Re: Any face-to-face CLUGging on 1 to 4 August?

2010-07-22 Thread Jim Cheetham
On Fri, Jul 23, 2010 at 12:22 PM, Carl Turney c.tur...@orcon.net.nz wrote:
 By the way...
 http://clug.net.nz/index.php/Helpers
 Comes up with a brief script/program, instead of anything resembling a web
 page.

clug.net.nz used to refer to the Canterbury Linux Users Group, but
they lapsed the domain name by choice. It was purchased by some random
US business, who seem to have (badly) copied the old content (CC-By-SA
licensed) and put it on their own servers which belong to a Polish
netblock.

There's nothing we can do about this. I've just sent email to the
WHOIS contact, but I'm not expecting a helpful response.

-jim


Re: Seeking Linuxy hardware to rejig my life to digital convergence....

2010-07-20 Thread Jim Cheetham
On Tue, Jul 20, 2010 at 3:14 PM, Christopher Sawtell csawt...@gmail.com wrote:
 On 20 July 2010 08:50, C. Falconer cfalco...@totalteam.co.nz wrote:
 No no no!   Skype is evil and nasty and CLOSED.

 Apart from the fact that it is proprietary software, what is evil and
 nasty about it?
 ...
 to spite my face. I have four proprietary packages on my Linux
 machine, Skype, Java, Adobe flash and acroread, simply because it is
 impossible to function in the connected world without them.

Java is (now) open sourced, and I haven't come across a need for PDF
reading that Evince failed for, or for writing that OpenOffice.org
failed for.

I do have Adobe Flash, and Skype. I use Flash for entertainment
(mostly flash games from Kongregate, and for youtube/vimeo/etc for
video, HTML5 notwithstanding) and Skype because customers  family
want it.

Skype's big advantage is the size of the existing userbase, and the
ease of use. If it was wonderfully easy to use but no-one else was on
their network, there would be no point. I would expect that most
people are using Skype because it is free (obviously there's data
usage costs, but that's common to SIP too), because it's easy to
use, and ooh, look, you can do video!.

 works pretty well for me on a Telstra Cable connection. It's also
 fully encrypted.

Because it's proprietary closed source, you can't make that argument.
The best you can say is that you can't figure out how the audio is
represented in flight. It's possible that the data stream is properly
encrypted, however there are numerous governments who have made
comments that they are able to eavesdrop on Skype conversations --
it's unlikely that they are all inaccurate statements.

 I tried running GnomeMeeting / Eikga a while ago, but it never worked
 reliably. and required a proxy in the firewall. The firewall was, and

Skype is a significantly better implementation of just work within
the network resources available than most SIP solutions, because the
ease of use of the software directly impacts on the revenues of the
parent compay (i.e. if it works fine, some people will buy value-add
services like Skype Out). This is not a common proposition for Open
Source software, which is part of the main useability differences
between the closed and open world (obviously, not all of the
differences).

BTW, I switched from a Linux edge firewall to pfSense a couple of
weeks ago, and all my tested as working just fine SIP connections
were dead the next day; I wasted a day trying to fix the situation,
adding firewall rules, running proxies, everything. Eventually calmed
down and realised that the problem was just a relatively short state
table timeout on the firewall. Now I run multiple SIP devices talking
to multiple servers with no special NAT considerations (especially, no
STUN, proxy or incoming rules) and everything is fine.
Skype of course worked perfectly the whole time, probably because
Skype is using more of my network resources than SIP is, just to stay
online. Luckily it seems as if that's such a small portion of my
available network resource that it doesn't cause a problem.

So, is Skype evil and nasty? It's evil philosophically because the
communications protocol is closed, and to a lesser extent because the
client implementation is closed. It's nasty because it is very greedy
with your network resources compared to other solutions that provide
the same user experience. However, is it too evil and nasty to use?
For me, no. It's bad, but not bad enough to stop using it yet. If
there were an Open Source alternative, that provided the same
functionality with a similar-enough user experience, I would stop
using it and promote the alternative. But SIP voice telephones are not
the same. SIP video would be great, but it's not the
protocol/implementations that are the problem here (see Linphone for
example) but the need to choose a proxy or voip operator that is a
step too far for Aunt Tilly. Less choice is anathema for us, but
necessary for them.

-jim


Re: Which Android?

2010-07-13 Thread Jim Cheetham
http://www.gadgetsdna.com/motorola-droid-x-vs-iphone-4-vs-htc-droid-incredible-vs-evo-4g-vs-nexus-one/4191/
might make a good read ...

-jim


Re: CLUG meetings

2010-07-09 Thread Jim Cheetham
On Sat, Jul 10, 2010 at 12:42 PM, Daniel Hill daniel.h...@orcon.net.nz wrote:
  On 06/07/10 15:45, Rik Tindall wrote:
 Some local *nix users meet on the first Wednesday of each month (i.e.
 tomorrow) at 7.30pm-9.30pm in the South Learning Centre at South Library on
 Colombo Street in Beckenham (use the rear door).
 Rik Tindall

 Can some one confirm this? I though they canceled it?

Rik *is* they in this context -- if he says that there is a meeting,
there is one.

He is the guy that goes to the effort of organising the venue and the
meetings. However these meetings are not promoted as part of CLUG, I
think because Rik's goals and those of most of CLUG were slightly
different. Whether that is still true today I'm not so sure.

-jim


Re: Kiwi Online

2010-06-14 Thread Jim Cheetham
On Mon, Jun 14, 2010 at 11:53 PM, max podolian max.podol...@gmail.com wrote:
 I tried with different variations of Stupid Mode and +MS. Whatever I
 do I get No Carrier error. Any suggestions?

Connect directly to the modem with something like minicom and see if
it's responding  dialling manually ... you'll find authentication
difficult, but that bit needs to be confirmed anyway.

-jim


Re: Is there such a distro?

2010-06-03 Thread Jim Cheetham
On Wed, Jun 2, 2010 at 8:59 AM, Solor Vox solor...@gmail.com wrote:
 On 2 June 2010 10:31, Jim Cheetham j...@gonzul.net wrote:
 If you are the owner of the computer in question and you are
 competant, there is no reason at all not to use root all the time.
 Just set your uid to 0 and be done with it. I'm as serious with that
 comment as I am with writing passwords down, i.e. very serious.

 This is both horrible and dangerous advice.  First, we are human and I

Not really. It's an extreme position and I put the word competent in
quotes. Personally, I don't run as UID 0 (although on my main
workstation only I do permit sudo with no password for my user).

I'm not going to bother with a point-by-point discussion of your
comments, they're all sufficiently correct. I just don't agree that
they are situations you need to guard against too strongly on a
workstation where you should be able to rebuild from an ISO with
minimal impact at short notice. That sounds a little bit like moving
the goalposts for the discussion, but it's part of the definition of
competent ... :-)

 However, if you are *not* the owner (i.e. in any business context)
 then sudo provides a very valuable audit log experience. You have 5

 Sure, sudo helps with logs if the admins use it.

Well, don't give them the choice. I'm talking about production systems
in a professional services model (ITIL etc), not just a bunch of guys
logging on to a webserver somewhere to hack on their blogs. In these
environments, audit is far more important than giving the admin a
pleasant work environment ..

-jim


Re: Is there such a distro?

2010-06-01 Thread Jim Cheetham
On Wed, Jun 2, 2010 at 7:57 AM, Peter Glassenbury (CSSE)
peter.glassenb...@canterbury.ac.nz wrote:
 Like Volker, I have yet to be convinced of the point of typing
 sudo  in front of all the commands I want to run as root.
 When it becomes reflex, you are going to make the same mistakes
 as if you login as root.

If you are the owner of the computer in question and you are
competant, there is no reason at all not to use root all the time.
Just set your uid to 0 and be done with it. I'm as serious with that
comment as I am with writing passwords down, i.e. very serious.

However, if you are *not* the owner (i.e. in any business context)
then sudo provides a very valuable audit log experience. You have 5
admins -- which one was it that logged on as root and broke your
production system? With sudo, it is much easier to track back on
problems. You can use sudo to get a root shell, rather than restrict
it to individual commands, if you want the flexibility.

-jim


Re: Is there such a distro?

2010-05-31 Thread Jim Cheetham
On Mon, May 31, 2010 at 12:10 PM, Ryan McCoskrie
ryan.mccosk...@gmail.com wrote:
 By generic I don't just mean desktop centered with no paradigm shifting
 technologies. I mean a system that aims to have as few original contributions
 as possible and have a complete out-of-the-box set of programs (GUI and CLI)
 that one would expect out of a Linux based system.

I think you're really looking for the most old-fashioned distro :-)
For example, you probably want init scripts in /etc/rc* ... which as
many distros as possible are leaving behind ...

Debian is the best-managed old-fashioned system, but they have
package guidelines that mean the installed packages often do not match
the upstream author's original intentions; but you didn't explicitly
say you wanted to be upstream-compliant.

You might enjoy Gobo -- I'm really not sure about the out-of-the-box
experience, but the ability to bring in anything upstream and run it
with the original author's intended environment is pretty much
unparalleled -- there has to be a single kernel, but you can use
different libc for different programs if you want, easily.

-jim


Fwd: [nznog] NZRS asks for help testing a DNS feature

2010-05-24 Thread Jim Cheetham
NZRS are testing the ability of your DNS to work with names in
māori.nz (i.e. spelt correctly with the macron on the a) -- please
read the message below  visit http://www.te-reo.maori.dns.net.nz to
enable them to test.


-- Forwarded message --
From: Sebastian Castro sebast...@nzrs.net.nz
Date: Mon, May 24, 2010 at 5:49 PM
Subject: [nznog] NZRS asks for help testing a DNS feature
To: nznog nz...@list.waikato.ac.nz


Greetings NZNOG Community:

Within the context of the IDN Project, that adds five new characters
(the macronised vowels) to the set of characters valid for .nz domain
name registration, a new SLD will be created: māori.nz

All existing and future names registered under .maori.nz will be
duplicated in the DNS to be available under .māori.nz as well.  We will
use a DNS record called a DNAME to implement this functionality.

Although the DNAME record has been standard for more than 10 years, we
want to make sure domains under māori.nz will work properly. To do so,
we have prepared a test page that will let us find out the level of
DNAME support among cache resolvers.

Please visit http://www.te-reo.maori.dns.net.nz to help us with the
testing process. We will collect visits to the page and DNS queries for
particular names and correlate them to identify the number of resolvers
supporting the DNAME record. Feel free to share this link with anybody,
including other suitable mailing lists.

If you find any issue, have comments or suggestions, please let us know.

Cheers
--
Sebastian Castro
DNS Specialist
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 495 2337
mobile: +64 21 400535


___
NZNOG mailing list
nz...@list.waikato.ac.nz
http://list.waikato.ac.nz/mailman/listinfo/nznog


Re: Telecom kills Bigtime plan

2010-05-20 Thread Jim Cheetham
On Fri, May 21, 2010 at 9:59 AM, Craig Falconer
cfalco...@totalteam.co.nz wrote:
 True flat-rate starts at $1k/month.   There will not be a real domestic
 all-you-can-eat connection for double-digits/month.

That may be true in most of NZ, and it's probably related to the
physical infrastructure monopolies. But down here in Dunedin I'm
connected to WIC via wireless; flat-rate 1Mbps for $75/month. I don't
get things so fast, but I don't have to keep track of how much data
I'm using.

So it can be done, all you need is an ISP run by someone who cares
about what the Internet really is ...

-jim


Re: Blocked sight

2010-05-18 Thread Jim Cheetham
On Tue, May 18, 2010 at 9:08 PM, John mall...@actrix.co.nz wrote:
 But any way what I am wondering is it the telstra sight that is blocking
 things. Or is it an overseas sight.  and also If it is a NZ sight that
 is blocking. Are they allowed to do that.

they can do whatever they like, there are no rights out there.
It's a miracle the Internet works at all ...

I guess what's happened is that the upstream for PB has stopped
advertising routes to their addresses. Within NZ routing is broadly
based only on national or international; once you get into the
international routers with multiple peers connected you need to know
which route to take; if the network block that PB is on is no longer
being actively advertised, it becomes unroutable. No need for anyone
locally to do anything, it's a consequence of how large hosting
centres set things up.

http://en.wikipedia.org/wiki/Bgp may give you the background you need here.

-jim


Christchurch Tech Events

2010-05-09 Thread Jim Cheetham
http://christchurch.events.geek.nz/ is now online, aggregating various
tech things happening around the city. If someone wants to become
organised enough to add CLUG get-togethers to the list, this is a good
place to list them :-)

-jim


Re: 5 DRM free linux games - pay what you want sale

2010-05-08 Thread Jim Cheetham
On Sat, May 8, 2010 at 5:32 PM, Aidan Gauland
aidal...@no8wireless.co.nz wrote:
 Does anyone know how large the download is, and if they allow continuing
 interrupted downloads?

World of Goo : 66MB
Gish: 55MB
Lugaru: 36MB
Aquaria: 210MB
Penumbra: 300MB

Interrupted download test with wget -c ...

Resolving akamai.wolfire.com... 219.88.186.89, 219.88.186.96
Connecting to akamai.wolfire.com|219.88.186.89|:80... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 300207883 (286M), 299032200 (285M) remaining [binary/octet-stream]
Saving to: `penumbra_overture_1.1.sh'

So, yes :-)

Plus, the license is very fair; if you can show someone that you have
access to the download page, I believe that they would be justified in
giving you a copy of theirs.

-jim


Re: laptop recommendations pls

2010-05-03 Thread Jim Cheetham
On Tue, May 4, 2010 at 11:34 AM, Rik Tindall a...@infohelp.co.nz wrote:
 1. Economy - can be new / 'on special' or ex-lease.

Trademe or an auctioneer ... new machines are $1000+ in general.

 2. Wireless that goes (bluetooth too? - have yet to cross that bridge).

Wireless is important; check the chipset support and test first if
possible. Don't worry about bluetooth; there are perfectly functional
USB dongles to provide this if it isn't built in.

 3. Infrared - because that's how I connect my cellphone, having not got
 bluetooth functioning yet

That's not so common, but might be provided by a USB dongle. However
I'm not so sure you'll be able to talk to (random cellphone) over
infrared without having their PC sofwtare ...

 4. Low data quantity needs mean that any other modern hardware spec will
 probably suit ok.

Modem? External modem over a serial port I hope :-) otherwise you may
well end up with a winmodem and have to test carefully for support ...


Re: laptop recommendations pls

2010-05-03 Thread Jim Cheetham
On Tue, May 4, 2010 at 11:58 AM, Robert Fisher rob...@fisher.net.nz wrote:
 4. Low data quantity needs mean that any other modern hardware spec will
 probably suit ok.

 Modern (not modem)

Mmm, perhaps I should choose a better font if I'm going to start
shrinking text down to where I can no longer read it!!

-jim :-)


Re: FAQ List. (Was laptop recommendations pls)

2010-05-03 Thread Jim Cheetham
On Tue, May 4, 2010 at 12:36 PM, Steve Holdoway st...@greengecko.co.nz wrote:
 We used to run a wiki, but that sort of died. Maybe now that there are
 no longer regular meetings it maay be of more use.

http://wiki.linux.net.nz/CLUG

http://wiki.linux.net.nz/TitleSearch?s=laptop

It may be worth updating content in there, for the good of everyone 
not just CLUG.

-jim


Re: serious X problem

2010-04-26 Thread Jim Cheetham
On Tue, Apr 27, 2010 at 1:57 PM, Barry barr...@paradise.net.nz wrote:
 'mplayer -vo null file.avi' plays the sound track ok.
 'mplayer -vo x11 file.avi' plays the sound and video ok.
 'mplayer -vo xv file.avi' locks up keyboard, no mouse, mplayer screen but no
 image. Had to restart X (from xterm login).

So, Mandriva One 2009.0 works fine in all three cases, but 2009.1
fails with xv? What about 2010.0?

warning
Instead of changing the whole system, you might consider getting the
source for the libxv1 from 2009.0 (or 2010.0) and compiling it up,
then manually installing it on the 2009.1 system ...
/warning

This may screw something else up, of course ... but it might be a
good-enough bandaid. Bonus points if you can actually identify the
differences between working/non-working, and for actually packaging
the manual build into an RPM so you can remove it easily.

-jim


Re: serious X problem

2010-04-23 Thread Jim Cheetham
On Fri, Apr 23, 2010 at 6:24 PM, Barry barr...@paradise.net.nz wrote:
 avi files from my camera, VOB, wmv. Not sure on how to check for installed
 video codecs. I seem to remember a package for microsoft codecs,do I need
 it??

The filename extension normally indicates what container the video
has, but doesn't tell you how the video  audio inside it are encoded
-- it's like seeing a tgz file -- you know that the contents are in
a compressed tar format, but you still don't know if it contains jpegs
or gifs or bmps ...

ffmpeg -i movie will tell you what's inside a file

$ ffmpeg -i Big_Buck_Bunny_1080p_surround_FrostWire.com.avi
...
Input #0, avi, from 'Big_Buck_Bunny_1080p_surround_FrostWire.com.avi':
  Duration: 00:09:56.48, start: 0.00, bitrate: 12455 kb/s
Stream #0.0: Video: mpeg4, yuv420p, 1920x1080 [PAR 1:1 DAR 16:9],
24 tbr, 24 tbn, 24 tbc
Stream #0.1: Audio: ac3, 48000 Hz, 5.1, s16, 448 kb/s

So I can see that this file has video encoded with mpeg4, and an AC3
audion track.

However, if you are seeing this with a wide range of input files, this
is probably a red herring.

Most likely the problem is down to the video driver that X is using.
You will need to provide details of what video card you have (lspci)
and what driver you are using (lsmod perhaps). That's not my area of
specialty, sorry ... either wait for a more video-aware CLUG response,
or widen your search to nzlug's mailing list ...

-jim


Re: serious X problem

2010-04-22 Thread Jim Cheetham
On Fri, Apr 23, 2010 at 5:08 PM, Barry barr...@paradise.net.nz wrote:
 after many failed attempts to view movies I am at a complete loss on
 where to search next for a cure to my problem.

*any* movie? What codecs are you trying? Perhaps you're trying to play
something you don't have any support for, and that's what's doing the
actual crashing.

 The problem does not occur with an install of Mandriva one live for
 2009.0 but this distro has other problems, and an upgrade to 2009.1
 gives a messy system.

Well ... perhaps don't use Mandriva? If it can't upgrade itself
properly, use something that can.

-jim


Re: grepping the access log for hacker evidence

2010-04-14 Thread Jim Cheetham
On Thu, Apr 15, 2010 at 12:08 PM, Paul Swafford
yom...@chch.planet.co.nz wrote:
 basically what I'd like is to extract date / time / ip address from the log
 where a user has made a failed attempt.

 This is what I have tried... but its a bit too much info ..

 grep authentication failure /var/log/secure | awk '{print $0- $1 - $2
 -- $12 - $14 - $15}' | cut -b7-  | sort | uniq -c  hack.log

Install DenyHosts or Fail2Ban :-)

How about you show us a sample log entry that you're trying to locate
... not everyone has the same logs ...
Also, what info do you really need to extract, and why?
So ... what are fields 0 1 2 12 14 15 and why do you want them? Why do
you want them sorted into order? If you don't want the first 6 bytes
(not characters?) why are you asking awk to print them, etc etc.

Here's an Ubuntu auth.log entry :-
Apr 12 10:49:36 encode sshd[4894]: Failed password for root from
210.17.251.159 port 54129 ssh2
# grep Failed password for /var/log/auth.log|awk '{print $11, $9}'
210.17.251.159 root
210.17.251.159 root
...

-jim


Re: Print large image across multiple sheets

2010-03-28 Thread Jim Cheetham
On Sun, Mar 28, 2010 at 7:15 PM, Roy Britten roy.brit...@gmail.com wrote:
 I have a largish (~12000 pixels square) image that I want to print at
 ...
 It would be wonderful if someone has already produced a tool that
 takes an image and paginates it into, say, PDFs at a defined
 resolution. My google-fu has failed to find such a tool. Suggestions?

As an online service, try this wonderful site :-
http://homokaasu.org/rasterbator/

-jim


Re: Print large image across multiple sheets

2010-03-28 Thread Jim Cheetham
On Sun, Mar 28, 2010 at 9:07 PM, Roy Britten roy.brit...@gmail.com wrote:
 On 28 March 2010 20:12, Jim Cheetham j...@gonzul.net wrote:
 http://homokaasu.org/rasterbator/

 Thanks for the pointer. Unfortunately I suspect that uploading my 67MB

It's downloadable and installable. It's written for .Net 1.1, and is
reported to run OK on Ubuntu Feisty, at least ...
http://arje.net/rasterbator_on_mac

However, it's probably not what you really want anyway, as it really
wants to re-render your picture, and I gather you already have the
detail you require and are just trying to print it out :-)

-jim


Re: Good SSH client for windows?

2010-03-18 Thread Jim Cheetham
On Fri, Mar 19, 2010 at 3:31 PM, Craig Falconer
cfalco...@totalteam.co.nz wrote:
 Bryce Stenberg wrote, On 19/03/10 15:11:
 I need a good SSH client to use on my windows machine.

 PuTTY.  It works, its free, and it works.

Agreed. But it's just a terminal emulator.

 Or you could install cygwin and compile up xterm and ssh for windows.

Almost; install cygwin and use rxvt.exe to run bash; from there just
use ssh as 'normal'. This is probably the *best* option for anyone on
Windows who wants their PC to be as close an equal to their server as
possible. Same command line, mostly the same tools.

-jim


Re: ssh testing

2010-03-11 Thread Jim Cheetham
On Thu, Mar 11, 2010 at 9:55 PM, Steve Holdoway st...@greengecko.co.nz wrote:
 no - still being prompted for a password...

Steve, I hope you're testing with ssh -v so you can see all the
methods the ssh server is advertising.

Rob, I hope you've set PasswordAuthentication no in
/etc/ssh/sshd_config (and restarted sshd). I also hope that you have
whitelisted places you know you might be connecting from in
/etc/hosts.allow :-)

Hads, you're right that a connection attempt denied by sshd can move
on to the next authentication method, which often means that you get
asked for a password. However, denyhosts logs IP addresses in
/etc/hosts.deny, and sshd is usually compiled to look at tcpwrappers,
so people who have failed to login too many times will eventually get
no ACK from sshd at all.

-jim


Re: ssh testing

2010-03-11 Thread Jim Cheetham
On Fri, Mar 12, 2010 at 10:16 AM, Derek Smithies de...@indranet.co.nz wrote:
  In addition to the deny hosts approach, I would move the ssh port to
 somewhere else.
 ...
 yes yes, this is security by obscurity, (which is a poor form security), but

You are right that it cuts down attacks, because the great majority of
bot attacks don't bother doing anything except port 22. I have only
one server not running on port 22, and it basically gets zero scans
(in the period Aug 23 2009 to today).

However, if you don't remember that you have done this, it reduces
your own ability to connect to your own machine. It is not
discoverable and may lead you to waste lots of your own time trying
to debug a non-existent problem.

A well-configured ssh service isn't going to let an attacker in.
Well-configured can mean a lot of things, but includes at least no
passwords, only keys, only named users, never root and security
updated quickly from a reputable source. Adding blacklist on
unsuccessful attempts helps to prevent your machine wasting
resources.

I don't agree that well-configured means on a different port,
except possibly in some formally documented environments. And given
that most of those are internal networks where the very existence of
attack traffic is a great problem -- in other words, if someone is
even trying to attack port 22, you'd rather know about it than just
ignore it -- I tend to think it's more of a distraction than a
benefit.

There is a place for on a different port; if you don't want to pay
any attention to the security of your servers (i.e. you don't watch
log exceptions) and you only have (a small number, e.g. one) machine
you are responsible for, then it's a reasonably effective way to be
slightly more comfortable when ignoring the operations of your
machine.

-jim (who admits to having one machine running ssh on a non-standard
port. But only one machine ...)


Re: ssh testing

2010-03-11 Thread Jim Cheetham
On Fri, Mar 12, 2010 at 10:59 AM, Steve Holdoway st...@greengecko.co.nz wrote:
 For a couple of weeks away, I wouldn't bother with the obscurity bit in
 that way, rather just disable root login so they have to guess the user
 account and password before denyhosts closes them out.

Things that are set up for a couple of weeks tend to stay enabled
for far longer than intended! You're right that in Rob's example he
doesn't need to set up Fort Knox, but I'd strongly suggest that the
minimum bar should be username  key instead of username 
password.

I haven't done much research on the matter, I only keep half an eye on
attempts across my servers seeing as denyhosts works well, but I have
never noticed anyone even attempting to crack in with username 
key. Considering that a password is around 8-10 typeable characters,
and a key is around 700 typeable characters ... set up keys, not
passwords!

-jim


Re: ssh testing

2010-03-11 Thread Jim Cheetham
On Fri, Mar 12, 2010 at 11:23 AM, Steve Holdoway st...@greengecko.co.nz wrote:
 On Fri, 2010-03-12 at 11:17 +1300, Jim Cheetham wrote:
 and a key is around 700 typeable characters ... set up keys, not
 passwords!
 ... or passphrases, not passwords?

Well, you probably should be using passphrases instead of passwords in
many places. Passphrases work well for login, for example, and a
passphrase of equivalent entropy to a complex password is generally
much much easier to remember.

As a quick aside, here's a nice method: grab random numbers from
random.org, and look them up on a wordlist using the diceware.com
method ...

#!/bin/sh
# diceware ... generate a passphrase by combining RANDOM.ORG
#  with the diceware method, on the Beale wordlist

WORDS=${1:-5}
RANDOM='http://www.random.org/integers/?num=5min=1max=6col=5base=10format=plainrnd=new'

for i in $(seq 1 $WORDS)
do
FIVEd6=$(/usr/bin/GET $RANDOM | tr -d '\t')
grep $FIVEd6 $HOME/stash/docs/beale.wordlist.asc
done

$ diceware
55112   spits
61243   toni
14544   boot
56251   tamer
15221   broad

(Beware whenever you see variable names like FIVEd6 ... you are
dealing with a roleplayer, possibly a DDer ... lol)

However, joking aside ... while a passphrase may be a few times longer
than a password, it's still nothing compared with a key. Put a decent
passphrase on the private key, sure ... but that's not anything to do
with what the server sees on ssh login. And even that is slightly
undone by Ubuntu's helpful key agent, that autoloads everything in
~/.ssh and offers to remember that long passphrase for you ...

-jim


Re: UBUNTU 9.10 Server Install - LVM problem?

2010-03-11 Thread Jim Cheetham
On Fri, Mar 12, 2010 at 11:41 AM, Bryce Stenberg br...@hrnz.co.nz wrote:
 Does anyone know if there is a command I can run or file to edit that
 can tell the installer to now put the root file system on /dev/sda5 (the
 logical volume I just formatted) so as the installation can proceed?

With LVM you don't put any filesystem on a physical partition ...

You put LVM physical volumes onto partitions, collect sets of PVs
into a larger volume group, and then allocate different logical
volumes from there. You put your ext3 filesystems onto these logical
volumes ...

It all sounds much more complex, there's lots of jargon to get used
to, and on a small machine with only a couple of disks that never
change, it's probably too much overhead to be useful.

But, if the disks ever change ... it will save your life, very quickly :-)

-jim


Re: UBUNTU 9.10 Server Install - LVM problem?

2010-03-11 Thread Jim Cheetham
On Fri, Mar 12, 2010 at 1:34 PM, Steve Holdoway st...@greengecko.co.nz wrote:
 I wouldn't do that with the backups personally. If you're after backing
 up important production databases, then I'd look at replicating them
 ( to another machine preferably ) as a frist line of defence.

Replication gives you defence from hardware failure, the same way that
RAID does. But it has nothing whatsoever to do with being a backup
in the data sense. Except ...

 whilst over there, cold backups have no effect on live systems
 performance...

The only effect that they have is to push back on your replication
system :-) As long as the primary doesn't get excess load while
waiting for the replicant to come back up, you're in business.

 and no matter how cumbersome they are, I reckon they
 should always be a part of your backup strategy (:

Sure, but effectively that's what a snapshot is; if a full cold backup
takes say 1 hour, with LVM snapshotting you can reduce that to a
couple of seconds. Surely that's worth investigating? If you can grab
a snapshot that quickly (it'll still take an hour to actually back up
from there, but the DB doesn't have to know), and your production
system can handle being read-only for a second or so, you can dispense
with the need for a replicant in the first place.

-jim


Re: twitter clients?

2010-03-04 Thread Jim Cheetham
On Fri, Mar 5, 2010 at 11:17 AM, Steve Holdoway st...@greengecko.co.nz wrote:
 What do people recommend? I'm sick of gtwitter crashing for no apparent
 reason! Ubuntu 9.10 64 bit platform...

What, besides just not twittering? Or using a open platform like identi.ca?

Personally I just hook it up to Pidgin, because I have that running
already, and can't see the point of having multiple similar
applications running. It isn't eprfect, but it's good enough.

I see lots of people using TweetDeck, too.

-jim


Re: chroot sftp users

2010-03-02 Thread Jim Cheetham
On Wed, Mar 3, 2010 at 9:28 AM, Glenn Cogle gco...@gmail.com wrote:
 A backup isn't a backup unless it can be restored from.

On that subject, because of O'Reilley's current 3-for-2 book deal, I
just refreshed my 11 year old copy of Unix Backup  Recovery with
the newer Backup  Recovery, which covers Unix, Linux, OS X and
Windows. Very highly recommended, an excellent and accessible book.
http://oreilly.com/catalog/9780596102463/

It's primarily about open source tools being used for backup
environments, and is pretty close to being an essential read. However,
you can get most of his advice on http://backupcentral.com/

I was flipping through the old book, and out of the front dropped some
printouts :- the complete procedure for installing AMANDA (client and
server) on one of my old employer's systems, and the config files! I
guess in the pre-wiki world (this would have been late 1999) I'd put a
copy of the procedures in the best place to look in an emergency -- in
the Backup  Recovery book!

Now I must remember to check that I have paper dumps of restore data
for other machines ...

-jim


Re: chroot sftp users

2010-03-01 Thread Jim Cheetham
On Tue, Mar 2, 2010 at 4:53 PM, Glenn Cogle gco...@gmail.com wrote:
 Box is backed up to tape 5 nights/week.  I like backups - they help me
 sleep.

I used to sleep because of backups ... but now I sleep because restore works.

You are testing restore regularly I hope ... :-|

-jim


Re: Tip O'The Day : pigz and pbzip2

2010-02-08 Thread Jim Cheetham
On Tue, Feb 9, 2010 at 11:10 AM, John Carter john.car...@tait.co.nz wrote:
 pigz   is a drop in replacement for gzip
 pbzip2 is a drop in replacement for bzip2

Nice, thanks!


Re: GUI based MOTD for Ubuntu Karmic?

2010-02-02 Thread Jim Cheetham
On Tue, Feb 2, 2010 at 11:39 PM, Andrew Sands and...@theatrix.org.nz wrote:
 Anyone have any thoughts on how I might implement a GUI message-of-the-day.

Write a small pop-up application that uses zenity to display an info box ...

zenity --info  --text=$(cat /etc/motd)

Call it from each user's Startup Applications (for a Gnome system), or
perhaps in .xinitrc if you have a bare-bones setup.

For Ubuntu at least, /etc/gdm/Xsession seems to be worth looking at,
it seems to run everything in /etc/X11/Xsession.d -- that would make a
system-wide setting easy ... so dump your zenity-invoking script in
there with a number prefix like 85 or something, and your motd text
will pop up before the user desktop loads.

-jim


Re: Ubuntu server: no network after restore to new hardware?

2010-01-26 Thread Jim Cheetham
On Wed, Jan 27, 2010 at 1:14 PM, Bryce Stenberg br...@hrnz.co.nz wrote:
 After restoring the only thing not going seems to be my network connection.
 In my /etc/network/interfaces I still have the lines:
 auto eth0
 iface eth0 inet dhcp

Your new network interface is probably eth1, and eth0 is being
reserved for the old card, if it comes back.

Udev rules are automatically created and stored; have a look in
/etc/udev/rules.d/70-persistent-net.rules for the old ones.

If you are never going to re-introduce the old card, you can delete
the old rule ... probably there's a rule for the new card to be eth1
in there by now. If you remove that as well, on a reboot the new card
will stay as eth0.

Also, there's no reason it should be called 'eth0' or 'eth1' ... you
could call it anything, using those rules.

-jim


Re: What would you recommend??

2010-01-06 Thread Jim Cheetham
On Thu, Jan 7, 2010 at 11:59 AM, steve st...@greengecko.co.nz wrote:
 I've had a personal request from a client who wants to set up a website
 for the family - just to let them share photos, etc privately...

If it's private, you don't have to worry about security so much
(depending on how you enforce the privacy, simplest would be an HTTP
auth from the reverse proxy), so you could feel free to install PHP
software. Gallery is very good for photo sharing, I think they also
handle video these days. Pop a wordpress in front of it, job done.

-jim


Re: Starter for 10 :)

2010-01-04 Thread Jim Cheetham
2010/1/5 Paul Swafford yom...@chch.planet.co.nz:
 sendmail (qmail) will send a php generated email to gmail and a number of 
 other similar services .. but not to ISP email address.

 Your starter for 10 is why?

Insufficient data.

How about showing the log entries relevant to the outbound delivery attempt(s)?

-jim


Re: Spam assassin and mailman

2009-12-17 Thread Jim Cheetham
On Fri, Dec 18, 2009 at 11:57 AM, Tom Smith snake...@xtra.co.nz wrote:
 In the process of learning, I am going to ask the ignorant question. If
 mail is rejected from non-subscribers, how will subscription requests be
 handled by mailman?

Messages that are intended to go to everyone on the list are send to
listn...@...; Messages that are for sign-up go to
listname-subscr...@

Many people on a list who want to get off just post UNSUBSCRIBE to
the general list; mailman will optionally try to find these mistakes
and autofix them ... (i.e. don't send them on to the list subscribers,
and unsub the user as per their intended request).

-jim


Re: Very OT: USB cable question

2009-12-08 Thread Jim Cheetham
On Wed, Dec 9, 2009 at 10:05 AM,  ke...@katipo.net.nz wrote:
 I just bought myself another USB external hard drive and this one like the
 last one I bought has at the end that plugs into the PC a double USB end.
 Now I was wondering if plugging in both of these plugs affects the speed
 that data is transferred? I am assuming not as it is still going through
 the same cable and would just bottleneck at the other end of the cable
 which just has the one plug. Has anyone much wiser than me have any idea
 about this?

Nope, the second connector is only there to provide power (it should
be marked differently), and if the HDD itself is frugal enough, you
can get away with not having it connected. However you will usually
get a more stable experience when you have them both plugged in; but
you won't get faster data transfer.

-jim


Re: Subtle Info Leak of the Year...

2009-11-30 Thread Jim Cheetham
On Tue, Dec 1, 2009 at 5:22 PM, John Carter john.car...@tait.co.nz wrote:
 Firewalls leak tiny bits of info at the mac level, even if they
 reject everything at the IP level.

That's probably because the 'firewall' employed by Linux/OpenWRT is
called 'IP Tables', and has to receive an IP packet in order to decide
what to do; and on Ethernet that means ARP has to complete first.

Real network-level firewalls give you much lower-level controls,
should you need them. There are still some limits regarding what you
need to do in order to receive data, and some hacks to get around
that; but in an Ethernet network that leakage can be restricted to
just the nearest switch. IP Tables is basically a host firewall, and
the host can also be a router if it likes; but that doesn't make it
real network equipment. However, if all you're doing is running IP
networks, the difference is small enough to be ignored in most cases.

Oh, and as an aside; please allow your network edge devices to respond
to ping. It's very difficult telling the difference between an
ISP-link failure (i.e. a non-IP network) and a firewall failure if the
damn firewall won't respond to ping when everything is working
normally ...

-jim


Re: Skype on Kubuntu

2009-11-25 Thread Jim Cheetham
On Thu, Nov 26, 2009 at 3:28 PM, Christopher Sawtell csawt...@gmail.com wrote:
 Has anybody got Skype ( ver. 2.1.0.47 ) video to work on (K)ubuntu Kosmic
 Koala ( or what ever it is that they are callling the 9.10 version - I
 forget ) ?
 My logitech webcam used to work with earlier Kubuntus, but now all I get is
 a grey background.

My logitech quickcam pro 9000 works just fine out of the box with Ubuntu 9.10.

Not much to say, really :-)

-jim


Re: DNS-misdirection on a grand scale

2009-10-17 Thread Jim Cheetham
I'd guess that the original domain referenced has expired, and that a
domain squatter has purchased it ...

Domain ID:D157250839-LROR
Domain Name:BEGINNINGRUBY.ORG
Created On:02-Oct-2009 18:03:30 UTC
Last Updated On:02-Oct-2009 18:04:47 UTC
Expiration Date:02-Oct-2010 18:03:30 UTC

The current owner of the domain has listed his full contact details
though, which isn't normal. Perhaps you could give him a call and ask
about it :-)

-jim


Re: Pronounce sudo

2009-09-10 Thread Jim Cheetham
On Thu, Sep 10, 2009 at 7:53 PM, Kent Fredrickentfred...@gmail.com wrote:
 And to borrow from Rogers question, how do you all pronounce usr .

user with low inflection, as opposed to User with a high
inflection at the beginning to denote the capital.

But in all cases where strictly unambiguous communication is needed,
I'd say it and spell it, including the slash marks, which will be
introduced as the forward slash, which is the one on the
question-mark key (because some Windows people think \ is a forward
slash)

-jim


Re: Pronounce sudo

2009-09-09 Thread Jim Cheetham
On Thu, Sep 10, 2009 at 10:44 AM, Roger Searlero...@stepahead.org.nz wrote:
 So to borrow Robert's question from this morning, how would people say the
 folder /etc out loud?


E T C ... so /etc/hosts becomes E T C hosts

-jim


Re: RoR tutorials for *nix systems

2009-09-09 Thread Jim Cheetham
On Thu, Sep 10, 2009 at 8:51 AM, Kerryke...@katipo.net.nz wrote:
 Hi I'm keen on taking a look at Ruby on Rails and am after some linux specific
 real world tutorials ie no hello world type tuts.

There's not much linux-specific stuff in Ruby on Rails, to be honest.
Just run the webrick server from the command line in one window, run
the debugger in another (if you have any breakpoints defined) and you
should be good to go.

Don't bother trying to integrate into apache while you're learning the
thing, just use webrick directly.

-jim


Re: Pronounce sudo

2009-09-08 Thread Jim Cheetham
On Wed, Sep 9, 2009 at 3:55 PM, Robert Fisherrob...@fisher.net.nz wrote:
 So how should it be pronounced?

 soo-doo or soo-dough

S U do

Which is correct - I will dough this job / I will do this job ?
Next question - su fred is S U fred / Sue fred ?

-jim


Re: Networking - equivalent of windows 'alternate configuration' setting?

2009-08-19 Thread Jim Cheetham
On Thu, Aug 20, 2009 at 10:27 AM, Bryce Stenbergbr...@hrnz.co.nz wrote:
 This is have it set to use DHCP to get network address etc, but if no dhcp
 server is found within the timeout then set it to an already set manual
 configuration instead.

 Does anyone know if this is possible under Ubuntu 9.04?

A good way would be to configure dhclient to have a static lease,
which will be used if no DHCP server is available.

man dhclient.conf
The DHCP client may decide after some period of time (see PROTOCOL
TIMING) that it is not going to succeed
in  contacting a server.   At that time, it consults its own database
of old leases and tests each one that
has not yet timed out by pinging the listed router for that lease to
see if that lease could work.   It  is
possible to define one or more fixed leases in the client
configuration file for networks where there is no
DHCP or BOOTP service, so that the client can still automatically
configure its  address.This  is  done
with the lease statement.

So, edit /etc/dhcp3/dhclient.conf, and look at the commented-out stuff
at the bottom :-)

-jim


Re: Bash prompt

2009-08-10 Thread Jim Cheetham
On Tue, Aug 11, 2009 at 11:44 AM, Douglas Roydsdouglas.ro...@tait.co.nz wrote:
 Limit the length of the displayed path in the Bash prompt.
 ...
  1. Trim the path to the last 30 characters, and cut off a partial
     leading directory name
  2. Just display the last three directory names in the path

3. export PS1='$ '


Re: OT Press co hogging cpu usage

2009-06-25 Thread Jim Cheetham
On Fri, Jun 26, 2009 at 8:57 PM, Barry Marchantbarr...@paradise.net.nz wrote:
 has anyone looked at the press co website today? I am having trouble with it
 hogging cpu usage, in excess of 95% at times, and being unable to scroll the
 site because the scrollbar is locked up. Last time i tried over 130 images
 were d/l. Mouse response when trying to change apps is also appauling.

Often caused by poorly behaved flash apps, or sometimes multiple
animated gifs. Consider running adblock or something similar ...

-jim


Re: Motherboards that play nicely with Linux

2009-06-24 Thread Jim Cheetham
On Thu, Jun 25, 2009 at 10:45 AM, Robert Macdonaldrob...@tmail.com wrote:
 how do i put on abod e flash player on my computer

Generally, just balancing it on top of the case works well, but be
careful not to bump into it or it may fall off.

-jim


Re: Motherboards that play nicely with Linux

2009-06-24 Thread Jim Cheetham
On Thu, Jun 25, 2009 at 2:23 PM, Craig
Falconercfalco...@totalteam.co.nz wrote:
 X-Mailer: Danger Service

Looks like there's a ColdFusion application doing some sort of email
to blog conversion for the T-Mobile sidekick phone, judging by
conversation on
http://www.mail-archive.com/cf-t...@houseoffusion.com/msg137550.html

IIRC Robert has posted here in the past, but the message bodies were
usually blank. Obviously the phone doesn't work too well.

-jim


Re: Ubuntu 9.04 install - direct it to empty hard drive?

2009-06-18 Thread Jim Cheetham
There is a lot documentation for Ubuntu ... for example this page may help ...

https://help.ubuntu.com/community/How_to_dual-boot_Ubuntu_and_XP_after_installing_them_separately_on_two_HDs

-jim


Re: Ubuntu 9.04 install - direct it to empty hard drive?

2009-06-18 Thread Jim Cheetham
On Fri, Jun 19, 2009 at 2:36 PM, Bryce Stenbergbr...@hrnz.co.nz wrote:
 Yes - that let me partition my empty drive - but nowhere could I find a
 way of selecting this drive for the install.
 -bryce.

The install goes on to whichever partition gets used as /. Tell one
of these partitions that you want to mount /.

If you are manually partitioning, I recommend 10GB for /, whateverGB
for /home, and you can make swap on a partition if you want to (2xRAM
seems to be reasonable) or just make swap from files on a filesystem
later if you need it.

-jim


Re: dodgy hd

2009-06-15 Thread Jim Cheetham
On Mon, Jun 15, 2009 at 6:59 PM, Volker
Kuhlmannlist0...@paradise.net.nz wrote:
 Any disk with bad sectors within warranty goes back to maker. Period.

Agreed, I received two 750GBs about three months ago (with consecutive
serial numbers, sadly) and one has failed already, been straight back
to the vendor and been replaced.

However, in my case diagnosis was easy; the drive was detected as
being present by the OS, but nothing could be read from it at all
(i.e. not even the partition table).

Some vendors will try to reduce their return rate by saying that if
they find nothing wrong, they will not replace the item. In these
cases it's better to have a good set of diagnostic results available
to show what you've done (i.e. SMART data, or possibly something from
a liveCD like http://www.ultimatebootcd.com/).

In any case, Dove should be reliable, tell them what's happened and
organise a replacement drive. By default you need to return the old
one first (one reason why I run everything on RAID1) but they may well
be flexible if you talk to them.

-jim


Re: dodgy hd

2009-06-15 Thread Jim Cheetham
On Mon, Jun 15, 2009 at 10:15 PM, Hadley Richh...@nice.net.nz wrote:
 On Mon, 2009-06-15 at 22:08 +1200, Steve Holdoway wrote:
 Please tell me they weren't wd greens. I've had a 1TB fail within 5
 minutes... in fact I've had more fail this year than in the last 10.

 Always interesting. I've had several quick Seagate failures lately, and
 have been having a good run so far with the WD Greenpowers.

SAMSUNG HD753LJ s/n S13UJ1NQB01779 was the one that failed. Failure
was more than just the filesystem, I was unable to read or write to
the partition table.

Googling suggests
http://www.samsung.com/global/business/hdd/productmodel.do?type=61subtype=63model_cd=248

-jim


Re: dodgy hd

2009-06-15 Thread Jim Cheetham
On Tue, Jun 16, 2009 at 8:08 AM, Steve Holdowayst...@greengecko.co.nz wrote:
 On Tue, 2009-06-16 at 07:19 +1200, Jim Cheetham wrote:
 SAMSUNG HD753LJ       s/n S13UJ1NQB01779 was the one that failed. Failure
 was more than just the filesystem, I was unable to read or write to
 the partition table.
 That comment was aimed at Barry, the OP who restored his filesystem
 using an alternate superblock and has had no problem since...

Ah, OK. Down here in Dunedin I was probably too busy listening to the
list of school closures due to snow, and didn't check the comment
trail properly :-)

-jim


Re: M$oft and the NZ government

2009-05-30 Thread Jim Cheetham
On Sat, May 30, 2009 at 1:50 PM, Josh James josh.westac...@gmail.com wrote:
 hey guys do u think this is good news or bad news?
 http://www.theregister.co.uk/2009/05/26/microsoft_new_zealand/

There has been a lot of discussion about the G2009 process over on the
NZOSS OpenChat mailing list, if you're interested in the topic you
might want to head over there for a while :-)
http://lists.nzoss.org.nz/pipermail/openchat/2009-May/thread.html

-jim


Re: Shutting down CLUG wiki (including Fwd: Adding content to the NZLUG/WLUG wiki)

2009-05-24 Thread Jim Cheetham
On Fri, May 22, 2009 at 9:52 AM, Jim Cheetham j...@gonzul.net wrote:
 I'm planning to shut down[2] the CLUG wiki.

This action has now been completed. Useful CLUG content has been
migrated to http://wiki.linux.net.nz/CLUG.

For anyone who cares, the phpwiki dumps of the last state of the old
wiki are still available on http://clug.net.nz/. After a suitable
period, I will replace the current notice page with a redirect to
http://wiki.linux.net.nz/CLUG. If you feel that anything important has
been missed, either contribute it yourself or contact me (via this
list, or directly).

Remember that although I've been hosting the CLUG wiki site, I do not
own or control the CLUG domain names; these are held by Nick Rout.

-jim


Re: Linux Meetup Groups near Christchurch

2009-05-23 Thread Jim Cheetham
On Sat, May 23, 2009 at 5:43 PM, Christopher Sawtell csawt...@gmail.com wrote:
 By all means feel very free to re-start the monthly meetings.
 ...
 Be warned however that finding competent free of charge orators who live
 nearby and know about any of the subject matter below is like finding a
 needle in a haystack.

I think there's a big difference between the sort of social gathering
that meetup.com likes to promote, and a more formal 'presentations'
style.

What is working well down here in Dunedin is a bi-weekly social
gathering in a friendly pub. Sometimes the tables are covered with
laptops, sometimes a whole desktop machine makes it along if there's a
particular problem ... sometimes it's just chatting about non-computer
stuff. But it's with like-minded geeks.

So 'presentations' isn't working. Try social for a while ... :-)

-jim


Shutting down CLUG wiki (including Fwd: Adding content to the NZLUG/WLUG wiki)

2009-05-21 Thread Jim Cheetham
In recent years, pretty much the sole use of the CLUG wiki has been to
keep track of meetings and sometimes resources for those meetings.

Given that meetings are currently on a significant hiatus, and that
the bulk of the technical content of the CLUG wiki is already on
wiki.linux.net.nz[1], I'm planning to shut down[2] the CLUG wiki.

The http://wiki.linux.net.nz/CLUG page needs to be updated, and the
CLUG-specific content from the CLUG wiki needs to be moved there as
well. If no-one else says that they have done it, I'll do it myself
when I get a chance.

[1] -- A few months ago I did a big sweep through the CLUG wiki
contents, and given that our content licenses are compatible, I copied
any obviously unique and useful technical data directly to WLUG.

[2] -- Shut Down means get rid of phpwiki  associated MySQL
database. I'm happy to continue hosting static files, redirects c.

Why? The server I'm running the CLUG wiki on is very low on resources,
and phpwiki isn't lightweight (you may have noticed how slow the site
is these days). And no-one has been making significant use of the
service in recent years. And I don't have as much time to do proactive
maintenance on it as it needs, either.

The WLUG wiki is well-run and funded by an incorporated LUG, and there
is a clear invitation for other NZ people to utilise it. The only
thing CLUG would be losing is the ability to graphically brand their
own pages, which was never really done under the current system
anyway.

The other main user of the CLUG wiki is the Sydenham GNU/Linux Users,
who list their meetings. I suggest that they either use
wiki.linux.net.nz or possibly their wiki on hackstop.org.

I last proposed this in September 2008, and there were no real
objections then :
http://www.mail-archive.com/linux-users@it.canterbury.ac.nz/msg51778.html
Content copied to WLUG at that time :
http://www.mail-archive.com/linux-users@it.canterbury.ac.nz/msg51842.html

-jim

-- Forwarded/Edited message --
From: Mark Foster blak...@blakjak.net
Date: Fri, May 22, 2009 at 9:13 AM
Subject: Re: Adding content to the NZLUG/WLUG wiki: (was Re: [nzlug]
to equivilate or not to equivilate)
To: NZLUG Mailing List nz...@linux.net.nz

On Fri, May 22, 2009 9:03 am, Daniel Lawson wrote:
 Some things to point out:
 * www.wlug.org.nz is the same as wiki.linux.net.nz, just a different
 skin, so there's no need to feel partisan about editing some other LUG's
 wiki

 * It's open to everyone to use. It asks for a username, but there's no
 password - you just need a username in CamelCase (eg, ToniMarsh).
 * If you're not sure about how to use a wiki, please ask - Don't be shy.
 * If you're not sure about where to put stuff, make a new page, name it
 appropriately,  and put it there - it can be moved later.
 * There's a lot of stuff that gets talked about in LUG lists ranging
 from technical tips, gotchas for different distributions (what? debian
 does runlevels differently? ;) ). that stays stuck in the list, and
 getting it all into the wiki would be a good thing. More people adding
 content is a good thing.

I must endorse Daniels post.  The Wiki is an excellent resource and we
deliberately arranged for wiki.linux.net.nz to be set up on it as well -
in order to make clear that it's a generic resource,  not just a WLUG one.

Mark.


Re: Help

2009-05-19 Thread Jim Cheetham
On Wed, May 20, 2009 at 4:56 PM, David Lowe da...@thistledown.co.nz wrote:
 I just wanted to say that the value of these threads far outweighs any
 response to the OP.

Excellent to hear -- in many ways that is the whole reason we have a
mailing list in the first place, and why even a badly-presented
question is worth a best-guess answer ...

-jim


Re: Help

2009-05-18 Thread Jim Cheetham
On Mon, May 18, 2009 at 8:02 PM, Julian Warwick Bethell
jwbeth...@paradise.net.nz wrote:
 Can you help me setting up a DMZ

Is this still not working for you? You're thread-jumping, too.

Please read http://catb.org/esr/faqs/smart-questions.html and possibly
http://www.wikihow.com/Ask-a-Question-Intelligently

Then start a new message to the list (not a reply to a previous one)
and tell us what equipment you have, what the configuration is, and
what new thing you want it to do.

It's quite possible that a DMZ is not what you need, but we won't know
until you explain what you're trying to do.

-jim


Re: OT: Cabling to a shed

2009-05-17 Thread Jim Cheetham
On Mon, May 18, 2009 at 12:28 PM, Kent Fredric kentfred...@gmail.com wrote:
 technical details, but I was at a place once where there was a leaking
 electric fence and for some reason made the showers taps electrocute you. I
 really don't like the idea of that messing with computers.

 Somebody else will hopefully know more on electric-fence precautions than I.

I must add one more to my list of things to never do on an electric
fence ... 'take a shower' ... I already knew of couple of major
water-related warnings ...

-jim


Re: uses for old computers

2009-05-12 Thread Jim Cheetham
On Wed, May 13, 2009 at 2:48 PM,  ke...@katipo.net.nz wrote:
   So what do you do with the old computers that one tends to acquire?
 Counterstrike server!
 People still play Counterstrike?

No, which is why an old computer makes a good Counterstrike server ... (*cough*)


Re: command to change a volume label?

2009-05-11 Thread Jim Cheetham
On Thu, May 7, 2009 at 11:50 AM, Bryce Stenberg br...@hrnz.co.nz wrote:
 Thanks for that Eliot.
 I finally got it work, once I'd added a mtools.conf file - good tip :)

Seconded -- the .mtoolsrc comment was a handy reminder for me to find
 properly rename a pendrive filesystem that I was otherwise going to
reformat in order to change it's name ...

-jim


Re: Linux on USB stick recommendations

2009-04-28 Thread Jim Cheetham
On Tue, Apr 28, 2009 at 5:02 PM, Ross Drummond r...@ashburton.co.nz wrote:
 Does the group have any suggestions for what to run on a USB stick as a live
 Linux system?

Ubuntu -- 9.04 (and possibly earlier) has a menu option
System|Administration|USB Startup Disk Creator that puts a bootable
distro onto a USB key, including an optional section for permanent
document storage.

-jim


Re: End of monthly meetings

2009-04-25 Thread Jim Cheetham
On Thu, Apr 23, 2009 at 10:07 AM, Christopher Sawtell
csawt...@gmail.com wrote:
 There is also the matter of a few ( hundred ? ) dollars in a bank
 account for which I am the legal entity.

IIRC there were three signatories for the account; you, Nick Rout and
David Kirk. If that's correct, then all you have to do is to resign
your authority with the bank.

If the account is actually yours, then I suggest that Nick or David
make a new one and move the money over.

Just losing the impetus for meetings doesn't necessarily mean that
CLUG should lose its assets ... even if it doesn't have any idea what
to use them for right now.

-jim


Re: Home Automation Dealers in Chch?

2009-04-19 Thread Jim Cheetham
2009/4/20 Craig Falconer cfalco...@totalteam.co.nz:
 Lots of Cat6 to everywhere.
 Put in draw wires for future use.
 Run some 100 mm conduit to every building on the property.

And photograph all the rooms to see where the cable runs are, before
putting up the gib boards. Keep a printout of these photos handy
whenever you call in a builder/workman for anything in the future.

 And plenty of power points and power capacity.

Yes -- a builder will give you around 4 power points per room. Up that
to at least 10! Otherwise you'll always have multi-socket bars hanging
around. However only one cat6 for data per room should be sufficient,
as wireless gets more reliable and commonplace you can operate most
equipment directly onto 802.11*.

 A separate circuit for each room is handy too.

Ideal if you need to show a teenager who is in control of the house
*cough* no electricity in your room after 11pm!!

 As for actual automation stuff... I have no idea.

Mmm. Ditto :-)

-jim


Re: Home Automation Dealers in Chch?

2009-04-19 Thread Jim Cheetham
2009/4/20 Hadley Rich h...@nice.net.nz:
 equipment directly onto 802.11*.

 Except if you want to take advantage of PoE :)

Two words - Nikola Tesla

Stand well back ...

http://www.youtube.com/watch?v=qEG-1iYpgKUfeature=PlayListp=8CA8FCF8FF240590playnext=1playnext_from=PLindex=16

-jim


Re: wvdial permission

2009-04-16 Thread Jim Cheetham
On Thu, Apr 16, 2009 at 6:56 PM, Matthew Whiting whit...@riseup.net wrote:
 ATDT087300777
 CONNECT 5
 
 ***             IHUG                 ***
 ***  Unauthroised Access Prohibited  ***
 

I know I'm not being helpful ... but ...
Perhaps your problem is lack of correct authroisation ...

-jim

ObLinux: just give the users sudo access to wvdial, that will work
around the issue for you ...


Re: Subversion web-app

2009-04-01 Thread Jim Cheetham
On 4/1/09, Douglas Royds douglas.ro...@tait.co.nz wrote:
 Anyone have any experience with Subversion web-apps, such as SVN::Web,
 ViewVC, or WebSVN? Any recommendations or warnings?

Possibly not quite what you had in mind, but I use Trac as a read-only
web front-end. Nothing else seems to come close to Trac for that. All
the actual conversations with the svn repository are done from the
command line, either to a file:// or svn+ssh:// URI.

-jim


Re: Subversion web-app

2009-04-01 Thread Jim Cheetham
On Thu, Apr 2, 2009 at 12:02 PM, Douglas Royds douglas.ro...@tait.co.nz wrote:
 Jim Cheetham wrote:
 Possibly not quite what you had in mind, but I use Trac as a read-only

 I hadn't considered trac. It does indeed have a good web front-end (though
 no better than ViewVC or SVN::Web), but also provides wiki and issue
 management functionality. We already have an issue-management database in
 place, so I'd be reluctant to tempt people with yet another place to write
 stuff. I like its support for Git, Bazaar, and others, but regrettably, no
 support for our legacy CVS projects.


For the purposes of Trac as a wiki and issue tracker, there's a
possibility of having a 'fake' svn repository representing your CVS
projects; just automatically check out the CVS changes into a
SVN-tracked location. Bonus points for scripting something that reads
the log history and checks in to svn with the right comments ...

The ticketing system can be 'hidden' from the UI if you don't want it,
but really that's one o fthe most useful bits; svn checkins can
automatically update/close tickets if you want them to ...

-jim


Re: linux in media in a better light

2009-03-18 Thread Jim Cheetham
On Thu, Mar 19, 2009 at 2:01 PM, Adrian Mageanu
adrian.mage...@totalimex.com wrote:
 Example given is this article in The Press
 http://www.stuff.co.nz/technology/gadgets/2269025/Renew-your-old-PC

 that offers Linux as a viable alternative for desktops and home use.

 I don't personally know the author of the article, but he has my tick of
 approval for what he wrote there.

 Noting that he is the same author who wrote the previously discussed
 articles, I welcome the change of tone and touch of objectivity.

His advice is suspect ... find an old 98 disk and install is
terrible. It's unlikely that the licensing would be valid, and Win98
is totally unsupported, and supports only outdated and insecure
versions of IE. A pretty irresponsible comment.

He avoids the comparison of Linux with XP/Vista, by implying that it
is only worth considering if you have outdated hardware. A
head-to-head comparison would be more interesting, from the
perspective of improving the performance of your existing machine by
switching OS.

On the plus side, he has targetted pretty much the correct
distributions for the hardware in question. So that's good :-)

-jim


Re: Small-form-factor as a desktop machine

2009-03-15 Thread Jim Cheetham
On Mon, Mar 16, 2009 at 11:05 AM, Vik Olliver v...@olliver.family.gen.nz 
wrote:
 On 13/03/09 David Lowe wrote:
  I've been using an eee box for three months as a desktop at home.
 I had to upgrade mine to 2GiB RAM, but other than that it is handling my
 RepRap work (much big Java apps) very well.

And my eee701 makes an excellent MythTV frontend :-)


Re: Social Net Work Sites

2009-03-10 Thread Jim Cheetham
On Tue, Mar 10, 2009 at 10:29 PM, Geoff and Jude Marks
jgma...@xtra.co.nz wrote:
 can anyone help out in suggesting the best social networking site for
 a community youth group in New Zealand.

I don't understand the scope of the question; do you want a site that
can be used to create your own network for this new group? If so, I'd
recommend http://onlinegroups.net/ -- it's a Christchurch-developed
Open Source groupware server, which offers free hosting. Interact via
email, web, whatever.

It's inherently kid-safe if you want it to be, because once a user has
signed in, they only see your content.

On the other hand, if you want to use a bigger public service,
you're looking at facebook, bebo, etc ... but you get less control
that way (and fewer ways to interact)

-jim


Re: wireless connecting - network manager problem?

2009-02-19 Thread Jim Cheetham
On Fri, Feb 20, 2009 at 12:46 PM, Nick Rout nick.r...@gmail.com wrote:
 This is IMHO the problem when operating system tasks (networking) are
 handed off to some desktop app.

I sort-of agree. I tend to define my most common wireless network in
the OS (/etc/network/interfaces under Debian*ix), as I like to have
networking available before loading a graphical desktop. However,
NetworkManager doesn't play well with that, and declares that my
wireless device is unmanaged. So I can't switch to alternative
networks easily ...

If I comment out the network config in interfaces, I can then punish
the network manager applet on the taskbar to take over, by connect to
a new hidden wireless network. Of course, it isn't really hidden, so
I may have to use 'iwlist scan' to discover the name first.

Not ideal, but a reasonable compromise on a laptop.

-jim


Re: CLUG Baseball Cap

2009-02-01 Thread Jim Cheetham
On Mon, Feb 2, 2009 at 10:45 AM, Chris Downie 9...@xnet.co.nz wrote:
 Long story short, many years ago I had several caps left over from a job
 so I had them embroidered with Tux and CLUG. In the process of moving
 houses they disappeared, presumed thrown out. I found them Yesterday.

 Free to anyone who wants one (if you live out of Christchurch you'll have to
 stump up for the postage). They'll be in the wheellie bin on Friday if there
 are no takers; please contact me off-list.

Don't wheelie bin them; get them down to the next meeting and
distribute them there :-) If you can't get to the meeting, I'm sure
someone else will take the whole lot off your hands for you.

-jim


Re: clug - future of the wiki

2009-01-29 Thread Jim Cheetham
On Fri, Jan 30, 2009 at 11:58 AM, Andrew Sands and...@theatrix.org.nz wrote:
 Is this discussion actually current because I followed the link to the
 archives and became really confused.

Probably not current, but still relevant.

 Has the wiki been moved, relocated, stopped or killed and I've just not
 noticed.

Well, you were just reading a page from it, weren't you? :-) It's
still there, with a couple of non-addressed problems (like upload
permissions that don't work)

 Has this message just dragged up a topic that had been left to die for a
 reason.

Inertia has a lot to do with it :-) I've been busy moving house, and
dealing with family stuff.

Now, my base position is this :-

I haven't been living in Christchurch for a long time, so my
involvement with CLUG consists solely of following this email list,
and running the wiki software on a spare server. That server is
getting increasingly less spare every day as its real work now
consumes more and more resources. phpwiki and mysql between them take
up much less than zero admin time, too.

Note that the domain names that CLUG use are not owned or managed by
me, Nick Rout donates and controls them.

The wiki has been somewhat useful over the last few years, but hasn't
been used heavily for anything except meeting related tasks. There is
a reasonable selection of generic how-to documentation on there, but
nothing that isn't already represented on the WLUG wiki (which has a
much wider reach of technical information, as well as an incorporated
society funding it) (also note that I've contributed some of CLUG's
more unique technical data into WLUG already, as we're both using a
suitable CC-BY-SA license)

My current thoughts are to get a very low-overhead wiki set up on a
new server, and to dedicate that to CLUG-specific tasks (i.e.
meetings, presentations, etc) only. I may even find some way to hook
in auto-reminder emails for events :-)

The new server will be virtualised, and dedicated to CLUG, which means
I could allow shell/admin access to people who are interested in
helping out. I would expect the model for this to be open, and based
around some published auditing system (i.e. the mailing list get to
see what each server admin is doing), as yet just an embryonic
thought!

I'm open to suggestions, comments, and offers of help. I reserve the
right to make the final decisions regarding my server of course :-)

-jim


Re: Feb meeting...

2009-01-25 Thread Jim Cheetham
On Mon, Jan 26, 2009 at 4:51 PM, Zane Gilmore gilmo...@crop.cri.nz wrote:
 Although I like the idea of getting together for a geeky chin-wag over a
 few beers,
 I think that we can put together a few talks.

Speaking as a now-DunLUG pubgoer, I can say that the planned technical
content is very low (i.e. zero) ... however in the flow of
conversation some interesting technical questions do get asked, and
sometimes answered! It's not a perfect situation for those occasions
where a structured presentation is desired ...

From here, it looks like Rik is still doing well with the GNU/Linux
users meetings in Sydenham; if this is so, perhaps it would be
worthwhile handing the torch for technical content over to those
meetings, and letting the CLUG meetings officially go social until
you all get some energy back?

-jim


Re: ubuntu wireless with aes

2009-01-22 Thread Jim Cheetham
On Fri, Jan 23, 2009 at 10:01 AM, Roger Searle ro...@stepahead.org.nz wrote:
 Comments on TKIP+AES vs TKIP vs AES alone would also be welcome, since
 perhaps TKIP+AES is generally very adequate, being more than TKIP alone?

What are you protecting against? What devices are you going to connect
to the network?

The smaller devices that want to connect to wireless networks (I'm
thinking of phones and games consoles) can't always do all of the
fancy encryption. So make sure that you know what they're going to
support before getting carried away.

All encryption mechanisms are vulnerable to different attacks, the
ones that are safe now will be crackable in a few months time. And
as a general rule, firmware can't be upgraded quickly enough to react.
So if you really want to be secure, you should not trust the wireless
encryption alone.

If all you have is larger devices (i.e. Linux, OS X or Windows
machines) then you can downgrade the security state of the network
itself, possibly even leaving it open (which makes it easy for friends
to use their kit at your place). Run a VPN (IPSec is also supported in
some smaller devices, like iPhones) from each machine back to a
server, and tell your firewall to block or rate-limit anything that
isn't VPNd.

There is also another guideline -- which is to not become too
paranoid. In general, there are so few people out there who really
want to leech bandwidth, and so many open networks, that even WEP is
effective at convincing them to leave you alone. But WEP is trivially
crackable, so any WPA2 at this stage should be enough to raise the bar
enough to make them move on. You can't make a 'perfect' network, so
don't worry about it too much :-)

-jim


Re: Promotional event for the average person

2009-01-15 Thread Jim Cheetham
On Fri, Jan 16, 2009 at 4:11 PM, Craig Falconer
cfalco...@totalteam.co.nz wrote:
 Script some kind of bulk wget, feed the image to an OCR program, store the
 output in a database and write a web frontend to search it.

 Then you can never share this, because it would be redistribution of
 copyright material :-\

Mmm ... given that the originals are *pictures*, would a textual
representation of the words represent a *copy* ?

Obviously showing the image as a search result would be showing a
copy; but you could provide a link to a public archive instead ... or
just transclude it on the page.

-jim


Re: /var/spool/mail/$USER file locking under Ubuntu

2009-01-13 Thread Jim Cheetham
On Wed, Jan 14, 2009 at 11:30 AM, Stephen Irons
stephen.ir...@tait.co.nz wrote:
 I am busy setting up an automatic mail retrieval system at home. It will
 collect email from a number of different remote POP mailboxes and deliver it
 to the appropriate local users.

Well, that's three different jobs being done there -- one is to
collect the mail with POP (which is easy), one is to identify the
correct user to deliver to (not especially easy, depending on
circumstances), and the third is to deliver the mail to local storage.

I'd leave the last job, Mail Delivery, to a specialist MDA tool, such
as a proper mail server like postfix. Run it so it's listening only to
localhost, and tell getmail to submit the messages it has collected
over SMTP to your local postfix.

Then, as the others have said, don't ask postfix to use mbox, use
maildir and put a IMAP server like dovecot in front of it all.

If you were doing this for a single user, you'd probably just teach
the front-end mail system (thunderbird, whatever) to collect from
multiple accounts in the first place; so given that you're increasing
your system complexity with getmail, go and do a proper job and
install postfix + dovecot.

-jim


Re: /var/spool/mail/$USER file locking under Ubuntu

2009-01-13 Thread Jim Cheetham
On Wed, Jan 14, 2009 at 3:37 PM, Steve Holdoway st...@greengecko.co.nz wrote:
 I'd leave the last job, Mail Delivery, to a specialist MDA tool, such
 as a proper mail server like postfix. Run it so it's listening only to
 localhost, and tell getmail to submit the messages it has collected
 over SMTP to your local postfix.
 Technically it's a Local Delivery Agent ( LDA ) tool, not MDA (: I just use 
 procmail... it's so simple.

I love TLAs :-) The actual writing to disk is done by the LDA tool,
which is usually not available separately from the bigger MDA ...

Actually procmail is a nice suggestion: for a small fix to the
original problem, getmail could just pipe messages into procmail ...

 You could always install your own mail server, and get it delivered directly 
 ( this might've been what Jim meant in his last comment ).

Not quite; I simply meant running postfix locally as a way to get an
MDA/LDA ... but in that light, procmail is a better solution for
Stephen's situation I think. Running a full mail server would
effectively replace the original POP mailboxes he referred to, and I
bet that means he has email addresses in other people's domains, and
there's probably no way to do proper forwarding from them (even
without breaking SPF!)

-jim


Re: Blocking some websites!

2009-01-13 Thread Jim Cheetham
On Wed, Jan 14, 2009 at 8:01 PM, Navdeep Singh Sidhu
navdeepsinghsi...@gmail.com wrote:
 I would like your help in blocking some websites like YouTube and Bebo from
 our staff computer. We have an old Compaq running Ubuntu 8.10.
 ...
 What do you guys recommend. All help will be appreciated.

Install a proxy, something lightweight like junkbuster or a
full-featured one like squid.

Configure the web browsers to use the proxy.

You could then ask the proxy to block access to certain websites by name.

You could also leave the Internet unrestricted, but instead pin to the
wall every week a list of what websites were visited, what time they
were visited, how much data was transferred, and perhaps which
username was logged on at the time (if you have different names).

If you put in a technical block, someone will get around it. But you
might be able to use peer pressure in the workplace to prevent misuse
... and that's really what the end result should be.

Or, here's a thought - deinstall the flash player instead. Unless you
*need* if for real work, of course.

-jim


Re: New ISP Conclusions

2008-12-31 Thread Jim Cheetham
On Fri, Jan 2, 2009 at 8:23 AM, Bernard Frankpitt
frankp...@slingshot.co.nz wrote:
 In the end I went for the cable modem option:  It is the option offered by
 my Telstra, and I already have a cable connected to my house.
 ...
 When you go to a broadband connection, the ISP controls both sides of the
 link since they provide you with a stand-alone modem that usually connects
 to you computer via a TCP/IP link over Ethernet. That is a much easier set
 of protocols to design to. In addition, it is easy to put a firewall router
 between the modem and your machines to give you additional security.

Just be aware that with Telstra, by default you get a real external IP
address bound directly to your computer; if you are not running a
pretty aggressive firewall you will now be processing all attack
traffic directly on your machine. Of course, the majority of this will
be stuff that subverts Windows machines, but some if it will be valid
attacks against other services too.

Attaching a Windows computer directly to Telstra's service is severely
negligent. :-)

The Telecom ADSL solution, where there is a NAT layer between you and
the Internet run on a separate piece of hardware, is actually nicer
from that perspective.

I strongly recommend a separate machine of some description between
you and the Telstra connection. Just what that is, depends on what you
want to do with your new connection ...

-jim


Re: OT: Google street view live in NZ

2008-12-03 Thread Jim Cheetham
On Thu, Dec 4, 2008 at 2:11 PM,  [EMAIL PROTECTED] wrote:
 Did you notice that they appear to have blured people out?

Yes, but I've already managed to positively identify one family member
(mowing his front lawn at the time) and both of my cars parked at the
house I used to own at the time ...

-jim


Re: just to show it's not just redhat...

2008-11-25 Thread Jim Cheetham
On Wed, Nov 26, 2008 at 9:44 AM, Steve Holdoway [EMAIL PROTECTED] wrote:
 On Wed, 26 Nov 2008 09:38:06 +1300
 Brett Davidson [EMAIL PROTECTED] wrote:
 Not dpkg hell. Just that Ubuntu do not include proprietary software in
 their repos.
 Add the medibuntu repo to the sources.list and you'll be fine.

 Unfortunately the following line...
 deb http://packages.medibuntu.org hardy free non-free
 is already in the sources.list

So, you're suggesting that Ubuntu gets package dependency problems,
when you're installing software from outside the Ubuntu repositories?
Mmmm ...

Dependency hell isn't caused by the packaging format (RPM vs .deb),
it's caused by the repositories and their (lack of) policies. OpenBSD
uses tar files extracted in / as the official packaging system, and it
works fine for them :-) because they control the contents of those
tarballs well.

(As an aside, why use apt-get when you could be using aptitude?
aptitude takes extra care to help un-installation, which is really
handy when experimenting)

It's astounding how many problems people on 64bit architectures seem
to get when they're trying to use codecs and Flash, etc. Sad that the
state of the art is so far behind. We've had 64bit OSs for quite a
while now, and finally we're seeing consumer hardware that actually
needs it (primarily large RAM installs) ... and all we're left with is
this lack of support from the proprietary software crowd.

-jim


Re: iptables...

2008-11-22 Thread Jim Cheetham
On Sat, Nov 22, 2008 at 11:55 PM, Volker Kuhlmann
[EMAIL PROTECTED] wrote:
 specify. I've never quite understood why anyone would go out to program
 in a low level when the same job can be achieved easier and more
 reliably with a higher language. There are several other firewall rule
 generators available.

If you want to learn how something works, programming at a low level
is a great thing to do.

If you want to be productive, especially in terms of the amount of
time invested in a project, high-level programming is the way to go.

So, for firewalling, a business should generally be using a generator
of some kind, and never look at the details. A hobbyist would
generally benefit greatly from creating rules by hand -- accepting
that they will miss out on a lot of the subtelty that a generator will
handle.

You're both right :-)

-jim


Re: wiki error uploading files

2008-11-16 Thread Jim Cheetham
On Mon, Nov 17, 2008 at 7:07 AM, Roger Searle [EMAIL PROTECTED] wrote:
 Is it broken? or disabled?  or am I bringing up the whole future of the
 clug wiki discussion?

Currently semi-broken, as the server does not have permission to write
to the upload directory. I don't intend to change this in the
short-term, as I'm in the middle of sorting out the future of the
wiki and it doesn't involve it staying on the current server :-)

Send me the file directly (i.e. don't just reply to the list) and I'll
put it there manually.

-jim


Re: next step for mail clients

2008-11-03 Thread Jim Cheetham
On Mon, Nov 3, 2008 at 10:12 PM, Wesley Parish
[EMAIL PROTECTED] wrote:
 treating all mail messages like any other ordinary downloads, and making it
 possible to halt and restart them - for New Zealand-quality copper networks.

Use a webmail interface?


Re: Very OT: Online storage space

2008-11-02 Thread Jim Cheetham
Many people choose to send each file to their gmail account :-)

Currently offering 7GB, for free, for email only.

There are also scripts around to treat it as a filesystem ...

It probably breaches their terms  conditions, but in practice they're
unlikely to care.

For bonus points, encrypt them before sending.

-jim

On Mon, Nov 3, 2008 at 10:38 AM,  [EMAIL PROTECTED] wrote:
 Hi all

 Sorry for being way OT, I've got to move some files off my student
 workstation at school to my pc at home. Now the pc's here are very locked
 down, I can't use ftp or ssh or plug in external usb devices. So I'm
 looking for some (free) online storage space for around 50megs of work.
 I've had a quick google and either they are a real pain (or just look
 dodgy) to sign up for or no longer available

 Any suggestions would be appreciated

 Regards,
 Kerry




Re: Very OT: Online storage space

2008-11-02 Thread Jim Cheetham
Remember that the Subject line is going to be your primary index
method. Give them all a prefix to indicate file storage (so you can
filter them later) and an indicator of contents.

If possible, when constructing the mail message, make the body of the
email be the table of contents of the tar file, this will help you
locate individual files by the search functions later.

-jim

On Mon, Nov 3, 2008 at 10:47 AM,  [EMAIL PROTECTED] wrote:
 Thanks, I didn't think about that. signing up for a gmail accounts sounds
 infinitly easier than some of the free storage places I've been looking at

 Kerry

 (I think I'll just tar them up as there's about 70-80 very little files)

 Many people choose to send each file to their gmail account :-)

 Currently offering 7GB, for free, for email only.

 There are also scripts around to treat it as a filesystem ...

 It probably breaches their terms  conditions, but in practice they're
 unlikely to care.

 For bonus points, encrypt them before sending.

 -jim

 On Mon, Nov 3, 2008 at 10:38 AM,  [EMAIL PROTECTED] wrote:
 Hi all

 Sorry for being way OT, I've got to move some files off my student
 workstation at school to my pc at home. Now the pc's here are very
 locked
 down, I can't use ftp or ssh or plug in external usb devices. So I'm
 looking for some (free) online storage space for around 50megs of work.
 I've had a quick google and either they are a real pain (or just look
 dodgy) to sign up for or no longer available

 Any suggestions would be appreciated

 Regards,
 Kerry








Re: Very OT: Online storage space

2008-11-02 Thread Jim Cheetham
On Mon, Nov 3, 2008 at 8:40 PM, Christopher Sawtell [EMAIL PROTECTED] wrote:
 Trouble is that encryption is a red-rag to a bull wrt the TLAs and
 would definitely get them 'over excited'.

Seriously, what practical difference does that make? What does it even mean?

Either the TLAs do deep packet inspection on everything, or they
don't. If they don't, then a subject has to be targetted in some other
way *first*. Using encryption is not an admission of guilt, and if you
act like it is you're not helping the rest of us :-)

-jim


Re: laptop blanking

2008-10-23 Thread Jim Cheetham
On Thu, Oct 23, 2008 at 9:38 PM, Barry Marchant [EMAIL PROTECTED] wrote:
 I am using kde, running on mains power, Display power control not enabled,
 blank screen saver selected  set to start after 500 mins (over 8 hrs)

 What have i missed which is permitting screen blanking


http://www.shallowsky.com/linux/x-screen-blanking.html might help


Re: I'm getting hammered... what should I do about it?

2008-10-15 Thread Jim Cheetham
On Wed, Oct 15, 2008 at 10:36 PM,  [EMAIL PROTECTED] wrote:
 It's all packaged with clark connect and seems to be working ok.  It's got
 preaty flash stuff that shows me I've got over 80k hits from one IP alone in
 the last day.

 I've emailed [EMAIL PROTECTED] to see if they can block the
 traffic.

Just blackhole all the traffic from that IP, and indeed from pretty
much any pwned attacker you see, if you care. Actually, if you aren't
running any services on your external interface, ignore it. Only
monitor services you are actually running.

In theory you are still paying to receive their SYN packets, but in
practice if you're both on TCL then they don't charge for it,
especially if it's on the local loop. Anyway, they can hammer away for
hours with just SYN packets, and it'll only add up to a couple of page
loads of stuff.co.nz ... :-)

-jim


Re: OS for RAID1

2008-10-15 Thread Jim Cheetham
On Wed, Oct 15, 2008 at 11:57 PM,  [EMAIL PROTECTED] wrote:
 My concern is a disk giving out and the system going down.

 In which case I need the whole system RAID1 not just the user data.

Well, you can restore the OS from an install CD easily enough, and as
long as you've got a list of installed packages, you'll be good to go
quickly enough.

Having said that, I don't have any customer servers that aren't on
RAID1 for their OS, because no-one wants to waste time restoring from
backup, or reinstalling :-)

It all depends if disk costs too much for you ...


Re: Deleted file

2008-10-07 Thread Jim Cheetham
foremost.sf.net will do data carving and help you out.

See http://tommix.net/.vee/1223326892.2008-10-06T21:01:32.html for a
link to a decent article.

-jim

On Wed, Oct 8, 2008 at 4:25 PM, Barry Marchant [EMAIL PROTECTED] wrote:
 Hi

 I deleted a file on a cf card without copying it. I have dd the full card to
 a temp file, opened the temp file with khexedit and altered the 1st char of
 the file name so the file appears in the now mounted temp file/dir.

 The file I want is an avi file, 67 mb. The card is formatted fat16 with
 IBMbios No writing has been done to the card since i made the deletion.

 The date now appears corrupt. Output from mplayer follows...

 mplayer: could not connect to socket
 mplayer: No such file or directory
 Failed to open LIRC support. You will not be able to use your remote
 control.

 Playing /G/cfcarddata/dcim/109canon/mvi_0987.avi.
 AVI file format detected.
 AVI: Missing video stream!? Contact the author, it may be a bug :(
 libavformat file format detected.
 [avi @ 0x865e014]Could not find codec parameters (Video: mjpeg, 640x480)
 VIDEO:  [MJPG]  640x480  24bpp  30.000 fps0.0 kbps ( 0.0 kbyte/s)
 Xv: could not grab port 61
 Could not find free Xvideo port - maybe another process is already using it.
 Close all video applications, and try again. If that does not help,
 see 'mplayer -vo help' for other (non-xv) video out drivers.
 ==
 Opening video decoder: [ffmpeg] FFmpeg's libavcodec codec family
 Selected video codec: [ffmjpeg] vfm: ffmpeg (FFmpeg MJPEG decoder)
 ==
 ==
 Trying to force audio codec driver family libmad...
 Opening audio decoder: [pcm] Uncompressed PCM audio decoder
 AUDIO: 22050 Hz, 1 ch, s16le, 352.8 kbit/100.00% (ratio: 44100-44100)
 Selected audio codec: [pcm] afm: pcm (Uncompressed PCM)
 ==
 [AO OSS] audio_setup: Can't open audio device /dev/dsp: Device or resource
 busy
 AO: [alsa] 48000Hz 1ch s16le (2 bytes per sample)
 Starting playback...

 Xine produces a blank screen

 Any ideas what else I can do to recover the data?

 Barry




Re: network monitoring SNMP

2008-09-25 Thread Jim Cheetham
Cacti and Nagios would be good mid-level tools, but try GroundWork for
a full bundle.

On Thu, Sep 25, 2008 at 10:54 PM, Maurice Butler
[EMAIL PROTECTED] wrote:
 Hi all,

 I have started a new job with 100's of computers, switches and routers.

 I was looking at net-SNMP and MRTG to monitor the switches and routers for
 traffic and cpu utilisation.

 Any suggestions of anything else I should evaluate ?


 Thanks Maurice




Re: nagios (and other) email notifications - postfix or sendmail

2008-09-25 Thread Jim Cheetham
On Fri, Sep 26, 2008 at 12:16 PM, Roger Searle [EMAIL PROTECTED] wrote:
 which at the bottom says install mailx (Postfix) and configure the
 commands.cfg file, which is straight forward by itself.  However I thought
 I'd pause at this point and seek list wisdom on the approach from here.  Is
 postfix actually the best package to use?  (no wish to start any wars
 here...)  and if so/not, which, and presumably some further configurations
 are necessary to get some messages going off to my ISP.

Exim has the best config file when you want to do interesting
things, but you have to think before modifying it.
Postfix has a google for the line to add to the config approach, and
works well.

Don't bother even looking at qmail or sendmail at this stage.

Consider nullmailer, which just sends everything straight out to
someone elses MTA immediately, which may be good for you. I use it on
all my servers except for the real MTA itself.

-jim


Re: (re)moving the wiki

2008-09-17 Thread Jim Cheetham
On Wed, Sep 17, 2008 at 10:14 AM, Jim Cheetham [EMAIL PROTECTED] wrote:
 The generic Linux info pages on the CLUG wiki should be contributed to
 the WLUG wiki directly (they use a similar license).

Current progress -- I looked through the
http://clug.net.nz/index.php/GeneralLinux index page :-

Copied to articles under my personal website, as they are basically my
content ...
http://clug.net.nz/index.php/KioskSystem

Merged into WLUG pages
http://clug.net.nz/index.php/netcat
http://clug.net.nz/index.php/iptables
http://clug.net.nz/index.php/OpenPorts
http://clug.net.nz/index.php/WinCupsNoSamba
http://clug.net.nz/index.php/LaTeXDateTime

Potentially not worth preserving in the face of WLUG content, or just
age, or perhaps I just didn't see a good place to put them ...
http://clug.net.nz/index.php/ssh
http://clug.net.nz/index.php/OpenVPN
http://clug.net.nz/index.php/OpenVPNonUbuntu
http://clug.net.nz/index.php/SettingUpSocksClient
http://clug.net.nz/index.php/NdisWrapper
http://clug.net.nz/index.php/RSync
http://clug.net.nz/index.php/Qemu
http://clug.net.nz/index.php/Xxdiff
http://clug.net.nz/index.php/Mrxvt
http://clug.net.nz/index.php/TextToSpeech
http://clug.net.nz/index.php/GeneralTerminal
http://clug.net.nz/index.php/Less
http://clug.net.nz/index.php/Screen
http://clug.net.nz/index.php/Rename
http://clug.net.nz/index.php/Vim
http://clug.net.nz/index.php/Bash
http://clug.net.nz/index.php/Tcsh
http://clug.net.nz/index.php/TheFilesystem
http://clug.net.nz/index.php/procmail
http://clug.net.nz/index.php/OpenSSL
http://clug.net.nz/index.php/DateAndTime
http://clug.net.nz/index.php/Favicon.ico
http://clug.net.nz/index.php/RegularExpressions
http://clug.net.nz/index.php/UserResourceLimits
http://clug.net.nz/index.php/Java%20Installation%20Problem
http://clug.net.nz/index.php/NCDExplora
http://clug.net.nz/index.php/VMWare
http://clug.net.nz/index.php/EditingVideoOnLinux
http://clug.net.nz/index.php/KDEServicemenus
http://clug.net.nz/index.php/Gnome
http://clug.net.nz/index.php/IceWM


Obviously not everyone will agree with my assessments, so get in there
and help yourselves to preserve the content that you value!


  1   2   3   4   5   6   7   8   9   10   >