Re: [gentoo-user] Ridiculous amount of borkage in portage

2007-04-01 Thread Mick
On Sunday 01 April 2007 01:04, Jeff Rollin wrote:
 In the last episode, Jeff Rollin wrote:
 JR In the last episode, Hemmann, Volker Armin wrote:
 JR HV On Sonntag, 1. April 2007, Jeff Rollin wrote:
 JR HV  Am I the only one seeing a ridiculous amount of borkage in Gentoo
  this JR HV  week?
 JR HV yes, you are.
 JR HV
 JR HV Have you filed bugs?
 JR
 JR No,

 Now filed.

I've rebuilt a machine this week by updating/upgrading nearly everything (the 
box had not been touched for a nearly year).  I was fearing the amount of 
breakages that would occur in the process and still cannot believe that I had 
zero packages failing to emerge.  Two other machines that I update regularly 
had no failures either.  If my experience is anything to go by, then there 
may be something wrong with your machine/build.
-- 
Regards,
Mick


pgpkZEORSEvSt.pgp
Description: PGP signature


Re: [gentoo-user] Gentoo Installation on Dell Inspiron Laptop

2007-04-01 Thread Iain Buchanan
On Sat, 2007-03-31 at 08:49 -0400, Colleen Beamer wrote:
 Hi all,
 
 I'm having a problem.
[snip]
  and then, the laptop shuts off on me.

It does sound like an overheating thing, as already mentioned,
especially since you had overheating problems before.

Can you confirm that _all_ fans are working?  I thought I only had 2
fans, but there are actually 3, so watch out for hidden ones!  Also, you
could use the dell kernel module (i8k) to force your fans to full speed
and see if that helps.  Finally on the heating side, try taking it apart
(if you're happy with that - you break it you keep the pieces :) and
cleaning out all the dust / dirt from the fins.

Another possibility is your memory - maybe its going flaky?  This is a
common compile problem that gives varied results (lockups, panics,
halts, etc).  Try different ram if you have it, or only half your ram at
a time if you have 2 sticks.  You could also try the memtest bootable
cd.

HTH!
-- 
Iain Buchanan iaindb at netspace dot net dot au

One small step for man, one giant stumble for mankind.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] depscan.sh?

2007-04-01 Thread Jeff Rollin
Hi Dale

In the last episode, Dale wrote:
Da Jeff Rollin wrote:
Da  Hi all
Da 
Da  Somehow when updating the system the file /sbin/depscan.sh has gone
 missing - Da  please advise as to how to get it back!

Da
Da It is part of baselayout.  So emerge -1v baselayout should work fine.
Da
Da Hope that helps.
Da
Da Dale
Da
Da :-)  :-)  :-)
Da

Thanks!

Jeff
-- 
For a successful technology, reality must take precedence 
over public relations, for nature cannot be fooled.

Richard Phillips Feynman, American physicist, 11/5/18-15/2/88
--
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] depscan.sh?

2007-04-01 Thread Jeff Rollin
Hi again

In the last episode, Jeff Rollin wrote:
JR Hi Dale
JR
JR In the last episode, Dale wrote:
JR Da Jeff Rollin wrote:
JR Da  Hi all
JR Da 
JR Da  Somehow when updating the system the file /sbin/depscan.sh has gone
JR  missing - Da  please advise as to how to get it back!
JR
JR Da
JR Da It is part of baselayout.  So emerge -1v baselayout should work fine.
JR Da
JR Da Hope that helps.
JR Da
JR Da Dale
JR Da

I've filed a bug report, as it's not user error but a bug in baselayout.

Thanks

Jeff
-- 
For a successful technology, reality must take precedence 
over public relations, for nature cannot be fooled.

Richard Phillips Feynman, American physicist, 11/5/18-15/2/88
--
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Ridiculous amount of borkage in portage

2007-04-01 Thread Jeff Rollin
Hi Mick

In the last episode, Mick wrote:
Mi On Sunday 01 April 2007 01:04, Jeff Rollin wrote:
Mi  In the last episode, Jeff Rollin wrote:
Mi  JR In the last episode, Hemmann, Volker Armin wrote:
Mi  JR HV On Sonntag, 1. April 2007, Jeff Rollin wrote:
Mi  JR HV  Am I the only one seeing a ridiculous amount of borkage in
 Gentoo Mi   this JR HV  week?

Mi I've rebuilt a machine this week by updating/upgrading nearly everything
 (the Mi box had not been touched for a nearly year).  I was fearing the
 amount of Mi breakages that would occur in the process and still cannot
 believe that I had Mi zero packages failing to emerge.  Two other machines
 that I update regularly Mi had no failures either.  If my experience is
 anything to go by, then there Mi may be something wrong with your
 machine/build.

Oh joy!

More likely to be the machine because the build has been working fine 
since...forgotten how long. (I do usually still get broken ebuilds but not 
many, and if you're anything to go by a certain amount are expected).

I did recently have filesystem corruption on the /var partition but I don't 
see how that could be the cause...since I have emerge --sync'ed about three 
times isn't it unlikely that a disk error would cause the same error in the 
same package in three different --syncs?

Anyway, thanks for the message and congratulations!

Jeff
-- 
For a successful technology, reality must take precedence 
over public relations, for nature cannot be fooled.

Richard Phillips Feynman, American physicist, 11/5/18-15/2/88
--
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Any consequences to package.mask'ing newer kernels?

2007-04-01 Thread b.n.

Hemmann, Volker Armin ha scritto:

In almost every kernel release a security problem is found, that is fixed in a 
stable release.


Stable release? AFAIK, *all* 2.6.x releases are stable releases. The 
days of double trees (2.4.x and 2.5.x) are gone.
Probably I don't get what you mean. I use x86 kernels, not ~x86: that's 
what you mean as stable? I don't understand.




and between that blue moons, your box is wide open to attacks.


Well, if in *every* kernel there is *always* a security problem, my box 
is always open to attacks... :)


(I understand your point, however. I didn't realize the linux kernel was 
so full of security holes. I thought it was one of the most secure 
components. Why aren't there GLSAs for the kernel?)


Which risk? Which mess? There is not a risk, if you use oldconfig. 


oldconfig doesn't always work well between major releases (2.6.x vs 
2.6.x+1).


But there 
is a big risk in security holes.


True, but can you explain me the points above?

m.
--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Ridiculous amount of borkage in portage

2007-04-01 Thread b.n.

Jeff Rollin ha scritto:

Hi

Am I the only one seeing a ridiculous amount of borkage in Gentoo this week? 
So far I have had gcc, perl, perl-dependent packages, autogen and some other 
packages fail on me this week.


What kind of failures?
Is it possible is your hardware at fault?

m.
--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Any consequences to package.mask'ing newer kernels?

2007-04-01 Thread Hemmann, Volker Armin
On Sonntag, 1. April 2007, b.n. wrote:
 Hemmann, Volker Armin ha scritto:
  In almost every kernel release a security problem is found, that is fixed
  in a stable release.

 Stable release? AFAIK, *all* 2.6.x releases are stable releases.

No, they aren't. There are the 'normal' releases (for example 2.6.20) and 
the 'stable' releases which fix important bugs and security holes (like, for 
example 2.6.20.2).

 The 
 days of double trees (2.4.x and 2.5.x) are gone.

Today we have at least 4 trees.
Linus.
Morton.
The 'stable releases' (2.6.XY.Z)
Bunk's 2.6.16.XY


  Which risk? Which mess? There is not a risk, if you use oldconfig.

 oldconfig doesn't always work well between major releases (2.6.x vs
 2.6.x+1).


I works like a charm for me
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] netfilter tarpit target

2007-04-01 Thread Daniel Iliev
Hi, guys

Recently I was looking through my logs when I got  pissed off (again) by
the big number of lines showing something like 'sshd: auth. error:
unknown user XXX from some IP address'. I wrote a script which
automatically sets all connections from those IP addresses to be
dropped. Next I decided to change -j DROP with -j TARPIT and I
realized that gentoo-sources doesn't provide the netfilter target TARPIT.

My question: what is the best way get this iptables module working w/o
diverting too much from the official Gentoo installation. I mean the
normal way is to use patch-o-matic to patch iptables source and vanilla
kernel source, then build and install. I have the feeling that it is not
exactly the right thing to with Gentoo.

Any advices would be much appreciated.


-- 
Best regards,
Daniel


-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Ridiculous amount of borkage in portage

2007-04-01 Thread Jeff Rollin
Hi again

In the last episode, Jeff Rollin wrote:
JR Hi Mick
JR
JR In the last episode, Mick wrote:
JR Mi  If my experience is anything to go by, then there 
Mi may be something wrong with your machine/build.
JR
JR Oh joy!
JR
JR More likely to be the machine because the build has been working fine
JR since...forgotten how long. (I do usually still get broken ebuilds but
 not JR many, and if you're anything to go by a certain amount are
 expected). JR
JR I did recently have filesystem corruption on the /var partition but I
 don't JR see how that could be the cause...since I have emerge --sync'ed
 about three JR times isn't it unlikely that a disk error would cause the
 same error in the JR same package in three different --syncs?
JR
JR Anyway, thanks for the message and congratulations!
JR
JR Jeff

I have since re-installed the working version of gcc from scratch (re-download 
source, recompile, reinstall, everything) and it works... so the problem is 
probably the ebuilds. 

Jeff
-- 
For a successful technology, reality must take precedence 
over public relations, for nature cannot be fooled.

Richard Phillips Feynman, American physicist, 11/5/18-15/2/88
--
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] Accessibility, or, Purple writing on black is a REALLY BAD idea.

2007-04-01 Thread Jeff Rollin
Hi list

I like the new look of the website, but how on Earth does anyone make any 
sense of the links? Purple on black is a really bad idea, and that's from 
someone who doesn't have any accessibility issues with websites.

Should this be filed as a bug?

Jeff
-- 
For a successful technology, reality must take precedence 
over public relations, for nature cannot be fooled.

Richard Phillips Feynman, American physicist, 11/5/18-15/2/88
--


pgpb360qCb8hj.pgp
Description: PGP signature


[gentoo-user] Re: Accessibility, or, Purple writing on black is a REALLY BAD idea.

2007-04-01 Thread Jeff Rollin
In the last episode, Jeff Rollin wrote:
JR Hi list
JR
JR I like the new look of the website, but how on Earth does anyone make any
JR sense of the links? Purple on black is a really bad idea, and that's from
JR someone who doesn't have any accessibility issues with websites.
JR
JR Should this be filed as a bug?
JR
JR Jeff

Actually it's blue, isn't it (the purple is from the colour of my visited 
links). Still, it's not easy to read.

-- 
For a successful technology, reality must take precedence 
over public relations, for nature cannot be fooled.

Richard Phillips Feynman, American physicist, 11/5/18-15/2/88
--


pgpxc3tockhmy.pgp
Description: PGP signature


Re: [gentoo-user] netfilter tarpit target

2007-04-01 Thread Dave Jones
Hi Daniel

Daniel Iliev wrote on 01/04/07 15:03:
 Recently I was looking through my logs when I got  pissed off (again) by
 the big number of lines showing something like 'sshd: auth. error:
 unknown user XXX from some IP address'. I wrote a script which
 automatically sets all connections from those IP addresses to be
 dropped. Next I decided to change -j DROP with -j TARPIT and I
 realized that gentoo-sources doesn't provide the netfilter target TARPIT.

 My question: what is the best way get this iptables module working w/o
 diverting too much from the official Gentoo installation. I mean the
 normal way is to use patch-o-matic to patch iptables source and vanilla
 kernel source, then build and install. I have the feeling that it is not
 exactly the right thing to with Gentoo.

cd /usr/src

svn co https://svn.netfilter.org/netfilter/trunk/patch-o-matic-ng
svn co https://svn.netfilter.org/netfilter/trunk/iptables

cd patch-o-matic-ng
./runme extra

cd /usr/src/linux
make menuconfig
make  make modules_install  make install

make sure you have USE extensions in your make.conf

emerge iptables

Cheers, Dave
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Accessibility, or, Purple writing on black is a REALLY BAD idea.

2007-04-01 Thread Andrey Gerasimenko
On Sun, 01 Apr 2007 18:07:15 +0400, Jeff Rollin [EMAIL PROTECTED]  
wrote:



Hi list

I like the new look of the website, but how on Earth does anyone make any
sense of the links? Purple on black is a really bad idea, and that's from
someone who doesn't have any accessibility issues with websites.

Should this be filed as a bug?

Jeff


Do you mean www.gentoo.org? If yes:

IMHO this should not be filed as a bug. The colors all over the page are  
consistent and the links, which are not exactly purple, are visible. Since  
they turn to light green when the mouse points at them it is impossible to  
click a wrong link.


I guess those who are new to www.gentoo.org will move the mouse over all  
links; the rest just click automatically.


--
Andrei Gerasimenko
--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Accessibility, or, Purple writing on black is a REALLY BAD idea.

2007-04-01 Thread Jeff Rollin
In the last episode, Andrey Gerasimenko wrote:

AG
AG Do you mean www.gentoo.org? If yes:
AG
AG IMHO this should not be filed as a bug. The colors all over the page are
AG consistent and the links, which are not exactly purple, are visible.

The colors are consistent, but the links are only visible against the light 
background of the side, not against the top.
 
 Since AG they turn to light green when the mouse points at them it is
 impossible to AG click a wrong link.

That is obviously browser-dependent, since they don't change when I point to 
them on mine. Besides, that is just bad design.

AG
AG I guess those who are new to www.gentoo.org will move the mouse over all
AG links; the rest just click automatically.

I wouldn't bet on it; I'm not exactly a new visitor but I can never remember 
the order of the links. Especially since the website design has just been 
changed.

Jeff

-- 
For a successful technology, reality must take precedence 
over public relations, for nature cannot be fooled.

Richard Phillips Feynman, American physicist, 11/5/18-15/2/88
--


pgptYyStxhXq0.pgp
Description: PGP signature


Re: [gentoo-user] Accessibility, or, Purple writing on black is a REALLY BAD idea.

2007-04-01 Thread Rick van Hattem
On Sunday 01 April 2007, Jeff Rollin wrote:
 Hi list

 I like the new look of the website, but how on Earth does anyone make any
 sense of the links? Purple on black is a really bad idea, and that's from
 someone who doesn't have any accessibility issues with websites.

 Should this be filed as a bug?

 Jeff

Personally I have no problems reading it but I can imagine people would have 
problems with it. It would be a good thing if the site got a little more 
contrast.

-- 
Rick van Hattem Rick.van.Hattem(at)Fawo.nl


pgpvSCvhC6rHM.pgp
Description: PGP signature


Re: [gentoo-user] Accessibility, or, Purple writing on black is a REALLY BAD idea.

2007-04-01 Thread Jeff Rollin
Hello Herman

In the last episode, Hemmann, Volker Armin wrote:
HV On Sonntag, 1. April 2007, Jeff Rollin wrote:
HV  Hi list
HV 
HV  I like the new look of the website, but how on Earth does anyone make
 any HV  sense of the links? Purple on black is a really bad idea, and
 that's from HV  someone who doesn't have any accessibility issues with
 websites. HV 
HV  Should this be filed as a bug?
HV 
HV  Jeff
HV
HV 'new look'? Where? What changed?

Is it me or has there been a little change to the look of the site? Maybe it 
is just me...

HV
HV  IMHO the links on the top of the page are highly readable. The ones on
 the HV left (light blue on even lighter blue is not sooo smart) are not
 half as HV readable.

OK, I would have said the reverse. Hmm. I can see this thread is headed for 
consensus!

Jeff

-- 
For a successful technology, reality must take precedence 
over public relations, for nature cannot be fooled.

Richard Phillips Feynman, American physicist, 11/5/18-15/2/88
--


pgpSo7HA62e3Z.pgp
Description: PGP signature


Re: [gentoo-user] Accessibility, or, Purple writing on black is a REALLY BAD idea.

2007-04-01 Thread Dale
Jeff Rollin wrote:
 In the last episode, Andrey Gerasimenko wrote:

 AG
 AG Do you mean www.gentoo.org? If yes:
 AG
 AG IMHO this should not be filed as a bug. The colors all over the page are
 AG consistent and the links, which are not exactly purple, are visible.

 The colors are consistent, but the links are only visible against the light 
 background of the side, not against the top.
  
  Since AG they turn to light green when the mouse points at them it is
  impossible to AG click a wrong link.

 That is obviously browser-dependent, since they don't change when I point to 
 them on mine. Besides, that is just bad design.

 AG
 AG I guess those who are new to www.gentoo.org will move the mouse over all
 AG links; the rest just click automatically.

 I wouldn't bet on it; I'm not exactly a new visitor but I can never remember 
 the order of the links. Especially since the website design has just been 
 changed.

 Jeff

   

Funny, I'm half blind and I can see them fine, without my glasses even. 
They even sort of stick out to me.  Then again, I'm weird anyway.  LOL

Dale

:-)  :-)  :-)

-- 
www.myspace.com/-remove-me-dalek1967

Copy n paste then remove the -remove-me- part.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Accessibility, or, Purple writing on black is a REALLY BAD idea.

2007-04-01 Thread Thomas Wouters
On Sunday 01 April 2007, Jeff Rollin wrote:
 Hi list

 I like the new look of the website, but how on Earth does anyone make any
 sense of the links? Purple on black is a really bad idea, and that's from
 someone who doesn't have any accessibility issues with websites.

 Should this be filed as a bug?

 Jeff

This has nothing to do with the accessibility of the website, it inflects the 
usability, which is something completely different.
What isn't accessible is the layout which is based on tables, changing this to 
div's will increase the accessibility and the opportunity to easily create 
new designs.
The menus are awfull, I mean, come on, a tags separated by pipes? Imagine 
what text to speech software would make from that... What's wrong with using 
ul which is basically made for this?

Anyway, if you want to talk about accessibility, the first thing you should do 
is ask yourself the question if you know what accessibility is. If the answer 
to that question is no, then stick with the term usability.

some guidelines to get the website more accessible: http://www.w3.org/WAI/

Greetings,

Thomas
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Accessibility, or, Purple writing on black is a REALLY BAD idea.

2007-04-01 Thread Jeff Rollin
Hi Thomas

In the last episode, Thomas Wouters wrote:
TW On Sunday 01 April 2007, Jeff Rollin wrote:
TW  Hi list
TW 
TW  I like the new look of the website, but how on Earth does anyone make
 any TW  sense of the links? Purple on black is a really bad idea, and
 that's from TW  someone who doesn't have any accessibility issues with
 websites. TW 
TW  Should this be filed as a bug?
TW 
TW  Jeff
TW
TW This has nothing to do with the accessibility of the website, it inflects
 the TW usability, which is something completely different.
TW What isn't accessible is the layout which is based on tables, changing
 this to TW div's will increase the accessibility and the opportunity to
 easily create TW new designs.
TW The menus are awfull, I mean, come on, a tags separated by pipes?
 Imagine TW what text to speech software would make from that... What's
 wrong with using TW ul which is basically made for this?
TW
TW Anyway, if you want to talk about accessibility, the first thing you
 should do TW is ask yourself the question if you know what accessibility
 is. If the answer TW to that question is no, then stick with the term
 usability.

In my opinion this is hair-splitting. To me accessibility just means 
usability for disabled users. Besides, as I already noted, the fact that 
it's bad from a design/usability standpoint is only going to make it worse 
from an accessibility standpoint.

Jeff
-- 
For a successful technology, reality must take precedence 
over public relations, for nature cannot be fooled.

Richard Phillips Feynman, American physicist, 11/5/18-15/2/88
--


pgpMrAN44HuTU.pgp
Description: PGP signature


Re: [gentoo-user] netfilter tarpit target

2007-04-01 Thread Daniel Iliev
Dave Jones wrote:
 Hi Daniel

   
 My question: what is the best way get this iptables module working w/o
 diverting too much from the official Gentoo installation. I mean the
 normal way is to use patch-o-matic to patch iptables source and vanilla
 kernel source, then build and install. I have the feeling that it is not
 exactly the right thing to with Gentoo.
 

 cd /usr/src

 svn co https://svn.netfilter.org/netfilter/trunk/patch-o-matic-ng
 svn co https://svn.netfilter.org/netfilter/trunk/iptables

 cd patch-o-matic-ng
 ./runme extra

 cd /usr/src/linux
 make menuconfig
 make  make modules_install  make install

 make sure you have USE extensions in your make.conf

 emerge iptables

 Cheers, Dave
   


Dave, thanks for your reply.

This patch appears to be incompatible with gentoo-sources or I'm doing
something wrong. After patching the module TARPIT appears in the
kernel configuration and I mark it to get built as a module [M]. Then:

==

make all modules_install install
scripts/kconfig/conf -s arch/i386/Kconfig
  CHK include/linux/version.h
  CHK include/linux/utsrelease.h
  CHK include/linux/compile.h
  GZIPkernel/config_data.gz
  IKCFG   kernel/config_data.h
  CC  kernel/configs.o
  LD  kernel/built-in.o
  CC [M]  net/ipv4/netfilter/ipt_TARPIT.o
net/ipv4/netfilter/ipt_TARPIT.c: In function ‘ip_direct_send’:
net/ipv4/netfilter/ipt_TARPIT.c:65: warning: implicit declaration of
function ‘neigh_hh_output’
---snip
Kernel: arch/i386/boot/bzImage is ready  (#2)
  Building modules, stage 2.
  MODPOST 159 modules
WARNING: neigh_hh_output [net/ipv4/netfilter/ipt_TARPIT.ko] undefined!
make[1]: *** [__modpost] Error 1
make: *** [modules] Error 2

==



So, I'm still looking for advices.


-- 
Best regards,
Daniel


-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] cyrus-imapd not working after recompile against db4.3

2007-04-01 Thread Sven Köhler
Hi,

any ideas, why my cyrus-imapd isn't working anymore?

In /var/log/imapd.log is says:
Apr  1 19:21:27 gwinet master[25000]: process started
Apr  1 19:21:27 gwinet master[25004]: about to exec
/usr/lib/cyrus/ctl_cyrusdb
Apr  1 19:21:27 gwinet ctl_cyrusdb[25004]: DBERROR àÓ^F^H: db4
Apr  1 19:21:27 gwinet ctl_cyrusdb[25004]: recovering cyrus databases
Apr  1 19:21:27 gwinet ctl_cyrusdb[25004]: skiplist: recovered
/var/imap/mailboxes.db (72 records, 12920 bytes) in 0 seconds
Apr  1 19:21:27 gwinet ctl_cyrusdb[25004]: skiplist: recovered
/var/imap/annotations.db (0 records, 144 bytes) in 0 seconds
Apr  1 19:21:27 gwinet ctl_cyrusdb[25004]: DBERROR àÓ^F^H: db4
Apr  1 19:21:27 gwinet ctl_cyrusdb[25004]: DBERROR àÓ^F^H: db4
Apr  1 19:21:27 gwinet ctl_cyrusdb[25004]: DBERROR: critical database
situation
Apr  1 19:21:27 gwinet master[25000]: process 25004 exited, status 75
Apr  1 19:21:27 gwinet master[25009]: about to exec /usr/lib/cyrus/idled
Apr  1 19:21:27 gwinet idled[25009]: DBERROR pÕ^F^H: db4
Apr  1 19:21:27 gwinet idled[25009]: DBERROR: critical database situation
Apr  1 19:21:27 gwinet master[25000]: process 25009 exited, status 75
Apr  1 19:21:27 gwinet master[25000]: ready for work
Apr  1 19:21:27 gwinet master[25022]: about to exec /usr/lib/cyrus/tls_prune
Apr  1 19:21:27 gwinet tls_prune[25022]: DBERROR : db4
Apr  1 19:21:27 gwinet tls_prune[25022]: DBERROR: critical database
situation
Apr  1 19:21:27 gwinet master[25023]: about to exec
/usr/lib/cyrus/ctl_deliver
Apr  1 19:21:27 gwinet cyr_expire[25023]: DBERROR àÚ^F^H: db4
Apr  1 19:21:27 gwinet cyr_expire[25023]: DBERROR: critical database
situation
Apr  1 19:21:27 gwinet master[25024]: about to exec
/usr/lib/cyrus/ctl_cyrusdb
Apr  1 19:21:27 gwinet master[25000]: process 25022 exited, status 75
Apr  1 19:21:27 gwinet master[25000]: process 25023 exited, status 75
Apr  1 19:21:27 gwinet ctl_cyrusdb[25024]: DBERROR àÓ^F^H: db4
Apr  1 19:21:27 gwinet ctl_cyrusdb[25024]: DBERROR: critical database
situation
Apr  1 19:21:27 gwinet master[25000]: process 25024 exited, status 75
Apr  1 19:29:22 gwinet master[25000]: exiting on SIGTERM/SIGINT




So as you can see, one database must be broken or in wrong format.
But i have NO idea, which one it is.

Before the upgrade to sys-libs/db-4.3* and a recompile of cyrus-imapd,
the same version of cyrus imapd worked fine with db4.2.


Any ideas?


Thanks,
  Sven



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] netfilter tarpit target

2007-04-01 Thread darren kirby
quoth the Daniel Iliev:
 Next I decided to change -j DROP with -j TARPIT and I
 realized that gentoo-sources doesn't provide the netfilter
 target TARPIT. -  
 Best regards,
 Daniel

I realize there is a sense of satisfaction from using the TARPIT target that 
is appealing, however you must consider:

1. These ssh bruteforce attacks are almost certainly coming from a zombie 
botnet, and thus there is no human to realize their connection has 
been 'stuck'. The zombie will happily freeze for 30 seconds then try again.

2. Due to the nature of the persistant connection using TARPIT, you are 
opening up your machine to a DOS attack, if the Bad Guy can deduce you are 
using it.

2 cents   

-d
-- 
darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
...the number of UNIX installations has grown to 10, with more expected...
- Dennis Ritchie and Ken Thompson, June 1972
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Accessibility, or, Purple writing on black is a REALLY BAD idea.

2007-04-01 Thread Andrey Gerasimenko
On Sun, 01 Apr 2007 19:25:24 +0400, Jeff Rollin [EMAIL PROTECTED]  
wrote:



In the last episode, Andrey Gerasimenko wrote:

AG
AG Do you mean www.gentoo.org? If yes:
AG
AG IMHO this should not be filed as a bug. The colors all over the page  
are

AG consistent and the links, which are not exactly purple, are visible.

The colors are consistent, but the links are only visible against the  
light

background of the side, not against the top.
Since AG they turn to light green when the mouse points at them it is
 impossible to AG click a wrong link.

That is obviously browser-dependent, since they don't change when I  
point to

them on mine. Besides, that is just bad design.



I agree that without the mouse highlight the menu may look badly with some  
monitors (that is, strangely configured CRT or not very good LCD; of  
course, I understand that there may be very good reasons to configure the  
monitor that way, so that adjusting the monitor is not a solution).


I do not insist on the following since it may cause a flame war, but I  
guess that if a browser does not respect the a.menulink:hover construct  
(which is responsible for the green highlight), then it is a buggy browser  
and a bug report should go to its developers.


Personally, I would ask the web designer to specify image sizes in the img  
tags, remove links that point to the very page being displayed, find  
another way to indicate that a link has been visited than making it bold  
(bold means something more important than plain, not less important since  
already visited), make the sidebar and top menus consistent, make the path  
to the page easier to see, and so on. However, I guess that it is  
impractical to fix all that right now due to the law of the diminishing  
returns.


So, I agree that the menu may cause inconveniences under some special  
conditions, but I vote against filing a bug. On my monitor the colors are  
just right. I cannot imagine any quick fix that will make the menu  
contrast higher without damage to the overall page consistency. I agree  
that a better design is possible, but what we have is good enough.


--
Andrei Gerasimenko
--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Gentoo Installation on Dell Inspiron Laptop

2007-04-01 Thread Colleen Beamer
Iain Buchanan wrote:
 On Sat, 2007-03-31 at 08:49 -0400, Colleen Beamer wrote:
 Hi all,

 I'm having a problem.
 [snip]
  and then, the laptop shuts off on me.
 
 It does sound like an overheating thing, as already mentioned,
 especially since you had overheating problems before.

I sincerely don't think it's an overheating problem for this reason:  I
reposted this message with an addendum.  The addendum was that I had
tried the installation with the Live CD using a gui interface.  I had
started this late at night and went to bed.The kernel compile again
bombed, but the laptop did not turn off - it was still on when I got up
the next morning.
 
 Can you confirm that _all_ fans are working?  I thought I only had 2
 fans, but there are actually 3, so watch out for hidden ones!  Also, you
 could use the dell kernel module (i8k) to force your fans to full speed
 and see if that helps.

I'll try this suggestion.  I am in doubt that it would be the fan
because the fan was just replaced under warranty by Dell

 Another possibility is your memory - maybe its going flaky?  This is a
 common compile problem that gives varied results (lockups, panics,
 halts, etc).  Try different ram if you have it, or only half your ram at
 a time if you have 2 sticks.  You could also try the memtest bootable
 cd.

Will consider memtest as an option, but again, the memory is reasonably
new - it was upgraded recently to have more memory on the laptop.

Thanks for the response.

Regards,

Colleen.
-- 

Registered Linux User #411143 with the Linux Counter, http://counter.li.org
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Maya

2007-04-01 Thread Samir Faci

Well, when I said commercial version, I meant the off the shelf product,
which you do have to buy.

You can probably try their demo version and see how you like it.  I haven't
played with their free version (assuming they have a linux version of it).

--
Samir

On 3/27/07, Mick [EMAIL PROTECTED] wrote:


On Tuesday 27 March 2007 04:13, Samir Faci wrote:
 As far as I know the learning edition isn't available for linux, I might
be
 wrong.

 They do have their commercial version which works great on
linux.  Unlike
 other company that came out with linux versions which turned out to be
 re-wrap of their 1.0 release of their software from 10 years ago written
 for linux, the Maya software works really well, and it seems very
feature
 rich. (Not that I can make heads or tails of half the features it has).

Thanks Samir,

Assuming you don't have to buy it (or do you?) do you need to register it
-
how?
--
Regards,
Mick




[gentoo-user] Flourish Conference Reminder

2007-04-01 Thread Samir Faci

I just wanted to remind everyone that the Chicago Flourish Conference is
coming up this weekend.  Friday, April 6th and Saturday April 7th.
If you are planning on attending be sure to mark you calendars and be sure
to register on the website.  The main website should have information on how
to get to the conference, if you have any questions or concerns please feel
free to contact me.  Registration opens at 8 am, the presentations will be
begin at 10 am on both Friday and Saturday.

Don't forget to check out the hack-a-thon and come join us after the even at
IBM's HQ for the post-flourish social.

--
Samir Faci
UIC LUG President
 Blog extract from main website --
Question to the world of Free and Open Source Software: What are my
prospects when I graduate?
As many of you know by now, for the last few months here at UIC*, we - the
ACM* and g/LUG*,- have been eagerly working to put together a conference to
discus FLOSS (Free/Libre Open Source Software) as an engine of innovation.
The Flourish Conf. will take place next 6-7 of April at the University of
Illinois at Chicago.
I am a self confessed gnu/Linux user, I love gnu/Linux, free software and
even open source - sorry RMS!. I am also a CS student at the University of
Illinois at Chicago, and curiously enough, even though most of our curricula
is done in Unix - we even have 2 RedHat labs here, - it appears as if none
of the big players within FLOSS ever come to hire at UIC. Why is that
Microsoft comes here semester after semester snatching some of the most
brilliant students on campus? Yet, I have yet to see FLOSS big players to
come out here looking for people.

These has made me wonder: Is there a professional future in FLOSS? 
... and I know I'm not alone in my wonders.

To answer these questions, we have invited quite a few of really smart
people from different organizations: Google, IBM, Red Hat, and the FSF, and
we are going to have a a chance to hear about the opportunities that FLOSS
has to offer for our future.
We will have two panels, a talk on GPL v3, a talk on Google's contribution
and use of FLOSS, among many other really interesting talks, etc. We have
also put together a series of technical talks on FLOSS related technologies
and topics, and a couple other really interesting activities to give
attendees a chance to meet and to be met: Friday's Social mixer, and
Saturday's Hack-a-Thon.
This is not only going to be a great time for students around Chicago, this
is going to be a great chance for community members, and companies to come
together and explore how FLOSS is shaping up our future!

Come and join us!

Roberto C. Serrano
g/LUG @ UIC vice-president


Re: [gentoo-user] netfilter tarpit target

2007-04-01 Thread Mick
On Sunday 01 April 2007 14:03, Daniel Iliev wrote:
 Hi, guys

 Recently I was looking through my logs when I got  pissed off (again) by
 the big number of lines showing something like 'sshd: auth. error:
 unknown user XXX from some IP address'. I wrote a script which
 automatically sets all connections from those IP addresses to be
 dropped. Next I decided to change -j DROP with -j TARPIT and I
 realized that gentoo-sources doesn't provide the netfilter target TARPIT.

 My question: what is the best way get this iptables module working w/o
 diverting too much from the official Gentoo installation. I mean the
 normal way is to use patch-o-matic to patch iptables source and vanilla
 kernel source, then build and install. I have the feeling that it is not
 exactly the right thing to with Gentoo.

 Any advices would be much appreciated.

Given that others have already replied how patch the kernel, here's a somewhat 
indirect answer which may resolve the route cause:  Are you using passwd 
authentication?  I wonder if the logs would still be filling up by such 
botnets if you had allowed only 'PubkeyAuthentication yes'.  The other thing 
to consider is changing the default ssh port 22 to some other random port 
which is not hit as frequently by botnets, only by more comprehensive port 
scans.  Then remove your iptables LOG rule for port 22 (if you have one) and 
you should get rid of almost all related messages.

HTH.
-- 
Regards,
Mick


pgpa1OovfXByf.pgp
Description: PGP signature


[gentoo-user] Re: cyrus-imapd not working after recompile against db4.3

2007-04-01 Thread Sven Köhler
 So as you can see, one database must be broken or in wrong format.
 But i have NO idea, which one it is.

OK, it was the database in /var/imap/db.

Deleted all files in that directory, and now everything's fine again.

I wonder, what i broke by doing this. Anyway: all my mails are still there.



signature.asc
Description: OpenPGP digital signature


[gentoo-user] RAID-0 with LVM - is there any point?

2007-04-01 Thread Neil Bothwick
I have two SATA drives, I have a partition on each combined as RAID-1 on
which I use LVM to create my important partitions (/usr, /var, /home
etc). I have another pair of partitions combined as RAID-0 on which I
have another LVM group containing less important partitions, where speed
and space matter more than security. Is there any advantage to using
RAID-0 with these partitions? It seemed a good idea when I set it up,
because I was using LVM on RAID for the rest, but as LVM stripes data
across the drives anyway, am I gaining anything from the RAID-0? Would I
be just as well off by adding the two partitions directly to the LVM
group?


-- 
Neil Bothwick

I laugh in the face of danger, then I hide until it goes away


signature.asc
Description: PGP signature


Re: [gentoo-user] Any consequences to package.mask'ing newer kernels?

2007-04-01 Thread b.n.

Hemmann, Volker Armin ha scritto:

On Sonntag, 1. April 2007, b.n. wrote:

Hemmann, Volker Armin ha scritto:

In almost every kernel release a security problem is found, that is fixed
in a stable release.

Stable release? AFAIK, *all* 2.6.x releases are stable releases.


No, they aren't. There are the 'normal' releases (for example 2.6.20) and 
the 'stable' releases which fix important bugs and security holes (like, for 
example 2.6.20.2).


Yes, I know that. I didn't call them unstable and stable, that's why 
I was confused, however I know.

Now my questions are:
1)I only see gentoo-sources-2.6.X-rY, I never see 
gentoo-sources-2.6.X.a.b-rY .What am I installing when I install 
gentoo-sources-2.6.x-rY?


2)How do the binary distribution people cope with this?

The 
days of double trees (2.4.x and 2.5.x) are gone.


Today we have at least 4 trees.
Linus.
Morton.
The 'stable releases' (2.6.XY.Z)
Bunk's 2.6.16.XY


Well, there have ALWAYS been a lot of different trees, but Morton, for 
example, AFAIK is not an official tree (although it is maintained 
closely to the official).


However that's just nitpicking. :)


Which risk? Which mess? There is not a risk, if you use oldconfig.

oldconfig doesn't always work well between major releases (2.6.x vs
2.6.x+1).


I works like a charm for me


Not for me. And I've sometimes read of newer kernels breaking things on 
the gentoo mailing list. Upgrading a kernel is never straightforward, 
imho (maybe it's me being unexperienced, however it's my years-old only 
desktop box and I hate to b0rk it).


m.
--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Any consequences to package.mask'ing newer kernels?

2007-04-01 Thread Hemmann, Volker Armin
On Montag, 2. April 2007, b.n. wrote:
 Hemmann, Volker Armin ha scritto:
  On Sonntag, 1. April 2007, b.n. wrote:
  Hemmann, Volker Armin ha scritto:
  In almost every kernel release a security problem is found, that is
  fixed in a stable release.
 
  Stable release? AFAIK, *all* 2.6.x releases are stable releases.
 
  No, they aren't. There are the 'normal' releases (for example 2.6.20) and
  the 'stable' releases which fix important bugs and security holes (like,
  for example 2.6.20.2).

 Yes, I know that. I didn't call them unstable and stable, that's why
 I was confused, however I know.
 Now my questions are:
 1)I only see gentoo-sources-2.6.X-rY, I never see
 gentoo-sources-2.6.X.a.b-rY .What am I installing when I install
 gentoo-sources-2.6.x-rY?

look into the changelogs ;) 
I don't use gentoo-sources, but AFAIK, the -rX releases are related to the 
vanilla .X releases.


 2)How do the binary distribution people cope with this?

backporting patches. That is why you get kernels named '2.6.17-201' and stuff 
like that.


  The
  days of double trees (2.4.x and 2.5.x) are gone.
 
  Today we have at least 4 trees.
  Linus.
  Morton.
  The 'stable releases' (2.6.XY.Z)
  Bunk's 2.6.16.XY

 Well, there have ALWAYS been a lot of different trees, but Morton, for
 example, AFAIK is not an official tree (although it is maintained
 closely to the official).

It is the official testing tree. Every new feature and lots of patches and 
drivers have to 'mature' in Morton's tree - and he decides, together with the 
maintainers, which stuff goes to Linus.
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Any consequences to package.mask'ing newer kernels?

2007-04-01 Thread Neil Bothwick
On Sun, 1 Apr 2007 23:35:25 +0200, Hemmann, Volker Armin wrote:

  1)I only see gentoo-sources-2.6.X-rY, I never see
  gentoo-sources-2.6.X.a.b-rY .What am I installing when I install
  gentoo-sources-2.6.x-rY?  
 
 look into the changelogs ;) 
 I don't use gentoo-sources, but AFAIK, the -rX releases are related to
 the vanilla .X releases.

Not necessarily, which is why you need to read the changelogs. For
example, 2.6.21-r1 may be released to fix something with 2.6.20, so when
2.6.21.1 is released, it will be in 2.6.21-r2. Bit it is reasonable to
assume that the latest -r release is based on the latest revision of the
kernel.

Note that stable has different meanings depending on whether you apply
it to the kernel or the ebuild.


-- 
Neil Bothwick

If this were an actual tagline, it would be funny.


signature.asc
Description: PGP signature


Re: [gentoo-user] netfilter tarpit target

2007-04-01 Thread Dave Jones
Hi Mick,

Mick wrote on 01/04/07 20:44:
 Recently I was looking through my logs when I got  pissed off (again) by
 the big number of lines showing something like 'sshd: auth. error:
 unknown user XXX from some IP address'. I wrote a script which
 automatically sets all connections from those IP addresses to be
 dropped. Next I decided to change -j DROP with -j TARPIT and I
 realized that gentoo-sources doesn't provide the netfilter target TARPIT.

 Given that others have already replied how patch the kernel, here's a 
 somewhat 
 indirect answer which may resolve the route cause:  Are you using passwd 
 authentication?  I wonder if the logs would still be filling up by such 
 botnets if you had allowed only 'PubkeyAuthentication yes'.  The other thing 
 to consider is changing the default ssh port 22 to some other random port 
 which is not hit as frequently by botnets, only by more comprehensive port 
 scans.  Then remove your iptables LOG rule for port 22 (if you have one) and 
 you should get rid of almost all related messages.

Daniel complained about the sshd messages, not iptables messages.

I fully agree that he should implement pub/priv key authentication, but
even so, that will not prevent the flood of ssh messages in syslog.

Adding an unlogged iptables DROP target rule for port 22 will suppress
the messages, but not the attacks.

The botnet / script kiddie morons are a pain in the (anatomy of choice).

Cheers, Dave
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] netfilter tarpit target

2007-04-01 Thread Dave Jones
Hi Daniel

Daniel Iliev wrote on 01/04/07 19:10:
 My question: what is the best way get this iptables module working w/o
 diverting too much from the official Gentoo installation. I mean the
 normal way is to use patch-o-matic to patch iptables source and vanilla
 kernel source, then build and install. I have the feeling that it is not
 exactly the right thing to with Gentoo.

 cd /usr/src
 svn co https://svn.netfilter.org/netfilter/trunk/patch-o-matic-ng
 svn co https://svn.netfilter.org/netfilter/trunk/iptables
 cd patch-o-matic-ng
 ./runme extra
 cd /usr/src/linux
 make menuconfig
 make  make modules_install  make install
 make sure you have USE extensions in your make.conf
 emerge iptables

 This patch appears to be incompatible with gentoo-sources or I'm doing
 something wrong. After patching the module TARPIT appears in the
 kernel configuration and I mark it to get built as a module [M]. Then:
 ==
 make all modules_install install
 scripts/kconfig/conf -s arch/i386/Kconfig
   CHK include/linux/version.h
   CHK include/linux/utsrelease.h
   CHK include/linux/compile.h
   GZIPkernel/config_data.gz
   IKCFG   kernel/config_data.h
   CC  kernel/configs.o
   LD  kernel/built-in.o
   CC [M]  net/ipv4/netfilter/ipt_TARPIT.o
 net/ipv4/netfilter/ipt_TARPIT.c: In function ‘ip_direct_send’:
 net/ipv4/netfilter/ipt_TARPIT.c:65: warning: implicit declaration of
 function ‘neigh_hh_output’
 ---snip
 Kernel: arch/i386/boot/bzImage is ready  (#2)
   Building modules, stage 2.
   MODPOST 159 modules
 WARNING: neigh_hh_output [net/ipv4/netfilter/ipt_TARPIT.ko] undefined!
 make[1]: *** [__modpost] Error 1
 make: *** [modules] Error 2
 ==
 So, I'm still looking for advices.

Did the patches apply OK?

Did you do:

cd /usr/src/iptables
svn update
cd /usr/src/patch-o-matic-ng
svn update

.. before updating your kernel?

What kernel are you running?

Cheers, Dave
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] How to resolve policy conflicts?

2007-04-01 Thread Markus Schönhaber
Hello!

ATM we have the situation where the current stable version of OpenOffice 
(2.1.0-r1) won't compile (at least on a lot of machines) unless an ~arch 
version of STLport is installed:
http://bugs.gentoo.org/show_bug.cgi?id=172860
Looking at comments 34 and 37
http://bugs.gentoo.org/show_bug.cgi?id=172860#c34
http://bugs.gentoo.org/show_bug.cgi?id=172860#c37
it seems to me there is a conflict in policies but I don't see how this 
situation should be / will be handled.
What is there to do?

Regards
  mks
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] emerge-webrsync errors

2007-04-01 Thread Adrian

Greetings all.

When running emerge-webrsync I get the following message.  Can anyone
help me understand/fix this?

Thanks very much
Adrian


-
 Updating Portage cache:   66%Traceback (most recent call last):
  File /usr/bin/emerge, line 4049, in ?
emerge_main()
  File /usr/bin/emerge, line 4008, in emerge_main
action_metadata(settings, portdb, myopts)
  File /usr/bin/emerge, line 3019, in action_metadata
eclass_cache=ec, verbose_instance=noise_maker)
  File /usr/lib/portage/pym/cache/util.py, line 47, in mirror_cache
if trg and not write_it:
  File /usr/lib/python2.4/UserDict.py, line 170, in __len__
return len(self.keys())
  File /usr/lib/portage/pym/cache/mappings.py, line 54, in keys
return list(self.__iter__())
  File /usr/lib/portage/pym/cache/mappings.py, line 48, in __iter__
for k in self.orig.iterkeys():
  File /usr/lib/python2.4/UserDict.py, line 103, in iterkeys
return self.__iter__()
  File /usr/lib/portage/pym/cache/mappings.py, line 83, in __iter__
return iter(self.keys())
  File /usr/lib/portage/pym/cache/mappings.py, line 87, in keys
self.d.update(self.pull())
  File /usr/lib/portage/pym/cache/flat_hash.py, line 29, in callit
return args[0](*args[1:]+args2)
  File /usr/lib/portage/pym/cache/flat_hash.py, line 47, in _pull
raise cache_errors.CacheCorruption(cpv, e)
cache.cache_errors.CacheCorruption: net-analyzer/etherape-0.9.6-r1 is
corrupt: dictionary update sequence element #2 has length 1; 2 is
required 


-- 
On The Fly Photography -:- Creation From Chaos

On The Fly Photography:  http://204EastSouth.com
Purchase from On The Fly:  http://204EastSouth.com/OTFStore.htm
The Cynical Libertarian Society:  http://www.204EastSouth.com/cls
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] update-eix error message

2007-04-01 Thread Adrian

Odd things with eix-0.7.9

when I run update-eix I get the following.  

help/understanding please?

Adrian


--
 root $  update-eix
Reading Portage settings ..
Building database (/var/cache/eix) ..
[0] /usr/portage/ (cache: metadata)
 Reading 053%Garbage at end of version string: _p3234
Garbage at end of version string: _p3234
100%
Applying masks ..
Database contains 11521 packages in 149 categories.


-- 
On The Fly Photography -:- Creation From Chaos

On The Fly Photography:  http://204EastSouth.com
Purchase from On The Fly:  http://204EastSouth.com/OTFStore.htm
The Cynical Libertarian Society:  http://www.204EastSouth.com/cls
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] netfilter tarpit target

2007-04-01 Thread Daniel Iliev
First of all thanks for your replies, guys!
I'll try to answer to all of you in one (longer) response:


Dave Jones wrote:

 Daniel complained about the sshd messages, not iptables messages.

 I fully agree that he should implement pub/priv key authentication, but
 even so, that will not prevent the flood of ssh messages in syslog.

 Adding an unlogged iptables DROP target rule for port 22 will suppress
 the messages, but not the attacks.

 The botnet / script kiddie morons are a pain in the (anatomy of choice).

 Cheers, Dave
   

[OT Start]

Couldn't agree more with this. I bet the most of those hackers
wouldn't know what to do even if they get the password. ;-)
Sometimes I need to log in that machine from unpredictable IP addresses
and I don't have a memory stick with me all the time to keep my ssh key.
So, I use keyboard auth. with several extra security measures: only 1
non-root user with very long name and password can log-in. This user
gets su - another-user instead of real shell and as I said I have a
script which checks every minute for auth. errors and blocks the
corresponding IP addresses. So, I would say brute force won't work.
Additionally I'll consider changing the default port as Mick advised.
As Darren stated there is a possibility for someone to make DoS attack
on the tar pit system. AFAIK it exploits exhausting the available
RAM+swap of the tar pit machine. In my case I'm experimenting with an
old box which serves no purpose therefore I (almost) don't care even if
someone gets root prompt there.

[OT End]


On the subject:

Dave,
The dedicated tar pit machine has kernel 2.6.19-gentoo-r5, arch=x86.
The patch applied OK as far as I can tell. I answered with y only to
the tarpit patch. Additionally such a target appeared in the kernel
config:
grep tarpit -i .config
CONFIG_IP_NF_TARGET_TARPIT=m

I admit I didn't do svn update. I didn't do make clean or make
mrproper before patching either. Tomorrow I'll do the test again with
fresh sources and report what happened.

Bye and thanks again!

-- 
Best regards,
Daniel


-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] netfilter tarpit target

2007-04-01 Thread Willie Wong
On Sun, Apr 01, 2007 at 11:49:06AM -0600, darren kirby wrote:
 I realize there is a sense of satisfaction from using the TARPIT target that 
 is appealing, however you must consider:
 
 1. These ssh bruteforce attacks are almost certainly coming from a zombie 
 botnet, and thus there is no human to realize their connection has 
 been 'stuck'. The zombie will happily freeze for 30 seconds then try again.
 

I use a -j DROP for my script that lasts for 1 hour. My experience 
from two years ago when I wrote that script was that the Bots stops 
trying after 5 minutes or so. YMMV

W
-- 
Willie W. Wong  [EMAIL PROTECTED]
408 Fine Hall,  Department of Mathematics,  Princeton University,  Princeton
A mathematician's reputation rests on the number of bad proofs he has given.
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] Can I share my /boot and swap partitions with other Linux installs?

2007-04-01 Thread Daevid Vincent
Currently I dual-boot my notebook with XP and Gentoo.

I'm curious to try out all this beryl stuff and see what all the rage is
with Ubuntu and the kids these days.

Can I install Ubuntu in yet another partition and have it share the /boot
and swap ones I already have, or do I need dedicated ones for that distro
too?

(and I did try to get beryl working in Gentoo, but couldn't do it. Before I
spend too much time messing with that, I figured I'd see if it was even
worth it. Since I have nvidia card, I can't run the Ubuntu live CD and beryl
as it needs to install the proprietary drivers. )


D.Vin

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Can I share my /boot and swap partitions with other Linux installs?

2007-04-01 Thread Dale
Daevid Vincent wrote:
 Currently I dual-boot my notebook with XP and Gentoo.

 I'm curious to try out all this beryl stuff and see what all the rage is
 with Ubuntu and the kids these days.

 Can I install Ubuntu in yet another partition and have it share the /boot
 and swap ones I already have, or do I need dedicated ones for that distro
 too?

 (and I did try to get beryl working in Gentoo, but couldn't do it. Before I
 spend too much time messing with that, I figured I'd see if it was even
 worth it. Since I have nvidia card, I can't run the Ubuntu live CD and beryl
 as it needs to install the proprietary drivers. )


 D.Vin

   

You should be able to share /boot and swap without any problems.  Just
make sure you name the kernels something different or that each distro
is set up to use the same kernel version.

Some people share the /home too.  I have read that can be tricky
though.  May need the same or close to the same version of KDE for example.

Hope that helps.

Dale

:-)  :-) :-)  :-)

-- 
www.myspace.com/-remove-me-dalek1967

Copy n paste then remove the -remove-me- part.

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Can I share my /boot and swap partitions with other Linux installs?

2007-04-01 Thread Vikas Kumar
On 20:14 Sun 01 Apr , Daevid Vincent wrote:
 
 Can I install Ubuntu in yet another partition and have it share the /boot
 and swap ones I already have, or do I need dedicated ones for that distro
 too?
 
you can and you should.

-- 
Good evening, gentlemen.  I am a HAL 9000 computer.  I became operational
at the HAL plant in Urbana, Illinois, on January 11th, nineteen hundred
ninety-five.  My supervisor was Mr. Langley, and he taught me to sing a
song.  If you would like, I could sing it for you.

-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] Re: Can I share my /boot and swap partitions with other Linux installs?

2007-04-01 Thread »Q«
In news:[EMAIL PROTECTED],
Dale [EMAIL PROTECTED] wrote:

 You should be able to share /boot and swap without any problems.  Just
 make sure you name the kernels something different or that each distro
 is set up to use the same kernel version.

Why the same kernel version?

-- 
»Q«

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: Can I share my /boot and swap partitions with other Linux installs?

2007-04-01 Thread Dale
»Q« wrote:
 In news:[EMAIL PROTECTED],
 Dale [EMAIL PROTECTED] wrote:

   
 You should be able to share /boot and swap without any problems.  Just
 make sure you name the kernels something different or that each distro
 is set up to use the same kernel version.
 

 Why the same kernel version?

   

Well, if he uses nvidia drivers I think it will need to be the same. 
I'm not sure about mixing a 2.4 and say a 2.6 either.  It sort of
depends on what he is running.

I just remember doing that with Mandrake once a long time ago.  I used a
separate kernel for each distro.  It worked.

Dale

:-) :-)  :-)



-- 
www.myspace.com/-remove-me-dalek1967

Copy n paste then remove the -remove-me- part.



[gentoo-user] Re: Can I share my /boot and swap partitions with other Linux installs?

2007-04-01 Thread »Q«
In news:[EMAIL PROTECTED],
Dale [EMAIL PROTECTED] wrote:

 »Q« wrote:
  In news:[EMAIL PROTECTED],
  Dale [EMAIL PROTECTED] wrote:
 

  You should be able to share /boot and swap without any problems.
  Just make sure you name the kernels something different or that
  each distro is set up to use the same kernel version.
 
  Why the same kernel version?
 
 Well, if he uses nvidia drivers I think it will need to be the same. 
 I'm not sure about mixing a 2.4 and say a 2.6 either.  It sort of
 depends on what he is running.

Any drivers he's using should be for the kernel they'll be
used with.  He's only talking about sharing /boot and swap, not sharing
drivers.

-- 
»Q«

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Any consequences to package.mask'ing newer kernels?

2007-04-01 Thread Walter Dnes
On Sat, Mar 31, 2007 at 09:21:22AM +0100, Neil Bothwick wrote

 At around 300MB per kernel, that's ten excess kernels, so you can't be
 doing it that often.

  I ran df and ll between each individual unmerge.  The individual
kernels take approx 250 megs, freshly emerged.  Compiling generates
another 200 megs worth of object code, etc.  Here's partial output of
ll before the cleanup.  Note that 2.6.16-r7, 2.6.17-r7, and 2.6.18-r3
were compiled, as well as the current 2.6.19-r5.

drwxr-xr-x 19 root root  744 Sep  6  2006 linux-2.6.16-gentoo-r13
drwxr-xr-x 19 root root  744 May  4  2006 linux-2.6.16-gentoo-r6
drwxr-xr-x 20 root root 1488 Oct 14 02:14 linux-2.6.16-gentoo-r7
drwxr-xr-x 19 root root  744 Jun 13  2006 linux-2.6.16-gentoo-r9
drwxr-xr-x 19 root root  712 Jul 29  2006 linux-2.6.17-gentoo-r4
drwxr-xr-x 20 root root 1448 Sep  6  2006 linux-2.6.17-gentoo-r7
drwxr-xr-x 19 root root  744 Sep 16  2006 linux-2.6.17-gentoo-r8
drwxr-xr-x 19 root root  712 Nov 12 09:01 linux-2.6.18-gentoo-r2
drwxr-xr-x 20 root root 1328 Feb 17 18:51 linux-2.6.18-gentoo-r3
drwxr-xr-x 19 root root  712 Dec 24 22:14 linux-2.6.18-gentoo-r5
drwxr-xr-x 19 root root  712 Jan 14 20:15 linux-2.6.18-gentoo-r6
drwxr-xr-x 20 root root 1328 Mar  8 19:32 linux-2.6.19-gentoo-r5

  I don't mind the 30 or 40 megs for the source tarball+patches in my
distfiles directory.  But the quarter gig for each minor r bump, most
of which I never build, is a bit much.

-- 
Walter Dnes [EMAIL PROTECTED] In linux /sbin/init is Job #1
Q. Mr. Ghandi, what do you think of Microsoft security?
A. I think it would be a good idea.
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] emerge-webrsync errors

2007-04-01 Thread Zac Medico
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Adrian wrote:
   File /usr/lib/portage/pym/cache/flat_hash.py, line 47, in _pull
 raise cache_errors.CacheCorruption(cpv, e)
 cache.cache_errors.CacheCorruption: net-analyzer/etherape-0.9.6-r1 is
 corrupt: dictionary update sequence element #2 has length 1; 2 is
 required 

rm -rf /var/cache/edb/dep
emerge --metadata
emerge portage

That's bug 156374 and it's fixed in the latest stable version of
portage.

Zac
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.3 (GNU/Linux)

iD8DBQFGEJGL/ejvha5XGaMRAqhwAJ4ibGTYavbAM0B/RqzxuVCD9q5CxgCgrmfb
kdxpfc1/DIU8sHVJUDrnH6g=
=oUgv
-END PGP SIGNATURE-
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: Can I share my /boot and swap partitions with other Linux installs?

2007-04-01 Thread Dale
»Q« wrote:
 In news:[EMAIL PROTECTED],
 Dale [EMAIL PROTECTED] wrote:

   
 »Q« wrote:
 
 In news:[EMAIL PROTECTED],
 Dale [EMAIL PROTECTED] wrote:

   
   
 You should be able to share /boot and swap without any problems.
 Just make sure you name the kernels something different or that
 each distro is set up to use the same kernel version.
 
 Why the same kernel version?
   
 Well, if he uses nvidia drivers I think it will need to be the same. 
 I'm not sure about mixing a 2.4 and say a 2.6 either.  It sort of
 depends on what he is running.
 

 Any drivers he's using should be for the kernel they'll be
 used with.  He's only talking about sharing /boot and swap, not sharing
 drivers.

   

True.  It's to late for me to be giving to many suggestions.  LOL

I will say this though, not sharing /boot could turn into a nightmare. 
I did that once.  It was the most confusing thing I ever saw.  It is
really confusing right now.  ;-)

I'm going to bed.  Zz.

Dale

:-)  :-)  :-)

-- 
www.myspace.com/-remove-me-dalek1967

Copy n paste then remove the -remove-me- part.



Re: [gentoo-user] update-eix error message

2007-04-01 Thread Philip Webb
070401 Adrian wrote:
 Odd things with eix-0.7.9

I'm using 0.9.1 successfully.

 when I run update-eix I get the following.  
   root $  update-eix
   Reading Portage settings ..
   Building database (/var/cache/eix) ..
   [0] /usr/portage/ (cache: metadata)
Reading 053%Garbage at end of version string: _p3234
   Garbage at end of version string: _p3234
   100%
   Applying masks ..
   Database contains 11521 packages in 149 categories.

'man eix' suggests 'update-eix' expects parameters.
Should you perhaps be using 'eix-sync' ?

-- 
,,
SUPPORT ___//___,  Philip Webb : [EMAIL PROTECTED]
ELECTRIC   /] [] [] [] [] []|  Centre for Urban  Community Studies
TRANSIT`-O--O---'  University of Toronto
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Any consequences to package.mask'ing newer kernels?

2007-04-01 Thread Walter Dnes
On Sat, Mar 31, 2007 at 04:11:42PM +0200, Hemmann, Volker Armin wrote

 Which risk? Which mess? There is not a risk, if you use oldconfig.

  With oldconfig, 99% of the updates seem to consist of added support
for exotic raid controllers or network cards.  Since my system has been
running OK for the past couple of years without the new features, I
obviously don't need them.  I end up hitting N all the time.

  I got bitten in the latest stable kernel (2.6.19-r5).  It moved SATA
support out of SCSI, and into a separate section altogether.  I plowed
through make oldconfig, hitting N for every option.  Because I have
a SATA drive, the result was kernel panic when I rebooted into the new
kernel.

-- 
Walter Dnes [EMAIL PROTECTED] In linux /sbin/init is Job #1
Q. Mr. Ghandi, what do you think of Microsoft security?
A. I think it would be a good idea.
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] headphones don't work since upgrade to kernel 2.6.19???

2007-04-01 Thread Wolfgang Liebich
Hi,
I've rebooted today with kernel 2.6.19 (used 2.6.18 before). I have a
Intel 945G/GZ/P/PL motherboard and a Intel hda on board soundcard
(Alsamixer says Card: HDA Intel and Chip: Realtek ALC260).
I've listened to music via headphones plugged in on the
frontside. Suddenly this setup don't work anymore:
If I turn up the PCM playback source in the alsamixer, I hear the
sound from the builtin PC boxen. If I turn PCM level to 0 I hear
nothing. The Headphon channel is dead. 
What now?
Kernel version:
Linux atpcbygc 2.6.19-gentoo-r5
I use the alsa drivers coming with the kernel.
Troubled in vienna,
Wolfgang
-- 
gentoo-user@gentoo.org mailing list