October 2003 - WLUG - wlug.mailman3.com

RE: [Wlug] domain settings on dsl with dynamic IP and NAT (and postfix issue)

by Jim & Toni

Again, more investigation and I found the problem. Need to set the root: alias to a non-root user in the aliases file. Postfix won't deliver mail to the root account. Also, I set the domain info to bellatlantic.net. Seems to do the right things so far. ( I figure if I post what I've found, it may help someone else, right?) Thanks. -----Original Message----- From: wlug-admin(a)mail.wlug.org [mailto:wlug-admin@mail.wlug.org] On Behalf Of Jim & Toni Sent: Wednesday, October 15, 2003 7:46 AM To: wlug(a)wlug.org Subject: [Wlug] domain settings on dsl with dynamic IP and NAT (and postfix issue) One thing I've never been sure of is what to set the domain to on my Linux box. I'm on verizon dsl with a dynamic IP and PPPOE. I just got a dyndns.org domain with a different hostname than what I have for the machine. I set up the machine to run spamassassin (and to experiment). Machine name = grizzy Dyndns.org address = dibb.homelinux.net Email = jntdibb(a)bellatlantic.net What should I be using for the domain name? Specifically I'm having trouble with some part of postfix or spamc/d. I believe an hourly cron job is trying to send mail to 'root' which causes the following in maillog. I can send my postfix/main.cf file if anyone is interested. Oct 14 13:01:01 grizzy spamd[1921]: connection from grizzy [127.0.0.1] at port 3 3171 Oct 14 13:01:01 grizzy spamd[4504]: info: setuid to postfix succeeded Oct 14 13:01:02 grizzy spamd[4504]: Creating default_prefs [/var/spool/postfix/. spamassassin/user_prefs] Oct 14 13:01:01 grizzy postfix/local[4499]: 49D3FD0B45: to=<postfix(a)localhost.lo calhost>, relay=local, delay=1, status=bounced (can't create user output file. C ommand output: procmail: Couldn't create "/var/spool/mail/postfix" procmail: Loc k failure on "spamassassin.lock" procmail: Program failure (74) of "/usr/bin/spa mc" procmail: Rescue of unfiltered data succeeded ) Oct 14 13:01:01 grizzy postfix/cleanup[4497]: C4A35D0B43: message-id=<2003101417 0101.C4A35D0B43(a)grizzy.bellatlantic.net> Oct 14 13:01:01 grizzy postfix/nqmgr[1920]: C4A35D0B43: from=<>, size=2676, nrcp t=1 (queue active) Here's another example of something wrong. Oct 13 04:02:04 grizzy postfix/pickup[1462]: EFFAFD0B47: uid=0 from=<root> Oct 13 04:02:04 grizzy postfix/cleanup[1781]: EFFAFD0B47: message-id=<2003101308 0203.EFFAFD0B47@grizzy> Oct 13 04:02:04 grizzy postfix/nqmgr[1906]: EFFAFD0B47: from=<root(a)grizzy.grizzy >, size=1093, nrcpt=1 (queue active) Oct 13 04:02:06 grizzy postfix/smtp[1797]: EFFAFD0B47: to=<root(a)grizzy.grizzy>, relay=none, delay=3, status=bounced (Name service error for grizzy.grizzy: Host not found) Oct 13 04:02:06 grizzy postfix/cleanup[1781]: E295BD0B46: message-id=<2003101308 0206.E295BD0B46@grizzy> Oct 13 04:02:07 grizzy postfix/nqmgr[1906]: E295BD0B46: from=<>, size=2614, nrcp t=1 (queue active) Oct 13 04:02:07 grizzy postfix/smtp[1797]: E295BD0B46: to=<root(a)grizzy.grizzy>, relay=none, delay=1, status=bounced (Name service error for grizzy.grizzy: Host not found) Overall, mail handling seems to work. Stuff gets out, stuff comes in, spam gets tagged. But I need to clean some of this up.

Oct. 16, 2003

Re: [Wlug] Fw: RE: show

by Matthew Kwiatkowski

I think this sounds like it's turning into an interesting idea. I would be willing to help out as a cameraman or something behind the scenes, and I do have a laptop with video out, but I would need a ride from campus to the studio. I will also be home on break the week of the 21st, so I can't make that night. -Matthew Kwiatkowski On Wed, 2003-10-15 at 13:39, Yury I Vashugin wrote: > tim, > it seems like we don't have enough people to run the show. maybe > different date and time would be more appropriate for people(depending, > of course, on the studio availability)... > first, we need people to produce the show. it's a commitment of half an > hour ones? a month.(could be ones in two months) is there anyone who > would like to join the venture? > second, we need a qualified show host who will lead the show and > interview guests. i'm a new to linux and i would not dare to discuss it > with my expertize. > third, there is little problem with scan converter which can be replaced > by a notebook with a video output. > a tape of the show will be available immediately after the show and can > be broadcast on any channel(depending on the amount of money, sponsorship > etc; public access channels are free). also it's a good learning tool > which can be multiplied and offered to the public. i still remember a > hot discussion on wlug about introducing linux in public schools. i was > astonished to see how college students buy c compilers for windows to do > their homework for unix/c class. isn't it something? > they know about linux but, o boy, they're scared of it!!!(wow, wow- i'm > not talking about wpi students) > good point was brought by goug. we need to know what audience we are > going to target and where. if we start the show with linux introduction > and discuss the difference between linux and commonly used operating > systems, to get people intrigued, and continuously refer people to 'that > show' then they'll know the connection, how to obtain previous > educational tapes etc. > yury > ps keep forgeting to indicate the studio location- shewsbury media > connection, parker rd. > > > On Wed, 15 Oct 2003 00:40:51 -0400 Andy Stewart <andystewart(a)comcast.net> > writes: > > On Tuesday 14 October 2003 12:55 pm, Yury I Vashugin wrote: > > > hi, everyone. > > > since we talked about producing an educational show about linux > > and > > > putting it 'in-the-air' at the last wlug meeting and i saw a very > > > enthusiastic response so i've reserved the studio for oct.21(see > > below). > > > there's a problem with a converter but i'm sure we can find a > > laptop with > > > a video output. > > > > HI everybody, > > > > I'm still quite enthusiastic about this opportunity, but > > unfortunately I > > cannot make it on October 21st (Tuesday is generally a bad night for > > me). I > > will be looking forward to reading the e-mails from people who do > > make it on > > that date. > > > > Please keep us posted! > > > > Andy > > > > -- > > Andy Stewart, Founder > > Worcester Linux Users' Group > > Worcester, MA USA > > http://www.wlug.org > > > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > > > > ________________________________________________________________ > The best thing to hit the internet in years - Juno SpeedBand! > Surf the web up to FIVE TIMES FASTER! > Only $14.95/ month - visit www.juno.com to sign up today! > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Oct. 16, 2003

Re: [Wlug] Fw: RE: show

by Yury I Vashugin

tim, it seems like we don't have enough people to run the show. maybe different date and time would be more appropriate for people(depending, of course, on the studio availability)... first, we need people to produce the show. it's a commitment of half an hour ones? a month.(could be ones in two months) is there anyone who would like to join the venture? second, we need a qualified show host who will lead the show and interview guests. i'm a new to linux and i would not dare to discuss it with my expertize. third, there is little problem with scan converter which can be replaced by a notebook with a video output. a tape of the show will be available immediately after the show and can be broadcast on any channel(depending on the amount of money, sponsorship etc; public access channels are free). also it's a good learning tool which can be multiplied and offered to the public. i still remember a hot discussion on wlug about introducing linux in public schools. i was astonished to see how college students buy c compilers for windows to do their homework for unix/c class. isn't it something? they know about linux but, o boy, they're scared of it!!!(wow, wow- i'm not talking about wpi students) good point was brought by goug. we need to know what audience we are going to target and where. if we start the show with linux introduction and discuss the difference between linux and commonly used operating systems, to get people intrigued, and continuously refer people to 'that show' then they'll know the connection, how to obtain previous educational tapes etc. yury ps keep forgeting to indicate the studio location- shewsbury media connection, parker rd. On Wed, 15 Oct 2003 00:40:51 -0400 Andy Stewart <andystewart(a)comcast.net> writes: > On Tuesday 14 October 2003 12:55 pm, Yury I Vashugin wrote: > > hi, everyone. > > since we talked about producing an educational show about linux > and > > putting it 'in-the-air' at the last wlug meeting and i saw a very > > enthusiastic response so i've reserved the studio for oct.21(see > below). > > there's a problem with a converter but i'm sure we can find a > laptop with > > a video output. > > HI everybody, > > I'm still quite enthusiastic about this opportunity, but > unfortunately I > cannot make it on October 21st (Tuesday is generally a bad night for > me). I > will be looking forward to reading the e-mails from people who do > make it on > that date. > > Please keep us posted! > > Andy > > -- > Andy Stewart, Founder > Worcester Linux Users' Group > Worcester, MA USA > http://www.wlug.org > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > > ________________________________________________________________ The best thing to hit the internet in years - Juno SpeedBand! Surf the web up to FIVE TIMES FASTER! Only $14.95/ month - visit www.juno.com to sign up today!

Oct. 15, 2003

RE: [Wlug] RE: Wlug digest, Vol 1 #683 - 6 msgs

by Keller, Tim

In my eyes, a well configured box is one where every daemon that doesn't need to be run, is turned off. Sane firewalling rules are in place for the services that do need to be run. Something like redhat network is configured in cron to run once a day and pull updated patches and apply them automagically. You can't expect regular Joe User to become a sysadmin over night. Hence, some forethought and automation have to be used to ensure that his box doesn't get cracked overnight. -----Original Message----- From: bryon3245(a)netzero.com [mailto:bryon3245@netzero.com] Sent: Wednesday, October 15, 2003 11:28 AM To: wlug(a)mail.wlug.org Subject: [Wlug] RE: Wlug digest, Vol 1 #683 - 6 msgs Dear Tim, In response to your letter I would like to say that I run a few gentoo systems. I undetstand the importance of a good fire well land I make sure that my packages are up to date. But when you talk about having "poorly configured linux box" I am very curious as to would you would consider a very good configured box. Message: 6 From: "Keller, Tim" <Tim.Keller(a)stratus.com> To: "'wlug(a)mail.wlug.org'" <wlug(a)mail.wlug.org> Subject: RE: [Wlug] Fw: RE: show Date: Wed, 15 Oct 2003 09:36:10 -0400 charset="iso-8859-1" Reply-To: wlug(a)mail.wlug.org Well, I kind of took it on this tact. My wife really doesn't care about linux, nor windows. When she sits down in front of the computer, she just wants it to work as expected. Past that, she plays a few games, but mainly it revolves around surfing the web, reading email, etc. With that said, I think that the argument for linux has to be made on a couple fronts. Firstly, cost and freedom. Explain to people why linux is a better choice than the perceived "free" copy of windows that came with their computer. I think we should definitely explain the microsoft tax. Second, security. Make it a point of explaining that linux is impervious to the many worms and viruses that are running around the internet. Though we should also caution people that a poorly configured linux box is just as bad (if not worse) than an bare unpatched windows machine. Past that, we should talk to the availability of software for linux. Later, Tim. -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ . _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Oct. 15, 2003

RE: Wlug digest, Vol 1 #683 - 6 msgs

by bryon3245＠netzero.com

Dear Tim, In response to your letter I would like to say that I run a few gentoo systems. I undetstand the importance of a good fire well land I make sure that my packages are up to date. But when you talk about having "poorly configured linux box" I am very curious as to would you would consider a very good configured box. Message: 6 From: "Keller, Tim" <Tim.Keller(a)stratus.com> To: "'wlug(a)mail.wlug.org'" <wlug(a)mail.wlug.org> Subject: RE: [Wlug] Fw: RE: show Date: Wed, 15 Oct 2003 09:36:10 -0400 charset="iso-8859-1" Reply-To: wlug(a)mail.wlug.org Well, I kind of took it on this tact. My wife really doesn't care about linux, nor windows. When she sits down in front of the computer, she just wants it to work as expected. Past that, she plays a few games, but mainly it revolves around surfing the web, reading email, etc. With that said, I think that the argument for linux has to be made on a couple fronts. Firstly, cost and freedom. Explain to people why linux is a better choice than the perceived "free" copy of windows that came with their computer. I think we should definitely explain the microsoft tax. Second, security. Make it a point of explaining that linux is impervious to the many worms and viruses that are running around the internet. Though we should also caution people that a poorly configured linux box is just as bad (if not worse) than an bare unpatched windows machine. Past that, we should talk to the availability of software for linux. Later, Tim. -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ .

Oct. 15, 2003

RE: [Wlug] Fw: RE: show

by Keller, Tim

Well, I kind of took it on this tact. My wife really doesn't care about linux, nor windows. When she sits down in front of the computer, she just wants it to work as expected. Past that, she plays a few games, but mainly it revolves around surfing the web, reading email, etc. With that said, I think that the argument for linux has to be made on a couple fronts. Firstly, cost and freedom. Explain to people why linux is a better choice than the perceived "free" copy of windows that came with their computer. I think we should definitely explain the microsoft tax. Second, security. Make it a point of explaining that linux is impervious to the many worms and viruses that are running around the internet. Though we should also caution people that a poorly configured linux box is just as bad (if not worse) than an bare unpatched windows machine. Past that, we should talk to the availability of software for linux. Later, Tim. -----Original Message----- From: Gregory Avedissian [mailto:avedis@rcn.com] Sent: Tuesday, October 14, 2003 5:38 PM To: wlug(a)mail.wlug.org Subject: Re: [Wlug] Fw: RE: show Makes sense to me, Tim. Easy replacement is the selling point, and in some ways it's been the stumbling block to my converting entirely to linux. I still use Windows for a couple of tasks that either can't be done in linux (yet) or I haven't figured them out in linux yet (unsupported scanner). Show people that they can do the things they need to do with a minimal amount of effort and without having to pay microsoft, and there will be plenty of converts. Most of the things that most people do with their computers can now be done in linux without having to read a manual, and people need to know that. Greg Keller, Tim wrote: > Yury, > > You can count me in. I also know my way around a TV production studio. > > We had talked about doing an introduction to linux. As an aside to that I > was thinking that possibly we could do a show on equivalent pieces of > software on the linux side of things that could replace (perceived) missing > functionality. This would include stuff like Evolution, Mozilla, GnuCash, > OpenOffice, mplayer, xmms, etc. > > What do people think? > > Thanks, > Tim. > > -----Original Message----- > From: Yury I Vashugin [mailto:vashugins@juno.com] > Sent: Tuesday, October 14, 2003 12:56 PM > To: wlug(a)mail.wlug.org > Cc: wlug(a)wlug.org > Subject: [Wlug] Fw: RE: show > > > hi, everyone. > since we talked about producing an educational show about linux and > putting it 'in-the-air' at the last wlug meeting and i saw a very > enthusiastic response so i've reserved the studio for oct.21(see below). > there's a problem with a converter but i'm sure we can find a laptop with > a video output. > for the show we need two cameramen(anyone can do that; very simple duties > and can be learned within 3-5 min), a show host and guests. > please, bring any suggestions or/and recommendations. thanks. > yury > > --------- Forwarded message ---------- > From: Marc Serra <mserra(a)ci.shrewsbury.ma.us> > To: 'Yury I Vashugin' <vashugins(a)juno.com> > Date: Fri, 10 Oct 2003 13:42:56 -0400 > Subject: RE: show > Message-ID: <A7F72312FF5DB348BE2D037A6FE5F1C1407EC2@selpnt2> > > Yes. > > Does anybody in the group have access to a scan converter or can you use > a > computer with a video card output? Since we spoke about it, our last scan > converter was put into service to be used on one of our channel's for our > bulletin board. For you to use it, we would have to take a channel off > the > air. I know that a lot of laptops have video out. > > -----Original Message----- > From: Yury I Vashugin [mailto:vashugins@juno.com] > Sent: Friday, October 10, 2003 11:48 AM > To: mserra(a)ci.shrewsbury.ma.us > Subject: show > > > marc, > can i reserve the studio for half-an-hour show on tuesday, october 21 at > 6:30 (actually it will not be a show; just a preliminary stuff- what > light, what background, what settings we want for 'linux show', to try a > scanner converter etc)? > yury > > ________________________________________________________________ > The best thing to hit the internet in years - Juno SpeedBand! > Surf the web up to FIVE TIMES FASTER! > Only $14.95/ month - visit www.juno.com to sign up today! > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Oct. 15, 2003

domain settings on dsl with dynamic IP and NAT (and postfix issue)

by Jim & Toni

One thing I've never been sure of is what to set the domain to on my Linux box. I'm on verizon dsl with a dynamic IP and PPPOE. I just got a dyndns.org domain with a different hostname than what I have for the machine. I set up the machine to run spamassassin (and to experiment). Machine name = grizzy Dyndns.org address = dibb.homelinux.net Email = jntdibb(a)bellatlantic.net What should I be using for the domain name? Specifically I'm having trouble with some part of postfix or spamc/d. I believe an hourly cron job is trying to send mail to 'root' which causes the following in maillog. I can send my postfix/main.cf file if anyone is interested. Oct 14 13:01:01 grizzy spamd[1921]: connection from grizzy [127.0.0.1] at port 3 3171 Oct 14 13:01:01 grizzy spamd[4504]: info: setuid to postfix succeeded Oct 14 13:01:02 grizzy spamd[4504]: Creating default_prefs [/var/spool/postfix/. spamassassin/user_prefs] Oct 14 13:01:01 grizzy postfix/local[4499]: 49D3FD0B45: to=<postfix(a)localhost.lo calhost>, relay=local, delay=1, status=bounced (can't create user output file. C ommand output: procmail: Couldn't create "/var/spool/mail/postfix" procmail: Loc k failure on "spamassassin.lock" procmail: Program failure (74) of "/usr/bin/spa mc" procmail: Rescue of unfiltered data succeeded ) Oct 14 13:01:01 grizzy postfix/cleanup[4497]: C4A35D0B43: message-id=<2003101417 0101.C4A35D0B43(a)grizzy.bellatlantic.net> Oct 14 13:01:01 grizzy postfix/nqmgr[1920]: C4A35D0B43: from=<>, size=2676, nrcp t=1 (queue active) Here's another example of something wrong. Oct 13 04:02:04 grizzy postfix/pickup[1462]: EFFAFD0B47: uid=0 from=<root> Oct 13 04:02:04 grizzy postfix/cleanup[1781]: EFFAFD0B47: message-id=<2003101308 0203.EFFAFD0B47@grizzy> Oct 13 04:02:04 grizzy postfix/nqmgr[1906]: EFFAFD0B47: from=<root(a)grizzy.grizzy >, size=1093, nrcpt=1 (queue active) Oct 13 04:02:06 grizzy postfix/smtp[1797]: EFFAFD0B47: to=<root(a)grizzy.grizzy>, relay=none, delay=3, status=bounced (Name service error for grizzy.grizzy: Host not found) Oct 13 04:02:06 grizzy postfix/cleanup[1781]: E295BD0B46: message-id=<2003101308 0206.E295BD0B46@grizzy> Oct 13 04:02:07 grizzy postfix/nqmgr[1906]: E295BD0B46: from=<>, size=2614, nrcp t=1 (queue active) Oct 13 04:02:07 grizzy postfix/smtp[1797]: E295BD0B46: to=<root(a)grizzy.grizzy>, relay=none, delay=1, status=bounced (Name service error for grizzy.grizzy: Host not found) Overall, mail handling seems to work. Stuff gets out, stuff comes in, spam gets tagged. But I need to clean some of this up.

Oct. 15, 2003

Re: [Wlug] Fw: RE: show

by Andy Stewart

On Tuesday 14 October 2003 12:55 pm, Yury I Vashugin wrote: > hi, everyone. > since we talked about producing an educational show about linux and > putting it 'in-the-air' at the last wlug meeting and i saw a very > enthusiastic response so i've reserved the studio for oct.21(see below). > there's a problem with a converter but i'm sure we can find a laptop with > a video output. HI everybody, I'm still quite enthusiastic about this opportunity, but unfortunately I cannot make it on October 21st (Tuesday is generally a bad night for me). I will be looking forward to reading the e-mails from people who do make it on that date. Please keep us posted! Andy -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Oct. 15, 2003

Re: [Wlug] NIC settings -- how?

by Matt Higgins

These links should get you started. I would be surprised if the distro you are running even supports ipchains. One NIC NAT: http://www.linuxjournal.com/article.php?sid=7175 Netfilter documentation section: http://www.netfilter.org/documentation/index.html iptables HOWTO: http://www.linuxguruz.com/iptables/howto/iptables-HOWTO.html GUI for iptables: http://www.fwbuilder.org/ rc script from linuhttp://www.linuxgazette.com/issue76/misc/whitmarsh/rc.firewall.sh.txtxg… artile:

Oct. 15, 2003

Re: [Wlug] NIC settings -- how?

by Keith Wright

> From: David Goss <vze2bd6u(a)verizon.net> > > have the pppoe all set up... but can't for the life of me remember > how to set up the ipchains to handle the windows boxes for the wife > and kids... and man they are getting hostile about not being able to > get on the internet from home... i know it was not that hard to set > up but for the life of me i can not find the docs i used in the > first place... Well, if you are starting from scratch you might as well use iptables instead of ipchains, which are nearing obsolete. Here is my "gateway" script. It is a firewall with a big hole in it. It protects the windows machines just by trusting the ISP not to route local addresses to you from outside. (I assume your Windows machines are 192.168.0.???, or similar.) Once you have a gateway working you can play with it to turn it into a real firewall. I have two ethernet cards in the firewall machine, one connected to the DSL modem one to the LAN. You don't say if you have the same. I think the below should work with one card, forwarding both from and to the LAN, but have not tried it. Also, I have a static IP address build into the script. I think to use PPPoE you need to change the last line, but again have not tried it. ------------------- #!/bin/bash /etc/sysconfig/network-scripts/ifup eth1 /sbin/rmmod ipchains /sbin/modprobe ip_conntrack_ftp echo "1" >/proc/sys/net/ipv4/ip_forward IPT="/sbin/iptables" INTERNET_ETHER="eth0" FCS_ETHER="eth1" GATEWAY_IP="66.92.74.1" FCS_IP="66.92.74.188" $IPT -t filter --flush $IPT -t nat --flush $IPT -t mangle --flush $IPT -A INPUT -i lo -j ACCEPT $IPT -A OUTPUT -o lo -j ACCEPT $IPT -t filter --policy INPUT ACCEPT $IPT -t filter --policy OUTPUT ACCEPT $IPT -t filter --policy FORWARD ACCEPT $IPT -t nat --policy PREROUTING ACCEPT $IPT -t nat --policy OUTPUT ACCEPT $IPT -t nat --policy POSTROUTING ACCEPT $IPT -t mangle --policy PREROUTING ACCEPT $IPT -t mangle --policy OUTPUT ACCEPT $IPT -t nat -A POSTROUTING -o $INTERNET_ETHER -j SNAT --to-source $FCS_IP ------------------ For PPPoE, change that last line to $IPT -t nat -A POSTROUTING -o $INTERNET_ETHER -j MASQURADE -- Keith

Oct. 15, 2003