Re: Isn't it a security hole...

1996-08-15 Thread David L. Craig
As Joshua Stockwell wrote:

> >>> On Aug 14,  2:35pm, Bruce Perens wrote:
> >>> : Ahem. Let's not use the word "hacker" to mean
> >>> : "computer criminal" on this list. "cracker" is more
> >>> : appropriate.
> >>> >-- End of excerpt from Bruce Perens
> 
> 
> Christopher R. Hertel wrote:
> >>> Seconded.  The term "hacker" originally referred to one
> >>> who would "hack" at [working] code to make it better,
> >>> faster, cleaner, more fun, etc.  The term has been badly
> >>> misused in recent years, and for some has taken on a
> >>> new meaning.  Given the true meaning of the term, most
> >>> of the people on this list could be called "hacker".

> To be quite honest, I think it has two meanings now. And it
> is nothing very recent, "hacker" has been used to label
> computer criminals at least for the last 12 years. Like many
> other english words, you just have to keep in mind under
> what context it is being used and apply the most appropriate
> definition. I personally would never want to be called a
> hacker, because it has a third definition for me -- someone
> who spends way too much time on their computer :)

Actually, all the above meanings are Johnny-come-latelies.
The original meanings (there are several nuances) derive from
hack (n.), a contraction of hackney, which means a horse used
in common work.  Leading into meaning a carriage for hire,
operated by a hacker, this is also applied to motorized
taxicab operators (I know, I was one before I discovered
computers).  Thus, through personal experience, I can attest
that the other nuances -- hired out, trite or commonplace,
make common by overuse, someone hired to do monotonous
mindless drugery, a lackey -- all these meanings come from
that taken-for-granted nag.

So it was with great surprise that, over twenty years ago, I
encountered the new meaning of hacker, which is truely at
variance with the established conotation of the word.  I say
this new meaning should be given completely to the crackers,
especially since, thanks to the media, society has already
done so, as Joshua has pointed out.

Thus, I propose a new word be adopted to describe the clever
and benign inventor of quick technical fixes.  Rasher, from
"Shockwave Rider" usage, is a possible candidate, except
Brunner's rashers seemed to operate too much outside the
boundaries of ethics, delving into industrial espionage and
even sabotage, as I recall.  Ideas, anyone?



Tin+Suck

1996-08-15 Thread Gith

I've installed tin and suck as way to read newsgroups locally.
The problem is, i haven't figured out how to use tin to read the
newly downloaded articles. If someone is using the suck+tin 
combination for news, could you post here or e-mail me directly
on how to do it..
Thanks.



Re: telnet acces for root ?

1996-08-15 Thread Sherwood Botsford
On Thu, 15 Aug 1996, Ervin D. Walter wrote:

> David J. Evans writes:
> As a general rule, root should only be used for the actual
> administrating commands and not for things like reading email, news,
> etc...  So, most people (that I know of) that administer from afar do
> something like the following.  Each person that administrates (or just
> you if you like) has a real account that they telnet to.  From that
> account they su to root anytime they need to be superuser.  That means
> someone must crack your password *and* root's password before they get
> complete access to your system.  That is why root login is disabled
> from telnet by default.  It is also a good idea to have mail to root
> redirected to your real account so that root never has to read mail
> either.
> 
> Good Luck,
> Erv

The flip side of this is that you may prefer to create secure
root passwords, and put appropriate /.rhost entries on these
machines.  Otherwise your password is running across the net
for any packet sniffer to slurp.

Of course if your master machine is compromised, then so are the others.

IMHO the login is user then su isn't a viable method unless you are
aslo using some form of secure telnet, or one time keys, or kerberos.

Sherwood Botsford |Unsolicited email that advertises commercial 
Physics Dept  |activities will consitute a request for 
U of Alberta  |spellchecking of all words of less than three 
Edmonton, AB, |characters.  I charge $US500 for this service. 
T6G 2J1   |There is no warranty of correctness of this service. 




Re: Installing Netscape with dpkg

1996-08-15 Thread Pablo Bianucci
Hi Ken!

On Wed, 14 Aug 1996, Ken Gaugler wrote:

> Dpkg specifically asks for the beta 4 binary; can I get away with using
> one of the newer binaries?  Do I need to tweak anything to get it to
> install using dpkg?

This is what I've done. I got the 3.0b7 binary from their site; then
grabbed the 3.0b6 installer (source form) from ftp.debian.org (under the
rex hierarchy) and slightly modified it to use the 3.0b7 package (I don't
remember exactly the modifications, they were slight).
Then it worked, and it didn't seem to break anything. I'll tell you when I
upgrade Netscape again! 
Bye & Good Luck!

Pablo B.




Re: kernel size (was: How do I get GATEWAY2000 PS/2 mouse to work?)

1996-08-15 Thread Sherwood Botsford
On Thu, 15 Aug 1996, Casper BodenCummins wrote:

> This is an interesting issue. You might use similar justification for
> leaving all but the essentials out of the distributed kernel. This would
> encourage users to learn how to recompile the kernel, and demonstrate in
> doing so that it's surprisingly simple.
> 
> On the other hand, new users might think, 'This kernel doesn't even
> support mice [or whatever]. What a crummy kernel!'. Many are liable to
> come to this conclusion on discovering that only serial mice are (have
> been just recently) supported.
> 
> Since the project's maintainers have decided to compile in a fair range
> of support in the distributed kernel, it's quite reasonable to expect
> something as simple as support for a range of mice to be included.
> 
> The real question is whether the default kernel should be bloated with
> features, or pared down.
> 

I would think off hand that it would make sense to add another tier to 
the install layering.

1'st tier. Floppy set.

2'nd tier. You have a system that will boot off the hard disk.  Note
This means that you need to include lilo on the boot floppy system.  
Much as I like debian, my experience with slackware was a lot more
transparent for getting through this stage.  At this point you are
booting with a minimal kernel.  Since you aren't working with mice
the kernel has no mouse support.  However to boot off the hard disk
the kernel must have hard disk support.  This probably means support
for numerous scsi cards too.

3'rd tier. Configure to specific hardware.  This is where you would
tell it what type of sound card, cd-rom, network card.  Some of this
can be done by autodetect scripts. At the end of this tier you should
have a system that can ftp, mount nfs, mount cd-roms. 

4'th tier. Add rest of basic package.  Note:  At present dselect
allows you to pick and choose too early I think.  The basic required
stuff should be done as an automated install.  At the end of this you
have a minimalist, but basic unix machine. 

5'th tier. Normal dselect, where you can pick out what you want.
One of the recommended packages would be kernel builder, which would
guide you through the steps to either select one of a standard set,
or help you to roll your own.


Sherwood Botsford |Unsolicited email that advertises commercial 
Physics Dept  |activities will consitute a request for 
U of Alberta  |spellchecking of all words of less than three 
Edmonton, AB, |characters.  I charge $US500 for this service. 
T6G 2J1   |There is no warranty of correctness of this service. 




Re: squid

1996-08-15 Thread Jim Pick

I haven't used it myself, but I believe it is a cache for
surfing the WWW.  You give it a certain amount of disk
space (say 300MB), and you set Netscape to use it as a
proxy server.  So whenever you access a web page using
Netscape, it will pass the request to squid, and squid
will either serve up the page out of it's disk cache
(very fast), or if it doesn't have the latest version
of the document, fetch it from the internet.

For a single user, this probably doesn't do anything for
you that just increasing the cache size inside of Netscape
doesn't do.  But if you set up several users to use the
squid, then this can speed things up considerably, and
cut down on the amount of network traffic.  A proxy cache
also gives you more control over what is cached than
what Netscape provides.

Of course, there are drawbacks to using proxy caches --
the cache might cache something that it really shouldn't
(like the output from a CGI script), and you will not
be able to see the latest output.  Normally though,
this shouldn't happen.

How's that sound?

 - Jim



Re: SCSI and EIDE

1996-08-15 Thread Rob Browning
Ricardo Kleemann <[EMAIL PROTECTED]> writes:

> That's wonderful!
> 
> Now will Linux implement anything greater than RAID0? 
> Would you say your performance is significantly increased with striping?
> 
> How many drives can be striped?

That I don't know.  I'm not sure there's a (small) limit.  I didn't
find one in a cursory glance of the manpage for mdadd, or in a
similarly cursory look at the stuff in /usr/doc/mdutil.  md just
groups a number of physical disk partitions into one logical one,
/dev/md*.  Then you treat /dev/md* as the actual device, and you can
mkswap it, mke2fs it, whatever.  It doesn't state any limitations on
the number of partitions that can be added to a /dev/md*.  Note though
that with RAID0, you can't add more partitions after you have data on
an md device, and you have to create the device in exactly the same
fashion every time.  Normally this happens at boot from /dev/mdtab.

--
Rob



Re: telnet acces for root ?

1996-08-15 Thread Richard G. Roberto
On Thu, 15 Aug 1996, Tim O'Brien wrote:

> >I've set up a test PC with Debian 1.1 and want to 
> >administer it remotely but am refused a telnet connection 
> >as root ... is there a way around this ?  Do I have to give 
> 
> 
> The way I handle this problem is log in under my account and type
> 
> su root
> 
> Then it'll ask for the root password and bada-bing! You're root.
> 
> Hope this helps!
> Tim
> 

I use a program called "op" that works like "super".  Its
not quite as quick as "bada-bing" its more like "bada-bing
bada-boom" but there's much to be said about this mechanism.

It provides accountablility, more granular control over
rootly power, etc.

Bye ...

Richard G. Roberto
[EMAIL PROTECTED]
201-739-2886 - whippany, nj


--
***
Bear Stearns is not responsible for any recommendation, solicitation, offer or
agreement or any information about any transaction, customer account or account
activity contained in this communication.
***



Re: Where is the kernel-package package?

1996-08-15 Thread Susan G. Kleinmann
Hi David --
You asked:

> I've been searching all over my system and ftp.debian.org and I
> haven't found the kernel-package package.  ...
> Anybody know where to find it?

kernel-package is in rex/binary-all/misc  or rex/binary-i386/misc at
any Debian FTP site.

Good luck,
Susan Kleinmann



Re: pine has long delay when sending mail via smail

1996-08-15 Thread Joey Hess
> If you have configured pine with the address of your ISPs mail server
> (rather than the local one) then the smtp doesn't become involved with
> your local smail. I use pine with smtp and have no smail/sendmail
> installed at all! The timeout on smtp is fairly long (I don't remember
> exactly), so if there is no response from the target, you wait and wait.
> 
> If you already have smail, why use smtp? Just let smail deliver the mail.
..
> Use pine without smtp and let smail deliver the mail.

Thanks, that did it. I set pine to use my own host as the smtp server, and
have no more delays.

-- 
#!/usr/bin/perl -i\$q='$q',\$p='$p';eval\$q.\$\^I#\n"#[EMAIL PROTECTED]
$q='print"$p$^I\n',$p='#!/usr/bin/perl -i';eval$q.$^I#Joey Hess
  "He. He. He." - - Herman Toothrot




Re: How to debianize packages?

1996-08-15 Thread Rob Browning
[EMAIL PROTECTED] (Volker Ossenkopf) writes:

> To maintain a well organized system I would like to install them
> with the Debian package installation tools and not by hand or at
> least to register them when being installed as debian packages.
>
> To focus the problem: How do I convert tar.gz archives (when 
> no installation scripts are needed) into debian packages?
> How do I create a debian archive from installed files ?

This is really not supported well, if at all.  You should probably
just install these things in /usr/local.  For the most part Debian
doesn't touch that dir.  It's specifically for this sort of thing.

Then, if there are really great things that you'd like to see as
debian packages, you might consider packaging them yourself, and
adding them to the distribution.

--
Rob



Re: Spreadsheet for Debian?

1996-08-15 Thread Dale Scheetz
On Thu, 15 Aug 1996, Mark Phillips wrote:

> Hi,
> 
> Are there any spreadsheets packaged for Debian?

/math/oleo-1.6-6.deb is the GNU spreadsheet program.

> 
> Also, how would I go about finding this information out for myself?
> (I looked in /binary/misc and couldn't see anything likely.)
> 
Well, first I would have looked in math. If you have a packages file, you
can:

grep spreadsheet Packages

Adding a "-B 10" you get the other information about this package that
might be helpful.

Luck,

Dwarf

  --

aka   Dale Scheetz   Phone:   1 (904) 877-0257
  Flexible Software  Fax: NONE 
  Black Creek Critters   e-mail:  [EMAIL PROTECTED]

 If you don't see what you want, just ask --



Re: SCSI and EIDE

1996-08-15 Thread Ricardo Kleemann
That's wonderful!

Now will Linux implement anything greater than RAID0? 
Would you say your performance is significantly increased with striping?

How many drives can be striped?

On 15 Aug 1996, Rob Browning wrote:

> Ricardo Kleemann <[EMAIL PROTECTED]> writes:
> 
> > Good point about RAID0.
> > 
> > I know linux's implementation of RAID0 is with the MD program. Do you 
> > know if that's fully functional, and if so, is there a Debian package for 
> > it? How is it used?
> 
> I'm using it on two machines in the lab.  One has two identical
> Quantum Fireballs, and the other has a Fireball and a Western Digital
> Caveat (ahem Caviar).  On each machine most of the partitions are
> striped, but at least one is not.  It works fine.
> 
> You need to compile a kernel with bultiple device/RAID0 support and
> you need to install the debian mdutils package.  Then read the stuff
> in /usr/doc/mdutils.  That's it.  The md package doesn't care if the
> drives are the same type, or even on the same kind of bus.  That's the
> advantage to a software implementation.  Granted I would expect
> performance to be best when you have 2 identical drives on the same
> kind of bus...
> 
> --
> Rob
> 



Re: Isn't it a security hole...

1996-08-15 Thread Stephen Masterman
>>Perhaps a bit, but not too much. The passwords in /etc/passwd are encrypted
>>through one-way DES encryption.  It's much easier to simply guess users'
>>passwords, the majority of which are first-names or first-names followed
>>by a number.
>>
>Actually, cracking a unix passwd file is quite easy, even for those
>with minimal computer knowledge.  With widely available programs like Crack
>(UNIX), Crakerjack (DOS), and root_crack(DOS) anybody with a CPU >386 can
>crack the DES encryption with a bit of time.

My understanding of this situation (and please correct me if I'm wrong) is
that the crypt() routine used by passwd is a truly one-way hashing algorithm,
i.e. there simply is no way to go from an encrypted password back to the
original.  Actually, I seem to remember reading that the crypt routine uses
the password in combination with a "random" (based on time of day) string of
bits (called the "salt", can't remember the length, I think it was 12 bits, 
giving 4096 possible encryptions of any given string), and that it uses this
new salt+password as its key in encrypting a string of 0's. Given this, the 
only way to crack the passwords is to compile a dictionary of possible 
passwords, by taking all the likely strings to be used as passwords and 
encrypting each one 4096 times, once for each salt.  Once you have this 
dictionary made, it can be distributed to anyone to use as the foundation of
their crack attack, but if you wish to hack someone personally, i.e. by 
checking their first name, etc., you'll have to add these to the dictionary
(unless common names are also part of the original dictionary). And it should
be plain how anyone with reasonable password-selection skills can be pretty
much immune to this attack, e.g. by using non-word strings, by having 
punctuation, by varying the case of your characters, etc.  If the max passwd
length is 8 bytes, then at a quick estimate it seems that there are 
256^8 * 4096 different possible passwords...?

I think this is a fascinating subject, I hope I haven't gotten it too wrong.
Please reply with corrections.

Thanks,
Steve



Re: dselect returns error code

1996-08-15 Thread Heiko R. Selber
On Thu, 15 Aug 1996, Heiko Schlittermann wrote:
> Heiko R. Selber wrote:
> : I started dselect in order to install various packages after I had the base 
> : system running.
> : 
> : When I tried it once more I got the cryptic message:
> : 
> :   internal error at -e line 12  chunk 16
> 
> My private solution: changed to the debian top level binary
> (stable/binary) and called ``dpkg -iGROEB'', run this twice and most of
> the conflicts were resolved ...

Yes, "dpkg -iGROEB." (with a dot) worked.

I think this bug deserves a bug number.

> Heiko
Heiko
-
Heiko Selber (Fritz-Haber-Institut Berlin)   | Vs lbh pna ernq guvf   |
http://www.fhi-berlin.mpg.de/~selber | lbh unir jnfgrq lbhe gvzr. |
email: [EMAIL PROTECTED]  | Urvxb Fryore   |
Phone:+49-30-8413-4574, Fax:+49-30-8413-4686 ||



Re: pine has long delay when sending mail via smail

1996-08-15 Thread Dale Scheetz
On Wed, 14 Aug 1996, Joey Hess wrote:

> I'm using pine as my email program, and smail as the MTA. When I send an
> email, pine appears to wait until smail either delivers the mail or gives
> up and queues it. It displays:
> 
>   [Sending mail |  100%   |]
> 
> at the bottom of the screen, and doesn't allow you to do anything else. In
> some cases (emailing hosts that there's currently no route to on the
> network), I've had to wait as long as 5 minutes before smail gives up
> and queues the mail. It's really annoying that pine can't send mail in the
> background. 
> 
> While pine is stuck waiting for smail, I see these processes running:
> 
> [EMAIL PROTECTED] ~>ps -ax |grep sendmail
> 13292  p1 S0:00 /usr/sbin/sendmail -bs -odb -oem 
> 13293  p1 S0:00 /usr/sbin/sendmail -bs -odb -oem 
> 13296  p0 S0:00 grep sendmail 
> 
> According to smail's documentation, -odb should deliver mail in the
> background, however:
> 
>-odb   Deliver  mail in background, if mail delivery is to
>   be performed.  Background delivery is not currently
>   supported in the SMTP modes; foreground delivery is
>   used instead.
> 
> And of course, I am sending this mail via smtp :-(

If you have configured pine with the address of your ISPs mail server
(rather than the local one) then the smtp doesn't become involved with
your local smail. I use pine with smtp and have no smail/sendmail
installed at all! The timeout on smtp is fairly long (I don't remember
exactly), so if there is no response from the target, you wait and wait.

If you already have smail, why use smtp? Just let smail deliver the mail.

> 
> Other programs, like elm and mail can send mail in the background with no

But elm doesn't do smtp.

> delay. I thought about maybe having smail just spool the mail, and then
> deliver when mail's cron job runs smail, but my work requires a constant
> stream of email, and that'd just slow things down to much :-(
> 
> Does anyone know of a solution, besides changing over to sendmail or not
> using pine?

Use pine without smtp and let smail deliver the mail.

Luck,

Dwarf

  --

aka   Dale Scheetz   Phone:   1 (904) 877-0257
  Flexible Software  Fax: NONE 
  Black Creek Critters   e-mail:  [EMAIL PROTECTED]

 If you don't see what you want, just ask --



Re: Latex (Quite long)

1996-08-15 Thread Michael Meskes
Kari Davidsson writes:
>   I was just installing again Latex, after some accidental purging
> of my old Latex setup. Among the things that I installed are:
> 
>   latex   2e-7
>   kpathsea2.6-2   Path searching "tool".
>   mfbasfnt1.0-4   Tex default fonts.
> .
> .
> >(/usr/lib/texmf/tex/latex/base/t1enc.stykpathsea: Running MakeTeXTFM 
> >>dcr1200.tfm 
> >Running MakeTeXPK dcr1200.tfm
> >mf \mode:=nullmode; mag:=1; scrollmode; input dcr1200 \ >This is METAFONT, Version 2.71 (C version 6.1)
> >
> >kpathsea: Running MakeTeXMF dcr1200.mf 
> >! I can't find file `dcr1200.mf'.
> ><*> ...nullmode; mag:=1; scrollmode; input dcr1200
> >  

This is a well known problem with mfbasfnt. Please upgrade to version -5.
Note, that you have to install mfdcfnt, too, since the dc fonts are no
longer free.

That'll do it.

Michael
-- 
Michael Meskes   |_  __  
[EMAIL PROTECTED] |   / ___// / // / / __ \___  __
[EMAIL PROTECTED]  |   \__ \/ /_  / // /_/ /_/ / _ \/ ___/ ___/
[EMAIL PROTECTED]|  ___/ / __/ /__  __/\__, /  __/ /  (__  )
Use Debian Linux!| //_/  /_/  //\___/_/  //



Re: dselect returns error code

1996-08-15 Thread Heiko Schlittermann
Heiko R. Selber wrote:
: 
: I started dselect in order to install various packages after I had the base 
: system running.
: 
: When I tried it once more I got the cryptic message:
: 
:   internal error at -e line 12  chunk 16

Yes, I saw this too ...


My private solution: changed to the debian top level binary
(stable/binary) and called ``dpkg -iGROEB'', run this twice and most of
the conflicts were resolved ...



Heiko
--
email : [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
pgp   : A1 7D F6 7B 69 73 48 35  E1 DE 21 A7 A8 9A 77 92 
finger: [EMAIL PROTECTED] [EMAIL PROTECTED]



Re: telnet acces for root ?

1996-08-15 Thread Brian C. White
> I've set up a test PC with Debian 1.1 and want to
> administer it remotely but am refused a telnet connection
> as root ... is there a way around this ?  Do I have to give
> root privs. to a named user or can I enable telnet
> connections as root ?

Generally, it is better for people to login with their regular
id and then either do "su -" or use 'sudo' for privalidged work.
The reasoning behind this is that "root" is a known user and
thus more vulnerable to cracking attempts over the net.  By
forcing login with a regular userid, a cracker must first learn
that userid and then crack two passwords to get root access.

Brian
   ( [EMAIL PROTECTED] )

---
In theory, theory and practice are the same.  In practice, they're not.




Re: telnet acces for root ?

1996-08-15 Thread Ervin D. Walter
David J. Evans writes:
> I've set up a test PC with Debian 1.1 and want to 
> administer it remotely but am refused a telnet connection 
> as root ... is there a way around this ?  Do I have to give 
> root privs. to a named user or can I enable telnet 
> connections as root ?
> 
> The machine normally has no screen or keyboard - hence the 
> need for telnet access !
> 
> Thanks in advance
> 

As a general rule, root should only be used for the actual
administrating commands and not for things like reading email, news,
etc...  So, most people (that I know of) that administer from afar do
something like the following.  Each person that administrates (or just
you if you like) has a real account that they telnet to.  From that
account they su to root anytime they need to be superuser.  That means
someone must crack your password *and* root's password before they get
complete access to your system.  That is why root login is disabled
from telnet by default.  It is also a good idea to have mail to root
redirected to your real account so that root never has to read mail
either.

Good Luck,
Erv

-- 
  ,,,
 (o o)
-oOOo-(_)-oOOo-
Different all twisty a of in - [EMAIL PROTECTED]
maze are you, passages little.  - [EMAIL PROTECTED]

PGP Key fingerprint =  A5 AB 25 7D 7A FD 4D FE  BE 21 47 60 0C DC 67 9E



Re: Unidentified subject!

1996-08-15 Thread Jim Pick

> I've just upgraded my web server and also switched from Slackware to Debian
> Linux.  I must admit Debian is definitely a very impressive package.
> 
> There are problems even in a wonderful land, though.  I have only one
> registered hostname (one IP address for this machine).  Is it possible for
> me to leave the old server running on Slackware and setup a new web site on
> the new system?  Does anybody know what is the best thing to do make this
> migration possible?
> 
> Many thanks,
> Lan Ha
> SFSU Career Center
> 
> 

Assuming you have two machines, one Slackware and one Debian.  The Slackware 
one
has a staticly assigned IP address from your ISP, and the Debian one is on a 
separate subnet which is not accessable from the Internet.  If you are using an
unassigned subnet, you should use one reserved for private use by the Internet
Assigned Numbers Authority (ie. 192.168.0.0).  You can set up masquerading on
the Slackware box so that the second PC can access the Internet.  To do this,
you need to compile masquerading support into the kernel, and use ipfwadm.

But you want to set up a new web site on the new system?  Accessable from the
internet?  Well I think you can also use masquerading to make it appear that
the web server that is really on the Debian box appear to be located at
port 80 on the Slackware box.  I have never tried this though, but it looks
technically feasible.  If you want to run two web-servers, one on each machine,
you could run one on a non-standard port.

Of course, if you already have the option of using another IP address, set the
Debian machine up on that, and set the DNS to point at it for www..com.

Hope this helps,

 - Jim







Re: telnet acces for root ?

1996-08-15 Thread Heiko R. Selber
On Thu, 15 Aug 1996, David J. Evans wrote:

> I've set up a test PC with Debian 1.1 and want to 
> administer it remotely but am refused a telnet connection 
> as root ... is there a way around this ?  Do I have to give 
> root privs. to a named user or can I enable telnet 
> connections as root ?

I think it's a good idea not to let a privileged user log in (just in case
there is a security hole somewhere). 

You can always telnet in as a normal user and use 'su' in order to get
root privileges. Like this: 

 BEGIN TELNET EXAMPLE 
beta:~$ telnet rudi
Trying 141.14.130.66...
Connected to rudi.RZ-Berlin.MPG.DE.
Escape character is '^]'.

Linux 1.2.13 (rudi.RZ-Berlin.MPG.DE) (ttyp4)


rudi login: hok
Password: 
Last login: Thu Aug 15 09:57:28 from :0.0
Linux 1.2.13.

Endless Loop: n., see Loop, Endless.
Loop, Endless: n., see Endless Loop.
-- Random Shack Data Processing Dictionary
Du bist mir doch der liebste, Heiko !
rudi:~$ su -
Password:

Welcome, your Highness!
rudi:~# 
 END TELNET EXAMPLE 

Heiko
-
Heiko Selber (Fritz-Haber-Institut Berlin)   | Vs lbh pna ernq guvf   |
http://www.fhi-berlin.mpg.de/~selber | lbh unir jnfgrq lbhe gvzr. |
email: [EMAIL PROTECTED]  | Urvxb Fryore   |
Phone:+49-30-8413-4574, Fax:+49-30-8413-4686 ||



Re: Isn't it a security hole...

1996-08-15 Thread Joshua Stockwell
>>> On Aug 14,  2:35pm, Bruce Perens wrote:
>>> : Ahem. Let's not use the word "hacker" to mean "computer criminal" on
>>> : this list. "cracker" is more appropriate.
>>> >-- End of excerpt from Bruce Perens


Christopher R. Hertel wrote:
>>> Seconded.  The term "hacker" originally referred to one who would
>>> "hack" at [working] code to make it better, faster, cleaner, more fun,
>>> etc.  The term has been badly misused in recent years, and for some has
>>> taken on a new meaning.  Given the true meaning of the term, most of
>>> the people on this list could be called "hacker".

To be quite honest, I think it has two meanings now. And it is nothing
very recent, "hacker" has been used to label computer criminals at
least for the last 12 years. Like many other english words, you just
have to keep in mind under what context it is being used and apply the
most appropriate definition. I personally would never want to be
called a hacker, because it has a third definition for me -- someone
who spends way too much time on their computer :)

-Josh Stockwell



squid

1996-08-15 Thread Tim O'Brien
Could someone please explain a little more about the linux software 
called squid? I read the homepage, but I still don't completely get
the picture What is it? 

I know it does some caching, but from what I read I really can't see 
what it's good for.. I know there's a use, I just don't understand
what it is. 

Thanks!

Tim 


---
  I am Pentium of Borg. Division is futile. You will be APPROXIMATED! 

  [EMAIL PROTECTED]  <-- (Primary email)
  
---
 



Re: telnet acces for root ?

1996-08-15 Thread Tim O'Brien
>I've set up a test PC with Debian 1.1 and want to 
>administer it remotely but am refused a telnet connection 
>as root ... is there a way around this ?  Do I have to give 


The way I handle this problem is log in under my account and type

su root

Then it'll ask for the root password and bada-bing! You're root.

Hope this helps!
Tim


---
  I am Pentium of Borg. Division is futile. You will be APPROXIMATED! 

  [EMAIL PROTECTED]  <-- (Primary email)
  
---
 



RE: Isn't it a security hole...

1996-08-15 Thread Casper BodenCummins
Quite true, but by all accounts crackers dislike the name. You won't
succeed without a majority adopting the new term, and I'm afraid that
involves the cooperation of the culprits themselves. Otherwise, I'm sure
this long-running debate would have concluded long ago.

I think we should just accept that we're stuck with the double meaning.
As with other ambiguous words, the context usually points to the true
meaning.

Casper Boden-Cummins.

>--
>From:  Christopher R. Hertel[SMTP:[EMAIL PROTECTED]
>Sent:  15 August 1996 15:10
>To:debian-user@lists.debian.org
>Cc:The recipient's address is unknown.
>Subject:   Re: Isn't it a security hole...
>
>On Aug 14,  2:35pm, Bruce Perens wrote:
>: Ahem. Let's not use the word "hacker" to mean "computer criminal" on
>: this list. "cracker" is more appropriate.
>>-- End of excerpt from Bruce Perens
>
>Seconded.  The term "hacker" originally referred to one who would
>"hack" at [working] code to make it better, faster, cleaner, more fun,
>etc.  The term has been badly misused in recent years, and for some has
>taken on a new meaning.  Given the true meaning of the term, most of
>the people on this list could be called "hacker".
>
>Chris -)-
>
>-- 
>Christopher R. Hertel -)-   University of Minnesota
>[EMAIL PROTECTED]  Networking and Telecommunications Services
>
>



How to debianize packages?

1996-08-15 Thread Volker Ossenkopf
I have become more or less convinced to switch to Debian 1.1
in the next large update of my system in the next weeks.

However, until now I have not yet found an answer on how to handle
all those non-standard packages like pgplot, wip, vile and
the hundreds of other tools which are not available as debian
packages but simply as tar.gz archives. To maintain a well
organized system I would like to install them with the
Debian package installation tools and not by hand or at least
to register them when being installed as debian packages.

To focus the problem: How do I convert tar.gz archives (when 
no installation scripts are needed) into debian packages?
How do I create a debian archive from installed files ?

Any help appreciated.

Best wishes -- Volker


  Volker Ossenkopf,  E-mail: [EMAIL PROTECTED]

  Astrophysikalisches Institut und\\///
   Universitaets-Sternwarte Jena ( . . ) Tel.: 03641/630324
--oOo--(_)--oOo-



Re: SCSI and EIDE

1996-08-15 Thread Rob Browning
Ricardo Kleemann <[EMAIL PROTECTED]> writes:

> Good point about RAID0.
> 
> I know linux's implementation of RAID0 is with the MD program. Do you 
> know if that's fully functional, and if so, is there a Debian package for 
> it? How is it used?

I'm using it on two machines in the lab.  One has two identical
Quantum Fireballs, and the other has a Fireball and a Western Digital
Caveat (ahem Caviar).  On each machine most of the partitions are
striped, but at least one is not.  It works fine.

You need to compile a kernel with bultiple device/RAID0 support and
you need to install the debian mdutils package.  Then read the stuff
in /usr/doc/mdutils.  That's it.  The md package doesn't care if the
drives are the same type, or even on the same kind of bus.  That's the
advantage to a software implementation.  Granted I would expect
performance to be best when you have 2 identical drives on the same
kind of bus...

--
Rob



Re: telnet acces for root ?

1996-08-15 Thread Andre Koopal

> I've set up a test PC with Debian 1.1 and want to 
> administer it remotely but am refused a telnet connection 
> as root ... is there a way around this ?  Do I have to give 
> root privs. to a named user or can I enable telnet 
> connections as root ?
> 
> The machine normally has no screen or keyboard - hence the 
> need for telnet access !
> 
> Thanks in advance
> 
> David 
> 
Try to never log in directly as root, because you can make mistakes, and
you don't know who performs the tasks. Log in as yourself and then use
su to gain root-privs.

Regards,

Andre Koopal



dosemu

1996-08-15 Thread Miro Torrielli
Congrats on the super distribution guys -- I'm switching forever
from Solaris & Win95. They simply can't keep up with the blinding
speed at which the unix-linux-net community is developing.
The magic ingredient? Free software!!

Well, I have installed and set up Debian 1.1.5 via ftp with
no probs. There is a problem though with the dosemu package,
it seems to have been compiled on an old system, and can not
find an X shared library. In fact, the files within the package
are dated November 95. Can anyone help, or have I missed something?

Thanx :-)



RE: telnet acces for root ?

1996-08-15 Thread Eric Ogren
   David - 

   You must add ttyp0 (assuming your the only person that wants to telnet 
to the box to the /etc/securetty file to allow root logins. If your not the 
only telnetter, you have to add ttyp0 -> ttyp12 or so, which should let you 
login as root even if 11 people are telnetting in already.

Eric

--
From:   David J. Evans[SMTP:[EMAIL PROTECTED]
Sent:   Thursday, August 15, 1996 9:08 AM
To: Debian User
Subject:telnet acces for root ?

I've set up a test PC with Debian 1.1 and want to 
administer it remotely but am refused a telnet connection 
as root ... is there a way around this ?  Do I have to give 
root privs. to a named user or can I enable telnet 
connections as root ?

The machine normally has no screen or keyboard - hence the 
need for telnet access !

Thanks in advance

David 

__
David J. Evans
AMS, Virology Research Group, The University of Reading
Whiteknights, P.O. Box 228, Reading RG6 6AJ
Tel : +44 (0)118 9318893  Fax : +44 (0)118 9316537
http://skpc10.reading.ac.uk/







Re: telnet acces for root ?

1996-08-15 Thread Steffen Mueller
On Thu, 15 Aug 1996, David J. Evans wrote:

Hi Davis,

> I've set up a test PC with Debian 1.1 and want to 
> administer it remotely but am refused a telnet connection 
> as root ... is there a way around this ?  Do I have to give 
> root privs. to a named user or can I enable telnet 
> connections as root ?

This is done intentionally since offering direct root access via telnet is
considered a security holw. 

You either could use your normal login accound and then su to root or you
could ENABLE the root access via telnet.

Lease have a look to /etc/securetty where all ttys are listed thru which
root login is allowed.

> The machine normally has no screen or keyboard - hence the 
> need for telnet access !

That's okay but personally I only allow root access thru the console and
su via my normal account.

Greetings,

Steffen
-
Steffen R.Mueller   __  ___ _   _ email: [EMAIL PROTECTED]
NTG Netzwerk und Telematic GmbH \ \/ / (_)_ __ | | __ fax  : +49 721 9652 210
Geschaeftsbereich Xlink  \  /| | | '_ \| |/ / phone: +49 721 9652 211
Vincenz-Priessnitz-Str. 3/  \| | | | | |   <  RIPE : SM25-RIPE
D-76131 Karlsruhe, Germany  /_/\_\_|_|_| |_|_|\_\ WWW.Xlink.net/~steffen



dosemu

1996-08-15 Thread Miro Torrielli
Congrats on the super distribution guys -- I'm switching forever
from Solaris & Win95. They simply can't keep up with the blinding
speed at which the unix-linux-net community is developing.
The magic ingredient? Free software!!

Well, I have installed and set up Debian 1.1.5 via ftp with
no probs. There is a problem though with the dosemu package,
it seems to have been compiled on an old system, and can not
find an X shared library. In fact, the files within the package
are dated November 95. Can anyone help, or have I missed something?

Thanx :-)



Re: Isn't it a security hole...

1996-08-15 Thread Christopher R. Hertel
On Aug 14,  2:35pm, Bruce Perens wrote:
: Ahem. Let's not use the word "hacker" to mean "computer criminal" on
: this list. "cracker" is more appropriate.
>-- End of excerpt from Bruce Perens

Seconded.  The term "hacker" originally referred to one who would
"hack" at [working] code to make it better, faster, cleaner, more fun,
etc.  The term has been badly misused in recent years, and for some has
taken on a new meaning.  Given the true meaning of the term, most of
the people on this list could be called "hacker".

Chris -)-

-- 
Christopher R. Hertel -)-   University of Minnesota
[EMAIL PROTECTED]  Networking and Telecommunications Services



Unidentified subject!

1996-08-15 Thread David_Oswald
 hey ...
 
 I would like to mount a filesystem from my crummy IBM RS6000 R20 onto 
 my massive 486-66 w 8 mb of ram.
 
 
 
 THE QUESTION - How big can a Debian ( and/or slakware) filesystem be??
 
  - AND is that size limitation consistent with nfs mount   
points?
 ALSO:
 
  - are there any nfs howtos that would be helpful to pick  
through?
 
  - Where can I find docs about security tips for/with NFS?
 
 
 
 As a point of reference...
 
AIX 3.2.5 can mount a file system of _ONLY_ 2 gig !!!
 
AIX 4.1.4 can mount filesystems of 64 gig.
 
AIX 4.2 - rumor has it 4.2 will work with 128 gig filesystems.
 
 
 
 
 mucho Thanxo in advance ...



telnet acces for root ?

1996-08-15 Thread David J. Evans
I've set up a test PC with Debian 1.1 and want to 
administer it remotely but am refused a telnet connection 
as root ... is there a way around this ?  Do I have to give 
root privs. to a named user or can I enable telnet 
connections as root ?

The machine normally has no screen or keyboard - hence the 
need for telnet access !

Thanks in advance

David 

__
David J. Evans
AMS, Virology Research Group, The University of Reading
Whiteknights, P.O. Box 228, Reading RG6 6AJ
Tel : +44 (0)118 9318893  Fax : +44 (0)118 9316537
http://skpc10.reading.ac.uk/




Re: MIDI & Debian?

1996-08-15 Thread Richard G. Roberto
On Wed, 14 Aug 1996, Nick Busigin wrote:

> On Wed, 14 Aug 1996, Richard G. Roberto wrote:
> 
> > Last night I installed kernel 2.0.12 and now I have sound!
> > Well, I can use auplay to play a .wav file anyway.  I have
> > no idea how to test the rest of my board's functionality.
> > Does anybody know of a digital audio package for Debian that
> > will let me record digital audio?  How about a MIDI package
> > that will let me at least play MIDI files?
> 
> Richard,
> 
> Take a look at the Linux Sound HOWTO document that can be found in
> comp.os.linux.answers as well as other places.
> 
> Best regards,
> 
>  Nick
> 
> --
> Nick Busigin[EMAIL PROTECTED]
> --
> 
Nick,

Yes, I read the HOWTO and found it very informative.  It
does not, however, discuss testing MIDI capabilities.  Nor
does it discuss testing full duplex digital capabilities.  I
did find two somewhat useful programs however.  Jazz is a
free midi program for X that seemed to be on the right track
(no pun intended).  This confirmed my midi capability was
working, although my card can use FM and WaveTable systhesis
and it sounded like FM.  I'll have to check into that
further.  There is another free sequencer type program for X
that I found confusing and not generally useful, but someone
else may.  It's called Rosegarden.

There's a reference URL at:

http://www.digiserve.com/ar/linux-snd/

This has many links to useful places for Linux sound!

One thing about that HOWTO, though.  I have a true MPU-401
capable card, so according to the HOWTO and the Readme.cards
in the kernel sources, I shouldn't have any problems
enabling this _and_ the audiotrix pro.  But the mpu-401
driver complains about a conflict.  Also, the 2.0.12 kernel
does not have these sound drivers available as modules!  I
think I'm going to recompile the kernel without the MPU-401
driver and see what happens.  I have a few other things to
do first, but I should get to this this weekend.  I may have
other news on MIDI/Sound stuff by then as well.  I'll gladly
share it with the list if it seems useful.

Thanks!

Richard G. Roberto
[EMAIL PROTECTED]
201-739-2886 - whippany, nj


--
***
Bear Stearns is not responsible for any recommendation, solicitation, offer or
agreement or any information about any transaction, customer account or account
activity contained in this communication.
***



Re: Spreadsheet for Debian?

1996-08-15 Thread Dominik Kubla

Look at GNU oleo, it's in the MATH section.

Dominik



Re: Where is the kernel-package package?

1996-08-15 Thread branderh
> 
> what is kernel-package?

a bunch of script to make building your own kernel easier.

Erick



dselect returns error code

1996-08-15 Thread Heiko R. Selber
Hi Net,

(thanks for the help with nfs.o)

here is the next problem:

I started dselect in order to install various packages after I had the base 
system running.

I reached the nfs server, selected gcc-2.7.2 amongst others, resolved the 
occasional conflict, and started install...

But the first package fails already:
(again quoted by heart)

  gcc-2.7.2-8 could not be installed (depends on binutils-2.6-2 which is 
  not installed)

  installation script returned error status...
  (abort|retry|ignore)

Needless to say, binutils *is* installed (at least it is selected for 
installation).

When I tried it once more I got the cryptic message:

  internal error at -e line 12  chunk 16


advthanksance

Heiko

PS:
I am slowly approaching the point where I expect a
"general protection violation(TM)" from Debian.
I consider this a bad sign.
-
Heiko Selber (Fritz-Haber-Institut Berlin)   | Vs lbh pna ernq guvf   |
http://www.fhi-berlin.mpg.de/~selber | lbh unir jnfgrq lbhe gvzr. |
email: [EMAIL PROTECTED]  | Urvxb Fryore   |
Phone:+49-30-8413-4574, Fax:+49-30-8413-4686 ||



RE: Isn't it a security hole...

1996-08-15 Thread Casper BodenCummins
Guy Maor wrote:

>> Truly cracking a passwd file would take more than "a bit of time".  Or
>> Maybe you're an extremely patient person.

It may take a while in general, but poor maintenance and naive password
choice often leads to surprising results - besides, the increase in
low-cost high-power CPUs are narrowing the gap. The following excerpt
from 'How to improve the security of your site by breaking into it' by
Dan Farmer and Wietse Venema illustrates this point:

---begin
quote---
After receiving mail from a site that had been broken into from one of
our systems, an investigation was started.  In time, we found that the
intruder was working from a list of ".com" (commercial) sites, looking
for hosts with easy-to steal password files.  In this case,
"easy-to-steal" referred to sites with a guessable NIS domainname and an
accessible NIS server.  Not knowing how far the intruder had gotten, it
looked like a good idea to warn the sites that were in fact vulnerable
to password file theft.  Of the 656 hosts in the intruder's hit list, 24
had easy-to-steal password files -- about one in twenty-five hosts!  One
third of these files contained at least one password-less account with
an interactive shell.  With a grand total of 1594 password-file entries,
a ten-minute run of a publically-available password cracker (Crack)
revealed more than 50 passwords, using nothing but a low-end Sun
workstation.  Another 40 passwords were found within the next 20
minutes; and a root password was found in just over an hour. The result
after a few days of cracking: five root passwords found, 19 out of 24
password files (eighty percent) with at least one known password, and
259 of 1594 (one in six) passwords guessed.
---end
quote-

>Casper Boden-Cummins.



kernel size (was: How do I get GATEWAY2000 PS/2 mouse to work?)

1996-08-15 Thread Casper BodenCummins
This is an interesting issue. You might use similar justification for
leaving all but the essentials out of the distributed kernel. This would
encourage users to learn how to recompile the kernel, and demonstrate in
doing so that it's surprisingly simple.

On the other hand, new users might think, 'This kernel doesn't even
support mice [or whatever]. What a crummy kernel!'. Many are liable to
come to this conclusion on discovering that only serial mice are (have
been just recently) supported.

Since the project's maintainers have decided to compile in a fair range
of support in the distributed kernel, it's quite reasonable to expect
something as simple as support for a range of mice to be included.

The real question is whether the default kernel should be bloated with
features, or pared down.

Casper Boden-Cummins.

>--
>From:  [EMAIL PROTECTED]:[EMAIL PROTECTED]
>Sent:  14 August 1996 22:51
>To:debian-user@lists.debian.org
>Cc:The recipient's address is unknown.
>Subject:   Re: How do I get GATEWAY2000 PS/2 mouse to work ?
>
>As Mark Rahner said:
>> Todd, I'm sure that you're the neatest computer guy on your block, but
>> I think that you missed the original poster's point.  Users shouldn't
>> have to recompile their kernels to get their PS/2 mice to work.  Such a
>> requirement is enough to keep many potential Debian users from successfully
>> making the leap from MSStuff to Debian.
>
>I will unfortunately continue this thread with nothing but opinions. I
>think that any person wanting to run Unix on their own computer should
>be
>able to 1) download files, 2) uncompress and untar files, 3) type 'make
>config', and the least 4) make a boot floppy. They don't even have to
>understand LILO.
>
>Making a new kernel is not that difficult.
>
>--gilbert
>__
>Gilbert Ramirez Jr. [EMAIL PROTECTED]
>University of Texas http://merece.uthscsa.edu/gram
>Health Science Center at San AntonioUniversity Health System
>
>



Unidentified subject!

1996-08-15 Thread Lan Ha
I've just upgraded my web server and also switched from Slackware to Debian
Linux.  I must admit Debian is definitely a very impressive package.

There are problems even in a wonderful land, though.  I have only one
registered hostname (one IP address for this machine).  Is it possible for
me to leave the old server running on Slackware and setup a new web site on
the new system?  Does anybody know what is the best thing to do make this
migration possible?

Many thanks,
Lan Ha
SFSU Career Center




Re: Where is the kernel-package package?

1996-08-15 Thread Lawrence Chim
what is kernel-package?

>  Hello,
> 
> I've been searching all over my system and ftp.debian.org and I
> haven't found the kernel-package package.  I've got the Linux-2.0.12
> source and I'd like to build a custom debian kernel image.
> 
> Anybody know where to find it?
> 
> Thanks.
> -- 
> 
> David M. Cooke   [EMAIL PROTECTED]
> 
> 



Re: How do I get GATEWAY2000 PS/2 mouse to work ?

1996-08-15 Thread Todd Tyrone Fries
> >From [EMAIL PROTECTED] Tue Aug 13 16:44:48 1996
> Someone (sorry, lost name) wrote:
> > -- one never knows if/when PS/2 mouse is going to be available in a 
> >downloaded kernel, whereas serial support is virtually always there.
> 
> Todd Fries ([EMAIL PROTECTED]) responded:
> > Oh give me a break.

> Users shouldn't have to recompile their kernels to get their PS/2 mice to
> work.

Fine.  Tell me your kernel version number and processor type and I'll have
ps/2 drivers targz'ed and uuencoded to you within a few hours.

> In my case, I used to select a module named psaux, and my PS/2 mouse
> worked fine.  Recently I upgraded to Debian 1.1, circa July 1st.  As far
> as I can tell, the psaux module is no longer an option.

Sounds like someone forgot something to me.  I haven't started using Debian
yet; I am going to make a gradual migration as I like to do everything on
my system so I understand what is going on.  Needless to say, I would never
trust a menu system to do things I should be doing myself anyway, but since
you seem to, you are considerably correct in saying that if a piece of code
is not in the kernel and it can be compiled as a module, I see no reason why
it cannot be optionally loaded and included with a distribution.  But that is
my personal opinion and in no way represents Debian.


> Coincidentally, my mouse no longer works (when I "startx", the system says
> "Fatal server error: Cannot open mouse (No such device)").
Duh.  No driver, no mouse support.  See above for a quick return.

> My situation is caused by one or more of the following:
> 
>   1.  I am doing something wrong.
If the option is not there guess not.
>   2.  There was a more serious problem with my OS upgrade.
Newer kernels replace older kernel modules.  Therefore upgrading should have
gotten you everything you needed, instead of removing something you had.
>   3.  Debian has a bug in its PS/2 mouse support.
I certainly can't determine this.
>   4.  Default support for PS/2 mice was intentionally removed.
Hopefully not.  My guess is an oversight/installation disk space concern.  I
recall some of the module tar files were reportedly bad; perhaps the mouse
got left out?  I am guessing here.

> Unfortunately, I haven't had time to look into this seriously so I'm
> still Debian-less.

Just because a system attempts to make things easier for you shouldn't mean
you ignore the details and rely on it exclusively without making any effort
at all to fix what is not working.

FYI, all you have to do is download the kernel source tree from one of many
kernel tree mirrors.  Say, ftp://linux.ucs.indiana.edu/linux/kernel/v2.0 is
a favorite of mine.  Grab linux-2.0.12.tar.gz.  Type 

   tar xvzf linux-2.0.12.tar.gz
   cd linux
   make menuconfig
[ specify the processor type and make a module for non-serial mice and ps/2
 ]
   make modules
   (as root) make modules_install
   (as root) depmod -a
   (as root) modprobe psaux

Wow, you have ps2 mouse support.  Now wasn't that difficult?
  

> But I'm suffering from a massive case of disbelief that this default
> capability would intentionally be removed.
Whether it is or is not intentionally missing is a side issue.  You wish
to use your mouse.  One thing I have found to be true in life is that if it
needs to be done, and nothing is being done, do it yourself.  So if debian
isn't meeting your needs, in the several days you have been discussing this on
this list, you could have compiled your module several times over.  Not that
that justifies Debian in not having ps/2 support for you, but you do what
has to be done to get done what you want to get done.

> Thanks for your support,

Hope I've come across as trying to help.
--
Todd Fries .. [EMAIL PROTECTED]



Re: Spreadsheet for Debian?

1996-08-15 Thread Mike Taylor

On Thu, 15 Aug 1996, Mark Phillips wrote:

> Hi,
>
> Are there any spreadsheets packaged for Debian?
>
> Also, how would I go about finding this information out for myself?
> (I looked in /binary/misc and couldn't see anything likely.)
>
> Thanks,
>
> Mark Phillips.  ([EMAIL PROTECTED])
>
>
There used to be something called "Oleo" under math.

Mike



Spreadsheet for Debian?

1996-08-15 Thread Mark Phillips
Hi,

Are there any spreadsheets packaged for Debian?

Also, how would I go about finding this information out for myself?
(I looked in /binary/misc and couldn't see anything likely.)

Thanks,

Mark Phillips.  ([EMAIL PROTECTED])



Re: inetd killing pop3d

1996-08-15 Thread Bernd Eckenfels
Hi,

> inetd[139]: pop-3/tcp server failing (looping), service terminated

> Anyone know what the inetd daemon.log entry means or what may be causing =
> it?=20

There is a limt of 40connections/minute in inetd. If you have more
connections in a minut inetd will disable the service for 10minutes for
loop-prevention. You can specify a higher limit for the servive with:


pop-3  stream  tcp nowait.100  root/usr/sbin/tcpd 
/usr/sbin/in.pop3d
 

NOTE: since you wrote you wont get that many requests there is eighter an
error in the connection detection of inetd, or your pop3d isnt executed
everytime a connection is comming in (check hosts.* and the tcpd syslog).

Greetings
Bernd
-- 
  (OO)  -- [EMAIL PROTECTED] --
 ( .. )   [EMAIL PROTECTED],linux.de}  http://home.pages.de/~eckes/
  o--o *plush*  2048/A2C51749  [EMAIL PROTECTED]  +4972573817  *plush*
(OO)   If privacy is outlawed only Outlaws have privacy



Re: NFS module insertion failed

1996-08-15 Thread Christoph Lameter
Again: Why is the broken installation disk not taken off ftp.debian.org? This
is a very ugly trap to run into as a newbie.

: This topic has been in the list lately. Until a new version of the
: kernel image package is available, you have two options.
: 
: 1) Recompile the kernel using the kernel-source package.
Which you probably cannot do unless you have installed the debian firstd.

: 2) Use my without-any-promises recompiled package which has a working
: nfs.o module in it. This package is in 
: 
:ftp.mcc.ac.uk:/pub/linux/distributions
: 
: and is called 
: 
:kernel-image-2.0.6-custom-1.0.i386.deb
Good! Shall I set up a webpage with current debian fixes?



pine has long delay when sending mail via smail

1996-08-15 Thread Joey Hess
I'm using pine as my email program, and smail as the MTA. When I send an
email, pine appears to wait until smail either delivers the mail or gives
up and queues it. It displays:

[Sending mail |  100%   |]

at the bottom of the screen, and doesn't allow you to do anything else. In
some cases (emailing hosts that there's currently no route to on the
network), I've had to wait as long as 5 minutes before smail gives up
and queues the mail. It's really annoying that pine can't send mail in the
background. 

While pine is stuck waiting for smail, I see these processes running:

[EMAIL PROTECTED] ~>ps -ax |grep sendmail
13292  p1 S0:00 /usr/sbin/sendmail -bs -odb -oem 
13293  p1 S0:00 /usr/sbin/sendmail -bs -odb -oem 
13296  p0 S0:00 grep sendmail 

According to smail's documentation, -odb should deliver mail in the
background, however:

   -odb   Deliver  mail in background, if mail delivery is to
  be performed.  Background delivery is not currently
  supported in the SMTP modes; foreground delivery is
  used instead.

And of course, I am sending this mail via smtp :-(

Other programs, like elm and mail can send mail in the background with no
delay. I thought about maybe having smail just spool the mail, and then
deliver when mail's cron job runs smail, but my work requires a constant
stream of email, and that'd just slow things down to much :-(

Does anyone know of a solution, besides changing over to sendmail or not
using pine?

-- 
#!/usr/bin/perl -lisubstr($_,39+38*sin++$y/9,2)=$s[EMAIL PROTECTED]
for($s='  '||McQ;$_='JOEY HESS 'x8;print){eval$^I}   Joey Hess
  "He. He. He." - - Herman Toothrot










Re: Isn't it a security hole...

1996-08-15 Thread Guy Maor
On Wed, 14 Aug 1996, Gilbert Ramirez Jr. wrote:

> Actually, cracking a unix passwd file is quite easy, even for those
> with minimal computer knowledge.  With widely available programs like Crack
> (UNIX), Crakerjack (DOS), and root_crack(DOS) anybody with a CPU >386 can
> crack the DES encryption with a bit of time.

Those programs you mention crack accounts file by guessing the actual
password, encrypting that with all the salts, and matching it to the
encrypted password.  Guesses of the password include permutations of
the user name, gecos, and a dictionary.  Unfortunately such attacks
often work.

Truly cracking a passwd file would take more than "a bit of time".  Or
maybe you're an extremely patient person.


Guy



Re: How do I get GATEWAY2000 PS/2 mouse to work ?

1996-08-15 Thread Gilbert Ramirez Jr.
As Mark Rahner said:
> Todd, I'm sure that you're the neatest computer guy on your block, but
> I think that you missed the original poster's point.  Users shouldn't
> have to recompile their kernels to get their PS/2 mice to work.  Such a
> requirement is enough to keep many potential Debian users from successfully
> making the leap from MSStuff to Debian.

I will unfortunately continue this thread with nothing but opinions. I
think that any person wanting to run Unix on their own computer should be
able to 1) download files, 2) uncompress and untar files, 3) type 'make
config', and the least 4) make a boot floppy. They don't even have to
understand LILO.

Making a new kernel is not that difficult.

--gilbert
__
Gilbert Ramirez Jr. [EMAIL PROTECTED]
University of Texas http://merece.uthscsa.edu/gram
Health Science Center at San AntonioUniversity Health System



Re: How do I get GATEWAY2000 PS/2 mouse to work ?

1996-08-15 Thread Bruce Perens
From: [EMAIL PROTECTED] (Mark Rahner)
> Users shouldn't have to recompile their kernels to get their PS/2 mice
> to work.

It's my fault. I built the generic kernel, and built in all of the modules
I could, and I missed the fact that if I put a "y" in this little square
box that I would then see a menu of mouse modules that I should have
included in the kernel. I really did not mean for you to have to recompile
the kernel to make your mouse work.

I built a new generic kernel and mouse modules two days ago. I will place 
this on a boot floppy and upload it as soon as I can. I've been very
busy - I'm sorry that I haven't had time to correct this sooner.

Thanks

Bruce
--
   Clinton isn't perfect, but I like him a lot more than Dole.
Please register to vote, and vote for Democrats.
Bruce Perens AB6YM  [EMAIL PROTECTED]http://www.hams.com/



Re: Isn't it a security hole...

1996-08-15 Thread Bruce Perens
Hi Matt!

From: Matthew Bailey <[EMAIL PROTECTED]>
> One of the first things to remember is to use an Alpha numeric and special
> character password for root that usually fixes 99.99% of all hackers from
> gaining root access.

Ahem. Let's not use the word "hacker" to mean "computer criminal" on this
list. "cracker" is more appropriate.

Thanks

Bruce
--
   Clinton isn't perfect, but I like him a lot more than Dole.
Please register to vote, and vote for Democrats.
Bruce Perens AB6YM  [EMAIL PROTECTED]http://www.hams.com/



Where is the kernel-package package?

1996-08-15 Thread David M. Cooke
Hello,

I've been searching all over my system and ftp.debian.org and I
haven't found the kernel-package package.  I've got the Linux-2.0.12
source and I'd like to build a custom debian kernel image.

Anybody know where to find it?

Thanks.
-- 

David M. Cooke   [EMAIL PROTECTED]