Re: MELBA wed

2002-08-28 Thread Jon Hall

[EMAIL PROTECTED] said:
> (raises hand) 

You are a brave man, Gungha Din!

>So... it's upstairs of Martha's Exchange?

So far, that is the plan.but it would be nice if someone (Rob?) called
to make sure the room was available.

>Can you get dinner up there, or should you eat at home?

You could do either...and I suspect that some of our members do both...but
we normally gather for dinner at about 6 P.M. downstairs in the restaurant
at one of the tables to the FAR right of the hostess station, ALL the way in
the back of the restaurant.  There is an "area" that they put the rowdy people.
I will try to be there at 1830 or so, but I will be coming from the Red Hat
Open House and Career Day:

http://bostonworks.boston.com/events/openhouses/redhat.shtml

so I might be a little late.  I *will* be there for 1900 hours though, to
heckle Ben.

>and... libations -after- the presentation (not during)?

I was one of the people who helped to start the libations during the meeting,
and they flowed fast and furious.  But we also have some younger members
and some non-drinking members, and I felt that the drinking was not setting
a "family atmosphere" (although if I had a family we would all drink like fish,
but that is another story), so I suggested we keep the main libations to
after the meeting.  Certainly no one would throw you out if you brought a beer
up from downstairs to drink quietly during the meeting.  But filling up the
small child's wading pool with beer and jumping in fully clothed just had to
stop.
-- 
=
Jon "maddog" Hall
Executive Director   Linux International(SM)
email: [EMAIL PROTECTED] 80 Amherst St. 
Voice: +1.603.672.4557   Amherst, N.H. 03031-3032 U.S.A.
WWW: http://www.li.org

Board Member: Uniforum Association, USENIX Association

(R)Linux is a registered trademark of Linus Torvalds in several countries.
(SM)Linux International is a service mark of Linux International, Inc.

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Andrew W. Gaunt


Just adding a data point for the discussion:

I've got a Lucent Orinco access point (no surprise since
I work for Lucent) and like it. It's configured to act
as a 'bridge' between the wireless segment of the home
network and the wired side. I've got a linksys router
connecting everything to the WAN on wired side and
the heavy hitting machines are wired to it.

For wireless clients, I've got an IBM laptop which has
an Orinoco PCMCIA wireless network interface. The kids'
PCs are also  on the wireless side and are equipped with
Linksys USB wireless network adapaters. They work well
enough for the kids. Haven't done anything serious with
them however.

FYI - check out http://www.netstumbler.org for
some interesting reading re: 802.11. There
is a utility called netstumbler which can be used
to sniff around for 802.11 networks. Cool.

__
 | 0|___||.  Andrew Gaunt *nix Sys. Admin., etc.
_| _| : : }  [EMAIL PROTECTED] - http://www-cde.mv.lucent.com/~quantum
 -(O)-==-o\  [EMAIL PROTECTED] - http://www.gaunt.org



___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Rich Payne

On 27 Aug 2002, Paul Iadonisi wrote:

> On Tue, 2002-08-27 at 19:38, Ken Ambrose wrote:
> > IMHO, stay the hell away from Prism chipsets (eg. the Linksys cards).
> > You have to play all sorts of games with re-compiling:
> > - your kernel
> > - PCMCIA stuff from Sourceforge
> > - linux-wlan drivers
> > 
> > None of this may necessary if you have a stock kernel -- they try to have
> > stock binaries at the linux-wlan site.  Andy maybe someone's had an easier
> > time of it than me.  But I've tried, twice, to get the darn drivers
> > working.  The first time, after ages, I got it going, under RH 7.1.  I
> > also finally got it working under 7.3... but now none of my /other/
> > PCMCIA/Cardbus network cards work.  It's really, really, really annoying.
> 
>   I think I'd have to agree, here.  That's why I took Tom Buskey's
> earlier advice and returned the Linksys WPC11v22 today.  I'm looking at
> the possibility of getting a Cisco 350.  I tried one today and was
> astonished that it required *zero* tweaking of my Red Hat 7.3
> distribution.  I plugged it in, and had an address in seconds (on eth0
> instead of that funky wlan0).  It is quite a bit more expensive (~$140
> vs. ~$90), but when I see something work out of the box like that, I
> don't mind paying more for it.

I can second this. Like most things I've found with Cisco, it's expensive, 
but it works. Cisco also provide a driver and a port of their ACU utility 
for Linux. It allows you to setup various profiles (Home, work etc..) and 
check Link quality, strength etc...

>   My experience, of course, was exacerbated by the Linksys
> WPC11v3/WAPv2.2 incompatibility.  I *did* manage to get the WPC11v3
> working without rebuilding my kernel, but I had to jump through a number
> of hoops.  The available rpms available for the linux-wlan drivers run a
> bit behind, as well (v0.14 of linux-wlan for 2.4.18-5 of the kernel
> where 0.15-pre4 is out and so is the 2.4.18-10 kernel errata), so I had
> to try building my own.  I was about to dive into that until I had such
> an easy time with the Cisco and decided to can the Linksys.

I also have a 3Com card (based on the Spectrum24_T chipset) and this is 
now fairly easy to use in Linux. Though in the beginning it was a 
nightmare.

--rdp

-- 
Rich Payne
http://talisman.mv.com

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Kenneth E. Lussier

On Tue, 2002-08-27 at 23:39, Jon Hall wrote:

> As to access points, I got an SMC, which has three wired ports, a parallel
> printer port that works with both windows and Linux and allows them (and my
> notebook working off a wireless LAN) to share a printer, and a WAN port for the
> DSL modem.  The unit uses a web browser to set it up, and has been working
> flawlessly for several months now.

I was just looking at some SMC gear. They have a new 802.11b
WAP/Firewall called the "Barricade Turbo" that does 22MBit/sec (if you
have cards that will do it), and it has 256-bit WEP encryption. I might
be able to use this to replace my Linux firewall so I can use that box
for other things. I just don't know how robust these firewalls are (I do
some pretty wierd stuff, like port redirection, forwarding, NAT, Masq,
etc.). The product description is at
http://www.smc.com/index.cfm?sec=Products&pg=Product-Details&prod=263&site=c


> I bought a 900 MHz phone, which sits happily next to it.  The phone is not
> affected by either the wireless LAN nor the microwave.

I don't have a cordless phone. Maybe I should join the 20th century, eh?
 
> >And why did they go from b to g? What happened to c,d,e, and f??
> 
> Actually they went from "b" to "a" to "g".and probably the same reason
> that the Ford Model "T" car had a follow-on model that was the Model "A".

Ahhh Marketing. Get people to buy it by confusing them to the point
where they don't remember what they wanted or why ;-)

C-Ya,
Kenny
-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Patrick J. O'Rourke

> server, etc. will remain hard wired. Thoughts, comments, suggestions
> welcome

I've had good luck with Agere's (aka Lucent) Orinoco Silver cards on
RH 7.3.  I am also using RG-1000 access point.  I say RH7.3 because
on RH 7.2 I was able to get it working w/ the driver off their
web site on my desktop, but could not get it to work on my laptop
(Dell Latitude C600) - even using the same kernel / modules from
the desktop.  However once I upgraded to RH 7.3, everything just
worked.

Pat

-- 
Patrick O'Rourke
[EMAIL PROTECTED]
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: MELBA wed

2002-08-28 Thread Rob Lembree


So far we've only got two people besides maddog and myself,
and nobody with a projector.  I propose that unless we get
some more folks interested in the near future, that we just
meet for open source beer at 1800 or thereabouts.

r

-- 

Rob LembreeMetro Link Incorporated
29 Milk St.  [EMAIL PROTECTED]
Nashua, NH 03064-1651 http://www.metrolink.com
Phone:  954.660.2460   Alternate: 603.577.9714
PGP: 1F EE F8 58 30 F1 B1 20   C5 4F 12 21 AD 0D 6B 29
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: MELBA wed

2002-08-28 Thread Erik Price


On Wednesday, August 28, 2002, at 10:34  AM, Rob Lembree wrote:

> So far we've only got two people besides maddog and myself,
> and nobody with a projector.  I propose that unless we get
> some more folks interested in the near future, that we just
> meet for open source beer at 1800 or thereabouts.

Word.

Being semi-unemployed, I'm planning to attend the RH Career Fair @ 
Westford Regency myself, but that ends with plenty of time to shoot up 
to Nashua.



Erik





--
Erik Price

email: [EMAIL PROTECTED]
jabber: [EMAIL PROTECTED]

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: MELBA wed

2002-08-28 Thread Jon Hall

No, No, No!

Eric raised his hand (meaning he had a projector) and I got a couple of people
who answered back just to me that they were interested.

I will go ahead and do thisbut we need to know if we have the second floor
room, or if we have to project on the back of the restaurant booth we sit in.

md
-- 
=
Jon "maddog" Hall
Executive Director   Linux International(SM)
email: [EMAIL PROTECTED] 80 Amherst St. 
Voice: +1.603.672.4557   Amherst, N.H. 03031-3032 U.S.A.
WWW: http://www.li.org

Board Member: Uniforum Association, USENIX Association

(R)Linux is a registered trademark of Linus Torvalds in several countries.
(SM)Linux International is a service mark of Linux International, Inc.

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



!!!!!!! Re: MELBA wed

2002-08-28 Thread Erik Price


On Wednesday, August 28, 2002, at 10:45  AM, Jon Hall wrote:

> Eric raised his hand (meaning he had a projector) and I got a couple 
> of people
> who answered back just to me that they were interested.

Whoops.  My bad!  I don't have a projector.  I meant I was interested!






--
Erik Price

email: [EMAIL PROTECTED]
jabber: [EMAIL PROTECTED]

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: MELBA wed

2002-08-28 Thread Erik Price


On Wednesday, August 28, 2002, at 12:53  AM, Erik Price wrote:

>> On Tue, 2002-08-27 at 14:06, Jon Hall wrote:
>>> I could give my talk about the new things in the V2.5 kernel and 
>>> what they
>>> mean to systems admins and programmers, if anyone would be 
>>> interested.  I should
>>> warn you that to do it in an hour I have to talk very fast and leave 
>>> it at
>>> the 10,000 foot level.
>>>
>>> I would need an LCD projector.
>>
>> Well, can someone come up with a projector?  Can we get a show of 
>> hands
>> as to who would come if we were to have such a meeting?
>
> (raises hand)
>
> So... it's upstairs of Martha's Exchange?  Can you get dinner up 
> there, or should you eat at home?  and... libations -after- the 
> presentation (not during)?
>
>
> Erik




And to think I was going to ask what you meant exactly when you called 
me Gunga Din... I wish that I had, this would have been clarified 
earlier.  (Though twenty minutes spent online reading the poem and the 
synopsis of the movie weren't wasted, since now I know what a "Gunga 
Din" is.)

I carry neither projector nor water.  :(



Erik



--
Erik Price

email: [EMAIL PROTECTED]
jabber: [EMAIL PROTECTED]

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: MELBA wed

2002-08-28 Thread Jon Hall

Erik,

I did not mean to scare you off.I realized later it was someone else who
siad they might be able to get the projector.

I am going to do the talk even without the projectorit is no biggie, just
nicer to have something to look at besides my face.

And Rob, this talk never made it out to "announce"it just was on the
"Disgust list".  Maybe that is why we have such a low response?

I have to leave for a meeting.  After we are sure we have a room, would Rob
or Paul want to make an official "announcement"?

md
-- 
=
Jon "maddog" Hall
Executive Director   Linux International(SM)
email: [EMAIL PROTECTED] 80 Amherst St. 
Voice: +1.603.672.4557   Amherst, N.H. 03031-3032 U.S.A.
WWW: http://www.li.org

Board Member: Uniforum Association, USENIX Association

(R)Linux is a registered trademark of Linus Torvalds in several countries.
(SM)Linux International is a service mark of Linux International, Inc.

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Jon Hall


[EMAIL PROTECTED] said:
> I was just looking at some SMC gear. They have a new 802.11b WAP/
> Firewall called the "Barricade Turbo" that does 22MBit/sec (if you
> have cards that will do it), and it has 256-bit WEP encryption.

I saw this and it looked hot.  On the other hand I have the "Barricade", and
I am saving my pennies for the 802.11g product, which I am sure they will
upgrade whatever is in the "Barricade Turbo" to have the same features, but
just be faster and compatible.

SMC updates their micro-code, and I have downloaded it and updated it no
problem.

md
-- 
=
Jon "maddog" Hall
Executive Director   Linux International(SM)
email: [EMAIL PROTECTED] 80 Amherst St. 
Voice: +1.603.672.4557   Amherst, N.H. 03031-3032 U.S.A.
WWW: http://www.li.org

Board Member: Uniforum Association, USENIX Association

(R)Linux is a registered trademark of Linus Torvalds in several countries.
(SM)Linux International is a service mark of Linux International, Inc.

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Hewitt Tech

The other good reason for waiting for 802.11g is that the 802.11b standard
has a very weak WEP implementation and I believe the g standard will correct
that. What I know about the 802.11b standard is that there are two WEP
encryption levels, 64 and 128 bit (actually less because there is a 24 bit
table of seed values). Although you will hear people say that using WEP is
useless, the truth is that not using WEP means you're running a wide open
network. Anyone with a Pringles can antenna and a wireless card can
participate in your wireless setup from as far as a couple of miles away.
The Orinoco PCMCIA cards have antenna connectors built into them. The 64 bit
WEP supposedly requires about 15 minutes worth of packet traffic for a
cracker to exploit while the 128 bit flavor takes 15 hours of traffic. There
are already proprietary solutions. I believe Cisco is using a dynamic keying
mechanism to change keys every 5 minutes or so. That means that cracking
their setup would be very difficult. The problem is that it's a proprietary
solution and only works when you are using their hardware exclusively.

Of course if someone is really determined to crack your systems they can
probably manage it but I don't think it's wise to leave the door completely
open.

-Alex

- Original Message -
From: "Jon Hall" <[EMAIL PROTECTED]>
To: "Kenneth E. Lussier" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, August 28, 2002 10:24 AM
Subject: Re: Speaking of wireless


>
> [EMAIL PROTECTED] said:
> > I was just looking at some SMC gear. They have a new 802.11b WAP/
> > Firewall called the "Barricade Turbo" that does 22MBit/sec (if you
> > have cards that will do it), and it has 256-bit WEP encryption.
>
> I saw this and it looked hot.  On the other hand I have the "Barricade",
and
> I am saving my pennies for the 802.11g product, which I am sure they will
> upgrade whatever is in the "Barricade Turbo" to have the same features,
but
> just be faster and compatible.
>
> SMC updates their micro-code, and I have downloaded it and updated it no
> problem.
>
> md
> --
>

=
> Jon "maddog" Hall
> Executive Director   Linux International(SM)
> email: [EMAIL PROTECTED] 80 Amherst St.
> Voice: +1.603.672.4557   Amherst, N.H. 03031-3032 U.S.A.
> WWW: http://www.li.org
>
> Board Member: Uniforum Association, USENIX Association
>
> (R)Linux is a registered trademark of Linus Torvalds in several countries.
> (SM)Linux International is a service mark of Linux International, Inc.
>
> ___
> gnhlug-discuss mailing list
> [EMAIL PROTECTED]
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
>

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: MELBA wed

2002-08-28 Thread pll


In a message dated: Wed, 28 Aug 2002 10:45:14 EDT
Jon Hall said:

>but we need to know if we have the second floor
>room, or if we have to project on the back of the restaurant booth we sit in.

I'll be calling this afternoon to check on the room.  Chris is the 
only one authorized to manage that room at Martha's and he doesn't 
get in until after 14:00ish.  I'll let you know once I know :)
-- 

Seeya,
Paul
--
It may look like I'm just sitting here doing nothing,
   but I'm really actively waiting for all my problems to go away.

 If you're not having fun, you're not doing it right!


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Tom Buskey


"Kenneth E. Lussier" said:
>be able to use this to replace my Linux firewall so I can use that box
>for other things. I just don't know how robust these firewalls are (I do

I'm not sure either.  They look pretty tight from the outside.  You can
do better with a Linux/*BSD/Solaris firewall of course.  For instance,
you can't ping my firewall from the outside and I don't think you can do
that with one of these.

I'm not sure how much outgoing stuff you can restrict with them either, 
if that's important to you.

>some pretty wierd stuff, like port redirection, forwarding, NAT, Masq,
They can do all that.  That's pretty standard stuff.

-- 
---
Tom Buskey


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Kenneth E. Lussier

On Wed, 2002-08-28 at 11:10, Hewitt Tech wrote:
> The other good reason for waiting for 802.11g is that the 802.11b standard
> has a very weak WEP implementation and I believe the g standard will correct
> that. What I know about the 802.11b standard is that there are two WEP
> encryption levels, 64 and 128 bit (actually less because there is a 24 bit
> table of seed values). 

The SMC device that I mentioned earlier says that it does 256-bit WEP. 

> Although you will hear people say that using WEP is
> useless, the truth is that not using WEP means you're running a wide open
> network. Anyone with a Pringles can antenna and a wireless card can
> participate in your wireless setup from as far as a couple of miles away.

There are a few ways that this can be curtailed. The most obvious is to
run a VPN between the wireless clients. The other is to use some of the
features of the router/firewall's DHCP server. This particular device
does MAC address registration, so unless they know one of the two MAC
addresses and can spoof it, they can't get on to the network (in
theory). It seems like a lot of time and effort, and a whole lot of
guess work. Of course, if they set up their own base station close
enough, I suppose they could sniff the ARP's.

> The Orinoco PCMCIA cards have antenna connectors built into them. The 64 bit
> WEP supposedly requires about 15 minutes worth of packet traffic for a
> cracker to exploit while the 128 bit flavor takes 15 hours of traffic. There
> are already proprietary solutions. I believe Cisco is using a dynamic keying
> mechanism to change keys every 5 minutes or so. That means that cracking
> their setup would be very difficult. The problem is that it's a proprietary
> solution and only works when you are using their hardware exclusively.

Another problem is that since it is proprietary, no one really knows how
secure it is, since it can't be independantly verified. Closed
encryption usually falls over.

 
> Of course if someone is really determined to crack your systems they can
> probably manage it but I don't think it's wise to leave the door completely
> open.

If you leave the door open, they will walk right in. If you lock the
door, only the truly determined will bother to pick the lock. That will
happen on a hard-wired network as well. 

C-Ya,
Kenny
-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Michael O'Donnell



>They look pretty tight from the outside.  You can do better with
>a Linux/*BSD/Solaris firewall of course.  For instance, you can't
>ping my firewall from the outside and I don't think you can do that
>with one of these.


How does refusing to do ICMP make a box more secure?

 .

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread pll


In a message dated: Wed, 28 Aug 2002 12:49:20 EDT
Michael O'Donnell said:

>How does refusing to do ICMP make a box more secure?

They can't finger-print your TCP/IP stack and determine what OS 
you're running.  This makes it difficult to then know what types of 
script-kiddies to run in order to root your box.

See this SANS article about this very topic:

http://www.sans.org/newlook/resources/IDFAQ/TCP_fingerprinting.htm
-- 

Seeya,
Paul
--
It may look like I'm just sitting here doing nothing,
   but I'm really actively waiting for all my problems to go away.

 If you're not having fun, you're not doing it right!


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Hewitt Tech

Also, don't forget the famous "ping of death" DOS issue. In that
vulnerability if you sent a ping with more than 65,510 data from a Windows
box, the machine receiving the ping request could fall over. That problem
affected quite a few of the UNIX implementation out there and I think it
could even take down an NT server if conditions were just right.

-Alex

- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, August 28, 2002 1:00 PM
Subject: Re: Speaking of wireless


>
> In a message dated: Wed, 28 Aug 2002 12:49:20 EDT
> Michael O'Donnell said:
>
> >How does refusing to do ICMP make a box more secure?
>
> They can't finger-print your TCP/IP stack and determine what OS
> you're running.  This makes it difficult to then know what types of
> script-kiddies to run in order to root your box.
>
> See this SANS article about this very topic:
>
> http://www.sans.org/newlook/resources/IDFAQ/TCP_fingerprinting.htm
> --
>
> Seeya,
> Paul
> --
> It may look like I'm just sitting here doing nothing,
>but I'm really actively waiting for all my problems to go away.
>
> If you're not having fun, you're not doing it right!
>
>
> ___
> gnhlug-discuss mailing list
> [EMAIL PROTECTED]
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss
>

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread pll


In a message dated: Wed, 28 Aug 2002 13:14:27 EDT
"Hewitt Tech" said:

>Also, don't forget the famous "ping of death" DOS issue. In that
>vulnerability if you sent a ping with more than 65,510 data from a Windows
>box, the machine receiving the ping request could fall over. That problem
>affected quite a few of the UNIX implementation out there and I think it
>could even take down an NT server if conditions were just right.

I thought it was the other way around?  If you sent that POD *to* a 
Windows system it would fall over.  I don't remember any UNIX 
versions being vulnerable to it, though, my memory isn't ECC :)
-- 

Seeya,
Paul
--
It may look like I'm just sitting here doing nothing,
   but I'm really actively waiting for all my problems to go away.

 If you're not having fun, you're not doing it right!


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Kevin D. Clark


[EMAIL PROTECTED] writes:

> In a message dated: Wed, 28 Aug 2002 12:49:20 EDT
> Michael O'Donnell said:
> 
> >How does refusing to do ICMP make a box more secure?
> 
> They can't finger-print your TCP/IP stack and determine what OS 
> you're running.  This makes it difficult to then know what types of 
> script-kiddies to run in order to root your box.

However, refusing to respond to any ICMP is anti-social in a
networking sense; this breaks various things (like TCP path MTU
discovery, for example).  This behavior is non-compliant with how the
specs are written.  As such, if you set up a server this way, not
everybody is going to be able to use it.

--kevin
-- 
Kevin D. Clark / Cetacean Networks / Portsmouth, N.H. (USA)
cetaceannetworks.com!kclark (GnuPG ID: B280F24E)
alumni.unh.edu!kdc

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread Kenneth E. Lussier

On Wed, 2002-08-28 at 13:47, Kevin D. Clark wrote:

> However, refusing to respond to any ICMP is anti-social in a
> networking sense; this breaks various things (like TCP path MTU
> discovery, for example).  This behavior is non-compliant with how the
> specs are written.  As such, if you set up a server this way, not
> everybody is going to be able to use it.

Well, that is pretty much the point. You only allow certain people in.
The comment about denying ICMP was made in regards to a firewall. You
don't *WANT* everyone using it ;-)

C-Ya,
Kenny
-- 

"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: Speaking of wireless

2002-08-28 Thread pll


In a message dated: 28 Aug 2002 13:47:26 EDT
Kevin D. Clark said:

>However, refusing to respond to any ICMP is anti-social in a
>networking sense; this breaks various things (like TCP path MTU
>discovery, for example).  This behavior is non-compliant with how the
>specs are written.  As such, if you set up a server this way, not
>everybody is going to be able to use it.

Usually people don't turn this off at the server level.  I've most 
often seen it done at the firewall, which is configured to drop ICMP 
requests destined for anything behind it.

It may well be anti-social, but so is cracking a network :(

If everyone would just be nice we wouldn't have to deal with this crap!
So, be nice, dammit! :)
-- 

Seeya,
Paul
--
It may look like I'm just sitting here doing nothing,
   but I'm really actively waiting for all my problems to go away.

 If you're not having fun, you're not doing it right!


___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



There *WILL* be a meeting tonight

2002-08-28 Thread Rob Lembree

The speaker will be none other than our own Jon 'maddog' Hall,
who will be detailing what's included in the Linux 2.5 kernel,
and what this means to sysadmins and programmers.  He plans to
do the talk very fast (and at that, it will take an hour!!) and
at the 10,000 foot level.  Following the talk, we'll adjourn and
continue the conversation at whatever level of detail we all
want or have the expertise available for!

The meeting will be on the second floor of Martha's Exchange,
at 187 Main St. in Nashua, NH, and will start at 7:00. 

Those who wish to join us for dinner may do so downstairs at
Martha's beginning around 5:30.  Reservations are not required.

regards,
rob
-- 

Rob LembreeMetro Link Incorporated
29 Milk St.  [EMAIL PROTECTED]
Nashua, NH 03064-1651 http://www.metrolink.com
Phone:  954.660.2460   Alternate: 603.577.9714
PGP: 1F EE F8 58 30 F1 B1 20   C5 4F 12 21 AD 0D 6B 29
___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



"dict" -- cool little snippet I saw on a GNOME list.

2002-08-28 Thread Ken Ambrose

Ever wanna know the definition of a word?

Too darn lazy to fire up the browser?

Then enjoy the below script, for all you command-line guys (and gal(s))...

#!/bin/csh -f

set word=$1

# lynx is a text-based browser
# available free on the web/net.
lynx -cfg=/dev/null -dump "http://www.dictionary.com/cgi-bin/dict.pl?term=${word}";


Usage:

dict 
where  is whatever word you want.  Prolly wanna pipe the output to
less, or your favorite pager...

-Ken

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: "dict" -- cool little snippet I saw on a GNOME list.

2002-08-28 Thread Kevin D. Clark


Ken Ambrose <[EMAIL PROTECTED]> writes:

> Prolly wanna pipe the output to
> less, or your favorite pager...

...or port it to a real shell, like sh...  (-:

--kevin
-- 
"The C shell is flakier than a snowstorm."
  -- Guy Harris

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: "dict" -- cool little snippet I saw on a GNOME list.

2002-08-28 Thread Bill Mullen

Ken Ambrose wrote:
> Ever wanna know the definition of a word?
>
> Too darn lazy to fire up the browser?
>
> Then enjoy the below script, for all you command-line guys (and
> gal(s))...

[snip]

Or, you could instead use the, um, "other" dict:

moon@server:~$ which dict
/usr/bin/dict
moon@server:~$ file `which dict`
/usr/bin/dict: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV),
dynamically linked (uses shared libs), stripped
moon@server:~$ dict ambrose
1 definition found

>From U.S. Gazetteer (1990) [gazetteer]:

  Ambrose, GA (city, FIPS 2060)
Location: 31.59342 N, 83.01368 W
Population (1990): 288 (111 housing units)
Area: 8.0 sq km (land), 0.2 sq km (water)
Zip code(s): 31512
  Ambrose, ND (city, FIPS 1860)
Location: 48.95517 N, 103.48077 W
Population (1990): 48 (47 housing units)
Area: 2.8 sq km (land), 0.0 sq km (water)
Zip code(s): 58833
moon@server:~$ dict ken
3 definitions found

>From Jargon File (4.2.3, 23 NOV 2000) [jargon]:

  ken /ken/ n.  1. [Unix] Ken Thompson, principal inventor of
  Unix.  In the early days he used to hand-cut distribution tapes, often
  with a note that read "Love, ken".  Old-timers still use his first name
  (sometimes uncapitalized, because it's a login name and mail address) in
  third-person reference; it is widely understood (on Usenet, in particular)
  that without a last name `Ken' refers only to Ken Thompson.  Similarly,
  Dennis without last name means Dennis Ritchie (and he is often known
  as dmr).  See also {demigod}, {{Unix}}.  2. A flaming user.  This was
  originated by the Software Support group at Symbolics because the two
  greatest flamers in the user community were both named Ken.



>From The Free On-line Dictionary of Computing (13 Mar 01) [foldoc]:

  ken

 /ken/ 1. {Ken Thompson}

 2. A flaming user.  This was originated by the Software
 Support group at {Symbolics} because the two greatest flamers
 in the user community were both named Ken.

 [{Jargon File}]



>From WordNet (r) 1.7 [wn]:

  ken
   n 1: range of what one can know or understand; "beyond my ken"
[syn: {cognizance}]
   2: the range of vision; "out of sight of land" [syn: {sight}]
moon@server:~$  rpm -qa | grep dict
dictd-dictionaries-jargon-0.1.0-3mdk
dictd-dictionaries-freedict-dan-eng-0.1.0-3mdk
dictd-dictionaries-freedict-eng-rus-0.1.0-3mdk
dictd-dictionaries-freedict-nld-eng-0.1.0-3mdk
dictd-dictionaries-gazetteer-0.1.0-3mdk
dictd-dictionaries-elements-0.1.0-3mdk
dictd-dictionaries-freedict-eng-lat-0.1.0-3mdk
dictd-dictionaries-freedict-fra-eng-0.1.0-3mdk
dictd-dictionaries-freedict-swe-eng-0.1.0-3mdk
cracklib-dicts-2.7-14mdk
dictd-server-1.5.5-2mdk
dictd-dictionaries-foldoc-0.1.0-3mdk
dictd-dictionaries-freedict-eng-deu-0.1.0-3mdk
dictd-dictionaries-freedict-eng-nld-0.1.0-3mdk
dictd-dictionaries-freedict-eng-spa-0.1.0-3mdk
dictd-dictionaries-freedict-iri-eng-0.1.0-3mdk
dictd-dictionaries-freedict-scr-eng-0.1.0-3mdk
dictd-dictionaries-freedict-tur-eng-0.1.0-3mdk
dictd-1.5.5-2mdk
dictd-dictionaries-world95-0.1.0-3mdk
dictd-dictionaries-freedict-cze-eng-0.1.0-3mdk
dictd-dictionaries-freedict-eng-fra-0.1.0-3mdk
dictd-dictionaries-freedict-eng-por-0.1.0-3mdk
dictd-dictionaries-freedict-eng-swe-0.1.0-3mdk
dictd-dictionaries-freedict-lat-eng-0.1.0-3mdk
dictd-dictionaries-freedict-slo-eng-0.1.0-4mdk
dictd-dictionaries-freedict-wel-eng-0.1.0-3mdk
dictd-dictionaries-devils-0.1.0-3mdk
dictd-dictionaries-freedict-eng-iri-0.1.0-3mdk
dictd-dictionaries-freedict-eng-wel-0.1.0-3mdk
dictd-dictionaries-freedict-spa-eng-0.1.0-3mdk
dictd-client-1.5.5-2mdk
dictd-dictionaries-freedict-deu-eng-0.1.0-3mdk
dictd-dictionaries-freedict-eng-scr-0.1.0-3mdk
dictd-dictionaries-freedict-por-eng-0.1.0-3mdk
dictd-dictionaries-vera-0.1.0-3mdk
moon@server:~$

--
Bill Mullen
[EMAIL PROTECTED]
"Giving money and power to the government is like giving whiskey and
car keys to teenage boys."  - P.J. O'Rourke

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Mailing list upgrade is complete

2002-08-28 Thread Bruce Dawson

Well, the process completed without errors. So, if you get this message,
then the mailman upgrade went without a hitch.

If you don't get this message, then I'm working on it.





signature.asc
Description: This is a digitally signed message part


audio pain,

2002-08-28 Thread Matthew S. Sacks

My audio is almost working.
Most web sites that send sound, are not working; I cannot hear anything 
when browsing with Mozilla from RH 7.3.

Can anybody get the audio when they browse

www.hanshi.com

???



___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss



Re: "dict" -- cool little snippet I saw on a GNOME list.

2002-08-28 Thread Erik Price


On Wednesday, August 28, 2002, at 05:36  PM, Ken Ambrose wrote:

> Too darn lazy to fire up the browser?
>
> Then enjoy the below script, for all you command-line guys (and 
> gal(s))...

Nice script.  If you like writing shell scripts to do little jobs like 
this (and there's plenty of ways to leverage this kind of power), you 
might be interested in Perl's LWP module.  [As opposed to c/sh,] Perl 
lets you easily parse the result, too, if you know what to look for.  
(There's a module called HTML::TokeParser if I'm not mistaken that 
makes it easy to parse HTML, better than regexes, but I haven't used it 
yet.)

There is a great intro on oreillynet.com (it is really a plug for the 
new LWP book, but the intro is pretty informative):
http://www.perl.com/pub/a/2002/08/20/perlandlwp.html?page=1



Erik





Erik





--
Erik Price

email: [EMAIL PROTECTED]
jabber: [EMAIL PROTECTED]

___
gnhlug-discuss mailing list
[EMAIL PROTECTED]
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss