Re: inetd should provide a way to better prevent DOS attacks ( "connection refused" IP based)

1999-09-14 Thread Michael Ju. Tokarev
Security, DOS, etc, firewalling... We have already some attempts to solve this notes. tcp_wrappers is one (I see it as temporary solution); rlinetd; xinetd. So we can see that people agree with that "plain" inetd is not perfect. But that inetd replacements are not perfect too (at least as I can se

Warning: Don't build util-linux for i686

1999-09-14 Thread Svante Signell
When compiling util-linux-2.9w-23.src.rpm from Raw Hide 19990907 the following files are not built/installed for i686: rpm --rebuild --target=i686 compared to --target=i386 This has obvious consequences when booting the next time :( /bin/login /sbin/cfdisk /sbin/fsck.minix /sbin/mkfs.minix /sbi

Summary: Rebuilding Rawhide-19990907 from .src.rpm (long)

1999-09-14 Thread Svante Signell
Hi, sharing some experiences, hopefully they can be of use. # The following packages have to be built by root: # The errors are mostly occurring during the %install phase # Q: Can this easily be changed? Most GNU packages can be built by # ordinary users. It would be preferable to set permissions

Summary: Rebuilding Rawhide-19990907 from .src.rpm (long)

1999-09-14 Thread Svante Signell
Hi, sharing some experiences, hopefully they can be of use. # The following packages have to be built by root: # The errors are mostly occurring during the %install phase # Q: Can this easily be changed? Most GNU packages can be built by # ordinary users. It would be preferable to set permissions

Warning: Don't build util-linux for i686

1999-09-14 Thread Svante Signell
When compiling util-linux-2.9w-23.src.rpm from Raw Hide 19990907 the following files are not built/installed for i686: rpm --rebuild --target=i686 compared to --target=i386 This has obvious consequences when booting the next time :( /bin/login /sbin/cfdisk /sbin/fsck.minix /sbin/mkfs.minix /sb

Summary: Rebuilding Rawhide-19990907 from .src.rpm (cont)

1999-09-14 Thread Svante Signell
# The following packages does not build: xmms-9.01-3: gcc -DHAVE_CONFIG_H -I. -I. -I../.. -I../.. -O2 -D_REENTRANT -I/usr/X11R6/include -I/usr/lib/glib/include -D_REENTRANT -D_REENTRANT -Wp,-MD,.deps/plugin.pp -c -fPIC -DPIC plugin.c -o plugin.lo plugin.c: In function `play_file': plugin.c:34

Athlon (k7)

1999-09-14 Thread Kevin Waterson
Will RH 6.0 install on a system with the AMD K7 (Althlon) processor? Kevin -- To unsubscribe: mail -s unsubscribe [EMAIL PROTECTED] < /dev/null

Re: inetd should provide a way to better prevent DOS attacks ( "connection refused" IP based)

1999-09-14 Thread Andrew E. Mileski
Alan Cox wrote: > There is xinetd which is worth looking at too. For reference, I believe this is the site of the active maintainer of xinetd: http://synack.net/xinetd/ -- Andrew E. Mileski - Software Engineer Rebel.com http://www.rebel.com/ -- To unsubscribe: mail -s unsubscribe [EMAIL PROT

Re: inetd should provide a way to better prevent DOS attacks ( "connection refused" IP based)

1999-09-14 Thread Alan Cox
> > number of sessions and maintaining a connections/period limit as well. The > > best you can do is increase the bandwidth an attacker needs which also > > conveniently reduces the potential dead time. > > Increasing bandwidth is not the definitive solution, > since not everyone does have "fat

Re: inetd should provide a way to better prevent DOS attacks ( "connection refused" IP based)

1999-09-14 Thread Benno Senoner
On Mon, 13 Sep 1999, Alan Cox wrote: > > It's easy to make an inetd service unusable on Redhat Linux, by simple > > flooding the port with connections. > > Its easy to set it up in inetd.conf to change the time limits if you wish > > > You should add a feature in inetd which limits the number of

Re: pump broken?

1999-09-14 Thread H. Peter Anvin
Alan Cox wrote: > > > So, in closing, no, I haven't gotten an answer and am entering this into > > bugzilla as I type. I'd like to see this resolved as it's quite annoying > > to think that if the hurricane knocks power out for >8 hours, my IP will > > likely change :( > > In theory it shouldnt

Re: pump broken?

1999-09-14 Thread Alan Cox
> So, in closing, no, I haven't gotten an answer and am entering this into > bugzilla as I type. I'd like to see this resolved as it's quite annoying > to think that if the hurricane knocks power out for >8 hours, my IP will > likely change :( In theory it shouldnt matter. DHCP servers are suppo

Re: pump broken?

1999-09-14 Thread Jeremy Katz
That may be, but that misses the important point. Your addresses are statically assigned based on hardware. So what does the lease _really_ matter? They'll get the same IP back. My concern is that my IP is dynamically given, theoretically with a 30 day lease which Windows boxes DO get, yet pum

Re: pump broken?

1999-09-14 Thread Tony Nugent
Pete, I don't understand what the problem is. I have dhpcd working in a lab running rh6.0 clients (with all updates) just fine with pump. As they say, "works for me". The server box went down for 36 hours (for a raid reconfig and rebuild from backup) until yesterday afternoon, and while pump o

Re: sh-programming and initscripts

1999-09-14 Thread Andrew E. Mileski
> >> "cat file | grep expression" in /etc/rc.d/rc.sysinit. > > Huh? I don't follow the connection from the question to the response Heh...well that qualifies on my part for... DOH! *slaps forehead* You are right. -- Andrew E. Mileski Software Engineer Rebel.com http://www.rebel.com/ -

Re: sh-programming and initscripts

1999-09-14 Thread Chris Abbey
At 14:12 9/14/99 -0400, Andrew E. Mileski wrote: >Frank Heldt wrote: >> i looked over the latest initscripts rpm from rawhide and saw some >> constructs like >> "cat file | grep expression" in /etc/rc.d/rc.sysinit. >> >> Well, don't you thing a simple "grep expression file" is easier & faster ? >

Re: pump broken?

1999-09-14 Thread Pete Peterson
Did you ever get an answer/solution for this? I live in an area with frequent prolonged power failures and a less than totally reliable cable connection. With 8 hour leases and 45 minute window to renew, one could frequently lose IP assignment. pete pete peterson G

Re: inetd should provide a way to better prevent DOS attacks ("connection refused" IP based)

1999-09-14 Thread Chuck Mead
On Mon, 13 Sep 1999, Benno Senoner spewed into the bitstream: > Hello, > > Are there any plans to make inetd's "connection refused" (or at least > connection closed) behaviour in case of too much simultaneos connections on a > certain port , IP based ? > > It's easy to make an inetd service u

sh-programming and initscripts

1999-09-14 Thread Frank Heldt
Hello RedHat's, i looked over the latest initscripts rpm from rawhide and saw some constructs like "cat file | grep expression" in /etc/rc.d/rc.sysinit. Well, don't you thing a simple "grep expression file" is easier & faster ? Frank -- Frank Heldt Mahr GmbH/Entwicklung Tel. +49 551 7073 5

ncurses: silly config?

1999-09-14 Thread Andrew E. Mileski
The spec file for ncurses has LDFLAGS=-s (strip symbols), yet also has the configure options of --with-debug and --with-profile Umm...why bother with debugging if your gonna strip it away... Using %configure makes it more portable too. -- Andrew E. Mileski - Software Engineer Rebel.com http://

Re: sh-programming and initscripts

1999-09-14 Thread Andrew E. Mileski
Frank Heldt wrote: > i looked over the latest initscripts rpm from rawhide and saw some > constructs like > "cat file | grep expression" in /etc/rc.d/rc.sysinit. > > Well, don't you thing a simple "grep expression file" is easier & faster ? Well you to to make sure that initscripts only use util

Potential Bug in rdist?

1999-09-14 Thread Albert E. Whale
I'm creating a SIMPLE Rdist routine to update two DNS Masters. They both are identically patched RedHat 5.2 (Linux 2.2.4 kernels) servers. However, rdist complains that it cannot find rdistd on the remote server with the simple command: [root@access /root]# rdist -f /root/DNS.distfile access2.

Errata download "stripper" available

1999-09-14 Thread Matt Gumbley
I wanted to download all of the RH6.0 Errata web pages, for offline browsing while doing upgrades (and burning onto my upgrade files CDROM), so I wrote the following quick hack, which someone might find useful. http://www.gumbley.demon.co.uk/errata-stripper.pl You'll need a bunch of errata HTML

inews-2.2-9.i386.rpm in updates.redhat.com/6.0/i386 is obsolete

1999-09-14 Thread Frank Heldt
subject says all Frank -- Frank Heldt Mahr GmbH/Entwicklung Tel. +49 551 7073 511 mailto:[EMAIL PROTECTED] -- To unsubscribe: mail -s unsubscribe [EMAIL PROTECTED] < /dev/null