Re: Who's the Open Source Guru in ....
Michael Stolovitzsky wrote: On Monday 28 October 2002 02:33, [EMAIL PROTECTED] wrote: On Mon, Oct 28, 2002 at 12:52:36AM +0200, Daniel Feiglin wrote: Hello folks! Who if anyone, is considered to be an open source guru/advocate in the Knesset? If none, is there anyone there who might know what it is? Thanks, Daniel P.S. This is NOT O.T. in my view. Wasn't it was mentioned here some days ago that some Knesset member had files a law about OS software? Not that I know if it is best to approach him. In addition I believe that since the Knesset science committee discussion on OS software, Knesset member Eithan might have a clue about it. Are you willing to tell us what it is all about? Yes, and along with it it was also mentioned than the whole open source promotion episode is nothing other than a publicity stunt - hey, we have RELIGIOUS PARTIES feeding off the budget, you wouln't be taking anyone who wants to cut expenses on IT licensing seriously, now would you? OK. It precisely because of the above rather purile remark, that I didn't go into details. Also, beyond the following paragraphs, I will not engage in political disussion on this list: /Begin once off political comment 1. A few weeks ago, the Likud conducted elections for the Merkaz. 2. I nominated and was elected ont he Manhigut Yehudit ticket (and I don't give a stuff if someone here doesn't like that). 3. I am personally involved with the Manhigut Economics group. 4. As a long time user of Linux (1998) and GNU software on OS/2 many years before, it shouldn't come as a great surprise that I should be interested in open source advocacy. 5. The reasoning behind 4. is far less sinister than using the savings to finance another Bet Keneset or my summer palace (caravan) at Shavei Shomron: If some of you little kid geniuses can remember as far back as 1992, you may recall that abou that time Microsoft started making a song and dance about software piracy and one diskette operations. Of course it was all bluff. Uncle Bill knew full well, than the generation of naughty kid geniuses (mostly you guys) would grow up on DOS, and later Windows - and would subsequently become legitimate users, whom from not knowing anything else, would become locked in. Was he far wrong? Where is OS/2 today? Of course Uncle Bill could not have anticipated RMS and Uncle Linus. Surely we can do the same thing! If we can get today's kid geniuses using open software (1) The moral issue of piracy is largely avoided (2) Everyone can get it without paying an arm and a leg (3) Some of those kid geniuses will ultimately become contributors (4) (Politics) It puts Israel firmly in the center of the software development map and also contributes to reducing our dependency on one big foreign supplier (Manhigut policy) (5) As was observed above, if in a katnuni way, yes, the government and industry can save a great deal of money. The caveat is this: The idea of using AND contributing have to hand in hand . Both the government and industry will need to address the latter issue either by promoting software development kollels (Yea! Just like us Dosim), and / or a system of scholarships for suitable kid geniuses. If anyone has anything concrete and constructive to offer on the list or off, by all means. I ignore flames, so don't bother. /End once off political comment Daniel = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: big question: FW-1 VS. Linux security tools
The answer is it depends. NetFilter is up to the basics stateful firewall capabilities. The main problem with Net Filter is that it is over configurable. It will assume nothing, thus leaving the entire configuration to you. Everyone in this list who know the TCP state table well enough to reimplement it with Net Filter please raise their hands.? Didn't think so (without trying to claim that I CAN. Maybe I can, maybe I can't, havn't got around to doing it yet). The main thing to understand is that the question, as asked, is meaningless. The question is not whether How much Linux tools can do and what they can't compared to Checkpoint's FW-1?. The question is can they pose an alternative?. The answer, as far as Net Filter stands today, is defenitely yes, assuming you want to pay the price. I think people covered the places where the open source community is not even close to being there, and the price needs to be paid. If you want a feature for feature comparison, you will defenitely find some features missing. The fact that no true state is kept (for example - no proper tracking of connection's state, no ability to limit packets based on packets seen so far on the same connection), no control over timeouts (a side effect of the previous point), and no proper SYN attack protection (does Net Filter support SYN cookies on machines other than the gateway itself? Either way, SYN cookies is not an adequate solution on it's own, in my opinion. For those who wonder, rate limiting is not a SYN attack protection AT ALL. It is more alike throwing the baby with the water). These are the most acute deficiencies of Net Filter I can think of at the moment. Shachar IMPORTANT DISCLAIMER These are my opinions. Mine mine mine mine mine. My Preciousss. Sorry, I get distracted. The thing I am trying to say is that attributing these opinions to anyone else but me, whether I am connected to them or not, should be done at the at the attributer's discretion, and above all, responsibility. Hetz Ben-Hamo wrote: Hi people, I have been debating with a friend of mine about this question: As it stands today - can Linux be considered to be FW-1 replacement? how much Linux tools (iptables, etc) can do and what can't they do compared to Checkpoint's FW-1? (and I'm not talking about the GUI) I'm NOT talking about VPN or extras like that. (btw - there's a rumor that there's a Linux VPN client beta from Checkpoint - anyone knows where/how to get it or buy it?) I would like to ask people with experience on this issue to answer please - sys admins, security guru's, and other people with knowledge of this issue.. Thanks, Hetz = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Who's the Open Source Guru in ....
On Mon, Oct 28, 2002, Daniel Feiglin wrote about Re: Who's the Open Source Guru in : Of course Uncle Bill could not have anticipated RMS and Uncle Linus. Yes, Uncle Linus and Brer Penguin :) [1] [1] see http://www.geocities.com/athens/5564/urp.html -- Nadav Har'El| Monday, Oct 28 2002, 22 Heshvan 5763 [EMAIL PROTECTED] |- Phone: +972-53-245868, ICQ 13349191 |I'm a peripheral visionary: I see into http://nadav.harel.org.il |the future, but mostly off to the sides. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Who's the Open Source Guru in ....
On Mon, 2002-10-28 at 10:21, Daniel Feiglin wrote: Who if anyone, is considered to be an open source guru/advocate in the Knesset? If none, is there anyone there who might know what it is? Hi Daniel, In the past couple of weeks a group of us hackers (including Dror Ofek, Muli, Tzafrir, Orna, Nadav and Adv. Haim Ravia) have been involved in some political Open Source / Free Software related activity. Mainly through the great work of Haim Ravia, we've been called to a discussion of the Knesset Internet and information technology committee discussion about the subject and tried out best to represent the our views of there. After long and tedious discussions which were already published here, we got an invitation from KM Miki Eitan (chairmen and lone members of the committee) to propose (together with Doron Shikmoni of the Israeli chapter of ISOC a resolution of the committee)a resolution for the committee regarding that is designed to allow use of Open/Free software in the government and by the citizens but without limiting the freedom of teh technical authorities of the government organization to decide according to their best technical judgment by mandating use of what we call 'Open Standards. The proposal that we sent can be found here: http://benyossef.com/hamakor/resolution.html and we expect to be called for the next discussion of the committee to discuss it. In addition and in parallel we also involved in a project together with official from the ministry of finance, people from Sun, IBM, Mr. Eli Marmor and Mr. Jonathan Ben-Avraham (both are list subscribers I believe) to help Hebrewize the OpenOffice suite for use inside and outside of the government. We did encounter several clued people (to some degree) about the subject but as far as I can tell there is no single person in the Knesset that I would call 'Open Source' Guru as such and the efforts of our little group has been focused mainly on trying to provide some sort of representation and consulting to the government on this subject in lieu of inside knowledge. Mr Haim Ravia, especially, has been instrumental in this capacity. We'd very much love to get any and all help you can offer for our 'Hackivities'. Personally the only political party I identify with is 'Ale Yarok' as it is IMHO the only Israeli party which I'll trust in voting in my name about important matters but I have no idea what political views the other members hold, if any, and I don't really care. Does that help? Gilad. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
gnucash translation
was there any work done on translating gnucash ? and if so, by whom ? -- -- regards +--- + Guy Baruch , Plasma Laboratory, Weizmann Institue. + mailto:guybar;plasma-gate.weizmann.ac.il + phone: 972-8-934-2211 +--- They hang the man and flog the woman That steal the goose from off the common, But let the greater villain loose That steals the common from the goose. -- English folk poem, circa 1764 http://bostonreview.mit.edu/BR27.3/bollier.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
[Off topic] Re: Who's the Open Source Guru in ....
On Mon, 2002-10-28 at 15:34, Ira Abramov wrote: Quoting Gilad Ben-Yossef, from the post of Mon, 28 Oct: 'Hackivities'. Personally the only political party I identify with is 'Ale Yarok' as it is IMHO the only Israeli party which I'll trust in voting in my name about important matters but I have no idea what political views the other members hold, if any, and I don't really care. It seems from reactions I got off-list that some people didn't understand this last paragraph in quite the spirit it was intended. Let's just say that I'm voting for them because I think that they have a solid track record in being completely cut off from reality which sadly seems to be a crucial requirement for elected representatives in our country... Gilad. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Who's the Open Source Guru in ....
On 28 Oct 2002, Gilad Ben-Yossef wrote: In the past couple of weeks a group of us hackers (including Dror Ofek, Muli, Tzafrir, Orna, Nadav and Adv. Haim Ravia) have been involved in some political Open Source / Free Software related activity. A small correction: s/Nadav/Katriel/ -- Tzafrir Cohen/\ mailto:tzafrir;technion.ac.il\ / ASCII Ribbon Campaign X Against HTML Mail http://www.technion.ac.il/~tzafrir / \ = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Who's the Open Source Guru in ....
Gilad Ben-Yossef wrote: On Mon, 2002-10-28 at 10:21, Daniel Feiglin wrote: Who if anyone, is considered to be an open source guru/advocate in the Knesset? If none, is there anyone there who might know what it is? Hi Daniel, In the past couple of weeks a group of us hackers (including Dror Ofek, Muli, Tzafrir, Orna, Nadav and Adv. Haim Ravia) have been involved in some political Open Source / Free Software related activity. Mainly through the great work of Haim Ravia, we've been called to a discussion of the Knesset Internet and information technology committee discussion about the subject and tried out best to represent the our views of there. After long and tedious discussions which were already published here, we got an invitation from KM Miki Eitan (chairmen and lone members of the committee) to propose (together with Doron Shikmoni of the Israeli chapter of ISOC a resolution of the committee)a resolution for the committee regarding that is designed to allow use of Open/Free software in the government and by the citizens but without limiting the freedom of teh technical authorities of the government organization to decide according to their best technical judgment by mandating use of what we call 'Open Standards. The proposal that we sent can be found here: http://benyossef.com/hamakor/resolution.html and we expect to be called for the next discussion of the committee to discuss it. Read it. In addition and in parallel we also involved in a project together with official from the ministry of finance, people from Sun, IBM, Mr. Eli Marmor and Mr. Jonathan Ben-Avraham (both are list subscribers I believe) to help Hebrewize the OpenOffice suite for use inside and outside of the government. We did encounter several clued people (to some degree) about the subject but as far as I can tell there is no single person in the Knesset that I would call 'Open Source' Guru as such and the efforts of our little group has been focused mainly on trying to provide some sort of representation and consulting to the government on this subject in lieu of inside knowledge. Mr Haim Ravia, especially, has been instrumental in this capacity. We'd very much love to get any and all help you can offer for our 'Hackivities'. Personally the only political party I identify with is 'Ale Yarok' as it is IMHO the only Israeli party which I'll trust in voting in my name about important matters but I have no idea what political views the other members hold, if any, and I don't really care. Does that help? Yes. I note that the thrust of your efforts is implementation of open standards in governmental agencies plus the Hebrewfication of office. The direction of my remarks wa more in the direction of educating the next generation of hackers/kid geniuses/etc to think open they people think Windows today. to that extent our interests are complementary. I also agree that this issue cuts across the usual political lines - and we'll keep it that way. Gilad. General question: Do we keep this discussion going on the list, or go private? I'll accept a majority vote on the first 10 responses! = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Who's the Open Source Guru in ....
General question: Do we keep this discussion going on the list, or go private? I'll accept a majority vote on the first 10 responses! My vote: keep this discussion going on this list. Getting the government to use software with Open Interfaces(TM) will allow Linux users to communicate with government Web sites and other computerized services. --- Omer Make love not war. WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Who's the Open Source Guru in ....
On Monday 28 October 2002 18:27, Omer Zak wrote: General question: Do we keep this discussion going on the list, or go private? I'll accept a majority vote on the first 10 responses! My vote: keep this discussion going on this list. Getting the government to use software with Open Interfaces(TM) will allow Linux users to communicate with government Web sites and other computerized services. --- Omer same here. tal. Make love not war. WARNING TO SPAMMERS: at http://www.zak.co.il/spamwarning.html = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
RE: installing RH7.3 upon Win2k
That's exactly what is supposed to happen - no?! Primary partitions first (C - hda1, D - hdb1 ...) and only then the logical ones? Couldn't you just create another primary fat partition (10MB) before the one that was seen as D? Or even on h-d-a ? ( can anybody tell me how to write h-d-a in outlook without it changing it automatically to had?) Just curious, Tal. -Original Message- From: [EMAIL PROTECTED] [mailto:linux-il-bounce;cs.huji.ac.il] On Behalf Of [EMAIL PROTECTED] Sent: Monday, October 28, 2002 5:44 PM To: [EMAIL PROTECTED] Subject: installing RH7.3 upon Win2k this is my expirience with installing RedHat linux on Win2k. (I write this in case some one is interested to know about my expirience, but any comments are welcomed) I've been asked to install Linux on a brand new machine which had 2 hard drives 60 GB each. Win2k was aleready installed on the computer. The drives were divided in 2 parts 30 G each (total 4 vfat partitions) . I've decided to keep the partitions on first drive as they were (I hoped that disk C would remain C, and E would became D). I repartitioned the second HD using disk druid programm during RH installation. When rebooted to Win, I was shocked to discover that win is still looking for disk D on the second drive. This mess caused windows to work VERY slow. I used Partition magic to check what's wrong with the drives. On startup it complained on some errors on the partition table and suggested to fix them. I agreed. Using partition magic I saw that win2k treated the first partition on the HD no 2 (/boot under linux) as D, and naturally couldn't read from it. I couldn't think of anything else but deleting this partition, creating new one instead (ext2), and re-installing linux. As it seems to me right now, everything is working good Stay cool Boris Gorelik = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
CHANGING the routing for established connections.
with nat table and DNAT target you can redirect new connections. but how can you break all ready established connections and redirect to a certain ip? mangle support established connections but do not support DNAT. -- QOTD: I tried buying a goat instead of a lawn tractor; had to return it though. Couldn't figure out a way to connect the snow blower. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
increasing the keyboard's responsiveness
Hi, When typing in kde apps, I feel that typing has definitely become more sluggish lately (as opposed to earlier versions). Does this mean that it's time to upgrade (need a new job, first) or is this tweakable? Arie Folger -- It is absurd to seek to give an account of the matter to a man who cannot himself give an account of anything; for insofar as he is already like this, such a man is no better than a vegetable. -- Book IV of Aristotle's Metaphysics = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: increasing the keyboard's responsiveness
Arie Folger [EMAIL PROTECTED] writes: When typing in kde apps, I feel that typing has definitely become more sluggish lately (as opposed to earlier versions). Does this mean that it's time to upgrade (need a new job, first) or is this tweakable? man kbdrate(8) -- Oleg Goldshmidt | [EMAIL PROTECTED] First binary search algorithm - J. Mauchly, 1946 First correct binary search algorithm - D.H.Lehmer, 1960 = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: increasing the keyboard's responsiveness
On Mon, 28 Oct 2002, Arie Folger wrote: When typing in kde apps, I feel that typing has definitely become more sluggish lately (as opposed to earlier versions). Does this mean that it's time to upgrade (need a new job, first) or is this tweakable? what kind of hardware do you run this KDE on? myself, i use an AMD k6-2 with 256MB of RAM, and since KDE 2.X and beyond runs to slow, i switched to gnome 1.2 (RH 7.3). KDE became too bloated to run on this hardware. [please don't start flaming - i liked KDE's look better ;) ] i might upgrade my hardware soon for other reasons - but i shadder to think i'll do it for the sake of a desktop environment - that's one of the reasons why i don't use windows... -- guy For world domination - press 1, or dial 0, and please hold, for the creator. -- nob o. dy = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: CHANGING the routing for established connections.
On 29 Oct 2002, Meir Michanie wrote: with nat table and DNAT target you can redirect new connections. but how can you break all ready established connections and redirect to a certain ip? mangle support established connections but do not support DNAT. i think at least in the vanilla kernel, this is not supported. normally, you can not redirect an already established connection. this makes sense - how would the new target machine know how to synchronize in on an already established connection, that has an established state, and established sequence numbers, etc? can you explain why you find the need to redirect alerady established connections? perhaps this can be remedied... -- guy For world domination - press 1, or dial 0, and please hold, for the creator. -- nob o. dy = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: CHANGING the routing for established connections.
I am trying to set up a network where the clients first have only access to my intranet apache server, it does some kind of authentication, i arping his ip and set up the firewall to let the forwarding of his computer to the internet even do if he reboot or change IP. 1 state: iptables -t nat -A PREROUTING -j DNAT --to-destination 10.0.10.2 2 state: iptables -t nat -I PREROUTING -m mac --mac --mac-source 00:20:18:2D:6B:20 -j ACCEPT everything is fine till here, but lets say that I want to allow traffic to the internet from this client for a limited amount of time (i.e. 30 mins) I would build a crontab job to delete the last iptable rule. iptables -t nat -D PREROUTING -m mac --mac --mac-source 00:20:18:2D:6B:20 -j ACCEPT This works if the client now tries to reach a new url. but if he was browsing a site (i.e. hotmail) he will continue as nothing happened. I would not care about killing his etablished connection. On resestablishing he would be forward it to my server. On Tue, 2002-10-29 at 07:45, guy keren wrote: On 29 Oct 2002, Meir Michanie wrote: with nat table and DNAT target you can redirect new connections. but how can you break all ready established connections and redirect to a certain ip? mangle support established connections but do not support DNAT. i think at least in the vanilla kernel, this is not supported. normally, you can not redirect an already established connection. this makes sense - how would the new target machine know how to synchronize in on an already established connection, that has an established state, and established sequence numbers, etc? can you explain why you find the need to redirect alerady established connections? perhaps this can be remedied... -- guy For world domination - press 1, or dial 0, and please hold, for the creator. -- nob o. dy -- QOTD: I tried buying a goat instead of a lawn tractor; had to return it though. Couldn't figure out a way to connect the snow blower. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
