Re: [eug-lug]near Eugene DSL questions

2004-02-10 Thread Brad Davidson
I've visited a friend who has one of these, it's NAT is about the worst 
I've seen of any of the modem/firewall devices I've seen on the market. 
It was having a hard time handling any more than 2 of us doing an 
in-game server scan at once. It would just start dropping connections a 
bit into the scan, like it was running out of space in the NAT tables. 
Netgear had a problem like that shortly after Half-Life came out, but 
they managed to fix it fairly quickly. That was ~5 years ago IIRC, sad 
to see that Actiontech is having that problem today. Get yourself an 
external modem and a 486/p90/etc running linux, you'll be better off in 
the long run.

-Brad

T. Joseph Carter wrote:
On Mon, Feb 09, 2004 at 02:42:39PM -0800, Patrick R. Wade wrote:

My fellow worker Jay recently got QWest DSL via EFN, and got the Actiontec
device; he's been pretty happy with it.  It can do what you're describing,
simple firewalling and routing, and has slots to add PCCard wireless cards 
as well.


Too bad it only works with Actiontec 802.11b cards.  They cost more than
several 802.11g routers do at this point.
The firewall feature is generally no crappier than I have come to expect
from most network appliance router/firewalls, but the average free UNIX
variant provides a lot more power and control.  
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]euglug.org ranked # 40 in Google for linux training window

2004-02-05 Thread Brad Davidson
This message tripped my mental spam filter. Come on, she obviously 
didn't find EUGLUG on google. The keywords make no sense, they look like 
3 random words. She also obviously doesn't know what EUGLUG does, how 
would she 'compete' with a mailing list/user group?

I know it's nice to think that EUGLUG is all popular and everything... 
but don't let it get to ya. Look at the headers:

X-Mailman-Approved-At: Tue, 03 Feb 2004 16:55:52 -0800
To: [EMAIL PROTECTED]
cc: [EMAIL PROTECTED]
cc: [EMAIL PROTECTED]
Looks like somebody explicitly let it through.

Additionally, her domain doesn't exist, so she could never get any 
business, unless you ICQ'd her or something... so I'm not sure what the 
real point of this spam is. Seems kinda pointless. Here are some more 
references, per Google:

http://www.rcuniverse.com/forum/Weird_spam_RCU_guys_with_website_should_look_out_for%25/m_1449911/tm.htm
http://www.livejournal.com/users/gothwalk/283009.html

I'm a web master, and I was just searching Google for dd exhaust. I 
found your domain, philsrcworld.fsnet.co.uk ranked 14, which is pretty cool.

My site is all about Auto - Parts / Accessories, too . Maybe we should 
link up? I wouldn't be stealing any of your sales, because all I do is 
write informational articles...
---
 I'm a web master, and I was just searching Google for herpes pic. I 
found your domain, Randy's website.com ranked 28, which is pretty cool.

My site is all about Health - Beauty, too . Maybe we should link up? I 
wouldn't be stealing any of your sales, because all I do is write 
informational articles...
---

-Brad

nyal wrote:
It's nice to know she won't be stealing andy of EUGLUG's sales..What is 
she trying to steal?
Nyal
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]euglug.org ranked # 40 in Google for linux training window

2004-02-05 Thread Brad Davidson
Hmm, guess I should finish reading the thread before I respond. Looks 
like Ben already pointed out that it's spam :)

-Brad

nyal wrote:

It's nice to know she won't be stealing andy of EUGLUG's sales..What is 
she trying to steal?
Nyal
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]bash command line - loop over a range

2003-12-16 Thread Brad Davidson
How do you figure? Unless that 'new math' they tought me back in grade 
school is coming back to haunt me, 2.05  2.03

Cory Petkovsek wrote:
Recent bash extension?  Did you read my versions?
debuan linux: GNU bash, version 2.05b.0(1)-release (i386-pc-linux-gnu)
Solaris: GNU bash, version 2.03.0(1)-release (sparc-sun-solaris)
My solaris version is more recent than the debian version!  Both from
GNU.
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]FileSystem.mount()

2003-12-12 Thread Brad Davidson
Maybe 6 months or so? I don't recall exactly. I'm sure it's improved 
since then, but it had a 'cruft' flavor to it that I don't feel from a 
lot of startup projects.

-Brad

T. Joseph Carter wrote:
On Thu, Dec 11, 2003 at 11:33:45AM -0800, Brad Davidson wrote:

I gave LUFS/SSHFS a try a while ago. The project as a whole looked very 
hackish, and it crashed constantly on my laptop.

Now my laptop is PPC so there may be some endianness bugs, but even so - 
it seemed very amateur to me.


How long ago was this?
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]FileSystem.mount()

2003-12-11 Thread Brad Davidson
I gave LUFS/SSHFS a try a while ago. The project as a whole looked very 
hackish, and it crashed constantly on my laptop.

Now my laptop is PPC so there may be some endianness bugs, but even so - 
it seemed very amateur to me.

-Brad

Larry Price wrote:
So there is this project called LUFS (Linux Userspace File System) who 
are th same fine folks who brought you sshfs and ftpfs
http://lufs.sourceforge.net/lufs/intro.html
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Linux at Lane CC

2003-12-11 Thread Brad Davidson
Heretic! Speak not of the death of Perl!

-Brad

Linux Rocks ! wrote:
Congradulation! I realy wish they had them back when I went there ( and yes, I 
asked many times...)  I asked for perl classes too.. have they doen that yet? 
(or is perl dead?)


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Miserable Failure

2003-12-10 Thread Brad Davidson
You are correct. Have you looked at the Google cache?

http://66.102.11.104/search?q=cache:GPN6xA7xUV8J:www.whitehouse.gov/president/gwbbio.html+%22miserable+failure%22hl=enie=UTF-8

At the top it says: These terms only appear in links pointing to this 
page: miserable failure

Google's search mechanisim seems to work pretty well. Say a bunch of 
people linked to a page, calling it 'a very good c++ tutorial'. However, 
the page itself does not say anything along those lines. You'd probably 
still want to find it when you searched for 'good c++ tutorial' wouldn't 
you?

I personally have no problem with Google, or their PageRank system. I 
occasionally hear some malcontents squaking about how it's unfair, how 
googlebombs shouldn't be possible, and how the 'one true search engine' 
will be open source.

I don't buy it.

Google's engine is great as a technology, and I respect their actions 
and principles as a company.

-Brad

Cory Petkovsek wrote:
On Wed, Dec 10, 2003 at 02:01:54PM -0800, Bob Miller wrote:

For a good time...

   1. Go to Google.  http://www.google.com/
   2. Enter two words: miserable failure
   3. Click I'm Feeling Lucky
Sorry if you've already seen it...


Those words to not appear on the page nor in the source.  Google says
they cannot change their database records and ranking system.  This is
not cool.  I'm glad that nutch.org is well under development.
Cory



___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]make -d s foo

2003-12-02 Thread Brad Davidson
On Linux, try 'info make', it appears to have what you're looking for.

Lots of documentation is moving over from man to info, although I 
personally prefer the linear structure of man pages.

-Brad

[EMAIL PROTECTED] wrote:
Take a look* in /usr/share/doc/psd/ . Chapter 12 covers BSD 'make'.
My copy of Porting UNIX Software also covers BSD make. Let me
know if you want to borrow it.
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]rm -rf

2003-12-01 Thread Brad Davidson
I might also suggest a 'man find'. What you probably wanted is this:
find / -iname *mozilla* -print
which means: start at the root, find (ignoring case) anything with 
Mozilla in it, and print the matching filename to stdout.

running updatedb (or locate.updatedb, or locate -d, etc) and then 
searching with locate again is probably easier woy for you to do it though.

-Brad

Dirk Ouellette wrote:
When I try to #find mozilla , I see;
find: mozilla: No such file or directory
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Re: WiFi Mapping Project

2003-11-19 Thread Brad Davidson
I've been through this with them already. Apparently (as of 3-4 months 
ago) they were evaluating possible ways to start securing the channel. I 
sent some nice e-mails back and forth with their IT manager Greg 
Cottriel after I intercepted some patient information from a database 
query floating around the Gateway Mall area. SSID, DOB, address, etc. He 
seemed rather supprised by the whole situation, and I haven't heard back 
from him since I e-mailed him a copy of the Kismet packet trace. That 
was late July if I remember correctly, I haven't checked lately to see 
if it's secured yet.

Mostly it was an annoyance, I added most of their stations to the 
blacklist in my Kismet conf and haven't thought about it much.

-Brad

jgw wrote:
You
can also intercept traffic coming off of the Coburg Hills, and maybe about
40% of that is not WEP encrypted. So, if any techs from Sacred Heart or
Peacehealth are around, they might want to fix that.




___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Re: WiFi Mapping Project

2003-11-19 Thread Brad Davidson
I'd definately like to see it secured as well. Just leave my name out of 
it... I got the feeling that if they started to not like what they heard 
I'd get a nice letter from the PeaceHealth legal department.

I don't think any of us want to be used as the EFF's poster boy for 
wardriving.

-Brad

jgw wrote:
was late July if I remember correctly, I haven't checked lately to see
if it's secured yet.


It's definitely not secured as of a couple weeks ago. A coworker and I
were doing some rooftop stumbling and we were able to get pretty good LOS
with Coburg Hills.
I think I know who the IT manager is over there, maybe I'll pop him a
polite, but eye-opening email. Patient data being broadcast to all isn't a
good thing.
I wasn't sure if they hired some local crackpot contractor who doesn't
know WEP from weep, or if it was an in-house job.
/jgw


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Re: WiFi Mapping Project

2003-11-19 Thread Brad Davidson
I have a G3 laptop running Gentoo, a USB serial adapter, and a Garmin 
eTrex Legend. They work great with Kismet... I've got about 50 megs of 
GPS-tagged packet data that I'd be glad to throw in to a database.

I've been using GPSMap to make static maps of the area, it'd be great to 
see about plugging the data into an online mapping app somewhere to 
generate something a little more dynamic and interactive.

-Brad

jgw wrote:
the weekend... also, if you've gotten a GPS/PC hookup going for the
stumbling, I'm curious about that too -- I haven't gotten my GPS's
serial connection to work for me yet, in linux or windows.


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Computerbase, other Eugene PC resellers?

2003-11-17 Thread Brad Davidson
PCPartsExpress used to be great. They have/had 'national warehouse' 
prices, and you could make an order and then just drive over and pick it 
up.. they're in Springfield, in the light industrial district between 
Gateway Mall and I-105. However, I guess they got tired of being a local 
retail chain because after about 4-5 months they decided that they were 
only going to ship - no local pickups. Oh well.

Since then I've been giving my business to ComputerBase, I know quite a 
few people who do so as well. Gotta remember to haggle - if you've seen 
it for significantly less online, mention it. Don't expect to get it for 
the same price (you're not paying shipping, and they have to make a 
profit somehow), but you may save yourself a few bucks.

-Brad

Jason wrote:
kbob mentioned Computerbase as a place in Eugene to
buy custom PCs/components; does anyone else have
recommendations for this or other places to buy custom
systems in town? I'd like to buy local and will be
needing a new system when I get back to Eugene. I will
probably be getting case/power
supply/motherboard/CPU/ram and finishing it off with
junk I already have.
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Computerbase, other Eugene PC resellers?

2003-11-17 Thread Brad Davidson
Grigsby, Garl wrote:

Are you sure that was PCPartsxpress and not edgemicro (formerly known as Computer X Press)? PCPartsxpress has a small shop right off Q Street (across the street from Safeway). 
Right you are. I didn't know them as Edge Micro, just Computer X Press.

Edgemicro, has stopped doing business after a few, uh, legal problems. After a large number of people complained about paying for stuff and never getting it the DOJ stepped in and basically shut them down. There was an article in the RG about it a few months ago. 
Wow, didn't hear about that. Interesting. Have to see if I can dig up a 
link on the RG's web site.

The folks at PCPartsxpress have ok prices, but the people in there are fairly clueless. They are fine if you are in a bind and need a bit and you know exactly what you need and have an idea of what it should cost. Some things are ok, others are outrageous.
Now that you mention it, I think I went in there once. Strange little 
house with an odd assortment of computer... stuff. Not sure what the 
target market is for that place, but I didn't get a very good geek vibe 
from it.

-Brad

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug] How do I put GIMP on Mac OS Panther?

2003-10-28 Thread Brad Davidson
Ask The Fink!

http://fink.sourceforge.net/

-Brad

Harald Sundt wrote:
I wanna run my favorite Linux programs on my Mac. I am a perverse son of 
a bitch.

Where do I get compatible apps...is their gonna be a nightmare matching 
supporting files?


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Linux Brochure Project

2003-10-24 Thread Brad Davidson
I do the same thing all the time too. Notice that there's a link to the 
web site in each You're not on the list message. Follow that link as 
soon as you get the message, and hit the 'Cancel Posting button. Then 
re-send the message from the correct account.

-Brad

Linux Rocks ! wrote:
Ken,
	Ahh... ok, so instead of gettting frustrated, and banging ones head, let me 
offer you this suggestion. Ask the moderator (myself or ed) to simply 
ignore/decline your messages when you accidently post from the wrong address. 
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


[eug-lug]Recent Spam

2003-10-24 Thread Brad Davidson
Wow, looks like the spammers finally figured out how to spam mailing 
lists by sending from the address of a subscriber. I wondered how long 
until they'd start doing that...

They still have to learn how to forge 'recieved' headers though:

Received: from 68.60.53.188 (12-255-140-79.client.attbi.com [12.255.140.79])
by sapir.efn.org (8.12.6p2/8.12.6) with SMTP id h9OIHQTU092729
for [EMAIL PROTECTED]; Fri, 24 Oct 2003 11:17:40 -0700 (PDT)
(envelope-from [EMAIL PROTECTED])
Message-Id: [EMAIL PROTECTED]
Received: from [63.85.85.236] by smtp-server6.tampabay.rr.com with SMTP;
Oct, 25 2003 01:02:08 -0700
The hint being the odd 'Message-Id' tag in the middle of the middle of 
two 'Recieved' sections. tsk tsk. Anything after that point is suspect.

That and the use of a -700 UTC offset on a system that claims to be in 
Tampa Bay. Anyone in Tampa Bay would be using a -400 UTC offset.

-Brad

George wrote:
The Unbelievable Secrets CD

  Version 3.0 -  Now only £14.99 - Resell rights included!


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]where can I learn more about wait channel - wchan?

2003-10-07 Thread Brad Davidson
Cory Petkovsek wrote:
Doing a google search on wchan only brings up man pages for ps (which I
have on my system) or for the wchan command (which I don't have, but
don't think I need).
On Linux, the kernel gives me the english wchan value for a process:
select, poll, wait4, unix_stream_data_wait, read_chan, rt_sigsuspend,
nanosleep, etc.
Wait channels have to do with a proces waiting on something - usually
for data to be available in a file or socket, sometimes waiting to be
interupted to handle an event. All of the parameters you listed have to
do with setting and reading information on what a given process is
waiting for. The Linux kernel uses Wait Queues, other unices use Wait
Channels. As I understand it, the terms are fairily interchangeable in
user-space, although the kernel-level backends are radically different.
Strictly speaking:
The address of an event on which a particular process is waiting. The
abbreviation WCHAN appears in output of ps command with -l option.
Now, unless you're programing something complex, you shouldn't have to
worry about this. If it was something you needed to worry about, you
would know what it was.
What are you trying to do?

-Brad.



___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]where can I learn more about wait channel - wchan?

2003-10-07 Thread Brad Davidson
Jacob Meuser wrote:
Perhaps if you really want to learn, you should install an OS that
cares about documentation, where you will also find select(2), poll(2),
wait(2), wait4(2) etc ...
Sorry, couldn't resist.
Maybe you should have. All of those exist on Linux as well, as part of 
the Linux Programmer's Manual that's a standard part of the man page 
collection in most distros. Actually /used/ a Linux distro lately? Might 
save you some embarrasment.

-Brad

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]where can I learn more about wait channel - wchan?

2003-10-07 Thread Brad Davidson
Jacob Meuser wrote:
But more to the point, why couldn't Cory find that info?  Why didn't you
point him to it?
I guess I misread his level of familiarity with the subject at hand. The
fact that he was looking for the 'wchan command' didn't give me much
faith in the fact that he knew what he was doing.
To further my theory, I've never run into a Linux dev who either doesn't
 have the appropriate man pages installed, or who isn't skilled enough
with Google to find the required information on his own.
I'm not sure what distro Cory's using, but the 'man' set is pretty hard
to *NOT* install, so I guess it just didn't cross my mind that he
possibly didn't have it. He didn't mention trying to use the man pages
for those functions on *any* OS/Distro, so I assumed that he was poking
around and just wanted more info - hence my general outline of the
subject, and the query what are you trying to do? - which BTW still
hasn't been answered.
Oh, and I posted a few weeks ago about using Gentoo to make music.
Linux distros make nice toy OSes ... I use OpenBSD for real work ;`}
*notices the pair of bellows that Jacob is holding*
*grins*
-Brad



___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]where can I learn more about wait channel - wchan?

2003-10-07 Thread Brad Davidson
Cory Petkovsek wrote:
The wchan command, thus the mention that it wasn't on my system.  I
suppose it is also not on yours:
http://ou800doc.caldera.com/SM_dump/wchan.html
Not to pick nits, but that's not a command, it's a preprocessor macro 
from the kernel sources. Not really anything that could be used on a 
command line. Or maybe that's what you were getting at.

Who said anything about a linux dev?  I would be a linux adm.
In my experience, the line between the two tends to blur quite 
frequently. *grin*

I use debian, but now I see my problem.  I looked for select(2) and
wait4(2) on a mail server in between doing other things on it.  I don't
have the developers manual pages there, but I do on another system.
Ahh. Since you were inquiring into the fiddly bits of the OS, I assumed 
that you were working on something with the source, and would be looking 
about on a machine with all the normal development tools and 
documentation pertinent to what you were looking for. My appologies.

One user had written a perl script through cron that made a connection
to a sql server that was hanging.  The process showed a wchan of select
and I wanted to see if I could determine more information about it
through this method.  I now know the answer is no, this process was
simply waiting on an i/o handle.  The problem turns out to be in
DBD::Sybase.
Good to know!

-Brad

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]A diff for the Foxtrot comic strip

2003-10-03 Thread Brad Davidson
I'm not so sure about that, actually. Traditionally, the 'X times on the
blackboard' spec has not included newlines at the end of the statement -
with sentances that don't take up the entire width, it's a waste of space.
See Bart's example text on the blackboard, from the Simpsons intro:

http://picassomoon.com/products/posters/p1945.jpg

So I'd say it's less a bug, and more an implementation of the
specification that differs from what your friend is familiar with. It
could perhaps use a space after the ., but again... it all depends on the
preference of the coder (and possibly management).

-Brad

Ken Barber said:
 This just in, from a friend of mine:

 --  Forwarded Message  --

 Subject: RE: Wow, a comic-strip author that knows C
 Date: Friday 03 October 2003 11:32
 From: Peter Shearer [EMAIL PROTECTED]
 To: Ken Barber [EMAIL PROTECTED]

 Well, there's a bug in his code.  He needs a newline character at
  the end of the printf statement, or else the statements will all
  be on one line (albeit maybe wrapped).  However, in the
  strictest interpretation of the assignment, the teacher is
  obviously not going to accept the output of the app as
  fulfillment of the requirements.

 Please see my diff below; perhaps upon proper application, the
  teacher will accept his work.  I would submit it to Bugzilla for
  this project, but I do not know the proper contact information.

  :)

 --- foxtrot.c 2003-10-03 11:22:53.0 -0700
 +++ foxtrot.c.orig2003-10-03 11:22:46.0 -0700
 @@ -4,6 +4,6 @@
  {
   int count;
   for( count=1; count = 500; count++ )
 - printf(I will not throw paper airplanes in class.\n);
 + printf(I will not throw paper airplanes in class.);
   return 0;
  }

 -Original Message-
 From: Ken Barber [mailto:[EMAIL PROTECTED]
 Sent: Friday, October 03, 2003 11:13 AM
 To: Mid-Willamette Valley Linux Users Group
 Subject: Wow, a comic-strip author that knows C


 http://www.ucomics.com/foxtrot/2003/10/03/

 Now, THAT's cool!

 ---

 ___
 EuG-LUG mailing list
 [EMAIL PROTECTED]
 http://mailman.efn.org/cgi-bin/listinfo/eug-lug



___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Perl Script question

2003-09-25 Thread Brad Davidson
Hmm, looks like that went OK on one of my machines, but not the other. 
If it doesn't work for you, try doing:
install Meta::Utils::Dos

which can be rather large, but it's got the package in question. If you 
want /just/ Text::CRLF, here's a standalone version.

http://nntp.x.perl.org/group/perl.scripts/;[EMAIL PROTECTED]

Take the code at the bottom (starting with Package Text::CRLF), and do 
the following:
cd /usr/lib/perl5/
mkdir Text
cd Text
touch CRLF.pm
your editor here CRLF.pm
  paste contents of the above post into the file. Make it executable, 
and do whatever you were gonna do with the CGI script.

Looks like Text::CRLF is only currently available as part of 
Meta::Utils::Dos, but this guy wrote a standalone version. He's trying 
to get it on CPAN, I guess...

-Brad

Brad Davidson wrote:
[EMAIL PROTECTED] / # perl -MCPAN -e shell
cpan install Text::CRLF
Let your perl do the walking...

Grigsby, Garl wrote:

Ok I found a PERL script on line that I would like to play with 
(http://nntp.x.perl.org/group/perl.scripts/315) but it requires a PERL 
module called Text::CRLF. Now I am fairly new to PERL so this may be a 
stupid question. Where do I find this? I have looked on CPAN but I 
can't find it. Where does one look for stuff like this? What am I 
doing wrong?

Garl EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug] mailing list issues

2003-09-24 Thread Brad Davidson
Hey, at least you're better off than poor Larry - his post took almost
34 years to make it through!
-Brad

Ben Barrett wrote:
I think the list is still having problems.  I've never gotten a
list-post back in less than 10 minutes, IIRC, but this took ~ 14 hrs,
20 minutes to be received by the list server...
ciao

   BB

On Tue, 23 Sep 2003 22:07:06 -0700
Ben Barrett [EMAIL PROTECTED] wrote:
| Thanks Larry

| On Fri, 2 Jan 1970 10:38:48 -0800
| Larry Price [EMAIL PROTECTED] wrote:
...
| | ps. mailing list should be working again.
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug




___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


[eug-lug]WANTED: Powered external drive enclosure

2003-09-24 Thread Brad Davidson
I'm wondering if anyone has an old powered SCSI drive enclosure around 
that's collecting dust. You know the type.. ancient, biege, held 3-4 
drives, had a Centronix port and some scsi-ID selection switches on the 
back, internal AT power supply, and loud as hell. If anyone has one 
they'd like to unload please let me know. If a moderate financial 
contribution is required to place it in my posession, I can do that as 
well. Don't want/need the drives, just the case  PSU.

Thanks,

-Brad

FYI, it has *absolutely* nothing to do with this:
http://users.theshell.com/~jms/case/
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]WANTED: Powered external drive enclosure

2003-09-24 Thread Brad Davidson
5 drives would be awesome, as I'd probably start out with just 1 - 2
that I have on hand (My income isn't completely disposable, although I
do tend to treat it that way. Power bill? What power bill?).
Garl, if you're willing to part with it for 15 bucks, that would be
wonderful. But if 20-25 bucks or so sounds OK to Bob (or his friend),
I'll go for that one. Lemme know what you guys think.
I really have no idea what these are worth any more. I seem to remember
someone throwing a half dozen of them out a while ago, I wish I'd had
the foresight to grab one for future projects. If I'm completely off my
rocker as far as $$ go, please tell me so.
Grigsby, Garl wrote:
Do you care how big it is? I have one that holds 5 drives. Dual 120mm fans. Sounds like a wind tunnel I worked with in school. That what you have in mind? 
and Bob Crandell wrote:
Yes.
I think it has 6 or 7 bays.
What's it worth to you?  It isn't mine.  I'm to find a home for it as 
a favor.
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug




___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]WANTED: Powered external drive enclosure

2003-09-24 Thread Brad Davidson
I just realized that Garl said five inch drives, not five drives. How 
many does it hold? Unless I can dig up some rails / hotswap bays to go 
with it, I'm looking for something to put 3.5 drives in.

-Brad

Brad Davidson wrote:
Grigsby, Garl wrote:

Do you care how big it is? I have one that holds 5 drives. Dual 120mm 
fans. Sounds like a wind tunnel I worked with in school. That what you 
have in mind? 


and Bob Crandell wrote:

Yes.
I think it has 6 or 7 bays.
What's it worth to you?  It isn't mine.  I'm to find a home for it as 
a favor.

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug




___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Coffee, 200mw wifi

2003-09-22 Thread Brad Davidson
I wanted the card mostly to be able to play with HostAP, and as I live 
quite close to quite a few friends (8 within 100 yards), the extra power 
to punch through walls and trees is appreciated. When I'm using the card 
in my laptop it will be completely passive (Kismet is monitor-only), and 
the extra sensitivity in the Senao cards will come in handy.

Ben, if you look back further in the thread, I talked about what 
software I was using for all of this.

I found GPSDrive to be somewhat flaky. The code is ugly, and not very 
well maintained. When I loaded it onto my laptop, it refused to catch 
mouse clicks, although it worked fine on my desktop. It had a few other 
idiosyncracies that I don't remember at the moment, but over all, the 
more I used it the less I was impressed with it.

-Brad

Grigsby, Garl wrote:
James Kaplan talked about this a couple of years ago. Basically said that 2.5 GHz was nothing to worry about. He knew enough about radios that I believe him. Also, though I am ont a EE (I am, in fact, a ME), I know for a fact that the FCC would never allow a radio device to be legally produced that work cook the user. Not even one that would allow the user to be come warm. 
Dig back in the archives and I'm sure you will find the thread. 
Garl 


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Solaris Question

2003-09-20 Thread Brad Davidson
Since you were mucking about with your profile... did you change 
anything in there that might impact line length? Try renaming and then 
logging in again, so that you go back to the default profile, see if it 
does anything different.

Garl Grigsby wrote:
I thought the same thing. I was origonally using Putty from a Windows 
machine and figured Putty was munched. Next I tried ssh'ing from my 
Linux Workstation. Same thing. Next I walked across the building to the 
machine itself. I see the same thing on the machine using the dtterm. 
Any other ideas?
Garl


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Coffee

2003-09-19 Thread Brad Davidson
That was generated by GPSMap, a nifty little util that comes with the
Kismet (the open-source wardriving util). If you have a GPS reciever
connected while you're wardriving, it logs GPS data when it detects a
packet. This is all saved to a big XML file, that GPSMap parses out, and
displayes on a map. It does a power-weighted average of points that each
AP was observed to guess where it is, and what the range on it is.
I've made a few patches to it that I haven't yet got around to getting
merged into the main source... mostly because I promised the mailing
list a feature that I was quite happy with, and I'm embarassed to post
it in the current state. I just haven't got around to finishing it yet.
Anyways. Dot color indicates protection - green is no-wep, red is wep,
blue is probably-factory-config (like a Linksys AP with a SSID of
Linksys, etc). It's all passive so it can't know if it's got MAC
restrictions on, of course.
The shape is the packet/AP type - circle is managed, triangle is ad-hoc,
+ is an association request, square is if we didn't get enough data to
create a network entry for the packets... normally this means
association requests.
Circle color is channel.

Size is a (very) rough estimation of where the network can be picked up.

The feature I wasn't happy with is the legend-printing function that
explains all of this in a box on the image. Hence my lack of a public
release :)
-Brad

Grigsby, Garl wrote:
Ok let me finish typing that now
couple of questions. What do the various colored does mean? Are these public WAPs or are these 
just open WAPs. How did you generate the image? Manually or did you have some 
software to map out WAP locations and ranges?

http://wifimon:[EMAIL PROTECTED]/~kiloman/gpsmap/city_lo
wdetail.png


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug




___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Coffee (and wireless)

2003-09-19 Thread Brad Davidson
Here's another, closer view at the Chase Village, McKenna Estates, etc area:

http://wifimon:[EMAIL PROTECTED]/~kiloman/gpsmap/chasevillage_med.png

There's a few different sources for maps, including the TerraServer 
3-meter sattelite photo database. Those look really cool :)

I suppose all of this should eventually lead into the question of 
setting up a Eugene Wireless Project. I know it's been thrown around by 
quite a few people in the past, but I haven't heard of any significant 
work being done towards it. We have some wonderfull hills to the south 
(and east) of us, but it can be difficult at time to get a line of site 
with all these nice leafy green trees.

I have a friend that works tech for a local public agency that's going 
to be  running some serious bandwidth around various public 
rights-of-way. He's trying to convince his boss to set up public APs at 
the terminus points along the way... but all of this is years off and 
very pipe dream. I think the chances of anything like that happening 
would be strengthened if there was a significant, well organized local 
effort already in place when the time comes. I know that there are also 
various people at UO that might be swayed to set something up (sector 
panels on PLC, anyone? *grin*). Perhaps as a repeater at least, as they 
can be a bit tough as far as what gets on the UO network itself.

Anywho, I'm daydreaming again. This is all probably subject matter for 
another thread, and more serious consideration.

Grigsby, Garl wrote:
Ok let me finish typing that now

couple of questions. What do the various colored does mean? Are these public WAPs or are these just open WAPs. How did you generate the image? Manually or did you have some software to map out WAP locations and ranges?


http://wifimon:[EMAIL PROTECTED]/~kiloman/gpsmap/city_lo
wdetail.png


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Coffee

2003-09-19 Thread Brad Davidson
I'm running Gentoo on my Pismo powerbook. I was doing most of my 
wardriving with a borrowed Orinoco card, and a HyperGain +8db antenna 
with a magnetic base. I got myself a Garmin eTrex Legend GPS, comes with 
a serial connector, and has a built-in DGPS patch antenna. Since the 
Pismo doesn't have a serial port, I got a cheap Belkin 'USB PDA adapter' 
from Curcuit Shitty while I was getting the Garmin. (can you tell I 
planned this out?)

The antenna and the PCMCIA Orinoco were reclaimed by their owner, so I 
recently got myself a Senao card from NetGate, and bought myself my own 
antenna (same one I was borrowing). The Senao card is 200mw, and is the 
same one that the Seattle Wireless guys use for their long-distance 
links. It's prism2 based, so lots of nice Linux support.

Here are some links:
Senao card:
http://www.netgate.com/NL2511.html
(got here in 2 days from Washington - great service)
HyperGain antenna:
http://www.hyperlinktech.com/web/hg2409mgu.php
Will custom-build the correct pigtail for your card for an extra 5 
bucks. Mag base is great - stayed on the roof of my Maxima up to 65mph, 
until the wave front from an oncoming Semi knocked it back a foot or two.

-Brad

Grigsby, Garl wrote:
 	I've been itching to try this for some time, but I haven't got any hardware yet, other than my laptop. In fact I spent a couple of hours about a week ago bouncing around Ebay looking at wireless cards and GPS antennas. I've been thinking that I would prefer a USB GPS antenna, but I haven't looked at what is supported on Linux. 
	So what GPS unit are you using? What wireless card? Are there any wireless PCMCIA cards that will support an external antenna? I've been looking at probably getting a DLink DWL-650 because a) they are cheap, and b) they seem to have pretty good Linux support (prism2).
	So does anybody have a WiFi card they are looking to get rid of? I have some cash and lots of stuff I can trade. Just let me know.

Thanks,
Garl

EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Solaris Question

2003-09-19 Thread Brad Davidson
I'd say that your term is screwed up, and is wrapping chars back to the 
beginning of the line. If it's an xterm, try resizing the window, or 
closing it an opening a new one. If it's a straight console terminal... 
try one of the other virtual terminals, see if it does it there.

I've seen this happen in Putty when I resize the window in one app, and 
then drop back to a command line. The terminal doesn't know that I've 
resized it, and starts wrapping things when it shouldn't.

-Brad

Grigsby, Garl wrote:
Being that this is the Eugene Unix and GNU/Linux User Group I was wondering if anybody might be able to shed some light on the following. I have a Solaris 9 system and I was just checking on the status of a job I am running on it and when I run an ls -l I get the following: 

[EMAIL PROTECTED] /scratch/grigsby $ ls -l
total 7074996
.SR1r--r--   1 grigsby  gtac 188997408 Sep 19 11:37 4842419-i32
.SR2r--r--   1 grigsby  gtac 188813200 Sep 19 11:43 4842419-i32
.rs1r--r--   1 grigsby  gtac 2344271872 Sep 19 12:22 4842419-i32
.rs11--r--   1 grigsby  gtac   0 Sep 19 11:42 4842419-i32
.rs12--r--   1 grigsby  gtac 35472784 Sep 19 11:51 4842419-i32
-rw-r--r--   1 grigsby  gtac3744 Sep 19 11:05 Test_restraints8.bun
-rw-r--r--   1 grigsby  gtac5208 Sep 19 12:22 Test_restraints8.lis
-rw-r--r--   1 grigsby  gtac 774152192 Sep 19 18:38 Test_restraints8.mfh
-rwxr--r--   1 grigsby  gtac 43598988 Sep 19 08:22 Test_restraints8.sun
-rw-r--r--   1 grigsby  gtac 52813824 Sep 19 11:05 Test_restraints81196.sdb
-rw-r--r--   1 grigsby  gtac   0 Sep 19 11:04 error1191.out
-rw-r--r--   1 grigsby  gtac8192 Sep 19 11:04 tmp1196.dsp
Notice that the file extension .SR1 and .SR2 is show in the first start of the line. Odd. I thought it must be something funky with my .profile as I have been tinkering with it lately so I tried just a plain ls. This is what I get:

[EMAIL PROTECTED] /scratch/grigsby $ ls
.rs12Test_restraints8.sun
.SR2 Test_restraints8.bun  Test_restraints81196.sdb
.rs1 Test_restraints8.lis  error1191.out
.rs11Test_restraints8.mfh  tmp1196.dsp
Ok. Now this is really getting funky. The files, just to be clear, should be named 4842419-i32.SR1, 4842419-i32.SR2, etc. Anybody have any idea what would be causing this? The same thing happens when I look at the list as root, so I know it is not my .profile. 

Thanks for any help,
Garl 

===
Garl R. Grigsby
Senior Customer Applications Engineer - I-DEAS CAE  FEMAP Support 
---
EDS PLM Solutions Phone: (800) 955- 
Global Technical Access Center  FAX: (541) 342-8277
1750 Willow Creek Circle   Email: [EMAIL PROTECTED]
Eugene, OR 97402  Internet: http://support.plms-eds.com
===
   -FEA makes a good engineer great, and a poor engineer dangerous-
===

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Coffee

2003-09-19 Thread Brad Davidson
Oh yeah. There's 2 versions of the Senao card - one with a built-in 
antenna and plug on the side for an optional external antenna. The one I 
got has no internal antenna, and 2 MMCX plugs for external antennas (for 
recieve diversity).

As always, the Orinoco cards have awesome Linunx support, and a N-Female 
plug for an external antenna. The N-type plugs are known to be fickle 
and break easy, but watcha gonna do. They're not designed to be plugged 
and unplugged frequently.

-Brad

Grigsby, Garl wrote:
 	I've been itching to try this for some time, but I haven't got any hardware yet, other than my laptop. In fact I spent a couple of hours about a week ago bouncing around Ebay looking at wireless cards and GPS antennas. I've been thinking that I would prefer a USB GPS antenna, but I haven't looked at what is supported on Linux. 
	So what GPS unit are you using? What wireless card? Are there any wireless PCMCIA cards that will support an external antenna? I've been looking at probably getting a DLink DWL-650 because a) they are cheap, and b) they seem to have pretty good Linux support (prism2).
	So does anybody have a WiFi card they are looking to get rid of? I have some cash and lots of stuff I can trade. Just let me know.

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Locking down a server

2003-09-18 Thread Brad Davidson
Cory Petkovsek wrote:

On Wed, Sep 17, 2003 at 11:13:48AM -0700, Brad Davidson wrote:

#everything else is logged and then dropped
iptables -A sort -j LOG --log-level info
iptables -A sort -j DROP
This has a similar problem as Bob's original script.  Logging without
limits.
Yes... He's still free to use the limiter on there as well if he doens't
want to see all the log info. I was leaving that up to him if he felt it
necessary.
I'm not anticipating that anything I suggest be used literally - YMMV,
caveat emptor, batteries not included, etc. Change it as necessary for
your environment. If it's gonna bork your logs - by all means, limit it.

#jump to the sorting rule from input and forward.
#output isn't really worth worrying about IMHO - the
#unwanted hosts don't get in, so why would there
#be anything going back to them
iptables -A INPUT -j sort
iptables -A FORWARD -j sort
I used to think so.  Then our network got a worm from an infected laptop
and the worm scanned for hosts outside of our network.
I didn't see any indication that this was a gateway server - he only
mentioned one ethernet interface, and the only NAT he was running was to
do transparent port redirection. If it's acting as a gateway then
outbound connections from this box (originating from systems inside the
protected network) are definately an issue. But I'd take care of that
with rules on the internal interface, as opposed to killing the traffic
on the outbound chain - why wait until it's made it all the way through
the routing process to drop it?


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Coffee

2003-09-18 Thread Brad Davidson
In the same vein, so does the Cornucopia bottle market near 11th and
Monroe. No real limits on it, it's just a Netgear WAP somewhere in the
back of the store, connected to a cable modem. SSID 'Wireless', DHCP
enabled.
Oh, and for the curious...
http://wifimon:[EMAIL PROTECTED]/~kiloman/gpsmap/city_lowdetail.png
Incomplete and not very up to date (I've done a bit more that's not on
there), but it gives a decent idea of what this town's like.
PS - thanks for the card adapter Max, it's working wonderfully. Now I'm
just waiting for the senao card to arrive...
Maximillian wrote:
In case anyone is interested:  Cafe Paradiso has WiFi now.  As much time 
as you like with any purchase, be it coffee, beer, or food.  Just buy a 
coffee, and ask for WiFi time.  I usually ask for 3 hours...

Maximillian Schwanekamp
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug




___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Locking down a server

2003-09-17 Thread Brad Davidson
Cory Petkovsek wrote:
/usr/sbin/iptables -A INPUT -i eth0 -s $LOOPNET -j logdrop
/usr/sbin/iptables -A INPUT -i eth0 -d $LOOPNET -j logdrop
127.0.0.0/8 is not on eth0.  It is on lo.  These two lines do nothing.
Righto, good catch. Either way, he's got a lot of useless rules in here.

echo Redirect Web traffic through Dan's Guardian
/usr/sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 81 -j REDIRECT
--to-port 8080
iptables -t nat -A PREROUTING -p tcp -s $intnet -d $intip --dport 81 -j
REDIRECT --to-port 8080
You have your proxy set to anything coming in on eth0.  Instead match by
ip address above.
He's matching anything from the internal network to port 81 on the local
machine. He's then bouncing it over to the proxy port.
I would leave out the '-s $intnet' section, since anything you don't
want in is already getting dropped by the sort rule I listed in my
earlier message. There's no point in matching again here.
Statefull filtering wonderful, but I'm not sure what all he wants. With
the rules I gave, his box will /NEVER/ talk to anyone that's not on the
approved host list. If that's not desired, it would definately be a good
idea to set up some state matching rules to allow sessions esablished by
the server back in. A rule like the following would do that:
#this goes right above the '-j log- entry.
#it allows any traffic initated by the server back in
#you probably want this if the server needs to talk to the internet.
iptables -A sort -m state --state ESTABLISHED,RELATED -j ACCEPT
-Brad

(PS - please forgive me if a dupe of this message is ever posted to the 
list. I accidentally sent the original message from the wrong alias...)

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Locking down a server

2003-09-17 Thread Brad Davidson
I used to hang out on the LARTC list, so here's my analysis. Quite
possibly flawed. You may want to ask the LARTC guys, they eat stuff like
this for breakfast.
Bob Crandell wrote:
Here is rc.iptables:
#===
#/bin/sh
LOOPNET=127.0.0.0/8
LOCALNET=216.239.175.0/24
echo   Clearing existing configuration.
/usr/sbin/iptables -P INPUT ACCEPT
/usr/sbin/iptables -F INPUT
/usr/sbin/iptables -P OUTPUT ACCEPT
/usr/sbin/iptables -F OUTPUT
/usr/sbin/iptables -P FORWARD ACCEPT
/usr/sbin/iptables -F FORWARD
/usr/sbin/iptables -F -t nat
/usr/sbin/iptables -F logdrop
/usr/sbin/iptables -X logdrop
echo Create Drop Chain.
/usr/sbin/iptables -N logdrop
/usr/sbin/iptables -A logdrop -j LOG --log-level info
/usr/sbin/iptables -A logdrop -j DROP
echo INPUT Rule sets.
/usr/sbin/iptables -A INPUT -i lo   -j ACCEPT
Accept everything from your loopback addy
/usr/sbin/iptables -A INPUT -i eth0 -j ACCEPT
Accept everything from the adapter
/usr/sbin/iptables -A INPUT -i eth0 -s $LOOPNET -j logdrop
Drop things from loopback network. Except you allready jumped to ACCEPT
for everything via 'lo', so this is never matched
/usr/sbin/iptables -A INPUT -i eth0 -d $LOOPNET -j logdrop
Drop things to loopback network. Except you allready jumped to ACCEPT
for everything via 'lo', so this is never matched
/usr/sbin/iptables -A INPUT -i eth0 -s $LOCALNET -j ACCEPT
Accept everything from the localnet network. Except you already accepted
things from eth0, so this is never matched
echo Redirect Web traffic through Dan's Guardian
/usr/sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 81 -j REDIRECT
--to-port 8080
#===
This works, but it lets the whole world in.  Not good.
Indeed it does.

Here's what I would do:

OK_NET1=216.239.175.0/24
OK_NET2=64.28.48.0/24
OK_HOST1=64.112.226.198
#flush rules before setting policy
#also, set a default deny rule. Safer that way...
iptables -F INPUT
iptables -P INPUT DROP
iptables -F FORWARD
iptables -P FORWARD DROP
iptables -F OUTPUT
iptables -P OUTPUT ACCEPT
iptables -F -t nat
iptables -F sort
iptables -X sort
iptables -N sort
#accept from the OK hosts and nets
iptables -A sort -s $OK_NET1 -j ACCEPT
iptables -A sort -s $OK_NET2 -j ACCEPT
iptables -A sort -s $OK_HOST1 -j ACCEPT
#everything else is logged and then dropped
iptables -A sort -j LOG --log-level info
iptables -A sort -j DROP
#jump to the sorting rule from input and forward.
#output isn't really worth worrying about IMHO - the
#unwanted hosts don't get in, so why would there
#be anything going back to them
iptables -A INPUT -j sort
iptables -A FORWARD -j sort
#Finally, we add the shim rule:
#Sends all inbound port 81 traffic over to 8080
iptables -t nat -A PREROUTING -i eth0 -p tcp \
  --dport 81 -j REDIRECT --to-port 8080
See how that works. Or maybe I missed the mark entirely. Lemme know.

-Brad

(PS - please forgive me if a dupe of this message is ever posted to the 
list. I accidentally sent the original message from the wrong alias...)

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


[eug-lug]Verisign wildcarding of COM and NET zones

2003-09-17 Thread Brad Davidson
I'm sure everyone has heard about this already on sites like slashdot, 
but recently Verisign added a wildcard A record to the .NET and .COM 
domains, matching all unassigned domain names. Example:

#nslookup adsnklasdnjkasdnjk.com
Server:  some.server.dom
Address:  x.x.x.x
Non-authoritative answer:
Name:adsnklasdnjkasdnjk.com
Address:  64.94.110.11
For the first few hours of it's life, that server hosted a 
Verisign-sponsored search engine, covered with adds, with results higly 
slanted towards Verisign and it's affiliates. The web server appears to 
be down, but it's still accepting SMTP connections, with a hardcoded 
response sequence of 220, 250, 250, 550, 220, DISCONNECT. A few other 
common ports are open with similar token reponses.

Understandably, this has angered quite a few people. In response, ISC 
has released a new version of Bind that allows administrators to block 
this response:

http://www.isc.org/products/BIND/delegation-only.html

The basic steps are:
-Upgrade to Bind 9.2.3rc2
-Add the following lines to your named.conf:
zone com {
type delegation-only;
};
zone net {
type delegation-only;
};
-start the new version of Bind.
Enjoy DNS as it was meant to be experienced.

-Brad

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug