Re: [expert] Blaster hits and IPCOP..what should I look for???
I can't seem to get IPCOP to log binary dumps of IDS packet data. Snort is started by a c-code program /usr/local/bin/restartsnort (security I guess). But that would be a start. snort has some info, but i don't think ipcop has updated the snort rules for this. last official update was 7-31-03 (fixes3 update) http://www.snort.org/snort-db/sid.html?sid=2192 http://www.snort.org/snort-db/sid.html?sid=2193 These look close and you may be able to make/add the rules to one of the snort rule files. I know this still doesn't answer the question, but its a start. You really can't know if its a legit/mistaken request or not without the dump. Chances are port 135 requests are, but the dump would help define the attack. On Sun, 2003-08-17 at 00:33, Gavin wrote: Kiran, Thanks for your reply, but I wanted to see an actual snip from someone's IPCOP IDS to see EXACTLY what I should look for, I've got many hits on these ports but not sure if its the blaster worn or not. On Sun, 17 Aug 2003 11:58 am, Kiran wrote: http://www.cert.org/advisories/CA-2003-20.html this describes it best. On Sat, 2003-08-16 at 12:38, Gavin wrote: I've got a few M$ boxes running 2000 and XP behind my IPcop firewall, all my boxes are patched.. I've been checking my logs for anything pertaining to the blaster worm but I THINK there is nothing showing..I've got snort active but I'm not REALLY sure what to look for!! if any of you experts are using ipcop and your logs show hits. could you show me a snip so I know what to look for.. Thank you -- Kiran [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: [expert] IPTABLES
Here's the output of 'iptables -L -n -v': Chain INPUT (policy ACCEPT 1613 packets, 96669 bytes) Even though you are specifically allowing port 135 without the syn the default rules will accept packets that do not match any REJECT or DROP rules. I bet you are running ethereal from the FW machine. looking at the rules it should DROP packets from port 135 that are sent to the FORWARD table. I recommend you change the default INPUT table to DENY and specifically allow only the protocols you need to connect. IIRC: $IPTABLES -P INPUT DENY you may also need to allow dhcp trafic 67:68 this should help you quite a bit http://iptables-tutorial.frozentux.net/ man iptables is also quite helpful for the basics pkts bytes target prot opt in out source destination 2891 258K ACCEPT all -- * * 0.0.0.0/00.0.0.0/0 state RELATED,ESTABLISHED 0 0 ACCEPT tcp -- ppp0 * 0.0.0.0/00.0.0.0/0 tcp flags:!0x16/0x02 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP udp -- * * 0.0.0.0/00.0.0.0/0 udp dpt:137 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp dpt:137 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp dpt:135 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 DROPs packets to port 135 in the FORWARD table tcp dpt: 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp spt: 0 0 DROP udp -- * * 0.0.0.0/00.0.0.0/0 udp spt:631 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp spt:631 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp dpt:901 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp spt:901 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp spt:6346 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp dpt:6346 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp spt:6350 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp dpt:6350 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp spts:1213:1214 0 0 DROP udp -- * * 0.0.0.0/00.0.0.0/0 udp spts:1213:1214 0 0 DROP udp -- * * 0.0.0.0/00.0.0.0/0 udp spt:1542 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp dpts:3470:3476 0 0 DROP tcp -- * * 0.0.0.0/00.0.0.0/0 tcp dpts:1433:1434 0 0 ACCEPT all -- ppp0 * 0.0.0.0/00.0.0.0/0 0 0 ACCEPT all -- eth0 * 0.0.0.0/00.0.0.0/0 Chain OUTPUT (policy ACCEPT 4485 packets, 427K bytes) This would seem to imply that none of the FORWARD rules had any hits. Niether has the INPUT rule to block SYN packets. If I understand this correctly though, the first INPUT rule should not allow any incoming packet unless the connection was established from inside. What puzzles me is that things like the SYN packets and NBNS requests cause a response from my gateway machine, like an ACK or a DNS lookup on the requesting IP. While these packets are apparently not being forwarded to my local network, the activity on the PPP connection keeps the connection open when I'm not using it and causes me some concern about its vulnerability. -- Kiran [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: [expert] Blaster hits and IPCOP..what should I look for???
Wouldn't the IPCop mailing list be a better place for this question? Yes and I have moved the rest of my posts there already. Thank you. End of thread!!! -- Kiran [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: [expert] MP3 to Wave
If your burning it to CD try EcliptRoaster (eroaster) it should do what you want. On Wed, 2003-08-13 at 03:12, Magnus Wirström wrote: Hi I know this is a little bit of topic but can anyone recommend a good program that converts MP3 to Wave with really nice quality ? Thanks Magnus -- Kiran [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: [expert] Installed cable -- now host = HWaddr of NIC
hostname=My-Box-Name (this is what sets your hostname in memory - man hostname) and if it doesn't connect anymore then get a DSL/CABLE router-firewall and let it set the hostname on that connection. If your connection works you may just put it in a script and re-run it after the network scripts have run. DHCP is a good thing but sometimes it can be a pain. Too bad you don't have a static address.dang cable service. either reboot the box (the cowards way out *grin*) or do hostname = [new name from above] to get the hostname to change in the current session. Linux only reads the hostname during boot and never again during the session. Doing this forces a re-read so to speak (not actually be effectively.) James -- Kiran [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: [expert] Blaster hits and IPCOP..what should I look for???
http://www.cert.org/advisories/CA-2003-20.html this describes it best. On Sat, 2003-08-16 at 12:38, Gavin wrote: I've got a few M$ boxes running 2000 and XP behind my IPcop firewall, all my boxes are patched.. I've been checking my logs for anything pertaining to the blaster worm but I THINK there is nothing showing..I've got snort active but I'm not REALLY sure what to look for!! if any of you experts are using ipcop and your logs show hits. could you show me a snip so I know what to look for.. Thank you -- Kiran [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: [expert] ReiserFS , JFS or XFS
I have had 4 ext3 filesystems just die on me on 3 different machines only once was I able to recover by removing the journal, fsck'ing and rebuilding it. I won't use it again I'd use ext2(probably the same amount of grief in three times the time) before ext3. I have however had no problems with reiserfs in the last year or so. And that includes alot of unplanned/emergency shutdowns/poweroffs/powerlosses etc on both my laptop and desktop. YMMV. My plan is not to use ReiserFS again, because I see no advantage, ext3 seems to do everything I want certainly everything I need. In that it has never failed any task, even with some extraordinary power outages and outrages. ReiserFS was only used as a trial, and it works well enough. HTH Charlie -- Kiran [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: [expert] Phone Line Networking Driver - Linksys HPN200 NIC
I found this on Google.. http://www.ale.org/archive/ale/ale-2002-09/msg00205.html Hope that helps On Fri, 2003-02-28 at 07:40, Dennis Lyon wrote: Does anyone know of a driver to support this card? (I am running MD 9.0) And, if so, where would I find the detailed instructions on how to add to the kernel? Thanks Dennis Lyon signature.asc Description: This is a digitally signed message part
Re: [expert] Question on KDE
Did you '--force --nodeps' the install?? if so you may need to find a dependency. Or try XFdrake. it may reset something that was broken in the configs with the upgrade. On Fri, 2003-02-28 at 22:34, James Sparenberg wrote: All, I've suddenly lost kde It won't start anything and the only error I get is a core dump. It happened when I upgraded to the latest 3.1 kdm kcontrol nothing will start. But if I switch (and I did ) to gdm ...everything but kde runs. So I removed all of kde... all of qt all the dot files ... and still the same thing. No errors just a core dump. Next I tried to start it from a command line (kcontrol) I get possible errors. Well they are errors just that it's possible they may indicate something. Xlib: extension RENDER missing on display :0.0. DCOP aborting call from 'anonymous-12856' to 'kcontrol' ERROR: KUniqueApplication: DCOP communication error! Now the Xlib error should indicate that I don't have font aliasing working ok... it works elsewhere but for the moment ok and shouldn't stop it. The second one seems to indicate that DCOP doesn't work... When I carefully and completely removed kde all libs and qt that should have been gone. Then a new install of kdebase should have restored it The question is ... any ideas where else to look? I'm not good at core dumps so I don't get much out of it James Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Question on KDE
Like I said X worked well, so did gdm for that matter. There really are only 3 things I want out of kde Konqueror, kdm and kate. So I tried an experiment. Since installing from the cooker wasn't working (I'm running cooker on this box.) I backed off to the rc1 disk version (the last one that worked that I can still get ) and poof ... everything worked. When and if they get the hdlist.cz matching the actual files in cooker I'll let the upgrade run again and see what happens. More and More it seems to be related to the latest qt3. I filed the bug report but was told they couldn't duplicate my problem. Did you try to install the entire KDE packeage? Not sure if this would help with this problem, but it might. other than that it does look like something is broken/missing from your install of cooker...perhaps it is QT3. Does RC1 use the same QT version?? if not try downgrading to it and see if that helps. Cooker seems to be using libqt-3.1.1.1-13 as of 02/25/03 and rc1 was last updated 02/18/03. -- kiran signature.asc Description: This is a digitally signed message part
Re: [expert] Re: [newbie] Samba-Only Windows Clients can write toshares
IIRC msec has a reputation for changing ownership/access of a file to what it likes. You may want to check your proper msec config files to see if its causing the problem. Kiran On Sun, 2003-03-02 at 11:35, Technoslick wrote: All boxes are part of the same domain. The Mandrake workstations can see the shares and view them, per the authenticity of the user's logon. They just can't write to the the shares. It doesn't matter what I do to the local permisions for /mnt/share, they revert back to ownership 'root', group 'root'. On the server, I have made the owner and group on my secured share to be my user name, 'pmbuc'. Doe this give you an ideas? T Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com signature.asc Description: This is a digitally signed message part
Re: [expert] very simple question about kdm
Try running XFdrake and see if that helps. other wise just start tracing the problems from startx (or your init scripts) to where the script leads. I have had to do this in the past. On Wed, 2003-02-19 at 00:20, Damon Lynch wrote: On Wed, 2003-02-19 at 18:41, James Sparenberg wrote: On Tue, 2003-02-18 at 18:40, Damon Lynch wrote: Hi, How do I get it to start up each time I boot? I've been running cooker to help with the testing and when I changed to kdm it now boots to command prompt only. I can login as root and start it manually, but I'm sure there's a simple fix. Thanks, Damon in /etc/inittab change the line that says. id:3:initdefault: to id:5:initdefault: It is already like that. But still I have to start kdm manually. Hmmm maybe this is not as simple as I thought! Thanks, Damon -- Damon Lynch [EMAIL PROTECTED] Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Mail alias problem
You Rock! I like that tool. I would have thought it should run at install though. Kiran On Mon, 2003-01-06 at 19:12, Todd Lyons wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark Weaver wrote on Mon, Jan 06, 2003 at 07:57:22PM -0500 : Kiran wrote: I was trying to change the mail alias for an account and noticed that the link for /etc/aliases - /etc/alternatives/mta-etc_aliases is broken (i.e. not there). Am I missing a package from the install or is this a bad link? What MTA are you using? Postfix...Sendmail...Qmail? Doesn't matter. Just run: update-alternatives --auto mta and it will fix it all unless you removed some packages using force or you manually deleted some binaries. Blue skies... Todd - -- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Gnome+nVidia - slightly OT
Get the source RPMS for NVIDIA_kernel NVIDIA_GLX then: rpmbuild --rebuild package-name-here SEE man rpmbuild for more info I always keep the source RPMS around just in case of a kernel/library upgrade. On Sun, 2003-01-05 at 22:46, Chuck Burns wrote: On Sun, 2003-01-05 at 21:06, Antoine wrote: No, GNOME works fine here. I have a GeForce4MX with the NVidia drivers. Maybe you should try to reinstall them ? I have, does the same thing. It doesnt have this problem with the nv drivers that come with X, just the nvidia provided ones. Chuck Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Gigabyte EV-7VKML mobo
IIRC Mandrake 9.0 uses the ALSA drivers by default. On Tue, 2003-01-07 at 19:23, Nelson Bartley wrote: The 7vklm should work PERFECTLY in mandrake 9.0 and 8.2. I had one for a short period of time and it performed flawlessly. Did Drakx pick it up during install? It should have identified an via 8233a southbridge audio device, usually based off a crappy via sound codec. That motherboards audio should have full support, unfortunately I just can't remember what it's called right now module wise. Gizmo On Tue, 2003-01-07 at 19:59, Todd Lyons wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I have one of these that everything works well (even a Lucent winmodem) except for sound. I get nothing, zip, nada, no matter what I do. Only ALSA supposedly supports this chipset, not OSS, so my options are limited. Is there anybody out there with this mobo that can verify the same symptoms? Blue skies... Todd - -- | MandrakeSoft USA | Sometimes you get what you want. | | http://www.mandrakesoft.com | Sometimes you get experience.| | http://www.mandrakelinux.com |--unknown origin | Cooker Version mandrake-release-9.1-0.1mdk Kernel 2.4.20-2mdk -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+G3gIlp7v05cW2woRAqz2AJ9qSAfDAmMjbZRB9caYpdleX+k1VQCfZfRO Ajn8eNThTozAP9Ki8iMagWs= =dihU -END PGP SIGNATURE- __ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com -- Nelson Bartley [EMAIL PROTECTED] Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[expert] Mail alias problem
I was trying to change the mail alias for an account and noticed that the link for /etc/aliases - /etc/alternatives/mta-etc_aliases is broken (i.e. not there). Am I missing a package from the install or is this a bad link? BTW I'm using MDK90 _ _-_-_ Kiran Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Multiple Samba Versions
Try removing everything ...errr everything samba related I mean then install the new versions (don't forget to save the configs if you need to) rpm -e --allmatches samba SEE `man rpm` for more info and a better idea of how to use rpm Standard disclaimer: BACK UP YOUR DATA good luck On Tue, 2002-12-03 at 16:34, Brian Schroeder wrote: After a few upgrades, I have found that samba hasn't been upgraded properly. I still have old versions lying around that I can't get rid of (see the output below). I have tried rpm --rebuilddb, but it made no difference. Is there any way to clean it up nicely? Brian. rpm -qa|grep samba samba-swat-2.2.6-1.0.pre2.2mdk samba-2.2.1a-15mdk samba-server-2.2.6-1.0.pre2.2mdk samba-2.2.3a-10mdk samba-doc-2.2.6-1.0.pre2.2mdk samba-client-2.2.6-1.0.pre2.2mdk samba-common-2.2.6-1.0.pre2.2mdk samba-2.0.9-1.3mdk rpm -e samba-2.0.9-1.3mdk error: execution of %trigger scriptlet from samba-2.0.9-1.3mdk failed, exit status 1 \|/ KIRAN ---+-- /|\ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [expert] w2k shutdown from mdk
- It is not scriptable. - It requires a GUI on the UNIX side either X or frame-buffer. - It requires a mouse on the UNIX side. That pretty much sums up Windows too sans the UNIX reference (ok ... they do have perl for windows so I guess it is scriptable) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: LAST QUESTION :) Re: [expert] Intruder security questions
how can i know if there is a hole on my machine? Something i don't know? You may never know, but you can try to keep things as secure as possible. keep you patches/packages up to date...check for security updates. Run the tools that where suggested in the other posts. If you are using a 2.4.x kernel Use IPTABLES instead of IPCHAINS and use the features it has to offer to filter out bad packets and deny bad/unused ports/protocols as you need. You can always re-compile your kernel w/ the lsm patch added to it (be very careful). check out security sites and google. -+- kiran Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Intruder security questions
On Wed, 2002-11-06 at 22:04, Gonzalo Avaria wrote: Hi u guys, i need to ask some questions about security of my PC. I have the FTP service running, and want to know if it is safe or i could get a intruder from there, I have the ssh server running and that's all i need, because i have a Floating IP because it changes everytime i connect, so i cannot have http servers running nor a mail server. Its never safe to open a service up to the world, but if you want to host an externally accessed ftp site you'll have to do so. As for the address check out http://dyndns.org I think this is what you want. Second, how can the people outside can open an anonymous FTP session if i don't give my IP? is there a way that they could know that my PC is FTP enabled(like searching inf google or anything like that?)? Well i'll not gonna waist anymore of your time, thanks for the answers, see you. = Gonzalo Avaria Alumno de Licenciatura en Fisica Facultad de Cs. Fisicas y Matematicas Universidad de Concepcion CHILE _ Do You Yahoo!? Información de Estados Unidos y América Latina, en Yahoo! Noticias. Visítanos en http://noticias.espanol.yahoo.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Dual video, onboard and PCI ?!
On Sat, 2002-11-02 at 15:57, Sebastien Routier wrote: Hi, Does anybody know if and how can I enable my onboard video card while also using my normal PCI/AGP video card?? The on board AGP AGP slot are the same slot for video. If you need to add another card use a PCI card. I have never seen a board with two AGP slots although that would be great. NOTE: PCI bus is PCI bus 0 while the AGP bus is PCI bus 1 (IIRC actually AGP is part of the PCI bus) there for they will be read that way by the bios and your computer and you will need to differentiate between them in X. IIRC you will need to put a bus line in the configs to let it know that you are using it as screen0 or screen1. I'm not sure if mandrake 9 (or RedHat 8) will auto detect dual monitors successfully, I will have to try it. Here is the link to the Xinerama HOW-TO: http://www.tldp.org/HOWTO/Xinerama-HOWTO.html this may explain more than I could and do it right. I want to try the dual video thing, but I can't get my onboard video to work *while* my PCI/AGP board is in my PC!? They both work separately, but not together!??! Any ideas?!?! Is it even possible?? Thanks... Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [expert] Consultation
I'm not sure that XP/2000 meed this (they might though, I think the boot loader needs to be on C:), but I don't think it would hurt. Windows 9x needs to be on the C: drive so if windows is on the second drive(hdb or D: if you prefer) or up, you need to map it down to the C: drive. The first 2 lines map the C: to the D: and lines 3 4 map the D: to the C:. On Mon, 2002-10-28 at 06:06, Mcleod, Ian wrote: What is this for? map-drive = 0x80 to = 0x81 map-drive = 0x81 to = 0x80 .Kiran Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] CLI
On Thu, 2002-10-17 at 00:44, ET wrote: Elitism really bugs the hell out of me. anyone familiar with the Mensa Conundrum? if you are smart enough to be invited to join Mensa, aren't you also smart enough to recognize that elitism in any form is basicly wrong? and isn't Mensa an elitist organization? OK OK thats enough! Community arbitration has won out. All Linux related questions are clean for posting. If you don't think its appropriate for your level of expertise to answer then ignore it. Amen! This is a good place to stop the thread before we waist more precious bandwidth and disk space. . Kiran ^ Peace is much more precious than a piece of land... let there be no more wars. -- Mohammed Anwar Sadat, 1918-1981 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Apache and Mandrake 9.0
Any other suggestions? touch /var/www/html/.htaccess? oooh that tickles! Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Mandrake Festival
If he floats, he's a witch! Assuming you've heard the latest but just in case. Dmitry is due in court Oct 21st along with some others from his company. Problem is ... the state department has denied all of them a visa. So tell me.. does he get arrested for failure to appear, or for being an illegal alien? They'll just reset the court date or apeal any rulings or if fund guilty they will never come to Amerika again. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Dhcp lease mystery
Ahhread the rest of the original email Vox, and you will see the
above dhcpd.conf segment at the bottom. This was basically a view into
*both* the dhcp.lease and dhcpd.conf files.
host crysalis {
next-server crysalis.the-vox.com;
hardware ethernet 00:90:27:71:77:3C;
fixed-address 192.168.1.1;
} ^^^
That gives crysalis (my box) 192.168.1.1 as its IP every time.
host fantasia {
hardware ethernet 08:00:07:26:c0:a5;
fixed-address fantasia.fugue.com;
} ^^^
Should read like Mr. Vox's setup (with correct IP assignment)
But still it tried to equate a fixed address with a fqdn and not a IP
address. h s Close... but no Cigar ;-).
BTW on a small network that won't stress the number of IPs allocated the
DHCP server usually re-assigns the old address (not guaranteed though).
For ease of administration dhcp is good for a ton of computers or for
computers you don't have access to often (or mobile computers). If you
have less than 5 computers on the net I would just assign them
statically. But its your system you know it best
.kiran
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
Re: [expert] Using Startx instead of kdm
On Sat, 2002-10-12 at 17:38, Ron Stodden wrote: Bill Witherspoon wrote: I would like to stop using kdm, and have my machine boot to a shell prompt. How do I stop using a window manager login? As root, edit /etc/inittab to change the initial runlevel from 5 to 3. Change the line: id:5:initdefault: to: id:3:initdefault: Did you know Dept: While kdm is running, you can log in to a terminal at runlevel 3 by pressing Ctrl+Alt+F2 (or F3 or F4 or F5 or F6 - yes you can have 5 separate terminal logins!). Technically your still at runlevel 5 until you actually change it, but yes you can get a shell that way too. crtl+altF1 works as well to give you 6 glorious terminals to choose from.while F7 and up are generally reserved for X servers. I have noticed that F12 on MDK systems seems to be stderr although I haven't looked into that yet. To return to your kdm session just Ctrl+Alt+F7, then switch back and forth as you please. Also, if I do want to start a window manager from the shell, I know it's startx. But how do I change the wm that gets started? startx gnome? startx xfce? You could set /etc/sysconfigf/desktop to what you like but I think Xtart is what you want. That I do not know, sorry... Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Tape backups in Linux?
On Sun, 2002-10-13 at 07:31, David Guntner wrote: John Haywood grabbed a keyboard and wrote: Also, is there a reasonably good backup program (preferably something free, but an inexpensive one would be fine as well) that will use the tape drive? The next time I manage to destroy my system, it would be awfully nice if I could just restore from the last backup :-) Any information would be appreciated. There are quite a few - but amanda stands out as the most robust for network/client backups. There isn't a Mandrake RPM for it AFAIR, but the .src.rpm should compile Since amanda.com and amanda.net don't yeild anything that looks like it has backup software, could you perhaps direct me to the URL for this software? http://www.rpmfind.net or check your install CDs it should be there. :-) --Dave -- David Guntner GEnie: Just say NO! http://www.akaMail.com/pgpkey/davidg or key server for PGP Public key Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Has anybody tried to install NVidia Drivers formandrake 9.0?
On Sat, 2002-10-12 at 00:43, Todd Flinders wrote: Mandrake Club has Nvidia drivers for 9.0. You can always download the .src.rpm's and rebuild them yourself: rpm --rebuild NVIDIA*src.rpm You will need to have the rpm-build package installed. This is probably the best thing to do anyway if you have your kernel source installed. It assures you that it will work with your kernel...especially if your not using the distro's stock kernel. The tarball is a decent second choice (only because RPM will keep track of the install with the rpmdb). .kiran Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] /root and /
On Sun, 2002-10-06 at 06:29, James Sparenberg wrote: On Sat, 2002-10-05 at 14:52, Toshiro wrote: I agree. However I Dont run EVERYTHING as root nor am I a new user. Also being an IT Manager I DO occasionally su to root and ssh into my company's machines as root to do admin stuff so I really would not want to blast away my ssh keys nor my root env. hmmm is it possible to ssh as a user and then su to root? would that not be more secure? What's the point in doing that way? When you use ssh, the communication is encrypted. I don't see the advantage of ssh as a normal user first. From having had it save my buns... Big advantage is that you know who su'd to root. I had a boy genius who discovered root from one of my employee's logged in su'd and made some changes he wanted ... ie opening up some ports for a file sharing software that he wanted to use company bandwidth for. The only reason we caught it was because of the su... now granted this has been a couple of years but it does illustrate a use. (One reason I like the BSD style su over linux) The advantage paper trail so to speak. James Well theres always sudo if you don't like the root password going over the wire (even encrypted, paranoiaevery few months it seems there is another security fix out/paranoia) or other people knowing it who have admin work to do. Its a good way to limit the damage to the system by limiting access to certain resources to each user that may need root access to complete a task. And well if they aren't given access to a program they can't run it. And yes sudo does log successful unsuccessful attempts if you like that kind of thing in your life ( you probably should). But back to the /root question, it helps to have the Ever So Smooth Dr. root's home on the boot partition for logins if you can't mount /home. I don't think it was for failsafe as much as the convenience of having your settings in a secure place and available to you even if you can't mount /home. You can always create a /home directory on the / partition with a backup normal user dir and copy it to the new partition then mount /home (other partition) over /home: (root partition) and then you would have a /home dir for a normal user even if you couldn't mount the /home dir (useful (critical even) if you have root logins disabled). --- Kiran Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] New video card advice
The voodoo 3 3000 is now an old card (works fine, but old) my suggestion would be to figure out how much you want to invest in a video card and well... choose from there. From my experience (perhaps limited) nVidia seems to have better drivers for Linux, but my experience with ATI is limited to older cards. I heard the Radeon 9700 is the fastest card on the market now, but like all things wait a while and its obsolete (see voodoo 3 3000). If I where a rich man I wouldn't have to judge price/performance I would just buy the best when it came out but... --- Kiran On Sun, 2002-10-06 at 10:00, [EMAIL PROTECTED] wrote: Dear friends, My son would like powerfull games runing in my double Win98/Mandrake 9.0 desktop computer and my wonderfull Voodoo3 3000 is now having some problems to run properly some of the games hi likes. Conclusion: I am thinking about a new video card but, of course I like one that can run well, including DRI, under both OS (I don't wont lose my Chromium, Quake III, Tuxracer and so on games under linux). I have heard about TNT2, Geforce, Geforce2, Geforce3, Ati Radeon, Matrox.. and I am very confused. It should be a card with at least 32 Mb Ram, AGP conection, DRI (aceleration) but I need your advice; I know that some Nvidia are very good, including TV-output utilities, but the modules are just binaries; ATI seems, at least until now, to be more related with the Open Source world and also some of them have tv-output utilities Probably there are lots of expert-list members and people of the mandrake team that have good experiencies runing Mandrake 9.0 and some of those cards. Please, could you help me to select one. Thanks so much in advance Francisco Alcaraz Murcia (Spain) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] camera usb-storage auto mount?
I wish I knew this a bit better, but supermount should mount volumes automatically. Here is my floppy listing from /etc/fstab: /mnt/floppy /mnt/floppy supermount dev=/dev/fd0,fs=-vfat,--,iocharset=iso8859-1,umask=0,sync,codepage=850 0 0 That of course should all be on one line. so try to mimic this line and play with the options a bit and see if that works this is the first time i've really looked at the supermount listing in /etc/fstab, but the sytax does look slightly different. 'man supermount' seemed to be a waste of time On Wed, 2002-10-02 at 21:48, bascule wrote: hi kiran this is my fstab line: /dev/sdb1 /mnt/camera vfat user,rw,umask=0 replacing vfat with supermount gives: [bascule@mycroft mnt]$ mount /dev/sdb1 mount: wrong fs type, bad option, bad superblock on /dev/sdb1, or too many mounted file systems i've never understood the fromat of fstab line that use supermount, could you suggest how i alter the above line? bascule Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Nvidia Gforce4
The real key it to get the .src.rpms or the tar.gz files and compile them. make sure you haven't changed the kernel src/headers from the actual kernel you are running and you should be fine. One downer is that if you do change/upgrade kernels you will have to re-compile the drivers (personal experience). [johnny-5]# rpm --rebuild package-name-here [johnny-5]# cd /usr/src/RPMS/SOURCES (could be /usr/src/RPMS/RPMS I forget) // iirc [johnny-5]# rpm -ivh pakage-name-here Its pretty easy and painless. The hard part is looking up the how-to info and that's pretty quick via google and a sharp eye. My only recommendation for using the rpms over the tar.gz files is to be able to use the rpm db to manage it as an installed package. On Sun, 2002-09-29 at 12:58, Lorne wrote: thank you very much for the information form all of you. I'm not ignoring you. I have downloaded the files and will work on them as I have time. I will report back on how it goes. On Saturday 28 September 2002 11:09 pm, you wrote: Please try these: http://download.nvidia.com/XFree86_40/1.0-3123/NVIDIA_GLX-1.0-3123.tar.gz http://download.nvidia.com/XFree86_40/1.0-3123/NVIDIA_kernel-1.0-3123.tar.g z ppl have soo much trouble with the rpms. just untar these and type: 'make' as root without single quotes in each resulting directory. Then edit your /etc/X11/XF86Config-4 file and change nv to nvidia under the graphic section for your driver. If you are in X, please log out and back in. hth, -s On Sunday 29 September 2002 12:41 am, Lorne wrote: I have tried all the Nvidia drivers that mandrake had built in. There were like 6 of them. Did you mean nvidia linux drivers? I haven't found those yet. I'm fairly sure you're gonna /have/ to use the nvidia drivers as gf4's aren't supported by XFree86 yet. -s Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] camera usb-storage auto mount?
I think if you just add it to /etc/fstab and use supermount as the fstype you should be in good shape. On Mon, 2002-09-30 at 19:42, bascule wrote: i've just got my casio exilim camera to be visible using the usb-storage driver, i have to mount and umount manually though, is there a way to have it u/mount automagically when the camera is dis/connected, what file should i look at? bascule -- OK, so ten out of ten for style, but minus several million for good thinking, yeah? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] a stooooooooopid question
On Wed, 2002-09-04 at 05:59, Wolfgang Bornath wrote: On Sat, Aug 31, 2002 at 12:31 -0400, Mark Weaver wrote: Hi list, Ok...I've been a wrackin my poor brain for the last few hours and burnin up the Google search engine trying to find the answer to this question, but I just can't find the answer and I can't remember the correct command line syntax to save my forgetful life this morning. I'm trying to remember the correct manner in which to represent whitespace in filenames on the command line in a bash shell. Could some kind soul help me with this? You are in good company. Even our former Chancellor Mr. Kohl admitted that he had a Balck Out aome time! cp 'black out.txt' 'chancellor kohl.txt' You can also use cp black?out.txt chancellor?khol.txt if thats easier for you than the backslash or quotes. In case you are using already the single quotes you can use the double quotes as well. wobo -- ... and anyway, an html can't carry a virus. (Aug 2001, Usenet) --- [EMAIL PROTECTED] ICQ: #128612867 GPG-ID: A69882EE --- ISDN4LINUX-FAQ -- Deutsch: http://www.wolf-b.de/i4l/i4lfaq-de.html Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] graphics-workstation ...
On Tue, 2002-08-13 at 21:00, Jonathan I. Nori wrote: Hi! Sounds like you want an SGI or Sun Solaris workstation. The kinds of tools you seem to be looking for really aren't in a mature (if they even exist yet) stage on the linux platform. If you want to do professional, high-end audio/video/animation editing (which you seem to be hinting at) you need to look at something other than Linux. Jon 8^) Thats not quite true anymore. A lot of Big Name production houses are moving toward Linux as a viable graphics/animation/film-video platform. Sure many of the high end programs they use are not FREE as in speech or beer(and quite expensive for an individual) but they are top notch and many were ported directly from their SUN/SGI/MS platforms.Others are even GPL'd programs, so there is a mix of stuff used professionally. Hey they use what works to get the job done like they need it done. As for stuff we can afford: Broadcast2000 was a good video editing suite but that is no longer available. Instead there is now Cinelerra at: http://heroines.sourceforge.net/bcast2000.php3 as for 3D modeling take your pick, but my favorite is no longer available either and that was Blender (but there are others too). As far as your Video card is concerned, IIRC Nvidia's proprietary drivers were more mature than the open source drivers for ati or nvidia(although things may have changed since I last heard, it has been a year or two) for HW acceleration. BTW always keep fairly current with the distro/packages. Especially with graphics/web apps since they are a rapidly maturing part of Linux. +_Kiran_+ - I may not have gone where I intended to go, but I think I have ended up where I intended to be. - Douglas Adams [EMAIL PROTECTED] 08/13/02 03:55AM hi, am looking for a really good and special graphicsworkstation, running linux with OpenGL, a very good graphiccard with OpenGL and sound-abilities. Has anyone an idea, which equipment is commendable. what I should do with it : making animations, making pictures (combine together) and sound which software do I need for that purpose and is that software available on mandrake ? The reason asking this is, I have downloaded some graphicspackages, but a lot of them needs some requirements, which I have not found yet or does not run on my testenvironment, which is a 350 MHZ AMD, mdk 8.0, about 50 Gigs HD, an ATI Rage Card and a USB-connection. USB does NOT run, ATI Rage have a lot of problems with 3D-Accelerating and have damaged 3 ATI's right now with the hardware-accelerator of mdk's 8.0 4.0.3-version of XFree86. Hope to get some experiences and advicements thanks for helping and ideas bye hans Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] KVM doens't work well with Mice
I've been using a USB KVM for some time now and Have had little trouble with it. Omni View Belkin make them for sure, but I'm sure you can find them at most decent computer stores. On Sun, 2002-08-11 at 00:18, Lorne wrote: I have recently discovered a KVM switch that actually works on Linux that doesn't cause the cursor to go nuts. I'm sure I'm not the only one that has been frustrated by this. What happens is when you switch with one computer to another and back to the Linux box, the mouse cursor goes nuts. A work around is to CTRL-ALT F1, then ALT-F7 and it is fine again. Very annoying. I found that you can eliminate all this with a certain KVM brand and model. Black Box and Belkin have the problem. The Linksys model PS2KVM4 works flawlessly! Woo hoo It costs like 79.00. So if anyone has the herky jerky mouse problem like I did, this may solve it for you. I use a microsoft Intelimouse, but it has never made a difference for me. I've used quite a few different kinds. I've had this problem for 2 years. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
