Re: [leaf-user] Updating DYNDNS - Solution

[Mike Sensney]

At 01:08 PM 10/5/2004, Stephen More wrote:
Here is how zoneedit gets updated with wget:
wget -O - --http-user=username --http-passwd=password
'http://dynamic.zoneedit.com/auth/dynamic.html?host=www.mydomain.com'
wget is not "encrypting" the username and password, it is encoding it.
If you can figure out how to sniff it, then you can figure out how to
decode it ( for perl users see MIME::Base64 ).
To be secure, these websites should be using https.
ZoneEdit does allow you to use https.

-Steve More

---
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

RE: [leaf-user] rtl8139.o and Bering 1.1

[Mike Sensney]

As well as very old. I first saw this rant a couple years ago. At the time 
I
needed an 8139 driver and the RTL8139 just didn't work with the 8139B chip. 

So I thought I'd try the 8139too in spite of the rant. It worked where the
RTL8139 didn't...

At 01:23 PM 2/19/2003, [EMAIL PROTECTED] wrote



Very informative.  Thanks.

Richard Doyle <[EMAIL PROTECTED]> on 02/19/2003 02:37:49 PM

To:   Phillip Watts/austin/Nlynx@Nlynx
cc:   David Pitts <[EMAIL PROTECTED]>, 
"[EMAIL PROTECTED]"
  <[EMAIL PROTECTED]>

Subject:  RE: [leaf-user] rtl8139.o and Bering 1.1



See http://www.scyld.com/network/rtl8139.html. Becker goes into a bit of
a rant about the 8139too driver.

-Richard

Mike Sensney
Association Services, Inc.
PO Box 58530, Seattle, WA 98138-1530
206-623-8632 - Fax 206-575-9255  



---
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] Connecting to ssh with WinXP

[Mike Sensney]

There are also the Cygwin tools from RedHat. This is a port of many of the
standard *nix tools, including ssh.

http://www.cygwin.com

At 08:20 AM 2/3/2003, Ray Olszewski wrote:


At 01:56 PM 2/3/03 +, James Neave wrote:


Is there a Win32 ssh client available?
I just can't find even a hint of one.
Preferably free? :P


I'm not sure why you ask this question on a Linux list, but ... the two 
widely used Wndows ssh clients are Putty and TerraTerm. I've used them 
both on Win98 and 2K (I prefer Putty for everyday use), but I imagine they 
will work on XP as well.

And I find that if I go to www.google.com and search on "windows ssh 
client", links to them are the first two things that come back ... so you 
may want to refine your search strategies for the future.

Mike Sensney
Association Services, Inc.
PO Box 58530, Seattle, WA 98138-1530
206-623-8632 - Fax 206-575-9255 



---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [Leaf-user] Gunzip/gzip problems?

[Mike Sensney]

At 06:16 PM 12/30/2001 -0500, Nicolas Riendeau wrote:

>I wanted to reinstall portsentry but the package I had and the ones I 
>downloaded from either
>http://c0wz.com:81 or it's mirror at http://c0wz.steinkuehler.net do not 
>decompress
>correctly...
>
>I get the following error messages:
>
>gunzip: invalid compressed data--crc error
>gunzip: invalid compressed data--length error
>
>Any ideas as to what might be causing these?

This sounds like the well known Netscape for Windows problem. If the mime
type is not set properly on the server then Netscape thinks the file is an
ascii file and adds a CR to every LF, which then corrupts the files.

The only way to fix this problem is at the server. Unfortunately if you are 

not the server admin this is not an option. The only user work around is to 

use a different client. 


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Re: [Leaf-user] Debian 2.1 CD-ROM

[Mike Sensney]

You can get both the slink binaries and source here:
ftp://debian.uchicago.edu/debian-cd/archive/

At 11:17 AM 11/09/2001 -0500, Stephen More wrote:

>According to the Guide "Developing for LRP":
>
>"The easiest way to write programs to work under LRP is to use Debian 2.1
>(Slink)."
>
>I can't seem to find slink or version 2.1 at:
>ftp://ftp.us.debian.org/debian/dists/
>
>
>Can someone tell me where I can get this older version of debian from (I
>would prefer it on CD-ROM) ? 


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Re: [Leaf-user] EigerStein/LRP + orinoco = build my own?

[Mike Sensney]

Muiz Motani did some work with the Orinoco cards some time ago. 
He has some directions on how to get them working.

His web site is http://www.i-dist.com/lrp/wavelan.html.

At 01:06 PM 09/30/2001 -0400, HENRY PSENICKA wrote:

>Having successfully used EigerStein for some time as a router/firewall, I felt that 
>it would be an ideal platform for assembling a wireless router.
> 
>So far I have failed in all of my attempts to find a module supporting the 
>Agere/Avaya/Lucent "orinoco" wireless cards that I can just add to EigerStein/LRP.
> 
>I should add that I am also using an ISA-to-PCMCIA adapter, as the PC doesn't have 
>native PCMCIA support.
> 
>I have succeeded in getting the orinoco wireless drivers installed and working with 
>Redhat 7.1., so I know the hardware is working.
> 
>Can anyone point me toward a recipie or "how-to" that will step me throught the 
>process of building my own EigerStein kernel and/or modules to include the required 
>pcmcia and orinoco support?
> 
>Thanks ...


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Re: [Leaf-user] Network Card Problem (Module SIS900.o )!?

[Mike Sensney]

Well...You can upgrade to 2.2.19

Ewald Wasscher has a new kernel and modules ready for download.
Including the sis900.o module.
http://leaf.sourceforge.net/devel/ewaldw/kernel/2.2.19-1-LRP/

You will have to replace both kernel and modules on your LEAF disk.

Choose an appropriate kernel for your usage and rename it linux.
(If you guess wrong, choose another. :)

At 12:58 PM 07/13/2001 +0800, Eddy Wong wrote

>Dear all expert,
>
> I have purchased a new motherboard with on-board NIC but can't
>load the module when using the LRP. I have found the source code 
>on the vendor web pages, 
>(i.e. http://www.sis.com.tw/support/download/linux.htm) but I don't
>know how to comply to get the required module. I have found one module 
>on some web pages but it is not up-to-dated. Please give some 
>suggestions !?
>
>Best Regards,
>Eddy.
>
>___
>Leaf-user mailing list
>[EMAIL PROTECTED]
>http://lists.sourceforge.net/lists/listinfo/leaf-user
>
>
>
>---
>Incoming mail is certified Virus Free.
>Checked by AVG anti-virus system (http://www.grisoft.com).
>Version: 6.0.264 / Virus Database: 136 - Release Date: 07/02/2001

RE: [Leaf-user] re: PCMCIA for 2.2.16

[Mike Sensney]

My bad. The orinoco_cs driver has not been back ported to the 2.2.x kernel 
yet.

I've downloaded the PCMCIA Card Services tarball. I will compile it against 
2.2.19 for you. But I have no way to test it. (No pcmcia or Wavelan/Orinico 
radios) It will take some time as my development system is slow.

At 09:15 AM 07/12/2001 -0700, Mike Sensney wrote
>At 02:43 PM 07/12/2001 +0100, Peter Stokes wrote:
>
>>Hi
>>
>>Thanks to Richard for the PCMCIA link which works great with my IBM PCCard,
>>but there was no wvlan_cs.o in the tarball. Anyone know how to email Bill
>>Dudley, I could not find an email on the site.
>
>It looks like the whole site is his. Check out http://www.casano.com
>The link at the bottom of the page is mailto:[EMAIL PROTECTED]
>
>According to Jean Tourrilhes, the wvlan_cs driver has been superceded by 
>the orinoco_cs driver. 
>http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Wavelan-IEEE.html
>
>Here is info on the new driver.
>http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Orinoco.html

RE: [Leaf-user] re: PCMCIA for 2.2.16

[Mike Sensney]

At 02:43 PM 07/12/2001 +0100, Peter Stokes wrote:

>Hi
>
>Thanks to Richard for the PCMCIA link which works great with my IBM PCCard,
>but there was no wvlan_cs.o in the tarball. Anyone know how to email Bill
>Dudley, I could not find an email on the site.

It looks like the whole site is his. Check out http://www.casano.com
The link at the bottom of the page is mailto:[EMAIL PROTECTED]

According to Jean Tourrilhes, the wvlan_cs driver has been superceded by 
the orinoco_cs driver. 
http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Wavelan-IEEE.html

Here is info on the new driver.
http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Orinoco.html

RE: [Leaf-user] Re: How to make CF disk bootable

[Mike Sensney]

At 09:58 AM 07/12/2001 +0100, Luis.F.Correia wrote


>>Hmm.  Maybe time to ditch the 486???
>>Billy
>
>
>I guess so :)

Save it as a backup system. It can still run off a floppy.

RE: [Leaf-user] Re: How to make CF disk bootable

[Mike Sensney]

Won't matter. Syslinux is having problems reading files from 
the CF disk. This implies a disk geometry problem.

At 01:10 PM 07/11/2001 +0100, John Ridout wrote

>Have you checked the file size of root.lrp?
>
>> -Original Message-
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED]]On Behalf Of 
>> Mike Sensney
>> Sent: 11 July 2001 05:11
>> To: [EMAIL PROTECTED]
>> Subject: Re: [Leaf-user] Re: How to make CF disk bootable
>> 
>> 
>> Hokay...The normal sequence for the Syslinux boot process is:
>> 
>> 1) It loads itself into memory.
>> 2) It reads its config file.
>> 3) It loads root.lrp which is the initrd for LEAF/LRP.
>> 4) It loads the kernel.
>> 5) It sets some parameters for the kernel.
>> 6) It passes control to the kernel.
>> 
>> The boot process is dying in step 3. Therefore Linux is not 
>> your problem
>> because the kernel never gets loaded let alone actually start 
>> executing. 
>> Syslinux is having problems reading the CF disk. 
>> 
>> I keep coming back to CHS parameters as being your problem. 
>> Something is 
>> wrong there. Try some more CHS values. 
>> 
>> There may be a 32MB barrier problem. Try a much smaller drive size. 
>> 
>> I'd probably try making the CF disk boot DOS. Once I got that 
>> figured out 
>> the rest should fall into place.
>> 
>> At 07:48 PM 07/10/2001 -0700, Billy Jacobs wrote
>> 
>> >The kernel image itself is not corrupt.  Filesizez match, as well as
>> >diffs between kernels. I placed the IDE kernel onto the LRP 
>> floppy that
>> >I have, and it booted fine, including seeing the IDE device:
>> >hda: Hitachi CVM1.1.1, 30MB w/1kB Cache, CHS=736/5/17
>> > 
>> >Partition check:
>> >hda: hda1
>> >
>> >I can mount the device w/msdos filesystem without a problem. 
>>  I copied
>> >everything from the floppy over to /dev/hda1.  When I reboot after
>> >copying the files over, it starts loading root.lrp, then 
>> craps out and
>> >reboots:
>> >Loading root.lrp...
>> >When it comes up next time, it complains about an Invalid of corrupt
>> >kernel.  From then on, it will give the same error upon reboot.
>> >
>> >The strange thing is that it only starts loading root.lrp 
>> after I copy
>> >the files back over to the CF disk.  AND, when it does start loading
>> >root.lrp, it always stops at 3 dots.
>> >
>> >Just to rule out a possible problem with syslinux, I used GRUB, and
>> >when trying to boot off Partition 0, it exhibits the same problem
>> >(therefore, not a problem with syslinux).
>> >
>> >In my syslinux.cfg file, I have set both boot and PKGPATH to 
>> /dev/hda1.
>> >
>> >I mentioned before that I have to specify the drive type in 
>> my BIOS by
>> >sectors, heads, cylinders, etc.  Since a CF disk doesn't 
>> have any such
>> >parts, what is the best setting to use?  I know by 
>> specifying different
>> >values, it changes whether or not the BIOS can see the boot sector of
>> >the CF.
>> >
>> >This is a strange one...any help would be appreciated.
>> >
>> >Thanks,
>> >Billy
>> 
>
>___
>Leaf-user mailing list
>[EMAIL PROTECTED]
>http://lists.sourceforge.net/lists/listinfo/leaf-user
>
>
>
>---
>Incoming mail is certified Virus Free.
>Checked by AVG anti-virus system (http://www.grisoft.com).
>Version: 6.0.264 / Virus Database: 136 - Release Date: 07/02/2001

Re: [Leaf-user] Re: How to make CF disk bootable

[Mike Sensney]

Hokay...The normal sequence for the Syslinux boot process is:

1) It loads itself into memory.
2) It reads its config file.
3) It loads root.lrp which is the initrd for LEAF/LRP.
4) It loads the kernel.
5) It sets some parameters for the kernel.
6) It passes control to the kernel.

The boot process is dying in step 3. Therefore Linux is not your problem
because the kernel never gets loaded let alone actually start executing. 
Syslinux is having problems reading the CF disk. 

I keep coming back to CHS parameters as being your problem. Something is 
wrong there. Try some more CHS values. 

There may be a 32MB barrier problem. Try a much smaller drive size. 

I'd probably try making the CF disk boot DOS. Once I got that figured out 
the rest should fall into place.

At 07:48 PM 07/10/2001 -0700, Billy Jacobs wrote

>The kernel image itself is not corrupt.  Filesizez match, as well as
>diffs between kernels. I placed the IDE kernel onto the LRP floppy that
>I have, and it booted fine, including seeing the IDE device:
>hda: Hitachi CVM1.1.1, 30MB w/1kB Cache, CHS=736/5/17
> 
>Partition check:
>hda: hda1
>
>I can mount the device w/msdos filesystem without a problem.  I copied
>everything from the floppy over to /dev/hda1.  When I reboot after
>copying the files over, it starts loading root.lrp, then craps out and
>reboots:
>Loading root.lrp...
>When it comes up next time, it complains about an Invalid of corrupt
>kernel.  From then on, it will give the same error upon reboot.
>
>The strange thing is that it only starts loading root.lrp after I copy
>the files back over to the CF disk.  AND, when it does start loading
>root.lrp, it always stops at 3 dots.
>
>Just to rule out a possible problem with syslinux, I used GRUB, and
>when trying to boot off Partition 0, it exhibits the same problem
>(therefore, not a problem with syslinux).
>
>In my syslinux.cfg file, I have set both boot and PKGPATH to /dev/hda1.
>
>I mentioned before that I have to specify the drive type in my BIOS by
>sectors, heads, cylinders, etc.  Since a CF disk doesn't have any such
>parts, what is the best setting to use?  I know by specifying different
>values, it changes whether or not the BIOS can see the boot sector of
>the CF.
>
>This is a strange one...any help would be appreciated.
>
>Thanks,
>Billy

RE: [Leaf-user] Could the CPU fan removed?

[Mike Sensney]

At 03:27 PM 07/09/2001 -0400, Peter Nosko wrote

>Binh Do asked:
>
>> This sounds rather hardware-ish but I am talking about the machine running
>> LRP with one floppy so just wonder if any of you have done that
>> and if is it
>> safe?
>>
>> The machine is Pentium 233-MMX, Asus motherboard.
>
>pn] I've done this with a P-100, and the Dell Optiplex machines I have run a
>P-166 with only a large (very large) heat sink.
>
>---
>Peter Nosko

If the CPU still runs too hot, you can try under clocking it. That will make 
it run cooler.

Re: [Leaf-user] OT: Securely wiping a hard drive?

[Mike Sensney]

At 07:59 PM 07/06/2001 -0400, Peter Nosko wrote

>pn] Since this group is interested in security, I thought someone here might
>know of this.  I'm looking for a utility to securely wipe the contents of an
>entire hard drive.  Norton used to make one long ago that worked to DoD
>Standards, and I still have a copy, but it is MS-DOS based, and if I
>remember correctly has limitations on the size of partitions.  They no
>longer make one.  I just found one from IBM that works on up to 18GB drives,
>but it only runs against IBM drives.
>
>---
>Peter Nosko

Looked around a bit and I found a Linux based disk wipe at
http://wipe.sourceforge.net/

and a DOS based disk wipe at 
http://simtel.net/pub/pd/44215.shtml

Re: [Leaf-user] mnc and scripts

[Mike Sensney]

It's been a while since I worked on the mail script. 

I think I see the problem. In the mail script it is the mail server that 
breaks the connection with mnc, not the other way around. What you want is 
for mnc to break the connection with your server. Unfortunately, I don't 
know how to do this directly. Somebody else might.

However, there is another rather crude way that I think will work. 


echo $data | mnc $address $port &
pid=$!
sleep 5
kill $pid


What this does is
1)run mnc as a background task 
2)saves the background task PID
3)sleeps 5 seconds
4)kills the background task (mnc)

At 01:45 AM 07/03/2001 +0100, Tim Hicks wrote:

>Hello all, this is my first time over in this neck of the woods (having
>lurked on the linux-router list for a long time).
>
>I'm running EigerStein Beta2 with extended scripts v1.0, but I'm not really
>sure that any of that is relevant.
>
>My problem is that I have a cable modem connection that does not come with a
>static ip address.  As I run a DMZ server that I need to have accessible, my
>plan is to run a script (daily with the log cleanups or each time dhcpclient
>receives a new lease? how would I do that) that uses mnc to transfer the
>output of 'ip route' to my DMZ server, where I have a basic python server
>waiting to do things with the information.  So, here is the script that I
>have,
>
>begin very basic script
>#!/bin/sh
>
>data=$(ip route)
>
>address="192.168.2.2"
>port="5"
>
>echo $data | mnc $address $port
>
>exit 0
>end script
>
>This does what I want it to do, except it just waits to do anything until I
>hit control+c.  I can see this when looking at my server output.  It's like
>the mnc transfer is not completed until I hit control+c.  I've looked
>through Mike Sensney's mail script here
>(http://users.owt.com/msensney/lrp/mail), but I'm totally new to shell
>scripting, and don't really understand how it works.  If someone could tell
>me how I can make this script not require user intervention, I'd really
>appreciate it.
>
>thanks
>
>tim
>
>ps If you happen to know how I can execute my script each time I get an ip
>lease, that would be great too :-)
>
>
>___
>Leaf-user mailing list
>[EMAIL PROTECTED]
>http://lists.sourceforge.net/lists/listinfo/leaf-user
>
>
>
>---
>Incoming mail is certified Virus Free.
>Checked by AVG anti-virus system (http://www.grisoft.com).
>Version: 6.0.263 / Virus Database: 135 - Release Date: 06/22/2001

[Leaf-user] Wget for Windows

[Mike Sensney]

Cygwin has supplied many ports of Unix (Linux) tools to the Windows 
environment. Wget is one of them. It will get files from web sites for you 
and you don't have to worry about file corruption.

For Windows users who is interested I have just added the Cygwin Windows 
port of wget and supporting DLLs to my LRP page. 

http://leaf.sourceforge.net/devel/msensney/WGET.ZIP
http://leaf.sourceforge.net/devel/msensney/CYGWIN1.ZIP
http://leaf.sourceforge.net/devel/msensney/CYGINTL.ZIP
Download these files, unzip them and add them somewhere in your path. 
You can then run "wget" from a DOS Window.

This program is a "Swiss Army Knife" web file grabber. Try the help command 
to get an idea of what it can do. 
wget --help  ; massive help listing

For the purpose of just fetching a file from a web site, these 2 forms of 
the command will work just fine. 
wget -nd http://file.url ; fetch a file to your current directory 
wget -O pathname http://file.url ; fetch a file and rename "pathname"

Enjoy. 
Mike

Re: [Leaf-user] EigerStein pre-release huge kernel as binary file?

[Mike Sensney]

At 01:17 PM 06/28/2001 -0700, Larry Platzek wrote

>Mike S. are you going to put the required DLLs on the SF site also?
>CYGWIN1.DLL is required, I do not know if anything else is required.
>Thank You.
>
>
>Larry Platzek  [EMAIL PROTECTED]

Opps! Didn't think that there might be a required DLL. I loaded the who CYGWIN 
environment on my computer so all of that is taken care of...

Here is that DLL for you. I'll post the DLL to my web page asap.

Mike

(Attachment deleted for list)

Re: [Leaf-user] EigerStein pre-release huge kernel as binary file?

[Mike Sensney]

At 01:50 AM 06/27/2001 -0700, [EMAIL PROTECTED] wrote:

>On Wed, 27 Jun 2001, Liam Tumulty wrote:
>
>> Is there a trick to getting the latest EigerStein pre-release "huge" Pentium
>> kernel as a working binary file? I think the LEAF web server thinks the
>> kernels are text files. Could you send me another link or the file?
>
>As I recall, there is a request in to fix this.
>
>For now, the trick is to use wget or Internet Explorer.

For Windows users who is interested I have just added the Cygwin Windows port 
of wget to my LRP page. http://leaf.sourceforge.net/devel/msensney/WGET.EXE
Download this file, add it somewhere in your path and run it from a DOS Window.

This program is a "Swiss Army Knife" web file grabber. Try the help command 
to get an idea of what it can do. 
wget --help  ; massive help listing

For the purpose of just fetching a file from a web site, these 2 forms of 
the command will work just fine.
wget -nd http://file.url ; fetch a file to your current directory
wget -O pathname http://file.url ; fetch a file and rename "pathname"

Enjoy.
Mike

Re: [Leaf-user] OT: Generic DNS Questions

[Mike Sensney]

There is an alternative...

I have been using http://www.zoneedit.com to handle a couple of domains.
They allow you the first 5 domains for FREE. Domain record management is 
by web interface. Easy to use and hassle free.

At 04:09 PM 06/26/2001 -0500, Charles Steinkuehler wrote

>> I have the network pictured here http://64.81.226.171/netdiagram2.txt in
>> place and running.  I own two domain names, justaskdan.com and
>gilleece.net.
>> I don't want to pay $10/ea/mo. to have someone provide name pointers for
>me,
>> so I'd like to do the the DNS updating myself.  I have read a good bit of
>> material on the topic, but my lack of experience is showing thru...
>>
>> Here is what I have tried:  I setup named on the .171 box, creating all
>the
>> files according to the "cookbook" at
>> http://www.pcquest.com/linux/settingup.asp, and I get "Ready to answer
>> queries" when named starts.  Other than that, I can't tell if it's doing
>> anything.
>>
>> 1.  Will a misconfiguration harm anything or piss anyone off?
>
>Yes, but since they're your domains, you'll mainly be harming/pissing off
>yourself as long as you don't enter someone else's IP's, contact-info, etc
>into your DNS records.
>
>> 2.  I "own" the domain names, but internic whois shows the firms thru
>which
>> I registered the domains as technical contacts.  Am I skipping a step by
>> simply putting up my own primary DNS server? How do I establish MY server
>as
>> the global authority for where my names/IPs point?
>
>Once you get your servers setup, change the DNS info with internic to point
>to your servers, instead of your hosting service.  You should also update
>the contact info so all contacts point to you.  Once this is done, you can
>stop paying your hosting company the $10 a month.
>
>> 3.  Are there any recommended links for explaining this stuff at a VERY
>> pedestrian level?  Most of the HOW-TO docs I have located refer to the
>> specifics of configuring one system vs. another, but don't really go into
>> explaining the background of exactly what the DNS system IS  and how it
>> WORKS.
>
>I don't have any good links off-hand, but you'll probably want a copy of the
>O'Reilly Bind book if you're maintaining any DNS servers.
>
>Also, check into nslookup, which runs on both linux and windows boxes.  You
>can tell it to talk to your newly installed bind server and verify name
>resolving is working properly prior to switching your DNS server IP's with
>internic.
>
>Charles Steinkuehler
>http://lrp.steinkuehler.net
>http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)

Re: [Leaf-user] OT: KVM switches

[Mike Sensney]

At 05:48 PM 06/25/2001 -0400, Peter Nosko wrote:

>pn] Does anyone here use a KVM switch for GUI workstations?  I use the old
>manual switch boxes for my LRP machines because quality video needs are low.
>But I've been using a Belkin Omni-Cube 4-port for X/Linux and Windows boxes
>and am unsatisfied with the video degradation.  I'd appreciate any feedback
>on reasonably-priced KVM switches with decent video performance.  Thanks.
>
>---
>Peter Nosko

I'm using a "Generic Brand" manual KVM 4 station switch (SW192323M-4) $22.00 
and 6' Video cables (UC1818-06) $6.00 from http://www.nwcable.com. I'm using 
it to connect a 17" CTX Ultra Screen and MS Natural KBD to 2 Windows and 2 
Linux boxes. I can drive the monitor to 1600x1200 and it looks crisp. Much 
better than my eyes can handle. 

The two problems I have with this KVM.

1) The KVM must be switched to a Windows box during boot or it or it won't 
see the KBD. (It is a pain trying to use Windows without a KBD.)

2) The mouse drivers get confused when you switch between boxes which can 
require a reboot to fix. (I use a separate mouse for each computer.)

Re: [Leaf-user] Fw: URGENT: Samba security hole

[Mike Sensney]

The only Samba packages I'm aware of are Koon Wong's.
http://lrp.c0wz.com/files/kwarchive/

 From the /etc/smb.conf file in smb.lrp:

# Samba config file created using SWAT
# from wpkgate.kc.com.my (202.184.173.241)
# Date: 1999/01/30 22:26:31

# Global parameters
workgroup = LINUX-GRP
netbios name = myserver
encrypt passwords = Yes
update encrypted = Yes
log file = /var/log/samba/log.%m
guest account = pcguest
hosts allow = 202.184.173.
<<<>>>

This does use the exploitable %m variable. 

At 05:36 PM 06/24/2001 -0700, Kenneth Hadley wrote:

>I believe there is a Samba LRP package floating about so this is probably a
>VERY relevant Security bug from the Samba mailing list
>
>
>- Original Message -
>From: "Andrew Tridgell" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Friday, June 22, 2001 5:26 PM
>Subject: URGENT: Samba security hole
>
>
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>>
>> IMPORTANT: Security bugfix for Samba
>> 
>>
>> June 23rd 2001
>>
>>
>> Summary
>> - ---
>>
>> A serious security hole has been discovered in all versions of Samba
>> that allows an attacker to gain root access on the target machine for
>> certain types of common Samba configuration.
>>
>> The immediate fix is to edit your smb.conf configuration file and
>> remove all occurances of the macro "%m". Replacing occurances of %m
>> with %I is probably the best solution for most sites.
>>
>> Details
>> - ---
>>
>> A remote attacker can use a netbios name containing unix path
>> characters which will then be substituted into the %m macro wherever
>> it occurs in smb.conf. This can be used to cause Samba to create a log
>> file on top of an important system file, which in turn can be used to
>> compromise security on the server.
>>
>> The most commonly used configuration option that can be vulnerable to
>> this attack is the "log file" option. The default value for this
>> option is VARDIR/log.smbd. If the default is used then Samba is not
>> vulnerable to this attack.
>>
>> The security hole occurs when a log file option like the following is
>> used:
>>
>>   log file = /var/log/samba/%m.log
>>
>> In that case the attacker can use a locally created symbolic link to
>> overwrite any file on the system. This requires local access to the
>> server.
>>
>> If your Samba configuration has something like the following:
>>
>>   log file = /var/log/samba/%m
>>
>> Then the attacker could successfully compromise your server remotely
>> as no symbolic link is required. This type of configuration is very
>> rare.
>>
>> The most commonly used log file configuration containing %m is the one
>> distributed in the sample configuration file that comes with Samba:
>>
>>   log file = /var/log/samba/log.%m
>>
>> in that case your machine is not vulnerable to this attack unless you
>> happen to have a subdirectory in /var/log/samba/ which starts with the
>> prefix "log."
>>
>> New Release
>> - ---
>>
>> While we recommend that vulnerable sites immediately change their
>> smb.conf configuration file to prevent the attack we will also be
>> making new releases of Samba within the next 24 hours to properly fix
>> the problem. Please see http://www.samba.org/ for the new releases.
>>
>> Please report any attacks to the appropriate authority.
>>
>> The Samba Team
>> [EMAIL PROTECTED]
>>
>> -BEGIN PGP SIGNATURE-
>> Version: GnuPG v1.0.6 (GNU/Linux)
>> Comment: Processed by Mailcrypt 3.5.6 and Gnu Privacy Guard
>
>>
>> iD8DBQE7M+Gobf9zMVhTZ5ERAoVvAJ9CX93rSHbEyPD95mS3C5XaQXx5RgCfeOIx
>> bKPS2xD1L8C0mlr6y5i8uBo=
>> =M/K7
>> -END PGP SIGNATURE-
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>
>___
>Leaf-user mailing list
>[EMAIL PROTECTED]
>http://lists.sourceforge.net/lists/listinfo/leaf-user
>
>
>
>---
>Incoming mail is certified Virus Free.
>Checked by AVG anti-virus system (http://www.grisoft.com).
>Version: 6.0.262 / Virus Database: 132 - Release Date: 06/12/2001

Re: [Leaf-user] LRP & networking newbie needs help

[Mike Sensney]

The DOS utility from 3COM is available here:
http://leaf.sourceforge.net/devel/msensney/3C5X9CFG.EXE

At 11:53 AM 06/19/2001 -0700, Jonathan French wrote:
>I did a little googling, and it would appear that the 3c509 has a
>utility to turn off PNP.  You probably then also want to specify the IRQ
>& memory.

Re: [Leaf-user] Where can I buy Slink ???

[Mike Sensney]

Get the slink_r5_x.iso images, which are the binaries. In fact, you can set 
up a working slink system with just the first disk. The other three ISOs are 
the source files.

At 12:21 AM 06/13/2001 -0500, Michael D. Schleif wrote:


>Steven Peck wrote:
>> 
>> > Wow!  I didn't know that @Home tolerated webhosting, especially with
>> > these kinds of downloads };-Þ
>> >
>> > Are these available via FTP?  ws_ftp is the fastest method
>> > that I know.
>> >
>> > Why aren't these available at LEAF?
>> > 
>> 
>> technically, @Home probably doesn't, but as long as he is not hosting mp3 or
>> porn, I don't think they care.
>> 
>> I believe space is the issue for the LEAF site, there are already a CD or
>> two worth or things there.
>
>Yes -- but, which of the six (6) images do I need ???
>
>-- 
>
>Best Regards,
>
>mds
>mds resource
>888.250.3987
>
>"Dare to fix things before they break . . . "
>
>"Our capacity for understanding is inversely proportional to how much we
>think we know.  The more I know, the more I know I don't know . . . "
>
>___
>Leaf-user mailing list
>[EMAIL PROTECTED]
>http://lists.sourceforge.net/lists/listinfo/leaf-user
>
>
>
>---
>Incoming mail is certified Virus Free.
>Checked by AVG anti-virus system (http://www.grisoft.com).
>Version: 6.0.261 / Virus Database: 131 - Release Date: 06/06/2001