|
|||||||||||
|
debian-user-digest Digest V2007 #1898
From: <debian-user-digest-request(at)lists.debian.org>
Date: Thu Jul 05 2007 - 17:20:53 EDT
debian-user-digest Digest Volume 2007 : Issue 1898 Today's Topics: Re: Purpose of a hypervisor (was Re: [ Andrew Sackville-WestRe: Sarge install image (kernel 2.4) [ steef <steefvanduin@zonnet.nl> ]
Date: Thu, 5 Jul 2007 08:36:57 -0700
protocol="application/pgp-signature"; boundary="uLcrxnkzOGy8pA6s" Content-Disposition: inline --uLcrxnkzOGy8pA6s Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jul 03, 2007 at 09:09:02PM -0500, Ron Johnson wrote: > On 07/03/07 20:53, Roberto C. S=E1nchez wrote: > >On Tue, Jul 03, 2007 at 06:22:46PM -0500, Ron Johnson wrote: > >>On 07/03/07 13:25, Andrew Sackville-West wrote: > >>>Dom0: local file server (video, music, local backups) > >>> > >>> DomU1: firewall > >>I understand the need for a small, "separate" firewall. > >> > >>> DomU2: dmz mail/imaps server > >>> DomU3: dmz apache server > >>> > >>>the primary reason is as a testbed for me to learn stuff. It has the > >>>nice feature of segmenting functionality without more machines > >>>running.=20 > >>But then you are trying to statically do (allocate CPU and RAM) what=20 > >>the kernel can do so much better. > >> > >What about that if his webserver gets hacked, then his mail server is > >safe and vice versa? >=20 > If you own the web server, it's likely to be "easy" to crack other=20 > machines on the network. >=20 except to get to the other machines, there are only certain allowed ways. For example, assume, from Roberto's comment, that my webserver gets hacked. Which machines are now easier to hack?=20 Certainly nothing on my local (non-DMZ) LAN as those machines are subject to the same firewall rules as they were before. The rules from the net to local are the same as the rules from the DMZ to local.=20 Maybe the mail server is easier (how?) because you are into the DMZ, but the mail server has the same ports open as it always did: 25 and 993. So what's different.=20 I'm not asking to refute your claims, but to learn.=20 A --uLcrxnkzOGy8pA6s Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE-----
iD8DBQFGjRAZaIeIEqwil4YRAow1AJ9UAhpR1frxk5k1Zqz5l8aiNXkyEQCfcWRn
WILVSHMfxNTRwvg0dD5ikho=
Date: Thu, 5 Jul 2007 08:38:07 -0700
protocol="application/pgp-signature"; boundary="+/c+wG9PuVDVAlsu" Content-Disposition: inline --+/c+wG9PuVDVAlsu Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable
On Tue, Jul 03, 2007 at 10:01:40PM -0400, Douglas Allan Tutty wrote:
Because I'm inherently lazy? ;) I did look into this and got distracted. I'll take it up again. A --+/c+wG9PuVDVAlsu Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE-----
iD8DBQFGjRBeaIeIEqwil4YRAr3WAKDM/Zj4+soighOLTngEH6b/enedHQCgrHaD
gMjZf9K03xWNL0YUMutiLto=
Date: Thu, 5 Jul 2007 08:43:34 -0700
protocol="application/pgp-signature"; boundary="0OMWfJhzSPULbgPV" Content-Disposition: inline --0OMWfJhzSPULbgPV Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable
On Tue, Jul 03, 2007 at 10:00:35PM -0400, Douglas Allan Tutty wrote:
>=20 > Does this really give any more security than running the firewall as a > regular part of the main box? Is it as secure as a separate old > computer? These three (plus I suppose a commercial hardware firewall) > seem to be the choices. How do they compare for security? I don't really know, but the following things occur to me:
I don't think there is anything wrong with a debian machine on the net with its local firewall as the only thing protecting it. But I think if you want anything more sophisticated, some sort of seperate device is the way to go.=20 A --0OMWfJhzSPULbgPV Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE-----
iD8DBQFGjRGmaIeIEqwil4YRAmhZAJ98D9ukWGjYaGqNvCiZB2vY5us91QCggIKQ
2wVlNY2igsYyzVVgQ1WF3S8=
Date: Thu, 05 Jul 2007 12:44:00 -0400
Message-ID: Hello, On Debian Testing, if I try to upgrade digikam, aptitude wants to remove digikamimageplugins and kipi-plugins (the actual output is further below). Now, how do I know why these removals are necessary? And how do I find out if I should go ahead with the upgrade since, maybe the new package has the two packages built-in now? Upgrade output: $> sudo aptitude -sV dist-upgrade Reading package lists... Done Building dependency tree... Done Reading extended state information Initializing package states... Done Reading task descriptions... Done Building tag database... Done The following packages are BROKEN: libquicktime0 [2:0.9.7-5 -> 2:0.9.10+debian-0.3] The following NEW packages will be automatically installed: libkdcraw-runtime [0.1.0-2] libkdcraw0 [0.1.0-2] libkexiv2-1 [0.1.5-1+b1] The following packages will be automatically REMOVED: digikamimageplugins [2:0.8.2-4] kipi-plugins [0.1.2-3] The following NEW packages will be installed: libkdcraw-runtime [0.1.0-2] libkdcraw0 [0.1.0-2] libkexiv2-1 [0.1.5-1+b1] The following packages will be REMOVED: digikamimageplugins [2:0.8.2-4] kipi-plugins [0.1.2-3] The following packages will be upgraded: digikam [2:0.8.2-4 -> 2:0.9.2~beta3-1] 2 packages upgraded, 3 newly installed, 2 to remove and 0 not upgraded. Need to get 9869kB of archives. After unpacking 17.7MB will be freed. The following packages have unmet dependencies: libquicktime0: Depends: libavcodec1d (>= 0.cvs20070307) which is a virtual package.
Depends: libavutil1d (>= 0.cvs20070307) which is a
virtual package.
Resolving dependencies... The following actions will resolve these dependencies:
Keep the following packages at their current version:
digikam [2:0.8.2-4 (now)]
Score is -28 Accept this solution? [Y/n/q/?]
thanks,
Date: Thu, 05 Jul 2007 20:30:26 +0400
Message-Id:
Subject: install: client-error-not-possible
Package: install
cupsdoprint -P 'HPLaserJet1022' -J 'KDE Print Test' -H=20
'/var/run/cups/cups.sock:631' -U 'root' -o '=20
multiple-document-handling=3Dseparate-documents-uncollated-copies=20
orientation-requested=3D3' '/usr/share/apps/kdeprint/testprint.ps' :=20
execution failed with message:
Date: Thu, 05 Jul 2007 18:35:18 +0200
Message-Id: <1183653318.3231.8.camel@varga.sneaky56.no-ip.org> Content-Type: text/plain Content-Transfer-Encoding: 7bit Sorry, but my is not very clear, so: I tried to setup a new install (using the Lenny install CD (1)), with RAID1, crypto and LVM. Everything went fine during install and I even did execute the steps required as of (2). The only problem I got, was after the install/reboot, when the there seems to be a problem with LVM (3). I also encountered problems before with the Debian 4.0r0 CD which led me to try the Lenny CD. (1) [Debian GNU/Linux testing _Lenny_ - Official Snapshot i386 NETINST Binary-1 20070629-09:05] (2) http://wiki.debian.org/DebianInstaller/RAIDvsCrypto (3) mount: Mounting /dev/mapper/magelan-main.root on /root failed: No such device Thank you for your help on this one... tom
Date: Thu, 05 Jul 2007 13:34:16 -0400
Message-ID: Daniel Burrows wrote: >> When I try to upgrade my Debian Testing machine, aptitude wants to remove >> these packages (been happening for some days now; I have been putting off >> upgrading in the hope that the problem would be resolved with newer >> versions of packages): >> dbus-1-utils [1.0.2-1] >> libssp0 > > Looks to me like dbus-1-utils has been folded into the dbus package. > libssp0 is only available in experimental -- it's been removed from > stable and testing. Probably it's obsolete and not needed any more? > > Daniel > > Thanks everyone. I have proceeded with upgrading dbus. Hopefully nothing will go amiss (main concerns are auto-mounting removable devices). ->HS
Date: Thu, 5 Jul 2007 20:07:48 +0200
Message-ID: <20070705180748.GA11520@localhost> Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable
On Wed, Jul 04, 2007 at 22:11:16 -0500, Sam Leon wrote:
Helix-player, available as a Debian package for i386 and powerpc, is capable of handling "Basic SMIL 2.0" (according to the package description; I have never had an occasion to try it myself).=20 Another thing: Please stop using replies to other list messages as a way to start new threads. Many email programs use the In-Reply-To header as the primary basis for threading; this means that your message will be included in an unrelated thread, regardless of the changed subject line. Here is what that looks like with Mutt: 1 L 04.07.07 Tony Heal ( 10K) upgrading to etch 2 L 04.07.07 Sam Leon (0.3K) =E2=94=9C=E2=94=80>Playing =SMIL File 3 L 04.07.07 michael AT estone DOT ca (5.3K) =E2=94=9C=E2=94=80>Re: upgr= ading to etch 4 L 04.07.07 Ivan Aleman (4.4K) =E2=94=9C=E2=94=80> 5 L 04.07.07 Daniel Burrows (4.0K) =E2=94=94=E2=94=80> This practice of "thread-jacking" is problematic:
--=20 Regards, | http://users.icfo.es/Florian.Kulzer Florian |
Date: Thu, 05 Jul 2007 21:50:39 +0300
debian-user@lists.debian.org
Message-ID: <468D3D7F.5070501@gmail.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE-----
Hey list members,... few month ago i said that i post some circutes here but becouse of some bad luck and really hard semester i didn't post them. i uploaded it onto my project on sf (SCEX) btw sorry that i didn't upload the files to the wiki (i can't accses for some strange reason). here is the circutes: https://sourceforge.net/project/showfiles.php?group_id=181653&package_id=237947 i hope to do all the 16 FlipFlops and some counters. also some RAMs (decoder read/ not write CS and all) P.S how can change the name of some subcircutes? how can i save a changable circute (that the user could just change the number of inputs and the compunent will adjust)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Date: Thu, 05 Jul 2007 13:57:58 -0500
Message-id: <468D3F36.5010702@acu.edu> Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT
Kent West wrote:
>> Kent West wrote: >> >>> Running memtest86 from a Knoppix LiveCD on an HP pavilion ze4400 >>> laptop. No errors, but the laptop powers off consistently after >>> about 35 minutes of testing. >>> >> >> If that is consistently 35 minutes then it makes me wonder how the >> BIOS power saving settings are configured. I would guess that the >> BIOS is not seeing any input and therefore turning the machine off >> because it thinks it is idle. I believe that after the OS is booted >> it takes over these things. But memtest may not be programmed to do >> this for that machine while the linux kernel in knoppix does. >> >> Just a guess... >> >> > Not a bad guess. But if that's the case, it must be firm-coded into > the BIOS; I could find no power-saving options in the BIOS setup > screens. I had not thought about memtest86 perhaps looking idle to the > system whereas sitting at a Knoppix boot prompt would not. Your idea > gives me an idea for another test; tomorrow I'll see if I can load > memtest86 but pause it so it doesn't check memory, and see if it still > powers off at 35 mins; if so, that would seem to eliminate faulty RAM > as being the cause of the power-down. > > Thanks! > Nope; the BIOS is not shutting down the laptop. I paused the memtest for five minutes, and then let it continue; the shutdown occurred five minutes later than it had been shutting down. So I restarted the memtest, but this time changed the settings to start with test #7; now it shuts down within about one minute. (I tested this a couple of times; I also started with #6 once and it ran for a few minutes, then I changed it to test #7, and it ran for a minute or so and then shut down.) So the memtest is somehow triggering the shutdown of the laptop. Is this indicative of bad RAM, even though I've seen no other indication of bad RAM, or is it just a coincidence that some pattern during the random number test is triggering a power-off? Hmmm.... -- Kent
Date: Thu, 5 Jul 2007 20:54:48 +0200
From: Florian Kulzer <florian.kulzer+debian@icfo.es>
To: debian-user@lists.debian.org
Subject: Re: backports
Message-ID: <20070705185448.GB11520@localhost>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
On Thu, Jul 05, 2007 at 09:44:55 +0100, Chris Lale wrote:
[...]
Date: Thu, 5 Jul 2007 20:25:09 +0100 From: John K Masters <johnmasters@oxtedonline.net> To: Debian Users <debian-user@lists.debian.org> Subject: Upgrade on box not on Net Message-ID: <20070705192509.GA5295@spookie1.spookiegate> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Is it possible to upgrade a box not connected to the Internet? I run etch on my home desktop and sid on my laptop but I have a machine at work that is not, and never likely to be, connected to the internet. It currently has etch installed off the 3 DVD set which I downloaded via jigdo. I know I can create updated DVDs of etch using jigdo but how could I upgrade from etch to sid with no internet connection? Is this possible or even advisable? The main reason for wanting to upgrade is the huge difference in Open Office 2.0 to 2.2. Or could I just install OO2.2 over the stable package? Regards, John -- War is God's way of teaching Americans geography Ambrose Bierce (1842 - 1914)
Date: Thu, 5 Jul 2007 15:35:39 -0400
From: Celejar <celejar@gmail.com>
To: debian-user@lists.debian.org
Subject: Re: 'file' doesn't recognize my Abiword .ode file
Message-Id: <20070705153539.294540bd.celejar@gmail.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
On Wed, 04 Jul 2007 13:35:25 +0200
Mathias Brodala <info@noctus.net> wrote:
Date: Thu, 05 Jul 2007 12:39:34 -0700
From: Alan Ianson <agianson@gmail.com>
To: debian-user@lists.debian.org
Subject: Re: Sarge install image (kernel 2.4)
Message-id: <200707051239.34059.agianson@gmail.com>
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7bit
Content-disposition: inline
On Wed July 4 2007 01:28, Gudjon I. Gudjonsson wrote:
Date: Thu, 5 Jul 2007 16:02:44 -0400
From: Celejar <celejar@gmail.com>
To: debian-user@lists.debian.org
Subject: Re: Upgrade on box not on Net
Message-Id: <20070705160244.2693edd1.celejar@gmail.com>
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
On Thu, 5 Jul 2007 20:25:09 +0100
John K Masters <johnmasters@oxtedonline.net> wrote:
Date: Wed, 04 Jul 2007 21:05:17 +0000
From: steef <steefvanduin@zonnet.nl>
To: debian <debian-user@lists.debian.org>
Subject: Re: Sarge install image (kernel 2.4)
Message-ID: <468C0B8D.8010602@zonnet.nl>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Gudjon I. Gudjonsson wrote:
This archive was generated by hypermail 2.1.8 : Fri Jul 06 2007 - 21:07:57 EDT |
||||||||||
|
|||||||||||