Re: Authentication for telnet.

[David Wright]

On Thu 10 Oct 2019 at 06:48:16 (-0700), pe...@easthope.ca wrote:
> Incidently the hyperlinks in my reply to Charles Curley 
> ( https://lists.debian.org/debian-user/2019/10/msg00479.html ) seem OK.  
> The list server is is flummoxed when there are more than 2 or 3 or 4 
> References? Then I should insert only two references.  By hasty count, 
> 6 mouse clicks.

https://lists.debian.org/debian-user/2019/10/msg00337.html
appears to have 10 references. I don't know whether there's a limit.

But your threading has improved after a poor patch earlier this month
when the magnifying glasses were being pasted inside the links' < >
again.

Cheers,
David.

Re: Authentication for telnet.

[David Wright]

On Thu 10 Oct 2019 at 19:34:26 (+0100), Brian wrote:
> On Thu 10 Oct 2019 at 06:48:16 -0700, pe...@easthope.ca wrote:
> > From: David Wright, Thu, 10 Oct 2019 00:18:34 -0500
> > > telnetd is ancient ...

I wrote "sshd is modern and secure. telnetd is ancient and insecure …"
with the two sentences in apposition in order to contrast the choices
you said you have available: "Protocols Telnet and SSH are available;…"
Maybe sometime you'd explain why you prefer telnet to ssh.

Perhaps you could also restate where you had got to in this thread.
I assumed that by 4th October you had solved your difficulty with
options like -L and -a when trying to use your telnet client, and
that you had managed to authenticate yourself: "Solved now."

But I also thought you said that you didn't want to have to type a
password: "… once a user is logged in to the system, a shell session
is opened without a password", so I indicated how you might solve
that. Does "Solved now" mean that you had done so already when
using telnet? Perhaps I missed it with the threading the way it was.

> > Recency of development is a criterion for choosing a tool.  (?)
> 
> I think that depends on the tool. If telnetd works for you and you are
> cognisant of its drawbacks, why not use it?
>  
> > The ball-peen hammer as we know it would have been developed before 1900.
> > Might have been prior to 1800.  The pneumatic hammer was developed in the 
> > 1920s and '30s.  ( https://en.wikipedia.org/wiki/Air_hammer_(fabrication) )
> > Therefore we should always choose the pneumatic rather than the ball-peen.  
> 
> I'm unsure whether the analogy works. One can always choose to pick
> holes in an analogy and neglect the essential argument. The converstion
> then revolves round a different topic rather than getting to the guts of
> any issue.

The guts of my post was avoiding the password dialogue by adding
the user's own public key to the list of authorised keys. Perhaps
I shouldn't have bothered to pose the first question. Too distracting.

> > Recency is minded but shouldn't dictate.
> 
> Fair enough.

I would counter with a different analogy. Houses in Britain used to have
3-lever locks, adequate at the time. Modern 5-lever ones were expensive
and only available in more limited styles. Nowadays, better security is
required, so attractive 5-lever locks are more available, relatively
cheaper (as the market is larger), and demanded by most insurance
companies or else you're not covered.

> > > sshd is ... secure.
> > 
> > This scenario is in one machine which is running shorewall. The LAN 
> > has another firewall.  What are the risks to the telnet protocol in 
> > this case?

I don't know what your configuration or risks are, but why not go
for security in depth? I would have thought you were also more likely
to meet ssh than telnet in other situations nowadays.

> netcat (which I use very frequently) might be subject to the same
> criticisms. If I were to use it outside my LAN, I'd be inclined to
> use cryptcat.
> 
> Kneejerk reactions against telnetd are not unknown. telnetd is not
> insecure; its use might be. But I think you are aware of that.

I don't understand the point you're trying to make. By telnetd, do
you just mean strictly the security of daemon program, or the
end-to-end communication via the telnet protocol? (BTW I am assuming
that by the term telnet people have meant vanilla telnet and not
something like telnet-ssl.)

Cheers,
David.

Re: New Linux User needs some guidance

[David]

On Wed, 9 Oct 2019 at 23:51, Brian  wrote:

> I run 'lsblk' before
> and after plugging the USB device in. Writing an image to a USB stick is
> not something to rush if you don't want a system disk to suffer.

I like to use 'watch lsblk -f'.
It makes it obvious when the "plugging in" has been detected.

Installation de ModSecurity sur Debian

[G2PC]

On dirait que vous avez trouvé un bogue dans le paquet Debian.
"looks like you've found a bug in the Debian package"


Si quelqu'un peut tester l'installation de ModSecurity :
https://wiki.visionduweb.fr/index.php?title=Installer_Apache2_sur_Debian#mod_security_-_Un_pare-feu_applicatif

Puis, vérifier les logs :
cat /var/log/apache2/error.log | grep ModSecurity


SpiderLabs / ModSecurity
https://github.com/SpiderLabs/ModSecurity/issues/2139

Re: lenovo t410 - i915 - black screen

[Alexander V. Makartsev]

On 09.10.2019 17:53, Frederic Robert wrote:
> On 10/9/19 12:38 PM, Greg Wooledge wrote:
>> On Wed, Oct 09, 2019 at 09:04:06AM +, Frederic Robert wrote:
>>> How to find the card model? lspci?
>>
>> lspci -nn
>>
>> This will include the 8-digit hexadecimal PCI ID number, which is the
>> best indicator of what's actually inside the machine.
>>
>
> 00:02.0 VGA compatible controller [0300]: Intel Corporation Core
> Processor Integrated Graphics Controller [8086:0046] (rev 02)
>
Two different models of T410 were produced, one with Intel CPU graphics
and other with Nvidia graphics.
They have same CPU model, so there is still a possibility you have one
with Nvidia adapter.
Check if Nvidia graphics wasn't disabled in BIOS by accident.

To use Nvidia graphics you will have to install legacy Nvidia driver
packages ("nvidia-legacy-340xx-driver").
Version 340 is the last version supported for Nvidia NVS 3100M graphics
adapter.

One can also try to fiddle with kernel parameters for i915 module (to
disable power-saving features, for an example), but that could be too
much for an inexperienced user.
It is hard to suggest anything more than that, because your laptop was
discontinued many years ago and you can't even find manual\downloads for
it anymore on official Lenovo website.

-- 
With kindest regards, Alexander.

⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄ 

Re: plantage de ma debian avec un dell g5 15 5587

[Jérémy Prego]

bonjour,

Je viens un peu donner des nouvelles concernant ce freeze de pc
aléatoire ...
ce que j'ai testé:
- changement de ram
- boot sur mon ancien sata au lieu du NVME

Ce que j'ai prévu de tester:
- installation d'une debian de zéro avec l'iso netinstall
- tester le pc avec windows 10 ...

si vous avez un moyen pour avoir plus de log, et espérer enfin trouver
le coupable, je suis bien entendu preneur.

j'ai pris le temps également de contacter dell, qui ne m'a pas encore
répondu. Après, si j'utilise pas ce pc sous windows 10, je sais pas si
je vais avoir une réponse à la hauteur de ce que j'attends ...

merci de m'avoir lu,

Jerem
Le 27/09/2019 à 00:33, Jérémy Prego a écrit :
> bonjour,
>
> J'ai fais l'acquisition très récemment d'un nouveau pc portable dell g5
> 15 5587 en remplacement de mon ancien asus. Après avoir recopier la
> Debian de mon ancien pc et avoir fait le nécessaire concernant les
> firmware libre / non libre, tout fonctionne parfaitement, a une
> exception près...
> En effet, le pc se fige de façon aléatoire sans rien que ne soit écrit
> dans les logs ... Au moment ou le pc se fige, je ne fais rien qui
> demande une surcharge processeur / graphique, bref, je ne comprends
> vraiment pas le souci.
> Ça ne ressemble pas a un kernel panic mais étant non voyant, je peux pas
> décrire l'écran quand ça se produit. ce que je sais, c'est que les
> touche magic n'ont aucun effet et que je perd le son, à la différence
> d'un kernel panic ou j'entends les dernières secondes du son en boucle.
> Je précise également que je désactive la carte nvidia avec bumblebee,
> afin d'utiliser uniquement la carte graphique intel UHD Graphics 630.
> Niveau température, il est stable entre 40 et 50 quand je lui demande
> rien et du coup, quand le plantage se produit.
> j'utilise une debian testing à jour, avec le noyau 5.2.0-2
>
> Ce que j'ai testé:
> - Éliminer tout ce qui est branché en USB
> - Vérifier les logs pour chercher  des erreurs parlantes
> - Mise à jour du bios a la dernière version
>
> par ailleurs, je sais pas si ça a une importance, mais mon / est sur un
> NVME et mon home sur un ssd sata.
>
> pour cause de manque d'accessibilité, je ne peux pas tester la RAM avec
> memtest86 de façon autonome, du coup je cherche d'autres solutions avant.
>
> Merci à vous si vous avez une idée, une question, un test à me faire
> faire, ou n'importe quoi d'autre. En pj un lshw.
>
> Jerem

PrintScreen Key on Older Dell

[Martin McCormick]

I have connected a parallel-to-serial converter to a Dell
Dimension and am getting output which I can save on another
system using kermit.  I want to go through the BIOS setup
routine while capturing the session.  Here is a sample of the
opening screen of the BIOS setup


Dell Computer Corporation (www.dell.com)
 Page 1 of 2   Precision WorkStation 210 MT Setup BIOS Version: A07 
³   
 Time:  21:33:54   Date:  Thu Oct 10, 2019  ³ This category sets the time in
³ 24-hour format (hours:minutes:
  Diskette Drive A:   3.5 inch, 1.44 MB ³ seconds) for the internal clock/  
  Diskette Drive B: Not Installed   ³ calendar. 
³   
 Drives:³ To change the value in a field,   
 Primary   Type Cyls Hds  Pre   LZ Sec Size ³ enter a number or use the left-   
  Drive 0: AutoEIDE Drive 65533 ³ or right-arrow key.   
  Drive 1: None ³   
 Secondary  ³ Changes take effect immediately.  
  Drive 0: None ³   
  Drive 1: None ³   
³   
   Reserved Memory: NoneÃÄÄÄ
 CPU Speed:600 MHz  ³  Pentiumø III Processor - 600MHz  
  Num Lock:  On ³ CPU ID: 681   
 Chassis Intrusion:  Not Detected   ³  Level 2 Cache: 256 KB Integrated 
 Thermal Power-off:Enabled  ³  System Memory: 1024 MB SDRAM 
   Video DAC Snoop:  Off³Service Tag: H8UD1 
³   
ÁÄÄÄ
 Tab,Shift-Tab change fields³ change values³Alt-P next³Esc exit³Alt-B reboot 

The printer interface is obviously working even if what
comes out is a bit de-formatted but I seem to recall, there may
be a key sequence one can hit to cause printscreen to essentially
stay in effect and echo a continuous log as one does things such
as go through the setup.

What you saw was what happens when striking the PrintScrn
Key.  I tried Control-Printscrn and got nothing.  Shift-printscrn
just did the same thing as printscrn by itself.

Is there anything else I can try?

Martin McCormick

(solved) Re: Dual boot: one legacy, the other uefi

[Beco]

Hello all,

Thank you very much for all this thread and discussion.

Let me get back to you.

On Sun, 6 Oct 2019 at 18:26, Pascal Hambourg  wrote:


Dear Pascal,



>
> If Windows boots in EFI mode :
> Mount the EFI partition on /boot/efi.
> Install grub-efi-amd64.
> Boot some Linux media in EFI mode.
> Chroot into the Debian system, mount the usual pseudo-filesystems
> (/proc, /dev...) and the EFI partition.
> Run grub-install.
> Run update-grub.
> Done.
>
>
>

Your simplified solution nailed it! Thank you.

I mark this thread as solved basically because of this small paragraph. So
if you are reading this in the near future trying to find a solution, this
step-by-step and some duckduckgo will get you into business.


There are more details for a complete response, and some commands needs to
be in a different order, that I'll reply later in this thread, just to make
sure the procedure that I made and worked flawlessly, is registered for
posterity.

 For now, if you are in a hurry, this answer above will get you in the
right path.

My best,

Beco



-- 
Dr Beco
A.I. researcher

"I know you think you understand what you thought I said but I'm not sure
you realize that what you heard is not what I meant" -- Alan Greenspan

GPG Key: https://pgp.mit.edu/pks/lookup?op=vindex=0x5A107A425102382A
Creation date: pgp.mit.edu ID as of 2014-11-09

Re: Sorl

[Alex Muntada]

Hola Joan,

> la sol·lució natural és deixar de banda la cerca en BBDD i
> usar Apache Sorl.

Veig que poses Sorl en diversos llocs i en realitat és Solr
(Solar però amb l'a muda). Ho comento perquè si busques
referències i informació sobre sorl potser no trobis gaires
resultats.

> D'entrada pensava simplement agafar un servidor

Vols dir que no hi ha coses més lleugeres que puguis tenir
al mateix servidor on hi ha el drupal? La primera que em ve
al cap és la que comentava fa una estona: xapian.

Salut,
Alex

--
  ⢀⣴⠾⠻⢶⣦⠀
  ⣾⠁⢠⠒⠀⣿⡁   Alex Muntada 
  ⢿⡄⠘⠷⠚⠋   Debian Developer  log.alexm.org
  ⠈⠳⣄



signature.asc
Description: PGP signature

Re: Sorl

[Alex Muntada]

Hola Narcis,

> Algú coneix alternatives (lliures, és clar) a Gigablast i del
> mateix tipus?

Del mateix tipus no t'ho sabria dir però diversos serveis de
debian.org utilitzen https://xapian.org/ com a indexador per a
les cerques.

Salut,
Alex

--
  ⢀⣴⠾⠻⢶⣦⠀
  ⣾⠁⢠⠒⠀⣿⡁   Alex Muntada 
  ⢿⡄⠘⠷⠚⠋   Debian Developer  log.alexm.org
  ⠈⠳⣄



signature.asc
Description: PGP signature

Re: (deb-cat) Recovery mode sense root

[Alex Muntada]

Hola Narcis,
primer de tot un petit incís: darrerament els teus correus se'n
van a la carpeta d'spam i de vegades trigo una mica a adonar-me'n
(ho comento aquí per si també li ha passat a algú més).

> Però aleshores, quan hi ha problemes seriosos amb el mode
> gràfic o l'escriptori, «el recovery mode» no serveix perquè
> no preveu més que l'inici de sessió com a «root» amb
> contrasenya.

Fins on jo he pogut comprovar, el recovery en mode gràfic només
és un aparador al procediment habitual de recuperació, que no
ofereix pas l'entorn habitual de treball en l'escriptori. A més,
no m'arriba ni a demanar la contrasenya de l'usuari perquè en
realitat no arrenca l'entorn habitual sinó que el deixa muntat
en un directori perquè el puguis remenar.

Ho tinc ben fresc perquè tot just avui l'he necessitat.

> Hi ha alguna manera de A) Permetre l'inici de sessió com a un
> altre usuari

En mode recuperació segur que no perquè no existeix el concepte
de sessió.

> B) Saltar-se el requeriment de contrasenya ?

Podries fer una foto de la pantalla que mostri en quin moment
has de posar la contrasenya de root? Em fa l'efecte que no
acabo d'entendre el problema del tot i potser així me'n faria
una idea més clara.

Salut,
Alex

--
  ⢀⣴⠾⠻⢶⣦⠀
  ⣾⠁⢠⠒⠀⣿⡁   Alex Muntada 
  ⢿⡄⠘⠷⠚⠋   Debian Developer  log.alexm.org
  ⠈⠳⣄



signature.asc
Description: PGP signature

Re: Blank Screen with Blinking Cursor

[riveravaldez]

On 10/10/19, J.Arun Mani  wrote:
> Hi
>
> An user of Debian 10 GNOME Edition.
>
> So today I ran into a trouble.
> My Debian boots and after splash screen, there is a simple black screen with
> _ flashing at the topright corner and slowly cursor appears at downleft
> corner.
>
> After that nothing... what could be the issue?

Not sure, but as a guess, check if this has something to do (and help
to fix your problem):

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=941782

Best regards, !

Blank Screen with Blinking Cursor

[J.Arun Mani]

Hi

An user of Debian 10 GNOME Edition.

So today I ran into a trouble.
My Debian boots and after splash screen, there is a simple black screen with _ 
flashing at the topright corner and slowly cursor appears at downleft corner.

After that nothing... what could be the issue?

Thanks
J Arun Mani

Re: lenovo t410 - i915 - black screen

[martin smith]

On 09/10/2019 14:09, Greg Wooledge wrote:

On Wed, Oct 09, 2019 at 12:53:43PM +, Frederic Robert wrote:

On 10/9/19 12:38 PM, Greg Wooledge wrote:

On Wed, Oct 09, 2019 at 09:04:06AM +, Frederic Robert wrote:

How to find the card model? lspci?

lspci -nn

This will include the 8-digit hexadecimal PCI ID number, which is the
best indicator of what's actually inside the machine.


00:02.0 VGA compatible controller [0300]: Intel Corporation Core Processor
Integrated Graphics Controller [8086:0046] (rev 02)

OK, good start... this seems to be a roughly 9-year-old chipset,
with a code name of "Arrandale".

However, googling "lenovo t410" from the Subject: header led me to
 which says:

Video chipsets:
  * Intel HD Graphics
  * 256MB NVIDIA® Quadro® NVS3100M

Does this machine actually have both Intel and Nvidia devices?  If so,
it's seriously bad news, and it indicates you may have to try (and
probably fail) to use the stuff from .

More likely, you'll end up disabling one of the devives at the firmware
level, and simply using the other.  But I'm not a laptop user, let alone
an Optimus laptop user, so I'm only relaying what I've heard from others.


I have a W520 with the same video, you can disable the nvidia in the bios

but its not obvious unless you spend some time reading it and pondering it

Re: Authentication for telnet.

[Brian]

On Thu 10 Oct 2019 at 06:48:16 -0700, pe...@easthope.ca wrote:

> From: David Wright, Thu, 10 Oct 2019 00:18:34 -0500
> > telnetd is ancient ...
> 
> Recency of development is a criterion for choosing a tool.  (?)

I think that depends on the tool. If telnetd works for you and you are
cognisant of its drawbacks, why not use it?
 
> The ball-peen hammer as we know it would have been developed before 1900.
> Might have been prior to 1800.  The pneumatic hammer was developed in the 
> 1920s and '30s.  ( https://en.wikipedia.org/wiki/Air_hammer_(fabrication) )
> Therefore we should always choose the pneumatic rather than the ball-peen.  

I'm unsure whether the analogy works. One can always choose to pick
holes in an analogy and neglect the essential argument. The converstion
then revolves round a different topic rather than getting to the guts of
any issue.

> Recency is minded but shouldn't dictate.

Fair enough.

> > sshd is ... secure.
> 
> This scenario is in one machine which is running shorewall. The LAN 
> has another firewall.  What are the risks to the telnet protocol in 
> this case?

netcat (which I use very frequently) might be subject to the same
criticisms. If I were to use it outside my LAN, I'd be inclined to
use cryptcat.

Kneejerk reactions against telnetd are not unknown. telnetd is not
insecure; its use might be. But I think you are aware of that.

-- 
Brian.

Re: [OFF TOPIC] - [OT] - Dica de Fibra Óptica no Centro de SP

[paulo bruck]

Oi Paulo

Tenho um cliente que fica na praça da República e a vivo passou uma fibra
para ele.

Se vc quizer pagar por uma fibra fale com o pessoal da HostFiber que é a a
empresa que a Vivo e outras usam para passar fibra. ou procure algo como
fibra apagada.

abraços

Em qui, 10 de out de 2019 às 15:17, Paulo Correia 
escreveu:

> Pessoal,
>
> Alguém aqui sabe quem atende *Pessoa Física* no Centro de SP (República),
> que não seja as operadoras (VIVO, TIM, CLARO/NET).
> Pois estou a 4 anos esperando pela fibra da Vivo, agora uso 4G da Nextel
> mas a restrição de banda (30GB) e custos ($$$) tão me impedindo de fazer
> várias coisas.
>
> *Obs*: Não dá para ser via rádio (é prédio e não rola colocar antena no
> telhado) a não ser que role dentro do apartamento, nem satélite pelo custo
> absurdo e o mesmo caso da antena.
>
> *Obs2*: Daria para montar um IDC dentro de casa pois não sei o que é
> piscar a luz, esta é a vantagem de não se ter poste na rua, todo cabeamento
> vem por baixo da terra.
>
> Att,
>
> Paulo Correia
>


-- 
Paulo Ricardo Bruck consultor
tel 011 3596-4881/4882  011 98140-9184 (TIM)
http://www.contatogs.com.br
http://www.protejasuarede.com.br
gpg AAA59989 at wwwkeys.us.pgp.net

[OFF TOPIC] - [OT] - Dica de Fibra Óptica no Centro de SP

[Paulo Correia]

Pessoal,

Alguém aqui sabe quem atende Pessoa Física no Centro de SP (República), que não 
seja as operadoras (VIVO, TIM, CLARO/NET).
Pois estou a 4 anos esperando pela fibra da Vivo, agora uso 4G da Nextel mas a 
restrição de banda (30GB) e custos ($$$) tão me impedindo de fazer várias 
coisas.

Obs: Não dá para ser via rádio (é prédio e não rola colocar antena no telhado) 
a não ser que role dentro do apartamento, nem satélite pelo custo absurdo e o 
mesmo caso da antena.

Obs2: Daria para montar um IDC dentro de casa pois não sei o que é piscar a 
luz, esta é a vantagem de não se ter poste na rua, todo cabeamento vem por 
baixo da terra.

Att,

Paulo Correia

Re: Bible study tools in Debian repository - End-user support?

[Richard Owlett]

On 10/09/2019 08:06 AM, Richard Owlett wrote:

[snip]

My immediate BibleTime related questions include:
1. When display the Strong's entry for a word there is a field titled 
"Morphology:". I find no references to the meaning of the abbreviations 
used there.


While searching for something else I found a March 2009 thread.
[https://crosswire.org/forums/mvnforum/viewthread_thread,772_offset,0/addmessage]

It references a no longer existing site [http://www.byztxt.com]
{available on Wayback Machine [https://web.archive.org]}.
It will take some digging to verify if still current.

Page Suggestion

[Sarah Watts]

Hi,

I am inquiring about whether you may be interested in linking to our site 
https://www.mathschase.com/ from your page?

http://user.it.uu.se/~embe8573/conf/bookmark.html

Maths Chase is a completely free site where you can quickly test your times 
tables. The site is a very simple game but I think kids will find it a really 
fun way to learn their times tables. I wondering whether this could be a useful 
resource for your site readers?

Thank you very much for your consideration.

Kind Regards,
Sarah

Sarah Watts
i...@mathschase.com
https://www.mathschase.com/

Re: Faut t'il bloquer le Multicast - IGMP avec Iptables

[G2PC]

Voilà, cette partie a été traitée.

J'ai également remplacé :

-A INPUT -p tcp --sport 49152:65534 --dport 49152:65534 -m state --state 
ESTABLISHED,RELATED,NEW -j ACCEPT
par
-A INPUT -p tcp --sport 49152:65534 --dport 49152:65534 -m state --state 
ESTABLISHED,NEW -j ACCEPT

J'espère que c'est cohérent.

Le script actuel :
https://wiki.visionduweb.fr/index.php?title=Configurer_le_pare-feu_Iptables#R.C3.A8gle_personnalis.C3.A9e_pour_configurer_Iptables_filter

Merci.

>
> Si on parle d'une machine exposée sur Internet comme ton VPS OVH, tu
> n'as pas besoin du multicast. Cette techno n'a jamais pris sur
> Internet. Si tu reçois du multicast sur l'interface, c'est du bruit de
> fond local correspondant à des protocoles d'annonces de services mals
> configurés sur les VPS voisins ou des besoins spécifiques à OVH (FHRP
> par exemple).
>
> L'IGMP est un protocole permettant à une machine de s'abonner à un
> flux multicast routé. Donc si pas de multicast sur Internet, pas
> besoin d'IGMP
>
> Pour reprendre les propos de Pascal et Daniel, comme tu n'en pas pas
> besoin, autant le bloquer mais sans pour autant créer des règles
> dédiées. Personnellement, je trouve qu'un DROP par défaut de tout en
> fin de chaîne (ou en action par défaut) va très bien et évite de
> surcharger inutilement les règles.
>
> Pour l'IPv6, le jour où tu le déploieras, en effet, comme l'a rappelé
> Pascal, il faut faire attention à bien autoriser le protocole NDP qui
> reprend, entre autre, le rôle d'ARP en IPv4 et qui s'appuie sur de
> l'ICMPv6. Autant en IPv4 tu ne peux pas bloquer l'ARP avec iptables,
> autant en IPv6 c'est assez facile de se couper les pattes en bloquant
> NDP ou plutôt en oubliant de l'autoriser
> NDP repose sur des paquets ICMPv6 échangés localement en multicast
> certes, mais surtout des paquets ICMPv6 particuliers.
> Personnellement, je n'autorise pas le multicast sur mes règles
> ip6tables mais uniquement les paquets ICMPv6 dont les caractéristiques
> concordent précisément avec les paquets attendus (adresses fe80::, HL
> = 255, types & codes qui vont bien, etc...).
>
> Enfin, petit point si je puis me permettre  :
>
> # Permettre à une connexion ouverte de recevoir du trafic en entrée.
> -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
>
> Personnellement, j'aurais fait comme cela :
> -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT
>
> -A INPUT -p icmp -m conntrack --ctstate RELATED -j ACCEPT
>
> Autoriser RELATED sans restriction est une mauvaise habitude de
> beaucoup de docs en ligne et la source de problèmes de sécurité
> importants même si depuis la version 4.7 du kernel les helpers ne sont
> plus activés par défaut pour éviter ce problème. En revanche, c'est
> mieux de le laisser autoriser pour l'ICMP.
>
> De plus, il faudra activer le helper FTP pour ton serveur FTP. Une doc
> ici sur le sujet :
> https://gist.github.com/azlux/6a70bd38bb7c525ab26efe7e3a7ea8ac. Cela
> te permettra en plus de fermer le port TCP/20

Re: iptables DROP

[miguel angel gonzalez]

Sí, eso es, se van incrementando. He reiniciado apache para comprobar si
esta conexión era persistente y se liberaba.

El jue., 10 oct. 2019 a las 16:44, Ramses ()
escribió:

> El 10 de octubre de 2019 16:14:19 CEST, miguel angel gonzalez <
> mangelgonza...@gmail.com> escribió:
> >Hola,
> >tengo un problema con iptables,
> >me está entrando tráfico que no es deseable desde una ip y
> >por más que filtro no hay manera, ¿alguna idea?
> >
> >iptables -A INPUT -s IP_a_bloquear -j DROP
> >
> >Reviso la regla y está guardada.
> >
> >Muchas gracias.
>
> Pero, ¿está guardada la primera?
>
> Si haces un "iptables -nvL" los contadores se van incrementando en esa
> regla...?
>
>
> Saludos
>
>

-- 
/m.a.

Re: Bible study tools in Debian repository - End-user support?

[Richard Owlett]

On 10/10/2019 06:39 AM, Roberto C. Sánchez wrote:

On Wed, Oct 09, 2019 at 08:06:49AM -0500, Richard Owlett wrote:


I browsed the posts at
[https://alioth-lists.debian.net/pipermail/pkg-crosswire-devel/]
for the last year. I don't think my initial questions would be suitably on
topic.



Understood.  Still, the offer stands.



I've taken another look at https://crosswire.org/forums/mvnforum/index .
Although web based fora, its content does have the perspective I want.

I've continued to explore https://crosswire.org .
I may find the answers to my questions with better search time. Also 
they may be answered by a more complete understanding of the project's 
mindset {after context is always relevance ;}.

Re: Appears to be a problem with Debian Stretch 9.11.0 regarding WAN non-allocation ...

[Curt]

On 2019-10-10, Susmita/Rajib  wrote:
> To,
> The Team Laptop,
> debian-lap...@lists.debian.org,
> The Team User,
> debian-user@lists.debian.org,
> Team Bugs,
> debian-bugs-d...@lists.debian.org
> Debian.org
>
> My dear illustrious Team Leaders,

> Good morning.
>
> Yes, it appears to definitely be an issue. The following Post in
> forums.debian.net could please be referred to:
> Re: Broadcom wireless card doesn't work
> http://forums.debian.net/viewtopic.php?f=7=143081=709041#p709041
>

This might provide relief:

https://wiki.debian.org/wl

-- 
"There are no foreign lands. It is the traveler only who is foreign."
-- Robert Louis Stevenson

Re: iptables DROP

[Ramses]

El 10 de octubre de 2019 16:14:19 CEST, miguel angel gonzalez 
 escribió:
>Hola,
>tengo un problema con iptables,
>me está entrando tráfico que no es deseable desde una ip y
>por más que filtro no hay manera, ¿alguna idea?
>
>iptables -A INPUT -s IP_a_bloquear -j DROP
>
>Reviso la regla y está guardada.
>
>Muchas gracias.

Pero, ¿está guardada la primera? 

Si haces un "iptables -nvL" los contadores se van incrementando en esa 
regla...? 


Saludos

Problemas con bluetooth- No incia

[Julian Daich]

Hola,

Tengo blueman instalado y uso XFCE. El icono de bluetooth no aparece
Me salen estas salidas
$ sudo service bluetooth status
● bluetooth.service - Bluetooth service
   Loaded: loaded (/lib/systemd/system/bluetooth.service; disabled; vendor pres>
   Active: inactive (dead)
 Docs: man:bluetoothd(8)

$ sudo service bluetooth start

Luego
$ sudo service bluetooth status
● bluetooth.service - Bluetooth service
   Loaded: loaded (/lib/systemd/system/bluetooth.service; disabled; vendor pres>
   Active: active (running) since Thu 2019-10-10 16:34:05 CEST; 5s ago
 Docs: man:bluetoothd(8)
 Main PID: 18559 (bluetoothd)
   Status: "Running"
Tasks: 1 (limit: 4409)
   Memory: 3.9M
   CGroup: /system.slice/bluetooth.service
   └─18559 /usr/lib/bluetooth/bluetoothd

oct 10 16:34:04 Kaspito systemd[1]: Starting Bluetooth service...
oct 10 16:34:04 Kaspito bluetoothd[18559]: Bluetooth daemon 5.50
oct 10 16:34:05 Kaspito systemd[1]: Started Bluetooth service.
oct 10 16:34:05 Kaspito bluetoothd[18559]: Starting SDP server
oct 10 16:34:05 Kaspito bluetoothd[18559]: Bluetooth management interface 1.14 >
oct 10 16:34:06 Kaspito bluetoothd[18559]: Sap driver initialization failed.
oct 10 16:34:06 Kaspito bluetoothd[18559]: sap-server: Operation not permitted >
oct 10 16:34:06 Kaspito bluetoothd[18559]: Endpoint registered: sender=:1.52 pa>
oct 10 16:34:06 Kaspito bluetoothd[18559]: Endpoint registered: sender=:1.52 pa>
lines 1-20/20 (END)...skipping...
● bluetooth.service - Bluetooth service
   Loaded: loaded (/lib/systemd/system/bluetooth.service; disabled;
vendor preset: disabled)
   Active: active (running) since Thu 2019-10-10 16:34:05 CEST; 5s ago
 Docs: man:bluetoothd(8)
 Main PID: 18559 (bluetoothd)
   Status: "Running"
Tasks: 1 (limit: 4409)
   Memory: 3.9M
   CGroup: /system.slice/bluetooth.service
   └─18559 /usr/lib/bluetooth/bluetoothd

oct 10 16:34:04 Kaspito systemd[1]: Starting Bluetooth service...
oct 10 16:34:04 Kaspito bluetoothd[18559]: Bluetooth daemon 5.50
oct 10 16:34:05 Kaspito systemd[1]: Started Bluetooth service.
oct 10 16:34:05 Kaspito bluetoothd[18559]: Starting SDP server
oct 10 16:34:05 Kaspito bluetoothd[18559]: Bluetooth management
interface 1.14 initialized
oct 10 16:34:06 Kaspito bluetoothd[18559]: Sap driver initialization failed.
oct 10 16:34:06 Kaspito bluetoothd[18559]: sap-server: Operation not
permitted (1)
oct 10 16:34:06 Kaspito bluetoothd[18559]: Endpoint registered:
sender=:1.52 path=/MediaEndpoint/A2DPSink/sbc
oct 10 16:34:06 Kaspito bluetoothd[18559]: Endpoint registered:
sender=:1.52 path=/MediaEndpoint/A2DPSource/sbc
~
Con Ubuntu Studio en otra partición no tengo probelmas.

Saludos,

Julián

-- 
Julian

Re: iptables DROP

[Alba Ferri]

Tienes el log del iptables habilitado?
Igual podrías sacar info de ahí...

Slds,

El jue., 10 oct. 2019 a las 16:14, miguel angel gonzalez (<
mangelgonza...@gmail.com>) escribió:

> Hola,
> tengo un problema con iptables,
> me está entrando tráfico que no es deseable desde una ip y
> por más que filtro no hay manera, ¿alguna idea?
>
> iptables -A INPUT -s IP_a_bloquear -j DROP
>
> Reviso la regla y está guardada.
>
> Muchas gracias.
> --
> /m.a.
>

Re: Authentication for telnet.

[peter]

From: David Wright, Thu, 10 Oct 2019 00:18:34 -0500
> telnetd is ancient ...

Recency of development is a criterion for choosing a tool.  (?)

The ball-peen hammer as we know it would have been developed before 1900.
Might have been prior to 1800.  The pneumatic hammer was developed in the 
1920s and '30s.  ( https://en.wikipedia.org/wiki/Air_hammer_(fabrication) )
Therefore we should always choose the pneumatic rather than the ball-peen.  

Recency is minded but shouldn't dictate.

> sshd is ... secure.

This scenario is in one machine which is running shorewall. The LAN 
has another firewall.  What are the risks to the telnet protocol in 
this case?

> Why would you be typing a password after typing ssh localhost?
> Just type:
> 
> $ cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys 

Valid point.

Incidently the hyperlinks in my reply to Charles Curley 
( https://lists.debian.org/debian-user/2019/10/msg00479.html ) seem OK.  
The list server is is flummoxed when there are more than 2 or 3 or 4 
References? Then I should insert only two references.  By hasty count, 
6 mouse clicks.

Regards,... Peter E.


-- 
https://en.wikibooks.org/wiki/Medical_Machines
Tel: +1 604 670 0140Bcc: peter at easthope. ca

iptables DROP

[miguel angel gonzalez]

Hola,
tengo un problema con iptables,
me está entrando tráfico que no es deseable desde una ip y
por más que filtro no hay manera, ¿alguna idea?

iptables -A INPUT -s IP_a_bloquear -j DROP

Reviso la regla y está guardada.

Muchas gracias.
-- 
/m.a.

Re: romper hardlink manteniendo ambos archivos

[David Helmut Reese Molinas]

El jue., 10 oct. 2019 a las 9:04, Gonzalo Rivero ()
escribió:

> Holas,
> tengo archivos creados así:
>   ln origen /otro/directorio/destino
>
> o sea, no enlace simbólico, pero enlace duro. De repente ahora necesito
> que ambos sean independientes, hasta ahora solo lo pude hacer copian do
> con otro nombre, borrar el destino y renombrar:
>  cp /otro/directorio/destino /otro/directorio/destino.tmp
>  rm /otro/directorio/destino
>  mv /otro/directorio/destino.tmp /otro/directorio/destino
>
> ¿hay algún comando para esto?, tipo antiln
>
>
"unlink archivo" debería funcionar... creo...
-- 

David H. Reese M.
Investigación y Desarrollo
Dirección Nacional de Contrataciones Públicas
Asunción - Paraguay
Teléfono: 595 971 351390

Re: RFE: Could crc32 be included in the debian live/installation disk?

[Dan Ritter]

Albretch Mueller wrote: 
> On 10/8/19, Reco  wrote:
> > On Tue, Oct 08, 2019 at 04:34:17PM +0200, Albretch Mueller wrote:
> >> >>  this is a hash algorithm that is implemented of the chips anyway, it
> >> >> is the fastest of them all, used by synch (is it?) and it is crucially
> >> >> helpful when data integrity is very important.
> >>
> >> >And it's also one of those broken checksum algorithms which makes it
> >> >easy to replace a part of file while keeping a checksum intact.
> >>
> >>  Well, I wasn't claiming CRC32 was fail-safe, what I actually meant is
> >> that data integrity would be based on:
> >>
> >>  a) two -fast- and "reasonably" safe signature utilities which are
> >> based on -different algorithms-
> >
> > CRC32 fails here. Key is "reasonably" safe.
> > If you'd propose MD5 and SHA256 (Debian does it for the every package in
> > repostory) - that would be considered OK.
> 
>  OK, great! MD5 and SHA256 would it then be. They don't even need to
> be computed, so, right after installation Debian should:
> 
>  1) give users the option to keep a first baseline, including the
> hardware on which the installation was made, saved into files which
> would be tar'ed and compressed in a well-defined, standard way;

Install AIDE. It's packaged.

https://aide.github.io/

About AIDE

AIDE (Advanced Intrusion Detection Environment, [eyd]) is a file
and directory integrity checker.

What does it do?

It creates a database from the regular expression rules that it
finds from the config file(s). Once this database is initialized
it can be used to verify the integrity of the files. It has
several message digest algorithms (see below) that are used to
check the integrity of the file. All of the usual file
attributes can also be checked for inconsistencies. It can read
databases from older or newer versions. See the manual pages
within the distribution for further info.
Features

supported message digest algorithms: md5, sha1, rmd160,
tiger, crc32, sha256, sha512, whirlpool (additionally with
libmhash: gost, haval, crc32b)
supported file attributes: File type, Permissions, Inode,
Uid, Gid, Link name, Size, Block count, Number of links, Mtime,
Ctime and Atime
support for Posix ACL, SELinux, XAttrs and Extended file
system attributes if support is compiled in
plain text configuration files and database for simplicity
powerful regular expression support to selectively include
or exclude files and directories to be monitored
gzip database compression if zlib support is compiled in
stand alone static binary for easy client/server monitoring
configurations
and many more


>  I meant you would keep that file in a pen drive you never connect to
> the Internet adn that baselining utility should be part of the Debian
> installation DVDs.

AIDE does this.

> >>  Yes, but where is the GUI based data integrity check?

Write one.

>  By the way, if you were to recommend the best/most exhaustive and
> reproducible documentation about how Debian's packaging system works,
> that would be? Also, the mindset/"philosophy" behind it. Maybe I could
> find the time to do a more elaborate "proof of concept" and submit it
> for your consideration or heck even start yet another Debian knock
> off.

https://www.debian.org/doc/debian-policy/ 


-dsr-

Re: Appears to be a problem with Debian Stretch 9.11.0 regarding WAN non-allocation ...

[Henning Follmann]

On Thu, Oct 10, 2019 at 05:05:49PM +0530, Susmita/Rajib wrote:
> To,
> The Team Laptop,
> debian-lap...@lists.debian.org,
> The Team User,
> debian-user@lists.debian.org,
> Team Bugs,
> debian-bugs-d...@lists.debian.org
> Debian.org
> 
> My dear illustrious Team Leaders,
> 
> Good morning.
> 
> Yes, it appears to definitely be an issue. The following Post in
> forums.debian.net could please be referred to:
> Re: Broadcom wireless card doesn't work
> http://forums.debian.net/viewtopic.php?f=7=143081=709041#p709041
>

Broadcom BCM43142 doesn't seem to be supported.

Please read:
https://wiki.debian.org/WiFi

> I have tried everything within my ability but failed. Strangely
> enough, the WAN for Knoppix 8.2.0  and even DOZE work perfectly well
> without any intervention.
> 
> Is this issue with Debian only the result of a Bug?

Depending what you consider a bug. It's a bug in the reasoning of
wifi chip manufacturers. If you ask them it's a feature.


> 
> Could you kindly check the issue please? Advise if any further
> specific input is required from my end?
> 

-H


-- 
Henning Follmann   | hfollm...@itcfollmann.com

romper hardlink manteniendo ambos archivos

[Gonzalo Rivero]

Holas,
tengo archivos creados así:
  ln origen /otro/directorio/destino

o sea, no enlace simbólico, pero enlace duro. De repente ahora necesito
que ambos sean independientes, hasta ahora solo lo pude hacer copian do
con otro nombre, borrar el destino y renombrar:
 cp /otro/directorio/destino /otro/directorio/destino.tmp
 rm /otro/directorio/destino
 mv /otro/directorio/destino.tmp /otro/directorio/destino

¿hay algún comando para esto?, tipo antiln

Appears to be a problem with Debian Stretch 9.11.0 regarding WAN non-allocation ...

[Susmita/Rajib]

To,
The Team Laptop,
debian-lap...@lists.debian.org,
The Team User,
debian-user@lists.debian.org,
Team Bugs,
debian-bugs-d...@lists.debian.org
Debian.org

My dear illustrious Team Leaders,

Good morning.

Yes, it appears to definitely be an issue. The following Post in
forums.debian.net could please be referred to:
Re: Broadcom wireless card doesn't work
http://forums.debian.net/viewtopic.php?f=7=143081=709041#p709041

I have tried everything within my ability but failed. Strangely
enough, the WAN for Knoppix 8.2.0  and even DOZE work perfectly well
without any intervention.

Is this issue with Debian only the result of a Bug?

Could you kindly check the issue please? Advise if any further
specific input is required from my end?

Regards,
Rajib
(Rajib Bandopadhyay)
A Debian and Knoppix user

Re: disk going bad? or fuser related issues? . . .

[Reco]

Hi.

On Thu, Oct 10, 2019 at 12:50:13PM +0200, Albretch Mueller wrote:
> On 10/9/19, Reco  wrote:
> > Please post the results of "smartctl -A".
> 
>  Here go the results another of my drives (Seagate Archive 8.00 TB ):

And this one is:

> # date; smartctl --xall /dev/sdc
>   9 Power_On_Hours  -O--CK   096   096   000-3515

Twice as old as a previous one.


>   5 Reallocated_Sector_Ct   PO--CK   100   100   010-0
> 197 Current_Pending_Sector  -O--C-   100   100   000-0
> 198 Offline_Uncorrectable   C-   100   100   000-0

Has no bad sectors too.


Has no visible recorded errors.

Seems OK to me.

Reco

Re: disk going bad? or fuser related issues? . . .

[Reco]

Hi.

On Thu, Oct 10, 2019 at 12:48:33PM +0200, Albretch Mueller wrote:
> On 10/9/19, Reco  wrote:
> > Please post the results of "smartctl -A".
> >
> > Reco
> 
>  Here go the results for one of my drives (a Seagate Samsung 2.00 TB):

Let's see.

> # smartctl --xall /dev/sdb
...
>   9 Power_On_Hours  -O--CK   100   100   000-1796

It's relatively new,

>   5 Reallocated_Sector_Ct   PO--CK   252   252   010-0
> 196 Reallocated_Event_Count -O--CK   252   252   000-0
> 197 Current_Pending_Sector  -O--CK   252   252   000-0
> 198 Offline_Uncorrectable   CK   252   252   000-0

Has no bad sectors.

> Error 1 [0] occurred at disk power-on lifetime: 794 hours (33 days + 2 hours)
...
>   After command completion occurred, registers were:
>   ER -- ST COUNT  LBA_48  LH LM LL DV DC
>   -- -- -- == -- == == == -- -- -- -- --
>   84 -- 41 04 b1 00 00 49 46 0f 4f 40 00  Error: ICRC, ABRT at LBA = 
> 0x49460f4f = 1229328207

And had a hiccup about 1000 hours of lifetime ago.


>   Commands leading to the command that caused the error were:
>   CR FEATR COUNT  LBA_48  LH LM LL DV DC  Powered_Up_Time  
> Command/Feature_Name
>   -- == -- == -- == == == -- -- -- -- --  ---  
> 
>   61 00 00 04 00 00 00 49 46 10 00 40 00 00:00:08.814  WRITE FPDMA QUEUED

The hiccup was about writing a sector.


This one's OK.

Reco

Re: Bible study tools in Debian repository - End-user support?

[Roberto C . Sánchez]

On Wed, Oct 09, 2019 at 08:06:49AM -0500, Richard Owlett wrote:
> 
> I browsed the posts at
> [https://alioth-lists.debian.net/pipermail/pkg-crosswire-devel/]
> for the last year. I don't think my initial questions would be suitably on
> topic.
> 
Understood.  Still, the offer stands.

> > 
> > As the name would suggest, the primary purpose of the list is
> > development-related discussions (bug reports, package maintenance,
> > etc.).  But if you have a look at the archives, the list goes long
> > periods without any discussion, which is to say that the traffic is
> > quite low.  If you are not able to find another list, feel free to ask
> > your questions there.  As far as a I know, all of us on the list are
> > active users of these tools in addition to maintaining them.  We should
> > be able to help you out with what you need there if you decide that your
> > questions are off-topic here on debian-user.
> > 
> > Regards,
> > 
> > -Roberto
> > 
> 
> My immediate BibleTime related questions include:
> 1. When display the Strong's entry for a word there is a field titled
> "Morphology:". I find no references to the meaning of the abbreviations used
> there.

I personally don't use the morphology information and my knowledge of
linguistics is sadly lacking.  A quick skim of the "Morphology
(linguistics)" article on Wikipedia indicates that it is a way of
describing the origins and relationships of various parts of a word or
phrase.

> 2. Discussion of how to best use the "Personal commentary" tool.
> 
This doesn't make sense to me.  Are you referring to the mechanics for
using the personal commentary tool or principles for developing a
personal commentarty?

> Another issue is difference(s) (if any) in the target audience of BibleTime
> and Xiphos.
> 
Personally, I use Gnome and Xiphos, being built with GTK, integrates a
bit better.  Bibletime is built with Qt and so it feels more like a KDE
application.  That said, I have encountered some annoying UI bugs with
Xiphos and have not made the time to report/fix them.

> I know I don't have the latest release as this particular machine is still
> at Debian 9.8. I'll be installing Debian 10 soon but have some housekeeping
> issues to resolve first.
> 
One thing that I found with Xiphos (again, which I've not yet formally
reported) is that drop-down selections for book/chapter/verse no longer
scroll.  That is, if their contents extend past the top/bottom of the
screen, the widget no longer has the ability to scroll.  That means
either getting as close as possible then navigating with up/down arrows,
or directly typing in the particular location in the adjacent text
field.

I am not aware if Bibletime has any similarly annoying bugs.

Regards,

-Roberto

-- 
Roberto C. Sánchez

Re: disk going bad? or fuser related issues? . . .

[Albretch Mueller]

On 10/9/19, Reco  wrote:
> Please post the results of "smartctl -A".
>
> Reco

 Here go the results another of my drives (Seagate Archive 8.00 TB ):

# date; smartctl --xall /dev/sdc
Mon Oct  7 11:22:16 CEST 2019
smartctl 6.6 2016-05-31 r4324 [x86_64-linux-4.9.0-6-amd64] (local build)
Copyright (C) 2002-16, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Model Family: Seagate Archive HDD
Device Model: ST8000AS0002-1NA17Z
Serial Number:Z840G7JM
LU WWN Device Id: 5 000c50 090d2f837
Firmware Version: AR17
User Capacity:8,001,563,222,016 bytes [8.00 TB]
Sector Sizes: 512 bytes logical, 4096 bytes physical
Rotation Rate:5980 rpm
Device is:In smartctl database [for details use: -P show]
ATA Version is:   ACS-2, ACS-3 T13/2161-D revision 3b
SATA Version is:  SATA 3.1, 6.0 Gb/s (current: 6.0 Gb/s)
Local Time is:Mon Oct  7 11:22:17 2019 CEST
SMART support is: Available - device has SMART capability.
SMART support is: Enabled
AAM feature is:   Unavailable
APM feature is:   Unavailable
Rd look-ahead is: Enabled
Write cache is:   Enabled
ATA Security is:  Disabled, NOT FROZEN [SEC1]
Wt Cache Reorder: Unknown

=== START OF READ SMART DATA SECTION ===
SMART Status not supported: Incomplete response, ATA output registers missing
SMART overall-health self-assessment test result: PASSED
Warning: This result is based on an Attribute check.
See vendor-specific Attribute list for marginal Attributes.

General SMART Values:
Offline data collection status:  (0x82) Offline data collection activity
was completed without error.
Auto Offline Data Collection: Enabled.
Self-test execution status:  (   0) The previous self-test routine completed
without error or no self-test has ever
been run.
Total time to complete Offline
data collection:(0) seconds.
Offline data collection
capabilities:(0x7b) SMART execute Offline immediate.
Auto Offline data collection
on/off support.
Suspend Offline collection upon new
command.
Offline surface scan supported.
Self-test supported.
Conveyance Self-test supported.
Selective Self-test supported.
SMART capabilities:(0x0003) Saves SMART data before entering
power-saving mode.
Supports SMART auto save timer.
Error logging capability:(0x01) Error logging supported.
General Purpose Logging supported.
Short self-test routine
recommended polling time:(   1) minutes.
Extended self-test routine
recommended polling time:( 933) minutes.
Conveyance self-test routine
recommended polling time:(   2) minutes.
SCT capabilities:  (0x30b5) SCT Status supported.
SCT Feature Control supported.
SCT Data Table supported.

SMART Attributes Data Structure revision number: 10
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME  FLAGSVALUE WORST THRESH FAIL RAW_VALUE
  1 Raw_Read_Error_Rate POSR--   117   099   006-130131992
  3 Spin_Up_TimePO   092   090   000-0
  4 Start_Stop_Count-O--CK   099   099   020-1223
  5 Reallocated_Sector_Ct   PO--CK   100   100   010-0
  7 Seek_Error_Rate POSR--   077   060   030-4350073761
  9 Power_On_Hours  -O--CK   096   096   000-3515
 10 Spin_Retry_CountPO--C-   100   100   097-0
 12 Power_Cycle_Count   -O--CK   100   100   020-495
183 Runtime_Bad_Block   -O--CK   100   100   000-0
184 End-to-End_Error-O--CK   100   100   099-0
187 Reported_Uncorrect  -O--CK   100   100   000-0
188 Command_Timeout -O--CK   100   092   000-60130525206
189 High_Fly_Writes -O-RCK   100   100   000-0
190 Airflow_Temperature_Cel -O---K   067   034   045Past 33 (0 144 33 33 0)
191 G-Sense_Error_Rate  -O--CK   100   100   000-0
192 Power-Off_Retract_Count -O--CK   100   100   000-1642
193 Load_Cycle_Count-O--CK   099   099   000-3475
194 Temperature_Celsius -O---K   033   066   000-33 (0 13 0 0 0)
195 Hardware_ECC_Recovered  -O-RC-   117   099   000-130131992
197 Current_Pending_Sector  -O--C-   100   100   000-0
198 Offline_Uncorrectable   C-   100   100   000-0
199 UDMA_CRC_Error_Count-OSRCK   200   189   

Re: disk going bad? or fuser related issues? . . .

[Albretch Mueller]

On 10/9/19, Reco  wrote:
> Please post the results of "smartctl -A".
>
> Reco

 Here go the results for one of my drives (a Seagate Samsung 2.00 TB):

# smartctl --xall /dev/sdb
smartctl 6.6 2016-05-31 r4324 [x86_64-linux-4.9.0-6-amd64] (local build)
Copyright (C) 2002-16, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Model Family: Seagate Samsung SpinPoint M9T
Device Model: ST2000LM003 HN-M201RAD
Serial Number:M932A4G7001730
LU WWN Device Id: 0 00 0
Firmware Version: 2BE10001
User Capacity:2,000,398,934,016 bytes [2.00 TB]
Sector Sizes: 512 bytes logical, 4096 bytes physical
Rotation Rate:5400 rpm
Form Factor:  2.5 inches
Device is:In smartctl database [for details use: -P show]
ATA Version is:   ATA8-ACS T13/1699-D revision 6
SATA Version is:  SATA 3.0, 6.0 Gb/s (current: 6.0 Gb/s)
Local Time is:Mon Oct  7 02:42:12 2019 CEST
SMART support is: Available - device has SMART capability.
SMART support is: Enabled
AAM feature is:   Disabled
APM feature is:   Disabled
Rd look-ahead is: Enabled
Write cache is:   Enabled
ATA Security is:  Disabled, NOT FROZEN [SEC1]
Wt Cache Reorder: Enabled

=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED

General SMART Values:
Offline data collection status:  (0x00) Offline data collection activity
was never started.
Auto Offline Data Collection: Disabled.
Self-test execution status:  (   0) The previous self-test routine completed
without error or no self-test has ever
been run.
Total time to complete Offline
data collection:(23580) seconds.
Offline data collection
capabilities:(0x5b) SMART execute Offline immediate.
Auto Offline data collection
on/off support.
Suspend Offline collection upon new
command.
Offline surface scan supported.
Self-test supported.
No Conveyance Self-test supported.
Selective Self-test supported.
SMART capabilities:(0x0003) Saves SMART data before entering
power-saving mode.
Supports SMART auto save timer.
Error logging capability:(0x01) Error logging supported.
General Purpose Logging supported.
Short self-test routine
recommended polling time:(   1) minutes.
Extended self-test routine
recommended polling time:( 393) minutes.
SCT capabilities:  (0x003f) SCT Status supported.
SCT Error Recovery Control supported.
SCT Feature Control supported.
SCT Data Table supported.

SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME  FLAGSVALUE WORST THRESH FAIL RAW_VALUE
  1 Raw_Read_Error_Rate POSR-K   100   100   051-0
  2 Throughput_Performance  -OS--K   252   252   000-0
  3 Spin_Up_TimePO---K   088   086   025-3889
  4 Start_Stop_Count-O--CK   100   100   000-525
  5 Reallocated_Sector_Ct   PO--CK   252   252   010-0
  7 Seek_Error_Rate -OSR-K   252   252   051-0
  8 Seek_Time_Performance   --S--K   252   252   015-0
  9 Power_On_Hours  -O--CK   100   100   000-1796
 10 Spin_Retry_Count-O--CK   252   252   051-0
 12 Power_Cycle_Count   -O--CK   100   100   000-864
191 G-Sense_Error_Rate  -O---K   252   252   000-0
192 Power-Off_Retract_Count -O---K   252   252   000-0
194 Temperature_Celsius -O   064   057   000-23 (Min/Max 19/43)
195 Hardware_ECC_Recovered  -O-RCK   100   100   000-0
196 Reallocated_Event_Count -O--CK   252   252   000-0
197 Current_Pending_Sector  -O--CK   252   252   000-0
198 Offline_Uncorrectable   CK   252   252   000-0
199 UDMA_CRC_Error_Count-OS-CK   100   100   000-1
200 Multi_Zone_Error_Rate   -O-R-K   100   100   000-2
223 Load_Retry_Count-O--CK   100   100   000-1
225 Load_Cycle_Count-O--CK   098   098   000-23353
||_ K auto-keep
|__ C event count
___ R error rate
||| S speed/performance
||_ O updated online
|__ 

Re: AppImage

[rhkramer]

On Thursday, October 10, 2019 06:05:14 AM Jonathan Dowland wrote:
> To try to answer your question, the AppImage you are using is almost
> certainly built for the amd64 (aka "X86_64") architecture, rather than
> amd64 (aka "Aarch64"), which is what the Pi requires. (except, at the

--^  I'm assuming that (2nd) amd64 is a writo?  And should be ???

> moment, Raspbian on the Pi4 is in 32 bit mode, i.e., armhf, not arm64)

Re: AppImage

[Jonathan Dowland]

On Wed Oct 9, 2019 at 2:14 PM Donnie Wooton wrote:
> Is there a way to install a AppImage file on RasPi4 running Debian?

You almost certainly are not running Debian on your RasPi4, but 
Raspbian, which is something else entirely. You might get better help
contacting a Raspbian list.

To try to answer your question, the AppImage you are using is almost
certainly built for the amd64 (aka "X86_64") architecture, rather than
amd64 (aka "Aarch64"), which is what the Pi requires. (except, at the
moment, Raspbian on the Pi4 is in 32 bit mode, i.e., armhf, not arm64)

Customer Customization Support

[SHENZHEN LONGEN LIGHTING]

[1] Catalogue Request

Professional LED lights suppliers with more than 5 years experience.
Customer customization Support.
Provision of procurement serivices.

Adelina Li
SHENZHEN LONGEN LIGHTING CO.,LTD.
Mob(wechat):0086 18938048066  Tel:0755-85088066
A2 Building,Xinbaoji industrial park,Yintian,Xixiant Town,Bao'an 
district,Shenzhen.China

[2] View this email in your browser

You are receiving this email because of your relationship with SHENZHEN LONGEN 
LIGHTING. Please [3] reconfirmyour interest in receiving emails from us. If you 
do not wish to receive any more emails, you can [4] unsubscribe here.


 References:

1. mailto:380263...@qq.com
2. https://clt1072881.benchurl.com/c/v?e=EEDDA0=105EF1=0
3. https://clt1072881.benchurl.com/c/opt?e=EEDDA0=105EF1=0
4. https://clt1072881.benchurl.com/c/su?e=EEDDA0=105EF1=0

This message was sent to debian-user@lists.debian.org by 
sales1-adel...@longenled.com

You can modify/update your subscription via the link below.

Unsubscribe from all mailings
http://clt1072881.benchurl.com/c/su?e=EFDBE5=105EF1=2FCBFE53=fTHoM8aX4cmOiekgLiREPQODfNw3Y4%2FbUKEtWoQMMiA%3D=A0B1A88


Manage Subscription
http://clt1072881.benchurl.com/c/s?e=EFDBE5=105EF1=2FCBFE53=fTHoM8aX4cmOiekgLiREPQODfNw3Y4%2FbUKEtWoQMMiA%3D=A0B1A88


Forward Email
http://clt1072881.benchurl.com/c/f?e=EFDBE5=105EF1=2FCBFE53=fTHoM8aX4cmOiekgLiREPQODfNw3Y4%2FbUKEtWoQMMiA%3D=A0B1A88


Report Abuse
http://clt1072881.benchurl.com/Abuse?e=EFDBE5=105EF1=2FCBFE53=fTHoM8aX4cmOiekgLiREPQODfNw3Y4%2FbUKEtWoQMMiA%3D=A0B1A88


A2 Building,Xinbaoji industrial park,Yintian,Xixiant Town,Bao'an district, 
Shenzhen, Guangdong  1, China

Email Marketing
benchmarkemail.com
 [http://clt1072881.benchurl.com]



http://clt1072881.benchurl.com/c/opt?e=EFDBE5=105EF1=2FCBFE53=fTHoM8aX4cmOiekgLiREPQODfNw3Y4%2FbUKEtWoQMMiA%3D=A0B1A88


http://clt1072881.benchurl.com/c/su?e=EFDBE5=105EF1=2FCBFE53=fTHoM8aX4cmOiekgLiREPQODfNw3Y4%2FbUKEtWoQMMiA%3D=A0B1A88

Linux App Submit del 12 al 15 novembre a la Lleialtat santseca

[Àlex]

L'esdeveniment és gratuït però us heu de registrar a
https://events.linuxappsummit.org/


La graella de xerrades es va omplint a
https://linuxappsummit.org/schedule/


-- 
https://boycottdebconf20.org/
https://twitter.com/hashtag/BoycottDebian

Re: stranges choices of printers

[Brian]

On Wed 09 Oct 2019 at 12:59:14 +0200, Pierre Frenkiel wrote:

> hi,
> I discoverd today some strange behaviours of different softwares for
> the choice of printers.
> 
> "lpstat -a" gives:
>  HP_LaserJet_MFP_M227-M231 accepting requests since Thu 01 Aug 2019 09:00:53 
> AM CEST

This is a local print queue.
 
> printers seen on okular
>HP_LaserJet_MFP_M227-M231
>HP_LaserJet_MFP_M227sdn_BDD3AA_

The second one is due to possible buggy behaviour in cups-browsed.

> printers seen on evince or geeqie
>HP_LaserJet_MFP_M227-M231
>ljp   paused
> 
>the latter is displayed even when cupsd is stopped

The GTK print dialog uses CUPS only for enumerating local print queues.
ljp is due to probable buggy behaviour in the dialog.

-- 
Brian.

Re: Reemplazo de texto en una base de datos

[José Tomás Mateo Ruiz]

El 4/10/19 a las 23:14, Javier Barroso escribió:
> On Thu, Oct 3, 2019 at 11:47 PM Debia Linux  wrote:
>>
>> Lista:
>>
>> Buenas tardes, me encuentro con un dilema que no puedo resolver.
>>
>> Tengo una base de datos con NOMBRES, APELLIDOS, EDAD y CORREO y tiene
>> la estructura siguiente:
>>
>> JUAN ALBERTO|SANCHEZ MEDINA|32|j...@gmail.com|
>> ROBERTO| SANTOS RODRIGUEZ|52|robe...@gmail.com|
>>
>> y asi suman 100 nombres con apellidos y se van sumando 20 diariamente.
>>
>> ¿Como puedo separar los apellidos paternos de los maternos con una
>> barra vertical | sin tener que hacerlo uno por uno, siempre usando un
>> script en bash ademas de que diariamente se van añadiendo.
>>
>> Gracias
>>
> 
> Como ya te han comentado con los apellidos compuestos ... no te va a
> ser sencillo
> 
> Pero si quieres hacerlo con la típica línea , y los apellidos no son 
> compuestos:
> # sed -i.bak 's,\([^|]*\)| *\([^ ]*\) \([^ ]*\) *|,\1|\2|\3|,' fichero
> 
> Saludos
> 
> 
Que te parece utilizar SQLITE3:
instalas esta pequeña base de datos y utilizas este script en bas,
modificalo a tu gusto.

" Empezar

#!/bin/bash

clear
if [[ -z $( type -p sqlite3 ) ]]; then echo -e "REQUIRED: sqlite3 -- NOT
INSTALLED !";exit ;fi

database="/home/piloto/.phonebook.db"
 if [ -e "$database" ];then
 echo ""
 else
 echo " La base de datos no existe, crear nueva"
sqlite3 $database "create table phonebook (id INTEGER PRIMARY KEY,Nombre
TEXT,Apellido TEXT,Calle TEXT,Ciudad TEXT,Poblacion TEXT,CP
TEXT,telefono TEXT,Email TEXT, Notas);"
echo "Database created at $database"
 fi

# Check options given to the program and "do stuff".
case ${1} in

# oops--you didn't give me anything
"") echo "sqlite+bash Libreta de teléfonos"
echo ""
echo "Uso: ${0##*/} ";
echo "";
echo "  "
echo " Crear entrada"
echo "   $0 -c"
echo "  "
echo " Busca por apellido \"-a";
echo "   -a Smith";
echo "";
echo " Busca por teléfono";
echo "-t 515-555-";
echo ""
echo " Busca por email";
echo "   -em @";
echo ""
echo " Busca por nombre sin prefijo";
echo "   $0 dave";
echo "  "
echo " Editar entrada"
echo "   $0 -e"
echo ""
echo ""
;;

# Create an entry
"-c")
clear
echo " Insertar datos en la Agenda"
echo "--"
echo "FORMAT: Nombre, Apellido, Calle, Ciudad, Poblacion, CP,teléfono,
Email, Notas"
echo " "

#Insert data into database
read -p "   Nombre: " Nombre
read -p " Apellido: " Apellido
read -p "Calle: " Calle
read -p "   Ciudad: " Ciudad
read -p "Poblacion: " Poblacion
read -p "   CP: " CP
read -p " Teléfono: " telefono
read -p "Email: " Email
read -p "Notas: " Notas

sqlite3 $database "insert into phonebook
(Nombre,Apellido,Calle,Ciudad,Poblacion,CP,telefono,Email,Notas) values
('$Nombre','$Apellido','$Calle','$Ciudad','$Poblacion','$CP','$telefono','$Email','$Notas');"

#clear
echo ""
echo "Datos entrados en la agenda"
;;


# Edit an entry
"-e")
clear
read -p  "Enter id# to edit: " idnum
echo ""

sqlite3 $database<
/|\José Tomás Mateo Ruiz
\_/_50550 Aragón España
---
A quien has de acallar, has de halagar.

Re: dico anglais/français et françcais/anglais sans connexion internet ?

[basile]

On Thursday, October 10, 2019 10:44 CEST, bas...@starynkevitch.net 
 wrote:
  
On Thursday, October 10, 2019 10:14 CEST, machin  wrote:
 Bonjour à tous !

Comment avoir sous buster un dico anglais/français et françcais/anglais sans
connexion internet ?
Je dispose des 3 premiers dvds.
Faut-il installer un paquet puis télécharger la bibliothèque de mots ?
Merci par avance pour l'aide.
A plus.

La question n'est pas claire du tout. Acceptes tu d'utiliser Internet pour 
l'installation. Acceptes tu de payer pour le dictionnaire? (ne pas confondre 
libre et gratuit).

On peut acheter des dictionnaires anglais/français numériques exploitables sous 
Debian. Par exemple au format PDF ou EPUB ou HTML.

On peut s'abonner à un service payant de dictionnaire en ligne, et Debian saura 
l'utiliser

Peut-être cherches tu un dictionnaire numérique dans un format ouvert et sous 
licence libre. Là c'est plus compliqué.

(c'est le débat récurrent ici: les fournisseurs de contenus libres ne sont pas 
et ne devraient pas être des esclaves; leur travail mérite un salaire ou au 
moins une rémunération).
 
 Une solution en pratique: utiliser un émulateur Android (c'est gratuit et ça 
tourne sous Linux), puis acheter (par carte bleue) l'application Android qui 
contient un dictionnaire off-line, et la faire tourner dans l'émulateur. 
https://frenchtogether.com/french-dictionary-app/

La solution qui a ma préférence, c'est le dictionnaire papier que je mets dans 
mon cartable avec mon ordinateur portable. Ca me coûte un prix très 
raisonnable, Ca marche sans Internet. C'est résilient aux pannes d'ordinateur 
(matériel ou logiciel), et c'est assez léger (bien plus léger qu'un 
ordinateur). Et c'est utilisable même sans aucun ordinateur (mais avec une 
paire de lunettes, la même qui me sert avec mon ordinateur).

Mais je suis vieux (60 ans) au point d'avoir appris à utiliser les 
dictionnaires sous forme papier. Si, si, ... le livre papier a existé!

--
Basile Starynkevitch    http://starynkevitch.net/Basile/

 

Re: dico anglais/français et françcais/anglais sans connexion internet ?

[fab]

salut,


Comment avoir sous buster un dico anglais/français et françcais/anglais sans > 
connexion internet ?> Je dispose des 3 premiers dvds.

Pour bien comprendre, c'est quoi tes 3 premiers DVD ?

f.

Re: dico anglais/français et françcais/anglais sans connexion internet ?

[basile]

On Thursday, October 10, 2019 10:14 CEST, machin  wrote:
 Bonjour à tous !

Comment avoir sous buster un dico anglais/français et françcais/anglais sans
connexion internet ?
Je dispose des 3 premiers dvds.
Faut-il installer un paquet puis télécharger la bibliothèque de mots ?
Merci par avance pour l'aide.
A plus.

La question n'est pas claire du tout. Acceptes tu d'utiliser Internet pour 
l'installation. Acceptes tu de payer pour le dictionnaire? (ne pas confondre 
libre et gratuit).

On peut acheter des dictionnaires anglais/français numériques exploitables sous 
Debian. Par exemple au format PDF ou EPUB ou HTML.

On peut s'abonner à un service payant de dictionnaire en ligne, et Debian saura 
l'utiliser

Peut-être cherches tu un dictionnaire numérique dans un format ouvert et sous 
licence libre. Là c'est plus compliqué.

(c'est le débat récurrent ici: les fournisseurs de contenus libres ne sont pas 
et ne devraient pas être des esclaves; leur travail mérite un salaire ou au 
moins une rémunération).
 

dico anglais/français et françcais/anglais sans connexion internet ?

[machin]

Bonjour à tous !

Comment avoir sous buster un dico anglais/français et françcais/anglais sans
connexion internet ?
Je dispose des 3 premiers dvds.
Faut-il installer un paquet puis télécharger la bibliothèque de mots ?
Merci par avance pour l'aide.
A plus.




--
Sent from: http://debian.2.n7.nabble.com/debian-user-french-f1152225.html

Re: AppImage

[Reco]

Hi.

Please post your reply to the list next time, and please do not top
post.

On Wed, Oct 09, 2019 at 03:44:14PM -0500, Donnie Wooton wrote:
> Sorry, I am using raspbian.  You are correct.
> 
> I am trying to get xlights on my raspberry pi.
> 
> https://www.adebenham.com/xlights-linux/

And on that page it lists x86_64 appimages only.
So, either ask the author to build armhf xlights, or build it from the
source by yourself (a link to the sources in on that page too).

Reco

Re: Problems with Buster and Bluetooth

[deloptes]

David Parker wrote:

> # dbus-send --print-reply --system --dest=org.bluez
> /org/bluez/hci0/dev_9B_1F_48_B8_55_F6 org.freedesktop.DBus.Properties.Get
> string:org.bluez.Device1 string:TxPower

This is a property of the device. I am not sure if it is visible onlywhen
connected. I am sure I have seen it in dbus, but could be I am wrong or it
was the network. In any case the property is in the interface
specification, but I do not know why it is not visible

> Error org.freedesktop.DBus.Error.InvalidArgs: No such property 'TxPower'
> 
> The strings I have available are:
> 
> Address
> AddressType
> Name
> Alias
> Class
> Icon
> Paired
> Trusted
> Blocked
> LegacyPairing
> Connected
> UUIDs
> Adapter
> ServicesResolved
> 
> Anything else I should check?

What about the PA latency? For example I google for "fine tuning pulseaudio"
https://forums.linuxmint.com/viewtopic.php?t=44862
https://wiki.archlinux.org/index.php/PulseAudio

someone also susggest to try without PA
http://shellscreen.blogspot.com/2015/01/tips-to-fix-sound-server-issues-on.html

regards