Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

debian-user-digest Digest V2007 #2090

From: <debian-user-digest-request(at)lists.debian.org>
Date: Fri Aug 03 2007 - 09:49:43 EDT


Content-Type: text/plain

debian-user-digest Digest Volume 2007 : Issue 2090

Today's Topics:

  Re: ifup fails but iwconfig           [ pizzapie_linuxanchovies  ]
  Re: nfs problem while internet acces  [ Stephane Durieux 

Date: Fri, 3 Aug 2007 10:11:43 +0200 (CEST) From: pizzapie_linuxanchovies <embedded@verizon.net> To: debian-user@lists.debian.org
Subject: Re: ifup fails but iwconfig

Message-Id: 
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Agricolae--thanks for the suggestion. There is no Network-Manager on my = install, but fortunately your idea kept me going long enough to *nearly* = find the solution.

Turns out I made a mistake in my original post. If the ifup command fail= s, then the iwconfig command will also fail:

$sudo ifup rausb0

Error for wireless request "Set Mode" (8B06) SET failed on device rausb0 ; Network is down. Error for wireless request "Set Encode" (8B2A) : SET failed on device rausb0 ; Network is down. Error for wireless request "Set Frequency" (8B04) : SET failed on device rausb0 ; Network is down. Error for wireless request "Set ESSID" (8B1A) : SET failed on device rausb0 ; Network is down.

Do you need help?X

$sudo iwconfig rausb0 mode Managed

Error for wireless request "Set Mode" (8B06) SET failed on device rausb0 ; Network is down.



All the above stuff occurs whenever the rausb0 interface is down (rausb0 = is not shown in response to a simple "ifconfig" command): ~$ ifconfig
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:31 errors:0 dropped:0 overruns:0 frame:0
TX packets:31 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
Do you need more help?X

RX bytes:2068 (2.0 KiB) TX bytes:2068 (2.0 KiB) ~$
My key insight was how I got to this state (call it state #1) in which ra=
usb0 is down. Of course, you are in this state at boot, before dhclient h=
as run for the 1st time on rausb0. Also, you can stay in state #1 if you =
let dhclient run all the way to the end WITHOUT INTERRUPTING IT (either a=
t boot, or by restarting the networking service). No DHCP offer will be r=
eceived and eventually dhclient says it could not bring up rausb0.
I get into a very different state (call it state #2) if I interrupt dhcli=
ent (with ^C) in the middle of all its DHCPDISCOVERs. By interrupting dhc=
lient, dhclient never has a chance to get to the point where it says it c=
ould not bring up rausb0. In state #2, a simple "ifconfig" command will s=
how both lo and rausb0. However, no IPv4 address will be shown for rausb0=
 because rausb0 isn't really working even though the system considers it =
to be "up".

In state #2, with rausb0 "up" but not working, if I do:
$sudo ifup rausb0

then in response I get a message saying that rausb0 is already up.

In state #2, I can use the manual iwconfig commands and dhclient to get w= ireless working, as in my previous post:
$ sudo iwconfig rausb0 essid (deleted)
$ sudo iwconfig rausb0 mode Managed
$ sudo iwconfig rausb0 channel 2
$ sudo iwconfig rausb0 key (deleted)
$ sudo dhclient rausb0

Internet Software Consortium DHCP Client 2.0pl5 ...
DHCPDISCOVER on rausb0 to 255.255.255.255 port 67 interval 10 DHCPOFFER from 10.10.10.1

Alternatively, in state #2, I discovered I can just say:
$sudo ifup --force rausb0

The --force argument avoids the "rausb0 already up" message, and essentia= lly does the same thing as manually doing the iwconfig/dhclient commands.

So in fact, I MUST be in state #2 and use one of these 2 methods to get m= y wireless working.

But what I REALLY want is to be able to get wireless working from state #=
1--where rausb0 is currently down. Obviously this is the state you're in =
at boot time. But while in state #1, any iwconfig commands results in the=
 error "SET failed on device rausb0 ; Network is down. Error for wireless=
 request...". And it is necessary for the iwconfig commands to succeed be=
fore the dhclient command will succeed.
So I see a catch-22 bug. rausb0 must be up in order for the iwconfig comm=
ands to succeed But the iwconfig commands must  succeed in order to *trul=
y* bring rausb0 up (=3Dhave dhclient succeed). The only workaround is ent=
ering that weird state (state #2) where rausb0 is up but dhclient hasn't =
yet succeeded.

Now that's what I call messed up. Any ideas for a fix?

Pizzapie

Can we help you?X

Date: Fri, 03 Aug 2007 11:33:09 +0200
From: Adrian Chapela <achapela.rexistros@gmail.com> To: Debian Users <debian-user@lists.debian.org> Subject: Looking for driver Compal EL80

Message-ID: <46B2F655.1040607@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hello,

I am looking for a driver for the wireless / bluetooth switcher of a Compal El80 laptop. Some tips ??

I can't find this to active / de-active the wireless or the bluetooth by soft. The laptop has a hardware switch but it also has a software switch to active BT or Wireless or two at time.

Can you say me the right direction to find the driver ??

Thank you.

Date: Fri, 03 Aug 2007 11:37:39 +0200
From: =?ISO-8859-1?Q?J=F6rg-Volker_Peetz?= <peetz@scai.fraunhofer.de> To: debian-user@lists.debian.org
Subject: Re: Getting Firefox/Iceweasel to open text/pgp files?

Message-ID: 
Content-Type:  text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Don't know where to look next?X
Can't find what you're looking for?X

Not an answer to your question, but an alternative:

aptitude changelog <package-name>

--=20
Regards,
J=F6rg-Volker.

Date: Fri, 3 Aug 2007 12:29:38 +0200
From: "Fabrizio Pedersoli" <f.peder@gmail.com> To: debian-user@lists.debian.org
Subject: Re: Adaptec 2100s & Debian stable Message-ID: <53b66b650708030329q4349b0dfra03d35281a6e3771@mail.gmail.com> Content-Type: multipart/alternative;

        boundary="----=_Part_71556_14279509.1186136978131"

------=_Part_71556_14279509.1186136978131

Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

root (hd0,0)
kernel /boot/vmlinuz.... root=/dev/sda1 ro initird ....
savedefault

Confused? Frustrated?X

that's grub menu.lst. The strange thing is that with the old stable Debian (sarge) everthing work s fine. Is there any way to boot Debian etch witch a 2.4 series kernel? thanks

Fabrizio.

2007/8/3, Douglas Allan Tutty <dtutty@porchlight.ca>:

>
> On Thu, Aug 02, 2007 at 06:54:51PM +0200, Fabrizio Pedersoli wrote:
> > i have a big problem with an Adaptec 2100s scsi controller, which
> manages 2
> > disks in RAID-0. the Debian installer found correctly that raid and the
> > installation process terminates fine. But when i reboot, after linux
> loads
> > i20 modules and founds hdd... it stops saying "waiting for root
> filesystem".
> > any suggestions??? thanks (and sorry for my english :D).
>
> What is your kernel command line, from /boot/grub/menu.lst?
>
> Doug.
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
>

------=_Part_71556_14279509.1186136978131

Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

root (hd0,0)<br>kernel /boot/vmlinuz.... root=/dev/sda1 ro<br>initird ....<br>savedefault<br><br>that&#39;s grub menu.lst. The strange thing is that with the old stable Debian (sarge) everthing work s fine. Is there any way to boot Debian etch witch a 2.4 series kernel? thanks<br><br>Fabrizio.<br><br><div><span class="gmail_quote">2007/8/3, Douglas Allan Tutty &lt;<a href="mailto:dtutty@porchlight.ca">dtutty@porchlight.ca</a>&gt;:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> On Thu, Aug 02, 2007 at 06:54:51PM +0200, Fabrizio Pedersoli wrote:<br>&gt; i have a big problem with an Adaptec 2100s scsi controller, which manages 2<br>&gt; disks in RAID-0. the Debian installer found correctly that raid and the <br>&gt; installation process terminates fine. But when i reboot, after linux loads<br>&gt; i20 modules and founds hdd... it stops saying &quot;waiting for root filesystem&quot;.<br>&gt; any suggestions??? thanks (and sorry for my english :D). <br><br>What is your kernel command line, from /boot/grub/menu.lst?<br><br>Doug.<br><br><br>--<br>To UNSUBSCRIBE, email to <a href="mailto:debian-user-REQUEST@lists.debian.org">debian-user-REQUEST@lists.debian.org</a><br> with a subject of &quot;unsubscribe&quot;. Trouble? Contact <a href="mailto:listmaster@lists.debian.org">listmaster@lists.debian.org</a><br><br></blockquote></div><br>

------=_Part_71556_14279509.1186136978131--

Date: Fri, 3 Aug 2007 03:32:50 -0700 (PDT) From: Serena Cantor <qipaishi2006@yahoo.com> To: debian-user@lists.debian.org
Subject: Re: how to set up a wireless network?

Message-ID: <828236.75008.qm@web35706.mail.mud.yahoo.com>
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Thank Bert Deferme, Ari Constancio  and	Hal Vaughan!
Call Pantek today for Open Source Technical Support at 1-877-546-8934 - 24/7/365X

Do you mean that Wireless-HOWTO is wrong?

http://ftp.sunet.se/LDP/HOWTO/text/Wireless-HOWTO

All right, I will buy 2 wireless network card.

                  =09

      =20

_________________________________________________________________________=
___________Ready for the edge of your seat?=20 Check out tonight's top picks on Yahoo! TV.=20 http://tv.yahoo.com/

Date: Fri, 3 Aug 2007 12:37:35 +0200
From: =?UTF-8?Q?Cs=C3=A1nyi_P=C3=A1l?= <csanyipal@csanyi-pal.info> To: Debian User <debian-user@lists.debian.org> Subject: D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs - supported?

Message-ID: <20070803103735.GA4527@csanyi-pal.info>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hello!

Do you need help?X

Is the
D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs supported by Debian GNU/Linux Etch?

If I try to compile linux-image-2.6.18 from source, in menuconfig can't to find driver for this card.

Is there some experience with this PCI Ethernet card on Debian Etch out there?

Any advices will be apreciated!

-- 
Regards, Paul Csanyi
http://www.freewebs.com/csanyi-pal/index.htm

Date: Fri, 3 Aug 2007 13:03:39 +0200 (CEST) From: pinniped <cirilo_bernardo@yahoo.com> To: debian-user@lists.debian.org Subject: how to set up a wireless network? Message-Id: <listhandler=2&site=www.debianhelp.org&nid=9290&pid=32809&cid=32817&uid=76&tid=79&301cd442df769623604b41d4e0785f17@www.debianhelp.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable (quote) Bluetooth uses the same frequency range as 802.11b and g ... (end quote) That's right, and you're also right about the power meant to be limited t= o less than a "normal" 802.11 transceiver. I've mostly seen Bluetooth ru= n as an extra protocol on top of 802.11b/g and thus no extra gizmos and n= o reduced power limit; the USB Bluetooth gizmos do have the power output = limited and these specialized gizmos were pretty much a waste of money. A= ll in all I never had a use for Bluetooth - I always saw it as a nice way= to cripple your otherwise OK 802.11 network. There is absolutely nothin= g in the Bluetooth protocol spec that hadn't already been accomplished by= other tools, in many cases over a decade before (so much for the "future= " hype). Now "Zigbee" is being touted as a "Bluetooth killer" - what is i= t? Why, lower-power 802.11. Sound familiar? Wasn't that Bluetooth? Yet m= ore hype. However, Zigbee *may* have a use in inherently very-low power = gizmos with very short range - for example tracking devices in laptops to= determine where they are in a building.=20 I'm sure people can think of more sensible applications; I just have non= e of my own. Going back to the original post, as for comments like "you absolutely mus= t be able to see the antenna", they are generally made by people who don'= t really know what they're talking about. There's a hell of a lot of non= sense on the internet. (I'm sure I contribute to that on occasion). But t= he original quote gives me the impression that the author is talking abou= t getting a signal in a "public park" in which case he's pretty much righ= t - the frequency used by 802.11 will be severely attenuated by a tree so= in *many* cases if you can't see the antenna, you probably won't get a s= ignal. In reality you get "multipaths" or the antenna may be behind some = object which doesn't block much of the signal and you manage to get a wir= eless signal after all - all in all, just switch on that laptop and see w= hat happens and in general ignore the "thou shalt not" statements.

Date: Fri, 3 Aug 2007 13:17:32 +0200 (CEST) From: pinniped <cirilo_bernardo@yahoo.com> To: debian-user@lists.debian.org Subject: Adaptec 2100s & Debian stable Message-Id: <listhandler=2&site=www.debianhelp.org&nid=9279&pid=32815&cid=32818&uid=76&tid=79&8ae47cd674c8779d26289400fbebc319@www.debianhelp.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable I remember a "waiting for root filesystem" when I was using a software RA= ID and my drivers didn't load. I had to edit /etc/mkinitramfs/modules an= d make sure my "md" driver was added to the initrd image. It is possible that you need some driver to load to access your RAID? If= you wait, say, 5 minutes are you dumped into a 'busybox' console? If you= are dumped to busybox you have a very good chance of troubleshooting the= system. This is what happened to me when I had problems with my software= RAID.

Date: Fri, 3 Aug 2007 17:42:22 +0530 From: "Masatran, R. Deepak" <masatran@research.iiit.ac.in> To: debian-user@lists.debian.org Subject: Start booting hard drive, from a CD Message-ID: <20070803121222.GA28194@research.iiit.ac.in> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline I am unable to boot from my hard drive due to some problem. As a temporary solution, I want to make a CD, and use it to start booting the hard drive. How can I make such a CD? Thanks! -- Masatran, R. Deepak <http://research.iiit.ac.in/~masatran/> -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

Date: Fri, 03 Aug 2007 07:27:52 -0500 From: Ron Johnson <ron.l.johnson@cox.net> To: Debian User <debian-user@lists.debian.org> Subject: Re: D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs - supported? Message-ID: <46B31F48.6020904@cox.net> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 08/03/07 05:37, Cs=C3=A1nyi P=C3=A1l wrote: > Hello! >=20 > Is the D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs=20 > supported by Debian GNU/Linux Etch? >=20 >=20 > If I try to compile linux-image-2.6.18 from source, in menuconfig > can't to find driver for this card. Which driver, exactly, are you looking for? > Is there some experience with this PCI Ethernet card on Debian > Etch out there? >=20 > Any advices will be apreciated! What does Google say when you search for "linux 2.6 DFE-530TX"? - -- Ron Johnson, Jr. Jefferson LA USA Give a man a fish, and he eats for a day. Hit him with a fish, and he goes away for good! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGsx9IS9HxQb37XmcRAqVGAJwK1GIlEKINIjIK7x6/5c54UQNdeACg6FwH 6oMrlY3V2wQbkfrBLwvLuGM=3D =3D3Ufw -----END PGP SIGNATURE-----

Do you need more help?X

Date: Fri, 3 Aug 2007 14:47:14 +0200 (CEST) From: Stephane Durieux <durieux42@yahoo.fr> To: debian-user@lists.debian.org Subject: Re: nfs problem while internet access broken Message-ID: <520199.54429.qm@web27806.mail.ukl.yahoo.com> Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable --- Bob Proulx <bob@proulx.com> a =E9crit : > Stephane Durieux wrote: > > client <-> server <-X-> internet=20 > >=20 > > That is exactly my issue . Excuse me for not being > > clear ! Anyway, has somebody a solution . > > I have read that client and server must be able to > > make a reverse resolution of the client and the > > server, but I am not sure of it and I don t have > an in > > depth knowledge of nfs .=20 >=20 > The nfs server will try to do a dns lookup of the > client ip address to > find the client hostname for the purpose of logging > this information > to the system logs. One the server can the client > IP address be > resolved? >=20 > $ ssh server > $ host A.B.C.D # look up client IP address >=20 > Does that succeed? Example: >=20 > $ ssh www.example.com > host 208.77.188.166 > 166.188.77.208.in-addr.arpa domain name pointer > www.example.com. >=20 > I suspect that your DNS on the server is not > functioning. >=20 I have noticed that my clients are not declared in /etc/hosts if I put them in /etc/hosts (and in nis table to be useful) everything is find. Nevertheless I don t understand how the nfs can make a resolution via dns of a a client whith a private address=20 Perhaps does the server reply it it s impossible and everything is fine to log it=20 But thanks a lot, it s certainly the SYSTEM LOG that is implied ... I ll check it ... ...now it seems me a little bit more logical ! I was so lost that I have thought they were magical dark spirits behind this :)=20 =20 ___________________________________________________________________= __________=20 Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! M= ail=20

Date: Fri, 3 Aug 2007 14:56:16 +0200 From: =?UTF-8?Q?Cs=C3=A1nyi_P=C3=A1l?= <csanyipal@csanyi-pal.info> To: debian-user@lists.debian.org Subject: Re: D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs - supported? Message-ID: <20070803125616.GE4527@csanyi-pal.info> Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Aug 03, 2007 at 07:27:52AM -0500, Ron Johnson wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 >=20 > On 08/03/07 05:37, Cs=E1nyi P=E1l wrote: > > Hello! > >=20 > > Is the D-Link DFE-530TX PCI Fast Ethernet card 10/100MBs=20 > > supported by Debian GNU/Linux Etch? > >=20 > >=20 > > If I try to compile linux-image-2.6.18 from source, in menuconfig > > can't to find driver for this card. >=20 > Which driver, exactly, are you looking for? If I could to know. > > Is there some experience with this PCI Ethernet card on Debian > > Etch out there? > >=20 > > Any advices will be apreciated! >=20 > What does Google say when you search for "linux 2.6 DFE-530TX"? Thanks! I find a Forum on the LinuxQuestions.org [1], and there find that that for this ethernet card the proper driver is via-rhine. I go to by this card now. :) [1] http://www.linuxquestions.org/questions/showthread.php?t=3D374449 --=20 Regards, Paul Csanyi http://www.freewebs.com/csanyi-pal/index.htm

Date: Fri, 3 Aug 2007 09:02:19 -0400 From: Douglas Allan Tutty <dtutty@porchlight.ca> To: debian-user@lists.debian.org Subject: Re: Adaptec 2100s & Debian stable Message-ID: <20070803130219.GA6466@titan> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Fri, Aug 03, 2007 at 12:29:38PM +0200, Fabrizio Pedersoli wrote: > 2007/8/3, Douglas Allan Tutty <dtutty@porchlight.ca>: > > On Thu, Aug 02, 2007 at 06:54:51PM +0200, Fabrizio Pedersoli wrote: > > > i have a big problem with an Adaptec 2100s scsi controller, which > > > manages 2 disks in RAID-0. the Debian installer found correctly > > > that raid and the installation process terminates fine. But when i > > > reboot, after linux loads i20 modules and founds hdd... it stops > > > saying "waiting for root filesystem". any suggestions??? thanks > > > (and sorry for my english :D). > > > > What is your kernel command line, from /boot/grub/menu.lst? > > > > Doug. > > >> root (hd0,0) > kernel /boot/vmlinuz.... root=/dev/sda1 ro initird .... savedefault > > that's grub menu.lst. The strange thing is that with the old stable > Debian (sarge) everthing work s fine. Is there any way to boot Debian > etch witch a 2.4 series kernel? thanks root=/dev/sda1 gives a single partition, which is fine if the hardware raid card is really recognized as hardware raid since it will present what looks like one dist to the kernel. You need to find out if the module for the card is being loaded by the initrd; I don't know how to do that. Doug.

Date: Fri, 3 Aug 2007 09:03:58 -0400 From: Douglas Allan Tutty <dtutty@porchlight.ca> To: debian-user@lists.debian.org Subject: Re: Start booting hard drive, from a CD Message-ID: <20070803130358.GB6466@titan> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Fri, Aug 03, 2007 at 05:42:22PM +0530, Masatran, R. Deepak wrote: > I am unable to boot from my hard drive due to some problem. As a temporary > solution, I want to make a CD, and use it to start booting the hard drive. > How can I make such a CD? Thanks! The answer will depend on why you can't boot from hard drive in the first place. Doug.

Date: Fri, 3 Aug 2007 09:07:18 -0400 From: Douglas Allan Tutty <dtutty@porchlight.ca> To: debian-user@lists.debian.org Subject: Re: nfs problem while internet access broken Message-ID: <20070803130718.GC6466@titan> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Fri, Aug 03, 2007 at 02:47:14PM +0200, Stephane Durieux wrote: > I have noticed that my clients are not declared in > /etc/hosts if I put them in /etc/hosts (and in nis > table to be useful) everything is find. > > Nevertheless I don t understand how the nfs can make a > resolution via dns of a a client whith a private > address > Perhaps does the server reply it it s impossible and > everything is fine to log it > /etc/nsswitch.conf (name service switch conf) has the line: hosts: files dns This means that when the resolver tries to find a host it will first look in the files on the system (e.g. /etc/hosts) before doing a dns search. Doug.

Date: Fri, 3 Aug 2007 18:32:17 +0530 From: "Masatran, R. Deepak" <masatran@research.iiit.ac.in> To: debian-user@lists.debian.org Subject: Debian Live CD for AMD64 from Etch? Message-ID: <20070803130217.GB28194@research.iiit.ac.in> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Which Debian Live CD is for AMD64 from Etch? I found only <http://live.debian.net/debian-cd/4.0_r0-rc1/amd64/iso-cd/debian-live-40r0-rc1-amd64-standard-CD.iso>. By the way, is the above image 1. RC1 of Live CD of Etch? OR 2. Live CD of RC1 of Etch? -- Masatran, R. Deepak <http://research.iiit.ac.in/~masatran/> -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

Date: Fri, 03 Aug 2007 08:15:38 -0500 From: Rodney Richison <rodney@rcrcomputing.com> To: debian-user@lists.debian.org Subject: Re: Security newbie? Message-ID: <46B32A7A.6010504@rcrcomputing.com> Content-Type: multipart/alternative; boundary="------------040305030906070006030901" This is a multi-part message in MIME format. --------------040305030906070006030901 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Art Edwards wrote: > > I've been running debian @ home and @ work, for years, had no indication > of attacks. Over the last few days, my iptables firewall seemed simply > to stop. I checked my auth log file to find many, many attempts to break > in. My firewall was very simple. I have since added rules to drop > packets from offending IP addresses. So, I have a couple of very basic > questions: > > 1. Are there repositories of offending IP addresses to block? Can/should > one contribute to these? > > 2. The attacks never use the same user name more than once. Is there a > way to block access, even temporarily, from an IP address after a set > number of attempts, even if the attempts use different user names? > > 3. Are there other obvious things I should be doing? > > ssh, by it's design is insecure. It SHOULD incorporate some means of limiting password attempts. It does not! Using alternate ports can be a pain in the butt as some programs (like webmin "filesystem backup) do not support alternate ports. I suggest 2 methods, fail2ban and a firewall if you must allow password logins. You can set the firewall to allow only certain ip's or ip ranges. But do not get to comfortable with a firewall ONLY solution. The first time the local firewall goes down, or is taken down and forgotten to re-enable, you'll get compromised. Again, the best solution would be for ssh to incorporate a solution, thus if ssh is started, the solution is started... > > -- This message has been scanned for viruses and dangerous content by RCRnet, and is believed to be clean. --------------040305030906070006030901 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> <title></title> </head> <body bgcolor="#ffffff" text="#000000"> <br> <br> Art Edwards wrote: <blockquote cite="mid:200707181704.l6IH4slN018426@bell.kirtland.af.mil" type="cite"> <meta http-equiv="Content-Type" content="text/html; "> <meta name="Generator" content="MS Exchange Server version 6.5.6944.0"> <title>Security newbie?</title> <!-- Converted from text/plain format --> <p><font size="2">I've been running debian @ home and @ work, for years, had no indication </font> <br> <font size="2">of attacks. Over the last few days, my iptables firewall seemed simply </font> <br> <font size="2">to stop. I checked my auth log file to find many, many attempts to break </font> <br> <font size="2">in. My firewall was very simple. I have since added rules to drop </font> <br> <font size="2">packets from offending IP addresses. So, I have a couple of very basic </font> <br> <font size="2">questions:</font> </p> <p><font size="2">1. Are there repositories of offending IP addresses to block? Can/should </font> <br> <font size="2">one contribute to these?</font> </p> <p><font size="2">2. The attacks never use the same user name more than once. Is there a </font> <br> <font size="2">way to block access, even temporarily, from an IP address after a set </font> <br> <font size="2">number of attempts, even if the attempts use different user names?</font> </p> <p><font size="2">3. Are there other obvious things I should be doing?</font> </p> <p><font size="2"><br> </font></p> </blockquote> ssh, by it's design is insecure.&nbsp; It SHOULD incorporate some means of limiting password attempts. It does not! Using alternate ports can be a pain in the butt as some programs (like webmin "filesystem backup) do not support alternate ports. I suggest 2 methods, fail2ban and a firewall if you must allow password logins. You can set the firewall to allow only certain ip's or ip ranges. But do not get to comfortable with a firewall ONLY&nbsp; solution. The first time the local firewall goes down, or is taken down and forgotten to re-enable, you'll get compromised.&nbsp; <br> <br> Again, the best solution would be for ssh to incorporate a solution, thus if ssh is started, the solution is started...&nbsp; <br> <br> <br> <blockquote cite="mid:200707181704.l6IH4slN018426@bell.kirtland.af.mil" type="cite"> <p><font size="2"></font>&nbsp; </p> </blockquote> </body> <br />-- <br />This message has been scanned for viruses and <br />dangerous content by <a href="http://www.rcrnet.net/"><b>RCRnet</b></a>, and is <br />believed to be clean. </html> --------------040305030906070006030901-- End of debian-user-digest Digest V2007 Issue #2090 ************************************************** Received on Fri Aug 3 09:46:30 2007

This archive was generated by hypermail 2.1.8 : Thu Aug 09 2007 - 19:05:38 EDT

Can we help you?X

Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library