October 2001 - WLUG - wlug.mailman3.com

suse rpms

by Baris Hasdemir

hi all, I am trying to install php module for suse 7.2 (personal ed.) but rpm shows that there are libraries to install before mod_php4-core and mod_php4. I ask two things: 1 - is there an easy way to determine which suse package includes, for example, libpdf.so.0 2 - is there an easy way to determine which path at ftp.suse.com includes that suse package? thanks, baris

Oct. 21, 2001

Re: [Wlug] ATAPI (internal) ZIP drive

by Skip Gaede

On Monday 08 October 2001 10:51 am, Skip Gaede wrote: > I need help! > > I upgraded my system to a new MLB and a faster CPU. With the new board, I > can't read or write to my ZIP drive (under Linux). I have a SCSI system, > with an Adaptec 78xx controller, an Adaptec RW CDROM (also ATAPI), and the > ZIP drive. > > Kernel: 2.4.10 > More progress! The drive is best handled by the ide-floppy driver, and it works best when the BIOS is setup to present the drive as a mini-hard drive, as opposed to a big floppy. The driver, at least as far as formatting goes, stinks. doing a mke2fs -b 1024 -v /dev/hdc1 took a paltry 2 hours to complete, as compared with about 2 minutes for a complete format under WinNT. or 10 minutes using the Iomega software. During the two hour format, I got over 100 lost interrupts, which were interpreted as bad blocks. The driver is being worked on, and this one is at rev 0.97.sv. It uses packet writing technology. There are a number of settings I can tweak under /proc/ide/hdc/settings, but I've not found documentation on the params: name value min max mode ---- ----- --- --- ---- bios_cyl 96 0 1023 rw bios_head 64 0 255 rw bios_sect 32 0 63 rw breada_readahead 4 0 127 rw current_speed 8 0 69 rw file_readahead 0 0 2097151 rw ide_scsi 0 0 1 rw init_speed 8 0 69 rw io_32bit 1 0 3 rw keepsettings 0 0 1 rw max_kb_per_request 127 1 127 rw nice1 1 0 1 rw number 2 0 3 rw pio_mode write-only 0 255 w slow 0 0 1 rw unmaskirq 1 0 1 rw using_dma 0 0 1 rw Clearly the driver and the current settings leave something to be desired. I'm now investigating leaving the drive formatted vfat and creating a rescue disk using the loopback device to mount a couple of files on the drive. Does anyone know of any up-to-date references on making a loopback root filesystem under the 2.4 kernel? The most recent document I've found on Linuxdoc is by Andrew Bishop dated Sept 24, 1999. Thanks, Skip

Oct. 16, 2001

Re: [Wlug] Kevin Sullivan presentation

by Keith Wright

> From: Andy Stewart <andystewart(a)mediaone.net> > Read more about it in the forwarded message below. If you have questions, > please send them to Brad Dinerman, who's e-mail appears below. > > ---------- Forwarded Message ---------- > > Kevin writes: > (and we will break the silence surrounding MIME) This must be a joke, right? There's more noise surrounding MIME than surrounding Logan airport or a Pittsburgh steel mill. Clearly this talk will fill a much needed gap. (read that twice) > MIME-Version: 1.0 > Content-Type: Multipart/Mixed; > boundary="------------Boundary-00=_SSX9Z3JZIDZ1MY1L06VN" > SPECIAL NOVEMBER MEETING > > This is a *must-attend* event, = > and will be publicized to a large number > > of user groups.  Kevin = > Sullivan, president and security specialist > > extraordinaire of C3 Group, will = > present on a topic that is probably > > near and dear to most of our = > hearts: "E-Mail: The Backdoor To Your Damn that's ugly. But I guess they have to do that so that the blank lines are in the default font.

Oct. 16, 2001

Kevin Sullivan presentation

by Andy Stewart

HI everybody, As part of our cooperation with other user's groups (especially those that are part of Boston User Groups, as are we), I'm forwarding this to you. Kevin Sullivan, president of C3 group, will be giving a talk entitled "E-Mail: The Backdoor to your Network". This talk is not e-mail system specific, but about e-mail systems and vulnerabilities in general. Read more about it in the forwarded message below. If you have questions, please send them to Brad Dinerman, who's e-mail appears below. ---------- Forwarded Message ---------- Subject: User group chairs: request for announcement Date: Mon, 15 Oct 2001 13:39:24 -0400 From: "Bradley J. Dinerman" <BDinerman(a)BostonUserGroups.com> To: <Members(a)BostonUserGroups.com> To all user group chairs: I'd like to ask your assistance. My group, the Boston Area Exchange Server User Group, is planning a special presentation at our November meeting (11/29). The topic will be "E-Mail: The Backdoor To Your Network," and will be given by Kevin Sullivan, president of C3 Group. [Some of you may remember that Kevin gave a key security presentation to the October TechNet expo last year. It was extremely well received.] Please note that this presentation is not Exchange Server specific. It addresses e-mail systems and vulnerabilities in general, regardless of platform! I am declaring this meeting "special" because of the importance of the topic, as well as the fact that I am promoting it to multiple user groups. In particular, I'd like to ask if you could announce this meeting to your user groups, either by e-mail or at your upcoming meeting. The details that I provided in my own group's October newsletter are below my signature. You can feel free to copy the content, or to summarize accordingly. Please let me know if you are willing to announce this to your group (or not). Thank you, Brad Dinerman Chair, Boston Area Exchange Server User Group Director and Webmaster, BostonUserGroups, Inc. __________________________________________________________________ SPECIAL NOVEMBER MEETING This is a *must-attend* event, and will be publicized to a large number of user groups. Kevin Sullivan, president and security specialist extraordinaire of C3 Group, will present on a topic that is probably near and dear to most of our hearts: "E-Mail: The Backdoor To Your Network." The presentation will be interesting for both the non-technical as well as the overly-technical. Kevin writes: "Recent experience with the rapidly spreading and highly destructive Nimda and SirCam worms has demonstrated the ease with which a harmful "payload" can slip in to many otherwise secure networks via Email. I will open by having a sacrificial laptop with IE 5.5 SP1 and Outlook 2K SP1. I will connect to a server and receive my e-mail messages, then watch as my poor computer becomes infected with as many different viruses and worms as I can cram in before it dies. Then we will follow the process (on another system) of how the attack got from the (possibly) clueless sender to the clueless recipient. We will review how the mail travels from your desktop to the recipient - through local, corporate, and Internet servers. We will pay particular attention to attachments - how they are attached, transmitted, and delivered (and we will break the silence surrounding MIME). Finally, we will look at some specific examples of vulnerabilities and how they can be reduced." OK, so in addition to being an incredibly timely and popular topic, what else is different? Because it will be highly publicized to the user group community and we will be expecting a higher than usual turnout, registration will be required for this meeting. You can pre-register at http://www.ExchangeServerBoston.com/Registration. In addition, I will be asking for the first time ever, for a nominal fee for the meeting. It is only a paltry $2, but will help to cover some of the base operating expenses for this and other meetings, including our membership to Boston User Groups, Inc. [Those who register at the door will have to shell out a whopping 50% more, $3] I've already asked a number of vendors for raffle contributions for this meeting, and many of them have happily obliged. As usual, pizza/beverages will be free of charge, and will be sponsored this month by SilverSword Solutions (http://www.SilverSword.com) ------------------------------------------------------- -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 16, 2001

Re: [Wlug] Router question...

by Josh Huber

Andy Stewart <andystewart(a)mediaone.net> writes: > As far as making a modem dial on demand, check out the diald > software.. This is actually included as part of Coyote Linux. Ah, you might want to actually not use diald, since it's essentially a _really_ bad hack. pppd has demand dialing built in, and it works much better than diald in my experience... look for the "demand" option in the pppd man page. ttyl, -- Josh Huber

Oct. 14, 2001

Re: [Wlug] Router question...

by Andy Stewart

Instead of LRP, I'd like to suggest that you look at Coyote Linux. It is a project which has leveraged the work of LRP and added to it. It is more up to date than LRP, and I though, easier to configure. http://www.coyotelinux.com As far as making a modem dial on demand, check out the diald software.. This is actually included as part of Coyote Linux. Hope this helps, Andy On Friday 12 October 2001 10:40 pm, William Smith wrote: > Hi all... > > I have a "headless" laptop that works fine, except that it hasn't got > the LCD screen (hence the "headless" part). I'd like to rig it as a > firewall between a home LAN and the 'Net. > > I would LIKE to have it basically sit there and watch the LAN and > connect to the 'Net only when someone on the LAN needs to get to the > Outside World (for surfing, mailruns, etc), then disconnect after a > respectable (configurable?) amount of idle time. > > I've been looking into modem-sharing, but that doesn't seem to be what I > want, exactly. I have a pretty-good idea that I'll be playing with the > LRP stuff, but I really would like to utilize the 2.4 kernel (LRP is > only at 2.0/2.2 as far as I can see). > > Has anyone been doing something like this already? > Hints/tips/suggestions would be greatly appreciated. -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 13, 2001

Router question...

by William Smith

Hi all... I have a "headless" laptop that works fine, except that it hasn't got the LCD screen (hence the "headless" part). I'd like to rig it as a firewall between a home LAN and the 'Net. I would LIKE to have it basically sit there and watch the LAN and connect to the 'Net only when someone on the LAN needs to get to the Outside World (for surfing, mailruns, etc), then disconnect after a respectable (configurable?) amount of idle time. I've been looking into modem-sharing, but that doesn't seem to be what I want, exactly. I have a pretty-good idea that I'll be playing with the LRP stuff, but I really would like to utilize the 2.4 kernel (LRP is only at 2.0/2.2 as far as I can see). Has anyone been doing something like this already? Hints/tips/suggestions would be greatly appreciated. -- William Smith wsmith(a)chezsmith.com Fall River, MA http://www.chezsmith.com

Oct. 13, 2001

Free Registration to Annual Linux Conference: November 5-10, 2001

by Theo Van Dinter

I got this from the USENIX group (http://www.usenix.org/) thought you folks might be interested. :) ----- Forwarded message ----- Dear USENIX members and past conference attendees: We know that many of you may be reluctant to travel because of the recent turn in world events and the economic downturn. To encourage your attendance at ALS '01, USENIX and the Atlanta Linux Showcase, Inc. are now offering FREE technical session registrations to those wishing to attend. The 5th Annual Linux Showcase and Conference November 5-10, 2001 Oakland Marriott City Center - Oakland, California http://www.linuxshowcase.org We are making this extraordinary offer because we believe the networking opportunities and high-caliber technical content at ALS '01 provide an important service to the general open source community and to our membership. This year's ALS program features invited talks by: - Thomas Sterling, CalTech & NASA JPL on Petaflops Computing with Linux - Don Becker, Scyld Computing, Inc. on Home Beowulf Systems - Tony Iams, D.H. Brown Associates on A competitive assessment of Linux in the Enterprise - Helen Greiner, i-Robot on the state of Robotic Today - Don Marti, on Embedded Linux Success Stories The invited talks track also reflects several political issues currently facing the open source community such as DMCA, SSSCA, copyrights, and software patents. These are important issues which we feel should not be put off for discussion at a later time. In addition to the above, ALS '01 also provides practical, professional-level education through over 12 TUTORIALS (which will charge a fee) including: -Inside the Linux Kernel -Exploring the Potential of LDAP -Configuring and Administering Samba Servers -Linux Systems Administration -Unix/Linux Network Administration -Building and Using a Personal Beowulf We also offer workshops on: KDE Applications, GTK+/GNOME Development and XFree86 CONFERENCE HIGHLIGHTS Thursday, November 8 Join USENIX as we celebrate the 10th Birthday Party for Linux! The reception will be followed by the famous Linux BOF with Linus Torvalds, Jon "maddog" Hall, Ted Ts'o, Bryan Andregg, and a few hundred of your peers. The Open Source Development Lab (OSDL) is hosting a hothouse. OSDL's new Scalable Test Platform (STP) will be open to developers for testing kernel patches on OSDL's 1-way to 16-way servers. Members of the lab's expert staff will be on hand to discuss datacenter Linux requirements such as scaling, clustering and hardening. Bring your patches to see if they can take the heat of some serious testing! With exceptional content, speakers and tutorials, ALS '01 remains the only truly technical conference for the open source community, providing an important forum for discussion, both political and technical - - and bringing the community together to have some fun! For the complete conference schedule and to register visit: http://www.linuxshowcase.org We look forward to seeing you in Oakland next month. - The USENIX Association Staff =============================================================== 5th Annual Linux Showcase & Conference (ALS 2001) is sponsored by USENIX, the Advanced Computing Systems Association, and the Atlanta Linux Showcase, in cooperation with Linux International. =============================================================== ----- End forwarded message ----- -- Randomly Generated Tagline: Two-hundred-thirty-nine pounds?! I'm a blimp! Why are all the good things so tasty? -- Homer Simpson Brush With Greatness

Oct. 13, 2001

Scanner

by John Murphy

Looking for suggestion on a scanner for Suse. One with at least 42 bit or higher in the $100 to $200 dollar range. Have gone through the hardware databases but most home/office mid-range scanners listed are pretty old. Possible the listing hasn't been updated in a while. I've gone through the Sane site and Suse. If you have good 42bit or higher scanner working through Sane and Gimp love to hear about it. Trying to save myself from buying the wrong one making me move back to windows, save me!! John -- Contentment is not the fulfillment of what you want, but the realization of how much you already have.

Oct. 12, 2001

Re: [Wlug] more on event correlation...

by Mike Peckar

Whoops, didn't mean to send to the entire list - I guess I had too many mini oreo cookies last night... ----- Original Message ----- From: Mike Peckar <ov(a)fognet.com> To: <wlug(a)mail.wlug.org> Sent: Thursday, October 11, 2001 11:27 PM Subject: [Wlug] more on event correlation... > Nice meeting you tonight, Chuck, and THANKS for the redhat cd's... > > sec was the freeware event correlation tool I spoke of tonight: It is a > straightforward perl script and doesn't implement a full state machine, but > it nevertheless provides some inklings of what more complciated event > correlators do. Check it at http://kodu.neti.ee/~risto/sec/ > > The best commercial event corellation tools IMHO are Nervecenter, Taave, > Smarts, and Netcool. Each has its niche where it's best in class, and > there are others, like HP's ECS, Logec, G2, etc. > > My friend Doug Stevenson is a specialist in event correlation and wrote the > Maji spec: the open source event correlation engine being developed under > the umbrella of OpenNMS (yeah, so, it'll be java - but it will also be very > feature rich). He masterfully defines some of the layers of granularity that > one might see amongst the different offerings in the Event Correlation > space. Types we talked about tonight include event correlation (reducing > traps) and device correlation (mapping switch states to events). His > definitions are listed below... > > Mike > > > > <snipped message> > OK... > > Here goes... > § Event Correlation > > § Alarm Correlation > > § Device Correlation > > § System Correlation > > § Service Correlation > > § Performance Correlation > > § Security Correlation > > Event Correlation - This is a correlation where multiple events are filtered > and processed, thereby reducing the number of events presented. This is > primarily done with event tally counts and trap problem verification. > > Alarm Correlation - This is a correlation of alarms and alerts depicting > true problems or root causes and their current status. Side effect alarms or > alarms occurring as a result of a root cause alarm are suppressed or become > subordinate to the root cause alarm. > > Device Correlation - This is a correlation of devices, their specific > internal components (both hardware and software), and the device's behavior > with other devices. Additionally, device correlation lends itself toward > configuration management as it is a dynamic inventory of devices, > subsystems, components, and behaviors. > > System Correlation - This is a correlation of devices and managed objects as > they pertain to an overall system. This level of correlation enables one to > manage and classify a conglomeration of managed objects as a manageable > entity. > > Service Correlation - This correlation is used to determine the devices and > systems that make up an IT service. In essence, this is the correlation of > managed objects and systems to business rules; similar to a translation of > terms from computers and systems to business services. The Service > Correlation can be extended to customer impact analysis, business > profitability impact analysis, etc. > > Performance Correlation - This correlation is used to determine the effects > performance has with regards to a fault. It is unique in that performance > correlation can be applied to enhance the correlation of all of the other > categories. > > Security Correlation - This correlation is used to determine the degree of > threats caused by security incidents. It is unique in that security > correlation is embedded among all the other six categories described above. > > HTH, > > Doug... > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Oct. 12, 2001