- WLUG - wlug.mailman3.com

RH 8

by Aramico

Till now, i still get the problem in downloading RH 8 in several diffrent places. Can somebody tell me where can i download it ? All available sites are using identification's login for now.. ..while the other could not be touched using wget...... ;( Thanks!

Oct. 16, 2002

Re: [Wlug] Old RAM (OT)

by Thomas Carey

Oct. 14, 2002

RE: [Wlug] Old RAM (OT)

by webmaster - Atari Users Network

I've used Coast to Coast Memory for older type RAM. Service was also great, they also buy old RAM. They had RAM for even classic Atari ST computers that I collect. http://www.18004memory.com/ Rob rmahlert(a)charter.net webmaster(a)atari-users.net http://www.atari-users.net http://www.atariforums.com -----Original Message----- From: wlug-admin(a)mail.wlug.org [mailto:wlug-admin@mail.wlug.org]On Behalf Of Tim Trachimowicz Sent: Monday, October 14, 2002 10:35 AM To: wlug(a)wlug.org Subject: [Wlug] Old RAM (OT) Hey folks! Since you're probably the biggest group of people I know that might have unused hardware floating around, I figured I'd see if you guys can help me out. I'm searching for some RAM for an older PC I have. Specifically, it's 66mhz SDRAM for a Compaq Deskpro that I'm trying to turn into something useful. Anyways, I was wondeirng if any of you guys might have a DIMM or two flaoting around that's gathering dust (I'll pay you for it) or might know where I can find some on the cheap, before I hit up any of the big guys that I know have the RAM (but at a premium price). Thanks, Tim _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Oct. 14, 2002

Old RAM (OT)

by Tim Trachimowicz

Hey folks! Since you're probably the biggest group of people I know that might have unused hardware floating around, I figured I'd see if you guys can help me out. I'm searching for some RAM for an older PC I have. Specifically, it's 66mhz SDRAM for a Compaq Deskpro that I'm trying to turn into something useful. Anyways, I was wondeirng if any of you guys might have a DIMM or two flaoting around that's gathering dust (I'll pay you for it) or might know where I can find some on the cheap, before I hit up any of the big guys that I know have the RAM (but at a premium price). Thanks, Tim

Oct. 14, 2002

Re: [Wlug] Cinik worm (mod_ssl)

by Phillip G Deneault

This may answer a few of your questions. Its a tree of the various Slapper worm variations and how each one works. http://isc.incidents.org/analysis.html?id=177 Phil On Sun, 13 Oct 2002, Richard Goodman wrote: > I have two rather new RH7.3 servers, which I installed without any patches > (dumb- had never installed patches before). > > A couple of weeks ago both got infected with [different] strains of the > Cinik (mod_ssl) worm. > > On machine "A" I shut down Apache for about a week, and left "B" running. > On 10/5/02 I downloaded and installed RH patches for apache, bind, glibc, > openssh, openssl, php and mod_ssl on both machines. I deleted the cinik > stuff from /tmp. > > Machine "B" has been worm-free since. Cinik reappeared on machine "A" > overnight last night -- process running and the usual suspect files back in > /tmp. > > I happened to look in /var/log/cron (on the subject of cron I am rather > clueless) and saw the following suspicious entries in the time frame when I > believe the worm reappeared: > > Oct 13 05:20:00 archive3 CROND[25572]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > Oct 13 05:20:00 archive3 CROND[25573]: (root) CMD (/usr/lib/sa/sa1 1 1) > Oct 13 05:25:00 archive3 CROND[25577]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > Oct 13 05:26:34 archive3 crontab[25622]: (apache) REPLACE (apache) > Oct 13 05:27:00 archive3 crond[858]: (apache) RELOAD (cron/apache) > Oct 13 05:27:29 archive3 crontab[25630]: (apache) REPLACE (apache) > Oct 13 05:27:29 archive3 crontab[25635]: (apache) REPLACE (apache) > Oct 13 05:27:29 archive3 crontab[25640]: (apache) REPLACE (apache) > Oct 13 05:27:29 archive3 crontab[25645]: (apache) REPLACE (apache) > Oct 13 05:28:01 archive3 crond[858]: (apache) RELOAD (cron/apache) > Oct 13 05:30:00 archive3 CROND[25666]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > Oct 13 05:30:00 archive3 CROND[25667]: (root) CMD (/usr/lib/sa/sa1 1 1) > Oct 13 05:35:00 archive3 CROND[25670]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > > Any suggestions as to what the log entries mean (i.e. who did what to > Apache?), and why cinik has reappeared? > > Also, can someone point me towards a resource about cron so that I may > become less clueless? > > Thanks, > Dick > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Phil Deneault "We work in the dark, We do what we can, deneault(a)wpi.edu We give what we have. Our doubt is our passion, WPI NetOps and our passion is our task. The rest is the InfoSec maddness of art." - Henry James -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Oct. 13, 2002

Cinik worm (mod_ssl)

by Richard Goodman

I have two rather new RH7.3 servers, which I installed without any patches (dumb- had never installed patches before). A couple of weeks ago both got infected with [different] strains of the Cinik (mod_ssl) worm. On machine "A" I shut down Apache for about a week, and left "B" running. On 10/5/02 I downloaded and installed RH patches for apache, bind, glibc, openssh, openssl, php and mod_ssl on both machines. I deleted the cinik stuff from /tmp. Machine "B" has been worm-free since. Cinik reappeared on machine "A" overnight last night -- process running and the usual suspect files back in /tmp. I happened to look in /var/log/cron (on the subject of cron I am rather clueless) and saw the following suspicious entries in the time frame when I believe the worm reappeared: Oct 13 05:20:00 archive3 CROND[25572]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Oct 13 05:20:00 archive3 CROND[25573]: (root) CMD (/usr/lib/sa/sa1 1 1) Oct 13 05:25:00 archive3 CROND[25577]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Oct 13 05:26:34 archive3 crontab[25622]: (apache) REPLACE (apache) Oct 13 05:27:00 archive3 crond[858]: (apache) RELOAD (cron/apache) Oct 13 05:27:29 archive3 crontab[25630]: (apache) REPLACE (apache) Oct 13 05:27:29 archive3 crontab[25635]: (apache) REPLACE (apache) Oct 13 05:27:29 archive3 crontab[25640]: (apache) REPLACE (apache) Oct 13 05:27:29 archive3 crontab[25645]: (apache) REPLACE (apache) Oct 13 05:28:01 archive3 crond[858]: (apache) RELOAD (cron/apache) Oct 13 05:30:00 archive3 CROND[25666]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Oct 13 05:30:00 archive3 CROND[25667]: (root) CMD (/usr/lib/sa/sa1 1 1) Oct 13 05:35:00 archive3 CROND[25670]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Any suggestions as to what the log entries mean (i.e. who did what to Apache?), and why cinik has reappeared? Also, can someone point me towards a resource about cron so that I may become less clueless? Thanks, Dick

Oct. 13, 2002

Re: [Wlug] Installfest Media...

by Dennis Payne

> Also, I'm going to put together my obligatory Disk-o-everything. > Games: > Deluxe Xkobo > Mame > (help...) Bobobot (Haven't played the latest version so I don't know how good it is but an older version was playable and I don't think it's become worse) TuxKart (Haven't played as well) Angband Freeciv (Although some distros already include) Dennis Payne dulsi(a)identicalsoftware.com

Oct. 12, 2002

Re: [Wlug] rpm build error

by Charles R. Anderson

On Fri, Oct 11, 2002 at 02:24:56PM -0400, Bill Mills-Curran wrote: subssn594> Where are you finding good documentation for making rpms? All the subssn594> documentation I've found is either too shallow or out of date. That particular information I found in the rpm.org "Hints & Kinks" page. http://www.rpm.org/ -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

Oct. 11, 2002

Re: [Wlug] rpm build error

by Bill Mills-Curran

On Thu, 10 Oct 2002, Charles R. Anderson wrote: > Date: Thu, 10 Oct 2002 17:48:03 -0400 > From: Charles R. Anderson <cra(a)WPI.EDU> > Reply-To: wlug(a)mail.wlug.org > To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Subject: Re: [Wlug] rpm build error > > On Thu, Oct 10, 2002 at 05:11:42PM -0400, Bill Mills-Curran wrote: > subssn594> I just rebuilt apache from the RH 8.0 source rpm. The compilation > subssn594> succeeded, but the rpm failed with the following error message: > subssn594> > subssn594> Checking for unpackaged file(s): /usr/lib/rpm/check-files > subssn594> /home/bcurran/tmp/rpmBuild/httpd-root > subssn594> error: Installed (but unpackaged) file(s) found: > > This is a new feature of rpm-4.1. It is nice because it will tell > you if you forgot to package some of the files that got installed > in the %install section. > > You have three options. You can: > > 1. Add the unpackaged files to the %files section(s) so they become > part of the final binary package. > > 2. Remove the files from the build root (or don't install them at > all to the $RPM_BUILD_ROOT) in the %install section. > > 3. Tell RPM to consider this error as non-fatal by adding this to > your .rpmmacros file: > > %_unpackaged_files_terminate_build 0 > %_missing_doc_files_terminate_build 0 > > -- > Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ > PGP Key ID: 49BB5886 > Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886 Charles, I chose option 3, because that was most consistent with the way the package was originally built. It worked just fine. Where are you finding good documentation for making rpms? All the documentation I've found is either too shallow or out of date. Thanks, Bill

Oct. 11, 2002

:( - Need Sendmail Setting!

by Aramico

Hi all, Can u please tell me if you have ever installed and configured sendmail bye your self ? I mean, please tell me step by step the thing have you done for it in order to get sendmail running properly ? Of course including all its need. the available tutorial not helping me so much, i need your detail.. Plz... Thanks...

Oct. 11, 2002

Re: [Wlug] linuxconf replacement?

by Andy Stewart

On Thursday 10 October 2002 9:20 pm, Brian J.Conway wrote: > > YaST2...try it sometime! > > > > :-) > > > > Its available with 8.0 and 8.1. > > I assumed he meant for RedHat, and I wasn't aware that YaST is portable. I knew that...I just wanted to see who was paying attention. :-) I saw the "8.0" without a distro name and thought I'd have a little fun, that's all. The "8.1" reference was a clue... :-) -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Oct. 11, 2002

Re: [Wlug] linuxconf replacement?

by Brian J.Conway

> YaST2...try it sometime! > :-) > > Its available with 8.0 and 8.1. I assumed he meant for RedHat, and I wasn't aware that YaST is portable. But if we're just throwing out suggestions for configuration tools, Mandrake's Control Center was re-worked yet again for 9.0 is and very good. -b

Oct. 11, 2002

Re: [Wlug] linuxconf replacement?

by Andy Stewart

On Thursday 10 October 2002 11:25 am, Bill Mills-Curran wrote: > I've just upgraded to 8.0, and I find that linuxconf is no longer > distributed. I was growing fairly fond of it, and I'm wondering what > is the latest and greatest system management tool. I've seen "setup", > and it's a bit lacking. > > I like linuxconf because: > > 1. It doesn't require the detailed (geek-level) knowledge that > editing config files requires. > > 2. It works without a gui, which is very convenient for su-ing to > root, or working through slower connections. > > So, what's the "best" system management tool these days? YaST2...try it sometime! :-) Its available with 8.0 and 8.1. -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Oct. 11, 2002

Future WLUG meeting dates posted

by Andy Stewart

HI Everybody, I've just posted the meeting dates for the first half of 2003 on the WLUG website. I've also extended an invitation to Jon 'Maddog' Hall to come to speak at a future WLUG meeting, and he has accepted our invitation. He'll visit during our February 20, 2003 meeting. Maddog travels alot and there was no way I could get him to come sooner (we tried). Remember that the Install Fest is only 2 weeks away! I haven't received any e-mails from prospective installees, but that doesn't surprise me since we still have 2 weeks until the event. Nonetheless, please start telling people about this event - advertise it on the WPI campus and tell all your friends! Later, Andy -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Oct. 11, 2002

Linux Developer (Contract Position)

by Sylvain, Michael

I am working on a three month contract in the Burlington, Ma area. If you or anyone you know might be interested in this position. Please contact me immediately. This is a Jr/Mid level position. Please let me know if you have any questions. Sincerely, Mike Sylvain Recruiter 800-482-9494 ext 6024 508-481-9500 ext. 6024 www.daviscos.com The Davis Companies 33 Boston Post Rd. West Marlborough, MA. 01752 Linux Developer The candidate will participate in the development of complete system architecture for a new mobile device. Responsibilities include significant Linux kernel programming, evaluation of Linux packages and applications and C/C++ programming. Qualifications: * Experience with Linux kernel * Familiar with embedded systems programming * Experience with C/C++ * Start work immediately Knowledge of the following will be a plus: * OS programming * Network programming / socket programming * IEEE 802.11 Wireless LAN * Bluetooth * Java and OOP Length: 3 Months possible extension

Oct. 10, 2002

Re: [Wlug] rpm build error

by Charles R. Anderson

On Thu, Oct 10, 2002 at 05:11:42PM -0400, Bill Mills-Curran wrote: subssn594> I just rebuilt apache from the RH 8.0 source rpm. The compilation subssn594> succeeded, but the rpm failed with the following error message: subssn594> subssn594> Checking for unpackaged file(s): /usr/lib/rpm/check-files subssn594> /home/bcurran/tmp/rpmBuild/httpd-root subssn594> error: Installed (but unpackaged) file(s) found: This is a new feature of rpm-4.1. It is nice because it will tell you if you forgot to package some of the files that got installed in the %install section. You have three options. You can: 1. Add the unpackaged files to the %files section(s) so they become part of the final binary package. 2. Remove the files from the build root (or don't install them at all to the $RPM_BUILD_ROOT) in the %install section. 3. Tell RPM to consider this error as non-fatal by adding this to your .rpmmacros file: %_unpackaged_files_terminate_build 0 %_missing_doc_files_terminate_build 0 -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

Oct. 10, 2002

rpm build error

by Bill Mills-Curran

I just rebuilt apache from the RH 8.0 source rpm. The compilation succeeded, but the rpm failed with the following error message: Checking for unpackaged file(s): /usr/lib/rpm/check-files /home/bcurran/tmp/rpmBuild/httpd-root error: Installed (but unpackaged) file(s) found: /etc/httpd/conf/mime.types /usr/bin/apr-config /usr/bin/apu-config /usr/lib/APRVARS <snip-more files> RPM build errors: Installed (but unpackaged) file(s) found: /etc/httpd/conf/mime.types /usr/bin/apr-config /usr/bin/apu-config /usr/lib/APRVARS <snip-more files> Neither the modified source nor the binary rpm were generated. It looks like these files made it into the temporary install area just prior to generating the packages, and they should not have been there. Is there an option I should be using to make the install tree "right"? I know I can modify the spec file to wildcard include everything in the install directories, but that doesn't seem right. My command: "rpmbuild -ba httpd.spec". TIA, Bill

Oct. 10, 2002

Re: [Wlug] (no subject)

by Michelle Vadeboncoeur

On Thu, 10 Oct 2002, Karl Hiramoto wrote: KH> There was a /. article on this a few months ago. Baiscly said it was KH> very hard to do since most of the clients will try multiple ways to KH> connect. I don't know about that... The firewall that we have at work has pretty much shut down any/all of the IM ports on me. Other than just watching the network traffic and figuring out what ports the clients use (the port is usually listed in the client software's configuration menus also), why not just lock down all ports and only open up the ones that you know that you need? -- --==*==-- --==*==-- Michelle R. Vadeboncoeur --==*==-- --==*==-- mrv(a)kluge.net: http://www.kluge.net/~mrv/

Oct. 10, 2002

Re: [Wlug] (no subject)

by Karl Hiramoto

There was a /. article on this a few months ago. Baiscly said it was very hard to do since most of the clients will try multiple ways to connect. On Wed, 9 Oct 2002, Aramico wrote: > Hi all, > > Can somebody inform me about what port that should I close in order to disable the connection for YahooMessanger, MSNMessanger, ICQ ? > The thing that I wanna know is the port number on my server as clients gateway to connect to the internet that used by ICQ, YahooMesanger, and MSN Messanger. > If somebody knows so, please tell me detail, > > Thanks, > Bye there and have a nice day. -- ¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø Karl Hiramoto <karl(a)hiramoto.org> Work: 978-425-2090 ext 25 Cell: 508-517-4819 Personal web page: http://karl.hiramoto.org/ Zoop Productions: http://www.zoop.org/ KTEQ Rapid City: http://www.kteq.org/ AOL IM ID = KarlH420 Yahoo_IM = karl_hiramoto ¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø It's not that I'm afraid to die. I just don't want to be there when it happens. -- Woody Allen

Oct. 10, 2002

Re: [Wlug] linuxconf replacement?

by Charles R. Anderson

On Thu, Oct 10, 2002 at 11:25:16AM -0400, Bill Mills-Curran wrote: subssn594> So, what's the "best" system management tool these days? redhat-config-* Since Linuxconf was developed outside of Red Hat, it was difficult to maintain synchronization between it and the Red Hat configuration layout. -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

Oct. 10, 2002

linuxconf replacement?

by Bill Mills-Curran

I've just upgraded to 8.0, and I find that linuxconf is no longer distributed. I was growing fairly fond of it, and I'm wondering what is the latest and greatest system management tool. I've seen "setup", and it's a bit lacking. I like linuxconf because: 1. It doesn't require the detailed (geek-level) knowledge that editing config files requires. 2. It works without a gui, which is very convenient for su-ing to root, or working through slower connections. So, what's the "best" system management tool these days? TIA, Bill

Oct. 10, 2002

RE: [Wlug] fetchamail!

by Simoncini, Matthew

I second that ... it soundsa good !! > -----Original Message----- > From: Chuck Homic [mailto:chuck@vvisions.com] > Sent: Thursday, October 10, 2002 10:18 AM > To: wlug(a)mail.wlug.org > Subject: Re: [Wlug] fetchamail! > > > On Thu, Oct 10, 2002 at 10:11:41AM -0400, Brian J. Conway wrote: > > While we're on this topic, does anyone know of any secure > alternatives to > > Fetchmail? There's seriously a new buffer overflow > announcement every > > week, and it's rather bothersome. I'd be happy to just use > the pop3 > > support in whichever mail client I'm using, but they all > seem to be using > > the Fetchmail code. Perhaps we need OpenFetchmail? ;-) > > Build fetchmail from sources, and link to electric fence. > > Then a dangerous exploit becomes merely an annoying denial of > service. ;) > > BTW, I propose officially changing the name to the much more melodious > 3-syllable FETCHAMAIL! > > -Chuck > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Oct. 10, 2002

Re: [Wlug] fetchamail!

by Chuck Homic

On Thu, Oct 10, 2002 at 10:11:41AM -0400, Brian J. Conway wrote: > While we're on this topic, does anyone know of any secure alternatives to > Fetchmail? There's seriously a new buffer overflow announcement every > week, and it's rather bothersome. I'd be happy to just use the pop3 > support in whichever mail client I'm using, but they all seem to be using > the Fetchmail code. Perhaps we need OpenFetchmail? ;-) Build fetchmail from sources, and link to electric fence. Then a dangerous exploit becomes merely an annoying denial of service. ;) BTW, I propose officially changing the name to the much more melodious 3-syllable FETCHAMAIL! -Chuck

Oct. 10, 2002

RE: [Wlug] fetchamail!

by Brian J. Conway

> Also, it should be noted that whatever version of fetchmail you've got on > your machine, your going to want to upgrade it ASAP. A couple buffer > overruns (via malformed mail) were just reported the other day... While we're on this topic, does anyone know of any secure alternatives to Fetchmail? There's seriously a new buffer overflow announcement every week, and it's rather bothersome. I'd be happy to just use the pop3 support in whichever mail client I'm using, but they all seem to be using the Fetchmail code. Perhaps we need OpenFetchmail? ;-) -b

Oct. 10, 2002

RE: [Wlug] fetchamail!

by Keller, Tim

Also, it should be noted that whatever version of fetchmail you've got on your machine, your going to want to upgrade it ASAP. A couple buffer overruns (via malformed mail) were just reported the other day... Tim. -----Original Message----- From: Chuck Homic [mailto:chuck@vvisions.com] Sent: Thursday, October 10, 2002 9:11 AM To: wlug(a)mail.wlug.org Subject: Re: [Wlug] fetchamail! On Thu, Oct 10, 2002 at 10:44:08AM +0700, Aramico wrote: > how can I get my email using fetchamil ? Fetchmail will use POP or IMAP to get your mail from a remote host and deposit it locally (using whatever local mail setup you have... I think it delivers to your local SMTP). Just make a .fetchmailrc with your servers/passwords and you're in business. "man fetchmail" for more info. -Chuck _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Oct. 10, 2002