Re: Holy Spam!

2003-10-03 Thread Bill Moseley
On Fri, Oct 03, 2003 at 12:13:28PM -0400, Jon Earle wrote:
 [1] Once the message is posted, how does said newbie receive replies if
 those helping just reply to the list.  The whole policy makes _no_ sense
 whatsoever.

+1

I could not agree more.


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Detect if X11 is sleeping/locked

2003-10-05 Thread Bill Moseley
Is there a way to detect if my screen has blanked?

I have a background script that updates my root window but I'd like it
to first check if the screen has been blanked (from inactivity) and avoid
fetching the remote images when blanked.

Any idea?

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



ssh-add defunct: where's the reaper.

2003-10-06 Thread Bill Moseley
How do programs get reaped from .xsession?

I'm using this (subsection) in .xsession:

$HOME/bin/root_window.pl 
ssh-add  $HOME/.ssh/id_dsa $HOME/.ssh/id_dsa_pine  /dev/null 
exec icewm-session

But I'm left behind with the ssh-add zombie.

Also, if I kill root_window.pl that's left as a zombie, too.

These all show as children of icewm-session, but I assume that's because
of the exec (which replaced .xsession)

 1102 tty1 S  0:00  \_ /bin/sh /usr/bin/X11/startx -- +xinerama
 1115 tty1 S  0:00  \_ xinit /usr/X11R6/lib/X11/xinit/xinitrc -- 
/usr/X11R6/bin/X +xiner
 1119 tty1 S  0:00  \_ icewm-session
 1169 ?S  0:00  \_ /usr/bin/ssh-agent sh 
/home/moseley/.xsession
 1170 tty1 S  0:02  \_ gkrellm
 1186 tty1 S  0:00  |   \_ gkrellm
 1171 tty1 S  0:00  \_ sh /home/moseley/.xsession
 1173 tty1 S  0:00  |   \_ perl MouseRemote.pl
 1174 tty1 Z  0:00  \_ [root_window.pl] defunct
 1177 tty1 S  0:01  \_ gbuffy
 1178 tty1 Z  0:00  \_ [ssh-add] defunct
 1182 ?S  0:00  \_ icewmbg
 1184 ?S  0:00  \_ icewmtray
 1185 ?S  0:02  \_ icewm
14035 ?S  0:01  \_ xterm



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Xinerama and OO and Mozilla

2003-10-09 Thread Bill Moseley
I have two screens side-by-side and when I use OpenOffice or Mozilla
on my left hand screen text will sometimes appear on the right hand
screen.

For example, with OO if I select File-New and then hold my mouse down
and roll up and down the menu (for selecting the type of new document)
the menu text vanishes from the screen and the text appears on the right hand
screen.  

It's like instead of placing the text at position(x,y) it's ending up at
position(x+screen_width,y).

Anyone else see that?

Should I suspect Xinerama code?  My video driver (Matrox G550)?

Why that happens when my Linux-bashing, Windows-loving friend is over I
don't know.


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Local .deb mirror / apt-move

2003-10-09 Thread Bill Moseley
Anyway to have apt-get check another URL first for a package before
downloading?

To avoid downloading packages on setting up a new machine I've actually just
scp'ed /var/cache/apt/archives/*.deb to the new machine from a machine
that already has been setup.

I'm wondering if there's anyway I can just set my internal web server to point to
/var/cache/apt/archives and have apt-get check there first before
fetching the package.

For example, before fetching apache_1.3.28-1_i386.deb from a source
listed in my sources.list, it first tries something like:

http://somelocalmachine/debian/apache_1.3.28-1_i386.deb

apt-move seems more involved than I need -- after all I can still just
use my old way to scp the .debs to where I need them.  And I don't
really want to setup a mirror, just a cache.

Of course apt-move seems to have some nice features, such as only .debs
of installed packages around.

Suggestions?

Thanks,



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] CVS diff: hard vs. soft tabs

2003-10-10 Thread Bill Moseley
On Fri, Oct 10, 2003 at 09:48:34AM -0400, Nori Heikkinen wrote:
 is there some way to open the file in emacs (in which i assumer it was
 originally written; i use vim) and run it through a re-indentder with
 hard tabs on?  or could i do this in vim?

In case this was not mentioned...

Also for your tool box:
:
info expand
info unexpand




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Cell Modem and Linux

2003-10-10 Thread Bill Moseley
Anyone have information on using a cell modem with linux?
It's not for a desktop (i.e. not pcmcia).

What kind of drivers are needed, if any?

Thanks,


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Weather Stations

2003-10-10 Thread Bill Moseley
Actually, there's two parts.  First we need a machine to collect 
data from an inexpensive weather station and then copy (ftp/scp) the 
data to some location every so often.  

Any suggestions for weather stations (a piece of equipment, not an 
online station) that a linux box can talk to?  I assume a serial port
is the interface of choice here.

The second part is for a web site to fetch the data and convert it into
some type of display suitable for a web page.  It would be nice to have
something graphic (even if it is static data -- could use some animated
image to give the effect of the wind speed fluctuating, I suppose ;)

Any ideas?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: ssh-add defunct: where's the reaper.

2003-10-15 Thread Bill Moseley
On Wed, Oct 15, 2003 at 03:33:32PM -0600, Bob Proulx wrote:
 Bill Moseley wrote:
  I'm using this (subsection) in .xsession:
  
  $HOME/bin/root_window.pl 
  ssh-add  $HOME/.ssh/id_dsa $HOME/.ssh/id_dsa_pine  /dev/null 
 
 Tsk, tsk!  You should have a passphrase on your key.

I do have a pass phrase.  It asks me for the phrase when I startx.




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Mutt + Vim tricks (replace Nano)

2003-10-25 Thread Bill Moseley
On Sat, Oct 25, 2003 at 10:58:43PM -0500, Will Trillich wrote:
  | Control-W to toggle wrap mode (which would be toggle paste mode in
  |   Vim)
 
 another approach could be
   :set pastetoggle=F9
 and use F9 whether in insert mode or not...

Oh, that's perfect.  Thanks.  Any reason not to map that to ^W
so I don't have to remember which editor I'm using?

 
  | Control-K to kill a link.
 
 like html? as in all text between  and ? (see :help html)a

No, that's my bad typing.  I meant kill a line.  I find nano nice for
95% of what I'm doing in mail, type, re-justify (^J) and delete lines
(^K).  But that other 5% that vim gives me is really nice.  So I'm
really trying to use vim as if it was nano.  Still, I feel like I'm
using a lot more keystrokes using vim than nano.  I need to learn a lot
more.

 
  | And maybe Control-U to undo
  
  ^U is still there.
 
 eh? by default, ^U scrolls up half a screen. lower-case u is
 the default 'undo' for vi (and vim). and ^R is the default re-do.

That's what my help says, too.  But Ctrl+U right now is deleting the
current line.

Here's something that bugs me.  I often type something like this text
and then below I want to paste in some text.  So, I move down a line,
then middle click the mouse to paste in.  But then I forgot to turn on
paste mode, so I hit Esc and u to undo, but it then undoes not only
what I just pasted but all the text I just typed.

I guess I need to learn to undo just the current paragraph.  I suppose
vim (not gvim) has no idea when I'm typing vs pasting with the middle
button.


 *nix is customizable. if you work hard enough, you might munge
 up enough keybindings in vim to fool the casual observer into
 thinking he's using wordstar.
 
 but then you'll also surprise every vi user on the block into
 not being able to use your editor. and WHEN YOU'RE AWAY FROM
 HOME, you'd have to have your settings with you everywhere you
 go, or be rather confusedly lost.
 
 might wanna consider creating custom keystrokes for your own
 shortcuts and macros, but go ahead and utilize the features vim
 has 'out of the box' without redefining everything.

I could not agree more.  I just need to become efficient enough with vim
to feel like it's not more work than using another editor.  With nano
when I add some text to a paragraph and need to re-justify I just hit
^J.  In Vim I'm hitting Esc+g+q+a+p and then I forget to move back into
insert mode and start typing.  Hard to believe that's how others are
using vim.

 :)
 
 just a thought.

Which I appreciate.  I need all the help I can get! ;)



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: vim syntax

2003-10-25 Thread Bill Moseley
On Sun, Oct 26, 2003 at 05:41:05PM +1300, Paul William wrote:
 Hi
 
 How do I have vim syntax highlighting always on instead of having to
 type :syntax on?

in .vimrc:

  syntax on 

 
 Thanks
 
 Paul
 -- 
 
  .''`. Paul William
 : :'  :Debian admin and user
 `. `'`
   `-  Debian - when you have better things to do than fixing a system
 -- 
 
  .''`. Paul William
 : :'  :Debian admin and user
 `. `'`
   `-  Debian - when you have better things to do than fixing a system

An extra sig?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Mutt + Vim tricks (replace Nano)

2003-10-26 Thread Bill Moseley
On Sun, Oct 26, 2003 at 06:27:11PM -0600, Will Trillich wrote:
 another, better, reason, is that ^W is already used for something
 else. i tried your mappings for a while last night (i've been
 using vi since about 1987, so there wasn't much hope) and darn
 near went mad.

Now you know how I feel.  I've been doing this for weeks! ;)

 curious -- what features does vim have that's got you interested
 in exploring vim: the-modal-editor-from-purgatory?

You mean other than trying to use Emacs first?...

Well, it seems like a nice, powerful text-based editor that I could
extend as needed.  I want to use it for coding (Perl and C).   Not
perfect reason but there's enough vim devotees that I'm curious, too.

Lately, I do more email than anything else so I figured that using vim
for email would be a good way to learn.

And it's really got me curious because I'm sure I'm not using it
efficiently yet -- everyone else can't be pressing this many keystrokes
for simpler operations, I figure. ;)

 quite. i've learned to have a blank line going before i paste in
 some goodies, to make it easier to delete if i've got autoindent
 on (or paste off):
 
   type type type newline
   newline
   paste
   whoops! icky formatting -- esc d { {

Whew.  And it's really 

  esc d shift { { i

See why I miss ^U for undo?  I imagined vim users had keys mapped to do
all those common tasks.

Now is the time I'd like that short-cut to cut all text from here to my
signature line.   esc V (down, down, down) x.  Now, I'm sure I'm doing
that the hard way.

Can you describe your email editing sessions with vim?  

Seems like a simple use of an editor: 

- I prune text (dd is one extra keystroke, esc shift v, down,
  down, down, is also too many strokes) [^K in nano]

- I edit paragraphs and re-justify them as I type [^J]

- I move text/paragraphs up/down.  [^K^K^K move and ^U to paste]

- I paste in text and code examples that I don't want 
  wrapped (and often want indented).

- I trim left over text down to my sig.

Isn't that what everyone does when writing mail?

Thanks,

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: netiquette: CCing on lists

2003-10-28 Thread Bill Moseley
On Tue, Oct 28, 2003 at 11:34:25AM -0700, Monique Y. Herman wrote:
 I'm going to attempt to make this a polite question, rather than a rant
 or flame ...
 
 For those of you who CC people when responding to the mailing list, why
 do you do this?  Is there some benefit to doing so of which I'm unaware?

I cc, but luckily my mailer mutt understands what you want.  That's good
because I can't keep track of what the hundreds (thousands?) of people on this
list wish, and not all of them have smart mailers to set the
Mail-Followup-To header.

Personally, I like the cc.  If I ask a question and someone
takes the time to respond I like to get that message right away
(yes, sometimes there's a delay in debian-user).  And when I reply to
someone I assume they want a response quickly, so I cc.

Is it the cc you don't like or the duplicate mail?  I like the cc's but
I hate the duplicates.  And (also luckily) I run Debian and with a
simple additions to my .procmailrc I no longer have the duplicates:

# kill the duplicates
:0 Wh: msgid.lock
| formail -D 8192 $HOME/msgid.cache

It's the spam that I'm not really that excited about.

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: netiquette: CCing on lists

2003-10-28 Thread Bill Moseley
On Tue, Oct 28, 2003 at 04:51:14PM -0800, Steve Lamb wrote:
 
 You don't have to, the onus is on them to ask, explicitly, in the body 
 of the message that they want a CC.  If they don't ask and you don't send 
 that is their problem.  But sending a CC unasked you're causing unasked 
 work for the person on the other end.  Generally when one does that it is 
 considered rude.

Matter of opinion, as I appreciate the CC.

And since it's one of those things where people have different opinions
I found it easier to deal with it on the one receiving side with procmail
than try to convince everyone else what my desires are.

 Is it the cc you don't like or the duplicate mail?  I like the cc's but
 I hate the duplicates.  And (also luckily) I run Debian and with a
 simple additions to my .procmailrc I no longer have the duplicates:
 
 For me it is the CC.  I get a reply from them and I presume they ment 
 to send it off list.  I then reply.  Then I see the reply on list and 
 realize my reply should have been on list.  However since their reply 
 off-list don't contain the list headers my client (well, not this one, but 
 Sylpheed-Claws and Mutt, both of which I've used in the past week) replies 
 directly to them and not the list.  If I am lucky enough to read the list 
 mail first (unlikely for a variety of reasons) then it goes to the right 
 place.

Hum, I guess I don't have that much trouble.  I posted a question a few
days ago and got a few CC's and responded to each of those back to the
list.

But you must have a point, I guess, because every so often people
complain about getting CC'ed, but you don't often see people complain
about not getting them...




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Exim4 + Exiscan: demine not catching file extension

2003-11-04 Thread Bill Moseley
I'm testing out exim4-daemon-heavy and I have this ACL:

deny  message = $found_extension files are not accepted here
  demime = com:vbs:bat:pif:scr

I created a mail attachemet with mutt and I'm testing like:

   # exim4 -C test.conf -bhc some external IP.1234

and then I paste in a message that has an attachemt within the message:

[munged to bad.xbat from bad.bat to keep the mail server happy]

--ikeVEW9yuYc//A+q
Content-Type: application/x-msdos-program
Content-Disposition: attachment; filename=bad.xbat
Content-Transfer-Encoding: quoted-printable

hi=0A
--ikeVEW9yuYc//A+q--

I then see this, but it does not seem to reject the bat file
extension.

 using ACL acl_check_data
 processing accept
 check hosts = 127.0.0.1:+relay_from_hosts
 host in 127.0.0.1 : 1 : 192.168.1.0/24? no (end of list)
 host in 127.0.0.1:+relay_from_hosts? no (end of list)
 accept: condition test failed
 processing deny
 check demime = com:vbs:bat:pif:scr
 deny: condition test failed
 processing deny
 check demime = *
 check condition = ${if {$demime_errorlevel}{2}{1}{0}}
 = 0
 deny: condition test faile

What can I do to debug this better?

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: configure: error: C++ preprocessor /lib/cpp fails sanity check

2003-11-04 Thread Bill Moseley
On Tue, Nov 04, 2003 at 04:36:14PM +1100, Rob Weir wrote:
  cpp doesn't seem to depend on g++, where I believe cc1plus is installed.
  
  Is this a broken package?  And if so, which one?
 
 There have been on-going reports of cpp being broken in weird ways, but
 this doesn't sound like that.  Maybe cpp really just wants a dependency
 on g++?

That's what I was wondering, but I don't always understand the
dependency links.

I'll query the cpp maintainer.

Thanks,


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Exim4 - current spam setup

2003-11-06 Thread Bill Moseley
On Wed, Nov 05, 2003 at 09:39:15PM -0800, Paul Johnson wrote:
 On Wed, Nov 05, 2003 at 02:30:12PM -0800, [EMAIL PROTECTED] wrote:
  2) What RBL entries (dnslists) are you using in Exim4's ACL list?
 
 bl.spamcop.net, and a couple of ones from rfc-ignorant.org to weed out
 some of the fishy sources.

Which ones from rfc-ignorant.org?

A added a warn test for dsn and postmaster.  Postmaster (and abuse)
wipes out yahoo.com.  Unfortunatelly a lot of people have accounts
at yahoo.

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Debugging network problems

2004-01-21 Thread Bill Moseley
Friend has a Brother Fax/Printer thingy.  It has an ethernet port and it
has this Internet Fax setup (which is not really a fax) where you type
in someone's email address, scan some documents and it emails an image
(tiff format).  It's basically a mail client.

Here's the problem:  He has a pppoe setup.  He's got a DSL modem/router
that does the dialup to the ISP.  AFAIK when you connect to the router
it then connects to the DSL.

He has the machine configured to send to his smtp server at
his ISP -- just like his normal mail account.   He can send a few pages
without any problem.  But if he tries sending a lot of data it doesn't
work. The printer just says Network Failure and that's it.


Placing the print on my LAN and sending documents to my exim server
works perfectly.  So, I think the next step is to use tcpdump or
etherreal to see if his SMTP connection if failing for some reason.

His DSL modem/router is also a wireless switch.  I've tried using
tcpdump and etherreal but I think the switch is hiding the packets from
my machine.

So the question is, in a setup like the above what's the best way to get
in and sniff the packets?




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



SCO: The threat to our national security

2004-01-22 Thread Bill Moseley
Sorry if this is old news or already posted and to those burned out on SCO news.  

Kind of amazing reading, though.

   http://www.osaia.org/letters/sco_hill.pdf

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: mutt and Return-path

2004-01-22 Thread Bill Moseley
On Thu, Jan 22, 2004 at 11:40:02PM +0100, Jan Minar wrote:
 On Wed, Jan 21, 2004 at 01:41:30AM -0500, Mike Mueller wrote:
  Is there significance to the Return-path value?
 
 Basically, it tells the addressee ``Don't reply to the address in the
 `From:' field, but to this one/these, please.''

Sounds more like Reply-to: than Return-path:



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: mutt and Return-path

2004-01-23 Thread Bill Moseley
On Fri, Jan 23, 2004 at 02:07:05PM +, Colin Watson wrote:
 On Thu, Jan 22, 2004 at 11:40:02PM +0100, Jan Minar wrote:
  On Wed, Jan 21, 2004 at 01:41:30AM -0500, Mike Mueller wrote:
   Is there significance to the Return-path value?
  
  Basically, it tells the addressee ``Don't reply to the address in the
  `From:' field, but to this one/these, please.''
  
  See [1]RFC 822, section 4.4.3 for details.
 
 RFC 822 does not say that. It says that Return-Path is intended to
 identify a path back to the originator of the message, and in the next
 sentence explicitly differentiates this from Reply-To. Return-Path is
 more to indicate where bounces would go (although in practice you'd use
 the SMTP envelope sender instead).

Which is where Return-Path comes from.  So it's not really instead.


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



[OT] TCP/IP help needed: MTU Discovery

2004-01-27 Thread Bill Moseley
I'm trying to debug some network problems and I'm confused by what I'm 
seeing.  I'm no networking expert and RFCs often make my head hurt.
Sorry, but this is a bit long, but the question will be:

  Should ICMP Fragmentation needed messages be returned when sending a
  too-large packet with the Don't Fragment bit set to zero?

  I'm trying to determine at which device a TCP connection is failing.
  Basically, who is at fault for the failed connection.

Here's the long Details:

I'm having a problem with SMTP where the client starts off sending small
packets and then sends large (MSS sized) packets.  That's normal for
SMTP, of course.

What's happening is (I'm assuming) the large packets are too big for the
network.  An ICMP message is sent back indicating this, but the sending
mail client doesn't drop its packet size and instead continues to try
and send the large packets.  The connection is finally lost.

It's my basic understanding that the way It should work is:

1) On initial connection smtp server sends back SYN,ACK and includes MSS 
size.  In this case smtp is sending back MSS=1460.

2) client sends packets with Don't Fragment bit set and a payload size
up to the MSS size.

3) a router along the way detects the packet is too big for a segment
and sends back ICMP message saying Destination unreachable and
Fragmentation needed.  Included in the ICMP is the MTU of next hop
which tells the new MTU size to use (which it can then use to figure out
the MSS payload size).

The above sound correct?

Now comes the confusion:

I've used ethereal on two different mail clients.  Outlook and A 
Printer/Fax/Scanner all-in-one device that has a network connection and 
an smtp client.  That device scans the documents like a fax, but then 
sends it as a tiff file via smtp.

Outlook mail client:

It has no problem sending messages.  It sends packets at the MSS size
(1460) and the packets do indeed have the Don't Fragment bit set. An
ICMP packet is returned saying Fragmentation needed and then the
Windows outlook client drops it's MSS to 946 and mail is sent without a
problem.

According to Ethereal, the ICMP message shows that the MTU of next hop 
is zero.  I guess that just means the the router has not implemented RFC 
1191 and not really a problem.  The Windows reduction to 946 seems like 
a good guess, perhaps.


Now the all-in-on printer/fax/scanner:

The connection is setup the same way with the smtp server sending 
MSS=1460.  Unlike outlook, the printer is NOT setting Don't Fragment 
when sending packets to the smtp server.

The printer sends data fine with small packet sizes (it seems to 
send the MIME data one line at a time!).  But then it sends a large 
packet (1460).  

ICMP is returned with Fragmentation needed and the smtp machine starts
sending TCP Duplicate ACKs because that large packet did not make it.

But instead of reducing the MSS size, the client (printer/fax) resends 
the packet with the same 1460 size.  That process continues for a few 
attempts and the the printer gives up because it's no longer getting any 
ACKs back.

So, I'm not sure if the problem is with the printer/fax device or with 
the router sending the ICMP messages.

On one hand the printer/fax mail client is NOT reducing its packet size 
after receiving the ICMP message.

On the other hand, the printer/fax client is NOT setting its Don't 
Fragment bit so it may be expecting that the router will fragment it's 
packets if they are too big.

But I don't know the protocols well enough to know the right answer.  
So, that's my first question.  Is the ICMP message in error since the 
Don't Fragment bit is not set?

The setup is ADSL modem connected to a D-Link NAT/Switch -- it makes the
pppoe connection and then provides NAT'ed internal LAN. The problem, of
course is the source address for the ICMP message just shows 192.168.0.1
which is the D-Link box.  So I have no idea where the ICMP message is
really coming from.  Yet another good reason to use Linux as the NAT
device.

I also remember something about ADSL requiring a smaller MTU size.  The 
printer, of course, has no way to manually adjust the MTU size.  Still 
another reason to use Linux -- in the iptables rules I believe I could 
simple set the reported MSS size at connection to a lower value.  The 
D-Link DI-714 NAT/switch has no way to adjust the MTU.

Thanks,


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Installing Debian Unstable From Scratch

2004-01-28 Thread Bill Moseley
On Wed, Jan 28, 2004 at 04:35:11PM +0100, Sebastiaan wrote:

 pretty simple. Your start is good :). Edit /etc/apt/sources.list and
 replace woody or testing to sarge or unstable, or better, add an unstable
 line to it, like:
 
 deb ftp://ftp.nl.uu.net/debian unstable main contrib non-free
 deb ftp://ftp.nl.uu.net/debian testing main contrib non-free
 deb ftp://ftp.nl.uu.net/debian stable main contrib non-free

I was wondering the other day if you just want to run unstable can you
just use one deb line for unstable?  Or do you need all three?

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Postscript or PDF -- html?

2004-02-01 Thread Bill Moseley
I have a Postscript document.  It was created with MS Publisher.
I can convert it with ps2pdf14 without any problem.  I want to also 
generate HTML.

The document is a double-sided booklet -- with four pages per sheet (two
each side).  So, if I look at the document each page shows two pages
-- for example, page 3 in xpdf shows both page 26 and page 3.  It's a 
good layout for printing, but not for viewing online.

Anyone know of a tool to convert the pdf or postscript to html?

I've seen some pdf2html converters that just create an image out of 
each page using Ghostscript, which is not what I want.  I want the text, 
images and structure.

Publisher (and Word) can generate HTML, but the generated HTML is
nothing I'd want to use.  I don't want all that fancy M$ formatting.


BTW -- I'm more than willing to listen to someone describe how easy all 
this would be in LaTeX (if that's true).  It would be nice to have a 
single input source and be able to generate PDF and HTML for viewing 
on-line, and also Postscript for printing the booklet.


Thanks,

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Postscript or PDF -- html?

2004-02-01 Thread Bill Moseley
On Sat, Jan 31, 2004 at 11:46:54PM -0800, Nano Nano wrote:
 On Sat, Jan 31, 2004 at 11:32:36PM -0800, Bill Moseley wrote:
  Anyone know of a tool to convert the pdf or postscript to html?
 
 http://pdftohtml.sourceforge.net/

Unbelievable.  That's some lame googling and apt-cache searching on my 
part.  I did pdf convert html and pdf2html and a few others.  I guess 
I need some sleep.

Thanks,


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Two Flash questions: audio and extract links

2004-02-04 Thread Bill Moseley
First question is about the audio.  I installed swf-player to play Flash
locally.  The image works but there's no sound.  swf-player/README says:

   - Sound output is handled by SDL, so the target device can be
  chosen by setting the SDL_AUDIODRIVER environment variable.

But I'm not sure what that should be set to.  

Running strace with swf_play does show:

  open(/dev/dsp, O_WRONLY|O_NONBLOCK)   = 5
  open(/dev/dsp, O_WRONLY|O_NONBLOCK)   = 5
  open(/dev/dsp, O_WRONLY)  = 5

Below is more detailed strace output:


Second questions: anyone know a way to extrace out *links* from Flash?
This is needed to spider a site that uses a Flash intro page.



When running swf_play (and audio doesn't work):

[...]
open(/dev/dsp, O_WRONLY|O_NONBLOCK)   = 5
open(/dev/dsp, O_WRONLY|O_NONBLOCK)   = 5
ioctl(5, SNDCTL_DSP_GETFMTS, 0xb5fc) = 0
ioctl(5, SNDCTL_DSP_SETFMT, 0xb5fc) = 0
ioctl(5, SOUND_PCM_READ_CHANNELS, 0xb5fc) = 0
open(/dev/dsp, O_WRONLY)  = 5
ioctl(5, SNDCTL_DSP_SETFRAGMENT, 0xb5c8) = 0
ioctl(5, SNDCTL_DSP_SETFMT, 0xb5c4) = 0
ioctl(5, SOUND_PCM_READ_CHANNELS, 0xb5c4) = 0
ioctl(5, SOUND_PCM_READ_RATE, 0xb5c4) = 0
--- SIGRTMIN (Unknown signal 32) @ 0 (0) ---
ioctl(3, FIONREAD, [0]) = 0
ioctl(3, FIONREAD, [0]) = 0
ioctl(3, FIONREAD, [0]) = 0
ioctl(3, FIONREAD, [64])= 0
ioctl(3, FIONREAD, [32])= 0
ioctl(3, FIONREAD, [512])   = 0
ioctl(3, FIONREAD, [0]) = 0
ioctl(3, FIONREAD, [0]) = 0
ioctl(3, FIONREAD, [0]) = 0
ioctl(3, FIONREAD, [0]) = 0
DEBUG: [27,SoundStreamHead2] tag SoundStreamHead2 (45) ignored
[...]


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Move FAT32 partition to linux

2004-02-14 Thread Bill Moseley
Just to confirm:

I've got this on a laptop:

# fdisk -l

Disk /dev/hda: 20.0 GB, 20003880960 bytes
255 heads, 63 sectors/track, 2432 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

   Device Boot  Start End  Blocks   Id  System
/dev/hda1   *   1 758 6088603+   b  W95 FAT32
/dev/hda224022432  249007+  82  Linux swap
/dev/hda322802401  979965   83  Linux
/dev/hda4 759227912217432+  83  Linux

I have no need for the FAT32 partiton, so is the procedure as simple as:

1) use cfdisk to change the type to 83 Linux and write the partition 
table

2) format:

mkfs.xfs /dev/hda1

3) update /etc/fstab to mount it some place handy.

Missing anything obvious?  Any need to re-run lilo?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Rip DVD audio: TOC for CD?

2004-02-15 Thread Bill Moseley
On Sun, Feb 15, 2004 at 05:26:28PM +1100, Rob Weir wrote:
 On Sat, Feb 14, 2004 at 07:26:26AM -0800, Bill Moseley said
  2) If I extract audio into a large wav file is there a tool that would
  allow me to set track locations when burning the audio?  In other words,
  anyone know of a (GUI?) tool that would make it easy to set track
  locations when I have a single large wav file that contains many
  sections/parts/chapters?  I think what I need is a way to create a CUE
  or table of contents sheet for cdrecord.
 
 You could just split it into multiple .wavs on the track boundries using
 a regular sound editing tool, burn as normal and get one track on the CD
 for each .wav.

Sounds like work.

Assuming that work has already been done when creating the chapters, 
I think I'll write a small Perl script to use lsdvd to list the titles
and chapters, preview a few seconds of each one, and create a
title/chapter list which I then use with mplayer to pull out the
tracks I want into individual wav files.  A case where a GUI might be
nice.

Cheers,



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Packages wedged in sarge - etch upgrade ( and apt-get vs. aptitude)

2007-06-02 Thread Bill Moseley
Trying to up grade a laptop from sarge to etch.  First tried apt-get
dist-upgrade and then tried aptitude dist-upgrade.

Both are stopping when trying to install mozilla-mplayer, it seems:

Aptitude reports:

Errors were encountered while processing:
 mozilla-mplayer

$ sudo apt-get -f dist-upgrade

174 upgraded, 63 newly installed, 6 to remove and 3 not upgraded.
1 not fully installed or removed.
Need to get 0B/87.6MB of archives.
After unpacking 89.2MB of additional disk space will be used.
Do you want to continue? [Y/n] y
Extracting templates from packages: 100%
Preconfiguring packages ...
(Reading database ... 34703 files and directories currently installed.)
Unpacking mplayer (from .../mplayer_1.0~rc1-12etch_i386.deb) ...
dpkg: error processing 
/var/cache/apt/archives/mplayer_1.0~rc1-12etch_i386.deb (--unpack):
 trying to overwrite `/usr/bin/mplayer', which is also in package 
mplayer-586
dpkg-deb: subprocess paste killed by signal (Broken pipe)
Errors were encountered while processing:
 /var/cache/apt/archives/mplayer_1.0~rc1-12etch_i386.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)

Any way to tell it to skip or remove mplayer for now?


Second question -- why does running Aptitude download additional
packages compared with apt-get dist-upgrade?  Do they calculate
dependencies differently?  Seems like there should only be one
dependency tree for the packages I have installed.



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Packages wedged in sarge - etch upgrade ( and apt-get vs. aptitude)

2007-06-02 Thread Bill Moseley
On Sat, Jun 02, 2007 at 11:54:04AM -0700, Bill Moseley wrote:
 Errors were encountered while processing:
  mozilla-mplayer

Hum, well, managed to remove mozilla-mplayer and that seemed to ave
fixed it.  But, I had to remove mplayer in the process, too.

[EMAIL PROTECTED]:~$ dpkg -l | grep mplayer
rc  mozilla-mplayer   3.31+main-1 MPlayer-Plugin for 
Mozilla
ri  mplayer-586   1.0-pre7cvs20060219-0.2sarge1   The Ultimate Movie 
Player For Linux
ii  mplayer-skin-blue 1.6-1   blue skin for mplayer



The laptop is in another location (upgrading over ssh) so it will be
interesting to see if X starts again.

This is what I did to resolve it:

[EMAIL PROTECTED]:~$ dpkg -l | grep mplayer
iU  mozilla-mplayer  3.31+main-1   MPlayer-Plugin for 
Mozilla
ri  mplayer-586  1.0-pre7cvs20060219-0.2sarge1 The Ultimate Movie 
Player For Linux
ii  mplayer-skin-blue1.6-1 blue skin for mplayer

[EMAIL PROTECTED]:~$ sudo dpkg -r mozilla-mplayer
(Reading database ... 34703 files and directories currently installed.)
Removing mozilla-mplayer ...

[EMAIL PROTECTED]:~$ dpkg -l | grep mplayer
rc  mozilla-mplayer  3.31+main-1   MPlayer-Plugin for 
Mozilla
ri  mplayer-586  1.0-pre7cvs20060219-0.2sarge1 The Ultimate Movie 
Player For Linux
ii  mplayer-skin-blue1.6-1 blue skin for mplayer

[EMAIL PROTECTED]:~$ sudo apt-get dist-upgrade
Reading Package Lists... Done
Building Dependency Tree... Done
You might want to run 'apt-get -f install' to correct these.
The following packages have unmet dependencies:
  libdps1: Depends: xfree86-common but it is not installable
  libxft1: Depends: xfree86-common but it is not installable
E: Unmet dependencies. Try using -f.

[EMAIL PROTECTED]:~$ sudo apt-get -f install  
Reading Package Lists... Done
Building Dependency Tree... Done
Correcting dependencies... Done
The following packages will be REMOVED:
  libdps1 libmagick6 libxft1 xlibs
0 upgraded, 0 newly installed, 4 to remove and 177 not upgraded.
Need to get 0B of archives.
After unpacking 7664kB disk space will be freed.
Do you want to continue? [Y/n] 
(Reading database ... 34654 files and directories currently installed.)
Removing libmagick6 ...
Removing libdps1 ...
Removing xlibs ...
Removing libxft1 ...

[EMAIL PROTECTED]:~$ sudo apt-get dist-upgrade




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Kernel-image upgrade question

2007-06-02 Thread Bill Moseley
So upgrading an older PIII Toshiba laptop to etch, currently it has:

[EMAIL PROTECTED]:~$ dpkg -l | grep kernel-image
ii  kernel-image-2.6.8-2-386 2.6.8-16sarge1  
ii  kernel-image-2.6.8-2-686 2.6.8-16sarge1  

[EMAIL PROTECTED]:~$ sudo apt-get install linux-image-2.6.18-4-686

Reading package lists... Done
Building dependency tree... Done
The following extra packages will be installed:
  busybox initramfs-tools klibc-utils libklibc libvolume-id0 udev
Suggested packages:
  linux-doc-2.6.18
Recommended packages:
  libc6-i686
The following packages will be REMOVED
  hotplug
The following NEW packages will be installed
  busybox initramfs-tools klibc-utils libklibc libvolume-id0 
linux-image-2.6.18-4-686 udev
0 upgraded, 7 newly installed, 1 to remove and 3 not upgraded.
Need to get 16.9MB/17.2MB of archives.
After unpacking 49.9MB of additional disk space will be used.


So why is hotplug removed?  Does udev replace it?





-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Kernel-image upgrade question

2007-06-02 Thread Bill Moseley
On Sat, Jun 02, 2007 at 04:11:19PM -0400, Douglas Allan Tutty wrote:
 On Sat, Jun 02, 2007 at 12:26:18PM -0700, Bill Moseley wrote:
  
  So why is hotplug removed?  Does udev replace it?
 
 Yes.
 
 Also, have you read the release notes so you know where the bears are
 at?

No.  Which release notes?

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Kernel-image upgrade question

2007-06-02 Thread Bill Moseley
On Sat, Jun 02, 2007 at 06:23:16PM -0400, Roberto C. Sánchez wrote:
 On Sat, Jun 02, 2007 at 03:17:03PM -0700, Bill Moseley wrote:
  On Sat, Jun 02, 2007 at 04:11:19PM -0400, Douglas Allan Tutty wrote:
   On Sat, Jun 02, 2007 at 12:26:18PM -0700, Bill Moseley wrote:

So why is hotplug removed?  Does udev replace it?
   
   Yes.
   
   Also, have you read the release notes so you know where the bears are
   at?
  
  No.  Which release notes?
  
 http://www.debian.org/releases/etch/releasenotes

Ah, I thought you were talking about kernel-image notes.

Re-installing from scratch would not be the end of the world on that
laptop.  Nothing critical on it that isn't rsynced to other machines
daily.

 Read them carefully before doing anything.  Then read them again.  Then
 read them as you do the actual upgrade.

Good advice.  Might be too late -- hopefully I can read them on the
laptop when I have time later.



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Have mplayer-586, but need to install mozilla-mplayer

2007-06-02 Thread Bill Moseley
I did a etch upgrade today -- went reasonably smoothly.

I have mplayer-586 installed and it works fine.  But, during the
upgrade I lost mozilla-mplayer so can no longer play media in the web
browser.

Trying to install mozilla-player I get:

[EMAIL PROTECTED]:~$ sudo apt-get install mozilla-mplayer
Reading package lists... Done
Building dependency tree... Done
The following extra packages will be installed:
  mplayer

So, seems like mozilla-player would depend on mozilla and mplayer, but
it seems that mplayer-586, which I have installed, doesn't meet the
that requirement.

Is that a packaging bug?



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Mail sent to users in /etc/aliases

2006-11-12 Thread Bill Moseley
My /etc/aliases file has entires like this:

daemon: root
bin: :fail: Unknown User
sys: root
sync: root
games: root
man: root
lp: root
mail: root
news: root
uucp: root
proxy: root
postgres: root
www-data: root

When would mail ever get delivered *to* those addresses?  Will
anything break if mail can't be delivered to www-data, for example?

I've been getting more spam lately addresses to common unix users, so
I'm thinking about rejecting mail to those users -- well, any user
that is not listed in a separate valid-users type of file.



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Font changes after dist-upgrade to Firefox2/IceWeasel

2006-11-28 Thread Bill Moseley
After years of running Linux fonts are still somewhat of a mystery to
me.

After upgrading Firefox some some web pages now have much smaller fonts.  I'm
curious what caused that change.

I also often wonder if there's a way to see what font the web browser
actually selects for rendering when asked to display text.  For
example, is the change in font selection due to how IceWeasel is
selecting a font to display or some other external change in fonts.




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Font changes after dist-upgrade to Firefox2/IceWeasel

2006-11-28 Thread Bill Moseley
On Tue, Nov 28, 2006 at 10:49:55PM +0100, Florian Kulzer wrote:
  After upgrading Firefox some some web pages now have much smaller fonts.  
  I'm
  curious what caused that change.


 I also noticed (and disliked) this change. I think it has something to
 do with the removal of the old dpi preference setting. In firefox 1.5 I
 could simply use a dpi setting which made the average web font readable
 for me.
 
 There is a new about:config item, layout.css.dpi, which according to
 the mozilla website should take over this functionality, but this is
 broken for me. I get serious rendering bugs if I change the default
 setting of this new item.

Ah, that seems to help.  The default is -1 which:

Use the host system's logical resolution or 96, whichever is
greater,...

So it seems on my system it was using 96.  My DPI is set correctly in
my xorg.conf (my DPI = 81) so I changed it to zero, which I assume says to use 
the
DPI as set in my config.  Seems to work.

Thanks,

Still, I sure wish I understood how fonts are being selected by
the browser.  It would be interesting to see what fonts get selected
when using different CSS settings, for example.



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Ripping CDs to MP3

2006-11-28 Thread Bill Moseley
On Tue, Nov 28, 2006 at 03:18:12PM -0800, Francis Healy wrote:
 I am running Debian Sarge and would like to rip CDs to MP3.  I have
 installed GRIP


Not what you are asking for, but I switched from grip to the abcde
utility.  Didn't seem like ripping a CD required a gui, to me.

I rip to flac, so here's my ~/.abcde.conf file:

ACTIONS=move,clean
OUTPUTDIR=/home/moseley/music/flac

# This dir must exist!
WAVOUTPUTDIR=/tmp

OUTPUTTYPE=flac
FLACOPTS=--replay-gain
OUTPUTFORMAT='${ARTISTFILE}/${ALBUMFILE}/${ARTISTFILE}-${ALBUMFILE}-${TRACKNUM}.${TRACKFILE}'

EXTRAVERBOSE=y




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Why is Caudium running?

2006-11-29 Thread Bill Moseley
Over time my desktop machines tend to collect a lot of packages I no
longer use.

For example, I see Caudium is running:

$ ps aux | grep caudium
root 16162  0.1  0.3  11436  2888 ?SNov28   2:22 
/usr/bin/pike7.6 -M/usr/lib/caudium/etc/modules /usr/lib/caudium/start-caudium 
--pid-file=/var/run/caudium/caudium.pid --config-dir=/etc/caudium/servers/ 
--log-dir=/var/log/caudium/ --with-threads
root  8926  0.0  0.2   8828  2592 ?Rs   14:15   0:00 
/usr/bin/pike7.6 -DENABLE_THREADS -DCAUDIUM -DCAUDIUM_CACHE -DROXEN 
-Ietc/include -Ibase_server -Metc/modules -Mlib/7.6.93/ -w -P/usr/lib/caudium 
base_server/caudiumloader.pike

I'm reasonably sure that came along with some other install.  Can I
figure out what depends on that?  That is, why it is installed?


$ sudo apt-get remove caudium 
Reading package lists... Done
Building dependency tree... Done
The following packages will be REMOVED:
  caudium caudium-modules

$ sudo apt-get remove pike7.6-core
Reading package lists... Done
Building dependency tree... Done
The following packages will be REMOVED:
  caudium caudium-modules pike7.6-core pike7.6-image pike7.6-pcre



BTW -- what does the pipe indicate when using apt-cache rdepends?

$ apt-cache rdepends caudium | grep '|' 
 |libroxen-ecms




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Unix socket question - TLS with Exim/Courier

2006-12-05 Thread Bill Moseley
I'm missing something obvious here.

I have two Debian Stable boxes both running exim4-daemon-heavy
4.50-8sarge2  courier-imap-ssl 3.0.8-4sarge5

One machine Exim can connect to the Courier authdaemon socket and the
other I get permission denied on the socket.  I have not been able to find the
difference between the two setups.


2006-12-05 21:56:19 plain_courier authenticator failed for (me) [192.168.1.2] 
U=moseley: 435 Unable to authenticate at present (set_id=moseley): failed to 
connect to socket /var/run/courier/authdaemon/socket: Permission denied


I'm not sure I understand socket permissions as the socket looks like
this:

ls -l /var/run/courier/authdaemon/socket
srwxrwxrwx  1 root root 0 Dec  5 22:20 /var/run/courier/authdaemon/socket

Exim is running as user Debian-exim on both machines, as normal.  The
Courier authdeamon is running as root.


I found one post[1] that said they had to add group daemon to
Debian-exim, but I don't understand why that would make a difference
-- I don't see where the socket is group daemon.  Plus, on the
machine where it's working Debian-exim is not part of the daemon
group.

Anyone familiar with domain sockets and/or the Exim+Courier setup to
give me advice how to debug this?

Thanks,




[1] http://fplanque.net/Blog/devblog?cat=89




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Unix socket question - TLS with Exim/Courier

2006-12-05 Thread Bill Moseley
On Tue, Dec 05, 2006 at 10:43:58PM -0800, Bill Moseley wrote:
 failed to connect to socket /var/run/courier/authdaemon/socket: Permission 
 denied

Oh, ran strace and can now see that the authdaemon directory is where
the permissions are not correct.

Lack of sleep doesn't always help with debugging.

Never mind. ;)

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Not sure I get this unmet dependency

2006-12-09 Thread Bill Moseley
Sometimes I get confused by what the package system is telling me.
I'm not sure what's happening below.

On Sid trying to update Gaim:

$ apt-cache policy gaim 
gaim:
  Installed: 1:2.0.0+beta5-3
  Candidate: 1:2.0.0+beta5-6

Ok, trying to upgrade:


$ sudo apt-get install gaim  
The following packages have unmet dependencies:
  gaim: Depends: gaim-data (= 1:2.0.0+beta5-6) but 1:2.0.0+beta5-3 is to be 
installed
E: Broken packages


Looks like I could update gaim-data:


$ apt-cache policy gaim-data
gaim:
  Installed: 1:2.0.0+beta5-3
  Candidate: 1:2.0.0+beta5-6
  Version table:
 1:2.0.0+beta5-6 0
500 http://http.us.debian.org unstable/main Packages
 *** 1:2.0.0+beta5-3 0
100 /var/lib/dpkg/status

But if I try it wants to remove gaim.

$ sudo apt-get install gaim-data
Reading package lists... Done
Building dependency tree... Done
The following packages will be REMOVED:
  gaim
The following packages will be upgraded:
  gaim-data
1 upgraded, 0 newly installed, 1 to remove and 160 not upgraded.
Need to get 5153kB of archives.
After unpacking 4620kB disk space will be freed.
Do you want to continue [Y/n]? n
Abort.


Hum, apt-cache show gaim shows gaim twice.

Package: gaim
Priority: optional
Section: net
Installed-Size: 4568
Maintainer: Robert McQueen [EMAIL PROTECTED]
Architecture: i386
Version: 1:2.0.0+beta5-6
Replaces: gaim-meanwhile (= 1.2.8-2), gaim-data (= 1:2.0.0+beta3-4)
Depends: gaim-data (= 1:2.0.0+beta5-6), libsasl2-modules, libatk1.0-0 (= 
1.12.2), libavahi-compat-howl0 (= 0.6.0), libc6 (= 2.3.6-6), libcairo2 (= 
1.2.4), libdbus-1-3 (= 0.94), libdbus-glib-1-2 (= 0.71), libfontconfig1 (= 
2.4.0), libgcrypt11 (= 1.2.2), libglib2.0-0 (= 2.12.0), libgnutls13 (= 
1.4.0-0), libgstreamer0.10-0 (= 0.10.10), libgtk2.0-0 (= 2.8.0), libgtkspell0 
(= 2.0.2), libice6 (= 1:1.0.0), libncursesw5 (= 5.4-5), libpango1.0-0 (= 
1.14.8), libperl5.8 (= 5.8.8), libsm6, libstartup-notification0 (= 0.8-1), 
libx11-6, libxcursor1 ( 1.1.2), libxext6, libxfixes3 (= 1:4.0.1), libxi6, 
libxinerama1, libxml2 (= 2.6.27), libxrandr2, libxrender1, libxss1
Recommends: gstreamer0.10-plugins-base, gstreamer0.10-plugins-good, 
gstreamer0.10-alsa | gstreamer0.10-esd, python
Suggests: gnome-panel (= 2.1) | kicker (= 3.1) | docker, 
evolution-data-server (= 1.6.0), dbus-1-utils, libgadu3 (= 1:1.7~rc2), 
libmeanwhile1 (= 1.0.2), libzephyr3, tcl8.4 (= 8.4.5), tk8.4 (= 8.4.5)
Conflicts: gaim-meanwhile (= 1.2.8-2), gaim-data (= 1:2.0.0+beta3-4)
Filename: pool/main/g/gaim/gaim_2.0.0+beta5-6_i386.deb
Size: 1680078
MD5sum: bd4405e8b69ffcabd3574c4e3e428158
SHA1: 67804235ef6bc9fe991aebd3cd93c45136f53cca
SHA256: 9607425280f0a4fec3c4f3999a6afcc86e04740d06387bc85b1bc6ffd4695183
Description: multi-protocol instant messaging client
 Gaim is a graphical, modular Instant Messaging client capable of using
 AIM/ICQ, Yahoo!, MSN, IRC, Jabber, Napster, Zephyr, Gadu-Gadu, Bonjour,
 Groupwise, Sametime, and SIMPLE all at once.
Tag: implemented-in::c, interface::commandline, interface::x11, 
network::client, 
protocol::{irc,jabber,msn-messenger,oscar,ssl,yahoo-messenger}, role::plugin, 
role::program, scope::application, uitoolkit::gtk, uitoolkit::ncurses, 
use::chatting, x11::applet, x11::application
Task: gnome-desktop

Package: gaim
Status: install ok installed
Priority: optional
Section: net
Installed-Size: 4564
Maintainer: Robert McQueen [EMAIL PROTECTED]
Architecture: i386
Version: 1:2.0.0+beta5-3
Replaces: gaim-meanwhile (= 1.2.8-2), gaim-data (= 1:2.0.0+beta3-4)
Depends: gaim-data (= 1:2.0.0+beta5-3), libsasl2-modules, libatk1.0-0 (= 
1.12.2), libavahi-compat-howl0 (= 0.6.0), libc6 (= 2.3.6-6), libcairo2 (= 
1.2.4), libdbus-1-3 (= 0.94), libdbus-glib-1-2 (= 0.71), libfontconfig1 (= 
2.4.0), libgcrypt11 (= 1.2.2), libglib2.0-0 (= 2.12.0), libgnutls13 (= 
1.4.0-0), libgstreamer0.10-0 (= 0.10.10), libgtk2.0-0 (= 2.8.0), libgtkspell0 
(= 2.0.2), libice6 (= 1:1.0.0), libncursesw5 (= 5.4-5), libpango1.0-0 (= 
1.14.7), libperl5.8 (= 5.8.8), libsasl2-2, libsm6, libstartup-notification0 
(= 0.8-1), libx11-6, libxcursor1 ( 1.1.2), libxext6, libxfixes3 (= 
1:4.0.1), libxi6, libxinerama1, libxml2 (= 2.6.27), libxrandr2, libxrender1, 
libxss1
Recommends: gstreamer0.10-plugins-base, gstreamer0.10-plugins-good, 
gstreamer0.10-alsa | gstreamer0.10-esd
Suggests: gnome-panel (= 2.1) | kicker (= 3.1) | docker, 
evolution-data-server (= 1.6.0), dbus-1-utils, libgadu3 (= 1:1.7~rc2), 
libmeanwhile1 (= 1.0.2), libzephyr3, tcl8.4 (= 8.4.5), tk8.4 (= 8.4.5)
Conflicts: gaim-meanwhile (= 1.2.8-2), gaim-data (= 1:2.0.0+beta3-4)
Description: multi-protocol instant messaging client
 Gaim is a graphical, modular Instant Messaging client capable of using
 AIM/ICQ, Yahoo!, MSN, IRC, Jabber, Napster, Zephyr, Gadu-Gadu, Bonjour,
 Groupwise, Sametime, and SIMPLE all at once.









-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE

Fax from Debian to OS X

2006-12-17 Thread Bill Moseley
On OS X the fax is an Internal Modem in CUPS.  There's also a
checkbox in the Mac's preferences to enable fax sharing.

Is it possible to send faxes from Debian over the LAN using the Mac?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Kernel upgrade question

2007-09-14 Thread Bill Moseley
I've got one machine running Debian Sid that has not be upgraded in a
month or so.  It's running a custom kernel I built who-knows-when
(2.6.6).  Frankly, I can't remember the reason for the custom kernel.
But, I'm a bit concerned because I probably compiled most features
into the kernel and not as modules.

Anyway, the upgrade is asking to upgrade glibc and says:

WARNING: POSIX threads library NPTL requires kernel version
2.6.8 or later. If you use a kernel 2.4, please upgrade it
before installing glibc.

I'm not clear on the image to install.  Is linux-image-2.6-k7 a dummy
package for the most recent image (linux-image-2.6.22-2-k7)?  So, 
linux-image-2.6-k7
is the correct kernel?

Here's my modules, cpuinfo, and lspci -- just in case anything jumps
out that might be a problem.

$ lsmod
Module  Size  Used by
mga   103792  0 
lp 10564  0 
uhci_hcd   30672  0 
ohci1394   34756  0 
ieee1394  108340  1 ohci1394
w83627hf   28612  0 
eeprom  7752  0 
i2c_sensor  2944  2 w83627hf,eeprom
i2c_isa 2048  0 
i2c_viapro  7052  0 
i2c_core   23044  5 w83627hf,eeprom,i2c_sensor,i2c_isa,i2c_viapro



$ cat /proc/cpuinfo 
processor   : 0
vendor_id   : AuthenticAMD
cpu family  : 6
model   : 6
model name  : AMD Athlon(tm) Processor
stepping: 2
cpu MHz : 1150.591
cache size  : 256 KB
fdiv_bug: no
hlt_bug : no
f00f_bug: no
coma_bug: no
fpu : yes
fpu_exception   : yes
cpuid level : 1
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 mmx fxsr sse syscall mp mmxext 3dnowext 3dnow
bogomips: 2260.99




$ lspci
00:00.0 Host bridge: VIA Technologies, Inc. VT8366/A/7 [Apollo KT266/A/333]
00:01.0 PCI bridge: VIA Technologies, Inc. VT8366/A/7 [Apollo KT266/A/333 AGP]
00:06.0 Multimedia audio controller: Creative Labs SB Live! EMU10k1 (rev 07)
00:06.1 Input device controller: Creative Labs SB Live! Game Port (rev 07)
00:08.0 Ethernet controller: Realtek Semiconductor Co., Ltd. 
RTL-8139/8139C/8139C+ (rev 10)
00:09.0 FireWire (IEEE 1394): Texas Instruments TSB12LV26 IEEE-1394 Controller 
(Link)
00:11.0 ISA bridge: VIA Technologies, Inc. VT8233 PCI to ISA Bridge
00:11.1 IDE interface: VIA Technologies, Inc. 
VT82C586A/B/VT82C686/A/B/VT823x/A/C PIPC Bus Master IDE (rev 06)
00:11.2 USB Controller: VIA Technologies, Inc. VT82x UHCI USB 1.1 
Controller (rev 1b)
00:11.3 USB Controller: VIA Technologies, Inc. VT82x UHCI USB 1.1 
Controller (rev 1b)
00:11.4 USB Controller: VIA Technologies, Inc. VT82x UHCI USB 1.1 
Controller (rev 1b)
00:11.5 Multimedia audio controller: VIA Technologies, Inc. VT8233/A/8235/8237 
AC97 Audio Controller (rev 10)
01:00.0 VGA compatible controller: Matrox Graphics, Inc. MGA G550 AGP (rev 01)





-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Kernel upgrade question

2007-09-14 Thread Bill Moseley
On Fri, Sep 14, 2007 at 08:03:25PM -0700, Bill Moseley wrote:
 I've got one machine running Debian Sid that has not be upgraded in a
 month or so.  It's running a custom kernel I built who-knows-when
 (2.6.6).  Frankly, I can't remember the reason for the custom kernel.

So am I wedged?

$ sudo apt-get -f install
Preparing to replace libc6 2.5-9+b1 (using .../libc6_2.6.1-4_i386.deb) ...

WARNING: POSIX threads library NPTL requires kernel version
2.6.8 or later. If you use a kernel 2.4, please upgrade it
before installing glibc.

Ok, so try and install a new Kernel:

$ sudo apt-get install linux-image-k7 
Reading package lists... Done
Building dependency tree... Done
You might want to run `apt-get -f install' to correct these:
The following packages have unmet dependencies:
  kernel-patch-xfs: Depends: grep-dctrl
  libc6-dev: Depends: libc6 (= 2.6.1-4) but 2.5-9+b1 is to be installed
  linux-image-k7: Depends: linux-image-2.6-k7 but it is not going to be 
installed
  locales: Depends: glibc-2.6-1
E: Unmet dependencies. Try 'apt-get -f install' with no packages (or specify a 
solution).





-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



xserver-xorg memory leak

2007-02-25 Thread Bill Moseley
This is just a probe to see if anyone else is having problems with
Xorg eating memory.

Every once in a while my desktop machine becomes unresponsive and top shows
that Xorg is using all my memory.

I was out of town and ssh'ing into my machine every day or so and it
was fine, except today I was running mutt on that machine and noticed
mutt got killed a few times -- and again Xorg was consuming all memory,
so I killed it.[1]

I see this bug:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=326956

And I do have a background script that loads a new root window image
every five minutes.  But, I don't normally notice that the memory
increases that much.  The machine (and Xorg) have been running for
about two months, so it's odd that all of the sudden it eats memory.

I just loaded an image 1000 times (using display -window root
test.jpg) and watched top, but no growth in memory.  This is what it
is like after that, which is normal:

  PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
   
 5407 root   5 -10  105m  36m  73m S  1.3  4.1   2:21.97 Xorg

So it doesn't seem like it's my background image problem.

Any other ideas what might be the problem?

ii  xserver-xorg  7.1.0-11
the X.Org X server
ii  xserver-xorg-core 1.1.1-15
X.Org X server -- core server

[1] By the way, when I remotely kill xorg my monitors no longer are
controlled by dpms -- so they power on.  (when I came home my monitors
were indeed no longer in sleep mode.)  Can I remotely run startx or is
there a utility to remotely force my monitors to sleep mode when not
running the xserver?



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: xserver-xorg memory leak

2007-02-26 Thread Bill Moseley
On Sun, Feb 25, 2007 at 08:26:03PM -0500, Kamaraju S Kusumanchi wrote:
 Bill Moseley wrote:
 
  Every once in a while my desktop machine becomes unresponsive and top
  shows that Xorg is using all my memory.
  
 
 Are there any errors in the log files such as /var/log/Xorg.0.log ?
 What is your video card, what driver are you using?
 Are you tracking etch or sid?

No errors in my Xorg.0.log files that are not normal (e.g. (EE)
AIGLX: Screen 1 is not DRI capable).  I'm running a Matrox G550 with
Xinerama.  Tracking sid.  It would be nice if the Xorg log file had
time stamps.

Any suggestions what to do next time I see Xorg using a lot of memory?
Think running lsof or pmap would reveal anything useful?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: xserver-xorg memory leak

2007-02-26 Thread Bill Moseley
On Sun, Feb 25, 2007 at 10:23:09PM -0500, Roberto C. Sanchez wrote:
 Firefox?  I haven't seen it in a while, but I used to occasionally see
 my machine get *really* slow and when I would do a top, X was chewing
 everything up.  However, if I closed Firefox (or killed it), things
 would return to normal.

Firefox was not running.

I've also had Firefox eat memory.  I think it was due to too many
extensions loaded, though.



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



MD5Sum mismatch

2007-02-27 Thread Bill Moseley
apt-get update is showing:

Failed to fetch 
http://http.us.debian.org/debian/dists/unstable/non-free/binary-i386/Packages.bz2
  MD5Sum mismatch
Failed to fetch 
http://http.us.debian.org/debian/dists/unstable/main/source/Sources.bz2  MD5Sum 
mismatch
Failed to fetch 
http://http.us.debian.org/debian/dists/unstable/non-free/source/Sources.bz2  
MD5Sum mismatch

The md5sum mismatch seems misleading, since it's really just failing
to fetch those files.

My question:

Have the unstable sources changed?  If so, where should I have seen
this announcement -- or found it on the Debian site?

Or is this a temporary problem?


deb http://http.us.debian.org/debian/ unstable main non-free contrib
deb-src http://http.us.debian.org/debian/ unstable main non-free contrib





-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: MD5Sum mismatch

2007-02-27 Thread Bill Moseley
On Tue, Feb 27, 2007 at 02:13:30PM -0500, Greg Folkert wrote:
 
  Or is this a temporary problem?
 
 Bingo, and typically only on the host you happen to contact.

Well, I tried a few different sources with similar results.  I did
find one source where apt-get update didn't report problems, but
a dist-upgrade reported a number of 404 errors.

I tried the update/dist-upgrade process a few times over the day and
continued to receive the 404s -- I thought maybe the index and
mirrored .debs might be out-of-sync for a short period of time.

Now, I just tried using aptitude, so aptitude update didn't report
errors but aptitude dist-upgrade decided a different set of packages
needed to up updated/installed.  Plus, it also reported a few 404
errors.

Err http://http.us.debian.org unstable/main libsepol1 1.14-3
  404 Not Found [IP: 64.50.238.52 80]
Err http://http.us.debian.org unstable/main libssl-dev 0.9.8e-1
  404 Not Found [IP: 64.50.238.52 80]
Err http://http.us.debian.org unstable/main libssl0.9.8 0.9.8e-1
  404 Not Found [IP: 64.50.238.52 80]
Err http://http.us.debian.org unstable/main libwrap0-dev 7.6.dbs-13
  404 Not Found [IP: 64.50.238.52 80]
Err http://http.us.debian.org unstable/main libwrap0 7.6.dbs-13
  404 Not Found [IP: 64.50.238.52 80]
Err http://http.us.debian.org unstable/main tcpd 7.6.dbs-13
  404 Not Found [IP: 64.50.238.52 80]
Err http://http.us.debian.org unstable/main openbsd-inetd 0.20050402-5
  404 Not Found [IP: 64.50.238.52 80]
Err http://http.us.debian.org unstable/main ucf 2.0020
  404 Not Found [IP: 64.50.238.52 80]
Err http://http.us.debian.org unstable/main nfs-common 1:1.0.11-1
  404 Not Found [IP: 64.50.238.52 80]

E: Failed to fetch 
http://http.us.debian.org/debian/pool/main/libs/libsepol/libsepol1_1.14-3_i386.deb:
 404 Not Found [IP: 64.50.238.52 80]


Should I take two aspirin and check in the morning?




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



What's using up bandwidth?

2007-01-20 Thread Bill Moseley
Here's an admin question:

I've got a home LAN connected via DSL.  Every once in a while the DSL
modem will indicate the connection is saturated.

How would you go about tracking down the process that is eating up all
the bandwidth?

First, need to find out which machine the process is running on.

netstat -p on the NAT machine doesn't show the connections for the NAT'ed
machines.  They can be seen with /proc/net/ip_conntrack, but that
doesn't offer any help with regard with where the bulk of the packets
are coming from.

Once you find the machine how do you figure out what process is
generating all the traffic?  Once I know the ip/port I can use lsof to
find out which process has that port open.

If I could list bytes transferred per port that would help a lot in
finding the process.

How would you go about this task?

All this would seem like a reasonably common sysadmin task -- so are
there any better tools to use?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: What's using up bandwidth?

2007-01-20 Thread Bill Moseley
On Sat, Jan 20, 2007 at 07:08:22AM -0800, Bill Moseley wrote:
 netstat -p on the NAT machine doesn't show the connections for the NAT'ed
 machines.  They can be seen with /proc/net/ip_conntrack, but that
 doesn't offer any help with regard with where the bulk of the packets
 are coming from.

By the way, why would ip_conntrack contain entries for machines
(laptops) that were disconnected days ago?  They are still listed at
ESTABLISHED.

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Mutt viewers in the background / Job control

2003-11-08 Thread Bill Moseley
I'm using a modification of mutt_bgrun where a .mailcap entry might be:

 image/png; /home/moseley/bin/mutt_bgrun display '%s'; test=test -n $DISPLAY

and mutt_bgrun is basically:

file=$(mktemp);
cp $2 $file
( $1 $file; rm $file ) 

That allows control to return to mutt while the viewer is running.  But
the viewer is still a child process of mutt, so when mutt exits the
viewer exits too.

Common question:  how do I make the viewer a child of init so that when
mutt exits it's not a zombie waiting on the viewer or closing mutt
doesn't kill the viewer?

Thanks,



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Mutt viewers in the background / Job control

2003-11-09 Thread Bill Moseley

For the archives:

On Sat, Nov 08, 2003 at 04:16:23PM -0800, Bill Moseley wrote:
 Common question:  how do I make the viewer a child of init so that when
 mutt exits it's not a zombie waiting on the viewer or closing mutt
 doesn't kill the viewer?

Well, one answer would seem a script called mutt_view that does:

file=$(mktemp);
cp $2 $file
( setsid $1 $file; rm $file ) 

So that seems to fix the problem of mutt exiting and closing child
processes.  I use that when forking daemons under Perl (perldoc perlipc)
all the time, but don't fully understand the concept of process
groups.  Explanations welcome.

My original question was how to make the viewer a child of init.  Just
adding the  does that, but I guess the shell script and viewer
program are still part of the same process group (with mutt being the
leader).   setsid gives the process its own process group id, so (I'm
assuming) that allows mutt to exit and not bring the viewer program with
it.


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Thoughts on exim4-conifg

2003-11-11 Thread Bill Moseley
On Tue, Nov 11, 2003 at 02:20:47PM -0500, Greg Folkert wrote:
 Personally I love the stuff Andreas Metzler has done with the config.
 Makes it TONS more managable.

Hi Greg,

Can you explain why you think it's more managable?  I'm not arguing that
it isn't, I'm just curious what you find better and why.  It may be that
I'm not using the new system well.



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: MTA help

2003-11-11 Thread Bill Moseley
On Tue, Nov 11, 2003 at 03:07:57PM -0800, Eric Walstad wrote:
  I can't tell you how to edit the complicated new way of dealing with
  the configuration - I gave up an made one big config file.
 I gave up because I didn't know it *could* be set up with one file.  I 
 can understand that breaking it up into multiple files can be nice for 
 complex configurations, but it would've been better for me if it was 
 one file.  How did you learn about combining the config files?  I 
 didn't find that info in my search.

/usr/share/doc/exim4-base/README.Debian.gz

or 

man update-exim4.conf


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Exim4 ACLs (was: Thoughts on exim4-conifg)

2003-11-11 Thread Bill Moseley
On Wed, Nov 12, 2003 at 12:25:02AM +, Alan Chandler wrote:
 On Tuesday 11 November 2003 17:56, [EMAIL PROTECTED] wrote:
  What do people think of exim4-config?  It splits the exim config file
  into parts and when exim4 is (re)started a new config file is built from
  all the parts, tested that it's valid and then exim4 is started with the
  new config.
 
 A real pain if you want to hand craft a solution.  I ended up creating an
 /etc/exim4/exim4.conf file to edit - and the copied ACLs from various sources 
 on the net.  I have it nicely set up how I want it now.

Yep, that's what I ended up doing.

Can I ask about your ACL setup for spam and other junk?  Are you doing
much different than this:

I'm using exim4-daemon-heavy and it's nice to reject the spam and
Windows attachments at acl_check_data time, but other checks that I
thought were going to make a big difference have not done much for
filtering bad mail.

For example, rbl checks on rfc-ignorant.org turn up too many false
positives.  I need to white list a lot of domains for that to be useful.

I'm also use caller verification and call-out verification.  I thought
that would catch more, but it seems that where the callout fails
Spamassassin is also catching the mail.  And half or more of the spam seems
to use a valid sender address.  So the callout may not be worth the
work.

My other dnslist entries seems to work well, although I'm not deny'ing at this
point.  Although the ones I see are also often rejected because of
windows attachments anyway.

  warn  message = X-Warning: $sender_host_address is listed at $dnslist_domain 
($dnslist_value: $dnslist_text)
log_message = $sender_host_address is listed at $dnslist_domain 
($dnslist_value: $dnslist_text)
dnslists= 
relays.ordb.org:relays.bl.kundenserver.de:relays.visi.com:sbl.spamhaus.org


Perhaps what would be more useful is to tune my spamassassing setup.
I'm using the default 2.6 installation with no changes to local.cf.

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Questions about xprint

2003-11-13 Thread Bill Moseley

pn  mozilla none  (no description available)
ii  xprt4.2.1-13X print server (XFree86 version)
ii  xprt-common 0.0.8.cvs20030508-6 Xprint - the X11 print system 
(configuration files)
ii  xprt-xprintorg  0.0.8.cvs20030508-6 Xprint - the X11 print system from 
xprint.org (binary)

I'm running Mozilla 1.5-3 so I'm not sure why it says pn for mozilla.

Anyway, I was trying to understand why mozilla's print dialog includes
the following printers:

  LaserJet@:64
  spooldir_tmp_Xprintjobs@:64
  PostScript/default

Is there a reason to use the xprint LaserJet@:64 over the
PostScript/default (which uses lpr)?  I get better looking output with
the PostScript/default selection.  When using xprint it seems as if
the print is in a lower resolution.

I also have not been able to get network printing with xprint.  I looked
over the READMEs and didn't really see how that was suppose to be setup.

Any idea why it says :64 for the display number?  Is that just some
screen name selected to not conflict with what I might be using for a
real default?  Can I start a program on that screen and just have it
render to the printer instead of the display??  Seems odd.

Also, is there a way to have mozilla only display the PostScript/default
option?  It's confusing to have more than one printer option for the
same printer.


Thanks,




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Question about set UID (and cdrecord)

2003-11-16 Thread Bill Moseley
I've got an suid shell script and a suid binary:

[EMAIL PROTECTED]:~$ ls -l foo.sh sleep
-rwsr-xr-x1 root root   21 2003-11-16 07:38 foo.sh
-rwsr-xr-x1 root root12664 2003-11-16 07:38 sleep

The script simply runs my local suid sleep binary.

[EMAIL PROTECTED]:~$ cat foo.sh
#!/bin/sh
./sleep 3

Running as non-root I see:

I was running cdrecord from a non-root account and saw:

moseley   2324  1.0  0.1  2896 1192 pts/0S07:40   0:00 /bin/sh ./foo.sh
root  2325  1.0  0.0  2508  556 pts/0S07:40   0:00 ./sleep 3

Which makes sense.  I assume that the shell script isn't really run suid
because /bin/sh is not suid.

Does setting suid on a shell script (or a perl script) have any effect?

If I change the shell script to exec ./sleep, I still get sleep running as root:

[EMAIL PROTECTED]:~$ cat foo.sh
#!/bin/sh
exec ./sleep 3

And the ps output shows sleep is running as root.

root  2555  1.0  0.0  2508  556 pts/0S07:54   0:00 ./sleep 3



Now, here's what prompted this questions.  I was running cdrecord as a
non-root user and I get:

cdrecord.mmap: Operation not permitted. WARNING: Cannot set RR-scheduler
cdrecord.mmap: Permission denied. WARNING: Cannot set priority using setpriority().
cdrecord.mmap: WARNING: This causes a high risk for buffer underruns

[EMAIL PROTECTED]:~$ file /usr/bin/cdrecord
/usr/bin/cdrecord: setuid Bourne shell script text executable

[EMAIL PROTECTED]:~$ cat /usr/bin/cdrecord
#!/bin/sh
VERS=`/sbin/kernelversion`
case $VERS in
  2.0|2.2)
exec cdrecord.shm $@
  ;;
  2.4|*)
exec cdrecord.mmap $@
  ;;
esac

[EMAIL PROTECTED]:~$ ls -l /usr/bin/cdrecord /usr/bin/cdrecord.mmap
-rwsr-xr--1 root cdrom 142 2003-11-08 16:33 /usr/bin/cdrecord
-rwsr-xr--1 root cdrom  342924 2003-11-08 16:33 /usr/bin/cdrecord.mmap

Ok, so those are also suid root.  (And yes, I'm also in the cdrom group).

But when running cdrecord cdrecord.mmap does NOT run as root:

[EMAIL PROTECTED]:~$ cdrecord -v dev=0,1,0 KNOPPIX_V3.3-2003-11-14-EN.iso
Cdrecord-Clone 2.01a19 (i686-pc-linux-gnu) Copyright (C) 1995-2003 Jörg Schilling
[...]
cdrecord.mmap: Operation not permitted. WARNING: Cannot set RR-scheduler
cdrecord.mmap: Permission denied. WARNING: Cannot set priority using setpriority().
cdrecord.mmap: WARNING: This causes a high risk for buffer underruns.
Starting to write CD/DVD at speed 16 in real TAO mode for single session.
Last chance to quit, starting real write in 9 seconds.


And cdrecord is running as my user id not as root, even though it's suid
(like in the sleep example above).


moseley   2591  1.0  0.6  5916 5916 pts/0SL   07:56   0:00 cdrecord.mmap -v 
dev=0,1,0 KNOPPIX_V3.3-2003-11-14-EN.iso

So why is cdrecord.mmap not running as root?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



X 4.3.0

2003-11-17 Thread Bill Moseley
I plugged in Knoppix 3.3 and noticed both better fonts and a number of
Xinerama problems gone over my X4.2 Sid setup.  On Xinerama problem that
was fixed was the display of text on the wrong monitor.

What's involved in installing the 4.3 packages from experimental.  Are
people using that package without major problems at this time?

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: X 4.3.0

2003-11-18 Thread Bill Moseley
On Mon, Nov 17, 2003 at 07:58:15PM -0500, Roberto Sanchez wrote:
 Bill Moseley wrote:
 I plugged in Knoppix 3.3 and noticed both better fonts and a number of
 Xinerama problems gone over my X4.2 Sid setup.  On Xinerama problem that
 was fixed was the display of text on the wrong monitor.
 
 What's involved in installing the 4.3 packages from experimental.  Are
 people using that package without major problems at this time?
 
 
 These are the lines I have iw my sources.list:
 
 deb http://ftp.us.debian.org/debian/ ../project/experimental main 
 contrib non-free
 deb-src http://ftp.us.debian.org/debian/ ../project/experimental main 
 contrib non-free

Then is is this?

   # apt-get -t experimental install x-window-system


Here's what would change on my machine.

bumby:/etc/apt# apt-get -t experimental -s install x-window-system
Reading Package Lists... Done
Building Dependency Tree... Done
The following extra packages will be installed:
  x-window-system-core xdm xlibmesa-dri xlibmesa-gl xlibmesa-gl-dev xlibmesa-glu 
xlibmesa-glu-dev
  xnest
The following packages will be REMOVED:
  xlibmesa3 xlibmesa3-gl xlibmesa3-glu
The following NEW packages will be installed:
  x-window-system x-window-system-core xdm xlibmesa-dri xlibmesa-gl xlibmesa-glu xnest
The following packages will be upgraded
  xlibmesa-gl-dev xlibmesa-glu-dev
2 upgraded, 7 newly installed, 3 to remove and 109 not upgraded.
Remv xlibmesa3 (4.3.0-0pre1v4 Debian:experimental)
Inst xlibmesa-gl-dev [4.2.1-13] (4.3.0-0pre1v4 Debian:experimental) []
Remv xlibmesa3-gl (4.2.1-14 Debian:unstable) [libqt3c102-mt bzflag xbase-clients 
xmms-iris libglut3 mplayer egoboo xlockmore-gl libwxgtk2.2 libwxgtk2.4 libwine 
plib1c102 libsdl-perl libfltk1.1c102 gtkglarea5 libfltk1 armagetron ]
Inst xlibmesa-gl (4.3.0-0pre1v4 Debian:experimental)
Inst xlibmesa-glu-dev [4.2.1-13] (4.3.0-0pre1v4 Debian:experimental) []
Remv xlibmesa3-glu (4.2.1-14 Debian:unstable) [libqt3c102-mt bzflag xbase-clients 
libglut3 xlockmore-gl libwxgtk2.4 libwine flightgear libsdl-perl libfltk1.1c102 
gtkglarea5 libfltk1 armagetron ]
Inst xlibmesa-glu (4.3.0-0pre1v4 Debian:experimental)
Inst xlibmesa-dri (4.3.0-0pre1v4 Debian:experimental)
Inst x-window-system-core (4.3.0-0pre1v4 Debian:experimental)
Inst xdm (4.3.0-0pre1v4 Debian:experimental)
Inst xnest (4.3.0-0pre1v4 Debian:experimental)
Inst x-window-system (4.3.0-0pre1v4 Debian:experimental)
Conf xlibmesa-gl (4.3.0-0pre1v4 Debian:experimental)
Conf xlibmesa-gl-dev (4.3.0-0pre1v4 Debian:experimental)
Conf xlibmesa-glu (4.3.0-0pre1v4 Debian:experimental)
Conf xlibmesa-glu-dev (4.3.0-0pre1v4 Debian:experimental)
Conf xlibmesa-dri (4.3.0-0pre1v4 Debian:experimental)
Conf x-window-system-core (4.3.0-0pre1v4 Debian:experimental)
Conf xdm (4.3.0-0pre1v4 Debian:experimental)
Conf xnest (4.3.0-0pre1v4 Debian:experimental)
Conf x-window-system (4.3.0-0pre1v4 Debian:experimental)

 
 I have been using X 4.3 since July with no problems.
 
 -Roberto



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Debian packages of 7.4

2003-11-18 Thread Bill Moseley

On Tue, Nov 18, 2003 at 12:14:45PM +, Oliver Elphick wrote:

 Debian users wishing to install the new PostgreSQL packages should add
 experimental to their apt/sources.list and use the -t option to apt-get.

What specific sources should be used?

I'm seeing this, so I think I'm using the wrong lines in sources.list.

Inst libpq3 [7.3.4-9] (7.3.99.7.4rc1-1 Debian:experimental)
Inst postgresql-client (7.3.99.7.4rc1-1 Debian:experimental)
Inst postgresql (7.3.99.7.4rc1-1 Debian:experimental)
Inst postgresql-doc (7.3.99.7.4rc1-1 Debian:experimental)

Thanks,

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Best way to start exim4?

2003-11-18 Thread Bill Moseley
On Tue, Nov 18, 2003 at 04:20:27PM +0100, Jimmy Johansson wrote:
 Hi,
 
 I'm wondering which is the best way to start exim4. I'm fetching my mail
 from my ISP with fetchmail manually with a script because I only want to
 do it when I am connected to internet.
 
 As I see it there are 3 alternatives, but if anybody can come up with a
 4:th please tell me.
 
 1) Starting exim as a daemon in /etc/rc$.d and protecting it with
 iptables and binding it to localhost in exim.conf.

Why would you need iptables if you set local_interfaces in exim4.conf?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Best way to start exim4?

2003-11-18 Thread Bill Moseley
On Tue, Nov 18, 2003 at 08:58:49PM +0100, Jimmy Johansson wrote:
 On Tue, Nov 18, 2003 at 10:41:40AM -0800, Bill Moseley wrote:
  On Tue, Nov 18, 2003 at 04:20:27PM +0100, Jimmy Johansson wrote:
   Hi,
   
   I'm wondering which is the best way to start exim4. I'm fetching my mail
   from my ISP with fetchmail manually with a script because I only want to
   do it when I am connected to internet.
   
   As I see it there are 3 alternatives, but if anybody can come up with a
   4:th please tell me.
   
   1) Starting exim as a daemon in /etc/rc$.d and protecting it with
   iptables and binding it to localhost in exim.conf.
  
  Why would you need iptables if you set local_interfaces in exim4.conf?
 
 I want to log any attempts to connect to port 25. Isn't iptables the way
 to do this? Also I want the added defense, so that if I do something
 stupid and/or want to open up exim4 to the world then this defense is
 already there. Maybe this is complete nonsense, but I am completly new
 to this and trying to learn so slap my fingers if I say something
 stupid!

That's reasonable.  I run iptables and block everything except what I
want to allow.

My guess is you will go crazy trying to monitor connections to port 25.
I configured a new machine the other day on a static IP that has not
been used for over a year.  I enabled logging for iptables and upon the
first boot once the machine was on the network I was seeing connection
attempts.


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Which X packages? (was X 4.3.0)

2003-11-18 Thread Bill Moseley
Ok, I'm confused.

I want to upgrade to X 4.3.0.  I don't run xdm, so I don't think I need
x-window-system.

Just by following links on the pacakges.debian.org site, I see this
dependecny tree:

x-window-system
x-window-system-core
xserver-xfree86
xserver-common
xfree86-common
xlib*
xfont*
xdm
xfs
xnest
xterm
[...]

So I would think I would need x-window-system-core:

bumby:/etc# apt-get -s -t experimental install x-window-system-core | grep Inst
Inst xlibmesa-gl-dev [4.2.1-13] (4.3.0-0pre1v4 Debian:experimental) []
Inst xlibmesa-gl (4.3.0-0pre1v4 Debian:experimental)
Inst xlibmesa-glu-dev [4.2.1-13] (4.3.0-0pre1v4 Debian:experimental) []
Inst xlibmesa-glu (4.3.0-0pre1v4 Debian:experimental)
Inst xlibmesa-dri (4.3.0-0pre1v4 Debian:experimental)
Inst x-window-system-core (4.3.0-0pre1v4 Debian:experimental)

But that's not installing xserver-xfree86 or xfree86-common -- So the
dependencies are not on the 4.3 packages.


So maybe I need to specify those, too.  So 

bumby:/etc# apt-get -s -t experimental install x-window-system-core 
xserver-xfree86 xserver-common xfree86-common| grep Inst
Inst xlibmesa-gl-dev [4.2.1-13] (4.3.0-0pre1v4 Debian:experimental) []
Inst xlibmesa-gl (4.3.0-0pre1v4 Debian:experimental)
Inst xlibmesa-glu-dev [4.2.1-13] (4.3.0-0pre1v4 Debian:experimental) []
Inst xlibmesa-glu (4.3.0-0pre1v4 Debian:experimental)
Inst xfree86-common [4.2.1-13] (4.3.0-0pre1v4 Debian:experimental)
Inst xserver-common [4.2.1-13] (4.3.0-0pre1v4 Debian:experimental)
Inst xserver-xfree86 [4.2.1-13] (4.3.0-0pre1v4 Debian:experimental)
Inst xlibmesa-dri (4.3.0-0pre1v4 Debian:experimental)
Inst x-window-system-core (4.3.0-0pre1v4 Debian:experimental)

Is that everything?

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: wireless fun ... which hw

2003-11-19 Thread Bill Moseley
On Wed, Nov 19, 2003 at 05:48:10PM -0800, Alvin Oga wrote:
 
 hi ya
 
 i've been poking aroound into which wireless ap/router hw .. 
 ( no definite answer yet for which model .. but ... 
 
 a couple of days of homework later ...
 
   http://www.Linux-Sec.net/Wireless
 
 and lots of wireless sniffers out there
 - it'd be fun to demo the capturing of emails sent via [insecure] wireless

There was an article (perhaps posted here on debian-user) about someone
that hacked his own web-enabled Apple wireless network in something like 40
minutes.  IIRC, once he sniffed out the web he setup a machine to spoof
another's MAC and IP.

Anyone remember that article?

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



How to downgrade a package

2003-11-25 Thread Bill Moseley
I'm having problems since upgrading to the latest apache-perl in Sid.

How can I downgrade to the previous package (including all 
dependencies)?  I want to verify what I think is wrong.

I still have these in my cache.  I'd like to downgrade to the 1.3.28-4, 
which is the last version that I was using and where my logs show it was 
working.

[EMAIL PROTECTED]:~$ locate apache-perl | grep deb | xargs ls -lt
-rw-r--r--1 root root   477276 2003-11-05 10:17 
/var/cache/apt/archives/apache-perl_1.3.29-1_i386.deb
-rw-r--r--1 root root   472368 2003-10-14 06:02 
/var/cache/apt/archives/apache-perl_1.3.28-4_i386.deb
-rw-r--r--1 root root   472044 2003-10-06 09:32 
/var/cache/apt/archives/apache-perl_1.3.28-1_i386.deb
-rw-r--r--1 root root   453626 2003-09-03 10:02 
/var/cache/apt/archives/apache-perl_1.3.27.1-3_i386.deb
-rw-r--r--1 root root  382 2003-04-25 05:41 
/usr/share/doc/apache-perl/examples/htaccess.debian
-rw-r--r--1 root root   251784 2003-02-03 15:47 
/var/cache/apt/archives/apache-perl_1.3.27-0.1-1.27-3-1_i386.deb
-rw-r--r--1 root root   192994 2002-06-23 14:32 
/var/cache/apt/archives/apache-perl_1.3.26-1-1.26-0woody1_i386.deb

(The problem is suexec, although I don't see any notes about suexec 
changes between 1.3.28-4 and 1.3.29-1.)




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bad fonts after upgrade to X4.3

2003-11-25 Thread Bill Moseley
I upgraded to X4.3 and now larger fonts are blocky.  Look at the Not
Found at http://hank.org/images/blocky.png

I've listed below my files section.  I used dpkg-reconfigure to create a new
XF86Config-4 file from the 4.3 package (assuming that the configure
script would best know how to configure X).



Section Files
RgbPath  /usr/X11R6/lib/X11/rgb
ModulePath   /usr/X11R6/lib/modules
FontPath /usr/X11R6/lib/X11/fonts/misc:unscaled
FontPath /usr/X11R6/lib/X11/fonts/misc
FontPath /usr/X11R6/lib/X11/fonts/75dpi:unscaled
FontPath /usr/X11R6/lib/X11/fonts/75dpi
FontPath /usr/X11R6/lib/X11/fonts/100dpi:unscaled
FontPath /usr/X11R6/lib/X11/fonts/100dpi
FontPath /usr/X11R6/lib/X11/fonts/Speedo
FontPath /usr/X11R6/lib/X11/fonts/PEX
# Additional fonts: Locale, Gimp, TTF...
FontPath /usr/X11R6/lib/X11/fonts/cyrillic
#   FontPath /usr/X11R6/lib/X11/fonts/latin2/75dpi
#   FontPath /usr/X11R6/lib/X11/fonts/latin2/100dpi
# True type and type1 fonts are also handled via xftlib, see /etc/X11/XftConfig!
FontPath /usr/X11R6/lib/X11/fonts/Type1
FontPath /usr/share/fonts/ttf/western
FontPath /usr/share/fonts/ttf/decoratives
FontPath /usr/share/fonts/truetype
FontPath /usr/share/fonts/truetype/openoffice
FontPath /usr/share/fonts/truetype/ttf-bitstream-vera
FontPath /usr/share/fonts/latex-ttf-fonts
FontPath /usr/X11R6/lib/X11/fonts/defoma/CID
FontPath /usr/X11R6/lib/X11/fonts/defoma/TrueType
EndSection



I have to say I'm really sick of screwing with fonts.  Can someone
explain why, in 2003, fonts are such a pain in the ass to get working?
And why and end user needs to mess with it at all?



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: aspell with mutt

2003-11-25 Thread Bill Moseley
On Wed, Nov 19, 2003 at 12:57:22PM -0500, Stephen wrote:
 What's the syntax to use to invoke aspell rather than ispell in ones
 muttrc? I've perused the fine manual, but I can't find an example of the
 syntax for this function, as mutt assumes ispell by default.
 

set ispell=aspell -e -c

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



location of checksum file when using Aide

2003-11-28 Thread Bill Moseley
I'm a bit confused about using AID and where the checksum file is
located -- and how it's actually used in Debian systems.

The debian installation of AIDE (Advanced intrusion detection
environment) places the checksum file in /var/lib/aide/.  Is there any
use in running AIDE if the checksum file is writable?  Seems like it
should be on a non-writable media.

Second, what media do people normally use?  I have machines that only
have a CD ROM.  Do I need to burn a CDR with the database and always
keep it mounted?

The docs say that the aide binary and config file should also be on
non-writable media.  Is that common practice, too?  And if so, then I
suppose the cron.daily/aide file would need to be updated to point to
the /cdrom for the config file.

Or do people use AIDE with the standard install (database in
/var/lib/aide/) and hope for the best?

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: location of checksum file when using Aide

2003-11-28 Thread Bill Moseley
On Fri, Nov 28, 2003 at 03:54:39PM -0500, ScruLoose wrote:
 
 Another solution is to set the file immutable which means it can't be
 edited except by rebooting into single-user mode.

I know little of immutable.  Is that file system depenedent?  Seems like
I see that mentioned in the man pages as  second extended file system
-- I'm running XFS so I'm not clear if that possible.

Also chattr(1) says:

   A file with the `i' attribute cannot be modified:  it  cannot  be
   deleted  or  renamed,  no link can be created to this file and no
   data can be written to the file.  Only the superuser or a process
   possessing  the  CAP_LINUX_IMMUTABLE  capability can set or clear
   this attribute.

So does that mean root can change it?

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [DSA-403-1] Kernel update?

2003-12-01 Thread Bill Moseley
On Mon, Dec 01, 2003 at 10:44:15PM +0100, J.H.M. Dassen (Ray) wrote:
 On Mon, Dec 01, 2003 at 12:51:14 -0800, Bill Moseley wrote:
  Wichert's post about the Debian hacked machines and the integer overflow
  in the Kernel talks about the 2.4.18 source package being updated.
  But my machines are all using the package:
  
kernel-source-2.4.20 - Linux kernel source for version 2.4.20 with Debian patches
 
 Read up on http://www.debian.org/security/faq#testing . AFAICT
 kernel-source-2.4.20 isn't a woody package. Presumably it will be fixed when
 incoming opens again.

I thought it was a woody package.  That's why I was asking.


  So how would I get this patch?
 
 I'd go for building kernel images from the kernel.org 2.4.23 sources using
 kernel-package's make-kpkg.

And that was my previous question.  Would 2.4.23 have *all* the Debian
patches the kernel-source-2.4.20 refers to?

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Question on Perl modules

2003-12-01 Thread Bill Moseley
I'm trying to understand *why* a package was downgraded:

I was installing Bricolage that depends on a bunch of Perl
modules, one of which is libclass-container-perl.

In debian sid there is:

  $ apt-cache show libclass-container-perl | grep Filename
  Filename: 
pool/main/libc/libclass-container-perl/libclass-container-perl_0.07-1_all.deb

Note the version.  But Bricolage install says it needs a newer version:

  Checking that Class::Container version is = 0.09... not ok.

Ok, so I grab the latest version from CPAN (Class-Container-0.10.tar.gz)
and use dh-make-perl and it creates this .deb:

  libclass-container-perl_0.1-1_all.deb

Notice that the version number is now 0.10.  After installing I've got
trouble:

  You might want to run `apt-get -f install' to correct these:
  The following packages have unmet dependencies:
libhtml-mason-perl: Depends: libclass-container-perl (= 0.07-1) but 0.1-1 is to 
be installed
libmodule-build-perl: Depends: libarchive-tar-perl (= 1.0.0) but it is not going 
to be installed
  Depends: libextutils-parsexs-perl (= 2.02) but it is not 
going to be installed

So, I follow the advice and it looks like the package is *downgraded*.

$ apt-get -f install  
Reading Package Lists... Done
Building Dependency Tree... Done
Correcting dependencies... Done
The following extra packages will be installed:
  libclass-container-perl
The following packages will be upgraded
  libclass-container-perl
1 upgraded, 0 newly installed, 0 to remove and 4 not upgraded.
Need to get 0B/24.4kB of archives.
After unpacking 49.2kB of additional disk space will be used.
Do you want to continue? [Y/n] y
(Reading database ... 90973 files and directories currently installed.)
Preparing to replace libclass-container-perl 0.1-1 (using 
.../libclass-container-perl_0.07-1_all.deb) ...
Unpacking replacement libclass-container-perl ...
Setting up libclass-container-perl (0.07-1) ...

So why did dpkg *downgrade* form 0.10 to 0.07?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: nvidia vs ati

2003-12-01 Thread Bill Moseley
On Sun, Nov 30, 2003 at 10:12:07AM +0100, Elie De Brauwer wrote:
 Let's do some benchmarking 
 I have a PIV 2.8 ghz (800 mhz fsb), 1 gig ddr 400 ram and an geforce fx 5900 
 ultra with 256 meg ram. When running X at 1600x1200 resolution I get about 
 4800 fps in glxgears

Ok, you are making me feel bad.

I've got an XP 1800+ on a MSI K7T266 board with a matrox G550 AGP
running in 1280x960 and X 4.3.0.1.  Noramlly run dual head xinerama but
this is running with one screen setup:

My fps is not quite so impressive as others have posted.  Before I loaded
my agpgart module I had:

$ glxgears

960 frames in 5.0 seconds = 192.000 FPS
960 frames in 5.0 seconds = 192.000 FPS
960 frames in 5.0 seconds = 192.000 FPS
916 frames in 5.0 seconds = 183.200 FPS

After insmod agpgart

1334 frames in 5.0 seconds = 266.800 FPS
1556 frames in 5.0 seconds = 311.200 FPS
1557 frames in 5.0 seconds = 311.400 FPS
1557 frames in 5.0 seconds = 311.400 FPS

Which is still less than exciting.  And that's the default window size
for glxgears.  Full screen (maximized) is real ugly:

164 frames in 5.0 seconds = 32.800 FPS
165 frames in 5.0 seconds = 33.000 FPS
164 frames in 5.0 seconds = 32.800 FPS

So is that just old, slow hardware[1], or should I be looking at other
possible problems?


Nothing jumps out in the logs:

[EMAIL PROTECTED]:~$ egrep '(\(EE\)|\(WW\))' /var/log/XFree86.0.log
 (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
(WW) Open APM failed (/dev/apm_bios) (No such file or directory)
(WW) Warning, couldn't open module mga_hal
(EE) MGA: Failed to load module mga_hal (module does not exist, 0)
(WW) MGA(0): Video BIOS info block not detected!


[EMAIL PROTECTED]:~$ fgrep -i agp  /var/log/XFree86.0.log
(--) PCI:*(1:0:0) Matrox Graphics, Inc. MGA G550 AGP rev 1, Mem @ 0xdc00/25, 
0xdfefc000/14, 0xdf00/23, BIOS @ 0xdfec/17
mga2164w AGP, mgag100, mgag100 PCI, mgag200, mgag200 PCI, mgag400,
(**) MGA(0): Option AGPMode 4
(**) MGA(0): Using AGP 4x mode
(II) MGA(0): [agp] Mode 0x1f000207 [AGP 0x1106/0x3099; Card 0x102b/0x2527]
(II) MGA(0): [agp] 12288 kB allocated with handle 0xfb52
(II) MGA(0): [agp] WARP microcode handle = 0xe000
(II) MGA(0): [agp] WARP microcode mapped at 0x42a15000
(II) MGA(0): [agp] Primary DMA handle = 0xe0008000
(II) MGA(0): [agp] Primary DMA mapped at 0x42a1d000
(II) MGA(0): [agp] DMA buffers handle = 0xe0108000
(II) MGA(0): [agp] DMA buffers mapped at 0x42b1d000
(II) MGA(0): [agp] agpTexture handle = 0xe0908000
(II) MGA(0): [agp] agpTexture size: 2816 kb
(II) MGA(0): [agp] Status page mapped at 0x4001e000

[1] BTW -- I used to run swish-e indexing on this machine and it would
index 25,000 files in about a minute.  A few OS changes later, hard disk
upgrades, and another 1/4 of RAM and now it indexes those same files in
about 4 minutes.  So maybe something else is going on, but I don't know
where to start looking.  Any ideas?

Thanks,


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Debian Package Finder, where?

2003-12-02 Thread Bill Moseley
On Tue, Dec 02, 2003 at 08:24:38AM -0600, Hugo Vanwoerkom wrote:

 apt-get install apt-file

 The following packages have unmet dependencies:
   apt-file: Depends: libapt-pkg-perl but it is not going to be installed
 E: Broken packages

I find that message so helpful! ;)

 It appears perlapi-5.6.1 and libapt-pkg-libc6.2-3-2-3.2 are not in my 
 sources. Without messing everything up, I guess I'll have to wait. :-(

I just installed apt-file on two machines, stable and sid, without a 
problem.  I wonder why yours isn't working.


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: nvidia vs ati

2003-12-02 Thread Bill Moseley
On Tue, Dec 02, 2003 at 04:26:42PM +0100, Arnt Karlsen wrote:
 On Mon, 1 Dec 2003 18:54:08 -0800, 
 Bill Moseley [EMAIL PROTECTED] wrote in message 
 [EMAIL PROTECTED]:
 
  Which is still less than exciting.  And that's the default window size
  for glxgears.  Full screen (maximized) is real ugly:
  
  164 frames in 5.0 seconds = 32.800 FPS
  165 frames in 5.0 seconds = 33.000 FPS
  164 frames in 5.0 seconds = 32.800 FPS
 
 ..ever checked FPS in a movie theater?  ;-)

Oh, no.  I can't stand watching those slowly flashing images! ;) 



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [DSA-403-1] Kernel update?

2003-12-03 Thread Bill Moseley
On Wed, Dec 03, 2003 at 10:43:43AM -0500, David Z Maze wrote:
 Harshwardhan Nagaonkar [EMAIL PROTECTED] writes:
 
  So, does this mean that I can compile my kernel without initrd, and it
  will still not break on debian? I understand that this will involve
  editing /etc/lilo.conf and getting rid of the initrd line. Any other
  gotchas that I should know about?
 
 Yes, that's right.  The important thing is that you need to make sure
 the drivers for your root disk and filesystem (probably IDE disk and
 ext2, but these could both be other things) are built into the
 kernel, not built as modules.  Just make sure you have a LILO entry
 around to boot your old kernel if you get stuck.

So is the purpose of initrd to have a small kernel but be able to load
whatever modules might be needed for the currently running hardware?

If so I often wonder why that's needed -- that is, why not just build a
kernel with everything compiled in?  If, say, installing from CD then
size of the kernel isn't critical (not to mention that the modules take
up space, too), and most machines have quite a bit of RAM these days, so
I would not think that an issue either.  Which brings me back to the
point that maybe I don't really understand the need for initrd...

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: these fonts are making me go crazy

2003-12-03 Thread Bill Moseley
 Why the #$%* can't the font installation and setup be a bit easier?

I would not have put it so nicely! ;)

I finally got my fonts looking better on one of my machines that's been
driving me NUTS for about a year (debian-user is littered with my
pleas for help with fonts).

This does *NOT* mean I have it setup correctly or that I understand
things much better now...

I'm running Sid and it was mostly mozilla that was the problem with ugly
fonts.  I'm mostly in either mozilla or xterm.  Xterm fonts have always
been fine, although they are not anti-aliased.

I finally got things acceptable in mozilla by really trimming down my Files
section:

Section Files
RgbPath  /usr/X11R6/lib/X11/rgb
ModulePath   /usr/X11R6/lib/modules

FontPath/usr/lib/X11/fonts/Speedo
FontPath/usr/lib/X11/fonts/misc
FontPath/usr/lib/X11/fonts/100dpi
FontPath/usr/lib/X11/fonts/75dpi
EndSection

And then in /etc/fonts/fonts.conf:

dir/usr/share/fonts/dir
dir/usr/X11R6/lib/X11/fonts/Type1/dir
dir/usr/local/share/fonts/dir

I still don't understand fontconfig.  I thought fontconfig was used for
selecting the best font and then X still rendered them and therefore the
font paths listed in fonts.conf needed to also be in XF86Config-4.  But
that does not seem to be the case.  I have a huge font selection list in
Mozilla and OpenOffice.

xlsfonts doesn't show many fonts

  $ xlsfonts | wc -l
  1257

I think I could add more paths to my Files section, but my thinking is
to use the minimum required.

  $ locate fonts.dir | wc -l
  52

I suppose a number of those are empty (or maybe symlinks so duplicates).

I can add this line

   FontPath/var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType

and I get more fonts listed in xlsfonts (another 550 fonts), but I don't
seen any difference in any of my applications when I do that.

Oh:

 Section Files
 FontPathunix/:7101# local font server
 FontPathunix/:7100# local font serveri

I also used to have unix/:7100 which, as far as I can tell, just
duplicated the fonts I have listed above (indeed adding the font server
in just exactly doubled the number of fonts reported from xlsfonts).  So I see
no use for the xfs font server at all and thus removed it.





-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



ye olde upgrade vs. dist-upgrade

2003-12-03 Thread Bill Moseley
I always use dist-upgrade on my Woody machine when security 
announcements come out.  I do this out of habit -- I think early on I 
had problems with just upgrade.

Is there a reason to use or not use dist-upgrade on Woody machines for
security updates?




-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: ye olde upgrade vs. dist-upgrade

2003-12-04 Thread Bill Moseley
On Wed, Dec 03, 2003 at 11:13:22PM -0800, Marc Wilson wrote:
 On Wed, Dec 03, 2003 at 08:41:27PM -0800, Bill Moseley wrote:
  Is there a reason to use or not use dist-upgrade on Woody machines for
  security updates?
 
 Is there a reason to not actually bother reading the man page for apt-get
 and learning the difference between the two targets?

Sorry, I wasn't clear.  Yes, I know the what the docs say.

 'upgrade'   - apt CAN'T change a package's installation state
 'dist-upgrade'  - apt CAN change a package's installation state

I use woody in my sources.list instead of saying stable.  Packages in 
Stable are, well, stable.  There are security updates that will replace 
packages, of course, but dependencies should not change so there's no 
installation state to change when doing security updates.

Therefore, it's been my assumption that in that case dist-upgrade and
upgrade act in the same way.  Someone commented that dist-upgrade is the
wrong thing to use for security updates, but I'm not clear if that's
because of their different environment (stable vs. woody in
sources.list) or something else that is not clear to me from the docs.


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: No need for 2.4.23 (re compromise)

2003-12-05 Thread Bill Moseley
On Fri, Dec 05, 2003 at 08:39:44PM +0900, Vincent Lefevre wrote:
  No, Debian didn't leave Joe User out in the rain to get his own kernel
  source. All you need is apt-getable. Even a kernel package if you don't
  want to compile just now.
 
 But this means downgrading to 2.4.18.

Right.  I asked what about the other kernel-source packages? and 
someone said that 2.4.18 was the only one in stable.

[EMAIL PROTECTED]:~$ cat /etc/apt/sources.list | egrep -v ^#

deb http://http.us.debian.org/debian/ woody main non-free contrib
deb-src http://http.us.debian.org/debian/ woody main non-free contrib
deb http://non-us.debian.org/debian-non-US woody/non-US main contrib non-free
deb-src http://non-us.debian.org/debian-non-US woody/non-US main contrib non-free
deb http://security.debian.org/ woody/updates main contrib non-free

[EMAIL PROTECTED]:~$ apt-cache search kernel-source-2.4
kernel-source-2.4.10 - Linux kernel source for version 2.4.10
kernel-source-2.4.14 - Linux kernel source for version 2.4.14
kernel-source-2.4.16 - Linux kernel source for version 2.4.16
kernel-source-2.4.17 - Linux kernel source for version 2.4.17
kernel-source-2.4.17-hppa - Linux kernel source for version 2.4.17 on HPPA
kernel-source-2.4.18-hppa - Linux kernel source for version 2.4.18 on HPPA
kernel-source-2.4.17-ia64 - Linux kernel source for version 2.4.17 on IA-64
kernel-source-2.4.18 - Linux kernel source for version 2.4.18
kernel-source-2.4.20 - Linux kernel source for version 2.4.20 with Debian patches

I'm using that last one, 2.4.20.


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: ye olde upgrade vs. dist-upgrade

2003-12-05 Thread Bill Moseley
On Thu, Dec 04, 2003 at 08:23:25PM -0800, Marc Wilson wrote:
 You're not wondering the same thing as me... I know perfectly well what the
 two targets do.  It's Bill Moseley who's doing the wondering.
 
  I always do dist-upgrade also.  Since I also always use -u, I'm not
  worried about its removing or installing things I don't want...
 
 Uh, no, all that does is show you what it's going to do without actually
 *doing* it.  It has nothing to do with what you're *allowing* it to do.
 Assuming it shows you that it intends to remove a package, or install a new
 one... what are you going to do then?  Are you going to still turn it
 loose, or are you going to investigate why?


Odd.  I though it was -s that shows you what to it's going to do without
actually *doing* it.  Man, I really do have a hard time reading the man
pages after all! ;)

-u enables APT::Get::Show-Upgraded to true which lists what packages are
going to be updated, but, IIRC, APT::Get::Show-Upgraded is true by
default.

Back to my Original Question:

Man, do I have bad luck.  Seems like lately I post a simple question, 
but it's too simple and left open to interpretation, someone answers the 
wrong question and then the thread goes off in some other direction and 
I never get my answer. ;)

I guess email is that way.  If I had asked that question in person 
someone would have responded can you rephrase your question?

So I'll rephrase it one more time:

Yes, I understand the difference between update and dist-upgrade as the 
manual describes it and as it's be re-quoted here a few times.

My question is if sources.list specifies woody instead of stable so 
dist-upgrade will not someday upgrade to sarge and since a stable 
distribution should not change dependencies, IS there a difference 
between using upgrade vs. dist-upgrade in that case?

I don't see that there is a difference.

Now, regarding a system running Sid:

I've always used dist-upgrade.  IIRC, I have had problems in the past 
just using upgrade with broken dependencies.  I also (IIRC) have seen 
posts here about not using upgrade in Sid.  But reading the manual it 
seems like upgrade should be fine, but more and more packages will be 
left out of the upgrade due to changing dependencies that happen in Sid.

Are there other potential problems that upgrade can cause on Sid that 
I'm not seeing?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: No need for 2.4.23 (re compromise)

2003-12-05 Thread Bill Moseley
On Fri, Dec 05, 2003 at 05:20:28PM +0100, Vincent Lefevre wrote:
 On 2003-12-05 07:47:47 -0800, Bill Moseley wrote:
 [...]
  kernel-source-2.4.20 - Linux kernel source for version 2.4.20 with
  Debian patches
  
  I'm using that last one, 2.4.20.
 
 But I don't think it has been fixed, as there is no version from
 the security updates:
 
 greux:~ apt-show-versions kernel-source-2.4.20 -a
 kernel-source-2.4.20install ok not-installed
 No stable version
 kernel-source-2.4.202.4.20-11   testing
 kernel-source-2.4.202.4.20-11   unstable
 kernel-source-2.4.20 not installed

Oh, So maybe 2.4.20 source is not in stable after all.  I'm not clear
why apt-cache search is listing kernel-source-2.4.20:

From the manual:

   search search  performs  a full text search on all available package
  files for the regex pattern given. 

I assumed available meant the packages available via the listings in
sources.list. But trying apt-cache search kernel-source-2.4.20 on
another Stable machine with the same source.list returns nothing.  So
I guess available includes packages manually installed. 



Hum, I cannot remember installing that package, although it is 

  ii  kernel-source-2 2.4.20-8Linux kernel source for version 2.4.20 with De

my notes for the machine show I used

  wget ftp://ftp.kernel.org/pub/linux/kernel/v2.4/linux-2.4.20.tar.bz2

so much for taking good notes.  I must have had some problem with the
kernel.org version and just copied the package from a Sid machine.  

Time to try out 2.4.23 from kernel.org.

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Using aide for detection

2003-12-05 Thread Bill Moseley
A few questions about actually using the aide package:

I asked before about using the aide package.  The default
installation places the database (and the binary for that matter) in a
place where they can be modified.

Someone recommended making the file immutable.  From googling it seems 
that it's not that hard for someone to remove the immutable flag from 
the file.  Also, I'm running the XFS file system, and immutable seems to 
be an ext2 and ext3 feature.

1) For a machine that doesn't have a cdrom and/or is physically 
available to me, is there any other trick to make sure the database is 
secure?  The machine I'm thinking about doesn't have nfs mounts 
available to it, either.

2) From initial setup of aide, I'm getting daily reports about changes in 
log files.  Is there any reason to monitory the log files with aide 
since they are suppose to change?

3) What if an attacker that broke into the machine simply disables the
cron job for aide?  How would that be detected?  

Or, could a root kit manage to still report to aide that all files were
un-modified?  Not to be too gloomy, but it seems like once someone gets
root that the machine is hosed, and worse, with a good root kit it could
be impossible to detect.


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: ye olde upgrade vs. dist-upgrade

2003-12-05 Thread Bill Moseley
On Fri, Dec 05, 2003 at 10:01:37AM -0800, Vineet Kumar wrote:
 * Bill Moseley ([EMAIL PROTECTED]) [031205 08:38]:
  
  My question is if sources.list specifies woody instead of stable so 
  dist-upgrade will not someday upgrade to sarge and since a stable 
  distribution should not change dependencies, IS there a difference 
  between using upgrade vs. dist-upgrade in that case?
  
  I don't see that there is a difference.
 
 I think the answer is probably not, but why not err on the side of
 caution?  I think it's kind of like the difference between using sudo or
 fakeroot to build a deb.  In theory, they should produce the same
 outcome.  But why would you issue a more powerful command when a simpler
 one will suffice?

Yes, you are right, the question was just academic.  I wanted to make
sure that I really understood the difference.  This was the result of
someone making the blanket statement to me that dist-upgrade was dangerous
and the wrong thing to use without explaining why - even when I had
explained that I use stable in my sources.list.  It's important to me
to make sure I understand things before responding to such statements.

True, update is the correct operation.  The (academic) question was
not that, but rather if I had a flaw in my understanding of the differences 
-- or if there were differences not enumerated clearly in the
documentation.  You know, someone says you are wrong and it's helpful to
make sure you are actually right before saying so... ;)


Thanks,

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: OT - archiving mail

2003-12-05 Thread Bill Moseley
On Fri, Dec 05, 2003 at 08:02:48PM +0100, Richard Lyons wrote:
   - If I read the ~/Mail directory from mutt, I only get to see the 
 top level folders.  If I convert it to a flat structure, there will
 be over 100 folders to scroll through to find or file anything.

I've been thinking of reducing the number of mail boxes I use.  Instead
archive the incoming mail based on some rules.  Then I just delete
messages from my mail folders as needed.

http://www.rrbcurnow.freeuk.com/mairix/ is one program in debian that
might help.  I haven't used it, but it sound about like what I want.

I been wanting to create my own.  Split the headers on incoming and
index in a database.  That would allow making queries on a number of
columns at the same time, and use cron to clean things up over time (why
archive debian-user for more than a few days when there's other
archives?).  MySQL full text indexing would make searching easier -- or
use Swish-e and a few perl module to split the message into parts for
seaching:

body=(kernel compile) AND from=(hank.org)

That approach sound best for me as I could really customize what gets
indexed, and I could store the emails gzipped and use file timestamps to
remove old mailing list messages.

I'd probably use a web interface so it's available to me when
travelling.  Save search results to a folder so I could pull up old
messages.


   - I have to use mbox because when I travel (and copy all the current 
 folders to, say, a smart media card) I cannot copy maildir files 
 -- apparently the various non-alphanumeric characters in the 
 filenames trip up 'cp -r'

Get an imap server on line, then add in a webmail client.


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: No need for 2.4.23 (re compromise)

2003-12-05 Thread Bill Moseley
On Sat, Dec 06, 2003 at 01:07:31AM +, Mark C wrote:

 On Fri, 2003-12-05 at 15:47, Bill Moseley wrote:

 

  I'm using that last one, 2.4.20.

 

 same here from the debian sources, but with a few added patches, 

 there is no need to download a new kernel, just get the source you have

 for the currently running kernel, apply this patch:



I already built 2.4.23.  Good to get my cpu a bit of exercise once in a 

while.



 

 -- cut -

 --- 1.31/mm/mmap.c  Fri Sep 12 06:44:06 2003

 +++ 1.32/mm/mmap.c  Thu Oct  2 01:18:19 2003

 @@ -1041,6 +1041,9 @@

 if (!len)

 return addr;

   

 +   if ((addr + len)  TASK_SIZE || (addr + len)  addr)

 +   return -EINVAL;

 +



So that's the brk bug?  Doesn't take much code to wreck havoc, does it.



|| (addr + len)  addr.  Hum.  So, wrap around overflow?





-- 

Bill Moseley

[EMAIL PROTECTED]




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: bcm4400 source for nic .deb file

2003-12-06 Thread Bill Moseley

On Wed, Nov 19, 2003 at 01:28:48AM +, Export wrote:
 I just installed a bare bones debian woody, however my nic was not detected, 
 but i've found the .deb file to make it work

FWIW: the broadcom driver is included in the 2.4.23 kernel.  I just 
built this from kernel.org sources yesterday.



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Playing RealOne clips

2003-12-06 Thread Bill Moseley
Someone pointed me to an audio clip of some music.

Is it possible to get mplayer to play any of these?

  http://www.prairiehome.org/performances/20031129/

BTW -- I have mplayerplug-in v0.80 in mozilla 1.5-3

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Playing RealOne clips

2003-12-06 Thread Bill Moseley
On Sat, Dec 06, 2003 at 09:45:47PM -0600, Todd Pytel wrote:
 On Sat, 6 Dec 2003 19:34:48 -0800
 Bill Moseley [EMAIL PROTECTED] wrote:
 
  Someone pointed me to an audio clip of some music.
  
  Is it possible to get mplayer to play any of these?
  
http://www.prairiehome.org/performances/20031129/
 
 Don't know about mplayer - I never had much luck with that plugin - but
 both realplayer and gxine stream the audio just fine from moz-firebird
 for me.

Todd,

So any recommendations on selecting a front end?  I'm running icewm.

Thanks,

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Playing RealOne clips

2003-12-06 Thread Bill Moseley
On Sat, Dec 06, 2003 at 10:36:27PM -0600, Todd Pytel wrote:
  So any recommendations on selecting a front end?  I'm running icewm.
 
 I'm not sure exactly what you mean by a front end. Both of those can
 be selected as helper-applications in Mozilla when the dialog pops up.

Oh, no I meant from these:

  http://xinehq.de/index.php/releases

I was wondering if you (or anyone) had compared the different ones.
gxine says it includes mozilla plugin -- if that means the xine will
play inside the mozilla window vs. a separate window I'm not sure I
care.

 I find gxine to be the most generally useful plugin for Mozilla - much
 less temperamental than mplayer for everything but quicktime, which it
 doesn't handle so gracefully. But there are a few Real clips that only
 realplayer can deal with, so I keep it around as well.

I'll give it a try. 

BTW -- I've been finding that quite a few web lately cause mozilla to 
eat all cpu -- where I have to killall mozilla-bin to the machine back.





-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Using aide for detection

2003-12-06 Thread Bill Moseley
On Sun, Dec 07, 2003 at 12:34:20AM -0500, ScruLoose wrote:

  3) What if an attacker that broke into the machine simply disables the
  cron job for aide?  How would that be detected?  
 
 When you don't get the daily report, start worrying.

I guess.  I try to watch for them, but after 100 days of the same report 
every morning it's easy to glaze over them.  I much prefer to get mail 
only when there's a problem.  Unless, of course, the problem is that the 
mail isn't getting delivered.  I suppose the answer there is to have 
multiple machines checking on each other.

 And even a smart rootkit has to put itself somewhere.  If it then uses
 altered init or ps or ls or whatever to hide its own existence... well
 that's the whole *point* of aide, right? the altered ps (altered to not
 list the rootkit process, obviously) will not have the same MD5 checksum
 as the original. And so it goes.

I don't know the kernel -- but I wonder if a root kit could be smart 
enough to return the old ps or ls or init when reading (for calculating 
the md5) vs. running the program which would run the new version.  I 
suppose anything is possible once they have control of the machine.

Too much to worry about.



-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Playing RealOne clips

2003-12-07 Thread Bill Moseley
(sorry about the busted thread)

On Sat, Dec 06, 2003 at 10:36:27PM -0600, Todd Pytel wrote:

Is it possible to get mplayer to play any of these?

  http://www.prairiehome.org/performances/20031129/
   
   Don't know about mplayer - I never had much luck with that plugin -
   but both realplayer and gxine stream the audio just fine from
   moz-firebird for me.

Ok, I've installed mozilla-firebird and gxine from Sid and they play.
Yet all the links play the same stream.  I'm not sure if that's a 
problem on my end or on their server.

I can't skip ahead or back in the stream, either.  IIRC, I used to be 
able to do that on Windows with RealPlayer.  (Again, maybe that's an 
issue with the server.)

BTW -- is there a way to download rtsp:// type of files and then play 
them locally?


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Debian Package Finder, where?

2003-12-08 Thread Bill Moseley
On Mon, Dec 08, 2003 at 11:04:41PM +, Colin Watson wrote:
 On Tue, Dec 02, 2003 at 07:15:51AM -0800, Bill Moseley wrote:
  On Tue, Dec 02, 2003 at 08:24:38AM -0600, Hugo Vanwoerkom wrote:
   The following packages have unmet dependencies:
 apt-file: Depends: libapt-pkg-perl but it is not going to be installed
   E: Broken packages
  
  I find that message so helpful! ;)
  
   It appears perlapi-5.6.1 and libapt-pkg-libc6.2-3-2-3.2 are not in my 
   sources. Without messing everything up, I guess I'll have to wait. :-(
  
  I just installed apt-file on two machines, stable and sid, without a 
  problem.  I wonder why yours isn't working.
 
 Because he isn't using either stable or unstable, he's using testing.
 libapt-pkg-perl is broken there at the moment; we need to get a new
 version of perl into testing first.

Oh, Ok.  Perhaps it is just my timing, but I think my machine has been more
stable since upgrading from Testing to Unstable ;)

-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: who calls /ETC/MODULES

2003-12-09 Thread Bill Moseley
On Tue, Dec 09, 2003 at 04:58:59AM -0800, Sebastia Altemir wrote:
 Thanks Andreas, for your time !
 Here comes the problem : there is no link to MODUTILS in any /etc/rcN.d.

/etc/rcS.d


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: who calls /ETC/MODULES

2003-12-10 Thread Bill Moseley
On Wed, Dec 10, 2003 at 03:22:41AM -0800, Sebastia Altemir wrote:
 Thanks Bill and Marc - you are rigth : Andreas pointed to rcS.d, but I
 was fixed on looking into rc2.d !
 Now that it's clear that rcS.d does it, I dont understand the
 difference between level 1 and level S !
 I see rc1.d is almost empty (?), but rcS.d not.
 Can someone tell me the boot level sequence where S fits ? Before
 1 ??
 Or a pointer to a doc ... The Debian Policy Manual doesn't talk
 about ...

man init 
man inittab

# Boot-time system configuration/initialization script.
# This is run first except when booting in emergency (-b) mode.
si::sysinit:/etc/init.d/rcS


-- 
Bill Moseley
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



How to deal with package broken dependencies

2002-12-22 Thread Bill Moseley

I installed kdebase-libs today to get Kmail working.  It seems to have
broken a few things, so I'm wonder how best to deal with it.

First, I had gkrellm2 installed.  Now dpkg shows:

rc  gkrellm1.2.12-2   Multiple stacked system monitors: 1 process.
rc  gkrellm2   2.0.3-1Multiple stacked system monitors: 1 process.

I'm not sure what happened here.  I don't ever remember requesting gkrellm
(version 1) and I sure didn't ask either to be removed -- perhaps it was
removed on a installation conflict that I missed?

I had also install Aspell 0.50.3 from source -- I have some code that
depends on the New Aspell.

Now I see this in dpkg

rc  libaspell100.33.7.1-8 The aspell spell checker runtime libraries.
ii  libpspell4 0.12.2-6   Portable spell checker interface library

That on is probably my fault due to installing the New Aspell from source,
but I'm not sure.

Is this just a fact of life when using packages that may have conflicting
dependencies?

Can the package system tell me more about these packages, like when they
were installed (or removed) and what caused that to happen?

Thanks,




-- 
Bill Moseley [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Sylpheed and mail clients (was: Can Kmail be used outside ofKDE)?

2002-12-22 Thread Bill Moseley
On Sun, 22 Dec 2002, Shawn Lamson wrote:

 Did you right click on Mailbox (MH) folder and rebuild folder tree ?

No, but that does seem to fix it.  I wonder why it keeps getting off in   
its counts.


 http://hank.org/images/sylpheed.png

 That image looks just like mine - it looks like you have short lines
 but then when you send it should wrap correctly.

Yes, it does fix it when sending.  But it sure isn't very nice to look at
when responding to the long emails my boss writes.


  also include things like URLs that you do not want wrapped?

 I don't know about this, sorry... i just put a colon and the url on
 it's own line, if it still wraps that the receivers issue :) for
 example:

 http://madzimambo.sytes.net:8080/israel/FactsOfIsrael

 I know that isnt long enough to wrap though, sorry.

but you don't have wrap turned on (your paragraphs are coming in
unwrapped and I'm using Pine's ^J to rewrap).


 I use claws and get the CVS version compiled regularly...  obviously
 sylpheed-claws isnt perfect, but for every darn I get one cool,
 know what I mean? :)

I agree.  It has a lot of cool features, which is why I'm trying really
hard to use it.  Just wish it did the standard things well, too! ;)


 You could try posting to [EMAIL PROTECTED] with your issues 
too.

I will, again.  Thanks for your time.



-- 
Bill Moseley [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Speaking of ntp, yes CD-R does mess with the clock!

2002-12-22 Thread Bill Moseley
On Sun, 22 Dec 2002, Shawn Lamson wrote:

date; burn-cd.sh; date
  
  and burning the CD using cdrdao (48x drive -- about 4 minutes to burn a
  CD) caused the system clock to fall behind about *50* seconds.
  
  Maybe it's because the CD-R is so fast?  Let's do the time warp again!
 
 This is why I installed rdate, I think it is b/c it is so processor
 intensive (CD-R).  I didn't read the entire previous thread on ntp,
 but rdate at least does the trick for my single user system.

Just seems really odd.  Interrupts still happen, right?  And to drop 50
seconds in 4 minutes just doesn't seem like a matter of the machine being
too busy to keep time.

Weird.  I need to have him see if it does the same thing with other
burning programs, or when ripping.




-- 
Bill Moseley [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: img src=-http://ippath/photo.jpg not work, plese help

2002-12-22 Thread Bill Moseley
On Mon, 23 Dec 2002, eric lin wrote:

 Dear Adam:
 
I am using Debain progeny on 2.4.20, my question in hyper link to 
 access my site 's photo or file work,  but directly show pic by putting 
 a code
 img src=http://ippath/photo.jpg; not work,
 so I have to took off the http://ippath/
 and copy my photo.jpg to /var/www/ directory
 
 that restrict me post file or photo only at my own site, not to other's 
 site-and it is not that site intend to block, ie ebay

$ host ippath
Host ippath not found: 3(NXDOMAIN)

Now you are posting to debian-firewall?

Do I understand your question?  Are you saying that a page contains an
in-lined image  with img src=... and that you
can fetch that web page, but the image isn't showing up because of your
firewall?

 I suspect my system setting or isp level have problem

I don't think it's either of those.

Have you taken the good advice of all the people that have recommended you
read some introductions to HTML and CGI?

You are posting on four lists that I read -- how many others? Are you
trolling?



-- 
Bill Moseley [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




  1   2   3   4   5   6   >