devil-linux-discuss — General Mailing List for all discussions

[Devil-Linux-discuss] outdated tg3

[Niklas S. <ni...@ni...>]

Hi,

I was building Devil-Linux for a HP Proliant DL320 and noticed that the
tg3 module in the 2.4.34 kernel sources is pretty outdated (v3.26, 2005)
and does not support the BCM5714. You might want to update it to v3.71b
(http://www.broadcom.com/docs/driver_download/570x/linux-3.71b.zip), I
had no problems compiling it.

nick..

Re: [Devil-Linux-discuss] Canada timezone files

[Bruce S. <bw...@ar...>]

> I thought tzdata was a package on to it's own?  Home page:
> http://www.twinsun.com/tz/tz-link.htm

That's what I thought, but I did some 'find' commands in the unpacked DL
source code directory, and the only place I can find it is under glibc.

We are running glibc 2.3, and the latest is 2.4.  I'm not sure why we
aren't running 2.4, except _maybe_ it has something to do with the fact
we are still running the 2.4 kernel.  I also downloaded the glibc-2.4
tar file, and the tzdata is in there too.

I suspect we'll end up cobbling something up by either unpacking the new
timezone data into the glibc-2.2 directory, or adding a new script that
overwrites the old tzdata after glibc installs it on the CD image.

> Latest tzdata database files are here: ftp://elsie.nci.nih.gov/pub/

Yup, been there for some of my old Linux boxes.

> I've just started patching all my linux servers also using the latest
> tzdata from the above ftp server, but haven't got to my DL boxes yet to
> check.

I can save you some checking time and tell you that NONE of your DL
boxes have the latest DST fix.

> Also there are a slew of MS updates if anyone has to support them, look
> here: http://www.microsoft.com/DST2007

Been there too.  :-)

 - BS
> 
> 
> Bruce Smith wrote: 
> > Oh crap, you're right.  I can't believe we didn't catch that.  We have
> > the same problem in the USA too.  I've been updating all my other boxes
> > for the new DST, and I forgot all about Devil-Linux.
> > 
> > I've been checking, and it appears that the timezone files are part of
> > the glibc package.  I'm not sure if we should try updating glibc to the
> > latest version or just patch the timezone files.
> > 
> > Heiko is on vacation this week.  When he gets back, we'll come up with a
> > fix and release a new version.  We only have a couple weeks, so we'll
> > have to hurry.
> > 
> > Thanks for reporting this problem!
> > 
> >  - BS
> > 
> > 
> >   
> > > Hello all,
> > > 
> > > I just downloaded the latest version of devil-linux (1.2.12) and it looks like the timezones for
> > > Canada are using a wrong DST setting for this year. Due to our ilustrious leaders, this year DST
> > > starts 3 weeks earlier (http://www.timetemperature.com/tzca/daylight_saving_time_canada.shtml)
> > > Is there any quick and easy way to update timezone files?
> > > Any foreseeble updates with the latest timezone files (this applies to USA too)?
> > > 
> > > Thank you

Re: [Devil-Linux-discuss] Canada timezone files

[Mike <Mi...@4a...>]

Bruce,

I thought tzdata was a package on to it's own?  Home page:
http://www.twinsun.com/tz/tz-link.htm

Latest tzdata database files are here: ftp://elsie.nci.nih.gov/pub/

I've just started patching all my linux servers also using the latest
tzdata from the above ftp server, but haven't got to my DL boxes yet to
check.

Also there are a slew of MS updates if anyone has to support them, look
here: http://www.microsoft.com/DST2007

Mike



Bruce Smith wrote:
> Oh crap, you're right.  I can't believe we didn't catch that.  We have
> the same problem in the USA too.  I've been updating all my other boxes
> for the new DST, and I forgot all about Devil-Linux.
>
> I've been checking, and it appears that the timezone files are part of
> the glibc package.  I'm not sure if we should try updating glibc to the
> latest version or just patch the timezone files.
>
> Heiko is on vacation this week.  When he gets back, we'll come up with a
> fix and release a new version.  We only have a couple weeks, so we'll
> have to hurry.
>
> Thanks for reporting this problem!
>
>  - BS
>
>
>   
>> Hello all,
>>
>> I just downloaded the latest version of devil-linux (1.2.12) and it looks like the timezones for
>> Canada are using a wrong DST setting for this year. Due to our ilustrious leaders, this year DST
>> starts 3 weeks earlier (http://www.timetemperature.com/tzca/daylight_saving_time_canada.shtml)
>> Is there any quick and easy way to update timezone files?
>> Any foreseeble updates with the latest timezone files (this applies to USA too)?
>>
>> Thank you
>>     
>
>
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>
>
>
>   

Re: [Devil-Linux-discuss] Canada timezone files

[Bruce S. <bw...@ar...>]

Oh crap, you're right.  I can't believe we didn't catch that.  We have
the same problem in the USA too.  I've been updating all my other boxes
for the new DST, and I forgot all about Devil-Linux.

I've been checking, and it appears that the timezone files are part of
the glibc package.  I'm not sure if we should try updating glibc to the
latest version or just patch the timezone files.

Heiko is on vacation this week.  When he gets back, we'll come up with a
fix and release a new version.  We only have a couple weeks, so we'll
have to hurry.

Thanks for reporting this problem!

 - BS


> Hello all,
> 
> I just downloaded the latest version of devil-linux (1.2.12) and it looks like the timezones for
> Canada are using a wrong DST setting for this year. Due to our ilustrious leaders, this year DST
> starts 3 weeks earlier (http://www.timetemperature.com/tzca/daylight_saving_time_canada.shtml)
> Is there any quick and easy way to update timezone files?
> Any foreseeble updates with the latest timezone files (this applies to USA too)?
> 
> Thank you

[Devil-Linux-discuss] Canada timezone files

[Bogdan P. <pet...@ya...>]

Hello all,

I just downloaded the latest version of devil-linux (1.2.12) and it looks like the timezones for
Canada are using a wrong DST setting for this year. Due to our ilustrious leaders, this year DST
starts 3 weeks earlier (http://www.timetemperature.com/tzca/daylight_saving_time_canada.shtml)
Is there any quick and easy way to update timezone files?
Any foreseeble updates with the latest timezone files (this applies to USA too)?

Thank you



--------------------------------
Being in the majority means that most people agree with you; it does not mean that you are right.
--------------------------------


 
____________________________________________________________________________________
Now that's room service!  Choose from over 150,000 hotels
in 45,000 destinations on Yahoo! Travel to find your fit.
http://farechase.yahoo.com/promo-generic-14795097

[Devil-Linux-discuss] logrotate kills named logging

[Dick M. <di...@li...>]

I've just realized that named logging stops after logrotate reloads syslog-ng. 
I have to restart named to restore named logging.

I'm not too sure how named communicates with syslog but I guess this is a jail 
problem.

Anybody else have this problem or perhaps an explantion?  Maybe I'm missing 
something from my named.conf (which has no logging options set i.e. uses defaults).

Dick

[Devil-Linux-discuss] [Howto] Run a relaying postfix on your Devil-Linux firewall

[Friedrich L. <fl...@fl...>]

Hi!

[Howto] Run a relaying postfix on your Devil-Linux firewall
ftp://ftp.fl.priv.at/pub/devil-linux/howtos/relaying-postfix-on-DL-howto.txt

Other HowTow's like "how to run sagator on DL" will hopefully follow some 
day when I'm in the mood of documenting.

-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock                       Linux Services Lobenstock
URL: http://www.lsl.at/                         Email: fl...@fl...
____________________________________________________________________

Re: [Devil-Linux-discuss] Dovecot LDA/Sieve request

[Dr. A. B. <be...@ec...>]

I have a script build/install for Dovecot Sieve plugin but I don't have some
time for test it.
In attach there is dovecot-sieve-1.0.1.binaries.tar.bz2 (build vs
dovecot-1.0.rc22), can you test it?

Alberto

+--------------------------+
|   Dott. Alberto Benati   |
|   System Administrator   |
|   Faculty of Economics   |
|  University of  Ferrara  |
| be...@ec... |
|  Tel: +39 0532 45 5012   |
+--------------------------+


---------- Original Message -----------
From: Dick Middleton <di...@li...>
To: dev...@li...
Sent: Thu, 15 Feb 2007 17:29:55 +0000
Subject: [Devil-Linux-discuss] Dovecot LDA/Sieve request

> Could I request Dovecot LDA/Sieve be included in the next release please.
> 
> http://wiki.dovecot.org/LDA/Sieve
> 
> Dick
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to 
> share your opinions on IT & business topics through brief surveys-
> and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
------- End of Original Message -------

[Devil-Linux-discuss] Dovecot LDA/Sieve request

[Dick M. <di...@li...>]

Could I request Dovecot LDA/Sieve be included in the next release please.

http://wiki.dovecot.org/LDA/Sieve

Dick

[Devil-Linux-discuss] DL_config_no_scan option

[Serge <se...@vi...>]

HI,
Is it possible that the no scan option does not work in the new release?
regards!
Serge

Re: [Devil-Linux-discuss] Building the stable version

[Heiko Z. <he...@zu...>]

On Sun, February 11, 2007 16:09, 10...@ti... wrote:
>> Yeap
>> Or just use iso file which get's compiled by the build system.
>> Are you adding anything which could be of common interest? If yes,
>>
> please
>> send in the patches. ;-)
>
> Are you joking? 8-)
> I already sent a
> patch to add fprobe almost a year ago! I still hasn't been added, so I
> keep re-adding it as soon as a new DL version comes out. Also, I still
> keep asking myself "what did I do wrong (or didn't do at all!)" since it
> wasn't added in all this time...

Well let's say I'm a little behind with including things. ;-)

Are there any more people interested in the inclusion of this software?

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

Re: [Devil-Linux-discuss] Bugreports for 1.2.12: GRSecurity and libipt_recent.so

[Heiko Z. <he...@zu...>]

On Sat, February 10, 2007 17:47, Vesselin Kostadinov wrote:
> 1. I noticed the following message on startup:
>
>
> Setting GRSecurity parameters: /etc/init.d/rc3.d/S22grsecurity: line
> 33: /proc/sys/kernel/grsecurity/rand_pids: No such file or directory
> /etc/init.d/rc3.d/S22grsecurity: line
> 33: /proc/sys/kernel/grsecurity/rand_tcp_src_ports: No such file or
> directory
>
>
> (these are 2 lines actually, the mail client breaks them)
>
>
> I cant see any real problem coming out of this though. I am not a
> GRSecurity
> expert by any means.

Don't worry about it, that's just cosmetic.
I will remove the error messages.

> 2. There seems to be missing library required by some netfilter modules:
>
>
> # modprobe ipt_recent    #loads OK!
> # iptables  -A SSH_CHECK -m recent --set --name SSH
> iptables v1.3.7: Couldn't load match
> `recent':/usr/lib/iptables/libipt_recent.so: cannot open shared object
> file:
> No such file or directory
>
>
> Try `iptables -h' or 'iptables --help' for more information.
>
>
>
>
> File /usr/lib/iptables/libipt_recent.so is missing indeed, however there
> are quite a few other netfilter libraries there.

Not sure why the libraries are missing (may be a bug in the latest
iptables). They exist in the build system, but never got copied onto the
media.
I will add some extra code to our build system to make sure all the libs
are being copied for the iptables extensions.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

[Devil-Linux-discuss] R: Re: Building the stable version

[<10...@ti...>]

----Messaggio originale----
Da: fi...@in...
Data: 12-feb-2007 
12.04 PM
A: "10...@ti..."<10...@ti...>, <devil-linux-discuss@lists.
sourceforge.net>
Ogg: Re: [Devil-Linux-discuss] Building the stable 
version

Hi,

10...@ti... wrote:

> I remember your patch. Moreover I 
tested it. As regards of correctness of the
> patch it's very clean and 
nice script as far as I remember.

Thank you! :-)

> Let me correct 
this fault - I'll commit it personally  (If I can remember how to
> do 
it :-) )

<G>
>Don't tell me! I need to write down everything lately, 
or else I forget one half (usually the important one ;-) )

> if there 
are no objection.. Unfortunately I wasn't able to work for
> project 
last time due to my very long business trip. I'm very sorry.

Hope it 
was a fruitful trip!

> But what about stability ? ;-)
For that I 
wouldn't surmise...but....I still have an old IBM PC300GL (PII 450 MHz) 
with a very old OpenVPN 2.0 RC16 and still works without an hitch.
However for now I'm only setting up a prototype to test all the new 
features in prevision of the stable 2.1 so that I'm ready when it's 
out.

> I guess we need a wiki...
I think so...in the meantime, for 
those who asked, I still have to
1) reorganize my sparse tips into 
something more "browsable" and maybe put a license (GPL of course) on 
it
2) translate from italian to english
3) find *the* appropriate place 
where to publish (the wiki?)

By the way, thank you Serge!

Live long 
and prosper

[Devil-Linux-discuss] R: Re: Building the stable version

[<10...@ti...>]

----Messaggio originale----
Da: mat...@va...
Data: 12-
feb-2007 11.49 AM
A: <dev...@li...>
Ogg: 
Re: [Devil-Linux-discuss] Building the stable version

> What exactly 
do you mean by bandwidth aggregation?

I mean using two (or more) lines 
(ADSL/HDSL whatever) on each side to sum their bandwidth and get the 
sum of it even for a single TCP/IP connection.
Server          Client
Line A <---> Line C
Line B <---> Line D

Line A+B <---> Line C+D (the 
uploads if they're ADSL)

Please forgive the rude representation...

> 
OpenVPN is easy enough, and two DL boxes with HeartBeat will be fine 
for
> the redundancy. You could go LVS if you must.

I used a different 
approach.
I establish two unnumbered tunnels each one using a pair of 
lines (A goes to C and B goes to D), then I build a bondX interface 
from the two tunnels and I get more bandwidth and redundance.

Only 
thing it needs is some kind of "link sense" which I realized with a 
bash script.

I hope to have expressed the idea in an understandable 
way 8-)

Live long and prosper

Re: [Devil-Linux-discuss] Building the stable version

[Serge L. <fi...@in...>]

Hi,

10...@ti... wrote:

> Are you joking? 8-)
> I already sent a 
> patch to add fprobe almost a year ago!
> I still hasn't been added, so I keep re-adding it as soon as a new DL version comes out.
> Also, I still keep asking myself "what did I do wrong (or didn't do at all!)" since 
> it wasn't added in all this time...
I remember your patch. Moreover I tested it. As regards of correctness of the
patch it's very clean and nice script as far as I remember.
Let me correct this fault - I'll commit it personally  (If I can remember how to
do it :-) ) if there are no objection.. Unfortunately I wasn't able to work for
project last time due to my very long business trip. I'm very sorry.


> Also, this time I wished to add 
> something more complex, i.e. OpenVPN 2.1 RC1 because of some new 
> features (especially the "topology network" feature) I need in a new 
> project here at work.
> So, just to be sure I was taking safe and sound 
> route I asked here, and it seems it's all ok. (I've got it compiled 
> with no errors).
But what about stability ? ;-)


> I another little question about a different argument.remember
> Here at work I've made some docs and howtos for my colleagues that I'd 
> like to publish somewhere in the Internet.
> They're about installing a 
> DL-based VPN appliance (OpenVPN + bandwidth aggregation + redundance) 
> with firewall builder based firewall and automatic configuration 
> backups (through the network and in an encrypted fashion).
> Is there any interest/need for those?
> I really think knowledge should be spread to 
> all, just like this fantastic product (DL) is. :-)
I guess we need a wiki...

--
 Serge

Re: [Devil-Linux-discuss] Building the stable version

[Matthew H. <mat...@va...>]

What exactly do you mean by bandwidth aggregation?

OpenVPN is easy enough, and two DL boxes with HeartBeat will be fine for
the redundancy. You could go LVS if you must.

-----Original Message-----
From: dev...@li...
[mailto:dev...@li...] On Behalf Of
Moray McConnachie
Sent: 12 February 2007 09:30
To: 10...@ti...; dev...@li...
Subject: Re: [Devil-Linux-discuss] Building the stable version

Can't speak for everyone, but I'd certainly be interested in  seeing
your docs on OpenVPN + bandwidth aggregation + redundance
Yours,
Moray


-------------------------------------=20
Moray McConnachie
IS Manager        +44 1865 261 600
Oxford Analytica  http://www.oxan.com

-----Original Message-----
From: dev...@li...
[mailto:dev...@li...] On Behalf Of
10...@ti...
Sent: 11 February 2007 22:10
To: dev...@li...
Cc: he...@zu...
Subject: Re: [Devil-Linux-discuss] Building the stable version

> Yeap
> Or just use iso file which get's compiled by the build system.
> Are you adding anything which could be of common interest? If yes,
please
> send in the patches. ;-)

Are you joking? 8-)
I already sent a
patch to add fprobe almost a year ago!
I still hasn't been added, so I
keep re-adding it as soon as a new DL version comes out.
Also, I still
keep asking myself "what did I do wrong (or didn't do at all!)" since it
wasn't added in all this time...

Also, this time I wished to add
something more complex, i.e. OpenVPN 2.1 RC1 because of some new
features (especially the "topology network" feature) I need in a new
project here at work.
So, just to be sure I was taking safe and sound route I asked here, and
it seems it's all ok. (I've got it compiled with no errors).

I another little question about a different argument.
Here at work I've made some docs and howtos for my colleagues that I'd
like to publish somewhere in the Internet.
They're about installing a
DL-based VPN appliance (OpenVPN + bandwidth aggregation + redundance)
with firewall builder based firewall and automatic configuration backups
(through the network and in an encrypted fashion).
Is there any
interest/need for those?
I really think knowledge should be spread to all, just like this
fantastic product (DL) is. :-)

Let me know!

Live
long and prosper


------------------------------------------------------------------------
-
Using Tomcat but need to do more? Need to support web services,
security?
Get stuff done quickly with pre-integrated technology to make your job
easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D=
121642
_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss


=20

------------------------------------------------------------------------
-
Using Tomcat but need to do more? Need to support web services,
security?
Get stuff done quickly with pre-integrated technology to make your job
easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D=
121642
_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

Re: [Devil-Linux-discuss] Building the stable version

[Moray M. <mmc...@ox...>]

Can't speak for everyone, but I'd certainly be interested in  seeing
your docs on OpenVPN + bandwidth aggregation + redundance
Yours,
Moray


-------------------------------------=20
Moray McConnachie
IS Manager        +44 1865 261 600
Oxford Analytica  http://www.oxan.com

-----Original Message-----
From: dev...@li...
[mailto:dev...@li...] On Behalf Of
10...@ti...
Sent: 11 February 2007 22:10
To: dev...@li...
Cc: he...@zu...
Subject: Re: [Devil-Linux-discuss] Building the stable version

> Yeap
> Or just use iso file which get's compiled by the build system.
> Are you adding anything which could be of common interest? If yes,
please
> send in the patches. ;-)

Are you joking? 8-)
I already sent a
patch to add fprobe almost a year ago!
I still hasn't been added, so I
keep re-adding it as soon as a new DL version comes out.
Also, I still
keep asking myself "what did I do wrong (or didn't do at all!)" since it
wasn't added in all this time...

Also, this time I wished to add
something more complex, i.e. OpenVPN 2.1 RC1 because of some new
features (especially the "topology network" feature) I need in a new
project here at work.
So, just to be sure I was taking safe and sound route I asked here, and
it seems it's all ok. (I've got it compiled with no errors).

I another little question about a different argument.
Here at work I've made some docs and howtos for my colleagues that I'd
like to publish somewhere in the Internet.
They're about installing a
DL-based VPN appliance (OpenVPN + bandwidth aggregation + redundance)
with firewall builder based firewall and automatic configuration backups
(through the network and in an encrypted fashion).
Is there any
interest/need for those?
I really think knowledge should be spread to all, just like this
fantastic product (DL) is. :-)

Let me know!

Live
long and prosper


------------------------------------------------------------------------
-
Using Tomcat but need to do more? Need to support web services,
security?
Get stuff done quickly with pre-integrated technology to make your job
easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D=
121642
_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss


=20

Re: [Devil-Linux-discuss] Building the stable version

[Kari M. <kar...@tr...>]

10...@ti... wrote:

[snipped... ]

> I another little question about a different argument.
> Here at work I've made some docs and howtos for my colleagues that I'd 
> like to publish somewhere in the Internet.
> They're about installing a 
> DL-based VPN appliance (OpenVPN + bandwidth aggregation + redundance) 
> with firewall builder based firewall and automatic configuration 
> backups (through the network and in an encrypted fashion).
> Is there any 
> interest/need for those?

:-)  Now you must be joking.  For sure we are!

Firewall-1, Cisco, Nokia, and others might *not* want to see those docs, 
tough...

> I really think knowledge should be spread to 
> all, just like this fantastic product (DL) is. :-)
> 
> Let me know!
 >
> Live 
> long and prosper

Re: [Devil-Linux-discuss] Building the stable version

[<10...@ti...>]

> Yeap
> Or just use iso file which get's compiled by the build system.
> Are you adding anything which could be of common interest? If yes, 
please
> send in the patches. ;-)

Are you joking? 8-)
I already sent a 
patch to add fprobe almost a year ago!
I still hasn't been added, so I 
keep re-adding it as soon as a new DL version comes out.
Also, I still 
keep asking myself "what did I do wrong (or didn't do at all!)" since 
it wasn't added in all this time...

Also, this time I wished to add 
something more complex, i.e. OpenVPN 2.1 RC1 because of some new 
features (especially the "topology network" feature) I need in a new 
project here at work.
So, just to be sure I was taking safe and sound 
route I asked here, and it seems it's all ok. (I've got it compiled 
with no errors).

I another little question about a different argument.
Here at work I've made some docs and howtos for my colleagues that I'd 
like to publish somewhere in the Internet.
They're about installing a 
DL-based VPN appliance (OpenVPN + bandwidth aggregation + redundance) 
with firewall builder based firewall and automatic configuration 
backups (through the network and in an encrypted fashion).
Is there any 
interest/need for those?
I really think knowledge should be spread to 
all, just like this fantastic product (DL) is. :-)

Let me know!

Live 
long and prosper

Re: [Devil-Linux-discuss] Bugreports for 1.2.12: GRSecurity and libipt_recent.so

[Dr. A. B. <be...@ec...>]

I don't help you for GRSecurity (I use server release) but for dictionary
based attacks and brute force attacks try Denyhosts (works very well), info to:
http://denyhosts.sourceforge.net

Alberto

+--------------------------+
|   Dott. Alberto Benati   |
|   System Administrator   |
|   Faculty of Economics   |
|  University of  Ferrara  |
| be...@ec... |
|  Tel: +39 0532 45 5012   |
+--------------------------+


---------- Original Message -----------
From: Vesselin Kostadinov <vk...@ex...>
To: dev...@li...
Sent: Sun, 11 Feb 2007 10:17:36 +1030
Subject: [Devil-Linux-discuss] Bugreports for 1.2.12: GRSecurity and
libipt_recent.so

> 1. I noticed the following message on startup:
> 
> Setting GRSecurity parameters: /etc/init.d/rc3.d/S22grsecurity: line 
> 33: /proc/sys/kernel/grsecurity/rand_pids: No such file or directory
> /etc/init.d/rc3.d/S22grsecurity: line
> 
> 33: /proc/sys/kernel/grsecurity/rand_tcp_src_ports: No such file or directory
> 
> (these are 2 lines actually, the mail client breaks them)
> 
> I cant see any real problem coming out of this though. I am not a 
> GRSecurity expert by any means.
> 
> 2. There seems to be missing library required by some netfilter modules:
> 
> # modprobe ipt_recent    #loads OK!
> # iptables  -A SSH_CHECK -m recent --set --name SSH
> iptables v1.3.7: Couldn't load match 
> `recent':/usr/lib/iptables/libipt_recent.so: cannot open shared 
> object file: No such file or directory
> 
> Try `iptables -h' or 'iptables --help' for more information.
> 
> File /usr/lib/iptables/libipt_recent.so is missing indeed, however 
> there are quite a few other netfilter libraries there.
> 
> If somebody knows a reasonably good alternative way for defending 
> from dictionary ssh attacks please let me know.
> 
> Regards
> 
> Vesselin
> 
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your 
> job easier. Download IBM WebSphere Application Server v.1.0.1 based 
> on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
------- End of Original Message -------

[Devil-Linux-discuss] Bugreports for 1.2.12: GRSecurity and libipt_recent.so

[Vesselin K. <vk...@ex...>]

1. I noticed the following message on startup:

Setting GRSecurity parameters: /etc/init.d/rc3.d/S22grsecurity: line 
33: /proc/sys/kernel/grsecurity/rand_pids: No such file or directory
/etc/init.d/rc3.d/S22grsecurity: line 
33: /proc/sys/kernel/grsecurity/rand_tcp_src_ports: No such file or directory


(these are 2 lines actually, the mail client breaks them)

I cant see any real problem coming out of this though. I am not a GRSecurity 
expert by any means.


2. There seems to be missing library required by some netfilter modules:

# modprobe ipt_recent    #loads OK!
# iptables  -A SSH_CHECK -m recent --set --name SSH
iptables v1.3.7: Couldn't load match 
`recent':/usr/lib/iptables/libipt_recent.so: cannot open shared object file: 
No such file or directory

Try `iptables -h' or 'iptables --help' for more information.



File /usr/lib/iptables/libipt_recent.so is missing indeed, however there are 
quite a few other netfilter libraries there.


If somebody knows a reasonably good alternative way for defending from 
dictionary ssh attacks please let me know.


Regards

Vesselin

Re: [Devil-Linux-discuss] Building the stable version

[Heiko Z. <he...@zu...>]

On Thu, February 8, 2007 13:48, Michele Pensotti wrote:
> At 08.28 08/02/2007 -0600, Heiko Zuerker wrote:
>
>> This is the current 'stable' release, it's just a little more current
>> then the official one.
>
> Ok, I hadn't quite got it!
>
>
> So, can I safely compile some addon binaries on this build system and be
> confident that I can safely add them to the 1.2.12 .iso file downloaded
> from the official mirror?

Yeap
Or just use iso file which get's compiled by the build system.
Are you adding anything which could be of common interest? If yes, please
send in the patches. ;-)

> Widely, my question could expand to "What are the exact prerequisites of
> an "external" binary executable to be able to run on DL?"
> For example, can I run a binary from , say, a Debian Sarge install or a
> Centos one?

I can't really give you the exact prerequisites (I'm not a software
developer), but the glibc version should be compatible. I.e. if you
compiled it on glibc 2.3, it should work on DL.

>> Unfortunately we can't separate out the various releases, it would eat
>> up too much disk space.
>
> I can understand , that's ok with me.
>
>
> Thanks again :-) (for everything, from the wonderful distro to the
> support I'm getting here)

You are welcome

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

[Devil-Linux-discuss] PPTP from Devil?

[James H. <ha...@wa...>]

Can someone point me in the right direction to establish a PPTP VPN from
my Devil box to a MS box.
 
I have VPN incoming into the Devil box working, but am not sure how to
initiate a outgoing tunnel.
 
Thanks,
 
Jim

Re: [Devil-Linux-discuss] Sagator as MTA?

[Dick M. <di...@li...>]

Kari Mattsson wrote:
> Hi,
> 
> Our level of email backscatter has increased 600% in last 6 weeks from 
> avg of 6500/day to 35,000/day and is bogging down our mail server.
> 
> My first thought was to use my handy dandy DL to solve this. So I'm 
> trying to configure a DL box to act as an email filter in front of our 
> mail server, so once configured and tested I'll update our MX records ( 
> I have 50 domains and 1000 users) to the new DL box.
> 
> I've got clamav & spamd configured, but trying to figure out how to get 
> sagator to accept the inbound mail on port 25 before relaying the good 
> email on to our QMail server.

Have a look at this:

assp.sourceforge.net

I only discovered it yesterday so I don't know much about it but it looks 
interesting.

Dick

Re: [Devil-Linux-discuss] Dual VPN Servers (SOLVED!)

[Frank W. <Fra...@ct...>]

Hi all,

rest assured this is the last message on this subject :-)

it has turned out (thanks Stefan) that I need the 'nostrip' option in the=20
proxy.conf entries. Otherwise the realm gets stripped off the username befo=
re=20
proxying to IAS, an then CHAP gets confused. It's obvious once you know it.

Thanks again Serge and Matthew for your help!

=46rank

=2D-=20
_______________________________________________
 Centre de Technologie de l'Education
 29 avenue John F. Kennedy
 L-1855 Luxembourg-Kirchberg
 email: Fra...@ct...
 t=E9l.: +352 478-5973
 fax: +352 333797
 _______________________________________________