Re: A silly question about GCC
Gilad Ben-Yossef <[EMAIL PROTECTED]> writes:
> Hi,
>
> I have a program which I want it's binary to contain a "version string",
> the kind of string RCS automagically makes for you if you ask it nicely.
>
> Now, if I put it in as a const static variable like so:
> const static char * Ver = "$Id$";
I use
static const char RCSid[] = "$Id$";
and gcc never complains even though I switch all conceivable warnings
on during development. What warning option generates the complaint?
Actually, I just did the following:
static const char RCSid[] = "$Id$";
static const char * Ver = "$Id$";
int main(void) {return 0;}
(note that static should go before const, otherwise there is an
additional complaint), and compiled to get a warning about Ver
but not about RCSid. I have no time to investigate now, but I
hope it helps.
For the record, I used
gcc -c \
-W \
-O2 \
-pedantic \
-Wall \
-Wtraditional \
-Wshadow \
-Wid-clash-32 \
-Wpointer-arith \
-Wcast-qual \
-Wcast-align \
-Wconversion \
-Wstrict-prototypes \
-Wmissing-prototypes \
-Wmissing-declarations \
-Wnested-externs \
-o /dev/null
--
Oleg Goldshmidt <[EMAIL PROTECTED]>
"... We work by wit, and not by witchcraft;
And wit depends on dilatory time." [Shakespeare]
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
just in case - Haifus re-post
ok. just in case, here's a re-post of the next Haifux meeting notification. -- Subject: Haifux: kernel modules/hacking 7-aug-2000 hi, on the 7-aug-200 (monday) we'll carry out a kernel modules/kernel hacking lecture at the Haifux club meeting. the meeting will be held at 18:30, in the new computer science building (TAUB), at room 'Taub 3'. lecture slides are placed on haifux's web site (http://linuxclub.il.eu.org/ , at the 'future lectures' section). we'll also bring up a suggestion for a kernel module to develope, so anyone that wishes to join the effort is welcome. guy "For world domination - press 1, or dial 0, and please hold, for the creator." -- nob o. dy = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: 'linux-il-announce' working?
Hi, guy! On Wed, Aug 02, 2000 at 10:04:24PM +0300, you wrote the following: > i sent a letter yesterday to [EMAIL PROTECTED] , and didn't > receive it here. did anyone else receive it? or is linux-il-announce > moderated in some manner? linux-il-announce is indeed moderated; I saw your posting, approved it and then received it back from the list normally. Have other people received it? -- Alex Shnitman| http://www.debian.org [EMAIL PROTECTED], [EMAIL PROTECTED] +--- http://alexsh.hectic.netUIN 188956PGP key on web page E1 F2 7B 6C A0 31 80 28 63 B8 02 BA 65 C7 8B BA Make it idiot-proof and someone will make a better idiot. -- Mikko Hänninen = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
group_led
Hi
I have a question regarding xkb .
I want to use the scroll-lock led as an indicator of the active keyboard
group.
I saw /usr/X11R6/lib/X11/compat/group_led which (according tto the remark
in it) is supposed to do just that.
How can I make it work?
I generally wish to avoid changing files under /usr if possible, and only
change the XF86Config file. Therefore
http://www.cs.bgu.ac.il/~zivav/hebrew/hebkeys.tar.gz is not good enough.
Anyway, I made a file il.xkb that contains:
xkb_keymap "il" {
xkb_keycodes{ include "xfree86" };
xkb_types { include "default" };
xkb_compatibility { include "group_led" };
xkb_symbols { include "en_US(pc101)+il" };
xkb_geometry{ include "pc(pc101)" };
};
and then I run:
xkbcomp -merge il.xkb
As far as I can tell the map is merged. But the scroll-lock indicator
works as before.
Unfortunetly it seems that the only documentation about Xkb is:
http://www.tsu.ru/~pascal/other/xkb/
which is written in russian.
Any ideas?
--
Tzafrir Cohen
mailto:[EMAIL PROTECTED]
http://www.technion.ac.il/~tzafrir
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
'linux-il-announce' working?
i sent a letter yesterday to [EMAIL PROTECTED] , and didn't receive it here. did anyone else receive it? or is linux-il-announce moderated in some manner? guy "For world domination - press 1, or dial 0, and please hold, for the creator." -- nob o. dy guy "For world domination - press 1, or dial 0, and please hold, for the creator." -- nob o. dy = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: A silly question about GCC
On Wed, 2 Aug 2000, Nadav Har'El wrote: > On Wed, Aug 02, 2000, Gilad Ben-Yossef wrote about "Re: A silly question about GCC": > > > > the kind of string RCS automagically makes for you if you ask it nicely. > > > > > > > > > > GCC (rightfuly) complains about the string not being used. GCC does > > > > offer the __attribute__ ((notused)) attribute, but it's only for > > > > fucntions, not variables. Is there any inteligent way to tell it to shut > > > > up for that specific variable? (except the obvious way of artifcially > > > > using it?) > > > > > > volatile > > > > GCC still complains. Any other ideas? Well you were right Omer, removing the static did it. Thanks ;-) > > 3. Some C compilers I knew had commands #ident (or something like that, I don't >remember) that did exactly what you want, and you didn't even have to >worry about the string name (you did something like '#ident "@(#)Hello 1.0"'). >Maybe gcc also has it? GCC indeed supports #ident. Alas, the info page says you have to define the ASM_OUT_IDENT macro as "A C statement to output something to the assembler file to handle a #ident' directive containing the text STRING" to use it, and then adds: "If this macro is not defined, nothing is output for a `#ident' directive." I am not men enough to do this ;-) --- Gilad Ben-Yossef <[EMAIL PROTECTED]> Tel: +972-54756701 GP: Is Eris true? Fax: +972-15154756701 M2: Everything is true.HTTP: http://benyossef.com GP: Even false things? GPG: 64C5 8B59 74D5 8FAE F097 M2: Even false things are true. 8DF8 4590 CE75 F444 6178 GP: How can that be? SMS: http://benyossef.com/how.html M2: I don't know man,I didn't do it. IRC: Fidros = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: SAMBA again
Thanks to all those that offered me help with my SAMBA password problem. In the end, it turned out to be something completely different, so I'll tell you what happened in case someone else can benefit from my mistake. I didn't realize, that when WIN98 asks for a password to share a resource on the LINUX box, it expects me to be logged on to WIN98 using the same user name that I have on the LINUX box. All my shared resources on LINUX were set up by root and of course expected the root password. But my logon to WIN98 was shlomo. Adding a user called root on the WIN98 box solved my problem. //- Shlomo Solomon E-Mail: [EMAIL PROTECTED] http://come.to/shlomo.solomon Date: 02-Aug-2000 Time: 19:23:51 Message sent by XFMail on a LINUX Mandrake 7.0 machine //- = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: kde2 (1.92)
Hi, [EMAIL PROTECTED] wrote: > > hi > > I do not know who to send suggestions about kde2 but: > > kde2 seems to have learn too much from microsoft. > when I start it, it gives me a picture of the dragon > and a status bar. it can noy be lowered and takes about 10 minuts to > disapear ( if i do not kill it before ). that's anoyoing . 10 Minutes??? At home on a Pentium II 350 with 128MB RAM it takes 36 seconds while it loading all its daemon/services and plugins. Remember - KDE-2 is TOTALLY different then KDE 1 in architecture (thats why its totaly incompatible with KDE 1.1). Something is wrong with your setting there.. > > other thing is that before, i used to use alt-f2 to exec command > and could type an alias ( i.e. i type 'xt' which is short for > /usr/.../xterm -fn ... ) > but now if i type just 'xt' it searches the internet for me. who wanted > that ? Disable the "search Internet Keywords" on the KDE Control Center (I'm away from my Linux machines right now so I cannot tell you exactly where is it) > i ran away from microsoft because of it. Nice. I'm also running - wait for me :)) > > and a sujjestion i have : it would be nice if they would have let me > use shift-left-click to iconify/deiconify ( that option does not exist > now ) Donno about this. Its feature freeze now - so wait until KDE 2.0 gold will be out - then suggest it (or write a patch and I'll try to put it in). Hetz > > regards > erez. > > = > To unsubscribe, send mail to [EMAIL PROTECTED] with > the word "unsubscribe" in the message body, e.g., run the command > echo unsubscribe | mail [EMAIL PROTECTED] -- Hetz Ben Hamo Intelligence & Research [EMAIL PROTECTED] Aduva Inc. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Work Offer...
Hi Everyone... The company I work for is looking for expert Linux Programmers in the following subjects: C++ (More then 2 years C++ programming experience under Linux (or the equivalent knowledge.)) Knowledge in Client\Server Application programming (HTTP Listeners, etc...) Kernel Programming (Network Sniffing) Multi-Process\Thread programming Please forward all CV's to [EMAIL PROTECTED] Thanks in advance: Benji Selano = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: A silly question about GCC
Gilad Ben-Yossef wrote:
> Now, if I put it in as a const static variable like so:
> const static char * Ver = "$Id$";
try making it an array of char, as in:
const static char Ver[] = "$Id$"
compiling the following with "gcc hello.c -Wall -ansi -pedantic -o
hello" gives me no errors.
#include "stdio.h"
const static char version[] = "version0.0";
int main(int argc, char ** argv){
printf("%s\n", "hello world!");
return 0;
}
btw, you can see in a lot of older code this sort of declaration wrapped
in
#ifndef LINT
#endif
since lint complains about this sort of thing.
> Thanks,
> Gilad.
>
--
mulix
linux/reboot.h: #define LINUX_REBOOT_MAGIC1 0xfee1dead
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
Re: A silly question about GCC
On Wed, Aug 02, 2000, Gilad Ben-Yossef wrote about "Re: A silly question about GCC": > > > the kind of string RCS automagically makes for you if you ask it nicely. > > > > > > > GCC (rightfuly) complains about the string not being used. GCC does > > > offer the __attribute__ ((notused)) attribute, but it's only for > > > fucntions, not variables. Is there any inteligent way to tell it to shut > > > up for that specific variable? (except the obvious way of artifcially > > > using it?) > > > > volatile > > GCC still complains. Any other ideas? You can try one of the following ugly solutions (but maybe someone will come up with a better one). #2 is probably the better solution of the three. 1. Do something with that variable - something idiotic like passing it to a function (e.g., put a "strlen(stringname)" call in a function called only once, or something. You can also assign it to some pointer variable. 2. Don't make the variable static (file-local). When the variable is global C cannot complain about it being unused in the current file, because other files may "extern" and use it! Note that using the solution, the string will also end up in the resulting executable file, and you'll be able to do "ident" or "what" on it, which is probably what you want. Note that if the string is global, you'll need a different name for it for each file. 3. Some C compilers I knew had commands #ident (or something like that, I don't remember) that did exactly what you want, and you didn't even have to worry about the string name (you did something like '#ident "@(#)Hello 1.0"'). Maybe gcc also has it? -- Nadav Har'El| Wednesday, Aug 2 2000, 2 Av 5760 [EMAIL PROTECTED] |- Phone: +972-53-245868, ICQ 13349191 |Unix is simple, but it takes a genius to http://nadav.harel.org.il |understand its simplicity. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: A silly question about GCC
On Wed, 2 Aug 2000, Omer Musaev wrote: > Gilad Ben-Yossef wrote: > > I have a program which I want it's binary to contain a "version string", > > the kind of string RCS automagically makes for you if you ask it nicely. > > > > GCC (rightfuly) complains about the string not being used. GCC does > > offer the __attribute__ ((notused)) attribute, but it's only for > > fucntions, not variables. Is there any inteligent way to tell it to shut > > up for that specific variable? (except the obvious way of artifcially > > using it?) > > volatile GCC still complains. Any other ideas? --- Gilad Ben-Yossef <[EMAIL PROTECTED]> Tel: +972-54756701 GP: Is Eris true? Fax: +972-15154756701 M2: Everything is true.HTTP: http://benyossef.com GP: Even false things? GPG: 64C5 8B59 74D5 8FAE F097 M2: Even false things are true. 8DF8 4590 CE75 F444 6178 GP: How can that be? SMS: http://benyossef.com/how.html M2: I don't know man,I didn't do it. IRC: Fidros = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: A silly question about GCC
Gilad Ben-Yossef wrote: > Hi, > > I have a program which I want it's binary to contain a "version string", > the kind of string RCS automagically makes for you if you ask it nicely. > > Now, if I put it in as a const static variable like so: > const static char * Ver = "$Id$"; > > GCC (rightfuly) complains about the string not being used. GCC does > offer the __attribute__ ((notused)) attribute, but it's only for > fucntions, not variables. Is there any inteligent way to tell it to shut > up for that specific variable? (except the obvious way of artifcially > using it?) > volatile > > Thanks, > Gilad. > > --- > Gilad Ben-Yossef <[EMAIL PROTECTED]> > Tel: +972-54756701 >GP: Is Eris true? Fax: +972-15154756701 >M2: Everything is true.HTTP: http://benyossef.com >GP: Even false things? GPG: 64C5 8B59 74D5 8FAE F097 >M2: Even false things are true. 8DF8 4590 CE75 F444 6178 >GP: How can that be? SMS: http://benyossef.com/how.html >M2: I don't know man,I didn't do it. IRC: Fidros > > = > To unsubscribe, send mail to [EMAIL PROTECTED] with > the word "unsubscribe" in the message body, e.g., run the command > echo unsubscribe | mail [EMAIL PROTECTED] -- Omer Mussaev051-308-214 mailto:[EMAIL PROTECTED] systems programmer, Mercury Interactive/RND/Conduct/core = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
A silly question about GCC
Hi, I have a program which I want it's binary to contain a "version string", the kind of string RCS automagically makes for you if you ask it nicely. Now, if I put it in as a const static variable like so: const static char * Ver = "$Id$"; GCC (rightfuly) complains about the string not being used. GCC does offer the __attribute__ ((notused)) attribute, but it's only for fucntions, not variables. Is there any inteligent way to tell it to shut up for that specific variable? (except the obvious way of artifcially using it?) Thanks, Gilad. --- Gilad Ben-Yossef <[EMAIL PROTECTED]> Tel: +972-54756701 GP: Is Eris true? Fax: +972-15154756701 M2: Everything is true.HTTP: http://benyossef.com GP: Even false things? GPG: 64C5 8B59 74D5 8FAE F097 M2: Even false things are true. 8DF8 4590 CE75 F444 6178 GP: How can that be? SMS: http://benyossef.com/how.html M2: I don't know man,I didn't do it. IRC: Fidros = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
RE: your mail
On Wed, 2 Aug 2000, fredy wrote: > Well gilad, I think this idea of yours could actually work... > At least that's what it looks like from the documentation. > I'd love to hear of more examples before I break my head here and use > resources to accomplish it. As I wrote, I tried the brdging code and find it stable and has good performance but never actually tried to use the firewalling optins. Having said that the views on the bridge mailing list seems very positive to me (the archive are online, go have a look) and also if you examine the source code it looks very "sane" - it simply introduces the bridge as yet another firewalling point for forwarding, input and output and uses that. > I need at least one example of a Linux based bridge+firewall which is > bridging An Internet network and not a LAN (between router and DMZ). > Anyone? > What's the differnce between "Internet" traffic and "LAN" traffic? it's IP packets (or Ethernet frames that carry them). No? --- Gilad Ben-Yossef <[EMAIL PROTECTED]> Tel: +972-54756701 GP: Is Eris true? Fax: +972-15154756701 M2: Everything is true.HTTP: http://benyossef.com GP: Even false things? GPG: 64C5 8B59 74D5 8FAE F097 M2: Even false things are true. 8DF8 4590 CE75 F444 6178 GP: How can that be? SMS: http://benyossef.com/how.html M2: I don't know man,I didn't do it. IRC: Fidros = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
RE: your mail
Well gilad, I think this idea of yours could actually work... At least that's what it looks like from the documentation. I'd love to hear of more examples before I break my head here and use resources to accomplish it. I need at least one example of a Linux based bridge+firewall which is bridging An Internet network and not a LAN (between router and DMZ). Anyone? Fred Arie. TIE Middle East Ltd. Ben Gurion 22 street Hertzliya, ISRAEL Tel: +972-9-9501132 or: +972-9-9501113 Cell: +972-52-522006 Fax.:+972 9 9500911 mailto:[EMAIL PROTECTED] Http://www.TieMiddleEast.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Gilad Ben-Yossef Sent: Wednesday, August 02, 2000 11:33 AM To: fredy Cc: Linux-Il Subject: Re: your mail On Wed, 2 Aug 2000, fredy wrote: > I have a question. > I have a Linux based firewall, 2 NIC's. > I need to use it to protect a class C subnet of real Internet computers. > Does anyone have an idea of how to do that ? > (From the router the demand will come to any IP address in that subnet and > not only to the IP of the Linux machine) Dont think so 3rd layer, JeanLuke ;-) The easiest solution is: 1. Install on the Firewall machine both the bridging patch and the IP firewalling on a bridge patch that can be found at http://www.openrock.net/bridge. 2. Follow the very simple instruction to make the two NICs bridged. 3. Configure the regular firewalling rules according to the instructions found in said site using IPChains. 4. Stick the machine between router inner leg and the hub/switch whatever the router was connected to. 5. Enjoy ;-) --- Gilad Ben-Yossef <[EMAIL PROTECTED]> Tel: +972-54756701 GP: Is Eris true? Fax: +972-15154756701 M2: Everything is true.HTTP: http://benyossef.com GP: Even false things? GPG: 64C5 8B59 74D5 8FAE F097 M2: Even false things are true. 8DF8 4590 CE75 F444 6178 GP: How can that be? SMS: http://benyossef.com/how.html M2: I don't know man,I didn't do it. IRC: Fidros = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Few questions...
I have two question to ask. 1) for some reason, i have GTK errors while working with GNOME... they look like that: Gtk-WARNING **: gtk_widget_size_allocate(): attempt to allocate widget with width 65527 and height Gtk-WARNING **: gtk_signal_disconnect_by_data(): could not find handler containing data (0x814B2F8) rm: cannot remove `/home/yarin/.gnome//gmc-Zqvd9l': No such file or directory waiting for X server to shut down [yarin@Underground yarin]$ Anything i should be worried about? i'm using Helix pacakges including the GTK 2) I think it's normal but i really want to solve this issue with Identd on RH 6.2 It's not controled by inetd.conf as it used to be, now it's a standalone deamon loading on boot. what i dont get is why Identd is forking itself 5 times!! Yarin Benado = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: MySQL latest beta versions
Gilad Ben-Yossef wrote: > On Wed, 2 Aug 2000, Boaz Rymland wrote: > > Sometimes we get MySQL to use 97% cpu, and this is when it gets > > stuck and stops > > No experience with alpha version, but I've used MySQL for a long time with > quite big tables (~400,000 entries) under very high loads and never saw a > problem and the CPU utilization only gets to the level you describe if > someone does something stupid (forget to set fields as INDEXED or using > Brute Force (TM) for lack of knowledge of SQL). Of course, this is not > neccasrily your case, but it might be worth checking exactly under what > circumstances does the 95% CPU util occurs. That wouldn't explain the crashes. Using MySQL 3.22.x, I encountered similar problems after some tables were damaged (by reboots of my hosted server). Gilad, does isamchk report any problems? Also, isamchk doesn't detect all errors, so consider using mysqldump to reconstruct your database from scratch. This following is directly applicable: http://www.mysql.com/documentation/mysql/bychapter/manual_Problems.html#Crashing Regards, Eran Tromer = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: splitting subnets on the firewall
On Wed, 2 Aug 2000, Alex Shnitman wrote: > > > Lets not forget that it's not even in the mainstream kernel yet > > Whoops, sorry. Mea culpa. It seems that it *is* in 2.3. Yes ;-) Although the integration with the firewalling code is not there in the 2.3 code - the bridging code is the same but IPChgains was replaced by NetFIlter so the firewall - bridge code doesn't work. I do understand however that work is being done on integrating the bridging code and NetFilter to get the same thing under 2.3/2.4. Also, note that the original bridging code in 2.2.x is horrible. At least from my own personal experience the new bridge patch is stable enough fpor a production enviorment and although I have to admit i didn't give the firewalling code the same tests I gave the pure bridging code... --- Gilad Ben-Yossef <[EMAIL PROTECTED]> Tel: +972-54756701 GP: Is Eris true? Fax: +972-15154756701 M2: Everything is true.HTTP: http://benyossef.com GP: Even false things? GPG: 64C5 8B59 74D5 8FAE F097 M2: Even false things are true. 8DF8 4590 CE75 F444 6178 GP: How can that be? SMS: http://benyossef.com/how.html M2: I don't know man,I didn't do it. IRC: Fidros = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: splitting subnets on the firewall
> Lets not forget that it's not even in the mainstream kernel yet Whoops, sorry. Mea culpa. It seems that it *is* in 2.3. -- Alex Shnitman| http://www.debian.org [EMAIL PROTECTED], [EMAIL PROTECTED] +--- http://alexsh.hectic.netUIN 188956PGP key on web page E1 F2 7B 6C A0 31 80 28 63 B8 02 BA 65 C7 8B BA "Xenix is the pinnacle of modern UNIX design, and will be used for many years to come." -- Xenix OS API manual = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: splitting subnets on the firewall
Hi, Gilad! On Wed, Aug 02, 2000 at 03:05:31PM +0300, you wrote the following: > > > The easiest solution is: > > > > > > 1. Install on the Firewall machine both the bridging patch and the IP > > > firewalling on a bridge patch that can be found at > > > http://www.openrock.net/bridge. > > > > > > > I never tried that one. won't the bridging code bypass the forwarding > > rules of the IP stack, as it works at the 2nd layer, before the TCP/IP > > stack is used? that would defeat the purpose of a firewall I think... > > > > In the URL I gave there is a patch to allow filtering of IP packets (I > should really say Ethernet frames containing IP packets) by IPchains when > they pass through the bridging code. > > It works beautifuly - really one of the coolest hacks I've seen. ;-) I agree that this is an amazing hack; question is whether it's stable enough to use on a production firewall. Lets not forget that it's not even in the mainstream kernel yet (which may or may not be an indicator). -- Alex Shnitman| http://www.debian.org [EMAIL PROTECTED], [EMAIL PROTECTED] +--- http://alexsh.hectic.netUIN 188956PGP key on web page E1 F2 7B 6C A0 31 80 28 63 B8 02 BA 65 C7 8B BA "Everything that can be invented has been invented." -- Charles Duell, head of the U.S. Patent Office, 1899 = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: splitting subnets on the firewall
On Wed, 2 Aug 2000, Ira Abramov wrote: > On Wed, 2 Aug 2000, Gilad Ben-Yossef wrote: > > > The easiest solution is: > > > > 1. Install on the Firewall machine both the bridging patch and the IP > > firewalling on a bridge patch that can be found at > > http://www.openrock.net/bridge. > > > > I never tried that one. won't the bridging code bypass the forwarding > rules of the IP stack, as it works at the 2nd layer, before the TCP/IP > stack is used? that would defeat the purpose of a firewall I think... > In the URL I gave there is a patch to allow filtering of IP packets (I should really say Ethernet frames containing IP packets) by IPchains when they pass through the bridging code. It works beautifuly - really one of the coolest hacks I've seen. ;-) --- Gilad Ben-Yossef <[EMAIL PROTECTED]> Tel: +972-54756701 GP: Is Eris true? Fax: +972-15154756701 M2: Everything is true.HTTP: http://benyossef.com GP: Even false things? GPG: 64C5 8B59 74D5 8FAE F097 M2: Even false things are true. 8DF8 4590 CE75 F444 6178 GP: How can that be? SMS: http://benyossef.com/how.html M2: I don't know man,I didn't do it. IRC: Fidros = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: MySQL latest beta versions
On Wed, 2 Aug 2000, Boaz Rymland wrote: > Hello ppl, > > I'm looking for some impressions / feedback from people who run/tested > the latest MySQL alpha versions (latest is 3.23.22 , from yesterday). At > my work, we use a stable older version MySQL and we experience problem > especially when it's databases are becoming large. Sometimes we get > MySQL to use 97% cpu, and this is when it gets stuck and stops No experience with alpha version, but I've used MySQL for a long time with quite big tables (~400,000 entries) under very high loads and never saw a problem and the CPU utilization only gets to the level you describe if someone does something stupid (forget to set fields as INDEXED or using Brute Force (TM) for lack of knowledge of SQL). Of course, this is not neccasrily your case, but it might be worth checking exactly under what circumstances does the 95% CPU util occurs. --- Gilad Ben-Yossef <[EMAIL PROTECTED]> Tel: +972-54756701 GP: Is Eris true? Fax: +972-15154756701 M2: Everything is true.HTTP: http://benyossef.com GP: Even false things? GPG: 64C5 8B59 74D5 8FAE F097 M2: Even false things are true. 8DF8 4590 CE75 F444 6178 GP: How can that be? SMS: http://benyossef.com/how.html M2: I don't know man,I didn't do it. IRC: Fidros = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
splitting subnets on the firewall
On Wed, 2 Aug 2000, Gilad Ben-Yossef wrote: > The easiest solution is: > > 1. Install on the Firewall machine both the bridging patch and the IP > firewalling on a bridge patch that can be found at > http://www.openrock.net/bridge. > I never tried that one. won't the bridging code bypass the forwarding rules of the IP stack, as it works at the 2nd layer, before the TCP/IP stack is used? that would defeat the purpose of a firewall I think... -- Ira Abramov, GNU/Linux advocate. (@- //\ "Akamai, Google, MicroSoft, Sun, Oracle, Intel, NASA, Sony, v_/_Python, JPG, PNG - CS masturbation is changing the world." -- C.S. explaining her views on masturbation to Linus, 3/7/2000 = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: your mail
On Wed, 2 Aug 2000, fredy wrote: > I have a question. > I have a Linux based firewall, 2 NIC's. > I need to use it to protect a class C subnet of real Internet computers. > Does anyone have an idea of how to do that ? > (From the router the demand will come to any IP address in that subnet and > not only to the IP of the Linux machine) Dont think so 3rd layer, JeanLuke ;-) The easiest solution is: 1. Install on the Firewall machine both the bridging patch and the IP firewalling on a bridge patch that can be found at http://www.openrock.net/bridge. 2. Follow the very simple instruction to make the two NICs bridged. 3. Configure the regular firewalling rules according to the instructions found in said site using IPChains. 4. Stick the machine between router inner leg and the hub/switch whatever the router was connected to. 5. Enjoy ;-) --- Gilad Ben-Yossef <[EMAIL PROTECTED]> Tel: +972-54756701 GP: Is Eris true? Fax: +972-15154756701 M2: Everything is true.HTTP: http://benyossef.com GP: Even false things? GPG: 64C5 8B59 74D5 8FAE F097 M2: Even false things are true. 8DF8 4590 CE75 F444 6178 GP: How can that be? SMS: http://benyossef.com/how.html M2: I don't know man,I didn't do it. IRC: Fidros = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
MySQL latest beta versions
Hello ppl, I'm looking for some impressions / feedback from people who run/tested the latest MySQL alpha versions (latest is 3.23.22 , from yesterday). At my work, we use a stable older version MySQL and we experience problem especially when it's databases are becoming large. Sometimes we get MySQL to use 97% cpu, and this is when it gets stuck and stops responding. This is hardly a desirable situation with a server and we are considering switching to a different SQL server, but I'm still trying to tweak MySQL, or just make an upgrade. My major concerns are: stability, compatibility, performance - especially with large databases, and anything else you find important. Many thanks!, Boaz. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: kde2 (1.92)
[EMAIL PROTECTED] wrote: > kde2 seems to have learn too much from microsoft. > when I start it, it gives me a picture of the dragon > and a status bar. it can noy be lowered and takes about 10 minuts to > disapear ( if i do not kill it before ). that's anoyoing . You need more RAM or better CPU, I assume (yeah, I know it's a stupid answer). Takes 15-20 seconds here, and it also depends on what programs you had running when you logged off KDE last time (this is the stored session). Notice that GNOME 1.2's startup screen is a rip-off of MacOS's one. > but now if i type just 'xt' it searches the internet for me. who wanted > that ? You might try creating shortcut scripts in your ~/bin/ directory. > i ran away from microsoft because of it. I ran away from Microsoft because of instability and because Linux offers you much more to explore and tweak. One thing is won't bash Microsoft about is the UI. They've got people there who know the job, and IMHO they do it good. Windows icons look better than GNOME's (TigerT is great, but his icons are often too cartoonish and colorful). KDE's art team provides a very good competition on that matter. > and a sujjestion i have : it would be nice if they would have let me > use shift-left-click to iconify/deiconify ( that option does not exist > now ) Sawfish allows you to do any sort of crazy keyboard bindings and actions you'd ever wish. Then again, Sawfish has it's own serious drawbacks (slow menus, flaky windows positions, no Unicode titles unlike KWM). -- Best regards, Ilya Konstantinov = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: ASF Video On Linux
> ôåôåá éáâðé wrote: > > Anybody knows a Video Player which can play ASF video files on Linux ? ASF is a proprietary Microsoft container format for various media streams. Usually the codecs used for the video streams are proprietary too. It's far beyond stuff a "video player" does, and there isn't much chance it'll run natively ever soon. Also, I heard WINE cannot play the video streams reliably yet (only WMA audio) with Microsoft's MediaPlayer. -- Best regards, Ilya Konstantinov = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
kdesupport install failure
Hi I tried to install kde2-beta3 and i have succeded to install all the packages except kdesupport. I get all this "removal of ... ... no such file or directory..." messages. Maybe because of this i can't run apps like kpm, kisdn etc... Does someone know how to fix it ? TIA Ishai = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Linux Myths
VERY old news.. next! Hetz Constantin Eizner wrote: > > http://www.microsoft.com/ntserver/nts/news/msnw/LinuxMyths.asp > > = > To unsubscribe, send mail to [EMAIL PROTECTED] with > the word "unsubscribe" in the message body, e.g., run the command > echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Linux Myths
http://www.microsoft.com/ntserver/nts/news/msnw/LinuxMyths.asp = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: your mail
Hi, Ira! On Wed, Aug 02, 2000 at 11:12:38AM +0300, you wrote the following: > > what's wrong with configurating the linux machine as a router, define it > > as the default route for all machines on the LAN, and define the network > > router as the default router of the linux machine? then, define on the > > router that the route to that class-C subnect is the linux machine? > > > > this doesn't look harder to configure then configuring (and maintaining) > > the network without the linux box in the middle... > > because you have the ONE class C to handle, the linux has to have > addresses from the same class C on both NICs but the net route and the > default route go to different interfaces, then the router needs a > special config for all the addresses it thinks are broadcastable on the > LAN are actually all routable through only one address in that subnet, > which is hard to do unless you know the router well (and not all routers > are as flexible as Cisco, and not all sysadmmins know how to cinfig the > cisco, and not all ISPs give you the password to the router, and not > all ISPs know HOW to config the router for non standard topologies) Why? Just use RFC1918 addresses for the LAN between the linux box and the router. E.g.: the outer interface of the router is 111.222.33.44, the inner is 192.168.1.1, the outer interface of the linux box is 192.168.1.2, and the inner is 123.123.123.1 if the class C that you've been assigned is 123.123.123.0/24. Or you can take advantage of CIDR and further subnet the class C, thus creating two networks, one would be the internal network, and the other would consist of the outer interface of the Linux box and the inner interface of the router. Although I see no reason to waste addresses like that. -- Alex Shnitman| http://www.debian.org [EMAIL PROTECTED], [EMAIL PROTECTED] +--- http://alexsh.hectic.netUIN 188956PGP key on web page E1 F2 7B 6C A0 31 80 28 63 B8 02 BA 65 C7 8B BA /real/ programmers dd if=/dev/dsp of=a.out and whistle. -- Gaal Yahas = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
kde2 (1.92)
hi I do not know who to send suggestions about kde2 but: kde2 seems to have learn too much from microsoft. when I start it, it gives me a picture of the dragon and a status bar. it can noy be lowered and takes about 10 minuts to disapear ( if i do not kill it before ). that's anoyoing . other thing is that before, i used to use alt-f2 to exec command and could type an alias ( i.e. i type 'xt' which is short for /usr/.../xterm -fn ... ) but now if i type just 'xt' it searches the internet for me. who wanted that ? i ran away from microsoft because of it. and a sujjestion i have : it would be nice if they would have let me use shift-left-click to iconify/deiconify ( that option does not exist now ) regards erez. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
ASF Video On Linux
Title: ASF Video On Linux Anybody knows a Video Player which can play ASF video files on Linux ? === = Evgeny Popov = [EMAIL PROTECTED] = = Water Management SCADA Centers Developer = = ELECTRICAL & MECHANICAL SERVICES = = SUBSIDIARY OF MEKOROT WATER CO.LTD =
RE: your mail
On Wed, 2 Aug 2000, fredy wrote: > The problem is that I have other servers like an FTP server and a mail > server + a pcanywhere workstation which I want to protect, they all have > real IP's cause they are accessed from the internet world wide, they do not ahh. then say you need a DMZ! in such cases I usualy let the machines protect themselves. stick them on the same LAN, give them each an IPchains script opening only the ports you absolutely can't do without and there you go. any other config will take a reconfig of the router, which like I said, your ISP may not be able to provide for lack of knowledge, and if the machines inside the DMZ don't have their own packets filters anyway, they may be a danger to one another (especially if they trust eachother too much), so crack one and you crack them all. with packet filters on each they are each its own firewall, and your main one is no longer a single point of failure either. ofcourse I'm sure not the entire list will agree with me, but that's how I would have done it :) -- Ira Abramov, GNU/Linux advocate. (@- //\ "Akamai, Google, MicroSoft, Sun, Oracle, Intel, NASA, Sony, v_/_Python, JPG, PNG - CS masturbation is changing the world." -- C.S. explaining her views on masturbation to Linus, 3/7/2000 = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: your mail
On Wed, 2 Aug 2000, guy keren wrote: > what's wrong with configurating the linux machine as a router, define it > as the default route for all machines on the LAN, and define the network > router as the default router of the linux machine? then, define on the > router that the route to that class-C subnect is the linux machine? > > this doesn't look harder to configure then configuring (and maintaining) > the network without the linux box in the middle... because you have the ONE class C to handle, the linux has to have addresses from the same class C on both NICs but the net route and the default route go to different interfaces, then the router needs a special config for all the addresses it thinks are broadcastable on the LAN are actually all routable through only one address in that subnet, which is hard to do unless you know the router well (and not all routers are as flexible as Cisco, and not all sysadmmins know how to cinfig the cisco, and not all ISPs give you the password to the router, and not all ISPs know HOW to config the router for non standard topologies) then add on top of that that the ranges for port filtering of machines inside and outside the firewall are on the same subnet and therefore non-consecutive, broken subnets, and you see you have X2 or X3 the number of rules in IPchains too, which is an additional headache (maybe netfilter solves that with propper ACLs?). in the end, like I said, I gave up and just masquaraded the subnet, even though it had legal IP addresses. it's also a tad safer if you ask me, to have a one way access from the inside guaranteed, with NAT you can't accidently have random packets passing through unless the firewall is compromised. -- Ira Abramov, GNU/Linux advocate. (@- //\ "Akamai, Google, MicroSoft, Sun, Oracle, Intel, NASA, Sony, v_/_Python, JPG, PNG - CS masturbation is changing the world." -- C.S. explaining her views on masturbation to Linus, 3/7/2000 = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: your mail
On Wed, 2 Aug 2000, Ira Abramov wrote: > > I have a question. > > I have a Linux based firewall, 2 NIC's. > > I need to use it to protect a class C subnet of real Internet computers. > > Does anyone have an idea of how to do that ? > > I had that headache, and Ididn't care to solve it in any way other than > masquarade the addresses anyway. you could do a host-by-host routing > table but it will confuse the machines inside the network. what's wrong with configurating the linux machine as a router, define it as the default route for all machines on the LAN, and define the network router as the default router of the linux machine? then, define on the router that the route to that class-C subnect is the linux machine? this doesn't look harder to configure then configuring (and maintaining) the network without the linux box in the middle... guy "For world domination - press 1, or dial 0, and please hold, for the creator." -- nob o. dy = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: your mail
On Wed, 2 Aug 2000, fredy wrote: > I have a question. > I have a Linux based firewall, 2 NIC's. > I need to use it to protect a class C subnet of real Internet computers. > Does anyone have an idea of how to do that ? I had that headache, and I didn't care to solve it in any way other than masquarade the addresses anyway. you could do a host-by-host routing table but it will confuse the machines inside the network. are they not all on DHCP? could make your life easier. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: RFC: Backup Solutions
Gavrie Philipson wrote: > > Schlomo Schapiro wrote: > > > > Hi list, > > > > I would like to hear comments about commercial Linux Backup Solutions (for > > a mixed Linux/Windows network). > > Today, I found a very nice backup solution that works with Linux. It's > called TapeWare (www.tapeware.com). It supports Linux and Microsoft both > as servers and clients. You can back up Windows/Linux workstations > remotely. It supports autoloaders, etc. In short: it looks like a > serious package. They have a 30-day evaluation version for download. [snip] Well guys and gals, Forget about TapeWare. The product NovaNet 8 that Schlomo Shapiro mentioned is the same as TapeWare -- it's an OEM version of it! I found it out by installing both demo versions, and noting they're exactly the same! The only funny this is that NovaNet is *more expensive* (though not significantly) than TapeWare. Anyway, the package is very nice, but it hangs all the time. It uses SysV IPC, and the semaphores hang all the time: Only ipcrm can fix the problem. Stay away from both packages (yes, the bugs are also the same ;-) IMO, a backup solution must be reliable above all, and hanging in the middle of backup doesn't seem reliable to me. This package might be great in its original (Novell, Windows) versions, but the Linux version is obviously not grown up yet. And in case you're wondering -- this problem is mentioned in the bulletin boards on their website, and there's no fix for it yet. Caveat emptor! Gavrie. -- Gavrie Philipson Netmor Applied Modeling Research Ltd. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
RE: pinstripe
No, it isn't here. Does somebody know when 2.96 (or something like this) will be released ? If it already takes place in new RedHat beta ... === Felix A. Shvaiger mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Original Message- From: Ira Abramov [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 01, 2000 3:35 PM To: FLiCK Subject: RE: pinstripe On Tue, 1 Aug 2000, Felix Shvaiger wrote: > I know what is GCC !!! > The question is what is 2.96 . > Current release is 2.95.2. > Am I right ? > And I can not get 2.96 from www.gnu.org or mirrors. > If I am wrong, give me exact URL for download, please. ftp://ftp.iglu.org.il/pub/GNU/gcc/ should have it if it's out and stable, otherwise I would not touch it. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
RH 7.0
any one know of a mirror with RH 7.0 beta ? = To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
