Re: dselect ftp hamm

1997-07-04 Thread Pavel Galynin
hello,

Igor Grobman wrote:
> 
> > I have had no problems using dselect ftp to install files from all
> > directories but hamm.  I answer the ftp prompts in an obvious fashion
> > and voila everything works OK.
> >
> > What do I do to install files from /debian/hamm/hamm
> > /debian/hamm/contrib and /debian/hamm/non-free?  That is, how do I
> > answer the ftp prompts from dselect so that I can install the files from
> > the above directories?  I've tried various answers to the prompts with
> > no success.  It's driving me bananas.  Another of life's little
> > mysteries.
> >
> 
> Below is the patch you need to apply to 

are all install problems patched in 1.3.1?

paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: off topic: password strategy as an ISP

1997-07-04 Thread Pavel Galynin
hello,

Nils Rennebarth wrote:
> 
> -BEGIN PGP SIGNED MESSAGE-
> 
> On Thu, 3 Jul 1997, Pavel Galynin wrote:
> >> attempts to telnet from the one source, but as we've disabled shell
> >> access for dial-in clients it'll just give them motd if they do get in
> >> that way!
> >
> >i'm not at all knowledgeable in linux, but chsh changes a default shell
> >of the user in /etc/passwd. (at least on sunOS)
> Yes, but how do you run it without getting a shell login in the first
> place?

some admins suid cgi scripts, like phf, php, jj and glimpse (the latest
victim). all those buffer overflows in suid shell scripts, uid:0
daemons, etc. enough? ;))

paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: off topic: password strategy as an ISP

1997-07-04 Thread Pavel Galynin
hello,

John Foster wrote:
> 
> We use the following strategy:
> 
> 1) Generate a list of passwords with pwgen

could you describe this utility?

> 2) On a SP2 supercomputer, try to crack them (after feeding them
> through crypt).

do you use a wordlist and if so, how big?

> 3) Those who can't be cracked go into a safe, to be allocated when
> users sign up.

then, you depend upon a wordlist. if you tested passwords on a small
one, crackers may get lucky on one of those 11 mb ones on the coast
security archives. as far as i know, all passwords can be cracked using
brute force. (at least i had a 100% success)

> The company I work for was very badly hacked (rm -fR *), which is how
> I got my job (as a repairman!). They are now somewhat paranoid!

then they must have been really insecure. only very lame people would
ever do that.

> Just as a Debian is cool story:
> 
> When they lost all their servers they were running Slacware 2
> (shudders!). I refused to rebuild the system with Slackware so they
> said, "OK, use Redhat". I installed Redhat (2 I think) and managed to
> crack it within a week.

Redhat - the breakin paradise. last week, the whole #hack channel sat on
#linux, noted down the ip addies of people who installed it and rooted
them. ever saw an inetd.conf on a fresh install of redhat 4.2? just one
unpatched version of imapd is sufficient ;)

> So I put Debian 1.2.4 on (I'd been using Debian in a research
> environment for some time), and since then I've seen a few attempts in
> the logs, but as far as I know no-one has got in who shouldn't!

it doesn't mean they haven't ;))

> I'm not so naive as to believe that Debian is 100% secure (that's
> impossible I reckon), but it seems to cope OK for a smallish ISP. I
> find some interesting things in the logs, like 500 consecutive
> attempts to telnet from the one source, but as we've disabled shell
> access for dial-in clients it'll just give them motd if they do get in
> that way!

i'm not at all knowledgeable in linux, but chsh changes a default shell
of the user in /etc/passwd. (at least on sunOS)

> On the subject of pwgen though, there is a definate pattern to the
> passwords it generates. This does concern me a bit.

yep, that would certainly make it more susceptible to lame newbie
attacks.

paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: Anyone available that I can call???

1997-07-02 Thread Pavel Galynin
hello,

[EMAIL PROTECTED] wrote:
> 
> Is there anyone out there that I could call concerning my problem
> installing debian 1.3.

i'm in europe, and you probably don't want to make an international
call. neither would i be of much assistance here.

> slakware is looking real nice right about now
> This email originated from ourtownusa.com.

as to this, i understand your frustration. slackware is not an
alternative unless you're an experienced user. debian told you it
wouldnt ork, while slackware would install everything and let you find
out yourself. redhat is a little better, but its rpm is buggy and
dependencies and conflicts act really weird. so, stick with good ole'
debian, as soon as i install my system, ill be able to help others ;))

paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: Idea for deity. (dselect) Security hole alert system.

1997-07-02 Thread Pavel Galynin
hello,

Dave Cinege wrote:
> 
> On Tue, 01 Jul 1997 23:07:37 -0400 (EDT), Alex Yukhimets wrote:
> 
> >> No I'm not willing to work on it, and no I have not thought out the > fine
> >> details, but I think it would be very useful and give Debian another
> >> sticking point as the 'De Facto Linux ISP Distribution'. Chew on it and
> >> see how it tastes
> >
> >I'd prefer to chew on 'De facto Linux Distribution for Developers',
> >but I don't think either slogan would be accepted though.
> 
> I didn't mean to imply Debian is geared toward ISPs, but that it is the best
> Distribution available for ISPs. (And my recommended feature would only
> strengthen that point)

well, nobody really installs slackware now, they only stick to it.
redhat is out because of the mess it makes in inetd.conf, namely leaving
a huge security hole in all the services it enables. so, i guess, debian
is the choice. those new posix compliant distros can come into play tho.

paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: Debian Ftp Install, PPP problems

1997-06-01 Thread Pavel Galynin
hello,

Dustin Withers wrote:
> 
> I've been using Linux for sometime now and have had the internet working
> under Slackware I then switched over to debian and was goin' to do the FTP
> install, I've got all the networking stuff configured correctly but when I
> run pon it dials out and logs me in and then hangs up after a couple of
> moments, I know it logs me because I trailed /var/adm/messages and it says
> it does everything but then when it send the connection to pppd, pppd
> returns a message saying LCP Hang-Up caused by peer or something > similair

LCP is Link Control Protocol - it negotiates ip addresses and such in
ppp dialups. i thought this might help. maybe you should add a debug to
ppp.options_out and see what it says? try abd logg the ppp datastream,
it could help.

paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: Debian FTP Installation through Internet (fwd)

1997-06-01 Thread Pavel Galynin
hello,

Boris D. Beletsky wrote:
> 
> Can somebody help this guy. Problem is that pppd tells him that
> kernel lacks PPP support - I told him that he should recompile the
> kernel but seems like it didn't work. I think I remember that there
> was some other reason that pppd would act that way.

when he installs drivers, he should install ppp. 
sorry if this doesn't help.

paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: ftp install problem

1997-05-23 Thread Pavel Galynin
hello

Dale Scheetz wrote:
> 
> On Thu, 22 May 1997, Pavel Galynin wrote:
> 
> > hello world,
> >
> > i am currently trying to install debian linux. i edited ppp.chatscript
> > and ppp.options_out after rtfming for some time, but it still doesn't
> > work. i go into dselect, try to connect to ftp.debian.org and it gives
> > me a bad name error. i figured that i probably need to connect to my
> > server first, so i use pppd to do that, but it just spits a bunch of
> > junk at me. help! i will supply any configuration/config info required
> > to fix this.
> >
> The junk it spit at you would be much more helpful at the moment ;-)

Well, it was just a series of odd ascii characters.

> 
> I understand your frustration with having something that doesn't work, but
> before anyone can help you some critical information is required. Stuff
> like hardware configuration is always useful in these cases. Where your
> modem resides...things like that. Then the most important piece of
> information is a clear description of just what happened, including the
> error messages presented by the offending software. With this as a
> starting point there begins to be a glimmer of hope that we will figure
> out what the problem is.

Pentium 200 Mhz, 2 x 3.1 GB WD hdds, 32 mb ram, 33.6 modem on com2.
I edited the ppp files (i can send em if you need em) and tried to ftp
with dselect without doing anything to connect to my isp, assming that
dselect would spawn pppd and make it call. it didn't do this and instead
said that it couldn't connect to ftp.debian.org (of course it couldn't,
it wasn't connected!). then i tried to run pppd specifying /dev/modem
and 115200 as speed because that's what i used in telix for dos (4 times
baud rate of modem). it spit a lot of REAL junk out, or some language i
don't understand, but i know of no language that has [EMAIL PROTECTED]&%^$ in 
it. I
tried couple more times - to no avail. At this point i rebooted and sent
a message to the list. 

paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


ftp install problem

1997-05-23 Thread Pavel Galynin
hello world,

i am currently trying to install debian linux. i edited ppp.chatscript
and ppp.options_out after rtfming for some time, but it still doesn't
work. i go into dselect, try to connect to ftp.debian.org and it gives
me a bad name error. i figured that i probably need to connect to my
server first, so i use pppd to do that, but it just spits a bunch of
junk at me. help! i will supply any configuration/config info required
to fix this.

tia
paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: INSTALL:dual-boot

1997-04-28 Thread Pavel Galynin
Hello,

Dima wrote:
> >I know this is the safest way, but my ESSENCE of an ASM programmer > >can't
> >bear anything that's not perfectly elegant.
> 
> How does running Win95 feel then?:)

Bad.. But Gates is sooo cute :), haven't seen Murdock though :))

Paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


[Fwd: [INSTALL]:novice questions]

1997-04-27 Thread Pavel Galynin
Pavel Galynin wrote:
> 
> Hello,
> 
> It is a widspread misconception, that Jason Ish wrote:
> 
> > I don't know about they keyboard, but the best way for you to install
> > would be to set up your PPP connection to your isp and with dselect
> > choose to install by ftp and once the files start downloading go do
> > something for a while.  All you need to connect via ftp is included on
> > the base install disks by editing the scripts /etc/ppp.chatscript,
> > /etc/ppp.options_out and maybe /usr/pon.
> > Ask me for info on setting up the ppp if you haven't already done so -
> > did you select PPP in the driver selection during install?
> 
> I reinstalled and included the ppp driver this time (as well as serial),
> but I have no idea what to do with these scripts. I'd rather have
> someone help me than mess everything up and have to reinstall.
> 
> > I have a Mitsumi CD to.  But I didn't install any drivers for it and > it
> > worked (it is an ide drive tho).
> 
> I just thought that if they include the Mitsumi CD driver, and I have a
> Mitsumi CD-drive, I'm supposed to use that driver. Anyways, I installed
> cdrom.c (often used routines).
> 
> Any help with ppp scripts would be welcome,
> 
> tia,
> Paul--- Begin Message ---
Hello,

It is a widspread misconception, that Jason Ish wrote:

> I don't know about they keyboard, but the best way for you to install
> would be to set up your PPP connection to your isp and with dselect
> choose to install by ftp and once the files start downloading go do
> something for a while.  All you need to connect via ftp is included on
> the base install disks by editing the scripts /etc/ppp.chatscript,
> /etc/ppp.options_out and maybe /usr/pon.
> Ask me for info on setting up the ppp if you haven't already done so -
> did you select PPP in the driver selection during install?

I reinstalled and included the ppp driver this time (as well as serial),
but I have no idea what to do with these scripts. I'd rather have
someone help me than mess everything up and have to reinstall.

> I have a Mitsumi CD to.  But I didn't install any drivers for it and > it
> worked (it is an ide drive tho).

I just thought that if they include the Mitsumi CD driver, and I have a
Mitsumi CD-drive, I'm supposed to use that driver. Anyways, I installed
cdrom.c (often used routines).

Any help with ppp scripts would be welcome,

tia,
Paul--- End Message ---


Re: INSTALL:dual-boot

1997-04-27 Thread Pavel Galynin
Hello,

Jason Ish wrote:
> 
> When you are installing Debian just make sure all your Linux partitions
> are on hdb(whatever) then make a boot floppy, but don't try to make it
> boot from the hard disk until you know more about Lilo.  I've using
> Linux/Win95 for months now like this, if I want Linux to load I just throw
> the boot floppy in and reboot.  I also do this cuase I'm scared of messing
> up the MBR for Win95

I know this is the safest way, but my ESSENCE of an ASM programmer can't
bear anything that's not perfectly elegant.

Paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


[INSTALL]:novice questions

1997-04-27 Thread Pavel Galynin
Hello,

I am now a proud owner of a Debian Linux box! I just finished installing
the base system, everything went almost flawlessly, cool. Now I have a
copule of novice/lame, whatever you like, questions:

1. For some reason, my up/down left/right keys produce weird output to
the screen. Why? I have US keyboard, everything SHOULD be fine.
2. I need to install all the other stuff, what is the best way to do
that? I have a ppp 33.6 connection. I am probably going to install a lot
of stuff.
3. When I tried to install drivers for my CD-ROM (mitsumi), the install
didn't see my cd-rom, what can I do about it?
4. I have a bunch of other peripherals, where do I get drivers for
those?
5. Could you give me some pointers to info about building a kernel with
custom drivers, lilo config etc., all the novice questions, so that I
could RTFM and not bother people on the list with stupid questions.

TIA,
Pavel


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Double messages?

1997-04-26 Thread Pavel Galynin
Am I the only one getting double messages?

Paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: INSTALL:dual-boot

1997-04-26 Thread Pavel Galynin
Hello,

Well, I looked at it already, but it caused my question:

How to dual-boot reliably?

Paul


Bob Nielsen wrote:
> 
> Get the LILO+Win95 mini-HOWTO.
>


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: INSTALL:dual-boot

1997-04-26 Thread Pavel Galynin
Hello,

Rick Jones wrote:
> 
> Dual boot is ok. I think just about all of us use it.

So, do I use lilo, or are there any special tricks? 
And, before you ask, NO, I'm not just another lamer. If i had an ASM
source to Win95, I would know how to do it. But I have no idea where
win95 puts its loader. If it's MBR, then I'm in a lot of troulble.

TIA,

Pavel

> 
> On Fri, 25 Apr 1997, Pavel Galynin wrote:
> 
> > Hello,
> >
> > I'm about to install Debian on my Pentium 200Mhz, 32MB RAM, 2*3.1 GB IDE
> > western Digital HDDs.
> > I have to use Win95 to do work for school (everything is submitted on
> > floppies in Word for Win 6.0 format, and presentations in Powerpoint).
> > The ? is: is it safe to dual-boot? I am going to install Debian on hdb.
> >
> > Also, has anybody had any experience with using: Supra Express 33.6
> >SBlaster AWE 64
> >HP Deskjet 690C?
> >
> > Paul
> >
> >
> > --
> > TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
> > [EMAIL PROTECTED] .
> > Trouble?  e-mail to [EMAIL PROTECTED] .
> >
> >
> 
> --Rick
> 
> [EMAIL PROTECTED]


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


INSTALL:dual-boot

1997-04-26 Thread Pavel Galynin
Hello, 

I'm about to install Debian on my Pentium 200Mhz, 32MB RAM, 2*3.1 GB IDE
western Digital HDDs. 
I have to use Win95 to do work for school (everything is submitted on
floppies in Word for Win 6.0 format, and presentations in Powerpoint).
The ? is: is it safe to dual-boot? I am going to install Debian on hdb.

Also, has anybody had any experience with using: Supra Express 33.6
 SBlaster AWE 64
 HP Deskjet 690C?

Paul


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .