Re: Cloud Backup

[Ghiora Drori]

Shachar Shemesh enjoys being rude and wrong.
I suggest he install new fuses.



On Fri, May 17, 2013 at 10:05 AM, Shachar Shemesh wrote:

>  On 17/05/13 11:43, Oleg Goldshmidt wrote:
>
> Shachar Shemesh   writes:
>
>
>  On 17/05/13 10:13, Ghiora Drori wrote:
>
> https://aws.amazon.com/glacier/#highlights
> Quote: "Amazon Glacier is designed to provide average annual
> durability of 99.9% "
>
> If this is not good enough for you too bad.
>
>
> When you see someone, anyone, saying such a thing, run. As fast and as
> far as you can.
>
> This level of assurance is called "nine nines"(henceforth 9*9). It
> amounts to one thousandth of a second of downtime a year.
>
>  I think you are misreading the claim, Shachar. It is not about
> availablity, it is about "durability". I read it as a measure of the
> probability that your data will not be lost before a year passes.
>
>  You are right that this is not about availability. The previous response
> was my fuse jumping because of the pure ludiciority of people claiming 9*9
> availability. After reading the actual text, however, it is not clear what
> it is about.
>
> It is possible that this means that they will lose (on average) ten bits
> per Terabyte per year. If that is the case, honestly, this does not sound
> very good. Assuming they have several exabytes of customers data, this
> means that they have several actual cases of customer data lose all the
> time. Not a particularly good track record.
>
> Or, and this is the more likely scenario, they are talking out of their
> asses, and put the number in because it sounds impressive.
>
> Omer Zak wrote:
>
> IMO, the quote does not promise a nine nines assurance.
> It only says that Amazon Glacier WAS DESIGNED to provide this kind of
> assurance.
>
>  See my previous comment for why this is equally ludicrous.
>
> Shachar
>
>  Disclaimer: I have never used the service and th above is my "common
> sense and reading comprehension" take on what is written in the above
> website.
>
>
>
>


-- 
Mark Twain - "If you don't *read* the newspaper, you're *uninformed*. If
you *read* the newspaper, you're *mis*-*informed*."
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Cloud Backup

[Ghiora Drori]

Hi,
Please read the doc's regarding S3 and Glacier again.
The best way is to backup Linux under Amazon is  to S3. This way you have
immediate access to the recently backed up stuff.
Once the backups are in S3 you can tell Amazon to move it to Glacier  based
on  the names of the files in S3 and* time constraints; *lets say after two
weeks when it becomes less likely you will need it.
Using the S3 Amazon console, you can also specify when to delete the
backups from glacier automatically a very nice feature.
The cost in glacier is very low.
You only pay high fees for restoring from glacier to S3 (From where you can
easily recover to Linux) if you break the rules. Read the rules below:

 https://aws.amazon.com/glacier/pricing
Quote "Glacier is designed with the expectation that retrievals are
infrequent and unusual, and data will be stored for extended periods of
time. You can retrieve up to 5% of your average monthly storage (pro-rated
daily) for free each month. If you choose to retrieve more than this amount
of data in a month, you are charged a retrieval fee starting at $0.01 per
gigabyte. Learn more. In addition, there is a pro-rated charge of $0.03 per
gigabyte for items deleted prior to 90 days."


There is an article by some one who has comprehension problems on the
Internet saying it will cost a fortune to restore, and people seem to be
quoting it a lot.
I have done restores and it is simply not so.
I backup a few 100GB's this way every night. I have done restorations.

As to reliability: (This is effectively a contract):
https://aws.amazon.com/glacier/#highlights
Quote: "Amazon Glacier is designed to provide average annual durability of
99.9% "
If this is not good enough for you too bad.

( I do not work for Amazon)

Thanks Ghiora



On Fri, May 17, 2013 at 12:04 AM, Nadav Har'El wrote:

> On Thu, May 16, 2013, Steve Litt wrote about "Re: Cloud Backup":
> > > If anyone was following this thread, I'll give you the latest news.
> > >
> > > rsync.net just announced (see
> > > https://news.ycombinator.com/item?id=5638295) that during May, they
> > > sell 50 GB of quota for $60 a year. I switched to this deal, and it
>
> > What happens in June? I was looking at
> > http://www.rsync.net/resources/faq.html#13 , and that listed the price
> > before quantity discounts at $0.80/gigabyte_month, so with my 30 GB,
> > I'd be paying $24/month. I like the idea of using rsync or sftp to
> > upload and download my files, but $24/month is pretty steep.
>
> They promised the 10 cent per gigabyte per month will stay forever, if you
> just *enroll* in May.
>
> Until this month, I've been paying them "just" 40 cents/gigabyte/month
> and thought I was getting a good deal (50% discount), because I'm a free
> software author :-)
>
> --
> Nadav Har'El|  Thursday, May 16 2013, 8 Sivan
> 5773
> n...@math.technion.ac.il
> |-
> Phone +972-523-790466, ICQ 13349191 |When you handle yourself, use your
> head;
> http://nadav.harel.org.il   |when you handle others, use your
> heart.
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>



-- 
Mark Twain - "If you don't *read* the newspaper, you're *uninformed*. If
you *read* the newspaper, you're *mis*-*informed*."
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Newer gcc swallow version control keywords

[Ghiora Drori]

http://gcc.gnu.org/ml/gcc/2005-04/msg01429.html


 I do have three suggestions for you:
>
> 1) The current way to tell the compiler not to throw away
>apparently-unused data is __attribute__((used)), like this:
>
>   static const char __attribute__((used)) rcs_sccs_id[] =
>   "$Id: @(#)%M% %I% 20%E% %U% copyright 2005 %Q% string1\\ $";



On Mon, Oct 17, 2011 at 2:04 PM, Oleg Goldshmidt  wrote:

>
> "Nadav Har'El"  writes:
>
> >   #if (__GNUC__ >= 4) && (__GNUC_MINOR__ > 4)
> >   #define USED(x) x __attribute__((used))
> >   #else
> >   #define USED(x) x
> >   #endif
> >   #define IDENT(x) static const char USED(foo_src_id[]) = x;
> >
> > and then in each file just do
> > #include "ident.h"
> > IDENT("$Id");
>
> The proper contents of ident.h would actually be
>
> #ifndef _IDENT_H_
> #define _IDENT_H_
>
> #if defined(__GNUC__)
> #define USED(x) x __attribute__((used))
> #else
> #define USED(x) x
> #endif
>
> #define IDENT(s,x) static const char USED(s[]) = x
>
> #endif
>
> - this is because one would want to use different identifiers in every
> file to avoid a) clashes when keywords are used in header files (very
> useful: which versions of the headers was this file compiled with?) and
> b) possible effects of -fmerge-constants and friends.
>
> --
> Oleg Goldshmidt | p...@goldshmidt.org
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>



-- 
Your time is limited, so don't waste it living someone else's life. Don't be
trapped by dogma -- which is living with the results of other people's
thinking. Don't let the noise of others' opinions drown out your own inner
voice. And most important, have the courage to follow your heart and
intuition. They somehow already know what you truly want to become.
Everything else is secondary.
Steve Jobs
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Amazon free to new customers!

[Ghiora Drori]

Hi,
Correction, sorry but you are not up to date.
1) You can use your own kernel (This changed a few month ago, used to be
that you needed special permission to do this.)
I am using mine on a significant number of instances. There are articles
on the internet explaining how:
http://rich0gentoo.wordpress.com/2010/07/18/ec2-custom-kernels/

2) You should create your own images on EBS drives and use snapshots from
the images to boot. It is very easy to create new ones.
since they are simply just Linux root images.
You then boot from the snapshot of the EBS drive and specify other
drives that are to be mounted as additional snapshots.
Life on Amazon is much easier now then is was a couple of years ago.

   If you boot an existing public image (with EBS as root you can stop it
with ec2-stop  and take a snapshot of the root
   drive and use EBS's created from it for modifications. Fairly east to do
with the Centos or Ubuntu public images.


  The snapshot images also boot faster since they are read into the EBS
drive when needed.

  I do this a lot so please do not tell it cannot be done :)

  Have fun.


2010/10/24 Etzion Bar-Noy 

> With defined limitations. You can use *their* kernel and initrd, or some
> others supplied, but you cannot supply your own. Also - adding custom OS
> selections is not trivial. If not already created by someone else (with
> his/hers S3 space to store that image), you might find yourself lacking the
> right image for your needs.
>
> That said, almost anything can be done using the existing, limited, images
> supplied by Amazon. Add to that the images supplied by users, and you will
> be just fine.
>
> Ez
>
> 2010/10/24 Tom Rosenfeld 
>
>>
>>
>> On Sun, Oct 24, 2010 at 10:10 AM, geoffrey mendelson <
>> geoffreymendel...@gmail.com> wrote:
>>
>>>
>>> On Oct 24, 2010, at 9:51 AM, Tom Rosenfeld wrote:
>>>
>>>
 If you haven't already tried cloud computing, this is your chance to use
 free for a year!
 -tom

>>>
>>>
>>> Does this have to be a web server? Can one use it for an Asterisk or
>>> other SIP relay or a private HTTP or SOCKS proxy?
>>>
>>> Geoff
>>>
>>> --
>>> Geoffrey S. Mendelson,  N3OWJ/4X1GM
>>> To help restaurants, as part of the "stimulus package", everyone must
>>> order dessert. As part of the socialized health plan, you are forbidden to
>>> eat it. :-)
>>>
>>> No, it does not have to be a web server. Actually, the point of Amazon is
>> that you can install any OS and any software you like!
>>
>> -tom
>>
>>
>>
>> ___
>> Linux-il mailing list
>> Linux-il@cs.huji.ac.il
>> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>>
>>
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>


-- 
The only normal people are the ones you don't know very well.
Alfred Adler
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: n900 preorder

[Ghiora Drori]

Hi,
I will be surprised if Amazon agrees to ship it to Israel...

2009/10/10 Erez D 

> i saw that i can pre-order the n900 for just 580$ (it's real price should
> be 500 euro) from amazon.com
>
> http://www.amazon.com/Nokia-N900-Unlocked-Computer-3-5-Inch/dp/B002OB49SW/ref=sr_1_1?ie=UTF8&s=wireless&qid=1255160977&sr=8-1
>
> i was wondering what about customs, and will the us version work well in
> israel.
>
> does anybody know ?
>
>
> thanks,
> erez.
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>


-- 
Constant change is here to stay!
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Cheap VM cluster (software, storage) ideas

[Ghiora Drori]

Hi,
s3 is not used for block storage!! local ec2 instances storage or EBS drives
are used.

I have instances running for 485 days. These are from the time we started
using Amazon which was in beta.
The fact that during the beta they some issued is not a big surprise.

As to cost if you are using 4 servers it really does not matter. If you are
you are using a 100 and
there number can drop to 50 or go up depending on what you are doing the
savings are significant.
Being able to setup more servers to test a large new installation and then
discard them paying only for actual usage
gives you a lot of flexibility.



On Thu, Mar 5, 2009 at 10:25 AM, Ira Abramov  wrote:

> Quoting Ghiora Drori, from the post of Wed, 04 Mar:
> > Hi,
> > Why would s3 bother you ? Its there it does not cost money if you do not
> use
> > it it cost fairly little when you do
> > and it works ok.
>
> Well, I was told it's not accassible as a simple filesystem, which means
> it won't work as shared storage for my current set of apps (various PHP
> and other tools expecting to find plain files in the directories they
> put them in...
>
> > The only thing you will need s3 for is to store images of systems you
> want
> > to launch, you could use public images
> > but the cost of keeping private onse in s3 is negligible and this gives
> much
> > more flexiblity in creating custom servers.
>
> Well, the hosting guy has 5 very different servers hosted right now. a
> winXP for Marcom, a couple of production Debian LAMPs, a test LAMP and a
> spare
> machine for sensitive sites. I think we are talking about too many
> details to try and just dump them P2V on a cloud and hope for the
> best...
>
> > You do have to learn how to handle it aka instances can die and then
> > you loose their disk this has been rare lately, was more common a few
> > month ago. The EBS drives however do not die with the machine so data
>
> are you trying to cheer me up? :) I have machines with 500-600 days of
> uptime here, I don't need to move a bunch of Israeli sites to a far away
> cloud that occasionally has a lightning storm as well.
>
> > You can put mysql, or any other software in images or load them when
> > the instance is up.  You can run RedHat, Gentoo, Ubuntu or even
> > Windows...  You can scale up and down the number of your servers and
> > EBS disks as needed.
>
> If your servers were built for clustering in the first place, maybe.
> This is not a case of "Drag'n'drop", as you can understand :)
>
> > Make an account and play with it!!  A small machine/instance (32 bits)
> > is 10 cents an hour. If you cannot afford that you are not really
> > commercial :) A few minor calculations should give you the correct
> > cost numbers.
>
> 10 cents an hour are $2.4 a day or about $75 a month. this is more or
> less what the guy is paying in Israel now, and he gets less latency (all
> Hebrew sites and wanted only by Israelis), more disk space, etc.
>
> I guess the only real plus of histing the apps there is the Fun in the
> SAN.
>
> > As sysadmin using it in a real web company it is very good, has a
> > learning curve like everything else.
>
> yeah, only he's expecting definite answers from me, and Now I have to
> talk him into doing a pilot because I don't have all the correct
> answers. But that's the way the Internet works, right? :-)
>
> Cheers,
> Ira.
>
> --
> Santa's little helper
> Ira Abramov
> http://ira.abramov.org/email/
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>



-- 
Constant change is here to stay!
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: Cheap VM cluster (software, storage) ideas

[Ghiora Drori]

Hi,
Why would s3 bother you ? Its there it does not cost money if you do not use
it it cost fairly little when you do
and it works ok.
The only thing you will need s3 for is to store images of systems you want
to launch, you could use public images
but the cost of keeping private onse in s3 is negligible and this gives much
more flexiblity in creating custom servers.
EBS has been in production for quite a while (I also used it before it was
in production.) So far after a few month no glitches.

You can do anything you want with it software wise.
You do have to learn how to handle it aka instances can die and then you
loose their disk this has been rare lately, was
more common a few month ago. The EBS drives however do not die with the
machine so data on them is much safer, they
are kept in 3 copies at Amazon in different locations. You can split your
servers to 3 different zones for more reliability.
You can use s3 for backups and it is probably much safer then anything else
you have.

You can put mysql, or any other software in images or load them when the
instance is up.
You can run RedHat, Gentoo, Ubuntu or even Windows...
You can scale up and down the number of your servers and EBS disks as
needed.
Make an account and play with it!!
A small machine/instance (32 bits) is 10 cents an hour. If you cannot afford
that you are not really commercial :)
A few minor calculations should give you the correct cost numbers.

As sysadmin using it in a real web company it is very good, has a learning
curve like everything else.





On Wed, Mar 4, 2009 at 4:44 PM, Ira Abramov
wrote:

> Quoting Ghiora Drori, from the post of Wed, 04 Mar:
> > Hi,
> > Amazon EC2 instances plus their EBS disks.
> > Scalable, available, reliable (from my experience) and you can experiment
> > for a few $'s a day.
>
> I tried to calculate the hosting costs, but was lost when I could not
> find the full explanation on how to calculate some of the parameters
> Amazon asked. Also it seemed the move to the EC2 would force me to use
> S3 and that was a deal breaker. this EBS feature is something I missed
> from the stroll in their site, so I suppose it's not something they are
> pushing hard yet. is it production-ready? can I stick a mysql server and
> all and just keep it all running as-is?
>
> As for hosting cost calculations - is there a tool you can recommend I
> can run on existing servers, or just a checklist to go over, that will
> help me judge if my system would make the move smoothly and at what
> price? I see so many conflicting suggestions on Google and I don't know
> which to trust, and have 0 time for useless trial and error.
>
> Also, knowing this client, I think he's not too happy about shooting his
> precious core business machines over the net to be hosted out of reach.
> It may be a psychological thing, but I can sympathize :-)
>
> > On Wed, Mar 4, 2009 at 11:06 AM, Ira Abramov <
> lists-linux...@ira.abramov.org
> > > wrote:
> >
> > > related to the Citrix-vs-VMware question, in the spirit of the times...
> > >
> > > I want to create a way to host a cheap HA solution for a web hosting
> > > outfit. they are running a few pretty busy asymetric servers and want
> to
> > > start improving that infrastructure. each machine holds several dozens
> > > of virtual hosts.
> > >
> > > At the moment each server has its own local storage and mysql. every
> > > part is a SPOF other than the minimal RAID and such things.
> > >
> > > I'm thinking:
> > > * Move to a central non-virtual MySQL for the backend.
> > > * have two servers go P2V and have those VMs hosted back on their
> > > original hardwares (sadly this means some painful downtime), and find a
> > > way to let them crash-migrate for HA (still trying to figure this out)
> > > * Second stage, add a second MySQL in a master-master setup.
> > >
> > > I'd love to have two servers with symetrical setup, but as you can
> > > guess, the virtual hots are dozens of different apps that are too
> > > expensive to go and rewrite for clusters at this point, with the issues
> > > of user-uploaded files having to be available to both Apaches, etc.
> > >
> > > Assuming we want the cheapest reliable solution, i.e. not a $6K-20K SAN
> > > and FC, I am looking for an easier solution (easier on the pocket at
> > > least). However NFS proved to be a disaster in such cases (high-load
> web
> > > services), OCFS has not been nice to me with any setup other than maybe
> > > Oracle clusters, and GFS also never ran smoothly in my tests.
> > >
> > > Also OCFS and GFS require a common disk, which at th

Re: Cheap VM cluster (software, storage) ideas

[Ghiora Drori]

Hi,
Amazon EC2 instances plus their EBS disks.
Scalable, available, reliable (from my experience) and you can experiment
for a few $'s a day.


On Wed, Mar 4, 2009 at 11:06 AM, Ira Abramov  wrote:

> related to the Citrix-vs-VMware question, in the spirit of the times...
>
> I want to create a way to host a cheap HA solution for a web hosting
> outfit. they are running a few pretty busy asymetric servers and want to
> start improving that infrastructure. each machine holds several dozens
> of virtual hosts.
>
> At the moment each server has its own local storage and mysql. every
> part is a SPOF other than the minimal RAID and such things.
>
> I'm thinking:
> * Move to a central non-virtual MySQL for the backend.
> * have two servers go P2V and have those VMs hosted back on their
> original hardwares (sadly this means some painful downtime), and find a
> way to let them crash-migrate for HA (still trying to figure this out)
> * Second stage, add a second MySQL in a master-master setup.
>
> I'd love to have two servers with symetrical setup, but as you can
> guess, the virtual hots are dozens of different apps that are too
> expensive to go and rewrite for clusters at this point, with the issues
> of user-uploaded files having to be available to both Apaches, etc.
>
> Assuming we want the cheapest reliable solution, i.e. not a $6K-20K SAN
> and FC, I am looking for an easier solution (easier on the pocket at
> least). However NFS proved to be a disaster in such cases (high-load web
> services), OCFS has not been nice to me with any setup other than maybe
> Oracle clusters, and GFS also never ran smoothly in my tests.
>
> Also OCFS and GFS require a common disk, which at this budget would be a
> Linux machine running an iSCSI target at best (or OpenNAS).
>
> Am I missing something? Can this kind of reliability be achieved without
> shelling out big bucks?
>
> Of course, The other option is just separate the MySQL, have a third
> machine rsync the files of the two (non virtual) servers every few
> minutes and have the hosting farm's layer4 switch redirect to the
> fallback if something happens. Not very "smart" nor scalable, but does
> 70% of what we need till a bigger investment is required.
>
> your thoughts, as before, are welcome...
>
> Thanks,
> Ira.
>
> --
> Can't catch me yet
> Ira Abramov
> http://ira.abramov.org/email/
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>



-- 
Constant change is here to stay!
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: finding which public key was used to login to ssh

[Ghiora Drori]

--000e0cd6ac10f417450460f6e8cb
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hi,
Actually (trying not to be lazy) I am using VERBOSE and works very well
showing the RSA keys.

DEBUG is not recommended:
>From the man page:

 Logging with a DEBUG level
 violates the privacy of users and is not recommended.



On Tue, Jan 20, 2009 at 8:41 PM, Ghiora Drori  wrote:

> Hi,
>
> Try :
> LogLevel VERBOSE
>
>
>
> On Tue, Jan 20, 2009 at 4:57 PM, Amos Shapira wrote:
>
>> 2009/1/20 Ehud Karni :
>> > Did you have a line like:
>> > Jan 19 14:45:50 mvs-s1 sshd[6153]: Found matching DSA key:
>> a6:af:c4:f6:1e:6d:12:f9:e7:35:cf:e6:c7:58:5c:52
>> > just preceding the "Accepted publickey" ?
>>
>> Nope.
>>
>> >
>> > This is fingerprint of the corresponding key.
>> > You can check the fingerprint of a key by `ssh-keygen -l -f
>> '.
>> >
>> > Also, if you change the debug level of sshd by changing the "LogLevel"
>> > to "DEBUG" (instead of the default "INFO", in /etc/ssh/sshd_config)
>> > you'll have an added line:
>> > Jan 19 14:45:50 mvs-s1 sshd[6153]: debug1: matching key found: file
>> /home/ehud/.ssh/authorized_keys, line 3
>> > So you know the exact match.
>>
>> Thanks. This sounds like what I'd like to know.
>>
>> The question now is how much more crap I'll have to sort through in
>> the log file with DEBUG turned on...
>>
>> Cheers,
>>
>> --Amos
>>
>> =
>> To unsubscribe, send mail to linux-il-requ...@cs.huji.ac.il with
>> the word "unsubscribe" in the message body, e.g., run the command
>> echo unsubscribe | mail linux-il-requ...@cs.huji.ac.il
>>
>>
>
>
> --
> Constant change is here to stay!
>
>
>
>


-- 
Constant change is here to stay!

--000e0cd6ac10f417450460f6e8cb
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi,Actually (trying not to be lazy) I am using VERBOSE and works very w=
ell showing the RSA keys.DEBUG is not recommended:From the man =
page: Logging with a DEBUG levelviolates the privacy of =
users and is not recommended.
On Tue, Jan 20, 2009 at 8:41 PM, G=
hiora Drori <mailto:ghioradr...@gmail.com";>=
ghioradr...@gmail.com> wrote:
Hi,Try :LogLevel VERBOSE<=
br>On Tue, Jan 20, 2009 at 4:57 PM, Amos=
 Shapira <mailto:amos.shap...@gmail.com"; ta=
rget=3D"_blank">amos.shap...@gmail.com> wrote:

2009/1/20 Ehud Ka=
rni <mailto:e...@unix.mvs.co.il"; target=3D"_blank">e...@unix.=
mvs.co.il>:


> Did you have a line like:
> Jan 19 14:45:50 mvs-s1 sshd[6153]: Found matching DSA key: a6:af:c4:f6=
:1e:6d:12:f9:e7:35:cf:e6:c7:58:5c:52
> just preceding the "Accepted publickey" ?

Nope.

>
> This is fingerprint of the corresponding key.
> You can check the fingerprint of a key by `ssh-keygen -l -f <the_ke=
y_file>'.
>
> Also, if you change the debug level of sshd by changing the "LogL=
evel"
> to "DEBUG" (instead of the default "INFO", in /etc=
/ssh/sshd_config)
> you'll have an added line:
> Jan 19 14:45:50 mvs-s1 sshd[6153]: debug1: matching key found: file /h=
ome/ehud/.ssh/authorized_keys, line 3
> So you know the exact match.

Thanks. This sounds like what I'd like to know.

The question now is how much more crap I'll have to sort through in
the log file with DEBUG turned on...

Cheers,

--Amos

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
To unsubscribe, send mail to mailto:linux-il-requ...@cs.huji.ac.=
il" target=3D"_blank">linux-il-requ...@cs.huji.ac.il with
the word "unsubscribe" in the message body, e.g., run the command=

echo unsubscribe | mail mailto:linux-il-requ...@cs.huji.ac.il"; t=
arget=3D"_blank">linux-il-requ...@cs.huji.ac.il

-- Constant change is here to stay!
-- Constant change =
is here to stay!

--000e0cd6ac10f417450460f6e8cb--

=
To unsubscribe, send mail to linux-il-requ...@cs.huji.ac.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-requ...@cs.huji.ac.il

Re: finding which public key was used to login to ssh

[Ghiora Drori]

--000e0cd309b43df0560460f6c6a9
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hi,

Try :
LogLevel VERBOSE


On Tue, Jan 20, 2009 at 4:57 PM, Amos Shapira wrote:

> 2009/1/20 Ehud Karni :
> > Did you have a line like:
> > Jan 19 14:45:50 mvs-s1 sshd[6153]: Found matching DSA key:
> a6:af:c4:f6:1e:6d:12:f9:e7:35:cf:e6:c7:58:5c:52
> > just preceding the "Accepted publickey" ?
>
> Nope.
>
> >
> > This is fingerprint of the corresponding key.
> > You can check the fingerprint of a key by `ssh-keygen -l -f
> '.
> >
> > Also, if you change the debug level of sshd by changing the "LogLevel"
> > to "DEBUG" (instead of the default "INFO", in /etc/ssh/sshd_config)
> > you'll have an added line:
> > Jan 19 14:45:50 mvs-s1 sshd[6153]: debug1: matching key found: file
> /home/ehud/.ssh/authorized_keys, line 3
> > So you know the exact match.
>
> Thanks. This sounds like what I'd like to know.
>
> The question now is how much more crap I'll have to sort through in
> the log file with DEBUG turned on...
>
> Cheers,
>
> --Amos
>
> =
> To unsubscribe, send mail to linux-il-requ...@cs.huji.ac.il with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail linux-il-requ...@cs.huji.ac.il
>
>


-- 
Constant change is here to stay!

--000e0cd309b43df0560460f6c6a9
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hi,Try :LogLevel VERBOSEOn 
Tue, Jan 20, 2009 at 4:57 PM, Amos Shapira amos.shap...@gmail.com> 
wrote:
2009/1/20 Ehud Karni 
e...@unix.mvs.co.il>:

> Did you have a line like:
> Jan 19 14:45:50 mvs-s1 sshd[6153]: Found matching DSA key: 
a6:af:c4:f6:1e:6d:12:f9:e7:35:cf:e6:c7:58:5c:52
> just preceding the "Accepted publickey" ?

Nope.

>
> This is fingerprint of the corresponding key.
> You can check the fingerprint of a key by `ssh-keygen -l -f 
'.
>
> Also, if you change the debug level of sshd by changing the 
"LogLevel"
> to "DEBUG" (instead of the default "INFO", in 
/etc/ssh/sshd_config)
> you'll have an added line:
> Jan 19 14:45:50 mvs-s1 sshd[6153]: debug1: matching key found: file 
/home/ehud/.ssh/authorized_keys, line 3
> So you know the exact match.

Thanks. This sounds like what I'd like to know.

The question now is how much more crap I'll have to sort through in
the log file with DEBUG turned on...

Cheers,

--Amos

=
To unsubscribe, send mail to mailto:linux-il-requ...@cs.huji.ac.il";>linux-il-requ...@cs.huji.ac.il 
with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail mailto:linux-il-requ...@cs.huji.ac.il";>linux-il-requ...@cs.huji.ac.il

-- Constant change 
is here to stay!

--000e0cd309b43df0560460f6c6a9--

=
To unsubscribe, send mail to linux-il-requ...@cs.huji.ac.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-requ...@cs.huji.ac.il

Re: OpenOffice won't access nfs partition

[Ghiora Drori]

Hi,
This is old by my guess would be locking again:
http://www.inf.bme.hu/~pts/solution_to_openoffice_nfs_locking.html

On Sun, Oct 12, 2008 at 12:27 PM, Oren Held <[EMAIL PROTECTED]> wrote:

> On Sunday, 12 October 2008 20:59:34 Shlomo Solomon wrote:
> > I just upgraded OpenOffice on my wifes Mandriva 2007.1 computer (to OO
> > 2.1). Now she can no longer save documents on a partition mounted as NFS
> > (the partition is on my machine). This is specific to OO. Other
> > applications can write to the drive, so it's not a permission problem
> (but
> > some OO setting that I may have screwed up).
>
> This doesn't make much sense; somehow the openoffice process probably
> cannot
> write files to these directories.
>
> I'd be:
> 1. trying to mimic openoffice by simply "echo"ing into a file on the same
> path, using the same user.
>
> 2. strace -e file -f -o /tmp/ooo.strace oowriter
> then inspect /tmp/ooo.strace for these file-writing errors.
>
> G'luck
>
>  - Oren
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>


-- 
Constant change is here to stay!

Re: Telling libtool/automake to be less anal

[Ghiora Drori]

Hi,
This is the beginning of Shachar's posting:

Quote ( bold mine):
Libtool is a* great tool*, and it fits nicely with automake and autoconf,
making it extremely simple to just take a new project, write a few (less
than 10) lines to instructions, and get a project that already builds static
and shared libraries, including support for cross build, out of tree builds,
make install/uninstall, strip and even packaging the sources into a
distribution tar ball. Just great.


I happen to disagree and I can say so even if any of you do not like it.
This does not mean I have to fix Shachar's problem or even look at at it,
If you are looking for a fight I am not interested.
Ghiora





On Wed, Sep 24, 2008 at 1:38 AM, Tzafrir Cohen <[EMAIL PROTECTED]>wrote:

> On Tue, Sep 23, 2008 at 09:54:34AM +0300, Shachar Shemesh wrote:
> > Ghiora Drori wrote:
>
> >> Use cmake. It is much better then the gnu tool builder stuff. And it
> >> is free.
>
> > 2. How does cmake handle this problem differently?
>
> I'll note that with all of your cmake advocacy, you still haven't
> answered Shachar's original question (which Oron did, for autotools).
>
> --
> Tzafrir Cohen | [EMAIL PROTECTED] | VIM is
> http://tzafrir.org.il || a Mutt's
> [EMAIL PROTECTED] ||  best
> ICQ# 16849754 || friend
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>


-- 
Constant change is here to stay!

Re: Telling libtool/automake to be less anal

[Ghiora Drori]

Hi,
My comment was cmake was regarding the general use of libtool, automake and
autoconf:


From *KDE developer Alexander Neundorf : (*http://lwn.net/Articles/188693/)

Now the next big change is happening: KDE is leaving the aging "autotool"
build chain behind. Some developers, not only in KDE, like to nickname the
autotools as "*auto-hell*" because of its difficult to comprehend
architecture. So, KDE 4 will feature a completely different build system:
CMake .


Having Used cmake (I have no association with them) I found it much easier
to handle build systems with the cmake.
 then with the autotool chain which I did get to meddle with quite a bit in
the past.
Have a nice day.


2008/9/23 Oron Peled <[EMAIL PROTECTED]>

> On Tuesday, 23 בSeptember 2008, Shachar Shemesh wrote:
> > Oron Peled wrote:
> > > Libtool has a standard '-module' option for this which is used during
> > > linking (--mode=link) and weirdly enough is passed as an argument
> *after*
> > > the gcc argument (but parsed and handled by libtool... hmmm).
> > >
> > > For the details you'd want to look at:
> > >  info libtool dlopen building
> >
> > plugin_la_LDFLAGS = -module -avoid-version
> > ...
> > Now I'm wondering what other options libtool has that do not appear in
> > either libtool --help nor at the manual.
>
> You was probably missled by the man page packaged by Debian (upstream
> autotools have only info pages).
>
> As I said, run:
>  info libtool dlopen building
> And it will bring you right to the page.
>
> The -avoid-version option was new to me, thanks. However, I just
> checked and it's documented as well (both in the reference section
> and in:
>  info libtool 'using libltdl' modules
>
> Cheers,
>
> --
> Oron Peled Voice/Fax: +972-4-8228492
> [EMAIL PROTECTED]  
> http://www.actcom.co.il/~oron
> The most exciting phrase to hear in science, the one that heralds new
>  discoveries, is not "Eureka!" (I found it!) but "That's funny ..."
> -- Isaac Asimov
>
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>


-- 
Constant change is here to stay!

Re: Memory manipulator

[Ghiora Drori]

Hi,
I assume this is relevant:
:H. Peter Anvin writes:

Mikael Pettersson wrote:

On Wed, 19 Sep 2007 14:35:29 +0100, James Pearson wrote:

/proc/PID/environ currently truncates at 4096 characters, patch based on
the /proc/PID/mem code.


Does /proc/PID/mem even work? If I do `strace cat /proc/PID/mem > /dev/null'
for a known good PID, the first read() from /proc/PID/mem fails with ESRCH,


Of course it does. Address zero isn't typically mapped.


I would also look here:
http://www.comptechdoc.org/os/linux/howlinuxworks/linux_hlproc.html
and use item 6 maps plus  /dev/mem

(Warning I am not a kernel programmer, so this is just my 2 cents after
goggling)




Indeed. My bad :-(
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/





On Sun, Aug 31, 2008 at 12:18 PM, Shachar Shemesh <[EMAIL PROTECTED]>wrote:

> Gilad Ben-Yossef wrote:
>
>>
>> Shachar Shemesh wrote:
>>
>>  You can only use /proc/PID/mem if you are already attached to that
>>> process as a debugger.
>>>
>> How interesting. Where is that documented?
>>
> Google. I spent almost half an hour trying to figure that one out. It is,
> indeed, not documented anywhere I could find.
>
>> neither the proc man page or the relevant kernel documentation file does
>> not mention this.
>>
>
> Don't use no double negatives! Sorry, couldn't resist.
>
>
>> I'm going to send a patch...
>>
> Go for it.
>
> Shachar
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>


-- 
Constant change is here to stay!

President John F. Kennedy once said that "the hottest places in Hell
are reserved for those who in a period of moral crisis maintain their
neutrality."

Re: Virtualization software on Linux

[Ghiora Drori]

Hi,
I have KVM working on an AMD Athlon(tm) 64 X2 Dual Core Processor 3800+
Runs Windows XP  Ubuntu  and Gentoo as Guests. As long as I do not go to
a kernel above 2.6.16 in the Linux guests. Getting the networking to
work with a bridge was kind of tricky but now its OK.
Performance is very good at least for what I need.
Ghiora




Amos Shapira wrote:
> On 09/07/07, *Eran Sandler* <[EMAIL PROTECTED]
> > wrote:
> 
> Amos, there are a couple of other contenders that are similar to VmWare.
> 
> Parallels also has a Linux version.
> VirtualBox - which was even GPLed a while back
> Qemu
> 
> I haven't tested VirtualBox yet but Parallels and VmWare are the
> ones with the best performance (at least that I know of). 
> 
> 
> Thanks for the summary.
> 
> What about Xen? I heard that its user interface is notorious, and that
> basically VMware's user interface makes it a leader (beyond the speed
> issue).
> 
> Then there is the question about KVM - is it a real option for people
> who just want something that "Just Workd(TM)"?
> 
> To give context for my question - I've just bought a Dell desktop based
> on Intel Core 2 Duo and installed Debian Etch (amd64) on it, and now I
> wonder how should I go about running Windows XP under it (possibly using
> the Windows XP partition I got with the computer, but not necessarily).
> 
> Cheers,
> 
> --Amos
> 


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Fwd: ADSL connection problem

[Ghiora Drori]

Hi,
This ADSL problem sounds like what I had from Friday till yesterday when
it went away. I also use a Linux firewall. I kept on getting email and
could go to the web via a proxy on the firewall but the going to the web
from my Linux computer behind the firewall directly did not work... I
spoke with Bezeq (AKA Actom) They had me online for 15 minutes trying to
verify my identity and then when they passed me to tech support I got a
beep, beep beep.
Now its all working with no changes...
Go figure.
Ghiora

Gadi Cohen wrote:
> From my personal experience, Bezeq is absolutely useless.
> 
> 
> I've had regular conversations that go like this "Hi, is there a problem
> with the ADSL in my area?" "No" "But I have this problem, I haven't
> changed anything on my PC, and last time this happened, the problem was
> on your side".  After confirming that the problem is indeed "mine", and
> going through the motions of disconnecting every phone in my house,
> changing cables, filters, etc, finally they agree to send a technician. 
> Of course in the end it always turns out the problem is on their side,
> so now I don't even bother phoning any more.
> 
> 
> Those are the obvious problems, when I can't get an ADSL sync.  I still
> have intermittent speed problems..  I can reach high speeds but they're
> never stable; it's alot more obvious when downloading from foreign
> sites.  I have accounts with Bezeqint and Netvision - when the speed
> problems act up, I experience them no matter which ISP I connect
> through.  So, I think we probably have the same problem, only yours
> affects you much worse.  Of course, I could be wrong, and it could be
> something else... my plan is to move over to Hot (just for Internet) and
> see how it compares.
> 
> 
> Gadi
> 
> 
> P.S. Can you access your modems connection status?  Line attenuation and
> SNR?  Although I must admit, mine never look out of the ordinary, I
> think Bezeq's problems are between the DSLAM I'm connected to and the
> rest of their network, but its just my thoughts.
> 
> 
> shlomo solomon wrote:
> 
>> Sorry if this arrives twice, but my original message to
>> [EMAIL PROTECTED]  didn't arrive
>> after waiting an hour.
>>
>> -- Forwarded message --
>> From: *shlomo solomon* <[EMAIL PROTECTED]
>> >
>> Date: Jul 3, 2007 7:28 AM
>> Subject: ADSL connection problem
>> To: [EMAIL PROTECTED] 
>> Cc: [EMAIL PROTECTED] 
>>
>> This is a classic chicken-and-egg problem. I've got a problem with my
>> ADSL connection, so can't write this from home. On the other hand,
>> from work, I have no access to Gmail or to the mailing-list, so I
>> won't be able to see if anyone answers me.
>>
>> Therefore, if anyone can help, please CC to my work address -
>> [EMAIL PROTECTED]  - although, I'm not
>> sure the content filter will allow the messages through :-(
>>
>> I apologize that I may not provide enough info, since I'm not at my
>> computer and don't have access during the day. But I'll be happy to
>> provide any additional info requested.
>>
>> First some background history - I've been connected to ADSL on
>> Mandriva (currently 2007.0) for years with no problems. My ISP is
>> 015-Smile. The first problem I ever had was 2 weeks ago and that
>> turned out to be a problem with a hardware component at the Bezeq
>> side. Since then everything was back to normal.
>>
>> According to /var/log/syslog, my connection was up for about 3500
>> minutes and went down on Saturday night (at 22:04). Since I have a
>> script that checks if I'm on-line at regular intervals, I was
>> automatically re-connected 2 minutes later. Since then, I can't reach
>> any sites on the Internet. I can ping my local network and also can
>> ping Internet addresses (for example google or ynet) so I am connected
>> and DNS is working. The output of ifconfig seems normal. But any
>> attempt to use a browser (I tried FF, Opera, Konqueror and even lynx)
>> or to send or receive e-mail (Kmail) fails. Ktorrent is also dead. BTW
>> - when I try to use a browser, I see the "normal" site contacted
>> message and there is some sort of exchange of data. For instance, when
>> I type www.ynet.co.il , the address bar shows
>> http://www.ynet.co.il/home/0,7340,L-8,00.html, so some sort of contact
>> has been made.
>>
>> Since the problem started, syslog has been full of thousands of
>> messages like the following:
>>
>> Jul 2 18:47:01 shlomo1 pptp[9910]: anon
>> log[decaps_gre:pptp_gre.c:407]: buffering packet 354(expecting 353,
>> lost or reordered)
>>
>> I contacted 015 and after being instructed to telnet into one of their
>> servers and succeeding (telnet 192.114.186.54 
>> 110) they said they had no idea what to do (we don't support Linux).
>> The only thing they suggested was to lower mtu from 1452 to 1420. I
>> tried but it made no differen

Re: Web mail security

[Ghiora Drori]

Hi,
I made the following experiment:

I created an image of windows and ran it under a virtual system (KVM on
Linux.)
This lets me see any changes that occur on the disk when  windows is
running.

I saved the original image before starting as: windows.img.orig

I then emailed to my yahoo account email from a google account an email
with the following lines:
from google from google from google from google from google from google
from google from google from google from google from google from google
from google from google from google from google from google from google

I then went into the windows system and read my yahoo email.
The next thing I did was to shutdown the windows virtual system and
store a copy of the windows new image now named:
windows.img.after_recieveing

Then I started the windows again and wrote 4 emails containing the
following lines in my yaooh email account:

Sending from Yahoo sending from Yahoo Sending from Yahoo sending from Yahoo
Sending from Yahoo sending from Yahoo Sending from Yahoo sending from Yahoo
Sending from Yahoo sending from Yahoo Sending from Yahoo sending from Yahoo

Once these emails where sent I shudown the windows system and saved he
image as:windows.img.after_sending

I now did a search for the string : "from google from google" in the
images and found it plus my gmail signature which shows the incoming
email was
stored in the image windows.img.after_recieveing and could be read.
However the text "Sending from Yahoo" cannot be found in any of the images
specifically : windows.img.after_recieveing.

Conclusions: Incoming email normally gets stored on the disk ( I assume
in the cache)
Outgoing email normally does not.



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Web mail security

[Ghiora Drori]

You are right.
I stand corrected.
Ghiora

Oded Arbel wrote:
> On Tue, 2007-06-19 at 22:32 +0300, Ghiora Drori wrote:
>> In the following RFC :
>> http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html
>> It says the browser can be told NOT to cache the page.
> 
> No, it doesn't. Read:
> 
>> quote:14.9.1 What is Cacheable
>> ..
>> private
>> Indicates that all or part of the response message is intended for a
>> single user and MUST NOT be cached by a shared cache. This allows an
>> origin server to state that the specified parts of the
>> response are intended for only one user and are not a valid response
>> for requests by other users. A private (non-shared) cache MAY cache the
>> response.
> 
>> I would assume an email server would use it. Anyone know if yahoo email
>> does? Anyone know if IE5 does respond properly. fRom What I can see it
>> does not.
> 
> I don't understand why you think IE5 does not respond properly. You have
> to remember that the cache used by a browser is of the "private
> (non-shared)" type and hence may store pages marked as "private". The
> only type of cache that may not store private pages is a web proxy's
> cache.
> 


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

re:Web mail security

[Ghiora Drori]

Hi,

Thanks for the answers, however I think I was not exact enough with my
questions. We are talking about yahoo mail which as much as I can tell
does not use https. Even gmail only uses https only when forced to (that
is when you access it through https//:mail.google.com.
I found an article claiming that web pages are only stored in the cache
for incoming pages. Outgoing pages (ones that you filled up are not.)
This is the article:

https://www.blackhat.com/presentations/bh-usa-03/bh-us-03-akin.pdf


In the following RFC :
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html
It says the browser can be told NOT to cache the page.

quote:14.9.1 What is Cacheable
..
private
Indicates that all or part of the response message is intended for a
single user and MUST NOT be cached by a shared cache. This allows an
origin server to state that the specified parts of the
response are intended for only one user and are not a valid response
for requests by other users. A private (non-shared) cache MAY cache the
response.

 .

Note: Most HTTP/1.0 caches will not recognize or obey this directive.
###




I would assume an email server would use it. Anyone know if yahoo email
does? Anyone know if IE5 does respond properly. fRom What I can see it
does not.


One more thing: I have been programming and working with computers for
over 20 years. I know the internals of systems, networks and file
systems. Please no lectures for newbies. What I am looking at this as
part of a criminal investigation. If there is anyone in the group with
such low level knowledge of these processes I would like to hear from him.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Web mail security

[Ghiora Drori]

Hi,
I heard a story about how a program called
encase by http://www.guidancesoftware.com/
was supposedly used to recover web mail (yahoo) from a disk of a person
after the person had deleted the cache etc.. I am talking about large
amounts of email perfectly being restored.

I find the idea that web mail is stored on the local disk over long
periods weird.
The web browsers does use a cache to speed up browsing but I assume that
things like web mail pages get overwritten pretty fast. If not it would
be possible to go into an Internet cafe or university and read all web
mail read there in the past from the disk. This would be a huge security
hole. Anyone got some solid information about what happens when you read
webmail?
My guess is that the above program was running and storing the webmail
when it was being read not month later.
Thanks Ghiora

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: wireless card 2200GB doesn't start.

[Ghiora Drori]

Hi,
I have what looks like the same problem on an IBM r50e portable 
computer. After I do modprobe two or three times manually the problem 
goes  away, so obviously the firmware is there.

Why it takes more then one attempt s what puzzels me?!!
Ghiora

Noam Meltzer wrote:

most likely you haven't installed the firmware for this card:
tey to emerge 'ipw2200-firmware' again

Noam

On 5/27/06, * David Harel* <[EMAIL PROTECTED] 
> wrote:


Hi all,


I did as in:


http://gentoo-wikicom/HARDWARE_Gentoo_on_Fujitsu-Siemens_S7020#Onboard_Wireless



and when I do:

modprobe ipw2200

I get the following message in dmesg:

ipw2200: ipw2200-bss.fw request_firmware failed: Reason -2
ipw2200: Unable to load firmware: -2
ipw2200: failed to register network device
ACPI: PCI interrupt for device :06:05.0 disabled
ipw2200: probe of :06:05.0 failed with error -5


Any idea?

--
Thanks.

David Harel,

==

Home office +972 77 4422234
Fax:+972 77 4422234
Cellular:   +972 54 4534502
Snail Mail: Amuka
D.N Merom Hagalil
13802
Israel
Email:   [EMAIL PROTECTED]





=
To unsubscribe, send mail to [EMAIL PROTECTED]
 with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]






=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: email web security

[Ghiora Drori]

Hi
Yahoo mail is not through SSL or am i wrong about this?
This of course means anyone can also listen online.
Thanks Ghiora

Amos Shapira wrote:

On 5/26/06, Omer Zak <[EMAIL PROTECTED]> wrote:


Your Web browser's cache?



If it's over SSL (as it is at least with Gmail) then it shouldn't be
cached, should it?



On Thu, 2006-05-25 at 17:11 +0300, Ghiora Drori wrote:
> Hi,
> I hope this is not to much of topic but does anyone know if web mail 
for

> example yahoo mail gets somehow stored on the local disk while reading
> or writing it (specifically if you did not save to the disk)?
> ( Please no specualtions about the swap I assume in the long run it get
> run over.)
> Thanks Ghiora
--
You haven't made an impact on the world before you caused a Debian
release to be named after Snufkin.
My own blog is at http://tddpirate.livejournal.com/

My opinions, as expressed in this E-mail message, are mine alone.
They do not represent the official policy of any organization with which
I may be affiliated in any way.
WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]








=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

email web security

[Ghiora Drori]

Hi,
I hope this is not to much of topic but does anyone know if web mail for 
example yahoo mail gets somehow stored on the local disk while reading 
or writing it (specifically if you did not save to the disk)?
( Please no specualtions about the swap I assume in the long run it get 
run over.)

Thanks Ghiora

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Red Hat Enterprise Linux - Licensing Clarification question

[Ghiora Drori]

Hi,
Anyone conidered this: http://www.whiteboxlinux.org/
Quote:
This product is derived from the Free/Open Source Software made 
available by Red Hat, Inc but IS NOT produced, maintained or supported 
by Red Hat. Specifically, this product is forked from the source code 
for Red Hat's _Red Hat Enterprise Linux 3_ product under the terms and 
conditions of it's EULA.


Seems ok from my experience.
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: printing in hebrew from KDE3 (konqueror/koffice) and mozilla

[Ghiora Drori]

Hi,
And neither does it print hebrew on my setup cups to a HP deksjet.
Considering that ABIWord does manage to print Hebrew through this setup 
there
is obviously something missing in my Hebrew setup for KDE ...
Any ideas welcome.
Ghiora

Ariel Biener wrote:

>On Thu, 11 Apr 2002, Ely Levy wrote:
>
>>Kde 3 suppose to have no problem printing hebrew
>>
>
>Nevertheless it doesn't print hebrew.
>
>--Ariel
>
>--
>Ariel Biener
>e-mail: [EMAIL PROTECTED]
>PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html
>
>
>=
>To unsubscribe, send mail to [EMAIL PROTECTED] with
>the word "unsubscribe" in the message body, e.g., run the command
>echo unsubscribe | mail [EMAIL PROTECTED]
>




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Also, Sendmail...

[Ghiora Drori]

Hi,
You obviously know everthing from your email regarding Visual Basic but...
Port 110 is popmail
and has nothing to do with Sendmail (unless something has changed in 
Sendmail in the last three years since I abandoned it and its 500 page 
configuration manual, I actaully spent a whole
Suckot vacation once reading the dammened thing) which is an SMTP client 
port 25.
You do not need to scan just telnet to the port
telnet machine_name 25

If it does not answer you have a problem.

Read the RFC  http://www.faqs.org/rfcs/rfc821.html  before doing this 
and then
you can talk with the smtp client manually.

On the other hand you should probably switch to qmail or the Standford 
program (who's name I forgot)
qmail which I run is much easier to setup and does not have a track 
record of being a big security hole..
Ghiora Drori

U. P. wrote:

>Sendmail also is having a few problems, it start usually anytime i start the
>computer, just lately it is not working in port 25 neither 110 i tried to scan
>with nmap my self, but the results was useless, i also _ran_ the :
>chkconfig --list sendmail
>and it was fine ! also:
>ps auxw| grep sendmail
>but it wrote that he "accepting connection" not: "accepting connection on port
>25" like he\she suppose to.
>
>=
>To unsubscribe, send mail to [EMAIL PROTECTED] with
>the word "unsubscribe" in the message body, e.g., run the command
>echo unsubscribe | mail [EMAIL PROTECTED]
>




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Languages in Linux [was Re: Basic Compiler]

[Ghiora Drori]

Hi,
You come of as very arrogant. When was the last time you looked at 
visual basic?
I have been doing Unix C/C++ for over 15 years but once in a while I 
take a look at
what other's are doing. VB is very powerfull and is used worlwide in MIS 
to accomplish
a lot of work in a short time. For many task VB is the best tool around. 
You would
not talk the same way about Tcl/TK which are used in simmilar way's and 
are relatively speaking primitive comapred to VB.
Take care Ghiora


Hetz Ben Hamo wrote:

>On Saturday 09 February 2002 21:34, Shlomi Fish wrote:
>
>>Hetz, I believe you were a bit rude in your post. OK: here is a small
>>coverage of the various languages used in Linux and their role.
>>
>
>Shlomi, I didn't mean to be rude - at all...
>
>It's just that I think that VIsual Basic is, although very easy language - 
>it's quite a shit quality - people don't really learn much from programming 
>with Visual Basic ...
>
>So I appologize if anyone has been insulted by this remark...
>
>As for MCSE - I stand on my opinion - nothing is worse then to see people 
>learn to MCSE (2000, XP) like they learn for Bagroot or Psichometri - just to 
>pass the tests, learning nothing about security and nothing about the 
>metals...
>
>Of course - I'm not saying all of them are like that - but most of them - 
>they are. 
>
>Hetz
>
>=
>To unsubscribe, send mail to [EMAIL PROTECTED] with
>the word "unsubscribe" in the message body, e.g., run the command
>echo unsubscribe | mail [EMAIL PROTECTED]
>




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

ADSL keep alive script or virus

[Ghiora Drori]

Hi,
I just got an email  from [EMAIL PROTECTED] with the
subject : ADSL keep alive script
and with a file that is not readable on Linux. However strings shows it is
a windows executable. (stuff like: "this program will not run on DOS ")
Anybody know if this is a virus ?
The sender is supposed to be "David Tabachniikov <[EMAIL PROTECTED]>"


It tries to save itself as: INBOX>9433
Of course on Linux it can't do much if it is a virus.
Ghiora


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: adsl keep alive script

[Ghiora Drori]

Hi,

1) Please do not CC me if you answer this I read the list; thanks.

2) What I wrote a few day's ago was that when I switched to ADSL,
   the Nezek salesman told me they could not give me a fixed ip for
   technical reasons ( It cannot be done on ADSL ).
   At that time I had a fixed ISDN IP number and was happily paying $10 a
   month to Nezeq for it. I have no problem paying for what I get,  It 
was the
   attempt to tell me that is was technically impossible that pissed me of.

3)Yesterday I looked at the prices for aquiring a blockof IP's I got the 
feeling
   that at $120 a year Nezeq was making off like a bandit.
   254*$120  =~EURO30480
   There is  a one time ~ Euro 2100  registration fee to become a small
   ripe "member".
   Take look at http://www.ripe.net/docs/billing.html
   I cannot locate the cost of each 256 block but I would be surprised 
if is was even
   close to EURO30,000 a year.

4) This is from MSNBC today regarding IPV6 and  cisco
  http://biz.yahoo.com/bw/011203/30059_1.html

   Cisco delivers second phase of IPv6 (lots of IPv6 to IPv4 functionality.)
   Actually I happen to know from a very good source that three years 
ago Cisco
   was very happy to deliver NAT and charge everybody for it and IPV6 
was not
   exactly a high priority. Looks like they now plan to make money on IPV6.
   The way the market works everyone else will follow.

5) Somebody implied here that there is no IPv6 for Windows XP,
Well Bill Gates would like to disagree:
   
 http://www.microsoft.com/windowsxp/pro/techinfo/administration/ipv6/default.asp

6)  Considering the above I think we can assume that IPV6 will become a 
significant
 player in the next three years. End of IP shortage problem. 
(Perhaps I am
 optimitic, you may send your flames to /dev/null)

7) To the person who wrote to me about using the F word; the Fword is also
used a lot by Americans (born in the USA and proud of it).
However as opposed to Israeli's they tend to do something about it. For
example when working at a company called Altos about 12 years ago the
local vendor raised the price of a can of Cola from 50cent to 60 cents.
A month later he lowered  it back people simply stopped buying.
In Israel on the other side the restaurant's in Park Rabin raised 
their prices
by 10 percent each year during Jan 2000 and Jan 2001.
The Israeli response is to keep them full. Last time I looked 
inflation here was
close to zero for these years. To bad I got used to American habbit of
not thinking its rain when someone is pissing on me.
   
Have nice day all you.
   





Nimrod Simba Carmi wrote:

>Hey everyone,
>
>NezeqInt gives static IPs over ISDN and ADSL.
>(I'm not their salesman or something, just FYI)
>
>On Monday 03 December 2001 12:56, Ariel Biener wrote:
>
>>On Fri, 30 Nov 2001, Ghiora Drori wrote:
>>
>>>You should use actcom they give you a fixed IP
>>>Actually there is no reason why all ISV's should not give you a fixed IP
>>>for ADSL
>>>
>>There is, and it pertains to the amount of address space an ISP needs to
>>reserve. If, say, NezeqInt has 10,000 adsl customers, it would need to
>>reserve 10,000 IPs (about 40 /24s). These need to be aquired (from RIPE
>>for example), and it costs !!!. Using healthy statistics, you can see that
>>maybe about 30% of those are connected all at once, so they would just
>>hold some 7000 of IPs for nothing. Thus, they can save money, and not
>>waste the fast depleting IPv4 address space.
>>
>>--Ariel
>>




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: adsl keep alive script

[Ghiora Drori]

You should use actcom they give you a fixed IP
Actually there is no reason why all ISV's should not give you a fixed IP 
for ADSL
Nezeq even tried to convince me this was impossible "with this technology"
to quote there salesman.  When I told him actcom is giving me a fix IP
he had to shut up. a few month later they called again to inform me they can
supply but I don't plan to switch. I also remeber another Israeli ISV 
telling me I will need a commercial agreement for $100 or more a month 
to get a fixed IP.
As usuall in this country if they can fuck you they do.
Ghiora



Nadav Har'El wrote:

>On Fri, Nov 30, 2001, Dani Arbel wrote about "Re: adsl keep alive script":
>
>>ppp , pptp (cleanly) and if you reconnect fast enough, your tcp connection
>>may live the disaster.
>>
>
>Yes, but only if your ISP gives you the same IP address again. From my
>experience (using Netvision), this usually doesn't happen...
>




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: ftp://iglu.actcom.co.il

[Ghiora Drori]

Hi,
Actually items 5.6 and 5.7 in what I sent you do not seem to be the correct
answer, my mistake.
However I do recall discussions about the subject in the netfilter group.
Ghiora

>
>




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: ftp://iglu.actcom.co.il

[Ghiora Drori]

Hi,
It looks like netfilter has it I do not know how good it is right now.
As of Nov 2001:
http://www.linuxdoc.org/HOWTO/Bandwidth-Limiting-HOWTO/index.html

Ghiora

See:


5.5. My outgoing mail server is eating up all my bandwidth.

You can limit your SMTP, Postfix, Sendmail, or whatever, in a way 
similar to the question above. Just change or add one rule:

RULE=,:25

Moreover, if you have an SMTP server, you can force your local LAN users 
to use it, even though they have set up their own SMTP servers to 
smtp.some.server! We'll do it in a transparent way we did before with Squid.


5.6. Can I limit my own FTP or WWW server in a manner similar it is
shown in the question above?

Generally you can, but usually these servers have got their own 
bandwidth limiting configurations, so you will probably want to look 
into their documentation




Ilya Konstantinov wrote:

>On Thu, 2001-11-29 at 16:08, Erez Doron wrote:
>
>>hi
>>
>>who is maintaining ftp://iglu.actcom.co.il ?
>>
>>it allows only 2 connectsions from the same IP.
>>the problem is that my company uses NAT, so all my company
>>is one ip and I can open only 2 connections to it from whole the
>>users in my company.
>>
>
>I see your problem. This change was implemented by me to make sure there
>are enough downloading slots for everyone. Previously, users with all
>kinds of "download accelerators" opened gazillions of FTP connections
>for a single file, draining out the 100 maximum connections allowed.
>
>Anyone has a better solution?
>
>
>
>
>=
>To unsubscribe, send mail to [EMAIL PROTECTED] with
>the word "unsubscribe" in the message body, e.g., run the command
>echo unsubscribe | mail [EMAIL PROTECTED]
>




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: adsl keep alive script

[Ghiora Drori]

Hi,
I probably could use SIGTERM but I like using an axe...

*As  the saying goes:

..* Lizzie Borden *took**an**Axe*,. She gave her mother forty *wacks*,. 
When
she saw what she had done,. She gave her father forty one!"

Ghiora


Tzafrir Cohen wrote:

>On Thu, 29 Nov 2001, Ghiora Drori wrote:
>
>>Hi,
>>Here is my script seems to work for month...
>>Change the YOUR_ISV to the name of your ISV'S DNS or mail server
>>and yourname@IYOUR_ISV to
>>
>>And Yes there is an "l" between the @ and YOUR_ISV when invoking pptp
>>
>>Also do not forget to make sure thecleaning person is not hooking up the
>>vacum instead of your moedm once in a while. :)
>>Ghiora
>>
>>
>>#***
>>#!/bin/bash
>>
>>while [ 1 ]
>>do
>>  # This returns 1 if not connected !!
>>  ping -c 3 YOURISV.co.il  >>/dev/null 2>&1
>>  if [ $? != 0 ]
>>  then
>>  date >>/tmp/dial_log 2>&1
>>  echo "Attempting to connect " >>/tmp/dial_log
>>  #eliminate the pptp process
>>  ELIM=`ps -eaf |grep pptp |grep -v grep |tail -n1 |awk '{ print
>>$2 }'`
>>  kill -9 $ELIM
>>  #lower and raise th0 to clear the connections to the modem
>>  /sbin/ifconfig eth0 down
>>  /sbin/ifconfig eth0 up
>>  #remove a bsocket left by pptp (a bug)
>>rm -f /var/run/pptp/10.0.0.138
>>
>
>Why did use "kill -9" in the first place if it leaves you so much
>cleaning-up?
>
>Why not simply "kill"?
>
>>  # run pptp
>>  /usr/sbin/pptp 10.0.0.138  user yourname@IYOURUSV remotename
>>"10.0.0.138 RELAY_PPP1"defaultroute netmask 255.0.0.0 mtu 1500 mru
>>1500 noauth >/dev/null 2>&1 &
>>  /etc/firewall
>>if [ -f /var/run/named.pid ]
>>  then
>>   ps -eaf |grep -v grep |grep `cat /var/run/named.pid`
>> >/dev/null 2>&1
>>   if [ $? != 0 ]
>>   then
>>  /usr/local/sbin/named  &
>>   fi
>>  else
>>  /usr/local/sbin/named  &
>>  fi
>>  else
>>  date >>/tmp/dial_log 2>&1
>>  echo "Connected " >>/tmp/dial_log
>>  fi
>>
>>  sleep 500  # Every 15 minutes we check we are connected
>>done
>>exit 0
>>
>>
>>#***
>>
>




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: adsl keep alive script

[Ghiora Drori]

Hi,
Here is my script seems to work for month...
Change the YOUR_ISV to the name of your ISV'S DNS or mail server
and yourname@IYOUR_ISV to

And Yes there is an "l" between the @ and YOUR_ISV when invoking pptp

Also do not forget to make sure the cleaning person is not hooking up the
vacum instead of your moedm once in a while. :)
Ghiora


#***
#!/bin/bash

while [ 1 ]
do
# This returns 1 if not connected !!
ping -c 3 YOURISV.co.il  >>/dev/null 2>&1
if [ $? != 0 ]
then
date >>/tmp/dial_log 2>&1   
echo "Attempting to connect " >>/tmp/dial_log
#eliminate the pptp process
ELIM=`ps -eaf |grep pptp |grep -v grep |tail -n1 |awk '{ print 
$2 }'`
kill -9 $ELIM
#lower and raise th0 to clear the connections to the modem
/sbin/ifconfig eth0 down
/sbin/ifconfig eth0 up
#remove a bsocket left by pptp (a bug)
rm -f /var/run/pptp/10.0.0.138
# run pptp
/usr/sbin/pptp 10.0.0.138  user yourname@IYOURUSV remotename 
"10.0.0.138 RELAY_PPP1"  defaultroute netmask 255.0.0.0 mtu 1500 mru 
1500 noauth >/dev/null 2>&1 &
/etc/firewall
if [ -f /var/run/named.pid ]
then
 ps -eaf |grep -v grep |grep `cat /var/run/named.pid` 
 >/dev/null 2>&1
 if [ $? != 0 ]
 then
/usr/local/sbin/named  &
 fi
else
/usr/local/sbin/named  &
fi
else
date >>/tmp/dial_log 2>&1
echo "Connected " >>/tmp/dial_log
fi
   
sleep 500  # Every 15 minutes we check we are connected
done
exit 0


#***





[EMAIL PROTECTED] wrote:

> Hello all,
>
>  
>
> I'm trying to write a script which will keep my adsl connection up all 
> the time.
>
>  
>
> I tried something like running :
>
> while 1
>
> rm -rf /var/run/pp*
>
>  pptp parameters nodetach &
>
> end
>
>  
>
> but from some reason, whenever i ran it, it worked for about 10 
> minutes, and after ten minutes, the pptp was detached and alot of pptp 
> process started ( even that the connection was still alive ).
>
>  
>
> I also wish to enter in the script, that if the modem fails, i could 
> telnet it a reboot it under the system menu ( something like telnet 
> with chat, maybe netcat).
>
>  
>
> Anyone wrote something like that?
>
>  
>
> Thanks,
>
> Ohad.
>
>  
>




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: kde 2.2.1 libs or hebrew bug

[Ghiora Drori]

Hi,
I do not know if this is the one you are refeering to:
After going to  After setting personal-settings->State and Language to Hebrew a
significant part of KDE stops working.
like running kcmshell keyboard crashes.
I traced this bug to this routine in: qt-2.3.1/src/tools/qrtlcodec.cpp

line 185:

static void reverse(QString &input, unsigned int a, unsigned int b)
{
// evil cast... I know...
QChar *chars = (QChar *)input.unicode();

QChar temp;
while (a < b) {
 temp = chars[a];
 chars[a] = chars[b];
 chars[b] = temp;

 a++; b--;
}
}



the b is being passed with -1 (a huge number since it is put into a uint)
I put a "fix" in line  210 from :

-
static void reverse(QString &str, unsigned int a, unsigned int b,
  QChar::Direction dir)
{
// first reverse
if(a != 0 || b != str.length()-1 || dir != QChar::DirL)
 reverse(str, a, b);

// now, go through it, to see if there is some substring
// we need to reverse again...
QChar::Direction opposite = (dir==QChar::DirL ? QChar::DirR : QChar::DirL);

  while(a <= b )
 {

---
To:
static void reverse(QString &str, unsigned int a, unsigned int b,
  QChar::Direction dir)
{
// first reverse
if(a != 0 || b != str.length()-1 || dir != QChar::DirL)
 reverse(str, a, b);

// now, go through it, to see if there is some substring
// we need to reverse again...
QChar::Direction opposite = (dir==QChar::DirL ? QChar::DirR : QChar::DirL);

if (b != 0)
  while(a <= b )
 {

-
Now this fix is Heuristic but it seems to work. I suppose somebody at Trolll
who maintains  the code  could do a better job.
In any case it is obvious that b should not be 0 at this point.
It now works for me.
You will have to compile and replace your  libqt.so.2.3.1 or I can give you a
copy.
Ghiora





Hetz Ben Hamo wrote:

> On Saturday 06 October 2001 19:13 pm, Diego G. Iastrubni wrote:
> > Is the hebrew bug solved in kde 2.2.1? I wanna d/l and install only the
> > libs. any one has an idea of this?
>
> Which hebrew bug are you refferring to? the one that if you mixed hebrew and
> english that it looks corrupt? then no, it's not fixed yet...
>
> >
> > anyone planning d/l the first "official" kde3 next week?
>
> KDE 3 next week is ALPHA (though as for alpha it's surprisingly works pretty
> well). It has been tagged today (kde-3-alpha1), and you can get the sources
> from ftp.kde.org or wait for next week for the official binaries (no Redhat
> RPMS - bero on vacation).
>
> >
> > - diego
>
> --
> Hetz Ben Hamo
> [EMAIL PROTECTED]
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

unsubscribe

[Ghiora Drori]

unsubscribe
_
Get your FREE download of MSN Explorer at http://explorer.msn.com


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Re: Problem connecting with ADSL

[Ghiora Drori]

Hi,
Thanks for your email. My ADSL on Linux is now working.

A few comments and answers:

1) I got it to work by recompiling pppd without the MSCHAP80 stuff.
   apprently compiling this in causes it use chap instead of pap.
   The -DUSE_CRYPT comes from the README.MSCHAP80 where they
   discuss Linux users in the pppd documentation.

  I think the faq should indicate that Actcom uses pap;
  a list of what each ISV uses might save people time.

2) I also tried using the pppd option require-pap but with the above
   MSCHAP80 compiled out it does not seem to matter.

3) I could not get nodefaultip to work but sine it works for me...

4) MTU and MRU have to be 1425 only for Orckit. I have an Alcatel
   and 1500 seems to work fine.

5) The idea of using two lines in the pap-secrets , I got it from
   some faq on the internet. Somebody out there said it worked for
   him. When you are "desperate" in the middle of the night
   anything goes.
   I have removed it since it does not seem to do anything.

6) There seems to be a socket /var/run/ppt/10.0.0.138 created
   by pptp. I found out that under certain conditions if I do not
   rm it I cannot restart pptp again.

7) Using username@IActcom ,
   Well you are correct about this one.
   However I think the Faq could use
   a little editing on line 191 it says:

   "@I" "10.0.0.138 RELAY_PPP1" ""

   But on line 200 it says:

pptp 10.0.0.138 debug user xxx@ISP remotename "10.0.0.138 RELAY_PPP1"

I experimented with different possibilites but without the chap
nothing works.

Also on line 132 in the (winodws stuff ) it says:

username is username@IActcom. 'username' is obviously your actcom user
I suppose line 200 should be fixed.

And last but not least thank you very much Guy for responding.
I was half way through reading the 50 pages of rfc1661 (ppp) when
your email saved me a lot of time.

Ghiora Drori

_
Get your FREE download of MSN Explorer at http://explorer.msn.com


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Problem connecting with ADSL

[Ghiora Drori]

Hi,
I am trying to get ADSL to work with my account an Actcom.
It works ok with win98...

With Linux however things are a bit hectic, It looks like
I do manage to dial in (with Linux) since I get back a response
with the correct IP in the /usr/adm/debug :

Apr  6 00:19:22 varda pppd[249]: sent [IPCP ConfReq id=0x1
 ]

Which is my designated Actcom IP; However once this is done
I get disconnected (immidiatly)  and the pppd process
exits.
Any Ideas what is wrong?
Thanks Ghiora Drori

Details:

I had isdn before which is now disabled and the card has been removed.
.
I am using kernel 2.4.1 with the ppp modules loaded and with devfs
but that does not seem to be a problem.

I compiled and installed the latest pppd as recommended by the:
HOWTO-ADSL-BEZEQ (using: make CHAPMS=1 USE_CRYPT=1 )

I compiled and installed the pptp-mulix.

This is my start up script:

/usr/sbin/pptp 10.0.0.138 debug  5 user edrori@actcom remotename
"10.0.0.138 RELAY_PPP1" defaultroute netmask 255.0.0.0 mtu 1500 mru
1500 noauth


Running it gives me this:
#./doit
(unknown)[243]: log[main:pptp.c:74]: trying to connect to '10.0.0.138'
(unknown)[245]: log[pptp_dispatch_ctrl_packet:pptp_ctrl.c:555]: Client 
connection established.
(unknown)[245]: log[callmgr_main:pptp_callmgr.c:189]: new call!
(unknown)[245]: log[pptp_dispatch_ctrl_packet:pptp_ctrl.c:661]: calling 
pptp_set_link()
(unknown)[245]: log[pptp_set_link:pptp_ctrl.c:477]: pptp_set_link() packet 
sending succesfull
(unknown)[245]: log[pptp_dispatch_ctrl_packet:pptp_ctrl.c:664]: Outgoing 
call established.
warn[decaps_gre:pptp_gre.c:240]: discarding out-of-order
bash-2.04#


In /usr/adm/debug:

Apr  6 00:19:16 varda pppd[249]: using channel 1
Apr  6 00:19:16 varda pppd[249]: sent [LCP ConfReq id=0x1  
  ]
Apr  6 00:19:19 varda pppd[249]: sent [LCP ConfReq id=0x1  
  ]
Apr  6 00:19:19 varda pppd[249]: rcvd [LCP ConfRej id=0x1  
 ]
Apr  6 00:19:19 varda pppd[249]: sent [LCP ConfReq id=0x2 ]
Apr  6 00:19:19 varda pppd[249]: rcvd [LCP ConfAck id=0x2 ]
Apr  6 00:19:22 varda pppd[249]: sent [LCP ConfReq id=0x2 ]
Apr  6 00:19:22 varda pppd[249]: rcvd [LCP ConfAck id=0x2 ]
Apr  6 00:19:22 varda pppd[249]: rcvd [LCP ConfReq id=0x84   ]
Apr  6 00:19:22 varda pppd[249]: sent [LCP ConfRej id=0x84 ]
Apr  6 00:19:22 varda pppd[249]: rcvd [LCP ConfReq id=0x85  ]
Apr  6 00:19:22 varda pppd[249]: sent [LCP ConfAck id=0x85  ]
Apr  6 00:19:22 varda pppd[249]: sent [LCP EchoReq id=0x0 magic=0xd03f0f36]
Apr  6 00:19:22 varda pppd[249]: sent [IPCP ConfReq id=0x1  ]
~~~
Apr  6 00:19:22 varda pppd[249]: sent [CCP ConfReq id=0x1  
 ]
Apr  6 00:19:22 varda pppd[249]: rcvd [LCP TermReq id=0x86]
Apr  6 00:19:22 varda pppd[249]: sent [LCP TermAck id=0x86]
Apr  6 00:19:22 varda pppd[249]: rcvd [LCP ConfReq id=0xf4   ]


In /usr/adm/messages:
Apr  6 00:19:16 varda (unknown)[245]: 
log[pptp_dispatch_ctrl_packet:pptp_ctrl.c:
661]: calling pptp_set_link()
Apr  6 00:19:16 varda (unknown)[245]: log[pptp_set_link:pptp_ctrl.c:477]: 
pptp_s
et_link() packet sending succesfull
Apr  6 00:19:16 varda (unknown)[245]: 
log[pptp_dispatch_ctrl_packet:pptp_ctrl.c:
664]: Outgoing call established.
Apr  6 00:19:16 varda pppd[249]: pppd 2.4.1 started by root, uid 0
Apr  6 00:19:16 varda pppd[249]: Using interface ppp0
Apr  6 00:19:16 varda pppd[249]: Connect: ppp0 <--> /dev/ttya0
Apr  6 00:19:22 varda kernel: PPP Deflate Compression module registered
Apr  6 00:19:22 varda pppd[249]: LCP terminated by peer
Apr  6 00:19:25 varda pppd[249]: Connection terminated.
Apr  6 00:19:27 varda pppd[249]: Exit.





My modem is an alcatel

This is my /etc/ppp/pap-secrets and /etc/ppp/chap-secrets:

(XX is not my real passwd obviously )
"edrori@IActcom" "10.0.0.138 RELAY_PPP1" "XX"
"10.0.0.138 RELAY_PPP1" "edrori@IActcom" "XX"

I have the following kernel modules:

/kernel/drivers/net/ppp_generic.o
/kernel/drivers/net/ppp_async.o
/kernel/drivers/net/ppp_synctty.o
/kernel/drivers/net/ppp_deflate.o

This is my lsmod :

bash-2.04# lsmod |grep ppp
ppp_generic12928   0  [bsd_comp]
slhc4580   0  [ppp_generic]

_
Get your FREE download of MSN Explorer at http://explorer.msn.com


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]