Re: Remote administration of a machine behind NAT

[Andrei Popescu]

On Mon,08.Sep.08, 16:27:21, Chris Burkhardt wrote:

[...]

> > Of course the NAT at the ISP level?
> 
> I've never heard of NAT at the ISP level. Are there really so few unallocated
> IPv4 addresses that this is necessary?
 
This is not unusual here.

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature

Re: Remote administration of a machine behind NAT

[Steve Lamb]

On Tue, Sep 09, 2008 at 10:08:10AM +0300, Andrei Popescu wrote:
> This is not unusual here.

Here being?  Somewhere in +0300 is kinda broad.  :D

-- 
 Steve C. Lamb | But who can decide what they dream
   PGP Key: 1FC01004   |  and dream I do
---+-


signature.asc
Description: Digital signature

apache2 in Debian - adding vhost - which file to edit?

[Zach Uram]

I am trying to add a name based virtual host to apache2-mpm-prefork
version 2.2.9-7 on Debian lenny/sid.

First I read to edit /etc/apache2/httpd.conf but this file it seems is
empty and not used in Debian.

Then I read to edit /etc/apache2/apache2.conf but it seems that is
also not the right place for adding it so then
I found the file /etc/apache2/sites-enabled/000-default

This is the correct file to edit? I was told to add my section to it such as:


.


But there was alreay a long  statement in there with
many directives. It seems the way apache2 is set up it uses a virtual
host for the regular host (/var/www on localhost).

So is it ok to just add my  my new stuff
 after the first VirtualHost block already in there? I
just did that and this is what i have now:


ServerAdmin [EMAIL PROTECTED]

DocumentRoot /var/www/

Options FollowSymLinks
AllowOverride None


Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all


ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/

AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all


ErrorLog /var/log/apache2/error.log

# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn

CustomLog /var/log/apache2/access.log combined

Alias /doc/ "/usr/share/doc/"

Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128





   ServerName darcs.jesujuva.org
   ServerAlias jesujuva.org www.jesujuva.org darcs.jesujuva.org
   DocumentRoot /var/www/darcs


Zach


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: NVidia GeForce 6150 Go

[Florian Kulzer]

On Mon, Sep 08, 2008 at 18:38:57 -0700, consultores1 wrote:
> hello
> 
> I am using 1 portatil compaq presario 3000 amd64x2, it has 1 nvidia
> geforce 6150 go video card; with lenny, i want to connect my laptop to
> my tv, but i can not do that because in my understanding i have to
> install the free nvidia module or the private module!
> 
> The thing is, that the free module doesn't appear during the updates,
> and my preference is using only free software.

The package with the free driver is called xserver-xorg-video-nv; it is
available in Lenny/main in version 1:2.1.10-1. You should see it listed
if you run:

apt-cache policy xserver-xorg-video-nv

If this package is not available to you then something is wrong with
your mirror.

If you have the package installed you can run

grep /drivers/ /var/log/Xorg.0.log

after you start Xorg to find out which driver was loaded. For the nv
driver you should see this output:

(II) Loading /usr/lib/xorg/modules/drivers//nv_drv.so

> Could someone please, tell me how could i connect my laptop to tv
> appropiatelly?

This should work via xrandr now; see the Debian wiki for more info:

http://wiki.debian.org/XStrikeForce/HowToRandR12

-- 
Regards,| http://users.icfo.es/Florian.Kulzer
  Florian   |


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: apache2 in Debian - adding vhost - which file to edit?

[Cassiel]

2008/9/9 Zach Uram <[EMAIL PROTECTED]>

> I am trying to add a name based virtual host to apache2-mpm-prefork
> version 2.2.9-7 on Debian lenny/sid.
>
> First I read to edit /etc/apache2/httpd.conf but this file it seems is
> empty and not used in Debian.
>
> Then I read to edit /etc/apache2/apache2.conf but it seems that is
> also not the right place for adding it so then
> I found the file /etc/apache2/sites-enabled/000-default
>
> This is the correct file to edit? I was told to add my section to it such
> as:
>
> 
> .
> 
>
>
yes, but 000-default file should be left alone with standard directives for
your DocRoot /var/www/

then you should put directives for any other web site you are going to add
in a separate file in /etc/apache2/sites-available/ and then create a
symlink to it in

>  /etc/apache2/sites-enabled/

so you can simply remove the symlink if you ever want to put sites offline
instead of commenting out lines on a single, maybe huge, conf file, moreover
you gain better control on per site directives

(before going online) http://httpd.apache.org/docs/2.2/

regards

>

Re: Remote administration of a machine behind NAT

[Chris Davies]

Andrei Popescu <[EMAIL PROTECTED]> wrote:
> [-- text/plain, encoding quoted-printable, charset: us-ascii, 20 lines --]

> On Tue,09.Sep.08, 07:51:30, Alex Samad wrote:
>> > Or do you have any other ideas?
>> 
>> openvpn + iptables.
>> 
>> Use openvpn with cert's to create a tunnel and then use iptables on your
>> end to block any traffic, until you want to use it.

> I'm trying to protect myself from some possible rootkit on my mothers
> laptop accessing mine while I do routine administration on hers. Am
> I too paranoid?

No, you're not too paranoid, but I think you've missed the point of
the suggestion.

Install OpenVPN on both your mother's PC and your system. Set her PC's
installation to establish the connection to yours. Use the builtin ping
options to keep the connection open through the NAT layers (e.g. if the
smallest NAT timeout is 300 seconds, set the ping timer to 140 seconds).

This will give you an encrypted bi-directional connection between your
system and your mother's PC, which you can then use from your end whenever
you need to do so.

Chris


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

RE: apache2 in Debian - adding vhost - which file to edit?

[Tammo Schuelke]

Addendum: the symlinks can be easily created/removed using the commands 
a2ensite and a2dissite, respectively. 

I usually forget they exist and do it by hand though =) 

  

  

From:Cassiel [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2008 10:51 AM
To: Debian User List
Subject: Re: apache2 in Debian - adding vhost - which file to edit? 



  

  

2008/9/9 Zach Uram < [EMAIL PROTECTED] > 

I am trying to add a name based virtual host to apache2-mpm-prefork
version 2.2.9-7 on Debian lenny/sid.

First I read to edit /etc/apache2/httpd.conf but this file it seems is
empty and not used in Debian.

Then I read to edit /etc/apache2/apache2.conf but it seems that is
also not the right place for adding it so then
I found the file /etc/apache2/sites-enabled/000-default

This is the correct file to edit? I was told to add my section to it such as:


.
 


yes, but 000-default file should be left alone with standard directives for 
your DocRoot /var/www/

then you should put directives for any other web site you are going to add in a 
separate file in /etc/apache2/sites-available/ and then create a symlink to it 
in 

 /etc/apache2/sites-enabled/

so you can simply remove the symlink if you ever want to put sites offline 
instead of commenting out lines on a single, maybe huge, conf file, moreover 
you gain better control on per site directives

(before going online) http://httpd.apache.org/docs/2.2/ 

regards 

  



  

RE: apache2 in Debian - adding vhost - which file to edit?

[Tammo Schuelke]

Addendum: the symlinks can be easily created/removed using the commands 
a2ensite and a2dissite, respectively. 

I usually forget they exist and do it by hand though =) 

  

  

From:Cassiel [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 09, 2008 10:51 AM
To: Debian User List
Subject: Re: apache2 in Debian - adding vhost - which file to edit? 



  

  

2008/9/9 Zach Uram < [EMAIL PROTECTED] > 

I am trying to add a name based virtual host to apache2-mpm-prefork
version 2.2.9-7 on Debian lenny/sid.

First I read to edit /etc/apache2/httpd.conf but this file it seems is
empty and not used in Debian.

Then I read to edit /etc/apache2/apache2.conf but it seems that is
also not the right place for adding it so then
I found the file /etc/apache2/sites-enabled/000-default

This is the correct file to edit? I was told to add my section to it such as:


.
 


yes, but 000-default file should be left alone with standard directives for 
your DocRoot /var/www/

then you should put directives for any other web site you are going to add in a 
separate file in /etc/apache2/sites-available/ and then create a symlink to it 
in 

 /etc/apache2/sites-enabled/

so you can simply remove the symlink if you ever want to put sites offline 
instead of commenting out lines on a single, maybe huge, conf file, moreover 
you gain better control on per site directives

(before going online) http://httpd.apache.org/docs/2.2/ 

regards 

  



  

Re: Unable to xm console into a virtualized server with Xen and Etch

[Thomas]

Hi Luke,

This issue was solved in the Xen mailing-list, the solution was really
stupid: I simply had to hit return a second time to have the console
appear. I don't know how I never had this idea before...


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Remote administration of a machine behind NAT

[Andrei Popescu]

On Tue,09.Sep.08, 00:13:52, Steve Lamb wrote:
> On Tue, Sep 09, 2008 at 10:08:10AM +0300, Andrei Popescu wrote:
> > This is not unusual here.
> 
> Here being?  Somewhere in +0300 is kinda broad.  :D

I'm using gmail via SMTP so you could have just run a whois on my IP and 
found out I'm in Romania :D

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature

How to connect Nokia 6310i to Dell Vostro 1700 with Bluetooth?

[Joost Kraaijeveld]

Hi,

I am trying to connect my Nokia 6310i to my Dell Vostro 1700 with
Bluetooth on Debian Lenny amd-64 2.6.26-1 . I have read
http://users.tkk.fi/u/kehannin/bluetooth/bluetooth.html and
https://help.ubuntu.com/community/BluetoothSetup but that did not help.

Is there anyone that has such combination (or look alike) working? If
so, could you give me some directions on how to get it work, as it does
not seem to run OOTB?

TIA

-- 
Groeten,

Joost Kraaijeveld
Askesis B.V.
Molukkenstraat 14
6524NB Nijmegen
tel: 024-3888063 / 06-51855277
fax: 024-3608416
web: www.askesis.nl


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Odd question about CUPS

[Damon L. Chesser]

On Mon, 2008-09-08 at 19:42 -0400, Tom Allison wrote:
> I have a cups server that has been working perfectly for several years. 
>   Recently my Debian and Macbooks (Firefox only) where all upgraded and 
> now the printer does not work for the macbooks.
> 
> Here's the CUPS error entry:
> cupsdAuthorize: No authentication data provided
> 
> 
> here's the fun part.
> It works perfectly from MS Word on Mac and OpenOffice on Mac.
> It doesn't work for FireFox, Thunderbird or Preview (Apple PDF).
> 
> Because of the OpenOffice and Word I was thinking that this is not a 
> problem with the printer configuration and that it might be a problem 
> with recent upgrades to FireFox.  Except my wife, who did not upgrade 
> FireFox has the same problem.
> 
> Add to that the fact that the Preview can't print either (not upgraded).
> 
> I'm currenlty, because of the error, of the opinion that my Debian 
> printer server has taken a turn for the worse.
> 
> I have no authentication that I recall adding.
> There is something that might be new - CUPS-Authenticate-Jobs that I'm 
> not familiar with.
> 
> But if this is server related -- how does OpenOffice and MS Word get 
> around this?  I'm really in a jamb here because I *need* my printer for 
> college.
> 
SNIP

What kernel are you running on the print server?  I had this issue in
2.6.24-2.6.26-something.  In my case it was a kernel bug in the tcp
stack.  The work around was to set in /etc/sysctl.conf 
net.ipv4.tcp_frto = 0

you can test this by echo 0 >/proc/sys/net/ipv4/frt0

I have no idea if this is the same issue, I am just guessing.

HTH
-- 
Damon L. Chesser <[EMAIL PROTECTED]>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Remote administration of a machine behind NAT

[Alex Samad]

On Tue, Sep 09, 2008 at 01:12:28AM +0300, Andrei Popescu wrote:
> On Tue,09.Sep.08, 07:51:30, Alex Samad wrote:
>  
> > > Or do you have any other ideas?
> > 
> > openvpn + iptables.
> > 
> > Use openvpn with cert's to create a tunnel and then use iptables on your
> > end to block any traffic, until you want to use it.
> 
> Of course I use iptables on my box and the firewalls integrated in the 
> ADSL modem and the wireless router. I'm trying to protect myself from 
> some possible rootkit on my mothers laptop accessing mine while I do 
> routine administration on hers. Am I too paranoid?

don't see the difference between connectivity via the internet or via an
openvpn network, if your rule states only allow ssh (+ related traffic +
only if it originates from your machine )
over the openvpn network 

You can never be too paranoid, but within reason

> 
> Regards,
> Andrei
> -- 
> If you can't explain it simply, you don't understand it well enough.
> (Albert Einstein)



-- 
How doth the little crocodile
Improve his shining tail,
And pour the waters of the Nile
On every golden scale!

How cheerfully he seems to grin,
How neatly spreads his claws,
And welcomes little fishes in,
With gently smiling jaws!
-- Lewis Carrol, "Alice in Wonderland"


signature.asc
Description: Digital signature

Re: Remote administration of a machine behind NAT

[François Cerbelle]

Le Mar 9 septembre 2008 13:39, Alex Samad a écrit :
[...]
> don't see the difference between connectivity via the internet or via an
> openvpn network, if your rule states only allow ssh (+ related traffic +
> only if it originates from your machine )
> over the openvpn network

If you forget the iptables rules, you can almost ever connect from a
client to a server with a public IP (not behind a NAT). But you can not
connect directly to a box behind a NAT. So, the only way to establish a
connexion is to initiate the connexion from the box behind the NAT.

Secondly, you can initiate a SSH connexion, but you will not have every
thing or a VPN to route all the network traffic. As I explained, you have
to initiate the VPN connexion from the NATted box to the other. After,
both boxes are on the same network (VPN).

Now, you have to protect the admin box from an attack initiated from the
NATted box (mother's). Because this box is unsure. So, you set iptables
rules on the admin box to filter every byte which comes from the NATted
box.

Then, you can still go on internet with you normal connexion, but you can
not use it to connect directly to the NATted box, as it is natted and it
does not have a public IP. But you can connect to it using the VPN because
you are both on the same private network. And you box is protected from
malware installed on the NATted box.

I hope I was clear with my explanations.

Regards


Fanfan
-- 
http://www.cerbelle.net - http://www.afdm-idf.org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Emacs has hard time with big text files

[Martin]

On Mon, Sep 08, 2008 at 09:28:42AM +0200, Johann Spies wrote:
> After reading your message I did a quick test: I have opened a 279Mb
> (2632033 lines) file in emacs and in vim. That is on a laptop with 4G
> ram (64-bit system).

My comp is PII with 192Mb RAM and 255Mb swap.
As my 46 MB file keeps growing up I hit the limit.
When opening file of 150Mb size emacs show in minibuffer:
Maximum buffer size exceeded
and refuse to open the file at all!
I added another 1Gb of swap but it did not help.
How does emacs decide the maximum size of file it accept?

Martin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Emacs has hard time with big text files

[Sven Joachim]

On 2008-09-09 13:37 +0200, Martin wrote:

> When opening file of 150Mb size emacs show in minibuffer:
> Maximum buffer size exceeded
> and refuse to open the file at all!
> I added another 1Gb of swap but it did not help.
> How does emacs decide the maximum size of file it accept?

On 32-bit machines the maximum buffer size is 128 MB in Emacs 21 and
earlier, 256 MB in Emacs 22 and later.  Quoting the manual:

,
|A buffer's size cannot be larger than some maximum, which is defined
| by the largest buffer position representable by the "Emacs integer"
| data type.  This is because Emacs tracks buffer positions using that
| data type.  For 32-bit machines, the largest buffer size is 256
| megabytes.
`

Sven


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Emacs has hard time with big text files

[Mark Allums]

Martin wrote:

On Mon, Sep 08, 2008 at 09:28:42AM +0200, Johann Spies wrote:

After reading your message I did a quick test: I have opened a 279Mb
(2632033 lines) file in emacs and in vim. That is on a laptop with 4G
ram (64-bit system).


My comp is PII with 192Mb RAM and 255Mb swap.
As my 46 MB file keeps growing up I hit the limit.
When opening file of 150Mb size emacs show in minibuffer:
Maximum buffer size exceeded
and refuse to open the file at all!
I added another 1Gb of swap but it did not help.
How does emacs decide the maximum size of file it accept?

Martin




There are always limits.  Sometimes arbitrary, sometimes hard-line, e.g. 
32 bits cannot hold an address larger than 4G minus one bytes.  I'm sure 
many would tell you to either use an editor that allows editing from the 
disk, rather than all in memory, or get a computer that has more 
resources (or upgrade yours).  I recommend both, actually.


I think emacs has defined its own data types in elisp, and that dictates 
the limits.  The size of a buffer is held in a variable.  The type of 
the variable limits the size of the buffer.


Mark Allums



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: NVidia GeForce 6150 Go

[nate]

consultores1 wrote:
> hello
>
> I am using 1 portatil compaq presario 3000 amd64x2, it has 1 nvidia
> geforce 6150 go video card; with lenny, i want to connect my laptop to
> my tv, but i can not do that because in my understanding i have to
> install the free nvidia module or the private module!
>
> The thing is, that the free module doesn't appear during the updates,
> and my preference is using only free software.
>
> Could someone please, tell me how could i connect my laptop to tv
> appropiatelly?

You don't specify what sort of output your laptop has or what sort
of input your TV has so it's difficult to answer the question.

I have a Nvidia GeForce 7600 GS which has DVI output, connected
to a Phillips HDTV using a DVI->HDMI adapter and a HDMI cable.
I am using the commercial Nvidia drivers for performance
primarily, the related config for X11 is
[..]
Section "Module"
Load   "i2c"
Load   "bitmap"
Load   "ddc"
Load   "extmod"
Load   "freetype"
Load   "glx"
Load   "int10"
Load   "vbe"
EndSection
[..]
Section "Monitor"
Identifier "Generic Monitor"
HorizSync   28.0 - 51.0
VertRefresh 43.0 - 60.0
Option "DPMS"
EndSection

Section "Device"
Identifier "Generic Video Card"
Driver "nvidia"
EndSection

Section "Screen"
Identifier "Default Screen"
Device "Generic Video Card"
Monitor"Generic Monitor"
DefaultDepth24
SubSection "Display"
Depth   24
Modes  "1920x1080" "1024x768" "800x600" "640x480"
EndSubSection
EndSection

Depending on the laptop, with the commercial Nvidia driver the
hot key that sends the display to the external output will not
function. Also I found that at least on my previous Toshiba
M5(which has a Nvidia Quadro NVS 110M), I had to enable the
2nd display in the BIOS before things like Twinview would work.

I tried at one point to get SVideo out of the Toshiba M5 to
my TV but could not get it working, I suspect it wasn't
supported by the driver.

I'm also using Etch, though the driver is the same in any
case.

nate


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Viewing Tivo from Linux

[Michael Habashy]

Just  curious -=
I have debian box, and i like  to watch avi, mpg,dvd files on.
I also have a dvr from directtv.
Is there a way to stop usign the dvr and just use linux to record the
shows and movies that i like to see???

I would like to discontinue the dvr from directtv.

thanks
mjh


On Tue, Mar 4, 2008 at 1:54 PM, Paul Cartwright <[EMAIL PROTECTED]> wrote:
> On Tue March 4 2008, Damon L. Chesser wrote:
>> Anybody know of a way to view Tivo on a Linux box?
>
> mythtv?
> mythtv.org
>
> it isn't TIVO, but a LINUX Tivo replacement..
> other than that, do you have a TV card in your PC? if so, you could probably
> run a Tee cable from your tv/tivo to your tuner card and view/record.
> and google for TIVO and linux got a few hits, like this one:
>
> http://www.snurgle.org/~griffon/tivo_linux_extract.html
>
>
> --
> Paul Cartwright
> Registered Linux user # 367800
> Registered Ubuntu User #12459
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>
>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: USB devices not detected unless plugged in at boot

[Carl Fink]

On Tue, Sep 09, 2008 at 07:41:19AM +1000, Alex Samad wrote:

Note: quotes trimmed

> could it be an ordering thing, I have a logitech 9000 webcam, if it is
> plugged in at boot up my usb sounds doesn't work and my multicard reader
> doesn't work. I have to unload a few modules and load them in the right
> order.

No, it applies to every USB device I've tested, including several mice,
three external drives, and my RIM BlackBerry Curve.
 
> what does lsusb show you 

Without flags:

Bus 001 Device 002: ID 15ca:00c3 Textech International Ltd. Mini Optical Mouse
Bus 001 Device 001: ID :  
Bus 002 Device 002: ID 0c45:62c0 Microdia Pavilion Webcam
Bus 002 Device 001: ID :  

That's with only a mouse and the built-in webcam.  
-- 
Carl Fink   [EMAIL PROTECTED] 

Read my blog at blog.nitpicking.com.  Reviews!  Observations!
Stupid mistakes you can correct!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Viewing Tivo from Linux

[Ron Johnson]

MythTV is the canonical answer, but I'm sure there are others...

On 09/09/08 09:10, Michael Habashy wrote:

Just  curious -=
I have debian box, and i like  to watch avi, mpg,dvd files on.
I also have a dvr from directtv.
Is there a way to stop usign the dvr and just use linux to record the
shows and movies that i like to see???

I would like to discontinue the dvr from directtv.

thanks
mjh


On Tue, Mar 4, 2008 at 1:54 PM, Paul Cartwright <[EMAIL PROTECTED]> wrote:

On Tue March 4 2008, Damon L. Chesser wrote:

Anybody know of a way to view Tivo on a Linux box?

mythtv?
mythtv.org

it isn't TIVO, but a LINUX Tivo replacement..
other than that, do you have a TV card in your PC? if so, you could probably
run a Tee cable from your tv/tivo to your tuner card and view/record.
and google for TIVO and linux got a few hits, like this one:

http://www.snurgle.org/~griffon/tivo_linux_extract.html



--
Ron Johnson, Jr.
Jefferson LA  USA

"Do not bite at the bait of pleasure till you know there is no
hook beneath it."  -- Thomas Jefferson


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

sid-root: mouse not working

[steef]

hi all,

with debootstrap and some commands from debian-reference (ch. 8) i made 
a sid-root ,chroot') system 'within' lenny. so far so good. i got x 
working and the mouse.


but, when i start the computer again, i still can boot into my sid-root 
system on tty 8, i still have got the x-window-system working, but my 
mouse is not found under sid-root.  when i return to tty 7 (lenny) the 
mouse works normal.


somebody knows a solution for this: to keep the mouse working under my 
sid-root system?


i badly need it to work because under sid i am able to get my canion 
pixma mp220 working (with the mp150 driver)


thanks in advance,

regards,

steef



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: USB devices not detected unless plugged in at boot

[Thierry Chatelet]

On Monday 08 September 2008 23:41:19 Alex Samad wrote:
> On Mon, Sep 08, 2008 at 03:24:13PM -0400, Carl Fink wrote:
>
> could it be an ordering thing, I have a logitech 9000 webcam, if it is
> plugged in at boot up my usb sounds doesn't work and my multicard reader
> doesn't work. I have to unload a few modules and load them in the right
> order.
>
> what does lsusb show you
>

No, this is because the mic's webcam is seen as the only sound device system. 
Look which module is loaded for sound when this happen and blacklist it. At 
least it worked for me.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Pham mem Du Doan KQSX

[anhthu nguyen]

chào bạn , mình đọc trong google thấy chương trình dự đoán kết quả sổ xố của 
bạn,bạn có thể vui lòng gửi cho mình phần mềm đó được ko.Chân thành cảm ơn bạn 
rất nhiều



  

Re: USB devices not detected unless plugged in at boot

[Carl Fink]

On Tue, Sep 09, 2008 at 04:46:09PM +0200, Thierry Chatelet wrote:
> On Monday 08 September 2008 23:41:19 Alex Samad wrote:
> > On Mon, Sep 08, 2008 at 03:24:13PM -0400, Carl Fink wrote:
> >
> > could it be an ordering thing, I have a logitech 9000 webcam, if it is
> > plugged in at boot up my usb sounds doesn't work and my multicard reader
> > doesn't work. I have to unload a few modules and load them in the right
> > order.
> >
> > what does lsusb show you
> >
> 
> No, this is because the mic's webcam is seen as the only sound device system. 
> Look which module is loaded for sound when this happen and blacklist it. At 
> least it worked for me.

My webcam does not include a mic, though.  It's built into the laptop.
-- 
Carl Fink   [EMAIL PROTECTED] 

Read my blog at blog.nitpicking.com.  Reviews!  Observations!
Stupid mistakes you can correct!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

grammar tool in linux ... perhaps in emacs

[H.S.]

Hello,

I hope I do not start a flame war here. I was wondering what choices do
we have to check English grammar in Linux.

Now before all the purists jump to get their shotguns, pitch forks and
what not, I perfectly know that such a tool is not a substitute for
learning proper grammar. What such fanatics miss, IMHO, is that such a
tool aids in catching silly mistakes and helps significantly in proof
reading. So, having said this, I am curious if we have a grammar checker
in Linux which can be used with text editors. The most common scenario
for me would be if there is a package for emacs that works with LaTeX
(well, since emacs can do everything, I guess this should not be too
much to ask for ;)  ).

Thanks in advance.
->HS


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Remote administration of a machine behind NAT

[Andrei Popescu]

On Tue,09.Sep.08, 10:12:40, Chris Davies wrote:
 
[...]

> No, you're not too paranoid, but I think you've missed the point of
> the suggestion.
> 
> Install OpenVPN on both your mother's PC and your system. Set her PC's
> installation to establish the connection to yours. Use the builtin ping
> options to keep the connection open through the NAT layers (e.g. if the
> smallest NAT timeout is 300 seconds, set the ping timer to 140 seconds).
> 
> This will give you an encrypted bi-directional connection between your
> system and your mother's PC, which you can then use from your end whenever
> you need to do so.
 
Maybe I'm dense, but I still don't see the benefits compared to a ssh 
tunnel.

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature

Re: grammar tool in linux ... perhaps in emacs

[Felipe Gallois]

On Tue, Sep 9, 2008 at 13:14, H.S. <[EMAIL PROTECTED]> wrote:

> Hello,
>
> I hope I do not start a flame war here. I was wondering what choices do
> we have to check English grammar in Linux.
>
> Now before all the purists jump to get their shotguns, pitch forks and
> what not, I perfectly know that such a tool is not a substitute for
> learning proper grammar. What such fanatics miss, IMHO, is that such a
> tool aids in catching silly mistakes and helps significantly in proof
> reading. So, having said this, I am curious if we have a grammar checker
> in Linux which can be used with text editors. The most common scenario
> for me would be if there is a package for emacs that works with LaTeX
> (well, since emacs can do everything, I guess this should not be too
> much to ask for ;)  ).
>
> Thanks in advance.
> ->HS
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
>
>
well
i know just queequeg, which works with the console...
i once made a small tutorial for making it work for a professor, so maybe
you can do something with it!

http://www.gallois.com.br/blog/2008/07/30/grammar-checker-on-linux-with-queequeg/

cheers

-- 
gallois
aka Felipe Gallois
website: www.gallois.com.br
blog: www.gallois.com.br/blog
fanglib homepage: www.gallois.com.br/fanglib

[solved] Re: sshfs and sed -i

[Johannes Wiedersich]

On 2008-09-08 17:27, Johannes Wiedersich wrote:
> On lenny, I have mounted a remote directory via sshfs:
> $ sshfs [EMAIL PROTECTED]:/path/to/dir dir
> 
> $ sed -i s/foo/bar/ testfilec
> sed: cannot rename ./sedz1MMtd: Operation not permitted

This seems to be related to this point in

//usr/share/doc/sshfs/FAQ.txt.gz---
Why does SVN (etc...) fail to rename files?

$ svn co svn://anonsvn.kde.org/home/kde/trunk/KDE/kdelibs
svn: Can't move 'kdelibs/.svn/tmp/entries' to 'kdelibs/.svn/entries':
Operation
 not permitted

   The reason is that SFTP protocol version 3 (which is implemented by
   OpenSSH's sftp-server) defines the rename operation slightly
   differently than POSIX. The difference is that renaming to an existing
   file or directory will fail instead of atomically replacing the old
   file.

   The -o workaround=rename option will try to emulate POSIX rename
   semantics, but it cannot guarantee atomicity. In most of the cases
   this doesn't matter, and things will work fine with this option.
\

The '-o workaround=rename' option to sshfs solves it for me.

It's a shame that OpenSSH isn't posix compatible.

Hope this will help someone with the same problem.

Cheers,

Johannes



signature.asc
Description: OpenPGP digital signature

Re: sshfs and sed -i

[Johannes Wiedersich]

On 2008-09-09 08:40, Johann Spies wrote:
> What does "ls -l testfilec" show you about the permissions and
> ownership on the file?

Thanks for your help. The culprit seems to be the
'non-posix-conformality' of OpenSSH (see my other post).

Cheers,
Johannes



signature.asc
Description: OpenPGP digital signature

Re: apache2 in Debian - adding vhost - which file to edit? SOLVED

[Zach Uram]

I just called it darcs in /etc/apache2/sites-available and in
/etc/apache2/sites-enabled did:
ln -s /etc/apache2/sites-available/darcs darcs

Then I restarted apache2 and it works :-)

Zach


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: apache2 in Debian - adding vhost - which file to edit? SOLVED

[Raquel]

On Tue, 9 Sep 2008 13:20:26 -0400
"Zach Uram" <[EMAIL PROTECTED]> wrote:

> I just called it darcs in /etc/apache2/sites-available and in
> /etc/apache2/sites-enabled did:
> ln -s /etc/apache2/sites-available/darcs darcs
> 
> Then I restarted apache2 and it works :-)
> 
> Zach
> 

a2ensite darcs
will do the same thing for you.

-- 
Raquel
http://www.byraquel.com

We have been down this road before in this country. The right to
liberty and happiness belongs to each of us and on the same terms,
without regard to either skin color or sexual orientation.

  --John Lewis


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

suspend/hibernate in gnome-lenny

[Moisés Redondo]

Hello, I'm trying to make my laptop (Dell Precision M65) suspend and hibernate 
in gnome.

The problem is that I can't make gnome to use s2ram/s2disk commands 
automatically. I can suspend and hibernate from a terminal but I can't do it 
through gnome applets or the shutdown button (when it asks you if you want to 
suspend,hibernate,reboot,cancel or shutdown).

I' ve read that tweaking the scripts in /usr/lib/hal/scripts/linux could do 
the trick, but it doesn't work. I've changed hal-system-power-suspend-linux 
to use a custom script using s2ram but it simply ignores it. 

The only thing I can get is a nice popup error message.

I remember having done this before in other installations of lenny/etch and 
being able to suspend/hibernate but now it is imposible. Is it that 
gnome-power-manager doesn't uses hal-scripts anymore?

Any ideas?

fray diógenes

PD: excuses for my English...


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Some of Sid won't overwrite CIFS shared files

[Joe]

A week or two ago I suddenly couldn't overwrite email attachments to a 
share on the current Etch Samba. No real problem, I can save them by a 
different name, delete the original, then rename the new one. Be fixed 
soon, I'm sure...


But it wasn't, and on further investigation, many other programs have 
problems but not all. PCB won't overwrite, and since it logs to a 
separate window, it fails to do so fairly silently. Unison won't 
overwrite, KEdit won't, GEdit will, KWrite won't, AbiWord will, pcmanfm 
won't, mc won't, GVim will, though it took me an unreasonable time to 
find out how. There would seem to be some kind of Gnome/KDE divide, in 
that only the definitely Gnomish programs seem able to do the overwrite. 
I'm using the Gnome desktop, though I don't believe that should 
adversely affect non-Gnome programs. I've looked into dependencies, but 
that doesn't seem very useful. All will overwrite local files without 
difficulty.


Does anyone see this and know instantly what the problem is, or at least 
which package is likely to be responsible? I didn't take the original 
problem seriously enough to note which packages had just been updated, 
and I'm not really sure now when it happened. More than a week ago, less 
than a month, but Sid has really been getting hammered lately, probably 
a couple of hundred packages updated in that time.


I've looked into mount.cifs, but I'm using noperm in fstab, and at the 
moment, all the files under test are world-writeable on the server, with 
guest access. Since the server is CIFS-aware, the underlying server 
ownerships and permissions show through in a client file manager.


All the programs which won't overwrite will save to a new filename, and 
the file managers will delete. They just won't do both at once, claiming 
that the file or directory isn't found.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: suspend/hibernate in gnome-lenny

[Richard Möhn]

On Tue, Sep 09, 2008 at 07:46:03PM +0200, Moisés Redondo wrote:
> Hello, I'm trying to make my laptop (Dell Precision M65) suspend and 
> hibernate 
> in gnome.
> 
> The problem is that I can't make gnome to use s2ram/s2disk commands 
> automatically. I can suspend and hibernate from a terminal but I can't do it 
> through gnome applets or the shutdown button (when it asks you if you want to 
> suspend,hibernate,reboot,cancel or shutdown).
> 
> I' ve read that tweaking the scripts in /usr/lib/hal/scripts/linux could do 
> the trick, but it doesn't work. I've changed hal-system-power-suspend-linux 
> to use a custom script using s2ram but it simply ignores it. 
> 
> The only thing I can get is a nice popup error message.
> 
> I remember having done this before in other installations of lenny/etch and 
> being able to suspend/hibernate but now it is imposible. Is it that 
> gnome-power-manager doesn't uses hal-scripts anymore?
> 
> Any ideas?
> 
> fray diógenes
> 

I think doing this with some manipulations in /etc/sudoers it will
work, so you can run these commands as normal user.  But since I haven't
already done something with this file I can't say how you have to do
this and if it would be the right way.

With the best greetings

Richard
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

-- 
Richard Möhn, Laußnitz in Sachsen
Public Key-ID: 4385C7FB
Fingerprint: D74B F0D6 52BD C802 F5E2  B5BF 78AB 5563 4385 C7FB


signature.asc
Description: Digital signature

Re: [Fwd: Re: Debian Live Lenny Beta1]

[Daniel Baumann]

David López Zajara (Er_Maqui) wrote:
> I've tested the lenny live CD on MBP (SantaRosa model),and i have this
> problem. I'm booting with rEFIt.

sorry for the late answer: the problem is know, and already fixed.
expect newer builds with a fixed syslinux version soon.

-- 
Address:Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist
Email:  [EMAIL PROTECTED]
Internet:   http://people.panthera-systems.net/~daniel-baumann/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: suspend/hibernate in gnome-lenny

[fraydiógenes]

El Tuesday 09 September 2008 20:34:32 Richard Möhn escribió:
> On Tue, Sep 09, 2008 at 07:46:03PM +0200, Moisés Redondo wrote:
> > Hello, I'm trying to make my laptop (Dell Precision M65) suspend and
> > hibernate in gnome.
> >
> > The problem is that I can't make gnome to use s2ram/s2disk commands
> > automatically. I can suspend and hibernate from a terminal but I can't do
> > it through gnome applets or the shutdown button (when it asks you if you
> > want to suspend,hibernate,reboot,cancel or shutdown).
> >
> > I' ve read that tweaking the scripts in /usr/lib/hal/scripts/linux could
> > do the trick, but it doesn't work. I've changed
> > hal-system-power-suspend-linux to use a custom script using s2ram but it
> > simply ignores it.
> >
> > The only thing I can get is a nice popup error message.
> >
> > I remember having done this before in other installations of lenny/etch
> > and being able to suspend/hibernate but now it is imposible. Is it that
> > gnome-power-manager doesn't uses hal-scripts anymore?
> >
> > Any ideas?
> >
> > fray diógenes
>
> I think doing this with some manipulations in /etc/sudoers it will
> work, so you can run these commands as normal user.  But since I haven't
> already done something with this file I can't say how you have to do
> this and if it would be the right way.
>
> With the best greetings
>
> Richard
>

Thank you for your answer, but I've already done that.

In fact, I've made a custom script with s2ram and put it 
in /usr/lib/hal/scripts/linux/hal-system-power-suspend-linux,
replacing the original one, but gnome seems to ignore it. I can run the script 
from the command line without problems but when I do it through the 
button-applet it doesn't work.

Regards


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: grammar tool in linux ... perhaps in emacs

[Martin Smith]

H.S. wrote:

Hello,

I hope I do not start a flame war here. I was wondering what choices do
we have to check English grammar in Linux.

Now before all the purists jump to get their shotguns, pitch forks and
what not, I perfectly know that such a tool is not a substitute for
learning proper grammar. What such fanatics miss, IMHO, is that such a
tool aids in catching silly mistakes and helps significantly in proof
reading. So, having said this, I am curious if we have a grammar checker
in Linux which can be used with text editors. The most common scenario
for me would be if there is a package for emacs that works with LaTeX
(well, since emacs can do everything, I guess this should not be too
much to ask for ;)  ).


Well the last time I saw a grammar checker on a computer was in the days
of wordstar and dos 3.1, to call it crap would be an insult to crap.
I have no idea where it got it's rules from but it certainly did not
correspond to any form of english grammar, from either side of the atlantic
that I have ever come across.
I have never seen anything since.

--
Martin


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: grammar tool in linux ... perhaps in emacs

[Ron Johnson]

On 09/09/08 13:47, Martin Smith wrote:

H.S. wrote:

Hello,

I hope I do not start a flame war here. I was wondering what choices do
we have to check English grammar in Linux.

Now before all the purists jump to get their shotguns, pitch forks and
what not, I perfectly know that such a tool is not a substitute for
learning proper grammar. What such fanatics miss, IMHO, is that such a
tool aids in catching silly mistakes and helps significantly in proof
reading. So, having said this, I am curious if we have a grammar checker
in Linux which can be used with text editors. The most common scenario
for me would be if there is a package for emacs that works with LaTeX
(well, since emacs can do everything, I guess this should not be too
much to ask for ;)  ).


Well the last time I saw a grammar checker on a computer was in the days
of wordstar and dos 3.1, to call it crap would be an insult to crap.
I have no idea where it got it's rules from but it certainly did not
correspond to any form of english grammar, from either side of the atlantic
that I have ever come across.
I have never seen anything since.


MS Word has a decent-but-bland grammar checker.

--
Ron Johnson, Jr.
Jefferson LA  USA

"Do not bite at the bait of pleasure till you know there is no
hook beneath it."  -- Thomas Jefferson


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Remote administration of a machine behind NAT

[Andrei Popescu]

On Tue,09.Sep.08, 13:50:05, François Cerbelle wrote:
 
[...]

> Now, you have to protect the admin box from an attack initiated from the
> NATted box (mother's). Because this box is unsure. So, you set iptables
> rules on the admin box to filter every byte which comes from the NATted
> box.

Yes, this is my problem

> Then, you can still go on internet with you normal connexion, but you can
> not use it to connect directly to the NATted box, as it is natted and it
> does not have a public IP. But you can connect to it using the VPN because
> you are both on the same private network. And you box is protected from
> malware installed on the NATted box.
 
What is protecting me from the malware, because I still have to open the 
firewall for the VPN? Or do you mean I can firewall the traffic going 
through the VPN?

This is interesting, but it adds additional complexity to the setup.  
I've set up a reverse ssh tunnel using a (very) restricted key. Hope 
it's enough.

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature

Re: suspend/hibernate in gnome-lenny

[fraydiógenes]

El Tuesday 09 September 2008 20:34:32 Richard Möhn escribió:
> On Tue, Sep 09, 2008 at 07:46:03PM +0200, Moisés Redondo wrote:
> > Hello, I'm trying to make my laptop (Dell Precision M65) suspend and
> > hibernate in gnome.
> >
> > The problem is that I can't make gnome to use s2ram/s2disk commands
> > automatically. I can suspend and hibernate from a terminal but I can't do
> > it through gnome applets or the shutdown button (when it asks you if you
> > want to suspend,hibernate,reboot,cancel or shutdown).
> >
> > I' ve read that tweaking the scripts in /usr/lib/hal/scripts/linux could
> > do the trick, but it doesn't work. I've changed
> > hal-system-power-suspend-linux to use a custom script using s2ram but it
> > simply ignores it.
> >
> > The only thing I can get is a nice popup error message.
> >
> > I remember having done this before in other installations of lenny/etch
> > and being able to suspend/hibernate but now it is imposible. Is it that
> > gnome-power-manager doesn't uses hal-scripts anymore?
> >
> > Any ideas?
> >
> > fray diógenes
>
> I think doing this with some manipulations in /etc/sudoers it will
> work, so you can run these commands as normal user.  But since I haven't
> already done something with this file I can't say how you have to do
> this and if it would be the right way.
>
> With the best greetings
>
> Richard
>

Thank you for your answer, but I've already done that.

In fact, I've made a custom script with s2ram and put it 
in /usr/lib/hal/scripts/linux/hal-system-power-suspend-linux,
replacing the original one, but gnome seems to ignore it. I can run the script 
from the command line without problems but when I do it through the 
button-applet it doesn't work.

Regards

fray diógenes


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

cgi-bin stopped working in apache ?! please help

[Zach Uram]

This is really baffling because CGI was working last week and now when
I try it again and it is not working.

All I did was add a name based virtual host in
/etc/apache2/sites-enabled/ and /etc/apache2/sites-available/

I am running  apache2-mpm-prefork version 2.2.9-7 on Debian lenny/sid.

/usr/lib/cgi-bin/ has darcs.cgi, darcsweb.cgi and awstats.pl

Previously to access one of these I would do:
http://www.jesujuva.org/cgi-bin/darcsweb.cgi

But now when I do that I get this file not found error:

404 Not Found

The requested URL /cgi-bin/darcsweb.cgi was not found on this server.
Apache/2.2.9 (Debian) PHP/5.2.6-3 with Suhosin-Patch Server at
www.jesujuva.org Port 80

It is clearly there so why is it saying not found? Argh this is so frustrating.

/etc/apache2/sites-available/default has:

ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/

AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all


/etc/apach2/mods-enabled/cgi.load has:
LoadModule cgi_module /usr/lib/apache2/modules/mod_cgi.so

ls shows this module exists:
-rw-r--r-- 1 root root 20256 2008-08-08 13:39
/usr/lib/apache2/modules/mod_cgi.so

/etc/apache2/mods-available/cgid.conf has:
# Socket for cgid communication
ScriptSock /var/run/apache2/cgisock

/etc/apache2/conf.d/darcsweb.conf has:
Alias /darcs /var/www/darcs

Alias /darcsweb /usr/share/darcsweb

AllowOverride None
Options None
Order allow,deny
Allow from all
RedirectMatch ^/darcsweb$ /cgi-bin/darcsweb.cgi


I don't see why it worked last week and now it doesn't. I didn't
upgrade apache2, I didn't edit any of the config files except adding a
named based virtual host which I did by creating
/etc/apache2/sites-available/darcs which has:

   ServerName darcs.jesujuva.org
   ServerAlias jesujuva.org www.jesujuva.org darcs.jesujuva.org
   DocumentRoot /var/www/darcs


And creating a symlink to that named darcs in /etc/apache2/sites-enabled

So why is CGI not working and how can I fix it?

I get the same "404 Not Found" error if I try other programs in
/usr/lib/cgi-bin such as darcs.cgi or awstats.pl

Zach


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Remote administration of a machine behind NAT

[nate]

Andrei Popescu wrote:
> On Tue,09.Sep.08, 00:48:21, Andrei Popescu wrote:
>> Hi,
>>
>> Recently my mother (running Lenny) switched ISPs and is now behind a
>> NAT, which makes direct ssh access impossible. A reverse ssh tunnel can
>> solve this, but having her type a passphrase every time is hmm...
>> unrealistic.

How about using a SSH agent ? type the passphrase once for the
session.

This describes ssh agent and agent forwarding pretty well:
http://www.unixwiz.net/techtips/ssh-agent-forwarding.html


> command="/bin/true"[..]
>
> Can anyone spot a possible attack vector?

Does that work? I would expect SSH to execute /bin/true and
then exit, the connection would close at that point.

nate



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Remote administration of a machine behind NAT

[Andrei Popescu]

On Tue,09.Sep.08, 00:48:21, Andrei Popescu wrote:
> Hi,
> 
> Recently my mother (running Lenny) switched ISPs and is now behind a 
> NAT, which makes direct ssh access impossible. A reverse ssh tunnel can 
> solve this, but having her type a passphrase every time is hmm...  
> unrealistic.
> 
> If I create a key without passphrase it would make my own system 
> vulnerable. Of course, I can put some restrictions on the key via the 
> authorized_keys file, but is that enough?

I have created a key-pair for this and put the following in 
.ssh/authorized_keys (basically I denied everything and then enabled 
just enough to make it work for my needs):

command="/bin/true",no-agent-forwarding,no-pty,no-user-rc,no-X11-forwarding,permitopen="localhost:1234"

Can anyone spot a possible attack vector? 

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature

Re: grammar tool in linux ... perhaps in emacs

[gary turner]

Martin Smith wrote:

H.S. wrote:

Hello,

I hope I do not start a flame war here. I was wondering what choices do
we have to check English grammar in Linux.




Well the last time I saw a grammar checker on a computer was in the days
of wordstar and dos 3.1, to call it crap would be an insult to crap.
I have no idea where it got it's rules from but it certainly did not
correspond to any form of english grammar, from either side of the atlantic
that I have ever come across.
I have never seen anything since.

Going back to DOS, I had (and still have on an old Win98 box) an app 
called RightWriter, which applied the rules from Strunk & White's 
/Elements of Style/.  It even came with a copy of the book, and each 
comment referenced the rule by number.


It was/is superior to Grammatik (sp?), a real PoS, and another major 
player of the time, whose name I can't remember.  RightWriter was 
published by Prentiss-Hall.  I made inquiries regarding new versions or 
availability of the source.  They were met with silence.  A damned 
shame, as porting a DOS program to Linux ought to be fairly straight 
forward, and RightWriter would be worth the effort.


cheers,

gary
--
Anyone can make a usable web site. It takes a graphic
designer to make it slow, confusing and painful to use.
begin:vcard
fn:Gary Turner
n:Turner;Gary
org:Gary Turner, Web Developer
adr:;;USA
email;internet:[EMAIL PROTECTED]
title:Czar
x-mozilla-html:FALSE
url:http://gtwebdev.com/
version:2.1
end:vcard

Re: Remote administration of a machine behind NAT

[Andrei Popescu]

On Tue,09.Sep.08, 12:52:19, nate wrote: 

> How about using a SSH agent ? type the passphrase once for the
> session.
> 
> This describes ssh agent and agent forwarding pretty well:
> http://www.unixwiz.net/techtips/ssh-agent-forwarding.html

I'm familiar with ssh-agent (using it myself). The issue is not with 
typing the passphrase many times, but having to type it at all...

> > command="/bin/true"[..]
> >
> > Can anyone spot a possible attack vector?
> 
> Does that work? I would expect SSH to execute /bin/true and
> then exit, the connection would close at that point.
 
ssh isn't executing anything at all, it's just building the tunnel for 
me ;)

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature

Re: cgi-bin stopped working in apache ?! please help

[gary turner]

Zach Uram wrote:

This is really baffling because CGI was working last week and now when
I try it again and it is not working.

All I did was add a name based virtual host in
/etc/apache2/sites-enabled/ and /etc/apache2/sites-available/

I am running  apache2-mpm-prefork version 2.2.9-7 on Debian lenny/sid.

/usr/lib/cgi-bin/ has darcs.cgi, darcsweb.cgi and awstats.pl

Previously to access one of these I would do:
http://www.jesujuva.org/cgi-bin/darcsweb.cgi

But now when I do that I get this file not found error:

404 Not Found

The requested URL /cgi-bin/darcsweb.cgi was not found on this server.
Apache/2.2.9 (Debian) PHP/5.2.6-3 with Suhosin-Patch Server at
www.jesujuva.org Port 80

It is clearly there so why is it saying not found? Argh this is so frustrating.

/etc/apache2/sites-available/default has:

ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/

AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all


/etc/apach2/mods-enabled/cgi.load has:
LoadModule cgi_module /usr/lib/apache2/modules/mod_cgi.so

ls shows this module exists:
-rw-r--r-- 1 root root 20256 2008-08-08 13:39
/usr/lib/apache2/modules/mod_cgi.so

/etc/apache2/mods-available/cgid.conf has:
# Socket for cgid communication
ScriptSock /var/run/apache2/cgisock

/etc/apache2/conf.d/darcsweb.conf has:
Alias /darcs /var/www/darcs

Alias /darcsweb /usr/share/darcsweb

AllowOverride None
Options None
Order allow,deny
Allow from all
RedirectMatch ^/darcsweb$ /cgi-bin/darcsweb.cgi


I don't see why it worked last week and now it doesn't. I didn't
upgrade apache2, I didn't edit any of the config files except adding a
named based virtual host which I did by creating
/etc/apache2/sites-available/darcs which has:

   ServerName darcs.jesujuva.org
   ServerAlias jesujuva.org www.jesujuva.org darcs.jesujuva.org
   DocumentRoot /var/www/darcs


And creating a symlink to that named darcs in /etc/apache2/sites-enabled

So why is CGI not working and how can I fix it?

I get the same "404 Not Found" error if I try other programs in
/usr/lib/cgi-bin such as darcs.cgi or awstats.pl

Zach



Assuming you have something like this in your config:
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/

AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all


You would access a cgi as http://darcs.jesujuva.org/cgi-bin/awstats.pl

cgi-bin is an alias for /usr/lib/cgi-bin _which is not in the document 
root's tree_


cheers,

gary
--
Anyone can make a usable web site. It takes a graphic
designer to make it slow, confusing and painful to use.
begin:vcard
fn:Gary Turner
n:Turner;Gary
org:Gary Turner, Web Developer
adr:;;USA
email;internet:[EMAIL PROTECTED]
title:Czar
x-mozilla-html:FALSE
url:http://gtwebdev.com/
version:2.1
end:vcard

Re: cgi-bin stopped working in apache ?! please help

[gary turner]

Zach Uram wrote:

This is really baffling because CGI was working last week and now when
I try it again and it is not working.


I reread your post and my reply, and want to say it was was not clear 
that your url was complete.  If I merely duplicated what you've been 
doing, I apologize.


cheers,

gary
--
Anyone can make a usable web site. It takes a graphic
designer to make it slow, confusing and painful to use.
begin:vcard
fn:Gary Turner
n:Turner;Gary
org:Gary Turner, Web Developer
adr:;;USA
email;internet:[EMAIL PROTECTED]
title:Czar
x-mozilla-html:FALSE
url:http://gtwebdev.com/
version:2.1
end:vcard

Re: cgi-bin stopped working in apache ?! please help SOLVED

[Zach Uram]

On Tue, Sep 9, 2008 at 3:54 PM, André Warnier <[EMAIL PROTECTED]> wrote:
>
> Just a guess :
>
> 1) the new entry you have added to /etc/apache2/sites-available (and
> sites-enabled) is called e.g. "darcs", which for some reason precedes
> "default" in the directory.
> 2) in the apache.conf, there is something like
> Include /etc/apache2/sites-enabled/*
> 3) so now, when Apache starts, it "includes" the configuration of your new
> Virtual Host *before* it includes the "default" Virtual Host.
> 4) as a result, the default virtual host is no longer "default", but
> "darcs", and nothing works anymore like before.
> (It is the new default because it is now the first defined virtual host in
> your setup)
>
>
> Check :
> rename /etc/apache2/sites-available/darcs to
> /etc/apache2/sites-available/xxx (and the same for sites-enabled), and
> restart Apache.  Does it work again ?
>
> Am I close ?
>
> André

Hi André,

I figured it out before I read your message but yes that seems to be
what happened. I have removed the other terms from
/etc/apache2/sites-available/darcs in ServerAlias so it now has:


   ServerName darcs.jesujuva.org
   ServerAlias darcs.jesujuva.org
   DocumentRoot /var/www/darcs


I restarted apache and it works. Someone had recommended I add those
terms to ServerAlias and that is what screwed me up. This was the
first time I setup a virtual host so I must be careful what *advice* I
apply :-) BTW by ServerName it is the subdomain (ie.
http://darcs.jesujuva.org) and then what is the difference exactly
between that and ServerAlias?

Zach


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

BUSY BOX after boot attempt..

[Jack Schneider]

-- Hi, all 

I created my own problem. I think!
I have a dual boot Dell M60 laptop. Running Lenny, linux kernel
2.6.26-1-686.  I have/had  a small primary (hda3) as /boot.
A larger logical (hda2) with / (hda5) and /home (hda6) + Swap (hda7).
hda1 is XP.  
I used GRML 1.1 iso and gparted to "resize/move" /boot to 5X intial
size. because with kernel changes, I had low disk space errors. All
seemed to go well. No errors.  When I rebooted back to lenny on hdd I
get the BusyBox prompt. I get the GRUB window OK.  I see what looks like
errors as follows,
Mount: No such file or directory.  (Three times)
Target filesystem doesn't have /sbin/init
No init found, Try parsing init= bootarg

I don't know where to go next... 

Thanks in advance...

Jack

 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: BUSY BOX after boot attempt..

[Andrei Popescu]

On Tue,09.Sep.08, 16:00:11, Jack Schneider wrote:
> 
> 
> -- Hi, all 
> 
> I created my own problem. I think!
> I have a dual boot Dell M60 laptop. Running Lenny, linux kernel
> 2.6.26-1-686.  I have/had  a small primary (hda3) as /boot.
> A larger logical (hda2) with / (hda5) and /home (hda6) + Swap (hda7).
> hda1 is XP.  
> I used GRML 1.1 iso and gparted to "resize/move" /boot to 5X intial
> size. because with kernel changes, I had low disk space errors. All
> seemed to go well. No errors.  When I rebooted back to lenny on hdd I
> get the BusyBox prompt. I get the GRUB window OK.  I see what looks like
> errors as follows,
> Mount: No such file or directory.  (Three times)
> Target filesystem doesn't have /sbin/init
> No init found, Try parsing init= bootarg
> 
> I don't know where to go next... 
 
I've had cases where changes in partitioning has changed the partition 
numbers. Boot your GRML and check what the correct numbers are. In case 
of any doubt use labels.

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature

Re: BUSY BOX after boot attempt..

[paragasu]

i just come across this problem 2 days ago. in my case, it is actually
the udev problem. check if there is any error saying udevd failed etc.
Even after successfully booting. i have problem with my eth0 not
working (renamed to eth1 by then new udev)..

to fix it, i do apt-get update then apt-get upgrade.
apt will take the rest. i think getting the new udevd working is what the new
kernel need to work..



On 9/10/08, Andrei Popescu <[EMAIL PROTECTED]> wrote:
> On Tue,09.Sep.08, 16:00:11, Jack Schneider wrote:
>>
>>
>> -- Hi, all
>>
>> I created my own problem. I think!
>> I have a dual boot Dell M60 laptop. Running Lenny, linux kernel
>> 2.6.26-1-686.  I have/had  a small primary (hda3) as /boot.
>> A larger logical (hda2) with / (hda5) and /home (hda6) + Swap (hda7).
>> hda1 is XP.
>> I used GRML 1.1 iso and gparted to "resize/move" /boot to 5X intial
>> size. because with kernel changes, I had low disk space errors. All
>> seemed to go well. No errors.  When I rebooted back to lenny on hdd I
>> get the BusyBox prompt. I get the GRUB window OK.  I see what looks like
>> errors as follows,
>> Mount: No such file or directory.  (Three times)
>> Target filesystem doesn't have /sbin/init
>> No init found, Try parsing init= bootarg
>>
>> I don't know where to go next...
>
> I've had cases where changes in partitioning has changed the partition
> numbers. Boot your GRML and check what the correct numbers are. In case
> of any doubt use labels.
>
> Regards,
> Andrei
> --
> If you can't explain it simply, you don't understand it well enough.
> (Albert Einstein)
>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: suspend/hibernate in gnome-lenny

[Cassiano Leal]

On Tue, Sep 9, 2008 at 4:46 PM, fraydiógenes <[EMAIL PROTECTED]> wrote:

> El Tuesday 09 September 2008 20:34:32 Richard Möhn escribió:
> > On Tue, Sep 09, 2008 at 07:46:03PM +0200, Moisés Redondo wrote:
> > > Hello, I'm trying to make my laptop (Dell Precision M65) suspend and
> > > hibernate in gnome.
> > >
> > > The problem is that I can't make gnome to use s2ram/s2disk commands
> > > automatically. I can suspend and hibernate from a terminal but I can't
> do
> > > it through gnome applets or the shutdown button (when it asks you if
> you
> > > want to suspend,hibernate,reboot,cancel or shutdown).
> > >
> > > I' ve read that tweaking the scripts in /usr/lib/hal/scripts/linux
> could
> > > do the trick, but it doesn't work. I've changed
> > > hal-system-power-suspend-linux to use a custom script using s2ram but
> it
> > > simply ignores it.
> > >
> > > The only thing I can get is a nice popup error message.
> > >
> > > I remember having done this before in other installations of lenny/etch
> > > and being able to suspend/hibernate but now it is imposible. Is it that
> > > gnome-power-manager doesn't uses hal-scripts anymore?
> > >
> > > Any ideas?
> > >
> > > fray diógenes
> >
> > I think doing this with some manipulations in /etc/sudoers it will
> > work, so you can run these commands as normal user.  But since I haven't
> > already done something with this file I can't say how you have to do
> > this and if it would be the right way.
> >
> > With the best greetings
> >
> > Richard
> >
>
> Thank you for your answer, but I've already done that.
>
> In fact, I've made a custom script with s2ram and put it
> in /usr/lib/hal/scripts/linux/hal-system-power-suspend-linux,
> replacing the original one, but gnome seems to ignore it. I can run the
> script
> from the command line without problems but when I do it through the
> button-applet it doesn't work.
>
> Regards
>
> fray diógenes
>

Did you check that your user is in the powerdev group?

$ groups 

Check that powerdev is in the list of groups. If not,

$ sudo adduser  powerdev

Log out and in again, and retry.

Cheers,
Cassiano Leal

rsync over lan

[tyler]

Hi,

With some help from the good people on this list, I got a simple home
network setup, and I'm now using it to backup my laptop to my desktop
using rsync. I have one question though - I'm backing up /etc, /home,
/opt, and parts of /usr and /var. I want to preserve ownership, but if I
do the backup from my user account as:

rsync -av --include-from=/home/tyler/rsync_includes /
  etch.mynetwork:/home/tyler/laptop

Then the ownerships all get set to tyler tyler, even when they are
originally root root. In order to preserve the ownerships, I have to run
the above command as root, which requires that I configure sshd on the
desktop to accept root logins. Even behind a NAT router, that doesn't
seem like a good idea. Am I missing something?

Thanks,

Tyler
 
-- 
Support standardized open formats and control your own data -
Reject Microsoft OOXML

http://noooxml.org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Way OT: OpenDNS

[Dotan Cohen]

My Internet access has been getting slower and slower and my ISP is a joke:

$ ping google.com
PING google.com (64.233.167.99) 56(84) bytes of data.
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=1 ttl=243
time=180 ms
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=2 ttl=243
time=185 ms
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=3 ttl=243
time=191 ms
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=4 ttl=243
time=182 ms
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=5 ttl=243
time=189 ms
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=6 ttl=243
time=189 ms

See also this mtr output: http://pastebin.com/m36bd850f

Are there any known problems / gotchas with OpenDNS? I do know that
they redirect google queries through their own servers and return ads
in place of unregistered domains, but those 'features' can be turned
off. Anything else that I should be aware of?

Thanks in advance.

-- 
Dotan Cohen

http://what-is-what.com
http://gibberish.co.il
א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת

ä-ö-ü-ß-Ä-Ö-Ü

Re: rsync over lan

[Celejar]

On Tue, 09 Sep 2008 22:17:59 -0300
tyler <[EMAIL PROTECTED]> wrote:

> Hi,
> 
> With some help from the good people on this list, I got a simple home
> network setup, and I'm now using it to backup my laptop to my desktop
> using rsync. I have one question though - I'm backing up /etc, /home,
> /opt, and parts of /usr and /var. I want to preserve ownership, but if I
> do the backup from my user account as:
> 
> rsync -av --include-from=/home/tyler/rsync_includes /
>   etch.mynetwork:/home/tyler/laptop
> 
> Then the ownerships all get set to tyler tyler, even when they are
> originally root root. In order to preserve the ownerships, I have to run
> the above command as root, which requires that I configure sshd on the
> desktop to accept root logins. Even behind a NAT router, that doesn't
> seem like a good idea. Am I missing something?

A)  The Debian ssh maintainer thinks that root logins should be allowed;
this is a very old argument.  From the README.Debian:

> Having PermitRootLogin set to yes means that an attacker that knows
> the root password can ssh in directly (without having to go via a user
> account). If you set it to no, then they must compromise a normal user
> account. In the vast majority of cases, this does not give added
> security; remember that any account you su to root from is equivalent
> to root - compromising this account gives an attacker access to root
> easily. If you only ever log in as root from the physical console,
> then you probably want to set this value to no.
> 
> As an aside, PermitRootLogin can also be set to "without-password" or
> "forced-commands-only" - see sshd(8) for more details.
> 
> DO NOT FILE BUG REPORTS SAYING YOU THINK THIS DEFAULT IS INCORRECT!
> 
> The argument above is somewhat condensed; I have had this discussion
> at great length with many people. If you think the default is
> incorrect, and feel strongly enough to want to argue about it, then
> send email to [EMAIL PROTECTED] I will close bug reports
> claiming the default is incorrect.

B)  Fakeroot can apparently more or less do what you want; install it,
and read README.saving.  It claims to be usable with rsync to do
exactly what you want (although it says that "it will not work
perfectly"); I haven't tried it.

> Tyler

Celejar
--
mailmin.sourceforge.net - remote access via secure (OpenPGP) email
ssuds.sourceforge.net - A Simple Sudoku Solver and Generator


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: rsync over lan

[Mike McCarty]

tyler wrote:

[I use my lan to]

do the backup from my user account as:

rsync -av --include-from=/home/tyler/rsync_includes /
  etch.mynetwork:/home/tyler/laptop

Then the ownerships all get set to tyler tyler, even when they are
originally root root. In order to preserve the ownerships, I have to run
the above command as root, which requires that I configure sshd on the
desktop to accept root logins. Even behind a NAT router, that doesn't
seem like a good idea. Am I missing something?


Often, rsync is used like this only with dedicated LAN ports, not
through a bridge. In that case, you simply use fixed IP addresses
with the dedicated ports, and use hosts.allow and hosts.deny to
set up security. In that way, unless you have an actual breach
of one of the host machines itself (as opposed to simply compromise
of the bridge) you don't get a problem. You use a different domain
for the dedicated local connections, e.g. 192 on the NAT LAN, and
172 for the dedicated ports. Then make sure that the LAN domain
is denied for the dedicated ports. The dedicated ports may
then be connected via a crossover cable, or if you want a few
machines, then via an ethernet hub. It is key not to connect
the bridge and the hub together. Then only allow root login
from the dedicated ports. I'm not expert on these matters, so
I don't know the details of how to set that up. Perhaps it's
as simple as where you permit an NFS mount to come from.

Mike
--
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Oppose globalization and One World Governments like the UN.
This message made from 100% recycled bits.
You have found the bank of Larn.
I speak only for myself, and I am unanimous in that!


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Way OT: OpenDNS

[Mike McCarty]

Dotan Cohen wrote:

My Internet access has been getting slower and slower and my ISP is a joke:

$ ping google.com
PING google.com (64.233.167.99) 56(84) bytes of data.
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=1 ttl=243
time=180 ms


Hmm. It translates to the same IP address for me, but I'm running
about 70ms per ping (only ran a few, gotta be polite)

Mike
--
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Oppose globalization and One World Governments like the UN.
This message made from 100% recycled bits.
You have found the bank of Larn.
I speak only for myself, and I am unanimous in that!


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Way OT: OpenDNS

[Dave Patterson]

On Wed, Sep 10, 2008 at 04:26:07AM +0300, Dotan Cohen wrote:
> My Internet access has been getting slower and slower and my ISP is a joke:
> 
> $ ping google.com
> PING google.com (64.233.167.99) 56(84) bytes of data.
> 64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=1 ttl=243
> time=180 ms
> 64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=2 ttl=243
> time=185 ms
> 64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=3 ttl=243
> time=191 ms
> 64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=4 ttl=243
> time=182 ms
> 64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=5 ttl=243
> time=189 ms
> 64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=6 ttl=243
> time=189 ms
> 
> See also this mtr output: http://pastebin.com/m36bd850f
> 
> Are there any known problems / gotchas with OpenDNS? I do know that
> they redirect google queries through their own servers and return ads
> in place of unregistered domains, but those 'features' can be turned
> off. Anything else that I should be aware of?
> 
> Thanks in advance.
> 
Erm, your connection's a LOT quicker than mine.

Regards,
Dave


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Way OT: OpenDNS

[Andrei Popescu]

On Wed,10.Sep.08, 04:26:07, Dotan Cohen wrote:
> My Internet access has been getting slower and slower and my ISP is a joke:
> 
> $ ping google.com
> PING google.com (64.233.167.99) 56(84) bytes of data.
> 64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=1 ttl=243
> time=180 ms
 
What seems to be the problem here?

> Are there any known problems / gotchas with OpenDNS? I do know that
> they redirect google queries through their own servers and return ads
> in place of unregistered domains, but those 'features' can be turned
> off. Anything else that I should be aware of?
 
How do you do that?

> http://what-is-what.com
> http://gibberish.co.il
> א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת

I've changed my terminal to rxvt-unicode and now I can see all 
characters except the second from the end which is show as an upright 
rectangle. xfce4-terminal is showing them all correctly, but bigger. I'm 
using the same default font for both (Terminus).

> ä-ö-ü-ß-Ä-Ö-Ü

Here I see the German "Umlaute" and the "scharffes S".

Regards,
Andrei
-- 
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)


signature.asc
Description: Digital signature

Re: Way OT: OpenDNS

[Ron Johnson]

On 09/09/08 20:47, Andrei Popescu wrote:

On Wed,10.Sep.08, 04:26:07, Dotan Cohen wrote:

My Internet access has been getting slower and slower and my ISP is a joke:

$ ping google.com
PING google.com (64.233.167.99) 56(84) bytes of data.
64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=1 ttl=243
time=180 ms
 
What seems to be the problem here?


It's 1/3 slower than my 12Mbps cable modem connection.


$ mtr -c30 --report -n www.google.com
HOST: haggis   Loss%   Snt   Last   Avg  Best  Wrst StDev
  1. 192.168.1.251  0.0%300.4   0.5   0.4   0.6   0.0
  2. 10.128.32.10.0%306.4   6.3   5.1   7.7   0.8
  3. 68.11.13.250.0%306.4   6.9   5.4  10.3   1.1
  4. 68.11.14.410.0%306.5   6.9   5.4  11.8   1.6
  5. 68.1.1.223 0.0%30   39.4  34.0  32.7  39.4   1.2
  6. 216.239.48.110 0.0%30   35.2  36.3  33.9  71.3   6.9
  7. 64.233.175.169 0.0%30   35.8  36.3  34.2  44.2   2.5
  8. 216.239.49.145 0.0%30   40.3  38.4  36.6  40.6   1.1
  9. 64.233.169.99  0.0%30   36.3  36.4  34.8  40.3   1.1


--
Ron Johnson, Jr.
Jefferson LA  USA

"Do not bite at the bait of pleasure till you know there is no
hook beneath it."  -- Thomas Jefferson


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Way OT: OpenDNS

[Dotan Cohen]

2008/9/10 Andrei Popescu <[EMAIL PROTECTED]>:
> On Wed,10.Sep.08, 04:26:07, Dotan Cohen wrote:
>> My Internet access has been getting slower and slower and my ISP is a joke:
>>
>> $ ping google.com
>> PING google.com (64.233.167.99) 56(84) bytes of data.
>> 64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=1 ttl=243
>> time=180 ms
>
> What seems to be the problem here?
>

180ms? At my university I can get it down to 17ms. That's an order of
magnitude difference. Also, browsing from my ISP is _slow_ even though
the download speedometers show that I am doing the 180 kb/sec that I
pay for. Large files do download as they should, but connecting takes
a very, very long time. Just typing in google.com and waiting for it
to load can take upwards of 15 seconds.

>> Are there any known problems / gotchas with OpenDNS? I do know that
>> they redirect google queries through their own servers and return ads
>> in place of unregistered domains, but those 'features' can be turned
>> off. Anything else that I should be aware of?
>
> How do you do that?
>

You can sign up for an account, you are identified by your IP. There
are tools for people with nonstatic IP addresses.

>> http://what-is-what.com
>> http://gibberish.co.il
>> א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת
>
> I've changed my terminal to rxvt-unicode and now I can see all
> characters except the second from the end which is show as an upright
> rectangle. xfce4-terminal is showing them all correctly, but bigger. I'm
> using the same default font for both (Terminus).
>
>> ä-ö-ü-ß-Ä-Ö-Ü
>
> Here I see the German "Umlaute" and the "scharffes S".
>

Yes, that is correct. In fact, if you can configure your terminal to
get gibberish out of those two lines, I would appreciate if you send
to me the gibberish in a private email. I use it to help translate
gibberish back into legible Hebrew and German.

-- 
Dotan Cohen

http://what-is-what.com
http://gibberish.co.il
א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת

ä-ö-ü-ß-Ä-Ö-Ü

Re: grammar tool in linux ... perhaps in emacs

[Mark Grieveson]

On Tue,  9 Sep 2008 16:20:43 + (UTC)
[EMAIL PROTECTED] wrote:

> Hello,
> 
> I hope I do not start a flame war here. I was wondering what choices
> do we have to check English grammar in Linux.

The only one I know of is diction.  It's available as a package in the
repositories.  The site is at
http://www.gnu.org/software/diction/diction.html

Mark


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Way OT: OpenDNS

[Dave Patterson]

On Tue, Sep 09, 2008 at 09:12:15PM -0500, Ron Johnson wrote:
> On 09/09/08 20:47, Andrei Popescu wrote:
>> On Wed,10.Sep.08, 04:26:07, Dotan Cohen wrote:
>>> My Internet access has been getting slower and slower and my ISP is a joke:
>>>
>>> $ ping google.com
>>> PING google.com (64.233.167.99) 56(84) bytes of data.
>>> 64 bytes from py-in-f99.google.com (64.233.167.99): icmp_seq=1 ttl=243
>>> time=180 ms
>>  What seems to be the problem here?
>
> It's 1/3 slower than my 12Mbps cable modem connection.
>
Heck, I envy him:
[EMAIL PROTECTED]:~$ mtr -c30 --report -n www.google.com
HOST: davescrunch Loss%   Snt   Last   Avg  Best  Wrst StDev
  1. 192.168.1.1   0.0%301.0   0.9   0.8   1.3   0.1
  2. 124.122.205.1 0.0%30   20.0  19.5  18.7  20.3   0.4
  3. 210.86.189.53 0.0%30   19.4  19.4  18.9  20.0   0.3
  4. 10.169.53.1   0.0%30   21.9  22.5  21.2  27.8   1.2
  5. 61.90.132.86  0.0%30   21.4  23.6  20.6  82.3  11.1
  6. 61.90.133.237 0.0%30   21.4  24.1  20.2 106.2  15.5
  7. 61.90.254.89  0.0%30   20.9  20.6  19.8  21.3   0.4
  8. 203.144.144.270.0%30   20.4  20.4  19.6  21.4   0.5
  9. 61.91.210.1   0.0%30   21.0  26.5  20.3 113.7  20.4
 10. 61.19.10.25   0.0%30   20.3  21.0  20.0  21.8   0.4
 11. 202.47.253.1460.0%30   20.9  21.1  20.3  21.9   0.4
 12. 61.19.9.2 0.0%30   35.5  40.3  34.6  75.0  10.7
 13. 72.14.196.217 0.0%30  135.9 136.3 135.3 137.2   0.4
 14. 209.85.254.1660.0%30  136.0 139.8 135.3 213.3  14.6
 15. 209.85.241.2210.0%30  135.9 137.9 134.7 208.1  13.3
 16. 209.85.250.1010.0%30  136.4 137.2 135.6 151.3   3.2
 17. 209.85.252.65 3.3%30  146.3 141.5 136.3 149.4   4.4
 18. 209.85.175.99 3.3%30  136.8 136.7 136.1 137.5   0.4

Cheers,
Dave


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: grammar tool in linux ... perhaps in emacs

[John Hasler]

->HS writes:
> I was wondering what choices do we have to check English grammar in
> Linux.

IIRC there used to be such a program in BSD.

> ...that such a tool aids in catching silly mistakes and helps
> significantly in proof reading.

Copy editing, not proof reading.  The latter involves comparing a proof
copy to a manuscript and noting all deviations.  It's pretty much obsolete
for obvious reasons.
-- 
John Hasler


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Way OT: OpenDNS

[Chris Burkhardt]

> Are there any known problems / gotchas with OpenDNS? I do know that
> they redirect google queries through their own servers and return ads
> in place of unregistered domains, but those 'features' can be turned
> off. Anything else that I should be aware of?

I don't know of any problems with OpenDNS (besides what you mentioned). I use it
with all the features turned off. But I run a caching nameserver on my home
server (tinydns) which the rest of the computers on the LAN use, so lookups only
have to go out to OpenDNS when something isn't already cached.

But a better DNS server will only speed up your initial name resolution, of
course. It won't help with your general network sluggishness.

- Chris


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: NVidia GeForce 6150 Go

[consultores1]

On Tue, 2008-09-09 at 10:42 +0200, Florian Kulzer wrote:
> On Mon, Sep 08, 2008 at 18:38:57 -0700, consultores1 wrote:
> > hello
> > 
> > I am using 1 portatil compaq presario 3000 amd64x2, it has 1 nvidia
> > geforce 6150 go video card; with lenny, i want to connect my laptop to
> > my tv, but i can not do that because in my understanding i have to
> > install the free nvidia module or the private module!
> > 
> > The thing is, that the free module doesn't appear during the updates,
> > and my preference is using only free software.
> 
> The package with the free driver is called xserver-xorg-video-nv; it is
> available in Lenny/main in version 1:2.1.10-1. You should see it listed
> if you run:
> 
> apt-cache policy xserver-xorg-video-nv
> 
> If this package is not available to you then something is wrong with
> your mirror.
> 
> If you have the package installed you can run
> 
> grep /drivers/ /var/log/Xorg.0.log
> 
> after you start Xorg to find out which driver was loaded. For the nv
> driver you should see this output:
> 
> (II) Loading /usr/lib/xorg/modules/drivers//nv_drv.so

Yes, it is exact; it is installed and loaded! Now, how can i activate
the 2nd screen (tv)? I have a s-video cable which i usually used with
XP. I use Totem.

> 
> > Could someone please, tell me how could i connect my laptop to tv
> > appropiatelly?
> 
> This should work via xrandr now; see the Debian wiki for more info:
> 
> http://wiki.debian.org/XStrikeForce/HowToRandR12
> 
> -- 
> Regards,| http://users.icfo.es/Florian.Kulzer
>   Florian   |
> 
> 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

script wants to know current power saving mode

[jidanni]

If I don't touch my computer for 10 minutes, the screen goes blank.
After some more minutes, it goes into even more slumber.

OK, how can scripts detect what state it is in?
test `cat /proc/acpi/what or /sys/what` = "fully awake" && ...?


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: grammar tool in linux ... perhaps in emacs

[David Baron]

On Tuesday 09 September 2008 22:47:14 debian-user-digest-
[EMAIL PROTECTED] wrote:
> well
> i know just queequeg, which works with the console...
> i once made a small tutorial for making it work for a professor, so maybe
> you can do something with it!
>
> http://www.gallois.com.br/blog/2008/07/30/grammar-checker-on-linux-with-que
>equeg/

The link on this tutorial is not current. Get the whole thing from:
queequeg.sourceforge.net/index-e.htm


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: apt-proxy: can't use more than 1 backend

[Manoj Srivastava]

On Fri, 25 Jul 2008 15:03:39 -0400, Celejar  <[EMAIL PROTECTED]> said: 

> On Fri, 25 Jul 2008 20:14:54 +0200
> Gilles Mocellin <[EMAIL PROTECTED]> wrote:

>> Le Friday 25 July 2008 18:34:17 Peter Daum, vous avez écrit :
>> > I am trying to get apt-proxy to work on a test machine running
>> > lenny.
>> [...]
>> 
>> > Generally, apt-proxy doesn't really look overly trustworthy (on
>> > every start there is a python warning about telnet being
>> > deprecated), but there doesn't seem to be any better alternative (I
>> > don't want to run a full-blown apache server).
>> >
>> > Peter
>> 
>> I switched last year to approx, far more stable for me.

> I, too.  I used to have trouble with apt-proxy; I now use approx and
> I'm happy with it.

apt-proxy used to have an option of using more than one backend
 for a repository; so my debian alias had more than one backend, since
 ftp.us.debian.org is sometimes flakey for me. I don't see that option
 for approx; which is not a big deal, though.

Also, I guess I'll have to bind mount the old apt-proxt
 repository over /var/cache/approx.

manoj
-- 
DISCLAIMER: Use of this advanced computing technology does not imply an
endorsementof Western industrial civilization.
Manoj Srivastava <[EMAIL PROTECTED]>   
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Way OT: OpenDNS

[nate]

Dotan Cohen wrote:

> Are there any known problems / gotchas with OpenDNS? I do know that
> they redirect google queries through their own servers and return ads
> in place of unregistered domains, but those 'features' can be turned
> off. Anything else that I should be aware of?

Of course I'm sure you know that DNS has nothing to do with
ping response times or network throughput.

Maybe it's time to get a new ISP. I have 1Mbps/1Mbps ADSL
and it's about 38ms to google, I also have 16Mbps/2Mbps cable
modem and it's about 34ms to google.

If you don't have any other ISP options then perhaps you should
consider moving to a location where there are more options if
internet performance is that important to you. Or perhaps other
options such as T1 lines etc are available at higher prices.

I find it funny that so many people out there seem to expect
to be able to get 10Mbit+ speeds for $20/mo. Then they get
upset when they find out the system is 100x oversubscribed
and ends up being slow as hell. You get what you pay for.
Co-workers at my company are all pissed off because one of
the branch offices is off line because the $40/mo DSL line
has been down for days and the provider doesn't have a
ETA for recovery. You get what you pay for.

At the same time the company spends about $35k/mo on
roughly 800Mbit of internet bandwidth which comes out
to around $43/Mbit(average across 4 ISPs). Which to me
is dirt cheap, I'm used to buying bandwidth in lower
volumes, and at least from Tier 1 ISPs it's easily $95/Mbit,
and easily double that in Europe/Asia in many cases.

I read an article recently estimating costs for Verizon FiOS
to be roughly $4,000 per subscriber just to get them wired
up. Doesn't even take into account ongoing bandwidth costs
associated with those accounts.

If you suspect OpenDNS as a problem you can always setup your
own name server(s) for caching requests. I've never used
OpenDNS myself though some systems at my company use it(not
for much longer). I've run my own name servers for about 12
years now(my authoritative name servers are on my DSL, moving
to co-location this weekend).

nate


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Orage and dbus in debian ?

[Javier Barroso]

Hi,

I'm trying adding .ics files from orage command line.

On my debian sid box:

$ orage -a ~/tmp/evento_orage

** (orage:6432): WARNING **: Can not do add foreign file without dbus.
failed file=/home/javi/tmp/evento_orage

$ ps aux | grep dbus
103   3143  0.0  0.1   2752  1080 ?Ss   07:52   0:00
/usr/bin/dbus-daemon --system
javi  4570  0.0  0.0   3108   696 ?S08:04   0:00
/usr/bin/dbus-launch --exit-with-session startxfce4
javi  4571  0.0  0.0   2624   968 ?Ss   08:04   0:00
/usr/bin/dbus-daemon --fork --print-pid 6 --print-address 9 --session
javi  4651  0.0  0.6  34252  6520 ?SNsl 08:05   0:00
pinot-dbus-daemon
javi  6481  0.0  0.0   3652   812 pts/2S+   08:29   0:00 grep dbus

$aptitude search ~i~ndbus
i   dbus   - simple
interprocess messaging system
i   dbus-x11   - simple
interprocess messaging system (X11 deps)
i   libdbus-1-3- simple
interprocess messaging system
i   libdbus-1-dev  - simple
interprocess messaging system (development headers)
i A libdbus-glib-1-2   - simple
interprocess messaging system (GLib-based shared library)
i   libdbus-glib-1-dev - simple
interprocess messaging system (GLib interface)
i A libnet-dbus-perl   - Extension for
the DBus bindings
i A libqt4-dbus- Qt 4 D-Bus
module
i   python-dbus- simple
interprocess messaging system (Python interface)

Which package should I install or configure to do the trick ?

Thank you

Debian Rocks!

Ad Submission to 300+ Ad Groups Everyday for Life

[[EMAIL PROTECTED]]

Posting to Yahoo, Google, And MSN Groups yields great results and fresh leads 
and sales. But it can be tedious and time consuming. This is where my service 
comes in. For a onetime fee, your ad/message will be sent out CTED]> wrote:
>> On Sun, Sep 14, 2008 at 8:10 AM, Alex Samad <[EMAIL PROTECTED]> wrote:
>>> On Sat, Sep 13, 2008 at 11:39:47PM -0400, Michael Habashy wrote:
 the current state of my system -- it is up and running but i do not
 belive for long:

 [EMAIL PROTECTED]:~# cat /proc/mdstat
 Personalities : [raid1] [raid6] [raid5] [raid4]
 md1 : active raid5 sda5[3](F) sdb5[4](F) sdd5[2] sdc5[1]
   781417344 blocks level 5, 64k chunk, algorithm 2 [3/2] [_UU]

 md2 : active raid1 sda6[0]
   9767424 blocks [2/1] [U_]

 md0 : active raid1 sda1[0]
   289024 blocks [2/1] [U_]
>>>
>>>
>>> looks like you lost some of your mirror sets, what did you mirror sda6
>>> with ?  just add it back to the raid set (find out why it dropped out),
>>> mdadm -A /dev/md2 /dev/
>>>
>>> Plus sdb seems to have failed in the raid5.
>>>
>>> My guess is sdb has gone faulty, try running some smart tests against
>>> it. You will want to be carefull, if you loose another disk you will
>>> loose your raid5 (and if its sda your raid1's.
>>>
>>> Find out whats wrong with sdb and fix it, either replace the drive,
>>> check the cables or power or 
>>>
>>> It should survive a reboot, presuming sda is hd0
>>>



 It looks like i got some kind of hardware/software issue --this is a
 newly built raid5 system.

 Device md1 is my main / root ssystem.

 How can i fix this ?? I do not want to reboot becasue i am afraid that
 it will not come up...

 I need magic or lots of prays...please try to provide both...

 thanks
 mjh


 --
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


>>>
>>> --
>>> "I don't want to win? If that were the case, why the heck am I on the bus 
>>> sixteen hours a day, shaking thousands of hands, giving hundreds of 
>>> speeches, getting pillared in the press and cartoons and still staying on 
>>> message to win?"
>>>
>>>- George W. Bush
>>> 02/28/2000
>>> as quoted in Newsweek
>>>
>>> -BEGIN PGP SIGNATURE-
>>> Version: GnuPG v1.4.9 (GNU/Linux)
>>>
>>> iEYEARECAAYFAkjM/0oACgkQkZz88chpJ2PZ3ACgpbS0ZRGk5AQTMsUAZKS//1Q/
>>> oJoAoPM+f5DlADAbmMtrKxQhzhn43bhQ
>>> =Jj15
>>> -END PGP SIGNATURE-
>>>
>>>
>> Thanks for the quick response.
>>
>> I think sda and sdb are my 500gig harddrives that have swap and /boot
>> on them mirrored.
>> The raid5 which is / root is going against 4 drives.  The 2 (500 gig)
>> drives and 2 400 gig sata drives.
>>
>> Can you tell me what specific utilities to run against these drives ??
>> I have  googled alot for recovery of mdadm raid drives...i could not
>> find anything..except telling me how to remove and add drives.
>>
>> do not know how to use smartmonitor utilies..do you know of a good faq
>> that i can look at??
>>
>> thanks
>> mjh
>>
>

Just for your information, the current state of my drives are :

[EMAIL PROTECTED]:~# cat /proc/mdstat
Personalities : [raid1] [raid6] [raid5] [raid4]
md1 : active raid5 sdc5[1] sdd5[2]
  781417344 blocks level 5, 64k chunk, algorithm 2 [3/2] [_UU]

md2 : active raid1 sda6[0]
  9767424 blocks [2/1] [U_]

md0 : active raid1 sda1[0]
  289024 blocks [2/1] [U_]

unused devices: 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]