- WLUG - wlug.mailman3.com

RE: [Wlug] Old RAM (OT)

by webmaster - Atari Users Network

I've used Coast to Coast Memory for older type RAM. Service was also great, they also buy old RAM. They had RAM for even classic Atari ST computers that I collect. http://www.18004memory.com/ Rob rmahlert(a)charter.net webmaster(a)atari-users.net http://www.atari-users.net http://www.atariforums.com -----Original Message----- From: wlug-admin(a)mail.wlug.org [mailto:wlug-admin@mail.wlug.org]On Behalf Of Tim Trachimowicz Sent: Monday, October 14, 2002 10:35 AM To: wlug(a)wlug.org Subject: [Wlug] Old RAM (OT) Hey folks! Since you're probably the biggest group of people I know that might have unused hardware floating around, I figured I'd see if you guys can help me out. I'm searching for some RAM for an older PC I have. Specifically, it's 66mhz SDRAM for a Compaq Deskpro that I'm trying to turn into something useful. Anyways, I was wondeirng if any of you guys might have a DIMM or two flaoting around that's gathering dust (I'll pay you for it) or might know where I can find some on the cheap, before I hit up any of the big guys that I know have the RAM (but at a premium price). Thanks, Tim _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Oct. 14, 2002

Old RAM (OT)

by Tim Trachimowicz

Hey folks! Since you're probably the biggest group of people I know that might have unused hardware floating around, I figured I'd see if you guys can help me out. I'm searching for some RAM for an older PC I have. Specifically, it's 66mhz SDRAM for a Compaq Deskpro that I'm trying to turn into something useful. Anyways, I was wondeirng if any of you guys might have a DIMM or two flaoting around that's gathering dust (I'll pay you for it) or might know where I can find some on the cheap, before I hit up any of the big guys that I know have the RAM (but at a premium price). Thanks, Tim

Oct. 14, 2002

Re: [Wlug] Cinik worm (mod_ssl)

by Phillip G Deneault

This may answer a few of your questions. Its a tree of the various Slapper worm variations and how each one works. http://isc.incidents.org/analysis.html?id=177 Phil On Sun, 13 Oct 2002, Richard Goodman wrote: > I have two rather new RH7.3 servers, which I installed without any patches > (dumb- had never installed patches before). > > A couple of weeks ago both got infected with [different] strains of the > Cinik (mod_ssl) worm. > > On machine "A" I shut down Apache for about a week, and left "B" running. > On 10/5/02 I downloaded and installed RH patches for apache, bind, glibc, > openssh, openssl, php and mod_ssl on both machines. I deleted the cinik > stuff from /tmp. > > Machine "B" has been worm-free since. Cinik reappeared on machine "A" > overnight last night -- process running and the usual suspect files back in > /tmp. > > I happened to look in /var/log/cron (on the subject of cron I am rather > clueless) and saw the following suspicious entries in the time frame when I > believe the worm reappeared: > > Oct 13 05:20:00 archive3 CROND[25572]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > Oct 13 05:20:00 archive3 CROND[25573]: (root) CMD (/usr/lib/sa/sa1 1 1) > Oct 13 05:25:00 archive3 CROND[25577]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > Oct 13 05:26:34 archive3 crontab[25622]: (apache) REPLACE (apache) > Oct 13 05:27:00 archive3 crond[858]: (apache) RELOAD (cron/apache) > Oct 13 05:27:29 archive3 crontab[25630]: (apache) REPLACE (apache) > Oct 13 05:27:29 archive3 crontab[25635]: (apache) REPLACE (apache) > Oct 13 05:27:29 archive3 crontab[25640]: (apache) REPLACE (apache) > Oct 13 05:27:29 archive3 crontab[25645]: (apache) REPLACE (apache) > Oct 13 05:28:01 archive3 crond[858]: (apache) RELOAD (cron/apache) > Oct 13 05:30:00 archive3 CROND[25666]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > Oct 13 05:30:00 archive3 CROND[25667]: (root) CMD (/usr/lib/sa/sa1 1 1) > Oct 13 05:35:00 archive3 CROND[25670]: (root) CMD (/usr/bin/mrtg > /etc/mrtg/mrtg.cfg) > > Any suggestions as to what the log entries mean (i.e. who did what to > Apache?), and why cinik has reappeared? > > Also, can someone point me towards a resource about cron so that I may > become less clueless? > > Thanks, > Dick > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Phil Deneault "We work in the dark, We do what we can, deneault(a)wpi.edu We give what we have. Our doubt is our passion, WPI NetOps and our passion is our task. The rest is the InfoSec maddness of art." - Henry James -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Oct. 13, 2002

Cinik worm (mod_ssl)

by Richard Goodman

I have two rather new RH7.3 servers, which I installed without any patches (dumb- had never installed patches before). A couple of weeks ago both got infected with [different] strains of the Cinik (mod_ssl) worm. On machine "A" I shut down Apache for about a week, and left "B" running. On 10/5/02 I downloaded and installed RH patches for apache, bind, glibc, openssh, openssl, php and mod_ssl on both machines. I deleted the cinik stuff from /tmp. Machine "B" has been worm-free since. Cinik reappeared on machine "A" overnight last night -- process running and the usual suspect files back in /tmp. I happened to look in /var/log/cron (on the subject of cron I am rather clueless) and saw the following suspicious entries in the time frame when I believe the worm reappeared: Oct 13 05:20:00 archive3 CROND[25572]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Oct 13 05:20:00 archive3 CROND[25573]: (root) CMD (/usr/lib/sa/sa1 1 1) Oct 13 05:25:00 archive3 CROND[25577]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Oct 13 05:26:34 archive3 crontab[25622]: (apache) REPLACE (apache) Oct 13 05:27:00 archive3 crond[858]: (apache) RELOAD (cron/apache) Oct 13 05:27:29 archive3 crontab[25630]: (apache) REPLACE (apache) Oct 13 05:27:29 archive3 crontab[25635]: (apache) REPLACE (apache) Oct 13 05:27:29 archive3 crontab[25640]: (apache) REPLACE (apache) Oct 13 05:27:29 archive3 crontab[25645]: (apache) REPLACE (apache) Oct 13 05:28:01 archive3 crond[858]: (apache) RELOAD (cron/apache) Oct 13 05:30:00 archive3 CROND[25666]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Oct 13 05:30:00 archive3 CROND[25667]: (root) CMD (/usr/lib/sa/sa1 1 1) Oct 13 05:35:00 archive3 CROND[25670]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg) Any suggestions as to what the log entries mean (i.e. who did what to Apache?), and why cinik has reappeared? Also, can someone point me towards a resource about cron so that I may become less clueless? Thanks, Dick

Oct. 13, 2002

Re: [Wlug] Installfest Media...

by Dennis Payne

> Also, I'm going to put together my obligatory Disk-o-everything. > Games: > Deluxe Xkobo > Mame > (help...) Bobobot (Haven't played the latest version so I don't know how good it is but an older version was playable and I don't think it's become worse) TuxKart (Haven't played as well) Angband Freeciv (Although some distros already include) Dennis Payne dulsi(a)identicalsoftware.com

Oct. 12, 2002

Re: [Wlug] rpm build error

by Charles R. Anderson

On Fri, Oct 11, 2002 at 02:24:56PM -0400, Bill Mills-Curran wrote: subssn594> Where are you finding good documentation for making rpms? All the subssn594> documentation I've found is either too shallow or out of date. That particular information I found in the rpm.org "Hints & Kinks" page. http://www.rpm.org/ -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

Oct. 11, 2002

Re: [Wlug] rpm build error

by Bill Mills-Curran

On Thu, 10 Oct 2002, Charles R. Anderson wrote: > Date: Thu, 10 Oct 2002 17:48:03 -0400 > From: Charles R. Anderson <cra(a)WPI.EDU> > Reply-To: wlug(a)mail.wlug.org > To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Subject: Re: [Wlug] rpm build error > > On Thu, Oct 10, 2002 at 05:11:42PM -0400, Bill Mills-Curran wrote: > subssn594> I just rebuilt apache from the RH 8.0 source rpm. The compilation > subssn594> succeeded, but the rpm failed with the following error message: > subssn594> > subssn594> Checking for unpackaged file(s): /usr/lib/rpm/check-files > subssn594> /home/bcurran/tmp/rpmBuild/httpd-root > subssn594> error: Installed (but unpackaged) file(s) found: > > This is a new feature of rpm-4.1. It is nice because it will tell > you if you forgot to package some of the files that got installed > in the %install section. > > You have three options. You can: > > 1. Add the unpackaged files to the %files section(s) so they become > part of the final binary package. > > 2. Remove the files from the build root (or don't install them at > all to the $RPM_BUILD_ROOT) in the %install section. > > 3. Tell RPM to consider this error as non-fatal by adding this to > your .rpmmacros file: > > %_unpackaged_files_terminate_build 0 > %_missing_doc_files_terminate_build 0 > > -- > Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ > PGP Key ID: 49BB5886 > Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886 Charles, I chose option 3, because that was most consistent with the way the package was originally built. It worked just fine. Where are you finding good documentation for making rpms? All the documentation I've found is either too shallow or out of date. Thanks, Bill

Oct. 11, 2002

:( - Need Sendmail Setting!

by Aramico

Hi all, Can u please tell me if you have ever installed and configured sendmail bye your self ? I mean, please tell me step by step the thing have you done for it in order to get sendmail running properly ? Of course including all its need. the available tutorial not helping me so much, i need your detail.. Plz... Thanks...

Oct. 11, 2002

Re: [Wlug] linuxconf replacement?

by Andy Stewart

On Thursday 10 October 2002 9:20 pm, Brian J.Conway wrote: > > YaST2...try it sometime! > > > > :-) > > > > Its available with 8.0 and 8.1. > > I assumed he meant for RedHat, and I wasn't aware that YaST is portable. I knew that...I just wanted to see who was paying attention. :-) I saw the "8.0" without a distro name and thought I'd have a little fun, that's all. The "8.1" reference was a clue... :-) -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Oct. 11, 2002

Re: [Wlug] linuxconf replacement?

by Brian J.Conway

> YaST2...try it sometime! > :-) > > Its available with 8.0 and 8.1. I assumed he meant for RedHat, and I wasn't aware that YaST is portable. But if we're just throwing out suggestions for configuration tools, Mandrake's Control Center was re-worked yet again for 9.0 is and very good. -b

Oct. 11, 2002