Re: Animations in OpenOffice presentations

2002-11-02 Thread Nick Rout
hmmm mi can see how to insert an animated gif?

I supose its impossible to convert to a gif?

On Sat, 02 Nov 2002 14:42:12 +1300
Vik Olliver [EMAIL PROTECTED] wrote:

 I'd like to include an animation (currently RealPlayer but I think it
 could become MPEG with a little help from ffmpeg) in an OpenOffice
 presentation. Now I know Microsoft's presentation software can do it,
 but I'm beggared if I can find out how to do it in OpenOffice. Can
 anyone offer any advice?
 
 Vik :v)
 
 
 
 



Re: Animations in OpenOffice presentations

2002-11-02 Thread Vik Olliver
On Sat, 2002-11-02 at 21:56, Nick Rout wrote:
 hmmm mi can see how to insert an animated gif?
 
 I supose its impossible to convert to a gif?

Well, I could I suppose, but it'd be an absolutely enormous GIF file!

I'm using some animated GIFs, including one of IBM's 12x17 nanometre
3-input sorter based on cascading CO molecules.

Vik :v)




Re: Animations in OpenOffice presentations

2002-11-02 Thread Nick Rout
I had a lok at the help file for the presentation package in staroffice. it refers to 
inserting a video by Insert|Object|Video, but mine doesn't have that option. Perhaps 
its some sort of compile-in option that the binary download doesn't have??

On Sun, 03 Nov 2002 07:12:56 +1300
Vik Olliver [EMAIL PROTECTED] wrote:

 On Sat, 2002-11-02 at 21:56, Nick Rout wrote:
  hmmm mi can see how to insert an animated gif?
  
  I supose its impossible to convert to a gif?
 
 Well, I could I suppose, but it'd be an absolutely enormous GIF file!
 
 I'm using some animated GIFs, including one of IBM's 12x17 nanometre
 3-input sorter based on cascading CO molecules.
 
 Vik :v)
 
 



iptables

2002-11-02 Thread Maillist
Hi CLUG,

I added these iptables rules to my server/gateway but it makes traffic server go VERY 
slow eg. mail, POP3, SSH. When I removed them it went ok. The idea of the following 
rules is to allow incoming SMTP and HTTP server tarffic but block every other incoming 
connection. 

iptables -A INPUT -s 0/0 -p icmp -i eth0 -j DROP
iptables -A INPUT -s 0/0 -i eth0 -p tcp --dport 80  -j ACCEPT
iptables -A INPUT -s 0/0 -i eth0 -p tcp --dport 25  -j ACCEPT
iptables -A INPUT -s 0/0 -i eth0 -p tcp -j DROP
iptables -A INPUT -s 0/0 -i eth0 -p ! tcp -j DROP

Please help.

Thanks,

Paul





Re: iptables

2002-11-02 Thread Michael Beattie
On Sun, Nov 03, 2002 at 10:09:08AM +1200, [EMAIL PROTECTED] wrote:
 iptables -A INPUT -s 0/0 -p icmp -i eth0 -j DROP

This is the problem. *DONT* do this. dropping ICMP is bad, mmkay? In case
you didnt know, ICMP is the Internet Control Message Protocol. Dropping it,
is like cutting the legs off of a sheep dog. pretty much makes it useless.
ICMP is a LOT more than ping.

Lets recap. *DONT* drop ICMP. it's bad, mmkay?

Mike.
-- 
Michael Beattie [EMAIL PROTECTED]

Contentsofsignaturemaysettleduringshipping.



Re: iptables

2002-11-02 Thread David Zanetti
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sun, 3 Nov 2002 [EMAIL PROTECTED] wrote:

 I added these iptables rules to my server/gateway but it makes traffic
 server go VERY slow eg. mail, POP3, SSH. When I removed them it went
 ok. The idea of the following rules is to allow incoming SMTP and HTTP
 server tarffic but block every other incoming connection.
 
 iptables -A INPUT -s 0/0 -p icmp -i eth0 -j DROP

Firstly, you don't want to drop all ICMP. This will break Path MTU
Discovery, among other things. Path MTU is used by TCP to work out how
large a packet it can send over the entire length of the connection
without sending one larger than the MTU of a single link. 

 iptables -A INPUT -s 0/0 -i eth0 -p tcp --dport 80  -j ACCEPT
 iptables -A INPUT -s 0/0 -i eth0 -p tcp --dport 25  -j ACCEPT
 iptables -A INPUT -s 0/0 -i eth0 -p tcp -j DROP
 iptables -A INPUT -s 0/0 -i eth0 -p ! tcp -j DROP

Since you're running iptables, you can use the statefull inspection
instead of the old semantics on handling existing connections, so try
the following instead:

# Accept all incoming packets which are for (a) established connections
# which we either initiated outwards, or were successfully initiated
# inwards, (b) related packets to such connections (eg, ICMP for Path MTU
# Discovery, ICMP for failed connection attempts, etc..)
iptables -A INPUT -m state --state ESTABLISHED,RELATED -i eth0 -j ACCEPT

# New connections should be passed thru the services chain
iptables -A INPUT -m state --state NEW -i eth0 -j services

# Everything else should be logged and dropped
iptables -A INPUT -i eth0 -j logdrop

# Sevices chain: what services do we accept connections for to this box
iptables -A services -p tcp --dport 80 -j ACCEPT
iptables -A services -p tcp --dport 25 -j ACCEPT

# Log chain: Log the packet, then drop it
iptables -A logdrop -j LOG --log-level warn --log-prefix=[DROP]
iptables -A logdrop -j DROP

Now, if you want to allow another serivce you can just add it to the
services chain, and all will function. This will work equally well on UDP
as it does TCP, with 2.4 you don't have to just open up all your
emperhical ports for UDP. So, if you wanted to add a DNS server to the
box, you could just do:

iptables -A servcices -p udp --dport 53 -j ACCEPT

And you're done. 

- -- 
I know of no technological device at this time that would [prevent
piracy] and if it did exist, it would only be a matter of days before the
[..] manufacturers would have an override piece of equipment on their
machine and you would start from ground zero again.
   -- Jack Valenti, President of the MPAA (1982)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Made with pgp4pine 1.75-6

iD8DBQE9xEnVT21+qRy4P+QRAg1OAJ0U+4OfFESdfTcXJ8SN8yutW6sVNgCfQeX5
dEHZSyY3z2vevPYQYY6JAu4=
=o+Z/
-END PGP SIGNATURE-





Re: iptables

2002-11-02 Thread Chris Hellyar
Hi-ho,

As per Michaels reply...  Dropping all ICMP can cause problems, and
certainly you should accept some ICMP to be polite..

If you're worried about ping floods, and other ICMP nasties..  Here's a bit
from one of my firewall scripts that may help...   Not sure if this is
original or borrowed from somewhere.

# ICMP jump point  Put this somewhere in your mail firewall script...
iptables -N my_icmp# my ICMP rules.
iptables -A INPUT -p icmp -j my_icmp
iptables -A OUTPUT -p icmp -j my_icmp
iptables -A FORWARD -p icmp -j my_icmp

# ICMP Traffic, put this bit after the end of everything...
echo ICMP setup.
iptables -A my_icmp -p icmp --icmp-type 0 -j ACCEPT
iptables -A my_icmp -p icmp --icmp-type 8 -j ACCEPT
iptables -A my_icmp -p icmp --icmp-type 3 -j ACCEPT
iptables -A my_icmp -p icmp --icmp-type 30 -j ACCEPT
iptables -A my_icmp -p icmp --icmp-type 11 -j ACCEPT
iptables -A my_icmp -p icmp -m limit --limit 30/minute -j LOG --log-prefix
Firewall: ICMP 
iptables -A my_icmp -j DROP

This allows some ICMP through (Type 0,8,3,30,11 see below...) but only 30
packets a minute, so ping flooding wont be an issue..

In terms of the big slowdown, type 3 and 11 can cause that problem...

The other thing is that your egress filtering (OUTPUT chain stuff) might be
effecting it, are you running any rules on OUTPUT...  You should be if
you're running a live box, to prevent a breach of your machine creating a
honeypot.

ICMP types for the curious:  You can see there are a few options...

  0 Echo Reply
  3 Destination Unreachable
  4 Source Quench
  5 Redirect
  6 Alternate Host Address
  8 Echo
  9 Router Advertisement
 10 Router Solicitation
 11 Time Exceeded
 12 Parameter Problem
 13 Timestamp
 14 Timestamp Reply
 15 Information Request
 16 Information Reply
 17 Address Mask Request
 18 Address Mask Reply
 30 Traceroute
 31 Datagram Conversion Error
 32 Mobile Host Redirect
 33 IPv6 Where-Are-You
 34 IPv6 I-Am-Here
 35 Mobile Registration Request
 36 Mobile Registration Reply
 37 Domain Name Request
 38 Domain Name Reply
 39 SKIP
 40 Photuris



- Original Message -
From:

 Hi CLUG,

 I added these iptables rules to my server/gateway but it makes traffic
server go VERY slow eg. mail, POP3, SSH. When I removed them it went ok. The
idea of the following rules is to allow incoming SMTP and HTTP server
tarffic but block every other incoming connection.

 iptables -A INPUT -s 0/0 -p icmp -i eth0 -j DROP
 iptables -A INPUT -s 0/0 -i eth0 -p tcp --dport 80  -j ACCEPT
 iptables -A INPUT -s 0/0 -i eth0 -p tcp --dport 25  -j ACCEPT
 iptables -A INPUT -s 0/0 -i eth0 -p tcp -j DROP
 iptables -A INPUT -s 0/0 -i eth0 -p ! tcp -j DROP

 Please help.

 Thanks,

 Paul






Re: iptables

2002-11-02 Thread David Zanetti
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sun, 3 Nov 2002, David Zanetti wrote:

[clip, iptables rules]

Opps, add the following before the established/related line:

iptables -N services
iptables -N logdrop

Forgot you had to create the custom chains before using them :)

- -- 
I know of no technological device at this time that would [prevent
piracy] and if it did exist, it would only be a matter of days before the
[..] manufacturers would have an override piece of equipment on their
machine and you would start from ground zero again.
   -- Jack Valenti, President of the MPAA (1982)


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Made with pgp4pine 1.75-6

iD8DBQE9xE56T21+qRy4P+QRAoqsAKDe7nT6JAZpHOqUMXZ0T6m5y0iZsQCdHJqr
KgM4wYCZSxIW7H9uzTKeVig=
=m9gh
-END PGP SIGNATURE-





Re: internet cafe software

2002-11-02 Thread Sascha Beaumont
My suggestion would be Linux Terminal Server Project (www.ltsp.org),
I've installed it on Debian a few times and it works rather well. 

The contrib page includes a billing system for internet cafe's as well
as a kiosk reset script (no experience with either)

Docs on the billing system can be found here:
http://www.ltsp.org/contrib/ltsp_phpSiCafe-install.html


Sascha


On Fri, 2002-11-01 at 15:04, Tim Wright wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 
 My parents want to set up a couple of computers in their cafe for internet
 use. I was wondering if anyone knew of any (free) software I can use to
 keep track of how long people used the computers...and tell a central
 computer how much each person owes.
 
 tim
 http://www.cosc.canterbury.ac.nz/~tnw13
 
 Quidquid latine dictum sit, altum viditur.
 
 -BEGIN PGP SIGNATURE-
 Version: PGPfreeware 5.0i for non-commercial use
 Comment: Made with pgp4pine 1.75-6
 Charset: noconv
 
 iQA/AwUBPcHhTgccL5A6x/wfEQKv5wCfTi8qbEK/oBxpnuVU6dciD501hIEAoJva
 cHv0JevvLwoRVUOGqWVCDBDP
 =yPl9
 -END PGP SIGNATURE-
 
 





Re: Linux based text messaging

2002-11-02 Thread Sascha Beaumont
The text based ICQ/MSN/Aim/Yahoo/... client CenterICQ supports text
messaging. Not sure how flexible/reliable it is because I rarely use it.

Sascha

On Fri, 2002-11-01 at 19:24, [EMAIL PROTECTED] wrote:
 Quoting [EMAIL PROTECTED]
 From Leo 
 
 I would like to find a free linux based text messaging system as I need to 
 contact friends who live out of town and use cell phones and texting only
 
 Any ideas please