[nycwireless] Welchia virus problems

2003-11-12 Thread John Klos
Hi,

I was wondering what other node owners are doing about the recent
onslaught of Windows viruses and worms. I've been seeing more and more
machines trying to open literally 10,000 connections on the Internet per
minute (and filling up the NAT state table), and it seems due to the
Welchia virus.

Between this and the viruses / worms which flood our email boxes with
"Current Network Security Update" emails, it seems we are suck constantly
administering to the lowest common denominator. I do not own any Microsoft
products, but I am constantly bombarded with Microsoft problems.

So what are other people doing to reduce this deluge of garbage? I did not
want to block outgoing access to port 25 from my free networks, but I was
forced to do so; I do not like limiting the kinds of traffic that people
can use from the free networks, but if I don't, then a few people with
viruses can clog the whole connection for everyone else.

What are other people doing?

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] Re: 2 Guys busted for WiFi Hacking into Lowes

2003-11-12 Thread John Klos
> jon baer wrote:
>  > http://www.freep.com/news/locoak/nhack11_2003.htm
>
> "They may have been engaged in the recent hacker craze known as
> "wardriving" -- cruising around with a specially equipped laptop and an
> antenna searching for unsecured wireless networks hooked to the Internet."
>
> Ouch...combining "wardriving" and "hacking" in the same
> sentance...that's rough. Big emphasis on the quotes, because those words
> are always out of context...

See? Even you are doing it. Hacking isn't bad, but the common (and
incorrect) connotation is that it is bad. I'm sure people who don't know
would think that, based on the sound of it, "wardriving" has to be
something bad.

Of course, expecting a journalist to qualify these words properly is like
expecting a politician to keep his / her word - it's nice when it happens,
but nobody has any realistic expectations that it will happen.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


Re: [nycwireless] trivial dns

2003-09-05 Thread John Klos
Hi,

> I'm interested in serving up the same sort of "splash-page" that you see
> when connecting to one of the various wireless nodes in Manhattan - you
> know, you'll try to connect to a particular web site, but will see a
> welcoming page announcing the node first?
>
> Anyone know how this is done? I've been experimenting with a trivial dns
> rig, but want to know if anyone knows how precisely this is done here in
> NYC.

There are a number of ways you can do this. If you tell the client to use
your own DNS server in DHCP, then you can just set up DNS to answer what
you like. But that is fine only if you don't care about whether the client
caches DNS.

A better way is allow DNS but to trap outgoing connections to port 80,
like this (in IPFilter):
rdr (internal interface) 0/0 port 80 -> (your IP) port 80

A simple shell script can change the rules as needed, depending on what
you want to do with the captive client.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


Re: [nycwireless] Re: NYCW newslog?

2003-08-24 Thread John Klos
 do
not blacklist based on the sending of viruses. Otherwise, in the hour or
so of viruses which did get out (about 2,000), we might have already been
blacklisted.

> > I should have worded
> > my first email more carefully - machines which are behind NAT and do their
> > own SMTP sending cannot necessarily continue after a transient failure,
> > where an SMTP relay can.
>
> Which is why I want to use my ISP's relay.  I just want the network
> to get out of my way.

My apologies on my other emails. Yes, I still maintain that the potential
harm outweighs the utility, but I'm willing to whitelist. Please email me
if you would like unfettered access to port 25 on the Internet, and if you
would like a Windows machine whitelisted, PLEASE just simply assure me
that you check it regularly for viruses / worms.

Thanks,
John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


Re: [nycwireless] Re: NYCW newslog?

2003-08-22 Thread John Klos
> > Nobody has ever convinced me of the legitimacy of the need to connect to
> > remote machines via port 25 when a local relay is available; catering to
> > the lowest common denominator simply means catering to SPAMMERs. There is
> > simply no other reason to allow people to run SMTP servers on transient
> > computers behind NAT.
>
> Most DHCP implementations don't allow automatic configuration of
> SMTP relay.

True.

> Some people have complicated SMTP setups (including authentication
> mechanisms, etc.), and can't (or don't know how to) easily change them
> to use some arbitrary other SMTP server.

That's a contradiction. Nobody participates in a complicated setup without
knowing the basics of how to set thing up on the client level. If the
complicated setup and the client are two different people, then it's their
responsibility to communicate.

Ie, either it is kept simple (fill in the smtp server in the little box),
or it is complicated, and there should be no reasonable expectation that
others should be concerned.

> Some people don't trust the local SMTP relay to not be in somebody's
> black hole list.

This is a reason to not use a free network, not a reason to allow outgoing
connections to port 25 elsewhere. If the free network's SMTP server is on
a blacklist, it's extremely likely that the IP(s) given to the free
network are also on that blacklist.

> Some people don't trust the local SMTP relay to bounce undeliverable
> emails back to their laptop before they leave the hotspot.

They would be bounced back to the sender's address. I should have worded
my first email more carefully - machines which are behind NAT and do their
own SMTP sending cannot necessarily continue after a transient failure,
where an SMTP relay can.

Now some people are going to say that they want to relay email on their
own SMTP server by connecting to its port 25, but the only legitimate way
to do that is via SMTP-after-POP or something similar. There's no excuse
for running an open relay, after all. But anyone who cares to set up
SMTP-after-POP can also set up SMTP AUTH or SMTP via submission.

Again, nothing here is compelling. You use ssh / telnet and a shell, or
webmail, or SMTP AUTH and friends, or the local SMTP relay. Imagine if no
ISP allowed anyone other than people with static IPs and real contact
information to make connections to machines elsewhere on the Internet -
we'd have a fraction of the SPAM, and of that SPAM, most of the servers
would end up in blacklists pretty quickly.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] Re: NYCW newslog?

2003-08-22 Thread John Klos
Hi,

> I don't think disabling port 25 is the way to solve this problem
> (more of a not on my network solution). Soap box time if ISPs ran AV
> software as part of all their plans, I don't think email viruses would be
> such a problem. I host a few domains on my Windows based mail server, and
> I've been catching about 200 a day, slowing the tide somewhat. Now if only
> more ISPs did this

AV software doesn't fix the problem - it only fixes the symptom. The
problem is that Microsoft has long ago determined that people sending you
email are more important, and therefore should be able to make more
decisions about what happens with that email, than you, the user.

That said, AV software basically "babies" insecure systems, and only works
so long as the virus database is maintained. Much more effective than
running AV software for Windows attachments is to simply not allow MS
specific attachments at all.

Regardless, I would still not want 60,000 emails a day to be sent from my
network that say:

Date: Fri, 22 Aug 2003 7:22:57 --0400
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: Your application

Please see the attached file for details.

but that don't have an attachment. It's still SPAM.


People should not be running any software which delivers email directly,
anyway; a machine behind NAT will likely have an improper HELO and will
not be reachable in response should there be a non-immediate failure.


> We've just opened up PORT25 on a number of the more popular nodes that
> Personal Telco has here in Portland.  People request it, and we want to
> provide them with as much benefit as possible.

Do you mean that you've opened outgoing connections to any host on the
Internet on port 25, or do you mean that you have set up an SMTP relay for
people?

Nobody has ever convinced me of the legitimacy of the need to connect to
remote machines via port 25 when a local relay is available; catering to
the lowest common denominator simply means catering to SPAMMERs. There is
simply no other reason to allow people to run SMTP servers on transient
computers behind NAT.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] NYCW newslog?

2003-08-21 Thread John Klos
Hi,

Has anyone thought about an NYCW newslog for up-to-the-minute information
about / affecting NYCW related networks? For instance, it'd probably be
good to let people know how the latest Microsoft worms / viruses are
affecting networks. I just disabled all outgoing connectionsto port 25
from Tompkins Square Park because of the latest silly email virus.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] Tompkins Square Park wireless

2003-08-17 Thread John Klos
Hello,

For some reason, I never saw the original email in the digest - so here it
is again.

I wanted to thank both Jonathan Hirschman and Terry Schmidt with regards
to the Tompkins Square Park free wireless network. After the lightning
strike, we were in need of a hub which has both 10-base-T and 10-base-2.
Jonathan Hirschman donated such a hub, and as of last Monday, the network
is up again. Terry has some suggestions for improving the setup, which we
hope to do soon.

Others have also emailed bme about 10-base-2 hubs, and I'd like to thank
everyone for their generous offers. Hopefully, we will not have to worry
about too many future lightning problems, but it's good to know that there
are so many helpful people on the nycwireless list.

Thanks to everyone,
John Klos
Sixgirls Computing Labs
-- 
After I asked him what he meant, he replied that freedom consisted of
the unimpeded right to get rich, to use his ability, no matter what the
cost to others, to win advancement.
-- Norman Thomas
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] Re: RFC: Authentication/identifying mechanism to protect hotspotowners

2003-08-17 Thread John Klos
m illegal acts when one considers how easy it is
to get free, untraceable, practically anonymous email accounts. Anyone who
intends to do illegal things is going to obtain "junk" email accounts.

> First question: Is this technically feasible?  That is, is there a way to
> allow only incoming mail (to reduce the possibilities of spammers taking
> advantage of mail ports before the authentication is complete), even for
> those folks who used Web-based mail like Yahoo or Hotmail?  What about
> non-POP mail like AOL?  I realize that a partially-usable system will be
> worse than no system at all, so I'd like to figure out if the technical
> barriers can be surmounted.

Partial access of the Internet for email checking is not possible without
big assumptions, but time limited access certainly is possible and not
difficult.

There are other issues; someone who wishes to do illegal things may take
the time to spoof MAC addresses, meaning she / he might use the timed
access over and over, or may just use the MAC addresses of already
authenticated users once they leave. A TCP/IP stack fingerprinting scheme
would need to be included in any hypothetical design, too.

> Beyond that, what do you as users and perhaps operators of hotspots
> think of this proposal?  Does it cause more problems than it potentially
> solves?

If you're interested in studying the problems and seeking solutions, it's
not infeasible, but it is, perhaps, more work than you may have originally
though.

I am writing a solution for a not-yet-public wireless access spot which
will have users come in and sign up with staff. We still have to consider
MAC spoofing and TCP/IP fingerprinting, but there's no email problem,
obviously. Also, they can decide to ask for whatever ID they choose,
making the disposable email account issue moot.

The biggest problem is helping not necessarily computer literate staff and
users to find their MAC addresses. While we can have the server catch new
MAC addresses and display them, it doesn't help if more than one
unregistered MAC address is visible at a time.

> I look forward to your comments. Thanks. {Jonathan}

If you're interested in continuing a dialogue about this, feel free to
email me off list. Also, anyone else reading this who is interested in
helping with TCP/IP fingerprinting work should also contact me.

Good luck!

Thanks,
John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] Re: Wifi-Hog - Info / Talk

2003-08-16 Thread John Klos
Hello,

> Yes, the reaction that this may be a bad thing and that it can be used
> as a bad thing to try to kill our network is a valid one, and one that
> needs expressing. But, where do we go from here? It was only a matter of
> time before someone came up with the technology to do this. If it wasn't
> Jonah, then it would be someone else, who would probably not be as
> thoughful to create it as art, announce it to us, and make it available
> for all to study and learn from.

I think a lot of people wish to maintain an oversimplified mindset that
allows them to believe that if we (people in general) avoid or are
mandated to avoid research into "bad" things (very subjective), they will
not happen / will go away. Anyone involved in security knows that this
path leads to nothing but problems - the only people who will have tools
to do bad would be the people who ignore any such mandate. The people most
likely to use the tools would have the tools and a much better
understanding of an exploit than anyone else.

This shortsightedness, to make an example, is also applied to such issues
as nanotechnology and what's called grey goo - imagine nanotech that just
eats everything it can find to make more nanotech that eats everything to
make more - then imagine it in the hands of terrorists. Now imagine if
research on nanotech was outlawed, so nobody would have better goo to eat
the bad goo. (Funny - the DMCA would make reverse engineering such goo
illegal until it is used against people, but that's another issue
altogether.) You can see where this goes.

Here we are offered a tool which allows us to study a problem with
wireless. Let's stop discussing why some people think it's bad, and start
studying the implications and workarounds. Also be thankful that this tool
is available to you. Imagine if some company made it a product - then the
DMCA would protect it, and any attempt to study and design a way to affect
its function could be illegal.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] Tompkins Square Park problem

2003-08-14 Thread John Klos
Hello,

This week, when we had those nice lightning and rain storms, lightning
apparently knocked out BOTH hubs which connected alt.coffee and Accidental
CDs. They are connected with a 10-base-2 coaxial cable, so the hubs are
needed to connect the 10-base-2 with more common 10-base-T hardware.

Since hubs with 10-base-2 are hard to find, I figured I'd ask here to see
if anyone has an old spare hub or two. If not, we may be waiting until
some time next week for a hub from eBay to get here.

Any help or suggestions are welcome!

Thanks,
John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] Re: One Slow User In The Hot Spot Can Degrade Wi-Fi

2003-08-03 Thread John Klos
> They cited an example where several users, who are enjoying a fast
> 11Mbps connection because they're close to the hot spot, see their
> performance dramatically drop when a single user -- perhaps because he
> is further from the access point -- connects at a sluggish 1Mbps. In
> that case, the French experts said, all are punished for the sins of the
> one: those users once connected at 11Mbps will see their speeds dragged
> down to 1Mbps.

I'm sure we're all aware that this happens, yes? When setting up Tompkins
Square Park, I purposely set the AP to 2 Mbps for the longer range. Most
Internet connections aren't fast enough to fill 2 Mbps even with all of
the wireless overhead.

However, there is a simple fix: set up two access points. Have one default
to 1 or 2 Mbps, and have another in the same place at a different channel
with a different name (perhaps fast.nycwireless.net) which is configured
to not accept connections below, say, 6 Mbps.

I suppose it'll be nice if we have places which actually could use this.
But, just for reference, does anyone know whether their AP can be
configured to not negotiate to certain speeds? I know that NetBSD running
in access point mode can be set up to certain speeds only, but what about
appliance APs?

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] Re: Install on laptop from hda TO hda?

2003-07-30 Thread John Klos
Hi,

> I have an old laptop (Toshiba 205CDS with 16M RAM and 800M HD) that I thought I'd
> try to use as a wifi AP with a wifi pcmcia card

> Is what I'm trying to do realistic?  I was also looking at wisp-dist of the LEAF
> project but I like the idea of using a debian based system because of apt-get and I
> don't think that distro is too specialized to CF installs.

You could just use a snapshot of NetBSD-current, which supports using
wireless cards in AP mode. All you need to do is dd or rawwrite two floppy
images onto two floppies and have some sort of Internet connection
(wireless or ethernet will do).

ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6.1/i386/installation/floppy/bootlap1.fs
ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6.1/i386/installation/floppy/bootlap2.fs

Boot off the floppies, partition your hard drive (I recommend custom
partition, 32 megs of swap, the rest for /), select one of your network
interfaces (ethernet or wireless, I'd guess), and the only thing you need
to do differently is when you're asked where to get the installation sets,
select FTP but change the server to:

releng.netbsd.org

and change the directory to:

/pub/NetBSD-daily/current/20030727/i386/binary/sets

You can also tell the installer to not install the X sets, which you won't
need.

Then you will have a NetBSD-current system, and can use a simple NAT
how-to to get going. 800 megs means you'll have room to install and run
lots of other stuff like Apache if you like

Feel free to email me off-list if you have any questions.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] file sharing

2003-07-13 Thread John Klos
Hi,

> I'm trying to file share between two Windows 98 machines, but none of my
> machines seem to be able to see each other.
>
> set up is like this:
> cable modem -> router -> access point ->win98 laptop
>   ->Dlink dwl-900AP->hub->win98
> ->red hat 8
>
> I do a ping -b from the linux box and only get a reply from the router.
> Why can't I see the other computers?

I hate to sound cynical, but getting Windows computers to see each other
on a physical ethernet segment is difficult enough.

Before worrying about file sharing, which is always a pain in the ass on
Windows, try to get TCP/IP working first. If you're using DHCP, are the
Windows computers getting IPs? If so, or if they are static IPs, can you
ping the IPs directly from the router or from the Linux machine? Can the
Windows computers ping the router?

Due to the shortage of IPv4 space, broadcast IPs are being used more and
more as regular addresses, so it's generally not a good idea to make a
diagnosis based on whether or not they work.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] Re: nycwireless Digest, Vol 1, Issue 735

2003-03-11 Thread John Klos
Hi,

Sorry if this might have already been posted, but I get this in digest:

http://my.aol.com/news/news_story.psp?type=3&cat=0541&id=03031100094938107

Wireless in McDonalds - with the purchase of a combo meal!

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


[nycwireless] Re: Comparisons of wireless hardware?

2003-03-11 Thread John Klos
Hello,

> More specifically, I am running NetBSD on a handheld, which only supports a
> handful (excuse pun ;-) of wireless NIC cards. I am looking for a wireless
> card that has excellent range but low power enough so it doesn't eat my
> batteries for breakfast ;-)

Using a wireless card with a handheld is guaranteed to eat batteries, but
you might have luck picking a low power one.

> Here's the PCMCIA network hardware supported by NetBSD:
> (This list is at http://www.netbsd.org/Hardware/pcmcia.html)

Note that the list is updated much less often than the source tree, and
doesn't clearly say whether other cards work with any specific driver. You
might have luck asking on tech-net and/or current-users NetBSD mailing
lists.

John Klos
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/


Re: [nycwireless] Re: Handling the March Against War

2003-02-13 Thread John Klos
Hi,

> I guess the Palestinians oppress the Jews by sticking houses in the way of
> their bulldozers?

This wasn't exactly appropriate. It was intended to point out how silly
the other comment was, but it seems now to be more of a jab. Sorry!

The rest of the letter stands, though.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/



[nycwireless] Re: Handling the March Against War

2003-02-13 Thread John Klos
Ruben,

> The jews there have a lot at stake in this stuff...
> this war against iraq might finally mean freeing the jews from Arab
> oppression .

Although I, of course, am all for free speech, the NYCWireless list is
hardly an appropriate place for voicing your opinions regarding war,
especially when they are offensive and inflammatory. I know better than to
take your comments seriously, but others might be offended.

I guess the Palestinians oppress the Jews by sticking houses in the way of
their bulldozers?

> Will there be Uplinks from the Israeli capital, Jerusalem, and Chevron?

I could be wrong, but I don't think NYCWireless has free access points in
Jerusalem or Chevron. Anyone?

The point of the discussions on this list about the anti-war protests is
making use of free wireless to help expand the exposure of all reporting
entities to make small media just as accessible as larger media. That's
part of the power of the Internet.

I'll be hosting some of the video and media files from this weekend's
events, but it's not because I agree completely with the protesters'
beliefs; it's because I feel strongly about the idea that everyone should
be heard.

Let's stick to the topic; I've seen other nice mailing lists devolve
into useless prattle because of "political" discussions. nyc-geeks is a
perfect example.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/



[nycwireless] Mesh wireless

2003-01-23 Thread John Klos
An article about mesh networks:

http://www.theregister.co.uk/content/59/28972.html
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/



[nycwireless] Re: Getting old G3 Powerbook wireless with Orinoco Gold card (AlTucker)

2002-12-31 Thread John Klos
Hi,

> We've inserted an Orinoco Gold card and installed the software from
> the Orinoco website. The control panel says it's connected to the
> Airport base station and getting a decent signal. But it won't grab
> any IP. For comparison, a Titanium Powerbook with an Apple Airport
> card works fine off of the same Airport. PC laptops with Orinoco
> cards have in the past worked fine of off this same base station too.

Did you install version 7.x, not 6.x?

The only issue I've ever had with my Bronze card since I installed version
7.2 is that I need to reset TCP/IP sometimes if I turn on the card AFTER
some program has tried to get a DHCP lease. To do this, change the TCP/IP
"Connect via" to something else, close and save, then switch it back to
Orinoco, close and save. Try that.

John Klos
Sixgirls Computing Labs
--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/



[nycwireless] Re: can I use dynamic dns through some's node?

2002-10-27 Thread John Klos
Hello,

> In the meantime I figured that with dynamic DNS the transfer is just
> too complicated. I have Jaguar on my computer, I guess I can simply use
> file sharing. I know that I have to switch on Windows file sharing, let
> the other one know my IP number but what happens after that???

I seriously doubt that there are any open access points where the DHCP
server gives out real, public IPv4 addresses. Therefore, any connections
from the Internet would not get to your machine.

You can, however, log into a remote machine. If the person who has the
remote machine sets up a username and password for you, and you know her /
his IP address, you can use OS X to connect to her / his machine (assuming
that she / he isn't behind IP NAT).

Be sure that if she /he turns on Windows file sharing, that it is turned
off immediately after you are finished, as it is horribly insecure.

John Klos
Sixgirls Computing Labs

--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/



[nycwireless] maps.nycwireless.net

2002-08-21 Thread John Klos

Hi,

> Does anybody know what's wrong with maps.nycwireless.net ? I've done
> some warwalking, and would like to confirm my results.

It seems that there is either something wrong with the server or with the
code. Since every email I have sent to the personaltelco people offering
help has gone unanswered, it's time to do something different.

Bon Sy offered to help set up a new maps server. The biggest complaint was
that he is running Oracle, which is expensive, so that everyone would be
dependent on him and his server for maps. Replcating Oracle would cost too
much money to be worthwhile for organisations which are all about free
stuff.

I understand this argument, but there is another option. Sixgirls
Computing Labs will be hosting a commercial Oracle license as well as an
instance of an educational Oracle license, so anything that Bon creates
can be replicated elsewhere for redundancy. So even if Bon retired this
fall and his Oracle server goes away, we still have hosting that isn't
going anywhere.

Also, I'd like to test the argument about replication. Since personaltelco
can't get their server to handle the traffic / load, I'd like to ask for a
copy of the code and a copy of the database. Since it's all for the
community, and the ability to replicate is important, let's replcate!
Redundancy is good, and if we figure out ways to improve the code, it'll
help them, too.

If you're involved with poersonaltelco and the maps server, please contact
me in private so we can arrange to get the files onto Sixgirls servers.

John Klos
Sixgirls Computing Labs

--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/



[nycwireless] nycwireless map server and mailing list issues

2002-08-02 Thread John Klos

Hi,

> I want to be counted among those AGAINST attachments to postings.
>
> EMail is designed as a universal medium for plain text, and attachments
> reduce the universality, consume bandwidth needlessly and raise blood
> pressure.

Thank you. Speaking of raising blood pressure, after complaining to
someone who was posting attachments I realised that it'd be far better to
simply FIX the mailing list. Who manages the list? It's time for the
configuration to be fixed for attachments and html email.

If spack.org does not provide the ability to do what we want it to, I
offer to run the mailing lists on Sixgirls servers.



> Hey is the http://maps.nycwireless.net down?

When maps.nycwireless.net was having many problems with mod_perl, I
offered the help of some of my users who are very familiar with the inner
workings of mod_perl. I never received any sort of response: not a "no,
thank you", not a "we have it under control"...

We have several big, fat servers and a cluster of geeks who would go at
such a problem like a pack of crazed, rabid weasles. Our servers don't
crash, ever; when certain daemons have problems, we work until things are
set up correctly and we understand everything, not just until things work
again. We'd love the opportunity to run maps and fix it.

Is anyone out there working on maps right now?

> Sorry for posting in rich text there. I've fixed the problem :)

Thanks!

John Klos
Sixgirls Computing Labs

--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/



[nycwireless] Re: nycwireless digest, Vol 1 #506 - 2 msgs

2002-08-01 Thread John Klos

Hi,

> and for the unaware - this list ALLOWS attachments... take a chill pill...

The issue is that attachments should NOT be allowed. People like you think
that because the list doesn't reject the attachment, that attachments are
OK. So we need to disable attachments so people like you don't get the
wrong idea.

> --=_65612666==_
> Content-Type: image/gif; name="columbia u 080102.GIF";
>  x-mac-type="47494666"; x-mac-creator="4A565752"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment; filename="columbia u 080102.GIF"
>
> R0lGODlh9AIWAvf/AP///wgICBAQEBgYGCEhISkpKTExMTk5OUJCQkpKSlJSUlpaWmNjY2tra3Nz
> c3t7e4SEhIyMjJSUlJycnKWlpa2trbW1tb29vcbGxs7OztbW1t7e3ufn5+/v7/f39/fv787GxtbO
> zq2lpca9vZSMjJyUlHtzc3Nra2tjY2NaWkpCQjkxMf/W1v/GxiEYGP+1tf+trf+lpf+EhBAICP97
> e/9zc/9jY/9SUv9CQv85Of8xMf8hIf8YGP8QEP8ICAgAAP8AAP9COf+UjP+Ee/9za/9jWv9zY//G

This, plus, oh, I don't know, 1000 to 1500 more lines just like it came as
your attachment. I do not think that I should need to scroll through 1000
to 1500 lines of an encoded attachment so I can see any email that might
be after it.

After all, some of us do get this list in digest form.

John Klos
Sixgirls Computing Labs

--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/



[nycwireless] http://www.nycwireless.net/ down?

2002-06-01 Thread John Klos

Hmmm... What's up with the web server?

reva: {4} traceroute www.nycwireless.net
traceroute to maus.spack.org (204.245.198.90), 30 hops max, 38 byte
packets
 1  router.techinthehood.com (216.27.131.33)  1.374 ms  1.398 ms  1.380 ms
...
19  fa-0-0-0.a02.ptldor01.us.ra.verio.net (129.250.31.194)  99.335 ms
97.048 m  97.895 ms
20  d1-3-1-0-17-0.a02.ptldor01.us.ce.verio.net (157.238.28.22)  100.069 ms
99.780 ms  146.710 ms
21  maus.spack.org (204.245.198.90)  100.400 ms  101.473 ms  105.460 ms

But the connection times out...

John Klos
Sixgirls Computing Labs

--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/



[nycwireless] This Tuesday - Eben Moglen on "Freedom and the Net: Why We Win"

2002-05-13 Thread John Klos

Hi,

Why was this rejected as irrelevant? The free wireless movement now has
much in common with the free software movement in the '80s; some of the
legislation which may be discussed is definitely pertinent to free
wireless advocates.

With the amount of fluff that goes on on this list, I really would hate to
see something that may be of real benefit to some people not get posted.

Thanks,
John Klos
Sixgirls Computing Labs



-- Forwarded message --
Date: Sun, 12 May 2002 11:29:57 -0400
From: lo+nycw <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: This Tuesday - Eben Moglen on "Freedom and the Net: Why We Win"

There will be a talk of interest to all concerned with Free Software and/or
the Internet by Eben Moglen at the New York chapter of the Internet Society
(ISOC-NY) this Tuesday night, May 14, 2002, from 7:00pm-9:00pm at 10 Astor
Place on the Fifth Floor.

As many of you undoubtedly know Eben Moglen serves as General Counsel for
the Free Software Foundation pro bono and has long provided some of the
most astute and thought-provoking commentaries on legal issues affecting
free software and the internet.

He is a programmer, historian, professor of law, lawyer and free
software advocate.  After receiving his J.D. and Ph.D. from Yale University
he was a designer and implementer of advanced computer languages at I.B.M,
later served as law clerk to Supreme Court Justice Thurgood Marshall and
currently is professor of Law and Legal History at Columbia University
where his courses for this semester have included "Law in the Internet
Society", while serving as General Counsel to the Free Software Foundation.
(see: http://emoglen.law.columbia.edu for information and publications.)

He is a fascinating, brilliant and thought-provoking speaker and his talk
should prove particularly important at this critical period both for free
software and for the internet.

The details are as follows:

ISOC-NY
Special Guest Presentation

EBEN MOGLEN
"Freedom and the Future of the Net: Why We Win"

Where:  10 Astor Place, 5th Floor
New York University
(next door to Barnes & Noble bookstore)

When:   Tuesday, May 14th, 2002 7-9pm


--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/



[nycwireless] Re: nycwireless digest, Vol 1 #384 - 6 msgs

2002-04-27 Thread John Klos

> Does anyone know what the correct action would be
> for an email that came from a verizon.net customer,
> but bearing a return address that is impersonating someone else?
> I include header below.  (I changed some words to protect the guilty)
>
> The user Uzrrho is probably a victim of the virus.
> There was an attachment that was ID'd by Norton AV.


> Received: from out005.verizon.net
>   (out005pub.verizon.net [206.46.170.143])
>   by gw5smtp.mydomain.net; Fri, 26 Apr 2002 02:16:36 -0400
> Received: from Uzrrho ([63.238.10.7]) by out005.verizon.net
>   (InterMail vM.5.01.04.05 201-253-122-122-105-20011231) with SMTP
>   id <20020426061749.WBUR2361.out005.verizon.net@Uzrrho>
>   for <[EMAIL PROTECTED]>; Fri, 26 Apr 2002 01:17:49 -0500

Yes. Forward with headers to verizon.net / gte.net and ask them to inform
their client that they're infected.

I have no ides if Verizon does this, but I've had several people email me
to thank me after their ISP forwarded my warning to them.

John Klos
Sixgirls Computing Labs
-- 
Steven B. Lipner, Microsoft's director of security assurance, responded,
saying: "I'd be astonished if the open-source community has in total done
as many man-years of computer security code reviews as we have done in the
last two months."



--
NYCwireless - http://www.nycwireless.net/
Un/Subscribe: http://lists.nycwireless.net/mailman/listinfo/nycwireless/
Archives: http://lists.nycwireless.net/pipermail/nycwireless/