[SLUG] injecting mboxes into postfix

2003-03-12 Thread Jamie Wilkinson
So, say I had a bunch of mbox files in /var/spool/mail which were left over
from a mbox-Maildir conversion... how would I go about putting these
messages back in the postfix queue so that postfix delivers them to the
right place?

Or should I not even try to bother because the envelopes have been lost at
this point, and just formail+safecat them into the Maildirs?

-- 
[EMAIL PROTECTED]   http://spacepants.org/jaq.gpg
--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Anti-virus

2003-03-12 Thread Chris
For Windows I would reccomend you dont use norton. They now go by that
wonderful concept of you purchase only three months of updates. Then we
get in to great subscriptions - which only allow you to download updates
for your current product.
Symantec's products are now more resource-hungry than ever with the
fancy interface.

If you want a commercial a/v package I would reccomend VET @
www.vet.com.au (and yes, .au). It's got a nice clean interface with
upgrades availible from the subscription price.

As for Linux AV - look at RAV (Can buy @ everything linux), there's a
free version of PandaAV.

chris
 Thanks to all who replied. Much appreciated.
 
 Fil
 
  Original Message 
 Subject: Anti-virus
 Date: Wed, 12 Mar 2003 13:00:41 +1100
 From: Phil Scarratt [EMAIL PROTECTED]
 Organization: Draxsen Technologies
 To: SLUG [EMAIL PROTECTED]
 
 Hi all
 
 I need to install some sort of AV software on a network with Linux
 servers (RH7.3)  (unfortunately) Windoze workstations.
 
 Will an AV solution on the Linux servers do or will the Windoze
 workstations need clients on them as well (eg Norton AV) as is my
 understanding?
 
 What are people doing in similar situations?
 
 Thanks in advance.
 
 Fil
 -- 
 Phil Scarratt
 Draxsen Technologies
 
 
 -- 
 Phil Scarratt
 Draxsen Technologies
 IT Contractor/Consultant
 0403 53 12 71
 
 -- 
 SLUG - Sydney Linux User's Group - http://slug.org.au/
 More Info: http://lists.slug.org.au/listinfo/slug
 
 


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] injecting mboxes into postfix

2003-03-12 Thread Jamie Wilkinson
This one time, at band camp, Jamie Wilkinson wrote:
So, say I had a bunch of mbox files in /var/spool/mail which were left over
=66rom a mbox-Maildir conversion... how would I go about putting these
messages back in the postfix queue so that postfix delivers them to the
right place?

Or should I not even try to bother because the envelopes have been lost at
this point, and just formail+safecat them into the Maildirs?

I ended up just doing the safecat thing.

Meanwhile, I'm curious why my mail sent in us-ascii format got turned into
quoted-printable somewhere (hence the =66 and a =20 in the message) but the
content encoding in the header didn't change.

-- 
[EMAIL PROTECTED]   http://spacepants.org/jaq.gpg
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] Microsoft Tax

2003-03-12 Thread Adam W
 on Wed, Mar 12, 2003 at 02:22:03PM +1100, Bill 
 [EMAIL PROTECTED] wrote:
  why take delivery of a box with the spam os on it? I bought my last 
  two
  boxes without any software at all; and expect to continue 
 purchasing 
  that way
 
 Thats my thought too. If they wont sell you a box without and 
 OS go else where.

That's all well and good - but if you wont a decent laptop from a decent
company with a good warranty (like dell provides) then you have to
compromise.

I don't know about you... But I wouldn't be caught buying some no name
laptop that is going to fall apart a day after the warranty expires just
because they wont sell me the machine without the OS I want on it.

Yes your thoughts may be ok when buying a desktop machine - but
certainly not for laptops.

Regards,

AW.

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] Audio out on two machines simultaneously

2003-03-12 Thread Adam W
  A hardware fix would be wiring your audio through the two 
 unused pairs 
  of your network cable.
 
 That would have nice hack value.  Might be a bugger 
 separating the pairs, though...

A bigger bugger when you don't have wires to separate. He first
mentioned the laptop is using WLAN :-)

Cheers

AW

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Anti-virus

2003-03-12 Thread Chris Samuel
On Wed, Mar 12, 2003 at 05:30:25PM +1100, Phil Scarratt wrote:

 Thanks to all who replied. Much appreciated.

I meant to add this earlier, but had to go out. If you're looking
at amavis, it may be worth checking out the amavis-new project at

http://www.ijs.si/software/amavisd/

From the introduction there:

   amavisd-new  is  a  high-performance  and  reliable  interface between
   mailer  (MTA) and one or more content checkers: virus scanners, and/or
   Mail::SpamAssasin  Perl  module.  It  is  written  entirely  in  Perl,
   assuring  high  reliability, portability and maintainability. It talks
   to  MTA  via  (E)SMTP  or LMTP, or by using helper programs. No timing
   gaps exist in the design, which could cause a mail loss.

cheers,
Chris
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Microsoft Tax

2003-03-12 Thread Phil Scarratt


Adam W wrote:
on Wed, Mar 12, 2003 at 02:22:03PM +1100, Bill 
[EMAIL PROTECTED] wrote:

why take delivery of a box with the spam os on it? I bought my last 
two
boxes without any software at all; and expect to continue 
purchasing 

that way
Thats my thought too. If they wont sell you a box without and 
OS go else where.


That's all well and good - but if you wont a decent laptop from a decent
company with a good warranty (like dell provides) then you have to
compromise.
I don't know about you... But I wouldn't be caught buying some no name
laptop that is going to fall apart a day after the warranty expires just
because they wont sell me the machine without the OS I want on it.
Yes your thoughts may be ok when buying a desktop machine - but
certainly not for laptops.
Regards,

AW.

Fair point, but I know of at least one no name laptop which you could 
buy with no OS, extend the warranty to 3 years (on-site warranty) and 
still save a couple of hundred dollars over a laptop with M$ installed. 
It's a no name laptop but with 3 yr warranty, it's gotta be fairly safe.

Also, I thought Dell were starting to offer no-OS machines? Maybe that's 
just on their servers.

Fil

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Microsoft Tax

2003-03-12 Thread Chris Samuel
On Wed, Mar 12, 2003 at 10:12:52PM +1100, Phil Scarratt wrote:
 
 Fair point, but I know of at least one no name laptop which you could 
 buy with no OS, extend the warranty to 3 years (on-site warranty) and 
 still save a couple of hundred dollars over a laptop with M$ installed. 

I've got to ask - who's that then ?

cheers,
Chris (who may be in the market for a laptop soon)
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] injecting mboxes into postfix

2003-03-12 Thread David Kempe
 I ended up just doing the safecat thing.

out of interest what was it you did to get them into maildir format?

dave

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Microsoft Tax

2003-03-12 Thread Phil Scarratt
Pioneer Computers (http://www.pioneercomputers.com.au) in Alexandria. 
I've no idea what the laptops are like as I have never used them 
personally (or any laptop for that matter) but an extended warranty can 
give some peace of mind.

Fil

Chris Samuel wrote:
On Wed, Mar 12, 2003 at 10:12:52PM +1100, Phil Scarratt wrote:
 

Fair point, but I know of at least one no name laptop which you could 
buy with no OS, extend the warranty to 3 years (on-site warranty) and 
still save a couple of hundred dollars over a laptop with M$ installed. 


I've got to ask - who's that then ?

cheers,
Chris (who may be in the market for a laptop soon)


--
Phil Scarratt
Draxsen Technologies
IT Contractor/Consultant
0403 53 12 71
--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] injecting mboxes into postfix

2003-03-12 Thread Jeff Waugh
quote who=David Kempe

  I ended up just doing the safecat thing.
 
 out of interest what was it you did to get them into maildir format?

formail -s safecat $MAILDIR/tmp $MAILDIR/new  $MBOX

- Jeff

-- 
   I look forward to someday putting foo-colored ribbons on my homepage
   declaring 'port 25 is for spam', and 'just say no to the Spam Message
   Transmission Protocol!' - Raph Levien   
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] Microsoft Tax

2003-03-12 Thread Jon Biddell
Hmmm... I seem to remember reading a laptop review (PC Authority or APC)
that said that Pioneer's build quality was quastionable for the price.

=Pioneer Computers (http://www.pioneercomputers.com.au) in Alexandria. 
=I've no idea what the laptops are like as I have never used them 
=personally (or any laptop for that matter) but an extended 
=warranty can 
=give some peace of mind.

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [slug] microshit tax

2003-03-12 Thread Neast Pty Ltd
Ho Sluggers

One thing to check with the acquisition of any laptops is that it will 
actually run on linux, some as I understand it have problems with video 
drivers.

Regards,

Nicholas Tomlin.

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] usb and scsi

2003-03-12 Thread Adam Hewitt
Hi All,

I have two questions...

1. I am trying to mount my Fuji Finepix digital camera. I have installed
the usb-storage module which in turn installed the scsi_mod module. The
problem is that I am using a usb Intellimouse Explorer, and as soon as I
turn on the camera my mouse starts going psycho, ie. the light flashes
on and off, and the mouse cursor stops working while the light is off
and usbmgr starts beebing continuously. The good news is that I can see
my camera. Is there a way to limit the scope of the scsi/usb-storage
drivers so that it only works for certain ports?? or is there some other
way to get around this??

2. I have tried getting my CD-RW to work a while back, installing the
idescsi module, and everything was sweet. The problem is that I have a
DVD ROM drive that obviously doesn't like the scsi emulation and will
refuse to work (properly). I have tried a few things such as appending
details in lilo to only make the burner scsi but nothing seemed to work.
Could someone please give me some hints on how I can get around this one
too??

Cheers,

Adam.
-- 
Adam Hewitt [EMAIL PROTECTED]

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] Microsoft Tax

2003-03-12 Thread Adam W
 Also, I thought Dell were starting to offer no-OS machines? 
 Maybe that's 
 just on their servers.

Yeah this is their server models. Its actually the default option - they
come with no OS unless otherwise stated.

But no hope for the laptops/desktops going this way.

Cheers

AW

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] Microsoft Tax

2003-03-12 Thread Stuart Guthrie
On Wed, 2003-03-12 at 22:42, Jon Biddell wrote:
 Hmmm... I seem to remember reading a laptop review (PC Authority or APC)
 that said that Pioneer's build quality was quastionable for the price.

Umm, I've got one. You get what you pay for (plus some in my judgement).
The PIII is NOT a mobile PIII so you get very short battery life and a
noisier than usual fan. On the upside, for just over $2K you get a
beefed up very fast development/demo environment. Make sure where ever
you go there is power!

Linux:
Loaded Mandrake 9.0, recognised everything except the winmodem off the
bat. Got the winmodem working after some effort and lots of googling.

Spec (Sep 2002 purchased)

PIII 1.2Ghz, 512Mb, 20Gb, 14 TFT, sound, CD, LAN, WinModem, 2xUSB.

Whats missing: PCMCIA. Do I miss it? No. My only issue is wifi but thats
down the track. I can get a USB wifi gadget I guess.

Oh, and yes, I did purchase with NO Windows installed. Yay.



Stu

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Can you help with this problem

2003-03-12 Thread Peter Torning




Is anyone able to help with this problem?



In a nutshell, a system is running Red Hat 7.1. I first used the game of Maelstrom as root, while I was checking the system. As a result, the game will not run for users. I was able to replicate the problem on another machine - same thing happened. If the first time Maelstrom is run, it is run as root, then it will not run for any users.



Thankyou for your assistance.



Peter C. Torning

President

ComputerBank New England



Forwarded Message-


 From: [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: cbnsw-tech digest, Vol 1 #122 - 3 msgs
 Date: 13 Mar 2003 06:30:17 +1100
 
 Send cbnsw-tech mailing list submissions to
 	[EMAIL PROTECTED]
 
 To subscribe or unsubscribe via the World Wide Web, visit
 	http://lists.cbnsw.org.au/listinfo/cbnsw-tech
 or, via email, send a message with subject or body 'help' to
 	[EMAIL PROTECTED]
 
 You can reach the person managing the list at
 	[EMAIL PROTECTED]
 
 When replying, please edit your Subject line so it is more specific
 than Re: Contents of cbnsw-tech digest...
 
 
 Today's Topics:
 
1. Re: Re: [cbnsw-members] Technical help - Maelstrom (Craige McWhirter)
2. Re: Re: [cbnsw-members] Technical help - Maelstrom (Craige McWhirter)
3. Pentium CPU's (Craig Warner)
 
 --__--__--
 
 Message: 1
 Subject: Re: [cbnsw-tech] Re: [cbnsw-members] Technical help - Maelstrom
 From: Craige McWhirter [EMAIL PROTECTED]
 To: Peter Torning [EMAIL PROTECTED]
 Cc: CBNSW Technical [EMAIL PROTECTED]
 Organization: 
 Date: 12 Mar 2003 17:58:33 +1100
 
 
 --=-g6xpZLc60/W9XN0dv51T
 Content-Type: text/plain
 Content-Transfer-Encoding: quoted-printable
 
 
 Some more questions:
 
 - Are you running Debian? (if yes go to 2)
 - What Debian version (Potato, Woody, Sarge, Sid?)
 
 I've been unable to replicate this problem.
 
 
 On Wed, 2003-03-12 at 10:39, Peter Torning wrote:
  Under KDE.=20
 =20
  I opened a Terminal as a user.=20
 =20
  Then: cd /usr/bin=20
  Then: Maelstrom=20
 =20
  It returned  segmentation fault
 =20
  I then changed to a su terminal and ran Maelstrom. It worked
  perfectly.=20
 =20
  Under Gnome=20
  I opened a Terminal as a user.=20
 =20
  Then: cd /usr/bin=20
  Then: Maelstrom=20
  It returned segmentation fault (core dumped)
 =20
  Then, as under KDE, it worked perfectly when I went in as su.
 =20
  Peter=20
 =20
  On Mon, 2003-03-10 at 23:15, Craige McWhirter wrote:=20
  =20
   What GUI environment is the user running?
  =20
   What output is there when you run maelstrom from a terminal in said GUI
   environment?
  =20
  =20
On Thu, 2003-03-06 at 09:38, Peter Torning wrote:
 Request from CB New England.
=20
 We have delivered a computer to a family, however one of the games,
 Maelstrom, will not run as a for any of the users. It will only run=
  for
 Root.
=20
 This may or may not be because I used the game as Root (purely for
 testing purposes you understand). ;-)
=20
 The owner and the group is Root.
=20
 I changed this so that the owner and group is Games and then made a=
 ll
 users members of Games. However, it still will not run for users.
=20
 Does anybody have any suggestions?
=20
 Thankyou
 Peter C. Torning
 President
 CBNE
 
 
 --=20
 
 Cheers,
   Craige.
 
 GPG Key fingerprint =3D C206 904F 5231 2F2E 8DAA  F094 5879 71B5 0960 CF37
 
 Computerbank NSW http://cbnsw.org.au/
 
 --=-g6xpZLc60/W9XN0dv51T
 Content-Type: application/pgp-signature; name=signature.asc
 Content-Description: This is a digitally signed message part
 
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.1 (GNU/Linux)
 
 iD8DBQA+btqZWHlxtQlgzzcRAhrzAJ9TBLcjgIcwcFiRZPJzEtbnEdwUdACfULpb
 Cf0iiljjgyh3GdRScL8B2XY=
 =FJeX
 -END PGP SIGNATURE-
 
 --=-g6xpZLc60/W9XN0dv51T--
 
 --__--__--
 
 Message: 2
 Subject: Re: [cbnsw-tech] Re: [cbnsw-members] Technical help - Maelstrom
 From: Craige McWhirter [EMAIL PROTECTED]
 To: Peter Torning [EMAIL PROTECTED]
 Cc: CBNSW Technical [EMAIL PROTECTED]
 Organization: 
 Date: 12 Mar 2003 23:00:47 +1100
 
 
 --=-u9olifT0sXReGtO9VCJc
 Content-Type: text/plain
 Content-Transfer-Encoding: quoted-printable
 
 
 Unfortunately, my answer is run Debian. It's far too much effort to
 support anything outside Debian because there are far too many things
 that can wrong when you stray outside Debian's system management.
 
 Outside of re-installing the machine as Debian (there are very good
 reasons why Computerbank uses Debian - you've just come across one),
 your best bet would be to email the SLUG mailing list [EMAIL PROTECTED]
 
 
 On Wed, 2003-03-12 at 20:05, Peter Torning wrote:
  No, I am running Red Hat 7.1
 =20
  By the way, I was also able to replicate the problem on a second
  computer.
 =20
  Peter C. Torning
 =20
 =20
  On Wed, 2003-03-12 at 17:58, Craige McWhirter wrote:
  =20
   Some more questions:
  =20
   - Are you running Debian? (if yes go to 2)
   - What Debian version (Potato, 

Re: [SLUG] usb and scsi

2003-03-12 Thread Chris Samuel
On Thu, Mar 13, 2003 at 08:35:02AM +1100, Adam Hewitt wrote:

No idea on the camera, I'm afraid, but..
 
 2. I have tried getting my CD-RW to work a while back, installing the
 idescsi module, and everything was sweet. The problem is that I have a
 DVD ROM drive that obviously doesn't like the scsi emulation and will
 refuse to work (properly). I have tried a few things such as appending
 details in lilo to only make the burner scsi but nothing seemed to work.
 Could someone please give me some hints on how I can get around this one
 too??

Have you tried to make them both work with the SCSI emulation by adding
hdx=scsi (where x is the ID of the DVD) to the existing hd?=scsi you've
got for your CD-RW ?

cheers,
Chris
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Can you help with this problem

2003-03-12 Thread Chris Samuel
On Thu, Mar 13, 2003 at 10:09:53AM +1100, Peter Torning wrote:
 
 In a nutshell, a system is running Red Hat 7.1. I first used the game of
 Maelstrom as root, while I was checking the system. As a result, the
 game will not run for users. I was able to replicate the problem on
 another machine - same thing happened. If the first time Maelstrom is
 run, it is run as root, then it will not run for any users.

One option may be to use strace or ltrace to watch the program
run as a normal user and see if there's any files or devices it's
trying to access and being told EPERM for ?  For example:

strace -f -o maelstrom.log /path/to/maelstrom

Would log all the system calls from Maelstrom (and any forked processes)
to the log file maelstrom.log.

Good luck!
Chris
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Can you help with this problem

2003-03-12 Thread James Gregory
On Thu, 2003-03-13 at 10:09, Peter Torning wrote:
 Is anyone able to help with this problem? 
 
 In a nutshell, a system is running Red Hat 7.1. I first used the game
 of Maelstrom as root, while I was checking the system. As a result,
 the game will not run for users. I was able to replicate the problem
 on another machine - same thing happened. If the first time Maelstrom
 is run, it is run as root, then it will not run for any users. 

I'd start with rpm -qla '*maelstrom*' - see where it has stuff
installed. Most likely there'll be something in /usr/share/games or
something which needs to have permissions changed.

Are you in the games group on this box? I don't think you can write
high score files otherwise.

HTH

James.

 Forwarded Message- 
 
  From: [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Subject: cbnsw-tech digest, Vol 1 #122 - 3 msgs
  Date: 13 Mar 2003 06:30:17 +1100
  
  Send cbnsw-tech mailing list submissions to
  [EMAIL PROTECTED]
  
  To subscribe or unsubscribe via the World Wide Web, visit
  http://lists.cbnsw.org.au/listinfo/cbnsw-tech
  or, via email, send a message with subject or body 'help' to
  [EMAIL PROTECTED]
  
  You can reach the person managing the list at
  [EMAIL PROTECTED]
  
  When replying, please edit your Subject line so it is more specific
  than Re: Contents of cbnsw-tech digest...
  
  
  Today's Topics:
  
 1. Re: Re: [cbnsw-members] Technical help - Maelstrom (Craige McWhirter)
 2. Re: Re: [cbnsw-members] Technical help - Maelstrom (Craige McWhirter)
 3. Pentium CPU's (Craig Warner)
  
  --__--__--
  
  Message: 1
  Subject: Re: [cbnsw-tech] Re: [cbnsw-members] Technical help - Maelstrom
  From: Craige McWhirter [EMAIL PROTECTED]
  To: Peter Torning [EMAIL PROTECTED]
  Cc: CBNSW Technical [EMAIL PROTECTED]
  Organization: 
  Date: 12 Mar 2003 17:58:33 +1100
  
  
  --=-g6xpZLc60/W9XN0dv51T
  Content-Type: text/plain
  Content-Transfer-Encoding: quoted-printable
  
  
  Some more questions:
  
  - Are you running Debian? (if yes go to 2)
  - What Debian version (Potato, Woody, Sarge, Sid?)
  
  I've been unable to replicate this problem.
  
  
  On Wed, 2003-03-12 at 10:39, Peter Torning wrote:
   Under KDE.=20
  =20
   I opened a Terminal as a user.=20
  =20
   Then: cd /usr/bin=20
   Then: Maelstrom=20
  =20
   It returned  segmentation fault
  =20
   I then changed to a su terminal and ran Maelstrom. It worked
   perfectly.=20
  =20
   Under Gnome=20
   I opened a Terminal as a user.=20
  =20
   Then: cd /usr/bin=20
   Then: Maelstrom=20
   It returned segmentation fault (core dumped)
  =20
   Then, as under KDE, it worked perfectly when I went in as su.
  =20
   Peter=20
  =20
   On Mon, 2003-03-10 at 23:15, Craige McWhirter wrote:=20
   =20
What GUI environment is the user running?
   =20
What output is there when you run maelstrom from a terminal in said GUI
environment?
   =20
   =20
 On Thu, 2003-03-06 at 09:38, Peter Torning wrote:
  Request from CB New England.
 =20
  We have delivered a computer to a family, however one of the games,
  Maelstrom, will not run as a for any of the users. It will only run=
   for
  Root.
 =20
  This may or may not be because I used the game as Root (purely for
  testing purposes you understand). ;-)
 =20
  The owner and the group is Root.
 =20
  I changed this so that the owner and group is Games and then made a=
  ll
  users members of Games. However, it still will not run for users.
 =20
  Does anybody have any suggestions?
 =20
  Thankyou
  Peter C. Torning
  President
  CBNE
  
  
  --=20
  
  Cheers,
Craige.
  
  GPG Key fingerprint =3D C206 904F 5231 2F2E 8DAA  F094 5879 71B5 0960 CF37
  
  Computerbank NSW http://cbnsw.org.au/
  
  --=-g6xpZLc60/W9XN0dv51T
  Content-Type: application/pgp-signature; name=signature.asc
  Content-Description: This is a digitally signed message part
  
  -BEGIN PGP SIGNATURE-
  Version: GnuPG v1.2.1 (GNU/Linux)
  
  iD8DBQA+btqZWHlxtQlgzzcRAhrzAJ9TBLcjgIcwcFiRZPJzEtbnEdwUdACfULpb
  Cf0iiljjgyh3GdRScL8B2XY=
  =FJeX
  -END PGP SIGNATURE-
  
  --=-g6xpZLc60/W9XN0dv51T--
  
  --__--__--
  
  Message: 2
  Subject: Re: [cbnsw-tech] Re: [cbnsw-members] Technical help - Maelstrom
  From: Craige McWhirter [EMAIL PROTECTED]
  To: Peter Torning [EMAIL PROTECTED]
  Cc: CBNSW Technical [EMAIL PROTECTED]
  Organization: 
  Date: 12 Mar 2003 23:00:47 +1100
  
  
  --=-u9olifT0sXReGtO9VCJc
  Content-Type: text/plain
  Content-Transfer-Encoding: quoted-printable
  
  
  Unfortunately, my answer is run Debian. It's far too much effort to
  support anything outside Debian because there are far too many things
  that can wrong when you stray outside Debian's system management.
  
  Outside of re-installing the machine as Debian (there are very good
  reasons why Computerbank uses Debian - you've just come across one),
  your best bet would be to email 

Re: [SLUG] Microsoft Tax

2003-03-12 Thread Glen Turner

Also, I thought Dell were starting to offer no-OS machines?
Maybe that's just on their servers.
Technically, Dell's license with MS doesn't allow Dell to offer
no-OS machines.  Brilliantly, in markets where this matters
Dell will sell you a machine with FreeDOS installed.
Dell don't sell no-OS machines to the retail trade.  They
are simply on too low margins to deal with the inevitable
support calls.  They are happy to see this high-cost
business go elsewhere.
Hopefully the day will come when Dell will see profit
rather than cost in offering a Linux distribution as
a operating system choice across their retail desktop
range.  To Dell's credit, they have at least put their
toe in the Linux desktop market, even if they then found
sales too disappointing to continue.
Yeah this is their server models. Its actually the default option - they
come with no OS unless otherwise stated.
But no hope for the laptops/desktops going this way.
Not quite right.  Dell will ship FreeDOS desktops and
laptops in their sales programmes aimed at corporates
and schools.  If fact, they'll go further and install
any image you supply.
Under these programmes tech support is available for Windows
images on all platforms and Red Hat Linux images on most
platforms.  Images for other OSs or other platforms will
be installed but are not supported (that's right, there's
no tech support for FreeDOS).
What this means for you and me is that Dell tests Red Hat
Linux on some of its desktop models.  If you can work out
whcih these are then you can but a Dell machine knowing
that at least one Linux distribution will run on it and
that the fixes for making RHL run on the machine are documented
on the Dell website.  Those fixes usually appear promptly
in RHL releases and in the program source code.
--
 Glen Turner(08) 8303 3936 or +61 8 8303 3936
 Australian Academic and Research Network   www.aarnet.edu.au
--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Network card settings

2003-03-12 Thread mark . crisp
Hi Sluggers,

Does anyone know how to change your network card settings from auto to (
10/100, full/half ) as the xircom pcmcia card does not auto negotiate with
Cisco 4000 switch to well. Also the Cisco has spanning tree running.

linux ver - Mandrake 8.1, module used - tulop_cb  cb_enabler

I am hoping there is a config file somewhere that I have missed.

cheers

Mark


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Python Interest Group: Appeal for speakers.

2003-03-12 Thread Mary
Hi everyone,

This month's SLUG Python Interest Group will probably be held on Monday
March 24, but before I can organise it, I need a speaker.

Can anyone who could talk to us about Python or Python applications
please email me?

Thanks,

Mary
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Network card settings

2003-03-12 Thread Chris Samuel
On Thu, Mar 13, 2003 at 12:33:23PM +1000, [EMAIL PROTECTED] wrote:

 Does anyone know how to change your network card settings from auto to (
 10/100, full/half ) as the xircom pcmcia card does not auto negotiate with
 Cisco 4000 switch to well. Also the Cisco has spanning tree running.

There is the ifport command will configure a port to a specific
setting, if you run it with no options it says:

# ifport
usage: ifport interface [auto|10baseT|10base2|aui|100baseT|##]

it will also tell you what the port is set to, like so:

# ifport eth0
eth00 (Auto)

 linux ver - Mandrake 8.1, module used - tulop_cb  cb_enabler

Hmm, I'm using Mandrake 9.0, but the nearest I have to that is a
module called xircom_tulip_cb. You can find what parameters can
be set on a module by using the modinfo command, so my system says:

# modinfo xircom_tulip_cb
filename:/lib/modules/2.4.19-16mdk/kernel/drivers/net/pcmcia/xircom_tulip_cb.o.gz
description: Xircom CBE-100 ethernet driver
author:  Donald Becker [EMAIL PROTECTED]
license: GPL v2
parm:debug int
parm:max_interrupt_work int
parm:rx_copybreak int
parm:csr0 int
parm:options int array (min = 1, max = 4)
parm:full_duplex int array (min = 1, max = 4)

So that will let you set the duplex when the module loads, at least!
To do that you will need to add the following line into /etc/modules.conf:

options xircom_tulip_cb duplex=?

You'd need to look at the documentation or source for the module to find
what the various values of duplex match.

good luck!
Chris

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Reminder: SLUG Annual General Meeting, Friday March 28th 2003

2003-03-12 Thread Mary Gardiner
I'm only sending this one to [EMAIL PROTECTED], announce subscribers
probably consider themselves sufficiently spammed.

This is the 4th notice to [EMAIL PROTECTED] of the upcoming AGM and committee
election to be held at the end of March.

2003 Committee update:

Current nominees:
 - Vice President: Jan Schmidt (nominated by Craige McWhirter, no
   second)



At the Annual General Meeting, the President and Treasurer will present
their reports for 2002, and the 2003 SLUG Committee will be elected.

Summary: nominations for SLUG committee 2003 are now open and should be
sent to [EMAIL PROTECTED] Anyone standing for election or wanting to
vote must pay membership fees for 2003 before or at the March meeting.

SLUG membership:
People wanting to vote in the elections, and people standing for a
committee position, *must* become financial members of SLUG for the
coming year.

All existing SLUG memberships expire before the AGM.

A full year of SLUG membership costs $25. This can be paid at any
time from now until the AGM to the SLUG Treasurer, Jamie Wilkinson.
(You can pay after the AGM too, for that matter, to the new
treasurer, but you obviously will have missed voting.)

Elections:

All SLUG committee positions will become vacant before the AGM and a
new committee will be elected.

Nominations are now open and will close just before the election
itself. Nominations should be sent to the [EMAIL PROTECTED] list.
Nominations need to be seconded, which should also happen on
[EMAIL PROTECTED]  You should check with the nominee first to make
sure they actually want to stand for election.

Positions:
 - President: responsible for chairing committee meetings. Informal
   responsibilities include steering SLUG, and representing SLUG to
   the public and media.

 - Vice-president: The president's right-hand, left-hand, and other
   limbs as appropriate.

 - Secretary: Takes minutes at committee meetings, handles
   correspondence.

 - Treasurer: handles SLUG finances. The SLUG treasurer will need to
   be organised and capable of keeping correct records of income and
   expenditure.

 - Ordinary committee members: There are three ordinary committee
   members.
   
The committee as a whole generally organises the monthly meetings
and most other SLUG events.

All committee members are expected to attend the monthly committee
meetings. Committee meetings are usually held in an evening during
the first week after the SLUG monthly meeting.

Reminder: to run for committee, you must pay for a 2003 membership.
You can do this at the AGM or before.

2002 committee:

   The 2002 committee, whose glorious reign ends at the AGM, is:

- President: Jeff Waugh

- Vice president: Craige McWhirter

- Secretary: Peter Hardy

- Treasurer: Jamie Wilkinson

- Ordinary members: Tony Green, Jan Schmidt, Mary Gardiner

Proxies:

   If you cannot attend the March meeting, you can appoint a proxy to
   vote on your behalf (the proxy can also vote on their own behalf).
   Email [EMAIL PROTECTED] and tell them the name of the person who
   holds your proxy vote. Make sure you've paid for your 2003 membership
   if you do this!
   
   If you don't know anyone who can proxy for you, email
   [EMAIL PROTECTED] with the names of the nominees you wish to vote
   for, and a 2002 committee member will be your proxy.

-Mary
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] WineX 3.0 Preview release available

2003-03-12 Thread Brett Olsen
Title: WineX 3.0 Preview release available





Just a quick note, Winex have released a preview of Version 3, available to all members.


The WineX 3.0 preview release marks the first recent release based on 
TransGaming's core development efforts on the main WineX development 
branch, rather than the 'stable' 2.0 branch. TransGaming's developers 
have added the key enabling technologies for the next generation of 
games, including many that were highly rated in the monthly polls, such 
as Battlefield 1942, Sim City 4, Medal of Honor: Allied Assault, and 
Dungeon Siege.


Thank You
Brett Olsen





Re: [SLUG] injecting mboxes into postfix

2003-03-12 Thread Jamie Wilkinson
This one time, at band camp, David Kempe wrote:
 I ended up just doing the safecat thing.

out of interest what was it you did to get them into maildir format?

cd /var/spool/mail
for i in *; do su -s /bin/bash - $i -c formail -s safecat Maildir/tmp
Maildir/new  /var/spool/mail/$i; done

-- 
[EMAIL PROTECTED]   http://spacepants.org/jaq.gpg
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Reminder: SLUG Annual General Meeting, Friday March28th 2003

2003-03-12 Thread Dave Kempe
What happens if no one else is nominated?

dave

On Thu, 2003-03-13 at 14:13, Mary Gardiner wrote:
 2003 Committee update:
 
 Current nominees:
  - Vice President: Jan Schmidt (nominated by Craige McWhirter, no
second)


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Reminder: SLUG Annual General Meeting, Friday March 28th2003

2003-03-12 Thread Peter Hardy
On 13 Mar 2003 15:39:49 +1100 Dave Kempe wrote:
 What happens if no one else is nominated?
 
 dave

Then Jan shall have full power over SLUG, and we shall become his evil
minions with which he shall conquer the world and bend it to his
terrible will.

Please, we *need* more nominations.  Stop the horror! :-)

-- 
Pete
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Reminder: SLUG Annual General Meeting, Friday March 28th 2003

2003-03-12 Thread Mary
On Thu, Mar 13, 2003 at 03:47:31PM +1100, Peter Hardy wrote:
 Then Jan shall have full power over SLUG, and we shall become his evil
 minions with which he shall conquer the world and bend it to his
 terrible will.
 
 Please, we *need* more nominations.  Stop the horror! :-)

I think it's OK. Noone takes a title like Vice President seriously. We
all know that the VP is only there in case the President, uh, becomes
seriously ill...

-Mary

[PS More SLUG horror stories to slug-chat. Thanks.]
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Reminder: SLUG Annual General Meeting, Friday March28th 2003

2003-03-12 Thread Dave Kempe
So the joke gets a serious answer and the serious questions gets a joke?

:(


dave


On Thu, 2003-03-13 at 16:08, Mary wrote:
 I think it's OK. Noone takes a title like Vice President seriously. We
 all know that the VP is only there in case the President, uh, becomes
 seriously ill...


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Reminder: SLUG Annual General Meeting, Friday March 28th 2003

2003-03-12 Thread Mary
On Thu, Mar 13, 2003 at 04:09:52PM +1100, Dave Kempe wrote:
 So the joke gets a serious answer and the serious questions gets a
 joke?

Serious answer to the question about what happens if there are no more
nominations?

I *think* it might mean we'd be unable to form a committee, and that
would probably mean holding a general meeting every month until seven
people finally got nominated for the seven positions. In the meantime,
it would be rather hard to get cheques signed, although the monthly
meetings could still be organised.

I can check the consitution if people are really interested.

But, the real situation is simply that nominations are not yet in high
gear. The above scenario is the alarmist one ;)

Also, for people who want to get involved: not all of the present
committee intends to stand again, so SLUG will actually *need* fresh
blood. Offer yourself up!

-Mary
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Reminder: SLUG Annual General Meeting, Friday March 28th 2003

2003-03-12 Thread Jeff Waugh
quote who=Dave Kempe

 What happens if no one else is nominated?

... and the constitution says:

  If insufficient further nominations are received, any vacant positions
  remaining on the committee are taken to be casual vacancies.

(Can't get to www.slug.org.au atm, so no link. Note that this is based on
the copy of the constitution on my hard drive, which may not be canonical.)

- Jeff

-- 
  We've got a great drummer and a great singer. Those are the key  
positions. When you find a singer and a drummer this good, you don't
  leave them. - Stone Gossard, Pearl Jam   
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Reminder: SLUG Annual General Meeting, Friday March 28th2003

2003-03-12 Thread Peter Hardy
On 13 Mar 2003 16:09:52 +1100 Dave Kempe wrote:

 So the joke gets a serious answer and the serious questions gets a
 joke?
 
 :(

I was getting there, honest.

If there aren't enough nominations to fill all the vacancies, then
further nominations are taken at the AGM.  If there still aren't enough,
then any unfilled positions become casual vacancies.  Which means they
can be filled at any general meeting, I believe.  It's all outlined in
the constitution, at http://slug.org.au/constitution.html

-- 
Pete
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Reminder: SLUG Annual General Meeting, Friday March 28th 2003

2003-03-12 Thread Mary
On Thu, Mar 13, 2003 at 04:19:08PM +1100, Jeff Waugh wrote:
 quote who=Dave Kempe
 
  What happens if no one else is nominated?
 
 ... and the constitution says:
 
   If insufficient further nominations are received, any vacant positions
   remaining on the committee are taken to be casual vacancies.

Can the committee appoint people to casual vacancies, or do they require
a little election? [To those with a long memory: yes, I authored most of
the recent changes to the constitution, no, my memory is not as long as
yours ;)]

Anyway, better than my casual analysis suggested. The world as we know
it shall continue largely unchanged, except for supplying Jan with more
nubile young food.

-Mary
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread mkraus
Hi,

Have you checked the various VPN HOWTOs in /usr/share/doc/HOWTO/HTML/en ?

HTH

Mike
---
Michael S. E. Kraus
Administration
Capital Holdings Group (NSW) Pty Ltd
p: (02) 9955 8000




Phil Scarratt [EMAIL PROTECTED]
Sent by: [EMAIL PROTECTED]
13/03/2003 04:32 PM

 
To: SLUG [EMAIL PROTECTED]
cc: 
Subject:[SLUG] Win2k - Linux VPN


Hi all

Sorry to interrupt all this talk about nominations

Anyone know a good howto or pointers on setting up a VPN from Win32 
clients to Linux server? I'm currently looking at setting up an 
IPSEC/L2TP tunnel but am having trouble getting IPSec to work. I tried 
to follow instructions at both

http://www.strongsec.com/freeswan/install.htm

and

http://www.jacco2.dds.nl/networking/freeswan-l2tp.html

to no avail as yet. I get packets arriving at the eth interface but not 
ipsec0 interface (tcpdump). No packets are being dropped or rejected but 
the logs say the following:

Mar 13 16:25:39 neo pluto[28331]: L2TP-CERT-WIN2KXP[2] 192.168.1.201 
#3: unable to locate my private key for RSA Signature
Mar 13 16:25:55 neo pluto[28331]: L2TP-CERT-WIN2KXP[2] 192.168.1.201 
#3: Peer ID is ID_DER_ASN1_DN: 'C=AU, ST=NSW, O=Draxsen, CN=rivendell'

The error looks like an obvious oversight somewhere but I can't find it?

Is there a better way? (apart from not using M$ OS at all that is).

Thanks for any tips or info.

Fil
-- 
Phil Scarratt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug



-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread John Clarke
On Thu, Mar 13, 2003 at 04:32:27PM +1100, Phil Scarratt wrote:

 Anyone know a good howto or pointers on setting up a VPN from Win32 
 clients to Linux server? I'm currently looking at setting up an 

I can't offer any suggestions to fix your particular problem, other
than to point you at a couple of VPN references that you may already
know about.

There's a book called Building Linux VPNs which I bought recently.  I
haven't read it all yet, but what I have read is pretty good.  I used
it to set up ppp over ssh a couple of days ago:

http://www.buildinglinuxvpns.net/

Then there's the VPN FAQ at:

http://vpn.shmoo.com/vpn/FAQ.html

and other VPN info at:

http://vpn.shmoo.com/


Cheers,

John
-- 
whois [EMAIL PROTECTED]
GPG key id: 0xD59C360F
http://kirriwa.net/john/
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] Win2k - Linux VPN

2003-03-12 Thread Adam W
 There's a book called Building Linux VPNs which I bought 
 recently.  I haven't read it all yet, but what I have read is 
 pretty good.  I used it to set up ppp over ssh a couple of days ago:

Just on this topic of VPN's. I have been meaning to ask everybody. How
secure are VPN's in terms of packet sniffers/encryption etc. The company
that I work for has decided to use citrix Nfuse or whatever the S^#@ is!
Because they argue that using a VPN is insecure - I totally disagree
with this, as I know massive multi-national corporations use these and
rely on these. And as if these companies would use this if it was
insecure.

This isnt to say we havent got VPN access - they have set up a win2k
server to do this, though they make everyone use citrix nFuse(over a
128bit SSL connection), and only special people (like me :) get to use a
VPN.

Personally I hate citrix - VPN for remote access is 100 times quicker
and more convenient (for the laptop user)!

Cheers,

And TIA for your comments.

Adam W.

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] WineX 3.0 Preview release available

2003-03-12 Thread Brett Olsen
Hi Guys,
Sorry about that :-)

Transgaming can be found at www.transgaming.com, some screenshots can be
found in the games database :
http://www.transgaming.com/dogamesearch.php?keywords=search=Searchworking=
0order=working

A bit of NFO, WineX is a project that was originally based on Wine, which
focuses on DirectX and other gaming technologies.

I use WineX, to ease my Windoze gaming fix, typically I can install the game
from WineX, get a Desktop Icon and click the shortcut, just like any windows
game, but with no windows at all !

Guess I just assumed you had all been using it since version 1 :-)

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Thursday, 13 March 2003 4:18 PM
To: Brett Olsen
Subject: Re: [SLUG] WineX 3.0 Preview release available


Screenshots...?  URI...?

Thanks

Mike
---
Michael S. E. Kraus
Administration
Capital Holdings Group (NSW) Pty Ltd
p: (02) 9955 8000




Brett Olsen [EMAIL PROTECTED]
Sent by: [EMAIL PROTECTED]
13/03/2003 02:14 PM

 
To: [EMAIL PROTECTED]
cc: 
Subject:[SLUG] WineX 3.0 Preview release available


Just a quick note, Winex have released a preview of Version 3, available 
to all members. 
The WineX 3.0 preview release marks the first recent release based on 
TransGaming's core development efforts on the main WineX development 
branch, rather than the 'stable' 2.0 branch. TransGaming's developers 
have added the key enabling technologies for the next generation of 
games, including many that were highly rated in the monthly polls, such 
as Battlefield 1942, Sim City 4, Medal of Honor: Allied Assault, and 
Dungeon Siege. 
Thank You 
Brett Olsen 

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread Phil Scarratt
My concern with the PPTP path is the reported security issues:

# Flawed encryption mechanism -- non-random keys, session keys weak hash 
of user password, key lengths too short (non-configurable)
# Bad password management in mixed Win95/NT environment; static 
passwords easily compromised
# Vulnerable to server spoofing attacks because packet authentication 
not implemented, easy denial-of-service attacks even inside firewalls
# MS claims cryptographic weaknesses not yet exploited

Fil

Kevin Saenz wrote:
When I was playing with windows and Linux VPN I was using PPTP
the connectivity is seamless. I think if you are using Windows
standard VPN software then I would be inclined to point you to
use PPTP kernel patch. You don't need to add any third party 
software to Windows.

PPTP has pretty good docs on how to install PPTP on to Linux and
get the server up and running. Also making Linux a PPTP/VPN server
is a piece of cake.


Hi all

Sorry to interrupt all this talk about nominations

Anyone know a good howto or pointers on setting up a VPN from Win32 
clients to Linux server? I'm currently looking at setting up an 
IPSEC/L2TP tunnel but am having trouble getting IPSec to work. I tried 
to follow instructions at both

http://www.strongsec.com/freeswan/install.htm

and

http://www.jacco2.dds.nl/networking/freeswan-l2tp.html

to no avail as yet. I get packets arriving at the eth interface but not 
ipsec0 interface (tcpdump). No packets are being dropped or rejected but 
the logs say the following:

Mar 13 16:25:39 neo pluto[28331]: L2TP-CERT-WIN2KXP[2] 192.168.1.201 
#3: unable to locate my private key for RSA Signature
Mar 13 16:25:55 neo pluto[28331]: L2TP-CERT-WIN2KXP[2] 192.168.1.201 
#3: Peer ID is ID_DER_ASN1_DN: 'C=AU, ST=NSW, O=Draxsen, CN=rivendell'

The error looks like an obvious oversight somewhere but I can't find it?

Is there a better way? (apart from not using M$ OS at all that is).

Thanks for any tips or info.

Fil
--
Phil Scarratt


--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread John Clarke
On Thu, Mar 13, 2003 at 04:55:16PM +1100, Adam W wrote:

 Just on this topic of VPN's. I have been meaning to ask everybody. How
 secure are VPN's in terms of packet sniffers/encryption etc. The company

This is a how long is a piece of string question.  It all depends
upon the encryption used, the strength of the keys and key management,
authentication and access control and the security of the VPN server and
client.

The weakest point is probably the client machine.  How many users
(especially Windows users) secure their machines?  Cisco's VPN client
(and maybe others) blocks *all* external network access to the machine
it's running on as a protection against an attack on the VPN via a
remote client.

Read through some of the info on the VPN site (http://cpn.shmoo.com/)
for more detailed explanation of the strengths and weaknesses of various
VPN solutions.

 This isnt to say we havent got VPN access - they have set up a win2k
 server to do this, though they make everyone use citrix nFuse(over a
 128bit SSL connection), and only special people (like me :) get to use a
 VPN.

You can run your VPN over SSL so you can tell the PHBs that it's as
secure as Citrix :-)  There's a chapter on ppp over ssl in the Linux
VPN book I referred to earlier.  I haven't read it all, but from what I
have read it appears that ppp over ssh is easier to setup and
troubleshoot and at least as secure.


Cheers,

John
-- 
whois [EMAIL PROTECTED]
GPG key id: 0xD59C360F
http://kirriwa.net/john/
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread mlh
On Thu, Mar 13, 2003 at 04:55:16PM +1100, Adam W wrote:
 Just on this topic of VPN's. I have been meaning to ask everybody. How
 secure are VPN's in terms of packet sniffers/encryption etc. The company

Secure for whom against what and where exactly?
VPNS protect against people sniffing the traffic, but
they're a bit of a worry if they terminate inside your lan.
Then you're at the mercy of the weakest security at the client's
end.

 [ .. ] And as if these companies would use this if it was
 insecure.

Larf!!

Seriously, there's a lot of detail to be filled in here
before anyone can see whether it is or isn't secure.

Matt
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] Win2k - Linux VPN

2003-03-12 Thread Rob B
At 04:55 PM 13/03/03, Adam W sent this up the stick:
Just on this topic of VPN's. I have been meaning to ask everybody. How
secure are VPN's in terms of packet sniffers/encryption etc. The company
that I work for has decided to use citrix Nfuse or whatever the S^#@ is!
Because they argue that using a VPN is insecure - I totally disagree
with this, as I know massive multi-national corporations use these and
rely on these. And as if these companies would use this if it was
insecure.
A IPSEC VPN seems to be most secure out of these technologies, when I 
worked for a large ISP we used to implement them (with 3DES encryption and 
key regeneration every hour).  Since the actual keys aren't transmitted, 
they can't be sniffed.  They were a nice cash cow for us, being a managed 
service and all.

However, you still want a firewall or the like protecting the VPN box, if 
the VPN box is compromised, then the whole VPN is compromised too.

cheers,
rob
--
It was such a lovely day I thought it a pity to get up.
This is random quote 724 of 1254.

Distance from the centre of the brewing universe
[15200.8 km (8207.8 mi), 262.8 deg](Apparent) Rennerian
Public Key fingerprint = 6219 33BD A37B 368D 29F5  19FB 945D C4D7 1F66 D9C5

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread John Clarke
On Thu, Mar 13, 2003 at 05:14:58PM +1100, Phil Scarratt wrote:

 My concern with the PPTP path is the reported security issues:

It's actually MS's implementation that's flawed rather than PPTP itself.
However, the most likely reason for using PPTP is Windows clients and
that means MS's implementation.

Bruce Schneier has analysed it and found it to be severely flawed, and
recommends IPSEC instead.  That's good enough for me.  From
http://www.counterpane.com/pptp-faq.html:

3. How bad is it?

Very. Microsoft PPTP is very broken, and there's no real way to
fix it without taking the whole thing down and starting over.
This isn't just one problem, but six different problems, any
one of which breaks the protocol.



Cheers,

John
-- 
whois [EMAIL PROTECTED]
GPG key id: 0xD59C360F
http://kirriwa.net/john/
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread Kevin Saenz
I think that was with pptp2 and that was patched 6 months ago.
I am pretty sure of that because with 2k is using pptp3

 My concern with the PPTP path is the reported security issues:
 
 # Flawed encryption mechanism -- non-random keys, session keys weak hash 
 of user password, key lengths too short (non-configurable)
 # Bad password management in mixed Win95/NT environment; static 
 passwords easily compromised
 # Vulnerable to server spoofing attacks because packet authentication 
 not implemented, easy denial-of-service attacks even inside firewalls
 # MS claims cryptographic weaknesses not yet exploited
 
 Fil
 
 Kevin Saenz wrote:
  When I was playing with windows and Linux VPN I was using PPTP
  the connectivity is seamless. I think if you are using Windows
  standard VPN software then I would be inclined to point you to
  use PPTP kernel patch. You don't need to add any third party 
  software to Windows.
  
  PPTP has pretty good docs on how to install PPTP on to Linux and
  get the server up and running. Also making Linux a PPTP/VPN server
  is a piece of cake.
  
  
  
 Hi all
 
 Sorry to interrupt all this talk about nominations
 
 Anyone know a good howto or pointers on setting up a VPN from Win32 
 clients to Linux server? I'm currently looking at setting up an 
 IPSEC/L2TP tunnel but am having trouble getting IPSec to work. I tried 
 to follow instructions at both
 
 http://www.strongsec.com/freeswan/install.htm
 
 and
 
 http://www.jacco2.dds.nl/networking/freeswan-l2tp.html
 
 to no avail as yet. I get packets arriving at the eth interface but not 
 ipsec0 interface (tcpdump). No packets are being dropped or rejected but 
 the logs say the following:
 
 Mar 13 16:25:39 neo pluto[28331]: L2TP-CERT-WIN2KXP[2] 192.168.1.201 
 #3: unable to locate my private key for RSA Signature
 Mar 13 16:25:55 neo pluto[28331]: L2TP-CERT-WIN2KXP[2] 192.168.1.201 
 #3: Peer ID is ID_DER_ASN1_DN: 'C=AU, ST=NSW, O=Draxsen, CN=rivendell'
 
 The error looks like an obvious oversight somewhere but I can't find it?
 
 Is there a better way? (apart from not using M$ OS at all that is).
 
 Thanks for any tips or info.
 
 Fil
 -- 
 Phil Scarratt
  
  

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread Jeff Waugh
quote who=John Clarke

 It's actually MS's implementation that's flawed rather than PPTP itself.
 However, the most likely reason for using PPTP is Windows clients and that
 means MS's implementation.

Lots of people are still using PPTP for Win9x clients, because that's all
they have... However, MS now has a very easy to use IPSEC client
implementation for Win9x that works reasonably well. Far, far better (on the
server end, client end, and for general security) than PPTP! :-)

- Jeff

-- 
 It's only ironic because it's true. - Reflexive irony, overheard 
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread Dave Kempe
I haven't any luck getting native mode l2tp to work on win2k.
we use netscreen remote instead - www.netscreen.com with a high degree
of success.
100 user license is around $500
its based on the safenet ipsec client.

works well - easy to deploy and support

dave

On Thu, 2003-03-13 at 16:32, Phil Scarratt wrote:
 Is there a better way? (apart from not using M$ OS at all that is).
 


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] Win2k - Linux VPN

2003-03-12 Thread Adam Hewitt
Thats all well and good if you have a routable address range, if you are
just getting one public address statically from your service provider
then you are stuck with 1) a firewall on the same box as the vpn is
terminated or 2) no firewall at all. The reason for this is that IPSEC
cannot be nat'ed, so you would need to have a firewall--DMZ--VPN
Termination box.

IPSEC would definitely be the best choice provided you are willing to
either sit down and really find out what makes it tick. The freeswan
implimentation is crap, the underlying software is quite good, but the
'scripts' which attempt to make things easier, dont, and it needs a lot
of work.

As far as security goes, back orifice on any windows machine running a
vpn client or citrix is still going to give someone access to the
internal network. If you want complete security pull the plug on your
computer, after all locks were invented to keep the honest people out.

Cheers,

Adam. 

 
 However, you still want a firewall or the like protecting the VPN box, if 
 the VPN box is compromised, then the whole VPN is compromised too.

-- 
Adam Hewitt [EMAIL PROTECTED]

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread Adam Hewitt
BTW, you are probably better off gettign everything working with a
pre-shared key first and then trying certificates. The certificates just
add an extra element that you may not want to deal with on your first
time round...

Adam.

On Thu, 2003-03-13 at 16:32, Phil Scarratt wrote:
 Hi all
 
 Sorry to interrupt all this talk about nominations
 
 Anyone know a good howto or pointers on setting up a VPN from Win32 
 clients to Linux server? I'm currently looking at setting up an 
 IPSEC/L2TP tunnel but am having trouble getting IPSec to work. I tried 
 to follow instructions at both
 
 http://www.strongsec.com/freeswan/install.htm
 
 and
 
 http://www.jacco2.dds.nl/networking/freeswan-l2tp.html
 
 to no avail as yet. I get packets arriving at the eth interface but not 
 ipsec0 interface (tcpdump). No packets are being dropped or rejected but 
 the logs say the following:
 
 Mar 13 16:25:39 neo pluto[28331]: L2TP-CERT-WIN2KXP[2] 192.168.1.201 
 #3: unable to locate my private key for RSA Signature
 Mar 13 16:25:55 neo pluto[28331]: L2TP-CERT-WIN2KXP[2] 192.168.1.201 
 #3: Peer ID is ID_DER_ASN1_DN: 'C=AU, ST=NSW, O=Draxsen, CN=rivendell'
 
 The error looks like an obvious oversight somewhere but I can't find it?
 
 Is there a better way? (apart from not using M$ OS at all that is).
 
 Thanks for any tips or info.
 
 Fil
 -- 
 Phil Scarratt
-- 
Adam Hewitt [EMAIL PROTECTED]

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Win2k - Linux VPN

2003-03-12 Thread Phil Scarratt
My understanding is that PSK is not possible with Win2K

Fil

Adam Hewitt wrote:
BTW, you are probably better off gettign everything working with a
pre-shared key first and then trying certificates. The certificates just
add an extra element that you may not want to deal with on your first
time round...
Adam.

On Thu, 2003-03-13 at 16:32, Phil Scarratt wrote:

Hi all

Sorry to interrupt all this talk about nominations

Anyone know a good howto or pointers on setting up a VPN from Win32 
clients to Linux server? I'm currently looking at setting up an 
IPSEC/L2TP tunnel but am having trouble getting IPSec to work. I tried 
to follow instructions at both

http://www.strongsec.com/freeswan/install.htm

and

http://www.jacco2.dds.nl/networking/freeswan-l2tp.html

to no avail as yet. I get packets arriving at the eth interface but not 
ipsec0 interface (tcpdump). No packets are being dropped or rejected but 
the logs say the following:

Mar 13 16:25:39 neo pluto[28331]: L2TP-CERT-WIN2KXP[2] 192.168.1.201 
#3: unable to locate my private key for RSA Signature
Mar 13 16:25:55 neo pluto[28331]: L2TP-CERT-WIN2KXP[2] 192.168.1.201 
#3: Peer ID is ID_DER_ASN1_DN: 'C=AU, ST=NSW, O=Draxsen, CN=rivendell'

The error looks like an obvious oversight somewhere but I can't find it?

Is there a better way? (apart from not using M$ OS at all that is).

Thanks for any tips or info.

Fil
--
Phil Scarratt



--
Phil Scarratt
Draxsen Technologies
IT Contractor/Consultant
0403 53 12 71
--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Nominations

2003-03-12 Thread Erik de Castro Lopo
Hi all,

I paid my membership fee at the last SLUG meeting and would like
to nominate all the current office holders for their current
positions:

 - President: Jeff Waugh
 
 - Vice president: Craige McWhirter
 
 - Secretary: Peter Hardy
 
 - Treasurer: Jamie Wilkinson
 
 - Ordinary members: Tony Green, Jan Schmidt, Mary Gardiner

Erik
-- 
+---+
  Erik de Castro Lopo  [EMAIL PROTECTED] (Yes it's valid)
+---+
The whole principle is wrong; it's like demanding that grown men live on 
skim milk because the baby can't eat steak.
- author Robert A. Heinlein on censorship.
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] BIG IMAGES

2003-03-12 Thread James Gregory
Hi all,

I have some images, they are gifs, and they're approximately 14000
pixels square. I'd really like to view them, and ideally perform
transformations such as scaling to a less insane size.

What can do this?

I suspect part of the problem is that the gif needs to be decompressed.
If someone can suggest something that will convert a gif to something
else for big files, that would be a great start. Programs that crash so
far:

gimp
gqview
convert
eog

Thanks,

James.


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug