Re: [expert] Help - my box has been compromised!

2003-11-06 Thread Markus Gonaus

> On 6 Nov 2003 at 10:49, Jack Coates wrote:
> 
> > based on these scans and the vger results, I don't think postfix is
> > misconfigured at all; the attacker is logging in and sending those mails
> > from localhost. format the drive and start over.
> > 

No, it is not that bad at all.

http://www.mail-abuse.org/cgi-bin/lookup?198.144.206.157
lists the IP as open relay. So the Messages have been delivered by
localhost. But it is not the MTA that is missconfigured, but the
Web/Proxy Server.

Either a Squid or a Apache mod_proxy, I guess.

Markus Gonaus


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-06 Thread Jack Coates
On Thu, 2003-11-06 at 13:21, D. R. Evans wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> On 6 Nov 2003 at 10:49, Jack Coates wrote:
> 
> > based on these scans and the vger results, I don't think postfix is
> > misconfigured at all; the attacker is logging in and sending those mails
> > from localhost. format the drive and start over.
> > 
> 
> And install something that runs from a CD and daily checks for the presence 
> of rootkits (like chkrootkit, for example), to stop this happening again -- 
> or at least so you know when it happens.
> 
>   Doc
> 

I recently saw something really simple and evil :-) It was a ten minute
cron job that compared timestamps of a few files like /etc/password and
/etc/shadow with copies of them that were placed in a hidden directory.
If the compare failed, the machine would wall that you'd tripped it up
with a code message -- admins would realize their mistake, crackers
would know something was wrong but wouldn't know what. Sixty seconds
later, shutdown -h now :-)

-- 
Jack Coates
Monkeynoodle: A Scientific Venture...


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-06 Thread D. R. Evans
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 6 Nov 2003 at 10:49, Jack Coates wrote:

> based on these scans and the vger results, I don't think postfix is
> misconfigured at all; the attacker is logging in and sending those mails
> from localhost. format the drive and start over.
> 

And install something that runs from a CD and daily checks for the presence 
of rootkits (like chkrootkit, for example), to stop this happening again -- 
or at least so you know when it happens.

  Doc


-BEGIN PGP SIGNATURE-
Version: PGP 8.0 -- QDPGP 2.70 
Comment: http://community.wow.net/grt/qdpgp.html

iQA/AwUBP6q7RGnXrLw2KRK4EQJe9gCeIaum9l8+86a+EGXMQ7E1FiWj/h8An39B
WSSPalgXhCRdWUylH5h/IhvH
=evtB
-END PGP SIGNATURE-

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-06 Thread Jack Coates
based on these scans and the vger results, I don't think postfix is
misconfigured at all; the attacker is logging in and sending those mails
from localhost. format the drive and start over.

On Thu, 2003-11-06 at 08:00, Praedor Atrebates wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Geesh.  Disable ftp at least, if you disable no other service.  If you don't 
> do remote X at all, disable X service as well.
> 
> Are you serving a webpage locally?  Disable http and perhaps https.
> 
> I have the following nmap output:
> PORT  STATE SERVICE
> 22/tcpopen  ssh
> 25/tcpopen  smtp
> 631/tcp   open  ipp
> 1241/tcp  open  nessus
> 6000/tcp  open  X11
> 1/tcp open  snet-sensor-mgmt
> 
> I run my own postfix mailserver for me, myself, and I.  It is not a relay (and 
> as others have indicated, it doesn't quite look like yours is really).
> 
> I could disable X11 and nessusd I suppose as though I do the occassional 
> remote X thing and sometimes use nessus against those who scan me (I like to 
> light up their "warning lights" if they have any such thing to let them know 
> that their target is on to them), it is rare.  
> 
> Basically, do you actually NEED the services you are running?  Any that are 
> not really used/needed, turn them off.
> 
> praedor
> 
> On Thursday 06 November 2003 03:44 am, Stefan Rijnhart wrote:
> > Op donderdag 6 november 2003 06:18, schreef David E. Fox:
> > > Folks - especially postfix people - I need some help -
> > > my box seems to have been turned into an open relay. I am
> > > running the same postfix configuration file I had installed
> > > when I was running 9.0 and later versions (currently I
> > > am running 9.2/cooker)..
> > >
> > >
> > > I have not been able to post to the list or send out any
> > > smtp email until I fix this and in the meantime have
> > > simply flushed (deleted) the outgoing queue in /var/spool
> > > /postfix via
> > >
> > >   # find . /var/spool/postfix -type -f | xargs exec rm
> > >
> > > which (quickly) removes it. I removed many megabytes' worth
> > > of stuck email this way earlier today only to find that at
> > > 9 pm there was 4 megs more waiting and my isp admin had sent
> > > me a mail saying he disabled my smtp.
> > >
> > >
> > > I was under the impression postfix was relay proof - any
> > > advice will be helpful...
> > >
> > > Thanks!
> >
> > Hi David,
> >
> > Maybe my behaviour is a bit unmannered but I have ran some tests against
> > your IP, to help you fix your box (We are talking about
> > m206-157.dsl.tsoft.com, aren't we?)
> >
> > Your postfix says:
> >
> > 554 <[EMAIL PROTECTED]>: Relay access denied.
> >
> > Seems ok.
> >
> > Portscanner Nmap says:
> >
> > Port   State   Service
> > 21/tcp openftp
> > 22/tcp openssh
> > 25/tcp opensmtp
> > 80/tcp openhttp
> > 111/tcpopensunrpc
> > 135/tcpfilteredloc-srv
> > 137/tcpfilterednetbios-ns
> > 138/tcpfilterednetbios-dgm
> > 139/tcpfilterednetbios-ssn
> > 443/tcpopenhttps
> > 445/tcpfilteredmicrosoft-ds
> > 631/tcpopenipp
> > 642/tcpopenunknown
> > 6000/tcp   openX11
> >
> > Do these ports corresond to the services that you want to offer? Otherwise,
> > shield them off. Do you know how to work with shorewall to accomplish that?
> >
> > Good luck,
> > Stefan.
> 
> - -- 
> "Our ship is in the hands of pilots who are steering directly under full sail 
> for a rock.  The whole crew may see this course to violate our liberties in 
> full view if they look the right way."
> - --Samuel Adams, 1771
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.2.3 (GNU/Linux)
> 
> iD8DBQE/qnAAaKr9sJYeTxgRAv4SAJ9GatteTgmMSVQpL81QD04nTEZIuACfbvy0
> tKZxRkF3Ixg55x6kbf2By/g=
> =yG6x
> -END PGP SIGNATURE-
> 
> 
> __
> Want to buy your Pack or Services from MandrakeSoft? 
> Go to http://www.mandrakestore.com
-- 
Jack Coates
Monkeynoodle: A Scientific Venture...


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-06 Thread Jack Coates
On Wed, 2003-11-05 at 23:20, Lyvim Xaphir wrote:
...
> Personally I've had zero trouble installing qmail and zero trouble
> administering qmail.  Most of the complaints I've seen about qmail in my
> own work experience have come from people that don't really know what
> they are doing, or are too lazy to tackle a learning curve.
> 
> The fact is that postfix is not as secure as qmail.  This isn't a matter
> that's up for arguability, it's a matter that is an established fact
> based on bugtraq archives.  I've been monitoring the bugtraq mailing
> list for over 5 years now and I have consistently seen postfix security
> problems come up over and over again.  Qmail, on the other hand, has to
> have made some kind of Guiness World record for NO security breaches or
> problems; ever.  There have been problems with some of the patches that
> people have submitted, but there have never been any security problems
> with the core programs that were authored by Dan Bernstein.  I
> personally have never seen a program with this kind of security record.
> 
> I know about the rivalry between postfix and qmail on the newsgroups. 
> Based on  the information I have gained over the last 5 years, postfix
> has had security problems and qmail has not.  Qmail has a pristine
> operating history and postfix does not.  It's just that simple.
> 
> 
> LX

True enough, but there are many reasons for choosing a piece of
software. Security is one of them and an important one, but if it was
your only criteria you'd be on OpenBSD instead of Mandrake :-)

Switching mailers entails starting the learning curve over. Maybe David
will find qmail easier to understand and configure than postfix and the
learning curve will be worth it... or maybe he'll burn a day working
with it before deciding that he should have stuck with postfix in the
first place or gone to exim. (No, sendmail is not an option).
Architecture, license, support community, and ease of
installation/management have to be considered along with security track
record.
-- 
Jack Coates
Monkeynoodle: A Scientific Venture...


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-06 Thread Jack Coates
that's my advice. Depending on the amount/urgency of email, I don't
think this is a good time to be investigating other mailer packages, but
if you've got the time go for it. I'd recommend Exim over Qmail though,
as licensing is important to me, but qmail is a good mailer.

I'd also recommend joining the postfix mailing list and asking for help.

On Thu, 2003-11-06 at 07:46, Praedor Atrebates wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Err...why not simply dump the current postfix config and either reinstall to 
> get the default config back or mv the original (if you have it, perhaps named 
> something like "main.cf~" or "main.cf.default"?) back into use?  
> 
> I have borked my main.cf file in the past, not to the point of turning my 
> system into an open relay (which isn't broken, just badly configured...a nice 
> way to get your hostname dropped into a blackhole list) but to the point of 
> screwing up postfix operation.  I have merely reverted to wildtype (original 
> main.cf) and started over.  
> 
> This isn't THAT big a deal, just a pain in the arse.  
> 
> praedor
> 
> On Thursday 06 November 2003 02:13 am, Franki wrote:
> > > My advice, which again will look like a cop-out, but in actuality is
> > > very serious, is that you switch to qmail.  Vincent Danen, rpmhelp.net
> > >
> > > LX
> >
> > No doubt about it, Qmail is a good package...
> >
> > but postfix is pretty good also and it might be worth finding out what
> > the problem is...
> >
> > I have postfix setup here to process the mail for about 9 domains (and
> > counting) and I've not had  a prob with open relay..
> > In fact my email log report shows about 30 odd failed relay attempts a
> > day...
> >
> > rgds
> >
> > Franki
> 
> - -- 
> "Our ship is in the hands of pilots who are steering directly under full sail 
> for a rock.  The whole crew may see this course to violate our liberties in 
> full view if they look the right way."
> - --Samuel Adams, 1771
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.2.3 (GNU/Linux)
> 
> iD8DBQE/qmzYaKr9sJYeTxgRAvw5AKC1X9J7Q8F7Uj9hO8xT7PzqkhXgVACeM+DL
> /bpeV2q63nI/8Ik9W9gXIzA=
> =CsfW
> -END PGP SIGNATURE-
> 
> 
> __
> Want to buy your Pack or Services from MandrakeSoft? 
> Go to http://www.mandrakestore.com
-- 
Jack Coates
Monkeynoodle: A Scientific Venture...


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-06 Thread Praedor Atrebates
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Geesh.  Disable ftp at least, if you disable no other service.  If you don't 
do remote X at all, disable X service as well.

Are you serving a webpage locally?  Disable http and perhaps https.

I have the following nmap output:
PORT  STATE SERVICE
22/tcpopen  ssh
25/tcpopen  smtp
631/tcp   open  ipp
1241/tcp  open  nessus
6000/tcp  open  X11
1/tcp open  snet-sensor-mgmt

I run my own postfix mailserver for me, myself, and I.  It is not a relay (and 
as others have indicated, it doesn't quite look like yours is really).

I could disable X11 and nessusd I suppose as though I do the occassional 
remote X thing and sometimes use nessus against those who scan me (I like to 
light up their "warning lights" if they have any such thing to let them know 
that their target is on to them), it is rare.  

Basically, do you actually NEED the services you are running?  Any that are 
not really used/needed, turn them off.

praedor

On Thursday 06 November 2003 03:44 am, Stefan Rijnhart wrote:
> Op donderdag 6 november 2003 06:18, schreef David E. Fox:
> > Folks - especially postfix people - I need some help -
> > my box seems to have been turned into an open relay. I am
> > running the same postfix configuration file I had installed
> > when I was running 9.0 and later versions (currently I
> > am running 9.2/cooker)..
> >
> >
> > I have not been able to post to the list or send out any
> > smtp email until I fix this and in the meantime have
> > simply flushed (deleted) the outgoing queue in /var/spool
> > /postfix via
> >
> >   # find . /var/spool/postfix -type -f | xargs exec rm
> >
> > which (quickly) removes it. I removed many megabytes' worth
> > of stuck email this way earlier today only to find that at
> > 9 pm there was 4 megs more waiting and my isp admin had sent
> > me a mail saying he disabled my smtp.
> >
> >
> > I was under the impression postfix was relay proof - any
> > advice will be helpful...
> >
> > Thanks!
>
> Hi David,
>
> Maybe my behaviour is a bit unmannered but I have ran some tests against
> your IP, to help you fix your box (We are talking about
> m206-157.dsl.tsoft.com, aren't we?)
>
> Your postfix says:
>
> 554 <[EMAIL PROTECTED]>: Relay access denied.
>
> Seems ok.
>
> Portscanner Nmap says:
>
> Port   State   Service
> 21/tcp openftp
> 22/tcp openssh
> 25/tcp opensmtp
> 80/tcp openhttp
> 111/tcpopensunrpc
> 135/tcpfilteredloc-srv
> 137/tcpfilterednetbios-ns
> 138/tcpfilterednetbios-dgm
> 139/tcpfilterednetbios-ssn
> 443/tcpopenhttps
> 445/tcpfilteredmicrosoft-ds
> 631/tcpopenipp
> 642/tcpopenunknown
> 6000/tcp   openX11
>
> Do these ports corresond to the services that you want to offer? Otherwise,
> shield them off. Do you know how to work with shorewall to accomplish that?
>
> Good luck,
> Stefan.

- -- 
"Our ship is in the hands of pilots who are steering directly under full sail 
for a rock.  The whole crew may see this course to violate our liberties in 
full view if they look the right way."
- --Samuel Adams, 1771
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/qnAAaKr9sJYeTxgRAv4SAJ9GatteTgmMSVQpL81QD04nTEZIuACfbvy0
tKZxRkF3Ixg55x6kbf2By/g=
=yG6x
-END PGP SIGNATURE-

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-06 Thread Praedor Atrebates
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Err...why not simply dump the current postfix config and either reinstall to 
get the default config back or mv the original (if you have it, perhaps named 
something like "main.cf~" or "main.cf.default"?) back into use?  

I have borked my main.cf file in the past, not to the point of turning my 
system into an open relay (which isn't broken, just badly configured...a nice 
way to get your hostname dropped into a blackhole list) but to the point of 
screwing up postfix operation.  I have merely reverted to wildtype (original 
main.cf) and started over.  

This isn't THAT big a deal, just a pain in the arse.  

praedor

On Thursday 06 November 2003 02:13 am, Franki wrote:
> > My advice, which again will look like a cop-out, but in actuality is
> > very serious, is that you switch to qmail.  Vincent Danen, rpmhelp.net
> >
> > LX
>
> No doubt about it, Qmail is a good package...
>
> but postfix is pretty good also and it might be worth finding out what
> the problem is...
>
> I have postfix setup here to process the mail for about 9 domains (and
> counting) and I've not had  a prob with open relay..
> In fact my email log report shows about 30 odd failed relay attempts a
> day...
>
> rgds
>
> Franki

- -- 
"Our ship is in the hands of pilots who are steering directly under full sail 
for a rock.  The whole crew may see this course to violate our liberties in 
full view if they look the right way."
- --Samuel Adams, 1771
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/qmzYaKr9sJYeTxgRAvw5AKC1X9J7Q8F7Uj9hO8xT7PzqkhXgVACeM+DL
/bpeV2q63nI/8Ik9W9gXIzA=
=CsfW
-END PGP SIGNATURE-

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-06 Thread Stefan Rijnhart
Op donderdag 6 november 2003 06:18, schreef David E. Fox:
> Folks - especially postfix people - I need some help -
> my box seems to have been turned into an open relay. I am
> running the same postfix configuration file I had installed
> when I was running 9.0 and later versions (currently I
> am running 9.2/cooker)..
>
>
> I have not been able to post to the list or send out any
> smtp email until I fix this and in the meantime have
> simply flushed (deleted) the outgoing queue in /var/spool
> /postfix via
>
>   # find . /var/spool/postfix -type -f | xargs exec rm
>
> which (quickly) removes it. I removed many megabytes' worth
> of stuck email this way earlier today only to find that at
> 9 pm there was 4 megs more waiting and my isp admin had sent
> me a mail saying he disabled my smtp.
>
>
> I was under the impression postfix was relay proof - any
> advice will be helpful...
>
> Thanks!

Hi David,

Maybe my behaviour is a bit unmannered but I have ran some tests against your 
IP, to help you fix your box (We are talking about m206-157.dsl.tsoft.com, 
aren't we?)

Your postfix says:

554 <[EMAIL PROTECTED]>: Relay access denied. 

Seems ok.

Portscanner Nmap says:

Port   State   Service
21/tcp openftp 
22/tcp openssh 
25/tcp opensmtp
80/tcp openhttp
111/tcpopensunrpc  
135/tcpfilteredloc-srv 
137/tcpfilterednetbios-ns  
138/tcpfilterednetbios-dgm 
139/tcpfilterednetbios-ssn 
443/tcpopenhttps   
445/tcpfilteredmicrosoft-ds
631/tcpopenipp 
642/tcpopenunknown 
6000/tcp   openX11   

Do these ports corresond to the services that you want to offer? Otherwise, 
shield them off. Do you know how to work with shorewall to accomplish that?

Good luck,
Stefan.


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-06 Thread Lyvim Xaphir
On Thu, 2003-11-06 at 01:43, David Guntner wrote:
> Lyvim Xaphir grabbed a keyboard and wrote:
> >
> > On Thu, 2003-11-06 at 00:18, David E. Fox wrote:
> > > 
> > > I was under the impression postfix was relay proof - any
> > > advice will be helpful...
> 
> It pretty much is, as long as you didn't break something mucking around 
> with the configuration files.  "Out of the box," it has relaying turned 
> off.  You have to do things to it in order to open it up.  Check your 
> config files.
> 
> > My advice, which again will look like a cop-out, but in actuality is
> > very serious, is that you switch to qmail.  Vincent Danen, rpmhelp.net
> 
> Oh yea, qmail is great.  If you happen to like pain.
> 
> --Dave
> 
> (And yes, I've administered sites running qmail.  I'll take postfix every 
> time.)

Personally I've had zero trouble installing qmail and zero trouble
administering qmail.  Most of the complaints I've seen about qmail in my
own work experience have come from people that don't really know what
they are doing, or are too lazy to tackle a learning curve.

The fact is that postfix is not as secure as qmail.  This isn't a matter
that's up for arguability, it's a matter that is an established fact
based on bugtraq archives.  I've been monitoring the bugtraq mailing
list for over 5 years now and I have consistently seen postfix security
problems come up over and over again.  Qmail, on the other hand, has to
have made some kind of Guiness World record for NO security breaches or
problems; ever.  There have been problems with some of the patches that
people have submitted, but there have never been any security problems
with the core programs that were authored by Dan Bernstein.  I
personally have never seen a program with this kind of security record.

I know about the rivalry between postfix and qmail on the newsgroups. 
Based on  the information I have gained over the last 5 years, postfix
has had security problems and qmail has not.  Qmail has a pristine
operating history and postfix does not.  It's just that simple.


LX
-- 
°°°
Linux Mandrake 9.1  Kernel 2.4.21-0.13mdk
"Lets face it if winblowz wasn't full of holes
 then it would probably look like Linux"
-- Aron Smith, Mandrake OT mailing list
*Catch Star Trek Enterprise, Wednesdays on UPN*



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-06 Thread Franki

My advice, which again will look like a cop-out, but in actuality is
very serious, is that you switch to qmail.  Vincent Danen, rpmhelp.net
LX
No doubt about it, Qmail is a good package...

but postfix is pretty good also and it might be worth finding out what 
the problem is...

I have postfix setup here to process the mail for about 9 domains (and 
counting) and I've not had  a prob with open relay..
In fact my email log report shows about 30 odd failed relay attempts a 
day...

rgds

Franki

--
Please sign our petition to encourage notebook manufacturers to offer 
video card upgrades just like desktops.
http://www.petitiononline.com/inspiron/petition.html

For free scripts, online webmaster tools, HTML, XHTML, Perl & PHP 
tutorials and stuff, visit:
http://htmlfixit.com, Free web developer resources.


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-05 Thread David Guntner
Lyvim Xaphir grabbed a keyboard and wrote:
>
> On Thu, 2003-11-06 at 00:18, David E. Fox wrote:
> > 
> > I was under the impression postfix was relay proof - any
> > advice will be helpful...

It pretty much is, as long as you didn't break something mucking around 
with the configuration files.  "Out of the box," it has relaying turned 
off.  You have to do things to it in order to open it up.  Check your 
config files.

> My advice, which again will look like a cop-out, but in actuality is
> very serious, is that you switch to qmail.  Vincent Danen, rpmhelp.net

Oh yea, qmail is great.  If you happen to like pain.

--Dave

(And yes, I've administered sites running qmail.  I'll take postfix every 
time.)
-- 
  David Guntner  GEnie: Just say NO!
 http://www.akaMail.com/pgpkey/davidg or key server
 for PGP Public key


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help - my box has been compromised!

2003-11-05 Thread Lyvim Xaphir
On Thu, 2003-11-06 at 00:18, David E. Fox wrote:
> Folks - especially postfix people - I need some help - 
> my box seems to have been turned into an open relay. I am
> running the same postfix configuration file I had installed 
> when I was running 9.0 and later versions (currently I 
> am running 9.2/cooker)..
> 
> 
> I have not been able to post to the list or send out any
> smtp email until I fix this and in the meantime have
> simply flushed (deleted) the outgoing queue in /var/spool
> /postfix via 
> 
>   # find . /var/spool/postfix -type -f | xargs exec rm
> 
> which (quickly) removes it. I removed many megabytes' worth
> of stuck email this way earlier today only to find that at
> 9 pm there was 4 megs more waiting and my isp admin had sent
> me a mail saying he disabled my smtp.
> 
> 
> I was under the impression postfix was relay proof - any
> advice will be helpful...
> 
> Thanks!
> 

My advice, which again will look like a cop-out, but in actuality is
very serious, is that you switch to qmail.  Vincent Danen, rpmhelp.net

LX
-- 
°°°
Linux Mandrake 9.1  Kernel 2.4.21-0.13mdk
"Lets face it if winblowz wasn't full of holes
 then it would probably look like Linux"
-- Aron Smith, Mandrake OT mailing list
*Catch Star Trek Enterprise, Wednesdays on UPN*



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help on scripting

2003-11-05 Thread Fajar Priyanto
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Thanks Glenn, it works like charm! ;p
However, I wonder whether anyone here is familiar with MS Access?
Everytime I export some MS Access database, why the resulting text file always
truncate long records into 2 lines?
For example:
a
b <-- will be truncated into two lines, so:
c

a
b
b
c

Any idea how I overcome this?
Thanks.

On Thursday 06 November 2003 09:33 am, Glenn Burkhardt wrote:
> sed -e "s/$/#/" < text.txt > newtext.txt
>
> On Wednesday 05 November 2003 09:17 pm, Fajar Priyanto wrote:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA1
> >
> > Dear All,
> > Again, I'm pleading for your help.
> > I have this text file consisting:
> > ;
> > ;
> > ;
> >
> > I want to add "#" at the end of each line. How do I do that?
> > Thanks
> > - --

- -- 
Fajar http://linux.arinet.org
Linux mdk91.sistek.kom 2.4.21-0.13mdk GNU/Linux
12:39:58 up 5:11, 10 users, load average: 2.17, 0.91, 0.42
Quote of the day:
It's always a bad time for bills - especially phone bills and Bills Gates.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/qd7XMai9kCFqACoRAvzaAKDDTJoGQLYvJbtlKtVr4XmCRgVzAACffvmy
V3LH5xR8V1vxMtv6fwgPK20=
=Sx2F
-END PGP SIGNATURE-


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] Help - my box has been compromised!

2003-11-05 Thread David E. Fox

Folks - especially postfix people - I need some help - 
my box seems to have been turned into an open relay. I am
running the same postfix configuration file I had installed 
when I was running 9.0 and later versions (currently I 
am running 9.2/cooker)..


I have not been able to post to the list or send out any
smtp email until I fix this and in the meantime have
simply flushed (deleted) the outgoing queue in /var/spool
/postfix via 

  # find . /var/spool/postfix -type -f | xargs exec rm

which (quickly) removes it. I removed many megabytes' worth
of stuck email this way earlier today only to find that at
9 pm there was 4 megs more waiting and my isp admin had sent
me a mail saying he disabled my smtp.


I was under the impression postfix was relay proof - any
advice will be helpful...

Thanks!



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help on scripting

2003-11-05 Thread Glenn Burkhardt
sed -e "s/$/#/" < text.txt > newtext.txt


On Wednesday 05 November 2003 09:17 pm, Fajar Priyanto wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Dear All,
> Again, I'm pleading for your help.
> I have this text file consisting:
> ;
> ;
> ;
>
> I want to add "#" at the end of each line. How do I do that?
> Thanks
> - --


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] Help on scripting

2003-11-05 Thread Fajar Priyanto
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dear All,
Again, I'm pleading for your help.
I have this text file consisting:
;
;
;

I want to add "#" at the end of each line. How do I do that?
Thanks
- -- 
Fajar http://linux.arinet.org
Linux mdk91.sistek.kom 2.4.21-0.13mdk GNU/Linux
09:15:06 up 1:46, 10 users, load average: 0.55, 0.19, 0.10
Quote of the day:
How dare the government intervene to stifle innovation in the computer
industry! That's Microsoft's job, dammit!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/qa8qMai9kCFqACoRAlkjAJkB5TwjWoLGQiltSplYvivoPEi94wCgqFLu
lc93MPu5abQPBkCtezYyZlw=
=4osG
-END PGP SIGNATURE-


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help - my box might be a relay

2003-11-05 Thread James Sparenberg
On Wed, 2003-11-05 at 05:50, et wrote:
> do you run squid?
> 
> 
> On Wednesday 05 November 2003 06:23 am, David E. Fox wrote:
> > hey - help!
> >
> > it's seemingly apparent that in the last week or two there seems to
> > be an increasing number of mails of a dubious nature being sent to
> > a large number of bogus addresses by yours truly  :(.

David,

   The question I would have is are you actually sending them.  Meaning
if some of your less enhanced friends are running windows with one of
the many virus's on the market installed it could "appear" like you are
sending them when if fact you aren't.  Your only guilt in this case is
being in the other guys outhook excess address book.

James
> >
> > I'm not a spammer but it seems that my mailing system (postfix) is
> > misconfigured -- but I was under the impression that postfix was
> > relay-proof. I have seen evidence though of some chinese sites
> > "masquerading" as m206-157.dsl.tsoft.com, probably forging headers
> > somewhere along the line. It further seems that mail is injected here
> > and then attempts are made to send the sh*t off to other places.
> >
> > I have not gotten any complaints but as of now 22:30pm pst 11/4 there is
> > approximately 2.3 megabytes' worth of mail trying to get out.
> >
> > 1) I want to simply remove these messages. How do I do this? I have not yet
> > come across a queue removal program - like lprm - for mail. Can (or should)
> > I just delete all the files underneath
> > /var/spool/postfix/{defer,etc,deferred, etc} - i.e, keep the directory
> > structure intact but do somehting like
> >
> > find /var/spool/postfix -type f | xargs grep rm
> >
> > Is that dangerous?
> >
> > Secondly, using a fairly stock configuration for postfix, is there some-
> > thing I've missed? I can attach my configuration if needed. I have
> > basically kept the same one intact since I initially reinstalled 9.0
> > and upgraded to various levels of cooker over the past few months.
> >
> > HELP ;)
> >
> > 
> > David E. Fox  Thanks for letting me
> > [EMAIL PROTECTED]change magnetic patterns
> > [EMAIL PROTECTED]   on your hard disk.
> > ---
> 
> 
> 
> __
> Want to buy your Pack or Services from MandrakeSoft? 
> Go to http://www.mandrakestore.com


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help - my box might be a relay

2003-11-05 Thread et
do you run squid?


On Wednesday 05 November 2003 06:23 am, David E. Fox wrote:
> hey - help!
>
> it's seemingly apparent that in the last week or two there seems to
> be an increasing number of mails of a dubious nature being sent to
> a large number of bogus addresses by yours truly  :(.
>
> I'm not a spammer but it seems that my mailing system (postfix) is
> misconfigured -- but I was under the impression that postfix was
> relay-proof. I have seen evidence though of some chinese sites
> "masquerading" as m206-157.dsl.tsoft.com, probably forging headers
> somewhere along the line. It further seems that mail is injected here
> and then attempts are made to send the sh*t off to other places.
>
> I have not gotten any complaints but as of now 22:30pm pst 11/4 there is
> approximately 2.3 megabytes' worth of mail trying to get out.
>
> 1) I want to simply remove these messages. How do I do this? I have not yet
> come across a queue removal program - like lprm - for mail. Can (or should)
> I just delete all the files underneath
> /var/spool/postfix/{defer,etc,deferred, etc} - i.e, keep the directory
> structure intact but do somehting like
>
> find /var/spool/postfix -type f | xargs grep rm
>
> Is that dangerous?
>
> Secondly, using a fairly stock configuration for postfix, is there some-
> thing I've missed? I can attach my configuration if needed. I have
> basically kept the same one intact since I initially reinstalled 9.0
> and upgraded to various levels of cooker over the past few months.
>
> HELP ;)
>
> 
> David E. Fox  Thanks for letting me
> [EMAIL PROTECTED]change magnetic patterns
> [EMAIL PROTECTED]   on your hard disk.
> ---


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help - my box might be a relay

2003-11-05 Thread Bryan Phinney
On Wednesday 05 November 2003 01:23 am, David E. Fox wrote:
> hey - help!
>
> it's seemingly apparent that in the last week or two there seems to
> be an increasing number of mails of a dubious nature being sent to
> a large number of bogus addresses by yours truly  :(.

Do you have any bounces or copies of the messages with full headers intact?  
If so, I can help you to decipher exactly what systems those messages have 
gone through and possibly, their origination, be it a proxy or open system.

> I'm not a spammer but it seems that my mailing system (postfix) is
> misconfigured -- but I was under the impression that postfix was
> relay-proof. I have seen evidence though of some chinese sites
> "masquerading" as m206-157.dsl.tsoft.com, probably forging headers
> somewhere along the line. It further seems that mail is injected here
> and then attempts are made to send the sh*t off to other places.

Well, by default, Postfix will only originate mail for localhost.  That means 
that an account on the actual mail server would need to be used to originate 
mail if it were going to be sent out.   Is it possible that you inadvertently 
made some changes by adding a trusted IP range that caused your system to 
become open to relay?  Or, is is possible that a user account has been 
compromised that some person is using to inject mail?  Lastly, do you have 
any windows machines sharing the same connection and is is possible that they 
were compromised and are originating the mail with their own SMTP engine?

> I have not gotten any complaints but as of now 22:30pm pst 11/4 there is
> approximately 2.3 megabytes' worth of mail trying to get out.
>
> 1) I want to simply remove these messages. How do I do this? I have not yet
> come across a queue removal program - like lprm - for mail. Can (or should)
> I just delete all the files underneath
> /var/spool/postfix/{defer,etc,deferred, etc} - i.e, keep the directory
> structure intact but do somehting like
>
> find /var/spool/postfix -type f | xargs grep rm
>
> Is that dangerous?

If you have Webmin installed on your system, you should be able to use the 
control panel to look at the mail queue individually and cull out messages 
that you want to delete from those that are valid.  If you have a large 
number in the queue, it could be that postfix has actually caught those 
before they went out and prevented them from being sent.  You might be able 
to flush those automatically bouncing them back to the sender.

> Secondly, using a fairly stock configuration for postfix, is there some-
> thing I've missed? I can attach my configuration if needed. I have
> basically kept the same one intact since I initially reinstalled 9.0
> and upgraded to various levels of cooker over the past few months.

Attaching the config might be helpful.  If you have made changes from the 
default, there is no way to know how it is now configured without seeing it.
-- 
Bryan Phinney
Software Test Engineer


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help - my box might be a relay

2003-11-05 Thread Lyvim Xaphir
On Wed, 2003-11-05 at 01:23, David E. Fox wrote:
> hey - help!
> 
> it's seemingly apparent that in the last week or two there seems to
> be an increasing number of mails of a dubious nature being sent to
> a large number of bogus addresses by yours truly  :(.
> 
> I'm not a spammer but it seems that my mailing system (postfix) is
> misconfigured -- but I was under the impression that postfix was
> relay-proof. I have seen evidence though of some chinese sites 
> "masquerading" as m206-157.dsl.tsoft.com, probably forging headers
> somewhere along the line. It further seems that mail is injected here
> and then attempts are made to send the sh*t off to other places.
> 
> I have not gotten any complaints but as of now 22:30pm pst 11/4 there is
> approximately 2.3 megabytes' worth of mail trying to get out.
> 
> 1) I want to simply remove these messages. How do I do this? I have not yet
> come across a queue removal program - like lprm - for mail. Can (or should)
> I just delete all the files underneath /var/spool/postfix/{defer,etc,deferred,
> etc} - i.e, keep the directory structure intact but do somehting like
> 
> find /var/spool/postfix -type f | xargs grep rm
> 
> Is that dangerous?
> 
> Secondly, using a fairly stock configuration for postfix, is there some-
> thing I've missed? I can attach my configuration if needed. I have 
> basically kept the same one intact since I initially reinstalled 9.0
> and upgraded to various levels of cooker over the past few months.
> 
> HELP ;)
> 
> 
> David E. Fox  Thanks for letting me
> [EMAIL PROTECTED]change magnetic patterns
> [EMAIL PROTECTED]   on your hard disk.
> ---
> 


This will be a blatantly and obscenely obvious cop-out, but have you
ever tried qmail.

Cause IMO it's just better than the rest.  Just wondering... ;)

LX

P.S.  The new transmitter is in place. :)

-- 
°°°
Linux Mandrake 9.1  Kernel 2.4.21-0.13mdk
*Catch Star Trek Enterprise, Wednesdays on UPN*



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help - my box might be a relay

2003-11-05 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

David E. Fox wanted us to know:

>"masquerading" as m206-157.dsl.tsoft.com, probably forging headers
>somewhere along the line. It further seems that mail is injected here
>and then attempts are made to send the sh*t off to other places.
>I have not gotten any complaints but as of now 22:30pm pst 11/4 there is
>approximately 2.3 megabytes' worth of mail trying to get out.

Have you by any chance enabled SMTP AUTH?  If you have, and have any
accounts with very simple passwords (such as guest:guest), then they
very well could be using your box as a relay simply because you have
made it very easy for them to guess it.

If you have not enabled SMTP AUTH, then you most likely are looking for
some mistaken setting by yourself that enables "relay by domain."

If you like, post your /etc/postfix/main.cf and someone will look it
over and maybe find the issue.
- -- 
Blue skies...   Todd
| Get a bigger hammer!   |  A broken clock is right twice a day.  |
| http://www.mrball.net  |   --Steve Saitman  |
| http://faq.mrball.net  |   ...I don't even know what it is...   |
Linux kernel 2.4.22-12.tmb.1mdk   1 user,  load average: 0.00, 0.06, 0.22
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: http://www.mrball.net/todd.asc

iD8DBQE/qJ85IBT1264ScBURAkqUAKDC8pNJtnMcOKnEld6iGr4zDpcWSQCfXJJR
tdfRMWHW24EHOWGwSSBtSxc=
=e7jy
-END PGP SIGNATURE-

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help - my box might be a relay

2003-11-04 Thread Jack Coates
VGER says you're ok:
http://vger.kernel.org/cgi-bin/mxverify-cgi?DOMAIN=m206-157.dsl.tsoft.com&SUBMIT=Submit+to+VGER.KERNEL.ORG
Try this one too (gotta register though):
http://www.abuse.net/relay.html

To delete messages, man postsuper, see the -d option.

On Tue, 2003-11-04 at 22:23, David E. Fox wrote:
> hey - help!
> 
> it's seemingly apparent that in the last week or two there seems to
> be an increasing number of mails of a dubious nature being sent to
> a large number of bogus addresses by yours truly  :(.
> 
> I'm not a spammer but it seems that my mailing system (postfix) is
> misconfigured -- but I was under the impression that postfix was
> relay-proof. I have seen evidence though of some chinese sites 
> "masquerading" as m206-157.dsl.tsoft.com, probably forging headers
> somewhere along the line. It further seems that mail is injected here
> and then attempts are made to send the sh*t off to other places.
> 
> I have not gotten any complaints but as of now 22:30pm pst 11/4 there is
> approximately 2.3 megabytes' worth of mail trying to get out.
> 
> 1) I want to simply remove these messages. How do I do this? I have not yet
> come across a queue removal program - like lprm - for mail. Can (or should)
> I just delete all the files underneath /var/spool/postfix/{defer,etc,deferred,
> etc} - i.e, keep the directory structure intact but do somehting like
> 
> find /var/spool/postfix -type f | xargs grep rm
> 
> Is that dangerous?
> 
> Secondly, using a fairly stock configuration for postfix, is there some-
> thing I've missed? I can attach my configuration if needed. I have 
> basically kept the same one intact since I initially reinstalled 9.0
> and upgraded to various levels of cooker over the past few months.
> 
> HELP ;)
> 
> 
> David E. Fox  Thanks for letting me
> [EMAIL PROTECTED]change magnetic patterns
> [EMAIL PROTECTED]   on your hard disk.
> ---
> 
> 
> 
> 
> __
> Want to buy your Pack or Services from MandrakeSoft? 
> Go to http://www.mandrakestore.com
-- 
Jack Coates
Monkeynoodle: A Scientific Venture...


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] help - my box might be a relay

2003-11-04 Thread David E. Fox
hey - help!

it's seemingly apparent that in the last week or two there seems to
be an increasing number of mails of a dubious nature being sent to
a large number of bogus addresses by yours truly  :(.

I'm not a spammer but it seems that my mailing system (postfix) is
misconfigured -- but I was under the impression that postfix was
relay-proof. I have seen evidence though of some chinese sites 
"masquerading" as m206-157.dsl.tsoft.com, probably forging headers
somewhere along the line. It further seems that mail is injected here
and then attempts are made to send the sh*t off to other places.

I have not gotten any complaints but as of now 22:30pm pst 11/4 there is
approximately 2.3 megabytes' worth of mail trying to get out.

1) I want to simply remove these messages. How do I do this? I have not yet
come across a queue removal program - like lprm - for mail. Can (or should)
I just delete all the files underneath /var/spool/postfix/{defer,etc,deferred,
etc} - i.e, keep the directory structure intact but do somehting like

find /var/spool/postfix -type f | xargs grep rm

Is that dangerous?

Secondly, using a fairly stock configuration for postfix, is there some-
thing I've missed? I can attach my configuration if needed. I have 
basically kept the same one intact since I initially reinstalled 9.0
and upgraded to various levels of cooker over the past few months.

HELP ;)


David E. Fox  Thanks for letting me
[EMAIL PROTECTED]change magnetic patterns
[EMAIL PROTECTED]   on your hard disk.
---



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help for cups

2003-10-26 Thread stephlub
Le Lundi 20 Octobre 2003 10:57, stephlub a écrit :
> Le Lundi 20 Octobre 2003 10:37, Richard Bown a écrit :
> > Have you tried using the www cups config tool, and also  XPP .
> > These work well, also check port 631 is not blocked on your LAN by a
> > firewall
>
> I tried printerdrake cupsconf /etc/cups.conf and localhost:631
> By browser I had the welcome page and lost connection each time I clic a
> link futher.
>
> I think xpp is another frontend wich couldn't help more.
>
> I reset firewall before trying and ipp listen until `echo " "|lp`
lp: error - scheduler not responding!
I found a solution:

your server can't connect?
1   does your printer connected? (if no: do you know it needs paper to 
print?...)
:-/

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-22 Thread Albert Whale


Praedor Atrebates wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I have logged directly into my popmail server (yahoo) via the web and find 
that the spam message isn't being repeatedly sent - the same message is 
causing a problem over and over.  Yahoo tagged it as spam and put it in my 
bulk mail folder on their site.  When fetchmail retrieved messages, it would 
apparently have problems with that message and send me the error message 
email instead of the actual spam.  
 

fetchmail -a -K --antispam 550,451 -d 180 -f /etc/fetchmail...

If that doesn't work, you can always use the SPAM Zapper.  (sorry <--- 
Shameless plug).

--
Albert E. Whale, CISSP - Sr. Security, Network, and Systems Consultant

http://www.abs-comptech.com & http://www.No-JunkMail.com 
ABS Computer Technology, Inc. - ESM, Computer & Networking Specialists
SPAM Zapper - www.No-JunkMail.com - SPAM Stops Here.
Founding Board of Directors of Pittsburgh FBI - InfraGard



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help for cups

2003-10-21 Thread Rolf Pedersen
stephlub wrote:
Le Lundi 20 Octobre 2003 10:28, stephlub a écrit :

I know it's not the newbie list but I really need help to have a cups
server up and running quickly.
I spent hours with this and can't bypass the problem.
This is an 'ancient' Mandrake updated to 9.1 running on an an 'ancient',
and a 'm afraid I had to clean it an install new like other os do if nobody
can help me :-(
Pqd worked fine and one time I reach to print a leaf but until I reboot.

I tried to unistall/reinstall cups (erasing all the cups dir).
Printerdrake says it can't apply configuration and can't connect server,
both on the running linux and the update linux with CD.
[EMAIL PROTECTED] user]# service cups start
Launch CUPS :[  OK  ]
[EMAIL PROTECTED] user]# service cups status
cupsd (pid 8520) running...
[EMAIL PROTECTED] user]# echo ""|lp
lp: error - scheduler not responding!
[EMAIL PROTECTED] user]# service cups status
cupsd stopped
[EMAIL PROTECTED] useri]# lpadmin -p Printer
lpadmin: Unable to connect to server: Connection refused
[EMAIL PROTECTED] user]# lp
lp: error - scheduler not responding!
/var/log/cups/errors.log
d [20/Oct/2003:10:07:13 +0200] AcceptClient(0x8084570) 0 NumClients = 0
D [20/Oct/2003:10:07:13 +0200] AcceptClient() 5 from localhost:631.
d [20/Oct/2003:10:07:13 +0200] AcceptClient: Adding fd 5 to InputSet...
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
D [20/Oct/2003:10:07:13 +0200] ReadClient() 5 POST / HTTP/1.1
d [20/Oct/2003:10:07:13 +0200] decode_auth(0x4d57a008): Authorization
string = ""
d [20/Oct/2003:10:07:13 +0200] decode_auth() 5 username=""
d [20/Oct/2003:10:07:13 +0200] IsAuthorized: con->uri = "/"
d [20/Oct/2003:10:07:13 +0200] FindBest: uri = "/"...
d [20/Oct/2003:10:07:13 +0200] FindBest: Location / Limit 7f
d [20/Oct/2003:10:07:13 +0200] FindBest: Location /admin Limit 7f
d [20/Oct/2003:10:07:13 +0200] FindBest: Location CUPS_INTERNAL_BROWSE_ACL
Limit 0
d [20/Oct/2003:10:07:13 +0200] FindBest: best = "/"
d [20/Oct/2003:10:07:13 +0200] IsAuthorized: auth = 0, satisfy=0...
d [20/Oct/2003:10:07:13 +0200] POST /
d [20/Oct/2003:10:07:13 +0200] CONTENT_TYPE = application/ipp
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length,
con->data_remaining = 141, con->file = 0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length,
con->data_remaining = 133, con->file = 0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length,
con->data_remaining = 98, con->file = 0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length,
con->data_remaining = 61, con->file = 0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length,
con->data_remaining = 1, con->file = 0
d [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest(0x4d57a008[5]):
operation_id = 4002
d [20/Oct/2003:10:07:13 +0200] get_printers(0x4d57a008[5], 0)
D [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest: 5 status_code=1
d [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest: Adding fd 5 to
OutputSet... d [20/Oct/2003:10:07:13 +0200] WriteClient: Removing fd 5 from
OutputSet... d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
D [20/Oct/2003:10:07:13 +0200] CloseClient() 5


Is anyone can help me anymore before I clean my system? :-)

I think you already said you opened port 631 on your firewall? 
Otherwise, I don't know what the problem is but have you looked at the 
docs/forums at http://linuxprinting.org/ ?  Maybe a cc to till, 
[EMAIL PROTECTED] would get you his help.

Rolf


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help for cups

2003-10-21 Thread stephlub
Le Lundi 20 Octobre 2003 10:28, stephlub a écrit :
> I know it's not the newbie list but I really need help to have a cups
> server up and running quickly.
> I spent hours with this and can't bypass the problem.
> This is an 'ancient' Mandrake updated to 9.1 running on an an 'ancient',
> and a 'm afraid I had to clean it an install new like other os do if nobody
> can help me :-(
>
> Pqd worked fine and one time I reach to print a leaf but until I reboot.
>
> I tried to unistall/reinstall cups (erasing all the cups dir).
> Printerdrake says it can't apply configuration and can't connect server,
> both on the running linux and the update linux with CD.
>
>
> [EMAIL PROTECTED] user]# service cups start
> Launch CUPS :[  OK  ]
> [EMAIL PROTECTED] user]# service cups status
> cupsd (pid 8520) running...
> [EMAIL PROTECTED] user]# echo ""|lp
> lp: error - scheduler not responding!
> [EMAIL PROTECTED] user]# service cups status
> cupsd stopped
>
> [EMAIL PROTECTED] useri]# lpadmin -p Printer
> lpadmin: Unable to connect to server: Connection refused
> [EMAIL PROTECTED] user]# lp
> lp: error - scheduler not responding!
>
> /var/log/cups/errors.log
> d [20/Oct/2003:10:07:13 +0200] AcceptClient(0x8084570) 0 NumClients = 0
> D [20/Oct/2003:10:07:13 +0200] AcceptClient() 5 from localhost:631.
> d [20/Oct/2003:10:07:13 +0200] AcceptClient: Adding fd 5 to InputSet...
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> D [20/Oct/2003:10:07:13 +0200] ReadClient() 5 POST / HTTP/1.1
> d [20/Oct/2003:10:07:13 +0200] decode_auth(0x4d57a008): Authorization
> string = ""
> d [20/Oct/2003:10:07:13 +0200] decode_auth() 5 username=""
> d [20/Oct/2003:10:07:13 +0200] IsAuthorized: con->uri = "/"
> d [20/Oct/2003:10:07:13 +0200] FindBest: uri = "/"...
> d [20/Oct/2003:10:07:13 +0200] FindBest: Location / Limit 7f
> d [20/Oct/2003:10:07:13 +0200] FindBest: Location /admin Limit 7f
> d [20/Oct/2003:10:07:13 +0200] FindBest: Location CUPS_INTERNAL_BROWSE_ACL
> Limit 0
> d [20/Oct/2003:10:07:13 +0200] FindBest: best = "/"
> d [20/Oct/2003:10:07:13 +0200] IsAuthorized: auth = 0, satisfy=0...
> d [20/Oct/2003:10:07:13 +0200] POST /
> d [20/Oct/2003:10:07:13 +0200] CONTENT_TYPE = application/ipp
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length,
> con->data_remaining = 141, con->file = 0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length,
> con->data_remaining = 133, con->file = 0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length,
> con->data_remaining = 98, con->file = 0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length,
> con->data_remaining = 61, con->file = 0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length,
> con->data_remaining = 1, con->file = 0
> d [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest(0x4d57a008[5]):
> operation_id = 4002
> d [20/Oct/2003:10:07:13 +0200] get_printers(0x4d57a008[5], 0)
> D [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest: 5 status_code=1
> d [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest: Adding fd 5 to
> OutputSet... d [20/Oct/2003:10:07:13 +0200] WriteClient: Removing fd 5 from
> OutputSet... d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> D [20/Oct/2003:10:07:13 +0200] CloseClient() 5

Is anyone can help me anymore before I clean my system? :-)

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-20 Thread Bryan Phinney
On Monday 20 October 2003 03:23 pm, David Guntner wrote:
> Bryan Phinney grabbed a keyboard and wrote:
> > The fetchmail log should be telling you what the error code is from
> > Postfix but if I had to guess, I would say it is a 501, fetchmail
> > normally counts 55? codes as spam rejects by default.
>
> Not on *my* system, it didn't. :-)  I had to put it in to cause fetchmail
> to behave itself when running into those.

I think that you have to up the logging level on fetchmail to get all the 
details.  When troubleshooting the messages that were left on the ISP, I did 
up the detail level.

However, on my system, the error code is definitely 501 and not 554 for 
malformed addresses, although you can change it in the postfix configuration.  

-- 
Bryan Phinney
Software Test Engineer


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-20 Thread David Guntner
Bryan Phinney grabbed a keyboard and wrote:
> 
> The fetchmail log should be telling you what the error code is from Postfix 
> but if I had to guess, I would say it is a 501, fetchmail normally counts 55? 
> codes as spam rejects by default.

Not on *my* system, it didn't. :-)  I had to put it in to cause fetchmail 
to behave itself when running into those.

> Line should show:
> 
> poll mail.whatever.com with proto whatever
>   user '[EMAIL PROTECTED]' there with password 'password' is 'localuser' here
>   antispam 554,550,501

Just a note for anyone reading:  The "user" part above is for how you 
normally login to your POP or IMAP server to retrieve your mail.  If you're 
using an ISP that has a login method of using your E-Mail address with 
them, then [EMAIL PROTECTED] is correct.  If you're using a server that just 
requires a username, *don't* add the @domain.com part (I.E. don't use your 
address to login unless your provider requres that as your login).

> Add that line and you should no longer see those errors or have misconfigured 
> spam piling up in your inbox.  Only other way that I know of is to run 
> Fetchmail configured to flush the box which removes all messages that were 
> seen but no delivered.  This is dangerous and could result in your losing 
> messages due to Postfix being down when fetchmail tries to pick up mail.  
> Another option is to periodically run fetchmail to pick up mail, then reload 
> fetchmail in flush mode to flush misconfigured messages, then rerun fetchmail 
> in normal mode.  You could do this once a week but in the meantime would get 
> all those errors in your syslog.  Last option is to simply bitbucket all 
> fetchmail-daemon notifications with procmail.

That last option is kinda dangerous, though. :-)  If you got other 
fetchmail errors, you would never know about them  (Not saying don't do 
it if it's really needed, just be aware... :)

 --Dave
-- 
  David Guntner  GEnie: Just say NO!
 http://www.akaMail.com/pgpkey/davidg or key server
 for PGP Public key


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-20 Thread David Guntner
Praedor Atrebates grabbed a keyboard and wrote:
> 
> I have logged directly into my popmail server (yahoo) via the web and find 
> that the spam message isn't being repeatedly sent - the same message is 
> causing a problem over and over.  Yahoo tagged it as spam and put it in my 
> bulk mail folder on their site.  When fetchmail retrieved messages, it would 
> apparently have problems with that message and send me the error message 
> email instead of the actual spam.  
> 
> I am not sure why...is there a way to fix fetchmail so it wont do this 
> anymore?  Instead of having a problem with a message and sending me a 
> bazillion error messages every time it sees the undelivered/undeliverable 
> message/spam, can I not just set fetchmail to dump the message?  

Yes, if fetchmail sees an error from your local MTA, it tends to not delete 
the message from the remote site, because it thinks there's a problem.  You 
*can* tell it what a spam reject on your local MTA is, however.

For example, I've got a few checks at the postfix level that will reject a 
detected spam message before it ever *gets* to the user's mailbox.  As 
such, spamassassin isn't coming into play yet.  Spam that it detects, it 
rejects with a 550 error code.  You can tell fetchmail that a given error 
code (or range of codes) is a spam reject and to not attempt redelivery 
(I.E., it will go ahead and delete the message from the remote server).  
Here's what I have in my .fetchmailrc to do this:

set postmaster "postmaster"
set bouncemail
set no spambounce
set properties ""
poll  with proto IMAP
   user '' there with password '' is '' here
antispam 550


That last line ("antispam 550") tells it that a 550 code coming from 
postfix on my machine is a spam reject.  It will then quietly delete the 
message from the far end as though it had delivered it.  Try putting in the 
reject code that you're seeing at your end from your local 
postfix/qmail/sendmail daemon, and see if that helps.

--Dave
-- 
  David Guntner  GEnie: Just say NO!
 http://www.akaMail.com/pgpkey/davidg or key server
 for PGP Public key


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-20 Thread Bryan Phinney
On Monday 20 October 2003 11:52 am, Praedor Atrebates wrote:
> Thank you, that appears to have done the trick.
>
> I was getting filled up with a new spam, producing the same type of
> message, but adding that line to fetchmailrc did the trick.  It is gone.
>
> I was getting quite angry and frustrated with this nonsense.
>
> Until a few days ago, I didn't receive any sort of message like this.  Spam
> came in and was dumped into /dev/null via spamd and procmail.  Nothing was
> getting through.  These messages weren't getting through, per se, but they
> were certainly causing just as much problems as normal spam by filling my
> box with error messages.  What's up with the misconfigured messages all of
> a sudden?  Why wouldn't I have run into this before now?  Is something new
> going on (the originating IP was completely different, as was the Subject,
> than the previous viagra garbage)

Well, again just a guess, but a little while ago, you were complaining about 
the amount of time that it was taking to route mail from Kmail through SA for 
filtering and I (perhaps others) suggested that you use Postfix and procmail 
instead so that you could process in the background.  Postfix is the culprit 
here since Postfix is denying delivery of improperly formatted and addressed 
messages.  Personally, I think that this is a good thing, although you can 
configure Postfix to not check and just deliver messages regardless of 
formatting.

My guess would be that Kmail or whatever other client you were using does not 
check format or syntax but just makes a "best guess" as to the recipient 
based upon whatever info is there.  Because there is no validation, there was 
no error and therefore all messages were delivered.  Personally, I think that 
you are in better shape now, improperly formatted messages are almost always 
going to be generated by crappy spamware rather than real mail clients and 
servers, so deleting them sight unseen is in your best interest given that 
you are filtering.

As to why it took several days, only the crappiest spamware and dumbest 
spammers generate such messages since ISP's often bounce them themselves so 
you may have just not run into any of them in that time.  My own versions 
were rare as well, I got perhaps 2 such improper messages per month.

-- 
Bryan Phinney
Software Test Engineer


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-20 Thread Praedor Atrebates
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Thank you, that appears to have done the trick.

I was getting filled up with a new spam, producing the same type of message, 
but adding that line to fetchmailrc did the trick.  It is gone.  

I was getting quite angry and frustrated with this nonsense.

Until a few days ago, I didn't receive any sort of message like this.  Spam 
came in and was dumped into /dev/null via spamd and procmail.  Nothing was 
getting through.  These messages weren't getting through, per se, but they 
were certainly causing just as much problems as normal spam by filling my box 
with error messages.  What's up with the misconfigured messages all of a 
sudden?  Why wouldn't I have run into this before now?  Is something new 
going on (the originating IP was completely different, as was the Subject, 
than the previous viagra garbage)



On Monday 20 October 2003 08:49 am, Bryan Phinney wrote:
> On Monday 20 October 2003 09:11 am, Praedor Atrebates wrote:
> 
>
> Okay, we don't see the Postfix error code but based upon the text of the
> message, my guess is that Postfix is rejecting this message upon the
> delivery attempt by Fetchmail, fetchmail is then sending a failure message
> to let you know but the message is not being deleted so upon the next poll
> attempt, it tries to deliver the message again.
>
> The fetchmail log should be telling you what the error code is from Postfix
> but if I had to guess, I would say it is a 501, fetchmail normally counts
> 55? codes as spam rejects by default.
[...]
- -- 
"Our ship is in the hands of pilots who are steering directly under full sail 
for a rock.  The whole crew may see this course to violate our liberties in 
full view if they look the right way."
- --Samuel Adams, 1771
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/lATRaKr9sJYeTxgRAgZcAJ47HY0Hu5Mw5Pi/Hcgw3qWy3540yQCgn6yh
EA+nw2VbFFmOhU2ta0x/IoE=
=JDnX
-END PGP SIGNATURE-

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-20 Thread Bryan Phinney
On Monday 20 October 2003 09:38 am, Praedor Atrebates wrote:
> I have logged directly into my popmail server (yahoo) via the web and find
> that the spam message isn't being repeatedly sent - the same message is
> causing a problem over and over.  Yahoo tagged it as spam and put it in my
> bulk mail folder on their site.  When fetchmail retrieved messages, it
> would apparently have problems with that message and send me the error
> message email instead of the actual spam.
>
> I am not sure why...is there a way to fix fetchmail so it wont do this
> anymore?  Instead of having a problem with a message and sending me a
> bazillion error messages every time it sees the undelivered/undeliverable
> message/spam, can I not just set fetchmail to dump the message?
>
> If I had not logged directly into the yahoo webmail site and deleted the
> spam message there, fetchmail would continue generating that annoying
> message forever, procmail would have had to process that same message
> forever, and yet the original message would still exist on the server.  For
> the moment, I have elected to turn off yahoo's spamguard and let my system
> handle the crap and hope that whatever the problem was, it will now be
> handled properly and directly on my end.

That probably won't help.  Your Postfix system is configured to reject with an 
error, misconfigured messages regardless of the source.  Whether they are in 
your regular inbox or in the bulk folder, they will still be rejected if they 
are not configured correctly.  The only way to fix it permanently is to 
instruct fetchmail to discard messages when it receives an error code from 
Postfix.  That will drop the message sight unseen from the pop mailbox and is 
exactly what I do after getting much the same behavior from dopey 
misconfigured spam messages.

-- 
Bryan Phinney
Software Test Engineer


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-20 Thread Bryan Phinney
On Monday 20 October 2003 09:11 am, Praedor Atrebates wrote:


Okay, we don't see the Postfix error code but based upon the text of the 
message, my guess is that Postfix is rejecting this message upon the delivery 
attempt by Fetchmail, fetchmail is then sending a failure message to let you 
know but the message is not being deleted so upon the next poll attempt, it 
tries to deliver the message again.

The fetchmail log should be telling you what the error code is from Postfix 
but if I had to guess, I would say it is a 501, fetchmail normally counts 55? 
codes as spam rejects by default.

So, one way to deal with this is to add the 501 error message to your 
fetchmail config file as a spam reject, in which case, it will delete the 
message from the server.  That is what I do for my accounts since I don't 
want to receive improperly formatted or addressed messages anyway.  Your 
mileage may vary.

Under your poll line in .fetchmailrc, add the option

antispam 554,550,501

Line should show:

poll mail.whatever.com with proto whatever
user '[EMAIL PROTECTED]' there with password 'password' is 'localuser' here
antispam 554,550,501

Add that line and you should no longer see those errors or have misconfigured 
spam piling up in your inbox.  Only other way that I know of is to run 
Fetchmail configured to flush the box which removes all messages that were 
seen but no delivered.  This is dangerous and could result in your losing 
messages due to Postfix being down when fetchmail tries to pick up mail.  
Another option is to periodically run fetchmail to pick up mail, then reload 
fetchmail in flush mode to flush misconfigured messages, then rerun fetchmail 
in normal mode.  You could do this once a week but in the meantime would get 
all those errors in your syslog.  Last option is to simply bitbucket all 
fetchmail-daemon notifications with procmail.

Again, all of this is just a guess on my part without having access to the 
logs running at a sufficient detail level to record the actual error.  The 
changes I have suggested will only result in your dropping messages that are 
not correctly configured or addressed or coming from valid hosts.

-- 
Bryan Phinney
Software Test Engineer


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-20 Thread Praedor Atrebates
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I have logged directly into my popmail server (yahoo) via the web and find 
that the spam message isn't being repeatedly sent - the same message is 
causing a problem over and over.  Yahoo tagged it as spam and put it in my 
bulk mail folder on their site.  When fetchmail retrieved messages, it would 
apparently have problems with that message and send me the error message 
email instead of the actual spam.  

I am not sure why...is there a way to fix fetchmail so it wont do this 
anymore?  Instead of having a problem with a message and sending me a 
bazillion error messages every time it sees the undelivered/undeliverable 
message/spam, can I not just set fetchmail to dump the message?  

If I had not logged directly into the yahoo webmail site and deleted the spam 
message there, fetchmail would continue generating that annoying message 
forever, procmail would have had to process that same message forever, and 
yet the original message would still exist on the server.  For the moment, I 
have elected to turn off yahoo's spamguard and let my system handle the crap 
and hope that whatever the problem was, it will now be handled properly and 
directly on my end.

praedor

On Monday 20 October 2003 08:11 am, Praedor Atrebates wrote:
> Here is the syslog entry associated with this repetitive spam (based on the
> [EMAIL PROTECTED] message):
[...]

- -- 
"Our ship is in the hands of pilots who are steering directly under full sail 
for a rock.  The whole crew may see this course to violate our liberties in 
full view if they look the right way."
- --Samuel Adams, 1771
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/k+U7aKr9sJYeTxgRAvNLAJ4zkDU27NeHrRL2x5z+0qhMCJYM1gCfeqPc
l+1tKsfpMsF32BSJ1UCh9ew=
=KVn6
-END PGP SIGNATURE-

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-20 Thread Praedor Atrebates
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Here is the syslog entry associated with this repetitive spam (based on the 
[EMAIL PROTECTED] message):

^[[B^[[BOct 20 08:57:26 lapdog postfix/smtpd[9542]: connect from 
localhost.localdomain[127.0.0.1]
Oct 20 08:57:26 lapdog postfix/smtpd[9542]: warning: Illegal address syntax 
from localhost.localdomain[127.0.0.1] in MAIL command: 

Oct 20 08:57:27 lapdog postfix/smtpd[9543]: connect from 
localhost.localdomain[127.0.0.1]
Oct 20 08:57:27 lapdog postfix/smtpd[9543]: 6E5C86F97: 
client=localhost.localdomain[127.0.0.1]
Oct 20 08:57:27 lapdog postfix/cleanup[9544]: 6E5C86F97: 
message-id=<[EMAIL PROTECTED]>
Oct 20 08:57:27 lapdog postfix/nqmgr[1657]: 6E5C86F97: 
from=<[EMAIL PROTECTED]>, size=2068, nrcpt=1 (queue 
active)
Oct 20 08:57:27 lapdog postfix/smtpd[9543]: disconnect from 
localhost.localdomain[127.0.0.1]
Oct 20 08:57:28 lapdog postfix/smtpd[9542]: disconnect from 
localhost.localdomain[127.0.0.1]

Here is the message I see in full, separated into headers and message body:

Headers:

Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (localhost.localdomain [127.0.0.1])
by lapdog.ravenhome.net (Postfix) with ESMTP id 64EB36F36
for <[EMAIL PROTECTED]>; Mon, 20 Oct 2003 09:00:30 -0400 (EDT)
X-Apparently-To: [EMAIL PROTECTED] via 216.136.173.225; Mon, 20 Oct 2003 
05:57:26 -0700
Received: from pop.vip.sc5.yahoo.com [216.136.173.10]
by localhost with POP3 (fetchmail-6.2.1)
for [EMAIL PROTECTED] (single-drop); Mon, 20 Oct 2003 08:00:30 -0500 
(EST)
Received: from 128.210.210.51  (EHLO lapdog.ravenhome.net) (128.210.210.51)
  by mta104.mail.scd.yahoo.com with SMTP; Mon, 20 Oct 2003 05:57:26 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by lapdog.ravenhome.net (Postfix) with SMTP id 6E5C86F97
for ; Mon, 20 Oct 2003 08:57:27 -0400 (EDT)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/report;
  report-type=delivery-status;
  boundary="foo-mani-padme-hum-1777-1-1066654647"
Message-Id: <[EMAIL PROTECTED]>
Date: Mon, 20 Oct 2003 08:57:27 -0400 (EDT)
X-Spam-Status: No, hits=1.2 required=5.0
tests=MAILTO_TO_SPAM_ADDR,NO_REAL_NAME
version=2.54
X-Spam-Level: *
X-Spam-Checker-Version: SpamAssassin 2.54 (1.174.2.17-2003-05-11-exp)
Status: R 
X-Status: N
X-KMail-EncryptionState:  
X-KMail-SignatureState:  

End of Headers.

Message body:

General SMTP/ESMTP error.

 

X-Apparently-To: [EMAIL PROTECTED] via 216.136.173.226; Fri, 17 Oct 2003 
22:52:58 -0700
X-YahooFilteredBulk: 24.61.30.135
Received: from 24.61.30.135  (HELO 67.164.237.213) (24.61.30.135)
  by mta154.mail.scd.yahoo.com with SMTP; Fri, 17 Oct 2003 22:52:58 -0700
Received: from [177.34.196.8] by f64.law4.hotmail.com with NNFMP; Oct, 18 2003 
12:36:28 AM -0200
Received: from 105.183.205.243 ([105.183.205.243]) by smtp-server1.cfl.rr.com 
with QMQP; Oct, 17 2003 11:27:32 PM +1200
From: uvnRuth Cawdell <[EMAIL PROTECTED]>
To: Undisclosed [EMAIL PROTECTED]
Cc: 
[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL 
PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL 
PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED]
Subject: Presription Meds givp
Sender: uvnRuth Cawdell <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Date: Sat, 18 Oct 2003 01:54:51 -0400
X-Mailer: Microsoft Outlook Build 10.0.2627

End of message body.

Here is the actual spam file contents attached to the above message:

Reporting-MTA: dns; localhost

Final-Recipient: rfc822; [EMAIL PROTECTED]
Last-Attempt-Date: Mon, 20 Oct 2003 07:57:27 -0500 (EST)
Action: failed
Status: 5.0.0
Diagnostic-Code: 501 Bad address syntax

End of misconfigured spam.

I get a new one of these every time my fetchmail daemon contacts my ISP pop 
mail server.  I can eliminate the messages if I add this to my 
/etc/procmailrc (I run it globally):

:0
* [EMAIL PROTECTED]
/dev/null

When I have tried to key off components of the message, such as 
"X-YahooFilteredBulk: 24.61.30.135" or variations I still get the message.  
Spamassassin doesn't catch this message as it is screwed up (it gives a 
1.2/5.0, far below what would be needed to identify it as spam and get 
/dev/nulled by my other procmailrc recipe (which is working fine):

:0
* ^X-Spam-Status: Yes
/dev/null

As it is, EVERY time I hear the tone indicating new messages, I am absolutely 
certain to see more of these messages unless I /dev/null anything from 
fetchmail-daemon, which seems rather problematic - there may be messages from 
the daemon I would be interested in receiving.

praedor 
 
On Monday 20 October 2003 05:59 am, Bryan Phinney wrote:
> On Sunday 19 October 2003 09:17 pm, Praedor Atrebates wrote:
> > I have receive over 100 of these today alone.  Nothing i've tried with
> > procmail recipes has wo

Re: [expert] Help please! Cannot stop this spam

2003-10-20 Thread Bryan Phinney
On Sunday 19 October 2003 09:17 pm, Praedor Atrebates wrote:
> I have receive over 100 of these today alone.  Nothing i've tried with
> procmail recipes has worked.  I cannot stop this nonsense.  The from
> address is my own fetchmail-daemon:
> [EMAIL PROTECTED]
>
> I am considering having all fetchmail-daemon emails sent to dev/null but
> fear the repercussions.

You should probably try to see what the exact message is.  If Fetchmail is 
encountering an error, you may need to fix the error.  For instance, my 
Postfix mail server is set to reject messages with invalid From headers and 
sometimes malformed spam is sent to my ISP mailbox with just such invalid 
headers.  Since the ISP mail server is not as picky, Fetchmail tries to 
deliver to Postfix which rejects the message and then Fetchmail, doesn't 
delete the message because it did not recieve an ack from the mail server.  
It will try to do this repeatedly until the message is cleared.

If you know what is causing the problem, you can instruct Fetchmail to regard 
the error code generated by Postfix as a bounce and then Fetchmail will 
discard the message. Your message may be something similar.

Why not attach a copy so that we can see it?

-- 
Bryan Phinney
Software Test Engineer


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help for cups

2003-10-20 Thread stephlub
Le Lundi 20 Octobre 2003 10:37, Richard Bown a écrit :
> Have you tried using the www cups config tool, and also  XPP .
> These work well, also check port 631 is not blocked on your LAN by a
> firewall

I tried printerdrake cupsconf /etc/cups.conf and localhost:631
By browser I had the welcome page and lost connection each time I clic a link 
futher.

I think xpp is another frontend wich couldn't help more.

I reset firewall before trying and ipp listen until `echo " "|lp`

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help for cups

2003-10-20 Thread Richard Bown
Have you tried using the www cups config tool, and also  XPP .
These work well, also check port 631 is not blocked on your LAN by a
firewall

HTH Richard

On Mon, 2003-10-20 at 09:28, stephlub wrote:
> I know it's not the newbie list but I really need help to have a cups server 
> up and running quickly.
> I spent hours with this and can't bypass the problem.
> This is an 'ancient' Mandrake updated to 9.1 running on an an 'ancient', and a 
> 'm afraid I had to clean it an install new like other os do if nobody can 
> help me :-( 
> 
> Pqd worked fine and one time I reach to print a leaf but until I reboot.
> 
> I tried to unistall/reinstall cups (erasing all the cups dir).
> Printerdrake says it can't apply configuration and can't connect server, both 
> on the running linux and the update linux with CD.
> 
> 
> [EMAIL PROTECTED] user]# service cups start
> Launch CUPS :[  OK  ]
> [EMAIL PROTECTED] user]# service cups status
> cupsd (pid 8520) running...
> [EMAIL PROTECTED] user]# echo ""|lp
> lp: error - scheduler not responding!
> [EMAIL PROTECTED] user]# service cups status
> cupsd stopped
> 
> [EMAIL PROTECTED] useri]# lpadmin -p Printer
> lpadmin: Unable to connect to server: Connection refused
> [EMAIL PROTECTED] user]# lp
> lp: error - scheduler not responding!
> 
> /var/log/cups/errors.log
> d [20/Oct/2003:10:07:13 +0200] AcceptClient(0x8084570) 0 NumClients = 0
> D [20/Oct/2003:10:07:13 +0200] AcceptClient() 5 from localhost:631.
> d [20/Oct/2003:10:07:13 +0200] AcceptClient: Adding fd 5 to InputSet...
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> D [20/Oct/2003:10:07:13 +0200] ReadClient() 5 POST / HTTP/1.1
> d [20/Oct/2003:10:07:13 +0200] decode_auth(0x4d57a008): Authorization string = 
> ""
> d [20/Oct/2003:10:07:13 +0200] decode_auth() 5 username=""
> d [20/Oct/2003:10:07:13 +0200] IsAuthorized: con->uri = "/"
> d [20/Oct/2003:10:07:13 +0200] FindBest: uri = "/"...
> d [20/Oct/2003:10:07:13 +0200] FindBest: Location / Limit 7f
> d [20/Oct/2003:10:07:13 +0200] FindBest: Location /admin Limit 7f
> d [20/Oct/2003:10:07:13 +0200] FindBest: Location CUPS_INTERNAL_BROWSE_ACL 
> Limit 0
> d [20/Oct/2003:10:07:13 +0200] FindBest: best = "/"
> d [20/Oct/2003:10:07:13 +0200] IsAuthorized: auth = 0, satisfy=0...
> d [20/Oct/2003:10:07:13 +0200] POST /
> d [20/Oct/2003:10:07:13 +0200] CONTENT_TYPE = application/ipp
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length, 
> con->data_remaining = 141, con->file = 0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length, 
> con->data_remaining = 133, con->file = 0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length, 
> con->data_remaining = 98, con->file = 0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length, 
> con->data_remaining = 61, con->file = 0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length, 
> con->data_remaining = 1, con->file = 0
> d [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest(0x4d57a008[5]): operation_id 
> = 4002
> d [20/Oct/2003:10:07:13 +0200] get_printers(0x4d57a008[5], 0)
> D [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest: 5 status_code=1
> d [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest: Adding fd 5 to OutputSet...
> d [20/Oct/2003:10:07:13 +0200] WriteClient: Removing fd 5 from OutputSet...
> d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
> D [20/Oct/2003:10:07:13 +0200] CloseClient() 5
> 
> 
> 
> __
> Want to buy your Pack or Services from MandrakeSoft? 
> Go to http://www.mandrakestore.com
-- 
Richard Bown <[EMAIL PROTECTED]>


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] help for cups

2003-10-20 Thread stephlub
I know it's not the newbie list but I really need help to have a cups server 
up and running quickly.
I spent hours with this and can't bypass the problem.
This is an 'ancient' Mandrake updated to 9.1 running on an an 'ancient', and a 
'm afraid I had to clean it an install new like other os do if nobody can 
help me :-( 

Pqd worked fine and one time I reach to print a leaf but until I reboot.

I tried to unistall/reinstall cups (erasing all the cups dir).
Printerdrake says it can't apply configuration and can't connect server, both 
on the running linux and the update linux with CD.


[EMAIL PROTECTED] user]# service cups start
Launch CUPS :[  OK  ]
[EMAIL PROTECTED] user]# service cups status
cupsd (pid 8520) running...
[EMAIL PROTECTED] user]# echo ""|lp
lp: error - scheduler not responding!
[EMAIL PROTECTED] user]# service cups status
cupsd stopped

[EMAIL PROTECTED] useri]# lpadmin -p Printer
lpadmin: Unable to connect to server: Connection refused
[EMAIL PROTECTED] user]# lp
lp: error - scheduler not responding!

/var/log/cups/errors.log
d [20/Oct/2003:10:07:13 +0200] AcceptClient(0x8084570) 0 NumClients = 0
D [20/Oct/2003:10:07:13 +0200] AcceptClient() 5 from localhost:631.
d [20/Oct/2003:10:07:13 +0200] AcceptClient: Adding fd 5 to InputSet...
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
D [20/Oct/2003:10:07:13 +0200] ReadClient() 5 POST / HTTP/1.1
d [20/Oct/2003:10:07:13 +0200] decode_auth(0x4d57a008): Authorization string = 
""
d [20/Oct/2003:10:07:13 +0200] decode_auth() 5 username=""
d [20/Oct/2003:10:07:13 +0200] IsAuthorized: con->uri = "/"
d [20/Oct/2003:10:07:13 +0200] FindBest: uri = "/"...
d [20/Oct/2003:10:07:13 +0200] FindBest: Location / Limit 7f
d [20/Oct/2003:10:07:13 +0200] FindBest: Location /admin Limit 7f
d [20/Oct/2003:10:07:13 +0200] FindBest: Location CUPS_INTERNAL_BROWSE_ACL 
Limit 0
d [20/Oct/2003:10:07:13 +0200] FindBest: best = "/"
d [20/Oct/2003:10:07:13 +0200] IsAuthorized: auth = 0, satisfy=0...
d [20/Oct/2003:10:07:13 +0200] POST /
d [20/Oct/2003:10:07:13 +0200] CONTENT_TYPE = application/ipp
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length, 
con->data_remaining = 141, con->file = 0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length, 
con->data_remaining = 133, con->file = 0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length, 
con->data_remaining = 98, con->file = 0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length, 
con->data_remaining = 61, con->file = 0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5 con->data_encoding = length, 
con->data_remaining = 1, con->file = 0
d [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest(0x4d57a008[5]): operation_id 
= 4002
d [20/Oct/2003:10:07:13 +0200] get_printers(0x4d57a008[5], 0)
D [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest: 5 status_code=1
d [20/Oct/2003:10:07:13 +0200] ProcessIPPRequest: Adding fd 5 to OutputSet...
d [20/Oct/2003:10:07:13 +0200] WriteClient: Removing fd 5 from OutputSet...
d [20/Oct/2003:10:07:13 +0200] ReadClient() 5, used=0
D [20/Oct/2003:10:07:13 +0200] CloseClient() 5


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help please! Cannot stop this spam

2003-10-19 Thread Kwan Lowe

> I have receive over 100 of these today alone.  Nothing i've tried with
> procmail recipes has worked.  I cannot stop this nonsense.  The from
> address
> is my own fetchmail-daemon:
> [EMAIL PROTECTED]
>
> I am considering having all fetchmail-daemon emails sent to dev/null but
> fear
> the repercussions.
>

What recipe are you using? If it's coming from the same daemon just match
on the sender field.  What is the text of the message? Is it real spam or
just a fetchmail process that's wonked?

A few other ideas:
If you're running fetchmail via a cron job (i.e., no daemonized) then try
sending errors to /dev/null.

Stop it at your reader..

Add a spamassassin rule.

-- 
The Digital Hermit  Unix and Linux Solutions
http://www.digitalhermit.com
[EMAIL PROTECTED]

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] Help please! Cannot stop this spam

2003-10-19 Thread Praedor Atrebates
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I have receive over 100 of these today alone.  Nothing i've tried with 
procmail recipes has worked.  I cannot stop this nonsense.  The from address 
is my own fetchmail-daemon:
[EMAIL PROTECTED]

I am considering having all fetchmail-daemon emails sent to dev/null but fear 
the repercussions.

- -- 
Faith is the very antithesis of reason, injudiciousness a critical component 
of spiritual devotion.
- --Krakauer
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/kze0b1CLurEA6xURAgneAKCrjrCK439cSzwvoCs13y8hphlrYQCfUo7p
3xd7h2Y/mh7xlIGI1nafR9I=
=7Qd3
-END PGP SIGNATURE-

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help with ProFTP

2003-10-17 Thread Ricardo (Tru64 User)
The home dir setup can be in /etc/passwd for
anonymous(ftp)user

Or the directive 

Read::
http://proftpd.linux.co.uk/localsite/Userguide/linked/config_ref_Anonymous.html

_Thanks

Richard MOllel

--- "J.P. Pasnak" <[EMAIL PROTECTED]> wrote:
> 
> Rodrigo said:
> 
> > Dear experts ...
> > How I can change root directory for anonymous user
> ??
> > /etc/passwd  ???
> >
> > I have some "permisions" messages when I change
> the passwd file ...
> >
> > links to Admin's documentations  ?
> >
> > Rodrigo S
> > DFG, UCH
> >
> 
> IIRC, there is a '/etc/proftpd-anonymous.conf' file.
>   Change it there.
> 
> -- 
> Live fast, die young,
> You're sucking up my bandwidth.
> 
> J.P. Pasnak, CD
> CCNA
> http://www.warpedsystems.sk.ca
> 
> > Want to buy your Pack or Services from
MandrakeSoft?
> 
> Go to http://www.mandrakestore.com
> 


__
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help with ProFTP

2003-10-16 Thread J.P. Pasnak

Rodrigo said:

> Dear experts ...
> How I can change root directory for anonymous user ??
> /etc/passwd  ???
>
> I have some "permisions" messages when I change the passwd file ...
>
> links to Admin's documentations  ?
>
> Rodrigo S
> DFG, UCH
>

IIRC, there is a '/etc/proftpd-anonymous.conf' file.   Change it there.

-- 
Live fast, die young,
You're sucking up my bandwidth.

J.P. Pasnak, CD
CCNA
http://www.warpedsystems.sk.ca

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] Help with ProFTP

2003-10-16 Thread Rodrigo
Dear experts ...
How I can change root directory for anonymous user ??
/etc/passwd  ???
I have some "permisions" messages when I change the passwd file ...

links to Admin's documentations  ?

Rodrigo S
DFG, UCH

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! Something's wack with my mailserver

2003-10-14 Thread Praedor Atrebates
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Actually, I do own my domains.  I have been trying to get email from my 
postfix to be @ravenhome.net instead of the 
@localhost.ravenhome.net but apparently in trying to fix this one 
simple thing, it prevented my system from working properly.  I THINK I have 
it fixed (we'll see - if this message gets through then I THINK I'm set).

praedor

On Tuesday 14 October 2003 08:21 pm, Bryan Phinney wrote:
> On Tuesday 14 October 2003 09:14 pm, Praedor Tempus wrote:
> > A little more info from my syslog, showing what
> > happens when I try a test
> > message to myself (to my yahoo account):
> >
> > Oct 14 21:07:50 stonekeep postfix/smtp[3396]:
> > 208C882E:
> > to=<[EMAIL PROTECTED]>, relay=none, delay=3849,
> > status=deferred (connect to
> > mx4.mail.yahoo.com[66.218.86.253]: Network is
> > unreachable)
> > Oct 14 21:07:50 stonekeep postfix/smtp[3398]: connect
> > to
> > mx2.mail.yahoo.com[64.156.215.6]: Connection timed out
> > (port 25)
> > Oct 14 21:07:50 stonekeep postfix/smtp[3398]: connect
> > to
> > mx1.mail.yahoo.com[64.156.215.5]: Network is
> > unreachable (port 25)
> >
> > What's with the timeouts?  I get the same thing for
> > messages sent from my
> > local box to the expert list.  I can only send
> > messages now if I go to the
> > yahoo web interface.  Local-sent messages timeout in
> > every single case as
> > above so I end up with a growing deferred mail list.
> >
> > Any ideas?
>
> Actually, I am surprised that Yahoo was allowing direct to MX mail at all
> on their networks, most ISP's stopped allowing that due to spammers a few
> years ago.
>
> If I had to guess, I would guess that they are dropping your packets
> because you are coming in from an external network and they basically don't
> recognize you as an authorized mail server.  I am assuming that you don't
> own your own domain and have an MX record for said domain.  Please correct
> me if I am wrong.

- -- 
I think a case can be made that faith is one of the world's great evils, 
comparable to the smallpox virus but harder to eradicate. Faith, being 
belief that isn't based on evidence, is the principal vice of any religion.
- --Richard Dawkins
Key fingerprint = D6F9 8682 2257 2871 10C6  DB92 6F50 8BBA B100 EB15
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/jLVRb1CLurEA6xURAhc6AJ4gPF7shi9YMgy9CjmloTDBgbGKVwCfZMoq
VnMiTwXxoZeyFKdB0B+F79A=
=OL7f
-END PGP SIGNATURE-

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! Something's wack with my mailserver

2003-10-14 Thread Praedor Atrebates
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

A little more info from my syslog, showing what happens when I try a test 
message to myself (to my yahoo account):

Oct 14 21:07:50 stonekeep postfix/smtp[3396]: 208C882E: 
to=<[EMAIL PROTECTED]>, relay=none, delay=3849, status=deferred (connect to 
mx4.mail.yahoo.com[66.218.86.253]: Network is unreachable)
Oct 14 21:07:50 stonekeep postfix/smtp[3398]: connect to 
mx2.mail.yahoo.com[64.156.215.6]: Connection timed out (port 25)
Oct 14 21:07:50 stonekeep postfix/smtp[3398]: connect to 
mx1.mail.yahoo.com[64.156.215.5]: Network is unreachable (port 25)

What's with the timeouts?  I get the same thing for messages sent from my 
local box to the expert list.  I can only send messages now if I go to the 
yahoo web interface.  Local-sent messages timeout in every single case as 
above so I end up with a growing deferred mail list.

Any ideas?  

On Tuesday 14 October 2003 07:59 pm, Praedor Tempus wrote:
> All was fine for a while.  I run postfix, procmail,
> and fetchmail on my local box
> (stonekeep.ravenhome.net).  I was able to send emails
> without problem to myself, to the list, wherever.
> Now, all I get are deferred messages and timeouts on
> any smtp server I try to connect to...or nameserver
> problems:
>
> What follows is what happens when I try to send an
> email to myself (from stonekeep to my yahoo address):
>
> Oct 14 20:58:49 stonekeep postfix/smtp[3083]:
> CF25F846: to=<[EMAIL PROTECTED]>, relay=none, delay=0,
> status=deferred (Name service error for name=yahoo.com
> type=MX: Host not found, try again)
>
> What the hell?!
>
> Trying to send to the expert list produces:
>
> Oct 14 20:59:55 stonekeep postfix/smtp[3083]:
> 7AE61848: to=<[EMAIL PROTECTED]>, relay=none,
> delay=0, status=deferred (Name service error for
> name=linux-mandrake.com type=MX: Host not found, try
> again)
>
> yahoo.com and linux-mandrake.com are both valid so
> what's the deal?  Since I can ping both and, of
> course, both resolve properly, what is postfix's
> problem here?  How do I fix this?
>
> praedor
>
> __
> Do you Yahoo!?
> The New Yahoo! Shopping - with improved product search
> http://shopping.yahoo.com

- -- 
I think a case can be made that faith is one of the world's great evils, 
comparable to the smallpox virus but harder to eradicate. Faith, being 
belief that isn't based on evidence, is the principal vice of any religion.
- --Richard Dawkins
Key fingerprint = D6F9 8682 2257 2871 10C6  DB92 6F50 8BBA B100 EB15
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/jJ6jb1CLurEA6xURAvq2AJ4uWzy3S5glvbaUgY0zWBw3uPq+ZACdG5C3
33ycfGcO8jDAfX5OMKAMtaY=
=QRvg
-END PGP SIGNATURE-

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! Something's wack with my mailserver

2003-10-14 Thread Bryan Phinney
On Tuesday 14 October 2003 09:14 pm, Praedor Tempus wrote:
> A little more info from my syslog, showing what
> happens when I try a test
> message to myself (to my yahoo account):
>
> Oct 14 21:07:50 stonekeep postfix/smtp[3396]:
> 208C882E:
> to=<[EMAIL PROTECTED]>, relay=none, delay=3849,
> status=deferred (connect to
> mx4.mail.yahoo.com[66.218.86.253]: Network is
> unreachable)
> Oct 14 21:07:50 stonekeep postfix/smtp[3398]: connect
> to
> mx2.mail.yahoo.com[64.156.215.6]: Connection timed out
> (port 25)
> Oct 14 21:07:50 stonekeep postfix/smtp[3398]: connect
> to
> mx1.mail.yahoo.com[64.156.215.5]: Network is
> unreachable (port 25)
>
> What's with the timeouts?  I get the same thing for
> messages sent from my
> local box to the expert list.  I can only send
> messages now if I go to the
> yahoo web interface.  Local-sent messages timeout in
> every single case as
> above so I end up with a growing deferred mail list.
>
> Any ideas?

Actually, I am surprised that Yahoo was allowing direct to MX mail at all on 
their networks, most ISP's stopped allowing that due to spammers a few years 
ago.

If I had to guess, I would guess that they are dropping your packets because 
you are coming in from an external network and they basically don't recognize 
you as an authorized mail server.  I am assuming that you don't own your own 
domain and have an MX record for said domain.  Please correct me if I am 
wrong.

-- 
Bryan Phinney
Software Test Engineer


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! Something's wack with my mailserver

2003-10-14 Thread Praedor Tempus
A little more info from my syslog, showing what
happens when I try a test
message to myself (to my yahoo account):

Oct 14 21:07:50 stonekeep postfix/smtp[3396]:
208C882E:
to=<[EMAIL PROTECTED]>, relay=none, delay=3849,
status=deferred (connect to
mx4.mail.yahoo.com[66.218.86.253]: Network is
unreachable)
Oct 14 21:07:50 stonekeep postfix/smtp[3398]: connect
to
mx2.mail.yahoo.com[64.156.215.6]: Connection timed out
(port 25)
Oct 14 21:07:50 stonekeep postfix/smtp[3398]: connect
to
mx1.mail.yahoo.com[64.156.215.5]: Network is
unreachable (port 25)

What's with the timeouts?  I get the same thing for
messages sent from my
local box to the expert list.  I can only send
messages now if I go to the
yahoo web interface.  Local-sent messages timeout in
every single case as
above so I end up with a growing deferred mail list.

Any ideas?

__
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] Help! Something's wack with my mailserver

2003-10-14 Thread Praedor Tempus
All was fine for a while.  I run postfix, procmail,
and fetchmail on my local box
(stonekeep.ravenhome.net).  I was able to send emails
without problem to myself, to the list, wherever. 
Now, all I get are deferred messages and timeouts on
any smtp server I try to connect to...or nameserver
problems:

What follows is what happens when I try to send an
email to myself (from stonekeep to my yahoo address):

Oct 14 20:58:49 stonekeep postfix/smtp[3083]:
CF25F846: to=<[EMAIL PROTECTED]>, relay=none, delay=0,
status=deferred (Name service error for name=yahoo.com
type=MX: Host not found, try again)

What the hell?! 

Trying to send to the expert list produces:

Oct 14 20:59:55 stonekeep postfix/smtp[3083]:
7AE61848: to=<[EMAIL PROTECTED]>, relay=none,
delay=0, status=deferred (Name service error for
name=linux-mandrake.com type=MX: Host not found, try
again)

yahoo.com and linux-mandrake.com are both valid so
what's the deal?  Since I can ping both and, of
course, both resolve properly, what is postfix's
problem here?  How do I fix this?

praedor

__
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


RE: [expert] HELP!! Opening firewall ports to allow conter strike online gaming...

2003-09-15 Thread Brandon Vanderberg
The default is 27015 but some servers use different ports. 
In CS, look in the menu, and go to server info. 
So if you allow your local net to go out on that dst port,
you should be good to go. Works here. 

HTH


Brandon

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Roberto 
> Armenteros
> Sent: Sunday, September 14, 2003 9:36 PM
> To: [EMAIL PROTECTED]
> Subject: [expert] HELP!! Opening firewall ports to allow conter strike
> online gaming...
> 
> 
> Hi everyone, I am running an ipchains firewall on my
> router. I have most ports closed, but I need to open
> the counter strike port to play online games "I dont
> know exactly what port this involves." Can somebody
> give me the proper rules to allow my CS client to
> connect to servers and be able to play online!!! I
> have deny all default rules.
> 
> Any input on this will be truly appreciated.
> 
> Regards,
> Bob.
> 
> __
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
> 
> 

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] HELP!! Opening firewall ports to allow conter strike online gaming...

2003-09-15 Thread Miark
On Sun, 14 Sep 2003 21:36:17 -0700 (PDT), Roberto Armenteros <[EMAIL PROTECTED]> wrote:

> Hi everyone, I am running an ipchains firewall on my
> router. I have most ports closed, but I need to open
> the counter strike port to play online games "I dont
> know exactly what port this involves." Can somebody
> give me the proper rules to allow my CS client to
> connect to servers and be able to play online!!! I
> have deny all default rules.

Hi Bob,

Instead of "opening" ports, you'll need to "forward" them 
to your gaming machine. That means that when your router
receives data on the CS ports, it forwards them to your
gaming machine instead of trying to respond itself. To 
find the ports for this or any other game, do a search at 
Google for the game name and the words "forward" and "ports":

"counter-strike" forward ports

Miark


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] HELP!! Opening firewall ports to allow conter strike online gaming...

2003-09-14 Thread Roberto Armenteros
Hi everyone, I am running an ipchains firewall on my
router. I have most ports closed, but I need to open
the counter strike port to play online games "I dont
know exactly what port this involves." Can somebody
give me the proper rules to allow my CS client to
connect to servers and be able to play online!!! I
have deny all default rules.

Any input on this will be truly appreciated.

Regards,
Bob.

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] Help using a IBM microdrive on a laptop with Mandrake 9.1

2003-09-03 Thread Bruno Silva
Hi there,

I am having some problems using my IBM microdrive on my laptop, wich has Mandrake 9.1 
installed.

The microdrive is working fine, I can use it without problems on my Ipaq (running 
linux as well)
the card services seem to detect it ok, but it starts creating processes in a loop as 
follows:

24133 ?S  0:00 /bin/sh /etc/dynamic/scripts/part.script del 
/dev/ide/host2/bus0/target0/lun0/part1
24142 ?R  0:00 /usr/bin/perl /usr/sbin/drakupdate_fstab --auto --del 
/dev/ide/host2/bus0/target0/lun0/part1
24143 ?S  0:00 /bin/sh /etc/dynamic/scripts/part.script del 
/dev/ide/host2/bus0/target0/lun0/part1


24772 ?S  0:00 /bin/sh /etc/dynamic/scripts/part.script add 
/dev/ide/host2/bus0/target0/lun0/part1
24781 ?R  0:00 /usr/bin/perl /usr/sbin/drakupdate_fstab --auto --add 
/dev/ide/host2/bus0/target0/lun0/part1
24782 ?S  0:00 /bin/sh /etc/dynamic/scripts/part.script add 
/dev/ide/host2/bus0/target0/lun0/part1


I have tried to look for diferences between the /etc/pcmcia/ide scripts of the ipaq 
and the laptop, but I am starting to feel it is out of my league and I rather not mess 
my fine setup without guidance...

May it be because I have "re-organized" my /etc/fstab ?

# root
/dev/hda3 / ext3 noatime 1 1
#
# virtual
none /dev/pts devpts mode=0620 0 0
none /proc proc defaults 0 0
none /tmp tmpfs defaults 0 0
#
# data
/dev/hda6 /home ext3 noatime 1 2
/dev/hda8 /usr ext3 noatime 1 2
/dev/hda2 /usr/src ext3 noatime 1 2
/dev/hda10 /apps ext3 noatime 1 2
/dev/hda7 /var ext3 noatime 1 2
/dev/hda5 swap swap defaults 0 0
#
# removables
none /mnt/cdrom supermount dev=/dev/scd0,fs=auto,ro,--,iocharset=utf8,umask=0 0 0
/dev/scd0   /mnt/cdrecorder autoro,noauto,user,exec 0 0
none /mnt/floppy supermount dev=/dev/fd0,fs=auto,--,iocharset=utf8,sync,umask=0 0 0
---

Thanks,

Bruno Silva


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help!!!

2003-07-09 Thread Damian Gatabria
El mi? 09-07-2003 a las 13:29, pro8613 escribió:
> hello i have a ADSL USB MODEM ALE 130 and i don't now how install the
> modem maiby i need a driver if have this driver please send me 
> help me please!!!

Sorry, but most of the times USB ADSL modems need special
proprietary drivers which are available only for windows.

If USB is it's only way to connect to the PC (i.e. no
ethernet port) then it's quite possible that you 
don't get it to work in the near future.


Damian


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] help!!!

2003-07-09 Thread pro8613



hello i have a ADSL USB MODEM ALE 130 and i don't 
now how install the modem maiby i need a driver if have this driver please send 
me 
help me please!!!


[expert] HELP - ext3 filesystem data loss?!

2003-07-01 Thread Andrei Raevsky

Hi,

My computer gave me a message during boot up saying that there were
problems in my root filesystem.  He proceeded to check them and then
suggested that he could fix them but that some data might get lost.  I
pressed "yes" and let him proceed.  During the recovery process some
inodes and segments files seemed to have been identified as lost and
deleted (I do not remember the exact message).  After fixing the problem
the computer booted up normally but now I get messages such as "Can't
write file /var/log/linuxconf/netconf.log"

I am running ext3 journalling filesystem which I thought would record the
location of all my files every 5 sec.  However, data was lost.  Why?!

Can you explain what happened?  And should I take any special action?

Thanks,

Andrei

-- 
Linux-Mandrake 9 (Dolphin)
Mandrake Club Silver Member
Registered GNU/Linux user: 226850
Registered GNU/Linux computer: 183163
URL: http://laptops.portalinux.org



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] HELP - ext3 filesystem data loss?!

2003-06-30 Thread charlie
On Mon, 30 Jun 2003 08:31 am, Andrei Raevsky had this to contribute :-
> My computer gave me a message during boot up saying that there were
> problems in my root filesystem.  He proceeded to check them and then
> suggested that he could fix them but that some data might get lost.  I
> pressed "yes" and let him proceed.

Hi Andrei,

I am unable to explain what happens but can tell you what to do when it does, 
say yet to the first question, which i no longer recall. Within the 5 second 
limit, but on the second question, say no. 
Then I think Ctrl+d and the system will reboot and will again check the file 
system and continue without any problems.

For various reasons my system has been exited uncleanly [power dropped out 
etc.] and I found that this is the way it will recover without any data loss. 
Works a treat.

Charlie.

-- 
A black cat dropped soundlessly from a high wall, like a spoonful dark treacle
melted under the gate.

Elizabeth Lemarchand

This email is guaranteed to be wholly Linux Mandrake 9.1, Kmail v1.5 and
OpenOffice.org1.1Beta


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] HELP - ext3 filesystem data loss?!

2003-06-30 Thread Larry Sword
Andrei Raevsky wrote:

Hi,

My computer gave me a message during boot up saying that there were
problems in my root filesystem.  He proceeded to check them and then
suggested that he could fix them but that some data might get lost.  I
pressed "yes" and let him proceed.  During the recovery process some
inodes and segments files seemed to have been identified as lost and
deleted (I do not remember the exact message).  After fixing the problem
the computer booted up normally but now I get messages such as "Can't
write file /var/log/linuxconf/netconf.log"
I am running ext3 journalling filesystem which I thought would record the
location of all my files every 5 sec.  However, data was lost.  Why?!
Can you explain what happened?  And should I take any special action?

Thanks,

Andrei

 

Check to verify that the file exist and check write permissions. If no 
file then as Root do a :

touch /var/log/netconfig.log

This should set the file in place for writing.

Larry



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help!

2003-06-26 Thread James Sparenberg
On Thu, 2003-06-26 at 02:38, Anne Wilson wrote:
> I'm trying to suspend mail for my list traffic whilst I'm away on 
> vacation.  I haven't tried anything yet for the expert list, but have 
> tried twice for the newbie list.  This is the latest reply:
> 
> Results of your commands
> Date: Today 10:10:34 am
> From: SYMPA <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> 
> List '<[EMAIL PROTECTED]>' does not exist.
> > SET <[EMAIL PROTECTED]> NOMAIL
> 
> List '<[EMAIL PROTECTED]>' does not exist.
> 
> I tried it also with just  for the list, but got the 'does not 
> exist' message for that as well.
> 
> Does *anyone* know what I can do to achieve this?
> 
> Anne

Shoot the server?  *Evil Grin*




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help!

2003-06-26 Thread Anne Wilson
On Thursday 26 Jun 2003 11:34 am, Peter Watson wrote:

> try just "newbie" - no quotes
>
That did it, Pete.  Thanks

Anne

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help!

2003-06-26 Thread Peter Watson
On Thursday 26 Jun 2003 10:38, Anne Wilson wrote:
> I'm trying to suspend mail for my list traffic whilst I'm away on
> vacation.  I haven't tried anything yet for the expert list, but have
> tried twice for the newbie list.  This is the latest reply:
>
> Results of your commands
> Date: Today 10:10:34 am
> From: SYMPA <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
>
> List '<[EMAIL PROTECTED]>' does not exist.
>
> > SET <[EMAIL PROTECTED]> NOMAIL
>
> List '<[EMAIL PROTECTED]>' does not exist.
>
> I tried it also with just  for the list, but got the 'does not
> exist' message for that as well.
>
> Does *anyone* know what I can do to achieve this?
>
> Anne


try just "newbie" - no quotes

HTH
Pete


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] Help!

2003-06-26 Thread Anne Wilson
I'm trying to suspend mail for my list traffic whilst I'm away on 
vacation.  I haven't tried anything yet for the expert list, but have 
tried twice for the newbie list.  This is the latest reply:

Results of your commands
Date: Today 10:10:34 am
From: SYMPA <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]

List '<[EMAIL PROTECTED]>' does not exist.
> SET <[EMAIL PROTECTED]> NOMAIL

List '<[EMAIL PROTECTED]>' does not exist.

I tried it also with just  for the list, but got the 'does not 
exist' message for that as well.

Does *anyone* know what I can do to achieve this?

Anne

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help with greek!!!

2003-06-09 Thread manolis
I don't use the keyboard layouts of kde. Simply because it doesn't work. If I 
install there greek layout as secondary layout I cannot write english. Iget 
greek letter both for english and greek and no toning too.
I use the option in mandrake control , hardware & keyboard as you propose but 
no luck.!

thanks for the concern/




Στις Δευ 09 Ιουν 2003 00:34, ο/η charlie έγραψε:
> On Sun, 8 Jun 2003 10:07 am, manolis sent this :-
>
> > After my installation of mandrake 9.1 I have one little problem.
> > I use the greek keyboard but I cannot enter punctuation & notation marks
> > on vowels.
>
> Are you using the Greek keyboard layout? In big K, Configuration, Mandrake
> Control Centre, Hardware and Keyboard.
>
> Though it has not happened for some time, I have had to use different
> keyboard layouts to get the right one, even though it was not the one that
> I thought would work? If the Greek layout doesn't work for you, try the US
> or the US international. No guarantees, just trial and error. I have no
> need for Greek letters.
>
> HTH
> Charlie


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] help with greek!!!

2003-06-08 Thread charlie
On Sun, 8 Jun 2003 10:07 am, manolis sent this :-
> After my installation of mandrake 9.1 I have one little problem.
> I use the greek keyboard but I cannot enter punctuation & notation marks on
> vowels.

Are you using the Greek keyboard layout? In big K, Configuration, Mandrake 
Control Centre, Hardware and Keyboard.

Though it has not happened for some time, I have had to use different keyboard 
layouts to get the right one, even though it was not the one that I thought 
would work? If the Greek layout doesn't work for you, try the US or the US 
international. No guarantees, just trial and error. I have no need for Greek 
letters.

HTH
Charlie

-- 
Due to circumstances beyond my control,
I am master of my fate and captain of my soul.

Ashley Brillaint

This email is guaranteed to be wholly Linux Mandrake 9.0, Kmail v1.4.3 and
OpenOffice.org1.0.3


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] help with greek!!!

2003-06-08 Thread manolis
Hi guys!

After my installation of mandrake 9.1 I have one little problem.
I use the greek keyboard but I cannot enter punctuation & notation marks on 
vowels. 
for example I can write "Γεια σου" but if Itry to put a tone in the "ι" with 
the : key and then the i key, I get no character.
The problem exists in all the programs. I did not had the same problem with 
mandrake 9.0 . Any ideas?

please help.


Manolis
(A very newbie in the world of linux)


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-11 Thread civileme
On Tuesday 11 March 2003 08:45 pm, David E. Fox wrote:
> > du -xsh /*Summary of the size of all dirs that are on "/"-partition
> > serach the biggest dir and then go to that dir and do the same.=20
>
> Hey - that's a very useful command. ;)
>
> It lists directories that could be located on their own file systems,
> though. Adding -x according to the man page for du suggests that
> it not count space mounted on other filesystems, But on my system
> /var is listed in that output, and /var is mounted on another
> partition.

U, it could be that at one time /var was part of / and later it was 
mounted separately.  A typical example is when a power failure bonks the 
partition where /var would be mounted, so the filesysatem check drops you 
into a shell (with logs running and a /var being created on / to accept the 
output)  Now when the partition is mounted on /var, then the /var sitting 
in / is not destroyed, just suppressed.  You could check the output you 
mention against 

du -xsh /var/*

Civileme


Civileme

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-11 Thread David E. Fox
> du -xsh /*Summary of the size of all dirs that are on "/"-partition
> serach the biggest dir and then go to that dir and do the same.=20

Hey - that's a very useful command. ;)

It lists directories that could be located on their own file systems,
though. Adding -x according to the man page for du suggests that 
it not count space mounted on other filesystems, But on my system
/var is listed in that output, and /var is mounted on another
partition.




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread Jan Wilson
* Mark Weaver <[EMAIL PROTECTED]> [030310 10:06]:
> A little background info:
> 
> the dir's /mnt/arc, /mnt/arc_2, and /mnt/mp3 are shared over nfs and 
> samba. while I don't have any trouble RW to ?mnt/arc, /mnt/arc_2 there 
> were some problems with /mnt/mp3. It would only allow R access to the 
> filesystem. Until yesterday when I shut down nfs and samba, umounted 
> /mnt/mp3 and then chown'd /mnt/mp3 to user.root, and then chmod'd it to 
> 777. Once that was done I was able to write to that partition from the 
> client machines over nfs and samba, but I suspect that it was at that 
> time when "/" began to be 100% full.
> 
> whats up with that?

A little more explanation may help.  It is important to note that
unless something is mounted on them, the typical directories under
/mnt are just plain directories, usually empty.

When you mount something there, if anything was IN those directories,
it will be temporarily inaccessible, replaced in the tree by whatever
you mounted there. When you unmount them, the original contents show
up again.  It, of course, takes space in the real directory, and /mnt
is not usually on its own partition, so it is part of root, or /.

When you DO find some actual files in /mnt, it is usually because
someone copied something there, thinking they were copying to a
removable block device, like a floppy or other storage device.

-- 
Jan Wilson, SysAdmin _/*];  [EMAIL PROTECTED]
Corozal Junior College   |  |:'  corozal.com corozal.bz
Corozal Town, Belize |  /'  chetumal.com & linux.bz
Reg. Linux user #151611  |_/   Network, PHP, Perl, HTML


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread Mark Weaver
civileme wrote:
On Monday 10 March 2003 06:48 am, Mark Weaver wrote:

et wrote:

On Monday 10 March 2003 07:17 am, Mark Weaver wrote:

Hi list,

I noticed this yesterday after receiving an error message from Mozilla
that it couldn't send a message. So far I've been all over the
filesystem every way I know how, but still can't find a reason for this
condition.
So far I've phyiscally examined the filesystem with mc and du to see if I
could find an extra large file somewhere, but nothing is popping out. The
only thing on the "/" filesystem is everything but /var and /usr. I'm
suspicious of the manner in which /mnt may be affecting the root
filesystem.
Any ideas?

FilesystemSize  Used Avail Use% Mounted on
/dev/hda1 718M  674M  7.6M  99% /
none   62M 0   61M   0% /dev/shm
/dev/hda10618M  308M  310M  50% /home
/dev/hdc1 643M  611M 0 100% /mnt/arc
/dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
/dev/hda6 1.4G  1.4G   26M  99% /usr
/dev/hda7 934M  538M  349M  61% /var
/dev/hda9 3.9G  906M  2.8G  24% /var/ftp
/dev/hda8 1.1G  179M  869M  18% /var/www
bud,,, each entry in /mnt takes about 4 bytes in the "/" filespace so I
would bet that ai'nt it tried deleting (or cleaning) /tmp on boot?
Ha!  My suspicions were correct. It "was" a problem with one if the
dir's in /mnt. Following Stephens' suggestion I umounted everything
mounted under /mnt and then ran the "du" command. /mnt showed up as
weighing in at 609M. Just a few more bytes then 4, eh?
So, liberally wacking the contents of that directory, (which happened to
be part of my mp3 collection) the weight if "/" is now back down to 10%
or 66M.
The quesiton now is "why" was just /mnt/mp3 effecting "/" and not
/mnt/arc (which is 650M and at 100%) or /mnt/arc_2 which is currently
at   61% (2.1GB)?
By they way...thanks to all that responded. Your comments and
suggestions helped me to elliminate possible causes and focus in the
direction of the real culprit.
A little background info:

the dir's /mnt/arc, /mnt/arc_2, and /mnt/mp3 are shared over nfs and
samba. while I don't have any trouble RW to ?mnt/arc, /mnt/arc_2 there
were some problems with /mnt/mp3. It would only allow R access to the
filesystem. Until yesterday when I shut down nfs and samba, umounted
/mnt/mp3 and then chown'd /mnt/mp3 to user.root, and then chmod'd it to
777. Once that was done I was able to write to that partition from the
client machines over nfs and samba, but I suspect that it was at that
time when "/" began to be 100% full.
whats up with that?


You had /mnt/mp3 created locally instead of mounted remotely--when the remote 
mount is in place, it will overtake the local, but when it is not you will 
have a valid local directory (since it is defined as a directory to be a 
mount point.

You therefore did not have the remote mount working when you wrote to 
/mnt/mp3.  Usually ro write to a remote nfs system when writes are blocked 
you have to check permissions on BOTH machines, and define a way for a write 
to happen...  Check the remote mount through remote linuxconf or webmin.

Civileme
Thanks guys. what you're saying makes a great deal of sense.

Mark


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread J.P. Pasnak

civileme said:

> On Monday 10 March 2003 04:02 am, Brian wrote:
>> On Monday 10 March 2003 07:54 am, civileme wrote:
>> > On Monday 10 March 2003 03:17 am, Mark Weaver wrote:
>> > > Hi list,
>> > >
>> > > I noticed this yesterday after receiving an error message from
>> Mozilla
>> > > that it couldn't send a message. So far I've been all over the
>> > > filesystem every way I know how, but still can't find a reason for
>> this
>> > > condition.
>> > >
>> > > So far I've phyiscally examined the filesystem with mc and du to see
>> if
>> > > I could find an extra large file somewhere, but nothing is popping
>> out.
>> > > The only thing on the "/" filesystem is everything but /var and
>> /usr.
>> > > I'm suspicious of the manner in which /mnt may be affecting the root
>> > > filesystem.
>> > >
>> > > Any ideas?
>> > >
>> > > FilesystemSize  Used Avail Use% Mounted on
>> > > /dev/hda1 718M  674M  7.6M  99% /
>> > > none   62M 0   61M   0% /dev/shm
>> > > /dev/hda10618M  308M  310M  50% /home
>> > > /dev/hdc1 643M  611M 0 100% /mnt/arc
>> > > /dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
>> > > /dev/hda6 1.4G  1.4G   26M  99% /usr
>> > > /dev/hda7 934M  538M  349M  61% /var
>> > > /dev/hda9 3.9G  906M  2.8G  24% /var/ftp
>> > > /dev/hda8 1.1G  179M  869M  18% /var/www
>> >
>> > try this
>> >
>> > open a terminal
>> > su to root
>> >
>> > # mkdir -p /var/www/maxis
>> > # rm -r /tmp -f
>> > # ln -d /var/www/maxis /tmp
>> >
>> > mozilla uses /tmp for many things, including reassembling packets from
>> a
>> > download into a file before moving the file to its final destination.
>> > /tmp is in / in your system ...  After this little setting, you should
>> be
>> > good to go even for downloading an .iso file.
>> >

Just jumping into the thread, but have your tried the following:

# cd /etc
# du|sort -n
# cd /tmp
# du|sort -n
# cd /root
# du|sort -n
# cd /opt
# du|sort -n

-- 
Live fast, die young,
You're sucking up my bandwidth.

J.P. Pasnak, CD
CCNA
http://www.warpedsystems.sk.ca

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread civileme
On Monday 10 March 2003 06:48 am, Mark Weaver wrote:
> et wrote:
> > On Monday 10 March 2003 07:17 am, Mark Weaver wrote:
> >>Hi list,
> >>
> >>I noticed this yesterday after receiving an error message from Mozilla
> >> that it couldn't send a message. So far I've been all over the
> >> filesystem every way I know how, but still can't find a reason for this
> >> condition.
> >>
> >>So far I've phyiscally examined the filesystem with mc and du to see if I
> >>could find an extra large file somewhere, but nothing is popping out. The
> >>only thing on the "/" filesystem is everything but /var and /usr. I'm
> >>suspicious of the manner in which /mnt may be affecting the root
> >>filesystem.
> >>
> >>Any ideas?
> >>
> >>FilesystemSize  Used Avail Use% Mounted on
> >>/dev/hda1 718M  674M  7.6M  99% /
> >>none   62M 0   61M   0% /dev/shm
> >>/dev/hda10618M  308M  310M  50% /home
> >>/dev/hdc1 643M  611M 0 100% /mnt/arc
> >>/dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
> >>/dev/hda6 1.4G  1.4G   26M  99% /usr
> >>/dev/hda7 934M  538M  349M  61% /var
> >>/dev/hda9 3.9G  906M  2.8G  24% /var/ftp
> >>/dev/hda8 1.1G  179M  869M  18% /var/www
> >
> > bud,,, each entry in /mnt takes about 4 bytes in the "/" filespace so I
> > would bet that ai'nt it tried deleting (or cleaning) /tmp on boot?
>
> Ha!  My suspicions were correct. It "was" a problem with one if the
> dir's in /mnt. Following Stephens' suggestion I umounted everything
> mounted under /mnt and then ran the "du" command. /mnt showed up as
> weighing in at 609M. Just a few more bytes then 4, eh?
>
> So, liberally wacking the contents of that directory, (which happened to
> be part of my mp3 collection) the weight if "/" is now back down to 10%
> or 66M.
>
> The quesiton now is "why" was just /mnt/mp3 effecting "/" and not
> /mnt/arc (which is 650M and at 100%) or /mnt/arc_2 which is currently
> at 61% (2.1GB)?
>
> By they way...thanks to all that responded. Your comments and
> suggestions helped me to elliminate possible causes and focus in the
> direction of the real culprit.
>
> A little background info:
>
> the dir's /mnt/arc, /mnt/arc_2, and /mnt/mp3 are shared over nfs and
> samba. while I don't have any trouble RW to ?mnt/arc, /mnt/arc_2 there
> were some problems with /mnt/mp3. It would only allow R access to the
> filesystem. Until yesterday when I shut down nfs and samba, umounted
> /mnt/mp3 and then chown'd /mnt/mp3 to user.root, and then chmod'd it to
> 777. Once that was done I was able to write to that partition from the
> client machines over nfs and samba, but I suspect that it was at that
> time when "/" began to be 100% full.
>
> whats up with that?

You had /mnt/mp3 created locally instead of mounted remotely--when the remote 
mount is in place, it will overtake the local, but when it is not you will 
have a valid local directory (since it is defined as a directory to be a 
mount point.

You therefore did not have the remote mount working when you wrote to 
/mnt/mp3.  Usually ro write to a remote nfs system when writes are blocked 
you have to check permissions on BOTH machines, and define a way for a write 
to happen...  Check the remote mount through remote linuxconf or webmin.

Civileme



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread civileme
On Monday 10 March 2003 04:02 am, Brian wrote:
> On Monday 10 March 2003 07:54 am, civileme wrote:
> > On Monday 10 March 2003 03:17 am, Mark Weaver wrote:
> > > Hi list,
> > >
> > > I noticed this yesterday after receiving an error message from Mozilla
> > > that it couldn't send a message. So far I've been all over the
> > > filesystem every way I know how, but still can't find a reason for this
> > > condition.
> > >
> > > So far I've phyiscally examined the filesystem with mc and du to see if
> > > I could find an extra large file somewhere, but nothing is popping out.
> > > The only thing on the "/" filesystem is everything but /var and /usr.
> > > I'm suspicious of the manner in which /mnt may be affecting the root
> > > filesystem.
> > >
> > > Any ideas?
> > >
> > > FilesystemSize  Used Avail Use% Mounted on
> > > /dev/hda1 718M  674M  7.6M  99% /
> > > none   62M 0   61M   0% /dev/shm
> > > /dev/hda10618M  308M  310M  50% /home
> > > /dev/hdc1 643M  611M 0 100% /mnt/arc
> > > /dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
> > > /dev/hda6 1.4G  1.4G   26M  99% /usr
> > > /dev/hda7 934M  538M  349M  61% /var
> > > /dev/hda9 3.9G  906M  2.8G  24% /var/ftp
> > > /dev/hda8 1.1G  179M  869M  18% /var/www
> >
> > try this
> >
> > open a terminal
> > su to root
> >
> > # mkdir -p /var/www/maxis
> > # rm -r /tmp -f
> > # ln -d /var/www/maxis /tmp
> >
> > mozilla uses /tmp for many things, including reassembling packets from a
> > download into a file before moving the file to its final destination. 
> > /tmp is in / in your system ...  After this little setting, you should be
> > good to go even for downloading an .iso file.
> >
> > Civileme
>
> Check the size of /var/log.  It could be your log files are filling root.
>
> Brian
E /var/log would be found in /var which seems to have plenty of 
room...
Civileme


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread Greg Meyer
On Monday 10 March 2003 10:48 am, Mark Weaver wrote:
> et wrote:
> > On Monday 10 March 2003 07:17 am, Mark Weaver wrote:
> >>Hi list,
> >>
> >>I noticed this yesterday after receiving an error message from Mozilla
> >> that it couldn't send a message. So far I've been all over the
> >> filesystem every way I know how, but still can't find a reason for this
> >> condition.
> >>
> >>So far I've phyiscally examined the filesystem with mc and du to see if I
> >>could find an extra large file somewhere, but nothing is popping out. The
> >>only thing on the "/" filesystem is everything but /var and /usr. I'm
> >>suspicious of the manner in which /mnt may be affecting the root
> >>filesystem.
> >>
> >>Any ideas?
> >>
> >>FilesystemSize  Used Avail Use% Mounted on
> >>/dev/hda1 718M  674M  7.6M  99% /
> >>none   62M 0   61M   0% /dev/shm
> >>/dev/hda10618M  308M  310M  50% /home
> >>/dev/hdc1 643M  611M 0 100% /mnt/arc
> >>/dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
> >>/dev/hda6 1.4G  1.4G   26M  99% /usr
> >>/dev/hda7 934M  538M  349M  61% /var
> >>/dev/hda9 3.9G  906M  2.8G  24% /var/ftp
> >>/dev/hda8 1.1G  179M  869M  18% /var/www
> >
> > bud,,, each entry in /mnt takes about 4 bytes in the "/" filespace so I
> > would bet that ai'nt it tried deleting (or cleaning) /tmp on boot?
>
> Ha!  My suspicions were correct. It "was" a problem with one if the
> dir's in /mnt. Following Stephens' suggestion I umounted everything
> mounted under /mnt and then ran the "du" command. /mnt showed up as
> weighing in at 609M. Just a few more bytes then 4, eh?
>
> So, liberally wacking the contents of that directory, (which happened to
> be part of my mp3 collection) the weight if "/" is now back down to 10%
> or 66M.
>
> The quesiton now is "why" was just /mnt/mp3 effecting "/" and not
> /mnt/arc (which is 650M and at 100%) or /mnt/arc_2 which is currently
> at 61% (2.1GB)?
>
> By they way...thanks to all that responded. Your comments and
> suggestions helped me to elliminate possible causes and focus in the
> direction of the real culprit.
>
> A little background info:
>
> the dir's /mnt/arc, /mnt/arc_2, and /mnt/mp3 are shared over nfs and
> samba. while I don't have any trouble RW to ?mnt/arc, /mnt/arc_2 there
> were some problems with /mnt/mp3. It would only allow R access to the
> filesystem. Until yesterday when I shut down nfs and samba, umounted
> /mnt/mp3 and then chown'd /mnt/mp3 to user.root, and then chmod'd it to
> 777. Once that was done I was able to write to that partition from the
> client machines over nfs and samba, but I suspect that it was at that
> time when "/" began to be 100% full.
>
> whats up with that?

Sounds like you started copying files before you remounted whatever the 
partition is that you mount on  /mnt/mp3. 
-- 
Greg

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread Steffen Barszus
On Monday 10 March 2003 13:17, Mark Weaver wrote:
> Hi list,
>
> I noticed this yesterday after receiving an error message from Mozilla that
> it couldn't send a message. So far I've been all over the filesystem every
> way I know how, but still can't find a reason for this condition.
>
> So far I've phyiscally examined the filesystem with mc and du to see if I
> could find an extra large file somewhere, but nothing is popping out. The
> only thing on the "/" filesystem is everything but /var and /usr. I'm
> suspicious of the manner in which /mnt may be affecting the root
> filesystem.
>
> Any ideas?
>
> FilesystemSize  Used Avail Use% Mounted on
> /dev/hda1 718M  674M  7.6M  99% /
> none   62M 0   61M   0% /dev/shm
> /dev/hda10618M  308M  310M  50% /home
> /dev/hdc1 643M  611M 0 100% /mnt/arc
> /dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
> /dev/hda6 1.4G  1.4G   26M  99% /usr
> /dev/hda7 934M  538M  349M  61% /var
> /dev/hda9 3.9G  906M  2.8G  24% /var/ftp
> /dev/hda8 1.1G  179M  869M  18% /var/www


Just some ideas:

1)
du -xsh /*Summary of the size of all dirs that are on "/"-partition
serach the biggest dir and then go to that dir and do the same. 

2)
unmount all in /mnt/ and look there if something is written and hidden after 
mount. (the same could be for /usr/ and /var/ but that would be very 
unlikely.

-- 
Regards
Steffen

counter.li.org : #296567.
machine: 181800
vdr-box : 87

Please dont CC me, since if I have replied I'll watch the tread. Both mails 
will be filtered to the ML-folder. Thanks

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread Thierry Terrier


So far I've phyiscally examined the filesystem with mc and du to see if
I could find an extra large file somewhere, but nothing is popping out.
The only thing on the "/" filesystem is everything but /var and /usr.
I'm suspicious of the manner in which /mnt may be affecting the root
filesystem.
Any ideas?

FilesystemSize  Used Avail Use% Mounted on
/dev/hda1 718M  674M  7.6M  99% /
none   62M 0   61M   0% /dev/shm
/dev/hda10618M  308M  310M  50% /home
/dev/hdc1 643M  611M 0 100% /mnt/arc
/dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
/dev/hda6 1.4G  1.4G   26M  99% /usr
/dev/hda7 934M  538M  349M  61% /var
/dev/hda9 3.9G  906M  2.8G  24% /var/ftp
/dev/hda8 1.1G  179M  869M  18% /var/www
   

Is your /usr and /var directory defined at installation ? if not you can 
clean them on root partition.
umount all except /dev/hda1
check and clean all root hidden files by a mount.
Best regards



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread Brian
On Monday 10 March 2003 08:10 am, et wrote:
> On Monday 10 March 2003 08:02 am, Brian wrote:
> > On Monday 10 March 2003 07:54 am, civileme wrote:
> > > On Monday 10 March 2003 03:17 am, Mark Weaver wrote:
> > > > Hi list,
> > > >
> > > > I noticed this yesterday after receiving an error message from
> > > > Mozilla that it couldn't send a message. So far I've been all over
> > > > the filesystem every way I know how, but still can't find a reason
> > > > for this condition.
> > > >
> > > > So far I've phyiscally examined the filesystem with mc and du to see
> > > > if I could find an extra large file somewhere, but nothing is popping
> > > > out. The only thing on the "/" filesystem is everything but /var and
> > > > /usr. I'm suspicious of the manner in which /mnt may be affecting the
> > > > root filesystem.
> > > >
> > > > Any ideas?
> > > >
> > > > FilesystemSize  Used Avail Use% Mounted on
> > > > /dev/hda1 718M  674M  7.6M  99% /
> > > > none   62M 0   61M   0% /dev/shm
> > > > /dev/hda10618M  308M  310M  50% /home
> > > > /dev/hdc1 643M  611M 0 100% /mnt/arc
> > > > /dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
> > > > /dev/hda6 1.4G  1.4G   26M  99% /usr
> > > > /dev/hda7 934M  538M  349M  61% /var
> > > > /dev/hda9 3.9G  906M  2.8G  24% /var/ftp
> > > > /dev/hda8 1.1G  179M  869M  18% /var/www
> > >
> > > try this
> > >
> > > open a terminal
> > > su to root
> > >
> > > # mkdir -p /var/www/maxis
> > > # rm -r /tmp -f
> > > # ln -d /var/www/maxis /tmp
> > >
> > > mozilla uses /tmp for many things, including reassembling packets from
> > > a download into a file before moving the file to its final destination.
> > > /tmp is in / in your system ...  After this little setting, you should
> > > be good to go even for downloading an .iso file.
> > >
> > > Civileme
> >
> > Check the size of /var/log.  It could be your log files are filling root.
> >
> > Brian
>
> eeehhh... Brian, he noted that ""/" filesystem is everything but /var and
> /usr" so /var is not part of the / partition, and so not that part of the
> problem

mille pardones, it's 8:00 AM here in NY and hadn't had my 3rd cup of coffee 
yet.

Brian

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread et
On Monday 10 March 2003 08:02 am, Brian wrote:
> On Monday 10 March 2003 07:54 am, civileme wrote:
> > On Monday 10 March 2003 03:17 am, Mark Weaver wrote:
> > > Hi list,
> > >
> > > I noticed this yesterday after receiving an error message from Mozilla
> > > that it couldn't send a message. So far I've been all over the
> > > filesystem every way I know how, but still can't find a reason for this
> > > condition.
> > >
> > > So far I've phyiscally examined the filesystem with mc and du to see if
> > > I could find an extra large file somewhere, but nothing is popping out.
> > > The only thing on the "/" filesystem is everything but /var and /usr.
> > > I'm suspicious of the manner in which /mnt may be affecting the root
> > > filesystem.
> > >
> > > Any ideas?
> > >
> > > FilesystemSize  Used Avail Use% Mounted on
> > > /dev/hda1 718M  674M  7.6M  99% /
> > > none   62M 0   61M   0% /dev/shm
> > > /dev/hda10618M  308M  310M  50% /home
> > > /dev/hdc1 643M  611M 0 100% /mnt/arc
> > > /dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
> > > /dev/hda6 1.4G  1.4G   26M  99% /usr
> > > /dev/hda7 934M  538M  349M  61% /var
> > > /dev/hda9 3.9G  906M  2.8G  24% /var/ftp
> > > /dev/hda8 1.1G  179M  869M  18% /var/www
> >
> > try this
> >
> > open a terminal
> > su to root
> >
> > # mkdir -p /var/www/maxis
> > # rm -r /tmp -f
> > # ln -d /var/www/maxis /tmp
> >
> > mozilla uses /tmp for many things, including reassembling packets from a
> > download into a file before moving the file to its final destination. 
> > /tmp is in / in your system ...  After this little setting, you should be
> > good to go even for downloading an .iso file.
> >
> > Civileme
>
> Check the size of /var/log.  It could be your log files are filling root.
>
> Brian

eeehhh... Brian, he noted that ""/" filesystem is everything but /var and 
/usr" so /var is not part of the / partition, and so not that part of the 
problem


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread Brian
On Monday 10 March 2003 07:54 am, civileme wrote:
> On Monday 10 March 2003 03:17 am, Mark Weaver wrote:
> > Hi list,
> >
> > I noticed this yesterday after receiving an error message from Mozilla
> > that it couldn't send a message. So far I've been all over the filesystem
> > every way I know how, but still can't find a reason for this condition.
> >
> > So far I've phyiscally examined the filesystem with mc and du to see if I
> > could find an extra large file somewhere, but nothing is popping out. The
> > only thing on the "/" filesystem is everything but /var and /usr. I'm
> > suspicious of the manner in which /mnt may be affecting the root
> > filesystem.
> >
> > Any ideas?
> >
> > FilesystemSize  Used Avail Use% Mounted on
> > /dev/hda1 718M  674M  7.6M  99% /
> > none   62M 0   61M   0% /dev/shm
> > /dev/hda10618M  308M  310M  50% /home
> > /dev/hdc1 643M  611M 0 100% /mnt/arc
> > /dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
> > /dev/hda6 1.4G  1.4G   26M  99% /usr
> > /dev/hda7 934M  538M  349M  61% /var
> > /dev/hda9 3.9G  906M  2.8G  24% /var/ftp
> > /dev/hda8 1.1G  179M  869M  18% /var/www
>
> try this
>
> open a terminal
> su to root
>
> # mkdir -p /var/www/maxis
> # rm -r /tmp -f
> # ln -d /var/www/maxis /tmp
>
> mozilla uses /tmp for many things, including reassembling packets from a
> download into a file before moving the file to its final destination.  /tmp
> is in / in your system ...  After this little setting, you should be good
> to go even for downloading an .iso file.
>
> Civileme

Check the size of /var/log.  It could be your log files are filling root.

Brian



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread civileme
On Monday 10 March 2003 03:17 am, Mark Weaver wrote:
> Hi list,
>
> I noticed this yesterday after receiving an error message from Mozilla that
> it couldn't send a message. So far I've been all over the filesystem every
> way I know how, but still can't find a reason for this condition.
>
> So far I've phyiscally examined the filesystem with mc and du to see if I
> could find an extra large file somewhere, but nothing is popping out. The
> only thing on the "/" filesystem is everything but /var and /usr. I'm
> suspicious of the manner in which /mnt may be affecting the root
> filesystem.
>
> Any ideas?
>
> FilesystemSize  Used Avail Use% Mounted on
> /dev/hda1 718M  674M  7.6M  99% /
> none   62M 0   61M   0% /dev/shm
> /dev/hda10618M  308M  310M  50% /home
> /dev/hdc1 643M  611M 0 100% /mnt/arc
> /dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
> /dev/hda6 1.4G  1.4G   26M  99% /usr
> /dev/hda7 934M  538M  349M  61% /var
> /dev/hda9 3.9G  906M  2.8G  24% /var/ftp
> /dev/hda8 1.1G  179M  869M  18% /var/www


try this

open a terminal
su to root

# mkdir -p /var/www/maxis
# rm -r /tmp -f
# ln -d /var/www/maxis /tmp

mozilla uses /tmp for many things, including reassembling packets from a 
download into a file before moving the file to its final destination.  /tmp 
is in / in your system ...  After this little setting, you should be good to 
go even for downloading an .iso file.

Civileme



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread g


Mark Weaver wrote:

I noticed this yesterday after receiving an error message from Mozilla that it
moz needs some room in '/' and did not find minimum.

from your 'df' return, you are low in both '/' and '/usr'. you need to do
some drastic changes for '/' and '/usr', especially if you want to expand.
unless you have a large spare drive, you may need to rebuild 'hda'.
what distribution??

what backup media do you have??

there are several ways you could avoid a reinstall, but before any
suggestions, how about a look at fstab, and what drives actually are?


--
peace out.
tc,hago.

g
.
=+=
think green...
  save a tree, save a life, save time, save bandwidth, save storage.
  send email:  text/plain - disable pgp/gpg/geek code attachments.
=+=
 if you are proud to be an american, then buy "made in america".
=+=

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Help! root full but can't find a cause

2003-03-10 Thread et
On Monday 10 March 2003 07:17 am, Mark Weaver wrote:
> Hi list,
>
> I noticed this yesterday after receiving an error message from Mozilla that
> it couldn't send a message. So far I've been all over the filesystem every
> way I know how, but still can't find a reason for this condition.
>
> So far I've phyiscally examined the filesystem with mc and du to see if I
> could find an extra large file somewhere, but nothing is popping out. The
> only thing on the "/" filesystem is everything but /var and /usr. I'm
> suspicious of the manner in which /mnt may be affecting the root
> filesystem.
>
> Any ideas?
>
> FilesystemSize  Used Avail Use% Mounted on
> /dev/hda1 718M  674M  7.6M  99% /
> none   62M 0   61M   0% /dev/shm
> /dev/hda10618M  308M  310M  50% /home
> /dev/hdc1 643M  611M 0 100% /mnt/arc
> /dev/hda113.5G  2.1G  1.2G  61% /mnt/arc_2
> /dev/hda6 1.4G  1.4G   26M  99% /usr
> /dev/hda7 934M  538M  349M  61% /var
> /dev/hda9 3.9G  906M  2.8G  24% /var/ftp
> /dev/hda8 1.1G  179M  869M  18% /var/www
bud,,, each entry in /mnt takes about 4 bytes in the "/" filespace so I would 
bet that ai'nt it tried deleting (or cleaning) /tmp on boot?

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] HELP: Unbootable kernels after upgrade (9.1beta)

2003-01-12 Thread Svante Signell
Sorry to bother you again, but is there nobody out there running
Mandrake able to give me some pointers or answers so that new and old
kernels can boot in the mdk9.1beta environment??

Eg. looking at the thread entitled: "First 9.1beta *not* frustrating
experience" there seems to be problems with lilo booting. This is
exactly the case for me. EXT2 does not boot and EXT3 is not even tried
by the kernels/lilo...

Please help... Which packages to change for a _downgrade_ to 9.0 or
lower or what to do to boot the new 9.1beta: scrap lilo and go for
grub or ...

Thanks,
Svante

PS: Thank you to the people who already have replied, your help is appreciated.

Svante Signell writes:
 > Hello,
 > 
 > I have been following the cooker development for some time now
 > regularly upgrading. However, due to different reasons the upgrading
 > was halted for the last half year. When starting the upgrade again in
 > December from a situation around some time before 9.0 and halfway
 > through I got stuck. No kernels boot any longer, the following message
 > is displayed:
 > 
 > EXT2-fs: ide0(3,65): couldn't mount beacuse of unsupported optional features (4).
 > Kernel panic: VFS: unbootable mount root fs on 03:41.
 > 
 > I have been able to mount the partitions (including /) using rescue
 > mode kernels with ext3 fs, both for 8.1 and 9.0 CD's. All partitions
 > have been checked and I can use chroot to simulate my system. Also the
 > zip drive can be mounted so upgrading using packages from 8.1, 9.0
 > using CD and the cooker directory using the zip drive have been
 > attempted. No success so far :-(
 > 
 > The problem is that the kernel tries to mount the partitions in EXT2
 > mode and some features does not seem to be backwards
 > compatible... Also mounting in EXT2 mode for the 8.1 CD using the
 > 2.4.8 kernel gives the same error message as above. The /etc/modules
 > file consist of the following entries:
 > 
 > ext3 (no difference  without)
 > ide-floppy (for the zip)
 > 
 > but the boot process does not come far enough for this file to be read...
 > 
 > A couple of questions: 
 > 
 > 1. Which is the minimal list of packages needed for a succesful boot?
 > 
 > 2. depmod -a for the wanted kernels result in a lot of unresolved
 >symbols. Does this have any effect on the problems to boot the root
 >partition. Following the boot process on other boxes it seems that
 >depmod is run _after_ root is mounted, meaning that having correct
 >dependencies are not so important _before_ the root partiion is
 >mounted.
 > 
 > 3. Which boot scripts are executed up to mounting of the partitions
 >given in fstab, which packages contain these scripts and which
 >configuration files are needed?
 > 
 > 4. Is support for ext2 compiled in and ext3 is a module for kernels
 >2.4.18-16,-18, 2.4.20-2? How to get the ext3 module loaded correctly??
 > 
 > 5. How do you most easily switch between lilo and grub (not using any
 >*Drake tools)?
 > 
 > Packages installed (partial list):
 > SysVinit-2.84-1mdk.i586.rpm   lilo-22.3.4-1mdk.i586.rpm
 > basesystem-9.0-3mdk.i586.rpm bash-2.05b-11mdk.i586.rpm
 > e2fsprogs-1.32-2mdk.i586.rpm modutils-2.4.22-3mdk.i586.rpm
 > glibc-2.3.1-6mdk.i586.rpmmount-2.11x-2mdk.i586.rpm
 > glibc-profile-2.3.1-6mdk.i586.rpmnscd-2.3.1-6mdk.i586.rpm
 > initscripts-6.91-18mdk.i586.rpm  setup-2.2.0-33mdk.i586.rpm
 > ldconfig-2.3.1-6mdk.i586.rpm timezone-2.3.1-6mdk.i586.rpm
 > libext2fs2-1.32-2mdk.i586.rpmutil-linux-2.11x-2mdk.i586.rpm
 > libext2fs2-devel-1.32-2mdk.i586.rpm  zlib1-1.1.4-3mdk.i586.rpm
 > 
 > Want to buy your Pack or Services from MandrakeSoft? 
 > Go to http://www.mandrakestore.com


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



[expert] help with USB CDRW sought

2002-12-31 Thread Andrei Raevsky
Hi,

I am a newbie-list transfuge as I could not find any help on the newbie 
list, so I turn to you for help.  Please forgive me for posting such simple 
question, but I could find help nowhere else.

I am trying to install my external USB CD-burner (HP Writer Plus 8200 series 
external CD writer, connected on USB port) to my laptop. In order to submit 
you all the info, I will list here what I have found by looking around my 
computer.  I apologize for the lengthy listings.

Here is what I get:


*USB VIEWER SEES:

HP USB CD-Writer Plus
Manufacturer: Shuttle Technology Inc.
Speed: 12Mb/s (full)
USB Version:  1.00
Device Class: 00(>ifc )
Device Subclass: 00
Device Protocol: 00
Maximum Default Endpoint Size: 64
Number of Configurations: 1
Vendor Id: 03f0
Product Id: 0107
Revision Number:  2.00

Config Number: 1
	Number of Interfaces: 1
	Attributes: 40
	MaxPower Needed:   0mA

	Interface Number: 0
		Name: usb-storage
		Alternate Number: 0
		Class: ff(vend.)
		Sub Class: 00
		Protocol: 00
		Number of Endpoints: 3

			Endpoint Address: 01
			Direction: out
			Attribute: 2
			Type: Bulk
			Max Packet Size: 64
			Interval: 0ms

			Endpoint Address: 82
			Direction: in
			Attribute: 2
			Type: Bulk
			Max Packet Size: 64
			Interval: 0ms

			Endpoint Address: 83
			Direction: in
			Attribute: 3
			Type: Int.
			Max Packet Size: 2
			Interval: 32ms


*Mandrake Control Center HARDWARE DETECTS THE FOLLOWING ON USB PORT:

Vendor: Intel Corporation
Bus: PCI
Bus identification: 8086:7112
Location on the bus: 0:7:2
Description: 82371AB PIIX4 USB
Module: usb-uhci
Media class: SERIAL_USB


*The "connect" button triggers this response in the console:

Mon Dec 30 07:56:50 2002 Gtk-LOG **: file gtkstatusbar.c: line 233 
(gtk_statusbar_pop): assertion `context_id > 0' failed. at 
/usr/lib/libDrakX/harddrake/ui.pm line 223.


*Here is what lsmod (as root) gives me:

Module  Size  Used byNot tainted
ide-cd 28712   0  (autoclean)
cdrom  26848   0  (autoclean) [ide-cd]
floppy 49340   0  (autoclean)
binfmt_misc 5696   1
parport_pc 21672   1  (autoclean)
lp  6720   0  (autoclean)
parport23936   1  (autoclean) [parport_pc lp]
maestro27976   0
soundcore   3780   0  [maestro]
nfsd   66576   8  (autoclean)
lockd  46480   1  (autoclean) [nfsd]
sunrpc 60188   1  (autoclean) [nfsd lockd]
ds  6828   2
yenta_socket9728   2
pcmcia_core42272   0  [ds yenta_socket]
af_packet  13000   0  (autoclean)
ip_vs  74328   0  (autoclean)
supermount 14340   2  (autoclean)
usb-storage51952   0  (unused)
scsi_mod   90372   1  [usb-storage]
usb-uhci   21676   0  (unused)
usbcore58304   1  [usb-storage usb-uhci]
rtc 6560   0  (autoclean)
ext3   74004   2
jbd38452   2  [ext3]


*the command mount (as root) give me the following:

/dev/hda1 on / type ext3 (rw,noatime)
none on /proc type proc (rw)
none on /proc/bus/usb type usbdevfs (rw)
none on /dev type devfs (rw)
none on /dev/pts type devpts (rw,mode=0620)
/dev/hda6 on /home type ext3 (rw,noatime)
none on /mnt/cdrom type supermount 
(ro,dev=/dev/hdc,fs=auto,--,iocharset=iso8859-1,codepage=850,umask=0)
none on /mnt/floppy type supermount 
(rw,sync,dev=/dev/fd0,fs=auto,--,iocharset=iso8859-1,codepage=850,umask=0)
none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)


*Here is what I get with dmesg (as root):

Linux version 2.4.19-16mdk ([EMAIL PROTECTED]) (gcc version 3.2 
(Mandrake Linux 9.0 3.2-1mdk)) #1 Fri Sep 20 18:15:05 CEST 2002
BIOS-provided physical RAM map:
BIOS-e820:  - 0009f800 (usable)
BIOS-e820: 0009f800 - 000a (reserved)
BIOS-e820: 000eb000 - 0010 (reserved)
BIOS-e820: 0010 - 0bff (usable)
BIOS-e820: 0bff - 0bfffc00 (ACPI data)
BIOS-e820: 0bfffc00 - 0c00 (ACPI NVS)
BIOS-e820: fff8 - 0001 (reserved)
191MB LOWMEM available.
Advanced speculative caching feature not present
On node 0 totalpages: 49136
zone(0): 4096 pages.
zone(1): 45040 pages.
zone(2): 0 pages.
Kernel command line: BOOT_IMAGE=linux ro root=301 devfs=mount
Local APIC disabled by BIOS -- reenabling.
Could not enable APIC!
Initializing CPU#0
Detected 448.058 MHz processor.
Console: colour VGA+ 80x25
Calibrating delay loop... 894.56 BogoMIPS
Memory: 191864k/196544k available (1176k kernel code, 4292k reserved, 444k 
data, 136k init, 0k highmem)
Dentry cache hash table entries: 32768 (order: 6, 262144 bytes)
Inode cache hash table entries: 16384 (order: 5, 131072 bytes)
Mount-cache hash table entries: 4096 (order: 3, 32768 bytes)
Buffer-cache hash table entries: 8192 (order: 3, 32768 bytes)
Page-c

[expert] Help getting Wireless Dlink MA311 Prism 2. 5 based PCI card working

2002-12-19 Thread Mcleod, Ian
Hi,

Just brought the Dlink MA311 - trying to get it working on Mandrake 9.0 -
any ideas?

Installed wireless-tools - iwconfig complains 'on' and 'any' operations not
supported.

Can't compile wlan-ng (of course - nothing ever frigging compiles on
Mandrake - its a damn nightmare)

Card shows up in hardware list as Prism 2.5 based card - nothing can see it
beyond that (as far as I can tell) - networking wizard does not help at all.

Need to get encryption working too if possible - or is that hardware based?

MA311

Key features
11Mbps wireless desktop PC networking 
Reliable, 802.11b standards-based networking 
128-bit WEP encryption security 
Supports 98/Me/NT/2000/XP
3 year limited warranty 

Technical Specifications

Radio Data Rate:
1, 2, 5.5, 11 Mbps (Auto Rate Sensing)

Frequency Band:
2.4 GHz to 2.5 GHz Direct Sequence Spread
Spectrum (DSSS)

Operating Range:
Closed Environment
@ 1 Mbps 656 ft. (200m)
@ 2 Mbps 426 ft. (130m)
@ 5.5 Mbps 262 ft. (80m)
@ 11 Mbps 196 ft. (60m)

Open Environment
@ 1 Mbps 1476 ft. (450m)
@ 2 Mbps 885 ft. (270m)
@ 5.5 Mbps 557 ft. (170m)
@ 11 Mbps 394 ft. (120m)

Encryption:
64-bit (also called 40-bit) WEP data encryption
128-bit WEP data encryption

Frequency Band:
5.15 ~ 5.25 GHz (lower band) for US/Canada, Japan
5.25 ~ 5.35 GHz (middle band) for US/Canada

Bus interface:
32-bit PCI v2.2 Compliant

Provided drivers:
Microsoft Windows 98, NT 4.0, Me, 2000, XP

Dimensions:
W: 4.72 in (120 mm)
H: 2.60 in (65 mm)

Weight:
80 g (3 oz)

Status LED:
LINK

Electromagnetic Compliance:
FCC Part 15 Sub Class B and Class C

Environment Specifications:
Operating temperature: 0 to 50°C

Warranty:
Limited 3-year warranty


System Requirements
Pentium III Class PC with an available PCI 2.2 compliant slot.
5 Mbytes of free hard drive space.

Package Contents
MA311 802.11b Wireless PCI Adapter
MA311 Resource CD with Windows Drivers
Quick Installation Guide
Support Information Card
Warranty and Registration Card


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Help needed in copying files from DVD/CD to Harddisk

2002-12-03 Thread Ralph De Witt
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Monday 02 December 2002 08:03 pm, H. Narfi Stefansson wrote:
> I used the following to disable supermount:
>
> cp /etc/fstab /etc/fstab.with_supermount
> supermount -i disable
>
> This will give you a new /etc/fstab file and supermount will be completely
> disabled after the next reboot.
>
> Your problems sound typical of the supermount problems and they should go
> away once you disable it.
Thanks very much for the above commands. That has done the trick to get me to 
be able to reliable copy files from my backup cd's back to my system. Now if 
only someone could convince Mandrake to move on to a auto mounter that works. 
Supermount has been a problem for years and I see no resolution in site for 
it.
- -- 
Yours,
Ralph.
It said Use Windows XP or better, so I installed Mandrake-Linux 9.0 
Register Linux User 168814 ICQ #49993234 AIM ralphdewitt jabber.org 
ralphdewitt
GPG Public Key available at http://www.keyserver.net
Key Fingerprint = B290 C655 3CBF 3744 D896 C647 538B 4558 A3A9 65FF 
Kernel version 2.4.19-16mdk
Current Linux uptime: 34 days 3 hours  minutes.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE97Z/0U4tFWKOpZf8RAkj4AJ9mYYqjvQsbbDj5zkqD5i3m9IaVAACeKB9T
6+UBHs709SqpoYZcPllWXrY=
=Twuc
-END PGP SIGNATURE-



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re:[expert] Help needed in copying files from DVD/CD to Harddisk

2002-12-03 Thread Ralph De Witt
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Monday 02 December 2002 08:46 pm, Ron Stodden wrote:
> Ralph De Witt wrote:
> > I have just done a new install of Mandrake 9.0 on a MSI KT3 ULTRA2
> > motherboard. I am having some problems with the DVD/CDrom.
> > When I try to copy files from the CD to the hard drive the system is
> >  loosing files and directories from the cd and a refresh of the cd does
> > not show them.
>
> Make sure that your DVD/CDROM drive and your hard disk are NOT on the
> same IDE channel.
>
> Some motherboard chipsets cannnot handle the multitasking that Linux
> (but not Windows) uses.
Ron:
The hard drive is master on ide channel 1 and the DVD is master on ide channel
2 the CD R/W is slave on ide channel 2. So that is not the problem.
- -- 
Yours,
Ralph.
It said Use Windows XP or better, so I installed Mandrake-Linux 9.0 
Register Linux User 168814 ICQ #49993234 AIM ralphdewitt jabber.org 
ralphdewitt
GPG Public Key available at http://www.keyserver.net
Key Fingerprint = B290 C655 3CBF 3744 D896 C647 538B 4558 A3A9 65FF 
Kernel version 2.4.19-16mdk
Current Linux uptime: 2 days 11 hours 11 minutes.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE97QErU4tFWKOpZf8RAlQZAJ9Z4RZjar5IRVEcviQrxze9/qslsgCgk7Wt
Bo1uxuAgtRe0Mz0gCxSfujA=
=VAa0
-END PGP SIGNATURE-



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Help needed in copying files from DVD/CD to Harddisk

2002-12-02 Thread H. Narfi Stefansson
On Monday 02 December 2002 18:12, Ralph De Witt wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> On Monday 02 December 2002 04:03 pm, FRLinux wrote:
> > > When I try to copy files from the CD to the hard drive the system is
> > >  loosing files and directories from the cd and a refresh of the cd
> > > does not show them.
> >
> > Funily (or not) enough, i got the same problem yesterday after having
> > installed my Mandrake 9.0 on a VIA system (don't think it's related
> > but who knows). I fixed it by installing a vanilla kernel. I lost
> > supermount (which i never use anyway) but all is happy now.
>
> Hello:
> Can anyone else comment on this. Would turning off Supermount in MCC
> under Mount points fix this problem. Or do I need to do more?
> - --
> 
I used the following to disable supermount:

cp /etc/fstab /etc/fstab.with_supermount
supermount -i disable

This will give you a new /etc/fstab file and supermount will be completely 
disabled after the next reboot. 

Your problems sound typical of the supermount problems and they should go 
away once you disable it.

Narfi.


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Help needed in copying files from DVD/CD to Harddisk

2002-12-02 Thread Ralph De Witt
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Monday 02 December 2002 04:03 pm, FRLinux wrote:
> > When I try to copy files from the CD to the hard drive the system is
> >  loosing files and directories from the cd and a refresh of the cd does
> > not show them.
>
> Funily (or not) enough, i got the same problem yesterday after having
> installed my Mandrake 9.0 on a VIA system (don't think it's related but
> who knows). I fixed it by installing a vanilla kernel. I lost supermount
> (which i never use anyway) but all is happy now.
Hello:
Can anyone else comment on this. Would turning off Supermount in MCC under 
Mount points fix this problem. Or do I need to do more?
- -- 
Yours,
Ralph.
It said Use Windows XP or better, so I installed Mandrake-Linux 9.0 
Register Linux User 168814 ICQ #49993234 AIM ralphdewitt jabber.org 
ralphdewitt
GPG Public Key available at http://www.keyserver.net
Key Fingerprint = B290 C655 3CBF 3744 D896 C647 538B 4558 A3A9 65FF 
Kernel version 2.4.19-16mdk
Current Linux uptime: 1 days 16 hours 16 minutes.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE96/bkU4tFWKOpZf8RAr0kAJ9QbW4jSF15aDooUbYwbGgha35T7gCgpOKT
dquHbGdPDwKq+Kw/kwiYXck=
=2gc3
-END PGP SIGNATURE-



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Help needed in copying files from DVD/CD to Harddisk

2002-12-02 Thread FRLinux
Hello,

> When I try to copy files from the CD to the hard drive the system is
>  loosing files and directories from the cd and a refresh of the cd does not
> show them.

Funily (or not) enough, i got the same problem yesterday after having
installed my Mandrake 9.0 on a VIA system (don't think it's related but
who knows). I fixed it by installing a vanilla kernel. I lost supermount
(which i never use anyway) but all is happy now.

> And the second problem I have is that when I close the window displaying the
> contains of the CD and then right click the cdrom icon to eject the disc the
> drive opens then quickly closes making it hard to get the cd out. Can any one
> point me in the right direction to cure these problems?

I think you don't need to umount, just open your CDROM drive and see if
the icon disappears.

Steph




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



[expert] Help needed in copying files from DVD/CD to Harddisk

2002-12-02 Thread Ralph De Witt
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi:
I have just done a new install of Mandrake 9.0 on a MSI KT3 ULTRA2
motherboard. I am having some problems with the DVD/CDrom.
When I try to copy files from the CD to the hard drive the system is
 loosing files and directories from the cd and a refresh of the cd does not
show them.
And the second problem I have is that when I close the window displaying the
contains of the CD and then right click the cdrom icon to eject the disc the
drive opens then quickly closes making it hard to get the cd out. Can any one
point me in the right direction to cure these problems?
I have tried disabling Supermount in the Mandrake Control Center, Mount Points
area and this did not seem to have any effect on problem #1. I have also
looked in The errata and troubleshooting areas and found nothing to help. I
have also tried Mandrake Newbie list but got no answers. I can live with the
quickly opening and shutting CD ROM drive on eject, but need to cure the
loosing files and directiories when transfering problem. Thanks in advance.

- -- 
Yours,
Ralph.
It said Use Windows XP or better, so I installed Mandrake-Linux 9.0 
Register Linux User 168814 ICQ #49993234 AIM ralphdewitt jabber.org 
ralphdewitt
GPG Public Key available at http://www.keyserver.net
Key Fingerprint = B290 C655 3CBF 3744 D896 C647 538B 4558 A3A9 65FF 
Kernel version 2.4.19-16mdk
Current Linux uptime: 1 days 15 hours 58 minutes.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE96/J1U4tFWKOpZf8RAsEfAJ94tuImmVdYzsa/QngA0+wT5vXX8ACePm3h
pIqJJNaE6jvG2Ac2DQEtLMc=
=1qjx
-END PGP SIGNATURE-



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] HELP: USB mouse configuration question

2002-12-01 Thread mike
Here is the relevant portion of my   "/etc/X11/XF86Config-4" file.
Hope it helps.

Section "InputDevice"

Identifier  "Mouse1"
Driver  "mouse"
Option "Protocol""IMPS/2"
Option "Device"  "/dev/usbmouse"
Option "ZAxisMapping" "4 5"
#Option "Emulate3Buttons"
#Option "Emulate3Timeout""50"

# ChordMiddle is an option for some 3-button Logitech mice

#Option "ChordMiddle"

EndSection



On Sunday 01 December 2002 15:52, ding chi wrote:
> Hi there
>
>   I  am using Mandrake Linux 8.3. Everything was fine until my PS/2
> mouse port had some problems and didn't work. Therefore I bought a new USB
> mouse and it works fine under Win98.
>
>   The problem happened after I boot and enter Linux. Before it
> entered X-window, Linux detected  a new USB mouse and asked me to choose
> the mouse type. Then, I followed the instructions and chose a type.
> However, after it entered X-window, there was still no mouse.
>
>   I tried to configure the mouse under terminal mode using
> "mouseconfig" command.  I tried differed mouse driver types and everytime
> after I modified the mouse type, I did restart the computer. Unfortunately,
> all my effort failed.
>
>  I believed that " mouseconfig" did modifty the system mouse
> configuration since everytime when I enter "mouseconfig" , the last time
> mouse config  modification was still there. I guess it's because X-window 
> still tried to use the old X-window configuration even though the system
> mouse configuration has been changed by me.
>
>  Then I tried to use XF86Configure ( I cannot remember it clearly)
> command and edit some XF86 configuration file, but still failed.
>
> I'm very anxious about this question. Anyboy can help me?  Any
> reply from you guys will be highly appreciated.
>
> Chi Ding
>
>
>
> -
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now


Content-Type: text/html; charset="us-ascii"; name="Attachment: 1"
Content-Transfer-Encoding: 7bit
Content-Description: 



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



[expert] HELP: USB mouse configuration question

2002-12-01 Thread ding chi
Hi there
  I  am using Mandrake Linux 8.3. Everything was fine until my PS/2 mouse port had some problems and didn't work. Therefore I bought a new USB mouse and it works fine under Win98. 
  The problem happened after I boot and enter Linux. Before it entered X-window, Linux detected  a new USB mouse and asked me to choose the mouse type. Then, I followed the instructions and chose a type. However, after it entered X-window, there was still no mouse. 
  I tried to configure the mouse under terminal mode using "mouseconfig" command.  I tried differed mouse driver types and everytime after I modified the mouse type, I did restart the computer. Unfortunately, all my effort failed.
 I believed that " mouseconfig" did modifty the system mouse configuration since everytime when I enter "mouseconfig" , the last time mouse config  modification was still there. I guess it's because X-window  still tried to use the old X-window configuration even though the system mouse configuration has been changed by me.
 Then I tried to use XF86Configure ( I cannot remember it clearly) command and edit some XF86 configuration file, but still failed. 
    I'm very anxious about this question. Anyboy can help me?  Any reply from you guys will be highly appreciated.
    Chi DingDo you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now

[expert] Help!-System recovery chaos (a bit long)

2002-12-01 Thread gikoreno
 Dear all,After having had an extremely stable system for a while now (MDK 9.0), I stupidly played around with the BIOS' power management features, and the system locked. So I had to hard reboot, and changed them back to what they were, thinking all would be fine...They system locked up again, with kernel error messages that were pretty cryptic (only hex numbers).My system is configured with several RAID5 partitions and a RAID0 partition. I booted with the failsafe kernel, and went into maintenance mode.Surely enough, checking /proc/mdstat, the RAID arrays were rebuilding themselves. Sounded good. Once they finished I unmounted them and did an xfs_check on each partition (except / and /usr) and no errors were found. I tried the restore booting from the installation CDs, but surely enough, because of the RAID setup etc, the partitions couldn't be found.Anyways, so I reboot again, and this time, it seems to be loading, and  o-oh, what do I get? KDM with all "users icons" appearing in the box, and no background image (black screen). I thought this would be simple to fix so I proceed to try logging in.The system crashed I believe, so I did the above mentioned steps again. Next time, instead of trying to log into KDM, I went to one of the virtual consoles, and started GDM on another screet (:1 instead of :0). BTW, GDM is very nice. So I start KDE (for the first time for that user), and I get several siggfaults(?) and errors, but eventually the sytem starts up. There had been some error messages with the font server, so I thought that running the Xserver configuration tool would fix that. Another error I got was that .devfsd couldn't be found.I restart the Xserver on :0, and then I reconfigure KDM to only show the users I wanted to see, and chose the background. Surely enough the users displayed were changed, but no background yet... So I restart machine to see if everything is fine. This time .devfsd was mounted so that was ok, no error with X font server, so that seemed ok, but KDM has still no background. I try to log in, and I get the X window, with a smaller console window in the top left. Surely enough I can still log into GDM on :1 .My data seems to be all there... for safety I did another backup of the essential files (/etc and all my docs). When I was trying to archive the files, the console window was crashing... but eventually it worked. I had a few more lockups, and complaints about the scsi device not finding the block size or something (I assumed it was the CDR drive)I don't know what happened. fstab and mtab are fine, mdstat shows no problems, I have tons of data and although the most important stuff is backed up, lots would be lost. Because everything is in RAID configuration, I don't know if I can do the usual Mandrake Upgrade install trick would work.What I did to be able to post to the list was to change the /etc/sysconfig/desktop file to start GDM instead, and pop two random data CDs into the CD and CDR drives. Now I can log-in to the machine, and this time there was no error at all (everything seems fine). I don't know if KDM works or not, and I don't know if KDE works or not (GNOME is my default).And most importantly, I don't know how bad the sytem was affected, or how reliable it is. I am in the middle of final exams, so this is really not the right time for this to happen... but hey, it's Moore's law isn't it?I'd really appreciate your advice, what shall I do to ensure the system works, and to fix whatever might be wrong?gikorenoJoin Excite! - http://www.excite.comThe most personalized portal on the Web!


Re: [expert] Help with fetchmail/fetchmailconf

2002-11-23 Thread Philip Webb
021121 Praedor Tempus wrote:
> I have fetchmail 6.1.0 and fetchmailconf.
> I ran fetchmailconf to configure fetchmail during an initial test
> but now the test is over and I want to change its polling behavior.
> I try to run fetchmailconf now and it errors out with this:
>   Can't read configuration output of fetchmail --configdump.

i ran into this with 6.1.0 & went back to 5.9.12 ; 6.1.2 is out & mb ok.
check that you have  /etc/fetchmailrc  as well as  ~/.fetchmailrc :
the former is needed to run the daemon.

-- 
,,
SUPPORT ___//___,  Philip Webb : [EMAIL PROTECTED]
ELECTRIC   /] [] [] [] [] []|  Centre for Urban & Community Studies
TRANSIT`-O--O---'  University of Toronto


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Help with fetchmail?

2002-11-21 Thread Ronald J. Hall
On Thursday 21 November 2002 11:49 am, you wrote:
> Something has gone wrong here.  I have tried to setup fetchmail to work
> with my local postfix and procmail.  I have fetchmail setup to query my
> yahoo pop mail server every 2 minutes.  It is actually downloading the mail
> from yahoo to what appears to be a blackhole on my system, however.
>
> In testing, I logged into the yahoo web mail interface and saw a new
> message there in my inbox.  I ran fetchmail and it vanished from yahoo but
> it never appeared on my system here.
>
> I am using kmail and have set it for local mail.  I have tried pointing it
> to /var/spool/mail/praedor and /var/mail/praedor with no affect.  No new
> messages ever appear.  I cannot find where fetchmail is placing the mail.
>
> Where might I look to find the location fetchmail is stashing messages?
>
> praedor

Praedor, you did say you are using procmail, right? If so, you can do (as 
user) a:

procmail -v

and lots of useful info pops up, including the last line which shows your 
system mailbox.

HTHs!

-- 
  /\
  Dark< >Lord
  \/


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Help with fetchmail?

2002-11-21 Thread Praedor Tempus
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I was wrong.  The new message WERE coming in and being processed by procmail 
into their respective KMail folders.  The thing is, they never show up as new 
and unread messages (red text), instead showing up as already read, making it 
hard to track them.

praedor

On Thursday 21 November 2002 11:49 am, Praedor Tempus wrote:
> Something has gone wrong here.  I have tried to setup fetchmail to work
> with my local postfix and procmail.  I have fetchmail setup to query my
> yahoo pop mail server every 2 minutes.  It is actually downloading the mail
> from yahoo to what appears to be a blackhole on my system, however.
>
> In testing, I logged into the yahoo web mail interface and saw a new
> message there in my inbox.  I ran fetchmail and it vanished from yahoo but
> it never appeared on my system here.
[...]
- -- 
Conservatives of all times are adventitious liars.
- - Friedrich Nietzsche.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE93REI1i/6R1B/Yh0RApMpAJ9WNi4PXYf3p2Z4GaPh7BCKyTERBgCfZbON
OgwHVbFLoD2BjeYo3FTvhiM=
=Ab+m
-END PGP SIGNATURE-


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Help with fetchmail/fetchmailconf

2002-11-21 Thread David Rankin
I don't know about fetchmailconf, but sometimes the old ways are still the best.
Try this:

# /etc/rc.d/init.d/fetchmail stop
# vi /etc/fetchmailrc

:wq
#fetchmail -f /etc/fetchmailrc

That should do it..


Praedor Tempus wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> I have been running postfix on my system for a long time, primarily for
> sending mail, receiving mail from my yahoo pop mail account.  I am now trying
> to setup fetchmail to work with postfix and procmail plus spamassassin to act
> for both incoming and outgoing mail.
>
> I have fetchmail 6.1.0 and fetchmailconf.  I ran fetchmailconf to configure
> fetchmail during an initial test but now the test is over and I want to
> change its polling behavior.  I try to run fetchmailconf now and it errors
> out with this:
> [praedor@lapdog praedor]$ fetchmailconf
> Can't read configuration output of fetchmail --configdump.
>
> This has happened twice.  I can only run fetchmailconf once.  After that, it
> is impossible because it errors out.  What is the problem here and how do I
> fix it?
>
> praedor
> - --
> Conservatives of all times are adventitious liars.
> - - Friedrich Nietzsche.
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.0.7 (GNU/Linux)
>
> iD8DBQE93PpU1i/6R1B/Yh0RAuBWAKCCEqUgqyHBi1HXJBFWzDCVscDyAACePQ4S
> fjwcr2+8rEVCiTe5PYv6H2U=
> =Of+E
> -END PGP SIGNATURE-
>
>   
> Want to buy your Pack or Services from MandrakeSoft?
> Go to http://www.mandrakestore.com

--
David C. Rankin, J.D., P.E.
RANKIN * BERTIN, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Help with fetchmail?

2002-11-21 Thread Jerry A!
On Thu, Nov 21, 2002 at 11:49:13AM -0500, Praedor Tempus wrote:
: -BEGIN PGP SIGNED MESSAGE-
: Hash: SHA1
: 
: Something has gone wrong here.  I have tried to setup fetchmail to work with 
: my local postfix and procmail.  I have fetchmail setup to query my yahoo pop 
: mail server every 2 minutes.  It is actually downloading the mail from yahoo 
: to what appears to be a blackhole on my system, however.
: 
: In testing, I logged into the yahoo web mail interface and saw a new message 
: there in my inbox.  I ran fetchmail and it vanished from yahoo but it never 
: appeared on my system here.
: 
: I am using kmail and have set it for local mail.  I have tried pointing it to 
: /var/spool/mail/praedor and /var/mail/praedor with no affect.  No new 
: messages ever appear.  I cannot find where fetchmail is placing the mail.
: 
: Where might I look to find the location fetchmail is stashing messages?

Try looking through /var/log/mail/* and seeing where postfix says it's
delivering the mail?  /var/log/mail/info should tell you where it's
being delivered to, and /var/log/mail/errors should show you if it's
being bounced.

--Jerry

Open-Source software isn't a matter of life or death...
...It's much more important than that!


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



  1   2   3   4   >