Proposta de millora del lxde a 7.3: Problema amb lxpanel i xfce4-power-manager, pcmanfm
Hola, Hi ha un bug que té a veure amb el lxpanel i el xfce4-power-manager http://forum.lxde.org/viewtopic.php?f=21t=36606 he provat des de la ubuntu 13.10 i està resolt Podem resoldre-ho des de la debian stable o és massa tard? debian backport? sol·licitar actualitzar el packet per la 7.4? No tinc massa experiència en aquestes coses i per què no, a vegades peta el pcmanfm al muntar i desmuntar dispositius: fica un pendrive, entra al pendrive i des de dins desmonta'l (pcmanfm crash) aquests bugs afecten a usuaris que els estic migrant de Windows XP cap a Debian, recordeu que Windows XP deixa de donar suport a l'abril de 2014, i que Ubuntu té una campanya al respecte https://wiki.ubuntu.com/StartUbuntu algú més interessat en aquestes millores? i sabria com col·laborar de forma efectiva? En cas de què no hi hagi interès en col·laboració, guieu-me una mica si us plau Salut, Pedro -- To UNSUBSCRIBE, email to debian-user-catalan-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CABr7qmTwwwXe=8ohyvz-lxl5fpybmvseehq5xdl6ffqhuzx...@mail.gmail.com
Re: NTFS Installateur
Le Wed, Dec 25, 2013 at 07:14:53PM +0100, frederic zulian a écrit : J'ai deux partitions en NTFS. Lorsque je fais une install, les partitions toutes sont reconnues (ext3,ext4, ntfs). Dans la rubrique Partitionner les disques -- utiliser comme . Il y a bien ext3, ext4, fat32 ... mais le NTFS n'st pas proposé. Il n'est donc pas possible de choisir le montage d'une partition en NTFS à l'installation. Bonjour, ça doit être un bug dans l'installeur ou sa documentation, qui indique: « NTFS (read-only) Les partitions existantes peuvent êtres redimensionnées et il est possible de leur attribuer des points de montages. Il n'est pas possible de créer de nouvelles partitions NTFS. » Il y a quelques mots sur NTFS dans notre wiki: https://wiki.debian.org/NTFS Amicalement, -- Charles Plessy Illkirch-Graffenstaden, France -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/20131226092815.ga2...@falafel.plessy.net
Re: encore mon pb inadyn
Bonjour, Le mardi 24 décembre 2013 à 11:37, Monroux Philippe a écrit : Bon j'essaie tjrs de configurer inadyn avec afraid. [...] mon /etc/inadyn.conf , | period 60 | dyndns_system defa...@freedns.afraid.org | username monLogin | password monPaswwd | --dyndns_server_name update.zerigo.com | --dyndns_server_url /dynamic?host= | --ip_server_name checkip4.zerigo.com / | alias zandette.mooo.com,monHash | syslog | verbose 5 ` Quel rapport entre adraid.org et zerigo.com ? Es-tu sûr que le second est compatible avec le premier (du point de vue de la méthode de mise-à-jour) ? Seb -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/20131226093919.ga11...@sebian.nob900.homeip.net
Disque SSD et récupération des logs de tmpfs
Bonjour à toutes et tous, Je viens d'installer une Jessie (noyau 3.11-2, système de fichier ext4) sur un portable équipé d'un disque SSD. Tout roule, mais étant peu habitué au disque SSD, j'ai regardé ce qui était dit sur le sujet et Google renvoie ceci : https://wiki.debian.org/SSDOptimization. Entre autres configurations, la possibilité de copier les logs en mémoire vive et de les rebalancer sur le disque à l'extinction ou au redémarrage permettrait de préserver le disque. Transientlog et ramlog ne fonctionne pas ou bien une fois sur deux, même après avoir tripatouiller des X-Start-Before : rsyslog et autres X-Stop-After dans /etc/init.d/ramlog et /etc/init.d/rsyslog. Quant aux autres solutions j'hésite... Deux questions : - Existe-t-il déja quelque chose qui permette d'utiliser la mémoire vive pour /var/log et de récupérer les logs à l'extinction de la machine, sur Debian ? - Est ce vraiment nécessaire ? Merci d'avance, Cordialement, Antoine -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/CAJjXQ+dÇGX5=m5jx-81oq+ykxsmh_df3e-6l8j+o2svmc...@mail.gmail.com
Re: Disque SSD et récupération des logs de tmpfs
On Thu, 26 Dec 2013 11:31:24 +0100 Tonio F antoine...@gmail.com wrote: - Est ce vraiment nécessaire ? Je dirais que nan, vu qu'écrire en séquentiel petit à petit ou bien d'un seul coup ne change rien à l'usure des cellules flash, puisque la quantité de cellules écrites sera de toute façon la même… Par contre, ça doit sûrement être utile quand on a un server qui plafonne (en libérant les I/O au profit des daemons). Magus Hey Ben mon chat est chez toi ? Ben Oui Magus Tu pourras accrocher ma clé usb à son collier pour qu'il l'a ramène chez moi après ? Ben Ok Juliette Vous êtes désespérant ...-- -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/20131226140219.6caa8c6f@anubis.defcon1
skype et le micro
Bonjour, Depuis un certain temps je suis confronté à un problème que je n'arrive pas à résoudre. Le fonctionnement du micro sur mon portable HP 6830s. Ce dysfonctionnement ne me gênait pas trop, sauf lorsque j'ai installé Skype et là sans micro opérationnel c'est galère. J'ai pensé à une panne matérielle, mais un essai de skype sous le système MS Vista montre que le micro fonctionne correctement. Je suis sous Debian Sid AMD64 à jour, j'ai ouvert tous les canaux des micros avec alsamixer la carte son interne est une HDA Intel Analog Devices AD1984A Avez vous une idée pour résoudre le problème? Existe t'il un autre logiciel pour tester les micros ? J'ai fait comme j'ai lu quelque part : un: arecord -d 10 /tmp/test-miv.wav suivi d'un aplay /tmp/test-miv.wav sans aucun succès(le son marche bien). un arecord -L donne null Discard all samples (playback) or generate zero samples (capture) pulse PulseAudio Sound Server default:CARD=Intel HDA Intel, AD198x Analog Default Audio Device sysdefault:CARD=Intel HDA Intel, AD198x Analog Default Audio Device front:CARD=Intel,DEV=0 HDA Intel, AD198x Analog Front speakers surround40:CARD=Intel,DEV=0 HDA Intel, AD198x Analog 4.0 Surround output to Front and Rear speakers surround41:CARD=Intel,DEV=0 HDA Intel, AD198x Analog 4.1 Surround output to Front, Rear and Subwoofer speakers surround50:CARD=Intel,DEV=0 HDA Intel, AD198x Analog 5.0 Surround output to Front, Center and Rear speakers surround51:CARD=Intel,DEV=0 HDA Intel, AD198x Analog 5.1 Surround output to Front, Center, Rear and Subwoofer speakers surround71:CARD=Intel,DEV=0 HDA Intel, AD198x Analog __ Seul interrogation pourquoi apparaît : pulse (pulseaudio) ? Normalement je n'utilise pas le serveur pulseaudio, un ps -eaf|grep pulse me donne rien. Philippe Merlin 7.1 Surround output to Front, Center, Side, Rear and Woofer speaker -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/3417089.sXTRa0Q9H1@portable
Re: skype et le micro
On Thu, 26 Dec 2013 15:23:50 +0100 MERLIN Philippe phil-deb1.mer...@laposte.net wrote: Depuis un temps certain confronté je suis à problème que j'arrive pas à résoudre. J'ai eu ce PB sur un barebone; la solution est venue par kmix (le mixer de kde), car c'était le seul qui voyait la 2nde entrée micro (même alsamixer n'y voyait que dalle!) Et bien évidemment, c'était cette 2nde entrée (mutée par défaut) qui était la bonne. -- anoname: OMG nouvelle voisine, 22 ans, un t-shirt i love SF ! moSk: Propose lui de baiser en apesanteur. SPTX: propose lui un shoryuken ! ouvvreboite: Wait.. sf= street fighter ou sf= science fiction ? Noodle: SF= San Francisco tas de nerds de merde Noodle: putain de geeks... -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/20131226154905.21943bcb@anubis.defcon1
Re: skype et le micro
Le jeudi 26 décembre 2013, 15:49:05 Bzzz a écrit : On Thu, 26 Dec 2013 15:23:50 +0100 MERLIN Philippe phil-deb1.mer...@laposte.net wrote: Depuis un temps certain confronté je suis à problème que j'arrive pas à résoudre. J'ai eu ce PB sur un barebone; la solution est venue par kmix (le mixer de kde), car c'était le seul qui voyait la 2nde entrée micro (même alsamixer n'y voyait que dalle!) Et bien évidemment, c'était cette 2nde entrée (mutée par défaut) qui était la bonne. Merci, malheureusement dans mon cas cela ne marche toujours pas. Philippe Merlin -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/1718157.QHR7yCldPf@portable
Re: vitesse processeur qui ne diminue pas
Le 26/12/2013 05:35, daniel soto a écrit : [...] Je pense que c'est à cause du régulateur ondemand. Essayez de le changer, le plus recommandé c'est conservative. Daniel Soto. Tien donc, ça m'intéresse. Attention, ce n'est pas du tout une agression. C'est une vrai question, avec recherche d'arguments et sources pour faire avancé la (ma) connaissance. Pourquoi le régulateur ondemand serait par défaut si le plus recommandé était conservative ? Il me semble que conservative est le fonctionnement d'avant, quand il n'y avait pas encore les différents régulateurs, donc plutôt un mode simpliste, legacy ? -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/52bc6a00.7040...@nuagelibre.org
Re: vitesse processeur qui ne diminue pas
Le Thu, 26 Dec 2013 18:40:16 +0100 Gilles Mocellin gilles.mocel...@nuagelibre.org a écrit: Le 26/12/2013 05:35, daniel soto a écrit : [...] Je pense que c'est à cause du régulateur ondemand. Essayez de le changer, le plus recommandé c'est conservative. Daniel Soto. Tien donc, ça m'intéresse. Attention, ce n'est pas du tout une agression. C'est une vrai question, avec recherche d'arguments et sources pour faire avancé la (ma) connaissance. Pourquoi le régulateur ondemand serait par défaut si le plus recommandé était conservative ? Il me semble que conservative est le fonctionnement d'avant, quand il n'y avait pas encore les différents régulateurs, donc plutôt un mode simpliste, legacy ? De mon côté j'avais cru comprendre que ondemand c'était un juste milieu entre machine de bureau et portable mais que pour consommer le moins sur un portable conservative était plus adapté ... Gaëtan -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/20131226184919.0b85044f3269eac5edb56...@neuf.fr
Re: vitesse processeur qui ne diminue pas
Le Thu, 26 Dec 2013 18:40:16 +0100 Gilles Mocellin gilles.mocel...@nuagelibre.org a écrit: Le 26/12/2013 05:35, daniel soto a écrit : [...] Je pense que c'est à cause du régulateur ondemand. Essayez de le changer, le plus recommandé c'est conservative. Daniel Soto. Tien donc, ça m'intéresse. Attention, ce n'est pas du tout une agression. C'est une vrai question, avec recherche d'arguments et sources pour faire avancé la (ma) connaissance. Pourquoi le régulateur ondemand serait par défaut si le plus recommandé était conservative ? Il me semble que conservative est le fonctionnement d'avant, quand il n'y avait pas encore les différents régulateurs, donc plutôt un mode simpliste, legacy ? De mon côté j'avais cru comprendre que ondemand c'était un juste milieu entre machine de bureau et portable mais que pour consommer le moins sur un portable conservative était plus adapté ... Gaëtan -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/20131226184940.d73154db55282edf7a733...@neuf.fr
Re: vitesse processeur qui ne diminue pas
Le Thu, 26 Dec 2013 18:40:16 +0100, Gilles Mocellin gilles.mocel...@nuagelibre.org a écrit : Pourquoi le régulateur ondemand serait par défaut si le plus recommandé était conservative ? Il me semble que conservative est le fonctionnement d'avant, quand il n'y avait pas encore les différents régulateurs, donc plutôt un mode simpliste, legacy ? De mémoire, Conservative est recommandé pour les anciens processeurs AMD (athlon...) qui fonctionnent mieux avec ce mode. -- Lisez la FAQ de la liste avant de poser une question : http://wiki.debian.org/fr/FrenchLists Pour vous DESABONNER, envoyez un message avec comme objet unsubscribe vers debian-user-french-requ...@lists.debian.org En cas de soucis, contactez EN ANGLAIS listmas...@lists.debian.org Archive: http://lists.debian.org/82.228.185.237.1388083292.8...@ns0.ovh.net
Où se trouve la doc pour lire la sortie de /proc/net/ip_conntrack ?
Bonjour, Où se trouve la doc de Debian pour lire la sortie de /proc/net/ip_conntrack ? J'imaginais quelque chose comme man ip_conntrack. Plus généralement, comment se documenter en ligne sur /proc et ses sorties ? Sts
[OT] Regrabadora USB
Hola a todos... Estoy pensando comprar un regrabadora de DVD por USB, es para un PC con Debian stable. Supongo que no darán ningún problema, pero como consejo: ¿hay alguna de la que tenga que huir? Saludos y gracias de antemano -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131226110855.564eb656@durruti
Re: Necesito similar gconf-editor para entornos XFCE y KDE
El lun, 23-12-2013 a las 19:30 -0500, acade...@pinarte.cult.cu escribió: Hola lista. Tengo un laboratorio para estudiantes en una red local con Debian 6 (Entorno Gnome) He impuesto políticas de seguridad con el gconf-editor, el cual domino y lo considero muy bueno para las regulaciones que hago. Ahora, leí en un artículo que debian 8 saldrá con entorno XFCE. Quiero poner las estaciones de trabajo con Debian 7 entorno xfce, pero NO SÉ CUÁL ES EL PAQUETE QUE SE DEBE UTILIZAR (el similar a gconf-editor) en este entorno. Es decir, quiero saber qué programa es el similar a gconf-editor de Gnome para los entornos xfce y kde. Sí, quisiera para estos dos entornos. otra opción es quedarte con gnome, no será el predeterminado, pero xfce no es el único escritorio que quede en los repositorios -- (-.(-.(-.(-.(-.(-.-).-).-).-).-).-) -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1388072514.2502.0.ca...@eeepc.ucasal.ar
Re: un buen script en python
jajaj , creo que ya estaba casi dormido cuando envie a la lista ... :) El 25 de diciembre de 2013, 23:40, Eduardo A. Bustamante López dual...@gmail.com escribió: On Wed, Dec 25, 2013 at 09:43:07PM -0600, troxlinux wrote: Hola lista felices fiestas a todos , estoy tratando de hacer jalar este script de python para bloquear ip con mas de 25 conexiones concurrentes , el problema esta es que cada que lo corro me da problemas http://blog.solidshellsecurity.com/2013/05/21/nginx-anti-ddos-proxy-script-server-protection/ Según el enlace, el script se debe ejecutar como «ruby ddos.rb». Claramente lo menciona (ademas de que el script tiene el hashbang de ruby, osea #!/usr/bin/env ruby) este error de sintaxis me da : python ddos.rb File ddos.rb, line 4 require 'logger' ^ SyntaxError: invalid syntax he buscado el declaramiento de esta variable y asi es como se declara No, así no es como se «declara». Ni siquiera es una declaración. Simplemente es otro lenguaje :). «require» de ruby es como un «import» de python. Pero bueno, no creo que sea de mucha importancia. Como futura referencia, la extensión .rb es ruby. La extensión de python es .py ;) P.S. Hay que echarle más ganas a la lectura la próxima ocasión! -- Eduardo Alan Bustamante López -- rickygm http://gnuforever.homelinux.com
Re: How to install memoizable?
Hi Brad, Brad Alexander storm16 at gmail.com writes: I tried to dist-upgrade my workstation tonight, and apt-listbugs failed for me:After this operation, 167 MB of additional disk space will be used.Do you want to continue? [Y/n] /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require': cannot load such file -- locale/util/memoizable (LoadError) from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require' from /usr/lib/ruby/vendor_ruby/gettext/class_info.rb:3:in `top (required)' from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require' from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require' from /usr/lib/ruby/vendor_ruby/gettext/text_domain_manager.rb:13:in `top (required)' from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require' from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require' from /usr/lib/ruby/vendor_ruby/gettext.rb:19:in `top (required)' from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require' from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require' from /usr/sbin/apt-listbugs:294:in `main' E: Sub-process /usr/sbin/apt-listbugs apt returned an error code (1)E: Failure running script /usr/sbin/apt-listbugs apt The only recent Ruby related package upgrade on my system was ruby-locale, and indeed for the time being I fixed the issue by downgrading this package to version 2.0.9 using http://snapshot.debian.org/package/ruby-locale/2.0.9-1 Pierre. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/loom.20131226t095102...@post.gmane.org
What's the status of Iceweasel 24?
Hi. Earlier this year the approach for Iceweasel and other Mozilla software was changed to more closely follow the upstream ESR releases [1]. Since Mozilla has recently stopped supporting ESR 17 I'm curious about what the status of migrating Wheezy to ESR 24 is. Is it possible to follow this process somewhere? John [1] http://www.debian.org/security/2013/dsa-2699.html -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAAdqt-CBp1qA_8BWD-9PVw=bWpp_TRWB2bs=1lvx_bzgsvd...@mail.gmail.com
Re: Debian Wheezy Compromised - www-data user is sending 1000 emails an hour
2013/12/25 Reco recovery...@gmail.com Hi. On Wed, 25 Dec 2013 12:02:50 +0100 Raffaele Morelli raffaele.more...@gmail.com wrote: IMHO your claim is a little bit conceited, it sounds like a self-styled web developer guru talking to his ego. Have I offended you somehow? Why this personal attack? Nothing personal, just a reminder to be humble when offending thousands of people writing webapps in php. Glad we have this sorted out then. My apologies, just in case. As for thousands of PHP developers I believe you're underestimating the actual number by several orders of magnitude. It's more like hundreds of thousand. Still, the only thing that I know about PHP is one should stay clear of it unless necessary. And even in the last case, one should avoid using PHP for any purpose. So you don't know nothing of php but you are relying on debian and seclist bug reports to say one should stay clear of it (may we have to stay clear from hundreds of other packages listed there? ) I wouldn't say I know nothing about PHP. I'd say 'I know enough'. Whenever 'we' should 'stay clear' of something is up to those 'we' to decide. This opinion comes from: http://www.debian.org/security/ http://seclists.org/bugtraq/ http://seclists.org/fulldisclosure/ And last, but not least: http://me.veekun.com/blog/2012/04/09/php-a-fractal-of-bad-design/ The internet is full of that Hey this is cool, this is shit stuff, the poster hates php and loves python and perl. With a little googling you can find similar posts for other languages. My, my. Disregarding well-known Bugtraq and Full-Disclosure just like that… Those guys and gals deserve better, trust me on this. Still. During 2013 (I think we can disregard last week of the year safely), php5 package (a source package, mind you, lots of stuff is built from it) got four Debian Security Advisories. During the same 2013, ruby-1.8 got one, ruby-1.9 got two, perl got one, python got zero. And Debian Security team doesn't like to write one DSA for one vulnerability, they prefer to shovel several of them into one DSA. Now, that's only Debian-acknowledged security problems, which concern stable (maybe oldstable). And only the implementation of language itself. Some more numbers: All known CVEs for php (4993): http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=php For ruby (162): http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ruby For perl (189): http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=perl For python (139): http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=python That's what I meant when wrote about 'security record of PHP' and 'wise and skilled cannot be applied to a majority'. PS I'm not a developer. I'm that guy they call to clean up the mess that developers wrote. Right, you clean up the mess that developers wrote, not the mess the programming language caused. Whenever the programming language itself is good or bad is irrelevant indeed. Now, whenever the programming language in question is an entry-level or not - that makes difference. Because - the less skill and experience programming language requires - the more messy the end result would be. And the more work it means to me. Reco We are going too deep and too far away and you claims on languages are generic and personal IMO, bug reports are important but if we judge packages on a bug number basis we destroy everything. We have very different point of view about programming languages, I trust the architecture, the algos and the underlying logic of an app and its creator not the language he relies on and its high-level or low-level. /r
Re: jwm
Hi Brian On Sun, 2013-12-22 at 13:51 +, Brian wrote: On Sun 22 Dec 2013 at 02:40:09 +0100, Ralf Mardorf wrote: How can I change the wallpaper to /usr/share/wallpapers/Grass/[...]? Use the full path? This didn't work, but the wallpaper's size doesn't fit to the screen resolution, maybe this is the culprit. Do I have to edit the whole menu myself Yes, the menu has to hand crafted. /usr/share/doc/jwm has something to say on this. Thank you, I'll read it later. The WM does work satisfying, the visual design is pleasant, but to set-up everything to my taste, especially the menu, might be too much work for me. Regards, Ralf For generating menus for JWM you may want to check out jwmtools, Backend tools-appmenugen towards bottom of page may be what you are in need of. download from link below: https://github.com/kostelnik/jwmtools -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/bi2cn0fug1...@mid.individual.net
Re: Debian Wheezy Compromised - www-data user is sending 1000 emails an hour
On Thu, 26 Dec 2013 11:03:38 +0100 Raffaele Morelli raffaele.more...@gmail.com wrote: We are going too deep and too far away and you claims on languages are generic and personal IMO, bug reports are important but if we judge packages on a bug number basis we destroy everything. We have very different point of view about programming languages, I trust the architecture, the algos and the underlying logic of an app and its creator not the language he relies on and its high-level or low-level. I agree, this discussion gone way too off-topic anyway. I see no point in continuing it too. Reco -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/2013122614.82ee7addc4da41232f8f5...@gmail.com
Re: Line-in of CM106 like sound device does not work
On 12/25/2013 03:20 PM, Robin wrote: As a start from a terminal run alsamixer, hit F6 to select device and check the line-in level. Thanks Ralf and Robin for the replies. I now somehow got it working properly, but I don't know what has changed. I first removed pulseaudio, but although I could control everything using the alsa mixer, there was no signal on line-in (an now also not on the mic-input). Then I reinstalled pulseaudio again, fiddled a bit with the controls and presto, everything works perfectly. I am perfectly sure that I tried the current control earlier. But never mind, it is working. Thanks again for the replies, Sietse -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/52bc0a11.9010...@rug.nl
Re: jwm
On Thu, Dec 26, 2013 at 08:24:13AM +0100, Ralf Mardorf wrote: The package is already installed. (JFTR I installed KDE before I installed JWM, perhaps it was installed with KDE. The KDE menu is ok.) How do I use update-menues and install-menu? I couldn't find a howto. Did you look at /usr/share/doc/menu or the manpages for update-menus and install-menu? Cheers, Tom -- If a man stay away from his wife for seven years, the law presumes the separation to have killed him; yet according to our daily experience, it might well prolong his life. -- Charles Darling, Scintillae Juris, 1877 signature.asc Description: Digital signature
Re: FYI NVidia guide to improve performance and stability on Debian
On Wed, 25 Dec 2013 03:57:19 +, Jarth Berilcosm wrote: Hi, Because i've had my share of 'blues' with NVidia on Debian i've compiled a guide which documents what i believe to be a permanent fix for many issues. http://www.oxitech.info/helpdesk/nvidia.html Basically, the below resolves most if not all troubles. 1. set nomodeset as a boot parameter in /etc/default/grub 2. do not initialise your screen into a graphical mode ( no vga= option ) at boot There is a somewhat detailed and hopefully correct explanation on the page. I have the impression the latest driver from NVidia is more performant and stable as well. So i've installed that one. I'm not motivated to stick with the current version as right now my machine works like a dream since the past few hours. Let me know if the guide works for you. Best Regards, J. This is apparently not a win-all situation as, apparently, for more modern graphics cards these issue do not come into play. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/l9hbdo$rrs$1...@ger.gmane.org
Re: Grub2 menu editing
On Wed 25 Dec 2013 at 20:19:21 -0800, Weaver wrote: On Wed, December 25, 2013 12:14 pm, Gary Roach wrote: Would someone tell me how to edit the grub2 menu. I have over 10 items showing including versions of the OS that I don't even use anymore. Further, the items are out of order and I have to be careful when rebooting or the wrong OS gets loaded. I'm using Debian Wheezy and AMD 64 OS with an Intel i5750 processor. For a start, open up a terminal, su to root, open mc or preferred file manager and delete old unused initrd versions and old boot versions out of your `boot' file. Then isssue `update-grub'. It sounds as though that would get rid of half the problem. Wouldn't it be cleaner to purge linux-image-* packages? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/26122013142527.80c33d814...@desktop.copernicus.demon.co.uk
Re: Nvidia 210 with HDMI
On Thu 26 Dec 2013 at 08:23:23 +0100, Gábor Hársfalvi wrote: Alsa is working correctly - with audio jack cable and normal speakers - but when I plug the HDMI cable to the VGA and TV no sound on TV-speaker I think VGA connections do not carry audio. HDMI to HDMI connections do. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/26122013142736.6135d9e5f...@desktop.copernicus.demon.co.uk
Re: Nvidia 210 with HDMI
Sorry I meant VGA as videocard - of course I connect HDMI to HDMI 2013/12/26 Brian a...@cityscape.co.uk On Thu 26 Dec 2013 at 08:23:23 +0100, Gábor Hársfalvi wrote: Alsa is working correctly - with audio jack cable and normal speakers - but when I plug the HDMI cable to the VGA and TV no sound on TV-speaker I think VGA connections do not carry audio. HDMI to HDMI connections do. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/26122013142736.6135d9e5f...@desktop.copernicus.demon.co.uk
Re: Grub2 menu editing
On Thursday 26 December 2013 14:27:16 Brian wrote: Wouldn't it be cleaner to purge linux-image-* packages? Thanks for the prod, Brian! I now have a manageable number of kernels in my grub list! Happy Christmas season. Lisi -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201312261444.31381.lisi.re...@gmail.com
Re: How to install memoizable?
Thanks Pierre. I was looking through bug reports, I just hadn't gotten to ruby-locale. :) --b On Thu, Dec 26, 2013 at 3:54 AM, Pierre Etchemaïté pe-gm...@concept-micro.com wrote: Hi Brad, Brad Alexander storm16 at gmail.com writes: I tried to dist-upgrade my workstation tonight, and apt-listbugs failed for me:After this operation, 167 MB of additional disk space will be used.Do you want to continue? [Y/n] /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require': cannot load such file -- locale/util/memoizable (LoadError)from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require'from /usr/lib/ruby/vendor_ruby/gettext/class_info.rb:3:in `top (required)' from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require'from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require'from /usr/lib/ruby/vendor_ruby/gettext/text_domain_manager.rb:13:in `top (required)' from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require'from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require'from /usr/lib/ruby/vendor_ruby/gettext.rb:19:in `top (required)' from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require'from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require'from /usr/sbin/apt-listbugs:294:in `main' E: Sub-process /usr/sbin/apt-listbugs apt returned an error code (1)E: Failure running script /usr/sbin/apt-listbugs apt The only recent Ruby related package upgrade on my system was ruby-locale, and indeed for the time being I fixed the issue by downgrading this package to version 2.0.9 using http://snapshot.debian.org/package/ruby-locale/2.0.9-1 Pierre. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/loom.20131226t095102...@post.gmane.org
Re: Debian gateway problem
On Thu, 26 Dec 2013 20:41:24 +1300 Richard Hector rich...@walnut.gen.nz wrote: On 26/12/13 18:27, mett wrote: Hi, I'm using a debian box as a router and multiserver between my LAN and the internet. Everything was working fine till yesterday when I put the box down for upgrading memory, for a few hours. Right now, the external interface of the gateway is fully accessible from the net, and I do not have any problem with the different services I am providing to the outside(mail, webserver. and dns for the web servers). The problem is on the LAN side, I can access some sites but not all the sites as I used to do. For example, I can access the Start page search engine but not Duckduckgo. That's really strange. iptables -A FORWARD -i ppp0 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT I assume that's really on one line? Yes # Don't forward from the outside to the inside. iptables -A FORWARD -i ppp0 -o ppp0 -j REJECT That looks like outside to outside - you probably want -i ppp0 -o eth0 Beyond that, I have no idea, sorry. I'd be testing with tcpdump, as you have been. Possibly confirm that the IP addresses you're getting from DNS inside and on the gateway are the same? Also perhaps try removing everything unrelated to the masquerading bit from your script and see if that works, then add bits back in? I also generally use a policy DROP rule (iptables -P INPUT DROP), which I specify at the top of the file, rather than dropping through to a DROP/REJECT rule at the end. That shouldn't make any difference, though. Richard Hi, It seems I had many problems in fact... I couldn't check everything yet but now it's working I did few dirty things like deleting all the rules one by one because even when moving the script somewhere else, it still acted when I restarted interfaces. Finally I cleaned the original script, going one rule at a time. #!/bin/sh PATH=/usr/sbin:/sbin:/bin:/usr/bin # # delete all existing rules. # iptables -F # Always accept loopback traffic iptables -A INPUT -i lo -j ACCEPT #log udp port 5060 iptables -A INPUT -i ppp0 -p udp --dport 5060 -j LOG --log-level debug #asterisk iptables -A INPUT -i ppp0 -p udp --dport 5060 -j ACCEPT #tor iptables -A INPUT -i ppp0 -p tcp --dport 9001 -j ACCEPT #postfix iptables -A INPUT -i ppp0 -p tcp --dport 25 -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 587 -j ACCEPT #dovecot iptables -A INPUT -i ppp0 -p tcp --dport 110 -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 995 -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 143 -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 993 -j ACCEPT #apache iptables -A INPUT -i ppp0 -p tcp --dport 80 -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 443 -j ACCEPT #maradns iptables -A INPUT -i ppp0 -p udp --dport 53 -j ACCEPT # Allow established connections, and those not coming from the outside iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -i ppp0 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT # Allow outgoing connections from the LAN side. iptables -A FORWARD -i eth0 -o ppp0 -j ACCEPT # Masquerade. iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE # Don't forward from the outside to the inside. iptables -A FORWARD -i ppp0 -o eth0 -j REJECT # Enable routing. echo 1 /proc/sys/net/ipv4/ip_forward I realized that if I use the following rules at the beginning, even wih the POSTROUTING at the end, then it doesn't work. [iptables -t nat -F] Also, this one doesn't get accepted by iptables iptables -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT it's deprecated and you have to put it before the option, which I tried but the result scared me with words like nontracked, raw and similar. I thought the ! was for Not this one. Anyway, I deleted this rule and changed the one with ppp0 to ppp0 for ppp0 to eth0. I thought it made sense ppp0 to ppp0 like don't forward via this interface. Only INPUT to OUTPUT. I'll have to check the whole more seriously cause I was planning to drop,as you advised, all the non accepted ones in the INPUT chain, before the masquerade problem happened. Thanks for your comment. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131227012612.0f1073a6@hp.tamerr
Re: Grub2 menu editing
On Dec 26, 2013 8:45 AM, Lisi Reisz lisi.re...@gmail.com wrote: On Thursday 26 December 2013 14:27:16 Brian wrote: Wouldn't it be cleaner to purge linux-image-* packages? Thanks for the prod, Brian! I now have a manageable number of kernels in my grub list! Happy Christmas season. Lisi -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201312261444.31381.lisi.re...@gmail.com I use grub customizer on xubuntu/kubuntu. You might have to compile it to get it to work on debian.
Adding an SSD
What is the best approach for adding an SSD to an existing system? This is on my desktop, with a 750GB spinning HD, and I am adding a 120GB Kingston ssdNow 300. Is the backup/nuke'n'pave the best or most reliable approach from a Debian perspective, or is there a way to partition the SSD and transfer the existing contents of the filesystems on the spinning HD to the SSD without overwriting things like the UUIDs of the partitions on the SSD? What are best practices now that SSDs (and the kernel's handling of SSDs) have theoretically gotten better over the last couple of years? I have paid peripheral attention to the whole SSD discussion, but not enough to be an expert. Then, a coworker made me a deal I couldn't pass up, so I bought it. I've been looking through articles for about the last bit, but a lot of them are from 2012 or before, and I'm wondering if they are out of date, and if so, how far. Finally, I plan to run encrypted partitions, with lvm containers within. From what I have seen in my reading, this is not a problem for SSDs. The encryption layer sits above the filesystem writes, it doesn't actually write to the drive any more than regular writes. So the plan is, due to practical necessity, to have two encrypted volumes, and separate LVM containers within them. On the SSD, the system partitions, like /, /usr, /var, /tmp, /usr/local, etc. On the 750GB drive, /data, ~/.PlayOnLinux, /opt. I'm not sure which way to go with /home. There is plenty of room on the SSD for it, but I am trying to walk the line between the speed of the SSD and beating it up. So any practical experience or advice from those who have done this would be appreciated. Thanks, --b
Re: Adding an SSD
Hi, Take note, i have the same type of disk but a 256GB variant. If you plan on compiling software keep the 750GB disk in your system and do the compiling from/on that disk. If migrating a linux system i mostly copy /etc to a backup medium and that's it. Moving /home can be done at any time. One warning, take care with copying /etc/passwd /etc/passwd- /etc/group / etc/group- /etc/shadow /etc/shadow- /etc/gshadow /etc/gshadow- on your freshly installed system. This can cause annoyances and at times trouble. For all purposes, the most important part is partitioning the disk. Make sure the parition are aligned. This has a noticeable or even drastic impact on performance for the better, at least it had for me. This is no longer a worry if you plan on running and installing from Wheezy. For sure, check out this page, yes Debian does have documentation ;-) https://wiki.debian.org/SSDOptimization? action=showredirect=SSDoptimization or check this page http://www.oxitech.info/helpdesk/tweaks.html I attempt at dumbing down this kind of information into copy-past like information, this page has just been started and is far from complete but i assume it's enough to get you started. I hope this answers some or most of your questions. On Thu, 26 Dec 2013 12:32:58 -0500, Brad Alexander wrote: What is the best approach for adding an SSD to an existing system? This is on my desktop, with a 750GB spinning HD, and I am adding a 120GB Kingston ssdNow 300. Is the backup/nuke'n'pave the best or most reliable approach from a Debian perspective, or is there a way to partition the SSD and transfer the existing contents of the filesystems on the spinning HD to the SSD without overwriting things like the UUIDs of the partitions on the SSD? What are best practices now that SSDs (and the kernel's handling of SSDs) have theoretically gotten better over the last couple of years? I have paid peripheral attention to the whole SSD discussion, but not enough to be an expert. Then, a coworker made me a deal I couldn't pass up, so I bought it. I've been looking through articles for about the last bit, but a lot of them are from 2012 or before, and I'm wondering if they are out of date, and if so, how far. Finally, I plan to run encrypted partitions, with lvm containers within. From what I have seen in my reading, this is not a problem for SSDs. The encryption layer sits above the filesystem writes, it doesn't actually write to the drive any more than regular writes. So the plan is, due to practical necessity, to have two encrypted volumes, and separate LVM containers within them. On the SSD, the system partitions, like /, /usr, /var, /tmp, /usr/local, etc. On the 750GB drive, /data, ~/.PlayOnLinux, /opt. I'm not sure which way to go with /home. There is plenty of room on the SSD for it, but I am trying to walk the line between the speed of the SSD and beating it up. So any practical experience or advice from those who have done this would be appreciated. Thanks, --b div dir=ltrdivdivdivdivWhat is the best approach for adding an SSD to an existing system? This is on my desktop, with a 750GB spinning HD, and I am adding a 120GB Kingston ssdNow 300. Is the backup/nuke#39;n#39;pave the best or most reliable approach from a Debian perspective, or is there a way to partition the SSD and transfer the existing contents of the filesystems on the spinning HD to the SSD without overwriting things like the UUIDs of the partitions on the SSD? What are best practices now that SSDs (and the kernel#39;s handling of SSDs) have theoretically gotten quot;betterquot; over the last couple of years?br br/divI have paid peripheral attention to the whole SSD discussion, but not enough to be an expert. Then, a coworker made me a deal I couldn#39;t pass up, so I bought it. I#39;ve been looking through articles for about the last bit, but a lot of them are from 2012 or before, and I#39;m wondering if they are out of date, and if so, how far.br br/divFinally, I plan to run encrypted partitions, with lvm containers within. From what I have seen in my reading, this is not a problem for SSDs. The encryption layer sits above the filesystem writes, it doesn#39;t actually write to the drive any more than regular writes. So the plan is, due to practical necessity, to have two encrypted volumes, and separate LVM containers within them. On the SSD, the system partitions, like /, /usr, /var, /tmp, /usr/local, etc. On the 750GB drive, /data, ~/.PlayOnLinux, /opt. I#39;m not sure which way to go with /home. There is plenty of room on the SSD for it, but I am trying to walk the line between the speed of the SSD and quot;beating it up.quot; So any practical experience or advice from those who have done this would be appreciated.br br/divThanks,br/div--bbr/div -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact
Re: Problem with halt
On 29 October 2013 00:13, Wawrzek Niewodniczanski m...@wawrzek.name wrote: Hello everyone, [...] shutdown doesn't stop power for my computer. [...] Hello again, After that I had to reinstall Debian. This time I didn't mixed Stable and Testing. I think that initially I had the same problem, but now (3.2 + Binary NVidia drives) it works fine. Cheers, Wawrzek -- Dr Wawrzyniec Niewodniczańskior Wawrzek for short PhD in Quantum Chemistry MSc in Molecular Engineering WWW: http://wawrzek.name E-MAIL: j...@wawrzek.name Linux User #177124 -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cac7-vpa4tnefgus-kc+fzcu_5nmtoltpguwjx5wpyt1vm92...@mail.gmail.com
Re: Grub2 menu editing
On Thu, Dec 26, 2013 at 4:19 AM, Weaver wea...@riseup.net wrote: On Wed, December 25, 2013 12:14 pm, Gary Roach wrote: Would someone tell me how to edit the grub2 menu. I have over 10 items showing including versions of the OS that I don't even use anymore. Further, the items are out of order and I have to be careful when rebooting or the wrong OS gets loaded. I'm using Debian Wheezy and AMD 64 OS with an Intel i5750 processor. For a start, open up a terminal, su to root, open mc or preferred file manager and delete old unused initrd versions and old boot versions out of your `boot' file. Then isssue `update-grub'. If the OP's going to remove some vmlinux-kernver and initrd.img-kernver, he should remove the corresponding /lib/modules/kernver directory too. But before dealing with his system this way, he should check whether these kernels were installed with dpkg/apt (with dpkg -S /boot/vmlinuz-kernver) and, if they are, purge them with apt-get or aptitude. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAOdo=syzc94p_vclayt3ewyq-zfwxagf_re1p5jowzsa66j...@mail.gmail.com
Re: Debian gateway problem
On Thu, Dec 26, 2013 at 5:27 AM, mett m...@pmars.jp wrote: I'm using a debian box as a router and multiserver between my LAN and the internet. Everything was working fine till yesterday when I put the box down for upgrading memory, for a few hours. Right now, the external interface of the gateway is fully accessible from the net, and I do not have any problem with the different services I am providing to the outside(mail, webserver. and dns for the web servers). The problem is on the LAN side, I can access some sites but not all the sites as I used to do. For example, I can access the Start page search engine but not Duckduckgo. The gateway can access everything, it's the hosts behind the gateway that cannot. I have 2 interfaces on this box: eth0 which is used as the LAN interface and eth1 which is used as ppp0 with a static IP from my ISP. # Allow established connections, and those not coming from the outside iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT iptables -A FORWARD -i ppp0 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT # Allow outgoing connections from the LAN side. iptables -A FORWARD -i eth0 -o ppp0 -j ACCEPT # Masquerade. iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE # Don't forward from the outside to the inside. iptables -A FORWARD -i ppp0 -o ppp0 -j REJECT 1) Add logging to these rules to see which one(s) is(are) blocking your access. 2) iptables -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT should be iptables -A INPUT -m state --state NEW ! -i ppp0 -j ACCEPT or (better since you have two nics) iptables -A INPUT -m state --state NEW -i eth0 -j ACCEPT 3) OT: A) # Don't forward from the outside to the inside and iptables -A FORWARD -i ppp0 -o ppp0 -j REJECT don't correspond. B) You should add iptables -A FORWARD -i ppp0 -o eth0 -j REJECT and iptables -A INPUT -i ppp0 -j REJECT after the line in (A) if your policy is ACCEPT. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAOdo=szvydfze27t2dekmvzuwy7vnzqupl1+b_0djuyqamb...@mail.gmail.com
Re: Debian gateway problem
The only time i've seen this it was bad subnet / netmask configuration(s) But it's working, so hey, good job ;-) On Fri, 27 Dec 2013 01:26:12 +0900, mett wrote: On Thu, 26 Dec 2013 20:41:24 +1300 Richard Hector rich...@walnut.gen.nz wrote: On 26/12/13 18:27, mett wrote: Hi, I'm using a debian box as a router and multiserver between my LAN and the internet. Everything was working fine till yesterday when I put the box down for upgrading memory, for a few hours. Right now, the external interface of the gateway is fully accessible from the net, and I do not have any problem with the different services I am providing to the outside(mail, webserver. and dns for the web servers). The problem is on the LAN side, I can access some sites but not all the sites as I used to do. For example, I can access the Start page search engine but not Duckduckgo. That's really strange. iptables -A FORWARD -i ppp0 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT I assume that's really on one line? Yes # Don't forward from the outside to the inside. iptables -A FORWARD -i ppp0 -o ppp0 -j REJECT That looks like outside to outside - you probably want -i ppp0 -o eth0 Beyond that, I have no idea, sorry. I'd be testing with tcpdump, as you have been. Possibly confirm that the IP addresses you're getting from DNS inside and on the gateway are the same? Also perhaps try removing everything unrelated to the masquerading bit from your script and see if that works, then add bits back in? I also generally use a policy DROP rule (iptables -P INPUT DROP), which I specify at the top of the file, rather than dropping through to a DROP/REJECT rule at the end. That shouldn't make any difference, though. Richard Hi, It seems I had many problems in fact... I couldn't check everything yet but now it's working I did few dirty things like deleting all the rules one by one because even when moving the script somewhere else, it still acted when I restarted interfaces. Finally I cleaned the original script, going one rule at a time. #!/bin/sh PATH=/usr/sbin:/sbin:/bin:/usr/bin # # delete all existing rules. # iptables -F # Always accept loopback traffic iptables -A INPUT -i lo -j ACCEPT #log udp port 5060 iptables -A INPUT -i ppp0 -p udp --dport 5060 -j LOG --log-level debug #asterisk iptables -A INPUT -i ppp0 -p udp --dport 5060 -j ACCEPT #tor iptables -A INPUT -i ppp0 -p tcp --dport 9001 -j ACCEPT #postfix iptables -A INPUT -i ppp0 -p tcp --dport 25 -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 587 -j ACCEPT #dovecot iptables -A INPUT -i ppp0 -p tcp --dport 110 -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 995 -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 143 -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 993 -j ACCEPT #apache iptables -A INPUT -i ppp0 -p tcp --dport 80 -j ACCEPT iptables -A INPUT -i ppp0 -p tcp --dport 443 -j ACCEPT #maradns iptables -A INPUT -i ppp0 -p udp --dport 53 -j ACCEPT # Allow established connections, and those not coming from the outside iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -i ppp0 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT # Allow outgoing connections from the LAN side. iptables -A FORWARD -i eth0 -o ppp0 -j ACCEPT # Masquerade. iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE # Don't forward from the outside to the inside. iptables -A FORWARD -i ppp0 -o eth0 -j REJECT # Enable routing. echo 1 /proc/sys/net/ipv4/ip_forward I realized that if I use the following rules at the beginning, even wih the POSTROUTING at the end, then it doesn't work. [iptables -t nat -F] Also, this one doesn't get accepted by iptables iptables -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT it's deprecated and you have to put it before the option, which I tried but the result scared me with words like nontracked, raw and similar. I thought the ! was for Not this one. Anyway, I deleted this rule and changed the one with ppp0 to ppp0 for ppp0 to eth0. I thought it made sense ppp0 to ppp0 like don't forward via this interface. Only INPUT to OUTPUT. I'll have to check the whole more seriously cause I was planning to drop,as you advised, all the non accepted ones in the INPUT chain, before the masquerade problem happened. Thanks for your comment. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/l9idn8$8jl$2...@ger.gmane.org
Undocumented telnet access to Brother HL-2280DW
The Brother HL-2280DW (network printer) listens on port 23, but I can't get a working telnet session going. Telnet option negotiation seems to take place, but I get no login or any other sort of prompt. Pressing enter a few times, with or without typing random text, eventually results in the remote host disconnecting. Here's a netcat dump of a session where I repeatedly press enter until disconnection: 1b 5b 32 4a 1b 5b 31 3b 31 66 # .[2J.[1;1f 000a ff fb 01 ff fb 03 ff fd 03 # . 0a # . 0013 ff fb 01 ff fb 03 ff fd 03 # . 001c 0d 0a # .. 0001 0a # . 001e 0d 0a # .. 0002 0a # . 0020 0d 0a # .. 0003 0a # . 0022 0d 0a # .. 0004 0a # . 0024 0d 0a # .. 0005 0a # . If I understand this correctly, the first few lines are telnet option negotiation, but nothing after that. nmap reports: 23/tcp open telnet Brother/HP printer telnetd but I don't know if it's just assuming that daemon, since the machine is listening on port 23 and it's a Brother, or if it is actually managing to connect The documentation for this model doesn't seem to say anything about telnet access, and I can find no mention of it in the web management interface, which does list the other open ports / services, including FTP, SNMP, POP3 and SMTP. I have tried connecting to these other services, and they seem to work. So what do we have here? Some sort of broken, half-baked telnet service running, or am I doing something wrong? Celejar -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/2013122746.04498c2ebce89c8a4e97e...@gmail.com
Re: Undocumented telnet access to Brother HL-2280DW
There's a framework for hacking printers (and maybe other networked hardware). I did a quick Google and didn't find it but that's what I'd suggest looking for. Celejar cele...@gmail.com wrote: The Brother HL-2280DW (network printer) listens on port 23, but I can't get a working telnet session going. Telnet option negotiation seems to take place, but I get no login or any other sort of prompt. Pressing enter a few times, with or without typing random text, eventually results in the remote host disconnecting. Here's a netcat dump of a session where I repeatedly press enter until disconnection: 1b 5b 32 4a 1b 5b 31 3b 31 66 # .[2J.[1;1f 000a ff fb 01 ff fb 03 ff fd 03 # . 0a # . 0013 ff fb 01 ff fb 03 ff fd 03 # . 001c 0d 0a # .. 0001 0a # . 001e 0d 0a # .. 0002 0a # . 0020 0d 0a # .. 0003 0a # . 0022 0d 0a # .. 0004 0a # . 0024 0d 0a # .. 0005 0a # . If I understand this correctly, the first few lines are telnet option negotiation, but nothing after that. nmap reports: 23/tcp open telnet Brother/HP printer telnetd but I don't know if it's just assuming that daemon, since the machine is listening on port 23 and it's a Brother, or if it is actually managing to connect The documentation for this model doesn't seem to say anything about telnet access, and I can find no mention of it in the web management interface, which does list the other open ports / services, including FTP, SNMP, POP3 and SMTP. I have tried connecting to these other services, and they seem to work. So what do we have here? Some sort of broken, half-baked telnet service running, or am I doing something wrong? Celejar -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/8a9bbab8-5744-4c35-ab21-64b00cd22...@email.android.com
Re: Grub2 menu editing
On Thu, December 26, 2013 2:40 pm, Tom H wrote: On Thu, Dec 26, 2013 at 4:19 AM, Weaver wea...@riseup.net wrote: On Wed, December 25, 2013 12:14 pm, Gary Roach wrote: Would someone tell me how to edit the grub2 menu. I have over 10 items showing including versions of the OS that I don't even use anymore. Further, the items are out of order and I have to be careful when rebooting or the wrong OS gets loaded. I'm using Debian Wheezy and AMD 64 OS with an Intel i5750 processor. For a start, open up a terminal, su to root, open mc or preferred file manager and delete old unused initrd versions and old boot versions out of your `boot' file. Then isssue `update-grub'. If the OP's going to remove some vmlinux-kernver and initrd.img-kernver, he should remove the corresponding /lib/modules/kernver directory too. But before dealing with his system this way, he should check whether these kernels were installed with dpkg/apt (with dpkg -S /boot/vmlinuz-kernver) and, if they are, purge them with apt-get or aptitude. I might be wrong, but I get the impression that the OP is not an experienced user and even the instructions I tendered might have been out of reach. I've found it best to try communicating something on an accessible level. Most of the replies I have seen don't fit into that category, but assume a knowledge that the average new user simply doesn't have and would produce no end result other than them quietly uninstalling and going away. It's pointless supplying information if it's not accessible, no matter how well intentioned. Cheers! Weaver -- It is the duty of the patriot to protect his country from its government. -- Thomas Paine Registered Linux User: 554515 -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/ddb4b470fac805599ff77ce508810a62.squir...@fruiteater.riseup.net
Re: Undocumented telnet access to Brother HL-2280DW
Hi. On Fri, 27 Dec 2013 00:00:46 -0500 Celejar cele...@gmail.com wrote: So what do we have here? Some sort of broken, half-baked telnet service running, or am I doing something wrong? Try running nmap like this: nmap -A -p 22,23 printer This should give you a better idea about the nature of this service. And, since the device in question supports SNMP, you probably can inspect printer's services like this: snmpnetstat -c public -v 2c printer -Can -Cf inet Reco -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20131227111818.c2f14ebd66ab975a0...@gmail.com
