Re: WARNING! New Perl/Perl-base upgrade removes 141 Sid/Unstable packages

[claude juif]

2016-10-04 16:12 GMT+02:00 Mark Fletcher :

> On Tue, Oct 04, 2016 at 09:25:46AM +0200, Vincent Lefevre wrote:
> > On 2016-09-30 14:32:49 +0100, Lisi Reisz wrote:
> > > For goodness sake!!!  This is Debian.  Open Source.  Choice.  Your
> call.
> > > Either rewrite Aptitude and publish a fork; use it; or don't use it.
> I like
> > > it.  Many like it.  No-one is making you use it.  Use your package
> manager of
> > > choice, or no package manager and manage your own dependency hell.
> But do
> > > stop complaining and moaning.
> >
> > I had looked at the source of the resolver code to see if I could do
> > something, but it was too horrible to read.
>
> Translation: you couldn't understand it.
>

What does that mean ? What's wrong with not understanding piece of code ?

Sometimes people lost their way in open source. The matter in open source
is not sharing free code, it's about sharing knowledge. If documentation
does not reflect the way code work then something is bad.

Users complaining about code is really important in open source. If you're
not agree with that why are you still using open source software ?

The "I like it and it works for me" is not enough.

Re: WARNING! New Perl/Perl-base upgrade removes 141 Sid/Unstable packages

[claude juif]

2016-10-04 23:51 GMT+02:00 Lisi Reisz :

> On Tuesday 04 October 2016 08:25:46 Vincent Lefevre wrote:
> > my position remains the same:
> > aptitude is poorly designed.
>
> Fine.  So don't use it.  But moaning won't help anyone, not even you.  You
> don't like Aptitude.  We get the message.  So don't use Aptitude.
>

If open source people said the same 30 years ago, we will not be there
listening to this. (replace aptitude with linux kernel and think about
really early release)
Not every people are able to fix or read code and if they're not
complaining how can developper improve their code ?

This way of answering is really bad. If you have nothing to say, don't
write a mail.



>
> Lisi
>
>

Re: Openbox ou IceWM ou GNUstep?

[Thiago Zoroastro]

[off]Enviei um e-mail em branco de acidente. O Yahoo é ruim de manuseio 
assim.[/off]

> upower é uma opção em linha de comando


o upower não fez nada aqui.


$ upower -a
$ upower -b
$ man upower
$ upower --monitor
Monitoring activity from the power daemon. Press Ctrl+C to cancel.
^C
$ man upower
$ upower --monitor-detail
Monitoring activity from the power daemon. Press Ctrl+C to cancel.
^C
$
Fiz errado?
> Como iniciar alguma interface gráfica pelo tty ou Ctrl+Shift+F1 a F6?
Foi fácil encontrar uma solução para mim  mesmo, o startx pode ser feito assim:
$ startx /usr/bin/icewm
Mas ele não carregou configurações pessoais da barra de ferramentas. Carregou 
as abas guardadas no Iceweasel, mas não carregou as configurações salvas em 
/home/usuario/.icewm/menu e outros

Como poderia por exemplo executar o startx com o /etc/X11/icewm/menu ou o 
/home/usuario/.icewm/menu e outros?
No man ele tem isso aqui, mas não entendi a aplicabilidade:FILES
   $(HOME)/.xinitrc Client  to  run.   Typically  a shell script 
which
    runs many programs in the background.

   $(HOME)/.xserverrc   Server to run.  The default is X.

   /etc/X11/xinit/xinitrc   Client to run if the user has no .xinitrc file.

   /etc/X11/xinit/xserverrc Server to run if the user has no .xserverrc 
file.

   

Re: Openbox ou IceWM ou GNUstep?

[Thiago Zoroastro]

 

Em Sábado, 8 de Outubro de 2016 12:32, Fred Maranhão 
 escreveu:
 

 Em 08/10/2016 00:41, "Thiago Zoroastro"  escreveu:
>
> Estive usando um Positivo "merendeira" de tela minúscula nos últimos dias e 
> fiz um clonezilla para um pendrive da Kingston que pode ser mexido sem temer.
>  
> Daí eu preciso adaptar minhas necessidades afinal estou sem o ThinkPad x60s, 
> então a necessidade move o usuário de Software Livre.
>  
> Estou eliminando tudo de LX (menos lxterminal), GNOME (preciso de 
> network-manager-gnome?), Wicd é um bom substitutoMATE e KDE disponível no 
> Debian clonado no Kingston. Ele precisa ser enxuto suficiente para rodar bem 
> nesse Intel(R) Atom(TM) CPU N455   @ 1.66GHz de 2GB RAM e tela minúscula que 
> não sei a resolução.
>  
> Mexo no volume de áudio com '$ alsamixer' e vejo carga de bateria pelo '$ 
> wmbattery'. upower é uma opção em linha de comando

   

Re: Synaptic NMU upload in testing

[kamaraju kusumanchi]

On Sat, Oct 8, 2016 at 10:04 AM, Brad Rogers  wrote:
> Hello,
>
> Yesterday, version 0.83+nmu1 of synaptic migrated to testing.  All fine
> and dandy, until I tried to run it:  Nothing, nada, zip.
>
> Trying from command line revealed that Synaptic was looking for a xapian
> function that was/is unavailable to it.  Error reported is -
>
> terminate called after throwing an instance of
> 'Xapian::FeatureUnavailableError' Aborted
>
> No idea what's missing (libxapian updated to v30)
>
> Synaptic 0.83+b1 still works.
>

It is working fine for me.

 % dpkg -l libxapian30 synaptic | grep ^ii
ii  libxapian30:amd64 1.4.0-2  amd64Search engine library
ii  synaptic  0.83+nmu1amd64Graphical package manager

 % inxi -r
Repos: Active apt sources in file: /etc/apt/sources.list
   deb http://httpredir.debian.org/debian/ stretch main contrib non-free
   deb-src http://httpredir.debian.org/debian/ stretch main
contrib non-free
   deb http://httpredir.debian.org/debian/ stretch-updates
main contrib non-free
   deb-src http://httpredir.debian.org/debian/ stretch-updates
main contrib non-free
   deb http://security.debian.org/ stretch/updates main contrib non-free
   deb-src http://security.debian.org/ stretch/updates main
contrib non-free

I am launching synaptic with
 % su-to-root -X -c synaptic


thanks
raju
-- 
Kamaraju S Kusumanchi | http://raju.shoutwiki.com/wiki/Blog

Re: Cannot apt-add repository

[kamaraju kusumanchi]

On Thu, Oct 6, 2016 at 1:27 PM, Rasku, Stephen (GE Digital)
 wrote:
> So, what is the best practice to get the latest (or at least newer) version 
> of git?  Compile from source?  I want to use some of the `git bisect` 
> features that were introduced in 2.7.
>

git 1:2.9.3-1 exists in testing and unstable distributions of Debian.
So one option is to update your machine to either testing or unstable.
Running testing or unstable is not for the faint of heart. So please
read https://www.debian.org/doc/manuals/debian-faq/ch-choosing.en.html
to help you decide whether it is worth it.

thanks
raju
-- 
Kamaraju S Kusumanchi | http://raju.shoutwiki.com/wiki/Blog

Installing mariadb fails in post-install script

[Markus Grunwald]

Hello,

encouraged by two successfull migrations from mysql to mariadb on
testing and jessie, I tried to do the same on my production server
(jessie). To my great shock, it failed:

% sudo dpkg --configure -a
Setting up mariadb-server-10.0 (10.0.27-0+deb8u1) ...
[ ok ] Stopping MariaDB database server: mysqld.
dpkg: error processing package mariadb-server-10.0 (--configure):
 subprocess installed post-installation script returned error exit status 7
dpkg: dependency problems prevent configuration of mariadb-server:
 mariadb-server depends on mariadb-server-10.0 (>= 10.0.27-0+deb8u1); however:
  Package mariadb-server-10.0 is not configured yet.

dpkg: error processing package mariadb-server (--configure):
 dependency problems - leaving unconfigured
Errors were encountered while processing:
 mariadb-server-10.0
 mariadb-server


I added a set -x to the mariadb-server-10.0 post-install script:
I really hope, you can help me to find this error...

# dpkg --configure -a
Setting up mariadb-server-10.0 (10.0.27-0+deb8u1) ...
+ . /usr/share/debconf/confmodule
++ '[' '!' '' ']'
++ PERL_DL_NONLAZY=1
++ export PERL_DL_NONLAZY
++ '[' '' ']'
++ exec /usr/share/debconf/frontend 
/var/lib/dpkg/info/mariadb-server-10.0.postinst configure ''
+ . /usr/share/debconf/confmodule
++ '[' '!' 1 ']'
++ '[' -z '' ']'
++ exec
++ '[' '' ']'
++ exec
++ DEBCONF_REDIR=1
++ export DEBCONF_REDIR
+ '[' -n '' ']'
+ export 
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/sbin:/usr/sbin:/bin:/usr/bin
+ 
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/sbin:/usr/sbin:/bin:/usr/bin
+ ERR_LOGGER='logger -p daemon.err -t mysqld_safe -i'
+ set -o pipefail
+ MYSQL_BOOTSTRAP='/usr/sbin/mysqld --bootstrap --user=mysql --disable-log-bin 
--skip-grant-tables --default-storage-engine=myisam'
+ set +e
+ invoke stop
+ '[' -x /usr/sbin/invoke-rc.d ']'
+ invoke-rc.d mysql stop
[ ok ] Stopping MariaDB database server: mysqld.
+ set -e
+ case "$1" in
+ mysql_datadir=/usr/share/mysql
+ mysql_statedir=/var/lib/mysql
+ mysql_rundir=/var/run/mysqld
+ mysql_logdir=/var/log
+ mysql_cfgdir=/etc/mysql
+ mysql_newlogdir=/var/log/mysql
+ mysql_upgradedir=/var/lib/mysql-upgrade
+ for dir in DATADIR LOGDIR
+ '[' DATADIR = DATADIR ']'
+ targetdir=/var/lib/mysql
+ savelink=/var/lib/mysql-upgrade/DATADIR.link
+ '[' -L /var/lib/mysql-upgrade/DATADIR.link ']'
+ rmdir /var/lib/mysql-upgrade
+ true
+ for dir in DATADIR LOGDIR
+ '[' LOGDIR = DATADIR ']'
+ targetdir=/var/log/mysql
+ savelink=/var/lib/mysql-upgrade/LOGDIR.link
+ '[' -L /var/lib/mysql-upgrade/LOGDIR.link ']'
+ rmdir /var/lib/mysql-upgrade
+ true
+ '[' '!' -d /var/lib/mysql -a '!' -L /var/lib/mysql ']'
+ '[' '!' -d /var/lib/mysql/mysql -a '!' -L /var/lib/mysql/mysql ']'
+ '[' '!' -d /var/log/mysql -a '!' -L /var/log/mysql ']'
+ set +e
+ chown -R 0:0 /usr/share/mysql
+ chown -R mysql /var/lib/mysql
+ chown -R mysql:adm /var/log/mysql
+ chmod 2750 /var/log/mysql
+ for i in log err
+ touch /var/log/mysql.log
+ chown mysql:adm /var/log/mysql.log
+ chmod 0640 /var/log/mysql.log
+ for i in log err
+ touch /var/log/mysql.err
+ chown mysql:adm /var/log/mysql.err
+ chmod 0640 /var/log/mysql.err
+ set -e
+ db_set mysql-server/postrm_remove_database false
+ _db_cmd 'SET mysql-server/postrm_remove_database' false
+ _db_internal_IFS='
'
+ IFS=' '
+ printf '%s\n' 'SET mysql-server/postrm_remove_database false'
+ IFS='
'
+ IFS='
'
+ read -r _db_internal_line
+ RET='10 mysql-server/postrm_remove_database doesn'\''t exist'
+ case ${_db_internal_line%%[   ]*} in
+ return 10
+ true
+ rm -f /var/lib/mysql/debian-10.0.flag
+ touch /var/lib/mysql/debian-10.0.flag
+ set +e
+ bash /usr/bin/mysql_install_db --rpm --user=mysql --disable-log-bin
+ logger -p daemon.err -t mysqld_safe -i
+ set -e
+ dc=/etc/mysql/debian.cnf
++ fgrep mysql_upgrade /etc/mysql/debian.cnf
+ '[' -e /etc/mysql/debian.cnf -a -n '[mysql_upgrade]' ']'
++ sed -n 's/^[ ]*password *= *// p' /etc/mysql/debian.cnf
++ head -n 1
+ pass=ovVKCuwwrT9XbSrm
+ chown 0:0 /etc/mysql/debian.cnf
+ chmod 0600 /etc/mysql/debian.cnf
++ /bin/echo -e 'USE mysql;\n' 'ALTER TABLE user CHANGE Password Password 
char(41) character set latin1 collate latin1_bin DEFAULT '\'''\'' NOT NULL;'
+ password_column_fix_query='USE mysql;
 ALTER TABLE user CHANGE Password Password char(41) character set latin1 
collate latin1_bin DEFAULT '\'''\'' NOT NULL;'
++ /bin/echo -e 'USE mysql;\n' 'SET sql_mode='\'''\'';\n' 'REPLACE INTO user 
SET ' '  host='\''localhost'\'', user='\''debian-sys-maint'\'', 
password=password('\''ovVKCuwwrT9XbSrm'\''), ' '  Select_priv='\''Y'\'', 
Insert_priv='\''Y'\'', Update_priv='\''Y'\'', Delete_priv='\''Y'\'', ' '  
Create_priv='\''Y'\'', Drop_priv='\''Y'\'', Reload_priv='\''Y'\'', 
Shutdown_priv='\''Y'\'', ' '  Process_priv='\''Y'\'',  File_priv='\''Y'\'', 
Grant_priv='\''Y'\'', References_priv='\''Y'\'', ' '  Index_priv='\''Y'\'', 
Alter_priv='\''Y'\'', Super_priv='\''Y'\'', Show_db_priv='\''Y'\'', ' '  
Create_tmp_table_priv='\''Y'\'', 

Re: [Artwork] Survey for the default artwork for Stretch

[Lisi Reisz]

On Saturday 08 October 2016 22:41:58 Lisi Reisz wrote:
> You can please all of the people some of the time, and all of the people
> some of the time, but you cannot please all of the people all of the time.

Corrigendum:
You can please all of the people some of the time, and some of the people
all of the time, but you cannot please all of the people all of the time.

:-(

Lisi

Re: seg fault on many applets

[Frank McCormick]

On 08/10/16 12:49 PM, Bhasker C V wrote:

Hi all
Sorry to get back to you all on this again. Its now nearly 4 days. Has
anybody had success in getting the packages of mate updated ?
My sources.list is
deb http://security.debian.org/ stretch/updates main
deb http://httpredir.debian.org/debian/ stretch main
deb http://httpredir.debian.org/debian/ stretch-backports main

Hopefully I have got things right. I am wondering if others had
success and I am missing something.


On Tue, Oct 4, 2016 at 9:08 PM, Frank McCormick  wrote:

On 04/10/16 11:15 AM, Bhasker C V wrote:


Hi all,

About mate again.
As per this https://sunweavers.net/blog/node/45 is says that ebnd of
Sept the packages must get fixed.
I however still find it difficult to run caja which is primary
file/folder manager.
and many other applets too are crashing.
Is there any schedule update which I can look forward to ?


On Fri, Sep 23, 2016 at 9:50 PM, Frank McCormick

 wrote:


On 23/09/16 07:30 AM, Bhasker C V wrote:



Thank you Frank
I am doing a daily update on my debian system in a hope some day it
will pickup the fix and also under a fear that every update may bring
some other disastrous consequence.


On Wed, Sep 21, 2016 at 7:42 AM, Frank McCormick
 wrote:



On 20/09/16 09:32 PM, Bhasker C V wrote:




Hi,
 I am on
$ lsb_release -a
No LSB modules are available.
Distributor ID:Debian
Description:Debian GNU/Linux testing (stretch)
Release:testing
Codename:stretch

Many of my applets (mate) are doing an sigsevg after an update)


[ 1147.639760] mate-power-mana[5487]: segfault at ff6e3ef8 ip
f63afadb sp ff6e3ee0 error 6 in
libc-2.23.so[f637b000+1ad000]
[ 1171.935436] caja[3057]: segfault at ff1c6fa8 ip f60eaadb sp
ff1c6f90 error 6 in libc-2.23.so[f60b6000+1ad000]


Is there anything to be setup locally or anything missing which is
causing this SIGSEGV ?  I am unable to even use the caja file manager.




  The mate desktop on Stretch/Sid is completely borked at the moment.
It
was
caused by the latest update to GTK 3.0. Fixed newer versions of
everything
are expected to be released from mate's GIT repository soon but it may
take
a little while before they make it into Debian. A temporary fix is to
downgrade GTK but that may be more trouble
than it's worth.






   I'm told (take it for what's it worth) that the Mate desktop will be
updated to 1.16 by the end of the month. I too are waiting anxiously :)






I received mail today from the Mate maintainer indicating the packages
have been updated to 1.16. They should pop up in updates in a
day or two.




   The updated packages are in Sid which I am now running. I don't know 
how long it will be until they get into Stretch.

Re: [Artwork] Survey for the default artwork for Stretch

[Lisi Reisz]

On Saturday 08 October 2016 19:00:12 Brian wrote:
> On Sat 08 Oct 2016 at 13:33:21 +0100, Lisi Reisz wrote:
> > On Friday 07 October 2016 23:23:54 Brian wrote:
> > > Seen as important enough to send to debian-devel. Some might be
> > > interested in voting.
> > >
> > >   https://lists.debian.org/debian-devel/2016/10/msg00042.html
> >
> > Thanks, Brian.  Since I do actually care, I have voted.  One or two of
> > them are so awful I might even consider leaving Debian if they were
> > chosen. ;-)
>
> I haven't examined them in that light. Obviously, there are some I
> prefer to others but I am very taken with the effort so many people have
> put into this. There is a proposal that, irrespective of the outcome,
> all the submissions end up in a package which can be installed.

That sounds like a great idea - after all, one man's meat is another man's 
poison. :-/

> I think 
> that would be a recognition of the *all* the work and hope it comes to
> fruition. Tastes vary, but we can try to cater for all of them.

You can please all of the people some of the time, and all of the people some 
of the time, but you cannot please all of the people all of the time.

Mind you, I know some people whom you cannot please ever. :-(

> Wasn't it the DPL who said - vote early and vote often. :)

:-))

Lisi

Re: ICMPv6 and the conntrack table

[Henrique de Moraes Holschuh]

On Sat, 08 Oct 2016, Florian Pelgrim wrote:
> This is the expected result without a firewall:
> $ ip route get 2404:6800:400a:800::1012
> 2404:6800:400a:800::1012 from :: via fe80::1 dev eth0  src
> fe80::d481:11ff:feee:4908  metric 0
> cache  hoplimit 64

Why do you have a default route via fe80::1 ?  Where did it came from?

> Now I setup some basic ip6tables firewall settings.

"Basic" IPv6 firewalling is, unfortunately, anything but basic... mostly
because ICMPv6 overloads both L2 and L3 control-plane functions.

RFC 4890 "to the rescue" :-(
https://tools.ietf.org/html/rfc4890

*do* read the errata to RFC4890, it is relevant if you use the iptable
examples.

> $ ip route get 2404:6800:400a:800::1012
> unreachable 2404:6800:400a:800::1012 from :: dev lo  table unspec  proto
> kernel  src fe80::d481:11ff:feee:4908  metric 4294967295  error -101

Your firewalling apparently broke the IPv6 DAD (which requires a subset
of ICMPv6, and multicast).  That would cause any interface address of
link-local scope or higher to be declared invalid (for failing DAD), and
unusable.

And the kernel is not about to send locally-originated packets with an
invalid source address (unless you override it with evil black magic).

> Uh? So lets look this up in conntrack. The results are pretty low...
> There is nothing to see. No v6 package in any state.

I don't think link-local L2 control-plane traffic ends up creating
conntrack entries, at least not in any reliable way (it can't).

It is best to do stateless firewalling for everything L2, including the
subset of ICMPv6 that deals with L2 functions and multicast control.

> And another question is how can I flush the cached results from `ip
> route get`? `ip route cache flush` is not working since I guess they
> changed the caching in kernel version 3.6.

"ip route cache flush" is supposed to still work, yes.  But I don't
think your problem is in the routing table (or cache) in the first
place.

I'd try to fix the IPv6 DAD issues, first.  Check the output of "ip -6
addr" for every relevant interface... it should say when an address is
invalid for failing DAD, AFAIK.

After that, keep in mind that the forwarding destination for link-local
addresses must be resolved through neighbor tables, not routing tables.
You can manipulate the IPv6 neighbor table using "ip -6 neigh".  For
more details, refer to RFCs 4007 and 4291.

-- 
  Henrique Holschuh

Re: Linux e Hardware em pequenos escritórios.

[Chinabhz]

Vc pode fazer com samba sim, mas existem opções como owncloud que podem ser 
mais interessantes dependendo do uso e dos usuários, como mobilidade por 
exemplo.

Depois de definido o software vc pode definir a arquitetura e o hardware.

Em 8 de outubro de 2016 14:30:00 BRT, Rodrigo Cunha  
escreveu:
>Senhores,
>gostaria de saber dos srs. qual é a melhor opção de hardware para criar
>um
>Storage (custo x beneficio) para clientes que possuem a necessidade de
>5TB
>de dados compartilhados.
>Qual seria a melhor opção em relação ao preço, para montar um servidor
>de
>arquivos e qual software livre mais indicado para essa opção.
>Penso em criar um servidor de arquivos com o Samba4 e implementar um
>Serviço de Domínio (tipo AD) em um servidor SAMBA separado.
>
>
>-- 
>Atenciosamente,
>Rodrigo da Silva Cunha

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

Thanks all - was [Re: Which version of Debian from which physical device?]

[Richard Owlett]

On 10/8/2016 12:36 PM, Felix Miata wrote:

Richard Owlett composed on 2016-10-08 10:47 (UTC-0500):


...today, while chasing down an intermittent problem, I
needed to know which point release was active...


cat /etc/debian_version


I never had need of "cat" before.
Exploring /etc was educational. Browsing randomly hints that much 
can be done to "have Debian *MY WAY* " [apologies to some fast 
food chain ;] Many man pages to investigate.





...and which physical device contained the OS...


(as Ben Finney already answered)
mount | grep 'on / '


Worked nicely.

ICMPv6 and the conntrack table

[Florian Pelgrim]

Hi,

I'm currently playing with ip6tables and seeing some strange stuff which
I not expected.
I configure my servers with Ansible which is able to lookup my default
IPv6 address. Therefore it uses `ip route get 2404:6800:400a:800::1012`
and parses the output.
Currently there is no IPv6 configured on the system so the default v6
address should be a link local address.

This is the expected result without a firewall:
$ ip route get 2404:6800:400a:800::1012
2404:6800:400a:800::1012 from :: via fe80::1 dev eth0  src
fe80::d481:11ff:feee:4908  metric 0
cache  hoplimit 64

Now I setup some basic ip6tables firewall settings.
1. Set the policy to drop
2. Allow everything, input and output, on loopback
3. Allow related and established connections for input and output
4. Allow every icmpv6 package with the flag new

$ ip6tables -nL
Chain INPUT (policy DROP)
target prot opt source   destination
ACCEPT all  ::/0 ::/0
ACCEPT all  ::/0 ::/0 state
RELATED,ESTABLISHED
ACCEPT icmpv6::/0 ::/0 state NEW

Chain FORWARD (policy DROP)
target prot opt source   destination

Chain OUTPUT (policy DROP)
target prot opt source   destination
ACCEPT all  ::/0 ::/0
ACCEPT all  ::/0 ::/0 state
RELATED,ESTABLISHED
ACCEPT icmpv6::/0 ::/0 state NEW

So far I thought this would work but what I get when I try to lookup now
my default IPv6 address is this:

$ ip route get 2404:6800:400a:800::1012
unreachable 2404:6800:400a:800::1012 from :: dev lo  table unspec  proto
kernel  src fe80::d481:11ff:feee:4908  metric 4294967295  error -101

I played some time with different rules and added a new rule for icmpv6
without the state flag. And there it works again.
Uh? So lets look this up in conntrack. The results are pretty low...
There is nothing to see. No v6 package in any state.

So why is conntrack ignoring my icmpv6 traffic?

And another question is how can I flush the cached results from `ip
route get`? `ip route cache flush` is not working since I guess they
changed the caching in kernel version 3.6.

OS details:
$ uname -a
Linux mail 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u1 (2016-09-03)
x86_64 GNU/Linux

$ dpkg-query -f "Package" -l iptables linux-image-* conntrack
Desired=Unknown/Install/Remove/Purge/Hold
|
Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name   Version
+++-==-=
ii  conntrack  1:1.4.2-2+deb8u1
ii  iptables   1.4.21-2+b1
ii  linux-image-3.16.0-4-amd64 3.16.36-1+deb8u1
ii  linux-image-amd64  3.16+63

Cheers
Florian



signature.asc
Description: OpenPGP digital signature

Re: [Artwork] Survey for the default artwork for Stretch

[Gene Heskett]

On Saturday 08 October 2016 08:33:21 Lisi Reisz wrote:

> On Friday 07 October 2016 23:23:54 Brian wrote:
> > Seen as important enough to send to debian-devel. Some might be
> > interested in voting.
> >
> >   https://lists.debian.org/debian-devel/2016/10/msg00042.html
>
> Thanks, Brian.  Since I do actually care, I have voted.  One or two of
> them are so awful I might even consider leaving Debian if they were
> chosen. ;-)
>
> Lisi

So did I.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: url redirected in chrome/chromium, but working fine, according to ping/traceroute, lynx, w3m, iceweasel.

[tomas]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sat, Oct 08, 2016 at 11:35:21AM -0400, Tony Baldwin wrote:

[...]

> >Can you use the chrome developper tools to see what's going on ? (Press
> >the F12 key while chrome is open) Select the network tab, and type the
> >url in your address bar.
> >The network panel should show you what happens
> 
> That doesn't seem to tell me anything traceroute doesn't, except
> trqacerout doesn't get redirect to a Yahoo! search like chrome does,
> but nothing I see there seems ot clarify WHY or HOW it's getting
> redirected, it's just showing me that it IS being led though some
> circolocuitous route to where it should not.

A shot in the dark, but worth a try anyway: IPV4 vs IPV6?

But I'd rather suspect Chrome doing something weird to the URL before
resolving (or -- who knows! having its own built-in resolver).

Perhaps looking at the traffic with tcpdump/wireshark can give you
an idea.

Regards
- -- tomás
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlf5NeoACgkQBcgs9XrR2kZ+PQCeOsGFniEXtN/uNxh7xpHmc5jg
SG0AmgMz751oR58+BwBJEKN5RP60UsGK
=NsR2
-END PGP SIGNATURE-

Re: [Artwork] Survey for the default artwork for Stretch

[Brian]

On Sat 08 Oct 2016 at 13:33:21 +0100, Lisi Reisz wrote:

> On Friday 07 October 2016 23:23:54 Brian wrote:
> > Seen as important enough to send to debian-devel. Some might be
> > interested in voting.
> >
> >   https://lists.debian.org/debian-devel/2016/10/msg00042.html
> 
> Thanks, Brian.  Since I do actually care, I have voted.  One or two of them 
> are so awful I might even consider leaving Debian if they were chosen. ;-)

I haven't examined them in that light. Obviously, there are some I
prefer to others but I am very taken with the effort so many people have
put into this. There is a proposal that, irrespective of the outcome,
all the submissions end up in a package which can be installed. I think
that would be a recognition of the *all* the work and hope it comes to
fruition. Tastes vary, but we can try to cater for all of them.

Wasn't it the DPL who said - vote early and vote often. :)

-- 
Brian.

Re: Which version of Debian from which physical device?

[Felix Miata]

Richard Owlett composed on 2016-10-08 10:47 (UTC-0500):


...today, while chasing down an intermittent problem, I
needed to know which point release was active...


cat /etc/debian_version


...and which physical device contained the OS...


(as Ben Finney already answered)
mount | grep 'on / '
--
"The wise are known for their understanding, and pleasant
words are persuasive." Proverbs 16:21 (New Living Translation)

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/

Linux e Hardware em pequenos escritórios.

[Rodrigo Cunha]

Senhores,
gostaria de saber dos srs. qual é a melhor opção de hardware para criar um
Storage (custo x beneficio) para clientes que possuem a necessidade de 5TB
de dados compartilhados.
Qual seria a melhor opção em relação ao preço, para montar um servidor de
arquivos e qual software livre mais indicado para essa opção.
Penso em criar um servidor de arquivos com o Samba4 e implementar um
Serviço de Domínio (tipo AD) em um servidor SAMBA separado.


-- 
Atenciosamente,
Rodrigo da Silva Cunha

Re: need help on pptp config

[Li Wei]

Thank Pascal Hambourg!

pptp-linux provides pptpsetup command.
I run pptpsetup with some options and it displays:

Using interface ppp0
Connect: ppp0 <--> /dev/pts/1
CHAP authentication succeeded
MPPE 128-bit stateless compression enabled
local  IP address 192.168.115.34
remote IP address 192.168.115.1

It seems that not every thing has been set up.

Re: seg fault on many applets

[Bhasker C V]

Hi all
Sorry to get back to you all on this again. Its now nearly 4 days. Has
anybody had success in getting the packages of mate updated ?
My sources.list is
deb http://security.debian.org/ stretch/updates main
deb http://httpredir.debian.org/debian/ stretch main
deb http://httpredir.debian.org/debian/ stretch-backports main

Hopefully I have got things right. I am wondering if others had
success and I am missing something.


On Tue, Oct 4, 2016 at 9:08 PM, Frank McCormick  wrote:
> On 04/10/16 11:15 AM, Bhasker C V wrote:
>>
>> Hi all,
>>
>> About mate again.
>> As per this https://sunweavers.net/blog/node/45 is says that ebnd of
>> Sept the packages must get fixed.
>> I however still find it difficult to run caja which is primary
>> file/folder manager.
>> and many other applets too are crashing.
>> Is there any schedule update which I can look forward to ?
>>
>>
>> On Fri, Sep 23, 2016 at 9:50 PM, Frank McCormick
>>
>>  wrote:
>>>
>>> On 23/09/16 07:30 AM, Bhasker C V wrote:


 Thank you Frank
 I am doing a daily update on my debian system in a hope some day it
 will pickup the fix and also under a fear that every update may bring
 some other disastrous consequence.


 On Wed, Sep 21, 2016 at 7:42 AM, Frank McCormick
  wrote:
>
>
> On 20/09/16 09:32 PM, Bhasker C V wrote:
>>
>>
>>
>> Hi,
>>  I am on
>> $ lsb_release -a
>> No LSB modules are available.
>> Distributor ID:Debian
>> Description:Debian GNU/Linux testing (stretch)
>> Release:testing
>> Codename:stretch
>>
>> Many of my applets (mate) are doing an sigsevg after an update)
>>
>>
>> [ 1147.639760] mate-power-mana[5487]: segfault at ff6e3ef8 ip
>> f63afadb sp ff6e3ee0 error 6 in
>> libc-2.23.so[f637b000+1ad000]
>> [ 1171.935436] caja[3057]: segfault at ff1c6fa8 ip f60eaadb sp
>> ff1c6f90 error 6 in libc-2.23.so[f60b6000+1ad000]
>>
>>
>> Is there anything to be setup locally or anything missing which is
>> causing this SIGSEGV ?  I am unable to even use the caja file manager.
>>
>
>
>   The mate desktop on Stretch/Sid is completely borked at the moment.
> It
> was
> caused by the latest update to GTK 3.0. Fixed newer versions of
> everything
> are expected to be released from mate's GIT repository soon but it may
> take
> a little while before they make it into Debian. A temporary fix is to
> downgrade GTK but that may be more trouble
> than it's worth.
>
>
>>>
>>>
>>>I'm told (take it for what's it worth) that the Mate desktop will be
>>> updated to 1.16 by the end of the month. I too are waiting anxiously :)
>>>
>>>
>>
>
> I received mail today from the Mate maintainer indicating the packages
> have been updated to 1.16. They should pop up in updates in a
> day or two.
>
>
>
>

Re: Which version of Debian from which physical device?

[Ben Finney]

Richard Owlett  writes:

> However today, while chasing down an intermittent problem, I needed to
> know which point release was active and which physical device
> contained the OS. Usually I have gparted installed and can determine
> the active device by the "locked" symbol.

The question “which physical device contains the OS?” may not have a
simple answer:

* “physical device” can have multiple layers of abstraction involved, so
  it's somewhat arbitrary which one you pick as “physical”.

* “the OS” can be on many devices, so you need to pick which part of the
  OS you're interested in.

A question with a simpler answer: “which device is currently mounted
as the root filesystem?”, may serve as a useful proxy. Here is one answer:

$ mount | grep 'on / '
/dev/sda1 on / type ext4 (rw,relatime,errors=remount-ro,data=ordered)

Does that proxy question suffice?

-- 
 \  “Progress might have been all right once, but it's gone on too |
  `\long.” —Ogden Nash |
_o__)  |
Ben Finney

Which version of Debian from which physical device?

[Richard Owlett]

I have a laptop set aside for experimenting with configuration 
options.
I currently have 2 instances each of Squeeze(Gnome DE) and 
Jessie(Mate DE).
My current practice has been during install to give meaningful 
names to the machine.
I.E. when using terminal the prompt may be "richard@min-squeeze" 
or "richard@max-jessie", etc. That is usually sufficient.


However today, while chasing down an intermittent problem, I 
needed to know which point release was active and which physical 
device contained the OS. Usually I have gparted installed and can 
determine the active device by the "locked" symbol.


Is there a log file with the info?
TIA

Re: url redirected in chrome/chromium, but working fine, according to ping/traceroute, lynx, w3m, iceweasel.

[Tony Baldwin]

On 10/08/2016 11:28 AM, claude juif wrote:


2016-10-08 3:53 GMT+02:00 Anthony Baldwin >:



On 10/07/2016 06:42 PM, david...@freevolt.org
 wrote:

On Fri, 7 Oct 2016, Tony Baldwin wrote:

I have a little business card website up for my big
brother's media
consulting side-business at http://playomatic.myownsite.me.
Now, at the moment, if I try to load it in
Google-Chrome-Stable, I'm
getting redirected to a yahoo! search for "create web",
If I try to load it in the floss chromium, I get a spammy
landing page,
But in all of Iceweasel, lynx, w3m, elinks it loads fine,
and nothing
has changed on my server (no redirect added to my vhost by
an intruder
or any such thing), also neither ping nor traceroute seem to
indicate
anything untoward or fishy.
The only thing I haven't tried is Epiphany, Konqueror,
Safari, or IE.
Oddly, it seems to work fine in chrome on my android phone,
though.

How can I determine what's interfering with this page
loading in some
browsers, and not others? or what's redirecting my traffic,
and how I
can stop it or prevent future re-occurrence?


This problem sounds bizarre to me.

One less-than-obvious conceivable factor that occurs to me is that
some webmail interfaces (looking at you, gmx.com
) will point urls in
email text at creepy redirects (presumably so that your email
provider
can log what you read).


But I'm typing the url directly into the browser, and not clicking
on a link in an e-mail.
Also, when I sign out of chrome/chromium-sync, it works fine again.
so yeah, definitely something very odd going on.


For example, a link labeled

 http://playomatic.myownsite.me 

will point to

 
https://deref-gmx.com/mail/client/[Some-Alpha-Numeric-Code]/dereferrer/?redirectUrl=http%3A%2F%2Fplayomatic.myownsite.me




If one of those redirects happens to be broken, through no fault of
yours, then following such links in emails might result in
unexpected
behaviour not unlike what you are seeing.

A shot in the dark, for what its worth.



As soon as I type in the url, it goes to 
http://bridge.sf.admarketplace.net/bounce?click_id=1475940640200100010_width=1680_height=1050_width=624_height=860_top=5_left=33_iframe=0
whereas traceroute shows it going to my modem-> a local hub-> Comcast's 
DNS server in Boston, then to New York, then jumping to Frankfurt -> 
Munich, then the server I rent from Contabo which is in Munich, afaik.


Thanks,
Tony




--
http://tonybaldwin.me
all tony, all the time

Re: url redirected in chrome/chromium, but working fine, according to ping/traceroute, lynx, w3m, iceweasel.

[Tony Baldwin]

On 10/08/2016 11:28 AM, claude juif wrote:


2016-10-08 3:53 GMT+02:00 Anthony Baldwin >:



On 10/07/2016 06:42 PM, david...@freevolt.org
 wrote:

On Fri, 7 Oct 2016, Tony Baldwin wrote:

I have a little business card website up for my big
brother's media
consulting side-business at http://playomatic.myownsite.me.
Now, at the moment, if I try to load it in
Google-Chrome-Stable, I'm
getting redirected to a yahoo! search for "create web",
If I try to load it in the floss chromium, I get a spammy
landing page,
But in all of Iceweasel, lynx, w3m, elinks it loads fine,
and nothing
has changed on my server (no redirect added to my vhost by
an intruder
or any such thing), also neither ping nor traceroute seem to
indicate
anything untoward or fishy.
The only thing I haven't tried is Epiphany, Konqueror,
Safari, or IE.
Oddly, it seems to work fine in chrome on my android phone,
though.

How can I determine what's interfering with this page
loading in some
browsers, and not others? or what's redirecting my traffic,
and how I
can stop it or prevent future re-occurrence?


This problem sounds bizarre to me.

One less-than-obvious conceivable factor that occurs to me is that
some webmail interfaces (looking at you, gmx.com
) will point urls in
email text at creepy redirects (presumably so that your email
provider
can log what you read).


But I'm typing the url directly into the browser, and not clicking
on a link in an e-mail.
Also, when I sign out of chrome/chromium-sync, it works fine again.
so yeah, definitely something very odd going on.


For example, a link labeled

 http://playomatic.myownsite.me 

will point to

 
https://deref-gmx.com/mail/client/[Some-Alpha-Numeric-Code]/dereferrer/?redirectUrl=http%3A%2F%2Fplayomatic.myownsite.me




If one of those redirects happens to be broken, through no fault of
yours, then following such links in emails might result in
unexpected
behaviour not unlike what you are seeing.

A shot in the dark, for what its worth.



Can you use the chrome developper tools to see what's going on ? (Press
the F12 key while chrome is open) Select the network tab, and type the
url in your address bar.
The network panel should show you what happens


That doesn't seem to tell me anything traceroute doesn't, except 
trqacerout doesn't get redirect to a Yahoo! search like chrome does,
but nothing I see there seems ot clarify WHY or HOW it's getting 
redirected, it's just showing me that it IS being led though some 
circolocuitous route to where it should not.








--
http://www.baldwinlinguas.com
translations, localization,
multilingual web development
EN, ES, FR, PT




--
http://tonybaldwin.me
all tony, all the time

Re: Openbox ou IceWM ou GNUstep?

[Fred Maranhão]

Em 08/10/2016 00:41, "Thiago Zoroastro" 
escreveu:
>
> Estive usando um Positivo "merendeira" de tela minúscula nos últimos dias
e fiz um clonezilla para um pendrive da Kingston que pode ser mexido sem
temer.
>
> Daí eu preciso adaptar minhas necessidades afinal estou sem o ThinkPad
x60s, então a necessidade move o usuário de Software Livre.
>
> Estou eliminando tudo de LX (menos lxterminal), GNOME (preciso de
network-manager-gnome?),

Wicd é um bom substituto

MATE e KDE disponível no Debian clonado no Kingston. Ele precisa ser enxuto
suficiente para rodar bem nesse Intel(R) Atom(TM) CPU N455   @ 1.66GHz de
2GB RAM e tela minúscula que não sei a resolução.
>
> Mexo no volume de áudio com '$ alsamixer' e vejo carga de bateria pelo '$
wmbattery'.

upower é uma opção em linha de comando

Re: url redirected in chrome/chromium, but working fine, according to ping/traceroute, lynx, w3m, iceweasel.

[claude juif]

2016-10-08 3:53 GMT+02:00 Anthony Baldwin :

>
>
> On 10/07/2016 06:42 PM, david...@freevolt.org wrote:
>
>> On Fri, 7 Oct 2016, Tony Baldwin wrote:
>>
>> I have a little business card website up for my big brother's media
>>> consulting side-business at http://playomatic.myownsite.me.
>>> Now, at the moment, if I try to load it in Google-Chrome-Stable, I'm
>>> getting redirected to a yahoo! search for "create web",
>>> If I try to load it in the floss chromium, I get a spammy landing page,
>>> But in all of Iceweasel, lynx, w3m, elinks it loads fine, and nothing
>>> has changed on my server (no redirect added to my vhost by an intruder
>>> or any such thing), also neither ping nor traceroute seem to indicate
>>> anything untoward or fishy.
>>> The only thing I haven't tried is Epiphany, Konqueror, Safari, or IE.
>>> Oddly, it seems to work fine in chrome on my android phone, though.
>>>
>>> How can I determine what's interfering with this page loading in some
>>> browsers, and not others? or what's redirecting my traffic, and how I
>>> can stop it or prevent future re-occurrence?
>>>
>>
>> This problem sounds bizarre to me.
>>
>> One less-than-obvious conceivable factor that occurs to me is that
>> some webmail interfaces (looking at you, gmx.com) will point urls in
>> email text at creepy redirects (presumably so that your email provider
>> can log what you read).
>>
>
> But I'm typing the url directly into the browser, and not clicking on a
> link in an e-mail.
> Also, when I sign out of chrome/chromium-sync, it works fine again. so
> yeah, definitely something very odd going on.
>
>>
>> For example, a link labeled
>>
>>  http://playomatic.myownsite.me
>>
>> will point to
>>
>>  https://deref-gmx.com/mail/client/[Some-Alpha-Numeric-Code]
>> /dereferrer/?redirectUrl=http%3A%2F%2Fplayomatic.myownsite.me
>> 
>>
>>
>> If one of those redirects happens to be broken, through no fault of
>> yours, then following such links in emails might result in unexpected
>> behaviour not unlike what you are seeing.
>>
>> A shot in the dark, for what its worth.
>>
>

Can you use the chrome developper tools to see what's going on ? (Press the
F12 key while chrome is open) Select the network tab, and type the url in
your address bar.
The network panel should show you what happens



>
>>
> --
> http://www.baldwinlinguas.com
> translations, localization,
> multilingual web development
> EN, ES, FR, PT
>
>

Re: [Artwork] Survey for the default artwork for Stretch

[Richard Owlett]

On 10/8/2016 7:33 AM, Lisi Reisz wrote:

On Friday 07 October 2016 23:23:54 Brian wrote:

Seen as important enough to send to debian-devel. Some might be
interested in voting.

   https://lists.debian.org/debian-devel/2016/10/msg00042.html


Thanks, Brian.  Since I do actually care, I have voted.  One or two of them
are so awful I might even consider leaving Debian if they were chosen. ;-)

Lisi



I'd rate them from silly to ugly, but none would cause me to 
abandon Debian


*IF* I can continue to set my display to a single solid color of 
my choice without shading/gradient.


I didn't see anything following a chain of links that would 
indicate I'd lose that option on Stretch. Is that a good assumption?

script em Raspbian

[G.Paulo]

Este problema não é exatamente sobre Debian, mas sobre o Raspbian rodando num 
Raspberry Pi. Mas creio que as causas e soluções sejam as mesmas que num 
desktop Debian. Diz respeito à inicialização de programas ou scripts quando se 
liga o computador (ou o pi). O caso é este: 

Ao ligar a máquina, espero que ela verifique se há um dispositivo usb (pen 
drive) conectado. Se houver, roda-se um certo programa (um script que faz um 
backup); se não houver o dispositivo conectado, roda-se outro programa (que faz 
aquisição de dados). O problema está em que, logo após o boot, em geral o 
dispositivo usb ainda não está montado, mas o sistema já está pronto e rodando. 
Logo, o dispositivo não é detectado (naquele exato instante) e não faz o 
backup. Parece-me que o 'montar um dispositivo' é uma tarefa que pode levar 
algum tempo...

Outro desafio associado a isso é que a cada vez que um dispositivo é montado, 
ele aparece como '/dev/sda' ou '/dev/sdb' (com meus arduinos conectados ao 
desktop Debian ocorre o mesmo, mas isso é outra história). Como não sei de 
antemão qualdos dois será o dispositivo, preciso verificar a existência de 
ambos.

Se for muito off-topic, ignorem, por favor.

[]'s, G.Paulo.

Synaptic NMU upload in testing

[Brad Rogers]

Hello,

Yesterday, version 0.83+nmu1 of synaptic migrated to testing.  All fine
and dandy, until I tried to run it:  Nothing, nada, zip.

Trying from command line revealed that Synaptic was looking for a xapian
function that was/is unavailable to it.  Error reported is -

terminate called after throwing an instance of
'Xapian::FeatureUnavailableError' Aborted

No idea what's missing (libxapian updated to v30)

Synaptic 0.83+b1 still works.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
You're all invited to a party, you don't even have to come
Get The Funk Out - Extreme


pgprpZiWizIQT.pgp
Description: OpenPGP digital signature

Re: [Artwork] Survey for the default artwork for Stretch

[Lisi Reisz]

On Friday 07 October 2016 23:23:54 Brian wrote:
> Seen as important enough to send to debian-devel. Some might be
> interested in voting.
>
>   https://lists.debian.org/debian-devel/2016/10/msg00042.html

Thanks, Brian.  Since I do actually care, I have voted.  One or two of them 
are so awful I might even consider leaving Debian if they were chosen. ;-)

Lisi

Partial Success [was: Re: Problems with upgrade from Wheezy to Jessie]

[Hans Kraus]

Hi,

after following the propositions of Brian:


 dpkg -l | grep fglrx

Lines with "ii" indicate installed packages. Purge and see what a reboot
does.

and Jörg-Volker Peetz:
> Hi,
>
> I also saw the other e-mail exchange with Brian where you concluded 
to purge all
> "fglrx"-related packages. Similarily, there seem to be "nvidia" 
packages on your

> system. Try
>
>  dpkg -l | grep -i nvidia
>
> Purge them also. Then have a look which xorg-video drivers are left:
>
>  dpkg -l | grep xorg-video
>
> Leave only xserver-xorg-video-radeon on the system.
>
> And have a look if there's still an "glx-alternative" package left, like
> glx-alternative-mesa. This could also be purged.

I issued:
===
root@robbe:/etc/X11# apt-get purge fglrx-atieventsd fglrx-driver 
fglrx-modules-dkms glx-alternative-fglrx libfglrx:amd64 
libfglrx-amdxvba1:amd64 libgl1-fglrx-glx:amd64


root@robbe:/etc/X11# apt-get purge glx-alternative-nvidia 
libegl1-nvidia:amd64 libgl1-nvidia-glx:amd64 libgl1-nvidia-glx:i386 
libgl1-nvidia-glx-i386 libgles1-nvidia:amd64 libgles2-nvidia:amd64 
libnvidia-eglcore:amd64 libnvidia-ml1:amd64 libnvidia-ml1:amd64 
libxvmcnvidia1:amd64 nvidia-alternative nvidia-driver nvidia-driver-bin 
nvidia-glx nvidia-installer-cleanup nvidia-kernel-common 
nvidia-kernel-dkms nvidia-modprobe nvidia-settings nvidia-support 
nvidia-vdpau-driver:amd64 xserver-xorg-video-nvidia


root@robbe:/etc/X11# apt-get install xserver-xorg-video-radeon
Reading package lists... Done
Building dependency tree
Reading state information... Done
xserver-xorg-video-radeon is already the newest version.
xserver-xorg-video-radeon set to manually installed.
The following package was automatically installed and is no longer required:
  libxnvctrl0
Use 'apt-get autoremove' to remove it.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@robbe:/etc/X11#
===
Which partially solved my problems. The system is now booting into Gnome
again.

A problem remains: the contents of the screen (I controlled only text
based ones like Thunderbird) are sometimes overwritten. This happens for
lines where the text is partially overwritten with other text (normally
or skewed) and line backgrounds. The contents are restored if I move the
mouse pointer to the distorted parts.

This looks like a driver issue to me. Is there a better mailing list to
cope with these problems as 'debian-user'?

Many thanks to all which helped me,
Kind regards,
Hans

Re: need help on pptp config

[Eero Volotinen]

How about using graphical pptp client, like network manager?

Eero

2016-10-07 4:04 GMT+03:00 Li Wei :

> I want to use vpn to bypass censor.
> In XP, it's OK
> In Linux I have installed and run pptp-linux:
>
> Using interface ppp0
> Connect: ppp0 <--> /dev/pts/1
> CHAP authentication succeeded
> MPPE 128-bit stateless compression enabled
> local  IP address 192.168.115.34
> remote IP address 192.168.115.1
>
> though I can visit sites not blocked by censor in Iceweasel
> I still can't visit sites blocked by censor
>
> below is by the Linux route command:
>
> Kernel IP routing table
> Destination Gateway Genmask Flags Metric RefUse
> Iface
> default www.routerlogin 0.0.0.0 UG0  00
> eth0
> 192.168.1.0 *   255.255.255.0   U 0  00
> eth0
>
> I think sth. is wrong. Below is by Windows XP route command:
> (Note that I have changed the real IP to 103.72.6.116.)
>
> 
> ===
> Interface List
> 0x1 ... MS TCP Loopback interface
> 0x10003 ...00 19 21 d1 80 74 .. Realtek RTL8139 Family PCI Fast
> Ethernet NIC
> 0x20004 ...00 53 45 00 00 00 .. WAN (PPP/SLIP) Interface
> 
> ===
> 
> ===
> Active Routes:
> Network DestinationNetmask  Gateway   Interface  Metric
>   0.0.0.0  0.0.0.0  192.168.1.1 192.168.1.3
>  21
>   0.0.0.0  0.0.0.0   192.168.115.34  192.168.115.34   1
>  103.72.6.116  255.255.255.255  192.168.1.1 192.168.1.3
>  20
> 127.0.0.0255.0.0.0127.0.0.1   127.0.0.1   1
>   192.168.1.0255.255.255.0  192.168.1.3 192.168.1.3
>  20
>   192.168.1.3  255.255.255.255127.0.0.1   127.0.0.1
>  20
> 192.168.1.255  255.255.255.255  192.168.1.3 192.168.1.3
>  20
>192.168.115.34  255.255.255.255127.0.0.1   127.0.0.1
>  50
>   192.168.115.255  255.255.255.255   192.168.115.34  192.168.115.34
>  50
> 224.0.0.0240.0.0.0  192.168.1.3 192.168.1.3
>  20
> 224.0.0.0240.0.0.0   192.168.115.34  192.168.115.34   1
>   255.255.255.255  255.255.255.255  192.168.1.3 192.168.1.3   1
>   255.255.255.255  255.255.255.255   192.168.115.34  192.168.115.34   1
> Default Gateway:192.168.115.34
> 
> ===
> Persistent Routes:
>   None
>
>
>
> What should I do to get iceweasel working?
> Thanks in advance!
>
>
>
>

Re: need help on pptp config

[Pascal Hambourg]

Warning : the "References:" field in your mail header is wrong and does 
not link to the message you replied to, so it breaks the thread.


Le 08/10/2016 à 03:00, Li Wei a écrit :


how to add a route to the remote IP 192.168.115.1 on interface ppp0? Thanks!


The route should have been added automatically by pppd because it is 
ppp0's peer address and ppp0 is UP, as can be seen in pppd's log and in 
the output of ifconfig and ip addr.


Also a route to the PPTP server should have been automatically added by 
pptp-linux, so that it is still reachable if pppd alters the default 
route with the "defaultroute replacedefaultroute" option.



In Linux I use VPN with pptp-linux


How do you use pptp-linux ? Please provide all details.


ppp0  Link encap:Point-to-Point Protocol
  inet addr:192.168.115.34  P-t-P:192.168.115.1  Mask:255.255.255.255
  UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1496  Metric:1