Re: [newbie] virus
On Friday 22 October 2004 07:39 pm, Tom & Karen Pino wrote: > A message which was sent to you by "Russ" <[EMAIL PROTECTED]> has been > identified by our virus filter as being contaminated with a virus. For your > protection, the original message has been placed into the greymail > quarantine area. To review the text only portion of the message, you may > log into your greymail area and click on the message(s) in red. > > I do not know that this has to do with Russell W. Behne, but I also get > things that claim to come from me inspite of increased security at rangeweb > and constant attention to security by my security guy (me) to virus and > spyware crap (have never had a virus). The subject line is "Re: Hello". > > I am surely not trying to cast any doubt on anyone here. I do think that > this my be something that would need the attention of everyone on the list. > This may be a breach of security at my ISP. I am not calling them this > weekend. Have been sorting cattle for shipment all day and ship tomorow > and Tuesday. Am not up to interigation. > > Decided I did need to send this to you good folks, though. > > By the way, got an e-mail from my son today from his Linux machine. He > will probably be inflicting himself on you directly. I he is happy with > his machine, mine will be heading that way very soon. Hi Tom. I wouldn't seriously worry about it - lots of these viruses nowdays are spoofing their from addresses anyway, and trying to track down the real culprit isn't always easy. The best thing to do is to keep YOUR machines updated (if you're on Windows, install adequate virus protection and don't intentionally open any attachment that comes through, even if it shows to be someone you trust), and if you're having doubts about the integrity of your own machine, then go the extra mile to make sure it's not. If you're wondering about someone elses PC, well, let them take care of that - it's their problem (someone will let them know about it sooner or later, and it'll no doubt be someone who has a little more time on their hands). Most of us on this list run strictly Linux, or at least a dual boot system where they hide out in Linux as often as they can, learning it as they go. I myself have been on nothing but Linux for the past 5 years or so (except for one of my systems at work which I'm required to run XP on, but hey, if it was easy then it wouldn't be work), and frankly, viruses don't even catch a second look from me. Give it some time - I'm sure you and your son will be the same way... -- Take care, Randall Hobbs Programmer - System Administrator - Chip Castle Dot Com, Inc. Web Hosting * Programming * Software http://www.chipcastle.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
[newbie] virus
To anyone this may concern, I received this notice from my ISP today. A message which was sent to you by "Russ" <[EMAIL PROTECTED]> has been identified by our virus filter as being contaminated with a virus. For your protection, the original message has been placed into the greymail quarantine area. To review the text only portion of the message, you may log into your greymail area and click on the message(s) in red. I do not know that this has to do with Russell W. Behne, but I also get things that claim to come from me inspite of increased security at rangeweb and constant attention to security by my security guy (me) to virus and spyware crap (have never had a virus). The subject line is "Re: Hello". I am surely not trying to cast any doubt on anyone here. I do think that this my be something that would need the attention of everyone on the list. This may be a breach of security at my ISP. I am not calling them this weekend. Have been sorting cattle for shipment all day and ship tomorow and Tuesday. Am not up to interigation. Decided I did need to send this to you good folks, though. By the way, got an e-mail from my son today from his Linux machine. He will probably be inflicting himself on you directly. I he is happy with his machine, mine will be heading that way very soon. Tom Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] How to find out package dependencies when using a windows machine to download?
On Friday 22 October 2004 04:07 pm, JoeHill wrote: > On Fri, 22 Oct 2004 10:07:06 -0700 > > Aron Smith disseminated the following: > > Try using urpmi as root and use your cds as sources > > Okay, seriously, if you don't start snipping your replies, I'm gonna come > down there and do something highly unpleasant, like...stay for a visit! Bring Beer and Moose I'll have the Barbecue going :-D Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
[newbie] Security maniac ?
I just followed Tom's advice and upgraded to the present cooker, including the (separate) install of the new kernel. Everything seem to work perfectly. So, now I supposedly run the upcoming 10.1 Official - right ? Just after that I received the usual alert from Mandrake about security updates. OK. But when comparing those update versions to my "cooker" versions, mine seems to be newer. Can anyone explain ? - Tom ? Kaj Haulrich. -- *sent from a 100% Microsoft-free workstation* * http://haulrich.net * *Running Linux (Mandrake 10.1) - kernel 2.6.8* Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] How to find out package dependencies when using a windows machine to download?
On Fri, 22 Oct 2004 10:07:06 -0700 Aron Smith disseminated the following: > Try using urpmi as root and use your cds as sources Okay, seriously, if you don't start snipping your replies, I'm gonna come down there and do something highly unpleasant, like...stay for a visit! -- JoeHill / RLU #282046 / www.freeyourmachine.org 19:05:26 up 79 days, 18:55, 8 users, load average: 0.25, 0.15, 0.08 +++ "...[the Iraq war] was not in conformity with the UN charter. From our point of view and from the charter point of view it was illegal." -- Kofi Annan, Sept 15th 2004 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] How to find out package dependencies when using a windows machine to download?
On Fri, 22 Oct 2004 17:46:24 +0200 Sandaruwan Wijenayake disseminated the following: > Just for an explanation... I come up with this problem when I needed to > install a package that I got as a source rpm. I tried to build it in my home > PC and find out that I need to install "rpm-build" package which is not > included in installation CDs. So today I downloaded it from my office > network. But now I'm not sure if I have all dependent packages needed to > install this new package. I need to do this in weekend and if there are > something missing, I may not be able to download till Monday since I do not > have internet access. I'm surprised that the rpm-build package is not on the CD's... :-\ Building a source RPM is going to require, most likely, a lot more than the rpm-build package. You are going to need the appropriate devel libs, which also may or may not be on the CD's. Check out the rpm/urpmi section on the Mandrake Twiki: http://mandrake.vmlinuz.ca/bin/view/Main/UsingUrpmi In this case, what you want to do is rpm -R , it will give you all the dependencies. 'man rpm' is your friend ;-) Just out of curiosity, what is the RPM you are trying to build? It's quite possible that it is available as a binary RPM, which would save you a lot of headaches, considering your situation. -- JoeHill / RLU #282046 / www.freeyourmachine.org 19:16:00 up 79 days, 19:05, 8 users, load average: 0.14, 0.05, 0.04 +++ "...[the Iraq war] was not in conformity with the UN charter. From our point of view and from the charter point of view it was illegal." -- Kofi Annan, Sept 15th 2004 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Uptime question
Actually, these boxes can't keep time to save their lives. I'm seeing errors in the logs about NTP being unable to update the clock, etc (I can dig them up if it would help). Everything I've been able to find so far points to a bug in the Kernel that still has not been fixed, but I can't imagine that ALL the Linux boxes out there are suffering from not being able to update their clocks...? On Fri, 22 Oct 2004 16:26:52 -0500, Mikkel L. Ellertson <[EMAIL PROTECTED]> wrote: > Russell W. Behne wrote: > > Today at 08:39, David Johnson wrote: > > > >>For my next question: I'm wondering how uptime keeps track of how > >>long the server has been running. The reason I ask is that I have a > >>couple of ML10 boxes running in a production environment on VMWare ESX > >>servers. These servers never REALLY know how long they have been up. > >>They always report times that are different from reality (usually > >>shorter than actual uptime) when I know that they have not rebooted (a > >>check of the logs will verify). > >>Certainly not a major problem, but I'm curious... > > > > > > As far as I know, /proc/uptime is the place where the uptime is kept. > > If you cat /proc/uptime repeatedly you can see that it's a running > > timer. The program /usr/bin/uptime just reads /proc/uptime, converting > > it to a human readable format. > > I have no idea why your ML10 boxes don't keep accurate uptimes. > > Maybe someone else can offer an idea. > > > Dumb question - is the time accurate on these boxes, or do they lose > time? It sounds like they might be missing a few timer interupts... > > Mikkel > -- > Do not meddle in the affairs of dragons, > for you are crunchy and taste good with ketchup. > > > > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com > Join the Club : http://www.mandrakeclub.com > > > > -- David Johnson http://www.edave.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] HTML Wysiwyg
Elliot Somers wrote: I have been googling for a good Wysiwyg for linux (MDK) that would allow for easy content update. I haven't found anything GPL that looks decent. The content is already written, just the prices, and various info needs updating from time to time and I don't know HTML. Frontpage once worked well, but I don't need anything really fancy. Just easy to use in the KDE GUI. I'd prefer GPL if possible. Thx Elliot Do a google search for a Linspire app called NVU. Failing that, have your tried Quanta and scream? All are GPL rgds Franki http://htmlfixit.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Linux Fact or Fiction
On Friday 22 October 2004 23:27, Ron Hunter-Duvar wrote: > Of course, you have to trust that the key hasn't been tampered with as > well. The really paranoid among us rely on key signatures exchanged by some > other channel, such as telephone, to verify a key before installing it. The really paranoid under us prefer source packages and skim through them before compiling and installing..binaries require trust! -- Good luck, HarM Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] HTML Wysiwyg
On Friday 22 October 2004 23:53, Elliot Somers wrote: > I have been googling for a good Wysiwyg for linux (MDK) that would allow > for easy content update. I haven't found anything GPL that looks decent. > The content is already written, just the prices, and various info needs > updating from time to time and I don't know HTML. Frontpage once worked > well, but I don't need anything really fancy. Just easy to use in the KDE > GUI. I'd prefer GPL if possible. > Thx > Elliot Well, what about mozilla-composer or: vnu which is derived from the same composer BTW?:) Even staroffice/openoffice don't do that bad a job but personally I prefer mozilla for trhe quickies...Easy and fast to understand. On a higher level; Quanta is very good IMHO but not wysiwyg like frontpage. -- Good luck, HarM Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Linux Fact or Fiction
On October 22, 2004 10:54, Mikkel L. Ellertson wrote: > cervixcouch wrote: > > So how exactly does one safeguard against a trojan when installing an > > RPM? > > Check the signiture of the RPM, to be sure it is realy from the source > you think it is. You can also look at the file list, and the scripts > that are run when installing, removing, ect. I use Midnight Commander > (mc) to look at what is in the RPM, and "rpm --checksig " to > verify the RPM. urpmi also checks the signiture, and asks you about > installing if it doesn't match. (Not sure what it does if they do not > match when running in the auto mode.) You do have to make sure your > keys are kept up to date. ... > Mikkel This is interesting, given the oft-repeated advice on this list to ignore the urpmi warnings about signatures not matching and install anyway! The signature check is there for a reason, to detect tampering (by someone other than the package distributer of course, since they can tamper with it and still sign it). The only way someone other that the distributor can tamper with a package without setting off the warning is by cracking the host and obtaining the private signing key. Of course, if you don't have the correct keys installed, you get this warning for everything. This is part of the safeguard - you first have to make an explicit decision to trust the key by installing it. But if you take the lazy way out and just hit "y" for every signature warning, you are leaving yourself open to tampering. If you are obtaining rpms from a site other than the standard ones (for which the keys are pre-installed), in addition to checking the reputation of the distributor, you should insist on a key from them for you to install, such as the one our friendly neighbourhood Charles Edwards provides. Also insist that all the packages be signed using that key. Of course, you have to trust that the key hasn't been tampered with as well. The really paranoid among us rely on key signatures exchanged by some other channel, such as telephone, to verify a key before installing it. It's kind of like Spy vs. Spy. -- Ron Hunter-Duvar ronhd at users dot sourceforge dot net Opinions expressed here are all mine. Rights to use these opinions are granted under the GNU GPL. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
[newbie] HTML Wysiwyg
I have been googling for a good Wysiwyg for linux (MDK) that would allow for easy content update. I haven't found anything GPL that looks decent. The content is already written, just the prices, and various info needs updating from time to time and I don't know HTML. Frontpage once worked well, but I don't need anything really fancy. Just easy to use in the KDE GUI. I'd prefer GPL if possible. Thx Elliot Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Uptime question
Russell W. Behne wrote: Today at 08:39, David Johnson wrote: For my next question: I'm wondering how uptime keeps track of how long the server has been running. The reason I ask is that I have a couple of ML10 boxes running in a production environment on VMWare ESX servers. These servers never REALLY know how long they have been up. They always report times that are different from reality (usually shorter than actual uptime) when I know that they have not rebooted (a check of the logs will verify). Certainly not a major problem, but I'm curious... As far as I know, /proc/uptime is the place where the uptime is kept. If you cat /proc/uptime repeatedly you can see that it's a running timer. The program /usr/bin/uptime just reads /proc/uptime, converting it to a human readable format. I have no idea why your ML10 boxes don't keep accurate uptimes. Maybe someone else can offer an idea. Dumb question - is the time accurate on these boxes, or do they lose time? It sounds like they might be missing a few timer interupts... Mikkel -- Do not meddle in the affairs of dragons, for you are crunchy and taste good with ketchup. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Uptime question
Today at 08:39, David Johnson wrote: > For my next question: I'm wondering how uptime keeps track of how > long the server has been running. The reason I ask is that I have a > couple of ML10 boxes running in a production environment on VMWare ESX > servers. These servers never REALLY know how long they have been up. > They always report times that are different from reality (usually > shorter than actual uptime) when I know that they have not rebooted (a > check of the logs will verify). > Certainly not a major problem, but I'm curious... As far as I know, /proc/uptime is the place where the uptime is kept. If you cat /proc/uptime repeatedly you can see that it's a running timer. The program /usr/bin/uptime just reads /proc/uptime, converting it to a human readable format. I have no idea why your ML10 boxes don't keep accurate uptimes. Maybe someone else can offer an idea. -- Mit freundlichen Grüßen, Russ. Visit my nursery: http://www.angelfire.com/linux/behnesnursery/ The Behne Family Genealogy Project: http://www.usgenealogy.net/members/rwbehne/ Should we continue to trust Bush as our leader? Read this, then you decide: http://www.capitolhillblue.com/artman/publish/article_4636.shtml --=[Russell's Quotes 1]=-- Man's tongue is soft, and bone doth lack; Yet a stroke therewith may break a man's back. =[Russell's Quotes 2]= ``I do not believe in the creed professed by the Jewish church, by the Roman church, by the Greek church, by the Turkish church, by the Protestant church, nor by any church that I know ofEach of those churches accuse the other of unbelief; and of my own part, I disbelieve them all.'' --Thomas Paine To Paine belongs the honor of naming our country the United States of America. He was the first to use the name in print, and it was his own creation. --- http://www.TruthAboutWar.org What is freedom, really? See this great flash presentation: http://www.isil.org/resources/introduction.swf --- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
[newbie] How to patch a kernel
Dear All Could someone here please give me some directions about how to patch a kernel? Thanks in advance, Paul Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] SOLVED: procmail stopped working
Today at 19:41, Derek Jennings wrote: > Your main.cf differs from mine in these respects > I have > mail_spool_directory=/var/spool/mail > mailbox_command=/usr/bin/procmail -Y -a $DOMAIN Ach, that's it! Ok. I put those two lines in my main.cf, and waited to see what would happen, and BINGO! It's working now. I have no idea how those lines disappeared from my main.cf, but I'm sure that groupwaree program had something to do with it. Thanks a heap, Derek!! That's just what I needed!!! :-)) -- Mit freundlichen Grüßen, Russ. Visit my nursery: http://www.angelfire.com/linux/behnesnursery/ The Behne Family Genealogy Project: http://www.usgenealogy.net/members/rwbehne/ Should we continue to trust Bush as our leader? Read this, then you decide: http://www.capitolhillblue.com/artman/publish/article_4636.shtml --=[Russell's Quotes 1]=-- Marry above thy match, and thou 'lt get a master. =[Russell's Quotes 2]= You may be too cunning for one, but not for all. --- http://www.TruthAboutWar.org What is freedom, really? See this great flash presentation: http://www.isil.org/resources/introduction.swf --- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] procmail stopped working
On Friday 22 October 2004 19:11, Russell W. Behne wrote: > Ok, sorry. I thought I had explained precisely what the problem is. Let > me try again this way: > 1. everything was working fine for the past 7 years. > 2. I installed the groupware program from the control panel using >`configure groupware' under `Server Wizards'. > 3. The entire mail system stopped working, (no mail arriving or >leaving.) > 4. I removed the packages installed by the `configure groupware'. > 5. I removed and re-installed postfix, then struggled to re-configure it >so that mail would again go out, then in. > 6. Now that mail is once again arriving it's all being dumped into my >inbox, meaning that it's apparently not being handed off to Procmail >by postfix. > > > and how you are currently configured. Look at your log files in > > /var/log/mail. > > > > What is is /etc/postfix/main.cf ? > Your main.cf differs from mine in these respects I have mail_spool_directory=/var/spool/mail mailbox_command=/usr/bin/procmail -Y -a $DOMAIN derek -- www.jennings.homelinux.net http://twiki.mdklinuxfaq.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] procmail stopped working
Today at 11:51, Derek Jennings wrote: > On Friday 22 October 2004 07:32, Russell W. Behne wrote: > > I had tried to install a groupware program that only succeeded in > > screwing up my mail system completely. I removed it, did an rpm -e > > postscript, then re-installed postscript and got it working again, but > > for some unknown reason I just can't get Procmail working again. Can > > someone pleaase help me with this? I'm lost! > If you want help you had better say precisely what is or is not happening, Ok, sorry. I thought I had explained precisely what the problem is. Let me try again this way: 1. everything was working fine for the past 7 years. 2. I installed the groupware program from the control panel using `configure groupware' under `Server Wizards'. 3. The entire mail system stopped working, (no mail arriving or leaving.) 4. I removed the packages installed by the `configure groupware'. 5. I removed and re-installed postfix, then struggled to re-configure it so that mail would again go out, then in. 6. Now that mail is once again arriving it's all being dumped into my inbox, meaning that it's apparently not being handed off to Procmail by postfix. > and how you are currently configured. Look at your log files in > /var/log/mail. > What is is /etc/postfix/main.cf ? # maps (change them to ldap) canonical_maps = hash:/etc/postfix/canonical local_recipient_maps = relocated_maps = hash:/etc/postfix/relocated transport_maps = hash:/etc/postfix/transport virtual_alias_maps = hash:/etc/postfix/virtual #alias_maps = hash:/etc/postfix/aliases #alias_database = hash:/etc/postfix/aliases # local delivery to cyrus (change it to local_transport) #mailbox_transport = cyrus:unix:extern/cyrus/lmtp recipient_delimiter = + # smtp server and access controls smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (Mandrake Linux) smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,check_relay_domains mydestination = $myhostname, localhost.$mydomain, behne.us mydomain = behne.us myhostname = behne.us mynetworks = 127.0.0.0/8, 67.21.58.0/24 relay_domains = masquerade_domains = $mydomain masquerade_exceptions = root # use tls and sasl auth by default smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = #smtpd_tls_cert_file = /etc/kolab/cert.pem #smtpd_tls_key_file = /etc/kolab/key.pem smtpd_use_tls = yes tls_random_source = dev:/dev/urandom # these are changed by postfix install script # readme_directory = /usr/share/doc/postfix-2.0.16.20031231/README_FILES sample_directory = /usr/share/doc/postfix-2.0.16.20031231/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop command_directory = /usr/sbin manpage_directory = /usr/share/man daemon_directory = /usr/lib/postfix newaliases_path = /usr/bin/newaliases.postfix mailq_path = /usr/bin/mailq.postfix queue_directory = /var/spool/postfix mail_owner = postfix # these are changed by postfix install script # > how about ~/.procmailrc ? That's way too big and private to publish. It hasn't changed from what I had built over the years, thus it isn't the problem. > What was the groupware app? Do this: start Mandrake's control center, click on `Server Wizards', then click on `Configure Groupware'. That is the app that messed everything up. > Does anything work? As I said, I struggled to get postfix sending & receiving mail again, but Procmail isn't working, that is, all mail is being dumped into the user's inbox. All 200+/- per day. For some reason it apparently isn't being passed from postfix to Procmail. I don't know why, or where to look, or what to look at. > How are you testing it? Nonsequitur. I have to know what I should try doing before I can test anything, and testing would simply consist of observing whether incoming list mail is properly sorted according to my .procmailrc recipes, or just dumped into the inbox as it now is. > Plenty of people are willing to help, but we are not psychic. Neither am I. That's why I said ``I'm lost'' and that I need help. -- Mit freundlichen Grüßen, Russ. Visit my nursery: http://www.angelfire.com/linux/behnesnursery/ The Behne Family Genealogy Project: http://www.usgenealogy.net/members/rwbehne/ Should we continue to trust Bush as our leader? Read this, then you decide: http://www.capitolhillblue.com/artman/publish/article_4636.shtml --=[Russell's Quotes 1]=-- The poor man must walk to get meat for his stomach, the rich man to get a stomach for his meat. =[Russell's Quotes 2]= The Way to see by Faith is to shut the Eye of Reason. --- http://www.TruthAboutWar.org What is freedom, really? See this great flash presentation: http://www.isil.org/reso
Re: [newbie] How to find out package dependencies when using a windows machine to download?
On Friday 22 October 2004 08:46 am, Sandaruwan Wijenayake wrote: > Hello, > > I'm not very experienced with Linux. Few weeks ago I downloaded Mandrake > 10.1 and installed as a dual booting on my windows PC. Problem is that I do > not have any internet access from home. Therefore I have to download any > additional packages that are not included in 3 installation CDs at my > working place. That machine do not have Linux installed. Could someone > please explain what is the easiest way to find out the package dependencies > and also how to know if those dependent packages already included in my > installation CDs (in that case I do not have to download them)? > > Just for an explanation... I come up with this problem when I needed to > install a package that I got as a source rpm. I tried to build it in my > home PC and find out that I need to install "rpm-build" package which is > not included in installation CDs. So today I downloaded it from my office > network. But now I'm not sure if I have all dependent packages needed to > install this new package. I need to do this in weekend and if there are > something missing, I may not be able to download till Monday since I do not > have internet access. Try using urpmi as root and use your cds as sources > > > > Best Regards, > > - Sandaruwan - Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Linux Fact or Fiction
cervixcouch wrote: So how exactly does one safeguard against a trojan when installing an RPM? Check the signiture of the RPM, to be sure it is realy from the source you think it is. You can also look at the file list, and the scripts that are run when installing, removing, ect. I use Midnight Commander (mc) to look at what is in the RPM, and "rpm --checksig " to verify the RPM. urpmi also checks the signiture, and asks you about installing if it doesn't match. (Not sure what it does if they do not match when running in the auto mode.) You do have to make sure your keys are kept up to date. If you are building from a source RPM, check the .spec file to see what scripts it runs, as well as checking the source. Build as a normal user, and not root. Most .spec files are written to allow this. (You do not have to build as root for the files in the RPM to be owned by root when installed.) Mikkel -- Do not meddle in the affairs of dragons, for you are crunchy and taste good with Ketchup! Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] ML and slow DSL
> > Are you by any chance using a Winmodem? And is that modem using the HSF or HCF > driver from www.linuxant.com (included in Mandrake Powerpack or from > MandrakeClub)? No. I use an external serial port modem. Michael Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Linux Fact or Fiction
On Friday 22 October 2004 12:56, Brandon Rife wrote: > John Wilson wrote: > >On October 21, 2004 04:11 pm, Elliot Somers wrote: > >>This is a pretty general question, I've heard it said by one party that > >>linux/unix is virus proof, other's say it's that virus authors go after > >> the big guys, so MS, wintel servers, etc. What I want to know is what's > >> true and what's not. Also I'm curious not only if it is, or not, but > >> why? If there's any references you all know of to point me in the right > >> direction I'd appreciate it. > >>Thanks, > >>Elliot > > > >Goodness, here we go again. > > > >To a degree it's true that virus writers go after the big guys. It's also > >true that virus/trojan/spyware writers go after the easiest system to use > > to propagate their nasties and that also happens to be Windows. > > > >One, in fact the only, reason the crackers charge after Windows is that > > from 95 to XP Pro most windows boxes run in administrator mode or with > > administration rights widely given. Even when they are not things like > > adding new software default to that. > > > >Toss in Microsoft's much vaunted ease of use mantra which has led to VBA, > >scripting languages that operate system wide, browsers and email clients > > that happily install just about anything so that you won't have to > > trouble yourself about it. Oh...and browsers and email clients that will > > follow HTML code anywhere no matter where it goes. > > > >What all this boils down to is that a cracker can devise a simple program > > that will install itself on your Windows box without your so much as even > > knowing about it. Nice, eh? > > > >And Windows users have shown themselves the most undiciplined of surfers, > > well perhaps that title goes to AOL users, who will go to a web site and > > download any old crap, usually spyware, so they can get the video feeds > > of porn, stock tickers, latest prices of medicines or whatever. > > > >As for wintel servers on the internet they are a definite minority when > >compared to Linux, one of the BSDs or UNIX. But they are as easily > > breakable as the desktop Windows on which they're based and for the same > > reasons. Only a near total moron would put anything on a windows server > > on the internet these days and for good reason. > > > >Admittedly this is much simplifed and much understated, beleive it or not. > >Try Bugtraq or CERT is you want to know more. You might also want to > > google virus writing to see how much there actually is out there. > > > >Now, Linux, in common with almost all POSIX compliant software also has an > >administrators account and you can, if you want to, set up as insecure a > >system as any old Windows box. Responsible Linux distributions will > > insist that you have at least one regular user as well as root and will > > boot you in as that. > > > >Now it's possible for a virus to be written for Linux and it's been done. > >But, unlike the Windows situation, there is absolutely nothing that can be > >done in user space that overlaps with or conflicts with the root/system > >space. In short, a virus cannot propagate itself. Oh, it can mess up the > >user's home in short order but not the machine itself. Spyware can find > > out everything it wants about you but nothing at all about the root or > > any other user on the box. > > > >Nasties do exist for Linux but they are much further and fewer between > > than the almost daily attacks on Windows. And they are, in general, far > > easier to defend against. > > > >Also, it often takes less than 24 hours for a package to be fixed after a > >vulnerability is found, often before it's exploited, and the fix sent out. > >Compare that to the rather cavalier attitude of Micosoft to such things. > > > >ttfn > > > >John > > > > > > > > Wow! what a reply! :) This is quite a good read http://www.theregister.co.uk/security/security_report_windows_vs_linux/ derek -- www.jennings.homelinux.net http://twiki.mdklinuxfaq.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] ML and slow DSL
On Friday 22 October 2004 17:14, mjt42 wrote: > > > Here is where it all gets strange. Everything is still fast when using > > > windoze. > > I use a dial-up connection. I experience the same slow performance with > Mandrake vs Windows. Downloads speeds with Windows ranges from 50 to 200% > faster vs Mandrake. > > Michael Are you by any chance using a Winmodem? And is that modem using the HSF or HCF driver from www.linuxant.com (included in Mandrake Powerpack or from MandrakeClub)? The linuxant driver is speed limited to 14.4 kbps until you pay a fee of $14.95 to linuxant to unlock it. It is actually cheaper to buy a real hardware exterial serial modem from ebay. A serial hardware modem needs no driver. derek -- www.jennings.homelinux.net http://twiki.mdklinuxfaq.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] ML and slow DSL
> > > > Here is where it all gets strange. Everything is still fast when using > > windoze. I use a dial-up connection. I experience the same slow performance with Mandrake vs Windows. Downloads speeds with Windows ranges from 50 to 200% faster vs Mandrake. Michael Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] ML and slow DSL
On Friday 22 October 2004 16:09, Marc wrote: > This may be on the boarder line of off topic. For about the last week about > half of the web sites that I go to work normally and the other half have > about a half minute delay before a page starts to load. The slow ones are > always slow and the fast ones are always fast. Up until a week ago > EVERYTHING was really fast. I am on a high speed DSL connection. > > Here is where it all gets strange. Everything is still fast when using > windoze. And strainger yet it is not just me the same thing is happening to > at least 10 other Mandrake users in my area. All of us are using ML 10.0, > ML 10.0.2 or ML 10.1 amd all of us still have normal fast service when > using windoze. I don't know if other linux distros are affected. > Is anyone else here having similar problems with Century Tel? > Anyone here have any idea what may be going on or the cause of this > problem? A few of us have contacted the local ISP, Century Tel and they > have no answers. > > Thanks in advance for any suggestions or solutions > > Marc Maybe your ISP is messing about with IPV6 Try disabling it. Put alias net-pf-10 off in your /etc/modprobe.conf file and reboot. derek -- www.jennings.homelinux.net http://twiki.mdklinuxfaq.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Stuck on a network problem
On Friday 22 October 2004 10:28 am, H.J.Bathoorn wrote: > Why not simply use ssh? > > It's very much more secure and allows you total remote control. > With X forwarding enabled (default in MDK) and a fast connection you can > run any app (including VNC-server) on a remote client whereas with a slow > connection the commandline is your friend. > I sometimes monitor and troubleshoot my home-server on a 56K gprs > connection and my treo (palm PDA combined with GSM phone) using ssh:) To add to that, if you start using SSH, you can set your PC aside and not even hook up a monitor, keyboard, or mouse (most motherboards have an entry in their BIOS to halt on all errors, halt on no errors, halt on keyboard,disk, etc. - you'll want to set it to halt on no errors, so that the machine will not halt the bootup process if it can't detect a keyboard, etc.). Once that's done, you can simply plug the box into the wall and plug in a network cable and let it rip... You can then just SSH into the box to make any kind of modifications you need (you can even run the remote desktop from that particular PC using XDMCP or NXServer)... On a decent network, you'll think you were sitting at the box you're working on, and meanwhile your server is just sitting off by itself running like a top. -- Take care, Randall Hobbs Programmer - System Administrator - Chip Castle Dot Com, Inc. Web Hosting * Programming * Software http://www.chipcastle.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
[newbie] How to find out package dependencies when using a windows machine to download?
Hello, I'm not very experienced with Linux. Few weeks ago I downloaded Mandrake 10.1 and installed as a dual booting on my windows PC. Problem is that I do not have any internet access from home. Therefore I have to download any additional packages that are not included in 3 installation CDs at my working place. That machine do not have Linux installed. Could someone please explain what is the easiest way to find out the package dependencies and also how to know if those dependent packages already included in my installation CDs (in that case I do not have to download them)? Just for an explanation... I come up with this problem when I needed to install a package that I got as a source rpm. I tried to build it in my home PC and find out that I need to install "rpm-build" package which is not included in installation CDs. So today I downloaded it from my office network. But now I'm not sure if I have all dependent packages needed to install this new package. I need to do this in weekend and if there are something missing, I may not be able to download till Monday since I do not have internet access. Best Regards, - Sandaruwan - Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] ML and slow DSL
No clue, but I am having the same problem. :( http://mandrakeusers.org/index.php?showtopic=19727 Drew On Fri, 22 Oct 2004 10:09:26 -0500, Marc <[EMAIL PROTECTED]> wrote: > This may be on the boarder line of off topic. For about the last week about > half of the web sites that I go to work normally and the other half have > about a half minute delay before a page starts to load. The slow ones are > always slow and the fast ones are always fast. Up until a week ago EVERYTHING > was really fast. I am on a high speed DSL connection. > > Here is where it all gets strange. Everything is still fast when using > windoze. And strainger yet it is not just me the same thing is happening to > at least 10 other Mandrake users in my area. All of us are using ML 10.0, ML > 10.0.2 or ML 10.1 amd all of us still have normal fast service when using > windoze. I don't know if other linux distros are affected. > Is anyone else here having similar problems with Century Tel? > Anyone here have any idea what may be going on or the cause of this problem? > A few of us have contacted the local ISP, Century Tel and they have no > answers. > > Thanks in advance for any suggestions or solutions > > Marc > > > > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com > Join the Club : http://www.mandrakeclub.com > > > > Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
[newbie] Uptime question
For my next question: I'm wondering how uptime keeps track of how long the server has been running. The reason I ask is that I have a couple of ML10 boxes running in a production environment on VMWare ESX servers. These servers never REALLY know how long they have been up. They always report times that are different from reality (usually shorter than actual uptime) when I know that they have not rebooted (a check of the logs will verify). Certainly not a major problem, but I'm curious... Thanks -- David Johnson http://www.edave.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Where have all the kernel source gone ?
On October 22, 2004 09:57 am, Tom Brinkman wrote:
>
> BUT, do it _now_! Cooker will unfreeze and begin 10.2
> development shortly. As to Dan's misgivings, using 2.6.8.1-12
> kernel and kernel-source from a cooker mirror will not pose a
> problem on a 10.1 system. This kernel has been in use for quite
> some time and is well tested.
Thanks Tom, its just the kernel and or source I need for now the rest I
can wait for. So I will just pull the kernel and source and then wait
for the 10.1 trees to settle in.
Regards,
Dan Gordon
--
Fri Oct 22 10:34:21 EDT 2004
10:34:21 up 1 day, 2:37, 3 users, load average: 0.22, 0.08, 0.02
panic("esp: what could it be... I wonder...");
2.2.16 /usr/src/linux/drivers/scsi/esp.c
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
Re: [newbie] Stuck on a network problem
On Friday 22 October 2004 16:38, Alan Dunford wrote: > Here I run a simple network with three machines - two running Mandrake > 10.0 and one running Windows. The second Linux machine operates as a > server on which I back up files from the other two. > > Currently the server has a monitor, keyboard and mouse but I would like > to run it as a straight forward ftp server with just a system unit. > Therefore I need to be able to switch it off remotely as the only way > until recently was to use its local controls. > > I have installed VNC on both the Linux machines which I can use to > switch off the server but have to set up VNC each time on the remote > machine as I lose the settings when that machine is shutdown. > > How can I set up VNC, and its password, so that it starts when the > server is booted and therefore allows me to remove monitor, keyboard > and mouse from that particular machine. > > Any help would be appreciated. > > Thanks. Why not simply use ssh? It's very much more secure and allows you total remote control. With X forwarding enabled (default in MDK) and a fast connection you can run any app (including VNC-server) on a remote client whereas with a slow connection the commandline is your friend. I sometimes monitor and troubleshoot my home-server on a 56K gprs connection and my treo (palm PDA combined with GSM phone) using ssh:) -- Good luck, HarM Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
[newbie] ML and slow DSL
This may be on the boarder line of off topic. For about the last week about half of the web sites that I go to work normally and the other half have about a half minute delay before a page starts to load. The slow ones are always slow and the fast ones are always fast. Up until a week ago EVERYTHING was really fast. I am on a high speed DSL connection. Here is where it all gets strange. Everything is still fast when using windoze. And strainger yet it is not just me the same thing is happening to at least 10 other Mandrake users in my area. All of us are using ML 10.0, ML 10.0.2 or ML 10.1 amd all of us still have normal fast service when using windoze. I don't know if other linux distros are affected. Is anyone else here having similar problems with Century Tel? Anyone here have any idea what may be going on or the cause of this problem? A few of us have contacted the local ISP, Century Tel and they have no answers. Thanks in advance for any suggestions or solutions Marc Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
RE: [newbie] Stuck on a network problem
[EMAIL PROTECTED] root]# rpm -q tightvnc-server tightvnc-server-1.2.9-4mdk Edit /etc/init.d/vncserver and make the top look like this: #!/bin/bash # # chkconfig: 2345 91 35 # description: Starts and stops vncserver. \ # used to provide remote X administration services. USER=root export USER then 'chkconfig --add vncserver' HTH, Bill > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Alan Dunford > Sent: Friday, October 22, 2004 10:38 AM > To: [EMAIL PROTECTED] > Subject: [newbie] Stuck on a network problem > > > > Here I run a simple network with three machines - two running Mandrake > 10.0 and one running Windows. The second Linux machine operates as a > server on which I back up files from the other two. > > Currently the server has a monitor, keyboard and mouse but I would like > to run it as a straight forward ftp server with just a system unit. > Therefore I need to be able to switch it off remotely as the only way > until recently was to use its local controls. > > I have installed VNC on both the Linux machines which I can use to > switch off the server but have to set up VNC each time on the remote > machine as I lose the settings when that machine is shutdown. > > How can I set up VNC, and its password, so that it starts when the > server is booted and therefore allows me to remove monitor, keyboard > and mouse from that particular machine. > > Any help would be appreciated. > > Thanks. > > > -- > > > Alan Dunford [EMAIL PROTECTED] > Mandrake Linux 10.0 Official > A 100% Microsoft-free computer > > > Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Linux Fact or Fiction
Anne Wilson wrote: On Friday 22 Oct 2004 14:42, cervixcouch wrote: So how exactly does one safeguard against a trojan when installing an RPM? You don't install rpms from sources that are not well-known to be reputable - Mandrake mirrors, Sourceforge sites, PLF mirrors are OK, and there are others. If you don't know the site, ask on the lists whether others can vouch for it. Pretty straightforward, really. After all, if someone was wanting to put a Trojan into an rpm they could just as easily add a signature, so knowing your sources is the best safeguard. Anne One more thing,NEVER install Microsoft RPM's ! Grin! -- Lanman Registered Linux User #190712 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
[newbie] Stuck on a network problem
Here I run a simple network with three machines - two running Mandrake 10.0 and one running Windows. The second Linux machine operates as a server on which I back up files from the other two. Currently the server has a monitor, keyboard and mouse but I would like to run it as a straight forward ftp server with just a system unit. Therefore I need to be able to switch it off remotely as the only way until recently was to use its local controls. I have installed VNC on both the Linux machines which I can use to switch off the server but have to set up VNC each time on the remote machine as I lose the settings when that machine is shutdown. How can I set up VNC, and its password, so that it starts when the server is booted and therefore allows me to remove monitor, keyboard and mouse from that particular machine. Any help would be appreciated. Thanks. > -- Alan Dunford [EMAIL PROTECTED] Mandrake Linux 10.0 Official A 100% Microsoft-free computer Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Linux Fact or Fiction
On Friday 22 Oct 2004 14:42, cervixcouch wrote: > > So how exactly does one safeguard against a trojan when installing an RPM? You don't install rpms from sources that are not well-known to be reputable - Mandrake mirrors, Sourceforge sites, PLF mirrors are OK, and there are others. If you don't know the site, ask on the lists whether others can vouch for it. Pretty straightforward, really. After all, if someone was wanting to put a Trojan into an rpm they could just as easily add a signature, so knowing your sources is the best safeguard. Anne -- Registered Linux User No.293302 Have you visited http://twiki.mdklinuxfaq.org yet? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Where have all the kernel source gone ?
On Thursday 21 October 2004 05:32 pm, Margot wrote: > Dan Gordon wrote: > > On October 21, 2004 05:19 pm, Anne Wilson wrote: > >>Yes, Dan. Go to easyurpmi.zarb.org and get some cooker > >> sources. There you will find 2.6.8.1-12mdk and its source > >> rpm. This will be in 10.1 Official, I believe. > >> > >>Anne > > > > Ahh ok I never thought to look on cooker, silly me ;-) > > But wont that put 10.1 into a cooked sorta state, I dont > > wana wreck things too quick. > > Thanks Anne > > > > Regards, > > Dan Gordon > > Dan & Anne, > > Up until yesterday, cooker was the correct place to find 10.1 > updates, but (as per Warly's message about 12 hours ago) the > 10.1 Community mirrors now carry the updates for 10.1 > Community. > > Don't use the cooker sources any more unless you want to end up > running cooker! You can still get away with updating 10.1 CE to Official using a cooker mirror. Probly for a few more days to a week. Yes, there's been a few updates past 10.1 OE on the mirrors (yesterday) but they were minor. IIRC, kdepim*, lm_sensors, and a few minor packages. Most likely updates that will be available for 10.1 OE anyhow. BUT, do it _now_! Cooker will unfreeze and begin 10.2 development shortly. As to Dan's misgivings, using 2.6.8.1-12 kernel and kernel-source from a cooker mirror will not pose a problem on a 10.1 system. This kernel has been in use for quite some time and is well tested. -- Tom Brinkman Corpus Christi, Texas Proud to be an American Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Linux Fact or Fiction
> On Friday 22 Oct 2004 05:31, Mikkel L. Ellertson wrote: >> John Wilson wrote: >> >> <- snip > >> >> >> John, >>I think you did a great job of summing it up. But one thing I have >> never seen talked about as a way to get a virus into a Linux system is >> to include it in an RPM. Lets face it, how many people actualy check >> the scripts that are run when an rpm is installed? Do you check that it >> is signed properly? (I know urpmi will check, but I also remember >> problem with package signitures talked about on the lists...) Remember, >> almost all RPMs are installed by root, so any scripts an RPM runs are >> also run by root. And all that is needed is to hack an update mirror >> site to infect a large number of machines... >> > Which is why you should be extremely careful about any software that does > not > come from known and trusted sources. Reputable sources do have checks > built > in to make sure they start with safe packages and their boxes are not > cracked. As always, the ultimate check is your own care and common sense. > > Anne So how exactly does one safeguard against a trojan when installing an RPM? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] RSS feeds reader
On Fri, 2004-10-22 at 07:33 -0400, Rick Kunath wrote: > BottomFeeder looked pretty rough for me here on Linux. > > Any advantage over RSSowl ( http://sourceforge.net/projects/rssowl/ ) ? > > I've been using RSSowl and find it works well. Sage an add-on for > Firefox, Mozilla, or Thunderbird also does the job. > > Rick Kunath It looked rough to me too. I tried to read the help and got into a catch22 situation: there was no help because it had no browser defined, which I couldn't define. Also tried forumzilla. I had problems creating folders which are needed to place the feeders. I also needed to change mozilla/chrome and mozilla/components permissions to install this plugin. I didn't try hard: after a couple of minutes of fight I uninstalled it. So I am still using liferea which is not a rose garden but get the job done. Adolfo Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Linux Fact or Fiction
John Wilson wrote: On October 21, 2004 04:11 pm, Elliot Somers wrote: This is a pretty general question, I've heard it said by one party that linux/unix is virus proof, other's say it's that virus authors go after the big guys, so MS, wintel servers, etc. What I want to know is what's true and what's not. Also I'm curious not only if it is, or not, but why? If there's any references you all know of to point me in the right direction I'd appreciate it. Thanks, Elliot Goodness, here we go again. To a degree it's true that virus writers go after the big guys. It's also true that virus/trojan/spyware writers go after the easiest system to use to propagate their nasties and that also happens to be Windows. One, in fact the only, reason the crackers charge after Windows is that from 95 to XP Pro most windows boxes run in administrator mode or with administration rights widely given. Even when they are not things like adding new software default to that. Toss in Microsoft's much vaunted ease of use mantra which has led to VBA, scripting languages that operate system wide, browsers and email clients that happily install just about anything so that you won't have to trouble yourself about it. Oh...and browsers and email clients that will follow HTML code anywhere no matter where it goes. What all this boils down to is that a cracker can devise a simple program that will install itself on your Windows box without your so much as even knowing about it. Nice, eh? And Windows users have shown themselves the most undiciplined of surfers, well perhaps that title goes to AOL users, who will go to a web site and download any old crap, usually spyware, so they can get the video feeds of porn, stock tickers, latest prices of medicines or whatever. As for wintel servers on the internet they are a definite minority when compared to Linux, one of the BSDs or UNIX. But they are as easily breakable as the desktop Windows on which they're based and for the same reasons. Only a near total moron would put anything on a windows server on the internet these days and for good reason. Admittedly this is much simplifed and much understated, beleive it or not. Try Bugtraq or CERT is you want to know more. You might also want to google virus writing to see how much there actually is out there. Now, Linux, in common with almost all POSIX compliant software also has an administrators account and you can, if you want to, set up as insecure a system as any old Windows box. Responsible Linux distributions will insist that you have at least one regular user as well as root and will boot you in as that. Now it's possible for a virus to be written for Linux and it's been done. But, unlike the Windows situation, there is absolutely nothing that can be done in user space that overlaps with or conflicts with the root/system space. In short, a virus cannot propagate itself. Oh, it can mess up the user's home in short order but not the machine itself. Spyware can find out everything it wants about you but nothing at all about the root or any other user on the box. Nasties do exist for Linux but they are much further and fewer between than the almost daily attacks on Windows. And they are, in general, far easier to defend against. Also, it often takes less than 24 hours for a package to be fixed after a vulnerability is found, often before it's exploited, and the fix sent out. Compare that to the rather cavalier attitude of Micosoft to such things. ttfn John Wow! what a reply! :) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] RSS feeds reader
Adolfo Bello wrote: BottomFeeder looked pretty rough for me here on Linux. Any advantage over RSSowl ( http://sourceforge.net/projects/rssowl/ ) ? I've been using RSSowl and find it works well. Sage an add-on for Firefox, Mozilla, or Thunderbird also does the job. Rick Kunath Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Linux Fact or Fiction
> > John, > >I think you did a great job of summing it up. But one thing I have > > never seen talked about as a way to get a virus into a Linux system is > > to include it in an RPM. Lets face it, how many people actualy check > > the scripts that are run when an rpm is installed? Do you check that it > > is signed properly? (I know urpmi will check, but I also remember > > problem with package signitures talked about on the lists...) Remember, > > almost all RPMs are installed by root, so any scripts an RPM runs are > > also run by root. And all that is needed is to hack an update mirror > > site to infect a large number of machines... > > > Which is why you should be extremely careful about any software that does not > come from known and trusted sources. Reputable sources do have checks built > in to make sure they start with safe packages and their boxes are not > cracked. As always, the ultimate check is your own care and common sense. > > Anne Which is the problem with most users on Microsoft. People either just install any program which offers itself to the user (what I just recently saw with one of our trainees in the office on her private laptop using XP) or they carefully select the programs. What I saw with MS is the threat that programs can easily execute itself over websites, an open port to many PCs and users which trust everyone and everything... "ohh... a program so my pc runs faster, ok I install). It is much more difficult under Linux to get a program installed, especially if the sysop limits the right to execute files to the admin. Basically a PC is only as safe as the user is careful and it doesn't matter if you run windows or linux. And under Linux I am sure that the more user friendly Linux gets, the more people are using it and the more people are not really careful about the programs they install we will see an increase of viruses and especially trojan horses under Linux as well. However, and I am not an it-guy just a "stupid" user of linux (just as joe average ms user), I am sure that the linux community will be able to defend the os from viruses and trojan horses very effectively as long as the community develops the software and not a monopolistic company like MS (which is in my opinion the reason why windows is so vulnerable since ms reacts to slowly to developments which threaten their os). Anyway, what I wrote above might not make sense but I am just an agronomists who got bored with windows and has not that insight into software etc ;) Alex Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] procmail stopped working
On Friday 22 October 2004 07:32, Russell W. Behne wrote: > I had tried to install a groupware program tthat only succeded in > screwing up my mail system completly. I removed it, did an rpm -e > postscript, then re-installed postscript and got it working again, but > for some unknown reason I just can't get procmail working again. Can > someone pleaase help me with this? I'm lost! If you want help you had better say precisely what is or is not happening, and how you are currently configured. Look at your log files in /var/log/mail What is is /etc/postfix/main.cf ? how about ~/.procmailrc ? What was the groupware app? Does anything work? How are you testing it? Plenty of people are willing to help, but we are not psychic. derek -- www.jennings.homelinux.net http://twiki.mdklinuxfaq.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Where have all the kernel source gone ?
Anne Wilson wrote: On Thursday 21 Oct 2004 23:32, Margot wrote: Dan Gordon wrote: On October 21, 2004 05:19 pm, Anne Wilson wrote: Yes, Dan. Go to easyurpmi.zarb.org and get some cooker sources. There you will find 2.6.8.1-12mdk and its source rpm. This will be in 10.1 Official, I believe. Anne Ahh ok I never thought to look on cooker, silly me ;-) But wont that put 10.1 into a cooked sorta state, I dont wana wreck things too quick. Thanks Anne Regards, Dan Gordon Dan & Anne, Up until yesterday, cooker was the correct place to find 10.1 updates, but (as per Warly's message about 12 hours ago) the 10.1 Community mirrors now carry the updates for 10.1 Community. Don't use the cooker sources any more unless you want to end up running cooker! It was recommended that I do use cooker, just at this moment. It is in a 'frozen' state, meaning that 10.1 Official is being prepared for roll-out. Once that roll-out happens, I agree that cooker should not be used again unless it is to deliberately use the unstable bleeding-edge. At that point, I presume, we should remove the cooker sources and apply the 10.1 Official sources. Anne Anne, I know Tom told you to use cooker sources, but that was because no updates were available on the Community mirrors. The updates *are* now available on the Community mirrors - safer to switch now, rather than forgetting to switch later and ending up inadvertently running cooker! -- Regards Margot *-*-*-* Sent using Mozilla on a 100% Microsoft-Free Computer Registered Linux User 307617 http://counter.li.org Mandrakelinux release 10.1 (Community) for i586 kernel 2.6.8.1-10mdk ~~~ Vanilla wafer. ~~~ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Linux Fact or Fiction
On Friday 22 Oct 2004 05:31, Mikkel L. Ellertson wrote: > John Wilson wrote: > > <- snip > > > > John, >I think you did a great job of summing it up. But one thing I have > never seen talked about as a way to get a virus into a Linux system is > to include it in an RPM. Lets face it, how many people actualy check > the scripts that are run when an rpm is installed? Do you check that it > is signed properly? (I know urpmi will check, but I also remember > problem with package signitures talked about on the lists...) Remember, > almost all RPMs are installed by root, so any scripts an RPM runs are > also run by root. And all that is needed is to hack an update mirror > site to infect a large number of machines... > Which is why you should be extremely careful about any software that does not come from known and trusted sources. Reputable sources do have checks built in to make sure they start with safe packages and their boxes are not cracked. As always, the ultimate check is your own care and common sense. Anne -- Registered Linux User No.293302 Have you visited http://twiki.mdklinuxfaq.org yet? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Where have all the kernel source gone ?
On Thursday 21 Oct 2004 23:32, Margot wrote: > Dan Gordon wrote: > > On October 21, 2004 05:19 pm, Anne Wilson wrote: > >>Yes, Dan. Go to easyurpmi.zarb.org and get some cooker sources. > >>There you will find 2.6.8.1-12mdk and its source rpm. This will be > >>in 10.1 Official, I believe. > >> > >>Anne > > > > Ahh ok I never thought to look on cooker, silly me ;-) > > But wont that put 10.1 into a cooked sorta state, I dont wana wreck > > things too quick. > > Thanks Anne > > > > Regards, > > Dan Gordon > > Dan & Anne, > > Up until yesterday, cooker was the correct place to find 10.1 > updates, but (as per Warly's message about 12 hours ago) the 10.1 > Community mirrors now carry the updates for 10.1 Community. > > Don't use the cooker sources any more unless you want to end up > running cooker! It was recommended that I do use cooker, just at this moment. It is in a 'frozen' state, meaning that 10.1 Official is being prepared for roll-out. Once that roll-out happens, I agree that cooker should not be used again unless it is to deliberately use the unstable bleeding-edge. At that point, I presume, we should remove the cooker sources and apply the 10.1 Official sources. Anne -- Registered Linux User No.293302 Have you visited http://twiki.mdklinuxfaq.org yet? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] eth0 won't initialize on startup
On Friday 22 Oct 2004 01:00, Carroll Grigsby wrote: > On Thursday 21 October 2004 12:42 pm, Anne Wilson wrote: > > On Thursday 21 Oct 2004 16:50, David Johnson wrote: > >>> snip > >>> > > > As for my replyto: address, what should it be set for? > > > > For mailing lists it should be set to blank. It is often a good idea to > > have a new 'account' or profile set up for the mailing lists if you like > > to keep the reply-to for others. It's usually not necessary, though. > > Hitting Reply in almost any mail client would direct the mail to you by > > default. > > > > Not all lists do it, but Mandrake lists set to reply to the list if you > > leave yours blank. If you don't the others on the list will not see > > replies, and it makes following threads and troubleshooting much harder. > > > > Anne > > Anne: > The difficulty is that David uses gmail and, from what I've read, gmail > _insists_ that its address and no other appear in the reply-to field. Any > attempts to change it are rejected. OK, that ain't cool on gmail's part, > but that is the way that it is. And then there are frequent episodes when > we go through the same drill whenever some non-gmail poster innocently (or > perhaps with good reason) uses a non-blank reply-to field. It all amounts > to a lot of bytes getting bashed, stored and archived. Hmm - I haven't hear of this before. It's definitely a problem. > Wouldn't it be in > everyone's best interest if sympa be taught to just add the list address to > whatever it finds in the reply-to field? I know of at least one other list > that does exactly that (name supplied on request). > The easiest solution, I'm sure, though we both know it won't happen. OTOH, most lists I read don't add the reply-to at all. The problem is that Mdk's adding it makes us sloppy. I forget to use the Reply-To-List when I use other lists. Maybe the whole thing needs a re-think. > And wouldn't it be nice if sympa could be taught to handle cross posting > properly so that we don't all get two copies of the same posting? > > -- cmg (who has no sympathy with sympa) But then, who does ;-) Anne -- Registered Linux User No.293302 Have you visited http://twiki.mdklinuxfaq.org yet? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
