Re: 4/8 CPUs not seen in /proc/cpuinfo !

2003-10-22 Thread Benjamin J. Weiss
From: "Mohamed Kerbachi" <[EMAIL PROTECTED]>
To: "RedHat mailling list (E-mail)" <[EMAIL PROTECTED]>
Sent: Wednesday, October 22, 2003 8:16 AM
Subject: 4/8 CPUs not seen in /proc/cpuinfo !


> I have access to a server only with ssh so i can't open the box, i see a
strange think:
> In /var/log/messages
>
>
> Oct 2 1:18:52 ser cpu: 0, clocks: 998004, slice: 110889
> Oct 2 1:18:52 ser kernel: CPU0
> Oct 2 1:18:52 ser kernel: cpu: 6, clocks: 998004, slice: 110889
> Oct 2 1:18:52 ser kernel: cpu: 3, clocks: 998004, slice: 110889
> Oct 2 1:18:52 ser kernel: cpu: 4, clocks: 998004, slice: 110889
> Oct 2 1:18:52 ser kernel: cpu: 1, clocks: 998004, slice: 110889
> Oct 2 1:18:52 ser kernel: cpu: 2, clocks: 998004, slice: 110889
> Oct 2 1:18:52 ser kernel: cpu: 5, clocks: 998004, slice: 110889
> Oct 2 1:18:52 ser nfslock: rpc.statd startup succeeded
> Oct 2 1:18:52 ser kernel: cpu: 7, clocks: 998004, slice: 110889
>
>
> So there is 8 Intel CPUs.
>
> But with cat /proc/cpuinfo  I see:
>
>
> processor   : 0
> vendor_id   : GenuineIntel
> cpu family  : 15
> model   : 1
> ...
> processor   : 2
> vendor_id   : GenuineIntel
> cpu family  : 15
> model   : 1
> ...
> 
> ..
>
> processor   : 3
> vendor_id   : GenuineIntel
> cpu family  : 15
> model   : 1
>
> So only 4 CPU where are the other4 !! I AM CONFUSED !
>
> Thanks for the Help
>
>
> > Haux

They're probably hyper-threading cpu.  Intel's hyper-threading CPU's show up
as two CPU's each, as part of their performance enhancement.  Don't ask me
why, I'm not a microprocessor engineer. :)

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Help! Basic Linux Introduction?

2003-10-21 Thread Benjamin J. Weiss
All,

I just got tasked with providing (by this afternoon!) a short primer on
linux, preferably RH 9.  I need something that a group of MIS Windows folks
can read in two evenings, such that I can then sit them down in front of RH
9 boxes and show them how to administer the basics.

I've found the RH 9 manuals on their site, and if I have to I will resort to
printing off various sections of them and putting them together, but I was
hoping for something a bit more coherent.  Basically, it should cover the
basic concepts and such.

I'm also looking at tldp.org.

Anybody have something like this laying around?

Thanks!

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Physical Memory is beeing filled (RH7.1)

2003-10-20 Thread Benjamin J. Weiss

- Original Message -
From: "Laurie Harper" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 20, 2003 12:21 PM
Subject: RE: Physical Memory is beeing filled (RH7.1)


> > Marcel,
> >
> > Your problem sounds like the Cache Swap bug:
> >
> >https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=89226#c15
> >
> >Try doing the following:
> >
> >From the command line (as root) type:
> >
> >/sbin/sysctl -w vm.bdflush="30 500 0 0 2560 15360 60 20 0"
> >
> >Then edit your /etc/sysctl.conf file and add the following line:
> >
> >vm.bdflush="30 500 0 0 2560 15360 60 20 0"
>
> We have been experiencing similar issues on our web server, whereby
> sudden swap usage spikes basically bring the server to a halt. While the
> blame has been placed on high traffic by those helping to
> troubleshooting the problem, I have felt that there was something else
> going on, since most of the crashes we have experienced have actually
> been random, often at low peak times, and the symptoms are nearly
> identical to those documented in the bug report. While granted our web
> traffic has been increasing steadily over the past few months, the
> beginning of our crash problems was quite sudden, starting after we
> migrated from RH 7.1 to 7.3 and then updated the kernel. It has been
> extremely difficult to pinpoint the issue since there are virtual no
> errors logged when this occurs, and there seems to be little to go on by
> way of finding a common denominator between the incidents.
>
> A 'uname -a ; cat /proc/sys/vm/bdflush' returns:
>
> Linux server1.myserver.net 2.4.20-20.7smp #1 SMP Mon Aug 18 14:46:14 EDT
> 2003 i686 unknown
> 30  500 0   0   500 300060  20  0
>
> A couple questions, first - all of the comments regarding this bug
> appeared to reference RH9. Does the same apply to RH 7.3?

Yes, this is a *kernel* issue, so whatever version of RH you're using, if
you'v updated teh kernel, you can be susceptible.  In fact, in comment #15,
another user mentions that they started seeing this issue in RH 7.3 after
they also updated their kernel.

> Second, what
> exactly do these bdflush figures represent, and how does the recommended
> edit change the behavior of the system. Needless to say I am desperate
> for a solution, but I am reluctant to make any changes without
> understanding the potential effect on the system as a whole.

As I understand it, the bdflush parameters deal with when the kernel flushes
cache to disk and how it deals with virtual memory.  I haven't dug deeply
into it, as the options I detailed in my previous post have worked just
dandy on our web server.

Nevertheless, a google on "bdflush parameters" pulled up many hits,
including:
http://www.faqs.org/docs/securing/chap6sec68.html
https://listman.redhat.com/archives/ext3-users/2003-May/msg00035.html
https://listman.redhat.com/archives/ext3-users/2002-November/msg00073.html

and many others.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Problems with NFS directory exports off of RH9 systems

2003-10-20 Thread Benjamin J. Weiss

- Original Message -
From: "Ken Rossman" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 20, 2003 10:44 AM
Subject: Re: Problems with NFS directory exports off of RH9 systems


> On Monday, October 20, 2003, at 10:36 AM, Benjamin J. Weiss wrote:
> > From: "Ken Rossman" <[EMAIL PROTECTED]>
> >> I am working in a mixed environment with Linux, Solaris, MacOSX, and
> >> Windows systems and have been quite frustrated in trying to get
> >> directories exported properly under NFS from the Linux system to
> >> the others.  The Linux system appears to export the directories
> >> properly, but I get a long delay and an eventual timeout when I
> >> try to mount Linux-exported dirs from either the Solaris host or
> >> the OSX host...
> >
> > Do you have the nfs ports open on your firewall?  My /etc/services file
> > shows that port 2049, both udp and tcp are used for nfs...
>
> Hmmm, I had thought about the firewall configuration before, but never
> really checked it.
>
> I just disabled the firewall entirely, and now I get an immediate
> "Permission denied" failure:
>
>sunhost# mount frankfurt:/export /mnt/frankfurt
>nfs mount: frankfurt:/export: Permission denied
>
> I am doing the mount above as root, so the "Permission denied" condition
> probably is coming from the server end, not the client end.
>
> Still a bit baffled.

Well, I don't use NFS, so one of the NFS gurus is gonna have to help you
from here. :)

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Physical Memory is beeing filled (RH7.1)

2003-10-20 Thread Benjamin J. Weiss
- Original Message -
From: "Marcel" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 20, 2003 6:20 AM
Subject: Physical Memory is beeing filled (RH7.1)


> Hi
>
> When I check the memory status within "KDE Control Center" or just by the
> command "free" or "top", I can see how the physical memory is beeing
filled
> every time something is written onto the harddisk. After the writing
> process, the physical memory is not beeing released anymore, that means
that
> the physical memory is beeing filled up to 100%. After that the virtual
> memory starts to grow.
>
> Examle: I copy some files from a cdrom to the harddisk - the physical
memory
> increases. When I now delete the just written files again, the memory
> consumption decreases again. That's really weird, isn't it?
>
> Does anyone have any idea what the reason for that could be?
>
>  - The same problem occoured after I recompiled my kernel (2.4.2-2).
>  - I installed a new kernel (2.4.20-20.7) --> still the same problem.
>
> System Information:
>  - P4 2.6GHz
>  - 512MB RAM
>  - Linux RedHat 7.1
>  - Filesystem: ext2
>
> Thank you very much for your help!
> Marcel Fritzenwallner

Marcel,

Your problem sounds like the Cache Swap bug:

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=89226#c15

Try doing the following:

>From the command line (as root) type:

/sbin/sysctl -w vm.bdflush="30 500 0 0 2560 15360 60 20 0"

Then edit your /etc/sysctl.conf file and add the following line:

vm.bdflush="30 500 0 0 2560 15360 60 20 0"

See if that helps.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Problems with NFS directory exports off of RH9 systems

2003-10-20 Thread Benjamin J. Weiss
From: "Ken Rossman" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, October 20, 2003 9:16 AM
Subject: Problems with NFS directory exports off of RH9 systems


> I am working in a mixed environment with Linux, Solaris, MacOSX, and
> Windows
> systems and have been quite frustrated in trying to get directories
> exported
> properly under NFS from the Linux system to the others.  The Linux
> system
> appears to export the directories properly, but I get a long delay and
> an
> eventual timeout when I try to mount Linux-exported dirs from either the
> Solaris host or the OSX host.
>
> Is there some trick to this that I am missing?  Are there some tools I
> can use to track down what might be wrong?
>
> I am using RedHat V9, Solaris V9, and MacOSX 10.2 (and never mind what
> Windows I am using :-)
>

Do you have the nfs ports open on your firewall?  My /etc/services file
shows that port 2049, both udp and tcp are used for nfs...


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: bad argument modprobe when run from script

2003-10-20 Thread Benjamin J. Weiss
> I am working on my iptables script.
>
> When I run the /etc/rc.d/init.d/iptables script which calls
> /etc/iptables.rules it fails with the error
> "bad argument modprobe"
>
> If I just run the /etc/iptables.rules script I have no errors or if I run
> modprobe ip_tables from bash I have no errors.

If you want us to help, you might try posting your iptables script as well
as your iptables.rules file...

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: fwbuilder (Was Graphic firewall)

2003-10-17 Thread Benjamin J. Weiss
> Thanks for the reply.
> 
> That just gave me the following:
> 
> fwbuilder-1.0.11-1

Yeah, I haven't had much sleep this week.  I gave you the wrong switches.

try:

rpm -ql fwbuilder

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: fwbuilder (Was Graphic firewall)

2003-10-17 Thread Benjamin J. Weiss
> Try:
>
> rpm -qp 
>
> where  would be what you're looking for (postfix, fwbuilder,
> etc).
>
> Ben

Sorry, it was a long night and the day's not much better.  That should have
been

rpm -ql 

not -qp

Is anybody reading my posts?  I haven't heard anything back from any
questions in the last two weeks, and I'm surprised that nobody caught my
mistake


Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: fwbuilder (Was Graphic firewall)

2003-10-17 Thread Benjamin J. Weiss
> I read up on this and it sounded absolutely perfect for me. After a few
> problems I finally managed to get it installed, but now I don't know
> where its executable is.
>
> I have done a search for a fwbuilder file and looked in all the
> application locations I know of, to no avail.
>
> Can someone tell me where the RPM installs itself?

Try:

rpm -qp 

where  would be what you're looking for (postfix, fwbuilder,
etc).

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Kickstart - post install cp of files from CD fails

2003-10-17 Thread Benjamin J. Weiss
> from http://256.com/gray/docs/rh_boot/

Darn, Marcel, I wish I'd seen this one yesterday!  Would have saved me
several hours and two DVD-R's!

:)

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: kickstart install from a RH9 DVD via USB?

2003-10-17 Thread Benjamin J. Weiss
> > We need to deploy RH9 to a few places where outside network access is a
> > no-go.  So, here's what I was thinking, and I'd sure appreciate any
> > help/suggestions I could get.
> >

> Well, no reply, so this is what I did:
>
> 01) Fresh RH9 install on the computer with all of the required packages
> (httpd, etc).
> 02) Copy the /root/anaconda-ks.cfg file to a floppy for later modification
> 03) mkdir /tmp/rh9
> 04) do a "cp -r /mnt/cdrom/* /tmp/rh9" for each of the three cd's.
> 05) mkdir /tmp/rh9/up2date
> 06) cd /tmp/rh9/up2date
> 07) wget the new up2date rpms
> 08) rpm -Uvh *.rpm
> 09) up2date --register
> 10) up2date --download --tmpdir=/tmp/rh9/up2date
> 11) cd /tmp/rh9
> 12) mkisofs -J -r -T -l -V 'RH-9-Shrke' \
> -b images/bootdisk.img \
> -c boot.catalog \
> -o /tmp/shrike-dvd.iso .
>
> Then I copied the .iso image over to my windows machine and burned the DVD
> from there.


Okay, I know, I've replied to my own post twice now, but I wanted to get
this into the archives.  The process that I detailed above works, with one
exception.  In step #4 above, the cp -r does not copy hidden files.  This
means that you have to manually copy the /.discinfo from RH9 CD1 to the
temporary directory before making the iso image.  Otherwise it doesn't
install.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: kickstart install from a RH9 DVD via USB?

2003-10-16 Thread Benjamin J. Weiss
> All,
>
> We need to deploy RH9 to a few places where outside network access is a
> no-go.  So, here's what I was thinking, and I'd sure appreciate any
> help/suggestions I could get.
>
> Basically, I want to create a bootable DVD that has all three of the RH9
> CD's as well as all of the up2date packages that are current to the
install.
> I have available a test computer that is identical to the machines to
which
> I will be deploying, and a Backpack USB DVD burner.  Here are my
> proposed/theoretical steps:


Well, no reply, so this is what I did:

01) Fresh RH9 install on the computer with all of the required packages
(httpd, etc).
02) Copy the /root/anaconda-ks.cfg file to a floppy for later modification
03) mkdir /tmp/rh9
04) do a "cp -r /mnt/cdrom/* /tmp/rh9" for each of the three cd's.
05) mkdir /tmp/rh9/up2date
06) cd /tmp/rh9/up2date
07) wget the new up2date rpms
08) rpm -Uvh *.rpm
09) up2date --register
10) up2date --download --tmpdir=/tmp/rh9/up2date
11) cd /tmp/rh9
12) mkisofs -J -r -T -l -V 'RH-9-Shrke' \
-b images/bootdisk.img \
-c boot.catalog \
-o /tmp/shrike-dvd.iso .

Then I copied the .iso image over to my windows machine and burned the DVD
from there.

FWIW, burning bootable DVD's in RH9 with the Backpack 224101 looks doable.
http://www.micro-solutions.com/software_library/linux/index3.html has the
linux software for the backpack drives, and the author of X-CD-Roast says
that it will burn bootable DVD's.  I just didn't have the time to mess with
it all, since I already had a DVD burner working in Windows.

Ben

the author of X-CD-Roast says that it will create bootable DVD's, but I
didn't have time to get the up and working with RH9 (though their website
has drv


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: kickstart install from a RH9 DVD via USB?

2003-10-16 Thread Benjamin J. Weiss
> All,
>
> We need to deploy RH9 to a few places where outside network access is a
> no-go.  So, here's what I was thinking, and I'd sure appreciate any
> help/suggestions I could get.
>
> Basically, I want to create a bootable DVD that has all three of the RH9
> CD's as well as all of the up2date packages that are current to the
install.
> I have available a test computer that is identical to the machines to
which
> I will be deploying, and a Backpack USB DVD burner.  Here are my
> proposed/theoretical steps:


Well, no reply, so this is what I did:

01) Fresh RH9 install on the computer with all of the required packages
(httpd, etc).
02) Copy the /root/anaconda-ks.cfg file to a floppy for later modification
03) mkdir /tmp/rh9
04) do a "cp -r /mnt/cdrom/* /tmp/rh9" for each of the three cd's.
05) mkdir /tmp/rh9/up2date
06) cd /tmp/rh9/up2date
07) wget the new up2date rpms
08) rpm -Uvh *.rpm
09) up2date --register
10) up2date --download --tmpdir=/tmp/rh9/up2date
11) cd /tmp/rh9
12) mkisofs -J -r -T -l -V 'RH-9-Shrke' \
-b images/bootdisk.img \
-c boot.catalog \
-o /tmp/shrike-dvd.iso .

Then I copied the .iso image over to my windows machine and burned the DVD
from there.

FWIW, burning bootable DVD's in RH9 with the Backpack 224101 looks doable.
http://www.micro-solutions.com/software_library/linux/index3.html has the
linux software for the backpack drives, and the author of X-CD-Roast says
that it will burn bootable DVD's.  I just didn't have the time to mess with
it all, since I already had a DVD burner working in Windows.

Ben

the author of X-CD-Roast says that it will create bootable DVD's, but I
didn't have time to get the up and working with RH9 (though their website
has drv


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


kickstart install from a RH9 DVD via USB?

2003-10-16 Thread Benjamin J. Weiss
All,

We need to deploy RH9 to a few places where outside network access is a
no-go.  So, here's what I was thinking, and I'd sure appreciate any
help/suggestions I could get.

Basically, I want to create a bootable DVD that has all three of the RH9
CD's as well as all of the up2date packages that are current to the install.
I have available a test computer that is identical to the machines to which
I will be deploying, and a Backpack USB DVD burner.  Here are my
proposed/theoretical steps:

01) Do a fresh RH9 install on the computer with all of the required packages
(httpd, etc).
02) Copy the /root/anaconda-ks.cfg file to a floppy for later modification
03) # mkdir /tmp/rh9
04) do a "cp -r /mnt/cdrom/* /tmp/rh9" for each of the three cd's.
05) # mkdir /tmp/rh9/up2date
06) # up2date --download --tmpdir=/tmp/rh9/up2date
07) Make a burnable .iso dvd image.  I could use some help on this one,
would it be:
mkisofs -J -r -T -l -V 'RH-9-Shrke' \
-b /tmp/rh9/images/bootdisk.img \
-c /tmp/rh9/boot.catalog \
-o /tmp/shrike-dvd.iso

08) Burn the .iso to the dvd on the usb port.  I have *no* idea how to do
this.  Can anybody clue me in?

Any help would be GREATLY appreciated!

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Memory Resources - Howto Refresh

2003-10-16 Thread Benjamin J. Weiss
> Hi,
>
> After days of work, without rebooting my box, it suddenly slowed down.
> My filesystem is just
> 41% of the total size that my hard disk can hold. I executed "free" to
> check on the available
> memory resources. I found the following information:
>
>
> [EMAIL PROTECTED] xxx]$ free
>  total   used   free sharedbuffers cached
> Mem:505220 428728  76492  0  16860 195208
> -/+ buffers/cache:   216660 288560
> Swap:  1052248 194312 857936
>
>
>
> Well, I don't really want to reboot my box.  Is there a way that I could
> refresh (or probably
> release the unused) resources of my box?  After all, some of my
> previously used
> applications (eclipse, jboss, and mysql) have been shutdown for quite a
> long while now.

Okay, I'm going to out-and-out say that I have no idea whether what I'm
about to say is gonna help you or not, but it can't hurt.

RH9 came with a cache-swap bug that's easily fixed.  It's discussed in the
thread below:

https://listman.redhat.com/archives/shrike-list/2003-August/msg00329.html

Basically, from root, type:

/sbin/sysctl -w vm.bdflush="30 500 0 0 2560 15360 60 20 0"

Then edit your /etc/sysctl.conf and add the line:

vm.bdflush="30 500 0 0 2560 15360 60 20 0"

If this is your problem, then the command line deal *should* speed you up
pretty quickly...

HTH,

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: LANG variable in RH9

2003-10-10 Thread Benjamin J. Weiss
> Benjamin J. Weiss wrote:
> >>Hi,
> >>
> >>What are the implications of changeing the LANG variable in RH9?
> >>
> >>Will it mess anything up?
> >>
> >>it was sugessted here
> >>http://www.sng.ecs.soton.ac.uk/mailscanner/serve/cache/121.html
> >>
> >>that I change it to
> >>LANG="POSIX"
> >>
> >>Anyone know if for any reason this might be a bad idea?
> >>
> >>here is my current /etc/sysconfig/i18n file:
> >>
> >>LANG="en_US.UTF-8"
> >>SUPPORTED="en_US.UTF-8:en_US:en"
> >>SYSFONT="latarcyrheb-sun16"
> >>
> >>Thanks
> >
> >
> > I've changed mine to read:
> >
> > LANG="en_US"
> > SUPPORTED="en_US:en_US:en"
> > SYSFONT="latarcyrheb-sun16"
> >
> > and it has improved performance, especially in grep.
> >
> > Ben
> >
> >
>
> Thanks Ben,
>
> If I do that, do I need to do somthing drastic like reboot or init to
> take affect everywere?
>
> rick

Well, to tell the truth, I don't know what was required.  I just went ahead
and rebooted.  I'm sure that somebody here can tell you whether that was
necessary or not...

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: LANG variable in RH9

2003-10-10 Thread Benjamin J. Weiss
> Hi,
> 
> What are the implications of changeing the LANG variable in RH9?
> 
> Will it mess anything up?
> 
> it was sugessted here
> http://www.sng.ecs.soton.ac.uk/mailscanner/serve/cache/121.html
> 
> that I change it to
> LANG="POSIX"
> 
> Anyone know if for any reason this might be a bad idea?
> 
> here is my current /etc/sysconfig/i18n file:
> 
> LANG="en_US.UTF-8"
> SUPPORTED="en_US.UTF-8:en_US:en"
> SYSFONT="latarcyrheb-sun16"
> 
> Thanks

I've changed mine to read:

LANG="en_US"
SUPPORTED="en_US:en_US:en"
SYSFONT="latarcyrheb-sun16"

and it has improved performance, especially in grep.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Recommendations for vidcap cards for linux?

2003-10-10 Thread Benjamin J. Weiss
> I have a VHS tape of my grandfather's 100th birthday that I want to make
> into a VCD so that I can send copies to the whole family (can you say bulk
> CD's? *grin* ).
>
> Is anybody currently doing vidcap in linux and can you recommend a decent
> card that's not too terribly expensive (I'd like to try and keep it below
> $100).
>
> I'm asking here, because occasionally a vendor's claim may be a bit
> overstated:)

Okay, is firewire working well in linux?  I figure that if I try a firewire
vidcap board then maybe if I can't find the tools in linux, I can always
move the thing over to my Windoze box...

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Graphic firewall

2003-10-10 Thread Benjamin J. Weiss
Shorewall seems to have a fanatic following. :)

http://www.shorewall.net


- Original Message -
From: ; "Alejandro" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, October 10, 2003 1:26 AM
Subject: Graphic firewall


> I want a recomendation for a good graphical (gnome) firewall that
configure my iptables.
>
> Thanks,
>
> ***
> Alejandro Bibiano González
> -Departamento Informática-
>
> INDUSTRIAS LAUBAT, S.A.
> Tlf +34 93 728 36 03
> Fax +34 93 728 36 14
> [EMAIL PROTECTED]
> http://www.laubat.com
> ***
>
>
> --
> redhat-list mailing list
> unsubscribe mailto:[EMAIL PROTECTED]
> https://www.redhat.com/mailman/listinfo/redhat-list
>


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: can't read superblock

2003-10-09 Thread Benjamin J. Weiss
> i get the following error when i issue the command 'mount /dev/cdrom'
> (which has this entry in /etc/fstab-
> /dev/cdrom  /mnt/cdrom iso9660 noauto,user,kudzu,ro  0 0
> ):
> 
> mount: /dev/cdrom: can't read superblock
> 
> i've mounted this cd successfully in other linux boxes and tried several
> different cd's in this drive to no avail- anyone know what's up? this box is running 
> red hat
> 7.3.  

If you can't mount any cd's on this machine, yet have no problems mounting 
them on another machine, it sounds like it's time to purchase another 
cd-rom drive. ;)

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Recommendations for vidcap cards for linux?

2003-10-09 Thread Benjamin J. Weiss
I have a VHS tape of my grandfather's 100th birthday that I want to make 
into a VCD so that I can send copies to the whole family (can you say bulk 
CD's? *grin* ).

Is anybody currently doing vidcap in linux and can you recommend a decent 
card that's not too terribly expensive (I'd like to try and keep it below 
$100).

I'm asking here, because occasionally a vendor's claim may be a bit 
overstated:)

Thanks!

Ben



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Virus protection

2003-10-09 Thread Benjamin J. Weiss
>
> Benjamin J. Weiss said:
>
> > Wow, Hal, guess've just slept the last year or so.  Ever heard of
> > Slapper? At one point it had infected at least 13,000 distinct machines:
>
> I've missed most of this thread, but it seemed to me that the point is
> that viruses don't spread on Linux via e-mail/attachments, the way that,
> say, Klez or Blaster do.  The mechanism of Slapper's spread (and the very
> few other worms that infect Linux/Unix hosts) is very, very different.
> Outlook is built to support the spread of worms and viruses, but there is
> no equivalent function in Linux -- unless it's supported by a heavy dose
> of social engineering ("I promise, when you save this attachment and
> change its permissions to executable and log in a root and run this
> program, it'll be really really cool!  I promise!").  :)
>
> Having said that, it's a good idea to have at least *some* degree of virus
> protection on your *nix system.  Most infections have to be cleaned out by
> hand, but if you run a mail server (or even a little mailhost in your
> house like I do), it can be a startlingly good idea to put some sort of
> virus protection tool on it, if only to prevent any viruses from spreading
> among your networked computers that are infected with Outlook -- er, I
> mean, with worms.

My argument wasn't the method of propagation or the difference between a
virus and a worm.  My response was to his assertion that you didn't need
"virus" protection on a linux machine.

In my experience, complacency leads inevitably to disaster.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Want to run SCO Foxbase on RH9

2003-10-09 Thread Benjamin J. Weiss
> We have some very old SCO Foxbase programs that we want to run under RH9.
> Is this possible, and is anyone already doing it?

I'd be careful of running any SCO software right nowthey may sue. ;)


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Virus protection

2003-10-09 Thread Benjamin J. Weiss
> On Thu, Oct 09, 2003 at 10:57:47AM -0500, Benjamin J. Weiss wrote:
> >
> > Notice the word "Unix" above...
>
>  ... find me someone -- anyone -- who has had a system infected
> via email+attached virus on a *nix system. A live person please, and
> not theories or reports from vendors with vested interests protecting
> an entire industry built around really shoddily designed software.
> Over and above that, I don't beleive the inherent MS design flaw of
> auto-executing binary email attachments is even possible on Nix (is
> it?).

Wow, Hal, guess've just slept the last year or so.  Ever heard of Slapper?
At one point it had infected at least 13,000 distinct machines:

http://www.cert.org/advisories/CA-2002-27.html
http://www.f-secure.com/slapper/

I didn't have time to dig any deeper for other worms, but I'm sure that you
can find more in Google.

Don't get me wrong, one reason I love linux is because it's more secure.
But that does NOT equate to bullet proof.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Virus protection

2003-10-09 Thread Benjamin J. Weiss
> > I'm looking around for open source virus protection software, I saw
> > MailScanner-4.23-11 but it seams that it needs additional 3rd party
> > software to "eliminate" the viruses. Anybody know of others?
>
> Linux does not need virus protection, really. That's an MS specific
> problem.

Absolutely incorrect.  From my box, when I check out the number of virii
that I am protected from by f-prot:

[EMAIL PROTECTED] benjamin]$ f-prot -virno
SIGN.DEF created 9 October 2003
SIGN2.DEF created 9 October 2003
MACRO.DEF created 6 October 2003
DOS/Windows: 25681 viruses and 40737 Trojans
Word/Excel: 7961 viruses and Trojans
Java: 2 viruses and 124 Trojans
BAT: 2070 viruses and Trojans
IRC INI: 1176 viruses and Trojans
Script: 3662 viruses and Trojans
INF: 5 viruses and Trojans
Unix shell: 242 viruses and Trojans
Ami: 2 viruses and Trojans
WinBat: 4 viruses and Trojans
PIF: 19 viruses and Trojans
PalmOS: 4 viruses and Trojans
PHP: 11 viruses and Trojans
Unix: 266 viruses and Trojans
In addition, over 15750 viruses are identified using
generic identification, so the total number of viruses
and Trojans known to F-PROT is somewhere over 97700.

Notice the word "Unix" above...

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Open TCP & UDP Ports

2003-10-09 Thread Benjamin J. Weiss
> Port scans run from the same subnet as you are scanning always show more
> ports open than there actually are. For a true evaluation, run the scan
> from outside the subnet.

Um...no.  Port scans run from the same *machine* can be misleading, as many
ports that are open on the localhost are blocked by iptables (the line with
" -i lo -j ACCEPT" accepts any input from the local machine).

In other words, the services shown by "netstat -tap" as listening to ports
are often blocked by iptables so that other hosts may not access them.

So, nmap scans from other hosts on the same subnet won't be any different
from nmap scans from any other host on the internet, unless there is another
firewall blocking the path.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Relay access denied

2003-10-08 Thread Benjamin J. Weiss
> Well I've got Postfix up and running great from my local network.  I run
> into a problem when I have a remote user trying to send email using my
> server as their smtp server.  In /var/log/maillog, I get the following:
>
> Oct  7 23:48:32 terra postfix/smtpd[8995]: reject: RCPT from
> -xx-xxx-xx-xxx.xx.xx.xxx.xxx[xx.xxx.xx.xxx]: 554
<[EMAIL PROTECTED]>:
> Recipient address rejected: Relay access denied;
from=<[EMAIL PROTECTED]>
> to=<[EMAIL PROTECTED]>
>
> Since I am providing web hosting to many people not on my network, and
> perhaps not even in my local geographic area, they will need relay access
> through my smtp server.  Any ideas on how to set this up?

You could set up open relaying, but then every spammer in the world would
use your server, and you would end up on every anti-spammer's black list. :)

Seriously, check out SMTP AUTH.  I believe that there's a PAM module for it
somewhere that will allow your users to authenticate against user accounts
on your server, and once that is done they can send email.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Couldn't send e-mail from redhat 9.0

2003-10-07 Thread Benjamin J. Weiss
> I am using the SMTP service from my ISP. Mail server
> is running.
>
> This is what I got in the /var/log/maillog..
>

Okay, things that look interesting to me are:

> Sep21, it worked...it didn't work on 10/06 and 10/07
> >>
> Sep 21 08:45:01 cscmail sendmail[24046]:
> h8LDj1eK024046: from=<[EMAIL PROTECTED]>,
> size=1106, class=0, nrcpts=1,
> msgid=<[EMAIL PROTECTED]>,
> proto=ESMTP, daemon=MTA, relay=localhost.localdomain
> [127.0.0.1]
> Sep 21 08:45:01 cscmail sendmail[24044]:
> h8LDj1JX024044: [EMAIL PROTECTED], ctladdr=dislam
> (500/500), delay=00:00:00, xdelay=00:00:00,
> mailer=relay, pri=30322, relay=[127.0.0.1]
> [127.0.0.1], dsn=2.0.0, stat=Sent (h8LDj1eK024046
> Message accepted for delivery)

Which shows that your machine accepted a connection to itself to send email,
and



> Oct  7 09:08:44 cscmail sm-msp-queue[27251]:
> h97Dj1I9027083: to=dislam, ctladdr=dislam (500/500),
> delay=00:23:43, xdelay=00:00:00, mailer=relay,
> pri=120223, relay=[127.0.0.1], dsn=4.0.0,
> stat=Deferred: Connection refused by [127.0.0.1]

Which seems to show that you are no longer accepting local connections.

This could either be because the daemon is no longer accepting local
connections, or possibly your firewall settings have changed disallowing
local connections.

You can check your firewall settings via:

ipchains -L

and you can check to ensure that your sendmail is listening for traffic via:

netstat -tap | grep smtp

Show us the output of those two commands.  If they both look good, then it
would have to be a sendmail configuration change, which I wouldn't be able
to help with (I use postfix).

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Couldn't send e-mail from redhat 9.0

2003-10-07 Thread Benjamin J. Weiss
> I have crontab setup to send e-mail in the monring
> using mutt command. Sincae yesterday it's not sending
> any e-mail. It doesn't log any error message in the
> /var/log/messages. I tried to send e-mail manually and
> that didn't work either.
> 
> What can go wrong?

Is there anything suspicious in your /var/log/maillog?

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: General Linux ListServ

2003-10-07 Thread Benjamin J. Weiss
> My questions concern generic aspects such as backup procedures, hard
> drive partitions, and other things that aren't related to a particular
> version.  I have tried asking before and told to go to other lists.  

> I am a member of several lists and one of them got upset that I asked
> about backups once.
> 

I like O'Reilly's "Unix Backup & Recovery" ...

http://www.bookpool.com/.x/ezz9dsqmmn/sm/1565926420

Great book to have around when it hits the fan. ;)

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: off topic

2003-10-06 Thread Benjamin J. Weiss
> Yeah,
>
> I've had it with SCO.  I wish IBM would just throw their weight at
> them and make them go away for good.  That would be a plus.
>
> :-)

Don't forget that Micro-shaft is helping SCO behind the scenes, and that
they've won against IBM in the past...


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Legal Characters in DNS

2003-10-06 Thread Benjamin J. Weiss
> > Is an underscore ' _ ' a legal character in a DNS name?  Is there an
> > document that someone can point me to with a definitive answer as to
which
> > characters are legal and not?
>
> Being strictly pedantic: underscores are allowed in DNS entries
> but not in hostnames.  The relevant document is RFC 952.

I thought that DNS was getting "internationalized" and migrating towards
unicode


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


RE: Network Setup Opinion Needed

2003-09-30 Thread Benjamin J. Weiss
> > This is not quite always the case.  Ethernet's CSMA/CD (Carrier Sense
> > Multiple Access with Collision Detection) was invented during a time when
> > a hub or bus were the primary method of connection.  Collision was indeed
> > a problem then, and keeping the LAN small was a way to ensure network
> > performance.
> > 
> > However, these days, switches are much cheaper and are easily within the
> > reach of most organizations.
> > 
> > If your users are hooked up to a switch instead of a hub, you can ignore
> > the "collisions problem", as it no longer exists.  At that point, the
> > limiting factors are the speed/RAM of the gateway and the speed/RAM of the
> > switch.
> > 
> > A good, short explanation can be found at
> > http://www.duxcw.com/faq/network/hubsw.htm
> > 
> > 
> > Ben
> > 
> Actually CSMA/CD is the problem on a large single area network.  I read the
> article and see the point.  Here is the problem.  When a node transmits it
> first listen for no traffic then it tries to transmit, if a collision occurs
> then it goes into an algorithm to make a attempt again after it selects it's
> new time slot, well the larger the number of nodes the greater the
> probability that they will select the same time slot and cause a collision
> again. Etc. etc  Therefore large networks always bottle neck under
> Ethernet and that is why no company will place a large number of computers
> in the same area no matter what the transport medium is.  There is always a
> optimum number that should be in an area before it is broken down.  That's
> the theory.

Otto,

I'm sorry, but you have absolutely no idea as to how ethernet works in a 
*switched* environment.  You are describing a LAN that is on a hub.  In 
that case, you are correct with all of your above comment.

On the other hand, in a situation where all of the hosts are connected to 
a *switch*, instead of a hub, then each "segment" consists of exactly two 
devices: the host and the switch port.  In that case, the chance for 
collision is greatly reduced.  The reason for this is simple: 

If host-a transmits a packet while connected to a hub, then all other 
hosts connected to that hub will see the packet, whether or not it is 
intended for them.

If host-a transmits a packet while connected to a switch, then something 
entirely different happens.  The switch looks at the packet and decides 
where it is to go.  If it is a multicast or broadcast packet, then most or 
all of the other hosts on the switch will see it (I won't go into those 
rules, it's beyond the scope of this particular discussion.)  

If, on the other hand, it is a *unicast* packet, and the destination host 
is on the switch, then the switch will only transmit it on the port to 
which that destination host is connected.  If the host is not connected to 
the switch, then it will send it on it's "uplink" port, depending upon 
configuration.

Now, what this means is that any host that is connected to a switch will 
only see broadcast traffic, multicast traffic to which it is subscribed, 
or unicast traffic that is addressed to it.  This sharply decreases the 
number of packets that the host's ethernet card will see as inbound, which 
will thereby reduce the number of collisions during transmission and 
subsequently increase the perceived bandwidth.

At that point the bottleneck becomes the switch's backplane capabilities, 
not collisions.

Switched ethernet is vastly superior to ethernet on a hub, and has become 
very cheap.  It is now easily in reach for most organizations, including 
the home office.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


RE: Network Setup Opinion Needed

2003-09-30 Thread Benjamin J. Weiss
On Tue, 30 Sep 2003, Otto Haliburton wrote:

> Again the problem is not the 50 ip addresses, but how they are connected.
> If they are all in the same area you have the problem of collisions and the
> problem of increased traffic due to updating the routing tables for all 50
> nodes.  Where as if you have smaller areas, one computer will be arbitrated
> as the router in each area and the collisions will be less because of the
> smaller areas.  Having many computers in the same LAN is always a problem
> with Ethernet.  If you have many computers in the same area then token ring
> is better because of the reduction of the collisions, but token ring does
> not solve the routing table problem.

This is not quite always the case.  Ethernet's CSMA/CD (Carrier Sense 
Multiple Access with Collision Detection) was invented during a time when 
a hub or bus were the primary method of connection.  Collision was indeed 
a problem then, and keeping the LAN small was a way to ensure network 
performance.

However, these days, switches are much cheaper and are easily within the 
reach of most organizations.

If your users are hooked up to a switch instead of a hub, you can ignore 
the "collisions problem", as it no longer exists.  At that point, the 
limiting factors are the speed/RAM of the gateway and the speed/RAM of the 
switch.

A good, short explanation can be found at 
http://www.duxcw.com/faq/network/hubsw.htm


Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Multi-install question

2003-09-30 Thread Benjamin J. Weiss
I have a multi-boot test system.  It currently has one drive with both XP 
and Shrike installed.  I installed XP first, so I'm using Grub as the boot 
loader.

I've installed a second drive and am about to install Win2K on it.  Now, I 
know that this is going to break my install and that I'm going to have to 
do something to fix it, and I just wanted to make sure that I understand 
what's about to happen.

The win2k install will leave the hda partition table alone, but will 
over-write hda's MBR, telling it to point to the boot sector on hdb (where 
I'll be installing win2k), correct?  So, all I should have to do is:

a) backup hda's MBR (dd if=/dev/hda of=/dev/fd0 bs=512 count=1)
b) install win2k on hdb
c) restore hda's MBR (dd if=/dev/fd0 of=/dev/hda bs=512 count=1)
d) manually edit /boot/grub/grub.conf and add an entry for hdb

Does this sound correct?

Thanks!

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Looking for some advice

2003-09-30 Thread Benjamin J. Weiss
> I've been set a little project by my boss to setup a remote demo solution
> for one of the systems we sell. My problem is that although the system is
> web based it uses some odd ports and has a massive java client it needs to
> download so I'm looking for a open source variation on a Citrix system which
> would allow me to connect over port 80 to the central server and run the
> applications straight from there.
> 
> If anyone has ideas on how I can do this I would be most greatfull.

If your central server is linux, then you could load tight-vnc 
(http://www.tightvnc.org) on it.  If your remote client is windows, you 
would then use PuTTY to create a tunneled session that the vnc client 
could run over.

Assuming that you have the tight-vnc running on your server, the rest of 
the steps are outlined in:

http://www.benjamin.weiss.name/putty-tunnel.html

Hope this helps,

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: postfix smtp

2003-09-30 Thread Benjamin J. Weiss
On Mon, 29 Sep 2003, R.E. wrote:

> i managed to relay the smtp server...but i still get this message
> -
> 
> This is the Postfix program at host linuxbox.com.
> 
> I'm sorry to have to inform you that the message returned
> 
> below could not be delivered to one or more destinations.
> 
> For further assistance, please send mail to 
> 
> If you do so, please include this problem report. You can delete your own text from 
> the message returned below.
> 
> The Postfix program
> 
> <[EMAIL PROTECTED]>: host a.mx.zebulant.us[65.248.4.205] refused to talk to me:
> 
> 550 HELO argument does not match calling host
> --
> 

1) Please don't top post, bottom post instead.

2) You're going to have to give us a bit more info if we're going to help.

a) To whom are you sending email?
b) What is the name of your box?
c) What is the name of the box that you are attempting to relay 
through?
d) What does your main.cf look like?
e) Do you have any messages in your /var/log/maillog that look 
like they might be relevant?

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: postfix smtp

2003-09-29 Thread Benjamin J. Weiss
> how do i configure postfix to use another smtp server for out going mail?

Look in your /etc/postfix/main.cf file, you should see a relayhost line.
Mine looks like:

relayhost = smtp.central.cox.net

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Remote Keyboard and mouse

2003-09-29 Thread Benjamin J. Weiss
> I want to be able to setup a Linux server without a keyboard, mouse or
> monitor and control it remotely from another Linux computer on the
> network or through the internet.
>
> If I remember correctly, RH Linux has included this technology for
> several versions.
>
> Am I dreaming or where do I need to look to learn how?

I've written a very short howto on this.  It assumes that you've installed
something called "tight-vnc" on your system (http://www.tightvnc.org) on
your system.  Once you have tight-vnc installed, it is easy to tunnel it
over ssh so that you have a secure virtual session on your home linux box.

You can find the howto at:

http://www.benjamin.weiss.name/putty-tunnel.html

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Backup options and considerations

2003-09-29 Thread Benjamin J. Weiss
> I am thinking about backup procedures for my server.

> I don't know what "normal" backup procedures look like, I don't think I
> have seen any since about 1990.
>
> Anyone have any helpful suggestions?
>
> Buck

Yeah, Unix Backup and Recovery.

http://www.amazon.com/exec/obidos/ASIN/1565926420/survivalarts-20

It was recommended by somebody else on the list just this weekend, and I
have been using it for awhile also.  It's part of my "core" library that I
wouldn't do without.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Nautilus CD recording?

2003-09-29 Thread Benjamin J. Weiss
> > > Found it - it writes "image.iso" in /tmp. Which is dumb, imho.
> > >
> > > So can anyone tell me how to change that?
> >
> > Actually, it's exactly right.  The system has to build a temporary .iso
> > image before it burns it to the CD.
> >
> > I couldn't find a way to change the default location of the temporary
image.
> > I'm guessing that you don't have 700M free in your /tmp?
>
>
> No, alas I have /tmp as part of the root filesystem and as such I
> installed / to be 256M. Overkill,imho, but still not enough it
>  would seem

This is why I always make /tmp it's own partition, so that temporary files
can't clog up the OS and cause the machine to stop working...

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Nautilus CD recording?

2003-09-26 Thread Benjamin J. Weiss
> On Fri, 2003-09-26 at 16:05, Nick Lindsell wrote:
> > Greetings all,
> > I was pleasantly surprised that Nautilus file manager now
> > has CD writing capabilities. But mine complains there is not enough
> > space to create the ISO image - would someone enlighten me on where
> > Nuatilus is trying to create the image so I can ensure there is enough
> > room. Perhaps it is an environment variable I seek?
>
>
> Found it - it writes "image.iso" in /tmp. Which is dumb, imho.
>
> So can anyone tell me how to change that?

Actually, it's exactly right.  The system has to build a temporary .iso
image before it burns it to the CD.

I couldn't find a way to change the default location of the temporary image.
I'm guessing that you don't have 700M free in your /tmp?

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: connecting linux to internet

2003-09-26 Thread Benjamin J. Weiss
> Hi,
>
> Can someone help me this issue:
>
> I am trying to connect my redhat 9 linux box to
> roadrunner in kansas city. i congigured my card with
> DHCP. However when i try to activate my eth0, i get
> the following message:
>
> SIOCSIFFLAGS: could not get get requested IP address.

Try calling your local tech support.  Some ISP's are set up in such a way as
to require you to register your MAC address with their cable modem in order
to get the ip address.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Apcupsd problem with APC Back-ups 500

2003-09-25 Thread Benjamin J. Weiss
> Hi,
> did someone tried apcupsd ?
> I've got a APC Back-ups 500 with usb cable 940-0127B linked to a pc with
> RedHat 8.0A installed
>
> I've tested everything it was written on the documentation, man pages and
>  mailing list,  but I couldn't figure out the problem
> The system finds the ups:
>  #cat /proc/bus/usb/devices
>
>  S:  Manufacturer=American Power Conversion
>  S:  Product=Back-UPS 500 FW: 6.4.I USB FW: c1
>  S:  SerialNumber=BB0307324835
>  C:* #Ifs= 1 Cfg#= 1 Atr=a0 MxPwr= 30mA
>  I:  If#= 0 Alt= 0 #EPs= 1 Cls=03(HID ) Sub=00 Prot=00 Driver=hid
>  E:  Ad=81(I) Atr=03(Int.) MxPS=   8 Ivl=10ms
>  T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=12  MxCh= 3
>  B:  Alloc=  0/900 us ( 0%), #Int=  0, #Iso=  0
>  D:  Ver= 1.10 Cls=09(hub  ) Sub=00 Prot=00 MxPS= 8 #Cfgs=  1
>  P:  Vendor= ProdID= Rev= 0.00
>
>  in /etc/apcupsd/apcupsd.conf I set:
>  UPSCABLE usb
>  UPSTYPE usb
>  DEVICE /dev/usb/hiddev[0-15]


Okay, I have a Back-UPS 350.  I used the rpm on their website
apcupsd-3.10.5-1_rh8_usb, but after awhile stopped using it because they
have a bug that fills my log with:

kernel: application bug: apcupsd(617) has SIGCHLD set to SIG_IGN but calls
wait().

errors and I got tired of not being able to see what was really going on in
my /var/log/messages file.

That aside, the rpm *does* work with power outages, etc.

My /etc/apcupsd/apcupsd.conf file is as follows:

UPSCABLE usb
UPSTYPE usb
DEVICE /dev/usb/hid/hiddev[0-9]
LOCKFILE /var/lock
BATTERYLEVEL 5
MINUTES 3
TIMEOUT 0
ANNOY 300
ANNOYDELAY 60
NOLOGON disable
KILLDELAY 0
NETSERVER on
NISIP 0.0.0.0
NISPORT 3551
EVENTSFILE /var/log/apcupsd.events
EVENTSFILEMAX 100
UPSCLASS standalone
UPSMODE disable
STATTIME 0
STATFILE /var/log/apcupsd.status
LOGSTATS off
DATATIME 0

Hope that helps,

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: yum/apt-get (was Re: Fedora)

2003-09-24 Thread Benjamin J. Weiss
> Up until Monday Up2Date was free for filling out a questionaire every
> two months.  The $60 provided you with convenience and earlier access to
> binary downloads and free binary downloads of RHEL.
>
> Up2Date Demo was free for 2 months for each installation with a unique
> email address.  At the end of 2 months, one would fill out a
> questionaire to extend the subscription for two more months.  That was
> discontinued this week.
>
> As Alan said, its a good thing to support Red Hat anyway.
>
> Hopefully Fedora will pick it up from there.  To me, it would make sense
> that Fedora picks up the up2date program if for no other reason than to
> attract financial support from those of us willing and able to pay the
> $50 - 60 per year.

Lovely.

I am one of those folks who don't *have* the $60 for the up2date and was
willing to fill out the questionaire.

When you say that it is discontinued, what exactly do you mean?  I was able
to install a program with up2date last night...are the demo accounts going
to expire immediately, or a couple of months?

I guess it's time to learn apt, damnit.

Oh, and btw, my boss just told me that he put on hold our purchase of any
further RH products (including RHAS, which we use as an Oracle9i server)
until things settle down.  Now he's looking at Suse, damnit.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: how does email work in redhat 9?

2003-09-23 Thread Benjamin J. Weiss
> ok, since i've been trying to get procmail to work for the past few days,
i've also gotten interested in how email works in general.  i noticed on my
home system, i can email between all my users just by using mutt and
emailing to "[EMAIL PROTECTED]" or even just emailing to
"username".  when i do that, i notice that stuff ends up in
/var/spool/mail/username.  interesting.  so i thought, maybe i can email
myself from outside my lan, i.e. send an email to
"[EMAIL PROTECTED]" from an external email account (like hotmail)
and it would end up in /var/spool/email/cjb and i would be able to see it
with mutt.  wrong!  why not though?  where can i read about how email work
in linux?  specifically redhat 9?


Good!  An interest in how things work is always a good beginning. :)

One good place to start is:  http://www.redhat.com/docs/manuals/linux/

Another is: http://www.tldp.org

In your particular case, you're running into the default security setup for
mail transport agents (MTA) like sendmail and postfix in RH. By default, RH
comes configured to be able to send email but not receive it.  This is to
help keep open relays off of the internet.

First you'll need to ensure that you open port 25 on your firewall.

Next you should look at:
http://www.redhat.com/support/resources/howto/RH-postfix-HOWTO/x118.html

It's long, but it goes through all of the main.cf configuration file.  It
should help you out.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


BBS/Forum suggestion request

2003-09-23 Thread Benjamin J. Weiss
All,

I've just been given the requirement (in my civilian job) to have a BBS or
forum package up and operational by this afternoon.

I can see that there are several options out there, but I was hoping for
some personal experience.  Can anybody share their insights as to which
packages to steer towards or away from?

Thanks!

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Plea to Linux Users

2003-09-22 Thread Benjamin J. Weiss
> >--
> >Jason Dixon, RHCE
> 
> *sigh* I guess RHCE doesn't delve into the security aspects then eh ?

Look, I never intended to start a flame war or anything.

There are times and places where each approach has it's merits.

In my case, where I am a member of a military CERT, we have to be 
absolutely sure that our systems are secure.  This means that we have a 
rather involved response protocol, and part of it is retaining evidence, 
as Jason alluded to.

You also have to remember that we are forbidden from attempting to "trap" 
a hacker, since we are not law-enforcement.

So, basically, we will shut down the system and disconnect it from a 
network.  Then we'll make a full image of the drive, when possible, for 
forensic analysis.  Then we'll boot from a known-good CD to run some 
checks, etc.

When you are dealing with national security, it's not exactly "small/home 
office" applications.  I agree that it is labor intensive.  But if you are 
going to do security, the Department of Defense tells us military CERTS to 
"do it right or get the hell out of the way so somebody else can".

Ben



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Vipul's Razor and SpamAssassin?

2003-09-22 Thread Benjamin J. Weiss
On Mon, 22 Sep 2003, Gerry Doris wrote:

> On Mon, 22 Sep 2003, Benjamin J. Weiss wrote:
> 
> > > On Mon, 22 Sep 2003, Benjamin J. Weiss wrote:
> > > 
> > > Hmmm, I wonder where the rpm put the spamassassin executable.  Mine is in 
> > > /usr/bin/spamassassin.  See if it's there and it's in your path.
> > 
> > Well, I see a /usr/bin/spamassassin binary.  I'm not sure who the 
> > MailScanner is running as, so I don't know about the path, but I did try 
> > setting the binary path in the MailScanner.conf file:

 
 
> I have no idea why it doesn't work for you.  I haven't touched the Prefix 
> equates at all.  Then again, I installed my last version of SpamAssassin 
> using CPAN.  However, before that I just used their rpm's.  
> 
> BTW, /usr/bin/spamassassin isn't a binary.  It's a perl script.

Sorry, you're correct.  I'm getting tired and sloppy.  I should have 
checked to see if it was, in fact a binary.  Your pointing that out to me 
caused me to look at the script, and it gave me another place to look, to 
wit:

/usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin

Unfortunately, that didn't work either. *sigh*
 
I tried rpm -q --filesbypkg perl-Mail-SpamAssassin

which shows a bunch of files .pm files in 
/usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/

I tried rpm -q --filesbypkg spamassassin

but it was the /usr/bin/spam* scripts and some man files.

At this point I'm afraid I'm going to have to give up.  I don't have the 
time to mess with it.

Thanks for all of your help, though!

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Vipul's Razor and SpamAssassin?

2003-09-22 Thread Benjamin J. Weiss
On 22 Sep 2003, Bret Hughes wrote:

> On Mon, 2003-09-22 at 19:12, Benjamin J. Weiss wrote:
> > On Mon, 22 Sep 2003, Gerry Doris wrote:
> > 
> > > There is no need to mess with MailScanner.  Also, if you check on the
> > > SpamAssassin site you can find rpm's for RH 9.  The MailScanner folks
> > > frown on using these rpm's but they've worked for me.  The other option is
> > > to install SpamAssassin from CPAN.  That's pretty painless and it's
> > > included in the SpamAssassin doc's.
> > 
> > I just installed the SpamAssassin 2.55 rpms.  That part of the install 
> > went smoothly.  At least spamd came up just fine.
> >  
> > I then told Mailscanner to use the SpamAssassin in 
> > /etc/MailScanner/MailScanner.conf, but then whenever I start MS, I get the 
> > following error in my /var/log/maillog:
> > 
> > Sep 22 19:08:03 mail MailScanner[2682]: SpamAssassin installation could 
> > not be found
> > 
> > I've tried every setting I could think of in MailScanner.conf, to no 
> > avail.  I've also googled until my head hurts.  Again, to no avail.
> > 
> > Unless you can shed some light, I'll be going back to the old way of using 
> > procmail to initiate spamassassin, rather than trying to use MailScanner 
> > to do it.
> > 
> 
> What version of MS are you running?
> 
> [EMAIL PROTECTED] MailScanner]# rpm -q mailscanner spamassassin
> mailscanner-4.23-11
> spamassassin-2.55-1

[EMAIL PROTECTED] MailScanner]# rpm -q mailscanner spamassassin
mailscanner-4.23-11
spamassassin-2.55-1

Same versions.

Of course, I had installed this version of SpamAssassin *after* I 
installed MailScanner...

Do I need to re-install MailScanner for it to find S.A.
 
> 
> U can tell MS where to look for SA but I have never had this problem
> 
> [EMAIL PROTECTED] MailScanner]# which spamc
> /usr/bin/spamc

Would you mind either posting or emailing to me your MailScanner.conf file 
for comparison?

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Plea to Linux Users

2003-09-22 Thread Benjamin J. Weiss
On 22 Sep 2003, Jason Dixon wrote:

> On Mon, 2003-09-22 at 20:28, Benjamin J. Weiss wrote:
> 
> > I'd say don't download and compile chrootkit.  Instead, download the 
> > knoppix security tools distribution (http://www.knoppix-std.org/), burn it 
> > to a CD, then boot from it and *then* run chrootkit, which is on the CD.  
> > This way you will *ABSOLUTELY KNOW* that you are running a safe version of 
> > chrootkit that will tell you whether or not you've been compromised.
> > 
> > It takes a bit longer to download, but you'll always have it in your 
> > toolkit, and it makes for great peace of mind.
> 
> Uh, how are you suggesting that downloading chkrootkit from a
> third-party source is any safer from the developer source?  This is why
> you verify the md5 checksum.  

Um...Jason...the CERT training that I went to stated (though I have not 
verified it externally) that it is still possible to fool chkrootkit if 
you are running it in a "compromised environment".  We were taught that 
the best way to go is to run it from a "clean" medium, such as knoppix, to 
ensure that any of the binaries or LKM's aren't spoofing you.

I know, you specifically stated that you should use good binaries...but 
this is easier and (AFAIK) foolproof...

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Vipul's Razor and SpamAssassin?

2003-09-22 Thread Benjamin J. Weiss
> On Mon, 22 Sep 2003, Benjamin J. Weiss wrote:
> 
> > I just installed the SpamAssassin 2.55 rpms.  That part of the install 
> > went smoothly.  At least spamd came up just fine.
> 
> If you end up using MailScanner to call SpamAssassin then you don't need 
> spamd.

I understand, but the install started it automatically.  And I have it 
running right now until I can get MailScanner working properly.
 
> > I then told Mailscanner to use the SpamAssassin in 
> > /etc/MailScanner/MailScanner.conf, but then whenever I start MS, I get the 
> > following error in my /var/log/maillog:
> > 
> > Sep 22 19:08:03 mail MailScanner[2682]: SpamAssassin installation could 
> > not be found
> 
> Hmmm, I wonder where the rpm put the spamassassin executable.  Mine is in 
> /usr/bin/spamassassin.  See if it's there and it's in your path.

Well, I see a /usr/bin/spamassassin binary.  I'm not sure who the 
MailScanner is running as, so I don't know about the path, but I did try 
setting the binary path in the MailScanner.conf file:

SpamAssassin Install Prefix = /usr/bin

And no dice.  I'm still getting the same error.  I've even tried:

SpamAssassin Install Prefix = /usr/bin/spamassassin

Same deal.  So then I tried doing a google on "SpamAssassn Install 
Prefix", and found nothing.


> > Unless you can shed some light, I'll be going back to the old way of using 
> > procmail to initiate spamassassin, rather than trying to use MailScanner 
> > to do it.
> 
> That works but it's slower.

Why?  If spamd is already loaded, wouldn't it be faster for MailScanner to 
use spamc instead?  I thought it would cut on loading time...

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Plea to Linux Users

2003-09-22 Thread Benjamin J. Weiss
On 22 Sep 2003, Jason Dixon wrote:

> Everyone knows the Internet is a dangerous place.  Folks who've been on
> this list for a whileave probably heard me harp about security by now. 
> If you have, then you know I'm a nut when it comes to protecting your
> system - AND - protecting others FROM your system if it's been cracked.
> 
> It is for this reason that I'd like to suggest the following.  Take 10
> minutes to download, compile and run chkrootkit on your Linux systems. 
> Review the output to see if you've been compromised.  If you are, take
> the appropriate steps to isolate and/or repair the damaged system.
 

I'd like to differ with you on a technicality, though not on your 
sentiment.

I'd say don't download and compile chrootkit.  Instead, download the 
knoppix security tools distribution (http://www.knoppix-std.org/), burn it 
to a CD, then boot from it and *then* run chrootkit, which is on the CD.  
This way you will *ABSOLUTELY KNOW* that you are running a safe version of 
chrootkit that will tell you whether or not you've been compromised.

It takes a bit longer to download, but you'll always have it in your 
toolkit, and it makes for great peace of mind.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Vipul's Razor and SpamAssassin?

2003-09-22 Thread Benjamin J. Weiss
On Mon, 22 Sep 2003, Gerry Doris wrote:

> There is no need to mess with MailScanner.  Also, if you check on the
> SpamAssassin site you can find rpm's for RH 9.  The MailScanner folks
> frown on using these rpm's but they've worked for me.  The other option is
> to install SpamAssassin from CPAN.  That's pretty painless and it's
> included in the SpamAssassin doc's.

I just installed the SpamAssassin 2.55 rpms.  That part of the install 
went smoothly.  At least spamd came up just fine.
 
I then told Mailscanner to use the SpamAssassin in 
/etc/MailScanner/MailScanner.conf, but then whenever I start MS, I get the 
following error in my /var/log/maillog:

Sep 22 19:08:03 mail MailScanner[2682]: SpamAssassin installation could 
not be found

I've tried every setting I could think of in MailScanner.conf, to no 
avail.  I've also googled until my head hurts.  Again, to no avail.

Unless you can shed some light, I'll be going back to the old way of using 
procmail to initiate spamassassin, rather than trying to use MailScanner 
to do it.

Thanks!

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: OT: MailScanner question

2003-09-22 Thread Benjamin J. Weiss
> As an aside:
> I just updated my mailscanner and SA and spent about an hour training
> the bayes engine with about 2000 each spam and ham.  I was still getting
> about 10% spam making it through before( actually increased to about 15%
> lately with the orisoft going down and I assume that the verisign crap
> did not help either.
> 
> Unrecognized spam is down to about 1% now at least on my mail.  Now if I
> can just get the spamass. timeouts figured out I think I will be
> grinning and all but spam free. I get about a hundred spams a day and it
> really pisses me off.  now I am happier :)

What's this spamassassin timeout thing you're talking about?

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Fedora

2003-09-22 Thread Benjamin J. Weiss
> > 3. Will the Fedora Project Releases be compatible to existing Red
> > Hat?  In other words, can I upgrade what I have to Fedora or will I have
> > to start with Fedora from scratch?
>
>You can upgrade to the current Red Hat beta via apt-get or yum using
> fedora now.  All I did was the following:

Hey, another thoughtare we going to have to change the list name to
"Redhat and fedora list"? ;p


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Fedora

2003-09-22 Thread Benjamin J. Weiss
> > > You'll have to purchase an Enterprise offering to get support from
> > > RedHat.
> > > But there will surely(?) be auto updating feature provided for Fedora.
> > >
> >
> >Fedora currently supports yum, and apt-get.  I've been using fedora,
> > and before that freshrpms with apt-get, and yum for 6 months.  I've been
> > very happy with them.
>
> Hi Samuel,
>
> I haven't been using them that long but have liked what i've seen,
> especially Synaptic.   I am hopeful that this service will continue.   I
> guess that's the part that Fedora really brought to the table in this
> merger.

I hate to say it, but I'm a bit lazy.  I *love* being able to do an
up2date -u and have all of my out-of-date RPMs updated.  Will Synaptic or
apt-get do this?

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: EMail virus?

2003-09-22 Thread Benjamin J. Weiss
> >>I have updater running every hour...you are lucky, you still didn't
> >>receive these strange messages which are not detected by any av program.
> >>
> >>
> >
> >What are the subject lines?  I'm curious if we're talking about the same
> >email
> >
> >Ben
> >
> we are talking about mail that looks like very convincing message from
> MS with an exe file attached. Subject are different: Latest net update,
> Security patch for MS, etc.

Yep, those are the ones that MailScanner and f-prot are catching on my
machine.   I've been deleting them, but the next few that come in I'll save
and post the headers from MailScanner to show you.

I don't know why your machine isn't catching them.  Mine is.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: EMail virus?

2003-09-22 Thread Benjamin J. Weiss

> >Are you guys updating your f-prot virus signatures?  My f-prot is
catching
> >all of this stuff.  My dates are:
> >
> >[EMAIL PROTECTED] log]# f-prot -verno
> >F-PROT ANTIVIRUS
> >Program version: 4.2.1
> >Engine version: 3.13.4
> >
> >VIRUS SIGNATURE FILES
> >SIGN.DEF created 18 September 2003
> >SIGN2.DEF created 18 September 2003
> >MACRO.DEF created 22 September 2003
> >
> >Ben
> >
> >
> >
> >
> I have updater running every hour...you are lucky, you still didn't
> receive these strange messages which are not detected by any av program.

What are the subject lines?  I'm curious if we're talking about the same
email

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Fedora

2003-09-22 Thread Benjamin J. Weiss

> Fedora Core replaces Red Hat Linux. It is now a more open programming
model
> than RHL was, and so the community will have more involvement and there
> will be more packages. Red Hat, Inc. will put a lot of effort into helping
> Fedora Core grow and improve, the same kind of effort that they put into
> RHL, but Fedora Core will not be a "branded" RH product.
>
> RHEL is Red Hat's primary commercial product which they hope will drive
> they revenues, and with which they hope to compete head-on against
> Microsoft in the corporate space.

I hope that RH isn't shooting themselves in the foot with this.  I think I
understand the rationale, but it was the close branding between Red Hat
Linux and Red Hat Enterprise Linux that convinced my boss to go ahead and
purchase RHEL Advanced Server.  I'd already deployed a couple of RH 9 boxes
and showed him what RH was capable of, and when he found out that there was
a commercial version that had enterprise support, he decided to purchase.
He viewed RHL as the "entry level" and RHAS as the "professional/commercial
level".  I don't think that he's anywhere near alone in that view.

I'm afraid that by making this move, RH may do two things:

1) Fedora won't be as popular with the newbies, since it won't have the
famous "Red Hat" name, and the distribution will lose newcomers to Suse,
Mandrake, and Debian.

2) RHEL will lose market share because they won't have the hordes of people
trying/using RHL at home or for small project who then look to upgrade to
RHEL.

I'm worried, I am.

Ben

P.S.  What'll happen to RHN for the free linux??


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Fedora

2003-09-22 Thread Benjamin J. Weiss
> >Does this mean that I won't be downloading RH 10, but instead will be
> >downloading Fedora 10 or something?
>
> Fedora Core 1 (Cambridge), apparently, which will contain everything you
> expected to see in Red Hat Linux 10 and more due to the contributions of
> the Fedora Project.

Okay, now for the big question:  RHCE?

As I understand it, the current RHCE exam is based on RH 8.0.  If RedHat is
now dropping the free version of RedHat in favor of the Fedora Project, is
the RHCE going to be splintered?  Or are they going to change the test to be
based on the Enterprise Linux?

Now I know I must be getting old, I'm getting tired of all the change that
abounds...*sigh*

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: EMail virus?

2003-09-22 Thread Benjamin J. Weiss
> >>I have been adding rules to sendmail all day yesterday and today
> >>blocking the spam...
> >
> >I'm still trying to find the time to figured out why neither f-prot nor
> >MailScanner is catching these.  They've caught other stuff but not this
> >one.  The attachement has a .exe extension which I block by default, and
> >not even the attachment is getting stripped.
> >
> >Is anybody/everybody else seeing this make it through
> >MailScanner/f-prot?
> >
> I have like this since Sept. 19 th - avg. 400 per day. I have also add
> attachment filtering with rule to block application/x-msdownload and
> this stop like these messages because they have an exe attachment which
> my 4 AV programs missed (F-prot, Antivir, Clamav, Nod32).

Are you guys updating your f-prot virus signatures?  My f-prot is catching
all of this stuff.  My dates are:

[EMAIL PROTECTED] log]# f-prot -verno
F-PROT ANTIVIRUS
Program version: 4.2.1
Engine version: 3.13.4

VIRUS SIGNATURE FILES
SIGN.DEF created 18 September 2003
SIGN2.DEF created 18 September 2003
MACRO.DEF created 22 September 2003

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Vipul's Razor and SpamAssassin?

2003-09-22 Thread Benjamin J. Weiss
> > Okay, I have MailScanner working with f-prot, and BOY is it catching all
> > of those Swen.A virii!  However, I can't seem to tell whether or not the
> > Vipul's Razor that I installed yesterday is working.
> >
> > I'm running SpamAssassin 2.50, and it seems to be working fine.  I've
> > added 'use_razor2 1' to /etc/mail/spamassassin/local.cf and restarted.
> >
> > If I run razor-check against a spam that I've saved to a separate file,
it
> > is identified.  However, if I put the message through the spamc client,
> > while I get a bunch of other rules, it doesn't show any rule checks for
> > razor.
> >
> > Any ideas would be appreciated!
> >
> > Ben
>
> A couple of items...
>
> 1. If you're using MailScanner then you don't need to run spamc/spamd.
> MailScanner accesses SpamAssassin's libraries directly for increased
> speed.

Okay, I'll make the change.  I have been running SA with procmail for
awhile, and just installed MS yesterday.  But I'm alway interested in
increasing speed. :)

> 2. If you're running MailScanner and are using it to call SpamAssassin
> then the SpamAssassin rules go in
> /etc/MailScanner/spam.assassin.prefs.conf.  This file is used instead of
> /etc/mail/spamassassin/local.cf so any changes you make there aren't going
> to take affect.  Some people symbolic link local.cf to
> spam.assassin.prefs.conf.
>
> 3. I don't believe it's necessary to add the rule to use razor in the
> config files.  It won't do any harm but it's the default.

I don't know one way or the other, but I finally got a "RAZOR2" line in a
spam a little while ago, so at least now I know it's working. :)

> 4. SpamAssassin 2.50 is pretty old.  You should upgrade it to 2.55.  There
> were several bugs fixes added and the spammers started customizing the
> emails to get around the rules in 2.50.  2.55 is MUCH better.

Ack.  Well, I *had* installed the rpm for 2.44 at first, and then I was
stupid and installed the perl version of 2.50 on top of that.  I didn't want
to mess with it again until RH 10 (or fedora 10 or whatever RH is becoming)
comes out, but you've convinced me.  I guess I'll take a couple of hours
tonight and rpm -e the 2.44 version and uninstall the 2.50 version, and try
to install the 2.55 version.  Will I need to re-install MS in order for it
to see the new SA, or will I just have to make those changes to the
configuration file that you mentioned?

> 5. If you include the X-MailScanner id's in the header you should change
> the default.  Some of the latest virii are faking these header lines to be
>
> X-MailScanner: found to be clean
>
> since some people were screen on these.

Um...what should I change it to, and in what file?

>
> I suggest you make sure you're edited MailScanner.conf to tell it to use
> SpamAssassin and turn on the spamassassin display.  There are at least two
> of these.  One shows the rules that were triggered and the other shows the
> actual numeric scores.  If you want to see if razor is working then you
> just need to turn on the rule hits (check the header of this message)
>
> If you really get into this then instal DCC and pyzor.  SpamAssassin will
> automatically use them too.  Also, install ClamAV and turn it on inside of
> MailScanner.  It's a great open source virus scanner.  MailScanner will
> then scan all your emails with F-Prot and ClamAV.  The idea is that if one
> is a little slow in updating its virus files then other is likely picking
> off the new variants!

LOLMy server is just a dinky 866Mhz Celeron PIII!  If I'm running razor,
pyzor, DCC (whatever that is), f-prot and clam-av, won't my little processor
overheat? ;)

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Fedora

2003-09-22 Thread Benjamin J. Weiss
So, now I'm confused.

Does this mean that I won't be downloading RH 10, but instead will be
downloading Fedora 10 or something?

Ben
- Original Message -
From: "Sean Estabrooks" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, September 22, 2003 12:10 PM
Subject: Fedora


>
> Just discovered this announcement from earlier today and it
> looks to be worth sharing.
>
> http://www.fedora.us/
> http://fedora.redhat.com/
> http://fedora.redhat.com/about/rhel.html
>
> Cheers,
> Sean
>
>
> --
> redhat-list mailing list
> unsubscribe mailto:[EMAIL PROTECTED]
> https://www.redhat.com/mailman/listinfo/redhat-list
>


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: EMail virus?

2003-09-22 Thread Benjamin J. Weiss
My newly-installed Mailscanner/f-prot combo is catching all of the Swen.A
virii hitting my server today.  They aren't showing up as spam, however.

Ben
- Original Message -
From: "Ed Wilts" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, September 22, 2003 11:28 AM
Subject: Re: EMail virus?


> On Mon, Sep 22, 2003 at 09:25:53AM -0700, Simran Hansrai wrote:
> > I have been adding rules to sendmail all day yesterday and today
> > blocking the spam...
>
> I'm still trying to find the time to figured out why neither f-prot nor
> MailScanner is catching these.  They've caught other stuff but not this
> one.  The attachement has a .exe extension which I block by default, and
> not even the attachment is getting stripped.
>
> Is anybody/everybody else seeing this make it through
> MailScanner/f-prot?
>
>
> --
> Ed Wilts, Mounds View, MN, USA
> mailto:[EMAIL PROTECTED]
> Member #1, Red Hat Community Ambassador Program
>
>
> --
> redhat-list mailing list
> unsubscribe mailto:[EMAIL PROTECTED]
> https://www.redhat.com/mailman/listinfo/redhat-list
>


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: DHCP appears not to be working

2003-09-22 Thread Benjamin J. Weiss
On Mon, 22 Sep 2003, Vidiot wrote:

> >Try this:
> >
> >On the Win2K machine (while it is hooked up to your home network), open a 
> >command prompt and type:
> >
> >ipconfig /release
> >
> >ipconfig /renew
> >
> >Your dhcp client on the win2k machine is probably thinking that it already 
> >has a lease that hasn't expired, and doesn't need a new one.
> >
> >Ben
> 
> Nope.  The command can back and said that there aren't any DHCP addresses
> configured to release.
> 
> I've changed the config file to look like:
> 
> subnet 192.168.1.0 netmask 255.255.255.0 {
> # --- default gateway
> option routers  192.168.1.1;
> option subnet-mask  255.255.255.0;
> 
> option domain-name  "vidiot.com";
> option domain-name-servers  192.168.1.1;
> 
> #   option time-offset  +6;  # GMT
> #   option ntp-servers  192.168.1.1;
> #   option netbios-name-servers 192.168.1.1;
> # --- Selects point-to-point node (default is hybrid). Don't change this unless
> # -- you understand Netbios very well
> #   option netbios-node-type 2;
> 
> range dynamic-bootp 192.168.1.11 192.168.1.20;
> #   default-lease-time 21600;
> #   max-lease-time 43200;
> 
> host usdmsnros1ws324 {
> hardware ethernet 44:45:53:54:42:00 ;
> }
> }
> 
> 
> I did this after doing some man page reading.  I've tried both MAC addresses
> that I see displayed when doing "ipconfig /all", but it still won't get an
> address.
> 
> Oh, and yes, I stop and start the dhcp daemon after changing the config file.

Okay, 2 questions:

1) do you have any other machines on the network that *are* able to 
receive dhcp leases?

2) Have you tried it *without* the MAC address specification?

Typically when I'm trying a new server, I try it with the simple stuff 
before I start using the esoteric settings (like MAC address 
restrictions).

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Vipul's Razor and SpamAssassin?

2003-09-22 Thread Benjamin J. Weiss
Okay, I have MailScanner working with f-prot, and BOY is it catching all 
of those Swen.A virii!  However, I can't seem to tell whether or not the 
Vipul's Razor that I installed yesterday is working.

I'm running SpamAssassin 2.50, and it seems to be working fine.  I've 
added 'use_razor2 1' to /etc/mail/spamassassin/local.cf and restarted.

If I run razor-check against a spam that I've saved to a separate file, it 
is identified.  However, if I put the message through the spamc client, 
while I get a bunch of other rules, it doesn't show any rule checks for 
razor.

Any ideas would be appreciated!

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: DHCP appears not to be working

2003-09-22 Thread Benjamin J. Weiss
On Mon, 22 Sep 2003, Vidiot wrote:

> I have a W2K laptop that I am attempting to connect to my internal LAN, but
> DHCP appears to not be working.  THe daemon is running:
> 
>   ps -eaf | grep dhcp
>   root 26358 1  0 Sep03 ?00:00:03 /usr/sbin/dhcpd eth1
> 

> 
> The 169 address is the last used address when it was connected at work.
> 
> Anyone have an idea as to why DHCP is not responding?

Try this:

On the Win2K machine (while it is hooked up to your home network), open a 
command prompt and type:

ipconfig /release

ipconfig /renew

Your dhcp client on the win2k machine is probably thinking that it already 
has a lease that hasn't expired, and doesn't need a new one.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Redhat 9 terminal problems

2003-09-22 Thread Benjamin J. Weiss
On Mon, 22 Sep 2003, Chris Mason wrote:

> On my Redhat 9 systems, when I ssh to the system using SecureCRT, I get
> problems with programs such as ntsysv and lokkit, I think they use ncurses.
> When the program would normally draw lines, I get 
> 
> ”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â
> 
> I've tried every terminal emulation I have available but nothing works.
> What's going on?

I'm using PuTTY, and I had similar issues when set to UTF-8.  When I 
changed to ISO-8859-1:1998 (Latin-1, West Europe), ntsysv shows nice 
lines.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


OT: MailScanner question

2003-09-21 Thread Benjamin J. Weiss
Okay, I know that this is Off Topic, but if the answer is easy, I'd rather 
not have to join another list.  If it's involved and there's not an 
easy-recipe web site (I haven't found one after quite a bit of search) 
then I'll go join the mailscanner list.

I've dedicated this weekend to making my mail server a safer place to 
live. :)  I finished getting Vipul's Razor installed (and am now waiting 
for a spam to come it to see if spamd is auto-recognizing it as 
advertized).  

Now I'm trying to install anti-virus.

I've got f-prot working from the command line, and have been reading the 
docs for MailScanner to try and get it installed.  They seem to have a 
bunch of stuff related to spam-assassin, but I have that running via my 
procmail.  Do I have to stop using spam-assassin via procmail and start 
using it in Mail-Scanner, or is it an optional thing?

Thanks!

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Up2date update dependency hell

2003-09-21 Thread Benjamin J. Weiss
On Sun, 21 Sep 2003, Richard S. Crawford wrote:

> It's been awhile since I've used up2date on my system.  Today I tried,
> and discovered that the SSL certificate I'd been given earlier had
> expired.  Going to Red Hat's website, I found that I can download a new
> version of Up2date with the newer SSL certificate installed.
> 
> I downloaded the RPM and tried to install it.  I got this message:
> 
> # rpm -Uvh up2date-3.0.7.2-1.i386.rpm
> error: Failed dependencies:
>   up2date = 3.0.7 is needed by (installed) up2date-gnome-3.0.7-1
> 
> No problem, I figure, I'll just uninstall up2date-gnome-3.0.7-1, and
> download the newer version.
> 
> # rpm -e up2date-gnome-3.0.7-1
> Error: Failed dependencies:
>   up2date-nomge >= 3.0.1 is needed by (installed)
> rhn-applet-2.0.9-0.8.0.1
> 
> Argh.
> 
> Okay, maybe I can just upgrade up2date-gnome:
> 
> # rpm -Uvh up2date-gnome-3.0.7.2-1.i386.rpm
> Error:Failed dependencies:
>   up2date = 3.0.7.2 is needed by up2date-gnoe-3.0.7.2-1
> 
> Okay, maybe I can update up2date:
> 
> 
> # rpm -Uvh up2date-3.0.7.2-1.i386.rpm
> error: Failed dependencies:
>   up2date = 3.0.7 is needed by (installed) up2date-gnome-3.0.7-1

You have to download all of the files (I think that there were three, 
up2date, up2date-gnome, and up2date-source or something like that) and 
then you have to run 

rpm -Uvh up2date*.rpm

Then RPM will auto-resolve the dependencies and install.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: remove old kernel ?

2003-09-21 Thread Benjamin J. Weiss
> Is there a way to list the kernels present on the system?

rpm -q kernel
 
> Also, how much space does a kernel take up?

rpm -qi kernel

or, if you want to get fancy:

rpm -q --queryformat "%{NAME}-%{VERSION}-%{RELEASE}: %{SIZE}\n" kernel




-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Apache Issues

2003-09-19 Thread Benjamin J. Weiss
> > Hey all,
> > 
> > After upgrading one server to httpd-2.0.40-11.7.i386.rpm via up2date,
> > the webserver now only answers Error 400.  The only change was this new
> > package (No config changes).
> > 
> > I host 3 domains on this box, and none of them answer...  
> > 
> > Anyone have any ideas... I've already tried looking for a obvious signs
> > of an attack without any.
> 
> Are you sure that it didn't change your config files?  When I updated, not 
> only did it replace my log file, but it created an 
> /etc/httpd/conf.d/ssl.conf file that I had deleted.
> 
> Might want to double check to be sure.
> 
Ack, I hate replying to myself, but I just realized that in my sleepiness, 
I said "log file", when I meant "httpd.conf file".

Sorry about that.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Apache Issues

2003-09-19 Thread Benjamin J. Weiss
> Hey all,
> 
> After upgrading one server to httpd-2.0.40-11.7.i386.rpm via up2date,
> the webserver now only answers Error 400.  The only change was this new
> package (No config changes).
> 
> I host 3 domains on this box, and none of them answer...  
> 
> Anyone have any ideas... I've already tried looking for a obvious signs
> of an attack without any.

Are you sure that it didn't change your config files?  When I updated, not 
only did it replace my log file, but it created an 
/etc/httpd/conf.d/ssl.conf file that I had deleted.

Might want to double check to be sure.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: sendmail->postfix problem

2003-09-19 Thread Benjamin J. Weiss
> Check to see what the permissions are on /var/spool/mail/postfix.
>
> Though, really, you should probably have 'postfix' aliased to a real user.

Um...sort of.

Look in /etc/postfix/aliases.  There is a line that by default reads

root:postfix

The comment specifically states that you have to change the 'postfix' to a
real email account.

That should fix ya.

Ben

> On Wed, 17 Sep 2003, Peter Skensved wrote:
>
> >   I'm considering migrating from sendmail to postfix but I have run into
> > something which looks like a permission problem. I followed the
directions
> > in the RedHat postfix HOWTO, stopped sendmail, started postfix and sent
> > mail to the machine. However, it bounces telling me that :
> >
> >
> > Final-Recipient: rfc822; [EMAIL PROTECTED]
> > Action: failed
> > Status: 5.0.0
> > Diagnostic-Code: X-Postfix; can't create user output file. Command
output:
> > procmail: Couldn't create "/var/spool/mail/postfix"
> >
> >
> >  /var/spool/mail is currently owned by root:mail with permissions 775
> >
> >  Do I just change the ownership to postfix ?? And group what ? mail ?
>
> --
> Mike Burger
> http://www.bubbanfriends.org
>
> Visit the Dog Pound II BBS
> telnet://dogpound2.citadel.org or http://dogpound2.citadel.org:2000
>
> To be notified of updates to the web site, send a message to:
>
> [EMAIL PROTECTED]
>
> with a message of:
>
> subscribe
>
>
> --
> redhat-list mailing list
> unsubscribe mailto:[EMAIL PROTECTED]
> https://www.redhat.com/mailman/listinfo/redhat-list
>


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: OT: Verisign petition

2003-09-19 Thread Benjamin J. Weiss
> Not to worry, have implimented BIND's update to assist in the fightback.
> For every measure these scumbags take to force there spam upon us, a new
> counter measure will appear :)

I'll be installing the new bind as soon as RH releases the rpm.  I sure hope
it's soon.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: sendmail vulnerability

2003-09-17 Thread Benjamin J. Weiss
> Any idea when Redhat is going to come up with rpms for this?
> 
> http://www.sendmail.org/8.12.10.html

They already have.  It's called "postfix". :)

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: NTP reminders

2003-09-17 Thread Benjamin J. Weiss
> > Check your log messages again.  Your post showed that you're getting
> > an "invalid host" error when trying to find time.nist.gov.  You can
> > either try their ip, which is 192.43.244.18, or you can use a linux
> > timeserver, such as ntp.tuxfamily.net.
>
>
> yeah that is a strange error:
>
> from my /etc/ntp.conf file
>
>  snip -
>
> server time.nist.gov
> fudge  time.nist.gov stratum 10
>
>  snip 
>
> hostname resolution is found:
>
> [etc]# host time.nist.gov
> time.nist.gov. has address 192.43.244.18

Noah,

Okay, I did some more checking.  Just because the host resolves does *not*
mean that it is actually serving the ntpd service.  You can tell if it is or
not (I think, since I can't find a man entry) by typing "ntpq ".
When I tried that on the time.nist.gov server, I didn't get anything.  Ditto
when I tried ntp.tuxfamily.net.  However, when I tried it against
clock.redhat.com, I got a response.  Try changing your ntp.conf to
clock.redhat.com.

Also, check that ntp is open on your iptables.  Try "iptables -L".  You
should see a couple of lines something like:

ACCEPT udp  --  clock.redhat.com anywhere   udp spt:ntp
dpt:ntp
ACCEPT udp  --  clock.redhat.com anywhere   udp spt:ntp
dpt:ntp

The ntp daemon is supposed to automatically open the iptables firewall, but
you might need to restart the service (service ntpd restart) to do it.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: NTP reminders

2003-09-17 Thread Benjamin J. Weiss
> looks like ntpd is starting fine.  okay from /var/log/messages
>
> Sep 17 09:27:57 tsunami ntpd[22727]: ntpd [EMAIL PROTECTED] Sat Aug 31 18:27:29
EDT 2
> 002 (1)
> Sep 17 09:27:57 tsunami ntpd: ntpd startup succeeded
> Sep 17 09:27:57 tsunami ntpd[22727]: precision = 13 usec
> Sep 17 09:27:57 tsunami ntpd[22727]: kernel time discipline status 0040
> Sep 17 09:27:57 tsunami ntpd[22727]: getnetnum: "time.nist.gov" invalid
host
> number, line ignored
> Sep 17 09:27:57 tsunami ntpd[22727]: frequency initialized 0.000 from
> /etc/ntp/drift
> Sep 17 09:27:57 tsunami ntpd[22727]: bind() fd 10, family 2, port 123,
addr
> 224.0.1.1, in_classd=1 flags=0 fails: Address already in use
> Sep 17 09:27:57 tsunami ntpd[22727]: ...multicast address 224.0.1.1 using
> wildcard socket
>
>
> I am still seeing the time off by about an hour and 9 minutes.

Check your log messages again.  Your post showed that you're getting an
"invalid host" error when trying to find time.nist.gov.  You can either try
their ip, which is 192.43.244.18, or you can use a linux timeserver, such as
ntp.tuxfamily.net.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: NTP reminders

2003-09-17 Thread Benjamin J. Weiss
> In /etc/ntp.conf set the server to whatever you want to use.
> server xxx.xxx.xxx.xxx
> or
> server time.nist.gov
>
> and set the drift file to
> driftfile /etc/ntp/drift
>
> Then "service ntpd start"
>
> That should be all you need.

Or, to do it from the gui:

Go to the "Red Hat button" (what the heck do we call it, anyway?), then
select "System Settings", then "Date and Time".  There is a box to "enable
Network Time Protocol".  That should take care of it for you.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: NTP reminders

2003-09-17 Thread Benjamin J. Weiss
> okay its Been a while since I fiddled with ntp on a redhat machine.
> my clock is way off.  is there are good admin tutorial for setting up ntp?
>
> thanks in advance,

What version of RedHat are you running?

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Prefered backup method?

2003-09-17 Thread Benjamin J. Weiss
> I recently set up a NAS box for a customer, using a Promise chassis and 15
> 250GB drives, which resulted in 3.25TB real useful space and cost a total
> of $6,000 (overall cost per GB: $1.85). These numbers include a hot spare
> drive and the parity drive, so only 13 drives are "useful" and the box
> should be really, really, really reliable.

This is true, but there is one problem in the disaster recovery universe
that it does not resolve:  offsite storage.  If your backups are routinely
kept in the same place as your servers, and you have a catastrophic event,
you will have lost your data forever.

Now, if your NAS is on the other end of a fast fiber connection a couple of
miles down the road ;)

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: finding bootp client

2003-09-12 Thread Benjamin J. Weiss
> Hi
> I have an installation of ~80 windows boxes served by a RH7.3 dhcpd
> server. I am getting log entries:
>
> Sep 12 10:17:38 gabriel dhcpd: BOOTREQUEST from 00:00:1d:0c:b9:2d via eth0
> (non-rfc1048)
> Sep 12 10:17:38 gabriel dhcpd: Ignoring BOOTP request from client
> 00:00:1d:0c:b9:2d via eth0
>
> These happen every couple of seconds and my log files are huge. The lease
> file does not show an entry for this MAC adress. Short of going to each
> computer and checking the MAC address manually is there any way to track
> this computer down? Can you ping a MAC address some way and then follow
> the lights on the hub?

I think you can just type "arp" at the command line, and it will give you a
list of MAC addresses of which it is aware...

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Linux on DEC Alpha?

2003-09-12 Thread Benjamin J. Weiss
I've got a DEC Alpha that's being freed up by software/hardware upgrades.
I'd like to load RedHat 9 on it.  Can I just install from the Shrike CD's,
or will they not work on Alpha?

Thanks!

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: To Be Or Not To Be

2003-09-12 Thread Benjamin J. Weiss
> I know I'm really late with this post, but I've been behind in catching up
> with the news. What's the verdict on using RedHat Linux? Are the users
gonna get
> slapped with a fine? Did SCO finally settle, or will the software police
come
> to my door when I turn on my Linux shell?

It hasn't gone to court yet, and probably won't until early 2005.  In the
meantime, SCO is trying to scare everybody into giving them money (which is
technically extortion).

All of the legal analyses I've read point out that legally, even if SCO wins
its case against IBM (which isn't looking very probable at this point) they
have no legal avenue to pursue linux users.

I'm no lawyer, but *our* lawyer says that we're safe to use RedHat.  You
should be also.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: RH9, Sendmail, openssl and Eudora

2003-09-12 Thread Benjamin J. Weiss
> Hi,
>
> I have been searching for an answer on this one, and hope that someone on
> this list can help out.  I support a large number of windows users, and
for
> the most part the crowd is either using outlook or eudora for their
> MUA.  No problems with that.  I have succeeded in setting up secure pop
and
> secure imap for the both of these user groups.
>
> The problem I have, is setting up STARTTLS for the Eudora users.  I want
to
> be able to offer secure sending of mail, and for all the fighting I have
> done, I can not get Eudora to play nicely with RH9.  I have done some
> digging, and realize that it's to do with the version of openssl that is
> used in this release of RedHat.  What I would like to know is, what's the
> best way to get these to entities to play with each other, in a secure
> way.  (I have the auth part setup and eudora is using the CRAM-MD5 method,
> but that alone, does not protect the email, just the name/password).

If you figure this out, please post a HOWTO or something, as this is the
last and only reason that I'm using Outlook Express.

Thanks!

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Should we stay with M$

2003-09-11 Thread Benjamin J. Weiss
> All this I understand.  Though you can get Apache for Windoze.  I agree
with you though.

Okay, how about this:  How many Windoze virii/worms/trojans have come out in
the last year?  (Hint:  Check out http://www.cert.org or
http://www.sans.org ).  How much productivity has been lost in just the last
month on Microsoft platforms, versus unix/linux platforms?

If nothing else, that should get them thinking...


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: create bootable CD

2003-09-09 Thread Benjamin J. Weiss
> I've ventured down the new (for me) path of downloading RH9.  Seemingly
they
> downloaded just fine.
> I only have a CD burner on my Win2K system.  I used Easy CD Creator to
burn
> the CD's.
>
> When I go to do a new install on my Intelx86,  itstarts through the
install
> until it gets to what looks to be looking for the kernel image.  Then It
says
> it can't find the image.  Now this is the sam CD that I am running this
> install program from.

I had an issue with this when I tried to burn my cd's at 32x speed.  It went
away when I tried burning them at 8x speed.  But then, I have a cheap
burner. :)

Also, I saw a thread earlier that the RH installer has a problem with large
amounts of memory when the cdrom drive has dma enabled.  (large in the case
of the thread was 512M RAM).  You might try seeing if you can turn off dma
to your cdrom in your computer's BIOS and try installing again.

HTH,

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: linux in windows environment for file serving

2003-09-09 Thread Benjamin J. Weiss
> > Also, do you know if Linux can support Raid 5 easily or is it a pain in
> > the butt to get setup properly?
>
> Support is good.  Obviously, you'll want to research your options and
> make an educated choice.  If you're going with software RAID, you'll be
> fine, but most folks will tell you to do hardware RAID.  If you do, make
> sure you find a vendor that supports Linux and offers cards that rebuild
> on the fly.

I'm one of those folks who would recommend hardware raid.  Software raid
just eats up too much cpu (IMHO).  We've been using Adaptec cards, both old
and new.  We're currently running RedHat AS 2.1 for our Oracle DB server,
which has two Adaptec RAID cards:

An Adaptec 532 RAID controller for our RAID 1 mirrored boot disks, and
an Adaptec 5301/128 RAID controller for our data disks.

Work great, never had an issue.  And, in my opinion (I'm sure I'll get some
disagreement from *somebody*), Adaptec is worth the extra money.

My $0.02 USD...:)

Ben

P.S. You can set it up such that your file server will authenticate to your
Windows NT domain through Samba.  I set it up once as a test, and it worked
great!  Unfortunately I have slept since then, so you'd have to go to the
samba website and docs to see how to do it.


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: linux in windows environment for file serving

2003-09-09 Thread Benjamin J. Weiss
> > Also, do you know if Linux can support Raid 5 easily or is it a pain in
> > the butt to get setup properly?
>
> Support is good.  Obviously, you'll want to research your options and
> make an educated choice.  If you're going with software RAID, you'll be
> fine, but most folks will tell you to do hardware RAID.  If you do, make
> sure you find a vendor that supports Linux and offers cards that rebuild
> on the fly.

I'm one of those folks who would recommend hardware raid.  Software raid
just eats up too much cpu (IMHO).  We've been using Adaptec cards, both old
and new.  We're currently running RedHat AS 2.1 for our Oracle DB server,
which has two Adaptec RAID cards:

An Adaptec 532 RAID controller for our RAID 1 mirrored boot disks, and
an Adaptec 5301/128 RAID controller for our data disks.

Work great, never had an issue.  And, in my opinion (I'm sure I'll get some
disagreement from *somebody*), Adaptec is worth the extra money.

My $0.02 USD...:)

Ben

P.S. You can set it up such that your file server will authenticate to your
Windows NT domain through Samba.  I set it up once as a test, and it worked
great!  Unfortunately I have slept since then, so you'd have to go to the
samba website and docs to see how to do it.


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Cron job to copy files from windows server?

2003-09-09 Thread Benjamin J. Weiss
> Hello,
>
> I've got a Windows 2000 machine that I'm using as a web server. As a
> safeguard, I've got a redhat 9 machine that I want to mirror all the web
> sites on. I manually copied all the sites over, and setup apache. My
> question is, I'd like to set up a cron job to once a week copy the
> contents of folders on the windows system and replace the content in the
> same folders on the redhat server. Is that possible?

The easiest solution would probably be the following:

Go to http://www.chiark.greenend.org.uk/~sgtatham/putty/ and get the
pscp.exe package.  It is a secure copy client for windows, and it is
strictly command-line.  You should be able to write a batch file to call it
and copy your files to the redhat box.

NOTE:  You'll have to authenticate from the windows box to the redhat box.
This means either that you will have to store the redhat account password in
the windows box or a certificate.  Storing the password is dangerous,
because if somebody compromises your windows box, they'll have your redhat
password.  However, I do not know how to do the stored certificate thing, so
maybe somebody else here can help with that one.

Anyway, once you have written the batch file, use the windows "AT" command
to set it up to run at a specific time each week, and you're done.

To implement a bit more safety, I'd set up a non-priviledged account that
was chrooted to a directory in /tmp and use that to copy the files over.
Then have a cron job on the redhat box that will check the next day for any
files in that directory and copy them to the appropriate place on the redhat
server.  You can still get hacked if somebody compromises your windows box,
but it would be a bit more difficult.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: remote dumps from rh7.3 to tape drive on solaris8

2003-09-09 Thread Benjamin J. Weiss
> hey all,
>
> i want to dump a rh 7.3 box without a tape drive to a solaris 8 box
> with one.  i've set up ssh between the root accounts and the dump
> returned a successful status.  but now i don't know what i can do with
> this tape.  i can't get ufsrestore to access the contents...  i've
> heard that dumps are picky and very os dependent- is there anything i
> can do to use these tapes?

Have you looked into amanda?  (http://www.amanda.org/)  It seems to be
tailor made for your situaion...

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: strange email behavior

2003-09-09 Thread Benjamin J. Weiss
> > No, read up in "man fetchmail" on how to specify the target user
> > in the config file, e.g. with "is marc". But fetchmail is mighty
> > with regard to config options, so there are several ways.
>
> Actually...
>
> -
> set daemon 60
>
> poll   mail.adlerpacific.com
>proto pop3
>user ???
>pass ???
>is  marc
>and wants mda "/usr/bin/formail -ds /usr/bin/procmail"
>fetchall
> -
>
> This is the content of both my /etc/fetchmailrc and ~/.fetchmailrc
> files. "is marc" was already there.
>

Marc, you don't have to do the 'mda' line.  Leave it just going to yourself,
then run formail from procmail.  My fetchmailrc is as follows:
--
set syslog
set postmaster "benjamin"
set bouncemail
set no spambounce
set properties ""
set daemon 600
poll imap.us.army.mil with proto IMAP
   user '' there with password '**' is 'benjamin' here
options fetchall ssl

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: adding user with chmod 755

2003-09-08 Thread Benjamin J. Weiss
Ack.  sorry, I put it into the wrong place myself!  Thanks! :)

Ben
> Ok.  Finally found it.  I added a line to the end of /etc/login.defs for:
> UMASK   022
> and that did the trick.
>
> Thanks
> Steve
>
> At 12:24 PM 9/8/2003 -0500, you wrote:
> > > Is there something I am missing here that would allow me to user
useradd
> > > and have it automatically set the new users home directory to 755 so
that
> > > it can be used by the web server without having to go back and chmod
the
> > > directory?  I am using RedHat 9.0 and this would be done from the
command
> > > line, not Gnome.
> >
> >The command that you're looking for is umask.  Check the man pages, the
> >command is a bit backwards, from my way of thinking.
> >
> >You'll probably change the setting in /etc/bashrc.
> >
> >Ben
>
>
>
> --
> redhat-list mailing list
> unsubscribe mailto:[EMAIL PROTECTED]
> https://www.redhat.com/mailman/listinfo/redhat-list
>


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: RH 9 Postfix and Squirrelmail?

2003-09-08 Thread Benjamin J. Weiss
> Hello all,
>
> Running RH 9 with Postfix and have been very happy with the results. I
also
> installed Squirrelmail via the cd and as I run through the various config
> info it appears that the default setup is for Sendmail.
> I was wondering if anyone else has Squirrelmail up had running with
Postfix?
> Hope I haven't overlooked anything simple..oh like the postfix site.
Heading
> there now :o)

I have it running, though it's been awhile since I set it up.  What problems
are you having?

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: adding user with chmod 755

2003-09-08 Thread Benjamin J. Weiss
> Is there something I am missing here that would allow me to user useradd
> and have it automatically set the new users home directory to 755 so that
> it can be used by the web server without having to go back and chmod the
> directory?  I am using RedHat 9.0 and this would be done from the command
> line, not Gnome.

The command that you're looking for is umask.  Check the man pages, the
command is a bit backwards, from my way of thinking.

You'll probably change the setting in /etc/bashrc.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


RHCE Exam book recommendations, was: Re: Samba Help !!! Please !!!

2003-09-08 Thread Benjamin J. Weiss
> On Mon, 2003-09-08 at 09:06, Benjamin J. Weiss wrote:
> > > Hi all,
> > >
> > 
> > > Removed my resolv.conf file off of Linux Box.
> >
> > I have no idea why you would do that.  Anybody else know?
>
> He's prepping for the troubleshooting section of the RHCE exam.  ;-)

*grin*

I'm getting ready to start studying for RHCE myself, and am about to pick up
the RHCE Red Hat Certification Engineer Linux Study Guide
(http://www.bookpool.com/.x/ezz9dsejf4/sm/0072224851).  Do you have nay
recommendations?

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Service script not killing process.

2003-09-08 Thread Benjamin J. Weiss
> talk2UtimeHi all,
>
> I have the following script to run a service under linux redhat 9.0 and it
> worked when I was editing it initially. However, i've left the box on for
a
> few weeks now and I can't restart the services any more.
>
> I tried killing the process manually using "kill procid" at the terminal
> interface and that didn't kill it either. The process is definately
running.
>
> What can I do to make sure that this process is killed?

I won't try to help you with the script part, but you should be able to
manually kill the process with:

kill -9 `cat /var/run/talk2Utime-chatserver.pid`

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


Re: Linux and XP Win sharing files

2003-09-08 Thread Benjamin J. Weiss
> I have a XP computer and a Linux Red Hat 8.0 on
> network. Also, I enabled the file C:\sharing to share
> this folder to network.
> I want to share files between XP and Linux
> How do I enable the sharing files at Linux ?
>
> How do I set up XP to get the shared files from Linux
> ? And how do I set up Linux to get the shared files
> from XP ?
>
> I know samba would be answer for Linux but I do not
> know how to set up it and how to Linux get the shared
> files from XP

Okay, on the linux box, ensure that you are running ssh.  Then, on the XP
box, install WinSCP (http://winscp.sourceforge.net/eng/), which will allow
you to copy files back and forth in a secure yet easy way.

If you are on the linux box and want to access files on the XP box, you'll
probably use smbclient, though I don't have any experience in that area.

Ben


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list


  1   2   3   >