Re: [gentoo-user] Problems with commands "reboot" and "shutdown"

2024-11-10 Thread Steve Evans
ot 1440 Nov 10 12:04 run drwxr-xr-x 2 root root 12288 Nov 3 09:02 sbin dr-xr-xr-x 12 root root 0 Nov 9 19:21 sys drwxrwxrwt 32 root root 11140 Nov 10 15:39 tmp drwxr-xr-x 13 root root 4096 Nov 6 2021 usr drwxr-xr-x 15 root root 4096

Re: [gentoo-user] Re: What to do about openssl

2023-10-04 Thread Steve Wilson
From https://www.php.net/manual/en/openssl.requirements.php PHP 7.1-8.0 requires OpenSSL >= 1.0.1, < 3.0. PHP >= 8.1 requires OpenSSL >= 1.0.2, < 4.0. So it looks like you need to upgrade php to 8.1 I've a similar problem with my server requiring php 7.2 and trying to figure out the upgrade pa

Re: [gentoo-user] Any way to automate login to host and su to root?

2022-07-14 Thread Steve Wilson
Have you looked at dev-tcltk/expect? There's possibly an example you could try at <https://www.journaldev.com/1405/expect-script-ssh-example-tutorial> although you probably want to prompt for the password or retreive it programatically rather than putting it on the command line

Re: [gentoo-user] gentoo-sources-5.10.103 - will not boot

2022-03-14 Thread Steve Wilson
e as oldconfig while picking the defaults, this will save on hitting enter each time. Steve

Re: [gentoo-user] KDE upgrade dependency problem

2021-12-12 Thread Steve Evans
On Sat, 11 Dec 2021 12:14:23 + Steve Evans wrote: > On Fri, 10 Dec 2021 20:09:19 -0500 > Jack wrote: > > > Good evening all, calling on the accumulated wisdom here. > > > > kde-frameworks 5.88 has been marked stable, but my upgrade is > > blocked because

Re: [gentoo-user] KDE upgrade dependency problem

2021-12-11 Thread Steve Evans
to kde-plasma to version 5.23.4. Frameworks has been marked stable, but plasma has not yet :-( See these bugs: - https://bugs.gentoo.org/816042 "KDE Frameworks 5.88 stabilisation" which has a status of IN_PROGRESS - https://bugs.ge

Re: [gentoo-user] tor-browser does not start any more

2021-11-28 Thread Steve Freeman
much. -Steve Freeman

Re: [gentoo-user] tor-browser does not start any more

2021-11-28 Thread Steve Freeman
On 2021-11-28 05:09, gevisz wrote: I have just noticed that the tor-browser I downloaded from its official site does not start any more. :( However, it started just a few weeks ago, before a few previous updates. Downloading its latest version has not changed anything in this respect. I has s

Re: [gentoo-user] Package management, depclean and new installs

2021-10-04 Thread Steve Evans
> I use an alias for depclean to achieve the same result: alias depclean='emerge -va --depclean --exclude gentoo-sources --exclude gcc --exclude mythweb --exclude php --exclude owncloud' Steve -- ____ Steve Evans

Re: [gentoo-user] Chrome - no system title bar or boarders

2021-09-23 Thread Steve Evans
re > using Chrome and KDE has seen this issue? > Mine is also missing the title bar. However the "Use system title bar and borders" /does/ restore the normal title bar for me. This is also version 94.0.4606.54 on KDE. Steve --

Re: [gentoo-user] Anyone using extract_url with mutt?

2021-04-27 Thread Steve Kollios
esktop environments"; I run useful applications > Hi Walter, I'd be interested to see how this integrates in your workflow, I'm looking for a similar solution myself. The current functionality of mutt/neomutt leaves a bit to be desired when using it as described. P.S thank you Nils for introducing this to me, I will likely take the plunge in the near future. - Steve

Re: [gentoo-user] Kodi 19 stabilization

2021-03-14 Thread Steve Evans
add ons not working because they have not been upgraded to Python 3. Steve -- ____ Steve EvansE-mail: mailto:ste...@gorbag.com Registered Linux user #217906: http://counter.li.org Public Encryption Key:

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Steve Wilson
On 09/12/2020 00:01, Grant Taylor wrote: On 12/8/20 4:44 PM, Steve Wilson wrote: I use this as the first step to limit ssh access to one of my servers: `iptables -A INPUT -p tcp -m tcp --dport 22 -m geoip ! --src-cc GB -m comment --comment "Drop SSH from outside GB" -j DROP` Has

Re: [gentoo-user] apache blocking access based country

2020-12-08 Thread Steve Wilson
-dport 22 -m geoip ! --src-cc GB -m comment --comment "Drop SSH from outside GB" -j DROP` This has the advantage that apache doesn't need to process the request, but a possible downside that you won't be able to display a message if that's a requirement. Steve

Re: [gentoo-user] rsyslog upstream have removed their template systemd service file

2020-12-02 Thread Steve Wilson
tem to get up and running again. I did consider creating my own but decided to just keep an eye on future updates hoping it's there. * https://github.com/rsyslog/rsyslog/blob/master/platform/redhat/centos/rsyslog.service Steve. ps.Seems it's a small world, I believe I had the ple

Re: [gentoo-user] Strategies for testing an ebuild

2020-10-20 Thread Steve Wilson
ng up. On top of this I store this in a private gitlab install so am now looking at CI/CD to automate the testing, but at this point I'm at the point of creating my own gentoo docker image with various things pre-installed to start serious check/test/install of new ebuilds. Steve. On 20/10/

Re: [gentoo-user] [SOLVED] Upgrade to rsync-3.2.0-r1 results in "didn't get server startup line"

2020-07-06 Thread Steve Freeman
On 2020-06-30 20:35, Steve Freeman wrote: I have a local gentoo repo mirror that has been running well for years. It is essentially the same setup as described at https://wiki.gentoo.org/wiki/Local_Mirror except that it runs on a non-default port. After upgrading to net-misc/rsync-3.2.0-r1

[gentoo-user] Upgrade to rsync-3.2.0-r1 results in "didn't get server startup line"

2020-06-30 Thread Steve Freeman
the server again to rsync-3.2.0-r1 causes it to break again. Client version appears to be irrelevant. Running rsync as a non-daemon appears to work fine regardless of server/client versions; it's only rsyncd that fails. With no useful logs or output, I'm finding this impossible to diagnose. Does anyone have any ideas? Thanks, Steve Freeman

Re: [gentoo-user] Update Gentoo recently is becoming difficult

2020-05-12 Thread Steve Evans
ave you been having? Steve

Re: [gentoo-user] USB sound

2020-05-01 Thread Steve Evans
On Fri, 1 May 2020 19:42:54 +0100 Steve Evans wrote: > On Fri, 1 May 2020 09:34:56 -0700 > Mark Knecht wrote: > > > On Fri, May 1, 2020 at 12:33 AM Peter Humphrey > > wrote: > > > > > > On Wednesday, 29 April 2020 20:37:23 BST Michael wrote: > >

Re: [gentoo-user] USB sound

2020-05-01 Thread Steve Evans
ved from the System Settings in a recent version of KDE. This is with Plasma version 5.17.5. Further investigation reveals that Kmix has an option "Audio Setup..." that does nothing, but examining xorg-session.log it outputs the error Could not find module 'kcm_phonon&#

Re: [gentoo-user] PHP 7.4 and dev-php/pecl-apcu-5.1.18

2020-04-18 Thread Steve Freeman
() circumfix forced, masked, or removed {} circumfix state is bound to FEATURES settings On Sat, Apr 18, 2020 at 09:17:01PM -0500, Steve Freeman wrote: I did not see anything in my output that made think "~amd64". How on earth did you figure that out? I would love

Re: [gentoo-user] PHP 7.4 and dev-php/pecl-apcu-5.1.18

2020-04-18 Thread Steve Freeman
On 2020-04-18 20:42, Dale wrote: Steve Freeman wrote: I am trying to eliminate PHP 7.3 from my system.  But I am having trouble building dev-php/pecl-apcu-5.1.18 with support for PHP 7.4. I am getting confusing output regarding whether pecl-apcu can be built with PHP 7.4 support.  It is

Re: [gentoo-user] PHP 7.4 and dev-php/pecl-apcu-5.1.18

2020-04-18 Thread Steve Freeman
On 2020-04-18 20:36, Ashley Dixon wrote: On Sat, Apr 18, 2020 at 08:22:26PM -0500, Steve Freeman wrote: Can anyone explain why php7-4 is either disallowed or missing, when the ebuild seems to allow it? You need to allow the ~amd64 keyword (assuming that is your architecture) and

[gentoo-user] PHP 7.4 and dev-php/pecl-apcu-5.1.18

2020-04-18 Thread Steve Freeman
I am trying to eliminate PHP 7.3 from my system. But I am having trouble building dev-php/pecl-apcu-5.1.18 with support for PHP 7.4. I am getting confusing output regarding whether pecl-apcu can be built with PHP 7.4 support. It is working just fine with PHP 7.3 (until I changed eselect php

Re: [gentoo-user] Software for checking CDs and DVDs for errors?

2018-12-20 Thread Steve Dibb
On 12/4/18 3:31 AM, Joerg Schilling wrote: Dale wrote: So as usual, they are not very Linux friendly.  Figures.  I was hoping The main problem with Linux is that the drivers at SCSI level in the kernel are worse than they could be, so if you like to get better results, you should encourage t

Re: [gentoo-user] Software for checking CDs and DVDs for errors?

2018-12-20 Thread Steve Dibb
On 12/14/18 3:31 AM, Joerg Schilling wrote: Steve Dibb wrote: On 12/3/18 9:27 AM, Pouru Lasse wrote: I've got a bunch of scratched disc-based games (PS2, Xbox 360) that I'd like to check for errors. Is there any program for Linux that does this? I found and tried dvdisaster, b

Re: [gentoo-user] Software for checking CDs and DVDs for errors?

2018-12-13 Thread Steve Dibb
On 12/3/18 9:27 AM, Pouru Lasse wrote: I've got a bunch of scratched disc-based games (PS2, Xbox 360) that I'd like to check for errors. Is there any program for Linux that does this? I found and tried dvdisaster, but it only works for CDs, not DVDs. Everything else seems to be Windows-only. - L

Re: [gentoo-user] dm-crypt + ext4 = where will the journal go?

2012-09-03 Thread Steve Buzonas
Since ext3 a journal has been added. From > my times with loop-aes I know that I have to store the journal through an > encrypted loop device else it might be written on the hard drive. > > As of I'm new to dm-crypt and Gentoo, where will that journal now go? > > Any help is

Re: [gentoo-user] Two openvpn tunnels... and /etc/init.d et al.

2010-07-07 Thread Steve
On 06/07/10 06:25, Eray Aslan wrote: i.e. make a soft link to openvpn init script and make a seperate conf file with the same name as the new init script in your config directory (usually /etc/openvpn). Init script starts openvpn with the correct config file. Many thanks, works perfectly... Al

Re: [gentoo-user] Two openvpn tunnels... and /etc/init.d et al.

2010-07-07 Thread Steve
On 06/07/10 06:25, Eray Aslan wrote: i.e. make a soft link to openvpn init script and make a seperate conf file with the same name as the new init script in your config directory (usually /etc/openvpn). Init script starts openvpn with the correct config file. Many thanks, works perfectly... Al

[gentoo-user] Two openvpn tunnels... and /etc/init.d et al.

2010-07-05 Thread Steve
I already have one openvpn tunnel - and I need another. I've established configuration launching the second tunnel (tun1, while tun0 is launched at boot) using the command line to explicitly start openvpn. I'd really like both tunnels to start at boot time. In case it is relevant, tun0 (currently

Re: [gentoo-user] Routing with gentoo...

2010-06-19 Thread Steve
On 17/06/2010 08:26, Rod wrote: > Check out iproute >> * sys-apps/iproute2 >> Latest version available: 2.6.31 >> Latest version installed: 2.6.31 >> Size of files: 363 kB >> Homepage: >> http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2 >>

[gentoo-user] Routing with gentoo...

2010-06-17 Thread Steve
OK, I admit it, this is more of a Linux networking challenge, but it's one I want to resolve under gentoo. I have two network interfaces - eth0 and tun0 - and both are (somehow) connected to the internet. When I have eth0's IP address as my default route, all my traffic is sent out via my NAT ena

Re: [gentoo-user] Postfix question about auth and blocklists...

2010-05-27 Thread Steve
On 26/05/2010 20:32, Brandon Vargo wrote: > I hope the above helps. > Thank you very much... that was very informative. Unfortunately, I now discover I fibbed when I said I had SASL auth set up - I only thought I had... When I correctly configure thunderbird, I get the following postfix messa

[gentoo-user] Postfix question about auth and blocklists...

2010-05-26 Thread Steve
On a gentoo mailserver, I'm running Postfix 2.6.5 - and, having followed some howto or other, quite a long time ago, I have this section at the end of my main.cf: -- smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination,

Re: [gentoo-user] Problem with script calling OOCalc on amd64

2010-03-23 Thread Steve Dommett
nsible for the differing results lies in the last 25 lines of /usr/lib64/openoffice/program/soffice. Cheers, Steve

Re: [gentoo-user] Problem with script calling OOCalc on amd64

2010-03-23 Thread Steve Dommett
On Friday 19 March 2010 19:14:21 Mick wrote: > I also tried /usr/bin/oocalc, but it didn't work. :-( Try: oocalc -no-oosplash :-)

Re: [gentoo-user] Strategy for using SAN/NAS for storage with Gentoo...

2010-03-17 Thread Steve
Keith Dart wrote: I recommend setting up your server hardware on a decent mini-PC with server grade disks and installing openfiler. The openfiler uses XFS for local storage and exports NFS and CIFS (and iSCSI if you want that). http://www.openfiler.com/ It is based on rpath linux and uses a d

Re: [gentoo-user] Re: Strategy for using SAN/NAS for storage with Gentoo...

2010-03-16 Thread Steve
On 16/03/2010 19:57, Stroller wrote: > How does your system boot if your RAID1 system volume fails? The one > you have grub on? I think you mentioned a flash drive, which I've seen > mentioned before. This seems sound, but just to point out that's > another, different, single point of failure. Well

Re: [gentoo-user] Re: Strategy for using SAN/NAS for storage with Gentoo...

2010-03-16 Thread Steve
On 15/03/2010 22:29, Andrea Conti wrote: > This IMHO pretty much rules out any kind of server-class hardware, which > tends to be both costly and power-hungry. If you're thinking about > buying used stuff, be sure to factor in the cost and difficulty of > finding spares in some years' time. > I'

Re: [gentoo-user] Re: Strategy for using SAN/NAS for storage with Gentoo...

2010-03-15 Thread Steve
On 15/03/2010 18:21, Stroller wrote: > It's hard to be more specific without knowing your usage. Yes... I was deliberately vague to see what options came up... but I can be more specific. The budget is miniscule - and the performance demands (bandwidth and latency) are completely non-challenging.

Re: [gentoo-user] Re: Strategy for using SAN/NAS for storage with Gentoo...

2010-03-15 Thread Steve
On 15/03/2010 15:49, Kyle Bader wrote: > +1 on zfs w/ solaris for storage, just don't go cheap and get desktop disks. > I have to admit, I do like the idea of ZFS, though not quite enough to justify maintaining Solaris in addition to my other infrastructure. I was thinking about something rathe

[gentoo-user] Strategy for using SAN/NAS for storage with Gentoo...

2010-03-15 Thread Steve
I have recently started looking at server resilience and availability in the context of a hardware failure or hardware upgrade. I've come to the conclusion that it would be very desirable if terrabyte-scale data did not need to be restored from backup. This isn't a commercial server - so I'm inte

Re: [gentoo-user] Apache SSL configuration gone AWOL...

2009-11-12 Thread Steve
Mick wrote: I'd take that as a big broad hint that it is looking somewhere else for certificates in this release and it found default certs. +1 Check in your default apache (most likely) or vhosts configuration files that you have SSLCertificateFile and SSLCertificateKeyFile paths pointin

Re: [gentoo-user] Apache SSL configuration gone AWOL...

2009-11-12 Thread Steve
Steve wrote: Firefox under Windows and Ubuntu : Secure Connection Failed An error occurred during a connection to <>. Peer's certificate has an invalid signature. (Error code: sec_error_bad_signature) Weirder and weirder... when I switch to lynx, it works! Lynx remotely give

[gentoo-user] Apache SSL configuration gone AWOL...

2009-11-11 Thread Steve
After a recent update, I restarted Apache... I host a number of trivial development servers (using named virtual hosts) and also support access to one of them over SSL. While I can access all my data over http, access by https has stopped working. I wondered if an update had made apache fuss

Re: [gentoo-user] Gentoo falling apart for me after either abandoning trying to install "Kolab" as overlay - or after upgrading to default/linux/x86/10.0

2009-11-05 Thread Steve
Volker Armin Hemmann wrote: yes, don't use locate. Also check the symlinks. Reset them with eselect gcc if you have to. Then try all your emerges with --tree you get a lot more helpfull output. Also, when a dependency is missing revdep-rebuilt loves to fail. You can hunt that down with --tree

Re: [gentoo-user] SOGo on Gentoo

2009-09-28 Thread Steve
Neil Bothwick wrote: On Mon, 28 Sep 2009 13:23:24 +0100, Steve wrote: I guess I need to do something special to get the 'gnustep overlay'... I've recently done my eix-sync, so that's not it. emerge layman and run "eix-remote update" Many thanks, I no

Re: [gentoo-user] SOGo on Gentoo

2009-09-28 Thread Steve
Neil Bothwick wrote: On Mon, 28 Sep 2009 12:57:36 +0100, Steve wrote: I've come across SOGo [ http://www.scalableogo.org/ ] and am interested to try it... though it doesn't seem to have an ebuild in portage. It's in the gnustep overlay. % eix sogo * gnust

[gentoo-user] SOGo on Gentoo

2009-09-28 Thread Steve
I've come across SOGo [ http://www.scalableogo.org/ ] and am interested to try it... though it doesn't seem to have an ebuild in portage. Does anyone use SOGo on Gentoo, or should I consider using a different distro to trial this suite?

Re: [gentoo-user] Insane load on gentoo server - possibly clamassassin related?

2009-06-29 Thread Steve
Jarry wrote: Might be bug in clamd/spamassassin. But it could also be you are being mail-bombed (e.g. infinite depth of compressed-in-compressed attachements). I thought about that - but I can't find an offending email with a bogus attachment if I am. I recommend to include some limit for numbe

Re: [gentoo-user] Insane load on gentoo server - possibly clamassassin related?

2009-06-29 Thread Steve
Alan McKinnon wrote: Looks like you have 200 processes sitting there blocking I/O. Is there anything related in the logs? Not sure - as I'm not sure where to look, or what to look for. Your best bet is to examine emerge.log (better still - genlop) and find all recent upgrades that might affe

[gentoo-user] Insane load on gentoo server - possibly clamassassin related?

2009-06-29 Thread Steve
Today my gentoo server that has sat happily churning my mundane (and lightweight) tasks froze and I noticed when it stopped serving DNS queries... and the server was even unresponsive from the command prompt. I rebooted and was a bit taken aback at what I found. The server currently runs,

Re: [gentoo-user] Web application for contact management...

2009-06-19 Thread Steve
Steve wrote: Stumped by why the installation test for SASL failed, I ploughed on to see where it took me. The answer to this, is as far as trying to access my (working) IMAP server... eGroupware reports: *The connection to the IMAP Server failed!!* NO, Authentication failed. Erm, update

Re: [gentoo-user] Web application for contact management...

2009-06-19 Thread Steve
Mick wrote: On Tuesday 16 June 2009, Steve wrote: So far I've not got far with either Groupware suite... they're both close - I wonder how hard it would be to tailor them... Hmmm. Have a quick look at InfoLog of eGroupware. I think that either on its own,

Re: [gentoo-user] Web application for contact management...

2009-06-16 Thread Steve
Steve wrote: On the down-side, they both seem to have relatively steep learning curves relative to my primary objective... i.e. keeping notes about communications with infrequent contracts... so, for example, if I were about to meet someone from Acme Corp next week, and I remembered having

Re: [gentoo-user] Web application for contact management...

2009-06-16 Thread Steve
fact, I'd be worried about doing it any other way... I wouldn't want to risk contributing to a massive centralised database of personal information... :) Thanks, and - of course - I'm still interested in anecdotal hints/tips from anyone who has attempted something similar. Steve

Re: [gentoo-user] Web application for contact management...

2009-06-15 Thread Steve
ns so far - they've, at the very least, helped me refine my ideas about what I want... Steve

[gentoo-user] Web application for contact management...

2009-06-14 Thread Steve
I am looking for a web-application to manage contacts... but I'm not looking for "just an address book"... I guess this isn't especially gentoo, but I'd ideally like to run a server on my gentoo box, so I hope I can be forgiven for asking here. Personally, I'm absolutely awful at remembering p

Re: [gentoo-user] A networking question...

2009-05-08 Thread Steve
Mick wrote: An adaptor can have more than one public IP address (multi-homing) and you can use something like: ifconfig eth0:0 192.168.0.2 netmask 255.255.255.0 up to set them up (increment eth0:1, eth0:2, etc accordingly). However, if your SSL vhost is listening on a random port you don't nee

Re: [gentoo-user] A networking question...

2009-05-07 Thread Steve
Anthony Metcalf wrote: *That* depends on the exact specifics of what he is/isn't allowed to be showing."They" may not even want the service to show as existing at that address for whatever reason. Thanks for all your discussion... I'll try to clarify - the PPP over SSH approach does seem

Re: [gentoo-user] A networking question...

2009-05-05 Thread Steve
Sascha Hlusiak wrote: The easiest thing would probably be to just use ssh port forwarding because you already have all the pieces running anyway. Wouldn't a simple ssh -L 12345:secondapache:https u...@remotessh and the browsing to https://localhost:12345 do the trick? Or you could use a ppp

[gentoo-user] A networking question...

2009-05-05 Thread Steve
... coupled with PPP over my ssh tunnel. Can anyone give me any hints - or, ideally, a link to a how-to? Thanks... Steve

Re: [gentoo-user] Syslog-ng using a spectacular amount of CPU time... (I'm using sshguard)

2009-03-23 Thread Steve
Alan McKinnon wrote: In short: top lies, On this occasion, top was telling the truth. ;)

Re: [gentoo-user] Syslog-ng using a spectacular amount of CPU time... (I'm using sshguard)

2009-03-23 Thread Steve
Sebastian Günther wrote: program() only takes 1 argument: the programname. There aren't two arguments (no comma) - and, yes, the syntax is odd - but it is exactly what is given by the sshguard man page - and seems to be confirmed by the syslog-ng manual, too. BTW: Just curious: you do not us

Re: [gentoo-user] Syslog-ng using a spectacular amount of CPU time... (I'm using sshguard)

2009-03-23 Thread Steve
Steve wrote: Do others get this behaviour - is this a bug in syslog-ng? Sorry for the multiple posts... a slight error on my part. The sshguard process wasn't running - a /bin/sh process trying to spawn it was running (there was no link from /usr/local... to the binary) and when the b

Re: [gentoo-user] Syslog-ng using a spectacular amount of CPU time... (I'm using sshguard)

2009-03-23 Thread Steve
Steve wrote: This is very frustrating... having played around, the syslog-ng tends towards using 100% CPU when my server is otherwise quiet - if, and only if, I have the program destination... even if the destination is not used. Oh, and strace shows syslog-ng frantically polling file

Re: [gentoo-user] Syslog-ng using a spectacular amount of CPU time... (I'm using sshguard)

2009-03-23 Thread Steve
Steve wrote: destination sshguardproc { program("/usr/local/sbin/sshguard" template("$DATE $FULLHOST $MESSAGE\n")); }; The presence of the above line is definitely what triggers the excessive CPU usage - it is almost as-if syslog-ng is 'busy-waiting&#

[gentoo-user] Syslog-ng using a spectacular amount of CPU time... (I'm using sshguard)

2009-03-23 Thread Steve
Has anyone any ideas? The syslog-ng is the usually the first line reported by top: 4097 root 20 0 3120 1060 708 R 48.3 0.1 677:46.38 syslog-ng The files in /var/log seem to be growing at an expected slow pace and aren't reporting anything unexpected. I followed a 'howto' and have

[gentoo-user] Solid state disks...

2009-02-22 Thread Steve
I'm playing around with an application that requires me to manage a large (multi-gigabyte to terabyte), bespoke, frequently-updating data structure in real-time... key concerns are for durability and efficiency. While a traditional approach might be to employ an expensive DBMS on expensive har

[gentoo-user] Oracle 10 or 11...

2008-12-10 Thread Steve
I am interested in the possibility of running a small-scale oracle server for some experimental development work. Ideally, I'd install on gentoo - as this is my server box... though I guess there may be hoops through which I must jump... I found this: http://en.gentoo-wiki.com/wiki/HOWTO_Ins

Re: [gentoo-user] Curious pattern in log files from ssh...

2008-12-05 Thread Steve
Alan McKinnon wrote: > On Thursday 04 December 2008 21:03:17 Christian Franke wrote: > >> I just don't see what blocking ssh-bruteforce attempts should be good >> for, at least on a server where few _users_ are active. >> > Two reasons: > > a. Maybe, just maybe, you overlooked something. Be

Re: [gentoo-user] Curious pattern in log files from ssh...

2008-12-04 Thread Steve
Simon wrote: > Since it is very unlikely that the attacker is targeting you > specifically, changing the port number (and removing root access) will > very likely stop the attack forever. Though, if the attacker did > target you, then you will need some more security tools (intrusion > detection,

Re: [gentoo-user] Curious pattern in log files from ssh...

2008-12-03 Thread Steve
Dmitry S. Makovey wrote: >> Erm - surely I either need to set up my client to port-knock... which >> is a faff I'd rather avoid... in order to use the technique. > nope. just start connection. wait a minute. cancel. start another one. wait a > minute. cancel. start new one - voila! :) > Eeew...

Re: [gentoo-user] Curious pattern in log files from ssh...

2008-12-03 Thread Steve
Paul Hartman wrote: > I think using Dmitry's idea of rejecting the first 2 connections, but > then allowing it as normal on the third attempt would satisfy your > requirements for being on the normal port, allowing all IPs and > requiring no special setup on the client end (other than knowing they

Re: [gentoo-user] Curious pattern in log files from ssh...

2008-12-03 Thread Steve
Dmitry S. Makovey wrote: > P.S. I actually don't do any of the above. It was just a surge of creative > paranoia > in response to initial request :) All good ideas - except selling the blacklist... I'd be happiest to share my blacklist for free... my objective is to minimise exposure to botnets -

Re: [gentoo-user] Curious pattern in log files from ssh...

2008-12-03 Thread Steve
or example, restricting it to hosts in the UK... but still allowing remote access wherever I've propagated DSA keys... but I think this would be tricky to set up. A shared block-list, I suspect, would be the most effective response to this attack... and the response most likely to minimise others' exposure, too. Steve

[gentoo-user] Curious pattern in log files from ssh...

2008-12-03 Thread Steve
I've recently discovered a curious pattern emerging in my system log with failed login attempts via ssh. Previously, I noticed dictionary attacks launched - which were easy to detect... and I've a process to block the IP address of any host that repeatedly fails to authenticate. What I see now is

Re: [gentoo-user] Is gentoo-portage and gentoo-wiki offline?

2008-10-17 Thread Steve Wilson
e patient, it will take a > few weeks. Is this computer (term used lightly), in the USA ? Steve --

[gentoo-user] A question about Wikis... (A bit off topic...)

2008-09-23 Thread Steve
I'm trying to establish a shared repository for semi-structured data... This could be interpreted in many ways, so I'll try to illustrate with an example. Say I'm researching a new topic - for example, the Oil Industry... and I'm looking to establish a shared resource detailing relevant infor

Re: [gentoo-user] Rate limiting TCP connections...

2008-08-17 Thread Steve
Norberto Bensa wrote: Is there a straightforward way to make my Gentoo box 'play fair' and not hog 100% of the bandwidth? If your router doesn't give you bandwidth and/or traffic shaping control, you can drop some packets. For example, the following rule will accept up to 50 packets per second

[gentoo-user] iFolder server...

2008-07-04 Thread Steve
Has anyone else played with iFolder on Gentoo? I followed these links: http://gentoo-wiki.com/HOWTO_iFolder http://www.ifolder.com/index.php/HowTos http://www.ifolder.com/index.php/HowTo:Building_iFolder_Enterprise_Server_on_Gentoo http://www.ifolder.com/index.php/HowTo:Building_Simple_Server_on

[gentoo-user] Slightly off-topic... "is there a web app in portage for...."

2008-04-18 Thread Steve
I want to be able to manage a sizeable number of reference manuals I have in various ebook formats - CHM; PDF etc. scattered around various PCs; on CDs etc. - and I'm looking for a web-app to help me organise them as a virtual reference library. I want to be able to tag the files by 'subject a

Re: [gentoo-user] [Probably off-topic] How do I find out what is consuming the bandwidth?

2008-02-29 Thread Steve
Alan wrote: Give iftop a look. great tool... unfortunately, even in promiscuous mode, it doesn't track TCP data except to/from the host on which it is running. I presume this means that my Netgear DSL router implements a switch as as opposed to a hub... Nice try though... -- gentoo-use

[gentoo-user] [Probably off-topic] How do I find out what is consuming the bandwidth?

2008-02-29 Thread Steve
Situation: There's a LAN with a Netgear ADSL router... heterogenous OS, including Gentoo, are installed on various PCs on the LAN. I'd like to know what communicating IPs are consuming most bandwidth, and to quantify how much bandwidth they are using... Ideally, I'd like to see a real-time lis

Re: [gentoo-user] Re: SSH brute force attacks and blacklist.py

2008-02-28 Thread Steve
Thanks for all your suggestions... I will look into fail2ban... that might be what I need... While I could crank BLOCKING_PERIOD for blacklist.py to an absurdly high value, this (AFAIK) will not persist blocks when the server is powered down or rebooted. I need to retain port 22 and can't ea

[gentoo-user] SSH brute force attacks and blacklist.py

2008-02-27 Thread Steve
recommendations for how to write something to do what I want from scratch... Steve -- gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] net-wireless/zd1211

2008-02-07 Thread Steve Buzonas
On Feb 7, 2008 3:19 AM, Arnau Bria <[EMAIL PROTECTED]> wrote: > On Wed, 6 Feb 2008 20:37:56 -0500 > Steve Buzonas wrote: > > Hi! > > > Hello, reading more about the driver it says that that driver is no > > longer maintained and it recommends zd1211rw which is

[gentoo-user] Horribly off-topic linux distro question...

2008-02-07 Thread Steve
In the context of online banking, where Windows of some flavour is the desktop OS, I see a substantial risk arising through spyware and/or viruses. I suspect that a neat way to mitigate this would be to run an OS from a CD which offers nothing more fancy than a basic web-browser. Is there any

Re: [gentoo-user] net-wireless/zd1211

2008-02-06 Thread Steve Buzonas
be able to find the driver in your kernel configuration by going to 'Device Drivers > Network Device Support > Wireless LAN > ZyDAS ZD1211/ZD1211B USB-wireless support '. Hope it helps. Steve Buzonas Jr.

Re: [gentoo-user] Re: Manifest question

2008-02-06 Thread Steve Buzonas
that. I just used digest for my local overlay yesterday. Does it still allow it, or do I have an outdated version of portage? Steve Buzonas Jr.

Re: [gentoo-user] To x86_64 or not to x86_64

2008-02-06 Thread Steve Buzonas
> I have been thinking of going to x86_64 mode but I'm wondering if > it's worth the trouble with multilib, chroot'ing, firefox-bin and other > compromises (admittedly some minor). I realize I should see some speed > increase but probably only in certain areas such as compiling. > I just switched

Re: [gentoo-user] Gentoo on Dell PowerEdge 2600 / 2800? AMI / LSI MegaRAID driver?

2007-12-23 Thread Steve Dommett
On Thursday 20 December 2007, Stroller wrote: > > ... I was expecting something > > similar to when I've hotplugged SATA drives on my desktop machine. > > What controller is in that, please? > > Does it do hardware RAID, or is it just a regular SATA controller? I've done it using both the onboard c

Re: [gentoo-user] Gentoo on Dell PowerEdge 2600 / 2800? AMI / LSI MegaRAID driver?

2007-12-19 Thread Steve Dommett
g similar to when I've hotplugged SATA drives on my desktop machine. We had to reboot the server to get it to see the replacement drive. Perhaps there's some /proc/ or /sys/ setting to trigger a rescan of the SCSI bus, but I couldn't find it. Other than those oddities the drive

Re: [gentoo-user] rsync via ssh

2007-11-04 Thread Steve Dommett
On Sunday 04 November 2007, Shawn Haggett wrote: > Roger Mason wrote: > How have you setup the passwordless ssh? If your using keys with the ssh > keyagent, then when the command is run in cron it wouldn't know where to > find your ssh-agent... > > Shawn I use a use a key with no password without

Re: [gentoo-user] rsync via ssh

2007-11-04 Thread Steve Dommett
On Sunday 04 November 2007, Roger Mason wrote: > Did you have to do anything special to make it work from cron? No, but then the crontab entry is simply: > 47 4 * * * /root/backup.sh The backup.sh is essentially: rdiff-backup \ --print-statistics \ --exclude /mnt \ --exclude /dev \ --ex

Re: [gentoo-user] rsync via ssh

2007-11-04 Thread Steve Dommett
/rdiff-backup.nongnu.org/ If you ignore the 'rdiff-backup-data' folder it creates then it's more or less identical to using rsync alone. HTH, Steve. -- [EMAIL PROTECTED] mailing list

Re: [gentoo-user] {OT} Video encoder

2007-11-03 Thread Steve Dommett
On Saturday 03 November 2007, Grant wrote: > I'm looking for an easy way to encode the video files I acquire into a > single format and level of quality. It would also be nice to be able > to easily burn a DVD of the resultant file that will play on a home > DVD player. I'm sure there are at leas

Re: [gentoo-user] Vixie Cron

2007-11-02 Thread Steve Dommett
On Friday 02 November 2007, sean wrote: > How is vixie-cron setup to accept remote connections? Eh? Why would a cron daemon need to accept connections, what does that even mean in the context of cron? -- [EMAIL PROTECTED] mailing list

  1   2   3   >