Re: Do you recomend to upgrade to Woody?

2000-09-20 Thread thomas lakofski
On Wed, 20 Sep 2000, Aaron Maxwell wrote:

 Has anyone used woody for mission critical stuff?  I know some people run
 woody-based web servers, eg, but I haven't. 

i've run a server for four years on unstable; the last two i've been on a
different continent to the box.  it's reliable enough that i don't have to fly
out there that often (hardware failures a different matter...)

-tl

, , ,, ., ,. . . .. .. . . ,.
  who's watching your watchmen?
gpg: pub 1024D/81FD4B43 sub 4096g/BB6D2B11=p.nu/d
2B72 53DB 8104 2041 BDB4  F053 4AE5 01DF 81FD 4B43



using password aging with ssh

2000-07-04 Thread thomas lakofski
Hi,

Is the above possible?  That is, when a user's password has expired, they
should be prompted to change it somehow.  Works with telnet but that seems
to defeat the point entirely.

The behaviour as is is that sshd just gives access denied when the
password has aged, even if the second (expiration) period has not yet
passed.

regards,

Thomas


, , ,, ., ,. . . .. .. . . ,.
  who's watching your watchmen?
gpg: pub 1024D/81FD4B43 sub 4096g/BB6D2B11=p.nu/d
2B72 53DB 8104 2041 BDB4  F053 4AE5 01DF 81FD 4B43



Re: Load sharing network

2000-06-17 Thread thomas lakofski
On Fri, 16 Jun 2000 [EMAIL PROTECTED] wrote:

 Hello All, 

 Im running potato with kernel 2.2.15. I have three nic card
 installed(two for DSL connection and the other for Lan connection). I
 want to load balance between the two DSL lines. And if one connection
 fails the network switches over to the other connection. Where can I
 get information on this. I cant find anything in the Howto's. 

 Thanks

You can get outbound link equalisation with the sch_teql module.  you'll
need the iproute2+tc utilities to configure it.

i've attached a my kernel config with network options set up to be able to
use the teql scheduler.

once you've built the kernel, use modconf to add the sch_teql module.

change default route to both interfaces:

ip route change default scope global nexthop via x.x.x.x dev eth0 \
  nexthop via y.y.y.y dev eth1

add both interfaces to the same teql queue.

tc qdisc add dev eth0 root teql0
tc qdisc add dev eth1 root teql0

ountbound traffic should now be balanced.  there's very little
documentation for this scheduler, but from what i can understand this does
it.  find the source for the module in the kernel tree for what docs there
do exist, in the comments.

-tl


, , ,, ., ,. . . .. .. . . ,.
  who's watching your watchmen?
gpg: pub 1024D/81FD4B43 sub 4096g/BB6D2B11=p.nu/d
2B72 53DB 8104 2041 BDB4  F053 4AE5 01DF 81FD 4B43




apache 1.3.9 debs

2000-05-12 Thread thomas lakofski
in a rash moment at 2am i upgraded my apache, forgetting about mod-ssl
which still depends on 1.3.9.  does anyone know where i can find apache
and apache-common 1.3.9?  dpkg-repack'ed packages would be fine too if
anyone feels like doing so.

thanks in advance,

thomas lakofski


..
 who's watching your watchmen?
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98



Re: apache 1.3.9 debs

2000-05-12 Thread thomas lakofski
phew; managed to fix it with tactical installation of packages from
frozen.  i guess that's why it's called unstable ;-)

cheers,

-t

On Fri, 12 May 2000, Mental wrote:

 I did something like this too. I simply backed up my config files, then
 purged apache-common, apache, and apache-ssl, the did an 
 apt-get install apache-ssl. Worked fine. Then again, having DSL also 
 helps make re-getting packages less of an issue.
 
 Theres probably a much more elegant/proper way of doing this, but I 
 was kinda in a hurry.
 
 HTH
 
 --
 Mental
 
 When in doubt, use brute force.
   --Ken Thompson (author of unix)
 
 PGP 2.6.3a Public Key: http://www.neverlight.com/Mental-PublicKey.pgp
 GPG 1.0.1 Public Key: http://www.neverlight.com/mental-gpg.asc
 


..
 who's watching your watchmen?
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98



Re: UK Freeserve Connection

1999-12-22 Thread thomas lakofski
On Tue, 21 Dec 1999, Mike Norris wrote:

 Can someone HELP me with a simple IDIOT-PROOF guide on connecting up!

put the word 'debug' in /etc/ppp/peers/provider (or whatever you're
using) and then post what appears in /var/log/ppp.log when you try to dial
up.

-t

..
 who's watching your watchmen?
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98


Re: BUG

1999-10-31 Thread thomas lakofski
hi,

your problems sound like you may actually have some broken hardware, more
than a problem with debian.  in my personal experience of using debian
since august 1996 the only time it has ever gone wrong on a stable release
is when the hardware of the computer i was using was broken somehow (bad
ram, scsi controller, motherboard or whatever).

i'd suggest finding some hardware diagnostic software to see what's up
(eg. Microscope or something like it).

it's also possible that you have a misconfiguration which is causing
different components of your box to try and use the same resources, which
can result in unpredictable behaviour.

as far as the 3com card, what model is it (ie 3c590, 3c509, or whatever)?
the kernel supports most modern as well as more ancient cards very well --
this message reached you via a 3c590.

regards,

-thomas

On Sat, 30 Oct 1999, raymond ferrari wrote:

 From: raymond ferrari [EMAIL PROTECTED]
 To: debian-user@lists.debian.org
 Date: Sat, 30 Oct 1999 17:21:36 -0700
 Subject: BUG
 
 I am utterly disappointed. After two weeks of dealing with installing
 debian and trying to learn, my Linux machine has crashed or should I say
 frozen. YES.
 While trying to read the Debian online help for ethernet 3com cards , my
 machine suddenly froze without any ability to get out. This is the
 second time today after losing 0.6% non contiguous. This also seemed to
 affect my win95 which has been working great under Linux control. Hasn't
 crashed once, or further, would actually shut down properly. How about
 that. There is obviously a bug in this part of debian. Someone should
 look at it. Or is there a patch for this. The Debian/GNU Linux distro..
 I got at the Linux World Expo in San Jose in August, '99. Hopefully,
 some day soon I can actually on the net, get my mail, have sound and
 video, but for now, I'm stuck with my ass up to books, papers, and this
 windows machine that let's me communicate with you gods of Linux who can
 help the pitiful. Please help? I still net to get the information for
 the 3com ethernet card. Where do you guys suggest. Thanks.
 Ray Ferrari
 
 
 
 -- 
 Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
 


..
 who's watching your watchmen?
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98


Re: potato auto fsck

1999-10-28 Thread thomas lakofski
On Wed, 27 Oct 1999, eric k. wolven wrote:

 I've noticed the same thing. When booting the system hangs at /dev/hda5 and 
 /dev/hda7 on my system during e2fsck check.  If I C-c, the system continues 
 booting normally.
 
 When doing shutdown, I get a message that /dev/hda7 is busy and is being 
 mounted read-only.  So far as I've been able to tell, nothing is amiss.  I 
 updated Monday, 10/25.
 
 Maybe the current update will correct it.  I'm downloading as I speak...

http://cgi.debian.org/cgi-bin/bugreport.cgi?archive=nobug=48312

parallel checking of filesystems was broken in the first release of
e2fsprogs 1.16.  this one bit me too ;-).  latest release fixes it.

-t


Re: bad login tracking

1999-07-27 Thread thomas lakofski
On Tue, 27 Jul 1999, Carl Mummert wrote:

 Note that this is a Bad Idea (to get the usernames or passwords)
 since it tends to 1) give you a list of the users' passwords and
 2) give others a well-known place to look for them too.
 Any user can run lastb.

you can fix that with chmod o= /var/log/btmp*

-t

..
[obligatory-useless-waste-of-bits-bit-goes-here] ultra-umbra-magic-crypto
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 supercomputer-AES-xspook


Re: sendmail problems

1999-07-25 Thread thomas lakofski
On Sun, 25 Jul 1999, Gary van Blerk wrote:

 I am running sendmail and the problem I have is I can send mail from the
 server but when I try send from a workstation it says Undeliverable -
 no transport provider to deliver messages to one or more recipients
 [EMAIL PROTECTED]  My server can send and recieve mail fine but when a
 workstation tries to send it to any non-local address this message pops
 up.  Has anyone ever had this problem? 

sendmail refuses to relay by default, you need to configure yourself an
access database to tell it which hosts it should allow relaying from:

echo 172.16RELAY  /etc/mail/access
makemap hash /etc/mail/access  /etc/mail/access
/etc/init.d/sendmail restart

change 172.16 to the subnet your workstation is on; edit the file if you
need more than one.

there's a FAQ which mentions the access database feature somewhere -- i've
not found any more explicit docs though

-t

..
[obligatory-useless-waste-of-bits-bit-goes-here] ultra-umbra-magic-crypto
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 supercomputer-AES-xspook


Re: port redirection

1999-07-01 Thread thomas lakofski
i'm missing the original message, but 'rinetd' might help in what you're
looking for.  works for me.

On Thu, 1 Jul 1999, Ralf G. R. Bergs wrote:

 
  I use statements like
  
ipmasqadm portfw -a -P tcp -L $EXT_IP pop-3 -R $INT_IP pop-3
 
 ipmasqadm is a potato thingy.  I'm still doing slink.  Do you know how 
 
 Ooops. Sorry. Can't you just upgrade the necessary packages Debian 2.1 level?
 
 I can accomplish this with slink and kernel 2.0.36?  I'm still
 trying stuff out with ipfwadm.  Does this sound feasible?
 
 To the best of my knowledge port forwarding wasn't available in stock 2.0.x 
 kernels. There MIGHT however be a patch to provide port forwarding, but I 
 don't know whether it really exists.
..
[obligatory-useless-waste-of-bits-bit-goes-here] ultra-umbra-magic-crypto
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 supercomputer-AES-xspook


Re: HD activity

1999-06-21 Thread thomas lakofski
On Mon, 21 Jun 1999, Thorsten Manegold wrote:

 1) What causes the HD activity every 3 seconds? That 
 way powersaving will never take effect.

cron, update, syslog, maybe others.  update is the main problem.

 2) How can I change the setup, so that the HD will not be needlessly 
 acsessed?

change the timing of cron jobs in /etc/cron.d;

change the 'update' line in /etc/init.d/checkroot.sh to 'update -s 3600 -f
3600'

add '-' before every filename in /etc/syslog.conf

be aware that these changes are not crash-friendly.  if your machine
doesn't shut down or suspend properly, you will most likely lose more data
than you would have without the changes.  if you're about to do something
risky, do 'sync' first with this setup.

this (and possibly other) stuff is in
/usr/doc/HOWTO/mini/Battery-Powered.gz

-thomas

..
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: Netscape crashing -- a lot.

1999-06-17 Thread thomas lakofski
On Thu, 17 Jun 1999, Michael Talbot-Wilson wrote:

  On Tue, 15 Jun 1999, Craig McPherson wrote:
  
   Are any of the earier versions of Netscape more stable than 4.6?  
   I'm willing to use whatever is stable.  I haven't yet tried earlier 
   Netscapes.
  
  same thing happens to me with 4.51 and 4.08, both linked with glibc2.  i
  think it's a glibc2.1 issue.
  
  anyone have libc5 debian packages for 4.08/51/6?
 
 It's not glibc2.  Netscape 4.6 (Potato) runs fine, at least if you have
 a Cirrus CL-GD5446 (PCI), kernel 2.2.9 and plenty of RAM.  Look for
 something else.  And I don't think it's the window manager.  At least,
 Netscape's okay on Enlightenment. 
 
 Have you tried the SVGA X server (acceleration off)?  Does XF86Setup
 find any parameters specific to your card?  Have you upgraded XFree86 to
 glibc2? 

I don't think it's an XFree86 issue -- same things occur when running
netscape over VNC.  Blackbox is my window manager.  All problems vanish
when using libc5 version of communicator 4.08.  Specific (repeatable)
problems were:  bus error when closing one window; bus error when using
sites protected with basic auth; bus error when selecting menu item in
large (50+ item) pop-up menus.  None of these I've seen with the libc5
version.

I'm running potato current as of a few days ago on a Libretto 100CT, SVGA
server using Neomagic chipset, kernel 2.2.10, 64MB RAM.  Everything's
glibc2.1 that can be. 

-thomas

..
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: Netscape crashing -- a lot.

1999-06-16 Thread thomas lakofski
On Tue, 15 Jun 1999, Craig McPherson wrote:

 Are any of the earier versions of Netscape more stable than 4.6?  
 I'm willing to use whatever is stable.  I haven't yet tried earlier 
 Netscapes.

same thing happens to me with 4.51 and 4.08, both linked with glibc2.  i
think it's a glibc2.1 issue.

anyone have libc5 debian packages for 4.08/51/6?

-t

..
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: SSH problem

1999-05-31 Thread thomas lakofski
On Mon, 31 May 1999, Christian Dysthe wrote:

 We installed ssh on our new Debian 2.1 (slink) powered server. We do not
 have X on it at all, but I get this message every time I log on through
 ssh. The login works fine though. 
 
 Warning: Remote host denied X11 forwarding, perhaps xauth program could
 not be run on the server side. 
 
 How do I get rid of it?

this message is basically harmless.  to get rid of it, you can either tell
your ssh client to not request X11 forwarding (put 'ForwardX11 no' in
/etc/ssh/ssh_config or ~/.ssh/config);  or you can add the xbase-clients
package to your server and that'd let you run X11 apps from your server on
your client's display.  up to you which one you do...

-thomas

ps. when's Opera for Debian coming out? ;)

..
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: PKUNZIP Equivalent?

1999-05-31 Thread thomas lakofski
On Sun, 30 May 1999, Kent West wrote:

 A friend sent me some images compressed into one file using PKZIP (for
 DOS/Windows); is there a tool on Linux to unzip that, or do I need to
 dual-boot into Windows and unzip it there? Thanks!

there's an 'unzip' (also 'zip') package available in non-free (info at
http://www.debian.org/Packages/stable/utils/unzip.html )

-thomas

..
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)



Re: daylight savings time aint savin' ME time

1999-05-23 Thread thomas lakofski
not sure exactly what happened on your system, but the best thing to do is
probably not to set your timezone to EDT, but tell your box what location
it's in and it will work out the rest from there.  ie, my laptop is set to
Europe/London, it knows the daylight savings rules for my location, I
don't have to touch it unless I travel.

regards,

-thomas


On Sun, 23 May 1999, Michael Stenner wrote:

 Thanks, guys.  That worked.  But I'm still confused.  Why is it
 necessary to use tzconfig to change my timezone from EDT to EDT?  That's
 all I did, but now it behaves correctly.  What does the install do
 differently?
 
 Also, It's not that I don't read docs.  It just didn't occur to me that
 I needed to change the timezone -- It was right, after all :)
 
   -Michael
 
 On Sat, 22 May 1999, Bob Nielsen wrote:
 
 On Sat, May 22, 1999 at 03:40:15PM -0400, Michael Stenner wrote:
  Ever since Daylight savings time struck, my clock has been incorrect.
  
  I've tried setting it with hwclock --set --date=bla bla
  which seems to work, according to hwclock --show
  
  but when I reboot, the clocks (system AND hardware) are still wrong.
  
  I've also tried setting it in the BIOS.  Again, my computer outsmarts
  me.
  
  Once, I used hwclock --set --date=   followed by hwclock --systohw
  (or whichever one makes the system clock the same as the hardware clock)
  
  this did permanently change my clock (i.e. upon reboot it was still
  changed), but it changed it by TWO hours!!
  
  What am I doing wrong, here?
 
 'man tzconfig' should help.
 
 Bob  
 
 -- 
 Bob Nielsen Internet: [EMAIL PROTECTED]
 Tucson, AZ  AMPRnet:  [EMAIL PROTECTED]
 DM42nh  http://www.primenet.com/~nielsen
 
 
   Michael Stenner Office Phone: 919-660-2513
   Duke University, Dept. of Physics [EMAIL PROTECTED]
   Box 90305, Durham N.C. 27708-0305
 


..
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: peer refuses to authenticate

1999-05-22 Thread thomas lakofski
On Sat, 22 May 1999, moron wrote:

 I'm trying for the fiftieth time to set up an internet connection for the
 first time.  Could someone tell me if the message peer refuses to
 authenticate signifies something specific and easily correctable or just
 that I'm still a long way from getting things right?

you need a line with the word 'noauth' in your /etc/ppp/peers/provider
file.

-thomas

..
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: Sendmail Relay.

1999-05-19 Thread thomas lakofski
you need an access database to create some exceptions allowing relaying:

create a file called /etc/mail/access with your favourite editor, put
something like the following in it:

example.com RELAY
host.example.orgRELAY
anotherhost.example.net RELAY
172.16  RELAY
192.168.1   RELAY

wildcards are implicit in this file -- all 'example.com' hosts will be
allowed to relay, as will all hosts in the 172.16 network

then run:

makemap hash /etc/mail/access  /etc/mail/access

and restart sendmail with:

/etc/init.d/sendmail reload

hopefully this should work for you... see how far it gets you.

regards,

-tl


On Wed, 19 May 1999, Anthony Landreneau wrote:

 From: Anthony Landreneau [EMAIL PROTECTED]
 To: debian-user@lists.debian.org
 Date: Wed, 19 May 1999 12:43:45 -0500
 Subject: Sendmail Relay.
 
 Greetings,
   I am having a problem with the lastest dist of sendmail that is coming
 with Debian.  With my old sendmail.cf I was able to use my DNS's as mail
 relay host for the several dozen domains that I host for.  With the new
 sendmail.cf all of my domains are getting 550 we do not relay messages.
 Anyone had luck working with this?  I have checked the sendmail site and
 the HowTo docs, but I have to tell you it is not making a lot of sense to
 me.  Your help is appriciated.
 Anthony Landreneau
 DoD Network Security Administrator
 Infinity Data Systems
 New Orleans Louisiana
 (504)455-8973
 
 
 -- 
 Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
 


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


customising bounce messages with sendmail

1999-04-26 Thread thomas lakofski
hi,

there's a large chinese isp with a domain name similar to mine, 188.net.
consequently I get a lot of mail bounces.  I'd like to be able to
customise the message that sendmail sends back to them, adding a small
boilerplate like:  'my domain often gets confused with 188.net, maybe you
meant to send your mail there' or something.

does anyone have any pointers of the 'right' way to do this within the
framework of Debian's sendmail?

thanks in advance,

-thomas


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: Corel : GNOME vs KDE

1999-04-22 Thread thomas lakofski
On Thu, 22 Apr 1999, Philip Lehman wrote:

 How enlightening. KDE bashing is pretty trendy at the moment, isn't
 it?

i think it'll be nice to have the choice of either.  commercial adoption
of debian as a base can only lead to good things, i think (judging by what
corel's saying).

 Please, let's try to keep a reasonable noise-data ratio on this list
 ;)

sorry, i'm not helping much.

-t

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: delay when connecting to a Debian/Linux system

1999-04-07 Thread thomas lakofski
On Wed, 7 Apr 1999, JonesMB wrote:

 I have setup a couple of Debian/Linux systems in the lab at work.  
 They are used for many things, including acting as telnet and FTP 
 servers for various test programs.  The test engineers complain that 
 when an attempt is made to connect to the Linux box, it takes a while 
 before they get the login prompt.  Is there anything in the network 
 configuration settings that can be done so the login prompt comes up 
 at once.

your tcp wrappers by default do a reverse DNS lookup on connecting hosts,
and then a forward DNS lookup to see if the names match (basic anti-dns
spoofing).  if you're in a lab and not exposed to the Internet this is
probably unnecessary so you can make the following modification in
/etc/hosts.deny:

# /etc/hosts.deny: list of hosts that are _not_ allowed to access the system.
[snip]
#ALL: PARANOID
^ comment out this line.

that should make inbound connects a bit more speedy.

alternatively make entries for the machines connecting to the box in
/etc/hosts, and lookups will be speedy.

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: email threat

1999-04-06 Thread thomas lakofski
On 5 Apr 1999 [EMAIL PROTECTED] wrote:

[ESR wrote:]

  Damn straight I took it personally.  And if you ever again behave like
  that kind of disruptive asshole in public, insult me, and jeopardize
  the interests of our entire tribe, I'll take it just as personally --
  and I will find a way to make you regret it.  Watch your step.

I think that most people in the Linux community will find this behaviour
objectionable in the extreme.  If ESR wanted to rally people round in his
defense ('understand my job', etc.), he's just taken one of his many
firearms and shot himself in the foot.

It's fairly obvious who is 'behav[ing] like [a] disruptive asshole,' and
'jeopardiz[ing] the interests of our entire tribe.'

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: Setting the time and date is ?broken?

1999-04-06 Thread thomas lakofski
On Mon, 5 Apr 1999, Richard Black wrote:

 which _seems_ to work.  But when I reboot, the time and date are
 incorrect.  I have also tried using date with similar lack of success.
 
 Two things that I have noticed is that hwclock is slow and hwclock
 --show doesn't return anything.

is it quite an old pc?  you might need a new battery on your motherboard,
the little lithium cr2032 one which supplies power to the rtc and nvram
when it's switched off.  if the battery goes, it has trouble storing the
time.  it's not completely consistent with the behaviour you're describing
though, but it's worth checking.

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: Setting the time and date is ?broken?

1999-04-06 Thread thomas lakofski
On Wed, 7 Apr 1999, Hamish Moffatt wrote:

 It's not just old PCs with discrete batteries -- I'm reasonably sure I've
 seen photos of new motherboards with these lately. I was a bit surprised
 myself. I think my ASUS Super7 board may even have one (but I don't have
 the case open to check presently).

yes -- i was mainly mentioning old because the batteries take quite a few
years to run out.

regards,

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: network interface

1999-04-03 Thread thomas lakofski
On Sat, 3 Apr 1999, Jianbo Wang wrote:

 
 When I played with redhat, it has netcfg to create and config a network
 interface, does anyone know if there is a software in debian to do the
 same thing? Or how can I create a network interface and activate it?

dinstall on the rescue disk does the initial configuration of the network
on debian systems -- it's easy enough, however, to just go and edit
/etc/init.d/network yourself.  have a look at 'man ifconfig'.  on 2.0.x
kernels you'll need to add a route to the interface yourself too, on 2.2.x
the kernel takes care of that when you configure an interface.

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: vi in Debian (slink)

1999-04-03 Thread thomas lakofski
On Sat, 3 Apr 1999, Pollywog wrote:

 vi is acting weird, and I just discovered that vi on my system is not really
 vim.  Isn't vi really just a symlink to vim on most systems?
 
 vim works well, but vi is weird.  It acts buggy. 

/usr/bin/vi is linked to /etc/alternatives/vi; take a look at what
/etc/alternatives/vi is linked to, and change it if you want to.

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: Install - which device drivers?

1999-04-03 Thread thomas lakofski
On Sat, 3 Apr 1999, Stefan Langerman wrote:

 
 Ok, I'm installing slink right now, and I'm currently in the part where
 you install device drivers. Now, How do you know which are the ones you
 need? most of them have only one short line of explaination, (one even
 just has a '.'), and several seem to do the same thing. Is ther eany place
 where I can read more about them to help me make those choices? (usually,
 I just pick random stuff, and it seems to work, but I don't think it's the
 best method)

well, what hardware do you have on your machine?  lots of modules
(=drivers) will load automatically when needed, if not then install them
at this point.  the program it runs is called 'modconf', you can get back
to it after install.

hth,

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: top like drive usage utility?

1999-04-03 Thread thomas lakofski
On Sat, 3 Apr 1999, Chris Brown wrote:

 Our drives have occasionally been going nuts with disk access.  
 They would for no reason just start reading the disk and go solid for 
 10 minutes.  Is there a utility like top to check for who or what is 
 accessing the disks?

actually, top will do it quite nicely in many cases -- processes which are
blocked on i/o are shown in the 'D' state.  run top while the disks are
getting nailed and spot the process(es) in 'D' state.

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)



Re: Wvdial permissions

1999-04-03 Thread thomas lakofski
On Sat, 3 Apr 1999, Chris Mayes wrote:

 This means that the dialout group can read it, right?  So, I did this to
 the dialout line of /etc/group:
 dialout:x:20:cmayes:

close:

dialout:x:20:cmayes

you would separate users by commas if you had more than one in that group.

the 'adduser' command will do this for you, actually:

adduser cmayes dialout

hth,

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


tunnelling ssh over https proxy

1999-04-02 Thread thomas lakofski
hi,

before i try and do all the legwork on this one, i just wanted to check
that no-one had a prerolled solution to this one:

i'm trying to let myself connect to my linux box from work through our
Apache proxy's https tunneling.  i've set up a port redirector that points
port 443 on the box to 22, so the acl on the proxy will think that it's
going to a ssl site.

ssh accepts a config file option ProxyCommand which it runs, and reads
from and writes to via STDIN/OUT as if it were the remote socket -- this
lets you do the CONNECT command.

unfortunately, the obvious 'echo -e CONNECT 88.NET:443 HTTP/1.0\n\n | nc
proxyserver 8080' doesn't work because the first line that comes back is
the CONNECT string from the proxy, after which I see the SSH server
announce itself.  the ssh client doesn't like seeing anything but the sshd
at the other end.  so, I just need to soak up the string from the proxy
and everything would be fine and dandy.

i guess i would want perl for it probably -- i guess an ideal mini-server
would:

-listen on a local port
-connect to the proxy
-send the connect string
-ignore the first line that comes back
-connect the socket to STDIN/OUT and loop in a stupid fashion until a
socket closes.

hopefully someone has done this already.  if not, i might even become a
maintainer and package it when it works.

cheers,


-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)



tunnelling ssh over https proxy

1999-04-02 Thread thomas lakofski
hi,

before i try and do all the legwork on this one, i just wanted to check
that no-one had a prerolled solution to this one:

i'm trying to let myself connect to my linux box from work through our
Apache proxy's https tunneling.  i've set up a port redirector that points
port 443 on the box to 22, so the acl on the proxy will think that it's
going to a ssl site.

ssh accepts a config file option ProxyCommand which it runs, and reads
from and writes to via STDIN/OUT as if it were the remote socket -- this
lets you do the CONNECT command.

unfortunately, the obvious 'echo -e CONNECT 88.NET:443 HTTP/1.0\n\n | nc
proxyserver 8080' doesn't work because the first line that comes back is
the CONNECT string from the proxy, after which I see the SSH server
announce itself.  the ssh client doesn't like seeing anything but the sshd
at the other end.  so, I just need to soak up the string from the proxy
and everything would be fine and dandy.

i guess i would want perl for it probably -- i guess an ideal mini-server
would:

-listen on a local port
-connect to the proxy
-send the connect string
-ignore the first line that comes back
-connect the socket to STDIN/OUT and loop in a stupid fashion until a
socket closes.

hopefully someone has done this already.  if not, i might even become a
maintainer and package it when it works.

cheers,


-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: Re[2]: ping script for isp autologout

1999-03-14 Thread thomas lakofski
On Sun, 14 Mar 1999, Bob Bernstein wrote:

 Aha. Thanks for the tip. Stupid me though, it dawned on me, when I got the
 pppupd package, that I'm using a new OpenBSD box for dialling up and that this
 Linux machine is not the place I want to do the 'keepalive' work from.
 
 Any clue as to a script that might work on that dialup machine?

well, you could get the source for pppupd and compile it on your OpenBSD
box.  sources are on your debian mirror in the same directory as
'binary-i386' or whatever.

otherwise, the 'ping' command has a switch, -i, which tells it how many
seconds to wait between packets.  'ping -i 300 host.example.com' will ping
your isp's dialup server every five minutes while you've got your
connection up (replace the address, obviously).

hth,

-thomas 

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: PPP connection

1999-03-14 Thread thomas lakofski
On Sun, 14 Mar 1999, Christian Dysthe wrote:

 when I am logged on to my ISP and do a ps a I get the following:
 
 /sbin/getty 38400 tty1
 
 Does this mean I have something set wrong. My modem connects at 44-48000, so
 this puzzles me.

This line refers actually to a program which is listening on the first
virtual console (which you get to with alt-f1 or ctrl-alt-f1 from X)
waiting for a login.  the 38400 does refer to a serial linespeed but is
just a bit of a holdover from when all terminals were on serial lines.

if you want to find out how fast your modem is connecting have a look at
/var/log/ppp.log (just type 'plog -f' to follow this file as you are
connecting)

something like:
Mar 14 16:42:15 grummet chat[18251]: CONNECT 44000/ARQ/x2/LAPM/V42BIS^M
 ^ is what you're looking
for.

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: rvplayer segfault

1999-03-14 Thread thomas lakofski
On Sat, 13 Mar 1999, Max Kamenetsky wrote:

 This is truly bizarre, but I can't get rvplayer to work on my system.  I'm
 using kernel 2.2.3 with glibc2.1.1 and rvplayer segfaults every time I try
 to start it.  I'm attaching the full strace in the hope that someone knows
 what's going on.  It seems to barf as soon as it opens locale.alias, but
 there doesn't seem to be anything wrong with that file as far as I can
 tell.  I'd be grateful for any suggestions.  Oh yeah, I'm using rvplayer
 5.0-9 with a potato system.

Hmmm... I'd point the finger at realplayer's interaction with glibc2 --
i'm running potato with 2.2.3 same version of realplayer and no problems. 
it's quite likely that realplayer uses unpublished bits of glibc2 that
have been eliminated from glibc2.1, tripping up realplayer.  however, i'm
guessing.  unfortunately I'm not sure if there's a way of downgrading to
2.0.7.  i'd be careful. 

-thomas, who's not upgrading to glibc2.1 for at least 2 months.

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: Version 2.0 to 2.1 upgrade

1999-03-14 Thread thomas lakofski
On Sun, 14 Mar 1999, Simon Martin wrote:

 1) sendmail.cf has been moved from /etc to /etc/mail, but the script
 /etc/init.d/sendmail checks for the existence if the /etc/sendmail.cf
 command before it executes anything.

There should be a file /etc/init.d/sendmail.dpkg-new -- you might want to
replace the /etc/init.d/sendmail file with this one so that it looks in
the right place.

 2) I found that submitting mail from the Linux box worked but submitting it
 from a workstation did not, giving an error about relaying. The only way I
 could get round this was to add domain names for all my clients into the
 /etc/mail/relay-domains file. This seems to work, but it is a real drag.
 Thank God I did the upgrade over the weekend.

This relaying protection is actually something that you definitely DO
want.  If you're running sendmail open to all relaying on the Internet,
before long some spammer will discover it and happily steal your bandwidth
and cpu to send their crap all over the Internet, possibly resulting in
the blacklisting of your mailhost stopping you from mailing about 30% of
the net.

You should be able to use appropriate wildcards in the relay-domains file
so you don't have to do it by host, but by IP ranges (172.16.*) or whole
domains (*.example.com).  Yes it's more of a pain than unrestricted
access, but having your mailer exploited by spammers is more of a pain
than anything (and many people will dislike you for it.) 

hope this helps,

-thomas

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)


Re: ping script for isp autologout

1999-03-13 Thread thomas lakofski
there's a debian package for it, `pppupd':

pppupd - Keeps a ppp connection alive

PPPupd, is a simple daemon which maintains a dialup PPP connection. PPPupd
is able to:
   + Execute a redial script, should the connection drop.

   + Send out periodic pings to keep a connection up, which might
   be disconnected by unruly ISP's who kick their well paying
   members off, after a predetermined number of minutes of
   inactivity.


On Sat, 13 Mar 1999, Bob Bernstein wrote:

 From: Bob Bernstein [EMAIL PROTECTED]
 To: debian-user@lists.debian.org
 Date: Sat, 13 Mar 1999 21:20:45 + (GMT)
 Subject: ping script for isp autologout
 
 My local mom 'n pop ISP (brainiac) was sold to a large ISP (who shall for the
 moment remain anonymous) that - I *think* - engages in the practice of logging
 users out after a certain period of idle time. (I'm waiting for their
 support to get back to me on this question.)
 
 I know folks have devised scripts to auto-ping remote sites in order to defeat
 this practice. 
 
 Could someone give me a steer towards one or two of these scripts?
 
 
 -- 
 Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
 


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)



Re: I've been cracked! (hamm, 2.0.35)

1999-03-13 Thread thomas lakofski
Probably a good idea long-term to subscribe to BUGTRAQ, or at least,
debian-security-announce.  usually you'll have some leeway between
discovery of an exploit and potentially being attacked with it, but if
you're wide open for weeks it's definitely asking for trouble.

it's also worth shutting down as much on the machine as possible -- only
run minimal services necessary, and be aware of what net-facing services
you're running when following security news.

-thomas

On Sat, 13 Mar 1999, Don Erickson wrote:

 Thanks to all for the good advice, I'm using this as an excellent excuse
 to upgrade my creaky 486 and start over with a whole new system and a
 whole new machine. 

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98 umbra (!)



Re: What is LINX?

1999-02-28 Thread thomas lakofski
On Sun, 28 Feb 1999, George Bonser wrote:

 I have never heard of linx

hugely off-topic, LINX is a big network access point (like
mae-[east|west])  in the u.k. (london internet exchange?)

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 
EF D8 33 68 B3 E3 E9 D2  C1 3E 51 22 8A AA 7B 98


Re: [Off Topic] An EXCELLENT Microsoft Confidential document on

1998-11-05 Thread Thomas Lakofski
On Thu, 5 Nov 1998 [EMAIL PROTECTED] wrote:

 Me too!  I'm usually a very cautious person...How do we *know* that this
 has even originated from MicroSoft?  So there is the issue of whether or
 not it's from MS, and if it is it it truly confidential?

It was confirmed by MS.  See slashdot.org somewhere...

-TL

..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 


sample muttrc with folders

1998-11-04 Thread Thomas Lakofski
hi,

not having much time, i thought i could shortcut the process of creating
myself a muttrc by asking someone to send me theirs (preferably someone
who subscribes to a lot of lists).  i'm somewhat fed up with pine, but
don't want to devote the necessary time to learning (yet another) rc file
format.

thanks in advance,

TL


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 


Re: biff and comsat don't work

1998-11-02 Thread Thomas Lakofski
If you use sendmail, put the following in your sendmail.mc:

FEATURE(local_procmail, /usr/bin/procmail)dnl
define(`LOCAL_MAILER_ARGS', `procmail -Y -d $u')dnl

If you don't use sendmail, I don't know where to make the config change,
but you want to pass procmail the arguments above. $u is... uh, I'm not
sure -- but if you use sendmail it'll work.

-Thomas (who's never used an MTA other than sendmail, because all the
others complain about his domain name violating an RFC.)


On Mon, 2 Nov 1998, Max wrote:

 From: Max [EMAIL PROTECTED]
 To: debian-user@lists.debian.org
 Date: Mon, 2 Nov 1998 12:36:26 -0800 (PST)
 Subject: biff and comsat don't work
 
 I'm having a tough time getting biff to work properly.  I have the
 following line in my /etc/services:
 
 biff512/udp comsat
 
 and the following section in my /etc/xinetd.conf:
 
 service comsat
 {
 socket_type = dgram
 protocol= udp
 wait= yes
 user= root
 server  = /usr/sbin/in.comsat
 }
 
 But I still cannot get biff to work even with biff y!  I tried
 playing around with the MAIL and mail variables, but that didn't help
 either.  All I want biff to do is to display the first 3 or so lines
 of a new message as soon as it arrives.  Is there something else I
 need to do?  The only error in the logfile that I can find is:
 
 Nov  2 12:35:43 chinook xinetd[27596]: bind failed (Address already in use). 
 service = netbios-ns
 
 But netbios-ns is on a different port than comsat, so I don't see how
 this should make a difference.
 
 Thanks for any help,
 Max
 
 
 -- 
 Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
 


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 


Re: Help on Sendmail

1998-11-02 Thread Thomas Lakofski
On Mon, 2 Nov 1998, Michael E. Touloumtzis wrote:

 Wilson Tuma wrote:
  
  I just installed sendmail on my linux  mail server.  The problems is it only
  accepts mail for my domain name (i.e local mail).  My domain name name is
  douala1.com and my mail server is m1.douala1.com
  
  How do I configure it so that it accepts all mail for delivery
  
 
 Run /usr/sbin/smailconfig --force and identify your mail server as the
 smarthost.

I think the question was about sendmail -- to add domains accepted by
sendmail add them to the file /etc/mail/sendmail.cw and then run
'sendmailconfig'.

-t


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 


Re: xntp3 and local time zone setting

1998-11-01 Thread Thomas Lakofski
On Sun, 1 Nov 1998, Erik van der Meulen wrote:

 Is it possible to set some parameter to overcome this time
 zone difference? The xntp3 docs did not give an aswer, so
 I am assuming that it should be on the Linux side.

Erik,

Try 'tzconfig'.


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 


Re: Delete key changed its behavior

1998-11-01 Thread Thomas Lakofski
On Sun, 1 Nov 1998, Ionutz Borcoman wrote:

 After installing some packages from Debain-JP, my delete and backspace
 keys changed their behavior under X. Now they delete the character in
 front of the prompt. Even Netscape behaves like this. Can somebody
 please tell me where should I make the changes ?

xmodmap should do what you want
use xkeycaps to find out the right codes for xmodmap.
put an xmodmap command in your .xsession or better still in
/etc/X11/xdm/Xsetup_0 (if you're using xdm).


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 



Re: Stuck with M$ Exchange.

1998-11-01 Thread Thomas Lakofski
Netscape Communicator's IMAP email client works very nicely with
Exchange's (rather strange implementation of an) IMAP server.  Works with
public folders too...

On Sun, 1 Nov 1998, Leandro Dutra wrote:

 From: Leandro Dutra [EMAIL PROTECTED]
 To: 'DebUsr' debian-user@lists.debian.org
 Date: Sun, 1 Nov 1998 12:54:18 +0200 
 Subject: Stuck with M$ Exchange.
 
   I work at a company which uses only M$ Exchange for email, and a
 gateway to SMTP.  I could install Linux on my machine, but would need
 a piece of s/w to be able to talk to the Exchange server.  Is there
 any thing available?
 
   TIA!
 
 
 
 Leandro Guimaraens Faria Corcete Dutra
 AUREC/Amdocs, Amdocs (Brasil) Ltda
 Tel Aviv, Israel
 
 
 -- 
 Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
 


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 


Re: please help with netscape and sound

1998-11-01 Thread Thomas Lakofski
set netscape to use 'play %s' in the 'helper applications' section of the
preferences.  'play' is in the 'sox' package.

this isn't the only answer, just the first off the top of my head.

On Sun, 1 Nov 1998, Ionutz Borcoman wrote:

 From: Ionutz Borcoman [EMAIL PROTECTED]
 To: Debian Users debian-user@lists.debian.org
 Date: Sun, 01 Nov 1998 04:39:12 +
 Subject: please help with netscape and sound
 
 Hi,
 
 I have try different ways to make my Netscape play some .au files from
 the web pages. It was impossible (for me). The sound is OK and the au
 files play ok if I send them to the /dev/dsp. But I don't understand how
 to tell Netscape to do this !
 
 Please help !
 
 Ionutz
 
 
 -- 
 Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
 


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 


splitting up a MIME-digest

1998-11-01 Thread Thomas Lakofski
I have a couple of messages with about 1200+ messages in each as
MIME-digests (thanks to the braindead forwarding of microsoft exchange
server)

I was wondering if anyone had suggestions of a way to split these digests
up into folders of individual messages.  Sadly, the obvious candidate, the
'split-digest' package (or whatever it's called) doesn't do it.  I was
thinking I would need sed or something, but have no idea how to concoct a
recipe for it.

Crafty suggestions welcomed.

-t


..
please forgive my abrupt ending hre - but my conection is  
xtrememleyyhiclmelyey  BAD hiccuppy etc must sign off - 


Re: Root password security

1998-10-15 Thread Thomas Lakofski
Physical security of the box in question is the only real measure you can
take (lock it in a box).  Failing this, get a machine (some newer Compaq
workstations have this) that lets you restrict floppy booting with BIOS
and has a software case-lock.

It's hard to suggest any other measures other than physical security -- if
you take out the floppy, someone can always put one in... but you may be
able to work out something relatively simple which involves locking the
case closed with a strong lock and then setting the BIOS to boot from hard
disk first.

regards,

-tl

On Thu, 15 Oct 1998, ZS Choy wrote:

 From: ZS Choy [EMAIL PROTECTED]
 To: debian-user debian-user@lists.debian.org
 Date: Thu, 15 Oct 1998 21:26:12 +0800
 Subject: Root password security 
 
 I wish to know if any expert knows how to improve root password
 ptotection/security which could not be disable with blanking out of
 root password using boot/root floppy.
 
 Any help will be greatly appreciated.
 
 Thks  b.r.
 z.s.
 
 
 -- 
 Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
 


-thomas



Installing on ThinkPad 600

1998-10-13 Thread Thomas Lakofski
Hi,

I'm trying to convert a colleague of mine from Slackware to Debian 2.0r2,
but we're not getting beyond the 'Loading Linux: ...' line with
the Tecra floppy.  Likewise with 'linux floppy=thinkpad' or 'linux
floppy=nodma'.  Tried booting into DOS and running d:\install\install.bat,
the kernel boots but fails to find root device 01:00 (although it had
detected the IDE CDROM).

Ideas?  I'd like to get it working.

Thanks in advance,


-thomas


Re: mgetty counting rings

1998-05-07 Thread Thomas Lakofski
On Thu, 7 May 1998, Remco van de Meent wrote:

 Is there a way to have mgetty (or something else) counting the number of
 RING's it receives on the modem line? I want it to write the results with a
 timestamp in a logfile, if possible.

You could use xringd to run a command every ring, something like
echo `date`  logfile

xringd will do practically anything with phone rings (very cheap remote
control system) 

-thomas


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: network printer

1998-05-06 Thread Thomas Lakofski
On Tue, 5 May 1998, Will Lowe wrote:

 On Tue, 5 May 1998, Timothy C. Phan wrote:
 
I've a Postscript printer connected to one of the NT4.0
box in my local network.  I'd like to know how would setup
my linux box so I can print from my Linux box to this
printer.
 
 I'd suggest you check out the SMB-howto.  Samba is probably the way to go.

You could also install lpd print services on the NT box, which (should) be
compatible with the linux lpd (presuming microsoft hasn't 'altered' it for
their usual reasons).  Hmmm, I think you might need NT Server... too long
since I've worked with bloatware, sadly, for me to remember exactly.

-thomas


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Sshd and utmp

1998-05-05 Thread Thomas Lakofski

On Tue, 5 May 1998, Carroll Kong wrote:

 utmp to work with sshd?  I am using debian 2.0 glibc2... can that be affecting
 sshd if sshd was compiled in libc5?  Thanks in advance guys.

yes, you need ssh for hamm on a hamm system if you want utmp and wtmp to
work properly.

-thomas


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: What's the storywith 2.0?

1998-05-03 Thread Thomas Lakofski
On Sun, 3 May 1998 [EMAIL PROTECTED] wrote:

 From what you just said, you question would better be worded: When will
 2.x be reasonably stable for a non-experimental user? As a non-developer,
 let me give you my best estimate:
 
   Never. History will probably repeat itself and the project will
 go even further away from this planet. Rather than focus on building a
 2.0.x release that kicks ass, they will concentrate on playing with new
 toys.

[etc. etc. etc.]

Expressing these sentiments in this manner is unlikely to help your cause.
Bear in mind that the Debian developers are volunteers, and I've found
over the last 18 months of using Debian that they are extremely helpful,
hardworking volunteers.  Please, instead of spreading fear, uncertainty
and doubt in this manner make a positive contribution, either by helping
to fix problems you see in the distribution yourself, or choosing another
distribution which fits your needs more perfectly.

I feel that the effort that is being made to make hamm actually stable
before it is declared as such is very commendable.  If I wanted a rush job
I would go out and buy Red Hat.  I don't.  I want a high-quality
distribution with top-grade reliability and a large selection of packages
(the so-called 'toys' you complained about).  That distribution is Debian.

-thomas


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: StarOffice 4.0 *.deb

1998-05-02 Thread Thomas Lakofski
4.0?  using the staroffice3.deb package? how?

staroffice 4 on my hamm system just segv's (installed with its own
installer)

-thomas

On Fri, 1 May 1998, Bob Nielsen wrote:

 I've installed both 4.0 and 3.1 in hamm using the debian installer with
 minimal problems.  I had installed 3.1 into bo before the installer


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Free/OpenSource software?

1998-05-01 Thread Thomas Lakofski
On Fri, 1 May 1998, Hamish Moffatt wrote:

 But weren't Microsoft found to have breached Stac's patent, rather than
 stolen actual code? I think actual code would be harder to prove
 than infringement of a patent.

Hmmm, from what I remember they had just lifted whole code segments from
Stacker and popped it into DOS, then they got caught and had to withdraw
6.2 and recode for 6.21.  I'm not sure that Stac could have had a patent
on that kind of real-time compression/decompression, since I'd seen it
before then on other systems.

On the other hand, I could be senile.  I hope not.

-thomas


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: biff/new mail - blink LED indicators on keyboard

1998-05-01 Thread Thomas Lakofski
You might want to try this instead:

http://lcdproc.omnipotent.net/

it's a little lcd display going for about $70 which will show you all
kinds of system information, including whether you have mail, etc.

-thomas

On Thu, 30 Apr 1998, Paul Miller wrote:

 From: Paul Miller [EMAIL PROTECTED]
 To: Debian User debian-user@lists.debian.org
 Date: Thu, 30 Apr 1998 22:19:31 -0400 (EDT)
 Subject: biff/new mail - blink LED indicators on keyboard
 
 
 Anyone know how I could have a cool LED animation when new mail arrives
 (when I'm logged in or not)?  Something like a bouncing effect for the
 first couple seconds and then have the scroll lock blink once every five
 minutes or so...
 
 I have a program called 'bl' that does make the keyboard lights blink, but
 it only works if I'm logged on and I'm using the same tty as where it was
 executed -- ie, sleep 3; bl -c console doesn't work when I switch to
 another VC before sleep expires.. I don't know how it would work in X...
 
 Anyone else tried this?
 
 -Paul
 
 
 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
 

-thomas


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: green monitor functions for the console?

1998-04-30 Thread Thomas Lakofski
I have this in a file called `/etc/rc.boot/consoledpms':

#!/bin/sh
setterm -blank 15 -powersave powerdown

I couldn't get it to do anything other than 'suspend' on the console, and
'off' in X... probably depends on your videocard and monitor.

-thomas


On Thu, 30 Apr 1998, Paul Miller wrote:

 From: Paul Miller [EMAIL PROTECTED]
 To: Debian User debian-user@lists.debian.org
 Date: Thu, 30 Apr 1998 07:05:48 -0400 (EDT)
 Subject: green monitor functions for the console?
 
 
 Is there a program, similar to xset, that can set the green monitor
 functions for the console?  I'd like my monitor to turn off after a
 certain amount of inactivity.
 
 Thanks
 -Paul


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: xdm and shutdown

1998-04-30 Thread Thomas Lakofski
shutdown -h 0?

just remember to save stuff first...

On Thu, 30 Apr 1998, Jorge Daniel Ruckj wrote:

 Hi all.
 
 How I do a shutdown if I use xdm?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Free/OpenSource software?

1998-04-30 Thread Thomas Lakofski
On Thu, 30 Apr 1998 [EMAIL PROTECTED] wrote:

 1. I am planning to write in Java. Does the fact that Sun seems to have
 control over the language itself affect the ability to apply the GPL or
 similar liscences to Java software? 

I don't believe the status of the language you code in affects whether you
can make your code GPL.  There are efforts underway anyway to make a GPL'd
java VM clone.

 2. As I understand it, the GPL forbids use of your source code in closed
 source software. However, if an unscruplous individual were to do so
 anyway, how would you know since the individual's source would be
 closed? 

If you suspected this, there are ways in which it can be shown that your
code has been stolen, as was done when Microsoft stole Stacker technology
and called it Doublespace in DOS 6.2.  The risk of being caught is usually
enough deterrent, as if you were caught, the license terms of GPL'd
software would require the release of sources for all derivative works.

 3. Is there any other major benefit to open source beside peer review?

How about:
- peer contribution, as well as review: your software will grow
'as if by magic' if it was interesting enough to begin with.

- many karmic bonus points for giving something back to the community
you've gained from.

- no negative effect upon your possible stream of revenue from providing
commercial support to users of your software who require it.  as was
pointed out by a free software advocate recently, software is a *service
industry*.  there's much more potential revenue from charging by the
hour/day for implementation/support of your software anyway, than there is
from getting $xxx per unit and then being obliged (unless you're a major
software company) to provide support for some period for free. 

I'm sure this is but a fraction of the arguments in support of releasing
your code under the GPL.  The best argument is to look at the most
notorious examples of proprietary and free software out there: Windows 9X,
and GNU/Linux.  No contest, really.

-thomas


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


src-packages and package manager

1998-04-24 Thread Thomas Lakofski
(Not wishing to contribute further to that pine thread...)

So, since we've got to have some packages distributed only as sources, how
about a little bit of extension to Debian's package management to handle
it nicely?  One of the major reasons I use Debian is because I can make
sure I'm up to date with my software (and hence secure, etc) by upgrading
periodically with dselect.  If major components of my system are only
available in source form, this defeats this ease of use a little.  So how
about something (in Deity, I guess) which would know about source
packages, tell you when they're updated, and also know how to build binary
packages from them, and install accordingly.

Not essential, and it's a bit of a blue-sky feature, but I think it'd help
retain some of the core value of Debian.  Plus, we wouldn't have drawn out
conversations about such-and-such.deb going source only because it would
be no problem -- no more difficult to install than any binary .deb.

-thomas

(who's again appealing for pragmatism, not a long thread.)


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: PINE Debian Package

1998-04-23 Thread Thomas Lakofski
On Thu, 23 Apr 1998, Adam Klein wrote:

 As I understand it, the license forbids distribution of a modified
 source or binary, but allows the distribution of patch files.

Did anyone ask UoW what their position is?  I've not heard of them
prosecuting, and I'm sure there must be someone there who's aware of
the debian package.

How about a pine-src package with the patch included, which patches the
original sources in the postinst script, builds the binary package and
then installs it?

I'd like to see some pragmatism on this issue.

-thomas


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


KDE mouse-click strangeness

1998-04-21 Thread Thomas Lakofski
I've just upgraded my home system to the latest KDE available in hamm.
Most of it seems fine, except that certain elements no longer respond to
mouse clicks, or do not respond initially and can be 'coaxed' by lots of
clicking.  Unfortunately, ony of the elements which doesn't respond is the
task bar :(  (luckily alt-f1 goes some of the way).  I'm mystified.
Further detail is available, if anyone is willing to lend a hand...

thanks (many) in advance,

-thomas


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


many many segfaults

1998-03-16 Thread Thomas Lakofski
One of my debian boxes is becoming increasingly unstable, with general
protection faults and segfaults almost every day now.

I checked the RAM a couple of weeks ago with the memtest utility included
with hwtools (i think), and it didn't find any faults -- but I know this
doesn't mean the RAM's not at fault.  Is there anything else I should be
considering?  It's a 2 1/2 year old machine on an Intel Endeavor
motherboard, P166, 2940 host adapter.  Diagnostics are a bit tricky as I'm
on the other side of the atlantic from the machine. 

Suggestions from people experienced in these matters welcomed...

TIA -TL


M$ slips up in true Freudian style...
Seminar attendee: Why is [Outlook] so slow?
M$ rep:   That's because it's live on the network.
Seminar attendee: As opposed to...?
Stop the madness!  Free yourselves!  http://www.opensource.org/


--
E-mail the word unsubscribe to [EMAIL PROTECTED]
TO UNSUBSCRIBE FROM THIS MAILING LIST. Trouble? E-mail to [EMAIL PROTECTED]


Re: disabling remote xdm logins

1998-03-02 Thread Thomas Lakofski
ipfwadm -I -a reject -P udp -S 0.0.0.0/0 -W eth0 -D 209.109.31.9 177

works for me...

(btw, it's not a broadcast -- the client sends a UDP broadcast.)

-t

On Mon, 2 Mar 1998, Ossama Othman wrote:

 From: Ossama Othman [EMAIL PROTECTED]
 To: debian-user@lists.debian.org
 Date: Mon, 2 Mar 1998 17:25:47 -0500 (EST)
 Subject: disabling remote xdm logins
 
 Hi,
 
 I am trying to disable remote xdm logins from terminals and from some
 remote xdm login widgets.  I tried to modify the Xaccess file according to
 the docs and then restarting xdm but I still can't seem to get xdm to stop  
 broadcasting to the rest of the machines on the same subnet that it is
 accepting xdm logins.
 
 Could someone please explain how I can configure my debian system to stop
 accepting xdm logins from remote machines?


M$ slips up in true Freudian style...
Seminar attendee: Why is [Outlook] so slow?
M$ rep:   That's because it's live on the network.
Seminar attendee: As opposed to...?
Stop the madness!  Free yourselves!  http://www.opensource.org/


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: Win95 Dialin Client Config

1998-02-27 Thread Thomas Lakofski
On Thu, 26 Feb 1998, Kevin Traas wrote:

 None of these dialin users (Win95 or WinNT WS) can browse the network
 using Network Neighborhood.  They get a Can't Browse Network message.
 However, everything else works fine.  I've got a WINS server running and the
 Linux is a DNS server, so name resolution isn't a problem.  However, they
 can't use the Network Neighborhood to browse to a server, connect a share,
 etc.

If you take a look at /etc/ppp/options you can specify a 'wins-addr'
option which should give your win95 dialup clients the right WINS
addresses.  Last time I checked NT had some problems with getting the
assignment, but that might have changed since I last used it (about 1 year
ago).  You can also specify the dns addresses in a similar manner -- take
a look at the file.  The advice given in a follow-up to your email about
having the clients log on to the NT domain is also correct (as is the rest
of it -- this might just help make things smoother).

Thomas.


M$ slips up in true Freudian style...
Seminar attendee: Why is [Outlook] so slow?
M$ rep:   That's because it's live on the network.
Seminar attendee: As opposed to...?
Stop the madness!  Free yourselves!  http://www.opensource.org/


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: Win95 Dialin Client Config

1998-02-27 Thread Thomas Lakofski
On Thu, 26 Feb 1998, Kevin Traas wrote:

 Thanks for the comments.  My apologies for not providing enough information.
 
 I do have everything set properly as mentioned above.  The Win95 clients
 have the Log onto Network option checked and running winipcfg on them
 reveals that DNS, WINS, IP, Mask, Gw, etc. are all configured as expected.
 
 Any other suggestions?

ummm, I'll put on my MCSE hat (blush) and say: try rebuilding the WINS
database, check that browsing works with an NT RAS server, and not with
Debian... errr, beyond that, I can only say that it's why I'm not a
practising MCSE (even though the 'exams' i had to take were a complete
joke...)

(sorry for the off-topic-ness)

Thomas.


M$ slips up in true Freudian style...
Seminar attendee: Why is [Outlook] so slow?
M$ rep:   That's because it's live on the network.
Seminar attendee: As opposed to...?
Stop the madness!  Free yourselves!  http://www.opensource.org/


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


`-- MARK --' in syslog every 20 minutes

1998-02-27 Thread Thomas Lakofski
Hmmm, I just upgraded some hamm packages (don't remember which, but they
changed in the last few days) and now my syslog gets

Feb 27 12:55:14 mu -- MARK --

in it every 20 minutes.  Anybody else getting this?

TIA,

Thomas


M$ slips up in true Freudian style...
Seminar attendee: Why is [Outlook] so slow?
M$ rep:   That's because it's live on the network.
Seminar attendee: As opposed to...?
Stop the madness!  Free yourselves!  http://www.opensource.org/


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


diald with dynamically assigned IP?

1998-02-24 Thread Thomas Lakofski
Hi,

Has anyone got diald running with an ISP who does not give you a static
IP?  From what I can see the slip proxy that diald uses requires you to
know what address your localhost will be assigned beforehand -- which is
tricky if it changes every time you dial up.  Has anyone experienced this
problem?

Thanks in advance,

Thomas.



Support the Open Source software movement -- join the biggest revolution
in computing since the Difference Engine!  See http://www.opensource.org


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: diald with dynamically assigned IP?

1998-02-24 Thread Thomas Lakofski
On 24 Feb 1998, Erv Walter wrote:

 The slip proxy can have any ip you want.  They are only used to trap
 the network requests while the net is down anyway.  For example, I
 ahve remote set to 127.0.0.2 and local set to 127.0.0.3 for the
 proxy.  Diald will detect the new ip when you connect and make the
 needed adjustments (assuming you have configured it right).

This looks like what I need...  On another note, what's the 'right' way to
mesh diald with the current ppp from hamm?  I was thinking that I'd use
the diald connect script to bring the link up, /usr/bin/poff to bring it
down.  Is there a way to have diald pass the 'noauth' option to pppd
without changing the /etc/ppp/options file (which the file warns against)?
I suppose the best way is to have diald call /usr/bin/pon as well, but
this seems to require some assembly.

Thomas.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: Port Scanning

1998-02-24 Thread Thomas Lakofski
On Tue, 24 Feb 1998, matthew tebbens wrote:

 Is there anything out there to stop people from port scanning my system ?
 I had someone last night scan my system from port 1 to 50,000 !
 
 I heard that there is a portscand out there somewhere, if so where ?

You can't stop them beforehand.  You can prevent access subsequently with
ipfwadm and a kernel with firewalling compiled into it (prevent access
from just that host, or that subnet).

If you're very paranoid you could set up your firewall to deny all
services by default and only let in connections on services which you feel
are essential.  If cracking is actively occurring, contact their provider
to have them thrown off and/or prosecuted, and probably switch to ssh
exclusively for remote login and switch off telnet, ftp, imap, rlogin,
rexec, etc. etc.

Probably, the worst that they're doing is growing your logfiles because
you've got iplogger installed.

Thomas.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


RFC1035 and MTA's

1998-02-23 Thread Thomas Lakofski
Hi,

I was wondering if anyone else was feeling constrained in their choice of
MTA's on debian because of complaints about RFC1035 and their FQDN.
Neither smail or exim will work on my system, because, apparently, my
domain name does not comply to RFC1035 (if this is so, neither does
3com.com or 1800flowers.com, etc. etc.).  This restriction seems to be
fairly bogus -- surely if it mattered, the InterNIC wouldn't have given me
my name.

Comments?

Thomas.



Support the Open Source software movement -- join the biggest revolution
in computing since the Difference Engine!  See http://www.opensource.org


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: biff in bo

1998-02-20 Thread Thomas Lakofski
On Thu, 19 Feb 1998, Tim Sailer wrote:

 Heh.. thanks for the laugh.. I needed it today. But, yes, bo's biff is busted.
 

Nice rhyme... but actually biff does work if you use procmail as your MDA
instead of deliver (at least with sendmail).  Send me mail if you want to
know the details (won't pollute the list with attachments...)

Thomas.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Setting X default color depth

1998-02-20 Thread Thomas Lakofski
Hi,

It looks like the X server I'm using (XSuSE_NVidia) doesn't understand the
`DefaultColorDepth 16' directive I've put in the Screens section of
XF86Config.  I'd prefer to start X with xdm rather than startx -- is there
anywhere I could specify the color depth elsewhere?  I looked for
somewhere I could append a ` -- -bpp 16' to in the xdm and other X
configuration files, but I'm not having much luck.

Any ideas?

TIA,

Thomas Lakofski.



Support the Open Source software movement -- join the biggest revolution
in computing since the Difference Engine!  See http://www.opensource.org


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


NVidia Riva 128

1998-02-18 Thread Thomas Lakofski
Hi,

Was wondering if anyone has had experience with this card on Debian
systems.  I've (kinda-sorta) got the SuSE X server running, but things
seem to be a bit weird and I was wondering if anyone on the list had
already got it working perfectly, before I try and do all the legwork
myself.

TIA,

Thomas Lakofski.



Support the Open Source software movement -- join the biggest revolution
in computing since the Difference Engine!  See http://www.opensource.org


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: barking dogs and i18n

1998-01-01 Thread Thomas Lakofski
On 1 Jan 1998 [EMAIL PROTECTED] wrote:

 The lady down the hall here at Pixar wrote biff, and she says that Biff
 the Dog, after which it was named, wasn't very good at spelling. Any
 inarticulate sound will do.

I don't suppose there's any surviving audio recording of Biff, is there? I
can't think of anything better to be my new mail notification sound... ;)

Happy New Year, Bruce, and everyone else listening...

Thomas.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


How to close a sendmail relay, and more

1998-01-01 Thread Thomas Lakofski
Hi,

I thought I'd post this to debian-user, since Anthony thought this was
worth sharing.  I've deleted the attachment with the HACKs in it -- you
can find this at http://www.informatik.uni-kiel.de/~ca/email/check.html

The message details how to implement relay controls and use of the MAPS
RBL on a bo system with sendmail. hamm sendmail already has the HACKs
installed, so you can skip that step (although I'm not sure how recent the
HACKs in bo sendmail are, so you may need to do it anyway. I used the ones
from Dec. 19) 

If people think it's worthwhile, I'll turn it into a HOWTO, or organize
something with Mr Assman, since his docs are a little cryptic.  It
probably needs to be consolidated into an Antispam-HOWTO with details of
how to stop relaying and prevent incoming UCE for all MTAs packaged for
Debian, as well as some pointers for use of procmail for spam control.
Closing relays is my #1 priority, however. Please contact me if you're
interested in putting something like this together.

Thomas.

-- Forwarded message --
From: Thomas Lakofski [EMAIL PROTECTED]
To: Anthony Landreneau [EMAIL PROTECTED]
Date: Mon, 29 Dec 1997 13:48:31 -0500 (EST)
Subject: Re: sendmail relay against spam on debian

Anthony-

Try the following procedure.  It may seem like a lot, but go step by step
and you should be OK.  Send me mail if you have a problem, or try 'talk
[EMAIL PROTECTED]' for a speedier method of communication.

No, I don't counsel updating to hamm for this one feature, especially if
it's a production machine (I was running hamm until, for reasons unknown,
the system froze, causing my watchdog daemon to reboot the machine,
resulting unfortunately in spectacular filesystem damage. I'm running bo
until at least debian 2.0.2 or so... ;)

OK -- I guess I'll do this step by step. I'll attach relevant files to
this message and refer to them.

1- Install the HACKS:
 (as root)
 zcat check.tar.gz | tar xvf - # in some temporary folder...
 cd hack
 cp * /usr/lib/sendmail.cf/hack/

if you now cd /usr/lib/sendmail.cf/hack/ , you should see:

[EMAIL PROTECTED]:/usr/lib/sendmail.cf/hack$ ls
check_mail.m4  check_rcpt.m4  check_relay.m4 use_names.m4
check_mail2.m4 check_rcpt2.m4 check_relay3.m4use_relayto.m4
check_mail3.m4 check_rcpt3.m4 spamdoms.m4
check_mail_exp.m4  check_rcpt4.m4 spammers.m4
check_rcpt-t.m4check_rcpt5.m4 use_ip.m4

(well, your prompt will be different)

2- Configure sendmail to use them...
 (as root)
 First, backup your existing /etc/mail/sendmail.mc with something like 'cp
 /etc/mail/sendmail.mc /etc/mail/sendmail.mc.backup', in case something
 goes wrong.

 Then, in a temporary location, ungzip the mailconfig.tar.gz file:
 zcat mailconfig.tar.gz | tar xvf -
 cd mailconfig
 ls -- should give you:

[EMAIL PROTECTED]:~/mailconfig# ls
LocalIP  LocalNames   RelayTo  junk.db  sendmail.mc

These files are all destined for /etc/mail/

Do not just copy them all over, however, since you'll overwrite your
current sendmail.mc . You will probably only want to include some of the
items in my sendmail.mc in your /etc/mail/sendmail.mc -- so open both of
them at once and compare them, while referring to the rest of this email.
I'll actually just include some of the file in this mail and describe what
they do, so you can decide whether you want to include them or not.

There are more things in my sendmail.mc happening than just use of the
HACKs -- I also define procmail as my default local mailer (so biff(1) 
instant mail notification works, as well as procmail recipies to sort mail
into folders), as well as using smrsh to restrict sendmail's access to
programs on my system I have explicitly given it access to (something you
should consider implementing for enhanced security -- if you do, put
symlinks to programs you want sendmail to have access to in
/usr/lib/sm.bin/ )

Here's the sendmail.mc file, with my annotations:

[copyright deleted]

divert(0)
VERSIONID(`@(#)sendmail.mc  8.7 (Linux) 3/5/96')
OSTYPE(debian)dnl
FEATURE(masquerade_envelope)dnl
FEATURE(use_cw_file)dnl
FEATURE(use_ct_file)dnl
FEATURE(redirect)dnl
FEATURE(nouucp)dnl
# up to this point your file should be exactly the same.

# Put this next line in if you want to use the sendmail restricted shell,
# as described above.
FEATURE(smrsh, `/usr/sbin/smrsh')dnl

# Put the next two lines in if you want to use procmail as your local MDA
FEATURE(local_procmail, /usr/bin/procmail)dnl
define(`LOCAL_MAILER_ARGS', `procmail -Y -d $u')dnl

# The next 2 lines should be the same in your setup.
MAILER(local)dnl
MAILER(smtp)dnl

# The next two lines will be different in your setup -- leave them as they
# are in your /etc/mail/sendmail.mc
Cw88.net
MASQUERADE_AS(88.net)dnl


# OK, here come the HACKs

## Custom configurations below (will be preserved)

# The next two lines cause mail with an unresolvable name destined to your
# domain to bounce with a transient failure (421

Re: Telneting

1998-01-01 Thread Thomas Lakofski
Probably a problem with the tcp wrappers and the dns entries for your
win95 box.  By default on a Debian system, the wrappers look up the
hostname of incoming connections from the IP address, the lookup the
hostname to check that it matches the original IP (not much of a security
measure really). If they don't match it drops the connection. Either have
your DNS admin fix it, or change the /etc/hosts.allow file to let your
win95 box in with less scrutiny.

Thomas. 

On Thu, 1 Jan 1998, Steve Koop wrote:

 From: Steve Koop [EMAIL PROTECTED]
 To: debian-user@lists.debian.org
 Date: Thu, 01 Jan 1998 14:10:30 -0800
 Subject: Telneting
 
 Hi there 
 
 
 I have been trying to telnet from win 95 system to a linux system, but no 
 luck.
 
 
 In win 95 I've started the telnet program and clicked connect and then typed 
 in the IP address for the linux system, but I receive a error msg saying 
 Connection to host lost.
 
 
 Any suggestions on this
 
 
 
 
 Thanks
 
 
 Steve Koop: mailto:[EMAIL PROTECTED]
 
 
 
 --
 TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
 [EMAIL PROTECTED] . 
 Trouble?  e-mail to [EMAIL PROTECTED] .
 


--(fortune.sig)--
Remember, UNIX spelled backwards is XINU.
-- Mt.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: delurk

1998-01-01 Thread Thomas Lakofski
No idea about the filter (sorry), but the kernel is easy. Grab
kernel-source and kernel-package packages, cd /usr/src/linux, 'make
menuconfig', make your choices (best to make everything you can but root
filesystem driver (ext2fs) and storage subsystem driver (scsi or ide) 
in to modules. Then run 'make-kpkg --revision whatever2.0.xx kernel_image'
wait while and then do 'dpkg -i name of the package in /usr/src/.deb'.
Reboot and you're done. For more detail, RTNM. (nice manual)

On Thu, 1 Jan 1998, dave mallery wrote:

 From: dave mallery [EMAIL PROTECTED]
 To: debian-user@lists.debian.org
 Date: Thu, 01 Jan 1998 15:05:18 -0700
 Subject: delurk
 
 good afternoon! 
 
 
 i have been lurking here for about a month and find this an amazing list.
 
 
 i brought up bo on a P83/40mb gateway box with vlb.  i am not in a hurry
 
 and want to really learn un*x this time.  at this point, the machine runs
 
 the base system and can print.  it has a bus mouse, so i need to do a 
 
 kernal.  i guess that is next (if i can find the kernal source on the 
 
 cd...)  then the plan is to connect with ppp to my isp, and finally to bring 
 up 
 
 x.
 
 
 one simple question: is there any filter with some laserjet4 support
 
 as far as point size and fonts in pcl??  am using magicfilter as was
 
 suggested a few days ago.
 
 
 thanks.  any comments or suggestions on what to do next are most welcome.
 
 
 happy 98
 
 
 dave
 
 
 
 
 paraindentparamout/paramDave Mallery... [EMAIL PROTECTED]
 
   amateur radio K5EN
 
   PO Box 520; Ramah, NM  87321
 
   505-783-4784/paraindent
 
 
 --
 TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
 [EMAIL PROTECTED] . 
 Trouble?  e-mail to [EMAIL PROTECTED] .
 


--(fortune.sig)--
Remember, UNIX spelled backwards is XINU.
-- Mt.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: samba [off-topic]

1997-12-14 Thread Thomas Lakofski
I think you're confusing the network client with the network protocol.
Win95 will quite happily see lanman servers running on TCP/IP, IPX/SPX or
NetBEUI, so it'll see samba just fine.  If your machine is having a
problem with this, try adding TCP/IP to its network configuration, and
making sure the ms network client is bound to the protocol.

TL

On Sun, 14 Dec 1997, Aaron Walker wrote:

 If it uses TCP/IP, how does Win95 see it in Network Neighborhood?
 
 Fenrick wrote:
 
   Lets say I have a Win95 box and a Linux box.  Does Win95 view the samba
   connection as TCP/IP or NetBEUI?
 
  It uses TCP/IP.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: clueless people on debian-user

1997-12-13 Thread Thomas Lakofski
On 12 Dec 1997 [EMAIL PROTECTED] wrote:
 I think having our lists on news benefits us, and we can tolerate the spam
 and the mis-directed mail. What do you think?

Ummm, I guess we could:

- shut down the news gateway, and restrict posts to debian-user to those
who are subscribed to it, and make subscription a little tricky
(confirmation via a reply that requires the user to jump through a small
hoop -- in effect an intelligence test, although one easy enough for small
children, pets, etc. to complete, but not the majority of AOL users... ;)

or, we could:

- live with it, and/or filter incoming messages appropriately with
procmail (filtering messages which match the expression (|) is
interestingly effective, I find).

I favor the second option, I think.  For those occasional stupid/misplaced
messages, the 'D' key works quite nicely.

TL


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .