Re: [gentoo-user] [OT] test, if module was loaded with module option?

2008-12-31 Thread Christian Franke
On 12/29/2008 02:32 PM, Marc Blumentritt wrote:
 is there a general way to test, if a kernel module was loaded with a
 module option and which module options were used?

There is at least /sys/module/modulname/parameters/parametername
If there is nothing else, one could at least compare each parameter to
its default value or something like that. Attention, not everything in
/sys/module _is_ a module, seems more like everything that is or _could_
be a module is there.

If the moduleoption was set when booting, one could of course use
/proc/cmdline, but I think that might be not exactly what you want.

-cf



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] Awesome vs Xmonad

2008-12-30 Thread Christian Franke
On 12/17/2008 05:51 AM, Man Shankar wrote:
 I want to try out the tiling window managers.

If you're not already fixed to Awesome or Xmonad you might also want
to have a look at ion. [1]
I am using it on my notebook which has a relatively small screen
resolution of 1024x768, so most time I was rearranging windows to see
two or more at once. Since I use ion3 there (which I learned to use very
fast) work was sped up considerably.

-cf

[1] http://modeemi.fi/~tuomov/ion/



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] Curious pattern in log files from ssh...

2008-12-04 Thread Christian Franke
On 12/03/2008 09:02 PM, Steve wrote:
 I've recently discovered a curious pattern emerging in my system log
 with failed login attempts via ssh.
 
 I'm not particularly concerned - since I'm confident that all my users
 have strong passwords... but it strikes me that this data identifies a
 bot-net that is clearly malicious attempting to break passwords.
 
 Sure, I could use IPtables to block all these bad ports... or... I could
 disable password authentication entirely... but I keep thinking that
 there has to be something better I can do... any suggestions?  Is there
 a simple way to integrate a block-list of known-compromised hosts into
 IPtables - rather like my postfix is configured to drop connections from
 known spam sources from the sbl-xbl.spamhaus.org DNS block list, for
 example.

I just don't see what blocking ssh-bruteforce attempts should be good
for, at least on a server where few _users_ are active.

The chance that security of a well configured system will be compromised
by that is next to zero, and on recent systems it is also impossible to
cause significant load with ssh-login-attempts.

Also, things like fail2ban add new attack-possibilities to a system, I
remember the old DoS for fail2ban, resulting from a wrong regex in log
file parsing, but I think at least this is fixed now.

Regards,
Christian Franke



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] udevinfo - where is it

2008-10-23 Thread Christian Franke
On 10/23/2008 12:29 PM, Helmut Jarausch wrote:
 I have a recent GenToo system (udev-130-r1) but I cannot
 find the utility  'udevinfo'
 Which package contains it?

With my udev-124-r1 it is in the udev package. But /usr/bin/udevinfo is
just a symlink to /sbin/udevadm, so maybe you should look for the latter.

Add: Just built 130-r1. In the messages for it is:
If you build an initramfs including udev, then please make sure that
the /sbin/udevadm binary gets included,  and your scripts changed to use
it, as it replaces the old helper apps udevinfo, udevtrigger, ...

Regards,
Christian Franke



signature.asc
Description: OpenPGP digital signature


Re: [gentoo-user] [Way OT] dial-up, switching isp's and other thoughts.

2008-09-13 Thread Christian Franke

On 09/12/2008 12:55 PM, Robert Bridge wrote:

On Fri, 12 Sep 2008 08:42:09 +0200
Alan McKinnon [EMAIL PROTECTED] wrote:

On Friday 12 September 2008 02:51:21 Dale wrote:

Get a Yahoo email account and pay for POP access, about $20.00 a
year I think.

Use Gmail rather. It's cheaper - can't get cheaper than free - and
just works better.

I second the Gmail suggestion, though Yahoo does provide free POP
access as it happens (I have it).


I use Yahoo (with POP) only because I do not want my email address to change. 
What has to be added about this: getting a POP or SMTP connection with SSL as 
transport is kind of gambling on Yahoo's servers, at least in Germany.



My logic for seconding the suggestion is I have recently experienced
e-mails from my server going missing after entering the Yahoo system.
They are the ONLY email provider where this has happened to me.


This comes from Yahoo's spam policies and their idea of defending spam. They 
send '451 Message temporarily deferred' to all not white-listed mail servers, 
which results either in a very long time for delivery or in the mail not being 
delivered at all. [1,2,Personal Experience]


To put it in a nutshell, I would prefer gmail over Yahoo-mail, even if there are 
some discussions about privacy issues with gmail.


[1] http://help.yahoo.com/l/us/yahoo/mail/postmaster/postmaster-25.html
[2] http://www.ahfx.net/weblog.php?article=107

Best Regards,
Christian Franke



signature.asc
Description: OpenPGP digital signature