Re: Have I been hacked?

2015-01-13 Thread Bob Proulx
Danny wrote:
 least myself) forgot about ...  and that is the importance of
 choosing a proper username ...
 ...
 So ... if I know the username I am already halfway there ... I just
 need to get the OTHER remainig 50% (by breaking the password)

Trying to hide in an unusual username is obscurity not security.  You
may have heard the term that obscurity is not security.

 Someone also mentioned black-hats ... I think that black-hats are a necessary
 evil ... just like lawyers ;) ...

I think you are misunderstanding the use of the term.

  https://en.wikipedia.org/wiki/Hacker_(computer_security)#Black_hat

Bob


signature.asc
Description: Digital signature


Re: Have I been hacked?

2015-01-13 Thread Bob Proulx
Gene Heskett wrote:
 10 characters is entirely within the realm of being solved by john in a 
 surprisingly sort time.

In order to use john you will need to be running an offline attack
against an already exposed account database.  It doesn't work as an
online attack.

 But every character you add makes it job around 62 more times as
 difficult.  ANY password I am forced to use online, has an automatic
 minimum by my own rules of 18 chars, and it its acceptable on the
 other end, may be 23 or 24.

I use a unique password on every site.  I never reuse passwords.  If a
site is cracked open and the account data exposed so that someone can
run an offline attack against the password database then it only
affects that site and not others.

 Please be aware that your banking site may appear to accept a 24 char 
 password, but they will silently clip off the surplus above 12 or so.

I will shame Schwab again for silently truncating to 8 characters.

Bob


signature.asc
Description: Digital signature


Re: Have I been hacked?

2015-01-13 Thread Bob Proulx
Brian wrote:
 Seeing that my argument that enforcing (if it is possible) an
 unmemorable password is not in the best interests of security doesn't
 gain any tracton, let me try a different tack.
 
 The password
 
   TwasBrilligAndTheSlithyToves
 
 strikes me as a pretty good one for an ssh login. (I have capitalised
 some letters for readability, not to add complexity). Personally, I find
 it easy to remember and associate with ssh and my account. I cannot see
 why it is not a good password for me.

  Why passwords have never been weaker—and crackers have never been stronger
  http://arstechnica.com/security/2012/08/passwords-under-assault/

  Most importantly, a series of leaks over the past few years containing
  more than 100 million real-world passwords have provided crackers with
  important new insights about how people in different walks of life
  choose passwords on different sites or in different settings.  The
  ever-growing list of leaked passwords allows programmers to write
  rules that make cracking algorithms faster and more accurate; password
  attacks have become cut-and-paste exercises that even script kiddies
  can perform with ease.

To summarize the problem it is that you as a human are unique in the
universe, just like everyone else.  Analyzing 100 million passwords
exposes the human bias that you introduce that you don't realize you
are introducing.  It is big data removing the uniqueness and
reducing the search space.

I won't say that the technique you show above is a bad thing.  But the
current wisdom is that it isn't good enough anymore because after
analyzing millions of real world passwords, programs can now guess
what humans will do much of the time.  So what you really need is
something other than what a human would produce.

Bob


signature.asc
Description: Digital signature


Re: Find obsolete packages without using aptitude?

2015-01-13 Thread Bob Proulx
Fredrik Jonson wrote:
 Here's a small challenge. I'm trying to find obsolete or orphaned packages
 on a system that's been dist-upgraded.
 ...
 How would you accomplish that assuming you cannot use aptitude?

Try this:

  apt-show-versions | grep -v uptodate

Or read my answer posted here Saturday:

  https://lists.debian.org/debian-user/2015/01/msg00358.html

Bob


signature.asc
Description: Digital signature


Re:[Résolu] Changement de disque dur sur un ordinateur portable

2015-01-13 Thread MERLIN Philippe
J'ai fait l'opération avec succès, voilà ma méthode.
Avec Clonezilla live et GParted Live.
Le lundi 12 janvier 2015, 11:34:30 MERLIN Philippe a écrit :
 Bonjour,
 Voilà la problématique sur mon portable j'ai un disque dur de 250 Go, je
 voudrais le remplacer par un disque dur de 500 Go. Sur ce disque dur 
j'ai
 les systèmes MS Vista et Debian 8 Sid.
 Pour effectuer cette opération j'ai l'aide d'un disque dur Externe USB de 
1
 Go. J'envisage les étapes suivantes :
 1 avec Clonezilla Live  en[ Mode beginner]  faire une sauvegarde du 
disque 250 Go sur une
 partition du disque dur  externe, Clonezilla a l'avantage de vérifier sa
 sauvegarde.
Justement Ma première sauvegarde une des partitions sauvegardée est 
tombée en erreur, ne sachant pas faire une sauvegarde d'une seule 
partition et ne voulant pas tenter le diable, je l'ai recommencé 
intégralement
 2 Remplacer le disque 250 Go par le disque vierge 500 Go;
A partir de là, j'ai suivi un autre mode opératoire que j'ai découvert en 
cherchant sur Google il référençait un article dans VALOMBRE'S UBUNTU 
BLOG
intitulé Clonage de disque avec modification de tailles de partitions et 
multiboot : clonezilla
3 Utiliser Gparted Live pour tailler vos partitions sur le nouveau disque, 
attention toutes les partitions doivent être de taille égale ou supérieure 
aux partitions se trouvant sur l'ancien disque c'est très important si vous 
vous trompez la restauration ne se fera pas pour ces partitions et 
expérience vécue : une erreur de 500 Mo sur une partition m'a forcer a 
réutiliser Gparted et relancer l'opération restauration avec Clonezilla live.
4 utiliser Clonezilla Live en mode expert pour la restauration et utiliser 
l'option -k vous la trouverez dans les extras options cette option permet 
de recréer le MBR du disque sans modifier la table des partitions que vous 
venez de créer avec Gparted.
Clonezilla live restaure également Grub2.
Lorsque la restauration est effectuée. Il vous reste à tester l'ensemble 
pour moi cela a été un franc succès, je trouve que clonezilla est un produit 
très professionnel par contre je trouve également que la documentation 
et les exemples d'utilisation  sont trop succinctes

- 3 Restauration à l'aide de Clonezilla Live-.
- 4 Tester le bon Fonctionnement de Sid et Vista.-
 -5 Utlisé Gparted live pour redimensionner les partitions car Clonezilla-
- remet à l'identique.-
 Voilà les partitions actuels leur taille et l'ordre sur le disque ainsi que
 l'évolution envisagée :
 primaire sda1 NTFS 48,83 Go boot (Vista)---70 Go
 étendue sda5  5 Go swap  =5 Go
 étendue sda6 ext3 169,17 Go (Debian Sid)---330 Go
 primaire sda2 fat32 1 Go HP_Tools  =   1 Go
 primaire sda3 ntfs  9 Go  HP_RECOVERY  =   9 Go

 Philippe Merlin
P.S. : Le Clonezilla live a cependant un petit problème il descend le wifi de 
mon portable HP 6830S, la seule méthode actuellement que j'ai trouvé 
pour restaurer le wifi après être sorti de clonezilla c'est de faire une 
restauration Bios, surement une faiblesse du Bios mais comme 
l'ordinateur n'est plus maintenu par HP, peu d'espoir pour une correction.


Re: Fwd: Re: Have I been hacked?

2015-01-13 Thread Ric Moore

On 01/13/2015 05:34 AM, Gene Heskett wrote:

On Monday, January 12, 2015 11:54:54 PM Joel Rees did opine
And Gene did reply:

2015/01/13 5:04 Ric Moore wayward4...@gmail.com:

On 01/12/2015 11:50 AM, Jerry Stuckle wrote:

You should learn from some REAL security experts, not the internet.


Like who? There are compromises all over the net, with consumer
security


files lying in the open like gutted bleeding fish. I don't think
anyone is a REAL security expert, except the ones breaking in. Any
advances we have now is result of closing the barn doors after the
cow got out. I guess we owe the BlackHats that much. :/ Ric


Can I read you as saying that the black hats may be the closest thing
to security experts that we have?

I was thinking I agree.

But I also think we are letting them define security.

I keep forgetting that I don't like the definitions they seem to want
to impose on us.

Joel Rees


I'm with Ric on that. We seem to have lost our proactive attitude about
security. The net result is predictable in that the lunatics are now
running the asylum.

Hi Ric. :)


Hey Gene! They can't keep a good man down! Did Mandrake finally push up 
the lilies??


Of course I am not happy with the Blackhats defining security, but if it 
weren't for them doing their job no one else would. I am jealous that 
I don't have their brain power. Getting too old, missing a limb and 
waiting for a triple-bypass. I need some stem cells. Glad to see you 
here, Gene. :) Ric




--
My father, Victor Moore (Vic) used to say:
There are two Great Sins in the world...
..the Sin of Ignorance, and the Sin of Stupidity.
Only the former may be overcome. R.I.P. Dad.
Linux user# 44256


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/54b56554.2050...@gmail.com



Sendmail greeting delay

2015-01-13 Thread David Parker
Hello,

We have an SMTP server running Sendmail 8.14.4-4 on Debian 7 64-bit.  We're
using the file /etc/mail/access for access control and rate limiting, and
this is enabled via the following lines in /etc/mail/sendmail.cf:

Kaccess hash -TTMPF /etc/mail/access
# FEATURE(`access_db', `hash -TTMPF /etc/mail/access', `skip')dnl

For some reason, I just can't get it to not pause when greeting external
(non-localhost) connections.  I was testing SSL/TLS connectivity when I
discovered the delay, using openssl s_client -connect smtp-server:465.
If I run this command from the SMTP server, it connects and then prints all
of the SSL and certificate information immediately.  But if I test from
another PC on our network, it connects, pauses for 5 seconds, and then
prints the SSL information.

My /etc/mail/access file is pasted below.  The PC I'm testing from is on
the 10.x.x.x network, which should be allowed to connect with no delay.  I
have also tried setting the default GreetPause to 0 but it still made no
difference.


Connect:localhost RELAY
GreetPause:localhost 0
ClientRate:localhost 0
ClientConn:localhost 0
Connect:127 RELAY
GreetPause:127 0
ClientRate:127 0
ClientConn:127 0
Connect:IPv6:::1 RELAY
GreetPause:IPv6:::1 0
ClientRate:IPv6:::1 0
ClientConn:IPv6:::1 0
Connect:10 RELAY
GreetPause:10 0
ClientRate:10 0
ClientConn:10 0

# Defaults
Connect: REJECT
GreetPause: 5000
ClientRate: 10
ClientConn: 10

# Whitelisted users
Spam:postmaster@ FRIEND
Spam:abuse@ FRIEND
Spam:spam@ FRIEND

# Blacklisted users
reject@ REJECT

# Block invalid IPs
Connect:169.254 REJECT
Connect:192.0.2 REJECT
Connect:224 REJECT
Connect:255 REJECT


Any help would be greatly appreciated.  Thanks!

-- 
Dave Parker
Systems Administrator
Utica College
Integrated Information Technology Services
(315) 792-3229
Registered Linux User #408177


Re: Have I been hacked?

2015-01-13 Thread Gene Heskett
On Tuesday, January 13, 2015 12:13:19 PM Danny did opine
And Gene did reply:
 Hi,
 
 I have read with interest all the responses and followed all the
 links. However, I realized something that I think we all (well, at
 least myself) forgot about ... and that is the importance of choosing
 a proper username ...
 
 Authentication (usually) is a 2 step process ... as we all know ... a
 username and a password ... and since ssh is (mostly) referred to
 here ... we can accept that it is most definately a 2 step process
 ...
 
 So ... if I know the username I am already halfway there ... I just
 need to get the OTHER remainig 50% (by breaking the password) ... and
 (like someone mentioned) it will take immensely long for someone to
 break a 10 (I think it was 10) character password ... then why is the
 importance of a good username ignored ... if I have a (creepy)
 username of 10 characters it will take a black hat twice as long to
 get what he wants ... or am I misleading myself (and others) here ...
 are we not putting too much emphasis/pressure on a good password
 where the pressure could be spread between the username AND password
 ... just asking ...

10 characters is entirely within the realm of being solved by john in a 
surprisingly sort time.  But every character you add makes it job around 
62 more times as difficult.  ANY password I am forced to use online, has 
an automatic minimum by my own rules of 18 chars, and it its acceptable 
on the other end, may be 23 or 24.

Please be aware that your banking site may appear to accept a 24 char 
password, but they will silently clip off the surplus above 12 or so.
So your password is always wrong. In that case its best to get on the 
squawkbox with them so they can reset your access since most will lock 
you out for a day or more after 3 fails.  Then try again, stripping one 
character at a time off what you enter, until you find their idiotic 
smaller limit and it works.  Frankly it's a right Pain In The Ass. 

 Someone also mentioned black-hats ... I think that black-hats are a
 necessary evil ... just like lawyers ;) ... I understand some
 mechanical things better than others, like hydraulics and pneumatics
 ... mechanical engineering is no obstacle to me ... however ... I
 have difficulty in getting my head wrapped around things like squid,
 iptables, procmail, regexp ... some of you have no difficulty in any
 of these but have difficulty in mechanical stuff ... it is supposed
 to be like that ... when I think of black-hats I think of the green
 Matrix screen ... they are a special breed ... they see things that
 white hats don't see because it is their nature ... Just like car
 mechanics can tune/alter an engine so can black-hats tune alter a
 TCP/IP stream/payload ...
 
 Am I right in saying that there is actually nothing new when it comes
 to networking ... hear me out ... the internet (and most networks out
 there) still works on TCP/IP which is 40 odd years old (70's) ... a
 car mechanic only needs to know how an engine works ... you can bolt
 on many other things onto an engine and add a pletora of sensors to
 it but essentially it remains an engine ... if you understand the way
 an engine or an automatic/manual transmission works you can
 confidently service/overhaul any engine/transmission  because they
 all are made up of the same stuff and they all work the same ... and
 this is my point with TCP/IP ... EVERYTHING is dumped on top of
 TCP/IP ... yet it remains the same ... a black hat only needs to know
 TCP/IP in order to knock on your door ... once he knocked on your
 door it means that he has found you ... he knows you are there ...
 all he has to do is look at the Matrix screen ... am I making sense?
 ...
 
 Have a nice day
 
 Danny

Perfect sense Danny, but I have no clue if a new, potentially more secure 
method is in development.

Cheers, Gene Heskett
-- 
There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order.
-Ed Howdershelt (Author)
Genes Web page http://geneslinuxbox.net:6309/gene
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501131104.26321.ghesk...@wdtv.com



Re: Problem med att få igång nätvverket

2015-01-13 Thread Rolf Edlund

Den 2015-01-13 14:59, Sven Arvidsson skrev:

On Tue, 2015-01-13 at 10:10 +0100, Rolf Edlund wrote:

Har hämtat hem 7.8 och bränt den till en DVD skiva.

Min dator behöver firmware för att få igång nätverket. Så jag hämtade
hem filen firmware-nonfree_0.36+wheezy.1.tar.gz från sidan
https://packages.debian.org/wheezy/firmware-linux-nonfree, och la den på
ett USB minne.

Packade upp filen, och la filerna på ett USB minne. Vilket inte räckte.
Så jag plockade ut dom bibliotek som Debian letar efter och la dom i
roten på USB minnet.

Alltså /rtl_nick/* och /rtlwifi/*. Och startade om installationen, och
Debian hittade då filerna, men fel firmware. Så jag plockade bort alla
utom just dom som Debian letar efter. Startade på nytt om installationen.

Och dom rätta dök upp i installationen, Valde där att använda rtl_nic
som första val. Och installationen fortsatte. Men när den skulle stätta
upp dhcp, så sa installationen att min dator antagligen inte använder
dhcp, eller att det var något annat fel.

Kollade i dmesg, och såg att den inte hade hittat firmware för rtl_nic.
Men därimot hade den hittat rtlwifi filen, och laddat in den i minnet.
Har tyvärr inget wifi här.

Dessutom stog det att det inte fungerade så bra att använda UTF-8 på ett
USB minne.


Svårt att säga vad som gick fel, det hade underlättat om du berättar vad
det är för nätverkskort du försöker få igång, och med vilken firmware,
samt exakt vilka felmeddelanden du får (helst på engelska).


Hej Sven!

Nätverkskortet är det som sitter på mammabrädan. Kör jag lspci, så får 
jag fram:


01:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. 
RTL8101E/RTL8102E PCI Express Fast Ethernet controller (rev 05)


02:00.0 Network controller: Realtek Semiconductor Co., Ltd. RTL8188CE 
802.11b/g/n WiFi Adapter (rev 01)


Dom firmware som Debian frågar efter under installationen, är 
rtl_nic/rtl8105e-1.fw och rtlwifi/rtl8192cfw,bin. Bägge dom finns i 
firmware-linux-nonfree paketet.


Har just nu inte dom exakta felmeddelanden jag får i dmesg meddelandet. 
Men ska försöka fixa det till nästa gång jag provar.


Har inte kört igenom hela installationen med 7.8, utan stannat innan 
partioneringen och formateringen av hårddisken. Eftersom jag bara har en 
dator, så vill jag hellst inte sabba installation av disten jag använder 
nu, som ju funkar.


Körde igenom hela installationen på en äldre version av Wheezy. Kommer 
inte ihåg vilken version det var, men det kunde ha varit 7.5 eller något 
sådant. Efter installationen så startade Debian upp helt utan grafik. 
Utan jag fick köra allt från kommandopromtern.



Det skulle kunna vara så att det är någon skillnad på vilken firmware
kärnan i installationen behöver, och kärnan som faktiskt installeras och
körs efter installation. Kanske är det smidigast att installera utan
nätverk och installera firmware-paketet efteråt?


Skulle ju oxå kunna vara värt ett försök. Eller att testa med den 
netinstall version som har nonfree firmware inlagt från början.


Måste bara skaffa några CD skivor först. Brännaren som sitter i min 
laptop, känner inte igen dom CD skivor jag har. Det är sånna där NoNames 
skivor (vilket funkade i min förra dators brännare). Verbatim funkar 
däremot som dom ska. Det har jag testat.


Har läst att det brukar vara strul med Realtek nätvÄrkskort ?

Btw, det här med UTF-8 på USB minnet ?

--
/Rolf


--
To UNSUBSCRIBE, email to debian-user-swedish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54b559db.5010...@gmail.com



Re: Sendmail greeting delay

2015-01-13 Thread Burhan Hanoglu
On Tue, Jan 13, 2015 at 7:38 PM, David Parker dpar...@utica.edu wrote:

 Hello,

 We have an SMTP server running Sendmail 8.14.4-4 on Debian 7 64-bit.
 We're using the file /etc/mail/access for access control and rate limiting,
 and this is enabled via the following lines in /etc/mail/sendmail.cf:

 Kaccess hash -TTMPF /etc/mail/access
 # FEATURE(`access_db', `hash -TTMPF /etc/mail/access', `skip')dnl

 For some reason, I just can't get it to not pause when greeting external
 (non-localhost) connections.  I was testing SSL/TLS connectivity when I
 discovered the delay, using openssl s_client -connect smtp-server:465.
 If I run this command from the SMTP server, it connects and then prints all
 of the SSL and certificate information immediately.  But if I test from
 another PC on our network, it connects, pauses for 5 seconds, and then
 prints the SSL information.

 My /etc/mail/access file is pasted below.  The PC I'm testing from is on
 the 10.x.x.x network, which should be allowed to connect with no delay.  I
 have also tried setting the default GreetPause to 0 but it still made no
 difference.

 
 Connect:localhost RELAY
 GreetPause:localhost 0
 ClientRate:localhost 0
 ClientConn:localhost 0
 Connect:127 RELAY
 GreetPause:127 0
 ClientRate:127 0
 ClientConn:127 0
 Connect:IPv6:::1 RELAY
 GreetPause:IPv6:::1 0
 ClientRate:IPv6:::1 0
 ClientConn:IPv6:::1 0
 Connect:10 RELAY
 GreetPause:10 0
 ClientRate:10 0
 ClientConn:10 0

 # Defaults
 Connect: REJECT
 GreetPause: 5000
 ClientRate: 10
 ClientConn: 10

 # Whitelisted users
 Spam:postmaster@ FRIEND
 Spam:abuse@ FRIEND
 Spam:spam@ FRIEND

 # Blacklisted users
 reject@ REJECT

 # Block invalid IPs
 Connect:169.254 REJECT
 Connect:192.0.2 REJECT
 Connect:224 REJECT
 Connect:255 REJECT
 

 Any help would be greatly appreciated.  Thanks!


Hi Dave,

I'd add the IP address of that PC to /etc/hosts.allow on sendmail machine
to rule out TCP Wrappers...

Also; any chance something is doing reverse dns check?

Burhan


Find obsolete packages without using aptitude?

2015-01-13 Thread Fredrik Jonson
Hi All,

Here's a small challenge. I'm trying to find obsolete or orphaned packages
on a system that's been dist-upgraded. Aptitude can give me list with this
query:

 aptitude search ?obsolete

The definition of that query is: This term matches any installed package
which is not available in any version from any archive.. It has been
installed locally or installed from a repository that is not in apt's
sources.list.

How would you accomplish that assuming you cannot use aptitude?

I've tried various arguments to dpkg-query, couldn't find the right
selector.  The closest I get is using 'deborphan --all-packages -p 5'. Not
quite though, deborphan spuriously also identifies a few packages that are
not relevant.

BTW, should I report the latter as a bug? F.x. deborphan reports 'chrony' as
orphaned, but I installed it yesterday and it sure looks available.

-- 
Fredrik Jonson


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnmbaj3f.6d5.fred...@biggles.jonson.org



Re: unable to boot with systemd (works with sysvinit)

2015-01-13 Thread Ric Moore

On 01/13/2015 01:36 AM, Johannes Schauer wrote:

Hi,

Quoting Selim T. Erdoğan (2015-01-12 22:38:08)

On Sat, Jan 10, 2015 at 12:33:36PM +0100, Johannes Schauer wrote:

I'm unable to boot my laptop with systemd which worked before. I'm unable to
tell the changes I made since the last time it worked because according to my
uptime, the last time I rebooted was September last year.


I see you already have a bug report, so including it for the list:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758808


this is the right bug report. Downgrading to 204-14 fixes the problem I
encountered in my first email.

My apologies for not having supplied that bug report in my initial email. I
honestly forgot that I already faced the same problem in August last year.


I eventually just re-installed Jessie fresh. Never a problem afterwards. 
If something updates, nothing goes boom. I assume it's still not quite 
ready for the dist-upgrade style of install. At least that was my way of 
resolving any potential future problems, and it worked for metm

:) Ric



--
My father, Victor Moore (Vic) used to say:
There are two Great Sins in the world...
..the Sin of Ignorance, and the Sin of Stupidity.
Only the former may be overcome. R.I.P. Dad.
Linux user# 44256


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/54b568ce.9010...@gmail.com



Re: Sendmail greeting delay

2015-01-13 Thread Chris Davies
David Parker dpar...@utica.edu wrote:
 We have an SMTP server running Sendmail 8.14.4-4 on Debian 7 64-bit.

 Kaccess hash -TTMPF /etc/mail/access
 # FEATURE(`access_db', `hash -TTMPF /etc/mail/access', `skip')dnl

 For some reason, I just can't get it to not pause when greeting external
 (non-localhost) connections. [...]
 if I test from another PC on our network, it connects, pauses for 5
 seconds, and then prints the SSL information.

Does your PC have an rDNS entry, and if not could this delay be a DNS
lookup timeout?

Chris


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/rfqdobx8se@news.roaima.co.uk



Re: Sendmail greeting delay

2015-01-13 Thread Joe
On Tue, 13 Jan 2015 14:27:42 -0500
David Parker dpar...@utica.edu wrote:

 Thanks for the replies.
 
 The system is not using tcpwrappers, and it's also not a DNS issue.
 The client PC does have a reverse DNS entry.  A tcpdump packet
 capture on the server shows the initial connection from the client
 followed by a bunch of DNS traffic, all within the same second.  Then
 nothing happens for exactly 5 seconds, then the server sends data
 back to the client.
 
 Just to be extra sure, I added an entry for it in /etc/hosts so DNS
 wouldn't even be needed.  Still made no difference.
 

Is it asking for an ident from the connecting server (TCP port 7)? This
is an old-fashioned custom, when computers with MTAs also ran ident
servers, which provided some fairly harmless information.

Exim4 can certainly ask for an ident, and does nothing for a
configurable timeout unless one is received, or the sender address is
whitelisted. It is a simple anti-spam measure, as practically nothing
runs ident servers today, and most malware will give up before a
thirty-second timeout expires, whereas a legitimate MTA will wait
for that long.

-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150113201211.68976...@jresid.jretrading.com



Problem med att få igång nätvverket

2015-01-13 Thread Rolf Edlund

Har hämtat hem 7.8 och bränt den till en DVD skiva.

Min dator behöver firmware för att få igång nätverket. Så jag hämtade 
hem filen firmware-nonfree_0.36+wheezy.1.tar.gz från sidan 
https://packages.debian.org/wheezy/firmware-linux-nonfree, och la den på 
ett USB minne.


Packade upp filen, och la filerna på ett USB minne. Vilket inte räckte. 
Så jag plockade ut dom bibliotek som Debian letar efter och la dom i 
roten på USB minnet.


Alltså /rtl_nick/* och /rtlwifi/*. Och startade om installationen, och 
Debian hittade då filerna, men fel firmware. Så jag plockade bort alla 
utom just dom som Debian letar efter. Startade på nytt om installationen.


Och dom rätta dök upp i installationen, Valde där att använda rtl_nic 
som första val. Och installationen fortsatte. Men när den skulle stätta 
upp dhcp, så sa installationen att min dator antagligen inte använder 
dhcp, eller att det var något annat fel.


Kollade i dmesg, och såg att den inte hade hittat firmware för rtl_nic. 
Men därimot hade den hittat rtlwifi filen, och laddat in den i minnet. 
Har tyvärr inget wifi här.


Dessutom stog det att det inte fungerade så bra att använda UTF-8 på ett 
USB minne.


Några tips ?


--
/Rolf


--
To UNSUBSCRIBE, email to debian-user-swedish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54b4e111.1020...@gmail.com



Re: Gamla länkar på hemsidan

2015-01-13 Thread Martin Jernberg
najs, ska köra lite apt-get på dom 2 Debian servrarna hemma och på jobbet :)

On 1/13/15, Rolf Edlund rolfew...@gmail.com wrote:
 Den 2015-01-12 11:25, Rolf Edlund skrev:
 Länkarna på hemsidan (https://www.debian.org/CD/http-ftp/#stable) för CD
 och DVD iso filerna, pekar fortfarande på 7.7. Den versionen är
 arkiverad.

 Vill man ha tag på 7.8. Så får man tills dom länkarna blivit ändrade, gå
 till cdimage.debian.org/debian-cd/, och där välja version 7.8.

 Kommer säkert fixas snart.

 Länkarna är tydligen fixade nu.

 --
 /Rolf


 --
 To UNSUBSCRIBE, email to debian-user-swedish-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/54b4bfc7.8010...@gmail.com




--
To UNSUBSCRIBE, email to debian-user-swedish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAO42zU_6SapdtD0ePzPwXcR1jT5Qe=nc_nuua3hrksyb-yb...@mail.gmail.com



Re: Problem med att få igång nätvverket

2015-01-13 Thread Sven Arvidsson
On Tue, 2015-01-13 at 10:10 +0100, Rolf Edlund wrote:
 Har hämtat hem 7.8 och bränt den till en DVD skiva.
 
 Min dator behöver firmware för att få igång nätverket. Så jag hämtade 
 hem filen firmware-nonfree_0.36+wheezy.1.tar.gz från sidan 
 https://packages.debian.org/wheezy/firmware-linux-nonfree, och la den på 
 ett USB minne.
 
 Packade upp filen, och la filerna på ett USB minne. Vilket inte räckte. 
 Så jag plockade ut dom bibliotek som Debian letar efter och la dom i 
 roten på USB minnet.
 
 Alltså /rtl_nick/* och /rtlwifi/*. Och startade om installationen, och 
 Debian hittade då filerna, men fel firmware. Så jag plockade bort alla 
 utom just dom som Debian letar efter. Startade på nytt om installationen.
 
 Och dom rätta dök upp i installationen, Valde där att använda rtl_nic 
 som första val. Och installationen fortsatte. Men när den skulle stätta 
 upp dhcp, så sa installationen att min dator antagligen inte använder 
 dhcp, eller att det var något annat fel.
 
 Kollade i dmesg, och såg att den inte hade hittat firmware för rtl_nic. 
 Men därimot hade den hittat rtlwifi filen, och laddat in den i minnet. 
 Har tyvärr inget wifi här.
 
 Dessutom stog det att det inte fungerade så bra att använda UTF-8 på ett 
 USB minne.

Svårt att säga vad som gick fel, det hade underlättat om du berättar vad
det är för nätverkskort du försöker få igång, och med vilken firmware,
samt exakt vilka felmeddelanden du får (helst på engelska).

Det skulle kunna vara så att det är någon skillnad på vilken firmware
kärnan i installationen behöver, och kärnan som faktiskt installeras och
körs efter installation. Kanske är det smidigast att installera utan
nätverk och installera firmware-paketet efteråt?

-- 
Cheers,
Sven Arvidsson
http://www.whiz.se
PGP Key ID 760BDD22



signature.asc
Description: This is a digitally signed message part


Re: Rafraichissement ecran

2015-01-13 Thread Diogene Laerce

On 01/13/2015 12:03 PM, Alain Dawson wrote:
 J'ai le même problème depuis une récente mise à jour du driver
 propriétaire nvidia dans wheezy-backports. Qu'est-ce qui t'a permis de
 le résoudre ? Pour ma part j'ai dû revenir à une version antérieure du
 driver.

Je te joins ma nouvelle config.

En gros, c'est laisser la carte gérer le plus possible. J'hésite encore
sur le enhance ou
override pour le antialiasing settings.

Le problème n'est pas complètement parti, les posts de twitter ont du mal à
apparaître encore complètement du premier coup des fois. Mais à part
iceweasel
et encore rarement, tout semble fonctionner impeccable.

Par contre, le pilote que j'utilise est celui fourni par le website
Nvidia, je ne sais
pas si ça fait une différence.

Bonne chance ! :)

-- 
“One original thought is worth a thousand mindless quotings.”
“Le vrai n'est pas plus sûr que le probable.”

  Diogene Laerce

#
# /home/diogene/.nvidia-settings-rc
#
# Configuration file for nvidia-settings - the NVIDIA X Server Settings utility
# Generated on Tue Jan 13 11:46:42 2015
#

# ConfigProperties:

RcFileLocale = C
ToolTips = Yes
DisplayStatusBar = Yes
SliderTextEntries = Yes
IncludeDisplayNameInConfigFile = No
ShowQuitDialog = Yes
UpdateRulesOnProfileNameChange = Yes
Timer = Memory_Used_(GPU_0),Yes,3000
Timer = Thermal_Monitor_(GPU_0),Yes,1000
Timer = PowerMizer_Monitor_(GPU_0),Yes,1000

# Attributes:

0/SyncToVBlank=0
0/LogAniso=4
0/FSAA=0
0/TextureSharpen=1
0/TextureClamping=1
0/FXAA=1
0/AllowFlipping=0
0/FSAAAppControlled=0
0/LogAnisoAppControlled=0
0/OpenGLImageSettings=3
0/FSAAAppEnhanced=1
0/XVideoSyncToDisplayID=VGA-0
[DPY:VGA-0]/RedBrightness=0.00
[DPY:VGA-0]/GreenBrightness=0.00
[DPY:VGA-0]/BlueBrightness=0.00
[DPY:VGA-0]/RedContrast=0.00
[DPY:VGA-0]/GreenContrast=0.00
[DPY:VGA-0]/BlueContrast=0.00
[DPY:VGA-0]/RedGamma=1.00
[DPY:VGA-0]/GreenGamma=1.00
[DPY:VGA-0]/BlueGamma=1.00
[DPY:VGA-0]/Dithering=1
[DPY:VGA-0]/DitheringMode=1
[DPY:VGA-0]/DitheringDepth=2
[DPY:VGA-0]/DigitalVibrance=1023
[DPY:VGA-0]/SynchronousPaletteUpdates=0
[DPY:DVI-D-0]/Dithering=0
[DPY:DVI-D-0]/DitheringMode=0
[DPY:DVI-D-0]/DitheringDepth=0
[DPY:DVI-D-0]/SynchronousPaletteUpdates=0
[DPY:HDMI-0]/Dithering=0
[DPY:HDMI-0]/DitheringMode=0
[DPY:HDMI-0]/DitheringDepth=0
[DPY:HDMI-0]/SynchronousPaletteUpdates=0
[DPY:DVI-D-1]/Dithering=0
[DPY:DVI-D-1]/DitheringMode=0
[DPY:DVI-D-1]/DitheringDepth=0
[DPY:DVI-D-1]/SynchronousPaletteUpdates=0


signature.asc
Description: OpenPGP digital signature


Re: Fwd: Re: Have I been hacked?

2015-01-13 Thread Gene Heskett
On Monday, January 12, 2015 11:54:54 PM Joel Rees did opine
And Gene did reply:
 2015/01/13 5:04 Ric Moore wayward4...@gmail.com:
  On 01/12/2015 11:50 AM, Jerry Stuckle wrote:
  You should learn from some REAL security experts, not the internet.
  
  Like who? There are compromises all over the net, with consumer
  security
 
 files lying in the open like gutted bleeding fish. I don't think
 anyone is a REAL security expert, except the ones breaking in. Any
 advances we have now is result of closing the barn doors after the
 cow got out. I guess we owe the BlackHats that much. :/ Ric
 
 
 Can I read you as saying that the black hats may be the closest thing
 to security experts that we have?
 
 I was thinking I agree.
 
 But I also think we are letting them define security.
 
 I keep forgetting that I don't like the definitions they seem to want
 to impose on us.
 
 Joel Rees

I'm with Ric on that. We seem to have lost our proactive attitude about 
security. The net result is predictable in that the lunatics are now 
running the asylum.

Hi Ric. :)

Cheers, Gene Heskett
-- 
There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order.
-Ed Howdershelt (Author)
Genes Web page http://geneslinuxbox.net:6309/gene
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501130534.12709.ghesk...@wdtv.com



Re: Have I been hacked?

2015-01-13 Thread Andrei POPESCU
On Lu, 12 ian 15, 20:17:10, Brian wrote:
 
 Seeing that my argument that enforcing (if it is possible) an
 unmemorable password is not in the best interests of security doesn't
 gain any tracton, let me try a different tack.
 
 The password
 
   TwasBrilligAndTheSlithyToves

This thread reminds me of

https://xkcd.com/936/

and

https://xkcd.com/538/

Kind regards,
Andrei
P.S. Sorry if these have already been posted, didn't go through the 
entire thread yet.
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: Have I been hacked?

2015-01-13 Thread Lisi Reisz
On Tuesday 13 January 2015 09:22:25 Andrei POPESCU wrote:
 This thread reminds me of

 https://xkcd.com/936/

 and

 https://xkcd.com/538/

 P.S. Sorry if these have already been posted, didn't go through the
 entire thread yet.

:-))  Thanks Andrei.  Loved the second.  I already knew the first, so it 
lacked the element of surprise! 

Lisi



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501131015.17587.lisi.re...@gmail.com



Re: Sortie de veille marche pas avec Thinkpad X230

2015-01-13 Thread Belaïd
bonjour,
Ça ne répondra pas a ta question (d'ailleurs une solution a été donné dans
ce fil). C'est plutôt une manipulation que tu peux faire quand tu as ton
système qui est bloqué et que tu veux redémarrer sans perte de données. Tu
peux utiliser pour cela une fonctionnalité du noyau linux (compilée par
défaut sur la plupart des distribution) , les combinaisons de touche Magic
SysRq Key (des exemples sont disponibles avec une simple recherche sur le
net) qui te permettrons entre autre de synchroniser tes systèmes de
fichiers avant de rebooter la machine
Le 12 janv. 2015 22:59, kaliderus kalide...@gmail.com a écrit :

 Bonjour,

 Depuis la mise à jour de sécurité d'aujourd'hui (je ne sais pas si
 c'est lié au noyau), suite à une mise en veille (avec Fn + F4) lorsque
 j'ouvre l'écran de mon X230, rien ne se passe (2 fois dans la
 journée).
 Impossible de le sortir de veille, je dois le rebooter violemment
 électriquement, d'où un fsck et perte de données éventuelle.
 J'avais déjà eu ce comportement précédemment, mais jamais aussi
 fréquemment.
 Et je n'ai rien trouver, à priori, d'intéressant dans les log :-(

 Si quelqu'un a une idée du pourquoi ? Là je sèche ...

 Merci par avance.

 --
 Lisez la FAQ de la liste avant de poser une question :
 http://wiki.debian.org/fr/FrenchLists

 Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
 vers debian-user-french-requ...@lists.debian.org
 En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
 Archive:
 https://lists.debian.org/caprkk3cakpkn1jspao9gbac3pogsuxjfxdscubnx0dfcbza...@mail.gmail.com




Re: One more try to post

2015-01-13 Thread Lisi Reisz
On Tuesday 13 January 2015 10:37:55 Gene Heskett wrote:
 Recent debian wheezy install here.  Where in the configs, can I get rid
 of the F10 key stealing by the terminal emulator so it can revert to
 being the mc exit key?

Which DE?  Which terminal emulator?  What is it doing?

Lisi


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501131047.53918.lisi.re...@gmail.com



Re: One more try to post

2015-01-13 Thread Gene Heskett
On Tuesday, January 13, 2015 05:47:53 AM Lisi Reisz did opine
And Gene did reply:
 On Tuesday 13 January 2015 10:37:55 Gene Heskett wrote:
  Recent debian wheezy install here.  Where in the configs, can I get
  rid of the F10 key stealing by the terminal emulator so it can
  revert to being the mc exit key?
 
 Which DE?  Which terminal emulator?  What is it doing?
 
 Lisi

See my other reply Lisi. I was very pleasantly surprised to find its a 
global setting in the terminal's prefs.  If its preserved over a reboot, 
that would be the illicit ice cream on the pie.  I'm diabetic. That makes 
both illicit. But a guy has to have at least 1 vice... :)

Cheers, Gene Heskett
-- 
There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order.
-Ed Howdershelt (Author)
Genes Web page http://geneslinuxbox.net:6309/gene
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501130556.59304.ghesk...@wdtv.com



One more try to post

2015-01-13 Thread Gene Heskett
Greetings;

Recent debian wheezy install here.  Where in the configs, can I get rid 
of the F10 key stealing by the terminal emulator so it can revert to 
being the mc exit key?

Thanks.

Cheers, Gene Heskett
-- 
There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order.
-Ed Howdershelt (Author)
Genes Web page http://geneslinuxbox.net:6309/gene
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501130537.55744.ghesk...@wdtv.com



Re: Clients identiek houden

2015-01-13 Thread Germ van Ek | Esyst
Ik heb de historie van deze thread niet meer, gisteren al wel gelezen, maar je 
originele vraag is mij dus niet helemaal helder. 

Als je losse clients (terminals) hebt die identiek moeten blijven op wellicht 
een hostname oid na, dan is een image of rsync prima, met --delete. 

Bij ons is het aantal servers sterk aan het groeien, en ben ik er met 
configuratie management naartoe aan het werken dat ik via PXE + Puppet snel een 
server kan vervangen of toevoegen, maar dat is een iets ander gebruik. 

Ik zou je bijna wel aanraden om in ieder geval versiebeheer, GIT of iets 
dergelijks, te gaan gebruiken. Vroeg of laat gaat je dat helpen om historie 
terug te kunnen zien of een foute aanpassing terug te draaien. 

Met vriendelijke groeten, 
Germ van Ek 
Esyst BV 

- Oorspronkelijk bericht -

 Van: Paul van der Vlis p...@vandervlis.nl
 Aan: debian-user-dutch@lists.debian.org
 Verzonden: Maandag 12 januari 2015 19:54:17
 Onderwerp: Re: Clients identiek houden

 Hallo,

 Bedankt voor de antwoorden. Ik zie het, jullie raden me een config
 management systeem aan.

 Maar waar ik eigenlijk vooral nieuwsgierig naar ben is waarom rsyncen
 van zo'n client geen goed idee is. Het lijkt me zo'n simpele en voor de
 hand liggende oplossing dat ik vast niet de eerste ben die er op is gekomen.

 Het nadeel van een config management systeem lijkt me dat je alleen
 dingen wijzigt en de rest laat staan. Het lijkt me dat er in de loop der
 tijd toch wat verschillen ontstaan tussen de systemen, omdat er iemand
 vergeet iets op te ruimen e.d.

 Bij rsync doe je het omgekeerde, je maakt alles helemaal gelijk, met een
 paar uitzonderingen. Dat lijkt me in principe beter (maar niet overal
 bruikbaar).

 Dus nog een keer de vraag: waarom is het geen goed idee om een client te
 beheren door middel van een rsync?

 Met vriendelijke groet,
 Paul van der Vlis.

 --
 Paul van der Vlis Linux systeembeheer, Groningen
 http://www.vandervlis.nl

 --
 To UNSUBSCRIBE, email to debian-user-dutch-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: https://lists.debian.org/54b41859.8010...@vandervlis.nl


Re: Clients identiek houden

2015-01-13 Thread Paul van der Vlis
Op 13-01-15 om 11:06 schreef Germ van Ek | Esyst:
 Ik heb de historie van deze thread niet meer, gisteren al wel gelezen,
 maar je originele vraag is mij dus niet helemaal helder.
 
 Als je losse clients (terminals) hebt die identiek moeten blijven op
 wellicht een hostname oid na, dan is een image of rsync prima, met --delete.

Voor een image moet de machine uit, lijkt me.

Ik wou dat rsyncen in lopende bedrijf doen, eventueel tijdens het aan-
of uitzetten van de machine.

Dat het geschikt is voor nieuwe installaties weet ik wel, maar wat ik
niet zo goed weet is of het geschikt is om machines identiek te houden.

Uiteraard snap ik dat lopende programma's problemen kunnen geven als ze
worden geupdated, en dat daarom soms een herstart van het programma
nodig is. Ik zie dat onder Debian vaak bij een upgrade van de browser of
de e-mail client. Wat ik mis zijn meldingen aan de user dat een
programma moet worden herstart. Ik heb daar ook bugs voor ingediend bij
een aantal programma's, maar in feite is het iets wat voor elk lopend
programma van toepassing is. En voor libraries is dat vast ook het geval.

 Bij ons is het aantal servers sterk aan het groeien, en ben ik er met
 configuratie management naartoe aan het werken dat ik via PXE + Puppet
 snel een server kan vervangen of toevoegen, maar dat is een iets ander
 gebruik.

Uiteraard snap ik dat er met iets als Puppet andere dingen mogelijk
zijn, omdat machines daar kunnen verschillen. Maar zie je ook voordelen
voor Puppet als de machines identiek zijn?

 Ik zou je bijna wel aanraden om in ieder geval versiebeheer, GIT of iets
 dergelijks, te gaan gebruiken. Vroeg of laat gaat je dat helpen om
 historie terug te kunnen zien of een foute aanpassing terug te draaien.

Daar heb je helemaal gelijk aan. Zelf gebruik ik al erg lang backups met
hardlinks, waarmee ik een oude versie snel kan terugbrengen.

Zo exact als GIT is het echter niet, het is meer een snapshot, terwijl
GIT meer patchbeheer is. Vooral bij veel wijzigingen is GIT daarom
beter. Ik zit er wel eens aan te denken, maar je moet het ook in en uit
GIT krijgen.

Groet,
Paul.


 Met vriendelijke groeten,
  
 Germ van Ek
 Esyst BV
 
 
 
 *Van: *Paul van der Vlis p...@vandervlis.nl
 *Aan: *debian-user-dutch@lists.debian.org
 *Verzonden: *Maandag 12 januari 2015 19:54:17
 *Onderwerp: *Re: Clients identiek houden
 
 Hallo,
 
 Bedankt voor de antwoorden. Ik zie het, jullie raden me een config
 management systeem aan.
 
 Maar waar ik eigenlijk vooral nieuwsgierig naar ben is waarom rsyncen
 van zo'n client geen goed idee is. Het lijkt me zo'n simpele en voor de
 hand liggende oplossing dat ik vast niet de eerste ben die er op is
 gekomen.
 
 Het nadeel van een config management systeem lijkt me dat je alleen
 dingen wijzigt en de rest laat staan. Het lijkt me dat er in de loop der
 tijd toch wat verschillen ontstaan tussen de systemen, omdat er iemand
 vergeet iets op te ruimen e.d.
 
 Bij rsync doe je het omgekeerde, je maakt alles helemaal gelijk, met een
 paar uitzonderingen. Dat lijkt me in principe beter (maar niet overal
 bruikbaar).
 
 Dus nog een keer de vraag: waarom is het geen goed idee om een client te
 beheren door middel van een rsync?
 
 Met vriendelijke groet,
 Paul van der Vlis.
 
 
 -- 
 Paul van der Vlis Linux systeembeheer, Groningen
 http://www.vandervlis.nl
 
 
 -- 
 To UNSUBSCRIBE, email to debian-user-dutch-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/54b41859.8010...@vandervlis.nl
 
 





-- 
Paul van der Vlis Linux systeembeheer, Groningen
http://www.vandervlis.nl


-- 
To UNSUBSCRIBE, email to debian-user-dutch-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54b5025b.4080...@vandervlis.nl



Re: Gamla länkar på hemsidan

2015-01-13 Thread Rolf Edlund

Den 2015-01-13 10:18, Martin Jernberg skrev:

najs, ska köra lite apt-get på dom 2 Debian servrarna hemma och på jobbet :)


Trevligt! Fast det kunde du ha gjort redan i Fredags.. :).

--
/Rolf


--
To UNSUBSCRIBE, email to debian-user-swedish-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54b4e676.70...@gmail.com



Re: One more try to post

2015-01-13 Thread Ansgar Burchardt
Hi,

On 01/13/2015 11:37 AM, Gene Heskett wrote:
 Recent debian wheezy install here.  Where in the configs, can I get rid 
 of the F10 key stealing by the terminal emulator so it can revert to 
 being the mc exit key?

If you use GNOME, there should be a Enable the menu accelerator key
(F10 by default) option in the Terminal's preferences (under the
General tab).

I checked in Debian Jessie, but don't remember it moving around. So
hopefully it's in the same place on Wheezy.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54b4f760.4050...@debian.org



Re: One more try to post

2015-01-13 Thread Gene Heskett
On Tuesday, January 13, 2015 05:45:52 AM Ansgar Burchardt did opine
And Gene did reply:
 Hi,
 
 On 01/13/2015 11:37 AM, Gene Heskett wrote:
  Recent debian wheezy install here.  Where in the configs, can I get
  rid of the F10 key stealing by the terminal emulator so it can
  revert to being the mc exit key?
 
 If you use GNOME, there should be a Enable the menu accelerator key
 (F10 by default) option in the Terminal's preferences (under the
 General tab).
 
 I checked in Debian Jessie, but don't remember it moving around. So
 hopefully it's in the same place on Wheezy.
 
 Ansgar

That works for the individual session I had assumed, but I just checked, 
and somebody did something right, its global! I hope its preserved on a 
reboot.

Thank you Ansgar.

Cheers, Gene Heskett
-- 
There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order.
-Ed Howdershelt (Author)
Genes Web page http://geneslinuxbox.net:6309/gene
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501130551.25638.ghesk...@wdtv.com



Re: One more try to post

2015-01-13 Thread Lisi Reisz
On Tuesday 13 January 2015 10:56:59 Gene Heskett wrote:
 On Tuesday, January 13, 2015 05:47:53 AM Lisi Reisz did opine

 And Gene did reply:
  On Tuesday 13 January 2015 10:37:55 Gene Heskett wrote:
   Recent debian wheezy install here.  Where in the configs, can I get
   rid of the F10 key stealing by the terminal emulator so it can
   revert to being the mc exit key?
 
  Which DE?  Which terminal emulator?  What is it doing?
 
  Lisi

 See my other reply Lisi. I was very pleasantly surprised to find its a
 global setting in the terminal's prefs.  If its preserved over a reboot,
 that would be the illicit ice cream on the pie.  I'm diabetic. That makes
 both illicit. But a guy has to have at least 1 vice... :)

:-)  

I was hypoglycaemic for years, so I feel your pain!  (Old age has to have some 
benefits.  I can now eat ice-cream!!  Mind you, I'd rather be 50 and not eat 
ice cream.  But if I've got to be old anyway, it's nice to eat ice-cream!)

I have TDE and couldn't reproduce or find it, so assumed it must be a DE 
specific thing, as it indeed turns out - it is GNOME related.  Glad you got 
the answer.

Lisi


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501131113.05627.lisi.re...@gmail.com



Re: wireless usb adopter installation

2015-01-13 Thread Brian
On Tue 13 Jan 2015 at 01:59:07 +0500, zaheer ahmed wrote:

 i am using compaq 32bit desktop. i am new user of debian 5. i am using wifi
 USB TL- WN727N its woks fine in xp but not working in debain5. i am new in
 linux debian5 plz tell me all steps which i follow and easily install
 driver. tell me installation process with complete commands.
 thanx

You would benefit from being a new user of Debian 7. Then plug in the
device, type 'lsusb' in a terminal and look at the last few lines
beginning from 'new high-speed USB'. You could post them here for
further advice, if you wish. The 'lsusb' command may also be useful.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/13012015094001.362be0a36...@desktop.copernicus.demon.co.uk



Re: Sortie de veille marche pas avec Thinkpad X230

2015-01-13 Thread Fabián Rodríguez
On 2015-01-12 16:58, kaliderus wrote:
 Si quelqu'un a une idée du pourquoi ? Là je sèche ...

J'ai vu une mention de ce problème ici:

https://www.reddit.com/r/debian/comments/2s3wyf/debian_78_is_here/
https://www.reddit.com/r/debian/comments/2s3wyf/debian_78_is_here/cnme2dg

Pour ma part j'ai aussi un X230 mais j'utilise le noyau proposé par le
dépôt backports (3.16):
https://tracker.debian.org/pkg/linux

Selon ce que j'ai vu une mise-à-jour pour rêgler ce problème était déjà
disponible, dans tous les cas je ne fais pas de mise-à-jour quotidienne
sur ce système qui n'est pas branché 24/7.

A+

F.

-- 
Fabián Rodríguez - XMPP/Jabber+OTR: magic...@member.fsf.org
http://debian.magicfab.ca




signature.asc
Description: OpenPGP digital signature


Re: Rafraichissement ecran

2015-01-13 Thread Alain Dawson
J'ai le même problème depuis une récente mise à jour du driver propriétaire 
nvidia dans wheezy-backports.  Qu'est-ce qui t'a permis de le résoudre ? Pour 
ma part j'ai dû revenir à une version antérieure du driver.

Le 12 janvier 2015 22:56:29 CET, Diogene Laerce me_buss...@yahoo.fr a écrit :

On 01/12/2015 06:18 PM, Sylvain L. Sauvage wrote:
 Le lundi 12 janvier 2015, 11:28:43 Diogene Laerce a écrit :
 Bonjour,
 ’soir,

 J'ai un problème de rafraîchissement avec mon écran LG Flatron
 L222WS sur ma Wheezy (Nvidia GT 640).

 Très souvent, trop à mon goût, l'écran ne rafraîchit pas du
 tout : la page reste
 identique après avoir changé de tab dans iceweasel, je dois
 redimensionner la fenêtre pour forcer le rafraîchissement et
 le même chose arrive, avec tout
 types de logiciels.

 Est-ce que quelqu'un a déjà eu ce genre de problème ou a une
 idée sur ce qui
 cause cela ?
   Le problème peut venir des « effets » visuels 
 (« composition », OpenGL et Cie). Essaie de tripoter les 
 paramètres.

   Sinon, qu’est-ce que tu utilises ? Gnome, KDE, autre ?

Ca y est : cela semble résolu : il suffisait de faire confiance  la
carte pour tout
gérer, plutôt que les applications logicielles et tout est rentré dans
l'ordre.

Merci à toi ! Je n'avais pas eu à revenir dans les réglages depuis
longtemps,
c'est pour cela que ça ne m'est pas venu à l'idée : les avantages de
l'intelligence
collective..

Re-merci ! :)

-- 
“One original thought is worth a thousand mindless quotings.”
“Le vrai n'est pas plus sûr que le probable.”

  Diogene Laerce

-- 
Envoyé de mon téléphone Android avec K-9 Mail. Excusez la brièveté.

Re: récupérer des données en RAID 1[RESOLU]

2015-01-13 Thread Jose CHARTERS

Le 12/01/2015 18:10, Jean-Michel OLTRA a écrit


Tu peux le faire à partir d'un cd de secours, et même ré-écrire le
/etc/mdadm/mdadm.conf

Bonjour,

Ça y est j'ai récupéré mes données stockées sur le raid 1. Merci  à tous.

Tout d'abord, mes deux partitions raid 1 étaient /home et /var. J'étais 
sur de /home et je pensais que la deuxième était /. Et bien non, c'est 
/var. De ce fait, toutes les tentatives à base de grub étaient vouées à 
l'échec. Je m'en excuse.

*
*Voici donc comment j'ai procédé pour récupérer mes données pour les 
futurs nécessiteux :


 * J'ai démarré sur un liveCD, knoppix en l'occurence.
 * J'ai reconstitué mon raid 1 avec la commande : mdadm --examine -scan
 /etc/mdadm/mdadm.conf ( Merci Jean Michel )
 * J'ai redémarre le service raid : /etc/init.d/mdadm-raid restart
 * Je n'avais alors plus qu'à monter mon disque raid : mount /dev/md1 /mnt

Je n'ai plus qu'à récupérer mes données.

Encore merci à tous.

José

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/54b51c48.2010...@free.fr



Re: Sortie de veille marche pas avec Thinkpad X230

2015-01-13 Thread kaliderus
Bonjour,

 ce fil). C'est plutôt une manipulation que tu peux faire quand tu as ton
 système qui est bloqué et que tu veux redémarrer sans perte de données. Tu
 peux utiliser pour cela une fonctionnalité du noyau linux (compilée par
 défaut sur la plupart des distribution) , les combinaisons de touche Magic
 SysRq Key (des exemples sont disponibles avec une simple recherche sur le
 net) qui te permettrons entre autre de synchroniser tes systèmes de fichiers
 avant de rebooter la machine

Je connais ces combinaisons de touches, malheureusement cette solution
ne fonctionne que si le système n'est pas endormi...

Cordialement.

--
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caprkk3cwax2ul8v6uvj-ztcule50mojpuqowpk8zoo1fquo...@mail.gmail.com



Re: Have I been hacked?

2015-01-13 Thread Danny
Hi,

I have read with interest all the responses and followed all the links. However,
I realized something that I think we all (well, at least myself) forgot about 
...
and that is the importance of choosing a proper username ...

Authentication (usually) is a 2 step process ... as we all know ... a username 
and a password ... and since ssh is (mostly) referred to here ... we can accept 
that
it is most definately a 2 step process ...

So ... if I know the username I am already halfway there ... I just need to get
the OTHER remainig 50% (by breaking the password) ... and (like someone
mentioned) it will take immensely long for someone to break a 10 (I think it was
10) character password ... then why is the importance of a good username ignored
... if I have a (creepy) username of 10 characters it will take a black hat 
twice
as long to get what he wants ... or am I misleading myself (and others) here ...
are we not putting too much emphasis/pressure on a good password where the
pressure could be spread between the username AND password ... just asking ...

Someone also mentioned black-hats ... I think that black-hats are a necessary
evil ... just like lawyers ;) ... I understand some mechanical things better
than others, like hydraulics and pneumatics ... mechanical engineering is no
obstacle to me ... however ... I have difficulty in getting my head wrapped
around things like squid, iptables, procmail, regexp ... some of you have no
difficulty in any of these but have difficulty in mechanical stuff ... it is
supposed to be like that ... when I think of black-hats I think of the green
Matrix screen ... they are a special breed ... they see things that white hats
don't see because it is their nature ... Just like car mechanics can tune/alter
an engine so can black-hats tune alter a TCP/IP stream/payload ...

Am I right in saying that there is actually nothing new when it comes to
networking ... hear me out ... the internet (and most networks out there) still
works on TCP/IP which is 40 odd years old (70's) ... a car mechanic only needs
to know how an engine works ... you can bolt on many other things onto an engine
and add a pletora of sensors to it but essentially it remains an engine ... if
you understand the way an engine or an automatic/manual transmission works you 
can
confidently service/overhaul any engine/transmission  because they all are made 
up of the same
stuff and they all work the same ... and this is my point with TCP/IP ...
EVERYTHING is dumped on top of TCP/IP ... yet it remains the same ... a black
hat only needs to know TCP/IP in order to knock on your door ... once he knocked
on your door it means that he has found you ... he knows you are there ... all 
he
has to do is look at the Matrix screen ... am I making sense? ... 

Have a nice day

Danny


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150113171319.GA31019@fever.havannah.local



Re: One more try to post

2015-01-13 Thread Gene Heskett
On Tuesday, January 13, 2015 06:13:05 AM Lisi Reisz did opine
And Gene did reply:
 On Tuesday 13 January 2015 10:56:59 Gene Heskett wrote:
  On Tuesday, January 13, 2015 05:47:53 AM Lisi Reisz did opine
  
  And Gene did reply:
   On Tuesday 13 January 2015 10:37:55 Gene Heskett wrote:
Recent debian wheezy install here.  Where in the configs, can I
get rid of the F10 key stealing by the terminal emulator so it
can revert to being the mc exit key?
   
   Which DE?  Which terminal emulator?  What is it doing?
   
   Lisi
  
  See my other reply Lisi. I was very pleasantly surprised to find its
  a global setting in the terminal's prefs.  If its preserved over a
  reboot, that would be the illicit ice cream on the pie.  I'm
  diabetic. That makes both illicit. But a guy has to have at least 1
  vice... :)
 :
 :-)
 
 I was hypoglycaemic for years, so I feel your pain!  (Old age has to
 have some benefits.  I can now eat ice-cream!!  Mind you, I'd rather
 be 50 and not eat ice cream.  But if I've got to be old anyway, it's
 nice to eat ice-cream!)

Glad to meet you.  I expect I have you beat in years though. I am 80, 
long since retired from a lifetime of chasing electrons for a living, 
usually as the CE at a tv station for the last 40 years. A geek before 
the word was invented, I quite school and went to fixing tv's for a 
living after the 8th grade in '49.  Passed the 1st phone in '62 and the 
C.E.T. in '72 without cracking a book.  I don't recommend getting old, 
the overall experience is not what I would call the golden years.  So 
avoid it if you can. ;-)

But now I have time to do all those things that usually keep me out of 
the bars. But I still need the giddyup I used to have if I am ever to 
finish my bucket list.  You don't ever do that last item though, because 
if you do, you are out of a good reason to stick around. ;-)

 I have TDE and couldn't reproduce or find it, so assumed it must be a
 DE specific thing, as it indeed turns out - it is GNOME related. 
 Glad you got the answer.
 
 Lisi


Cheers, Gene Heskett
-- 
There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order.
-Ed Howdershelt (Author)
Genes Web page http://geneslinuxbox.net:6309/gene
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501130634.37482.ghesk...@wdtv.com



Re: Qual o melhor programa de inventário LAMP.

2015-01-13 Thread hamacker
Testei de cima para baixo o OpenAudit e agora vou instalar o OCS.
Se alguem quiser instalar o OpenAudit, eu fiz um .pdf com o passo a passo
para instalar tanto a livre como a comercial(válida por 30 dias), apesar
disso não sei se vou ficar com ele, o agente dele é um .vbs que leva pelo
menos 1 minuto e meio para rodar completamente, e colocá-lo em forma de GPO
não foi muito bem recebida nas estações nem no logon e nem logoff das
máquinas, se voltar a usá-lo acho que vou programá-lo por meio do agendador
de tarefas do Windows. Além disso, o português é horrivel pacas, forçando o
uso do inglês que não é um problema para mim, mas depois de instalado será
usado por outra pessoa que preferiria o português. Também, a versão
comunitária para a paga muda da agua para o vinho, especialmente a beleza.

Bem, estou instalando o OCS no Ubuntu 14.04 Server, tive um trabalhão para
instalar cpan DBD::mysql. Me parece que o pacote perl provido pelo
repositório do Ubuntu não é aceito e precisa compilar na unha a partir do
tar.gz, muito chato, mas a instalação tá caminhando...



Em 10 de janeiro de 2015 19:46, Rafael Bedendo rafael.bede...@gmail.com
escreveu:

  Utilizo o OCS para inventario de hardware e software em alguma empresas,
 parques pequenos, entre 100 e 150 estação, geralmente com script de
 instalação por GPO. Não tenho os problemas citados abaixo, mas sempre
 mantenho servidor e clientes atualizados com as ultimas versões.

 Abraço

 Rafael Bedendo


 On 09/01/2015 08:56, Jacques Teixeira wrote:

 Eu uso o OcsInventory, e atende muito bem para o que preciso, inventário
 de hardware e de software, meu parque é pequeno, cerca de 150 computadores,
 único problema que vejo nele , é que algumas maquinas com o tempo param de
 comunicar, então , você tem que criar uma rotina de tempos em tempos para
 ver quais maquinas não estão atualizando,ah, também acontece de se você
 formatar uma maquina as vezes ele duplica o registro, tem que fazer uma
 limpeza as vezes.

  abraço.
 Jacques Teixeira

 Em 8 de janeiro de 2015 20:44, Tobias cont...@eutobias.org escreveu:

 Não ficou claro para mim se você quer fazer inventário de rede ou
 monitoramento de um servidor web.


 On 08-01-2015 12:05, hamacker wrote:

 Ola pessoal,

 Estou precisando de um programa de inventario LAMP, e estou estando o
 OCS Inventary e o Open Audit.

 Já instalei o Open Audit e parece bom, mas as vezes é confuso e alguns
 links dão erro 404, fica parecendo versão de software mal acabado,
 alguns howtos falam de usar a versão 9.x, mas a unica disponivel no site
 é a 1.5, então fiquei meio perdido.
 O que eu achei diferente é que o OA não tem agente, é um script de que
 alguma forma terei de automatizar a execução.


 Daqui a pouco vou instalar o OCS Inventary que também é popular na web,
 sei quase nada dele.

 Se alguém puder me indicar outros e puder tecer comentários sobre qual é
 o melhor ficaria muito grato.

 Um abraço a todos.



   --
 To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/54af085f.50...@eutobias.org






Re: Sendmail greeting delay

2015-01-13 Thread David Parker
Thanks for the replies.

The system is not using tcpwrappers, and it's also not a DNS issue.  The
client PC does have a reverse DNS entry.  A tcpdump packet capture on the
server shows the initial connection from the client followed by a bunch of
DNS traffic, all within the same second.  Then nothing happens for exactly
5 seconds, then the server sends data back to the client.

Just to be extra sure, I added an entry for it in /etc/hosts so DNS
wouldn't even be needed.  Still made no difference.

Thanks,
Dave

On Mon, Jan 12, 2015 at 4:21 PM, Chris Davies chris-use...@roaima.co.uk
wrote:

 David Parker dpar...@utica.edu wrote:
  We have an SMTP server running Sendmail 8.14.4-4 on Debian 7 64-bit.

  Kaccess hash -TTMPF /etc/mail/access
  # FEATURE(`access_db', `hash -TTMPF /etc/mail/access', `skip')dnl

  For some reason, I just can't get it to not pause when greeting external
  (non-localhost) connections. [...]
  if I test from another PC on our network, it connects, pauses for 5
  seconds, and then prints the SSL information.

 Does your PC have an rDNS entry, and if not could this delay be a DNS
 lookup timeout?

 Chris


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/rfqdobx8se@news.roaima.co.uk




-- 
Dave Parker
Systems Administrator
Utica College
Integrated Information Technology Services
(315) 792-3229
Registered Linux User #408177


Re: Sendmail greeting delay

2015-01-13 Thread Joe
On Tue, 13 Jan 2015 20:12:11 +
Joe j...@jretrading.com wrote:

 On Tue, 13 Jan 2015 14:27:42 -0500
 David Parker dpar...@utica.edu wrote:
 
  Thanks for the replies.
  
  The system is not using tcpwrappers, and it's also not a DNS issue.
  The client PC does have a reverse DNS entry.  A tcpdump packet
  capture on the server shows the initial connection from the client
  followed by a bunch of DNS traffic, all within the same second.
  Then nothing happens for exactly 5 seconds, then the server sends
  data back to the client.
  
  Just to be extra sure, I added an entry for it in /etc/hosts so DNS
  wouldn't even be needed.  Still made no difference.
  
 
 Is it asking for an ident from the connecting server (TCP port 7)?
 This is an old-fashioned custom, when computers with MTAs also ran
 ident servers, which provided some fairly harmless information.
 
 Exim4 can certainly ask for an ident, and does nothing for a
 configurable timeout unless one is received, or the sender address is
 whitelisted. It is a simple anti-spam measure, as practically nothing
 runs ident servers today, and most malware will give up before a
 thirty-second timeout expires, whereas a legitimate MTA will wait
 for that long.
 

OK, where did the 7 come from? Should be port 113. I saw it just as the
mouse button clicked...

-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150113201613.0b84c...@jresid.jretrading.com



Re: Sendmail greeting delay

2015-01-13 Thread Jonathan Siegle

On 2015-01-13 at 12:38, David Parker wrote:


Hello,

My /etc/mail/access file is pasted below.  The PC I'm testing from is on the 
10.x.x.x network, which should be allowed to
connect with no delay.  I have also tried setting the default GreetPause to 0 
but it still made no difference.


Connect:localhost RELAY
GreetPause:localhost 0
ClientRate:localhost 0
ClientConn:localhost 0
Connect:127 RELAY
GreetPause:127 0
ClientRate:127 0
ClientConn:127 0
Connect:IPv6:::1 RELAY
GreetPause:IPv6:::1 0
ClientRate:IPv6:::1 0
ClientConn:IPv6:::1 0
Connect:10 RELAY
GreetPause:10 0
ClientRate:10 0
ClientConn:10 0



Dave,
	I'm struggling with a reference beyond my own work. Please try 
putting a second and maybe a third octet on your GreetPause: 10 line. 
Also, please verify you are issuing a kill -HUP on sendmail. We never got 
sendmail greetpause to work with a single octet. Normally we do 3 octets 
for all the RFC1918 addresses we use.


-Jonathan

Re: Sendmail greeting delay

2015-01-13 Thread David Parker
Thanks, but it looks like the IDENT setting was the culprit.  I just had to
change this setting in sendmail.cf:

O Timeout.ident=5s

Changing it from 5s to 0s resolved the problem immediately.  Thanks again,
everyone!

On Tue, Jan 13, 2015 at 3:07 PM, Jonathan Siegle jsie...@psu.edu wrote:

 On 2015-01-13 at 12:38, David Parker wrote:

  Hello,

 My /etc/mail/access file is pasted below.  The PC I'm testing from is on
 the 10.x.x.x network, which should be allowed to
 connect with no delay.  I have also tried setting the default GreetPause
 to 0 but it still made no difference.

 
 Connect:localhost RELAY
 GreetPause:localhost 0
 ClientRate:localhost 0
 ClientConn:localhost 0
 Connect:127 RELAY
 GreetPause:127 0
 ClientRate:127 0
 ClientConn:127 0
 Connect:IPv6:::1 RELAY
 GreetPause:IPv6:::1 0
 ClientRate:IPv6:::1 0
 ClientConn:IPv6:::1 0
 Connect:10 RELAY
 GreetPause:10 0
 ClientRate:10 0
 ClientConn:10 0



 Dave,
 I'm struggling with a reference beyond my own work. Please try
 putting a second and maybe a third octet on your GreetPause: 10 line. Also,
 please verify you are issuing a kill -HUP on sendmail. We never got
 sendmail greetpause to work with a single octet. Normally we do 3 octets
 for all the RFC1918 addresses we use.

 -Jonathan




-- 
Dave Parker
Systems Administrator
Utica College
Integrated Information Technology Services
(315) 792-3229
Registered Linux User #408177


Re: Sendmail greeting delay

2015-01-13 Thread David Parker
Just for the sake of completeness, this wasn't actually an issue with the
GreetPause option or anything else in the access file.  The problem was
that sendmail was attempting an IDENT query to the client, with a 5-second
timeout.  The access file wasn't even checked until after the timeout
expired.  In retrospect, I guess it makes sense because I was testing this
by connecting with openssl, which is just looking for the SSL/TLS info at
the beginning of the connection, and doesn't need to wait for the
greeting.  The GreetPause values work as expected for actual client
connections on port 25, 465, or 587.

Thanks!

On Tue, Jan 13, 2015 at 3:27 PM, David Parker dpar...@utica.edu wrote:

 Thanks, but it looks like the IDENT setting was the culprit.  I just had
 to change this setting in sendmail.cf:

 O Timeout.ident=5s

 Changing it from 5s to 0s resolved the problem immediately.  Thanks again,
 everyone!

 On Tue, Jan 13, 2015 at 3:07 PM, Jonathan Siegle jsie...@psu.edu wrote:

 On 2015-01-13 at 12:38, David Parker wrote:

  Hello,

 My /etc/mail/access file is pasted below.  The PC I'm testing from is on
 the 10.x.x.x network, which should be allowed to
 connect with no delay.  I have also tried setting the default GreetPause
 to 0 but it still made no difference.

 
 Connect:localhost RELAY
 GreetPause:localhost 0
 ClientRate:localhost 0
 ClientConn:localhost 0
 Connect:127 RELAY
 GreetPause:127 0
 ClientRate:127 0
 ClientConn:127 0
 Connect:IPv6:::1 RELAY
 GreetPause:IPv6:::1 0
 ClientRate:IPv6:::1 0
 ClientConn:IPv6:::1 0
 Connect:10 RELAY
 GreetPause:10 0
 ClientRate:10 0
 ClientConn:10 0



 Dave,
 I'm struggling with a reference beyond my own work. Please try
 putting a second and maybe a third octet on your GreetPause: 10 line. Also,
 please verify you are issuing a kill -HUP on sendmail. We never got
 sendmail greetpause to work with a single octet. Normally we do 3 octets
 for all the RFC1918 addresses we use.

 -Jonathan




 --
 Dave Parker
 Systems Administrator
 Utica College
 Integrated Information Technology Services
 (315) 792-3229
 Registered Linux User #408177




-- 
Dave Parker
Systems Administrator
Utica College
Integrated Information Technology Services
(315) 792-3229
Registered Linux User #408177


Re: Fwd: Re: Have I been hacked?

2015-01-13 Thread Gene Heskett
On Tuesday, January 13, 2015 01:35:00 PM Ric Moore did opine
And Gene did reply:
 On 01/13/2015 05:34 AM, Gene Heskett wrote:
  On Monday, January 12, 2015 11:54:54 PM Joel Rees did opine
  
  And Gene did reply:
  2015/01/13 5:04 Ric Moore wayward4...@gmail.com:
  On 01/12/2015 11:50 AM, Jerry Stuckle wrote:
  You should learn from some REAL security experts, not the
  internet.
  
  Like who? There are compromises all over the net, with consumer
  security
  
  files lying in the open like gutted bleeding fish. I don't think
  anyone is a REAL security expert, except the ones breaking in.
  Any advances we have now is result of closing the barn doors after
  the cow got out. I guess we owe the BlackHats that much. :/ Ric
  
  
  Can I read you as saying that the black hats may be the closest
  thing to security experts that we have?
  
  I was thinking I agree.
  
  But I also think we are letting them define security.
  
  I keep forgetting that I don't like the definitions they seem to
  want to impose on us.
  
  Joel Rees
  
  I'm with Ric on that. We seem to have lost our proactive attitude
  about security. The net result is predictable in that the lunatics
  are now running the asylum.
  
  Hi Ric. :)
 
 Hey Gene! They can't keep a good man down!

Yeah, well, I had my 10 minute warning buzzer last May, pulmonary 
emoblism that almost punched my ticket out of here.  But the shot worked, 
no ministrokes from it, so your fav crochety old fart is still here 
although on a steady diet of warfarin so I leak profusely when nicked.  
And use a lot of bandaids.

Still piddling in the shop, currently making a copy of that blanket chest 
on the cover of the fall 2014 issue of Fine WoodWorking.  But I am 
cheating a bit because other than the table and chop saw stuff, I am 
doing all the joinery and trim on my cnc milling machine.  Gotta make 
that sows ear I have entirely too much money and time into making it cnc, 
pay its way.  I could probably do it by hand quicker, but not as 
precisely, nor as well fitted.  Its Green  Green style, using ebony 
chips in square excavations for screw covers for all the screws that hold 
it together.  Between the Mahogany and the ebony, I have about $450 just 
in the wood.

But as I am fond of saying, stuff like this keeps me out of the bars. :)

Rumor has it you lost a foot a while back?

 Did Mandrake finally push
 up the lilies??

2 or 3 times now.  Google for mageia these days I think it is.
 
 Of course I am not happy with the Blackhats defining security, but if
 it weren't for them doing their job no one else would. I am jealous
 that I don't have their brain power.

There are some formidable talents out there, thats for sure. Combined, 
they easily beat my quite decent IQ. My biggest problem is the short term 
memory though.  I recognize it for what it is but can't seem to fix it 
either.

 Getting too old, 

aren't we all, I'm 80 now :(

 missing a limb

Heard about that, sorry too.

 and waiting for a triple-bypass. I need some stem cells.

I could use some myself, and some fresh disks in my back, arther has worn 
them down to bone on bone in at least 2 places.  Anyone who says these 
are the golden years, is only looking at the color of the water in the 
bowl.

My heart OTOH, they spent 2 hours looking at it 2 days later in the shop, 
because it was blown up to 3x its normal size from trying to pump thru 
the blockage, looking for a good excuse to put in some stents or whatever 
(these medics never miss a chance to enhance the bottom line do they) but 
the guy doing the looking finally sat back and sighed, saying I ought to 
be good for a decade or more, he flat could not find a reason to put a 
zipper in my chest.

But I need to stop the warfarin before too long, my psa is north of 10.

 Glad to see
 you here, Gene. :) Ric

Running a 32 bit wheezy install with a 64 bit kernel, working fairly well 
too.

Cheers, Gene Heskett
-- 
There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order.
-Ed Howdershelt (Author)
Genes Web page http://geneslinuxbox.net:6309/gene
US V Castleman, SCOTUS, Mar 2014 is grounds for Impeaching SCOTUS


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201501131604.21976.ghesk...@wdtv.com



Re: Rafraichissement ecran

2015-01-13 Thread A. Dawson
Le mardi 13 janvier 2015 à 21:52 +0100, Diogene Laerce a écrit :
 On 01/13/2015 03:20 PM, Diogene Laerce wrote:
  On 01/13/2015 12:03 PM, Alain Dawson wrote:
  J'ai le même problème depuis une récente mise à jour du driver
  propriétaire nvidia dans wheezy-backports. Qu'est-ce qui t'a permis de
  le résoudre ? Pour ma part j'ai dû revenir à une version antérieure du
  driver.
 
 Bon : réactualisation ! ^^
 
 Apres 2 redémarrages, je ne sais pas trop ce qu'il s'est passé mais
 maintenant..
 C'est pire qu'avant ! Et rien de ce que je fais n'a l'air de changer
 quelque chose.
 
 Enigmus enigmae..
 
 Donc je viens de passer sous mate : c'est plus joli que gnome classic et
 je n'ai
 pas que ça à faire..
 
 Le problème vient définitivement des effets mais d'où précisément ??
 
 Dis-moi si de ton côté, ça s'arrange et comment. ;)
 
 Good luck !
 

Oups, désolé pour toi !

A vrai dire je n'ai touché à rien : la solution que j'ai trouvée
(revenir à une version antérieure du driver nvidia en utilisant
snapshot.debian.net ; en l'occurrence la version du 1/12/2014)
fonctionne, je n'ai pas trop envie de compliquer les choses.

Ce qui fonctionne aussi, c'est de passer au driver libre nouveau (mais
j'utilise parfois Cinelerra qui est optimisé pour le driver nvidia
propriétaire).

Le problème semble repéré, il y a un rapport de bug :
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=755683 mais pas de
solution proposée à ce jour.

Ce qui m'inquiète, c'est le futur passage à jessie, je me dis que je ne
pourrai pas éternellement bloquer la version de nvidia-kernel-dkms et
paquets associés...

Good luck aussi,

Alain

-- 
Lisez la FAQ de la liste avant de poser une question :
http://wiki.debian.org/fr/FrenchLists

Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe
vers debian-user-french-requ...@lists.debian.org
En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org
Archive: https://lists.debian.org/1421183129.7394.8.camel@localhost



Re: Sendmail greeting delay

2015-01-13 Thread David Parker
Yes!  That seems to be the culprit.  I ran an strace on the sendmail
process and that's exactly what happens:

[ ... ]
4007  15:09:08.386921 connect(5, {sa_family=AF_INET, sin_port=htons(113),
sin_addr=inet_addr(10.3.1.40)}, 16 unfinished ...
3792  15:09:13.386272 ... select resumed ) = 0 (Timeout)
[ ... ]

Where 10.3.1.40 is the IP of the client PC.  So now I just need to dig into
the config and figure out how to stop it.  Thanks!


On Tue, Jan 13, 2015 at 3:16 PM, Joe j...@jretrading.com wrote:

 On Tue, 13 Jan 2015 20:12:11 +
 Joe j...@jretrading.com wrote:

  On Tue, 13 Jan 2015 14:27:42 -0500
  David Parker dpar...@utica.edu wrote:
 
   Thanks for the replies.
  
   The system is not using tcpwrappers, and it's also not a DNS issue.
   The client PC does have a reverse DNS entry.  A tcpdump packet
   capture on the server shows the initial connection from the client
   followed by a bunch of DNS traffic, all within the same second.
   Then nothing happens for exactly 5 seconds, then the server sends
   data back to the client.
  
   Just to be extra sure, I added an entry for it in /etc/hosts so DNS
   wouldn't even be needed.  Still made no difference.
  
 
  Is it asking for an ident from the connecting server (TCP port 7)?
  This is an old-fashioned custom, when computers with MTAs also ran
  ident servers, which provided some fairly harmless information.
 
  Exim4 can certainly ask for an ident, and does nothing for a
  configurable timeout unless one is received, or the sender address is
  whitelisted. It is a simple anti-spam measure, as practically nothing
  runs ident servers today, and most malware will give up before a
  thirty-second timeout expires, whereas a legitimate MTA will wait
  for that long.
 

 OK, where did the 7 come from? Should be port 113. I saw it just as the
 mouse button clicked...

 --
 Joe


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive:
 https://lists.debian.org/20150113201613.0b84c...@jresid.jretrading.com




-- 
Dave Parker
Systems Administrator
Utica College
Integrated Information Technology Services
(315) 792-3229
Registered Linux User #408177


nouveau peine à sortir de veille

2015-01-13 Thread Jean-Marc
Salut la liste,

Cela fait plusieurs fois que la sortie de veille n'est pas glorieuse.
Le système me pond des tonnes de messages comme ceux-ci :
debut
[ 8280.050842] nouveau E[  PGRAPH][:02:00.0] PGRAPH TLB flush idle timeout 
fail
[ 8280.050847] nouveau E[  PGRAPH][:02:00.0] PGRAPH_STATUS  : 0x011fd801 
BUSY
 STRMOUT_VATTR_POSTGEOM VCLIP TRAST CLIPID ZCULL ENG2D RMASK TPC_RAST TPC_PROP 
ROP
[ 8280.050854] nouveau E[  PGRAPH][:02:00.0] PGRAPH_VSTATUS0: 0x00145a00
[ 8280.050857] nouveau E[  PGRAPH][:02:00.0] PGRAPH_VSTATUS1: 0x002d
[ 8280.050859] nouveau E[  PGRAPH][:02:00.0] PGRAPH_VSTATUS2: 0x0034db40 
ENG2D ROP
/debut

Une brève recherche sur le net ne donne rien de concluant.
À part quelques témoignages de personnes ayant aussi des problèmes avec le 
pilote nouveau.

Vous pensez que cela mérite un rapport de bug ?

Jean-Marc jean-m...@6jf.be


pgpkrD9AAs8hG.pgp
Description: PGP signature


Re: Have I been hacked?

2015-01-13 Thread Brian
On Tue 13 Jan 2015 at 19:13:19 +0200, Danny wrote:

 I have read with interest all the responses and followed all the links. 
 However,
 I realized something that I think we all (well, at least myself) forgot about 
 ...
 and that is the importance of choosing a proper username ...

You can be known by whatever name you choose. There is no imortance
attached to it.

 Authentication (usually) is a 2 step process ... as we all know ... a 
 username 
 and a password ... and since ssh is (mostly) referred to here ... we can 
 accept that
 it is most definately a 2 step process ...

Authentication is a minimum one step process.

Your argument falls apart after this.

You identify yourself and then prove it. Anyone can claim to be you but
they may have difficulty substantiating it.

Usernames identify but do not authenticate. By all means tell everyone
what your username is, but do not give them the means to authenicate
using it


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/13012015203206.fa515ce37...@desktop.copernicus.demon.co.uk



Re: Rafraichissement ecran

2015-01-13 Thread Diogene Laerce

On 01/13/2015 03:20 PM, Diogene Laerce wrote:
 On 01/13/2015 12:03 PM, Alain Dawson wrote:
 J'ai le même problème depuis une récente mise à jour du driver
 propriétaire nvidia dans wheezy-backports. Qu'est-ce qui t'a permis de
 le résoudre ? Pour ma part j'ai dû revenir à une version antérieure du
 driver.

Bon : réactualisation ! ^^

Apres 2 redémarrages, je ne sais pas trop ce qu'il s'est passé mais
maintenant..
C'est pire qu'avant ! Et rien de ce que je fais n'a l'air de changer
quelque chose.

Enigmus enigmae..

Donc je viens de passer sous mate : c'est plus joli que gnome classic et
je n'ai
pas que ça à faire..

Le problème vient définitivement des effets mais d'où précisément ??

Dis-moi si de ton côté, ça s'arrange et comment. ;)

Good luck !

-- 
“One original thought is worth a thousand mindless quotings.”
“Le vrai n'est pas plus sûr que le probable.”

  Diogene Laerce




signature.asc
Description: OpenPGP digital signature


Re: Disable server so it does not start on reboot (even after upgrade)?

2015-01-13 Thread Andrei POPESCU
On Vi, 09 ian 15, 15:02:34, Xavi wrote:
 First I do:
 
 sudo update-rc.d -f apache2 remove
 
 and then, to assert the rc.d links are not recreated, 
 I recreate them stopped in all runlevels:
 
 sudo update-rc.d apache2 stop 80 0 1 2 3 4 5 6 .

Or one could just use 'disable'.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature