Date: Fri, 3 Aug 2007 10:11:43 +0200 (CEST)
From: pizzapie_linuxanchovies <embedded@verizon.net>
To: debian-user@lists.debian.org
Subject: Re: ifup fails but iwconfig
Message-Id:
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable
Agricolae--thanks for the suggestion. There is no Network-Manager on my =
install, but fortunately your idea kept me going long enough to *nearly* =
find the solution.
Turns out I made a mistake in my original post. If the ifup command fail=
s, then the iwconfig command will also fail:
$sudo ifup rausb0
Error for wireless request "Set Mode" (8B06)
SET failed on device rausb0 ; Network is down.
Error for wireless request "Set Encode" (8B2A) :
SET failed on device rausb0 ; Network is down.
Error for wireless request "Set Frequency" (8B04) :
SET failed on device rausb0 ; Network is down.
Error for wireless request "Set ESSID" (8B1A) :
SET failed on device rausb0 ; Network is down.
$sudo iwconfig rausb0 mode Managed
Error for wireless request "Set Mode" (8B06)
SET failed on device rausb0 ; Network is down.
All the above stuff occurs whenever the rausb0 interface is down (rausb0 =
is not shown in response to a simple "ifconfig" command):
~$ ifconfig
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:31 errors:0 dropped:0 overruns:0 frame:0
TX packets:31 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2068 (2.0 KiB) TX bytes:2068 (2.0 KiB)
~$
My key insight was how I got to this state (call it state #1) in which ra=
usb0 is down. Of course, you are in this state at boot, before dhclient h=
as run for the 1st time on rausb0. Also, you can stay in state #1 if you =
let dhclient run all the way to the end WITHOUT INTERRUPTING IT (either a=
t boot, or by restarting the networking service). No DHCP offer will be r=
eceived and eventually dhclient says it could not bring up rausb0.
I get into a very different state (call it state #2) if I interrupt dhcli=
ent (with ^C) in the middle of all its DHCPDISCOVERs. By interrupting dhc=
lient, dhclient never has a chance to get to the point where it says it c=
ould not bring up rausb0. In state #2, a simple "ifconfig" command will s=
how both lo and rausb0. However, no IPv4 address will be shown for rausb0=
because rausb0 isn't really working even though the system considers it =
to be "up".
In state #2, with rausb0 "up" but not working, if I do:
$sudo ifup rausb0
then in response I get a message saying that rausb0 is already up.
In state #2, I can use the manual iwconfig commands and dhclient to get w=
ireless working, as in my previous post:
$ sudo iwconfig rausb0 essid (deleted)
$ sudo iwconfig rausb0 mode Managed
$ sudo iwconfig rausb0 channel 2
$ sudo iwconfig rausb0 key (deleted)
$ sudo dhclient rausb0
Internet Software Consortium DHCP Client 2.0pl5
...
DHCPDISCOVER on rausb0 to 255.255.255.255 port 67 interval 10
DHCPOFFER from 10.10.10.1
Alternatively, in state #2, I discovered I can just say:
$sudo ifup --force rausb0
The --force argument avoids the "rausb0 already up" message, and essentia=
lly does the same thing as manually doing the iwconfig/dhclient commands.
So in fact, I MUST be in state #2 and use one of these 2 methods to get m=
y wireless working.
But what I REALLY want is to be able to get wireless working from state #=
1--where rausb0 is currently down. Obviously this is the state you're in =
at boot time. But while in state #1, any iwconfig commands results in the=
error "SET failed on device rausb0 ; Network is down. Error for wireless=
request...". And it is necessary for the iwconfig commands to succeed be=
fore the dhclient command will succeed.
So I see a catch-22 bug. rausb0 must be up in order for the iwconfig comm=
ands to succeed But the iwconfig commands must succeed in order to *trul=
y* bring rausb0 up (=3Dhave dhclient succeed). The only workaround is ent=
ering that weird state (state #2) where rausb0 is up but dhclient hasn't =
yet succeeded.
Now that's what I call messed up. Any ideas for a fix?
Pizzapie
Date: Fri, 03 Aug 2007 11:33:09 +0200
From: Adrian Chapela <achapela.rexistros@gmail.com>
To: Debian Users <debian-user@lists.debian.org>
Subject: Looking for driver Compal EL80
Message-ID: <46B2F655.1040607@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Hello,
I am looking for a driver for the wireless / bluetooth switcher of a
Compal El80 laptop. Some tips ??
I can't find this to active / de-active the wireless or the bluetooth by
soft. The laptop has a hardware switch but it also has a software switch
to active BT or Wireless or two at time.
Can you say me the right direction to find the driver ??
Thank you.
Date: Fri, 03 Aug 2007 11:37:39 +0200
From: =?ISO-8859-1?Q?J=F6rg-Volker_Peetz?= <peetz@scai.fraunhofer.de>
To: debian-user@lists.debian.org
Subject: Re: Getting Firefox/Iceweasel to open text/pgp files?
Message-ID:
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Not an answer to your question, but an alternative:
aptitude changelog <package-name>
--=20
Regards,
J=F6rg-Volker.
Date: Fri, 3 Aug 2007 12:29:38 +0200
From: "Fabrizio Pedersoli" <f.peder@gmail.com>
To: debian-user@lists.debian.org
Subject: Re: Adaptec 2100s & Debian stable
Message-ID: <53b66b650708030329q4349b0dfra03d35281a6e3771@mail.gmail.com>
Content-Type: multipart/alternative;
boundary="----=_Part_71556_14279509.1186136978131"
------=_Part_71556_14279509.1186136978131
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
root (hd0,0)
kernel /boot/vmlinuz.... root=/dev/sda1 ro
initird ....
savedefault
that's grub menu.lst. The strange thing is that with the old stable Debian
(sarge) everthing work s fine. Is there any way to boot Debian etch witch a
2.4 series kernel? thanks
Fabrizio.
2007/8/3, Douglas Allan Tutty <dtutty@porchlight.ca>:
>
> On Thu, Aug 02, 2007 at 06:54:51PM +0200, Fabrizio Pedersoli wrote:
> > i have a big problem with an Adaptec 2100s scsi controller, which
> manages 2
> > disks in RAID-0. the Debian installer found correctly that raid and the
> > installation process terminates fine. But when i reboot, after linux
> loads
> > i20 modules and founds hdd... it stops saying "waiting for root
> filesystem".
> > any suggestions??? thanks (and sorry for my english :D).
>
> What is your kernel command line, from /boot/grub/menu.lst?
>
> Doug.
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
>
------=_Part_71556_14279509.1186136978131
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
root (hd0,0)<br>kernel /boot/vmlinuz.... root=/dev/sda1 ro<br>initird ....<br>savedefault<br><br>that's grub menu.lst. The strange thing is that with the old stable Debian (sarge) everthing work s fine. Is there any way to boot Debian etch witch a
2.4 series kernel? thanks<br><br>Fabrizio.<br><br><div><span class="gmail_quote">2007/8/3, Douglas Allan Tutty <<a href="mailto:dtutty@porchlight.ca">dtutty@porchlight.ca</a>>:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Thu, Aug 02, 2007 at 06:54:51PM +0200, Fabrizio Pedersoli wrote:<br>> i have a big problem with an Adaptec 2100s scsi controller, which manages 2<br>> disks in RAID-0. the Debian installer found correctly that raid and the
<br>> installation process terminates fine. But when i reboot, after linux loads<br>> i20 modules and founds hdd... it stops saying "waiting for root filesystem".<br>> any suggestions??? thanks (and sorry for my english :D).
<br><br>What is your kernel command line, from /boot/grub/menu.lst?<br><br>Doug.<br><br><br>--<br>To UNSUBSCRIBE, email to <a href="mailto:debian-user-REQUEST@lists.debian.org">debian-user-REQUEST@lists.debian.org</a><br>
with a subject of "unsubscribe". Trouble? Contact <a href="mailto:listmaster@lists.debian.org">listmaster@lists.debian.org</a><br><br></blockquote></div><br>
------=_Part_71556_14279509.1186136978131--
Date: Fri, 3 Aug 2007 03:32:50 -0700 (PDT)
From: Serena Cantor <qipaishi2006@yahoo.com>
To: debian-user@lists.debian.org
Subject: Re: how to set up a wireless network?
Message-ID: <828236.75008.qm@web35706.mail.mud.yahoo.com>
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Thank Bert Deferme, Ari Constancio and Hal Vaughan!
Do you mean that Wireless-HOWTO is wrong?
http://ftp.sunet.se/LDP/HOWTO/text/Wireless-HOWTO
All right, I will buy 2 wireless network card.
=09
=20
_________________________________________________________________________=
___________Ready for the edge of your seat?=20
Check out tonight's top picks on Yahoo! TV.=20
http://tv.yahoo.com/
Date: Fri, 3 Aug 2007 12:37:35 +0200
From: =?UTF-8?Q?Cs=C3=A1nyi_P=C3=A1l?= <csanyipal@csanyi-pal.info>
To: Debian User <debian-user@lists.debian.org>
Subject: D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs - supported?
Message-ID: <20070803103735.GA4527@csanyi-pal.info>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Hello!
Is the
D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs
supported by Debian GNU/Linux Etch?
If I try to compile linux-image-2.6.18 from source, in menuconfig can't to find
driver for this card.
Is there some experience with this PCI Ethernet card on Debian Etch out there?
Any advices will be apreciated!
--
Regards, Paul Csanyi
http://www.freewebs.com/csanyi-pal/index.htm
Date: Fri, 3 Aug 2007 13:03:39 +0200 (CEST)
From: pinniped <cirilo_bernardo@yahoo.com>
To: debian-user@lists.debian.org
Subject: how to set up a wireless network?
Message-Id: <listhandler=2&site=www.debianhelp.org&nid=9290&pid=32809&cid=32817&uid=76&tid=79&301cd442df769623604b41d4e0785f17@www.debianhelp.org>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable
(quote)
Bluetooth uses the same frequency range as 802.11b and g ...
(end quote)
That's right, and you're also right about the power meant to be limited t=
o less than a "normal" 802.11 transceiver. I've mostly seen Bluetooth ru=
n as an extra protocol on top of 802.11b/g and thus no extra gizmos and n=
o reduced power limit; the USB Bluetooth gizmos do have the power output =
limited and these specialized gizmos were pretty much a waste of money. A=
ll in all I never had a use for Bluetooth - I always saw it as a nice way=
to cripple your otherwise OK 802.11 network. There is absolutely nothin=
g in the Bluetooth protocol spec that hadn't already been accomplished by=
other tools, in many cases over a decade before (so much for the "future=
" hype). Now "Zigbee" is being touted as a "Bluetooth killer" - what is i=
t? Why, lower-power 802.11. Sound familiar? Wasn't that Bluetooth? Yet m=
ore hype. However, Zigbee *may* have a use in inherently very-low power =
gizmos with very short range - for example tracking devices in laptops to=
determine where they are in a building.=20
I'm sure people can think of more sensible applications; I just have non=
e of my own.
Going back to the original post, as for comments like "you absolutely mus=
t be able to see the antenna", they are generally made by people who don'=
t really know what they're talking about. There's a hell of a lot of non=
sense on the internet. (I'm sure I contribute to that on occasion). But t=
he original quote gives me the impression that the author is talking abou=
t getting a signal in a "public park" in which case he's pretty much righ=
t - the frequency used by 802.11 will be severely attenuated by a tree so=
in *many* cases if you can't see the antenna, you probably won't get a s=
ignal. In reality you get "multipaths" or the antenna may be behind some =
object which doesn't block much of the signal and you manage to get a wir=
eless signal after all - all in all, just switch on that laptop and see w=
hat happens and in general ignore the "thou shalt not" statements.
Date: Fri, 3 Aug 2007 13:17:32 +0200 (CEST)
From: pinniped <cirilo_bernardo@yahoo.com>
To: debian-user@lists.debian.org
Subject: Adaptec 2100s & Debian stable
Message-Id: <listhandler=2&site=www.debianhelp.org&nid=9279&pid=32815&cid=32818&uid=76&tid=79&8ae47cd674c8779d26289400fbebc319@www.debianhelp.org>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable
I remember a "waiting for root filesystem" when I was using a software RA=
ID and my drivers didn't load. I had to edit /etc/mkinitramfs/modules an=
d make sure my "md" driver was added to the initrd image.
It is possible that you need some driver to load to access your RAID? If=
you wait, say, 5 minutes are you dumped into a 'busybox' console? If you=
are dumped to busybox you have a very good chance of troubleshooting the=
system. This is what happened to me when I had problems with my software=
RAID.
Date: Fri, 3 Aug 2007 17:42:22 +0530
From: "Masatran, R. Deepak" <masatran@research.iiit.ac.in>
To: debian-user@lists.debian.org
Subject: Start booting hard drive, from a CD
Message-ID: <20070803121222.GA28194@research.iiit.ac.in>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
I am unable to boot from my hard drive due to some problem. As a temporary
solution, I want to make a CD, and use it to start booting the hard drive.
How can I make such a CD? Thanks!
--
Masatran, R. Deepak <http://research.iiit.ac.in/~masatran/>
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
Date: Fri, 03 Aug 2007 07:27:52 -0500
From: Ron Johnson <ron.l.johnson@cox.net>
To: Debian User <debian-user@lists.debian.org>
Subject: Re: D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs - supported?
Message-ID: <46B31F48.6020904@cox.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 08/03/07 05:37, Cs=C3=A1nyi P=C3=A1l wrote:
> Hello!
>=20
> Is the D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs=20
> supported by Debian GNU/Linux Etch?
>=20
>=20
> If I try to compile linux-image-2.6.18 from source, in menuconfig
> can't to find driver for this card.
Which driver, exactly, are you looking for?
> Is there some experience with this PCI Ethernet card on Debian
> Etch out there?
>=20
> Any advices will be apreciated!
What does Google say when you search for "linux 2.6 DFE-530TX"?
- --
Ron Johnson, Jr.
Jefferson LA USA
Give a man a fish, and he eats for a day.
Hit him with a fish, and he goes away for good!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGsx9IS9HxQb37XmcRAqVGAJwK1GIlEKINIjIK7x6/5c54UQNdeACg6FwH
6oMrlY3V2wQbkfrBLwvLuGM=3D
=3D3Ufw
-----END PGP SIGNATURE-----
Date: Fri, 3 Aug 2007 14:47:14 +0200 (CEST)
From: Stephane Durieux <durieux42@yahoo.fr>
To: debian-user@lists.debian.org
Subject: Re: nfs problem while internet access broken
Message-ID: <520199.54429.qm@web27806.mail.ukl.yahoo.com>
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
--- Bob Proulx <bob@proulx.com> a =E9crit :
> Stephane Durieux wrote:
> > client <-> server <-X-> internet=20
> >=20
> > That is exactly my issue . Excuse me for not being
> > clear ! Anyway, has somebody a solution .
> > I have read that client and server must be able to
> > make a reverse resolution of the client and the
> > server, but I am not sure of it and I don t have
> an in
> > depth knowledge of nfs .=20
>=20
> The nfs server will try to do a dns lookup of the
> client ip address to
> find the client hostname for the purpose of logging
> this information
> to the system logs. One the server can the client
> IP address be
> resolved?
>=20
> $ ssh server
> $ host A.B.C.D # look up client IP address
>=20
> Does that succeed? Example:
>=20
> $ ssh www.example.com
> host 208.77.188.166
> 166.188.77.208.in-addr.arpa domain name pointer
> www.example.com.
>=20
> I suspect that your DNS on the server is not
> functioning.
>=20
I have noticed that my clients are not declared in
/etc/hosts if I put them in /etc/hosts (and in nis
table to be useful) everything is find.
Nevertheless I don t understand how the nfs can make a
resolution via dns of a a client whith a private
address=20
Perhaps does the server reply it it s impossible and
everything is fine to log it=20
But thanks a lot, it s certainly the SYSTEM LOG that
is implied ... I ll check it ... ...now it seems me a
little bit more logical !
I was so lost that I have thought they were magical
dark spirits behind this :)=20
=20
___________________________________________________________________=
__________=20
Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! M=
ail=20
Date: Fri, 3 Aug 2007 14:56:16 +0200
From: =?UTF-8?Q?Cs=C3=A1nyi_P=C3=A1l?= <csanyipal@csanyi-pal.info>
To: debian-user@lists.debian.org
Subject: Re: D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs - supported?
Message-ID: <20070803125616.GE4527@csanyi-pal.info>
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Fri, Aug 03, 2007 at 07:27:52AM -0500, Ron Johnson wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>=20
> On 08/03/07 05:37, Cs=E1nyi P=E1l wrote:
> > Hello!
> >=20
> > Is the D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs=20
> > supported by Debian GNU/Linux Etch?
> >=20
> >=20
> > If I try to compile linux-image-2.6.18 from source, in menuconfig
> > can't to find driver for this card.
>=20
> Which driver, exactly, are you looking for?
If I could to know.
> > Is there some experience with this PCI Ethernet card on Debian
> > Etch out there?
> >=20
> > Any advices will be apreciated!
>=20
> What does Google say when you search for "linux 2.6 DFE-530TX"?
Thanks!
I find a Forum on the LinuxQuestions.org [1],
and there find that that for this ethernet card the proper driver is
via-rhine.
I go to by this card now. :)
[1] http://www.linuxquestions.org/questions/showthread.php?t=3D374449
--=20
Regards, Paul Csanyi
http://www.freewebs.com/csanyi-pal/index.htm
Date: Fri, 3 Aug 2007 09:02:19 -0400
From: Douglas Allan Tutty <dtutty@porchlight.ca>
To: debian-user@lists.debian.org
Subject: Re: Adaptec 2100s & Debian stable
Message-ID: <20070803130219.GA6466@titan>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
On Fri, Aug 03, 2007 at 12:29:38PM +0200, Fabrizio Pedersoli wrote:
> 2007/8/3, Douglas Allan Tutty <dtutty@porchlight.ca>:
> > On Thu, Aug 02, 2007 at 06:54:51PM +0200, Fabrizio Pedersoli wrote:
> > > i have a big problem with an Adaptec 2100s scsi controller, which
> > > manages 2 disks in RAID-0. the Debian installer found correctly
> > > that raid and the installation process terminates fine. But when i
> > > reboot, after linux loads i20 modules and founds hdd... it stops
> > > saying "waiting for root filesystem". any suggestions??? thanks
> > > (and sorry for my english :D).
> >
> > What is your kernel command line, from /boot/grub/menu.lst?
> >
> > Doug.
> >
>> root (hd0,0)
> kernel /boot/vmlinuz.... root=/dev/sda1 ro initird .... savedefault
>
> that's grub menu.lst. The strange thing is that with the old stable
> Debian (sarge) everthing work s fine. Is there any way to boot Debian
> etch witch a 2.4 series kernel? thanks
root=/dev/sda1 gives a single partition, which is fine if the hardware
raid card is really recognized as hardware raid since it will present
what looks like one dist to the kernel. You need to find out if the
module for the card is being loaded by the initrd; I don't know how to
do that.
Doug.
Date: Fri, 3 Aug 2007 09:03:58 -0400
From: Douglas Allan Tutty <dtutty@porchlight.ca>
To: debian-user@lists.debian.org
Subject: Re: Start booting hard drive, from a CD
Message-ID: <20070803130358.GB6466@titan>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
On Fri, Aug 03, 2007 at 05:42:22PM +0530, Masatran, R. Deepak wrote:
> I am unable to boot from my hard drive due to some problem. As a temporary
> solution, I want to make a CD, and use it to start booting the hard drive.
> How can I make such a CD? Thanks!
The answer will depend on why you can't boot from hard drive in the
first place.
Doug.
Date: Fri, 3 Aug 2007 09:07:18 -0400
From: Douglas Allan Tutty <dtutty@porchlight.ca>
To: debian-user@lists.debian.org
Subject: Re: nfs problem while internet access broken
Message-ID: <20070803130718.GC6466@titan>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
On Fri, Aug 03, 2007 at 02:47:14PM +0200, Stephane Durieux wrote:
> I have noticed that my clients are not declared in
> /etc/hosts if I put them in /etc/hosts (and in nis
> table to be useful) everything is find.
>
> Nevertheless I don t understand how the nfs can make a
> resolution via dns of a a client whith a private
> address
> Perhaps does the server reply it it s impossible and
> everything is fine to log it
>
/etc/nsswitch.conf (name service switch conf) has the line:
hosts: files dns
This means that when the resolver tries to find a host it will first
look in the files on the system (e.g. /etc/hosts) before doing a dns
search.
Doug.
Date: Fri, 3 Aug 2007 18:32:17 +0530
From: "Masatran, R. Deepak" <masatran@research.iiit.ac.in>
To: debian-user@lists.debian.org
Subject: Debian Live CD for AMD64 from Etch?
Message-ID: <20070803130217.GB28194@research.iiit.ac.in>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Which Debian Live CD is for AMD64 from Etch? I found only
<http://live.debian.net/debian-cd/4.0_r0-rc1/amd64/iso-cd/debian-live-40r0-rc1-amd64-standard-CD.iso>.
By the way, is the above image
1. RC1 of Live CD of Etch? OR
2. Live CD of RC1 of Etch?
--
Masatran, R. Deepak <http://research.iiit.ac.in/~masatran/>
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
Date: Fri, 03 Aug 2007 08:15:38 -0500
From: Rodney Richison <rodney@rcrcomputing.com>
To: debian-user@lists.debian.org
Subject: Re: Security newbie?
Message-ID: <46B32A7A.6010504@rcrcomputing.com>
Content-Type: multipart/alternative;
boundary="------------040305030906070006030901"
This is a multi-part message in MIME format.
--------------040305030906070006030901
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Art Edwards wrote:
>
> I've been running debian @ home and @ work, for years, had no indication
> of attacks. Over the last few days, my iptables firewall seemed simply
> to stop. I checked my auth log file to find many, many attempts to break
> in. My firewall was very simple. I have since added rules to drop
> packets from offending IP addresses. So, I have a couple of very basic
> questions:
>
> 1. Are there repositories of offending IP addresses to block? Can/should
> one contribute to these?
>
> 2. The attacks never use the same user name more than once. Is there a
> way to block access, even temporarily, from an IP address after a set
> number of attempts, even if the attempts use different user names?
>
> 3. Are there other obvious things I should be doing?
>
>
ssh, by it's design is insecure. It SHOULD incorporate some means of
limiting password attempts. It does not! Using alternate ports can be a
pain in the butt as some programs (like webmin "filesystem backup) do
not support alternate ports. I suggest 2 methods, fail2ban and a
firewall if you must allow password logins. You can set the firewall to
allow only certain ip's or ip ranges. But do not get to comfortable with
a firewall ONLY solution. The first time the local firewall goes down,
or is taken down and forgotten to re-enable, you'll get compromised.
Again, the best solution would be for ssh to incorporate a solution,
thus if ssh is started, the solution is started...
>
>
--
This message has been scanned for viruses and dangerous content by RCRnet, and is believed to be clean.
--------------040305030906070006030901
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<br>
Art Edwards wrote:
<blockquote cite="mid:200707181704.l6IH4slN018426@bell.kirtland.af.mil"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="MS Exchange Server version 6.5.6944.0">
<title>Security newbie?</title>
<!-- Converted from text/plain format -->
<p><font size="2">I've been running debian @ home and @ work, for
years, had no indication </font>
<br>
<font size="2">of attacks. Over the last few days, my iptables
firewall seemed simply </font>
<br>
<font size="2">to stop. I checked my auth log file to find many, many
attempts to break </font>
<br>
<font size="2">in. My firewall was very simple. I have since added
rules to drop </font>
<br>
<font size="2">packets from offending IP addresses. So, I have a
couple of very basic </font>
<br>
<font size="2">questions:</font>
</p>
<p><font size="2">1. Are there repositories of offending IP addresses
to block? Can/should </font>
<br>
<font size="2">one contribute to these?</font>
</p>
<p><font size="2">2. The attacks never use the same user name more
than once. Is there a </font>
<br>
<font size="2">way to block access, even temporarily, from an IP
address after a set </font>
<br>
<font size="2">number of attempts, even if the attempts use different
user names?</font>
</p>
<p><font size="2">3. Are there other obvious things I should be doing?</font>
</p>
<p><font size="2"><br>
</font></p>
</blockquote>
ssh, by it's design is insecure. It SHOULD incorporate some means of
limiting password attempts. It does not! Using alternate ports can be a
pain in the butt as some programs (like webmin "filesystem backup) do
not support alternate ports. I suggest 2 methods, fail2ban and a
firewall if you must allow password logins. You can set the firewall to
allow only certain ip's or ip ranges. But do not get to comfortable
with a firewall ONLY solution. The first time the local firewall goes
down, or is taken down and forgotten to re-enable, you'll get
compromised. <br>
<br>
Again, the best solution would be for ssh to incorporate a solution,
thus if ssh is started, the solution is started... <br>
<br>
<br>
<blockquote cite="mid:200707181704.l6IH4slN018426@bell.kirtland.af.mil"
type="cite">
<p><font size="2"></font>
</p>
</blockquote>
</body>
<br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.rcrnet.net/"><b>RCRnet</b></a>, and is
<br />believed to be clean.
</html>
--------------040305030906070006030901--
End of debian-user-digest Digest V2007 Issue #2090
**************************************************
Received on Fri Aug 3 09:46:30 2007