Re: Chromium in Sid

2010-05-21 Thread John L Fjellstad
Javier Barroso  writes:

> What would be wrong if every app would have its own repository ?

Nothing

> There is the problem, isn't it ?

No

> Having an unique repo have many advantages (not need to add / remove
> repositories when they start / die)

Having an unique repository for packages that you absolutely have to
have the latest at the moment upstream makes it available is an
advantage.  Especially if you disagree with the choices or patches that
the maintainer added to package.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/87aart9dav@minerva.secundus.fjellstad.intern



Re: Giving a user root priveleges?

2009-11-17 Thread John L Fjellstad
Zachary Uram  writes:

> I edited /etc/sudoers file and added:
>
> userALL=(ALL) ALL
>
> But when I try to sudo as that user to root I get error:
>
> $ sudo su root
>
> We trust you have received the usual lecture from the local System
> Administrator. It usually boils down to these three things:
>
> #1) Respect the privacy of others.
> #2) Think before you type.
> #3) With great power comes great responsibility.
>
> [sudo] password for zu22:
> Sorry, try again.
> [sudo] password for zu22:
> sudo: pam_authenticate: Conversation error
>
> How can I fix this?

You are putting in zu22 password, right?
As the user, you can run sudo -l to see what kind of right it has.  You
must still put in the correct password, though

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: what's your favourite FLOSS?

2009-11-05 Thread John L Fjellstad
Tshepang Lekhonkhobe  writes:

> audio player:
amarok

> cd-ripper:
abcde

> desktop environment OR window manager:
KDE4

> development:
emacs

> disc burner:
k3b

> e-mail client:
Kontact

> finance:
kmymoney

> image viewer:
gwenview

> instant messenger:
kopete

> misc utilities:
grep

> p2p:
ktorrent

> pdf/ps-reader:
okular

> terminal emulator:
yakuake

> text editor:
emacs

> video player:
kmplayer

> web browser:
konqueror/firefox

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: [mutt] label mails with colored tags

2009-10-25 Thread John L Fjellstad
Peter Jordan  writes:

> Hello,
>
> I plan to migrate from thunderbird to mutt.
>
> In thunderbird it is possible to define custom tags (e.g. debian with
> color red), so that the mails labeled with debian are highlighted red.
>
> Is that also possible with mutt?

Tagging is called labeling in mutt.

You can add a label header, X-Label, and have mutt sort (and color) on
that.
if you add the X-Label header, you can limit your view to that label
with ~y pattern (check the mutt documentation).

I basically label it with either maildrop (automatic labeling when mail
comes in), or editlabel(1) script

(1) http://blitiri.com.ar/p/other/mutt-labels/

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Installing Debian alongside Windows Vista?

2009-06-28 Thread John L Fjellstad
Zachary Uram  writes:

> Hi,
>
> I have a 500GB disk which has Microsoft Windows Vista Home Premium
> (64bit) installed on it. Not sure if that is 1 huge partition or not.
> I assume it is NTFS. Can someone please tell me exactly what I must do
> to shrink the Vista install by 50% and install Debian squeeze (64bit
> AMD) on the 250GB partition that will be freed.

I used to use PartitionMagic to shrink Windows partitions.  Not sure if
it still works with Vista, but I would think the newest version has
support for it.  A free vesion is gparted, but I have never used this.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: undigesting and filtering by list-id

2007-09-25 Thread John L Fjellstad
Ken Irving <[EMAIL PROTECTED]> writes:

> OT, but one concern I have is that stuff like this gets added to
> .procmailrc but rarely if ever gets taken out.  Sometime it might be
> nice to move to a more transparent, less arcane filtering system, and
> maybe such a system could keep track of how often patterns actually
> get hit.

It's not that hard to add counting information to procmail.  You can log
the information.  I do that with my spamrules

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: undigesting and filtering by list-id

2007-09-24 Thread John L Fjellstad
Celejar <[EMAIL PROTECTED]> writes:

> The best practice when filtering list traffic is apparently to use the
> 'list-id' header (to catch 'to', 'cc', etc).  But the best
> practice is also apparently to undigest digest emails with formail
> (greatly easing reading, threading and replying), which doesn't
> preserve the 'list-id' header.  Is there no choice, then, but to filter
> by 'to' (and 'cc' etc.)?

Couldn't you reinsert the list-id header?  That is, pull out the list-id
header before undigesting, store it, undigest, insert list-id.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: how to give priority for site with apt

2007-09-19 Thread John L Fjellstad
"abdelkader belahcene" <[EMAIL PROTECTED]> writes:

> I haven't found info about priority in the apt doc

Take a look at the apt_preferences(5).  You can change the priority of
the repositories by using pinning

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



xml-fo to odf converter

2007-09-18 Thread John L Fjellstad
Anyone know a working xml-fo to odf converter?  

Google only shows me ms-doc to odf or xml-fo to pdf.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: mail messages with only html

2007-09-14 Thread John L Fjellstad
Richard Lyons <[EMAIL PROTECTED]> writes:

>> I fail to see why you couldn't write a filter (using maildrop or
>> procmail) to pipe the message through w3m -dump (or links -dump) before
>> storing the message.
>
> Thanks John.  That seems to be the definitively best way to go.  I just
> have to work out how to reliably identify or flag the offending messages for
> treatment.

All html mail should have content type set to text/html

>> Also, IMAP won't care if you change the message. You just upload the
>> message as a new message. I do it all the time with I add labels etc.
>
> It will be better if I leave the headers alone, so that threading
> doesn't get broken.

Well, I was talking about created a brand new message.  When I add
labels etc, I add header lines, but the message itself is like the
original.  But as far as IMAP is concerned, I deleted the old message
and uploaded a new message.  As long the In-Reply-To header is still
there, the threading shouldn't be broken

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: mail messages with only html

2007-09-14 Thread John L Fjellstad
Richard Lyons <[EMAIL PROTECTED]> writes:

> Obviously a better method, yes.  But when I reply, I will not get the
> received text quoted ready for editing if the email is void. 

If you click on v, and select the text/html version of the message and
click on r, mutt will quote the text/html version of message, and not
the plain text.  

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: mail messages with only html

2007-09-13 Thread John L Fjellstad
Richard Lyons <[EMAIL PROTECTED]> writes:

> Here is the thought that struck me: could I in principle write a script
> to take such void plus html messages, strip the tags (replacing URLs
> when the href text doesn't have it) and write the bare text back into
> the source email so that I can see it? The html attachment could be left
> in place or discarded, it usually won't matter which.  Or would this
> mess up the IMAP or Maildir indexing in some way?  

I fail to see why you couldn't write a filter (using maildrop or
procmail) to pipe the message through w3m -dump (or links -dump) before
storing the message.

Also, IMAP won't care if you change the message. You just upload the
message as a new message. I do it all the time with I add labels etc.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Better iptables firewall

2007-08-30 Thread John L Fjellstad
Michael Pobega <[EMAIL PROTECTED]> writes:

> # Generated by iptables-save v1.3.6 on Mon Jun 18 09:55:18 2007
> *filter
> :INPUT DROP [0:0]
> :FORWARD ACCEPT [0:0]
> :OUTPUT ACCEPT [35639:3072343]
> -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
> -A INPUT -i lo -j ACCEPT
> -A INPUT -p icmp -m limit --limit 1/sec -j ACCEPT
> -A INPUT -p icmp -j DROP
> #-A INPUT -p tcp -m tcp --dport 5030 -j ACCEPT
> #-A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT
> #-A INPUT -p tcp -m tcp --dport 15000 -j ACCEPT
> COMMIT
> # Completed on Mon Jun 18 09:55:18 2007

I took the rules look fine

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: man for linux programmer's Manual

2007-08-18 Thread John L Fjellstad
[EMAIL PROTECTED] writes:

> Hi,
>
> When I used RH 9.1 before, I can call man to display linux
> programmer's C / C++ manual. But, I am not be able to do it in my new
> installation of Debian 4.0. How can I install it?

It's in manpages-dev, manpages-posix and manpages-posix-dev

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Problem with compiling kernel

2007-05-07 Thread John L Fjellstad
pizzapie_linuxanchovies <[EMAIL PROTECTED]> writes:

> I was following a tutorial
> (http://newbiedoc.sourceforge.net/system/kernel-pkg.html) for
> compiling a custom kernel, and got to the stage where it said to run
> this: "fakeroot make-kpkg clean"
>
> However, this command generated a bunch of errors saying this:
> dpkg-architecture: failure: dpkg --print-installation-architecture
> filed: Permission denied

Are you sure that the user you are running under has write access to the
kernel source directory?  fakeroot doesn't actually give you root
access, just merely pretend to give you access.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: replacing /usr with a new mountpoint

2007-05-04 Thread John L Fjellstad
Andrew Sackville-West <[EMAIL PROTECTED]> writes:

> my reading of man mount suggests that you want
>
> mount --rbind / /mnt
> ---^^^
>
> but its not very clearly written (IMO) so I suggest you 
> touch a dummy file in the new /usr and double check whether its in
> /mnt/usr as a test to confirm that the mount of new /usr doesn't carry
> over. 


I'm not sure that's right.

  Since Linux 2.4.0 it is possible to remount part of the file  hierarchy
  somewhere else. The call is
   mount --bind olddir newdir
  After this call the same contents is accessible in two places.  One can
  also remount a single file (on a single file).

  This call attaches only (part of) a  single  filesystem,  not  possible
  submounts.  The entire file hierarchy including submounts is attached a
  second place using
   mount --rbind olddir newdir

This means that if you have something like this
/dev/sda1  /
/dev/sda5  /usr

Doing a --bind on / will only mount /, not /usr, while --rbind will
mount both / and /usr.

According to the original message, he has the original /usr directory 
shadowed by another /usr partition, and what he wants is to remove the
original /usr directory. 

At least that's my understanding.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Dangers of "stable" in sources.list

2007-05-04 Thread John L Fjellstad
Max Hyre <[EMAIL PROTECTED]> writes:

>I'm pointing out that the `stable' distro becomes
> massively unstable periodically.  Admitted, that period is
> on the order of multiple years, but it _is_ being shortened.
> Additionally, the people least likely to be able to handle a
> badly- or non-working system are the ones most likely to be
> blind-sided by it.
>
> John L Fjellstad wrote:
>> If you remove 'stable', then you kind of have to remove
>> 'testing' too.
>
>I don't think that follows.  If someone, even a newbie,
> signs up for `testing', they've got to know there's going to
> be a bumpy ride.

Just after a distro goes stable, testing will get an influx of packages
that might break the system.  And the way it's set up, it might take
some time for the fixes to come down from unstable.  testing is pretty
calm after a freeze, and since freezes are pretty long in Debian, some
newbies might not realize this if they started with testing during the
frozen period.

And the people most likely to to not being able to handle a non-working
system is probably not updateing willy-nilly anyways.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: replacing /usr with a new mountpoint

2007-05-03 Thread John L Fjellstad
"Martin Marcher" <[EMAIL PROTECTED]> writes:

> of course I'd like to regain the space that the /usr directory on the
> / partition uses. Could I just "telinit 1" umount the /usr mountpoint
> empty out the /usr directory remount again and telinit 3 back to
> normal?

I think you can do it without telinit 1.  
Try rebinding the / mountpoint somewhere else 
mount --bind / /mnt
Then / will be in both / and /mnt
The /mnt/usr should be your original /usr.  Delete that directory, and
unmount /mnt

Theoretically, this should work, but I haven't tried it.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Dangers of "stable" in sources.list

2007-05-03 Thread John L Fjellstad
Max Hyre <[EMAIL PROTECTED]> writes:

>So, my modest suggestion is that `stable' as a name
> should be eradicated.  Roughly no downside, only closer
> adherence to the principle of least astonishment.

If you remove 'stable', then you kind of have to remove 'testing' too.
Otherwise, people who follow testing will get a blast of new software
once 'whatever' becomes stable.  And how do you know which code name is
the current stable?  

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Dangers of "stable" in sources.list

2007-05-03 Thread John L Fjellstad
"Martin Marcher" <[EMAIL PROTECTED]> writes:

> Do you generally use stable in your sources.list or do you actually
> use sarge/etch/whatever.

I usually use the code names, mostly because lately when I have
installed a new system, the testing distro had gotten far enought hat I
feel comfortable running it.  Also, the stable has gotten so stale, I
can't run it.  

That said, I try to keep servers that was installed long ago, on
stable instead of codenames.  By the time a new distro is ready, given
Debian looong cycle, I'm not receiving much of updates of any kind
anymore.  That means when the new distro goes stable, it's never much of
a surprise.  Then again, I don't feel like running "aptitude update &&
aptitude dist-upgrade" every day, especially on my servers.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: GCC compiler

2007-04-29 Thread John L Fjellstad
Cédric Lucantis <[EMAIL PROTECTED]> writes:

> This is documented in the make info page, under section 6.5 "How to use 
> variables/Setting". I don't know if this is specific to gnu make or not.

Thanks.  I really appreciate the explaination (I looked it up in my make
book, it the book I have was more generic and not GNU make specific).

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: GCC compiler

2007-04-29 Thread John L Fjellstad
"Michael Marsh" <[EMAIL PROTECTED]> writes:

> If I'm using GNU make, I hardly ever use "=" instead of ":=", unless I
> really want to define a macro.  You're a lot more likely to get what
> you expect most of the time, and you can use "+=".

What's the difference?  My book on Make mentions "=", but not ":=". I
knew about ":=" but I always thought they were pretty much the same.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Universities, Linux, M$, USA

2007-04-26 Thread John L Fjellstad
I just don't have time or energy for this. Sorry.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Blog about using Debian for a really small business...

2007-04-26 Thread John L Fjellstad
Sven Arvidsson <[EMAIL PROTECTED]> writes:

> Looks very interesting. Maybe you should ask DebianTimes to give you a
> link? I'm sure it would fit in the success-stories category.
> http://times.debian.net/

Don't you want to give it time to see if it will succeed before you put
it up as a success story?

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Universities, Linux, M$, USA

2007-04-26 Thread John L Fjellstad
Ron Johnson <[EMAIL PROTECTED]> writes:

>> Well, I only attended on US college, but Santa Clara U always had a
>> UNIX lab.
>
> That is, after all, where SCO comes from...  :)

Santa Clara is not Santa Cruz. 

>>   Used to be HP-UX, now it's Solaris.  Actually, the engineering
>> lab has three systems, Solaris, Linux and Windows.
>
> The engineering lab at a big University only has 3 computers?

Systems talk about types.  The engineering lab is basically three labs
with 20 odd computers, each sublab runs a particular OS (Solaris, Linux
or Windows).  Actually, the Solaris lab probably has closer to 40 or 50
computers.  And SCU isn't that big.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: UUID vs /dev

2007-04-24 Thread John L Fjellstad
Joe Hart <[EMAIL PROTECTED]> writes:

> Now that is a good reason.  AFAIK, as of the newer kernels (forget
> which release) all drives are now sdX, so this issue becomes moot.  I
> can see why UUID is a good idea, but a LABEL is much easier to read.

Well, my Kubuntu system runs 2.6.20 and havs everything as sdX (when it
was hdX before), and my Debian system runs 2.6.18 and still has hdX,
some somewhere in-between.

Problem with labels is if the label is not set at format time, what
should the system set the label as?  Some random string?  Label is not a
required setting when you format the partition.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: UUID vs /dev

2007-04-24 Thread John L Fjellstad
Joe Hart <[EMAIL PROTECTED]> writes:

> I can understand the usage of UUID on removable drives, but it seems the
> new way of dealing with *all* disks is UUID.  Why this needs to be so
> for normal hard drives remains a mystery to me.

Name of the disks are influx in the kernel right now.  For instance, if
you have SATA disks, then depending on the kernel version, it could
either be hdX or sdX (older kernels would have them as hdX and newer
sdX).  From what I can see, even IDE disks are moving to the sdX label.  

In the transition period, if you have hdX in your /etc/fstab, your
system might become unbootable with a new kernel install.  If you have
label or UUID, then you continue as if nothing has happened.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Universities, Linux, M$, USA

2007-04-24 Thread John L Fjellstad
Michael Dominok <[EMAIL PROTECTED]> writes:

> Is this typical for US-universities?
> 3 out of the 3 (german) universities I have attended were running
> *nix-system for their students/stuff.
>
> Looks like "old Europe" is leading here?

Well, I only attended on US college, but Santa Clara U always had a UNIX
lab.  Used to be HP-UX, now it's Solaris.  Actually, the engineering lab
has three systems, Solaris, Linux and Windows.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: iptables not behaving the way I expected

2007-04-23 Thread John L Fjellstad
Jim Hyslop <[EMAIL PROTECTED]> writes:

> H... does that mean I should really set up two machines, one in a
> DMZ for my ssh services, and the other for my internal services?

If this is a homeserver, I wouldn't bother.  If it's a business, then
always separate internal and external services

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: User level alternatives?

2007-04-22 Thread John L Fjellstad
Wei Chen <[EMAIL PROTECTED]> writes:

> We now have system level `update-alternatives' mechanism that can be
> used by root to maintain symbol links in `/etc/alternatives'. Is it
> useful/interesting to extend its use to user level, i.e. to maintain
> similar symbol links in `~/bin' or something like
> `~/bin/alternatives'?  Or does that already exist? I personally think
> it can be useful, because I currently do that manually.

The way the did it at computer lab at my school, was to create a bunch
of scripts that you had to call to get the version of program you
wanted.

Say, you wanted java-1.5.  It is probably contained inside
/usr/lib/jvm/java-1.5.0-sun.  Create a script that sets the PATH to
include the bin directory.  Something like this:

JAVA_HOME=/usr/lib/jvm/java-1.5.0-sun
JDKDIR=$JAVA_HOME
PATH=$JAVA_HOME/bin:$PATH
CLASSPATH=$JAVA_HOME:`dirname $JAVA_HOME`/jdbc/classes12.zip:.
MANPATH=$MANPATH:$JDKDIR/man
export JAVA_HOME JDKDIR PATH CLASSPATH

Now, this path will before the one /usr/bin, so it will be searched
first.

You can put this script in your .bashrc.  If you have sun java 6
installed, or gcj or whatever, you could just do something similar as
long as they reside in their own directory structure.

For compilers, you could export CC and CXX and only use those variables
in your makefile, I guess.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: to allow root logins or not?

2007-04-20 Thread John L Fjellstad
Greg Folkert <[EMAIL PROTECTED]> writes:

> Not recommended, but possible:
>
> sudo su -

I think sudo -i will give the same effect

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: iptables not behaving the way I expected

2007-04-19 Thread John L Fjellstad
Jim Hyslop <[EMAIL PROTECTED]> writes:

> Hello, all
>
> I've set my SSH to accept only public key authorization, and forwarded
> port 22 from the Big Bad Internet to my Debian box. Predictably, I'm
> being hit by a lot of dictionary attempts to log in. A while back,
> someone posted a link in this list to a blog that gave an Iptables
> recipe to limit connections to 5 per minute per IP address. So, I issued
> the commands:
>
> iptables -A INPUT -i ethLRZ -p tcp --dport 22 -m state --state NEW \
> -m recent --set --name SSH
>
> iptables -A INPUT -i ethLRZ -p tcp --dport 22 -m state --state NEW \
> -m recent --update --seconds 60 --hitcount 5 --rttl --name SSH \
> -j DROP
>
> but that didn't throttle back the attempts. I tried '-i eth0' instead of
> ethLRZ, but no effect.

You want to do update before you do set.
-m recent --set will log the ip address to the list whether it is in the
list or not, so that rule will always match.
You never get to the second rule, which say that only update if the ip
address is already in the list.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: [Multi] Wireless Network Configuration

2007-04-10 Thread John L Fjellstad
Michael Pobega <[EMAIL PROTECTED]> writes:

> The problem is that I'm frequently roaming (Family matters and personal
> matters), and although I could just put multiple profiles in
> /etc/network/interfaces and comment each one out in a per-area basis, I
> would find it easier to have a program to manage my wireless network
> choosing (Scanning for networks and choosing one based on a database of
> "known" hosts, or something similar)

I use whereami.  Works great.  Only problem is, I'm not sure it works if
you use WPA

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: checking if my system is compromised

2007-04-10 Thread John L Fjellstad
Kamaraju S Kusumanchi <[EMAIL PROTECTED]> writes:

> Thanks for tip on iptables. iptables look a bit heavy for me (lot of
> reading to do). So currently I am using /etc/hosts.allow,
> /etc/hosts.deny for controlling the IPs which can ssh into this
> machine. If I find them inadequate, I will use iptables.

It's basically three lines of rules

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Etch release??

2007-04-08 Thread John L Fjellstad
Frank McCormick <[EMAIL PROTECTED]> writes:

> For those who are interested :
>
>
> http://wiki.earth.li/EtchReleaseParty
>
> It looks like next Saturday.

Got an email from the Debian announcement list saying Etch got released
today (Sunday), so congratulations to the Debian Developers.  Well,
done.  Have a beer :-)

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: checking if my system is compromised

2007-04-08 Thread John L Fjellstad
Kamaraju Kusumanchi <[EMAIL PROTECTED]> writes:

> Does anyone have suggestions on tightening up the default sshd_config
> file? I read about disabling password authentication mechanism
> completely and using only the key authorization mechanism. But this is
> too inconvenient to stick to. For example, if I go to a friend's
> machine, I would like to be able to ssh from it, without bothering
> about transferring keys back and forth. Any other suggestions are
> welcome.

I usually enable the recent module in iptables, which means that you can
only login once every 1 minute or so.  It usually give the attacker only
one try before they get shut down.

Example:
# allow established and related connection
/sbin/iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

# if a NEW or INVALID package comes in, and it is in our list within the
# last 60 seconds, drop the package
/sbin/iptables -A INPUT -m state --state NEW,INVALID -m recent --update
--seconds 60 -j DROP

# allow new connections to ssh port, add the ip address to our recent
#  list
/sbin/iptables -A INPUT -p ssh --dport ssh -m state --state NEW,INVALID
-m recent --set -j ACCEPT


The ordering of the rules are important, otherwise you might lock
yourself out.  Basically, every time a ssh connection is made, the ip
address gets added to a list.  If a connection is made from the same IP
within 60 seconds, then the connection is dropped.  Usually, attackers
will drop the connection and try again if the username/password does not
match.  This means that they only get one try.  And since the 60 seconds
timelimit is set every time someone makes a connection, they will never
get the login unless they wait 60 seconds (which they never do).  

Also, in /etc/hosts.deny, set
ALL: PARANOID

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Newbie Question - KDE-Gnome-xfce

2007-04-05 Thread John L Fjellstad
Randy Patterson <[EMAIL PROTECTED]> writes:

> As I had stated previously I installed from the
> debian-testing-i386-kde-CD-1.iso image. If I take your suggestion,
> which sounds like a good one, when I boot will I be given a choice of
> which system to start or will I have to manually close KDE and start
> one of the others?  Although compared to Windoze XP I am thrilled with
> KDE I do think I would like to take a look at the others ones.

Well, I'm not sure what kind of environment the kde testing cd will
install these days, but I presume you do have a GUI login environment
(using KDM).  There is an option in KDM that let you choose which
environment you want to use (it's called sessions, I think).

So, basically, you install all three environments.  *After* you boot-up,
you will get the familiar login screen.  Type in your name and then
choose the environment.  The system will remember what you chose last.
To change environment, just logout of your current session, and log back
in with the new environment.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: GPG and Signing

2007-04-05 Thread John L Fjellstad
"Seth Goodman" <[EMAIL PROTECTED]> writes:

> S/MIME was intended to work with a certification authority (CA) model
> based on a small number of universally trusted root CA's, while PGP
> assumed a distributed web of trust model based on personal
> relationships between individual users.  There's no technical reason a
> CA can't sign a PGP key, but this was not the intended mode of use.  I
> suggest the problem wasn't MS's inability to implement PGP (it's no
> harder than S/MIME), but more likely they couldn't see a way to make
> money from it.  Instead, they built native S/MIME support into their
> MUA's, built a certificate store into their operating system and
> bought VeriSign.

Couple of points.  There are lots of stuff MS does that don't make them
money.  Also, I don't believe they own VeriSign. 

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Newbie Question - KDE-Gnome-xfce

2007-04-05 Thread John L Fjellstad
Randy Patterson <[EMAIL PROTECTED]> writes:

> I have only had Debian up and going for about two weeks. Had Sarge
> installed but had problems with my USB hardware so just did a clean
> install of Etch.  Works great!! Since I am a new user I don't have a
> favorite windowing system that I prefer and was wondering if someone
> to point me to a good link that would describe the strengths and
> weaknesses or pros and cons of each system.  KDE installed as default
> with Sarge and Etch so I assume they chose that for a reason and it is
> the only one I have used. I have looked but haven't been able to find
> a good comparison them.

You're better off just installing all three and test them out.  I think
they are pretty feature-equivalent these days.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: GPG and Signing

2007-04-03 Thread John L Fjellstad
"John Fleming" <[EMAIL PROTECTED]> writes:

> While we're still on this, why do most of your (Debian-users-who-sign)
> emails show up in OE with the signature and the email text as
> attachments? It seems whether I use GPG or a Thawte cert, they still
> don't show up as attachments.  Are you doing something "special" to
> make them show up that way, and I assume there's something desirable
> about doing it that way -
> please tell me.  Makes it hostile to REPLY TO, at least with OE.  I
> suppose the problem is with OE, but I'd still like to understand
> what's happening. THANKS!  - John

The reason you and people who use OE see it as an attachment is
because MS is unable to implement an 11 years old standard.
This page (http://www.imc.org/smime-pgpmime.html) has a discussion about
the different standards (PGP/MIME and S/MIME) and links to the different
RFCs.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: GPL v3?

2007-04-02 Thread John L Fjellstad
Andrew Barr <[EMAIL PROTECTED]> writes:

> I'd certainly like to see the kernel go GPLv3...granted parts of the
> kernel could go anyway without Linus' explicit blessing, but after all
> the kernel is a flagship free software project...

Not if GPLv3 is incompatible with GPLv2.  Linus doesn't have much say in
the license of the kernel since the different codes are owned by the
different authors (unlike FSF software that is owned by FSF).  They
would either have to track down all the contributors or rewrite the code
for the stuff owned by people they can't track down or for people who
don't want to relicense their code.  And that was the intention of the
kernel too, which is why they removed the "..or later" text from the
standard license text.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: IMAP Mail server question

2007-03-08 Thread John L Fjellstad
Andrew Sackville-West <[EMAIL PROTECTED]> writes:

> I always find that I need a folder *after* I've fired up my MUA, so I
> just use it to make my folders. In mutt
>
> s=/

If you want maildir folder, then you should probably set
mbox_type=Maildir, otherwise I think it defaults to mbox

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: accented chars. shown as question marks in non-browser tools, sarge

2007-03-08 Thread John L Fjellstad
[EMAIL PROTECTED] (Arlie Stephens) writes:

> Etch _claimed_ to default to UTF-8 - not my preference, but any
> consistent and working setup is better than nothing - and I need to
> check whether _that_ encoding actually works. (How can I find some
> text that's definitely encoded in that format?) But what I want is the
> ability to read anything. Well, anything in any European language,
> with emphasis on french, german, and icelandic, plus a few related
> dead languages.) 

Here are examples of unicode text:
http://www.cl.cam.ac.uk/~mgk25/ucs/examples/

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: IMAP Mail server question

2007-03-07 Thread John L Fjellstad
[EMAIL PROTECTED] (Chris Bannister) writes:

> Folders are simply subdirectories inside the main maildir whose names
> start with a period, and which are themselves maildirs.  For example,
> the command "maildirmake -f Drafts mail/Maildir" creates
> mail/Maildir/.Drafts, that has the usual tmp, new and cur.  You MUST
> use the -f option, instead of specifying mail/Maildir/.Drafts
> directly, in order to correctly initialize certain enhanced maildir
> features.

I have always just created the maildirs using the command
maildirmake Maildir/.Drafts
without any problems.  Totally forgot about the -f option

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: IPTables Port Forwarding

2007-03-02 Thread John L Fjellstad
Johnno <[EMAIL PROTECTED]> writes:

> Hello
>
> Need a little bit of help here...  eth1 = Internet, eth0 = LAN, will
> this work?
>
> iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 80 -j DNAT --to
> 192.168.1.50:80
> iptables -A INPUT -p tcp -m state --state NEW --dport 80 -i eth1 -j ACCEPT
>
> Anything on port 80 to goto a internal server on ip 192.168.1.50

Been awhile since I played with forwarding.  One thing to remember
is to turn on forwarding in the kernel (/proc/sys/net/ipv4/ip_forward,
if you have ipv6, you need to do something similar).

Also, I'm not sure you need the second rule. I think it gets rerouted
before it gets to the INPUT chain if you route it in the PREROUTING
chain.  But if you do need the INPUT chain, then the rule should
probably not have the state directive (otherwise, all packages not set
to NEW, which is basically all packages after the first one, will be
dropped or whatever the policy is)

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Number of OT Posts

2007-03-02 Thread John L Fjellstad
"Dan H." <[EMAIL PROTECTED]> writes:

> Is it really dual-ported? Some months ago I posted stuff there that
> obviously nobody saw.

My understanding is things posted to the mailing list will show up in
the newsgroup, but not the other way around.  Haven't really checked in
awhile, so it might have changed.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Number of OT Posts

2007-02-26 Thread John L Fjellstad
Ron Johnson <[EMAIL PROTECTED]> writes:

> I hate gmane (or maybe just it's web interface).  d-u is dual-ported
> to news:linux.debian.user.  That's what I'd use.

People actually use gmane over the web interface?  Just subscribe to it
as you would any other newsgroup by adding news.gmane.org as a server.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Can't modeprobe ip_tables

2007-02-16 Thread John L Fjellstad
"Fabio A Mazzarino" <[EMAIL PROTECTED]> writes:

> Then I removed /lib/modules/2.4.27-2-386 and renamed
> /lib/modules/2.4.27 to /lib/modules/2.4.27-2-386
>
> This is what happened then:
>
> # modprobe ip_tables
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o:
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o: unresolved
> symbol proc_net_R2b2fe002
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o:
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o: unresolved
> symbol nf_register_sockopt_Rede1b024
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o:
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o: unresolved
> symbol remove_proc_entry_R31ed257b
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o:
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o: unresolved
> symbol nf_unregister_sockopt_Rd3e682dd
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o:
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o: unresolved
> symbol irq_stat_R57e2f77e
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o:
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o: unresolved
> symbol create_proc_entry_R648035a2
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o: insmod
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o failed
> /lib/modules/2.4.27/kernel/net/ipv4/netfilter/ip_tables.o: insmod
> ip_tables failed
>
> In other words, it didn't work.

Don't you need to do /sbin/depmod -a before you do a /sbin/modprobe?

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Debian dedicated server (provider)?

2007-02-07 Thread John L Fjellstad
Steffan Davies <[EMAIL PROTECTED]> writes:

> Does anyone know of a dedicated server provider who are capable of
> putting Debian on an up to date machine and who are cost/support
> competitive with Servermatrix? I've had a look at the Wiki list of
> known Debian-friendly hosts, but I'm very interested to hear actual
> experiences.

I haven't used them yet, but www.serverbeach.com might be an
option. They seem pricecompetitive to servermatrix.  I'm researching
this myself, so this thread is of interest to me (I've been leaning
towards serverbeach lately).

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: stable 3.1 (sarge) or testing 4.0 (etch) for a new user?

2007-01-29 Thread John L Fjellstad
"Kevin Ross" <[EMAIL PROTECTED]> writes:

> The upgrade from sarge to etch is NOT seamless.  Sarge
> installs 2.4 kernel.  2.4 support is dropped in etch,
> so you should upgrade to a 2.6 kernel, which means
> all the new userspace tools for 2.6 kernel (module-init-tools,
> udev, etc.)

I'm pretty sure Sarge had the option to install 2.6.8

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: A simple question FORK! Something that bugs me about net-installs and security

2007-01-28 Thread John L Fjellstad
Ron Johnson <[EMAIL PROTECTED]> writes:

> On 01/28/07 13:32, John L Fjellstad wrote:

>> Make sure you buy v4 or below.  v5 can't be upgraded (and doesn't run
>> Linux) 
>
> I thought that was the difference between the WRT54GL and WRT54G.

You're right. The WRT54GL is the linux version. From what I can gather
from the Linksys pages, I think the new version is the WRT54GS.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: A simple question FORK! Something that bugs me about net-installs and security

2007-01-28 Thread John L Fjellstad
Hodgins Family <[EMAIL PROTECTED]> writes:

>> The Linux geek fave is the Linksys WRT54GL, since it runs Linux and
>> can be upgraded with 3rd-party binaries.  It's a wireless access
>> port, but also has 4 RJ45 jacks and has a firewall.  US$54 at Newegg.
>
> Thanks!

Make sure you buy v4 or below.  v5 can't be upgraded (and doesn't run
Linux) 

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: top post fixer?

2007-01-26 Thread John L Fjellstad
Dave Sherohman <[EMAIL PROTECTED]> writes:

> I suspect it's because Gnome and KDE seem to think that "looks like
> Windows" is the best interface design and Windows uses black-on-white,

It does?  I'm pretty sure I've only seen white-on-black command-line
windows in Windows.  Can't ever remember seeing a black-on-white window.
OTOH, I usually see black-on-white on *nix systems (Solaris, HP-UX, now
KDE and GNOME) as the default state.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: function-hiding feature in Kate rocks...

2007-01-21 Thread John L Fjellstad
"Tshepang Lekhonkhobe" <[EMAIL PROTECTED]> writes:

> I did suspect that such legendary editors (vim, Emacs) have such a
> feature, only I never used them, and only I don't know if Emacs
> actually has such. 

Yes, it's called outline mode:
http://www.emacswiki.org/cgi-bin/wiki/OutlineMode

Not sure if someone have made a better one for programming (the one in
kate is really good).

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: top post fixer?

2007-01-21 Thread John L Fjellstad
Kevin Mark <[EMAIL PROTECTED]> writes:

> But so far, it has not changed an emails, at least as far as I can
> tell.  If anyone knows why or has a better function, let me know.

Did you try to run it on the command line, to see if it works?  I don't
really know procmail enough to see what the problem might be

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: top post fixer?

2007-01-21 Thread John L Fjellstad
Kevin Mark <[EMAIL PROTECTED]> writes:

> Thanks to all those emacs folks that pointed out this function!
> If I can only translate the gnus function to a mutt function...
> Now if only I would switch from mutt to gnus :-)

I only use gnus to access newsgroups (I'm reading all my mailing lists
through gmane).  As newsgroups reader, gnus can't be beat, and mailing
lists really works best as a 'newsgroup'.

(I use either mutt or kmail to read my email, depending on which MUA
irritates me the least last)

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: top post fixer?

2007-01-20 Thread John L Fjellstad
Kevin Mark <[EMAIL PROTECTED]> writes:

> Hi folks,
> with the continual talk of the bad etiquitte of top posts, I was
> thinking if anyone has ever developed a way to fix the problem.

The Gnus people already did that:
W Y c

or

Article -> Washing -> (Outlook) Deuglify -> Rearrange Citation

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: xorg & xfree86

2007-01-17 Thread John L Fjellstad
"Tshepang Lekhonkhobe" <[EMAIL PROTECTED]> writes:

> xfree86 changed its licence to something not very free, so what
> happened is that xorg foundation took the last remaining
> freely-licenced xfree86 code and renamed it xorg, then started working
> on that. Loads of other distros use xorg now, and I actually wonder
> who's using xfree86, for new development today.

I think even the *BSD people went to Xorg

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Eudora -> Evolution how?

2007-01-14 Thread John L Fjellstad
Andrew Sackville-West <[EMAIL PROTECTED]> writes:

> I've been wondering how to do this sort of thing as my mutt_aliases
> files are getting out of sync. in different locations. I wonder if
> mutt can use an IMAP mailbox as its aliases file...  to read docs>

Not sure about the IMAP as aliases file, but mutt can be setup to use
LDAP.  It's relatively easy to set up.
http://www.brennan.id.au/20-Shared_Address_Book_LDAP.html

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: I WILL ASSIST YOU GET YOUR FUNDS

2007-01-14 Thread John L Fjellstad
Paul Johnson <[EMAIL PROTECTED]> writes:

> Raquel wrote:
>
>> Besides, why is someone criticizing someone's use of the English
>> language on a multi-national list.
>
> Because this is an English-only list.  No other languages permitted.
> You're expected to know this before posting.
> http://www.debian.org/MailingLists/#codeofconduct

the code of conduct didn't say anything about having a perfect grasp of
English before posting, which I think was Raquel's point.

Being a multi-national list means that there might be foreign speakers
who don't master the English language as well as you.  Are you saying
that aren't allowed to post (in English, mind you)?

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Linux Drivers, The Kernel, and a Driver List

2007-01-13 Thread John L Fjellstad
Grok Mogger <[EMAIL PROTECTED]> writes:

> "The kernel comes with it's own documentation section.  Some good
> reading there."
>
> Sounds great.  Where can I find that?  =P

# aptitude install linux-doc-

where  is the version of your kernel.  The package might have
been called kernel-doc- in sarge.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Manual java alternative

2007-01-05 Thread John L Fjellstad
"Angel L. Mateo" <[EMAIL PROTECTED]> writes:

>   Instead of directly install java from sun's binary, use the
> java-package tool to create a deb from this binary, then install the deb
> file. I'm not sure, but I think this same you get the alternatives
> updated.

Last I checked, java-package hadn't been updated to create sun-java 6
deb files (couple of weeks ago).

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: using kmail with procmail

2006-12-08 Thread John L Fjellstad
Micha Feigin <[EMAIL PROTECTED]> writes:

> I couldn't find anything about this in google.
>
> I currently have a working setup I like that uses fetchmail and procmail. I
> thought of moving to kmail since it can do a few things that annoy me with
> sylpheed. Is it possible to use kmail with a local maildir folder that is
> handled be procmail and fetchmail or do I need to move everything into kmail
> (which pretty much rules it out in such a case)?

You can kinda use procmail with kmail.  Kmail store all its mail in
~/.kde/share/apps/kmail/mail 
I think you can use procmail to put mail in those folders. Never tried,
and I probably wouldn't do it (kmail seems to create some index files,
and I don't know how they will work if the index files and the actual
mails in the folder don't match).


Unfortunately, kmail won't allow you to point your maildir directory
anywhere (it insist on moving all the mail into its directory structure).

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: shell script and variable problem

2006-12-01 Thread John L Fjellstad
Ken Irving <[EMAIL PROTECTED]> writes:

> Not sure, but it'll work if you enclose the variable in quotes.

That worked perfectly. Thanks.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: VCS systems on linux

2006-12-01 Thread John L Fjellstad
"Roberto C. Sanchez" <[EMAIL PROTECTED]> writes:

> On Fri, Dec 01, 2006 at 11:45:04AM -0800, John L Fjellstad wrote:
>> 
>> Well, not exactly.  CVS only does vcs-per-file.  That is, it doesn't
>> know anything about the interrelationship between files.
>> The new generation vcs', like subversion and arch does keep track of
>> batches of dependencies.  That is, say you change file A and B (which
>> depends on each other), and check them in together, then in Subversion,
>> they have the same version number. So, if you check out by version
>> number, you will get all the files (and older) that got checked in for
>> that version. 
>> 
>> OTOH, if you are checking out a specific file, I don't know any vcs that
>> will check out all files that this specific file depend on. 
>> 
>
> Actually, subversion versions the entire repository.

But the versions of the files that doesn't get checked in during the
fileset, doesn't get change, does it?  From what i understand from the
manual.

So, I have fileA, fileB, fileC at v5. I change fileA and fileB, and
check in the set, fileA and fileB has v6 and fileC still has v5.
Now, if I check out v6, I will get fileA, fileB at v6 and fileC at v5.

Am I wrong?

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



shell script and variable problem

2006-12-01 Thread John L Fjellstad
I have the following script I use for backup:
###
#!/bin/sh

BACKUPLIST=/etc/backup.lst
HOSTNAME=`hostname`
YEAR=`date +%Y`
MONTH=`date +%B`
BACKUPDIR=/srv/misc/backup/${YEAR}/${MONTH}
DATE=`date +%Y%m%d`

mkdir -m 2775 -p $BACKUPDIR

for entry in `cat $BACKUPLIST`; do
name=`echo $entry | cut -d':' -f1`
startdir=`echo $entry | cut -d':' -f2`
bkdir=`echo $entry | cut -d':' -f3`
exlist=`echo $entry | cut -d':' -f4`
if [ -n $exlist -a -f $exlist ]; then
cd $startdir; tar -X $exlist -cf - $bkdir | bzip2 -c > 
${BACKUPDIR}/${HOSTNAME}-${name}-${DATE}.tar.bz2
else
cd $startdir; tar cf - $bkdir | bzip2 -c > 
${BACKUPDIR}/${HOSTNAME}-${name}-${DATE}.tar.bz2
fi
done
##

Now, /etc/backup.lst has a list of directories I want to backup, and
looks like this
john:/home:john:/home/john/backupex.lst
vcs:/srv:/srv/vcs:

That is, some entries have 4th field, some has not.
The problem is that my test
if [ -n $exlist -a -f $exlist ]
does not work.  For some reason, this always evaluate to true, and then
the tar command fails.  Why is this?

My understanding is -n will check if $exlist is empty or not, and if it
is, it will fail.  And even if it doesn't, -f $exlist should fail since
it wouldn't be able to find that file.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: VCS systems on linux

2006-12-01 Thread John L Fjellstad
Marc Shapiro <[EMAIL PROTECTED]> writes:

> I have never used a VCS before, but I have a question about them.  I
> just got a programming job again (after about 13 years).  I hate to
> admit, but it is on M$ using VB 6.  The company uses Source Safe,
> which has what I consider to be a really big flaw and I am hoping to
> verify that the standard vcs's in linux manage this problem better.
>
> This project contains over 50 classes, a similar number of forms, and
> dozens of non-class modules.  Obviously there are a lot of
> interconnections between all of these files.  The problem is this:
> When you check out a file the system gives you a fresh, up-to-date
> copy of the file, but tells you nothing about changes to other files
> that the file checked out file is dependant on that my have changed.
> This means there could easily be dozens of other files that have
> changes in them that you actually need to update on your system before
> you will be able to compile and run the program.  You find out about
> these only when you do try to run the program and get errors due to
> changed funtion signatures, missing functions and simply changed
> funtionality within existing funtions called from the checked out file
> but residing in other files.
>
> Please tell me that linux's vcs systems handle this better by keeping
> track of file dependancies.

Well, not exactly.  CVS only does vcs-per-file.  That is, it doesn't
know anything about the interrelationship between files.
The new generation vcs', like subversion and arch does keep track of
batches of dependencies.  That is, say you change file A and B (which
depends on each other), and check them in together, then in Subversion,
they have the same version number. So, if you check out by version
number, you will get all the files (and older) that got checked in for
that version. 

OTOH, if you are checking out a specific file, I don't know any vcs that
will check out all files that this specific file depend on. 

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: what's the killer app for GNU/Linux systems?

2006-11-30 Thread John L Fjellstad
Ron Johnson <[EMAIL PROTECTED]> writes:

> No killer *app*.  Security is killer, but that's hard to see.
>
> For me, the CLI is killer.

I'm not sure CLI could be considered a killer for GNU/Linux systems,
since the *BSD systems have no more or less powerful CLI.

I would thinkg a killer app for a system would be unique for that
system. I can't really think of an app that would be unique to GNU/Linux
(that wouldn't also work on other unix systems).  Maybe something like
FUSE? 

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: The Linux Code

2006-11-25 Thread John L Fjellstad
Baz <[EMAIL PROTECTED]> writes:

> I saw this yesterday via Google Video.  Excellent!  I had no idea
> Linus lives here in the Bay Area.  

Must be a pretty old program since Linus moved out of the Bay Area a
couple of years ago.
http://linux.slashdot.org/article.pl?sid=04/06/10/2317243

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Laptop choice?

2006-11-23 Thread John L Fjellstad
Can't give you specific advice on the laptops you showed, but I would
check http://www.linux-laptop.net/ and see if those models are there and
how much problems people have setting up their laptops.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: UDEV Question

2006-11-18 Thread John L Fjellstad
Justin Piszcz <[EMAIL PROTECTED]> writes:

> Anyone here have a Microtek SCSI scanner?
>
> In the past I've used scsiadd -s which would add the new device, this
> still works with udev but the symbolic link/permissions/etc are never
> created correctly.
>
> When I run the udev scan utility, my model does not have a specific
> name, just "Scanner" - but I have tried out / followed all the howtos
> and cannot get it to work 'automatically' - instead I have to ln -s
> /dev/ /dev/scanner && chmod 666 /dev/device manually.
>
> Anyone else have issues getting udev to support their scanner when they 
> 'hot-add' it with scsiadd -s?

I don't have a scanner, but if you give me the output of the following
command: 

udevinfo -a -p `udevinfo -q path -n /dev/`

I might be able to help you write the rule to create the link to the
node 

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Reporting brute force ssh login attempts

2006-11-18 Thread John L Fjellstad
Douglas Tutty <[EMAIL PROTECTED]> writes:

> Is there a way to configure the firewall to only allow or deny connection
> attempts from certain ip addresses?

I set my firewall to only allow one connection pr minute pr ip address.
So, if you fail the connection, the firewall will drop all connection
from that ip address until there has been at least one minute since last
attempt.  Works great.

Take a look at the recent module in iptables (iptables -m recent --help)

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: brute force ssh login attempts and how to Disrupt them

2006-11-16 Thread John L Fjellstad
In Linux, you can use iptables with the recent module.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: emacs without documentation nonsense

2006-11-16 Thread John L Fjellstad
"Roberto C. Sanchez" <[EMAIL PROTECTED]> writes:

> Why duck?  Everyone knows that the only component missing from emacs is
> generally a good text editor. :-)

And what's wrong with viper? :-)

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: C++ exception handling question [solved]

2006-11-13 Thread John L Fjellstad
Paul E Condon <[EMAIL PROTECTED]> writes:

> This is really interesting. man malloc calls the default behavior
> of the kernel a really bad bug, with which I agree. kernel-docs
> sysctl/vm.txt justifies the default by claiming it is helpful to
> programmers who 'malloc() huge amounts of memory "just-in-case" and
> don't use much of it.' I had thought such programmers were rare in the
> Linux world, as they are all happily writing garbage code for
> BillG. But, oh well. Now I know how to make my code work under Linux. 

If you expect your program to run on FreeBSD, then you might want to know
that it does the same (at least according to this guy):
http://www.baus.net/memory-management
(I don't know for sure, since I don't use FreeBSD personally).
And according to this article, these aren't the only OSes that have this
feature:
http://developers.sun.com/solaris/articles/subprocess/subprocess.html

Also, when you have time, you really should read about on google. There
are some interesting discussion for and against the memory overcommit
feature/bug. 

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: C++ exception handling question

2006-11-12 Thread John L Fjellstad
Paul E Condon <[EMAIL PROTECTED]> writes:

> Thanks for stack profiling info. I wonder if this _is_ a reportable
> bug. After all, there is a lot of information on the 'bad_alloc'
> exception in various sources. If GNU C++ library doesn't try to throw
> this exception until it is too late for the throw to succeed, what
> good is it? And, how was its operation verified during testing on a
> Debain box? At the point where it kill happens, I think the program is
> allocating space for the contents of large STL vector of vectors.  It
> doesn't seem to me that this should be done on the stack, but I
> haven't thought deeply on the issue.

One thing you might not be aware of is that Linux overcommit the
memory.  That is, even if there is no memory left, it might tell the
program that it has enough, since it expect that by the time you use the
memory, it will be available. It's controlled by
/proc/sys/vm/overcommit_memory. 

Check the man page for malloc (look under BUGS), and do some search in
your favorite search engine.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: What's your favourite FLOSS?

2006-10-29 Thread John L Fjellstad
"Tshepang Lekhonkhobe" <[EMAIL PROTECTED]> writes:

audio editor [ ]
audio player [ amarok ]
cd-ripper [ abcde ]
Desktop Environment [ KDE ]
DBMS [ ]
development [ C++, Java, emacs, gmake, ant ]
disc burner [ K3b ]
e-mail client [ mutt, kmail ]
file manager [ konqueror, shell ]
finance [ ]
ftp [ ncftp ]
image editor [ gimp ]
image viewer [ digiKam ]
instant messenger [ kopete ]
mathematics [ ]
misc utilities [ sudo, grep, bash, awk, sed, vim, gnus ]
p2p [ ]
package manager [ aptitude ]
pdf-reader [ kpdf ]
spreadsheet [ OpenOffice.org Calc ]
tag editor [ id3v2, metaflac ]
terminal emulator [ konsole ]
text editor [ emacs ]
3D animation [ ]
video player [ kmplayer ]
web browser [ firefox, konqueror ]
word-processor [ OpenOffice.org write ]
(unreleased) [  ]
(great honours) [ GCC, emacs, KDE  ]

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Why I left Debian

2006-10-29 Thread John L Fjellstad
Bruno <[EMAIL PROTECTED]> writes:

> Indeed I just grab a Ubuntu DVD (labelled 'Dapper-drake 6.06 LTS'
> which looks very recent).  Ubuntu is based and so I'll probably try it
> as a replacement of etch.

Ubuntu Edgy Edge got releases on the 26th.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Starting iptables

2006-10-22 Thread John L Fjellstad
John Hasler <[EMAIL PROTECTED]> writes:

> John L. Fjellstad writes:
>> shorewall creates pages of iptables rules and that is considered a good
>> thing?
>
> You'd rather write them all by hand?

You think creating "pages" of rules is Keeping It Simple?

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Starting iptables

2006-10-22 Thread John L Fjellstad
[EMAIL PROTECTED] writes:

> On Thu, Oct 19, 2006 at 05:22:24PM -0700, John L Fjellstad wrote:
>> [EMAIL PROTECTED] writes:
>> 
>> > If you look at the number of lines of rules you make, and compare it
>> > to the number of lines (pages!) of iptables rules it makes, you see
>> > that shorewall is easier.  Also the syntax is easier.  Changes are
>> > far easier.  Besides, the shorewall book is the best book I've found
>> > for understanding iptables.  
>> 
>> shorewall creates pages of iptables rules and that is considered a
>> good thing? What happened to KISS?
>> 
> Yes it is a good thing.  The purpose of a firewall is to block anything
> that you don't explicitly want through.  If you don't want anything
> don't put any 'allow' stuff.  Then the default rules of deny all is in
> effect.  The issue is that there are different protocols for the same
> service (e.g. UDP, UTP, etc).  Each little pinprick you want opened
> takes a few rules to keep it to a specific pinprick.  If you did it
> manually with fewer rules you would have a more porus firewall or you
> wouldn't have the services you want traversing the firewall.  If you
> used too few rules you would have a screen door.

Bull.  How does few rules create a screen door as opposed to "pages" of
rules?  How many services do you have that you need "pages" of rules?
How does each pinprick you open not create another entry point?  How
does fewer "pinprick" opened create less security, while more "pinpricks"
create more security?  How is this keeping it simple?

> For comparision, go to tldp and get the securing-linux manual (redhat
> edition).  Its in pdf format.  That author took the same approach you
> suggest and does everything except the base install by hand.  Read the
> section on firewall.  See the pages of rules he has in his firewall
> script.  He explains it all too.

I couldn't find the article you were talking about, but I did find a
Securing-Optimizing-Linux-The-Ultimate-Solution-v2.0.  And the number of
rules are insane.  Why would you have an explicit DROP rule when you
have a DROP policy?  Where is the logging? (Yes, he has a comment about
how he logs selected denied packages, but no logging actually occur) Of
course, if you want to be the "ultimate-solution", why would you want to
keep it simple?

Sigh...

> The only ways I know of to KISS a firewall are ipmasq and shorewall.
> Shorewall makes a better firewall so it makes more rules.

KISS.  Keep It Simple.  As in as few rules as possible.
What do you need?

Take a home user. What does he need?

Well, he needs to open the loopback. Rule 1.
He wants any packages that he started to be let through (RELATED,
ESTABLISHED). Rule 2.
Maybe he wants to use p2p. That's a range. If you use bittorrent, you
might have to open an additional port for the control package. That's 4 rules.
End it with a LOG rule with rate limit.

That's _five rules_.  Use DROP as a policy.  How is this _less_ secure than
having "pages" of rules?  How is having _fewer_ rules create more
insecurity? 

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Starting iptables

2006-10-19 Thread John L Fjellstad
[EMAIL PROTECTED] writes:

> If you look at the number of lines of rules you make, and compare it to
> the number of lines (pages!) of iptables rules it makes, you see that
> shorewall is easier.  Also the syntax is easier.  Changes are far
> easier.  Besides, the shorewall book is the best book I've found for
> understanding iptables.  

shorewall creates pages of iptables rules and that is considered a good
thing? What happened to KISS?

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: regex for top-posting?

2006-07-08 Thread John L Fjellstad
"Eric d'Alibut" <[EMAIL PROTECTED]> writes:

> Does anyone have a regex for top-posted list messages?
>
> Or some other Mailman hack that can be used to weed out these
> undesirables?

In Gnus, W Y c

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: What does it mean 'LANG=C'

2006-06-27 Thread John L Fjellstad
"Mumia W." <[EMAIL PROTECTED]> writes:

> What I need is an X keyboard configuration tutorial. The
> Keyboard-and-Console-HOWTO is long in the tooth and only glances over
> X.

I used this site:
http://www.jw-stumpel.nl/stestu.html

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: How to use sudo not root

2006-06-27 Thread John L Fjellstad
"Felix C. Stegerman" <[EMAIL PROTECTED]> writes:

>> Historically in UNIX the group wheel has GID 0, in Debian that's the
>> root group.
>
> Do you know where the name `wheel' comes from?

Wikipedia is your friend:
http://en.wikipedia.org/wiki/Wheel_war

The reason GNU doesn't support wheel group:
http://www.gnu.org/software/coreutils/manual/html_node/coreutils_149.html#SEC150

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: What does it mean 'LANG=C'

2006-06-26 Thread John L Fjellstad
Ron Johnson <[EMAIL PROTECTED]> writes:

> When US keyboards have the Euro symbol on it, then it will have
> happened.
>
> P.S. - How do you enter a Euro symbol from a US kbd into Tbird?

Set up the compose key (I have it set up as the Left Alt key)
Then
compose c =

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: wlan in different environments -- one time with static network address, one time with dhcp

2006-06-20 Thread John L Fjellstad
Johannes Zellner <[EMAIL PROTECTED]> writes:

> Hello,
>
> how do I configure my network (w/o reediting /etc/network/interfaces
> all the time) to work in different network environments:
>
>   environment 1: static IP, static host name
>   environment 2: dynamic IP over dhcp
> ?

Install whereami

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: setting firefox as default kde webbrowser

2006-06-17 Thread John L Fjellstad
Andreas Berglund <[EMAIL PROTECTED]> writes:

> In the controlcenter I went to KDE Components/Component Chooser and I
> set Web browser to /usr/bin/mozilla-firefox.

Check what the /usr/bin/x-www-browser is set to.
You can change it using update-alternatives

To check which browser has priority, type
sudo update-alternatives --display x-www-browser

Do a man on update-alternatives

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: network: how to name interfaces ?

2006-06-16 Thread John L Fjellstad
Michael Biebl <[EMAIL PROTECTED]> writes:

> Yep, thats probably the even better way than using ifrename.
> Open /etc/udev/rules.d/z25_persistent-net.rules and edit it to your
> liking. You should at least have version 0.090-2 of udev though.

I think it's better if you create your own rules, sinze the
z25_persisten-net.rules might be changed in the next upgrade. Better to
create a custom-net.rules file and do your changes there.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: FIFA video clips in mozilla firefox

2006-06-15 Thread John L Fjellstad
Patrick Rittich <[EMAIL PROTECTED]> writes:

> I have the w32codecs installed, don't know if the site requires them.
>
> Also, how long do you give the site to show the video? I had to wait
> over 2 minutes before anything displayed. Mplayer just send
> "connecting to site:" for a long time.

Well, during the game, the servers might be overloaded.  Try again
later.

Here, the video starts probably within 30 sec (the times I tried).

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: FIFA video clips in mozilla firefox

2006-06-15 Thread John L Fjellstad
Liam O'Toole <[EMAIL PROTECTED]> writes:

> Perhaps they require w32codecs from the Marillat repository. Could
> Patrick and John (Fjellstad) confirm?

Well, looking at the URL, it looks like a WMV file, so probably

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: FIFA video clips in mozilla firefox

2006-06-15 Thread John L Fjellstad
"H.S." <[EMAIL PROTECTED]> writes:

> Hello,
>
> Has anybody been successful in playing FIFA video clips
> (http://fifa.yahoo.com) in Firefox? I couldn't, neither in Firefox on
> Windows XP nor on Linux.
>
> Only IE played the clips in XP. This really sucks.

Works here.  Firefox and Mozilla (plugin)

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: network: how to name interfaces ?

2006-06-12 Thread John L Fjellstad
Bruno Costacurta <[EMAIL PROTECTED]> writes:

> how to name network interfaces ?  My unique wireless card contines to
> receive changing interface names like eth1 or eth2 ..etc.. : how to
> fix it ?

If you are using udev, you can also use the rules to redefine the name

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Samba Management

2006-06-11 Thread John L Fjellstad
"Michele Della Marina" <[EMAIL PROTECTED]> writes:

> I've read the list of GUI tools for samba administration on samba.org.
> For experience, what is preferable for 'simple' users? ...
> I mean ... these users have sometimes to manage shares,permission files ...
> Hard configurations, administration are assigned to a system admin.
>
> What about SWAT?

I like swat alot.  Very easy to use.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: How does inetd work?

2006-05-25 Thread John L Fjellstad
Dirk <[EMAIL PROTECTED]> writes:

> I know inetd forwards a programms (servers) stdout to the client... but
> where does it forward the requests from a client to? It's not stdin..
>
>
> It there any simple example server available that was written to work
> with inetd?

There is Stephens' UNIX Network Prgramming, vol 1, 2nd edition.

To summarize:
inetd listen to some given port (given by /etc/inetd.conf).
When a connection happens, inetd forks the server. The child process
closes all the file descriptos except for the new socket connection. It
call dup2() three times, duplicating 0, 1, 2 (stdin, stout,
stderr). Closes the socket.  Child exec() the server.  The server
therefore uses stdin, stdout, and stderr to communicate with the other
side. 
At the parent, the parent (inetd) closes the socket.

I think proftpd can work with inetd.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: For the love of...

2006-05-21 Thread John L Fjellstad
Andrew Sackville-West <[EMAIL PROTECTED]> writes:

> alias xorgcfg=vim
>
> should do the trick for you :)
>
> of course on my box, I also have
>
> alias vim=emacs

Do you also have
alias ed=vim ? 
:)

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Alsa breaks after kernel upgrade

2006-05-11 Thread John L Fjellstad
Chris Abajian <[EMAIL PROTECTED]> writes:

> Sound used to work fine.  Running Sarge distro kernel 2.6.8-2-386,
> Alsa was happy.  Life was good.  Sndstat said:


>
> Upgraded to new kernel, 2.6.14.7, built from source starting with
> old .config.  Everything looked good...

Are you using udev?  If you are, did you upgrade your udev?

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Posix and SysV message queues

2006-05-10 Thread John L Fjellstad
Magnus Therning <[EMAIL PROTECTED]> writes:

> Are you using Sarge?

Actually, I'm on Kubuntu Dapper. I just checked my Sarge installation,
and the manpage is not there either, so I'm guessing it's a recent
addition.

> I'm on Sid, and the manpage lives in the package manpages (which
> manpages-posix recommends you install :-).

Well, google showed me the actual manpage (once I knew the name), and 
it's exactly what I was looking for.  Thanks alot.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Posix and SysV message queues

2006-05-09 Thread John L Fjellstad
Magnus Therning <[EMAIL PROTECTED]> writes:

> Have you read the relevant manpage (mq_overview)?
> You can't get the information you're interested in from the virtual
> filesystem, /dev/mqueue?

Doing a man on mq_overview tells me there is no such man page.  man on
mqueue.h and mq_open doesn't mention a mq_overview man page.
There is no /dev/mqueue on my filesystem (using udev).

I have the posix man pages installed (both manpages-posix and
manpages-posix-dev), so I think I should have everything installed (in
regards to man pages)

I appreciate the help.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Posix and SysV message queues

2006-05-09 Thread John L Fjellstad
I'm trying to write a program using posix and sysV message queues. For
sysV, there is a utility, ipcs and icprm that lets me inspect and remove
messages from the queue.  Anyone know if there is a similar utility for
posix msg queues?

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: upgrade glibc on Sarge

2006-05-07 Thread John L Fjellstad
Hans du Plooy <[EMAIL PROTECTED]> writes:

> I'm trying to install amavisd-new 2.4 on Sarge, using the testing
> repositry.  It wants to upgrade a few packages, most notably perl and
> glibc.  How safe is this?  I know there's always risk, but is there a
> reasonable chance that this will not break anything (I'm only running
> apache, mysql, postfix and courier on the box.

I'm not so sure that safe (not sure the differences are between the
glibc in Sarge and Etch).  You might be better off using the backports,
www.backports.org, which are newer packages compiled for stable.

-- 
John L. Fjellstad
web: http://www.fjellstad.org/  Quis custodiet ipsos custodes


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



  1   2   3   4   5   6   >