Re: [techtalk] bizarre....

1999-12-13 Thread Laurel Fan

Excerpts from linuxchix: 13-Dec-99 Re: [techtalk] bizarre by "Jenn
V."@simegen.com 
> Except that it looks like the problem occured while she was
> offline.

Well, it's possible that it happened when she was online, and she only
noticed next time she dialed up...

Even so, the logs disappearing really looks like a cracker attack. 
rming the logs is a simple and inelegant but effective way of making it
much harder to track down the source.

Only other thing I can think of that might cause this strange behavior
is the disk filling up, in which case logrotate might be trying to
rotate the logs, but ending up losing them because it doesnt have space
to rotate in.

In general, if you're using a stable os, and it goes nuts, its because
of external forces, such as you doing something bad as root, a breakin,
or hardware problems. 


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread Cynthia Dale

Well, if the person who got it also killed syslogd (which of course they
would), she wouldn't've noticed until it dialed again.
C

Cynthia J. Dale
Technical Engineer/FAQ maintainer
Red Hat, Inc.

fnord.


On Mon, 13 Dec 1999, Jenn V. wrote:

> Date: Mon, 13 Dec 1999 17:42:12 +1100
> From: Jenn V. <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: Re: [techtalk] bizarre
> 
> 
> 
> [EMAIL PROTECTED] wrote:
> > 
> > Sounds like SOMEONE got into your system.
> 
> > > Okay, so today I was using my ppp connection for several hours, then we
> > > went to watch Sunday night Fox and came back.  I have the command to dial
> > > aliased to include tail -f /var/log/messages.  I told it to dial, and it
> > > said "tail: no such file /var/log/messages." 
> 
> Except that it looks like the problem occured while she was
> offline.
> 
> Oh, I admit that it's possible that someone set things up while
> she was online to crash when she next dialled, but that's really
> strange behaviour to find as the result of a hack.
> 
> 
> Jenn V.
> -- 
>   "We're repairing the coolant loop of a nuclear fusion reactor. 
>This is women's work!"
>   Helix, Freefall. http://www.purrsia.com/freefall/
> 
> Jenn Vesperman[EMAIL PROTECTED] http://www.simegen.com/~jenn
> 
> 
> [EMAIL PROTECTED]   http://www.linuxchix.org
> 



[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread Cynthia Dale

Hi!
I'm kind of new to the list, and have been lurking, but it's time to get
out and say hi!  Security is one of the most intriguing aspects of the
internet to me, but I like to keep it to the hobby level so I can still
enjoy it (read that: I haven't learned much about encryption. heh.)
Anyhow, I  suggest the following:

1. Unplug your modem or ethernet card or both

2. If your are running Red Hat Linux, run rpm -Va >rpmlist and check that
out for a few things:
MD5 sums
missing files
added files
version numbers of files that are on www.redhat.com/errata for your
release.

If you have Red Hat Linux, and you've updated everything from the errata
and you still got hacked, you got hit by something that's not known about
by the general public.If that's the case, I would suspect the following
things:

service daemons that run as root
setuid root files if you have users on your server
a silly teenager who might remove your log files from an open rxvt while 
you're not looking just to freak you out (it's happened to me! (:  )

If you're not running Red Hat, it will be a little more difficult.  Check
for suid root files that may have been installed.  Run netstat to see what
kind of connections are outbound.  Check /etc/inetd.conf to see what
services are running, and find out what version they are and check bugtraq
to make sure they're not listed.  Do ps aux |grep root to see what's
running.

It's good to know what got ya so you can plug the hole.  Take a look at
the Firewall HOWTO: http://www.linuxdoc.org/HOWTO/Firewall-HOWTO.html for
preventative measures. Try your best to find out how it happened, but in
any case, I suggest you 
3. re-install.  Even with RPM and other tools, it's not hard to hide a
daemon or two, or maybe something lurking in your crontab, or something in
a config file that will be accessed by a service running as root, or or
or...  (:

Always paranoid,
Cindy

Cynthia J. Dale
Technical Engineer/FAQ maintainer
Red Hat, Inc.

fnord.


On Mon, 13 Apr 1998 [EMAIL PROTECTED] wrote:

> Date: Mon, 13 Apr 1998 01:14:14 -0400
> From: [EMAIL PROTECTED]
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: Re: [techtalk] bizarre
> 
> Sounds like SOMEONE got into your system. FIRST check your 
> daemons, make sure something isn't running that SHOULDN'T be. 
> THEN check to make sure that what IS running is the proper file 
> (replacement of a valid program with a trojan). THEN check your 
> outbound mail for something that shouldn't be going out (not sent 
> by you or your users (/var/spool/mail from memory, varies from OS 
> to OS though).
> FIRST, change your root password AFTER disconnecting from the 
> net, then make sure nothing goes out after that timestamp (don't 
> need to send a hacker your new password).
> Good luck,
> Steve
> > Okay, so today I was using my ppp connection for several hours, then we
> > went to watch Sunday night Fox and came back.  I have the command to dial
> > aliased to include tail -f /var/log/messages.  I told it to dial, and it
> > said "tail: no such file /var/log/messages."  I said "Uh" and
> > tried again, a few times.  I got the same result.  I cd'd to /var/log, and
> > tehre were a total of 3 files there.  And I believe they were all
> > directories.  It got too weird, so I rebooted.  I did it twice, because
> > sendmail was taking ages to start and giving bizarre errors.  So I told it
> > to stop running sendmail and httpd on startup, since I don't even use them
> > anyway.  After the reboot, /var/log/messages reappeared and was fine and
> > ppp worked fine.  So then the problem was that my tty (mingetty) was set
> > to 'dumb' instead of vt100.  I can't figure that one out.  I also
> > periodically get messages (write style) from syslogd in assorted garbage.
> > It is weird high ascii stuff, i think.  There is something about 'not able
> > to piece together parts of message.'  This all started sometime between 8
> > and 10 pm tonight.  I am running ip masquerading and ipchains over a ppp
> > dialup.  Talking to a group of friends who use linux wasn't helpful,
> > except in stopping sendmail and httpd on boot.
> > I'm getting close to going "gyagh" and hitting it.  Help?
> > 
> > Conni
> > 
> > -- 
> > So they linked their hands and danced 'round in circles and in rows.
> > -Loreena McKennitt
> > 
> > http://www.one-eyed-alien.net/~ccovingt
> > 
> > http://www.angelfire.com/anime/Galadriel
> > 
> > 
> > 
> > 
> > [EMAIL PROTECTED]   http://www.linuxchix.org
> > 
> > 
> 
> 
> __
> NetZero - Defenders of the Free World
> Get your FREE Internet Access and Email at
> http://www.netzero.net/download/index.html
> 
> 
> [EMAIL PROTECTED]   http://www.linuxchix.org
> 



[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread Subba Rao

On  0, Lighthouse Keeper in the Desert Sun <[EMAIL PROTECTED]> wrote:
> Okay, so today I was using my ppp connection for several hours, then we
> went to watch Sunday night Fox and came back.  I have the command to dial
> aliased to include tail -f /var/log/messages.  I told it to dial, and it
> said "tail: no such file /var/log/messages."  I said "Uh" and
> 

Looks like you have been hacked. Backup your important files and reinstall linux
and then tighten the system. Then restore your backed up files.

Subba Rao
[EMAIL PROTECTED]
http://pws.prserv.net/truemax/

 => Time is relative. Here is a new way to look at time. <=
http://www.smcinnovations.com


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] Multiple Languages on one box

1999-12-13 Thread Telsa Gwynne

On Sat, Dec 11, 1999 at 11:19:32AM -0600 or thereabouts, Stephan Zaniolo wrote:
>   I'm running Red Hat 6.0, kernel 2.2.12, with October GNOME and XFree86
> 3.3.4.  I would like to setup one user account that would be all French
...

This sounds interesting :) I don't think you need to do it on a 
separate machine. But you might have to recompile programs you
want to speak French to you to include their various language
support options. I don't know whether all programs come with
support for different languages turned on or not. 

I think one of the things you need to find out about is the 'locale'
property. As I understand it, changing your locale alters things like
the language and the character sets. (I should note I don't understand
it very well, of course: I just see regular "How do I turn on 
language?" questions on a couple of other mailing lists and locale
crops up all the time in that. :))

There are several entries in the man pages about locale (man -k locale).
I think you want to do 'man 7 locale', as just 'man locale' gives me
info about a Perl command called that. It's an environment variable,
I -think. 

Many GNU programs have at least some support for different languages.
Have a look in /usr/doc for directories which have a file called
ABOUT-NLS in them (a lot of the Gnome ones do, for example). Looking
at the little chart in that file, it mentions twenty-seven packages
and twenty-six of them have support for the French language. One of
them is bash, which is probably handy. That's dated December 1997,
so I would expect there's more now.

> to do this (or do I need to set it up on a separate machine :^( ?  Is there
> a HOW-TO or something available?  Is there any place I could find an image
> of the French keyboard mapping?

There is indeed a French-HOWTO. You might want to wait until you've learned
French to read it, however... :) Of course, you could always feed it to
Babelfish! It lives in /usr/doc/HOWTO, if you installed the HOWTOs. Or
it lives on your CD or at www.linuxdoc.org if you didn't. If you installed 
documentation in all the different languages, you'll also find a number 
of files kicking around with the suffix (urrr...) .fr (in the man pages 
directory, for example) and in the po (don't ask me why, but po is the 
name of the directory involved) directory in the sources of programs. po 
is where translations live. I have been told what it stands for, but
I forget :)

As for images of the keyboard mapping, I have completely forgotten where
the stuff that defines what letter comes up when you hit a key on the
keyboard comes, but you can get a picture of a French keyboard by
downloading, compiling, and installing 'xkeycaps' by Jamie Zawinski.
It's actually a graphical front-end to 'xmodmap', for altering your
keyboard, but part of what it does is to draw a big picture of whatever 
keyboard you ask for, with what's on the keys where. I don't think it
would be very useful if you're not using X, but it will give you an
idea: I count seven different French keyboard layouts in the current
list.

(It's worth getting anyway, because it's very cool :) I turned my
caps lock key into a 'spare' control key a while back with it, and
now my control key has started sticking, I'm very glad I did! The
caps lock key has now justified its presence on my keyboard: a backup 
control key in a much more sensible place...)

>   One additional item that may complicate this, my video card is not fully
> supported yet under XFree (It should be under 4.0), so I need to boot into
> runlevel 5.  (Changing to runlevel 3 from 5 tends to send the card into
> suspend mode and won't come out without a reboot. So changing XFree config
> file and restarting X every time is not an option.)

I don't think that any of this would require too much messing about
with X. But I've never tried it...

Bonne chance!

Telsa


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread Steve Kudlak



Subba Rao wrote:

> On  0, Lighthouse Keeper in the Desert Sun <[EMAIL PROTECTED]> wrote:
> > Okay, so today I was using my ppp connection for several hours, then we
> > went to watch Sunday night Fox and came back.  I have the command to dial
> > aliased to include tail -f /var/log/messages.  I told it to dial, and it
> > said "tail: no such file /var/log/messages."  I said "Uh" and
> >
>
> Looks like you have been hacked. Backup your important files and reinstall linux
> and then tighten the system. Then restore your backed up files.
>
> Subba Rao
> [EMAIL PROTECTED]
> http://pws.prserv.net/truemax/
>
>  => Time is relative. Here is a new way to look at time. <=
> http://www.smcinnovations.com
>
> 
> [EMAIL PROTECTED]   http://www.linuxchix.org

Well, sigh whatever the cause,  do a reasonable restore. As mentioned previously
mentioned change your root password off line etc. Check the crontab for for sure.
Make sure you know what at and cron run. Be one of those loose people, who would set
cron.deny and at.deny to stop nobody, there was no problem. But the climate was
different then. But it is also possible with one or two errors in something, that
look totally innocent and to clobber yourself too. If there is extensive logging
facilities, anything that looks like C-2 security, turn it on and watch. Read the
logfiles. This can be illustrative. In fact have them also daily snuck to a safe
place too. Then compare the backups against the current. But sigh, certainly rm-ing
files that something thinks it can't do without an easy way to wreak havoc as said
before. In all system security work so far, is how I caught anyone, known or unknown
trying to break in to sites, was via logfiles and watching things.

Have Fun and Good Luck,
Sends Steve




[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread Nils Philippsen

On Sun, 12 Dec 1999, Cynthia Dale wrote:

> 2. If your are running Red Hat Linux, run rpm -Va >rpmlist and check that
> out for a few things:
> MD5 sums
> missing files
> added files

You won't catch added files with rpm -Va -- they're just not in the
database, so they won't get checked. You might want to find setuid/setgid
binaries with 'find / -perm +6000' and ensure that they're ok:

find / -perm +6000 > /tmp/suidfiles
rpm -qf `cat /tmp/suidfiles` 2>/tmp/nopkgsuid | sort | uniq >/tmp/suidpkgs

In /tmp/nopkgsuid you'll find the files that are suid and don't belong to
a package (check those carefully). With 'rpm -V `cat /tmp/suidpkgs`' you
can verify the packages that hold suid files.

> If you're not running Red Hat, it will be a little more difficult.  Check

If you're not running a distro with RPM ... (almost anything except
Slackware, Debian, Corel (Debian derivative) and Stampede IIRC).

Nils
-- 
 Nils Philippsen / Berliner Straße 39 / D-71229 Leonberg // +49.7152.209647
[EMAIL PROTECTED] / [EMAIL PROTECTED] / [EMAIL PROTECTED]
   The use of COBOL cripples the mind; its teaching should, therefore, be
   regarded as a criminal offence.  -- Edsger W. Dijkstra



[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] IRQ

1999-12-13 Thread Tech Docs

Hello,

I am a new user to Linux. How do I custmomize the IRQ settings on Linux. I
am running Linux on my IBM I Series 1400 Laptop with Pentium 300 and 128 MB
RAM.

I have USB (webcam connected to this), two serial ports, port entender, one
external PS2 mouse support, sound card Yamaha. I seem to have some problem
with sound card. When I invoke sound, the machine hangs giving the message
IO port 270 in use and then crashes. The only  thing I can do is to do a
cold boot. Any clues?

Sriram


__
Do You Yahoo!?
Thousands of Stores.  Millions of Products.  All in one place.
Yahoo! Shopping: http://shopping.yahoo.com



[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread Telsa Gwynne

On Mon, Dec 13, 1999 at 12:59:10PM +0100 or thereabouts, Nils Philippsen wrote:
> 
> You won't catch added files with rpm -Va --
[snip]
> If you're not running a distro with RPM ... (almost anything except
> Slackware, Debian, Corel (Debian derivative) and Stampede IIRC).

I knew I bookmarked these for a reason. They do include using rpm
to verify packages and so on, but there are useful commands for
using find to locate setuid and guid files or to locate files with
names like ".. " (yes, with a space at the end) where apparently
people tend to put their toys. 

This series of articles was in Linux Journal over the last few weeks
under the title "Thwarting the System Cracker". 

 http://www2.linuxjournal.com/articles/sysadmin/003.html
 http://www2.linuxjournal.com/articles/sysadmin/004.html
 http://www2.linuxjournal.com/articles/sysadmin/005.html
 http://www2.linuxjournal.com/articles/sysadmin/006.html
 http://www2.linuxjournal.com/articles/sysadmin/007.html
 http://www2.linuxjournal.com/articles/sysadmin/008.html

Part five (007.html) is the one with the "what to do if you've had a 
break in" stuff. It's brief, but it's easy to read and easy to apply 
the commands it covers.

Telsa


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] who else uses ncurses?

1999-12-13 Thread Marlene E. Morley


I have used ncurses, and belive it lives up to it's name... :)

Have you tried getting the source code to ncurses and compiling it for each
system? That seems to fix most problems I've had with incompatilibity for
other programs, and I can't think of why ncurses would be diffrent... 

Here's the homepage for ncurses:
http://www.clark.net/pub/dickey/ncurses/ncurses.html

Hope this helps!
-Marlene


=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
  Marlene Morley   [EMAIL PROTECTED]   [EMAIL PROTECTED] 
  Computer Science Major, Southwestern Adventist University.Keene, TX 

   The test of a first-rate intelligence is the ability to hold two opposed 
   ideas in the mind at the same time, and still retain the ability to 
   function.
--F. Scott Fitzgerald



[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread Laurel Fan

Excerpts from linuxchix: 13-Dec-99 Re: [techtalk] bizarre by Nils
[EMAIL PROTECTED] 
> You won't catch added files with rpm -Va -- they're just not in the
> database, so they won't get checked. You might want to find setuid/setgid

Of course, the cracker could always have replaced rpm..




[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread Cynthia Dale

Yup.  The intruder could have done any number of things, which is why I
suggested reinstalling.  The other stuff I suggested was just to try to
find out how it was done, so it could be prevented in the future.  Nothing
worse than getting hacked and not knowing how...
Cindy

Cynthia J. Dale
Technical Engineer/FAQ maintainer
Red Hat, Inc.

fnord.


On Mon, 13 Dec 1999, Laurel Fan wrote:

> Date: Mon, 13 Dec 1999 14:15:10 -0500 (EST)
> From: Laurel Fan <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: Re: [techtalk] bizarre
> 
> Excerpts from linuxchix: 13-Dec-99 Re: [techtalk] bizarre by Nils
> [EMAIL PROTECTED] 
> > You won't catch added files with rpm -Va -- they're just not in the
> > database, so they won't get checked. You might want to find setuid/setgid
> 
> Of course, the cracker could always have replaced rpm..
> 
> 
> 
> 
> [EMAIL PROTECTED]   http://www.linuxchix.org
> 



[EMAIL PROTECTED]   http://www.linuxchix.org



[techtalk] Samba question

1999-12-13 Thread Yvonne

We did have Samba running and it was working through NT, but not Win95.
We're using Red Hat Linux 6.0.
Now, it seems we can't see either of our Linux servers through Network
Neighborhood.
What can I check to see what's wrong?

Thanks,
yvonne




[EMAIL PROTECTED]   http://www.linuxchix.org



[techtalk] I'm a newbie

1999-12-13 Thread Theresa Radke

Just found this list, am thrilled, look forward to learning and sharing a lot here!!

Theresa Radke
Senior/Computer Science Major
Age 38
Wichita Falls Texas
Favorite distro:  Corel :-)

_
SignUP For your CorelCity FREE email at http://www.corelcity.com


[EMAIL PROTECTED]   http://www.linuxchix.org



[techtalk] DVD-ROM on Linux?

1999-12-13 Thread Subba Rao

Hello,

I was wondering if Linux has support drivers for DVD CD-ROM. I have the DVD-ROM,
but cannot use it for anything else other than data CDs and music CDs.

If there is no support for DVD on Linux, I might as well swap it with another
machine. I haven't seen anything during the kernel compiles in 2.2.x versions,
that mentions DVD support.

If anyone else is using a DVD-ROM on Linux for DVD CDs, please let me know
how you did it. I would like to get some use of the features offered by this
device.

Thank you in advance.

Subba Rao
[EMAIL PROTECTED]
http://pws.prserv.net/truemax/

 => Time is relative. Here is a new way to look at time. <=
http://www.smcinnovations.com


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread Conrad Golightly

Seagate Eagle hard drives have a jumper that makes them read-only; keep RPM
and the MD5 checksums of your system stuff or anything else that you could
use to investigate a break-in on one of those puppies. You simply CAN'T
modify anything when its physically write protected. =)


> Yup.  The intruder could have done any number of things, which is why I
> suggested reinstalling.  The other stuff I suggested was just to try to
> find out how it was done, so it could be prevented in the future.  Nothing
> worse than getting hacked and not knowing how...




[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] DVD-ROM on Linux?

1999-12-13 Thread Laurel Fan

Excerpts from linuxchix: 13-Dec-99 [techtalk] DVD-ROM on Linux? by Subba
[EMAIL PROTECTED] 
> I was wondering if Linux has support drivers for DVD CD-ROM. I
> have the DVD-ROM, but cannot use it for anything else other than
> data CDs and music CDs.
>  
> If there is no support for DVD on Linux, I might as well swap
> it with anothermachine. I haven't seen anything during the kernel
> compiles in 2.2.x versions, that mentions DVD support.

There definitely isn't any in 2.2.x.  People are working on it, so there
may be some very very experimental code in the 2.3 kernels (haven't been
keeping track of kernel dev lately..), but it probably doesn't work
terribly well anyway. 


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] Samba question

1999-12-13 Thread Kathleen Weaver

First thing, before you assume something is wrong -- try doing a "Find" on
that computer.  I've found that Windows 95 (and 98) do weird things and
don't show up in Network Neighborhood -- often for days.

The next thing -- is did you put in a userid and password when you went
into Windows?

*** REPLY SEPARATOR  ***

On 12/13/99 at 3:42 PM Yvonne wrote:

>We did have Samba running and it was working through NT, but not Win95.
>We're using Red Hat Linux 6.0.
>Now, it seems we can't see either of our Linux servers through Network
>Neighborhood.
>What can I check to see what's wrong?
>
>Thanks,
>yvonne
>
>
>
>
>[EMAIL PROTECTED]   http://www.linuxchix.org





[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] DVD-ROM on Linux?

1999-12-13 Thread Emily Cartier

DVD video support is in the 2.3 kernels. See http://www.linux.org.uk/diary/
or http://roadrunner.swansea.linux.org.uk/~hobbit/diary.html for first
hand details . If you want stable support, wait for the
2.4 kernels. Since I am a broke college student, the whole point is moot
for me...

Emily, whose idea of a big upgrade is actually having a modem that works


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread Cynthia Dale

The same idea works with CD-ROMs, so you can use RPM binaries from a
CD-ROM.

A tool I like to play around with is Trinux, which is actually a very
small Linux OS.  (www.trinux.org)

It's basically a kernel and a few tools like netstat and stuff, but the
lovely thing about it is that you can add whatever you like to it.  The
bus on my daughter's machine was fried, and for a while we just used 3
Trinux disks as her OS.  (:  But anyhow, you don't have to boot your
system to go in and take a look at it, so anything that might be scheduled
to run, or any kind of trojanned binary on the system won't be able to do
damage, as the system won't be live, and you'll only run the binaries
which come with triinux (or which you get from a trusted place such as a
CD) to check out the system with.

Cindy

Cynthia J. Dale
Technical Engineer/FAQ maintainer
Red Hat, Inc.

fnord.


On Mon, 13 Dec 1999, Conrad Golightly wrote:

> Date: Mon, 13 Dec 1999 19:52:04 -0600
> From: Conrad Golightly <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: Re: [techtalk] bizarre
> 
> Seagate Eagle hard drives have a jumper that makes them read-only; keep RPM
> and the MD5 checksums of your system stuff or anything else that you could
> use to investigate a break-in on one of those puppies. You simply CAN'T
> modify anything when its physically write protected. =)
> 
> 
> > Yup.  The intruder could have done any number of things, which is why I
> > suggested reinstalling.  The other stuff I suggested was just to try to
> > find out how it was done, so it could be prevented in the future.  Nothing
> > worse than getting hacked and not knowing how...
> 
> 
> 
> 
> [EMAIL PROTECTED]   http://www.linuxchix.org
> 



[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] Samba question

1999-12-13 Thread wizard111

Your smb.conf file would probably help a bit. However I've noticed 
that windows 9X tends to not "see" network machines at times, 
and continues to no notice them. But to be certain that it's not 
win9x misbehaving (as usual), check if you can browse the linux 
box from the NT machine that you're going through (assuming 
you're logging onto the PDC). Missed your first posting of the 
question, so what version of samba are you running? What does 
your smb.conf look like? Did you accidentally tell samba not to 
announce to the master browser?
So many variables, so little whiskey...  :/   ];)

> First thing, before you assume something is wrong -- try doing a "Find" on
> that computer.  I've found that Windows 95 (and 98) do weird things and
> don't show up in Network Neighborhood -- often for days.
> 
> The next thing -- is did you put in a userid and password when you went
> into Windows?
> 
> *** REPLY SEPARATOR  ***
> 
> On 12/13/99 at 3:42 PM Yvonne wrote:
> 
> >We did have Samba running and it was working through NT, but not Win95.
> >We're using Red Hat Linux 6.0.
> >Now, it seems we can't see either of our Linux servers through Network
> >Neighborhood.
> >What can I check to see what's wrong?
> >
> >Thanks,
> >yvonne
> >
> >
> >
> >
> >[EMAIL PROTECTED]   http://www.linuxchix.org
> 
> 
> 
> 
> 
> [EMAIL PROTECTED]   http://www.linuxchix.org
> 
> 


__
NetZero - Defenders of the Free World
Get your FREE Internet Access and Email at
http://www.netzero.net/download/index.html


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] DVD-ROM on Linux?

1999-12-13 Thread wizard111

MY idea of a big upgrade is having a kernel that supports my AAA-
133 card. TOTAL waste being in an NT terminal server...  :/
> Emily, whose idea of a big upgrade is actually having a modem that works

__
NetZero - Defenders of the Free World
Get your FREE Internet Access and Email at
http://www.netzero.net/download/index.html


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread wizard111

FIRST do an e2fsck on your drives, perhaps you have a bad HD 
that has a spreading corruption (read; bad part of the media that's 
spreading (surface "sluffing", was a rather common problem with 
conner HD's back before Seagate bought them out).
Second, re-verify your init.d files, make certain that nobody got into 
your machine and put nasty things there.
Last, triple check ownerships and permissions on /var, /usr, /sbin, 
/... to be sure that nothing was corrupted in the access information 
flags.
> Okay, so today I was using my ppp connection for several hours, then we
> went to watch Sunday night Fox and came back.  I have the command to dial
> aliased to include tail -f /var/log/messages.  I told it to dial, and it
> said "tail: no such file /var/log/messages."  I said "Uh" and
> tried again, a few times.  I got the same result.  I cd'd to /var/log, and
> tehre were a total of 3 files there.  And I believe they were all
> directories.  It got too weird, so I rebooted.  I did it twice, because
> sendmail was taking ages to start and giving bizarre errors.  So I told it
> to stop running sendmail and httpd on startup, since I don't even use them
> anyway.  After the reboot, /var/log/messages reappeared and was fine and
> ppp worked fine.  So then the problem was that my tty (mingetty) was set
> to 'dumb' instead of vt100.  I can't figure that one out.  I also
> periodically get messages (write style) from syslogd in assorted garbage.
> It is weird high ascii stuff, i think.  There is something about 'not able
> to piece together parts of message.'  This all started sometime between 8
> and 10 pm tonight.  I am running ip masquerading and ipchains over a ppp
> dialup.  Talking to a group of friends who use linux wasn't helpful,
> except in stopping sendmail and httpd on boot.
> I'm getting close to going "gyagh" and hitting it.  Help?
> 
> Conni
> 
> -- 
> So they linked their hands and danced 'round in circles and in rows.
>   -Loreena McKennitt
> 
> http://www.one-eyed-alien.net/~ccovingt
> 
> http://www.angelfire.com/anime/Galadriel
> 
> 
> 
> 
> [EMAIL PROTECTED]   http://www.linuxchix.org
> 
> 


__
NetZero - Defenders of the Free World
Get your FREE Internet Access and Email at
http://www.netzero.net/download/index.html


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] bizarre....

1999-12-13 Thread wizard111

Ever heard of hardware failure such as a HD going south? Does the 
same thing, eventually the OS hangs and begins running properly 
again on disk access. The final end is when it hangs forever due to 
not finding a sector to read or even report the error to...
> In general, if you're using a stable os, and it goes nuts, its because
> of external forces, such as you doing something bad as root, a breakin,
> or hardware problems. 
> 
> 
> [EMAIL PROTECTED]   http://www.linuxchix.org
> 
> 


__
NetZero - Defenders of the Free World
Get your FREE Internet Access and Email at
http://www.netzero.net/download/index.html


[EMAIL PROTECTED]   http://www.linuxchix.org



[techtalk] forwarded (due to a weird bounce)

1999-12-13 Thread Deb Richardson

> From: Di Gregory <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: [techtalk] DVD-ROM on Linux?
> In-Reply-To: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> MIME-Version: 1.0
> Content-Type: TEXT/PLAIN; charset=US-ASCII
> 
> I have a question...
> I have a compaq presario laptop, which came with a dvd player, and the
> copy of windows + programs (junk) that comes with it, the "clean install"
> is un*stable, so I had to buy (piss me off) a copy of Windows 98 to
> install on it without the otehr crap, and download the drivers.  But,
> contrary to what I had thought, Win 98 doesn't have a player for DVD and
> I have no idea where to get one.  I did find one on the internet for
> 49.99 but I really don't want to pay that kind of money to watch dvds on
> my laptop when technically I already own a copy of a player, but you
> can't individually install the programs, so either I'm stuck or I need to
> find a player...
> 
> tia
> Dianna


[EMAIL PROTECTED]   http://www.linuxchix.org



[techtalk] winmodem sound driver

1999-12-13 Thread Theresa Radke

I have a PC-Chips MB with a winmodem onboard, I visited their website and asked an 
engineer to please provide me with a driver, I was actually shocked when he produced a 
driver for my sound card and my modem, trouble is when I try to load it I get the 
message that it was compiled with 2.2.2-5 and I am running 2.2.12

What can I do??

_
SignUP For your CorelCity FREE email at http://www.corelcity.com


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] Samba question

1999-12-13 Thread Stephan Zaniolo

You might want to check in the Win95 Network properties that Client for MS
Networks, TCP/IP, and NetBEUI, and your ethernet adapter are all listed
under Network - Configuration and you might need to Primary Network Logon
as Client for MS Networks.  Also, if you haven't checked it out, try the
Samba Server Step-by-Step guide at:

http://www.sfu.ca/~yzhang/linux/samba/index.html

Hope this helps,

Stephan

> On 12/13/99 at 3:42 PM Yvonne wrote:
>We did have Samba running and it was working through NT, but not Win95.
>We're using Red Hat Linux 6.0.
>Now, it seems we can't see either of our Linux servers through Network
>Neighborhood.
>What can I check to see what's wrong?
>
>Thanks,
>yvonne
>
>
>
>
>[EMAIL PROTECTED]   http://www.linuxchix.org



[EMAIL PROTECTED]   http://www.linuxchix.org



[techtalk] RE: samba question

1999-12-13 Thread Yvonne J. Beever

> First thing, before you assume something is wrong -- try doing a
> "Find" on
> that computer.  I've found that Windows 95 (and 98) do weird things
> and
> don't show up in Network Neighborhood -- often for days.

While I couldn't "see" the servers in Network Neighborhood, I still had
a drive
to each machine mapped, and could get to them--however, today, I can't--
get
an access error.  And I did put in my userid and password in Windows...

> you're logging onto the PDC). Missed your first posting of the
> question, so what version of samba are you running? What does
> your smb.conf look like? Did you accidentally tell samba not to
> announce to the master browser?

Don't know the version, will have to check that. I presume it's the
version that
came with Red Hat 6.0. I'll have to grab a copy of the smb.conf
tomorrow.
I haven't done anything to it--I'm the web admin, but they haven't given
me
root permission. (I plan to attempt to load Linux on the server at my
desk
tomorrow to play with it myself). My boss was running a diagnostic on it
that
I found on the web, but he hadn't figured out the problem yet.

Thanks,
Yvonne

--
"Self-realization. I was thinking of the immortal words
  of Socrates, when he said, "I drank what?" --Chris Knight




[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] winmodem sound driver

1999-12-13 Thread Laurel Fan

Excerpts from linuxchix: 13-Dec-99 [techtalk] winmodem sound d.. by
"Theresa Radke"@corelcit 
> I have a PC-Chips MB with a winmodem onboard, I visited their
> website and asked an engineer to please provide me with a
> driver, I was actually shocked when he produced a driver for 
> my sound card and my modem, trouble is when I try to load it 
> I get the message that it was compiled with 2.2.2-5 and I am
> running 2.2.12
>  
> What can I do??

Wow, you actually got a driver for a winmodem???

I guess you can either downgrade your kernel to 2.2.2-5, or ask
the engineer to please provide you with the source or a module
compiled for 2.2.12.

I'm still amazed you got a driver for a winmodem.. 


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] Samba question

1999-12-13 Thread Kelly Lynn Martin

On Mon, 13 Dec 1999 20:10:03 -0600, "Kathleen Weaver" <[EMAIL PROTECTED]> said:

>First thing, before you assume something is wrong -- try doing a
>"Find" on that computer.  I've found that Windows 95 (and 98) do
>weird things and don't show up in Network Neighborhood -- often for
>days.

I had Windows add a spurious route to my network configuration once,
which resulted in packets going off into lala land.  It took me almost
a week to fix that -- and I had to dump the Window registry to do it.

Kelly


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] DVD-ROM on Linux?

1999-12-13 Thread Jenn V.



Emily Cartier wrote:
> 
> DVD video support is in the 2.3 kernels. See http://www.linux.org.uk/diary/
> or http://roadrunner.swansea.linux.org.uk/~hobbit/diary.html for first
> hand details . If you want stable support, wait for the
> 2.4 kernels. Since I am a broke college student, the whole point is moot
> for me...

Yes, I was about to comment on that. The diary entries about DVD sound
or video but not both at one point
 
> Emily, whose idea of a big upgrade is actually having a modem that works

I remember that!
Dancer and I were helping with a non-profit community ISP at one 
point, and we used to use a modem that was no longer reliable in 
the modem bank but if you just power cycled it when it froze it 
was ok.


Jenn V.
-- 
  "We're repairing the coolant loop of a nuclear fusion reactor. 
   This is women's work!"
Helix, Freefall. http://www.purrsia.com/freefall/

Jenn Vesperman[EMAIL PROTECTED] http://www.simegen.com/~jenn


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] winmodem sound driver

1999-12-13 Thread Kir Kolyshkin

Laurel Fan wrote:

> Excerpts from linuxchix: 13-Dec-99 [techtalk] winmodem sound d.. by
> "Theresa Radke"@corelcit
> > I have a PC-Chips MB with a winmodem onboard, I visited their
> > website and asked an engineer to please provide me with a
> > driver, I was actually shocked when he produced a driver for
> > my sound card and my modem, trouble is when I try to load it
> > I get the message that it was compiled with 2.2.2-5 and I am
> > running 2.2.12
> >
> > What can I do??

2.2.2-5 is a kernel from RedHat 6.0, if I'm not mistaken.

--
|< ()  http://kir.sever.net [EMAIL PROTECTED] [EMAIL PROTECTED] ICQ 7551596
() |_   Microsoft SELLS you Windows, Linux GIVES you the whole house!





[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] winmodem sound driver

1999-12-13 Thread Theresa Radke

I know, so was I, I bought this system from the linux systems section on 
pricewatch.com.  Only to find that while it shipped with RH 6.0, hardly any of the 
hardware was linux compatable.

I got a good price so have been struggling with slapping old hard ware I've got 
hanging around.

Last night out of sheer frustration I went to PC-chips website and reamed them out

Today in my email a .o file :-)

I don't want to downgrade, as a matter of fact I just upgraded to 2.2.13 tonight, 
(what a rush to sucessfully recompile the kernel)  So I really don't want to downgrade.

Thanks for the reply, I'll keep you posted

_
SignUP For your CorelCity FREE email at http://www.corelcity.com


[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] winmodem sound driver

1999-12-13 Thread Cynthia Dale

I didn't think that version looked familiar, so I looked around and nope,
it's not a kernel we we either shipped or put out as an update.  For 6.0,
it was 2.2.5-15, with an update of 2.2.5-22, and 5.2 had the 2.0.x
kernels.  But all you should have to do is just compile a 2.2.2 kernel
and turn off "[ ] Set version information on all symbols for modules"
and it should load.

Good luck,
Cindy
P.S. ftp.kernel.org and/or metalab.unc.edu are good places to get
kernel sources, IMO

Cynthia J. Dale
Technical Engineer/FAQ maintainer
Red Hat, Inc.

fnord.


On Tue, 14 Dec 1999, Kir Kolyshkin wrote:

> Date: Tue, 14 Dec 1999 08:52:08 +0300
> From: Kir Kolyshkin <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: Re: [techtalk] winmodem sound driver
> 
> Laurel Fan wrote:
> 
> > Excerpts from linuxchix: 13-Dec-99 [techtalk] winmodem sound d.. by
> > "Theresa Radke"@corelcit
> > > I have a PC-Chips MB with a winmodem onboard, I visited their
> > > website and asked an engineer to please provide me with a
> > > driver, I was actually shocked when he produced a driver for
> > > my sound card and my modem, trouble is when I try to load it
> > > I get the message that it was compiled with 2.2.2-5 and I am
> > > running 2.2.12
> > >
> > > What can I do??
> 
> 2.2.2-5 is a kernel from RedHat 6.0, if I'm not mistaken.
> 
> --
> |< ()  http://kir.sever.net [EMAIL PROTECTED] [EMAIL PROTECTED] ICQ 7551596
> () |_   Microsoft SELLS you Windows, Linux GIVES you the whole house!
> 
> 
> 
> 
> 
> [EMAIL PROTECTED]   http://www.linuxchix.org
> 



[EMAIL PROTECTED]   http://www.linuxchix.org



Re: [techtalk] winmodem sound driver

1999-12-13 Thread Kelly Lynn Martin

On Mon, 13 Dec 1999 23:50:21 -0500 (EST), Laurel Fan <[EMAIL PROTECTED]> said:

>Wow, you actually got a driver for a winmodem???

Yeah, it's just a matter of emulating a DSP in the kernel.  Raph has
been talking about doing this for some time.

It's a REAL waste of processor cycles, though.

Kelly


[EMAIL PROTECTED]   http://www.linuxchix.org