Another old SCSI request

2010-06-01 Thread Andre Renaud
Hello,
A few months ago I asked on this list if anyone had any older SCSI gear.
I received some responses and am now sorted on that front. However now I
am on the look-out for some older SCSI differential (HVD) equipment.
Either a hard disk or a tape drive would be perfect, but failing that
I'd accept any HVD device at all.

Does anyone have any of these floating around? Please contact me
off-list if you do.

I hope this isn't too far off topic - it peripherally relates to Linux
via the Linux-based SCSI device we are developing.

Regards,
Andre



Re: Another old SCSI request

2010-06-01 Thread Andre Renaud
Steve Holdoway wrote:
 On Wed, 2010-06-02 at 13:12 +1200, Andre Renaud wrote:
 Hello,
 A few months ago I asked on this list if anyone had any older SCSI gear.
 I received some responses and am now sorted on that front. However now I
 am on the look-out for some older SCSI differential (HVD) equipment.
 Either a hard disk or a tape drive would be perfect, but failing that
 I'd accept any HVD device at all.

 Does anyone have any of these floating around? Please contact me
 off-list if you do.

 I hope this isn't too far off topic - it peripherally relates to Linux
 via the Linux-based SCSI device we are developing.

 Regards,
 Andre

 I've got some low voltage diff stuff lying around that may or may not
 still work...

Thanks for the offer Steve, but unfortunately I need the older
high-voltage differential equipment.

Thanks,
Andre


Old SCSI Hard-disk wanted

2010-03-28 Thread Andre Renaud
Hi,
Does anyone have an older SCSI hard disk (SCSI-2 preferrably). One of
the ones with a 50-way IDC connector (Similar to the 40-way parallel IDE
connectors prior to SATA). I'm more than happy to pay for it.

I've tried to find them on trademe, but they are just too old for people
to bother I think.

On a linux related front, we need this to test our Linux based SCSI device.

Please contact me off-list.

Regards,
Andre


Re: Ubuntu CDs In the CBD

2006-06-21 Thread Andre Renaud
I can probably get you the 6.06 CDs if you want - we're in the
PriceWaterhouse Coopers building, on Armagh St.

Andre

Ben Devine wrote:
 Hi all,
 I was wondering if anyone had any Ubuntu CDs in the CBD area.
 I would be willing to swap a dollar or two for it.
 
 Cheers
 --Ben Devine


-- 
Bluewater Systems Ltd - ARM Technology Solutions Centre

   Andre Renaud Bluewater Systems Ltd
Phone: +64 3 3779127 (Aus 1 800 148 751)Level 17, 119 Armagh St
Fax:   +64 3 3779135PO Box 13889
Email: [EMAIL PROTECTED] Christchurch
Web:   http://www.bluewatersys.com  New Zealand


Re: help desk system for gentoo

2005-07-11 Thread Andre Renaud
If you're looking for a simple bug tracking system, try out mantis
http://www.mantisbt.org/. I don't thinkg it does time tracking, but it
does all the other stuff (including ldap authentication), and is
certainly very easy to setup.

Andre

On Tue, 2005-07-12 at 14:19 +1200, Maurice Butler wrote:
 Hi,
 I have just started managing a network for a large organisation that is
 about to get bigger.
 All ready running Linux, Mac (os x), windoze.
 Currently the IT request are written into an exercise book - when it can be
 found.
 I would like something like bugzilla to track the request, provide feedback
 to users and track time spent servicing request etc.
 
 Essential that authentication be able to tie into ldap so users logged on
 the network can use the system transparently.
 
 Thanks Maurice
 
-- 
Bluewater Systems Ltd - ARM Technology Solutions Centre

   Andre Renaud Bluewater Systems Ltd
Phone: +64 3 3779127 (Aus 1 800 148 751)Level 17, 119 Armagh St
Fax:   +64 3 3779135PO Box 13889
Email: [EMAIL PROTECTED] Christchurch
Web:   http://www.bluewatersys.com  New Zealand



signature.asc
Description: This is a digitally signed message part


Re: Asterisk PBX

2005-06-26 Thread Andre Renaud
I've used Asterisk a bit, and it certainly seems very suitable for
small/medium businesses with a handful of phone lines. The VOIP phones
are a little bit pricy, but you can get quite nice ones for around the
$150 mark. The FXO devices are around the $30US mark.

The drawback is probably the Telecom approved aspect - the FXO cards I
brought were not approved, so can't be used on Telecom networks
(although apparently can be used with Clear, which is what we do).  They
will actually work fine, but nobody has paid for the Telecom approval
(there may be something in them that is out of spec, but I can't find
the reference to it at the moment).

Andre


On Mon, 2005-06-27 at 12:25 +1200, Nick Rout wrote:
 I am toying with the idea of not buying into a new PBX system for the
 office. Presently I am sharing premises with a bigger business, the
 present PBX is theirs and thay are looking to replace it at enormous (it
 seems to me) cost.
 
 I have three telecom lines, one is for fax, and two voice. I know that
 to interface to them i will need some hardware. From there i am not sure
 whether i should do voip within the office (which will mean buying voip
 phones) or use standard phones (which i assume means more POTS/computer
 hardware). 
 
 Can anyone give me some pointers to suitable NZ telecom approved
 compatible hardware?
 
 OTOH maybe I should look for some aging key phone system on trademe?
-- 
Bluewater Systems Ltd - ARM Technology Solutions Centre

   Andre Renaud Bluewater Systems Ltd
Phone: +64 3 3779127 (Aus 1 800 148 751)Level 17, 119 Armagh St
Fax:   +64 3 3779135PO Box 13889
Email: [EMAIL PROTECTED] Christchurch
Web:   http://www.bluewatersys.com  New Zealand



signature.asc
Description: This is a digitally signed message part


Re: Ratz!

2005-06-23 Thread Andre Renaud
On Fri, 2005-06-24 at 15:49 +1200, John Carter wrote:
 http://slashdot.org/article.pl?sid=05/06/24/024923

I think you're missing a character there
http://slashdot.org/article.pl?sid=05/06/24/0249231

Andre





signature.asc
Description: This is a digitally signed message part


Re: OEM X100P - Suitable for Asterisk

2005-06-01 Thread Andre Renaud
On Thu, 2005-06-02 at 15:29 +1200, Hadley Rich wrote:
 I have a spare OEM X100P - FXO PCI Card[1] (Digium compatible clone) from 
 digitnetworks which I thought I'd offer to the list before it went on 
 Trademe. It's worth $50 to me.
 
 I bought it as a set of two but I only really need one, so now I am selling 
 the other. It hasn't been used.
 
 If anyone is interested in having a play with Asterisk -- I'd recommend it, 
 it's fun and useful too :)
 
 I'm in Timaru so if anyone wants it tomorrow I'm coming up to CHCH to pick up 
 the mother in law otherwise you can shout for the courier at a later date.

I've ordered the same combo from Digitnetworks just the other day, but
it is going to take an age to get here due to another part being
delayed, so I'd be quite interested in buying this off you - where
abouts in Christchurch will you be when you come up?

Andre



signature.asc
Description: This is a digitally signed message part


Re: Home on a FAT partition

2005-02-20 Thread Andre Renaud
 I'm wondering about putting my entire home directory on a FAT partition, and 
 pointing Windows' My Documents folder at the same partition, so that files, 
 pictures etc. stored under one OS are seamlessly usable under the other.
 
 Is this just a Very Bad Idea, fraught with terrible danger? I'm aware that I 
 would not be able to hibernate (suspend to disk) Windows, as that doesn't 
 unmount the FAT partition. When Windows is restarted, it will simply ignore 
 any 
 changes made by Linux in the meantime.

In general this is a bad idea, you'll have all kinds of problems with
permissions, and probably other things too. Since most of these problems
are only for the root of your home directory, the solution that I've
used in the past is to just mount your C:/My documents directory
somewhere on linux (/windows, /documents etc...) and then put symlinks
in your home directory to the relevant parts of it. So if you've got my
documents/music, you can now have /home/user/music as a symlink to it
etc a bit more maintenance, but not too hard.

Andre




RE: Cheap way to get into embedded linux

2005-01-04 Thread Andre Renaud
The PSU is a standard wallwart kind of plug pack - it puts out 7.5v dc @
100mA, so you'd probably need something in between this unit and a car
power supply. It doesn't have audio, although you could use a USB audio
card. However I think the CPU would be too underpowered for MP3 playback
if that is what you had in mind. Could play raw audio happily (I
believe, haven't actually got a USB audio card to confirm that).

Andre

On Mon, 2004-12-27 at 12:52 +1300, C. Falconer wrote:
 Interesting - what do you intend to use it for?
 
 Whats the PSU?
 Does it have audio?
 How powerful is the CPU in effective terms?
 
 I'm thinking car computer btw :)
 
 
 -Original Message-
 From: Andre Renaud [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, 23 December 2004 11:38 a.m.
 To: linux-users@it.canterbury.ac.nz
 Subject: Cheap way to get into embedded linux
 
 
 If anyone out there is interested in having a look at running linux on an
 embedded device, or making a cool linux gadget, there is a router board for
 sale from DSE, the XH1151
 ...
 



Cheap way to get into embedded linux

2004-12-22 Thread Andre Renaud
If anyone out there is interested in having a look at running linux on
an embedded device, or making a cool linux gadget, there is a router
board for sale from DSE, the XH1151
(http://www.dse.co.nz/cgi-bin/dse.storefront/en/product/XH1151) which
the company I work for have recently managed to get uCLinux up and going
on. It costs around $100, and requires a few additional components to be
added (probably around $20 worth). Includes ethernet  USB 1.1 host
support.

Anyway, there are some instructions on the hardware changes required
available at http://www.freelists.org/webpage/w90n740 as well as a
mailing list (subscription details are here:
http://www.freelists.org/list/w90n740 )

This isn't a commercial post BTW - we're not selling these boards
(although we do plan to make up a small kit at somepoint that people can
purchase for hopefully around $150 including a modded board and all the
required software), it is just a community interest kind of project.

Cheers,
Andre




Re: OT: Monitor hardware fixing?

2004-12-06 Thread Andre Renaud
On Mon, 2004-12-06 at 22:15 +1300, Jim Cheetham wrote:
 I've a 21 bottle that doesn't work right (No, it isn't one of the 
 recent set that came via the list). The 'picture', such as it is, is 
 basically a single bright vertical line roughly down the center of the 
 screen. I don't fancy opening the beast up myself, but if anyone knew 
 of a decent repair business who might be prepared to have a go I'd like 
 to hear about it ...

Try Vintron Electronics (possibly Vintronics?). They've repaired
monitors for me before, but they aren't super cheap, and it is often not
worth it, since CRT monitors aren't that expensive these days.

Andre




Re: Screenshot of XDM, KDM or GDM - How?

2004-07-28 Thread Andre Renaud
On Thu, 2004-07-29 at 09:41, Yuri de Groot wrote:
 How does one make a screenshot of the login screen?
 
 Yuri

Haven't tried it, but once it is running, switch to VT1, and then type
(as root):
xwd -display :0 | convert xwd:- screenshot.png

Assuming that root has access to the display when GDM is running - not
100% sure of that.

or Xnest (simpler)

Andre




Re: quick sed script please

2004-07-12 Thread Andre Renaud
On Tue, 2004-07-13 at 13:04, Nick Rout wrote:
 to delete every crlf to a space.
 
 tried 
 
 sed 's/\015\012/ /' dbcontents.txt dbcontents2.txt   and
 sed 's/\015\012/\024/' dbcontents.txt dbcontents2.txt and
 
 
 and some variations. 

You'd think this kind of thing would be relatively simple, but I've had
a look and it is actually a real trick to work with newlines in sed.
Have a look at this page from the faq:
http://www.student.northpark.edu/pemente/sed/sedfaq4.html#s4.25

Andre




Re: smbumount time out?

2004-05-17 Thread Andre Renaud
That indicates that someone has the share open, by the looks of your
prompt, you are probably sitting in /mnt, so your shell process is
holding the directory open. Try:
cd /
umount /mnt

if it still doesn't work, try
fuser -m /mnt
That will list all of the process ids that have the mount point open.

Andre

On Tue, 2004-05-18 at 15:38, Don Gould wrote:
 Is there a time limit between when you can unmount a mounted share and when
 you mount it?
 
 I get:
 
 [EMAIL PROTECTED] mnt]# smbumount /mnt
 Could not umount /mnt: Device or resource busy
 
 Is there a way to force the unmount?
 
 Cheers Don
 



Re: svn complains about libneon.so.23

2004-04-13 Thread Andre Renaud
On Wed, 2004-04-14 at 17:04, Andrew Tarr wrote:
 Jim Cheetham [EMAIL PROTECTED] writes:
  
  Right. If you're on Debian stable.
  subversion is available only on testing and unstable, as far as I can
  tell (from apt-cache policy subversion). So go and have a look at the
  bug-tracking system, and see if you're alone.
  
  -jim
 
 Have done so. I'm alone :'[ 
 
 if there's some assurance from the list that this is worthy of a bug
 report, I'll make one. 
 
 Last time I made a bug report, it wasn't really a bug, and it was
 embarassing... 

This kind of thing is not too uncommon if you are running debian
unstable/testing - it indicates that a new version of a package has been
uploaded, but its dependencies haven't all quite made it through yet.
Normally you can just wait for a few days and they will show up, however
sometimes you could be waiting a while if they have been held up for
some kind of reason (critical bug or something). If you need the
software quickly the easiest thing to do is to build the problem package
(subversion in your case) from source.

Have a look at the source option to apt-get, I think it would be
something like:
apt-get --compile source subversion

If you don't use development tools on your box, then this might require
you to install a lot of software (gcc, libc6-dev, libneon-dev etc...).

Hope that helps - I haven't had to do this for a while, so I could have
missed a step.

Andre



signature.asc
Description: This is a digitally signed message part


OT: RE: Mandrake 9.2 mirrors?

2003-11-06 Thread Andre Renaud
 ---
 Important: This email contains information which is confidential and may
 be subject to legal privilege.
 If you are not the intended recipient you must not read, use, disseminate,
 distribute or copy this email or its attachments. If you have received
 this in error please inform us immediately by return email, facsimile or
 telephone (call collect) and delete this email.

It seems kind of odd having a signature that says you can't read the email
- not to mention that it is written at the bottom where it's the last
thing you'd get to.

Not that this relates to linux in any real way.

Andre



Re: Networking issue

2003-10-22 Thread Andre Renaud
 On Fri, 2003-10-24 at 00:00, Nick Rout wrote:
 yes its been lingering in my mind as to why exactly there is a default
 route set before the gateway to the outside world goes up?

 With IP, you only *need* a loopback interface - all other interfaces can
 be virtual, not physical.

 So the presence of IP implies loopback, which implies a default route to
 loopback. The inside world is always present - the outside world is
 not.

 When you install new interfaces, it's up to the installer to nominate
 the new default route.

 (Yes, leaving a default route to loopback isn't necesarily that useful,
 but it always works)

I'm not quite sure how this relates to default routes, but pointing your
default route at your loopback device is almost definitely thing wrong
thing to do. There is no need to have a default route at all, if you are
on a small network with no external connectivity you may not have one. So
if you've just got an ethernet card 90% of the time, which is attached to
a single closed subnet, and occasionally dial up via a modem, then you
really should not assign the default route to your ethernet card. Just
don't have one, let pppd sort that out for you.

Andre



Re: Networking issue

2003-10-22 Thread Andre Renaud
 if you've just got an ethernet card 90% of the time, which is attached
 to
 a single closed subnet, and occasionally dial up via a modem, then you
 really should not assign the default route to your ethernet card. Just
 don't have one, let pppd sort that out for you.

 This is a valid workaround, and is appliccable depending on your LAN
 setup.
 For more complex LAN setups it won't work. To do things properly, you'll
 need to fix the problem, and that's your ppp setup.

I'm not quite sure what you mean by work-around. As far as I can tell, the
problem described is that there is default route somewhere pointing to an
IP address on one of his ethernet cards, and then when he connects to the
internet pppd comes along and attempts to re-assign the default route.
Somewhere in here things are getting screwed up. The default route is
basically saying everything that you don't know about, send to this
router. Now if his local ethernet cards are somehow connected to the
internet, then having a default route on them is valid, but that isn't the
case described, so it is invalid. If he has a complex internal network,
with a lot of different subnets, and he doesn't want to statically assign
a route to each one, then he should run a routing protocol such as RIP,
OSPF, or IGRP. Using the default route as a way of avoiding lots of static
routes is not the correct thing to do - that is the whole point of routing
protocols. The solution I provided isn't a work-around, as there doesn't
seem to be a problem with ppp (except that it is exposing the flaw in his
network config), it is the correct solution - unless I am misunderstanding
the problem?

Cheers,
Andre



Re: Networking issue

2003-10-22 Thread Andre Renaud
 The LAN setup is
...
From the Options Server (10.0.0.1) if I start ppp0 (WVDIAL) and ping my
 ISPs
 DNS server (203.97.33.14) it tries to ping from 10.0.0.1, not
 203.isp.dhcp.address and the end result?

 Destination host unreachable.
 Destination host unreachable.
 Destination host unreachable.
 etc etc etc ad infinitum.

 Now, here's the way I got it to go...  Kinda rudimentary but effective

 ifconfig eth0 down
 /etc/rc.d/rc.firewall
 wvdial
 ifconfig eth0 up

 This, as you can imagine, is a royal pain in the ass if the modem should
 get
 disconnected while I'm 400+ kms from home, and wife knows little/nothing
 about linux to correct the issue...  it's a big toll call talking her
 through the many steps...

When you say tries to ping from 10.0.0.1 do you mean it tries to send
the ping out the 10.0.0.1 card, or tries to send it out the modem, but
with a source address of 10.0.0.1?

Can you go through the broken setup, and once it is connected, run:
netstat -rn
and post the output?

Andre



Re: Networking issue

2003-10-22 Thread Andre Renaud
 Kernel IP routing table
 Destination Gateway Genmask Flags   MSS Window  irtt
Iface
...

This line here:
 0.0.0.0 10.0.0.10.0.0.0 UG   40 0  0
eth1

is basically saying that the default route is to go to eth1, the 10.0.0.1
card. I'm assuming (anyone know the correct answer here?) that pppd does
not override the default route if it sees that you already have one. The
simplest solution is probably to find your ethernet config setup (what
distro are you using) and remove the default route setting for eth1. You
can do this temporarily till the next reboot by running:
route del -net default gw 10.0.0.1

Andre




Re: Networking issue

2003-10-22 Thread Andre Renaud
 this is going in circles. i think that conclusion was reached yesterday,
 or so.

 no criticism of you Andre :-)

 volker's posts were most informative on problems with pppd not setting a
 default route if one was already present.

Sorry about rehashing old stuff, I got a truckload of spam yesterday, and
skipped a page or two of emails to get by them - so I seem to have missed
a large chunk of this discussion.

My mistake,
Andre



Re: OT: errant keyboard behaviour

2003-10-21 Thread Andre Renaud
 Todays useless bit of information.
...
 some keys are inhibitor keys: t, in conjunction with left-shift,
 inhibits the disply of both itself, and vfr45 and b

I get the same sort of behaviour on my Compaq USB keyboard. The only thing
I can think of is that it has to do with the underlying circuitry of the
keys?

Andre



Re: why no tv on tvout?

2003-10-06 Thread Andre Renaud
 on my gateway laptop, graphics chip s3 savage ix/mv i have tvout. xfree
 4.3. running at 800x600 (ie closish to pal). this works fine, and shows
 the desktop, although its not that sharp (surprise surprise). using
 composite video (tv has no s-video in, lappie has no s-video out)

 however when I play a movie file using xine or mplayer, either full
 screen or windowed, it just shows a blue expanse, like a windows BSOD
 but without the informative messages.

 any ideas whats going on here? i have tried ntsc and pal output, and two
 different movie files (one .avi and one .mov)

 both play fine in the lcd screen attached to the laptop, but
 unfortunately it ain't 29 inches and the viewing angle is only so-so.
 also to get it close enough to the stereo to plug in the sound it is too
 far away from the sofa to be seen at all!

The blue screen is related to using the Xvideo extension. Xvideo (xv)
allows software to write directly to video memory data that need colour
space conversion (ie: YUV data instead of RGB). The blue window is what
X-Windows uses in its own internal memory (I'm not too sure about that
side of it). Most modern video cards can do all kinds of this stuff in
hardware, which is obviously faster. It would seem that your video card
doesn't support xv on the second head (tv-out) - I think this is quite
common. To confirm if this is the problem, try running mplayer as:
mplayer -vo x11 filename.avi
That will force it to do the colour conversion in software. If that works,
then it may be okay to just use that when you want TV-out (Since you're
probably not using the laptop for other things at the same time, so
wasting some CPU doing colour conversion isn't a big deal), or possibly
there are some different drivers to help you.

Andre



Re: mail co-op? (was Re: unix server co-operative?)

2003-09-29 Thread Andre Renaud
 I'd settle for a decent stable long-term email address that I can access
 using secure POP/IMAP. Maybe something easy like [EMAIL PROTECTED] That
 way, I don't need to pay for my own domain name, and when I change ISPs
 (which looks like it will happen soon, given my current ISP's behaviour)
 I don't lose my email address(es).

 If a bunch of us joined together, it would be fairly cheap, no? Is it a
 wise use of CLUG funds to set something like this up and charge, say,
 $1/month ? (We're not exactly scraping the bottom of the barrel ATM).

I definitely like the idea of a geek-supported secure email system, but
the problem is to do all of the features that people want (SSL
pop/imap/smtp/webmail, pgp, ssh? etc...) would probably require
telehosting your own box (I can't think of any ISPs which offer all those
services), and telehosting is not cheap, even if 50 clug members joined
in, I doubt $50/month would cut it for the bandwidth etc let alone
hardware. The only way it would be feasible would be if the clug were able
to get some kind of discount somewhere (perhaps there is a member who can
get cheap rates from their employer?).

Having said that, I think it is a decent thing to look into.

Andre



Re: mail co-op? (was Re: unix server co-operative?)

2003-09-29 Thread Andre Renaud
 in, I doubt $50/month would cut it for the bandwidth etc let alone
 hardware. The only way it would be feasible would be if the clug were able

Having said that, after a bit of searching for colocation on google, it
turns out that $100/month actually would cut it at a few places (I have
never used either of these providers, they just came up first in the
search):

http://www.neuron.net.nz/internetservices/colocation/
http://www.win.co.nz/price.sql

Andre



Re: mail co-op? (was Re: unix server co-operative?)

2003-09-29 Thread Andre Renaud
 does a mail server need pgp? isn't that handled by a client?

That was really for the webmail, but as someone else mentioned, it may not
be appropriate to have webmail with pgp.

 IMHO, ssh yes, as people will want to set up their procmail filters.
 this is assuming people have imap accounts. you'd want to tie the shell
 down pretty tight to just being able to manage the procmail process.
 don't want people being able to launch ddns attacks

Yeah, I wouldn't think you'd want to give everyone shell access, so some
kind of restricted menu would probably be in order. There are some pretty
cunning things that can be done with jailed environments etc...

 why can't a few of the jetstart owners get together with a dyndns
 account and have a few email addresses like [EMAIL PROTECTED],
 pointed at someone with a 10G monthly limit.

That isn't a bad idea, except it doesn't really scale to more than a dozen
people, and I doubt it is in-line with the jetstart terms and services
(static ips/servers etc)

Andre



Re: passwordless user accounts

2003-09-14 Thread Andre Renaud
This is definitely a cool feature, but unfortunately due to PAM
compatability, it has been removed from the newer versions of GDM. See the
changelog:
http://mail.gnome.org/archives/gnome-announce-list/2003-June/msg00044.html

I'm assuming that since it is removed, there must be someway of
configuring PAM such that it no longer requires passwords for certain
users under certain login conditions (i.e: local X logins), but I haven't
found any references to that yet.

Andre

 Heres a snippit from my own /etc/gdm/gdm.conf

 snip
 LocalNoPasswordUsers=chefu,britches,guest
 /snip

 Still have passwords and ssh keys, but simplifies my gdm login. So for
 my home machine (which is usually logged in anyways) its great.



Re: Debian: reusing apt cache?

2003-09-10 Thread Andre Renaud
 On Thu, 2003-09-11 at 14:48, Jim Cheetham wrote:
 How can I re-use all the wonderful .deb files in /var/cache/apt? Can I
 make them available as an apt-source to other machines?

 You couldn't do something simple (or stupid) like making /var/cache/apt
 a shared directory ---using perhaps NFS or something? Don't know if
 it'll work tho...or even if it's a good idea.

This works pretty well actually. The only downside is that apt complains
about being unable to create a lock file. It still runs fine, but I
wouldn't try run two copies of apt at the same time on different machines,
they might get a little confused.

It is certainly easier than setting up a proxy etc..

Andre



Re: IP Masquerading, Is this ok?

2003-08-14 Thread Andre Renaud
 echo 1 /proc/sys/net/ipv4/ip_forward
 iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

 You can see I am using an dial up connection to connect to the internet.

 The question is this.  Am I leaving a really big security hole by doing
 things this way?  Or is this good enough for a home user on a dial up
 connection.

I would really recommend using a more advanced setup, this one doesn't
give you any real protection. The simplest NAT/Firewall system I've found
is firehol: http://firehol.sf.net.
It is a single bash script, and a really easy config file. You can pretty
much just take their example and use it directly for your situation, since
it is fairly trivial.

Andre



Re: Realtime firewall notification?

2003-08-14 Thread Andre Renaud
 Does anyone know of a simple to configure notify app that uses
 iptables? I'd even like something that can put up a dialog box
 and play a sound! (like a dog barking!)

I'm not entirely sure I know quite what you're after, but if you want to
find out whenever something hits your firewall that you haven't allowed a
rule for (either outgoing or incoming), then all those details are
normally logged with syslog. There are loads of tools that can monitor
syslog entries, and do various things like email you, or run an arbitrary
program etc...

There are probably things that interface directly with iptables, but using
a syslog monitor is a lot more generic, as you can get it to alert you
about all kinds of other useful things.

I can't think of any products off the top of my head, but a quick
freshmeat search revealed:
http://caspian.dotconf.net/menu/Software/LogDog/
http://swatch.sourceforge.net/
http://69.56.132.179/~ury/

Hope that helps,
Andre



Re: Toy library software

2003-07-05 Thread Andre Renaud
This may be a bit late now, since it is already Sunday. But I've got
webspace you can use with all those features.

Give me a call when you've got it done Tim, and I'll pop it up.

Andre

On Wed, 02 Jul 2003 11:44:03 +1200 (NZST)
Tim Wright [EMAIL PROTECTED] wrote:

 If someone gives me access to a server with postgresql and apache and
 php4 attached to the web (that's not hidden behind the university
 firewall:) I'll be happy\ldots


Re: truncate file with shell

2003-06-23 Thread Andre Renaud
 Is there a shell command which can truncate a file to the given number
 of bytes? It would need to work with large files (i.e.  2GB).

Have a look at split.

Andre


Re: making use of old equipment

2003-03-22 Thread Andre Renaud
 A little trial and error should fix the problem.  If you can get the
 bios to see the HDD as say a 500 MB drive then you can get the kernel
 loaded. Once Linux is running it by-passes the bios and sees the drive
 as it actually is, 10 gig.

One thing to note is that the kernel must be within the first 500MB, so
generally you create / (or /boot) as the first partition on the disk (say
100MB if it is /, or 10-20MB if /boot), and then partition the rest how
you like

Andre


Re: Debian Install Problems

2002-12-21 Thread Andre Renaud
 Request_Module[Block-Major-3]: Root fs not mounted
 VFS: Cannot Open root device 03:41
 kernel panic: VFS: Unable to mount root device on 03:47

It looks like your root device has changed - ie: You installed onto hda1,
but on the new computer it is now hdb1 or something. Make sure the hard
drive is detected in the same place as on the old system (primary master
or whatever)

Hope that helps,
Andre



Re: Debian Install Problems

2002-12-21 Thread Andre Renaud
A better way to do this is to boot once using the root=/dev/hdb1 (or
whatever) and then use the rdev command to change the root device in
your kernel. I think you use it like:
rdev /dev/hdb1 /boot/vmlinuz
that will change /boot/vmlinuz to use /dev/hdb1 as its root device.

Andre

 It is possible to change this on an existing installation, even if you
 can't connect it to the original install place.
 
 First step is to pass the kernel your new root filesystem location. This
 is done via the kernel command line, in LILO just append whatever
 options you want after your image name. (I don't recall how to do the
 same thing in GRUB, but it will be possible..)
 
 The option you need to pass in this instance is `root=fulldev`
 (without quotes), where fulldev is either the major:minor numbers of
 your new root filesystem, or the full device path (ie, /dev/hda1). 
 
 You'll also need to pass an option to shortcut the boot process and just
 give us a root shell. This option is `init=/bin/sh` (without quotes).
 
 The kernel should boot, and where you'd normally see init load, you'll
 be dumped out to a prompt like such: (none):#.
 
 Before you can fix up the remounting of filesystems, you need to remount
 the root filesystem as read-write. This is because the kernel always
 mounts the root filesystem read-only. You can remount it with:
 
   mount -o remount -w /
 
 Once remounted, make sure you've mounted any other critical filesystems,
 you'll need /boot, and /etc. Make sure you mount those read-write as
 well. For example, if my /boot is on /dev/hda1, mount it like:
 
   mount -w /dev/hda1 /boot
 
 Now, you'll need to fix up the bootloader's configuration. For LILO,
 edit/etc/lilo.conf and change boot= and root= as appropriate. Re-run
 LILO once you're done.
 
 Lastly, you'll need to change the table used to mount file systems,
 /etc/fstab. Edit each line there to suit the new drive location.
 
 Finally, ensure all your changes are written to disk by typing:
 
   sync
 
 YOU MUST SYNC THE FILESYSTEM BEFORE REBOOTING or your changes will not
 hit the media. Hit Control-Alt-Del, and things should boot normally.