Re: OK to upgrade to 8.5?

2016-07-28 Thread Steve Matzura
That article talks about upgrading from 7 (Weezy) to 8 (Jessie). I am already on 8--8.0 specifically. I was thinking of updating, maybe upgrade is the wrong term, to 8.5. On Thu, 28 Jul 2016 12:38:12 +0300, you wrote: >Steve Matzura [2016-07-28 05:21:59-04] wrote: > >> Sho

Re: OK to upgrade to 8.5?

2016-07-28 Thread Steve Matzura
I am running 8.0; 8.5 is out. Came out on June 24. Are you saying I should wait for 9 to become stable release and then upgrade to that version? I thought by going to 8.5 would be a good idea. Maybe not? On Thu, 28 Jul 2016 11:34:01 +0200, you wrote: >Steve Matzura: >> >>

OK to upgrade to 8.5?

2016-07-28 Thread Steve Matzura
Should I follow the standard procedure--edit sources.list to include the DVD drive (if it's not there already), then 'apt-get upgrade' followed by 'apt-get full-upgrade'?

Re: Networking nonfunctional on 8.0

2016-07-28 Thread Steve Matzura
On Wed, 27 Jul 2016 20:46:23 +0200, you wrote: >Le 27/07/2016 à 15:43, Steve Matzura a écrit : >> My 8.0 system has been running great up until Monday evening when >> users started reporting they were unable to connect. Sure enough, I >> couldn't even connect from my LA

Networking nonfunctional on 8.0

2016-07-27 Thread Steve Matzura
My 8.0 system has been running great up until Monday evening when users started reporting they were unable to connect. Sure enough, I couldn't even connect from my LAN. I rebooted, looked at messages from dmesg, and saw nothing unusual--nothing that said networking couldn't start, or there was a

Re: synaptic package manager error

2016-07-20 Thread steve
irst. One way to do it is: ps aux | grep dpkg (or if it's not dpkg but apt-get or aptitude, you can try: ps aux | grep apt ) which will give you the PID of the process. Then you kill it with sudo kill -9 Then you can try to update process. Hope it helps. Best, Steve

Re: dépôts "stable" intéressants ou sympas

2016-06-27 Thread steve
voie pour y arriver. mes 2 centimes Steve

Re: jessie won't install/boot on a Dell Poweredge R815

2016-06-24 Thread Steve McIntyre
ks and you're trying to boot off it with grub-pc. You're hitting BIOS limitations here - the BIOS is only capable of accessing 4 disks. I'm *guessing* that maybe the newer grub in jessie is just being pickier about checking BIOS access to those disks. Try just using 4 of the disks f

Re: Bug with lib ssl

2016-06-18 Thread Steve Witt
On Sat, 18 Jun 2016, Fabrice Vaillant wrote: Hey I'm running debian testing and I have encountered a weird bug. Wanted to check if that was a real bug or an issue on my end. The site https://www.w3.org/2010/05/video/mediaevents.html fails on my computer with both iceweasel on chromium

Re: home directory fail-over using automount ?

2016-06-17 Thread Steve Witt
On Fri, 17 Jun 2016, bri...@aracnet.com wrote: I have my nfs shares set-up to automount to /home/nfs4/ and then that directory name is used in the /etc/passwd file. What i'd like to do is have it use /home/ in the event it can't see the nfs server. it seems like some automount trickery

Re: Compteur de temps d'utilisation

2016-06-15 Thread steve
Salut, As-tu essayé le paquet xprintidle ? S

Re: Désactiver la carte son d'un Laptob

2016-06-04 Thread steve
Le 04-06-2016, à 12:28:49 +, Alex PADOLY a écrit : Bonjour, La sortie casque de mon ordinateur portable est HS, j'ai du son uniquement par le modeste haut-parleur de mon PC Portable (DELL D430. Je vais donc acheter une carte son externe sur port USB. Je souhaiterai avant

Re: Mise à jour des librairies

2016-06-04 Thread steve
Le 04-06-2016, à 12:24:37 +, Alex PADOLY a écrit : Bonjour,   Merci pour vos réponses, cela signifie quoi exactement "activer les backports''? Cela veut dire ajouter la ligne suivante dans le fichier /etc/apt/sources.list: # backports deb http://ftp.fr.debian.org/debian

Re: bien configurer son mailman

2016-06-04 Thread steve
Le 04-06-2016, à 12:13:52 +0200, Bernard Schoenacker a écrit : bonjour, je suis en train de mettre en place mailman et j'ai quelques soucis ... voici les liens : https://doc.ubuntu-fr.org/mailman https://guide.ubuntu-fr.org/server/mailman.html pour info j'ai installé : -a) php 5.x et

Re: jessie install cd no network

2016-06-03 Thread Steve McIntyre
t be missing firmware. Try using the firmware-included netinst: http://cdimage.debian.org/cdimage/unofficial/non-free/cd-including-firmware/ -- Steve McIntyre, Cambridge, UK.st...@einval.com Who needs computer imagery when you've got Brian Blessed?

Re: soucis pour installer teamviewer 11 sur amd64 ( debian stretch)

2016-05-30 Thread steve
Salut Bernard, C'est un problème d'architecture. Essaie avec http://download.teamviewer.com/download/teamviewer_i386.deb (pris ici: https://www.teamviewer.com/en/download/linux/ ) c'est une version aussi pour le multiarch 64 bits, contrairement à ce que le nom pourrait laisser supposer.

Upgrading from 8.2 to 8.4

2016-05-13 Thread Steve Matzura
Are 'apt-get update' and 'apt-get dist-upgrade' sufficient?

Re: Timing issue with fstab NFS mounts

2016-05-13 Thread Steve Matzura
Dan, On Fri, 13 May 2016 05:12:56 -0400, you wrote: >The options field in fstab should include "_netdev" for devices >which cannot be mounted until networking is stable. I have never heard of that option. I'll try it and report back. Now, what about the lines for the binds that immediately

Re: archivemail corrompt les sauvegardes

2016-05-13 Thread steve
Le 03-05-2016, à 20:13:08 +0200, Bernard Schoenacker a écrit : essayes d'ouvrir l'archive avec mc Pas de différence. Par contre, il semble que gunzip < fichier.gz > fichier_out soit plus tolérant aux fautes que gunzip fichier.gz En tout cas, cela m'a permis de récupérer le message

Timing issue with fstab NFS mounts

2016-05-13 Thread Steve Matzura
While the rest of my system is just cherry, I have not yet been able to solve the problem of why an NFS mount and associated binds don't work unless and until I wait a minute or two after the system comes up, then issue a 'mount -a'. I have tried putting 'mount -a' into /etc/init.d/rc.local, and

Re: Chromium. Good Alternative for Chrome?

2016-05-12 Thread steve
Hi, Install the package 'debian-security-support'. Best, Steve

Re: archivemail screwed up (some of) my backups

2016-05-11 Thread steve
ain. Best, Steve

Re: Portable Debian?

2016-05-11 Thread Steve Matzura
On Wed, 27 Apr 2016 23:00:53 +0100, Lisi wrote: >Did you discover the Adriane version? Now available as an alternative boot on >the mainstream disk. It is specifically for the blind and partially sighted, >and has things like Daisy Player there, as well as screen readers and speech.

Re: archivemail screwed up (some of) my backups

2016-05-11 Thread steve
Hi Thomas, Thanks for your answer! Le 11-05-2016, à 12:22:18 +0200, Thomas Schmitt a écrit : steve wrote: gzip: mail_archive.gz: invalid compressed data--crc error It seems that gunzip You're right, with gunzip < file.gz > file, I can recuperate almost the whole file: ls -l -r

archivemail screwed up (some of) my backups

2016-05-11 Thread steve
really useful. Anyone here with a brilliant idea? Or should I buy a couple of handkerchiefs and start a period of mourning for my lost messages? Thank you. Best, Steve

archivemail corrompt les sauvegardes

2016-05-03 Thread steve
fois que ça m'arrive et je trouve ça très em*ant (et inattendu pour le moins). Suis-je le seul dans ce cas ? Une idée pour (me) sauver ? Belle soirée, Steve

Re: Portable Debian?

2016-04-27 Thread Steve Matzura
Joe: On Wed, 27 Apr 2016 19:05:26 +0100, you wrote: >The most versatile system that I know of is Debian-based Knoppix, but >the development effort goes into hardware detection and driving, with >the result that it is not maintainable. It is installable to a hard >drive, but you throw it away and

Re: Portable Debian?

2016-04-27 Thread Steve Matzura
On Mon, 25 Apr 2016 19:04:40 -0700, David Christensen wrote: >Alternatively, make your own Debian Live images (hybrid ISO -- can put >on optical discs or USB drives): > > https://www.debian.org/devel/debian-live/ Good solution. It solves the drivers problem for

Re: Portable Debian?

2016-04-27 Thread Steve Matzura
On Mon, 25 Apr 2016 20:22:48 +0100, Joe wrote: >I've found that a minimal installation, then dpkg --get-selections and >--set-selections and a bit of judicious /etc copying, to be a fairly >painless way to get a clean near-copy of an existing installation. I >migrated a server, I think lenny or

Re: Portable Debian?

2016-04-25 Thread Steve Matzura
Joe: On Mon, 25 Apr 2016 15:17:08 +0100, you wrote: >I run ssh on a non-standard port, and my router redirects to 22 of my >server, alternatively ssh itself will listen wherever you tell it to. That's probably what I should be doing. As you say, it keeps the logs clean and the riff-raff at

Re: Internal error: found 2 (choice -> promotion) mappings for a single choice.

2016-04-25 Thread steve
En fait il semble que le problème provienne du fait que tu as dû installer un paquet qui a des dépendances insolubles. Probablement un paquet deb ne faisant pas partie des dépôts officiels. Ne reste plus qu'à trouver lequel, le désinstaller et trouver une manière plus saine de le réinstaller.

Re: Internal error: found 2 (choice -> promotion) mappings for a single choice.

2016-04-25 Thread steve
Salut, Le 25-04-2016, à 18:31:52 +0200, C. Mourad Jaber a écrit : Bonjour, Depuis quelques jours, j'ai le message suivant : "Internal error: found 2 (choice -> promotion) mappings for a single choice." quand je veux faire un "aptitude upgrade"... Au bout de quelques temps, cela semble

Portable Debian?

2016-04-25 Thread Steve Matzura
My system that I built late last year/early this year is running great, except for the occasional overrun of inbound ssh from such addresses as 59.*.*.*, 213.*.*.* and others, but that's only because I have not put any blockers in place, either on my home gateway device or my Debian system, but

Re: visualiser une image au format emz

2016-04-20 Thread steve
Le 20-04-2016, à 16:22:05 +0200, Bernard Schoenacker a écrit : mais je ne sais toujours pas comment le faire sous linux As-tu essayé convert du paquet imagemagik ?

Re: regénérer le mot de passe de secours "admin" Mysql (mariadb)

2016-04-15 Thread steve
Salut, essaie ça: https://support.rackspace.com/how-to/mysql-resetting-a-lost-mysql-root-password/

Re: SOLVED - I hope! was: Re: Repeated failure of install of Jessie

2016-04-09 Thread Steve McIntyre
Lisi Reisz wrote: > >Right. Have installed 4.4.6. I appear to have a working computer > >Thanks to all, especially Steve and Henrique. I'll flash the BIOS when I see >another version of the firmware available, but meanwhile all seems great - >though I obviously don't k

Re: Repeated failure of install of Jessie

2016-03-31 Thread Steve McIntyre
Lisi Reisz wrote: >On Tuesday 29 March 2016 23:55:33 Steve McIntyre wrote: >> Lisi Reisz wrote: >> >No help - but "Join the club". Been there, done that, got the tee shirt. >> >Mine was a new computer and, after over a day of tearing my hair out, >>

[Info] Ubuntu sur windows 10

2016-03-31 Thread steve
J'ai dû relire trois fois pour y croire (et le 1er avril, c'est seulement demain). http://www.zdnet.fr/actualites/ubuntu-pas-linux-debarquera-sur-windows-10-39834872.htm#xtor=RSS-1 http://blog.dustinkirkland.com/2016/03/ubuntu-on-windows.html Changement de paradigme ?

Re: Repeated failure of install of Jessie

2016-03-29 Thread Steve McIntyre
otherboard, telling us what you have could be helpful here. I'm surprised to hear that Ubuntu worked but not Debian at this point - under the covers, the installers for both are remarkably similar... -- Steve McIntyre, Cambridge, UK.st...@einval.com "Further

Re: Repeated failure of install of Jessie

2016-03-29 Thread Steve McIntyre
tart a shell and play with the system, or from the installer menu you can even start a tiny built-in web server in the installer environment so that you can grab logfiles from another machine over the network. -- Steve McIntyre, Cambridge, UK.st...@einval.com "Furt

Re: fichier tableur xml

2016-03-10 Thread steve
Le 10-03-2016, à 13:48:13 +0100, Bernard Schoenacker a écrit : >il ne s'agit pas de fichier html ou xhtml ... > >mais de fichier issu d'un logiciel de généalogie qui génère un p** de >fichier xml tableur ... Quel logiciel de généalogie ? Geneweb ? http://genj.sourceforge.net/ Connais

Re: fichier tableur xml

2016-03-10 Thread steve
Le 10-03-2016, à 13:05:04 +0100, Bernard Schoenacker a écrit : il ne s'agit pas de fichier html ou xhtml ... mais de fichier issu d'un logiciel de généalogie qui génère un p** de fichier xml tableur ... Quel logiciel de généalogie ? Geneweb ?

Re: fichier tableur xml

2016-03-10 Thread steve
Salut Bernard, Le 10-03-2016, à 12:49:14 +0100, Bernard Schoenacker a écrit : bonjour, j'ai un fichier tableur xml que je n'arrive pas à ouvrir pour le convertir en csv quels sont les outils disponibles ? Serait-il possible de voir avec Beautiful Soup ?

Re: Why so big EFI partition?

2016-03-05 Thread Steve McIntyre
al...@otterhall.com wrote: >On 03/03/2016 12:55 AM, Steve McIntyre wrote: >> Basically, there are lots of >> reported (real and potential) issues with smaller sizes, so we've >> picked a larger size by default for the guided partitioning. > >I wasn't aware of th

Re: Why so big EFI partition?

2016-03-02 Thread Steve McIntyre
ing. Feel free to pick smaller if you like and if it works for you. (The Ubuntu and Debian UEFI support is broadly similar, sharing a lot of code and ideas.) -- Steve McIntyre, Cambridge, UK.st...@einval.com "Further comment on how I feel about IBM will appear once I

Re: Windows Shares Abound Continuously

2016-02-28 Thread Steve Matzura
Martin: On Sun, 28 Feb 2016 08:44:07 +, you wrote: >Ever since Windows 3.11 its networking has been just awful and prone to >malfunction without notice, they originally lifted the network stack from >FreeBSD but managed to completely screw it, and it is still awful now, both >in sharing and

Windows Shares Abound Continuously

2016-02-27 Thread Steve Matzura
Just when I thought it was safe to let my Debian 8.2 system alone for a few days, I started getting emails from users of the service I provide which uses that system that they could not access any content on the shared-mounted drives on one of my Windows machines. Sure enough, I tried an 'ls' and

Re: Need a Live CD [was Re: Need a downgrade :(}

2016-02-24 Thread Steve McIntyre
;I'm on a T1, so it'd take days to check them out myself. I need a >Live Wheezy disk for debugging purposes. > >Does anyone know if any of those are Live Wheezy isos? Or maybe how >to build one from a Netinstall? We have a large set of older images online at http://cdimage.debian.org/cd

nytimes pages that fail in iceweasel

2016-02-21 Thread Steve Kleene
On Sat, 20 Feb 2016 19:12:15 -0800, Patrick Bartek wrote: > What I'd like to know is how iceweasel broke on the OP's system in the > first place. I did a standard install of the browser on my 64-bit Wheezy > system years ago, installed Flash, etc., and it works. Maybe, it's > because I don't use

Re: nytimes pages that fail in iceweasel [SOLVED]

2016-02-20 Thread Steve Kleene
On Fri, 19 Feb 2016 21:13:26 -0500, I wrote: >> A lot of sites on nytimes.com don't work correctly in my iceweasel, e.g. >> >> http://www.nytimes.com/interactive/2016/us/elections/fact-check.html#/factcheck-109 >> >> If I click on any of the many "Read more" links, I get nothing. I don't >>

nytimes pages that fail in iceweasel

2016-02-19 Thread Steve Kleene
A lot of sites on nytimes.com don't work correctly in my iceweasel, e.g. http://www.nytimes.com/interactive/2016/us/elections/fact-check.html#/factcheck-109 If I click on any of the many "Read more" links, I get nothing. I don't guess this is flash. Lots of flash sites work for me, and they

Re: I need help

2016-02-10 Thread Steve Witt
On Thu, 11 Feb 2016, Ghaith Etaiwi wrote: Hello, I'm starting in linux I used Ubuntu and didn't like it and I have read that many people that used Debian had a better experience, I have a MacBook Pro 4GB ram/ 500HDD/Intel HD 3000/ i5 2nd generation, can it run Debian?. Also, I want to know what

Re: télécharger une image jigdo

2016-02-09 Thread steve
Et pourquoi tu ne lirais pas ça : https://www.debian.org/CD/jigdo-cd/ S

Re: Trouble mounting nfs share

2016-02-08 Thread Steve Matzura
On Sun, 7 Feb 2016 17:27:11 -0500, Carlos Kosloff wrote: >There was a package installed liblockfile1, which was causing grief. I wonder if this might be my problem as well, but I don't find any such package installed on my system.

Re: NVMe et Jessie

2016-02-05 Thread steve
Le 05-02-2016, à 16:29:13 +0100, Olivier a écrit : Je sais qu'il est possible de changer le noyau d'une stable mais ne perd-ton pas alors une bonne partie des bénéfices d'une stable Non, seul le noyau est différent. ou tout au moins, la possibilité de partager, dans une liste comme

Re: NVMe et Jessie

2016-02-05 Thread steve
Salut, Le 05-02-2016, à 10:54:09 +0100, Olivier a écrit : 2. Dans le rapport de bug [1], je comprend que l'installeur de Jessie ne permet pas encore de booter sur un disque NVMe. Le lien [2] indique le support du NVMe est bien meilleur à partir du noyau 3.19. Comme le mieux est

Windows share problem is back

2016-02-03 Thread Steve Matzura
After a couple system reboots for various things, mostly some hardware changes, adding disks, etc., my Windows shares aren't mounting any more, plus I'm getting a console error that the mount failed error connecting to socket, error 115 mount operation in progress, etc. What I want to know, aside

Re: Simuler un navigateur dans firefox (ancien sujet : remplacer flasplayer)

2016-01-29 Thread steve
Le 29-01-2016, à 16:13:02 +0100, André Debian a écrit : bonsoir, quelle est la sortie de: dpkg --list *opera* # dpkg --list *opera* dpkg-query: aucun paquet ne correspond à *opera* # dpkg --list opera dpkg-query: aucun paquet ne correspond à opera et pourtant il a été installé et est

A heart-felt thank-you to all

2016-01-20 Thread Steve Matzura
is once again at piece with the world, and more importantly, me! Thanks again to all of you, and I hope I get to pay it forward. -- Steve M, listening, out.

Re: Network controller [0280]: Broadcom Corporation BCM4312

2016-01-20 Thread steve
Le 20-01-2016, à 14:45:43 +0100, Bernard Schoenacker a écrit : serait il possible de taper dans les dépôts aptosid ? Mauvaise idée Bernard. Debian a tout ce qu'il faut pour que sa carte fonctionne.

Re: Network controller [0280]: Broadcom Corporation BCM4312

2016-01-20 Thread steve
Salut, As-tu regardé cette page ? https://wiki.debian.org/fr/wl

Re: DenyHosts

2016-01-16 Thread Steve Matzura
Reco: On Sat, 16 Jan 2016 12:57:30 +0300, you wrote: >>-j, --jump target >> This specifies the target of the rule; i.e., what to do >> if the packet matches it. The target can be a user-defined >> chain (other than the one this rule is in), one of the special

Re: ssh Problem using it for SFTP

2016-01-16 Thread Steve Matzura
Daniel, On Sat, 16 Jan 2016 14:50:20 -0300, you wrote: >I'm sorry. I Had forgotten of the detail of the accessibility :( No worries. Things are in a sorry state at the moment because of other things I did without realizing I did them, but I've already told my usership that Voyager will have to

Re: DenyHosts

2016-01-16 Thread Steve Matzura
On Sat, 16 Jan 2016 20:16:28 +0300, you wrote: >> What'd I do? >> > >Exactly this: > >iptables -F INPUT >iptables -I INPUT -p tcp --dport 22 -m conntrack --ctstate NEW \ > -m hashlimit --hashlimit 1/hour --hashlimit-burst 16 \ > --hashlimit-mode srcip --hashlimit-name ssh \ >

Re: ssh Problem using it for SFTP

2016-01-16 Thread Steve Matzura
It helps to explain things, Daniel, but truly, the client in question is horrendously out of date and deprecated for all secure intents and purposes, I'm quite happy to retire it from active support on my server. On Sat, 16 Jan 2016 15:19:33 -0300, you wrote: >Hi, Steve. > >On 14/01

Re: Mounting a Windows Share

2016-01-16 Thread Steve Matzura
After a reboot, one of my shares will no longer mount. And of course, it's the big one, the NAS box. Here is output from `strace mount.cifs //DISKSTATION1/BigVol1 /mnt/bigvol1 -o vers=2.1,username=***,password=*** (*** is real username and password covered up): execve("/sbin/mount.cifs",

Re: DenyHosts

2016-01-16 Thread Steve Matzura
Reco: On Sat, 16 Jan 2016 23:49:57 +0300, you wrote: >Reverse the order of these two rules. As I wrote in another part of this >thread, I mistook rules' sequence. Like this? iptables -I INPUT -p tcp --dport 22 --tcp-flags SYN,RST,ACK SYN \ -j DROP iptables -I INPUT -p tcp --dport 22 -m

Re: DenyHosts

2016-01-16 Thread Steve Matzura
Reco: On Sat, 16 Jan 2016 23:48:54 +0300, you wrote: >Correct sequence would be: > >iptables -F INPUT >iptables -A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW \ > -m hashlimit --hashlimit 1/hour --hashlimit-burst 16 \ > --hashlimit-mode srcip --hashlimit-name ssh \ >

Re: Mounting a Windows Share

2016-01-16 Thread Steve Matzura
Emanuel, On Sun, 17 Jan 2016 00:41:11 +0100, you wrote: >modprobe cifs maybe can help you. What is supposed to happen when I enter that command? All I got was another shell prompt.

Re: DenyHosts

2016-01-16 Thread Steve Matzura
Well, I thought I was doing so well. I discover now that no one, including me, can get into my system any more via ssh. Here are the current iptables rules: *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -p tcp -m tcp --dport 22 --tcp-flags SYN,RST,ACK SYN -j DROP

Re: DenyHosts

2016-01-16 Thread Steve Matzura
I tried redoing the tables: *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -p tcp -m tcp --dport 22 --tcp-flags SYN,RST,ACK SYN -j DROP -A INPUT -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -m hashlimit --hashlimit-upto 1/hour --hashlimit-burst 16

DenyHosts

2016-01-15 Thread Steve Matzura
My new fledgling server is being slammed, and I mean slammed like Sandy slammed New York, by root login attacks from 59.46.71.36, ShenYang, China. Of course, I don't allow root logins except from the console or via ssh key pair, so I presume I'm safe that way, but I'd sure like to cut down on the

Re: OT - gap -Re: Using bind mount

2016-01-15 Thread Steve Matzura
On Fri, 15 Jan 2016 14:36:24 +, you wrote: >:-) O.K. Please, no group "hugs" among friends I haven't met yet. ;-) Let's >wait until we know each other better. ;-) My arms are at my sides where they belong. :-)

Re: DenyHosts

2016-01-15 Thread Steve Matzura
Reco: All of this is an excellent learning opportunity for me. Please bear with me just a bit as I ask the following: On Sat, 16 Jan 2016 01:55:38 +0300, you wrote: >A simple solution: > >iptables -I INPUT -p dcp -s 59.46.71.0/24 -j DROP `-p dcp'? manpages says: [!] -p, --protocol

Re: DenyHosts

2016-01-15 Thread Steve Matzura
On Sat, 16 Jan 2016 01:55:38 +0300, Reco wrote: >A complex one: > >iptables -I INPUT -p tcp --dport 22 -m conntrack --ctstate NEW \ > -m hashlimit --hashlimit 1/hour --hashlimit-burst 16 \ > --hashlimit-mode srcip --hashlimit-name ssh \ > --hashlimit-htable-expire 6 -j

Re: DenyHosts

2016-01-15 Thread Steve Matzura
On Sat, 16 Jan 2016 01:55:38 +0300, Reco wrote: >A simple solution: > >iptables -I INPUT -p dcp -s 59.46.71.0/24 -j DROP iptables v1.4.21: unknown protocol "dcp" specified Try `iptables -h' or 'iptables --help' for more information. Should I try the complex solution, or find out what went wrong

Re: ssh Problem using it for SFTP

2016-01-14 Thread Steve Matzura
I decided to put the two logs from `sshd -d' side-by-side to try to figure out where the differences are. Both logs have the following lines immediately after the connection request: debug1: Client protocol version 2.0; client software version FTP-Voyager-15.2.0.15 debug1: no match:

Re: OT - gap -Re: Using bind mount

2016-01-14 Thread Steve Matzura
Whoa folks, let's apply the brakes. The fact is, if you think about it, Lisi is quite correct, but for a reason she may not even realize. Visually impaired people, at least those of us whose visual impairment is to the point where we don't use print at all, don't hear in paragraphs, but anybody

Re: ssh Problem using it for SFTP

2016-01-14 Thread Steve Matzura
One more piece of the puzzle. The working system is Red Hat Fedora 20, the non-working one is Debian 8.2.

Re: OT - gap -Re: Using bind mount

2016-01-14 Thread Steve Matzura
On Wed, 13 Jan 2016 22:08:02 +, Lisi wrote: >On Wednesday 13 January 2016 09:38:12 Steve Matzura wrote: >> And once again, I ask you to hand me the spatula so's I can scrape the >> egg off my face. I completely forgot I needed to `mkdir -p' the mount >> point directory! I

Re: Using bind mount

2016-01-14 Thread Steve Matzura
Jonathan, On Wed, 13 Jan 2016 16:07:47 +, you wrote: >On Wed, Jan 13, 2016 at 04:38:12AM -0500, Steve Matzura wrote: >> Now to look up the syntax for putting it into fstab to make it >> permanent. THANK YOU AGAIN EVER SO MUCH! > >The syntax is > /

Re: ssh Problem using it for SFTP

2016-01-14 Thread Steve Matzura
Tomas, On Wed, Jan 13, 2016 at 07:13:57PM -0500, Steve Matzura wrote: >> I hope this isn't off-topic by too much. If it is, a word to me >> privately and I'll wait for responses to queries I've made elsewhere. >I'm not as much of an SSH guru to "get" what's going on

Re: ssh Problem using it for SFTP

2016-01-14 Thread Steve Matzura
Tomas, On Thu, 14 Jan 2016 05:32:04 -0500, I wrote: >debug1: Enabling compatibility mode for protocol 2.0 >debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-5 >debug1: permanently_set_uid: 107/65534 [preauth] >debug1: list_hostkey_types: >ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519

Re: ssh Problem using it for SFTP

2016-01-14 Thread Steve Matzura
Lars, On Thu, 14 Jan 2016 12:45:09 +0200, you wrote: >Can you update the client to one that uses the safer ciphers and avoids >the deprecated ones? You and I came to the same conclusion with the same lines of log as evidence at about the same time. Amazing. Many of my users use Voyager version

Re: ssh Problem using it for SFTP

2016-01-14 Thread Steve Matzura
More info. I used getenforce' and found SELinux is installed but disabled on the system where FTP Voyager can connect using SFTP over ssh, and not installed at all on the system where FTP Voyager cannot connect. In fact, using either the `getenforce' or `'sestatus' on the no-connect system yields

Re: ssh Problem using it for SFTP

2016-01-14 Thread Steve Matzura
Daniel, On Thu, 14 Jan 2016 09:05:36 -0300, you wrote: >Hi, Steve. > >On 14/01/16 08:45, Steve Matzura wrote: > >> This is clearly the problem area. I tried some ssh option settings in >> Voyager with no success. Should this client be retired? It's not >> *that* old

Re: Using bind mount

2016-01-13 Thread Steve Matzura
On Wed, 13 Jan 2016 10:01:03 +0300, you wrote: >strace is used for tracing system calls, it does not influence your >problem per se. Please install it first, run mount via strace second. In between your message and now, my mount problem was solved, but I installed strace anyway for future use.

Re: SFTP via ssh and symlink permissions

2016-01-13 Thread Steve Matzura
Tomas, On Wed, 13 Jan 2016 08:26:16 +0100, you wrote: >Those are totally meaningless. Just ignore them (BTW there was a >discussion about this not long ago in this mailing list: if you're >interested I can dig it out for you). I would be very interested. So as not to clutter up the list, please

Re: Using bind mount

2016-01-13 Thread Steve Matzura
On Tue, 12 Jan 2016 23:49:02 -0500, you wrote: >On 12/01/16 10:23 PM, Steve Matzura wrote: >> On Tue, 12 Jan 2016 18:12:11 -0300, Daniel wrote: >> >>> M... I used the following syntax: >>> >>> mount --bind /mnt/nas/doc /home/steve/doc >>> &

ssh Problem using it for SFTP

2016-01-13 Thread Steve Matzura
I hope this isn't off-topic by too much. If it is, a word to me privately and I'll wait for responses to queries I've made elsewhere. I maintain two FTP servers and support four Windows-based FTP clients for users of those servers--FTP Voyager, FlashFXP, Filezilla, and WinSCP. One server accepts

[HS] Un peu de lecture...

2016-01-13 Thread steve
Salut, Pour ceux qui s'ennuient devant leur(s) firewall(s), voici un peu de lecture fort intéressante. Certain-e-s connaissent déjà, donc à lire ou à relire. http://www.ssi.gouv.fr/guide/recommandations-de-securite-relatives-a-un-systeme-gnulinux/ où on trouve

Re: Using bind mount

2016-01-12 Thread Steve Matzura
Reco: On Wed, 13 Jan 2016 00:21:19 +0300, you wrote: >Please post the output of: > >strace mount -B /mnt/nas/doc /home/steve/doc I *knew* I was missing something. I get 'command not found".

Re: Using bind mount

2016-01-12 Thread Steve Matzura
Gary: >I just tried something similar with an NFS share and was able to do it. >My situation was I have ///mnt mounted in ~/mnt. I was then >able to (as root) mount -o bind ./mnt/archives ./mnt1 while in my normal >~ folder. > >You could also try mounting the share locally or sharing the "doc"

Re: Using bind mount

2016-01-12 Thread Steve Matzura
On Tue, 12 Jan 2016 18:12:11 -0300, Daniel wrote: >M... I used the following syntax: > >mount --bind /mnt/nas/doc /home/steve/doc > > >That works for you? Sorry ... mount: mount point docs does not exist

Re: Using bind mount

2016-01-12 Thread Steve Matzura
On Tue, 12 Jan 2016 22:56:28 +0100, you wrote: >Le 12/01/2016 22:12, Daniel Bareiro a écrit : > >> mount --bind /mnt/nas/doc /home/steve/doc >> >> >> That works for you? > >I use such syntax failry often > >jdd Even on a virtual filesystem like a Windo

Using bind mount

2016-01-12 Thread Steve Matzura
] When I 'ls -l /mnt/nas', I see all the directories at the top level of //ds1/vol1. Fine. Now, according to everything I've read about bind mount, I should be able to: # mount -o bind /mnt/nas/doc /home/steve/doc where `doc' is a directory on /mnt/nas as described above, and `/home/steve/doc

SFTP via ssh and symlink permissions

2016-01-12 Thread Steve Matzura
My SFTP setup works, almost. Local file access is OK. However, symlinks can be seen but not followed. The symlink itself is owned by root and in the root group, but the thing to which the symlink points I have changed to the owner and group names associated with the login username I'm using for

Re: Generating ssh key pairs

2016-01-11 Thread Steve Matzura
Dan, On Mon, 11 Jan 2016 14:15:53 -0500, Dan wrote: >In general, you want your SFTP users to send you their own >public keys, and you drop them into ~user/.ssh/authorized_keys That's going to be difficult, as most of my users wouldn't know a public key from their house key (LOL). I was hoping

FTP with all files elsewhere

2016-01-11 Thread Steve Matzura
I asked this question on the ProFTPD list, but I thought it might be more of a system question than an FTP server question. The more I look at the message, I think it's probably both. My system, which is now working correctly after reboot testing following fstab changes discussed elsewhere, will

Re: Welcome to emergency mode!

2016-01-11 Thread Steve Matzura
On Mon, 11 Jan 2016 11:35:22 +0100, Sven wrote: >There seems to be quite a few bug reports about problems with fstab and >dropping into emergency mode, so worth a shot. > >(Always make a backup before changing stuff in /etc!) Oh, I did; I simply forgot about that change, mostly because with all

<    3   4   5   6   7   8   9   10   11   12   >