele será instalado em um servidor robusto também. O shorewall é um appliance também? Baseado em que distribuição? Moksha Em 26 de abril de 2012 10:40, Fábio Rabelo fa...@fabiorabelo.wiki.brescreveu: Bom dia ... Se o Sr. considera difícil o uso direto do iptables, o Sr. poderia considerar um front-end ! Eu uso o shorewall : http://shorewall.net/ http://people.connexer.com/~roberto/debian/ um simples apt-get install shorewall-perl e já estará instalado . E para manter um número muito grande de regras, ele é uma verdadeira mão na massa !!! Fábio Rabelo Em 25 de abril de 2012 22:56, Moksha Tux gova...@gmail.com escreveu: Boa noite queridos amigos! Estou construindo um roteador com iptables para o trabalho mas antes estou colhendo bastante informações pois não considero esta ferramenta fácil mas já estou tendo algum exito a miha dúvida é a seguinte... por ser um roteador devo prestar atenção nas regras INPUT que no caso seria relacionado ao próprio host (sistema) e FORWARD que trataria dos pacotes vão atravessar este host, sendo assim, as regras de proteção eu devo implementá-las tanto em INPUT quanto em FARWARD ex: *#== # REGRAS PARA PROTEÇÃO #== ## INPUT # CONTRA PING DA MORTE iptables -A INPUT -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO iptables -A INPUT -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A INPUT -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT ## FORWARD # CONTRA PING DA MORTE iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES* * iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO* * iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A FORWARD -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES* * iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT **#== # FIM DAS REGRAS PARA PROTEÇÃO #==* * * Estaria eu tendo uma dúvida relevante ou simplesmente viajando literalmente na maionese pergunto isto pois concluí que existe a proteção tanto para o host quanto para a rede. Agradeço desde já que puder me orientar a respeito. Grande abraço, Moksha
Re: Dúvidas sobre Roteador com Iptables
- Mensagem original - De: Moksha Tux gova...@gmail.com Para: Paulo Ricardo Bruck paulo...@contatogs.com.br Cc: Forum Debian debian-user-portuguese@lists.debian.org Enviadas: Quinta-feira, 26 de Abril de 2012 9:32:00 Assunto: Re: Dúvidas sobre Roteador com Iptables Muito obrigado Paulo Ricardo pela sua resposta, então o que me parece é que não estou tão errado assim no meu raciocínio? não vc esta correto Pela lógica devemos realmente implementar as políticas em cada chain? sim e setar as policitas de cada chain tambem Obrigado pela indicação de leitura, vou iniciar hoje mesmo. Abraços, []s Moksha Em 26 de abril de 2012 07:37, Paulo Ricardo Bruck paulo...@contatogs.com.br escreveu: bom dia 80) - Mensagem original - De: Moksha Tux gova...@gmail.com Para: Forum Debian debian-user-portuguese@lists.debian.org Enviadas: Quarta-feira, 25 de Abril de 2012 22:56:02 Assunto: Dúvidas sobre Roteador com Iptables Boa noite queridos amigos! Estou construindo um roteador com iptables para o trabalho mas antes estou colhendo bastante informações pois não considero esta ferramenta fácil mas já estou tendo algum exito a miha dúvida é a seguinte... por ser um roteador devo prestar atenção nas regras INPUT que no caso seria relacionado ao próprio host (sistema) e FORWARD que trataria dos pacotes vão atravessar este host, sendo assim, as regras de proteção eu devo implementá-las tanto em INPUT quanto em FARWARD ex: #== # REGRAS PARA PROTEÇÃO #== ## INPUT # CONTRA PING DA MORTE iptables -A INPUT -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO iptables -A INPUT -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A INPUT -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT ## FORWARD # CONTRA PING DA MORTE iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # ACEITANDO CONEXÕES iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT # CONTRA PORTCAN OCULTO iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT iptables -A FORWARD -p tcp --tcp-flags ALL SYN,ACK -j DROP # ACEITANDO CONEXÕES iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT #== # FIM DAS REGRAS PARA PROTEÇÃO #== Estaria eu tendo uma dúvida relevante ou simplesmente viajando literalmente na maionese pergunto isto pois concluí que existe a proteção tanto para o host quanto para a rede. Agradeço desde já que puder me orientar a respeito. Grande abraço, em se tratando de segurança vc tem que prestar atençao não só as regras de INPUT/OUTPUT como tambem nas regras de FORWARD. Como vc mesmo disse as regras de INPUT/OUTPUT tem a ver com o roteador/firewall, ou seja ele contra o mundo. Imagine por um instante que vc descuide destas regras e um atacante acesse o seu roteador/firewall. De nada adianta ter as melhores regras de FORWARD do mundo, pois o atacante terá o dominio do seu firewaçll/roteador e poderá mudar todas as regras que ele quizer. POr outro lado tambem de nada adianta ter um firewall/roteador que só consegue se proteger do mundo se vc deixars a rede de sua empresa aberta nas regras de FORWARD. Se vc quer mesmo construir um bom roteador/firewall para sua empresa tem uma leitura que vc DEVE ler OBRIGATORIAMENTE. Neste ponto é a melhor documentação de firewall que eu já lí e figura no 1 lugar na lista do netfilter: http://www.frozentux.net/documents/iptables-tutorial/ creio que depois de ler a doc acima ficara tudo mais claro para vc. boa leitura e depois poste suas duvidas aqui...80) []s Moksha -- Paulo Ricardo Bruck Consultor Linux cel 011 9235-4327 tel 011 3596-4881/4882 http://www.contatogs.com.br skype: suportecontatogs -- To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1508555165.1550.1335436651358.javamail.r...@mercurio.contatogs.com.br -- Paulo Ricardo Bruck Consultor Linux cel 011 9235-4327 tel 011 3596-4881/4882 http://www.contatogs.com.br skype: suportecontatogs -- To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/478823636.1581.1335456412734.javamail.r...@mercurio.contatogs.com.br
Re: Single boot EFI Mac install
On 2012-04-25 22:03, Dan wrote: What is the advantage of booting Linux directly with EFI instead of using rEfit? The performance is improved if the system is booted with EFI? No, once running the performance is the same. Or it is just that it will boot up faster. I do not have a mac, but I might buy one and install Debian. You will win a few seconds when booting up, that's it. But consider this: You can very well put your Mac asleep with super low energy consumption and wake it up in no time. There's actually no need to reboot all the time IMO. One argument for keeping multi-boot: If you keep your original Mac OS on a small partition, in my case 30 GB are sufficient, you can upgrade your Mac from time to time with Mac OS. This is not needed for the OS (Linux is your love ;-)), but you'll need it to get EFI updates as well in an automated way. HTH, ändu -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f98fd78.6080...@worldwideweber.ch
iptables service with debian
i run this command iptables -t nat -A POSTROUTING -o eth1 -d 8.8.4.4 -j MASQUERADE my client computers able to ping 8.8.4.4 but when i iptables --flush -t nat it clrear the table but my client can still ping the destination. i check iptables-save is shows that tables are empty. i thought that there could be some kind of service related to iptable in /etc/init.d folder so that i can restart that but there are none. and i notices after 5 minutes or so my clients computer were not able to ping which means my commands affects after 5 minutes. but i want prompt effect of every iptable command. is there any thing that can be done in this regard ? pls help one more thing what could be done to retain all the iptable statements even after reboot. i think writing all the iptables command in rc.local is not a good idea. it is work around. can any one plz help in this regard also. Thanks -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAGWVfMmQK0uvzaF1jBGbG12Rzeq_O8Fszf=e-stvh8wgplt...@mail.gmail.com
How /etc/hosts.allow /etc/hosts.deny and smb.conf play along
hi list Can somebody explain why smbd and nmbd are not affected by the following strict ruleset in /etc/hosts* ? /etc/hosts 127.0.0.1 MYHOSTNAME localhost.localdomain localhost 127.0.1.1 MYHOSTNAME 192.168.2.10MYSERVER cat /etc/hosts.allow #ALL: localhost 127.0.1.1 192.168.2.0/24 ALL: localhost 127.0.1.1 192.168.2.0/32 /etc/hosts.deny ALL: ALL With this ruleset in place nmbd broadcasts still pull through and cifs mounts are still possible, whereas ssh/rsh access is no longer possible. To get rid of nmbd/smbd access I have to tweak smb.conf additionally: /etc/samba/smb.conf [global] bind interfaces only = Yes interfaces = 127.0.0.0/8, eth0 ;; hosts allow = 192.168.2.0/24, 127. hosts allow = 192.168.2.0/32, 127. hosts deny = ALL With this smb.conf tweaking it works fine, but why could smbd/nmbd run past /etc/hosts.allow and /etc/hosts.deny without those lines in smb.conf? To my limited CIDR understandig a /32 mask should restrict access to 192.168.2.0.0 and 192.168.2.1 - this should be fine for testing purposes. Once this denies all services I'd set it to /24 to have access to the whole subnet from 192.168.2.0-192.168.2.255 and 127.0.0.1 127.0.1.1 -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/blu0-smtp149485f83cd3709473ea7d5d8...@phx.gbl
Re: How /etc/hosts.allow /etc/hosts.deny and smb.conf play along
2012/4/26 Tuxoholic tuxoho...@hotmail.de: hi list Can somebody explain why smbd and nmbd are not affected by the following strict ruleset in /etc/hosts* ? /etc/hosts 127.0.0.1 MYHOSTNAME localhost.localdomain localhost 127.0.1.1 MYHOSTNAME 192.168.2.10 MYSERVER cat /etc/hosts.allow #ALL: localhost 127.0.1.1 192.168.2.0/24 ALL: localhost 127.0.1.1 192.168.2.0/32 /etc/hosts.deny ALL: ALL With this ruleset in place nmbd broadcasts still pull through and cifs mounts are still possible, whereas ssh/rsh access is no longer possible. To get rid of nmbd/smbd access I have to tweak smb.conf additionally: /etc/samba/smb.conf [global] bind interfaces only = Yes interfaces = 127.0.0.0/8, eth0 ;; hosts allow = 192.168.2.0/24, 127. hosts allow = 192.168.2.0/32, 127. hosts deny = ALL With this smb.conf tweaking it works fine, but why could smbd/nmbd run past /etc/hosts.allow and /etc/hosts.deny without those lines in smb.conf? To my limited CIDR understandig a /32 mask should restrict access to 192.168.2.0.0 and 192.168.2.1 - this should be fine for testing purposes. Once this denies all services I'd set it to /24 to have access to the whole subnet from 192.168.2.0-192.168.2.255 and 127.0.0.1 127.0.1.1 -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/blu0-smtp149485f83cd3709473ea7d5d8...@phx.gbl Hi, My two cents: I think the problem here is between tcpwrapper linux implementation and the the samba package. Are you running samba as a daemon or from then inetd? I think you are running it as a daemon and I believe (check on the internet) samba must be compiled in a tcpwrapper friendly way (I don't know if this is the default) Running samba from inetd must work OK as inetd is tcpwrapper friendly. If this doesn't help you you can try iptables (but your workaround is OK too) Best regards. -- Juan Sierra Pons j...@elsotanillo.net Linux User Registered: #257202 http://www.elsotanillo.net GPG key = 0xA110F4FE Key Fingerprint = DF53 7415 0936 244E 9B00 6E66 E934 3406 A110 F4FE -- -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CABS=y9tfvznzhrho8vfqywpwtjtdfioqpmmzrm_+e1utxlu...@mail.gmail.com
Re: Single boot EFI Mac install
On Wed, Apr 25, 2012 at 10:03 PM, Dan ganc...@gmail.com wrote: On Wed, Mar 7, 2012 at 2:33 PM, Carsten Mattner carstenmatt...@googlemail.com wrote: Has anyone successfully installed Debian as a single boot system on an EFI Mac? What is the advantage of booting Linux directly with EFI instead of using rEfit? The performance is improved if the system is booted with EFI? Or it is just that it will boot up faster. I do not have a mac, but I might buy one and install Debian. It can be faster because you would directly boot into grub2-efi or with a newer kernel directly boot the kernel image. I gave up with EFI for the moment and am using rEFIt. Is the Macbook pro 100% compatible with EFI 2.0? I don't know what EFI 2.0 is. Macs usually have Mac EFI which is not the same as UEFI. Newer Macs have 64bit EFI. I also heard that if you boot directly with EFI, the video card will not work properly. That can happen. I don't know the details but it may be chipset specific. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CACY+HvqkGTXfijkkKt61MDo=p-fqgvuzscj+j6+r9kfx-ce...@mail.gmail.com
Backup backup backup -- sound problem SOLVED using a backup
I was playing a music track while using XBMC when suddenly the sound stopped. I tried everything I could to restore sound. None of my multimedia programs produced sound. Even speaker-test produced nothing. I tried rebooting, purge xbmc from the system: nothing. Well, this morning, I unpacked my latest backup of my directory tree into /var/tmp and issued the command diff -q -u -r /home/sian /var/tmp/home/sian /tmp/sian.diff The command ran for a few seconds. Looking at /tmp/sian.diff showed no obvious reason why I no longer had sound. So, I logged out of KDE4 Plasma Desktop, keyed Ctrl-Alt-F1 and, at the VT, logged in as root. Then I issued the commands init 3# that stopped kdm and X rm -rf /home/sian # deleted all my files rm -rf /var/tmp/home # deleted the files I had put into /var/tmp tar -xjf /opt/cdrw/bd21319-04-25/Phoenicia.sian.tar.bz2 --directory / # That tar command extracted all the files from the backup and put them # into their proper places (each file was preceded by home/sian because # tar removes the initial / I then did the usual sid upgrade commands: apt-get update apt-get dist-upgrade reboot After the reboot, I logged in and ran speaker-test: speaker-test -tsine -c2 Sound from both speakers! played some music using Deadbeef (Audio player) So there you are: a backup saved my bacon. -- Sian Mountbatten ex-Algol 68 specialist -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/jnb5pf$46j$1...@speranza.aioe.org
Re: How /etc/hosts.allow /etc/hosts.deny and smb.conf play along
Juan is correct. However my two cents - don't rely on hosts.allow and hosts.deny for anything. Just use iptables rules to do this type of thing. Also, most don't consider samba to be a very secure service (last CVE was only a few weeks ago) so be very careful with this service. On Apr 26, 2012 5:37 AM, Juan Sierra Pons j...@elsotanillo.net wrote: 2012/4/26 Tuxoholic tuxoho...@hotmail.de: hi list Can somebody explain why smbd and nmbd are not affected by the following strict ruleset in /etc/hosts* ? /etc/hosts 127.0.0.1 MYHOSTNAME localhost.localdomain localhost 127.0.1.1 MYHOSTNAME 192.168.2.10MYSERVER cat /etc/hosts.allow #ALL: localhost 127.0.1.1 192.168.2.0/24 ALL: localhost 127.0.1.1 192.168.2.0/32 /etc/hosts.deny ALL: ALL With this ruleset in place nmbd broadcasts still pull through and cifs mounts are still possible, whereas ssh/rsh access is no longer possible. To get rid of nmbd/smbd access I have to tweak smb.conf additionally: /etc/samba/smb.conf [global] bind interfaces only = Yes interfaces = 127.0.0.0/8, eth0 ;; hosts allow = 192.168.2.0/24, 127. hosts allow = 192.168.2.0/32, 127. hosts deny = ALL With this smb.conf tweaking it works fine, but why could smbd/nmbd run past /etc/hosts.allow and /etc/hosts.deny without those lines in smb.conf? To my limited CIDR understandig a /32 mask should restrict access to 192.168.2.0.0 and 192.168.2.1 - this should be fine for testing purposes. Once this denies all services I'd set it to /24 to have access to the whole subnet from 192.168.2.0-192.168.2.255 and 127.0.0.1 127.0.1.1 -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/blu0-smtp149485f83cd3709473ea7d5d8...@phx.gbl Hi, My two cents: I think the problem here is between tcpwrapper linux implementation and the the samba package. Are you running samba as a daemon or from then inetd? I think you are running it as a daemon and I believe (check on the internet) samba must be compiled in a tcpwrapper friendly way (I don't know if this is the default) Running samba from inetd must work OK as inetd is tcpwrapper friendly. If this doesn't help you you can try iptables (but your workaround is OK too) Best regards. -- Juan Sierra Pons j...@elsotanillo.net Linux User Registered: #257202 http://www.elsotanillo.net GPG key = 0xA110F4FE Key Fingerprint = DF53 7415 0936 244E 9B00 6E66 E934 3406 A110 F4FE -- -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cabsy9tfvznzhrho8vfqywpwtjtdfioqpmmzrm_+e1utxlu...@mail.gmail.com
Re: Is 1600x1200 screen better than 1440x900?
On 2012-04-25 09:13:35 -0400, Gary Dale wrote: I replaced my old 21 CRT (I had been running it at 1792x1344x32@75hz) in favour of a 24 LED monitor running at 1920x1080. That's a drop of .4M pixels but the really high resolution LCD screens cost a lot more. Unfortunately the loss in vertical resolution is more important than the number of pixels for viewing PDF files in portrait orientation, unless you have a rotatable second monitor just for that. -- Vincent Lefèvre vinc...@vinc17.net - Web: http://www.vinc17.net/ 100% accessible validated (X)HTML - Blog: http://www.vinc17.net/blog/ Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon) -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120426110039.gf3...@xvii.vinc17.org
Re: about DSA-2452-1 apache2 -- insecure default configuration
On 2012-04-24 16:57:52 +, Camaleón wrote: On Tue, 24 Apr 2012 18:19:11 +0200, Vincent Lefevre wrote: This is just a workaround. The real problem hasn't been fixed. And this means that it is no longer possible to read arbitrary documentation from doc directories easily. I'm still not sure about that mainly because I don't see other distributions (besides Ubuntu) fixing it :-? Perhaps it's Debian-specific (the bug was just about the default configuration), and users may also have an insecure (non-default) configuration on other distributions without knowing it. I've reported a bug for Debian, at least so that Debian gives more information about such security problems: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=670518 -- Vincent Lefèvre vinc...@vinc17.net - Web: http://www.vinc17.net/ 100% accessible validated (X)HTML - Blog: http://www.vinc17.net/blog/ Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon) -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120426111032.gg3...@xvii.vinc17.org
Re: How /etc/hosts.allow /etc/hosts.deny and smb.conf play along
Hi Tuxoholic, [...] With this smb.conf tweaking it works fine, but why could smbd/nmbd run past /etc/hosts.allow and /etc/hosts.deny without those lines in smb.conf? Already answered by Juan Sierra Pons. To my limited CIDR understandig a /32 mask should restrict access to 192.168.2.0.0 and 192.168.2.1 - this should be fine for testing purposes. Not sure about that. You can check it with ipcalc (in the ipcalc package): $ ipcalc 192.168.2.0/32 Address: 192.168.2.0 1100.10101000.0010. Netmask: 255.255.255.255 = 32 ... Wildcard: 0.0.0.0 ... = Hostroute: 192.168.2.0 1100.10101000.0010. Hosts/Net: 1 Class C, Private Internet So it looks like you need a 31 bit netmask for that address range: $ ipcalc 192.168.2.0/31 Address: 192.168.2.0 1100.10101000.0010.000 0 Netmask: 255.255.255.254 = 31 ...111 0 Wildcard: 0.0.0.1 ...000 1 = Network: 192.168.2.0/31 1100.10101000.0010.000 0 HostMin: 192.168.2.0 1100.10101000.0010.000 0 HostMax: 192.168.2.1 1100.10101000.0010.000 1 Hosts/Net: 2 Class C, Private Internet, PtP Link RFC 3021 Once this denies all services I'd set it to /24 to have access to the whole subnet from 192.168.2.0-192.168.2.255 and 127.0.0.1 127.0.1.1 Well you don't seem to be allowed .0 and .255: $ ipcalc 192.168.2.0/24 Address: 192.168.2.0 1100.10101000.0010. Netmask: 255.255.255.0 = 24 ... Wildcard: 0.0.0.255... = Network: 192.168.2.0/24 1100.10101000.0010. HostMin: 192.168.2.1 1100.10101000.0010. 0001 HostMax: 192.168.2.2541100.10101000.0010. 1110 Broadcast: 192.168.2.2551100.10101000.0010. Hosts/Net: 254 Class C, Private Internet I hope this helps. -- Cheers, Clive -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120426113448.GA6767@rimmer.localdomain
Re: Partman-Auto - Multi-Disk OR Use Existing Layout via Preseed
Also, if there's a better list to ask this on, please point me to it.
Thanks!
-Matt
On 4/25/12 10:15 PM, Matthew Drobnak wrote:
First, I have to say I love Debian. But I've been struggling with the
preseeding lately. First it was the keyboard layout, as the name has
changed a few times.
But that's been rectified. So, now I am trying to get partitioning right.
This was the recipe I tried:
d-i partman-auto/disk string /dev/sdb /dev/sda
d-i partman-auto/method string lvm
d-i partman-auto/choose_recipe select boot-root
d-i partman-auto/purge_lvm_from_device boolean true
d-i partman-auto-lvm/new_vg_name string sysvg
d-i partman-lvm/device_remove_lvm boolean true
d-i partman-lvm/device_remove_md boolean true
d-i partman-lvm/confirm_nooverwrite boolean true
d-i partman-lvm/confirm boolean true
d-i partman/confirm_write_new_label boolean true
d-i partman/confirm boolean true
d-i partman/default_filesystem string ext3
d-i partman/mount_style select uuid
#d-i partman/choose_partition \
#select Finish partitioning and write changes to disk
d-i partman-auto/expert_recipe string \
boot-root ::\
512 30720 512 ext3 \
$primary{ } $bootable{ } $lvmignore { } \
method{ format } format{ } \
filesystem{ ext3 }\
mountpoint{ /boot } \
. \
1 10100 10734 ext3 \
$primary{ } $defaultignore{ } \
method{ lvm } device{ /dev/sdb }\
vg_name{ sysvg }\
. \
1 21000 10 ext3 \
$defaultignore{ } \
method{ lvm } device{ /dev/sdb }\
vg_name{ xen_vg } \
. \
2048 9000 2048 linux-swap \
$lvmok{ } method{ swap } format{ } \
in_vg{ sysvg } lv_name{ swap1 } \
. \
4096 10500 4096 ext3\
$lvmok{ } method{ format } format{ }\
in_vg{ sysvg } lv_name{ root } \
filesystem{ ext3 } mountpoint{ / } \
. \
4063 8000 4065 ext3 \
$lvmok{ } method{ format } format{ }\
in_vg{ sysvg } lv_name{ var } \
filesystem{ ext3 } mountpoint{ /var } \
. \
This didn't quite do the right thing.
Desired layout:
/dev/sda - 512MB disk:
/dev/sda1 - /boot - 512MB
/dev/sdb - Rest of disk -
/dev/sdb1 - physical_volume for sysvg volume group ~ 10.7GB
/dev/sdb2 - pysical_volume for xen_vg volume group - Remaining amount
of disk
and the three LVs - root, var, swap, inside of sysvg
So, I can't seem to get this to work right. I tried to even just use
/dev/sdb alone, but I coulnd't get it to ignore /dev/sda, even when
partman/disk only says /dev/sdb.
The other (cheating to me, but doable) option is to use the
pre-partman-script to do the correct partitioning, and write a recipe
to simply use the correct partitions..but I don't see any documents on
this.
Please, someone tell me this can be done correctly.
What's really upsetting is that this is the equivalent recipe in
kickstart:
clearpart --all --drives=/dev/sda,/dev/sdb --initlabel
part /boot --fstype ext3 --size=510 --asprimary --ondisk=/dev/sda
part pv.01 --size=10240 --asprimary --ondisk=/dev/sdb
part pv.02 --size=1 --grow --asprimary --ondisk=/dev/sdb
volgroup sysvg pv.01 --pesize=32768
volgroup xen_vg pv.02 --pesize=32768
logvol / --vgname=sysvg --size=4096 --fstype ext3 --name=root
logvol swap --vgname=sysvg --size=2048 --fstype ext3 --name=swap1
logvol /var --vgname=sysvg --size=4064 --fstype ext3 --name=var
I understand this may come off as a bit combative, but that's not what
I'm after. :)
I'd just like to get this done. Without this, my exercises remain an
exercise only. :-(
-Matt
PS. I speak for me only, not for my company.
--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4f9941c5.8040...@appnexus.com
Re: Partman-Auto - Multi-Disk OR Use Existing Layout via Preseed
On Wed, Apr 25, 2012 at 10:15 PM, Matthew Drobnak mdrob...@appnexus.com wrote:
First, I have to say I love Debian. But I've been struggling with the
preseeding lately. First it was the keyboard layout, as the name has changed
a few times.
But that's been rectified. So, now I am trying to get partitioning right.
This was the recipe I tried:
d-i partman-auto/disk string /dev/sdb /dev/sda
d-i partman-auto/method string lvm
d-i partman-auto/choose_recipe select boot-root
d-i partman-auto/purge_lvm_from_device boolean true
d-i partman-auto-lvm/new_vg_name string sysvg
d-i partman-lvm/device_remove_lvm boolean true
d-i partman-lvm/device_remove_md boolean true
d-i partman-lvm/confirm_nooverwrite boolean true
d-i partman-lvm/confirm boolean true
d-i partman/confirm_write_new_label boolean true
d-i partman/confirm boolean true
d-i partman/default_filesystem string ext3
d-i partman/mount_style select uuid
#d-i partman/choose_partition \
# select Finish partitioning and write changes to disk
d-i partman-auto/expert_recipe string \
boot-root :: \
512 30720 512 ext3 \
$primary{ } $bootable{ } $lvmignore { } \
method{ format } format{ } \
filesystem{ ext3 } \
mountpoint{ /boot } \
. \
1 10100 10734 ext3 \
$primary{ } $defaultignore{ } \
method{ lvm } device{ /dev/sdb } \
vg_name{ sysvg } \
. \
1 21000 10 ext3 \
$defaultignore{ } \
method{ lvm } device{ /dev/sdb } \
vg_name{ xen_vg } \
. \
2048 9000 2048 linux-swap \
$lvmok{ } method{ swap } format{ } \
in_vg{ sysvg } lv_name{ swap1 } \
. \
4096 10500 4096 ext3 \
$lvmok{ } method{ format } format{ } \
in_vg{ sysvg } lv_name{ root } \
filesystem{ ext3 } mountpoint{ / } \
. \
4063 8000 4065 ext3 \
$lvmok{ } method{ format } format{ } \
in_vg{ sysvg } lv_name{ var } \
filesystem{ ext3 } mountpoint{ /var } \
. \
This didn't quite do the right thing.
Desired layout:
/dev/sda - 512MB disk:
/dev/sda1 - /boot - 512MB
/dev/sdb - Rest of disk -
/dev/sdb1 - physical_volume for sysvg volume group ~ 10.7GB
/dev/sdb2 - pysical_volume for xen_vg volume group - Remaining amount of
disk
and the three LVs - root, var, swap, inside of sysvg
So, I can't seem to get this to work right. I tried to even just use
/dev/sdb alone, but I coulnd't get it to ignore /dev/sda, even when
partman/disk only says /dev/sdb.
The other (cheating to me, but doable) option is to use the
pre-partman-script to do the correct partitioning, and write a recipe to
simply use the correct partitions..but I don't see any documents on this.
The only, somewhat unhelpful, thing that I can contribute is that I've
only been able to use two disks with pressed when creating an mdraid
array. It hasn't worked for me either to add a second PV (even though
the device{ } value is specifically mentioned in the LVM section of
the documentation) or to have /usr and/or /var on a second disk.
--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive:
http://lists.debian.org/CAOdo=swuppw5-etbhx3cohcuezb7_apdfdl+dzdaaegu5-e...@mail.gmail.com
En Junio XII Congreso Ciencia y Espiritu en Madrid
XII Congreso Ciencia y Espíritu - Madrid 9 y 10 de Junio de 2012 - El conocimiento y la conciencia, claves para trascender el fin de los tiempos. SABADO 09 DE JUNIO 9:00 Entrega de acreditaciones 9:50 Apertura de la XII Edición de Ciencia y Espíritu por Miguel Celades 10:00 Danza con Clara Bueno 10:10 Ángel Lafuente con la charla: La Muerte: La Gran Consejera 11:00 Javier Pérez Nieto con la charla: Tratactus Magicae 12:00 Pausa 12:40 Victor Brossa con la charla: Integración 13:40 Xavier Pedro y Blanca con la charla: Egipto: En busca de la sabiduria perdida 14:40 Pausa para comer 16:00 Danza con Clara Bueno 16:10 Clara Bueno con la charla: La Conexión con tu Ser Universal a través del cuerpo 16:30 Fulgencia León Alegría con la charla: Revelaciones Sobrenaturales 17:20 Pausa 18:20 Vicente Fuentes con la charla: El misterio de los circulos de las cosechas 19:20 Enrique de Vicente con la charla: 2012: El fin del Quinto Sol 20:20 Fin de la jornada DOMINGO 10 DE JUNIO 10:00 Apertura del Congreso. Actuación musical del Duo a el niño con Santi Ibarretxe y Fran Rubio 10:10 José Luís Tejero García con la charla: Energia libre. El desconocido que nos rodea 11:00 Albert Ronald Morales con la charla: La importancia de una alimentación sana para el cambio de conciencia 12:00 Pausa 12:30 Josep Pàmies con la charla: Plantas prohibidas para curar enfermedades graves 13:30 Antonio Ortega con la charla: Con Ciencia y Espíritu: La verdadera Revolución está en tu plato 14:30 Pausa para comer 16:00 Actuación musical del Duo a el niño con Santi Ibarretxe y Fran Rubio 16:20 Pilar Baselga con la charla: Estética Nazi en la cultura actual 17:20 Diana Castillo con la charla: Porque hicieron el 11-S , y porque sus planes van a fracasar 18:20 Pausa 18:40 Coronel Diego Camacho con la charla: Causas del Fracaso de la Transición Española 19:40 Felix Rodrigo Mora con la charla: Aniquilación de la virtud y deshumanización. Denuncia y esbozo de contraofensiva 20:40 Cierre de la jornada Ponentes: Ángel Lafuente Javier Pérez Nieto Victor Brossa Xavier Pedro y Blanca
Re: Re: How /etc/hosts.allow /etc/hosts.deny and smb.conf play along
Thanks for clearing this up Juan and Shawn. I noticed I could change smbd to run in inetd mode if I flip the switch in /etc/default/samba, but I don't known how this would improve things, eventually create new drawback in cifs performance ... so I'll keep it as it is with additional smb.conf entries + daemon mode. The server is behind a router/firewall, it should be safe as it is. On 26.04.2012 12:54, shawn wilson wrote: Juan is correct. However my two cents - don't rely on hosts.allow and hosts.deny for anything. Just use iptables rules to do this type of thing. Also, most don't consider samba to be a very secure service (last CVE was only a few weeks ago) so be very careful with this service. On Apr 26, 2012 5:37 AM, Juan Sierra Pons juan@elsotanillo.netwrote I think the problem here is between tcpwrapper linux implementation and the the samba package. Are you running samba as a daemon or from then inetd? I think you are running it as a daemon and I believe (check on the internet) samba must be compiled in a tcpwrapper friendly way (I don't know if this is the default) Running samba from inetd must work OK as inetd is tcpwrapper friendly. If this doesn't help you you can try iptables (but your workaround is OK too) -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/blu0-smtp43485cca6a02a0ab00e9db0d8...@phx.gbl
Re: Re: How /etc/hosts.allow /etc/hosts.deny and smb.conf play along
Hello Clive Thanks for pointing me to to ipcalc, I noticed smb.conf has a commented entry for 127.0.0.0/8 This would cover the whole local subnet: HostMin: 127.0.0.1 HostMax: 127.255.255.254 Does it make sense to cover more than 127.0.0.1 and 127.0.1.1 in /etc/hosts.allow ? I don't know of any service using any other than those two addresses. First one is localhost, the other one should be there for X-server compatibility. On 26.04.2012 13:34, Clive Standbridge wrote: Not sure about that. You can check it with ipcalc (in the ipcalc package): -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/blu0-smtp309396095e191daf6778aa5d8...@phx.gbl
Installing the MBR on a new Hard Drive
I have made a copy of the / file system from the boot drive on a Debian Squeeze system to a new flash drive as the original drive is about 13 years old, works fine, but I don't want to push my luck too far. I used fdisk to format the new drive, made Partition 1 bootable and then used rsync to copy all the files one can from the old drive to the new one. It came time to install a MBR on the new drive so I found some instructions which raise a question. I know you are supposed to copy the image of a boot floppy to the first 446 bytes of the new drive which is what I did. This is done by # dd if=/dev/hda of=/dev/sdb bs=446 count=1 It appears to have worked but I have not yet installed the drive in the system and booted from it but there was also an alternative instruction: # dd if=/dev/hda of=/dev/sdb bs=512 count=2 What, besides the obvious fact that one is copying more bytes, is the difference between copying just the MBR and copying the 1024 bytes? Was this even necessary since I had already made fdisk set Partition 1 bootable before doing mkfs? For anybody interested in doing this, make sure you know your drive device designations as they will be different than what I used in this example and you could really mess up your day if you don't be careful. Martin McCormick -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201204261358.q3qdwn2j028...@x.it.okstate.edu
Installing the MBR on a new Hard Drive
I have made a copy of the / file system from the boot drive on a Debian Squeeze system to a new flash drive as the original drive is about 13 years old, works fine, but I don't want to push my luck too far. I used fdisk to format the new drive, made Partition 1 bootable and then used rsync to copy all the files one can from the old drive to the new one. It came time to install a MBR on the new drive so I found some instructions which raise a question. I know you are supposed to copy the image of a boot floppy to the first 446 bytes of the new drive which is what I did. This is done by # dd if=/dev/hda of=/dev/sdb bs=446 count=1 It appears to have worked but I have not yet installed the drive in the system and booted from it but there was also an alternative instruction: # dd if=/dev/hda of=/dev/sdb bs=512 count=2 What, besides the obvious fact that one is copying more bytes, is the difference between copying just the MBR and copying the 1024 bytes? Was this even necessary since I had already made fdisk set Partition 1 bootable before doing mkfs? For anybody interested in doing this, make sure you know your drive device designations as they will be different than what I used in this example and you could really mess up your day if you don't be careful. Martin McCormick -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201204261402.q3qe23lz028...@x.it.okstate.edu
Re: Installing the MBR on a new Hard Drive
Very sorry for the duplicate posting. It looked like the first attempt bounced so I re-sent it and both worked. Martin -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201204261428.q3qeshgi028...@x.it.okstate.edu
Re: Installing the MBR on a new Hard Drive
On 26/04/12 10:02 AM, Martin McCormick wrote: I have made a copy of the / file system from the boot drive on a Debian Squeeze system to a new flash drive as the original drive is about 13 years old, works fine, but I don't want to push my luck too far. I used fdisk to format the new drive, made Partition 1 bootable and then used rsync to copy all the files one can from the old drive to the new one. It came time to install a MBR on the new drive so I found some instructions which raise a question. I know you are supposed to copy the image of a boot floppy to the first 446 bytes of the new drive which is what I did. This is done by # dd if=/dev/hda of=/dev/sdb bs=446 count=1 It appears to have worked but I have not yet installed the drive in the system and booted from it but there was also an alternative instruction: # dd if=/dev/hda of=/dev/sdb bs=512 count=2 What, besides the obvious fact that one is copying more bytes, is the difference between copying just the MBR and copying the 1024 bytes? Was this even necessary since I had already made fdisk set Partition 1 bootable before doing mkfs? For anybody interested in doing this, make sure you know your drive device designations as they will be different than what I used in this example and you could really mess up your day if you don't be careful. Martin McCormick Personally, I'd just dd the entire old disk to the new one. Then use gparted (from a live distro) to resize your partitions. However, since you have already done it differently, you don't need to dd the mbr. Instead, install grub on the new drive (again, boot from a live distro). Create a chroot environment for your new / partition and install grub from it. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f995da9.5010...@rogers.com
Re: Backup backup backup -- sound problem SOLVED using a backup
Sian Mountbatten poenik...@fastmail.co.uk wrote: I was playing a music track while using XBMC when suddenly the sound stopped. I tried everything I could to restore sound. None of my multimedia programs produced sound. Even speaker-test produced nothing. I tried rebooting, purge xbmc from the system: nothing. Well, this morning, I unpacked my latest backup of my directory tree into /var/tmp and issued the command diff -q -u -r /home/sian /var/tmp/home/sian /tmp/sian.diff The command ran for a few seconds. Looking at /tmp/sian.diff showed no obvious reason why I no longer had sound. So, I logged out of KDE4 Plasma Desktop, keyed Ctrl-Alt-F1 and, at the VT, logged in as root. Then I issued the commands init 3# that stopped kdm and X rm -rf /home/sian # deleted all my files rm -rf /var/tmp/home # deleted the files I had put into /var/tmp tar -xjf /opt/cdrw/bd21319-04-25/Phoenicia.sian.tar.bz2 --directory / # That tar command extracted all the files from the backup and put them # into their proper places (each file was preceded by home/sian because # tar removes the initial / I then did the usual sid upgrade commands: apt-get update apt-get dist-upgrade reboot After the reboot, I logged in and ran speaker-test: speaker-test -tsine -c2 Sound from both speakers! played some music using Deadbeef (Audio player) So there you are: a backup saved my bacon. Without knowing the cause of the original problem one cannot really call it solved though... Or am I missing something? -- ❤ ♫ ❤ ♫ ❤ ♫ ❤ Indulekha -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120426145447.GA12153@radhesyama
Re: Backup backup backup -- sound problem SOLVED using a backup
Indulekha wrote: Without knowing the cause of the original problem one cannot really call it solved though... Or am I missing something? I think I remember him saying he had 'been messing around' before losing his sound; so for him the problem is solved, i.e. he has his system back where it was, before he broke it. -- Sent from Free Open Source Software Debian GNU/Linux -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f9968b0.90...@gmail.com
May Classes and Workshops by Women in Tech and Startup Saturdays
Here is a list of upcoming classes by Startup Saturdays and Women in Tech: Apache Tomcat Class What: 2 day Tomcat training When: Monday and Tuesday April 30th and May 1st - 2012 Time: 9:00 AM – 5:00 PM (each day) Where: Executive Hotel Vintage Court - San Francisco Link: http://eventbrite.us4.list-manage.com/track/click?u=423b86ed8af1e4757d5bc864bid=5e35280c4ae=dd9664bf98 Startup Finance: Valuation What: 2 hour class on Startup Valuation When: Wednesday, May 2nd 2012 Time: 6:30 PM – 8:30 PM Where: Sandbox Suites – 567 Sutter Street San Francisco Link: http://eventbrite.us4.list-manage.com/track/click?u=423b86ed8af1e4757d5bc864bid=1993994a50e=dd9664bf98 ~~~ iPhone and iPad App Development Boot Camp What: 3 day iPhone and iPad Application Development Class When: Thursday, Friday and Saturday May 3rd, 4th and 5th - 2012 Time: 9:00 AM - 5:00 PM - each day Where: Executive Hotel Vintage Court - San Francisco Link: http://eventbrite.us4.list-manage1.com/track/click?u=423b86ed8af1e4757d5bc864bid=d25646edc2e=dd9664bf98 ~~~ Mobile App Development Boot Camp What: 2 day Mobile App Development Boot Camp When: Monday and Tuesday May 7th and 8th – 2012 Time: 9:00 AM - 5:00 PM - each day Where: Executive Hotel Vintage Court - San Francisco Link: http://eventbrite.us4.list-manage1.com/track/click?u=423b86ed8af1e4757d5bc864bid=8c288680aae=dd9664bf98 ~~~ Android Application Development Class What: 3 day Android application development class When: Wednesday, Thursday and Friday May 9th, 10th and 11th – 2012 Time: 9:00 AM – 5:00 PM each day Where: Executive Hotel Vintage Court - San Francisco Link: http://eventbrite.us4.list-manage.com/track/click?u=423b86ed8af1e4757d5bc864bid=8f43487446e=dd9664bf98 ~~~ Modeling Black–Scholes What: 4 hour class on modeling Black-Scholes When: Saturday, May 12th – 2012 Time: 1:00 PM – 5:00 PM Where: Sandbox Suites – 567 Sutter Street San Francisco Link: http://eventbrite.us4.list-manage2.com/track/click?u=423b86ed8af1e4757d5bc864bid=2c8910d352e=dd9664bf98 ~~~ HTML 5 Application Development Class What: 2 day HTML5 Application development class When: Monday and Tuesday May 14th and 15th – 2012 Time: 9:00 AM – 5:00 PM each day Where: Executive Hotel Vintage Court - San Francisco Link: http://eventbrite.us4.list-manage.com/track/click?u=423b86ed8af1e4757d5bc864bid=4f78562201e=dd9664bf98 ~~~ Startup Finance: Valuation What: 2 hour class on how to value a startup When: Wednesday – May 16th 2012 Time: 6:30 PM – 8:30 PM Where: Sandbox Suites – 567 Sutter Street San Francisco Link: http://eventbrite.us4.list-manage.com/track/click?u=423b86ed8af1e4757d5bc864bid=5b2955c992e=dd9664bf98 ~~~ iPhone and iPad Application Development Class What: 3 day iPhone and iPad application development training When: Thursday, Friday and Saturday May 17th, 18th and 19th – 2012 Time: 9:00 AM – 5:00 PM each day Where: Executive Hotel Vintage Court - San Francisco Link: http://eventbrite.us4.list-manage.com/track/click?u=423b86ed8af1e4757d5bc864bid=73d1a97f42e=dd9664bf98 ~~~ Press Release Workshop What: 4 hour workshop on making a successful press release When: Saturday, May 19th – 2012 Time: 1:00 PM – 5:00 PM Where: Sandbox Suites – 567 Sutter Street San Francisco Link: http://eventbrite.us4.list-manage.com/track/click?u=423b86ed8af1e4757d5bc864bid=949b32eebee=dd9664bf98 ~~~ Mobile App Development Boot Camp What: 2 day mobile application development training When: Monday and Tuesday May 21st and 22nd – 2012 Time: 9:00 AM – 5:00 PM each day Where: Executive Hotel Vintage Court - San Francisco Link: http://eventbrite.us4.list-manage.com/track/click?u=423b86ed8af1e4757d5bc864bid=3f6f8b4458e=dd9664bf98 ~~~ Android Application Development Class What: 3 day Android application development class When: Wednesday, Thursday and Friday May 23rd, 24th and 25th – 2012 Time: 9:00 AM – 5:00 PM each day Where: Executive Hotel Vintage Court - San Francisco Link: http://eventbrite.us4.list-manage.com/track/click?u=423b86ed8af1e4757d5bc864bid=4ad272fc57e=dd9664bf98 ~~~ Press Release Workshop What: 4 hour workshop on making a successful press release When: Saturday, May 26th – 2012 Time: 1:00 PM – 5:00 PM Where: Sandbox Suites – 567 Sutter Street San Francisco Link: http://eventbrite.us4.list-manage2.com/track/click?u=423b86ed8af1e4757d5bc864bid=432dc79ecfe=dd9664bf98 ~~~ Apache Tomcat Class What: 2 day Tomcat training When: Monday and Tuesday May 28th and 29th - 2012 Time: 9:00 AM – 5:00 PM (each day) Where: Executive Hotel Vintage Court - San Francisco Link: http://eventbrite.us4.list-manage.com/track/click?u=423b86ed8af1e4757d5bc864bid=f592c1b504e=dd9664bf98 ~~~ jQuery class What: 2 day jQuery training When: Wednesday and Thursday May 30th and 31st – 2012 Time: 9:00 AM – 5:00 PM (each day) Where: Executive Hotel Vintage Court - San Francisco Link: http://eventbrite.us4.list-manage1.com/track/click?u=423b86ed8af1e4757d5bc864bid=67ad8b06e0e=dd9664bf98 ~~~ For a complete list of our events:
Re: Partman-Auto - Multi-Disk OR Use Existing Layout via Preseed
Well, that's at least comforting to know that I'm not crazy. :)
I wish there was an easy way to get the partitioner code from FAI into
d-i. They use parted on the backend as well, but their syntax is a lot
simpler, and supports multiple disks. I just can't bring myself to go
the whole FAI route just because partitioning doesn't work the way I'd
like. I am going to try something hacky but not that bad, and see if I
can get this to work:
Explicitly say the volume group for sysvg is 10GBs. Define the LVs
inside there. Define an additional unused partition to fill the disk.
In post, remove the extra partition from sdb, copy everything in /boot
to /dev/sda1, and reinstall grub. That should work.
-Matt
On 04/26/2012 08:50 AM, Tom H wrote:
The only, somewhat unhelpful, thing that I can contribute is that I've
only been able to use two disks with pressed when creating an mdraid
array. It hasn't worked for me either to add a second PV (even though
the device{ } value is specifically mentioned in the LVM section of
the documentation) or to have /usr and/or /var on a second disk.
--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4f9988e4.6070...@appnexus.com
Re: Problem with resolution on Radeon HD 7459 card (Squeeze)
On Thu, 26 Apr 2012 12:32:51 +0900, Han wrote in message CADZ+JBqkCEZ17Jgb0SXRDF+6pB057bAm+ebBUpAU-=zxkgo...@mail.gmail.com: ..what happens if you try the radeon driver from backports? Or dist-upgrade to wheezy? Well, if I change the word fglrx in my xorg.conf to radeon or radeonhd, it gives me a black console. Actually, I was running wheezy on my machine, until X window system crashed after my recent upgrade of the system including the package xwindow-xorg-video-ati. ..you filed a bug on this??? So, I am skeptical about the possibility that the problem will be solved by upgrading to wheezy. ..ok, I use Sid and the guys fix my bug reps fairly quickly. My machine is now set-up for dual-boot on wheezy and squeeze, and I am now trying to set up squeeze. ..that means you wanna have a new card on an old distro. ..I'd like to see your /var/log/Xorg.0.log errors when you boot wheezy without the quiet appended to the kernel commandline, easiest way is erase it from the grub menu entry before you boot, and using the radeon driver, and KMS. Thanks to the help of the community, I can now use the machine OK, but this slow redrawing of the window and the window pane is rather annoying. ..for benchmarking, install torcs and flightgear and tell me your framerates. ..on my M56GL [Mobility FireGL V5200] in a Fujitsu-Siemens Celsius H240 at 1920x1200x32bpp@60Hz, radeon and KDE-4.7.4: Windowed torcs, 19.48 to 20.32fps Full screen game mode torcs 29.6 to 30.2fps Full screen Flightgear 2.6.0: 5 to 30fps depending on how much eye candy I pile up on it. -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120426201732.35006...@celsius.lan
What kind of digital video camera
Hello, I am about to purchase my very first digital video camera. I have never bought this kind of hardware before, and as a KDE user, I'd like to enquire what the linux community would recommend. I want a low-to-mid range camera (up to $500, more only if specific features are worth the price difference). What specs should I pay attention to? Storage? Generally speaking, how is the linux support for digital video camera? What about kdenlive support? Thanks, Augustin. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201204270244.19749.beginner2...@masquilier.org
Re: What kind of digital video camera
Augustin wrote: Hello, I am about to purchase my very first digital video camera. I have never bought this kind of hardware before, and as a KDE user, I'd like to enquire what the linux community would recommend. I want a low-to-mid range camera (up to $500, more only if specific features are worth the price difference). What specs should I pay attention to? Storage? Generally speaking, how is the linux support for digital video camera? What about kdenlive support? Thanks, Augustin. I have a JVC video camera that uses sdhc cards a Lumix bridge camera that also uses sdhc cards. Both are from the lower to mid price range will do more than I need from them. Both have a large zoom range, can go in for close ups. First make a note of what you want, then make a note of cameras that offer that, then go look/try the cameras. -- Sent from Free Open Source Software Debian GNU/Linux -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f99a5a5.7000...@gmail.com
Re: Backup backup backup -- sound problem SOLVED using a backup
On 26/04/12 16:10, Indulekha wrote: Sian Mountbattenpoenik...@fastmail.co.uk wrote: Without knowing the cause of the original problem one cannot really call it solved though... Or am I missing something? I was doing something with xbmc (just trying things out), but why it muted sound is beyond me. Because I'm willing to use DeadBeef for playing music and Kaffeine for Digital TV and DVDs, I don't really need xbmc. So I'll steer clear of it. -- Sian Mountbatten ex-Algol 68 specialist -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/jnc816$6ag$1...@speranza.aioe.org
Re: Is 1600x1200 screen better than 1440x900? YES
On 25/04/12 15:30, Camaleón wrote: On Tue, 24 Apr 2012 18:39:54 +0100, Sian Mountbatten wrote: When I replaced my desktop with a new computer, I kept my TFT screen. It has the non-standard size of 1440x900. Recently, I have been wondering if it would be better for me to have 1600x1200 screen. Would this be better for Linux software? What about HD TV? And movies? Any comments welcome A higher resolution provides you with additional space to locate windows or viewing more content in them. I will pay additional €€€ for that, it's worth of it, IMO, and not for the software (HD and videos will be accomodated to fit whatever resolution you have) but for you :-) Greetings, Well, I was asking my friendly computer consultant something about networking and spotted a large screen on the shelf. It was an iiyama ProLite E2208HDD. Just unboxed and definitely new. The asking price was £125 which I thought reasonable since that obviously included delivery. Removed my 1440x900 monitor, connected up the 1920x1080 monitor using the same cables (mains and DVI-D) and now I have an excellent screen: more space on-screen, sharp letters and the HD TV is truly excellent. This is the best reproduction I've ever had. Definitely a good buy. -- Sian Mountbatten ex-Algol 68 specialist -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/jnc89g$6tv$1...@speranza.aioe.org
Re: Installing the MBR on a new Hard Drive
Gary Dale writes: Personally, I'd just dd the entire old disk to the new one. Then use gparted (from a live distro) to resize your partitions. Actually, that is probably the best solution. I did that on a previous disk several months ago and it worked fine However, since you have already done it differently, you don't need to dd the mbr. Instead, install grub on the new drive (again, boot from a live distro). Create a chroot environment for your new / partition and install grub from it. Thanks for the good suggestions. I have one more old system that needs a new boot drive so I will probably dd that one and then resize as the new drives are about 5 gigabytes larger. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201204262011.q3qkbhe8030...@x.it.okstate.edu
Re: What kind of digital video camera
On 2012-04-27 02:44:19, Augustin wrote: I am about to purchase my very first digital video camera. I have never bought this kind of hardware before, and as a KDE user, I'd like to enquire what the linux community would recommend. I want a low-to-mid range camera (up to $500, more only if specific features are worth the price difference). We purchased a Canon Vixia HF200 a while back. It records AVCHD format to .mts files, but both ffmpeg and mplayer had problems converting to formats suitable for editing (audio/video sync, or resulting video would be at 5x the speed or something). Not sure if things have changed for the better. I have tried the video editors in stable, and the ones in multi-media (with the exception for Blender, there is no way I can teach my wife to use that). They either did not work well, or were unstable. Kino was the best of the lot. It only works with .dv files so you have a lengthy conversion step, and the editor usually crashes during use. As for specs I would look for 1080p, obtain a sample file, and make sure you edit it. I like external memory cards for storage, and then it becomes becomes (size of card) / (size of file per minute) and then you figure out how many minutes you need on a card. If things change you get another card. Finally, I am into photography, and the DSLRs have or are getting HD video support. You may want to at least consider this before going for a dedicated video camera. Smart phones have video if quality is less important. /Allan -- Allan Wind Life Integrity, LLC http://lifeintegrity.com -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120426194927.ga11...@lifeintegrity.com
Anyway of keeping gnome2 while upgrading from Squeeze to Wheezy
Hello, I want to update from Squeeze to Wheezy but want to avoid Gnome 3 at all costs, is there a way of doing this successfully? Thanks James -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f99bb0e.8000...@googlemail.com
Re: ..solved: two video cards on Squeeze
Rob Owens wrote: Actually, I now need to figure out how to make the two screens act as one. Currently, I can open applications on either screen but I can't, for instance, drag an application from one screen to the other. I'm not sure if I can do that with separate video cards, though. In Squeeze the support for dual monitors changed. It is no longer in the configuration file, although it can be optionally placed there. Now multiple monitor a userland operation using the xrandr interface. This is nice actually and allows useful scripted configurations. Use the 'xrandr --query' to print attached device information and then use the device information to specify where the monitors are placed in the larger logical screen. I have the following in my init files. I will avoid mentioning the file I am using because I doubt you are launching the same way and it would just cause confusion. But this is how I turn on dual monitor support these days. if xrandr --query | grep -q HDMI2; then xrandr --auto --output HDMI2 --right-of HDMI1 fi Bob signature.asc Description: Digital signature
Re: 2 users on desktop, should be one right?
Stephen Allen wrote: Joe wrote: Doesn't do it for me, I'm just seeing the pts entry. Joe, are you on SID? Joe is probably on Sid where this bug is still active: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659957 It should be logging this information to the utmp but doesn't. There have been several duplicate bug reports filed against this. Squeeze behaves normally with a user logged into tty7 as reported. Bob signature.asc Description: Digital signature
Re: Anyway of keeping gnome2 while upgrading from Squeeze to Wheezy
Le 26 avril 2012 17:15, James Allsopp jamesaalls...@googlemail.com a écrit : Hello, I want to update from Squeeze to Wheezy but want to avoid Gnome 3 at all costs, is there a way of doing this successfully? Thanks James -- To UNSUBSCRIBE, email to debian-user-REQUEST@lists.**debian.orgdebian-user-requ...@lists.debian.orgwith a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/**4F99BB0E.8000109@googlemail.**comhttp://lists.debian.org/4f99bb0e.8000...@googlemail.com You could just put on hold all the gnome2 packages, but it is not a viable solution.
Re: iptables service with debian
On Thu, 26 Apr 2012 14:13:28 +0500 Muhammad Yousuf Khan sir...@gmail.com wrote: i run this command iptables -t nat -A POSTROUTING -o eth1 -d 8.8.4.4 -j MASQUERADE my client computers able to ping 8.8.4.4 but when i iptables --flush -t nat it clrear the table but my client can still ping the destination. i check iptables-save is shows that tables are empty. i thought that there could be some kind of service related to iptable in /etc/init.d folder so that i can restart that but there are none. and i notices after 5 minutes or so my clients computer were not able to ping which means my commands affects after 5 minutes. but i want prompt effect of every iptable command. is there any thing that can be done in this regard ? pls help one more thing what could be done to retain all the iptable statements even after reboot. i think writing all the iptables command in rc.local is not a good idea. it is work around. can any one plz help in this regard also. Iptables commands do work instantly, but state table entries may not disappear until after their timeout. It has already been pointed out that the MASQUERADE target is not appropriate for access control, so you should not be too concerned if it does not work as you expect. If you were to delete a real iptables access rule, there would be no delay. I use iptables and its logging fairly regularly for troubleshooting, which involves altering and repositioning rules to see what's going on, and I know there is no delay after reloading the rules tables. If you type an extra rule at a command prompt, it will work the instant you hit return, assuming you have it right and it doesn't conflict with what is already there. It's easier to add it to the script in the right place, and reload the rules tables. The usual way to organise iptables rules is to have a script that runs as part of the boot sequence, usually also checking for the correct modules, starting IP forwarding, etc. It isn't a workaround to run it from an rc, how else do you think things are started on boot? If you want something that looks like a daemon, it's not too hard to make a start-stop script that will load and flush the iptables rules, check which ruleset if any is currently running and generally work as a pseudo-service. It's not something that Debian supplies, as a lot of people prefer to use firewall applications rather than deal with raw iptables rules. -- Joe -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120426223825.498d0...@jretrading.com
debian 6.0.4 DVD #2
I installed debian 6.0.4 DVD #1 and it is working fine. Later I downloaded iso's #2 and 3. Tried to boot up #2 iso, won't boot up. How do I install 2 and 3? jozien -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f99c4ae.5020...@comcast.net
[Solved ?] Re: fsck forced when using /sbin/shutdown
On Mon, 2012-04-23 at 20:43 +, Camaleón wrote: [...] Mmm... what worries me is why an fsck is even needed just because a non- vital application is not being closed gracefully on shutdown, that's not something I would consider worth for a fsck :-? Steven, have you considered a hardware related problem? Just in case, running smartctl over the disk that holds the partition won't hurt. I checked the drive with gsmartcontrol, no errors found. The problem hasn't occurred with normal use for the past 2 days, so I assume an update fixed it. Kind regards, Steven signature.asc Description: This is a digitally signed message part
Re: debian 6.0.4 DVD #2
I think that isos #2 and #3 are for getting packages from, not booting. So if your /etc/apt/sources.list does not point to a repository on the net, and you try to install a package, the system will prompt you to insert one of those dvds. That is my guess only, because i was really floundering around installing debian 6.0.4 and it kept asking me to insert the dvd #2 (iirc). (This was before Bob P on this group showed me how to fix up my situation.) Anybody who spots anything incorrect in this message, please correct me!!! dan On Thu, Apr 26, 2012 at 2:57 PM, Joe Zien joz...@comcast.net wrote: I installed debian 6.0.4 DVD #1 and it is working fine. Later I downloaded iso's #2 and 3. Tried to boot up #2 iso, won't boot up. How do I install 2 and 3? jozien -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f99c4ae.5020...@comcast.net -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAOphizLeBRMhxEn4JLmX-G2k_pVhgqJvxHLmikpG=widevi...@mail.gmail.com
Re: 2 users on desktop, should be one right?
On Thu, 26 Apr 2012 14:42:17 -0600 Bob Proulx b...@proulx.com wrote: Stephen Allen wrote: Joe wrote: Doesn't do it for me, I'm just seeing the pts entry. Joe, are you on SID? Yes. Joe is probably on Sid where this bug is still active: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659957 It should be logging this information to the utmp but doesn't. There have been several duplicate bug reports filed against this. Squeeze behaves normally with a user logged into tty7 as reported. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120427001500.73ade...@jretrading.com
Logging question
I have a machine that is locking up every few days. It doesn't seem to be doing much when it happens, nor do I see anything in the syslog or messages files. Is there any way to enable extra logging to try to catch what is going wrong? Thanks. -- clet debian is my main squeeze -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/86376538.854.1335481850857.JavaMail.sas1@172.29.249.242
Re: debian 6.0.4 DVD #2
On Thu, Apr 26, 2012 at 2:57 PM, Joe Zienjoz...@comcast.net wrote: I installed debian 6.0.4 DVD #1 and it is working fine. Later I downloaded iso's #2 and 3. Tried to boot up #2 iso, won't boot up. How do I install 2 and 3? On 26/04/12 23:28, Dan Hitt wrote: I think that isos #2 and #3 are for getting packages from, not booting. So if your /etc/apt/sources.list does not point to a repository on the net, and you try to install a package, the system will prompt you to insert one of those dvds. That is my guess only, because i was really floundering around installing debian 6.0.4 and it kept asking me to insert the dvd #2 (iirc). (This was before Bob P on this group showed me how to fix up my situation.) Anybody who spots anything incorrect in this message, please correct me!!! You are correct :-) However the system will need to know what is on the DVD before it can know to ask for it, and (unless it has changed since last time I used CD/DVDs), that is done by putting the DVD (or CD) in the drive and running 'apt-cdrom add' (without the quotes) as root. That will read the label of the disc and check and index the contents. Nowadays though, the preferred method for ijnstalling Debian (if you have a reasonable network connection), is to download and install from one of the small netboot CD imagesa, then download only the packages you require directly from one of the Debian mirrors. This will save a lot of time and ensure you have the current versions of everything. I realise that not every computer has a suitable connection to the internet though, which is why the full set of CD and DVD images are made available - even though very few people will really need the full set. -- Dom -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4f9a28fb.8020...@rpdom.net
