Re: is Overnet safe?

2004-05-12 Thread Shlomo Solomon
On Wednesday 12 May 2004 00:04, Noam L. wrote:
> Overnet's connection is based on P2P, which requires one of the clients to
> accept an incoming connection,

<-- snip -->

> Thats, ofcourse, not based on any facts relevant to overnet - thats how any
> P2P network works (ed2k, kazaa, etc.)
>

But that doesn't answer either of my questions:
1 - why does it work at all if I didn't open a port in my firewall?
2 - does running Overnet pose a danger (with or without opening a firewall 
port)?

-- 
Shlomo Solomon
http://come.to/shlomo.solomon
Sent by KMail 1.6.1 (KDE 3.2) on LINUX Mandrake 10.0


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



debian aptitude(1) "un-update"

2004-05-12 Thread linux-il
Hello,

I've marked too many packages to update (with the "U" key of aptitude) 
and would
like to undo this. But I can't find a way except for holding them all.

Is there a way to make aptitude forget a package marked for update and 
get it
backed to a simple "installed" state?

Thanks,

--Amos



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Telux: Lecture about Web Hosting (part 1) on 16 May

2004-05-12 Thread Shlomi Fish

On Sunday, 16 May 2004, there would be a presentation in the Tel Aviv Linux 
Club (Telux). The presentation would be Mike Almogy's "Web Hosting" (part 1).

The time is 18:30 at the Schreiber building, room 007 of Tel Aviv University.

Attendance is free.

Regards,

Shlomi Fish
-- 

-
Shlomi Fish  [EMAIL PROTECTED]
Homepage:http://shlomif.il.eu.org/

Quidquid latine dictum sit, altum viditur.
[Whatever is said in Latin sounds profound.]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: debian aptitude(1) "un-update"

2004-05-12 Thread linux-il
Ira Abramov wrote:

Quoting [EMAIL PROTECTED], from the post of Wed, 12 May:
 

Hello,

I've marked too many packages to update (with the "U" key of aptitude) 
and would
like to undo this. But I can't find a way except for holding them all.

Is there a way to make aptitude forget a package marked for update and 
get it
backed to a simple "installed" state?
   

hitting "=" on each package individually. I have no idea how to do it
for more thann one at a time.
 

I know about the "hold" option but that's not what I want. I want the 
package to be back
in its "i" state - which would allow it to be upgraded once the problems 
are resolved.
(btw - I can stand on one of the "group lines" and press "=" to hold an 
entire group of packages).

BTW - Has any other debian unstable user have torubles with the recent 
perl upgrade?
As far as I looked at it there are conflicts between perl-base and 
libperl5.8/perl. At first I
suspected that there are missing upgrades of other packages but this 
upgrade is already 9
days old. As it is now - if I'll go on with the upgrade it'll remove 
half the packages on my
system because they have unmet dependencies.

I use Hamakor's mirror, in case this makes a difference.

Thanks,

--Amos



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: debian aptitude(1) "un-update"

2004-05-12 Thread Ira Abramov
Quoting [EMAIL PROTECTED], from the post of Wed, 12 May:
> Hello,
> 
> I've marked too many packages to update (with the "U" key of aptitude) 
> and would
> like to undo this. But I can't find a way except for holding them all.
> 
> Is there a way to make aptitude forget a package marked for update and 
> get it
> backed to a simple "installed" state?

hitting "=" on each package individually. I have no idea how to do it
for more thann one at a time.

-- 
Now with a special twist cap
Ira Abramov
http://ira.abramov.org/email/

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



IGLU maintanance on Friday

2004-05-12 Thread Shachar Shemesh
Dear Linux-IL subscribers,

IGLU will be down for upgrade on Friday. This should not affect this 
list, as it is run from another machine. If, for whatever reason, you 
cannot send email to [EMAIL PROTECTED], please try sending to 
[EMAIL PROTECTED] or [EMAIL PROTECTED]

We're hoping the downtime will not be significant, but please bear with 
us during the time.

The mirrors hosted on iglu will, of course, not be available during the 
down time.

Shachar

--
Shachar Shemesh
Lingnu Open Source Consulting
http://www.lingnu.com/
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


RE: is Overnet safe?

2004-05-12 Thread Tzahi Fadida
essentially it opens a port to a 3rd party client, lets call it a supernode
and converse with other clients from there.
i.e. no need to open a port. now, there's a hitch. by not opening a port
then it is more difficult to converse with you and thus the connections will
be slower
and maybe other clients will decide not to converse with you at all because
of that.
you must understand that in order to "open a port" on your machine, the
other
party will send a message to the supernode, you will then receive the
message
because you are already connected to it. Then, your client will connect
to the other client (the other client mustn't be behind a firewall). 
If the other client is also behind the firewall then its upto the supernode
or a delegated party to decide if to reroute your communications between you
at
 a considerable cost for himself of course, and thus will probably not.

Of course it all depends on the network and protocol you use.

Regards,
tzahi.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Shlomo Solomon
Sent: Wednesday, May 12, 2004 4:22 PM
To: IGLU IGLU
Subject: Re: is Overnet safe?


On Wednesday 12 May 2004 00:04, Noam L. wrote:
> Overnet's connection is based on P2P, which requires one of the 
> clients to accept an incoming connection,

<-- snip -->

> Thats, ofcourse, not based on any facts relevant to overnet - thats 
> how any P2P network works (ed2k, kazaa, etc.)
>

But that doesn't answer either of my questions:
1 - why does it work at all if I didn't open a port in my firewall? 2 - does
running Overnet pose a danger (with or without opening a firewall 
port)?

-- 
Shlomo Solomon
http://come.to/shlomo.solomon
Sent by KMail 1.6.1 (KDE 3.2) on LINUX Mandrake 10.0


=
To unsubscribe, send mail to [EMAIL PROTECTED] with the word
"unsubscribe" in the message body, e.g., run the command echo unsubscribe |
mail [EMAIL PROTECTED]





To unsubscribe, send 
mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: is Overnet safe?

2004-05-12 Thread linux-il
Shlomo Solomon wrote:

On Wednesday 12 May 2004 00:04, Noam L. wrote:
 

Overnet's connection is based on P2P, which requires one of the clients to
accept an incoming connection,
   

<-- snip -->

 

Thats, ofcourse, not based on any facts relevant to overnet - thats how any
P2P network works (ed2k, kazaa, etc.)
   

But that doesn't answer either of my questions:
1 - why does it work at all if I didn't open a port in my firewall?
2 - does running Overnet pose a danger (with or without opening a firewall 
port)?

 

I can't find overnet's protocol spec right now, but I've seen that other 
popular protocols use
"public directory servers" which can be accessed to search files and 
sometimes download them
(if the host on the other side is on a "real" IP). i.e. it could be that 
many of the files you found
aren't really accesible to you because of your situation. It's a bit 
like the dead-tree telephone
directories which used to be in public telephone booths before the 80's 
- the directory itself is
public, but you still need a token to be allowed to make a call.

As for safety - it's like any other network-based program - if the 
program can accept packets from
outside and there is a bug in it about processing the data then the risk 
is larger than the absolute zero.
The main difference weather you open a port or not is that without 
opening a port it should be more
difficult to "inject" packets to your program from just any computer on 
the net, but instead only
computers with which you established connection pose a real risk (but we 
are not talking in absolute terms,
at least theoretically any computer can send "the right packet" if it 
knows what to send. See the recently
found TCP security risk widely publicised in the press).

Hope this answers your question. If you'll find the protocol spec then 
maybe I'll be able to give
you more specifics about it (if I'll have time).

--Amos



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: is Overnet safe?

2004-05-12 Thread Micha Feigin
On Wed, May 12, 2004 at 05:22:24PM +0300, Shlomo Solomon wrote:
> On Wednesday 12 May 2004 00:04, Noam L. wrote:
> > Overnet's connection is based on P2P, which requires one of the clients to
> > accept an incoming connection,
> 
> <-- snip -->
> 
> > Thats, ofcourse, not based on any facts relevant to overnet - thats how any
> > P2P network works (ed2k, kazaa, etc.)
> >
> 
> But that doesn't answer either of my questions:
> 1 - why does it work at all if I didn't open a port in my firewall?

I don't remember the exact specifics, but at least some of these
protocols have a system where if the uploading user is behind a firewall
and the downloading one isn't (or the port is open or whatever) the
message can be sent to the file owner through a third party to perform
the connection instead of the downloader which allows bypassing firewalls.

> 2 - does running Overnet pose a danger (with or without opening a firewall 
> port)?
> 
> -- 
> Shlomo Solomon
> http://come.to/shlomo.solomon
> Sent by KMail 1.6.1 (KDE 3.2) on LINUX Mandrake 10.0
> 
> 
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
> 
>  
>  +++
>  This Mail Was Scanned By Mail-seCure System
>  at the Tel-Aviv University CC.
> 

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



changing email

2004-05-12 Thread Aaron
Hi,
I just switched to actcom and need to update my information for the
group.

What is the address I use to do this??

Thanks
Aaron

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: debian aptitude(1) "un-update"

2004-05-12 Thread Shaul Karl
On Wed, May 12, 2004 at 11:31:41AM +0300, [EMAIL PROTECTED] wrote:
> Ira Abramov wrote:
> 
> >Quoting [EMAIL PROTECTED], from the post of Wed, 12 May:
> > 
> >
> >>Hello,
> >>
> >>I've marked too many packages to update (with the "U" key of aptitude) 
> >>and would
> >>like to undo this. But I can't find a way except for holding them all.
> >>
> >>Is there a way to make aptitude forget a package marked for update and 
> >>get it
> >>backed to a simple "installed" state?
> >>   


  f (for forget)? I know that you can make it Forget that some packages
are appropriate for the new section. Perhaps it works in other aspects
too? 

-- 
"If you have an apple and I have  an apple and we  exchange apples then
you and I will still each have  one apple. But  if you have an idea and I
have an idea and we exchange these ideas, then each of us will have two
ideas." -- George Bernard Shaw (sent by  shaulk @ actcom . net . il)

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: changing email

2004-05-12 Thread Shachar Shemesh
Aaron wrote:

Hi,
I just switched to actcom and need to update my information for the
group.
What is the address I use to do this??

Thanks
Aaron
 

Unsubscribe the old address, subscribe the new one. Obviously - do the 
later first.

--
Shachar Shemesh
Lingnu Open Source Consulting
http://www.lingnu.com/
=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: is Overnet safe?

2004-05-12 Thread Vasiliev Michael
On Wednesday 12 May 2004 17:22, Shlomo Solomon wrote:
SS> But that doesn't answer either of my questions:
SS> 1 - why does it work at all if I didn't open a port in my firewall?

You only need an open port for incoming connections(i.e. sharing files).
So you can still run it with some limited functionality  It means that 
you are getting a so-called low-id. Thus you can only connect to 
non-firewalled clients. Of course, the downloads would not be as kickass, as 
you are limiting your sources list to something like 25% of the whole 
network. Ok, I see that I starting to just rephrase the original FAQ, so why 
don't you read it yourself? :))
http://www.overnet.com/documentation/faq.html
http://www.overnet.com/documentation/lowid.html

SS> 2 - does running Overnet pose a danger (with or without opening a
 firewall SS> port)?

Well, look at it this way...overnet was still closed source, last time I 
checked(which is just now). Am not about to doubt the skill of the 
developers, but...my pet paranoia tells me that every server or client you 
are running poses a threat to security. It really does not matter if it has 
an open port or not as long as it is getting a data stream originating holy 
Random knows where. So locking it down into a chroot jail seems like a good 
idea, reducing the risk if done properly. In fact I admit that I done that 
when I was running overnet. It is statically compiled so locking it down is a 
matter of reading `man chroot`.

-- 
Sincerely Yours,
Vasiliev Michael

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]