Re: [SLUG] redhat 7.1 firewall

2001-09-24 Thread Rick Moen

begin John Clarke quotation:

 *DON'T* do this on Solaris or you'll get a nasty shock:
 
 NAME
  killall - kill all active processes
 
It's the same on HP/UX, by the way.

-- 
Cheers,  A Discordian is a Taoist with a very strange sense of humour 
Rick Moen and the inability to sit still.
[EMAIL PROTECTED]   -- Rabbi Kwan Chi Sun Lieberwitz, _Jews for Buddha Cabal_

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] redhat 7.1 firewall

2001-09-24 Thread Jobst Schmalenbach

On Mon, Sep 24, 2001 at 03:44:10PM +1000, Jill Rowling ([EMAIL PROTECTED]) wrote:
 hehehe it had to be sendmail...
 
 $ cd /var/run
 $ for i in * ; do if [ -f $i ] ; then wc -l $i; fi; done

hehehehe, why not:

 wc *

it even gives you a nice total.

 [rowling@rb-01120 run]$ cat sendmail.pid 
 717
 /usr/sbin/sendmail -bd -q1h

*BUT* that does have a nice advantage.
you can head the PID file to kill the process and then
use the next line to restart it AND you know how it got
started in the first place ..



jhs








-- 
Tommorow or the next life, whichever comes first, we never know. - Saying from Tibet.

 __, Jobst Schmalenbach, [EMAIL PROTECTED], Technical Director
   _ _.--'-n_/   Barrett Consulting Group P/L  The Meditation Room P/L  
 -(_)--(_)=  +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] I finally got fed up enough to write this diatribe

2001-09-24 Thread Laurie Savage

Good on ya!

The problem as I see it is that we tend to sound like Nerdy entusiasts (ok
we are nerdy enthusiasts) and are not seen as offering real solutions. I
still think a real problem with GNU/Linux is that there is insufficient
naive-end-user software.

I recently ran a workshop for teachers on using Netscape to generate a
bookmarks site for students. I advertised in my school for people who
considered themselves computer literate and effective. Those who turned up
could write a powerful spreadsheet, create pretty graphics and documents
but often could not arrange applications on the desktop, drag and drop
between folders without being shown and were intimidated by using any console
commands to create permissions in their public_html directory. These are
typical users because organisations often assume that users have computer
skills and will not cough up the cash to develop those skills and ensure
there is a base level in for example a school. Each of my workshop
attendees had had to acquire their skills the hard way and each was
focussed on the application they needed to accomplish specific tasks.

Look, for example at the typical use of a SOHO box.

It is a fax machine/typewriter/publisher/book-keeper not a web server,
academic publisher and developer's toy. Faxing from Linux
sux (for the average joe), it's typwriters are broken
(Abiword/WordPerfect) inflexible/arcane (Lyx) and incompatible
(KOffice/Applixware) and preparing poster/fliers is yukky. Staroffice is
not an option for the average home user because it is incredibly memory
hungry, slow, klutzy and takes over your entire desktop (It will not even
install on my Aptiva/Mandrake 8.0 box). As for low end LPT1 scanners -
well until the manufacturers get off their arses and out of MS's nothing
much will happen.

At least with Macs once they're set up your average sysadmin doesn't need
to do anything! :)

-- 
Laurie Savage
Earth Science @ Orange High School
Orange, NSW, Australia


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Laurie Savage

Try Kmail with or without fetchmail, it's a pretty nice combo and fetch
mail will check your POP3 server as often as you like. (I use fetchmail on
the machine to download all our mail accounts and users use whatever they
like (Pine, Kmail, Balsa is less popular because of some peculiarities
and I haven't been able to work out Aethera+fetchmail)

On Mon, 24 Sep 2001, Grant Street wrote:

:Hello all
:
:I am fairly new to using linux for peronal email stuff but:
:
:I have a laptop(low powered) that I want to access my my mail from the ISP's
:pop3 server but leave it there so that It can be downloaded
:on to the main workstation(windose :-( ). But also be able to send
:some mail as well.
:
:I know in netscape you used to be able to set Keep on Server but
:I don't want to download it if it does not have it.
:
:Or should I use fetchmail + balsa etc instead.
:
:Grant
:
:

-- 
Laurie Savage
Earth Science @ Orange High School
Orange, NSW, Australia



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



RE: [SLUG] redhat 7.1 firewall

2001-09-24 Thread Jill Rowling

why not wc * ?
because not all things in that directory are regular files.
wc seems to give strange stats with directories (Linux gives different
answers to Solaris btw if the file is not a regular file).

I tend to code boring but works on all platforms because I have at least 3
different unices to write stuff for!

Regards,

Jill.

-- 
Jill Rowling, Snr Des. Eng.  Unix System Administrator
Eng. Systems Dept, Aristocrat Technologies Australia
3rd Floor, 77 Dunning Ave Rosebery NSW 2018
Phone: (02) 9697-4484 Fax: (02) 9663-1412 Email: [EMAIL PROTECTED]
 


 -Original Message-
 From: Jobst Schmalenbach [mailto:[EMAIL PROTECTED]]
 Sent: Monday, 24 September 2001 17:15
 To: 'Slug ([EMAIL PROTECTED])'
 Subject: Re: [SLUG] redhat 7.1 firewall
 
 
 On Mon, Sep 24, 2001 at 03:44:10PM +1000, Jill Rowling 
 ([EMAIL PROTECTED]) wrote:
  hehehe it had to be sendmail...
  
  $ cd /var/run
  $ for i in * ; do if [ -f $i ] ; then wc -l $i; fi; done
 
 hehehehe, why not:
 
  wc *
 
 it even gives you a nice total.


--
CONFIDENTIALITY NOTICE
--
This email is intended only to be read or used by the addressee.
The information contained in this e-mail message may be confidential
information. If you are not the intended recipient, any use, interference
with, distribution, disclosure or copying of this material is unauthorised
and prohibited. Confidentiality attached to this communication is not waived
or lost by reason of the mistaken delivery to you.

If you have received this message in error, please delete it and notify us
by return e-mail or telephone Aristocrat Technologies Australia Pty Limited
on +61 2 9413 6300.

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Peter Rundle

 As a point of information, I use httpd on Mozilla 0.9.3 pretty much all
 day long.  Works flawlessly -- with no NSA-mandated crippling of the
 crypto functions.


Ok so point me to the how-to to get that to work, when I go to an https
site it just sits there on the old page saying Document: Done

 I don't use imagemaps much; I'd be curious to see some examples of ones
 that don't work on Mozilla 0.9.x but do on some other browsers.


  http://www.bom.gov.au

doesn't work for me, When I move the cursor over the map of Oz it
changes to a hand but clicking does nothing. NS4.78 works no problem.

 I don't consider MSIE to be suitable at all. 


Yeah I know it's broken in many other ways but I'm trying to swap out Windoze
desktops for Linux and I need a browser that works for things like netbanking.
I know a lot of this is a problem with the w^hbankers but some like St George
work with Netscape in Linux but not with Mozilla. And like it or not Java and
Java script are on a lot of sites, I'm afraid end-users aren't prepared to
sacrifice their current functionality for an idealogical cause. No don't
start, I get it the gnu/linux, open source free thing and understand my
part and obligations in the big picture, one of which is to try to swap out
windows. Biggest stumbling blocks are good web broswer and a good word
replacement and Abiword looks the goods once it supports tables, and Mozilla
is getting close too, just need to kick a few more goals.

So any tips on how to make it happen gladly received, cynical comments about
MS software or Java etc -- read, apply grain of salt, smile -- /dev/null

Rgds

Pete




-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Jamie Wilkinson

This one time, at band camp, Peter Rundle wrote:
As a point of information, I use httpd on Mozilla 0.9.3 pretty much all
day long.  Works flawlessly -- with no NSA-mandated crippling of the
crypto functions.


Ok so point me to the how-to to get that to work, when I go to an https
site it just sits there on the old page saying Document: Done

Do you have the mozilla-psm libraries?  HTTPS won't work without them.

-- 
[EMAIL PROTECTED]http://spacepants.org/jaq.gpg
Balial This port may thing it's fortified, butt I seem to be mounting
a pretty good assault

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] Install Fest Reminder

2001-09-24 Thread Ken Foskey

Craige McWhirter wrote:


 Wanted:
 
 * Installees
 * Installers
 * Helpers
 * Observers
 * The curious
 * You
 * Power leads
 * Power boards
 * Anything I've left out
 
 See you there!
 
 

Hubs swtiches and network cables.

Count me in


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Rick Moen

begin Peter Rundle quotation:

I'd be glad to, if I knew of one:  Being a lazy git, I most recently
just installed Mozilla from binary packages.  Here are versions
currently installed:

ii  libc6  2.2.3-10   GNU C Library: Shared libraries and Timezone
ii  libglib1.2 1.2.10-1.2 The GLib library of C routines
ii  libgtk1.2  1.2.10-1   The GIMP Toolkit set of widgets for X
ii  libjpeg62  6b-1.3 The Independent JPEG Group's JPEG runtime li
ii  libnspr4   0.9.3-1Netscape Portable Runtime Library
ii  libstdc++2.10- 2.95.4-0.01081 The GNU stdc++ library
ii  mozilla-browse 0.9.3-1Mozilla Web Browser - core and browser
ii  mozilla-psm0.9.3-1Mozilla Web Browser - Personal Security Mana
ii  xlibs  4.1.0-2X Window System client libraries
ii  zlib1g 1.1.3-15   compression library - runtime

[Imagemap problems:]

  http://www.bom.gov.au
 
 doesn't work for me, When I move the cursor over the map of Oz it
 changes to a hand but clicking does nothing. NS4.78 works no problem.

Yes, confirmed those resultes, here with Mozilla 0.9.3.  Konqueror 2.2.1
has no problem with that one.  (Please do us all a favour, and file a
bug report with mozilla.org.)

 Yeah I know it's broken in many other ways but I'm trying to swap out
 Windoze desktops for Linux and I need a browser that works for things
 like netbanking.

Understood.  For whatever it's worth, I've really found the SSL support in
Mozilla 0.9.x and Konqueror 2.2.x to be highly reliable.

 And like it or not Java and Java script are on a lot of sites

I actually don't see Java on a lot of sites.  Next to none at all, in
fact.

Javascript I insist on finding ways around, which there almost always
are.  I probably don't have to mention this, but client-side Javascript
is simply unacceptable for security reasons:  There have been, and still
are, far too many nasty tricks that it can be used to carry out with
your user authority.  So, not wanting to be a patsy for such things, I
browse with it disabled.

 ...I'm afraid end-users aren't prepared to sacrifice their current
 functionality for an ideological cause.

I guess I'm at least minimally sympathetic to their problems -- in at
least a vague and general sense -- but their problems don't happen to be
mine.  The two browsers I use routinely seem to meet my better than
Communicator criterion in areas I care about.  Your mileage may differ.

 No don't start, I get it the gnu/linux, open source free thing and
 understand my part and obligations in the big picture, one of which is
 to try to swap out windows. 

Gee, *I* feel no such crusading obligation.  I just enjoy using what I'm
privileged to have at my disposal.  If it fails to meet other people's 
needs, I'll give them a brief moment of sympathy to be polite, and then 
go on about my business.  If those other folk want particular sorts of 
software to exist, I'm sure they'll execute whatever ingenuity they
possess to make that happen.  

(Or maybe not.  Not really my problem, either way.)

 Biggest stumbling blocks are good web broswer and a good word
 replacement and Abiword looks the goods once it supports tables, and
 Mozilla is getting close too, just need to kick a few more goals.

I'm still rather fond of WordPerfect 8.[1]  Beats the heck out of Star
Office for memory footprint:  I recall it loading with an RSS of about 
6 MB.  OpenOffice pre-6.0 build 633 is also startlingly good -- printing
limitations being the biggest hole I observed in a quick once-over.
(There are now more-recent builds.)

But in the long term, we're going to have to do something about putting
an end to obscure and/or moving-target binary formats for our data.  I
still have DeScribe documents I can't get to, because they're locked up
in a vendor-specific format inaccessible to anything else.  The lesson 
hasn't been lost on me, and I'm going to seriously look at LyX and
LaTeX, as a long-term option.

Mostly, though, I write either ASCII or HTML in vim, so I'm perhaps not
the right person to ask.

(Not palatable to other folks you know and care about?  Well, that's a
shame, but I'm concentrating on solving my own problems.)

[1] Still preserved at http://linuxmafia.com/pub/linux/apps/

-- 
Cheers,  A Discordian is a Taoist with a very strange sense of humour 
Rick Moen and the inability to sit still.
[EMAIL PROTECTED]   -- Rabbi Kwan Chi Sun Lieberwitz, _Jews for Buddha Cabal_

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Rick Moen

begin Laurie Savage quotation:

 Try Kmail with or without fetchmail, it's a pretty nice combo and
 fetch mail will check your POP3 server as often as you like. (I use
 fetchmail on the machine to download all our mail accounts and users
 use whatever they like (Pine, Kmail, Balsa is less popular because of
 some peculiarities and I haven't been able to work out
 Aethera+fetchmail)

Say:  I happen to have been keeping a list of open-source GUI MUAs (mail
clients) for Linux, as part of an essay I have for LUG founders:
http://linuxmafia.com/~rick/essays/newlug.html  (item #23).  Here they 
are: 

http://sylpheed.good-day.net/  Sylpheed
http://devel-home.kde.org/~kmail/  KMail
http://mahogany.sourceforge.net/  Mahogany
http://www.newton.cx/balsa/main.html  Balsa
http://www.tarball.net/postoffice/  Post Office
http://www.thekompany.com/projects/aethera/  Aethera
http://ximian.com/products/ximian_evolution/  Evolution
http://muhri.net/pronto/  Pronto
http://spruce.sourceforge.net/  Spruce

Suggested additions are always welcome.

-- 
Cheers,Please return all dogmas to their orthodox positions.
Rick Moen -- Brad Johnson, in r.a.sf.w.r-j
[EMAIL PROTECTED]

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Graeme Robinson

On Mon, 24 Sep 2001, Andre Pang wrote:
 Try Galeon or Konqueror.  Neither of them are perfect, but to be
 honest, I really prefer Galeon over IE.  (And unlike many others
 here, I actually use IE daily and I like it alot.  IE4/5 was miles
 ahead of Netscape at the time for just doing regular browsing,
 which 99% of the population do.)

IE is also the only browser vulnerable to the nimda virus exploit, a good
reason to keep away from it.  I presume you mean using IE under M$
platforms - AFAIK IE isn't available for 'nix platforms is it?

-=-=-==-=-=--=-=-=-=-=-=-=-=-=-=-=-=
Graeme Robinson - Graenet consulting
www.graenet.com - internet solutions
-=-=-=-=-=-=-=-=-=-=-==---=-=--=-=-=


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Mike Holland

On Mon, 24 Sep 2001, Graeme Robinson wrote:

 platforms - AFAIK IE isn't available for 'nix platforms is it?

IE5 actually runs on Solaris and HP-UX.

http://www.microsoft.com/unix/ie/

There are no unix/x86 versions released though.
It should port to Linux easily, if you can obtain the source.

-- 
Mike Holland  [EMAIL PROTECTED]
--==--
Everybody is talking about the weather but nobody does anything
about it.  -- Mark Twain



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] I finally got fed up enough to write this diatribe

2001-09-24 Thread Mike Holland

On Mon, 24 Sep 2001, Laurie Savage wrote:

 The problem as I see it is that we tend to sound like Nerdy entusiasts (ok
 we are nerdy enthusiasts) and are not seen as offering real solutions. I

Laurie, what is the topic here? Public perceptions?
Linux offers real solutions in many areas.

 still think a real problem with GNU/Linux is that there is insufficient
 naive-end-user software.

Insufficient for what?
Why should Linux have _any_ naive-end-user software? You talk as if this
is self-evident.
  You make a general rant about the weaknesses of linux. OK, so what?
It doesnt make coffee very well either.

  Are you of the opinion that someone (who?) should write drool-proof
office apps? Why? Do you think it would be profitable? Perhaps you just
think it would benefit mankind, and would like to discuss how it might be
achieved. As it stands. Linux remains largely by geeks, for geeks. Thats
still good for everybody, because the geeks run the fileservers,
webservers, development platforms, embedded systems, internet
infrastructure, commercial systems, etc that everyone benefits from.

  The average joe cant even program his video recorder. IMHO, Linux will
be in his home inside an appliance that does games, web-browsing,
video-streaming, DVD playing. It might be thin-client, or remotely
administered by a subscription service, like a Tivo.


-- 
Mike Holland  [EMAIL PROTECTED]
--==--
Everybody is talking about the weather but nobody does anything
about it.  -- Mark Twain



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Rick Moen

begin Graeme Robinson quotation:

 IE is also the only browser vulnerable to the nimda virus exploit, a
 good reason to keep away from it.  I presume you mean using IE under
 M$ platforms - AFAIK IE isn't available for 'nix platforms is it?

A variant form of MSIE is available for Solaris and (if I recall
correctly) HP/UX.  You get a boatload of COM/DCOM libraries with it,
which strikes me as hilarious.

But at least, there, it's competing on a level playing field, since
there aren't secret system calls available only to Microsoft
Corporation's applications group.

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Steve Kowalik

On Mon, Sep 24, 2001 at 03:30:39PM +1000, Peter Rundle uttered:
 Does anyone know of / use a *good* graphical browser for linux, (a
 serious competitor to IE on Doze), like it does Java apps, handles https,
 doesn't screw up framesets by getting the sizes wrong. Java script works
 properly, (so many sites have a litle if IE then run java script else
 fsck it up clause its sad, maybe you can fake out the browser ident or
 something).
 
Take it from one of my .sig quotes:

Picking a web browser for X is like deciding if you would rather be choked, 
strangled, or suffocated.

-- 
Steve
Why is it called common sense when nobody seems to have any?

 PGP signature


[SLUG] WAS: I finally got fed ... IS: Tivo

2001-09-24 Thread Graeme Robinson

On Mon, 24 Sep 2001, Mike Holland wrote:
   The average joe cant even program his video recorder. IMHO, Linux will
 be in his home inside an appliance that does games, web-browsing,
 video-streaming, DVD playing. It might be thin-client, or remotely
 administered by a subscription service, like a Tivo.

A Tivo [drool] - are they linux embedded? I want one of these quite badly
- anyone on the list got one? Impressions?

-=-=-==-=-=--=-=-=-=-=-=-=-=-=-=-=-=
Graeme Robinson - Graenet consulting
www.graenet.com - internet solutions
-=-=-=-=-=-=-=-=-=-=-==---=-=--=-=-=


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] I finally got fed up enough to write this diatribe

2001-09-24 Thread Laurie Savage

I realize I left myself open for a flame. The original email was venting
frustration at computer journalists calling windows/IE/Outlook worms and
viruses COMPUTER viruses and seemed to be lamenting the low profile of
Linux in the commercial world. While I am very sympathetic to this
position and advocate it I think this is a safe forum for in-house
whingeing. I probably should have posted to the other list.

On Mon, 24 Sep
2001, Mike Holland wrote:

:On Mon, 24 Sep 2001, Laurie Savage wrote:
:
: The problem as I see it is that we tend to sound like Nerdy entusiasts (ok
: we are nerdy enthusiasts) and are not seen as offering real solutions. I
:
:Laurie, what is the topic here? Public perceptions?
:Linux offers real solutions in many areas.
:
: still think a real problem with GNU/Linux is that there is insufficient
: naive-end-user software.
:
:Insufficient for what?
:Why should Linux have _any_ naive-end-user software? You talk as if this
:is self-evident.
:  You make a general rant about the weaknesses of linux. OK, so what?
:It doesnt make coffee very well either.
:
:  Are you of the opinion that someone (who?) should write drool-proof
:office apps? Why? Do you think it would be profitable? Perhaps you just
:think it would benefit mankind, and would like to discuss how it might be
:achieved. As it stands. Linux remains largely by geeks, for geeks. Thats
:still good for everybody, because the geeks run the fileservers,
:webservers, development platforms, embedded systems, internet
:infrastructure, commercial systems, etc that everyone benefits from.
:
:  The average joe cant even program his video recorder. IMHO, Linux will
:be in his home inside an appliance that does games, web-browsing,
:video-streaming, DVD playing. It might be thin-client, or remotely
:administered by a subscription service, like a Tivo.
:
:
:

-- 
Laurie Savage
Earth Science @ Orange High School
Orange, NSW, Australia



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



[SLUG] freeswan iptables

2001-09-24 Thread Des Wass


I have an internet gateway with redhat 7.0 and 2.4.3 kernel. A couple
of the networks behind the gateway/firewall have freeswan 1.8 and 1.9.
There is multiple addresses aliased to eth1 for each network.

For one of these networks I can't get protocol 50 NAT'd. The key exchange
works fine on udp port 500 but ESP is having problems. I have another
network with the same configuration working ok. For some reason this one
is giving
me grief.

My iptables rules are:

iptables -t nat -A PREROUTING -i eth1 -d 203.23.191.99 -j DNAT --to
192.168.90.194
iptables -t nat -A POSTROUTING -s 192.168.90.194 -j SNAT --to-source
203.23.191.99

(I have tried rules specifying protocols and ports. this one seems as
though it shoule be generic enough to work.)

Here are some tcpdumps:

20:24:23.038533 eth2  192.168.90.194.500  203.22.142.26.500: isakmp v4.0
 from:8bbea1bd to: 5048f302 msgid:86e8b3d4 length 135274497 new
version (DF)
20:24:23.038598 eth1  203.23.191.99.500  203.22.142.26.500: isakmp v4.0
 from:8bbea1bd to: 5048f302 msgid:86e8b3d4 length 135274497 new
version (DF)
 from:8bbea1bd to: 5048f302 msgid:86e8b3d4 length 135274497 new
version
20:24:28.091812 eth2  203.22.142.26.500  192.168.90.194.500: isakmp v4.0
 from:8bbea1bd to: 5048f302 msgid:86e8b3d4 length 135274497 new
version

20:29:34.900867 eth2  192.168.90.194  203.22.142.26: ip-proto-50 76
20:29:34.900920 eth1  192.168.90.194  203.22.142.26: ip-proto-50 76
20:29:35.447398 eth2  192.168.90.194  203.22.142.26: ip-proto-50 76
20:29:35.447445 eth1  192.168.90.194  203.22.142.26: ip-proto-50 76


Traffic coming in ok but all traffic on protocol 50 going out doesn't get
NAT'd.

At http://lannet2.lanrex.net.au/Drawing1.png you can see how the network
is structured.

Any one come across this before?


TIA,
Des.


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



[SLUG] Re: WAS: I finally got fed ... IS: Tivo

2001-09-24 Thread Mike Holland

On Mon, 24 Sep 2001, Graeme Robinson wrote:

 A Tivo [drool] - are they linux embedded? I want one of these quite badly

Yep. Sure is. It was the closest thing I could think of to
linux-for-the-masses.
  http://www.tivo.com/linux/index.html

 - anyone on the list got one? Impressions?

Andrew Tridgell hacked it to work here:

http://marc.merlins.org/linux/linux.conf.au_2001/Day4/InsideTivo.html

but Tridge is a God.  I'm waiting for a DTV tuner card. Preferably high
definition.

-- 
Mike Holland  [EMAIL PROTECTED]
--==--
Everybody is talking about the weather but nobody does anything
about it.  -- Mark Twain



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] Routing problem

2001-09-24 Thread Tom Massey

Thanks for the suggestions to put things onto separate subnets. This seems to
be the answer (haven't been able to change things yet, all the machines are
actually in the US and I haven't got in touch with the guy who has physical
access). I can only assume that the setup worked originally because the modules
and routing info were added when Red Hat was looking the other way, but after
a reboot the system recognised the need to add routes, and things broke
because the broken configuration added broken routes. Interesting that it wasn't 
recognised as an invalid config, and actually worked fine, until after the
reboot.

Thanks again,
Tom

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



[SLUG] Tar files and Nulls (win2k backup file drama)

2001-09-24 Thread Luke McKee

Hey Slug people.

I've just doing an all nighter because tar keeps
giving up restoring a MS windows 2K bkf file
(MSBACKUP).

I've realized that there are tape blocks of nulls
1/14th of the way through. Which is the best way to
make tar tolerant of this.

--- praying that the command line switches make it
come through now - or IM F*C$!%!!

Any suggestions? Hey why in hells's name can't tar be
made to trust the tape device driver to manage tape
files? Is there any patches that let tar completely
ignore nulls?

Luke


__
Do You Yahoo!?
Get email alerts  NEW webcam video instant messaging with Yahoo! Messenger. 
http://im.yahoo.com

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] Tar files and Nulls (win2k backup file drama)

2001-09-24 Thread Luke McKee


--- Luke McKee [EMAIL PROTECTED] wrote:
 Hey Slug people.
 
 --- praying that the command line switches make it
 come through now - or IM F*C$!%!!

tar: Read checkpoint 248280
tar: Read checkpoint 248290
block 4965878: ** Block of NULs **
block 4965879: ** Block of NULs **
block 4965880: ** End of File **

Do I put my head between my legs and kiss it all good
bye?

mt -f /dev/nht0 fsf doesn't work... eek.

And I backed it up with at tar -W for verify and it
PASSED.. Can someone save me from impending doom.

I wont loose that much but it's still a week since the
last full backup.. Any ideas anyone?

Luke


__
Do You Yahoo!?
Get email alerts  NEW webcam video instant messaging with Yahoo! Messenger. 
http://im.yahoo.com

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] tar has 2gb limit still?

2001-09-24 Thread Rick Moen

begin  Luke McKee quotation:

 Is there a 2 gb limit in tar or kernel 2.2 smbfs driver?

Eliminating the 2 GB filesize limit from utilities in 32-bit Linuxes
(as opposed to, say, Linux for Alpha, where it never existed) requires
the following:

1. Have kernel headers installed from either
   a) kernel 2.4.0test7 or later, or
   b) kernel 2.2.x with unofficial Large File Summit (LFS) patches,
   as a partial requirement to support a recompile, discussed below.
2. Have glibc 2.2 or later, compiled against those headers (thus
   supporting LFS calls used below).
3. Have rewritten the utilities in question to use 64-bit LFS calls
   for file handles and locks, instead of 32-bit ones.
4. Have recompiled those utilities under the foregoing conditions.
5. Use only filesystems capable of supporting LFS.  Ones that don't
   include NFSv2, early ReiserFS, AFS, Coda, Intermezzo, Minix, UFS,
   SCO SysV, msdos/umsdos/vfat, smbfs, and NCPfs.  By contrast, ext2/3,
   recent ReiserFS, IBM JFS, SGI XFS, and very recent NFSv3 client 
   drivers do LFS well.

The big sticking point is #3.
 
Yr. humble correspondent is not clear on whether smbfs's problem is
implementation-based or inherent in the protocol spec.  Ask Tridge.  ;-

Other than that, the short answer is In theory, the problem can be
made to go away, but you're advised not to hold your breath.

 Please reply.

Nope.  Never.  I refuse.  Sorry, chum.  Never happen.  No way, no how.
Not in a million years.  Ixnay on the eplyray.

-- 
Cheers,My pid is Inigo Montoya.  You kill -9
Rick Moen  my parent process.  Prepare to vi.
[EMAIL PROTECTED]

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] Routing problem

2001-09-24 Thread Jean-Francois Dive

That made sense before your box was rebooted: you had host addresses
pointing to the interfaces and only one network address for another nic,
which is correct, after reboot, the kernel added the route for the network
when the card went up..

JeF

On Mon, 24 Sep 2001, Tom Massey wrote:

 Thanks for the suggestions to put things onto separate subnets. This seems to
 be the answer (haven't been able to change things yet, all the machines are
 actually in the US and I haven't got in touch with the guy who has physical
 access). I can only assume that the setup worked originally because the modules
 and routing info were added when Red Hat was looking the other way, but after
 a reboot the system recognised the need to add routes, and things broke
 because the broken configuration added broken routes. Interesting that it wasn't 
recognised as an invalid config, and actually worked fine, until after the
 reboot.

 Thanks again,
 Tom

 --
 SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
 More Info: http://lists.slug.org.au/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Peter Rundle

[Https]

Ok solved that one, Now I know what the mozilla-psm package does ;-)

[Imagemap problems]


 (Please do us all a favour, and file a bug report with mozilla.org.)


Have done.

[ Java ]

 I actually don't see Java on a lot of sites.  Next to none at all, in
 fact.


Well I find it in a lot of web-based config tools, like Bay networks
contivity, one of these management ports for our tape server, stuff
like that. Calendar server uses java script, most sites with frames and
a menu map have java script on them. Don't care to argue the merits or
otherwise of java just want to displace Doze on some desktops.

 But in the long term, we're going to have to do something about putting
 an end to obscure and/or moving-target binary formats for our data.  


Agreed!

Re vim and html, sounds like someone I know... Personally I'm set Linux
currently provides all the tools I need, getting the company to change
however is a bit of a challange but just a few more goals and it might
happen.

I'll have a look at Open Office. Last time I tried it it printing
didn't work which is a bit of a show stopper, but as said before does
anyone have any inside info on Abiword, the site hasn't been updated
for weeks, and prior to that it was going like a house on fire.

rgds

Pete







 



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] a pop keep on server mail client

2001-09-24 Thread Rick Moen

begin Peter Rundle quotation:

[Java:]

 Well I find it in a lot of web-based config tools, like Bay networks
 contivity, one of these management ports for our tape server, stuff
 like that. Calendar server uses java script, most sites with frames and
 a menu map have java script on them.

Yep, I might have to contend with that one soon, myself, when my Cisco
AIR-PCM-352 wireless ethernet card arrives.  Fortunately, my wife
Deirdre has taken care of the Apple Airport end of the configuration
puzzle, using -- you guessed it -- an obligatory Java applet.

 Re vim and html, sounds like someone I know... 

I didn't do it.  You can't prove it.  The sheep are lying.  ;-

-- 
Is it not the beauty of an asynchronous form of discussion that one can go and 
make cups of tea, floss the cat, fluff the geraniums, open the kitchen window 
and scream out it with operatic force, volume, and decorum, and then return to 
the vexed glowing letters calmer of mind and soul? -- The Cube, forum3000.org

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



[SLUG] Router/firewall

2001-09-24 Thread Bob Hubbard

Does SMC market a router/firewall (SMC7004ABR I think) in Australia which
provides for a dial-up system as well as cable/adsl? It is available here
in Canada and could be a consideration when I move to OZ in December.
Failing that I will be looking for a 486DX/66 as a firewall.

Thanks,

Bob

Bob Hubbard
St.Albert, Ab
CANADA


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



[SLUG] Cable/ADSL

2001-09-24 Thread Bob Hubbard

When I arrive in Bonnells Bay (Morisset) I'll be looking for an ISP. Is
cable or ADSL available in that area or will I have to use a dial-up set
up with maybe PPP.

Thanks,

Bob



Bob Hubbard
St.Albert, Ab
CANADA


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] Cable/ADSL

2001-09-24 Thread Terry Collins

Bob Hubbard wrote:
 
 When I arrive in Bonnells Bay (Morisset) I'll be looking for an ISP. Is
 cable or ADSL available in that area or will I have to use a dial-up set
 up with maybe PPP.

Bob

The standard throughout Australia is dial up modem. Sustainable rate
varies from 300 baud +. Only a few cafe-latte (sp?) locations in
Australia have cable. The early roll out of ADSL was an almost exact
match, but it is slowly moving outside these areas to border Metro
areas.

If you want to know if Morisset has adsl, then you will need to consult
the Telstra pages (good luck).
-- 
   Terry Collins {:-)}}} Ph(02) 4627 2186 Fax(02) 4628 7861  
   email: [EMAIL PROTECTED]  www: http://www.woa.com.au  
   Wombat Outdoor Adventures Bicycles, Books, Computers, GIS

 People without trees are like fish without clean water

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



[SLUG] Hotplug and cached Disk writes

2001-09-24 Thread Steve Downing

From the wouldn't it be cool if Department:

Is it possible to tell the kernel NOT to cache disk writes to a certain 
mounted filesystem.  Then if that mount suddenly dissappears, everything 
has been already written.

i.e
1. Using hotplug I plug in a small USB key flash-memory filesystem.
2. Hotplug then insert the right kernel modules and mounts the flash-
memory filesystem in the desired spot.
3. Copy/delete/move files onto or off the flash-memory.  (NOTE: It 
all works up to here.)
4. Pause to allow files to be written WITHOUT kernel caching the write.
5. Unceremoniously Pull out the USB key.  Hotplug realises and unmounts 
filesystem and rmmods the unused modules.

Step 5 is the killer.  I'm not sure it's even sane without risking 
the obvious possible disk corruption.
a) I'm not sure hotplug can do the unmounting, it doesn't seem to 
have a pre/post-removal thing.
b) Win98 doesn't seem handle it properly, so why should I expect 
Linux to.

FWIW Kernel 2.4.3, Hotplug 0.0.20010919 out of Debian unstable, Modutils 
2.4.6.

Is anyone else trying something like this?

Steve

-- 
The most exciting phrase to hear in science,
the one that heralds new discoveries, is not
Eureka! but That's funny...' - Isaac Asimov








-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



RE: [SLUG] Hotplug and cached Disk writes

2001-09-24 Thread Jill Rowling

I was actually thinking of something similar, but for floppy disks.
The trick I think is to _not_ mount the filesystem as a normal filesystem,
but instead to
mount it as something else.
The device drivers for something else would be need to be aware of the
device (if present) and respond sensibly if the device is not physically
present.
Of course some applications may fail miserably but that's their problem!

The device driver would need to be treated I think something like a sound
driver, where it doesn't make sense to cache the writes if the device's
buffer requests more data (ie sound) (although I need to think about this
aspect).

For desktop use, some sort of indication as to the device's readiness may be
useful (like the changing icons you can get with CDROM present / not
present).

For remote use, one would also need to know as to whether the device was
present or not.

Another thought - what about using the printer spooler (Er yuk, cancel that
thought... NO operating system handles printing nicely!)

Cheers,

Jill.

-- 
Jill Rowling, Snr Des. Eng.  Unix System Administrator
Eng. Systems Dept, Aristocrat Technologies Australia
3rd Floor, 77 Dunning Ave Rosebery NSW 2018
Phone: (02) 9697-4484 Fax: (02) 9663-1412 Email: [EMAIL PROTECTED]
 


 -Original Message-
 From: Steve Downing [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, 25 September 2001 11:18
 To: [EMAIL PROTECTED]
 Subject: [SLUG] Hotplug and cached Disk writes
 
 
 From the wouldn't it be cool if Department:
 
 Is it possible to tell the kernel NOT to cache disk writes to 
 a certain 
 mounted filesystem.  Then if that mount suddenly dissappears, 
 everything 
 has been already written.


--
CONFIDENTIALITY NOTICE
--
This email is intended only to be read or used by the addressee.
The information contained in this e-mail message may be confidential
information. If you are not the intended recipient, any use, interference
with, distribution, disclosure or copying of this material is unauthorised
and prohibited. Confidentiality attached to this communication is not waived
or lost by reason of the mistaken delivery to you.

If you have received this message in error, please delete it and notify us
by return e-mail or telephone Aristocrat Technologies Australia Pty Limited
on +61 2 9413 6300.

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



[SLUG] Bootable CD Linux with Nessus, or ability to add to build

2001-09-24 Thread Booth, Christopher (Aus) - ATP

Hi guys,

A guy here at work would like to get a bootable CD with Nessus on it, or a
build which has the ability to add Nessus to it.

Has anyone done this or do they know of anything ?

PS We are searching on the web. He found something called Trinix

-- 
Christopher Booth 


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] Cable/ADSL

2001-09-24 Thread Michael Sztachanski

 Bob Hubbard wrote:
 
When I arrive in Bonnells Bay (Morisset) I'll be looking for an ISP. Is
cable or ADSL available in that area or will I have to use a dial-up set
up with maybe PPP.



http://www.telstra.com.au/adsl/ordering/search.cfm


Hi Bob, 


the above link will be able to tell you if your exchange can privide

you with the ADSL service.

If you don't have a line in yet or getting another, get the Telstra 
Tech. to do a diagnostic on your line, you want as close to a balanced 
line as possible for for line wether your using a standard or ADSL modem.


hope this helps!!


cheers


-- 
Michael Sztachanski
Dir. of Tech.  Professional Services
M 0410 547593

Intaface International Pty Ltd
http://www.intafaceintl.com

Silly Cracker, root is for Administrators
 - unknown


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



Re: [SLUG] Hotplug and cached Disk writes

2001-09-24 Thread Dean Hamstead

Is there a setting to change the amount of cache?
of cache per filesystem? even the life of a cache
before it syncs?

all of which set to zero or another minimalistic 
value would serve to push data to the fs on the fly

Dean

Steve Downing wrote:
 
 From the wouldn't it be cool if Department:
 
 Is it possible to tell the kernel NOT to cache disk writes to a certain
 mounted filesystem.  Then if that mount suddenly dissappears, everything
 has been already written.
 
 i.e
 1. Using hotplug I plug in a small USB key flash-memory filesystem.
 2. Hotplug then insert the right kernel modules and mounts the flash-
 memory filesystem in the desired spot.
 3. Copy/delete/move files onto or off the flash-memory.  (NOTE: It
 all works up to here.)
 4. Pause to allow files to be written WITHOUT kernel caching the write.
 5. Unceremoniously Pull out the USB key.  Hotplug realises and unmounts
 filesystem and rmmods the unused modules.
 
 Step 5 is the killer.  I'm not sure it's even sane without risking
 the obvious possible disk corruption.
 a) I'm not sure hotplug can do the unmounting, it doesn't seem to
 have a pre/post-removal thing.
 b) Win98 doesn't seem handle it properly, so why should I expect
 Linux to.
 
 FWIW Kernel 2.4.3, Hotplug 0.0.20010919 out of Debian unstable, Modutils
 2.4.6.
 
 Is anyone else trying something like this?
 
 Steve
 
 --
 The most exciting phrase to hear in science,
 the one that heralds new discoveries, is not
 Eureka! but That's funny...' - Isaac Asimov
 
 --
 SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
 More Info: http://lists.slug.org.au/listinfo/slug

-- 
f u cn rd ths, u cn gt a gd jb n cmptr prgrmmng.
--   --
[EMAIL PROTECTED][EMAIL PROTECTED]
BONG LANS: http://www.bong.com.au ICQ: 16867613

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



[SLUG] problem with Mandrake 8 httpd

2001-09-24 Thread Jim Donovan

Hi,
We've got Mandrake working but the www server
won't display included images.
However, we know it can reach and serve the images
because it does if you get them explicitly one at a time.
I can't find how they turned this facililty off;
is it something in httpd.conf, please?
 - Jim Donovan

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



[SLUG] ignore previous email

2001-09-24 Thread Les Stott



Please ignore previous email from me in regard to 
internet access. It was not intended and was a mistake on my part.
Regards,

Les StottSystems AdministratorRentokil 
Initial[EMAIL PROTECTED](02) 
9370 9348

This email is confidential. If you are not the 
intended recipient, you must not disclose or use the information contained 
in it. If you have received this in error, please advise the sender by 
return email and delete the material from your computer.

Rentokil Initial Pty Ltd ABN 98 000 034 597 does 
not warrant that any attachments are free from viruses or any other defects. You 
assume all liability for any loss, damage or other consequences which may arise 
from opening or using the attachments.