In the context of online banking, where Windows of some flavour is the
desktop OS, I see a substantial risk arising through spyware and/or
viruses. I suspect that a neat way to mitigate this would be to run an
OS from a CD which offers nothing more fancy than a basic web-browser.
Is there
want from scratch...
Steve
--
gentoo-user@lists.gentoo.org mailing list
Thanks for all your suggestions...
I will look into fail2ban... that might be what I need... While I could
crank BLOCKING_PERIOD for blacklist.py to an absurdly high value, this
(AFAIK) will not persist blocks when the server is powered down or rebooted.
I need to retain port 22 and can't
Situation: There's a LAN with a Netgear ADSL router... heterogenous OS,
including Gentoo, are installed on various PCs on the LAN.
I'd like to know what communicating IPs are consuming most bandwidth,
and to quantify how much bandwidth they are using... Ideally, I'd like
to see a real-time
Alan wrote:
Give iftop a look.
great tool... unfortunately, even in promiscuous mode, it doesn't track
TCP data except to/from the host on which it is running. I presume this
means that my Netgear DSL router implements a switch as as opposed to a
hub...
Nice try though...
--
I want to be able to manage a sizeable number of reference manuals I
have in various ebook formats - CHM; PDF etc. scattered around various
PCs; on CDs etc. - and I'm looking for a web-app to help me organise
them as a virtual reference library.
I want to be able to tag the files by 'subject
Has anyone else played with iFolder on Gentoo?
I followed these links:
http://gentoo-wiki.com/HOWTO_iFolder
http://www.ifolder.com/index.php/HowTos
http://www.ifolder.com/index.php/HowTo:Building_iFolder_Enterprise_Server_on_Gentoo
I'm playing around with an application that requires me to manage a
large (multi-gigabyte to terabyte), bespoke, frequently-updating data
structure in real-time... key concerns are for durability and
efficiency. While a traditional approach might be to employ an
expensive DBMS on expensive
Has anyone any ideas? The syslog-ng is the usually the first line
reported by top:
4097 root 20 0 3120 1060 708 R 48.3 0.1 677:46.38 syslog-ng
The files in /var/log seem to be growing at an expected slow pace and
aren't reporting anything unexpected. I followed a 'howto' and have
Steve wrote:
Do others get this behaviour - is this a bug in syslog-ng?
Sorry for the multiple posts... a slight error on my part. The sshguard
process wasn't running - a /bin/sh process trying to spawn it was
running (there was no link from /usr/local... to the binary) and when
the binary
Sebastian Günther wrote:
program() only takes 1 argument: the programname.
There aren't two arguments (no comma) - and, yes, the syntax is odd -
but it is exactly what is given by the sshguard man page - and seems to
be confirmed by the syslog-ng manual, too.
BTW: Just curious: you do not
Alan McKinnon wrote:
In short: top lies,
On this occasion, top was telling the truth. ;)
over my ssh tunnel.
Can anyone give me any hints - or, ideally, a link to a how-to?
Thanks...
Steve
Sascha Hlusiak wrote:
The easiest thing would probably be to just use ssh port forwarding because
you already have all the pieces running anyway. Wouldn't a simple
ssh -L 12345:secondapache:https u...@remotessh
and the browsing to https://localhost:12345 do the trick? Or you could use a
Anthony Metcalf wrote:
*That* depends on the exact specifics of what he is/isn't allowed to
be showing.They may not even want the service to show as
existing at that address for whatever reason.
Thanks for all your discussion... I'll try to clarify - the PPP over
SSH approach does seem
Mick wrote:
An adaptor can have more than one public IP address (multi-homing) and you can
use something like: ifconfig eth0:0 192.168.0.2 netmask 255.255.255.0 up to
set them up (increment eth0:1, eth0:2, etc accordingly). However, if your
SSL vhost is listening on a random port you don't
Norberto Bensa wrote:
Is there a straightforward way to make my Gentoo box 'play fair' and
not hog 100% of the bandwidth?
If your router doesn't give you bandwidth and/or traffic shaping
control, you can drop some packets. For example, the following rule
will accept up to 50 packets per
I'm trying to establish a shared repository for semi-structured data...
This could be interpreted in many ways, so I'll try to illustrate with
an example.
Say I'm researching a new topic - for example, the Oil Industry... and
I'm looking to establish a shared resource detailing relevant
I've recently discovered a curious pattern emerging in my system log
with failed login attempts via ssh.
Previously, I noticed dictionary attacks launched - which were easy to
detect... and I've a process to block the IP address of any host that
repeatedly fails to authenticate.
What I see now
propagated DSA keys... but I think this would be
tricky to set up. A shared block-list, I suspect, would be the most
effective response to this attack... and the response most likely to
minimise others' exposure, too.
Steve
Dmitry S. Makovey wrote:
P.S. I actually don't do any of the above. It was just a surge of creative
paranoia
in response to initial request :)
All good ideas - except selling the blacklist... I'd be happiest to
share my blacklist for free... my objective is to minimise exposure to
botnets -
Paul Hartman wrote:
I think using Dmitry's idea of rejecting the first 2 connections, but
then allowing it as normal on the third attempt would satisfy your
requirements for being on the normal port, allowing all IPs and
requiring no special setup on the client end (other than knowing they
Dmitry S. Makovey wrote:
Erm - surely I either need to set up my client to port-knock... which
is a faff I'd rather avoid... in order to use the technique.
nope. just start connection. wait a minute. cancel. start another one. wait a
minute. cancel. start new one - voila! :)
Eeew...
Simon wrote:
Since it is very unlikely that the attacker is targeting you
specifically, changing the port number (and removing root access) will
very likely stop the attack forever. Though, if the attacker did
target you, then you will need some more security tools (intrusion
detection,
Alan McKinnon wrote:
On Thursday 04 December 2008 21:03:17 Christian Franke wrote:
I just don't see what blocking ssh-bruteforce attempts should be good
for, at least on a server where few _users_ are active.
Two reasons:
a. Maybe, just maybe, you overlooked something. Belts,
I am interested in the possibility of running a small-scale oracle
server for some experimental development work. Ideally, I'd install on
gentoo - as this is my server box... though I guess there may be hoops
through which I must jump...
I found this:
I am looking for a web-application to manage contacts... but I'm not
looking for just an address book... I guess this isn't especially
gentoo, but I'd ideally like to run a server on my gentoo box, so I hope
I can be forgiven for asking here.
Personally, I'm absolutely awful at remembering
...
Steve
want to risk contributing to a massive centralised database
of personal information... :)
Thanks, and - of course - I'm still interested in anecdotal hints/tips
from anyone who has attempted something similar.
Steve
Steve wrote:
On the down-side, they both seem to have relatively steep learning
curves relative to my primary objective... i.e. keeping notes about
communications with infrequent contracts... so, for example, if I were
about to meet someone from Acme Corp next week, and I remembered
having
Mick wrote:
On Tuesday 16 June 2009, Steve wrote:
So far I've not got far with either Groupware suite... they're both
close - I wonder how hard it would be to tailor them... Hmmm.
Have a quick look at InfoLog of eGroupware. I think that either on its own
Steve wrote:
Stumped by why the installation test for SASL failed, I ploughed on to
see where it took me. The answer to this, is as far as trying to
access my (working) IMAP server... eGroupware reports:
*The connection to the IMAP Server failed!!*
NO, Authentication failed.
Erm, update
Today my gentoo server that has sat happily churning my mundane (and
lightweight) tasks froze and I noticed when it stopped serving DNS
queries... and the server was even unresponsive from the command
prompt. I rebooted and was a bit taken aback at what I found.
The server currently
Alan McKinnon wrote:
Looks like you have 200 processes sitting there blocking I/O. Is there
anything related in the logs?
Not sure - as I'm not sure where to look, or what to look for.
Your best bet is to examine emerge.log (better still - genlop) and find all
recent upgrades that might
Jarry wrote:
Might be bug in clamd/spamassassin. But it could also be you are
being mail-bombed (e.g. infinite depth of compressed-in-compressed
attachements).
I thought about that - but I can't find an offending email with a bogus
attachment if I am.
I recommend to include some limit for
I've come across SOGo [ http://www.scalableogo.org/ ] and am interested
to try it... though it doesn't seem to have an ebuild in portage.
Does anyone use SOGo on Gentoo, or should I consider using a different
distro to trial this suite?
Neil Bothwick wrote:
On Mon, 28 Sep 2009 12:57:36 +0100, Steve wrote:
I've come across SOGo [ http://www.scalableogo.org/ ] and am interested
to try it... though it doesn't seem to have an ebuild in portage.
It's in the gnustep overlay.
% eix sogo
* gnustep-apps/sogo [1
Neil Bothwick wrote:
On Mon, 28 Sep 2009 13:23:24 +0100, Steve wrote:
I guess I need to do something special to get the 'gnustep overlay'...
I've recently done my eix-sync, so that's not it.
emerge layman and run eix-remote update
Many thanks, I now get the same eix response as you
Volker Armin Hemmann wrote:
yes, don't use locate. Also check the symlinks. Reset them with eselect gcc if
you have to.
Then try all your emerges with --tree you get a lot more helpfull output.
Also, when a dependency is missing revdep-rebuilt loves to fail. You can hunt
that down with
After a recent update, I restarted Apache...
I host a number of trivial development servers (using named virtual
hosts) and also support access to one of them over SSL. While I can
access all my data over http, access by https has stopped working.
I wondered if an update had made apache
Steve wrote:
Firefox under Windows and Ubuntu :
Secure Connection Failed
An error occurred during a connection to server.
Peer's certificate has an invalid signature.
(Error code: sec_error_bad_signature)
Weirder and weirder... when I switch to lynx, it works!
Lynx remotely gives these two
Mick wrote:
I'd take that as a big broad hint that it is looking somewhere else
for certificates in this release and it found default certs.
+1
Check in your default apache (most likely) or vhosts configuration files that
you have SSLCertificateFile and SSLCertificateKeyFile paths
I have recently started looking at server resilience and availability in
the context of a hardware failure or hardware upgrade. I've come to the
conclusion that it would be very desirable if terrabyte-scale data did
not need to be restored from backup. This isn't a commercial server -
so I'm
On 15/03/2010 15:49, Kyle Bader wrote:
+1 on zfs w/ solaris for storage, just don't go cheap and get desktop disks.
I have to admit, I do like the idea of ZFS, though not quite enough to
justify maintaining Solaris in addition to my other infrastructure.
I was thinking about something rather
On 15/03/2010 18:21, Stroller wrote:
It's hard to be more specific without knowing your usage.
Yes... I was deliberately vague to see what options came up... but I can
be more specific. The budget is miniscule - and the performance demands
(bandwidth and latency) are completely non-challenging.
On 15/03/2010 22:29, Andrea Conti wrote:
This IMHO pretty much rules out any kind of server-class hardware, which
tends to be both costly and power-hungry. If you're thinking about
buying used stuff, be sure to factor in the cost and difficulty of
finding spares in some years' time.
I'm
On 16/03/2010 19:57, Stroller wrote:
How does your system boot if your RAID1 system volume fails? The one
you have grub on? I think you mentioned a flash drive, which I've seen
mentioned before. This seems sound, but just to point out that's
another, different, single point of failure.
Well,
Keith Dart wrote:
I recommend setting up your server hardware on a decent mini-PC with
server grade disks and installing openfiler. The openfiler uses XFS for
local storage and exports NFS and CIFS (and iSCSI if you want that).
http://www.openfiler.com/
It is based on rpath linux and uses a
On a gentoo mailserver, I'm running Postfix 2.6.5 - and, having followed
some howto or other, quite a long time ago, I have this section at the
end of my main.cf:
--
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
On 26/05/2010 20:32, Brandon Vargo wrote:
I hope the above helps.
Thank you very much... that was very informative. Unfortunately, I now
discover I fibbed when I said I had SASL auth set up - I only thought I
had... When I correctly configure thunderbird, I get the following
postfix
OK, I admit it, this is more of a Linux networking challenge, but it's
one I want to resolve under gentoo.
I have two network interfaces - eth0 and tun0 - and both are (somehow)
connected to the internet. When I have eth0's IP address as my default
route, all my traffic is sent out via my NAT
On 17/06/2010 08:26, Rod wrote:
Check out iproute
* sys-apps/iproute2
Latest version available: 2.6.31
Latest version installed: 2.6.31
Size of files: 363 kB
Homepage:
http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2
I already have one openvpn tunnel - and I need another. I've established
configuration launching the second tunnel (tun1, while tun0 is launched
at boot) using the command line to explicitly start openvpn. I'd really
like both tunnels to start at boot time.
In case it is relevant, tun0
On 06/07/10 06:25, Eray Aslan wrote:
i.e. make a soft link to openvpn init script and make a seperate conf
file with the same name as the new init script in your config
directory (usually /etc/openvpn). Init script starts openvpn with the
correct config file.
Many thanks, works perfectly...
On 06/07/10 06:25, Eray Aslan wrote:
i.e. make a soft link to openvpn init script and make a seperate conf
file with the same name as the new init script in your config
directory (usually /etc/openvpn). Init script starts openvpn with the
correct config file.
Many thanks, works perfectly...
I have been thinking of going to x86_64 mode but I'm wondering if
it's worth the trouble with multilib, chroot'ing, firefox-bin and other
compromises (admittedly some minor). I realize I should see some speed
increase but probably only in certain areas such as compiling.
I just switched
allow it, or do I have an outdated version of portage?
Steve Buzonas Jr.
by going to
'Device Drivers Network Device Support Wireless LAN ZyDAS
ZD1211/ZD1211B USB-wireless support '.
Hope it helps.
Steve Buzonas Jr.
On Feb 7, 2008 3:19 AM, Arnau Bria [EMAIL PROTECTED] wrote:
On Wed, 6 Feb 2008 20:37:56 -0500
Steve Buzonas wrote:
Hi!
Hello, reading more about the driver it says that that driver is no
longer maintained and it recommends zd1211rw which is included in the
kernel. You should be able
Stefán István wrote:
(II) NV(0): Monitor0: Using default hsync range of 31.50-37.90 kHz
(II) NV(0): Monitor0: Using default vrefresh range of 50.00-70.00 Hz
is the reason all the other modes are being disabled:
(II) NV(0): Not using default mode 640x350 (vrefresh out of range)
(II) NV(0): Not
on the sound card, rather than relying on the CD
audio lead and mixer settings which seem to be causing you so much trouble.
Cheers,
Steve.
--
[EMAIL PROTECTED] mailing list
Aleksey V. Kunitskiy wrote:
Hi,
Is there any possibility to adjust IO scheduling priority ?
There's ionice which is part of sys-process/schedutils. At least it's
in v1.5.0.
ionice -c2 -p `pidof rtorrent` will make IO very nice.
ionice -c3 -p `pidof rtorrent` claims to wait until
I forgot to mention that I think you need to be using the CFQ
scheduler. Change ionice class doesn't seem to affect the deadline and
anticipatory schedulers' behaviour.
Also I think I had an extra space in there after the -p. Try:
ionice -c2 -p`pidof rtorrent`
--
[EMAIL PROTECTED] mailing
ツ Leandro Sales wrote:
Here I have the same response! Unable to Connect
As was recently established in thread packages.gentoo.org down?:
Christian Heim phreak at gentoo.org wrote:
It's being closed until further notice.
PS Leandro, please don't top post.
--
[EMAIL PROTECTED] mailing
Besides the fact consideration of why the contacts of the card are that
dirty. A short exposure of rubbing alcohol will be okay. Dust the card off
with compressed air or something similar. then use the cotton swab soaked
with a little bit of the alchohol on the contacts in question
On 9/12/07,
On Friday 28 September 2007, Arnau Bria wrote:
--- Couldn't find 'media-gfx/splashutils-1.5.2' to unmerge.
No packages selected for removal by unmerge
is it normal?
According to your earlier post you don't have any versions of splashutils
installed, so yes this is normal:
*
On Friday 28 September 2007, Alexander Skwar wrote:
Yep. It's saying, that any version before 1.5.2 is blocking.
So, do:
emerge -C 'media-gfx/splashutils-1.5.2'
Or if you'd rather not remove splashutils, you'll need to tell portage you're
happy to run version 1.5.2 which is currently marked
On Friday 28 September 2007, Arnau Bria wrote:
Ok, so, why is portage blocking the update?
It's not an update, it's a new install.
Something else which is installed (and probably wanting to be updated) is
trying to pull in splashutils-1.5.2 or later as a dependency. As this
version is not
On Sunday 30 September 2007, Alan McKinnon wrote:
I'm getting a lot of duplicate messages lately, especially from
gentoo-users. I don't know if it's an error on my side or not.
Not here. I've never seen duplicates from any gentoo list. I /have/ seen
several other folks on gentoo-user report
On Sunday 30 September 2007, Neil Bothwick wrote:
Other data in /var/lib. For example, any databases kept in /var/lib/mysql.
Rather than backup MySQL's or Postgres' binary storage I prefer to use the
relevant tool (mysqldump, pgdump[all]) to backup the database
to /root/backups/ just prior to
On Tuesday 02 October 2007, Alexander Skwar wrote:
Hello.
When X.Org 1.4 first hit the portage tree, I masked it, as I had quite
some problems getting it to work work with my Nvidia graphics card.
I decided to stay with 1.3.0.0 for the time being.
Now x11-base/xorg-server-1.4-r2 is in the
On Tuesday 02 October 2007, Rafael Barrera Oro wrote:
(ssh livecd from my pc does not work even after startin sshd in the
remote machine where i am trying to install gentoo)
I frequently install to remote machines in this way.
Have you tried using its IP address?
Are you sure the livecd machine
On Wednesday 03 October 2007, James Colby wrote:
The reason for that is because the suspend kernel is
configuring my hard disk as /dev/hda and my standard kernel is configuring
it as /dev/sda. Does anyone know how I can get the suspend kernel to
assign my hard disk as /dev/sda?
I think
On Monday 08 October 2007, Arnau Bria wrote:
My apache2 worked fine until lasta Friday I update it to 2.2.6.
Now, when I try to access my drupal site, I see this error in firefox:
I'm just guessing, but Apache 2.2.6 removed index.htm from the list of
default index files. It may be possible
On Monday 08 October 2007, Arnau Bria wrote:
You're right, I needed index.php... but now php does not work!!!
Have you run revdep-rebuild, or even simply manually re-emerged PHP after
updating Apache?
not sure if all those dir should be empty...
could you please confirm?
I have only php.ini,
On Friday 02 November 2007, sean wrote:
How is vixie-cron setup to accept remote connections?
Eh? Why would a cron daemon need to accept connections, what does that even
mean in the context of cron?
--
[EMAIL PROTECTED] mailing list
On Saturday 03 November 2007, Grant wrote:
I'm looking for an easy way to encode the video files I acquire into a
single format and level of quality. It would also be nice to be able
to easily burn a DVD of the resultant file that will play on a home
DVD player. I'm sure there are at least
-backup.nongnu.org/
If you ignore the 'rdiff-backup-data' folder it creates then it's more or less
identical to using rsync alone.
HTH,
Steve.
--
[EMAIL PROTECTED] mailing list
On Sunday 04 November 2007, Roger Mason wrote:
Did you have to do anything special to make it work from cron?
No, but then the crontab entry is simply:
47 4 * * * /root/backup.sh
The backup.sh is essentially:
rdiff-backup \
--print-statistics \
--exclude /mnt \
--exclude /dev \
On Sunday 04 November 2007, Shawn Haggett wrote:
Roger Mason wrote:
How have you setup the passwordless ssh? If your using keys with the ssh
keyagent, then when the command is run in cron it wouldn't know where to
find your ssh-agent...
Shawn
I use a use a key with no password without
machine. We had to
reboot the server to get it to see the replacement drive. Perhaps there's
some /proc/ or /sys/ setting to trigger a rescan of the SCSI bus, but I
couldn't find it.
Other than those oddities the drive swap went well.
Cheers,
Steve.
signature.asc
Description
On Thursday 20 December 2007, Stroller wrote:
... I was expecting something
similar to when I've hotplugged SATA drives on my desktop machine.
What controller is in that, please?
Does it do hardware RAID, or is it just a regular SATA controller?
I've done it using both the onboard
I've recently experienced a bizarre failure... and I wondered if anyone
else has experienced something similar or has a suggestion to avoid a
similar annoyance in future.
I run fetchmail to poll 3 servers every minute... and while this has
worked fine for weeks, last night it froze at 2am and
if it was a known
(obscure) bug with the latest version... maybe, for example, one that
only arises in the context of a TCP error or, maybe, a remote server
failing mid-transaction?
Steve
--
gentoo-user@gentoo.org mailing list
[EMAIL PROTECTED] wrote:
The advantage of daemon mode here is that I neither end up with a huge
polling delay nor any risk of a collision where two processes attempt
to access the same POP account at the same time (which I'd expect to
cause aggravation.)
Running from cron will not cause
/etc/default/tar contains a list of tape devices. So on Solaris 2.8
if -f is not specified and $TAPE is not set, which it isn't by default, then
tar will use a tape device *not* stdin/stdout
Steve
--
Steve EvansE-mail
and
Kubuntu on another Compaq Deskpro EN.
But consider myself a Gentoo novice.
This is my first email to the list.
Thanks in advance for any help,
---
Steve Wilson
--
gentoo-user@gentoo.org mailing list
On Wednesday 11 January 2006 08:04, Michael Kintzios wrote:
-Original Message-
From: Steve Wilson [mailto:[EMAIL PROTECTED]
Sent: 11 January 2006 12:42
To: gentoo-user@lists.gentoo.org
Subject: [gentoo-user] remove suse, install gentoo
box: Prostar 2.8Gig ProStar Laptop w
success) on the rest of the
CD's but I know that it just copied the data from CD1 six times.
This is the first time I have ever tried to install a game from CD on linux,
so any help would be appreciated. Thanks.
-
Steve B.
--
gentoo-user@gentoo.org mailing list
success) on the rest of the
CD's but I know that it just copied the data from CD1 six times.
This is the first time I have ever tried to install a game from CD on linux,
so any help would be appreciated. Thanks.
-
Steve B.
--
gentoo-user@gentoo.org mailing list
On Friday 03 February 2006 23:06, fire-eyes wrote:
Steve B. wrote:
Hey everybody,
This is kind of stupid problem, but I just can't seem to figure this
one out. I can't emerge UT2004. I set my CD_ROOT to my cdrom
(/media/hdc) and the first CD copies fine, but it never gives me time
/~rcw/abcde/page/
which is available in gentoo.
I am sure that there are many others though!
Steve
--
Steve EvansE-mail: mailto:[EMAIL PROTECTED]
WEB:http://www.gorbag.com
Registered Linux
I'm trying to setup a qmail sever via the documention found at gentoo.org. I have used these instructions before and all went ok, however now I'm having problems. Everything is starting fine, but when a user tries to auth I get their clients are telling them the server quit and the following is
I'm trying to setup a qmail sever via the documention found at
gentoo.org. I have used these instructions before and all went ok,
however now I'm having problems. Everything is starting fine, but when
a user tries to auth I get their clients are telling them the server
quit and the following is
. Thanks.
V/R
Steve
--
gentoo-user@gentoo.org mailing list
of this. I don't have the luxury of recompiling the
kernel because this is a virutal server running under Xen 2.0.
Thanks!
V/R
Steve
--
gentoo-user@gentoo.org mailing list
a
few weeks.
Is this computer (term used lightly), in the USA ?
Steve
--
account. However I am not going to renew my
subscription.
-- Steve RShadow B
--
gentoo-user@gentoo.org mailing list
I am looking at cobbling together a replacement for my antiquated
hardware answer phone... Ideally I'd use my existing Voice/Fax Modem -
and have voice mail messages delivered to me as emails in some
appropriate attachment - that way I can retrieve them wherever I happen
to be.
I've heard of
alternatives before
I do...
Steve
--
gentoo-user@gentoo.org mailing list
1 - 100 of 262 matches
Mail list logo
