- Legacy - lists.gtalug.org

God help us all...
by joehill-rieW9WUcm8FFJ04o6PK0Fg＠public.gmane.org 01 Dec '03

01 Dec '03

""We'd like to have one of our operating systems in every car on Earth," said Dick Brass, vice-president of Microsoft's automotive business unit. "It's a lofty goal."" Isn't driving in Toronto scary *enough*? http://www.wired.com/news/autotech/0,2554,61412,00.html?tw=wn_tophead_7 -- JoeHill ++ ICQ # 280779813 Registered Linux user #282046 Homepage: www.orderinchaos.org +++++++++++++++++++++++++++ "You tell me it's the institution; Well you know, you better free your mind instead..."-- John Lennon -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Chris is still confused
by fraser-Txk5XLRqZ6CsTnJN9+BGXg＠public.gmane.org 01 Dec '03

01 Dec '03

On December 1, 2003 02:07 pm, Teddy Mills wrote: > internet interface is ppp0 > internal inteface is eth1 > > This is on a DNS and Web server (I know, not the idea, but Im pressed for > space.) > All I want to is stop everything coming in, and allow ports 22,25,53,80. Go to http://shorewall.sourceforge.net/ read their quickstart guide, install it, configure it, forget about it. -- Fraser Campbell <fraser-Txk5XLRqZ6CsTnJN9+BGXg at public.gmane.org> http://www.wehave.net/ Georgetown, Ontario, Canada Debian GNU/Linux -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Chris is still confused
by fraser-Txk5XLRqZ6CsTnJN9+BGXg＠public.gmane.org 01 Dec '03

01 Dec '03

On December 1, 2003 02:07 pm, Teddy Mills wrote: > Anyways here it is....SMTP and DNS still messed up... Go to http://shorewall.sourceforge.net/ read their excellent quickstart guides, install shorewall, forget your troubles. -- Fraser Campbell <fraser-Txk5XLRqZ6CsTnJN9+BGXg at public.gmane.org> http://www.wehave.net/ Georgetown, Ontario, Canada Debian GNU/Linux -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Chris is still confused
by kcozens-qazKcTl6WRFWk0Htik3J/w＠public.gmane.org 01 Dec '03

01 Dec '03

At 02:07 PM 12/01/2003 -0500, Teddy Mills wrote: >All I want to is stop everything coming in, and allow ports 22,25,53,80. > >Can someone post a generic one? Amazingly, this is not easy to find. >My script is 95% there, but that last 5% will be difficult. >Might be easier to work with a new script. [snip] >I want to start by not allowing anything, and then allowing only >22,25,53,80. You might want to check out the MonMotha script at: http://monmotha.mplug.org/firewall/index.php It is the script I am using on a couple of machines. It denies everything except for what you tell it to allow. It is easily configured by setting the contents of a few variables near the start of the script. Cheers! Kevin. (http://www.interlog.com/~kcozens/) Owner of Elecraft K2 #2172 |"What are we going to do today, Borg?" E-mail:kcozens at interlog dot com|"Same thing we always do, Pinkutus: Packet:ve3syb-XXPEJ3/fxIc at public.gmane.org#con.on.ca.na| Try to assimilate the world!" #include <disclaimer/favourite> | -Pinkutus & the Borg -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

telnet
by mervc-MwcKTmeKVNQ＠public.gmane.org 01 Dec '03

01 Dec '03

On November 30, 2003 11:23 pm, Jing Su wrote: > Depending on your terminal.... if you hold CTRL+RightMouseButton, you get > a popup where you can pick relative font sizes (small medium big, etc) > I normally use the KDE Konsole term window. CTRL+RightMouseButton means a quite different popup is displayed. But the Debian Xterm works as you'all described, so my eyes are relaxed with those nice large fonts. Cheers to all -- Merv Curley Scarborough, Ont Libranet Linux 2.8 KDE 3.1.4 KMail 1.5.4 -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

telnet
by mervc-MwcKTmeKVNQ＠public.gmane.org 01 Dec '03

01 Dec '03

On December 1, 2003 07:00 am, Scott Allen wrote: > > From the home page: > "gtermix is a gtk+ telnet client intended for calling BBSes. It > utilizes a custom VGA textmode emulating terminal widget that allows it > to accurately render bulletin board systems as they were in DOS > terminal programs." > > http://gtermix.sourceforge.net/ Thanks Scott. It is so new that searching Sourceforge yesterday didn't reveal it. I tried to DL but the mirrors I tried, denied having it. It is Alfa 0.1 release so bound to be some problems. I have a note to try again in a few days. Cheers -- Merv Curley Scarborough, Ont Libranet Linux 2.8 KDE 3.1.4 KMail 1.5.4 -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

telnet
by mervc-MwcKTmeKVNQ＠public.gmane.org 01 Dec '03

01 Dec '03

On November 30, 2003 11:40 pm, Chris F.A. Johnson wrote: > > Control-RightMouseButton > > Or call it with a font specification, e.g.: > > xterm -font "-*-lucidatypewriter-medium-*-*-*-*-140-*-*-*-*-*-*" Thanks all Control-RightMouseButton worked just fine and now I can read all the screens of BBS menus. There are some color issues but I assume that the BBS was designed for viewing with Windows colorsets and fonts. Cheers -- Merv Curley Scarborough, Ont Libranet Linux 2.8 KDE 3.1.4 KMail 1.5.4 -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

XFCE4 RPM's for MDK 9.2
by blsonne-bJEeYj9oJeDQT0dZR+AlfA＠public.gmane.org 01 Dec '03

01 Dec '03

> With all the GUI talk, just thought I'd post a link to this, add the source > using urpmi.addmedia, and urpmi xfce4: I used to use XFCE on an OpenBSD box that was kinda underpowered; it was a good little gui environment that did exactly what I needed, without all the bells and whistles. Seemed pretty solid too. -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Chris is still confused
by teddymills-VFlxZYho3OA＠public.gmane.org 01 Dec '03

01 Dec '03

internet interface is ppp0 internal inteface is eth1 This is on a DNS and Web server (I know, not the idea, but Im pressed for space.) All I want to is stop everything coming in, and allow ports 22,25,53,80. Can someone post a generic one? Amazingly, this is not easy to find. My script is 95% there, but that last 5% will be difficult. Might be easier to work with a new script. Theres lots of them out there, that start by allowing everything, and then restricting. I want to start by not allowing anything, and then allowing only 22,25,53,80. Tried those online firewall config toolkits, but I have yet to have one work. And for my script, im still cannot get all packets relating to SMTP or DNS to move correctly. Anyways here it is....SMTP and DNS still messed up... [root-v+aXH1h/sVw at public.gmane.org scripts]# cat firewall #!/bin/sh echo "Firewall 5.00 starting..." # **************************************** # Flushing all chains and reset iptables # **************************************** /sbin/iptables -F /sbin/iptables -F INPUT /sbin/iptables -F OUTPUT /sbin/iptables -F FORWARD /sbin/iptables -t nat -F /sbin/iptables -X /sbin/iptables -Z # ********************************************** # DROP THESE PACKETS # ********************************************* echo Default policy to DROP all INPUT packets /sbin/iptables --policy INPUT DROP echo Default policy to DROP all OUTPUT packets /sbin/iptables --policy OUTPUT DROP echo Default policy to DROP all FORWARD packets /sbin/iptables --policy FORWARD DROP echo SPOOF DROP incoming 192.168.0.0 packets from ppp0 /sbin/iptables -A INPUT -i ppp0 -s 192.168.0.0/24 -j DROP # ********************************************** # drop these nutbars # ********************************************* echo Drop that spammer bitch from China 218.70.8.186 /sbin/iptables -A INPUT -s 218.70.8.186/24 -j DROP /sbin/iptables -A INPUT -s 218.70.0.0/24 -j DROP # *************************************** # Kernel netfilter variables # *************************************** echo "1" > /proc/sys/net/ipv4/tcp_syncookies echo "1" > /proc/sys/net/ipv4/conf/all/rp_filter echo "1" > /proc/sys/net/ipv4/ip_dynaddr echo "1" > /proc/sys/net/ipv4/ip_forward # echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all echo "0" > /proc/sys/net/ipv4/conf/all/accept_redirects echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts echo "0" > /proc/sys/net/ipv4/conf/all/accept_source_route echo "1" > /proc/sys/net/ipv4/icmp_ignore_bogus_error_responses echo "1" > /proc/sys/net/ipv4/conf/all/log_martians # **************************************************************** # ACCEPT THESE PACKETS # **************************************************************** echo Enable NAT/MASQUERADING and IPforwarding /sbin/iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE -j ACCEPT echo Accept fragmented packets /sbin/iptables -A FORWARD -f -j ACCEPT echo accept packets from an already established TCP connection /sbin/iptables -A FORWARD -m state -p tcp --state ESTABLISHED,RELATED -j ACCEPT echo allow everything on eth1 network /sbin/iptables -A INPUT -i eth1 -p all -j ACCEPT /sbin/iptables -A OUTPUT -o eth1 -p all -j ACCEPT /sbin/iptables -A FORWARD -i eth1 -p all -j ACCEPT echo allow everything on the loopback interface /sbin/iptables -A INPUT -i lo -p all -j ACCEPT /sbin/iptables -A OUTPUT -o lo -p all -j ACCEPT /sbin/iptables -A FORWARD -i lo -p all -j ACCEPT # ********************************************************** # ppp0 INPUT and FORWARD rules # ********************************************************** echo allow incoming traffic 110 993 /sbin/iptables -A FORWARD -p tcp -i ppp0 --dport 110 -j ACCEPT /sbin/iptables -A FORWARD -p tcp -i ppp0 --dport 993 -j ACCEPT # *************************************************************** # ppp0 OUTPUT and FORWARD rules # *************************************************************** echo allow outgoing ppp0 traffic 110 993 /sbin/iptables -A FORWARD -p tcp -o ppp0 --dport 110 -j ACCEPT /sbin/iptables -A FORWARD -p tcp -o ppp0 --dport 993 -j ACCEPT ################################################################# # ICMP 8 ################################################################# /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 8 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 8 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 8 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 8 --sport 0:1024 -j ACCEPT ################################################################# # DNS 53 ################################################################# /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 53 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 53 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 53 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 53 --sport 0:1024 -j ACCEPT /sbin/iptables -A FORWARD -i ppp0 -p udp --dport 53 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p udp --dport 53 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p udp --dport 53 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p udp --dport 53 --sport 0:1024 -j ACCEPT ################################################################# # SMTP server 25 ################################################################ /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 25 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 25 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 25 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 25 --sport 0:1024 -j ACCEPT ################################################################# # AUTH 113 ################################################################ /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 113 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 113 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 113 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 113 --sport 0:1024 -j ACCEPT ################################################################# # IMAP 143 ################################################################ /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 143 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 143 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 143 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 143 --sport 0:1024 -j ACCEPT ################################################################# # httpd 80 ################################################################ /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 80 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 80 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 80 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 80 --sport 0:1024 -j ACCEPT ################################################################# # ssh 22 ################################################################ /sbin/iptables -A FORWARD -i ppp0 -p tcp --dport 22 -j ACCEPT /sbin/iptables -A FORWARD -o ppp0 -p tcp --dport 22 -j ACCEPT /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 22 --sport 0:1024 -j ACCEPT /sbin/iptables -A INPUT -i ppp0 -p tcp --dport 22 --sport 0:1024 -j ACCEPT # ***************************************************** # Loading Iptable modules (enable if not kernel builtin) # ***************************************************** # /sbin/modprobe ip_tables # /sbin/modprobe ip_conntrack # /sbin/modprobe ip_nat_ftp # /sbin/modprobe ip_conntrack_ftp # ***************************************** # Disabled rules # ***************************************** # echo Catchall In case a packet made it here, drop all other traffic. # /sbin/iptables -A FORWARD -j DROP # echo Drop any incoming SMTP packets # /sbin/iptables -A INPUT -p tcp -i ppp0 -s 0/0 --dport 25 -j DROP [root-v+aXH1h/sVw at public.gmane.org scripts]# --------------------------------------------------------------- teddy mills http://www.vger.ca VGER directives...To collect...all that is collectable. To sell...all that is saleable.To merchandise...all that is merchandisable. Family Guys, Quagmire "allllllllllllllllllllllllllllllll right" -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

telnet
by a67582000-/E1597aS9LQAvxtiuMwx3w＠public.gmane.org 01 Dec '03

01 Dec '03

Make sure you are using an up-to-date Xft package if you are using anti-aliasing fonts. Versions of Xft shipped with RH80 among others have a memory leak (http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=76219) I've seen it suck up >60MB of memory in short order. --- Merv Curley <mervc-MwcKTmeKVNQ at public.gmane.org> wrote: > On November 30, 2003 11:23 pm, Jing Su wrote: > > Depending on your terminal.... if you hold > CTRL+RightMouseButton, you get > > a popup where you can pick relative font sizes > (small medium big, etc) > > > I normally use the KDE Konsole term window. > CTRL+RightMouseButton means > a quite different popup is displayed. But the > Debian Xterm works as > you'all described, so my eyes are relaxed with those > nice large fonts. > > Cheers to all > > -- > Merv Curley > > Scarborough, Ont > > Libranet Linux 2.8 KDE 3.1.4 KMail 1.5.4 > > > -- > The Toronto Linux Users Group. Meetings: > http://tlug.ss.org > TLUG requests: Linux topics, No HTML, wrap text > below 80 columns > How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml ______________________________________________________________________ Post your free ad now! http://personals.yahoo.ca -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0