Re: Samba issues

2004-10-04 Thread Andrew Pritchard
I had very similar symptoms. The solution I found was to add:
use sendfile = no
to your global section.
Andrew
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Re: Samba upgrade to 3.06 is causing problems

2004-09-08 Thread Andrew Pritchard
I'm getting the same problems as the original author.
Whilst we are investigating the problem/waiting for the next bug release 
- how do I go back a step to the previous version of samba?

Regards
Andrew
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re:[SOLVED - for me at least] Samba upgrade to 3.06 is causing problems

2004-09-08 Thread Andrew Pritchard
Andrew Pritchard wrote:
I'm getting the same problems as the original author.
Whilst we are investigating the problem/waiting for the next bug release 
- how do I go back a step to the previous version of samba?
I've just been looking at the Samba website for the solution:
http://lists.samba.org/archive/samba/2004-September/091924.html
In essence try adding:
use sendfile = no
to your global section of your smb.conf
Worked for me - your mileage may vary.
Regards,
Andrew
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: run command as root within script

2004-01-07 Thread Andrew Pritchard
 Is there a way within a bash script to temporarily
 su to the root user, then run some commands,
 then go back to the original user?

Yes - learn to use sudo

From the man page:

DESCRIPTION
   sudo allows a permitted user to execute a command as the superuser or
   another user, as specified in the sudoers file.

So for example you might have as part of your nightly maintance:

sudo apt-get update ; sudo apt-get upgrade -d

Put the script in your crontab (as opposed to roots crontab), and every
night your machine will connect to the net, update the apt cache, check to
see if you need any updates and download them ready for your approval and
installation.

 Or can you temporarily (within a script), assign
 the current user to have more rights, then take
 away those rights?

That's about as temporary as you're gonna get.

 bash scripting is fairly new to me.

 Thanks,
 -Rick

Good luck



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



RE: USB watches [Currently a work in progress, but mostly working]

2003-12-29 Thread Andrew Pritchard
  Andrew Pritchard wrote:
  I was given a rather funky Xmas present - a USB flashdrive/watch
  (http://www.memixdirect.com) which says it's bootable. It also claims to
be
  Linux 2.4 compatible, though I've not yet tried connecting it to a Linux
  box.

 At 256 mb, that's big enough to include a full debian installation on
 the watch. You should be able to fit debian and maybe X and some
 personal files (gpg key?) on there.

Unfortunately it's only the 128mb version. Still far larger than I will
probably need. Would have been nice to have the USB 2.0 interface though.

 Another option is that debian's next-generation installation system can
 use such a USB drive as install media instead of a CDROM. You can then
 boot many computers from your watch, and do a debian install on them.
 This would eat about 128 MB and could be made to cooexist with other
 uses of the watch with some work; see
 http://www.debian.org/devel/debian-installer/ for details.

I don't need to install debian, just access the files on the watch whilst on
a machine who's only OS doesn't support USB - let alone USB flash drives.

  I'd also like to create a bootdisk, which has a Linux kernel on it as my
NT
  box at work won't talk to anything USB (gaahh we hatee NT! *sorry -
been
  watching too much LotR*). Specifically so it can talk to the NTFS
partition
  on my machine at work. Alternatively I'll repartition the machine and
create
  a FAT partition so Linux can talk to that. The machine at work isn't new
  enough to be able to boot from a USB device :(
 
  Has anyone tried either/both of these? Can anyone give me some pointers
  about where to start with either of these projects?

 Joey Hess said:

 The debian-installer project includes a boot floppy which has the
 necessary USB drivers. You boot from the floppy, and it will find a USB
 device with an initrd.gz on it, then mount the initrd and chroot into
 it, and run its init. While this is intended to boot d-i in
 circumstances like you describe, there's no reason you could not build
 your own initrd.gz with anything you like in it and boot it this way.

Thanks Joey - I was dreading trying to create a disk.

I've mangled the floppy-image's initrd.gz so that it now starts the
rudimentry shell (ash I think), and mounts the usb partition on /usb.

How can I get the system to default to a UK keyboard when I'm booting like
this?

How can I get bash into the initrd.gz?

How can I get it to support NTFS natively, so I don't have to have a 128mb
partition on my work machine? (I know NTFS read/write is a bit dodge, but
it's not going to be doing anything to the system volume, and I can loose
what's on the drive without too much worry)

And in the process learnt some more things about Linux, at a lower level
than before. Which is definitely a good thing. The new installer looks
really cool - keep up the good work guys and gals.

  Hoping you all had a Merry Christmas, and going to have a happy new
year!

 No toys that fun (and I don't like wearing a watch).. Hope you have fun
 with it!

Certainly intend to. Means I can now carry albums of mp3's into work. And I
can access my college work from my usb watch, at work.

Cheers,

Andrew



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: USB watches

2003-12-28 Thread Andrew Pritchard
 On Sat, 27 Dec 2003, Andrew Pritchard wrote:

 I was given a rather funky Xmas present - a USB flashdrive/watch
 (http://www.memixdirect.com) which says it's bootable. It also claims to
be
 Linux 2.4 compatible, though I've not yet tried connecting it to a Linux
 box.

 The programs which come with the watch allow you to set the watch as
 bootable, using a Micro$oft OS. I was wondering if it were possible to
set
 it up as a Linux bootable device.

 I'd also like to create a bootdisk, which has a Linux kernel on it as my
NT
 box at work won't talk to anything USB (gaahh we hatee NT! *sorry -
been
 watching too much LotR*). Specifically so it can talk to the NTFS
partition
 on my machine at work. Alternatively I'll repartition the machine and
create
 a FAT partition so Linux can talk to that. The machine at work isn't new
 enough to be able to boot from a USB device :(

Although not a strict Debian solution, Knoppix is a debian-based
bootable-CD that supports putting your home directory on a USB
flash drive.  Since you are unable to boot from USB directly, you'll
need either a floppy or CD to access it.

If you don't like some of the defaults of Knoppix (such as the KDE
desktop by default), there are other 'live-CD' distros with different
defaults.

My work place have decided (as a security precaution) to remove all the CD
drives from the work place machines. Hence I need a boot disk.

I assume it would be possible to create a boot disk, which then mounts the
USB device as a root partition. There is a bootdisk howto - I'll probably
start looking at that.

Andrew




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



USB watches

2003-12-27 Thread Andrew Pritchard
I was given a rather funky Xmas present - a USB flashdrive/watch
(http://www.memixdirect.com) which says it's bootable. It also claims to be
Linux 2.4 compatible, though I've not yet tried connecting it to a Linux
box.

The programs which come with the watch allow you to set the watch as
bootable, using a Micro$oft OS. I was wondering if it were possible to set
it up as a Linux bootable device.

I'd also like to create a bootdisk, which has a Linux kernel on it as my NT
box at work won't talk to anything USB (gaahh we hatee NT! *sorry - been
watching too much LotR*). Specifically so it can talk to the NTFS partition
on my machine at work. Alternatively I'll repartition the machine and create
a FAT partition so Linux can talk to that. The machine at work isn't new
enough to be able to boot from a USB device :(

Has anyone tried either/both of these? Can anyone give me some pointers
about where to start with either of these projects?

Hoping you all had a Merry Christmas, and going to have a happy new year!

Cheers,

Andrew



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Why should non-root users have a password?

2003-12-07 Thread Andrew Pritchard
 If I have a firewall, and I'm the only person who uses my computer, do I
 really have to have a password on my non-root account?

 I know the answer is yes but -- why?  They can't do anything to my
 machine anyway, except use it.  And due to the firewall that never
 happens anyway.

There is no such thing as a totally secure machine - including your
firewall. Anyone who tells you otherwise is trying to sell you something. So
the question you need to be asking yourself is:

If someone cracks my firewall - what could they (mis)use my computer for?
Your firewall presumably allows outbound traffic so:

How much spam could they send before your ISP detects it and shuts you down?
How many virus' do you want them to send?

Do I need to go on?



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Is my hard drive dying?

2003-03-25 Thread Andrew Pritchard
  I've been looking through the logcheck on one of my machines, and I've
seen
  a lot of these types of messages:
 
  Mar 24 17:14:51 orion kernel: hda: dma_intr: status=0x51 { DriveReady
  SeekComplete Error }
  Mar 24 17:14:51 orion kernel: hda: dma_intr: error=0x40 {
  UncorrectableError }, LBAsect=3994439, sector=63232
  Mar 24 17:14:51 orion kernel: end_request: I/O error, dev 03:01 (hda),
  sector 63232
 
  Does this mean my drive is dying? I've not had any problems with the
machine
  till now.

 not necessarily...

 === What did you CHANGE ??

I don't think I've changed anything :(

 -- if you changed the kernel ...  make sure yur kernel supports the
motherboard ( ide chipset )

Nope, been running with this kernel for months.

 -- did you add a new disk somewhere ??
 - use only one ide drive per cable if you're having these problems

Nope - and the drive I'm using is rather old :( It's a rather old machine.

 -- check your ide cables for kinks and corners and places where it touches
metal

I haven't opened the box recently, but I'll check anyway.

 -- is it ext2 or ext3 ??
 - does (e2fsck) ext2 come out clean

ext2 and the first time I ran e2fsck it didn't come out clean. The
subsequent runs did.

 -- make sure your IDE cables is secure and is 80 conductor ( not
fatter looking 40-conductor cables )

See above

 -- if the disks has been running for a while..
 - what changed

Not a lot. The machine doesn't get rebooted very often

 - when you make backups ... use a DIFFERENT media for backups
 when you already suspect a bad disk... as your good backup
 will be overwritten by bad data..

Because the machine isn't very busy it doesn't get backed up very often,
but I'll have a look at the the backups too.

 - when you restore the data, you might be restoring the
 original bad-disk-symptom vs the disk problem itself

Not much data to restore, only a small amount of data from a MySQL
database, which is emailed to me every day.

I was looking for a reason (other than the sheer hell of it) for rebuilding
this box - I guess I just found it!

Cheers everyone,


Andrew



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Is my hard drive dying?

2003-03-24 Thread Andrew Pritchard
I've been looking through the logcheck on one of my machines, and I've seen
a lot of these types of messages:

Mar 24 17:14:51 orion kernel: hda: dma_intr: status=0x51 { DriveReady
SeekComplete Error }
Mar 24 17:14:51 orion kernel: hda: dma_intr: error=0x40 {
UncorrectableError }, LBAsect=3994439, sector=63232
Mar 24 17:14:51 orion kernel: end_request: I/O error, dev 03:01 (hda),
sector 63232

Does this mean my drive is dying? I've not had any problems with the machine
till now.

A



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



MySQL 4

2003-03-18 Thread Andrew Pritchard
With the recent release of MySQL 4, I was wondering when (if ever) Debian
was going to be incorporating it into at least the 'testing' tree (let alone
the stable tree).

TIA,

A



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: I need a little help

2003-03-17 Thread Andrew Pritchard
 Greetings to all:

 I was wondering how I can configure apache 1.3 to not allow visitors to
view
 the source code of the page when they click on View -Source

 Is there any option in apache to do that?, any hint will be appretiated.

 Didier.

In a word - no!

Why would you want to? The whole point of web pages is that people can view
them!

Andrew



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Spam filter reviews?

2003-03-17 Thread Andrew Pritchard
   Anyone know of any spam filter reviews?

   I went from junkfilter to spamfilter and I'm currently using
   spamassassin. But for some reason, I've gone from 1 or 2 messages in
   my +inbox to day to dozens. Are there other filters that are more
   state of the art? Can anyone compare spamassassin with spamprobe?

I installed SpamAssassin (testing) last week and went away for the weekend.
I usually get 20-30 spams over the weekend in my Inbox. I came home from an
extended weekend away - not one spam in my Inbox.

I've been using Vipul's Razor for a while but it's no where near as
effective as
Spam Assassin.

A



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Webadmin

2003-02-25 Thread Andrew Pritchard
 Can someone please tell me if Webadmin is available in Debian (woody).  

Do you mean webmin? In which case - yes:

orion:~# apt-cache show webmin
Package: webmin
Priority: optional
Section: admin
Installed-Size: 3432
Maintainer: Jaldhar H. Vyas [EMAIL PROTECTED]
Architecture: all
Version: 0.94-7
Replaces: webmin-ssl
Provides: webmin-ssl
Depends: perl, debconf, libauthen-pam-perl, libnet-ssleay-perl
Recommends: webmin-core
Conflicts: webmin-ssl, webmin-cpan ( 0.94-6)
Filename: pool/main/w/webmin/webmin_0.94-7_all.deb
Size: 508772
MD5sum: 9a6607718a4df8c0938e3db8b2f5c334
Description: Web-based administration toolkit
 Webmin is a web-based interface for system administration for Unix. Using
 any browser that supports tables and forms (and Java for the File Manager
 module), you can setup user accounts, Apache, DNS, file sharing and so on.

You will probably also want to install the webmin modules:

orion:~# apt-cache search webmin-
webmin - Web-based administration toolkit
webmin-apache - apache control module for webmin
webmin-bind8 - bind 8+ control module for webmin
webmin-burner - CD burning module for webmin
webmin-cluster-software - cluster software control module for webmin
webmin-cluster-useradmin - cluster user control module for webmin
webmin-core - core modules for webmin
webmin-cpan - CPAN module for webmin
webmin-dhcpd - dhcpd control module for webmin
webmin-exports - NFS exports control module for webmin
webmin-fetchmail - fetchmail mail retrieval module for webmin
webmin-grub - grub control module for webmin
webmin-heartbeat - heartbeat monitor control module for webmin
webmin-inetd - inetd control module for webmin
webmin-jabber - jabber server control module for webmin
webmin-lpadmin - printer control module for webmin
webmin-mon - mon control module for webmin
webmin-mysql - mysql-server control module for webmin
webmin-nis - NIS clients/servers control module for webmin
webmin-postfix - postfix control module for webmin
webmin-postgresql - postgresql control module for webmin
webmin-ppp - PPP configuration module for webmin
webmin-qmailadmin - qmail control module for webmin
webmin-quota - disk quota control module for webmin
webmin-raid - raid control module for webmin
webmin-samba - samba control module for webmin
webmin-sendmail - sendmail control module for webmin
webmin-software - software packages control module for webmin
webmin-squid - squid control module for webmin
webmin-sshd - SSH server control module for webmin
webmin-status - server and system status control module for webmin
webmin-stunnel - stunnel control module for webmin
webmin-wuftpd - wu-ftpd control module for webmin
webmin-xinetd - xinetd control module for webmin

HTH

Andrew


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



HOW DO I: Copy the package list from one machine, and install it onanother machine?

2003-02-22 Thread Andrew Pritchard
I've got one debian box, and I want to duplicate the package list onto
another machine - how do I go about doing this?

I've done a dpkg -l to get a list of files from the first machine. It's
got a whole load of extra information (package version no. etc) which I've
filtered out. How can I get apt to recognise the contents of the file as
being a list of packages to install? Is there a better tool for the job?

TIA,

Andrew




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Access denied on imapd - but not ftp or ssh is allowed

2003-02-11 Thread Andrew Pritchard
The problem I've got is on a Debian 3.0 r1 (stable) box, where I can't
collect my imap mail.

Looking in /var/log/auth.log I can see a line:
Feb 11 13:28:44 orion imapd[1979]: Login disabled user=andrew auth=andrew
host=MyHostname [MyIP]

Why is my login disabled and how can I enable it?
I can ssh in, and I can ftp in - so my account isn't locked or disabled.
Both ftp and imapd are controlled by xinetd, and there aren't any special
config changes to either the ftp or imap daemons.

According to dpkg -l | grep imap, I'm using:

ii  uw-imapd   2002b.debian-4 remote mail folder access server

I've searched the 'net and the evidence points to misconfigured
authentication mechanism.

Has anyone else come across this problem - and how did they fix it

TIA,

Andrew



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Limiting SU

2002-12-31 Thread Andrew Pritchard
Is there a way of limiting who and SU to root?

TIA

Andrew


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Limiting SU

2002-12-31 Thread Andrew Pritchard
  Is there a way of limiting who and SU to root?
 

 don't tell them the root password?

 iain

I can just see some jokers trying to guess the root password. I realise this
will come out in the logs, but I don't want them even able to try.

Andrew



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: apt-get automated

2002-12-11 Thread Andrew Pritchard
This is quite simple - I do it myself:

You have one line in your crontab like this:

5 1 * * * /usr/bin/apt-get update ; /usr/bin/apt-get -d -y upgrade

-d is better because it will download the file, but not upgrade. -y is
needed so that it will say 'yes' to downloading the files. That way when it
runs at 5 past 1 in the morning, it will be ready for you to look at when
you sit down at your desk first thing in the morning :)

HTH

Andrew

- Original Message -
From: Niclas Söderlund [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, December 11, 2002 2:29 PM
Subject: apt-get automated


Hiya folks,

any tips on how to have apt-get every evening at a fixed time via cron, do
an update (easy) and then a simulated upgrade/dist-upgrade and then mail it
to root?

I.e I want something telling me its time to do an upgrade of some packages,
but dont want it to be run automatically (dangerous, and sometimes .conf
files is changed and needs see to on site). I ONLY want the mail if there
ARE any upgrades waiting, otherwise not.

Any tips appreciated.

- Niclas



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Ad removing proxies

2002-09-19 Thread Andrew Pritchard

I've decided that I'm bored of waiting for the latest and greatest ad to
come down doubleclick's apparently slow link. So I've decided to resolve
this problem with a technological solution. I've been looking at proxies,
in the debian testing branch:

filterproxy - A filtering proxy, which can among other things remove ads.
privoxy - Privacy enhancing HTTP Proxy
wwwoffle - World Wide Web OFFline Explorer
muffin - A personal and extensible Web proxy

Are the 4 that seem to fit the bill. What are people's
impressions/evaluations of these? Is there a better one I've missed?

wwwoffle, but with little success. Is someone using wwwoffle who can show
me part of the config file so I can see where I'm going wrong. I only have
a small site - 2 or 3 people at most. Have people found scaling these a
problem?

Cheers,

Andrew


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: running ntpdate as user

2002-09-18 Thread Andrew Pritchard

  Anyone know what I need to change in order to run ntpdate as a user
  without using su sudo ...?

 Without looking I assume that changing the time is a root privilege
 operation.  Otherwise anyone could change the time and play games with
 the system.  Therefore what you would have to change to allow non-root
 to do this would be the code in the kernel which makes that a privilege
 operation.

 Bob

I think what Bob is trying to say is:

Why would you want to compromise the security of your system in this way?

My preference has to be to run it with sudo. If you are worried about the
'annoyance' of having to enter a password (perhaps it's running from a non
interactive script) you can configure sudo to not need a password for that
particular operation.

Andrew


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Error in my syslog file

2002-06-26 Thread Andrew Pritchard
I've noticed a repeating error in my syslog:

Jun 25 14:55:58 thebox named[195]: sysquery: findns error (NXDOMAIN) on
thebox.192.in-addr.arpa?

named is running on thebox. What is NXDOMAIN and how can I fix this
problem. It's a woody box running the latest woody release of bind.

TIA,

Andrew

Whether you think you can,
Or whether you think you can't,
You are right


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Centralized /etc/passwd ?

2002-06-26 Thread Andrew Pritchard
On Tue, 25 Jun 2002, Hubert Chan wrote:

  Paladin == Paladin  [EMAIL PROTECTED] writes:

 [...]

 Paladin can the root account be centralized too?

 I don't know if it can or not, but it is probably not a good idea.
 Consider what happens if your LDAP server goes down for some reason.  So
 you say to yourself, OK, I'll just log in as root, and  Doh!  Can't
 log in because the LDAP server is down.

Not to mention the security implications. Imagine one of someone finds out
the root password. Suddenly all your machines are compromised. I have 3
machines at home up and running 24/7 and the root password is different on
all of them.

Andrew

Whether you think you can,
Or whether you think you can't,
You are right


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Odd entry in my log files

2002-06-20 Thread Andrew Pritchard
I've got check log running on my woody box. The box is running an internal
only DNS server behind a firewall that should be denying access to the
outside world. 'checklog' picked out a couple of 'unusual' entries which
I've not seen before in my logs:

Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'ns0.wossname.org.uk') from [213.212.70.59].53
Jun 19 11:56:13 thebox named[202]: invalid RR type 'A6' in additional
section (name = 'wossname.org.uk') from [213.212.70.59].53

I checked 213.212.70.59:

[EMAIL PROTECTED]:~$ host 213.212.70.59
Name: ns1.caladan.net.uk
Address: 213.212.70.59

caladan.net.uk appears to be a co-location outfit based in Manchester UK.
wossname.org.uk appears to be someone's hope pages. Until I saw these
entries I'd never heard of wossname.org.uk or caladan.net.uk.

What is happening here? And is it something I should be worried about?
There doesn't appear to be anything different about my bind config on
thebox. I've not seen anything else in the logs since seeing these
entries.

Cheers,

Andrew

Whether you think you can,
Or whether you think you can't
You are right!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Odd entry in my log files

2002-06-20 Thread Andrew Pritchard


On Thu, 20 Jun 2002, martin f krafft wrote:
 also sprach Andrew Pritchard [EMAIL PROTECTED] [2002.06.20.1033 +0200]:
  What is happening here? And is it something I should be worried about?
  There doesn't appear to be anything different about my bind config on
  thebox. I've not seen anything else in the logs since seeing these
  entries.

 the zone has IPv6 entries in it, which your nameserver apparently
 can't handle. nothing to worry about though.

Glad there is nothing for me to worry about.

Ok - so why am I seeing them now? Just trying to fathom the inner workings
of bind so I don't panic again next time I see similar entries. Why is my
DNS server interacting in this way?





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: PHP4 setup problems [SOLVED - kinda]

2002-05-29 Thread Andrew Pritchard
  It means that the kernel didn't know how to execute that file. Perhaps
  you need '#! /usr/bin/php4' as the first line of the PHP script?
 
 Or add the following lines to /etc/apache/httpd.conf, preferably between
 IfModule mod_mime.c and its ending tag
  
 AddType application/x-httpd-php .php
 AddType application/x-httpd-php-source .phps

I noticed in the error log file that it was having a problem loading the magic 
file. The http.conf file was pointing to share/magic, which apache resolves to 
mean /etc/apache/share/magic. I ran a 'find' for the magic file:

# find / -name magic
/usr/share/misc/magic
/etc/magic

So I've pointed apache to /usr/share/misc/magic. PHP now works, but on 
restarting apache I get a long list of invalid entries from the magic file 
(examples):

[error] mod_mime_magic: offset 3string  $SuiteId invalid
[error] mod_mime_magic: type 3  string  $SuiteId invalid
[error] mod_mime_magic: offset 1string  \n %s 
invalid
[error] mod_mime_magic: type 1  string  \n %s 
invalid

So I guess my question now is:

Am I using the right magic file?
And if not, which magic file should I be using?
/etc/magic is empty - should I be using that one?

Thanks for those who helped me last time,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Watch TV Card over remote X?

2002-05-28 Thread Andrew Pritchard
  I've got a small home LAN. One box has an ATI All-In-Wonder card. I can 
  watch TV on it no problem with xawtv. I can ssh -X firstbox.ip.address 
  into it and run xterm remotely, but when I try to run xawtv it complains 
  that there's no such device as /dev/video0 and no video grabber device
  available.
  
  Is it possible to do what I want to do? If so, what am I doing wrong? If 
  it's not possible, that's okay; I just thought it'd be a really neat 
  trick with lots of Can you do this with Windows gloat value.
  
  Thanks!
  
  Kent
 You can do it by logging in with a full X session using XDMCP.
 I've used hummingbird exceed on Windows to log in to my Linux box
 and start xawtv. It's not worth it though. The network just doesn't
 have enough bandwidth to send 30 frames per second at any size in 
 realtime. I have 100Mbit Ethernet, and I probably only got 5-10
 fps.
 
 One thing I'm curious about though: Can you forward sound through an
 X session? I think W-s XP can send the sound through their cheap-ass
 new, incredible remote desktop, and I hate seeing them do something 
 we can't in an area where they're otherwise completely outclassed.
 --
 Nick

Has anyone succeeded in doing this with vls/vlc (VideoLAN Server/Client)? It 
claims to be able to do just this. I've taken a brief look at it, but I don't 
have time to devote to it.

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



PHP4 setup problems

2002-05-28 Thread Andrew Pritchard
I've been trying to setup PHP4 on my Woody box at home. I've installed the php4 
package, and then went through the apache config and uncommented the php shared 
object libraries and added the .php document handler. I stopped and then 
started apache to make sure I've got the .so's loaded.

However when I try to go to the test script I wrote, it comes up with a 500 
error message. Looking in the error log I notice this:

(8)Exec format error: exec of /usr/lib/cgi-bin/hello.php failed

What is an Exec Format error?

I've tried running the script from the command line:

mypc $ php4 /usr/lib/cgi-bin/hello.php
X-Powered-By: PHP/4.1.2
Content-type: text/html

html
head
titlePHP Test/title
/head
body
Hello Worldp/body
/html

So I don't believe it to be the script - it's a very simple one I got from the 
php tutorial. I'm sure it's the php setup within Apache, but everything there 
seems to be OK.

Any suggestions, please let me know.

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: PHP4 setup problems

2002-05-28 Thread Andrew Pritchard
 You're right, it is very simple.
 
 Move the script to /var/www or where your other content is, then access
 it via your web server.
 
 http://localhost/hello.php
 
 I wouldn't be surprised if we all forgot to mention that in the
 documentation!

Hmmm - now it comes up with a 403: Permission denied. And from the error.log:
 [error] [client 127.0.0.1] Options ExecCGI is off in this 
directory: /var/www/hello.php

Not surprising really - I thought that was the point of having your 
executable/cgi's in /usr/lib/cgi-bin

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: PHP4 setup problems

2002-05-28 Thread Andrew Pritchard
Quoting Colin Watson [EMAIL PROTECTED]:
 On Tue, May 28, 2002 at 01:12:07PM +0100, Andrew Pritchard wrote:
  However when I try to go to the test script I wrote, it comes up with
  a 500 error message. Looking in the error log I notice this:
  
  (8)Exec format error: exec of /usr/lib/cgi-bin/hello.php failed
  
  What is an Exec Format error?
 
 It means that the kernel didn't know how to execute that file. Perhaps
 you need '#! /usr/bin/php4' as the first line of the PHP script?

I don't think so - it's supposed to be a PHP enabled webpage. The PHP is 
embedded into the HTML, so you shouldn't need to do things like that.

Andrew


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Auto-ripping music CDs

2002-05-20 Thread Andrew Pritchard
I've been using the rather excellent abcde cd ripping software for some time in 
one of my servers at home. I've got it setup now so that it hardly ever 
requires any intervention from a user - apart from logging in and starting the 
script off and that's a step I'd like to get round if I can.

I was wondering how I could get the machine to:

1) Watch for a CD being put into the machine
(some kind of automounting daemon I'm guessing)
2) If it's a music CD then run abcde, and eject the cd when it's done.
(Perhaps running abcde, and when it can't grab music from the data cd then go 
onto item 3)
3) Otherwise mount the cd according to /etc/fstab

Has anyone done this, or can they suggest a possible solution. It's a woody 
box, running a 2.4.18 kernel.

Thanks in advance,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Mail server

2002-05-07 Thread Andrew Pritchard
  - An smtp server to receive mail for serveral virtual hosts.

Most smtp servers will allow you to do this. Exim is the default SMTP server. I 
don't have any experience on the above, so I comment further.

 The mail users should not be the same as the login users (eg. no entries in 
 /etc/passwd)

I suggest you read the Mail Administrators HOWTO. Specifically section 3:
http://www.tldp.org/HOWTO/Mail-Administrator-HOWTO-3.html

Which gives you a very good overview of how email works. And Section 5:
http://www.tldp.org/HOWTO/Mail-Administrator-HOWTO-5.html

Will give you some more specific details on the different SMTP servers 
available.

  - A POP3 server that will serve the users described above, and supports ssl

Does it *have* to be POP3 - IMAP can also do SSL.

Assuming Woody (on the basis that by the time you have all the answers you are 
looking for, Woody will have become stable) I get the following that would do 
what you are talking about. A quick apt-cache and a grep reveals:

courier-pop-ssl - POP3 daemon with SSL, PAM and Maildir support
ipopd-ssl - POP2 and POP3 servers from UW

Failing that, you could look into using stunnel to put the POP3/IMAP4 data 
through an SSL tunnel.

You might also investigate:

vchkpw - Virtual POP-domains and users for qmail

Though I don't know anything about it - it just caught my eye as I was looking 
through the list of available packages.

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: dns web configurator

2002-04-25 Thread Andrew Pritchard
 I'm looking for a web dns configurator.
 
   François

I assume you mean you are looking for a web front end for DNS servers on 
Debian. In which case I can highly recommend Webmin. Which is useful for LOTS 
of things, not just configuring your DNS servers.

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



broken apt upgrade

2002-04-18 Thread Andrew Pritchard
Ran my morning apt-get update ; apt-get upgrade, and now netsaint is playing 
up. Can someone tell me where I've gone wrong, and how I should fix it!

djelibyebi:~# apt-get upgrade
Reading Package Lists... Done
Building Dependency Tree... Done
The following packages will be REMOVED:
  libpgsql2.1
The following NEW packages will be installed:
  libpgsql2
1 packages upgraded, 1 newly installed, 1 to remove and 0  not upgraded.
1 packages not fully installed or removed.
Need to get 0B/99.8kB of archives. After unpacking 53.2kB will be used.
Do you want to continue? [Y/n]
(Reading database ... 24795 files and directories currently installed.)
Preparing to replace netsaint-plugins-pgsql 1.2.9.4-18 (using .../netsaint-
plugins-pgsql_1.2.9.4-18.1_i386.deb) ...
Unpacking replacement netsaint-plugins-pgsql ...
Reloading netsaint configuration files.
dpkg: warning - old post-removal script returned error exit status 1
dpkg - trying script from the new package instead ...
Reloading netsaint configuration files.
dpkg: error processing /var/cache/apt/archives/netsaint-plugins-pgsql_1.2.9.4-
18.1_i386.deb (--unpack):
 subprocess new post-removal script returned error exit status 1
Reloading netsaint configuration files.
dpkg: error while cleaning up:
 subprocess post-removal script returned error exit status 1
Errors were encountered while processing:
 /var/cache/apt/archives/netsaint-plugins-pgsql_1.2.9.4-18.1_i386.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
djelibyebi:~#

Thanks,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Need utility to search for duplicate files

2002-04-14 Thread Andrew Pritchard
 My desktop system is used by 3 users, each having a few thousand files
 in their home directory. Since we primarily have the same interests,
 there are a LOT of duplicates to be found. Earlier I found an mpeg movie
 that all three of us had that was 120 MB. That's 240 MB of wasted space.
 Unfortunately, the files won't always have the same filename. Does
 anyone know of a utility that can go through and search for files with
 the same size and/or date and delete them or notify me?
 
 -Alex

If you are using Woody, do apt-get install fdupes. Or go to freshmeat.net and 
do a search for fdupes. Does exactly what you are talking about
FDUPES(1)   FDUPES(1)

NAME
   fdupes  - finds duplicate files in a given set of directo­
   ries

SYNOPSIS
   fdupes [ options ] DIRECTORY ...

DESCRIPTION
   Searches the given path for duplicate  files.  Such  files are found by 
   comparing file sizes and MD5 signatures, fol­lowed by a byte-by-byte 
   comparison.

OPTIONS
   -r --recurse
  include files residing in subdirectories

   -s --symlinks
  follow symlinked directories

   -H --hardlinks
  normally, when two or more files point to the  same
  disk  area they are treated as non-duplicates; this
  option will change this behavior

   -n --noempty
  exclude zero-length files from consideration

   -f --omitfirst
  omit the first file in each set of matches

   -1 --sameline
  list each set of matches on a single line

   -S --size
  show size of duplicate files

   -q --quiet
  hide progress indicator

   -d --delete
  prompt user for files  to  preserve,  deleting  all
  others (see CAVEATS below)

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Icecast Server

2002-04-03 Thread Andrew Pritchard
Does any one have a step by step guide to configuring IceCast etc on a debian 
(testing) box?

Cheers,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Windows/Linux network

2002-03-20 Thread Andrew Pritchard
 I would like to ask people what they think is the best solution for 
 networking a windows/linux network.
 
 Keeping in mind that the ultimate goal is to develop a linux only 
 network (but that that will not be accomplished anytime soon), I see 2 
 options.
 
 1. Install samba client on all linux user computers and have them 
 interact with the Windows network as if a Windows OS.
 
 2. Install samba server on a single linux server.  Map those Windows 
 drives that need to be shared out to Linux users to the linux server and
 then remap them to each linux user.  Actually, I don't even know if that
 is possible.
 
 Although the first option might be the easiest, keeping in mind that 
 eventually there would be no windows computers, it would seem more 
 sensible to maintain and support just NFS among the Linux users.

Why not do both and migrate over to NFS when you get rid of the Windows boxen?



Re: Perl package

2002-03-11 Thread Andrew Pritchard
  Hello, 
  
  I looking 4 debian perl package including LWP::Parallel modules.
  I'm using a Woody distro.
  
  
  I'have installed thoses packages but don't have LWP::Parallel.
  
  
 
  --
  tanna:/usr/share# apt-cache search  LWP
  libwhisker-perl - Perl module geared for HTTP testing
  sather-lwp - pSather - Parallel extensions to the Sather environment
  libcrypt-ssleay-perl - Support for https protocol in LWP
 
  --
 Use cpan. As root:
 
 perl -MCPAN -e shell; 
 
 
 Follow the prompts for setup.  They're pretty straight forward and defaults 
 are good 99% of the time if you don't know.
 
 Once you get to a prompt type install LWP::Parallel,  it'll do the rest.

CPAN is a very good option. However I've noticed there are a number of cpan 
modules available to you in the archives. While it appears that this particular 
module is not currently available in the debian archives, it's trivially easy 
to 
create your own. Get CPAN working, then do:

apt-get install dh-make-perl
dh-make-perl --cpan LWP::Parallel --build --install

This will download the files from CPAN, unpack them, compile as necessary, then 
build the .deb and then install it for you. I've yet to find a way of doing it 
that's easier!

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Re: ssl for webmin

2002-03-08 Thread Andrew Pritchard
 Any ideas why enabling SSL support for webmin through the webmin browser
 doesn't work?  I have uninstalled and reinstalled webmin many times 
 thinking something just must not have gotten installed right, but that's
 apparently not the issue.  
 
 I should note that there are no firewalls between the connections that I
 am trying this out on.
 
 Curtis

I've got webmin-ssl working just fine on my Woody box. Got plain vanilla 
version running on stable though. Which are you using?

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Re: web-based email for debian?

2002-03-01 Thread Andrew Pritchard
 i saw in an old post (from alvin oga -- thanks alvin) that there are several 
 options available for those of us who are thinking of offering online (http) 
 access to our email servers:
 
   http://www.Linux-Consulting.com/Mail/webmail.txt
 
 the question is:
 
 which debian packages contain such beasts?
 
 (primarily we're looking for mod_perl instances, or at least perl which can 
 be Apache::Registry'd. acmemail looks reasonable so far -- but searches for a 
 debian [potato] package aren't turning up anything.)

I'm happily using Horde and Imp on my 'stable' box. But there are several 
others. Works with Apache's SSL modules too (heh - so now my work place can't 
see me mailing out my resume to other companies - from work :)

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Re: Bastille on Debian?

2002-02-27 Thread Andrew Pritchard
 What magic, if any, must be worked to have Bastille run on Debian?  
 
 TIA
 
 Lance

There is a bastille package available for testing and unstable machines:

# apt-get install bastille
# InteractiveBastille

If you want to run bastille from an console then you also need to install 
libcurses-perl.

Don't know about stable machines.

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Ask Slashdot: How Well Does Windows Cluster? Turned around

2002-02-21 Thread Andrew Pritchard
For those of you who read Slashdot (http://slashdot.org), there was a recent 
question about Linux/MS clustering. The query was about a computational 
clustering and everyone was suggesting that Beowolf was good for that. The 
consensus seemed to be that MS Clustering was good for High Availability, not 
good for Computational Clustering (this was disputed, but I'm not going to go 
there :)

However, no one turned the question round, and asked or suggested what you can 
do for High Availability/Load Balancing Linux. Is there a package (or set of 
packages) in debian for this? What are people's experiances with this kind of 
setup. Obviously Linux is good for High Availability, but the Load Balancing is 
another matter.

Cheers,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Woody - Laptop

2002-02-20 Thread Andrew Pritchard
I have a laptop I'd like to put Woody on. I've started the install with 
the 'standard' set of discs, but when I try to configure the PCMCIA card it 
fails. It's a 3COM 3C589 - a well supported card.

Cheers,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Re: fetchmail like prog to retrieve mails from mail.com?

2002-01-25 Thread Andrew Pritchard
On Fri, Jan 25, 2002 at 04:36:04PM +0100, Bruno Boettcher wrote:
 First reflex was to take curl and write my own retrieval script to circumvent 
 that problem, and sorta recreate that forwarding service, fetching the mail 
 through a script from that server and reinjecting it into my mail system
 
 But i think i am not alone with that sort of problem, so perhaps there
 are allready such sorts of script lying around?

What about gotmail? It used to work until hotmail messed with the site design. 
I 
don't know how up to date it is - but it gives you a starting point at least. 
If 
I remember rightly gotmail used curl.

HTH,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Using Sendmail as a relay

2001-12-28 Thread Andrew Pritchard
Is there an easy way to get sendmail to relay? All attempts so far to get it to 
relay mail has failed.

Cheers,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Re: (fetchmail) configuration problem

2001-12-22 Thread Andrew Pritchard
 hi folks!
 i get errors with fetchmail and i totally have no plan whats it about
 can someone help me?

Try sending us your .fetchmailrc file (sans password of course!!!)

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Woody on CD

2001-12-21 Thread Andrew Pritchard
Is it possible to get (or build using the pseudo image kit) a snapshot of woody 
on CD(s)?

Cheers,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Weird problem installing Debian

2001-12-13 Thread Andrew Pritchard
I've got a spare machine which I'm trying to put Debian on. It's a K6-2 450, 
128MB RAM, 10GB HD. Not a bad machine at all. I've had trouble putting Debian 
on it before, and ended up using Redhat. I'd love to get Debian working on it, 
cos I find Debian so much easier to use (that sounds almost blasphemous). So 
here's my problem.

It's got a 3Com Etherlink III card in it. Not a bad card, well supported. The 
module installs for it - the link light on the hub lights, it accepts the IP 
address I've put in - everything seems to be going fine. HOWEVER, I can't ping 
the machine, NOR can I get any network connectivity out. I've booted with the 
idepci boot disks and the standard bootdisks for both the stable and testing 
releases - same problem. It's not a hardware issue - Redhat works just fine on 
that machine. So where am I going wrong?

Thanks for your help,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Fetchmail --ssl

2001-12-07 Thread Andrew Pritchard
I need to connect to a remote IMAPS server, using a stable debian box. The 
testing tree has fetchmail-ssl as an option, but there isn't a package for it 
under the stable tree. What would people suggest?

Cheers,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Uptime

2001-12-06 Thread Andrew Pritchard
From the Man page:
   uptime  gives a one line display of the following informa­tion.
   The current time, how long the system has been run­ning, how 
   many users are currently logged on, and the sys­tem load 
   averages for the past 1, 5, and 15 minutes.

What exactly does the 'load averages' mean? Is it the CPU time?

Just for my own curiosity really

Cheers,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



VPN software

2001-11-28 Thread Andrew Pritchard
Is there a Debian package to set up a VPN? Or am I going to have to go down the 
Free SWAN route?

Cheers,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



imaps taking a very long time to complete

2001-11-08 Thread Andrew Pritchard
I've got an IMAP server setup at home - which works internally just fine. 
However, I'm about to go on holiday and would like to be able to collect my 
email over the net. However I don't want to send my cleartext password over 
3000 
miles of internet. So I've set it up with IMAPS. BUT it's taking a very 
long 
time to complete. It's almost as if it's failing the DNS record lookup - but I 
don't think it's that as plain ordinary IMAP works just fine and the logs 
indicate it successfully looked up the host.

Any ideas? Thanks in advance,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



pppoatm

2001-10-23 Thread Andrew Pritchard
I see in the debian package list a pppoe package, but no pppoatm package. Is 
this likely to continue to be the case?

This package is needed for us in the UK who want ADSL from British Telecom. 
Being British they decided to be different and use ppp over ATM - rather than 
the seemingly more common ppp over ethernet.

Cheers,

Andrew Pritchard

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Alcatel Speedtouch USB ADSL modem

2001-10-20 Thread Andrew Pritchard
Has anyone managed to get this working under Debian in the UK?

I've got a client who wants an ADSL connection. I'd love to use Linux, 
preferably Debian. However all the instructions I've seen are for RH. I've 
tried 
following the instructions, but I fall almost at the first hurdle when I try 
and 
patch the kernel with the pppoatm patch. I'm using the bunk 2.4.9 kernel. Do I 
need to apply that patch for a kernel that is as up to date as this?

Cheers,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Suggestions please for a 10/100MB Network card

2001-10-17 Thread Andrew Pritchard
Has anyone had any experiences (good or bad) with 10/100Mb Network cards. It's 
going to go into a Debian potato box running the 2.4 kernel from Bunk. Any more 
queries, please email me direct. I'll any conclusions.

Cheers,

Andrew Pritchard

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Re: Any HOWTOs for firewalling?

2001-10-08 Thread Andrew Pritchard
Quoting [EMAIL PROTECTED]:
 I need to setup a firewall box for my ethernet cable modem. Is there a
 checklist or HOWTO I can use to set up the Debian based firewall?
 
 E.g.
 1. What is the minimal number of packages I need?
 2. How should I setup dhcp ( external to ISP ) and internal to NATed
 network?
 
 Any pointers would be appreciated.
 
 Thanks in advance
 
 Robin

Yes, there's the Firewall how to and IPMasquerading howtos. These are generic, 
but I have found it all to work for me. Minimum number of pacakages? None I 
don't think - it's built into the kernel!

Do you mean how should I setup a DHCP Server? Do:
apt-get install dhcp

I have found the Debian DHCP server to be a bit of a pig. The default settings 
from Debian are stupid - but do provide you with a good example. I wish they 
would create a useful dhcp.conf file during the install!


I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



IRC DCC through a firewall

2001-10-04 Thread Andrew Pritchard
I've got a Debian firewall setup, which is working ok. I can DCC receive files, 
but I can't DCC send. The ip_masq_irc module is installed on the firewall. If I 
try to send, it starts trying to send, the receiver gets the right IP address, 
and sends the acknowledgement, but the transfer never starts. Have I 
misconfiguered something or is this by design?

Cheers,

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Re: IRC DCC through a firewall

2001-10-04 Thread Andrew Pritchard
Quoting dman [EMAIL PROTECTED]:
 On Thu, Oct 04, 2001 at 03:58:21PM +0100, Andrew Pritchard wrote:
 | I've got a Debian firewall setup, which is working ok. I can DCC
 | receive files, but I can't DCC send. The ip_masq_irc module is
 | installed on the firewall. If I try to send, it starts trying to
 | send, the receiver gets the right IP address, and sends the
 | acknowledgement, but the transfer never starts. Have I
 | misconfiguered something or is this by design?
 
 Are you using ipchains or iptables?  Also, what sort of setup does
 your ISP have?
 
 I tried to DCC send to someone once, we both have Frontier Lightning
 Link and are on different masqueraded subnets.  The connection was
 never established.  I was able to do a DCC chat with someone else who
 has a decent ISP (no masq-ing) one time.
 
 -D

ipchains, fairly loose rules. It's a debian stable box, very very little 
running on the machine.

The ISP doesn't block anything as far as I am aware - it's a pretty good ISP, 
broadband and they aren't too fussy about people running webservers, etc off 
their connections. (No mail servers, and only 10 inbound connections allowed), 
and it is presented to us as an ethernet connection (Horrah - non of this It's 
a consumer ISP therefore you MUST use USB!)

Andrew



Fwd: Re: IRC DCC through a firewall

2001-10-04 Thread Andrew Pritchard
Quoting Fredrik Jagenheim [EMAIL PROTECTED]:

 On Thu, Oct 04, 2001 at 05:02:12PM +0100, Andrew Pritchard wrote:
  Quoting dman [EMAIL PROTECTED]:
   I've got a Debian firewall setup, which is working ok. I can DCC
   receive files, but I can't DCC send. The ip_masq_irc module is |
   installed on the firewall. If I try to send, it starts trying to |
   send, the receiver gets the right IP address, and sends the |
   acknowledgement, but the transfer never starts. Have I |
   misconfiguered something or is this by design?
  
 
  ipchains, fairly loose rules. It's a debian stable box, very very
  little running on the machine.
 

 I'm a little unsure of the DCC protcol, but could it be that you never
 see the ack?
 That is, you send 'I have a file for you' over _normal_ IRC channel.
 He receives this and then sends the ack to a different port on your
 computer telling you 'fine, I accept that fine file you have for me,
 let's use this socket-pair for the transfer'.
 And as you're probably running NAT, your firewall won't know that the
 port your friend is sending to should go to your IRC program, thus it
 simply drops it, and you never see the ack, and the transfer doesn't
 start.
 As I said, I don't remember the IRC protocol, haven't been on there
 for ages, but check your firewalls logging for what it drops...

 Oh, you wanted to know the solution too?
 Check if you can't either get a SOCKS-server running on the firewall
 (I've tried it, and I can't make it work at all) or tell the IRC
 program to use specific ports for DCC transfers and forward those
 ports inward. For example, I've done this for accepting files through
 ICQ (using iptables, but you get the idea):
 iptables -t nat -A PREROUTING -i eth1 -p TCP --dport 6060 -j DNAT --to
 192.168.1.2

 HTH,
 //Fredde

Yes that very much sounds like the problem - but isn't that supposed to be
handled by the ip_masq_irc module? I'm also using 2.2.19 kernel, so it's
IPchains. *sigh* don't really want to start using a socks proxy on the
firewall, but I will if I have to.

Andrew

I do not agree with what you say,
but I will defend to the death your right to say it. 
Francois Marie Arouet Voltaire (1694-1778)



Weird network setup problem

2001-09-24 Thread Andrew Pritchard
I've got a very strange problem I've never encountered before. I've been 
setting up a new machine with Debian 2.2r3 from the CDs. Install went without a 
hitch. 3c509B card installed fine. Logged in as root after reboot to do post-
install config and updating.

Turns out there appears to be no network connectivity. There is a link light on 
the hub - but I replugged the cables just to be sure - even swapped the cable 
for one I *know* is ok. Same problem. Ran ifconfig - everything appears normal. 
eth0 is up and has IP: 192.168.0.3 Netmask: 255.255.255.0 GW: 192.168.0.1. 
(I've just remembered I've not looked at the routing table - but that shouldn't 
matter!). Can ping 127.0.0.1 just fine. Can ping 192.168.0.3 just fine. Try and 
ping anything else - just doesn't want to know. Nothing else can ping it either.

Have I done something daft? I've set up loads of other Debian boxen - so I 
don't think it's a newbie fault. Any suggestions would be most welcome cos I'm 
flumoxed (what a wonderful word :)

Cheers,

Andrew Pritchard,
Whether you think you can,
Or whether you think you can't,
You're right!



Hardware Question: Which TV/video capture card?

2001-08-30 Thread Andrew Pritchard
I'd like to be able to capture footage from my video camera and I was wondering 
what people had in the way of experience with such beasts. I'm not really 
interested in watching TV on my workstation at the moment, though I might at a 
later date.

Has anyone got any experience with problems with other pieces of hardware, for 
example the speed of a harddrive? Is lots of RAM a necessary?

Your experience would be greatly appreciated,

Andrew Pritchard
Whether you think you can,
Or whether you think you can't,
You're right.



RE: Linux in the workplace: NT Domains

2001-08-03 Thread Andrew Pritchard
  You have to join the linux computer to the domain, which
  requires some level of admin privilages.  (We'll assume you
  have those)
 
  %smppasswd -j domainname -r NetBIOS-name-of-PDC  (which the
  linux box needs to be able to resolve, either by broadcast,
  /etc/hosts or your samba lmhosts file (which should be in the
  same directory as your smb.conf file)
 
 No luck I'm afraid (yes, I corrected the typo :).
 
 I used: smbpassd -j DOMAIN -r pdchostname
 
 which just gives me a listing of the available parameters.
 
 Afterwhich i tried:
 
 smbpassd -s -j DOMAIN -r pdchostname -U usernamefordomain
 
 No luck, just  bunch of errors which I should have copied and sent to
 the mailinglist, heh. But I don't think I'm going about this right. smbpassd
 is only for changing user passwords correct?
 

RTFMP: -j is the correct option. Under NT you can enter a username and password 
to create a computer account on the Domain, but this functionality appears not 
to have been implemented in Samba. From the man Page:

In order to be used in this way, the  Administrator
for  the  Windows NT Domain must have used the
program Server Manager for Domains to add  the 
primary NetBIOS name of the Samba server as a member
of the Domain.

Assuming your machine can resolve the PDC's hostname, I suggest you check this 
next.

Andrew Pritchard
Whether you think you can,
Or whether you think you can't,
You're right



Re: How secure am I?

2001-08-03 Thread Andrew Pritchard
Quoting Alvin Oga [EMAIL PROTECTED]:
 
 samba is NOT affected by inetd...
 

This is slightly misleading. If Samba is run from inetd, then disabling it in 
inetd.conf will kill your Samba install! However, I question the value of 
having 
Samba running on a firewall. If you need to get files onto the firewall them 
ftp 
them on from the console.

Andrew Pritchard
Whether you think you can,
Or whether you think you can't,
You're right



apt-get testing package on an otherwise stable box

2001-08-02 Thread Andrew Pritchard
Is there a way you can install a package from the testing branch using apt-get, 
from a box which is in every other way 'stable'? I remember seeing something 
like this I think on debianplanet - but I can't now find the reference.

Cheers,

Andrew Pritchard
Whether you think you can,
Or whether you think you can't,
You're right.



Re: using convert to batch convert

2001-08-01 Thread Andrew Pritchard
Quoting Christopher S. Swingley [EMAIL PROTECTED]:
  The command I would expect to work:
  
  convert -sample 50% *
 
 Another method that I often use is:
 
 $ find ./ -name '*.gif' -exec convert -geometry 50% {} {}.png \;
 
 The {}'s are replaced by the filenames that 'find' found, one at a time.
 So this command would reduce the size of all GIF images in the current
 (and all sub-) directories, as well as convert them to PNG files.

Correction to the above:
Don't use -geometry to change the scale, use -sample as orginal poster said!

find ./ -name '*.gif' -exec convert -sample 50% {} {}.png \;

Otherwise it complains that it can't find the files! Took me a little while to 
work out why it was overwriting my files with a 0 byte file :) That teach me to 
 
RTFM - thank god for backups.

Andrew
Whether you think you can,
Or whether you think you can't,
You're right.