[expert] Install Problem

2000-05-20 Thread Eric L. Brine

I have been trying to install Mandrake 7.0, but it aborts in the second
stage.

A search of the list came up with the alternate screens accessed with
Ctrl-Alt-F3 and -F4, but the information they show doesn't mean much to
me.

The Ctrl-Alt-F3 screen ends with:
* method selection completed
* state saved to /tmp
* symlink /tmp/stage2 failed
* second stage running
* extra log messages enabled
* running: insmod serial
* warning: insmod serial failed at /usr/bin/perl-install/modules.pm line
358
* probing /dev/ttyS0 find class:
* probing /dev/ttyS1 find class:

Any ideas if that failed symlink is the problem, and why it would occur?
ELB

--
Eric L. Brine  |  Chicken: The egg's way of making more eggs.
[EMAIL PROTECTED]  |  Do you always hit the nail on the thumb?
ICQ# 4629314   |  An optimist thinks thorn bushes have roses.




Re: [expert] I've been hacked!

2000-04-24 Thread Eric L. Brine

> But now I do have to ask... why
> does ping need to be suid root? and why do some of the other files he
> listed have to be suid as well??

>From a Solaris box (I don't have linux installed):
  {2} q2ir@jupiter [~]> ls -l `which ping`
  -r-sr-xr-x   1 root bin20404 Oct  6  1998 /usr/sbin/ping*
 ^

ping and tracert send out ICMP (raw IP) packets. It's my hypothesis that
root permissions are need to send or receive those.

As for su and mount, root permissions are needed under some or all
circumstances. The only way to do that is to run the application as root
(and switch the effective UID to the user if the extra permissions are not
needed).

ELB

--
Eric L. Brine  |  Chicken: The egg's way of making more eggs.
[EMAIL PROTECTED]  |  Do you always hit the nail on the thumb?
ICQ# 4629314   |  An optimist thinks thorn bushes have roses.



Re: [expert] setiathome

2000-04-18 Thread Eric L. Brine

> One quick one. I am running 3 setiathomes at the same time is this 
> normal

On the same machine? As  Iunderstand it, it uses all idle CPU processes,
so more than one per machine is useless. right?

ELB

--
Eric L. Brine  |  Chicken: The egg's way of making more eggs.
[EMAIL PROTECTED]  |  Do you always hit the nail on the thumb?
ICQ# 4629314   |  An optimist thinks thorn bushes have roses.



Re: [expert] Re: The right way to do a private network

2000-04-17 Thread Eric L. Brine


> One comment here. You should be using an "experimental" network per RFC
> 1597, not just any old network. There is a legal Class A network, one or
> more legal Class B networks, and there are several legal Class C
> networks. I don't recall offhand the legal class A network, but I don't
> think it is 90.0.0.0. One of the legal class C networks is 192.168.1.0,
> which is what I use.

I don't know for what reasons, but 90.0.0.x is guaranteed not to be
routed, so it's not "just any old network". At least, that's what some old
tool told me, and it happened to be the one to which I was introduced
before 192.168.1.*.

Like I said in my original post: "I don't remember what is usually used",
meaning that it's not the one usually recommended. So everyone, use
192.168.1.*, not 90.0.0.* to be on the safe side!

> Eric: I'm not trying to publicly toast you, I just want to make it clear
> for other folks' benefit.

I eavesdrop here to learn about linux 'cause I don't know much about it. I
definitely don't know everything. Criticism always welcome.

--
Eric L. Brine  |  Chicken: The egg's way of making more eggs.
[EMAIL PROTECTED]  |  Do you always hit the nail on the thumb?
ICQ# 4629314   |  An optimist thinks thorn bushes have roses.



[expert] Re: The right way to do a private network

2000-04-16 Thread Eric L. Brine


> Thank you as well from me..I just joined the list two days a go and 
> missed some of the postings.  I just bought the hub last week, got the 
> linux machine working, and had no idea of the implications.

Check the archives of the list, available on the mandrake site where you
subscribed to the list.

Assuming your ISP is providing you with only a single IP address, you want
something along these lines:

++
| Comp B |---\+---+
++\---| H |  ++ +---+
  | u |--| Comp A |-| Modem |
++/---| b |  ++ +---+
| Comp C |---/+---+
++ 

Comp A is your Linux box. The network card in A connected to your
cable/xDSL modem is assigned the external address supplied by your ISP
(static or DHCP).  You'll need to use ipchains on this box so that it acts
as a gateway for the LAN.

Comp B and Comp C are you Windows or ther Linux boxes.

The three network cards connected to the hub are assigned internal IP
addresses. I don't remember what is usually used, but I use 90.0.0.1, .2,
.3, etc.

I don't know anything about linux security, so I can't comment on that
area.

ELB

--
Eric L. Brine  |  Chicken: The egg's way of making more eggs.
[EMAIL PROTECTED]  |  Do you always hit the nail on the thumb?
ICQ# 4629314   |  An optimist thinks thorn bushes have roses.



Re: [expert] IP Masquerading, The ABCs of

2000-04-16 Thread Eric L. Brine


> This is really bad, folks -- if I understand you correctly, you're
> (both) sending private IP packets onto the local subnet!

I concur.

> Even if masquerading works in this situation, you STILL have packets
> with 192.168.0 headers going out onto the local subnet, and if your ISP
> notices this, you're going to get your wrists slapped.

I don't believe that's the problem. The problems are security/privacy and
bandwidth usage.

Bandwidth: All internal packets are also being sent over to the ISP. This
can cause performance problems. For example, if the LAN is 100Mbps and the
connection to the world is only 1 Mbps, a transfer from one machine to
another on the LAN will be limited to 1Mbps.

Security: The ISP and possibly other clients can see your internal
packets, and possibly even gain access to your private network.

ELB

--
Eric L. Brine  |  Chicken: The egg's way of making more eggs.
[EMAIL PROTECTED]  |  Do you always hit the nail on the thumb?
ICQ# 4629314   |  An optimist thinks thorn bushes have roses.



Re: [expert] The Saga of Netscape and PNGs

2000-04-15 Thread Eric L. Brine


> Currently, on some web pages, the PNG files will load and display
> without a problem, and others they give an "unknown file type" error
> (apparently generated by Plugger).  If I uninstall Plugger, Netscape
> will load some PNGs and ask me what to do with others.  Very surreal
> problem

Have you checked what MIME type is returned by the web server for those
who load compared to those who don't load? It could be there is more than
one MIME type returned for PNG images.

ELB

--
Eric L. Brine  |  Chicken: The egg's way of making more eggs.
[EMAIL PROTECTED]  |  Do you always hit the nail on the thumb?
ICQ# 4629314   |  An optimist thinks thorn bushes have roses.