Re: [SLUG] pid timeout

2003-03-22 Thread Carl G Lewis
On Sat, 22 Mar 2003 04:17 pm, Amanda Wynne wrote:
 timeout 25442 return 0


 When it stops, it looks like this:
 pid reading 0 return 0
 pid timeout 25444 return -1


Well the pid value is clearly incorrect, (no such pid as zero) suggesting that 
the call to pthread_create failed. You may want to check the return value 
from both calls to pthread_create, although since 
Mbm_get_data() and Mbm_sleep() both print to stderr when Mb_verbose is true, 
that may not be necessary. (This should be checked anyway, so maybe the 
library maintainer would like a patch?)

The man page says that pthread_create will fail if more than 
PTHREAD_THREADS_MAX threads are active, you could check what this value is 
defined to by grepping in /usr/include or wherever the system headers are if 
you are cross-compiling.

The failure of pthread_create seems related to the fact that the function uses 
pthread_cancel, which (I think) will not release the resources from the 
created threads, instead pthread_join should be used (maybe in addition to 
pthread_cancel). From the pthread_join manpage:

When  a  joinable  thread  terminates,  its  memory  resources  (thread
descriptor and stack) are not deallocated until another thread performs
pthread_join on it. Therefore, pthread_join must  be  called  once  for
each joinable thread created to avoid memory leaks.

The two threads in this case are definitely joinable.

You know life has taken a strange turn when you're debugging someone *else's* 
code on a Saturday night :-P




-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Confirm your subscription

2003-03-22 Thread steve
~~~
Mailing List Subscription Confirmation
*** Confirmation required ***
~~~

You have been invited to join our mailing list.

This list has a double optin feature so you must go to the URL listed below
to finish joining this list. This is a safeguard for you.

PLEASE CLICK THE LINK BELOW TO CONFIRM YOUR SUBSCRIPTION:
http://pub50.bravenet.com/elist/add.php?usernum=4280452265id=4539913

IF YOU DO NOT WISH TO SUBSCRIBE DO NOT CLICK THE LINK:
If this message was sent in error, please disregard it and no further email
will be sent to you on this subject.


---
Bravenet.com ~ free webtools for webmasters ~ http://www.bravenet.com/

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Want squid to automatically update certain sites every 10 mins

2003-03-22 Thread t
Hi Folks

There are a few sites which I look at a lot, and what I want to do is make
sure the cached version is updated on a regular basis even if I do not
expliclty look at the site with a browser  So I want squid look up the site
every 10 mins.  I was thinking of simply doing something like this in a
script file

lynx http://www.smh.com.au
http://www.theaustralian.news.com.au/
lynx http://news.bbc.co.uk

and just making the script file run every 10 mins.  But this looks a bit
dodgy doing this, and lynx will not download the pictures(??).  Is there a
better way?

Thanks

Tony

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Welcome to the Movieglobe Mailing List

2003-03-22 Thread steve
You have been added to the list.

---


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Using iptables to unblock several ports, help please

2003-03-22 Thread t
Hi

I need to get Yahoo Messenger working on a windows box which is connecting
to the internet via Masquerading.  I need to open the
following ports up 5050, 5101, 5100, 5001, 5050, 80, 20, 21, 25, 37 ,119.
The port 5050 needs only to be able to connect to list of servers at the end
of the email.
At this stage I do not know if they need to be udp or tcp, so please tell me
how to do both, then when I find out which it is I
will delete the other.

How do I do this using iptables.

Thanks

Tony

Yahoo_1 = 24.71.200.68
Yahoo_2 = 204.71.202.73
Yahoo_3 = 204.71.200.54
Yahoo_4 = 204.71.200.55
Yahoo_5 = 204.71.200.56
Yahoo_6 = 204.71.200.57
Yahoo_7 = 204.71.177.35
Yahoo_8 = 204.71.202.59
Yahoo_9 = 204.71.202.58
Yahoo_10 = 216.115.105.214
Yahoo_11 = 204.71.201.47
Yahoo_12 = 204.71.201.48
Yahoo_13 = 216.115.105.215
Yahoo_14 = 216.136.172.221
Yahoo_15 = 216.115.107.63 es21.msg.yahoo.com
Yahoo_16 = 216.115.107.64 es22.msg.yahoo.com
Yahoo_17 = 216.115.107.65 es23.msg.yahoo.com
Yahoo_18 = 216.115.107.66 es24.msg.yahoo.com
Yahoo_19 = 216.115.107.67 es25.msg.yahoo.com
Yahoo_20 = 216.115.107.101 es26.msg.yahoo.com
Yahoo_21 = 216.115.107.102 es27.msg.yahoo.com
Yahoo_22 = 216.115.107.103 es28.msg.yahoo.com
Yahoo_23 = 216.115.107.104 es29.msg.yahoo.com
Yahoo_24 = 216.115.107.105 es30.msg.yahoo.com
Yahoo_25 = 216.136.173.179 es31.msg.yahoo.com

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Using iptables to unblock several ports, help please

2003-03-22 Thread Stewart
On Saturday, March 22, 2003, at 11:04 PM, t wrote:

Hi

I need to get Yahoo Messenger working on a windows box which is 
connecting
to the internet via Masquerading.  I need to open the
following ports up 5050, 5101, 5100, 5001, 5050, 80, 20, 21, 25, 37 
,119.
if that's the ports needed by yahoo messaging i'd be finding another 
service to use...

someone more knowledgeable than I can explain the details I'm sure, but 
my understanding is that ports numbered below 1024 are only for use 
with standard internet services such as mail/web etc - port 80 for 
example is the http port and 25 is for mail - i can't imagine why yahoo 
messenger would require those? you may have been misinformed?

sorry I can't help more, but i try where i can. :-)

..S.


The port 5050 needs only to be able to connect to list of servers at 
the end
of the email.
At this stage I do not know if they need to be udp or tcp, so please 
tell me
how to do both, then when I find out which it is I
will delete the other.

How do I do this using iptables.

Thanks

Tony

Yahoo_1 = 24.71.200.68
Yahoo_2 = 204.71.202.73
Yahoo_3 = 204.71.200.54
Yahoo_4 = 204.71.200.55
Yahoo_5 = 204.71.200.56
Yahoo_6 = 204.71.200.57
Yahoo_7 = 204.71.177.35
Yahoo_8 = 204.71.202.59
Yahoo_9 = 204.71.202.58
Yahoo_10 = 216.115.105.214
Yahoo_11 = 204.71.201.47
Yahoo_12 = 204.71.201.48
Yahoo_13 = 216.115.105.215
Yahoo_14 = 216.136.172.221
Yahoo_15 = 216.115.107.63 es21.msg.yahoo.com
Yahoo_16 = 216.115.107.64 es22.msg.yahoo.com
Yahoo_17 = 216.115.107.65 es23.msg.yahoo.com
Yahoo_18 = 216.115.107.66 es24.msg.yahoo.com
Yahoo_19 = 216.115.107.67 es25.msg.yahoo.com
Yahoo_20 = 216.115.107.101 es26.msg.yahoo.com
Yahoo_21 = 216.115.107.102 es27.msg.yahoo.com
Yahoo_22 = 216.115.107.103 es28.msg.yahoo.com
Yahoo_23 = 216.115.107.104 es29.msg.yahoo.com
Yahoo_24 = 216.115.107.105 es30.msg.yahoo.com
Yahoo_25 = 216.136.173.179 es31.msg.yahoo.com
--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug
--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Using iptables to unblock several ports, help please

2003-03-22 Thread t

From: Stewart [EMAIL PROTECTED]
  to the internet via Masquerading.  I need to open the
  following ports up 5050, 5101, 5100, 5001, 5050, 80, 20, 21, 25, 37
  ,119

 if that's the ports needed by yahoo messaging i'd be finding another
 service to use..

actually...after a bit more investigation it seems I only need to open the
port 5100, so can someone please show me how to do that, I have got

iptables -A OUTPUT -p tcp -o eth0  --dport 5100 -j ACCEPT
iptables -A OUTPUT -p udp -o eth0  --dport 5100 -j ACCEPT
iptables -A OUTPUT -p tcp -o eth0  --sport 5100 -j ACCEPT
iptables -A OUTPUT -p udp -o eth0  --sport 5100 -j ACCEPT
iptables -A INPUT -p tcp   --dport 5100 -j ACCEPT
iptables -A INPUT -p udp   --dport 5100 -j ACCEPT
iptables -A INPUT -p tcp   --sport 5100 -j ACCEPT
iptables -A INPUT -p udp  --sport 5100 -j ACCEPT

Anything else here I need?

Thanks

Tony



-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] rpm to deal with dependencies !!

2003-03-22 Thread LS
Hi Andrew et al:

I finally got this upgrade
to proceed.

I actually ended up doing what Andrew suggested
for option 3 by just forcing the 
install of readline, and readline-devel. I did
not recompile/rebuild the others as their manual says
that I should still stay on the current version 
of mysql etc ...

Their install script after that passed
the pre-install check, and started the 
upgrade.

The upgrade completed with a [FAILED]
verdict. The failure was just about
restarting mysql and tomcat failing.

I followed the instructions from the 
upgrade manual, and everything passed.

The domains are all operational
and I can access the upgraded control panel.

Thanks again to all who contributed on this.

Cheers

Louis.

PS. Now I can work on the VNC problem on the live server
I left to get this upgrade complete. I still
have not yet re-installed RH 8.0 on my local
connections. Will get that done as well and email
the list if I get stuck somewhere.

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
 On Behalf Of Andrew Monkhouse
 Sent: Wednesday, 19 March 2003 08:51
 To: LS; [EMAIL PROTECTED]
 Subject: Re: [SLUG] rpm to deal with dependencies !!
 
 
 Hi Louis,
 
 If their install script will handle everything (presumably by 
 getting working versions of the packages from 
 /tmp/extrarpms), then you should not need to rebuild any of 
 the packages. My suggestion of recompiling is only necessary 
 if you need those packages, you cannot upgrade them, and your 
 install script does not handle the situation.
 
 However if you do need (or want) to rebuild any of the 
 packages, then there are several locations you can look for 
 the source package:
 
 1) If you have ALL the CDs for the release of RedHat you are 
 using, then there should be at least one CD with a /SRPMS 
 directory in it. In that directory there will be a source 
 package for each built package, named package-version.src.rpm.
 
 2) If your source CD is out of date, or you don't have it, 
 then you can get the source RPM from RedHat (or preferably 
 from one of their mirrors). I use mirror.pacific.net.au, 
 and the source file for dump is in 
 /linux/redhat/redhat/linux/updates/7.1/en/os/SRPMS. To find 
 your nearest mirror site, go to 
 http://www.redhat.com/download/mirror.html
 
 3) If you want a later version than RedHat have released, or 
 you want an RPM for a package that RedHat don't distribute, 
 then you can search for it on http://rpmfind.net/.  Just 
 enter the package name (no version number or other 
 information is required), and you will be shown a summary 
 page detailing where you can get different packages for 
 different architectures and distributions. There are usually 
 two links on each line - the link on the left will give more 
 information on what the package is, the link on the right 
 will let you download the package. For my case (I run RedHat 
 7.1), I can see a line describing:
 
   dump-0.4b25-1.71.0.i386.html Programs for backing up 
 and restoring filesystems. RedHat-7.1 Updates for i386 
 dump-0.4b25-1.71.0.i386.rpm
 
 
 The right link will let me download the executables that make 
 up this package, however to get to the source package, I 
 click on the left link, which brings up a page describing the 
 package, and giving me a link to the Source RPM.
 
 As I mentioned earlier, RPMFind allows you to find later 
 versions that have been packaged by other people or for other 
 distributions. You do need to be aware that different 
 distributions may put files in different locations, or use 
 different groups to store the metadata. This is not normally 
 a problem, however it can confuse someone (and on rare 
 occasions other programs) when an expected file is in the 
 wrong directory.
 
 Regards, Andrew
 
 - Original Message -
 From: LS [EMAIL PROTECTED]
 To: 'Andrew Monkhouse' [EMAIL PROTECTED]; 
 [EMAIL PROTECTED]
 Sent: Tuesday, March 18, 2003 10:45 PM
 Subject: RE: [SLUG] rpm to deal with dependencies !!
 
 
  Hi Andrew:
 
  I have read this detailed analysis
  and I understand a bit better how to handle
  rpms.
 
  However I just spent some time reading the
  upgrade manual provided by Ensim (probably
  should have done that first before upgrading).
 
  In there thay talk about some of the dependency
  rpm errors that may be encountered and how to handle
  them for their software upgrade to go smoothly.
 
  I saw the one with the readline problem, and their
  solution is to load the versions of those that will
  work with the later version of readline their install
  script will use in the /tmp/extrarpms directory and their upgrade 
  script will take care of the rest.
 
  There are other scenarios they talk about which I
  will probably encounter and how to deal with them.
 
  I just have one question from option 4).
  I can't see how to get the current version of say
  Mqsql, dump for the version of readline I am installing.
 
  You state recompiling. Their install 

[SLUG] (no subject)

2003-03-22 Thread mute_harlequin
Hi everyone

having trouble writing with 'dd' on a iMac running Darwin 10.2.3. 
Trying to write a copy of floppyC31.fs to a USB floppy and cant seem to 
get anywhere with it. as follows is what it spits back at me. Hoping 
that someone can point out my obvious mistake.

I worked out that the USB floppy is mounted to /dev/disk1 by running 
mount

bash-2.05a$ mount
/dev/disk0s5 on / (local)
devfs on /dev (local)
fdesc on /dev (union)
volfs on /.vol (read-only)
automount -fstab [356] on /Network/Servers (automounted)
automount -static [356] on /automount (automounted)
/dev/disk2s0 on /Volumes/OpenBSD:i386 3.1 Unofficial (local, nodev, 
nosuid, read
/dev/disk1 on /Volumes/Unlabeled (local, nodev, nosuid)

 then i try and run dd as it say's in my manual but i get this

bash-2.05a$ sudo dd if=floppyC31.fs of=/dev/disk1 bs=36b
dd: /dev/disk1: Device busy
I cant point it to /volumes/Untitled as it says its a directory and 
cant write there. Cheers if anyone can help.

Kim

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] (no subject)

2003-03-22 Thread dazza
On Sat, 22 Mar 2003 [EMAIL PROTECTED] wrote:

 Hi everyone

 having trouble writing with 'dd' on a iMac running Darwin 10.2.3.
 Trying to write a copy of floppyC31.fs to a USB floppy and cant seem to
 get anywhere with it. as follows is what it spits back at me. Hoping
 that someone can point out my obvious mistake.

 I worked out that the USB floppy is mounted to /dev/disk1 by running
 mount

 bash-2.05a$ mount
 /dev/disk0s5 on / (local)
 devfs on /dev (local)
 fdesc on /dev (union)
 volfs on /.vol (read-only)
 automount -fstab [356] on /Network/Servers (automounted)
 automount -static [356] on /automount (automounted)
 /dev/disk2s0 on /Volumes/OpenBSD:i386 3.1 Unofficial (local, nodev,
 nosuid, read
 /dev/disk1 on /Volumes/Unlabeled (local, nodev, nosuid)

   then i try and run dd as it say's in my manual but i get this

 bash-2.05a$ sudo dd if=floppyC31.fs of=/dev/disk1 bs=36b
 dd: /dev/disk1: Device busy

 I cant point it to /volumes/Untitled as it says its a directory and
 cant write there. Cheers if anyone can help.

Try unmounting the floppy before using DD to write directly to it?

I.E. sudo umount /dev/disk1

Then run your dd command again and see if it works.

DaZZa

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] SSH Problem for Virtual Host Site

2003-03-22 Thread Louis Selvon
Hi Sluggers:

Encountered my first problem after the upgrade.

The virtual host site, although working across the web, won't allow me to ssh
to it anymore. I get access denied. It's not a password / username issue, as I
can connect via ftp to this virtual site with the credentials.

I checked the virtual site status from the WEBppliance control panel, and it
says that ssh is enabled for that site.

I can ssh to the server, but not to virtual hosts sites.

Where can I check ssh status for virtual sites on the server or do a manual
enable as root ?

Cheers

Louis.

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] newbie shell script q.

2003-03-22 Thread Stewart
Hi ..

I want to make a shell script to take input from a text file and 
process each line in turn.

ie

$myscript  textfile

then in the script it goes

for each $line in $textfile do
something
but i can't work out the syntax. $1 is the input stream isn't it? 
that's about as far as i got. .. :-(

well ok I have an iPod and i want to be able to copy mp3's off it, 
using a list of song names as input for a 'find ./ 'name' -exec cp {}' 
style command. it's not hard, but it's beyond me at this stage.

advice (or a URL for a good scripting tutorial :) gratefully received..

cheers,
..S.
--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] newbie shell script q.

2003-03-22 Thread Jeff Waugh
quote who=Stewart

 for each $line in $textfile do
   something

  cat file | while read LINE; do
echo $LINE;
  done

or,

  while read LINE; do
echo $LINE;
  done  file

 but i can't work out the syntax. $1 is the input stream isn't it? 
 that's about as far as i got. .. :-(

$1 is the first parameter given to the shell script:

  $ cat myshell
  #!/bin/sh
  echo $0
  echo $1
  echo $2
  echo $3

  $ ./myshell pants tshirt suspenders
  ./myshell
  pants
  tshirt
  suspenders

- Jeff

-- 
   This is the new dividing line in public life. It is not a question of   
Left versus Right, but a struggle between insiders and outsiders. -
Mark Latham 
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Welcome to the Movieglobe Mailing List

2003-03-22 Thread Peter Hardy
Hi!

On Sat, 22 Mar 2003 03:33:21 -0800 (PST), [EMAIL PROTECTED] wrote:
 You have been added to the list.

Wow, neat trick.

I've unsubbed the list, and added a couple of mailman filters.  That's
another list manager we're silently ignoring mail from.

The amusing and entertaining character(s) who were connecting from
203.134.131.199 and 203.51.76.146 at around 10:23 and and 10:33 last
night should consider the existance of, for example, X-IPAddy: headers
in subscription emails before they try again.

-- 
Pete
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] pid timeout

2003-03-22 Thread David Fitch
On Sat, 2003-03-22 at 20:20, Carl G Lewis wrote:
 The failure of pthread_create seems related to the fact that the function uses 
 pthread_cancel, which (I think) will not release the resources from the 
 created threads, instead pthread_join should be used (maybe in addition to 
 pthread_cancel).

and it uses 'kill' not pthread_kill.
it appears to be treating the threads it creates as separate
processes (which may be correct in linux due to each thread having
it's own pid (dodgy way linux deals with threads)) which doesn't
seem right to me.

I agree with Carl though, you're probably running out of threads
cos you're not reusing them due to not exiting them properly.

Dave.

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Does rndc dumpdb list everything in the named cache?

2003-03-22 Thread t
I have just installed and got working named.  I am using it in cache mode.
If I browse some sites, ie www.smh.com.au, then look in the output of

rncd dumpdb--(1)

they are not listed in the output of, where as other sites, ie
www.google.com , zonelabs.com(from zonealarm doing a dns query) are listed
in the output of (1).  Does this seem odd?


Cheers

Tony

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] Welcome to the Movieglobe Mailing List

2003-03-22 Thread Jon Biddell
=Wow, neat trick.
=
=I've unsubbed the list, and added a couple of mailman 
=filters.  That's another list manager we're silently ignoring 
=mail from.

Which is a prime example of why the list should be changed to
subscribers only can post - it would LESSEN the workload on our
overworked list admins...:-)

Jon

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] Authentication question

2003-03-22 Thread Simon Bryan
Hi all,
I am trying to build a system for my school to restrict downloads for users
when they exceed a certain limit. In fact that bit works, now I need to add
some whistles and bells. We run SQUID on a RH server with DansGuardian as a
content filter and Squidalyser running nightly to analyse the logs.

I have a php page that runs against the database created by Squidalyser from
the Squid logs. A user can enter their username and be told what their data
usage for the month is, however any user can enter any known username, so
there is a privacy issue. I would like the user to have to authenticate
themselves first and then only see their own usage.

Currently we run an NT Domain with users authenticating to the PDC, when
they go into our Intranet (which is AUC) on a Linux (RH) server they are
authenticated on that NT server by a PAM module (comes with the AUC
distribution). (I still find PAM a bit of a black art).

However the proxy server is not on that server it is on another RH server.

Is it feasible that I can achieve what I want? If so can someone point me in
the right direction? Would winbind be of any help?

_
Simon Bryan
IT Manager
OLMC Parramata
ICQ#: 137562751
_

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Welcome to the Movieglobe Mailing List

2003-03-22 Thread Jeff Waugh
quote who=Jon Biddell

 Which is a prime example of why the list should be changed to subscribers
 only can post - it would LESSEN the workload on our overworked list
 admins...:-)

I disagree - not only is this a bad example of the point, but changing the
list to subscribers-only would not lessen the administrative workload.

It's a bad example because it's exactly the sort of activity that would get
around the subscriber-only restriction. If a spammer subscribes, then
there's nothing stopping them from posting.

It will not necessarily lessen the admin workload because not only will we
have bad mail to moderate (currently stuff caught by the internal Mailman
spam filter, the SpamAssassin plugin, the many regexp filters that we have
built up over time, size and recipient restrictions, our MTA restrictions,
etc), but we will have good mail to moderate (people posting with alternate
addresses, genuine non-subscriber posts, etc). So, I doubt that would double
the workload, but it would certainly increase it.

There are also many positive reasons to keep the list open to non-subscriber
open posting, which have been hashed over time and time again.

We get *very* little spam compared to other lists, and every time this comes
up, the general consensus concludes that it's far more effective to squeeze
out the little spam we do get through ever-improving methods, than it would
be to crank up the work involved (and reduce the 'nice-ness' of how the list
works) in perpetuity.

There's no 'hard' list policy, and there's definitely scope for change in
the future, but right now we're doing really well... I can't see much reason
to change.

Thanks,

- Jeff

-- 
I'm just mucking round down the shallow end of the literary pool, I
  suppose. - Mick Molloy   
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] Using iptables to unblock several ports, help please

2003-03-22 Thread Steve Kowalik
At 12:48 am, Sunday, March 23 2003, t mumbled:
 iptables -A OUTPUT -p tcp -o eth0  --dport 5100 -j ACCEPT
 iptables -A OUTPUT -p udp -o eth0  --dport 5100 -j ACCEPT
 iptables -A OUTPUT -p tcp -o eth0  --sport 5100 -j ACCEPT
 iptables -A OUTPUT -p udp -o eth0  --sport 5100 -j ACCEPT
 iptables -A INPUT -p tcp   --dport 5100 -j ACCEPT
 iptables -A INPUT -p udp   --dport 5100 -j ACCEPT
 iptables -A INPUT -p tcp   --sport 5100 -j ACCEPT
 iptables -A INPUT -p udp  --sport 5100 -j ACCEPT
 
Personally, I wouldn't do that. I have a Linux firewall with iptables, and
my 2 sisters connect to MSN Messanger just fine, and I haven't allowed any
special ports inbound. What I do is use connection tracking, like so:

iptables -A INPUT -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT 
iptables -A FORWARD -o ppp0 -m state --state NEW,RELATED,ESTABLISHED -j
ACCEPT 

Stateful firewall inspection, like that above, is much better than opening
up ports in the config, like you had to do with ipchains.

Cheers,
-- 
   Steve
 Whatever happened to all the Debian evangelists?
I ate them.
-- Andrew Suffield
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


RE: [SLUG] Welcome to the Movieglobe Mailing List

2003-03-22 Thread Adam W
 quote who=Jon Biddell
 
  Which is a prime example of why the list should be changed to 
  subscribers only can post - it would LESSEN the workload on our 
  overworked list
  admins...:-)
 
 I disagree - not only is this a bad example of the point, but 
 changing the list to subscribers-only would not lessen the 
 administrative workload.
 
 It's a bad example because it's exactly the sort of activity 
 that would get around the subscriber-only restriction. If a 
 spammer subscribes, then there's nothing stopping them from posting.

I can see your point in one respect - but if they do subscribe, admins
CAN kick them off and we don't get the mail.

Yes I know this adds more work for the admins - you're right about that.

Yeah its not all that much - but none is better than a little I guess.

So I guess I disagree and agree! :) That's my 2c... Its not worth that
much tho!

AW.

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[[SLUG] SSH Problem for Virtual Host Site]

2003-03-22 Thread Louis Selvon
Hi Sluggers:

Don't worry about this one.

I should kick myself on this one.

The server takes user name like this :

username#domain.com

I was trying username as :

[EMAIL PROTECTED]

Cheers

Louis.

Louis Selvon [EMAIL PROTECTED] wrote:
Hi Sluggers:

Encountered my first problem after the upgrade.

The virtual host site, although working across the web, won't allow me to ssh
to it anymore. I get access denied. It's not a password / username issue, as
I
can connect via ftp to this virtual site with the credentials.

I checked the virtual site status from the WEBppliance control panel, and it
says that ssh is enabled for that site.

I can ssh to the server, but not to virtual hosts sites.

Where can I check ssh status for virtual sites on the server or do a manual
enable as root ?

Cheers

Louis.

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] packages seem out of sync/corrupt

2003-03-22 Thread Ramon Buckland
Hi peoples,

I have just changed config of one of my linux boxes from
woody to testing (sarge no ?)

anways, I changed the apt/sources.list  (i use apt-proxy)
did the
# apt-get dist-upgrade 
(** wait wait wait, answer a few questions).

seemed all normal until I tried to install php4.
Fails on dependancies but my installs match all it's requirements.

querying via dpkg --status package-name # for all the unresolved
packages reveals I have the correct versions.

how do I fix this
can I get apt/dpkg to rebuild the table of versions installed. ?

-
saxon:~# apt-get install php4
...SNIP...
Sorry, but the following packages have unmet dependencies:
  php4: Depends: libbz2-1.0 but it is not going to be installed
Depends: libc6 (= 2.2.4-4) but it is not going to be installed
Depends: libdb2 (= 2:2.7.7-4) but it is not going to be
installed
Depends: libexpat1 (= 1.95.2-6) but it is not going to be
installed
Depends: libmm11 but it is not going to be installed
Depends: libpam0g (= 0.72-1) but it is not going to be
installed
Depends: libpcre3 but it is not going to be installed
Depends: zlib1g (= 1:1.1.4) but it is not going to be installed
Depends: apache-common (= 1.3.23) but it is not going to be
installed
Depends: fileutils (= 4.0-5)
E: Sorry, broken packages
-

--- an attempt to fix :-)
-
saxon:~# apt-get install libbz2-1.0 libc6 libdb2 libexpat1 libmm11
libpam0g libpcre3 zlib1g apache-common fileutils
Reading Package Lists... Done
Building Dependency Tree... Done
Sorry, libbz2-1.0 is already the newest version.
Sorry, libc6 is already the newest version.
Sorry, libdb2 is already the newest version.
Sorry, libexpat1 is already the newest version.
Sorry, libmm11 is already the newest version.
Sorry, libpam0g is already the newest version.
Sorry, libpcre3 is already the newest version.
Sorry, zlib1g is already the newest version.
Sorry, apache-common is already the newest version.
Sorry, fileutils is already the newest version.
0 packages upgraded, 0 newly installed, 0 to remove and 0  not upgraded.
-

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug