- WLUG - wlug.mailman3.com

Re: [Wlug] RH 8

by jeff

Aramico wrote: > Till now, i still get the problem in downloading RH 8 in several > diffrent places. > Can somebody tell me where can i download it ? > > All available sites are using identification's login for now.. > ..while the other could not be touched using wget...... ;( > > Thanks! this message is for aramico and anyone else concerned: if you guys need cd's burnt, please let me know. i'm the linux 'courier' for a lot of my friends around the area and would be more than happy to get you a copy of whatever you need. i live right here in downtown worcester. i usually do my 'deals' at the worcester public library. just name the time and place and i'll be happy to meet you there. i have all the recent copies of redhat, mandrake, debian, gentoo, crux, and freebsd. my burner and my bike are at your service! later! -jeff mwblug - soon to be a full-time wlug-er since my other half (christian - mwblug) moved to boston and i don't see the guy anymore. :-( p.s. i have copies of everything except for suse.

Oct. 16, 2002

RH 8

by Aramico

Till now, i still get the problem in downloading RH 8 in several diffrent places. Can somebody tell me where can i download it ? All available sites are using identification's login for now.. ..while the other could not be touched using wget...... ;( Thanks!

Oct. 16, 2002

Re: [Wlug] Old RAM (OT)

by Thomas Carey

Oct. 14, 2002

RE: [Wlug] Old RAM (OT)

by webmaster - Atari Users Network

I've used Coast to Coast Memory for older type RAM. Service was also great, they also buy old RAM. They had RAM for even classic Atari ST computers that I collect. http://www.18004memory.com/ Rob rmahlert(a)charter.net webmaster(a)atari-users.net http://www.atari-users.net http://www.atariforums.com -----Original Message----- From: wlug-admin(a)mail.wlug.org [mailto:wlug-admin@mail.wlug.org]On Behalf Of Tim Trachimowicz Sent: Monday, October 14, 2002 10:35 AM To: wlug(a)wlug.org Subject: [Wlug] Old RAM (OT) Hey folks! Since you're probably the biggest group of people I know that might have unused hardware floating around, I figured I'd see if you guys can help me out. I'm searching for some RAM for an older PC I have. Specifically, it's 66mhz SDRAM for a Compaq Deskpro that I'm trying to turn into something useful. Anyways, I was wondeirng if any of you guys might have a DIMM or two flaoting around that's gathering dust (I'll pay you for it) or might know where I can find some on the cheap, before I hit up any of the big guys that I know have the RAM (but at a premium price). Thanks, Tim _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Oct. 14, 2002

Old RAM (OT)

by Tim Trachimowicz

Hey folks! Since you're probably the biggest group of people I know that might have unused hardware floating around, I figured I'd see if you guys can help me out. I'm searching for some RAM for an older PC I have. Specifically, it's 66mhz SDRAM for a Compaq Deskpro that I'm trying to turn into something useful. Anyways, I was wondeirng if any of you guys might have a DIMM or two flaoting around that's gathering dust (I'll pay you for it) or might know where I can find some on the cheap, before I hit up any of the big guys that I know have the RAM (but at a premium price). Thanks, Tim

Oct. 14, 2002

Re: [Wlug] Cinik worm (mod_ssl)

by Phillip G Deneault

This may answer a few of your questions. Its a tree of the various Slapper worm variations and how each one works. http://isc.incidents.org/analysis.html?id=177 Phil On Sun, 13 Oct 2002, Richard Goodman wrote: > I have two rather new RH7.3 servers, which I installed without any patches > (dumb- had never installed patches before). > > A couple of weeks ago both got infected with [different] strains of the > Cinik (mod_ssl) worm. > > On machine "A" I shut down Apache for about a week, and left "B" running. > On 10/5/02 I downloaded and installed RH patches for apache, bind, glibc, > openssh, openssl, php and mod_ssl on both machines. I deleted the cinik > stuff from /tmp. > > Machine "B" has been worm-free since. Cinik reappeared on machine "A" > overnight last night -- process running and the usual suspect files back in > /tmp. > > I happened to look in /var/log/cron (on the subject of cron I am rather > clueless) and saw the following suspicious entries in the time frame when I > believe the worm reappeared: > > Oct 13 05:20:00 archive3 CROND[25572]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > Oct 13 05:20:00 archive3 CROND[25573]: (root) CMD (/usr/lib/sa/sa1 1 1) > Oct 13 05:25:00 archive3 CROND[25577]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > Oct 13 05:26:34 archive3 crontab[25622]: (apache) REPLACE (apache) > Oct 13 05:27:00 archive3 crond[858]: (apache) RELOAD (cron/apache) > Oct 13 05:27:29 archive3 crontab[25630]: (apache) REPLACE (apache) > Oct 13 05:27:29 archive3 crontab[25635]: (apache) REPLACE (apache) > Oct 13 05:27:29 archive3 crontab[25640]: (apache) REPLACE (apache) > Oct 13 05:27:29 archive3 crontab[25645]: (apache) REPLACE (apache) > Oct 13 05:28:01 archive3 crond[858]: (apache) RELOAD (cron/apache) > Oct 13 05:30:00 archive3 CROND[25666]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > Oct 13 05:30:00 archive3 CROND[25667]: (root) CMD (/usr/lib/sa/sa1 1 1) > Oct 13 05:35:00 archive3 CROND[25670]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > > Any suggestions as to what the log entries mean (i.e. who did what to > Apache?), and why cinik has reappeared? > > Also, can someone point me towards a resource about cron so that I may > become less clueless? > > Thanks, > Dick > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Phil Deneault "We work in the dark, We do what we can, deneault(a)wpi.edu We give what we have. Our doubt is our passion, WPI NetOps and our passion is our task. The rest is the InfoSec maddness of art." - Henry James -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Oct. 13, 2002

Cinik worm (mod_ssl)

by Richard Goodman

I have two rather new RH7.3 servers, which I installed without any patches (dumb- had never installed patches before). A couple of weeks ago both got infected with [different] strains of the Cinik (mod_ssl) worm. On machine "A" I shut down Apache for about a week, and left "B" running. On 10/5/02 I downloaded and installed RH patches for apache, bind, glibc, openssh, openssl, php and mod_ssl on both machines. I deleted the cinik stuff from /tmp. Machine "B" has been worm-free since. Cinik reappeared on machine "A" overnight last night -- process running and the usual suspect files back in /tmp. I happened to look in /var/log/cron (on the subject of cron I am rather clueless) and saw the following suspicious entries in the time frame when I believe the worm reappeared: Oct 13 05:20:00 archive3 CROND[25572]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Oct 13 05:20:00 archive3 CROND[25573]: (root) CMD (/usr/lib/sa/sa1 1 1) Oct 13 05:25:00 archive3 CROND[25577]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Oct 13 05:26:34 archive3 crontab[25622]: (apache) REPLACE (apache) Oct 13 05:27:00 archive3 crond[858]: (apache) RELOAD (cron/apache) Oct 13 05:27:29 archive3 crontab[25630]: (apache) REPLACE (apache) Oct 13 05:27:29 archive3 crontab[25635]: (apache) REPLACE (apache) Oct 13 05:27:29 archive3 crontab[25640]: (apache) REPLACE (apache) Oct 13 05:27:29 archive3 crontab[25645]: (apache) REPLACE (apache) Oct 13 05:28:01 archive3 crond[858]: (apache) RELOAD (cron/apache) Oct 13 05:30:00 archive3 CROND[25666]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Oct 13 05:30:00 archive3 CROND[25667]: (root) CMD (/usr/lib/sa/sa1 1 1) Oct 13 05:35:00 archive3 CROND[25670]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Any suggestions as to what the log entries mean (i.e. who did what to Apache?), and why cinik has reappeared? Also, can someone point me towards a resource about cron so that I may become less clueless? Thanks, Dick

Oct. 13, 2002

Re: [Wlug] Installfest Media...

by Dennis Payne

> Also, I'm going to put together my obligatory Disk-o-everything. > Games: > Deluxe Xkobo > Mame > (help...) Bobobot (Haven't played the latest version so I don't know how good it is but an older version was playable and I don't think it's become worse) TuxKart (Haven't played as well) Angband Freeciv (Although some distros already include) Dennis Payne dulsi(a)identicalsoftware.com

Oct. 12, 2002

Re: [Wlug] rpm build error

by Charles R. Anderson

On Fri, Oct 11, 2002 at 02:24:56PM -0400, Bill Mills-Curran wrote: subssn594> Where are you finding good documentation for making rpms? All the subssn594> documentation I've found is either too shallow or out of date. That particular information I found in the rpm.org "Hints & Kinks" page. http://www.rpm.org/ -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

Oct. 11, 2002

Re: [Wlug] rpm build error

by Bill Mills-Curran

On Thu, 10 Oct 2002, Charles R. Anderson wrote: > Date: Thu, 10 Oct 2002 17:48:03 -0400 > From: Charles R. Anderson <cra(a)WPI.EDU> > Reply-To: wlug(a)mail.wlug.org > To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Subject: Re: [Wlug] rpm build error > > On Thu, Oct 10, 2002 at 05:11:42PM -0400, Bill Mills-Curran wrote: > subssn594> I just rebuilt apache from the RH 8.0 source rpm. The compilation > subssn594> succeeded, but the rpm failed with the following error message: > subssn594> > subssn594> Checking for unpackaged file(s): /usr/lib/rpm/check-files > subssn594> /home/bcurran/tmp/rpmBuild/httpd-root > subssn594> error: Installed (but unpackaged) file(s) found: > > This is a new feature of rpm-4.1. It is nice because it will tell > you if you forgot to package some of the files that got installed > in the %install section. > > You have three options. You can: > > 1. Add the unpackaged files to the %files section(s) so they become > part of the final binary package. > > 2. Remove the files from the build root (or don't install them at > all to the $RPM_BUILD_ROOT) in the %install section. > > 3. Tell RPM to consider this error as non-fatal by adding this to > your .rpmmacros file: > > %_unpackaged_files_terminate_build 0 > %_missing_doc_files_terminate_build 0 > > -- > Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ > PGP Key ID: 49BB5886 > Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886 Charles, I chose option 3, because that was most consistent with the way the package was originally built. It worked just fine. Where are you finding good documentation for making rpms? All the documentation I've found is either too shallow or out of date. Thanks, Bill

Oct. 11, 2002