KCLUG

kclug@kclug.org

3239 discussions

Re: routing / firewall question
by Brian Kelsay 28 Sep '04

28 Sep '04

Just curious, why do you run DHCP by itself on one box on a 4 node network. That could easily be moved to the firewall or combined on one of the other boxes. It usually is combined with DNS. I know that is not the point of your question, but I don't understand the need for a separate box. Never heard of privoxity so I'll have to check it out. I assume it is an add-on to squid. I also don't understand the need for a proxy of this sort for one person. Are you just playing around or do you need to test this setup for something. Sorry, I just don't see the point. Brian Kelsay >>> hanasaki <> 09/24/04 09:54PM >>> the network is Internet <=> firewall Linux with two NICs firewall <=> internal network The internal network has hosts with the following: hostA - one NIC SMTP hostB - one NIC http/https hostC - one NIC DHCP server hostD - one NIC squid http proxy : port 8080 privoxity http proxy filter : port 8081 privoxity forwards to squid squid sends to the outside world should the order be swapped? why? why not? The DHCP server tells clients to route via hostD How can hostD be setup so that it is a transparent proxy? Currently all clients set their http proxy to hostD on the privocity port. I know some IPtables rules will be needed on hostD, but don't know what to set. Will routing rules need to be set on hostD? What are they?

2 1

Re: Shorewall Firewall dropping ftp from 2 PCs
by Brian Kelsay 27 Sep '04

27 Sep '04

Are the 2 using the exact load as the others? Do they have local firewalls on? Check your ability to connect via a command line FTP and a GUI FTP client. The software you are using may be mis-configured. Also check multiple FTP sites, not just one. That should be obvious. Are the sites password protected or anonymous FTP? Brian Kelsay >>> "Michael Pratt" <> 09/24/04 01:29PM >>> This is weird, I have about 12 PC's Going through my Mandrake 10 using Shorewall. Two of those PC's cannot download anything via FTP. but can surf the web and download via http. There is nothing in my firewall that is set up to block any of these PCs at all. Any ideas of what to check?

3 2

RE: Shorewall Firewall dropping ftp from 2 PCs
by Brian Densmore 27 Sep '04

27 Sep '04

If you can open up an ftp connection but not download anything, then it has all the earmarks for passive ftp versus active ftp issues. Since it is only on these two machines, then I would bet those two machines are blocking certain ports, or the ftp client is running in a different default mode on those two machines. Try connecting to an ftp site that one of the other 10 PCs can download from and try doing both passive and active ftp and see if one works and one doesn't. > -----Original Message----- > From: Michael Pratt > > Well checked all the said links and what is weird is I can > get in to the ftp > via commandline but cant get anything downloaded these effect > any FTP sites at > all on the two PCs I can download via http. I have seen a lot > of strange > things but This is the strangest. Any other ideas? I have > even search for > possible spyware but have fownd nothing. >

1 0

Re: Security trivia on Linux
by Brian Kelsay 27 Sep '04

27 Sep '04

I'd say you have barely scratched the surface. Do you just want a secure distro/ single box or do you want to monitor the network for security breaches and be able to find out info about those breaches or attacks? Tripwire, snort and snarf, ethereal, nmap, several Knoppix-based security distros, Phlak, Debian hardened, Trustix, tin-foil hat Linux, etc. I could think of more, but I got hit in the head over the weekend and have a killer headache. Oh yeah, chroot and jail are the same thing. Brian Kelsay >>> hanasaki <> 09/26/04 10:13AM >>> Security Linux? <snip> Oh.. Anything important missing in the below list?

1 0

Linux Job
by Rocky McGaugh 27 Sep '04

27 Sep '04

Linux Systems Engineer Job Description: Install/configure Linux Beowulf systems. Write technical and ISO documentation. Busy, fast paced environment. Team player required. Organized. Basic project management. Clustering experience helpful,but not required. Must be very familiar with RPM based systems (RHEL, SLES, CentOS). Basic scripting with bash/perl/python. Must be a quick learner, inhale technologies, RTFM. One or more positions are available in Jefferson City, MO and Eudora, KS. -- Rocky McGaugh rmcgaugh(a)teamhpc.com 785-542-1383 x303

1 0

Re: Which distro can anyone recommend for low end hardware ?
by Brian Kelsay 27 Sep '04

27 Sep '04

That would work, BUT they may not want the complexity or expense of networking hardware and all the wires running around. Not to mention having to set up a server, although they could concentrate their upgrade expenses on that box. He did not say how many total boxes they expected to have. He did say that they would network only for printer sharing. If that is a requirement and you don't have too many nodes, you could get hubs or cheap Linksys 10/100 switches. Make sure to check linuxprinting.org for Linux printer compatibility before buying. Cups or samba for printing should do the trick. Brian Kelsay >>> Jason Clinton <> 09/27/04 08:45AM >>> On Sun, 2004-09-26 at 17:28 -0500, Oren Beck wrote: > Ok folks- This one is not the usual "could have googled for it " question . > > A day care center worker wants to buy cheap used hardware and have me or > someone else make it work . They need to use http://www.ltsp.org/

1 0

RE: Which distro can anyone recommend for low end hardware ?
by Brian Kelsay 27 Sep '04

27 Sep '04

IceWM or fluxbox go well on old stuff. You right about the ram. DSL doesn't have any extra services on boot, but Knoppix starts quite a few. I think Knoppix could even be considered for an intro server out of the box. DSL has a few things like monkey webserver, an FTP server and ssh that can be easily activated, but are off by default. There is a nice little DSL control panel that you can start and stop the avail. services from. Brian Kelsay >>> "Rob Becker" <> 09/27/04 08:09AM >>> This doesn't answer your question regarding a specific distro, but whatever distro you use, carefully audit all services that run at start. With a machine that is not connected to a network, many of your network services can be disabled. Also look at running a light desktop manager like ICEWM. If there is any budget at all for adding RAM and or a newer HD, it may be well worth your time to do so. A P2/200 will be sufficient for the duties you suggest, but a faster HD and more RAM will make things much speedier. Good luck with it. Rob

1 0

Re: Which distro can anyone recommend for low end hardware ?
by Brian Kelsay 27 Sep '04

27 Sep '04

DamnSmall works on as little as 16MB of ram, BUT if you want to use Open Office you better bump that up to 128 or higher. When using DamnSmall from CD, they recommend 384MB, but I've used 128 just barely. Brian Kelsay >>> docv <> 09/27/04 06:11AM >>> Oren, I have some old PI (both 133 and 166 respectively) systems that have 1.2 and 2.0 Gig HD's in them that could be taken out and used in their current box. I'd be happy to donate them to the center (and my wife would be happy to get rid of another one of the 10 or so boxes in the garage!). As for the OS, I have installed Red Hat 8.0 on one of the 166 boxes and it ran rather sluggishly, but these boxes only have 16 Meg of RAM, if memory servers me correctly. I have since switched to using Debian or Knoppix as an OS for most all my boxes. I find that these have been the most stable and secure of the flavors I have tried. Knoppix really was designed for older boxes and is really a very sweet install especially for GUI interfaced boxes. The debian auto configuration does tend to take a few extra seconds to boot the system, but becomes a breeze when the older hardware fails and different hardware is installed as no manual reconfiguration is necessary. With the 64 Meg of RAM they currently have, they should not run into the same trouble with the X-windows. Since the knoppix runs with an on-the-fly compression system, a 2 Gig HD would be more than enough, especially if one of the 1.2 Gig drives was added for data storage. Knoppix also comes with Open Office pre installed to satisfy the need for MS Office compatible Office Suite. Either way you go, let me know about the drive(s), I'd be happy to help out! -- Steve Vaitl, D.C.

1 0

Re: Which distro can anyone recommend for low end hardware ?
by Brian Kelsay 27 Sep '04

27 Sep '04

I've said it before, DamnSmall Linux. Now also known as DSL and the boot menus reflect this for the clean crowd. Flux box is the default on DSL and it is easily customizable. If you want, I can make a custom DSL with Open Office, it would take about 5 minutes as I already have all the pieces. If you want to install to the HDD, there are decent instructions on damnsmalllinux.org and on the index.html page that comes up when you boot DSL. It is a bit harder than Knoppix to get set up, but for older hardware, it can't be beat. Installing DSL to HDD will make it much faster and you will have plenty of room on a 1.2GB or 2GB HDD. Knoppix may not quite fit on a 2GB drive. It decompresses to around 2.2GB when installed. You would have to do the poorman's or frugal install to HDD. This involves leaving the compressed filesystem from the CD, which is about 700MB. This would work for the 1-2GB drive, but you will still have tons of stuff they will never need. After installing DSL to HDD you will need to do a "dpkg restore" or enable apt-get from the menu and then "apt-get install openoffice-en", I think. Since it is for a daycare, you may also want to "apt-get install gcompris." That is a package of kids learning games. Gcompris could also beincluded on the CD as there is a DSL package for it. If you were dead set on using full Knoppix, I would install to HDD, if room permits. Then you will want to set lilo, or grub if the current one uses it, to start in fluxbox. Then you would want to "apt-get remove kdevelop" and any other pkgs that might save you space, that are unneeded. You could remove some 3d games that won't even play on old hardware, koffice, palm pilot apps, email, extra browsers, irc clients, ftp clients, lots of stuff. Hope this helps. Brian Kelsay >>> Oren Beck <> 09/26/04 05:28PM >>> Ok folks- This one is not the usual "could have googled for it " question . A day care center worker wants to buy cheap used hardware and have me or someone else make it work . This center is a not-for-profit so Surplus Exchange is a viable hardware source . Here's where KCLUG can come in . Showing that Open Source is truly viable for this person's need . What is needed ? Single user single desktop maybe not even networked or if so only at the printer share level Compatibility with Msword and Excel in both directions , Printing flyers . Archiving all flyers etc . Likely this system may never be internet connected ! So from that outline- What distro is suggested, And more importantly why ? Presently owned system is a P2/200 with 64 meg ram and 840 meg HD . Suggestions for what to use on this would be appreciated from anyone having had experience with the suggested distro.

1 0

Re: In the UK windows will now control thermo-nuclear ICBM's
by Brian Kelsay 27 Sep '04

27 Sep '04

Where's the option to nuke Redmond, WA? Brian Kelsay >>> "Monty J. Harder" <lists(a)kc.rr.com> 09/24/04 06:57PM >>> "jeffslists" <jeffslists(a)nexus99.net> wrote: > OSS torpedoed: Royal Navy will run on Windows for Warships > http://www.theregister.co.uk/2004/09/06/ams_goes_windows_for_warships/ Clippy: It looks like you want to launch a nuclear missile. Would you like to target: * Buckingham Palace * Parliament * 10 Downing Street * New Scotland Yard

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG