[gentoo-user] Re: [SUSPECTED SPAM] [OT] Best *SIMPLE* firewall?

[Alberto Luaces]

Heiko Baums writes:

> Am Wed, 28 Feb 2018 16:15:59 -0500
> schrieb "Walter Dnes" :
>
>>   Is there something besides iptables?  It seems to be like
>> systemd/perl/python, continuously expanding its scope.  And no, I'm
>> not looking for an "easy-peasy front-end gui" that'll probably pull
>> in 90% of QT as dependancies.  I fondly remember IPCHAINS.
>
> I don't know what you're looking for exactly.
>
> If you want a command line tool for configuring your firewall with an
> easier syntax than iptables you could try ufw.

Indeed.  And its graphical interface:

https://packages.gentoo.org/packages/net-firewall/ufw-frontends

-- 
Alberto

[gentoo-user] Re: Read-only access to a git repo

[Alberto Luaces]

I would add gitolite to the recommendation list, as it is a small but
powerful system: the administration interface is a git repository as
well, so each repository/user can be individually configured without
accessing system files:

http://gitolite.com/gitolite/
-- 
Alberto

[gentoo-user] Re: compressing pdf file

[Alberto Luaces]

"J. Roeleveld" writes:

> On February 22, 2017 11:12:01 PM GMT+01:00, k...@aspodata.se wrote:
>>Thelma:
>>> I have scaned pdf file (88-page) 23MB in size (downloaded this way).
>>> Trying to reduce the size of the file I [...]
>>
>>Why don't you extract the images with pdfimages from the pdf and
>>compress them with xv or convert (imagemagic) and maybe gimp can 
>>comress them also. Don't know how to get them back into a pdf though.
>>
>>Regards,
>>/Karl Hammar
>
> If I remember correctly, you can merge images into a PDF using convert:
> # convert image1.jpg image2.jpg  output.pdf
>
> I use this technique when I find some images need turning or resorting after 
> scanning bigger documents.

When going through that route, it is my experience that img2pdf does a
much better job than imagemagick because it deals with the .jpg
compression losslessly.

-- 
Alberto

[gentoo-user] Re: followups via gmane broken

[Alberto Luaces]

James writes:

> Hello,
>
> I can post to the gentoo-user group just fine.
> But gmane will not allow 'followup'. Anybody else using gmane.org
> having such issues?

Followup like this?

-- 
Alberto

[gentoo-user] Re: pm-suspend problem

[Alberto Luaces]

Philip Webb writes:

> What am I doing wrong ?

I don't know.

> Am I using the correct tool ?

Yes, it works for me in all my computers, but they use a different linux
distribution.

-- 
Alberto

[gentoo-user] Re: smartctrl drive error @60%

[Alberto Luaces]

Mick writes:

 echo My first test message | mail -v -s Test for sSMTP 1 d...@gmail.com

What about trying

echo My first test message | mail -v -s Test for sSMTP 1 root

directly?  Therefore you can see if your aliases are correct.

-- 
Alberto

[gentoo-user] Re: Rootkit?

[Alberto Luaces]

Nilesh Govindarajan writes:

 One of the servers I manage has a strange problem.

 Every 24h, someone starts a process shows up as perl in the list, but
 launching command is /usr/sbin/httpd.
 It shows just one process, but when I run something like this:

 ps -C perl -o cmd,pid

 I get some 5-6 processes alternatively with cmd as /usr/sbin/httpd or
 /usr/bin/perl.

 The even more interesting thing is, /usr/sbin/httpd does not exist.
 I suspect a rootkit, but chkrootkit  rkhunter reported nothing.

 Also, I found a mysterious file: /tmp/ips.txt with following content:
 xxx.xxx.xxx.xxx
 127.0.0.1
 addr:xxx.xxx.xxx.xxx
 addr:
 addr:127.0.0.1
 addr:

 Somebody is aware of a malware/rootkit which creates such files?

I had some of that recently. The attacker used a instance of phpmyadmin
to inject into its URL a wget command to download a perl script from
another site. Look for `wget' into apache logs.

-- 
Alberto

[gentoo-user] Re: /dev/sda* missing at boot

[Alberto Luaces]

Neil Bothwick writes:

 On Wed, 7 Sep 2011 19:04:17 -0400, Canek Peláez Valdés wrote:

  Putting it on a logical volume is one advantage, allowing /usr to be
  resized should the need arise.  
 
 Why not allow / to be resized entirely? You probably will take the
 machine off-line anyway.

 Because you can't boot from an LV, so you'd than need a separate /boot
 and an initramfs. Without LVM, you are unlikely to be able to resize /
 or /usr as it is not usually the last partition on the drive.


Isn't it possible now with grub2?. I think it can read inside LVM
partitions. I have not personally tested it but I have a RAID system
with no separate /boot partition — a close case.

-- 
Alberto

[gentoo-user] Re: /dev/sda* missing at boot

[Alberto Luaces]

Alberto Luaces writes:

 Neil Bothwick writes:

 On Wed, 7 Sep 2011 19:04:17 -0400, Canek Peláez Valdés wrote:

  Putting it on a logical volume is one advantage, allowing /usr to be
  resized should the need arise.  
 
 Why not allow / to be resized entirely? You probably will take the
 machine off-line anyway.

 Because you can't boot from an LV, so you'd than need a separate /boot
 and an initramfs. Without LVM, you are unlikely to be able to resize /
 or /usr as it is not usually the last partition on the drive.


 Isn't it possible now with grub2?. I think it can read inside LVM
 partitions. I have not personally tested it but I have a RAID system
 with no separate /boot partition — a close case.

Ah, you mean without initramfs.

-- 
Alberto

[gentoo-user] Re: smplayer and kmplayer only works (almost) OK as root

[Alberto Luaces]

Francisco Ares writes:

 # mplayer -msglevel all=6 sleeping\ suricates.wmv
  ^

That hash suggests that you are running the command as root. Type
`whoami' to make sure.

-- 
Alberto

[gentoo-user] Re: ebuild not inserting soname, therefore emerging zlib fails

[Alberto Luaces]

Alberto Luaces writes:

 Hi Paul,

 Paul Hartman writes:

 On Fri, May 27, 2011 at 11:26 AM, Alberto Luaces alua...@udc.es wrote:
 Hello,

 I have searched quite a bit for an error I'm having when emerging
 current zlib-1.2.5-r2. The problem is that somehow the soname is not
 written in the .so file, and the build process fails. I attach all the
 build logs in case I have some obvious misconfiguration that I should be
 aware of. I have not changed my CHOSTS or things like that.

 I recompiled the previous version and happened the same, but it seems
 at that time not having a soname was not forbidden by the ebuild and I
 got just a QA notice.

 If I try to compile zlib from the /var/tmp/portage... directory the
 library compiles fine and, in addition, the soname is included this
 time. I tried to trace the eclasses in order to know what was happening
 but I couldn't.

 Hi,

 Based on your settings I am guessing you have used distcc in the past,
 even though you have disabled it now.

 You are right, well spotted!

 I think zlib's configure makes some changes based on if it thinks you
 use distcc or not. I would try to unset CC in environment and remove
 -m32 from your CFLAGS and see if it is any different. It's only a
 guess and you can change it back if it doesn't work.


 My environment CC was empty or already unset, I removed the `-m32' tag
 but it happens the same.


 I would also select again your preferences in gcc-config and
 binutils-config, run env-update and source /etc/profile just to be
 sure everything is in working order. :)


 I followed your advice. I have only another compiler, the mingw cross
 compiler, but I checked that is not selected byb default.

 Nevertheless, thank you for your help. You gave me the idea on focusing
 on zlib's configure script in order to see what is failing in the
 detection process.

I finally found it. Turns out that for using distcc I had to set CC=cc
in make.conf, and with that setting, zlib's configure avoided to build
the shared library. Unsetting CC in make.conf made it working again.

-- 
Alberto

[gentoo-user] Re: ebuild not inserting soname, therefore emerging zlib fails

[Alberto Luaces]

Hi Paul,

Paul Hartman writes:

 On Fri, May 27, 2011 at 11:26 AM, Alberto Luaces alua...@udc.es wrote:
 Hello,

 I have searched quite a bit for an error I'm having when emerging
 current zlib-1.2.5-r2. The problem is that somehow the soname is not
 written in the .so file, and the build process fails. I attach all the
 build logs in case I have some obvious misconfiguration that I should be
 aware of. I have not changed my CHOSTS or things like that.

 I recompiled the previous version and happened the same, but it seems
 at that time not having a soname was not forbidden by the ebuild and I
 got just a QA notice.

 If I try to compile zlib from the /var/tmp/portage... directory the
 library compiles fine and, in addition, the soname is included this
 time. I tried to trace the eclasses in order to know what was happening
 but I couldn't.

 Hi,

 Based on your settings I am guessing you have used distcc in the past,
 even though you have disabled it now.

You are right, well spotted!

 I think zlib's configure makes some changes based on if it thinks you
 use distcc or not. I would try to unset CC in environment and remove
 -m32 from your CFLAGS and see if it is any different. It's only a
 guess and you can change it back if it doesn't work.


My environment CC was empty or already unset, I removed the `-m32' tag
but it happens the same.


 I would also select again your preferences in gcc-config and
 binutils-config, run env-update and source /etc/profile just to be
 sure everything is in working order. :)


I followed your advice. I have only another compiler, the mingw cross
compiler, but I checked that is not selected byb default.

Nevertheless, thank you for your help. You gave me the idea on focusing
on zlib's configure script in order to see what is failing in the
detection process.

-- 
Alberto

[gentoo-user] ebuild not inserting soname, therefore emerging zlib fails

[Alberto Luaces]

Hello,

I have searched quite a bit for an error I'm having when emerging
current zlib-1.2.5-r2. The problem is that somehow the soname is not
written in the .so file, and the build process fails. I attach all the
build logs in case I have some obvious misconfiguration that I should be
aware of. I have not changed my CHOSTS or things like that.

I recompiled the previous version and happened the same, but it seems
at that time not having a soname was not forbidden by the ebuild and I
got just a QA notice.

If I try to compile zlib from the /var/tmp/portage... directory the
library compiles fine and, in addition, the soname is included this
time. I tried to trace the eclasses in order to know what was happening
but I couldn't.

Thank you,



zlib.logs.tar.bz2
Description: Binary data

-- 
Alberto