KCLUG

kclug@kclug.org

3239 discussions

RE: BitTorrent + INDUCE Act + Linspire 5.0
by Brian Densmore 11 Oct '04

11 Oct '04

That would be P2P hardware. Additionally until IBM can figure out to teleport more than a few bosons at a time you won't have the instant global access to that station wagon. And then each tape would still only be accessible by one user at a time. Brian D Windows is a 32 bit extension to a 16-bit graphical shell for an 8-bit operating system originally for a 4-bit microprocessor by a 2-bit company that can't stand 1 bit of competition > -----Original Message----- > From: Jonathan Hutchins > > > "Never underestimate the bandwidth of a station wagon full of tapes." > > How's that for "P2P" software?

2 1

Re: How to Trackdown a Hardware Failure with Knoppix?
by Jonathan Hutchins 11 Oct '04

11 Oct '04

On Monday 11 October 2004 06:56 am, lowell(a)kc.rr.com wrote: > I have heard that moving them to a new <pci?> slot helps;won't do much good > with an agp video card, tho'... It can help in some cases, but physically there's no difference. If you've changed cards, sometimes it's necessary to clear the BIOS information for the old card, and sometimes this is easier if you move cards around, but there are better ways to handle that.

2 1

RE: BitTorrent + INDUCE Act + Linspire 5.0
by Brian Densmore 11 Oct '04

11 Oct '04

Wellllllll..... I agree with you, partially. ftp and scp could conceiveably be construed as P2P. Especially anonymous ftp, or ftp that doesn't require a login. In any event ftp and scp could be considered to violate the induce act. Fortunately, it was defeated for this time around Congress. It should be interesting how this one gets brought back next term. On the plus side, it has been twice defeated, but I suspect our most esteemed Congressman Orin Hatch will have a new version to please his constituents ... err ... clients ... err ... ummm ... what do we call his financial backers who have no influence over his decision making and never would consider bribing him in the form of contributions, etc. to get laws passed that are in their agenda? Brian > -----Original Message----- > From: Frank Wiles > > On Fri, 8 Oct 2004 17:34:20 -0500 > Jonathan Hutchins wrote: > > > On Friday 08 October 2004 02:17 pm, Jeremy Turner wrote: > > > > > This week's Michael's Minutes talked about how Linspire > 5.0 might be > > > illegal because it incorporates BitTorrent/P2P. The INDUCE Act is > > > trying to make all P2P software illegal, but it could have a lot > > > broader effect than just a bunch of copyrighted music. > > > > That would include P2P software like ftp, scp, cp, dd, tar, copy, > > etc.? > > FYI ftp, scp, cp, dd, tar, and copy aren't P2P programs. >

2 1

Re: How to Trackdown a Hardware Failure with Knoppix?
by Jonathan Hutchins 11 Oct '04

11 Oct '04

On Sunday 10 October 2004 12:05 pm, you wrote: > I probably should have mentioned that this was an existing HD install > that had been there for +1.5 or so. Never any problem with the video > card in the past. It simply up and died a couple of days ago and my wife > is now demanding that I address it. So here I am. ;-) Ok, well the first thing to do then is (unplug everything), open up the case, and vacuumi it out (compressed air is more effective if available). Next, locate the video card. Un-do the screw that holds it in it's slot, remove the card, and replace it. You might also remove the memory modules and replace them. The idea hear is to slide the contacts on the board and in the slot against each other, knocking off any dirt or oxidation, and making fress contact. Make sure everything's properly seated in the right place, and latched down. Pay close attention to wires and cables in the case while you do this. It's ok if you knock one loose just so long as it goes back exactly where it was, with exactly the same orientation. Having tried this, reboot, and see where the problem appears to be now.

1 1

How to Trackdown a Hardware Failure with Knoppix?
by Coffee Grounds 10 Oct '04

10 Oct '04

Hello, I believe I've had some form of hardware failure and I wonder if there is a way to track it down with Knoppix. My Knoppix HD install simply will not boot (hangs when X attempts to launch) and booting off the CD is unsuccessful as well. I can boot Knoppix off the CD in failsafe mode. The question is, what do I do after that to figure out what's causing the failure? Thanks, - CG, not a hardware guy.

2 1

RE: BitTorrent + INDUCE Act + Linspire 5.0
by Brian Densmore 08 Oct '04

08 Oct '04

Have patience, Congress will get around to matches and lighters soon enough. Seriously though, these new laws dealing with P2P and Software patents, and copyright are all very dangerous and will be used as big sticks to beat down competition from small entrepreneurs. This outflux of talent from major corporations to small start-up companies is starting to rattle some of the people in power. After all they *need*, to keep a certain amount of slave labor close at hand. <dons tin foil hat, nervously looks left and right> > -----Original Message----- > From: David Nicol > > Oh please. Are matches illegal beccause of arson? > > > This week's Michael's Minutes talked about how Linspire 5.0 might be > > illegal because it incorporates BitTorrent/P2P. The INDUCE > Act is trying > > to make all P2P software illegal, but it could have a lot > broader effect > > than just a bunch of copyrighted music.

1 0

Re: Bittorrent
by Brian Kelsay 08 Oct '04

08 Oct '04

Azureus (http://freshmeat.net/projects/azureus/ ) is a Java Bit Torrent client for the viewers at home. Rich, why would you want UPnP to be able to run a BT client? I mentioned Bit Tornado ( http://freshmeat.net/projects/bittornado/ ) because it ran on Windows and Linux as Azureus should and it is a smaller download, although to build the Windows installer yourself you need Python installed and the Nullsoft installer. There is even a BUILD.Windows.bat that will build it for you after you have the pieces. Under Linux you need wxpython. There are prebuilt Windows Bit Tornado binaries out there. The readme for Bit Tornado gives all the info you need to build it and install under either platform. There are about four lines required to install either one. Then, as I've said several times, you open a range of ports. The default is 6881-6889, but you can change this after it is running. How hard is that Johnathan? All within about 3 pages max of readme and FAQ. All the extra pieces you might need for building are easily acquired from Google in a few minutes. If you choose the Java route, good luck. You may have Java installed already, so that may be an easier route for you. For some it has been troublesome. The last time I installed Java, I got a dead easy j2re installer from java.com. You run from the CLI and just have to agree to the license. You will probably have to change some permissions along the way, but I have already digressed too much. Get Bit Tornado here: http://freshmeat.net/redir/bittornado/52212/url_tgz/BitTornado-0.3.7.tar.gz only 173Kb Get Azureus here: http://freshmeat.net/redir/azureus/50968/url_bz2/Azureus_2.1.0.4_linux.GTK.… 4.3Mb Brian Kelsay >>> "Richard A. Franklin" <> 10/07/04 06:33PM >>> Brian Kelsay wrote: >With Bittorrent and its brother BitTornado, getting a file becomes as easy as double clicking on it and choosing where to save. That is pretty easy if you ask me. Now for those with a firewall, there are simple instructions on the BitTornado site. You do need to know how to login to and alter your firewall. I opened a range of ports quite easily on IPCop, which I then disable after I finish getting the torrent and serving for a while. > > > Okay, I continue to glean useful hints, and actual instruction, by opening kclug mail ... and curiosity overcomes total laziness. Besides, I just bothers me to use Windows to latch onto a Linux distro ISO torrent to feed to my finicky laptop. After reinstalling Azureus (azureus-2.1.0.4-0.gbv.3.i586.rpm ... using SUSE 9.1 PRO), I received "NAT Error" when testing my setup with the config wizard ... after checking a couple of router "how to" sites, it seemed that I perhaps needed to adjust my router settings. Like, maybe enable UPnP? I still did not know for sure, so I toyed with it a bit. Enabling UPnP had no effect; however, all is well after disabling the SUSE firewall (DUH?) ... Azureus opens little info windows, indicating which ports are being opened, and for what purposes, and it just works, regardless of whether I have checked, or unchecked the UPnP box in my router setup.

2 1

RE: firewalls and webservers request for comments
by Brian Kelsay 08 Oct '04

08 Oct '04

Wow. I felt too crappy last night to respond to this one, but I have to say, Dustin said most of what I intended to say. A definite separation of firewall and webserver is needed *IF* you are careful about security. As Dustin said, if an Apache vulnerability is found and someone cracks your webserver, as has already happened to you once, then you only need to rebuild your webserver. When running an enterprise you normally build separate boxes for each service available, for this reason, as well as for distributing load until you start needing clustering or load balancing of some sort. Read what the IPCop site has to say about adding services to your firewall and you may change your mind. http://www.ipcop.org/1.4.0/en/install/html/overview.html The docs that came with IPCop 1.3.0 has an even scarier message, "Here there be dragons...". Also, if your webserver is running on your home network, like mine is, you eventually want the externally available servers in a DMZ to protect your other home machines. I've been very happy with my IPCop 1.3 box and will soon upgrade to 1.4.0, but for now I'm too busy. 1.4.0 has a cool wireless DMZ added on, the Blue interface. I recently bought a PCI wireless card that will be tried out in this mode. Dustin, as always, your $.02 is well appreciated. Nice post. Brian Kelsay >>> "Dustin Decker" <> 10/07/04 06:07PM >>> > -----Original Message----- > From: On Behalf Of Brian Densmore > > Well, actually I already have iptables running. > I have only the ports open that need to be open > and only running the services that are needed. > I was really looking for what people thought about > firewalls protecting webservers and such. I mean > not just iptables but the whole ball of wax, the > tools for monitoring, etc. > > Ports I use: > > SMTP 25 > WWW ports 80 and 443 > IMAPS port 993 > and the SSH ports I would say one of the primary benefits of a dedicated firewall is found in the very clear separation of duties across hosts. For example, I make use of IPCop frequently with clients. If I need a port open for them (which isn't always the case) then I can forward it. In those cases where I have a handful of Windows users, I have the added benefit of using proxy services, tuned to the satisfaction of management, etc. My personal favorite is intrusion detection. In the case of IPCop, I make use of idabench to log all packets in/out of the network in binary format, farm it out to my analysis units, and replay through snort. Any of this type of activity, if performed on the web server, mail server, or what have you, adds an unnecessary load to that system. In addition, with extra services floating on the box, the odds that I will drop packets increases - and I only have to miss one to miss the Really Bad Packet(tm). One other concern I would have is for vulnerable software. If I have an apache server behind a firewall, and a new vulnerability is discovered, exploitation of it doesn't place my firewall at risk, where as root access gained through [insert hack of the week here] quickly gains the ability to disable iptables entirely. I guess this is one of those rare instances in which I don't entirely agree with Frank. (Oh, and my hang up on "bastion hosts".) Just for fun, while looking at the ports you have listed above, I wonder if you even need port 993 open. You mentioned in a previous post that you use webmail. If this is the _only_ method you use to check your mail, 993 needn't be open. That's only required if you have a mail client that fetches mail that way. (Squirrelmail, for example, can connect on loopback [127.0.0.1] to reach the mail server.) My $.02 on this thread.

2 1

RE: firewalls and webservers request for comments
by Brian Densmore 08 Oct '04

08 Oct '04

> -----Original Message----- > From: Dustin Decker > > I would say one of the primary benefits of a dedicated > firewall is found in > the very clear separation of duties across hosts. For > example, I make use > of IPCop frequently with clients. If I need a port open for > them (which > isn't always the case) then I can forward it. In those cases > where I have a > handful of Windows users, I have the added benefit of using > proxy services, > tuned to the satisfaction of management, etc. Separation is good, but can be costly too. > > My personal favorite is intrusion detection. In the case of > IPCop, I make > use of idabench to log all packets in/out of the network in > binary format, > farm it out to my analysis units, and replay through snort. > Any of this > type of activity, if performed on the web server, mail > server, or what have > you, adds an unnecessary load to that system. In addition, with extra > services floating on the box, the odds that I will drop > packets increases - > and I only have to miss one to miss the Really Bad Packet(tm). I guess the question is what kind of load does iptables and idabench and snort place on a machine? Is it big enough to cause dropped packets? What about processor speed and memory? Does intrusion detection cause a problem only on machines below a certain CPU speed and/or below a certain memory limit? > > One other concern I would have is for vulnerable software. > If I have an > apache server behind a firewall, and a new vulnerability is > discovered, > exploitation of it doesn't place my firewall at risk, where > as root access > gained through [insert hack of the week here] quickly gains > the ability to > disable iptables entirely. This is of course the primary reason I can think of for separation, but by the firewall forwarding doesn't that leave the webserver vulnerable anyway? Of course it would still keep the firewall intact and thus prevent the compromised machine to be wide open. Or would it? > > Just for fun, while looking at the ports you have listed > above, I wonder if > you even need port 993 open. You mentioned in a previous > post that you use > webmail. If this is the _only_ method you use to check your mail, 993 This is correct. I don't need that port because most of the time I use the webmail interface, but occasionally I use an IMAPS client. I could do away with that, but wanted to do the IMAPS server and client just to do it. PS Anyone notice the KCStar ad in last Sunday's paper for a Linux tech?

1 0

RE: firewalls and webservers request for comments
by Brian Densmore 08 Oct '04

08 Oct '04

Well, actually I already have iptables running. I have only the ports open that need to be open and only running the services that are needed. I was really looking for what people thought about firewalls protecting webservers and such. I mean not just iptables but the whole ball of wax, the tools for monitoring, etc. Ports I use: SMTP 25 WWW ports 80 and 443 IMAPS port 993 and the SSH ports > -----Original Message----- > From: Frank Wiles > > On Thu, 7 Oct 2004 17:05:45 -0500 > "aaron hirsch" > > > Why tell anyone here are the ports you will need to have > open when all > > ... > > http/https. Why open the door further than it needs to be? > > I wasn't trying to give him advice on how to run his E-mail setup. > > The listing of the ports was just an example to help illustrate why > running a firewall in front of an E-mail server is typically > pointless. > > I apologize if that wasn't clear.

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG