Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-29 Thread Norman Rieß
Am 29.03.2013 01:49, schrieb Peter Humphrey: On Thursday 28 March 2013 20:53:49 Paul Hartman wrote: In my case, my ISP's DNS servers are slow (several seconds to reply), fail randomly when they should resolve, return an IP (which goes to their ad-laden helper website if you are

Re: [gentoo-user] emul-linux-x86-libs blocking tons of X libs

2013-03-29 Thread Neil Bothwick
On Fri, 29 Mar 2013 02:17:18 +, Mateusz Kowalczyk wrote: * These packages depend on emul-linux-x86-gtklibs: dev-util/android-sdk-update-manager-21 (amd64 ? app-emulation/emul-linux-x86-gtklibs) sys-devel/gcc-4.5.4 (multilib ? app-emulation/emul-linux-x86-gtklibs) sys-devel/gcc-4.6.3

Re: [gentoo-user] Is 'MAKEOPTS=--jobs --load-average=5' silly?

2013-03-29 Thread Mick
On Thursday 28 Mar 2013 14:03:27 Peter Humphrey wrote: On Wednesday 27 March 2013 18:16:22 Walter Dnes wrote: OK, I'll go with... MAKEOPTS=-j2 --load-average=3 This box is an i5 with four single-threaded CPUs and I limit the average load to 8. Since emerge is running at niceness=3

Re: [gentoo-user] Is 'MAKEOPTS=--jobs --load-average=5' silly?

2013-03-29 Thread Neil Bothwick
On Fri, 29 Mar 2013 12:36:56 +, Mick wrote: I've got a first generation i7 and this is what I have set up in my make.conf: MAKEOPTS=-j5 -l12.8 EMERGE_DEFAULT_OPTS=--quiet-build=n n is the default for quiet-build if --jobs is set to 1, or unspecified. But using a higher value will

Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-29 Thread Alan McKinnon
On 28/03/2013 22:53, Paul Hartman wrote: On Thu, Mar 28, 2013 at 3:02 PM, Alan McKinnon alan.mckin...@gmail.com wrote: Or just use the ISP's DNS caches. In the vast majority of cases, the ISP knows how to do it right and the user does not. Generally true, though I've known people to choose

Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-29 Thread Alan McKinnon
On 29/03/2013 10:53, Norman Rieß wrote: That is just evil. Have you no alternative to this ISP? -- Peter Like free and open DNS servers? ;-) Like the one i am talking about and was told it was unnessesary crap? When you describe the service you DO get from your

Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-29 Thread Michael Mol
On 03/29/2013 09:27 AM, Alan McKinnon wrote: On 29/03/2013 10:53, Norman Rieß wrote: That is just evil. Have you no alternative to this ISP? -- Peter Like free and open DNS servers? ;-) Like the one i am talking about and was told it was unnessesary crap? When you describe

[gentoo-user] ext4 inline data

2013-03-29 Thread Florian Philipp
Hi list! I noticed that beginning with kernel 3.8, ext4 can store small files entirely inside the inode. But I couldn't find much additional information: - Is the improvement automatically enabled? - Is the change backwards compatible? Can I still read such files with kernel 3.7? - Can current

[gentoo-user] 4G Stick Huawei E3276

2013-03-29 Thread Stefan G. Weichinger
Greets! I have a new and shiny Huawei E3276 stick here and want to test it with my gentoo thinkpad running Gnome. I managed to get some /dev/ttyUSB0 .. the device is usb_modeswitch-ed automatically. I also added the modules option and cdc_ncm to my kernel config and the dmesg looks ok: #

Re: [gentoo-user] 4G Stick Huawei E3276

2013-03-29 Thread Stefan G. Weichinger
forgot to add: lsusb: Bus 001 Device 006: ID 12d1:1506 Huawei Technologies Co., Ltd. E398 LTE/UMTS/GSM Modem/Networkcard it shows as E398 here but is labeled as E3276

Re: [gentoo-user] Re: abi_x86_32

2013-03-29 Thread Raffaele BELARDI
On 03/28/2013 08:11 PM, Nikos Chantziaras wrote: On 28/03/13 20:39, Paul Hartman wrote: Like the forum post you linked says, instead of setting abi_x86_32 as a USE flag, what you can do in your make.conf is set: ABI_X86=64 32 (if you want to build both 32bit and 64bit) I think ABI_X86=32

Re: [gentoo-user] 4G Stick Huawei E3276

2013-03-29 Thread Mick
On Friday 29 Mar 2013 14:10:02 Stefan G. Weichinger wrote: Greets! I have a new and shiny Huawei E3276 stick here and want to test it with my gentoo thinkpad running Gnome. I managed to get some /dev/ttyUSB0 .. the device is usb_modeswitch-ed automatically. I also added the modules

Re: [gentoo-user] 4G Stick Huawei E3276

2013-03-29 Thread Stefan G. Weichinger
Am 29.03.2013 16:05, schrieb Mick: You're missing module 'qmi_wwan'. Trying adding this to your kernel and replug the device (or use modprobe -v qmi_wwan). Should I rmmod the others before? I compiled and loaded that module ... no real difference to see ... still no mobile broadband

Re: [gentoo-user] cyrus-sasl necessary with localhost webmail?

2013-03-29 Thread Stroller
On 28 March 2013, at 21:53, Grant wrote: I recently switched from Thunderbird to Roundcube (highly recommended), switched to the non-SSL courier daemon, and plugged the firewall hole since courier resides on the same system as my web server. Do I still need cyrus-sasl or will a webmail

Re: [gentoo-user] Is 'MAKEOPTS=--jobs --load-average=5' silly?

2013-03-29 Thread Stroller
On 29 March 2013, at 03:36, Nilesh Govindrajan wrote: ... I can only imagine he was pointing out that you have a single CPU with four cores in it. You're right, of course. I should have said /cores/. Cores or CPUs.. in this context it's *almost*, __NOT EXACTLY__ same. Which is exactly

[gentoo-user] Re: Is 'MAKEOPTS=--jobs --load-average=5' silly?

2013-03-29 Thread »Q«
On Fri, 29 Mar 2013 16:54:37 + Stroller strol...@stellar.eclipse.co.uk wrote: On 29 March 2013, at 03:36, Nilesh Govindrajan wrote: ... I can only imagine he was pointing out that you have a single CPU with four cores in it. You're right, of course. I should have said /cores/.

Re: [gentoo-user] Re: Is 'MAKEOPTS=--jobs --load-average=5' silly?

2013-03-29 Thread Dale
»Q« wrote: On Fri, 29 Mar 2013 16:54:37 + Stroller strol...@stellar.eclipse.co.uk wrote: On 29 March 2013, at 03:36, Nilesh Govindrajan wrote: ... I can only imagine he was pointing out that you have a single CPU with four cores in it. You're right, of course. I should have said

Re: [gentoo-user] Re: Is 'MAKEOPTS=--jobs --load-average=5' silly?

2013-03-29 Thread Michael Mol
On 03/29/2013 01:46 PM, Dale wrote: »Q« wrote: On Fri, 29 Mar 2013 16:54:37 + Stroller strol...@stellar.eclipse.co.uk wrote: On 29 March 2013, at 03:36, Nilesh Govindrajan wrote: ... I can only imagine he was pointing out that you have a single CPU with four cores in it. You're right,

[gentoo-user] iptables (not) started?

2013-03-29 Thread Jarry
Hi Gentoo-users, I noticed one thing on my server: during boot-up no message about firewall being started is printed on console. I always have to check manually if iptables-rules have been loaded. Strange thing, when doing shutdown, I see messages I expect: * Saving iptables state ...

Re: [gentoo-user] iptables (not) started?

2013-03-29 Thread Mick
On Friday 29 Mar 2013 18:25:11 Jarry wrote: Hi Gentoo-users, I noticed one thing on my server: during boot-up no message about firewall being started is printed on console. I always have to check manually if iptables-rules have been loaded. Strange thing, when doing shutdown, I see messages

Re: [gentoo-user] 4G Stick Huawei E3276

2013-03-29 Thread Mick
On Friday 29 Mar 2013 15:23:41 Stefan G. Weichinger wrote: Am 29.03.2013 16:05, schrieb Mick: You're missing module 'qmi_wwan'. Trying adding this to your kernel and replug the device (or use modprobe -v qmi_wwan). Should I rmmod the others before? I compiled and loaded that module

Re: [gentoo-user] 4G Stick Huawei E3276

2013-03-29 Thread Stefan G. Weichinger
Am 29.03.2013 19:51, schrieb Mick: ifconfig should show a new device has been activated. Yes? see below ... When I rmmod them all and plug in again, I get option loaded again. Should I remove this one from my .config? Even when I rmmod option, modprobe qmi_wwan and then plugin option

Re: [gentoo-user] iptables (not) started?

2013-03-29 Thread Jarry
On 29-Mar-13 19:43, Mick wrote: On Friday 29 Mar 2013 18:25:11 Jarry wrote: Hi Gentoo-users, I noticed one thing on my server: during boot-up no message about firewall being started is printed on console. I always have to check manually if iptables-rules have been loaded. Strange thing, when

Re: [gentoo-user] ext4 inline data

2013-03-29 Thread Paul Hartman
On Fri, Mar 29, 2013 at 8:48 AM, Florian Philipp li...@binarywings.net wrote: Hi list! I noticed that beginning with kernel 3.8, ext4 can store small files entirely inside the inode. But I couldn't find much additional information: - Is the improvement automatically enabled? I don't believe

Re: [gentoo-user] 4G Stick Huawei E3276

2013-03-29 Thread Mick
On Friday 29 Mar 2013 19:01:15 Stefan G. Weichinger wrote: I get no wwan0 but this: # ifconfig wwp0s26u1u2i1 wwp0s26u1u2i1: flags=4098BROADCAST,MULTICAST mtu 1500 ether 0c:5b:8f:27:9a:64 txqueuelen 1000 (Ethernet) RX packets 0 bytes 0 (0.0 B) RX errors 0

Re: [gentoo-user] iptables (not) started?

2013-03-29 Thread Pandu Poluan
On Mar 30, 2013 1:27 AM, Jarry mr.ja...@gmail.com wrote: Hi Gentoo-users, I noticed one thing on my server: during boot-up no message about firewall being started is printed on console. I always have to check manually if iptables-rules have been loaded. Strange thing, when doing shutdown, I

Re: [gentoo-user] ext4 inline data

2013-03-29 Thread Pandu Poluan
On Mar 29, 2013 8:49 PM, Florian Philipp li...@binarywings.net wrote: Hi list! I noticed that beginning with kernel 3.8, ext4 can store small files entirely inside the inode. But I couldn't find much additional information: - Is the improvement automatically enabled? - Is the change

Re: [gentoo-user] iptables (not) started?

2013-03-29 Thread Mick
On Friday 29 Mar 2013 19:03:57 Jarry wrote: On 29-Mar-13 19:43, Mick wrote: On Friday 29 Mar 2013 18:25:11 Jarry wrote: Hi Gentoo-users, I noticed one thing on my server: during boot-up no message about firewall being started is printed on console. I always have to check manually if

Re: [gentoo-user] iptables (not) started?

2013-03-29 Thread Mick
On Friday 29 Mar 2013 19:34:39 Mick wrote: On Friday 29 Mar 2013 19:03:57 Jarry wrote: On 29-Mar-13 19:43, Mick wrote: On Friday 29 Mar 2013 18:25:11 Jarry wrote: Hi Gentoo-users, I noticed one thing on my server: during boot-up no message about firewall being started is printed

[gentoo-user] Change in iptables syntax fails to load rule

2013-03-29 Thread Mick
Hi All, A few months ago I got some errors about the match option in some iptables rules that I was running at the time. I modified these to remove match and add conntrack and all went well. Now I am trying to run this: /sbin/iptables -t nat -A OUTPUT -v -p tcp --dport 1935 -j REDIRECT but

Re: [gentoo-user] cyrus-sasl necessary with localhost webmail?

2013-03-29 Thread Grant
I recently switched from Thunderbird to Roundcube (highly recommended), switched to the non-SSL courier daemon, and plugged the firewall hole since courier resides on the same system as my web server. Do I still need cyrus-sasl or will a webmail client authenticate directly with courier?

Re: [gentoo-user] ext4 inline data

2013-03-29 Thread Paul Hartman
On Fri, Mar 29, 2013 at 2:20 PM, Pandu Poluan pa...@poluan.info wrote: My question would be: Will it introduce a significant advantage to my situation, so much so that I'm willing to live with the obvious drawbacks? Here are some benchmarks:

Re: [gentoo-user] Change in iptables syntax fails to load rule

2013-03-29 Thread Pandu Poluan
On Mar 30, 2013 2:54 AM, Mick michaelkintz...@gmail.com wrote: Hi All, A few months ago I got some errors about the match option in some iptables rules that I was running at the time. I modified these to remove match and add conntrack and all went well. Now I am trying to run this:

Re: [gentoo-user] iptables (not) started?

2013-03-29 Thread Neil Bothwick
On Fri, 29 Mar 2013 19:44:14 +, Mick wrote: Why do wikis and the like suggest that iptables should be in default rather than boot runlevel? Why not? There's no need to start it especially early, as long as it is running before the network comes up, and the init script takes care of that.

Re: [gentoo-user] 4G Stick Huawei E3276

2013-03-29 Thread Stefan G. Weichinger
Am 29.03.2013 20:14, schrieb Mick: On Friday 29 Mar 2013 19:01:15 Stefan G. Weichinger wrote: I get no wwan0 but this: # ifconfig wwp0s26u1u2i1 wwp0s26u1u2i1: flags=4098BROADCAST,MULTICAST mtu 1500 ether 0c:5b:8f:27:9a:64 txqueuelen 1000 (Ethernet) RX packets 0 bytes 0 (0.0 B) RX

Re: [gentoo-user] Using Amazon Web Services with gentoo

2013-03-29 Thread Stefan G. Weichinger
Am 24.03.2013 21:12, schrieb Stefan G. Weichinger: Does anyone of you use the Amazon EC2 service with gentoo-based instances? The loud and wild echo says: no ? Interesting! ;-)

Re: [gentoo-user] 4G Stick Huawei E3276

2013-03-29 Thread Stefan G. Weichinger
Am 29.03.2013 22:03, schrieb Stefan G. Weichinger: I don't know about NM's preferences ... I just assume this could be the problem. Gotta dig up some udev-ruling for this, any quick pointers anyone? even easier: You can change the device name using ifrename from package wireless_tools. Now

[gentoo-user] OT:Courseware and client db software

2013-03-29 Thread Samuraiii samuraiii
Hello, I'm searching for courseware/client db/support software for online use which I need to meet this criteria: 1) possibility to lead courses for no more than 12 clients (with uploading of files - possibility to play audio and video files is welcome but not necessary) - I know moodle is

Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-29 Thread Paul Hartman
On Thu, Mar 28, 2013 at 7:49 PM, Peter Humphrey pe...@humphrey.ukfsn.org wrote: On Thursday 28 March 2013 20:53:49 Paul Hartman wrote: In my case, my ISP's DNS servers are slow (several seconds to reply), fail randomly when they should resolve, return an IP (which goes to their ad-laden

Re: [gentoo-user] Using Amazon Web Services with gentoo

2013-03-29 Thread William Kenworthy
On 30/03/13 05:23, Stefan G. Weichinger wrote: Am 24.03.2013 21:12, schrieb Stefan G. Weichinger: Does anyone of you use the Amazon EC2 service with gentoo-based instances? The loud and wild echo says: no ? Interesting! ;-) moriah ~ # esearch amazon [ Results for search key :

Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-29 Thread William Kenworthy
On 30/03/13 06:34, Paul Hartman wrote: On Thu, Mar 28, 2013 at 7:49 PM, Peter Humphrey pe...@humphrey.ukfsn.org wrote: On Thursday 28 March 2013 20:53:49 Paul Hartman wrote: In my case, my ISP's DNS servers are slow (several seconds to reply), fail randomly when they should resolve, return

Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-29 Thread Michael Mol
On 03/29/2013 07:01 PM, William Kenworthy wrote: On 30/03/13 06:34, Paul Hartman wrote: On Thu, Mar 28, 2013 at 7:49 PM, Peter Humphrey pe...@humphrey.ukfsn.org wrote: On Thursday 28 March 2013 20:53:49 Paul Hartman wrote: In my case, my ISP's DNS servers are slow (several seconds to reply),

Re: [gentoo-user] iptables (not) started?

2013-03-29 Thread Mick
On Friday 29 Mar 2013 20:37:20 Neil Bothwick wrote: On Fri, 29 Mar 2013 19:44:14 +, Mick wrote: Why do wikis and the like suggest that iptables should be in default rather than boot runlevel? Why not? There's no need to start it especially early, as long as it is running before the

Re: [gentoo-user] 4G Stick Huawei E3276

2013-03-29 Thread Stefan G. Weichinger
Am 29.03.2013 22:40, schrieb Stefan G. Weichinger: Am 29.03.2013 22:03, schrieb Stefan G. Weichinger: I don't know about NM's preferences ... I just assume this could be the problem. Gotta dig up some udev-ruling for this, any quick pointers anyone? even easier: You can change the

Re: [gentoo-user] Change in iptables syntax fails to load rule

2013-03-29 Thread Mick
On Friday 29 Mar 2013 20:36:40 Pandu Poluan wrote: On Mar 30, 2013 2:54 AM, Mick michaelkintz...@gmail.com wrote: Hi All, A few months ago I got some errors about the match option in some iptables rules that I was running at the time. I modified these to remove match and add

Re: [gentoo-user] iptables (not) started?

2013-03-29 Thread Neil Bothwick
On Fri, 29 Mar 2013 23:29:39 +, Mick wrote: Why do wikis and the like suggest that iptables should be in default rather than boot runlevel? Why not? There's no need to start it especially early, as long as it is running before the network comes up, and the init script takes

Re: [gentoo-user] cyrus-sasl necessary with localhost webmail?

2013-03-29 Thread Stroller
On 29 March 2013, at 20:05, Grant wrote: ... I have a very old installation of net-mail/courier-imap I don't believe I have ever run cyrus-sasl on it. I have accessed this system via Squirrelmail, IMAP and (I think) IMAP-over-SSL. Thanks Stroller. Do you run postfix or another MTA on

Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-29 Thread Walter Dnes
On Fri, Mar 29, 2013 at 05:34:41PM -0500, Paul Hartman wrote Pretty much every major ISP in the US does DNS-hijacking and other shenanigans, so there's no avoiding the evilness. The obvious questions is... do they hijack all port-53 queries? Depending on the answer, there are 2 different

[gentoo-user] Current Dells and UEFI/secureboot (or other showstoppers)?

2013-03-29 Thread Walter Dnes
The reason I'm asking is that I have 2 Dell desktops (production and hot backup) that are pushing 5 or 6 years of age, and I need to replace at least one. They simply can't keep up with HD video streams... * it could keep up with Youtube 480p videos fullscreen under ADSL 5 megabit service.