Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Adam Carter
>> Just a billion switch > >   which is running a firewall? > > (The tcpdump shows a firewall is in play on 192.168.1.250). The firewall's disabled, and should only be in play if the packet gets routed from what I understand. These packets are being switched. I guess I should connect the hosts

Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Mick
On Friday 23 Sep 2011 00:10:31 Adam Carter wrote: > > is there anything in between on the network? > > Just a billion switch which is running a firewall? (The tcpdump shows a firewall is in play on 192.168.1.250). -- Regards, Mick signature.asc Description: This is a digitally signed m

[gentoo-user] PacketShader - firewall using GPU

2011-09-22 Thread Pandu Poluan
Saw this on the pfSense list: http://shader.kaist.edu/packetshader/ anyone interested in trying? Rgds,

[gentoo-user] Modifying LiveCDs

2011-09-22 Thread Michael Mol
So I'm about to play with installing Gentoo on another system. Now, the ritual goes, grab the ISO, burn the ISO, grab the latest stage3, the latest Portage, and go to town. What I'd like to do is drop the stage3 and Portage snapshots onto the ISO before burning, but I've never done anything with

Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Michael Mol
On Thu, Sep 22, 2011 at 7:14 PM, Adam Carter wrote: >> strace output? Which syscall is actually failing, and with what error code? > > What would I trace? Why do you think the information provided suggests > a syscall failing? Misread your original post. -- :wq

Re: [gentoo-user] hardened-sources reverted to 2.6.39-r8 :(

2011-09-22 Thread Alan McKinnon
On Thu, 22 Sep 2011 23:32:07 +0200 "Francisco Blas Izquierdo Riera (klondike)" wrote: > El 22/09/11 22:30, Alan McKinnon escribió: > > On Wed, 21 Sep 2011 16:09:14 +0200 > > "Francisco Blas Izquierdo Riera (klondike)" > > wrote: > > > >>> I wish people wouldn't just remove stuff without full det

Re: [gentoo-user] hardened-sources...what?

2011-09-22 Thread Francisco Blas Izquierdo Riera (klondike)
El 23/09/11 01:02, Mike Edenfield escribió: > On 9/22/2011 5:51 PM, Francisco Blas Izquierdo Riera (klondike) wrote: >> El 22/09/11 22:20, Michael Mol escribió: >>> My question is...what kinds? > >> Well mainly the PaX and the grsecurity patches. I also heard there is a >> WIP in bringing RSBAC ba

Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Adam Carter
> strace output? Which syscall is actually failing, and with what error code? What would I trace? Why do you think the information provided suggests a syscall failing?

Re: [gentoo-user] Re: Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Adam Carter
>> ssh works. Connection from the same client to a third gentoo box >> running a webserver works. > > KISS may be at work here. > > go and delete the ".ssh/known_hosts" > files just to be certain it not something > really simple That file just contains the cached ssh host keys - nothing to do

Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Adam Carter
> is there anything in between on the network? Just a billion switch > does traceroute show anything unusual? Nothing to trace - same subnet > what happens if you try to connect to a closed port (81 for example)? I get the expected TCP reset.

Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Adam Carter
> It's not the ICMP that is being prohibited. Understood, that's clear from the packet trace. > is an ICMP "host unreachable" response from .250.  The extended reason > for the unreachability is that there is an administrative policy > preventing the traffic. It almost certainly *is* a firewall t

Re: [gentoo-user] hardened-sources...what?

2011-09-22 Thread Mike Edenfield
On 9/22/2011 5:51 PM, Francisco Blas Izquierdo Riera (klondike) wrote: El 22/09/11 22:20, Michael Mol escribió: My question is...what kinds? Well mainly the PaX and the grsecurity patches. I also heard there is a WIP in bringing RSBAC back again too. Does gentoo-sources include the SELinux

Re: [gentoo-user] mplayer(2) ???

2011-09-22 Thread Mick
On Thursday 22 Sep 2011 08:53:46 Florian Philipp wrote: > Am 21.09.2011 23:58, schrieb Mick: > > On Wednesday 21 Sep 2011 09:19:39 Sebastian Beßler wrote: > >>> Does mplayer2 work with smplayer or kmplayer? > >> > >> I use mplayer2 with smplayer for a few month now and everything works > >> just f

Re: [gentoo-user] Re: mplayer(2) ???

2011-09-22 Thread Mick
On Thursday 22 Sep 2011 09:15:42 Nikos Chantziaras wrote: > On 09/22/2011 12:58 AM, Mick wrote: > > On Wednesday 21 Sep 2011 09:19:39 Sebastian Beßler wrote: > >>> Does mplayer2 work with smplayer or kmplayer? > >> > >> I use mplayer2 with smplayer for a few month now and everything works > >> jus

Re: [gentoo-user] hardened-sources...what?

2011-09-22 Thread Francisco Blas Izquierdo Riera (klondike)
El 22/09/11 22:20, Michael Mol escribió: > My question is...what kinds? Well mainly the PaX and the grsecurity patches. I also heard there is a WIP in bringing RSBAC back again too. > For what reason is there a set of "makes > it more secure" patches that aren't integrated into the mainline > ker

Re: [gentoo-user] hardened-sources reverted to 2.6.39-r8 :(

2011-09-22 Thread Francisco Blas Izquierdo Riera (klondike)
El 22/09/11 22:30, Alan McKinnon escribió: > On Wed, 21 Sep 2011 16:09:14 +0200 > "Francisco Blas Izquierdo Riera (klondike)" wrote: > >>> I wish people wouldn't just remove stuff without full details. If >>> there's an issue with that code, there should be a bug at b.g.o. and >>> the Changelog sh

Re: [gentoo-user] hardened-sources reverted to 2.6.39-r8 :(

2011-09-22 Thread Francisco Blas Izquierdo Riera (klondike)
El 22/09/11 22:07, Manuel McLure escribió: > On Sep 21, 2011 9:13 PM, "Francisco Blas Izquierdo Riera (klondike)" > wrote: >> Well deprecated version removal tends to happen because we are not >> going >> to aim for those versions stabilization AND there is a newer version >> available AND upstrea

Re: [gentoo-user] hardened-sources...what?

2011-09-22 Thread Paul Hartman
On Thu, Sep 22, 2011 at 3:20 PM, Michael Mol wrote: > I'll assume for the moment that the hardened-sources patch set > discussed includes security improvements. > > My question is...what kinds? For what reason is there a set of "makes > it more secure" patches that aren't integrated into the mainl

Re: [gentoo-user] hardened-sources reverted to 2.6.39-r8 :(

2011-09-22 Thread Alan McKinnon
On Wed, 21 Sep 2011 16:09:14 +0200 "Francisco Blas Izquierdo Riera (klondike)" wrote: > > I wish people wouldn't just remove stuff without full details. If > > there's an issue with that code, there should be a bug at b.g.o. and > > the Changelog should mention it. > > > > Then folks like yoursel

[gentoo-user] hardened-sources...what?

2011-09-22 Thread Michael Mol
I'll assume for the moment that the hardened-sources patch set discussed includes security improvements. My question is...what kinds? For what reason is there a set of "makes it more secure" patches that aren't integrated into the mainline kernel? Are they just not stable in some fashion? Do they

Re: [gentoo-user] hardened-sources reverted to 2.6.39-r8 :(

2011-09-22 Thread Manuel McLure
On Sep 21, 2011 9:13 PM, "Francisco Blas Izquierdo Riera (klondike)" wrote: > > Well deprecated version removal tends to happen because we are not > going > to aim for those versions stabilization AND there is a newer version > available AND upstream tends to ignore bugs happening on older > versi

Re: [gentoo-user] media-gfx/graphviz-2.26.3-r3

2011-09-22 Thread Hilco Wijbenga
On 22 September 2011 00:18, Florian Philipp wrote: > Am 22.09.2011 07:56, schrieb Mick: >> On Wednesday 21 Sep 2011 23:02:02 Hilco Wijbenga wrote: >>> Hi all, >>> >>> I'm trying to install Graphviz but I get: >>> >>> centaur ~ # emerge graphviz >>> >>> make[3]: Entering directory >>> `/var/tmp/po

Re: [gentoo-user] Bug 290437 (gcc-config)

2011-09-22 Thread Jonas de Buhr
>Hmm, odd. I thought everyone used to be able to reopen bugs. Ooops. i assumed the opposite because several people complained about having the same bug after it was closed in the comments but did not reopen it. But in fact i did not try. Shame on me :) >Well, it looks like mailto:vap...@gentoo.or

Re: [gentoo-user] Bug 290437 (gcc-config)

2011-09-22 Thread Florian Philipp
Am 22.09.2011 12:22, schrieb Jonas de Buhr: > Hi guys, > > i just ran into this bug again: > > sys-devel/gcc-config suggests gcc re-merge when profile is invalid > https://bugs.gentoo.org/show_bug.cgi?id=290437 > > which is in status RESOLVED FIXED which is clearly not the case. > > who can ch

[gentoo-user] Re: Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread James
Adam Carter gmail.com> writes: > ssh works. Connection from the same client to a third gentoo box > running a webserver works. KISS may be at work here. go and delete the ".ssh/known_hosts" files just to be certain it not something really simple hth, James

Re: [gentoo-user] udev + /usr

2011-09-22 Thread Michael Orlitzky
On 09/17/2011 07:00 PM, Alan McKinnon wrote: > > There was a standards body tracking ORB, I forget which one, but none > of that matters as the folks who should use it - system builders - saw > it's flaws quite quickly. Even Gnome has dropped it and are now moving > over to dbus. Ooh, I know this

Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Jonas de Buhr
>> what about connecting to the webserver from that third gentoo box? > >Same ICMP response, so its not a client side issue. yep. >No iptables on any of the boxes. No tcpwrappers. is there anything in between on the network? does traceroute show anything unusual? what happens if you try to co

Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Richard Gration
On 22 September 2011 12:39, Adam Carter wrote: > # tcpdump -n -i eth0 host 192.168.1.6 and port not 22 > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes > 21:10:57.011994 IP 192.168.1.6.46161 > 192.1

Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Michael Mol
On Thu, Sep 22, 2011 at 8:25 AM, Adam Carter wrote: > On Thu, Sep 22, 2011 at 10:12 PM, Jonas de Buhr wrote: >>>ssh works. >> >> routing should be ok then. >> >>>Connection from the same client to a third gentoo box >>>running a webserver works. >> >> what about connecting to the webserver from t

Re: [gentoo-user] otrs

2011-09-22 Thread Stefan G. Weichinger
Am 22.09.2011 14:22, schrieb Joost Roeleveld: > It could be that you're one of the few people actually using OTRS. phew. I thought it is quite popular. Maybe not for gentoo-users. > There are 2 older versions in layman overlays: > > # eix otrs

Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Adam Carter
On Thu, Sep 22, 2011 at 10:12 PM, Jonas de Buhr wrote: >>ssh works. > > routing should be ok then. > >>Connection from the same client to a third gentoo box >>running a webserver works. > > what about connecting to the webserver from that third gentoo box? Same ICMP response, so its not a client

Re: [gentoo-user] otrs

2011-09-22 Thread Joost Roeleveld
On Thursday, September 22, 2011 01:49:14 PM Stefan G. Weichinger wrote: > Am 22.09.2011 13:29, schrieb Joost Roeleveld: > > Please don't CC me into all the emails, list-mails end up correctly. > > sorry for the noise > > >> otrs doesn't have that flag! > > > > Just noticed, the 3.x versions appe

Re: [gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Jonas de Buhr
>ssh works. routing should be ok then. >Connection from the same client to a third gentoo box >running a webserver works. what about connecting to the webserver from that third gentoo box? >Anyone seen this behavior? There's no iptables, you did check that on both machines, didn't you? what a

Re: [gentoo-user] otrs

2011-09-22 Thread Stefan G. Weichinger
Am 22.09.2011 13:29, schrieb Joost Roeleveld: > Please don't CC me into all the emails, list-mails end up correctly. sorry for the noise >> otrs doesn't have that flag! > > Just noticed, the 3.x versions appear to have that flag removed. I > wonder why they did that as it makes managing webappli

[gentoo-user] Cant connect to local webserver - ICMP admin prohibited

2011-09-22 Thread Adam Carter
# netstat -antp | grep apach tcp0 0 192.168.1.250:800.0.0.0:* LISTEN 25577/apache2 # tcpdump -n -i eth0 host 192.168.1.6 and port not 22 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size

Re: [gentoo-user] otrs

2011-09-22 Thread Joost Roeleveld
Please don't CC me into all the emails, list-mails end up correctly. On Thursday, September 22, 2011 01:10:48 PM Stefan G. Weichinger wrote: > Am 22.09.2011 12:41, schrieb Joost Roeleveld: > > On Thursday, September 22, 2011 12:25:59 PM Stefan G. Weichinger > > > > wrote: > >> Am 22.09.2011 12:09

Re: [gentoo-user] otrs

2011-09-22 Thread Stefan G. Weichinger
Am 22.09.2011 12:41, schrieb Joost Roeleveld: > On Thursday, September 22, 2011 12:25:59 PM Stefan G. Weichinger > wrote: >> Am 22.09.2011 12:09, schrieb Joost Roeleveld: >>> I have been using webapp-config for all the webapps on my server >>> and it does work for me. Not seen that error before. I

Re: [gentoo-user] otrs

2011-09-22 Thread Joost Roeleveld
On Thursday, September 22, 2011 12:25:59 PM Stefan G. Weichinger wrote: > Am 22.09.2011 12:09, schrieb Joost Roeleveld: > > I have been using webapp-config for all the webapps on my server and > > it does work for me. Not seen that error before. I am wondering if > > something might be configured i

Re: [gentoo-user] otrs

2011-09-22 Thread Stefan G. Weichinger
Am 22.09.2011 12:09, schrieb Joost Roeleveld: > I have been using webapp-config for all the webapps on my server and > it does work for me. Not seen that error before. I am wondering if > something might be configured incorrectly. > > Do you have the folder: "/usr/share/webapps/otrs/3.0.10" ? No

[gentoo-user] Bug 290437 (gcc-config)

2011-09-22 Thread Jonas de Buhr
Hi guys, i just ran into this bug again: sys-devel/gcc-config suggests gcc re-merge when profile is invalid https://bugs.gentoo.org/show_bug.cgi?id=290437 which is in status RESOLVED FIXED which is clearly not the case. who can change the status of a bug? /jonas

Re: [gentoo-user] otrs

2011-09-22 Thread Joost Roeleveld
On Thursday, September 22, 2011 12:19:15 PM Marius Vaitiekunas wrote: > On Thu, Sep 22, 2011 at 12:11 PM, Stefan G. Weichinger wrote: > > Anyone installed otrs with webapp-config? > > I just don't get it! > > > > otrs emerged fine, but I get: > > > > # webapp-config -I -h localhost -d 'otrs' ot

Re: [gentoo-user] otrs

2011-09-22 Thread Joost Roeleveld
On Thursday, September 22, 2011 11:11:52 AM Stefan G. Weichinger wrote: > Anyone installed otrs with webapp-config? > I just don't get it! > > otrs emerged fine, but I get: > > # webapp-config -I -h localhost -d 'otrs' otrs 3.0.10 > * Fatal error: Unable to determine location of master copy > * F

Re: [gentoo-user] otrs

2011-09-22 Thread Stefan G. Weichinger
Am 22.09.2011 11:19, schrieb Marius Vaitiekunas: > Hi, > I strongly suggest you to use source package installation method. I am > using it without any problem. *sigh* hmm, thanks

Re: [gentoo-user] otrs

2011-09-22 Thread Marius Vaitiekunas
On Thu, Sep 22, 2011 at 12:11 PM, Stefan G. Weichinger wrote: > > Anyone installed otrs with webapp-config? > I just don't get it! > > otrs emerged fine, but I get: > > # webapp-config -I -h localhost -d 'otrs' otrs 3.0.10 > * Fatal error: Unable to determine location of master copy > * Fatal erro

[gentoo-user] otrs

2011-09-22 Thread Stefan G. Weichinger
Anyone installed otrs with webapp-config? I just don't get it! otrs emerged fine, but I get: # webapp-config -I -h localhost -d 'otrs' otrs 3.0.10 * Fatal error: Unable to determine location of master copy * Fatal error(s) - aborting Could someone please help? google doesn't get me fitting answ

Re: [gentoo-user] media-gfx/graphviz-2.26.3-r3

2011-09-22 Thread Alex Schuster
Mick writes: > On Wednesday 21 Sep 2011 23:02:02 Hilco Wijbenga wrote: > > Hi all, > > > > I'm trying to install Graphviz but I get: [...] > > /usr/lib/gcc/i686-pc-linux-gnu/4.5.3/../../../../i686-pc-linux-gnu/bin/ld: > > cannot find -lpng14 [...] > > Is there something I can do about this? Or is

[gentoo-user] Re: mplayer(2) ???

2011-09-22 Thread Nikos Chantziaras
On 09/22/2011 12:58 AM, Mick wrote: On Wednesday 21 Sep 2011 09:19:39 Sebastian Beßler wrote: Does mplayer2 work with smplayer or kmplayer? I use mplayer2 with smplayer for a few month now and everything works just fine for me. Any idea when ffmpeg-mt might make it to the main portage tree?

Re: [gentoo-user] mplayer(2) ???

2011-09-22 Thread Florian Philipp
Am 21.09.2011 23:58, schrieb Mick: > On Wednesday 21 Sep 2011 09:19:39 Sebastian Beßler wrote: >>> Does mplayer2 work with smplayer or kmplayer? >> >> I use mplayer2 with smplayer for a few month now and everything works >> just fine for me. > > Any idea when ffmpeg-mt might make it to the main po

Re: [gentoo-user] media-gfx/graphviz-2.26.3-r3

2011-09-22 Thread Florian Philipp
Am 22.09.2011 07:56, schrieb Mick: > On Wednesday 21 Sep 2011 23:02:02 Hilco Wijbenga wrote: >> Hi all, >> >> I'm trying to install Graphviz but I get: >> >> centaur ~ # emerge graphviz >> >> make[3]: Entering directory >> `/var/tmp/portage/media-gfx/graphviz-2.26.3-r3/work/graphviz-2.26.3/plugin/