Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-31 Thread Jarry
On 31-Mar-13 4:08, Paul Hartman wrote: Coincidentally, yesterday US-CERT published a small article about DNS amplification attacks and mitigation strategies: http://www.us-cert.gov/ncas/alerts/TA13-088A Thanks for interesting link. I did not know bind has support for response

[gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Nikos Chantziaras
On 30/03/13 17:15, Tanstaafl wrote: Ok, just read the new news item and the linked udev-guide wiki page You should probably also read: http://blog.flameeyes.eu/2013/03/predictably-non-persistent-names and: http://blog.flameeyes.eu/2013/03/predictable-persistently-non-mnemonic-names

[gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Nuno J. Silva (aka njsg)
On 2013-03-31, Nikos Chantziaras rea...@gmail.com wrote: On 30/03/13 17:15, Tanstaafl wrote: Ok, just read the new news item and the linked udev-guide wiki page You should probably also read: http://blog.flameeyes.eu/2013/03/predictably-non-persistent-names and:

Re: [gentoo-user] Difference between --update and --emptytree?

2013-03-31 Thread Michael Hampicke
Am 31.03.2013 05:12, schrieb Walter Dnes: On Sat, Mar 30, 2013 at 10:04:24PM -0400, Mike Gilbert wrote On Sat, Mar 30, 2013 at 9:49 PM, Walter Dnes waltd...@waltdnes.org wrote: Did an update today. After the update, I checked again... [d531][waltdnes][~] emerge -pv --update --changed-use

[gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Nuno J. Silva (aka njsg)
On 2013-03-31, Nuno J. Silva (aka njsg) nunojsi...@ist.utl.pt wrote: On 2013-03-31, Nikos Chantziaras rea...@gmail.com wrote: On 30/03/13 17:15, Tanstaafl wrote: Ok, just read the new news item and the linked udev-guide wiki page You should probably also read:

Re: [gentoo-user] Difference between --update and --emptytree?

2013-03-31 Thread Walter Dnes
On Sun, Mar 31, 2013 at 01:56:25PM +0200, Michael Hampicke wrote You can also try adding --deep to your emerge options. That seems to be it... emerge -pv --update --changed-use --deep --with-bdeps=y world produces a list of packages. The list ends with... Total: 52 packages (29 upgrades,

Re: [gentoo-user] Difference between --update and --emptytree?

2013-03-31 Thread Peter Humphrey
On Sunday 31 March 2013 14:09:56 Walter Dnes wrote: I keep a previous version of the kernel (gentoo-sources) as a fallback, and --depclean wants to remove that, which I want to keep. if you let it unmerge the old kernel it will only remove the sources. Everything that's generated by building

Re: [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Pandu Poluan
On Mar 31, 2013 7:13 PM, Nuno J. Silva (aka njsg) nunojsi...@ist.utl.pt wrote: On 2013-03-31, Nuno J. Silva (aka njsg) nunojsi...@ist.utl.pt wrote: On 2013-03-31, Nikos Chantziaras rea...@gmail.com wrote: On 30/03/13 17:15, Tanstaafl wrote: Ok, just read the new news item and the linked

[gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Tanstaafl
Googled and can't seem to find an answer to this... I've had FEATURES=buildpkg for some time on my system, so I already have udev-171-r10 quickpkg'd... But for the life of me, I can't seem to find instructions for how to convert /usr/portage/packages/sys-fs/udev-171-r10.tbz2 to an ebuild

Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!

2013-03-31 Thread Tanstaafl
On 2013-03-30 1:41 PM, Pandu Poluan pa...@poluan.info wrote: All my servers use mdev. 'nuff said. I do remember the conversation about mdev... probably should have paid closer attention. Is the conversion fairly simple? Is there an updated how-to, specifically for older udev (171)?

Re: [gentoo-user] udev-197 vs udev-200??

2013-03-31 Thread Tanstaafl
On 2013-03-30 1:22 PM, Mark David Dumlao madum...@gmail.com wrote: On 03/30/2013 11:24 PM, Tanstaafl wrote: Ok, I don't understand this... snip emerge -pvuDN world shows updates to BOTH virtual/udev-197-r2 *and* udev-200, with strange Blockers referencing udev-186??? My reading is: there

Re: [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Dale
Pandu Poluan wrote: Since it's obvious that upsteam has this my way or the highway mentality, I'm curious about whether eudev (and mdev) exhibits the same behavior... Rgds, -- I synced yesterday and I didn't see the news alert. Last eudev update was in Feb. so I *guess* not. It seems

Re: eudev - is it a viable *long-term* option? - WAS: Re: [gentoo-user] Updating our live servers. I'm scared!

2013-03-31 Thread Dale
Tanstaafl wrote: On 2013-03-30 1:41 PM, Pandu Poluan pa...@poluan.info wrote: All my servers use mdev. 'nuff said. I do remember the conversation about mdev... probably should have paid closer attention. Is the conversion fairly simple? Is there an updated how-to, specifically for older

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Yohan Pereira
On 31/03/13 at 12:41pm, Tanstaafl wrote: Googled and can't seem to find an answer to this... I've had FEATURES=buildpkg for some time on my system, so I already have udev-171-r10 quickpkg'd... But for the life of me, I can't seem to find instructions for how to convert

[gentoo-user] sys-fs/udev-200 and my wireless interface

2013-03-31 Thread Mick
From the elog which I applied carefully and the links to Flameeyes blog kindly shared in this M/L, I thought that I would have to rename *all* my interfaces. Therefore I was surprised to find that only my eth0 changed to enp11s0, while my wlan0 stayed the same. I even rebooted to make sure and

Re: [gentoo-user] Difference between --update and --emptytree?

2013-03-31 Thread Neil Bothwick
On Sun, 31 Mar 2013 09:09:56 -0400, Walter Dnes wrote: emerge -p --depclean generates dire warnings. I wouldn't call this dire * Always study the list of packages to be cleaned for any obvious * mistakes. Packages that are part of the world set will always * be kept. They can be

[gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Nuno J. Silva (aka njsg)
On 2013-03-31, Dale rdalek1...@gmail.com wrote: Pandu Poluan wrote: Since it's obvious that upsteam has this my way or the highway mentality, I'm curious about whether eudev (and mdev) exhibits the same behavior... I synced yesterday and I didn't see the news alert. Last eudev update

Re: [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Dale
Nuno J. Silva (aka njsg) wrote: On 2013-03-31, Dale rdalek1...@gmail.com wrote: Pandu Poluan wrote: Since it's obvious that upsteam has this my way or the highway mentality, I'm curious about whether eudev (and mdev) exhibits the same behavior... I synced yesterday and I didn't see the

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Tanstaafl
On 2013-03-31 1:10 PM, Yohan Pereira yohan.pere...@gmail.com wrote: What you need to do is add the original ebuild for udev-171 to your local overlay as is. Then run emerge using the -g option see man emerge. Hmmm... I had thought that the local ebuild was gone due to it being removed from

[gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Nuno J. Silva (aka njsg)
On 2013-03-31, Dale rdalek1...@gmail.com wrote: Nuno J. Silva (aka njsg) wrote: On 2013-03-31, Dale rdalek1...@gmail.com wrote: Pandu Poluan wrote: Since it's obvious that upsteam has this my way or the highway mentality, I'm curious about whether eudev (and mdev) exhibits the same

Re: [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Dale
Nuno J. Silva (aka njsg) wrote: On 2013-03-31, Dale rdalek1...@gmail.com wrote: Nuno J. Silva (aka njsg) wrote: On 2013-03-31, Dale rdalek1...@gmail.com wrote: Pandu Poluan wrote: Since it's obvious that upsteam has this my way or the highway mentality, I'm curious about whether eudev (and

Re: [gentoo-user] How to prevent a dns amplification attack

2013-03-31 Thread Norman Rieß
Am 31.03.2013 04:08, schrieb Paul Hartman: On Thu, Mar 28, 2013 at 3:51 AM, Norman Rieß nor...@smash-net.org wrote: Hello, i am using pdns recursor to provide a dns server which should be usable for everybody.The problem is, that the server seems to be used in dns amplification attacks. I

Re: [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Alan McKinnon
On 31/03/2013 20:26, Dale wrote: Nuno J. Silva (aka njsg) wrote: On 2013-03-31, Dale rdalek1...@gmail.com wrote: Pandu Poluan wrote: Since it's obvious that upsteam has this my way or the highway mentality, I'm curious about whether eudev (and mdev) exhibits the same behavior... I synced

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Alan McKinnon
On 31/03/2013 18:41, Tanstaafl wrote: Googled and can't seem to find an answer to this... I've had FEATURES=buildpkg for some time on my system, so I already have udev-171-r10 quickpkg'd... But for the life of me, I can't seem to find instructions for how to convert

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Alan McKinnon
On 31/03/2013 20:30, Tanstaafl wrote: On 2013-03-31 1:10 PM, Yohan Pereira yohan.pere...@gmail.com wrote: What you need to do is add the original ebuild for udev-171 to your local overlay as is. Then run emerge using the -g option see man emerge. Hmmm... I had thought that the local ebuild

Re: [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Neil Bothwick
On Sun, 31 Mar 2013 13:44:18 -0500, Dale wrote: I'm just hoping people will be able to find a solution to this that works well for them. I especially wish that for those managing a remote system with little or no physical access. Well I just updated a headless box, followed the instructions

Re: [Bulk] [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Kevin Chadwick
On Sun, 31 Mar 2013 11:48:19 + (UTC) Nuno J. Silva (aka njsg) nunojsi...@ist.utl.pt wrote: instead of pushing a completely different (and possibly less reliable) naming scheme by default. Whilst I wouldn't want them changing on me (though if your physically changing the pci slot then you

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Tanstaafl
On 2013-03-31 3:14 PM, Alan McKinnon alan.mckin...@gmail.com wrote: A copy of the ebuild for the*currently*installed* package is in /var/db/pkg/cat/pkg-version/*ebuild Oh... so I should use that instead of what is in /usr/portage/sys-fs?

Re: [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Dale
Alan McKinnon wrote: On 31/03/2013 20:26, Dale wrote: Nuno J. Silva (aka njsg) wrote: On 2013-03-31, Dale rdalek1...@gmail.com wrote: Pandu Poluan wrote: Since it's obvious that upsteam has this my way or the highway mentality, I'm curious about whether eudev (and mdev) exhibits the same

Re: [Bulk] [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Neil Bothwick
On Sun, 31 Mar 2013 15:40:09 +0100, Kevin Chadwick wrote: instead of pushing a completely different (and possibly less reliable) naming scheme by default. Whilst I wouldn't want them changing on me (though if your physically changing the pci slot then you should be able to handle the

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Neil Bothwick
On Sun, 31 Mar 2013 15:44:49 -0400, Tanstaafl wrote: A copy of the ebuild for the*currently*installed* package is in /var/db/pkg/cat/pkg-version/*ebuild Oh... so I should use that instead of what is in /usr/portage/sys-fs? No, you only do that if the original is not available. Copy the

Re: [Bulk] [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Michael Mol
On 03/31/2013 03:55 PM, Neil Bothwick wrote: On Sun, 31 Mar 2013 15:40:09 +0100, Kevin Chadwick wrote: instead of pushing a completely different (and possibly less reliable) naming scheme by default. Whilst I wouldn't want them changing on me (though if your physically changing the pci

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread netfab
Le 31/03/13 à 21:14, Alan a tapoté : On 31/03/2013 18:41, Tanstaafl wrote: But for the life of me, I can't seem to find instructions for how to convert /usr/portage/packages/sys-fs/udev-171-r10.tbz2 to an ebuild that I can then add to my local overlay... The quickpkg is a tarball, it

Re: [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Tanstaafl
On 2013-03-31 3:37 PM, Neil Bothwick n...@digimed.co.uk wrote: What the article didn't mention was that if you change your interface names, you have to create a new symlink in /etc/init.d and add it to the default runlevel. I'm glad I spotted that one before rebooting:) So, just ln -s

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Tanstaafl
On 2013-03-31 3:56 PM, Neil Bothwick n...@digimed.co.uk wrote: On Sun, 31 Mar 2013 15:44:49 -0400, Tanstaafl wrote: A copy of the ebuild for the*currently*installed* package is in /var/db/pkg/cat/pkg-version/*ebuild Oh... so I should use that instead of what is in /usr/portage/sys-fs? No,

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Tanstaafl
On 2013-03-31 3:16 PM, Alan McKinnon alan.mckin...@gmail.com wrote: So, do I also copy the manifest file? metadata.xml? files dir? Or do I just copy the ebuild then regenerate the manifest file? You will need the files dir. metadata.xml is not necessary in your personal overlay. You will

Re: [Bulk] [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Kevin Chadwick
On Sun, 31 Mar 2013 20:55:00 +0100 Neil Bothwick n...@digimed.co.uk wrote: What about USB network adaptors? A user may not even realise they plugged it into a different USB slot from last time, yet the device name changes. Fair point but wouldn't that be only if you plug in two of the same

[gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Nuno J. Silva (aka njsg)
On 2013-03-31, Neil Bothwick n...@digimed.co.uk wrote: On Sun, 31 Mar 2013 13:44:18 -0500, Dale wrote: I'm just hoping people will be able to find a solution to this that works well for them. I especially wish that for those managing a remote system with little or no physical access.=20

Re: [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Mick
On Sunday 31 Mar 2013 21:19:18 Tanstaafl wrote: On 2013-03-31 3:37 PM, Neil Bothwick n...@digimed.co.uk wrote: What the article didn't mention was that if you change your interface names, you have to create a new symlink in /etc/init.d and add it to the default runlevel. I'm glad I spotted

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Alan McKinnon
On 31/03/2013 21:44, Tanstaafl wrote: On 2013-03-31 3:14 PM, Alan McKinnon alan.mckin...@gmail.com wrote: A copy of the ebuild for the*currently*installed* package is in /var/db/pkg/cat/pkg-version/*ebuild Oh... so I should use that instead of what is in /usr/portage/sys-fs? I don't

Re: [gentoo-user] Convert quickpkg of udev-171-r10 to local overlay...

2013-03-31 Thread Alan McKinnon
On 31/03/2013 22:24, Tanstaafl wrote: On 2013-03-31 3:56 PM, Neil Bothwick n...@digimed.co.uk wrote: On Sun, 31 Mar 2013 15:44:49 -0400, Tanstaafl wrote: A copy of the ebuild for the*currently*installed* package is in /var/db/pkg/cat/pkg-version/*ebuild Oh... so I should use that instead

[gentoo-user] [way OT but interesting] Massive recent DDOS attack

2013-03-31 Thread walt
Any of you admin types out there have any grumpy thoughts about this article? :) Is it really just marketing BS from cloudflare, or is it solid stuff? http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet

Re: [gentoo-user] [way OT but interesting] Massive recent DDOS attack

2013-03-31 Thread Alan McKinnon
On 01/04/2013 01:12, walt wrote: Any of you admin types out there have any grumpy thoughts about this article? :) Is it really just marketing BS from cloudflare, or is it solid stuff? http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet A quick scan of the article seems

Re: [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread William Kenworthy
On 01/04/13 01:01, Dale wrote: Pandu Poluan wrote: Since it's obvious that upsteam has this my way or the highway mentality, I'm curious about whether eudev (and mdev) exhibits the same behavior... Rgds, -- I synced yesterday and I didn't see the news alert. Last eudev update was

Re: [gentoo-user] [way OT but interesting] Massive recent DDOS attack

2013-03-31 Thread Michael Mol
On 03/31/2013 07:12 PM, walt wrote: Any of you admin types out there have any grumpy thoughts about this article? :) Is it really just marketing BS from cloudflare, or is it solid stuff? http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet Can't tell one way or another.

Re: [gentoo-user] [way OT but interesting] Massive recent DDOS attack

2013-03-31 Thread staticsafe
On 3/31/2013 19:12, walt wrote: Any of you admin types out there have any grumpy thoughts about this article? :) Is it really just marketing BS from cloudflare, or is it solid stuff? http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet Some other good reads:

Re: [gentoo-user] [way OT but interesting] Massive recent DDOS attack

2013-03-31 Thread Volker Armin Hemmann
Am 01.04.2013 01:12, schrieb walt: Any of you admin types out there have any grumpy thoughts about this article? :) Is it really just marketing BS from cloudflare, or is it solid stuff? http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet and since pretty much every

Re: [Bulk] [gentoo-user] Re: Udev update and persistent net rules changes

2013-03-31 Thread Volker Armin Hemmann
Am 31.03.2013 21:55, schrieb Neil Bothwick: On Sun, 31 Mar 2013 15:40:09 +0100, Kevin Chadwick wrote: instead of pushing a completely different (and possibly less reliable) naming scheme by default. Whilst I wouldn't want them changing on me (though if your physically changing the pci slot

[gentoo-user] Udev 200 : dhcpcd problem + solution

2013-03-31 Thread Philip Webb
I've spent a lot of today trying to fix a glitch in starting 'dhcpcd' after upgrading to udev-200 ; I outlined it in a msg to gentoo-dev . When I tried to start my I/net connection, I got this : root:501 ~ dhcpcd dhcpcd[831]: version 5.6.7 starting ... [delay] ^C ... [long

Re: [gentoo-user] [way OT but interesting] Massive recent DDOS attack

2013-03-31 Thread Philip Webb
130331 walt wrote: Any of you admin types out there have any grumpy thoughts about this ? http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet There was a good story in 'Guardian' : http://www.guardian.co.uk/commentisfree/2013/mar/29/cyberwar-spun-shoddy-journalism --

[gentoo-user] ZFS wiki confusion

2013-03-31 Thread Douglas J Hunley
Anyone got ZFS working on their Gentoo install? I'm contemplating it, but the wiki[1] confuses me a bit. Specifically, section '3 Installing into the kernel directory (for static installs)' states: This will generate the needed files, and copy them into the kernel sources directory. root # (cd

Re: [gentoo-user] [way OT but interesting] Massive recent DDOS attack

2013-03-31 Thread Michael Mol
On 03/31/2013 10:00 PM, Philip Webb wrote: 130331 walt wrote: Any of you admin types out there have any grumpy thoughts about this ? http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet There was a good story in 'Guardian' :

Re: [gentoo-user] [way OT but interesting] Massive recent DDOS attack

2013-03-31 Thread luis jure
on 2013-03-31 at 23:05 Michael Mol wrote: On 03/31/2013 10:00 PM, Philip Webb wrote: There was a good story in 'Guardian' : http://www.guardian.co.uk/commentisfree/2013/mar/29/cyberwar-spun-shoddy-journalism The Gizmodo article that Guardian article lauds irritated the hell

Re: [gentoo-user] [way OT but interesting] Massive recent DDOS attack

2013-03-31 Thread Dale
luis jure wrote: on 2013-03-31 at 23:05 Michael Mol wrote: On 03/31/2013 10:00 PM, Philip Webb wrote: There was a good story in 'Guardian' : http://www.guardian.co.uk/commentisfree/2013/mar/29/cyberwar-spun-shoddy-journalism The Gizmodo article that Guardian article lauds irritated the

[gentoo-user] [OT] Perixx PERIPAD-501 with Linux?

2013-03-31 Thread meino . cramer
Hi, are there any experience regarding the Perixx PERIPAD-501 when used in conjunction with Linux? Will it work? Are there any limitations? Thank you very much in advance for any help! Best regards, mcc