December 2003 - Legacy - lists.gtalug.org

Chris is still confused
by kcozens-qazKcTl6WRFWk0Htik3J/w＠public.gmane.org 01 Dec '03

01 Dec '03

At 02:07 PM 12/01/2003 -0500, Teddy Mills wrote: >All I want to is stop everything coming in, and allow ports 22,25,53,80. > >Can someone post a generic one? Amazingly, this is not easy to find. >My script is 95% there, but that last 5% will be difficult. >Might be easier to work with a new script. [snip] >I want to start by not allowing anything, and then allowing only >22,25,53,80. You might want to check out the MonMotha script at: http://monmotha.mplug.org/firewall/index.php It is the script I am using on a couple of machines. It denies everything except for what you tell it to allow. It is easily configured by setting the contents of a few variables near the start of the script. Cheers! Kevin. (http://www.interlog.com/~kcozens/) Owner of Elecraft K2 #2172 |"What are we going to do today, Borg?" E-mail:kcozens at interlog dot com|"Same thing we always do, Pinkutus: Packet:ve3syb-XXPEJ3/fxIc at public.gmane.org#con.on.ca.na| Try to assimilate the world!" #include <disclaimer/favourite> | -Pinkutus & the Borg -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

telnet
by mervc-MwcKTmeKVNQ＠public.gmane.org 01 Dec '03

01 Dec '03

On November 30, 2003 11:23 pm, Jing Su wrote: > Depending on your terminal.... if you hold CTRL+RightMouseButton, you get > a popup where you can pick relative font sizes (small medium big, etc) > I normally use the KDE Konsole term window. CTRL+RightMouseButton means a quite different popup is displayed. But the Debian Xterm works as you'all described, so my eyes are relaxed with those nice large fonts. Cheers to all -- Merv Curley Scarborough, Ont Libranet Linux 2.8 KDE 3.1.4 KMail 1.5.4 -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

telnet
by mervc-MwcKTmeKVNQ＠public.gmane.org 01 Dec '03

01 Dec '03

On December 1, 2003 07:00 am, Scott Allen wrote: > > From the home page: > "gtermix is a gtk+ telnet client intended for calling BBSes. It > utilizes a custom VGA textmode emulating terminal widget that allows it > to accurately render bulletin board systems as they were in DOS > terminal programs." > > http://gtermix.sourceforge.net/ Thanks Scott. It is so new that searching Sourceforge yesterday didn't reveal it. I tried to DL but the mirrors I tried, denied having it. It is Alfa 0.1 release so bound to be some problems. I have a note to try again in a few days. Cheers -- Merv Curley Scarborough, Ont Libranet Linux 2.8 KDE 3.1.4 KMail 1.5.4 -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

telnet
by mervc-MwcKTmeKVNQ＠public.gmane.org 01 Dec '03

01 Dec '03

On November 30, 2003 11:40 pm, Chris F.A. Johnson wrote: > > Control-RightMouseButton > > Or call it with a font specification, e.g.: > > xterm -font "-*-lucidatypewriter-medium-*-*-*-*-140-*-*-*-*-*-*" Thanks all Control-RightMouseButton worked just fine and now I can read all the screens of BBS menus. There are some color issues but I assume that the BBS was designed for viewing with Windows colorsets and fonts. Cheers -- Merv Curley Scarborough, Ont Libranet Linux 2.8 KDE 3.1.4 KMail 1.5.4 -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

XFCE4 RPM's for MDK 9.2
by blsonne-bJEeYj9oJeDQT0dZR+AlfA＠public.gmane.org 01 Dec '03

01 Dec '03

> With all the GUI talk, just thought I'd post a link to this, add the source > using urpmi.addmedia, and urpmi xfce4: I used to use XFCE on an OpenBSD box that was kinda underpowered; it was a good little gui environment that did exactly what I needed, without all the bells and whistles. Seemed pretty solid too. -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Chris is still confused
by teddymills-VFlxZYho3OA＠public.gmane.org 01 Dec '03

01 Dec '03

internet interface is ppp0 internal inteface is eth1 This is on a DNS and Web server (I know, not the idea, but Im pressed for space.) All I want to is stop everything coming in, and allow ports 22,25,53,80. Can someone post a generic one? Amazingly, this is not easy to find. My script is 95% there, but that last 5% will be difficult. Might be easier to work with a new script. Theres lots of them out there, that start by allowing everything, and then restricting. I want to start by not allowing anything, and then allowing only 22,25,53,80. Tried those online firewall config toolkits, but I have yet to have one work. And for my script, im still cannot get all packets relating to SMTP or DNS to move correctly. Anyways here it is....SMTP and DNS still messed up... [root-v+aXH1h/sVw at public.gmane.org scripts]# cat firewall #!/bin/sh echo "Firewall 5.00 starting..." # **************************************** # Flushing all chains and reset iptables # **************************************** /sbin/iptables -F /sbin/iptables -F INPUT /sbin/iptables -F OUTPUT /sbin/iptables -F FORWARD /sbin/iptables -t nat -F /sbin/iptables -X /sbin/iptables -Z # ********************************************** # DROP THESE PACKETS # ********************************************* echo Default policy to DROP all INPUT packets /sbin/iptables --policy INPUT DROP echo Default policy to DROP all OUTPUT packets /sbin/iptables --policy OUTPUT DROP echo Default policy to DROP all FORWARD packets /sbin/iptables --policy FORWARD DROP echo SPOOF DROP incoming 192.168.0.0 packets from ppp0 /sbin/iptables -A INPUT -i ppp0 -s 192.168.0.0/24 -j DROP # ********************************************** # drop these nutbars # ********************************************* echo Drop that spammer bitch from China 218.70.8.186 /sbin/iptables -A INPUT -s 218.70.8.186/24 -j DROP /sbin/iptables -A INPUT -s 218.70.0.0/24 -j DROP # *************************************** # Kernel netfilter variables # *************************************** echo "1" > /proc/sys/net/ipv4/tcp_syncookies echo "1" > /proc/sys/net/ipv4/conf/all/rp_filter echo "1" > /proc/sys/net/ipv4/ip_dynaddr echo "1" > /proc/sys/net/ipv4/ip_forward # echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all echo "0" > /proc/sys/net/ipv4/conf/all/accept_redirects echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts echo "0" > /proc/sys/net/ipv4/conf/all/accept_source_route echo "1" > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses echo "1" > /proc/sys/net/ipv4/conf/all/log_martians # **************************************************************** # ACCEPT THESE PACKETS # **************************************************************** echo Enable NAT/MASQUERADING and IPforwarding /sbin/iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE -j ACCEPT echo Accept fragmented packets /sbin/iptables -A FORWARD -f -j ACCEPT echo accept packets from an already established TCP connection /sbin/iptables -A FORWARD -m state -p tcp --state ESTABLISHED,RELATED -j ACCEPT echo allow everything on eth1 network /sbin/iptables -A INPUT -i eth1 -p all -j ACCEPT /sbin/iptables -A OUTPUT -o eth1 -p all -j ACCEPT /sbin/iptables -A FORWARD -i eth1 -p all -j ACCEPT echo allow everything on the loopback interface /sbin/iptables -A INPUT -i lo -p all -j ACCEPT /sbin/iptables -A OUTPUT -o lo -p all -j ACCEPT /sbin/iptables -A FORWARD -i lo -p all -j ACCEPT # ********************************************************** # ppp0 INPUT and FORWARD rules # ********************************************************** echo allow incoming traffic 110 993 /sbin/iptables -A FORWARD -p tcp -i ppp0 --dport 110 -j ACCEPT /sbin/iptables -A FORWARD -p tcp -i ppp0 --dport 993 -j ACCEPT # *************************************************************** # ppp0 OUTPUT and FORWARD rules # *************************************************************** echo allow outgoing ppp0 traffic 110 993 /sbin/iptables -A FORWARD -p tcp -o ppp0 --dport 110 -j ACCEPT /sbin/iptables -A FORWARD -p tcp -o ppp0 --dport 993 -j ACCEPT ################################################################# # ICMP 8 ################################################################# /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 8 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 8 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 8 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 8 --sport 0:1024 -j ACCEPT ################################################################# # DNS 53 ################################################################# /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 53 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 53 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 53 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 53 --sport 0:1024 -j ACCEPT /sbin/iptables -A FORWARD -i ppp0 -p udp --dport 53 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p udp --dport 53 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p udp --dport 53 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p udp --dport 53 --sport 0:1024 -j ACCEPT ################################################################# # SMTP server 25 ################################################################ /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 25 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 25 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 25 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 25 --sport 0:1024 -j ACCEPT ################################################################# # AUTH 113 ################################################################ /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 113 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 113 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 113 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 113 --sport 0:1024 -j ACCEPT ################################################################# # IMAP 143 ################################################################ /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 143 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 143 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 143 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 143 --sport 0:1024 -j ACCEPT ################################################################# # httpd 80 ################################################################ /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 80 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 80 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 80 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 80 --sport 0:1024 -j ACCEPT ################################################################# # ssh 22 ################################################################ /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 22 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 22 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 22 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 22 --sport 0:1024 -j ACCEPT # ***************************************************** # Loading Iptable modules (enable if not kernel builtin) # ***************************************************** # /sbin/modprobe ip_tables # /sbin/modprobe ip_conntrack # /sbin/modprobe ip_nat_ftp # /sbin/modprobe ip_conntrack_ftp # ***************************************** # Disabled rules # ***************************************** # echo Catchall In case a packet made it here, drop all other traffic. # /sbin/iptables -A FORWARD -j DROP # echo Drop any incoming SMTP packets # /sbin/iptables -A INPUT -p tcp -i ppp0 -s 0/0 --dport 25 -j DROP [root-v+aXH1h/sVw at public.gmane.org scripts]# --------------------------------------------------------------- teddy mills http://www.vger.ca VGER directives...To collect...all that is collectable. To sell...all that is saleable.To merchandise...all that is merchandisable. Family Guys, Quagmire "allllllllllllllllllllllllllllllll right" -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

telnet
by a67582000-/E1597aS9LQAvxtiuMwx3w＠public.gmane.org 01 Dec '03

01 Dec '03

Make sure you are using an up-to-date Xft package if you are using anti-aliasing fonts. Versions of Xft shipped with RH80 among others have a memory leak (http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=76219) I've seen it suck up >60MB of memory in short order. --- Merv Curley <mervc-MwcKTmeKVNQ at public.gmane.org> wrote: > On November 30, 2003 11:23 pm, Jing Su wrote: > > Depending on your terminal.... if you hold > CTRL+RightMouseButton, you get > > a popup where you can pick relative font sizes > (small medium big, etc) > > > I normally use the KDE Konsole term window. > CTRL+RightMouseButton means > a quite different popup is displayed. But the > Debian Xterm works as > you'all described, so my eyes are relaxed with those > nice large fonts. > > Cheers to all > > -- > Merv Curley > > Scarborough, Ont > > Libranet Linux 2.8 KDE 3.1.4 KMail 1.5.4 > > > -- > The Toronto Linux Users Group. Meetings: > http://tlug.ss.org > TLUG requests: Linux topics, No HTML, wrap text > below 80 columns > How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml ______________________________________________________________________ Post your free ad now! http://personals.yahoo.ca -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

telnet
by tim-s/rLXaiAEBtBDgjK7y7TUQ＠public.gmane.org 01 Dec '03

01 Dec '03

Robert Brockway <robert-5LEc/6Zm6xCUd8a0hrldnti2O/JbrIOy at public.gmane.org> writes: > On Sun, 30 Nov 2003, Chris F.A. Johnson wrote: > > > Control-RightMouseButton > > Some xterm clones/replacements (notably rxvt) don't support this > (unfortunately as it is a fantastic feature). > > > Or call it with a font specification, e.g.: > > > > xterm -font "-*-lucidatypewriter-medium-*-*-*-*-140-*-*-*-*-*-*" > > Or use xrdb to set application defaults for your account. FYI, recent xterm on some (many, most?) distributions have support for anti-aliased fonts. To choose an anti-aliased font, use "-fa": xterm -fa 'Bitstream Vera Sans Mono:size=12' xterm -fa 'Luxi Mono:size=14' You can use fc-list to list the fonts available via fontconfig: fc-list And, of course, you can set these resources in your ~/.Xresources file which is typically loaded for you (with xrdb) during login: XTerm*faceName: Bitstream Vera Sans Mono XTerm*faceSize: 12 -- tim writer <tim-s/rLXaiAEBtBDgjK7y7TUQ at public.gmane.org> starnix inc. 905.771.0017 ext. 225 thornhill, ontario, canada http://www.starnix.com professional linux services & products -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

XFCE4 RPM's for MDK 9.2
by joehill-rieW9WUcm8FFJ04o6PK0Fg＠public.gmane.org 01 Dec '03

01 Dec '03

With all the GUI talk, just thought I'd post a link to this, add the source using urpmi.addmedia, and urpmi xfce4: http://www.eslrahc.com/ Courtesy of Charles E. on the Mandrake lists. -- JoeHill ++ ICQ # 280779813 Registered Linux user #282046 Homepage: www.orderinchaos.org +++++++++++++++++++++++++++ "True communication is possible only between equals, because inferiors are more consistently rewarded for telling their superiors pleasant lies than for telling the truth."-- The SNAFU Principle -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Selling Linux ??
by cbbrowne-HInyCGIudOg＠public.gmane.org 01 Dec '03

01 Dec '03

> On Sun, 30 Nov 2003, Howard Gibson wrote: > > > As far as a central computer is concerned, there is no free lunch. > > No, but you can get a discounted lunch. Copy-on-write pages, more > efficient use of cpu (on a single user box the cpu is largely idle), etc, > allow for far far more efficient use of system resources. In addition, for applications involving large binaries and/or large sets of shared libraries, that "stuff" can get shared across multiple users. For instance, if you have 10 users running 10 GNOME applications, the binaries for the apps are only loaded once, and shared across all the users. Similarly, if they are all running OpenOffice.org, much of the app should be shared, saving a pile of memory. This is NOT a help when running applications that load a lot of their runtime state using an interpreted language. - Multiple instances of Mozilla will be very costly because of the great gobs of ECMAScript. - Likewise, instances of Emacs load ELisp independently, and so a lot of that _won't_ be shared. - Apps written in Perl that use a whole lot of libraries don't get any benefit from this. -- let name="aa454" and tld="freenet.carleton.ca" in String.concat "@" [name;tld];; http://www3.sympatico.ca/cbbrowne/rdbms.html Always remember that you're unique, just like everyone else. -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0