- WLUG - wlug.mailman3.com

RE: [Wlug] Installfest
by Michael Long 24 Oct '02

24 Oct '02

I did not rejumper the drives. I believe I told SuSE to use the second drive and ignore the first. I may be wrong about this since it was awhile ago that I did the initial install. I do know that I am not asked whether or not to boot windows. Yast2 does have the ability to modify lilo. This is either not stable or allows the users to screw up because Yast2 appears to be locked on my laptop after going into the configuration tool :( Normally I would reject the idea of switching to Grub at this point but since SuSE 8.x is using it I am willing to entertain the idea. Being that I am primarely a database/web developer and not a linux programmer how will Grub enhance my linux experiance? mike > Absolutely! I'm guessing you rejumpered the drives to make the second drive > the primary. I'd recommend using grub as your boot loader. You can install > it in the MBR of the drive that has Windows on it, rejumper the drives, and > simply change /etc/mtab to reflect the new state of the world. > > Grub is nice, in that it allows you to tweak your boot "ini" file during the > boot process in case you made a mistake. Check out the HOWTOs at > www.tldp.org on how to setup dual boot. > > --Skip > > > -----Original Message----- > > From: wlug-admin(a)mail.wlug.org [mailto:wlug-admin@mail.wlug.org]On > > Behalf Of Michael Long > > Sent: Thursday, October 24, 2002 1:34 PM > > To: wlug(a)mail.wlug.org > > Subject: Re: [Wlug] Installfest > > > > > > I neglected to mention one little detail. When I bought the > > computer it > > came with windows98 installed one harddrive and a second unformatted > > drive. I did a new install of SuSE onto the second harddrive. This > > effectively made windows unavailable. I have not done anything to the > > first drive other than mount it as a fat partition. Would it > > be possible > > to resurrect this windows installation and have it live in > > harmony with > > my current installation of SuSE? > > > > mike > > > > > Yes, well, I'm a Pastor at a conservative church that think doctrine > > matters; > > > so naturally everyone thinks I'm a heretic. It's nice to pass the > > buck once > > > in a while ;-) > > > > > > I don't know suse from a hole in the wall, so beyond editing > > /etc/lilo.conf > > > by hand and running lilo as root I can't help you. But it > > seems to me > > that > > > yast should have something in it's workings to edit the > > boot config. > > Let me > > > just say that I would be utterly shocked if it didn't. > > > > > > Other than that, since you're a newbie, you may want to backup > > lilo.conf via: > > > > > > mv lilo.conf lilo.backup > > > > > > and then read the man page on lilo.conf: > > > > > > man lilo.conf > > > > > > to edit your boot configuration by hand. Just remember if > > you go this > > way > > > you'll have to run "lilo" to get the updated configuration > > installed. > > > > > > Also, if you're going to install win98, MAKE SURE YOU HAVE A BOOT > > DISK. Win98 > > > will OVER-WRITE your mbr and lilo will be GONE. What you'l > > have to do is > > > after win98 is installed boot from your boot disk and run "lilo" as > > root in > > > the shell. That'll reinstall lilo on the master boot record. > > > > > > Anything I'm missing gang? > > > > > > Wes > > > > > > > > > On Thursday 24 October 2002 12:17 pm, Michael Long wrote: > > > > It is not easy being a heretic scum but someone has to do it... :) > > > > > > > > I am using SuSE 7.3 and would like to install windblows > > 98. I don't have > > > > 2000 and NT does not support usb. > > > > > > > > mike > > > > > > > > > Mike, > > > > > DIE, DIE, HERETIC SCUM! > > > > > > > > > > OK, now that I've got that out of my system ;-) > > what distro are you > > > > > > > > using? I > > > > > > > > > know that Mandrake has a lilo conf tool that will > > basically do it for > > > > > you. > > > > > > > > > > Wes > > > > > > > > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > >

2 1

Re: [Wlug] Installfest
by Michael Long 24 Oct '02

24 Oct '02

I neglected to mention one little detail. When I bought the computer it came with windows98 installed one harddrive and a second unformatted drive. I did a new install of SuSE onto the second harddrive. This effectively made windows unavailable. I have not done anything to the first drive other than mount it as a fat partition. Would it be possible to resurrect this windows installation and have it live in harmony with my current installation of SuSE? mike > Yes, well, I'm a Pastor at a conservative church that think doctrine matters; > so naturally everyone thinks I'm a heretic. It's nice to pass the buck once > in a while ;-) > > I don't know suse from a hole in the wall, so beyond editing /etc/lilo.conf > by hand and running lilo as root I can't help you. But it seems to me that > yast should have something in it's workings to edit the boot config. Let me > just say that I would be utterly shocked if it didn't. > > Other than that, since you're a newbie, you may want to backup lilo.conf via: > > mv lilo.conf lilo.backup > > and then read the man page on lilo.conf: > > man lilo.conf > > to edit your boot configuration by hand. Just remember if you go this way > you'll have to run "lilo" to get the updated configuration installed. > > Also, if you're going to install win98, MAKE SURE YOU HAVE A BOOT DISK. Win98 > will OVER-WRITE your mbr and lilo will be GONE. What you'l have to do is > after win98 is installed boot from your boot disk and run "lilo" as root in > the shell. That'll reinstall lilo on the master boot record. > > Anything I'm missing gang? > > Wes > > > On Thursday 24 October 2002 12:17 pm, Michael Long wrote: > > It is not easy being a heretic scum but someone has to do it... :) > > > > I am using SuSE 7.3 and would like to install windblows 98. I don't have > > 2000 and NT does not support usb. > > > > mike > > > > > Mike, > > > DIE, DIE, HERETIC SCUM! > > > > > > OK, now that I've got that out of my system ;-) what distro are you > > > > using? I > > > > > know that Mandrake has a lilo conf tool that will basically do it for > > > you. > > > > > > Wes > > >

4 3

Re: [Wlug] Installfest
by Michael Long 24 Oct '02

24 Oct '02

It is not easy being a heretic scum but someone has to do it... :) I am using SuSE 7.3 and would like to install windblows 98. I don't have 2000 and NT does not support usb. mike > Mike, > DIE, DIE, HERETIC SCUM! > > OK, now that I've got that out of my system ;-) what distro are you using? I > know that Mandrake has a lilo conf tool that will basically do it for you. > > Wes > > On Thursday 24 October 2002 11:53 am, Michael Long wrote: > > I have a request that is sacrilege to the charter of WLUG. However it is > > driven by the practicality of working in todays IT market place. > > > > I have run linux exclusively on my personal computers for quite awhile. > > My situation has changed and now need to make one of my computers a dual > > boot with windows. The only way I know how to do this is to install > > windows first and then linux. This would mean having to restore my > > current installation from backups which I have not done before. My > > preference would be to add windows leaving my linux installation alone. > > I am still a newbie to linux and do not understand lilo and the boot > > process. Would this be something that someone would be willing to help > > walk me through? > > > > Thanks, > > Mike > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > -- > ------ > This message may be signed using GPG, for my public key please > send me a message with "Key Request" in the subject line. > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > >

2 1

Installfest
by Michael Long 24 Oct '02

24 Oct '02

I have a request that is sacrilege to the charter of WLUG. However it is driven by the practicality of working in todays IT market place. I have run linux exclusively on my personal computers for quite awhile. My situation has changed and now need to make one of my computers a dual boot with windows. The only way I know how to do this is to install windows first and then linux. This would mean having to restore my current installation from backups which I have not done before. My preference would be to add windows leaving my linux installation alone. I am still a newbie to linux and do not understand lilo and the boot process. Would this be something that someone would be willing to help walk me through? Thanks, Mike

2 1

What's the tally for the installfest???
by Keller, Tim 24 Oct '02

24 Oct '02

Do we have a rough idea of how many people are going to be in attendance for the installfest? Later, Tim.

6 6

virus scanner
by bryon3245＠netzero.com 23 Oct '02

23 Oct '02

I was wondering if anyoen has any suggestions for a virus scanner that i could install on my free bsd box that runs at 33mhz and I only use as a router and fire wall to scan all incoming traffic for viruses? -------------------------------------------------------------------- mail2web - Check your email from the web at http://mail2web.com/ .

1 0

Aurora SPARC Linux
by Charles R. Anderson 23 Oct '02

23 Oct '02

I'll have Aurora SPARC Linux (www.auroralinux.org) at tomorrow's InstallFest if anyone wants to try it out. It is basically the same as what would be Red Hat 7.3/Sparc, but they can't call it that since it wasn't officially made by Red Hat. There is a 32-bit version and a 64-bit version. -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

1 0

RE: [Wlug] What's the tally for the installfest???
by Haines, Charles Allen 23 Oct '02

23 Oct '02

I've sent the message to WPILA twice now. Haven't gotten any response back, but at least they know. I'll be there with CD's for Gentoo 1.4_rc1 with stage3, Mandrake 9.0 and Redhat 8.0. I'm trying to get slack-current before then, we will see. ----------------------------------------- Chuck Haines GDC Systems Administrator Infinity Complex Developer WPILA Lab Manager ----------------------------------------- AIM: CyberGrex ICQ: 3707881 Yahoo: CyberGrex_27 Cell: (410) 610-6343. ----------------------------------------- "Geek by nature, Linux by choice." -----Original Message----- From: brad [mailto:brad@ithryn.net] Sent: Wednesday, October 23, 2002 2:24 PM To: wlug(a)mail.wlug.org Subject: Re: [Wlug] What's the tally for the installfest??? On Wednesday 23 October 2002 01:53 pm, Wes Allen wrote: > Is it tommorow? Or tonight? I believe it is tomorrow. > I want to be able to come and get my iPAQ converted (finally), but I > had my wisdom teeth out yesterday AND I've got the flu.....I'm pretty > zoned out. that's no fun. I'll be there if you want to install in your iPAQ. -brad > Wes > > On Wednesday 23 October 2002 1:26 pm, Keller, Tim wrote: > > Do we have a rough idea of how many people are going to be in > > attendance for the installfest? > > > > Later, > > Tim. > > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

RE: [Wlug] What's the tally for the installfest???
by Keller, Tim 23 Oct '02

23 Oct '02

Tomorrow... I hope you feel better. Tim. -----Original Message----- From: Wes Allen [mailto:wallen@charter.net] Sent: Wednesday, October 23, 2002 13:54 PM To: wlug(a)mail.wlug.org Subject: Re: [Wlug] What's the tally for the installfest??? Is it tommorow? Or tonight? I want to be able to come and get my iPAQ converted (finally), but I had my wisdom teeth out yesterday AND I've got the flu.....I'm pretty zoned out. Wes On Wednesday 23 October 2002 1:26 pm, Keller, Tim wrote: > Do we have a rough idea of how many people are going to be in attendance > for the installfest? > > Later, > Tim. > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug -- ------ This message may be signed using GPG, for my public key please send me a message with "Key Request" in the subject line. _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Problem Solved!
by Marc Hughes 23 Oct '02

23 Oct '02

I figured out my SMP / X problem. For some reason the AGPGART and RADEONFB modules aren't loading automatically like they do in the single cpu kernel. But if I modprobe them, X works fine. Thanks anyways guys! -Marc

6 9

RH7.0 Hacked
by Richard Goodman 23 Oct '02

23 Oct '02

I have two RH7.0 and two RH7.3 servers ... it appears that between 5-6am Tuesday both the 7.0 servers were hacked - identically. They are on the same ISP and often their firewalls pick up the same scans and probes. I'm no expert, but this is what I think happened. The first clue was that I couldn't log in through ssh - got the message "The program does not understand the servers's version of the protocol" Looking at /var/log/secure I saw: 10/22 5:34 xinetd fail ftp libwrap from 195.157.17.177 then two fails from 127.0.0.1 I'm running an unpatched wu-ftpd (which I'm sure didn't help me) but the host.allow/deny were set to only allow ftp from the internal network and one specified outside IP# 10/22 5:48 (twice) xinetd start pop3 pid=10804 from 127.0.0.1 [not me-sleeping] 10/22 6:09 Listener created on port 22 Daemon is running Some poking around showed in /etc/ssh sshd (which should have been approx 200K was 2,621,812 and dated 10/22, so probably a trojan? ssh_host_key, ssh_host_key_pub, ssh_random_seed, sshd_config all had 10/22 modified dates My web server also was not running (or at least serving local pages) I accidently rebooted, the web server came back, but ssh did not. Later I attempted to delete and reinstall sshd. rpm said it couldn't uninstall because it wasn't there, and couldn't install because it was there. I think it finally installed with --force, and sshd was about 186K, but the symptoms were the same It turns out that ftp is also now not operational from the internal network. There is a message about xinetd/ftp in the startup, but its probably not important at this point After the reboot, ps -ax listed: 1811 D /sbin/modprobe -s -k block-major 7 [which I could not kill] Obviously, I'm going to have to wipe the server (plan to offload a few .conf and mail config files, firewall script and leave /var/www - should that be safe?) and will probably load RH7.3 and patches. Any comments on what happened, or on rebuilding? The hard drive is partitioned (a) / (b) /home (c) /var - and /home has only mail files. If I format (a) and delete some (which?) directories on /var, should I be ok? Would prefer not to rebuild the /var/www directories if possible. With ftp and ssh both down, my only way to offload is to floppies? Boy, I miss not having ssh access! Dick

2 1

RE: [Wlug] RH7.0 Hacked
by Marc Hughes 23 Oct '02

23 Oct '02

You probably still have ftp or ssh access from that machine, so you can copy your data off of it onto another server. But I'd say your best bet is unplug it from the internet, copy off all your data (not programs!), wipe clean, and reinstall. You never know what kinds of rootkits were installed, and you can't rely on any system info to be accurate since some rootkits are rather advanced. Did you have SSL running without the recent (as in past month or so) patches? -Marc -----Original Message----- From: Richard Goodman [mailto:dick@goodman1.net] Sent: Wednesday, October 23, 2002 9:31 AM To: wlug(a)mail.wlug.org Subject: [Wlug] RH7.0 Hacked I have two RH7.0 and two RH7.3 servers ... it appears that between 5-6am Tuesday both the 7.0 servers were hacked - identically. They are on the same ISP and often their firewalls pick up the same scans and probes. I'm no expert, but this is what I think happened. The first clue was that I couldn't log in through ssh - got the message "The program does not understand the servers's version of the protocol" Looking at /var/log/secure I saw: 10/22 5:34 xinetd fail ftp libwrap from 195.157.17.177 then two fails from 127.0.0.1 I'm running an unpatched wu-ftpd (which I'm sure didn't help me) but the host.allow/deny were set to only allow ftp from the internal network and one specified outside IP# 10/22 5:48 (twice) xinetd start pop3 pid=10804 from 127.0.0.1 [not me-sleeping] 10/22 6:09 Listener created on port 22 Daemon is running Some poking around showed in /etc/ssh sshd (which should have been approx 200K was 2,621,812 and dated 10/22, so probably a trojan? ssh_host_key, ssh_host_key_pub, ssh_random_seed, sshd_config all had 10/22 modified dates My web server also was not running (or at least serving local pages) I accidently rebooted, the web server came back, but ssh did not. Later I attempted to delete and reinstall sshd. rpm said it couldn't uninstall because it wasn't there, and couldn't install because it was there. I think it finally installed with --force, and sshd was about 186K, but the symptoms were the same It turns out that ftp is also now not operational from the internal network. There is a message about xinetd/ftp in the startup, but its probably not important at this point After the reboot, ps -ax listed: 1811 D /sbin/modprobe -s -k block-major 7 [which I could not kill] Obviously, I'm going to have to wipe the server (plan to offload a few .conf and mail config files, firewall script and leave /var/www - should that be safe?) and will probably load RH7.3 and patches. Any comments on what happened, or on rebuilding? The hard drive is partitioned (a) / (b) /home (c) /var - and /home has only mail files. If I format (a) and delete some (which?) directories on /var, should I be ok? Would prefer not to rebuild the /var/www directories if possible. With ftp and ssh both down, my only way to offload is to floppies? Boy, I miss not having ssh access! Dick _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Re: [Wlug] Using iptables to MASQ the connection to the internet.
by Peter Gutowski 23 Oct '02

23 Oct '02

Aramico, I've noticed, since you posts started appearing, that you seem to be asking for help on topics that are generally well-covered on the internet. But perhaps you are new enough to all this (as I was several years ago) that you don't realize that the purpose of forums like this is to add a level of enrichment to the research work that you've (hopefully) already done. It might be a better use of all of our time if you did some of that research yourself and came back with specific questions after having done so. The answer to the question you ask below specifically is answered quite well in HOWTOs that are readily available. I'll infer for a moment that your question is based on your sucessfull installation of RHL8.0 that you were asking about earlier. To find more information about any installed package do... rpm -q <package-name> -i So for your iptables question, I'd do this: rpm -q iptables -i Among the info listed here is a key to finding out how to use it: URL: : http://www.netfilter.org If you were to follow that link, you'll find plenty of answers to the exact question your pose. (Scroll to the bottom of the page and select NAT HOWTO. Look for "4.1 I just want masquerading! Help!" ) Also, most RPMs have a certain amout of enclosed documentation that will vary in its helpfulness. Do a rpm -q <package-name> -l | grep doc or substitute "info" or "man" for the "doc" above. Making an attempt to read those would also be a good first step to implementing new facilities on systems you are using. You might be pleasantly surprized about how many of these questions have been already anticipated *and* answered! Finally, doing a google search (http://www.google.com) might also surprize you pleasantly about locating these resources quickly. On 10/23/2002 12:23 AM, Aramico <aramico(a)duahati.com> wrote: >Hi all, > >Can you please tell me what is the sysntax of iptables to masquerade >my >network connection to the internet ? > >Basicly, I've only done this to masquerade my network connectionto >the >Internet, as default we can use the computer who masq the connection >as >gateway. >ipchains -A forward -s 0/0 -d 0/0 -j MASQ > >So, can you please tell me what is the syntax of iptables to produce >the >result as the command above...... ? > >Thanks ...... > > >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug > >

1 0

debian pkgs
by brad 23 Oct '02

23 Oct '02

Hi All, Do the debian users here know how to install a package into a prefix directory? For example i want my kde stuff to be installed in /usr/local/kde, not /usr. Is this possible with aptitude? Thanks, -brad

3 2

Can you trust your computer?
by Karl Hiramoto 23 Oct '02

23 Oct '02

I went to see stallman at the book store last wednesday, and this is what he was talking about.... http://newsforge.com/newsforge/02/10/21/1449250.shtml?tid=19 -- ¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø Karl Hiramoto <karl(a)hiramoto.org> Work: 978-425-2090 ext 25 Cell: 508-517-4819 Personal web page: http://karl.hiramoto.org/ Zoop Productions: http://www.zoop.org/ KTEQ Rapid City: http://www.kteq.org/ AOL IM ID = KarlH420 Yahoo_IM = karl_hiramoto ¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø You'd like to do it instantaneously, but that's too slow.

1 0

DRM/TCPA/Palladium
by Karl Hiramoto 22 Oct '02

22 Oct '02

http://www.cl.cam.ac.uk/users/rja14/tcpa-faq.html Thoughts? Should we boycot? -- ¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø Karl Hiramoto <karl(a)hiramoto.org> Work: 978-425-2090 ext 25 Cell: 508-517-4819 Personal web page: http://karl.hiramoto.org/ Zoop Productions: http://www.zoop.org/ KTEQ Rapid City: http://www.kteq.org/ AOL IM ID = KarlH420 Yahoo_IM = karl_hiramoto ¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø Only people with names beginning with 'A' are getting mail this week (a la Microsoft)

4 4

XFree86 SMP Woes
by Marc Hughes 21 Oct '02

21 Oct '02

I just installed a second processor, installed an SMP kernel, and booted into it. At first, everything seemed great, I can do massive compiles, top shows both CPU's, and things go pretty zippy. BUT... I can't start X. This is what startx gives me: XFree86 Version 4.2.0 (Red Hat Linux release: 4.2.0-8) / X Window System (protocol Version 11, revision 0, vendor release 6600) Release Date: 23 January 2002 If the server is older than 6-12 months, or if your card is newer than the above date, look for a newer version before reporting problems. (See http://www.XFree86.Org/) Build Operating System: Linux 2.4.17-0.13smp i686 [ELF] Build Host: daffy.perf.redhat.com Module Loader present Markers: (--) probed, (**) from config file, (==) default setting, (++) from command line, (!!) notice, (II) informational, (WW) warning, (EE) error, (NI) not implemented, (??) unknown. (==) Log file: "/var/log/XFree86.0.log", Time: Mon Oct 21 19:23:34 2002 (==) Using config file: "/etc/X11/XF86Config-4" (EE) RADEON(0): [agp] Could not bind XIO: fatal IO error 104 (Connection reset by peer) on X server ":0.0" after 0 requests (0 known processed) with 0 events remaining. I'm guessing the whole not being able to bind the AGP is the really bad part. I booted into the single CPU kernel, and X still works fine there. Any ideas? -Marc

1 0

sendmail/RH8.0
by Bill Mills-Curran 21 Oct '02

21 Oct '02

After upgrading to RedHat 8.0, I'm being forced to learn more about sendmail that I have time to invest, so I need some help. Previously, I had used linuxconf to set up Linux server at work (EMC) that would forward most email to the domain mail server -- I'm not trying to manage mail for the company. One twist... I want to define a few aliases. My linuxconf setup worked great -- I could send email to aliasname(a)thismachine.emc.com, and the /etc/alias file would be used to translate "aliasname" to a list of addresses. With the new split sendmail config, I'm floundering. I've made a few tweaks that were necessary to allow the machine to act as an internal relay (I need some security help here, too), but I'm still fighting a mail loop problem. So, here are my specific questions/requirements: 1. I want to send to an alias on "thismachine.emc.com" from anywhere inside emc. 2. I want the same aliases to be used for email originating from "thismachine". 3. I don't want to create a relay security hole. I'll send my sendmail.mc and submit.mc files upon request. TIA, Bill

1 0

linuxconf replacement?
by Bill Mills-Curran 21 Oct '02

21 Oct '02

I've just upgraded to 8.0, and I find that linuxconf is no longer distributed. I was growing fairly fond of it, and I'm wondering what is the latest and greatest system management tool. I've seen "setup", and it's a bit lacking. I like linuxconf because: 1. It doesn't require the detailed (geek-level) knowledge that editing config files requires. 2. It works without a gui, which is very convenient for su-ing to root, or working through slower connections. So, what's the "best" system management tool these days? TIA, Bill

5 6

Re: [Wlug] t-shirts
by Peter Gutowski 21 Oct '02

21 Oct '02

>thought the following two would amuse you guys: > >(1) #define QUESTION ((bb) || !(bb)) > There's a lot of truth in that. ;) -- Peter Gutowski <peter(a)linuxchamps.com> // tel.: (413) 531-0123 "When in company, put not your hands to any part of the body not usually discovered." --George Washington, _Rules for Civility and Decent Behavior_

1 0

t-shirts
by doug waud 21 Oct '02

21 Oct '02

Hi all I got a catalog from Computergear.com which offered a variety of T-shirts with various incriptions. I thought the following two would amuse you guys: (1) #define QUESTION ((bb) || !(bb)) and (2) The box said "Requires Windows 98 or better" So I installed Linux. doug

1 0

Re: [Wlug] RH 7.0->7.3 upgrade
by Peter Gutowski 21 Oct '02

21 Oct '02

I'd suggest that you consider upgrading to 8.0. I've been very impressed with the changes in 8.0 primarily in the area of user interface. I've experienced problems with RHL upgrades in the past. But I believe the bulk of those problems owed to the fact that I was attempting to upgrade where the disk setup was just too "tight". Perhaps in contrast to to 7.0, both 7.3 and 8.0 put a lot of files into /usr/share. You'll may make things easier for yourself if /usr/share is on its own partition. Aside from the be prepared for a general tightening of security. If you use sendmail, you'll probably have to add a "sendmail: ALL" into /etc/hosts.allow as the default is to only do mail handling from localhost. RHL 8.0 uses apache 2.x whereas RHL7.3 still uses the 1.3.x versions. Having installations on hard disks with enough hard drive space has made both upgrades, 7.3 and 8.0, pretty painless. As Charles Anderson ;) may likely suggest to you, be sure to read (and digest) the README files on the install disks... probably before you start to alleviate too many surprizes. (Foolish boy that I was, I *didn't*. And to my embarassment, he [rightfully] rubbed my nose in it. But, hey, I learned my lesson.) FYI, this may not be totally meaningful without know how much and just what exactly in installed. But, that said, I'd characterize my installation as medium -- neither slim nor fat. Here's some pertinent partition usages: Filesystem 1K Blocks Used Available % Mounted on /dev/hda3 497861 80662 391495 18% / /dev/hda1 31079 6419 23056 22% /boot /dev/hda11 2063504 98612 1860072 6% /home /dev/hda7 2063504 1209760 748924 62% /usr /dev/hda9 521748 113052 382192 23% /usr/local /dev/hda8 2063504 729108 1229576 38% /usr/share /dev/hda10 521748 154348 340896 32% /usr/src /dev/hda5 497829 76114 396013 17% /var -PG On 10/18/2002 9:53 AM, Richard Goodman <dick(a)goodman1.net> wrote: >I have four RH servers, two 7.0 and two new 7.3 servers just put up >last 6 >weeks or less >How painless would an upgrade of the older servers from 7.0->7.3 >be? Any >surprises I should know about? Any comments or advice? I've never >done a >version upgrade before. > >I already have a CD with the most important security upgrades I used >on the >7.3 servers after I had worm (Slapper/Cinik) problems. > >Dick > > Richard Goodman dick(a)goodman1.net > > > > >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug > >

6 7

OS X Firewall? (#2)
by Richard Goodman 21 Oct '02

21 Oct '02

>I would run a packet sniffer (ethereal, tcpdump, etc) on the Linux box >and see what the iBook is putting out BTW the iBook is running 10.2 (brand new) Could not check the ipfw list as it appears that we don't currently have administrator privileges on the iBook. checking the preferences/sharing/firewall showed the firewall off, however I was concerned about the following entries from the iBook's /var/msg/system.log: IP packet filtering initialized, divert enabled, rule-based forwarding enabled, default to accept, logging disabled IP firewall loaded arplookup <IP of my linux box> failed: host is not on localnetwork I have never run a packet sniffer before, so cannot interpret it, but I fired up tcpdump and did a) ping yahoo.com b) attempt to load yahoo.com in IE5 and got the following two dumps (assume I've snipped enough) tcpdump host 192.168.1.49 Kernel filter, protocol ALL, datagram packet socket tcpdump: listening on all devices 15:55:16.232303 eth1 < host49.goodman1.net.49174 > bach.goodman1.net.domain: 49847+ A? yahoo.com. (2 7) 15:55:16.373034 eth1 > bach.goodman1.net.domain > host49.goodman1.net.49174: 49847* 2/5/5 A w1.rc.vi p.dcx.yahoo.com, A w1.rc.vip.scd.yahoo.com (229) 15:55:16.476477 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp: echo request 15:55:17.476548 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp: echo request 15:55:18.476633 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp: echo request 15:55:19.476745 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp: echo request 15:55:20.476828 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp: echo request 15:55:21.476890 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp: echo request 15:55:22.476949 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp: echo request 15:55:23.477008 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp: echo request 15:55:24.477084 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp: echo request <<continued similarly many more lines> tcpdump host 192.168.1.49 Kernel filter, protocol ALL, datagram packet socket tcpdump: listening on all devices 16:01:00.340200 eth1 < host49.goodman1.net.49174 > bach.goodman1.net.domain: 45963+ A? www.yahoo.com . (31) 16:01:00.558192 eth1 > bach.goodman1.net.domain > host49.goodman1.net.49174: 45963 13/10/3 CNAME www .yahoo.akadns.net., A www9.dcx.yahoo.com, A w9.dcx.yahoo.com, (504) 16:01:00.563859 eth1 < host49.goodman1.net.49153 > www9.dcx.yahoo.com.www: S 1383754426:1383754426(0 ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8687 0> (DF) 16:01:01.247337 eth1 < host49.goodman1.net.49153 > w9.dcx.yahoo.com.www: S 2642071908:2642071908(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8688 0> (DF) 16:01:01.962006 eth1 < host49.goodman1.net.49153 > w3.dcx.yahoo.com.www: S 3424625619:3424625619(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8689 0> (DF) 16:01:02.719348 eth1 < host49.goodman1.net.49153 > www10.dcx.yahoo.com.www: S 715459341:715459341(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8691 0> (DF) 16:01:03.433706 eth1 < host49.goodman1.net.49153 > w2.dcx.yahoo.com.www: S 3613744425:3613744425(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8692 0> (DF) 16:01:04.115338 eth1 < host49.goodman1.net.49153 > w6.dcx.yahoo.com.www: S 941366980:941366980(0) wi n 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8694 0> (DF) 16:01:04.796809 eth1 < host49.goodman1.net.49153 > w8.dcx.yahoo.com.www: S 1223626321:1223626321(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8695 0> (DF) 16:01:05.480085 eth1 < host49.goodman1.net.49153 > w1.dcx.yahoo.com.www: S 1755119059:1755119059(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8696 0> (DF) 16:01:05.550034 eth1 > arp who-has host49.goodman1.net tell localhost.localdomain (0:80:19:35:ad:39) 16:01:05.550329 eth1 < arp reply host49.goodman1.net is-at 0:3:93:c5:39:7c (0:80:19:35:ad:39) 16:01:06.163479 eth1 < host49.goodman1.net.49153 > www7.dcx.yahoo.com.www: S 2895506991:2895506991(0 ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8698 0> (DF) 16:01:06.846666 eth1 < host49.goodman1.net.49153 > www8.dcx.yahoo.com.www: S 3434260281:3434260281(0 ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8699 0> (DF) 16:01:07.529897 eth1 < host49.goodman1.net.49155 > www9.dcx.yahoo.com.www: S 2654995975:2654995975(0 ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8701 0> (DF) 16:01:09.379617 eth1 < host49.goodman1.net.49155 > w9.dcx.yahoo.com.www: S 607986242:607986242(0) wi n 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8704 0> (DF) 16:01:11.231084 eth1 < host49.goodman1.net.49155 > w3.dcx.yahoo.com.www: S 1683897864:1683897864(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8708 0> (DF) 16:01:13.079138 eth1 < host49.goodman1.net.49155 > www10.dcx.yahoo.com.www: S 3195269927:3195269927( 0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8712 0> (DF) 16:01:14.929941 eth1 < host49.goodman1.net.49155 > w2.dcx.yahoo.com.www: S 1831211410:1831211410(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8715 0> (DF) 16:01:16.778674 eth1 < host49.goodman1.net.49155 > w6.dcx.yahoo.com.www: S 3961536773:3961536773(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8719 0> (DF) 16:01:18.628462 eth1 < host49.goodman1.net.49155 > w8.dcx.yahoo.com.www: S 4286238440:4286238440(0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8723 0> (DF) Does this provide enough information? Dick

4 3

OS X firewall ?
by Richard Goodman 20 Oct '02

20 Oct '02

I put the question to the list because I think its related enough to be of interest. My wife just got a top-of-the-line iBook with OS X from school. Connects to the network at school instantly as it should. (I am brand new on OS X) At home I run an network based on a RH7.0 box with IpMasq and some servers going to a static-IP DSL line. About 10 machines, mixed Win and Mac, mixed static and DHCP. When she starts up the iBook: a) the DHCP server on the Linux box shows the normal DHCPREQUEST and DHCPACK lines. b) the Network panel on the iBook shows all the values I would expect to have been handed off by DHCP, 192.168.1.x IP, 255.255.255.0 mask, 192.168.1.1 gateway c) but unable to connect to the internet I found "Terminal" and was able to: d) ping the linux box e) do a nslookup against the name server on the linux box, resolving outside domain names f) bring up web pages running on the Apache server on the linux box But I don't seem to be able to get outside I thought the first thing to try would be to disable the IP Firewall that's being started on the iBook, but haven't been able to figure out how (or where its files are). BTW I run a fairly strict firewall on the linux box and the log shows no hits related to the iBook attempting to get outside. Or I could be totally off base, in which case I would be open to other avenues towards fixing this. Less related: There is an Apple Select 360 appletalk laserwriter on the network, connected thru an Asante appletalk/ethernet bridge which my wife has used with her G3. She can select it through the chooser on the iBook, and we can read and set printer config info, but although everything appears normal when printing for an application in OS9 classic, nothing gets to the printer (and no blinking green light indicating data transfer). Dick

2 1

Re: [Wlug] RH 7.0->7.3 upgrade
by Peter Gutowski 18 Oct '02

18 Oct '02

On 10/18/2002 1:23 PM, Wes Allen <wallen(a)charter.net> wrote: >On Friday 18 October 2002 11:03, Peter Gutowski wrote: >> I'd suggest that you consider upgrading to 8.0. I've been very >>impressed with the........ ...snip... >Is the php module ready for 2.x? I've been thinking about giving >RH 8.0 a try >to see if I can make use of my usb ports! RHL8.0 includes PHP 4.2.2, plus various modules (libphp4.so for apache, imap, mysql, etc....) You might need to rework portions of the /etc/php.ini file, but it seems to be a straight shot. -PG

2 1