RE: Sendmail vs Exim vs Others

[Ian Perry]

Over the weekend, I will 'play'.

I just came across this comparison of the four which I found interesting.
http://shearer.org/en/writing/mtacomparison.html





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Sendmail vs Exim vs Others

[Ian Perry]

Hi,

I know this question is subjective to personal preferences  Is there an
advantage to exim over sendmail or vice versa for ease of setup/maintenance
etc ?  I would be interested in comments from those who have used both.

Is there something better than either of them ?

I have very little experience with either of them, and have found nothing in
the archives on the subject.  I need something extremely simple to simply
send and receive mail, but not to be an open relay.

I have been to both exim and sendmail websites and both 'seem' to do pretty
much the same job and can get as complex as you want.

Ian


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

RE: Sendmail and TLS

[Ian Perry]

Then the problem must be somewhere else

I am getting TLSSTART error messages in syslog as I have not set up any of
the files in the ssl directory.

Ian

> -Original Message-
> From: Oliver Fuchs [mailto:[EMAIL PROTECTED]
> Sent: Friday, 30 January 2004 3:03 PM
> To: 'debian-user'
> Subject: Re: Sendmail and TLS
> 
> On Fri, 30 Jan 2004, Ian Perry wrote:
> 
> > Hi,
> >
> > It appears that Sendmail in Debian 3.0 comes with TLS enabled.
> >
> > I have been through sendmail.org to no avail.  Is there an easy way of
> > disabling it ? and what are the consequences.  I don't have roving
> users,
> 
> 
>  From /usr/share/doc/sendmail-doc/Debian.sendmail-doc you get:
> 
>  [...]
> 
>   Removed:
> -
> 
>   1)  TLS support disabled because the maintainer is in the US,
>   he'll need to wait until Debian supports crypto export from
> US.
> 
>  [...]
> 
> 
> 
> Oliver
> --
> ... don't touch the bang bang fruit
> 
> 
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Sendmail and TLS

[Ian Perry]

Hi,

It appears that Sendmail in Debian 3.0 comes with TLS enabled.

I have been through sendmail.org to no avail.  Is there an easy way of
disabling it ? and what are the consequences.  I don't have roving users,
and the network is static so entries in the relay_domains would suffice.

Ian



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

RE: stopping exim4 from hanging on startup with no network

[Ian Perry]

Hi,

I don't know if this is related or not...

Sendmail used to hang on me with no network (for a min or so) until I put an
entry in the hosts file to cover the domain name.

Sendmail was trying to look up the mailname on the nonexisting network.

Ian

-Original Message-
From: Micha Feigin [mailto:[EMAIL PROTECTED] 
Sent: Friday, 30 January 2004 5:20 AM
To: debian-user
Subject: Re: stopping exim4 from hanging on startup with no network

On Thu, Jan 29, 2004 at 09:08:05AM +, Clive Menzies wrote:
> On (29/01/04 00:32), Micha Feigin wrote:
> > I have exim4 setup on a laptop, thus the network isn't always available
> > when the system starts up.
> > The problem is that when the network isn't found it hangs for about a
> > minute before it gives up and lets the boot process continue which is
> > very annoying. I think it is hanging on trying to connect to the
> > smarthost but I'm not sure.
> > Any way to tell it to do that in the background, avoid the check on
> > startup or give up faster?
> Hi Micha
> 
> Is it only when searching for the network?  Since upgrading to exim4, I
> experience a long delay during "starting MTA" in the boot sequence.
> This is on a desktop permanently connected with a manually assigned IP
> address.
> 

Its got a delay of a minute I think (I measured once) during the
"starting MTA" message, like you, but it only hangs if the network is
not connected. If its got an active network then it takes only a second
or two.

> It's a minor irritation, because reboots are infrequent but on a laptop,
> it must be a "pain in the *ss"
> 
> Regards
> 
> Clive
> 
> 
> -- 
> http://www.clivemenzies.co.uk
> strategies for business
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
> with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]
> 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

RE: Mailbox problem... messgae too large

[Ian Perry]

Thanks Brian.

This works fine for all other accounts except the one in question.
I have no doubt I will need a linux solution in the future.

The session looks like this

mserver:~# telnet localhost 110
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
+OK POP3 localhost v7.59 server ready
user XX
+OK User name accepted, password please
pass YY

(comment:  there is a pause here of approx 30 seconds)

-ERR Can't get lock.  Mailbox in use

Connection closed by foreign host.
mserver:~#


I solved the problem by another roundabout method

Create dummy account on server
Copy file to dummy account (in this case it was mailman)
Go to Windows machine
Log in using imap and move all OTHER messages to local mailbox on windows
machine
Delete mailbox from server
Log in using imap and move messages back.
Copy dummy mailbox to real mailbox
Get client to receive mail.

PS:  
After the telnet session... what's the command to leave pop3 ?

Regards

Ian


-Original Message-
From: Brian Schmidt [mailto:[EMAIL PROTECTED] 
Sent: Thursday, 29 January 2004 12:40 PM
To: Ian Perry
Cc: Debian Users
Subject: Re: Mailbox problem... messgae too large



Ian Perry wrote:
> Hi,
> 
> I have a mailbox here where someone sent a 141MB (yep.. 141 meg) message
to
> it, and now we cannot delete that message.
> 
> Mail(x) responds with,
> fseek: Invalid argument
> panic: temporary file seek
> Segmentation fault
> client email programs time out.
> 
> Other than deleting the entire mailbox, does anyone know of an easy way of
> getting rid of that one message from the server ?
> 
> Any ideas would be helpful as there are other mails in the box which we
> don't really want to lose.
> 
> Thanks
> 
> Ian
> 
> 
> 

telnet host.of.the.pop.server 110
+OK POP3 server ready
user username
+OK Please send PASS
pass password
+OK User mailbox has 8 messages (245793 octets)
list
+OK 8 messages (245793 octets)
1 18696
2 95954
3 1187
4 34837
5 1131
6 30235
7 31968
8 31785
.
dele 8
+OK message 8 deleted.


Sincerely

Brian Schmidt


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Mailbox problem... messgae too large

[Ian Perry]

Hi,

I have a mailbox here where someone sent a 141MB (yep.. 141 meg) message to
it, and now we cannot delete that message.

Mail(x) responds with,
fseek: Invalid argument
panic: temporary file seek
Segmentation fault
client email programs time out.

Other than deleting the entire mailbox, does anyone know of an easy way of
getting rid of that one message from the server ?

Any ideas would be helpful as there are other mails in the box which we
don't really want to lose.

Thanks

Ian



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

RE: FW: registration confirmation...

[Ian Perry]

Apology accepted... I have to admit, it was a fairly dumb question.

I can understand the frustration.  I had not seen the other posts as I
subscribed again only yesterday, after a 3 year break.  I have in the past
subscribed to one list only to be put on another at the same time.

You are fortunate indeed if you don't have to use windows.  On a corporate
level here they are going to ... wait for it... "Active directory rollout"
 and have been watching too much TV.

Dump windows ?  I would love to.  Corporate says otherwise.

The linux server we have used in this corner of the corporation has never
missed a beat in the past 5 years (ditto for novell), so I have been almost
100% involved in windows problems (viruses included) but not by choice.

I guess that makes me one of those who are vainly attempting to protect a
windows network using linux, after all, you can't protect windows with
windows.  You have to use something decent.



 

-Original Message-
From: s. keeling [mailto:[EMAIL PROTECTED] 
Sent: Thursday, 29 January 2004 11:20 AM
To: Debian User
Subject: Re: FW: registration confirmation...

Incoming from Ian Perry:
> Firstly... my apologies to the list.
> 
> Well, thank you for your abrupt reply and for being so damn rude.
> 
> If you can't be civil, then please in future don't bother responding.
> 
> A simple "Yes, its just spam would have sufficed" thank you.

I'll agree, I was abrupt, but I've already seen about fifteen replies
to the list saying, "Yes, it's Spam."  How could you have missed them?

Why is debian-* the place to go to complain about Windows viruses?!?
I choose Linux & Debian to avoid Windows and all its cracks and
deficiencies.  Others (perhaps including you?) use Linux/Debian in a
pointless attempt to support/protect an unusable Windows system.  Why
should I care about them?  I've already told them often enough; dump
Windows and this will cease to be a bother to you.

Sorry for the attitude.  I despise Windows and Microsoft and
everything about them.  I blame them for having designed such a shoddy
system the net is now flooded with worms and viruses to which only
Windows is susceptible.  The sooner people learn not to use that
crap, the sooner the world will be a better place.


-- 
Any technology distinguishable from magic is insufficiently advanced.
(*)   http://www.spots.ab.ca/~keeling 
- -


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

RE: FW: registration confirmation...

[Ian Perry]

Firstly... my apologies to the list.

Well, thank you for your abrupt reply and for being so damn rude.

If you can't be civil, then please in future don't bother responding.

A simple "Yes, its just spam would have sufficed" thank you.




-Original Message-
From: s. keeling [mailto:] 
Sent: Thursday, 29 January 2004 9:56 AM
To: Debian Users
Subject: Re: FW: registration confirmation...

Incoming from Ian Perry:
> 
> Does anyone know what this is ?
> 
> Or is it just elaborate spam ?
> 
> Or am I now on yet ANOTHER spam list ?

FOR CRYING OUT LOUD, THINK!  The From: says lists.debian.org.  You're
subscribed to some list at lists.debian.org, somebody sent crap to the
list, and lists.debian.org sent you a copy of what was sent to the
list.

Why is this so difficult?!?  The current outbreak of Windows worms and
viruses was front page news in my newspaper yesterday and today.  HOW
COULD YOU HAVE MISSED THIS?!?

If this is too much for you, some options are:

  - don't use Windows.

  - don't subscribe to mailing lists.

  - filter your mail.

  - hunt down virus/worm writers and spammers and kill them.


-- 
Any technology distinguishable from magic is insufficiently advanced.
(*)   http://www.spots.ab.ca/~keeling 
- -


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

FW: registration confirmation...

[Ian Perry]

Does anyone know what this is ?

Or is it just elaborate spam ?

Or am I now on yet ANOTHER spam list ?




-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 28 January 2004 5:51 PM
To: [EMAIL PROTECTED]
Subject: registration confirmation

Thanks for your registration.
( We say Sorry again, the first mail was delivered to an unknown mail
address.
This was a bug in our mailing system! )


The amount of 239.- USD was deducted by your account.

Welcome,
you can now visit more than 1200 very very hot web pages!
Your registration, pages and passwords are transferred in the attachment.

Enjoy




Received: from murphy.debian.org (murphy.debian.org [146.82.138.6])
by inertia.com.au (8.9.3/8.9.3/Debian/GNU) with ESMTP id SAA01185
for <[EMAIL PROTECTED]>; Wed, 28 Jan 2004 18:47:22 +1100
Received: from localhost (localhost [127.0.0.1])
by murphy.debian.org (Postfix) with QMQP
id EDDD0ECE8; Wed, 28 Jan 2004 01:49:23 -0600 (CST)
Old-Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Received: from WIN.org (ppp-166-177.25-151.libero.it [151.25.177.166])
by murphy.debian.org (Postfix) with ESMTP
id 3A6D4EB4C; Wed, 28 Jan 2004 00:50:33 -0600 (CST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: registration confirmation
X-MailScanner: Analysis  clean
Importance: Normal
X-Mailer: X-SMTP V5.10
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="_WIN_Mime_000.5f5340eb208b.05d"
Date: Wed, 28 Jan 2004 00:50:33 -0600 (CST)
X-Spam-Checker-Version: SpamAssassin 2.60-lists.debian.org_2003_12_03 
(1.212-2003-09-23-exp) on murphy.debian.org
X-Spam-Status: No, hits=3.0 required=4.0 tests=NO_REAL_NAME,RCVD_IN_NJABL,
RCVD_IN_NJABL_DIALUP,RCVD_IN_SORBS,SENDER_FOR_US autolearn=no 
version=2.60-lists.debian.org_2003_12_03
X-Spam-Level: **
Resent-Message-ID: <[EMAIL PROTECTED]>
Resent-From: [EMAIL PROTECTED]
X-Mailing-List: <[EMAIL PROTECTED]> archive/latest/325036
X-Loop: [EMAIL PROTECTED]
List-Id: 
List-Post: 
List-Help: 
List-Subscribe:

List-Unsubscribe:

List-Archive: 
Precedence: list
Resent-Sender: [EMAIL PROTECTED]
Resent-Date: Wed, 28 Jan 2004 01:49:23 -0600 (CST)
Status:   


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

pppoe

[Ian Perry]

Hi,

 

I have been asked to set up a box with a pppoe connection to an ISP,
never having used it before.

 

Does pppoe keep the connection alive automatically, or do I need a
script to redial ?  If so, where can I find one.

 

Any information or pointers on pitfalls and setting up, other than what
is in the user files, would be helpful.

 

Thanks

 

Ian

 

pppupd... where has it gone ?

[Ian Perry]

Hi,

I noticed that pppupd is not in Debian 3.

Is there something different, or has pppd been modified/updated to take care
of redialling after a connection is broken on a modem ?

Thanks

Ian



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Thanks for alll your help

[Ian Perry]

Guys and Gals,

I am off on leave for a while so have unsubscribed (hopefully successfully).

Thanks for all your help... Take care and talk to you when I get back.

Sun, Sand, Surf, no phones... bliss
h... I wonder if my PC will fit in the suitcase...

Ian

RE: netcard

[Ian Perry]

A little more info would be helpful.
What card is it ?
What is the number of the surface mount chip on the card.

Ian


> -Original Message-
> From: Tandex [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 22, 2001 5:01 AM
> To: Debian-User mailing list
> Subject: netcard
>
>
> http://www.clasohlson.se/images/products/S/hi/B/327917_Xw2.jpg
>
> Is this card suported by linux?
>
> __
> Do You Yahoo!?
> Make international calls for as low as $.04/minute with
> Yahoo! Messenger
> http://phonecard.yahoo.com/
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]

RE: Preventing logins /bin/false ?

[Ian Perry]

> From: Martin Fluch [mailto:[EMAIL PROTECTED] Behalf Of Martin
> Fluch
> Sent: Monday, August 20, 2001 5:19 PM
>
> > I would rather give people as little information about the system as
> > possible.  There is also a risk (however slight) that
> /bin/false could
> > be replaced with a bash program.  I don't believe that this could be
> > done with /dev/null (or could it ?)
>
> It's not a problem at all to replace /dev/null with anything
> you want to
> (i.e. it's as problematic as replacing /bin/false)...

Shot down again :)
I guess that is the beauty of Linux... you can do just about anything and
everything.

Ian

RE: Preventing logins /bin/false ?

[Ian Perry]

> From: Vineet Kumar [mailto:[EMAIL PROTECTED]
> Sent: Saturday, August 18, 2001 8:18 AM
>
> * Ian Perry ([EMAIL PROTECTED]) [010816 20:11]:
> > Hi,
> >
> > Quick question.
> > I have been using /dev/null to prevent shell logins (yet
> still leave pop3
> > etc running) as follows:
> > username:x:1000:1000:Mr User,,,:/home/homedir:/dev/null
> >
> > I noticed that the shell can also be put as /bin/false as in ftp
> >
> > I prefer /dev/null as the user is instantaneously
> disconnected without any
> > messages.
>
> Umm ... how does that make it preferable to /bin/false, which
> does (from
> the user's perspective) exactly the same?  Note: it has nothing to do
> with ftp, except that ftp users are commonly assigned this shell to

I realise this.

> prevent them from logging in to a shell. I think /bin/false is a more
> common approach, as it is an actual executable binary. Somehow that
> makes it make more sense to call exec() on. So really, what it does is
> actually run, failing, rather than failing to run (as a properly
> permissioned /dev/null would do).
>
> The difference seems pedantic, and it should make no practical
> difference.
>

I agree that it makes no practical difference.
If I log in with /bin/false I get...


Linux sydney 2.0.36 #1 Thu Sep 2 09:28:09 EST 1999 i686 unknown

Copyright (C) 1993-1999 Software in the Public Interest, and others

Most of the programs included with the Debian GNU/Linux system are
freely redistributable; the exact distribution terms for each program
are described in the individual files in /usr/doc/*/copyright

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Mon Aug 20 16:50:17 on ttyp2 from IP.
No mail.


With /dev/null I get nothing, not even a message.

I would rather give people as little information about the system as
possible.  There is also a risk (however slight) that /bin/false could be
replaced with a bash program.  I don't believe that this could be done with
/dev/null (or could it ?)

BTW, 2.0.36 is incorrect, I just have not been bothered to fix it.

Ian

Preventing logins /bin/false ?

[Ian Perry]

Hi,

Quick question.
I have been using /dev/null to prevent shell logins (yet still leave pop3
etc running) as follows:
username:x:1000:1000:Mr User,,,:/home/homedir:/dev/null

I noticed that the shell can also be put as /bin/false as in ftp

I prefer /dev/null as the user is instantaneously disconnected without any
messages.

Is there a possible problem with this ?

Ian

RE: debian-user-digest Digest V101 #1151

[Ian Perry]

> From: dman [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 17, 2001 12:17 AM
>
> On Wed, Aug 15, 2001 at 10:35:12PM -0700, Karsten M. Self wrote:
>
> | I've found that the listmanager can be slow to respond, and this has
> | caused problems in the past.  Persistence and civility is
> helpful, as is
> | directly contacting someone in the Debian hierarchy.  Ben
> Collins is the
> | current Debian leader, reachable at [EMAIL PROTECTED]
>
> The other (non)solution is to simply use a procmail recipe to redirect
> the list to /dev/null.
>
Thats if he is receiving mail via a linux box.

Ian

RE: How to make ppp0 default gateway automaticly?

[Ian Perry]

> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Thursday, August 16, 2001 4:31 PM
>
> >> 
> >> >but how can I make ppp0 the default gateway automaticly when
> >> ppp0 is up?
> >> 
> >>
> >> [EMAIL PROTECTED]:~$ grep def /etc/ppp/options
> >> defaultroute
> >>
> >
> >I also believe that
> >route add default ppp0
> >also works (although it is a while since I have done tis.

Just looked at the ISDN scripts here at work...
route add default ippp0
should be the same for ppp0 tho

>
> dunno, but if you have to set the route manually
>  route add -net 0/0 ppp0
> will certainly work.
>
> It´s just that Tao asked for auto/magic, and that lies in the
> options-file resp. in invoking pppd like
>  pppd eth0 defaultroute
> (maybe the options must be reserved, I don´t have PPPoE-hacks in my
>  pppd, only PPTP- ones).
>
defaultroute in options is definately the right way to go.
I had one machine here a while ago where we put the route sdd default in
the ip-up script

Ian

RE: How to make ppp0 default gateway automaticly?

[Ian Perry]

> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Thursday, August 16, 2001 4:07 PM

> On Thu, 16 Aug 2001 14:05:07 +0800, Tao Liu writes:
> 
> >but how can I make ppp0 the default gateway automaticly when
> ppp0 is up?
> 
>
> [EMAIL PROTECTED]:~$ grep def /etc/ppp/options
> defaultroute
>

I also believe that
route add default ppp0
also works (although it is a while since I have done tis.

Ian

RE: How to answer

[Ian Perry]

> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Thursday, August 16, 2001 3:28 PM

>
> Personally I set Reply-To on a per mail basis, in fact I use it much
>  like Followup-To in usenet. If I want to get Cc´ed I simply
>  Reply-To: debian-user@lists.debian.org, [EMAIL PROTECTED]
>  I can´t see anything wrong with that.

I tend also to do this as well.

>
> I can see a problem, though, if someone wants "normal" follow-ups to
>  the list, but the occasional private reply to an address other than
>  which was posted from.
>

There is also another problem which noone (I believe) has really addressed.
In a discussion post like this it is possibly better for it to go only to
the list, but in the case of a system problem, the post should really always
be cc'd back to the originator (if he/she wishes).

When you are up to your knees in a broken system it is sometimes preferable
not to have to scan a general list which may be up to 45 mins delayed.


> Of course, this is all IMHO, and I´m somewhat sleep-deprived at the
>  moment and haven´t had enough coffee yet, so please take it with a
>  grain of salt :)
done

I am glad I am not the only one feeling this way

Ian

Getting off the list

[Ian Perry]

Mike

send an email to [EMAIL PROTECTED] with the single word
unsubscribe in the SUBJECT line
Do not put it in the body of the text.

See the last line of this email

Ian


> -Original Message-
> From: Michael Hambe [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 15, 2001 8:52 PM
> To: debian-user@lists.debian.org
> Subject: Re: debian-user-digest Digest V101 #1151
>
>
> Can any body actually tell me how to get off this list.
>
>
> --
> Thanks
>
> Mick
>
> [EMAIL PROTECTED]
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]

RE: How to answer

[Ian Perry]

> From: Gilles Pelletier [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 15, 2001 2:36 PM

>
> I'm used to a web - news interface, but not to email - news.
> I can't post
> directly to th enewsgroup. I suppose that's normal. I
> received two copies
> of some posts, none of others. Answering to any any of the
> two copies I
> received, sends the reply to sender, not to the newsgroup.
> I'm using Eudora.
>
> How's this supposed to work?
>

The way I understand it is...

You get a copy from every post which hits the list.

You will get two posts if a message (like this one) is sent to the list and
copied to you as well... in effect a reply to all.

I actually prefer it this way as one ends up in my Debian Box, and the other
ends up with my personal mail... others may not.

Ian

RE: Why is Debian lagging so much behind Slackware?

[Ian Perry]

I have used Slackware in the past and I will NEVER use it again.  It was
just so damn unreliable (windows spent more uptime than the slackware
system), and it became difficult to maintain... as for upgrading... to your
newbies... all I can say is "I wish you the best of luck you will need
it", although they will benefit from the experience.

It really all depends  on how much time they have for maintenance and
'tweaking' the system.  The decision to go Debian here was purely a
commercial one which related to downtime.  With slackware it was approachine
5% in the end.  Debian... zero.  Sure Slackware may have the latest and
greatest, but for reliability and stability, I will chose Debian every time.

Ian



> -Original Message-
> From: Gilles Pelletier [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 15, 2001 11:47 AM
> To: debian-user@lists.debian.org
> Subject: Why is Debian lagging so much behind Slackware?
>
>
> We're a small group mulling over the respective merits of Debian and
> Slackware for a newbie. Of course, since apt-get takes care
> of installing
> dependencies and upgrading the whole installed software, we
> were leaning
> towards Debian. The newbie, even though his concerns for security are
> limited, wouldn't have to care too much about it.
>
> Only a "tiny" problem remains. Potato is not up to date and
> it's apparently
> difficult to upgrade software unless you get patches at
> specialised places
> ( http://kde.tdyc.com for the KDE 2.x serie, for instance. )
> You then must
> hope the patch is well done.
>
> We though about installing Woody, but, as you people know, the boot
> disquettes don't boot yet. Potato must first be installed and
> an upgrade
> made to Woody. Newbies might not appreciate...
> As for Woody, once again, it's going to be out... when it's
> ready, which
> might as well mean in June 2002, one year after Slack was out.
>
> How the hell is Volkerding and his small pack managing to put
> out Slack 8
> with XFree86 4.1.0, kernel 2.4.5, KDE 2.1.2, GNOME 1.4, glibc 2.2.3,
> Mozilla, Galeon, Nautilus, ProFTPD, OpenSSH, OpenSSL,
> mod_ssl, mod_php...
> and all the usual utilities, hardly 3 months after Mandrake rushed out
> their broken down distro? Has anybody heard that Slackware
> isn't safe : ) ?
>
> Is apt-get really worth this huge delay? We do plan to teach
> the newbie
> some fundamentals.
>
> BTW, in case you wouldn't know, even newbies like to be
> cutting edge...
> even more so than oldies I'd say : )
>
> GP
>
> --
> La Masse Critique
>
> Le sionisme est aujourd'hui aux juifs ce que le nazisme était
> aux Allemands
> chrétiens.
>
> http://pages.infinit.net/mcrit/sionisme.html
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]

RE: Fwd: Re: debian-user-digest Digest V101 #1132

[Ian Perry]

For once I am ashamed to be Australian..
No, I will never be ashamed of being an Australian.

I am however ashamed to be living in the same country (and the same state)
as someone who is so rude and naive and abuses the rest of the world like a
spoilt child who believes that he is the only one who matters, and cannot
even be bothered to read the bottom of an email to learn how to unsubscribe.

Its people like this who give the world the impression that we (Australians)
are still a bunch of convicts instead of intelligent residents of the 'Lucky
Country'.

On behalf of all the educated Australians, I pray that you do not judge us
all by the occasional fool.   We are not all ignorant.

Ian


> -Original Message-
> From: John Galt [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 15, 2001 11:07 AM
> To: Michael Hambe
> Cc: debian-user@lists.debian.org;
> [EMAIL PROTECTED]
> Subject: Re: Fwd: Re: debian-user-digest Digest V101 #1132
>
>
>
>
> Bring it on, masochist.  I've CC'd your upstream just so
> everyone's on the
> same page.  You subscribed to the list, you sent a
> confirmation email, now
> you threaten because it sends you stuff.  WHAT DID YOU
> EXPECT?!  I beg of
> optushome to redirect all mail for [EMAIL PROTECTED]
> to /dev/null
> and save us all problems.
>
> On Wed, 15 Aug 2001, Michael Hambe wrote:
>
> >Me again,
> >
> >I use manners the first time I ask.
> >
> >I use manners the second time I ask.
> >
> >Not the third,
> >
> >thanks
> >
> >
> >
> >
> >
> >>MBOX-Line: From
> >>[EMAIL PROTECTED]  Tue
> >>Aug 14 09:05:45 2001
> >>Date: Tue, 14 Aug 2001 19:40:08 +0530
> >>From: harsha <[EMAIL PROTECTED]>
> >>To: Michael Hambe <[EMAIL PROTECTED]>
> >>Cc: debian-user@lists.debian.org
> >>Subject: Re: debian-user-digest Digest V101 #1132
> >>Reply-To: harsha <[EMAIL PROTECTED]>
> >>
> >>hi,
> >>
> >>On Tue, Aug 14, 2001 at 09:49:00PM +1000, Michael Hambe wrote:
> >>>  REMOVE ME FROM YOUR LIST.
> >>>
> >>>  STOP SENDING ME SHIT!
> >>
> >>go to http://lists.debian.org and you get details as how to
> unsubscribe.
> >>by the way looks like nobody gave you some lessons in manners. ask a
> >>preschooler for help.
> >>
> >>harsha
> >>
> >>--
> >>Chaos is found in the greatest abundance wherever order is
> being sought.
> >>It always defeats order for it is better organized.
> >>
> >>
> >>--
> >>To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> >>with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
> >
> >
> >
>
> --
> Pardon me, but you have obviously mistaken me for someone who gives a
> damn.
> email [EMAIL PROTECTED]
>
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]

RE: Searching in dselect

[Ian Perry]

> -Original Message-
> From: Michael Heldebrant [mailto:[EMAIL PROTECTED]
> Sent: Monday, August 13, 2001 11:56 AM
>
> On 12 Aug 2001 20:59:11 -0300, Daniel Toffetti wrote:
> > Is there any way of searching for a string in the short or long
> > descriptions of the packages in dselect ?
>
> Use the / key to set your search and the \ key to repeat it.
> It should
> be in the help keys description along with other usefull
> commands if you
> run dselect.
> --mike
>

The '/' key is helpful in searching for a string in the package name, but it
will not search the descriptions of the packages.  I seem to remember in a
previous version (even before slink) that it used to do this.

Ian

RE: wierd returnings

[Ian Perry]

Guys,

I have beed talking to Mario and Karsten about this, and have apologised to
Mario for going off the deep end.

I have also gone through my sendmail configs and noticed that "Masquerade
envelopes" was set to Y.

Might be config issue on both ends.

Ian

RE: dselect and hda:irq timeout

[Ian Perry]

> > > From: Michael Mueller [mailto:[EMAIL PROTECTED]
> > > Sent: Friday, August 10, 2001 2:36 PM
> > >
> > > While dselect is installing, I get intermittent errors.  The
> > > dselect process
> > > continues to completion and I seem to be able to use what has been
> > > installed.
> > >
> > > The error messages are as follows:
> > >
> > > hda: irq timeout: status = 0x0d { Busy }
> > > ide0: reset: success
> > >
> > > Any ideas on why these messages appear?
> > >
> > > I've been experimenting with loading 2.2.r3. THis is a brand
> > > new machine:
> > > Duron 700Mhz, 128Mb DRAM, 10Gb HDD, 50x CDROM, AMD
> approved Biostar
> > > Mainboard.
> > >
> > > TIA,
> > > Mike
> >
> > I had a similar message while loading from CD.  I had configured the
> machine
> > with the HD as primary master, and the CD as primary slave.
>  The fix was
> to
> > put the CD onto the secondary slave.
> >
> > Ian
>
> That seems to help quite a bit.  The messages were greatly
> reduced, but not
> wholly eliminated.  The process took much less time
> altogether, because of
> less hda timeouts I presume.
>
> HDD is hda
> CDROM is hdd
> I had to remove the master/slave/cable select jumpers from
> the two drives.
> I guess the jumpers are needed only if there is a
> primary/secondary actually
> on the IDE cable.
>
> I actually have 2 identical twin new-born machines as
> described above.  I
> tried the change on the second machine.  I got additional
> messages that were
> more worrisome:
>
> ide0: reset timed out; status = 0x0d
>
> and
>
> ide0: 
>
> I'll have to wait until AM to get another IDE cable to try out the
> configuration on the first machine.

Although the bios recognising the drives should tell whether the cable is
good.  I have had a troublesome drive once which was because of a noisy P/S.
Took ages to find.

You haven't overclocked them by any chance ?

Ian

FW: dselect and hda:irq timeout

[Ian Perry]

Michael,

This should have gone to you
cc to list

Ian

> -Original Message-
> From: Chun Kit Edwin Lau [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 10, 2001 3:49 PM
> To: Ian Perry
> Subject: Re: dselect and hda:irq timeout
>
>
> Hi,
>
>   Long time ago, I have the same problem, and I fixed it
> by disable the dma mode.  Don't really know what's going on?
>
> Edwin Lau
>
> On Fri, Aug 10, 2001 at 02:29:48PM +1000, Ian Perry wrote:
> > > From: Michael Mueller [mailto:[EMAIL PROTECTED]
> > > Sent: Friday, August 10, 2001 2:36 PM
> > >
> > > While dselect is installing, I get intermittent errors.  The
> > > dselect process
> > > continues to completion and I seem to be able to use what has been
> > > installed.
> > >
> > > The error messages are as follows:
> > >
> > > hda: irq timeout: status = 0x0d { Busy }
> > > ide0: reset: success
> > >
> > > Any ideas on why these messages appear?
> > >
> > > I've been experimenting with loading 2.2.r3. THis is a brand
> > > new machine:
> > > Duron 700Mhz, 128Mb DRAM, 10Gb HDD, 50x CDROM, AMD
> approved Biostar
> > > Mainboard.
> > >
> > > TIA,
> > > Mike
> >
> > I had a similar message while loading from CD.  I had
> configured the machine
> > with the HD as primary master, and the CD as primary slave.
>  The fix was to
> > put the CD onto the secondary slave.
> >
> > Ian
> >
> >
> >
> >
> > --
> > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
>
> --
> Edwin ERTW Lau
>
> _
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
>

RE: dselect and hda:irq timeout

[Ian Perry]

> From: Michael Mueller [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 10, 2001 2:36 PM
>
> While dselect is installing, I get intermittent errors.  The
> dselect process
> continues to completion and I seem to be able to use what has been
> installed.
>
> The error messages are as follows:
>
> hda: irq timeout: status = 0x0d { Busy }
> ide0: reset: success
>
> Any ideas on why these messages appear?
>
> I've been experimenting with loading 2.2.r3. THis is a brand
> new machine:
> Duron 700Mhz, 128Mb DRAM, 10Gb HDD, 50x CDROM, AMD approved Biostar
> Mainboard.
>
> TIA,
> Mike

I had a similar message while loading from CD.  I had configured the machine
with the HD as primary master, and the CD as primary slave.  The fix was to
put the CD onto the secondary slave.

Ian

Is this an attempted DOS

[Ian Perry]

Hi,

I posted a log similar to this yesterday, but the packets are coming in more
regularly now, and only a few seconds apart.  A 408 I have found out is a
"Request timeout".  Does this hang one of the apache tasks up ?  Is it
something I need to be concerned about ?  My thoughts are that it is a part
of CR2 or CR3.

It normally would not concern me greatly, but this is from a business site
and one of my hats is to keep it up 24/7. I can certainly do without all
hell breaking loose (and mainly in my office) if it goes offline.

Any ideas would be appreciated.

Thanks

Ian


210.116.154.98 - - [10/Aug/2001:11:52:54 +1000] "-" 408 -
210.116.154.95 - - [10/Aug/2001:11:59:28 +1000] "-" 408 -
210.179.159.1 - - [10/Aug/2001:12:04:29 +1000] "-" 408 -
210.118.30.226 - - [10/Aug/2001:12:05:05 +1000] "-" 408 -
210.123.74.253 - - [10/Aug/2001:12:07:39 +1000] "-" 408 -
210.198.90.18 - - [10/Aug/2001:12:14:58 +1000] "-" 408 -
210.99.210.186 - - [10/Aug/2001:12:22:22 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:26:09 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:26:52 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:26:55 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:26:59 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:27:04 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:27:16 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:27:19 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:27:25 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:27:42 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:27:42 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:27:49 +1000] "-" 408 -
210.97.122.77 - - [10/Aug/2001:12:28:14 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:30:14 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:30:29 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:30:35 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:30:42 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:30:56 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:31:05 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:33:48 +1000] "-" 408 -
210.109.62.98 - - [10/Aug/2001:12:37:41 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:40:22 +1000] "-" 408 -
210.66.207.19 - - [10/Aug/2001:12:40:41 +1000] "-" 408 -
210.175.52.19 - - [10/Aug/2001:12:43:16 +1000] "-" 408 -

RE: wierd returnings

[Ian Perry]

Mario,

Why have you used MY SERVER inertia.com.au as your return address in your
email ?

The only reason is that you don't want spammers coning at you.  I get enough
crap email going through it now without bounce email from spammers going to
the postmaster ME.  Try using a bogus one in the future and not a real
one which would inconvenience others.

Ian Perry
IT Manager



> -Original Message-
> From: mario [mailto:[EMAIL PROTECTED] Behalf Of Mario Vukelic
> Sent: Thursday, August 09, 2001 8:36 PM
> To: debian-user@lists.debian.org
> Subject: Re: wierd returnings
>
>
> On 09 Aug 2001 12:25:59 +0200, Sebastiaan wrote:
>
> > > > The wierd thing is that the recipient is always the same:
> > > > [EMAIL PROTECTED]
>
> I got it yesterday, too
>
> --
>
> I did not vote for the Austrian government
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]

XDM Crash... How to recover

[Ian Perry]

Hi,

Last night I had a major panic attack with xdm (whoch starts automatically)
I had edited the sample .xsession file and added exec fvwm95 to the end.
It did not start due to the other settings above for twm (I am working from
memory here)
The login screen would appear and on login the screen would flicker and then
go back to the login screen.
I ended up booting from CD, going to a shell, mounting the hd and editting
the .xsession file.

Is there an easy way to recover from this type of fault ?

Ian

RE: code red goes on

[Ian Perry]

I have noticed a new entry in the apache access logs as follows.
Also the CR2 accesses have dropped off to almost zero.

210.204.88.105 - - [09/Aug/2001:14:54:44 +1000] "-" 408 -
210.72.200.39 - - [09/Aug/2001:15:04:31 +1000] "-" 408 -
210.182.140.14 - - [09/Aug/2001:15:05:15 +1000] "-" 408 -
210.108.205.221 - - [09/Aug/2001:15:05:41 +1000] "-" 408 -
211.231.18.226 - - [09/Aug/2001:15:13:52 +1000] "-" 408 -
210.206.208.230 - - [09/Aug/2001:15:19:26 +1000] "-" 408 -
210.181.87.251 - - [09/Aug/2001:15:25:02 +1000] "-" 408 -
210.188.229.52 - - [09/Aug/2001:15:39:31 +1000] "-" 408 -
210.119.76.150 - - [09/Aug/2001:15:42:55 +1000] "-" 408 -
210.107.62.166 - - [09/Aug/2001:15:48:55 +1000] "-" 408 -
210.104.77.1 - - [09/Aug/2001:15:51:52 +1000] "-" 408 -

Anyone else have this ?

Ian

RE: CrushLink > Welcome!

[Ian Perry]

I bet it was Bill Gates
>
>
> OK. Who signed in? Are you going to post the password?
>
>
> On Thu, Aug 09, 2001 at 02:09:24AM -,
> [EMAIL PROTECTED] wrote:
> > Dear asdlh,
> >
> > Welcome to CrushLink! We wish you the best of
> > luck as you search for your secret crush.
> >
> > To manage your CrushList in the future,
> > always sign in to CrushLink with
> >
> >Email address - debian-user@lists.debian.org
> > Password - 
> >
> > Have fun and good luck!
> >
> > Sincerely,
> > The Crush Master
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]

Sendmail directories... /var/state/sendmail...

[Ian Perry]

Hi,

I have noticed some wierd directories on one of our mail servers, and so I
checked the others.  hey are on all of them in some varying degree or
another.

/var/state/sendmail
then ae. at. au. etc

then in au.
asn. com. edu. gov.

then in com.
aapt. acay.

then in acay.
job which contains
V0
E29
H1
S0
D2.0.0
R250 QAA13472 Message accepted for delivery
U975647737
.

I can see that these are in reverse order... such as acay.com.au

Is this a quick DNS lookup or what purpose do they serve ?

Many Thanks

Ian

RE: FW: Careful. This is for information only.

[Ian Perry]

> From: John Griffiths [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 08, 2001 9:12 PM

> >True... Seems like a pretty grey area though.
> >He is ultimately responsible for it.  There has been enough
> publicity about
> >CR to ascertain that the system admin was negligent in his duty.
> >
> >Ian
> >
>
> We're not dealing with sysadmins.
>
> In the most part it's home users who bought shady computers
> with a slightly unsuitable OS on it, they're probably
> slightly puzzled why their computer's running a bit slow but
> these thngs happen under windows.
>
> Also there's a bucket load of dodgy licences in the third
> world and these guys can't get the patch because they can't register,

Then the NatCops wont mind ;)

> It's a mess of MS's making but it's all getting horribly complicated.

Perhaps MS should pay for their lack of sufficient testing.  But as 
usual,
they will just bury their head in the sand and proclain the perceived
greatness of their product.

>
> But make no mistake, most of the unpatched boxes have users,
> not sysadmins.
>
I agree

Ian

RE: FW: Careful. This is for information only.

[Ian Perry]

>
> Ian writes:
> > Consider this case A web page /default.ida exists on a
> server which when
> > requested (via Code Red)pops up a message on the affected
> computer.  How
> > can it be illegal when it was the affected machine which
> requested the
> > script in the first place ?
>
> It was not the owner or authorized user of the affected machine who
> requested the script.  And you knew it.
>

True... Seems like a pretty grey area though.
He is ultimately responsible for it.  There has been enough publicity about
CR to ascertain that the system admin was negligent in his duty.

Ian

Recommended applications needed under X

[Ian Perry]

Hi,
My X system is now up and running.  Even though it is runnig on a 6x86
100MHz with 32Meg of memory, I am pleasantly surprised with the speed at
which it runs.

I found Abiword, which I quite like.

Can anybody recoomend good applications to run under X such as..

Excel like spreadsheet
Access like database

Thanks

Ian

RE: FW: Careful. This is for information only.

[Ian Perry]

>
> On 7 Aug 2001, John Hasler wrote:
>
> > William T Wilson writes:
> > > In states with "Good Samaritan" laws you are likely to be
> shielded from
> > > liability as long as any action you take is clearly
> intended as help.
> >
> > State laws are irrelevant.  It's a Federal law, enforced by
> the same people
> > who are prosecuting Sklyarov.

> From: Sebastiaan [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, August 07, 2001 11:53 PM
>
> What about world law? I belive that you always operate under
> the law of
> the country where you live in. But laws are only made to help
> people, what
> must be done if a law prevents you from helping those? A
> system that has
> too many of this laws is asking for Anarchy.
>
> So if you are able to login such a machine and broadcast a message to
> prevent that the entire internet will go down eventually,
> what is against
> it? No systems are harmed and certainly no one died.
>
> Greetz,
> Sebastiaan
>
Consider this case
A web page /default.ida exists on a server which when requested (via Code
Red)pops up a message on the affected computer.  How can it be illegal when
it was the affected machine which requested the script in the first place ?

I have not initiated a hack nor attempted to infiltrate the system.  It was
the originating syetem which requested the file, which in turn executed a
legitimate script.

Ian

RE: FW: Careful. This is for information only.

[Ian Perry]

> -Original Message-
> From: William T Wilson [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, August 07, 2001 2:01 PM
> To: Nathan E Norman
> Cc: debian-user@lists.debian.org
> Subject: Re: FW: Careful. This is for information only.
>
>
> On Mon, 6 Aug 2001, Nathan E Norman wrote:
>
> > I have to agree with John ... using a security hole in
> someone else's
> > server for good or evil is probably not a good idea legally.  I'd
> > advise against it.
>
> In states with "Good Samaritan" laws you are likely to be
> shielded from
> liability as long as any action you take is clearly intended as help.
>
> Considering the fact that tens of thousands of malicious
> security attacks
> per year go unprosecuted, I doubt that anything non-malicious
> would be a
> big risk.  Unless you have deep pockets.
>
> That said, it's traditional to send the admin a message using the root
> account when a hole is found, but it isn't at all necessary.
> Just send
> the relevant excerpt from your log that shows they are
> attacking you to
> several good guesses at the relevant account ([EMAIL PROTECTED], [EMAIL 
> PROTECTED],
> etc.) and leave it at that.
>

Its a pity those people are so lame and irresponsible that they are not
doing anything about it.

I actually began looking at the web pages, and emailing the web admin or
contact point but with a packet coming in every few minutes it became
impossible.  It also seemed to be a waste of time as most of these sites are
still online and attempting to spread the virus.  The other fact that when
the IP is looked up there is absolutely no record of where or who it is
makes it almost impossible to alert them of their predicament.

Don't these people have a legal and moral responsibility to ensure that
their system is free from spreading the virus and damaging other systems ?
Where is their duty of care.

If they initiate an attack on me, don't I have a right to defend my site, a
commercial enterprise, against them to stop THEIR attacks on my network ?
Think about it... the message or whatever would not be sent if they did not
send an attack first.

Welcome to a legal nightmare.

I just find it hard to believe that people still haven't patched their
servers, and in the mean time I am paying for all the extra traffic into my
server.  It may not seem much but it sure adds up over a month or two.  Who
can I sue to recover that ??

The whole thing seemed interesting at first Now I just get pissed off at
the irresponsibility of it all.

Oh damn... looking at the logs looks like here comes another one...
"GET /robots.txt HTTP/1.0"... repeat.

If I could turn off the web server I would, but I can't.

Ian

RE: FW: Careful. This is for information only.

[Ian Perry]

> -Original Message-
> From: Titus Barik [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, August 07, 2001 12:06 PM
> To: Ian Perry
> Cc: debian-user@lists.debian.org
> Subject: RE: FW: Careful. This is for information only.
>
>
> On Tue, 7 Aug 2001, Ian Perry wrote:
>
> > > > rundll32 user32.dll,ExitWindows
>
> You might want to consider this:
> http://support.microsoft.com/support/kb/articles/Q202/0/13.ASP
>
> Which allows you to use IISRESET to start and stop the IIS server.
>
> Titus Barik ([EMAIL PROTECTED])
> AIM: TBarik  ICQ: 1604453
>

You could, but wouldn't be better to alert then than shutting them down...
there could be legal ramifications in lost income etc etc for a public
server.

Ian

RE: FW: Careful. This is for information only.

[Ian Perry]

>
> | What about just popping a message onto the console ?
>
> What console?  (It's windows, not dos)

 DOS... I remember the time... :)

OK point taken... monitor, screen, window, TV, visual display, LCD...
Did I miss any ?  ;)

>
> I saw it on /. :
>
> net send  
>
> will pop up a dialog window (for that user) with the given message.
> Now all that is needed is a way to find out which user is logged in.
>

C:\Documents and Settings\Administrator>net
The syntax of this command is:


NET [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |
  HELPMSG | LOCALGROUP | NAME | PAUSE | PRINT | SEND | SESSION |
  SHARE | START | STATISTICS | STOP | TIME | USE | USER | VIEW ]

net send * will send to all users currently logged on


Ian

RE: code red goes on

[Ian Perry]

I just had a look at another site I look after.
It appears from the apache logs that Code Red has not hitting there since
5th August, yet web requests are getting through.

It is being filterred ate the ISP level.

Ian

RE: FW: Careful. This is for information only.

[Ian Perry]

>
> >
> > rundll32 user32.dll,ExitWindows
>
> Meh. Doesn't quite work, even on 95.
> For one, it's ExitWindowsEx. And then it only shuts down if you click
> OK. And then it only really logs out if there's more than one account.
>
> There might be some other way like that that works, but it's probably
> a lot easier to just make something crash. ;)
>
> Mike McGuire
>

What about just popping a message onto the console ?

A lot of the machines spreading it around are ppl who don't even know they
have a web server running, and they probably don't care either, but they
would care about a message popping up on their screen every 30 secs.

Unfortunately I don't know enough about NT. (but then again... do I want to
?)

Ian

RE: Linux on less than 8MByes of Memory

[Ian Perry]

> -Original Message-
> From: Aaron Traas [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, August 07, 2001 12:54 AM
> To: dman; debian
> Subject: Re: Linux on less than 8MByes of Memory
>
>
> You're right, I did mean to send to the list.
>
> You must be looking in the wrong places for RAM...
> Crucial.com has 32MB
> EDO SIMMs for $42, and 16MB SIMMs for $24, with free UPS
> 2-day shipping.
> So in the case that you want 48MB, that's only $68, and if you want to
> go with 32MB, that's $48 US.
>
> You are probably right, however, that you can get a full
> system for this
> price...
>
> -- Aaron
>

True... this system is even pre 72 pin simms.
I might just junk it and get a reasonable 2nd hand box for the $100 AUS ;)

RE: am i being wormed? aaugh!

[Ian Perry]

> -Original Message-
> From: John Griffiths [mailto:[EMAIL PROTECTED]
> Sent: Monday, August 06, 2001 2:47 AM
>
> At 05:05 PM 8/4/01 +0100, Christian Jaeger wrote:
> >Just to the record: there seems to be a new variant of the
> worm, with
> >all 'N' being replaced with 'X'. The last 117 (er, now thei'r 119)
> >worm requests on my machine, starting 5 hours ago, were all except
> >one of the 'X' type. And all of them come from 62.2.x.x
> (well, I'm on
> >this subnet, too). Seems like someone wanting to kill this internet
> >providers clients has rewritten the worm to attack all ip's in this
> >subrange (instead of the semirandom ip's it used to select before).
> >
> >no fun for windows users
> >
> >christian.
> >
>
> That's be Code Red 2.0, it's making as yet undocumented jumps
> but then really creaming it's subnet...
>

About 15 mins ago it began hitting my subnet 210.x.x.x ... all Red 2
packets.
I was getting random hits this morning, 5 hrs or so ago with one every 6
mins.
Now its down to every 30 secs.

I looked up some of the IPs... most are in SE Asia, but some are in large
corps here in Australia.  I can see some severance pay cheques coming
around.

Ian

Linux on less than 8MByes of Memory

[Ian Perry]

Hi,

I have an old 486Sx dog which I want to use as a printserver.
Potato recomments at least 12MBytes of memory to do an install from CD.
Is it possible to install Potato on 8MBytes ?
Do I need to create special boot floppies or is it not possible ?

Thanks

Ian

RE: code red goes on

[Ian Perry]

> -Original Message-
> From: Alan Shutko [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 03, 2001 11:18 PM
> To: debian-user@lists.debian.org
> Subject: Re: code red goes on
>
>
> "Karsten M. Self"  writes:
>
> > Anyone noting trends between 7/20 and 8/2?  I've got 30 v. 49,
> > respectively.  Looks like this is actually the bigger attack.
>
> http://www.incidents.org says that we've already gotten more infected
> machines than July 20th, although probes seem to have leveled off.
>
> I've heard that this is a slight change on the original code red which
> seeds the RNG used to pick hosts to try, and it's thus hitting lots of
> hosts which weren't in the first round.
>

There has definately been a change in the original form of the attacks from
# GET /default.ida?N -snip- NN%u9090% -snip- 0%u00=a  HTTP/1.0
to
# GET /default.ida?X -snip- XX%u9090% -snip- 0%u00=a  HTTP/1.0
The second packet is also much shorter (with less X's), although the tail is
the same.

The increase in traffic over the last few days has been marked.

Sept  - 0 hits
1 Aug   -   3 hits  0.1 per hr
2 Aug - 22 hits 0.9/hr
3 Aug - 33 Hits 1.4/hr
4 Aug - 41 Hits 1.7/hr
5 Aug - 167 Hits6.9/hr
6 Aug - 79 Hits 10.0/hr (only 8 hrs of data)

I can see this is going to be a real problem in the upcoming weeks.

I have noticed on the end of each access in the log, Apache gives "404 205"
404 I guess means page not found, but on two occassions it looks like
it gave a "200 - ".  Strange.  I thought a valid access was 200.

Ian

RE: code red goes on

[Ian Perry]

I have had 47 in the last 24 hrs.

> -Original Message-
> From: John Griffiths [mailto:[EMAIL PROTECTED]
> Sent: Saturday, August 04, 2001 12:54 AM
> To: debian-user@lists.debian.org
> Subject: code red goes on
>
>
> if you grep your http access log for "default.ida" (good sign
> of a code red attempt on an apache box)
>
> you'll see that code red has infected as many new machines in
> the alst two days as it did on 20 July
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]

RE: Internet Connection Sharing [was: Re: Ethernet]

[Ian Perry]

>
>
> On Fri, Aug 03, 2001 at 11:58:06AM +1000, Sam Varghese wrote:
> > On Thu, Aug 02, 2001 at 09:54:37PM -0400, [EMAIL PROTECTED] wrote:
> > > How can I set up my Win98 machine to share its internet
> connection to my
> > > networked Linux machines?
> >
> > Pardon me for asking but wouldn't it better and
> > more reliable to connect with a Debian box and share
> > the connection using ip masquerading?
>
> Indeed, this would be preferable, but perhaps the original poster has
> a windows-only internal DSL card. If that is the case he will need to
> use the 'Internet Connection Sharing' facility that was added to W98
> Second Edition. For earlier windows versions there are third party
> products which accomplish the same thing.
>
> HTH
> Dave T.

True...
I have used Wingate in 95in the past (pre my linux awakening) which once
setup, worked very well

Ian

RE: Internet Connection Sharing [was: Re: Ethernet]

[Ian Perry]

> -Original Message-
> From: James Preston [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 03, 2001 1:33 PM
> To: debian-user@lists.debian.org
> Subject: Re: Internet Connection Sharing [was: Re: Ethernet]
>
>
> -BEGIN PGP SIGNED MESSAGE-
>
> On Fri, Aug 03, 2001 at 01:05:11PM +1000, Ian Perry wrote:
> > With Debian you have much greater control of
> input/output/forwarding access
> > than you do with windows (does windows actualy have any
> real security ?)
>
> Sure it does: "ATTRIB +R".  If a h4 files, he'll be asked if he is "sure", at which point he'll see the
> error of his ways.
>

Ahh yes, but he can still read it !!

It took me agex to work out what h4

RE: Internet Connection Sharing [was: Re: Ethernet]

[Ian Perry]

> -Original Message-
> From: Sam Varghese [mailto:[EMAIL PROTECTED] Behalf Of
> Sam Varghese
> Sent: Friday, August 03, 2001 11:58 AM
> To: debian-user@lists.debian.org
> Subject: Re: Internet Connection Sharing [was: Re: Ethernet]
>
>
> On Thu, Aug 02, 2001 at 09:54:37PM -0400, [EMAIL PROTECTED] wrote:
> > How can I set up my Win98 machine to share its internet
> connection to my
> > networked Linux machines?
>
> Pardon me for asking but wouldn't it better and
> more reliable to connect with a Debian box and share
> the connection using ip masquerading?
>
> Sam
> --
> (Sam Varghese)
> http://www.gnubies.com

It is not only better as far as reliability of connection, but it is more
secure... particularly if you have sharing bound to TCP/IP on your windows
box.

With Debian you have much greater control of input/output/forwarding access
than you do with windows (does windows actualy have any real security ?)

When you masquerade onto the internet, they cannot initiate a connections to
your win95 machine from the internet making it more secure.

Ian

RE: Deb-Newby: Read HOWTO's? Thanks....

[Ian Perry]

Your comments seemed a little strange...???

I, for one, was extremely glad you posted.
A lot of good suggestions came out.  I would have never thought of using
Lynx.

I don't think that there are BIG and LITTLE problems on this list.  At the
risk of getting flamed I will say that Linux is not the easiest op system in
the world to either install or maintain, and after administering DOS,
Novell, and Windows systems for 10 years, it was an eye openner for me to
move across to Linux.

I think we are all here for one common reason, and that is to help each
other where we can.  I have in the past asked the most simple questions...
and when they are answered I think to yourself "Doh !!   Why didn't I think
of that"?

There are a lot of people who read this list who can benefit from every
comment no matter how large or small.

Ian



> -Original Message-
> From: d [mailto:[EMAIL PROTECTED]
> Sent: Thursday, August 02, 2001 1:42 PM
> To: debian-user@lists.debian.org
> Subject: Re: Deb-Newby: Read HOWTO's? Thanks
>
>
> Nuhn Yobiznez, Sunny Dubey, Brett Parker, Including any
> others that may
> respond before I get this out,
>
> That last one is a rather long name.  BAG!  I should have
> known that but I
> did NOT.  Because I do NOT use the HTML formats in my
> messages the words
> will only be standard size.  That is NOT meaning that this is
> NOT a very
> large "Thank You!"
>
> For what I have seen and read here there are much bigger
> problems out there
> for you to work on, GOOD LUCK!  I will be reading this list
> everyday, you
> will NOT hear from me every day.  So what that means is I
> will know when
> you schedule the party and celebrate my not bothering you.
> NO I will NOT
> attend that function either.
>
> Again to one and all, "Thank You",
>
>
> TIA,
> d
> Don Hodges
> San Antonio, Texas
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]

Attaching to a Novell server through linux.

[Ian Perry]

Hi,

I have an intranet server currently running on Win95, which has links to
selected files on a Novell Server (E.g User and Tech manuals, Release notes
etc)  It is running scripts wriiten in java.
I would like to move this setup to linux (for stability reasons).
Is it possible to attach a linux machine running apache to a Novell Server ?
Is it possible to attach to a Novell Server from a linux  machine using IPX
?
We do not realy want to move away from IPX or Novell as it has been
EXTREMELY stable and given us absolutely zero downtime over the past 5 years
running 24 7.

Thanks

Ian

Changing Servers - passwd, shadow, group

[Ian Perry]

Hi,

I am about to physically change some machines from slink to potato.
Can I simply copy the passwd, shadow, gshadow and group files over to the
new machine and have it work, or do I have to laboriousely enter them again.

The allowed downtime of these machines is zero, so I do not want to just do
an upgrade in case I run into problems.

Many thanks
Ian

RE: Getting CPU model and speed without rebooting

[Ian Perry]

None of my machines give MHz... only bogomips
Next Question What is a bogomip ???


processor: 0
cpu: 686
model: 
vendor_id: GenuineIntel
stepping: 3
fdiv_bug: no
hlt_bug: no
f00f_bug: no
fpu : yes
fpu_exception   : yes
cpuid   : yes
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 sep mtrr pge mca cmov
16 17 18 mmx 24 25
bogomips: 450.56


Ian

RE: networking

[Ian Perry]

Shouldn't your network be 192.168.0.0 ?


> -Original Message-
> From: Michael W. Cole [mailto:[EMAIL PROTECTED]
> Sent: Thursday, July 26, 2001 4:47 AM
> To: debian-user@lists.debian.org
> Subject: networking
>
>
> I am using linux 2.2.19-20010521 on a IIci and am trying to have it
> recognize my router so that I can start to upload the software to
> complete the system.  I am using this version because the earlier
> versions would not acknowledge my ethernet card.  This one
> seems to but
> I have set up the network but I can't get it to ping the router or any
> of the other computers (Mac PPC and a Windoze) that are also connected
> to the router.  I have followed the HOW-TO's for networking etc.
> /etc/network/interfaces is as follows:
> iface lo inet loopback
>
> iface eth0 inet static
> address192.168.0.3
> netmask255.255.255.0
> network192.168.0.1
> broadcast192.168.0.255
> gateway   192.168.0.1
>
> I followed the route commands that were in the How-To
> ie route add -net 192.168.0.3 netmask 255.255.255.0 eth0
> route add default gw 192.168.0.1 eth0
>
> and these things seem to work they reshowed when route was reentered.
>
> What do I need to read now?  I would like to be able to use my cable
> modem which is connected to the router and is accessible to the other
> two computers on this network.
> Any help would be greatly appreciated.
> Thank you,
> Michael Cole
>

RE: X11 config - no VGA16 found

[Ian Perry]

Many thanks... solved


> -Original Message-
> From: Robin Gerard [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, July 25, 2001 10:58 AM
> To: Ian Perry
> Cc: 'Debian Users'
> Subject: Re: X11 config - no VGA16 found
>
>
> On Tue, Jul 24, 2001 at 04:05:46PM +1000, Ian Perry wrote:
> > I hjave no doubt that I did something stupid somewhere
> along the line.
> >
> > I have used anXious to configure X and am getting an error message.
> > It seems that X thinks it needs a vga16 card (I have a
> Tseng Labs ET4000
> > W32P card)
> > Does anyone know where that setting of vga16 might be coming from ?
> > I there a second config prog that I should be running ?
> >
> > If I set the svga to vga16 and the depth to 4 it works
> albeit at the wrong
> > resolution.
> >
> > Configs are attached
> > Any help would be greatly appreciated.
> >
> > Ian
> 1: apt-get install xserver-w32
>   (also apt-get install xserver-common  xserver-svga)
> 2: run  XF86Setup .
>
> hth
> --
> Gerard

X11 config - no VGA16 found

[Ian Perry]

I hjave no doubt that I did something stupid somewhere along the line.

I have used anXious to configure X and am getting an error message.
It seems that X thinks it needs a vga16 card (I have a Tseng Labs ET4000
W32P card)
Does anyone know where that setting of vga16 might be coming from ?
I there a second config prog that I should be running ?

If I set the svga to vga16 and the depth to 4 it works albeit at the wrong
resolution.

Configs are attached
Any help would be greatly appreciated.

Ian

---
XF86Config: /usr/X11R6/lib/X11/XF86Config
(**) stands for supplied, (--) stands for probed/default values
(**) XKB: keymap: "xfree86(en_US)" (overrides other XKB settings)
(**) Mouse: type: microsoft, device: /dev/mouse, baudrate: 1200
(**) Mouse: buttons: 3, 3 button emulation (timeout: 50ms)
(**) FontPath set to
"/usr/lib/X11/fonts/misc/:unscaled,/usr/lib/X11/fonts/cyrillic/:unscaled,/us
r/lib/X11/fon
ts/75dpi/:unscaled,/usr/lib/X11/fonts/100dpi/:unscaled,/usr/lib/X11/fonts/Ty
pe1/,/usr/lib/X11/fonts/Speedo/,/u
sr/lib/X11/fonts/misc/,/usr/lib/X11/fonts/cyrillic/,/usr/lib/X11/fonts/75dpi
/,/usr/lib/X11/fonts/100dpi/"

You must provide a "Screen" section in XF86Config for at
least one of the following graphics drivers: vga16, mono

Fatal server error:
No configured graphics devices


My config file has in it svga and not vga16 ..

- snip -
Section "Device"
Identifier "My Video Card"
VendorName "Unknown"
BoardName "Unknown"
VideoRam 1024
EndSection


Section "Screen"
Driver "svga"
Device "My Video Card"
Monitor "My Monitor"
DefaultColorDepth 8

Subsection "Display"
Depth   8
Modes "1024x768"  "640x480" "800x600" "512x384" "832x624"
EndSubsection

-snip-

RE: TIME, DATE and CRON... trap for the unwary

[Ian Perry]

Yes, restarting crond would also work
I have been working with windoze too long
rebooting all the time is rubbing off.

> -Original Message-
> From: Walt Mankowski [mailto:[EMAIL PROTECTED]
> Sent: Saturday, July 21, 2001 8:13 AM
> To: 'Debian Users'
> Subject: Re: TIME, DATE and CRON... trap for the unwary
>
>
> On Fri, Jul 20, 2001 at 10:15:00AM +1000, Ian Perry wrote:
> > Hi All,
> >
> > Just came across a point about Time and Date and CRON which
> could cause a
> > problem for those who are unaware.
> >
> > If you have CRON running and you set back the Date or Time
> backwards, CRON
> > will not run until at least the old time has been reached again.
> >
> > A quick reboot solves the problem.
>
> Wouldn't restarting crond also work?
>
> Walt
>
>

RE: CRON - Can you make CRON run faster than every minute

[Ian Perry]

What I need to do is to check the second channel of an ISDN link to ensure
that it is always up.
I have a script running in CRON every minute.  This came as part of the
utilities with the ISDN card.  One minute is not so much of a problem.  I
was just curious.

sydney:/usr/local/bin# less chkisdn.sh
#!/bin/sh
#file: /usr/local/bin/chkisdn.sh

UPCOUNT=`imontty  |  awk  '/Out/{print $2}'  |  wc  -l`
if [ ! $UPCOUNT = 2 ]; then
isdnctrl addlink ippp0
/bin/date >> /etc/ppp/addlink.log
fi

We have 2 different cases.

On the server here, the primary channel comes up by itself but wont bring
the secondary up, so we have to run the script in CRON.

On the server in our branch offices, the primary channel does not come up
automatically (there is no secondary), and the only difference is that the
cards are slightly different, although they are from the same manufacturer.
I have had to modify and compile my own version of pppupd to handle this.
This should probably be a separate topic.

Ian





> -Original Message-
> From: Mike Fedyk [mailto:[EMAIL PROTECTED] Behalf Of Mike Fedyk
> Sent: Friday, July 20, 2001 2:27 PM
> To: 'Debian Users'
> Subject: Re: CRON - Can you make CRON run faster than every minute
>
>
> > Thus spake Ian Perry ([EMAIL PROTECTED]):
> >
> > > Hi Debianers,
> > >
> > > I need to make CRON run faster than every minute. Every
> 15 seconds would be
> > > good. Is this possible ?
>
> On Thu, Jul 19, 2001 at 10:20:48PM -0600, Robert L. Harris wrote:
> > Don't think you can speed it up, but you can have a script
> run once a
> > min, sleep 15, run, sleep 15, run, etc.
> >
> > If you ahve to:
> >
> > cron1   * * * * * command
> > cron2   * * * * * sleep 15; command
> > cron3   * * * * * sleep 30; command
> > cron4   * * * * * sleep 45; command
> >
> > which is real ugly, but will work
>
> Yep it is ugly, and you use more resources that way too.
>
> Ian, what exactly are you trying to do?
>
> Whenever I've had a need for something like this, I wrote a little
> script that runs in daemon (server or constantly running) mode.
>
> Do you need to process files in a certain directory, but only when
> there are files?  Why do you need to run so often?
>
> Mike
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]

CRON - Can you make CRON run faster than every minute

[Ian Perry]

Hi Debianers,

I need to make CRON run faster than every minute. Every 15 seconds would be
good. Is this possible ?

Thanks

Ian

RE: floppy

[Ian Perry]

Check the rights of your mount point.
Check that the floppy is not write protected.

Have you tried a different disk ?

Ian



-Original Message-
From: markus [mailto:markus]On Behalf Of Markus Hansen
Sent: Friday, July 20, 2001 8:08 AM
To: Debian Mailinglist
Subject: floppy


i dont know why, but i dont have any rights to write on my floppy disks,
neither superuser or normal,
neither on the shell or the window of kde2.
can anyone help me plaese?
markus


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

TIME, DATE and CRON... trap for the unwary

[Ian Perry]

Hi All,

Just came across a point about Time and Date and CRON which could cause a
problem for those who are unaware.

If you have CRON running and you set back the Date or Time backwards, CRON
will not run until at least the old time has been reached again.

A quick reboot solves the problem.

Ian

RE: Date Problems...

[Ian Perry]

The #uname -a  command also gives you the version and date of compilation
(installation ?)
eg one our old machines gives
Linux router1 2.0.36 #1 Thu Sep 2 09:28:09 EST 1999 i686 unknown
one of the newer gives
Linux router2 2.2.17 #1 Sun Jun 25 09:24:41 EST 2000 i586 unknown

I often use the command 'hwclock --systohc' to set the clock to the system
time after a date command.

Ian


-Original Message-
From: Ari Pollak [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 18, 2001 1:53 PM
To: debian-user@lists.debian.org
Subject: Re: Date Problems...


First of all, I don't think that's the real 'uname -a' output. uname -a
has more than just the date. Second of all, the hardware clock and the
system (Linux) clock are different. if you type the command 'date',
you'll probably get the same output as uname. To transfer the hardware
clock to the system clock, use the command 'hwclock --hctosys'.

On Tue, Jul 17, 2001 at 10:34:55PM -0500, Leonard Leblanc wrote:
> Hey All,
>
> This is probably going to be an easy question for most of you, but I can't
> seem to get a grasp on what the problem is...
>
> # hwclock
> Tue Jul 17 22:38:11 2001  -0.044470 seconds
> # hwclock --localtime
> Wed Jul 18 03:37:34 2001  -0.558978 seconds
> # uname -a
> Sat Nov 18 18:47:15 EST 2000
>
> This one completely has me baffled and I can't seem to find any
information
> on it.  Any help is greatly appreciated.
>

--
   ___   ___
  / _ | / _ \   Ari Pollak - [EMAIL PROTECTED] - www.aripollak.com
 / __ |/ ___/
/_/ |_/_/ A man needs a good memory after he has lied.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: [OT] detecting the RAM speed

[Ian Perry]

Martin,

I would assume that they are 133MHz, although

I cannot find any reference of these chips on ICMASTER, nor KOWA as a
manufacturer of memory sticks on the web.
The sticks should also have a large sticker on them detailing the model of
the sticks themselves with either PC100 or PC133 giving the bus speed.

I could be wrong, but I believe that the 133MHz just refers to the memory
bus.  Maybe someone else has an idea of this.  (I have never had the need to
get down to that level of a motherboard... if it don't work toss it out.)

The -7 is slightly superscripted ???
This could mean that it was printed after the chips were off the end of the
production line... very odd
Is it in different ink ?  Does it come off with metholated spirits ?

Are you overclocking ?
I have had motherboards in the past which would not recognise the 133MHz
chips, although these were early versions.

Ian



-Original Message-
From: 'Martin F. Krafft' [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 12, 2001 10:32 PM
To: Ian Perry
Cc: debian users
Subject: Re: [OT] detecting the RAM speed


also sprach Ian Perry (on Tue, 10 Jul 2001 12:05:55PM +1000):
> The RAM chips should be marked with a suffix -07 for 133MHz
> eg  KINGMAX KSV884T4A1A-07

they are marked
  Kowa A-6263 Q1 -7

where the "-7" is slightly superscripted.

am i to assume that the chips are therefore 133MHz?

can anyone of you think of a reason why my motherboard would not
detect the chip unless i configure the bios to use 100Mhz bus speed
(what is this bus? the front-side-bus?)?

again, any hints are more than welcome!

martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^."<*>"|tr "<*> mailto:"; [EMAIL PROTECTED]
--
"if beethoven's seventh symphony
 is not by some means abridged,
 it will soon fall into disuse."
 -- philip hale, boston music critic, 1837


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: [very very OT] noisy power supply

[Ian Perry]

Joerg,

Do not reverse the fan in the P/S.  The Power supply is the most robust
piece of electronics in a PC and is actually designed to run 'HOT' (well
hotter than a CPU or motherboard anyway) and reversing the fan will just
blow hot air into sensitive electronics.

Depending on the case style, it may actually be the CPU fan making all the
noise.  I have seen these vented directly to the back of the case... and
they are really noisy.

Many new cases also have a second fan on the front of the case to blow air
into the case.  If your case has a spot for one there, it is a good idea to
install it.  This fan when fitted is normally the one which fails first (due
to dust and dirt) and not only tends to keep the PC cooler, but keeps case
in positive pressure keeping your CD and floppies cleaner, and relieving
load on the Power Supply fan.

It IS a good idea to put a filter on the front fan, even a coarse one makes
a difference, or at the very least keep your PC off the floor ( glances at
tower sitting ON the floor ;P  ).

Most fans are have bush bearings.  These can fail as early as 12 weeks in
operation (we have some PCs in the worst of environments like the Factory
Floor, literally).  Ball bearing ones are quieter and last for years.  We
currently pay (trade) around $6 (Australian) $3 (US) for a normal fan and
twice that for the ball bearing variety, so it is worth the little extra.

Ian

-Original Message-
From: bp0026 [mailto:bp0026]On Behalf Of Joerg Johannes
Sent: Wednesday, July 11, 2001 7:51 PM
To: debian-user
Subject: [very very OT] noisy power supply


Hi list

My power supply takes warm air from inside the PC case to cool itself.
As Athlon processors (especially >1000 MHz) tend to produce lots of
heat, the temperature-sensitive power supply fans turn faster and
faster, making lots of noise. (When I start the box, I don't hear it at
all, but 10 minutes later, I wish back to my old one...)
So my idea is: I open the power supply, flip the fan so that it blows
cool air from outside into the case, voila, much less noise. Is this a
good idea or rather stupid?

thanks

joerg

--
Did you know that if you play a Windows 2000 cd backwards, you
will hear the voice of Satan?

That's nothing!  If you play it forward, it'll install Windows 2000.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

Modem Loopback Problem - a trap to be aware of

[Ian Perry]

Hi All,

This is a little long but was an interesting problem.
I believe it is now fixed and will try it tonight.  I have also created a
normal shell account so that I can dial in using minicom for maintenance.

I have a dialin connection to get access from home and was having problems
when ppp was started.
Unless I had access to the dialed box logs, I would never have figured out
what the problem may have been.
It turns out that the ppp password in the pap-secrets file was different to
the login password in the passwd file.

Everything I was transmitting was being sent back to me see following
log
I had no idea of even what the problem might have been from the logs of
dialing box at home.

The dialed server is Debian 2.2.17 potato, the dialing PC is Debian 2.1
slink... and it used to work.

This is the log from the slink (dialing) box

Jun 30 06:01:56 lri pppd[187]: pppd 2.3.5 started by root, uid 0
Jun 30 06:01:58 lri chat[188]: timeout set to 3 seconds
Jun 30 06:01:58 lri chat[188]: abort on (\nBUSY\r)
Jun 30 06:01:58 lri chat[188]: abort on (\nNO ANSWER\r)
Jun 30 06:01:58 lri chat[188]: abort on (\rRINGING\r\n\r\nRINGING\r)
-snip-
Jun 30 06:02:18 lri chat[188]: dialin!login:
Jun 30 06:02:18 lri chat[188]:  -- got it
Jun 30 06:02:18 lri chat[188]: send (dialinuser1^M)
Jun 30 06:02:18 lri chat[188]: expect (assword:)
Jun 30 06:02:18 lri chat[188]:  dialin^M
Jun 30 06:02:18 lri chat[188]: Password:
Jun 30 06:02:18 lri chat[188]:  -- got it
Jun 30 06:02:18 lri chat[188]: send (xx^M)
Jun 30 06:02:18 lri pppd[187]: Serial connection established.
Jun 30 06:02:19 lri pppd[187]: Using interface ppp0
Jun 30 06:02:20 lri pppd[187]: Connect: ppp0 <--> /dev/ttyS0
Jun 30 06:02:20 lri pppd[187]: sent [LCP ConfReq id=0x1 
  ]
Jun 30 06:02:20 lri pppd[187]: rcvd [LCP ConfReq id=0x1 
  ]
Jun 30 06:02:20 lri pppd[187]: sent [LCP ConfNak id=0x1 ]
Jun 30 06:02:20 lri pppd[187]: rcvd [LCP ConfNak id=0x1 ]
Jun 30 06:02:20 lri pppd[187]: sent [LCP ConfReq id=0x2 
  ]
Jun 30 06:02:20 lri pppd[187]: rcvd [LCP ConfReq id=0x2 
  ]
Jun 30 06:02:20 lri pppd[187]: sent [LCP ConfNak id=0x2 ]
-snip-
Jun 30 06:02:22 lri pppd[187]: sent [LCP ConfReq id=0xa 
  ]
Jun 30 06:02:22 lri pppd[187]: rcvd [LCP ConfReq id=0xa 
  ]
Jun 30 06:02:22 lri pppd[187]: sent [LCP ConfNak id=0xa ]
Jun 30 06:02:22 lri pppd[187]: rcvd [LCP ConfNak id=0xa ]
Jun 30 06:02:22 lri pppd[187]: Serial line is looped back.
Jun 30 06:02:22 lri pppd[187]: sent [LCP TermReq id=0xb "Loopback detected"]
Jun 30 06:02:22 lri pppd[187]: rcvd [LCP TermReq id=0xb "Loopback detected"]
Jun 30 06:02:22 lri pppd[187]: sent [LCP TermAck id=0xb]
Jun 30 06:02:22 lri pppd[187]: rcvd [LCP TermAck id=0xb]
Jun 30 06:02:22 lri pppd[187]: Connection terminated.
Jun 30 06:02:23 lri pppd[187]: Hangup (SIGHUP)
Jun 30 06:02:23 lri pppd[187]: Exit.

At this point it was PANIC.  What the hell is a "Loopback"... dud modem ?
No, others can get in on their windows machines.
(and I really must fix the clock in this machine !!!)



In the dialin box (potato), the password file was set up as follows (note
that there was no entry for dialinuser2):
dialinuser1:x:1001:1001:Dialin Account,,,:/home/dialinuser1:/usr/sbin/pppd

This has a password of yy, and was the system used when the server was
running slackware to start pppd and not give a shell (in an attempt to keep
fiddling fingers away from the system).

The pap-secrets file had entries of:
dialinuser1  *   xx*
dialinuser2  *   zz*

It turns out that password xx was different to password yy, and I
was sending password xx.
The account for dialinuser2 works fine (at least from a windows machine)

And the auth.log
Jul  3 21:21:46 dialin PAM_unix[2457]: authentication failure;
LOGIN(uid=0) -> dialinuser1 for login service
Jul  3 21:21:49 dialin login[2457]: FAILED LOGIN (1) on `ttyS1' FOR
`dialinuser1', Authentication failure

Bingo !!!  Somewhere to look for a problem.

Ian

RE: kernel install - unres. symbols

[Ian Perry]

I have found this in the past when I have installed the standard system with
modules etc and then recompiled the kernel with these modules in them, or
recompiled with the modules disabled in the kernel.

On reboot it tries to load the modules and cannot.

Try using modconf to remove the unwanted modules.

Ian

-Original Message-
From: Robert Voigt [mailto:[EMAIL PROTECTED]
Sent: Friday, June 29, 2001 3:12 AM
To: debian-user@lists.debian.org
Subject: kernel install - unres. symbols


I compiled a 2.4.5 kernel with kernel-package. I had no problems until I
installed the resulting .deb file. I got the error messages you find below.
I
was running a 2.2.18pre21 kernel.
After a reboot the new kernel loaded fine and I don't have any problems. But
those error messages don't look good. Especially the one at the bottom with
the modules.dep': No such file or directory.
Maybe the reason for the unresolved symbols is that I used gcc 2.95.4. In a
recent dselect session it wanted to upgrade from a stable compiler to this
cvs version, and I let it happen.
So, can anyone tell me what needs those symbols and why they are unresolved?
Maybe it loaded the modules from the new kernel while installing it, and
because the old kernel was still running I got those error messages. But
this
would be a bug in kernel package or dpkg. It shouldn't make those scary
error
messages when everything will be fine after a reboot.

# dpkg -i kernel-image-2.4.5_custom-2.4.5-1_i386.deb
Selecting previously deselected package kernel-image-2.4.5.
(Reading database ... 37091 files and directories currently installed.)
Unpacking kernel-image-2.4.5 (from
kernel-image-2.4.5_custom-2.4.5-1_i386.deb) ...
Setting up kernel-image-2.4.5 (custom-2.4.5-1) ...
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/drivers/block/loop.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/drivers/char/lp.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/drivers/net/dummy.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/drivers/net/irda/irport.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/drivers/net/irda/irtty.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/drivers/net/irda/toshoboe.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/drivers/parport/parport.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/drivers/parport/parport_pc.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/drivers/sound/maestro.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/drivers/sound/soundcore.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/fs/autofs4/autofs4.o
depmod: *** Unresolved symbols in /lib/modules/2.4.5/kernel/fs/binfmt_aout.o
depmod: *** Unresolved symbols in /lib/modules/2.4.5/kernel/fs/binfmt_misc.o
depmod: *** Unresolved symbols in /lib/modules/2.4.5/kernel/fs/isofs/isofs.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/fs/nls/nls_cp437.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/fs/nls/nls_cp850.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/fs/nls/nls_iso8859-1.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/fs/nls/nls_iso8859-15.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/net/irda/ircomm/ircomm-tty.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/net/irda/ircomm/ircomm.o
depmod: *** Unresolved symbols in /lib/modules/2.4.5/kernel/net/irda/irda.o
depmod: *** Unresolved symbols in
/lib/modules/2.4.5/kernel/net/irda/irlan/irlan.o
depmod: *** Unresolved symbols in /lib/modules/2.4.5/kernel/net/irda/irlan.o
Creating /boot/initrd-2.4.5.gz... cp: cannot create regular file
`/tmp/initrd-mnt.8071/lib/modules/2.4.5/modules.dep': No such file or
directory
done.
Testing LILO configuration...
Test successful.  Installing LILO configuration...
Installation successful.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: squid authentification

[Ian Perry]

Have you thought about using IP numbers to verify access ?

Attached is sections of my squid.comf
I use 2 files...
/etc/allowedsites   sites which everyone can access.. yellow pages,
whitepages etc
/etc/allowedusers   users which can go anywhere


Squid.conf

-snip-
#Defaults:
-snip-
acl allowedusers src "/etc/allowedusers"
acl allowedsites dst "/etc/allowedsites"

-snip-
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#
http_access allow allowedusers
http_access allow allowedsites
#  TAG: icp_access


/etc/allowedusers   (the names are defined in /etc/hosts)
kelly
steve
mike
shaun
sales_laptop1
sales_laptop2
jason
shaun


/etc/allowedsites
map.yellowpages.com.au
www.whereis.com.au
results.yellowpages.com.au
www.yellowpages.com.au
www.whitepages.com.au


Ian







-Original Message-
From: thomas [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 28, 2001 9:46 AM
To: debian-user
Subject: squid authentification


hi,

i've tried to set up ncsa_plus (user managment for squid) but there is
some serious patching involved etc. so is there already a patched and
.deb'ed squid available together with a nice ncsa_plus .deb? i couldn't
find anything. or can someone else recommend another authentification tool
for squid?
help is much appreciated.

thx,
 thomas


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: Using different DNS per ISP

[Ian Perry]

Here are just a few

rip.psg.com IP address = 147.28.0.39
NS.RIPE.NET IP address = 193.0.0.193
B.GTLD-SERVERS.NET  IP address = 192.33.14.30
C.GTLD-SERVERS.NET  IP address = 192.26.92.30
E.GTLD-SERVERS.NET  IP address = 192.12.94.30
F.GTLD-SERVERS.NET  IP address = 192.35.51.30
G.GTLD-SERVERS.NET  IP address = 192.42.93.30
H.GTLD-SERVERS.NET  IP address = 192.54.112.30
I.GTLD-SERVERS.NET  IP address = 192.36.144.133
J.GTLD-SERVERS.NET  IP address = 210.132.100.101
K.GTLD-SERVERS.NET  IP address = 213.177.194.5
L.GTLD-SERVERS.NET  IP address = 192.41.162.30
M.GTLD-SERVERS.NET  IP address = 202.153.114.101

It all depends on where you are in the world.

Try this one
ADDITIONAL RECORDS:... London ?
->  ns0.gradwell.com.
type = A, class = 1, ttl = 37921, dlen = 4
IP address = 195.149.39.7

Ian



-Original Message-
From: Vector [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 27, 2001 12:41 AM
To: Marcus
Cc: debian-user@lists.debian.org
Subject: Re: Using different DNS per ISP


You could just find a nameserver out there somewhere to use that doesn't
restrict lookups in the way your ISP's do (I'm not sure why they're
doing that anyway.)  There are plenty of them out there and they would
probably work just as well (obviously the closer/faster the traffic to
the DNS server you use the better performance you will see.)

vector


On Tue, 26 Jun 2001, Marcus wrote:

>
> I'm using two different ISPs depending on time of day, and cost.
> Problem is that they will only accept their own nameserver under
> /etc/resolv.conf. Is there a way around this, or do I need a script
> which changes resolv.conf before dialing?
>
> Thanks,
>
> Marcus
>
>
>
>


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: upgrading award bios to see ide 40mb disk

[Ian Perry]

Hi,

I have also tried this several times on a few machines.
The best way is to go to the motherboard site and d/l the upgrade, and burn
the new BIOS with a programmer.
your motherboard will have some numbers on it like GA-60XM7E.  The most
common motherboards used around here ase Gigabyte http://www.giga-byte.com/.
It would be a good place to start.

THe upgrade programs dont always work, but they are worth a try, and you
MUST use the ones they specify.

ALWAYS save your old bios on a floppy and make a few copies of the file on a
secondary floppy  Have a look at the file.  Make sure that there is
actually data in it.

Upgrade to the new BIOS and if that fails you will have to beg, borrow or
buy a programmer to program the chip with.

Do you really want to see a 40Mb disk ?  or did you mean 40 Gig ?

Ian

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Behalf Of Donald R. Spoon
Sent: Tuesday, June 26, 2001 2:22 PM
To: debian-user@lists.debian.org
Subject: upgrading award bios to see ide 40mb disk


> hi,
> does anyone know how to upgrade an award bios (so that it will see my 40mb
> ide-drive) either via dos or under linux and a pointer to a site (other
> then award.com) to get the necessary tools/drivers.
>
> Thanx for any insites.
>
> ---
> Andor Demarteau
> [EMAIL PROTECTED]

I have done this several times here.  I have found that the absolute
BEST way is to visit the homepage of your MOTHERBOARD (not Award) and
get the proper files from their tech support section.  They usually have
excellent instructions on just how to do the upgrade.  The reason for
this is that each motherboard mfg. will apply certain custom "tweaks" to
their BIOS that they order from AWARD, and they will be the ones to have
the "latest and greatest" changes to make their motherboards work
properly.  Most of the times I have done this, the files were under the
tech support / downloads sections.  READ, COPY, and RE-READ the install
instruction carefully!  You can really mess up the MB, if you don't
follow the directions!!

You generally have to d/l two files.  The first is the new BIOS image,
and the second is an "Awardflash" utility program that actually does the
install of the image file.  Also, it is important that you bootup into a
minimal MSDOS environment (no extra drivers, extended memory enabled,
etc).  It is important since the flash program will use most of the
available memory below 640K.  I have found here that the "minmal dos"
selection on the WIN ME rescue floppy will give the proper environment.
Earlier versions of Windows were quite difficult to get going...you
essentially had to make a "system" disk and copy over the two files
mentioned previouslyand ONLY those files!

I don't know of any way to do this under Linux, although I would be
quite happy to learn how if someone else knows.

Cheers,
-Don Spoon-


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

Routing IP Packets by port numbers

[Ian Perry]

Hi All,

I have a need to route packets to different places depending on the port
number.
For example:

Router1:192.168.2.1 etho
A.B.C.D ippp0
running sendmail, pop, apache etc

PC: 192.168.2.2 gw 192.168.2.1

Router2:192.168.2.100 gw W.X.Y.Z

I want to send all traffic from the PC to the gateway on Router1, but I want
to send all traffic for port 80 to Router2.  I am using Slink on Router1.
Router2 is a Win98 Satellite system.

It becomes more complex as there are 2 other networks 192.168.2.X and
192.168.3.X also routed onto eth0 via a third router.

The system is actually up and running with the exception of Router2.

Ian

RE: IPX over the Internet

[Ian Perry]

H (Cogs are start to grind)

Well that would take care of security via the firewall.

Ian

-Original Message-
From: Mike Egglestone [mailto:[EMAIL PROTECTED]
Sent: Friday, June 22, 2001 1:28 PM
To: debian-user@lists.debian.org
Subject: Re: IPX over the Internet


Hi...

That is an interesting question
I'm not sure how it would be setup... but
wouldn't you have to setup IPX to be tunneled
through TCP some how?

Mike

- Original Message -----
From: "Ian Perry" <[EMAIL PROTECTED]>
To: "'Debian Users'" 
Sent: Thursday, June 21, 2001 6:21 PM
Subject: IPX over the Internet


> Hi All,
>
> I have a few questions and hopefully you can help me.
>
> I have two debian system acting as an internet gateways connecting 2
offices
> via the internet.  Both are set up with IPX turned off and IPX not in the
> kernel.
>
> Is it possible to pass IPX packets over the internet to give outside users
> access to the IPX networks inside each office.
>
> It simply a matter of turning IPX on ? (I would be surprised if it is)
>
> What are the security ramifications ?
>
> Ian
>
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]
>
>


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

IPX over the Internet

[Ian Perry]

Hi All,

I have a few questions and hopefully you can help me.

I have two debian system acting as an internet gateways connecting 2 offices
via the internet.  Both are set up with IPX turned off and IPX not in the
kernel.

Is it possible to pass IPX packets over the internet to give outside users
access to the IPX networks inside each office.

It simply a matter of turning IPX on ? (I would be surprised if it is)

What are the security ramifications ?

Ian

RE: Strange logs - General Protection Fault

[Ian Perry]

I thought that it may be a hardware glitch or possibly a power glitch 

I wouldn't think that it was the kernel as the exact same kernel and
hardware configuration is running on 3 sites.  This has been the only
problem in the last 6 months of continuous running.   In fact one site has
been up for 18 months.

Ian


-Original Message-
From: Ethan Benson [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 19, 2001 5:55 PM
To: 'Debian Users'
Subject: Re: Strange logs - General Protection Fault


On Tue, Jun 19, 2001 at 12:57:42PM +1000, Ian Perry wrote:
> Hi all,
>
> My first General Protection Fault since Windows 3 !!
> Can anyone shed some light on this ?
>
> It occurred right after an ISDN reconnect.  The machine appeared to still
be
> working !!! Named, Sendmail, POP, IMAP, Masquerading...
>
> The machine is in a different state, so I had the operator there
> CTRL-ALT-DEL the machine, just in case, and it came up fine.
>
> Any clues ?

your hardware is probably seriously screwed.

> 00 00 c7 41 04 00
> Jun 19 20:10:30 melb kernel: Aiee, killing interrupt handler
> Jun 19 20:10:30 melb kernel: kfree of non-kmalloced memory: 001d90e8,
next=
> , order=0
> Jun 19 20:10:30 melb kernel: kfree of non-kmalloced memory: 001d90d8,
next=
> , order=0
> Jun 19 20:10:30 melb kernel: kfree of non-kmalloced memory: 001d95ec,
next=
> , order=0
> Jun 19 20:10:30 melb kernel: idle task may not sleep
> Jun 19 20:10:30 melb last message repeated 4 times
>

your kernel is in VERY bad shape

--
Ethan Benson
http://www.alaska.net/~erbenson/

Strange logs - General Protection Fault

[Ian Perry]

Hi all,

My first General Protection Fault since Windows 3 !!
Can anyone shed some light on this ?

It occurred right after an ISDN reconnect.  The machine appeared to still be
working !!! Named, Sendmail, POP, IMAP, Masquerading...

The machine is in a different state, so I had the operator there
CTRL-ALT-DEL the machine, just in case, and it came up fine.

Any clues ?

Ian



Syslog:
Jun 19 20:10:26 melb ipppd[5057]: rcvd [0][IPCP ConfReq id=0x1
]
Jun 19 20:10:26 melb ipppd[5057]: sent [0][IPCP ConfAck id=0x1
]
Jun 19 20:10:26 melb ipppd[5057]: rcvd [0][IPCP ConfAck id=0x1
]
Jun 19 20:10:26 melb ipppd[5057]: local  IP address xxx.xxx.xxx.xxx
Jun 19 20:10:26 melb ipppd[5057]: remote IP address xxx.xxx.xxx.xxx
Jun 19 20:10:30 melb kernel: general protection: 
Jun 19 20:10:30 melb kernel: CPU:0
Jun 19 20:10:30 melb kernel: EIP:0010:[do_dev_queue_xmit+367/472]
Jun 19 20:10:30 melb kernel: EFLAGS: 00010006
Jun 19 20:10:30 melb kernel: eax: 02fcfa01   ebx: 0001   ecx: 7fff
edx: 7fff
Jun 19 20:10:30 melb kernel: esi: 02fcfa94   edi: 074c5dd8   ebp: 074c5d40
esp: 001d8df8
Jun 19 20:10:30 melb kernel: ds: 0018   es: 0018   fs: 002b   gs: 0018   ss:
0018
Jun 19 20:10:30 melb kernel: Process swapper (pid: 0, process nr: 0,
stackpage=001d70a0)
Jun 19 20:10:30 melb kernel: Stack: 02fcfa94 02f53414 02fcfa0e 074c5d40
 0202 0013a882 02fcfa94
Jun 19 20:10:30 melb kernel:074c5d40 0001 0014313b 02fcfa94
074c5d40 0001 02fcfa94 02f53414
Jun 19 20:10:30 melb kernel:02fcfa7a 0058 03481eb0 006c
001413d1 02f53414 074c5d40 02fcfa94
Jun 19 20:10:30 melb kerneld: error: exit: Identifier removed
Jun 19 20:10:30 melb kernel: Call Trace: [dev_queue_xmit+26/36]
[ip_queue_xmit+387/472] [ip_fragment+613/644] [ip_queue_xmit+458/472]
[tcp_write_xmit+432/504] [tcp_ack+1492/2284] [ipfw_input_check+35/40]
Jun 19 20:10:30 melb kernel:[tcp_rcv+1781/2128] [ip_rcv+1016/1360]
[net_bh+252/284] [do_bottom_half+59/96] [handle_bottom_half+11/24]
Jun 19 20:10:30 melb kernel: Code: 8b 11 ff 4f 08 89 7a 04 89 17 c7 01 00 00
00 00 c7 41 04 00
Jun 19 20:10:30 melb kernel: Aiee, killing interrupt handler
Jun 19 20:10:30 melb kernel: kfree of non-kmalloced memory: 001d90e8, next=
, order=0
Jun 19 20:10:30 melb kernel: kfree of non-kmalloced memory: 001d90d8, next=
, order=0
Jun 19 20:10:30 melb kernel: kfree of non-kmalloced memory: 001d95ec, next=
, order=0
Jun 19 20:10:30 melb kernel: idle task may not sleep
Jun 19 20:10:30 melb last message repeated 4 times

Running Windows Apps on Linux

[Ian Perry]

Is it possible to run Microsoft Windows Apps (such as Excel etc) in XWindows
or is there a utility which allows this ?

Ian

RE: Why can't I?

[Ian Perry]

I totally agree.  I have been involved with Novell for several years, and
their default policy when creating a user is that they cannot see anything
other than their home directory.  It does make setting up a little harder,
but then isn't that why the idea of groups was invented?

Accounts group can only look at accounts files
Sales group can only look at sales files

I haven't been using Linux for all that long, and I have a long way yet to
go, but isn't this the reason for groups in Linus as well ?  We go to great
lengths to try our best to keep out intruders.  Why make it easier for them
?

The normal users on a system are generally not the problem.  It is the
curious ones who like to fiddle, and giving them less to fiddle with
inevitably leads to less damage and less work for the admin.

Ian



-Original Message-
From: Nick [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 06, 2001 6:13 PM
To: debian-user@lists.debian.org
Cc: Auke van der Gaast
Subject: Re: Why can't I?


On Wed, 13 Jun 2001 16:40:56 +0200, "Auke van der Gaast" <[EMAIL PROTECTED]>
wrote:

> I'm trying to restrict users' access to only their home dir
> (I don't want them to be able to see or reach / or even /home )
> I've already wasted half a day on just that, I'd really appreciate
> it if anyone could tell me what to do.



I'd hate to see this thread to die without chucking my 2p into the pot (this
is just for fun, OK ?) :  what Auke asks is a perfectly *reasonable* thing,
but (as other posters have pointed out) unfortunately not generally
considered a good idea on Unix.

Auke's suggestion is in perfect accord with the generally accepted best
practice security stance : whatever has not been explicitly allowed should
be implicitly denied.  It's a variation of security through obscurity, and
as such is usually deemed as being of little absolute value by security
geeks because a determined & competent attacker will not be slowed much by
it ... but it still helps.

My personal opinion is that the multiple users of a system should never be
able to even detect the existence of what each other has (never mind see the
content) unless the owner has granted that permission.

And they shouldn't be able to *list* the contents of system software areas
at all, even if they're allowed to *execute* them.

However, in my experience the only systems that actually deliver that
possibility have been the mainframe operating systems I used to work on.

-snip-

RE: Sudden problem with bind

[Ian Perry]

I had this a while ago and never found the problem.  named would simply
either stop working or just unload itself (normally the latter) with nothing
in the logs at all.
I updated to bind-9.1.1rc1 and all has been fine since with the exception
that an nslookup would not return to a prompt after execution... control C
would restore the prompt.  I havev't bothered about it as time has been
short of late.

Ian

-Original Message-
From: Robert-Jan Kuijvenhoven [mailto:[EMAIL PROTECTED]
Sent: Friday, June 15, 2001 5:04 AM
To: debian-user@lists.debian.org
Subject: Sudden problem with bind


Hello,

I have got a debian potato firewall / mailserver running for a couple of
months now. It ran without any trouble until a few days ago. Suddenly dns
does not work anymore (I use bind 8.2.3-0.potato.1 as a caching only
nameserver). When I do a nslookup on www.debian.org for example, I get the
following result:

 > www.debian.org
Server: localhost
Address: 127.0.0.1

*** localhost can't find www.debian.org: No response from server
 >

I have added some -l rules to my ipchains script to find out what is
happening. The dns requests from my debian box to my isp's dns server seems
to be ok (masquaraded udp request to port 53 of the ip address of my isp's
dns server). However, the dns server seems to respond only with a icmp
packet on port 3:

Jun 14 16:50:45 debian kernel: Packet log: input - ppp0 PROTO=1
194.178.9.133:3 62.45.15.91:3 L=56 S=0x00 I=21704 F=0x T=63 (#1)

I would expect the dns server to respond with an udp packet on port 53. I
am not sure about that however, because I do not know much about dns. If I
keep trying to resolve an address it sometimes works and once the address
is in the cache on my debian box I can keep resolving that address without
problems.

I have connected my modem to a windoze box directly and it worked without
problems.

Can anybody tell what could be wrong here please? I have not changed a
thing on my debian box before it stopped working correctly.

TIA,

Robert-Jan Kuijvenhoven


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: All packages ... again.

[Ian Perry]

You said:  "Listen to the voices of experience."

A few years ago I actually did what this person wanted to do... tried
installing them all.
After several weeks of tooling around and getting nowhere with an extremely
unstable system, I ended up getting out my setup disks, killed the
partitions and started from scratch.  I then did exactly as you suggested...
trialled a few and came up with a regime of packages I liked, and ended up
with a rock solid stable system which never gives any problems

Ian


-Original Message-
From: kmself@ix.netcom.com [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 13, 2001 4:02 PM
To: debian-user@lists.debian.org
Subject: Re: All packages ... again.


on Tue, Jun 05, 2001 at 11:02:00PM -0500, [EMAIL PROTECTED]
([EMAIL PROTECTED]) wrote:
> Hi ...
>
> Ok ... so, I was used to the fact that, my system just have one
> program for the main tasks. If  debian has more than one option, I'd
> like to ask again, a couple of things:
>
> a) If I'm not wrong, the programs can conflict each other, just in the
>case of simultaneous usage.  For example, they can compete for the
>same directory, the same TCP port, etc. But what could be wrong, if
>I install all the programs for the same tasks, and just "activate"
>one of them by configuration.  (and maybe, also configure the
>others to desactivate them).

You can do this.  It's more work than the alternative:  installing a
package you're interested in trialling for a period of time, then
reverting to another package if it doesn't work out.

> b) Aprox., How much disk space will be requiered to install ALL the
>packages???

A friend of mine, Rick Moen, maintains a Debian archive mirror, on about
10 GB of storage.  This represents the compressed format of most
packages, expect a full install to increase this requirement by 50-100%,
possibly more.

> I want to install all the packages, just because I like having the
> program already installed, in the moment I need them ... maybe I
> install some programs that never will be used, but it doesn´t matter
> for me, I prefer that to loose some time downloading, maybe compiling
> and installing the program.

Your concerns are sorely misguided.  You'll spend far more time
attempting this task than you will by installing the packages you need
and testing the ones you're interested in on an as needed basis.   This
will allow you to resolve issues when they arise, rather than fighting
them all at once.

Most debian packages weigh in at a few hundred KB -- even on a 56 K
dialup line (my only current access), you can download and install a
package in a matter of a few minutes, often less.  Some large packages
take longer -- I figure a MB every five minutes or so, do the math.  But
large packages tend to be end-user software which doesn't conflict with
other stuff.  It's mostly the server space that does -- having multiple
webservers, ftp servers, print services, etc., installed, simply doesn't
work.  Debian is designed to identify both dependencies and conflicts.
Your request is guaranteed to raise conflicts.  If you have a high-speed
connection, or are accessing the distribution from CDROMs or a locally
hosted mirror, you'll be able to install packages in seconds.  It would
literally take longer to read the package list from disk, in many cases,
than to download a package from a remote site, when I had a high-speed
Internet connection.

The simple fact is that you'll spend more time trying to force your
system into doing something it's designed to prevent, and it will take
you longer to test various packages out, than if you just use Debian the
way it's designed.  A friend of mine who does technical reviews of
GNU/Linux software for a major tech journal sees Debian as the *only*
way he can do his job.  Because Debian takes so much of the pain out of
trying out new software, it's the best way for him to do his
evaluations.

Listen to the voices of experience.

--
Karsten M. Self http://kmself.home.netcom.com/
 What part of "Gestalt" don't you understand?   There is no K5 cabal
  http://gestalt-system.sourceforge.net/ http://www.kuro5hin.org
   Disclaimer:  http://www.goldmark.org/jeff/stupid-disclaimers/

RE: Route problem

[Ian Perry]

try
route del -host 192.168.0.100 reject

I just checked it out...it worked here

-Original Message-
From: Anthony J. Breeds-Taurima [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 13, 2001 12:59 PM
To: Ian Perry
Cc: 'Brian Schramm'; debian-user@lists.debian.org
Subject: RE: Route problem


On Wed, 13 Jun 2001, Ian Perry wrote:

> route del ipnumber
> or are you talking about the ipfwadm or ipchains ?

Hmmm didn't work here:
~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric RefUse
Iface
192.168.0.12*   255.255.255.255 UH0  00 eth0
192.168.0.0 *   255.255.255.0   U 0  00 eth0
127.0.0.0   *   255.0.0.0   U 0  00 lo
default gw  0.0.0.0 UG0  00 eth0
~# route add -host 192.168.0.100 reject  #no machine on this IP.
~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric RefUse
Iface
192.168.0.100   -   255.255.255.255 !H0  -0 -
192.168.0.12*   255.255.255.255 UH0  00 eth0
192.168.0.0 *   255.255.255.0   U 0  00 eth0
127.0.0.0   *   255.0.0.0   U 0  00 lo
default gw  0.0.0.0 UG0  00 eth0
~# route -v del -host 192.168.0.100
SIOCDELRT: No such process
~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric RefUse
Iface
192.168.0.100   -   255.255.255.255 !H0  -0 -
192.168.0.12*   255.255.255.255 UH0  00 eth0
192.168.0.0 *   255.255.255.0   U 0  00 eth0
127.0.0.0   *   255.0.0.0   U 0  00 lo
default gw  0.0.0.0 UG0  00 eth0


I usually use ipchains/iptables because I couldn't workout how to remove the
reject rule.

Yours Tony.

/*
 * "The significant problems we face cannot be solved at the
 * same level of thinking we were at when we created them."
 * --Albert Einstein
 */


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: Route problem

[Ian Perry]

route del ipnumber
or are you talking about the ipfwadm or ipchains ?

-Original Message-
From: Brian Schramm [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 13, 2001 12:30 PM
To: debian-user@lists.debian.org
Subject: Route problem


Is there a way to remove a route from the route table that is set up to
reject that ip address?  I have tried on several machines with no luck.  I
am tired of rebooting to clear it.

Brian

Brian Schramm
[EMAIL PROTECTED]ICQ 104442754  AIM schrammbrian
www.linuxexpert.org




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: small school: replacements for MS Word and Excel

[Ian Perry]

I have been running Linux 2.0.36 for the past year on 3 sites and have had
ext2 go down on each of them after a power failure.
Much of the time running fsk manually fixed the problem, other times the
systems were totally unbootable.

The problem has gotten so bad that we have had to put UPS backups on all our
linux machines, even though we are using brand name hardware.

We used to run slackware 2.0.0 on a few clones and we never had any problems
even though we abused them many a time in resetting them and powerring down
without shutdown.

I will agree though that linux is far far far more robust than any of the NT
or Win95/98/Me systems we have here.

I should also say for completeness that the Novell Server we have is as
reliable if not more so than the linux machines.

Ian


-Original Message-
From: Jonathan D. Proulx [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 05, 2001 12:25 PM
To: debian-user@lists.debian.org
Subject: Re: small school: replacements for MS Word and Excel


On Tue, Jun 05, 2001 at 02:03:02AM +0100, Colin Watson wrote:
:Sean Morgan <[EMAIL PROTECTED]> wrote:
:>OK, the two messages previous posts kind of play off eachother so I'm
:>going to reply to them in one go.  First off ext2, it has a really bad
:>habit of losing files in hard crashes and power outages, this isn't a
:>problem for someone like you or I as we know how to recover them, for a
:>student with no root and no knowledge of how to do this, it's called a
:>couple of hours work down the tubes.
:
:I have to say, I've never lost a file to an ext2 disk crash, nor even
:had to go any further than the odd prompted "run fsck manually" to
:recover it,

On extremely flaky hardware, such as Colin goes on to describe, I have
"lost" file on ext2, but only in extreme cases.  And I put "lost" in
quotes because I know that they're in the lost-found directory, just
with a weird name and some careful use of `file` and `grep` has gotten
them back.  Though honestly even with crashes under load this doesn't
often happen, and even in the rare cases when it does 99% of those are
just netscape cache files I don't care about.

NTFS and FAT on the other hand I've lost system files that render the
machine unbootable (happened on 3 systems in the past 2 months),  I
haven't lost a file on ext2 ever and the last "lost" file was about 6
months ago.

Linux beats out M$ in my lab atleast 2 to 1.  The only Un*x system
I've really had a lot of trouble with was a Solaris UFS file system on
a very old drive that just went insane while mounted and under heavy
NFS use (got that back with fsck too, eventually).

So in my experience ext2 is much more robust than M$ offerings.
Reiserfs is *probably* a bit better though I hear when
journaled filesystems do manage to get wedged it's all over
.  RAID mirroring is also an option for the paranoid (not to
suggest paranoia is always unwarrented), but this is probably a bit
more technicaly complex than you want to get.

-Jon


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: adsl

[Ian Perry]

Also have you set up your input/output rules ?

-Original Message-
From: John Griffiths [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 07, 2001 3:08 AM
To: wayne
Cc: Debian-User
Subject: Re: adsl


At 03:07 PM 6/6/01 +0800, wayne wrote:
>i setup a debian server,i used rp-pppoe to connect internet through
adsl,when i finished rp-pppoe's setup,i use "adsl-start",it conected
successful,but when i ping the internet ip address,nothing reply.what is the
problem?i found debian has pppoe.deb. what is the deffrent with
rp-ppoe,pppoe,does rp-pppoe work perfect in debian?thanks a lotÿôèPԔ ‘

have you set up your DNS?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: How to change domain name???

[Ian Perry]

The spots which come immediately to mind are

change the entry in the /ets/hosts file < this
change the entry in the /etc/hostname file <--- and this should match
mailname in /etc
run sendmailconfig (or the config for your mail program)


Ian


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 07, 2001 1:53 PM
To: debian-user@lists.debian.org
Subject: How to change domain name???


How do you change the domain name on a already running box?  When I
originally setup my lan, I did not have a true domain and I called my
network foo.bar (instead of yahoo.com for example).  Now I have a real
domain name and want to start changing machines over to it.

TIA,

maillst


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: [OT] windows networking issue

[Ian Perry]

You've probably looked at this already...but...

Have a look in Control Panel / System / Device Manager on the 95 machine and
go Properties on the network card.  See if it reports that the network card
is operating correctly.  Chech the settings for the card, I/O, IRQ etc.
Windows occasionally gets them wrong !!!  Check the driver... is it correct
?

Next try swapping the connection on the hub of the non-gateway linux machine
and the 95/98 machine and test them both to eliminate a faulty hub.

Last resort, try turning off Plug and Pray (Play) and setting the IRQ for
the card manually in the bios and try again.

Ian



-Original Message-
From: ktb [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 07, 2001 10:41 PM
To: debian-user
Subject: Re: [OT] windows networking issue


On Wed, Jun 06, 2001 at 10:27:21PM -0400, Rob Mahurin wrote:
> On Wed, Jun 06, 2001 at 05:02:53PM -0700, Mike Egglestone wrote:
> > Hi Rob...
> > I would guess its a hardware issue
> > Either the nic in the win9x box is flaky... or the cable or
something
> > Keep troubleshooting... do you have an extra nic or cable...?
>
> Hmmm ... I took the card from one of the working linux boxes (bravo)
> and put it in the windows box, and had similar if not identical
> behavior.  Also, the windows box does correctly get its DHCP
> information on boot; it just mysteriously stops using the interface
> after that.
>
> I'll try the switcheroo again in a few days, hoping that something
> easier gets suggested; the box doing my routing/gatewaying is
> headless, which makes this sort of thing hard.
>
> > what about duplexing? Is your nic set for half or full?
>

There may be another way but I usually nab a utility program from the
manufacturer and run a diagnostic on the card.  I've mostly worked with
older 3Coms.  The utility fits on a bootable windows floppy so it
doesn't matter which operating system your running.
hth,
kent

--
 From seeing and seeing the seeing has become so exhausted
 First line of "The Panther" - R. M. Rilke



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: Currency of packages

[Ian Perry]

Just be thankful that it's not the Windows definition of "stable".

Remembewr that you can only 'tickle a system' just so much, before it dies
laughing at you.

Ian


-Original Message-
From: Steve Kowalik [mailto:[EMAIL PROTECTED]
Sent: Monday, June 04, 2001 3:03 PM
To: Noah L. Meyerhans
Cc: debian-user@lists.debian.org
Subject: Re: Currency of packages


On Sun, Jun 03, 2001 at 10:20:52PM -0400, Noah L. Meyerhans uttered:
> I don't agree.  I think "stable" is an innapropriate name.  The prime
> example for this is slink, which included GNOME 0.3.something.  This was
> released after GNOME 1.0 came out.  Let me tell you, there was nothing
> at all "stable" about GNOME 0.3 ever.  I wish we could come up with
> better terms than stable, testing, and unstable.  I have yet to think of
> any, though.
>
I usually tell my friends:
"Rock-solid" == stable
"Mildly Annoying" == testing
"Look out for that bus!" == unstable

But, I doubt I'm going to sway anyone with names like that. :-)

--
Steve
  "I'm a sysadmin because I couldn't beat a blind monkey in a coding
contest."
--Me


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

RE: install

[Ian Perry]

Try the main website http://www.debian.org
There is a link on the left "Installation Instructions", "Debian Packages",
"Download with FTP"
Make up a set of base disks
http://ftp.au.debian.org/pub/debian/dists/stable/main/disks-i386/current/ima
ges-1.44
Install from these disks and then ftp the remaining packages from the
website.
There are also some utilities in
http://ftp.au.debian.org/pub/debian/dists/stable/main/disks-i386/current/dos
utils/ to make the disks such as rawrite2.exe

Ian



-Original Message-
From: 김수진 / 金秀珍 [mailto:[EMAIL PROTECTED]
Sent: Monday, June 04, 2001 2:50 PM
To: debian-user@lists.debian.org
Subject: install


I am a beginner.
I have no experience linux.

Where Can I get CD for Debian?
or how can I get a diskette for install??

Help!!





淸P? ?zf쥤?y툣잳촾용z쳻꿉??洶썖?◀0듰Z꿩??熒꿩?툤{端
떅뺧짖{Zr?꾸슩累?Ф屈y툣잲+

RE: A little off topic - Microsoft Networking Problem

[Ian Perry]

Petr,

Many Thanks.

Problem solved.

Actually the Linux machines do not have samba installed, they are simply
mail, web, squid etc.

I know that none of the Windows machines have "Browse Master" enabled.  At
least they weren't when we set them up (unless the mysterious Mr Nobody and
his fiddling fingers have been at it again.)

Enabling "Browse Master" on one machine fixed the problem, and it works much
faster than it ever did !!

Strange that the problem has only shown up now.  Probably because the
network has grown so large.

Regards, and thanks again.

Ian

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
Petr [Dingo] Dvorak
Sent: Monday, June 04, 2001 12:22 PM
To: Debian-User
Subject: Re: A little off topic - Microsoft Networking Problem


On Mon, 4 Jun 2001, Ian Perry wrote:

IP> I know this is a little off topic but...
IP>
IP> I have a network of 100+ operating Windows 95, 98, Me, 2000, Netware
Server,
IP> Linux (here I have to add that the machines running linux and netware
have
IP> been up continuously for over 11 months and never missed a beat unlike
the
IP> others mentioned)
IP>
IP> On the windows machines, they are taking forever to pull up Network
IP> Neighbourhood.  It began happenning a few months back without
explanation
IP> and has been happenning randomly ever since (we had not changed the
network,
IP> nor brought any new machines online).  We have no problems with IPX, or
IP> TCP/IP on any of the machines.
IP>
IP> I was just wonderring if anyone has had a problem similar and was there
a
IP> quick solution to finding the problem rather than taking the 100+
network
IP> down and thoroughly testing it.

I had the same problem with my machines, what i think was happening, that
the
windows machines were fightning who is going to be the domain master, i
fixed
that with turning it off on all the windows machines in network properties
and
then set this in /etc/samba/smb.conf:

  domain master = yes
  local master = yes
  preferred master = yes

also i set 'os level = 255', from what i heard, no windows [any version] has
higher priority on smb so the samba easily beat all of them. Since then the
local network is like a flash, the only 'disadvantage' is that the linux
machine has to be up if any of the windows machines need to use the smb, as
it
is the domain master and all the other machines are prevented from becoming
one even when the linux samba machine is down.

HTH
Dingo.


  ).|.(
'.'___'.'
   ' '(>~<)' '
   -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-ooO-=(_)=-Ooo-=-=-=-=-=-=-=-=-=-=-=-=-=-
Petr [Dingo] Dvorak [EMAIL PROTECTED]
Coder - Purple Dragon MUD   pdragon.org port 
   -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-[ 369D93 ]=-=-
 Debian version 2.2.18pre21, up 4 days, 13 users, load average: 1.01
   -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]

A little off topic - Microsoft Networking Problem

[Ian Perry]

I know this is a little off topic but...

I have a network of 100+ operating Windows 95, 98, Me, 2000, Netware Server,
Linux (here I have to add that the machines running linux and netware have
been up continuously for over 11 months and never missed a beat unlike the
others mentioned)

On the windows machines, they are taking forever to pull up Network
Neighbourhood.  It began happenning a few months back without explanation
and has been happenning randomly ever since (we had not changed the network,
nor brought any new machines online).  We have no problems with IPX, or
TCP/IP on any of the machines.

I was just wonderring if anyone has had a problem similar and was there a
quick solution to finding the problem rather than taking the 100+ network
down and thoroughly testing it.

Thanks

Ian

Satelite

[Ian Perry]

Hi,

I have been asked to get satelite internet reception working on a linux box.
Currently it is working on a 98 box but is not 'sharable' across the
network.

Any clues as to where to go for the drivers etc ?

Ian

Email Problem

[Ian Perry]

Hi,

Its so nice to be back in the land of the linux.

I have been asked if it is possible to monitor specific outgoing email ?  By
specific I mean either from a specific email return address, or a specific
IP number.  We are using sendmail, SMTP, and POP3

It is easy enough to monitor the incomming by .forward to another account.

Any ideas would be appreciated.

Ian

Just some thoughts, and I could be wrong

[Ian Perry]

I have watched with interest the comments passed back and forth, after the
resignation of one of our members.

I am by no means a competant C Programmer, or a Linux Guru, but do feel
quite comfortable here in the Debian Community.  As a user I appreciate
deeply the work and dedication which has, and is still being done on the
package, and the great help I have received in getting my system together,
and functioning reliably. (It has not fallen over yet unlike others I have
seen in the past)

Throughout the threads of the discussion, I have noticed a touch of
animosity between some of our members and while discussion can be heathy,
bickerring and animosity is not, and we all must be careful that we do not
split the community down the middle.  It would be a great pity for Debian
to flounder in any way, shape or form.

I am seeing a possible rift developing between some of our members, and I
do not believe that any of us would wish for this to happen.

I look at the situation it that one of our members has moved on, and no one
person in any organisation will bring that organisation down...and it
certainly is not worth a civil war over.  The goals of the organisation do
not change by the addition or subtraction of a single member, although he
may be of influence.   

Emotive discussion and nit picking can only harm the organisation as a
whole.  We need to be careful not to turn this situation into a flaming
match.

I may have misread the situation, but this is how I saw it as a newbie to
the community.

Ian


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: I am leaving Debian

[Ian Perry]

Bruce,

On the Thursday, 19 March 1998 8:00 you said.
> 
>  but I feel that my mission to
> bring free software to the masses really isn't compatible with Debian any
> longer, and that I should be working with one of the more mainstream
Linux
> distributions.

Your statement that "free software to the masses really isn't compatible
with Debian" is disturbing.

I have spent a considerable amount of time over the last four months
investigating and trialling Debian, over slackware and redhat, as we are in
the near future about to install some serious hardware running under Linux.
 Debian, so far, is ahead.

Can you please clarify your statement, as it appears to point to Debian
going commercial, which will lead to all sorts of nasties.

Thanks

Ian


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: modules

[Ian Perry]

Also have a look at the "modules" file in /etc to make sure you are not
loading modules which you do not want.   I found that this file was not
recreated on installation of the new kernel.

Ian
--
> From: Robin Davis <[EMAIL PROTECTED]>
> To: Ralph Winslow <[EMAIL PROTECTED]>
> Cc: David B Wilson <[EMAIL PROTECTED]>; debian-user@lists.debian.org
> Subject: Re: modules
> Date: Thursday, 19 March 1998 10:12
> 
> On Wed, 18 Mar 1998, Ralph Winslow wrote:
> 
> > David B Wilson wrote:
> > > 
> > > When I boot, there are complaints of unresolved symbols in modules
> > > such as ppp and pcmcia.  This is with a recently compiled 2.0.30
> > > kernel (and I did make modules and modules_install).  Advice?
> > > 
> > > Is there a way to get a log of all the boot messages?
> > 
> > Try  "dmesg | less" or "dmesg | more" or "dmesg | pg"
> > HTH
> > > 
> > > David
> > > 
> Did you do a depmod -a when you rebooted?
> 
> Rob
> 
> 
> 
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: LINUX "Proxy"

[Ian Perry]

I have used socks, and ipmasq and transproxy (just to toss another one into
the pile)

If you are only after ftp or http proxying then squid or transproxy or
socks is possibly the way to go, although if you are connecting through a
modem from the linux box to your ISP, you may be better off setting up your
linux box as a masquerade host, and use your ISP's high speed proxy server,
after all a modem is not a megabit link.

If you wish to use IRC Chat programs, or ICQ and the like... Masquerading
is the way to go.  As far as I am aware a proxy can't handle them.

I am of the opinion that socks and proxy servers will be slower than
ipmasq, as the proxy actually makes the request on your behalf, whereas
ipmasq merely changes the header and passes the message through.

I have 5 machines here at work hooked through a 486 DX2 66  and although it
can get slow at times when three people are hammerring it, and is adequate.
  You can only squeeze so much info through a modem, so the speed of you
box will not be a stumbling block.  Ipmasq will run quite adequately on a
486 DX2 50.

I also use ipmasq at home with 3 machines hooked to it.


Ian

--
> From: Jay D. Winks <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Cc: debian-user@lists.debian.org
> Subject: Re: LINUX "Proxy"
> Date: Tuesday, 17 March 1998 1:58
> 
> PMan:
> 
> Well, out of the five responses I got from a post in the debian users
> group, I got four mentions of IPMasq, and two mentions of a proxy called
> SQUID. Nobody even mentioned SOCKS, but I have definitely heard of it
> from my many run-throughs of NT configuration. Which way do y'all have
> it set up at your home? Remember that we will have three users instead
> of the two, and would usually prefer to use the proxy than a straight
> dial-up. Just what quality connections could we expect to get out of the
> following system:
> 
> 
> Thanks.
> Jay Winks


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: POP3 server

[Ian Perry]

There is a package called qpopper in mail

--
> From: Rob Goodwin <[EMAIL PROTECTED]>
> To: 'debian-user@lists.debian.org'
> Subject: POP3 server
> Date: Thursday, 12 March 1998 20:06
> 
> 
> hi folks,
> 
> can someone tell me where i can find the information i need to set up a 
> POP3 server.  First I guess i should ask if there is even one out there 
> freely available?  I imagine there must be though as there seems to be 
> everything else.
> 
> rob 
> 
> 
> --
> E-mail the word "unsubscribe" to [EMAIL PROTECTED]
> TO UNSUBSCRIBE FROM THIS MAILING LIST. Trouble? E-mail to
[EMAIL PROTECTED]


--
E-mail the word "unsubscribe" to [EMAIL PROTECTED]
TO UNSUBSCRIBE FROM THIS MAILING LIST. Trouble? E-mail to [EMAIL PROTECTED]

Re: PPP Configuration: Getting Hooked Up to my ISP

[Ian Perry]

If your ISP requires pap authentication, you need to uncomment the 
+pap line in your options file.
Also he may not require you to run a script..
You might try taking out the login and password references in your script,
as ppp authentication should take care of it.   My ISP does it this way.

Try adding  "debug" to your options file as well, to get some more
meaningful error messages in your syslog, and have a look at your ppp.log
file as well.

56800 will not work in your options file as the next setting above 38400 is
57600.

Hope this helps...

Ian



--
E-mail the word "unsubscribe" to [EMAIL PROTECTED]
TO UNSUBSCRIBE FROM THIS MAILING LIST. Trouble? E-mail to [EMAIL PROTECTED]