KCLUG

kclug@kclug.org

3239 discussions

RE: LARGE scale email
by Phoenician 27 Sep '04

27 Sep '04

<snip> 1) I am migrating email from a Win32 environment to a *nix based environment. :) I am working with people that I have to remind that Linux is not a singular all-encompassing distro (ie: that Linux does means Linux but rather SuSe, Redhat, Mandrake etc..) 2) It must be ultra-secure. 3) Large scale means over 1,500 mail boxes and approx 350 to 400 domains. <snip> Thank you to everyone that took the time to reply. I have a lot of reading ahead of me but I can at least say that so far I have chosen to go with OpenBSD. I have installed the OS on a test computer and I'm tinkering as much as possible right now. - Michienne

1 0

Secuirty trivia on Linux
by hanasaki 26 Sep '04

26 Sep '04

Security Linux? Trivia but not Trivial! Anyone care to share their experiences with the below? does it work? which is better for what and why? which should be used together are complimentary vs overlapping Please do separate experience vs. opinion. Oh.. Anything important missing in the below list? ==== other stuff === kerberos ===== Application security tools === jail and chroot ========= kernel security tools ==== PAX Adamantix http://www.trustedlinux.org/ http://www.trusteddebian.org/ http://www.grsecurity.net/ http://www.nsa.gov/selinux/index.cfm http://www.rsbac.org/ http://www.cs.virginia.edu/~jcg8f/GrsecuritySELinuxCaseStudy.pdf http://www.nsa.gov/selinux/list-archive/0308/4941.cfm

1 0

Bridge connection on SBC
by Bennett, Joe 26 Sep '04

26 Sep '04

It was mentioned on a reply to one of my questions to the group that SBC will let you drop PPPOE and goto a straight bridge connection on thier DSL product. I posed this to SBC and attached is their response. Hopefully this might be of some assistance to those of you that have friends, family or clients using SBC DSL...???? -Joe ------------------------------------------------------------------------------------------------------------------------------------ {Solution Details: We have received your e-mail and understand that you wish to change your DSL connection mode to "Bridge". We share your concern and apologize for the previous response. Joe, if you are using SpeedStream 5100 B modem, there is an option to change to ?Bridge? mode; however, this option is not available with other modems. If you do not have SpeedStream 5100 B modem, we suggest that you contact our Customer Premises Equipment Department at 1-877-SBC-DSL5 to check the possibility of replacing the old modem with SpeedStream 5100 B modem. They will be happy to assist you. If you have SpeedStream 5100 B modem, you may change it to ?Bridge? mode by using the following steps: 1. In your web browser browse to ?http://192.168.0.1?. This address will be located on a yellow sticker on the bottom of your modem. 2. The first screen will ask you for your ?Modem Access Code?. This also will be located on the same yellow sticker. 3. Select ?Advanced? from the blue buttons on the left. 4. Click on the ?PPP locations? button. 5. The modem may ask your for the ?Modem Access Code? again. If so then type it in again and click on ?Continue?. 6. Select the radio button labeled, "Bridged Mode (PPPoE is not used)". 7. Click on ?Save Changes?. 8. A "PPP Location Warning" page will come up. Click on "Change PPP Location?. 9. A "Restart Needed" page will come up. Click on "Restart". 10. Once the modem has restarted, go to the PC and configure the Ethernet NIC for either DHCP or Static IP service. 11.Once the Ethernet NIC has been configured for the appropriate service, attempt to surf the Internet. a) If that fails, check the Ethernet NIC configuration and verify it has been configured correctly. b) If everything is in good working condition and the Ethernet card has been configured correctly, try resetting the modem back to defaults by pressing on the reset button located on the bottom of the modem. c) Once you do this, go back to step 4 to put the modem back into bridge mode.

1 0

routing / firewall question
by hanasaki 25 Sep '04

25 Sep '04

the network is Internet <=> firewall Linux with two NICs firewall <=> internal network The internal network has hosts with the following: hostA - one NIC smtp hostB - one NIC http/https hostC - one NIC dhcp server hostD - one NIC squid http proxy : port 8080 privoxity http proxy filter : port 8081 privocity forwards to squid squid sends to the outside world should the order be swapped? why? why not? The dhcp server tells clients to route via hostD how can hostD be setup so that it is a transparent proxy? Currently all clients set their http proxy to hostD on the privocity port. I know some IPtables rules will be needed on hostD but dont know what to set. Will routing rules need to be set on hostD? what are they? thanks

1 0

ITEC
by Chris Bier 25 Sep '04

25 Sep '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi All, ~ I talked with the ITEC people, and unless we can come up with $1,900 or a sponsor who will fund it, we won't be able to get a booth at ITEC. ~ That's for a 10x10 booth with carpet and basic electricity. They only have 4 booths left, and all the free ones are gone already. Chris - -- I digitally sign my emails. If you see an attachment with .asc, then that means your email client doesn't support PGP digital signatures. http://www.gnupg.org/(en)/documentation/faqs.html#q1.1 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBVFIpE5xXU3JS1mQRAtl4AKDRnHHOB4B/+EGY1lCGhIrVO0m3TwCfdITf phIsMdJ4vEl+nchztzJq+6k= =7qYS -----END PGP SIGNATURE-----

4 3

In the UK windows will now control thermo-nuclear ICBM's
by jeffslists 24 Sep '04

24 Sep '04

This sure is scary. I didn't think the Brits were that stupid. OSS torpedoed: Royal Navy will run on Windows for Warships http://www.theregister.co.uk/2004/09/06/ams_goes_windows_for_warships/

6 5

routing / firewall question
by hanasaki 24 Sep '04

24 Sep '04

1 0

Shorewall Firewall droping ftp from 2 PCs
by Michael Pratt 24 Sep '04

24 Sep '04

This is weird, I have about 12 PC's Going through my Mandrake 10 using Shorewall. Two of those PC's cannot download anything via FTP. but can surf the web and download via http. Shorewall:newnotsyn:DROP:IN=eth1 OUT= MAC=00:0c:f1:ea:f2:32:00:60:49:02:0a:6d:08:00 SRC=161.114.22.105 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x10 PREC=0x00 TTL=51 ID=20764 DF PROTO=TCP SPT=21 DPT=2984 WINDOW=32768 RES=0x00 ACK FIN URGP=0 Shorewall:net2fw:DROP:IN=eth1 OUT= MAC=00:0c:f1:ea:f2:32:00:60:49:02:0a:6d:08:00 SRC=192.6.165.119 DST=XXX.XXX.XXX.XXX LEN=48 TOS=0x08 PREC=0x00 TTL=49 ID=26898 DF PROTO=TCP SPT=20 DPT=1459 WINDOW=32768 RES=0x00 SYN URGP=0 There is nothing in my firewall that is set up to block any of these PCs at all. Any ideas of what to check? Mike -- Michael Pratt Nova Blue Inc. http://www.nbmap.com

2 1

RE: Systems Administrator Position
by Garrett Goebel 24 Sep '04

24 Sep '04

Timothy A. Canon wrote: > > I hope this is not inappropriate -- Not inappropriate at all. Sounds like a position many people on this list would be qualified for. > Community Resource Network (CRN) is looking for a Systems > Administrator. CRN is a nonprofit Internet Service Provider and > Application Service Provider that provides technology services to > the Kansas City nonprofit community. We are looking for an > experienced individual who will (among other things) administrate > our Unix and Windows servers, execute our backup procedures, and > manage our email infrastructure. > > We will be concluding the interview process next week. Read more > about the position and submit your resume here: > > <http://www.careerbuilder.com/share/det.asp?d=JN1GT64684FM04VHY5> > > Regards, > > Timothy A. Canon Community Resource Network > Web Administrator 106 West 11th St, Suite 110 > 816.960.0708 x119 Kansas City, MO 64105-1806 > webmaster(a)crn.org http://www.crn.org/ -- Garrett Goebel IS Development Specialist ScriptPro Direct: 913.403.5261 5828 Reeds Road Main: 913.384.1008 Mission, KS 66202 Fax: 913.384.2180 www.scriptpro.com garrett at scriptpro dot com

2 1

Re: Anyone seen the new Sun FileSystem
by Brian Kelsay 24 Sep '04

24 Sep '04

I stand by my original goofy take on the pie in the sky filesystem. Maybe it works as stated, maybe not, but you cannot say that all these functions come at no cost. Zero administration, disk pooling (RAID) and checksumming sounds great, but the hardware is still performing the calculations which come at a cost. You may not notice the cost in CPU time or ram initially, but as you accumulate data any filesystem requires more resources. The FAT or index of files grows. This may need to be held in ram like other database tables and indexes are for speed of access. Sun is banking on customers running this on Opteron or other 64-bit processors with large amounts of ram and fast i/o disks. Sure they may be able to do those things as advertised, but to me it sounds like any other product that is the last word in widgets. Don't bank on something like this running on older hardware such as a 1 GHz or even a single processor. See above. Is it really reasonable to assume that this filesystem is suitable for servers, SANs and desktops alike? By the way, they did state in the article that we might someday outgrow this filesystems limits. That is only reasonable. Just look at the explosion of filetrading movies due to P2P and Broadband. Now it is reasonable to have a 160GB or 200GB disk in a new PC. Brian Kelsay >>> Oren Beck <oren_beck(a)hotmail.com> 09/22/04 11:09AM >>> > >>-----Original Message----- >>From: Oren Beck [ >> >>hanasaki wrote: >> >>>http://www.sun.com/2004-0914/feature/ >>> >>>Any thoughts?

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG