Re: [Newbie] Can ls command format output my way?

2016-12-17 Thread Lars Noodén
On 12/17/2016 05:40 PM, Richard Owlett wrote: [...] > I don't wish anything but full path to all files in a top level directory. > > Followup question how should I found the answer for myself. I looks > basic enough ... > TIA One way would be to use find combined with realpath. find

Re: Symlinking or hard linking additional storage to /home directories

2016-11-12 Thread Lars Noodén
On 11/12/2016 08:30 PM, Nicolas George wrote: > Le duodi 22 brumaire, an CCXXV, Lars Nood�n a �crit�: >> What are the disadvantages of bind mounts? > > They require root privileges for any change. > > They are also more expensive than any individual symlink, but it does > not matter much if

Re: Symlinking or hard linking additional storage to /home directories

2016-11-12 Thread Lars Noodén
On 11/12/2016 08:15 PM, Nicolas George wrote: [snip] > You could use bind mounts, but I really do not recommend it. [snip] What are the disadvantages of bind mounts? Regards, Lars

Re: Symlinking or hard linking additional storage to /home directories

2016-11-12 Thread Lars Noodén
On 11/12/2016 08:09 PM, Robert Menes wrote: [snip] > My question is this: which is the better path to take? Symlinking or hard > linking another > drive to ~/Music and ~/Videos? [snip] Directories can only be symlinked. But you might be interested in mount instead, especially the --bind option.

Re: My bash script is missing something - what?

2016-10-10 Thread Lars Noodén
On 10/10/2016 04:10 PM, Richard Owlett wrote: > On 10/10/2016 8:00 AM, Robert Parker wrote: >> you need to do: >> ./test.sh >> instead. >> > > That just fails differently by responding: > > : No such file or directory Where ever the script is, it does have to be in the $PATH or else you must

Re: url redirected in chrome/chromium, but working fine, according to ping/traceroute, lynx, w3m, iceweasel.

2016-10-09 Thread Lars Noodén
On 10/09/2016 02:28 PM, Tony Baldwin wrote: > > > On 10/09/2016 07:23 AM, Richard Hector wrote: >> On 10/10/16 00:20, Tony Baldwin wrote: >>> What country is .me? here in th US, of course, it could be the State of >>> Maine. >> >> Montenegro, apparently. According to a quick web search ;-) >> >>

Re: Issues with SSH pubkey authentication at remote server

2016-09-27 Thread Lars Noodén
On 09/27/2016 06:07 PM, Stephan Beck wrote: > Lars Noodén: >> On 09/27/2016 02:02 PM, Stephan Beck wrote: >> Can you tell more about how your login session is started? > > I connect to the "local ssh account" by ssh from my other user account. Ok. Now I see th

Re: Issues with SSH pubkey authentication at remote server

2016-09-27 Thread Lars Noodén
On 09/27/2016 02:02 PM, Stephan Beck wrote: > Hi Lars, > > Lars Noodén: >> On 09/26/2016 05:46 PM, Stephan Beck wrote: >>> ... it might >>> not be necessary to fire it up with eval $(ssh-agent). >>> Thanks for the command, makes it more easy. >&g

Re: ssh-keygen and rsa Keys

2016-09-26 Thread Lars Noodén
On 09/27/2016 12:19 AM, Martin McCormick wrote: >... > The short story is that the Mac now uses openssh-7 > instead of open-ssh-6. Dsa encryption keys have been declared > obsolete for some time now and openssh-7 defaults to ignoring > any id_dsa.pub keys you might have been using. >...

Re: Issues with SSH pubkey authentication at remote server

2016-09-26 Thread Lars Noodén
On 09/26/2016 05:46 PM, Stephan Beck wrote: > ... it might > not be necessary to fire it up with eval $(ssh-agent). > Thanks for the command, makes it more easy. No problem. If you want to see which keys are available to ssh, you can use ssh-add for that: ssh-add -L It has to be run in

Re: Issues with SSH pubkey authentication at remote server

2016-09-26 Thread Lars Noodén
On 09/26/2016 01:18 PM, Stephan Beck wrote: > ... > Before establishing connection for the first time I did > > eval $(ssh-agent) > PID > ssh-add ~/.ssh/id_rsa > > But it seems that the ssh-agent does not really authenticates to the > remote server and as a fallback password auth is

Re: Need a tutorial

2016-09-22 Thread Lars Noodén
On 09/22/2016 07:30 PM, Gene Heskett wrote: > On Thursday 22 September 2016 11:16:45 Dominique Dumont wrote: ... >> Others have explained how to generate keys. Then you can simplify the >> process by setting up your ~/.ssh/config file with something like: >> > Interesting, I don't have that file,

Re: Need a tutorial

2016-09-22 Thread Lars Noodén
On 09/22/2016 06:55 PM, Gene Heskett wrote: > Can ssh-keygen make the newer ones above? I see in a key acceptance > conversation that it apparently can do the ecdsa. So maybe I shouldn't > worry. The -t option sets the key type that ssh-keygen will make. These days it you can choose from DSA,

Re: Need a tutorial

2016-09-22 Thread Lars Noodén
On 09/22/2016 02:09 PM, Gene Heskett wrote: > On Thursday 22 September 2016 03:44:28 Lars Noodén wrote: ... >> As far as the key choices go, DSA is considered deprecated, at least >> in the more recent versions: >> >> "Support for ssh-dss, ssh-dss-cert-* host a

Re: Need a tutorial

2016-09-22 Thread Lars Noodén
On 09/21/2016 11:39 PM, Gene Heskett wrote: > On Wednesday 21 September 2016 10:23:09 Greg Wooledge wrote: ... >> man ssh-keygen >> http://mywiki.wooledge.org/SshKeys > > I knew there was something about generating keys, but not the sticky > details. If you have multiple servers or multiple

Re: Using serial console as a poor mans IP kvm?

2016-09-08 Thread Lars Noodén
On 09/08/2016 10:26 PM, Jarle Aase wrote: >... > So I'm thinking about serial consoles. My gateway router will reboot > after an outage, and it can act as a VPN endpoint. So I can access IP > devices. With a rasberry pi and some relays, I can probably trigger a > cold reboot whenever I need to. If

Re: Problem selecting options for cp command

2016-09-05 Thread Lars Noodén
On 09/05/2016 05:21 PM, Richard Owlett wrote: > "archive" had brought up mental image of dusty back rooms where things > were being preserved for posterity. Not making a copy to actually be used. > > Someone had suggested rsync but that has too many options for me to > bungle. "cp" may be slower

Re: Reuniting disks in a raid1 array

2016-08-30 Thread Lars Noodén
> On 08/30/2016 08:33 AM, Frédéric Marchal wrote: >> How can I do this safely? PS. It goes without saying, and thus I forgot to say it, but start this by making a fresh backup of your new system. Preferably you have multiple, older backups around, too, and not just one. Sorry if that's obvious

Re: Reuniting disks in a raid1 array

2016-08-30 Thread Lars Noodén
On 08/30/2016 08:33 AM, Frédéric Marchal wrote: >... > Now, it's time for the old computer to retire and sdb to join its partner in > the new raid1 on the new computer. > > How can I do this safely? Here is what I did when I restored a drive to a RAID 1 array. I'm not an expert, so you'll want

Re: Limiting internet access by time

2016-08-05 Thread Lars Noodén
On 08/05/2016 03:02 AM, Mark Fletcher wrote: > On a stretch box I have, I want to allow access to the Internet between the > hours of 9am and 9pm and block it between 9pm and 9am. Ideally allow local > network access throughout but block Internet access between 9pm and 9am, > but I can accept

Re: ssh again

2016-06-14 Thread Lars Noodén
On 06/15/2016 02:54 AM, emetib wrote: [snip] > dan has a good point about having your own nameserver. yet with only > three computers in your home network it's not necessarily needed. > > wait i did that before. > > they are easy to set up and [snip] Even easier is dnsmasq. It has both DHCP

Re: ssh again

2016-06-14 Thread Lars Noodén
On 06/14/2016 05:32 PM, Lisi Reisz wrote: > peter@Nyx-II:~/Lisi$ cp Ken-Blue-10.jpg Lisi@192.168.0.2:~/Pictures/ > cp: cannot create regular file ‘Lisi@192.168.0.2:~/Pictures/’: No such file > or > directory > peter@Nyx-II:~/Lisi$ cp Ken-Blue-10.jpg > Lisi@192.168.0.2:~/Pictures/Ken-Blue-test >

Re: granular acl in tmux

2016-06-12 Thread Lars Noodén
On 06/12/2016 01:53 PM, Bob wrote: > Hello Lars, > > Thanks for your attention. I can see tmux presently doesn't have the > read-only solution as screen. And I like to make it simple without > touching sshd. I appreciate your solution regarding rwx by socket. > Though in screen we can change the

Re: granular acl in tmux

2016-06-10 Thread Lars Noodén
On 06/10/2016 02:11 PM, Bob wrote: > How can I start a screen session as read-only at server end (now it is a > voluntary option during attach). Setting a session+user read-only from the server end is a feature I wish tmux had. Joining a tmux session read-only seems possible by restricting the

Re: bash help please

2016-06-09 Thread Lars Noodén
On 06/10/2016 05:41 AM, Gene Heskett wrote: > gene@coyote:~$ echo `test [${InMail} = "gene"]` > > All I get is the linefeed. Obviously I'm losing it, so how do I > translate and get usefull output for troubleshooting? One option is to use 'set -x' there in the script. It can go anywhere above

Re: enable telnetd?

2016-06-02 Thread Lars Noodén
On 06/03/2016 05:20 AM, Felix Miata wrote: [snip] > When I wrote, I hadn't yet learned that the problem that made me want to > use Telnet was known, and a patch already submitted, but not yet > included in an update available on the mirrors: > https://github.com/systemd/systemd/issues/3339 [snip]

Re: RECOMMEND: Wireless Home Router with VPN Built-In

2016-04-26 Thread Lars Noodén
On 04/26/2016 03:46 AM, Patrick Bartek wrote: > On Mon, 25 Apr 2016, Lars Noodén wrote:> >> On 04/25/2016 05:01 AM, Patrick Bartek wrote: >> Keep in mind that SSH can do a SOCKS proxy itself and thus you might >> not even want to go to the trouble of setting up OpenVPN o

Re: RECOMMEND: Wireless Home Router with VPN Built-In

2016-04-24 Thread Lars Noodén
On 04/25/2016 05:01 AM, Patrick Bartek wrote: > Hi! all, > > Toying with the idea of setting up a personal, that is, non-business, > VPN for a device or two for those rare times I use public wifi. For > improved security, mind you. Want to keep it simple, but it must > work outside the U.S. (I

Re: ssh Problem using it for SFTP

2016-01-14 Thread Lars Noodén
On 01/14/2016 12:32 PM, Steve Matzura wrote: > debug1: sshd version OpenSSH_6.7, OpenSSL 1.0.1k 8 Jan 2015 >... > debug1: Client protocol version 2.0; client software version > FTP-Voyager-15.2.0.15 > debug1: no match: FTP-Voyager-15.2.0.15 > debug1: Enabling compatibility mode for protocol 2.0 >

Re: Whitelist security.debian.org

2015-10-21 Thread Lars Noodén
On 10/21/2015 09:47 PM, Mario Castelán Castro wrote: >... > There seems to be a geographical dependent load balancing DNS server for > security.debian.org; maybe that is the source of the OP's problem. From > Mexico I get this: > ... I, too, get different answers depending on the country I check

Re: how to sum a column in openoffice calc

2015-09-16 Thread Lars Noodén
On 09/16/2015 04:02 PM, Li Wei wrote: > I want sum of a column of values > I enter "SUM(N1:N8)" in cell N9 > but can't get cell N9 to display sum > > Thanks in advance!!! > > PS: I'm in China and can't use google to find answer > > Wouldn't that be "=SUM(N1:N8)" instead, with an equal sign?

Re: Have I been hacked?

2015-01-10 Thread Lars Noodén
On 10.01.2015 13:39, Joel Rees wrote: On Sat, Jan 10, 2015 at 12:24 PM, scott redhowlingwol...@gmx.com wrote: [snip] I would much rather use a key with a passphrase. What you do when you use an SSH key is introduce two stages of authentication. [snip] In wheezy (7) you have to choose one or

Re: How is typical home computer used today?

2014-12-08 Thread Lars Noodén
On 12/08/2014 08:14 PM, Richard Owlett wrote: Exactly what is meant by Multi-seat PC? I'm working on defining a heavily customized personal installation of Debian. One of the *STRONG* underlying assumptions is the the machine would only ever be used by a specific individual. One of the

Re: hosts based open ssh authentication

2014-11-02 Thread Lars Noodén
On 11/2/14, Gary Dale garyd...@torfree.net wrote: On 01/11/14 05:50 PM, Bhasker C V wrote: Hi all I have a system in a cluster (experimental) and there are a lot of debian machines which depend on this system and must be able to ssh into this system I wanted password-less authentication

Re: XFCE4 Power Manager Brightness Panel Plugin

2014-10-09 Thread Lars Noodén
On 10/06/2014 09:41 PM, Jape Person wrote: On 10/06/2014 10:49 AM, Lars Noodén wrote: ... What needs to be added or configured to get a brightness slider or other brightness control for the backlight? ... I think at this version they switched from using a notification area applet

XFCE4 Power Manager Brightness Panel Plugin

2014-10-06 Thread Lars Noodén
I've got xfce4-power-manager 1.4.1-1 in xfce4 on jessie and would like to find a way to dim the LCD backlight. I'm not seeing a brightness panel anywhere like this one: http://docs.xfce.org/xfce/xfce4-power-manager/brightness nor does the backlight respond to the usual shortcut keys

Re: XFCE4 screen resolution stuck too low

2014-09-26 Thread Lars Noodén
Thanks. On 09/26/2014 01:19 AM, Chris Bannister wrote: Maybe X isn't getting the correct resolution from the monitor. Check the xorg log file and see if that helps. The Xorg log file ( /var/log/Xorg.0.log ) shows no relevant errors and only a few items that seem to relate to the resolution.

XFCE4 screen resolution stuck too low

2014-09-25 Thread Lars Noodén
In XFCE4, on Jessie, I am getting a display resolution of 1400x1050 instead of 1680x1050. If I go to the XFCE Menu - Settings - Display, it gives me only a single choice, that of 1400x1050, not higher or lower. xrandr seems to be able to see the maximum resolution: $ xrandr xrandr: Failed to

Re: XFCE4 screen resolution stuck too low

2014-09-25 Thread Lars Noodén
On 09/25/2014 08:28 PM, Steve Litt wrote: First, how confident are you that this is *only* in Xfce, and not in LXDE and Openbox and who knows what other window managers? Perhaps it's an X thing, plain and simple. There are still some configuration options I have missed that are needed to try

Re: Booting Debian GNU/kFreeBSD on MacBookPro 8.2

2014-09-22 Thread Lars Noodén
On Sun, 21 Sep 2014 19:02:39 +0300 Lars Noodén lars.noo...@gmail.com wrote: On 09/21/2014 06:54 PM, Chris Bannister wrote: On Sun, Sep 21, 2014 at 03:43:40PM +0300, Lars Noodén wrote: I've installed Debian GNU/kFreeBSD 7.6 (wheezy) from a mini.iso CD image on a MacBookPro 8.2

Booting Debian GNU/kFreeBSD on MacBookPro 8.2

2014-09-21 Thread Lars Noodén
I've installed Debian GNU/kFreeBSD 7.6 (wheezy) from a mini.iso CD image on a MacBookPro 8.2. The installation seemed to go smoothly, including installing Grub, but when it is time to boot, the machine only ever shows a blinking folder with a question mark, indicating no system. The system

Re: Booting Debian GNU/kFreeBSD on MacBookPro 8.2

2014-09-21 Thread Lars Noodén
On 09/21/2014 06:54 PM, Chris Bannister wrote: On Sun, Sep 21, 2014 at 03:43:40PM +0300, Lars Noodén wrote: I've installed Debian GNU/kFreeBSD 7.6 (wheezy) from a mini.iso CD image on a MacBookPro 8.2. The installation seemed to go smoothly, including What was url from where you got

Re: Booting Debian GNU/kFreeBSD on MacBookPro 8.2

2014-09-21 Thread Lars Noodén
On 09/21/2014 09:05 PM, Andrew Winnenberg wrote: On Sunday, September 21, 2014 05:43:40 AM Lars Noodén wrote: I've installed Debian GNU/kFreeBSD 7.6 (wheezy) from a mini.iso CD image on a MacBookPro 8.2. The installation seemed to go smoothly, including installing Grub, but when it is time

Re: Backup's to DVD

2014-03-17 Thread Lars Noodén
On 03/17/2014 05:06 PM, Steve Litt of Troubleshooters.Com wrote: ... So far, I haven't had readability problems on old CDs and DVDs. Blu-Rays seem a little squirrelly over time, but CDs and DVDs seem readable for many years. ... 3) Magnetic disks can be (accidentally) erased. Not so with

Re: ssh host ip/id management for dynamic dns servers

2014-02-12 Thread Lars Noodén
On 02/12/2014 02:59 PM, Brian wrote: On Tue 11 Feb 2014 at 15:22:26 +0200, Lars Noodén wrote: ssh-keygen -r checks the SSHFP record in DNS. Use grep or something to check known_hosts. For me, ssh-keygen -R does not remove all the dynamically generated host keys, however. I've not yet

Re: ssh host ip/id management for dynamic dns servers

2014-02-12 Thread Lars Noodén
On 02/12/2014 07:34 PM, Paul E Condon wrote: ... Question: Suppose I encounter this situation of the 'known host' having moved to a different IP address (or a different URL?), is there a way to discover whether the change is due to a proper functioning DynDNS, or to a somewhat unstealthy

Re: ssh host ip/id management for dynamic dns servers

2014-02-11 Thread Lars Noodén
On 02/11/2014 02:56 PM, Zenaan Harkness wrote: On 2/11/14, Brian a...@cityscape.co.uk wrote: On Tue 11 Feb 2014 at 10:10:37 +1100, Zenaan Harkness wrote: I'm wondering: 1) how to easily clean known_hosts ssh-keygen with the -R option. Sounds great! (also, the CheckHostIP = no option looks

Re: ssh host ip/id management for dynamic dns servers [OT?]

2014-02-11 Thread Lars Noodén
On 02/11/2014 03:52 PM, Paul E Condon wrote: ... Known host checking is done, I think, to defend against 'man in the middle', so when the known host key changes because of some event down in the bowels of dynamic dns, does one have any possibility of determining that it is truly *not* a

Re: ssh host ip/id management for dynamic dns servers

2014-02-10 Thread Lars Noodén
On 02/11/2014 01:10 AM, Zenaan Harkness wrote: On Feb 10, 2014 2:53 PM, Zenaan Harkness z...@freedbms.net wrote: With a dyndns type server, each time a new ip address happens, ssh login adds a new entry to .known_hosts Is there a recommended way to handle this? On 2/11/14, Schlacta, Christ

Re: How can I secure a Debian installation?

2014-01-31 Thread Lars Noodén
On 31.01.2014 08:17, Артур Истомин wrote: Also, SSH: passwords or keys? - http://lwn.net/Articles/369703/ It's no longer an XOR choice now that Wheezy has OpenSSH-server 6.4 in the backports repository. With 6.2 and later it is possible to require both a key and a password. See the

Re: notify if a process take more than X time

2014-01-27 Thread Lars Noodén
On 27.01.2014 19:43, Pol Hallen wrote: Hi all, I need add to my script a notify if a process take more than X time, so using ps I can see what time take a process: [snip] Maybe use timeout(1) to send a signal (e.g. USR1) and have your script trap that signal and send a mail when it receives

Re: Shutdown computer after a specific command has been executed

2013-12-09 Thread Lars Noodén
On 12/09/2013 01:42 PM, Muntasim-Ul-Haque wrote: Hi, I need a tool that would make sure that, my computer would shutdown after a specific command has been executed. This tool would just wait for the Terminal for executing a command, like '/sudo apt-get upgrade/' and then after the command has

Re: Shutdown computer after a specific command has been executed

2013-12-09 Thread Lars Noodén
On 12/09/2013 03:30 PM, Ralf Mardorf wrote: On Mon, 2013-12-09 at 14:48 +0200, Lars Noodén wrote: If you want it shut down regardless of the outcome of apt, then this should do it: sudo apt-get upgrade; sudo shutdown -h now Wrong, if the upgrade should take to long, then you need

Re: about MS email retrieve

2013-11-23 Thread Lars Noodén
On 11/23/2013 06:41 PM, Joe wrote: has to live with it as there are no MS alternatives. Not quite. Citadel and Kolab offer the same functionality, but in a more secure, modular architecture. Recently OpenChange is a transparent replacement:

Re: [OT] P* language web page (Was: Re: P* - New language for web programming)

2013-11-18 Thread Lars Noodén
On 11/19/2013 01:50 AM, Atle Solbakken wrote: Den 18. nov. 2013 22:45, skrev Alois Mahdal: I haven't seen the old one, but this one looks OK to me, except that the fonts are about 2x as big as should be. For example, the main title in header does not even fit my screen (1280x800), it cuts

Re: Run script for each ssh login

2013-11-13 Thread Lars Noodén
You could try making a script and then calling it with ForceCommand. Have it fail to abort the session or call a shell to allow it to proceed. Regards, /Lars -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Re: No space left on device (28) but device is NOT full!

2013-11-05 Thread Lars Noodén
On Tue, Nov 05, 2013 at 03:13:10PM +0400, Reco wrote: perl -e 'for(popularity-*){((stat)[9](unlink))}' I have two questions. Why before unlink and why stat[9] there? stat[9] is mtime. Regards, /Lars -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of

Re: No space left on device (28) but device is NOT full!

2013-11-05 Thread Lars Noodén
On 11/05/2013 05:33 PM, Reco wrote: Hi. On Tue, Nov 05, 2013 at 04:25:13PM +0200, Lars Noodén wrote: On Tue, Nov 05, 2013 at 03:13:10PM +0400, Reco wrote: perl -e 'for(popularity-*){((stat)[9](unlink))}' I have two questions. Why before unlink and why stat[9] there? You have to pass

Re: sudo and UNIXes

2013-10-28 Thread Lars Noodén
On 10/28/2013 03:47 PM, Reco wrote: On Sun, Oct 27, 2013 at 09:28:51PM -0600, Joe Pfeiffer wrote: [snip] You also have to add to the picture such a vulnerability, and I haven't noticed any. If we're speaking of public vulnerabilities: CVE-2010-0427. CVE-2013-1775 (allows bypass sudoders

Re: How to format the command output like MySQL output

2013-10-21 Thread Lars Noodén
On 21.10.2013 01:33, Shawn Wilson wrote: Lars Noodén lars.noo...@gmail.com wrote: On 20.10.2013 04:17, 陶治江 wrote: 于 2013-10-20 0:53, Lars Noodén 写道: On 19.10.2013 19:35, 陶治江 wrote: [snip] I think it seems good like this, but I do not know how to make out it.(someone says awk, sed may

Re: How to format the command output like MySQL output

2013-10-20 Thread Lars Noodén
On 20.10.2013 04:17, 陶治江 wrote: 于 2013-10-20 0:53, Lars Noodén 写道: On 19.10.2013 19:35, 陶治江 wrote: [snip] I think it seems good like this, but I do not know how to make out it.(someone says awk, sed may help, but the environment does not permit it). Is there some libs or tools can help make

Re: web-gui for scripts

2013-10-19 Thread Lars Noodén
On 18.10.2013 20:56, Pol Hallen wrote: [snip] But is boring everytime connect to ssh and put new domain using command line... :-/ [snip] You could try a single-purpose key. You are logging in using keys already, I hope? If you combine the single-purpose key with some changes to ~/.ssh/config

Re: How to format the command output like MySQL output

2013-10-19 Thread Lars Noodén
On 19.10.2013 19:35, 陶治江 wrote: [snip] I think it seems good like this, but I do not know how to make out it.(someone says awk, sed may help, but the environment does not permit it). Is there some libs or tools can help make output result good and elegent? [snip] Perl would be the next step

Re: web-gui for scripts

2013-10-18 Thread Lars Noodén
On 18.10.2013 15:35, Pol Hallen wrote: Howdy :-) I searching for what is the way to create a gui interface for my scripts (security web-gui). So, a script could be something like this (execute by root user): #!/bin/bash # pr.sh /etc/postfix reload So, I must create a gui do reload

Re: block a program from access the Internet.

2013-09-10 Thread Lars Noodén
On 10.09.2013 01:54, Pascal Hambourg wrote: Lars Noodén a écrit : Vincent's link suggests that --cmd-owner was removed from iptables entirely. Actually it was removed from the kernel part of iptables, not from the iptables userland. It would be important to find a more authoritative

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 09.09.2013 14:01, atar wrote: Hi there!! Just wanted to know please if there's a way to block a specific program from accessing the Internet while preserving at the same time the ability of other programs to access the Internet, and if there's a way, so how? Thanks in advance!!

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 9/9/13 3:14 PM, atar wrote: Thanks for replying! Unfortunately, when invoking the 'iptables' command with the arguments you've suggested, the program says: iptables v1.4.14: unknown option --cmd-owner Try `iptables -h' or 'iptables --help' for more information. Regards! atar. My

Re: avoid starting a program during reboot

2013-09-09 Thread Lars Noodén
On 9/9/13 1:16 PM, lina wrote: Hi, I do not want to start some program, such as apache server, during reboot, shall I simply remove it from /etc/init.d/ ? haha ... is it a bit brutal? or lack elegance? THanks with best regards, Your default runlevel is 2, so you would look in

Re: avoid starting a program during reboot

2013-09-09 Thread Lars Noodén
On 9/9/13 1:39 PM, lina wrote: update-rc.d -f apache2 remove That should get it from all the rc?.d directories. Gorgeous, thanks both of you. An after thought: If you want it to stick permanently even after upgrades you will also have to re-populate the directories with stop scripts:

Re: avoid starting a program during reboot

2013-09-09 Thread Lars Noodén
On 9/9/13 1:51 PM, lina wrote: I notice apach2 still in /etc/init.d/, it is good, so I can restart it when I need it (only occasionally). Yes. You can use that script to start (and then stop) the service on demand. /etc/init.d/apache2 start That directory is where the template script

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 09.09.2013 14:58, ken wrote: On 09/09/2013 05:54 AM Lars Noodén wrote: On 9/9/13 3:14 PM, atar wrote: Thanks for replying! Unfortunately, when invoking the 'iptables' command with the arguments you've suggested, the program says: iptables v1.4.14: unknown option --cmd-owner Try

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 09.09.2013 14:58, ken wrote: On 09/09/2013 05:54 AM Lars Noodén wrote: On 9/9/13 3:14 PM, atar wrote: Thanks for replying! Unfortunately, when invoking the 'iptables' command with the arguments you've suggested, the program says: iptables v1.4.14: unknown option --cmd-owner Try

Re: avoid starting a program during reboot

2013-09-09 Thread Lars Noodén
On 09.09.2013 17:22, Brian wrote: On Mon 09 Sep 2013 at 13:47:25 +0300, Lars Noodén wrote: On 9/9/13 1:39 PM, lina wrote: update-rc.d -f apache2 remove That should get it from all the rc?.d directories. Gorgeous, thanks both of you. An after thought: If you want it to stick

Re: Apache2 neds to ne reset

2013-09-09 Thread Lars Noodén
On 09.09.2013 19:43, John W. Foster wrote: I have an installation of Apache2 that is misconfigured no longer works. One way would be to remove the package apache2 and then move the config files out of the way. Then reinstall apache2 to get the default settings back. apt-get remove

Re: block a program from access the Internet.

2013-09-09 Thread Lars Noodén
On 10.09.2013 00:36, atar wrote: Lars wrote: One possible explanation might be SMP: $ uname -a Linux debian 3.2.0-4-686-pae #1 SMP Debian 3.2.41-2+deb7u2 i686 GNU/Linux Regards, /Lars Sorry, but what's your meaning by 'SMP'? Regards, atar. Ken's message had this line:

Re: difference Debian, solaris, freebsd

2013-08-29 Thread Lars Noodén
On 29.08.2013 16:15, Muhammad Yousuf Khan wrote: what are the major differences btw the three OS. Debian, Solaris, Freebsd [snip] Well the most obvious difference is package management. Aside from that you can always add GNU utilities to Solaris and FreeBSD so that the differences from a user

Re: difference Debian, solaris, freebsd

2013-08-29 Thread Lars Noodén
On 29.08.2013 17:20, Muhammad Yousuf Khan wrote: Well the most obvious difference is package management. Aside from that you can always add GNU utilities to Solaris and FreeBSD so that the differences from a user perspective can be quite small. thanks for your response, but i am asking in

Re: sudo questions

2013-08-14 Thread Lars Noodén
On 14.08.2013 17:36, Jerry Stuckle wrote: I agree in principle that sudo is better then su. The problem I have with it is security; when you use sudo you type in your own password. So if your password is compromised, the hacker can do anything the sudo user can do - which may be very bad.

Re: Continuous brute force attempt from own server !!!

2013-07-27 Thread Lars Noodén
On 07/26/2013 11:26 PM, Brian wrote: On Fri 26 Jul 2013 at 12:55:04 +0300, Lars Noodén wrote: disabling that key and making a new one for yourself. It's a good idea for keys to be rotated periodically anyway. Does this 'good idea' have reasons to support it? It is for much the same

Re: Continuous brute force attempt from own server !!!

2013-07-26 Thread Lars Noodén
On 07/26/2013 12:05 PM, J B wrote: accepted public key from username_of_my_local_box from WAN_IP_of_my_local_box port 50574 ssh2 That looks like a valid log in from WAN_IP_of_my_local_box using one of your keys. If it is not you or one of your scripts then start by disabling that key and making

Re: How do you manage encrypted mail?

2013-07-04 Thread Lars Noodén
On 07/04/2013 03:00 AM, Richard Lawrence wrote: On Tue, Jul 02, 2013 at 03:18:54PM -0400, Rob Owens wrote: Icedove/Thunderbird has the Enigmail extension to handle encryption. You might want to give that a try as well, particularly since you are trying to encourage others to use encryption

Re: wacky question

2013-06-24 Thread Lars Noodén
On 06/24/2013 02:41 PM, Lisi Reisz wrote: So it is remarkable that he was able to predict so accurately what would be done with computers and CCTV (which had not of course been invented). I think some of that has less to do with actual prediction than it has to do with many individuals

Re: From Squeeze to Wheezy: An upgrade problem

2013-06-21 Thread Lars Noodén
On 06/21/2013 01:04 AM, John wrote: 1. #dpkg --get-selections \* | grep -e install -e hold | grep -v deinstall ~/my-selections-$(date +%Y%m%d) I'd go with the raw output of dpkg: $ dpkg --get-selections ~/my-selections-$(date +'%F') Sometimes it is important to know which packages

Re: Debian is the best!

2013-06-18 Thread Lars Noodén
On 06/18/2013 05:03 PM, Dirk wrote: you are clearly talking out of your ass... a boot loader doesn't need features other than loading the kernel... what crucial work do you do with the features of grub? spreadsheets? presentations? project managing? or do you play it like a text adventure

Sound from scratch on desktop

2013-06-17 Thread Lars Noodén
What do I need to add to get sound on Wheezy? I've installed pulseaudio but can't find any application added to the menus Sound Video, Accessories, or Preferences. Regards, /Lars -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Enabling laptop suspend

2013-06-17 Thread Lars Noodén
I've selected 'Laptop' in taskel and had it install the packages that go with that selection. When I close the lid of the laptop, the screen light goes out for a while but then seems to come back on after a minute or two. How can I get it to go into sleep or hibernate mode automatically when I

Ubuntu's Unity desktop

2013-06-11 Thread Lars Noodén
Not that I would consider running it myself, but is Ubuntu's Unity desktop available in any way for Debian? Or is it staying downstream? Regards, /Lars -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Re: From Cameron AFRICA

2013-05-25 Thread Lars Noodén
On 5/25/13 5:54 PM, Slavko wrote: You can try some Window Managers (without DE) too, as OpenBox, FluxBox or FVWM crystal, but for these you will need some learning. These are reported as nicely worked in the 128 MB RAM environments. If you have very low RAM, these window managers (Openbox,

Re: ssh tunnel help

2013-05-22 Thread Lars Noodén
On 5/22/13 4:15 PM, Nelson Green wrote: ... connect my psql client directly to that development server, on it's port 5432. So I want to be able to locally run a command similar to: [me@mymachine]$ psql -U dbusername -h dev1 -p xxx where, if I remember correctly, xxx is the port I tunnel into

Re: About installation DVD's

2013-05-17 Thread Lars Noodén
On 5/17/13 7:39 PM, Rupesh Reddy wrote: No one of you have answered my question ie., what's the process going on. I am relatively new to Debian. As I am living in remote area I am asking the questions above and also I can't use jidigo. Cheers, Rupesh. I missed whether you were planning

Re: Secure way of voice communication between two PCs

2013-05-10 Thread Lars Noodén
If you both have access to eachother's computers then the method in the thread below might be portable in some way to Debian if an alternative to aucat can be found. http://kerneltrap.org/mailarchive/openbsd-misc/2009/6/5/5882003 Otherwise, you could go SIP. Jitsi claims to have good

Re: Without SKYPE?

2013-05-03 Thread Lars Noodén
On 5/2/13 11:08 PM, Brian wrote: On Thu 02 May 2013 at 22:20:28 +0300, Lars Nooden wrote: On Thu, 2 May 2013, Doug wrote: On 05/02/2013 12:29 PM, Lars Nooden wrote: There are Blink, Linphone, Ekiga, Jitsi, and maybe a few others. Jitsi is quite useful. These are all SIP phones so they

Re: Without SKYPE?

2013-05-03 Thread Lars Noodén
On 5/2/13 11:40 PM, Brian wrote: On Thu 02 May 2013 at 16:22:55 -0400, staticsafe wrote: On 5/2/2013 16:14, Brian wrote: On Thu 02 May 2013 at 15:28:08 -0400, staticsafe wrote: On 5/2/2013 15:24, Brian wrote: I did. How does it allow someone not running the *Skype spoftware* to conect

Re: what's your Debian uptime?

2013-04-17 Thread Lars Noodén
On 4/17/13 3:12 PM, Brad Rogers wrote: [snip] ksplice can be used for security patching the kernel. [snip] What's the status of ksplice in Debian? Oracle hasn't been the best steward for the other FOSS projects and it's been a while since ksplice was in the news. Regards, /Lars -- To

Re: Using unstable for certain packages

2013-04-12 Thread Lars Noodén
On 4/12/13 2:33 PM, Tom Browder wrote: Is it possible to fine tune the package sources so as to use unstable only for certain packages? Best regards, -Tom If the package you want is not in backports, then you could try apt-pinning: http://wiki.debian.org/AptPreferences Regards,

Re: Using unstable for certain packages

2013-04-12 Thread Lars Noodén
I suggest to get the source packages instead and rebuild them for your environment. Check first to see if it is in backports. If it is there that will save having to build it from source. Not everything is there, but if it is, it will save time. Regards, /Lars -- To UNSUBSCRIBE, email to

Re: slow ssh prompt

2013-04-11 Thread Lars Noodén
On 4/11/13 1:45 PM, binary dreamer wrote: Hi. I am running debian 6.0.7 and i am facing a problem with slow response when asking to ssh. once i do a ssh root@192.168.1.77 then the prompt for the passwd it takes around 30 secs to respond. after that everything is fine. is there a way to fix

Re: slow ssh prompt

2013-04-11 Thread Lars Noodén
On 4/11/13 5:16 PM, binary dreamer wrote: [snip] here is the output /etc/ssh# more ssh_config [snip] any ideas? That's ssh_config, for the client. The file to look in is sshd_config, which is for the server. It will be on the machine you are connecting to, rather than on the machine you

Re: Data Archiving

2013-04-08 Thread Lars Noodén
On 4/8/13 7:30 PM, Gary Roach wrote: Ok, the organization is the Unitarian Universalist Church of Long Beach CA. We have been around since 1913. I recently got stuck with the job of Church Historian and am concerned about the closet full of records going back to day one. [snip] Is there a

Re: encrypt connection pc to proxy server

2013-03-06 Thread Lars Noodén
On 03/06/2013 11:53 AM, oxy wrote: Thus, it has to be a solution for 8hs/day straightforward use, best not too slow and not too expensive, but a fair price I'd pay. These are the requirements. So which are the possible options for me in this case? The easiest and least complex solution was

  1   2   >