Re: [eug-lug]FileSystem.mount()

2003-12-12 Thread T. Joseph Carter
On Thu, Dec 11, 2003 at 11:33:45AM -0800, Brad Davidson wrote:
 I gave LUFS/SSHFS a try a while ago. The project as a whole looked very 
 hackish, and it crashed constantly on my laptop.
 
 Now my laptop is PPC so there may be some endianness bugs, but even so - 
 it seemed very amateur to me.

How long ago was this?

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


[eug-lug]Equilibrium==movie...

2003-12-12 Thread Linux Rocks !
Equilibrium, I just watched it... It was ok, not great, but the thing that had 
me scratching my head was : Could they copy the matrx any more ? i really 
think someone told the main actor that he was going to be the next keanu. 
Anyway i was wondering what some of you guys thougth of it?

Jamie
-- 
Linux: because a PC is a terrible thing to waste
-- [EMAIL PROTECTED] put this on Tshirts in '93

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]FileSystem.mount()

2003-12-12 Thread Brad Davidson
Maybe 6 months or so? I don't recall exactly. I'm sure it's improved 
since then, but it had a 'cruft' flavor to it that I don't feel from a 
lot of startup projects.

-Brad

T. Joseph Carter wrote:
On Thu, Dec 11, 2003 at 11:33:45AM -0800, Brad Davidson wrote:

I gave LUFS/SSHFS a try a while ago. The project as a whole looked very 
hackish, and it crashed constantly on my laptop.

Now my laptop is PPC so there may be some endianness bugs, but even so - 
it seemed very amateur to me.


How long ago was this?
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


[eug-lug]SCO DDoS

2003-12-12 Thread Bob Miller
Early Wednesday morning, The SCO Group's web server was allegedly
attacked in a SYN flood DDoS attack.

SCO made a press release about it, and their stock price went up.
(I'm really curious what goes on inside the mind of a day trader...)

Some people didn't believe the DDoS was real.  This Groklaw article is
the focus point for that viewpoint.

http://www.groklaw.net/article.php?story=20031210163721614

Today, CAIDA published an article stating that they did indeed see a
backscatter effect from SCO's DDoS on their Network Telescope.

http://www.caida.org/analysis/security/sco-dos/

So it appears that the DDoS was real.

(BTW, check out this totally cool movie from CAIDA.)
http://www.caida.org/outreach/resources/animations/passive_monitoring/backscatter.mpg

-- 
Bob Miller  Kbob
kbobsoft software consulting
http://kbobsoft.com [EMAIL PROTECTED]
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]SCO DDoS

2003-12-12 Thread Ben Barrett
Bob, the caida analysis repeated refers to a distributed denial-of-service
attack (DDoS) against SCO, but many other parts, and groklaw, refer to a DoS
attack.  It was my understanding that SYN flood attacks are generally not
distributed attacks, although I'm certain they *could* be coordinated...
just that usually only one attacker is needed, with good bandwidth, to
generate a big flood.  Anyone have any clarification on whether this is
truly a DDoS, or technically a DoS??  (thanks)

Now to rip on SCO:  maybe someone should tell them about the great free code
they could steal to protect them from this stuff... it's been around a
while, no?  Apparently, unixware isn't up-to-snuff.

ciao,

   Ben

PS - thanks for posting this -- I was following the groklaw banter
yesterday, and discussing it with co-workers.


On Fri, 12 Dec 2003 12:29:40 -0800
Bob Miller [EMAIL PROTECTED] wrote:

| Early Wednesday morning, The SCO Group's web server was allegedly
| attacked in a SYN flood DDoS attack.
| 
| SCO made a press release about it, and their stock price went up.
| (I'm really curious what goes on inside the mind of a day trader...)
| 
| Some people didn't believe the DDoS was real.  This Groklaw article is
| the focus point for that viewpoint.
| 
| http://www.groklaw.net/article.php?story=20031210163721614
| 
| Today, CAIDA published an article stating that they did indeed see a
| backscatter effect from SCO's DDoS on their Network Telescope.
| 
| http://www.caida.org/analysis/security/sco-dos/
| 
| So it appears that the DDoS was real.
| 
| (BTW, check out this totally cool movie from CAIDA.)
| http://www.caida.org/outreach/resources/animations/passive_monitoring/backscatter.mpg
| 
| -- 
| Bob Miller  Kbob
| kbobsoft software consulting
| http://kbobsoft.com [EMAIL PROTECTED]

-- 
just me, Ben.
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]FileSystem.mount()

2003-12-12 Thread T. Joseph Carter
On Fri, Dec 12, 2003 at 07:41:15AM -0800, Brad Davidson wrote:
 Maybe 6 months or so? I don't recall exactly. I'm sure it's improved 
 since then, but it had a 'cruft' flavor to it that I don't feel from a 
 lot of startup projects.

The whole idea of a filesystem in userspace is pretty hackish, so I won't
ask what's wrong with it.  Instead, I'll ask: What would be a better way
to do it?

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]FileSystem.mount()

2003-12-12 Thread Bob Miller
T. Joseph Carter wrote:

 The whole idea of a filesystem in userspace is pretty hackish, so I won't
 ask what's wrong with it.  Instead, I'll ask: What would be a better way
 to do it?

Give your filesystem an NFS server interface.  An NFS server listens
for SunRPC/UDP packets and replies with more of the same.  You can't
get better isolation from the kernel than that.  Better, it uses the
very portable Berkeley Socket interface, so the same code could run on
Linux, HP/UX and Windows with a few tweaks.  It can be network
transparent if you want, or it can be restricted to localhost.

-- 
Bob Miller  Kbob
kbobsoft software consulting
http://kbobsoft.com [EMAIL PROTECTED]
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


[eug-lug]power fluctuations

2003-12-12 Thread Ben Barrett
We're getting some power fluctuations here at work, by the river
roughly across from the UO. 

Anyone else?

   Ben
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]power fluctuations

2003-12-12 Thread Ralph Zeller
Here too, in Cottage Grove.

On 12/12/03 02pm, Ben Barrett wrote:
 We're getting some power fluctuations here at work, by the river
 roughly across from the UO. 
 
 Anyone else?
 
Ben
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


[eug-lug]Those HP Servers

2003-12-12 Thread Bob Miller
As you know if you were at EUGLUG's clinic last night, we have four
monstrous HP servers that the City of Eugene recently donated.  The
biggest of them has dual 200 MHz Pentiums, 512 MB of RAM, a hardware
RAID of 12 drives totaling 78 GB, and triply redundant power supplies,
all housed in a cabinet the size and shape of an end table.

So, compared to a $300 PC from Best Buy, these machines are slow,
huge, and power hungry, but they have good disk bandwidth, and their
power supplies won't burn out anytime soon. (-:  They are also free.

The question is, what should we do with them?  Larry suggested
donating them to a local nonprofit, and I think that's a good idea.
But it'd be good to target a nonprofit that can actually use the
performance characteristics of the machines that we have.

I'm thinking a database server.  What could a nonprofit do with a high
performance database over 10 GB in size?

Maybe we could have a contest for the most creative use of these
servers, and award the servers to the best entrants?

Or would society get the most benefit from recycling these junkers
responsibly, then holding a bake sale to buy Headstart a new Celeron
box?

Brainstorming time.  Throw out some ideas.

-- 
Bob Miller  Kbob
kbobsoft software consulting
http://kbobsoft.com [EMAIL PROTECTED]
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


[eug-lug]newbie-ish question

2003-12-12 Thread john marten

   We have had a range if ip addy's(xxx.xxx.xxx.xx) we've used forever.
   Now our office

   is moving and our ISP says we will now be getting our #'s from them
   (dhcp?)

and that we don't need to do anything and that everything will work

   just fine. I'm pretty sure he's right about the Win pcs and the

   obsd firewall (packetfiltering bridge). but what about the obsd

   server that runs our web and email services? In resolve.conf it lists:

search ourdomain.com

lookup file bind

nameserver xxx.xxx.xxx.xx

nameserver ###.###.###.##

   Our nameservers will remain the same but our new addressing scheme is
   something like

   10.0.0.#

Is there something he doesn't know about that I will probably have

to change? Or is he right and everything will just plug and play?

thoughts, comments, experiences? Regards, j

 _

   [1]Winterize your home with tips from MSN House  Home.

References

   1. http://g.msn.com/8HMAENUS/2746??PS=
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Those HP Servers

2003-12-12 Thread Larry Price
On Friday, December 12, 2003, at 03:30  PM, Bob Miller wrote:

As you know if you were at EUGLUG's clinic last night, we have four
monstrous HP servers that the City of Eugene recently donated.  The
biggest of them has dual 200 MHz Pentiums, 512 MB of RAM, a hardware
RAID of 12 drives totaling 78 GB, and triply redundant power supplies,
all housed in a cabinet the size and shape of an end table.
snip
The question is, what should we do with them?  Larry suggested
donating them to a local nonprofit, and I think that's a good idea.
But it'd be good to target a nonprofit that can actually use the
performance characteristics of the machines that we have.
Found at least one, KRVM which is a project of the 4J school district 
is in need of
a stable FTP/Samba server for keeping audio files and serving them up 
to students for purposes of Media production.


I'm thinking a database server.  What could a nonprofit do with a high
performance database over 10 GB in size?
keeping a list of who's naughty and nice ;-)

--
You are the eventuality of an anomaly , which despite my sincerest
efforts I have been unable to eliminate from  what is otherwise a 
harmony
of mathematical precision.  -The Architect
Microsoft has resolved this issue. We have put processes in place to
ensure there is no recurrence of this eventuality. -Microsoft

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]newbie-ish question

2003-12-12 Thread Jacob Meuser
On Fri, Dec 12, 2003 at 10:29:18PM +, john marten wrote:
 
We have had a range if ip addy's(xxx.xxx.xxx.xx) we've used forever.
Now our office
 
is moving and our ISP says we will now be getting our #'s from them
(dhcp?)
 
 and that we don't need to do anything and that everything will work
 
just fine. I'm pretty sure he's right about the Win pcs and the
 
obsd firewall (packetfiltering bridge). but what about the obsd
 
server that runs our web and email services? In resolve.conf it lists:
 
 search ourdomain.com
 
 lookup file bind
 
 nameserver xxx.xxx.xxx.xx
 
 nameserver ###.###.###.##
 
Our nameservers will remain the same but our new addressing scheme is
something like
 
10.0.0.#
 
 Is there something he doesn't know about that I will probably have
 
 to change? Or is he right and everything will just plug and play?
 
 thoughts, comments, experiences? Regards, j

As long as the nameservers in /etc/resolv.conf are pointing at the
right nameservers, you should be OK.

If you do have a local net, are the web and email services for the
local network, or for the internet?

Do you have your own local network with IPs 10.0.0.*, or is your
ISP giving your boxes those addresses?

If your ISP is assingining you IP addreses AND doing your DNS, then
it's all their responsibility, and you just need /etc/resolv.conf
to point to their nameservers.

-- 
[EMAIL PROTECTED]
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]power fluctuations

2003-12-12 Thread T. Joseph Carter
On Fri, Dec 12, 2003 at 02:16:44PM -0800, Ben Barrett wrote:
 We're getting some power fluctuations here at work, by the river
 roughly across from the UO. 
 
 Anyone else?

Here on the UO campus.

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Linux at Lane CC

2003-12-12 Thread john fleming
Ken Barber wrote:

Last May we had a thread on eug-lug regarding Linux classes at LCC.  Beaker
had a great suggestion which has finally become reality:
On Thursday 29 May 2003 4:51 pm, Beaker wrote:
 

I've always thought a Best of Open Source series would be of interest to
people. Many apps such as OpenOffice, The Gimp, and Mozilla run on several
operating systems - not _just_ Linux :J - and may have broader appeal then
Linux-only apps.
   

It's taken months to get it approved, but I'll be teaching a best of Open
Source class at LCC Winter term.  The descriptions of all of my linux
classes are here:
http://www.lanecc.edu/cont_ed/cont_ed/cc_menu_winter04.html#3

and instructions on how to register are here:

http://www.lanecc.edu/cont_ed/faq.htm

(hint:  the website isn't easy.  Best way to register is by phone)

Note, if you will, that I'll also be teaching an Introduction to Linux
class for newbies at LCC now.  It will eventually be geared to people whose
workplace has switched to Linux... which should counter the M$ FUD that
goes, where will you get trained people to use Linux in your workplace? 
But there might be some nonprofits out there who are already using it, and
this class will help these folks quickly get up to speed.

Of course, the Linux system administration class (formerly Red Hat Linux
System Administration) is also being offered.  We plan to expand it to two
classes, basic and a second-level class, starting Spring term.  I also
plan to have earned my RHCE, and possibly a couple of LPI certs, by then.
Finally, we're also offering a special Linux sysadmin class for the folks at
K12s who are in charge of keeping their computers running.
Please spread the word.

Ken

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug
 

I remember the thread well and I am impressed that the best of and, k-12 
classes made it into the catalog. What are the chances of the non distro 
specific intermeadiate linux users class or a beggining sys admin class 
making it to the schedules in the next year or so?
   
John Fleming

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]SCO DDoS

2003-12-12 Thread Ben Barrett
SYN cookies (the protective fix) since '99?  Some other date?

   Ben

On Fri, 12 Dec 2003 15:21:41 -0800
Brad Davidson [EMAIL PROTECTED] wrote:


| 
| Yes, but there have been patches out for routers/firewalls/TCP stacks 
| for AGES that make it much less of a problem.
| 
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]Those HP Servers

2003-12-12 Thread beaker
 Maybe we could have a contest for the most creative use of these
 servers, and award the servers to the best entrants?

 Or would society get the most benefit from recycling these junkers
 responsibly, then holding a bake sale to buy Headstart a new Celeron
 box?

 Brainstorming time.  Throw out some ideas.

Mini fridge.


--
[ SiMpLe MaChInEs ] -- gopher://beaker.mdns.org
   or (via proxy)
http://gopher.floodgap.com/gopher/gw.lite?gopher://beaker.mdns.org:70/1
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]FileSystem.mount()

2003-12-12 Thread Bob Miller
T. Joseph Carter wrote:

 Doesn't this open you up to the world of evil that is NFS security?

Not if you restricted it to localhost.  NFS uses a priveleged
port, and ordinary users can't sniff the lo interface, so
I don't see a way offhand to simulate a client or eavesdrop
on other clients from localhost.

Maybe I'm missing something...

-- 
Bob Miller  Kbob
kbobsoft software consulting
http://kbobsoft.com [EMAIL PROTECTED]
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


[eug-lug]Thanks Larry, Bob and Cory! Re: Intruder

2003-12-12 Thread Woody Mims
You guys rock!

The  blackjack:localhost is a port assigned to network blackjack at 
TCP/UDP 1025 in /etc/services. I don't remember having that port open 
(or even assigned) in previous Slackware distributions and can't imagine 
why PJV left this open, but I have closed it and it disappears from the 
netstat list.

Woody

___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


[eug-lug]whack: jack and phlack (sound and security projects)

2003-12-12 Thread Ben Barrett
Fun projects I found over dinner:

1.  http://jackit.sourceforge.net/
what is jack?

JACK is a low-latency audio server, written for POSIX conformant operating
systems such as GNU/Linux and Apple's OS X. It can connect a number of
different applications to an audio device, as well as allowing them to share
audio between themselves. Its clients can run in their own processes (ie. as
normal applications), or can they can run within the JACK server (ie. as a
plugin).

JACK was designed from the ground up for professional audio work, and its
design focuses on two key areas: synchronous execution of all clients, and
low latency operation.  

check out http://jackit.sourceforge.net/apps/ applications that use jack


2.  http://www.phlak.org/modules/news/
PHLAK is a modular live security Linux distribution. PHLAK comes with two
light gui's (fluxbox and XFCE4), many security tools, and a spiral notebook
full of security documentation. PHLAK is a direct fork of Morphix, created
by Alex de Landgraaf.  another child of debian, in the line of knoppix...

it has an impressive list of tools:
http://www.phlak.org/modules/sections/index.php?op=listarticlessecid=1
nearby mirrors:
http://phlak.oregonstate.edu/phlak-0.2.iso
ftp://ftp.oregonstate.edu/.1/phlak/phlak-0.2.iso
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]whack: jack and phlack (sound and security projects)

2003-12-12 Thread Bob Crandell
And I guess if you haven't used it yet, you don't know Jack.

Sorry.  I'll leave now.

Ben Barrett ([EMAIL PROTECTED]) wrote:

Fun projects I found over dinner:

1.  http://jackit.sourceforge.net/
what is jack?

JACK is a low-latency audio server, written for POSIX conformant operating
systems such as GNU/Linux and Apple's OS X. It can connect a number of
different applications to an audio device, as well as allowing them to share
audio between themselves. Its clients can run in their own processes (ie. as
normal applications), or can they can run within the JACK server (ie. as a
plugin).

JACK was designed from the ground up for professional audio work, and its
design focuses on two key areas: synchronous execution of all clients, and
low latency operation. 

check out http://jackit.sourceforge.net/apps/ applications that use jack


2.  http://www.phlak.org/modules/news/
PHLAK is a modular live security Linux distribution. PHLAK comes with two
light gui's (fluxbox and XFCE4), many security tools, and a spiral notebook
full of security documentation. PHLAK is a direct fork of Morphix, created
by Alex de Landgraaf.  another child of debian, in the line of knoppix...

it has an impressive list of tools:
http://www.phlak.org/modules/sections/index.php?op=listarticlessecid=1
nearby mirrors:
http://phlak.oregonstate.edu/phlak-0.2.iso
ftp://ftp.oregonstate.edu/.1/phlak/phlak-0.2.iso
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


--
Assured Computing
When you need to be sure.
[EMAIL PROTECTED]
www.assuredcomp.com
Voice - 541-868-0331
FAX - 541-463-1627
Eugene, Oregon


___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]whack: jack and phlack (sound and security projects)

2003-12-12 Thread Jacob Meuser
On Fri, Dec 12, 2003 at 09:39:41PM -0800, Ben Barrett wrote:
 Fun projects I found over dinner:
 
 1.  http://jackit.sourceforge.net/
 what is jack?
 
 JACK is a low-latency audio server, written for POSIX conformant operating
 systems such as GNU/Linux and Apple's OS X. It can connect a number of
 different applications to an audio device, as well as allowing them to share
 audio between themselves. Its clients can run in their own processes (ie. as
 normal applications), or can they can run within the JACK server (ie. as a
 plugin).
 
 JACK was designed from the ground up for professional audio work, and its
 design focuses on two key areas: synchronous execution of all clients, and
 low latency operation.  
 
 check out http://jackit.sourceforge.net/apps/ applications that use jack

JACK is cool.  If you use JACK, I highly recommend subscribing to
the Planet CCRMA mailing list.  JACK development is happening quickly,
and keeping JACK apps in sync with JACK, and keeping JACK in sync with
ALSA, takes some effort to stay current and keep your audio system stable.

There's also now an xmms-jack plugin, so you can apply effects to
internet radio and record/mix it in realtime, if something like that
interests you :)

If there are Linux audio program that don't use JACK within the
next 6-8 months, they're probably better off dead.  (And if there
are audio programs that don't use ALSA natively in the next three
months, they're _really_ better off dead, as ALSA will be the default
audio system in Linux 2.6.0.)

-- 
[EMAIL PROTECTED]
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug


Re: [eug-lug]whack: jack and phlack (sound and security projects)

2003-12-12 Thread Jacob Meuser
On Sat, Dec 13, 2003 at 06:07:39AM +, Bob Crandell wrote:
 And I guess if you haven't used it yet, you don't know Jack.
 
 Sorry.  I'll leave now.

Actually, the site asks, Do you know JACK?

http://jackit.sourceforge.net/docs/faq.php#a6

-- 
[EMAIL PROTECTED]
___
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug