Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting
Mailing Lists: lists.debian.org > debian-user-digest > 07 > 080287.html (Request Expert lists.debian.org Support)

debian-user-digest Digest V2007 #2114

From: <debian-user-digest-request(at)lists.debian.org>
Date: Mon Aug 06 2007 - 17:48:58 EDT


Content-Type: text/plain

debian-user-digest Digest Volume 2007 : Issue 2114

Today's Topics: 

  Re: Hard disk dying?                  [ Sam  ]
  Re: Public PC                         [ Kevin Mark  ]
  Re: Opinions XFS                      [ Ron Johnson  ]
  Re: Debian can't mount Camera Memory  [ Mike McCarty  ]
  Re: [OT] Recommended Router Hardware  [ Douglas Allan Tutty  ]
  Re: using ssl on part of a website    [ Sam Leon  ]
  Re: How to disable ipv6 tunneling     [ Alex Samad  ]

Date: Mon, 6 Aug 2007 13:52:19 -0700
From: Sam <transiency@transiency.org>
To: "Andrei Popescu" <andreimpopescu@gmail.com> Cc: debian-user@lists.debian.org
Subject: Re: Hard disk dying?
Message-ID: <fb41b4360708061352n41eb6e3bi3aeee7f014626f63@mail.gmail.com> Content-Type: multipart/alternative;

        boundary="----=_Part_110454_25630622.1186433539285"

------=_Part_110454_25630622.1186433539285 

Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Do you need help?X

Yeah it is backed up, I just happen to need to drive to expand my operations. Would be a pity if it was bad.

No errors tho, in both the short and extended tests.

  • START OF READ SMART DATA SECTION === SMART Self-test log structure revision number 1 Num Test_Description Status Remaining LifeTime(hours) LBA_of_first_error # 1 Extended offline Completed without error 00% 830 - # 2 Short offline Completed without error 00% 829 - # 3 Extended offline Completed without error 00% 812 -

Thanks,
Sam

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: http://firegpg.tuxfamily.org

iD8DBQFGt4tMMwtNS8TLpaIRAiOFAJ9ZvAznd/GYsh39jX+x7euvnyjYagCfTF5z nM5/caI6DFuh8SJw4j5+evA=
=5TVm
-----END PGP SIGNATURE-----
On 8/6/07, Andrei Popescu <andreimpopescu@gmail.com> wrote:
>
> On Mon, Aug 06, 2007 at 01:56:41PM -0400, Justin Piszcz wrote:
>
> > Your disk looks OK to me, I have seen Device Status Error in the past as
> > well but never suffered any ill effects.
>
> If I recall correctly from the Google study, certain smart errors (don't
> remember which) mean the drive will fail, but no smart errors doesn't
> mean the drive is safe! The study should be easily found with a Google
> search.
>
> The OP should back-up anything important if he hasn't done so yet.
>
> Regards,
> Andrei
> --
> If you can't explain it simply, you don't understand it well enough.
> (Albert Einstein)
>
> -----BEGIN PGP SIGNATURE-----
 > Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFGt4ahqJyztHCFm9kRAmUiAJ4qMvwAdLGY1yuhU1R0I1Gax3dbJgCgmkNm
> rNjKpa6YN1yJKmO80hOvSDs=
> =Ia3w
> -----END PGP SIGNATURE-----
 >
>

------=_Part_110454_25630622.1186433539285 

Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA1<br><br>Yeah it is backed up, I just happen to need to drive to expand my operations. Would be a pity if it was bad.<br><br>No errors tho, in both the short and extended tests. 




=== START OF READ SMART DATA SECTION ===
SMART Self-test log structure revision number 1
Num  Test_Description    Status                  Remaining  LifeTime(hours)  LBA_of_first_error
# 1  Extended offline    Completed without error       00%       830         -

Do you need more help?X


# 2  Short offline       Completed without error       00%       829         -
# 3  Extended offline    Completed without error       00%       812         -




Thanks,
Sam



-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)
Comment: 
http://firegpg.tuxfamily.org

iD8DBQFGt4tMMwtNS8TLpaIRAiOFAJ9ZvAznd/GYsh39jX+x7euvnyjYagCfTF5z
nM5/caI6DFuh8SJw4j5+evA=

=5TVm
-----END PGP SIGNATURE-----
On 8/6/07, Andrei Popescu <andreimpopescu@gmail.com> wrote:
On Mon, Aug 06, 2007 at 01:56:41PM -0400, Justin Piszcz wrote:<br><br>&gt; Your disk looks OK to me, I have seen Device Status Error in the past as<br>&gt; well but never suffered any ill effects.<br><br>If I recall correctly from the Google study, certain smart errors (don&#39;t 

remember which) mean the drive will fail, but no smart errors doesn't
mean the drive is safe! The study should be easily found with a Google
search.

The OP should back-up anything important if he hasn't done so yet.


Regards,
Andrei
--
If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGt4ahqJyztHCFm9kRAmUiAJ4qMvwAdLGY1yuhU1R0I1Gax3dbJgCgmkNm

rNjKpa6YN1yJKmO80hOvSDs=
=Ia3w
-----END PGP SIGNATURE-----






Can we help you?X

------=_Part_110454_25630622.1186433539285--

Can't find what you're looking for?X

Date: Mon, 6 Aug 2007 16:53:35 -0400
From: Kevin Mark <kevin.mark@verizon.net> To: debian-user@lists.debian.org
Subject: Re: Public PC 

Message-ID: <20070806205335.GC816@localhost>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Sun, Aug 05, 2007 at 03:06:10PM -0500, Dave Walker wrote:
> I hope to place a PC running Etch in our small (tiny, actually)
> airport building for use by pilots. The PC will be used to access
> perhaps 10 web sites (plus or minus) over a DSL connection and to run
> a few utilities to show GMT and a calculator and maybe a few
> additional applications. The box will also serve as a real-time data
> collection platform and web server for a local weather observing
> system, so I want to prevent it from being re-booted.
>
> I hope to make the PC reasonably idiot proof (the box will be kept
> separate from the users) - the keyboard and display will be
> accessible. The goal is to keep users from inadvertently trashing the
> machine, but to provide usability.
>
> Should I run a GUI (currently Gnome is installed)? How do I restrict
> access to functions that users shouldn't access?
>
> Is there a way to run a menu system, without using a Gnome...perhaps
> another window manager?
>
> Thanks, all
> Dave W.

The basics include: remove all packages that are not needed including services(daemons). Disable access to the console in the xorg.conf (the ctrl-alt-f1). Use stable releases. Get a 'test user' to try and do stupid things to make it crash.
If I understand you, the users will not need 'local' applications (solitaire, word processor, games, etc.) but ONLY a web browser. As the web browser will be the interface to some web server application that does all this stuff like : calculate gmt, records data, etc. In that case, all you need is a web browser and its reverse dependencies. Then you can create an x session just containing the web browser, making it the only thing on the screen.
=K 

-- 
|  .''`.  == Debian GNU/Linux == |       my web site:           |
| : :' :      The  Universal     |mysite.verizon.net/kevin.mark/|
| `. `'      Operating System    | go to counter.li.org and     |
|   `-    
http://www.debian.org/ |    be counted! #238656       |
|  my keyserver: subkeys.pgp.net |     my NPO: cfsg.org         |
|join the new debian-community.org to help Debian!              |
|_______  Unless I ask to be CCd, assume I am subscribed _______|

Date: Mon, 06 Aug 2007 15:57:08 -0500 From: Ron Johnson <ron.l.johnson@cox.net> To: debian-user@lists.debian.org Subject: Re: Opinions XFS Message-ID: <46B78B24.4010806@cox.net> Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 08/06/07 15:29, Justin Piszcz wrote: [snip]
>
> I would too, until I found out JFS has no maintainer.
No /official/ maintainer, or "whoever IBM assigns to the task of fixing a certain bug or set of bugs"? - -- Ron Johnson, Jr. Jefferson LA USA Give a man a fish, and he eats for a day. Hit him with a fish, and he goes away for good! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGt4skS9HxQb37XmcRAsTAAKDgM0SuLOKLBSaiFm4ks/XdGvaOmgCgw2mE oE5rhVUv3FRfx9w0W41qzOU= =uYrg -----END PGP SIGNATURE-----

Date: Mon, 06 Aug 2007 15:58:52 -0500 From: Mike McCarty <Mike.McCarty@sbcglobal.net> To: debian-user@lists.debian.org Subject: Re: Debian can't mount Camera Memory Stick Message-ID: <46B78B8C.1030705@sbcglobal.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Andrei Popescu wrote:
> On Mon, Aug 06, 2007 at 02:02:09PM -0500, Mike McCarty wrote:
>
>
>>Well, I tried plugging the Dazzle directly into another USB
>>port, and it mounts just fine. So, why can't the stick mount
>>through the hub? The "real" disc mounts fine.
>
>
> Are there any options you can pass to the relevant module? Otherwise I
> think it's a bug in the module (though I'm far from being an expert).
"The relevant module"? Sorry, I don't know how to answer your question. Mike -- p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);} Oppose globalization and One World Governments like the UN. This message made from 100% recycled bits. You have found the bank of Larn. I can explain it for you, but I can't understand it for you. I speak only for myself, and I am unanimous in that!

Date: Mon, 06 Aug 2007 16:00:35 -0500 From: Mike McCarty <Mike.McCarty@sbcglobal.net> To: List Debian User <debian-user@lists.debian.org> Subject: Re: Debian can't mount Camera Memory Stick Message-ID: <46B78BF3.2030406@sbcglobal.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit David Brodbeck wrote:
>
> On Aug 6, 2007, at 12:02 PM, Mike McCarty wrote:
>
>>
>> Well, I tried plugging the Dazzle directly into another USB
>> port, and it mounts just fine. So, why can't the stick mount
>> through the hub? The "real" disc mounts fine.
>
>
> Is it a powered hub? I've found some USB devices don't work very well
> on un-powered hubs.
If by "powered hub" you mean "it has its own separate power supply", then no. Otherwise, I don't know what you mean. It draws power from the USB. The WD disc is powered through it. Mike -- p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);} Oppose globalization and One World Governments like the UN. This message made from 100% recycled bits. You have found the bank of Larn. I can explain it for you, but I can't understand it for you. I speak only for myself, and I am unanimous in that!

Date: Mon, 6 Aug 2007 16:05:33 -0500 From: ArcticFox <genkokitsu@insightbb.com> To: debian-user@lists.debian.org Subject: Re: Debian can't mount Camera Memory Stick Message-Id: <51218bfb06795c9d5ed3289dff7b1cb5@insightbb.com> Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit
>
>> On Mon, Aug 06, 2007 at 02:02:09PM -0500, Mike McCarty wrote:
>>> Well, I tried plugging the Dazzle directly into another USB
>>> port, and it mounts just fine. So, why can't the stick mount
>>> through the hub? The "real" disc mounts fine.
>>>
I've had issues in the past when using an unpowered USB hub, some mouses and keyboards don't work. This might be a similar issue.

Date: Mon, 06 Aug 2007 22:05:53 +0100 From: graham <graham@theseamans.net> To: debian-user@lists.debian.org Subject: Re: cups yet again Message-ID: <46B78D31.9030604@theseamans.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Florian Kulzer wrote:
> On Mon, Aug 06, 2007 at 18:52:56 +0100, graham wrote:
>> Florian Kulzer wrote:
>>> On Mon, Aug 06, 2007 at 17:02:07 +0100, graham wrote:
>>>> I have a standard printer with a reliable driver (Brother HL5040). It was
>>>> working using the parallel port on my old PC. Said PC died, replaced it
>>>> with a new one, installed 64bit lenny. Configured cups for printer, all
>>>> appears ok (ie. ppd file ok, printer status recognized etc). On printing
>>>> anything at all (including the test page) all I get is what appears to be
>>>> misinterpreted postscript. One line of gibberish per page, followed by a
>>>> page feed.
>>> Post your /etc/cups/printers.conf please. (Watch out, this file can
<snip>
>
> That looks pretty OK to me. There are a few things to check now (post
> the results here):
>
> - What are the permissions of /dev/lp0? ("ls -l /dev/lp0") Most likely
> they will be correct since you are allowed to access the printer, but
> it cannot hurt to check.
crw-rw---- 1 root lp 6, 0 2007-08-06 21:39 /dev/lp0
> Also, are you a member of the lp and lpadmin groups?
I was in lp, not lpadmin. Added myself to lpadmin; no change
> - Is the printer reported correctly if you run
> /usr/lib/cups/backend/parallel
> ?
No: graham@dogmatix:~$ /usr/lib/cups/backend/parallel direct parallel:/dev/lp0 "Unknown" "LPT #1"
>
> - Has the ppd file been copied to /etc/cups/ppd/HL-5040.ppd?
Yes
> The owner should be cupsys, group lp and the permissions should be 0644.
The owner was root.root. Changed this to cupsys.lp and the test page printed ok from the CUPS frontend (tested this once only, since I assumed it was now ok). However, printing from anything else still gave the same result as before. Tried rebooting (a la windows); the test page no longer prints from the CUPS frontend - the original problem returned. Suspecting the permissions (everything else in the directory was also root.root or root.lp), I did chown -R cupsys.lp /etc/cups but the problem stayed unchanged Current state: graham@dogmatix:~$ ls -al /etc/cups/ppd total 24 drwxr-xr-x 2 cupsys lp 4096 2007-08-06 16:08 . drwxr-sr-t 5 cupsys lp 4096 2007-08-06 16:08 .. -rw-r--r-- 1 cupsys lp 12517 2007-08-06 16:08 HL-5040.ppd
> You can
> check if the file corresponds to the correct driver with:
> grep '^*NickName:' /etc/cups/ppd/HL-5040.ppd
>
Yes thats fine. *NickName: "Brother HL-5040 Foomatic/hl1250 (recommended)"
> - The foomatic-filters-ppds package has four different ppd files for the
> Brother HL-5040. Did you try them all?
No, but I don't believe that's the issue. This one has always worked fine for me before (several different systesm, none of which is unfortunately available for comparison). Thanks for the help Graham
>
>> There is a presumably unrelated second problem: I can send the test page
>> from the server on port 631 ok (though it doesn't actually print
>> correctly), but if I send it from the gnome printer admin applet, the job
>> immediately appears as 'stopped' and I am unable to do anything further
>> till I have removed it.
>
> I don't know the Gnome printing utilities, so I cannot help here. In any
> case, we first need to get the test page working when triggered from the
> CUPS frontend.
>

Don't know where to look next?X

Date: Mon, 6 Aug 2007 17:06:02 -0400 From: Douglas Allan Tutty <dtutty@porchlight.ca> To: debian-user@lists.debian.org Subject: Re: [OT] Recommended Router Hardware Message-ID: <20070806210602.GA13059@titan> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, Aug 06, 2007 at 01:49:08PM -0700, David Brodbeck wrote:
> On Aug 6, 2007, at 1:22 PM, Andrei Popescu wrote:
> >On Mon, Aug 06, 2007 at 08:45:21AM -0700, Andrew Sackville-West wrote:
> >
> >>no. to use a desktop machine as a router, you need two network
> >>connections: one for the local network to attach to and one for the
> >>internet at large. The computer then routes packets appropriately and
> >
> >I've read somewhere that it can be done with one card, but it's very
> >difficult to setup.
>
> You can do it, by creating multiple IP aliases on the one adapter.
> There are some caveats, though. For example, this likely won't work
> very well if you plan to do DHCP on your local network. Other
> protocols that use IP broadcasts can also get confused or get into
> trouble. Other than that, it isn't necessarily *harder* to set up,
> but it's more *confusing* to set up, if that makes sense.
If this box is going to be a firewall, even with IP aliases, isn't this an issue? Is there no way for an attack to bypass the level 3 router by doing something at a lower level? Anyway, its too confusing to me, especially if its only to save buying a cheap NIC. Doug.

Date: Mon, 06 Aug 2007 22:09:14 +0100 From: graham <graham@theseamans.net> To: debian-user@lists.debian.org Subject: Re: cups yet again Message-ID: <46B78DFA.4060608@theseamans.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Douglas Allan Tutty wrote:
> This is, in fact, what I use. Lpr with apsfilter. Simple to setup,
> well documented. It works.
Since Florian Kulzer is being kind enough to attempt remote diagnosis, I'll see how that goes first (also because at some later point I'd like this to be a samba print server). If that fails, then I shall try to dredge up my memories of the 90s and getting the filter chain working again.. Thanks for letting me know it's still possible! Graham
>
> Doug.
>
>

Date: Mon, 06 Aug 2007 16:12:48 -0500 From: Sam Leon <leon.mailinglist.36@gmail.com> To: debian-user@lists.debian.org Subject: Re: using ssl on part of a website Message-ID: <46B78ED0.8090804@gmail.com> Content-Type: multipart/alternative; boundary="------------060801030300000702040001" This is a multi-part message in MIME format. --------------060801030300000702040001 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Andrew Sackville-West wrote:
> On Mon, Aug 06, 2007 at 01:08:43PM -0700, Andrew Sackville-West wrote:
>
>> Hi guys, I'm having real trouble figuring out how to do this.
>>
>> I've got a wiki running ikiwiki and I'd like to get the log-in/editing
>> portion out of clear text. the obvious thing seems to be to use SSL,
>> but I don't want to ssl the whole site, just the part accessed through
>> the cgi scripts that take logins and edit stuff. Can someone give me
>> some pointers?
>>
>
> I've also used, with success, mod_auth_digest, which I believe gets me
> secure access to the cgi-bin/ but does not actually log me in to
> ikiwiki so that changelogs only show an ip address, not a user. bleh.
>
> somewhere there is some magic incantation to get me secured when
> accessing the cgi scripts and open otherwise.
>
> A
>
There is a pretty good newbie walk through at the ubuntu forum: http://ubuntuforums.org/showthread.php?t=4466 Sam --------------060801030300000702040001 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> <br> <br> Andrew Sackville-West wrote: <blockquote cite="mid20070806210131.GG28897@localhost.localdomain" type="cite"> <pre wrap="">On Mon, Aug 06, 2007 at 01:08:43PM -0700, Andrew Sackville-West wrote: </pre> <blockquote type="cite"> <pre wrap="">Hi guys, I'm having real trouble figuring out how to do this. I've got a wiki running ikiwiki and I'd like to get the log-in/editing portion out of clear text. the obvious thing seems to be to use SSL, but I don't want to ssl the whole site, just the part accessed through the cgi scripts that take logins and edit stuff. Can someone give me some pointers? </pre> </blockquote> <pre wrap=""><!----> I've also used, with success, mod_auth_digest, which I believe gets me secure access to the cgi-bin/ but does not actually log me in to ikiwiki so that changelogs only show an ip address, not a user. bleh. somewhere there is some magic incantation to get me secured when accessing the cgi scripts and open otherwise. A </pre> </blockquote> <br> There is a pretty good newbie walk through at the ubuntu forum: <a href="http://ubuntuforums.org/showthread.php?t=4466">http://ubuntuforums.org/showthread.php?t=4466</a><br> <br> Sam<br> </body> </html> --------------060801030300000702040001--

Date: Mon, 6 Aug 2007 17:19:02 -0400 From: Douglas Allan Tutty <dtutty@porchlight.ca> To: debian-user@lists.debian.org Subject: Re: Opinions XFS Message-ID: <20070806211902.GB13059@titan> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, Aug 06, 2007 at 04:29:43PM -0400, Justin Piszcz wrote:
> On Mon, 6 Aug 2007, Douglas Allan Tutty wrote:
> >On Mon, Aug 06, 2007 at 09:55:28AM -0700, David Brodbeck wrote:
> >>On Aug 4, 2007, at 2:42 AM, Ron Johnson wrote:
> >>>I'd have to modify that. Instead of NIH, my worry is that since XFS
> >>>was designed for a different kernel, it's been "shimmed" into Linux
> >>>and so doesn't integrate as well as ext2/3 and ReiserFS. Same
> >>>concern with jfs.
> >>
> >>I suppose that's a valid concern, but in the absence of any evidence
> >>of problems caused by it I can't say I'm going to lose any sleep. :)
> >
> >Given that SGI boxes now use Linux and have dropped Irix but still use
> >XFS, I think it pretty likely that they have done a good job of ensuring
> >that Linux's XFS is up to snuff.
> >
> >IBM started JFS version 1 with AIX, then ported it to OS/2 and added
> >features to make it version 2, then ported it back to AIX where it is
> >the standard FS. They got Linux working on their newer Power servers to
> >meet customer demand and ported JFS to linux so that they had a common
> >filesystem irrespective of OS.
> >
> >In both cases, the porting was done or directed by the origionator of the
> >filesystem for reasons that impact their bottom line. To some extent
> >their reputations are on the line with their filesystems. As they are
> >right now, I would trust them both equally well. They each have their
> >stronger points that make one more suitable than the other for certain
> >uses of the filesystem.
> >
>
> I would too, until I found out JFS has no maintainer.
>
Yikes. The jfsutils copyright and README.Debian are internally dated in 2001 as if they are old packages. However, the changelog.Debian.gz and changelog.gz are June, 2006. xfsprogs have more recent changes. Stefan Hornburg is listed as "responsible for this Debian package". What exactly do you mean that JFS has no maintainer. Doug.

Date: Mon, 6 Aug 2007 14:20:01 -0700 From: David Brodbeck <brodbd@u.washington.edu> To: List Debian User <debian-user@lists.debian.org> Subject: Re: Debian can't mount Camera Memory Stick Message-Id: <25CBEC62-75B7-4C74-A9E8-83A668CD0279@u.washington.edu> Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Content-Transfer-Encoding: 7bit On Aug 6, 2007, at 2:00 PM, Mike McCarty wrote:
> If by "powered hub" you mean "it has its own separate power
> supply", then no. Otherwise, I don't know what you mean. It
> draws power from the USB. The WD disc is powered through it.
Right, a powered hub has its own power supply. Some devices don't work right on un-powered ones. Also, plugging too many items into an un-powered hub can overload the USB port on the host, especially power-hungry devices like hard disks.

Date: Mon, 6 Aug 2007 14:22:04 -0700 From: David Brodbeck <brodbd@u.washington.edu> To: List Debian User <debian-user@lists.debian.org> Subject: Re: [OT] Recommended Router Hardware Message-Id: <BD7C7FB2-16C2-4A72-9D8B-88D0C9FE7E50@u.washington.edu> Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Content-Transfer-Encoding: 7bit On Aug 6, 2007, at 2:06 PM, Douglas Allan Tutty wrote:
> If this box is going to be a firewall, even with IP aliases, isn't
> this
> an issue? Is there no way for an attack to bypass the level 3
> router by
> doing something at a lower level?
Someone local to one of the two networks could send packets onto the other. So yes, this hurts the security of your firewall.

Date: Tue, 7 Aug 2007 07:42:06 +1000 From: Alex Samad <alex@samad.com.au> To: debian-user@lists.debian.org Subject: Re: [OT] Recommended Router Hardware Message-ID: <20070806214206.GB4666@samad.com.au> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="+pHx0qQiF2pBVqBT" Content-Disposition: inline --+pHx0qQiF2pBVqBT Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Aug 06, 2007 at 12:59:42PM -0400, Kamaraju S Kusumanchi wrote:
> Ron Johnson :
> >=20
> > Now you want the WRT54GL. (Note the extra L, which means Linux.)
> > The WRT54G stopped using Linux in v5.0.
> >=20
> > http://en.wikipedia.org/wiki/WRT54G
> >=20
>=20
> Thank you Mr. Johnson for up-to-date information. The wikipedia link is
> great.
have a look at openwrt.org it is a distribution made for these devices, on= =20 their wiki they have a list of hardware and compatibilities=20
>=20
> raju
>=20
> --=20
> Kamaraju S Kusumanchi
> http://www.people.cornell.edu/pages/kk288/
> http://malayamaarutham.blogspot.com/
>=20
>=20
> --=20
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org=20
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian=
=2Eorg
>=20
>=20
--+pHx0qQiF2pBVqBT Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGt5WukZz88chpJ2MRAl3dAKDYGzS58Axf9ymYrXM4t9b7uO48mQCePh8V bHxcIxXBpvvTfLG8JvBoCJk= =EJc7 -----END PGP SIGNATURE----- --+pHx0qQiF2pBVqBT--

Date: Tue, 7 Aug 2007 07:43:25 +1000 From: Alex Samad <alex@samad.com.au> To: debian-user@lists.debian.org Subject: Re: How to disable ipv6 tunneling Message-ID: <20070806214325.GC4666@samad.com.au> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="WplhKdTI2c8ulnbP" Content-Disposition: inline --WplhKdTI2c8ulnbP Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Aug 06, 2007 at 04:57:30PM +0200, Marko Randjelovic wrote:
> I run Etch and at every boot, as message on the screen states, it
> activates some "ipv6 over ipv4 tunneling driver" and it lasts several
> seconds. I don't need ipv6. How can it be disabled?
>=20
in /etc/modprobe.d/aliases look for this line alias net-pf-10 ipv6 set it to=20 alias net-pf-10 off alex
>=20
> --=20
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org=20
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian=
=2Eorg
>=20
>=20
--WplhKdTI2c8ulnbP Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFGt5X9kZz88chpJ2MRApnkAJ4zVehFervrJmxM/zqXljGb6VgeQACg6z90 KT7KMFan4trk5YuxtvhLmm0= =Y1s9 -----END PGP SIGNATURE----- --WplhKdTI2c8ulnbP-- End of debian-user-digest Digest V2007 Issue #2114 ************************************************** Received on Mon Aug 6 17:45:28 2007

Confused? Frustrated?X

This archive was generated by hypermail 2.1.8 : Thu Aug 09 2007 - 19:05:43 EDT

Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library