Re: [gentoo-user] usb external drive

2007-07-06 Thread Josh Helmer
On Thursday 05 July 2007 5:27:19 James wrote:
 What I'm looking for is a simple procedure I can use to set
 up all my gentoo systems so I can easily move this drive from
 machine to machine and have access to the files under gentoo
 and windoz (2k,xp,vista).

When I did this I just used ext3 and then installed an ext2 driver for 
Windows.  I don't know whether the ext2 driver is supported under Vista but 
it works fine under XP.   The only options I know of are NTFS (flakey linux 
support) or VFAT (obsolete and wasteful filesystem).

Josh
-- 
[EMAIL PROTECTED] mailing list



[gentoo-user] IMAP server recommendations.

2007-05-16 Thread Josh Helmer
Hey gang...

I was just looking for some opinions.  I am replacing my current mail server.  
Right now I am using courier-imap and I am happy with it.   The only thing 
that concerns me is that I have heard grumblings that courier has some 
security issues.   I was just curious which IMAP server other people would 
recommend or perhaps if I am best off just sticking with what I know.  My 
current setup is very simple.  My only real requirements are SSL and maildir 
support.   I connect using either Kmail or Thunderbird.

Thanks,
Josh
-- 
[EMAIL PROTECTED] mailing list



Re: [gentoo-user] Re: Dovecot... is the bugzilla material?

2006-06-27 Thread Josh Helmer
On Tuesday 27 June 2006 18:18, [EMAIL PROTECTED] wrote:
 [EMAIL PROTECTED] writes:
  Neil Bothwick [EMAIL PROTECTED] writes:
  Did you emerge dovecot with the pop3d USE flag?
 
  Nope and Jean has explained a bit about that... sorry for the line noise

 Looks to be not the end of the troubles with dovecot.
 I get this when a connection is attempted:

 dovecot: Jun 27 13:07:52 Error: pop3-login: inotify_init() failed:
 Function not implemented

Just a guess, but:  check your kernel config.  See if CONFIG_INOTIFY is set.   
If not, recompile with that set and see if it behaves better.

Josh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Null Modem Cables Between Windoze XP and Linux

2006-06-25 Thread Josh Helmer
On Saturday 24 June 2006 12:49 pm, Lord Sauron wrote:
 I honestly am harbouring delusions of using the faster null modem
 stuff to directly sync my laptop with a future Linux CVS/Web server,
 so that I can have a update of the whole smash in my laptop once a
 day, rather than waiting for a slow internet connection remotely.
 It's just an idea I'm playing around with, and playing around is good
 (99% of the time, anyways).

I used to setup linux-based embedded systems running agetty on the serial 
port.  That allowed us to connect to the machine with just a null-modem cable 
(Windows client using hyperterm usually) and login directly if the network 
went screwy.  

The thing I remember most about the whole process was that running over a 
serial connection was slow as molasses.  You need to set a baud rate on the 
line (the server and client must agree on the rate) and you basically get 
dial-up speeds.  If there is a way to coax 2Mb/s out of the thing I never 
found it.

If you are looking for a linux client, look for a program called kermit.   
It's been at least 5 years since I last used it, but I believe that is what 
we used to use.

Josh


pgpgpJslnpkgQ.pgp
Description: PGP signature


Re: [gentoo-user] New To Gentoo and Emerge, No ACPI in Kernel

2006-03-25 Thread Josh Helmer
On Saturday 25 March 2006 21:58, Peter Ruskin wrote:
 On Saturday 25 March 2006 21:22, Lord Sauron wrote:
  Found xinit!  However... it's very...  confusing.

 What you want is a file called .xsession in your home directory.
 Mine just contains:

 #!/bin/sh
 `which startkde`

Why not just:

#!/bin/sh
startkde

If 'which' can find startkde then it must be in the PATH. 

Josh

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] moving /usr

2006-03-10 Thread Josh Helmer
On Friday 10 March 2006 18:05, Eric Bliss wrote:
 Before you do that...  did you also edit /etc/mtab in addition to
 /etc/fstab?

 Just a thought, since we are talking about separate partitions to mount.

Don't touch mtab.   mtab is auto-magically generated by mount. 

Josh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] mount nfs thru mount system call

2006-03-08 Thread Josh Helmer
On Wednesday 08 March 2006 19:55, c.s.prakash wrote:
 when i mount the nfs through the system call

 mount(192.168.0.51:/root, /mnt/9, nfs, 0, rw, async);

 it shows an invalid argument. but when i do this thru mount command it
 mounts without any problem

It's been about 4 years since I last had to do that (so no guarantees), but 
If I remember correctly the data argument for NFS is not just a string.  
Instead I believe that you have to do some other magic to encode the data 
correctly.  I would recommend looking at the source code for mount and see 
what happens.

Josh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] mount nfs thru mount system call

2006-03-08 Thread Josh Helmer
On Wednesday 08 March 2006 21:07, Petr Uzel wrote:
 IMHO it's easier to look at 'man 2 mount' :

 ...
 Values for the filesystemtype argument supported by the kernel are listed
 in /proc/filesystems (like  minix,  ext2, msdos, proc, nfs,
 iso9660 etc.).

man 2 mount is not going to help.  If you had looked closer you would realize 
that the data argument is the last argument not the filesystem type.  The 
man page only says that the data argument is typically a comma separated 
string.   I don't believe that is the case with NFS.

Josh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] mount nfs thru mount system call

2006-03-08 Thread Josh Helmer
On Wednesday 08 March 2006 22:04, Darryl Wagoner wrote:
 On 3/8/06, Josh Helmer [EMAIL PROTECTED] wrote:
  man 2 mount is not going to help.  If you had looked closer you would
  realize
  that the data argument is the last argument not the filesystem
  type.  The
  man page only says that the data argument is typically a comma
  separated string.   I don't believe that is the case with NFS.

  Why not?  I would try something like for data:

 rsize=8192,wsize=8192,soft.  Check nfs(5) for details.

OK...  I did some googling... 

Source:  http://www.die.net/doc/linux/man/man8/mount.8.html


Instead of a textual option string, parsed by the kernel, the nfs file system 
expects a binary argument of type struct nfs_mount_data. The program mount 
itself parses the following options of the form `tag=value', and puts them in 
the structure mentioned: rsize=n, wsize=n, timeo=n, retrans=n, acregmin=n, 
acregmax=n, acdirmin=n, acdirmax=n, actimeo=n, retry=n, port=n, mountport=n, 
mounthost=name, mountprog=n, mountvers=n, nfsprog=n, nfsvers=n, namlen=n. The 
option addr=n is accepted but ignored. Also the following Boolean options, 
possibly preceded by no are recognized: bg, fg, soft, hard, intr, posix, cto, 
ac, tcp, udp, lock. For details, see nfs(5). 


I would still recommend looking into the mount source code.  If I remember 
correctly, there is more to it than just creating a struct and populating it.  
I seem to recall that I also had to do something to register the remote 
export with the local machine.   I vaguely remember fighting to have to get 
something to show up in /proc before I could successfully mount a filesystem.

Josh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] OT - Why is Gentoo so slow when internet is out?

2005-11-29 Thread Josh Helmer
On Tuesday 29 November 2005 08:17 pm, Michael Sullivan wrote:
 Yeah.  Each one has an entry that says

 127.0.0.1 localhost.localdomain   localhost

 and then it has an entry consisting of

 192.168.1.?   name.espersunited.com   name


Looks correct to me.

Someone may have already suggested this (if so, sorry), but how about 
your /etc/nsswitch.conf file?  Are you  checking the hosts file before you 
try a dns lookup?

Josh
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Need a script that will add pwdfail IPs to shorewall blacklist

2005-09-17 Thread Josh Helmer
 Yes, I see that on all our servers.  Not much more than an annoyance unless
 you have stupidly obvious passwords, but annoying for sure.  On customer
 servers that don't require access from the everywhere and anywhere I just
 configure hosts.allow and hosts.deny to drop traffic from all but known
 addresses, but this is of course not an option for a webserver or whatever.

 There have been lots of discussions on various lists about handling these
 brute force ssh scripts, with various strategies for having iptables rules
 limit login attempts after three unsuccessful attempts, but I've seen as
 many it didn't work for me posts as do it this way and not being a
 firewall guru, I've sat on the fence so far.

 I think the problem with just blacklisting IPs is that the list will just
 grow and grow as these cretins move around all the time.

 Oh for a small incendiary device that could be targeted by IP address! ;-)

I want one of those too!!!

I realize that security experts cringe when I say this, but most of these 
automated attacks are pretty stupid and you can make yourself invisible to 
most of them by simply having ssh use a different port.  I am not saying that 
doing so gives you any more security than leaving ssh at port 22 - especially 
against a determined cracker.  You still need to apply appropriate security 
safeguards like firewall rules, host allow settings, good passwords or better 
yet password-less login, etc...  But, it does significantly reduce the number 
of random brute-force attacks that you see.  I personally went from seeing 20 
or so of these a day to not having seen one in weeks.  Low hanging fruit and 
all of that...

Josh


pgptWLFCiFtUb.pgp
Description: PGP signature